PluginProbe
ThinkRank AI SEO – AI SEO Plugin for WordPress: Schema, XML Sitemaps, Meta Tags, Search Console & Local SEO / 2.10.0
ThinkRank AI SEO – AI SEO Plugin for WordPress: Schema, XML Sitemaps, Meta Tags, Search Console & Local SEO v2.10.0
2.10.0 2.9.0 2.8.0 2.7.0 2.6.0 2.5.0 2.4.0 2.3.0 2.2.0 2.1.1 2.1.0 2.0.2 2.0.1 2.0.0 1.32.0 1.31.0 1.30.0 1.29.0 1.28.0 1.27.0 1.26.0 1.25.0 trunk 1.0.0 1.0.1 All 51 releases
thinkrank / includes / admin / class-manager.php

class-manager.php in ThinkRank AI SEO – AI SEO Plugin for WordPress: Schema, XML Sitemaps, Meta Tags, Search Console & Local SEO 2.10.0, at includes/admin/class-manager.php

1,026 lines 37.5 KB
No matching file
Up and down to move Enter to open Esc to close
Raw Download Zip
1 <?php
2
3 /**
4 * Admin Manager Class
5 *
6 * Handles WordPress admin interface integration
7 *
8 * @package ThinkRank\Admin
9 * @since 1.0.0
10 */
11
12 declare(strict_types=1);
13
14 namespace ThinkRank\Admin;
15
16 use ThinkRank\Core\Settings;
17 use ThinkRank\Core\Database;
18 use ThinkRank\Core\Plan_Config;
19 use ThinkRank\Core\Capability_Manager;
20 use ThinkRank\Config\Local_Business_Types_Config;
21 use ThinkRank\Admin\Metabox_Manager;
22 use ThinkRank\Admin\Elementor_Metabox;
23 use ThinkRank\Admin\Oxygen_Metabox;
24 use ThinkRank\Admin\Divi_Metabox;
25 use ThinkRank\Admin\Bricks_Metabox;
26 use ThinkRank\Admin\Beaver_Metabox;
27 use ThinkRank\Admin\Bulk_Action_Manager;
28 use ThinkRank\Admin\Post_List_Filters;
29
30 // Prevent direct access
31 if (!defined('ABSPATH')) {
32 exit;
33 }
34
35 /**
36 * Admin Manager Class
37 *
38 * Single Responsibility: Manage WordPress admin interface
39 *
40 * @since 1.0.0
41 */
42 class Manager {
43
44 /**
45 * Settings instance
46 *
47 * @var Settings
48 */
49 private Settings $settings;
50
51 /**
52 * Database instance
53 *
54 * @var Database
55 */
56 private Database $database;
57
58 /**
59 * Metabox manager instance
60 *
61 * @var Metabox_Manager
62 */
63 private Metabox_Manager $metabox_manager;
64
65 /**
66 * Elementor editor metabox integration instance
67 *
68 * @var Elementor_Metabox
69 */
70 private Elementor_Metabox $elementor_metabox;
71
72 /**
73 * Oxygen / Breakdance editor metabox integration instance
74 *
75 * @var Oxygen_Metabox
76 */
77 private Oxygen_Metabox $oxygen_metabox;
78
79 /**
80 * Divi Visual Builder metabox integration instance
81 *
82 * @var Divi_Metabox
83 */
84 private Divi_Metabox $divi_metabox;
85
86 /**
87 * Bricks builder metabox integration instance
88 *
89 * @var Bricks_Metabox
90 */
91 private Bricks_Metabox $bricks_metabox;
92
93 /**
94 * Beaver Builder metabox integration
95 *
96 * @var Beaver_Metabox
97 */
98 private Beaver_Metabox $beaver_metabox;
99
100 /**
101 * Post list columns instance
102 *
103 * @var Post_List_Columns
104 */
105 private Post_List_Columns $post_list_columns;
106
107 /**
108 * Focus keyword AJAX handler instance
109 *
110 * @var Focus_Keyword_Ajax
111 */
112 private Focus_Keyword_Ajax $focus_keyword_ajax;
113
114 /**
115 * SEO Quick Edit modal AJAX handler instance
116 *
117 * @var Seo_Quick_Edit_Ajax
118 */
119 private Seo_Quick_Edit_Ajax $seo_quick_edit_ajax;
120
121 /**
122 * Bulk action manager instance
123 *
124 * @var Bulk_Action_Manager
125 */
126 private Bulk_Action_Manager $bulk_action_manager;
127
128 /**
129 * Post list filters instance
130 *
131 * @var Post_List_Filters
132 */
133 private Post_List_Filters $post_list_filters;
134
135 /**
136 * Admin pages
137 *
138 * @var array
139 */
140 private array $pages = [];
141
142 /**
143 * Constructor
144 *
145 * @param Settings $settings Settings instance
146 * @param Database $database Database instance
147 */
148 public function __construct(?Settings $settings = null, ?Database $database = null) {
149 $this->settings = $settings ?? Settings::instance();
150 $this->database = $database ?? new Database();
151 $this->metabox_manager = new Metabox_Manager($this->settings);
152 $this->elementor_metabox = new Elementor_Metabox($this->metabox_manager);
153 $this->oxygen_metabox = new Oxygen_Metabox($this->metabox_manager);
154 $this->divi_metabox = new Divi_Metabox($this->metabox_manager);
155 $this->bricks_metabox = new Bricks_Metabox($this->metabox_manager);
156 $this->beaver_metabox = new Beaver_Metabox($this->metabox_manager);
157 $this->post_list_columns = new Post_List_Columns();
158 $this->focus_keyword_ajax = new Focus_Keyword_Ajax();
159 $this->seo_quick_edit_ajax = new Seo_Quick_Edit_Ajax();
160 $this->bulk_action_manager = new Bulk_Action_Manager();
161 $this->post_list_filters = new Post_List_Filters();
162 }
163
164 /**
165 * Initialize admin interface
166 *
167 * @return void
168 */
169 public function init(): void {
170 add_action('admin_menu', [$this, 'add_admin_menu']);
171 add_action('admin_enqueue_scripts', [$this, 'enqueue_admin_scripts']);
172 add_action('admin_init', [$this, 'handle_admin_init']);
173 add_action('admin_notices', [$this, 'show_admin_notices']);
174 add_action('thinkrank_admin_notices', [$this, 'show_admin_notices']);
175 add_action( 'in_admin_header', [ $this, 'remove_admin_notice' ], 99 );
176
177 // AJAX handlers
178 add_action('wp_ajax_thinkrank_dismiss_notice', [$this, 'dismiss_notice']);
179
180 // Initialize metabox manager
181 $this->metabox_manager->init();
182
183 // Initialize Elementor editor integration (hooks no-op without Elementor)
184 $this->elementor_metabox->init();
185
186 // Initialize Oxygen / Breakdance editor integration (hooks gate on the
187 // builder request, so they no-op without Oxygen)
188 $this->oxygen_metabox->init();
189
190 // Initialize Divi Visual Builder integration (hooks gate on the VB
191 // request, so they no-op without Divi)
192 $this->divi_metabox->init();
193
194 // Initialize Bricks builder integration (hooks gate on Bricks' own
195 // builder detector, so they no-op without Bricks)
196 $this->bricks_metabox->init();
197
198 // Initialize Beaver Builder integration (hooks gate on Beaver Builder's
199 // own builder detector, so they no-op without Beaver Builder)
200 $this->beaver_metabox->init();
201
202 // Initialize post list columns
203 $this->post_list_columns->init();
204
205 // Initialize focus keyword AJAX handler
206 $this->focus_keyword_ajax->init();
207
208 // Initialize SEO Quick Edit modal AJAX handler
209 $this->seo_quick_edit_ajax->init();
210
211 // Initialize Bulk Action Manager
212 $this->bulk_action_manager->init();
213
214 // Initialize Post List Filters
215 $this->post_list_filters->init();
216
217 // Initialize Setup Wizard (onboarding) controller
218 (new Setup_Wizard())->init();
219
220 // Initialize the wp-admin Dashboard widget (ThinkRank Website Insights)
221 (new Dashboard_Widget())->init();
222 }
223
224 /**
225 * Add admin menu pages
226 *
227 * @return void
228 */
229 public function add_admin_menu(): void {
230 // Main menu page
231 $this->pages['dashboard'] = add_menu_page(
232 __('ThinkRank', 'thinkrank'),
233 __('ThinkRank', 'thinkrank'),
234 Capability_Manager::ACCESS,
235 'thinkrank',
236 [$this, 'render_dashboard_page'],
237 $this->get_menu_icon(),
238 30
239 );
240
241 // Dashboard submenu (same as main)
242 $this->pages['dashboard_sub'] = add_submenu_page(
243 'thinkrank',
244 __('Dashboard', 'thinkrank'),
245 __('Dashboard', 'thinkrank'),
246 Capability_Manager::ACCESS,
247 'thinkrank',
248 [$this, 'render_dashboard_page']
249 );
250
251 // Essential SEO page (React tabbed interface)
252 $this->pages['essential_seo'] = add_submenu_page(
253 'thinkrank',
254 __('Essential SEO', 'thinkrank'),
255 __('Essential SEO', 'thinkrank'),
256 Capability_Manager::ACCESS,
257 'thinkrank-essential-seo',
258 [$this, 'render_essential_seo_page']
259 );
260
261 // AI Tools page — gated by the AI Tools section capability.
262 $this->pages['ai_tools'] = add_submenu_page(
263 'thinkrank',
264 __('AI Tools', 'thinkrank'),
265 __('AI Tools', 'thinkrank'),
266 'thinkrank_content_tools',
267 'thinkrank-ai-tools',
268 [$this, 'render_ai_tools_page']
269 );
270
271 // Usages page — gated by the Analytics section capability.
272 $this->pages['analytics'] = add_submenu_page(
273 'thinkrank',
274 __('Usages', 'thinkrank'),
275 __('Usages', 'thinkrank'),
276 'thinkrank_analytics',
277 'thinkrank-usages',
278 [$this, 'render_analytics_page']
279 );
280
281 // Settings page — gated by the Settings & API Keys section capability.
282 $this->pages['settings'] = add_submenu_page(
283 'thinkrank',
284 __('Settings', 'thinkrank'),
285 __('Settings', 'thinkrank'),
286 'thinkrank_settings',
287 'thinkrank-settings',
288 [$this, 'render_settings_page']
289 );
290
291 // Two separate screens, one per setting, so each menu item appears
292 // exactly when its own feature is on. They shared a page (and therefore
293 // a menu item) until #228: with one route, turning Import / Export off
294 // still left "Import / Export" in the sidebar whenever Migration Tools
295 // happened to be on, which is the opposite of what the switch promises.
296 //
297 // Capability matches the import/export REST endpoints (`manage_options`)
298 // so the UI and API stay in agreement.
299
300 // ThinkRank's own data, out to a file and back. Off by default.
301 if ((bool) Settings::instance()->get('enable_import_export', false)) {
302 $this->pages['import-export'] = add_submenu_page(
303 'thinkrank',
304 __('Import / Export', 'thinkrank'),
305 __('Import / Export', 'thinkrank'),
306 'manage_options',
307 'thinkrank-import-export',
308 [$this, 'render_import_export_page']
309 );
310 }
311
312 // Importing FROM another SEO plugin. Off by default. Slug kept as
313 // thinkrank-migration so existing links, bookmarks and the docs keep
314 // resolving to the migration screen they always meant.
315 if ((bool) Settings::instance()->get('enable_migration_tools', false)) {
316 $this->pages['migration'] = add_submenu_page(
317 'thinkrank',
318 __('Migration', 'thinkrank'),
319 __('Migration', 'thinkrank'),
320 'manage_options',
321 'thinkrank-migration',
322 [$this, 'render_migration_page']
323 );
324 }
325
326 // Hook for page-specific initialization
327 foreach ($this->pages as $page_hook) {
328 add_action("load-{$page_hook}", [$this, 'load_admin_page']);
329 }
330 }
331
332 /**
333 * Enqueue admin scripts and styles
334 *
335 * APPROACH: Manual enqueuing with disabled webpack code splitting
336 * - All dependencies bundled into main admin.js (677KB)
337 * - Chart.js separated into charts.js (138KB) for performance
338 * - No dynamic chunks - predictable loading order
339 *
340 * @param string $hook_suffix Current admin page hook
341 * @return void
342 */
343 public function enqueue_admin_scripts(string $hook_suffix): void {
344 // Only load on our admin pages
345 if (!in_array($hook_suffix, $this->pages, true)) {
346 return;
347 }
348
349 // Get asset files for cache busting
350 $admin_asset_file = THINKRANK_PLUGIN_DIR . 'assets/admin.asset.php';
351 $admin_asset_data = file_exists($admin_asset_file) ? include $admin_asset_file : [
352 'dependencies' => [],
353 'version' => THINKRANK_VERSION,
354 ];
355
356 // Enqueue the Chart.js bundle on every ThinkRank page: the admin app
357 // is a SPA, so chart pages (Usages, Essential SEO Performance) are
358 // reachable from any other ThinkRank page without a reload.
359 $charts_asset_file = THINKRANK_PLUGIN_DIR . 'assets/charts.asset.php';
360 $should_enqueue_charts = true;
361
362 if ($should_enqueue_charts && file_exists($charts_asset_file)) {
363 $charts_asset_data = include $charts_asset_file;
364 wp_enqueue_script(
365 'thinkrank-charts',
366 THINKRANK_PLUGIN_URL . 'assets/charts.js',
367 $charts_asset_data['dependencies'],
368 $charts_asset_data['version'],
369 true
370 );
371 // Add charts as dependency for admin script to ensure registration before use
372 $admin_dependencies = array_merge($admin_asset_data['dependencies'], ['thinkrank-charts']);
373 } else {
374 // Do not load charts on pages that don't need it
375 $admin_dependencies = $admin_asset_data['dependencies'];
376 }
377
378 wp_enqueue_script(
379 'thinkrank-admin',
380 THINKRANK_PLUGIN_URL . 'assets/admin.js',
381 $admin_dependencies,
382 $admin_asset_data['version'],
383 true
384 );
385
386 // Add defer attribute for better performance
387 wp_script_add_data('thinkrank-admin', 'defer', true);
388
389 // Enqueue admin styles
390 wp_enqueue_style(
391 'thinkrank-admin',
392 THINKRANK_PLUGIN_URL . 'assets/admin.css',
393 ['wp-components'],
394 $admin_asset_data['version']
395 );
396
397 // Enqueue WordPress media library for MediaPicker component
398 wp_enqueue_media();
399
400 // Preload the REST responses every ThinkRank admin page requests on
401 // mount (Site Kit pattern: rest_preload_api_request piped into an
402 // apiFetch preloading middleware) so first paint needs zero
403 // round-trips for them. Only cheap, local settings endpoints belong
404 // here — never Google-backed report data.
405 $preload_paths = apply_filters('thinkrank_apifetch_preload_paths', [
406 '/thinkrank/v1/site-identity/settings',
407 '/thinkrank/v1/site-identity/title/templates',
408 '/thinkrank/v1/site-identity/breadcrumbs/types',
409 ]);
410 $preload_data = array_reduce($preload_paths, 'rest_preload_api_request', []);
411 wp_add_inline_script(
412 'thinkrank-admin',
413 sprintf('window.thinkrankApiPreload = %s;', wp_json_encode((object) $preload_data)),
414 'before'
415 );
416
417 // Site info saved in ThinkRank Site Identity takes precedence over
418 // the WordPress defaults so previews reflect what the user saved.
419 $site_identity_settings = (new \ThinkRank\SEO\Site_Identity_Manager())->get_settings('site');
420
421 // Localize script with data
422 wp_localize_script('thinkrank-admin', 'thinkrankAdmin', [
423 'apiUrl' => rest_url('thinkrank/v1/'),
424 'restNonce' => wp_create_nonce('wp_rest'),
425 'adminNonce' => wp_create_nonce('thinkrank_admin'),
426 'currentUser' => wp_get_current_user()->ID,
427 'displayName' => wp_get_current_user()->display_name,
428 'capabilities' => $this->get_user_capabilities(),
429 'settings' => $this->get_admin_settings(),
430 'i18n' => $this->get_i18n_strings(),
431 'isAdmin' => current_user_can('manage_options'),
432 // One flag per half of the Import / Export page: the "import from
433 // another SEO plugin" section, and ThinkRank's own export/restore.
434 'migrationToolsEnabled' => (bool) $this->settings->get('enable_migration_tools', false),
435 'importExportEnabled' => (bool) $this->settings->get('enable_import_export', false),
436 // Whether any AI provider API key is configured — used to gate
437 // "Generate with AI" buttons in the UI
438 'aiConfigured' => $this->is_ai_configured(),
439 // Plugin version - directly available without API call
440 'version' => THINKRANK_VERSION,
441 // Site information for default values
442 'siteName' => !empty($site_identity_settings['site_name']) ? $site_identity_settings['site_name'] : get_bloginfo('name'),
443 'siteDescription' => !empty($site_identity_settings['site_description']) ? $site_identity_settings['site_description'] : get_bloginfo('description'),
444 'siteUrl' => home_url(),
445 'faviconUrl' => get_site_icon_url(64) ?: '',
446 'adminEmail' => get_option('admin_email'),
447 // Post types for Global SEO navigation
448 'postTypes' => $this->get_public_post_types(),
449 // schema.org LocalBusiness subtypes for the Local SEO control.
450 // Localized rather than mirrored in a JS config: the list runs to
451 // ~150 entries and is also the MCP ability's enum, so a second copy
452 // would be a second thing to keep in step (#623).
453 'localBusinessTypes' => Local_Business_Types_Config::get_options(),
454 // Role Manager: capabilities the current user holds + the
455 // section → capability map, so the SPA can hide sections a role
456 // cannot access. Administrators receive every capability.
457 'caps' => Capability_Manager::user_capabilities(),
458 'sectionCaps' => Capability_Manager::section_map(),
459 'canManageRoles' => Capability_Manager::current_user_can(Capability_Manager::MANAGE_ROLES),
460 // Pro detection flag
461 'isPro' => Plan_Config::is_pro(),
462 // NB: no per-feature capability maps here; each screen reads its
463 // own state over REST, so a localized copy cannot drift from it.
464 // MCP (Model Context Protocol) connection details for the MCP page.
465 'mcp' => $this->get_mcp_globals(),
466 // Google OAuth: JS only ever gets a nonce-signed admin-post URL.
467 // The consent URL, client ID, and scopes are assembled by the proxy,
468 // so no Google app credentials reach the browser or the bundle.
469 'googleOAuth' => [
470 'connectUrl' => \ThinkRank\Integrations\Google_OAuth_Proxy::get_connect_url(),
471 // '' when fine, otherwise why re-authorization is needed:
472 // 'contract' (upgraded off the old token flow) or
473 // 'credentials' (stored tokens no longer decryptable).
474 'reconnectReason' => (string) get_option('thinkrank_google_reconnect_required', ''),
475 ],
476 // Setup Wizard state — the dashboard Quick Access widget surfaces a
477 // "Complete Setup" shortcut while onboarding is unfinished.
478 'setupWizard' => [
479 'completed' => (bool) get_option(Setup_Wizard::OPT_COMPLETED, false),
480 'url' => admin_url('admin.php?page=' . Setup_Wizard::PAGE_SLUG),
481 ],
482 ]);
483
484 }
485
486 /**
487 * Handle admin initialization
488 *
489 * @return void
490 */
491 public function handle_admin_init(): void {
492 // Show welcome screen for new installations (only if no API key configured)
493 if (get_option('thinkrank_show_welcome') && !$this->has_api_key_configured()) {
494 add_action('admin_notices', [$this, 'show_welcome_notice']);
495 }
496
497 // Check for plugin updates
498 $this->check_plugin_updates();
499
500 // One-time: a Key Features value saved while commas were delimiters
501 // becomes one feature per line, so the next regeneration publishes the
502 // bullets the site already had rather than one merged line.
503 \ThinkRank\SEO\LLMs_Txt_Manager::maybe_migrate_legacy_key_features();
504 }
505
506 /**
507 * Load admin page
508 *
509 * @return void
510 */
511 public function load_admin_page(): void {
512 // Add screen options
513 $this->add_screen_options();
514 }
515
516 /**
517 * Render dashboard page
518 *
519 * @return void
520 */
521 public function render_dashboard_page(): void {
522 $this->render_admin_page('dashboard', [
523 'title' => __('ThinkRank Dashboard', 'thinkrank'),
524 'description' => __('AI-powered SEO optimization for WordPress', 'thinkrank'),
525 ]);
526 }
527
528 /**
529 * Render Essential SEO page
530 *
531 * @return void
532 */
533 public function render_essential_seo_page(): void {
534 $this->render_admin_page('essential-seo', [
535 'title' => __('Essential SEO', 'thinkrank'),
536 'description' => __('Configure your site-wide SEO settings with AI-powered optimization', 'thinkrank'),
537 ]);
538 }
539
540 /**
541 * Render AI Tools page
542 *
543 * @return void
544 */
545 public function render_ai_tools_page(): void {
546 $this->render_admin_page('ai-tools', [
547 'title' => __('AI Tools', 'thinkrank'),
548 'description' => __('AI-powered content tools including Content Planner and Metadata Generator', 'thinkrank'),
549 ]);
550 }
551
552 /**
553 * Render settings page
554 *
555 * @return void
556 */
557 public function render_settings_page(): void {
558 $this->render_admin_page('settings', [
559 'title' => __('ThinkRank Settings', 'thinkrank'),
560 'description' => __('Configure your AI SEO settings', 'thinkrank'),
561 ]);
562 }
563
564 /**
565 * Build the MCP connection globals passed to the admin app.
566 *
567 * The MCP page fetches live connection state from the
568 * /thinkrank/v1/mcp/connection route; these globals only carry what the
569 * page needs before that request resolves (endpoint URLs and whether the
570 * bundled Abilities API — the tool catalog — is available).
571 *
572 * @return array<string, mixed>
573 */
574 private function get_mcp_globals(): array {
575 // The tool catalog is the abilities registry; wp_register_ability
576 // comes from the bundled Abilities API under dependencies/. When it's
577 // missing (bundle not built), the MCP server has no tools to serve.
578 $abilities_api_available = function_exists('wp_register_ability');
579
580 return [
581 'abilities_api_available' => $abilities_api_available,
582 'mcp_endpoint' => \ThinkRank\Mcp\Mcp_Pairing::site_endpoint(),
583 'mcp_endpoint_rest' => \ThinkRank\Mcp\Mcp_Pairing::site_endpoint_fallback(),
584 ];
585 }
586
587
588
589 /**
590 * Render usage analytics page
591 *
592 * @return void
593 */
594 public function render_analytics_page(): void {
595 $this->render_admin_page('analytics', [
596 'title' => __('Usage Analytics', 'thinkrank'),
597 'description' => __('Track your AI usage, costs, and plugin performance analytics', 'thinkrank'),
598 ]);
599 }
600
601 /**
602 * Render the Import / Export page (ThinkRank's own data, out and back).
603 *
604 * Defense in depth: the submenu is only registered while the setting is on,
605 * but re-check here so a direct hit on the page URL cannot bypass the gate.
606 * The export REST routes carry their own `manage_options` check, so nothing
607 * is protected by the page alone.
608 *
609 * @return void
610 */
611 public function render_import_export_page(): void {
612 if (!(bool) Settings::instance()->get('enable_import_export', false)) {
613 wp_die(esc_html__('Import / Export is not enabled.', 'thinkrank'));
614 }
615
616 $this->render_admin_page('import-export', [
617 'page_title' => __('Import / Export', 'thinkrank'),
618 ]);
619 }
620
621 /**
622 * Render the Migration page (import SEO data from another plugin).
623 *
624 * Same defense in depth as above, against its own setting.
625 *
626 * @return void
627 */
628 public function render_migration_page(): void {
629 if (!(bool) Settings::instance()->get('enable_migration_tools', false)) {
630 wp_die(esc_html__('The Migration tools are not enabled.', 'thinkrank'));
631 }
632
633 $this->render_admin_page('migration', [
634 'page_title' => __('Migration', 'thinkrank'),
635 ]);
636 }
637
638 /**
639 * Render admin page template
640 *
641 * @param string $page Page identifier
642 * @param array $data Page data
643 * @return void
644 */
645 private function render_admin_page(string $page, array $data): void {
646 ?>
647 <div class="wrap">
648 <div id="thinkrank-<?php echo esc_attr($page); ?>" class="thinkrank-admin-page"></div>
649 </div>
650 <?php
651 }
652
653 /**
654 * Add meta boxes to post edit screens
655 *
656 * @return void
657 */
658 public function add_meta_boxes(): void {
659 $post_types = get_post_types(['public' => true]);
660
661 foreach ($post_types as $post_type) {
662 add_meta_box(
663 'thinkrank-seo',
664 __('ThinkRank SEO', 'thinkrank'),
665 [$this, 'render_seo_meta_box'],
666 $post_type,
667 'normal',
668 'high'
669 );
670 }
671 }
672
673 /**
674 * Render SEO meta box
675 *
676 * @param \WP_Post $post Current post object
677 * @return void
678 */
679 public function render_seo_meta_box(\WP_Post $post): void {
680 wp_nonce_field('thinkrank_meta_box', 'thinkrank_meta_box_nonce');
681
682 echo '<div id="thinkrank-meta-box" data-post-id="' . esc_attr($post->ID) . '">';
683 echo '</div>';
684 }
685
686 /**
687 * Save meta box data
688 *
689 * @param int $post_id Post ID
690 * @return void
691 */
692 public function save_meta_boxes(int $post_id): void {
693 // Verify nonce
694 if (!isset($_POST['thinkrank_meta_box_nonce'])) {
695 return;
696 }
697
698 $nonce = sanitize_text_field(wp_unslash($_POST['thinkrank_meta_box_nonce']));
699 if (!wp_verify_nonce($nonce, 'thinkrank_meta_box')) {
700 return;
701 }
702
703 // Check permissions
704 if (!current_user_can('edit_post', $post_id)) {
705 return;
706 }
707
708 // Save meta data (handled by AJAX in React components)
709 // Pass only sanitized ThinkRank-related fields to action hook
710 $sanitized_data = [];
711 // phpcs:ignore WordPress.Security.NonceVerification.Missing -- Nonce verified above
712 foreach ($_POST as $key => $value) {
713 if (strpos($key, 'thinkrank_') === 0 || strpos($key, '_thinkrank_') === 0) {
714 $sanitized_data[$key] = is_array($value)
715 ? array_map('sanitize_text_field', wp_unslash($value))
716 : sanitize_text_field(wp_unslash($value));
717 }
718 }
719 do_action('thinkrank_save_post_meta', $post_id, $sanitized_data);
720 }
721
722 /**
723 * Show admin notices
724 *
725 * @return void
726 */
727 public function show_admin_notices(): void {
728 // Implementation will be added in next iteration
729 }
730
731 /**
732 * Show welcome notice
733 *
734 * @return void
735 */
736 public function show_welcome_notice(): void {
737 wp_enqueue_style(
738 'thinkrank-admin-notices',
739 THINKRANK_PLUGIN_URL . 'static/css/admin-notices.css',
740 [],
741 THINKRANK_VERSION
742 );
743 ?>
744 <div class="notice notice-success is-dismissible thinkrank-notice thinkrank-welcome-notice">
745 <div class="thinkrank-notice__inner">
746 <div class="thinkrank-notice__body">
747 <p class="thinkrank-notice__title"><?php esc_html_e('Welcome to ThinkRank!', 'thinkrank'); ?></p>
748 <p class="thinkrank-notice__text"><?php esc_html_e('Thanks for installing ThinkRank. Add an AI provider key to unlock automatic titles, descriptions, and SEO scoring.', 'thinkrank'); ?></p>
749 <p class="thinkrank-notice__actions">
750 <a href="<?php echo esc_url(admin_url('admin.php?page=thinkrank-settings')); ?>" class="button button-primary">
751 <?php esc_html_e('Configure Settings', 'thinkrank'); ?>
752 </a>
753 <a href="#" class="thinkrank-notice__dismiss thinkrank-dismiss-welcome" data-nonce="<?php echo esc_attr(wp_create_nonce('thinkrank_admin')); ?>">
754 <?php esc_html_e('Dismiss', 'thinkrank'); ?>
755 </a>
756 </p>
757 </div>
758 </div>
759 </div>
760 <?php
761 // The notice renders on every admin screen, so the dismiss handler must
762 // ship with it — the thinkrank-admin bundle only loads on ThinkRank pages.
763 // Persist the dismissal for both our "Dismiss" link and core's × button.
764 wp_print_inline_script_tag(
765 '( function () {
766 document.addEventListener( "click", function ( event ) {
767 var notice = event.target.closest( ".thinkrank-welcome-notice" );
768 if ( ! notice ) {
769 return;
770 }
771 var link = event.target.closest( ".thinkrank-dismiss-welcome" );
772 if ( ! link && ! event.target.closest( ".notice-dismiss" ) ) {
773 return;
774 }
775 if ( link ) {
776 event.preventDefault();
777 notice.style.display = "none";
778 }
779 window.fetch( window.ajaxurl, {
780 method: "POST",
781 credentials: "same-origin",
782 body: new URLSearchParams( {
783 action: "thinkrank_dismiss_notice",
784 notice_type: "welcome",
785 nonce: notice.querySelector( ".thinkrank-dismiss-welcome" ).dataset.nonce,
786 } ),
787 } );
788 } );
789 } )();'
790 );
791 }
792
793 /**
794 * Dismiss notice via AJAX
795 *
796 * @return void
797 */
798 public function dismiss_notice(): void {
799 check_ajax_referer('thinkrank_admin', 'nonce');
800
801 // The nonce proves intent, not authorization — dismissing a site-wide
802 // notice deletes an option, so require a capability as well.
803 if (!current_user_can('edit_posts')) {
804 wp_die(-1, 403);
805 }
806
807 $notice_type = sanitize_key($_POST['notice_type'] ?? '');
808
809 if ($notice_type === 'welcome') {
810 delete_option('thinkrank_show_welcome');
811 }
812
813 wp_die();
814 }
815
816 /**
817 * Check if the selected AI provider is configured
818 *
819 * @return bool True when the chosen provider has what it needs to run
820 */
821 private function has_api_key_configured(): bool {
822 return \ThinkRank\Core\Settings::instance()->has_ai_provider_configured();
823 }
824
825 /**
826 * Get menu icon
827 *
828 * @return string Menu icon
829 */
830 private function get_menu_icon(): string {
831 // phpcs:ignore WordPress.PHP.DiscouragedPHPFunctions.obfuscation_base64_encode -- a data: URI for the menu icon must be base64.
832 return 'data:image/svg+xml;base64,' . base64_encode(
833 '<svg width="20" height="20" viewBox="0 0 20 20" fill="none" xmlns="http://www.w3.org/2000/svg">
834 <g clipPath="url(#thinkrank-clip)">
835 <g filter="url(#thinkrank-shadow)">
836 <circle cx="14" cy="9.2" r="1.3" fill="#a7aaad"/>
837 </g>
838 <path d="M19.5 7v5.3c0 2.4 0 3.6-.5 4.5-.4.8-1 1.4-1.8 1.8-.9.5-2.1.5-4.5.5H7.3c-2.4 0-3.6 0-4.5-.5-.8-.4-1.4-1-1.8-1.8-.2-.3-.3-.7-.4-1.1.5-.4.9-.6 1.3-.7.5-.2.9-.2 1.4-.2.7.1 1.3.2 2 .3.7.1 1.4.2 2.1.1 1.5-.3 2.5-1 3.4-2 .5-.5.9-1 1.4-1.5.3-.3.6-.7.9-1 .3.1.6.2.9.2.9 0 1.7-.8 1.7-1.7 0-.2 0-.4-.1-.6.7-.4 1.4-.8 2.1-1.1.6-.3 1.2-.6 1.6-.8v.4zM12.5 0c2.4 0 3.6 0 4.5.5.8.4 1.4 1 1.8 1.8.4.7.5 1.6.5 3.1-.1 0-.2.1-.3.1-.5.2-1.1.5-1.8.8-.7.3-1.5.7-2.2 1.1-.3-.3-.7-.4-1.1-.4-.9 0-1.7.8-1.7 1.7 0 .3.1.6.3.9-.3.4-.6.7-.9 1-.5.6-.9 1.1-1.3 1.5-.9.9-1.8 1.5-3 1.7-.6.1-1.2.1-1.8 0-.6-.1-1.3-.3-2-.4-.6-.1-1.2-.1-1.8.1-.3.1-.7.3-1 .5 0-.6 0-1.4 0-2.3V7c0-2.4 0-3.6.5-4.5.4-.8 1-1.4 1.8-1.8C3.9 0 5.1 0 7.5 0h5zm-5.8 8.2c0-.1-.1-.1-.2 0l-.2.9c0 0 0 .1-.1.1l-.9.2c-.1 0-.1.1 0 .1l.9.2c0 0 .1 0 .1.1l.2.9c0 .1.1.1.2 0l.2-.9c0 0 0-.1.1-.1l.9-.2c.1 0 .1-.1 0-.1l-.9-.2c0 0-.1 0-.1-.1l-.2-.9zm8.8-.4c0 .1 0 .2 0 .3 0 .7-.6 1.3-1.3 1.3-.2 0-.4 0-.5-.1.1-.1.2-.2.3-.3.4-.4.9-.8 1.5-1.2zm-1.3-1c.3 0 .5.1.7.2-.6.4-1.1.8-1.5 1.2l-.1.1c-.1.1-.2.2-.3.3-.1-.2-.1-.4-.1-.6 0-.7.6-1.2 1.3-1.2zM8.6 2.5c-.1-.2-.4-.2-.4 0l-.4 1.4c0 .1-.1.1-.1.1L6.2 4.4c-.2.1-.2.4 0 .4l1.4.4c.1 0 .1.1.1.1l.4 1.4c.1.2.4.2.4 0l.4-1.4c0-.1.1-.1.1-.1l1.4-.4c.2-.1.2-.4 0-.4L8.9 4c-.1 0-.1-.1-.1-.1L8.6 2.5z" fill="#a7aaad"/>
839 </g>
840 <defs>
841 <filter id="thinkrank-shadow" x="11.2" y="7.2" width="5.6" height="5.6" filterUnits="userSpaceOnUse" colorInterpolationFilters="sRGB">
842 <feFlood floodOpacity="0" result="BackgroundImageFix"/>
843 <feColorMatrix in="SourceAlpha" type="matrix" values="0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 127 0" result="hardAlpha"/>
844 <feOffset dy="0.7"/>
845 <feGaussianBlur stdDeviation="0.7"/>
846 <feComposite in2="hardAlpha" operator="out"/>
847 <feColorMatrix type="matrix" values="0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0.15 0"/>
848 <feBlend mode="normal" in2="BackgroundImageFix" result="effect1_dropShadow"/>
849 <feBlend mode="normal" in="SourceGraphic" in2="effect1_dropShadow" result="shape"/>
850 </filter>
851 <clipPath id="thinkrank-clip">
852 <rect width="20" height="20" rx="5.5" fill="white"/>
853 </clipPath>
854 </defs>
855 </svg>'
856 );
857 }
858
859 /**
860 * Get user capabilities for current user
861 *
862 * @return array User capabilities
863 */
864 private function get_user_capabilities(): array {
865 return [
866 'manage_settings' => current_user_can('manage_options'),
867 'view_analytics' => current_user_can('edit_posts'),
868
869 'use_ai_features' => current_user_can('edit_posts'),
870 ];
871 }
872
873 /**
874 * Get admin settings for JavaScript
875 *
876 * @return array Admin settings
877 */
878 private function get_admin_settings(): array {
879 return [
880
881 'ai_provider' => $this->settings->get('ai_provider', Settings::AI_PROVIDER_NONE),
882 'cache_duration' => $this->settings->get('cache_duration', 3600),
883 ];
884 }
885
886 /**
887 * Whether the selected AI provider is configured
888 *
889 * Same answer as ThinkRank\AI\Manager — both read
890 * Settings::has_ai_provider_configured().
891 *
892 * @return bool
893 */
894 private function is_ai_configured(): bool {
895 return $this->settings->has_ai_provider_configured();
896 }
897
898 /**
899 * Get internationalization strings
900 *
901 * @return array I18n strings
902 */
903 private function get_i18n_strings(): array {
904 return [
905 'loading' => __('Loading...', 'thinkrank'),
906 'error' => __('An error occurred', 'thinkrank'),
907 'success' => __('Success!', 'thinkrank'),
908 'confirm' => __('Are you sure?', 'thinkrank'),
909 'cancel' => __('Cancel', 'thinkrank'),
910 'save' => __('Save', 'thinkrank'),
911 ];
912 }
913
914 /**
915 * Get all public post types for SEO configuration
916 *
917 * @return array Post types data
918 */
919 private function get_public_post_types(): array {
920 // Get all public post types (both built-in and custom)
921 $post_types = get_post_types([
922 'public' => true
923 ], 'objects');
924
925 $post_types_data = [];
926
927 foreach ($post_types as $post_type) {
928 // Shared eligibility policy (viewable + deny list) so the UI list and
929 // the REST/ability write paths agree on which types are SEO targets.
930 if (!\ThinkRank\SEO\Global_SEO_Post_Types::is_allowed($post_type)) {
931 continue;
932 }
933
934 $post_types_data[] = [
935 'name' => $post_type->name,
936 'slug' => $post_type->name,
937 'label' => $post_type->label,
938 'singular_name' => $post_type->labels->singular_name ?? $post_type->label,
939 'plural_name' => $post_type->label,
940 'public' => $post_type->public,
941 'has_archive' => $post_type->has_archive,
942 'hierarchical' => $post_type->hierarchical,
943 ];
944 }
945
946 return $post_types_data;
947 }
948
949 /**
950 * Add help tabs
951 *
952 * @return void
953 */
954 private function add_help_tabs(): void {
955 $screen = get_current_screen();
956
957 $screen->add_help_tab([
958 'id' => 'thinkrank-overview',
959 'title' => __('Overview', 'thinkrank'),
960 'content' => '<p>' . __('ThinkRank.ai helps you optimize your content with AI-powered SEO suggestions.', 'thinkrank') . '</p>',
961 ]);
962
963 $screen->set_help_sidebar(
964 '<p><strong>' . __('For more information:', 'thinkrank') . '</strong></p>' .
965 '<p><a href="https://thinkrank.ai/docs" target="_blank">' . __('Documentation', 'thinkrank') . '</a></p>' .
966 '<p><a href="https://wpdeveloper.com/support/new-ticket/" target="_blank">' . __('Support', 'thinkrank') . '</a></p>'
967 );
968 }
969
970 /**
971 * Add screen options
972 *
973 * @return void
974 */
975 private function add_screen_options(): void {
976 // Screen options will be added as needed
977 }
978
979 /**
980 * Check for plugin updates
981 *
982 * @return void
983 */
984 private function check_plugin_updates(): void {
985 $current_version = get_option('thinkrank_version');
986
987 if (false === $current_version) {
988 // Fresh install or missing option — record version without firing the update hook.
989 update_option('thinkrank_version', THINKRANK_VERSION);
990 return;
991 }
992
993 if (version_compare($current_version, THINKRANK_VERSION, '<')) {
994 // Handle plugin update
995 do_action('thinkrank_plugin_updated', $current_version, THINKRANK_VERSION);
996 update_option('thinkrank_version', THINKRANK_VERSION);
997 }
998 }
999
1000
1001 public function remove_admin_notice() {
1002 $current_screen = get_current_screen();
1003 if ( in_array( $current_screen->id, [
1004 'toplevel_page_thinkrank',
1005 'thinkrank_page_thinkrank-essential-seo',
1006 'thinkrank_page_thinkrank-ai-tools',
1007 'thinkrank_page_thinkrank-settings',
1008 'thinkrank_page_thinkrank-usages',
1009 'thinkrank_page_thinkrank-license',
1010 'thinkrank_page_thinkrank-import-export',
1011 'thinkrank_page_thinkrank-migration'
1012 ] , true) ) {
1013
1014 remove_all_actions( 'user_admin_notices' );
1015 remove_all_actions( 'admin_notices' );
1016 remove_all_actions( 'all_admin_notices' );
1017 remove_all_actions( 'network_admin_notices' );
1018
1019 // To showing notice in EA settings page we have to use 'eael_admin_notices' action hook
1020 add_action( 'admin_notices', function () {
1021 do_action( 'thinkrank_admin_notices' );
1022 } );
1023 }
1024 }
1025 }
1026