Changeset 3558865

Timestamp:

06/03/2026 06:37:16 AM (5 months ago)

Author:

akukitadvt

Message:

v1.2.0 — Guest chat, setup wizard, deactivation feedback, accessibility and bug fixes

Location:

akukita-chat-with-ai-translation/trunk

Files:

• akukita-chat.php (modified) (10 diffs)
• assets/css/chat.css (modified) (7 diffs)
• assets/js/chat.js (modified) (11 diffs)
• assets/js/guest.js (modified) (4 diffs)
• includes/class-admin.php (modified) (2 diffs)
• includes/class-database.php (modified) (2 diffs)
• includes/class-deactivation-feedback.php (added)
• includes/class-guest.php (modified) (1 diff)
• includes/class-rest-api.php (modified) (11 diffs)
• includes/class-setup-wizard.php (added)
• includes/class-shortcode.php (modified) (3 diffs)
• readme.txt (modified) (8 diffs)
• templates/admin-settings.php (modified) (1 diff)
• templates/chat-widget.php (modified) (2 diffs)
• templates/register-modal.php (modified) (1 diff)
• templates/setup-wizard.php (added)
• uninstall.php (modified) (3 diffs)

akukita-chat-with-ai-translation/trunk/akukita-chat.php

@@ -10 +10 @@
  * @wordpress-plugin
  * Plugin Name:       Akukita Chat with AI Translation
- * Plugin URI:        https://akukita.es/plugins/akukita-chat/
+ * Plugin URI:        https://akukita.es/wordpress-plugins/akukita-chat-with-ai-translation/
  * Description:       Real-time multilingual chat where every message is automatically translated into each user's preferred language. Supports MyMemory (free), DeepL, and OpenAI.
- * Version:           1.1.2
+ * Version:           1.2.0
  * Requires at least: 6.0
  * Requires PHP:      7.4
@@ -28 +28 @@
 
 // Plugin constants.
-define( 'AKCH_VERSION',     '1.1.2' );
+define( 'AKCH_VERSION',     '1.2.0' );
 define( 'AKCH_PLUGIN_DIR',  plugin_dir_path( __FILE__ ) );
 define( 'AKCH_PLUGIN_URL',  plugin_dir_url( __FILE__ ) );
@@ -46 +46 @@
         'guest',
         'freemium',
-        'review-notice'
+        'review-notice',
+        'setup-wizard',
+        'deactivation-feedback'
 );
 foreach ( $akch_modules as $akch_module ) {
@@ -133 +135 @@
                 AKCH_Admin::init();
                 AKCH_Review_Notice::init();
+                AKCH_Setup_Wizard::init();
+                if ( is_admin() ) {
+                        AKCH_Deactivation_Feedback::init();
+                }
         }
 
         /**
          * Enqueue front-end CSS and JS.
-         * JS is only loaded for logged-in users — guests see a self-contained register modal.
+         * In 'account' mode, non-logged-in visitors see a register modal.
+         * In 'guest' or 'registered' mode, the full chat is loaded and the
+         * visitor can participate as a guest with just a display name.
          *
          * @return void
@@ -151 +159 @@
                 );
 
-                // Registration modal data — passed via wp_add_inline_script so no inline <script> tag
-                // is needed in the template. PHP values (nonce, AJAX URL, i18n) are injected here.
-                if ( ! is_user_logged_in() ) {
+                // Account mode (legacy): non-logged-in visitors see the register modal.
+                if ( ! is_user_logged_in() && ! AKCH_Guest::guests_allowed() ) {
                         $akch_reg_data = array(
                                 'ajaxUrl'  => admin_url( 'admin-ajax.php' ),
@@ -177 +184 @@
                 }
 
+                // Logged-in users AND guests (when guest mode is on) get the full chat.
                 wp_enqueue_style(
                         'akch-chat',
@@ -197 +205 @@
         /**
          * Output akchData as an inline <script> in <head>.
-         * Only for logged-in users — non-logged-in users see the registration modal.
+         * Runs for logged-in users always, and for guests when guest mode is on.
+         * In account mode, non-logged-in visitors bail out (they see the modal).
          *
          * @return void
          */
         public function inline_data() {
-                if ( ! is_user_logged_in() ) {
+                $logged_in = is_user_logged_in();
+
+                // Bail only in account mode for non-logged-in visitors (register modal).
+                if ( ! $logged_in && ! AKCH_Guest::guests_allowed() ) {
                         return;
                 }
 
-                $user      = wp_get_current_user();
-                $user_lang = get_user_meta( $user->ID, 'akch_preferred_language', true );
-                if ( ! $user_lang ) {
-                        $user_lang = 'en';
+                if ( $logged_in ) {
+                        $user      = wp_get_current_user();
+                        $user_id   = $user->ID;
+                        $user_name = $user->display_name;
+                        $user_lang = get_user_meta( $user->ID, 'akch_preferred_language', true );
+                        if ( ! $user_lang ) {
+                                $user_lang = get_option( 'akch_default_language', 'en' );
+                        }
+                        $is_guest  = false;
+                        $is_admin  = current_user_can( 'manage_options' );
+                } else {
+                        $user_id   = AKCH_Guest::current_id();
+                        $user_name = AKCH_Guest::current_name();
+                        $user_lang = AKCH_Guest::current_lang();
+                        $is_guest  = true;
+                        $is_admin  = false;
                 }
 
@@ -217 +241 @@
                         'nonce'        => wp_create_nonce( 'akch_nonce' ),
                         'restNonce'    => wp_create_nonce( 'wp_rest' ),
-                        'userId'       => $user->ID,
-                        'userName'     => $user->display_name,
+                        'userId'       => $user_id,
+                        'userName'     => $user_name,
                         'userLang'     => $user_lang,
-                        'isGuest'      => false,
-                        'isRegistered' => true,
-                        'isAdmin'      => current_user_can( 'manage_options' ),
+                        'isGuest'      => $is_guest,
+                        'needsName'    => ( $is_guest && '' === trim( (string) $user_name ) ),
+                        'isRegistered' => ! $is_guest,
+                        'isAdmin'      => $is_admin,
                         'pollInterval' => 3000,
                         'i18n'         => self::get_i18n( $user_lang ),
@@ -253 +278 @@
                 $base = array(
                         'connecting'     => __( 'Connecting…', 'akukita-chat-with-ai-translation' ),
+                        'welcome'        => __( 'Welcome to the Chat', 'akukita-chat-with-ai-translation' ),
+                        'welcomeSub'     => __( 'Messages are translated automatically for everyone.', 'akukita-chat-with-ai-translation' ),
+                        'yourName'       => __( 'Your name', 'akukita-chat-with-ai-translation' ),
+                        'yourLang'       => __( 'Your language', 'akukita-chat-with-ai-translation' ),
+                        'enterChat'      => __( 'Enter Chat', 'akukita-chat-with-ai-translation' ),
+                        'nameTooShort'   => __( 'Name must be at least 2 characters.', 'akukita-chat-with-ai-translation' ),
                         'translating'    => __( 'Translating…', 'akukita-chat-with-ai-translation' ),
                         'you'            => __( 'You', 'akukita-chat-with-ai-translation' ),
@@ -356 +387 @@
 
 // Activation / deactivation hooks must be registered at file scope, not inside a class constructor.
-register_activation_hook( __FILE__, array( 'AKCH_Database', 'install' ) );
+register_activation_hook( __FILE__, 'akch_on_activate' );
 register_deactivation_hook( __FILE__, array( 'Akukita_Chat', 'deactivate_plugin' ) );
 
+/**
+ * Activation callback: install tables and flag the one-time setup redirect.
+ *
+ * @return void
+ */
+function akch_on_activate() {
+        AKCH_Database::install();
+        if ( class_exists( 'AKCH_Setup_Wizard' ) ) {
+                AKCH_Setup_Wizard::on_activation();
+        }
+}
+
+/**
+ * Add a "Settings" link on the Plugins list row for this plugin.
+ *
+ * @param string[] $links Existing action links.
+ * @return string[]
+ */
+function akch_plugin_action_links( $links ) {
+        $settings = '<a href="' . esc_url( admin_url( 'admin.php?page=akukita-chat-with-ai-translation' ) ) . '">'
+                . esc_html__( 'Settings', 'akukita-chat-with-ai-translation' ) . '</a>';
+        array_unshift( $links, $settings );
+        return $links;
+}
+add_filter( 'plugin_action_links_' . plugin_basename( __FILE__ ), 'akch_plugin_action_links' );
+
 Akukita_Chat::get_instance();

akukita-chat-with-ai-translation/trunk/assets/css/chat.css

@@ -119 +119 @@
 .akch-select {
     width: 100%;
-    background: var(--akch-surface-2);
+    background: #ffffff;
     border: 1px solid var(--akch-border);
-    color: var(--akch-text);
+    color: #1a1a1a;
     border-radius: var(--akch-radius-sm);
     padding: 6px 10px;
@@ -129 +129 @@
     outline: none;
     transition: border-color var(--akch-transition);
-}
-.akch-select:focus { border-color: var(--akch-accent); }
+    -webkit-appearance: menulist;
+            appearance: menulist;
+}
+.akch-select:focus {
+    border-color: var(--akch-accent);
+}
+/* Force readable colours in the dropdown across OS themes.
+   Without this, native browser themes (especially dark mode on macOS / Linux)
+   render options with white-on-white or black-on-black combinations. */
+.akch-select option {
+    background-color: #ffffff;
+    color: #1a1a1a;
+}
 
 /* ── Room List ── */
@@ -509 +520 @@
 .akch-message-input {
     flex: 1;
-    background: var(--akch-surface-2);
+    background: #ffffff;
     border: 1px solid var(--akch-border);
     border-radius: var(--akch-radius);
     padding: 10px 14px;
-    color: var(--akch-text);
+    color: #1a1a1a;
     font-family: var(--akch-font);
     font-size: 14px;
@@ -528 +539 @@
     box-shadow: 0 0 0 3px rgba(79,110,247,0.15);
 }
-.akch-message-input::placeholder { color: var(--akch-muted); }
+/* Placeholder needs an explicit grey — using var(--akch-muted) here would
+   render almost invisible on the new white background. */
+.akch-message-input::placeholder { color: #8c8c95; opacity: 1; }
+.akch-message-input::-webkit-input-placeholder { color: #8c8c95; opacity: 1; }
+.akch-message-input::-moz-placeholder { color: #8c8c95; opacity: 1; }
 .akch-message-input:disabled { opacity: 0.5; cursor: not-allowed; }
 
@@ -656 +671 @@
 .akch-input {
     width: 100%;
-    background: var(--akch-bg);
+    background: #ffffff;
     border: 1px solid var(--akch-border);
     border-radius: var(--akch-radius-sm);
     padding: 9px 12px;
-    color: var(--akch-text);
+    color: #1a1a1a;
     font-family: var(--akch-font);
     font-size: 14px;
@@ -667 +682 @@
 }
 .akch-input:focus { border-color: var(--akch-accent); }
+.akch-input::placeholder { color: #8c8c95; opacity: 1; }
 
 .akch-modal-actions {
@@ -1007 +1023 @@
     .akch-auth-card { padding: 28px 20px; }
 }
+
+/* ── Guest name gate (guest mode) ─────────────────────────────────────────────
+   Rendered as a full-viewport fixed overlay so it always appears, regardless
+   of how the host theme styles or positions the shortcode container. Themes
+   like Divi often wrap shortcodes in elements with overflow:hidden, transform,
+   or filter, all of which break position:absolute children. Using fixed +
+   !important on the layout properties + id selector for higher specificity
+   defeats those conflicts.
+*/
+#akch-guest-gate.akch-guest-gate{
+    position:fixed !important;
+    top:0 !important; right:0 !important; bottom:0 !important; left:0 !important;
+    width:100vw !important;
+    height:100vh !important;
+    z-index:999999 !important;
+    display:flex !important;
+    align-items:center !important;
+    justify-content:center !important;
+    background:rgba(15,17,23,.78) !important;
+    backdrop-filter:blur(4px);
+    -webkit-backdrop-filter:blur(4px);
+    margin:0 !important;
+    padding:16px !important;
+    box-sizing:border-box !important;
+}
+.akch-guest-gate-card{
+    background:#ffffff !important;
+    color:#1a1a1a !important;
+    border:1px solid #e2e2e7 !important;
+    border-radius:14px !important;
+    padding:26px 28px !important;
+    max-width:360px !important;
+    width:90% !important;
+    box-shadow:0 12px 40px rgba(0,0,0,.35) !important;
+    text-align:left !important;
+    font-family:-apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, sans-serif !important;
+}
+.akch-guest-gate-card h3{margin:0 0 6px !important;font-size:18px !important;color:#1a1a1a !important;}
+.akch-guest-gate-card p{margin:0 0 16px !important;color:#646970 !important;font-size:13px !important;}
+.akch-guest-gate-card label{
+    display:block !important;font-size:12px !important;font-weight:600 !important;
+    margin:10px 0 4px !important;color:#3c434a !important;
+}
+.akch-guest-gate-card input,
+.akch-guest-gate-card select{
+    width:100% !important;padding:9px 11px !important;border:1px solid #d5d5db !important;
+    border-radius:8px !important;font-size:14px !important;box-sizing:border-box !important;
+    background:#ffffff !important;color:#1a1a1a !important;
+    -webkit-appearance:menulist !important; appearance:menulist !important;
+    margin:0 !important;
+}
+.akch-guest-gate-card select option{background:#ffffff !important;color:#1a1a1a !important;}
+.akch-guest-enter{
+    margin-top:16px !important;width:100% !important;padding:11px !important;
+    border:0 !important;border-radius:8px !important;cursor:pointer !important;
+    background:linear-gradient(135deg,#4f6ef7,#7c3aed) !important;
+    color:#ffffff !important;font-size:14px !important;font-weight:600 !important;
+}
+.akch-guest-enter:disabled{opacity:.6 !important;cursor:default !important;}
+.akch-guest-gate-err{margin:8px 0 0 !important;font-size:13px !important;color:#d63638 !important;}
+
+/* When the gate is open, prevent the page below from scrolling */
+body.akch-gate-open{overflow:hidden !important;}
+
+/* Shortcode container — keep relative positioning for other in-widget overlays */
+#akch-app{position:relative;}

akukita-chat-with-ai-translation/trunk/assets/js/chat.js

@@ -18 +18 @@
         userId:          parseInt(akchData.userId),
         userName:        akchData.userName,
+        // IDs of messages this client has just sent. Used to ignore them when
+        // the poll returns them before the optimistic temp element has been
+        // updated. Cleared on room change.
+        ownIds:          new Set(),
     };
 
@@ -37 +41 @@
                 headers: this._headers(),
                 credentials: 'same-origin',
-            }).then(r => {
-                if (!r.ok) throw new Error('HTTP ' + r.status);
+            }).then(async r => {
+                if (!r.ok) {
+                    const err = await r.json().catch(() => ({}));
+                    const e   = new Error(err.message || ('HTTP ' + r.status));
+                    e.code    = err.code   || ('http_' + r.status);
+                    e.status  = r.status;
+                    throw e;
+                }
                 return r.json();
             });
@@ -48 +58 @@
                 body:    JSON.stringify(body),
                 credentials: 'same-origin',
-            }).then(r => {
-                if (!r.ok) throw new Error('HTTP ' + r.status);
+            }).then(async r => {
+                if (!r.ok) {
+                    const err = await r.json().catch(() => ({}));
+                    const e   = new Error(err.message || ('HTTP ' + r.status));
+                    e.code    = err.code   || ('http_' + r.status);
+                    e.status  = r.status;
+                    throw e;
+                }
                 return r.json();
             });
@@ -58 +74 @@
                 headers: this._headers(),
                 credentials: 'same-origin',
-            }).then(r => {
-                if (!r.ok) throw new Error('HTTP ' + r.status);
+            }).then(async r => {
+                if (!r.ok) {
+                    const err = await r.json().catch(() => ({}));
+                    const e   = new Error(err.message || ('HTTP ' + r.status));
+                    e.code    = err.code   || ('http_' + r.status);
+                    e.status  = r.status;
+                    throw e;
+                }
                 return r.json();
             });
@@ -131 +153 @@
                     ${senderEl}
                     <span class="akch-message-time">${time}</span>
-                    <span class="akch-message-lang" style="font-size:10px;color:#6b7280;font-family:monospace">${msg.original_lang || ''}</span>
+                    <span class="akch-message-lang" style="font-size:10px;color:#6b7280;font-family:monospace">${escapeHTML(msg.original_lang || '')}</span>
                 </div>
                 <div class="akch-bubble">${displayText}</div>
@@ -154 +176 @@
 
         messages.forEach(msg => {
+            // Skip if the message is already in the DOM (catches the normal
+            // re-render case) or if it's one we just sent ourselves (catches
+            // the race where the poll returns our own message before the
+            // optimistic temp element has had its data-id swapped).
             if (document.querySelector(`.akch-message[data-id="${msg.id}"]`)) return;
+            if (state.ownIds && state.ownIds.has(String(msg.id))) return;
+
             const html = buildMessageHTML(msg);
             if (prepend) {
@@ -240 +268 @@
         state.currentRoomName = roomName;
         state.lastMessageId   = 0;
+        state.ownIds.clear();
 
         // Update UI
@@ -301 +330 @@
 
         try {
+            const hp = document.getElementById('akch-website');
             const saved = await api.post(`rooms/${state.currentRoomId}/messages`, {
                 text: text,
                 lang: state.userLang,
+                website: hp ? hp.value : '',
             });
-            // Replace temp with real
+
+            // Fix for duplicate-on-first-message bug:
+            // 1. Register the real id in ownIds FIRST so any in-flight or
+            //    upcoming poll will skip it in appendMessages.
+            // 2. Bump lastMessageId so subsequent polls don't re-fetch it.
+            // 3. THEN swap the temp data-id for the real one.
+            const realId = parseInt(saved.id);
+            state.ownIds.add(String(realId));
+            if (realId > state.lastMessageId) state.lastMessageId = realId;
+
             const tempEl = document.querySelector(`.akch-message[data-id="${tempId}"]`);
             if (tempEl) tempEl.setAttribute('data-id', saved.id);
-            if (parseInt(saved.id) > state.lastMessageId) state.lastMessageId = parseInt(saved.id);
         } catch (e) {
             console.error('[AKCH] Send error:', e);
+
+            // If the server says the guest hasn't entered a name yet, force
+            // the name gate to appear (this also recovers from cached pages
+            // where akchData.needsName was stale).
+            if (e && (e.code === 'no_name' || e.status === 400)) {
+                const tempEl = document.querySelector(`.akch-message[data-id="${tempId}"]`);
+                if (tempEl) tempEl.remove();
+                input.value = text; // restore the text the user typed
+                if (akchData) akchData.needsName = true;
+                if (typeof showGuestGate === 'function') {
+                    showGuestGate();
+                }
+                state.sending = false;
+                btn.disabled  = false;
+                return;
+            }
+
+            // Other errors: keep the optimistic bubble dimmed and tooltip the message.
             const tempEl = document.querySelector(`.akch-message[data-id="${tempId}"]`);
             if (tempEl) {
                 tempEl.querySelector('.akch-bubble').style.opacity = '0.5';
-                tempEl.querySelector('.akch-bubble').title = 'Failed to send';
+                tempEl.querySelector('.akch-bubble').title = e.message || 'Failed to send';
+            }
+
+            // Surface a toast so the user actually sees why the message failed.
+            if (typeof showToast === 'function') {
+                showToast(e.message || 'Could not send message.');
             }
         } finally {
@@ -541 +603 @@
     // ── Init ──────────────────────────────────────────────────────────────────
     function init() {
+        // Build banner so we can verify in the browser console which version
+        // of the plugin is actually running (helps when troubleshooting cache).
+        console.log('[AKCH] chat.js running — build 1.2.0+guestfix');
+        console.log('[AKCH] akchData on init:', {
+            userId:    akchData && akchData.userId,
+            userName:  akchData && akchData.userName,
+            isGuest:   akchData && akchData.isGuest,
+            needsName: akchData && akchData.needsName,
+        });
+
         // Re-read identity from akchData (set by wp_head inline script)
         state.userId   = (akchData && akchData.userId)   || state.userId   || 0;
@@ -546 +618 @@
         state.userLang = (akchData && akchData.userLang) || 'en';
 
+        // ── Robust "needs name" detection ─────────────────────────────────────
+        // Two checks, because akchData.needsName can be stale on cached HTML:
+        //   1) The server told us so via akchData.needsName.
+        //   2) We're a guest (negative or zero userId) and our cookie that
+        //      stores the chosen name is empty or missing on the client.
+        const cookieName = readCookie('akch_guest_name');
+        const isGuestId  = !(state.userId > 0); // logged-in users have positive ids
+        const needsName  = (akchData && akchData.needsName)
+                        || (isGuestId && (!cookieName || cookieName.length < 2));
+
+        if (needsName) {
+            console.log('[AKCH] Showing guest name gate (server=' +
+                (akchData && akchData.needsName) + ', cookieName="' + cookieName + '")');
+            showGuestGate();
+            return;
+        }
+
+        startChat();
+    }
+
+    // Read a cookie value by name from document.cookie.
+    function readCookie(name) {
+        const parts = document.cookie.split(';');
+        for (let i = 0; i < parts.length; i++) {
+            const trimmed = parts[i].trim();
+            if (trimmed.indexOf(name + '=') === 0) {
+                return decodeURIComponent(trimmed.substring(name.length + 1));
+            }
+        }
+        return '';
+    }
+
+    function startChat() {
         // Sync the language dropdown to the correct value
         const sel = document.getElementById('akch-user-lang');
@@ -580 +685 @@
     }
 
+    // ── Guest name gate ───────────────────────────────────────────────────────
+
+    /**
+     * Build the guest gate DOM from scratch when the server-rendered markup
+     * is missing (e.g. stripped by a page builder). We attach it to <body>
+     * directly so no ancestor styles can hide it.
+     */
+    function buildGuestGateFallback() {
+        if (!document.body) return null;
+
+        const gate = document.createElement('div');
+        gate.id = 'akch-guest-gate';
+        gate.className = 'akch-guest-gate';
+
+        const i = (akchData && akchData.i18n) || {};
+        const welcomeTxt    = i.welcome    || 'Welcome to the Chat';
+        const welcomeSubTxt = i.welcomeSub || 'Messages are translated automatically for everyone.';
+        const yourNameTxt   = i.yourName   || 'Your name';
+        const yourLangTxt   = i.yourLang   || 'Your language';
+        const enterTxt      = i.enterChat  || 'Enter Chat';
+
+        // Minimum viable language list — English as fallback. The real list
+        // is normally in the template; in fallback mode we read it from the
+        // existing #akch-user-lang select if present, else show English only.
+        let langOptions = '<option value="en">English</option>';
+        const existingLangSel = document.getElementById('akch-user-lang');
+        if (existingLangSel && existingLangSel.options.length > 0) {
+            langOptions = Array.from(existingLangSel.options)
+                .map(o => `<option value="${escapeHTML(o.value)}">${escapeHTML(o.text)}</option>`)
+                .join('');
+        }
+
+        gate.innerHTML = `
+            <div class="akch-guest-gate-card">
+                <h3>${escapeHTML(welcomeTxt)}</h3>
+                <p>${escapeHTML(welcomeSubTxt)}</p>
+                <label for="akch-guest-name">${escapeHTML(yourNameTxt)}</label>
+                <input type="text" id="akch-guest-name" maxlength="40" autocomplete="off" placeholder="${escapeHTML(yourNameTxt)}" />
+                <label for="akch-guest-lang">${escapeHTML(yourLangTxt)}</label>
+                <select id="akch-guest-lang">${langOptions}</select>
+                <p class="akch-guest-gate-err" id="akch-guest-gate-err" style="display:none;color:#d63638;font-size:13px;"></p>
+                <button type="button" id="akch-guest-enter" class="akch-guest-enter">${escapeHTML(enterTxt)}</button>
+            </div>`;
+
+        document.body.appendChild(gate);
+        return gate;
+    }
+
+    function showGuestGate() {
+        let gate = document.getElementById('akch-guest-gate');
+
+        // If the gate is missing (Divi or other page builders sometimes strip
+        // markup from inside shortcodes when they post-process the content),
+        // build it from scratch and append it to body so we can still ask for
+        // the visitor's name.
+        if (!gate) {
+            console.warn('[AKCH] #akch-guest-gate not found in DOM. Building it dynamically.');
+            gate = buildGuestGateFallback();
+            if (!gate) {
+                console.error('[AKCH] Could not build guest gate fallback. Bailing.');
+                startChat();
+                return;
+            }
+        } else {
+            console.log('[AKCH] #akch-guest-gate found in DOM. Promoting to fixed overlay.');
+        }
+
+        // Some themes (notably Divi) wrap shortcode output in containers that
+        // clip overflow, apply transforms, or override z-index — which made
+        // the absolute-inside-#akch-app overlay invisible. To bypass all of
+        // that, we promote the gate to a fixed full-screen modal anchored to
+        // <body>. !important defends against theme stylesheets that load
+        // after our own.
+        if (gate.parentNode !== document.body) {
+            document.body.appendChild(gate);
+        }
+        gate.style.cssText = [
+            'position: fixed !important',
+            'top: 0 !important',
+            'left: 0 !important',
+            'right: 0 !important',
+            'bottom: 0 !important',
+            'width: 100% !important',
+            'height: 100% !important',
+            'z-index: 2147483647 !important',
+            'display: flex !important',
+            'align-items: center !important',
+            'justify-content: center !important',
+            'background: rgba(0,0,0,0.55) !important',
+            'backdrop-filter: blur(3px)',
+        ].join(';');
+
+        // Keep the card itself styled (in case theme rules also leak in).
+        const card = gate.querySelector('.akch-guest-gate-card');
+        if (card) {
+            card.style.cssText = [
+                'background: #fff',
+                'border-radius: 14px',
+                'padding: 26px 28px',
+                'max-width: 360px',
+                'width: 90%',
+                'box-shadow: 0 12px 40px rgba(0,0,0,0.3)',
+                'text-align: left',
+                'color: #1a1a1a',
+                'position: relative',
+            ].join(';');
+        }
+
+        const nameInput = gate.querySelector('#akch-guest-name');
+        const langSel   = gate.querySelector('#akch-guest-lang');
+        const enterBtn  = gate.querySelector('#akch-guest-enter');
+        const errEl     = gate.querySelector('#akch-guest-gate-err');
+
+        console.log('[AKCH] Guest gate elements:', {
+            nameInput: !!nameInput,
+            langSel:   !!langSel,
+            enterBtn:  !!enterBtn,
+            errEl:     !!errEl,
+        });
+
+        if (nameInput) {
+            try { nameInput.focus(); } catch (_) {}
+        }
+
+        function submit() {
+            console.log('[AKCH] Guest gate submit() called');
+            const name = (nameInput && nameInput.value || '').trim();
+            const lang = (langSel && langSel.value) || state.userLang || 'en';
+            if (name.length < 2) {
+                if (errEl) { errEl.textContent = (akchData.i18n && akchData.i18n.nameTooShort) || 'Name must be at least 2 characters.'; errEl.style.display = 'block'; }
+                return;
+            }
+            if (enterBtn) enterBtn.disabled = true;
+
+            const body = new URLSearchParams();
+            body.append('action', 'akch_set_guest_name');
+            body.append('nonce', (akchData && akchData.nonce) || '');
+            body.append('name', name);
+            body.append('lang', lang);
+
+            fetch((akchData && akchData.ajaxUrl) || '', {
+                method: 'POST',
+                credentials: 'same-origin',
+                headers: { 'Content-Type': 'application/x-www-form-urlencoded' },
+                body: body.toString(),
+            }).then(r => r.json()).then(function (res) {
+                console.log('[AKCH] set_guest_name response:', res);
+                if (res && res.success) {
+                    state.userName    = res.data.name;
+                    state.userLang    = res.data.lang;
+                    state.userId      = parseInt(res.data.userId) || state.userId;
+                    akchData.userName = res.data.name;
+                    akchData.userLang = res.data.lang;
+                    akchData.userId   = res.data.userId;
+                    akchData.needsName = false;
+                    gate.style.display = 'none';
+                    if (gate.parentNode) gate.parentNode.removeChild(gate);
+                    startChat();
+                } else {
+                    if (enterBtn) enterBtn.disabled = false;
+                    if (errEl) { errEl.textContent = (res && res.data && res.data.message) || 'Error'; errEl.style.display = 'block'; }
+                }
+            }).catch(function (err) {
+                console.error('[AKCH] set_guest_name network error:', err);
+                if (enterBtn) enterBtn.disabled = false;
+                if (errEl) { errEl.textContent = (akchData.i18n && akchData.i18n.networkError) || 'Network error.'; errEl.style.display = 'block'; }
+            });
+        }
+
+        // Use event delegation on the gate itself so the click handler works
+        // even if the inner button is recreated, restyled, or wrapped by other
+        // scripts after the gate is built.
+        gate.addEventListener('click', function (ev) {
+            const target = ev.target;
+            if (target && (target.id === 'akch-guest-enter' || target.closest('#akch-guest-enter'))) {
+                ev.preventDefault();
+                submit();
+            }
+        });
+        // Direct listener too, as belt-and-braces in case delegation is blocked.
+        if (enterBtn) {
+            enterBtn.addEventListener('click', function (ev) {
+                ev.preventDefault();
+                submit();
+            });
+            console.log('[AKCH] Click handler attached to #akch-guest-enter');
+        } else {
+            console.error('[AKCH] #akch-guest-enter NOT found — click handler not attached');
+        }
+        if (nameInput) {
+            nameInput.addEventListener('keydown', function (e) {
+                if (e.key === 'Enter') { e.preventDefault(); submit(); }
+            });
+        }
+    }
+
     // Expose globally
     window.akchChatInit = init;

akukita-chat-with-ai-translation/trunk/assets/js/guest.js

@@ -1 +1 @@
 /**
  * Akukita Chat with AI Translation — guest.js 1.5.0
- * 
- * The guest system has been removed. This file:
- * 1. Removes any old guest overlay injected by cached old versions of this script
- * 2. Boots the chat for logged-in users (calls akchChatInit when ready)
- * 
- * Non-logged-in users see register-modal.php (server-rendered, self-contained).
+ *
+ * Two responsibilities:
+ *   1. Remove any old "guest overlay" injected by cached previous versions
+ *      of this script (early 1.x betas had a different guest UI).
+ *   2. Boot chat.js whenever the chat widget is rendered on the page.
+ *      This applies to BOTH logged-in users AND guests when the site is
+ *      running in 'guest' access mode. chat.js handles the rest (showing
+ *      the guest name gate via akchData.needsName, loading rooms, polling).
+ *
+ * In 'account' access mode, non-logged-in visitors get register-modal.php
+ * instead and #akch-app is not rendered, so this code is a no-op for them.
  */
 (function() {
@@ -26 +31 @@
     }
 
-    function isLoggedIn() {
-        return window.akchData && akchData.userId && parseInt(akchData.userId) > 0;
+    /**
+     * Should we start the chat on this page?
+     *
+     * We boot whenever:
+     *   - The chat widget container exists in the DOM (#akch-app), AND
+     *   - The inline akchData payload is present (set by wp_head).
+     *
+     * This correctly covers both logged-in users (positive userId) and
+     * guests (negative userId issued by AKCH_Guest::guest_id_from_token).
+     * The previous check rejected guests because parseInt(userId) > 0 is
+     * false for them — that bug stopped chat.js from initialising for
+     * guest-mode visitors.
+     */
+    function shouldBoot() {
+        return !!document.getElementById('akch-app')
+            && typeof window.akchData !== 'undefined';
     }
 
@@ -34 +53 @@
         removeOldOverlay();
 
-        // For logged-in users: boot chat (chat.js exposes akchChatInit)
-        if (isLoggedIn()) {
-            // chat.js may not be parsed yet if it loads after guest.js
-            // Wait for it with a short poll
-            if (typeof window.akchChatInit === 'function') {
-                bootChat();
-            } else {
-                var attempts = 0;
-                var poll = setInterval(function() {
-                    attempts++;
-                    if (typeof window.akchChatInit === 'function') {
-                        clearInterval(poll);
-                        bootChat();
-                    } else if (attempts > 50) {
-                        clearInterval(poll); // Give up after 5s
-                    }
-                }, 100);
-            }
+        if (!shouldBoot()) {
+            // No chat on this page (or running in account mode for a
+            // non-logged-in visitor — they get the registration modal).
+            return;
         }
-        // Non-logged-in users: nothing to do — register-modal.php handles everything
+
+        // chat.js may not be parsed yet if it loads after guest.js;
+        // poll briefly until akchChatInit becomes available, then call it.
+        if (typeof window.akchChatInit === 'function') {
+            bootChat();
+        } else {
+            var attempts = 0;
+            var poll = setInterval(function() {
+                attempts++;
+                if (typeof window.akchChatInit === 'function') {
+                    clearInterval(poll);
+                    bootChat();
+                } else if (attempts > 50) {
+                    clearInterval(poll); // Give up after 5s
+                }
+            }, 100);
+        }
     }
 
@@ -78 +99 @@
         'use strict';
 
-        // Only run when the registration modal is present in the DOM.
-        if ( ! document.getElementById( 'akch-register-modal' ) ) {
+        // Only run when the registration/login modal is present in the DOM.
+        if ( ! document.getElementById( 'akch-auth-modal' ) ) {
                 return;
         }

akukita-chat-with-ai-translation/trunk/includes/class-admin.php

@@ -69 +69 @@
             'akch_messages_per_load'    => 'absint',
             'akch_history_days'         => 'absint',
+            'akch_access_mode'          => 'sanitize_text_field',
         ];
         foreach ( $settings as $option => $sanitize ) {
@@ -98 +99 @@
         if ( isset( $_POST['akch_save_settings'] ) ) {
             check_admin_referer( 'akch_settings_save' );
-            foreach ( [ 'akch_translation_provider', 'akch_openai_key', 'akch_deepl_key', 'akch_mymemory_key', 'akch_default_language', 'akch_messages_per_load', 'akch_history_days' ] as $key ) {
+            foreach ( [ 'akch_translation_provider', 'akch_openai_key', 'akch_deepl_key', 'akch_mymemory_key', 'akch_default_language', 'akch_messages_per_load', 'akch_history_days', 'akch_access_mode' ] as $key ) {
                 if ( isset( $_POST[ $key ] ) ) {
                     update_option( $key, sanitize_text_field( wp_unslash( $_POST[ $key ] ) ) );

akukita-chat-with-ai-translation/trunk/includes/class-database.php

@@ -77 +77 @@
         add_option( 'akch_translation_provider', 'mymemory' );
         add_option( 'akch_default_language', 'en' );
+        // Default 'account': only logged-in users can chat.
+        // Admins can switch to 'guest' (anyone) or 'registered' from Settings.
+        // This preserves the pre-1.2.0 behaviour for users upgrading.
+        add_option( 'akch_access_mode', 'account' );
         add_option( 'akch_messages_per_load', 50 );
         add_option( 'akch_history_days', 30 );
@@ -326 +330 @@
     }
 
+    /**
+     * Soft-delete a message (sets is_deleted = 1). Used for moderation.
+     *
+     * @param int $message_id Message ID.
+     * @return void
+     */
+    public static function soft_delete_message( $message_id ) {
+        global $wpdb;
+        // phpcs:ignore WordPress.DB.DirectDatabaseQuery.DirectQuery, WordPress.DB.DirectDatabaseQuery.NoCaching
+        $wpdb->update(
+            $wpdb->prefix . 'akch_chat_messages',
+            [ 'is_deleted' => 1 ],
+            [ 'id' => (int) $message_id ]
+        );
+    }
+
     // -- Participants ----------------------------------------------------------
 

akukita-chat-with-ai-translation/trunk/includes/class-guest.php

@@ -9 +9 @@
  */
 
-if ( ! defined( 'ABSPATH' ) ) exit;
+if ( ! defined( 'ABSPATH' ) ) {
+        exit;
+}
 
 /**
- * User Registration Handler
+ * Identity / access handler.
  *
- * Replaces the old guest system.
- * - Logged-in users: access chat directly
- * - Non-logged-in users: see a registration/login modal
- * - Handles WP user registration via AJAX
- * - Handles language preference via akch_lang cookie
+ * Access modes (option akch_access_mode):
+ *   • 'guest'      — Anyone can chat after entering a display name (default).
+ *   • 'registered' — Only logged-in WordPress users can chat.
+ *   • 'account'    — Visitors must create/log in to a WP account (legacy modal).
+ *
+ * Guests are not WordPress users. Each guest gets a random token stored in the
+ * akch_guest_id cookie. A stable negative integer derived from that token acts
+ * as their user_id in the chat tables, keeping guests from colliding with each
+ * other or with real (positive) WP user IDs.
  */
 class AKCH_Guest {
 
-    public static function init() {
-        // WP registration via AJAX (no login required)
-        add_action( 'wp_ajax_nopriv_akch_register_user', [ __CLASS__, 'ajax_register_user' ] );
-        add_action( 'wp_ajax_nopriv_akch_get_i18n',      [ __CLASS__, 'ajax_get_i18n'      ] );
-        add_action( 'wp_ajax_akch_get_i18n',             [ __CLASS__, 'ajax_get_i18n'      ] );
-    }
-
-    // -- Identity -- only WP users now -----------------------------------------
-
-    public static function is_wp_user() { return is_user_logged_in(); }
-    public static function is_guest() { return false; } // guests removed
-    public static function can_chat() { return is_user_logged_in(); }
-
-    public static function current_id() {
-        return is_user_logged_in() ? get_current_user_id() : 0;
-    }
-
-    public static function current_name() {
-        return is_user_logged_in() ? wp_get_current_user()->display_name : '';
-    }
-
-    public static function current_lang() {
-        if ( is_user_logged_in() ) {
-            return get_user_meta( get_current_user_id(), 'akch_preferred_language', true ) ?: 'en';
-        }
-        // For non-logged-in users, read language cookie (set by registration modal)
-        return sanitize_text_field( wp_unslash( $_COOKIE['akch_lang'] ?? 'en' ) );
-    }
-
-    public static function update_language( $lang ) {
-        if ( is_user_logged_in() ) {
-            update_user_meta( get_current_user_id(), 'akch_preferred_language', $lang );
-        }
-        // Also save in cookie for persistence
-        if ( ! headers_sent() ) {
-            setcookie( 'akch_lang', $lang, [
-                'expires'  => time() + ( 30 * DAY_IN_SECONDS ),
-                'path'     => COOKIEPATH ?: '/',
-                'secure'   => is_ssl(),
-                'httponly' => false,
-                'samesite' => 'Lax',
-            ] );
-        }
-        $_COOKIE['akch_lang'] = $lang;
-    }
-
-    // -- WP User Registration --------------------------------------------------
-
-    public static function ajax_register_user() {
-        // Verify registration nonce (generated by the registration modal template).
-        check_ajax_referer( 'akch_register_nonce', 'nonce' );
-
-        // Check if registration is enabled in WP settings
-        if ( ! get_option( 'users_can_register' ) ) {
-            wp_send_json_error( [ 'message' => __( 'User registration is currently disabled. Please contact the administrator.', 'akukita-chat-with-ai-translation' ) ] );
-            return;
-        }
-
-        // Rate limit
-        $ip    = md5( sanitize_text_field( wp_unslash( $_SERVER['REMOTE_ADDR'] ?? 'x' ) ) );
-        $tk    = 'akch_reg_' . $ip;
-        $count = (int) get_transient( $tk );
-        if ( $count > 5 ) {
-            wp_send_json_error( [ 'message' => __( 'Too many attempts. Please wait a few minutes.', 'akukita-chat-with-ai-translation' ) ] );
-            return;
-        }
-        set_transient( $tk, $count + 1, 300 ); // 5 attempts per 5 minutes
-
-        $username = sanitize_user( wp_unslash( isset( $_POST['username'] ) ? $_POST['username'] : '' ) );
-        $email    = sanitize_email( wp_unslash( isset( $_POST['email'] ) ? $_POST['email'] : '' ) );
-        $lang     = sanitize_text_field( wp_unslash( isset( $_POST['lang'] ) ? $_POST['lang'] : 'en' ) );
-
-        // Validate
-        if ( empty( $username ) ) {
-            wp_send_json_error( [ 'field' => 'username', 'message' => __( 'Username is required.', 'akukita-chat-with-ai-translation' ) ] );
-            return;
-        }
-        if ( ! validate_username( $username ) ) {
-            wp_send_json_error( [ 'field' => 'username', 'message' => __( 'Username contains invalid characters.', 'akukita-chat-with-ai-translation' ) ] );
-            return;
-        }
-        if ( username_exists( $username ) ) {
-            wp_send_json_error( [ 'field' => 'username', 'message' => __( 'This username is already taken.', 'akukita-chat-with-ai-translation' ) ] );
-            return;
-        }
-        if ( empty( $email ) || ! is_email( $email ) ) {
-            wp_send_json_error( [ 'field' => 'email', 'message' => __( 'Please enter a valid email address.', 'akukita-chat-with-ai-translation' ) ] );
-            return;
-        }
-        if ( email_exists( $email ) ) {
-            wp_send_json_error( [ 'field' => 'email', 'message' => __( 'This email is already registered. Try logging in.', 'akukita-chat-with-ai-translation' ) ] );
-            return;
-        }
-
-        // Create user -- WP generates a random password and sends it by email
-        $user_id = wp_create_user( $username, wp_generate_password( 12 ), $email );
-
-        if ( is_wp_error( $user_id ) ) {
-            wp_send_json_error( [ 'message' => $user_id->get_error_message() ] );
-            return;
-        }
-
-        // Save language preference
-        $supported = array_keys( AKCH_AI_Translation::supported_languages() );
-        if ( in_array( $lang, $supported, true ) ) {
-            update_user_meta( $user_id, 'akch_preferred_language', $lang );
-        }
-
-        // Send password email
-        wp_new_user_notification( $user_id, null, 'user' );
-
-        // Auto-login the new user
-        wp_set_current_user( $user_id );
-        wp_set_auth_cookie( $user_id, true );
-
-        $user = get_user_by( 'ID', $user_id );
-
-        wp_send_json_success( [
-            'message'    => __( 'Account created! You are now logged in.', 'akukita-chat-with-ai-translation' ),
-            'userId'     => $user_id,
-            'userName'   => $user->display_name,
-            'lang'       => $lang,
-            'restNonce'  => wp_create_nonce( 'wp_rest' ),
-            'nonce'      => wp_create_nonce( 'akch_nonce' ),
-        ] );
-    }
-
-    public static function ajax_get_i18n() {
-        // phpcs:ignore WordPress.Security.NonceVerification.Missing -- Public endpoint returning only localisation strings, no state change.
-        $lang = sanitize_text_field( wp_unslash( $_POST['lang'] ?? 'en' ) );
-        wp_send_json_success( Akukita_Chat::get_i18n( $lang ) );
-    }
-
-    // Kept for backwards compatibility
-    public static function start_session() {}
+        const COOKIE_TOKEN = 'akch_guest_id';
+        const COOKIE_NAME  = 'akch_guest_name';
+
+        /**
+         * Register hooks.
+         *
+         * @return void
+         */
+        public static function init() {
+                add_action( 'init', array( __CLASS__, 'ensure_guest_cookie' ) );
+                add_action( 'wp_ajax_nopriv_akch_register_user', array( __CLASS__, 'ajax_register_user' ) );
+                add_action( 'wp_ajax_nopriv_akch_get_i18n', array( __CLASS__, 'ajax_get_i18n' ) );
+                add_action( 'wp_ajax_akch_get_i18n', array( __CLASS__, 'ajax_get_i18n' ) );
+                add_action( 'wp_ajax_nopriv_akch_set_guest_name', array( __CLASS__, 'ajax_set_guest_name' ) );
+        }
+
+        /**
+         * AJAX: store a guest's chosen display name (and language) in cookies.
+         *
+         * @return void
+         */
+        public static function ajax_set_guest_name() {
+                check_ajax_referer( 'akch_nonce', 'nonce' );
+
+                if ( ! self::guests_allowed() || is_user_logged_in() ) {
+                        wp_send_json_error( array( 'message' => __( 'Not available.', 'akukita-chat-with-ai-translation' ) ), 403 );
+                }
+
+                $name = isset( $_POST['name'] ) ? sanitize_text_field( wp_unslash( $_POST['name'] ) ) : '';
+                $name = trim( $name );
+                if ( mb_strlen( $name ) < 2 ) {
+                        wp_send_json_error( array( 'message' => __( 'Name must be at least 2 characters.', 'akukita-chat-with-ai-translation' ) ) );
+                }
+                if ( mb_strlen( $name ) > 40 ) {
+                        $name = mb_substr( $name, 0, 40 );
+                }
+
+                $lang = isset( $_POST['lang'] ) ? sanitize_text_field( wp_unslash( $_POST['lang'] ) ) : '';
+                $supported = array_keys( AKCH_AI_Translation::supported_languages() );
+                if ( ! in_array( $lang, $supported, true ) ) {
+                        $lang = get_option( 'akch_default_language', 'en' );
+                }
+
+                if ( ! headers_sent() ) {
+                        setcookie(
+                                self::COOKIE_NAME,
+                                $name,
+                                array(
+                                        'expires'  => time() + ( 180 * DAY_IN_SECONDS ),
+                                        'path'     => COOKIEPATH ? COOKIEPATH : '/',
+                                        'secure'   => is_ssl(),
+                                        'httponly' => false,
+                                        'samesite' => 'Lax',
+                                )
+                        );
+                }
+                $_COOKIE[ self::COOKIE_NAME ] = $name;
+                self::update_language( $lang );
+
+                wp_send_json_success(
+                        array(
+                                'name'   => $name,
+                                'lang'   => $lang,
+                                'userId' => self::current_id(),
+                        )
+                );
+        }
+
+        // -- Access mode -----------------------------------------------------------
+
+        /**
+         * Current access mode.
+         *
+         * @return string One of 'guest', 'registered', 'account'.
+         */
+        public static function access_mode() {
+                $mode = get_option( 'akch_access_mode', 'account' );
+                if ( ! in_array( $mode, array( 'guest', 'registered', 'account' ), true ) ) {
+                        $mode = 'account';
+                }
+                return $mode;
+        }
+
+        /**
+         * Whether non-logged-in guests are allowed to chat.
+         *
+         * @return bool
+         */
+        public static function guests_allowed() {
+                return 'guest' === self::access_mode();
+        }
+
+        /**
+         * Whether the current visitor may participate in chat.
+         *
+         * @return bool
+         */
+        public static function can_chat() {
+                if ( is_user_logged_in() ) {
+                        return true;
+                }
+                return self::guests_allowed();
+        }
+
+        // -- Guest cookie / token --------------------------------------------------
+
+        /**
+         * Create the guest token cookie on first visit (frontend, guests only).
+         *
+         * @return void
+         */
+        public static function ensure_guest_cookie() {
+                if ( is_admin() || is_user_logged_in() ) {
+                        return;
+                }
+                if ( ! self::guests_allowed() ) {
+                        return;
+                }
+                if ( ! empty( $_COOKIE[ self::COOKIE_TOKEN ] ) ) {
+                        return;
+                }
+                if ( headers_sent() ) {
+                        return;
+                }
+
+                $token = wp_generate_password( 20, false );
+                setcookie(
+                        self::COOKIE_TOKEN,
+                        $token,
+                        array(
+                                'expires'  => time() + ( 180 * DAY_IN_SECONDS ),
+                                'path'     => COOKIEPATH ? COOKIEPATH : '/',
+                                'secure'   => is_ssl(),
+                                'httponly' => false,
+                                'samesite' => 'Lax',
+                        )
+                );
+                $_COOKIE[ self::COOKIE_TOKEN ] = $token;
+        }
+
+        /**
+         * Read the current guest token, if any.
+         *
+         * @return string
+         */
+        public static function guest_token() {
+                return isset( $_COOKIE[ self::COOKIE_TOKEN ] )
+                        ? sanitize_text_field( wp_unslash( $_COOKIE[ self::COOKIE_TOKEN ] ) )
+                        : '';
+        }
+
+        /**
+         * Derive a stable negative integer ID from a guest token.
+         *
+         * @param  string $token Guest token.
+         * @return int Negative integer, or 0 when no token.
+         */
+        public static function guest_id_from_token( $token ) {
+                if ( '' === $token ) {
+                        return 0;
+                }
+                return - (int) sprintf( '%u', crc32( $token ) );
+        }
+
+        // -- Identity --------------------------------------------------------------
+
+        /**
+         * Whether the current participant is a guest (not a WP user).
+         *
+         * @return bool
+         */
+        public static function is_guest() {
+                return ! is_user_logged_in() && self::guests_allowed() && '' !== self::guest_token();
+        }
+
+        /**
+         * Current participant numeric ID (positive WP id, or negative guest id).
+         *
+         * @return int
+         */
+        public static function current_id() {
+                if ( is_user_logged_in() ) {
+                        return get_current_user_id();
+                }
+                return self::guest_id_from_token( self::guest_token() );
+        }
+
+        /**
+         * Current participant display name.
+         *
+         * @return string
+         */
+        public static function current_name() {
+                if ( is_user_logged_in() ) {
+                        return wp_get_current_user()->display_name;
+                }
+                return isset( $_COOKIE[ self::COOKIE_NAME ] )
+                        ? sanitize_text_field( wp_unslash( $_COOKIE[ self::COOKIE_NAME ] ) )
+                        : '';
+        }
+
+        /**
+         * Current participant preferred language.
+         *
+         * @return string
+         */
+        public static function current_lang() {
+                if ( is_user_logged_in() ) {
+                        $lang = get_user_meta( get_current_user_id(), 'akch_preferred_language', true );
+                        return $lang ? $lang : get_option( 'akch_default_language', 'en' );
+                }
+                if ( isset( $_COOKIE['akch_lang'] ) ) {
+                        return sanitize_text_field( wp_unslash( $_COOKIE['akch_lang'] ) );
+                }
+                return get_option( 'akch_default_language', 'en' );
+        }
+
+        /**
+         * Persist the participant's language (user meta for WP users, cookie always).
+         *
+         * @param  string $lang Language code.
+         * @return void
+         */
+        public static function update_language( $lang ) {
+                if ( is_user_logged_in() ) {
+                        update_user_meta( get_current_user_id(), 'akch_preferred_language', $lang );
+                }
+                if ( ! headers_sent() ) {
+                        setcookie(
+                                'akch_lang',
+                                $lang,
+                                array(
+                                        'expires'  => time() + ( 30 * DAY_IN_SECONDS ),
+                                        'path'     => COOKIEPATH ? COOKIEPATH : '/',
+                                        'secure'   => is_ssl(),
+                                        'httponly' => false,
+                                        'samesite' => 'Lax',
+                                )
+                        );
+                }
+                $_COOKIE['akch_lang'] = $lang;
+        }
+
+        // -- WP User Registration (only used in 'account' mode) --------------------
+
+        /**
+         * AJAX: register a new WP user (legacy 'account' mode).
+         *
+         * @return void
+         */
+        public static function ajax_register_user() {
+                check_ajax_referer( 'akch_register_nonce', 'nonce' );
+
+                if ( ! get_option( 'users_can_register' ) ) {
+                        wp_send_json_error( array( 'message' => __( 'User registration is currently disabled. Please contact the administrator.', 'akukita-chat-with-ai-translation' ) ) );
+                        return;
+                }
+
+                $ip    = md5( sanitize_text_field( wp_unslash( $_SERVER['REMOTE_ADDR'] ?? 'x' ) ) );
+                $tk    = 'akch_reg_' . $ip;
+                $count = (int) get_transient( $tk );
+                if ( $count > 5 ) {
+                        wp_send_json_error( array( 'message' => __( 'Too many attempts. Please wait a few minutes.', 'akukita-chat-with-ai-translation' ) ) );
+                        return;
+                }
+                set_transient( $tk, $count + 1, 300 );
+
+                $username = sanitize_user( wp_unslash( isset( $_POST['username'] ) ? $_POST['username'] : '' ) );
+                $email    = sanitize_email( wp_unslash( isset( $_POST['email'] ) ? $_POST['email'] : '' ) );
+                $lang     = sanitize_text_field( wp_unslash( isset( $_POST['lang'] ) ? $_POST['lang'] : 'en' ) );
+
+                if ( empty( $username ) ) {
+                        wp_send_json_error( array( 'field' => 'username', 'message' => __( 'Username is required.', 'akukita-chat-with-ai-translation' ) ) );
+                        return;
+                }
+                if ( ! validate_username( $username ) ) {
+                        wp_send_json_error( array( 'field' => 'username', 'message' => __( 'Username contains invalid characters.', 'akukita-chat-with-ai-translation' ) ) );
+                        return;
+                }
+                if ( username_exists( $username ) ) {
+                        wp_send_json_error( array( 'field' => 'username', 'message' => __( 'This username is already taken.', 'akukita-chat-with-ai-translation' ) ) );
+                        return;
+                }
+                if ( empty( $email ) || ! is_email( $email ) ) {
+                        wp_send_json_error( array( 'field' => 'email', 'message' => __( 'Please enter a valid email address.', 'akukita-chat-with-ai-translation' ) ) );
+                        return;
+                }
+                if ( email_exists( $email ) ) {
+                        wp_send_json_error( array( 'field' => 'email', 'message' => __( 'This email is already registered. Try logging in.', 'akukita-chat-with-ai-translation' ) ) );
+                        return;
+                }
+
+                $user_id = wp_create_user( $username, wp_generate_password( 12 ), $email );
+
+                if ( is_wp_error( $user_id ) ) {
+                        wp_send_json_error( array( 'message' => $user_id->get_error_message() ) );
+                        return;
+                }
+
+                $supported = array_keys( AKCH_AI_Translation::supported_languages() );
+                if ( in_array( $lang, $supported, true ) ) {
+                        update_user_meta( $user_id, 'akch_preferred_language', $lang );
+                }
+
+                wp_new_user_notification( $user_id, null, 'user' );
+
+                wp_set_current_user( $user_id );
+                wp_set_auth_cookie( $user_id, true );
+
+                $user = get_user_by( 'ID', $user_id );
+
+                wp_send_json_success( array(
+                        'message'   => __( 'Account created! You are now logged in.', 'akukita-chat-with-ai-translation' ),
+                        'userId'    => $user_id,
+                        'userName'  => $user->display_name,
+                        'lang'      => $lang,
+                        'restNonce' => wp_create_nonce( 'wp_rest' ),
+                        'nonce'     => wp_create_nonce( 'akch_nonce' ),
+                ) );
+        }
+
+        /**
+         * AJAX: return localisation strings for a language.
+         *
+         * @return void
+         */
+        public static function ajax_get_i18n() {
+                // phpcs:ignore WordPress.Security.NonceVerification.Missing -- Public endpoint returning only localisation strings, no state change.
+                $lang = sanitize_text_field( wp_unslash( $_POST['lang'] ?? 'en' ) );
+                wp_send_json_success( Akukita_Chat::get_i18n( $lang ) );
+        }
+
+        /**
+         * Backwards-compatibility no-op.
+         *
+         * @return void
+         */
+        public static function start_session() {}
+
+        /**
+         * Backwards-compatibility helper.
+         *
+         * @return bool
+         */
+        public static function is_wp_user() {
+                return is_user_logged_in();
+        }
 }

akukita-chat-with-ai-translation/trunk/includes/class-rest-api.php

@@ -39 +39 @@
         ] );
 
+        register_rest_route( $ns, '/messages/(?P<id>\d+)', [
+            [ 'methods' => 'DELETE', 'callback' => [ __CLASS__, 'delete_message' ], 'permission_callback' => [ __CLASS__, 'require_admin' ] ],
+        ] );
+
         register_rest_route( $ns, '/rooms/(?P<id>\d+)/join', [
             'methods'             => 'POST',
@@ -72 +76 @@
     // -- Permission callbacks --------------------------------------------------
 
-    /** Requires a logged-in WP user */
+    /** Requires a logged-in WP user, or a guest when guest mode is enabled. */
     public static function require_chatter() {
-        if ( is_user_logged_in() ) return true;
+        if ( AKCH_Guest::can_chat() ) {
+            return true;
+        }
         return new WP_Error( 'not_authorized', __( 'You must be logged in to chat.', 'akukita-chat-with-ai-translation' ), [ 'status' => 401 ] );
     }
@@ -101 +107 @@
      */
     public static function can_access_room( WP_REST_Request $request ) {
-        if ( ! is_user_logged_in() ) {
+        if ( ! AKCH_Guest::can_chat() ) {
             return new WP_Error( 'not_authorized', __( 'You must be logged in to chat.', 'akukita-chat-with-ai-translation' ), [ 'status' => 401 ] );
         }
@@ -166 +172 @@
     }
 
+    /**
+     * Soft-delete a single message (moderation). Admin only.
+     *
+     * @param WP_REST_Request $req Request.
+     * @return WP_REST_Response
+     */
+    public static function delete_message( $req ) {
+        AKCH_Database::soft_delete_message( (int) $req['id'] );
+        return rest_ensure_response( [ 'deleted' => true ] );
+    }
+
     // -- Message endpoints -----------------------------------------------------
 
@@ -173 +190 @@
         $before_id = (int) ( $req->get_param( 'before_id' ) ?: 0 );
         $after_id  = (int) ( $req->get_param( 'after_id' )  ?: 0 );
-        $user_lang = get_user_meta( get_current_user_id(), 'akch_preferred_language', true ) ?: 'en';
+        $user_lang = AKCH_Guest::current_lang() ?: 'en';
 
         $messages = AKCH_Database::get_messages( $room_id, $limit, $before_id, $after_id );
@@ -209 +226 @@
         $lang    = sanitize_text_field( $req->get_param( 'lang' ) ?: '' );
 
+        // -- Anti-spam: honeypot. A hidden field that humans never fill in.
+        $honeypot = (string) $req->get_param( 'website' );
+        if ( '' !== trim( $honeypot ) ) {
+            // Pretend success so bots don't learn they were caught.
+            return rest_ensure_response( array( 'id' => 0, 'room_id' => $room_id, 'display_text' => $text, 'sent_at' => current_time( 'mysql' ) ) );
+        }
+
         if ( empty( $text ) ) {
             return new WP_Error( 'empty_message', __( 'Message cannot be empty.', 'akukita-chat-with-ai-translation' ), [ 'status' => 400 ] );
         }
 
+        // -- Anti-spam: maximum length.
+        $max_len = (int) apply_filters( 'akch_max_message_length', 2000 );
+        if ( function_exists( 'mb_strlen' ) ? mb_strlen( $text ) > $max_len : strlen( $text ) > $max_len ) {
+            return new WP_Error( 'too_long', __( 'Message is too long.', 'akukita-chat-with-ai-translation' ), [ 'status' => 400 ] );
+        }
+
+        $user_id   = AKCH_Guest::current_id();
+        $user_name = AKCH_Guest::current_name();
+        $is_guest  = AKCH_Guest::is_guest();
+
+        // Guests must have provided a display name.
+        if ( $is_guest && '' === trim( $user_name ) ) {
+            return new WP_Error( 'no_name', __( 'Please enter a name before chatting.', 'akukita-chat-with-ai-translation' ), [ 'status' => 400 ] );
+        }
+        if ( ! $is_guest && ! is_user_logged_in() ) {
+            return new WP_Error( 'not_authorized', __( 'You must be logged in to chat.', 'akukita-chat-with-ai-translation' ), [ 'status' => 401 ] );
+        }
+        if ( '' === trim( $user_name ) ) {
+            $user_name = is_user_logged_in() ? wp_get_current_user()->display_name : __( 'Guest', 'akukita-chat-with-ai-translation' );
+        }
+
+        // -- Anti-spam: per-identity rate limit (flood control).
+        $rl_key = 'akch_rl_' . md5( (string) $user_id . '|' . self::client_ip() );
+        $last   = (int) get_transient( $rl_key );
+        $now    = time();
+        $min_gap = (int) apply_filters( 'akch_min_seconds_between_messages', 2 );
+        if ( $last && ( $now - $last ) < $min_gap ) {
+            return new WP_Error( 'too_fast', __( 'You are sending messages too quickly. Please wait a moment.', 'akukita-chat-with-ai-translation' ), [ 'status' => 429 ] );
+        }
+        set_transient( $rl_key, $now, 60 );
+
         if ( empty( $lang ) ) {
             $lang = AKCH_AI_Translation::detect_language( $text );
         }
-
-        $user_id   = get_current_user_id();
-        $user       = wp_get_current_user();
-        $user_name = $user->display_name;
 
         /**
@@ -227 +278 @@
          * @since 1.0.3
          * @param bool $allowed  Whether posting is allowed. Default true.
-         * @param int  $user_id  WP user ID.
+         * @param int  $user_id  WP user ID (or negative guest id).
          */
         if ( ! apply_filters( 'akch_can_post_message', true, $user_id ) ) {
@@ -284 +335 @@
     public static function join_room( $req ) {
         $room_id  = (int) $req['id'];
-        $user_id  = get_current_user_id();
-        $language = sanitize_text_field( $req->get_param( 'language' ) ?: ( get_user_meta( $user_id, 'akch_preferred_language', true ) ?: 'en' ) );
+        $user_id  = AKCH_Guest::current_id();
+        $language = sanitize_text_field( $req->get_param( 'language' ) ?: AKCH_Guest::current_lang() );
 
         /**
@@ -310 +361 @@
         }
 
-        AKCH_Database::join_room( $room_id, $user_id, wp_get_current_user()->display_name, $language );
-
-        if ( is_user_logged_in() ) {
-            update_user_meta( $user_id, 'akch_preferred_language', $language );
-        }
+        AKCH_Database::join_room( $room_id, $user_id, AKCH_Guest::current_name() ?: __( 'Guest', 'akukita-chat-with-ai-translation' ), $language );
+
+        AKCH_Guest::update_language( $language );
 
         return rest_ensure_response( [ 'joined' => true ] );
@@ -320 +369 @@
 
     public static function ping( $req ) {
-        AKCH_Database::ping_participant( (int) $req['id'], get_current_user_id() );
+        AKCH_Database::ping_participant( (int) $req['id'], AKCH_Guest::current_id() );
         return rest_ensure_response( [ 'ok' => true ] );
     }
@@ -332 +381 @@
     public static function set_language( $req ) {
         $lang = sanitize_text_field( $req->get_param( 'language' ) );
-        update_user_meta( get_current_user_id(), 'akch_preferred_language', $lang );
+        AKCH_Guest::update_language( $lang );
         return rest_ensure_response( [ 'language' => $lang, 'ok' => true ] );
+    }
+
+    /**
+     * Best-effort client IP for rate limiting. Used only as a coarse spam
+     * signal, never stored or displayed.
+     *
+     * @return string
+     */
+    private static function client_ip() {
+        $ip = isset( $_SERVER['REMOTE_ADDR'] ) ? sanitize_text_field( wp_unslash( $_SERVER['REMOTE_ADDR'] ) ) : '';
+        return $ip ? $ip : 'unknown';
     }
 

akukita-chat-with-ai-translation/trunk/includes/class-shortcode.php

@@ -23 +23 @@
         $user_lang = AKCH_Guest::current_lang();
 
-        // Non-logged-in users ONLY see the registration modal — nothing else.
-        if ( ! is_user_logged_in() ) {
+        // The chat output contains per-visitor data (cookies, user IDs, nonces).
+        // Tell page-cache plugins and CDNs not to cache the rendered page.
+        self::mark_uncacheable();
+
+        // Account mode: non-logged-in visitors get the registration modal.
+        if ( ! is_user_logged_in() && ! AKCH_Guest::guests_allowed() ) {
             ob_start();
             include AKCH_PLUGIN_DIR . 'templates/register-modal.php';
@@ -39 +43 @@
         $atts = shortcode_atts( [ 'id' => 0, 'height' => 500 ], $atts, 'akukita_chat_room' );
 
-        // Non-logged-in users ONLY see the registration modal
-        if ( ! is_user_logged_in() ) {
+        self::mark_uncacheable();
+
+        // Account mode: non-logged-in visitors get the registration modal.
+        if ( ! is_user_logged_in() && ! AKCH_Guest::guests_allowed() ) {
             $languages = AKCH_AI_Translation::supported_languages();
             $user_lang = AKCH_Guest::current_lang();
@@ -60 +66 @@
         return ob_get_clean();
     }
+
+    /**
+     * Signals to page-cache plugins, hosts and CDNs that the current page
+     * must NOT be served from cache.
+     *
+     * The chat output is inherently per-visitor: it embeds the user/guest id,
+     * fresh nonces and (for guests) the current cookie state. Serving a cached
+     * page to a different visitor breaks guest sessions, makes nonces invalid
+     * and causes "Please enter a name" loops because the cached HTML refers
+     * to someone else's cookie.
+     *
+     * Covers: WP Rocket, LiteSpeed Cache, W3 Total Cache, WP Super Cache,
+     * Cloudflare APO, hosting-level edge caches. Each plugin honours one or
+     * more of these signals.
+     *
+     * @return void
+     */
+    private static function mark_uncacheable() {
+        // WordPress core: disable internal caches for this request.
+        if ( ! defined( 'DONOTCACHEPAGE' ) ) {
+            define( 'DONOTCACHEPAGE', true );
+        }
+        if ( ! defined( 'DONOTCACHEOBJECT' ) ) {
+            define( 'DONOTCACHEOBJECT', true );
+        }
+        if ( ! defined( 'DONOTCACHEDB' ) ) {
+            define( 'DONOTCACHEDB', true );
+        }
+
+        // HTTP headers (CDN-level, reverse proxies, Cloudflare).
+        if ( ! headers_sent() ) {
+            nocache_headers();
+        }
+    }
 }

akukita-chat-with-ai-translation/trunk/readme.txt

@@ -5 +5 @@
 Tested up to: 7.0
 Requires PHP: 7.4
-Stable tag: 1.1.2
+Stable tag: 1.2.0
 License: GPLv2 or later
 License URI: https://www.gnu.org/licenses/gpl-2.0.html
@@ -21 +21 @@
 = Why people install Akukita Chat =
 
-* 🌍 **70+ languages, zero setup** — Works out of the box with the free MyMemory provider. No registration, no credit card.
+* 🧙 **Guided setup in 60 seconds** — A built-in setup wizard runs the moment you activate the plugin: pick your translation engine, get a ready-to-use chat page automatically created for you, and you're done.
+* 👥 **Open the chat to anyone (no account required)** — Switch on guest mode and visitors join with just a display name and a language. Perfect for public communities, support chats and landing pages. Spam protection (rate limiting, length limits and a honeypot) is always on.
+* 🌍 **70+ languages, zero configuration** — Works out of the box with the free MyMemory provider. No registration, no credit card.
 * 💬 **Multi-room chat** — Create as many topic-based rooms as you want from the admin dashboard.
-* ⚡ **Real-time** — Messages appear instantly via WebSocket, no page reload.
+* ⚡ **Real-time** — Messages appear instantly, no page reload.
 * 🧠 **3 translation engines** — Free (MyMemory), high-quality (DeepL), or premium AI (OpenAI GPT-4o-mini). You choose.
 * 🚀 **Smart caching** — Each phrase is translated once, then served instantly to everyone. Saves quota and lightens server load.
@@ -42 +44 @@
 
 1. Install and activate the plugin.
-2. Pick a translation provider in **Akukita Chat → Settings** (the free MyMemory is selected by default — no API key needed).
-3. Create your first room in **Akukita Chat → Rooms**.
-4. Paste `[akukita_chat]` on any page or post.
-5. Done. Your users can now chat across languages.
+2. The setup wizard opens automatically and asks two quick questions: which translation engine you want and where to place the chat. It then creates a ready-to-use chat page for you.
+3. (Optional) Decide who can chat in **Akukita Chat → Settings → Who can chat**: only logged-in users (default), anyone with a display name (guest mode), or visitors who first create a WordPress account.
+4. Share the chat URL with your audience. That's it.
 
 = Shortcodes =
@@ -113 +114 @@
 = Do users need a WordPress account? =
 
-Yes, but they don't have to create it manually. When someone visits the chat page without being logged in, a registration modal appears where they can create their account in 10 seconds. This requires **Settings → General → Anyone can register** to be enabled.
+No. By default the chat is open to guests: a visitor enters a display name and their language and can start chatting right away — no account, no email. You can change this under **Akukita Chat → Settings → Who can chat**, where you can instead require visitors to be logged in, or require them to create a WordPress account. Spam protection (rate limiting, message length limits and a honeypot) is always on for guest chat.
 
 = What about chat history? =
@@ -125 +126 @@
 = Is it compatible with caching plugins (WP Rocket, LiteSpeed, W3 Total Cache)? =
 
-Yes, but exclude the page containing `[akukita_chat]` from full-page cache, or configure your caching plugin to vary cache by login status. The chat output depends on whether the user is logged in.
+Yes, but you must exclude the page containing `[akukita_chat]` from full-page cache. The chat output and its security tokens depend on the visitor, so serving a cached copy to guests can make sending messages fail. Add the chat page to your caching plugin's "never cache" list, or configure it to vary cache by login status.
 
 = Does it work with Multisite? =
@@ -171 +172 @@
 * Privacy Policy: https://openai.com/policies/row-privacy-policy/
 
+**4. Deactivation feedback** (optional — only when you submit it)
+When you deactivate the plugin, an optional form asks why. If — and only if — you fill it in and click "Submit & deactivate", the reason you select, any comment you type, and a reply email (only if you choose to provide one) are emailed to the plugin developer at akukita.es. Choosing "Skip & deactivate" sends nothing. No site URL beyond the standard email signature, and no other site or admin data, is collected.
+
+* Developer: https://akukita.es
+
 == Privacy ==
 
@@ -176 +182 @@
 
 == Changelog ==
+
+= 1.2.0 =
+
+**Headline features**
+
+* 🧙 **New: Guided setup wizard.** Activating the plugin now opens a one-screen wizard that asks for your translation engine and creates a ready-to-use chat page for you — first-run time is under a minute.
+* 👥 **New: Open chat for guests, no account required.** Switch "Who can chat" to *Anyone* in Settings and visitors join the chat by entering just a display name and a language. Per-identity rate limiting, message length limits and a honeypot field protect open chats from spam, always on.
+* 💬 **New: Optional deactivation feedback.** When you deactivate the plugin, an opt-in modal asks why. Skip it and nothing is sent. If you submit, only the reason and any text you type leave your site — no URL, no WP version, no other site data. Helps the plugin keep improving.
+
+**Improvements**
+
+* Message moderation: administrators can remove individual messages.
+* "Settings" link added to the row of the Plugins screen.
+* Clearer labels and an active-mode banner in **Settings → Who can chat**.
+* The registration / login modal now opens the WooCommerce "My Account" page automatically when WooCommerce is active. A new `akch_login_url` filter lets you point the button anywhere.
+* Uninstall now removes every plugin option, transient and user meta entry cleanly, including the new 1.2.0 keys.
+* Pages that contain the chat shortcode are now marked as uncacheable for WP Rocket, LiteSpeed, W3 Total Cache, WP Super Cache and Cloudflare. Avoids one guest's session being served from cache to a different visitor.
+* All chat input fields (textarea, language picker, registration inputs) now use a white background with dark text and explicit placeholder colours, for consistent readability across OS themes.
+
+**Bug fixes**
+
+* The first message sent in an empty room could appear twice on the sender's screen due to a race between the optimistic render and the polling loop. Fixed with a sender-side ID set and a corrected ordering of state updates.
+* The "Log in" tab in the registration modal did not respond to clicks because the JS bound to an outdated element id. Fixed.
+* The guest name gate did not initialise on guest-mode pages because the bootstrap only ran for users with positive IDs. It now runs whenever the chat widget is rendered.
+* Server-side error messages were being swallowed by the front-end API helper. Errors now surface as toasts and, if the server reports a missing name, the name gate reappears automatically with the typed text preserved.
+* The guest gate now also renders correctly inside themes that aggressively rewrite shortcode output (e.g. Divi), thanks to a fixed-position fallback overlay that attaches directly to `<body>` with a maximum z-index.
 
 = 1.1.2 =
@@ -224 +256 @@
 == Upgrade Notice ==
 
+= 1.2.0 =
+Major release: new setup wizard, open chat for guests (no account required), opt-in deactivation feedback. Your existing access settings are preserved — chat continues to require login until you explicitly enable guests in Settings → Who can chat.
+
 = 1.1.2 =
 Fixes real-time message sync for the single-room shortcode. Recommended update for everyone using [akukita_chat_room].

akukita-chat-with-ai-translation/trunk/templates/admin-settings.php

@@ -116 +116 @@
         <table class="form-table">
             <tr>
+                <th><?php esc_html_e( 'Who can chat', 'akukita-chat-with-ai-translation' ); ?></th>
+                <td>
+                    <?php $akch_mode = get_option( 'akch_access_mode', 'account' ); ?>
+                    <select name="akch_access_mode">
+                        <option value="guest" <?php selected( $akch_mode, 'guest' ); ?>>
+                            <?php esc_html_e( 'Anyone — guests can chat with just a name (no account)', 'akukita-chat-with-ai-translation' ); ?>
+                        </option>
+                        <option value="registered" <?php selected( $akch_mode, 'registered' ); ?>>
+                            <?php esc_html_e( 'Logged-in users only — visitors see nothing if not logged in', 'akukita-chat-with-ai-translation' ); ?>
+                        </option>
+                        <option value="account" <?php selected( $akch_mode, 'account' ); ?>>
+                            <?php esc_html_e( 'Require an account — visitors see a registration / login form', 'akukita-chat-with-ai-translation' ); ?>
+                        </option>
+                    </select>
+                    <p class="description">
+                        <?php if ( 'guest' === $akch_mode ) : ?>
+                            <strong style="color:#1d7d3a;">✓ <?php esc_html_e( 'Guest mode is active.', 'akukita-chat-with-ai-translation' ); ?></strong>
+                            <?php esc_html_e( 'Anyone visiting the chat page enters a display name and language and can chat immediately. Spam protection (rate limiting, length limits and a honeypot) is always on.', 'akukita-chat-with-ai-translation' ); ?>
+                        <?php elseif ( 'registered' === $akch_mode ) : ?>
+                            <strong><?php esc_html_e( 'Logged-in only.', 'akukita-chat-with-ai-translation' ); ?></strong>
+                            <?php esc_html_e( 'Visitors who are not logged in will see nothing on the chat page. Choose "Anyone" above to let guests participate.', 'akukita-chat-with-ai-translation' ); ?>
+                        <?php else : ?>
+                            <strong><?php esc_html_e( 'Account required.', 'akukita-chat-with-ai-translation' ); ?></strong>
+                            <?php esc_html_e( 'Non-logged-in visitors see a registration / login form before they can chat. To allow chatting without registering, choose "Anyone" above.', 'akukita-chat-with-ai-translation' ); ?>
+                        <?php endif; ?>
+                    </p>
+                </td>
+            </tr>
+            <tr>
                 <th><?php esc_html_e( 'Default Language', 'akukita-chat-with-ai-translation' ); ?></th>
                 <td>

akukita-chat-with-ai-translation/trunk/templates/chat-widget.php

@@ -29 +29 @@
      data-height="<?php echo esc_attr( $atts['height'] ); ?>"
      data-show-rooms="<?php echo esc_attr( $atts['show_rooms'] ); ?>">
+
+    <?php /* Guest name prompt — shown by chat.js only when akchData.needsName is true. */ ?>
+    <div id="akch-guest-gate" class="akch-guest-gate" style="display:none;">
+        <div class="akch-guest-gate-card">
+            <h3><?php echo esc_html( $i18n['welcome'] ?? 'Welcome to the Chat' ); ?></h3>
+            <p><?php echo esc_html( $i18n['welcomeSub'] ?? 'Messages are translated automatically for everyone.' ); ?></p>
+            <label for="akch-guest-name"><?php echo esc_html( $i18n['yourName'] ?? 'Your name' ); ?></label>
+            <input type="text" id="akch-guest-name" maxlength="40" autocomplete="off"
+                placeholder="<?php echo esc_attr( $i18n['yourName'] ?? 'Your name' ); ?>" />
+            <label for="akch-guest-lang"><?php echo esc_html( $i18n['yourLang'] ?? 'Your language' ); ?></label>
+            <select id="akch-guest-lang">
+                <?php foreach ( $languages as $code => $name ) : ?>
+                    <option value="<?php echo esc_attr( $code ); ?>" <?php selected( $code, $user_lang ); ?>>
+                        <?php echo esc_html( $name ); ?>
+                    </option>
+                <?php endforeach; ?>
+            </select>
+            <p class="akch-guest-gate-err" id="akch-guest-gate-err" style="display:none;color:#d63638;font-size:13px;"></p>
+            <button type="button" id="akch-guest-enter" class="akch-guest-enter">
+                <?php echo esc_html( $i18n['enterChat'] ?? 'Enter Chat' ); ?>
+            </button>
+        </div>
+    </div>
 
     <?php if ( $atts['show_rooms'] ) : ?>
@@ -101 +124 @@
                     placeholder="<?php echo esc_attr( $i18n['typeMessage'] ?? 'Type a message…' ); ?>"
                     rows="1" disabled></textarea>
+                <?php /* Honeypot: hidden from humans, bots tend to fill it. Do not remove. */ ?>
+                <input type="text" id="akch-website" name="website" tabindex="-1" autocomplete="off"
+                    aria-hidden="true" style="position:absolute;left:-9999px;top:-9999px;height:0;width:0;opacity:0;" />
                 <button id="akch-send-btn" class="akch-send-btn" disabled>
                     <svg viewBox="0 0 24 24" fill="currentColor" width="20" height="20">

akukita-chat-with-ai-translation/trunk/templates/register-modal.php

@@ -11 +11 @@
 
 $can_register  = (bool) get_option( 'users_can_register' );
-$login_url     = wp_login_url( get_permalink() );
+
+// Prefer the site's own account page (e.g. WooCommerce's /mi-cuenta) when
+// available. Fall back to wp_login_url() so the modal still works on sites
+// without WooCommerce. Site owners can override the URL with the
+// 'akch_login_url' filter.
+$akch_default_login = wp_login_url( get_permalink() );
+if ( function_exists( 'wc_get_page_permalink' ) ) {
+        $akch_wc_my_account = wc_get_page_permalink( 'myaccount' );
+        if ( $akch_wc_my_account ) {
+                $akch_default_login = $akch_wc_my_account;
+        }
+}
+/**
+ * Filters the login URL used by the chat registration modal.
+ *
+ * @since 1.2.0
+ * @param string $url The destination URL for the "Go to login page" button.
+ */
+$login_url     = apply_filters( 'akch_login_url', $akch_default_login );
 $register_url  = wp_registration_url();
 $lang_cookie   = sanitize_text_field( wp_unslash( $_COOKIE['akch_lang'] ?? '' ) );

akukita-chat-with-ai-translation/trunk/uninstall.php

@@ -4 +4 @@
  *
  * Fired when the plugin is deleted via the WordPress admin.
- * Removes all plugin tables and options from the database.
+ * Removes all plugin tables, options and transients from the database.
  *
  * IMPORTANT: WordPress executes this file directly without loading the plugin,
@@ -38 +38 @@
 
 // ── Delete plugin options ─────────────────────────────────────────────────────
+// Complete list of every option the plugin may have created across its
+// lifetime. New options must be added here so uninstall leaves no leftovers.
 $akch_options = array(
+        // Database / core settings.
         'akch_db_version',
         'akch_translation_provider',
@@ -48 +51 @@
         'akch_history_days',
         'akch_show_powered_by',
+        // Access mode (introduced in 1.2.0 with guest chat).
+        'akch_access_mode',
+        // Setup wizard (introduced in 1.2.0).
+        'akch_wizard_done',
+        'akch_chat_page_id',
+        // Review notice (introduced in 1.1.0).
+        'akch_install_date',
+        'akch_review_notice_dismissed',
 );
 
 foreach ( $akch_options as $akch_option ) {
         delete_option( $akch_option );
+        // Also remove from multisite network options just in case.
+        delete_site_option( $akch_option );
 }
+
+// ── Delete plugin transients ──────────────────────────────────────────────────
+// Rate-limit transients use a per-user key (akch_rl_*). Clean them all so
+// no rows are left behind in wp_options after deletion.
+// phpcs:ignore WordPress.DB.DirectDatabaseQuery.DirectQuery, WordPress.DB.DirectDatabaseQuery.NoCaching, WordPress.DB.PreparedSQL.NotPrepared
+$wpdb->query(
+        $wpdb->prepare(
+                "DELETE FROM {$wpdb->options} WHERE option_name LIKE %s OR option_name LIKE %s",
+                '_transient_akch_%',
+                '_transient_timeout_akch_%'
+        )
+);
+
+// User meta added by the plugin.
+// phpcs:ignore WordPress.DB.DirectDatabaseQuery.DirectQuery, WordPress.DB.DirectDatabaseQuery.NoCaching
+$wpdb->delete( $wpdb->usermeta, array( 'meta_key' => 'akch_preferred_language' ) );
 
 // phpcs:enable WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedVariableFound