PluginProbe
MxChat – AI Chatbot & Content Generation for WordPress / trunk
MxChat – AI Chatbot & Content Generation for WordPress vtrunk
3.2.21 3.2.20 3.2.19 3.2.18 3.2.17 3.2.16 3.2.15 3.2.14 3.2.12 3.2.13 3.2.11 3.2.10 3.2.9 3.2.8 3.2.7 3.2.6 3.2.5 3.2.4 3.2.3 3.2.2 3.2.1 2.0.3 2.0.4 2.0.5 2.0.6 All 152 releases
← All changes | includes/admin-settings-page.php +340 -234 3.2.7trunk View file →
@@ -86,8 +86,9 @@
86 86 <button class="mxch-mobile-nav-sub-link" data-target="integrations-loops"><?php esc_html_e('Loops', 'mxchat'); ?></button>
87 87 <button class="mxch-mobile-nav-sub-link" data-target="integrations-brave"><?php esc_html_e('Brave Search', 'mxchat'); ?></button>
88 88 <button class="mxch-mobile-nav-sub-link" data-target="integrations-slack"><?php esc_html_e('Slack', 'mxchat'); ?></button>
89 89 <button class="mxch-mobile-nav-sub-link" data-target="integrations-telegram"><?php esc_html_e('Telegram', 'mxchat'); ?></button>
90 + <button class="mxch-mobile-nav-sub-link" data-target="integrations-webhook"><?php esc_html_e('Webhook', 'mxchat'); ?></button>
90 91 </div>
91 92 </div>
92 93 <!-- Resources Section -->
93 94 <div class="mxch-mobile-nav-section">
@@ -188,8 +189,9 @@
188 189 <button class="mxch-nav-sub-link" data-target="integrations-loops"><?php esc_html_e('Loops', 'mxchat'); ?></button>
189 190 <button class="mxch-nav-sub-link" data-target="integrations-brave"><?php esc_html_e('Brave Search', 'mxchat'); ?></button>
190 191 <button class="mxch-nav-sub-link" data-target="integrations-slack"><?php esc_html_e('Slack', 'mxchat'); ?></button>
191 192 <button class="mxch-nav-sub-link" data-target="integrations-telegram"><?php esc_html_e('Telegram', 'mxchat'); ?></button>
193 + <button class="mxch-nav-sub-link" data-target="integrations-webhook"><?php esc_html_e('Webhook', 'mxchat'); ?></button>
192 194 </div>
193 195 </div>
194 196 </div>
195 197
@@ -244,8 +246,18 @@
244 246 <h1 class="mxch-content-title"><?php esc_html_e('AI Models', 'mxchat'); ?></h1>
245 247 <p class="mxch-content-subtitle"><?php esc_html_e('Configure the AI models your chatbot will use for conversations and embeddings.', 'mxchat'); ?></p>
246 248 </div>
247 249
250 + <?php
251 + // Model-retirement warning (b65e8d). Rendered HERE rather than via
252 + // admin_notices because the branded shell paints over WP's notice
253 + // region — a core notice on this screen is invisible. No-ops unless
254 + // the daily liveness check has flagged the configured model.
255 + if (class_exists('MxChat_Model_Liveness')) {
256 + MxChat_Model_Liveness::render_inline_notice();
257 + }
258 + ?>
259 +
248 260 <div class="mxch-card">
249 261 <div class="mxch-card-body mxchat-autosave-section">
250 262 <?php
251 263 // Chat Model
@@ -262,12 +274,12 @@
262 274 mxchat_render_field_wrapper('enable_streaming', __('Enable Streaming', 'mxchat'), function() use ($admin_instance) {
263 275 $admin_instance->enable_streaming_toggle_callback();
264 276 }, __('Enable real-time streaming responses for supported models (OpenAI, Claude, DeepSeek, Grok).', 'mxchat'));
265 277
266 - // Enable Web Search (OpenAI only)
278 + // Enable Web Search (OpenAI & Gemini)
267 279 mxchat_render_field_wrapper('enable_web_search', __('Enable Web Search', 'mxchat'), function() use ($admin_instance) {
268 280 $admin_instance->enable_web_search_toggle_callback();
269 - }, __('Allow the chatbot to search the web for current information (OpenAI models only).', 'mxchat'));
281 + }, __('Allow the chatbot to search the web for current information (OpenAI and Gemini models).', 'mxchat'));
270 282 ?>
271 283 </div>
272 284 </div>
273 285 </div>
@@ -303,8 +315,21 @@
303 315 mxchat_render_field_wrapper('rag_chunks_limit', __('RAG Chunks Limit', 'mxchat'), function() use ($admin_instance) {
304 316 $admin_instance->mxchat_rag_chunks_limit_callback();
305 317 }, __('Maximum total content chunks sent to the AI across all sources. Higher values provide more context but increase token usage and cost.', 'mxchat'));
306 318
319 + // Hybrid keyword boost MOVED to Knowledge → Chunking &
320 + // Retrieval (plan 11720c) — it is KB retrieval tuning, not
321 + // conversation behavior. Same option key over there. The
322 + // breadcrumb below is a one-release courtesy: drop it in
323 + // the release after 3.2.17.
324 + echo '<p class="mxch-field-description">';
325 + printf(
326 + /* translators: %s: link to the Chunking & Retrieval settings tab. */
327 + esc_html__('Hybrid keyword boost has moved to %s.', 'mxchat'),
328 + '<a href="' . esc_url(admin_url('admin.php?page=mxchat-prompts#chunking')) . '">' . esc_html__('Knowledge, Chunking & Retrieval', 'mxchat') . '</a>'
329 + );
330 + echo '</p>';
331 +
307 332 // Contextual Awareness
308 333 mxchat_render_field_wrapper('contextual_awareness', __('Contextual Awareness', 'mxchat'), function() use ($admin_instance) {
309 334 $admin_instance->mxchat_contextual_awareness_callback();
310 335 }, __('Allow the chatbot to understand and reference the current page content for more relevant responses.', 'mxchat'));
@@ -313,8 +338,14 @@
313 338 mxchat_render_field_wrapper('citation_links', __('Citation Links', 'mxchat'), function() use ($admin_instance) {
314 339 $admin_instance->mxchat_citation_links_toggle_callback();
315 340 }, __('Allow the AI to include citation links from your knowledge database in responses. If disabled, ensure your AI Behavior settings do not mention links or the AI may fabricate URLs.', 'mxchat'));
316 341
342 + // Strip Unapproved Links (plan 58f8b4) — enforcement is now
343 + // its own control instead of riding Citation Links.
344 + mxchat_render_field_wrapper('strip_unapproved_links', __('Strip Unapproved Links', 'mxchat'), function() use ($admin_instance) {
345 + $admin_instance->mxchat_strip_unapproved_links_toggle_callback();
346 + }, __('Remove links the AI invents from its answers, even when Citation Links is off. Approved citations, real pages on this site, and links returned by your integrations (e.g. WooCommerce products) are always kept. On by default for new installs; existing sites keep their current behavior until enabled.', 'mxchat'));
347 +
317 348 // Satisfaction Rating Prompt
318 349 // The toggle callback inline-renders the 5 customization
319 350 // fields inside a single sub-options wrapper (plan-29caac).
320 351 // No separate customization group needed — the wrapper handles
@@ -321,8 +352,12 @@
321 352 // its own server-side display state based on the toggle value.
322 353 mxchat_render_field_wrapper('satisfaction_rating', __('Satisfaction Rating Prompt', 'mxchat'), function() use ($admin_instance) {
323 354 $admin_instance->mxchat_satisfaction_rating_toggle_callback();
324 355 }, __('Show a 👍 / 👎 prompt after a conversation has had a couple of bot replies and the visitor has been idle for a moment. Disable to hide the prompt site-wide.', 'mxchat'));
356 +
357 + // Editor Assistant toggle moved to Content → Settings (plan-f7df40):
358 + // it's a content feature, so it lives on the screen that owns it.
359 + // Rendering is in admin-content-page.php; option + save path unchanged.
325 360 ?>
326 361 </div>
327 362 </div>
328 363 </div>
@@ -358,8 +393,23 @@
358 393 // Chat Persistence
359 394 mxchat_render_field_wrapper('chat_persistence', __('Chat Persistence', 'mxchat'), function() use ($admin_instance) {
360 395 $admin_instance->mxchat_chat_persistence_toggle_callback();
361 396 }, __('Keep chat history when users navigate or return within 24 hours.', 'mxchat'));
397 +
398 + // Download Transcript button
399 + mxchat_render_field_wrapper('print_button', __('Show Download Transcript Button', 'mxchat'), function() use ($admin_instance) {
400 + $admin_instance->mxchat_print_button_toggle_callback();
401 + }, __('Show the "Download Transcript" item in the chat window menu.', 'mxchat'));
402 +
403 + // Start-New-Chat button (plan ac2e81) — lets a visitor reset the
404 + // conversation without the owner disabling chat persistence globally.
405 + mxchat_render_field_wrapper('reset_chat_enabled', __('Show Start-New-Chat Button', 'mxchat'), function() use ($admin_instance) {
406 + $admin_instance->mxchat_reset_chat_toggle_callback();
407 + }, __('Show a "Start new chat" item in the chat window menu that clears the current conversation and begins a fresh session.', 'mxchat'));
408 +
409 + mxchat_render_field_wrapper('reset_chat_label', __('Start-New-Chat Button Label', 'mxchat'), function() use ($admin_instance) {
410 + $admin_instance->mxchat_reset_chat_label_callback();
411 + }, __('Label for the Start-New-Chat menu item. Leave blank to use "Start new chat".', 'mxchat'));
362 412 ?>
363 413 </div>
364 414 </div>
365 415
@@ -391,8 +441,13 @@
391 441 mxchat_render_field_wrapper('input_copy', __('Input Placeholder', 'mxchat'), function() use ($admin_instance) {
392 442 $admin_instance->mxchat_input_copy_callback();
393 443 }, __('Placeholder text in the chat input field.', 'mxchat'));
394 444
445 + // Max Input Length (characters) — plan a3fae2 part C
446 + mxchat_render_field_wrapper('max_input_length', __('Max Input Length (characters)', 'mxchat'), function() use ($admin_instance) {
447 + $admin_instance->mxchat_max_input_length_callback();
448 + }, __('Cap how many characters a visitor can type or paste into a single message. Set to 0 for unlimited (default).', 'mxchat'));
449 +
395 450 // Chat Teaser
396 451 mxchat_render_field_wrapper('pre_chat_message', __('Chat Teaser Pop-up', 'mxchat'), function() use ($admin_instance) {
397 452 $admin_instance->mxchat_pre_chat_message_callback();
398 453 }, __('Message shown before users start chatting.', 'mxchat'));
@@ -442,8 +497,23 @@
442 497 // Name Placeholder
443 498 mxchat_render_field_wrapper('name_placeholder', __('Name Field Placeholder', 'mxchat'), function() use ($admin_instance) {
444 499 $admin_instance->name_field_placeholder_callback();
445 500 }, __('Placeholder text for the name input field.', 'mxchat'));
501 +
502 + // Consent Checkbox (b062c4)
503 + mxchat_render_field_wrapper('enable_consent_checkbox', __('Consent Checkbox', 'mxchat'), function() use ($admin_instance) {
504 + $admin_instance->enable_consent_checkbox_callback();
505 + }, __('Show a consent checkbox on the email form. The decision, time, and exact label shown are stored with the lead.', 'mxchat'));
506 +
507 + // Consent Label
508 + mxchat_render_field_wrapper('consent_checkbox_label', __('Consent Label', 'mxchat'), function() use ($admin_instance) {
509 + $admin_instance->consent_checkbox_label_callback();
510 + }, __('Text shown beside the checkbox. Anchor tags are allowed so you can link your Privacy Policy; other HTML is stripped.', 'mxchat'));
511 +
512 + // Consent Required
513 + mxchat_render_field_wrapper('consent_checkbox_required', __('Require Consent to Submit', 'mxchat'), function() use ($admin_instance) {
514 + $admin_instance->consent_checkbox_required_callback();
515 + }, __('Block form submission until the box is ticked. Off means the checkbox is optional (a soft opt-in).', 'mxchat'));
446 516 ?>
447 517 </div>
448 518 </div>
449 519
@@ -595,8 +665,18 @@
595 665 </div>
596 666 <p class="mxch-field-description"><?php esc_html_e('Control when the chatbot script loads to improve page performance.', 'mxchat'); ?></p>
597 667 </div>
598 668
669 + <?php
670 + // Smart asset loading (plan-915355; rebuilt on the house toggle
671 + // pattern in plan-64d34f). Standalone option — never part of
672 + // mxchat_options, so mxchat_sanitize() can't strip it.
673 + mxchat_render_field_wrapper('mxchat_smart_asset_loading', __('Only load chatbot files on pages where the chatbot appears', 'mxchat'), function() use ($admin_instance) {
674 + $admin_instance->mxchat_smart_asset_loading_toggle_callback();
675 + }, __('Skips the chatbot\'s CSS and JavaScript on pages where the widget is hidden (per-page visibility, post type include/exclude, or auto-display disabled). Pages using the chatbot shortcode still load everything automatically. Helps with "reduce unused CSS/JS" audit findings.', 'mxchat'),
676 + __('If your theme or page builder inserts the chatbot in an unusual way and it stops appearing, turn this off — or force-load assets with the mxchat_should_load_assets filter.', 'mxchat'));
677 + ?>
678 +
599 679 <div class="mxch-notice mxch-notice-info" style="margin-top: 16px;">
600 680 <svg class="mxch-notice-icon" xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><circle cx="12" cy="12" r="10"/><line x1="12" y1="16" x2="12" y2="12"/><line x1="12" y1="8" x2="12.01" y2="8"/></svg>
601 681 <div>
602 682 <strong><?php esc_html_e('Loading Strategies:', 'mxchat'); ?></strong>
@@ -714,8 +794,15 @@
714 794 <?php esc_html_e('Debug Mode', 'mxchat'); ?>
715 795 </h3>
716 796 </div>
717 797 <div class="mxch-card-body">
798 + <?php // Deliberate exception to the house .toggle-switch pattern
799 + // (audited in plan-64d34f): this card-body is NOT an
800 + // autosave section — the toggle saves through its own
801 + // dedicated handler (mxchat_toggle_debug_mode, wired at
802 + // mxchat-admin.js #mxchat_debug_mode) which appends its own
803 + // save indicator inside this label. Converting the markup
804 + // would orphan that indicator without touching the JS. ?>
718 805 <div class="mxch-field">
719 806 <label class="mxch-toggle">
720 807 <input type="checkbox" class="mxch-toggle-input" id="mxchat_debug_mode" name="mxchat_options[debug_mode]" value="on" <?php checked($debug_active); ?>>
721 808 <span class="mxch-toggle-switch"></span>
@@ -894,9 +981,9 @@
894 981 <svg class="mxch-notice-icon" xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><circle cx="12" cy="12" r="10"/><line x1="12" y1="16" x2="12" y2="12"/><line x1="12" y1="8" x2="12.01" y2="8"/></svg>
895 982 <div>
896 983 <?php printf(
897 984 esc_html__('Visit our %s for setup instructions.', 'mxchat'),
898 - '<a href="https://mxchat.ai/documentation/#slack_integration" target="_blank">' . esc_html__('documentation page', 'mxchat') . '</a>'
985 + '<a href="https://mxchat.ai/documentation/mxchat-core#slack-live-agent-handoff" target="_blank">' . esc_html__('documentation page', 'mxchat') . '</a>'
899 986 ); ?>
900 987 </div>
901 988 </div>
902 989
@@ -1033,8 +1120,69 @@
1033 1120 </div>
1034 1121 </div>
1035 1122
1036 1123 <!-- ========================================
1124 + INTEGRATIONS - WEBHOOK HANDOFF (plan d88e22)
1125 + ======================================== -->
1126 + <div id="integrations-webhook" class="mxch-section">
1127 + <div class="mxch-content-header">
1128 + <h1 class="mxch-content-title"><?php esc_html_e('Webhook', 'mxchat'); ?></h1>
1129 + <p class="mxch-content-subtitle"><?php esc_html_e('Route live-agent handoffs to any URL you choose — your helpdesk, an automation flow, a CRM.', 'mxchat'); ?></p>
1130 + </div>
1131 +
1132 + <div class="mxch-notice mxch-notice-info" style="margin-bottom: 24px;">
1133 + <svg class="mxch-notice-icon" xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><circle cx="12" cy="12" r="10"/><line x1="12" y1="16" x2="12" y2="12"/><line x1="12" y1="8" x2="12.01" y2="8"/></svg>
1134 + <div>
1135 + <?php esc_html_e('This destination is outbound-only: MxChat delivers the handoff to your URL and the chatbot keeps assisting the visitor. Your team follows up separately — by email, phone, or your own support tool.', 'mxchat'); ?>
1136 + </div>
1137 + </div>
1138 +
1139 + <div class="mxch-card">
1140 + <div class="mxch-card-body mxchat-autosave-section">
1141 + <table class="form-table">
1142 + <?php do_settings_fields('mxchat-embed', 'mxchat_webhook_handoff_section'); ?>
1143 + </table>
1144 + </div>
1145 + </div>
1146 +
1147 + <div class="mxch-card" style="margin-top: 24px;">
1148 + <div class="mxch-card-header">
1149 + <h3 class="mxch-card-title">
1150 + <svg class="mxch-card-title-icon" xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><polyline points="16 18 22 12 16 6"/><polyline points="8 6 2 12 8 18"/></svg>
1151 + <?php esc_html_e('Payload Reference', 'mxchat'); ?>
1152 + </h3>
1153 + </div>
1154 + <div class="mxch-card-body">
1155 + <p class="mxch-field-description" style="margin-bottom: 12px;">
1156 + <?php esc_html_e('Each handoff arrives at your URL as an HTTPS POST with Content-Type application/json:', 'mxchat'); ?>
1157 + </p>
1158 + <pre style="background: #f8f9fa; padding: 16px; border-radius: 8px; font-size: 12px; overflow-x: auto; margin: 0 0 16px;"><?php echo esc_html('{
1159 + "event": "live_agent_handoff",
1160 + "site": { "name": "Your Site", "url": "https://your-site.com" },
1161 + "session_id": "mxchat_chat_…",
1162 + "user_id": 0,
1163 + "visitor": { "name": "Ada", "email": "ada@example.com" },
1164 + "current_message": "I need to talk to a human",
1165 + "recent_messages": [
1166 + { "role": "user", "content": "…", "timestamp": 1755900000 },
1167 + { "role": "assistant", "content": "…", "timestamp": 1755900012 }
1168 + ],
1169 + "requested_at": "2026-08-22T14:30:00+00:00"
1170 +}'); ?></pre>
1171 + <p class="mxch-field-description" style="margin-bottom: 12px;">
1172 + <?php esc_html_e('When a Signing Secret is set, each request also carries this header so your endpoint can verify the sender — compute the HMAC of the raw request body with your secret and compare:', 'mxchat'); ?>
1173 + </p>
1174 + <div class="mxch-webhook-url-display" style="margin-bottom: 16px;">
1175 + <code>X-MxChat-Signature: sha256=&lt;hex hmac-sha256 of the raw body&gt;</code>
1176 + </div>
1177 + <p class="mxch-field-description">
1178 + <?php esc_html_e('Answer with any 2xx status. Delivery uses a 5-second timeout with one retry on transport errors and 5xx responses; redirects are not followed. The last failed delivery is shown under the Webhook URL field above.', 'mxchat'); ?>
1179 + </p>
1180 + </div>
1181 + </div>
1182 + </div>
1183 +
1184 + <!-- ========================================
1037 1185 TUTORIALS
1038 1186 ======================================== -->
1039 1187 <div id="tutorials" class="mxch-section">
1040 1188 <div class="mxch-content-header">
@@ -1291,145 +1439,13 @@
1291 1439 </div>
1292 1440
1293 1441 <script>
1294 1442 document.addEventListener('DOMContentLoaded', function() {
1295 - // Sidebar navigation
1296 - const navLinks = document.querySelectorAll('.mxch-nav-link, .mxch-nav-sub-link');
1297 - const sections = document.querySelectorAll('.mxch-section');
1298 - const navItems = document.querySelectorAll('.mxch-nav-item');
1443 + // Sidebar/tab navigation, accordion groups, ?tab=/#hash deep-linking
1444 + // and the mobile menu all live in the shared shell script
1445 + // (js/admin-sidebar.js) — consolidated by plan c192a4. Only the
1446 + // page-local widgets below remain inline.
1299 1447
1300 - function showSection(target) {
1301 - // Show target section
1302 - sections.forEach(section => {
1303 - section.classList.remove('active');
1304 - if (section.id === target) {
1305 - section.classList.add('active');
1306 - }
1307 - });
1308 -
1309 - // Scroll content area to top
1310 - const contentArea = document.querySelector('.mxch-content');
1311 - if (contentArea) {
1312 - contentArea.scrollTop = 0;
1313 - }
1314 - }
1315 -
1316 - function setActiveNav(clickedLink) {
1317 - // Remove active from all links
1318 - navLinks.forEach(l => l.classList.remove('active'));
1319 -
1320 - // Add active to clicked link
1321 - clickedLink.classList.add('active');
1322 -
1323 - // If clicking a sub-link, also highlight parent
1324 - if (clickedLink.classList.contains('mxch-nav-sub-link')) {
1325 - const parent = clickedLink.closest('.mxch-nav-item');
1326 - if (parent) {
1327 - parent.querySelector('.mxch-nav-link').classList.add('active');
1328 - }
1329 - }
1330 - }
1331 -
1332 - navLinks.forEach(link => {
1333 - link.addEventListener('click', function(e) {
1334 - e.preventDefault();
1335 - e.stopPropagation();
1336 - const target = this.dataset.target;
1337 - const parentItem = this.closest('.mxch-nav-item');
1338 - const hasSubmenu = parentItem && parentItem.querySelector('.mxch-nav-sub');
1339 -
1340 - // If this is a parent nav link WITH children (expandable menu)
1341 - if (this.classList.contains('mxch-nav-link') && hasSubmenu) {
1342 - const wasExpanded = parentItem.classList.contains('expanded');
1343 -
1344 - // Collapse all other expandable items
1345 - navItems.forEach(item => {
1346 - if (item !== parentItem && item.querySelector('.mxch-nav-sub')) {
1347 - item.classList.remove('expanded');
1348 - }
1349 - });
1350 -
1351 - // Toggle this item
1352 - parentItem.classList.toggle('expanded');
1353 -
1354 - // If expanding, show the first sub-item's content and mark it active
1355 - if (!wasExpanded) {
1356 - const firstSubLink = parentItem.querySelector('.mxch-nav-sub-link');
1357 - if (firstSubLink) {
1358 - const firstTarget = firstSubLink.dataset.target;
1359 - showSection(firstTarget);
1360 - setActiveNav(firstSubLink);
1361 - // Also mark parent as active
1362 - this.classList.add('active');
1363 - history.replaceState(null, null, '#' + firstTarget);
1364 - }
1365 - }
1366 - }
1367 - // If this is a nav link WITHOUT children (like API Keys, Tutorials)
1368 - else if (this.classList.contains('mxch-nav-link') && !hasSubmenu && target) {
1369 - // Collapse all expandable items
1370 - navItems.forEach(item => {
1371 - if (item.querySelector('.mxch-nav-sub')) {
1372 - item.classList.remove('expanded');
1373 - }
1374 - });
1375 -
1376 - // Show the section
1377 - showSection(target);
1378 - setActiveNav(this);
1379 - history.replaceState(null, null, '#' + target);
1380 - }
1381 - // If this is a sub-link
1382 - else if (this.classList.contains('mxch-nav-sub-link') && target) {
1383 - // Ensure parent stays expanded
1384 - if (parentItem) {
1385 - parentItem.classList.add('expanded');
1386 - }
1387 - showSection(target);
1388 - setActiveNav(this);
1389 - history.replaceState(null, null, '#' + target);
1390 - }
1391 - });
1392 - });
1393 -
1394 - // Handle initial deep-link (?tab=<slug> takes precedence over #hash so the
1395 - // Onboarding setup-step CTAs land on the right sub-tab). Whitelist of valid
1396 - // section ids must stay in sync with the .mxch-section[id] values above.
1397 - const validTabs = [
1398 - 'chatbot-ai-models', 'chatbot-behavior', 'chatbot-display',
1399 - 'chatbot-lead-capture', 'chatbot-quick-questions', 'chatbot-rate-limits',
1400 - 'api-keys', 'optimization', 'testing',
1401 - 'integrations-toolbar', 'integrations-loops', 'integrations-brave',
1402 - 'integrations-slack', 'integrations-telegram',
1403 - 'tutorials'
1404 - ];
1405 - function activateTab(target) {
1406 - if (!target) return false;
1407 - if (validTabs.indexOf(target) === -1) return false;
1408 - const targetLink = document.querySelector('[data-target="' + target + '"]');
1409 - if (!targetLink) return false;
1410 - const parentItem = targetLink.closest('.mxch-nav-item');
1411 - if (parentItem && targetLink.classList.contains('mxch-nav-sub-link')) {
1412 - parentItem.classList.add('expanded');
1413 - }
1414 - showSection(target);
1415 - setActiveNav(targetLink);
1416 - return true;
1417 - }
1418 - const urlParams = new URLSearchParams(window.location.search);
1419 - const tabParam = urlParams.get('tab');
1420 - let tabActivated = false;
1421 - if (tabParam) {
1422 - tabActivated = activateTab(tabParam);
1423 - // Invalid ?tab=… silently falls through to default (#hash or AI Models).
1424 - }
1425 - if (!tabActivated) {
1426 - const hash = window.location.hash.slice(1);
1427 - if (hash) {
1428 - activateTab(hash);
1429 - }
1430 - }
1431 -
1432 1448 // Rate limit accordion
1433 1449 const rateLimitHeaders = document.querySelectorAll('.mxch-rate-limit-header');
1434 1450 rateLimitHeaders.forEach(header => {
1435 1451 header.addEventListener('click', function(e) {
@@ -1439,101 +1455,25 @@
1439 1455 item.classList.toggle('expanded');
1440 1456 });
1441 1457 });
1442 1458
1443 - // =====================================================
1444 - // Mobile Menu Functionality
1445 - // =====================================================
1446 - const mobileMenuBtn = document.querySelector('.mxch-mobile-menu-btn');
1447 - const mobileMenuClose = document.querySelector('.mxch-mobile-menu-close');
1448 - const mobileMenu = document.querySelector('.mxch-mobile-menu');
1449 - const mobileOverlay = document.querySelector('.mxch-mobile-overlay');
1450 - const mobileNavLinks = document.querySelectorAll('.mxch-mobile-nav-link, .mxch-mobile-nav-sub-link');
1451 -
1452 - function openMobileMenu() {
1453 - mobileMenu.classList.add('open');
1454 - mobileOverlay.classList.add('open');
1455 - document.body.style.overflow = 'hidden';
1456 - }
1457 -
1458 - function closeMobileMenu() {
1459 - mobileMenu.classList.remove('open');
1460 - mobileOverlay.classList.remove('open');
1461 - document.body.style.overflow = '';
1462 - }
1463 -
1464 - if (mobileMenuBtn) {
1465 - mobileMenuBtn.addEventListener('click', openMobileMenu);
1466 - }
1467 -
1468 - if (mobileMenuClose) {
1469 - mobileMenuClose.addEventListener('click', closeMobileMenu);
1470 - }
1471 -
1472 - if (mobileOverlay) {
1473 - mobileOverlay.addEventListener('click', closeMobileMenu);
1474 - }
1475 -
1476 - // Mobile navigation links
1477 - mobileNavLinks.forEach(link => {
1478 - link.addEventListener('click', function(e) {
1479 - e.preventDefault();
1480 - e.stopPropagation();
1481 -
1482 - const target = this.dataset.target;
1483 - const parentId = this.dataset.parent;
1484 -
1485 - // If this is an expandable parent link
1486 - if (parentId && !target) {
1487 - const subNav = document.querySelector('.mxch-mobile-nav-sub[data-parent="' + parentId + '"]');
1488 - if (subNav) {
1489 - const isExpanded = subNav.classList.contains('expanded');
1490 - // Collapse all sub navs
1491 - document.querySelectorAll('.mxch-mobile-nav-sub').forEach(nav => {
1492 - nav.classList.remove('expanded');
1493 - });
1494 - document.querySelectorAll('.mxch-mobile-nav-link').forEach(l => {
1495 - l.classList.remove('expanded');
1496 - });
1497 - // Toggle this one
1498 - if (!isExpanded) {
1499 - subNav.classList.add('expanded');
1500 - this.classList.add('expanded');
1501 - }
1502 - }
1459 + // Rate-limit "Custom…" toggle: show/hide the integer input below each
1460 + // limit <select> based on whether __custom__ is the active option.
1461 + document.querySelectorAll('.mxch-rate-limit-limit-select').forEach(sel => {
1462 + const targetId = sel.getAttribute('data-mxch-custom-target');
1463 + if (!targetId) return;
1464 + const field = document.querySelector('[data-mxch-custom-for="' + targetId + '"]');
1465 + if (!field) return;
1466 + const sync = () => {
1467 + if (sel.value === '__custom__') {
1468 + field.hidden = false;
1469 + } else {
1470 + field.hidden = true;
1503 1471 }
1504 - // If this is a direct link or sub-link with a target
1505 - else if (target) {
1506 - // Update mobile nav active state
1507 - document.querySelectorAll('.mxch-mobile-nav-link, .mxch-mobile-nav-sub-link').forEach(l => {
1508 - l.classList.remove('active');
1509 - });
1510 - this.classList.add('active');
1511 -
1512 - // Also update desktop sidebar nav
1513 - const desktopLink = document.querySelector('.mxch-sidebar [data-target="' + target + '"]');
1514 - if (desktopLink) {
1515 - setActiveNav(desktopLink);
1516 - const parentItem = desktopLink.closest('.mxch-nav-item');
1517 - if (parentItem && desktopLink.classList.contains('mxch-nav-sub-link')) {
1518 - parentItem.classList.add('expanded');
1519 - }
1520 - }
1521 -
1522 - // Show section and close menu
1523 - showSection(target);
1524 - history.replaceState(null, null, '#' + target);
1525 - closeMobileMenu();
1526 - }
1527 - });
1472 + };
1473 + sel.addEventListener('change', sync);
1474 + sync();
1528 1475 });
1529 -
1530 - // Close mobile menu on escape key
1531 - document.addEventListener('keydown', function(e) {
1532 - if (e.key === 'Escape' && mobileMenu && mobileMenu.classList.contains('open')) {
1533 - closeMobileMenu();
1534 - }
1535 - });
1536 1476 });
1537 1477 </script>
1538 1478 <?php
1539 1479 }
@@ -1539,10 +1479,14 @@
1539 1479 }
1540 1480
1541 1481 /**
1542 1482 * Helper function to render a field with consistent wrapper
1483 + *
1484 + * $hint renders as a .mxch-field-hint line under the description — the
1485 + * softer "caveats / fine print" slot (added for plan-64d34f so hint-bearing
1486 + * fields don't have to hand-roll the wrapper markup).
1543 1487 */
1544 -function mxchat_render_field_wrapper($id, $label, $callback, $description = '') {
1488 +function mxchat_render_field_wrapper($id, $label, $callback, $description = '', $hint = '') {
1545 1489 ?>
1546 1490 <div class="mxch-field">
1547 1491 <label class="mxch-field-label"><?php echo esc_html($label); ?></label>
1548 1492 <div class="mxch-field-control">
@@ -1550,8 +1494,11 @@
1550 1494 </div>
1551 1495 <?php if ($description): ?>
1552 1496 <p class="mxch-field-description"><?php echo esc_html($description); ?></p>
1553 1497 <?php endif; ?>
1498 + <?php if ($hint): ?>
1499 + <p class="mxch-field-hint"><?php echo esc_html($hint); ?></p>
1500 + <?php endif; ?>
1554 1501 </div>
1555 1502 <?php
1556 1503 }
1557 1504
@@ -1570,10 +1517,146 @@
1570 1517
1571 1518 $roles = wp_roles()->get_names();
1572 1519 $roles['logged_out'] = __('Logged Out Users', 'mxchat');
1573 1520
1521 + // Whole-chatbot global cap (sits above per-role; defaults to unlimited so
1522 + // existing installs are unchanged). Stored under mxchat_options['rate_limits_global'].
1523 + $global_cfg = isset($all_options['rate_limits_global']) && is_array($all_options['rate_limits_global'])
1524 + ? $all_options['rate_limits_global']
1525 + : array();
1526 + $global_limit_raw = isset($global_cfg['limit']) ? (string) $global_cfg['limit'] : 'unlimited';
1527 + $global_timeframe = isset($global_cfg['timeframe']) ? (string) $global_cfg['timeframe'] : 'daily';
1528 + $global_is_unlimited = ($global_limit_raw === '' || $global_limit_raw === 'unlimited');
1529 + $global_is_preset = !$global_is_unlimited && in_array($global_limit_raw, $rate_limits, true);
1530 + $global_select_value = $global_is_unlimited ? 'unlimited' : ($global_is_preset ? $global_limit_raw : '__custom__');
1531 + $global_custom_value = (!$global_is_unlimited && !$global_is_preset && ctype_digit($global_limit_raw))
1532 + ? $global_limit_raw
1533 + : '';
1534 +
1574 1535 echo '<div class="mxch-rate-limits">';
1575 1536
1537 + // --- Global cap card -------------------------------------------------
1538 + ?>
1539 + <div class="mxch-rate-limit-item mxch-rate-limit-global mxchat-autosave-section">
1540 + <div class="mxch-rate-limit-header">
1541 + <span class="mxch-rate-limit-role"><?php esc_html_e('Total chatbot message limit', 'mxchat'); ?></span>
1542 + <div class="mxch-rate-limit-summary">
1543 + <span class="mxch-rate-limit-badge mxch-rate-limit-global-badge">
1544 + <?php
1545 + if ($global_is_unlimited) {
1546 + esc_html_e('Unlimited', 'mxchat');
1547 + } else {
1548 + $tf_label = isset($timeframes[$global_timeframe]) ? $timeframes[$global_timeframe] : $global_timeframe;
1549 + echo esc_html(($global_custom_value !== '' ? $global_custom_value : $global_limit_raw) . ' / ' . $tf_label);
1550 + }
1551 + ?>
1552 + </span>
1553 + <svg class="mxch-rate-limit-arrow" xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><polyline points="6 9 12 15 18 9"></polyline></svg>
1554 + </div>
1555 + </div>
1556 + <div class="mxch-rate-limit-body">
1557 + <p class="mxch-field-description" style="margin: 0 0 12px;">
1558 + <?php esc_html_e('A single ceiling across all users and all roles, per timeframe. Independent of the per-role limits below. When both a per-role limit and this global cap are configured, whichever is hit first stops the conversation. Default is Unlimited — existing installs are unchanged.', 'mxchat'); ?>
1559 + </p>
1560 + <div class="mxch-rate-limit-controls">
1561 + <div class="mxch-field">
1562 + <label class="mxch-field-label" for="rate_limits_global_limit"><?php esc_html_e('Limit', 'mxchat'); ?></label>
1563 + <select id="rate_limits_global_limit"
1564 + name="mxchat_options[rate_limits_global][limit]"
1565 + class="mxch-select mxchat-autosave-field mxch-rate-limit-limit-select"
1566 + data-mxch-custom-target="rate_limits_global_limit_custom">
1567 + <?php foreach ($rate_limits as $limit): ?>
1568 + <option value="<?php echo esc_attr($limit); ?>" <?php selected($global_select_value, $limit); ?>>
1569 + <?php echo esc_html($limit === 'unlimited' ? __('Unlimited', 'mxchat') : $limit); ?>
1570 + </option>
1571 + <?php endforeach; ?>
1572 + <option value="__custom__" <?php selected($global_select_value, '__custom__'); ?>><?php esc_html_e('Custom…', 'mxchat'); ?></option>
1573 + </select>
1574 + </div>
1575 + <div class="mxch-field mxch-rate-limit-custom-field" data-mxch-custom-for="rate_limits_global_limit_custom" <?php echo $global_select_value === '__custom__' ? '' : 'hidden'; ?>>
1576 + <label class="mxch-field-label" for="rate_limits_global_limit_custom"><?php esc_html_e('Custom limit', 'mxchat'); ?></label>
1577 + <input type="number"
1578 + min="1"
1579 + step="1"
1580 + id="rate_limits_global_limit_custom"
1581 + name="mxchat_options[rate_limits_global][limit_custom]"
1582 + class="mxch-input mxchat-autosave-field mxch-rate-limit-custom-input"
1583 + placeholder="e.g. 250"
1584 + value="<?php echo esc_attr($global_custom_value); ?>" />
1585 + </div>
1586 + <div class="mxch-field">
1587 + <label class="mxch-field-label" for="rate_limits_global_timeframe"><?php esc_html_e('Timeframe', 'mxchat'); ?></label>
1588 + <select id="rate_limits_global_timeframe"
1589 + name="mxchat_options[rate_limits_global][timeframe]"
1590 + class="mxch-select mxchat-autosave-field">
1591 + <?php foreach ($timeframes as $value => $label): ?>
1592 + <option value="<?php echo esc_attr($value); ?>" <?php selected($global_timeframe, $value); ?>><?php echo esc_html($label); ?></option>
1593 + <?php endforeach; ?>
1594 + </select>
1595 + </div>
1596 + </div>
1597 + <?php
1598 + // --- Current usage readout (read-only; mirrors the integrator's
1599 + // window-reset math at READ time — never writes the counter here).
1600 + // v1 surfaces the DEFAULT bot's pool. TODO: per-bot selector if asked.
1601 + $global_usage_limit_int = (!$global_is_unlimited && ctype_digit($global_limit_raw))
1602 + ? (int) $global_limit_raw
1603 + : 0;
1604 + $usage_raw = get_option('mxchat_chat_limit_default_global', array('count' => 0, 'timestamp' => time()));
1605 + $usage_count = isset($usage_raw['count']) ? (int) $usage_raw['count'] : 0;
1606 + $usage_ts = isset($usage_raw['timestamp']) ? (int) $usage_raw['timestamp'] : time();
1607 + $usage_windows = array('hourly' => 3600, 'daily' => 86400, 'weekly' => 604800, 'monthly' => 2592000);
1608 + $usage_window = isset($usage_windows[$global_timeframe]) ? $usage_windows[$global_timeframe] : 86400;
1609 + $usage_now = time();
1610 + if (($usage_now - $usage_ts) >= $usage_window) {
1611 + // Window elapsed since the stored timestamp → effective count is 0.
1612 + $usage_count = 0;
1613 + $usage_reset_at = $usage_now + $usage_window;
1614 + } else {
1615 + $usage_reset_at = $usage_ts + $usage_window;
1616 + }
1617 + $usage_left = max(0, $global_usage_limit_int - $usage_count);
1618 + $usage_pct = ($global_usage_limit_int > 0)
1619 + ? min(100, (int) round(($usage_count / $global_usage_limit_int) * 100))
1620 + : 0;
1621 + $usage_reset_nonce = wp_create_nonce('mxchat_reset_global_usage');
1622 + ?>
1623 + <div class="mxch-rate-limit-usage"
1624 + id="mxch-global-usage"
1625 + data-bot-id="default"
1626 + data-reset-nonce="<?php echo esc_attr($usage_reset_nonce); ?>"
1627 + <?php echo $global_is_unlimited ? 'hidden' : ''; ?>>
1628 + <div class="mxch-rate-limit-usage-head">
1629 + <span class="mxch-field-label" style="margin:0;"><?php esc_html_e('Current usage', 'mxchat'); ?></span>
1630 + <button type="button" class="mxch-btn mxch-btn-secondary mxch-btn-sm" id="mxch-global-usage-reset"><?php esc_html_e('Reset counter', 'mxchat'); ?></button>
1631 + </div>
1632 + <div class="mxch-progress-bar">
1633 + <div class="mxch-progress-bar-fill" id="mxch-global-usage-fill" style="width: <?php echo esc_attr($usage_pct); ?>%;"></div>
1634 + </div>
1635 + <p class="mxch-progress-label" id="mxch-global-usage-text" style="margin:0;">
1636 + <?php
1637 + printf(
1638 + /* translators: 1: used count, 2: limit, 3: remaining, 4: human-readable time until reset */
1639 + esc_html__('%1$s of %2$s used · %3$s left · resets in %4$s', 'mxchat'),
1640 + esc_html(number_format_i18n($usage_count)),
1641 + esc_html(number_format_i18n($global_usage_limit_int)),
1642 + esc_html(number_format_i18n($usage_left)),
1643 + esc_html(human_time_diff($usage_now, $usage_reset_at))
1644 + );
1645 + ?>
1646 + </p>
1647 + </div>
1648 + <p class="mxch-field-description mxch-rate-limit-usage-unlimited"
1649 + id="mxch-global-usage-unlimited"
1650 + style="margin: 12px 0 0;"
1651 + <?php echo $global_is_unlimited ? '' : 'hidden'; ?>>
1652 + <?php esc_html_e('Unlimited — no cap. Usage tracking applies only when a numeric limit is set.', 'mxchat'); ?>
1653 + </p>
1654 + </div>
1655 + </div>
1656 + <?php
1657 + // ---------------------------------------------------------------------
1658 +
1576 1659 foreach ($roles as $role_id => $role_name) {
1577 1660 $default_limit = ($role_id === 'logged_out') ? '10' : '100';
1578 1661 $default_timeframe = 'daily';
1579 1662 $default_message = __('Rate limit exceeded. Please try again later.', 'mxchat');
@@ -1578,9 +1661,9 @@
1578 1661 $default_timeframe = 'daily';
1579 1662 $default_message = __('Rate limit exceeded. Please try again later.', 'mxchat');
1580 1663
1581 1664 $selected_limit = isset($all_options['rate_limits'][$role_id]['limit'])
1582 - ? $all_options['rate_limits'][$role_id]['limit']
1665 + ? (string) $all_options['rate_limits'][$role_id]['limit']
1583 1666 : $default_limit;
1584 1667
1585 1668 $selected_timeframe = isset($all_options['rate_limits'][$role_id]['timeframe'])
1586 1669 ? $all_options['rate_limits'][$role_id]['timeframe']
@@ -1590,8 +1673,16 @@
1590 1673 ? $all_options['rate_limits'][$role_id]['message']
1591 1674 : $default_message;
1592 1675
1593 1676 $timeframe_label = isset($timeframes[$selected_timeframe]) ? $timeframes[$selected_timeframe] : $selected_timeframe;
1677 +
1678 + // Custom-value handling: if the stored limit is not in the preset list
1679 + // and not 'unlimited', it's a custom integer. The select shows __custom__
1680 + // and the number input below carries the actual value.
1681 + $is_preset_limit = in_array($selected_limit, $rate_limits, true);
1682 + $role_select_value = $is_preset_limit ? $selected_limit : '__custom__';
1683 + $role_custom_value = (!$is_preset_limit && ctype_digit($selected_limit)) ? $selected_limit : '';
1684 + $custom_field_id = 'rate_limits_' . $role_id . '_limit_custom';
1594 1685 ?>
1595 1686 <div class="mxch-rate-limit-item">
1596 1687 <div class="mxch-rate-limit-header">
1597 1688 <span class="mxch-rate-limit-role"><?php echo esc_html($role_name); ?></span>
@@ -1605,13 +1696,28 @@
1605 1696 <div class="mxch-field">
1606 1697 <label class="mxch-field-label" for="rate_limits_<?php echo esc_attr($role_id); ?>_limit"><?php esc_html_e('Limit', 'mxchat'); ?></label>
1607 1698 <select id="rate_limits_<?php echo esc_attr($role_id); ?>_limit"
1608 1699 name="mxchat_options[rate_limits][<?php echo esc_attr($role_id); ?>][limit]"
1609 - class="mxch-select mxchat-autosave-field">
1700 + class="mxch-select mxchat-autosave-field mxch-rate-limit-limit-select"
1701 + data-mxch-custom-target="<?php echo esc_attr($custom_field_id); ?>">
1610 1702 <?php foreach ($rate_limits as $limit): ?>
1611 - <option value="<?php echo esc_attr($limit); ?>" <?php selected($selected_limit, $limit); ?>><?php echo esc_html($limit); ?></option>
1703 + <option value="<?php echo esc_attr($limit); ?>" <?php selected($role_select_value, $limit); ?>>
1704 + <?php echo esc_html($limit === 'unlimited' ? __('Unlimited', 'mxchat') : $limit); ?>
1705 + </option>
1612 1706 <?php endforeach; ?>
1707 + <option value="__custom__" <?php selected($role_select_value, '__custom__'); ?>><?php esc_html_e('Custom…', 'mxchat'); ?></option>
1613 1708 </select>
1709 + </div>
1710 + <div class="mxch-field mxch-rate-limit-custom-field" data-mxch-custom-for="<?php echo esc_attr($custom_field_id); ?>" <?php echo $role_select_value === '__custom__' ? '' : 'hidden'; ?>>
1711 + <label class="mxch-field-label" for="<?php echo esc_attr($custom_field_id); ?>"><?php esc_html_e('Custom limit', 'mxchat'); ?></label>
1712 + <input type="number"
1713 + min="1"
1714 + step="1"
1715 + id="<?php echo esc_attr($custom_field_id); ?>"
1716 + name="mxchat_options[rate_limits][<?php echo esc_attr($role_id); ?>][limit_custom]"
1717 + class="mxch-input mxchat-autosave-field mxch-rate-limit-custom-input"
1718 + placeholder="e.g. 250"
1719 + value="<?php echo esc_attr($role_custom_value); ?>" />
1614 1720 </div>
1615 1721 <div class="mxch-field">
1616 1722 <label class="mxch-field-label" for="rate_limits_<?php echo esc_attr($role_id); ?>_timeframe"><?php esc_html_e('Timeframe', 'mxchat'); ?></label>
1617 1723 <select id="rate_limits_<?php echo esc_attr($role_id); ?>_timeframe"