← All changes | includes/class-mxchat-admin.php +1243 -10284 3.2.17 → 1.1.2 View file →

		@@ -6,31 +6,13 @@
6	6	class MxChat_Admin {
7	7	private $options;
8	8	private $chat_count;
9	9	private $is_activated;
10		- private $knowledge_manager;
11	10
12		- /**
13		- * Get whether the license is activated
14		- * @return bool
15		- */
16		- public function is_activated() {
17		- return $this->is_activated;
18		- }
19		-
20		- /**
21		- * Get plugin options
22		- * @return array
23		- */
24		- public function get_options() {
25		- return $this->options;
26		- }
27		-
28		- public function __construct($knowledge_manager = null) {
	11	+ public function __construct() {
29	12	$this->options = get_option('mxchat_options');
30	13	$this->chat_count = get_option('mxchat_chat_count', 0);
31	14	$this->is_activated = $this->is_license_active();
32		- $this->knowledge_manager = $knowledge_manager;
33	15
34	16	// Initialize default options if they are not set
35	17	if (!$this->options) {
36	18	$this->initialize_default_options();
		@@ -37,410 +19,68 @@
37	19	}
38	20
39	21	// Add admin menu and initialize settings
40	22	add_action('admin_menu', array($this, 'mxchat_add_plugin_page'));
41		- // Pro & Extensions registers at priority 30 so it always lands last in
42		- // the sidebar — below API Access (priority 20) and below any other
43		- // submenu that hooks at default priority 10.
44		- add_action('admin_menu', array($this, 'mxchat_add_pro_extensions_page'), 30);
45		- // Onboarding visibility — runs LAST so it can remove the submenu after every
46		- // other add_submenu_page() call. The page stays reachable by direct URL.
47		- add_action('admin_menu', array($this, 'mxchat_apply_onboarding_visibility'), 999);
48	23	add_action('admin_init', array($this, 'mxchat_page_init'));
49		- add_action('admin_init', array($this, 'mxchat_prompts_page_init'));
50	24	add_action('admin_enqueue_scripts', array($this, 'mxchat_enqueue_admin_assets'));
51		- // Add body class for the Onboarding wizard (plan-905439) so the
52		- // chrome-surgery CSS in admin-onboarding-wizard.css can scope its
53		- // WP-sidebar collapse to this page only.
54		- add_filter('admin_body_class', array($this, 'mxchat_add_onboarding_body_class'));
55	25	add_action('wp_ajax_mxchat_delete_chat_history', array($this, 'mxchat_delete_chat_history'));
	26	+ add_action('admin_post_mxchat_submit_content', array($this, 'mxchat_handle_content_submission'));
56	27	add_action('admin_post_mxchat_delete_prompt', array($this, 'mxchat_handle_delete_prompt'));
57	28	add_action('wp_ajax_mxchat_fetch_chat_history', array($this, 'mxchat_fetch_chat_history'));
58	29	add_action('wp_ajax_nopriv_mxchat_fetch_chat_history', array($this, 'mxchat_fetch_chat_history'));
59		- add_action('wp_ajax_mxchat_fetch_conversation', array($this, 'mxchat_fetch_conversation'));
	30	+ add_action('admin_post_mxchat_submit_sitemap', array($this, 'mxchat_handle_sitemap_submission'));
60	31	add_action('wp_footer', array($this, 'mxchat_append_chatbot_to_body'));
61	32	add_action('admin_head-mxchat-prompts', array($this, 'mxchat_enqueue_admin_assets'));
62	33	add_action('admin_head-toplevel_page_mxchat-max', array($this, 'mxchat_enqueue_admin_assets'));
	34	+ add_action('wp_ajax_mxchat_activate_license', array($this, 'mxchat_handle_activate_license'));
63	35	add_action('admin_notices', array($this, 'mxchat_display_admin_notice'));
64		- add_action('admin_post_mxchat_delete_all_prompts', array($this, 'mxchat_handle_delete_all_prompts'));
65		- add_action('admin_post_mxchat_add_intent', array($this, 'mxchat_handle_add_intent'));
66		- add_action('admin_post_mxchat_delete_intent', array($this, 'mxchat_handle_delete_intent'));
67		- add_action('admin_post_mxchat_edit_intent', array($this, 'mxchat_handle_edit_intent'));
68		- add_action('wp_ajax_mxchat_export_transcripts', array($this, 'export_chat_transcripts'));
69	36
70		- // Leads tab (inside Transcripts)
71		- add_action('wp_ajax_mxchat_fetch_leads', array($this, 'mxchat_fetch_leads'));
72		- add_action('wp_ajax_mxchat_delete_leads', array($this, 'mxchat_delete_leads'));
73		- add_action('wp_ajax_mxchat_export_leads', array($this, 'mxchat_export_leads'));
74	37
75		- add_action('admin_init', array($this, 'mxchat_transcripts_page_init'));
76		- add_action('wp_ajax_dismiss_live_agent_notice', array($this, 'dismiss_live_agent_notice'));
77		- add_action('wp_ajax_dismiss_theme_migration_notice', array($this, 'dismiss_theme_migration_notice'));
78		- add_action('mxchat_cleanup_old_transcripts', array($this, 'cleanup_old_transcripts'));
79		- // Self-heal: the cleanup event is otherwise only scheduled at activation or
80		- // when the retention setting CHANGES — if it is ever lost (deactivate cycle,
81		- // cron-option wipe, DB restore) nothing re-registers it and retention goes
82		- // silently inert while the UI still says it is on (plan-bc08a6).
83		- add_action('admin_init', array($this, 'ensure_transcript_cleanup_scheduled'));
84	38
85		- add_action('admin_init', array($this, 'register_pinecone_settings'));
86		- add_action('admin_init', array($this, 'register_openai_vectorstore_settings'));
87		-
88		- add_action('admin_notices', array($this, 'display_admin_notices'));
89		-
90		- add_action('wp_ajax_mxchat_test_streaming_actual', [$this, 'mxchat_handle_test_streaming_actual']);
91		- add_action('wp_ajax_mxchat_test_streaming', [$this, 'mxchat_handle_test_streaming']); // Keep existing as fallback
92		- add_action('wp_ajax_mxchat_test_vectorstore_connection', array($this, 'mxchat_test_vectorstore_connection'));
93		-
94		- // wp_ajax_mxchat_save_selected_bot is registered (and handled) in
95		- // admin/class-ajax-handler.php — a duplicate registration here pointed
96		- // at a method this class never defined, a load-order-dependent fatal
97		- // waiting to fire (plan 52bcad).
98		- add_action('wp_ajax_mxchat_fetch_openrouter_models', array($this, 'fetch_openrouter_models'));
99		- add_action('wp_ajax_mxchat_get_rag_context', array($this, 'mxchat_get_rag_context'));
100		-
101		- // Actions page AJAX handlers
102		- add_action('wp_ajax_mxchat_fetch_actions_list', array($this, 'mxchat_fetch_actions_list'));
103		- add_action('wp_ajax_mxchat_toggle_action_status', array($this, 'mxchat_toggle_action_status'));
104		- add_action('wp_ajax_mxchat_bulk_delete_actions', array($this, 'mxchat_bulk_delete_actions'));
105		- add_action('wp_ajax_mxchat_add_intent_ajax', array($this, 'mxchat_add_intent_ajax'));
106		- add_action('wp_ajax_mxchat_edit_intent_ajax', array($this, 'mxchat_edit_intent_ajax'));
107		- add_action('wp_ajax_mxchat_delete_intent_ajax', array($this, 'mxchat_delete_intent_ajax'));
108		- add_action('wp_ajax_mxchat_add_phrase', array($this, 'mxchat_add_phrase_ajax'));
109		- add_action('wp_ajax_mxchat_delete_phrase', array($this, 'mxchat_delete_phrase_ajax'));
110		- add_action('wp_ajax_mxchat_get_phrases', array($this, 'mxchat_get_phrases_ajax'));
111		- add_action('wp_ajax_mxchat_delete_legacy_phrases', array($this, 'mxchat_delete_legacy_phrases_ajax'));
112		-
113		- // Slack test connection
114		- add_action('wp_ajax_mxchat_test_slack_connection', array($this, 'mxchat_test_slack_connection'));
115		-
116		- // Translation handlers
117		- add_action('wp_ajax_mxchat_translate_messages', array($this, 'mxchat_translate_messages'));
118		- add_action('wp_ajax_mxchat_get_transcript_translation', array($this, 'mxchat_get_transcript_translation'));
119		-
120		- // 3.2.3: Embedding model switch protection
121		- add_action('wp_ajax_mxchat_check_embedding_switch', array($this, 'mxchat_check_embedding_switch_ajax'));
122		- add_action('wp_ajax_mxchat_dismiss_embedding_mismatch', array($this, 'mxchat_dismiss_embedding_mismatch_ajax'));
123		- add_action('wp_ajax_mxchat_dismiss_telegram_secret_notice', array($this, 'mxchat_dismiss_telegram_secret_notice_ajax'));
124		- add_action('admin_notices', array($this, 'mxchat_embedding_mismatch_notice'));
125		- add_action('admin_notices', array($this, 'mxchat_telegram_secret_notice'));
126	39	}
127	40
128		- /**
129		- * Nudge admins to configure a Telegram webhook secret (plan-0c17b5).
130		- *
131		- * Shown only when a Telegram bot token is configured (integration active)
132		- * AND no webhook secret is set. Without a secret the webhook falls back to a
133		- * Telegram source-IP check — safer than the old fail-open, but a real secret
134		- * is the recommended protection. Dismissible; does not block anything.
135		- */
136		- public function mxchat_telegram_secret_notice() {
137		- if (!current_user_can('manage_options')) {
138		- return;
139		- }
140		- $options = get_option('mxchat_options', array());
141		- $has_token = !empty($options['telegram_bot_token']);
142		- $has_secret = !empty($options['telegram_webhook_secret']);
143		- if (!$has_token || $has_secret) {
144		- return;
145		- }
146		- if (get_option('mxchat_dismissed_telegram_secret_notice', '') === '1') {
147		- return;
148		- }
149		- $settings_url = admin_url('admin.php?page=mxchat-max');
150		- ?>
151		- <div class="notice notice-warning is-dismissible mxchat-telegram-secret-notice">
152		- <p><strong><?php esc_html_e('MxChat: Telegram webhook is running without a secret token', 'mxchat'); ?></strong></p>
153		- <p>
154		- <?php esc_html_e('Your Telegram integration is active but no webhook secret is configured. Requests are currently verified only by origin IP. For full protection, set a webhook secret token in the Telegram settings and re-register your webhook.', 'mxchat'); ?>
155		- </p>
156		- <p>
157		- <a href="<?php echo esc_url($settings_url); ?>" class="button button-primary"><?php esc_html_e('Open Telegram settings', 'mxchat'); ?></a>
158		- </p>
159		- </div>
160		- <script>
161		- (function(){
162		- var n = document.querySelector('.mxchat-telegram-secret-notice');
163		- if (!n) return;
164		- n.addEventListener('click', function(e){
165		- if (e.target && e.target.classList.contains('notice-dismiss')) {
166		- var d = new FormData();
167		- d.append('action', 'mxchat_dismiss_telegram_secret_notice');
168		- d.append('nonce', '<?php echo esc_js(wp_create_nonce('mxchat_dismiss_telegram_secret')); ?>');
169		- fetch('<?php echo esc_url(admin_url('admin-ajax.php')); ?>', { method: 'POST', body: d, credentials: 'same-origin' });
170		- }
171		- });
172		- })();
173		- </script>
174		- <?php
	41	+ // Method to check if the license is active
	42	+ private function is_license_active() {
	43	+ $license_status = get_option('mxchat_license_status', 'inactive');
	44	+ return $license_status === 'active';
175	45	}
176	46
177		- /**
178		- * AJAX: persist dismissal of the Telegram-secret admin notice (plan-0c17b5).
179		- */
180		- public function mxchat_dismiss_telegram_secret_notice_ajax() {
181		- if (!current_user_can('manage_options')
182		- || !check_ajax_referer('mxchat_dismiss_telegram_secret', 'nonce', false)) {
183		- wp_send_json_error();
184		- }
185		- update_option('mxchat_dismissed_telegram_secret_notice', '1', 'no');
186		- wp_send_json_success();
187		- }
	47	+ // Initialize default options
	48	+ private function initialize_default_options() {
	49	+ $default_options = array(
	50	+ 'api_key' => '',
	51	+ 'system_prompt_instructions' => '[EXAMPLE INSTRUCTIONS] You are an AI Chatbot assistant for this website. The primary subject you should focus on is [insert proper subject here]. Your main goal is to assist visitors with questions related to this specific topic. Here are some key things to keep in mind:
	52	+ - Your name is [Chatbot Name]. Always introduce yourself as this name when appropriate.
	53	+ - Stay focused on topics related to [insert proper subject here]. If a visitor asks about an unrelated topic, politely redirect the conversation to how you can assist them with this subject. If there is an exception topic (e.g., "parking") that you should assist with, you may do so if instructed.
	54	+ - When appropriate, highlight the benefits of [insert proper subject here]. Offer to guide visitors to relevant pages or provide them with more information.
	55	+ - If a visitor asks for a purchase link or further information, provide them with this link: [Insert Purchase Link Here]. Always ensure that the link is relevant and directly related to the website\'s offerings.
	56	+ - Keep your responses short, concise, and to the point. Provide clear and direct answers suitable for a chatbot interaction.
	57	+ - If you reference specific content, provide a hyperlink to the relevant page using hypertext. Avoid including links that do not directly relate to the content or answer the visitor\'s query.
	58	+ - Provide answers based on the knowledge available to you. If you do not have an answer to a specific question, let the visitor know that you don’t have the information and suggest where they might find it or offer to help with something else.',
	59	+ 'model' => 'gpt-3.5-turbo',
	60	+ 'rate_limit' => '100',
	61	+ 'rate_limit_message' => 'Rate limit exceeded. Please try again later.',
	62	+ 'top_bar_title' => 'MxChat',
	63	+ 'intro_message' => 'Hello! How can I assist you today?',
	64	+ 'input_copy' => 'How can I assist?',
	65	+ 'append_to_body' => 'off',
	66	+ 'close_button_color' => '#fff',
	67	+ 'chatbot_bg_color' => '#fff',
	68	+ 'user_message_bg_color' => '#fff',
	69	+ 'user_message_font_color' => '#212121',
	70	+ 'bot_message_bg_color' => '#212121',
	71	+ 'bot_message_font_color' => '#fff',
	72	+ 'top_bar_bg_color' => '#212121',
	73	+ 'send_button_font_color' => '#212121',
	74	+ 'chat_input_font_color' => '#212121',
	75	+ 'chatbot_background_color' => '#212121',
	76	+ 'icon_color' => '#fff',
	77	+ 'enable_woocommerce_integration' => '0',
	78	+ 'enable_woocommerce_order_access' => '0',
	79	+ 'link_target_toggle' => 'off',
	80	+ );
188	81
189		- /**
190		- * 3.2.3: Preflight check before allowing the embedding model dropdown to
191		- * switch. Pure option comparison — no counts, no DB queries beyond the
192		- * cached options. The dialog is shown whenever the user has previously
193		- * embedded with a different model than the one they're switching to.
194		- */
195		- public function mxchat_check_embedding_switch_ajax() {
196		- check_ajax_referer('mxchat_admin_nonce', 'security');
197		- if (!current_user_can('manage_options')) {
198		- wp_send_json_error(__('Unauthorized', 'mxchat'));
199		- }
200	82
201		- $new_model = isset($_POST['new_model']) ? sanitize_text_field(wp_unslash($_POST['new_model'])) : '';
202		- $options = get_option('mxchat_options', array());
203		- if (isset($options['custom_provider_for_embeddings']) && $options['custom_provider_for_embeddings'] === 'on') {
204		- // The standard dropdown is inert while custom embeddings are on —
205		- // whatever value it posts, the next embed uses the custom identity.
206		- $new_model = MxChat_Utils::get_selected_embedding_model($options);
207		- }
208		- $active_model = MxChat_Utils::get_active_embedding_model();
209		-
210		- $is_mismatch = !empty($active_model) && !empty($new_model) && $active_model !== $new_model;
211		-
212		- $active_dims = MxChat_Utils::embedding_model_dimensions($active_model);
213		- $new_dims = MxChat_Utils::embedding_model_dimensions($new_model);
214		-
215		- wp_send_json_success(array(
216		- 'is_mismatch' => $is_mismatch,
217		- 'active_model' => $active_model,
218		- 'active_label' => MxChat_Utils::embedding_model_label($active_model),
219		- 'new_model' => $new_model,
220		- 'new_label' => MxChat_Utils::embedding_model_label($new_model),
221		- 'dims_differ' => ($active_dims > 0 && $new_dims > 0 && $active_dims !== $new_dims),
222		- 'active_dims' => $active_dims,
223		- 'new_dims' => $new_dims,
224		- ));
225		- }
226		-
227		- /**
228		- * 3.2.3: Dismiss the persistent mismatch banner. Tied to the active+selected
229		- * pair so the banner reappears on the next switch event.
230		- */
231		- public function mxchat_dismiss_embedding_mismatch_ajax() {
232		- check_ajax_referer('mxchat_admin_nonce', 'security');
233		- if (!current_user_can('manage_options')) {
234		- wp_send_json_error(__('Unauthorized', 'mxchat'));
235		- }
236		-
237		- $options = get_option('mxchat_options', array());
238		- $selected = MxChat_Utils::get_selected_embedding_model($options);
239		- $active = MxChat_Utils::get_active_embedding_model();
240		- update_option('mxchat_dismissed_embedding_mismatch', $active . '|' . $selected, false);
241		- wp_send_json_success();
242		- }
243		-
244		- /**
245		- * 3.2.3: Persistent admin banner shown whenever the active embedding model
246		- * (last used to actually embed something) differs from the currently
247		- * selected model. Pure option comparison — no DB queries on every page
248		- * load. The banner auto-clears once both match again, i.e. after a delete
249		- * + re-embed cycle.
250		- */
251		- public function mxchat_embedding_mismatch_notice() {
252		- if (!current_user_can('manage_options')) {
253		- return;
254		- }
255		-
256		- $options = get_option('mxchat_options', array());
257		- $selected = MxChat_Utils::get_selected_embedding_model($options);
258		- $active = MxChat_Utils::get_active_embedding_model();
259		-
260		- if (empty($active) || empty($selected) || $active === $selected) {
261		- return;
262		- }
263		-
264		- $dismissed = get_option('mxchat_dismissed_embedding_mismatch', '');
265		- if ($dismissed === $active . '|' . $selected) {
266		- return;
267		- }
268		-
269		- $active_label = MxChat_Utils::embedding_model_label($active);
270		- $selected_label = MxChat_Utils::embedding_model_label($selected);
271		- $active_dims = MxChat_Utils::embedding_model_dimensions($active);
272		- $selected_dims = MxChat_Utils::embedding_model_dimensions($selected);
273		- $dims_differ = ($active_dims > 0 && $selected_dims > 0 && $active_dims !== $selected_dims);
274		-
275		- $kb_url = admin_url('admin.php?page=mxchat-prompts');
276		- $actions_url = admin_url('admin.php?page=mxchat-actions');
277		-
278		- ?>
279		- <div class="notice notice-error is-dismissible mxchat-embedding-mismatch-notice"
280		- data-active="<?php echo esc_attr($active); ?>"
281		- data-selected="<?php echo esc_attr($selected); ?>">
282		- <p><strong><?php esc_html_e('MxChat: Embedding model mismatch detected', 'mxchat'); ?></strong></p>
283		- <p>
284		- <?php
285		- printf(
286		- /* translators: 1: previously-used model name, 2: currently-selected model name */
287		- esc_html__('Your knowledge base and actions were embedded with %1$s, but %2$s is now selected. Similarity matching will return inaccurate or empty results until you delete all existing embeddings and re-embed your content with the new model.', 'mxchat'),
288		- '<code>' . esc_html($active_label) . '</code>',
289		- '<code>' . esc_html($selected_label) . '</code>'
290		- );
291		- ?>
292		- </p>
293		- <?php if ($dims_differ) : ?>
294		- <p>
295		- <strong><?php esc_html_e('Dimension mismatch:', 'mxchat'); ?></strong>
296		- <?php
297		- printf(
298		- /* translators: 1: old dim count, 2: new dim count */
299		- esc_html__('Existing vectors are %1$d-dimensional but the new model produces %2$d-dimensional vectors. If you use Pinecone, your index will reject queries entirely until re-embedded.', 'mxchat'),
300		- (int) $active_dims,
301		- (int) $selected_dims
302		- );
303		- ?>
304		- </p>
305		- <?php endif; ?>
306		- <p>
307		- <?php esc_html_e('To fix this:', 'mxchat'); ?>
308		- <a href="<?php echo esc_url($kb_url); ?>"><?php esc_html_e('Delete all knowledge base entries', 'mxchat'); ?></a> ·
309		- <a href="<?php echo esc_url($actions_url); ?>"><?php esc_html_e('Delete all actions', 'mxchat'); ?></a> ·
310		- <?php esc_html_e('then re-import / re-add them with the new model selected.', 'mxchat'); ?>
311		- </p>
312		- </div>
313		- <script>
314		- (function($){
315		- $(document).on('click', '.mxchat-embedding-mismatch-notice .notice-dismiss', function(){
316		- $.post(ajaxurl, {
317		- action: 'mxchat_dismiss_embedding_mismatch',
318		- security: '<?php echo esc_js(wp_create_nonce('mxchat_admin_nonce')); ?>'
319		- });
320		- });
321		- })(jQuery);
322		- </script>
323		- <?php
324		- }
325		-
326		-private function is_license_active() {
327		- $license_status = get_option('mxchat_license_status', 'inactive');
328		- return ($license_status === 'active');
329		-}
330		-
331		-private function initialize_default_options() {
332		- $default_options = array(
333		- 'api_key' => '',
334		- 'xai_api_key' => '',
335		- 'claude_api_key' => '',
336		- 'deepseek_api_key' => '',
337		- 'voyage_api_key' => '',
338		- 'gemini_api_key' => '',
339		- 'enable_streaming_toggle' => 'off',
340		- 'enable_web_search' => 'off',
341		- 'embedding_model' => 'text-embedding-ada-002',
342		- 'system_prompt_instructions' => 'You are an AI Chatbot assistant for this website. Your main goal is to assist visitors with questions and provide helpful information. Here are your key guidelines:
343		-
344		- # Response Style - CRITICALLY IMPORTANT
345		- - MAXIMUM LENGTH: 1-3 short sentences per response
346		- - Ultra-concise: Get straight to the answer with no filler
347		- - No introductions like "Sure!" or "I\'d be happy to help"
348		- - No phrases like "based on my knowledge" or "according to information"
349		- - No explanatory text before giving the answer
350		- - No summaries or repetition
351		- - Hyperlink all URLs
352		- - Respond in user\'s language
353		- - Minor chit chat or conversation is okay, but try to keep it focused on [insert topic]
354		-
355		- # Knowledge Base Requirements - PREVENT HALLUCINATIONS
356		- - ONLY answer questions using information explicitly provided in OFFICIAL KNOWLEDGE DATABASE CONTENT sections marked with ===== delimiters
357		- - If required information is NOT in the knowledge database: "I don\'t have enough information in my knowledge base to answer that question accurately."
358		- - NEVER invent or hallucinate URLs, links, product specs, procedures, dates, statistics, names, contacts, or company information
359		- - When knowledge base information is unclear or contradictory, acknowledge the limitation rather than guessing
360		- - Better to admit insufficient information than provide inaccurate answers',
361		- 'model' => esc_html__('gpt-5.6-sol', 'mxchat'),
362		- 'rate_limit_logged_out' => esc_html__('100', 'mxchat'),
363		- 'role_rate_limits' => array(),
364		- 'rate_limit_message' => esc_html__('Rate limit exceeded. Please try again later.', 'mxchat'),
365		- 'enable_email_block' => '',
366		- 'email_blocker_header_content' => __("<h2>Welcome to Our Chat!</h2>\n<p>Let's get started. Enter your email to begin chatting with us.</p>", 'mxchat'),
367		- 'email_blocker_button_text' => esc_html__('Start Chat', 'mxchat'),
368		- 'enable_name_field' => 'off', // NEW
369		- 'name_field_placeholder' => esc_html__('Enter your name', 'mxchat'), // NEW
370		- 'top_bar_title' => esc_html__('MxChat', 'mxchat'),
371		- 'intro_message' => __('Hello! How can I assist you today?', 'mxchat'),
372		- 'ai_agent_text' => esc_html__('AI Agent', 'mxchat'),
373		- 'input_copy' => esc_html__('How can I assist?', 'mxchat'),
374		- 'append_to_body' => esc_html__('off', 'mxchat'),
375		- 'post_type_visibility_mode' => 'all', // 'all', 'include', 'exclude'
376		- 'post_type_visibility_list' => array(), // Array of post type slugs
377		- 'contextual_awareness_toggle' => 'off',
378		- 'citation_links_toggle' => 'on',
379		- 'satisfaction_rating_enabled' => 'off',
380		- 'satisfaction_rating_idle_seconds' => 60,
381		- 'satisfaction_rating_question' => '',
382		- 'satisfaction_rating_thanks' => '',
383		- 'satisfaction_rating_placeholder' => '',
384		- 'satisfaction_rating_saved' => '',
385		- 'close_button_color' => esc_html__('#fff', 'mxchat'),
386		- 'chatbot_bg_color' => esc_html__('#fff', 'mxchat'),
387		- 'user_message_bg_color' => esc_html__('#fff', 'mxchat'),
388		- 'user_message_font_color' => esc_html__('#212121', 'mxchat'),
389		- 'bot_message_bg_color' => esc_html__('#212121', 'mxchat'),
390		- 'bot_message_font_color' => esc_html__('#fff', 'mxchat'),
391		- 'top_bar_bg_color' => esc_html__('#212121', 'mxchat'),
392		- 'send_button_font_color' => esc_html__('#212121', 'mxchat'),
393		- 'chat_input_font_color' => esc_html__('#212121', 'mxchat'),
394		- 'chatbot_background_color' => esc_html__('#212121', 'mxchat'),
395		- 'icon_color' => esc_html__('#fff', 'mxchat'),
396		- 'enable_woocommerce_integration' => esc_html__('0', 'mxchat'),
397		- 'link_target_toggle' => esc_html__('off', 'mxchat'),
398		- 'pre_chat_message' => esc_html__('Hey there! Ask me anything!', 'mxchat'),
399		-
400		- // New fields for Loops Integration
401		- 'loops_api_key' => '',
402		- 'loops_mailing_list' => '',
403		- 'triggered_phrase_response' => __('Would you like to join our mailing list? Please provide your email below.', 'mxchat'),
404		- 'email_capture_response' => __('Thank you for providing your email! You\'ve been added to our list.', 'mxchat'),
405		- 'popular_question_1' => '',
406		- 'popular_question_2' => '',
407		- 'popular_question_3' => '',
408		- 'pdf_intent_trigger_text' => __("Please provide the URL to the PDF you'd like to discuss.", 'mxchat'),
409		- 'pdf_intent_success_text' => __("I've processed the PDF. What questions do you have about it?", 'mxchat'),
410		- 'pdf_intent_error_text' => __("Sorry, I couldn't process the PDF. Please ensure it's a valid file.", 'mxchat'),
411		- 'pdf_max_pages' => 69,
412		- 'show_pdf_upload_button' => 'on',
413		- 'show_word_upload_button' => 'on',
414		-
415		- // Live Agent Integration (Slack)
416		- 'live_agent_webhook_url' => '',
417		- 'live_agent_secret_key' => '',
418		- 'live_agent_bot_token' => '',
419		- 'live_agent_message_bg_color' => esc_html__('#ffffff', 'mxchat'),
420		- 'live_agent_message_font_color' => esc_html__('#333333', 'mxchat'),
421		-
422		- // Telegram Integration
423		- 'telegram_status' => 'off',
424		- 'telegram_bot_token' => '',
425		- 'telegram_group_id' => '',
426		- 'telegram_webhook_secret' => '',
427		- 'telegram_notification_message' => __("I've notified a support agent. Please allow a moment for them to respond. If you'd like to continue with AI, just type \"Switch to AI\" at any time.", 'mxchat'),
428		- 'telegram_away_message' => __("I just checked, and it looks like our support team isn't personally available at the moment. If you'd like, you can leave your email address, and they'll get back to you as soon as possible. In the meantime, you can keep chatting with me — just let me know how I can help!", 'mxchat'),
429		-
430		- 'chat_toolbar_toggle' => esc_html__('off', 'mxchat'),
431		- 'mode_indicator_bg_color' => esc_html__('#767676', 'mxchat'),
432		- 'mode_indicator_font_color' => esc_html__('#ffffff', 'mxchat'),
433		- 'toolbar_icon_color' => esc_html__('#212121', 'mxchat'),
434		-
435		- // Optimization settings
436		- 'script_loading_strategy' => 'default',
437		-
438		- // Debug settings
439		- 'debug_mode' => 'off',
440		- );
441		-
442		-
443	83	// Merge existing options with defaults
444	84	$existing_options = get_option('mxchat_options', array());
445	85	$merged_options = wp_parse_args($existing_options, $default_options);
446	86
		@@ -448,687 +88,122 @@
448	88	if ($existing_options !== $merged_options) {
449	89	update_option('mxchat_options', $merged_options);
450	90	}
451	91
452		- // Add default limits for each role
453		- $roles = wp_roles()->get_names();
454		- foreach ($roles as $role_id => $role_name) {
455		- $default_options['role_rate_limits'][$role_id] = esc_html__('100', 'mxchat');
456		- }
457		-
458		- return $default_options;
459		-
460	92	// Update the $this->options property
461	93	$this->options = $merged_options;
462	94	}
463	95
464		-public function mxchat_add_plugin_page() {
465		- // Onboarding lifecycle helpers (admin_init redirect + ajax handlers live in the file).
466		- require_once plugin_dir_path(__FILE__) . 'admin-onboarding-page.php';
467	96
468		- // Main menu page — `mxchat-max` remains the parent slug for every MxChat submenu
469		- // (Settings, Knowledge, Transcripts, …). Hitting `?page=mxchat-max` directly now
470		- // dispatches to the Onboarding page (or Settings if the user has dismissed onboarding).
471		- add_menu_page(
472		- esc_html__('MxChat', 'mxchat'),
473		- esc_html__('MxChat', 'mxchat'),
474		- 'manage_options',
475		- 'mxchat-max',
476		- array($this, 'mxchat_create_dashboard_page'),
477		- 'dashicons-testimonial',
478		- 6
479		- );
480	97
481		- // Onboarding submenu — first child under MxChat (plan-d14e89).
482		- // First registration uses menu_slug === parent slug 'mxchat-max' →
483		- // WP-canonical override of the auto-duplicate "MxChat" entry. Result: the
484		- // first child shows as "Onboarding" instead of a redundant pair.
485		- add_submenu_page(
486		- 'mxchat-max',
487		- esc_html__('MxChat Onboarding', 'mxchat'),
488		- esc_html__('Onboarding', 'mxchat'),
489		- 'manage_options',
490		- 'mxchat-max',
491		- array($this, 'mxchat_create_dashboard_page')
492		- );
493		- // Hidden route for `?page=mxchat-onboarding` (Settings "Show again" link
494		- // + legacy redirects still target this slug). Parent === null keeps it
495		- // out of the menu while remaining accessible by URL.
496		- add_submenu_page(
497		- null,
498		- esc_html__('MxChat Onboarding', 'mxchat'),
499		- esc_html__('Onboarding', 'mxchat'),
500		- 'manage_options',
501		- 'mxchat-onboarding',
502		- array($this, 'mxchat_create_dashboard_page')
503		- );
	98	+ public function mxchat_add_plugin_page() {
	99	+ // Main menu page
	100	+ add_menu_page(
	101	+ 'MxChat Settings',
	102	+ 'MxChat',
	103	+ 'manage_options',
	104	+ 'mxchat-max',
	105	+ array($this, 'mxchat_create_admin_page'),
	106	+ 'dashicons-testimonial',
	107	+ 6
	108	+ );
504	109
505		- // Settings submenu — same callback as before, just at a new slug.
506		- add_submenu_page(
507		- 'mxchat-max',
508		- esc_html__('MxChat Settings', 'mxchat'),
509		- esc_html__('Settings', 'mxchat'),
510		- 'manage_options',
511		- 'mxchat-settings',
512		- array($this, 'mxchat_create_admin_page')
513		- );
	110	+ // Submenu page for Knowledge
	111	+ add_submenu_page(
	112	+ 'mxchat-max',
	113	+ 'Prompts',
	114	+ 'Knowledge',
	115	+ 'manage_options',
	116	+ 'mxchat-prompts',
	117	+ array($this, 'mxchat_create_prompts_page')
	118	+ );
514	119
515		- // Submenu page for Knowledge
516		- add_submenu_page(
517		- 'mxchat-max',
518		- esc_html__('Prompts', 'mxchat'),
519		- esc_html__('Knowledge', 'mxchat'),
520		- 'manage_options',
521		- 'mxchat-prompts',
522		- array($this, 'mxchat_create_prompts_page')
523		- );
	120	+ // Submenu page for Chat Transcripts
	121	+ add_submenu_page(
	122	+ 'mxchat-max', // Corrected parent slug to match the main menu
	123	+ 'Chat Transcripts',
	124	+ 'Transcripts',
	125	+ 'manage_options',
	126	+ 'mxchat-transcripts',
	127	+ array($this, 'mxchat_create_transcripts_page') // Prefixed function name with mxchat_
	128	+ );
524	129
525		- add_submenu_page(
526		- 'mxchat-max',
527		- esc_html__('Chat Transcripts', 'mxchat'),
528		- esc_html__('Transcripts', 'mxchat'),
529		- 'manage_options',
530		- 'mxchat-transcripts',
531		- array($this, 'mxchat_create_transcripts_page')
532		- );
533		-
534		- add_submenu_page(
535		- 'mxchat-max',
536		- esc_html__('MxChat Actions', 'mxchat'),
537		- esc_html__('Actions', 'mxchat'),
538		- 'manage_options',
539		- 'mxchat-actions',
540		- array($this, 'mxchat_actions_page_html')
541		- );
542		-
543		- // Content Generator page
544		- add_submenu_page(
545		- 'mxchat-max',
546		- esc_html__('Content', 'mxchat'),
547		- esc_html__('Content', 'mxchat'),
548		- 'manage_options',
549		- 'mxchat-content',
550		- array($this, 'mxchat_create_content_page')
551		- );
552		-
553		-}
554		-
555		-/**
556		- * Register the Pro & Extensions submenu on a later admin_menu priority so it
557		- * always renders as the bottom-most item in the MxChat sidebar — below
558		- * configuration pages like API Access (priority 20).
559		- */
560		-public function mxchat_add_pro_extensions_page() {
561		- add_submenu_page(
562		- 'mxchat-max',
563		- esc_html__('Pro & Extensions', 'mxchat'),
564		- esc_html__('Pro & Extensions', 'mxchat'),
565		- 'manage_options',
566		- 'mxchat-activation',
567		- array($this, 'mxchat_create_activation_page')
568		- );
569		-}
570		-
571		-public function mxchat_create_addons_page() {
572		- require_once plugin_dir_path(__FILE__) . 'class-mxchat-addons.php';
573		- $addons_page = new MxChat_Addons();
574		- $addons_page->render_page();
575		-}
576		-
577		-/**
578		- * Render the Content Generator admin page
579		- */
580		-public function mxchat_create_content_page() {
581		- require_once plugin_dir_path(__FILE__) . 'admin-content-page.php';
582		- // The Editor Assistant toggle on the Settings tab renders through
583		- // mxchat_render_field_wrapper(), which lives in admin-settings-page.php
584		- // (plan-f7df40 relocation) — load it the same way the settings page does.
585		- require_once plugin_dir_path(__FILE__) . 'admin-settings-page.php';
586		- mxchat_render_content_page($this);
587		-}
588		-
589		-/**
590		- * Test actual streaming functionality in the WordPress environment
591		- */
592		-public function mxchat_handle_test_streaming_actual() {
593		- check_ajax_referer('mxchat_test_streaming_nonce', 'nonce');
594		-
595		- // A nonce is not authorization (plan-mxchat-20260731-c63fb6). This handler
596		- // reads the site's provider keys and spends them on an outbound call, so it
597		- // is billable abuse for any logged-in user who obtained the nonce.
598		- if (!current_user_can('manage_options')) {
599		- wp_send_json_error(['message' => esc_html__('Unauthorized', 'mxchat')], 403);
	130	+ // Submenu page for Activation Key
	131	+ add_submenu_page(
	132	+ 'mxchat-max',
	133	+ 'Pro Upgrade',
	134	+ 'Pro Upgrade',
	135	+ 'manage_options',
	136	+ 'mxchat-activation',
	137	+ array($this, 'mxchat_create_activation_page')
	138	+ );
600	139	}
601	140
602		- // Check if headers have already been sent
603		- if (headers_sent()) {
604		- wp_send_json_error(['message' => 'Headers already sent - streaming not possible']);
605		- return;
606		- }
607	141
608		- // Check for required functions
609		- if (!function_exists('curl_init')) {
610		- wp_send_json_error(['message' => 'cURL not available - streaming requires cURL']);
	142	+public function mxchat_handle_content_submission() {
	143	+ // Check if the form was submitted and the user has sufficient permissions
	144	+ if (!isset($_POST['submit_content']) || !current_user_can('manage_options')) {
611	145	return;
612	146	}
613	147
614		- // Get user's selected model and API key
615		- $options = get_option('mxchat_options', []);
616		- $selected_model = $options['model'] ?? 'gpt-5.6-sol';
617		-
618		- // Get the provider from the model
619		- $model_parts = explode('-', $selected_model);
620		- $provider = strtolower($model_parts[0]);
621		-
622		- // Get the appropriate API key
623		- $api_key = '';
624		- switch ($provider) {
625		- case 'gpt':
626		- case 'o1':
627		- $api_key = $options['api_key'] ?? '';
628		- break;
629		- case 'claude':
630		- $api_key = $options['claude_api_key'] ?? '';
631		- break;
632		- case 'grok':
633		- $api_key = $options['xai_api_key'] ?? '';
634		- break;
635		- case 'deepseek':
636		- $api_key = $options['deepseek_api_key'] ?? '';
637		- break;
638		- case 'gemini':
639		- $api_key = $options['gemini_api_key'] ?? '';
640		- break;
641		- default:
642		- // Default to OpenAI for unknown models
643		- $api_key = $options['api_key'] ?? '';
644		- $provider = 'gpt';
645		- break;
	148	+ // Verify the nonce field for security
	149	+ $nonce = isset($_POST['mxchat_submit_content_nonce']) ? sanitize_text_field(wp_unslash($_POST['mxchat_submit_content_nonce'])) : '';
	150	+ if (!wp_verify_nonce($nonce, 'mxchat_submit_content_action')) {
	151	+ wp_die('Nonce verification failed.');
646	152	}
647	153
648		- if (empty($api_key)) {
649		- wp_send_json_error(['message' => "API key not configured for {$provider} provider"]);
650		- return;
651		- }
	154	+ // Sanitize the content input
	155	+ $article_content = sanitize_textarea_field($_POST['article_content']);
652	156
653		- // Test streaming with the selected model and provider
654		- try {
655		- $this->perform_streaming_test($provider, $selected_model, $api_key);
656		- } catch (Exception $e) {
657		- wp_send_json_error(['message' => 'Streaming test exception: ' . $e->getMessage()]);
658		- }
659		-}
	157	+ // Sanitize the URL input (optional URL)
	158	+ $article_url = isset($_POST['article_url']) ? esc_url_raw($_POST['article_url']) : ''; // Default to empty if not provided
660	159
661		-/**
662		- * Perform the actual streaming test
663		- */
664		-private function perform_streaming_test($provider, $model, $api_key) {
665		- // Set streaming headers
666		- header('Content-Type: text/event-stream');
667		- header('Cache-Control: no-cache');
668		- header('X-Accel-Buffering: no'); // Disable nginx buffering
	160	+ // Generate the embedding vector for the content
	161	+ $embedding_vector = $this->mxchat_generate_embedding($article_content);
669	162
670		- // Prepare test message
671		- $test_message = "Please respond with exactly: 'Streaming test successful!' - send this as a short response for testing.";
	163	+ global $wpdb;
	164	+ $table_name = $wpdb->prefix . 'mxchat_system_prompt_content';
672	165
673		- // Configure API request based on provider
674		- $url = '';
675		- $headers = [];
676		- $body = [];
677		-
678		- switch ($provider) {
679		- case 'gpt':
680		- case 'o1':
681		- $url = 'https://api.openai.com/v1/chat/completions';
682		- $headers = [
683		- 'Content-Type: application/json',
684		- 'Authorization: Bearer ' . $api_key
685		- ];
686		- $body = [
687		- 'model' => $model,
688		- 'messages' => [['role' => 'user', 'content' => $test_message]],
689		- 'max_tokens' => 50,
690		- 'temperature' => 0.3,
691		- 'stream' => true
692		- ];
693		- break;
694		-
695		- case 'claude':
696		- $url = 'https://api.anthropic.com/v1/messages';
697		- $headers = [
698		- 'Content-Type: application/json',
699		- 'x-api-key: ' . $api_key,
700		- 'anthropic-version: 2023-06-01'
701		- ];
702		- $body = [
703		- 'model' => $model,
704		- 'messages' => [['role' => 'user', 'content' => $test_message]],
705		- 'max_tokens' => 50,
706		- 'temperature' => 0.3,
707		- 'stream' => true
708		- ];
709		- // Claude flagships from Opus 4.7 onward reject the temperature
710		- // param outright (400). Reuse the catalog's decision — this path
711		- // previously sent temperature unconditionally, so the streaming
712		- // test was broken for Opus 4.7/4.8, Fable 5 and Sonnet 5.
713		- if (class_exists('MxChat_Model_Catalog')
714		- && method_exists('MxChat_Model_Catalog', 'supports_temperature')
715		- && !MxChat_Model_Catalog::supports_temperature($model)) {
716		- unset($body['temperature']);
717		- }
718		- break;
719		-
720		- case 'grok':
721		- $url = 'https://api.x.ai/v1/chat/completions';
722		- $headers = [
723		- 'Content-Type: application/json',
724		- 'Authorization: Bearer ' . $api_key
725		- ];
726		- $body = [
727		- 'model' => $model,
728		- 'messages' => [['role' => 'user', 'content' => $test_message]],
729		- 'max_tokens' => 50,
730		- 'temperature' => 0.3,
731		- 'stream' => true
732		- ];
733		- break;
734		-
735		- case 'deepseek':
736		- $url = 'https://api.deepseek.com/v1/chat/completions';
737		- $headers = [
738		- 'Content-Type: application/json',
739		- 'Authorization: Bearer ' . $api_key
740		- ];
741		- $body = [
742		- 'model' => $model,
743		- 'messages' => [['role' => 'user', 'content' => $test_message]],
744		- 'max_tokens' => 50,
745		- 'temperature' => 0.3,
746		- 'stream' => true,
747		- // DeepSeek V4 defaults to thinking mode ON — reasoning would
748		- // consume the 50-token test budget and return no visible text.
749		- 'thinking' => ['type' => 'disabled']
750		- ];
751		- break;
752		-
753		- default:
754		- echo "data: " . json_encode(['error' => 'Unsupported provider for streaming test: ' . $provider]) . "\n\n";
755		- flush();
756		- return;
	166	+ // Check if the 'source_url' column exists in the table and add it if it doesn't
	167	+ if ($wpdb->get_var($wpdb->prepare("SHOW COLUMNS FROM {$table_name} LIKE %s", 'source_url')) != 'source_url') {
	168	+ // Use wpdb::query and a prepared statement to avoid SQL injection
	169	+ $wpdb->query($wpdb->prepare("ALTER TABLE {$table_name} ADD source_url VARCHAR(255) DEFAULT ''"));
757	170	}
758	171
759		- // Initialize cURL
760		- $ch = curl_init();
761		- curl_setopt($ch, CURLOPT_URL, $url);
762		- curl_setopt($ch, CURLOPT_RETURNTRANSFER, false);
763		- curl_setopt($ch, CURLOPT_POST, true);
764		- curl_setopt($ch, CURLOPT_POSTFIELDS, json_encode($body));
765		- curl_setopt($ch, CURLOPT_HTTPHEADER, $headers);
766		- curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, true);
767		- curl_setopt($ch, CURLOPT_TIMEOUT, 30);
768		- curl_setopt($ch, CURLOPT_WRITEFUNCTION, function($ch, $data) use ($provider) {
769		- return $this->process_streaming_test_data($data, $provider);
770		- });
	172	+ if (is_array($embedding_vector)) {
	173	+ // Serialize the embedding vector before storing it
	174	+ $embedding_vector_serialized = serialize($embedding_vector);
771	175
772		- // Send initial test message
773		- echo "data: " . json_encode(['content' => '[Starting streaming test...]']) . "\n\n";
774		- flush();
775		-
776		- $result = curl_exec($ch);
777		- $http_code = curl_getinfo($ch, CURLINFO_HTTP_CODE);
778		- $curl_error = curl_error($ch);
779		- curl_close($ch);
780		-
781		- if ($curl_error) {
782		- echo "data: " . json_encode(['error' => 'cURL Error: ' . $curl_error]) . "\n\n";
783		- flush();
784		- return;
785		- }
786		-
787		- if ($http_code !== 200) {
788		- echo "data: " . json_encode(['error' => 'API returned HTTP ' . $http_code]) . "\n\n";
789		- flush();
790		- return;
791		- }
792		-
793		- // Send completion signal
794		- echo "data: [DONE]\n\n";
795		- flush();
796		-}
797		-
798		-/**
799		- * Process streaming data for the test
800		- */
801		-private function process_streaming_test_data($data, $provider) {
802		- static $chunk_count = 0;
803		-
804		- $lines = explode("\n", $data);
805		-
806		- foreach ($lines as $line) {
807		- if (trim($line) === '') {
808		- continue;
809		- }
810		-
811		- // Handle different provider formats
812		- if ($provider === 'claude') {
813		- // Claude uses event: and data: format
814		- if (strpos($line, 'data: ') === 0) {
815		- $json_str = substr($line, 6);
816		- $json = json_decode($json_str, true);
817		-
818		- if (isset($json['type']) && $json['type'] === 'content_block_delta') {
819		- if (isset($json['delta']['text'])) {
820		- $chunk_count++;
821		- echo "data: " . json_encode([
822		- 'content' => $json['delta']['text'],
823		- 'test_chunk' => $chunk_count
824		- ]) . "\n\n";
825		- flush();
826		- }
827		- }
828		- }
829		- } else {
830		- // OpenAI, X.AI, DeepSeek format
831		- if (strpos($line, 'data: ') === 0) {
832		- $json_str = substr($line, 6);
833		-
834		- if ($json_str === '[DONE]') {
835		- // Don't echo [DONE] here, let the main function handle it
836		- continue;
837		- }
838		-
839		- $json = json_decode($json_str, true);
840		- if (isset($json['choices'][0]['delta']['content'])) {
841		- $chunk_count++;
842		- echo "data: " . json_encode([
843		- 'content' => $json['choices'][0]['delta']['content'],
844		- 'test_chunk' => $chunk_count
845		- ]) . "\n\n";
846		- flush();
847		- }
848		- }
849		- }
850		- }
851		-
852		- return strlen($data);
853		-}
854		-
855		-/**
856		- * Updated version of your existing test method (keep this as a fallback)
857		- */
858		-public function mxchat_handle_test_streaming() {
859		- check_ajax_referer('mxchat_test_streaming_nonce', 'nonce');
860		-
861		- // plan-mxchat-20260731-c63fb6 — the delegate below checks this too, but
862		- // fail here so the alias never becomes a bypass if that call is refactored.
863		- if (!current_user_can('manage_options')) {
864		- wp_send_json_error(['message' => esc_html__('Unauthorized', 'mxchat')], 403);
865		- }
866		-
867		- // Use the actual streaming test instead
868		- $this->mxchat_handle_test_streaming_actual();
869		-}
870		-
871		-
872		-public function register_pinecone_settings() {
873		- register_setting(
874		- 'mxchat_pinecone_addon_options',
875		- 'mxchat_pinecone_addon_options',
876		- array(
877		- 'type' => 'array',
878		- 'sanitize_callback' => array($this, 'sanitize_pinecone_settings'),
879		- 'default' => array(
880		- 'mxchat_use_pinecone' => '0',
881		- 'mxchat_pinecone_api_key' => '',
882		- 'mxchat_pinecone_host' => '',
883		- 'mxchat_pinecone_index' => '',
884		- 'mxchat_pinecone_environment' => ''
885		- )
886		- )
887		- );
888		-}
889		-
890		-public function sanitize_pinecone_settings($input) {
891		- $sanitized = array();
892		-
893		- $sanitized['mxchat_use_pinecone'] = isset($input['mxchat_use_pinecone']) ? '1' : '0';
894		- $sanitized['mxchat_pinecone_api_key'] = sanitize_text_field($input['mxchat_pinecone_api_key'] ?? '');
895		- $sanitized['mxchat_pinecone_host'] = sanitize_text_field($input['mxchat_pinecone_host'] ?? '');
896		- $sanitized['mxchat_pinecone_index'] = sanitize_text_field($input['mxchat_pinecone_index'] ?? '');
897		- $sanitized['mxchat_pinecone_environment'] = sanitize_text_field($input['mxchat_pinecone_environment'] ?? '');
898		-
899		- // Remove https:// from host if present
900		- $sanitized['mxchat_pinecone_host'] = str_replace(['https://', 'http://'], '', $sanitized['mxchat_pinecone_host']);
901		-
902		- return $sanitized;
903		-}
904		-
905		-public function register_openai_vectorstore_settings() {
906		- register_setting(
907		- 'mxchat_openai_vectorstore_options',
908		- 'mxchat_openai_vectorstore_options',
909		- array(
910		- 'type' => 'array',
911		- 'sanitize_callback' => array($this, 'sanitize_openai_vectorstore_settings'),
912		- 'default' => array(
913		- 'mxchat_use_openai_vectorstore' => '0',
914		- 'mxchat_vectorstore_ids' => '',
915		- 'mxchat_vectorstore_max_results' => 5
916		- )
917		- )
918		- );
919		-}
920		-
921		-public function sanitize_openai_vectorstore_settings($input) {
922		- $sanitized = array();
923		-
924		- $sanitized['mxchat_use_openai_vectorstore'] = isset($input['mxchat_use_openai_vectorstore']) ? '1' : '0';
925		- $sanitized['mxchat_vectorstore_ids'] = sanitize_text_field($input['mxchat_vectorstore_ids'] ?? '');
926		- $sanitized['mxchat_vectorstore_max_results'] = absint($input['mxchat_vectorstore_max_results'] ?? 5);
927		-
928		- // Ensure max results is within reasonable range
929		- if ($sanitized['mxchat_vectorstore_max_results'] < 1) {
930		- $sanitized['mxchat_vectorstore_max_results'] = 1;
931		- }
932		- if ($sanitized['mxchat_vectorstore_max_results'] > 20) {
933		- $sanitized['mxchat_vectorstore_max_results'] = 20;
934		- }
935		-
936		- return $sanitized;
937		-}
938		-
939		-/**
940		- * AJAX handler to test OpenAI Vector Store connection
941		- */
942		-public function mxchat_test_vectorstore_connection() {
943		- check_ajax_referer('mxchat_admin_nonce', 'nonce');
944		-
945		- if (!current_user_can('manage_options')) {
946		- wp_send_json_error(array('message' => __('Permission denied.', 'mxchat')));
947		- return;
948		- }
949		-
950		- $vectorstore_options = get_option('mxchat_openai_vectorstore_options', array());
951		- $vectorstore_ids = $vectorstore_options['mxchat_vectorstore_ids'] ?? '';
952		- $mxchat_options = get_option('mxchat_options', array());
953		- $api_key = $mxchat_options['api_key'] ?? '';
954		-
955		- if (empty($api_key)) {
956		- wp_send_json_error(array('message' => __('OpenAI API key is not configured.', 'mxchat')));
957		- return;
958		- }
959		-
960		- if (empty($vectorstore_ids)) {
961		- wp_send_json_error(array('message' => __('No Vector Store ID configured.', 'mxchat')));
962		- return;
963		- }
964		-
965		- // Get the first Vector Store ID for testing
966		- $ids_array = array_map('trim', explode(',', $vectorstore_ids));
967		- $test_id = $ids_array[0];
968		-
969		- // Test by retrieving the Vector Store info
970		- $response = wp_remote_get(
971		- 'https://api.openai.com/v1/vector_stores/' . $test_id,
972		- array(
973		- 'headers' => array(
974		- 'Authorization' => 'Bearer ' . $api_key,
975		- 'Content-Type' => 'application/json',
976		- 'OpenAI-Beta' => 'assistants=v2'
	176	+ // Insert the content, embedding vector, and source URL into the database, using a prepared statement
	177	+ $inserted = $wpdb->insert(
	178	+ $table_name,
	179	+ array(
	180	+ 'article_content' => $article_content,
	181	+ 'embedding_vector' => $embedding_vector_serialized,
	182	+ 'source_url' => $article_url, // Insert the URL, empty string if not provided
977	183	),
978		- 'timeout' => 30
979		- )
980		- );
981		-
982		- if (is_wp_error($response)) {
983		- wp_send_json_error(array('message' => __('Connection failed: ', 'mxchat') . $response->get_error_message()));
984		- return;
985		- }
986		-
987		- $status_code = wp_remote_retrieve_response_code($response);
988		- $body = json_decode(wp_remote_retrieve_body($response), true);
989		-
990		- if ($status_code === 200 && isset($body['id'])) {
991		- $file_count = $body['file_counts']['completed'] ?? 0;
992		- $name = $body['name'] ?? $test_id;
993		- wp_send_json_success(array(
994		- 'message' => sprintf(
995		- __('Connected successfully! Vector Store: %s (%d files)', 'mxchat'),
996		- esc_html($name),
997		- $file_count
	184	+ array(
	185	+ '%s', // Format for article_content (string)
	186	+ '%s', // Format for embedding_vector (serialized string)
	187	+ '%s', // Format for source_url (string)
998	188	)
999		- ));
1000		- } elseif ($status_code === 404) {
1001		- wp_send_json_error(array('message' => __('Vector Store not found. Please check the ID.', 'mxchat')));
1002		- } elseif ($status_code === 401) {
1003		- wp_send_json_error(array('message' => __('Invalid API key.', 'mxchat')));
1004		- } else {
1005		- $error_message = $body['error']['message'] ?? __('Unknown error occurred.', 'mxchat');
1006		- wp_send_json_error(array('message' => $error_message));
1007		- }
1008		-}
1009		-
1010		-/**
1011		- * AJAX handler to test Slack connection and validate scopes
1012		- */
1013		-public function mxchat_test_slack_connection() {
1014		- check_ajax_referer('mxchat_admin_nonce', 'nonce');
1015		-
1016		- if (!current_user_can('manage_options')) {
1017		- wp_send_json_error(array('message' => __('Permission denied.', 'mxchat')));
1018		- return;
1019		- }
1020		-
1021		- $bot_token = $this->options['live_agent_bot_token'] ?? '';
1022		-
1023		- if (empty($bot_token)) {
1024		- wp_send_json_error(array('message' => __('Slack Bot Token is not configured. Please enter your token and save settings first.', 'mxchat')));
1025		- return;
1026		- }
1027		-
1028		- // Test 1: Validate bot token with auth.test
1029		- $auth_response = wp_remote_post('https://slack.com/api/auth.test', array(
1030		- 'headers' => array(
1031		- 'Authorization' => 'Bearer ' . $bot_token,
1032		- 'Content-Type' => 'application/json'
1033		- ),
1034		- 'timeout' => 15
1035		- ));
1036		-
1037		- if (is_wp_error($auth_response)) {
1038		- wp_send_json_error(array('message' => __('Connection failed: ', 'mxchat') . $auth_response->get_error_message()));
1039		- return;
1040		- }
1041		-
1042		- $auth_body = json_decode(wp_remote_retrieve_body($auth_response), true);
1043		-
1044		- if (!isset($auth_body['ok']) || !$auth_body['ok']) {
1045		- $error = $auth_body['error'] ?? 'unknown_error';
1046		- $error_messages = array(
1047		- 'invalid_auth' => __('Invalid bot token. Please check your token starts with xoxb-', 'mxchat'),
1048		- 'not_authed' => __('No authentication token provided.', 'mxchat'),
1049		- 'account_inactive' => __('The Slack workspace has been deactivated.', 'mxchat'),
1050		- 'token_revoked' => __('The bot token has been revoked. Please generate a new one.', 'mxchat'),
1051	189	);
1052		- $message = $error_messages[$error] ?? sprintf(__('Authentication failed: %s', 'mxchat'), $error);
1053		- wp_send_json_error(array('message' => $message));
1054		- return;
1055		- }
1056	190
1057		- $team_name = $auth_body['team'] ?? 'Unknown Workspace';
1058		- $bot_name = $auth_body['user'] ?? 'Unknown Bot';
	191	+ if ($inserted === false) {
	192	+ error_log('Error inserting content: ' . $wpdb->last_error);
	193	+ set_transient('mxchat_admin_notice_error', 'Error inserting content into the database. Please try again.', 30);
	194	+ } else {
	195	+ set_transient('mxchat_admin_notice_success', 'Content successfully submitted!', 30);
	196	+ }
1059	197
1060		- // Test 2: Check if we can list channels (tests channels:read scope)
1061		- $channels_response = wp_remote_post('https://slack.com/api/conversations.list', array(
1062		- 'headers' => array(
1063		- 'Authorization' => 'Bearer ' . $bot_token,
1064		- 'Content-Type' => 'application/json'
1065		- ),
1066		- 'body' => json_encode(array('limit' => 1)),
1067		- 'timeout' => 15
1068		- ));
1069		-
1070		- $channels_body = json_decode(wp_remote_retrieve_body($channels_response), true);
1071		- $can_read_channels = isset($channels_body['ok']) && $channels_body['ok'];
1072		-
1073		- // Test 3: Check if we can create channels (tests channels:manage scope)
1074		- // We'll just check the error message without actually creating
1075		- $create_response = wp_remote_post('https://slack.com/api/conversations.create', array(
1076		- 'headers' => array(
1077		- 'Authorization' => 'Bearer ' . $bot_token,
1078		- 'Content-Type' => 'application/json'
1079		- ),
1080		- 'body' => json_encode(array('name' => 'mxchat-test-' . time(), 'is_private' => false)),
1081		- 'timeout' => 15
1082		- ));
1083		-
1084		- $create_body = json_decode(wp_remote_retrieve_body($create_response), true);
1085		-
1086		- // If channel was created, delete it immediately
1087		- if (isset($create_body['ok']) && $create_body['ok'] && isset($create_body['channel']['id'])) {
1088		- wp_remote_post('https://slack.com/api/conversations.archive', array(
1089		- 'headers' => array(
1090		- 'Authorization' => 'Bearer ' . $bot_token,
1091		- 'Content-Type' => 'application/json'
1092		- ),
1093		- 'body' => json_encode(array('channel' => $create_body['channel']['id'])),
1094		- 'timeout' => 15
1095		- ));
1096		- $can_create_channels = true;
1097	198	} else {
1098		- $create_error = $create_body['error'] ?? '';
1099		- // name_taken means we have permission but channel exists
1100		- $can_create_channels = ($create_error === 'name_taken' || (isset($create_body['ok']) && $create_body['ok']));
1101		-
1102		- // Check for missing scope errors
1103		- if ($create_error === 'missing_scope') {
1104		- $can_create_channels = false;
1105		- }
	199	+ error_log('Embedding generation failed for article content: ' . $article_content);
	200	+ set_transient('mxchat_admin_notice_error', 'Embedding generation failed. Please ensure your API key is correct and try again.', 30);
1106	201	}
1107	202
1108		- // Build result message
1109		- $results = array();
1110		- $results[] = sprintf(__('Workspace: %s', 'mxchat'), esc_html($team_name));
1111		- $results[] = sprintf(__('Bot: %s', 'mxchat'), esc_html($bot_name));
1112		- $results[] = '';
1113		- $results[] = ($can_read_channels ? '✓' : '✗') . ' ' . __('channels:read - List channels', 'mxchat');
1114		- $results[] = ($can_create_channels ? '✓' : '✗') . ' ' . __('channels:manage - Create channels', 'mxchat');
1115		-
1116		- $missing_scopes = array();
1117		- if (!$can_read_channels) $missing_scopes[] = 'channels:read';
1118		- if (!$can_create_channels) $missing_scopes[] = 'channels:manage';
1119		-
1120		- if (!empty($missing_scopes)) {
1121		- wp_send_json_error(array(
1122		- 'message' => implode("\n", $results),
1123		- 'missing_scopes' => $missing_scopes,
1124		- 'partial' => true
1125		- ));
1126		- } else {
1127		- wp_send_json_success(array(
1128		- 'message' => implode("\n", $results)
1129		- ));
1130		- }
	203	+ // Redirect after setting the transient
	204	+ wp_safe_redirect(esc_url(admin_url('admin.php?page=mxchat-prompts')));
	205	+ exit;
1131	206	}
1132	207
1133	208	public function mxchat_display_admin_notice() {
1134	209	// Success notice
		@@ -1135,9 +210,9 @@
1135	210	if ($message = get_transient('mxchat_admin_notice_success')) {
1136	211	?>
1137	212	<div class="notice notice-success is-dismissible">
1138	213	<p><?php echo esc_html($message); ?></p>
1139		- <button type="button" class="notice-dismiss"><span class="screen-reader-text"><?php echo esc_html__('Dismiss this notice.', 'mxchat'); ?></span></button>
	214	+ <button type="button" class="notice-dismiss"><span class="screen-reader-text">Dismiss this notice.</span></button>
1140	215	</div>
1141	216	<?php
1142	217	delete_transient('mxchat_admin_notice_success'); // Clear the transient after displaying
1143	218	}
		@@ -1146,9 +221,9 @@
1146	221	if ($message = get_transient('mxchat_admin_notice_error')) {
1147	222	?>
1148	223	<div class="notice notice-error is-dismissible">
1149	224	<p><?php echo esc_html($message); ?></p>
1150		- <button type="button" class="notice-dismiss"><span class="screen-reader-text"><?php echo esc_html__('Dismiss this notice.', 'mxchat'); ?></span></button>
	225	+ <button type="button" class="notice-dismiss"><span class="screen-reader-text">Dismiss this notice.</span></button>
1151	226	</div>
1152	227	<?php
1153	228	delete_transient('mxchat_admin_notice_error'); // Clear the transient after displaying
1154	229	}
		@@ -1153,5016 +228,530 @@
1153	228	delete_transient('mxchat_admin_notice_error'); // Clear the transient after displaying
1154	229	}
1155	230	}
1156	231
1157		-public function show_live_agent_disabled_banner() {
1158		- $show_disabled_notice = get_option('mxchat_show_live_agent_disabled_notice', false);
1159	232
1160		- if ($show_disabled_notice) {
1161		- ?>
1162		- <div class="mxchat-live-agent-disabled-notice" id="mxchat-disabled-notice">
1163		- <div class="mxchat-pro-notification">
1164		- <button type="button" class="mxchat-dismiss-btn" onclick="dismissLiveAgentNotice()" aria-label="Dismiss notification">
1165		- <svg width="16" height="16" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2">
1166		- <line x1="18" y1="6" x2="6" y2="18"></line>
1167		- <line x1="6" y1="6" x2="18" y2="18"></line>
1168		- </svg>
1169		- </button>
1170		- <div class="mxchat-live-agent-content">
1171		- <h3>🔧 Live Agent Integration Updated!</h3>
1172		- <p>We've temporarily disabled your Live Agent integration due to recent enhancements that have made it much better! You can easily turn it back on by going to <strong>Toolbar & Components → Live Agent Settings</strong> and reviewing the new configuration options.</p>
1173		- </div>
1174		- </div>
1175		- </div>
1176		- <?php
1177		- }
1178		-}
1179		-/**
1180		- * Render the Onboarding page. Delegates to the procedural renderer in
1181		- * includes/admin-onboarding-page.php. Wired to both `?page=mxchat-max`
1182		- * (legacy top-level URL) and `?page=mxchat-onboarding` (the canonical
1183		- * Onboarding submenu).
1184		- *
1185		- * When the user has dismissed onboarding and lands on `mxchat-max` (the
1186		- * legacy URL, since the Onboarding submenu has been removed), redirect to
1187		- * Settings instead — the page is "graduated" and we shouldn't dump them
1188		- * back onto it. They can still navigate here directly via the unhide link.
1189		- */
1190		-public function mxchat_create_dashboard_page() {
1191		- require_once plugin_dir_path(__FILE__) . 'admin-onboarding-page.php';
1192		-
1193		- $current = isset($_GET['page']) ? sanitize_key($_GET['page']) : '';
1194		- if ($current === 'mxchat-max' && function_exists('mxchat_onboarding_is_dismissed') && mxchat_onboarding_is_dismissed()) {
1195		- wp_safe_redirect(admin_url('admin.php?page=mxchat-settings'));
1196		- exit;
1197		- }
1198		-
1199		- if (function_exists('mxchat_render_onboarding_page')) {
1200		- mxchat_render_onboarding_page();
1201		- return;
1202		- }
1203		- // Defensive: if the include failed to load, fall back to the old Settings page
1204		- // so the top-level menu never lands on an empty screen.
1205		- $this->mxchat_create_admin_page();
1206		-}
1207		-
1208		-/**
1209		- * Hide the Onboarding submenu when the user has dismissed it (either
1210		- * manually or via auto-graduation). The page itself remains routable so
1211		- * the Settings "Show MxChat Onboarding again" link can navigate back to it.
1212		- */
1213		-public function mxchat_apply_onboarding_visibility() {
1214		- if (!function_exists('mxchat_onboarding_is_dismissed')) {
1215		- return;
1216		- }
1217		- if (mxchat_onboarding_is_dismissed()) {
1218		- // The first MxChat child is the same-slug-as-parent registration
1219		- // (slug 'mxchat-max', labelled "Onboarding") added in plan-d14e89.
1220		- // Remove it so the menu opens straight to Settings after dismiss.
1221		- remove_submenu_page('mxchat-max', 'mxchat-max');
1222		- }
1223		-}
1224		-
1225		-public function mxchat_create_admin_page() {
1226		- $this->add_live_agent_nonce();
1227		- $this->add_theme_migration_nonce();
1228		-
1229		- // Include and render the new sidebar-based settings page
1230		- require_once plugin_dir_path(__FILE__) . 'admin-settings-page.php';
1231		- mxchat_render_settings_page($this);
1232		-}
1233		-
1234		-public function dismiss_live_agent_notice() {
1235		- // Add debugging
1236		- //error_log('dismiss_live_agent_notice called');
1237		- //error_log('POST data: ' . print_r($_POST, true));
1238		-
1239		- // Verify nonce
1240		- if (!wp_verify_nonce($_POST['nonce'], 'dismiss_live_agent_notice')) {
1241		- //error_log('Nonce verification failed');
1242		- wp_die('Security check failed');
1243		- }
1244		-
1245		- // Remove the notice flag
1246		- $deleted = delete_option('mxchat_show_live_agent_disabled_notice');
1247		- //error_log('Option deleted: ' . ($deleted ? 'yes' : 'no'));
1248		-
1249		- wp_send_json_success();
1250		-}
1251		-public function add_live_agent_nonce() {
1252		- if (get_option('mxchat_show_live_agent_disabled_notice', false)) {
1253		- // Make sure your admin script is enqueued and localize the data
1254		- wp_localize_script('mxchat-admin-js', 'mxchatLiveAgent', array(
1255		- 'nonce' => wp_create_nonce('dismiss_live_agent_notice'),
1256		- 'ajaxurl' => admin_url('admin-ajax.php')
1257		- ));
1258		- }
1259		-}
1260		-
1261		-/**
1262		- * Show theme migration notice for Pro users with AI-generated themes
1263		- * Only shown once - dismissible and stored in options
1264		- */
1265		-public function show_theme_migration_banner() {
1266		- // Only show if Pro is activated
1267		- if (!$this->is_activated) {
1268		- return;
1269		- }
1270		-
1271		- // Check if notice should be shown
1272		- $show_notice = get_option('mxchat_show_theme_migration_notice', false);
1273		-
1274		- if ($show_notice) {
1275		- ?>
1276		- <div class="mxchat-theme-migration-notice" id="mxchat-theme-migration-notice">
1277		- <div class="mxchat-pro-notification">
1278		- <button type="button" class="mxchat-dismiss-btn" onclick="dismissThemeMigrationNotice()" aria-label="Dismiss notification">
1279		- <svg width="16" height="16" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2">
1280		- <line x1="18" y1="6" x2="6" y2="18"></line>
1281		- <line x1="6" y1="6" x2="18" y2="18"></line>
1282		- </svg>
1283		- </button>
1284		- <div class="mxchat-theme-migration-content">
1285		- <h3>🎨 AI Theme Migration Required</h3>
1286		- <p>If you're using an AI-generated chatbot theme, you'll need to migrate it to match the new CSS structure. Go to <strong>Theme Settings</strong>, select your theme from the sidebar, and click the <strong>Migrate</strong> button.</p>
1287		- </div>
1288		- </div>
1289		- </div>
1290		- <?php
1291		- }
1292		-}
1293		-
1294		-/**
1295		- * Dismiss theme migration notice via AJAX
1296		- */
1297		-public function dismiss_theme_migration_notice() {
1298		- // Verify nonce
1299		- if (!wp_verify_nonce($_POST['nonce'], 'dismiss_theme_migration_notice')) {
1300		- wp_die('Security check failed');
1301		- }
1302		-
1303		- // Remove the notice flag
1304		- delete_option('mxchat_show_theme_migration_notice');
1305		-
1306		- wp_send_json_success();
1307		-}
1308		-
1309		-/**
1310		- * Add nonce for theme migration notice dismiss
1311		- */
1312		-public function add_theme_migration_nonce() {
1313		- if (get_option('mxchat_show_theme_migration_notice', false) && $this->is_activated) {
1314		- wp_localize_script('mxchat-admin-js', 'mxchatThemeMigration', array(
1315		- 'nonce' => wp_create_nonce('dismiss_theme_migration_notice'),
1316		- 'ajaxurl' => admin_url('admin-ajax.php')
1317		- ));
1318		- }
1319		-}
1320		-
1321		-public function mxchat_create_transcripts_page() {
1322		- global $wpdb;
1323		- $table_name = $wpdb->prefix . 'mxchat_chat_transcripts';
1324		-
1325		- // Get basic stats
1326		- $total_chats = $wpdb->get_var("SELECT COUNT(DISTINCT session_id) FROM $table_name") ?: 0;
1327		- $total_messages = $wpdb->get_var("SELECT COUNT(*) FROM $table_name") ?: 0;
1328		-
1329		- // Count unique users with detailed breakdown
1330		- $total_users = $wpdb->get_var("
1331		- SELECT COUNT(DISTINCT
1332		- CASE
1333		- WHEN user_email != '' AND user_email IS NOT NULL THEN user_email
1334		- WHEN user_id != 0 THEN CONCAT('user_', user_id)
1335		- WHEN user_identifier NOT LIKE 'Tech-Savvy User'
1336		- AND user_identifier NOT LIKE 'Detail-Oriented User'
1337		- AND user_identifier NOT LIKE 'Language Learner'
1338		- AND user_identifier NOT LIKE 'Casual Browser'
1339		- AND user_identifier NOT LIKE 'Policy Enforcer'
1340		- AND user_identifier NOT LIKE 'Researcher'
1341		- AND user_identifier NOT LIKE 'Loyalty Member'
1342		- AND user_identifier NOT LIKE 'Gift Buyer'
1343		- AND user_identifier NOT LIKE 'Parent or Caregiver'
1344		- THEN user_identifier
1345		- ELSE session_id
1346		- END
1347		- )
1348		- FROM $table_name
1349		- WHERE role != 'assistant'
1350		- ");
1351		-
1352		- // Get user type breakdown
1353		- $registered_users = $wpdb->get_var("
1354		- SELECT COUNT(DISTINCT user_email)
1355		- FROM $table_name
1356		- WHERE user_email != '' AND user_email IS NOT NULL
1357		- ");
1358		-
1359		- $guest_users = $wpdb->get_var("
1360		- SELECT COUNT(DISTINCT user_identifier)
1361		- FROM $table_name
1362		- WHERE (user_email = '' OR user_email IS NULL)
1363		- AND role != 'assistant'
1364		- AND user_identifier NOT LIKE 'Tech-Savvy User'
1365		- AND user_identifier NOT LIKE 'Detail-Oriented User'
1366		- AND user_identifier NOT LIKE 'Language Learner'
1367		- AND user_identifier NOT LIKE 'Casual Browser'
1368		- AND user_identifier NOT LIKE 'Policy Enforcer'
1369		- AND user_identifier NOT LIKE 'Researcher'
1370		- AND user_identifier NOT LIKE 'Loyalty Member'
1371		- AND user_identifier NOT LIKE 'Gift Buyer'
1372		- AND user_identifier NOT LIKE 'Parent or Caregiver'
1373		- ");
1374		-
1375		- // Get agent test messages count
1376		- $agent_tests = $wpdb->get_var("
1377		- SELECT COUNT(DISTINCT session_id)
1378		- FROM $table_name
1379		- WHERE user_identifier IN (
1380		- 'Tech-Savvy User',
1381		- 'Detail-Oriented User',
1382		- 'Language Learner',
1383		- 'Casual Browser',
1384		- 'Policy Enforcer',
1385		- 'Researcher',
1386		- 'Loyalty Member',
1387		- 'Gift Buyer',
1388		- 'Parent or Caregiver'
1389		- )
1390		- ");
1391		- // Get activity metrics
1392		- $today_chats = $wpdb->get_var("
1393		- SELECT COUNT(DISTINCT session_id)
1394		- FROM $table_name
1395		- WHERE DATE(timestamp) = CURDATE()
1396		- ");
1397		-
1398		- $week_chats = $wpdb->get_var("
1399		- SELECT COUNT(DISTINCT session_id)
1400		- FROM $table_name
1401		- WHERE timestamp >= DATE_SUB(NOW(), INTERVAL 7 DAY)
1402		- ");
1403		-
1404		- $month_chats = $wpdb->get_var("
1405		- SELECT COUNT(DISTINCT session_id)
1406		- FROM $table_name
1407		- WHERE timestamp >= DATE_SUB(NOW(), INTERVAL 30 DAY)
1408		- ");
1409		-
1410		- // Get daily chat data for last 7 days
1411		- $daily_stats = $wpdb->get_results("
1412		- SELECT
1413		- DATE(timestamp) as date,
1414		- COUNT(DISTINCT session_id) as chats,
1415		- COUNT(*) as messages
1416		- FROM $table_name
1417		- WHERE timestamp >= DATE_SUB(NOW(), INTERVAL 7 DAY)
1418		- GROUP BY DATE(timestamp)
1419		- ORDER BY date ASC
1420		- ");
1421		-
1422		- // Get average messages per chat
1423		- $avg_messages = $wpdb->get_var("
1424		- SELECT AVG(message_count)
1425		- FROM (
1426		- SELECT session_id, COUNT(*) as message_count
1427		- FROM $table_name
1428		- GROUP BY session_id
1429		- ) as chat_counts
1430		- ");
1431		- $avg_messages = $avg_messages ? round($avg_messages, 1) : 0;
1432		-
1433		- // Get busiest hour
1434		- $busiest_hour = $wpdb->get_row("
1435		- SELECT HOUR(timestamp) as hour, COUNT(DISTINCT session_id) as chat_count
1436		- FROM $table_name
1437		- GROUP BY HOUR(timestamp)
1438		- ORDER BY chat_count DESC
1439		- LIMIT 1
1440		- ");
1441		-
1442		- // Prepare chart data
1443		- $chart_labels = array();
1444		- $chart_chats = array();
1445		- $chart_messages = array();
1446		-
1447		- // Fill last 7 days with data
1448		- for ($i = 6; $i >= 0; $i--) {
1449		- $date = date('Y-m-d', strtotime("-$i days"));
1450		- $day_name = date('D', strtotime("-$i days"));
1451		- $chart_labels[] = $day_name;
1452		-
1453		- $found = false;
1454		- foreach ($daily_stats as $stat) {
1455		- if ($stat->date === $date) {
1456		- $chart_chats[] = (int)$stat->chats;
1457		- $chart_messages[] = (int)$stat->messages;
1458		- $found = true;
1459		- break;
1460		- }
	233	+ public function mxchat_handle_delete_prompt() {
	234	+ // Sanitize and validate nonce using wp_unslash and sanitize_text_field
	235	+ $nonce = isset($_GET['_wpnonce']) ? sanitize_text_field(wp_unslash($_GET['_wpnonce'])) : '';
	236	+ if (empty($nonce) || !wp_verify_nonce($nonce, 'mxchat_delete_prompt_nonce')) {
	237	+ wp_die('Nonce verification failed.');
1461	238	}
1462		- if (!$found) {
1463		- $chart_chats[] = 0;
1464		- $chart_messages[] = 0;
1465		- }
1466		- }
1467	239
1468		- // Satisfaction rating rollup — last 30 days, grouped by bot (plan-a5b006).
1469		- $satisfaction_stats = $this->get_satisfaction_rating_stats(30);
1470		-
1471		- // Prepare page data for the template
1472		- $page_data = array(
1473		- 'total_chats' => $total_chats,
1474		- 'total_messages' => $total_messages,
1475		- 'total_users' => $total_users,
1476		- 'registered_users' => $registered_users,
1477		- 'guest_users' => $guest_users,
1478		- 'agent_tests' => $agent_tests,
1479		- 'today_chats' => $today_chats,
1480		- 'week_chats' => $week_chats,
1481		- 'month_chats' => $month_chats,
1482		- 'avg_messages' => $avg_messages,
1483		- 'busiest_hour' => $busiest_hour,
1484		- 'chart_labels' => $chart_labels,
1485		- 'chart_chats' => $chart_chats,
1486		- 'chart_messages' => $chart_messages,
1487		- 'satisfaction_stats' => $satisfaction_stats,
1488		- );
1489		-
1490		- // Include and render the new template
1491		- require_once plugin_dir_path(__FILE__) . 'admin-transcripts-page.php';
1492		- mxchat_render_transcripts_page($this, $page_data);
1493		-}
1494		-
1495		-/**
1496		- * Per-bot satisfaction rating rollup over the last $days days. Used by the
1497		- * Satisfaction card on the Transcripts dashboard (plan-a5b006).
1498		- *
1499		- * @param int $days Window in days.
1500		- * @return array Each entry: ['bot_id', 'total', 'positive', 'negative', 'positive_pct', 'negative_pct'].
1501		- */
1502		-public function get_satisfaction_rating_stats($days = 30) {
1503		- global $wpdb;
1504		- $table = $wpdb->prefix . 'mxchat_session_ratings';
1505		- if ($wpdb->get_var($wpdb->prepare("SHOW TABLES LIKE %s", $table)) !== $table) {
1506		- return array();
1507		- }
1508		- $days = max(1, (int) $days);
1509		- $rows = $wpdb->get_results($wpdb->prepare(
1510		- "SELECT bot_id,
1511		- COUNT(*) AS total,
1512		- SUM(CASE WHEN rating_value = 1 THEN 1 ELSE 0 END) AS positive,
1513		- SUM(CASE WHEN rating_value = -1 THEN 1 ELSE 0 END) AS negative
1514		- FROM {$table}
1515		- WHERE created_at >= DATE_SUB(NOW(), INTERVAL %d DAY)
1516		- GROUP BY bot_id
1517		- ORDER BY total DESC",
1518		- $days
1519		- ));
1520		- $out = array();
1521		- foreach ((array) $rows as $row) {
1522		- $total = (int) $row->total;
1523		- $positive = (int) $row->positive;
1524		- $negative = (int) $row->negative;
1525		- $out[] = array(
1526		- 'bot_id' => $row->bot_id ?: 'default',
1527		- 'total' => $total,
1528		- 'positive' => $positive,
1529		- 'negative' => $negative,
1530		- 'positive_pct' => $total > 0 ? (int) round(($positive / $total) * 100) : 0,
1531		- 'negative_pct' => $total > 0 ? (int) round(($negative / $total) * 100) : 0,
1532		- );
1533		- }
1534		- return $out;
1535		-}
1536		-
1537		-/**
1538		- * Get chart data for transcripts page
1539		- * Used by both page render and script localization
1540		- *
1541		- * @return array Chart data with labels, chats, and messages arrays
1542		- */
1543		-private function get_transcripts_chart_data() {
1544		- global $wpdb;
1545		- $table_name = $wpdb->prefix . 'mxchat_chat_transcripts';
1546		-
1547		- // Get daily chat data for last 7 days - same query as mxchat_transcripts_page()
1548		- $daily_stats = $wpdb->get_results("
1549		- SELECT
1550		- DATE(timestamp) as date,
1551		- COUNT(DISTINCT session_id) as chats,
1552		- COUNT(*) as messages
1553		- FROM $table_name
1554		- WHERE timestamp >= DATE_SUB(NOW(), INTERVAL 7 DAY)
1555		- GROUP BY DATE(timestamp)
1556		- ORDER BY date ASC
1557		- ");
1558		-
1559		- // Prepare chart data
1560		- $chart_labels = array();
1561		- $chart_chats = array();
1562		- $chart_messages = array();
1563		-
1564		- // Fill last 7 days with data - same logic as mxchat_transcripts_page()
1565		- for ($i = 6; $i >= 0; $i--) {
1566		- $date = date('Y-m-d', strtotime("-$i days"));
1567		- $day_name = date('D', strtotime("-$i days"));
1568		- $chart_labels[] = $day_name;
1569		-
1570		- $found = false;
1571		- if ($daily_stats) {
1572		- foreach ($daily_stats as $stat) {
1573		- if ($stat->date === $date) {
1574		- $chart_chats[] = (int)$stat->chats;
1575		- $chart_messages[] = (int)$stat->messages;
1576		- $found = true;
1577		- break;
1578		- }
1579		- }
	240	+ // Check user permissions
	241	+ if (!current_user_can('manage_options')) {
	242	+ wp_die('You do not have sufficient permissions to delete prompts.');
1580	243	}
1581		- if (!$found) {
1582		- $chart_chats[] = 0;
1583		- $chart_messages[] = 0;
1584		- }
1585		- }
1586	244
1587		- return array(
1588		- 'labels' => $chart_labels,
1589		- 'chats' => $chart_chats,
1590		- 'messages' => $chart_messages
1591		- );
1592		-}
1593		-
1594		-public function mxchat_transcripts_notification_section_callback() {
1595		- echo '<p>' . esc_html__('Configure email notifications for new chat transcripts. You will receive an email notification when a new chat session begins.', 'mxchat') . '</p>';
1596		-}
1597		-public function mxchat_enable_notifications_callback() {
1598		- $options = get_option('mxchat_transcripts_options', array());
1599		- $enabled = isset($options['mxchat_enable_notifications']) ? $options['mxchat_enable_notifications'] : 0;
1600		- ?>
1601		- <label for="mxchat_enable_notifications">
1602		- <input type="checkbox" id="mxchat_enable_notifications"
1603		- name="mxchat_transcripts_options[mxchat_enable_notifications]"
1604		- value="1" <?php checked(1, $enabled); ?>>
1605		- <?php esc_html_e('Send email notification when a new chat session starts', 'mxchat'); ?>
1606		- </label>
1607		- <p class="description">
1608		- <?php esc_html_e('Enable this option to receive email notifications for new chat sessions.', 'mxchat'); ?>
1609		- </p>
1610		- <?php
1611		-}
1612		-public function mxchat_notification_email_callback() {
1613		- $options = get_option('mxchat_transcripts_options', array());
1614		- $email = isset($options['mxchat_notification_email']) ? $options['mxchat_notification_email'] : get_option('admin_email');
1615		- ?>
1616		- <input type="email" id="mxchat_notification_email"
1617		- name="mxchat_transcripts_options[mxchat_notification_email]"
1618		- value="<?php echo esc_attr($email); ?>"
1619		- class="regular-text">
1620		- <p class="description">
1621		- <?php esc_html_e('Enter the email address where notifications should be sent. Defaults to the admin email address.', 'mxchat'); ?>
1622		- </p>
1623		- <?php
1624		-}
1625		-
1626		-public function mxchat_auto_delete_transcripts_callback() {
1627		- $options = get_option('mxchat_transcripts_options', array());
1628		- $interval = isset($options['mxchat_auto_delete_transcripts']) ? $options['mxchat_auto_delete_transcripts'] : 'never';
1629		- ?>
1630		- <select id="mxchat_auto_delete_transcripts"
1631		- name="mxchat_transcripts_options[mxchat_auto_delete_transcripts]">
1632		- <option value="never" <?php selected($interval, 'never'); ?>>
1633		- <?php esc_html_e('Never (Keep All Transcripts)', 'mxchat'); ?>
1634		- </option>
1635		- <option value="1week" <?php selected($interval, '1week'); ?>>
1636		- <?php esc_html_e('After 1 Week', 'mxchat'); ?>
1637		- </option>
1638		- <option value="2weeks" <?php selected($interval, '2weeks'); ?>>
1639		- <?php esc_html_e('After 2 Weeks', 'mxchat'); ?>
1640		- </option>
1641		- <option value="1month" <?php selected($interval, '1month'); ?>>
1642		- <?php esc_html_e('After 1 Month', 'mxchat'); ?>
1643		- </option>
1644		- </select>
1645		- <p class="description">
1646		- <?php esc_html_e('Automatically delete old chat transcripts after the selected time period. This helps manage database size and privacy.', 'mxchat'); ?>
1647		- </p>
1648		- <?php
1649		-}
1650		-
1651		-/**
1652		- * Custom retention-days input. When > 0 it overrides the bucket dropdown above
1653		- * and deletes transcripts older than the given number of days. Set to 0 to fall
1654		- * back to the dropdown (or "Never" if the dropdown is also Never).
1655		- *
1656		- * Devs can override the final day count via the `mxchat_transcript_retention_days`
1657		- * filter — runs in `cleanup_old_transcripts()` after this option is read.
1658		- *
1659		- * (plan-mxchat-20260509-9b80b1)
1660		- */
1661		-public function mxchat_retention_days_callback() {
1662		- $options = get_option('mxchat_transcripts_options', array());
1663		- $days = isset($options['mxchat_retention_days']) ? (int) $options['mxchat_retention_days'] : 0;
1664		- ?>
1665		- <input type="number"
1666		- id="mxchat_retention_days"
1667		- name="mxchat_transcripts_options[mxchat_retention_days]"
1668		- value="<?php echo esc_attr($days); ?>"
1669		- min="0"
1670		- max="3650"
1671		- step="1"
1672		- style="width: 90px;" />
1673		- <p class="description">
1674		- <?php esc_html_e('Number of days to retain transcripts. When set to a value greater than 0, this overrides the dropdown above. Set to 0 to use the dropdown. Maximum 3650 (10 years). A daily wp-cron task removes anything older, cascading to translations and click-tracking rows.', 'mxchat'); ?>
1675		- <br>
1676		- <code>apply_filters( 'mxchat_transcript_retention_days', $days )</code>
1677		- <?php esc_html_e('lets developers override the final day count programmatically.', 'mxchat'); ?>
1678		- </p>
1679		- <?php
1680		-}
1681		-
1682		-public function mxchat_auto_email_transcript_callback() {
1683		- $options = get_option('mxchat_transcripts_options', array());
1684		- $enabled = isset($options['mxchat_auto_email_transcript_enabled']) ? $options['mxchat_auto_email_transcript_enabled'] : 0;
1685		- $delay = isset($options['mxchat_auto_email_transcript_delay']) ? $options['mxchat_auto_email_transcript_delay'] : '30';
1686		- $require_contact = isset($options['mxchat_auto_email_transcript_require_contact']) ? $options['mxchat_auto_email_transcript_require_contact'] : 0;
1687		- ?>
1688		- <label>
1689		- <input type="checkbox"
1690		- id="mxchat_auto_email_transcript_enabled"
1691		- name="mxchat_transcripts_options[mxchat_auto_email_transcript_enabled]"
1692		- value="1"
1693		- <?php checked($enabled, 1); ?>>
1694		- <?php esc_html_e('Enable Auto-Email of Full Transcript', 'mxchat'); ?>
1695		- </label>
1696		- <br><br>
1697		- <label for="mxchat_auto_email_transcript_delay">
1698		- <?php esc_html_e('Send transcript after:', 'mxchat'); ?>
1699		- </label>
1700		- <select id="mxchat_auto_email_transcript_delay"
1701		- name="mxchat_transcripts_options[mxchat_auto_email_transcript_delay]">
1702		- <option value="15" <?php selected($delay, '15'); ?>>
1703		- <?php esc_html_e('15 minutes', 'mxchat'); ?>
1704		- </option>
1705		- <option value="30" <?php selected($delay, '30'); ?>>
1706		- <?php esc_html_e('30 minutes', 'mxchat'); ?>
1707		- </option>
1708		- <option value="60" <?php selected($delay, '60'); ?>>
1709		- <?php esc_html_e('1 hour', 'mxchat'); ?>
1710		- </option>
1711		- </select>
1712		- <br><br>
1713		- <label>
1714		- <input type="checkbox"
1715		- id="mxchat_auto_email_transcript_require_contact"
1716		- name="mxchat_transcripts_options[mxchat_auto_email_transcript_require_contact]"
1717		- value="1"
1718		- <?php checked($require_contact, 1); ?>>
1719		- <?php esc_html_e('Only send if visitor provided contact info', 'mxchat'); ?>
1720		- </label>
1721		- <p class="description">
1722		- <?php esc_html_e('Automatically email the full transcript as a .txt file after the specified time has passed since the last user message. The scheduled email will be cancelled if a new message is received.', 'mxchat'); ?>
1723		- <br>
1724		- <?php esc_html_e('When "Only send if visitor provided contact info" is enabled, transcripts will only be emailed if the visitor shared an email address or phone number (including WhatsApp) in the chat.', 'mxchat'); ?>
1725		- </p>
1726		- <?php
1727		-}
1728		-
1729		-
1730		-
1731		-public function sanitize_transcripts_options($input) {
1732		- $sanitized = array();
1733		-
1734		- $sanitized['mxchat_enable_notifications'] = isset($input['mxchat_enable_notifications']) ? 1 : 0;
1735		-
1736		- if (isset($input['mxchat_notification_email'])) {
1737		- $sanitized['mxchat_notification_email'] = sanitize_email($input['mxchat_notification_email']);
1738		- if (!is_email($sanitized['mxchat_notification_email'])) {
1739		- add_settings_error(
1740		- 'mxchat_transcripts_options',
1741		- 'invalid_email',
1742		- __('Please enter a valid email address for notifications.', 'mxchat'),
1743		- 'error'
1744		- );
1745		- $sanitized['mxchat_notification_email'] = get_option('admin_email');
	245	+ // Sanitize and validate the 'id' parameter
	246	+ $id = isset($_GET['id']) ? intval($_GET['id']) : 0;
	247	+ if ($id <= 0) {
	248	+ wp_die('Invalid prompt ID.');
1746	249	}
1747		- }
1748	250
1749		- // Sanitize auto-delete setting
1750		- $valid_intervals = array('never', '1week', '2weeks', '1month');
1751		- if (isset($input['mxchat_auto_delete_transcripts'])) {
1752		- $sanitized['mxchat_auto_delete_transcripts'] = in_array($input['mxchat_auto_delete_transcripts'], $valid_intervals)
1753		- ? $input['mxchat_auto_delete_transcripts']
1754		- : 'never';
1755		- } else {
1756		- $sanitized['mxchat_auto_delete_transcripts'] = 'never';
1757		- }
	251	+ global $wpdb;
	252	+ $table_name = $wpdb->prefix . 'mxchat_system_prompt_content';
1758	253
1759		- // Sanitize custom retention-days override (plan-9b80b1).
1760		- if (isset($input['mxchat_retention_days'])) {
1761		- $days = (int) $input['mxchat_retention_days'];
1762		- $sanitized['mxchat_retention_days'] = max(0, min(3650, $days));
1763		- } else {
1764		- $sanitized['mxchat_retention_days'] = 0;
1765		- }
	254	+ // Clear relevant cache before deletion
	255	+ $cache_key = 'prompt_' . $id;
	256	+ wp_cache_delete($cache_key, 'mxchat_prompts');
1766	257
1767		- // Get old values to check if auto-delete or retention-days changed.
1768		- $old_options = get_option('mxchat_transcripts_options');
1769		- $old_interval = isset($old_options['mxchat_auto_delete_transcripts']) ? $old_options['mxchat_auto_delete_transcripts'] : 'never';
1770		- $old_retention = isset($old_options['mxchat_retention_days']) ? (int) $old_options['mxchat_retention_days'] : 0;
	258	+ // Delete the record using a prepared statement
	259	+ $deleted = $wpdb->delete($table_name, array('id' => $id), array('%d'));
1771	260
1772		- // If either setting changed, reschedule the cron job. The schedule_transcript_cleanup
1773		- // helper now treats "any active retention" (dropdown != never OR custom days > 0) as a
1774		- // reason to keep the daily cron registered.
1775		- $interval_changed = ($old_interval !== $sanitized['mxchat_auto_delete_transcripts']);
1776		- $retention_changed = ($old_retention !== $sanitized['mxchat_retention_days']);
1777		- if ($interval_changed || $retention_changed) {
1778		- $any_active = ($sanitized['mxchat_auto_delete_transcripts'] !== 'never') || ($sanitized['mxchat_retention_days'] > 0);
1779		- $this->schedule_transcript_cleanup($any_active ? 'active' : 'never');
1780		- }
1781		-
1782		- // Sanitize auto-email transcript settings
1783		- $sanitized['mxchat_auto_email_transcript_enabled'] = isset($input['mxchat_auto_email_transcript_enabled']) ? 1 : 0;
1784		-
1785		- $valid_delays = array('15', '30', '60');
1786		- if (isset($input['mxchat_auto_email_transcript_delay'])) {
1787		- $sanitized['mxchat_auto_email_transcript_delay'] = in_array($input['mxchat_auto_email_transcript_delay'], $valid_delays)
1788		- ? $input['mxchat_auto_email_transcript_delay']
1789		- : '30';
1790		- } else {
1791		- $sanitized['mxchat_auto_email_transcript_delay'] = '30';
1792		- }
1793		-
1794		- // Sanitize require contact info setting
1795		- $sanitized['mxchat_auto_email_transcript_require_contact'] = isset($input['mxchat_auto_email_transcript_require_contact']) ? 1 : 0;
1796		-
1797		- return $sanitized;
1798		-}
1799		-
1800		-/**
1801		- * Schedule or unschedule the transcript cleanup cron job
1802		- */
1803		-public function schedule_transcript_cleanup($interval) {
1804		- // Clear any existing scheduled event
1805		- $timestamp = wp_next_scheduled('mxchat_cleanup_old_transcripts');
1806		- if ($timestamp) {
1807		- wp_unschedule_event($timestamp, 'mxchat_cleanup_old_transcripts');
1808		- }
1809		-
1810		- // Schedule new event whenever retention is active. "active" is the canonical
1811		- // value passed by sanitize_transcripts_options when either the dropdown != never
1812		- // OR the custom retention-days > 0; "never" turns the cron off. Any other value
1813		- // (the legacy "1week" / "2weeks" / "1month" strings) is also treated as active.
1814		- if ($interval !== 'never') {
1815		- // Schedule to run daily at 3 AM
1816		- $next_run = strtotime('tomorrow 3:00 AM');
1817		- wp_schedule_event($next_run, 'daily', 'mxchat_cleanup_old_transcripts');
1818		- }
1819		-}
1820		-
1821		-/**
1822		- * Self-heal guard: keep the cleanup cron in sync with the retention setting.
1823		- *
1824		- * Runs on admin_init. Cost when nothing is wrong: one get_option() (cached) and
1825		- * one wp_next_scheduled() (reads the cached cron option) — no writes. It only
1826		- * schedules when retention is active but the event is missing, and only
1827		- * unschedules when retention is off but the event survived. Both directions
1828		- * reuse schedule_transcript_cleanup() so there is exactly one scheduling path.
1829		- * Legacy dropdown values (1week/2weeks/1month) count as active, matching the
1830		- * helper's own semantics. Deliberately not gated on DISABLE_WP_CRON: scheduling
1831		- * writes the cron option regardless of how cron is executed, so a server-side
1832		- * cron runner still picks the event up.
1833		- */
1834		-public function ensure_transcript_cleanup_scheduled() {
1835		- $options = get_option('mxchat_transcripts_options', array());
1836		- $interval = isset($options['mxchat_auto_delete_transcripts']) ? $options['mxchat_auto_delete_transcripts'] : 'never';
1837		- $days = isset($options['mxchat_retention_days']) ? (int) $options['mxchat_retention_days'] : 0;
1838		- $active = ($interval !== 'never') || ($days > 0);
1839		- $scheduled = (bool) wp_next_scheduled('mxchat_cleanup_old_transcripts');
1840		-
1841		- if ($active && !$scheduled) {
1842		- $this->schedule_transcript_cleanup('active');
1843		- } elseif (!$active && $scheduled) {
1844		- $this->schedule_transcript_cleanup('never');
1845		- }
1846		-}
1847		-
1848		-/**
1849		- * Delete old transcripts based on the configured interval
1850		- */
1851		-public function cleanup_old_transcripts() {
1852		- $options = get_option('mxchat_transcripts_options', array());
1853		- $interval = isset($options['mxchat_auto_delete_transcripts']) ? $options['mxchat_auto_delete_transcripts'] : 'never';
1854		- $custom_days = isset($options['mxchat_retention_days']) ? (int) $options['mxchat_retention_days'] : 0;
1855		-
1856		- // Custom retention-days (plan-9b80b1) takes precedence over the bucket dropdown.
1857		- $days = 0;
1858		- if ($custom_days > 0) {
1859		- $days = $custom_days;
1860		- } else {
1861		- switch ($interval) {
1862		- case '1week': $days = 7; break;
1863		- case '2weeks': $days = 14; break;
1864		- case '1month': $days = 30; break;
1865		- case 'never':
1866		- default:
1867		- $days = 0;
	261	+ if ($deleted !== false) {
	262	+ // Optionally, clear a general cache if you have one
	263	+ wp_cache_delete('all_prompts', 'mxchat_prompts');
1868	264	}
1869		- }
1870	265
1871		- // Devs can override the final day count programmatically.
1872		- $days = (int) apply_filters('mxchat_transcript_retention_days', $days);
	266	+ // Redirect to the prompts page with a success message
	267	+ $redirect_url = add_query_arg(array(
	268	+ 'page' => 'mxchat-prompts',
	269	+ 'deleted' => 'true'
	270	+ ), admin_url('admin.php'));
1873	271
1874		- if ($days <= 0) {
1875		- return; // Retention disabled — bail.
	272	+ wp_safe_redirect($redirect_url);
	273	+ exit;
1876	274	}
1877	275
1878		- global $wpdb;
1879		- $transcripts_table = $wpdb->prefix . 'mxchat_chat_transcripts';
1880		- $translations_table = $wpdb->prefix . 'mxchat_transcript_translations';
1881		- $url_clicks_table = $wpdb->prefix . 'mxchat_url_clicks';
1882	276
1883		- // Defensive: if the main table doesn't exist (fresh-ish install), bail.
1884		- if ($wpdb->get_var($wpdb->prepare("SHOW TABLES LIKE %s", $transcripts_table)) !== $transcripts_table) {
1885		- return;
1886		- }
	277	+public function mxchat_create_admin_page() {
	278	+ ?>
	279	+ <div class="wrap mxchat-admin">
	280	+ <?php if (!$this->is_activated): ?>
	281	+ <div class="mxchat-pro-banner">
	282	+ <p>
	283	+ Want even more features such as a fully customizable theme, WooCommerce integration, dedicated support, and much more?
	284	+ <a href="https://mxchat.ai/" target="_blank">Upgrade to MxChat Pro today and get a special launch lifetime license for only $49.97!</a>
	285	+ </p>
	286	+ </div>
	287	+ <?php endif; ?>
	288	+ <h2 class="admin-title">Mx<span class="admin-emphasis">Chat</span></h2>
	289	+ <h2 class="nav-tab-wrapper">
	290	+ <a href="#chatbot" class="nav-tab nav-tab-active" data-tab="chatbot">Chatbot</a>
	291	+ <a href="#embed" class="nav-tab" data-tab="embed">Integrations</a>
	292	+ <a href="#theme" class="nav-tab" data-tab="theme">Theme</a>
	293	+ <a href="#general" class="nav-tab" data-tab="general">FAQ</a>
	294	+ </h2>
	295	+ <form method="post" action="options.php">
	296	+ <?php settings_fields('mxchat_option_group'); ?>
	297	+ <div id="chatbot" class="tab-content active">
	298	+ <?php do_settings_sections('mxchat-chatbot'); ?>
	299	+ </div>
	300	+ <div id="embed" class="tab-content">
	301	+ <?php do_settings_sections('mxchat-embed'); ?>
	302	+ </div>
	303	+ <div id="theme" class="tab-content">
	304	+ <?php do_settings_sections('mxchat-theme'); ?>
	305	+ </div>
	306	+ <div id="general" class="tab-content">
	307	+ <?php do_settings_sections('mxchat-general'); ?>
	308	+ <div class="faq-item">
	309	+ <h3>How do I add the chatbot to my site?</h3>
	310	+ <p>
	311	+ You can add the chatbot using the shortcode <code>[mxchat_chatbot floating="yes"]</code> or <code>[mxchat_chatbot floating="no"]</code>. For initial testing and styling, it's best to use the shortcode on a draft or non-public page. Once you’re ready to go live, enable the “Append Chat Widget to Body” option in the settings for site-wide integration (recommended) or add shortcode to the footer.
	312	+ </p>
	313	+ </div>
1887	314
1888		- $cutoff_date = gmdate('Y-m-d H:i:s', time() - ($days * DAY_IN_SECONDS));
1889	315
1890		- // Cap at 5000 session_ids per run so a large unattended site doesn't OOM —
1891		- // the cron will pick up where it left off on the next tick (within hours).
1892		- $batch_cap = (int) apply_filters('mxchat_transcript_retention_batch_cap', 5000);
	316	+ <div class="faq-item">
	317	+ <h3>Do I need an API key to use the chatbot?</h3>
	318	+ <p>
	319	+ Yes, you need an OpenAI API key to use this chatbot. You can obtain an API key from the <a href="https://platform.openai.com/signup" target="_blank" rel="noopener noreferrer">OpenAI website</a>. After signing up, you will need to add credits to your account, and generally, $5 in credits is enough to start using the chatbot.
	320	+ </p>
	321	+ </div>
1893	322
1894		- $sessions_to_delete = $wpdb->get_col(
1895		- $wpdb->prepare(
1896		- "SELECT DISTINCT session_id FROM {$transcripts_table} WHERE timestamp IS NOT NULL AND timestamp < %s LIMIT %d",
1897		- $cutoff_date,
1898		- $batch_cap
1899		- )
1900		- );
	323	+ <div class="faq-item">
	324	+ <h3>How does the chatbot use my content to generate responses?</h3>
	325	+ <p>
	326	+ The chatbot uses AI and vector embeddings to connect users with relevant information. When you submit content, it converts it into a mathematical format. When a user asks a question, the bot matches it to your stored content and generates a response based on relevance. For example, submitting "Our phone number is 910-123-4567" allows the bot to retrieve this information when asked about contact details. To ensure related information is provided together, submit it in one entry.
	327	+ </p>
	328	+ </div>
1901	329
1902		- if (empty($sessions_to_delete)) {
1903		- return;
1904		- }
	330	+ <div class="faq-item">
	331	+ <h3>Why does the chatbot sometimes make up links or information?</h3>
	332	+ <p>
	333	+ Occasionally, the chatbot may generate inaccurate links or information, known as "hallucinations." To minimize this, you can add system instructions to guide its behavior. For example, include an instruction like: "Only provide links you directly have access to or retrieve from the knowledge base. Do not make up links or information that you do not have direct access to." This helps the bot stay aligned with your content.
	334	+ </p>
	335	+ </div>
1905	336
1906		- $placeholders = implode(',', array_fill(0, count($sessions_to_delete), '%s'));
	337	+ <div class="faq-item">
	338	+ <h3>How does the Complianz integration work?</h3>
	339	+ <p>
	340	+ The Pro version offers direct integration with the Complianz GDPR plugin, making it easy to stay compliant with GDPR. If Complianz is enabled on your website, users must accept consent before the chatbot widget appears. The chatbot will only display once the user has accepted, ensuring compliance with data privacy regulations.
	341	+ </p>
	342	+ </div>
1907	343
1908		- // phpcs:disable WordPress.DB.PreparedSQL.InterpolatedNotPrepared
1909		- // $placeholders is a server-built list of literal "%s" tokens.
1910		- $deleted_transcripts = (int) $wpdb->query(
1911		- $wpdb->prepare(
1912		- "DELETE FROM {$transcripts_table} WHERE session_id IN ($placeholders)",
1913		- $sessions_to_delete
1914		- )
1915		- );
	344	+ <div class="faq-item">
	345	+ <h3>How does the WooCommerce integration work?</h3>
	346	+ <p>
	347	+ With WooCommerce integration, the chatbot automatically embeds new products and updates existing ones. For already-published products, you can click update or submit the product sitemap. The “Order History Access” setting allows the bot to access users' order history (requires login) and assist with order inquiries. To enable the “Add to Cart” feature, add this system instruction: “After discussing a product, ask if the user wants to add it to their cart. The user must say 'Add to cart' exactly.” Currently, this feature supports English only, with more languages coming soon.
	348	+ </p>
	349	+ </div>
1916	350
1917		- if ($wpdb->get_var($wpdb->prepare("SHOW TABLES LIKE %s", $translations_table)) === $translations_table) {
1918		- $wpdb->query(
1919		- $wpdb->prepare(
1920		- "DELETE FROM {$translations_table} WHERE session_id IN ($placeholders)",
1921		- $sessions_to_delete
1922		- )
1923		- );
1924		- }
	351	+ <div class="faq-item">
	352	+ <h3>Why isn't my chatbot responding as expected?</h3>
	353	+ <p>
	354	+ AI chatbots can sometimes behave in unexpected ways, especially if you're new to configuring AI for specific tasks. We're committed to helping you get the most out of your chatbot experience. While we’re working on comprehensive guides and video tutorials, our team is here to assist you directly. If your chatbot isn't delivering the responses you need, please don’t hesitate to <a href="https://mxchat.ai/contact/" target="_blank" rel="noopener noreferrer">contact us</a> for personalized support.
	355	+ </p>
	356	+ <p>
	357	+ We’re dedicated to your success and ready to guide you in aligning the AI's behavior to meet your goals.
	358	+ </p>
	359	+ </div>
1925	360
1926		- if ($wpdb->get_var($wpdb->prepare("SHOW TABLES LIKE %s", $url_clicks_table)) === $url_clicks_table) {
1927		- $wpdb->query(
1928		- $wpdb->prepare(
1929		- "DELETE FROM {$url_clicks_table} WHERE session_id IN ($placeholders)",
1930		- $sessions_to_delete
1931		- )
1932		- );
1933		- }
1934		- // phpcs:enable
1935	361
1936		- update_option('mxchat_retention_last_swept_at', time(), false);
1937		- update_option('mxchat_retention_rows_last_deleted', $deleted_transcripts, false);
1938		-}
1939	362
1940		-public function export_chat_transcripts() {
1941		- if (!current_user_can('manage_options')) {
1942		- wp_die(esc_html__('You do not have sufficient permissions to access this page.', 'mxchat'));
1943		- }
1944		-
1945		- check_ajax_referer('mxchat_export_transcripts', 'security');
1946		-
1947		- global $wpdb;
1948		- $table_name = $wpdb->prefix . 'mxchat_chat_transcripts';
1949		-
1950		- // Get all transcripts ordered by session and timestamp
1951		- $results = $wpdb->get_results(
1952		- "SELECT session_id, user_email, user_identifier, role, message, timestamp
1953		- FROM {$table_name}
1954		- ORDER BY session_id, timestamp ASC"
1955		- );
1956		-
1957		- if (empty($results)) {
1958		- wp_send_json_error(array('message' => 'No transcripts found.'));
1959		- wp_die();
1960		- }
1961		-
1962		- // Set headers for CSV download
1963		- header('Content-Type: text/csv');
1964		- header('Content-Disposition: attachment; filename="chat-transcripts-' . date('Y-m-d') . '.csv"');
1965		- header('Pragma: no-cache');
1966		- header('Expires: 0');
1967		-
1968		- // Create output stream
1969		- $output = fopen('php://output', 'w');
1970		-
1971		- // Add UTF-8 BOM for proper Excel encoding
1972		- fputs($output, "\xEF\xBB\xBF");
1973		-
1974		- // Add CSV headers
1975		- fputcsv($output, array(
1976		- 'Session ID',
1977		- 'Email',
1978		- 'User Identifier',
1979		- 'Role',
1980		- 'Message',
1981		- 'Timestamp'
1982		- ));
1983		-
1984		- // Add data rows
1985		- foreach ($results as $row) {
1986		- fputcsv($output, array(
1987		- $row->session_id,
1988		- $row->user_email,
1989		- $row->user_identifier,
1990		- $row->role,
1991		- $row->message,
1992		- $row->timestamp
1993		- ));
1994		- }
1995		-
1996		- fclose($output);
1997		- wp_die();
	363	+ </div>
	364	+ <?php submit_button(); ?>
	365	+ </form>
	366	+ </div>
	367	+ <?php
1998	368	}
1999	369
2000		-// ============================================================================
2001		-// Leads tab (inside Transcripts)
2002		-//
2003		-// Leads are derived from existing data — no dedicated table. Primary source:
2004		-// wp_mxchat_chat_transcripts rows where user_email is populated. Secondary
2005		-// source: wp_options entries `mxchat_email_{session_id}` / `mxchat_name_{sid}`
2006		-// for "orphan" leads who submitted the pre-chat form but never chatted.
2007		-// ============================================================================
2008	370
2009		-/**
2010		- * Fetch leads: dedup-by-email rows, stats strip, and top pages in one call.
2011		- */
2012		-public function mxchat_fetch_leads() {
2013		- if (!current_user_can('manage_options')) {
2014		- wp_send_json_error(['message' => 'Insufficient permissions']);
2015		- wp_die();
2016		- }
2017		-
2018		- global $wpdb;
2019		- $table = $wpdb->prefix . 'mxchat_chat_transcripts';
2020		-
2021		- $page = isset($_POST['page']) ? max(1, absint($_POST['page'])) : 1;
2022		- $per_page = isset($_POST['per_page']) ? min(100, max(10, absint($_POST['per_page']))) : 25;
2023		- $offset = ($page - 1) * $per_page;
2024		- $search = isset($_POST['search']) ? sanitize_text_field(wp_unslash($_POST['search'])) : '';
2025		- $date_range = isset($_POST['date_range']) ? sanitize_key($_POST['date_range']) : 'all';
2026		- $status = isset($_POST['status']) ? sanitize_key($_POST['status']) : 'all';
2027		- $page_filter = isset($_POST['page_url']) ? esc_url_raw(wp_unslash($_POST['page_url'])) : '';
2028		- $sort = isset($_POST['sort']) ? sanitize_key($_POST['sort']) : 'last_seen';
2029		- $sort_dir = (isset($_POST['sort_dir']) && $_POST['sort_dir'] === 'asc') ? 'ASC' : 'DESC';
2030		-
2031		- $date_cutoff = self::mxchat_leads_date_cutoff($date_range);
2032		- $has_page_url_column = !empty($wpdb->get_results("SHOW COLUMNS FROM $table LIKE 'originating_page_url'"));
2033		-
2034		- // Base WHERE for transcripts leads.
2035		- $where_clauses = ["user_email IS NOT NULL", "user_email != ''"];
2036		- $where_params = [];
2037		-
2038		- if ($date_cutoff) {
2039		- $where_clauses[] = 'timestamp >= %s';
2040		- $where_params[] = $date_cutoff;
2041		- }
2042		- if ($page_filter && $has_page_url_column) {
2043		- $where_clauses[] = 'originating_page_url = %s';
2044		- $where_params[] = $page_filter;
2045		- }
2046		- if ($search !== '') {
2047		- $like = '%' . $wpdb->esc_like($search) . '%';
2048		- $where_clauses[] = '(user_email LIKE %s OR user_name LIKE %s)';
2049		- $where_params[] = $like;
2050		- $where_params[] = $like;
2051		- }
2052		- $where_sql = 'WHERE ' . implode(' AND ', $where_clauses);
2053		-
2054		- // Aggregate query grouped by email.
2055		- $select_sql = $has_page_url_column
2056		- ? "SELECT user_email, MAX(timestamp) AS last_seen, MIN(timestamp) AS first_seen,
2057		- COUNT(DISTINCT session_id) AS conversation_count"
2058		- : "SELECT user_email, MAX(timestamp) AS last_seen, MIN(timestamp) AS first_seen,
2059		- COUNT(DISTINCT session_id) AS conversation_count";
2060		-
2061		- $order_column = in_array($sort, ['last_seen', 'conversation_count', 'first_seen'], true) ? $sort : 'last_seen';
2062		- $group_order_limit = " GROUP BY user_email ORDER BY {$order_column} {$sort_dir} LIMIT %d OFFSET %d";
2063		-
2064		- $transcripts_sql = $wpdb->prepare(
2065		- "{$select_sql} FROM {$table} {$where_sql}{$group_order_limit}",
2066		- array_merge($where_params, [$per_page, $offset])
2067		- );
2068		- $transcript_rows = $wpdb->get_results($transcripts_sql);
2069		-
2070		- // Count of unique transcript-based leads under the same filters.
2071		- $count_sql = $wpdb->prepare(
2072		- "SELECT COUNT(DISTINCT user_email) FROM {$table} {$where_sql}",
2073		- $where_params
2074		- );
2075		- $transcripts_lead_count = (int) $wpdb->get_var($count_sql);
2076		-
2077		- // Hydrate each row: name, latest_session_id, top page.
2078		- $leads = [];
2079		- foreach ($transcript_rows as $row) {
2080		- $detail = $has_page_url_column
2081		- ? $wpdb->get_row($wpdb->prepare(
2082		- "SELECT session_id, user_name, originating_page_url, originating_page_title
2083		- FROM {$table} WHERE user_email = %s ORDER BY timestamp DESC LIMIT 1",
2084		- $row->user_email
2085		- ))
2086		- : $wpdb->get_row($wpdb->prepare(
2087		- "SELECT session_id, user_name FROM {$table}
2088		- WHERE user_email = %s ORDER BY timestamp DESC LIMIT 1",
2089		- $row->user_email
2090		- ));
2091		-
2092		- $leads[] = [
2093		- 'email' => $row->user_email,
2094		- 'name' => isset($detail->user_name) ? (string) $detail->user_name : '',
2095		- 'conversation_count' => (int) $row->conversation_count,
2096		- 'last_seen' => $row->last_seen,
2097		- 'last_seen_display' => self::mxchat_leads_format_relative($row->last_seen),
2098		- 'first_seen' => $row->first_seen,
2099		- 'latest_session_id' => isset($detail->session_id) ? $detail->session_id : '',
2100		- 'top_page_url' => isset($detail->originating_page_url) ? $detail->originating_page_url : '',
2101		- 'top_page_title' => isset($detail->originating_page_title) ? $detail->originating_page_title : '',
2102		- 'is_orphan' => false,
2103		- 'status' => 'active',
2104		- ];
2105		- }
2106		-
2107		- // Non-transcript lead sources. Built once here, then filtered/merged based on the
2108		- // status filter below. Deduplication priority when the same email appears in multiple
2109		- // sources: transcripts > chat_deleted > orphan.
2110		- $transcripts_emails_seen = array_flip(array_map(
2111		- function ($r) { return strtolower($r['email']); },
2112		- $leads
2113		- ));
2114		-
2115		- // Chat-deleted leads: had a conversation that an admin removed. Preserved via
2116		- // mxchat_lead_del_* options, with timestamps so they respect date filters.
2117		- $chat_deleted_leads_all = [];
2118		- if ($status === 'all' || $status === 'chat_deleted') {
2119		- $chat_deleted_leads_all = self::mxchat_collect_chat_deleted_leads($search, $date_cutoff);
2120		- // Dedup: drop any chat_deleted row whose email is already in the transcripts set.
2121		- $chat_deleted_leads_all = array_values(array_filter(
2122		- $chat_deleted_leads_all,
2123		- function ($row) use ($transcripts_emails_seen) {
2124		- return !isset($transcripts_emails_seen[strtolower($row['email'])]);
2125		- }
2126		- ));
2127		- foreach ($chat_deleted_leads_all as $row) {
2128		- $transcripts_emails_seen[strtolower($row['email'])] = true;
	371	+ public function mxchat_create_transcripts_page() {
	372	+ ?>
	373	+ <div class="wrap mxchat-admin">
	374	+ <h2><?php esc_html_e('Chat Transcripts', 'mxchat'); ?></h2>
	375	+ <form id="mxchat-delete-form" method="post">
	376	+ <?php wp_nonce_field('mxchat_delete_chat_history', 'mxchat_delete_chat_nonce'); ?>
	377	+ <div class="mxchat-controls">
	378	+ <label for="mxchat-select-all-transcripts" class="mxchat-select-all-label">
	379	+ <input type="checkbox" id="mxchat-select-all-transcripts" /> <?php esc_html_e('Select All', 'mxchat'); ?>
	380	+ </label>
	381	+ <input type="submit" value="<?php esc_attr_e('Delete Selected', 'mxchat'); ?>" class="button button-primary delete-chats-button" />
	382	+ </div>
	383	+ <div id="mxchat-transcripts">
	384	+ <!-- Transcripts will be loaded here -->
	385	+ </div>
	386	+ </form>
	387	+ </div>
	388	+ <?php
2129	389	}
2130		- }
2131	390
2132		- // Orphans: pre-chat form captures with no conversation. No timestamp, so skipped
2133		- // when a date filter is active.
2134		- $orphan_leads_all = [];
2135		- if (($status === 'all' || $status === 'orphan') && !$date_cutoff && !$page_filter) {
2136		- $orphan_leads_all = self::mxchat_collect_orphan_leads($search);
2137		- $orphan_leads_all = array_values(array_filter(
2138		- $orphan_leads_all,
2139		- function ($row) use ($transcripts_emails_seen) {
2140		- return !isset($transcripts_emails_seen[strtolower($row['email'])]);
2141		- }
2142		- ));
2143		- }
2144	391
2145		- // Apply status filter to the transcripts-derived list.
2146		- if ($status === 'orphan' || $status === 'chat_deleted') {
2147		- $leads = [];
2148		- $transcripts_lead_count = 0;
2149		- }
2150	392
2151		- // Stitch the current page from the three buckets in priority order.
2152		- $total_count = $transcripts_lead_count + count($chat_deleted_leads_all) + count($orphan_leads_all);
2153		- $remaining_slots = $per_page - count($leads);
2154	393
2155		- if ($remaining_slots > 0 && !empty($chat_deleted_leads_all)) {
2156		- $start = max(0, ($page - 1) * $per_page - $transcripts_lead_count);
2157		- if ($start < count($chat_deleted_leads_all)) {
2158		- $leads = array_merge($leads, array_slice($chat_deleted_leads_all, $start, $remaining_slots));
2159		- $remaining_slots = $per_page - count($leads);
2160		- }
2161		- }
	394	+ public function mxchat_create_prompts_page() {
	395	+ global $wpdb;
	396	+ $table_name = $wpdb->prefix . 'mxchat_system_prompt_content';
2162	397
2163		- if ($remaining_slots > 0 && !empty($orphan_leads_all)) {
2164		- $before = $transcripts_lead_count + count($chat_deleted_leads_all);
2165		- $start = max(0, ($page - 1) * $per_page - $before);
2166		- if ($start < count($orphan_leads_all)) {
2167		- $leads = array_merge($leads, array_slice($orphan_leads_all, $start, $remaining_slots));
2168		- }
2169		- }
	398	+ // Verify the nonce before processing the request
	399	+ $nonce = isset($_GET['_wpnonce']) ? sanitize_text_field($_GET['_wpnonce']) : '';
2170	400
2171		- $total_pages = $per_page > 0 ? (int) ceil($total_count / $per_page) : 1;
2172		-
2173		- // Stats strip: always computed over full dataset, unaffected by filters.
2174		- $stats = self::mxchat_leads_stats($table, $has_page_url_column);
2175		-
2176		- // Top pages: top 5 by distinct emails captured.
2177		- $top_pages = [];
2178		- if ($has_page_url_column) {
2179		- $top_pages_rows = $wpdb->get_results(
2180		- "SELECT originating_page_url AS url,
2181		- MAX(originating_page_title) AS title,
2182		- COUNT(DISTINCT user_email) AS lead_count
2183		- FROM {$table}
2184		- WHERE user_email IS NOT NULL AND user_email != ''
2185		- AND originating_page_url IS NOT NULL AND originating_page_url != ''
2186		- GROUP BY originating_page_url
2187		- ORDER BY lead_count DESC, url ASC
2188		- LIMIT 5"
2189		- );
2190		- foreach ($top_pages_rows as $p) {
2191		- $top_pages[] = [
2192		- 'url' => $p->url,
2193		- 'title' => $p->title ?: $p->url,
2194		- 'lead_count' => (int) $p->lead_count,
2195		- ];
	401	+ if (!empty($nonce) && wp_verify_nonce($nonce, 'mxchat_prompts_search_nonce')) {
	402	+ // Sanitize input data
	403	+ $search_query = isset($_GET['search']) ? sanitize_text_field($_GET['search']) : '';
	404	+ $current_page = isset($_GET['paged']) ? absint($_GET['paged']) : 1;
	405	+ } else {
	406	+ $search_query = '';
	407	+ $current_page = 1;
2196	408	}
2197		- }
2198	409
2199		- wp_send_json([
2200		- 'success' => true,
2201		- 'leads' => $leads,
2202		- 'page' => $page,
2203		- 'per_page' => $per_page,
2204		- 'total_count' => $total_count,
2205		- 'total_pages' => $total_pages,
2206		- 'showing_start' => $total_count === 0 ? 0 : ($offset + 1),
2207		- 'showing_end' => min($offset + $per_page, $total_count),
2208		- 'stats' => $stats,
2209		- 'top_pages' => $top_pages,
2210		- ]);
2211		- wp_die();
2212		-}
	410	+ $per_page = 10;
2213	411
2214		-/**
2215		- * Delete one or more leads by email. Removes every transcripts row for that
2216		- * email and cleans up related wp_options (mxchat_email_{sid}, mxchat_name_{sid},
2217		- * mxchat_history_{sid}) and any orphan option entries matching the email.
2218		- */
2219		-public function mxchat_delete_leads() {
2220		- if (!current_user_can('manage_options')) {
2221		- wp_send_json_error(['message' => 'Insufficient permissions']);
2222		- wp_die();
2223		- }
2224		- check_ajax_referer('mxchat_delete_leads', 'security');
	412	+ // Create cache keys
	413	+ $cache_key_total = 'total_prompts_' . md5($search_query);
	414	+ $cache_key_prompts = 'prompts_' . md5($search_query . '_' . $current_page);
2225	415
2226		- $emails_raw = isset($_POST['emails']) ? (array) wp_unslash($_POST['emails']) : [];
2227		- $emails = [];
2228		- foreach ($emails_raw as $e) {
2229		- $clean = sanitize_email((string) $e);
2230		- if ($clean) {
2231		- $emails[] = $clean;
	416	+ // Retrieve total number of prompts from cache or database
	417	+ $total_prompts = wp_cache_get($cache_key_total, 'mxchat_prompts');
	418	+ if ($total_prompts === false) {
	419	+ if (!empty($search_query)) {
	420	+ $total_prompts = $wpdb->get_var(
	421	+ $wpdb->prepare(
	422	+ "SELECT COUNT(*) FROM {$table_name} WHERE article_content LIKE %s",
	423	+ '%' . $wpdb->esc_like($search_query) . '%'
	424	+ )
	425	+ );
	426	+ } else {
	427	+ $total_prompts = $wpdb->get_var("SELECT COUNT(*) FROM {$table_name}");
	428	+ }
	429	+ wp_cache_set($cache_key_total, $total_prompts, 'mxchat_prompts', 3600); // Cache for 1 hour
2232	430	}
2233		- }
2234		- if (empty($emails)) {
2235		- wp_send_json_error(['message' => 'No emails provided']);
2236		- wp_die();
2237		- }
2238	431
2239		- $summary = self::mxchat_wipe_leads_by_email($emails);
	432	+ $total_pages = ceil($total_prompts / $per_page);
	433	+ $offset = ($current_page - 1) * $per_page;
2240	434
2241		- wp_send_json([
2242		- 'success' => true,
2243		- 'deleted_leads' => count($emails),
2244		- 'deleted_sessions' => $summary['deleted_sessions'],
2245		- 'deleted_rows' => $summary['deleted_rows'],
2246		- ]);
2247		- wp_die();
2248		-}
2249		-
2250		-/**
2251		- * Fully wipe one or more leads by email: every transcripts row, every related wp_options
2252		- * entry (history, pre-chat capture, chat_deleted preservation, agent name, translations).
2253		- *
2254		- * Shared between the Leads-tab Delete button and the transcript-delete opt-in checkbox.
2255		- * Input emails must already be sanitized with sanitize_email().
2256		- */
2257		-private static function mxchat_wipe_leads_by_email(array $emails) {
2258		- global $wpdb;
2259		- $table = $wpdb->prefix . 'mxchat_chat_transcripts';
2260		- $translations_table = $wpdb->prefix . 'mxchat_transcript_translations';
2261		- $has_translations = $wpdb->get_var("SHOW TABLES LIKE '$translations_table'") === $translations_table;
2262		-
2263		- $deleted_sessions = 0;
2264		- $deleted_rows = 0;
2265		- $emails_lc = array_map('strtolower', $emails);
2266		-
2267		- foreach ($emails as $email) {
2268		- $session_ids = $wpdb->get_col($wpdb->prepare(
2269		- "SELECT DISTINCT session_id FROM {$table} WHERE user_email = %s",
2270		- $email
2271		- ));
2272		-
2273		- $rows_removed = $wpdb->delete($table, ['user_email' => $email], ['%s']);
2274		- if ($rows_removed !== false) {
2275		- $deleted_rows += (int) $rows_removed;
	435	+ // Retrieve prompts from cache or database
	436	+ $prompts = wp_cache_get($cache_key_prompts, 'mxchat_prompts');
	437	+ if ($prompts === false) {
	438	+ if (!empty($search_query)) {
	439	+ $prompts = $wpdb->get_results(
	440	+ $wpdb->prepare(
	441	+ "SELECT * FROM {$table_name} WHERE article_content LIKE %s ORDER BY timestamp DESC LIMIT %d OFFSET %d",
	442	+ '%' . $wpdb->esc_like($search_query) . '%',
	443	+ $per_page,
	444	+ $offset
	445	+ )
	446	+ );
	447	+ } else {
	448	+ $prompts = $wpdb->get_results(
	449	+ $wpdb->prepare(
	450	+ "SELECT * FROM {$table_name} ORDER BY timestamp DESC LIMIT %d OFFSET %d",
	451	+ $per_page,
	452	+ $offset
	453	+ )
	454	+ );
	455	+ }
	456	+ wp_cache_set($cache_key_prompts, $prompts, 'mxchat_prompts', 3600); // Cache for 1 hour
2276	457	}
2277	458
2278		- foreach ($session_ids as $sid) {
2279		- $deleted_sessions++;
2280		- wp_cache_delete('chat_session_' . $sid, 'mxchat_chat_sessions');
2281		- delete_option('mxchat_history_' . $sid);
2282		- delete_option('mxchat_email_' . $sid);
2283		- delete_option('mxchat_name_' . $sid);
2284		- delete_option('mxchat_agent_name_' . $sid);
2285		- delete_option('mxchat_lead_del_email_' . $sid);
2286		- delete_option('mxchat_lead_del_name_' . $sid);
2287		- delete_option('mxchat_lead_del_ts_' . $sid);
2288		- if ($has_translations) {
2289		- $wpdb->delete($translations_table, ['session_id' => $sid], ['%s']);
2290		- }
2291		- }
2292		- }
	459	+ ?>
2293	460
2294		- // Clean up any lingering option entries (orphan pre-chat captures + chat_deleted
2295		- // preservations) whose stored value matches one of the emails being wiped.
2296		- $lingering = $wpdb->get_results(
2297		- "SELECT option_name, option_value FROM {$wpdb->options}
2298		- WHERE option_name LIKE 'mxchat_email_%' OR option_name LIKE 'mxchat_lead_del_email_%'"
2299		- );
2300		- foreach ($lingering as $opt) {
2301		- if (!in_array(strtolower(trim($opt->option_value)), $emails_lc, true)) {
2302		- continue;
2303		- }
2304		- if (strpos($opt->option_name, 'mxchat_lead_del_email_') === 0) {
2305		- $sid = substr($opt->option_name, strlen('mxchat_lead_del_email_'));
2306		- delete_option('mxchat_lead_del_email_' . $sid);
2307		- delete_option('mxchat_lead_del_name_' . $sid);
2308		- delete_option('mxchat_lead_del_ts_' . $sid);
2309		- } else {
2310		- $sid = substr($opt->option_name, strlen('mxchat_email_'));
2311		- delete_option('mxchat_email_' . $sid);
2312		- delete_option('mxchat_name_' . $sid);
2313		- }
2314		- }
	461	+ <div class="wrap mxchat-admin">
	462	+ <div class="mxchat-grid-container">
2315	463
2316		- wp_cache_delete('all_chat_sessions', 'mxchat_chat_sessions');
	464	+ <!-- Submit Content -->
	465	+<div class="mxchat-grid-item full-width">
	466	+ <h2>Submit Content</h2>
	467	+ <form method="post" action="<?php echo esc_url(admin_url('admin-post.php?action=mxchat_submit_content')); ?>">
	468	+ <?php wp_nonce_field('mxchat_submit_content_action', 'mxchat_submit_content_nonce'); ?>
	469	+ <div class="mxchat-form-group">
	470	+ <label for="article_content">Article Content:</label>
	471	+ <textarea name="article_content" id="article_content" required></textarea>
	472	+ </div>
	473	+ <div class="mxchat-form-group">
	474	+ <label for="article_url">Article URL (Optional):</label>
	475	+ <input type="url" name="article_url" id="article_url" placeholder="Enter related URL for the content">
	476	+ </div>
	477	+ <input type="submit" name="submit_content" value="Submit Content" class="button button-primary submit-content-button" />
	478	+ </form>
	479	+</div>
2317	480
2318		- return [
2319		- 'deleted_sessions' => $deleted_sessions,
2320		- 'deleted_rows' => $deleted_rows,
2321		- ];
2322		-}
2323	481
2324		-/**
2325		- * Stream a leads CSV. scope=all exports every lead under current filters is not
2326		- * supported to keep semantics simple; caller either exports all leads or a
2327		- * specific set of selected emails.
2328		- */
2329		-public function mxchat_export_leads() {
2330		- if (!current_user_can('manage_options')) {
2331		- wp_die(esc_html__('You do not have sufficient permissions to access this page.', 'mxchat'));
2332		- }
2333		- check_ajax_referer('mxchat_export_leads', 'security');
	482	+ <!-- Submit Sitemap -->
	483	+ <div class="mxchat-grid-item">
	484	+ <h2>Submit Sitemap or Page URL</h2>
	485	+ <form id="mxchat-sitemap-form" method="post" class="mxchat-sitemap-form" action="<?php echo esc_url(admin_url('admin-post.php?action=mxchat_submit_sitemap')); ?>">
	486	+ <?php wp_nonce_field('mxchat_submit_sitemap_action', 'mxchat_submit_sitemap_nonce'); ?>
	487	+ <div class="mxchat-search-group">
	488	+ <input type="url" name="sitemap_url" id="sitemap_url" placeholder="Sitemap or URL" required />
	489	+ <input type="submit" name="submit_sitemap" value="Submit" class="button button-primary" />
	490	+ </div>
	491	+ </form>
	492	+ <div id="mxchat-sitemap-loading" class="mxchat-spinner" style="display: none;"></div>
	493	+ <div id="mxchat-loading-text" style="display: none; margin-top: 10px; color: #333;">Loading sitemap content into database, please wait...</div>
	494	+ </div>
2334	495
2335		- $scope = isset($_POST['scope']) ? sanitize_key($_POST['scope']) : 'all';
2336		- $fields_mode = isset($_POST['fields']) ? sanitize_key($_POST['fields']) : 'email_and_name';
2337		- $emails_in = isset($_POST['emails']) ? (array) wp_unslash($_POST['emails']) : [];
	496	+ <!-- Search Knowledge -->
	497	+ <div class="mxchat-grid-item">
	498	+ <h2>Search Knowledge</h2>
	499	+ <form method="get" id="knowledge-search">
	500	+ <?php wp_nonce_field('mxchat_prompts_search_nonce'); ?>
	501	+ <input type="hidden" name="page" value="mxchat-prompts" />
	502	+ <div class="mxchat-search-group">
	503	+ <input type="text" name="search" placeholder="Search Knowledge" value="<?php echo esc_attr($search_query); ?>" />
	504	+ <input type="submit" value="Search" class="button button-primary" />
	505	+ </div>
	506	+ </form>
	507	+ </div>
	508	+ </div>
2338	509
2339		- $emails_in_clean = [];
2340		- foreach ($emails_in as $e) {
2341		- $clean = sanitize_email((string) $e);
2342		- if ($clean) {
2343		- $emails_in_clean[] = $clean;
2344		- }
2345		- }
	510	+ <!-- Table below the forms -->
	511	+ <div class="tablenav">
	512	+ <div class="tablenav-pages">
	513	+ <span class="displaying-num"><?php echo esc_html($total_prompts); ?> items</span>
	514	+ <?php
	515	+ $page_links = paginate_links(array(
	516	+ 'base' => add_query_arg('paged', '%#%', admin_url('admin.php?page=mxchat-prompts')),
	517	+ 'format' => '',
	518	+ 'prev_text' => __('&laquo; Previous'),
	519	+ 'next_text' => __('Next &raquo;'),
	520	+ 'total' => $total_pages,
	521	+ 'current' => $current_page,
	522	+ 'add_args' => array(
	523	+ 'search' => $search_query,
	524	+ '_wpnonce' => wp_create_nonce('mxchat_prompts_search_nonce')
	525	+ ),
	526	+ ));
2346	527
2347		- global $wpdb;
2348		- $table = $wpdb->prefix . 'mxchat_chat_transcripts';
2349		- $has_page_url_column = !empty($wpdb->get_results("SHOW COLUMNS FROM $table LIKE 'originating_page_url'"));
	528	+ if ($page_links) {
	529	+ echo '<div class="tablenav-pages">' . wp_kses_post($page_links) . '</div>';
	530	+ }
	531	+ ?>
	532	+ </div>
	533	+ </div>
	534	+ <table class="wp-list-table widefat fixed striped">
	535	+ <thead>
	536	+ <tr>
	537	+ <th>ID</th>
	538	+ <th>Article Content</th>
	539	+ <th>URL</th>
	540	+ <th>Actions</th>
	541	+ </tr>
	542	+ </thead>
	543	+ <tbody>
	544	+ <?php
	545	+ if ($prompts) {
	546	+ foreach ($prompts as $prompt) {
	547	+ ?>
	548	+ <tr>
	549	+ <td><?php echo esc_html($prompt->id); ?></td>
	550	+ <td class="mxchat_article_content_dashboard"><?php echo wp_kses_post(wpautop(esc_textarea($prompt->article_content))); ?></td>
	551	+ <td class="mxchat_article_url_dashboard">
	552	+ <?php if (!empty($prompt->source_url)): ?>
	553	+ <a href="<?php echo esc_url($prompt->source_url); ?>" target="_blank"><?php echo esc_html($prompt->source_url); ?></a>
	554	+ <?php else: ?>
	555	+ N/A
	556	+ <?php endif; ?>
	557	+ </td>
	558	+ <td>
	559	+ <a href="<?php echo esc_url(admin_url('admin-post.php?action=mxchat_delete_prompt&id=' . esc_attr($prompt->id) . '&_wpnonce=' . wp_create_nonce('mxchat_delete_prompt_nonce'))); ?>">Delete</a>
	560	+ </td>
	561	+ </tr>
	562	+ <?php
	563	+ }
	564	+ } else {
	565	+ ?>
	566	+ <tr>
	567	+ <td colspan="4">No prompts found.</td>
	568	+ </tr>
	569	+ <?php
	570	+ }
	571	+ ?>
	572	+ </tbody>
	573	+ </table>
	574	+ </div>
2350	575
2351		- // Collect leads from transcripts.
2352		- $transcripts_sql = "SELECT user_email AS email,
2353		- MAX(timestamp) AS last_seen,
2354		- COUNT(DISTINCT session_id) AS conversation_count
2355		- FROM {$table}
2356		- WHERE user_email IS NOT NULL AND user_email != ''";
2357		- $params = [];
2358		- if ($scope === 'selected' && !empty($emails_in_clean)) {
2359		- $placeholders = implode(',', array_fill(0, count($emails_in_clean), '%s'));
2360		- $transcripts_sql .= " AND user_email IN ({$placeholders})";
2361		- $params = $emails_in_clean;
	576	+ <?php
2362	577	}
2363		- $transcripts_sql .= " GROUP BY user_email ORDER BY last_seen DESC";
2364	578
2365		- $rows = !empty($params)
2366		- ? $wpdb->get_results($wpdb->prepare($transcripts_sql, $params))
2367		- : $wpdb->get_results($transcripts_sql);
	579	+ public function mxchat_generate_embedding($text) {
	580	+ $options = get_option('mxchat_options');
	581	+ $api_key = $options['api_key'] ?? 'default_api_key';
2368	582
2369		- // Hydrate each row with name + top page.
2370		- $export_rows = [];
2371		- foreach ($rows as $row) {
2372		- $detail = $has_page_url_column
2373		- ? $wpdb->get_row($wpdb->prepare(
2374		- "SELECT user_name, originating_page_url FROM {$table}
2375		- WHERE user_email = %s ORDER BY timestamp DESC LIMIT 1",
2376		- $row->email
2377		- ))
2378		- : $wpdb->get_row($wpdb->prepare(
2379		- "SELECT user_name FROM {$table}
2380		- WHERE user_email = %s ORDER BY timestamp DESC LIMIT 1",
2381		- $row->email
2382		- ));
2383		- $export_rows[] = [
2384		- 'email' => $row->email,
2385		- 'name' => isset($detail->user_name) ? (string) $detail->user_name : '',
2386		- 'conversation_count' => (int) $row->conversation_count,
2387		- 'last_seen' => $row->last_seen,
2388		- 'top_page_url' => isset($detail->originating_page_url) ? $detail->originating_page_url : '',
2389		- ];
2390		- }
2391		-
2392		- // Include orphan + chat_deleted leads when exporting all.
2393		- if ($scope === 'all') {
2394		- $transcripts_emails_lc = array_flip(array_map(
2395		- function ($r) { return strtolower($r['email']); },
2396		- $export_rows
	583	+ $response = wp_remote_post('https://api.openai.com/v1/embeddings', array(
	584	+ 'body' => wp_json_encode(array(
	585	+ 'model' => 'text-embedding-ada-002',
	586	+ 'input' => $text
	587	+ )),
	588	+ 'headers' => array(
	589	+ 'Authorization' => 'Bearer ' . $api_key,
	590	+ 'Content-Type' => 'application/json'
	591	+ ),
2397	592	));
2398		- foreach (self::mxchat_collect_chat_deleted_leads('') as $cd) {
2399		- if (isset($transcripts_emails_lc[strtolower($cd['email'])])) continue;
2400		- $transcripts_emails_lc[strtolower($cd['email'])] = true;
2401		- $export_rows[] = [
2402		- 'email' => $cd['email'],
2403		- 'name' => $cd['name'],
2404		- 'conversation_count' => 0,
2405		- 'last_seen' => $cd['last_seen'],
2406		- 'top_page_url' => '',
2407		- ];
2408		- }
2409		- foreach (self::mxchat_collect_orphan_leads('') as $orphan) {
2410		- if (isset($transcripts_emails_lc[strtolower($orphan['email'])])) continue;
2411		- $transcripts_emails_lc[strtolower($orphan['email'])] = true;
2412		- $export_rows[] = [
2413		- 'email' => $orphan['email'],
2414		- 'name' => $orphan['name'],
2415		- 'conversation_count' => 0,
2416		- 'last_seen' => '',
2417		- 'top_page_url' => '',
2418		- ];
2419		- }
2420		- }
2421	593
2422		- if (empty($export_rows)) {
2423		- wp_send_json_error(['message' => 'No leads to export.']);
2424		- wp_die();
2425		- }
2426		-
2427		- $filename = 'mxchat-leads-' . date('Y-m-d') . '.csv';
2428		- header('Content-Type: text/csv');
2429		- header('Content-Disposition: attachment; filename="' . $filename . '"');
2430		- header('Pragma: no-cache');
2431		- header('Expires: 0');
2432		-
2433		- $output = fopen('php://output', 'w');
2434		- fputs($output, "\xEF\xBB\xBF"); // UTF-8 BOM for Excel
2435		-
2436		- if ($fields_mode === 'email_only') {
2437		- fputcsv($output, ['Email']);
2438		- foreach ($export_rows as $r) {
2439		- fputcsv($output, [$r['email']]);
	594	+ if (is_wp_error($response)) {
	595	+ return null;
2440	596	}
2441		- } else {
2442		- fputcsv($output, ['Email', 'Name', 'Conversations', 'Last seen', 'Top page']);
2443		- foreach ($export_rows as $r) {
2444		- fputcsv($output, [
2445		- $r['email'],
2446		- $r['name'],
2447		- $r['conversation_count'],
2448		- $r['last_seen'],
2449		- $r['top_page_url'],
2450		- ]);
2451		- }
2452		- }
2453	597
2454		- fclose($output);
2455		- wp_die();
2456		-}
2457		-
2458		-/**
2459		- * Stats strip payload (independent of filters).
2460		- */
2461		-private static function mxchat_leads_stats($table, $has_page_url_column) {
2462		- global $wpdb;
2463		-
2464		- $total_transcripts_emails = (int) $wpdb->get_var(
2465		- "SELECT COUNT(DISTINCT user_email) FROM {$table}
2466		- WHERE user_email IS NOT NULL AND user_email != ''"
2467		- );
2468		-
2469		- $new_this_week = (int) $wpdb->get_var($wpdb->prepare(
2470		- "SELECT COUNT(*) FROM (
2471		- SELECT user_email FROM {$table}
2472		- WHERE user_email IS NOT NULL AND user_email != ''
2473		- GROUP BY user_email
2474		- HAVING MIN(timestamp) >= %s
2475		- ) AS new_leads",
2476		- gmdate('Y-m-d H:i:s', strtotime('-7 days'))
2477		- ));
2478		-
2479		- $total_convos = (int) $wpdb->get_var(
2480		- "SELECT COUNT(DISTINCT session_id) FROM {$table}
2481		- WHERE user_email IS NOT NULL AND user_email != ''"
2482		- );
2483		-
2484		- $orphan_count = count(self::mxchat_collect_orphan_leads(''));
2485		- $chat_deleted_count = self::mxchat_count_chat_deleted_leads();
2486		-
2487		- // Total leads = unique emails across all three sources (dedup priority: transcripts > chat_deleted > orphan
2488		- // is already enforced at collection time in mxchat_fetch_leads; stats re-apply it here).
2489		- $total_leads = $total_transcripts_emails + $chat_deleted_count + $orphan_count;
2490		-
2491		- $avg = $total_transcripts_emails > 0
2492		- ? round($total_convos / $total_transcripts_emails, 1)
2493		- : 0;
2494		-
2495		- // Orphan % reflects *true* orphans only (pre-chat dropoffs). Chat-deleted leads are
2496		- // excluded so the metric stays meaningful — admins shouldn't see their cleanups
2497		- // inflate this number.
2498		- $orphan_pct = $total_leads > 0
2499		- ? (int) round(($orphan_count / $total_leads) * 100)
2500		- : 0;
2501		-
2502		- return [
2503		- 'total_leads' => $total_leads,
2504		- 'new_this_week' => $new_this_week,
2505		- 'avg_convos' => $avg,
2506		- 'orphan_pct' => $orphan_pct,
2507		- 'orphan_count' => $orphan_count,
2508		- 'chat_deleted_count' => $chat_deleted_count,
2509		- ];
2510		-}
2511		-
2512		-/**
2513		- * Collect leads who had a conversation that an admin later deleted (preserved via
2514		- * mxchat_lead_del_* options). Returns rows tagged status='chat_deleted' with the
2515		- * original last-seen timestamp so they still sort and filter sensibly.
2516		- *
2517		- * @param string $search Optional email/name substring filter.
2518		- * @param string $date_cutoff Optional 'Y-m-d H:i:s' cutoff — only rows with last_ts >= cutoff.
2519		- * @return array
2520		- */
2521		-private static function mxchat_collect_chat_deleted_leads($search = '', $date_cutoff = '') {
2522		- global $wpdb;
2523		- $table = $wpdb->prefix . 'mxchat_chat_transcripts';
2524		-
2525		- $rows = $wpdb->get_results(
2526		- "SELECT option_name, option_value FROM {$wpdb->options}
2527		- WHERE option_name LIKE 'mxchat_lead_del_email_%'"
2528		- );
2529		- if (empty($rows)) {
2530		- return [];
	598	+ $response_data = json_decode(wp_remote_retrieve_body($response), true);
	599	+ return $response_data['data'][0]['embedding'] ?? null;
2531	600	}
2532	601
2533		- // Emails that currently have transcripts rows should not appear as chat_deleted —
2534		- // they've come back and chatted, so they're active leads again.
2535		- $emails_in_transcripts = array_map(
2536		- 'strtolower',
2537		- (array) $wpdb->get_col(
2538		- "SELECT DISTINCT user_email FROM {$table}
2539		- WHERE user_email IS NOT NULL AND user_email != ''"
2540		- )
2541		- );
2542		- $emails_in_transcripts = array_flip($emails_in_transcripts);
2543		-
2544		- $needle = strtolower(trim((string) $search));
2545		- $by_email = [];
2546		-
2547		- foreach ($rows as $opt) {
2548		- $email = sanitize_email(trim((string) $opt->option_value));
2549		- if (!$email) {
2550		- continue;
	602	+ public function mxchat_delete_chat_history() {
	603	+ if (!current_user_can('manage_options')) {
	604	+ echo wp_json_encode(['error' => 'You do not have sufficient permissions.']);
	605	+ wp_die();
2551	606	}
2552		- if (isset($emails_in_transcripts[strtolower($email)])) {
2553		- continue;
2554		- }
2555		- $sid = substr($opt->option_name, strlen('mxchat_lead_del_email_'));
2556		- if (!$sid) {
2557		- continue;
2558		- }
2559		- $name = (string) get_option('mxchat_lead_del_name_' . $sid, '');
2560		- $ts = (string) get_option('mxchat_lead_del_ts_' . $sid, '');
2561	607
2562		- if ($date_cutoff !== '' && ($ts === '' || $ts < $date_cutoff)) {
2563		- continue;
2564		- }
2565		- if ($needle !== '') {
2566		- $hay = strtolower($email . ' ' . $name);
2567		- if (strpos($hay, $needle) === false) {
2568		- continue;
2569		- }
2570		- }
	608	+ check_ajax_referer('mxchat_delete_chat_history', 'security');
2571	609
2572		- $key = strtolower($email);
2573		- if (!isset($by_email[$key]) || (isset($by_email[$key]['last_seen']) && $ts > $by_email[$key]['last_seen'])) {
2574		- $by_email[$key] = [
2575		- 'email' => $email,
2576		- 'name' => $name,
2577		- 'conversation_count' => 0,
2578		- 'last_seen' => $ts,
2579		- 'last_seen_display' => $ts ? self::mxchat_leads_format_relative($ts) : __('Chat deleted', 'mxchat'),
2580		- 'first_seen' => $ts,
2581		- 'latest_session_id' => '',
2582		- 'top_page_url' => '',
2583		- 'top_page_title' => '',
2584		- 'is_orphan' => false,
2585		- 'status' => 'chat_deleted',
2586		- ];
2587		- }
2588		- }
	610	+ global $wpdb;
	611	+ $table_name = $wpdb->prefix . 'mxchat_chat_transcripts';
2589	612
2590		- // Newest chat_deleted first.
2591		- usort($by_email, function ($a, $b) {
2592		- return strcmp((string) $b['last_seen'], (string) $a['last_seen']);
2593		- });
2594		- return array_values($by_email);
2595		-}
	613	+ if (isset($_POST['delete_session_ids']) && is_array($_POST['delete_session_ids'])) {
	614	+ foreach ($_POST['delete_session_ids'] as $session_id) {
	615	+ $session_id_sanitized = sanitize_text_field($session_id);
2596	616
2597		-/**
2598		- * Count unique emails preserved as "chat deleted" (for the stats strip).
2599		- */
2600		-private static function mxchat_count_chat_deleted_leads() {
2601		- global $wpdb;
2602		- $table = $wpdb->prefix . 'mxchat_chat_transcripts';
	617	+ // Clear relevant cache before deletion
	618	+ $cache_key = 'chat_session_' . $session_id_sanitized;
	619	+ wp_cache_delete($cache_key, 'mxchat_chat_sessions');
2603	620
2604		- $emails = $wpdb->get_col(
2605		- "SELECT DISTINCT option_value FROM {$wpdb->options}
2606		- WHERE option_name LIKE 'mxchat_lead_del_email_%'"
2607		- );
2608		- if (empty($emails)) {
2609		- return 0;
2610		- }
2611		-
2612		- $transcripts_emails = array_map(
2613		- 'strtolower',
2614		- (array) $wpdb->get_col(
2615		- "SELECT DISTINCT user_email FROM {$table}
2616		- WHERE user_email IS NOT NULL AND user_email != ''"
2617		- )
2618		- );
2619		- $transcripts_emails = array_flip($transcripts_emails);
2620		-
2621		- $count = 0;
2622		- $seen = [];
2623		- foreach ($emails as $raw) {
2624		- $email = strtolower(trim((string) $raw));
2625		- if (!$email || isset($seen[$email]) || isset($transcripts_emails[$email])) {
2626		- continue;
2627		- }
2628		- $seen[$email] = true;
2629		- $count++;
2630		- }
2631		- return $count;
2632		-}
2633		-
2634		-/**
2635		- * Find leads who submitted the pre-chat form but never produced a transcripts row.
2636		- * Returned rows have no conversation_count, no timestamp.
2637		- *
2638		- * @param string $search Optional email/name substring filter.
2639		- * @return array
2640		- */
2641		-private static function mxchat_collect_orphan_leads($search = '') {
2642		- global $wpdb;
2643		- $table = $wpdb->prefix . 'mxchat_chat_transcripts';
2644		-
2645		- $option_rows = $wpdb->get_results(
2646		- "SELECT option_name, option_value FROM {$wpdb->options}
2647		- WHERE option_name LIKE 'mxchat_email_%'"
2648		- );
2649		- if (empty($option_rows)) {
2650		- return [];
2651		- }
2652		-
2653		- // Collect all session_ids that have real transcripts rows so we can exclude them.
2654		- $session_ids_with_rows = $wpdb->get_col(
2655		- "SELECT DISTINCT session_id FROM {$table}
2656		- WHERE user_email IS NOT NULL AND user_email != ''"
2657		- );
2658		- $session_ids_with_rows = array_flip($session_ids_with_rows);
2659		-
2660		- // Seen emails in transcripts (so orphans only include truly never-chatted leads).
2661		- $emails_in_transcripts = array_map(
2662		- 'strtolower',
2663		- (array) $wpdb->get_col(
2664		- "SELECT DISTINCT user_email FROM {$table}
2665		- WHERE user_email IS NOT NULL AND user_email != ''"
2666		- )
2667		- );
2668		- $emails_in_transcripts = array_flip($emails_in_transcripts);
2669		-
2670		- $orphans_by_email = [];
2671		- $needle = strtolower(trim((string) $search));
2672		-
2673		- foreach ($option_rows as $opt) {
2674		- $email = sanitize_email(trim((string) $opt->option_value));
2675		- if (!$email) {
2676		- continue;
2677		- }
2678		- $sid = substr($opt->option_name, strlen('mxchat_email_'));
2679		- if (!$sid) {
2680		- continue;
2681		- }
2682		- // Exclude leads who have any transcripts rows (they appear in the main list).
2683		- if (isset($emails_in_transcripts[strtolower($email)])) {
2684		- continue;
2685		- }
2686		- if (isset($session_ids_with_rows[$sid])) {
2687		- continue;
2688		- }
2689		-
2690		- $name_option = get_option('mxchat_name_' . $sid, '');
2691		- $name = is_string($name_option) ? trim($name_option) : '';
2692		-
2693		- if ($needle !== '') {
2694		- $hay = strtolower($email . ' ' . $name);
2695		- if (strpos($hay, $needle) === false) {
2696		- continue;
	621	+ // Perform the deletion
	622	+ $wpdb->delete($table_name, ['session_id' => $session_id_sanitized]);
2697	623	}
2698		- }
2699	624
2700		- $key = strtolower($email);
2701		- if (!isset($orphans_by_email[$key])) {
2702		- $orphans_by_email[$key] = [
2703		- 'email' => $email,
2704		- 'name' => $name,
2705		- 'conversation_count' => 0,
2706		- 'last_seen' => '',
2707		- 'last_seen_display' => __('No conversation yet', 'mxchat'),
2708		- 'first_seen' => '',
2709		- 'latest_session_id' => '',
2710		- 'top_page_url' => '',
2711		- 'top_page_title' => '',
2712		- 'is_orphan' => true,
2713		- 'status' => 'orphan',
2714		- ];
2715		- }
2716		- }
	625	+ // Optionally, clear a general cache if you have one
	626	+ wp_cache_delete('all_chat_sessions', 'mxchat_chat_sessions');
2717	627
2718		- return array_values($orphans_by_email);
2719		-}
2720		-
2721		-/**
2722		- * Map a date_range key to a SQL-comparable cutoff string, or '' for all-time.
2723		- */
2724		-private static function mxchat_leads_date_cutoff($date_range) {
2725		- switch ($date_range) {
2726		- case 'today': return gmdate('Y-m-d H:i:s', strtotime('-24 hours'));
2727		- case '7d': return gmdate('Y-m-d H:i:s', strtotime('-7 days'));
2728		- case '30d': return gmdate('Y-m-d H:i:s', strtotime('-30 days'));
2729		- case '90d': return gmdate('Y-m-d H:i:s', strtotime('-90 days'));
2730		- case 'all':
2731		- default: return '';
2732		- }
2733		-}
2734		-
2735		-/**
2736		- * Turn a UTC timestamp into a short relative display like "2h ago" or "Apr 12".
2737		- */
2738		-private static function mxchat_leads_format_relative($timestamp) {
2739		- if (!$timestamp) {
2740		- return '';
2741		- }
2742		- $ts = strtotime($timestamp . ' UTC');
2743		- if (!$ts) {
2744		- return '';
2745		- }
2746		- $diff = time() - $ts;
2747		- if ($diff < 60) return __('just now', 'mxchat');
2748		- if ($diff < 3600) return floor($diff / 60) . __('m ago', 'mxchat');
2749		- if ($diff < 86400) return floor($diff / 3600) . __('h ago', 'mxchat');
2750		- if ($diff < 604800) return floor($diff / 86400) . __('d ago', 'mxchat');
2751		- return wp_date('M j', $ts);
2752		-}
2753		-
2754		-/**
2755		- * Handle translation of chat messages via AJAX
2756		- */
2757		-public function mxchat_translate_messages() {
2758		- if (!current_user_can('manage_options')) {
2759		- wp_send_json_error(['error' => 'Insufficient permissions']);
2760		- wp_die();
2761		- }
2762		-
2763		- $session_id = isset($_POST['session_id']) ? MxChat_Utils::sanitize_session_id(wp_unslash($_POST['session_id'])) : '';
2764		- $target_lang = isset($_POST['target_lang']) ? sanitize_text_field($_POST['target_lang']) : 'en';
2765		- $messages_json = isset($_POST['messages']) ? wp_unslash($_POST['messages']) : '[]';
2766		- $messages = json_decode($messages_json, true);
2767		-
2768		- if (empty($session_id)) {
2769		- wp_send_json_error(['error' => 'No session ID provided']);
2770		- wp_die();
2771		- }
2772		-
2773		- if (empty($messages) || !is_array($messages)) {
2774		- wp_send_json_error(['error' => 'No messages to translate']);
2775		- wp_die();
2776		- }
2777		-
2778		- // Language names for prompting
2779		- $languages = [
2780		- 'en' => 'English',
2781		- 'es' => 'Spanish',
2782		- 'fr' => 'French',
2783		- 'de' => 'German',
2784		- 'it' => 'Italian',
2785		- 'pt' => 'Portuguese',
2786		- 'nl' => 'Dutch',
2787		- 'ru' => 'Russian',
2788		- 'zh' => 'Chinese',
2789		- 'ja' => 'Japanese',
2790		- 'ko' => 'Korean',
2791		- 'ar' => 'Arabic',
2792		- 'hi' => 'Hindi',
2793		- 'tr' => 'Turkish',
2794		- 'pl' => 'Polish',
2795		- 'vi' => 'Vietnamese',
2796		- 'th' => 'Thai',
2797		- 'id' => 'Indonesian',
2798		- 'sv' => 'Swedish',
2799		- 'da' => 'Danish'
2800		- ];
2801		-
2802		- $target_lang_name = isset($languages[$target_lang]) ? $languages[$target_lang] : 'English';
2803		-
2804		- // Build combined text for translation (numbered for parsing)
2805		- $numbered_messages = [];
2806		- foreach ($messages as $i => $msg) {
2807		- $content = isset($msg['content']) ? trim($msg['content']) : '';
2808		- if (!empty($content)) {
2809		- $numbered_messages[] = "[MSG" . $i . "]" . $content . "[/MSG" . $i . "]";
	628	+ echo wp_json_encode(['success' => 'Selected chat sessions have been deleted.']);
	629	+ } else {
	630	+ echo wp_json_encode(['error' => 'No chat sessions selected for deletion.']);
2810	631	}
2811		- }
2812	632
2813		- if (empty($numbered_messages)) {
2814		- wp_send_json_error(['error' => 'No valid messages to translate']);
2815	633	wp_die();
2816	634	}
2817	635
2818		- $combined_text = implode("\n\n", $numbered_messages);
2819	636
2820		- // Prepare the translation prompt
2821		- $system_prompt = "You are a translator. Translate the following messages to {$target_lang_name}. Keep the [MSG#] and [/MSG#] tags exactly as they are - only translate the content between them. Maintain the original formatting, line breaks, and any HTML tags. Return ONLY the translated messages with the tags, no explanations.";
2822	637
2823		- // Get user's selected model and determine provider
2824		- $options = get_option('mxchat_options', []);
2825		- $selected_model = $options['model'] ?? 'gpt-5.6-sol';
2826		-
2827		- // Check if using OpenRouter
2828		- if ($selected_model === 'openrouter') {
2829		- $provider = 'openrouter';
2830		- $selected_model = $options['openrouter_selected_model'] ?? '';
2831		- $api_key = $options['openrouter_api_key'] ?? '';
2832		-
2833		- if (empty($selected_model)) {
2834		- wp_send_json_error(['error' => 'No OpenRouter model selected']);
2835		- wp_die();
2836		- }
2837		- } else {
2838		- // Determine provider from model name
2839		- $model_parts = explode('-', $selected_model);
2840		- $provider = strtolower($model_parts[0]);
2841		-
2842		- // Get the appropriate API key based on provider
2843		- $api_key = '';
2844		- switch ($provider) {
2845		- case 'gpt':
2846		- case 'o1':
2847		- $api_key = $options['api_key'] ?? '';
2848		- break;
2849		- case 'claude':
2850		- $api_key = $options['claude_api_key'] ?? '';
2851		- break;
2852		- case 'grok':
2853		- $api_key = $options['xai_api_key'] ?? '';
2854		- break;
2855		- case 'deepseek':
2856		- $api_key = $options['deepseek_api_key'] ?? '';
2857		- break;
2858		- case 'gemini':
2859		- $api_key = $options['gemini_api_key'] ?? '';
2860		- break;
2861		- default:
2862		- // Default to OpenAI
2863		- $api_key = $options['api_key'] ?? '';
2864		- $provider = 'gpt';
2865		- break;
2866		- }
2867		- }
2868		-
2869		- if (empty($api_key)) {
2870		- wp_send_json_error(['error' => 'No API key configured for ' . $provider]);
2871		- wp_die();
2872		- }
2873		-
2874		- // Make API request based on provider
2875		- $response = $this->translate_with_provider($provider, $selected_model, $api_key, $system_prompt, $combined_text);
2876		-
2877		- if (is_wp_error($response)) {
2878		- wp_send_json_error(['error' => $response->get_error_message()]);
2879		- wp_die();
2880		- }
2881		-
2882		- // Parse the response to extract translated messages
2883		- $translations = [];
2884		- foreach ($messages as $msg) {
2885		- $index = $msg['index'];
2886		- $pattern = '/\[MSG' . $index . '\](.*?)\[\/MSG' . $index . '\]/s';
2887		- if (preg_match($pattern, $response, $matches)) {
2888		- $translations[] = [
2889		- 'index' => $index,
2890		- 'translated' => trim($matches[1])
2891		- ];
2892		- }
2893		- }
2894		-
2895		- // Save translations to database
2896		- if (!empty($translations)) {
2897		- $this->save_transcript_translation($session_id, $target_lang, $translations);
2898		- }
2899		-
2900		- wp_send_json(['success' => true, 'translations' => $translations, 'language' => $target_lang]);
2901		- wp_die();
2902		-}
2903		-
2904		-/**
2905		- * Save transcript translation to database
2906		- */
2907		-private function save_transcript_translation($session_id, $language_code, $translations) {
2908		- global $wpdb;
2909		- $table_name = $wpdb->prefix . 'mxchat_transcript_translations';
2910		-
2911		- // Check if table exists, create if not
2912		- if ($wpdb->get_var("SHOW TABLES LIKE '$table_name'") !== $table_name) {
2913		- mxchat_create_translations_table();
2914		- }
2915		-
2916		- $now = current_time('mysql');
2917		- $translations_json = wp_json_encode($translations);
2918		-
2919		- // Use REPLACE to insert or update
2920		- $wpdb->query($wpdb->prepare(
2921		- "REPLACE INTO $table_name (session_id, language_code, translations, created_at, updated_at)
2922		- VALUES (%s, %s, %s, %s, %s)",
2923		- $session_id,
2924		- $language_code,
2925		- $translations_json,
2926		- $now,
2927		- $now
2928		- ));
2929		-}
2930		-
2931		-/**
2932		- * Get saved translation for a session
2933		- */
2934		-public function mxchat_get_transcript_translation() {
2935		- if (!current_user_can('manage_options')) {
2936		- wp_send_json_error(['error' => 'Insufficient permissions']);
2937		- wp_die();
2938		- }
2939		-
2940		- $session_id = isset($_POST['session_id']) ? MxChat_Utils::sanitize_session_id(wp_unslash($_POST['session_id'])) : '';
2941		-
2942		- if (empty($session_id)) {
2943		- wp_send_json_error(['error' => 'No session ID provided']);
2944		- wp_die();
2945		- }
2946		-
2947		- global $wpdb;
2948		- $table_name = $wpdb->prefix . 'mxchat_transcript_translations';
2949		-
2950		- // Check if table exists
2951		- if ($wpdb->get_var("SHOW TABLES LIKE '$table_name'") !== $table_name) {
2952		- wp_send_json(['success' => true, 'has_translation' => false]);
2953		- wp_die();
2954		- }
2955		-
2956		- // Get the most recent translation for this session
2957		- $result = $wpdb->get_row($wpdb->prepare(
2958		- "SELECT language_code, translations FROM $table_name WHERE session_id = %s ORDER BY updated_at DESC LIMIT 1",
2959		- $session_id
2960		- ));
2961		-
2962		- if ($result) {
2963		- $translations = json_decode($result->translations, true);
2964		- wp_send_json([
2965		- 'success' => true,
2966		- 'has_translation' => true,
2967		- 'language' => $result->language_code,
2968		- 'translations' => $translations
2969		- ]);
2970		- } else {
2971		- wp_send_json(['success' => true, 'has_translation' => false]);
2972		- }
2973		- wp_die();
2974		-}
2975		-
2976		-/**
2977		- * Translate text using the user's selected provider and model
2978		- */
2979		-private function translate_with_provider($provider, $model, $api_key, $system_prompt, $text) {
2980		- switch ($provider) {
2981		- case 'claude':
2982		- return $this->translate_with_claude($api_key, $model, $system_prompt, $text);
2983		- case 'grok':
2984		- return $this->translate_with_xai($api_key, $model, $system_prompt, $text);
2985		- case 'deepseek':
2986		- return $this->translate_with_deepseek($api_key, $model, $system_prompt, $text);
2987		- case 'gemini':
2988		- return $this->translate_with_gemini($api_key, $model, $system_prompt, $text);
2989		- case 'openrouter':
2990		- return $this->translate_with_openrouter($api_key, $model, $system_prompt, $text);
2991		- case 'gpt':
2992		- case 'o1':
2993		- default:
2994		- return $this->translate_with_openai($api_key, $model, $system_prompt, $text);
2995		- }
2996		-}
2997		-
2998		-/**
2999		- * Translate text using OpenAI API
3000		- */
3001		-private function translate_with_openai($api_key, $model, $system_prompt, $text) {
3002		- $response = wp_remote_post('https://api.openai.com/v1/chat/completions', [
3003		- 'timeout' => 60,
3004		- 'headers' => [
3005		- 'Authorization' => 'Bearer ' . $api_key,
3006		- 'Content-Type' => 'application/json'
3007		- ],
3008		- 'body' => wp_json_encode([
3009		- 'model' => $model,
3010		- 'messages' => [
3011		- ['role' => 'system', 'content' => $system_prompt],
3012		- ['role' => 'user', 'content' => $text]
3013		- ],
3014		- 'temperature' => 0.3
3015		- ])
3016		- ]);
3017		-
3018		- if (is_wp_error($response)) {
3019		- return $response;
3020		- }
3021		-
3022		- $body = json_decode(wp_remote_retrieve_body($response), true);
3023		-
3024		- if (isset($body['error'])) {
3025		- return new WP_Error('api_error', $body['error']['message']);
3026		- }
3027		-
3028		- if (isset($body['choices'][0]['message']['content'])) {
3029		- return $body['choices'][0]['message']['content'];
3030		- }
3031		-
3032		- return new WP_Error('api_error', 'Invalid API response');
3033		-}
3034		-
3035		-/**
3036		- * Translate text using Claude API
3037		- */
3038		-private function translate_with_claude($api_key, $model, $system_prompt, $text) {
3039		- // Anthropic retired claude-opus-4-20250514 / claude-sonnet-4-20250514 on 2026-06-15.
3040		- // Read-time rescue: remap a saved dead ID to the current equivalent before the API call.
3041		- if ($model === 'claude-opus-4-20250514') { $model = 'claude-opus-4-8'; }
3042		- elseif ($model === 'claude-sonnet-4-20250514') { $model = 'claude-sonnet-4-6'; }
3043		- $response = wp_remote_post('https://api.anthropic.com/v1/messages', [
3044		- 'timeout' => 60,
3045		- 'headers' => [
3046		- 'x-api-key' => $api_key,
3047		- 'anthropic-version' => '2023-06-01',
3048		- 'Content-Type' => 'application/json'
3049		- ],
3050		- 'body' => wp_json_encode([
3051		- 'model' => $model,
3052		- 'max_tokens' => 4096,
3053		- 'system' => $system_prompt,
3054		- 'messages' => [
3055		- ['role' => 'user', 'content' => $text]
3056		- ]
3057		- ])
3058		- ]);
3059		-
3060		- if (is_wp_error($response)) {
3061		- return $response;
3062		- }
3063		-
3064		- $body = json_decode(wp_remote_retrieve_body($response), true);
3065		-
3066		- if (isset($body['error'])) {
3067		- return new WP_Error('api_error', $body['error']['message']);
3068		- }
3069		-
3070		- if (isset($body['content'][0]['text'])) {
3071		- return $body['content'][0]['text'];
3072		- }
3073		-
3074		- return new WP_Error('api_error', 'Invalid API response');
3075		-}
3076		-
3077		-/**
3078		- * Translate text using xAI (Grok) API
3079		- */
3080		-private function translate_with_xai($api_key, $model, $system_prompt, $text) {
3081		- $response = wp_remote_post('https://api.x.ai/v1/chat/completions', [
3082		- 'timeout' => 60,
3083		- 'headers' => [
3084		- 'Authorization' => 'Bearer ' . $api_key,
3085		- 'Content-Type' => 'application/json'
3086		- ],
3087		- 'body' => wp_json_encode([
3088		- 'model' => $model,
3089		- 'messages' => [
3090		- ['role' => 'system', 'content' => $system_prompt],
3091		- ['role' => 'user', 'content' => $text]
3092		- ],
3093		- 'temperature' => 0.3
3094		- ])
3095		- ]);
3096		-
3097		- if (is_wp_error($response)) {
3098		- return $response;
3099		- }
3100		-
3101		- $body = json_decode(wp_remote_retrieve_body($response), true);
3102		-
3103		- if (isset($body['error'])) {
3104		- return new WP_Error('api_error', $body['error']['message']);
3105		- }
3106		-
3107		- if (isset($body['choices'][0]['message']['content'])) {
3108		- return $body['choices'][0]['message']['content'];
3109		- }
3110		-
3111		- return new WP_Error('api_error', 'Invalid API response');
3112		-}
3113		-
3114		-/**
3115		- * Translate text using DeepSeek API
3116		- */
3117		-private function translate_with_deepseek($api_key, $model, $system_prompt, $text) {
3118		- $response = wp_remote_post('https://api.deepseek.com/v1/chat/completions', [
3119		- 'timeout' => 60,
3120		- 'headers' => [
3121		- 'Authorization' => 'Bearer ' . $api_key,
3122		- 'Content-Type' => 'application/json'
3123		- ],
3124		- 'body' => wp_json_encode([
3125		- 'model' => $model,
3126		- 'messages' => [
3127		- ['role' => 'system', 'content' => $system_prompt],
3128		- ['role' => 'user', 'content' => $text]
3129		- ],
3130		- 'temperature' => 0.3,
3131		- // DeepSeek V4 defaults to thinking mode ON (temperature ignored,
3132		- // slow responses); translation wants non-thinking.
3133		- 'thinking' => ['type' => 'disabled']
3134		- ])
3135		- ]);
3136		-
3137		- if (is_wp_error($response)) {
3138		- return $response;
3139		- }
3140		-
3141		- $body = json_decode(wp_remote_retrieve_body($response), true);
3142		-
3143		- if (isset($body['error'])) {
3144		- return new WP_Error('api_error', $body['error']['message']);
3145		- }
3146		-
3147		- if (isset($body['choices'][0]['message']['content'])) {
3148		- return $body['choices'][0]['message']['content'];
3149		- }
3150		-
3151		- return new WP_Error('api_error', 'Invalid API response');
3152		-}
3153		-
3154		-/**
3155		- * Translate text using Google Gemini API
3156		- */
3157		-private function translate_with_gemini($api_key, $model, $system_prompt, $text) {
3158		- if ($model === 'gemini-3-pro-preview') {
3159		- $model = 'gemini-3.1-pro-preview';
3160		- }
3161		- $url = 'https://generativelanguage.googleapis.com/v1beta/models/' . $model . ':generateContent?key=' . $api_key;
3162		-
3163		- $response = wp_remote_post($url, [
3164		- 'timeout' => 60,
3165		- 'headers' => [
3166		- 'Content-Type' => 'application/json'
3167		- ],
3168		- 'body' => wp_json_encode([
3169		- 'contents' => [
3170		- [
3171		- 'parts' => [
3172		- ['text' => $system_prompt . "\n\n" . $text]
3173		- ]
3174		- ]
3175		- ],
3176		- 'generationConfig' => [
3177		- 'temperature' => 0.3
3178		- ]
3179		- ])
3180		- ]);
3181		-
3182		- if (is_wp_error($response)) {
3183		- return $response;
3184		- }
3185		-
3186		- $body = json_decode(wp_remote_retrieve_body($response), true);
3187		-
3188		- if (isset($body['error'])) {
3189		- return new WP_Error('api_error', $body['error']['message']);
3190		- }
3191		-
3192		- if (isset($body['candidates'][0]['content']['parts'][0]['text'])) {
3193		- return $body['candidates'][0]['content']['parts'][0]['text'];
3194		- }
3195		-
3196		- return new WP_Error('api_error', 'Invalid API response');
3197		-}
3198		-
3199		-/**
3200		- * Translate text using OpenRouter API
3201		- */
3202		-private function translate_with_openrouter($api_key, $model, $system_prompt, $text) {
3203		- $response = wp_remote_post('https://openrouter.ai/api/v1/chat/completions', [
3204		- 'timeout' => 60,
3205		- 'headers' => [
3206		- 'Authorization' => 'Bearer ' . $api_key,
3207		- 'Content-Type' => 'application/json',
3208		- 'HTTP-Referer' => home_url(),
3209		- 'X-Title' => 'MxChat Translation'
3210		- ],
3211		- 'body' => wp_json_encode([
3212		- 'model' => $model,
3213		- 'messages' => [
3214		- ['role' => 'system', 'content' => $system_prompt],
3215		- ['role' => 'user', 'content' => $text]
3216		- ],
3217		- 'temperature' => 0.3
3218		- ])
3219		- ]);
3220		-
3221		- if (is_wp_error($response)) {
3222		- return $response;
3223		- }
3224		-
3225		- $body = json_decode(wp_remote_retrieve_body($response), true);
3226		-
3227		- if (isset($body['error'])) {
3228		- return new WP_Error('api_error', $body['error']['message']);
3229		- }
3230		-
3231		- if (isset($body['choices'][0]['message']['content'])) {
3232		- return $body['choices'][0]['message']['content'];
3233		- }
3234		-
3235		- return new WP_Error('api_error', 'Invalid API response');
3236		-}
3237		-
3238	638	public function mxchat_fetch_chat_history() {
3239	639	global $wpdb;
3240	640	$table_name = $wpdb->prefix . 'mxchat_chat_transcripts';
3241		- $url_clicks_table = $wpdb->prefix . 'mxchat_url_clicks';
3242	641
	642	+ // Check if the current user has sufficient permissions
3243	643	if (!current_user_can('manage_options')) {
3244		- wp_send_json_error(['message' => 'Insufficient permissions']);
	644	+ echo esc_html__('You do not have sufficient permissions to view this page.', 'mxchat');
3245	645	wp_die();
3246	646	}
3247	647
3248		- $page = isset($_POST['page']) ? absint($_POST['page']) : 1;
3249		- $per_page = isset($_POST['per_page']) ? absint($_POST['per_page']) : 50;
3250		- $offset = ($page - 1) * $per_page;
3251		- $search = isset($_POST['search']) ? sanitize_text_field($_POST['search']) : '';
3252		- $sort_raw = isset($_POST['sort_order']) ? sanitize_key($_POST['sort_order']) : 'desc';
3253		- $allowed_sorts = array('asc', 'desc', 'rating_positive', 'rating_negative');
3254		- if (!in_array($sort_raw, $allowed_sorts, true)) { $sort_raw = 'desc'; }
3255		- $sort_order = ($sort_raw === 'asc') ? 'ASC' : 'DESC';
3256		- $ratings_table = $wpdb->prefix . 'mxchat_session_ratings';
3257		- $ratings_join = '';
3258		- $rating_table_exists = ($wpdb->get_var($wpdb->prepare("SHOW TABLES LIKE %s", $ratings_table)) === $ratings_table);
3259		- if ($rating_table_exists && ($sort_raw === 'rating_positive' || $sort_raw === 'rating_negative')) {
3260		- // We sort by rating then recency. Wrap rating_value so NULL sorts last.
3261		- $rating_dir = ($sort_raw === 'rating_positive') ? 'DESC' : 'ASC';
3262		- $ratings_join = " LEFT JOIN {$ratings_table} r ON r.session_id = t.session_id ";
3263		- }
	648	+ // Fetch chat transcripts from the database, ordered by timestamp
	649	+ $chat_transcripts = $wpdb->get_results(
	650	+ $wpdb->prepare("SELECT * FROM {$table_name} ORDER BY timestamp ASC")
	651	+ );
3264	652
3265		- // Build search condition
3266		- $search_condition = '';
3267		- $search_params = [];
3268		- if (!empty($search)) {
3269		- $search_condition = "WHERE (
3270		- session_id LIKE %s
3271		- OR user_email LIKE %s
3272		- OR user_name LIKE %s
3273		- OR user_identifier LIKE %s
3274		- OR message LIKE %s
3275		- )";
3276		- $search_params = array_fill(0, 5, '%' . $wpdb->esc_like($search) . '%');
3277		- }
3278		-
3279		- // Get total count
3280		- $count_query = !empty($search)
3281		- ? $wpdb->prepare("SELECT COUNT(DISTINCT session_id) FROM {$table_name} {$search_condition}", $search_params)
3282		- : "SELECT COUNT(DISTINCT session_id) FROM {$table_name}";
3283		- $total_sessions = (int) $wpdb->get_var($count_query);
3284		-
3285		- // Get session IDs for current page. Default sort is recency; rating sorts join the ratings table
3286		- // and order by rating value (NULLs last) with recency as tiebreaker.
3287		- if ($ratings_join) {
3288		- $order_by = "ORDER BY (r.rating_value IS NULL), r.rating_value {$rating_dir}, MAX(t.timestamp) DESC";
3289		- } else {
3290		- $order_by = "ORDER BY MAX(t.timestamp) {$sort_order}";
3291		- }
3292		- $session_query = !empty($search)
3293		- ? $wpdb->prepare(
3294		- "SELECT DISTINCT t.session_id FROM {$table_name} t {$ratings_join} {$search_condition}
3295		- GROUP BY t.session_id {$order_by} LIMIT %d OFFSET %d",
3296		- array_merge($search_params, [$per_page, $offset])
3297		- )
3298		- : $wpdb->prepare(
3299		- "SELECT DISTINCT t.session_id FROM {$table_name} t {$ratings_join}
3300		- GROUP BY t.session_id {$order_by} LIMIT %d OFFSET %d",
3301		- $per_page, $offset
3302		- );
3303		- $session_ids = $wpdb->get_col($session_query);
3304		-
3305		- $total_pages = ceil($total_sessions / $per_page);
3306		-
3307		- if (empty($session_ids)) {
3308		- wp_send_json([
3309		- 'success' => true,
3310		- 'sessions' => [],
3311		- 'page' => $page,
3312		- 'total_pages' => 0,
3313		- 'total_sessions' => 0,
3314		- 'showing_start' => 0,
3315		- 'showing_end' => 0
3316		- ]);
	653	+ // If no transcripts are available, display a message
	654	+ if (empty($chat_transcripts)) {
	655	+ echo esc_html__('No chat history available.', 'mxchat');
3317	656	wp_die();
3318	657	}
3319	658
3320		- // Check for optional columns/tables
3321		- $url_table_exists = $wpdb->get_var("SHOW TABLES LIKE '$url_clicks_table'") === $url_clicks_table;
3322		- $originating_columns_exist = !empty($wpdb->get_results("SHOW COLUMNS FROM $table_name LIKE 'originating_page_url'"));
	659	+ ob_start();
	660	+ $current_session_id = '';
3323	661
3324		- // Batch-fetch session ratings for this page (plan-a5b006).
3325		- $ratings_map = array();
3326		- if ($rating_table_exists && !empty($session_ids)) {
3327		- $placeholders = implode(',', array_fill(0, count($session_ids), '%s'));
3328		- $rating_rows = $wpdb->get_results($wpdb->prepare(
3329		- "SELECT session_id, rating_value, rating_feedback FROM {$ratings_table} WHERE session_id IN ($placeholders)",
3330		- $session_ids
3331		- ));
3332		- foreach ($rating_rows as $row) {
3333		- $ratings_map[$row->session_id] = array(
3334		- 'value' => (int) $row->rating_value,
3335		- 'feedback' => (string) $row->rating_feedback,
3336		- );
3337		- }
3338		- }
3339		-
3340		- // Build session list data
3341		- $sessions = [];
3342		- foreach ($session_ids as $session_id) {
3343		- // Get session metadata
3344		- $session_data = $originating_columns_exist
3345		- ? $wpdb->get_row($wpdb->prepare(
3346		- "SELECT user_email, user_name, user_identifier, originating_page_url, originating_page_title, timestamp
3347		- FROM {$table_name} WHERE session_id = %s ORDER BY timestamp ASC LIMIT 1",
3348		- $session_id
3349		- ))
3350		- : $wpdb->get_row($wpdb->prepare(
3351		- "SELECT user_email, user_name, user_identifier, timestamp FROM {$table_name}
3352		- WHERE session_id = %s LIMIT 1",
3353		- $session_id
3354		- ));
3355		-
3356		- // Get message count and latest timestamp
3357		- $message_stats = $wpdb->get_row($wpdb->prepare(
3358		- "SELECT COUNT(*) as count, MAX(timestamp) as latest FROM {$table_name} WHERE session_id = %s",
3359		- $session_id
3360		- ));
3361		-
3362		- // Get first user message as preview
3363		- $first_user_msg = $wpdb->get_var($wpdb->prepare(
3364		- "SELECT message FROM {$table_name} WHERE session_id = %s AND role = 'user' ORDER BY timestamp ASC LIMIT 1",
3365		- $session_id
3366		- ));
3367		- $preview = $first_user_msg ? wp_trim_words(wp_strip_all_tags(stripslashes($first_user_msg)), 12, '...') : 'No messages';
3368		-
3369		- // Build display name
3370		- $user_email = !empty($session_data->user_email) ? $session_data->user_email : '';
3371		- $user_name = !empty($session_data->user_name) ? $session_data->user_name : '';
3372		- $user_identifier = !empty($session_data->user_identifier) ? $session_data->user_identifier : 'Guest';
3373		-
3374		- $display_name = $user_name ?: ($user_email ? explode('@', $user_email)[0] : $user_identifier);
3375		- $display_sub = $user_email ?: ('ID: ' . $user_identifier);
3376		-
3377		- // Format time - show relative for recent, date for older
3378		- $timestamp = strtotime($message_stats->latest . ' UTC');
3379		- $now = time();
3380		- $diff = $now - $timestamp;
3381		- if ($diff < 3600) {
3382		- $time_display = floor($diff / 60) . 'm ago';
3383		- } elseif ($diff < 86400) {
3384		- $time_display = floor($diff / 3600) . 'h ago';
3385		- } elseif ($diff < 604800) {
3386		- $time_display = floor($diff / 86400) . 'd ago';
3387		- } else {
3388		- $time_display = wp_date('M j', $timestamp);
3389		- }
3390		-
3391		- // Get initials for avatar
3392		- $initials = strtoupper(substr($display_name, 0, 2));
3393		- if (strlen($display_name) > 2 && strpos($display_name, ' ') !== false) {
3394		- $parts = explode(' ', $display_name);
3395		- $initials = strtoupper(substr($parts[0], 0, 1) . substr(end($parts), 0, 1));
3396		- }
3397		-
3398		- $rating_entry = isset($ratings_map[$session_id]) ? $ratings_map[$session_id] : null;
3399		- $rating_value = $rating_entry ? $rating_entry['value'] : null;
3400		- $rating_feedback = $rating_entry ? $rating_entry['feedback'] : '';
3401		-
3402		- $sessions[] = [
3403		- 'session_id' => $session_id,
3404		- 'display_name' => $display_name,
3405		- 'display_sub' => $display_sub,
3406		- 'initials' => $initials,
3407		- 'preview' => $preview,
3408		- 'message_count' => (int) $message_stats->count,
3409		- 'time_display' => $time_display,
3410		- 'timestamp' => $message_stats->latest,
3411		- 'rating_value' => $rating_value,
3412		- 'rating_feedback' => $rating_feedback,
3413		- ];
3414		- }
3415		-
3416		- wp_send_json([
3417		- 'success' => true,
3418		- 'sessions' => $sessions,
3419		- 'page' => $page,
3420		- 'total_pages' => $total_pages,
3421		- 'total_sessions' => $total_sessions,
3422		- 'showing_start' => $offset + 1,
3423		- 'showing_end' => min($offset + $per_page, $total_sessions)
3424		- ]);
3425		- wp_die();
3426		-}
3427		-
3428		-/**
3429		- * Fetch single conversation details for split-panel view
3430		- */
3431		-public function mxchat_fetch_conversation() {
3432		- global $wpdb;
3433		- $table_name = $wpdb->prefix . 'mxchat_chat_transcripts';
3434		- $url_clicks_table = $wpdb->prefix . 'mxchat_url_clicks';
3435		-
3436		- if (!current_user_can('manage_options')) {
3437		- wp_send_json_error(['message' => 'Insufficient permissions']);
3438		- wp_die();
3439		- }
3440		-
3441		- $session_id = isset($_POST['session_id']) ? MxChat_Utils::sanitize_session_id(wp_unslash($_POST['session_id'])) : '';
3442		- if (empty($session_id)) {
3443		- wp_send_json_error(['message' => 'No session ID provided']);
3444		- wp_die();
3445		- }
3446		-
3447		- // Check for optional columns/tables
3448		- $url_table_exists = $wpdb->get_var("SHOW TABLES LIKE '$url_clicks_table'") === $url_clicks_table;
3449		- $originating_columns_exist = !empty($wpdb->get_results("SHOW COLUMNS FROM $table_name LIKE 'originating_page_url'"));
3450		-
3451		- // Get session metadata
3452		- $session_data = $originating_columns_exist
3453		- ? $wpdb->get_row($wpdb->prepare(
3454		- "SELECT user_email, user_name, user_identifier, originating_page_url, originating_page_title, timestamp
3455		- FROM {$table_name} WHERE session_id = %s ORDER BY timestamp ASC LIMIT 1",
3456		- $session_id
3457		- ))
3458		- : $wpdb->get_row($wpdb->prepare(
3459		- "SELECT user_email, user_name, user_identifier, timestamp FROM {$table_name}
3460		- WHERE session_id = %s LIMIT 1",
3461		- $session_id
3462		- ));
3463		-
3464		- if (!$session_data) {
3465		- wp_send_json_error(['message' => 'Session not found']);
3466		- wp_die();
3467		- }
3468		-
3469		- // Get clicked URLs
3470		- $clicked_urls = [];
3471		- if ($url_table_exists) {
3472		- $url_clicks = $wpdb->get_results($wpdb->prepare(
3473		- "SELECT DISTINCT clicked_url FROM {$url_clicks_table}
3474		- WHERE session_id = %s ORDER BY click_timestamp ASC",
3475		- $session_id
3476		- ));
3477		- foreach ($url_clicks as $click) {
3478		- $clicked_urls[] = $click->clicked_url;
3479		- }
3480		- }
3481		-
3482		- // Get all messages
3483		- $messages = $wpdb->get_results($wpdb->prepare(
3484		- "SELECT * FROM {$table_name} WHERE session_id = %s ORDER BY timestamp ASC",
3485		- $session_id
3486		- ));
3487		-
3488		- // Build user info
3489		- $user_email = !empty($session_data->user_email) ? $session_data->user_email : '';
3490		- $user_name = !empty($session_data->user_name) ? $session_data->user_name : '';
3491		- $user_identifier = !empty($session_data->user_identifier) ? $session_data->user_identifier : 'Guest';
3492		-
3493		- $display_name = $user_name ?: ($user_email ? explode('@', $user_email)[0] : $user_identifier);
3494		- $display_sub = $user_email ?: ('ID: ' . $user_identifier);
3495		-
3496		- // Get initials
3497		- $initials = strtoupper(substr($display_name, 0, 2));
3498		- if (strlen($display_name) > 2 && strpos($display_name, ' ') !== false) {
3499		- $parts = explode(' ', $display_name);
3500		- $initials = strtoupper(substr($parts[0], 0, 1) . substr(end($parts), 0, 1));
3501		- }
3502		-
3503		- // Page info
3504		- $page_url = $originating_columns_exist && !empty($session_data->originating_page_url) ? $session_data->originating_page_url : '';
3505		- $page_title = '';
3506		- if ($page_url) {
3507		- $page_title = !empty($session_data->originating_page_title) ? $session_data->originating_page_title : parse_url($page_url, PHP_URL_PATH);
3508		- }
3509		-
3510		- // Format messages for output
3511		- $formatted_messages = [];
3512		- foreach ($messages as $msg) {
3513		- $is_user = ($msg->role === 'user');
3514		- // Live-agent replies (Slack/Telegram handoff) persist with role 'agent'.
3515		- // Kept OUT of $is_bot so the RAG Sources link below stays bot-only.
3516		- $is_agent = ($msg->role === 'agent');
3517		- $is_bot = ($msg->role === 'bot' || $msg->role === 'assistant');
3518		-
3519		- $content = wp_kses(
3520		- stripslashes($msg->message),
3521		- [
3522		- 'b' => [], 'strong' => [], 'i' => [], 'em' => [], 'u' => [],
3523		- 'br' => [], 'p' => [], 'ul' => [], 'ol' => [], 'li' => [],
3524		- 'a' => ['href' => [], 'title' => [], 'target' => [], 'class' => []],
3525		- 'div' => ['class' => [], 'id' => [], 'data-nonce' => []],
3526		- 'img' => ['src' => [], 'alt' => [], 'class' => []],
3527		- 'h3' => ['class' => []],
3528		- 'h4' => ['class' => []],
3529		- 'button' => ['type' => [], 'class' => [], 'data-product-id' => [], 'data-nonce' => [], 'data-product-type' => [], 'data-original-text' => [], 'data-mxchat-action' => []],
3530		- 'select' => ['class' => [], 'data-attribute' => []],
3531		- 'option' => ['value' => []],
3532		- 'span' => ['class' => []],
3533		- 'del' => [], 'ins' => [],
3534		- ]
3535		- );
3536		- $formatted_content = $this->format_transcript_message($content);
3537		-
3538		- $has_rag = $is_bot && !empty($msg->rag_context);
3539		-
3540		- $formatted_messages[] = [
3541		- 'id' => $msg->id,
3542		- 'role' => $msg->role,
3543		- 'is_user' => $is_user,
3544		- 'is_agent' => $is_agent,
3545		- 'is_bot' => $is_bot,
3546		- 'content' => $formatted_content,
3547		- 'timestamp' => wp_date('g:i A', strtotime($msg->timestamp . ' UTC')),
3548		- 'full_timestamp' => wp_date('F j, Y g:i A', strtotime($msg->timestamp . ' UTC')),
3549		- 'has_rag' => $has_rag
3550		- ];
3551		- }
3552		-
3553		- // First message timestamp for "started" display
3554		- $started = !empty($messages) ? wp_date('M j, Y g:i A', strtotime($messages[0]->timestamp . ' UTC')) : '-';
3555		-
3556		- // Pull rating_feedback for this session (if any) so the details drawer can show it.
3557		- $rating_feedback = '';
3558		- $ratings_table_det = $wpdb->prefix . 'mxchat_session_ratings';
3559		- if ($wpdb->get_var("SHOW TABLES LIKE '$ratings_table_det'") === $ratings_table_det) {
3560		- $rating_feedback = (string) $wpdb->get_var($wpdb->prepare(
3561		- "SELECT rating_feedback FROM {$ratings_table_det} WHERE session_id = %s LIMIT 1",
3562		- $session_id
3563		- ));
3564		- }
3565		-
3566		- wp_send_json([
3567		- 'success' => true,
3568		- 'session_id' => $session_id,
3569		- 'user' => [
3570		- 'name' => $display_name,
3571		- 'sub' => $display_sub,
3572		- 'initials' => $initials,
3573		- 'email' => $user_email,
3574		- 'identifier' => $user_identifier
3575		- ],
3576		- 'page' => [
3577		- 'url' => $page_url,
3578		- 'title' => $page_title
3579		- ],
3580		- 'clicked_urls' => $clicked_urls,
3581		- 'messages' => $formatted_messages,
3582		- 'message_count' => count($messages),
3583		- 'started' => $started,
3584		- 'rating_feedback' => $rating_feedback
3585		- ]);
3586		- wp_die();
3587		-}
3588		-
3589		-
3590		-/**
3591		- * ALTERNATIVE: Simpler helper method using string replacement
3592		- */
3593		-private function highlight_clicked_links($message_content, $clicked_urls) {
3594		- if (empty($clicked_urls)) {
3595		- return wp_kses(
3596		- $message_content,
3597		- [
3598		- 'b' => [], 'strong' => [], 'i' => [], 'em' => [], 'u' => [],
3599		- 'br' => [], 'p' => [], 'ul' => [], 'ol' => [], 'li' => [],
3600		- 'a' => ['href' => [], 'title' => [], 'target' => [], 'class' => []]
3601		- ]
3602		- );
3603		- }
3604		-
3605		- // First apply standard sanitization
3606		- $message_content = wp_kses(
3607		- $message_content,
3608		- [
3609		- 'b' => [], 'strong' => [], 'i' => [], 'em' => [], 'u' => [],
3610		- 'br' => [], 'p' => [], 'ul' => [], 'ol' => [], 'li' => [],
3611		- 'a' => ['href' => [], 'title' => [], 'target' => [], 'class' => []]
3612		- ]
3613		- );
3614		-
3615		- // Process each clicked URL
3616		- foreach ($clicked_urls as $clicked_url) {
3617		- // Try multiple patterns to catch different link formats
3618		- $patterns = [
3619		- // Standard link format
3620		- '/<a([^>]*href=["\']' . preg_quote($clicked_url, '/') . '["\'][^>]*)>/i',
3621		- // Link with trailing slash
3622		- '/<a([^>]*href=["\']' . preg_quote(rtrim($clicked_url, '/'), '/') . '\/?["\'][^>]*)>/i',
3623		- // Encoded entities version
3624		- '/<a([^>]*href=["\']' . preg_quote(htmlentities($clicked_url), '/') . '["\'][^>]*)>/i',
3625		- ];
3626		-
3627		- foreach ($patterns as $pattern) {
3628		- if (preg_match($pattern, $message_content)) {
3629		- $message_content = preg_replace_callback(
3630		- $pattern,
3631		- function($matches) {
3632		- $full_match = $matches[0];
3633		- $attributes = $matches[1];
3634		-
3635		- // Check if it already has the class
3636		- if (strpos($full_match, 'mxchat-clicked-link') !== false) {
3637		- return $full_match;
3638		- }
3639		-
3640		- // Check if class attribute exists
3641		- if (preg_match('/class=["\']([^"\']*)["\']/', $attributes, $class_matches)) {
3642		- // Add to existing class
3643		- $new_attributes = preg_replace(
3644		- '/class=["\']([^"\']*)["\']/',
3645		- 'class="$1 mxchat-clicked-link"',
3646		- $attributes
3647		- );
3648		- } else {
3649		- // Add new class attribute
3650		- $new_attributes = $attributes . ' class="mxchat-clicked-link"';
3651		- }
3652		-
3653		- // Add title if not present
3654		- if (strpos($new_attributes, 'title=') === false) {
3655		- $new_attributes .= ' title="User clicked this link"';
3656		- }
3657		-
3658		- return '<a' . $new_attributes . '>';
3659		- },
3660		- $message_content
3661		- );
3662		-
3663		- // If we found and replaced, break out of the patterns loop
3664		- break;
	662	+ foreach ($chat_transcripts as $transcript) {
	663	+ // Start a new session block if session ID changes
	664	+ if ($current_session_id !== $transcript->session_id) {
	665	+ if ($current_session_id !== '') {
	666	+ echo '</div>'; // Close the previous session block
3665	667	}
	668	+ $current_session_id = sanitize_text_field($transcript->session_id);
	669	+ echo '<div class="chat-session">';
	670	+ echo '<h4><input type="checkbox" name="delete_session_ids[]" value="' . esc_attr($transcript->session_id) . '"> ' . esc_html__('Session ID:', 'mxchat') . ' ' . esc_html($current_session_id) . '</h4>';
3666	671	}
3667		- }
3668	672
3669		- return $message_content;
3670		-}
	673	+ // Format the timestamp for display
	674	+ $formatted_timestamp = date_i18n('F j, Y g:i a', strtotime($transcript->timestamp));
3671	675
3672		-public function mxchat_create_prompts_page() {
3673		- //error_log('=== DEBUG: mxchat_create_prompts_page started ===');
	676	+ // Determine the role to display (user identifier or email for users, bot for the AI)
	677	+ $role = $transcript->role;
	678	+ if ($role === 'user') {
	679	+ // Sanitize email if available
	680	+ if (!empty($transcript->user_email)) {
	681	+ $role = sanitize_email($transcript->user_email);
	682	+ } else {
	683	+ // Sanitize user identifier, anonymize if it's an IP address
	684	+ $user_identifier = sanitize_text_field($transcript->user_identifier);
3674	685
3675		- global $wpdb;
3676		- $table_name = $wpdb->prefix . 'mxchat_system_prompt_content';
3677		-
3678		- $knowledge_manager = MxChat_Knowledge_Manager::get_instance();
3679		- $pinecone_manager = MxChat_Pinecone_Manager::get_instance();
3680		-
3681		- // Display success message if all prompts were deleted
3682		- if (isset($_GET['all_deleted']) && $_GET['all_deleted'] === 'true') {
3683		- echo '<div class="notice notice-success is-dismissible"><p>' . esc_html__('All knowledge has been deleted successfully.', 'mxchat') . '</p><button type="button" class="notice-dismiss"><span class="screen-reader-text">' . esc_html__('Dismiss this notice.', 'mxchat') . '</span></button></div>';
3684		- }
3685		-
3686		- // Set up pagination, search query, and content type filter
3687		- $nonce = isset($_GET['_wpnonce']) ? sanitize_text_field($_GET['_wpnonce']) : '';
3688		- $search_query = (!empty($nonce) && wp_verify_nonce($nonce, 'mxchat_prompts_search_nonce') && isset($_GET['search'])) ? sanitize_text_field($_GET['search']) : '';
3689		- $content_type_filter = isset($_GET['content_type']) ? sanitize_key($_GET['content_type']) : ''; // ADDED 2.5.6
3690		- $current_page = isset($_GET['paged']) ? absint($_GET['paged']) : 1;
3691		- $per_page = 25;
3692		-
3693		- //error_log('DEBUG: Search query: ' . $search_query);
3694		- //error_log('DEBUG: Content type filter: ' . $content_type_filter);
3695		- //error_log('DEBUG: Current page: ' . $current_page);
3696		- //error_log('DEBUG: Per page: ' . $per_page);
3697		-
3698		- // ================================
3699		- // MULTI-BOT CONFIGURATION
3700		- // ================================
3701		-
3702		- // Check for multi-bot and set up bot selection
3703		- if (class_exists('MxChat_Multi_Bot_Manager')) {
3704		- $multi_bot_manager = MxChat_Multi_Bot_Core_Manager::get_instance();
3705		- $available_bots = $multi_bot_manager->get_available_bots();
3706		-
3707		- // Get saved bot selection (user-specific first, then site-wide default)
3708		- $user_id = get_current_user_id();
3709		- $saved_bot_id = get_user_meta($user_id, 'mxchat_selected_knowledge_bot', true);
3710		- if (empty($saved_bot_id)) {
3711		- $saved_bot_id = get_option('mxchat_current_knowledge_bot', 'default');
3712		- }
3713		-
3714		- // Allow URL override but default to saved selection
3715		- $current_bot_id = isset($_GET['bot_id']) ? sanitize_key($_GET['bot_id']) : $saved_bot_id;
3716		- $multibot_active = true;
3717		- } else {
3718		- $current_bot_id = 'default';
3719		- $multibot_active = false;
3720		- }
3721		-
3722		- // ================================
3723		- // DATA SOURCE CONFIGURATION
3724		- // ================================
3725		-
3726		- // Get bot-specific Pinecone settings
3727		- $pinecone_options = $pinecone_manager->mxchat_get_bot_pinecone_options($current_bot_id);
3728		- $use_pinecone = ($pinecone_options['mxchat_use_pinecone'] ?? '0') === '1';
3729		- $pinecone_api_key = $pinecone_options['mxchat_pinecone_api_key'] ?? '';
3730		-
3731		- // Get OpenAI Vector Store settings
3732		- $vectorstore_options = get_option('mxchat_openai_vectorstore_options', array());
3733		- $use_vectorstore = ($vectorstore_options['mxchat_use_openai_vectorstore'] ?? '0') === '1';
3734		-
3735		- //error_log('DEBUG: Bot ' . $current_bot_id . ' - Use Pinecone: ' . ($use_pinecone ? 'YES' : 'NO'));
3736		- //error_log('DEBUG: Bot ' . $current_bot_id . ' - Has API Key: ' . (!empty($pinecone_api_key) ? 'YES' : 'NO'));
3737		- //error_log('DEBUG: Bot ' . $current_bot_id . ' - Host: ' . ($pinecone_options['mxchat_pinecone_host'] ?? 'NOT SET'));
3738		- //error_log('DEBUG: Bot ' . $current_bot_id . ' - Namespace: ' . ($pinecone_options['mxchat_pinecone_namespace'] ?? 'NOT SET'));
3739		-
3740		- if ($use_pinecone && !empty($pinecone_api_key)) {
3741		- //error_log('DEBUG: Using PINECONE data source with bot-specific config');
3742		- // PINECONE DATA SOURCE
3743		- $data_source = 'pinecone';
3744		-
3745		- // IMPORTANT: Pass the bot-specific $pinecone_options, not default options!
3746		- // UPDATED 2.5.6: Added content_type_filter parameter
3747		- $records = $pinecone_manager->mxchat_fetch_pinecone_records($pinecone_options, $search_query, $current_page, $per_page, $current_bot_id, $content_type_filter);
3748		-
3749		- // TEMPORARY DEBUG - Add this right after the fetch call
3750		- //error_log('=== DEBUG: Bot switching issue ===');
3751		- //error_log('Current bot ID: ' . $current_bot_id);
3752		- //error_log('Use Pinecone: ' . ($use_pinecone ? 'YES' : 'NO'));
3753		- //error_log('Records returned: ' . count($records['data'] ?? []));
3754		- //error_log('Total records: ' . ($records['total'] ?? 0));
3755		-
3756		- // Check first few records to see their bot_id
3757		- if (!empty($records['data'])) {
3758		- foreach (array_slice($records['data'], 0, 3) as $i => $record) {
3759		- $record_bot_id = $record->bot_id ?? 'NOT_SET';
3760		- //error_log('Record ' . ($i+1) . ' bot_id: ' . $record_bot_id . ', content preview: ' . substr($record->article_content ?? '', 0, 30) . '...');
3761		- }
3762		- }
3763		- //error_log('=== END DEBUG ===');
3764		-
3765		- $total_records = $records['total'] ?? 0;
3766		- $prompts = $records['data'] ?? array();
3767		- $total_in_database = $records['total_in_database'] ?? 0;
3768		- $showing_recent_only = $records['showing_recent_only'] ?? false;
3769		-
3770		- $total_pages = ceil($total_records / $per_page);
3771		-
3772		- } else {
3773		- //error_log('DEBUG: Using WORDPRESS DB data source');
3774		- // WORDPRESS DB DATA SOURCE (your existing logic)
3775		- $data_source = 'wordpress';
3776		-
3777		- // Initialize these variables for WordPress DB
3778		- $total_in_database = 0;
3779		- $showing_recent_only = false;
3780		-
3781		- $offset = ($current_page - 1) * $per_page;
3782		-
3783		- // UPDATED 2.5.6: Build WHERE clause for search and content type filtering
3784		- $where_clauses = array();
3785		- $where_values = array();
3786		-
3787		- if ($search_query) {
3788		- $where_clauses[] = "article_content LIKE %s";
3789		- $where_values[] = '%' . $wpdb->esc_like($search_query) . '%';
3790		- }
3791		-
3792		- if ($content_type_filter) {
3793		- $where_clauses[] = "content_type = %s";
3794		- $where_values[] = $content_type_filter;
3795		- }
3796		-
3797		- $sql_where = "";
3798		- if (!empty($where_clauses)) {
3799		- $sql_where = "WHERE " . implode(" AND ", $where_clauses);
3800		- }
3801		-
3802		- // UPDATED 2.6.3: Count unique entries (by source_url) instead of individual rows
3803		- // This ensures pagination shows X entries per page, not X chunks
3804		- // Entries with empty source_url are counted individually
3805		- if (!empty($where_values)) {
3806		- // Count unique source_urls + count of rows with empty source_url
3807		- $count_query = $wpdb->prepare(
3808		- "SELECT (SELECT COUNT(DISTINCT source_url) FROM {$table_name} {$sql_where} AND source_url != '') +
3809		- (SELECT COUNT(*) FROM {$table_name} {$sql_where} AND (source_url = '' OR source_url IS NULL))",
3810		- array_merge($where_values, $where_values)
3811		- );
3812		- } else {
3813		- $count_query = "SELECT (SELECT COUNT(DISTINCT source_url) FROM {$table_name} WHERE source_url != '') +
3814		- (SELECT COUNT(*) FROM {$table_name} WHERE source_url = '' OR source_url IS NULL)";
3815		- }
3816		- $total_records = $wpdb->get_var($count_query);
3817		- $total_pages = ceil($total_records / $per_page);
3818		-
3819		- // UPDATED 2.6.3: Get unique source_urls for pagination, then fetch all their rows
3820		- // Step 1: Get the source_urls for this page (distinct URLs ordered by latest timestamp)
3821		- if (!empty($where_values)) {
3822		- $urls_query = $wpdb->prepare(
3823		- "SELECT source_url, MAX(timestamp) as latest_ts FROM {$table_name} {$sql_where}
3824		- GROUP BY source_url ORDER BY latest_ts DESC LIMIT %d OFFSET %d",
3825		- array_merge($where_values, array($per_page, $offset))
3826		- );
3827		- } else {
3828		- $urls_query = $wpdb->prepare(
3829		- "SELECT source_url, MAX(timestamp) as latest_ts FROM {$table_name}
3830		- GROUP BY source_url ORDER BY latest_ts DESC LIMIT %d OFFSET %d",
3831		- $per_page, $offset
3832		- );
3833		- }
3834		- $page_urls = $wpdb->get_results($urls_query);
3835		-
3836		- // Step 2: Fetch all rows for these source_urls
3837		- $prompts = array();
3838		- if (!empty($page_urls)) {
3839		- // Build URL order map to preserve newest-first ordering from step 1
3840		- $url_order_map = array();
3841		- $url_list = array();
3842		- $has_empty_url = false;
3843		- $order_index = 0;
3844		- foreach ($page_urls as $url_row) {
3845		- if (empty($url_row->source_url)) {
3846		- $has_empty_url = true;
3847		- $url_order_map['__empty__'] = $order_index++;
	686	+ // Check if the user identifier is an IP address and anonymize it
	687	+ if (filter_var($user_identifier, FILTER_VALIDATE_IP)) {
	688	+ $role = preg_replace('/\.\d+$/', '.xxx', $user_identifier); // Mask the last octet
3848	689	} else {
3849		- $url_list[] = $url_row->source_url;
3850		- $url_order_map[$url_row->source_url] = $order_index++;
	690	+ $role = $user_identifier; // If it's not an IP, just display the identifier
3851	691	}
3852	692	}
3853		-
3854		- // Build query to fetch all rows for these URLs
3855		- $url_conditions = array();
3856		- $url_values = array();
3857		-
3858		- if (!empty($url_list)) {
3859		- $placeholders = implode(',', array_fill(0, count($url_list), '%s'));
3860		- $url_conditions[] = "source_url IN ($placeholders)";
3861		- $url_values = array_merge($url_values, $url_list);
3862		- }
3863		-
3864		- if ($has_empty_url) {
3865		- $url_conditions[] = "(source_url = '' OR source_url IS NULL)";
3866		- }
3867		-
3868		- if (!empty($url_conditions)) {
3869		- $url_where = "WHERE (" . implode(" OR ", $url_conditions) . ")";
3870		-
3871		- // Add original filters back
3872		- if (!empty($where_clauses)) {
3873		- $url_where .= " AND " . implode(" AND ", $where_clauses);
3874		- $url_values = array_merge($url_values, $where_values);
3875		- }
3876		-
3877		- if (!empty($url_values)) {
3878		- $prompts_query = $wpdb->prepare(
3879		- "SELECT * FROM {$table_name} {$url_where} ORDER BY timestamp DESC",
3880		- $url_values
3881		- );
3882		- } else {
3883		- $prompts_query = "SELECT * FROM {$table_name} {$url_where} ORDER BY timestamp DESC";
3884		- }
3885		-
3886		- $prompts = $wpdb->get_results($prompts_query);
3887		-
3888		- // Sort prompts by the original URL order (newest first), then by timestamp within each URL group
3889		- usort($prompts, function($a, $b) use ($url_order_map) {
3890		- $url_a = empty($a->source_url) ? '__empty__' : $a->source_url;
3891		- $url_b = empty($b->source_url) ? '__empty__' : $b->source_url;
3892		- $order_a = $url_order_map[$url_a] ?? PHP_INT_MAX;
3893		- $order_b = $url_order_map[$url_b] ?? PHP_INT_MAX;
3894		-
3895		- // First sort by URL order (newest URLs first)
3896		- if ($order_a !== $order_b) {
3897		- return $order_a - $order_b;
3898		- }
3899		-
3900		- // Within same URL, sort by timestamp DESC (newest chunks first)
3901		- return strtotime($b->timestamp) - strtotime($a->timestamp);
3902		- });
3903		- }
3904	693	}
3905		- }
3906	694
3907		- // ================================
3908		- // PAGINATION GENERATION
3909		- // ================================
3910		-
3911		- // Generate pagination links
3912		- if ($total_pages > 1) {
3913		- // Build a clean base URL with only necessary parameters
3914		- $pagination_args = array('page' => 'mxchat-prompts');
3915		-
3916		- // Preserve bot_id parameter if multi-bot is active
3917		- if ($multibot_active && !empty($current_bot_id) && $current_bot_id !== 'default') {
3918		- $pagination_args['bot_id'] = $current_bot_id;
3919		- }
3920		-
3921		- // Preserve search query and nonce if present
3922		- if ($search_query) {
3923		- $pagination_args['search'] = $search_query;
3924		- if (!empty($nonce)) {
3925		- $pagination_args['_wpnonce'] = $nonce;
3926		- }
3927		- }
3928		-
3929		- // Preserve content type filter if present
3930		- if ($content_type_filter) {
3931		- $pagination_args['content_type'] = $content_type_filter;
3932		- }
3933		-
3934		- // Build clean base URL
3935		- $base_url = add_query_arg($pagination_args, admin_url('admin.php'));
3936		-
3937		- $page_links = paginate_links(array(
3938		- 'base' => $base_url . '%_%',
3939		- 'format' => '&paged=%#%',
3940		- 'prev_text' => __('&laquo; Previous', 'mxchat'),
3941		- 'next_text' => __('Next &raquo;', 'mxchat'),
3942		- 'total' => $total_pages,
3943		- 'current' => $current_page,
3944		- 'type' => 'plain',
3945		- ));
3946		- } else {
3947		- $page_links = '';
	695	+ // Output the chat message
	696	+ echo '<div class="chat-message">';
	697	+ echo '<strong>' . esc_html($role) . ' (' . esc_html($formatted_timestamp) . '):</strong> ';
	698	+ echo wp_kses_post($transcript->message);
	699	+ echo '</div>';
3948	700	}
3949	701
3950		- // ================================
3951		- // PROCESSING STATUS RETRIEVAL
3952		- // ================================
	702	+ // Close the final session block
	703	+ echo '</div>';
3953	704
3954		- // Retrieve processing statuses using queue-based method
3955		- $processing_statuses = $knowledge_manager->mxchat_get_processing_statuses();
3956		- $pdf_status = $processing_statuses['pdf_status'];
3957		- $sitemap_status = $processing_statuses['sitemap_status'];
3958		- $is_processing = $processing_statuses['is_processing'];
	705	+ $output = ob_get_clean();
3959	706
3960		- //error_log('=== DEBUG: mxchat_create_prompts_page data preparation completed ===');
3961		-
3962		- // ================================
3963		- // RENDER PAGE WITH NEW SIDEBAR LAYOUT
3964		- // ================================
3965		-
3966		- // Include the new knowledge page template
3967		- require_once plugin_dir_path(__FILE__) . 'admin-knowledge-page.php';
3968		-
3969		- // Package all page data for the render function
3970		- $page_data = array(
3971		- 'prompts' => $prompts,
3972		- 'total_records' => $total_records,
3973		- 'total_pages' => $total_pages,
3974		- 'current_page' => $current_page,
3975		- 'per_page' => $per_page,
3976		- 'page_links' => $page_links,
3977		- 'search_query' => $search_query,
3978		- 'content_type_filter' => $content_type_filter,
3979		- 'data_source' => $data_source,
3980		- 'use_pinecone' => $use_pinecone,
3981		- 'use_vectorstore' => $use_vectorstore,
3982		- 'multibot_active' => $multibot_active,
3983		- 'current_bot_id' => $current_bot_id,
3984		- 'pdf_status' => $pdf_status,
3985		- 'sitemap_status' => $sitemap_status,
3986		- 'is_processing' => $is_processing,
3987		- 'total_in_database' => $total_in_database ?? 0,
3988		- 'showing_recent_only' => $showing_recent_only ?? false,
3989		- );
3990		-
3991		- // Render the new sidebar-based page
3992		- mxchat_render_knowledge_page($this, $knowledge_manager, $page_data);
3993		-}
3994		-
3995		-/**
3996		- * Get bot-specific Pinecone configuration
3997		- * Used in the knowledge retrieval functions
3998		- */
3999		-private function get_bot_pinecone_config($bot_id = 'default') {
4000		- //error_log("MXCHAT DEBUG: get_bot_pinecone_config called for bot: " . $bot_id);
4001		-
4002		- // If default bot or multi-bot add-on not active, use default Pinecone config
4003		- if ($bot_id === 'default' || !class_exists('MxChat_Multi_Bot_Manager')) {
4004		- //error_log("MXCHAT DEBUG: Using default Pinecone config (no multi-bot or bot is 'default')");
4005		- $addon_options = get_option('mxchat_pinecone_addon_options', array());
4006		- $config = array(
4007		- 'use_pinecone' => (isset($addon_options['mxchat_use_pinecone']) && $addon_options['mxchat_use_pinecone'] === '1'),
4008		- 'api_key' => $addon_options['mxchat_pinecone_api_key'] ?? '',
4009		- 'host' => $addon_options['mxchat_pinecone_host'] ?? '',
4010		- 'namespace' => $addon_options['mxchat_pinecone_namespace'] ?? ''
4011		- );
4012		- //error_log("MXCHAT DEBUG: Default config - use_pinecone: " . ($config['use_pinecone'] ? 'true' : 'false'));
4013		- return $config;
4014		- }
4015		-
4016		- //error_log("MXCHAT DEBUG: Calling filter 'mxchat_get_bot_pinecone_config' for bot: " . $bot_id);
4017		-
4018		- // Hook for multi-bot add-on to provide bot-specific Pinecone config
4019		- $bot_pinecone_config = apply_filters('mxchat_get_bot_pinecone_config', array(), $bot_id);
4020		-
4021		- if (!empty($bot_pinecone_config)) {
4022		- //error_log("MXCHAT DEBUG: Got bot-specific config from filter");
4023		- //error_log(" - use_pinecone: " . (isset($bot_pinecone_config['use_pinecone']) ? ($bot_pinecone_config['use_pinecone'] ? 'true' : 'false') : 'not set'));
4024		- //error_log(" - host: " . ($bot_pinecone_config['host'] ?? 'not set'));
4025		- //error_log(" - namespace: " . ($bot_pinecone_config['namespace'] ?? 'not set'));
4026		- } else {
4027		- //error_log("MXCHAT DEBUG: Filter returned empty config!");
4028		- }
4029		-
4030		- return is_array($bot_pinecone_config) ? $bot_pinecone_config : array();
4031		-}
4032		-
4033		-public function mxchat_delete_chat_history() {
4034		- if (!current_user_can('manage_options')) {
4035		- echo wp_json_encode(['error' => esc_html__('You do not have sufficient permissions.', 'mxchat')]);
4036		- wp_die();
4037		- }
4038		- check_ajax_referer('mxchat_delete_chat_history', 'security');
4039		-
4040		- if (!isset($_POST['delete_session_ids']) || !is_array($_POST['delete_session_ids'])) {
4041		- echo wp_json_encode(['error' => esc_html__('No chat sessions selected for deletion.', 'mxchat')]);
4042		- wp_die();
4043		- }
4044		-
4045		- global $wpdb;
4046		- $table_name = $wpdb->prefix . 'mxchat_chat_transcripts';
4047		- $translations_table = $wpdb->prefix . 'mxchat_transcript_translations';
4048		- $has_translations = $wpdb->get_var("SHOW TABLES LIKE '$translations_table'") === $translations_table;
4049		-
4050		- // When true, any lead attached to these sessions is fully wiped (all their sessions,
4051		- // across the whole table). Default false: the chat rows go away but the lead is
4052		- // preserved as a separate "chat deleted" lead in the Leads tab.
4053		- $also_delete_lead = !empty($_POST['also_delete_lead']) && $_POST['also_delete_lead'] !== 'false';
4054		-
4055		- $deleted_count = 0;
4056		- $preserved_as_deleted_leads = 0;
4057		- $emails_to_fully_wipe = [];
4058		-
4059		- foreach ((array) $_POST['delete_session_ids'] as $session_id) {
4060		- $session_id_sanitized = MxChat_Utils::sanitize_session_id($session_id);
4061		- if ($session_id_sanitized === '') {
4062		- continue;
4063		- }
4064		-
4065		- // Capture the lead info attached to this session *before* we delete the rows.
4066		- $lead_row = $wpdb->get_row($wpdb->prepare(
4067		- "SELECT user_email, user_name, MAX(timestamp) AS last_ts
4068		- FROM {$table_name}
4069		- WHERE session_id = %s AND user_email IS NOT NULL AND user_email != ''
4070		- GROUP BY user_email, user_name
4071		- ORDER BY last_ts DESC LIMIT 1",
4072		- $session_id_sanitized
4073		- ));
4074		-
4075		- wp_cache_delete('chat_session_' . $session_id_sanitized, 'mxchat_chat_sessions');
4076		- $wpdb->delete($table_name, ['session_id' => $session_id_sanitized]);
4077		-
4078		- if ($has_translations) {
4079		- $wpdb->delete($translations_table, ['session_id' => $session_id_sanitized]);
4080		- }
4081		-
4082		- delete_option('mxchat_history_' . $session_id_sanitized);
4083		- delete_option('mxchat_agent_name_' . $session_id_sanitized);
4084		-
4085		- if ($lead_row && !empty($lead_row->user_email)) {
4086		- if ($also_delete_lead) {
4087		- // Full-wipe requested — queue the email so that all their sessions and
4088		- // related options get swept below. Also clear this session's pre-chat
4089		- // capture options (they're no longer meaningful).
4090		- $emails_to_fully_wipe[strtolower($lead_row->user_email)] = $lead_row->user_email;
4091		- delete_option('mxchat_email_' . $session_id_sanitized);
4092		- delete_option('mxchat_name_' . $session_id_sanitized);
4093		- } else {
4094		- // Preserve the lead in a "Chat deleted" state via distinct option keys so
4095		- // they stay out of the orphan bucket (orphan = pre-chat form dropoff).
4096		- update_option('mxchat_lead_del_email_' . $session_id_sanitized, $lead_row->user_email, false);
4097		- if (!empty($lead_row->user_name)) {
4098		- update_option('mxchat_lead_del_name_' . $session_id_sanitized, $lead_row->user_name, false);
4099		- }
4100		- if (!empty($lead_row->last_ts)) {
4101		- update_option('mxchat_lead_del_ts_' . $session_id_sanitized, $lead_row->last_ts, false);
4102		- }
4103		- // Clean up pre-chat capture options for this session — chat_deleted supersedes.
4104		- delete_option('mxchat_email_' . $session_id_sanitized);
4105		- delete_option('mxchat_name_' . $session_id_sanitized);
4106		- $preserved_as_deleted_leads++;
4107		- }
4108		- } else {
4109		- // No lead attached — nothing to preserve. Clean up any orphan options anyway.
4110		- delete_option('mxchat_email_' . $session_id_sanitized);
4111		- delete_option('mxchat_name_' . $session_id_sanitized);
4112		- }
4113		-
4114		- $deleted_count++;
4115		- }
4116		-
4117		- // Opt-in full-lead wipe: sweep every remaining row + every option key (including
4118		- // chat_deleted preservation) for each affected email. Reuses the same internal
4119		- // helper as the Leads-tab Delete button for consistency.
4120		- if (!empty($emails_to_fully_wipe)) {
4121		- self::mxchat_wipe_leads_by_email(array_values($emails_to_fully_wipe));
4122		- }
4123		-
4124		- wp_cache_delete('all_chat_sessions', 'mxchat_chat_sessions');
4125		-
4126		- echo wp_json_encode([
4127		- 'success' => sprintf(
4128		- esc_html__('%d chat session(s) have been deleted.', 'mxchat'),
4129		- $deleted_count
4130		- ),
4131		- 'preserved_as_deleted_leads' => $preserved_as_deleted_leads,
4132		- 'leads_fully_wiped' => count($emails_to_fully_wipe),
4133		- ]);
	707	+ echo $output;
4134	708	wp_die();
4135	709	}
4136	710
4137		-/**
4138		- * Format transcript message content with markdown processing
4139		- * Converts markdown links, bold, italic, code blocks, and plain URLs to HTML
4140		- */
4141		-private function format_transcript_message($text) {
4142		- if (empty($text)) {
4143		- return '';
4144		- }
4145	711
4146		- // Normalize line endings and clean up excessive whitespace
4147		- $text = str_replace("\r\n", "\n", $text);
4148		- $text = str_replace("\r", "\n", $text);
4149		-
4150		- // Clean up existing <br> tags that may have been saved (legacy data)
4151		- // Convert <br>, <br/>, <br /> back to newlines for consistent processing
4152		- $text = preg_replace('/<br\s*\/?>\s*/i', "\n", $text);
4153		-
4154		- // Collapse 3+ consecutive newlines to just 2 (paragraph break)
4155		- $text = preg_replace('/\n{3,}/', "\n\n", $text);
4156		-
4157		- // Process markdown headers (# Header)
4158		- $text = preg_replace_callback('/^(#{1,6})\s+(.+)$/m', function($matches) {
4159		- $level = strlen($matches[1]);
4160		- $content = esc_html(trim($matches[2]));
4161		- return "<h{$level}>{$content}</h{$level}>";
4162		- }, $text);
4163		-
4164		- // Process code blocks with triple backticks
4165		- $text = preg_replace_callback('/```(\w+)?\n?([\s\S]*?)```/', function($matches) {
4166		- $language = !empty($matches[1]) ? ' class="language-' . esc_attr($matches[1]) . '"' : '';
4167		- $code = esc_html($matches[2]);
4168		- return "<pre><code{$language}>{$code}</code></pre>";
4169		- }, $text);
4170		-
4171		- // Process inline code with single backticks
4172		- $text = preg_replace('/`([^`]+)`/', '<code>$1</code>', $text);
4173		-
4174		- // Process bold text **text** or __text__
4175		- $text = preg_replace('/\*\*(.+?)\*\*/', '<strong>$1</strong>', $text);
4176		- $text = preg_replace('/__(.+?)__/', '<strong>$1</strong>', $text);
4177		-
4178		- // Process italic text *text* or _text_ (but not if part of URL)
4179		- $text = preg_replace('/(?<![*_\w])\*([^*]+)\*(?![*\w])/', '<em>$1</em>', $text);
4180		- $text = preg_replace('/(?<![*_\w])_([^_]+)_(?![*\w])/', '<em>$1</em>', $text);
4181		-
4182		- // Process markdown links [text](url)
4183		- $text = preg_replace_callback('/\[([^\]]+)\]\((https?:\/\/[^\s)]+)\)/', function($matches) {
4184		- $link_text = esc_html($matches[1]);
4185		- $url = esc_url($matches[2]);
4186		- return "<a href=\"{$url}\" target=\"_blank\" rel=\"noopener\">{$link_text}</a>";
4187		- }, $text);
4188		-
4189		- // Process citation-style brackets [URL]
4190		- $text = preg_replace_callback('/\[(https?:\/\/[^\]]+)\]/', function($matches) {
4191		- $url = esc_url($matches[1]);
4192		- return "<a href=\"{$url}\" target=\"_blank\" rel=\"noopener\">{$url}</a>";
4193		- }, $text);
4194		-
4195		- // Process standalone URLs (not already in links or img src)
4196		- $text = preg_replace_callback(
4197		- '/(?<!href="|src="|">)(https?:\/\/[^\s<>"]+)(?![^<]*<\/a>)/',
4198		- function($matches) {
4199		- $url = esc_url($matches[1]);
4200		- // Truncate display URL if too long
4201		- $display = strlen($matches[1]) > 50 ? substr($matches[1], 0, 47) . '...' : $matches[1];
4202		- return "<a href=\"{$url}\" target=\"_blank\" rel=\"noopener\">{$display}</a>";
4203		- },
4204		- $text
4205		- );
4206		-
4207		- // Process mailto links
4208		- $text = preg_replace_callback('/\[([^\]]+)\]\((mailto:[^)]+)\)/', function($matches) {
4209		- $link_text = esc_html($matches[1]);
4210		- $mailto = esc_url($matches[2]);
4211		- return "<a href=\"{$mailto}\">{$link_text}</a>";
4212		- }, $text);
4213		-
4214		- // Convert paragraphs: split by double newlines, wrap in <p> tags
4215		- // This creates proper paragraph structure instead of excessive <br> tags
4216		- $paragraphs = preg_split('/\n\n+/', $text);
4217		-
4218		- // Filter out empty paragraphs but preserve content like "0"
4219		- $paragraphs = array_values(array_filter(array_map('trim', $paragraphs), function($p) {
4220		- return $p !== '';
4221		- }));
4222		-
4223		- if (empty($paragraphs)) {
4224		- // No content after filtering
4225		- return '';
4226		- } elseif (count($paragraphs) > 1) {
4227		- // Multiple paragraphs - wrap each in <p> tags, convert single newlines to <br>
4228		- $formatted_paragraphs = array_map(function($p) {
4229		- return nl2br($p);
4230		- }, $paragraphs);
4231		- $text = '<p>' . implode('</p><p>', $formatted_paragraphs) . '</p>';
4232		- } else {
4233		- // Single paragraph - just convert newlines to <br>
4234		- $text = nl2br($paragraphs[0]);
4235		- }
4236		-
4237		- return $text;
4238		-}
4239		-
4240		-/**
4241		- * AJAX handler to fetch RAG context for a specific message
4242		- * Used by the transcript viewer to show retrieved documents
4243		- */
4244		-public function mxchat_get_rag_context() {
4245		- // Check permissions
4246		- if (!current_user_can('manage_options')) {
4247		- wp_send_json_error(['message' => esc_html__('You do not have sufficient permissions.', 'mxchat')]);
4248		- wp_die();
4249		- }
4250		-
4251		- // Validate message ID
4252		- if (!isset($_POST['message_id']) || empty($_POST['message_id'])) {
4253		- wp_send_json_error(['message' => esc_html__('Message ID is required.', 'mxchat')]);
4254		- wp_die();
4255		- }
4256		-
4257		- $message_id = absint($_POST['message_id']);
4258		-
4259		- global $wpdb;
4260		- $table_name = $wpdb->prefix . 'mxchat_chat_transcripts';
4261		-
4262		- // Fetch the RAG context for this message
4263		- $result = $wpdb->get_row($wpdb->prepare(
4264		- "SELECT rag_context FROM {$table_name} WHERE id = %d",
4265		- $message_id
4266		- ));
4267		-
4268		- if (!$result || empty($result->rag_context)) {
4269		- wp_send_json_error(['message' => esc_html__('No RAG context found for this message.', 'mxchat')]);
4270		- wp_die();
4271		- }
4272		-
4273		- // Decode the JSON data
4274		- $rag_context = json_decode($result->rag_context, true);
4275		-
4276		- if (json_last_error() !== JSON_ERROR_NONE) {
4277		- wp_send_json_error(['message' => esc_html__('Invalid RAG context data.', 'mxchat')]);
4278		- wp_die();
4279		- }
4280		-
4281		- wp_send_json_success($rag_context);
4282		- wp_die();
4283		-}
4284		-
4285		-public function display_admin_notices() {
4286		- // Check if we're on a MXChat admin page
4287		- $screen = get_current_screen();
4288		- if (!$screen || strpos($screen->base, 'mxchat') === false) {
4289		- return;
4290		- }
4291		-
4292		- $dismiss_button = '<button type="button" class="notice-dismiss"><span class="screen-reader-text">' . esc_html__('Dismiss this notice.', 'mxchat') . '</span></button>';
4293		-
4294		- // Check for error notices
4295		- $error_notice = get_transient('mxchat_admin_notice_error');
4296		- if ($error_notice) {
4297		- echo '<div class="notice notice-error is-dismissible"><p>' . wp_kses_post($error_notice) . '</p>' . $dismiss_button . '</div>';
4298		- delete_transient('mxchat_admin_notice_error');
4299		- }
4300		-
4301		- // Check for success notices
4302		- $success_notice = get_transient('mxchat_admin_notice_success');
4303		- if ($success_notice) {
4304		- echo '<div class="notice notice-success is-dismissible"><p>' . wp_kses_post($success_notice) . '</p>' . $dismiss_button . '</div>';
4305		- delete_transient('mxchat_admin_notice_success');
4306		- }
4307		-
4308		- // Check for info notices
4309		- $info_notice = get_transient('mxchat_admin_notice_info');
4310		- if ($info_notice) {
4311		- echo '<div class="notice notice-info is-dismissible"><p>' . wp_kses_post($info_notice) . '</p>' . $dismiss_button . '</div>';
4312		- delete_transient('mxchat_admin_notice_info');
4313		- }
4314		-}
4315		-
4316		-
4317	712	public function mxchat_create_activation_page() {
4318		- // Include the new Pro & Extensions page template
4319		- require_once plugin_dir_path(__FILE__) . 'admin-pro-page.php';
	713	+ $license_status = get_option('mxchat_license_status', 'inactive');
	714	+ $license_error = get_option('mxchat_license_error', '');
4320	715
4321		- // Get addons configuration from the MxChat_Addons class
4322		- require_once plugin_dir_path(__FILE__) . 'class-mxchat-addons.php';
4323		- $addons_instance = new MxChat_Addons();
4324		- $addons_config = $addons_instance->get_addons_config();
4325		-
4326		- // Render the consolidated Pro & Extensions page
4327		- mxchat_render_pro_page($this, $addons_config);
4328		-}
4329		-
4330		-/**
4331		- * Check if current activation is linked to a domain
4332		- * This checks YOUR website's database, not the user's local database
4333		- */
4334		-public function is_current_activation_linked($domain) {
4335		- $license_key = get_option('mxchat_activation_key');
4336		- $email = get_option('mxchat_pro_email');
4337		-
4338		- if (empty($license_key) || empty($email)) {
4339		- return false;
4340		- }
4341		-
4342		- // Check with YOUR website's API
4343		- $response = wp_remote_post('https://mxchat.ai/mxchat-api/check-domain', array(
4344		- 'body' => array(
4345		- 'license_key' => $license_key,
4346		- 'email' => $email,
4347		- 'domain' => $domain
4348		- ),
4349		- 'timeout' => 10,
4350		- 'sslverify' => false
4351		- ));
4352		-
4353		- if (is_wp_error($response)) {
4354		- return false;
4355		- }
4356		-
4357		- $body = json_decode(wp_remote_retrieve_body($response), true);
4358		- return isset($body['success']) && $body['success'] && isset($body['data']['linked']) && $body['data']['linked'];
4359		-}
4360		-
4361		-
4362		-public function mxchat_actions_page_html() {
4363		- if (!current_user_can('manage_options')) {
4364		- return;
4365		- }
4366		-
4367		- global $wpdb;
4368		- $table_name = $wpdb->prefix . 'mxchat_intents';
4369		-
4370		- // Get stats for dashboard
4371		- $total_actions = $wpdb->get_var("SELECT COUNT(*) FROM $table_name");
4372		- $enabled_actions = $wpdb->get_var("SELECT COUNT(*) FROM $table_name WHERE enabled = 1");
4373		- $disabled_actions = $total_actions - $enabled_actions;
4374		-
4375		- // Get unique action types count
4376		- $action_types_count = $wpdb->get_var("SELECT COUNT(DISTINCT callback_function) FROM $table_name");
4377		-
4378		- // Get action type distribution
4379		- $type_distribution_raw = $wpdb->get_results("SELECT callback_function, COUNT(*) as count FROM $table_name GROUP BY callback_function ORDER BY count DESC LIMIT 10");
4380		- $available_callbacks = $this->mxchat_get_available_callbacks();
4381		- $callback_groups = $this->mxchat_get_available_callbacks(true, true);
4382		-
4383		- $action_type_distribution = array();
4384		- foreach ($type_distribution_raw as $row) {
4385		- $label = isset($available_callbacks[$row->callback_function]['label'])
4386		- ? $available_callbacks[$row->callback_function]['label']
4387		- : $row->callback_function;
4388		- $action_type_distribution[$label] = $row->count;
4389		- }
4390		-
4391		- // Native function-calling (AI Tools) data — plan-mxchat-20260617-a41dee.
4392		- // The AI Tools checklist reads from MxChat_Tool_Registry, the SAME single
4393		- // source the chat-time function-calling loop reads, so the two never drift.
4394		- if (!class_exists('MxChat_Tool_Registry')) {
4395		- require_once plugin_dir_path(__FILE__) . 'class-mxchat-tool-registry.php';
4396		- }
4397		- if (!class_exists('MxChat_Model_Catalog')) {
4398		- require_once plugin_dir_path(__FILE__) . 'class-mxchat-model-catalog.php';
4399		- }
4400		- $fc_options = get_option('mxchat_options', array());
4401		- $fc_current_model = isset($fc_options['model']) ? $fc_options['model'] : 'gpt-5.6-sol';
4402		- $fc_model_capable = class_exists('MxChat_Model_Catalog')
4403		- ? MxChat_Model_Catalog::supports_tools($fc_current_model) : true;
4404		- $active_tab = (isset($_GET['tab']) && $_GET['tab'] === 'ai-tools') ? 'ai-tools' : 'dashboard';
4405		-
4406		- // Enrich each AI Tool with the dashicon its callback already uses on the
4407		- // Trigger Phrases "Choose what it does" grid, so the AI Tools cards/modal
4408		- // share the same iconography (plan 8bbf98 part 4). View-layer only — the
4409		- // registry's model-facing data is untouched. Default admin-generic.
4410		- $fc_tools = MxChat_Tool_Registry::available_tools();
4411		- foreach ($fc_tools as &$fc_tool_ref) {
4412		- $fc_cb_ref = $fc_tool_ref['callback'];
4413		- $fc_tool_ref['icon'] = isset($available_callbacks[$fc_cb_ref]['icon'])
4414		- ? $available_callbacks[$fc_cb_ref]['icon']
4415		- : 'admin-generic';
4416		- }
4417		- unset($fc_tool_ref);
4418		-
4419		- // Count of ACTIVE tools — drives the AI Tools sidebar nav badge, mirroring
4420		- // $total_actions for Trigger Phrases. A tool in the list = active (plan
4421		- // d450a7), so the badge shows the same number the list pane shows (plan 5f7409).
4422		- $total_tools = count(array_filter($fc_tools, function ($t) {
4423		- return !empty($t['enabled']);
4424		- }));
4425		-
4426		- // Brave-key dependency check (plan 183856): Web Search + Image Search run on
4427		- // the Brave Search API. If either is enabled as a tool but no brave_api_key is
4428		- // configured, surface a graceful "key not set" notice so the admin isn't met
4429		- // with a silently no-firing tool.
4430		- $fc_brave_missing = false;
4431		- $brave_key = isset($fc_options['brave_api_key']) ? trim($fc_options['brave_api_key']) : '';
4432		- if ($brave_key === '') {
4433		- foreach ($fc_tools as $fc_t) {
4434		- if (!empty($fc_t['enabled']) && isset($fc_t['requires_key']) && $fc_t['requires_key'] === 'brave_api_key') {
4435		- $fc_brave_missing = true;
4436		- break;
4437		- }
4438		- }
4439		- }
4440		-
4441		- // Prepare page data
4442		- $page_data = array(
4443		- 'total_actions' => $total_actions,
4444		- 'enabled_actions' => $enabled_actions,
4445		- 'disabled_actions' => $disabled_actions,
4446		- 'action_types_count' => $action_types_count,
4447		- 'action_type_distribution' => $action_type_distribution,
4448		- 'available_callbacks' => $available_callbacks,
4449		- 'callback_groups' => $callback_groups,
4450		- // AI Tools section
4451		- 'active_tab' => $active_tab,
4452		- 'fc_enabled' => MxChat_Tool_Registry::is_enabled(),
4453		- 'total_tools' => $total_tools,
4454		- 'fc_tools' => $fc_tools,
4455		- 'fc_current_model' => $fc_current_model,
4456		- 'fc_model_capable' => $fc_model_capable,
4457		- 'fc_brave_missing' => $fc_brave_missing,
4458		- 'fc_saved' => isset($_GET['mxchat_fc_saved']),
4459		- );
4460		-
4461		- // Include and render the new template
4462		- require_once plugin_dir_path(__FILE__) . 'admin-actions-page.php';
4463		- mxchat_render_actions_page($this, $page_data);
4464		-}
4465		-
4466		-/**
4467		- * LEGACY HTML - Preserved below for reference, to be removed in future update
4468		- */
4469		-function mxchat_actions_page_legacy_html() {
4470		- // This function is deprecated and no longer used
4471		- // The new template is in includes/admin-actions-page.php
4472	716	?>
4473		- <div class="wrap mxchat-wrapper">
4474		- <!-- Hero Section -->
4475		- <div class="mxchat-hero">
4476		- <h1 class="mxchat-main-title">
4477		- <span class="mxchat-gradient-text">Actions</span> Manager
4478		- </h1>
4479		- <p class="mxchat-hero-subtitle">
4480		- <?php esc_html_e('Create and manage custom actions to enhance your chatbot\'s capabilities.', 'mxchat'); ?>
4481		- </p>
4482		- </div>
4483		-
4484		- <!-- Actions Header with Search and Filter -->
4485		- <div class="mxchat-actions-header">
4486		- <div class="mxchat-actions-filters">
4487		- <form method="get" class="mxchat-search-form">
4488		- <input type="hidden" name="page" value="mxchat-actions">
4489		- <div class="mxchat-search-group">
4490		- <span class="dashicons dashicons-search"></span>
4491		- <input type="text" name="s" class="mxchat-search-input"
4492		- placeholder="<?php esc_attr_e('Search Actions', 'mxchat'); ?>"
4493		- value="<?php echo esc_attr($search_term); ?>">
4494		- </div>
4495		- <select name="callback_filter" class="mxchat-action-filter">
4496		- <option value=""><?php esc_html_e('All Action Types', 'mxchat'); ?></option>
4497		- <?php foreach ($available_callbacks as $function => $callback_data) :
4498		- $label = $callback_data['label']; ?>
4499		- <option value="<?php echo esc_attr($function); ?>"
4500		- <?php selected($callback_filter, $function); ?>>
4501		- <?php echo esc_html($label); ?>
4502		- </option>
4503		- <?php endforeach; ?>
4504		- </select>
4505		- <button type="submit" class="mxchat-button-secondary">
4506		- <?php esc_html_e('Filter', 'mxchat'); ?>
4507		- </button>
4508		- </form>
	717	+ <div class="wrap mxchat-admin">
	718	+ <h2>MxChat Pro: Activation</h2>
	719	+ <?php if ($license_status === 'inactive' && !empty($license_error)): ?>
	720	+ <div class="error notice">
	721	+ <p><?php echo esc_html($license_error); ?></p>
4509	722	</div>
4510		- <div class="mxchat-actions-controls">
4511		- <button type="button" id="mxchat-add-action-btn" class="mxchat-button-primary">
4512		- <span class="dashicons dashicons-plus-alt"></span>
4513		- <?php esc_html_e('Add New Action', 'mxchat'); ?>
4514		- </button>
4515		- </div>
4516		- </div>
4517		-
4518		- <!-- Actions Grid Layout - All actions in a single grid -->
4519		- <div class="mxchat-actions-grid">
4520		- <div class="mxchat-cards-container">
4521		- <?php if (!empty($actions)) : ?>
4522		- <?php foreach ($actions as $action) :
4523		- $callback_function = $action->callback_function;
4524		- $callback_label = isset($available_callbacks[$callback_function]['label'])
4525		- ? $available_callbacks[$callback_function]['label']
4526		- : $callback_function;
4527		- $threshold_value = isset($action->similarity_threshold)
4528		- ? round($action->similarity_threshold * 100)
4529		- : 85;
4530		-
4531		- // Check if this is a form action
4532		- $is_form_action = strpos($action->intent_label, 'Form ') === 0;
4533		-
4534		- // Get action status (enabled/disabled) - default to true if column doesn't exist
4535		- $is_enabled = isset($action->enabled) ? (bool)$action->enabled : true;
4536		-
4537		- // Get enabled bots for display
4538		- $enabled_bots = [];
4539		- if (isset($action->enabled_bots) && !empty($action->enabled_bots)) {
4540		- $enabled_bots = json_decode($action->enabled_bots, true);
4541		- if (!is_array($enabled_bots)) {
4542		- $enabled_bots = ['default'];
4543		- }
4544		- } else {
4545		- $enabled_bots = ['default']; // Backward compatibility
4546		- }
4547		- ?>
4548		- <div class="mxchat-action-card <?php echo $is_form_action ? 'mxchat-form-action' : ''; ?>">
4549		- <div class="mxchat-card-header">
4550		- <div class="mxchat-card-title"><?php echo esc_html($action->intent_label); ?></div>
4551		- <div class="mxchat-card-toggle">
4552		- <label class="mxchat-switch">
4553		- <input type="checkbox" class="mxchat-action-toggle"
4554		- data-action-id="<?php echo esc_attr($action->id); ?>"
4555		- <?php checked($is_enabled); ?>>
4556		- <span class="mxchat-slider round"></span>
4557		- </label>
4558		- </div>
4559		- </div>
4560		-
4561		- <div class="mxchat-card-body">
4562		- <div class="mxchat-card-description">
4563		- <strong><?php esc_html_e('Type:', 'mxchat'); ?></strong>
4564		- <?php echo esc_html($callback_label); ?>
4565		- </div>
4566		-
4567		- <div class="mxchat-card-phrases">
4568		- <strong><?php esc_html_e('Trigger phrases:', 'mxchat'); ?></strong>
4569		- <div class="mxchat-phrases-preview">
4570		- <?php
4571		- // Check if the helper function exists, otherwise use a simple substring
4572		- if (method_exists($this, 'get_trimmed_phrases')) {
4573		- echo esc_html($this->get_trimmed_phrases($action->phrases));
4574		- } else {
4575		- echo esc_html(strlen($action->phrases) > 100 ?
4576		- substr($action->phrases, 0, 97) . '...' :
4577		- $action->phrases);
4578		- }
4579		- ?>
4580		- </div>
4581		- </div>
4582		-
4583		- <div class="mxchat-threshold-control">
4584		- <div class="mxchat-threshold-label">
4585		- <?php esc_html_e('Similarity Threshold:', 'mxchat'); ?>
4586		- <span class="mxchat-threshold-value"><?php echo esc_html($threshold_value); ?>%</span>
4587		- </div>
4588		- </div>
4589		-
4590		- <!-- Bot Availability Display (Read-only) -->
4591		- <div class="mxchat-card-bots">
4592		- <strong><?php esc_html_e('Assigned bots:', 'mxchat'); ?></strong>
4593		- <div class="mxchat-bot-badges">
4594		- <?php
4595		- foreach ($enabled_bots as $bot_id) {
4596		- if ($bot_id === 'default') {
4597		- echo '<span class="mxchat-bot-badge">' . esc_html__('Default Bot', 'mxchat') . '</span>';
4598		- } else {
4599		- // Try to get bot name from multi-bot manager
4600		- if (class_exists('MxChat_Multi_Bot_Core_Manager')) {
4601		- $multi_bot_manager = MxChat_Multi_Bot_Core_Manager::get_instance();
4602		- $available_bots = $multi_bot_manager->get_available_bots();
4603		- $bot_name = isset($available_bots[$bot_id]) ? $available_bots[$bot_id] : $bot_id;
4604		- echo '<span class="mxchat-bot-badge">' . esc_html($bot_name) . '</span>';
4605		- } else {
4606		- echo '<span class="mxchat-bot-badge">' . esc_html($bot_id) . '</span>';
4607		- }
4608		- }
4609		- }
4610		- ?>
4611		- </div>
4612		- </div>
4613		- </div>
4614		-
4615		- <div class="mxchat-card-footer">
4616		- <?php
4617		- // Check if it's a form action
4618		- $is_form_action = preg_match('/Form (\d+)/', $action->intent_label, $form_matches);
4619		-
4620		- // Check if it's a recommendation flow action
4621		- $is_flow_action = preg_match('/Recommendation Flow (\d+)/', $action->intent_label, $flow_matches);
4622		-
4623		- if ($is_form_action) {
4624		- $form_id = isset($form_matches[1]) ? $form_matches[1] : '';
4625		- ?>
4626		- <a href="<?php echo esc_url(admin_url('admin.php?page=mxchat-forms&action=edit&form_id=' . $form_id)); ?>"
4627		- class="mxchat-button-primary">
4628		- <span class="dashicons dashicons-feedback"></span>
4629		- <?php esc_html_e('Edit Form', 'mxchat'); ?>
4630		- </a>
4631		- <?php } elseif ($is_flow_action) {
4632		- ?>
4633		- <a href="<?php echo esc_url(admin_url('admin.php?page=mxchat-smart-recommender')); ?>"
4634		- class="mxchat-button-primary">
4635		- <span class="dashicons dashicons-list-view"></span>
4636		- <?php esc_html_e('Manage Flows', 'mxchat'); ?>
4637		- </a>
4638		- <?php } else { ?>
4639		- <button type="button"
4640		- class="mxchat-button-secondary mxchat-edit-button"
4641		- data-action-id="<?php echo esc_attr($action->id); ?>"
4642		- data-phrases="<?php echo esc_attr($action->phrases); ?>"
4643		- data-label="<?php echo esc_attr($action->intent_label); ?>"
4644		- data-threshold="<?php echo esc_attr(round($action->similarity_threshold * 100)); ?>"
4645		- data-callback-function="<?php echo esc_attr($action->callback_function); ?>"
4646		- data-enabled-bots="<?php echo esc_attr(json_encode($enabled_bots)); ?>">
4647		- <span class="dashicons dashicons-edit"></span>
4648		- <?php esc_html_e('Edit', 'mxchat'); ?>
4649		- </button>
4650		- <form method="post"
4651		- action="<?php echo esc_url(admin_url('admin-post.php')); ?>"
4652		- class="mxchat-delete-form"
4653		- onsubmit="return confirm('<?php esc_attr_e('Are you sure you want to delete this action?', 'mxchat'); ?>');">
4654		- <?php wp_nonce_field('mxchat_delete_intent_nonce'); ?>
4655		- <input type="hidden" name="action" value="mxchat_delete_intent">
4656		- <input type="hidden" name="intent_id" value="<?php echo esc_attr($action->id); ?>">
4657		- <button type="submit" class="mxchat-button-text mxchat-delete-button">
4658		- <span class="dashicons dashicons-trash"></span>
4659		- <?php esc_html_e('Delete', 'mxchat'); ?>
4660		- </button>
4661		- </form>
4662		- <?php } ?>
4663		- </div>
4664		- </div>
4665		- <?php endforeach; ?>
4666		- <?php else : ?>
4667		- <!-- If no actions found -->
4668		- <div class="mxchat-no-actions">
4669		- <div class="mxchat-empty-state">
4670		- <span class="dashicons dashicons-format-chat"></span>
4671		- <h2><?php esc_html_e('No actions found', 'mxchat'); ?></h2>
4672		- <p><?php esc_html_e('Get started by creating your first action to enhance your chatbot.', 'mxchat'); ?></p>
4673		- <button type="button" id="mxchat-create-first-action" class="mxchat-button-primary">
4674		- <?php esc_html_e('Create Your First Action', 'mxchat'); ?>
4675		- </button>
4676		- </div>
4677		- </div>
4678		- <?php endif; ?>
4679		- </div>
4680		- </div>
4681		-
4682		- <?php if ($total_pages > 1) : ?>
4683		- <div class="mxchat-pagination">
4684		- <?php
4685		- echo paginate_links(array(
4686		- 'base' => add_query_arg('paged', '%#%'),
4687		- 'format' => '',
4688		- 'prev_text' => __('&laquo; Previous', 'mxchat'),
4689		- 'next_text' => __('Next &raquo;', 'mxchat'),
4690		- 'total' => $total_pages,
4691		- 'current' => $page
4692		- ));
4693		- ?>
4694		- </div>
4695	723	<?php endif; ?>
4696		-
4697		-<!-- Add/Edit Action Modal with Step-Based Approach -->
4698		-<!-- Complete Modal HTML with Defined Groups Variable -->
4699		-<div id="mxchat-action-modal" class="mxchat-modal" style="display: none;">
4700		- <div class="mxchat-modal-content">
4701		- <span class="mxchat-modal-close">&times;</span>
4702		-
4703		- <form id="mxchat-action-form" method="post" action="<?php echo esc_url(admin_url('admin-post.php')); ?>">
4704		- <!-- Dynamic nonce field -->
4705		- <div id="action-nonce-container">
4706		- <?php wp_nonce_field('mxchat_add_intent_nonce', 'add_intent_nonce'); ?>
4707		- </div>
4708		- <input type="hidden" name="action" id="form_action_type" value="mxchat_add_intent">
4709		- <input type="hidden" name="intent_id" id="edit_action_id" value="">
4710		- <input type="hidden" name="callback_function" id="callback_function" value="">
4711		-
4712		- <!-- Step 1: Action Type Selection -->
4713		- <div id="mxchat-action-step-1" class="mxchat-action-step active">
4714		- <div class="mxchat-step-indicator">
4715		- <div class="mxchat-step-number">1</div>
4716		- <div class="mxchat-step-title"><?php esc_html_e('Select Action Type', 'mxchat'); ?></div>
4717		- </div>
4718		-
4719		- <div id="mxchat-action-type-selector" class="mxchat-action-type-selector">
4720		- <div class="mxchat-action-type-search">
4721		- <span class="dashicons dashicons-search"></span>
4722		- <input type="text" id="action-type-search" placeholder="<?php esc_attr_e('Search action types...', 'mxchat'); ?>" class="mxchat-action-type-search-input">
4723		- </div>
4724		-
4725		- <?php
4726		- // Get the callbacks - IMPORTANT: Define the $groups variable here
4727		- $groups = $this->mxchat_get_available_callbacks(true, true);
4728		- ?>
4729		-
4730		- <div class="mxchat-action-type-categories">
4731		- <button type="button" class="mxchat-category-button active" data-category="all"><?php esc_html_e('All', 'mxchat'); ?></button>
4732		- <?php
4733		- // Get unique categories from the defined groups
4734		- foreach ($groups as $group_label => $group_callbacks) :
4735		- $category_slug = sanitize_title($group_label);
4736		- ?>
4737		- <button type="button" class="mxchat-category-button" data-category="<?php echo esc_attr($category_slug); ?>"><?php echo esc_html($group_label); ?></button>
4738		- <?php endforeach; ?>
4739		- </div>
4740		-
4741		- <div class="mxchat-action-types-grid">
4742		- <?php
4743		- // Generate action cards from available callbacks
4744		- foreach ($groups as $group_label => $group_callbacks) :
4745		- $category_slug = sanitize_title($group_label);
4746		-
4747		- foreach ($group_callbacks as $function => $data) :
4748		- $label = $data['label'];
4749		- $icon = isset($data['icon']) ? $data['icon'] : 'admin-generic';
4750		- $description = isset($data['description']) ? $data['description'] : '';
4751		- $is_addon = isset($data['addon']) && $data['addon'] !== false;
4752		- $addon_name = isset($data['addon_name']) ? $data['addon_name'] : '';
4753		- $is_installed = isset($data['installed']) ? $data['installed'] : true;
4754		- $is_promo = !empty($data['addon_promo']) && !$is_installed;
4755		-
4756		- // Determine card status and styling
4757		- $card_class = 'mxchat-action-type-card';
4758		- $icon_class = 'mxchat-action-type-icon';
4759		- $status_badge = '';
4760		-
4761		- if ($is_promo) {
4762		- // Promotional card — not selectable, just informational
4763		- $card_class .= ' not-installed mxchat-promo-card';
4764		- $status_badge = '<span class="mxchat-addon-badge">' . esc_html__('Add-on Required', 'mxchat') . '</span>';
4765		- } elseif ($is_addon && !$is_installed) {
4766		- // Add-on not installed
4767		- $card_class .= ' not-installed';
4768		- $status_badge .= '<span class="mxchat-addon-badge">' . esc_html__('Add-on Required', 'mxchat') . '</span>';
4769		- }
4770		-
4771		- // Default description if none provided
4772		- if (empty($description)) {
4773		- $description = sprintf(
4774		- esc_html__('Use the %s action in your chatbot', 'mxchat'),
4775		- $label
4776		- );
4777		- }
4778		- ?>
4779		- <div class="<?php echo esc_attr($card_class); ?>"
4780		- data-category="<?php echo esc_attr($category_slug); ?>"
4781		- <?php if (!$is_promo) : ?>
4782		- data-value="<?php echo esc_attr($function); ?>"
4783		- data-label="<?php echo esc_attr($label); ?>"
4784		- <?php endif; ?>
4785		- data-pro="false"
4786		- data-addon="<?php echo esc_attr($is_addon ? $data['addon'] : ''); ?>"
4787		- data-installed="<?php echo $is_installed ? 'true' : 'false'; ?>"
4788		- <?php if ($is_promo) : ?>data-promo="true"<?php endif; ?>>
4789		- <div class="<?php echo esc_attr($icon_class); ?>">
4790		- <span class="dashicons dashicons-<?php echo esc_attr($icon); ?>"></span>
4791		- </div>
4792		- <div class="mxchat-action-type-info">
4793		- <h4><?php echo esc_html($label); ?></h4>
4794		- <p><?php echo esc_html($description); ?></p>
4795		- <?php if (!empty($status_badge)) : ?>
4796		- <?php echo $status_badge; ?>
4797		- <?php endif; ?>
4798		-
4799		- <?php if ($is_promo || ($is_addon && !$is_installed)) : ?>
4800		- <div class="mxchat-addon-info">
4801		- <?php echo esc_html(sprintf(
4802		- __('Requires %s', 'mxchat'),
4803		- $addon_name
4804		- )); ?>
4805		- — <a href="https://mxchat.ai/" target="_blank"><?php esc_html_e('Get Add-on', 'mxchat'); ?></a>
4806		- </div>
4807		- <?php endif; ?>
4808		- </div>
4809		- </div>
4810		- <?php endforeach;
4811		- endforeach; ?>
4812		- </div>
4813		- </div>
4814		-
4815		- <div class="mxchat-modal-actions">
4816		- <button type="button" class="mxchat-button-secondary mxchat-modal-cancel">
4817		- <?php esc_html_e('Cancel', 'mxchat'); ?>
4818		- </button>
4819		- </div>
4820		- </div>
4821		-
4822		- <!-- Step 2: Action Configuration -->
4823		- <div id="mxchat-action-step-2" class="mxchat-action-step">
4824		- <div class="mxchat-step-indicator">
4825		- <div class="mxchat-step-number">2</div>
4826		- <div class="mxchat-step-title"><?php esc_html_e('Configure Action', 'mxchat'); ?></div>
4827		- </div>
4828		-
4829		- <div class="mxchat-selected-action">
4830		- <button type="button" class="mxchat-back-button" id="mxchat-back-to-step-1">
4831		- <span class="dashicons dashicons-arrow-left-alt"></span>
4832		- <?php esc_html_e('Back to Action Types', 'mxchat'); ?>
4833		- </button>
4834		- <div class="mxchat-selected-action-info">
4835		- <div id="selected-action-icon" class="mxchat-action-type-icon">
4836		- <span class="dashicons dashicons-admin-generic"></span>
4837		- </div>
4838		- <div class="mxchat-selected-action-details">
4839		- <h3 id="selected-action-title"><?php esc_html_e('Selected Action', 'mxchat'); ?></h3>
4840		- <p id="selected-action-description"><?php esc_html_e('Configure this action for your chatbot', 'mxchat'); ?></p>
4841		- </div>
4842		- </div>
4843		- </div>
4844		-
4845		- <div class="mxchat-form-group">
4846		- <label for="intent_label">
4847		- <?php esc_html_e('Action Label (For your reference only)', 'mxchat'); ?>
4848		- </label>
4849		- <input name="intent_label" type="text" id="intent_label" required
4850		- class="mxchat-intent-input"
4851		- placeholder="<?php esc_attr_e('Example: Newsletter Signup', 'mxchat'); ?>">
4852		- </div>
4853		-
4854		- <div class="mxchat-form-group">
4855		- <label for="phrases">
4856		- <?php esc_html_e('Trigger Phrases (comma-separated)', 'mxchat'); ?>
4857		- </label>
4858		- <textarea name="phrases" id="action_phrases" rows="5" required
4859		- class="mxchat-intent-textarea"
4860		- placeholder="<?php esc_attr_e('Example: sign me up, subscribe me, I want to join, add me to the newsletter', 'mxchat'); ?>"></textarea>
4861		- </div>
4862		-
4863		- <div class="mxchat-form-group">
4864		- <label for="similarity_threshold">
4865		- <?php esc_html_e('Similarity Threshold', 'mxchat'); ?>
4866		- <span class="mxchat-threshold-value-display">85%</span>
4867		- </label>
4868		- <div class="mxchat-slider-group modal-slider">
4869		- <input type="range"
4870		- name="similarity_threshold"
4871		- id="similarity_threshold"
4872		- min="10"
4873		- max="95"
4874		- value="85"
4875		- class="mxchat-intent-slider"
4876		- oninput="document.querySelector('.mxchat-threshold-value-display').textContent = this.value + '%'">
4877		- </div>
4878		- <div class="mxchat-threshold-hint">
4879		- <?php esc_html_e('Lower values (10-30) make the action trigger more easily. Higher values (70-95) require more exact matches.', 'mxchat'); ?>
4880		- </div>
4881		- </div>
4882		-
4883		- <!-- Bot Selection Section -->
4884		- <div class="mxchat-form-group">
4885		- <label for="enabled_bots">
4886		- <?php esc_html_e('Which bots should we enable this action for?', 'mxchat'); ?>
4887		- </label>
4888		- <div class="mxchat-bot-selector">
4889		- <div class="mxchat-bot-option">
4890		- <label class="mxchat-checkbox-label">
4891		- <input type="checkbox"
4892		- name="enabled_bots[]"
4893		- value="default"
4894		- id="bot_default"
4895		- checked="checked">
4896		- <span class="mxchat-checkmark"></span>
4897		- <?php esc_html_e('Default Bot', 'mxchat'); ?>
4898		- </label>
4899		- </div>
4900		-
4901		- <?php if (class_exists('MxChat_Multi_Bot_Core_Manager')) :
4902		- $multi_bot_manager = MxChat_Multi_Bot_Core_Manager::get_instance();
4903		- $available_bots = $multi_bot_manager->get_available_bots();
4904		-
4905		- foreach ($available_bots as $bot_id => $bot_name) :
4906		- if ($bot_id === 'default') continue; // Skip default, already shown above
4907		- ?>
4908		- <div class="mxchat-bot-option">
4909		- <label class="mxchat-checkbox-label">
4910		- <input type="checkbox"
4911		- name="enabled_bots[]"
4912		- value="<?php echo esc_attr($bot_id); ?>"
4913		- id="bot_<?php echo esc_attr($bot_id); ?>">
4914		- <span class="mxchat-checkmark"></span>
4915		- <?php echo esc_html($bot_name); ?>
4916		- </label>
4917		- </div>
4918		- <?php
4919		- endforeach;
4920		- endif; ?>
4921		- </div>
4922		- </div>
4923		-
4924		- <div class="mxchat-modal-actions">
4925		- <button type="button" class="mxchat-button-secondary mxchat-modal-cancel">
4926		- <?php esc_html_e('Cancel', 'mxchat'); ?>
4927		- </button>
4928		- <button type="submit" class="mxchat-button-primary" id="mxchat-save-action-btn">
4929		- <?php esc_html_e('Save Action', 'mxchat'); ?>
4930		- </button>
4931		- </div>
4932		- </div>
	724	+ <form id="mxchat-activation-form">
	725	+ <table class="form-table">
	726	+ <tr valign="top">
	727	+ <th scope="row">Email Address</th>
	728	+ <td>
	729	+ <input type="email" id="mxchat_pro_email" name="mxchat_pro_email" value="<?php echo esc_attr(get_option('mxchat_pro_email')); ?>" class="regular-text" />
	730	+ </td>
	731	+ </tr>
	732	+ <tr valign="top">
	733	+ <th scope="row">Activation Key</th>
	734	+ <td>
	735	+ <input type="text" id="mxchat_activation_key" name="mxchat_activation_key" value="<?php echo esc_attr(get_option('mxchat_activation_key')); ?>" class="regular-text" />
	736	+ </td>
	737	+ </tr>
	738	+ </table>
	739	+ <?php if ($license_status !== 'active'): ?>
	740	+ <?php submit_button('Activate License', 'primary', 'activate_license'); ?>
	741	+ <?php else: ?>
	742	+ <h3>MxChat Pro</h3>
	743	+ <?php endif; ?>
4933	744	</form>
	745	+ <h3>License Status: <span id="mxchat-license-status"><?php echo $license_status === 'active' ? 'Active' : 'Inactive'; ?></span></h3>
4934	746	</div>
4935		-</div>
4936		-
4937		-<div id="mxchat-action-loading" class="mxchat-action-loading" style="display: none;">
4938		- <div class="mxchat-action-loading-spinner"></div>
4939		- <div class="mxchat-action-loading-text">
4940		- <?php esc_html_e('Saving action, please wait...', 'mxchat'); ?>
4941		- </div>
4942		-</div>
4943		- </div><!-- .mxchat-wrapper -->
4944	747	<?php
4945	748	}
4946		-private function get_trimmed_phrases($phrases, $max_length = 100) {
4947		- if (strlen($phrases) <= $max_length) {
4948		- return $phrases;
4949		- }
4950	749
4951		- $trimmed = substr($phrases, 0, $max_length);
4952		- $last_comma = strrpos($trimmed, ',');
4953	750
4954		- if ($last_comma !== false) {
4955		- $trimmed = substr($trimmed, 0, $last_comma);
4956		- }
4957	751
4958		- return $trimmed . '...';
4959		-}
4960		-public function mxchat_add_enabled_column_to_intents() {
4961		- global $wpdb;
4962		- $table_name = $wpdb->prefix . 'mxchat_intents';
4963		-
4964		- // Check if the column already exists
4965		- $columns = $wpdb->get_results("SHOW COLUMNS FROM $table_name LIKE 'enabled'");
4966		-
4967		- if (empty($columns)) {
4968		- // Add the column with default value of 1 (enabled)
4969		- $wpdb->query("ALTER TABLE $table_name ADD COLUMN enabled TINYINT(1) NOT NULL DEFAULT 1");
4970		- }
4971		-}
4972		-
4973		-public function mxchat_handle_delete_intent() {
4974		- if ( ! current_user_can( 'manage_options' ) ) {
4975		- wp_die( esc_html__('Unauthorized user', 'mxchat') );
4976		- }
4977		-
4978		- check_admin_referer('mxchat_delete_intent_nonce');
4979		-
4980		- if (isset($_POST['intent_id'])) {
4981		- global $wpdb;
4982		- $table_name = $wpdb->prefix . 'mxchat_intents';
4983		- $intent_id = intval($_POST['intent_id']);
4984		-
4985		- $wpdb->delete($table_name, ['id' => $intent_id], ['%d']);
4986		- }
4987		-
4988		- wp_safe_redirect(admin_url('admin.php?page=mxchat-actions'));
4989		- exit;
4990		-}
4991		-public function mxchat_handle_edit_intent() {
4992		- // Security checks (nonce and permissions)
4993		- if (!current_user_can('manage_options')) {
4994		- wp_die(esc_html__('Unauthorized user', 'mxchat'));
4995		- }
4996		- check_admin_referer('mxchat_edit_intent');
4997		-
4998		- // Get POST data
4999		- $intent_id = isset($_POST['intent_id']) ? absint($_POST['intent_id']) : 0;
5000		- $intent_label = isset($_POST['intent_label']) ? sanitize_text_field($_POST['intent_label']) : '';
5001		- $phrases_input = isset($_POST['phrases']) ? sanitize_textarea_field($_POST['phrases']) : '';
5002		- $threshold_percentage = isset($_POST['similarity_threshold']) ? intval($_POST['similarity_threshold']) : 85;
5003		- $similarity_threshold = min(95, max(10, $threshold_percentage)) / 100; // Convert to 0.10–0.95
5004		-
5005		- // Handle enabled_bots
5006		- $enabled_bots = isset($_POST['enabled_bots']) ? $_POST['enabled_bots'] : array('default');
5007		- $enabled_bots = array_map('sanitize_text_field', $enabled_bots);
5008		-
5009		- // Ensure default is always included for backward compatibility
5010		- if (!in_array('default', $enabled_bots)) {
5011		- $enabled_bots[] = 'default';
5012		- }
5013		-
5014		- $enabled_bots_json = json_encode($enabled_bots);
5015		-
5016		- // Validate inputs
5017		- if (!$intent_id || empty($intent_label) || empty($phrases_input)) {
5018		- $this->handle_embedding_error(__('Invalid input. Please ensure all fields are filled out.', 'mxchat'));
5019		- return;
5020		- }
5021		-
5022		- $phrases_array = array_map('sanitize_text_field', array_filter(array_map('trim', explode(',', $phrases_input))));
5023		- if (empty($phrases_array)) {
5024		- $this->handle_embedding_error(__('Please enter at least one valid phrase.', 'mxchat'));
5025		- return;
5026		- }
5027		-
5028		- // Generate embeddings with improved error handling
5029		- $vectors = [];
5030		- $failed_phrases = [];
5031		-
5032		- foreach ($phrases_array as $phrase) {
5033		- $embedding_vector = $this->mxchat_generate_embedding($phrase, $this->options['api_key']);
5034		- if (is_array($embedding_vector)) {
5035		- $vectors[] = $embedding_vector;
5036		- } else {
5037		- $failed_phrases[] = $phrase;
5038		- }
5039		- }
5040		-
5041		- if (!empty($failed_phrases)) {
5042		- $this->handle_embedding_error(
5043		- sprintf(
5044		- __('Error generating embeddings for phrases: %s. Check your embedding API.', 'mxchat'),
5045		- implode(', ', $failed_phrases)
5046		- )
5047		- );
5048		- return;
5049		- }
5050		-
5051		- if (empty($vectors)) {
5052		- $this->handle_embedding_error(__('No valid embeddings generated. Please check your phrases.', 'mxchat'));
5053		- return;
5054		- }
5055		-
5056		- $combined_vector = $this->mxchat_average_vectors($vectors);
5057		- $serialized_vector = maybe_serialize($combined_vector);
5058		-
5059		- // Update the database
5060		- global $wpdb;
5061		- $table_name = $wpdb->prefix . 'mxchat_intents';
5062		-
5063		- $result = $wpdb->update(
5064		- $table_name,
5065		- array(
5066		- 'intent_label' => $intent_label,
5067		- 'phrases' => implode(', ', $phrases_array),
5068		- 'embedding_vector' => $serialized_vector,
5069		- 'similarity_threshold' => $similarity_threshold,
5070		- 'enabled_bots' => $enabled_bots_json, // Include enabled_bots in update
5071		- ),
5072		- array('id' => $intent_id),
5073		- array('%s', '%s', '%s', '%f', '%s'), // Format: string, string, string, float, string
5074		- array('%d') // Where format: integer
5075		- );
5076		-
5077		- if (false === $result) {
5078		- $this->handle_embedding_error(__('Failed to update action in database.', 'mxchat'));
5079		- return;
5080		- }
5081		-
5082		- // Set success message and redirect
5083		- set_transient('mxchat_admin_notice_success', __('Intent updated successfully!', 'mxchat'), 60);
5084		-
5085		- $redirect_url = add_query_arg(
5086		- array(
5087		- 'page' => 'mxchat-actions'
5088		- ),
5089		- admin_url('admin.php')
5090		- );
5091		- wp_safe_redirect($redirect_url);
5092		- exit;
5093		-}
5094		-public function mxchat_handle_add_intent() {
5095		- if (!current_user_can('manage_options')) {
5096		- wp_die(esc_html__('Unauthorized user', 'mxchat'));
5097		- }
5098		- check_admin_referer('mxchat_add_intent_nonce');
5099		- global $wpdb;
5100		- $table_name = $wpdb->prefix . 'mxchat_intents';
5101		-
5102		- // Sanitize and get form data
5103		- $intent_label = isset($_POST['intent_label']) ? sanitize_text_field($_POST['intent_label']) : '';
5104		- $phrases_input = isset($_POST['phrases']) ? sanitize_textarea_field($_POST['phrases']) : '';
5105		- $callback_function = isset($_POST['callback_function']) ? sanitize_text_field($_POST['callback_function']) : '';
5106		-
5107		- // Get similarity threshold from form (convert percentage to decimal)
5108		- $similarity_threshold = isset($_POST['similarity_threshold']) ? floatval($_POST['similarity_threshold']) / 100 : 0.85;
5109		-
5110		- // Handle enabled_bots
5111		- $enabled_bots = isset($_POST['enabled_bots']) ? $_POST['enabled_bots'] : array('default');
5112		- $enabled_bots = array_map('sanitize_text_field', $enabled_bots);
5113		-
5114		- // Ensure default is always included for backward compatibility with existing actions
5115		- if (!in_array('default', $enabled_bots)) {
5116		- $enabled_bots[] = 'default';
5117		- }
5118		-
5119		- $enabled_bots_json = json_encode($enabled_bots);
5120		-
5121		- // Validate required fields
5122		- if (empty($intent_label) || empty($callback_function) || empty($phrases_input)) {
5123		- $this->handle_embedding_error(__('Invalid input. Please ensure all fields are filled out.', 'mxchat'));
5124		- return;
5125		- }
5126		-
5127		- // Validate callback function
5128		- $available_callbacks = $this->mxchat_get_available_callbacks();
5129		- if (!array_key_exists($callback_function, $available_callbacks)) {
5130		- $this->handle_embedding_error(__('Invalid callback function selected.', 'mxchat'));
5131		- return;
5132		- }
5133		-
5134		- // Check if this is an add-on promotional placeholder (not a real action)
5135		- if (!empty($available_callbacks[$callback_function]['addon_promo'])) {
5136		- $addon_name = isset($available_callbacks[$callback_function]['addon_name']) ? $available_callbacks[$callback_function]['addon_name'] : __('an add-on', 'mxchat');
5137		- $this->handle_embedding_error(sprintf(
5138		- __('This action requires the %s to be installed and activated.', 'mxchat'),
5139		- $addon_name
5140		- ));
5141		- return;
5142		- }
5143		-
5144		- // Process phrases
5145		- $phrases_array = array_map('sanitize_text_field', array_filter(array_map('trim', explode(',', $phrases_input))));
5146		- if (empty($phrases_array)) {
5147		- $this->handle_embedding_error(__('Please enter at least one valid phrase.', 'mxchat'));
5148		- return;
5149		- }
5150		-
5151		- // Generate embeddings with improved error handling
5152		- $vectors = [];
5153		- $failed_phrases = [];
5154		- foreach ($phrases_array as $phrase) {
5155		- $embedding_vector = $this->mxchat_generate_embedding($phrase, $this->options['api_key']);
5156		- if (is_array($embedding_vector)) {
5157		- $vectors[] = $embedding_vector;
5158		- } else {
5159		- $failed_phrases[] = $phrase;
5160		- }
5161		- }
5162		-
5163		- // Check for embedding failures
5164		- if (!empty($failed_phrases)) {
5165		- $this->handle_embedding_error(
5166		- sprintf(
5167		- __('Error generating embeddings for phrases: %s. Check your embedding API.', 'mxchat'),
5168		- implode(', ', $failed_phrases)
5169		- )
5170		- );
5171		- return;
5172		- }
5173		-
5174		- if (empty($vectors)) {
5175		- $this->handle_embedding_error(__('No valid embeddings generated. Please check your phrases.', 'mxchat'));
5176		- return;
5177		- }
5178		-
5179		- // Create combined vector and insert into database
5180		- $combined_vector = $this->mxchat_average_vectors($vectors);
5181		- $serialized_vector = maybe_serialize($combined_vector);
5182		-
5183		- $result = $wpdb->insert($table_name, [
5184		- 'intent_label' => $intent_label,
5185		- 'phrases' => implode(', ', $phrases_array),
5186		- 'embedding_vector' => $serialized_vector,
5187		- 'callback_function' => $callback_function,
5188		- 'similarity_threshold' => $similarity_threshold,
5189		- 'enabled_bots' => $enabled_bots_json, // NEW field
5190		- ]);
5191		-
5192		- if ($result === false) {
5193		- $this->handle_embedding_error(__('Database error: ', 'mxchat') . $wpdb->last_error);
5194		- return;
5195		- }
5196		-
5197		- // Set success message and redirect
5198		- set_transient('mxchat_admin_notice_success', __('New intent added successfully!', 'mxchat'), 60);
5199		- wp_safe_redirect(admin_url('admin.php?page=mxchat-actions'));
5200		- exit;
5201		-}
5202		-
5203		-
5204		-
5205		-
5206		-private function handle_embedding_error($message, $redirect = true) {
5207		- // Store the error message in the existing transient
5208		- set_transient('mxchat_admin_notice_error', $message, 60);
5209		-
5210		- if ($redirect) {
5211		- // Redirect back to the actions page
5212		- $redirect_url = add_query_arg(
5213		- array(
5214		- 'page' => 'mxchat-actions'
5215		- ),
5216		- admin_url('admin.php')
5217		- );
5218		- wp_safe_redirect($redirect_url);
5219		- exit;
5220		- }
5221		-}
5222		-
5223		-/**
5224		- * AJAX handler to fetch actions list for the new split-panel UI
5225		- */
5226		-public function mxchat_fetch_actions_list() {
5227		- check_ajax_referer('mxchat_actions_nonce', 'security');
5228		-
5229		- if (!current_user_can('manage_options')) {
5230		- wp_send_json_error(__('Unauthorized', 'mxchat'));
5231		- }
5232		-
5233		- global $wpdb;
5234		- $table_name = $wpdb->prefix . 'mxchat_intents';
5235		-
5236		- $page = isset($_POST['page']) ? max(1, intval($_POST['page'])) : 1;
5237		- $per_page = isset($_POST['per_page']) ? min(100, max(1, intval($_POST['per_page']))) : 50;
5238		- $offset = ($page - 1) * $per_page;
5239		- $search = isset($_POST['search']) ? sanitize_text_field($_POST['search']) : '';
5240		- $callback_filter = isset($_POST['callback_filter']) ? sanitize_text_field($_POST['callback_filter']) : '';
5241		- $sort_order = isset($_POST['sort_order']) && $_POST['sort_order'] === 'asc' ? 'ASC' : 'DESC';
5242		-
5243		- // Build WHERE clause
5244		- $where = '1=1';
5245		- $params = array();
5246		-
5247		- if ($search) {
5248		- $search_like = '%' . $wpdb->esc_like($search) . '%';
5249		- $where .= ' AND (intent_label LIKE %s OR phrases LIKE %s)';
5250		- $params[] = $search_like;
5251		- $params[] = $search_like;
5252		- }
5253		-
5254		- if ($callback_filter) {
5255		- $where .= ' AND callback_function = %s';
5256		- $params[] = $callback_filter;
5257		- }
5258		-
5259		- // Get total count
5260		- $count_query = "SELECT COUNT(*) FROM $table_name WHERE $where";
5261		- if (!empty($params)) {
5262		- $count_query = $wpdb->prepare($count_query, $params);
5263		- }
5264		- $total_actions = $wpdb->get_var($count_query);
5265		-
5266		- // Get actions
5267		- $query = "SELECT * FROM $table_name WHERE $where ORDER BY id $sort_order LIMIT %d OFFSET %d";
5268		- $all_params = array_merge($params, array($per_page, $offset));
5269		- $actions = $wpdb->get_results($wpdb->prepare($query, $all_params));
5270		-
5271		- // Get available callbacks for labels/icons
5272		- $available_callbacks = $this->mxchat_get_available_callbacks();
5273		-
5274		- // Prefetch individual phrase counts for all fetched actions
5275		- $phrases_table = $wpdb->prefix . 'mxchat_intent_phrases';
5276		- $phrase_counts = array();
5277		- if ($wpdb->get_var("SHOW TABLES LIKE '$phrases_table'") === $phrases_table) {
5278		- $action_ids = wp_list_pluck($actions, 'id');
5279		- if (!empty($action_ids)) {
5280		- $id_placeholders = implode(',', array_fill(0, count($action_ids), '%d'));
5281		- $count_results = $wpdb->get_results($wpdb->prepare(
5282		- "SELECT intent_id, COUNT(*) as cnt FROM $phrases_table WHERE intent_id IN ($id_placeholders) GROUP BY intent_id",
5283		- $action_ids
5284		- ));
5285		- foreach ($count_results as $row) {
5286		- $phrase_counts[$row->intent_id] = intval($row->cnt);
5287		- }
5288		- }
5289		- }
5290		-
5291		- // Format actions for response
5292		- $formatted_actions = array();
5293		- foreach ($actions as $action) {
5294		- $callback_data = isset($available_callbacks[$action->callback_function])
5295		- ? $available_callbacks[$action->callback_function]
5296		- : array('label' => $action->callback_function, 'icon' => 'admin-generic');
5297		-
5298		- $enabled_bots = json_decode($action->enabled_bots, true);
5299		- if (!is_array($enabled_bots)) {
5300		- $enabled_bots = array('default');
5301		- }
5302		-
5303		- $formatted_actions[] = array(
5304		- 'id' => intval($action->id),
5305		- 'label' => $action->intent_label,
5306		- 'phrases' => $action->phrases,
5307		- 'callback_function' => $action->callback_function,
5308		- 'callback_label' => $callback_data['label'],
5309		- 'icon' => isset($callback_data['icon']) ? $callback_data['icon'] : 'admin-generic',
5310		- 'threshold' => round($action->similarity_threshold * 100),
5311		- 'enabled' => (bool) $action->enabled,
5312		- 'enabled_bots' => $enabled_bots,
5313		- 'has_legacy_vector' => !empty($action->embedding_vector),
5314		- 'individual_phrase_count' => isset($phrase_counts[$action->id]) ? $phrase_counts[$action->id] : 0,
5315		- );
5316		- }
5317		-
5318		- $total_pages = ceil($total_actions / $per_page);
5319		- $showing_start = $total_actions > 0 ? $offset + 1 : 0;
5320		- $showing_end = min($offset + $per_page, $total_actions);
5321		-
5322		- wp_send_json_success(array(
5323		- 'actions' => $formatted_actions,
5324		- 'page' => $page,
5325		- 'per_page' => $per_page,
5326		- 'total_actions' => intval($total_actions),
5327		- 'total_pages' => $total_pages,
5328		- 'showing_start' => $showing_start,
5329		- 'showing_end' => $showing_end,
5330		- ));
5331		-}
5332		-
5333		-/**
5334		- * AJAX handler to toggle action enabled status
5335		- */
5336		-public function mxchat_toggle_action_status() {
5337		- check_ajax_referer('mxchat_actions_nonce', 'security');
5338		-
5339		- if (!current_user_can('manage_options')) {
5340		- wp_send_json_error(__('Unauthorized', 'mxchat'));
5341		- }
5342		-
5343		- $action_id = isset($_POST['action_id']) ? intval($_POST['action_id']) : 0;
5344		- $enabled = isset($_POST['enabled']) ? intval($_POST['enabled']) : 0;
5345		-
5346		- if (!$action_id) {
5347		- wp_send_json_error(__('Invalid action ID', 'mxchat'));
5348		- }
5349		-
5350		- global $wpdb;
5351		- $table_name = $wpdb->prefix . 'mxchat_intents';
5352		-
5353		- $result = $wpdb->update(
5354		- $table_name,
5355		- array('enabled' => $enabled ? 1 : 0),
5356		- array('id' => $action_id),
5357		- array('%d'),
5358		- array('%d')
5359		- );
5360		-
5361		- if ($result === false) {
5362		- wp_send_json_error(__('Failed to update action status', 'mxchat'));
5363		- }
5364		-
5365		- wp_send_json_success(array('enabled' => (bool) $enabled));
5366		-}
5367		-
5368		-/**
5369		- * AJAX handler to bulk delete actions
5370		- */
5371		-public function mxchat_bulk_delete_actions() {
5372		- check_ajax_referer('mxchat_delete_intent_nonce', 'security');
5373		-
5374		- if (!current_user_can('manage_options')) {
5375		- wp_send_json_error(__('Unauthorized', 'mxchat'));
5376		- }
5377		-
5378		- $action_ids = isset($_POST['action_ids']) ? array_map('intval', (array) $_POST['action_ids']) : array();
5379		-
5380		- if (empty($action_ids)) {
5381		- wp_send_json_error(__('No actions selected', 'mxchat'));
5382		- }
5383		-
5384		- global $wpdb;
5385		- $table_name = $wpdb->prefix . 'mxchat_intents';
5386		-
5387		- $placeholders = implode(',', array_fill(0, count($action_ids), '%d'));
5388		- $query = $wpdb->prepare("DELETE FROM $table_name WHERE id IN ($placeholders)", $action_ids);
5389		- $result = $wpdb->query($query);
5390		-
5391		- if ($result === false) {
5392		- wp_send_json_error(__('Failed to delete actions', 'mxchat'));
5393		- }
5394		-
5395		- // Also delete individual phrases for these intents
5396		- $phrases_table = $wpdb->prefix . 'mxchat_intent_phrases';
5397		- if ($wpdb->get_var("SHOW TABLES LIKE '$phrases_table'") === $phrases_table) {
5398		- $wpdb->query($wpdb->prepare("DELETE FROM $phrases_table WHERE intent_id IN ($placeholders)", $action_ids));
5399		- }
5400		-
5401		- wp_send_json_success(array('deleted' => $result));
5402		-}
5403		-
5404		-/**
5405		- * AJAX handler to add a new intent/action
5406		- */
5407		-public function mxchat_add_intent_ajax() {
5408		- check_ajax_referer('mxchat_add_intent_nonce', 'security');
5409		-
5410		- if (!current_user_can('manage_options')) {
5411		- wp_send_json_error(__('Unauthorized', 'mxchat'));
5412		- }
5413		-
5414		- global $wpdb;
5415		- $table_name = $wpdb->prefix . 'mxchat_intents';
5416		-
5417		- // Sanitize input
5418		- $intent_label = isset($_POST['intent_label']) ? sanitize_text_field($_POST['intent_label']) : '';
5419		- $phrases_input = isset($_POST['phrases']) ? sanitize_textarea_field($_POST['phrases']) : '';
5420		- $callback_function = isset($_POST['callback_function']) ? sanitize_text_field($_POST['callback_function']) : '';
5421		- $similarity_threshold = isset($_POST['similarity_threshold']) ? floatval($_POST['similarity_threshold']) / 100 : 0.85;
5422		- $enabled_bots = isset($_POST['enabled_bots']) ? array_map('sanitize_text_field', (array) $_POST['enabled_bots']) : array('default');
5423		-
5424		- // Validate
5425		- // Check if using new individual phrases mode or legacy mode
5426		- $individual_phrases = isset($_POST['individual_phrases']) ? array_filter(array_map('sanitize_text_field', (array) $_POST['individual_phrases'])) : array();
5427		- $use_individual = !empty($individual_phrases);
5428		-
5429		- // Validate required fields (phrases not required when using individual mode)
5430		- if (empty($intent_label) || empty($callback_function)) {
5431		- wp_send_json_error(__('Please fill in all required fields.', 'mxchat'));
5432		- }
5433		- if (!$use_individual && empty($phrases_input)) {
5434		- wp_send_json_error(__('Please fill in all required fields.', 'mxchat'));
5435		- }
5436		-
5437		- // Ensure default bot is included
5438		- if (!in_array('default', $enabled_bots)) {
5439		- $enabled_bots[] = 'default';
5440		- }
5441		- $enabled_bots_json = json_encode($enabled_bots);
5442		-
5443		- if ($use_individual) {
5444		- // New mode: individual phrases each get their own vector
5445		- // Insert the intent row with empty legacy fields
5446		- $result = $wpdb->insert(
5447		- $table_name,
5448		- array(
5449		- 'intent_label' => $intent_label,
5450		- 'phrases' => '',
5451		- 'embedding_vector' => '',
5452		- 'similarity_threshold' => $similarity_threshold,
5453		- 'callback_function' => $callback_function,
5454		- 'enabled' => 1,
5455		- 'enabled_bots' => $enabled_bots_json,
5456		- )
5457		- );
5458		-
5459		- if ($result === false) {
5460		- wp_send_json_error(__('Failed to add action to database.', 'mxchat'));
5461		- }
5462		-
5463		- $intent_id = $wpdb->insert_id;
5464		-
5465		- // Insert each phrase individually with its own embedding
5466		- $phrases_table = $wpdb->prefix . 'mxchat_intent_phrases';
5467		- $failed_phrases = array();
5468		- foreach ($individual_phrases as $phrase) {
5469		- $phrase = trim($phrase);
5470		- if (empty($phrase)) continue;
5471		-
5472		- $embedding_vector = $this->mxchat_generate_embedding($phrase);
5473		- if (is_wp_error($embedding_vector)) {
5474		- $failed_phrases[] = $phrase;
5475		- continue;
5476		- }
5477		-
5478		- $wpdb->insert(
5479		- $phrases_table,
5480		- array(
5481		- 'intent_id' => $intent_id,
5482		- 'phrase' => $phrase,
5483		- 'embedding_vector' => maybe_serialize($embedding_vector),
5484		- )
5485		- );
5486		- }
5487		-
5488		- $response = array('id' => $intent_id);
5489		- if (!empty($failed_phrases)) {
5490		- $response['failed_phrases'] = $failed_phrases;
5491		- }
5492		- wp_send_json_success($response);
5493		-
5494		- } else {
5495		- // Legacy mode: combine all phrases into one embedding (backwards compatible)
5496		- $phrases_array = array_filter(array_map('trim', preg_split('/[\n,]+/', $phrases_input)));
5497		- if (empty($phrases_array)) {
5498		- wp_send_json_error(__('Please provide at least one trigger phrase.', 'mxchat'));
5499		- }
5500		-
5501		- // Generate embedding (combine phrases into single string for embedding)
5502		- $embedding_vector = $this->mxchat_generate_embedding(implode(' ', $phrases_array));
5503		- if (is_wp_error($embedding_vector)) {
5504		- // Fallback: store without embedding
5505		- $serialized_vector = null;
5506		- } else {
5507		- $serialized_vector = maybe_serialize($embedding_vector);
5508		- }
5509		-
5510		- // Insert
5511		- $result = $wpdb->insert(
5512		- $table_name,
5513		- array(
5514		- 'intent_label' => $intent_label,
5515		- 'phrases' => implode(', ', $phrases_array),
5516		- 'embedding_vector' => $serialized_vector,
5517		- 'similarity_threshold' => $similarity_threshold,
5518		- 'callback_function' => $callback_function,
5519		- 'enabled' => 1,
5520		- 'enabled_bots' => $enabled_bots_json,
5521		- )
5522		- );
5523		-
5524		- if ($result === false) {
5525		- wp_send_json_error(__('Failed to add action to database.', 'mxchat'));
5526		- }
5527		-
5528		- wp_send_json_success(array('id' => $wpdb->insert_id));
5529		- }
5530		-}
5531		-
5532		-/**
5533		- * AJAX handler to edit an existing intent/action
5534		- */
5535		-public function mxchat_edit_intent_ajax() {
5536		- check_ajax_referer('mxchat_edit_intent', 'security');
5537		-
5538		- if (!current_user_can('manage_options')) {
5539		- wp_send_json_error(__('Unauthorized', 'mxchat'));
5540		- }
5541		-
5542		- global $wpdb;
5543		- $table_name = $wpdb->prefix . 'mxchat_intents';
5544		-
5545		- // Sanitize input
5546		- $intent_id = isset($_POST['intent_id']) ? intval($_POST['intent_id']) : 0;
5547		- $intent_label = isset($_POST['intent_label']) ? sanitize_text_field($_POST['intent_label']) : '';
5548		- $phrases_input = isset($_POST['phrases']) ? sanitize_textarea_field($_POST['phrases']) : '';
5549		- $callback_function = isset($_POST['callback_function']) ? sanitize_text_field($_POST['callback_function']) : '';
5550		- $similarity_threshold = isset($_POST['similarity_threshold']) ? floatval($_POST['similarity_threshold']) / 100 : 0.85;
5551		- $enabled_bots = isset($_POST['enabled_bots']) ? array_map('sanitize_text_field', (array) $_POST['enabled_bots']) : array('default');
5552		-
5553		- // Validate
5554		- if (!$intent_id || empty($intent_label)) {
5555		- wp_send_json_error(__('Please fill in all required fields.', 'mxchat'));
5556		- }
5557		-
5558		- // Check if phrases are managed individually (empty phrases_input means individual mode)
5559		- $uses_individual_phrases = empty($phrases_input);
5560		-
5561		- if ($uses_individual_phrases) {
5562		- // Individual phrase mode: only update non-phrase fields, skip embedding regeneration
5563		- $update_data = array(
5564		- 'intent_label' => $intent_label,
5565		- 'similarity_threshold' => $similarity_threshold,
5566		- 'callback_function' => $callback_function,
5567		- 'enabled_bots' => json_encode($enabled_bots),
5568		- );
5569		- } else {
5570		- // Legacy mode: process phrases and regenerate embedding (backwards compatible for add-ons)
5571		- $phrases_array = array_filter(array_map('trim', preg_split('/[\n,]+/', $phrases_input)));
5572		- if (empty($phrases_array)) {
5573		- wp_send_json_error(__('Please provide at least one trigger phrase.', 'mxchat'));
5574		- }
5575		-
5576		- // Generate new embedding (combine phrases into single string for embedding)
5577		- $embedding_vector = $this->mxchat_generate_embedding(implode(' ', $phrases_array));
5578		- if (is_wp_error($embedding_vector)) {
5579		- // Keep existing embedding
5580		- $update_data = array(
5581		- 'intent_label' => $intent_label,
5582		- 'phrases' => implode(', ', $phrases_array),
5583		- 'similarity_threshold' => $similarity_threshold,
5584		- 'callback_function' => $callback_function,
5585		- 'enabled_bots' => json_encode($enabled_bots),
5586		- );
5587		- } else {
5588		- $serialized_vector = maybe_serialize($embedding_vector);
5589		- $update_data = array(
5590		- 'intent_label' => $intent_label,
5591		- 'phrases' => implode(', ', $phrases_array),
5592		- 'embedding_vector' => $serialized_vector,
5593		- 'similarity_threshold' => $similarity_threshold,
5594		- 'callback_function' => $callback_function,
5595		- 'enabled_bots' => json_encode($enabled_bots),
5596		- );
5597		- }
5598		- }
5599		-
5600		- // Ensure default bot is included
5601		- if (!in_array('default', $enabled_bots)) {
5602		- $enabled_bots[] = 'default';
5603		- }
5604		- $update_data['enabled_bots'] = json_encode($enabled_bots);
5605		-
5606		- $result = $wpdb->update(
5607		- $table_name,
5608		- $update_data,
5609		- array('id' => $intent_id),
5610		- null,
5611		- array('%d')
5612		- );
5613		-
5614		- if ($result === false) {
5615		- wp_send_json_error(__('Failed to update action.', 'mxchat'));
5616		- }
5617		-
5618		- wp_send_json_success(array('updated' => true));
5619		-}
5620		-
5621		-/**
5622		- * AJAX handler to delete a single intent/action
5623		- */
5624		-public function mxchat_delete_intent_ajax() {
5625		- check_ajax_referer('mxchat_delete_intent_nonce', 'security');
5626		-
5627		- if (!current_user_can('manage_options')) {
5628		- wp_send_json_error(__('Unauthorized', 'mxchat'));
5629		- }
5630		-
5631		- $intent_id = isset($_POST['intent_id']) ? intval($_POST['intent_id']) : 0;
5632		-
5633		- if (!$intent_id) {
5634		- wp_send_json_error(__('Invalid action ID', 'mxchat'));
5635		- }
5636		-
5637		- global $wpdb;
5638		- $table_name = $wpdb->prefix . 'mxchat_intents';
5639		-
5640		- $result = $wpdb->delete($table_name, array('id' => $intent_id), array('%d'));
5641		-
5642		- if ($result === false) {
5643		- wp_send_json_error(__('Failed to delete action', 'mxchat'));
5644		- }
5645		-
5646		- // Also delete individual phrases for this intent
5647		- $phrases_table = $wpdb->prefix . 'mxchat_intent_phrases';
5648		- if ($wpdb->get_var("SHOW TABLES LIKE '$phrases_table'") === $phrases_table) {
5649		- $wpdb->delete($phrases_table, array('intent_id' => $intent_id), array('%d'));
5650		- }
5651		-
5652		- wp_send_json_success(array('deleted' => true));
5653		-}
5654		-
5655		-/**
5656		- * AJAX handler to add a single phrase with its own embedding to an intent
5657		- */
5658		-public function mxchat_add_phrase_ajax() {
5659		- check_ajax_referer('mxchat_add_phrase_nonce', 'security');
5660		-
5661		- if (!current_user_can('manage_options')) {
5662		- wp_send_json_error(__('Unauthorized', 'mxchat'));
5663		- }
5664		-
5665		- $intent_id = isset($_POST['intent_id']) ? intval($_POST['intent_id']) : 0;
5666		- $phrase = isset($_POST['phrase']) ? sanitize_text_field($_POST['phrase']) : '';
5667		-
5668		- if (!$intent_id || empty($phrase)) {
5669		- wp_send_json_error(__('Please provide an intent ID and phrase.', 'mxchat'));
5670		- }
5671		-
5672		- // Verify the intent exists
5673		- global $wpdb;
5674		- $intents_table = $wpdb->prefix . 'mxchat_intents';
5675		- $intent = $wpdb->get_row($wpdb->prepare("SELECT id FROM $intents_table WHERE id = %d", $intent_id));
5676		- if (!$intent) {
5677		- wp_send_json_error(__('Action not found.', 'mxchat'));
5678		- }
5679		-
5680		- // Generate embedding for this single phrase
5681		- $embedding_vector = $this->mxchat_generate_embedding($phrase);
5682		- if (is_wp_error($embedding_vector)) {
5683		- wp_send_json_error(__('Failed to generate embedding: ', 'mxchat') . $embedding_vector->get_error_message());
5684		- }
5685		-
5686		- $phrases_table = $wpdb->prefix . 'mxchat_intent_phrases';
5687		- $result = $wpdb->insert(
5688		- $phrases_table,
5689		- array(
5690		- 'intent_id' => $intent_id,
5691		- 'phrase' => $phrase,
5692		- 'embedding_vector' => maybe_serialize($embedding_vector),
5693		- )
5694		- );
5695		-
5696		- if ($result === false) {
5697		- wp_send_json_error(__('Failed to add phrase.', 'mxchat'));
5698		- }
5699		-
5700		- wp_send_json_success(array('id' => $wpdb->insert_id, 'phrase' => $phrase));
5701		-}
5702		-
5703		-/**
5704		- * AJAX handler to delete a single phrase from wp_mxchat_intent_phrases
5705		- */
5706		-public function mxchat_delete_phrase_ajax() {
5707		- check_ajax_referer('mxchat_delete_phrase_nonce', 'security');
5708		-
5709		- if (!current_user_can('manage_options')) {
5710		- wp_send_json_error(__('Unauthorized', 'mxchat'));
5711		- }
5712		-
5713		- $phrase_id = isset($_POST['phrase_id']) ? intval($_POST['phrase_id']) : 0;
5714		- if (!$phrase_id) {
5715		- wp_send_json_error(__('Invalid phrase ID.', 'mxchat'));
5716		- }
5717		-
5718		- global $wpdb;
5719		- $phrases_table = $wpdb->prefix . 'mxchat_intent_phrases';
5720		- $result = $wpdb->delete($phrases_table, array('id' => $phrase_id), array('%d'));
5721		-
5722		- if ($result === false) {
5723		- wp_send_json_error(__('Failed to delete phrase.', 'mxchat'));
5724		- }
5725		-
5726		- wp_send_json_success(array('deleted' => true));
5727		-}
5728		-
5729		-/**
5730		- * AJAX handler to fetch individual phrases for an intent
5731		- */
5732		-public function mxchat_get_phrases_ajax() {
5733		- check_ajax_referer('mxchat_get_phrases_nonce', 'security');
5734		-
5735		- if (!current_user_can('manage_options')) {
5736		- wp_send_json_error(__('Unauthorized', 'mxchat'));
5737		- }
5738		-
5739		- $intent_id = isset($_POST['intent_id']) ? intval($_POST['intent_id']) : 0;
5740		- if (!$intent_id) {
5741		- wp_send_json_error(__('Invalid intent ID.', 'mxchat'));
5742		- }
5743		-
5744		- global $wpdb;
5745		- $phrases_table = $wpdb->prefix . 'mxchat_intent_phrases';
5746		-
5747		- $phrases = array();
5748		- if ($wpdb->get_var("SHOW TABLES LIKE '$phrases_table'") === $phrases_table) {
5749		- $phrases = $wpdb->get_results($wpdb->prepare(
5750		- "SELECT id, phrase, created_at FROM $phrases_table WHERE intent_id = %d ORDER BY created_at ASC",
5751		- $intent_id
5752		- ));
5753		- }
5754		-
5755		- wp_send_json_success(array('phrases' => $phrases));
5756		-}
5757		-
5758		-/**
5759		- * AJAX handler to clear legacy phrases and embedding from the main intents table
5760		- */
5761		-public function mxchat_delete_legacy_phrases_ajax() {
5762		- check_ajax_referer('mxchat_delete_legacy_nonce', 'security');
5763		-
5764		- if (!current_user_can('manage_options')) {
5765		- wp_send_json_error(__('Unauthorized', 'mxchat'));
5766		- }
5767		-
5768		- $intent_id = isset($_POST['intent_id']) ? intval($_POST['intent_id']) : 0;
5769		- if (!$intent_id) {
5770		- wp_send_json_error(__('Invalid intent ID.', 'mxchat'));
5771		- }
5772		-
5773		- global $wpdb;
5774		- $table_name = $wpdb->prefix . 'mxchat_intents';
5775		-
5776		- $result = $wpdb->update(
5777		- $table_name,
5778		- array('phrases' => '', 'embedding_vector' => ''),
5779		- array('id' => $intent_id),
5780		- array('%s', '%s'),
5781		- array('%d')
5782		- );
5783		-
5784		- if ($result === false) {
5785		- wp_send_json_error(__('Failed to clear legacy phrases.', 'mxchat'));
5786		- }
5787		-
5788		- wp_send_json_success(array('cleared' => true));
5789		-}
5790		-
5791		-/**
5792		- * Enhanced get_available_callbacks function with form action exclusion
5793		- *
5794		- * @param bool $grouped Whether to return callbacks grouped by category
5795		- * @param bool $include_all Whether to include all potential actions (even if add-on not installed)
5796		- * @return array Callbacks data with icons, descriptions and availability status
5797		- */
5798		-private function mxchat_get_available_callbacks($grouped = false, $include_all = true) {
5799		- // Load WordPress plugin functions if needed
5800		- if (!function_exists('get_plugins')) {
5801		- require_once ABSPATH . 'wp-admin/includes/plugin.php';
5802		- }
5803		-
5804		- // Get active plugins
5805		- $active_plugins = get_option('active_plugins', array());
5806		-
5807		- // Functions to exclude from the action selector only if Pro is activated
5808		- // If user doesn't have Pro, show these so they can see what they're missing
5809		- $excluded_when_pro_active_functions = array(
5810		- 'mxchat_handle_form_collection' // Forms add-on action
5811		- );
5812		-
5813		- // Always excluded functions (regardless of Pro status)
5814		- $always_excluded_functions = array();
5815		-
5816		- // Combine exclusion lists based on Pro activation status
5817		- $excluded_functions = $always_excluded_functions;
5818		- if ($this->is_activated) {
5819		- // Only exclude add-on managed functions if Pro is active
5820		- $excluded_functions = array_merge($excluded_functions, $excluded_when_pro_active_functions);
5821		- }
5822		-
5823		- // Define add-on plugin files and their corresponding action functions
5824		- $addon_plugins = array(
5825		- 'mxchat-woo/mxchat-woo.php' => array(
5826		- 'functions' => array(
5827		- 'mxchat_handle_product_recommendations',
5828		- 'mxchat_handle_order_history',
5829		- 'mxchat_show_product_card',
5830		- 'mxchat_add_to_cart',
5831		- 'mxchat_checkout_redirect',
5832		- 'mxchat_handle_featured_products'
5833		- ),
5834		- 'name' => __('WooCommerce Add-on', 'mxchat'),
5835		- 'pro_required' => true
5836		- ),
5837		- 'mxchat-perplexity/mxchat-perplexity.php' => array(
5838		- 'functions' => array('mxchat_perplexity_research'),
5839		- 'name' => __('Perplexity Add-on', 'mxchat'),
5840		- 'pro_required' => true
5841		- ),
5842		- 'mxchat-forms/mxchat-forms.php' => array(
5843		- 'functions' => array('mxchat_handle_form_collection'),
5844		- 'name' => __('Forms Add-on', 'mxchat'),
5845		- 'pro_required' => true
5846		- ),
5847		- // Add other add-ons and their functions here
5848		- );
5849		-
5850		- // Get the functions that are provided by active add-ons
5851		- $addon_provided_functions = array();
5852		- $addon_function_mapping = array(); // Maps functions to their add-on info
5853		-
5854		- // Check which add-ons are active
5855		- foreach ($addon_plugins as $plugin_file => $addon_info) {
5856		- $is_active = in_array($plugin_file, $active_plugins);
5857		-
5858		- // For each function in this addon
5859		- foreach ($addon_info['functions'] as $function) {
5860		- // Consider a function installed only if:
5861		- // 1. The add-on is active AND
5862		- // 2. Either it doesn't require Pro OR Pro is activated
5863		- $is_installed = $is_active && (!$addon_info['pro_required'] || $this->is_activated);
5864		-
5865		- // If the add-on is installed, mark this function as provided by an add-on
5866		- if ($is_installed) {
5867		- $addon_provided_functions[] = $function;
5868		- }
5869		-
5870		- // Store addon info for this function regardless of installation status
5871		- $addon_function_mapping[$function] = array(
5872		- 'addon' => basename(dirname($plugin_file)),
5873		- 'addon_name' => $addon_info['name'],
5874		- 'pro_required' => $addon_info['pro_required'],
5875		- 'is_active' => $is_active,
5876		- 'is_installed' => $is_installed
5877		- );
5878		- }
5879		- }
5880		-
5881		- // Core callbacks - always available in the base plugin
5882		- $core_callbacks = array(
5883		- 'mxchat_handle_email_capture' => array(
5884		- 'label' => __('Loops Email Capture', 'mxchat'),
5885		- 'pro_only' => false,
5886		- 'group' => __('Customer Engagement', 'mxchat'),
5887		- 'icon' => 'email-alt',
5888		- 'description' => __('Collect visitor emails for your mailing list in Loops', 'mxchat'),
5889		- 'addon' => false, // Not from an add-on
5890		- 'installed' => true // Always installed with base plugin
5891		- ),
5892		- 'mxchat_handle_search_request' => array(
5893		- 'label' => __('Brave Web Search', 'mxchat'),
5894		- 'pro_only' => false,
5895		- 'group' => __('Search Features', 'mxchat'),
5896		- 'icon' => 'search',
5897		- 'description' => __('Let users search the web directly from the chat (requires a Brave Search API key)', 'mxchat'),
5898		- 'addon' => false,
5899		- 'installed' => true
5900		- ),
5901		- 'mxchat_handle_image_search_request' => array(
5902		- 'label' => __('Brave Image Search', 'mxchat'),
5903		- 'pro_only' => false,
5904		- 'group' => __('Search Features', 'mxchat'),
5905		- 'icon' => 'format-image',
5906		- 'description' => __('Search and display images in the chat conversation (requires a Brave Search API key)', 'mxchat'),
5907		- 'addon' => false,
5908		- 'installed' => true
5909		- ),
5910		- // Pro core features - check is_activated property
5911		- 'mxchat_generate_image' => array(
5912		- 'label' => __('Generate Image (OpenAI)', 'mxchat'),
5913		- 'pro_only' => false,
5914		- 'group' => __('Other Features', 'mxchat'),
5915		- 'icon' => 'art',
5916		- 'description' => __('Create images with GPT Image from OpenAI (requires OpenAI API key)', 'mxchat'),
5917		- 'addon' => false,
5918		- 'installed' => true
5919		- ),
5920		- 'mxchat_generate_gemini_image' => array(
5921		- 'label' => __('Generate Image (Gemini)', 'mxchat'),
5922		- 'pro_only' => false,
5923		- 'group' => __('Other Features', 'mxchat'),
5924		- 'icon' => 'art',
5925		- 'description' => __('Create images with Imagen from Google (requires Gemini API key)', 'mxchat'),
5926		- 'addon' => false,
5927		- 'installed' => true
5928		- ),
5929		- 'mxchat_handle_pdf_discussion' => array(
5930		- 'label' => __('Chat with PDF', 'mxchat'),
5931		- 'pro_only' => false,
5932		- 'group' => __('Other Features', 'mxchat'),
5933		- 'icon' => 'media-document',
5934		- 'description' => __('Answer questions about uploaded PDF documents', 'mxchat'),
5935		- 'addon' => false,
5936		- 'installed' => true
5937		- ),
5938		- 'mxchat_live_agent_handover' => array(
5939		- 'label' => __('Slack Live Agent', 'mxchat'),
5940		- 'pro_only' => false,
5941		- 'group' => __('Customer Engagement', 'mxchat'),
5942		- 'icon' => 'admin-users',
5943		- 'description' => __('Transfer conversation to a human support agent on Slack', 'mxchat'),
5944		- 'addon' => false,
5945		- 'installed' => true
5946		- ),
5947		- 'mxchat_telegram_live_agent_handover' => array(
5948		- 'label' => __('Telegram Live Agent', 'mxchat'),
5949		- 'pro_only' => false,
5950		- 'group' => __('Customer Engagement', 'mxchat'),
5951		- 'icon' => 'format-chat',
5952		- 'description' => __('Transfer conversation to a human support agent on Telegram', 'mxchat'),
5953		- 'addon' => false,
5954		- 'installed' => true
5955		- ),
5956		- 'mxchat_handle_switch_to_chatbot_intent' => array(
5957		- 'label' => __('Back to Chatbot', 'mxchat'),
5958		- 'pro_only' => false,
5959		- 'group' => __('Customer Engagement', 'mxchat'),
5960		- 'icon' => 'backup',
5961		- 'description' => __('Return from live agent mode to AI chatbot', 'mxchat'),
5962		- 'addon' => false,
5963		- 'installed' => true
5964		- ),
5965		- );
5966		-
5967		- // Add-on callbacks with placeholders - only include if the add-on is NOT active
5968		- // These are promotional/informational only — not selectable as real actions
5969		- $addon_callbacks = array(
5970		- // WooCommerce Add-on
5971		- 'mxchat_handle_product_recommendations' => array(
5972		- 'label' => __('Product Recommendations', 'mxchat'),
5973		- 'pro_only' => false,
5974		- 'addon_promo' => true,
5975		- 'group' => __('WooCommerce Features', 'mxchat'),
5976		- 'icon' => 'cart',
5977		- 'description' => __('Suggest products based on customer preferences', 'mxchat'),
5978		- ),
5979		- 'mxchat_handle_order_history' => array(
5980		- 'label' => __('Order History', 'mxchat'),
5981		- 'pro_only' => false,
5982		- 'addon_promo' => true,
5983		- 'group' => __('WooCommerce Features', 'mxchat'),
5984		- 'icon' => 'clipboard',
5985		- 'description' => __('Allow customers to check their order status', 'mxchat'),
5986		- ),
5987		- 'mxchat_show_product_card' => array(
5988		- 'label' => __('Show Product Card', 'mxchat'),
5989		- 'pro_only' => false,
5990		- 'addon_promo' => true,
5991		- 'group' => __('WooCommerce Features', 'mxchat'),
5992		- 'icon' => 'products',
5993		- 'description' => __('Display product information in the chat', 'mxchat'),
5994		- ),
5995		- 'mxchat_add_to_cart' => array(
5996		- 'label' => __('Add to Cart', 'mxchat'),
5997		- 'pro_only' => false,
5998		- 'addon_promo' => true,
5999		- 'group' => __('WooCommerce Features', 'mxchat'),
6000		- 'icon' => 'plus-alt',
6001		- 'description' => __('Add products to cart directly from chat', 'mxchat'),
6002		- ),
6003		- 'mxchat_checkout_redirect' => array(
6004		- 'label' => __('Proceed to Checkout', 'mxchat'),
6005		- 'pro_only' => false,
6006		- 'addon_promo' => true,
6007		- 'group' => __('WooCommerce Features', 'mxchat'),
6008		- 'icon' => 'arrow-right-alt',
6009		- 'description' => __('Redirect customer to checkout page', 'mxchat'),
6010		- ),
6011		- 'mxchat_handle_featured_products' => array(
6012		- 'label' => __('Featured Products Showcase', 'mxchat'),
6013		- 'pro_only' => false,
6014		- 'addon_promo' => true,
6015		- 'group' => __('WooCommerce Features', 'mxchat'),
6016		- 'icon' => 'star-filled',
6017		- 'description' => __('Display a curated selection of products with an AI-generated message', 'mxchat'),
6018		- ),
6019		-
6020		- // Perplexity Add-on
6021		- 'mxchat_perplexity_research' => array(
6022		- 'label' => __('Perplexity Research', 'mxchat'),
6023		- 'pro_only' => false,
6024		- 'addon_promo' => true,
6025		- 'group' => __('Search Features', 'mxchat'),
6026		- 'icon' => 'book-alt',
6027		- 'description' => __('Allows the chatbot to search the web for accurate, up-to-date answers', 'mxchat'),
6028		- ),
6029		-
6030		- // Forms Add-on
6031		- 'mxchat_handle_form_collection' => array(
6032		- 'label' => __('Form Collection', 'mxchat'),
6033		- 'pro_only' => false,
6034		- 'addon_promo' => true,
6035		- 'group' => __('Form Features', 'mxchat'),
6036		- 'icon' => 'feedback',
6037		- 'description' => __('Collect user information through custom forms in chat', 'mxchat'),
6038		- ),
6039		- );
6040		-
6041		- // Enhance add-on callbacks with installation status and addon info
6042		- foreach ($addon_callbacks as $function => $data) {
6043		- if (isset($addon_function_mapping[$function])) {
6044		- $addon_info = $addon_function_mapping[$function];
6045		-
6046		- $addon_callbacks[$function]['addon'] = $addon_info['addon'];
6047		- $addon_callbacks[$function]['addon_name'] = $addon_info['addon_name'];
6048		- $addon_callbacks[$function]['installed'] = $addon_info['is_installed'];
6049		-
6050		- // Set pro_only based on add-on configuration
6051		- $addon_callbacks[$function]['pro_only'] = $addon_info['pro_required'];
6052		- } else {
6053		- $addon_callbacks[$function]['addon'] = 'unknown';
6054		- $addon_callbacks[$function]['addon_name'] = __('Unknown Add-on', 'mxchat');
6055		- $addon_callbacks[$function]['installed'] = false;
6056		- }
6057		- }
6058		-
6059		- // Initialize callbacks with core features
6060		- $callbacks = $core_callbacks;
6061		-
6062		- // Get callbacks from active add-ons
6063		- $active_addon_callbacks = apply_filters('mxchat_available_callbacks', array());
6064		-
6065		- // Add placeholder callbacks only for add-ons that aren't active
6066		- if ($include_all) {
6067		- foreach ($addon_callbacks as $function => $data) {
6068		- // Skip placeholders for functions provided by active add-ons
6069		- if (in_array($function, $addon_provided_functions)) {
6070		- continue;
6071		- }
6072		-
6073		- // Skip excluded functions
6074		- if (in_array($function, $excluded_functions)) {
6075		- continue;
6076		- }
6077		-
6078		- // Add the placeholder
6079		- $callbacks[$function] = $data;
6080		- }
6081		- }
6082		-
6083		- // Add callbacks from active add-ons (will override placeholders)
6084		- foreach ($active_addon_callbacks as $function => $data) {
6085		- // Skip excluded functions
6086		- if (in_array($function, $excluded_functions)) {
6087		- continue;
6088		- }
6089		-
6090		- // Always include callbacks from add-ons
6091		- $callbacks[$function] = $data;
6092		-
6093		- // Ensure they have the proper add-on info
6094		- if (isset($addon_function_mapping[$function])) {
6095		- $addon_info = $addon_function_mapping[$function];
6096		- $callbacks[$function]['addon'] = $addon_info['addon'];
6097		- $callbacks[$function]['addon_name'] = $addon_info['addon_name'];
6098		- $callbacks[$function]['installed'] = $addon_info['is_installed'];
6099		- $callbacks[$function]['pro_only'] = $addon_info['pro_required'];
6100		- }
6101		- }
6102		-
6103		- // Just before returning callbacks, sort them to prioritize free features
6104		- if (!$grouped) {
6105		- // Create temporary arrays for sorting
6106		- $free_callbacks = array();
6107		- $pro_callbacks = array();
6108		-
6109		- // Split callbacks into free and pro
6110		- foreach ($callbacks as $key => $data) {
6111		- if (isset($data['pro_only']) && $data['pro_only']) {
6112		- $pro_callbacks[$key] = $data;
6113		- } else {
6114		- $free_callbacks[$key] = $data;
6115		- }
6116		- }
6117		-
6118		- // Merge with free callbacks first
6119		- $callbacks = array_merge($free_callbacks, $pro_callbacks);
6120		- }
6121		-
6122		- // Return grouped structure if requested
6123		- if ($grouped) {
6124		- $grouped_callbacks = array();
6125		- foreach ($callbacks as $key => $data) {
6126		- $group_label = isset($data['group']) ? $data['group'] : __('Other Features', 'mxchat');
6127		-
6128		- // Ensure we carry forward all the new fields in grouped mode
6129		- $callback_data = array(
6130		- 'label' => $data['label'],
6131		- 'pro_only' => isset($data['pro_only']) ? $data['pro_only'] : false,
6132		- 'icon' => isset($data['icon']) ? $data['icon'] : 'admin-generic',
6133		- 'description' => isset($data['description']) ? $data['description'] : __('Custom action for your chatbot', 'mxchat'),
6134		- 'addon' => isset($data['addon']) ? $data['addon'] : false,
6135		- 'addon_name' => isset($data['addon_name']) ? $data['addon_name'] : '',
6136		- 'installed' => isset($data['installed']) ? $data['installed'] : true
6137		- );
6138		-
6139		- $grouped_callbacks[$group_label][$key] = $callback_data;
6140		- }
6141		-
6142		- // Sort within each group to prioritize free features
6143		- foreach ($grouped_callbacks as $group => $items) {
6144		- $free_items = array();
6145		- $pro_items = array();
6146		-
6147		- foreach ($items as $key => $data) {
6148		- if (isset($data['pro_only']) && $data['pro_only']) {
6149		- $pro_items[$key] = $data;
6150		- } else {
6151		- $free_items[$key] = $data;
6152		- }
6153		- }
6154		-
6155		- $grouped_callbacks[$group] = array_merge($free_items, $pro_items);
6156		- }
6157		-
6158		- return $grouped_callbacks;
6159		- }
6160		-
6161		- return $callbacks;
6162		-}
6163		-
6164	752	public function mxchat_page_init() {
	753	+ // Register settings
6165	754	register_setting(
6166	755	'mxchat_option_group',
6167	756	'mxchat_options',
6168	757	array($this, 'mxchat_sanitize')
		@@ -6167,207 +756,36 @@
6167	756	'mxchat_options',
6168	757	array($this, 'mxchat_sanitize')
6169	758	);
6170	759
6171		- register_setting(
6172		- 'mxchat_option_group',
6173		- 'mxchat_similarity_threshold',
6174		- array(
6175		- 'type' => 'number',
6176		- 'sanitize_callback' => function($value) {
6177		- $value = absint($value);
6178		- return min(max($value, 20), 95);
6179		- },
6180		- 'default' => 80,
6181		- )
6182		- );
6183		-
6184	760	// Chatbot Settings Section
6185	761	add_settings_section(
6186	762	'mxchat_chatbot_section',
6187		- esc_html__('Chatbot Settings', 'mxchat'),
	763	+ 'Chatbot Settings',
6188	764	null,
6189	765	'mxchat-chatbot'
6190	766	);
6191	767
6192		- // API Keys Settings Section
6193		- add_settings_section(
6194		- 'mxchat_api_keys_section',
6195		- esc_html__('API Keys', 'mxchat'),
6196		- array($this, 'mxchat_api_keys_section_callback'),
6197		- 'mxchat-api-keys'
6198		- );
6199		-
6200		- // OpenAI API Key
	768	+ // Registering fields for the Chatbot Settings section
6201	769	add_settings_field(
6202	770	'api_key',
6203		- esc_html__('OpenAI API Key', 'mxchat'),
	771	+ 'API Key',
6204	772	array($this, 'api_key_callback'),
6205		- 'mxchat-api-keys',
6206		- 'mxchat_api_keys_section'
6207		- );
6208		-
6209		- // X.AI API Key
6210		- add_settings_field(
6211		- 'xai_api_key',
6212		- esc_html__('X.AI API Key', 'mxchat'),
6213		- array($this, 'xai_api_key_callback'),
6214		- 'mxchat-api-keys',
6215		- 'mxchat_api_keys_section'
6216		- );
6217		-
6218		- // Claude API Key
6219		- add_settings_field(
6220		- 'claude_api_key',
6221		- esc_html__('Claude API Key', 'mxchat'),
6222		- array($this, 'claude_api_key_callback'),
6223		- 'mxchat-api-keys',
6224		- 'mxchat_api_keys_section'
6225		- );
6226		-
6227		- // DeepSeek API Key
6228		- add_settings_field(
6229		- 'deepseek_api_key',
6230		- esc_html__('DeepSeek API Key', 'mxchat'),
6231		- array($this, 'deepseek_api_key_callback'),
6232		- 'mxchat-api-keys',
6233		- 'mxchat_api_keys_section'
6234		- );
6235		-
6236		- // Google Gemini API Key
6237		- add_settings_field(
6238		- 'gemini_api_key',
6239		- esc_html__('Google Gemini API Key', 'mxchat'),
6240		- array($this, 'gemini_api_key_callback'),
6241		- 'mxchat-api-keys',
6242		- 'mxchat_api_keys_section'
6243		- );
6244		-
6245		- // Voyage AI API Key
6246		- add_settings_field(
6247		- 'voyage_api_key',
6248		- esc_html__('Voyage AI API Key', 'mxchat'),
6249		- array($this, 'voyage_api_key_callback'),
6250		- 'mxchat-api-keys',
6251		- 'mxchat_api_keys_section'
6252		- );
6253		-
6254		- // OpenRouter API Key
6255		- add_settings_field(
6256		- 'openrouter_api_key',
6257		- esc_html__('OpenRouter API Key', 'mxchat'),
6258		- array($this, 'openrouter_api_key_callback'),
6259		- 'mxchat-api-keys',
6260		- 'mxchat_api_keys_section'
6261		- );
6262		-
6263		- // Custom (OpenAI-compatible) Provider — for Ollama, LM Studio, vLLM, llama.cpp, Azure OpenAI, etc.
6264		- add_settings_field(
6265		- 'custom_provider',
6266		- esc_html__('Custom Provider (OpenAI-compatible)', 'mxchat'),
6267		- array($this, 'custom_provider_callback'),
6268		- 'mxchat-api-keys',
6269		- 'mxchat_api_keys_section'
6270		- );
6271		-
6272		- // Loops API Key
6273		- add_settings_field(
6274		- 'loops_api_key',
6275		- esc_html__('Loops API Key', 'mxchat'),
6276		- array($this, 'mxchat_loops_api_key_callback'),
6277		- 'mxchat-api-keys',
6278		- 'mxchat_api_keys_section'
6279		- );
6280		-
6281		- // Brave Search API Key
6282		- add_settings_field(
6283		- 'brave_api_key',
6284		- __('Brave API Key', 'mxchat'),
6285		- array($this, 'mxchat_brave_api_key_callback'),
6286		- 'mxchat-api-keys',
6287		- 'mxchat_api_keys_section'
6288		- );
6289		-
6290		- // Similarity Threshold Slider
6291		- add_settings_field(
6292		- 'similarity_threshold', // Field ID
6293		- esc_html__('Similarity Threshold', 'mxchat'), // Field title
6294		- array($this, 'mxchat_similarity_threshold_callback'), // Callback function
6295		- 'mxchat-chatbot', // Page
6296		- 'mxchat_chatbot_section' // Section
6297		- );
6298		-
6299		- // RAG Sources Limit Slider
6300		- add_settings_field(
6301		- 'rag_sources_limit', // Field ID
6302		- esc_html__('RAG Sources Limit', 'mxchat'), // Field title
6303		- array($this, 'mxchat_rag_sources_limit_callback'), // Callback function
6304		- 'mxchat-chatbot', // Page
6305		- 'mxchat_chatbot_section' // Section
6306		- );
6307		-
6308		- // RAG Chunks Limit Slider
6309		- add_settings_field(
6310		- 'rag_chunks_limit', // Field ID
6311		- esc_html__('RAG Chunks Limit', 'mxchat'), // Field title
6312		- array($this, 'mxchat_rag_chunks_limit_callback'), // Callback function
6313		- 'mxchat-chatbot', // Page
6314		- 'mxchat_chatbot_section' // Section
6315		- );
6316		-
6317		- add_settings_field(
6318		- 'append_to_body',
6319		- esc_html__('Auto-Display Chatbot', 'mxchat'),
6320		- array($this, 'mxchat_append_to_body_callback'),
6321	773	'mxchat-chatbot',
6322	774	'mxchat_chatbot_section'
6323	775	);
6324	776
6325	777	add_settings_field(
6326		- 'contextual_awareness_toggle',
6327		- esc_html__('Contextual Awareness', 'mxchat'),
6328		- array($this, 'mxchat_contextual_awareness_callback'),
	778	+ 'system_prompt_instructions',
	779	+ 'AI Instructions',
	780	+ array($this, 'system_prompt_instructions_callback'),
6329	781	'mxchat-chatbot',
6330	782	'mxchat_chatbot_section'
6331	783	);
6332	784
6333	785	add_settings_field(
6334		- 'citation_links_toggle',
6335		- esc_html__('Citation Links', 'mxchat'),
6336		- array($this, 'mxchat_citation_links_toggle_callback'),
6337		- 'mxchat-chatbot',
6338		- 'mxchat_chatbot_section'
6339		- );
6340		-
6341		- // Satisfaction rating toggle (plan-a5b006).
6342		- add_settings_field(
6343		- 'satisfaction_rating_enabled',
6344		- esc_html__('Satisfaction Rating Prompt', 'mxchat'),
6345		- array($this, 'mxchat_satisfaction_rating_toggle_callback'),
6346		- 'mxchat-chatbot',
6347		- 'mxchat_chatbot_section'
6348		- );
6349		-
6350		- // Satisfaction rating customization (plan-141a12, plan-29caac):
6351		- // the 5 customization fields are now inline-rendered inside
6352		- // mxchat_satisfaction_rating_toggle_callback's sub-options wrapper.
6353		-
6354		- add_settings_field(
6355		- 'enable_streaming_toggle',
6356		- esc_html__('Enable Streaming', 'mxchat'),
6357		- array($this, 'enable_streaming_toggle_callback'),
6358		- 'mxchat-chatbot',
6359		- 'mxchat_chatbot_section', // Same section as your working toggle
6360		- array(
6361		- 'class' => 'mxchat-setting-row streaming-setting',
6362		- 'style' => 'display: none;' // Hidden by default, shown when OpenAI/Claude selected
6363		- )
6364		- );
6365		-
6366		-
6367		- add_settings_field(
6368	786	'model',
6369		- esc_html__('Chat Model', 'mxchat'),
	787	+ 'Model',
6370	788	array($this, 'mxchat_model_callback'),
6371	789	'mxchat-chatbot',
6372	790	'mxchat_chatbot_section'
6373	791	);
		@@ -6372,27 +790,10 @@
6372	790	'mxchat_chatbot_section'
6373	791	);
6374	792
6375	793	add_settings_field(
6376		- 'embedding_model',
6377		- esc_html__('Embedding Model', 'mxchat'),
6378		- array($this, 'embedding_model_callback'),
6379		- 'mxchat-chatbot',
6380		- 'mxchat_chatbot_section'
6381		- );
6382		-
6383		- add_settings_field(
6384		- 'system_prompt_instructions',
6385		- esc_html__('AI Instructions (Behavior)', 'mxchat'),
6386		- array($this, 'system_prompt_instructions_callback'),
6387		- 'mxchat-chatbot',
6388		- 'mxchat_chatbot_section'
6389		- );
6390		-
6391		-
6392		- add_settings_field(
6393	794	'top_bar_title',
6394		- esc_html__('Top Bar Title', 'mxchat'),
	795	+ 'Top Bar Title',
6395	796	array($this, 'mxchat_top_bar_title_callback'),
6396	797	'mxchat-chatbot',
6397	798	'mxchat_chatbot_section'
6398	799	);
		@@ -6397,82 +798,58 @@
6397	798	'mxchat_chatbot_section'
6398	799	);
6399	800
6400	801	add_settings_field(
6401		- 'ai_agent_text',
6402		- esc_html__('AI Agent Text', 'mxchat'),
6403		- array($this, 'mxchat_ai_agent_text_callback'),
	802	+ 'intro_message',
	803	+ 'Introductory Message',
	804	+ array($this, 'mxchat_intro_message_callback'),
6404	805	'mxchat-chatbot',
6405	806	'mxchat_chatbot_section'
6406	807	);
6407	808
6408	809	add_settings_field(
6409		- 'enable_email_block',
6410		- esc_html__('Require Email To Chat', 'mxchat'),
6411		- array($this, 'enable_email_block_callback'),
	810	+ 'input_copy',
	811	+ 'Input Copy',
	812	+ array($this, 'mxchat_input_copy_callback'),
6412	813	'mxchat-chatbot',
6413	814	'mxchat_chatbot_section'
6414	815	);
6415	816
6416	817	add_settings_field(
6417		- 'email_blocker_header_content',
6418		- esc_html__('Require Email Chat Content', 'mxchat'),
6419		- array($this, 'email_blocker_header_content_callback'),
	818	+ 'rate_limit',
	819	+ 'Rate Limit',
	820	+ array($this, 'mxchat_rate_limit_callback'),
6420	821	'mxchat-chatbot',
6421	822	'mxchat_chatbot_section'
6422	823	);
6423	824
6424	825	add_settings_field(
6425		- 'email_blocker_button_text',
6426		- esc_html__('Require Email Chat Button Text', 'mxchat'),
6427		- [$this, 'email_blocker_button_text_callback'],
	826	+ 'rate_limit_message',
	827	+ 'Rate Limit Message',
	828	+ array($this, 'mxchat_rate_limit_message_callback'),
6428	829	'mxchat-chatbot',
6429	830	'mxchat_chatbot_section'
6430	831	);
6431	832
6432	833	add_settings_field(
6433		- 'enable_name_field',
6434		- esc_html__('Require Name Field', 'mxchat'),
6435		- array($this, 'enable_name_field_callback'),
	834	+ 'pre_chat_message',
	835	+ 'Pre-Chat Message',
	836	+ array($this, 'mxchat_pre_chat_message_callback'),
6436	837	'mxchat-chatbot',
6437	838	'mxchat_chatbot_section'
6438	839	);
6439	840
6440		- add_settings_field(
6441		- 'name_field_placeholder',
6442		- esc_html__('Name Field Placeholder', 'mxchat'),
6443		- array($this, 'name_field_placeholder_callback'),
	841	+ add_settings_field(
	842	+ 'append_to_body',
	843	+ 'Append Chat Widget to Body',
	844	+ array($this, 'mxchat_append_to_body_callback'),
6444	845	'mxchat-chatbot',
6445	846	'mxchat_chatbot_section'
6446	847	);
6447	848
6448		- add_settings_field(
6449		- 'intro_message',
6450		- esc_html__('Introductory Message', 'mxchat'),
6451		- array($this, 'mxchat_intro_message_callback'),
6452		- 'mxchat-chatbot',
6453		- 'mxchat_chatbot_section'
6454		- );
6455		-
6456		- add_settings_field(
6457		- 'input_copy',
6458		- esc_html__('Input Copy', 'mxchat'),
6459		- array($this, 'mxchat_input_copy_callback'),
6460		- 'mxchat-chatbot',
6461		- 'mxchat_chatbot_section'
6462		- );
6463		-
6464		- add_settings_field(
6465		- 'pre_chat_message',
6466		- esc_html__('Chat Teaser Pop-up', 'mxchat'),
6467		- array($this, 'mxchat_pre_chat_message_callback'),
6468		- 'mxchat-chatbot',
6469		- 'mxchat_chatbot_section'
6470		- );
6471		-
6472		- add_settings_field(
	849	+ add_settings_field(
6473	850	'privacy_toggle',
6474		- esc_html__('Toggle Privacy Notice', 'mxchat'),
	851	+ 'Toggle Privacy Notice',
6475	852	array($this, 'mxchat_privacy_toggle_callback'),
6476	853	'mxchat-chatbot',
6477	854	'mxchat_chatbot_section'
6478	855	);
		@@ -6478,9 +855,9 @@
6478	855	);
6479	856
6480	857	add_settings_field(
6481	858	'complianz_toggle',
6482		- esc_html__('Enable Complianz', 'mxchat'),
	859	+ 'Enable Complianz',
6483	860	array($this, 'mxchat_complianz_toggle_callback'),
6484	861	'mxchat-chatbot',
6485	862	'mxchat_chatbot_section'
6486	863	);
		@@ -6486,706 +863,287 @@
6486	863	);
6487	864
6488	865	add_settings_field(
6489	866	'link_target_toggle',
6490		- esc_html__('Open Links in a New Tab', 'mxchat'),
	867	+ 'Open Links in a New Tab',
6491	868	array($this, 'mxchat_link_target_toggle_callback'),
6492	869	'mxchat-chatbot',
6493	870	'mxchat_chatbot_section'
6494	871	);
6495	872
6496		- add_settings_field(
6497		- 'chat_persistence_toggle',
6498		- esc_html__('Enable Chat Persistence', 'mxchat'),
6499		- array($this, 'mxchat_chat_persistence_toggle_callback'),
6500		- 'mxchat-chatbot',
6501		- 'mxchat_chatbot_section'
6502		- );
6503		-
6504		- add_settings_field(
6505		- 'print_button_enabled',
6506		- esc_html__('Show Download Transcript Button', 'mxchat'),
6507		- array($this, 'mxchat_print_button_toggle_callback'),
6508		- 'mxchat-chatbot',
6509		- 'mxchat_chatbot_section'
6510		- );
6511		-
6512		- add_settings_field(
6513		- 'reset_chat_enabled',
6514		- esc_html__('Show Start-New-Chat Button', 'mxchat'),
6515		- array($this, 'mxchat_reset_chat_toggle_callback'),
6516		- 'mxchat-chatbot',
6517		- 'mxchat_chatbot_section'
6518		- );
6519		-
6520		- add_settings_field(
6521		- 'reset_chat_label',
6522		- esc_html__('Start-New-Chat Button Label', 'mxchat'),
6523		- array($this, 'mxchat_reset_chat_label_callback'),
6524		- 'mxchat-chatbot',
6525		- 'mxchat_chatbot_section'
6526		- );
6527		-
6528		- add_settings_field(
6529		- 'popular_question_1',
6530		- esc_html__('Quick Question 1', 'mxchat'),
6531		- array($this, 'mxchat_popular_question_1_callback'),
6532		- 'mxchat-chatbot',
6533		- 'mxchat_chatbot_section'
6534		- );
6535		-
6536		- add_settings_field(
6537		- 'popular_question_2',
6538		- esc_html__('Quick Question 2', 'mxchat'),
6539		- array($this, 'mxchat_popular_question_2_callback'),
6540		- 'mxchat-chatbot',
6541		- 'mxchat_chatbot_section'
6542		- );
6543		-
6544		- add_settings_field(
6545		- 'popular_question_3',
6546		- esc_html__('Quick Question 3', 'mxchat'),
6547		- array($this, 'mxchat_popular_question_3_callback'),
6548		- 'mxchat-chatbot',
6549		- 'mxchat_chatbot_section'
6550		- );
6551		-
6552		- add_settings_field(
6553		- 'additional_popular_questions',
6554		- esc_html__('Additional Quick Questions', 'mxchat'),
6555		- array($this, 'mxchat_additional_popular_questions_callback'),
6556		- 'mxchat-chatbot',
6557		- 'mxchat_chatbot_section'
6558		- );
6559		-
6560		-
6561		- add_settings_field(
6562		- 'rate_limits',
6563		- __('Rate Limits Settings', 'mxchat'),
6564		- array($this, 'mxchat_rate_limits_callback'),
6565		- 'mxchat-chatbot',
6566		- 'mxchat_chatbot_section'
6567		- );
6568		-
6569		- // Loops Settings Section
	873	+ // Embed Settings Section
6570	874	add_settings_section(
6571		- 'mxchat_loops_section',
6572		- esc_html__('Loops Settings', 'mxchat'),
	875	+ 'mxchat_embed_section',
	876	+ 'Integration Settings',
6573	877	null,
6574	878	'mxchat-embed'
6575	879	);
6576	880
6577		- // Loops Settings Fields (API Key moved to API Keys tab)
6578	881	add_settings_field(
6579		- 'loops_mailing_list',
6580		- esc_html__('Loops Mailing List', 'mxchat'),
6581		- array($this, 'mxchat_loops_mailing_list_callback'),
	882	+ 'enable_woocommerce_integration',
	883	+ 'Automatically Embed Products',
	884	+ array($this, 'mxchat_enable_woocommerce_integration_callback'),
6582	885	'mxchat-embed',
6583		- 'mxchat_loops_section'
	886	+ 'mxchat_embed_section'
6584	887	);
6585	888
6586	889	add_settings_field(
6587		- 'triggered_phrase_response',
6588		- esc_html__('Triggered Phrase Response', 'mxchat'),
6589		- array($this, 'mxchat_triggered_phrase_response_callback'),
	890	+ 'enable_woocommerce_order_access',
	891	+ 'Order History Access',
	892	+ array($this, 'mxchat_enable_woocommerce_order_access_callback'),
6590	893	'mxchat-embed',
6591		- 'mxchat_loops_section'
	894	+ 'mxchat_embed_section'
6592	895	);
6593	896
6594	897	add_settings_field(
6595		- 'email_capture_response',
6596		- esc_html__('Email Capture Response', 'mxchat'),
6597		- array($this, 'mxchat_email_capture_response_callback'),
	898	+ 'woocommerce_consumer_key',
	899	+ 'WooCommerce Consumer Key',
	900	+ array($this, 'mxchat_woocommerce_consumer_key_callback'),
6598	901	'mxchat-embed',
6599		- 'mxchat_loops_section'
	902	+ 'mxchat_embed_section'
6600	903	);
6601	904
6602		- // Brave Search Settings Fields
6603		- add_settings_section(
6604		- 'mxchat_brave_section',
6605		- __('Brave Search Settings', 'mxchat'),
6606		- array($this, 'mxchat_brave_section_callback'),
6607		- 'mxchat-embed'
6608		- );
6609		-
6610		- // Brave API Key moved to API Keys tab
6611	905	add_settings_field(
6612		- 'brave_image_count',
6613		- __('Number of Images to Return', 'mxchat'),
6614		- array($this, 'mxchat_brave_image_count_callback'),
	906	+ 'woocommerce_consumer_secret',
	907	+ 'WooCommerce Consumer Secret',
	908	+ array($this, 'mxchat_woocommerce_consumer_secret_callback'),
6615	909	'mxchat-embed',
6616		- 'mxchat_brave_section'
	910	+ 'mxchat_embed_section'
6617	911	);
6618	912
6619		- add_settings_field(
6620		- 'brave_safe_search',
6621		- __('Safe Search', 'mxchat'),
6622		- array($this, 'mxchat_brave_safe_search_callback'),
6623		- 'mxchat-embed',
6624		- 'mxchat_brave_section'
6625		- );
6626		-
6627		- add_settings_field(
6628		- 'brave_news_count',
6629		- __('Number of News Articles', 'mxchat'),
6630		- array($this, 'mxchat_brave_news_count_callback'),
6631		- 'mxchat-embed',
6632		- 'mxchat_brave_section'
6633		- );
6634		-
6635		- add_settings_field(
6636		- 'brave_country',
6637		- __('Country', 'mxchat'),
6638		- array($this, 'mxchat_brave_country_callback'),
6639		- 'mxchat-embed',
6640		- 'mxchat_brave_section'
6641		- );
6642		-
6643		- add_settings_field(
6644		- 'brave_language',
6645		- __('Language', 'mxchat'),
6646		- array($this, 'mxchat_brave_language_callback'),
6647		- 'mxchat-embed',
6648		- 'mxchat_brave_section'
6649		- );
6650		-
6651		- // Chat with PDF Intent Settings Fields
	913	+ // Theme Settings Section
6652	914	add_settings_section(
6653		- 'mxchat_pdf_intent_section',
6654		- __('Toolbar Settings & Intents', 'mxchat'),
6655		- array($this, 'mxchat_pdf_intent_section_callback'),
6656		- 'mxchat-embed'
	915	+ 'mxchat_theme_section',
	916	+ 'Theme Settings',
	917	+ null,
	918	+ 'mxchat-theme'
6657	919	);
6658	920
6659	921	add_settings_field(
6660		- 'chat_toolbar_toggle',
6661		- __('Show Chat Toolbar', 'mxchat'),
6662		- array($this, 'mxchat_chat_toolbar_toggle_callback'),
6663		- 'mxchat-embed',
6664		- 'mxchat_pdf_intent_section'
	922	+ 'close_button_color',
	923	+ 'Close Button & Title Color',
	924	+ array($this, 'mxchat_close_button_color_callback'),
	925	+ 'mxchat-theme',
	926	+ 'mxchat_theme_section'
6665	927	);
6666	928
6667		- // PDF Upload Button Toggle
6668	929	add_settings_field(
6669		- 'show_pdf_upload_button',
6670		- __('Show PDF Upload Button', 'mxchat'),
6671		- array($this, 'mxchat_show_pdf_upload_button_callback'),
6672		- 'mxchat-embed',
6673		- 'mxchat_pdf_intent_section'
	930	+ 'chatbot_bg_color',
	931	+ 'Chatbot Background Color',
	932	+ array($this, 'mxchat_chatbot_bg_color_callback'),
	933	+ 'mxchat-theme',
	934	+ 'mxchat_theme_section'
6674	935	);
6675	936
6676		- // Word Upload Button Toggle
6677	937	add_settings_field(
6678		- 'show_word_upload_button',
6679		- __('Show Word Upload Button', 'mxchat'),
6680		- array($this, 'mxchat_show_word_upload_button_callback'),
6681		- 'mxchat-embed',
6682		- 'mxchat_pdf_intent_section'
	938	+ 'user_message_bg_color',
	939	+ 'User Message Background Color',
	940	+ array($this, 'mxchat_user_message_bg_color_callback'),
	941	+ 'mxchat-theme',
	942	+ 'mxchat_theme_section'
6683	943	);
6684	944
6685	945	add_settings_field(
6686		- 'pdf_intent_trigger_text',
6687		- __('Intent Trigger Text', 'mxchat'),
6688		- array($this, 'mxchat_pdf_intent_trigger_text_callback'),
6689		- 'mxchat-embed',
6690		- 'mxchat_pdf_intent_section'
	946	+ 'user_message_font_color',
	947	+ 'User Message Font Color',
	948	+ array($this, 'mxchat_user_message_font_color_callback'),
	949	+ 'mxchat-theme',
	950	+ 'mxchat_theme_section'
6691	951	);
6692	952
6693	953	add_settings_field(
6694		- 'pdf_intent_success_text',
6695		- __('Success Text', 'mxchat'),
6696		- array($this, 'mxchat_pdf_intent_success_text_callback'),
6697		- 'mxchat-embed',
6698		- 'mxchat_pdf_intent_section'
	954	+ 'bot_message_bg_color',
	955	+ 'Bot Message Background Color',
	956	+ array($this, 'mxchat_bot_message_bg_color_callback'),
	957	+ 'mxchat-theme',
	958	+ 'mxchat_theme_section'
6699	959	);
6700	960
6701	961	add_settings_field(
6702		- 'pdf_intent_error_text',
6703		- __('Error Text', 'mxchat'),
6704		- array($this, 'mxchat_pdf_intent_error_text_callback'),
6705		- 'mxchat-embed',
6706		- 'mxchat_pdf_intent_section'
	962	+ 'bot_message_font_color',
	963	+ 'Bot Message Font Color',
	964	+ array($this, 'mxchat_bot_message_font_color_callback'),
	965	+ 'mxchat-theme',
	966	+ 'mxchat_theme_section'
6707	967	);
6708	968
6709		- // Add PDF Maximum Pages Field
6710	969	add_settings_field(
6711		- 'pdf_max_pages',
6712		- __('Maximum Document Pages', 'mxchat'),
6713		- array($this, 'mxchat_pdf_max_pages_callback'),
6714		- 'mxchat-embed',
6715		- 'mxchat_pdf_intent_section'
	970	+ 'top_bar_bg_color',
	971	+ 'Top Bar Background Color',
	972	+ array($this, 'mxchat_top_bar_bg_color_callback'),
	973	+ 'mxchat-theme',
	974	+ 'mxchat_theme_section'
6716	975	);
6717	976
6718		- // Live Agent Settings Fields
6719		- add_settings_section(
6720		- 'mxchat_live_agent_section',
6721		- __('Live Agent Settings', 'mxchat'),
6722		- array($this, 'mxchat_live_agent_section_callback'),
6723		- 'mxchat-embed'
6724		- );
6725		-
6726		- // Live Agent Status Fields (add at top of live agent settings)
6727	977	add_settings_field(
6728		- 'live_agent_status',
6729		- __('Live Agent Status', 'mxchat'),
6730		- array($this, 'mxchat_live_agent_status_callback'),
6731		- 'mxchat-embed',
6732		- 'mxchat_live_agent_section'
	978	+ 'send_button_font_color',
	979	+ 'Send Button Color',
	980	+ array($this, 'mxchat_send_button_font_color_callback'),
	981	+ 'mxchat-theme',
	982	+ 'mxchat_theme_section'
6733	983	);
6734	984
6735		- // Slack availability schedule (plans 8ccaa2 + 99d7a4). Each handoff channel
6736		- // owns an independent schedule rendered under its own Integrations tab; this
6737		- // one governs Slack only. Same callback as Telegram's, parameterized.
6738	985	add_settings_field(
6739		- 'live_agent_schedule_slack',
6740		- __('Availability Schedule', 'mxchat'),
6741		- array($this, 'mxchat_live_agent_schedule_callback'),
6742		- 'mxchat-embed',
6743		- 'mxchat_live_agent_section',
6744		- array('channel' => 'slack')
	986	+ 'chat_input_font_color',
	987	+ 'Chat Input Font Color',
	988	+ array($this, 'mxchat_chat_input_font_color_callback'),
	989	+ 'mxchat-theme',
	990	+ 'mxchat_theme_section'
6745	991	);
6746	992
6747	993	add_settings_field(
6748		- 'live_agent_notification_message',
6749		- __('Notification Message', 'mxchat'),
6750		- array($this, 'mxchat_live_agent_notification_message_callback'),
6751		- 'mxchat-embed',
6752		- 'mxchat_live_agent_section'
	994	+ 'chatbot_background_color',
	995	+ 'Floating Widget Background Color',
	996	+ array($this, 'mxchat_chatbot_background_color_callback'),
	997	+ 'mxchat-theme',
	998	+ 'mxchat_theme_section'
6753	999	);
6754	1000
6755	1001	add_settings_field(
6756		- 'live_agent_away_message',
6757		- __('Away Message', 'mxchat'),
6758		- array($this, 'mxchat_live_agent_away_message_callback'),
6759		- 'mxchat-embed',
6760		- 'mxchat_live_agent_section'
	1002	+ 'icon_color',
	1003	+ 'Chatbot Icon Color',
	1004	+ array($this, 'mxchat_icon_color_callback'),
	1005	+ 'mxchat-theme',
	1006	+ 'mxchat_theme_section'
6761	1007	);
6762	1008
6763		- add_settings_field(
6764		- 'live_agent_user_ids',
6765		- __('Slack Agent User IDs', 'mxchat'),
6766		- array($this, 'mxchat_live_agent_user_ids_callback'),
6767		- 'mxchat-embed',
6768		- 'mxchat_live_agent_section'
6769		- );
6770		-
6771		- // Shared handoff channel (plan 9f7756): route every handoff into one
6772		- // pre-existing channel as threads instead of creating chat-* channels.
6773		- add_settings_field(
6774		- 'live_agent_shared_channel',
6775		- __('Shared Handoff Channel', 'mxchat'),
6776		- array($this, 'mxchat_live_agent_shared_channel_callback'),
6777		- 'mxchat-embed',
6778		- 'mxchat_live_agent_section'
6779		- );
6780		-
6781		- // Auto-archive per-conversation chat- channels on !endchat (plan 7458a7).
6782		- // Default OFF; never touches the shared handoff channel.
6783		- add_settings_field(
6784		- 'live_agent_archive_on_end_toggle',
6785		- __('Archive Channel When Chat Ends', 'mxchat'),
6786		- array($this, 'mxchat_live_agent_archive_on_end_callback'),
6787		- 'mxchat-embed',
6788		- 'mxchat_live_agent_section'
6789		- );
6790		-
6791		- add_settings_field(
6792		- 'live_agent_webhook_url',
6793		- __('Slack Webhook URL', 'mxchat'),
6794		- array($this, 'mxchat_live_agent_webhook_url_callback'),
6795		- 'mxchat-embed',
6796		- 'mxchat_live_agent_section'
6797		- );
6798		-
6799		- add_settings_field(
6800		- 'live_agent_secret_key',
6801		- __('Slack Secret Key', 'mxchat'),
6802		- array($this, 'mxchat_live_agent_secret_key_callback'),
6803		- 'mxchat-embed',
6804		- 'mxchat_live_agent_section'
6805		- );
6806		-
6807		- // Live Agent Integration Fields
6808		- add_settings_field(
6809		- 'live_agent_bot_token',
6810		- __('Slack Bot OAuth Token', 'mxchat'),
6811		- array($this, 'mxchat_live_agent_bot_token_callback'),
6812		- 'mxchat-embed',
6813		- 'mxchat_live_agent_section'
6814		- );
6815		-
6816		- // Telegram Integration Section
6817		- add_settings_section(
6818		- 'mxchat_telegram_section',
6819		- __('Telegram Settings', 'mxchat'),
6820		- array($this, 'mxchat_telegram_section_callback'),
6821		- 'mxchat-embed'
6822		- );
6823		-
6824		- add_settings_field(
6825		- 'telegram_status',
6826		- __('Live Agent Status', 'mxchat'),
6827		- array($this, 'mxchat_telegram_status_callback'),
6828		- 'mxchat-embed',
6829		- 'mxchat_telegram_section'
6830		- );
6831		-
6832		- // Telegram availability schedule (plan 99d7a4) — independent of Slack's,
6833		- // rendered right under the Telegram status toggle it extends.
6834		- add_settings_field(
6835		- 'live_agent_schedule_telegram',
6836		- __('Availability Schedule', 'mxchat'),
6837		- array($this, 'mxchat_live_agent_schedule_callback'),
6838		- 'mxchat-embed',
6839		- 'mxchat_telegram_section',
6840		- array('channel' => 'telegram')
6841		- );
6842		-
6843		- add_settings_field(
6844		- 'telegram_notification_message',
6845		- __('Notification Message', 'mxchat'),
6846		- array($this, 'mxchat_telegram_notification_message_callback'),
6847		- 'mxchat-embed',
6848		- 'mxchat_telegram_section'
6849		- );
6850		-
6851		- add_settings_field(
6852		- 'telegram_away_message',
6853		- __('Away Message', 'mxchat'),
6854		- array($this, 'mxchat_telegram_away_message_callback'),
6855		- 'mxchat-embed',
6856		- 'mxchat_telegram_section'
6857		- );
6858		-
6859		- add_settings_field(
6860		- 'telegram_bot_token',
6861		- __('Telegram Bot Token', 'mxchat'),
6862		- array($this, 'mxchat_telegram_bot_token_callback'),
6863		- 'mxchat-embed',
6864		- 'mxchat_telegram_section'
6865		- );
6866		-
6867		- add_settings_field(
6868		- 'telegram_group_id',
6869		- __('Telegram Group ID', 'mxchat'),
6870		- array($this, 'mxchat_telegram_group_id_callback'),
6871		- 'mxchat-embed',
6872		- 'mxchat_telegram_section'
6873		- );
6874		-
6875		- add_settings_field(
6876		- 'telegram_webhook_secret',
6877		- __('Webhook Secret Token', 'mxchat'),
6878		- array($this, 'mxchat_telegram_webhook_secret_callback'),
6879		- 'mxchat-embed',
6880		- 'mxchat_telegram_section'
6881		- );
6882		-
6883	1009	// General Settings Section
6884	1010	add_settings_section(
6885	1011	'mxchat_general_section',
6886		- esc_html__('YouTube Tutorials', 'mxchat'),
	1012	+ 'Frequently Asked Questions (FAQ)',
6887	1013	null,
6888	1014	'mxchat-general'
6889	1015	);
6890		-}
6891	1016
6892		-public function mxchat_prompts_page_init() {
6893		- register_setting(
6894		- 'mxchat_prompts_options',
6895		- 'mxchat_prompts_options',
6896		- array(
6897		- 'type' => 'array',
6898		- 'description' => __('MXChat Knowledge Base Settings', 'mxchat'),
6899		- 'default' => array(
6900		- 'mxchat_auto_sync_posts' => 0,
6901		- 'mxchat_auto_sync_pages' => 0,
6902		- 'mxchat_use_pinecone' => 0,
6903		- 'mxchat_pinecone_api_key' => '',
6904		- 'mxchat_pinecone_environment' => '',
6905		- 'mxchat_pinecone_index' => '',
6906		- 'mxchat_pinecone_host' => '',
6907		- ),
6908		- 'sanitize_callback' => array($this, 'sanitize_prompts_options'),
6909		- )
6910		- );
6911	1017
6912		- add_action('admin_notices', array($this, 'sync_settings_notice'));
6913	1018	}
6914	1019
6915		-public function mxchat_transcripts_page_init() {
6916		- register_setting(
6917		- 'mxchat_transcripts_options',
6918		- 'mxchat_transcripts_options',
6919		- array(
6920		- 'type' => 'array',
6921		- 'description' => __('MXChat Transcripts Notification Settings', 'mxchat'),
6922		- 'default' => array(
6923		- 'mxchat_enable_notifications' => 0,
6924		- 'mxchat_notification_email' => get_option('admin_email'),
6925		- 'mxchat_auto_delete_transcripts' => 'never',
6926		- ),
6927		- 'sanitize_callback' => array($this, 'sanitize_transcripts_options'),
6928		- )
6929		- );
6930	1020
6931		- add_settings_section(
6932		- 'mxchat_transcripts_notification_section',
6933		- esc_html__('Chat Notification Settings', 'mxchat'),
6934		- array($this, 'mxchat_transcripts_notification_section_callback'),
6935		- 'mxchat-transcripts'
6936		- );
6937	1021
6938		- add_settings_field(
6939		- 'mxchat_enable_notifications',
6940		- esc_html__('Enable Chat Notifications', 'mxchat'),
6941		- array($this, 'mxchat_enable_notifications_callback'),
6942		- 'mxchat-transcripts',
6943		- 'mxchat_transcripts_notification_section'
6944		- );
6945	1022
6946		- add_settings_field(
6947		- 'mxchat_notification_email',
6948		- esc_html__('Notification Email Address', 'mxchat'),
6949		- array($this, 'mxchat_notification_email_callback'),
6950		- 'mxchat-transcripts',
6951		- 'mxchat_transcripts_notification_section'
6952		- );
	1023	+ public function mxchat_handle_activate_license() {
	1024	+ check_ajax_referer('mxchat_activate_license_nonce', 'security');
6953	1025
6954		- add_settings_field(
6955		- 'mxchat_auto_delete_transcripts',
6956		- esc_html__('Auto-Delete Old Transcripts', 'mxchat'),
6957		- array($this, 'mxchat_auto_delete_transcripts_callback'),
6958		- 'mxchat-transcripts',
6959		- 'mxchat_transcripts_notification_section'
6960		- );
	1026	+ $license_key = isset($_POST['key']) ? sanitize_text_field($_POST['key']) : '';
	1027	+ $customer_email = isset($_POST['email']) ? sanitize_email($_POST['email']) : '';
6961	1028
6962		- add_settings_field(
6963		- 'mxchat_retention_days',
6964		- esc_html__('Custom Retention (Days)', 'mxchat'),
6965		- array($this, 'mxchat_retention_days_callback'),
6966		- 'mxchat-transcripts',
6967		- 'mxchat_transcripts_notification_section'
6968		- );
	1029	+ if (empty($license_key) || empty($customer_email)) {
	1030	+ wp_send_json_error('Email or License Key is missing');
	1031	+ }
6969	1032
6970		- add_settings_field(
6971		- 'mxchat_auto_email_transcript',
6972		- esc_html__('Auto-Email Full Transcript', 'mxchat'),
6973		- array($this, 'mxchat_auto_email_transcript_callback'),
6974		- 'mxchat-transcripts',
6975		- 'mxchat_transcripts_notification_section'
6976		- );
6977		-}
	1033	+ $product_id = 'MxChatPRO';
6978	1034
	1035	+ $response = wp_remote_get("http://mxchat.ai/?wc-api=software-api&request=activation&email={$customer_email}&license_key={$license_key}&product_id={$product_id}");
6979	1036
6980		-/**
6981		- * Sanitize all prompts options
6982		- *
6983		- * @param array $input The unsanitized options array
6984		- * @return array The sanitized options array
6985		- */
6986		-public function sanitize_prompts_options($input) {
6987		- // Log the incoming input.
6988		- //error_log('Sanitizing inputs: ' . print_r($input, true));
	1037	+ if (is_wp_error($response)) {
	1038	+ wp_send_json_error('Activation failed due to a server error');
	1039	+ }
6989	1040
6990		- $sanitized = array();
	1041	+ $body = wp_remote_retrieve_body($response);
	1042	+ $data = json_decode($body);
6991	1043
6992		- // Boolean options
6993		- $sanitized['mxchat_auto_sync_posts'] = isset($input['mxchat_auto_sync_posts']) ? 1 : 0;
6994		- $sanitized['mxchat_auto_sync_pages'] = isset($input['mxchat_auto_sync_pages']) ? 1 : 0;
6995		-$sanitized['mxchat_use_pinecone'] = !empty($input['mxchat_use_pinecone']) ? 1 : 0;
6996		-
6997		- // API Key: if less than 32 characters, flag as invalid.
6998		- $api_key = sanitize_text_field($input['mxchat_pinecone_api_key'] ?? '');
6999		- if (!empty($api_key) && strlen($api_key) < 32) {
7000		- add_settings_error(
7001		- 'mxchat_prompts_options',
7002		- 'invalid_api_key',
7003		- __('The Pinecone API key appears to be invalid. Please check your API key.', 'mxchat')
7004		- );
7005		- $existing_options = get_option('mxchat_prompts_options', array());
7006		- $sanitized['mxchat_pinecone_api_key'] = $existing_options['mxchat_pinecone_api_key'] ?? '';
7007		- } else {
7008		- $sanitized['mxchat_pinecone_api_key'] = $api_key;
7009		- }
7010		-
7011		- // Environment and Index Name
7012		- $sanitized['mxchat_pinecone_environment'] = sanitize_text_field($input['mxchat_pinecone_environment'] ?? '');
7013		- $sanitized['mxchat_pinecone_index'] = sanitize_text_field($input['mxchat_pinecone_index'] ?? '');
7014		-
7015		- // Host: Remove protocol and validate format.
7016		- $host = sanitize_text_field($input['mxchat_pinecone_host'] ?? '');
7017		- $host = preg_replace('#^https?://#', '', $host);
7018		- //error_log('Host after removing protocol: ' . $host);
7019		- if (!empty($host)) {
7020		- if (!preg_match('/^[\w-]+\.svc\.[\w-]+\.pinecone\.io$/', $host)) {
7021		- add_settings_error(
7022		- 'mxchat_prompts_options',
7023		- 'invalid_host',
7024		- __('The Pinecone host appears to be invalid. It should look like "mxchat-vectors-zrmsquq.svc.aped-4627-b74a.pinecone.io"', 'mxchat')
7025		- );
7026		- $existing_options = get_option('mxchat_prompts_options', array());
7027		- $sanitized['mxchat_pinecone_host'] = $existing_options['mxchat_pinecone_host'] ?? '';
	1044	+ if ($data && isset($data->activated) && $data->activated) {
	1045	+ update_option('mxchat_license_status', 'active');
	1046	+ wp_send_json_success();
7028	1047	} else {
7029		- $sanitized['mxchat_pinecone_host'] = $host;
	1048	+ $error_message = isset($data->error) ? $data->error : 'Activation failed';
	1049	+ update_option('mxchat_license_status', 'inactive');
	1050	+ update_option('mxchat_license_error', $error_message);
	1051	+ wp_send_json_error($error_message);
7030	1052	}
7031		- } else {
7032		- $sanitized['mxchat_pinecone_host'] = '';
7033	1053	}
7034	1054
7035		- //error_log('Final sanitized array: ' . print_r($sanitized, true));
7036	1055
7037		- return $sanitized;
7038		-}
	1056	+public function mxchat_rate_limit_callback() {
	1057	+ $rate_limits = array('5', '10', '15', '20', '100');
	1058	+ $selected_rate_limit = isset($this->options['rate_limit']) ? $this->options['rate_limit'] : '100';
7039	1059
7040		-public function sync_settings_notice() {
7041		- // Only show notice on our plugin page
7042		- if (!isset($_GET['page']) || $_GET['page'] !== 'mxchat-prompts') {
7043		- return;
	1060	+ $disabled = $this->is_activated ? '' : 'disabled';
	1061	+ $class = $this->is_activated ? 'pro-feature-wrapper active' : 'pro-feature-wrapper inactive';
	1062	+
	1063	+ echo '<div class="' . esc_attr($class) . '">';
	1064	+ echo '<select id="rate_limit" name="mxchat_options[rate_limit]" ' . $disabled . '>';
	1065	+ foreach ($rate_limits as $limit) {
	1066	+ echo '<option value="' . esc_attr($limit) . '" ' . selected($selected_rate_limit, $limit, false) . '>' . esc_html($limit) . '</option>';
7044	1067	}
	1068	+ echo '</select>';
7045	1069
7046		- // Check if settings were updated
7047		- if (isset($_GET['settings-updated'])) {
	1070	+ if (!$this->is_activated) {
	1071	+ echo '<div class="pro-feature-overlay">';
	1072	+ echo '<a href="https://mxchat.ai/" target="_blank"><img src="' . plugin_dir_url(__FILE__) . '../images/pro-only-dark.png" alt="Pro Only" /></a>';
	1073	+ echo '</div>';
	1074	+ }
7048	1075
7049		- ?>
7050		- <div class="notice notice-success is-dismissible">
7051		- <p><?php esc_html_e('Sync settings updated successfully.', 'mxchat'); ?></p>
7052		- <button type="button" class="notice-dismiss"><span class="screen-reader-text"><?php esc_html_e('Dismiss this notice.', 'mxchat'); ?></span></button>
7053		- </div>
7054		- <?php
7055		-
7056		- }
	1076	+ echo '</div>';
7057	1077	}
7058		-// Add this sanitization function to your class
7059		-public function sanitize_sync_setting($input) {
7060		- return (bool)$input ? __('1', 'mxchat') : __('', 'mxchat');
7061		-}
7062	1078
7063		-public function mxchat_rate_limits_callback() {
7064		- $all_options = get_option('mxchat_options', []);
	1079	+public function mxchat_rate_limit_message_callback() {
	1080	+ $disabled = $this->is_activated ? '' : 'disabled';
	1081	+ $class = $this->is_activated ? 'pro-feature-wrapper active' : 'pro-feature-wrapper inactive';
7065	1082
7066		- // Define available rate limits
7067		- $rate_limits = array('1', '3', '5', '10', '15', '20', '50', '100', 'unlimited');
7068		-
7069		- // Define available timeframes
7070		- $timeframes = array(
7071		- 'hourly' => __('Per Hour', 'mxchat'),
7072		- 'daily' => __('Per Day', 'mxchat'),
7073		- 'weekly' => __('Per Week', 'mxchat'),
7074		- 'monthly' => __('Per Month', 'mxchat')
	1083	+ echo '<div class="' . esc_attr($class) . '">';
	1084	+ printf(
	1085	+ '<textarea id="rate_limit_message" name="mxchat_options[rate_limit_message]" rows="3" cols="50" %s>%s</textarea>',
	1086	+ esc_attr($disabled),
	1087	+ isset($this->options['rate_limit_message']) ? esc_textarea($this->options['rate_limit_message']) : 'Rate limit exceeded. Please try again later.'
7075	1088	);
7076	1089
7077		- // Get all roles plus a "logged_out" pseudo-role
7078		- $roles = wp_roles()->get_names();
7079		- $roles['logged_out'] = __('Logged Out Users', 'mxchat');
	1090	+ if (!$this->is_activated) {
	1091	+ echo '<div class="pro-feature-overlay">';
	1092	+ echo '<a href="https://mxchat.ai/" target="_blank"><img src="' . plugin_dir_url(__FILE__) . '../images/pro-only-dark.png" alt="Pro Only" /></a>';
	1093	+ echo '</div>';
	1094	+ }
7080	1095
7081		- // Start the wrapper
7082		- echo '<div class="pro-feature-wrapper active">';
7083		- echo '<div class="mxchat-rate-limits-container">';
7084		-
7085		- echo '<p class="description" style="margin-bottom: 20px;">' .
7086		- esc_html__('Set message limits for each user role and customize the experience when users reach those limits. You can use {limit}, {timeframe}, {count}, and {remaining} as placeholders.', 'mxchat') .
7087		- '</p>';
7088		-
7089		- // Add markdown link documentation
7090		- echo '<div class="notice notice-info inline" style="margin-bottom: 20px; padding: 10px;">';
7091		- echo '<p><strong>' . esc_html__('Markdown Links Supported:', 'mxchat') . '</strong></p>';
7092		- echo '<p>' . esc_html__('You can include clickable links in your custom messages using markdown syntax:', 'mxchat') . '</p>';
7093		- echo '<ul style="margin-left: 20px;">';
7094		- echo '<li><code>[Link text](https://example.com)</code> - Creates a clickable link</li>';
7095		- echo '<li><code>[Visit our pricing](https://example.com/pricing)</code> - Link with custom text</li>';
7096		- echo '<li><code>Plain URLs like https://example.com will also become clickable</code></li>';
7097		- echo '</ul>';
7098	1096	echo '</div>';
	1097	+}
7099	1098
7100		- // Output the controls for each role
7101		- foreach ($roles as $role_id => $role_name) {
7102		- // Get saved options or defaults
7103		- $default_limit = ($role_id === 'logged_out') ? '10' : '100';
7104		- $default_timeframe = 'daily';
7105		- $default_message = __('Rate limit exceeded. Please try again later.', 'mxchat');
7106	1099
7107		- $selected_limit = isset($all_options['rate_limits'][$role_id]['limit'])
7108		- ? $all_options['rate_limits'][$role_id]['limit']
7109		- : $default_limit;
	1100	+public function mxchat_enable_woocommerce_integration_callback() {
	1101	+ $checked = isset($this->options['enable_woocommerce_integration']) && $this->options['enable_woocommerce_integration'] === '1' ? 'checked' : '';
	1102	+ $disabled = $this->is_activated ? '' : 'disabled';
	1103	+ $class = $this->is_activated ? 'pro-feature-wrapper active' : 'pro-feature-wrapper inactive';
7110	1104
7111		- $selected_timeframe = isset($all_options['rate_limits'][$role_id]['timeframe'])
7112		- ? $all_options['rate_limits'][$role_id]['timeframe']
7113		- : $default_timeframe;
	1105	+ echo '<div class="' . esc_attr($class) . '">';
	1106	+ echo '<label class="toggle-switch">';
	1107	+ echo '<input type="checkbox" id="enable_woocommerce_integration" name="mxchat_options[enable_woocommerce_integration]" value="1" ' . $checked . ' ' . $disabled . '>';
	1108	+ echo '<span class="slider"></span>';
	1109	+ echo '</label>';
7114	1110
7115		- $custom_message = isset($all_options['rate_limits'][$role_id]['message'])
7116		- ? $all_options['rate_limits'][$role_id]['message']
7117		- : $default_message;
	1111	+ if (!$this->is_activated) {
	1112	+ echo '<div class="pro-feature-overlay">';
	1113	+ echo '<a href="https://mxchat.ai/" target="_blank"><img src="' . plugin_dir_url(__FILE__) . '../images/pro-only-dark.png" alt="Pro Only" /></a>';
	1114	+ echo '</div>';
	1115	+ }
7118	1116
7119		- // Output the row
7120		- echo '<div class="mxchat-rate-limit-row mxchat-autosave-section">';
	1117	+ echo '</div>';
	1118	+}
7121	1119
7122		- // Role label
7123		- echo '<div class="mxchat-rate-limit-role">' . esc_html($role_name) . '</div>';
7124	1120
7125		- // Controls section
7126		- echo '<div class="mxchat-rate-limit-controls-wrapper">';
	1121	+public function mxchat_enable_woocommerce_order_access_callback() {
	1122	+ $checked = isset($this->options['enable_woocommerce_order_access']) && $this->options['enable_woocommerce_order_access'] === '1' ? 'checked' : '';
	1123	+ $disabled = $this->is_activated ? '' : 'disabled';
	1124	+ $class = $this->is_activated ? 'pro-feature-wrapper active' : 'pro-feature-wrapper inactive';
7127	1125
7128		- // Rate limit and timeframe controls
7129		- echo '<div class="mxchat-rate-limit-controls">';
	1126	+ echo '<div class="' . esc_attr($class) . '">';
	1127	+ echo '<label class="toggle-switch">';
	1128	+ echo '<input type="checkbox" id="enable_woocommerce_order_access" name="mxchat_options[enable_woocommerce_order_access]" value="1" ' . $checked . ' ' . $disabled . '>';
	1129	+ echo '<span class="slider"></span>';
	1130	+ echo '</label>';
7130	1131
7131		- // Limit dropdown
7132		- echo '<div>';
7133		- echo '<label for="rate_limits_' . esc_attr($role_id) . '_limit">' . esc_html__('Limit:', 'mxchat') . '</label>';
7134		- echo '<select
7135		- id="rate_limits_' . esc_attr($role_id) . '_limit"
7136		- name="mxchat_options[rate_limits][' . esc_attr($role_id) . '][limit]"
7137		- class="mxchat-autosave-field">';
7138		- foreach ($rate_limits as $limit) {
7139		- echo '<option value="' . esc_attr($limit) . '" ' . selected($selected_limit, $limit, false) . '>' . esc_html($limit) . '</option>';
7140		- }
7141		- echo '</select>';
	1132	+ if (!$this->is_activated) {
	1133	+ echo '<div class="pro-feature-overlay">';
	1134	+ echo '<a href="https://mxchat.ai/" target="_blank"><img src="' . plugin_dir_url(__FILE__) . '../images/pro-only-dark.png" alt="Pro Only" /></a>';
7142	1135	echo '</div>';
7143		-
7144		- // Timeframe dropdown
7145		- echo '<div>';
7146		- echo '<label for="rate_limits_' . esc_attr($role_id) . '_timeframe">' . esc_html__('Timeframe:', 'mxchat') . '</label>';
7147		- echo '<select
7148		- id="rate_limits_' . esc_attr($role_id) . '_timeframe"
7149		- name="mxchat_options[rate_limits][' . esc_attr($role_id) . '][timeframe]"
7150		- class="mxchat-autosave-field">';
7151		- foreach ($timeframes as $value => $label) {
7152		- echo '<option value="' . esc_attr($value) . '" ' . selected($selected_timeframe, $value, false) . '>' . esc_html($label) . '</option>';
7153		- }
7154		- echo '</select>';
7155		- echo '</div>';
7156		-
7157		- echo '</div>'; // End controls
7158		-
7159		- // Custom message textarea
7160		- echo '<div class="mxchat-rate-limit-message">';
7161		- echo '<label for="rate_limits_' . esc_attr($role_id) . '_message">' . esc_html__('Custom Message:', 'mxchat') . '</label>';
7162		- echo '<textarea
7163		- id="rate_limits_' . esc_attr($role_id) . '_message"
7164		- name="mxchat_options[rate_limits][' . esc_attr($role_id) . '][message]"
7165		- class="mxchat-autosave-field"
7166		- placeholder="' . esc_attr__('Enter custom message when rate limit is exceeded', 'mxchat') . '">' .
7167		- esc_textarea($custom_message) .
7168		- '</textarea>';
7169		- echo '<p class="description">' .
7170		- esc_html__('Example: Rate limit reached! [Visit our pricing page](https://example.com/pricing) to upgrade.', 'mxchat') .
7171		- '</p>';
7172		- echo '</div>'; // End message
7173		-
7174		- echo '</div>'; // End controls wrapper
7175		-
7176		- echo '</div>'; // End row
7177	1136	}
7178	1137
7179		- echo '</div>'; // End container
	1138	+ echo '</div>';
	1139	+}
7180	1140
7181		- echo '</div>'; // End pro-feature-wrapper
7182		-}
7183	1141
7184		-private function mxchat_add_option_field($id, $title, $callback = '') {
	1142	+ private function mxchat_add_option_field($id, $title, $callback = '') {
7185	1143	add_settings_field(
7186	1144	$id,
7187		- __($title, 'mxchat'),
	1145	+ $title,
7188	1146	$callback ? array($this, $callback) : array($this, $id . '_callback'),
7189	1147	'mxchat-max',
7190	1148	'mxchat_setting_section_id',
7191	1149	$id === 'model' ? ['label_for' => 'model'] : []
		@@ -7191,3309 +1149,642 @@
7191	1149	$id === 'model' ? ['label_for' => 'model'] : []
7192	1150	);
7193	1151	}
7194	1152
7195		-// API Keys Section Callback
7196		-public function mxchat_api_keys_section_callback() {
7197		- echo '<p>' . esc_html__('Manage all your API keys in one place. Add the API keys for the services you want to use with your chatbot.', 'mxchat') . '</p>';
7198		-}
7199	1153
7200		-// OpenAI API Key
7201		-public function api_key_callback() {
7202		- $apiKey = isset($this->options['api_key']) ? esc_attr($this->options['api_key']) : '';
7203		- $nonce = wp_create_nonce('mxchat_autosave_nonce');
	1154	+ public function api_key_callback() {
	1155	+ $apiKey = isset($this->options['api_key']) ? esc_attr($this->options['api_key']) : '';
	1156	+ echo '<input type="password" id="api_key" name="mxchat_options[api_key]" value="' . $apiKey . '" class="regular-text" />';
	1157	+ echo '<button type="button" id="toggleApiKeyVisibility">Show</button>';
	1158	+ }
7204	1159
7205		- echo '<div class="api-key-wrapper">';
7206		- echo '<input type="text" id="api_key" name="api_key" value="' . $apiKey . '" class="regular-text mxchat-autosave-field mxchat-api-key-field" autocomplete="new-password" data-lpignore="true" data-form-type="other" data-nonce="' . $nonce . '" />';
7207		- echo '<button type="button" id="toggleApiKeyVisibility">' . esc_html__('Show', 'mxchat') . '</button>';
7208		- echo '<p class="description">' . esc_html__('Required for OpenAI GPT models and OpenAI embeddings. Get your API key from OpenAI Platform.', 'mxchat') . '</p>';
7209		- echo $this->mxchat_provider_key_test_button('openai', 'api_key');
7210		- echo '</div>';
7211		-}
7212	1160
7213		-// X.AI API Key
7214		-public function xai_api_key_callback() {
7215		- $xaiApiKey = isset($this->options['xai_api_key']) ? esc_attr($this->options['xai_api_key']) : '';
7216		- $nonce = wp_create_nonce('mxchat_autosave_nonce');
7217	1161
7218		- echo '<div class="api-key-wrapper">';
7219		- echo '<input type="text" id="xai_api_key" name="xai_api_key" value="' . $xaiApiKey . '" class="regular-text mxchat-autosave-field mxchat-api-key-field" autocomplete="new-password" data-lpignore="true" data-form-type="other" data-nonce="' . $nonce . '" />';
7220		- echo '<button type="button" id="toggleXaiApiKeyVisibility">' . esc_html__('Show', 'mxchat') . '</button>';
7221		- echo '<p class="description">' . esc_html__('Required for X.AI Grok models. Get your API key from X.AI Console.', 'mxchat') . '</p>';
7222		- echo $this->mxchat_provider_key_test_button('xai', 'xai_api_key');
7223		- echo '</div>';
7224		-}
7225		-// Claude API Key
7226		-public function claude_api_key_callback() {
7227		- $claudeApiKey = isset($this->options['claude_api_key']) ? esc_attr($this->options['claude_api_key']) : '';
7228		- $nonce = wp_create_nonce('mxchat_autosave_nonce');
	1162	+public function mxchat_woocommerce_consumer_key_callback() {
	1163	+ $disabled = $this->is_activated ? '' : 'disabled';
	1164	+ $class = $this->is_activated ? 'pro-feature-wrapper active' : 'pro-feature-wrapper inactive';
7229	1165
7230		- echo '<div class="api-key-wrapper">';
7231		- echo '<input type="text" id="claude_api_key" name="claude_api_key" value="' . $claudeApiKey . '" class="regular-text mxchat-autosave-field mxchat-api-key-field" autocomplete="new-password" data-lpignore="true" data-form-type="other" data-nonce="' . $nonce . '" />';
7232		- echo '<button type="button" id="toggleClaudeApiKeyVisibility">' . esc_html__('Show', 'mxchat') . '</button>';
7233		- echo '<p class="description">' . esc_html__('Required for Anthropic Claude models. Get your API key from Anthropic Console.', 'mxchat') . '</p>';
7234		- echo $this->mxchat_provider_key_test_button('claude', 'claude_api_key');
7235		- echo '</div>';
7236		-}
	1166	+ echo '<div class="' . esc_attr($class) . '">';
	1167	+ printf(
	1168	+ '<input type="text" id="woocommerce_consumer_key" name="mxchat_options[woocommerce_consumer_key]" value="%s" class="regular-text" %s />',
	1169	+ isset($this->options['woocommerce_consumer_key']) ? esc_attr($this->options['woocommerce_consumer_key']) : '',
	1170	+ $disabled
	1171	+ );
7237	1172
7238		-// DeepSeek API Key
7239		-public function deepseek_api_key_callback() {
7240		- $apiKey = isset($this->options['deepseek_api_key']) ? esc_attr($this->options['deepseek_api_key']) : '';
7241		- $nonce = wp_create_nonce('mxchat_autosave_nonce');
7242		-
7243		- echo '<div class="api-key-wrapper">';
7244		- echo '<input type="text" id="deepseek_api_key" name="deepseek_api_key" value="' . $apiKey . '" class="regular-text mxchat-autosave-field mxchat-api-key-field" autocomplete="new-password" data-lpignore="true" data-form-type="other" data-nonce="' . $nonce . '" />';
7245		- echo '<button type="button" id="toggleDeepSeekApiKeyVisibility">' . esc_html__('Show', 'mxchat') . '</button>';
7246		- echo '<p class="description">' . esc_html__('Required for DeepSeek models. Get your API key from DeepSeek Platform.', 'mxchat') . '</p>';
7247		- echo $this->mxchat_provider_key_test_button('deepseek', 'deepseek_api_key');
7248		- echo '</div>';
7249		-}
7250		-
7251		-// Gemini API Key
7252		-public function gemini_api_key_callback() {
7253		- $geminiApiKey = isset($this->options['gemini_api_key']) ? esc_attr($this->options['gemini_api_key']) : '';
7254		- $nonce = wp_create_nonce('mxchat_autosave_nonce');
7255		-
7256		- echo '<div class="api-key-wrapper">';
7257		- echo '<input type="text" id="gemini_api_key" name="gemini_api_key" value="' . $geminiApiKey . '" class="regular-text mxchat-autosave-field mxchat-api-key-field" autocomplete="new-password" data-lpignore="true" data-form-type="other" data-nonce="' . $nonce . '" />';
7258		- echo '<button type="button" id="toggleGeminiApiKeyVisibility">' . esc_html__('Show', 'mxchat') . '</button>';
7259		- echo '<p class="description">' . esc_html__('Required for Google Gemini models and embeddings. Get your API key from Google AI Studio.', 'mxchat') . '</p>';
7260		- echo $this->mxchat_provider_key_test_button('gemini', 'gemini_api_key');
7261		- echo '</div>';
7262		-}
7263		-
7264		-
7265		-// OpenRouter API Key
7266		-public function openrouter_api_key_callback() {
7267		- $openrouterApiKey = isset($this->options['openrouter_api_key']) ? esc_attr($this->options['openrouter_api_key']) : '';
7268		- $nonce = wp_create_nonce('mxchat_autosave_nonce');
7269		-
7270		- echo '<div class="api-key-wrapper">';
7271		- echo '<input type="text" id="openrouter_api_key" name="openrouter_api_key" value="' . $openrouterApiKey . '" class="regular-text mxchat-autosave-field mxchat-api-key-field" autocomplete="new-password" data-lpignore="true" data-form-type="other" data-nonce="' . $nonce . '" />';
7272		- echo '<button type="button" id="toggleOpenRouterApiKeyVisibility">' . esc_html__('Show', 'mxchat') . '</button>';
7273		- echo '<p class="description">' . esc_html__('Required for OpenRouter models. Get your API key from OpenRouter.ai', 'mxchat') . '</p>';
7274		- echo $this->mxchat_provider_key_test_button('openrouter', 'openrouter_api_key');
7275		- echo '</div>';
7276		-}
7277		-
7278		-/**
7279		- * Renders a "Test key" button + result target next to a built-in provider key
7280		- * field, and emits the shared delegated click handler ONCE (static guard). The
7281		- * button carries data-target = the key field id so the owner can test the value
7282		- * they just typed (test-before-save); the AJAX handler falls back to the saved
7283		- * key when the field is empty. Styled with the WP `button` class to match the
7284		- * adjacent Custom-provider "Test Connection" button on this same page.
7285		- * plan-mxchat-20260623-c41f74.
7286		- */
7287		-public function mxchat_provider_key_test_button($provider, $target_id) {
7288		- static $script_emitted = false;
7289		- $nonce = wp_create_nonce('mxchat_test_provider_key');
7290		- $html = '<div class="mxchat-key-test" style="margin-top:8px;">'
7291		- . '<button type="button" class="button mxchat-test-provider-key" data-provider="' . esc_attr($provider) . '" data-target="' . esc_attr($target_id) . '" data-nonce="' . esc_attr($nonce) . '">' . esc_html__('Test key', 'mxchat') . '</button>'
7292		- . '<span class="mxchat-test-provider-key-result" style="margin-left:10px;font-size:13px;vertical-align:middle;"></span>'
7293		- . '</div>';
7294		- if (!$script_emitted) {
7295		- $script_emitted = true;
7296		- $html .= $this->mxchat_provider_key_test_script();
	1173	+ if (!$this->is_activated) {
	1174	+ echo '<div class="pro-feature-overlay">';
	1175	+ echo '<a href="https://mxchat.ai/" target="_blank"><img src="' . plugin_dir_url(__FILE__) . '../images/pro-only-dark.png" alt="Pro Only" /></a>';
	1176	+ echo '</div>';
7297	1177	}
7298		- return $html;
7299		-}
7300	1178
7301		-/**
7302		- * One-time delegated click handler shared by every .mxchat-test-provider-key
7303		- * button. Posts the typed key value + provider to mxchat_test_provider_key and
7304		- * renders the success/error message inline. Mirrors the Custom-provider test.
7305		- */
7306		-private function mxchat_provider_key_test_script() {
7307		- $t_testing = esc_js(__('Testing...', 'mxchat'));
7308		- $t_valid = esc_js(__('Key is valid.', 'mxchat'));
7309		- $t_failed = esc_js(__('Failed', 'mxchat'));
7310		- $t_req = esc_js(__('Request failed', 'mxchat'));
7311		- return '<script>(function(){'
7312		- . 'if (window.__mxchatProviderKeyTestWired) { return; }'
7313		- . 'window.__mxchatProviderKeyTestWired = true;'
7314		- . 'document.addEventListener("click", function(e){'
7315		- . 'var btn = e.target && e.target.closest ? e.target.closest(".mxchat-test-provider-key") : null;'
7316		- . 'if (!btn) { return; }'
7317		- . 'e.preventDefault();'
7318		- . 'var field = btn.getAttribute("data-target") ? document.getElementById(btn.getAttribute("data-target")) : null;'
7319		- . 'var out = btn.parentNode ? btn.parentNode.querySelector(".mxchat-test-provider-key-result") : null;'
7320		- . 'if (out) { out.textContent = "' . $t_testing . '"; out.style.color = "#646970"; }'
7321		- . 'btn.disabled = true;'
7322		- . 'var fd = new FormData();'
7323		- . 'fd.append("action", "mxchat_test_provider_key");'
7324		- . 'fd.append("_wpnonce", btn.getAttribute("data-nonce"));'
7325		- . 'fd.append("provider", btn.getAttribute("data-provider") || "");'
7326		- . 'fd.append("key", field ? field.value : "");'
7327		- . 'fetch(ajaxurl, { method:"POST", credentials:"same-origin", body: fd })'
7328		- . '.then(function(r){ return r.json(); })'
7329		- . '.then(function(j){'
7330		- . 'if (out) {'
7331		- . 'if (j && j.success) { out.textContent = "✓ " + ((j.data && j.data.message) ? j.data.message : "' . $t_valid . '"); out.style.color = "#00a32a"; }'
7332		- . 'else { out.textContent = "⚠ " + ((j && j.data && j.data.message) ? j.data.message : "' . $t_failed . '"); out.style.color = "#d63638"; }'
7333		- . '}'
7334		- . 'btn.disabled = false;'
7335		- . '})'
7336		- . '.catch(function(){ if (out) { out.textContent = "⚠ ' . $t_req . '"; out.style.color = "#d63638"; } btn.disabled = false; });'
7337		- . '});'
7338		- . '})();</script>';
7339		-}
7340		-
7341		-// Custom (OpenAI-compatible) Provider — Ollama, LM Studio, vLLM, llama.cpp, Azure OpenAI, etc.
7342		-public function custom_provider_callback() {
7343		- $base_url = isset($this->options['custom_provider_base_url']) ? esc_attr($this->options['custom_provider_base_url']) : '';
7344		- $api_key = isset($this->options['custom_provider_api_key']) ? esc_attr($this->options['custom_provider_api_key']) : '';
7345		- $model_name = isset($this->options['custom_provider_model']) ? esc_attr($this->options['custom_provider_model']) : '';
7346		- $auth_scheme = isset($this->options['custom_provider_auth_scheme']) ? esc_attr($this->options['custom_provider_auth_scheme']) : 'bearer';
7347		- $api_version = isset($this->options['custom_provider_api_version']) ? esc_attr($this->options['custom_provider_api_version']) : '';
7348		- $use_embed = !empty($this->options['custom_provider_for_embeddings']) && $this->options['custom_provider_for_embeddings'] === 'on';
7349		- $use_images = !empty($this->options['custom_provider_for_images']) && $this->options['custom_provider_for_images'] === 'on';
7350		- $embed_model = isset($this->options['custom_provider_embedding_model']) ? esc_attr($this->options['custom_provider_embedding_model']) : '';
7351		- $nonce = wp_create_nonce('mxchat_autosave_nonce');
7352		- $test_nonce = wp_create_nonce('mxchat_test_custom_provider');
7353		-
7354		- echo '<style>
7355		- .mxchat-cp { max-width: 680px; }
7356		- .mxchat-cp .mxchat-cp-intro { margin: 0 0 16px; color: #50575e; font-size: 13px; line-height: 1.5; }
7357		- .mxchat-cp .mxchat-cp-row { display: block; margin: 0 0 18px; }
7358		- .mxchat-cp .mxchat-cp-row > label { display: block; font-weight: 600; margin: 0 0 6px; color: #1d2327; font-size: 13px; }
7359		- .mxchat-cp .mxchat-cp-row > input[type="text"],
7360		- .mxchat-cp .mxchat-cp-row > input[type="password"],
7361		- .mxchat-cp .mxchat-cp-row > select { display: block; width: 100%; max-width: 480px; margin: 0; }
7362		- .mxchat-cp .mxchat-cp-row > .description { display: block; margin: 6px 0 0; color: #646970; font-size: 12px; line-height: 1.5; max-width: 480px; }
7363		- .mxchat-cp .mxchat-cp-test { margin-top: 4px; padding-top: 14px; border-top: 1px solid #e5e7eb; }
7364		- .mxchat-cp .mxchat-cp-test .mxchat-cp-test-status { display: inline-block; margin-left: 10px; vertical-align: middle; font-size: 13px; }
7365		- .mxchat-cp .mxchat-cp-azure { margin: 0 0 18px; padding: 12px 14px; background: #f6f7ff; border: 1px solid #dfe1f5; border-left: 3px solid #7873f5; border-radius: 6px; max-width: 480px; }
7366		- .mxchat-cp .mxchat-cp-azure > .mxchat-cp-azure-title { display: block; font-weight: 600; color: #1d2327; font-size: 12px; text-transform: uppercase; letter-spacing: 0.4px; margin: 0 0 8px; }
7367		- .mxchat-cp .mxchat-cp-azure ol { margin: 0; padding: 0 0 0 18px; color: #50575e; font-size: 12px; line-height: 1.7; }
7368		- .mxchat-cp .mxchat-cp-azure code { background: #eceefb; padding: 1px 5px; border-radius: 3px; font-size: 11px; }
7369		- </style>';
7370		-
7371		- echo '<div class="api-key-wrapper mxchat-cp">';
7372		- echo '<p class="mxchat-cp-intro">' . esc_html__('Point MxChat at any OpenAI-compatible /v1/chat/completions endpoint: Ollama, LM Studio, vLLM, llama.cpp, LocalAI, Azure OpenAI, etc. Then select "Custom (OpenAI-compatible)" in the model picker.', 'mxchat') . '</p>';
7373		-
7374		- // Azure OpenAI quick start — consolidates the 4-field Azure recipe in one scannable callout
7375		- // so admins can configure Azure without piecing it together from each field's hint.
7376		- echo '<div class="mxchat-cp-azure">';
7377		- echo '<span class="mxchat-cp-azure-title">' . esc_html__('Azure OpenAI quick start', 'mxchat') . '</span>';
7378		- echo '<ol>';
7379		- echo '<li>' . wp_kses(__('<strong>Base URL</strong> → <code>https://&lt;resource&gt;.openai.azure.com/openai/deployments/&lt;deployment&gt;</code>', 'mxchat'), array('strong' => array(), 'code' => array())) . '</li>';
7380		- echo '<li>' . wp_kses(__('<strong>API Key</strong> → your Azure OpenAI key (required)', 'mxchat'), array('strong' => array(), 'code' => array())) . '</li>';
7381		- echo '<li>' . wp_kses(__('<strong>Auth Scheme</strong> → <code>api-key header (Azure OpenAI)</code>', 'mxchat'), array('strong' => array(), 'code' => array())) . '</li>';
7382		- echo '<li>' . wp_kses(__('<strong>API Version</strong> → required for Azure, e.g. <code>2024-08-01-preview</code>', 'mxchat'), array('strong' => array(), 'code' => array())) . '</li>';
7383		- echo '</ol>';
7384	1179	echo '</div>';
7385		-
7386		- echo '<div class="mxchat-cp-row">';
7387		- echo '<label for="custom_provider_base_url">' . esc_html__('Base URL', 'mxchat') . '</label>';
7388		- echo '<input type="text" id="custom_provider_base_url" name="custom_provider_base_url" value="' . $base_url . '" class="regular-text mxchat-autosave-field" placeholder="http://localhost:11434/v1" autocomplete="off" data-lpignore="true" data-form-type="other" data-nonce="' . $nonce . '" />';
7389		- echo '<p class="description">' . esc_html__('Examples: Ollama http://localhost:11434/v1 · LM Studio http://localhost:1234/v1 · vLLM http://gpu:8000/v1 · Azure https://<resource>.openai.azure.com/openai/deployments/<deployment>', 'mxchat') . '</p>';
7390		- echo '</div>';
7391		-
7392		- echo '<div class="mxchat-cp-row">';
7393		- echo '<label for="custom_provider_api_key">' . esc_html__('API Key (optional)', 'mxchat') . '</label>';
7394		- echo '<input type="password" id="custom_provider_api_key" name="custom_provider_api_key" value="' . $api_key . '" class="regular-text mxchat-autosave-field mxchat-api-key-field" autocomplete="new-password" data-lpignore="true" data-form-type="other" data-nonce="' . $nonce . '" />';
7395		- echo '<p class="description">' . esc_html__('Leave empty for unauthenticated local servers. Required for Azure / vLLM / hosted endpoints.', 'mxchat') . '</p>';
7396		- echo '</div>';
7397		-
7398		- echo '<div class="mxchat-cp-row">';
7399		- echo '<label for="custom_provider_model">' . esc_html__('Model Name', 'mxchat') . '</label>';
7400		- echo '<input type="text" id="custom_provider_model" name="custom_provider_model" value="' . $model_name . '" class="regular-text mxchat-autosave-field" placeholder="llama3.2" autocomplete="off" data-lpignore="true" data-nonce="' . $nonce . '" />';
7401		- echo '<p class="description">' . esc_html__('The model identifier the upstream server expects (e.g. llama3.2, mistral, gpt-oss). For Azure this is the deployment ID — leave empty if the Base URL already includes /deployments/<deployment>.', 'mxchat') . '</p>';
7402		- echo '</div>';
7403		-
7404		- echo '<div class="mxchat-cp-row">';
7405		- echo '<label for="custom_provider_auth_scheme">' . esc_html__('Auth Scheme', 'mxchat') . '</label>';
7406		- echo '<select id="custom_provider_auth_scheme" name="custom_provider_auth_scheme" class="mxchat-autosave-field" data-nonce="' . $nonce . '">';
7407		- echo '<option value="bearer"' . selected($auth_scheme, 'bearer', false) . '>' . esc_html__('Authorization: Bearer (OpenAI / Ollama / vLLM / LM Studio)', 'mxchat') . '</option>';
7408		- echo '<option value="api-key"' . selected($auth_scheme, 'api-key', false) . '>' . esc_html__('api-key header (Azure OpenAI)', 'mxchat') . '</option>';
7409		- echo '</select>';
7410		- echo '<p class="description">' . esc_html__('Most OpenAI-compatible servers use Bearer. Azure OpenAI uses the api-key header.', 'mxchat') . '</p>';
7411		- echo '</div>';
7412		-
7413		- echo '<div class="mxchat-cp-row">';
7414		- echo '<label for="custom_provider_api_version">' . esc_html__('API Version (Azure only)', 'mxchat') . '</label>';
7415		- echo '<input type="text" id="custom_provider_api_version" name="custom_provider_api_version" value="' . $api_version . '" class="regular-text mxchat-autosave-field" placeholder="2024-08-01-preview" autocomplete="off" data-lpignore="true" data-nonce="' . $nonce . '" />';
7416		- echo '<p class="description">' . esc_html__('Appended as ?api-version=... on the request URL. Required for Azure OpenAI; leave empty for non-Azure providers.', 'mxchat') . '</p>';
7417		- echo '</div>';
7418		-
7419		- // Extended-use checkboxes — opt-in routing of other dispatcher paths through the custom provider.
7420		- echo '<div class="mxchat-cp-row">';
7421		- echo '<label style="font-weight:600; display:block; margin:0 0 6px; color:#1d2327; font-size:13px;">' . esc_html__('Extended routing (opt-in)', 'mxchat') . '</label>';
7422		- echo '<label style="display:block; margin:0 0 6px; font-weight:400;"><input type="checkbox" id="custom_provider_for_embeddings" name="custom_provider_for_embeddings" value="on"' . checked($use_embed, true, false) . ' class="mxchat-autosave-field" data-nonce="' . $nonce . '" /> ' . esc_html__('Use custom provider for embeddings', 'mxchat') . '</label>';
7423		- echo '<label style="display:block; margin:0 0 0; font-weight:400;"><input type="checkbox" id="custom_provider_for_images" name="custom_provider_for_images" value="on"' . checked($use_images, true, false) . ' class="mxchat-autosave-field" data-nonce="' . $nonce . '" /> ' . esc_html__('Use custom provider for image generation', 'mxchat') . '</label>';
7424		- echo '<p class="description">' . esc_html__('When off, embeddings and image generation continue to use OpenAI (current behavior). Turn on only if your endpoint exposes OpenAI-compatible /embeddings or /images/generations routes (e.g. Ollama, vLLM, LocalAI).', 'mxchat') . '</p>';
7425		- echo '</div>';
7426		-
7427		- echo '<div class="mxchat-cp-row">';
7428		- echo '<label for="custom_provider_embedding_model">' . esc_html__('Custom Embedding Model', 'mxchat') . '</label>';
7429		- echo '<input type="text" id="custom_provider_embedding_model" name="custom_provider_embedding_model" value="' . $embed_model . '" class="regular-text mxchat-autosave-field" placeholder="nomic-embed-text" autocomplete="off" data-lpignore="true" data-nonce="' . $nonce . '" />';
7430		- echo '<p class="description">' . esc_html__('Only used when "Use custom provider for embeddings" is on. The embedding model name is separate from the chat model name above (e.g. Ollama embedding models: nomic-embed-text, mxbai-embed-large). Leave blank to fall back to the chat model name.', 'mxchat') . '</p>';
7431		- echo '</div>';
7432		-
7433		- echo '<div class="mxchat-cp-test">';
7434		- echo '<button type="button" class="button" id="mxchat-test-custom-provider" data-nonce="' . $test_nonce . '">' . esc_html__('Test Connection', 'mxchat') . '</button>';
7435		- echo '<span id="mxchat-test-custom-provider-result" class="mxchat-cp-test-status"></span>';
7436		- echo '</div>';
7437		-
7438		- echo '<script>(function(){
7439		- var btn = document.getElementById("mxchat-test-custom-provider");
7440		- if (!btn || btn._wired) { return; } btn._wired = true;
7441		- btn.addEventListener("click", function(){
7442		- var out = document.getElementById("mxchat-test-custom-provider-result");
7443		- out.textContent = "' . esc_js(__('Testing...', 'mxchat')) . '";
7444		- out.style.color = "#646970";
7445		- var fd = new FormData();
7446		- fd.append("action", "mxchat_test_custom_provider");
7447		- fd.append("_wpnonce", btn.getAttribute("data-nonce"));
7448		- fetch(ajaxurl, { method:"POST", credentials:"same-origin", body: fd })
7449		- .then(function(r){ return r.json(); })
7450		- .then(function(j){
7451		- if (j && j.success) {
7452		- out.textContent = "✓ " + (j.data && j.data.message ? j.data.message : "' . esc_js(__('OK', 'mxchat')) . '");
7453		- out.style.color = "#00a32a";
7454		- } else {
7455		- out.textContent = "⚠ " + (j && j.data && j.data.message ? j.data.message : "' . esc_js(__('Failed', 'mxchat')) . '");
7456		- out.style.color = "#d63638";
7457		- }
7458		- })
7459		- .catch(function(){
7460		- out.textContent = "⚠ ' . esc_js(__('Request failed', 'mxchat')) . '";
7461		- out.style.color = "#d63638";
7462		- });
7463		- });
7464		- })();</script>';
7465		-
7466		- echo '</div>';
7467	1180	}
7468	1181
7469		-// Voyage API Key
7470		-public function voyage_api_key_callback() {
7471		- $apiKey = isset($this->options['voyage_api_key']) ? esc_attr($this->options['voyage_api_key']) : '';
7472		- $nonce = wp_create_nonce('mxchat_autosave_nonce');
	1182	+public function mxchat_woocommerce_consumer_secret_callback() {
	1183	+ $disabled = $this->is_activated ? '' : 'disabled';
	1184	+ $class = $this->is_activated ? 'pro-feature-wrapper active' : 'pro-feature-wrapper inactive';
7473	1185
7474		- echo '<div class="api-key-wrapper">';
7475		- echo '<input type="text" id="voyage_api_key" name="voyage_api_key" value="' . $apiKey . '" class="regular-text mxchat-autosave-field mxchat-api-key-field" autocomplete="new-password" data-lpignore="true" data-form-type="other" data-nonce="' . $nonce . '" />';
7476		- echo '<button type="button" id="toggleVoyageAPIKeyVisibility">' . esc_html__('Show', 'mxchat') . '</button>';
7477		- echo '<p class="description">' . esc_html__('Required for Voyage AI embedding models. Get your API key from Voyage AI.', 'mxchat') . '</p>';
7478		- echo '</div>';
7479		-}
7480		-
7481		-public function mxchat_loops_api_key_callback() {
7482		- $loops_api_key = isset($this->options['loops_api_key']) ? esc_attr($this->options['loops_api_key']) : '';
7483		- $nonce = wp_create_nonce('mxchat_autosave_nonce');
7484		-
7485		- echo '<div class="api-key-wrapper">';
7486		- echo sprintf(
7487		- '<input type="text" id="loops_api_key" name="loops_api_key" value="%s" class="regular-text mxchat-autosave-field mxchat-api-key-field" autocomplete="new-password" data-lpignore="true" data-form-type="other" data-nonce="%s" />',
7488		- $loops_api_key,
7489		- $nonce
	1186	+ echo '<div class="' . esc_attr($class) . '">';
	1187	+ printf(
	1188	+ '<input type="password" id="woocommerce_consumer_secret" name="mxchat_options[woocommerce_consumer_secret]" value="%s" class="regular-text" %s />',
	1189	+ isset($this->options['woocommerce_consumer_secret']) ? esc_attr($this->options['woocommerce_consumer_secret']) : '',
	1190	+ $disabled
7490	1191	);
7491		- echo '<button type="button" id="toggleLoopsApiKeyVisibility">' . esc_html__('Show', 'mxchat') . '</button>';
7492		- echo '</div>';
7493		- // Cross-reference back to where the list is chosen, so the two screens point
7494		- // at each other (plan-mxchat-20260802-907a63).
7495		- echo '<p class="description">' . wp_kses(
7496		- sprintf(
7497		- /* translators: %s: link to the Loops integration tab. */
7498		- __('Required for Loops email integration. Get your API key from Loops.so, then choose your mailing list under %s.', 'mxchat'),
7499		- '<a href="#integrations-loops">' . esc_html__('Integrations, Loops', 'mxchat') . '</a>'
7500		- ),
7501		- self::mxchat_loops_pointer_allowed_html()
7502		- ) . '</p>';
7503		-}
7504		-public function mxchat_loops_mailing_list_callback() {
7505		- // Add error handling and type checking
7506		- $loops_api_key = '';
7507		- $selected_list = '';
7508		- $nonce = wp_create_nonce('mxchat_autosave_nonce');
	1192	+ echo '<button type="button" id="toggleWooCommerceSecretVisibility">Show</button>';
7509	1193
7510		- // Safely get the API key
7511		- if (isset($this->options['loops_api_key']) && is_string($this->options['loops_api_key'])) {
7512		- $loops_api_key = $this->options['loops_api_key'];
	1194	+ if (!$this->is_activated) {
	1195	+ echo '<div class="pro-feature-overlay">';
	1196	+ echo '<a href="https://mxchat.ai/" target="_blank"><img src="' . plugin_dir_url(__FILE__) . '../images/pro-only-dark.png" alt="Pro Only" /></a>';
	1197	+ echo '</div>';
7513	1198	}
7514	1199
7515		- // Safely get the selected list
7516		- if (isset($this->options['loops_mailing_list']) && is_string($this->options['loops_mailing_list'])) {
7517		- $selected_list = $this->options['loops_mailing_list'];
7518		- }
7519		-
7520		- if (!empty($loops_api_key)) {
7521		- $lists = $this->mxchat_fetch_loops_mailing_lists($loops_api_key);
7522		- if (is_array($lists) && !empty($lists)) {
7523		- echo '<div class="mxchat-field-wrapper">';
7524		- echo '<select id="loops_mailing_list" name="loops_mailing_list" class="mxchat-autosave-field" data-nonce="' . $nonce . '">';
7525		-
7526		- // Add a default "Select a list" option
7527		- echo '<option value="" ' . selected($selected_list, '', false) . '>' . esc_html__('Select a list', 'mxchat') . '</option>';
7528		-
7529		- foreach ($lists as $list) {
7530		- if (is_array($list) && isset($list['id']) && isset($list['name'])) {
7531		- echo sprintf(
7532		- '<option value="%s" %s>%s</option>',
7533		- esc_attr($list['id']),
7534		- selected($selected_list, $list['id'], false),
7535		- esc_html($list['name'])
7536		- );
7537		- }
7538		- }
7539		- echo '</select>';
7540		- echo '</div>';
7541		- echo '<p class="description">' . esc_html__('Please select a mailing list to use with Loops.', 'mxchat') . '</p>';
7542		- } else {
7543		- echo '<p class="description">' . wp_kses(
7544		- self::mxchat_loops_api_key_pointer(
7545		- /* translators: %s: link to the API Keys tab. */
7546		- __('No lists found. Please check your Loops API key under %s.', 'mxchat')
7547		- ),
7548		- self::mxchat_loops_pointer_allowed_html()
7549		- ) . '</p>';
7550		- }
7551		- } else {
7552		- echo '<p class="description">' . wp_kses(
7553		- self::mxchat_loops_api_key_pointer(
7554		- /* translators: %s: link to the API Keys tab. */
7555		- __('Enter your Loops API key under %s to load mailing lists.', 'mxchat')
7556		- ),
7557		- self::mxchat_loops_pointer_allowed_html()
7558		- ) . '</p>';
7559		- }
7560		-}
7561		-
7562		-/**
7563		- * Build the "API Keys" pointer used by the Loops mailing-list field.
7564		- *
7565		- * plan-mxchat-20260802-907a63. The Loops API key field was moved to the API
7566		- * Keys tab, but this field's copy still read as though the input were beside
7567		- * it, so users had nowhere to go. Both live on the SAME screen
7568		- * (admin.php?page=mxchat-settings) — the key is under the API Keys tab, this
7569		- * dropdown under Integrations > Loops — so the pointer is an in-page tab
7570		- * switch, not a cross-page link.
7571		- *
7572		- * A plain href="#api-keys" is all it takes: the shared admin shell
7573		- * (js/admin-sidebar.js) honours section-naming hashes on load AND on
7574		- * hashchange (plan 4ede16), so ordinary anchors switch tabs — the old
7575		- * data-target workaround on these pointer anchors is gone.
7576		- *
7577		- * @param string $template Translatable string containing one %s placeholder.
7578		- * @return string
7579		- */
7580		-private static function mxchat_loops_api_key_pointer($template) {
7581		- return sprintf(
7582		- $template,
7583		- '<a href="#api-keys">' . esc_html__('API Keys', 'mxchat') . '</a>'
7584		- );
7585		-}
7586		-
7587		-/**
7588		- * Allowed HTML for the Loops pointer — anchor plus the shell's tab-switch hook.
7589		- */
7590		-private static function mxchat_loops_pointer_allowed_html() {
7591		- return array(
7592		- 'a' => array(
7593		- 'href' => array(),
7594		- 'data-target' => array(),
7595		- ),
7596		- );
7597		-}
7598		-public function mxchat_triggered_phrase_response_callback() {
7599		- $default_response = __('Would you like to join our mailing list? Please provide your email below.', 'mxchat');
7600		- $triggered_response = isset($this->options['triggered_phrase_response'])
7601		- ? $this->options['triggered_phrase_response']
7602		- : $default_response;
7603		- $nonce = wp_create_nonce('mxchat_autosave_nonce');
7604		-
7605		- echo '<div class="mxchat-field-wrapper">';
7606		- echo sprintf(
7607		- '<textarea id="triggered_phrase_response" name="triggered_phrase_response" rows="3" cols="50" class="mxchat-autosave-field" data-nonce="%s">%s</textarea>',
7608		- $nonce,
7609		- esc_textarea($triggered_response)
7610		- );
7611	1200	echo '</div>';
7612		- echo '<p class="description">' . esc_html__('Enter the instruction for the AI when a trigger keyword is detected. The AI will use this as guidance to naturally ask for the user\'s email in a conversational way.', 'mxchat') . '</p>';
7613	1201	}
7614	1202
7615		-public function mxchat_email_capture_response_callback() {
7616		- $default_response = __('Thank you for providing your email! You\'ve been added to our list.', 'mxchat');
7617		- $email_capture_response = isset($this->options['email_capture_response'])
7618		- ? $this->options['email_capture_response']
7619		- : $default_response;
7620		- $nonce = wp_create_nonce('mxchat_autosave_nonce');
7621	1203
7622		- echo '<div class="mxchat-field-wrapper">';
7623		- echo sprintf(
7624		- '<textarea id="email_capture_response" name="email_capture_response" rows="3" cols="50" class="mxchat-autosave-field" data-nonce="%s">%s</textarea>',
7625		- $nonce,
7626		- esc_textarea($email_capture_response)
7627		- );
7628		- echo '</div>';
7629		- echo '<p class="description">' . esc_html__('Enter the instruction for the AI when a user provides their email. The AI will use this as guidance to naturally confirm the email capture in a conversational way.', 'mxchat') . '</p>';
7630		-}
7631		-public function mxchat_pre_chat_message_callback() {
7632		- // Load the entire 'mxchat_options' array
7633		- $all_options = get_option('mxchat_options', []);
7634	1204
7635		- // Retrieve the saved message or use the default value
7636		- $default_message = __('Hey there! Ask me anything!', 'mxchat');
7637		- $pre_chat_message = isset($all_options['pre_chat_message']) ? $all_options['pre_chat_message'] : $default_message;
	1205	+ public function mxchat_pre_chat_message_callback() {
	1206	+ printf(
	1207	+ '<textarea id="pre_chat_message" name="mxchat_options[pre_chat_message]" rows="5" cols="50">%s</textarea>',
	1208	+ isset($this->options['pre_chat_message']) ? esc_textarea($this->options['pre_chat_message']) : ''
	1209	+ );
	1210	+ }
7638	1211
7639		- // Output the textarea
7640		- printf(
7641		- '<textarea id="pre_chat_message" name="pre_chat_message" rows="5" cols="50">%s</textarea>',
7642		- esc_textarea($pre_chat_message)
7643		- );
7644		-}
7645		-
7646		-// Callback for AI Instructions textarea
7647		-public function system_prompt_instructions_callback() {
7648		- // Retrieve the current value of the system prompt instructions
7649		- $instructions = isset($this->options['system_prompt_instructions']) ? esc_textarea($this->options['system_prompt_instructions']) : '';
7650		- // Render the textarea field
7651		- printf(
7652		- '<textarea id="system_prompt_instructions" name="system_prompt_instructions" rows="5" cols="50">%s</textarea>',
7653		- $instructions
7654		- );
7655		- // Personalization hint
7656		- echo '<p class="description" style="margin-top: 8px;">';
7657		- echo esc_html__('Use {visitor_name} to personalize AI responses when lead capture is enabled.', 'mxchat') . '<br>';
7658		- echo '<code style="font-size: 12px;">' . esc_html__('Example: The visitor\'s name is {visitor_name}. Address them by name.', 'mxchat') . '</code>';
7659		- echo '</p>';
7660		- // Sample instructions button
7661		- echo '<div class="mxchat-instructions-container">';
7662		- echo '<button type="button" class="mxchat-instructions-btn" id="mxchatViewSampleBtn">';
7663		- echo '<svg xmlns="http://www.w3.org/2000/svg" width="14" height="14" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round">';
7664		- echo '<path d="M2 3h6a4 4 0 0 1 4 4v14a3 3 0 0 0-3-3H2z"/>';
7665		- echo '<path d="M22 3h-6a4 4 0 0 0-4 4v14a3 3 0 0 1 3-3h7z"/>';
7666		- echo '</svg>';
7667		- echo esc_html__('View Sample Instructions', 'mxchat');
7668		- echo '</button>';
7669		- echo '</div>';
7670		-
7671		- // Add modal to WordPress admin footer instead of inline
7672		- add_action('admin_footer', array($this, 'render_sample_instructions_modal'));
7673		-}
7674		-
7675		-// New method to render modal in admin footer
7676		-public function render_sample_instructions_modal() {
7677		- static $modal_rendered = false;
7678		- if ($modal_rendered) return; // Prevent duplicate modals
7679		- $modal_rendered = true;
7680		-
7681		- echo '<div class="mxchat-instructions-modal-overlay" id="mxchatSampleModal">';
7682		- echo '<div class="mxchat-instructions-modal-content">';
7683		- echo '<div class="mxchat-instructions-modal-header">';
7684		- echo '<h3 class="mxchat-instructions-modal-title">';
7685		- echo '<svg xmlns="http://www.w3.org/2000/svg" width="20" height="20" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round">';
7686		- echo '<path d="M2 3h6a4 4 0 0 1 4 4v14a3 3 0 0 0-3-3H2z"/>';
7687		- echo '<path d="M22 3h-6a4 4 0 0 0-4 4v14a3 3 0 0 1 3-3h7z"/>';
7688		- echo '</svg>';
7689		- echo esc_html__('Sample AI Instructions', 'mxchat');
7690		- echo '</h3>';
7691		- echo '<button type="button" class="mxchat-instructions-modal-close" id="mxchatModalClose">';
7692		- echo '<svg xmlns="http://www.w3.org/2000/svg" width="18" height="18" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round">';
7693		- echo '<line x1="18" y1="6" x2="6" y2="18"/>';
7694		- echo '<line x1="6" y1="6" x2="18" y2="18"/>';
7695		- echo '</svg>';
7696		- echo '</button>';
7697		- echo '</div>';
7698		- echo '<div class="mxchat-instructions-modal-body">';
7699		- echo '<div class="mxchat-instructions-content">';
7700		- echo esc_html('You are an AI Chatbot assistant for this website. Your main goal is to assist visitors with questions and provide helpful information. Here are your key guidelines:
7701		-
7702		-# Response Style - CRITICALLY IMPORTANT
7703		-- MAXIMUM LENGTH: 1-3 short sentences per response
7704		-- Ultra-concise: Get straight to the answer with no filler
7705		-- No introductions like "Sure!" or "I\'d be happy to help"
7706		-- No phrases like "based on my knowledge" or "according to information"
7707		-- No explanatory text before giving the answer
7708		-- No summaries or repetition
7709		-- Hyperlink all URLs
7710		-- Respond in user\'s language
7711		-- Minor chit chat or conversation is okay, but try to keep it focused on [insert topic]
7712		-
7713		-# Knowledge Base Requirements - PREVENT HALLUCINATIONS
7714		-- ONLY answer using information explicitly provided in OFFICIAL KNOWLEDGE DATABASE CONTENT sections marked with ===== delimiters
7715		-- If required information is NOT in the knowledge database: "I don\'t have enough information in my knowledge base to answer that question accurately."
7716		-- NEVER invent or hallucinate URLs, links, product specs, procedures, dates, statistics, names, contacts, or company information
7717		-- When knowledge base information is unclear or contradictory, acknowledge the limitation rather than guessing
7718		-- Better to admit insufficient information than provide inaccurate answers');
7719		- echo '</div>';
7720		- echo '<button type="button" class="mxchat-instructions-copy-btn" id="mxchatCopyBtn">';
7721		- echo '<svg xmlns="http://www.w3.org/2000/svg" width="16" height="16" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round">';
7722		- echo '<rect x="9" y="9" width="13" height="13" rx="2" ry="2"/>';
7723		- echo '<path d="M5 15H4a2 2 0 0 1-2-2V4a2 2 0 0 1 2-2h9a2 2 0 0 1 2 2v1"/>';
7724		- echo '</svg>';
7725		- echo esc_html__('Copy Instructions', 'mxchat');
7726		- echo '</button>';
7727		- echo '</div>';
7728		- echo '<div class="mxchat-instructions-modal-footer">';
7729		- echo '<button type="button" class="mxchat-instructions-btn-secondary" id="mxchatCloseBtn">' . esc_html__('Close', 'mxchat') . '</button>';
7730		- echo '</div>';
7731		- echo '</div>';
7732		- echo '</div>';
7733		-}
7734		-
7735		-
7736		-public function mxchat_model_callback() {
7737		- // Catalog refactor (plan-d14e89): single source of truth lives in
7738		- // includes/class-mxchat-model-catalog.php. Dropdown groups are the
7739		- // provider labels; each group maps model_id => "Label" strings.
7740		- if (!class_exists('MxChat_Model_Catalog')) {
7741		- require_once plugin_dir_path(__FILE__) . 'class-mxchat-model-catalog.php';
	1212	+ // Callback for AI Instructions textarea
	1213	+ public function system_prompt_instructions_callback() {
	1214	+ printf(
	1215	+ '<textarea id="system_prompt_instructions" name="mxchat_options[system_prompt_instructions]" rows="5" cols="50">%s</textarea>',
	1216	+ isset($this->options['system_prompt_instructions']) ? esc_textarea($this->options['system_prompt_instructions']) : ''
	1217	+ );
7742	1218	}
7743		- // Retrieve the currently selected model from saved options
7744		- $selected_model = isset($this->options['model']) ? esc_attr($this->options['model']) : 'gpt-5.6-sol';
7745	1219
7746		- // Pass the saved model so a provider-retired id keeps rendering as the
7747		- // current selection instead of a blank select (plan e46b8f).
7748		- $models = MxChat_Model_Catalog::settings_dropdown_groups($selected_model);
	1220	+ public function mxchat_model_callback() {
	1221	+ $models = array(
	1222	+ 'gpt-4o' => 'gpt-4o',
	1223	+ 'gpt-4o-mini' => 'gpt-4o-mini',
	1224	+ 'gpt-4-turbo' => 'gpt-4-turbo',
	1225	+ 'gpt-4' => 'gpt-4',
	1226	+ 'gpt-3.5-turbo' => 'gpt-3.5-turbo',
	1227	+ );
7749	1228
7750		- // Begin the select dropdown
7751		- echo '<select id="model" name="model">';
	1229	+ $selected_model = isset($this->options['model']) ? $this->options['model'] : 'gpt-3.5-turbo';
7752	1230
7753		- // Iterate over groups of models
7754		- foreach ($models as $group_label => $group_models) {
7755		- echo '<optgroup label="' . esc_attr($group_label) . '">';
7756		-
7757		- foreach ($group_models as $model_value => $model_label) {
	1231	+ echo '<select id="model" name="mxchat_options[model]">';
	1232	+ foreach ($models as $model_value => $model_label) {
7758	1233	echo '<option value="' . esc_attr($model_value) . '" ' . selected($selected_model, $model_value, false) . '>' . esc_html($model_label) . '</option>';
7759	1234	}
7760		-
7761		- echo '</optgroup>';
	1235	+ echo '</select>';
7762	1236	}
7763	1237
7764		- echo '</select>';
7765		-
7766		- // Add a note for OpenRouter
7767		- echo '<p class="description" id="openrouter-model-note" style="display:none; color: #d63638; font-weight: 500;">';
7768		- echo '<span class="dashicons dashicons-info" style="font-size: 16px; vertical-align: middle;"></span> ';
7769		- echo esc_html__('After entering your OpenRouter API key above, click the button below to load available models.', 'mxchat');
7770		- echo '</p>';
7771		-
7772		- // API Key Status Messages (hidden by default, shown by JS based on selected model)
7773		- $has_openai_key = !empty($this->options['api_key']);
7774		- $has_claude_key = !empty($this->options['claude_api_key']);
7775		- $has_xai_key = !empty($this->options['xai_api_key']);
7776		- $has_deepseek_key = !empty($this->options['deepseek_api_key']);
7777		- $has_gemini_key = !empty($this->options['gemini_api_key']);
7778		- $has_openrouter_key = !empty($this->options['openrouter_api_key']);
7779		-
7780		- // OpenAI/GPT models
7781		- echo '<p class="mxchat-api-status" data-provider="openai" style="display:none;">';
7782		- if ($has_openai_key) {
7783		- echo '<span style="color: #00a32a;">✓ ' . esc_html__('API key for OpenAI detected', 'mxchat') . '</span>';
7784		- } else {
7785		- echo '<span style="color: #d63638;">⚠ ' . esc_html__('No API key for OpenAI detected. Please enter API key in API Keys tab.', 'mxchat') . '</span>';
	1238	+ public function mxchat_top_bar_title_callback() {
	1239	+ printf(
	1240	+ '<input type="text" id="top_bar_title" name="mxchat_options[top_bar_title]" value="%s" />',
	1241	+ isset($this->options['top_bar_title']) ? esc_attr($this->options['top_bar_title']) : ''
	1242	+ );
7786	1243	}
7787		- echo '</p>';
7788	1244
7789		- // Claude models
7790		- echo '<p class="mxchat-api-status" data-provider="claude" style="display:none;">';
7791		- if ($has_claude_key) {
7792		- echo '<span style="color: #00a32a;">✓ ' . esc_html__('API key for Anthropic (Claude) detected', 'mxchat') . '</span>';
7793		- } else {
7794		- echo '<span style="color: #d63638;">⚠ ' . esc_html__('No API key for Anthropic (Claude) detected. Please enter API key in API Keys tab.', 'mxchat') . '</span>';
	1245	+ public function mxchat_intro_message_callback() {
	1246	+ printf(
	1247	+ '<textarea id="intro_message" name="mxchat_options[intro_message]" rows="5" cols="50">%s</textarea>',
	1248	+ isset($this->options['intro_message']) ? esc_textarea($this->options['intro_message']) : 'Hello! How can I assist you today?'
	1249	+ );
7795	1250	}
7796		- echo '</p>';
7797	1251
7798		- // X.AI models
7799		- echo '<p class="mxchat-api-status" data-provider="xai" style="display:none;">';
7800		- if ($has_xai_key) {
7801		- echo '<span style="color: #00a32a;">✓ ' . esc_html__('API key for X.AI (Grok) detected', 'mxchat') . '</span>';
7802		- } else {
7803		- echo '<span style="color: #d63638;">⚠ ' . esc_html__('No API key for X.AI (Grok) detected. Please enter API key in API Keys tab.', 'mxchat') . '</span>';
	1252	+ public function mxchat_input_copy_callback() {
	1253	+ printf(
	1254	+ '<input type="text" id="input_copy" name="mxchat_options[input_copy]" value="%s" placeholder="How can I assist?" />',
	1255	+ isset($this->options['input_copy']) ? esc_attr($this->options['input_copy']) : 'How can I assist?'
	1256	+ );
	1257	+ echo '<p class="description">This is the placeholder text for the chat input field.</p>';
7804	1258	}
7805		- echo '</p>';
7806	1259
7807		- // DeepSeek models
7808		- echo '<p class="mxchat-api-status" data-provider="deepseek" style="display:none;">';
7809		- if ($has_deepseek_key) {
7810		- echo '<span style="color: #00a32a;">✓ ' . esc_html__('API key for DeepSeek detected', 'mxchat') . '</span>';
7811		- } else {
7812		- echo '<span style="color: #d63638;">⚠ ' . esc_html__('No API key for DeepSeek detected. Please enter API key in API Keys tab.', 'mxchat') . '</span>';
7813		- }
7814		- echo '</p>';
7815	1260
7816		- // Gemini models
7817		- echo '<p class="mxchat-api-status" data-provider="gemini" style="display:none;">';
7818		- if ($has_gemini_key) {
7819		- echo '<span style="color: #00a32a;">✓ ' . esc_html__('API key for Google Gemini detected', 'mxchat') . '</span>';
7820		- } else {
7821		- echo '<span style="color: #d63638;">⚠ ' . esc_html__('No API key for Google Gemini detected. Please enter API key in API Keys tab.', 'mxchat') . '</span>';
7822		- }
7823		- echo '</p>';
7824	1261
7825		- // OpenRouter models
7826		- echo '<p class="mxchat-api-status" data-provider="openrouter" style="display:none;">';
7827		- if ($has_openrouter_key) {
7828		- echo '<span style="color: #00a32a;">✓ ' . esc_html__('API key for OpenRouter detected', 'mxchat') . '</span>';
7829		- } else {
7830		- echo '<span style="color: #d63638;">⚠ ' . esc_html__('No API key for OpenRouter detected. Please enter API key in API Keys tab.', 'mxchat') . '</span>';
7831		- }
7832		- echo '</p>';
7833	1262
7834		- // ADD THESE HIDDEN FIELDS RIGHT HERE:
7835		- $openrouter_model = isset($this->options['openrouter_selected_model']) ? esc_attr($this->options['openrouter_selected_model']) : '';
7836		- $openrouter_model_name = isset($this->options['openrouter_selected_model_name']) ? esc_attr($this->options['openrouter_selected_model_name']) : '';
7837	1263
7838		- echo '<input type="hidden" id="openrouter_selected_model" name="openrouter_selected_model" value="' . $openrouter_model . '" />';
7839		- echo '<input type="hidden" id="openrouter_selected_model_name" name="openrouter_selected_model_name" value="' . $openrouter_model_name . '" />';
7840		-}
7841	1264
7842		-// Update your existing callback method
7843		-public function enable_streaming_toggle_callback() {
7844		- // Get value from options array, default to 'on'
7845		- $enabled = isset($this->options['enable_streaming_toggle']) ? $this->options['enable_streaming_toggle'] : 'on';
7846		- $checked = ($enabled === 'on') ? 'checked' : '';
	1265	+ public function mxchat_close_button_color_callback() {
	1266	+ $disabled = $this->is_activated ? '' : 'disabled';
7847	1267
7848		- echo '<label class="toggle-switch">';
7849		- echo sprintf(
7850		- '<input type="checkbox" id="enable_streaming_toggle" name="enable_streaming_toggle" value="on" %s />',
7851		- esc_attr($checked)
	1268	+ echo '<div class="pro-feature-wrapper">';
	1269	+ printf(
	1270	+ '<input type="text" id="close_button_color" name="mxchat_options[close_button_color]" value="%s" class="my-color-field" data-default-color="#4a4a4a" %s />',
	1271	+ isset($this->options['close_button_color']) ? esc_attr($this->options['close_button_color']) : '',
	1272	+ esc_attr($disabled)
7852	1273	);
7853		- echo '<span class="slider"></span>';
7854		- echo '</label>';
7855	1274
7856		- // Test button — branded .mxch-btn with inline SVG (IDs preserved for AJAX binding)
7857		- echo '<div class="mxch-streaming-test-row">';
7858		- echo '<button type="button" id="mxchat-test-streaming-btn" class="mxch-btn mxch-btn-secondary">';
7859		- echo '<svg class="mxch-streaming-test-icon" xmlns="http://www.w3.org/2000/svg" width="16" height="16" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><polyline points="22 12 18 12 15 21 9 3 6 12 2 12"/></svg>';
7860		- echo esc_html__('Test Streaming Compatibility', 'mxchat');
7861		- echo '</button>';
7862		- echo '<p id="mxchat-test-streaming-result" class="mxch-streaming-test-result"></p>';
7863		- echo '</div>';
7864		-}
7865		-
7866		-// Web Search toggle callback
7867		-public function enable_web_search_toggle_callback() {
7868		- // Get value from options array, default to 'off'
7869		- $enabled = isset($this->options['enable_web_search']) ? $this->options['enable_web_search'] : 'off';
7870		- $checked = ($enabled === 'on') ? 'checked' : '';
7871		-
7872		- // Get current model to determine if we should show/enable the toggle
7873		- $current_model = isset($this->options['model']) ? $this->options['model'] : 'gpt-5.6-sol';
7874		-
7875		- // Models that DON'T support web search — OpenAI-docs-driven exception list.
7876		- // Keep hardcoded; the catalog can't infer "supports web search" per-model, so any
7877		- // future OpenAI model that lacks Responses-API web_search support is added here.
7878		- $unsupported_models = array('gpt-4.1-nano');
7879		-
7880		- // Web-search-capable chat-model allowlists, derived from the central model catalog
7881		- // (class-mxchat-model-catalog.php). When a new OpenAI/Gemini chat model is added there,
7882		- // the Web Search toggle picks it up automatically — no edit here.
7883		- // OpenAI grounds via the Responses-API web_search tool; Gemini grounds natively via the
7884		- // Google Search tool (plan 46b9ea wired the Gemini dispatch — every shipped Gemini chat
7885		- // model is 2.x/3.x and grounds, matching that path's empty opt-out list, so all catalog
7886		- // Gemini models are supported here).
7887		- if (!class_exists('MxChat_Model_Catalog')) {
7888		- require_once plugin_dir_path(__FILE__) . 'class-mxchat-model-catalog.php';
	1275	+ if (!$this->is_activated) {
	1276	+ echo '<div class="pro-feature-overlay">';
	1277	+ echo '<a href="https://mxchat.ai/" target="_blank"><img src="' . plugin_dir_url(__FILE__) . '../images/pro-only-dark.png" alt="Pro Only" /></a>';
	1278	+ echo '</div>';
7889	1279	}
7890		- $chat_catalog = MxChat_Model_Catalog::chat_models();
7891		- $openai_models = (isset($chat_catalog['openai']['models']) && is_array($chat_catalog['openai']['models']))
7892		- ? array_keys($chat_catalog['openai']['models'])
7893		- : array();
7894		- $gemini_models = (isset($chat_catalog['gemini']['models']) && is_array($chat_catalog['gemini']['models']))
7895		- ? array_keys($chat_catalog['gemini']['models'])
7896		- : array();
7897	1280
7898		- $is_capable = in_array($current_model, $openai_models) || in_array($current_model, $gemini_models);
7899		- $is_supported = $is_capable && !in_array($current_model, $unsupported_models);
7900		-
7901		- // Wrapper div with data attributes for JS to show/hide. data-openai-models is kept for
7902		- // back-compat; data-gemini-models is the added second provider the JS now also honors.
7903		- echo '<div id="web-search-toggle-wrapper" data-openai-models="' . esc_attr(implode(',', $openai_models)) . '" data-gemini-models="' . esc_attr(implode(',', $gemini_models)) . '" data-unsupported-models="' . esc_attr(implode(',', $unsupported_models)) . '"' . (!$is_supported ? ' style="display:none;"' : '') . '>';
7904		-
7905		- echo '<label class="toggle-switch">';
7906		- echo sprintf(
7907		- '<input type="checkbox" id="enable_web_search" name="enable_web_search" value="on" %s />',
7908		- esc_attr($checked)
7909		- );
7910		- echo '<span class="slider"></span>';
7911		- echo '</label>';
7912		-
7913	1281	echo '</div>';
	1282	+ }
7914	1283
7915		- // Message shown when a model that can't ground (Claude, Grok, DeepSeek, OpenRouter, etc.) is selected
7916		- echo '<p id="web-search-unavailable-message" class="description" style="color: #666;' . ($is_supported ? ' display:none;' : '') . '">';
7917		- echo '<span class="dashicons dashicons-info" style="font-size: 16px; vertical-align: middle; margin-right: 4px;"></span>';
7918		- echo esc_html__('Web search is only available for OpenAI and Gemini models.', 'mxchat');
7919		- echo '</p>';
7920		-}
	1284	+ public function mxchat_chatbot_bg_color_callback() {
	1285	+ $disabled = $this->is_activated ? '' : 'disabled';
7921	1286
7922		-// AJAX handler to fetch OpenRouter models
7923		-public function fetch_openrouter_models() {
7924		- check_ajax_referer('mxchat_fetch_openrouter_models', 'nonce');
	1287	+ echo '<div class="pro-feature-wrapper">';
	1288	+ printf(
	1289	+ '<input type="text" id="chatbot_bg_color" name="mxchat_options[chatbot_bg_color]" value="%s" class="my-color-field" data-default-color="#f9f9f9" %s />',
	1290	+ isset($this->options['chatbot_bg_color']) ? esc_attr($this->options['chatbot_bg_color']) : '',
	1291	+ esc_attr($disabled)
	1292	+ );
7925	1293
7926		- // plan-mxchat-20260731-c63fb6 — nonce is not authorization.
7927		- if (!current_user_can('manage_options')) {
7928		- wp_send_json_error(array('message' => esc_html__('Unauthorized', 'mxchat')), 403);
7929		- }
	1294	+ if (!$this->is_activated) {
	1295	+ echo '<div class="pro-feature-overlay">';
	1296	+ echo '<a href="https://mxchat.ai/" target="_blank"><img src="' . plugin_dir_url(__FILE__) . '../images/pro-only-dark.png" alt="Pro Only" /></a>';
	1297	+ echo '</div>';
	1298	+ }
7930	1299
7931		- $api_key = isset($_POST['api_key']) ? sanitize_text_field($_POST['api_key']) : '';
7932		-
7933		- if (empty($api_key)) {
7934		- wp_send_json_error(array('message' => 'API key is required'));
	1300	+ echo '</div>';
7935	1301	}
7936		-
7937		- $response = wp_remote_get('https://openrouter.ai/api/v1/models', array(
7938		- 'headers' => array(
7939		- 'Authorization' => 'Bearer ' . $api_key,
7940		- 'Content-Type' => 'application/json',
7941		- ),
7942		- 'timeout' => 15,
7943		- ));
7944		-
7945		- if (is_wp_error($response)) {
7946		- wp_send_json_error(array('message' => $response->get_error_message()));
7947		- }
7948		-
7949		- $body = wp_remote_retrieve_body($response);
7950		- $data = json_decode($body, true);
7951		-
7952		- if (isset($data['data']) && is_array($data['data'])) {
7953		- // Format the models for the frontend
7954		- $models = array_map(function($model) {
7955		- return array(
7956		- 'id' => $model['id'],
7957		- 'name' => $model['name'] ?? $model['id'],
7958		- 'description' => $model['description'] ?? '',
7959		- 'context_length' => $model['context_length'] ?? 0,
7960		- 'pricing' => array(
7961		- 'prompt' => $model['pricing']['prompt'] ?? 0,
7962		- 'completion' => $model['pricing']['completion'] ?? 0,
7963		- ),
7964		- );
7965		- }, $data['data']);
7966		-
7967		- wp_send_json_success(array('models' => $models));
7968		- } else {
7969		- wp_send_json_error(array('message' => 'Invalid response from OpenRouter'));
7970		- }
7971		-}
7972	1302
7973		-// Callback function for embedding model selection
7974		-public function embedding_model_callback() {
7975		- $models = array(
7976		- esc_html__('OpenAI Embeddings', 'mxchat') => array(
7977		- 'text-embedding-3-small' => esc_html__('TE3 Small (1536, Efficient)', 'mxchat'),
7978		- 'text-embedding-ada-002' => esc_html__('Ada 2 (1536, Recommended)', 'mxchat'),
7979		- 'text-embedding-3-large' => esc_html__('TE3 Large (3072, Powerful)', 'mxchat'),
7980		- ),
7981		- esc_html__('Voyage AI Embeddings', 'mxchat') => array(
7982		- 'voyage-3-large' => esc_html__('Voyage-3 Large (2048, Most Capable)', 'mxchat'),
7983		- ),
7984		- esc_html__('Google Gemini Embeddings', 'mxchat') => array(
7985		- 'gemini-embedding-001' => esc_html__('Gemini Embedding (1536, Stable)', 'mxchat'),
7986		- )
7987		- );
7988		- $selected_model = isset($this->options['embedding_model']) ? esc_attr($this->options['embedding_model']) : 'text-embedding-ada-002';
7989		- // With custom-provider embeddings on, this picker is inert — the effective
7990		- // model comes from the Custom Embedding Model field (plan ae02cb). Autosave
7991		- // fires only on user change events, so the disabled attribute cannot cause
7992		- // a missing-key save; JS keeps the state in sync with the toggle live.
7993		- $custom_embeddings_on = !empty($this->options['custom_provider_for_embeddings']) && $this->options['custom_provider_for_embeddings'] === 'on';
7994		- echo '<select id="embedding_model" name="embedding_model"' . ($custom_embeddings_on ? ' disabled' : '') . '>';
7995		- foreach ($models as $group_label => $group_models) {
7996		- echo '<optgroup label="' . esc_attr($group_label) . '">';
7997		- foreach ($group_models as $model_value => $model_label) {
7998		- echo '<option value="' . esc_attr($model_value) . '" ' . selected($selected_model, $model_value, false) . '>' . esc_html($model_label) . '</option>';
7999		- }
8000		- echo '</optgroup>';
8001		- }
8002		- echo '</select>';
8003		- echo '<p class="mxch-field-description mxchat-embedding-custom-note" id="mxchat_embedding_custom_note"' . ($custom_embeddings_on ? '' : ' style="display:none;"') . '>';
8004		- echo esc_html__('Custom provider embeddings are in use — the model is set in the Custom Embedding Model field under Custom Provider.', 'mxchat');
8005		- echo '</p>';
	1303	+ public function mxchat_user_message_bg_color_callback() {
	1304	+ $disabled = $this->is_activated ? '' : 'disabled';
8006	1305
8007		- // API Key Status Messages for Embedding Models
8008		- $has_openai_key = !empty($this->options['api_key']);
8009		- $has_voyage_key = !empty($this->options['voyage_api_key']);
8010		- $has_gemini_key = !empty($this->options['gemini_api_key']);
	1306	+ echo '<div class="pro-feature-wrapper">';
	1307	+ printf(
	1308	+ '<input type="text" id="user_message_bg_color" name="mxchat_options[user_message_bg_color]" value="%s" class="my-color-field" data-default-color="#0078d7" %s />',
	1309	+ isset($this->options['user_message_bg_color']) ? esc_attr($this->options['user_message_bg_color']) : '',
	1310	+ esc_attr($disabled)
	1311	+ );
8011	1312
8012		- // OpenAI Embeddings
8013		- echo '<p class="mxchat-embedding-api-status" data-provider="openai" style="display:none;">';
8014		- if ($has_openai_key) {
8015		- echo '<span style="color: #00a32a;">✓ ' . esc_html__('API key for OpenAI detected', 'mxchat') . '</span>';
8016		- } else {
8017		- echo '<span style="color: #d63638;">⚠ ' . esc_html__('No API key for OpenAI detected. Please enter API key in API Keys tab.', 'mxchat') . '</span>';
8018		- }
8019		- echo '</p>';
	1313	+ if (!$this->is_activated) {
	1314	+ echo '<div class="pro-feature-overlay">';
	1315	+ echo '<a href="https://mxchat.ai/" target="_blank"><img src="' . plugin_dir_url(__FILE__) . '../images/pro-only-dark.png" alt="Pro Only" /></a>';
	1316	+ echo '</div>';
	1317	+ }
8020	1318
8021		- // Voyage AI Embeddings
8022		- echo '<p class="mxchat-embedding-api-status" data-provider="voyage" style="display:none;">';
8023		- if ($has_voyage_key) {
8024		- echo '<span style="color: #00a32a;">✓ ' . esc_html__('API key for Voyage AI detected', 'mxchat') . '</span>';
8025		- } else {
8026		- echo '<span style="color: #d63638;">⚠ ' . esc_html__('No API key for Voyage AI detected. Please enter API key in API Keys tab.', 'mxchat') . '</span>';
	1319	+ echo '</div>';
8027	1320	}
8028		- echo '</p>';
8029	1321
8030		- // Gemini Embeddings
8031		- echo '<p class="mxchat-embedding-api-status" data-provider="gemini" style="display:none;">';
8032		- if ($has_gemini_key) {
8033		- echo '<span style="color: #00a32a;">✓ ' . esc_html__('API key for Google Gemini detected', 'mxchat') . '</span>';
8034		- } else {
8035		- echo '<span style="color: #d63638;">⚠ ' . esc_html__('No API key for Google Gemini detected. Please enter API key in API Keys tab.', 'mxchat') . '</span>';
8036		- }
8037		- echo '</p>';
	1322	+ public function mxchat_user_message_font_color_callback() {
	1323	+ $disabled = $this->is_activated ? '' : 'disabled';
8038	1324
8039		-}
	1325	+ echo '<div class="pro-feature-wrapper">';
	1326	+ printf(
	1327	+ '<input type="text" id="user_message_font_color" name="mxchat_options[user_message_font_color]" value="%s" class="my-color-field" data-default-color="#ffffff" %s />',
	1328	+ isset($this->options['user_message_font_color']) ? esc_attr($this->options['user_message_font_color']) : '',
	1329	+ esc_attr($disabled)
	1330	+ );
8040	1331
	1332	+ if (!$this->is_activated) {
	1333	+ echo '<div class="pro-feature-overlay">';
	1334	+ echo '<a href="https://mxchat.ai/" target="_blank"><img src="' . plugin_dir_url(__FILE__) . '../images/pro-only-dark.png" alt="Pro Only" /></a>';
	1335	+ echo '</div>';
	1336	+ }
8041	1337
8042		-public function mxchat_top_bar_title_callback() {
8043		- // Retrieve the current value of the top bar title from saved options
8044		- $top_bar_title = isset($this->options['top_bar_title']) ? esc_attr($this->options['top_bar_title']) : '';
	1338	+ echo '</div>';
	1339	+ }
8045	1340
8046		- // Render the input field
8047		- echo '<input type="text" id="top_bar_title" name="top_bar_title" value="' . $top_bar_title . '" />';
8048		-}
8049		-public function mxchat_ai_agent_text_callback() {
8050		- // Retrieve the current value of the AI agent text from saved options
8051		- $ai_agent_text = isset($this->options['ai_agent_text']) ? esc_attr($this->options['ai_agent_text']) : '';
8052		- // Render the input field
8053		- echo '<input type="text" id="ai_agent_text" name="ai_agent_text" value="' . $ai_agent_text . '" />';
8054		-}
	1341	+ public function mxchat_bot_message_bg_color_callback() {
	1342	+ $disabled = $this->is_activated ? '' : 'disabled';
8055	1343
	1344	+ echo '<div class="pro-feature-wrapper">';
	1345	+ printf(
	1346	+ '<input type="text" id="bot_message_bg_color" name="mxchat_options[bot_message_bg_color]" value="%s" class="my-color-field" data-default-color="#e1e1e1" %s />',
	1347	+ isset($this->options['bot_message_bg_color']) ? esc_attr($this->options['bot_message_bg_color']) : '',
	1348	+ esc_attr($disabled)
	1349	+ );
8056	1350
8057		-public function enable_email_block_callback() {
8058		- // Load full plugin options array
8059		- $all_options = get_option('mxchat_options', []);
	1351	+ if (!$this->is_activated) {
	1352	+ echo '<div class="pro-feature-overlay">';
	1353	+ echo '<a href="https://mxchat.ai/" target="_blank"><img src="' . plugin_dir_url(__FILE__) . '../images/pro-only-dark.png" alt="Pro Only" /></a>';
	1354	+ echo '</div>';
	1355	+ }
8060	1356
8061		- // Get the value, default to 'off'
8062		- $enable_email_block = isset($all_options['enable_email_block']) ? $all_options['enable_email_block'] : 'off';
	1357	+ echo '</div>';
	1358	+ }
8063	1359
8064		- // Check if it's 'on'
8065		- $checked = ($enable_email_block === 'on') ? 'checked' : '';
	1360	+ public function mxchat_bot_message_font_color_callback() {
	1361	+ $disabled = $this->is_activated ? '' : 'disabled';
8066	1362
8067		- echo '<label class="toggle-switch">';
8068		- echo sprintf(
8069		- '<input type="checkbox" id="enable_email_block" name="enable_email_block" value="on" %s />',
8070		- esc_attr($checked)
8071		- );
8072		- echo '<span class="slider"></span>';
8073		- echo '</label>';
8074		-}
	1363	+ echo '<div class="pro-feature-wrapper">';
	1364	+ printf(
	1365	+ '<input type="text" id="bot_message_font_color" name="mxchat_options[bot_message_font_color]" value="%s" class="my-color-field" data-default-color="#333333" %s />',
	1366	+ isset($this->options['bot_message_font_color']) ? esc_attr($this->options['bot_message_font_color']) : '',
	1367	+ esc_attr($disabled)
	1368	+ );
8075	1369
8076		-public function email_blocker_header_content_callback() {
8077		- // Load the entire 'mxchat_options' array
8078		- $all_options = get_option('mxchat_options', []);
	1370	+ if (!$this->is_activated) {
	1371	+ echo '<div class="pro-feature-overlay">';
	1372	+ echo '<a href="https://mxchat.ai/" target="_blank"><img src="' . plugin_dir_url(__FILE__) . '../images/pro-only-dark.png" alt="Pro Only" /></a>';
	1373	+ echo '</div>';
	1374	+ }
8079	1375
8080		- // Retrieve the saved content or default to empty
8081		- $content = isset($all_options['email_blocker_header_content'])
8082		- ? $all_options['email_blocker_header_content']
8083		- : '';
	1376	+ echo '</div>';
	1377	+ }
8084	1378
8085		- // Render the textarea - IMPORTANT: name should be just "email_blocker_header_content"
8086		- echo '<textarea
8087		- id="email_blocker_header_content"
8088		- name="email_blocker_header_content"
8089		- rows="5"
8090		- cols="70"
8091		- data-setting="email_blocker_header_content"
8092		- >' . esc_textarea($content) . '</textarea>';
8093		-}
	1379	+ public function mxchat_top_bar_bg_color_callback() {
	1380	+ $disabled = $this->is_activated ? '' : 'disabled';
8094	1381
8095		-public function email_blocker_button_text_callback() {
8096		- // Load the entire 'mxchat_options' array
8097		- $all_options = get_option('mxchat_options', []);
	1382	+ echo '<div class="pro-feature-wrapper">';
	1383	+ printf(
	1384	+ '<input type="text" id="top_bar_bg_color" name="mxchat_options[top_bar_bg_color]" value="%s" class="my-color-field" data-default-color="#00b294" %s />',
	1385	+ isset($this->options['top_bar_bg_color']) ? esc_attr($this->options['top_bar_bg_color']) : '',
	1386	+ esc_attr($disabled)
	1387	+ );
8098	1388
8099		- // Retrieve the saved button text or default to empty
8100		- $button_text = isset($all_options['email_blocker_button_text'])
8101		- ? $all_options['email_blocker_button_text']
8102		- : '';
	1389	+ if (!$this->is_activated) {
	1390	+ echo '<div class="pro-feature-overlay">';
	1391	+ echo '<a href="https://mxchat.ai/" target="_blank"><img src="' . plugin_dir_url(__FILE__) . '../images/pro-only-dark.png" alt="Pro Only" /></a>';
	1392	+ echo '</div>';
	1393	+ }
8103	1394
8104		- // Use esc_attr to safely render the existing text
8105		- echo '<input type="text" id="email_blocker_button_text" name="email_blocker_button_text" value="' . esc_attr($button_text) . '" style="width: 300px;" />';
8106		-}
	1395	+ echo '</div>';
	1396	+ }
8107	1397
8108		-//Enable name field callback
8109		-public function enable_name_field_callback() {
8110		- // Load full plugin options array
8111		- $all_options = get_option('mxchat_options', []);
8112		- // Get the value, default to 'off'
8113		- $enable_name_field = isset($all_options['enable_name_field']) ? $all_options['enable_name_field'] : 'off';
8114		- // Check if it's 'on'
8115		- $checked = ($enable_name_field === 'on') ? 'checked' : '';
8116		- echo '<label class="toggle-switch">';
8117		- echo sprintf(
8118		- '<input type="checkbox" id="enable_name_field" name="enable_name_field" value="on" %s />',
8119		- esc_attr($checked)
8120		- );
8121		- echo '<span class="slider"></span>';
8122		- echo '</label>';
8123		-}
8124		-//Name field placeholder callback
8125		-public function name_field_placeholder_callback() {
8126		- $all_options = get_option('mxchat_options', []);
8127		- $placeholder = isset($all_options['name_field_placeholder'])
8128		- ? $all_options['name_field_placeholder']
8129		- : esc_html__('Enter your name', 'mxchat');
	1398	+ public function mxchat_send_button_font_color_callback() {
	1399	+ $disabled = $this->is_activated ? '' : 'disabled';
8130	1400
8131		- echo '<input type="text" id="name_field_placeholder" name="name_field_placeholder" value="' . esc_attr($placeholder) . '" style="width: 300px;" />';
8132		-}
	1401	+ echo '<div class="pro-feature-wrapper">';
	1402	+ printf(
	1403	+ '<input type="text" id="send_button_font_color" name="mxchat_options[send_button_font_color]" value="%s" class="my-color-field" data-default-color="#ffffff" %s />',
	1404	+ isset($this->options['send_button_font_color']) ? esc_attr($this->options['send_button_font_color']) : '',
	1405	+ esc_attr($disabled)
	1406	+ );
8133	1407
	1408	+ if (!$this->is_activated) {
	1409	+ echo '<div class="pro-feature-overlay">';
	1410	+ echo '<a href="https://mxchat.ai/" target="_blank"><img src="' . plugin_dir_url(__FILE__) . '../images/pro-only-dark.png" alt="Pro Only" /></a>';
	1411	+ echo '</div>';
	1412	+ }
8134	1413
	1414	+ echo '</div>';
	1415	+ }
8135	1416
8136		-public function mxchat_intro_message_callback() {
8137		- // Load the entire 'mxchat_options' array
8138		- $all_options = get_option('mxchat_options', []);
8139		- // Retrieve the saved intro message or use the default
8140		- $default_message = __('Hello! How can I assist you today?', 'mxchat');
8141		- $saved_message = isset($all_options['intro_message']) ? $all_options['intro_message'] : $default_message;
8142		- // Escape on output (esc_textarea) — neutralizes any payload already stored before the
8143		- // Wordfence Stored-XSS fix (CWE-79, plan-3f8158) and prevents </textarea> context-breakout.
8144		- ?>
8145		- <textarea id="intro_message" name="intro_message" rows="5" cols="50"><?php echo esc_textarea( $saved_message ); ?></textarea>
8146		- <p class="description" style="margin-top: 8px;">
8147		- <?php esc_html_e('Use {visitor_name} to personalize greetings when lead capture is enabled.', 'mxchat'); ?><br>
8148		- <code style="font-size: 12px;"><?php esc_html_e('Example: Hello {visitor_name}! How can I help you today?', 'mxchat'); ?></code>
8149		- </p>
8150		- <?php
8151		-}
	1417	+ public function mxchat_chatbot_background_color_callback() {
	1418	+ $disabled = $this->is_activated ? '' : 'disabled';
8152	1419
8153		-public function mxchat_input_copy_callback() {
8154		- // Load the entire 'mxchat_options' array
8155		- $all_options = get_option('mxchat_options', []);
	1420	+ echo '<div class="pro-feature-wrapper">';
	1421	+ printf(
	1422	+ '<input type="text" id="chatbot_background_color" name="mxchat_options[chatbot_background_color]" value="%s" class="my-color-field" data-default-color="#000000" %s />',
	1423	+ isset($this->options['chatbot_background_color']) ? esc_attr($this->options['chatbot_background_color']) : '',
	1424	+ esc_attr($disabled)
	1425	+ );
8156	1426
8157		- // Retrieve the saved input copy or use the default value
8158		- $default_copy = __('How can I assist?', 'mxchat');
8159		- $input_copy = isset($all_options['input_copy']) ? $all_options['input_copy'] : $default_copy;
	1427	+ if (!$this->is_activated) {
	1428	+ echo '<div class="pro-feature-overlay">';
	1429	+ echo '<a href="https://mxchat.ai/" target="_blank"><img src="' . plugin_dir_url(__FILE__) . '../images/pro-only-dark.png" alt="Pro Only" /></a>';
	1430	+ echo '</div>';
	1431	+ }
8160	1432
8161		- // Output the input field with the saved value
8162		- printf(
8163		- '<input type="text" id="input_copy" name="input_copy" value="%s" placeholder="%s" />',
8164		- esc_attr($input_copy),
8165		- esc_attr__('How can I assist?', 'mxchat')
8166		- );
8167		-}
	1433	+ echo '</div>';
	1434	+ }
8168	1435
	1436	+ public function mxchat_icon_color_callback() {
	1437	+ $disabled = $this->is_activated ? '' : 'disabled';
8169	1438
8170		-public function mxchat_append_to_body_callback() {
8171		- // Fetch fresh options to ensure we have the latest saved values
8172		- $options = get_option('mxchat_options', array());
	1439	+ echo '<div class="pro-feature-wrapper">';
	1440	+ printf(
	1441	+ '<input type="text" id="icon_color" name="mxchat_options[icon_color]" value="%s" class="my-color-field" data-default-color="#ffffff" %s />',
	1442	+ isset($this->options['icon_color']) ? esc_attr($this->options['icon_color']) : '',
	1443	+ esc_attr($disabled)
	1444	+ );
8173	1445
8174		- // Get value from options array, default to 'off'
8175		- $append_to_body = isset($options['append_to_body']) ? $options['append_to_body'] : 'off';
8176		- $checked = ($append_to_body === 'on') ? 'checked' : '';
	1446	+ if (!$this->is_activated) {
	1447	+ echo '<div class="pro-feature-overlay">';
	1448	+ echo '<a href="https://mxchat.ai/" target="_blank"><img src="' . plugin_dir_url(__FILE__) . '../images/pro-only-dark.png" alt="Pro Only" /></a>';
	1449	+ echo '</div>';
	1450	+ }
8177	1451
8178		- // Get post type visibility settings
8179		- $visibility_mode = isset($options['post_type_visibility_mode']) ? $options['post_type_visibility_mode'] : 'all';
8180		- $visibility_list = isset($options['post_type_visibility_list']) ? $options['post_type_visibility_list'] : array();
8181		- if (!is_array($visibility_list)) {
8182		- $visibility_list = array();
	1452	+ echo '</div>';
8183	1453	}
8184	1454
8185		- echo '<div class="mxchat-autosave-section">';
	1455	+ public function mxchat_chat_input_font_color_callback() {
	1456	+ $disabled = $this->is_activated ? '' : 'disabled';
8186	1457
8187		- // Main toggle
8188		- echo '<label class="toggle-switch">';
8189		- echo sprintf(
8190		- '<input type="checkbox" id="append_to_body" name="append_to_body" value="on" %s />',
8191		- esc_attr($checked)
8192		- );
8193		- echo '<span class="slider"></span>';
8194		- echo '</label>';
	1458	+ echo '<div class="pro-feature-wrapper">';
	1459	+ printf(
	1460	+ '<input type="text" id="chat_input_font_color" name="mxchat_options[chat_input_font_color]" value="%s" class="my-color-field" data-default-color="#555555" %s />',
	1461	+ isset($this->options['chat_input_font_color']) ? esc_attr($this->options['chat_input_font_color']) : '',
	1462	+ esc_attr($disabled)
	1463	+ );
8195	1464
8196		- // Post Type Visibility Options (only visible when auto-display is ON)
8197		- $display_style = ($append_to_body === 'on') ? '' : 'display: none;';
8198		- echo '<div id="post-type-visibility-options" class="mxchat-sub-options" style="' . esc_attr($display_style) . '">';
8199		-
8200		- echo '<div class="mxchat-post-type-visibility-header">';
8201		- echo '<h4>' . esc_html__('Post Type Visibility', 'mxchat') . '</h4>';
8202		- echo '</div>';
8203		-
8204		- // Mode selector (radio buttons)
8205		- echo '<div class="mxchat-visibility-mode">';
8206		-
8207		- echo '<label class="mxchat-radio-label">';
8208		- echo '<input type="radio" name="post_type_visibility_mode" value="all" ' . checked($visibility_mode, 'all', false) . ' />';
8209		- echo '<span>' . esc_html__('Show on all post types', 'mxchat') . '</span>';
8210		- echo '</label>';
8211		-
8212		- echo '<label class="mxchat-radio-label">';
8213		- echo '<input type="radio" name="post_type_visibility_mode" value="include" ' . checked($visibility_mode, 'include', false) . ' />';
8214		- echo '<span>' . esc_html__('Only show on selected post types', 'mxchat') . '</span>';
8215		- echo '</label>';
8216		-
8217		- echo '<label class="mxchat-radio-label">';
8218		- echo '<input type="radio" name="post_type_visibility_mode" value="exclude" ' . checked($visibility_mode, 'exclude', false) . ' />';
8219		- echo '<span>' . esc_html__('Hide on selected post types', 'mxchat') . '</span>';
8220		- echo '</label>';
8221		-
8222		- echo '</div>';
8223		-
8224		- // Post type checkboxes (only visible when mode is include or exclude)
8225		- $list_display = ($visibility_mode !== 'all') ? '' : 'display: none;';
8226		- echo '<div id="post-type-list" class="mxchat-post-type-list" style="' . esc_attr($list_display) . '">';
8227		-
8228		- // Get all public post types
8229		- $post_types = get_post_types(array('public' => true), 'objects');
8230		-
8231		- foreach ($post_types as $post_type) {
8232		- // Skip attachments
8233		- if ($post_type->name === 'attachment') {
8234		- continue;
	1465	+ if (!$this->is_activated) {
	1466	+ echo '<div class="pro-feature-overlay">';
	1467	+ echo '<a href="https://mxchat.ai/" target="_blank"><img src="' . plugin_dir_url(__FILE__) . '../images/pro-only-dark.png" alt="Pro Only" /></a>';
	1468	+ echo '</div>';
8235	1469	}
8236	1470
8237		- $is_checked = in_array($post_type->name, $visibility_list) ? 'checked' : '';
8238		-
8239		- echo '<label class="mxchat-checkbox-label">';
8240		- echo '<input type="checkbox" name="post_type_visibility_list[]" value="' . esc_attr($post_type->name) . '" ' . $is_checked . ' />';
8241		- echo '<span>' . esc_html($post_type->label) . '</span>';
8242		- echo '</label>';
	1471	+ echo '</div>';
8243	1472	}
8244	1473
8245		- echo '</div>'; // End post-type-list
8246		- echo '</div>'; // End post-type-visibility-options
8247		- echo '</div>'; // End mxchat-autosave-section
8248		-}
8249	1474
8250		-public function mxchat_contextual_awareness_callback() {
8251		- // Get value from options array, default to 'off'
8252		- $contextual_awareness = isset($this->options['contextual_awareness_toggle']) ? $this->options['contextual_awareness_toggle'] : 'off';
8253		- $checked = ($contextual_awareness === 'on') ? 'checked' : '';
	1475	+public function mxchat_append_to_body_callback() {
	1476	+ $append_to_body_checked = isset($this->options['append_to_body']) && $this->options['append_to_body'] === 'on' ? 'checked' : '';
8254	1477	echo '<label class="toggle-switch">';
8255		- echo sprintf(
8256		- '<input type="checkbox" id="contextual_awareness_toggle" name="contextual_awareness_toggle" value="on" %s />',
8257		- esc_attr($checked)
	1478	+ printf(
	1479	+ '<input type="checkbox" id="append_to_body" name="mxchat_options[append_to_body]" %s />',
	1480	+ esc_attr($append_to_body_checked)
8258	1481	);
8259	1482	echo '<span class="slider"></span>';
8260	1483	echo '</label>';
	1484	+echo '<p class="description">Enable this option to automatically append the chat widget to the body of every page (recommended). No need to manually use the shortcode [mxchat_chatbot floating="yes"].</p>';
8261	1485	}
8262	1486
8263		-public function mxchat_citation_links_toggle_callback() {
8264		- // Get value from options array, default to 'on' (enabled by default)
8265		- $citation_links = isset($this->options['citation_links_toggle']) ? $this->options['citation_links_toggle'] : 'on';
8266		- $checked = ($citation_links === 'on') ? 'checked' : '';
8267		- echo '<label class="toggle-switch">';
8268		- echo sprintf(
8269		- '<input type="checkbox" id="citation_links_toggle" name="citation_links_toggle" value="on" %s />',
8270		- esc_attr($checked)
8271		- );
8272		- echo '<span class="slider"></span>';
8273		- echo '</label>';
8274		-}
8275	1487
8276		-/**
8277		- * Toggle for the end-of-session satisfaction rating prompt (plan-a5b006).
8278		- * Default ON. The widget reads this through the localized object; the
8279		- * mxchat_satisfaction_rating_enabled filter still lets developers force
8280		- * the value site-wide.
8281		- *
8282		- * The 5 customization fields (idle/question/thanks/placeholder/saved) are
8283		- * rendered inline here inside a single wrapper div whose initial display
8284		- * is set server-side from the toggle value (plan-29caac). Mirrors the
8285		- * auto-display chatbot pattern at mxchat_append_to_body_callback — no
8286		- * DOMContentLoaded race because rows exist as direct children of this
8287		- * callback's output, and the wrapper's display: none is inline at render
8288		- * time so refresh shows the correct state with no flash.
8289		- */
8290		-public function mxchat_satisfaction_rating_toggle_callback() {
8291		- $options = $this->options;
8292		- $value = isset($options['satisfaction_rating_enabled']) ? $options['satisfaction_rating_enabled'] : 'off';
8293		- $checked = ($value === 'on') ? 'checked' : '';
8294		-
8295		- $idle = isset($options['satisfaction_rating_idle_seconds']) ? intval($options['satisfaction_rating_idle_seconds']) : 60;
8296		- $idle = max(5, min(600, $idle));
8297		- $question = isset($options['satisfaction_rating_question']) ? $options['satisfaction_rating_question'] : '';
8298		- $thanks = isset($options['satisfaction_rating_thanks']) ? $options['satisfaction_rating_thanks'] : '';
8299		- $placeholder = isset($options['satisfaction_rating_placeholder']) ? $options['satisfaction_rating_placeholder'] : '';
8300		- $saved = isset($options['satisfaction_rating_saved']) ? $options['satisfaction_rating_saved'] : '';
8301		-
8302		- echo '<div class="mxchat-autosave-section">';
8303		-
8304		- echo '<label class="toggle-switch">';
8305		- echo sprintf(
8306		- '<input type="checkbox" id="satisfaction_rating_enabled" name="satisfaction_rating_enabled" value="on" %s />',
8307		- esc_attr($checked)
8308		- );
8309		- echo '<span class="slider"></span>';
8310		- echo '</label>';
8311		-
8312		- ?>
8313		- <style>
8314		- .mxchat-sub-options-field { margin: 12px 0; }
8315		- .mxchat-sub-options-field label { display: inline-block; margin-bottom: 4px; }
8316		- #satisfaction-rating-sub-options h4 { margin: 16px 0 8px; }
8317		- </style>
8318		- <?php
8319		-
8320		- $display_style = ($value === 'on') ? '' : 'display: none;';
8321		- echo '<div id="satisfaction-rating-sub-options" class="mxchat-sub-options" style="' . esc_attr($display_style) . '">';
8322		-
8323		- echo '<h4>' . esc_html__('Customize the prompt (optional)', 'mxchat') . '</h4>';
8324		-
8325		- echo '<div class="mxchat-sub-options-field">';
8326		- echo '<label for="satisfaction_rating_idle_seconds"><strong>' . esc_html__('Idle Timeout', 'mxchat') . '</strong></label><br />';
8327		- printf(
8328		- '<input type="number" id="satisfaction_rating_idle_seconds" name="satisfaction_rating_idle_seconds" value="%d" min="5" max="600" step="1" class="small-text" /> <span class="description">%s</span>',
8329		- (int) $idle,
8330		- esc_html__('seconds of user inactivity before the prompt appears (5-600)', 'mxchat')
8331		- );
8332		- echo '</div>';
8333		-
8334		- echo '<div class="mxchat-sub-options-field">';
8335		- echo '<label for="satisfaction_rating_question"><strong>' . esc_html__('Prompt Question', 'mxchat') . '</strong></label><br />';
8336		- printf(
8337		- '<input type="text" id="satisfaction_rating_question" name="satisfaction_rating_question" value="%s" maxlength="200" class="regular-text" placeholder="%s" />',
8338		- esc_attr($question),
8339		- esc_attr__('Was this helpful?', 'mxchat')
8340		- );
8341		- echo '<p class="description">' . esc_html__('Leave blank for the default. Shown above the thumbs up/down.', 'mxchat') . '</p>';
8342		- echo '</div>';
8343		-
8344		- echo '<div class="mxchat-sub-options-field">';
8345		- echo '<label for="satisfaction_rating_thanks"><strong>' . esc_html__('Thank-You Message', 'mxchat') . '</strong></label><br />';
8346		- printf(
8347		- '<input type="text" id="satisfaction_rating_thanks" name="satisfaction_rating_thanks" value="%s" maxlength="300" class="regular-text" placeholder="%s" />',
8348		- esc_attr($thanks),
8349		- esc_attr__('Thanks! Anything we should improve? (optional)', 'mxchat')
8350		- );
8351		- echo '<p class="description">' . esc_html__('Leave blank for the default. Shown after the user clicks a thumb.', 'mxchat') . '</p>';
8352		- echo '</div>';
8353		-
8354		- echo '<div class="mxchat-sub-options-field">';
8355		- echo '<label for="satisfaction_rating_placeholder"><strong>' . esc_html__('Feedback Placeholder', 'mxchat') . '</strong></label><br />';
8356		- printf(
8357		- '<input type="text" id="satisfaction_rating_placeholder" name="satisfaction_rating_placeholder" value="%s" maxlength="200" class="regular-text" placeholder="%s" />',
8358		- esc_attr($placeholder),
8359		- esc_attr__('Tell us what could be better…', 'mxchat')
8360		- );
8361		- echo '<p class="description">' . esc_html__('Leave blank for the default. Placeholder text inside the feedback textarea.', 'mxchat') . '</p>';
8362		- echo '</div>';
8363		-
8364		- echo '<div class="mxchat-sub-options-field">';
8365		- echo '<label for="satisfaction_rating_saved"><strong>' . esc_html__('Saved Confirmation', 'mxchat') . '</strong></label><br />';
8366		- printf(
8367		- '<input type="text" id="satisfaction_rating_saved" name="satisfaction_rating_saved" value="%s" maxlength="200" class="regular-text" placeholder="%s" />',
8368		- esc_attr($saved),
8369		- esc_attr__('Thanks for the feedback.', 'mxchat')
8370		- );
8371		- echo '<p class="description">' . esc_html__('Leave blank for the default. Shown after the feedback is sent.', 'mxchat') . '</p>';
8372		- echo '</div>';
8373		-
8374		- echo '</div>'; // #satisfaction-rating-sub-options
8375		- echo '</div>'; // .mxchat-autosave-section
8376		-
8377		- ?>
8378		- <script>
8379		- (function() {
8380		- document.addEventListener('DOMContentLoaded', function() {
8381		- var toggle = document.getElementById('satisfaction_rating_enabled');
8382		- var subOptions = document.getElementById('satisfaction-rating-sub-options');
8383		- if (!toggle || !subOptions) return;
8384		- toggle.addEventListener('change', function() {
8385		- subOptions.style.display = toggle.checked ? '' : 'none';
8386		- });
8387		- });
8388		- })();
8389		- </script>
8390		- <?php
8391		-}
8392		-
8393	1488	public function mxchat_privacy_toggle_callback() {
8394		- // Load from mxchat_options array
8395		- $options = get_option('mxchat_options', []);
	1489	+ // Check if the privacy toggle is enabled
	1490	+ $privacy_toggle_checked = isset($this->options['privacy_toggle']) && $this->options['privacy_toggle'] === 'on' ? 'checked' : '';
8396	1491
8397		- // Get privacy toggle value with fallback
8398		- $privacy_toggle = isset($options['privacy_toggle']) ? $options['privacy_toggle'] : 'off';
8399		- $checked = ($privacy_toggle === 'on') ? 'checked' : '';
	1492	+ // Retrieve the stored privacy text if it exists
	1493	+ $privacy_text = isset($this->options['privacy_text']) ? wp_kses_post($this->options['privacy_text']) : 'By chatting, you agree to our <a href="https://example.com/privacy-policy" target="_blank">privacy policy</a>.';
8400	1494
8401		- // Get privacy text with fallback
8402		- $privacy_text = isset($options['privacy_text'])
8403		- ? $options['privacy_text']
8404		- : __('By chatting, you agree to our <a href="https://example.com/privacy-policy" target="_blank">privacy policy</a>.', 'mxchat');
8405		-
8406	1495	// Output the toggle switch
8407	1496	echo '<label class="toggle-switch">';
8408		- echo sprintf(
8409		- '<input type="checkbox" id="privacy_toggle" name="privacy_toggle" value="on" %s />',
8410		- esc_attr($checked)
	1497	+ printf(
	1498	+ '<input type="checkbox" id="privacy_toggle" name="mxchat_options[privacy_toggle]" %s />',
	1499	+ esc_attr($privacy_toggle_checked)
8411	1500	);
8412	1501	echo '<span class="slider"></span>';
8413	1502	echo '</label>';
	1503	+ echo '<p class="description">Enable this option to display a privacy notice below the chat widget.</p>';
8414	1504
8415	1505	// Output the custom text input field
8416		- echo sprintf(
8417		- '<textarea id="privacy_text" name="privacy_text" rows="5" cols="50" class="regular-text">%s</textarea>',
	1506	+ printf(
	1507	+ '<textarea id="privacy_text" name="mxchat_options[privacy_text]" rows="5" cols="50" class="regular-text">%s</textarea>',
8418	1508	esc_textarea($privacy_text)
8419	1509	);
	1510	+ echo '<p class="description">Enter the privacy policy text. You can include HTML links.</p>';
8420	1511	}
8421	1512
8422	1513
8423	1514	public function mxchat_complianz_toggle_callback() {
8424		- // Load from mxchat_options array
8425		- $options = get_option('mxchat_options', []);
	1515	+ // Check if the Complianz toggle is enabled
	1516	+ $complianz_toggle_checked = isset($this->options['complianz_toggle']) && $this->options['complianz_toggle'] === 'on' ? 'checked' : '';
8426	1517
8427		- // Get complianz toggle value with fallback
8428		- $complianz_toggle = isset($options['complianz_toggle']) ? $options['complianz_toggle'] : 'off';
8429		- $checked = ($complianz_toggle === 'on') ? 'checked' : '';
	1518	+ // Check if the plugin is activated (paid feature)
	1519	+ $disabled = $this->is_activated ? '' : 'disabled';
	1520	+ $class = $this->is_activated ? 'pro-feature-wrapper active' : 'pro-feature-wrapper inactive';
8430	1521
8431		- // Output the toggle switch
8432		- echo '<label class="toggle-switch">';
8433		- echo sprintf(
8434		- '<input type="checkbox" id="complianz_toggle" name="complianz_toggle" value="on" %s />',
8435		- esc_attr($checked)
8436		- );
8437		- echo '<span class="slider"></span>';
8438		- echo '</label>';
8439		-}
	1522	+ echo '<div class="' . esc_attr($class) . '">';
8440	1523
8441		-public function mxchat_link_target_toggle_callback() {
8442		- // Load from mxchat_options array
8443		- $options = get_option('mxchat_options', []);
8444		-
8445		- // Get link target toggle value with fallback
8446		- $link_target_toggle = isset($options['link_target_toggle']) ? $options['link_target_toggle'] : 'off';
8447		- $checked = ($link_target_toggle === 'on') ? 'checked' : '';
8448		-
8449	1524	// Output the toggle switch
8450	1525	echo '<label class="toggle-switch">';
8451		- echo sprintf(
8452		- '<input type="checkbox" id="link_target_toggle" name="link_target_toggle" value="on" %s />',
8453		- esc_attr($checked)
	1526	+ printf(
	1527	+ '<input type="checkbox" id="complianz_toggle" name="mxchat_options[complianz_toggle]" %s %s />',
	1528	+ esc_attr($complianz_toggle_checked),
	1529	+ esc_attr($disabled)
8454	1530	);
8455	1531	echo '<span class="slider"></span>';
8456	1532	echo '</label>';
8457		-}
	1533	+ echo '<p class="description">Enable this option to apply Complianz consent logic to the chatbot.</p>';
8458	1534
8459		-public function mxchat_chat_persistence_toggle_callback() {
8460		- // Load from mxchat_options array
8461		- $options = get_option('mxchat_options', []);
8462		-
8463		- // Get chat persistence toggle value with fallback
8464		- $chat_persistence_toggle = isset($options['chat_persistence_toggle']) ? $options['chat_persistence_toggle'] : 'off';
8465		- $checked = ($chat_persistence_toggle === 'on') ? 'checked' : '';
8466		-
8467		- // Output the toggle switch
8468		- echo '<label class="toggle-switch">';
8469		- echo sprintf(
8470		- '<input type="checkbox" id="chat_persistence_toggle" name="chat_persistence_toggle" value="on" %s />',
8471		- esc_attr($checked)
8472		- );
8473		- echo '<span class="slider"></span>';
8474		- echo '</label>';
8475		-}
8476		-
8477		-public function mxchat_print_button_toggle_callback() {
8478		- // Load from mxchat_options array
8479		- $options = get_option('mxchat_options', []);
8480		-
8481		- // Default ON — the option was previously unexposed and the button always showed.
8482		- $print_button_enabled = isset($options['print_button_enabled']) ? $options['print_button_enabled'] : 'on';
8483		- $checked = ($print_button_enabled === 'on') ? 'checked' : '';
8484		-
8485		- // Output the toggle switch
8486		- echo '<label class="toggle-switch">';
8487		- echo sprintf(
8488		- '<input type="checkbox" id="print_button_enabled" name="print_button_enabled" value="on" %s />',
8489		- esc_attr($checked)
8490		- );
8491		- echo '<span class="slider"></span>';
8492		- echo '</label>';
8493		-}
8494		-
8495		-/**
8496		- * Editor Assistant toggle (plan-8cb0cb). Standalone option, NOT in mxchat_options
8497		- * (bypasses the mxchat_sanitize strip-trap + autosave normalization). Default OFF.
8498		- * Saved by the mxchat_editor_assistant_enabled case in class-ajax-handler.php.
8499		- * Renders on Content → Settings (moved there from Settings → Behavior, plan-f7df40).
8500		- */
8501		-public function mxchat_editor_assistant_toggle_callback() {
8502		- $enabled = get_option('mxchat_editor_assistant_enabled', 'off');
8503		- $checked = ($enabled === 'on') ? 'checked' : '';
8504		-
8505		- echo '<label class="toggle-switch">';
8506		- echo sprintf(
8507		- '<input type="checkbox" id="mxchat_editor_assistant_enabled" name="mxchat_editor_assistant_enabled" value="on" %s />',
8508		- esc_attr($checked)
8509		- );
8510		- echo '<span class="slider"></span>';
8511		- echo '</label>';
8512		-}
8513		-
8514		-/**
8515		- * Hybrid keyword boost toggle (plan-38ffa1; rebuilt on the house toggle pattern
8516		- * in plan-64d34f — the hand-rolled .mxch-toggle markup matched neither selector
8517		- * the autosave JS uses to place its save confirmation, so the control looked
8518		- * dead). Standalone option, NOT in mxchat_options. Default OFF. Saved by the
8519		- * mxchat_hybrid_keyword_toggle case in class-ajax-handler.php, which also runs
8520		- * capability detection on enable.
8521		- */
8522		-public function mxchat_hybrid_keyword_toggle_callback() {
8523		- $enabled = get_option('mxchat_hybrid_keyword_toggle', 'off');
8524		- $checked = ($enabled === 'on') ? 'checked' : '';
8525		-
8526		- echo '<label class="toggle-switch">';
8527		- echo sprintf(
8528		- '<input type="checkbox" id="mxchat_hybrid_keyword_toggle" name="mxchat_hybrid_keyword_toggle" value="on" %s />',
8529		- esc_attr($checked)
8530		- );
8531		- echo '<span class="slider"></span>';
8532		- echo '</label>';
8533		-}
8534		-
8535		-/**
8536		- * Smart asset loading toggle (plan-915355; rebuilt on the house toggle pattern
8537		- * in plan-64d34f, same dead-save-feedback defect as the hybrid keyword toggle).
8538		- * Standalone option, NOT in mxchat_options. Default OFF. Saved by the
8539		- * mxchat_smart_asset_loading case in class-ajax-handler.php.
8540		- */
8541		-public function mxchat_smart_asset_loading_toggle_callback() {
8542		- $enabled = get_option('mxchat_smart_asset_loading', 'off');
8543		- $checked = ($enabled === 'on') ? 'checked' : '';
8544		-
8545		- echo '<label class="toggle-switch">';
8546		- echo sprintf(
8547		- '<input type="checkbox" id="mxchat_smart_asset_loading" name="mxchat_smart_asset_loading" value="on" %s />',
8548		- esc_attr($checked)
8549		- );
8550		- echo '<span class="slider"></span>';
8551		- echo '</label>';
8552		-}
8553		-
8554		-public function mxchat_reset_chat_toggle_callback() {
8555		- // Load from mxchat_options array. plan ac2e81 — default OFF (new, opt-in).
8556		- $options = get_option('mxchat_options', []);
8557		- $reset_chat_enabled = isset($options['reset_chat_enabled']) ? $options['reset_chat_enabled'] : 'off';
8558		- $checked = ($reset_chat_enabled === 'on') ? 'checked' : '';
8559		-
8560		- echo '<label class="toggle-switch">';
8561		- echo sprintf(
8562		- '<input type="checkbox" id="reset_chat_enabled" name="reset_chat_enabled" value="on" %s />',
8563		- esc_attr($checked)
8564		- );
8565		- echo '<span class="slider"></span>';
8566		- echo '</label>';
8567		-}
8568		-
8569		-public function mxchat_reset_chat_label_callback() {
8570		- // Editable label for the "Start new chat" menu item. plan ac2e81.
8571		- $options = get_option('mxchat_options', []);
8572		- $reset_chat_label = isset($options['reset_chat_label']) ? $options['reset_chat_label'] : '';
8573		-
8574		- printf(
8575		- '<input type="text" id="reset_chat_label" name="reset_chat_label" value="%s" placeholder="%s" class="regular-text" />',
8576		- esc_attr($reset_chat_label),
8577		- esc_attr__('Start new chat', 'mxchat')
8578		- );
8579		-}
8580		-
8581		-public function mxchat_popular_question_1_callback() {
8582		- // Load the full plugin options array
8583		- $all_options = get_option('mxchat_options', []);
8584		-
8585		- // Retrieve the specific option for popular_question_1
8586		- $popular_question_1 = isset($all_options['popular_question_1']) ? $all_options['popular_question_1'] : '';
8587		-
8588		- // Render the input field
8589		- printf(
8590		- '<input type="text" id="popular_question_1" name="popular_question_1" value="%s" placeholder="%s" class="regular-text" />',
8591		- esc_attr($popular_question_1),
8592		- esc_attr__('Enter Quick Question 1', 'mxchat')
8593		- );
8594		-}
8595		-
8596		-
8597		-public function mxchat_popular_question_2_callback() {
8598		- // Load the full plugin options array
8599		- $all_options = get_option('mxchat_options', []);
8600		-
8601		- // Retrieve the specific option for popular_question_2
8602		- $popular_question_2 = isset($all_options['popular_question_2']) ? $all_options['popular_question_2'] : '';
8603		-
8604		- // Render the input field
8605		- printf(
8606		- '<input type="text" id="popular_question_2" name="popular_question_2" value="%s" placeholder="%s" class="regular-text" />',
8607		- esc_attr($popular_question_2),
8608		- esc_attr__('Enter Quick Question 2', 'mxchat')
8609		- );
8610		-}
8611		-
8612		-
8613		-public function mxchat_popular_question_3_callback() {
8614		- // Load the full plugin options array
8615		- $all_options = get_option('mxchat_options', []);
8616		-
8617		- // Retrieve the specific option for popular_question_3
8618		- $popular_question_3 = isset($all_options['popular_question_3']) ? $all_options['popular_question_3'] : '';
8619		-
8620		- // Render the input field
8621		- printf(
8622		- '<input type="text" id="popular_question_3" name="popular_question_3" value="%s" placeholder="%s" class="regular-text" />',
8623		- esc_attr($popular_question_3),
8624		- esc_attr(__('Enter Quick Question 3', 'mxchat'))
8625		- );
8626		-}
8627		-
8628		-public function mxchat_additional_popular_questions_callback() {
8629		- $options = get_option('mxchat_options', []);
8630		- $additional_questions = isset($options['additional_popular_questions'])
8631		- ? $options['additional_popular_questions']
8632		- : get_option('additional_popular_questions', array());
8633		-
8634		- echo '<div id="mxchat-additional-questions-container">';
8635		- if (!empty($additional_questions)) {
8636		- foreach ($additional_questions as $index => $question) {
8637		- printf(
8638		- '<div class="mxchat-question-row">
8639		- <input type="text" name="additional_popular_questions[]"
8640		- value="%s"
8641		- placeholder="%s"
8642		- class="regular-text mxchat-question-input"
8643		- data-question-index="%d" />
8644		- <button type="button" class="button mxchat-remove-question"
8645		- aria-label="%s">%s</button>
8646		- </div>',
8647		- esc_attr($question),
8648		- esc_attr(sprintf(__('Enter Additional Quick Question %d', 'mxchat'), $index + 4)),
8649		- $index,
8650		- esc_attr(__('Remove question', 'mxchat')),
8651		- esc_html__('Remove', 'mxchat')
8652		- );
8653		- }
8654		- } else {
8655		- printf(
8656		- '<div class="mxchat-question-row">
8657		- <input type="text" name="additional_popular_questions[]"
8658		- value=""
8659		- placeholder="%s"
8660		- class="regular-text mxchat-question-input"
8661		- data-question-index="0" />
8662		- <button type="button" class="button mxchat-remove-question"
8663		- aria-label="%s">%s</button>
8664		- </div>',
8665		- esc_attr(__('Enter Additional Quick Question 4', 'mxchat')),
8666		- esc_attr(__('Remove question', 'mxchat')),
8667		- esc_html__('Remove', 'mxchat')
8668		- );
	1535	+ // If the feature is not activated, show the Pro feature overlay
	1536	+ if (!$this->is_activated) {
	1537	+ echo '<div class="pro-feature-overlay">';
	1538	+ echo '<a href="https://mxchat.ai/" target="_blank"><img src="' . plugin_dir_url(__FILE__) . '../images/pro-only-dark.png" alt="Pro Only" /></a>';
	1539	+ echo '</div>';
8669	1540	}
8670		- echo '</div>';
8671		- printf(
8672		- '<button type="button" class="button mxchat-add-question" aria-label="%s">%s</button>',
8673		- esc_attr(__('Add question', 'mxchat')),
8674		- esc_html__('Add Question', 'mxchat')
8675		- );
8676		-}
8677	1541
8678		-public function mxchat_brave_api_key_callback() {
8679		- $brave_api_key = isset($this->options['brave_api_key']) ? esc_attr($this->options['brave_api_key']) : '';
8680		- $nonce = wp_create_nonce('mxchat_autosave_nonce');
8681		-
8682		- echo '<div class="api-key-wrapper">';
8683		- echo sprintf(
8684		- '<input type="text" id="brave_api_key" name="brave_api_key" value="%s" class="regular-text mxchat-autosave-field mxchat-api-key-field" autocomplete="new-password" data-lpignore="true" data-form-type="other" data-nonce="%s" />',
8685		- $brave_api_key,
8686		- $nonce
8687		- );
8688		- echo '<button type="button" id="toggleBraveApiKeyVisibility">' . esc_html__('Show', 'mxchat') . '</button>';
8689	1542	echo '</div>';
8690		- echo '<p class="description">' . __('Required for Brave Search integration. Get your API key from Brave Search API.', 'mxchat') . '</p>';
8691	1543	}
8692	1544
8693		-public function mxchat_brave_image_count_callback() {
8694		- $brave_image_count = isset($this->options['brave_image_count'])
8695		- ? intval($this->options['brave_image_count'])
8696		- : 4;
8697		- $nonce = wp_create_nonce('mxchat_autosave_nonce');
8698	1545
8699		- echo '<div class="mxchat-field-wrapper">';
8700		- echo sprintf(
8701		- '<input type="number" id="brave_image_count" name="brave_image_count"
8702		- value="%d" min="1" max="6" class="small-text mxchat-autosave-field" data-nonce="%s" />',
8703		- $brave_image_count,
8704		- $nonce
8705		- );
8706		- echo '</div>';
8707		- echo '<p class="description">' . __('Select the number of images to return (1-6).', 'mxchat') . '</p>';
8708		-}
8709	1546
8710		-public function mxchat_brave_safe_search_callback() {
8711		- $brave_safe_search = isset($this->options['brave_safe_search'])
8712		- ? esc_attr($this->options['brave_safe_search'])
8713		- : 'strict';
8714		- $nonce = wp_create_nonce('mxchat_autosave_nonce');
8715	1547
8716		- echo '<div class="mxchat-field-wrapper">';
8717		- echo '<select id="brave_safe_search" name="brave_safe_search" class="mxchat-autosave-field" data-nonce="' . $nonce . '">';
8718		- echo sprintf(
8719		- '<option value="strict" %s>%s</option>',
8720		- selected($brave_safe_search, 'strict', false),
8721		- __('Strict', 'mxchat')
8722		- );
8723		- echo sprintf(
8724		- '<option value="off" %s>%s</option>',
8725		- selected($brave_safe_search, 'off', false),
8726		- __('Off', 'mxchat')
8727		- );
8728		- echo '</select>';
8729		- echo '</div>';
8730		- echo '<p class="description">' .
8731		- esc_html__('Set the Safe Search level for image searches. Brave Search only supports "Strict" and "Off" options.', 'mxchat') .
8732		- '</p>';
8733		-}
8734	1548
8735		-public function mxchat_brave_news_count_callback() {
8736		- $brave_news_count = isset($this->options['brave_news_count'])
8737		- ? intval($this->options['brave_news_count'])
8738		- : 3;
8739		- $nonce = wp_create_nonce('mxchat_autosave_nonce');
	1549	+public function mxchat_link_target_toggle_callback() {
	1550	+ // Check if the toggle is enabled in the options
	1551	+ $link_target_toggle = isset($this->options['link_target_toggle']) && $this->options['link_target_toggle'] === 'on' ? 'checked' : '';
8740	1552
8741		- echo '<div class="mxchat-field-wrapper">';
8742		- echo sprintf(
8743		- '<input type="number" id="brave_news_count" name="brave_news_count"
8744		- value="%d" min="1" max="10" class="small-text mxchat-autosave-field" data-nonce="%s" />',
8745		- $brave_news_count,
8746		- $nonce
8747		- );
8748		- echo '</div>';
8749		- echo '<p class="description">' . esc_html__('Select the number of news articles to retrieve (1-10).', 'mxchat') . '</p>';
8750		-}
8751		-
8752		-public function mxchat_brave_country_callback() {
8753		- $brave_country = isset($this->options['brave_country'])
8754		- ? esc_attr($this->options['brave_country'])
8755		- : 'us';
8756		- $nonce = wp_create_nonce('mxchat_autosave_nonce');
8757		-
8758		- echo '<div class="mxchat-field-wrapper">';
8759		- echo sprintf(
8760		- '<input type="text" id="brave_country" name="brave_country"
8761		- value="%s" maxlength="2" class="small-text mxchat-autosave-field" data-nonce="%s" />',
8762		- $brave_country,
8763		- $nonce
8764		- );
8765		- echo '</div>';
8766		- echo '<p class="description">' . esc_html__('Enter the country code (e.g., "us" for United States).', 'mxchat') . '</p>';
8767		-}
8768		-
8769		-public function mxchat_brave_language_callback() {
8770		- $brave_language = isset($this->options['brave_language'])
8771		- ? esc_attr($this->options['brave_language'])
8772		- : 'en';
8773		- $nonce = wp_create_nonce('mxchat_autosave_nonce');
8774		-
8775		- echo '<div class="mxchat-field-wrapper">';
8776		- echo sprintf(
8777		- '<input type="text" id="brave_language" name="brave_language"
8778		- value="%s" maxlength="2" class="small-text mxchat-autosave-field" data-nonce="%s" />',
8779		- $brave_language,
8780		- $nonce
8781		- );
8782		- echo '</div>';
8783		- echo '<p class="description">' . esc_html__('Enter the language code (e.g., "en" for English).', 'mxchat') . '</p>';
8784		-}
8785		-
8786		-
8787		-
8788		-
8789		-
8790		-// Section Callback
8791		-public function mxchat_pdf_intent_section_callback() {
8792		- echo '<p>' . esc_html__('Configure the intent settings for the Chat with PDF feature.', 'mxchat') . '</p>';
8793		-}
8794		-
8795		-public function mxchat_chat_toolbar_toggle_callback() {
8796		- // Get chat toolbar toggle value with fallback
8797		- $chat_toolbar_toggle = isset($this->options['chat_toolbar_toggle']) ? $this->options['chat_toolbar_toggle'] : 'off';
8798		- $checked = ($chat_toolbar_toggle === 'on') ? 'checked' : '';
8799		-
8800	1553	// Output the toggle switch
8801	1554	echo '<label class="toggle-switch">';
8802		- echo sprintf(
8803		- '<input type="checkbox" id="chat_toolbar_toggle" name="chat_toolbar_toggle" value="on" %s />',
8804		- esc_attr($checked)
8805		- );
8806		- echo '<span class="slider"></span>';
8807		- echo '</label>';
8808		-
8809		- echo '<p class="description">' . esc_html__('Enable to display the chat toolbar, adding two icons below the chatbot input field for uploading PDF and Word documents (default is hidden).', 'mxchat') . '</p>';
8810		-}
8811		-
8812		-/**
8813		- * Callback for PDF upload button toggle setting
8814		- */
8815		-public function mxchat_show_pdf_upload_button_callback() {
8816		- // Get toggle value with fallback
8817		- $show_pdf_button = isset($this->options['show_pdf_upload_button']) ? $this->options['show_pdf_upload_button'] : 'on';
8818		- $checked = ($show_pdf_button === 'on') ? 'checked' : '';
8819		-
8820		- // Output the toggle switch
8821		- echo '<label class="toggle-switch">';
8822		- echo sprintf(
8823		- '<input type="checkbox" id="show_pdf_upload_button" name="show_pdf_upload_button" value="on" %s />',
8824		- esc_attr($checked)
8825		- );
8826		- echo '<span class="slider"></span>';
8827		- echo '</label>';
8828		-
8829		- echo '<p class="description">' . esc_html__('Enable to show the PDF upload button in the chatbot toolbar. Disable to hide it.', 'mxchat') . '</p>';
8830		-}
8831		-
8832		-/**
8833		- * Callback for Word upload button toggle setting
8834		- */
8835		-public function mxchat_show_word_upload_button_callback() {
8836		- // Get toggle value with fallback
8837		- $show_word_button = isset($this->options['show_word_upload_button']) ? $this->options['show_word_upload_button'] : 'on';
8838		- $checked = ($show_word_button === 'on') ? 'checked' : '';
8839		-
8840		- // Output the toggle switch
8841		- echo '<label class="toggle-switch">';
8842		- echo sprintf(
8843		- '<input type="checkbox" id="show_word_upload_button" name="show_word_upload_button" value="on" %s />',
8844		- esc_attr($checked)
8845		- );
8846		- echo '<span class="slider"></span>';
8847		- echo '</label>';
8848		-
8849		- echo '<p class="description">' . esc_html__('Enable to show the Word document upload button in the chatbot toolbar. Disable to hide it.', 'mxchat') . '</p>';
8850		-}
8851		-
8852		-public function mxchat_pdf_intent_trigger_text_callback() {
8853		- $default_text = __("Please provide the URL to the PDF you'd like to discuss.", 'mxchat');
8854		-
8855		- echo sprintf(
8856		- '<textarea id="pdf_intent_trigger_text"
8857		- name="pdf_intent_trigger_text"
8858		- rows="3"
8859		- cols="50"
8860		- placeholder="%s">%s</textarea>',
8861		- esc_attr__('Enter trigger text', 'mxchat'),
8862		- isset($this->options['pdf_intent_trigger_text'])
8863		- ? esc_textarea($this->options['pdf_intent_trigger_text'])
8864		- : esc_textarea($default_text)
8865		- );
8866		- echo '<p class="description">' . esc_html__('Text displayed when the intent is triggered.', 'mxchat') . '</p>';
8867		-}
8868		-
8869		-public function mxchat_pdf_intent_success_text_callback() {
8870		- $default_text = __("I've processed the PDF. What questions do you have about it?", 'mxchat');
8871		-
8872		- echo sprintf(
8873		- '<textarea id="pdf_intent_success_text"
8874		- name="pdf_intent_success_text"
8875		- rows="3"
8876		- cols="50"
8877		- placeholder="%s">%s</textarea>',
8878		- esc_attr__('Enter success text', 'mxchat'),
8879		- isset($this->options['pdf_intent_success_text'])
8880		- ? esc_textarea($this->options['pdf_intent_success_text'])
8881		- : esc_textarea($default_text)
8882		- );
8883		- echo '<p class="description">' . esc_html__('Text displayed when the intent is successful.', 'mxchat') . '</p>';
8884		-}
8885		-
8886		-public function mxchat_pdf_intent_error_text_callback() {
8887		- $default_text = __("Sorry, I couldn't process the PDF. Please ensure it's a valid file.", 'mxchat');
8888		-
8889		- echo sprintf(
8890		- '<textarea id="pdf_intent_error_text"
8891		- name="pdf_intent_error_text"
8892		- rows="3"
8893		- cols="50"
8894		- placeholder="%s">%s</textarea>',
8895		- esc_attr__('Enter error text', 'mxchat'),
8896		- isset($this->options['pdf_intent_error_text'])
8897		- ? esc_textarea($this->options['pdf_intent_error_text'])
8898		- : esc_textarea($default_text)
8899		- );
8900		- echo '<p class="description">' . esc_html__('Text displayed when an error occurs during the intent.', 'mxchat') . '</p>';
8901		-}
8902		-
8903		-public function mxchat_pdf_max_pages_callback() {
8904		- $max_pages = isset($this->options['pdf_max_pages']) ? intval($this->options['pdf_max_pages']) : 69;
8905		-
8906		- echo sprintf(
8907		- '<input type="range"
8908		- id="pdf_max_pages"
8909		- name="pdf_max_pages"
8910		- min="1"
8911		- max="69"
8912		- value="%d"
8913		- class="range-slider" />',
8914		- esc_attr($max_pages)
8915		- );
8916		- echo '<span id="pdf_max_pages_output">' . esc_html($max_pages) . '</span>';
8917		- echo '<p class="description">' . esc_html__('Set the maximum number of document pages users can upload for processing. (1-69 pages)', 'mxchat') . '</p>';
8918		-}
8919		-
8920		-public function mxchat_live_agent_status_callback() {
8921		- // Always get fresh options instead of using cached $this->options
8922		- $fresh_options = get_option('mxchat_options');
8923		- $status = isset($fresh_options['live_agent_status']) ? $fresh_options['live_agent_status'] : 'off';
8924		-
8925		- echo '<label class="toggle-switch">';
8926		- echo sprintf(
8927		- '<input type="checkbox" id="live_agent_status" name="live_agent_status" value="on" %s />',
8928		- checked($status, 'on', false)
8929		- );
8930		- echo '<span class="slider"></span>';
8931		- echo '</label>';
8932		- echo '<label for="live_agent_status" class="mxchat-status-label">';
8933		- echo '<span class="status-text">' . ($status === 'on' ? esc_html__('Online', 'mxchat') : esc_html__('Offline', 'mxchat')) . '</span>';
8934		- echo '</label>';
8935		-}
8936		-
8937		-/**
8938		- * Availability-schedule editor (plans 8ccaa2 + 99d7a4).
8939		- *
8940		- * ONE callback, parameterized by channel ('slack' | 'telegram' via the
8941		- * add_settings_field $args) — the markup and CSS are shared, only the bound
8942		- * option and the helper text differ. Each channel's editor renders under its
8943		- * own Integrations tab and governs ONLY that channel's handoff. While the
8944		- * master toggle is off the day grid is inert and handoff availability stays
8945		- * governed solely by that channel's manual status toggle.
8946		- *
8947		- * The day inputs carry NO name attribute and are marked .mxchat-la-field so the
8948		- * generic autosave skips them; the editor JS folds them into the channel's
8949		- * hidden live_agent_schedule_<channel> input and fires one change, reusing the
8950		- * existing autosave transport rather than growing a second one. All hooks the
8951		- * JS needs are CLASSES scoped inside .mxchat-la-schedule, never ids — the
8952		- * markup exists twice on the page.
8953		- */
8954		-public function mxchat_live_agent_schedule_callback($args = array()) {
8955		- if (!class_exists('MxChat_Live_Agent_Schedule')) {
8956		- return;
8957		- }
8958		- $channel = (isset($args['channel']) && $args['channel'] === 'telegram') ? 'telegram' : 'slack';
8959		- $field = 'live_agent_schedule_' . $channel;
8960		- $sched = MxChat_Live_Agent_Schedule::get($channel);
8961		- $labels = MxChat_Live_Agent_Schedule::day_labels();
8962		- $tz = MxChat_Live_Agent_Schedule::timezone_label();
8963		- $enabled = !empty($sched['enabled']);
8964		- $channel_label = ($channel === 'telegram') ? __('Telegram', 'mxchat') : __('Slack', 'mxchat');
8965		- ?>
8966		- <div class="mxchat-la-schedule<?php echo $enabled ? ' is-active' : ''; ?>"
8967		- id="mxchat-la-schedule-<?php echo esc_attr($channel); ?>"
8968		- data-channel="<?php echo esc_attr($channel); ?>">
8969		- <label class="toggle-switch">
8970		- <input type="checkbox" id="<?php echo esc_attr($field); ?>_enabled"
8971		- class="mxchat-la-field mxchat-la-enabled" <?php checked($enabled); ?> />
8972		- <span class="slider"></span>
8973		- </label>
8974		- <label for="<?php echo esc_attr($field); ?>_enabled" class="mxchat-status-label">
8975		- <span class="status-text mxchat-la-status-text">
8976		- <?php echo $enabled
8977		- ? esc_html__('Scheduled hours', 'mxchat')
8978		- : esc_html__('Always available', 'mxchat'); ?>
8979		- </span>
8980		- </label>
8981		-
8982		- <div class="mxchat-la-days" aria-hidden="<?php echo $enabled ? 'false' : 'true'; ?>">
8983		- <?php foreach ($labels as $n => $label) :
8984		- $day = $sched['days'][$n];
8985		- $on = !empty($day['enabled']);
8986		- ?>
8987		- <div class="mxchat-la-day<?php echo $on ? ' is-on' : ''; ?>" data-day="<?php echo esc_attr($n); ?>">
8988		- <label class="mxchat-la-day-label">
8989		- <input type="checkbox" class="mxchat-la-field mxchat-la-day-enabled"
8990		- data-day="<?php echo esc_attr($n); ?>" <?php checked($on); ?> />
8991		- <span class="mxchat-la-day-name"><?php echo esc_html($label); ?></span>
8992		- </label>
8993		- <div class="mxchat-la-times">
8994		- <input type="time" class="mxchat-la-field mxchat-la-start"
8995		- data-day="<?php echo esc_attr($n); ?>"
8996		- value="<?php echo esc_attr($day['start']); ?>"
8997		- aria-label="<?php echo esc_attr(sprintf(__('%s start time', 'mxchat'), $label)); ?>" />
8998		- <span class="mxchat-la-dash">&ndash;</span>
8999		- <input type="time" class="mxchat-la-field mxchat-la-end"
9000		- data-day="<?php echo esc_attr($n); ?>"
9001		- value="<?php echo esc_attr($day['end']); ?>"
9002		- aria-label="<?php echo esc_attr(sprintf(__('%s end time', 'mxchat'), $label)); ?>" />
9003		- </div>
9004		- </div>
9005		- <?php endforeach; ?>
9006		- </div>
9007		-
9008		- <input type="hidden" name="<?php echo esc_attr($field); ?>" id="<?php echo esc_attr($field); ?>"
9009		- class="mxchat-la-hidden" value="<?php echo esc_attr(wp_json_encode($sched)); ?>" />
9010		- </div>
9011		- <p class="description">
9012		- <?php printf(
9013		- /* translators: 1: the handoff channel, e.g. Slack or Telegram; 2: the site's timezone, e.g. America/New_York */
9014		- esc_html__('When on, visitors are only offered a %1$s human handoff during these hours — outside them the chatbot keeps answering and never offers to fetch an agent. Applies to %1$s only. Times use the site timezone (%2$s). Set a day\'s end time earlier than its start for an overnight shift; identical start and end means all day.', 'mxchat'),
9015		- '<strong>' . esc_html($channel_label) . '</strong>',
9016		- '<strong>' . esc_html($tz) . '</strong>'
9017		- ); ?>
9018		- </p>
9019		- <?php
9020		-}
9021		-
9022		-public function mxchat_live_agent_away_message_callback() {
9023		- $message = isset($this->options['live_agent_away_message'])
9024		- ? $this->options['live_agent_away_message']
9025		- : __('Sorry, live agents are currently unavailable. I can continue helping you as an AI assistant.', 'mxchat');
9026		-
9027	1555	printf(
9028		- '<textarea id="live_agent_away_message" name="live_agent_away_message" rows="3" cols="50">%s</textarea>',
9029		- esc_textarea($message)
	1556	+ '<input type="checkbox" id="link_target_toggle" name="mxchat_options[link_target_toggle]" %s />',
	1557	+ esc_attr($link_target_toggle)
9030	1558	);
9031		- echo '<p class="description">' . esc_html__('Message shown when live agents are offline.', 'mxchat') . '</p>';
9032		-}
9033		-
9034		-public function mxchat_live_agent_notification_message_callback() {
9035		- $message = isset($this->options['live_agent_notification_message'])
9036		- ? $this->options['live_agent_notification_message']
9037		- : __('Live agent has been notified.', 'mxchat');
9038		-
9039		- printf(
9040		- '<textarea id="live_agent_notification_message" name="live_agent_notification_message" rows="3" cols="50">%s</textarea>',
9041		- esc_textarea($message)
9042		- );
9043		- echo '<p class="description">' . esc_html__('Message shown when live transfer activated.', 'mxchat') . '</p>';
9044		-}
9045		-
9046		-public function mxchat_live_agent_webhook_url_callback() {
9047		- $webhook_url = isset($this->options['live_agent_webhook_url'])
9048		- ? esc_url($this->options['live_agent_webhook_url'])
9049		- : esc_url(get_option('live_agent_webhook_url', ''));
9050		-
9051		- printf(
9052		- '<input type="password" id="live_agent_webhook_url" name="live_agent_webhook_url" value="%s" class="regular-text" />',
9053		- $webhook_url
9054		- );
9055		- echo '<button type="button" id="toggleWebhookUrlVisibility">' . esc_html__('Show', 'mxchat') . '</button>';
9056		- echo '<p class="description">' . esc_html__('Enter your Slack webhook URL for live agent notifications.', 'mxchat') . '</p>';
9057		-}
9058		-
9059		-public function mxchat_live_agent_secret_key_callback() {
9060		- printf(
9061		- '<input type="password" id="live_agent_secret_key" name="live_agent_secret_key" value="%s" class="regular-text" />',
9062		- isset($this->options['live_agent_secret_key']) ? esc_attr($this->options['live_agent_secret_key']) : ''
9063		- );
9064		- echo '<button type="button" id="toggleSecretKeyVisibility">' . esc_html__('Show', 'mxchat') . '</button>';
9065		- echo '<p class="description">' . esc_html__('Secret key for validating Slack requests. Keep this secure.', 'mxchat') . '</p>';
9066		-}
9067		-
9068		-public function mxchat_live_agent_bot_token_callback() {
9069		- printf(
9070		- '<input type="password" id="live_agent_bot_token" name="live_agent_bot_token" value="%s" class="regular-text" />',
9071		- isset($this->options['live_agent_bot_token']) ? esc_attr($this->options['live_agent_bot_token']) : ''
9072		- );
9073		- echo '<button type="button" id="toggleBotTokenVisibility">' . esc_html__('Show', 'mxchat') . '</button>';
9074		- echo '<p class="description">' . esc_html__('Your Slack Bot OAuth Token (starts with xoxb-). Keep this secure.', 'mxchat') . '</p>';
9075		-}
9076		-
9077		-public function mxchat_live_agent_user_ids_callback() {
9078		- $user_ids = isset($this->options['live_agent_user_ids'])
9079		- ? esc_textarea($this->options['live_agent_user_ids'])
9080		- : '';
9081		-
9082		- printf(
9083		- '<textarea id="live_agent_user_ids" name="live_agent_user_ids" rows="4" class="large-text">%s</textarea>',
9084		- $user_ids
9085		- );
9086		- echo '<p class="description">' . esc_html__('Enter Slack User IDs of agents who should be automatically invited to chat channels (one per line). Find user IDs in Slack profiles under "More" → "Copy member ID". Example: U1234567890', 'mxchat') . '</p>';
9087		-}
9088		-
9089		-public function mxchat_live_agent_shared_channel_callback() {
9090		- $value = isset($this->options['live_agent_shared_channel']) ? $this->options['live_agent_shared_channel'] : '';
9091		- printf(
9092		- '<input type="text" id="live_agent_shared_channel" name="live_agent_shared_channel" value="%s" class="regular-text" placeholder="#support or C0123456789" />',
9093		- esc_attr($value)
9094		- );
9095		- echo '<p class="description">' . esc_html__('Optional. Route ALL live agent handoffs into this one existing Slack channel — each conversation becomes its own thread there. Enter a channel ID (starts with C) or a #channel-name, and invite your bot to the channel first (/invite @YourBot). Agents reply inside a conversation\'s thread; !endchat inside the thread ends that chat. Leave blank to keep creating a separate chat- channel per conversation.', 'mxchat') . '</p>';
9096		-
9097		- // Surface the last failed handoff so a wrong name / missing invite is
9098		- // visible right where it gets fixed. A successful handoff clears this.
9099		- $shared_error = get_option('mxchat_slack_shared_channel_error');
9100		- if (!empty($shared_error['error']) && trim((string) $value) !== '' && ($shared_error['configured'] ?? '') === trim((string) $value)) {
9101		- echo '<p class="description"><strong>' . esc_html__('⚠ Last handoff could not reach this channel', 'mxchat') . '</strong> — '
9102		- . esc_html(sprintf(
9103		- /* translators: %s: Slack API error code */
9104		- __('Slack said "%s". Handoffs are falling back to per-conversation channels until this is fixed. Check the channel name or ID and make sure the bot has been invited to it.', 'mxchat'),
9105		- $shared_error['error']
9106		- )) . '</p>';
9107		- }
9108		-}
9109		-
9110		-public function mxchat_live_agent_archive_on_end_callback() {
9111		- $value = isset($this->options['live_agent_archive_on_end_toggle']) ? $this->options['live_agent_archive_on_end_toggle'] : 'off';
9112		- printf(
9113		- '<input type="checkbox" id="live_agent_archive_on_end_toggle" name="live_agent_archive_on_end_toggle" value="on" %s />',
9114		- checked('on', $value, false)
9115		- );
9116		- echo '<label for="live_agent_archive_on_end_toggle" class="mxchat-status-label">' . esc_html__('Archive the conversation\'s chat- channel when an agent ends the chat with !endchat', 'mxchat') . '</label>';
9117		- echo '<p class="description">' . esc_html__('Keeps your Slack sidebar tidy on busy sites — each ended conversation\'s channel is archived instead of living forever. Archived channels stay searchable in Slack, so the record is never lost. Only applies to per-conversation chat- channels; a Shared Handoff Channel is never archived. If a returning visitor requests an agent again, a fresh channel is created automatically.', 'mxchat') . '</p>';
9118		-}
9119		-
9120		-/**
9121		- * Telegram Integration Callbacks
9122		- */
9123		-public function mxchat_telegram_section_callback() {
9124		- echo '<p>' . esc_html__('Configure Telegram integration for live agent support.', 'mxchat') . '</p>';
9125		-}
9126		-
9127		-public function mxchat_telegram_status_callback() {
9128		- $fresh_options = get_option('mxchat_options');
9129		- $status = isset($fresh_options['telegram_status']) ? $fresh_options['telegram_status'] : 'off';
9130		-
9131		- echo '<label class="toggle-switch">';
9132		- echo sprintf(
9133		- '<input type="checkbox" id="telegram_status" name="telegram_status" value="on" %s />',
9134		- checked($status, 'on', false)
9135		- );
9136	1559	echo '<span class="slider"></span>';
9137	1560	echo '</label>';
9138		- echo '<label for="telegram_status" class="mxchat-status-label">';
9139		- echo '<span class="status-text">' . ($status === 'on' ? esc_html__('Online', 'mxchat') : esc_html__('Offline', 'mxchat')) . '</span>';
9140		- echo '</label>';
	1561	+ echo '<p class="description">Enable to open links in a new tab (default is to open in the same tab).</p>';
9141	1562	}
9142	1563
9143		-public function mxchat_telegram_notification_message_callback() {
9144		- $message = isset($this->options['telegram_notification_message'])
9145		- ? $this->options['telegram_notification_message']
9146		- : __("I've notified a support agent. Please allow a moment for them to respond.", 'mxchat');
9147	1564
9148		- printf(
9149		- '<textarea id="telegram_notification_message" name="telegram_notification_message" rows="3" cols="50">%s</textarea>',
9150		- esc_textarea($message)
9151		- );
9152		- echo '<p class="description">' . esc_html__('Message shown when live transfer activated.', 'mxchat') . '</p>';
9153		-}
9154	1565
9155		-public function mxchat_telegram_away_message_callback() {
9156		- $message = isset($this->options['telegram_away_message'])
9157		- ? $this->options['telegram_away_message']
9158		- : __('Sorry, live agents are currently unavailable. I can continue helping you as an AI assistant.', 'mxchat');
9159	1566
9160		- printf(
9161		- '<textarea id="telegram_away_message" name="telegram_away_message" rows="3" cols="50">%s</textarea>',
9162		- esc_textarea($message)
9163		- );
9164		- echo '<p class="description">' . esc_html__('Message shown when live agents are offline.', 'mxchat') . '</p>';
9165		-}
	1567	+ public function mxchat_enqueue_admin_assets() {
	1568	+ wp_enqueue_style('wp-color-picker');
9166	1569
9167		-public function mxchat_telegram_bot_token_callback() {
9168		- printf(
9169		- '<input type="password" id="telegram_bot_token" name="telegram_bot_token" value="%s" class="regular-text" />',
9170		- isset($this->options['telegram_bot_token']) ? esc_attr($this->options['telegram_bot_token']) : ''
9171		- );
9172		- echo '<button type="button" class="button button-secondary" onclick="var f=document.getElementById(\'telegram_bot_token\'); if(f.type===\'password\'){f.type=\'text\';this.textContent=\'' . esc_js(__('Hide', 'mxchat')) . '\';}else{f.type=\'password\';this.textContent=\'' . esc_js(__('Show', 'mxchat')) . '\';}">' . esc_html__('Show', 'mxchat') . '</button>';
9173		- echo '<p class="description">' . esc_html__('Your Telegram Bot Token from @BotFather (e.g., 123456789:ABCdefGhIJKlmNoPQRsTUVwxyZ).', 'mxchat') . '</p>';
9174		-}
	1570	+ // Get the plugin version or file modification time for cache busting
	1571	+ $plugin_version = '1.1.2'; // Replace this with your plugin's version
9175	1572
9176		-public function mxchat_telegram_group_id_callback() {
9177		- printf(
9178		- '<input type="text" id="telegram_group_id" name="telegram_group_id" value="%s" class="regular-text" />',
9179		- isset($this->options['telegram_group_id']) ? esc_attr($this->options['telegram_group_id']) : ''
9180		- );
9181		- echo '<p class="description">' . esc_html__('Your Telegram supergroup ID (starts with -100). The group must have forum topics enabled.', 'mxchat') . '</p>';
9182		-}
	1573	+ // File paths
	1574	+ $color_picker_js_path = plugin_dir_path(__FILE__) . '../js/my-color-picker.js';
	1575	+ $embedding_check_js_path = plugin_dir_path(__FILE__) . '../js/embedding-check.js';
	1576	+ $admin_css_path = plugin_dir_path(__FILE__) . '../css/admin-style.css';
	1577	+ $transcripts_js_path = plugin_dir_path(__FILE__) . '../js/mxchat_transcripts.js';
9183	1578
9184		-public function mxchat_telegram_webhook_secret_callback() {
9185		- $secret = isset($this->options['telegram_webhook_secret']) ? $this->options['telegram_webhook_secret'] : '';
	1579	+ // Check if files exist and get modification times
	1580	+ $color_picker_version = file_exists($color_picker_js_path) ? filemtime($color_picker_js_path) : $plugin_version;
	1581	+ $embedding_check_version = file_exists($embedding_check_js_path) ? filemtime($embedding_check_js_path) : $plugin_version;
	1582	+ $admin_css_version = file_exists($admin_css_path) ? filemtime($admin_css_path) : $plugin_version;
	1583	+ $transcripts_js_version = file_exists($transcripts_js_path) ? filemtime($transcripts_js_path) : $plugin_version;
9186	1584
9187		- // Auto-generate secret if empty
9188		- if (empty($secret)) {
9189		- $secret = wp_generate_password(64, false, false);
9190		- $options = get_option('mxchat_options', []);
9191		- $options['telegram_webhook_secret'] = $secret;
9192		- update_option('mxchat_options', $options);
9193		- $this->options['telegram_webhook_secret'] = $secret;
9194		- }
	1585	+ // Enqueue scripts and styles with corrected paths
	1586	+ wp_enqueue_script(
	1587	+ 'mxchat-color-picker',
	1588	+ plugin_dir_url(__FILE__) . '../js/my-color-picker.js',
	1589	+ array('wp-color-picker'),
	1590	+ $color_picker_version,
	1591	+ true
	1592	+ );
9195	1593
9196		- printf(
9197		- '<input type="password" id="telegram_webhook_secret" name="telegram_webhook_secret" value="%s" class="regular-text" />',
9198		- esc_attr($secret)
9199		- );
9200		- echo '<button type="button" class="button button-secondary" onclick="var f=document.getElementById(\'telegram_webhook_secret\'); if(f.type===\'password\'){f.type=\'text\';this.textContent=\'' . esc_js(__('Hide', 'mxchat')) . '\';}else{f.type=\'password\';this.textContent=\'' . esc_js(__('Show', 'mxchat')) . '\';}">' . esc_html__('Show', 'mxchat') . '</button>';
9201		- echo '<p class="description">' . esc_html__('Secret token for webhook verification. Use this when setting up your Telegram webhook with the secret_token parameter.', 'mxchat') . '</p>';
9202		-}
	1594	+ wp_enqueue_script(
	1595	+ 'mxchat-embedding-check',
	1596	+ plugin_dir_url(__FILE__) . '../js/embedding-check.js',
	1597	+ array(),
	1598	+ $embedding_check_version,
	1599	+ true
	1600	+ );
9203	1601
9204		-public function mxchat_similarity_threshold_callback() {
9205		- // Load from mxchat_options array
9206		- $options = get_option('mxchat_options', []);
	1602	+ wp_enqueue_script(
	1603	+ 'mxchat-transcripts-js',
	1604	+ plugin_dir_url(__FILE__) . '../js/mxchat_transcripts.js',
	1605	+ array('jquery'),
	1606	+ $transcripts_js_version,
	1607	+ true
	1608	+ );
9207	1609
9208		- // Get value from options array with default of 35
9209		- $threshold = isset($options['similarity_threshold']) ? $options['similarity_threshold'] : 35;
	1610	+ wp_enqueue_script(
	1611	+ 'mxchat-admin-js',
	1612	+ plugin_dir_url(__FILE__) . '../js/mxchat-admin.js',
	1613	+ array('jquery'),
	1614	+ $plugin_version,
	1615	+ true
	1616	+ );
9210	1617
9211		- echo '<div class="slider-container">';
9212		- echo sprintf(
9213		- '<input type="range"
9214		- id="similarity_threshold"
9215		- name="similarity_threshold"
9216		- min="20"
9217		- max="85"
9218		- step="1"
9219		- value="%s"
9220		- class="range-slider" />',
9221		- esc_attr($threshold)
9222		- );
9223		- echo sprintf(
9224		- '<span id="threshold_value" class="range-value">%s</span>',
9225		- esc_html($threshold)
9226		- );
9227		- echo '</div>';
9228		-}
	1618	+ wp_localize_script('mxchat-admin-js', 'mxchatAdmin', array(
	1619	+ 'ajax_url' => admin_url('admin-ajax.php'),
	1620	+ 'nonce' => wp_create_nonce('mxchat_activate_license_nonce'),
	1621	+ ));
9229	1622
9230		-public function mxchat_max_input_length_callback() {
9231		- // Load from mxchat_options array (plan a3fae2 part C).
9232		- $options = get_option('mxchat_options', []);
	1623	+ wp_enqueue_style(
	1624	+ 'mxchat-admin-css',
	1625	+ plugin_dir_url(__FILE__) . '../css/admin-style.css',
	1626	+ array(),
	1627	+ $admin_css_version
	1628	+ );
9233	1629
9234		- // 0 = unlimited (default — preserves current behavior, no cap).
9235		- $max_input_length = isset($options['max_input_length']) ? intval($options['max_input_length']) : 0;
9236		-
9237		- echo sprintf(
9238		- '<input type="number"
9239		- id="max_input_length"
9240		- name="max_input_length"
9241		- min="0"
9242		- max="100000"
9243		- step="1"
9244		- value="%s"
9245		- placeholder="0"
9246		- class="mxch-input mxch-input-sm" />',
9247		- esc_attr($max_input_length)
9248		- );
9249		-}
9250		-
9251		-public function mxchat_rag_sources_limit_callback() {
9252		- // Load from mxchat_options array
9253		- $options = get_option('mxchat_options', []);
9254		-
9255		- // Get value from options array with default of 3
9256		- $rag_sources_limit = isset($options['rag_sources_limit']) ? intval($options['rag_sources_limit']) : 3;
9257		-
9258		- echo '<div class="slider-container">';
9259		- echo sprintf(
9260		- '<input type="range"
9261		- id="rag_sources_limit"
9262		- name="rag_sources_limit"
9263		- min="3"
9264		- max="10"
9265		- step="1"
9266		- value="%s"
9267		- class="range-slider" />',
9268		- esc_attr($rag_sources_limit)
9269		- );
9270		- echo sprintf(
9271		- '<span id="rag_sources_limit_value" class="range-value">%s</span>',
9272		- esc_html($rag_sources_limit)
9273		- );
9274		- echo '</div>';
9275		-}
9276		-
9277		-public function mxchat_rag_chunks_limit_callback() {
9278		- // Load from mxchat_options array
9279		- $options = get_option('mxchat_options', []);
9280		-
9281		- // Get value from options array with default of 15
9282		- $rag_chunks_limit = isset($options['rag_chunks_limit']) ? intval($options['rag_chunks_limit']) : 15;
9283		-
9284		- echo '<div class="slider-container">';
9285		- echo sprintf(
9286		- '<input type="range"
9287		- id="rag_chunks_limit"
9288		- name="rag_chunks_limit"
9289		- min="8"
9290		- max="20"
9291		- step="1"
9292		- value="%s"
9293		- class="range-slider" />',
9294		- esc_attr($rag_chunks_limit)
9295		- );
9296		- echo sprintf(
9297		- '<span id="rag_chunks_limit_value" class="range-value">%s</span>',
9298		- esc_html($rag_chunks_limit)
9299		- );
9300		- echo '</div>';
9301		-}
9302		-
9303		-/**
9304		- * Add body class on the Onboarding wizard page so CSS-only chrome surgery
9305		- * (collapsing the WP admin sidebar) only applies on this page.
9306		- * Plan: plan-mxchat-20260527-905439.
9307		- */
9308		-public function mxchat_add_onboarding_body_class($classes) {
9309		- if (isset($_GET['page']) && $_GET['page'] === 'mxchat-onboarding') {
9310		- $classes .= ' mxchat-onboarding-focused';
	1630	+ // Use wp_json_encode for localizing script
	1631	+ wp_localize_script('mxchat-color-picker', 'mxchatStyleSettings', array(
	1632	+ 'ajax_url' => admin_url('admin-ajax.php'),
	1633	+ 'link_target_toggle' => $this->options['link_target_toggle'] ?? 'off',
	1634	+ 'user_message_bg_color' => $this->options['user_message_bg_color'] ?? '#fff',
	1635	+ 'user_message_font_color' => $this->options['user_message_font_color'] ?? '#212121',
	1636	+ 'bot_message_bg_color' => $this->options['bot_message_bg_color'] ?? '#212121',
	1637	+ 'bot_message_font_color' => $this->options['bot_message_font_color'] ?? '#fff',
	1638	+ 'top_bar_bg_color' => $this->options['top_bar_bg_color'] ?? '#212121',
	1639	+ 'send_button_font_color' => $this->options['send_button_font_color'] ?? '#212121',
	1640	+ 'close_button_color' => $this->options['close_button_color'] ?? '#fff',
	1641	+ 'chatbot_background_color' => $this->options['chatbot_background_color'] ?? '#212121',
	1642	+ 'icon_color' => $this->options['icon_color'] ?? '#fff',
	1643	+ 'chat_input_font_color' => $this->options['chat_input_font_color'] ?? '#212121'
	1644	+ ));
9311	1645	}
9312		- return $classes;
9313		-}
9314	1646
9315		-public function mxchat_enqueue_admin_assets($hook_suffix = '') {
9316		- // Authorization gate (plan-mxchat-20260731-c63fb6). Previously the ONLY
9317		- // guard here was the strpos() on $_GET['page'] below — which is
9318		- // attacker-controlled — so ANY logged-in user (Subscriber included) could
9319		- // load a page they are legitimately allowed to see, e.g.
9320		- // /wp-admin/profile.php?page=mxchat, and receive every nonce this method
9321		- // localizes. Three of the handlers behind those nonces verified the nonce
9322		- // but checked no capability. Every MxChat menu page is registered
9323		- // 'manage_options' (see mxchat_add_admin_menu), so this is a no-op for
9324		- // legitimate users.
9325		- if (!current_user_can('manage_options')) {
9326		- return;
9327		- }
	1647	+ public function mxchat_sanitize($input) {
	1648	+ $new_input = array();
9328	1649
9329		- // Get plugin version
9330		- $version = MXCHAT_VERSION;
	1650	+ if (isset($input['api_key'])) {
	1651	+ $new_input['api_key'] = sanitize_text_field($input['api_key']);
	1652	+ }
9331	1653
9332		- // Use file modification time for development (remove in production)
9333		- if (defined('WP_DEBUG') && WP_DEBUG) {
9334		- $version = filemtime(plugin_dir_path(__FILE__) . '../mxchat-basic.php');
9335		- }
	1654	+ if (isset($input['enable_woocommerce_integration'])) {
	1655	+ $new_input['enable_woocommerce_integration'] = isset($input['enable_woocommerce_integration']) && $input['enable_woocommerce_integration'] === '1' ? '1' : '0';
9336	1656
9337		- $current_page = isset($_GET['page']) ? sanitize_key(wp_unslash($_GET['page'])) : '';
9338		- $plugin_url = plugin_dir_url(__FILE__) . '../';
	1657	+ }
9339	1658
9340		- // Only load on MxChat pages. Prefer the server-derived $hook_suffix that
9341		- // admin_enqueue_scripts passes us — unlike $_GET['page'] it cannot be
9342		- // forged onto a screen MxChat does not own. Falls back to the legacy
9343		- // $_GET check only when the hook is unavailable (direct/legacy callers).
9344		- if ($hook_suffix !== '') {
9345		- if (strpos($hook_suffix, 'mxchat') === false) {
9346		- return;
	1659	+ if (isset($input['privacy_toggle'])) {
	1660	+ $new_input['privacy_toggle'] = $input['privacy_toggle'];
9347	1661	}
9348		- } elseif (strpos($current_page, 'mxchat') === false) {
9349		- return;
9350		- }
9351	1662
9352		- // Always load these on all MxChat pages
9353		- $this->enqueue_core_admin_assets($plugin_url, $version);
9354		- $this->enqueue_page_specific_assets($current_page, $plugin_url, $version);
9355		- $this->localize_admin_scripts($current_page);
9356		-}
9357		-private function enqueue_core_admin_assets($plugin_url, $version) {
9358		- // Core admin styles
9359		- wp_enqueue_style('mxchat-admin-css', $plugin_url . 'css/admin-style.css', array(), $version);
9360		- wp_enqueue_style('mxchat-knowledge-css', $plugin_url . 'css/knowledge-style.css', array(), $version);
	1663	+ if (isset($input['complianz_toggle'])) {
	1664	+ $new_input['complianz_toggle'] = $input['complianz_toggle'];
	1665	+ }
9361	1666
9362		- // New sidebar navigation styles (for main settings page)
9363		- wp_enqueue_style('mxchat-admin-sidebar-css', $plugin_url . 'css/admin-sidebar.css', array(), $version);
	1667	+ // Handle custom privacy text input
	1668	+ if (isset($input['privacy_text'])) {
	1669	+ // Allow basic HTML for links
	1670	+ $new_input['privacy_text'] = wp_kses_post($input['privacy_text']);
	1671	+ }
9364	1672
9365		- // Core admin scripts
9366		- wp_enqueue_script('mxchat-admin-js', $plugin_url . 'js/mxchat-admin.js', array('jquery'), $version, true);
9367		-}
9368		-private function enqueue_page_specific_assets($current_page, $plugin_url, $version) {
9369		- switch ($current_page) {
9370		- case 'mxchat-prompts':
9371		- // Knowledge processing page assets
9372		- wp_enqueue_style('mxchat-content-selector-css', $plugin_url . 'css/content-selector.css', array(), $version);
9373		- wp_enqueue_script('mxchat-content-selector-js', $plugin_url . 'js/content-selector.js', array('jquery'), $version, true);
9374		- // Add the knowledge processing script (common script needed for WordPress dismiss functionality)
9375		- wp_enqueue_script('mxchat-knowledge-processing', $plugin_url . 'js/knowledge-processing.js', array('jquery', 'common'), $version, true);
9376		- // Per-entry "View indexed content" inspector (plan-d8cb4b) reuses the
9377		- // Testing tab's match-card / chunk-detail components, which are scoped
9378		- // under .mxch-testing-results. Load that stylesheet here so the inspector
9379		- // modal renders identically to the Testing tab.
9380		- wp_enqueue_style('mxchat-admin-testing-css', $plugin_url . 'css/admin-testing-tab.css', array('mxchat-admin-sidebar-css'), $version);
9381		- break;
9382	1673
9383		- case 'mxchat-transcripts':
9384		- // Load admin sidebar CSS first (shared styles for sidebar navigation)
9385		- wp_enqueue_style('mxchat-admin-sidebar-css', $plugin_url . 'css/admin-sidebar.css', array(), $version);
9386		- // Load transcripts-specific styles
9387		- wp_enqueue_style('mxchat-chat-transcripts-css', $plugin_url . 'css/chat-transcripts.css', array('mxchat-admin-sidebar-css'), $version);
9388		- wp_enqueue_script('mxchat-transcripts-js', $plugin_url . 'js/mxchat_transcripts.js', array('jquery'), $version, true);
9389		- break;
	1674	+ if (isset($input['enable_woocommerce_order_access'])) {
	1675	+ $new_input['enable_woocommerce_order_access'] = isset($input['enable_woocommerce_order_access']) && $input['enable_woocommerce_order_access'] === '1' ? '1' : '0';
9390	1676
9391		- case 'mxchat-actions':
9392		- // Load admin sidebar CSS first (shared styles for sidebar navigation)
9393		- wp_enqueue_style('mxchat-admin-sidebar-css', $plugin_url . 'css/admin-sidebar.css', array(), $version);
9394		- // Load actions-specific styles
9395		- wp_enqueue_style('mxchat-actions-css', $plugin_url . 'css/actions.css', array('mxchat-admin-sidebar-css'), $version);
9396		- wp_enqueue_script('mxchat-actions-js', $plugin_url . 'js/mxchat_actions.js', array('jquery'), $version, true);
	1677	+ }
9397	1678
9398		- // Localize script data for actions page
9399		- $is_activated = get_option('mxchat_pro_license_status') === 'active';
9400		- wp_localize_script('mxchat-actions-js', 'mxchActionsData', array(
9401		- 'ajaxUrl' => admin_url('admin-ajax.php'),
9402		- 'nonce' => wp_create_nonce('mxchat_actions_nonce'),
9403		- 'addNonce' => wp_create_nonce('mxchat_add_intent_nonce'),
9404		- 'editNonce' => wp_create_nonce('mxchat_edit_intent'),
9405		- 'deleteNonce' => wp_create_nonce('mxchat_delete_intent_nonce'),
9406		- 'toggleNonce' => wp_create_nonce('mxchat_actions_nonce'),
9407		- 'addPhraseNonce' => wp_create_nonce('mxchat_add_phrase_nonce'),
9408		- 'deletePhraseNonce' => wp_create_nonce('mxchat_delete_phrase_nonce'),
9409		- 'getPhrasesNonce' => wp_create_nonce('mxchat_get_phrases_nonce'),
9410		- 'deleteLegacyNonce' => wp_create_nonce('mxchat_delete_legacy_nonce'),
9411		- 'isActivated' => $is_activated,
9412		- 'i18n' => array(
9413		- 'confirmDelete' => __('Are you sure you want to delete this trigger phrase?', 'mxchat'),
9414		- 'confirmBulkDelete' => __('Are you sure you want to delete the selected trigger phrases?', 'mxchat'),
9415		- 'saving' => __('Saving...', 'mxchat'),
9416		- 'saved' => __('Saved successfully!', 'mxchat'),
9417		- 'error' => __('An error occurred. Please try again.', 'mxchat'),
9418		- 'proRequired' => __('This feature requires MxChat Pro.', 'mxchat'),
9419		- 'addonRequired' => __('This feature requires an add-on.', 'mxchat')
9420		- )
9421		- ));
9422		- break;
	1679	+ if (isset($input['system_prompt_instructions'])) {
	1680	+ $new_input['system_prompt_instructions'] = sanitize_textarea_field($input['system_prompt_instructions']);
	1681	+ }
9423	1682
9424		- case 'mxchat-activation':
9425		- // Load admin sidebar CSS first (shared styles for sidebar navigation)
9426		- wp_enqueue_style('mxchat-admin-sidebar-css', $plugin_url . 'css/admin-sidebar.css', array(), $version);
9427		- // Load pro page-specific styles
9428		- wp_enqueue_style('mxchat-pro-css', $plugin_url . 'css/admin-pro.css', array('mxchat-admin-sidebar-css'), $version);
9429		- // Load pro page JavaScript
9430		- wp_enqueue_script('mxchat-pro-js', $plugin_url . 'js/mxchat_pro.js', array('jquery'), $version, true);
9431		- // Load activation script for license activation/deactivation
9432		- wp_enqueue_script('mxchat-activation-js', $plugin_url . 'js/activation-script.js', array('jquery'), $version, true);
9433		- break;
	1683	+ if (isset($input['mxchat_pro_email'])) {
	1684	+ $new_input['mxchat_pro_email'] = sanitize_email($input['mxchat_pro_email']);
	1685	+ }
9434	1686
9435		- case 'mxchat-content':
9436		- // Load admin sidebar CSS (shared styles for sidebar navigation)
9437		- wp_enqueue_style('mxchat-admin-sidebar-css', $plugin_url . 'css/admin-sidebar.css', array(), $version);
9438		- // Load content page-specific styles
9439		- wp_enqueue_style('mxchat-content-css', $plugin_url . 'css/admin-content.css', array('mxchat-admin-sidebar-css'), $version);
9440		- // Load content page JavaScript
9441		- wp_enqueue_script('mxchat-content-js', $plugin_url . 'js/mxchat-content.js', array('jquery'), $version, true);
9442		- break;
	1687	+ if (isset($input['mxchat_activation_key'])) {
	1688	+ $new_input['mxchat_activation_key'] = sanitize_text_field($input['mxchat_activation_key']);
	1689	+ }
9443	1690
9444		- case 'mxchat-api-access':
9445		- // Shared sidebar shell (CSS + JS for tab switching / mobile menu / copy buttons).
9446		- wp_enqueue_style('mxchat-admin-sidebar-css', $plugin_url . 'css/admin-sidebar.css', array(), $version);
9447		- wp_enqueue_script('mxchat-admin-sidebar-js', $plugin_url . 'js/admin-sidebar.js', array(), $version, true);
9448		- wp_localize_script('mxchat-admin-sidebar-js', 'MxChatAdminSidebarI18n', array(
9449		- 'copied' => __('Copied', 'mxchat'),
9450		- ));
9451		- break;
	1691	+ if (isset($input['append_to_body'])) {
	1692	+ $new_input['append_to_body'] = $input['append_to_body'] === 'on' ? 'on' : 'off';
	1693	+ }
9452	1694
9453		- case 'mxchat-max':
9454		- case 'mxchat-onboarding':
9455		- // Onboarding page — uses the shared admin shell PLUS the wizard
9456		- // overlay (plan-905439). admin-onboarding-wizard.css scopes the
9457		- // WP-chrome surgery to body.mxchat-onboarding-focused so it only
9458		- // applies on THIS page. The body class is added below via the
9459		- // admin_body_class filter.
9460		- wp_enqueue_style('mxchat-admin-sidebar-css', $plugin_url . 'css/admin-sidebar.css', array(), $version);
9461		- wp_enqueue_script('mxchat-admin-sidebar-js', $plugin_url . 'js/admin-sidebar.js', array(), $version, true);
9462		- wp_localize_script('mxchat-admin-sidebar-js', 'MxChatAdminSidebarI18n', array(
9463		- 'copied' => __('Copied', 'mxchat'),
9464		- ));
9465		- // admin-style.css provides the .mxchat-instructions-modal-* classes
9466		- // the new Behavior step's "View Sample Instructions" modal needs.
9467		- // Enqueued AFTER admin-sidebar.css but BEFORE the wizard overlay
9468		- // so the wizard's own rules win where they collide. plan-a2e4d6.
9469		- wp_enqueue_style('mxchat-admin-style-css', $plugin_url . 'css/admin-style.css', array('mxchat-admin-sidebar-css'), $version);
9470		- wp_enqueue_style('mxchat-admin-onboarding-wizard-css', $plugin_url . 'css/admin-onboarding-wizard.css', array('mxchat-admin-sidebar-css', 'mxchat-admin-style-css'), $version);
9471		- wp_enqueue_script('mxchat-admin-onboarding-wizard-js', $plugin_url . 'js/admin-onboarding-wizard.js', array(), $version, true);
9472		- break;
9473		- default:
9474		- // Settings page: load the shared shell JS for #hash deep-linking
9475		- // to tabs (plan 4ede16). The page's own inline nav script owns
9476		- // clicks/accordion behaviour; the shell script adds load +
9477		- // hashchange activation and replaceState so plain href="#tab"
9478		- // anchors and shared URLs land on the right tab. Kept inside the
9479		- // default case because the settings page also needs everything
9480		- // below (Testing tab chatbot + streaming assets).
9481		- if ($current_page === 'mxchat-settings') {
9482		- wp_enqueue_script('mxchat-admin-sidebar-js', $plugin_url . 'js/admin-sidebar.js', array(), $version, true);
9483		- wp_localize_script('mxchat-admin-sidebar-js', 'MxChatAdminSidebarI18n', array(
9484		- 'copied' => __('Copied', 'mxchat'),
9485		- ));
9486		- }
	1695	+ if (isset($input['top_bar_title'])) {
	1696	+ $new_input['top_bar_title'] = sanitize_text_field($input['top_bar_title']);
	1697	+ }
9487	1698
9488		- wp_enqueue_script(
9489		- 'mxchat-test-streaming-js',
9490		- $plugin_url . 'js/mxchat-test-streaming.js',
9491		- ['jquery'],
9492		- $version,
9493		- true
9494		- );
	1699	+ if (isset($input['intro_message'])) {
	1700	+ $new_input['intro_message'] = sanitize_text_field($input['intro_message']);
	1701	+ }
9495	1702
9496		- wp_localize_script('mxchat-test-streaming-js', 'mxchatTestStreamingAjax', [
9497		- 'ajax_url' => admin_url('admin-ajax.php'),
9498		- 'nonce' => wp_create_nonce('mxchat_test_streaming_nonce'),
9499		- 'settings_nonce' => wp_create_nonce('mxchat_save_setting_nonce')
9500		- ]);
	1703	+ if (isset($input['input_copy'])) {
	1704	+ $new_input['input_copy'] = sanitize_text_field($input['input_copy']);
	1705	+ }
9501	1706
9502		- // Testing Tab: Load chatbot assets for the embedded testing chatbot
9503		- wp_enqueue_style('mxchat-chat-css', $plugin_url . 'css/chat-style.css', array(), $version);
9504		- wp_enqueue_style('mxchat-admin-testing-css', $plugin_url . 'css/admin-testing-tab.css', array('mxchat-admin-sidebar-css', 'mxchat-chat-css'), $version);
9505	1707
9506		- wp_enqueue_script('mxchat-chat-js', $plugin_url . 'js/chat-script.js', array('jquery'), $version, true);
9507		- wp_enqueue_script('mxchat-admin-testing-js', $plugin_url . 'js/admin-testing-tab.js', array('jquery', 'mxchat-chat-js'), $version, true);
9508		-
9509		- // Allow add-ons to enqueue their public CSS/JS for the testing chatbot
9510		- do_action('mxchat_enqueue_testing_tab_assets');
9511		-
9512		- // Localize mxchatChat for the chatbot JS (same settings as frontend)
9513		- $options = get_option('mxchat_options', array());
9514		- $prompts_options = get_option('mxchat_prompts_options', array());
9515		- $theme_options = get_option('mxchat_theme_options', array());
9516		- $ai_theme_active = !empty($theme_options['active_ai_theme_css']);
9517		- $has_bot_theme_assignments = !empty($theme_options['bot_theme_assignments']);
9518		- $skip_inline_colors = $ai_theme_active || $has_bot_theme_assignments;
9519		-
9520		- wp_localize_script('mxchat-chat-js', 'mxchatChat', array(
9521		- 'ajax_url' => admin_url('admin-ajax.php'),
9522		- 'nonce' => wp_create_nonce('mxchat_chat_nonce'),
9523		- 'model' => isset($options['model']) ? $options['model'] : 'gpt-5.6-sol',
9524		- 'enable_streaming_toggle' => isset($options['enable_streaming_toggle']) ? $options['enable_streaming_toggle'] : 'on',
9525		- 'contextual_awareness_toggle' => isset($options['contextual_awareness_toggle']) ? $options['contextual_awareness_toggle'] : 'off',
9526		- 'link_target_toggle' => $options['link_target_toggle'] ?? 'off',
9527		- 'rate_limit_message' => $options['rate_limit_message'] ?? 'Rate limit exceeded. Please try again later.',
9528		- 'complianz_toggle' => isset($options['complianz_toggle']) && $options['complianz_toggle'] === 'on',
9529		- 'user_message_bg_color' => $options['user_message_bg_color'] ?? '#fff',
9530		- 'user_message_font_color' => $options['user_message_font_color'] ?? '#212121',
9531		- 'bot_message_bg_color' => $options['bot_message_bg_color'] ?? '#212121',
9532		- 'bot_message_font_color' => $options['bot_message_font_color'] ?? '#fff',
9533		- 'top_bar_bg_color' => $options['top_bar_bg_color'] ?? '#212121',
9534		- 'send_button_font_color' => $options['send_button_font_color'] ?? '#212121',
9535		- 'close_button_color' => $options['close_button_color'] ?? '#fff',
9536		- 'chatbot_background_color' => $options['chatbot_background_color'] ?? '#212121',
9537		- 'chatbot_bg_color' => $options['chatbot_bg_color'] ?? '#fff',
9538		- 'icon_color' => $options['icon_color'] ?? '#fff',
9539		- 'chat_input_font_color' => $options['chat_input_font_color'] ?? '#212121',
9540		- 'chat_persistence_toggle' => 'off', // Always off for testing chatbot
9541		- 'appendWidgetToBody' => 'off',
9542		- 'live_agent_message_bg_color' => $options['live_agent_message_bg_color'] ?? '#ffffff',
9543		- 'live_agent_message_font_color' => $options['live_agent_message_font_color'] ?? '#333333',
9544		- 'chat_toolbar_toggle' => $options['chat_toolbar_toggle'] ?? 'off',
9545		- 'mode_indicator_bg_color' => $options['mode_indicator_bg_color'] ?? '#767676',
9546		- 'mode_indicator_font_color' => $options['mode_indicator_font_color'] ?? '#ffffff',
9547		- 'toolbar_icon_color' => $options['toolbar_icon_color'] ?? '#212121',
9548		- 'use_pinecone' => $prompts_options['mxchat_use_pinecone'] ?? '0',
9549		- 'email_collection_enabled' => 'off', // No email collection in testing
9550		- 'initial_email_state' => null,
9551		- 'skip_email_check' => true,
9552		- 'pinecone_enabled' => isset($prompts_options['mxchat_use_pinecone']) && $prompts_options['mxchat_use_pinecone'] === '1',
9553		- 'skip_inline_colors' => $skip_inline_colors,
9554		- 'bot_theme_assignments' => $theme_options['bot_theme_assignments'] ?? array()
9555		- ));
9556		-
9557		- // Localize testing tab script data
9558		- wp_localize_script('mxchat-admin-testing-js', 'mxchatAdminTestData', array(
9559		- 'ajaxUrl' => admin_url('admin-ajax.php'),
9560		- 'nonce' => wp_create_nonce('mxchat_test_nonce'),
9561		- 'isAdmin' => true,
9562		- 'testingEnabled' => true
9563		- ));
9564		-
9565		- // Add testing enabled flag for the chatbot to return debug data
9566		- add_action('admin_footer', function() {
9567		- echo '<script>window.mxchatTestingEnabled = true;</script>';
9568		- });
9569		-
9570		- break;
9571		- }
9572		-}
9573		-private function localize_admin_scripts($current_page) {
9574		- // Base localization data for main admin script
9575		- $base_data = array(
9576		- 'ajax_url' => admin_url('admin-ajax.php'),
9577		- 'nonce' => wp_create_nonce('mxchat_admin_nonce'),
9578		- 'admin_url' => admin_url(),
9579		- 'license_nonce' => wp_create_nonce('mxchat_activate_license_nonce'),
9580		- 'inline_edit_nonce' => wp_create_nonce('mxchat_save_inline_nonce'),
9581		- 'setting_nonce' => wp_create_nonce('mxchat_save_setting_nonce'),
9582		- 'export_nonce' => wp_create_nonce('mxchat_export_transcripts'),
9583		- 'actions_nonce' => wp_create_nonce('mxchat_actions_nonce'),
9584		- 'add_intent_nonce' => wp_create_nonce('mxchat_add_intent_nonce'),
9585		- 'edit_intent_nonce' => wp_create_nonce('mxchat_edit_intent'),
9586		- 'add_phrase_nonce' => wp_create_nonce('mxchat_add_phrase_nonce'),
9587		- 'delete_phrase_nonce' => wp_create_nonce('mxchat_delete_phrase_nonce'),
9588		- 'get_phrases_nonce' => wp_create_nonce('mxchat_get_phrases_nonce'),
9589		- 'delete_legacy_nonce' => wp_create_nonce('mxchat_delete_legacy_nonce'),
9590		- 'toggle_action_nonce' => wp_create_nonce('mxchat_actions_nonce'),
9591		- 'fetch_openrouter_models_nonce' => wp_create_nonce('mxchat_fetch_openrouter_models'),
9592		- 'is_activated' => $this->is_activated ? '1' : '0',
9593		- 'status_refresh_interval' => 5000,
9594		- 'discard_changes_confirm' => __('Discard your unsaved changes?', 'mxchat'),
9595		- // Live-agent schedule status text (plan 8ccaa2).
9596		- 'i18n_scheduled_hours' => __('Scheduled hours', 'mxchat'),
9597		- 'i18n_always_available' => __('Always available', 'mxchat'),
9598		- 'prompts_setting_nonce' => wp_create_nonce('mxchat_prompts_setting_nonce'),
9599		- 'ajaxurl' => admin_url('admin-ajax.php')
9600		- );
9601		-
9602		- // Localize main admin script with base data
9603		- wp_localize_script('mxchat-admin-js', 'mxchatAdmin', $base_data);
9604		-
9605		- // Canonical chat-model catalog for the modal picker grid
9606		- // (plan-d14e89). Adding a model in class-mxchat-model-catalog.php
9607		- // automatically appears here.
9608		- if (!class_exists('MxChat_Model_Catalog')) {
9609		- require_once plugin_dir_path(__FILE__) . 'class-mxchat-model-catalog.php';
9610		- }
9611		- wp_localize_script('mxchat-admin-js', 'mxchatChatModelCatalog', MxChat_Model_Catalog::js_picker_shape());
9612		-
9613		- // Page-specific localizations
9614		- $this->localize_page_specific_scripts($current_page);
9615		-}
9616		-private function localize_page_specific_scripts($current_page) {
9617		- switch ($current_page) {
9618		- case 'mxchat-prompts':
9619		- // Status updater localization
9620		- wp_localize_script('mxchat-status-updater', 'mxchat_status_data', array(
9621		- 'ajax_url' => admin_url('admin-ajax.php'),
9622		- 'nonce' => wp_create_nonce('mxchat_status_nonce')
9623		- ));
9624		-
9625		- // Content selector localization
9626		- wp_localize_script('mxchat-content-selector-js', 'mxchatSelector', array(
9627		- 'ajaxurl' => admin_url('admin-ajax.php'),
9628		- 'nonce' => wp_create_nonce('mxchat_content_selector_nonce'),
9629		- 'i18n' => array(
9630		- 'searchPlaceholder' => __('Search posts and pages...', 'mxchat'),
9631		- 'selectAll' => __('Select All', 'mxchat'),
9632		- 'process' => __('Process Selected', 'mxchat'),
9633		- 'cancel' => __('Cancel', 'mxchat'),
9634		- 'noResults' => __('No content found.', 'mxchat'),
9635		- 'extractingPdfs' => __('extracting %d PDF(s)...', 'mxchat'),
9636		- 'pdfExtractedSuffix' => __(' (%d PDF(s) extracted)', 'mxchat')
9637		- )
9638		- ));
9639		-
9640		- wp_localize_script('mxchat-knowledge-processing', 'mxchatAdmin', array(
9641		- 'ajax_url' => admin_url('admin-ajax.php'),
9642		- 'status_nonce' => wp_create_nonce('mxchat_status_nonce'),
9643		- 'queue_nonce' => wp_create_nonce('mxchat_queue_nonce'),
9644		- 'stop_nonce' => wp_create_nonce('mxchat_stop_processing_action'),
9645		- 'settings_nonce' => wp_create_nonce('mxchat_prompts_setting_nonce'),
9646		- 'setting_nonce' => wp_create_nonce('mxchat_save_setting_nonce'),
9647		- 'entries_nonce' => wp_create_nonce('mxchat_entries_nonce'),
9648		- 'admin_url' => admin_url(),
9649		- 'ajaxurl' => admin_url('admin-ajax.php'),
9650		- 'status_refresh_interval' => 2000,
9651		- 'bot_id' => isset($_GET['bot_id']) ? sanitize_text_field($_GET['bot_id']) : 'default'
9652		- ));
9653		- break;
9654		-
9655		- case 'mxchat-activation':
9656		- wp_localize_script('mxchat-activation-js', 'mxchatAdmin', array(
9657		- 'ajax_url' => admin_url('admin-ajax.php'),
9658		- 'license_nonce' => wp_create_nonce('mxchat_activate_license_nonce')
9659		- ));
9660		- break;
9661		-
9662		- case 'mxchat-content':
9663		- wp_localize_script('mxchat-content-js', 'mxchatContent', array(
9664		- 'ajaxUrl' => admin_url('admin-ajax.php'),
9665		- 'nonce' => wp_create_nonce('mxchat_content_nonce'),
9666		- 'settingNonce' => wp_create_nonce('mxchat_save_setting_nonce'),
9667		- 'previewUrl' => home_url('/?p='),
9668		- 'isActivated' => $this->is_activated(),
9669		- 'hasAdvancedContent' => apply_filters('mxchat_content_pro_feature', false, 'seo_readability'),
9670		- 'hasGSC' => apply_filters('mxchat_content_pro_feature', false, 'gsc_integration'),
9671		- // Whether Search Console is actually LINKED — distinct from hasGSC
9672		- // (add-on active). Reads the same option the add-on's settings
9673		- // card keys off; harmless false when the add-on is absent.
9674		- 'gscLinked' => (bool) get_option('mxchat_gsc_connected', false),
9675		- 'seoOptimize' => array(
9676		- 'meta_description' => ($options['seo_optimize_meta_desc'] ?? 'on') === 'on',
9677		- 'seo_title' => ($options['seo_optimize_seo_title'] ?? 'on') === 'on',
9678		- 'slug' => ($options['seo_optimize_slug'] ?? 'on') === 'on',
9679		- 'readability' => ($options['seo_optimize_readability'] ?? 'on') === 'on',
9680		- 'internal_links' => ($options['seo_optimize_internal_links'] ?? 'on') === 'on',
9681		- 'img_alt' => ($options['seo_optimize_img_alt'] ?? 'on') === 'on',
9682		- 'featured_img' => ($options['seo_optimize_featured_img'] ?? 'on') === 'on',
9683		- ),
9684		- 'i18n' => array(
9685		- 'generating' => __('Generating...', 'mxchat'),
9686		- 'planning' => __('Planning content structure...', 'mxchat'),
9687		- 'images' => __('Generating images...', 'mxchat'),
9688		- 'writing' => __('Writing full content...', 'mxchat'),
9689		- 'creating' => __('Creating WordPress post...', 'mxchat'),
9690		- 'done' => __('Content generated successfully!', 'mxchat'),
9691		- 'error' => __('An error occurred. Please try again.', 'mxchat'),
9692		- 'editSuccess' => __('Content updated successfully.', 'mxchat'),
9693		- 'promptEmpty' => __('Please enter a prompt.', 'mxchat'),
9694		- )
9695		- ));
9696		- break;
9697		-
9698		- case 'mxchat-transcripts':
9699		- // Get chart data for localization
9700		- $chart_data = $this->get_transcripts_chart_data();
9701		-
9702		- wp_localize_script('mxchat-transcripts-js', 'mxchatAdmin', array(
9703		- 'ajax_url' => admin_url('admin-ajax.php'),
9704		- 'export_nonce' => wp_create_nonce('mxchat_export_transcripts'),
9705		- 'delete_nonce' => wp_create_nonce('mxchat_delete_chat_history'),
9706		- 'setting_nonce' => wp_create_nonce('mxchat_save_setting_nonce'),
9707		- 'translate_nonce' => wp_create_nonce('mxchat_translate_messages')
9708		- ));
9709		-
9710		- // Localize chart data separately - use array_values to ensure proper JSON array encoding
9711		- wp_localize_script('mxchat-transcripts-js', 'mxchatChartData', array(
9712		- 'labels' => array_values($chart_data['labels']),
9713		- 'chats' => array_values($chart_data['chats']),
9714		- 'messages' => array_values($chart_data['messages'])
9715		- ));
9716		- break;
9717		-
9718		- case 'mxchat-settings':
9719		- default:
9720		- // The 'mxchatStyleSettings' localize that used to live here was
9721		- // REMOVED by plan-mxchat-20260731-c63fb6.
9722		- //
9723		- // It targeted the script handle 'mxchat-color-picker', which is
9724		- // registered/enqueued NOWHERE in the plugin — so wp_localize_script()
9725		- // returned false and printed nothing. That accident was the only
9726		- // thing keeping it from being a live secret disclosure: the payload
9727		- // carried loops_api_key, live_agent_secret_key and
9728		- // live_agent_bot_token in full, and this whole method ran for any
9729		- // logged-in user (see the capability gate added to
9730		- // mxchat_enqueue_admin_assets). One future
9731		- // wp_enqueue_script('mxchat-color-picker', ...) would have printed
9732		- // three secrets into page HTML for Subscribers.
9733		- //
9734		- // Nothing consumed the object: a tree-wide grep for
9735		- // 'mxchatStyleSettings' returns only this call site, and js/ names
9736		- // loops_api_key only at mxchat-admin.js:572, as a field-NAME string
9737		- // in an autosave allowlist — not a value read. Removed entirely
9738		- // rather than deleting just the three secret keys, so there is no
9739		- // dead payload left for someone to re-arm.
9740		- break;
9741		- }
9742		-
9743		- // Additional localization that was in the original code
9744		- wp_localize_script('mxchat-admin-js', 'mxchatPromptsAdmin', array(
9745		- 'ajax_url' => admin_url('admin-ajax.php'),
9746		- 'prompts_setting_nonce' => wp_create_nonce('mxchat_prompts_setting_nonce'),
9747		- ));
9748		-}
9749		-
9750		-public function mxchat_sanitize($input) {
9751		- $new_input = array();
9752		-
9753		- if (isset($input['api_key'])) {
9754		- $new_input['api_key'] = sanitize_text_field($input['api_key']);
9755		- }
9756		-
9757		- if (isset($input['similarity_threshold'])) {
9758		- $new_input['similarity_threshold'] = absint($input['similarity_threshold']); // Ensure it's an integer
9759		- $new_input['similarity_threshold'] = min(max($new_input['similarity_threshold'], 20), 85); // Enforce range
9760		- }
9761		-
9762		- if (isset($input['rag_sources_limit'])) {
9763		- $new_input['rag_sources_limit'] = absint($input['rag_sources_limit']); // Ensure it's an integer
9764		- $new_input['rag_sources_limit'] = min(max($new_input['rag_sources_limit'], 3), 10); // Enforce range 3-10
9765		- }
9766		-
9767		- if (isset($input['rag_chunks_limit'])) {
9768		- $new_input['rag_chunks_limit'] = absint($input['rag_chunks_limit']); // Ensure it's an integer
9769		- $new_input['rag_chunks_limit'] = min(max($new_input['rag_chunks_limit'], 8), 20); // Enforce range 8-20
9770		- }
9771		-
9772		- if (isset($input['xai_api_key'])) {
9773		- $new_input['xai_api_key'] = sanitize_text_field($input['xai_api_key']);
9774		- }
9775		-
9776		- if (isset($input['claude_api_key'])) {
9777		- $new_input['claude_api_key'] = sanitize_text_field($input['claude_api_key']);
9778		- }
9779		-
9780		- if (isset($input['enable_streaming_toggle'])) {
9781		- $new_input['enable_streaming_toggle'] = ($input['enable_streaming_toggle'] === 'on') ? 'on' : 'off';
9782		- } else {
9783		- // If checkbox not checked, it won't be in $input, so set to 'off'
9784		- $new_input['enable_streaming_toggle'] = 'off';
9785		- }
9786		-
9787		- if (isset($input['enable_web_search'])) {
9788		- $new_input['enable_web_search'] = ($input['enable_web_search'] === 'on') ? 'on' : 'off';
9789		- } else {
9790		- // If checkbox not checked, it won't be in $input, so set to 'off'
9791		- $new_input['enable_web_search'] = 'off';
9792		- }
9793		-
9794		- if (isset($input['deepseek_api_key'])) {
9795		- $new_input['deepseek_api_key'] = sanitize_text_field($input['deepseek_api_key']);
9796		- }
9797		-
9798		- if (isset($input['gemini_api_key'])) {
9799		- $new_input['gemini_api_key'] = sanitize_text_field($input['gemini_api_key']);
9800		- }
9801		-
9802		- if (isset($input['enable_woocommerce_integration'])) {
9803		- $new_input['enable_woocommerce_integration'] = $input['enable_woocommerce_integration'] === 'on' ? 'on' : 'off';
9804		- }
9805		-
9806		- if (isset($input['privacy_toggle'])) {
9807		- $new_input['privacy_toggle'] = $input['privacy_toggle'];
9808		- }
9809		-
9810		- if (isset($input['complianz_toggle'])) {
9811		- $new_input['complianz_toggle'] = $input['complianz_toggle'];
9812		- }
9813		-
9814		- // Handle custom privacy text input
9815		- if (isset($input['privacy_text'])) {
9816		- // Allow basic HTML for links
9817		- $new_input['privacy_text'] = wp_kses_post($input['privacy_text']);
9818		- }
9819		-
9820		- if (isset($input['system_prompt_instructions'])) {
9821		- $new_input['system_prompt_instructions'] = sanitize_textarea_field($input['system_prompt_instructions']);
9822		- }
9823		-
9824		- if (isset($input['mxchat_pro_email'])) {
9825		- $new_input['mxchat_pro_email'] = sanitize_email($input['mxchat_pro_email']);
9826		- }
9827		-
9828		- if (isset($input['mxchat_activation_key'])) {
9829		- $new_input['mxchat_activation_key'] = sanitize_text_field($input['mxchat_activation_key']);
9830		- }
9831		-
9832		- if (isset($input['append_to_body'])) {
9833		- $new_input['append_to_body'] = $input['append_to_body'] === 'on' ? 'on' : 'off';
9834		- }
9835		-
9836		- // Post type visibility settings
9837		- if (isset($input['post_type_visibility_mode'])) {
9838		- $allowed_modes = array('all', 'include', 'exclude');
9839		- $new_input['post_type_visibility_mode'] = in_array($input['post_type_visibility_mode'], $allowed_modes)
9840		- ? $input['post_type_visibility_mode']
9841		- : 'all';
9842		- }
9843		-
9844		- if (isset($input['post_type_visibility_list'])) {
9845		- if (is_array($input['post_type_visibility_list'])) {
9846		- $new_input['post_type_visibility_list'] = array_map('sanitize_key', $input['post_type_visibility_list']);
9847		- } else {
9848		- $new_input['post_type_visibility_list'] = array();
	1708	+ if (isset($input['rate_limit_message'])) {
	1709	+ $new_input['rate_limit_message'] = sanitize_text_field($input['rate_limit_message']);
9849	1710	}
9850		- }
9851	1711
9852		- if (isset($input['contextual_awareness_toggle'])) {
9853		- $new_input['contextual_awareness_toggle'] = $input['contextual_awareness_toggle'] === 'on' ? 'on' : 'off';
9854		-}
9855	1712
9856		- if (isset($input['citation_links_toggle'])) {
9857		- $new_input['citation_links_toggle'] = $input['citation_links_toggle'] === 'on' ? 'on' : 'off';
9858		-}
9859		-
9860		- // Satisfaction rating prompt — defaults ON when unchecked (so first save
9861		- // doesn't accidentally disable it). The form posts 'on' when checked;
9862		- // unchecked checkboxes don't post a value at all, so we infer 'off' only
9863		- // when the autosave/PHP request explicitly clears it via empty string.
9864		- if (array_key_exists('satisfaction_rating_enabled', $input)) {
9865		- $new_input['satisfaction_rating_enabled'] = $input['satisfaction_rating_enabled'] === 'on' ? 'on' : 'off';
9866		- }
9867		-
9868		- // Satisfaction rating customization (plan-141a12). Idle is clamped 5-600;
9869		- // the 4 text strings are sanitized + capped server-side. Blank values are
9870		- // preserved so the integrator falls back to translated defaults.
9871		- if (array_key_exists('satisfaction_rating_idle_seconds', $input)) {
9872		- $new_input['satisfaction_rating_idle_seconds'] = max(5, min(600, intval($input['satisfaction_rating_idle_seconds'])));
9873		- }
9874		-
9875		- // Max input length in characters (plan a3fae2 part C). 0 = unlimited (default,
9876		- // preserves current behavior). Clamp to a sane ceiling so a typo can't lock out
9877		- // all input. REQUIRED here — mxchat_sanitize() rebuilds the array from a whitelist,
9878		- // so without this isset-handler the key is stripped on the next save of ANY field
9879		- // (the 2c02ea global-rate-limit footgun).
9880		- if (array_key_exists('max_input_length', $input)) {
9881		- $new_input['max_input_length'] = max(0, min(100000, intval($input['max_input_length'])));
9882		- }
9883		- if (array_key_exists('satisfaction_rating_question', $input)) {
9884		- $new_input['satisfaction_rating_question'] = mb_substr(sanitize_text_field($input['satisfaction_rating_question']), 0, 200);
9885		- }
9886		- if (array_key_exists('satisfaction_rating_thanks', $input)) {
9887		- $new_input['satisfaction_rating_thanks'] = mb_substr(sanitize_text_field($input['satisfaction_rating_thanks']), 0, 300);
9888		- }
9889		- if (array_key_exists('satisfaction_rating_placeholder', $input)) {
9890		- $new_input['satisfaction_rating_placeholder'] = mb_substr(sanitize_text_field($input['satisfaction_rating_placeholder']), 0, 200);
9891		- }
9892		- if (array_key_exists('satisfaction_rating_saved', $input)) {
9893		- $new_input['satisfaction_rating_saved'] = mb_substr(sanitize_text_field($input['satisfaction_rating_saved']), 0, 200);
9894		- }
9895		-
9896		- if (isset($input['top_bar_title'])) {
9897		- $new_input['top_bar_title'] = sanitize_text_field($input['top_bar_title']);
9898		- }
9899		-
9900		- if (isset($input['ai_agent_text'])) {
9901		- $new_input['ai_agent_text'] = sanitize_text_field($input['ai_agent_text']);
	1713	+ if (isset($input['pre_chat_message'])) {
	1714	+ $new_input['pre_chat_message'] = sanitize_textarea_field($input['pre_chat_message']);
9902	1715	}
9903	1716
9904		- if (isset($input['enable_email_block'])) {
9905		- $new_input['enable_email_block'] = sanitize_text_field($input['enable_email_block']);
9906		- }
9907		-
9908		- if (isset($input['email_blocker_header_content'])) {
9909		- // wp_kses_post() allows standard HTML tags permitted by WordPress
9910		- $new_input['email_blocker_header_content'] = wp_kses_post($input['email_blocker_header_content']);
9911		- }
9912		- if (isset($input['email_blocker_button_text'])) {
9913		- $new_input['email_blocker_button_text'] = sanitize_text_field($input['email_blocker_button_text']);
9914		- }
9915		- // Sanitize name field toggle
9916		- if (isset($input['enable_name_field'])) {
9917		- $new_input['enable_name_field'] = ($input['enable_name_field'] === 'on') ? 'on' : 'off';
9918		- } else {
9919		- $new_input['enable_name_field'] = 'off';
9920		- }
9921		- // Sanitize name field placeholder
9922		- if (isset($input['name_field_placeholder'])) {
9923		- $new_input['name_field_placeholder'] = sanitize_text_field($input['name_field_placeholder']);
9924		- }
9925		- if (isset($input['intro_message'])) {
9926		- $new_input['intro_message'] = wp_kses_post($input['intro_message']); // Use wp_kses_post instead
9927		- }
9928		-
9929		- if (isset($input['input_copy'])) {
9930		- $new_input['input_copy'] = sanitize_text_field($input['input_copy']);
9931		- }
9932		-
9933		- if (isset($input['rate_limit_message'])) {
9934		- $new_input['rate_limit_message'] = sanitize_text_field($input['rate_limit_message']);
9935		- }
9936		-
9937		-// Handle the new rate limits format
9938		-if (isset($input['rate_limits']) && is_array($input['rate_limits'])) {
9939		- $new_input['rate_limits'] = array();
9940		- $allowed_limits = array('1', '3', '5', '10', '15', '20', '50', '100', 'unlimited');
9941		- $allowed_timeframes = array('hourly', 'daily', 'weekly', 'monthly');
9942		-
9943		- foreach ($input['rate_limits'] as $role_id => $settings) {
9944		- $new_input['rate_limits'][$role_id] = array();
9945		-
9946		- // Sanitize limit
9947		- if (isset($settings['limit'])) {
9948		- $limit = sanitize_text_field($settings['limit']);
9949		- // Accept presets, 'unlimited', the '__custom__' sentinel, OR any positive
9950		- // integer (custom value) — mirrors the global branch (plan-2c02ea). Without
9951		- // the custom path the per-role custom input was dropped and reset to the role
9952		- // default on every save (plan-7e23e7).
9953		- if (in_array($limit, $allowed_limits, true) || $limit === '__custom__' || (ctype_digit($limit) && (int) $limit >= 1)) {
9954		- $new_input['rate_limits'][$role_id]['limit'] = $limit;
9955		- } else {
9956		- $new_input['rate_limits'][$role_id]['limit'] = ($role_id === 'logged_out') ? '10' : '100'; // Default
	1717	+ if (isset($input['model'])) {
	1718	+ $allowed_models = array(
	1719	+ 'gpt-4o',
	1720	+ 'gpt-4o-mini',
	1721	+ 'gpt-4-turbo',
	1722	+ 'gpt-4',
	1723	+ 'gpt-3.5-turbo',
	1724	+ );
	1725	+ if (in_array($input['model'], $allowed_models)) {
	1726	+ $new_input['model'] = sanitize_text_field($input['model']);
9957	1727	}
9958	1728	}
9959	1729
9960		- // Preserve the per-role custom value (mirrors the global branch's limit_custom).
9961		- if (isset($settings['limit_custom'])) {
9962		- $new_input['rate_limits'][$role_id]['limit_custom'] = preg_replace('/[^0-9]/', '', (string) $settings['limit_custom']);
	1730	+ // Sanitize new pro features
	1731	+ if (isset($input['close_button_color'])) {
	1732	+ $new_input['close_button_color'] = sanitize_hex_color($input['close_button_color']);
9963	1733	}
9964	1734
9965		- // Sanitize timeframe
9966		- if (isset($settings['timeframe'])) {
9967		- $timeframe = sanitize_text_field($settings['timeframe']);
9968		- if (in_array($timeframe, $allowed_timeframes, true)) {
9969		- $new_input['rate_limits'][$role_id]['timeframe'] = $timeframe;
9970		- } else {
9971		- $new_input['rate_limits'][$role_id]['timeframe'] = 'daily'; // Default
9972		- }
	1735	+ if (isset($input['chatbot_bg_color'])) {
	1736	+ $new_input['chatbot_bg_color'] = sanitize_hex_color($input['chatbot_bg_color']);
9973	1737	}
9974	1738
9975		- // Sanitize message
9976		- if (isset($settings['message'])) {
9977		- $new_input['rate_limits'][$role_id]['message'] = sanitize_textarea_field($settings['message']);
	1739	+ if (isset($input['woocommerce_consumer_key'])) {
	1740	+ $new_input['woocommerce_consumer_key'] = sanitize_text_field($input['woocommerce_consumer_key']);
9978	1741	}
9979		- }
9980		-}
9981	1742
9982		-// Handle the whole-chatbot global rate limit (plan-mxchat-20260603-2c02ea).
9983		-// Mirrors the per-role block above, adapted to the single global shape. Without
9984		-// this branch the whitelist-rebuild dropped rate_limits_global entirely on every
9985		-// save, so the global cap silently fell back to its 'unlimited' default.
9986		-// MUST accept arbitrary positive integers so the custom-value path (d55f65) is not regressed.
9987		-if (isset($input['rate_limits_global']) && is_array($input['rate_limits_global'])) {
9988		- $g = $input['rate_limits_global'];
9989		- $allowed_limits = array('1', '3', '5', '10', '15', '20', '50', '100', 'unlimited');
9990		- $allowed_timeframes = array('hourly', 'daily', 'weekly', 'monthly');
9991		- $global_out = array();
	1743	+ if (isset($input['woocommerce_consumer_secret'])) {
	1744	+ $new_input['woocommerce_consumer_secret'] = sanitize_text_field($input['woocommerce_consumer_secret']);
	1745	+ }
9992	1746
9993		- if (isset($g['limit'])) {
9994		- $limit = sanitize_text_field($g['limit']);
9995		- // Accept presets, 'unlimited', the '__custom__' sentinel (resolved by the
9996		- // autosave handler / renderer), OR any positive integer (custom value).
9997		- if (in_array($limit, $allowed_limits, true) || $limit === '__custom__' || (ctype_digit($limit) && (int) $limit >= 1)) {
9998		- $global_out['limit'] = $limit;
9999		- } else {
10000		- $global_out['limit'] = 'unlimited';
	1747	+ if (isset($input['user_message_bg_color'])) {
	1748	+ $new_input['user_message_bg_color'] = sanitize_hex_color($input['user_message_bg_color']);
10001	1749	}
10002		- }
10003	1750
10004		- if (isset($g['limit_custom'])) {
10005		- $global_out['limit_custom'] = preg_replace('/[^0-9]/', '', (string) $g['limit_custom']);
10006		- }
	1751	+ if (isset($input['user_message_font_color'])) {
	1752	+ $new_input['user_message_font_color'] = sanitize_hex_color($input['user_message_font_color']);
	1753	+ }
10007	1754
10008		- if (isset($g['timeframe'])) {
10009		- $timeframe = sanitize_text_field($g['timeframe']);
10010		- $global_out['timeframe'] = in_array($timeframe, $allowed_timeframes, true) ? $timeframe : 'daily';
10011		- }
	1755	+ if (isset($input['bot_message_bg_color'])) {
	1756	+ $new_input['bot_message_bg_color'] = sanitize_hex_color($input['bot_message_bg_color']);
	1757	+ }
10012	1758
10013		- if (isset($g['message'])) {
10014		- $global_out['message'] = sanitize_textarea_field($g['message']);
10015		- }
10016		-
10017		- $new_input['rate_limits_global'] = $global_out;
10018		-}
10019		-
10020		- if (isset($input['pre_chat_message'])) {
10021		- $new_input['pre_chat_message'] = sanitize_textarea_field($input['pre_chat_message']);
10022		- }
10023		-
10024		- if (isset($input['voyage_api_key'])) {
10025		- $new_input['voyage_api_key'] = sanitize_text_field($input['voyage_api_key']);
10026		- }
10027		-
10028		- // Add to your sanitize function
10029		- if (isset($input['embedding_model'])) {
10030		- // Catalog refactor (plan-d14e89): allowlist derived from the canonical
10031		- // catalog in includes/class-mxchat-model-catalog.php.
10032		- if (!class_exists('MxChat_Model_Catalog')) {
10033		- require_once plugin_dir_path(__FILE__) . 'class-mxchat-model-catalog.php';
	1759	+ if (isset($input['bot_message_font_color'])) {
	1760	+ $new_input['bot_message_font_color'] = sanitize_hex_color($input['bot_message_font_color']);
10034	1761	}
10035		- $allowed_models = MxChat_Model_Catalog::embedding_model_ids();
10036		- if (in_array($input['embedding_model'], $allowed_models)) {
10037		- $new_input['embedding_model'] = sanitize_text_field($input['embedding_model']);
10038		- }
10039		- }
10040	1762
10041		-if (isset($input['model'])) {
10042		- if ($input['model'] === 'openrouter') {
10043		- $new_input['model'] = 'openrouter';
10044		- } else {
10045		- if (!class_exists('MxChat_Model_Catalog')) {
10046		- require_once plugin_dir_path(__FILE__) . 'class-mxchat-model-catalog.php';
	1763	+ if (isset($input['top_bar_bg_color'])) {
	1764	+ $new_input['top_bar_bg_color'] = sanitize_hex_color($input['top_bar_bg_color']);
10047	1765	}
10048		- $allowed_models = MxChat_Model_Catalog::chat_model_ids();
10049	1766
10050		- if (in_array($input['model'], $allowed_models)) {
10051		- $new_input['model'] = sanitize_text_field($input['model']);
10052		- } else {
10053		- // Fallback for any deprecated model
10054		- $new_input['model'] = 'gpt-5.6-sol';
	1767	+ if (isset($input['send_button_font_color'])) {
	1768	+ $new_input['send_button_font_color'] = sanitize_hex_color($input['send_button_font_color']);
10055	1769	}
10056		- }
10057		-}
10058		-
10059		-if (isset($input['openrouter_selected_model'])) {
10060		- // Just sanitize it, don't validate against a whitelist
10061		- $new_input['openrouter_selected_model'] = sanitize_text_field($input['openrouter_selected_model']);
10062		-}
10063	1770
10064		-// ADD THIS:
10065		-if (isset($input['openrouter_selected_model_name'])) {
10066		- $new_input['openrouter_selected_model_name'] = sanitize_text_field($input['openrouter_selected_model_name']);
10067		-}
10068		-
10069		- if (isset($input['openrouter_api_key'])) {
10070		- $new_input['openrouter_api_key'] = sanitize_text_field($input['openrouter_api_key']);
10071		- }
10072		-
10073		- // Custom (OpenAI-compatible) Provider — Ollama, LM Studio, vLLM, Azure OpenAI, etc.
10074		- if (isset($input['custom_provider_base_url'])) {
10075		- $new_input['custom_provider_base_url'] = esc_url_raw(rtrim(trim((string) $input['custom_provider_base_url']), '/'));
10076		- }
10077		- if (isset($input['custom_provider_api_key'])) {
10078		- $new_input['custom_provider_api_key'] = sanitize_text_field($input['custom_provider_api_key']);
10079		- }
10080		- if (isset($input['custom_provider_model'])) {
10081		- $new_input['custom_provider_model'] = sanitize_text_field($input['custom_provider_model']);
10082		- }
10083		- if (isset($input['custom_provider_auth_scheme'])) {
10084		- $scheme = sanitize_text_field($input['custom_provider_auth_scheme']);
10085		- $new_input['custom_provider_auth_scheme'] = in_array($scheme, array('bearer', 'api-key'), true) ? $scheme : 'bearer';
10086		- }
10087		- if (isset($input['custom_provider_for_embeddings'])) {
10088		- $new_input['custom_provider_for_embeddings'] = ($input['custom_provider_for_embeddings'] === 'on') ? 'on' : 'off';
10089		- }
10090		- if (isset($input['custom_provider_for_images'])) {
10091		- $new_input['custom_provider_for_images'] = ($input['custom_provider_for_images'] === 'on') ? 'on' : 'off';
10092		- }
10093		- if (isset($input['custom_provider_embedding_model'])) {
10094		- $new_input['custom_provider_embedding_model'] = sanitize_text_field($input['custom_provider_embedding_model']);
10095		- }
10096		- if (isset($input['custom_provider_api_version'])) {
10097		- $new_input['custom_provider_api_version'] = sanitize_text_field($input['custom_provider_api_version']);
10098		- }
10099		-
10100		-
10101		-
10102		- if (isset($input['woocommerce_consumer_key'])) {
10103		- $new_input['woocommerce_consumer_key'] = sanitize_text_field($input['woocommerce_consumer_key']);
10104		- }
10105		-
10106		- if (isset($input['woocommerce_consumer_secret'])) {
10107		- $new_input['woocommerce_consumer_secret'] = sanitize_text_field($input['woocommerce_consumer_secret']);
10108		- }
10109		-
10110		-
10111		- // Sanitize link_target_toggle
10112		- if (isset($input['link_target_toggle'])) {
10113		- $new_input['link_target_toggle'] = $input['link_target_toggle'] === 'on' ? 'on' : 'off';
10114		- }
10115		-
10116		- // Sanitize Loops API Key
10117		- if (isset($input['loops_api_key'])) {
10118		- $new_input['loops_api_key'] = sanitize_text_field($input['loops_api_key']);
10119		- }
10120		-
10121		- if (isset($input['chat_persistence_toggle'])) {
10122		- $new_input['chat_persistence_toggle'] = $input['chat_persistence_toggle'] === 'on' ? 'on' : 'off';
10123		- }
10124		-
10125		- // No else clause: an absent key stays absent, so the front-end default ('on') applies
10126		- // and the rebuild never strips a saved 'off' (autosave passes the full options array back through here).
10127		- if (isset($input['print_button_enabled'])) {
10128		- $new_input['print_button_enabled'] = $input['print_button_enabled'] === 'on' ? 'on' : 'off';
10129		- }
10130		-
10131		- // plan ac2e81 — "Start new chat" toggle (default OFF) + editable label.
10132		- // No else on the toggle: an absent key stays absent so the front-end '?? off'
10133		- // default applies, and the full-array autosave rebuild preserves a saved value.
10134		- if (isset($input['reset_chat_enabled'])) {
10135		- $new_input['reset_chat_enabled'] = $input['reset_chat_enabled'] === 'on' ? 'on' : 'off';
10136		- }
10137		-
10138		- if (isset($input['reset_chat_label'])) {
10139		- $new_input['reset_chat_label'] = sanitize_text_field($input['reset_chat_label']);
10140		- }
10141		-
10142		- if (isset($input['popular_question_1'])) {
10143		- $new_input['popular_question_1'] = sanitize_text_field($input['popular_question_1']);
10144		- }
10145		-
10146		- if (isset($input['popular_question_2'])) {
10147		- $new_input['popular_question_2'] = sanitize_text_field($input['popular_question_2']);
10148		- }
10149		-
10150		- if (isset($input['popular_question_3'])) {
10151		- $new_input['popular_question_3'] = sanitize_text_field($input['popular_question_3']);
10152		- }
10153		-
10154		- if (isset($input['additional_popular_questions']) && is_array($input['additional_popular_questions'])) {
10155		- $new_input['additional_popular_questions'] = array_map('sanitize_text_field', $input['additional_popular_questions']);
10156		- }
10157		-
10158		- // Sanitize Loops Mailing List
10159		- if (isset($input['loops_mailing_list'])) {
10160		- $new_input['loops_mailing_list'] = sanitize_text_field($input['loops_mailing_list']);
10161		- }
10162		-
10163		-// Sanitize Triggered Phrase Response
10164		- if (isset($input['triggered_phrase_response'])) {
10165		- $new_input['triggered_phrase_response'] = wp_kses_post($input['triggered_phrase_response']);
10166		- }
10167		- if (isset($input['email_capture_response'])) {
10168		- $new_input['email_capture_response'] = wp_kses_post($input['email_capture_response']);
10169		- }
10170		-
10171		- // Sanitize Brave Search Settings
10172		- if (isset($input['brave_api_key'])) {
10173		- $new_input['brave_api_key'] = sanitize_text_field($input['brave_api_key']);
10174		- }
10175		-
10176		- if (isset($input['brave_image_count'])) {
10177		- $image_count = intval($input['brave_image_count']);
10178		- $new_input['brave_image_count'] = ($image_count >=1 && $image_count <=6) ? $image_count : 4;
10179		- }
10180		-
10181		- if (isset($input['brave_safe_search'])) {
10182		- $allowed = array('strict', 'off');
10183		- $new_input['brave_safe_search'] = in_array($input['brave_safe_search'], $allowed, true) ? $input['brave_safe_search'] : 'strict';
10184		- }
10185		-
10186		- if (isset($input['brave_news_count'])) {
10187		- $news_count = intval($input['brave_news_count']);
10188		- $new_input['brave_news_count'] = ($news_count >=1 && $news_count <=10) ? $news_count : 3;
10189		- }
10190		-
10191		- if (isset($input['brave_country'])) {
10192		- $new_input['brave_country'] = sanitize_text_field($input['brave_country']);
10193		- }
10194		-
10195		- if (isset($input['brave_language'])) {
10196		- $new_input['brave_language'] = sanitize_text_field($input['brave_language']);
10197		- }
10198		-
10199		- if (isset($input['chat_toolbar_toggle'])) {
10200		- $new_input['chat_toolbar_toggle'] = $input['chat_toolbar_toggle'] === 'on' ? 'on' : 'off';
10201		- }
10202		-
10203		- // Sanitize PDF upload button toggle
10204		- if (isset($input['show_pdf_upload_button'])) {
10205		- $new_input['show_pdf_upload_button'] = $input['show_pdf_upload_button'] === 'on' ? 'on' : 'off';
10206		- } else {
10207		- $new_input['show_pdf_upload_button'] = 'off'; // If checkbox is unchecked
10208		- }
10209		-
10210		- // Sanitize Word upload button toggle
10211		- if (isset($input['show_word_upload_button'])) {
10212		- $new_input['show_word_upload_button'] = $input['show_word_upload_button'] === 'on' ? 'on' : 'off';
10213		- } else {
10214		- $new_input['show_word_upload_button'] = 'off'; // If checkbox is unchecked
10215		- }
10216		-
10217		- if (isset($input['pdf_intent_trigger_text'])) {
10218		- $new_input['pdf_intent_trigger_text'] = sanitize_text_field($input['pdf_intent_trigger_text']);
10219		- }
10220		-
10221		- if (isset($input['pdf_intent_success_text'])) {
10222		- $new_input['pdf_intent_success_text'] = sanitize_text_field($input['pdf_intent_success_text']);
10223		- }
10224		-
10225		- if (isset($input['pdf_intent_error_text'])) {
10226		- $new_input['pdf_intent_error_text'] = sanitize_text_field($input['pdf_intent_error_text']);
10227		- }
10228		-
10229		- if (isset($input['pdf_max_pages'])) {
10230		- $new_input['pdf_max_pages'] = intval($input['pdf_max_pages']);
10231		- if ($new_input['pdf_max_pages'] < 1 || $new_input['pdf_max_pages'] > 69) {
10232		- $new_input['pdf_max_pages'] = 69; // Default to 69 if out of range
	1771	+ if (isset($input['chatbot_background_color'])) {
	1772	+ $new_input['chatbot_background_color'] = sanitize_hex_color($input['chatbot_background_color']);
10233	1773	}
10234		- }
10235	1774
10236		- if (isset($input['live_agent_webhook_url'])) {
10237		- $new_input['live_agent_webhook_url'] = esc_url_raw($input['live_agent_webhook_url']);
10238		- }
10239		- if (isset($input['live_agent_secret_key'])) {
10240		- $new_input['live_agent_secret_key'] = sanitize_text_field($input['live_agent_secret_key']);
10241		- }
10242		-
10243		- // Live Agent Integration
10244		- if (isset($input['live_agent_bot_token'])) {
10245		- $new_input['live_agent_bot_token'] = sanitize_text_field($input['live_agent_bot_token']);
10246		- }
10247		-
10248		- if (isset($input['live_agent_shared_channel'])) {
10249		- $new_input['live_agent_shared_channel'] = sanitize_text_field($input['live_agent_shared_channel']);
10250		- }
10251		-
10252		- // Default-OFF toggle: absent key stays absent (unchecked box = off).
10253		- if (isset($input['live_agent_archive_on_end_toggle'])) {
10254		- $new_input['live_agent_archive_on_end_toggle'] = ($input['live_agent_archive_on_end_toggle'] === 'on') ? 'on' : 'off';
10255		- }
10256		-
10257		- if (isset($input['live_agent_user_ids'])) {
10258		- $new_input['live_agent_user_ids'] = sanitize_textarea_field($input['live_agent_user_ids']);
10259		- }
10260		-
10261		- if (isset($input['live_agent_status'])) {
10262		- $new_input['live_agent_status'] = ($input['live_agent_status'] === 'on') ? 'on' : 'off';
10263		- }
10264		- if (isset($input['live_agent_away_message'])) {
10265		- $new_input['live_agent_away_message'] = sanitize_textarea_field($input['live_agent_away_message']);
10266		- }
10267		- if (isset($input['live_agent_notification_message'])) {
10268		- $new_input['live_agent_notification_message'] = sanitize_textarea_field($input['live_agent_notification_message']);
10269		- }
10270		-
10271		- // Telegram Integration
10272		- if (isset($input['telegram_status'])) {
10273		- $new_input['telegram_status'] = ($input['telegram_status'] === 'on') ? 'on' : 'off';
10274		- }
10275		- if (isset($input['telegram_bot_token'])) {
10276		- $new_input['telegram_bot_token'] = sanitize_text_field($input['telegram_bot_token']);
10277		- }
10278		- if (isset($input['telegram_group_id'])) {
10279		- $new_input['telegram_group_id'] = sanitize_text_field($input['telegram_group_id']);
10280		- }
10281		- if (isset($input['telegram_webhook_secret'])) {
10282		- $new_input['telegram_webhook_secret'] = sanitize_text_field($input['telegram_webhook_secret']);
10283		- }
10284		- if (isset($input['telegram_notification_message'])) {
10285		- $new_input['telegram_notification_message'] = sanitize_textarea_field($input['telegram_notification_message']);
10286		- }
10287		- if (isset($input['telegram_away_message'])) {
10288		- $new_input['telegram_away_message'] = sanitize_textarea_field($input['telegram_away_message']);
10289		- }
10290		-
10291		- // Sanitize script loading strategy
10292		- if (isset($input['script_loading_strategy'])) {
10293		- $allowed_strategies = array('default', 'defer', 'delay_1s', 'delay_3s', 'delay_5s', 'on_interaction');
10294		- $new_input['script_loading_strategy'] = in_array($input['script_loading_strategy'], $allowed_strategies)
10295		- ? $input['script_loading_strategy']
10296		- : 'default';
10297		- }
10298		-
10299		- // Sanitize debug mode
10300		- if (isset($input['debug_mode'])) {
10301		- $new_input['debug_mode'] = ($input['debug_mode'] === 'on') ? 'on' : 'off';
10302		- }
10303		-
10304		- // Content Generator Settings
10305		- if (isset($input['content_model'])) {
10306		- $new_input['content_model'] = sanitize_text_field($input['content_model']);
10307		- }
10308		- if (isset($input['content_image_model'])) {
10309		- $new_input['content_image_model'] = sanitize_text_field($input['content_image_model']);
10310		- }
10311		- if (isset($input['content_image_quality'])) {
10312		- $q = sanitize_text_field($input['content_image_quality']);
10313		- $new_input['content_image_quality'] = in_array($q, array('auto', 'low', 'medium', 'high'), true) ? $q : 'auto';
10314		- }
10315		- if (isset($input['content_enable_images'])) {
10316		- $new_input['content_enable_images'] = ($input['content_enable_images'] === 'on') ? 'on' : 'off';
10317		- }
10318		- if (isset($input['content_use_placeholders'])) {
10319		- $new_input['content_use_placeholders'] = ($input['content_use_placeholders'] === 'on') ? 'on' : 'off';
10320		- }
10321		- if (isset($input['content_internal_linking'])) {
10322		- $new_input['content_internal_linking'] = ($input['content_internal_linking'] === 'on') ? 'on' : 'off';
10323		- }
10324		- if (isset($input['content_tool_use'])) {
10325		- $new_input['content_tool_use'] = ($input['content_tool_use'] === 'on') ? 'on' : 'off';
10326		- }
10327		- if (isset($input['content_image_count'])) {
10328		- $new_input['content_image_count'] = (string) max(1, min(5, (int) $input['content_image_count']));
10329		- }
10330		-
10331		- // SEO Optimize toggle fields
10332		- foreach (array('seo_optimize_meta_desc', 'seo_optimize_seo_title', 'seo_optimize_slug', 'seo_optimize_readability', 'seo_optimize_internal_links', 'seo_optimize_img_alt', 'seo_optimize_featured_img') as $seo_key) {
10333		- if (isset($input[$seo_key])) {
10334		- $new_input[$seo_key] = ($input[$seo_key] === 'on') ? 'on' : 'off';
	1775	+ if (isset($input['icon_color'])) {
	1776	+ $new_input['icon_color'] = sanitize_hex_color($input['icon_color']);
10335	1777	}
10336		- }
10337	1778
10338		- // Preserve content generator settings when saving from main settings page
10339		- // (where content fields are not in the form submission)
10340		- $existing = get_option('mxchat_options', array());
10341		- foreach (array('content_model', 'content_image_model', 'content_image_quality', 'content_image_count', 'content_enable_images', 'content_use_placeholders', 'content_internal_linking', 'content_tool_use', 'seo_optimize_meta_desc', 'seo_optimize_seo_title', 'seo_optimize_slug', 'seo_optimize_readability', 'seo_optimize_internal_links', 'seo_optimize_img_alt', 'seo_optimize_featured_img') as $key) {
10342		- if (!isset($new_input[$key]) && isset($existing[$key])) {
10343		- $new_input[$key] = $existing[$key];
	1779	+ if (isset($input['chat_input_font_color'])) {
	1780	+ $new_input['chat_input_font_color'] = sanitize_hex_color($input['chat_input_font_color']);
10344	1781	}
10345		- }
10346	1782
10347		- return $new_input;
10348		-}
10349		-
10350		-/**
10351		- * Log a debug message if debug mode is enabled
10352		- *
10353		- * @param string $type The type of log entry (settings_save, api_error, activation, etc.)
10354		- * @param string $message The log message
10355		- * @param array $data Optional additional data to log
10356		- * @return bool Whether the message was logged
10357		- */
10358		-public static function mxchat_log_debug( $type, $message, $data = array() ) {
10359		- $options = get_option( 'mxchat_options', array() );
10360		-
10361		- // Check if debug mode is enabled
10362		- if ( ! isset( $options['debug_mode'] ) || $options['debug_mode'] !== 'on' ) {
10363		- return false;
	1783	+ return $new_input;
10364	1784	}
10365	1785
10366		- // Get current log
10367		- $log = get_option( 'mxchat_debug_log', array() );
10368		- if ( ! is_array( $log ) ) {
10369		- $log = array();
10370		- }
10371	1786
10372		- // Add new entry
10373		- $entry = array(
10374		- 'time' => current_time( 'Y-m-d H:i:s' ),
10375		- 'type' => sanitize_key( $type ),
10376		- 'message' => sanitize_text_field( $message ),
10377		- );
10378		-
10379		- if ( ! empty( $data ) ) {
10380		- $entry['data'] = $data;
10381		- }
10382		-
10383		- // Add to beginning of array (newest first)
10384		- array_unshift( $log, $entry );
10385		-
10386		- // Keep only last 100 entries
10387		- if ( count( $log ) > 100 ) {
10388		- $log = array_slice( $log, 0, 100 );
10389		- }
10390		-
10391		- // Save log
10392		- update_option( 'mxchat_debug_log', $log, false );
10393		-
10394		- return true;
10395		-}
10396		-
10397		-/**
10398		- * Get the debug log entries
10399		- *
10400		- * @return array The debug log entries
10401		- */
10402		-public static function mxchat_get_debug_log() {
10403		- $log = get_option( 'mxchat_debug_log', array() );
10404		- return is_array( $log ) ? $log : array();
10405		-}
10406		-
10407		-/**
10408		- * Clear the debug log
10409		- *
10410		- * @return bool Whether the log was cleared
10411		- */
10412		-public static function mxchat_clear_debug_log() {
10413		- return delete_option( 'mxchat_debug_log' );
10414		-}
10415		-
10416		-/**
10417		- * Export settings as JSON with masked API keys
10418		- *
10419		- * @return array The sanitized settings array
10420		- */
10421		-public static function mxchat_export_settings() {
10422		- $options = get_option( 'mxchat_options', array() );
10423		-
10424		- if ( ! is_array( $options ) ) {
10425		- return array();
10426		- }
10427		-
10428		- // List of API key fields to mask
10429		- $api_key_fields = array(
10430		- 'api_key',
10431		- 'xai_api_key',
10432		- 'claude_api_key',
10433		- 'deepseek_api_key',
10434		- 'voyage_api_key',
10435		- 'gemini_api_key',
10436		- 'openrouter_api_key',
10437		- 'loops_api_key',
10438		- 'brave_api_key',
10439		- 'live_agent_secret_key',
10440		- 'live_agent_bot_token',
10441		- 'telegram_bot_token',
10442		- 'telegram_webhook_secret',
10443		- 'woocommerce_consumer_key',
10444		- 'woocommerce_consumer_secret',
10445		- );
10446		-
10447		- // Mask API keys (show only last 4 characters)
10448		- foreach ( $api_key_fields as $field ) {
10449		- if ( isset( $options[ $field ] ) && ! empty( $options[ $field ] ) ) {
10450		- $value = $options[ $field ];
10451		- if ( strlen( $value ) > 4 ) {
10452		- $options[ $field ] = str_repeat( '*', strlen( $value ) - 4 ) . substr( $value, -4 );
10453		- } else {
10454		- $options[ $field ] = '****';
10455		- }
10456		- }
10457		- }
10458		-
10459		- // Add metadata
10460		- $export = array(
10461		- 'plugin_version' => defined( 'MXCHAT_VERSION' ) ? MXCHAT_VERSION : 'unknown',
10462		- 'export_date' => current_time( 'Y-m-d H:i:s' ),
10463		- 'wordpress_version' => get_bloginfo( 'version' ),
10464		- 'php_version' => phpversion(),
10465		- 'settings' => $options,
10466		- );
10467		-
10468		- return $export;
10469		-}
10470		-
10471		-/**
10472		- * Reset all settings to defaults
10473		- *
10474		- * @return bool Whether the reset was successful
10475		- */
10476		-public static function mxchat_reset_all_settings() {
10477		- // Delete main options
10478		- $deleted = delete_option( 'mxchat_options' );
10479		-
10480		- // Also clear the debug log
10481		- delete_option( 'mxchat_debug_log' );
10482		-
10483		- // Log the reset (will create new log since we just cleared it)
10484		- // We need to temporarily enable debug mode to log this
10485		- $temp_options = array( 'debug_mode' => 'on' );
10486		- update_option( 'mxchat_options', $temp_options );
10487		-
10488		- self::mxchat_log_debug( 'reset', 'All settings have been reset to defaults' );
10489		-
10490		- // Now delete again to trigger re-initialization
10491		- delete_option( 'mxchat_options' );
10492		-
10493		- return $deleted;
10494		-}
10495		-
10496	1787	// Method to append the chatbot to the body
10497	1788	public function mxchat_append_chatbot_to_body() {
10498	1789	$options = get_option('mxchat_options');
10499	1790	if (isset($options['append_to_body']) && $options['append_to_body'] === 'on') {
		@@ -10502,478 +1793,146 @@
10502	1793	}
10503	1794
10504	1795
10505	1796
	1797	+private function mxchat_extract_main_content($html) {
	1798	+ $dom = new DOMDocument;
	1799	+ libxml_use_internal_errors(true); // Suppress HTML parsing errors
	1800	+ @$dom->loadHTML($html);
	1801	+ libxml_clear_errors();
10506	1802
	1803	+ $xpath = new DOMXPath($dom);
10507	1804
10508		-private function mxchat_fetch_loops_mailing_lists($api_key) {
10509		- $url = 'https://app.loops.so/api/v1/lists';
10510		- $response = wp_remote_get($url, array(
10511		- 'headers' => array(
10512		- 'Authorization' => 'Bearer ' . $api_key,
10513		- 'Content-Type' => 'application/json'
10514		- )
10515		- ));
	1805	+ // Simplified selectors focusing on common content areas
	1806	+ $selectors = [
	1807	+ '//article',
	1808	+ '//*[@id="content"]',
	1809	+ '//*[@class="entry-content"]',
	1810	+ '//main',
	1811	+ ];
10516	1812
10517		- if (is_wp_error($response)) {
10518		- return array();
	1813	+ foreach ($selectors as $selector) {
	1814	+ $nodes = $xpath->query($selector);
	1815	+ if ($nodes->length > 0) {
	1816	+ $content = '';
	1817	+ foreach ($nodes as $node) {
	1818	+ $content .= $dom->saveHTML($node);
	1819	+ }
	1820	+ return $content;
	1821	+ }
10519	1822	}
10520	1823
10521		- $body = wp_remote_retrieve_body($response);
10522		- $lists = json_decode($body, true);
10523		-
10524		- return isset($lists) && is_array($lists) ? $lists : array();
	1824	+ // Fallback: Return the entire body content if no specific selector matches
	1825	+ $body = $dom->getElementsByTagName('body');
	1826	+ return $body->length > 0 ? $dom->saveHTML($body->item(0)) : $html;
10525	1827	}
10526	1828
10527		-function mxchat_calculate_cosine_similarity($vec1, $vec2) {
10528		- if (empty($vec1) || empty($vec2)) {
10529		- return 0.0;
	1829	+public function mxchat_handle_sitemap_submission() {
	1830	+ // Check if the form was submitted and the user has sufficient permissions
	1831	+ if (!isset($_POST['submit_sitemap']) || !current_user_can('manage_options')) {
	1832	+ return;
10530	1833	}
10531	1834
10532		- $dot_product = 0.0;
10533		- $norm_a = 0.0;
10534		- $norm_b = 0.0;
	1835	+ // Verify the nonce field for security
	1836	+ check_admin_referer('mxchat_submit_sitemap_action', 'mxchat_submit_sitemap_nonce');
10535	1837
10536		- for ($i = 0; $i < count($vec1); $i++) {
10537		- $dot_product += $vec1[$i] * $vec2[$i];
10538		- $norm_a += pow($vec1[$i], 2);
10539		- $norm_b += pow($vec2[$i], 2);
	1838	+ // Sanitize and retrieve the submitted URL
	1839	+ $submitted_url = esc_url_raw($_POST['sitemap_url']); // Accept either a sitemap URL or a regular URL
	1840	+
	1841	+ // Fetch the content of the submitted URL
	1842	+ $response = wp_remote_get($submitted_url);
	1843	+ if (is_wp_error($response) || wp_remote_retrieve_response_code($response) !== 200) {
	1844	+ set_transient('mxchat_admin_notice_error', 'Failed to fetch the URL. Please check the URL and try again.', 30);
	1845	+ wp_safe_redirect(esc_url(admin_url('admin.php?page=mxchat-prompts')));
	1846	+ exit;
10540	1847	}
10541	1848
10542		- if ($norm_a == 0.0 || $norm_b == 0.0) {
10543		- return 0.0;
10544		- } else {
10545		- return $dot_product / (sqrt($norm_a) * sqrt($norm_b));
10546		- }
10547		-}
	1849	+ $content_type = wp_remote_retrieve_header($response, 'content-type');
	1850	+ $body_content = wp_remote_retrieve_body($response);
10548	1851
10549		-/**
10550		- * Validates nonce and deletes all chat prompts
10551		- */
10552		-public function mxchat_handle_delete_all_prompts() {
10553		- //error_log('=== DELETE ALL DEBUG START ===');
10554		-
10555		- // Verify nonce
10556		- if (!isset($_POST['mxchat_delete_all_prompts_nonce']) || !wp_verify_nonce($_POST['mxchat_delete_all_prompts_nonce'], 'mxchat_delete_all_prompts_action')) {
10557		- //error_log('DEBUG: Nonce verification failed');
10558		- wp_die(__('Nonce verification failed.', 'mxchat'));
10559		- }
10560		-
10561		- // Check permissions
10562		- if (!current_user_can('manage_options')) {
10563		- //error_log('DEBUG: Permission check failed');
10564		- wp_die(__('You do not have sufficient permissions to delete all prompts.', 'mxchat'));
10565		- }
10566		-
10567		- // Get bot_id and content type filter from POST data
10568		- $bot_id = isset($_POST['bot_id']) ? sanitize_text_field($_POST['bot_id']) : 'default';
10569		- $content_type_filter = isset($_POST['content_type_filter']) ? sanitize_text_field($_POST['content_type_filter']) : '';
	1852	+ // Check if the URL points to a sitemap (XML) or a regular HTML page
	1853	+ if (strpos($content_type, 'xml') !== false || strpos($body_content, '<urlset') !== false) {
	1854	+ // Handle Sitemap XML
	1855	+ $xml = simplexml_load_string($body_content);
	1856	+ if ($xml === false) {
	1857	+ set_transient('mxchat_admin_notice_error', 'Invalid sitemap XML. Please provide a valid sitemap.', 30);
	1858	+ wp_safe_redirect(esc_url(admin_url('admin.php?page=mxchat-prompts')));
	1859	+ exit;
	1860	+ }
10570	1861
10571		- $success = true;
10572		- $error_messages = array();
	1862	+ $embedding_success = true; // Flag to track if all embeddings are successful
10573	1863
10574		- // Get bot-specific Pinecone configuration
10575		- $pinecone_manager = MxChat_Pinecone_Manager::get_instance();
10576		- $pinecone_options = $pinecone_manager->mxchat_get_bot_pinecone_options($bot_id);
	1864	+ foreach ($xml->url as $url_element) {
	1865	+ $page_url = (string)$url_element->loc;
10577	1866
10578		- $use_pinecone = ($pinecone_options['mxchat_use_pinecone'] ?? '0') === '1';
	1867	+ $page_response = wp_remote_get($page_url);
	1868	+ if (is_wp_error($page_response) || wp_remote_retrieve_response_code($page_response) !== 200) {
	1869	+ continue;
	1870	+ }
10579	1871
10580		- if ($use_pinecone && !empty($pinecone_options['mxchat_pinecone_api_key'])) {
10581		- // Delete from Pinecone (with optional content type filter)
10582		- $result = $pinecone_manager->mxchat_delete_all_from_pinecone($pinecone_options, $content_type_filter);
	1872	+ $page_html = wp_remote_retrieve_body($page_response);
	1873	+ $page_content = $this->mxchat_extract_main_content($page_html);
	1874	+ $sanitized_content = $this->mxchat_sanitize_content_for_api($page_content);
10583	1875
10584		- if (!$result['success']) {
10585		- $success = false;
10586		- $error_messages[] = $result['message'];
	1876	+ if (!empty($sanitized_content)) {
	1877	+ $embedding_vector = $this->mxchat_generate_embedding($sanitized_content);
	1878	+ if (is_array($embedding_vector)) {
	1879	+ MxChat_Utils::submit_content_to_db($sanitized_content, $page_url, $this->options['api_key']);
	1880	+ } else {
	1881	+ $embedding_success = false; // Set flag to false if any embedding fails
	1882	+ }
	1883	+ }
10587	1884	}
10588	1885
10589		- } else {
10590		- // Delete from WordPress database
10591		- global $wpdb;
10592		- $table_name = $wpdb->prefix . 'mxchat_system_prompt_content';
10593		-
10594		- // Build WHERE conditions
10595		- $where_clauses = array();
10596		- $where_values = array();
10597		-
10598		- // Bot filter
10599		- if ($bot_id !== 'default' && class_exists('MxChat_Multi_Bot_Manager')) {
10600		- $where_clauses[] = 'bot_id = %s';
10601		- $where_values[] = $bot_id;
	1886	+ if ($embedding_success) {
	1887	+ set_transient('mxchat_admin_notice_success', 'Sitemap content successfully submitted!', 30);
	1888	+ } else {
	1889	+ set_transient('mxchat_admin_notice_error', 'Some content failed to embed. Please check your API key and try again.', 30);
10602	1890	}
10603	1891
10604		- // Content type filter
10605		- if (!empty($content_type_filter)) {
10606		- $where_clauses[] = 'content_type = %s';
10607		- $where_values[] = $content_type_filter;
10608		- }
	1892	+ } else {
	1893	+ // Handle Regular URL (HTML Page)
	1894	+ $page_content = $this->mxchat_extract_main_content($body_content);
	1895	+ $sanitized_content = $this->mxchat_sanitize_content_for_api($page_content);
10609	1896
10610		- if (!empty($where_clauses)) {
10611		- $where_sql = implode(' AND ', $where_clauses);
10612		- $result = $wpdb->query($wpdb->prepare("DELETE FROM {$table_name} WHERE {$where_sql}", $where_values));
	1897	+ if (!empty($sanitized_content)) {
	1898	+ $embedding_vector = $this->mxchat_generate_embedding($sanitized_content);
	1899	+ if (is_array($embedding_vector)) {
	1900	+ MxChat_Utils::submit_content_to_db($sanitized_content, $submitted_url, $this->options['api_key']);
	1901	+ set_transient('mxchat_admin_notice_success', 'URL content successfully submitted!', 30);
	1902	+ } else {
	1903	+ set_transient('mxchat_admin_notice_error', 'Failed to generate embedding for the URL content. Please check your API key and try again.', 30);
	1904	+ }
10613	1905	} else {
10614		- // No filters — delete all
10615		- $result = $wpdb->query("DELETE FROM {$table_name}");
	1906	+ set_transient('mxchat_admin_notice_error', 'No valid content found on the provided URL.', 30);
10616	1907	}
10617		-
10618		- if ($result === false) {
10619		- $success = false;
10620		- $error_messages[] = 'Failed to delete from WordPress database';
10621		- }
10622	1908	}
10623	1909
10624		- // Redirect back with a success message and bot_id
10625		- $redirect_url = add_query_arg(array(
10626		- 'page' => 'mxchat-prompts',
10627		- 'bot_id' => $bot_id,
10628		- 'all_deleted' => $success ? 'true' : 'false'
10629		- ), admin_url('admin.php'));
10630		-
10631		- wp_safe_redirect($redirect_url);
	1910	+ // Redirect after setting the transient
	1911	+ wp_safe_redirect(esc_url(admin_url('admin.php?page=mxchat-prompts')));
10632	1912	exit;
10633	1913	}
10634	1914
10635	1915
10636	1916
10637		- /**
10638		- * Handles deletion prompt with nonce validation
10639		- */
10640		- public function mxchat_handle_delete_prompt() {
10641		- // Sanitize and validate nonce
10642		- $nonce = isset($_GET['_wpnonce']) ? sanitize_text_field(wp_unslash($_GET['_wpnonce'])) : '';
10643		- if (empty($nonce) || !wp_verify_nonce($nonce, 'mxchat_delete_prompt_nonce')) {
10644		- wp_die(esc_html__('Nonce verification failed.', 'mxchat'));
10645		- }
	1917	+private function mxchat_sanitize_content_for_api($content) {
	1918	+ // Remove script, style tags, and HTML comments
	1919	+ $content = preg_replace('/<script\b[^>]*>(.*?)<\/script>/is', '', $content);
	1920	+ $content = preg_replace('/<style\b[^>]*>(.*?)<\/style>/is', '', $content);
	1921	+ $content = preg_replace('/<!--(.|\s)*?-->/', '', $content);
10646	1922
10647		- // Check permissions
10648		- if (!current_user_can('manage_options')) {
10649		- wp_die(esc_html__('You do not have sufficient permissions to delete prompts.', 'mxchat'));
10650		- }
	1923	+ // Remove all HTML tags and decode HTML entities
	1924	+ $content = wp_strip_all_tags($content);
	1925	+ $content = html_entity_decode($content, ENT_QUOTES | ENT_HTML5);
10651	1926
10652		- // Get ID and source parameters
10653		- $id = isset($_GET['id']) ? sanitize_text_field($_GET['id']) : '';
10654		- $source = isset($_GET['source']) ? sanitize_text_field($_GET['source']) : '';
	1927	+ // Trim and normalize whitespace
	1928	+ $content = trim(preg_replace('/\s+/', ' ', $content));
10655	1929
10656		- if (empty($id)) {
10657		- wp_die(esc_html__('Invalid prompt ID.', 'mxchat'));
10658		- }
	1930	+ return $content;
	1931	+}
10659	1932
10660		- $success = false;
10661		- $error_message = '';
10662	1933
10663		- // Check if Pinecone is enabled and determine source automatically if not specified
10664		- $pinecone_options = get_option('mxchat_pinecone_addon_options', array());
10665		- $use_pinecone = ($pinecone_options['mxchat_use_pinecone'] ?? '0') === '1';
10666	1934
10667		- // If source is not specified, determine based on Pinecone configuration
10668		- if (empty($source)) {
10669		- $source = $use_pinecone ? 'pinecone' : 'wordpress';
10670		- }
10671		-
10672		- if ($source === 'pinecone' || $use_pinecone) {
10673		- //error_log('[MXCHAT-DELETE] Deleting from Pinecone, ID: ' . $id);
10674		-
10675		- // Handle Pinecone deletion
10676		- if (empty($pinecone_options['mxchat_pinecone_host']) ||
10677		- empty($pinecone_options['mxchat_pinecone_api_key'])) {
10678		- wp_die(esc_html__('Pinecone configuration is missing.', 'mxchat'));
10679		- }
10680		-
10681		- // Delete from Pinecone using the vector ID directly
10682		- $pinecone_manager = MxChat_Pinecone_Manager::get_instance();
10683		- $result = $pinecone_manager->mxchat_delete_from_pinecone_by_vector_id(
10684		- $id,
10685		- $pinecone_options['mxchat_pinecone_api_key'],
10686		- $pinecone_options['mxchat_pinecone_host']
10687		- );
10688		- if ($result['success']) {
10689		- $success = true;
10690		-
10691		- // Remove from vector cache
10692		- $pinecone_manager->mxchat_remove_from_pinecone_vector_cache($id);
10693		- $pinecone_manager->mxchat_remove_from_processed_content_caches($id);
10694		-
10695		- set_transient('mxchat_admin_notice_success',
10696		- esc_html__('Vector deleted successfully from Pinecone.', 'mxchat'), 30);
10697		- } else {
10698		- $error_message = $result['message'];
10699		- set_transient('mxchat_admin_notice_error',
10700		- esc_html__('Failed to delete from Pinecone: ', 'mxchat') . esc_html($error_message), 30);
10701		- }
10702		- } else {
10703		- //error_log('[MXCHAT-DELETE] Deleting from WordPress database, ID: ' . $id);
10704		-
10705		- // Handle WordPress database deletion
10706		- global $wpdb;
10707		- $table_name = $wpdb->prefix . 'mxchat_system_prompt_content';
10708		-
10709		- // Clear cache and delete prompt
10710		- wp_cache_delete('prompt_' . $id, 'mxchat_prompts');
10711		-
10712		- $result = $wpdb->delete(
10713		- $table_name,
10714		- array('id' => intval($id)),
10715		- array('%d')
10716		- );
10717		-
10718		- if ($result !== false) {
10719		- $success = true;
10720		- set_transient('mxchat_admin_notice_success',
10721		- esc_html__('Entry deleted successfully.', 'mxchat'), 30);
10722		- } else {
10723		- set_transient('mxchat_admin_notice_error',
10724		- esc_html__('Failed to delete entry from database.', 'mxchat'), 30);
10725		- }
10726		- }
10727		-
10728		- // Redirect back to the prompts page
10729		- wp_safe_redirect(add_query_arg(
10730		- array(
10731		- 'page' => 'mxchat-prompts',
10732		- 'deleted' => $success ? 'true' : 'false'
10733		- ),
10734		- admin_url('admin.php')
10735		- ));
10736		- exit;
10737		- }
10738		-
10739		-
10740		-
10741		-
10742		- /**
10743		- * Averages multiple vectors into a single vector
10744		- */
10745		- private function mxchat_average_vectors($vectors) {
10746		- $vector_length = count($vectors[0]);
10747		- $sum_vector = array_fill(0, $vector_length, 0);
10748		-
10749		- foreach ($vectors as $vector) {
10750		- for ($i = 0; $i < $vector_length; $i++) {
10751		- $sum_vector[$i] += $vector[$i];
10752		- }
10753		- }
10754		-
10755		- // Divide each component by the number of vectors to get the average
10756		- $num_vectors = count($vectors);
10757		- for ($i = 0; $i < $vector_length; $i++) {
10758		- $sum_vector[$i] /= $num_vectors;
10759		- }
10760		-
10761		- return $sum_vector;
10762		- }
10763		-
10764		-
10765		-
10766		-
10767		- /**
10768		- * Generates embeddings from input text for MXChat
10769		- */
10770		- public function mxchat_generate_embedding($text) {
10771		- // Enable detailed logging for debugging
10772		- //error_log('[MXCHAT-EMBED] Starting embedding generation. Text length: ' . strlen($text) . ' bytes');
10773		- //error_log('[MXCHAT-EMBED] Text preview: ' . substr($text, 0, 100) . '...');
10774		-
10775		- $options = get_option('mxchat_options');
10776		- $selected_model = $options['embedding_model'] ?? 'text-embedding-ada-002';
10777		- //error_log('[MXCHAT-EMBED] Selected embedding model: ' . $selected_model);
10778		-
10779		- // Determine provider and endpoint
10780		- if (strpos($selected_model, 'voyage') === 0) {
10781		- $api_key = $options['voyage_api_key'] ?? '';
10782		- $endpoint = 'https://api.voyageai.com/v1/embeddings';
10783		- $provider_name = 'Voyage AI';
10784		- //error_log('[MXCHAT-EMBED] Using Voyage AI API');
10785		- } elseif (strpos($selected_model, 'gemini-embedding') === 0) {
10786		- $api_key = $options['gemini_api_key'] ?? '';
10787		- $endpoint = 'https://generativelanguage.googleapis.com/v1beta/models/' . $selected_model . ':embedContent';
10788		- $provider_name = 'Google Gemini';
10789		- //error_log('[MXCHAT-EMBED] Using Google Gemini API');
10790		- } else {
10791		- $api_key = $options['api_key'] ?? '';
10792		- $endpoint = 'https://api.openai.com/v1/embeddings';
10793		- $provider_name = 'OpenAI';
10794		- //error_log('[MXCHAT-EMBED] Using OpenAI API');
10795		- }
10796		-
10797		- //error_log('[MXCHAT-EMBED] Using endpoint: ' . $endpoint);
10798		-
10799		- if (empty($api_key)) {
10800		- $error_message = sprintf('Missing %s API key. Please configure your API key in the MxChat settings.', $provider_name);
10801		- //error_log('[MXCHAT-EMBED] Error: ' . $error_message);
10802		- return $error_message;
10803		- }
10804		-
10805		- // Check if text is too long (for OpenAI, roughly estimate tokens as words/0.75)
10806		- $estimated_tokens = ceil(str_word_count($text) / 0.75);
10807		- //error_log('[MXCHAT-EMBED] Estimated token count: ~' . $estimated_tokens);
10808		-
10809		- if ($estimated_tokens > 8000 && strpos($selected_model, 'voyage') === false && strpos($selected_model, 'gemini-embedding') === false) {
10810		- //error_log('[MXCHAT-EMBED] Warning: Text may exceed OpenAI token limits (8K for most models)');
10811		- // Consider truncating text here
10812		- }
10813		-
10814		- // Prepare request body based on provider
10815		- if (strpos($selected_model, 'gemini-embedding') === 0) {
10816		- // Gemini API format
10817		- $request_body = array(
10818		- 'model' => 'models/' . $selected_model,
10819		- 'content' => array(
10820		- 'parts' => array(
10821		- array('text' => $text)
10822		- )
10823		- )
10824		- );
10825		-
10826		- // Set output dimensionality to 1536 for consistency with other models
10827		- $request_body['outputDimensionality'] = 1536;
10828		- } else {
10829		- // OpenAI/Voyage API format
10830		- $request_body = array(
10831		- 'model' => $selected_model,
10832		- 'input' => $text
10833		- );
10834		-
10835		- // Add output_dimension for voyage-3-large model
10836		- if ($selected_model === 'voyage-3-large') {
10837		- $request_body['output_dimension'] = 2048;
10838		- }
10839		- }
10840		-
10841		- //error_log('[MXCHAT-EMBED] Request prepared with model: ' . $selected_model);
10842		-
10843		- // Prepare headers based on provider
10844		- if (strpos($selected_model, 'gemini-embedding') === 0) {
10845		- // Gemini uses API key as query parameter
10846		- $endpoint .= '?key=' . $api_key;
10847		- $headers = array(
10848		- 'Content-Type' => 'application/json'
10849		- );
10850		- } else {
10851		- // OpenAI/Voyage use Bearer token
10852		- $headers = array(
10853		- 'Authorization' => 'Bearer ' . $api_key,
10854		- 'Content-Type' => 'application/json'
10855		- );
10856		- }
10857		-
10858		- // Make API request
10859		- //error_log('[MXCHAT-EMBED] Sending API request to: ' . $endpoint);
10860		- $response = wp_remote_post($endpoint, array(
10861		- 'body' => wp_json_encode($request_body),
10862		- 'headers' => $headers,
10863		- 'timeout' => 60 // Increased timeout for large inputs
10864		- ));
10865		-
10866		- // Handle wp_remote_post errors
10867		- if (is_wp_error($response)) {
10868		- $error_message = $response->get_error_message();
10869		- //error_log('[MXCHAT-EMBED] WP Remote Post Error: ' . $error_message);
10870		- return 'Connection error: ' . $error_message;
10871		- }
10872		-
10873		- // Get and check HTTP response code
10874		- $http_code = wp_remote_retrieve_response_code($response);
10875		- //error_log('[MXCHAT-EMBED] API Response Code: ' . $http_code);
10876		-
10877		- if ($http_code !== 200) {
10878		- $error_body = wp_remote_retrieve_body($response);
10879		- //error_log('[MXCHAT-EMBED] API Error Response Body: ' . $error_body);
10880		-
10881		- // Try to parse error for more details
10882		- $error_json = json_decode($error_body, true);
10883		- if (json_last_error() === JSON_ERROR_NONE && isset($error_json['error'])) {
10884		- $error_type = $error_json['error']['type'] ?? 'unknown';
10885		- $error_message = $error_json['error']['message'] ?? 'No message';
10886		- //error_log('[MXCHAT-EMBED] API Error Type: ' . $error_type);
10887		- //error_log('[MXCHAT-EMBED] API Error Message: ' . $error_message);
10888		-
10889		- // Customize error message for common API errors
10890		- if ($error_type === 'invalid_request_error' && strpos($error_message, 'API key') !== false) {
10891		- $error_message = sprintf('Invalid %s API key. Please check your API key in the MxChat settings.', $provider_name);
10892		- } elseif ($error_type === 'authentication_error') {
10893		- $error_message = sprintf('%s authentication failed. Please verify your API key in the MxChat settings.', $provider_name);
10894		- }
10895		-
10896		- //error_log('[MXCHAT-EMBED] Returning error: ' . $error_message);
10897		- return $error_message;
10898		- }
10899		-
10900		- $error_message = sprintf("API Error (HTTP %d): Unable to generate embedding", $http_code);
10901		- //error_log('[MXCHAT-EMBED] Returning error: ' . $error_message);
10902		- return $error_message;
10903		- }
10904		-
10905		- // Parse response body
10906		- $response_body = wp_remote_retrieve_body($response);
10907		- //error_log('[MXCHAT-EMBED] Received response length: ' . strlen($response_body) . ' bytes');
10908		-
10909		- $response_data = json_decode($response_body, true);
10910		-
10911		- if (json_last_error() !== JSON_ERROR_NONE) {
10912		- $error = json_last_error_msg();
10913		- //error_log('[MXCHAT-EMBED] JSON Parse Error: ' . $error);
10914		- //error_log('[MXCHAT-EMBED] Response preview: ' . substr($response_body, 0, 200));
10915		- return "Failed to parse API response: $error";
10916		- }
10917		-
10918		- // Handle different response formats based on provider
10919		- if (strpos($selected_model, 'gemini-embedding') === 0) {
10920		- // Gemini API response format
10921		- if (isset($response_data['embedding']['values'])) {
10922		- $embedding_dimensions = count($response_data['embedding']['values']);
10923		- //error_log('[MXCHAT-EMBED] Successfully extracted Gemini embedding with ' . $embedding_dimensions . ' dimensions');
10924		-
10925		- // Check if embedding dimensions are as expected (should be 1536)
10926		- if ($embedding_dimensions !== 1536) {
10927		- //error_log('[MXCHAT-EMBED] Warning: Unexpected Gemini embedding dimensions: ' . $embedding_dimensions);
10928		- }
10929		-
10930		- MxChat_Utils::stamp_active_embedding_model($selected_model);
10931		- return $response_data['embedding']['values'];
10932		- } else {
10933		- //error_log('[MXCHAT-EMBED] Error: No embedding found in Gemini response');
10934		- //error_log('[MXCHAT-EMBED] Response structure: ' . wp_json_encode(array_keys($response_data)));
10935		-
10936		- if (isset($response_data['error'])) {
10937		- $error_message = "Gemini API Error in response: " . wp_json_encode($response_data['error']);
10938		- //error_log('[MXCHAT-EMBED] ' . $error_message);
10939		- return $error_message;
10940		- }
10941		-
10942		- $error_message = "Invalid Gemini API response format: No embedding found";
10943		- //error_log('[MXCHAT-EMBED] ' . $error_message);
10944		- return $error_message;
10945		- }
10946		- } else {
10947		- // OpenAI/Voyage API response format
10948		- if (isset($response_data['data'][0]['embedding'])) {
10949		- $embedding_dimensions = count($response_data['data'][0]['embedding']);
10950		- //error_log('[MXCHAT-EMBED] Successfully extracted embedding with ' . $embedding_dimensions . ' dimensions');
10951		-
10952		- // Check if embedding dimensions are as expected
10953		- if (($selected_model === 'text-embedding-ada-002' && $embedding_dimensions !== 1536) ||
10954		- ($selected_model === 'voyage-3-large' && $embedding_dimensions !== 2048)) {
10955		- //error_log('[MXCHAT-EMBED] Warning: Unexpected embedding dimensions');
10956		- }
10957		-
10958		- MxChat_Utils::stamp_active_embedding_model($selected_model);
10959		- return $response_data['data'][0]['embedding'];
10960		- } else {
10961		- //error_log('[MXCHAT-EMBED] Error: No embedding found in response');
10962		- //error_log('[MXCHAT-EMBED] Response structure: ' . wp_json_encode(array_keys($response_data)));
10963		-
10964		- if (isset($response_data['error'])) {
10965		- $error_message = "API Error in response: " . wp_json_encode($response_data['error']);
10966		- //error_log('[MXCHAT-EMBED] ' . $error_message);
10967		- return $error_message;
10968		- }
10969		-
10970		- $error_message = "Invalid API response format: No embedding found";
10971		- //error_log('[MXCHAT-EMBED] ' . $error_message);
10972		- return $error_message;
10973		- }
10974		- }
10975		- }
10976	1935
10977	1936
10978	1937
10979	1938	}