NewTide Public Agent self-updates

=== NewTide Public Agent === Contributors: newtide Tags: agent, chat, ai, support, embed Requires at least: 6.4 Tested up to: 7.1 Requires PHP: 8.1 Stable tag: 0.3.3 License: GPLv2 or later License URI: https://www.gnu.org/licenses/gpl-2.0.html

Embed a published NewTide / Agent Harbor public agent on your WordPress site via a shortcode or block. A thin, secure client for the Public Agent Gateway.

== Description ==

NewTide Public Agent puts one published agent (support chat, guided browsing, sales-inquiry response) on your site. Add it with the [newtide_agent] shortcode or the NewTide Agent block.

It is a thin client. The Public Agent Gateway owns identity, safety, rate-limiting, prompt-injection defense, and cost control. The plugin renders the chat UI and relays messages through a same-origin, nonce-authenticated proxy, so the gateway credential is used server-side only and never reaches the browser.

Features

• Shortcode and Gutenberg block, with per-placement overrides (agent, greeting, label, position, accent).
• Server-side REST proxy (/wp-json/npa/v1/message) — the credential never leaves your server.
• Admin screen with tabs: General, Agent, Service Status, Tests.
• Durable usage history (metadata only — no message content), powering a status panel and a courtesy daily budget cap.
• Accessible widget: keyboard-operable, focus management, screen-reader announcements, respects reduced motion.
• Built to run fully against a deterministic mock, so it works before your gateway is live.

== Installation ==

1. Upload the plugin to wp-content/plugins/newtide-public-agent and activate it.
2. Preferred: add your gateway credential to wp-config.php: define( 'NPA_GATEWAY_KEY', 'your-key' );
3. In NewTide Agent → Agent, set the gateway base URL and choose (or enter) your published agent ID. Click Test connection.
4. Place the widget with the [newtide_agent] shortcode or the NewTide Agent block.

Until a gateway URL and credential are configured, the plugin runs against a built-in mock so you can preview the experience.

== Configuration constants ==

Define these in wp-config.php:

• NPA_GATEWAY_KEY — gateway credential for Proxy mode (preferred; never stored in the database).
• NPA_GATEWAY_BASE_URL — overrides the Proxy-mode base URL set in the admin.
• NPA_PUBLIC_KEY — publishable pk_ key for Embed mode (overrides the admin field).
• NPA_PLATFORM_URL — RisingTide host for Embed mode; defaults to production (https://ai.newtide.ai). Set to https://uat-ai.newtide.ai only for internal NewTide testing.
• NPA_HTTP_TIMEOUT — request timeout in seconds (default 15).
• NPA_LOG_ENABLED — force call logging on or off.
• NPA_FORCE_MOCK — force the mock client (useful on staging).

== External services ==

This plugin relies on external services. Which ones depends on the connection mode you choose on the Agent tab.

Proxy mode — the NewTide Public Agent Gateway

The plugin connects to the Public Agent Gateway to obtain agent replies. When a visitor sends a message, the plugin transmits, from your server:

• the visitor's message text;
• an opaque conversation ID used to thread the exchange;
• page context: the page URL, page title, and locale;
• metadata: a source tag, the plugin version, and your site host.

Data is sent only when a visitor interacts with the widget. The gateway credential is sent as an authorization header from your server and is never exposed to the browser. By default the plugin stores only call metadata (timestamps, latency, status, token counts) — never message content. Store transcripts is an explicit opt-in that persists what visitors type and what the agent replies; it is off unless you turn it on, bounded by a retention window, and purged daily.

Embed mode — RisingTide's agent widget (agent-embed.js)

In Embed mode the plugin does not proxy messages. Instead it adds a `