PluginProbe
MxChat – AI Chatbot & Content Generation for WordPress / 3.2.23
MxChat – AI Chatbot & Content Generation for WordPress v3.2.23
3.2.25 3.2.24 3.2.23 3.2.22 3.2.21 3.2.20 3.2.19 3.2.18 3.2.17 3.2.16 3.2.15 3.2.14 3.2.12 3.2.13 3.2.11 3.2.10 3.2.9 3.2.8 3.2.7 3.2.6 3.2.5 3.2.4 3.2.3 3.2.2 3.2.1 All 156 releases
mxchat-basic / includes / class-mxchat-public.php

class-mxchat-public.php in MxChat – AI Chatbot & Content Generation for WordPress 3.2.23, at includes/class-mxchat-public.php

1,085 lines 60.5 KB
No matching file
Up and down to move Enter to open Esc to close
Raw Download Zip
1 <?php
2 if (!defined('ABSPATH')) {
3 exit; // Exit if accessed directly
4 }
5
6 class MxChat_Public {
7 private $options;
8
9 // True once any FLOATING instance has rendered on this request via the
10 // shortcode (or the block wrapping it) — append_chatbot_to_body() then
11 // yields, so an explicit floating placement never doubles up with the
12 // Auto-Display instance (plan 95dd1e).
13 private static $floating_instance_rendered = false;
14
15 public function __construct() {
16 // Simply get the options without defining duplicated defaults
17 $this->options = get_option('mxchat_options', array());
18 add_shortcode('mxchat_chatbot', array($this, 'render_chatbot_shortcode'));
19 add_action('wp_footer', array($this, 'append_chatbot_to_body'));
20 }
21
22 /**
23 * UPDATED: Enhanced should_hide_chatbot method - only blocks auto-append, not shortcodes
24 */
25 private function should_hide_chatbot($context = 'auto') {
26 global $post;
27
28 if (!$post) {
29 return false;
30 }
31
32 // Only hide if it's the auto-append context (floating="yes" from global setting)
33 // Allow shortcodes to work regardless of this setting
34 if ($context === 'auto') {
35 // Check new visibility field first
36 $visibility = get_post_meta($post->ID, '_mxchat_page_visibility', true);
37 if ($visibility === 'hide') {
38 return true;
39 }
40
41 // Backward compat: check legacy field if new field not set
42 if (empty($visibility)) {
43 $hide_chatbot = get_post_meta($post->ID, '_mxchat_hide_chatbot', true);
44 if ($hide_chatbot === '1') {
45 return true;
46 }
47 }
48 }
49
50 return false;
51 }
52
53 /**
54 * UPDATED: Enhanced append_chatbot_to_body method with context
55 */
56 public function append_chatbot_to_body() {
57 // Only run on public pages
58 if (is_admin() || wp_doing_ajax()) {
59 return;
60 }
61
62 // Check if auto-append chatbot should be hidden on this page
63 if ($this->should_hide_chatbot('auto')) {
64 return; // Don't show auto-appended chatbot
65 }
66
67 // An explicit floating placement (shortcode or the 95dd1e block) already
68 // rendered during content — appending the auto instance would put two
69 // floating widgets on the page with colliding element ids. The explicit
70 // placement wins; content renders before wp_footer, so the flag is set
71 // by the time this runs.
72 if (self::$floating_instance_rendered) {
73 return;
74 }
75
76 // Get the bot that should be displayed using new logic
77 $bot_to_show = $this->get_display_bot();
78
79 // Don't show chatbot if determination is false
80 if ($bot_to_show === false) {
81 return;
82 }
83
84 // Handle consent for display
85 $consent_category = 'marketing';
86 $has_consent = true;
87
88 if (
89 isset($this->options['complianz_toggle']) &&
90 $this->options['complianz_toggle'] === 'on' &&
91 function_exists('cmplz_has_consent')
92 ) {
93 $has_consent = cmplz_has_consent($consent_category);
94 }
95
96 // Display the appropriate chatbot (always floating for auto-append)
97 if ($bot_to_show && $bot_to_show !== 'default') {
98 // Show specific bot
99 echo do_shortcode('[mxchat_chatbot floating="yes" bot_id="' . esc_attr($bot_to_show) . '" has_consent="' . ($has_consent ? 'yes' : 'no') . '"]');
100 } else {
101 // Show default bot
102 echo do_shortcode('[mxchat_chatbot floating="yes" has_consent="' . ($has_consent ? 'yes' : 'no') . '"]');
103 }
104 }
105
106 private function mxchat_get_user_identifier() {
107 return sanitize_text_field($_SERVER['REMOTE_ADDR']);
108 }
109
110 /**
111 * UPDATED: Enhanced shortcode with context-aware hiding
112 */
113 public function render_chatbot_shortcode($atts) {
114 // Smart asset loading safety net (plan-915355): if the opt-in enqueue gate
115 // skipped assets on this request (shortcode invisible to has_shortcode —
116 // builder-stored content, template files, widget areas), force the FULL
117 // enqueue now, including the mxchatChat settings payload and the delayed
118 // loader wiring. The integrator method is idempotent, so this is a no-op
119 // when assets already went out at wp_enqueue_scripts time.
120 if (self::is_smart_asset_loading_enabled() && !wp_style_is('mxchat-chat-css', 'enqueued')) {
121 global $mxchat_integrator;
122 if (isset($mxchat_integrator) && is_object($mxchat_integrator)
123 && method_exists($mxchat_integrator, 'mxchat_enqueue_scripts_styles')) {
124 $mxchat_integrator->mxchat_enqueue_scripts_styles(true);
125 }
126 }
127
128 // UPDATED: Add bot_id parameter support and improve logic
129 $attributes = shortcode_atts(array(
130 'floating' => 'yes',
131 'has_consent' => 'yes',
132 'bot_id' => '' // Support for multi-bot functionality - empty means auto-detect
133 ), $atts);
134
135 // Determine which bot to use
136 $bot_id = $this->determine_bot_for_shortcode($attributes['bot_id']);
137
138 // A floating shortcode always renders; what it does is suppress the LATER
139 // auto-append instance (see append_chatbot_to_body), so a page never gets
140 // two floating widgets. This replaced a dead empty branch here that
141 // documented the intent but never suppressed anything (plan 95dd1e).
142 if ($attributes['floating'] === 'yes') {
143 self::$floating_instance_rendered = true;
144 }
145
146 // Non-floating shortcodes (floating="no") should NEVER be blocked by the hide setting
147 // This allows embedded chatbots even when floating is hidden
148
149 $is_floating = $attributes['floating'] === 'yes';
150 $bot_id = sanitize_key($bot_id); // Sanitize bot ID
151
152 // Rest of your existing shortcode rendering logic continues unchanged...
153 // [All the existing HTML generation code remains the same]
154
155 // Get bot-specific options if multi-bot add-on is active
156 $bot_options = $this->get_bot_options($bot_id);
157
158 // Use bot-specific options or fall back to default options
159 $current_options = !empty($bot_options) ? $bot_options : $this->options;
160
161 // [Rest of your existing rendering code stays exactly the same]
162 // Just remove the old should_hide_chatbot() check from the beginning
163
164 // Check for Complianz consent if the toggle is enabled
165 $initial_visibility = 'hidden';
166 $additional_class = '';
167
168 if (isset($current_options['complianz_toggle']) && $current_options['complianz_toggle'] === 'on') {
169 $additional_class = ' no-consent';
170 }
171 $visibility_class = $initial_visibility . $additional_class;
172
173 $theme_options = get_option('mxchat_theme_options', array());
174 $custom_send_image = isset($theme_options['custom_send_button_image']) ? esc_url($theme_options['custom_send_button_image']) : '';
175 $send_width = isset($theme_options['send_button_width']) ? intval($theme_options['send_button_width']) : 24;
176 $send_height = isset($theme_options['send_button_height']) ? intval($theme_options['send_button_height']) : 24;
177 $send_rotation = isset($theme_options['send_button_rotation']) ? intval($theme_options['send_button_rotation']) : 0;
178
179 // Check if an AI theme is active (global or bot-specific) - if so, skip inline color styles
180 $ai_theme_active = !empty($theme_options['active_ai_theme_css']);
181 $bot_has_theme = isset($theme_options['bot_theme_assignments'][$bot_id]);
182 $skip_inline_colors = $ai_theme_active || $bot_has_theme;
183
184 // UPDATED: Use current_options instead of $this->options throughout
185 $bg_color = $current_options['chatbot_background_color'] ?? '#fff';
186 $user_message_bg_color = $current_options['user_message_bg_color'] ?? '#fff';
187 $user_message_font_color = $current_options['user_message_font_color'] ?? '#212121';
188 $bot_message_bg_color = $current_options['bot_message_bg_color'] ?? '#212121';
189 $bot_message_font_color = $current_options['bot_message_font_color'] ?? '#fff';
190 $top_bar_bg_color = $current_options['top_bar_bg_color'] ?? '#212121';
191 $send_button_font_color = $current_options['send_button_font_color'] ?? '#212121';
192 $intro_message = $current_options['intro_message'] ?? esc_html__('Hello! How can I assist you today?', 'mxchat');
193 $top_bar_title = $current_options['top_bar_title'] ?? esc_html__('MxChat: Basic', 'mxchat');
194 $chatbot_background_color = $current_options['chatbot_background_color'] ?? '#212121';
195 $icon_color = $current_options['icon_color'] ?? '#fff';
196 $chat_input_font_color = $current_options['chat_input_font_color'] ?? '#212121';
197 $close_button_color = $current_options['close_button_color'] ?? '#fff';
198 $chatbot_bg_color = $current_options['chatbot_bg_color'] ?? '#fff';
199 $pre_chat_message = isset($current_options['pre_chat_message']) ? sanitize_textarea_field(trim($current_options['pre_chat_message'])) : '';
200 $user_id = sanitize_key($this->mxchat_get_user_identifier());
201 $email_state = $this->determine_email_collection_state();
202 $show_email_form = $email_state['show_email_form'];
203 $user_email = $email_state['user_email'] ?? '';
204 $user_name = $email_state['user_name'] ?? '';
205 // Pre-chat dismissal now handled client-side via localStorage (zero server load)
206 $input_copy = isset($current_options['input_copy']) ? esc_attr($current_options['input_copy']) : esc_attr__('How can I assist?', 'mxchat');
207 $rate_limit_message = isset($current_options['rate_limit_message']) ? esc_attr($current_options['rate_limit_message']) : esc_attr__('Rate limit exceeded. Please try again later.', 'mxchat');
208 $mode_indicator_bg_color = $current_options['mode_indicator_bg_color'] ?? '#212121';
209 $mode_indicator_font_color = $current_options['mode_indicator_font_color'] ?? '#fff';
210 $quick_questions_toggle_color = $current_options['quick_questions_toggle_color'] ?? '#212121';
211
212 $privacy_toggle = isset($current_options['privacy_toggle']) && $current_options['privacy_toggle'] === 'on';
213 $privacy_text = isset($current_options['privacy_text']) ? wp_kses_post($current_options['privacy_text']) : wp_kses_post(__('By chatting, you agree to our <a href="https://example.com/privacy-policy" target="_blank">privacy policy</a>.', 'mxchat'));
214
215 $popular_question_1 = isset($current_options['popular_question_1']) ? esc_html($current_options['popular_question_1']) : '';
216 $popular_question_2 = isset($current_options['popular_question_2']) ? esc_html($current_options['popular_question_2']) : '';
217 $popular_question_3 = isset($current_options['popular_question_3']) ? esc_html($current_options['popular_question_3']) : '';
218 $additional_questions = isset($current_options['additional_popular_questions']) ? $current_options['additional_popular_questions'] : [];
219 $custom_icon = isset($current_options['custom_icon']) ? esc_url($current_options['custom_icon']) : '';
220 $title_icon = isset($current_options['title_icon']) ? esc_url($current_options['title_icon']) : '';
221 // AI agent text - if explicitly set to empty string, hide the indicator entirely
222 $ai_agent_text = isset($current_options['ai_agent_text']) ? $current_options['ai_agent_text'] : __('AI Agent', 'mxchat');
223
224 $live_agent_message_bg_color = $current_options['live_agent_message_bg_color'] ?? '#212121';
225 $live_agent_message_font_color = $current_options['live_agent_message_font_color'] ?? '#fff';
226 $enable_email_block = isset($current_options['enable_email_block']) &&
227 ($current_options['enable_email_block'] === '1' || $current_options['enable_email_block'] === 'on');
228
229 // Add name field variables
230 $enable_name_field = isset($current_options['enable_name_field']) &&
231 ($current_options['enable_name_field'] === '1' || $current_options['enable_name_field'] === 'on');
232 $name_field_placeholder = isset($current_options['name_field_placeholder']) ?
233 esc_attr($current_options['name_field_placeholder']) :
234 esc_attr__('Enter your name', 'mxchat');
235
236 // Require Email Address (c0cfaf). Default ON — absent key means required,
237 // so existing installs render the same markup they always have.
238 $require_email_field = ($current_options['lead_capture_require_email_toggle'] ?? 'on') === 'on';
239
240 // Pre-fill the form from the profile when a signed-in visitor is being
241 // shown it (c0cfaf). Emitted ONLY for a logged-in request, so the markup a
242 // guest gets — the copy a page cache actually stores and re-serves — never
243 // carries anyone's address. WordPress already marks logged-in responses
244 // uncacheable, and such a page carries per-user data from other plugins
245 // regardless.
246 $prefill_email_attr = '';
247 $prefill_name_attr = '';
248 if (is_user_logged_in()) {
249 if ($user_email !== '') {
250 $prefill_email_attr = ' value="' . esc_attr($user_email) . '"';
251 }
252 if ($user_name !== '') {
253 $prefill_name_attr = ' value="' . esc_attr($user_name) . '"';
254 }
255 }
256
257 // Consent checkbox (b062c4). Default OFF — with the toggle off this block
258 // renders nothing and the form markup is byte-identical to before.
259 $enable_consent_checkbox = isset($current_options['enable_consent_checkbox']) &&
260 ($current_options['enable_consent_checkbox'] === '1' || $current_options['enable_consent_checkbox'] === 'on');
261 $consent_checkbox_required = isset($current_options['consent_checkbox_required']) &&
262 ($current_options['consent_checkbox_required'] === '1' || $current_options['consent_checkbox_required'] === 'on');
263 // Owner content, kses'd through the shared allowlist at render time as well
264 // as save time — the render is the security boundary the spec names.
265 $consent_checkbox_label = MxChat_Utils::sanitize_consent_label(
266 isset($current_options['consent_checkbox_label']) && $current_options['consent_checkbox_label'] !== ''
267 ? $current_options['consent_checkbox_label']
268 : __('I agree to the Privacy Policy.', 'mxchat')
269 );
270
271 ob_start();
272
273 // Check if floating attribute is set to 'yes' and wrap accordingly
274 if ($is_floating) {
275 echo '<div id="floating-chatbot-' . esc_attr($bot_id) . '" class="floating-chatbot ' . $initial_visibility . $additional_class . '">';
276 }
277
278 // Add bot_id to the chatbot wrapper as a data attribute
279 // data-nosnippet: keep the chat widget's UI copy (greeting, title, quick-question
280 // prompts, privacy notice) out of Google search snippets. This wrapper renders in both
281 // floating and inline/shortcode modes, so it covers all in-panel copy in one place.
282 echo '<div id="mxchat-chatbot-wrapper-' . esc_attr($bot_id) . '" class="mxchat-chatbot-wrapper" data-nosnippet data-bot-id="' . esc_attr($bot_id) . '">';
283
284 echo ' <div class="chatbot-top-bar" id="exit-chat-button-' . esc_attr($bot_id) . '"' . ($skip_inline_colors ? '' : ' style="background: ' . esc_attr($top_bar_bg_color) . ';"') . '>';
285 echo ' <div class="chatbot-title-container">';
286 echo ' <div class="chatbot-title-group">';
287 if (!empty($title_icon)) {
288 echo ' <img src="' . esc_url($title_icon) . '" alt="" class="chatbot-title-icon">';
289 }
290 echo ' <p class="chatbot-title"' . ($skip_inline_colors ? '' : ' style="color: ' . esc_attr($close_button_color) . ';"') . '>' . esc_html($top_bar_title) . '</p>';
291 echo ' </div>';
292 // Only show mode indicator if ai_agent_text is not empty
293 if (!empty(trim($ai_agent_text))) {
294 echo '<span class="chat-mode-indicator" id="chat-mode-indicator-' . esc_attr($bot_id) . '" data-ai-text="' . esc_attr($ai_agent_text) . '"' . ($skip_inline_colors ? '' : ' style="color: ' . esc_attr($mode_indicator_font_color) . '; background-color: ' . esc_attr($mode_indicator_bg_color) . ';"') . '>' . esc_html($ai_agent_text) . '</span>';
295 }
296 echo ' </div>';
297 // Overflow menu (3-dot) trigger + dropdown container.
298 // Sibling of .exit-chat, rendered to its left. JS hides the trigger
299 // if no menu items are enabled; outer click + Escape close the menu.
300 echo ' <div class="mxchat-header-menu-wrap" data-bot-id="' . esc_attr($bot_id) . '"' . ($skip_inline_colors ? '' : ' style="--mxchat-menu-bg: ' . esc_attr($bot_message_bg_color) . '; --mxchat-menu-fg: ' . esc_attr($bot_message_font_color) . ';"') . '>';
301 echo ' <button class="mxchat-header-btn mxchat-menu-trigger" type="button" aria-haspopup="menu" aria-expanded="false" aria-label="' . esc_attr__('More options', 'mxchat') . '"' . ($skip_inline_colors ? '' : ' style="color: ' . esc_attr($close_button_color) . ';"') . '>';
302 echo ' <svg xmlns="http://www.w3.org/2000/svg" width="20" height="20" viewBox="0 0 24 24" fill="currentColor" aria-hidden="true">';
303 echo ' <circle cx="12" cy="5" r="2"/><circle cx="12" cy="12" r="2"/><circle cx="12" cy="19" r="2"/>';
304 echo ' </svg>';
305 echo ' </button>';
306 echo ' <div class="mxchat-header-menu" role="menu" aria-hidden="true" hidden></div>';
307 echo ' </div>';
308 echo ' <button class="exit-chat" type="button" aria-label="' . esc_attr__('Close', 'mxchat') . '"' . ($skip_inline_colors ? '' : ' style="color: ' . esc_attr($close_button_color) . ';"') . '>';
309 echo ' <svg xmlns="http://www.w3.org/2000/svg" width="22" height="22" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2.2" stroke-linecap="round" stroke-linejoin="round" id="ic-close" aria-hidden="true">';
310 echo ' <line x1="6" y1="6" x2="18" y2="18"></line>';
311 echo ' <line x1="18" y1="6" x2="6" y2="18"></line>';
312 echo ' </svg>';
313 echo ' <span>' . esc_html__('Close', 'mxchat') . '</span>';
314 echo ' </button>';
315 echo ' </div>';
316
317 // 3b) Main chatbot container
318 echo ' <div id="mxchat-chatbot-' . esc_attr($bot_id) . '" class="mxchat-chatbot"' . ($skip_inline_colors ? '' : ' style="background-color: ' . esc_attr($chatbot_bg_color) . ';"') . '>';
319
320 if ($enable_email_block) {
321 echo '<div id="email-blocker-' . esc_attr($bot_id) . '" class="email-blocker" style="' . ($show_email_form ? '' : 'display: none;') . '">';
322 echo ' <div class="email-blocker-header">';
323
324 $header_html = isset($current_options['email_blocker_header_content'])
325 ? $current_options['email_blocker_header_content']
326 : '';
327 echo wp_kses_post($header_html);
328
329 echo ' </div>';
330 echo ' <form id="email-collection-form-' . esc_attr($bot_id) . '" class="email-collection-form" method="POST" action="">';
331
332 // Add name field if enabled
333 if ($enable_name_field) {
334 echo ' <label for="user-name-' . esc_attr($bot_id) . '" class="sr-only mxchat-name-label">' . esc_html__('Name', 'mxchat') . '</label>';
335 echo ' <input type="text" id="user-name-' . esc_attr($bot_id) . '" name="user_name" class="mxchat-name-input" required' . $prefill_name_attr . ' placeholder="' . $name_field_placeholder . '" />';
336 }
337
338 // The email field drops its required attribute when the owner
339 // has made it optional (c0cfaf). Like the consent checkbox,
340 // the attribute is UX only — the save endpoint re-enforces the
341 // rule server-side, so a direct POST cannot bypass it.
342 echo ' <label for="user-email-' . esc_attr($bot_id) . '" class="sr-only">' . esc_html__('Email Address', 'mxchat') . '</label>';
343 echo ' <input type="email" id="user-email-' . esc_attr($bot_id) . '" name="user_email" class="mxchat-email-input"' . ($require_email_field ? ' required' : '') . $prefill_email_attr . ' placeholder="' . ($require_email_field ? esc_attr__('Enter your email address', 'mxchat') : esc_attr__('Enter your email address (optional)', 'mxchat')) . '" />';
344
345 // Consent checkbox row (b062c4). The native required attribute
346 // is UX only — the save endpoint re-enforces it server-side.
347 // Clicking an anchor inside the label activates the link, not
348 // the checkbox (interactive descendants skip label activation).
349 if ($enable_consent_checkbox) {
350 echo ' <div class="mxchat-consent-row">';
351 echo ' <input type="checkbox" id="user-consent-' . esc_attr($bot_id) . '" name="user_consent" value="1" class="mxchat-consent-checkbox"' . ($consent_checkbox_required ? ' required' : '') . ' />';
352 echo ' <label for="user-consent-' . esc_attr($bot_id) . '" class="mxchat-consent-label">' . $consent_checkbox_label . '</label>';
353 echo ' </div>';
354 }
355
356 echo '<button type="submit" id="email-submit-button-' . esc_attr($bot_id) . '" class="email-submit-button">';
357 $button_text = isset($current_options['email_blocker_button_text'])
358 ? $current_options['email_blocker_button_text']
359 : esc_html__('Start Chat', 'mxchat');
360 echo esc_html($button_text);
361 echo '</button>';
362 echo ' </form>';
363 echo '</div>';
364 }
365
366 echo ' <div id="mxchat-init-loader-' . esc_attr($bot_id) . '" class="mxchat-init-loader" style="display:none;">';
367 echo ' <div class="mxchat-init-loader-dots">';
368 echo ' <span class="dot"></span><span class="dot"></span><span class="dot"></span>';
369 echo ' </div>';
370 echo ' </div>';
371
372 echo ' <div id="chat-container-' . esc_attr($bot_id) . '" class="chat-container" style="' . ($enable_email_block && $show_email_form ? 'display: none;' : '') . '">';
373 // role="log" + polite live region: new messages are announced to
374 // screen readers explicitly, so the arrival signal no longer rides
375 // the post-reply input autofocus (suppressed on touch — plan 03799f).
376 // additions-only + non-atomic, with aria-busy held on the streaming
377 // bubble until [DONE] (chat-script.js) so a streamed reply is
378 // announced once, complete — not per token (WCAG 4.1.3, plan 67f126).
379 echo ' <div id="chat-box-' . esc_attr($bot_id) . '" class="chat-box" role="log" aria-live="polite" aria-atomic="false" aria-relevant="additions text" aria-label="' . esc_attr__('Chat messages', 'mxchat') . '">';
380 // mxchat-intro-message marks the greeting bubble so nothing has to
381 // infer it from position (plan a1a79b). Only this element ever
382 // carries the class — reset and the {visitor_name} substitution
383 // both key off it, and both used to assume the greeting was still
384 // the first .bot-message in the box, which stops being true the
385 // moment chat persistence rehydrates the transcript.
386 echo ' <div class="bot-message mxchat-intro-message"' . ($skip_inline_colors ? '' : ' style="background: ' . esc_attr($bot_message_bg_color) . ';"') . '>';
387 echo ' <div dir="auto"' . ($skip_inline_colors ? '' : ' style="color: ' . esc_attr($bot_message_font_color) . ';"') . '>';
388 echo wp_kses_post($intro_message);
389 echo ' </div>';
390 echo ' </div>';
391 echo ' </div>'; // end #chat-box
392
393
394 // Replace the existing popular questions section with this:
395 echo ' <div id="mxchat-popular-questions-' . esc_attr($bot_id) . '" class="mxchat-popular-questions">';
396 echo ' <div class="mxchat-popular-questions-container">';
397
398 // Collapse button (down arrow) - shows when open, centered at top
399 echo ' <button class="questions-collapse-btn" aria-label="' . esc_attr__('Hide Quick Questions', 'mxchat') . '">';
400 echo ' <svg width="25" height="25" viewBox="0 0 24 24" fill="none"' . ($skip_inline_colors ? '' : ' stroke="' . esc_attr($quick_questions_toggle_color) . '"') . ' stroke-width="2">';
401 echo ' <polyline points="6,9 12,15 18,9"></polyline>';
402 echo ' </svg>';
403 echo ' </button>';
404
405 // Expand button (up arrow) - shows when collapsed
406 echo ' <button class="questions-toggle-btn" aria-label="' . esc_attr__('Show Quick Questions', 'mxchat') . '">';
407 echo ' <svg width="25" height="25" viewBox="0 0 24 24" fill="none"' . ($skip_inline_colors ? '' : ' stroke="' . esc_attr($quick_questions_toggle_color) . '"') . ' stroke-width="2">';
408 echo ' <polyline points="18,15 12,9 6,15"></polyline>';
409 echo ' </svg>';
410 echo ' </button>';
411
412 if (!empty($popular_question_1)) {
413 echo '<button class="mxchat-popular-question" dir="auto">' . esc_html($popular_question_1) . '</button>';
414 }
415 if (!empty($popular_question_2)) {
416 echo '<button class="mxchat-popular-question" dir="auto">' . esc_html($popular_question_2) . '</button>';
417 }
418 if (!empty($popular_question_3)) {
419 echo '<button class="mxchat-popular-question" dir="auto">' . esc_html($popular_question_3) . '</button>';
420 }
421
422 if (!empty($additional_questions) && is_array($additional_questions)) {
423 foreach ($additional_questions as $index => $question) {
424 if (!empty($question)) {
425 echo '<button class="mxchat-popular-question" dir="auto">' . esc_html($question) . '</button>';
426 }
427 }
428 }
429
430 echo ' </div>';
431 echo ' </div>';
432
433 echo ' <div id="input-container-' . esc_attr($bot_id) . '" class="input-container">';
434 // Max input length (plan a3fae2 part C) — global core setting, 0 = unlimited.
435 // Hard-caps typing/paste client-side; the chat handler enforces it server-side too.
436 $mxchat_max_input_length = isset($this->options['max_input_length']) ? intval($this->options['max_input_length']) : 0;
437 $mxchat_maxlength_attr = $mxchat_max_input_length > 0 ? ' maxlength="' . esc_attr($mxchat_max_input_length) . '"' : '';
438 // Visually-hidden label = the input's accessible name (WCAG 3.3.2,
439 // plan 67f126). The placeholder stays as visible prompt copy but
440 // cannot be the name — it vanishes on the first keystroke.
441 echo ' <label for="chat-input-' . esc_attr($bot_id) . '" class="sr-only">' . esc_html__('Type your message', 'mxchat') . '</label>';
442 echo ' <textarea id="chat-input-' . esc_attr($bot_id) . '" class="chat-input" dir="auto"' . $mxchat_maxlength_attr . ' placeholder="' . esc_attr($input_copy) . '"' . ($skip_inline_colors ? '' : ' style="color: ' . esc_attr($chat_input_font_color) . ';"') . '></textarea>';
443 // Language-neutral character counter (plan 7091a2). Numbers only — no
444 // translatable strings — so it reads correctly on every-language install.
445 // Only rendered when a cap is set; hidden until ~80% of the cap, then
446 // ramps neutral -> amber -> red. Decorative (aria-hidden); the textarea's
447 // maxlength carries the real semantics for assistive tech.
448 if ($mxchat_max_input_length > 0) {
449 echo ' <div id="mxchat-char-counter-' . esc_attr($bot_id) . '" class="mxchat-char-counter" aria-hidden="true"><span class="mxchat-char-counter-current">0</span><span class="mxchat-char-counter-sep">/</span><span class="mxchat-char-counter-max">' . esc_html($mxchat_max_input_length) . '</span></div>';
450 }
451 echo ' <button id="send-button-' . esc_attr($bot_id) . '" class="send-button" aria-label="' . esc_attr__('Send message', 'mxchat') . '">';
452 if (!empty($custom_send_image)) {
453 echo ' <img src="' . esc_url($custom_send_image) . '" alt="' . esc_attr__('Send', 'mxchat') . '" style="width: ' . intval($send_width) . 'px; height: ' . intval($send_height) . 'px; transform: rotate(' . intval($send_rotation) . 'deg);" />';
454 } else {
455 $send_svg_style = 'width: ' . intval($send_width) . 'px; height: ' . intval($send_height) . 'px; transform: rotate(' . intval($send_rotation) . 'deg);';
456 if (!$skip_inline_colors) {
457 $send_svg_style = 'fill: ' . esc_attr($send_button_font_color) . '; ' . $send_svg_style;
458 }
459 echo ' <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 512 512" style="' . $send_svg_style . '">';
460 echo ' <path d="M498.1 5.6c10.1 7 15.4 19.1 13.5 31.2l-64 416c-1.5 9.7-7.4 18.2-16 23s-18.9 5.4-28 1.6L284 427.7l-68.5 74.1c-8.9 9.7-22.9 12.9-35.2 8.1S160 493.2 160 480V396.4c0-4 1.5-7.8 4.2-10.7L331.8 202.8c5.8-6.3 5.6-16-.4-22s-15.7-6.4-22-.7L106 360.8 17.7 316.6C7.1 311.3 .3 300.7 0 288.9s5.9-22.8 16.1-28.7l448-256c10.7-6.1 23.9-5.5 34 1.4z"></path>';
461 echo ' </svg>';
462 }
463 echo ' </button>';
464 echo ' </div>';
465
466 echo ' <div class="chat-toolbar">';
467
468 // PDF Upload Button - wrapped in conditional using current_options
469 $show_pdf_button = isset($current_options['show_pdf_upload_button']) ? $current_options['show_pdf_upload_button'] : 'on';
470 if ($show_pdf_button === 'on') {
471 echo ' <input type="file" id="pdf-upload-' . esc_attr($bot_id) . '" class="pdf-upload" accept=".pdf" style="display: none;">';
472 echo ' <button id="pdf-upload-btn-' . esc_attr($bot_id) . '" class="toolbar-btn pdf-upload-btn" title="' . esc_attr__('Upload PDF', 'mxchat') . '">';
473 echo ' <!-- Icon from Font Awesome Free: https://fontawesome.com/license/free -->';
474 echo ' <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 512 512" stroke="currentColor">';
475 echo ' <path d="M64 464l48 0 0 48-48 0c-35.3 0-64-28.7-64-64L0 64C0 28.7 28.7 0 64 0L229.5 0c17 0 33.3 6.7 45.3 18.7l90.5 90.5c12 12 18.7 28.3 18.7 45.3L384 304l-48 0 0-144-80 0c-17.7 0-32-14.3-32-32l0-80L64 48c-8.8 0-16 7.2-16 16l0 384c0 8.8 7.2 16 16 16zM176 352l32 0c30.9 0 56 25.1 56 56s-25.1 56-56 56l-16 0 0 32c0 8.8-7.2 16-16 16s-16-7.2-16-16l0-48 0-80c0-8.8 7.2-16 16-16zm32 80c13.3 0 24-10.7 24-24s-10.7-24-24-24l-16 0 0 48 16 0zm96-80l32 0c26.5 0 48 21.5 48 48l0 64c0 26.5-21.5 48-48 48l-32 0c-8.8 0-16-7.2-16-16l0-128c0-8.8 7.2-16 16-16zm32 128c8.8 0 16-7.2 16-16l0-64c0-8.8-7.2-16-16-16l-16 0 0 96 16 0zm80-112c0-8.8 7.2-16 16-16l48 0c8.8 0 16 7.2 16 16s-7.2 16-16 16l-32 0 0 32 32 0c8.8 0 16 7.2 16 16s-7.2 16-16 16l-32 0 0 48c0 8.8-7.2 16-16 16s-16-7.2-16-16l0-64 0-64z"></path>';
476 echo ' </svg>';
477 echo ' </button>';
478 }
479
480 // Word Upload Button - wrapped in conditional using current_options
481 $show_word_button = isset($current_options['show_word_upload_button']) ? $current_options['show_word_upload_button'] : 'on';
482 if ($show_word_button === 'on') {
483 echo ' <input type="file" id="word-upload-' . esc_attr($bot_id) . '" class="word-upload" accept=".docx" style="display: none;">';
484 echo ' <button id="word-upload-btn-' . esc_attr($bot_id) . '" class="toolbar-btn word-upload-btn" title="' . esc_attr__('Upload Word Document', 'mxchat') . '">';
485 echo ' <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 384 512" stroke="currentColor">';
486 echo ' <path d="M48 448L48 64c0-8.8 7.2-16 16-16l160 0 0 80c0 17.7 14.3 32 32 32l80 0 0 288c0 8.8-7.2 16-16 16L64 464c-8.8 0-16-7.2-16-16zM64 0C28.7 0 0 28.7 0 64L0 448c0 35.3 28.7 64 64 64l256 0c35.3 0 64-28.7 64-64l0-293.5c0-17-6.7-33.3-18.7-45.3L274.7 18.7C262.7 6.7 246.5 0 229.5 0L64 0zm55 241.1c-3.8-12.7-17.2-19.9-29.9-16.1s-19.9 17.2-16.1 29.9l48 160c3 10.2 12.4 17.1 23 17.1s19.9-7 23-17.1l25-83.4 25 83.4c3 10.2 12.4 17.1 23 17.1s19.9-7 23-17.1l48-160c3.8-12.7-3.4-26.1-16.1-29.9s-26.1 3.4-29.9 16.1l-25 83.4-25-83.4c-3-10.2-12.4-17.1-23-17.1s-19.9 7-23 17.1l-25 83.4-25-83.4z"/></svg>';
487 echo ' </button>';
488 }
489
490 // File containers
491 echo ' <div id="active-pdf-container-' . esc_attr($bot_id) . '" class="active-pdf-container" style="display: none;">';
492 echo ' <span id="active-pdf-name-' . esc_attr($bot_id) . '" class="active-pdf-name"></span>';
493 echo ' <button id="remove-pdf-btn-' . esc_attr($bot_id) . '" class="remove-pdf-btn" title="' . esc_attr__('Remove PDF', 'mxchat') . '">';
494 echo ' <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24" width="12" height="12" fill="none" stroke="currentColor" stroke-width="2">';
495 echo ' <line x1="18" y1="6" x2="6" y2="18"></line>';
496 echo ' <line x1="6" y1="6" x2="18" y2="18"></line>';
497 echo ' </svg>';
498 echo ' </button>';
499 echo ' </div>';
500
501 echo ' <div id="active-word-container-' . esc_attr($bot_id) . '" class="active-word-container" style="display: none;">';
502 echo ' <span id="active-word-name-' . esc_attr($bot_id) . '" class="active-word-name"></span>';
503 echo ' <button id="remove-word-btn-' . esc_attr($bot_id) . '" class="remove-word-btn" title="' . esc_attr__('Remove Word Document', 'mxchat') . '">';
504 echo ' <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24" width="12" height="12" fill="none" stroke="currentColor" stroke-width="2">';
505 echo ' <line x1="18" y1="6" x2="6" y2="18"></line>';
506 echo ' <line x1="6" y1="6" x2="18" y2="18"></line>';
507 echo ' </svg>';
508 echo ' </button>';
509 echo ' </div>';
510
511 // Perplexity Button
512 if (apply_filters('mxchat_perplexity_should_show_logo', true)) {
513 echo ' <button id="perplexity-search-btn-' . esc_attr($bot_id) . '" class="toolbar-btn perplexity-search-btn" title="' . esc_attr__('Search with Perplexity', 'mxchat-perplexity') . '">';
514 echo ' <svg fill="currentColor" height="1em" viewBox="0 0 24 24" width="1em" xmlns="http://www.w3.org/2000/svg">';
515 echo ' <path d="M19.785 0v7.272H22.5V17.62h-2.935V24l-7.037-6.194v6.145h-1.091v-6.152L4.392 24v-6.465H1.5V7.188h2.884V0l7.053 6.494V.19h1.09v6.49L19.786 0zm-7.257 9.044v7.319l5.946 5.234V14.44l-5.946-5.397zm-1.099-.08l-5.946 5.398v7.235l5.946-5.234V8.965zm8.136 7.58h1.844V8.349H13.46l6.105 5.54v2.655zm-8.982-8.28H2.59v8.195h1.8v-2.576l6.192-5.62zM5.475 2.476v4.71h5.115l-5.115-4.71zm13.219 0l-5.115 4.71h5.115v-4.71z"></path>';
516 echo ' </svg>';
517 echo ' </button>';
518 }
519
520
521 // Image Analysis Button - hidden by default, controlled by MxChat Vision add-on
522 echo ' <input type="file" id="image-upload-' . esc_attr($bot_id) . '" class="image-upload" accept="image/*" style="display: none;" multiple>';
523 echo ' <button id="image-upload-btn-' . esc_attr($bot_id) . '" class="toolbar-btn image-upload-btn" title="' . esc_attr__('Upload Image for Analysis', 'mxchat') . '" style="display: none;">';
524 echo ' <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" style="fill: none !important;">';
525 echo ' <path d="M14.5 4h-5L7 7H4a2 2 0 0 0-2 2v9a2 2 0 0 0 2 2h16a2 2 0 0 0 2-2V9a2 2 0 0 0-2-2h-3l-2.5-3z" style="fill: none !important;"/>';
526 echo ' <circle cx="12" cy="13" r="3" style="fill: none !important;"/>';
527 echo ' </svg>';
528 echo ' </button>';
529
530 // Toolbar items API (plan 65c9b6). Add-ons put their buttons here
531 // through the mxchat_chat_toolbar_items filter instead of polling
532 // the DOM after load. Only asked for when the toolbar is on: an item
533 // nobody can see is work nobody should do (the Woo cart badge used
534 // to fetch a count for a hidden toolbar on every page view).
535 if (isset($this->options['chat_toolbar_toggle']) && $this->options['chat_toolbar_toggle'] === 'on') {
536 echo self::render_toolbar_items($bot_id);
537 }
538
539 echo ' </div>';
540
541 echo ' <div class="chatbot-footer">';
542
543 // Output the privacy notice if enabled
544 if ($privacy_toggle && !empty($privacy_text)) {
545 echo '<p class="privacy-notice">' . $privacy_text . '</p>';
546 }
547
548 echo ' </div>';
549 echo ' </div>';
550 echo ' </div>';
551 echo '</div>';
552
553 if ($is_floating) {
554 echo '</div>';
555
556 if (!empty($pre_chat_message)) {
557 // Rendered hidden by default — JS checkPreChatDismissal() handles show/hide via localStorage
558 // data-nosnippet: the pre-chat teaser bubble is a sibling outside
559 // .mxchat-chatbot-wrapper, so it needs its own marker to stay out of snippets.
560 echo '<div id="pre-chat-message-' . esc_attr($bot_id) . '" class="pre-chat-message" data-nosnippet style="display:none;">';
561 echo nl2br(esc_html($pre_chat_message));
562 echo '<button class="close-pre-chat-message" aria-label="' . esc_attr__('Close', 'mxchat') . '">&times;</button>';
563 echo '</div>';
564 }
565
566 $is_initially_hidden = (strpos($visibility_class, 'hidden') !== false);
567 $aria_expanded = $is_initially_hidden ? 'false' : 'true';
568 echo '<div class="floating-chatbot-button ' . esc_attr($visibility_class) . '" id="floating-chatbot-button-' . esc_attr($bot_id) . '" role="button" tabindex="0" aria-label="' . esc_attr__('Open chat', 'mxchat') . '" aria-expanded="' . esc_attr($aria_expanded) . '" aria-controls="floating-chatbot-' . esc_attr($bot_id) . '"' . ($skip_inline_colors ? '' : ' style="background: ' . esc_attr($chatbot_background_color) . '; color: ' . esc_attr($send_button_font_color) . ';"') . '>';
569 echo '<div id="chat-notification-badge-' . esc_attr($bot_id) . '" class="chat-notification-badge" style="display: none; position: absolute; top: -8px; right: -8px; background-color: #ff4444; color: white; border-radius: 50%; padding: 4px 8px; font-size: 12px; font-weight: bold; z-index: 10001;">1</div>';
570
571 if (!empty($custom_icon)) {
572 echo '<img src="' . $custom_icon . '" alt="' . esc_attr__('Chatbot Icon', 'mxchat') . '" style="height: 48px; width: 48px; object-fit: contain;" />';
573 } else {
574 $widget_icon_style = 'height: 48px; width: 48px;';
575 if (!$skip_inline_colors) {
576 $widget_icon_style .= ' fill: ' . esc_attr($icon_color) . ';';
577 }
578 echo '<svg id="widget_icon_10" style="' . $widget_icon_style . '" viewBox="0 0 1120 1120" fill="none" xmlns="http://www.w3.org/2000/svg">';
579 echo ' <path fill-rule="evenodd" clip-rule="evenodd" d="M252 434C252 372.144 302.144 322 364 322H770C831.856 322 882 372.144 882 434V614.459L804.595 585.816C802.551 585.06 800.94 583.449 800.184 581.405L763.003 480.924C760.597 474.424 751.403 474.424 748.997 480.924L711.816 581.405C711.06 583.449 709.449 585.06 707.405 585.816L606.924 622.997C600.424 625.403 600.424 634.597 606.924 637.003L707.405 674.184C709.449 674.94 711.06 676.551 711.816 678.595L740.459 756H629.927C629.648 756.476 629.337 756.945 628.993 757.404L578.197 825.082C572.597 832.543 561.403 832.543 555.803 825.082L505.007 757.404C504.663 756.945 504.352 756.476 504.073 756H364C302.144 756 252 705.856 252 644V434ZM633.501 471.462C632.299 468.212 627.701 468.212 626.499 471.462L619.252 491.046C618.874 492.068 618.068 492.874 617.046 493.252L597.462 500.499C594.212 501.701 594.212 506.299 597.462 507.501L617.046 514.748C618.068 515.126 618.874 515.932 619.252 516.954L626.499 536.538C627.701 539.788 632.299 539.788 633.501 536.538L640.748 516.954C641.126 515.932 641.932 515.126 642.954 514.748L662.538 507.501C665.788 506.299 665.788 501.701 662.538 500.499L642.954 493.252C641.932 492.874 641.126 492.068 640.748 491.046L633.501 471.462Z" ></path>';
580 echo ' <path d="M771.545 755.99C832.175 755.17 881.17 706.175 881.99 645.545L804.595 674.184C802.551 674.94 800.94 676.551 800.184 678.595L771.545 755.99Z" ></path>';
581 echo '</svg>';
582 }
583 echo '</div>';
584 }
585
586 return ob_get_clean();
587 }
588
589 /**
590 * Render the add-on items of the chat toolbar (plan-mxchat-20260916-65c9b6).
591 *
592 * `mxchat_chat_toolbar_items` receives an empty array and the bot id and
593 * returns items shaped ['id' => 'woo-cart', 'html' => '<button …>…</button>',
594 * 'order' => 10]. Items are sorted by order (ties keep filter order), keyed
595 * by id so a later callback can replace an earlier one, and the html is run
596 * through wp_kses with the post allow-list plus the SVG shapes a toolbar
597 * icon needs (filterable via mxchat_chat_toolbar_items_allowed_html).
598 * Add-ons must not add the dropdowns / panels their button opens here —
599 * the toolbar sits inside an overflow-hidden widget; append those to body
600 * from JS on first use, the way the Woo cart does.
601 *
602 * @param string $bot_id
603 * @return string HTML, empty when no add-on contributed anything
604 */
605 public static function render_toolbar_items($bot_id) {
606 $items = apply_filters('mxchat_chat_toolbar_items', array(), $bot_id);
607 if (!is_array($items) || empty($items)) {
608 return '';
609 }
610
611 $clean = array();
612 $seq = 0;
613 foreach ($items as $key => $item) {
614 if (!is_array($item) || empty($item['html']) || !is_string($item['html'])) {
615 continue;
616 }
617 $id = isset($item['id']) ? sanitize_key($item['id']) : (is_string($key) ? sanitize_key($key) : '');
618 if ($id === '') {
619 continue;
620 }
621 $clean[$id] = array(
622 'html' => $item['html'],
623 'order' => isset($item['order']) ? (int) $item['order'] : 10,
624 'seq' => $seq++,
625 );
626 }
627 if (empty($clean)) {
628 return '';
629 }
630
631 uasort($clean, function ($a, $b) {
632 if ($a['order'] === $b['order']) {
633 return $a['seq'] <=> $b['seq'];
634 }
635 return $a['order'] <=> $b['order'];
636 });
637
638 $allowed = self::toolbar_items_allowed_html();
639 $out = '';
640 foreach ($clean as $id => $item) {
641 $html = trim(wp_kses($item['html'], $allowed));
642 if ($html === '') {
643 continue;
644 }
645 $out .= ' <!-- toolbar item: ' . esc_html($id) . ' -->' . "\n";
646 $out .= ' ' . $html . "\n";
647 }
648 return $out;
649 }
650
651 /**
652 * Allow-list for toolbar item markup: everything wp_kses_post allows (button,
653 * span, div, aria-* and data-* are in there) plus inline SVG icon shapes.
654 */
655 private static function toolbar_items_allowed_html() {
656 $allowed = wp_kses_allowed_html('post');
657 $shape = array(
658 'fill' => true,
659 'stroke' => true,
660 'stroke-width' => true,
661 'stroke-linecap' => true,
662 'stroke-linejoin' => true,
663 'transform' => true,
664 'style' => true,
665 'class' => true,
666 );
667 $allowed['svg'] = array_merge($shape, array(
668 'xmlns' => true,
669 'viewbox' => true,
670 'width' => true,
671 'height' => true,
672 'aria-hidden' => true,
673 'focusable' => true,
674 'role' => true,
675 ));
676 $allowed['path'] = array_merge($shape, array('d' => true));
677 $allowed['circle'] = array_merge($shape, array('cx' => true, 'cy' => true, 'r' => true));
678 $allowed['line'] = array_merge($shape, array('x1' => true, 'y1' => true, 'x2' => true, 'y2' => true));
679 $allowed['polyline'] = array_merge($shape, array('points' => true));
680 $allowed['polygon'] = array_merge($shape, array('points' => true));
681 $allowed['rect'] = array_merge($shape, array('x' => true, 'y' => true, 'width' => true, 'height' => true, 'rx' => true, 'ry' => true));
682 $allowed['g'] = $shape;
683 if (!isset($allowed['button'])) {
684 $allowed['button'] = array();
685 }
686 $allowed['button'] = array_merge($allowed['button'], array(
687 'type' => true,
688 'disabled' => true,
689 'aria-haspopup' => true,
690 'aria-pressed' => true,
691 ));
692 return apply_filters('mxchat_chat_toolbar_items_allowed_html', $allowed);
693 }
694
695 /**
696 * Get bot-specific options for multi-bot functionality
697 * Falls back to default options if bot_id is 'default' or multi-bot add-on is not active
698 */
699 private function get_bot_options($bot_id = 'default') {
700 // If default bot or multi-bot add-on not active, return empty (use default options)
701 if ($bot_id === 'default' || !class_exists('MxChat_Multi_Bot_Manager')) {
702 return array();
703 }
704
705 //Hook for multi-bot add-on to provide bot-specific options
706 $bot_options = apply_filters('mxchat_get_bot_options', array(), $bot_id);
707
708 return is_array($bot_options) ? $bot_options : array();
709 }
710
711 /**
712 * Get bot-specific Pinecone configuration
713 * Used in the knowledge retrieval functions
714 */
715 private function get_bot_pinecone_config($bot_id = 'default') {
716 // If default bot or multi-bot add-on not active, use default Pinecone config
717 if ($bot_id === 'default' || !class_exists('MxChat_Multi_Bot_Manager')) {
718 $addon_options = get_option('mxchat_pinecone_addon_options', array());
719 return array(
720 'use_pinecone' => (isset($addon_options['mxchat_use_pinecone']) && $addon_options['mxchat_use_pinecone'] === '1'),
721 'api_key' => $addon_options['mxchat_pinecone_api_key'] ?? '',
722 'host' => $addon_options['mxchat_pinecone_host'] ?? '',
723 'namespace' => $addon_options['mxchat_pinecone_namespace'] ?? ''
724 );
725 }
726
727 // Hook for multi-bot add-on to provide bot-specific Pinecone config
728 $bot_pinecone_config = apply_filters('mxchat_get_bot_pinecone_config', array(), $bot_id);
729
730 return is_array($bot_pinecone_config) ? $bot_pinecone_config : array();
731 }
732
733
734 private function determine_email_collection_state() {
735 // Logged-in users skip the email form, UNLESS the owner has turned on
736 // "Also Show for Logged-In Users" (c0cfaf). On a membership or LMS site
737 // every visitor is signed in, so the short-circuit meant lead capture —
738 // and the consent checkbox — never appeared at all.
739 //
740 // Deliberately no PII in this decision: the returned profile values are
741 // NOT rendered into the markup, because this page HTML is cacheable and
742 // a cached form carrying one user's address would serve it to the next
743 // visitor. Pre-fill travels on the nocache'd AJAX check instead
744 // (mxchat_check_email_provided). Both logged-in and guest requests render
745 // the same empty form, so the cached copy is correct for either.
746 if (is_user_logged_in()) {
747 $options = get_option('mxchat_options', array());
748 $show_for_logged_in = isset($options['lead_capture_logged_in_toggle'])
749 && $options['lead_capture_logged_in_toggle'] === 'on';
750
751 $current_user = wp_get_current_user();
752 return [
753 'show_email_form' => $show_for_logged_in,
754 'user_email' => $current_user->user_email,
755 'user_name' => $current_user->display_name ?: $current_user->first_name ?: ''
756 ];
757 }
758
759 // For guests, default to showing the email form.
760 // The session-based check happens client-side via AJAX since the
761 // session ID lives in the browser cookie/localStorage.
762 return [
763 'show_email_form' => true,
764 'user_email' => '',
765 'user_name' => ''
766 ];
767 }
768
769
770 /**
771 * NEW: Determine if and which chatbot should be displayed
772 */
773 private function get_display_bot() {
774 // Delegates to the static so the enqueue-time gate (smart asset loading,
775 // plan-915355) and this render-time decision share ONE code path and can
776 // never disagree. The static reads mxchat_options fresh — same row this
777 // instance loaded at construct.
778 return self::compute_display_bot();
779 }
780
781 /**
782 * Static single source of truth for the display decision (plan-915355).
783 * Combines the per-page meta box, the append_to_body global toggle, and the
784 * post-type include/exclude mode. Returns a bot id ('default' or specific)
785 * when the auto-append widget will render on the current request, false when
786 * it won't. Static (not a second instance) deliberately: MxChat_Public's
787 * constructor registers a wp_footer action, so constructing a throwaway
788 * instance would double-append the widget.
789 */
790 public static function compute_display_bot() {
791 // The Elementor builder canvas is not a chat surface (plan 95dd1e part 2):
792 // its preview iframe is a real front-end page load, so without this guard
793 // the Auto-Display instance renders LIVE inside the canvas — front-end
794 // chat scripts firing in the editor, able to start a session for the
795 // person editing. Returning false here suppresses both the wp_footer
796 // auto-append and the asset enqueue gate for preview requests only; the
797 // placement widget's own canvas rendering is a static placeholder anyway.
798 if (did_action('elementor/loaded')
799 && class_exists('\Elementor\Plugin')
800 && isset(\Elementor\Plugin::$instance->preview)
801 && \Elementor\Plugin::$instance->preview
802 && \Elementor\Plugin::$instance->preview->is_preview_mode()) {
803 return false;
804 }
805
806 $options = get_option('mxchat_options', array());
807 if (!is_array($options)) {
808 $options = array();
809 }
810
811 // Get page-specific settings from meta box
812 $page_setting = self::get_page_bot_setting();
813
814 $global_autoshow = isset($options['append_to_body']) && $options['append_to_body'] === 'on';
815 $global_default_bot = isset($options['default_bot']) ? $options['default_bot'] : 'default';
816
817 // If page specifically hides chatbot, don't show anything
818 if ($page_setting && $page_setting['action'] === 'hide') {
819 return false;
820 }
821
822 // If page specifies a specific bot, use that
823 if ($page_setting && $page_setting['action'] === 'show') {
824 return $page_setting['bot_id'];
825 }
826
827 // Page setting is 'global' or no page setting exists
828 // Check global auto-show setting
829 if ($global_autoshow) {
830 // Check post type visibility settings
831 if (!self::should_show_on_current_post_type()) {
832 return false;
833 }
834
835 // Global auto-show is enabled, return the default bot
836 return $global_default_bot;
837 }
838
839 // Global auto-show is disabled and no page-specific bot selected
840 // Don't show chatbot (user should use shortcodes)
841 return false;
842 }
843
844 /**
845 * Smart asset loading opt-in (plan-915355). Standalone option — deliberately
846 * NOT a mxchat_options key, so it can never be stripped by mxchat_sanitize().
847 * Default off: enqueue behavior is byte-identical to before until an owner
848 * turns the toggle on.
849 */
850 public static function is_smart_asset_loading_enabled() {
851 return get_option('mxchat_smart_asset_loading', 'off') === 'on';
852 }
853
854 /**
855 * Will the chat widget render on the current request? (plan-915355)
856 *
857 * True when the auto-append decision resolves to a bot, OR the singular
858 * post's content contains the [mxchat_chatbot] shortcode (first-chance
859 * detection so shortcode pages keep head-loaded CSS — no FOUC). Computed
860 * once per request and cached, so the wp_enqueue_scripts gate and any
861 * add-on consulting this later in the same request always get one answer.
862 *
863 * Filter `mxchat_should_load_assets` is the force-load escape hatch for
864 * headless/builder/custom-JS setups whose shortcode placement is invisible
865 * to has_shortcode (builder-stored content, template files, widget areas).
866 * Note the render-time safety net in render_chatbot_shortcode() still
867 * force-loads assets whenever the shortcode actually renders — the filter
868 * is only needed where even that net can't fire (e.g. markup assembled
869 * outside WP rendering).
870 */
871 public static function should_load_assets() {
872 static $cached = null;
873 if ($cached !== null) {
874 return $cached;
875 }
876
877 // Never gate admin/ajax requests — this decision is for front-end enqueues only.
878 if (is_admin()) {
879 $cached = true;
880 return $cached;
881 }
882
883 $display_bot = self::compute_display_bot();
884 $has_shortcode = false;
885
886 if ($display_bot === false && is_singular()) {
887 $post = get_post();
888 if ($post && has_shortcode((string) $post->post_content, 'mxchat_chatbot')) {
889 $has_shortcode = true;
890 }
891 // The mxchat/chatbot block (plan-95dd1e) stores a block comment, not
892 // shortcode text, so has_shortcode can't see it — first-chance detect
893 // it here for the same no-FOUC reason. The render-time safety net in
894 // render_chatbot_shortcode() still covers template/widget placements.
895 if ($post && !$has_shortcode && function_exists('has_block')
896 && has_block('mxchat/chatbot', $post)) {
897 $has_shortcode = true;
898 }
899 }
900
901 $should = ($display_bot !== false) || $has_shortcode;
902
903 $cached = (bool) apply_filters('mxchat_should_load_assets', $should, array(
904 'display_bot' => $display_bot,
905 'has_shortcode' => $has_shortcode,
906 'post_id' => get_the_ID(),
907 ));
908
909 return $cached;
910 }
911
912 /**
913 * Check if chatbot should be shown on the current post type
914 */
915 private static function should_show_on_current_post_type() {
916 $options = get_option('mxchat_options', array());
917 if (!is_array($options)) {
918 $options = array();
919 }
920 // Get visibility settings
921 $mode = isset($options['post_type_visibility_mode']) ? $options['post_type_visibility_mode'] : 'all';
922 $list = isset($options['post_type_visibility_list']) ? $options['post_type_visibility_list'] : array();
923
924 // Ensure list is an array
925 if (!is_array($list)) {
926 $list = array();
927 }
928
929 // If mode is 'all', show on all post types
930 if ($mode === 'all') {
931 return true;
932 }
933
934 // Get current post type
935 $current_post_type = self::get_current_post_type();
936
937 // If we can't determine post type, default to showing
938 if (empty($current_post_type)) {
939 return true;
940 }
941
942 // Check based on mode
943 if ($mode === 'include') {
944 // Only show on selected post types
945 return in_array($current_post_type, $list);
946 } elseif ($mode === 'exclude') {
947 // Hide on selected post types
948 return !in_array($current_post_type, $list);
949 }
950
951 // Default to showing
952 return true;
953 }
954
955 /**
956 * Get the current post type
957 */
958 private static function get_current_post_type() {
959 // Try to get from queried object first
960 $queried_object = get_queried_object();
961
962 if ($queried_object instanceof WP_Post) {
963 return $queried_object->post_type;
964 }
965
966 // Try get_post_type()
967 $post_type = get_post_type();
968 if ($post_type) {
969 return $post_type;
970 }
971
972 // Check if we're on an archive
973 if (is_post_type_archive()) {
974 return get_query_var('post_type');
975 }
976
977 // Check common archive types
978 if (is_home() || is_single()) {
979 return 'post';
980 }
981
982 if (is_page()) {
983 return 'page';
984 }
985
986 return '';
987 }
988
989 /**
990 * Get page-specific bot setting using new visibility field with backward compat
991 */
992 private static function get_page_bot_setting($post_id = null) {
993 if (!$post_id) {
994 $post_id = get_the_ID();
995 }
996
997 if (!$post_id) {
998 return null;
999 }
1000
1001 // Check new visibility field first
1002 $visibility = get_post_meta($post_id, '_mxchat_page_visibility', true);
1003
1004 if ($visibility === 'hide') {
1005 return array('action' => 'hide');
1006 }
1007
1008 if ($visibility === 'show') {
1009 $selected_bot = get_post_meta($post_id, '_mxchat_selected_bot', true);
1010 $bot_id = !empty($selected_bot) ? $selected_bot : 'default';
1011 return array('action' => 'show', 'bot_id' => $bot_id);
1012 }
1013
1014 // Backward compat: check legacy hide checkbox if no new field set
1015 if (empty($visibility)) {
1016 $hide_chatbot = get_post_meta($post_id, '_mxchat_hide_chatbot', true);
1017 if ($hide_chatbot === '1') {
1018 return array('action' => 'hide');
1019 }
1020 }
1021
1022 // Check if specific bot is selected (legacy path)
1023 $selected_bot = get_post_meta($post_id, '_mxchat_selected_bot', true);
1024 if (!empty($selected_bot)) {
1025 return array('action' => 'show', 'bot_id' => $selected_bot);
1026 }
1027
1028 // Use global setting
1029 return array('action' => 'global');
1030 }
1031
1032 /**
1033 * NEW: Determine which bot to use for shortcode
1034 */
1035 private function determine_bot_for_shortcode($shortcode_bot_id) {
1036 // If bot_id explicitly provided in shortcode, use that
1037 if (!empty($shortcode_bot_id)) {
1038 return $shortcode_bot_id;
1039 }
1040
1041 // No bot_id in shortcode, check page setting
1042 $page_setting = self::get_page_bot_setting();
1043 if ($page_setting && $page_setting['action'] === 'show') {
1044 return $page_setting['bot_id'];
1045 }
1046
1047 // Fall back to default
1048 return 'default';
1049 }
1050
1051 /**
1052 * NEW: Helper to check if auto-append is enabled globally
1053 */
1054 private function is_auto_append_enabled() {
1055 return isset($this->options['append_to_body']) && $this->options['append_to_body'] === 'on';
1056 }
1057
1058 /**
1059 * UPDATED: Debug function with new context info
1060 */
1061
1062 /**
1063 * NEW: Helper method to get available bots (for admin notices, etc.)
1064 */
1065 private function get_available_bots() {
1066 $bots = array('default' => __('Default Bot', 'mxchat'));
1067
1068 // Check if multi-bot addon is active
1069 if (class_exists('MxChat_Multi_Bot_Manager')) {
1070 $multi_bot_manager = MxChat_Multi_Bot_Core_Manager::get_instance();
1071 $available_bots = $multi_bot_manager->get_available_bots();
1072
1073 // Add the available bots
1074 foreach ($available_bots as $bot_id => $bot_name) {
1075 $bots[$bot_id] = $bot_name;
1076 }
1077 }
1078
1079 return $bots;
1080 }
1081
1082
1083
1084 }
1085 ?>