=== Nutaan Live Chat Widget ===
Contributors: nutaanai
Tags: chatbot, widget, nutaan, chat, customer support
Requires at least: 5.0
Tested up to: 6.9
Requires PHP: 7.2
Stable tag: 1.0.8
License: GPLv2 or later
License URI: https://www.gnu.org/licenses/gpl-2.0.html

Easily integrate Nutaan chatbot widget into your WordPress site with custom API credentials.

== Description ==

The Nutaan Chatbot Widget plugin allows you to seamlessly integrate the Nutaan chatbot into your WordPress website. Simply enter your API credentials in the settings page, and the widget will automatically appear on all pages of your site.

= Features =

* Easy configuration through WordPress admin panel
* Secure API key and authorization token management
* Enable/disable widget with one click
* Automatically loads on all pages when enabled
* Clean and lightweight implementation
* No coding required

= How to Use =

1. Install and activate the plugin
2. Go to Settings > Nutaan Chatbot in your WordPress admin panel
3. Enter your Authorization Token and API Key from your Nutaan dashboard
4. Enable the widget
5. Save settings
6. The chatbot will now appear on your site!

== Installation ==

= From WordPress Admin =

1. Go to Plugins > Add New
2. Click "Upload Plugin"
3. Upload the plugin zip file
4. Activate the plugin
5. Go to Settings > Nutaan Chatbot to configure

= Manual Installation =

1. Upload the `nutaan-widget` folder to the `/wp-content/plugins/` directory
2. Activate the plugin through the 'Plugins' menu in WordPress
3. Go to Settings > Nutaan Chatbot to configure

== Frequently Asked Questions ==

= Where do I get my API credentials? =

You can get your Authorization Token and API Key from your Nutaan dashboard at https://nutaan.com

= Will this work with my theme? =

Yes! The plugin uses WordPress hooks and will work with any properly coded WordPress theme.

= Can I disable the widget temporarily? =

Yes, simply uncheck the "Enable Widget" option in the settings page and save.

= Does this plugin slow down my site? =

No, the plugin is lightweight and only loads a single external script in the footer.

== External services ==

This plugin connects to a remote service to load the Nutaan chatbot widget script which is required for the chatbot functionality.

**Why is this service needed?**
This plugin loads a JavaScript widget from the Nutaan CDN (cdn.nutaan.com) to display and operate the chatbot on your website. Without this external script, the chatbot cannot function.

**What data is sent and when?**
- The widget script is loaded from https://cdn.nutaan.com/chatbot-widget.js on every page load when the widget is enabled
- Your configured Authorization Token and API Key are passed to the widget to authenticate with the Nutaan service
- Chat messages and user interactions are transmitted to the Nutaan servers when visitors use the chatbot

**Service provider:** Nutaan
- Website: https://nutaan.com
- Privacy Policy: https://nutaan.com/privacy-policy

== Changelog ==

= 1.0.8 =
* **Removed**: Internal GitHub updater to comply with WordPress.org guidelines
* **Fixed**: PHPCS linting errors in `nutaan-widget.php`
* **Fixed**: Nonce verification and script tag construction issues

= 1.0.6 =
* **SECURITY ENHANCEMENT**: Complete security overhaul to meet WordPress plugin guidelines
* Added nonce verification for CSRF protection on settings form
* Implemented comprehensive input validation with regex patterns for credentials
* Enhanced output escaping throughout the plugin using wp_json_encode() and proper escaping functions
* Added proper capability checks with wp_die() for unauthorized access
* Improved $_GET parameter validation and sanitization
* Added admin notices for missing credentials when widget is enabled
* Enhanced GitHub updater with transient caching (12-hour cache) to reduce API calls
* Added proper error logging for GitHub API failures
* Implemented comprehensive data sanitization for all GitHub API responses
* Added SSL verification for external API requests
* Improved JavaScript security with IIFE pattern and input sanitization
* Added HTML5 pattern validation for credential input fields
* Enhanced privacy documentation in admin settings page
* Added plugin constants for better code organization
* Improved file existence checks before including files
* Better error handling throughout the codebase
* All external links now use rel="noopener noreferrer" for security
* Comprehensive code documentation improvements

= 1.0.5 =
* Version bump for release testing

= 1.0.4 =
* Added quick setup option - paste your complete script tag to auto-extract credentials
* Improved admin settings UI with "OR" divider for manual entry option
* Fixed GitHub Actions release workflow - added directory creation before zip
* Enhanced credential extraction with visual feedback and status messages

= 1.0.3 =
* Minor improvements and bug fixes

= 1.0.0 =
* Initial release
* Basic configuration options
* Authorization token and API key support
* Enable/disable functionality

== Upgrade Notice ==

= 1.0.0 =
Initial release of the Nutaan Chatbot Widget plugin.