PluginProbe
MxChat – AI Chatbot & Content Generation for WordPress / 3.2.24
MxChat – AI Chatbot & Content Generation for WordPress v3.2.24
3.2.25 3.2.24 3.2.23 3.2.22 3.2.21 3.2.20 3.2.19 3.2.18 3.2.17 3.2.16 3.2.15 3.2.14 3.2.12 3.2.13 3.2.11 3.2.10 3.2.9 3.2.8 3.2.7 3.2.6 3.2.5 3.2.4 3.2.3 3.2.2 3.2.1 All 156 releases
← All changes | includes/admin-settings-page.php +484 -214 3.2.1 → 3.2.24 View file →
@@ -86,8 +86,9 @@
86 86 <button class="mxch-mobile-nav-sub-link" data-target="integrations-loops"><?php esc_html_e('Loops', 'mxchat'); ?></button>
87 87 <button class="mxch-mobile-nav-sub-link" data-target="integrations-brave"><?php esc_html_e('Brave Search', 'mxchat'); ?></button>
88 88 <button class="mxch-mobile-nav-sub-link" data-target="integrations-slack"><?php esc_html_e('Slack', 'mxchat'); ?></button>
89 89 <button class="mxch-mobile-nav-sub-link" data-target="integrations-telegram"><?php esc_html_e('Telegram', 'mxchat'); ?></button>
90 + <button class="mxch-mobile-nav-sub-link" data-target="integrations-webhook"><?php esc_html_e('Webhook', 'mxchat'); ?></button>
90 91 </div>
91 92 </div>
92 93 <!-- Resources Section -->
93 94 <div class="mxch-mobile-nav-section">
@@ -188,8 +189,9 @@
188 189 <button class="mxch-nav-sub-link" data-target="integrations-loops"><?php esc_html_e('Loops', 'mxchat'); ?></button>
189 190 <button class="mxch-nav-sub-link" data-target="integrations-brave"><?php esc_html_e('Brave Search', 'mxchat'); ?></button>
190 191 <button class="mxch-nav-sub-link" data-target="integrations-slack"><?php esc_html_e('Slack', 'mxchat'); ?></button>
191 192 <button class="mxch-nav-sub-link" data-target="integrations-telegram"><?php esc_html_e('Telegram', 'mxchat'); ?></button>
193 + <button class="mxch-nav-sub-link" data-target="integrations-webhook"><?php esc_html_e('Webhook', 'mxchat'); ?></button>
192 194 </div>
193 195 </div>
194 196 </div>
195 197
@@ -223,12 +225,12 @@
223 225 <main class="mxch-content">
224 226 <?php if (!$is_activated): ?>
225 227 <div class="mxch-pro-banner">
226 228 <div class="mxch-pro-banner-content">
227 - <h3 class="mxch-pro-banner-title"><?php esc_html_e('MxChat Pro — Lifetime Access', 'mxchat'); ?></h3>
228 - <p class="mxch-pro-banner-text"><?php esc_html_e('One-time purchase. Unlock 14+ premium add-ons: Chat with GSC, WooCommerce, Chatbot Themes, Forms Builder, and more.', 'mxchat'); ?></p>
229 + <h3 class="mxch-pro-banner-title"><?php esc_html_e('Stop paying $50–200/month for AI chatbot tools.', 'mxchat'); ?></h3>
230 + <p class="mxch-pro-banner-text"><?php esc_html_e('One payment unlocks every MxChat Pro add-on for life — MCP server access for Claude / ChatGPT / Claude Code, WooCommerce sales, Google Search Console insights, AI-generated chatbot themes, lead-capture forms, unlimited bots, image analysis, and more. No renewals. No surprise bills.', 'mxchat'); ?></p>
229 231 </div>
230 - <a href="https://mxchat.ai/" target="_blank" class="mxch-pro-banner-btn"><span><?php esc_html_e('Learn More', 'mxchat'); ?></span></a>
232 + <a href="https://mxchat.ai/" target="_blank" class="mxch-pro-banner-btn"><span><?php esc_html_e('Get Lifetime Access →', 'mxchat'); ?></span></a>
231 233 </div>
232 234 <?php endif; ?>
233 235
234 236 <?php
@@ -244,8 +246,18 @@
244 246 <h1 class="mxch-content-title"><?php esc_html_e('AI Models', 'mxchat'); ?></h1>
245 247 <p class="mxch-content-subtitle"><?php esc_html_e('Configure the AI models your chatbot will use for conversations and embeddings.', 'mxchat'); ?></p>
246 248 </div>
247 249
250 + <?php
251 + // Model-retirement warning (b65e8d). Rendered HERE rather than via
252 + // admin_notices because the branded shell paints over WP's notice
253 + // region — a core notice on this screen is invisible. No-ops unless
254 + // the daily liveness check has flagged the configured model.
255 + if (class_exists('MxChat_Model_Liveness')) {
256 + MxChat_Model_Liveness::render_inline_notice();
257 + }
258 + ?>
259 +
248 260 <div class="mxch-card">
249 261 <div class="mxch-card-body mxchat-autosave-section">
250 262 <?php
251 263 // Chat Model
@@ -262,12 +274,12 @@
262 274 mxchat_render_field_wrapper('enable_streaming', __('Enable Streaming', 'mxchat'), function() use ($admin_instance) {
263 275 $admin_instance->enable_streaming_toggle_callback();
264 276 }, __('Enable real-time streaming responses for supported models (OpenAI, Claude, DeepSeek, Grok).', 'mxchat'));
265 277
266 - // Enable Web Search (OpenAI only)
278 + // Enable Web Search (OpenAI & Gemini)
267 279 mxchat_render_field_wrapper('enable_web_search', __('Enable Web Search', 'mxchat'), function() use ($admin_instance) {
268 280 $admin_instance->enable_web_search_toggle_callback();
269 - }, __('Allow the chatbot to search the web for current information (OpenAI models only).', 'mxchat'));
281 + }, __('Allow the chatbot to search the web for current information (OpenAI and Gemini models).', 'mxchat'));
270 282 ?>
271 283 </div>
272 284 </div>
273 285 </div>
@@ -303,8 +315,21 @@
303 315 mxchat_render_field_wrapper('rag_chunks_limit', __('RAG Chunks Limit', 'mxchat'), function() use ($admin_instance) {
304 316 $admin_instance->mxchat_rag_chunks_limit_callback();
305 317 }, __('Maximum total content chunks sent to the AI across all sources. Higher values provide more context but increase token usage and cost.', 'mxchat'));
306 318
319 + // Hybrid keyword boost MOVED to Knowledge → Chunking &
320 + // Retrieval (plan 11720c) — it is KB retrieval tuning, not
321 + // conversation behavior. Same option key over there. The
322 + // breadcrumb below is a one-release courtesy: drop it in
323 + // the release after 3.2.17.
324 + echo '<p class="mxch-field-description">';
325 + printf(
326 + /* translators: %s: link to the Chunking & Retrieval settings tab. */
327 + esc_html__('Hybrid keyword boost has moved to %s.', 'mxchat'),
328 + '<a href="' . esc_url(admin_url('admin.php?page=mxchat-prompts#chunking')) . '">' . esc_html__('Knowledge, Chunking & Retrieval', 'mxchat') . '</a>'
329 + );
330 + echo '</p>';
331 +
307 332 // Contextual Awareness
308 333 mxchat_render_field_wrapper('contextual_awareness', __('Contextual Awareness', 'mxchat'), function() use ($admin_instance) {
309 334 $admin_instance->mxchat_contextual_awareness_callback();
310 335 }, __('Allow the chatbot to understand and reference the current page content for more relevant responses.', 'mxchat'));
@@ -313,8 +338,26 @@
313 338 mxchat_render_field_wrapper('citation_links', __('Citation Links', 'mxchat'), function() use ($admin_instance) {
314 339 $admin_instance->mxchat_citation_links_toggle_callback();
315 340 }, __('Allow the AI to include citation links from your knowledge database in responses. If disabled, ensure your AI Behavior settings do not mention links or the AI may fabricate URLs.', 'mxchat'));
316 341
342 + // Strip Unapproved Links (plan 58f8b4) — enforcement is now
343 + // its own control instead of riding Citation Links.
344 + mxchat_render_field_wrapper('strip_unapproved_links', __('Strip Unapproved Links', 'mxchat'), function() use ($admin_instance) {
345 + $admin_instance->mxchat_strip_unapproved_links_toggle_callback();
346 + }, __('Remove links the AI invents from its answers, even when Citation Links is off. Approved citations, real pages on this site, and links returned by your integrations (e.g. WooCommerce products) are always kept. On by default for new installs; existing sites keep their current behavior until enabled.', 'mxchat'));
347 +
348 + // Satisfaction Rating Prompt
349 + // The toggle callback inline-renders the 5 customization
350 + // fields inside a single sub-options wrapper (plan-29caac).
351 + // No separate customization group needed — the wrapper handles
352 + // its own server-side display state based on the toggle value.
353 + mxchat_render_field_wrapper('satisfaction_rating', __('Satisfaction Rating Prompt', 'mxchat'), function() use ($admin_instance) {
354 + $admin_instance->mxchat_satisfaction_rating_toggle_callback();
355 + }, __('Show a 👍 / 👎 prompt after a conversation has had a couple of bot replies and the visitor has been idle for a moment. Disable to hide the prompt site-wide.', 'mxchat'));
356 +
357 + // Editor Assistant toggle moved to Content → Settings (plan-f7df40):
358 + // it's a content feature, so it lives on the screen that owns it.
359 + // Rendering is in admin-content-page.php; option + save path unchanged.
317 360 ?>
318 361 </div>
319 362 </div>
320 363 </div>
@@ -350,8 +393,23 @@
350 393 // Chat Persistence
351 394 mxchat_render_field_wrapper('chat_persistence', __('Chat Persistence', 'mxchat'), function() use ($admin_instance) {
352 395 $admin_instance->mxchat_chat_persistence_toggle_callback();
353 396 }, __('Keep chat history when users navigate or return within 24 hours.', 'mxchat'));
397 +
398 + // Download Transcript button
399 + mxchat_render_field_wrapper('print_button', __('Show Download Transcript Button', 'mxchat'), function() use ($admin_instance) {
400 + $admin_instance->mxchat_print_button_toggle_callback();
401 + }, __('Show the "Download Transcript" item in the chat window menu.', 'mxchat'));
402 +
403 + // Start-New-Chat button (plan ac2e81) — lets a visitor reset the
404 + // conversation without the owner disabling chat persistence globally.
405 + mxchat_render_field_wrapper('reset_chat_enabled', __('Show Start-New-Chat Button', 'mxchat'), function() use ($admin_instance) {
406 + $admin_instance->mxchat_reset_chat_toggle_callback();
407 + }, __('Show a "Start new chat" item in the chat window menu that clears the current conversation and begins a fresh session.', 'mxchat'));
408 +
409 + mxchat_render_field_wrapper('reset_chat_label', __('Start-New-Chat Button Label', 'mxchat'), function() use ($admin_instance) {
410 + $admin_instance->mxchat_reset_chat_label_callback();
411 + }, __('Label for the Start-New-Chat menu item. Leave blank to use "Start new chat".', 'mxchat'));
354 412 ?>
355 413 </div>
356 414 </div>
357 415
@@ -383,8 +441,13 @@
383 441 mxchat_render_field_wrapper('input_copy', __('Input Placeholder', 'mxchat'), function() use ($admin_instance) {
384 442 $admin_instance->mxchat_input_copy_callback();
385 443 }, __('Placeholder text in the chat input field.', 'mxchat'));
386 444
445 + // Max Input Length (characters) — plan a3fae2 part C
446 + mxchat_render_field_wrapper('max_input_length', __('Max Input Length (characters)', 'mxchat'), function() use ($admin_instance) {
447 + $admin_instance->mxchat_max_input_length_callback();
448 + }, __('Cap how many characters a visitor can type or paste into a single message. Set to 0 for unlimited (default).', 'mxchat'));
449 +
387 450 // Chat Teaser
388 451 mxchat_render_field_wrapper('pre_chat_message', __('Chat Teaser Pop-up', 'mxchat'), function() use ($admin_instance) {
389 452 $admin_instance->mxchat_pre_chat_message_callback();
390 453 }, __('Message shown before users start chatting.', 'mxchat'));
@@ -434,8 +497,33 @@
434 497 // Name Placeholder
435 498 mxchat_render_field_wrapper('name_placeholder', __('Name Field Placeholder', 'mxchat'), function() use ($admin_instance) {
436 499 $admin_instance->name_field_placeholder_callback();
437 500 }, __('Placeholder text for the name input field.', 'mxchat'));
501 +
502 + // Consent Checkbox (b062c4)
503 + mxchat_render_field_wrapper('enable_consent_checkbox', __('Consent Checkbox', 'mxchat'), function() use ($admin_instance) {
504 + $admin_instance->enable_consent_checkbox_callback();
505 + }, __('Show a consent checkbox on the email form. The decision, time, and exact label shown are stored with the lead.', 'mxchat'));
506 +
507 + // Consent Label
508 + mxchat_render_field_wrapper('consent_checkbox_label', __('Consent Label', 'mxchat'), function() use ($admin_instance) {
509 + $admin_instance->consent_checkbox_label_callback();
510 + }, __('Text shown beside the checkbox. Anchor tags are allowed so you can link your Privacy Policy; other HTML is stripped.', 'mxchat'));
511 +
512 + // Consent Required
513 + mxchat_render_field_wrapper('consent_checkbox_required', __('Require Consent to Submit', 'mxchat'), function() use ($admin_instance) {
514 + $admin_instance->consent_checkbox_required_callback();
515 + }, __('Block form submission until the box is ticked. Off means the checkbox is optional (a soft opt-in).', 'mxchat'));
516 +
517 + // Also show for logged-in users (c0cfaf)
518 + mxchat_render_field_wrapper('lead_capture_logged_in_toggle', __('Also Show for Logged-In Users', 'mxchat'), function() use ($admin_instance) {
519 + $admin_instance->lead_capture_logged_in_toggle_callback();
520 + }, __('Show the form to signed-in visitors too, pre-filled from their profile. Off means signed-in visitors skip it, as they do today.', 'mxchat'));
521 +
522 + // Require email (c0cfaf)
523 + mxchat_render_field_wrapper('lead_capture_require_email_toggle', __('Require Email Address', 'mxchat'), function() use ($admin_instance) {
524 + $admin_instance->lead_capture_require_email_toggle_callback();
525 + }, __('Off means the email field is optional, so you can collect a name (and consent) without an address.', 'mxchat'));
438 526 ?>
439 527 </div>
440 528 </div>
441 529
@@ -587,8 +675,18 @@
587 675 </div>
588 676 <p class="mxch-field-description"><?php esc_html_e('Control when the chatbot script loads to improve page performance.', 'mxchat'); ?></p>
589 677 </div>
590 678
679 + <?php
680 + // Smart asset loading (plan-915355; rebuilt on the house toggle
681 + // pattern in plan-64d34f). Standalone option — never part of
682 + // mxchat_options, so mxchat_sanitize() can't strip it.
683 + mxchat_render_field_wrapper('mxchat_smart_asset_loading', __('Only load chatbot files on pages where the chatbot appears', 'mxchat'), function() use ($admin_instance) {
684 + $admin_instance->mxchat_smart_asset_loading_toggle_callback();
685 + }, __('Skips the chatbot\'s CSS and JavaScript on pages where the widget is hidden (per-page visibility, post type include/exclude, or auto-display disabled). Pages using the chatbot shortcode still load everything automatically. Helps with "reduce unused CSS/JS" audit findings.', 'mxchat'),
686 + __('If your theme or page builder inserts the chatbot in an unusual way and it stops appearing, turn this off — or force-load assets with the mxchat_should_load_assets filter.', 'mxchat'));
687 + ?>
688 +
591 689 <div class="mxch-notice mxch-notice-info" style="margin-top: 16px;">
592 690 <svg class="mxch-notice-icon" xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><circle cx="12" cy="12" r="10"/><line x1="12" y1="16" x2="12" y2="12"/><line x1="12" y1="8" x2="12.01" y2="8"/></svg>
593 691 <div>
594 692 <strong><?php esc_html_e('Loading Strategies:', 'mxchat'); ?></strong>
@@ -602,8 +700,99 @@
602 700 </div>
603 701 </div>
604 702 </div>
605 703
704 + <!-- Page Cache Compatibility Card -->
705 + <div class="mxch-card">
706 + <div class="mxch-card-header">
707 + <h3 class="mxch-card-title">
708 + <svg class="mxch-card-title-icon" xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><path d="M21 16V8a2 2 0 0 0-1-1.73l-7-4a2 2 0 0 0-2 0l-7 4A2 2 0 0 0 3 8v8a2 2 0 0 0 1 1.73l7 4a2 2 0 0 0 2 0l7-4A2 2 0 0 0 21 16z"/><polyline points="3.27 6.96 12 12.01 20.73 6.96"/><line x1="12" y1="22.08" x2="12" y2="12"/></svg>
709 + <?php esc_html_e('Page Cache Compatibility', 'mxchat'); ?>
710 + </h3>
711 + </div>
712 + <div class="mxch-card-body">
713 + <p class="mxch-field-description" style="margin-top: 0;"><?php esc_html_e('MxChat\'s chat send (and stream send, plus PDF / Word upload) all POST to /wp-admin/admin-ajax.php. Page-cache plugins occasionally cache those responses, which breaks the per-session nonce flow on the first message. MxChat auto-tells the five most common cache plugins to never cache chat AJAX via their own filter APIs — no setup needed for those. For other cache plugins (or Cloudflare APO), copy the manual exclusion string into your cache plugin\'s exclusion list.', 'mxchat'); ?></p>
714 +
715 + <?php
716 + $mxch_cache_rows = array(
717 + array('name' => 'WP Rocket', 'state' => 'auto', 'exclusion' => '/wp-admin/admin-ajax\\.php\\?action=mxchat_.*'),
718 + array('name' => 'LiteSpeed Cache', 'state' => 'auto', 'exclusion' => '/wp-admin/admin-ajax.php?action=mxchat_*'),
719 + array('name' => 'W3 Total Cache', 'state' => 'auto', 'exclusion' => '/wp-admin/admin-ajax.php?action=mxchat_*'),
720 + array('name' => 'FlyingPress', 'state' => 'auto', 'exclusion' => '/wp-admin/admin-ajax.php?action=mxchat_*'),
721 + array('name' => 'WP Super Cache', 'state' => 'auto', 'exclusion' => 'wp-admin/admin-ajax.php'),
722 + array('name' => 'Cloudflare APO', 'state' => 'manual', 'exclusion' => 'Page Rule / Cache Rule: URI Path contains "/wp-admin/admin-ajax.php" → Bypass Cache'),
723 + );
724 + ?>
725 +
726 + <div class="mxch-cache-compat-grid" style="display: grid; grid-template-columns: 1fr; gap: 12px; margin-top: 16px;">
727 + <?php foreach ($mxch_cache_rows as $row) :
728 + $is_auto = ($row['state'] === 'auto');
729 + $pill_class = $is_auto ? 'mxch-status-pill-active' : 'mxch-status-pill-warning';
730 + $pill_label = $is_auto ? __('Auto-handled', 'mxchat') : __('Manual', 'mxchat');
731 + ?>
732 + <div class="mxch-cache-compat-row" style="display: flex; align-items: center; justify-content: space-between; gap: 12px; padding: 12px 14px; background: #f8fafc; border: 1px solid var(--mxch-card-border); border-radius: var(--mxch-radius-md);">
733 + <div style="display: flex; align-items: center; gap: 10px; min-width: 0; flex: 0 0 auto;">
734 + <span style="font-weight: 500;"><?php echo esc_html($row['name']); ?></span>
735 + <span class="mxch-status-pill <?php echo esc_attr($pill_class); ?>">
736 + <span class="mxch-status-dot"></span>
737 + <?php echo esc_html($pill_label); ?>
738 + </span>
739 + </div>
740 + <div style="display: flex; align-items: center; gap: 8px; flex: 1 1 auto; min-width: 0;">
741 + <code style="background: #fff; border: 1px solid var(--mxch-card-border); padding: 4px 8px; border-radius: var(--mxch-radius-sm); font-size: 12px; color: var(--mxch-text-secondary); flex: 1 1 auto; overflow-x: auto; white-space: nowrap; min-width: 0;"><?php echo esc_html($row['exclusion']); ?></code>
742 + <button type="button" class="mxch-btn mxch-btn-secondary mxch-btn-sm" data-mxch-copy="<?php echo esc_attr($row['exclusion']); ?>" style="flex: 0 0 auto;">
743 + <?php esc_html_e('Copy', 'mxchat'); ?>
744 + </button>
745 + </div>
746 + </div>
747 + <?php endforeach; ?>
748 + </div>
749 +
750 + <div class="mxch-notice mxch-notice-info" style="margin-top: 16px;">
751 + <svg class="mxch-notice-icon" xmlns="http://www.w3.org/2000/svg" width="18" height="18" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2"><circle cx="12" cy="12" r="10"/><line x1="12" y1="16" x2="12" y2="12"/><line x1="12" y1="8" x2="12.01" y2="8"/></svg>
752 + <span><?php esc_html_e('Auto-handled plugins receive a filter from MxChat that excludes chat AJAX from their cache. Even so, having the exclusion in your own exclusion list is harmless and acts as a belt-and-suspenders guarantee.', 'mxchat'); ?></span>
753 + </div>
754 + </div>
755 + </div>
756 +
757 + <!-- Provider Reliability Card -->
758 + <?php
759 + $auto_retry_enabled = !isset($options['auto_retry_on_transient_error']) ||
760 + (string) $options['auto_retry_on_transient_error'] !== '0';
761 + ?>
762 + <div class="mxch-card">
763 + <div class="mxch-card-header">
764 + <h3 class="mxch-card-title">
765 + <svg class="mxch-card-title-icon" xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><path d="M21 12a9 9 0 1 1-6.219-8.56"/><polyline points="21 4 21 10 15 10"/></svg>
766 + <?php esc_html_e('Provider Reliability', 'mxchat'); ?>
767 + </h3>
768 + <span class="mxch-status-pill <?php echo $auto_retry_enabled ? 'mxch-status-pill-active' : 'mxch-status-pill-disabled'; ?>">
769 + <span class="mxch-status-dot"></span>
770 + <?php echo $auto_retry_enabled ? esc_html__('Active', 'mxchat') : esc_html__('Disabled', 'mxchat'); ?>
771 + </span>
772 + </div>
773 + <div class="mxch-card-body mxchat-autosave-section">
774 + <div class="mxch-field">
775 + <label class="mxch-field-label" for="auto_retry_on_transient_error">
776 + <?php esc_html_e('Auto-retry on provider overload', 'mxchat'); ?>
777 + </label>
778 + <div class="mxch-field-control">
779 + <label class="mxch-toggle">
780 + <input type="checkbox"
781 + id="auto_retry_on_transient_error"
782 + name="mxchat_options[auto_retry_on_transient_error]"
783 + class="mxchat-autosave-field"
784 + value="1"
785 + <?php checked($auto_retry_enabled); ?> />
786 + <span class="mxch-toggle-slider"></span>
787 + </label>
788 + </div>
789 + <p class="mxch-field-description"><?php esc_html_e('When the AI provider returns a transient error (rate-limit / overload / 429 / 503 / Gemini "model overloaded"), MxChat retries the chat-send up to twice before surfacing the error. Visitors see a brief pause instead of a raw provider error in the bot bubble.', 'mxchat'); ?></p>
790 + <p class="mxch-field-hint"><?php esc_html_e('Configuration errors (invalid API key, 401/403/404/422) still surface immediately — never retried.', 'mxchat'); ?></p>
791 + </div>
792 + </div>
793 + </div>
794 +
606 795 <!-- Debug Mode Card -->
607 796 <?php
608 797 $debug_mode = isset($options['debug_mode']) ? $options['debug_mode'] : 'off';
609 798 $debug_active = ($debug_mode === 'on');
@@ -615,8 +804,15 @@
615 804 <?php esc_html_e('Debug Mode', 'mxchat'); ?>
616 805 </h3>
617 806 </div>
618 807 <div class="mxch-card-body">
808 + <?php // Deliberate exception to the house .toggle-switch pattern
809 + // (audited in plan-64d34f): this card-body is NOT an
810 + // autosave section — the toggle saves through its own
811 + // dedicated handler (mxchat_toggle_debug_mode, wired at
812 + // mxchat-admin.js #mxchat_debug_mode) which appends its own
813 + // save indicator inside this label. Converting the markup
814 + // would orphan that indicator without touching the JS. ?>
619 815 <div class="mxch-field">
620 816 <label class="mxch-toggle">
621 817 <input type="checkbox" class="mxch-toggle-input" id="mxchat_debug_mode" name="mxchat_options[debug_mode]" value="on" <?php checked($debug_active); ?>>
622 818 <span class="mxch-toggle-switch"></span>
@@ -795,9 +991,9 @@
795 991 <svg class="mxch-notice-icon" xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><circle cx="12" cy="12" r="10"/><line x1="12" y1="16" x2="12" y2="12"/><line x1="12" y1="8" x2="12.01" y2="8"/></svg>
796 992 <div>
797 993 <?php printf(
798 994 esc_html__('Visit our %s for setup instructions.', 'mxchat'),
799 - '<a href="https://mxchat.ai/documentation/#slack_integration" target="_blank">' . esc_html__('documentation page', 'mxchat') . '</a>'
995 + '<a href="https://mxchat.ai/documentation/mxchat-core#slack-live-agent-handoff" target="_blank">' . esc_html__('documentation page', 'mxchat') . '</a>'
800 996 ); ?>
801 997 </div>
802 998 </div>
803 999
@@ -934,8 +1130,69 @@
934 1130 </div>
935 1131 </div>
936 1132
937 1133 <!-- ========================================
1134 + INTEGRATIONS - WEBHOOK HANDOFF (plan d88e22)
1135 + ======================================== -->
1136 + <div id="integrations-webhook" class="mxch-section">
1137 + <div class="mxch-content-header">
1138 + <h1 class="mxch-content-title"><?php esc_html_e('Webhook', 'mxchat'); ?></h1>
1139 + <p class="mxch-content-subtitle"><?php esc_html_e('Route live-agent handoffs to any URL you choose — your helpdesk, an automation flow, a CRM.', 'mxchat'); ?></p>
1140 + </div>
1141 +
1142 + <div class="mxch-notice mxch-notice-info" style="margin-bottom: 24px;">
1143 + <svg class="mxch-notice-icon" xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><circle cx="12" cy="12" r="10"/><line x1="12" y1="16" x2="12" y2="12"/><line x1="12" y1="8" x2="12.01" y2="8"/></svg>
1144 + <div>
1145 + <?php esc_html_e('This destination is outbound-only: MxChat delivers the handoff to your URL and the chatbot keeps assisting the visitor. Your team follows up separately — by email, phone, or your own support tool.', 'mxchat'); ?>
1146 + </div>
1147 + </div>
1148 +
1149 + <div class="mxch-card">
1150 + <div class="mxch-card-body mxchat-autosave-section">
1151 + <table class="form-table">
1152 + <?php do_settings_fields('mxchat-embed', 'mxchat_webhook_handoff_section'); ?>
1153 + </table>
1154 + </div>
1155 + </div>
1156 +
1157 + <div class="mxch-card" style="margin-top: 24px;">
1158 + <div class="mxch-card-header">
1159 + <h3 class="mxch-card-title">
1160 + <svg class="mxch-card-title-icon" xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><polyline points="16 18 22 12 16 6"/><polyline points="8 6 2 12 8 18"/></svg>
1161 + <?php esc_html_e('Payload Reference', 'mxchat'); ?>
1162 + </h3>
1163 + </div>
1164 + <div class="mxch-card-body">
1165 + <p class="mxch-field-description" style="margin-bottom: 12px;">
1166 + <?php esc_html_e('Each handoff arrives at your URL as an HTTPS POST with Content-Type application/json:', 'mxchat'); ?>
1167 + </p>
1168 + <pre style="background: #f8f9fa; padding: 16px; border-radius: 8px; font-size: 12px; overflow-x: auto; margin: 0 0 16px;"><?php echo esc_html('{
1169 + "event": "live_agent_handoff",
1170 + "site": { "name": "Your Site", "url": "https://your-site.com" },
1171 + "session_id": "mxchat_chat_…",
1172 + "user_id": 0,
1173 + "visitor": { "name": "Ada", "email": "[email protected]" },
1174 + "current_message": "I need to talk to a human",
1175 + "recent_messages": [
1176 + { "role": "user", "content": "…", "timestamp": 1755900000 },
1177 + { "role": "assistant", "content": "…", "timestamp": 1755900012 }
1178 + ],
1179 + "requested_at": "2026-08-22T14:30:00+00:00"
1180 +}'); ?></pre>
1181 + <p class="mxch-field-description" style="margin-bottom: 12px;">
1182 + <?php esc_html_e('When a Signing Secret is set, each request also carries this header so your endpoint can verify the sender — compute the HMAC of the raw request body with your secret and compare:', 'mxchat'); ?>
1183 + </p>
1184 + <div class="mxch-webhook-url-display" style="margin-bottom: 16px;">
1185 + <code>X-MxChat-Signature: sha256=&lt;hex hmac-sha256 of the raw body&gt;</code>
1186 + </div>
1187 + <p class="mxch-field-description">
1188 + <?php esc_html_e('Answer with any 2xx status. Delivery uses a 5-second timeout with one retry on transport errors and 5xx responses; redirects are not followed. The last failed delivery is shown under the Webhook URL field above.', 'mxchat'); ?>
1189 + </p>
1190 + </div>
1191 + </div>
1192 + </div>
1193 +
1194 + <!-- ========================================
938 1195 TUTORIALS
939 1196 ======================================== -->
940 1197 <div id="tutorials" class="mxch-section">
941 1198 <div class="mxch-content-header">
@@ -942,8 +1199,40 @@
942 1199 <h1 class="mxch-content-title"><?php esc_html_e('Video Tutorials', 'mxchat'); ?></h1>
943 1200 <p class="mxch-content-subtitle"><?php esc_html_e('Learn how to get the most out of MxChat with our video guides.', 'mxchat'); ?></p>
944 1201 </div>
945 1202
1203 + <?php
1204 + // Setup Guide — reopen the onboarding wizard (plan-347916, moved here from Display tab).
1205 + // Only shows once the user has dismissed/graduated from the Onboarding page.
1206 + if (function_exists('mxchat_onboarding_is_dismissed') && mxchat_onboarding_is_dismissed()):
1207 + $auto_grad = function_exists('mxchat_onboarding_is_auto_graduated') && mxchat_onboarding_is_auto_graduated();
1208 + ?>
1209 + <div class="mxch-card mxch-onboarding-unhide-card" style="margin-bottom: 24px;">
1210 + <div class="mxch-card-header">
1211 + <h3 class="mxch-card-title">
1212 + <svg class="mxch-card-title-icon" xmlns="http://www.w3.org/2000/svg" width="20" height="20" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><path d="M22 10v6M2 10l10-5 10 5-10 5z"/><path d="M6 12v5c0 2 3 3 6 3s6-1 6-3v-5"/></svg>
1213 + <?php esc_html_e('Setup Guide', 'mxchat'); ?>
1214 + </h3>
1215 + </div>
1216 + <div class="mxch-card-body">
1217 + <p style="margin:0 0 12px;color:var(--mxch-text-secondary);font-size:13px;line-height:1.5;">
1218 + <?php if ($auto_grad): ?>
1219 + <?php esc_html_e('You finished the setup guide. Reopen it any time to revisit the steps or change a setup choice.', 'mxchat'); ?>
1220 + <?php else: ?>
1221 + <?php esc_html_e('You hid the setup guide from the MxChat menu. Reopen it any time to revisit the steps.', 'mxchat'); ?>
1222 + <?php endif; ?>
1223 + </p>
1224 + <form method="post" action="<?php echo esc_url(admin_url('admin-post.php')); ?>" style="margin:0;">
1225 + <?php wp_nonce_field('mxchat_unhide_onboarding'); ?>
1226 + <input type="hidden" name="action" value="mxchat_unhide_onboarding" />
1227 + <button type="submit" class="mxch-btn mxch-btn-secondary mxch-btn-sm">
1228 + <?php esc_html_e('Reopen setup guide', 'mxchat'); ?>
1229 + </button>
1230 + </form>
1231 + </div>
1232 + </div>
1233 + <?php endif; ?>
1234 +
946 1235 <div class="mxch-card" style="margin-bottom: 24px;">
947 1236 <div class="mxch-card-body">
948 1237 <div style="display: flex; align-items: flex-start; gap: 16px;">
949 1238 <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" style="color: var(--mxch-warning); flex-shrink: 0;"><path d="m21.73 18-8-14a2 2 0 0 0-3.48 0l-8 14A2 2 0 0 0 4 21h16a2 2 0 0 0 1.73-3Z"/><path d="M12 9v4"/><path d="M12 17h.01"/></svg>
@@ -1160,122 +1449,13 @@
1160 1449 </div>
1161 1450
1162 1451 <script>
1163 1452 document.addEventListener('DOMContentLoaded', function() {
1164 - // Sidebar navigation
1165 - const navLinks = document.querySelectorAll('.mxch-nav-link, .mxch-nav-sub-link');
1166 - const sections = document.querySelectorAll('.mxch-section');
1167 - const navItems = document.querySelectorAll('.mxch-nav-item');
1453 + // Sidebar/tab navigation, accordion groups, ?tab=/#hash deep-linking
1454 + // and the mobile menu all live in the shared shell script
1455 + // (js/admin-sidebar.js) — consolidated by plan c192a4. Only the
1456 + // page-local widgets below remain inline.
1168 1457
1169 - function showSection(target) {
1170 - // Show target section
1171 - sections.forEach(section => {
1172 - section.classList.remove('active');
1173 - if (section.id === target) {
1174 - section.classList.add('active');
1175 - }
1176 - });
1177 -
1178 - // Scroll content area to top
1179 - const contentArea = document.querySelector('.mxch-content');
1180 - if (contentArea) {
1181 - contentArea.scrollTop = 0;
1182 - }
1183 - }
1184 -
1185 - function setActiveNav(clickedLink) {
1186 - // Remove active from all links
1187 - navLinks.forEach(l => l.classList.remove('active'));
1188 -
1189 - // Add active to clicked link
1190 - clickedLink.classList.add('active');
1191 -
1192 - // If clicking a sub-link, also highlight parent
1193 - if (clickedLink.classList.contains('mxch-nav-sub-link')) {
1194 - const parent = clickedLink.closest('.mxch-nav-item');
1195 - if (parent) {
1196 - parent.querySelector('.mxch-nav-link').classList.add('active');
1197 - }
1198 - }
1199 - }
1200 -
1201 - navLinks.forEach(link => {
1202 - link.addEventListener('click', function(e) {
1203 - e.preventDefault();
1204 - e.stopPropagation();
1205 - const target = this.dataset.target;
1206 - const parentItem = this.closest('.mxch-nav-item');
1207 - const hasSubmenu = parentItem && parentItem.querySelector('.mxch-nav-sub');
1208 -
1209 - // If this is a parent nav link WITH children (expandable menu)
1210 - if (this.classList.contains('mxch-nav-link') && hasSubmenu) {
1211 - const wasExpanded = parentItem.classList.contains('expanded');
1212 -
1213 - // Collapse all other expandable items
1214 - navItems.forEach(item => {
1215 - if (item !== parentItem && item.querySelector('.mxch-nav-sub')) {
1216 - item.classList.remove('expanded');
1217 - }
1218 - });
1219 -
1220 - // Toggle this item
1221 - parentItem.classList.toggle('expanded');
1222 -
1223 - // If expanding, show the first sub-item's content and mark it active
1224 - if (!wasExpanded) {
1225 - const firstSubLink = parentItem.querySelector('.mxch-nav-sub-link');
1226 - if (firstSubLink) {
1227 - const firstTarget = firstSubLink.dataset.target;
1228 - showSection(firstTarget);
1229 - setActiveNav(firstSubLink);
1230 - // Also mark parent as active
1231 - this.classList.add('active');
1232 - history.replaceState(null, null, '#' + firstTarget);
1233 - }
1234 - }
1235 - }
1236 - // If this is a nav link WITHOUT children (like API Keys, Tutorials)
1237 - else if (this.classList.contains('mxch-nav-link') && !hasSubmenu && target) {
1238 - // Collapse all expandable items
1239 - navItems.forEach(item => {
1240 - if (item.querySelector('.mxch-nav-sub')) {
1241 - item.classList.remove('expanded');
1242 - }
1243 - });
1244 -
1245 - // Show the section
1246 - showSection(target);
1247 - setActiveNav(this);
1248 - history.replaceState(null, null, '#' + target);
1249 - }
1250 - // If this is a sub-link
1251 - else if (this.classList.contains('mxch-nav-sub-link') && target) {
1252 - // Ensure parent stays expanded
1253 - if (parentItem) {
1254 - parentItem.classList.add('expanded');
1255 - }
1256 - showSection(target);
1257 - setActiveNav(this);
1258 - history.replaceState(null, null, '#' + target);
1259 - }
1260 - });
1261 - });
1262 -
1263 - // Handle initial hash
1264 - const hash = window.location.hash.slice(1);
1265 - if (hash) {
1266 - const targetLink = document.querySelector('[data-target="' + hash + '"]');
1267 - if (targetLink) {
1268 - // Expand parent if it's a sub-link
1269 - const parentItem = targetLink.closest('.mxch-nav-item');
1270 - if (parentItem && targetLink.classList.contains('mxch-nav-sub-link')) {
1271 - parentItem.classList.add('expanded');
1272 - }
1273 - showSection(hash);
1274 - setActiveNav(targetLink);
1275 - }
1276 - }
1277 -
1278 1458 // Rate limit accordion
1279 1459 const rateLimitHeaders = document.querySelectorAll('.mxch-rate-limit-header');
1280 1460 rateLimitHeaders.forEach(header => {
1281 1461 header.addEventListener('click', function(e) {
@@ -1285,101 +1465,25 @@
1285 1465 item.classList.toggle('expanded');
1286 1466 });
1287 1467 });
1288 1468
1289 - // =====================================================
1290 - // Mobile Menu Functionality
1291 - // =====================================================
1292 - const mobileMenuBtn = document.querySelector('.mxch-mobile-menu-btn');
1293 - const mobileMenuClose = document.querySelector('.mxch-mobile-menu-close');
1294 - const mobileMenu = document.querySelector('.mxch-mobile-menu');
1295 - const mobileOverlay = document.querySelector('.mxch-mobile-overlay');
1296 - const mobileNavLinks = document.querySelectorAll('.mxch-mobile-nav-link, .mxch-mobile-nav-sub-link');
1297 -
1298 - function openMobileMenu() {
1299 - mobileMenu.classList.add('open');
1300 - mobileOverlay.classList.add('open');
1301 - document.body.style.overflow = 'hidden';
1302 - }
1303 -
1304 - function closeMobileMenu() {
1305 - mobileMenu.classList.remove('open');
1306 - mobileOverlay.classList.remove('open');
1307 - document.body.style.overflow = '';
1308 - }
1309 -
1310 - if (mobileMenuBtn) {
1311 - mobileMenuBtn.addEventListener('click', openMobileMenu);
1312 - }
1313 -
1314 - if (mobileMenuClose) {
1315 - mobileMenuClose.addEventListener('click', closeMobileMenu);
1316 - }
1317 -
1318 - if (mobileOverlay) {
1319 - mobileOverlay.addEventListener('click', closeMobileMenu);
1320 - }
1321 -
1322 - // Mobile navigation links
1323 - mobileNavLinks.forEach(link => {
1324 - link.addEventListener('click', function(e) {
1325 - e.preventDefault();
1326 - e.stopPropagation();
1327 -
1328 - const target = this.dataset.target;
1329 - const parentId = this.dataset.parent;
1330 -
1331 - // If this is an expandable parent link
1332 - if (parentId && !target) {
1333 - const subNav = document.querySelector('.mxch-mobile-nav-sub[data-parent="' + parentId + '"]');
1334 - if (subNav) {
1335 - const isExpanded = subNav.classList.contains('expanded');
1336 - // Collapse all sub navs
1337 - document.querySelectorAll('.mxch-mobile-nav-sub').forEach(nav => {
1338 - nav.classList.remove('expanded');
1339 - });
1340 - document.querySelectorAll('.mxch-mobile-nav-link').forEach(l => {
1341 - l.classList.remove('expanded');
1342 - });
1343 - // Toggle this one
1344 - if (!isExpanded) {
1345 - subNav.classList.add('expanded');
1346 - this.classList.add('expanded');
1347 - }
1348 - }
1469 + // Rate-limit "Custom…" toggle: show/hide the integer input below each
1470 + // limit <select> based on whether __custom__ is the active option.
1471 + document.querySelectorAll('.mxch-rate-limit-limit-select').forEach(sel => {
1472 + const targetId = sel.getAttribute('data-mxch-custom-target');
1473 + if (!targetId) return;
1474 + const field = document.querySelector('[data-mxch-custom-for="' + targetId + '"]');
1475 + if (!field) return;
1476 + const sync = () => {
1477 + if (sel.value === '__custom__') {
1478 + field.hidden = false;
1479 + } else {
1480 + field.hidden = true;
1349 1481 }
1350 - // If this is a direct link or sub-link with a target
1351 - else if (target) {
1352 - // Update mobile nav active state
1353 - document.querySelectorAll('.mxch-mobile-nav-link, .mxch-mobile-nav-sub-link').forEach(l => {
1354 - l.classList.remove('active');
1355 - });
1356 - this.classList.add('active');
1357 -
1358 - // Also update desktop sidebar nav
1359 - const desktopLink = document.querySelector('.mxch-sidebar [data-target="' + target + '"]');
1360 - if (desktopLink) {
1361 - setActiveNav(desktopLink);
1362 - const parentItem = desktopLink.closest('.mxch-nav-item');
1363 - if (parentItem && desktopLink.classList.contains('mxch-nav-sub-link')) {
1364 - parentItem.classList.add('expanded');
1365 - }
1366 - }
1367 -
1368 - // Show section and close menu
1369 - showSection(target);
1370 - history.replaceState(null, null, '#' + target);
1371 - closeMobileMenu();
1372 - }
1373 - });
1482 + };
1483 + sel.addEventListener('change', sync);
1484 + sync();
1374 1485 });
1375 -
1376 - // Close mobile menu on escape key
1377 - document.addEventListener('keydown', function(e) {
1378 - if (e.key === 'Escape' && mobileMenu && mobileMenu.classList.contains('open')) {
1379 - closeMobileMenu();
1380 - }
1381 - });
1382 1486 });
1383 1487 </script>
1384 1488 <?php
1385 1489 }
@@ -1385,10 +1489,14 @@
1385 1489 }
1386 1490
1387 1491 /**
1388 1492 * Helper function to render a field with consistent wrapper
1493 + *
1494 + * $hint renders as a .mxch-field-hint line under the description — the
1495 + * softer "caveats / fine print" slot (added for plan-64d34f so hint-bearing
1496 + * fields don't have to hand-roll the wrapper markup).
1389 1497 */
1390 -function mxchat_render_field_wrapper($id, $label, $callback, $description = '') {
1498 +function mxchat_render_field_wrapper($id, $label, $callback, $description = '', $hint = '') {
1391 1499 ?>
1392 1500 <div class="mxch-field">
1393 1501 <label class="mxch-field-label"><?php echo esc_html($label); ?></label>
1394 1502 <div class="mxch-field-control">
@@ -1396,8 +1504,11 @@
1396 1504 </div>
1397 1505 <?php if ($description): ?>
1398 1506 <p class="mxch-field-description"><?php echo esc_html($description); ?></p>
1399 1507 <?php endif; ?>
1508 + <?php if ($hint): ?>
1509 + <p class="mxch-field-hint"><?php echo esc_html($hint); ?></p>
1510 + <?php endif; ?>
1400 1511 </div>
1401 1512 <?php
1402 1513 }
1403 1514
@@ -1416,10 +1527,146 @@
1416 1527
1417 1528 $roles = wp_roles()->get_names();
1418 1529 $roles['logged_out'] = __('Logged Out Users', 'mxchat');
1419 1530
1531 + // Whole-chatbot global cap (sits above per-role; defaults to unlimited so
1532 + // existing installs are unchanged). Stored under mxchat_options['rate_limits_global'].
1533 + $global_cfg = isset($all_options['rate_limits_global']) && is_array($all_options['rate_limits_global'])
1534 + ? $all_options['rate_limits_global']
1535 + : array();
1536 + $global_limit_raw = isset($global_cfg['limit']) ? (string) $global_cfg['limit'] : 'unlimited';
1537 + $global_timeframe = isset($global_cfg['timeframe']) ? (string) $global_cfg['timeframe'] : 'daily';
1538 + $global_is_unlimited = ($global_limit_raw === '' || $global_limit_raw === 'unlimited');
1539 + $global_is_preset = !$global_is_unlimited && in_array($global_limit_raw, $rate_limits, true);
1540 + $global_select_value = $global_is_unlimited ? 'unlimited' : ($global_is_preset ? $global_limit_raw : '__custom__');
1541 + $global_custom_value = (!$global_is_unlimited && !$global_is_preset && ctype_digit($global_limit_raw))
1542 + ? $global_limit_raw
1543 + : '';
1544 +
1420 1545 echo '<div class="mxch-rate-limits">';
1421 1546
1547 + // --- Global cap card -------------------------------------------------
1548 + ?>
1549 + <div class="mxch-rate-limit-item mxch-rate-limit-global mxchat-autosave-section">
1550 + <div class="mxch-rate-limit-header">
1551 + <span class="mxch-rate-limit-role"><?php esc_html_e('Total chatbot message limit', 'mxchat'); ?></span>
1552 + <div class="mxch-rate-limit-summary">
1553 + <span class="mxch-rate-limit-badge mxch-rate-limit-global-badge">
1554 + <?php
1555 + if ($global_is_unlimited) {
1556 + esc_html_e('Unlimited', 'mxchat');
1557 + } else {
1558 + $tf_label = isset($timeframes[$global_timeframe]) ? $timeframes[$global_timeframe] : $global_timeframe;
1559 + echo esc_html(($global_custom_value !== '' ? $global_custom_value : $global_limit_raw) . ' / ' . $tf_label);
1560 + }
1561 + ?>
1562 + </span>
1563 + <svg class="mxch-rate-limit-arrow" xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><polyline points="6 9 12 15 18 9"></polyline></svg>
1564 + </div>
1565 + </div>
1566 + <div class="mxch-rate-limit-body">
1567 + <p class="mxch-field-description" style="margin: 0 0 12px;">
1568 + <?php esc_html_e('A single ceiling across all users and all roles, per timeframe. Independent of the per-role limits below. When both a per-role limit and this global cap are configured, whichever is hit first stops the conversation. Default is Unlimited — existing installs are unchanged.', 'mxchat'); ?>
1569 + </p>
1570 + <div class="mxch-rate-limit-controls">
1571 + <div class="mxch-field">
1572 + <label class="mxch-field-label" for="rate_limits_global_limit"><?php esc_html_e('Limit', 'mxchat'); ?></label>
1573 + <select id="rate_limits_global_limit"
1574 + name="mxchat_options[rate_limits_global][limit]"
1575 + class="mxch-select mxchat-autosave-field mxch-rate-limit-limit-select"
1576 + data-mxch-custom-target="rate_limits_global_limit_custom">
1577 + <?php foreach ($rate_limits as $limit): ?>
1578 + <option value="<?php echo esc_attr($limit); ?>" <?php selected($global_select_value, $limit); ?>>
1579 + <?php echo esc_html($limit === 'unlimited' ? __('Unlimited', 'mxchat') : $limit); ?>
1580 + </option>
1581 + <?php endforeach; ?>
1582 + <option value="__custom__" <?php selected($global_select_value, '__custom__'); ?>><?php esc_html_e('Custom…', 'mxchat'); ?></option>
1583 + </select>
1584 + </div>
1585 + <div class="mxch-field mxch-rate-limit-custom-field" data-mxch-custom-for="rate_limits_global_limit_custom" <?php echo $global_select_value === '__custom__' ? '' : 'hidden'; ?>>
1586 + <label class="mxch-field-label" for="rate_limits_global_limit_custom"><?php esc_html_e('Custom limit', 'mxchat'); ?></label>
1587 + <input type="number"
1588 + min="1"
1589 + step="1"
1590 + id="rate_limits_global_limit_custom"
1591 + name="mxchat_options[rate_limits_global][limit_custom]"
1592 + class="mxch-input mxchat-autosave-field mxch-rate-limit-custom-input"
1593 + placeholder="e.g. 250"
1594 + value="<?php echo esc_attr($global_custom_value); ?>" />
1595 + </div>
1596 + <div class="mxch-field">
1597 + <label class="mxch-field-label" for="rate_limits_global_timeframe"><?php esc_html_e('Timeframe', 'mxchat'); ?></label>
1598 + <select id="rate_limits_global_timeframe"
1599 + name="mxchat_options[rate_limits_global][timeframe]"
1600 + class="mxch-select mxchat-autosave-field">
1601 + <?php foreach ($timeframes as $value => $label): ?>
1602 + <option value="<?php echo esc_attr($value); ?>" <?php selected($global_timeframe, $value); ?>><?php echo esc_html($label); ?></option>
1603 + <?php endforeach; ?>
1604 + </select>
1605 + </div>
1606 + </div>
1607 + <?php
1608 + // --- Current usage readout (read-only; mirrors the integrator's
1609 + // window-reset math at READ time — never writes the counter here).
1610 + // v1 surfaces the DEFAULT bot's pool. TODO: per-bot selector if asked.
1611 + $global_usage_limit_int = (!$global_is_unlimited && ctype_digit($global_limit_raw))
1612 + ? (int) $global_limit_raw
1613 + : 0;
1614 + $usage_raw = get_option('mxchat_chat_limit_default_global', array('count' => 0, 'timestamp' => time()));
1615 + $usage_count = isset($usage_raw['count']) ? (int) $usage_raw['count'] : 0;
1616 + $usage_ts = isset($usage_raw['timestamp']) ? (int) $usage_raw['timestamp'] : time();
1617 + $usage_windows = array('hourly' => 3600, 'daily' => 86400, 'weekly' => 604800, 'monthly' => 2592000);
1618 + $usage_window = isset($usage_windows[$global_timeframe]) ? $usage_windows[$global_timeframe] : 86400;
1619 + $usage_now = time();
1620 + if (($usage_now - $usage_ts) >= $usage_window) {
1621 + // Window elapsed since the stored timestamp → effective count is 0.
1622 + $usage_count = 0;
1623 + $usage_reset_at = $usage_now + $usage_window;
1624 + } else {
1625 + $usage_reset_at = $usage_ts + $usage_window;
1626 + }
1627 + $usage_left = max(0, $global_usage_limit_int - $usage_count);
1628 + $usage_pct = ($global_usage_limit_int > 0)
1629 + ? min(100, (int) round(($usage_count / $global_usage_limit_int) * 100))
1630 + : 0;
1631 + $usage_reset_nonce = wp_create_nonce('mxchat_reset_global_usage');
1632 + ?>
1633 + <div class="mxch-rate-limit-usage"
1634 + id="mxch-global-usage"
1635 + data-bot-id="default"
1636 + data-reset-nonce="<?php echo esc_attr($usage_reset_nonce); ?>"
1637 + <?php echo $global_is_unlimited ? 'hidden' : ''; ?>>
1638 + <div class="mxch-rate-limit-usage-head">
1639 + <span class="mxch-field-label" style="margin:0;"><?php esc_html_e('Current usage', 'mxchat'); ?></span>
1640 + <button type="button" class="mxch-btn mxch-btn-secondary mxch-btn-sm" id="mxch-global-usage-reset"><?php esc_html_e('Reset counter', 'mxchat'); ?></button>
1641 + </div>
1642 + <div class="mxch-progress-bar">
1643 + <div class="mxch-progress-bar-fill" id="mxch-global-usage-fill" style="width: <?php echo esc_attr($usage_pct); ?>%;"></div>
1644 + </div>
1645 + <p class="mxch-progress-label" id="mxch-global-usage-text" style="margin:0;">
1646 + <?php
1647 + printf(
1648 + /* translators: 1: used count, 2: limit, 3: remaining, 4: human-readable time until reset */
1649 + esc_html__('%1$s of %2$s used · %3$s left · resets in %4$s', 'mxchat'),
1650 + esc_html(number_format_i18n($usage_count)),
1651 + esc_html(number_format_i18n($global_usage_limit_int)),
1652 + esc_html(number_format_i18n($usage_left)),
1653 + esc_html(human_time_diff($usage_now, $usage_reset_at))
1654 + );
1655 + ?>
1656 + </p>
1657 + </div>
1658 + <p class="mxch-field-description mxch-rate-limit-usage-unlimited"
1659 + id="mxch-global-usage-unlimited"
1660 + style="margin: 12px 0 0;"
1661 + <?php echo $global_is_unlimited ? '' : 'hidden'; ?>>
1662 + <?php esc_html_e('Unlimited — no cap. Usage tracking applies only when a numeric limit is set.', 'mxchat'); ?>
1663 + </p>
1664 + </div>
1665 + </div>
1666 + <?php
1667 + // ---------------------------------------------------------------------
1668 +
1422 1669 foreach ($roles as $role_id => $role_name) {
1423 1670 $default_limit = ($role_id === 'logged_out') ? '10' : '100';
1424 1671 $default_timeframe = 'daily';
1425 1672 $default_message = __('Rate limit exceeded. Please try again later.', 'mxchat');
@@ -1424,9 +1671,9 @@
1424 1671 $default_timeframe = 'daily';
1425 1672 $default_message = __('Rate limit exceeded. Please try again later.', 'mxchat');
1426 1673
1427 1674 $selected_limit = isset($all_options['rate_limits'][$role_id]['limit'])
1428 - ? $all_options['rate_limits'][$role_id]['limit']
1675 + ? (string) $all_options['rate_limits'][$role_id]['limit']
1429 1676 : $default_limit;
1430 1677
1431 1678 $selected_timeframe = isset($all_options['rate_limits'][$role_id]['timeframe'])
1432 1679 ? $all_options['rate_limits'][$role_id]['timeframe']
@@ -1436,8 +1683,16 @@
1436 1683 ? $all_options['rate_limits'][$role_id]['message']
1437 1684 : $default_message;
1438 1685
1439 1686 $timeframe_label = isset($timeframes[$selected_timeframe]) ? $timeframes[$selected_timeframe] : $selected_timeframe;
1687 +
1688 + // Custom-value handling: if the stored limit is not in the preset list
1689 + // and not 'unlimited', it's a custom integer. The select shows __custom__
1690 + // and the number input below carries the actual value.
1691 + $is_preset_limit = in_array($selected_limit, $rate_limits, true);
1692 + $role_select_value = $is_preset_limit ? $selected_limit : '__custom__';
1693 + $role_custom_value = (!$is_preset_limit && ctype_digit($selected_limit)) ? $selected_limit : '';
1694 + $custom_field_id = 'rate_limits_' . $role_id . '_limit_custom';
1440 1695 ?>
1441 1696 <div class="mxch-rate-limit-item">
1442 1697 <div class="mxch-rate-limit-header">
1443 1698 <span class="mxch-rate-limit-role"><?php echo esc_html($role_name); ?></span>
@@ -1451,13 +1706,28 @@
1451 1706 <div class="mxch-field">
1452 1707 <label class="mxch-field-label" for="rate_limits_<?php echo esc_attr($role_id); ?>_limit"><?php esc_html_e('Limit', 'mxchat'); ?></label>
1453 1708 <select id="rate_limits_<?php echo esc_attr($role_id); ?>_limit"
1454 1709 name="mxchat_options[rate_limits][<?php echo esc_attr($role_id); ?>][limit]"
1455 - class="mxch-select mxchat-autosave-field">
1710 + class="mxch-select mxchat-autosave-field mxch-rate-limit-limit-select"
1711 + data-mxch-custom-target="<?php echo esc_attr($custom_field_id); ?>">
1456 1712 <?php foreach ($rate_limits as $limit): ?>
1457 - <option value="<?php echo esc_attr($limit); ?>" <?php selected($selected_limit, $limit); ?>><?php echo esc_html($limit); ?></option>
1713 + <option value="<?php echo esc_attr($limit); ?>" <?php selected($role_select_value, $limit); ?>>
1714 + <?php echo esc_html($limit === 'unlimited' ? __('Unlimited', 'mxchat') : $limit); ?>
1715 + </option>
1458 1716 <?php endforeach; ?>
1717 + <option value="__custom__" <?php selected($role_select_value, '__custom__'); ?>><?php esc_html_e('Custom…', 'mxchat'); ?></option>
1459 1718 </select>
1719 + </div>
1720 + <div class="mxch-field mxch-rate-limit-custom-field" data-mxch-custom-for="<?php echo esc_attr($custom_field_id); ?>" <?php echo $role_select_value === '__custom__' ? '' : 'hidden'; ?>>
1721 + <label class="mxch-field-label" for="<?php echo esc_attr($custom_field_id); ?>"><?php esc_html_e('Custom limit', 'mxchat'); ?></label>
1722 + <input type="number"
1723 + min="1"
1724 + step="1"
1725 + id="<?php echo esc_attr($custom_field_id); ?>"
1726 + name="mxchat_options[rate_limits][<?php echo esc_attr($role_id); ?>][limit_custom]"
1727 + class="mxch-input mxchat-autosave-field mxch-rate-limit-custom-input"
1728 + placeholder="e.g. 250"
1729 + value="<?php echo esc_attr($role_custom_value); ?>" />
1460 1730 </div>
1461 1731 <div class="mxch-field">
1462 1732 <label class="mxch-field-label" for="rate_limits_<?php echo esc_attr($role_id); ?>_timeframe"><?php esc_html_e('Timeframe', 'mxchat'); ?></label>
1463 1733 <select id="rate_limits_<?php echo esc_attr($role_id); ?>_timeframe"