Kanom Chatbot for Customer Support & Sales

Changelog

1.9.9

• Added: Bulk delete in the Leads tab. A check-all toggle in the header, a row checkbox on each lead, plus “Delete selected (N)” and “Delete all leads” buttons. The bulk delete uses a single SQL DELETE with placeholders; the delete-all button is double-confirmed because the action is irreversible.

1.9.8

• Fixed: Dashboard master on/off toggle and Support tab “Send to support” button could silently show “Something went wrong” instead of the real failure cause. Three causes addressed: (1) data-on attribute on the toggle button is now parsed as an integer explicitly instead of relying on jQuery’s loose coercion, (2) all AJAX error responses now ship a structured { error: "..." } object instead of bare strings so the JS can read them, and (3) when the nonce has expired (after a long-idle admin tab), the JS surfaces a clear “Session expired — reload the page and try again” message instead of the generic fallback.
• Fixed: Support delivery now also accepts a SaaS response shape with success:true (older endpoints used ok:true). Both work; no change required on the SaaS side.
• Improved: admin-side AJAX failures are logged to the browser console with HTTP status + raw body so misconfigured security plugins / WAFs are debuggable instead of opaque.

1.9.7

• Fixed: wp.org Plugin Check ERRORs cleared. Removed a stowaway .DS_Store, added a project .gitignore, escaped a few admin-side template outputs (Analytics tile badges and period-filter labels), and dropped a suppress_filters=true from the knowledge indexer query so WPML/Polylang can language-scope it.
• Fixed: every WP_DEBUG-gated error_log() call now carries a phpcs:ignore comment so the diagnostic-logging pattern reads cleanly to reviewers. No behavior change — log lines still only appear when WP_DEBUG is on.
• Fixed: documented internal-allowlist phpcs:ignore comments on three Knowledge-table queries that interpolate the table name (TRUNCATE / COUNT / GROUP BY). Table names come from a hard-coded set, never user input.

1.9.6

• Fixed: Proactive trigger never fired. The widget’s config-merge step only copied four whitelisted keys (webhook, branding, style, i18n) and silently dropped the proactive config the PHP side was sending. setupProactive() then read cfg.proactive === undefined and bailed at its early-return guard. Time-on-page, scroll-depth, and exit-intent triggers all affected — none of them actually fired since the feature shipped in 1.6.0. Now passes through.

1.9.5

• Changed: Support tab no longer mentions Telegram delivery (that’s an implementation detail). Added a prominent Documentation link and a required “I checked the documentation first” checkbox — the Send button stays disabled until it’s ticked. Cuts noise on questions already answered in the docs without adding real friction.
• Changed: Design → Powered-by badge. The widget badge is now shown on all plans by default. Paid plans get a checkbox to remove it (Design tab → “Powered-by badge”). Free plans keep the badge — it’s brand attribution and a soft upgrade hook — and the toggle renders disabled with an inline link to upgrade.
• Changed: AI Agent → Live preview heading prefixed with “[Testing]” to make it obvious that section is the real-payload preview (retrieval + cart), not the static system prompt.
• Changed: Analytics → “Potentially unresolved” KPI tile got extra bottom padding so the sub-line + delta badge breathe.

1.9.4

• Changed: wp.org listing rewritten to lead with the lead-generation pitch instead of the generic “customer service, lead generation, and sales” trio. Description, short description, tags, use cases, and feature list all restructured. No code changes. Roadmap pruned: vector retrieval already shipped (1.7.0), removed from “upcoming”.

1.9.3

• Added: explicit copyright + GPL header to the frontend widget script. Calls out that the Kanom and WP Smart Chatbot brand names are trademarks (not GPL’d) so a fork can’t reuse them. Replaces a stale v4.8 marker comment from an earlier rename.

1.9.2

• Changed: free-plan widget badge text simplified to “Powered by WP Kanom Chatbot” (no emphasis). Widget now uses textContent for the badge — XSS-safe by default, regardless of where the string ever comes from.

1.9.1

• Changed: free-plan widget badge updated from “Powered by WP Smart Chatbot” to “Powered by Kanom Chatbot for WordPress” (brand name emphasised). Better attribution + clearer match with the plugin’s wp.org listing.

1.9.0

• Added: Support admin tab with a form to send questions, bug reports, feature requests, or billing issues directly to the Kanom team. Site URL and license key are attached automatically. Submissions land in our Telegram chat; replies come by email. Available to all installs — you don’t need an active license to ask for help.

1.8.3

• Fixed: the Temperature field on Spanish/EU-locale browsers no longer relocalises “0.7” to “0,7” on display. The input is now a plain text field; the sanitizer also normalises comma decimals (paste from a Spanish spreadsheet, mobile keyboard) so the value parses correctly either way. Previous behavior could silently store 0 if a comma made it through the round trip.

1.8.2

• Removed: Model text field from AI Provider → Advanced. It didn’t actually affect chat behavior in either mode — the hosted SaaS picks its own upstream, and BYO mode lets the WP AI Client choose a sensible default per provider. Showing an internal implementation detail (a DeepSeek model name) to customers who can’t influence it was just confusing. Temperature and max-tokens stay; those do work. A proper provider-aware model picker can come back if customers ask.

1.8.1

• Improved: the daily license validation ping now reports this site’s AI routing mode (hosted or BYO + provider). Lets the SaaS show segmentation analytics (“X% of paid sites are on BYO”) and flag churn risk without changing any visitor-facing behavior. The ping itself was already happening daily — this just adds two fields.

1.8.0

• Added: “Powered by WP Kanom Chatbot” attribution under the chat widget on the free plan. A small one-line link, intentionally unobtrusive. Hidden automatically on any paid plan.
• Added: free-plan cap of 5 lead-email notifications per month. Lead capture itself is unchanged — every lead still lands in the Leads tab and in your database. Only the live wp_mail ping is gated. Past the 5th notification, the Leads tab shows “5 emailed / N captured this month” with an upgrade prompt, and the weekly digest surfaces the gap so you don’t miss what you missed. Paid plans email every lead, no cap.

1.7.4

• Changed: “Enable chatbot” master switch moved from Design → Dashboard. Now appears as a prominent on/off banner at the top of the Dashboard with a one-click toggle (no Save needed). Whether the bot is live is the single most important fact about the plugin — it belongs on the page admins land on, not buried in Design.

1.7.3

• Changed: “Usage & Billing” admin tab renamed to “License”. Same page, same URL slug (wpsc-usage), just a clearer label since billing is mostly handled in the Stripe portal anyway. Bookmarks and existing links keep working.

1.7.2

• Added: per-post “Exclude from chatbot knowledge” toggle in the post editor sidebar. Lets admins opt individual pages out of indexing without unpublishing them — useful for splash pages, stale launch announcements, the cart/checkout pages, or anything noisy that’s diluting retrieval. Bulk post-type indexing remains the default; this is fine-grained override on top.
• Fixed: chunker no longer emits useless mini-chunks. Headings and one-liners under 40 characters are now skipped entirely instead of becoming standalone “About Us”-style 15-char chunks that polluted test retrieval results. When a chunk buffer is still tiny and the next paragraph would overflow the soft target, the chunker now merges anyway (up to the 1200-char hard cap) rather than flushing the orphan.
• Improved: Knowledge tab shows a count of currently-excluded posts with a one-click “Review excluded posts” link to the filtered admin list.

1.7.1

• Added: vector retrieval now works in Hosted AI mode too. The plugin POSTs to a new /embed proxy on wpsmartchatbot.com, which calls OpenAI server-side using our key — bundled into your plan, no separate billing. Previously vector retrieval required Bring-your-own-key with an OpenAI or Google account.
• Improved: Knowledge tab status panel now distinguishes between hosted, OpenAI BYO, Google BYO, and Anthropic BYO. Anthropic users get a clear “falls back to keyword retrieval” note.

1.7.0

• Added: optional vector retrieval (embeddings). Toggle on the Knowledge tab. When enabled in BYO mode with OpenAI or Google, each indexed chunk is embedded once and chat queries are matched by cosine similarity instead of keyword match — catches “delivery” ↔ “shipping” and works across languages. Anthropic isn’t supported (no native embedding endpoint as of 2026-05); selecting it leaves you on FULLTEXT keyword search. Falls back automatically when embeddings are off, unavailable, or the API call fails — chats never break because of a vector miss.
• Added: async batched reindex. Replaced the synchronous “process up to 1000 posts in one request” reindex with a JS-driven loop that processes 50 posts per AJAX call until done. Survives any PHP timeout — works on sites with tens of thousands of posts. Status text updates per batch so admins see progress.
• Improved: hours-of-day analytics chart now uses the WP site timezone via wp_timezone() instead of MySQL’s server-local clock. The chart caption shows which timezone is in effect (“Europe/Madrid”, “+05:30”, etc.). DST transitions during the window may shift one hour boundary by 1h — acceptable for a heat-map.

1.6.0

• Added: one-time “Activate Hosted AI” consent button in AI Provider tab. Until you click it, the plugin makes ZERO external HTTP requests — even if a visitor sends a chat. Belt-and-suspenders compliance with wp.org’s “no external calls without explicit user action” policy.
• Added: HTML email digest. The Monday-morning weekly digest now ships as multipart HTML + plain-text fallback. Inline-styled table layout, table-cell bar chart for daily volume, no remote images. Renders cleanly in Gmail, Outlook, Apple Mail.
• Added: WooCommerce status tile + kill switch on the Dashboard. When WC is detected, a tile shows the integration status with a one-click toggle to share or stop sharing cart context with the bot.
• Added: Advanced settings on the AI Provider tab. Model, temperature, and max-tokens are now editable from the admin — previously they were configurable only via direct database edits.
• Improved: Quick Setup checklist on the Dashboard expanded from 2 to 5 progressive steps with state-aware checkmarks (AI agent → Knowledge → Design → Proactive trigger → Analytics review). New admins discover the long tail of features without exploring the menu.
• Improved: Admin tab order rearranged to match the actual setup flow — Dashboard → AI Agent → Knowledge → AI Provider → Design → Analytics → Leads → Chat Logs → Usage → Privacy. Previously Analytics appeared second, before users had anything to analyze.
• Improved: Leads and Chat Logs tabs now use the same 7/30/90/all-time period filter as Analytics, with the single-date input available alongside for ad-hoc lookups. Consistent date filtering across the whole admin.

1.5.1

• Fixed: “Delete chat” and “Delete all chats” now cascade to the leads table — admins reasonably expect deleting a conversation to remove every byte of PII derived from it (GDPR erasure compliance).
• Fixed: proactive trigger no longer auto-opens the widget when bring-your-own-key mode is selected but no provider API key is configured. The visitor used to see “Your X API key is not configured” the moment they typed; now the widget stays closed until the admin fixes the config.
• Fixed: per-page prompt shortcode [kanom_chatbot prompt="..."] now also emits its override when the shortcode renders after wp_footer (late template parts, FSE comment-area blocks, etc.). Previously the override was silently dropped in that edge case.
• Fixed: analytics “potentially unresolved” detection now ships seed phrases for Spanish, French, German, Italian, and Portuguese. Plus a new kanom_unresolved_phrases filter to extend the list. Previously non-English sites reported 0% unresolved regardless of bot performance.
• Fixed: lead-intent threshold lowered for CJK / Arabic / Hangul / Hebrew scripts (6 chars instead of 12) — those scripts pack more meaning per character, so the previous threshold dropped real intents like “退货政策？” as too short.
• Fixed: CSV exports now sanitize cells starting with =, +, -, @, tab, or carriage return so they can’t execute as formulas when an admin opens the file in Excel/Google Sheets.
• Fixed: ternary precedence bug in proactive_message length truncation (functional impact was small but the code was wrong).
• Fixed: analytics cache is now busted when an admin deletes a chat or all chats — previously the Analytics tab kept showing the deleted data for up to 5 minutes.
• Fixed: orphan kanom_paid_license_notice option is now cleaned up on uninstall.
• Removed: dead wp_ajax_kanom_send_message handler — it was registered but never reachable (no client code called it and its nonce was never created). Removed to avoid future foot-guns.
• Improved: AI Agent “Generated System Prompt” preview now shows two panes — the static base prompt AND a live preview that includes site-aware retrieval and WooCommerce cart context for a sample question you can edit. The static-only preview was misleading admins about what the AI actually receives.
• Docs: pruned the Roadmap to remove already-shipped features (lead capture, analytics, WooCommerce, multilingual via filter). Removed CRM-webhook and calendar-booking claims from the use-case section since those aren’t actually shipped. Installation instructions now reference “AI Agent” (the current tab name) instead of the old “Business” tab.

1.5.0

• Added: Analytics admin tab. KPI tiles (conversations / lead conversion / avg messages per chat / potentially-unresolved %), each compared vs. the previous period. Inline SVG charts for daily volume and time-of-day. Top topics + top phrases extracted locally from visitor messages (no LLM cost). Top pages by chat volume. Period selector for last 7/30/90 days.
• Added: Weekly analytics digest. Monday-morning plain-text email to the lead notification address summarizing last week’s chats, leads, top topic, top page, and deltas vs. the prior week. Toggle in AI Agent → Lead capture. Skipped silently when there’s no activity to report.
• Added: 5-minute transient cache on the analytics payload so opening the Analytics tab repeatedly is cheap, and the weekly digest reuses the same code path.

1.4.0

• Added: per-page system prompt override via the shortcode — [kanom_chatbot prompt="On this page, focus on shipping questions"]. Length-capped, tag-stripped, framed as data so visitors can’t prompt-inject through it. Great for landing-page A/B testing.
• Added: WooCommerce cart context. When WC is active and the visitor has items in their cart, the bot’s system prompt automatically gets a CURRENT CART section (names + quantities, no prices). Reads server-side from WC()->cart so page-caching doesn’t leak someone else’s cart.
• Added: proactive trigger in the Design tab. Pick time-on-page (seconds), scroll-depth (%), or exit-intent, plus a greeting message. Fires once per session; suppressed if the visitor has already engaged.
• Added: “Test retrieval” panel in the Knowledge tab. Type a query, see exactly which chunks would be injected and at what relevance score — useful for debugging “why doesn’t the bot find my FAQ?”.

1.3.0

• Added: site-aware answers (RAG). The chatbot now retrieves the most relevant snippets from your real site content — pages, posts, products, or any custom post type — and feeds them to the AI on every chat. New “Knowledge” admin tab with post-type pickers, a reindex button, and live stats. Search uses MySQL FULLTEXT — no external service, no per-query cost, no API key required. New & edited posts are auto-indexed via save_post hooks.
• Reserved an embedding column in the chunks table for a future vector-similarity upgrade — no schema migration will be needed when it ships.

1.2.0

• Added: lead capture. When a visitor shares an email in chat, Kanom now saves a structured lead (email, name, intent, page, transcript) and emails the admin a copy. New “Leads” admin tab lists everything captured with date/email search, transcript view, and CSV export. Enabled by default; toggle in AI Agent → Lead capture.
• Added: schema auto-migrate on update. The plugin now bumps its DB version on update and runs dbDelta automatically, so new tables ship without requiring a deactivate/reactivate cycle.

1.1.0

• Added: optional bring-your-own-key routing via the WordPress AI Client and the new Connectors API (WordPress 7.0). Pick OpenAI, Anthropic, or Google in the new “AI Provider” tab and chat traffic bypasses the hosted proxy and monthly message limits entirely. Hosted AI remains the default.
• Tested against WordPress 7.0.
• Removed “Documentation” and “Support forum” links from the plugin row on the Plugins page; “Visit plugin site” still links to the docs.

1.0.4

• Added a “Check for existing license” button on Usage & Billing. Useful after reinstalling the plugin on a site that already has a license attached on the server.
• Added a “Resend license email” action in the admin notice shown when a paid license is already attached to the site — for admins who lost their original welcome email.
• Disabled the “Re-check now” button when no license key is in the input.

1.0.3

• Added “Visit plugin site”, “Documentation”, and “Support forum” links to the plugin row on the Plugins admin page.

1.0.2

• Fixed: a site with an active paid license could be issued a duplicate free trial after re-installing the plugin. The server now detects existing paid licenses and the plugin shows an admin notice asking the admin to paste their existing license key.

1.0.1

• Expanded the plugin description with use cases and free-plan information.
• Added a Frequently Asked Questions section to the wp.org plugin page.
• Shortened the WP admin menu label to “Kanom Chatbot”.

1.0.0

• Initial release.