Wise Mirror Configuration

=== Wise Mirror Configuration === Plugin Name: Wise Mirror Configuration Author: Waqas Anwar Requires at least: WordPress 5.8 Requires PHP: 7.4 Version: 1.0.0

Manages the complete booking and Stripe payment workflow for thewisemirror.com.

== 1. Installation ==

1. In WordPress admin, go to Plugins -> Add New -> Upload Plugin.

2. Choose wise-mirror-booking.zip and click Install Now, then Activate.

3. A new "Wise Mirror" menu item appears in the left admin sidebar.

4. Go to Wise Mirror -> Stripe Settings and enter your Stripe Test keys (Publishable Key + Secret Key). Leave Mode set to "Test Mode" while you're testing.

5. Go to Wise Mirror -> Pricing Settings and confirm/adjust your four packages (Complimentary Discovery Call, Focused Reading, Comprehensive Reading, Deep Dive Reading).

6. Go to Wise Mirror -> Booking Settings and set your working hours, enabled days, and appointment duration.

7. Go to Wise Mirror -> Email Settings and choose WordPress default mail or SMTP (Gmail). If using SMTP, generate a Gmail App Password at https://myaccount.google.com/apppasswords (do NOT use your regular Gmail password).

8. Create (or edit) the booking page in Elementor and drop in a Custom HTML / Shortcode widget containing:

   [wise_booking]

   Optionally create a separate "Booking Confirmed" page containing:

   [wise_booking_status]

   Stripe will redirect back to whichever page contains [wise_booking] after payment; that page verifies status inline. If you'd rather send customers to a dedicated confirmation page, that's what [wise_booking_status] is for — drop it on its own page and the plugin's Stripe redirect will carry the booking reference/token automatically once you enable "Success/Failed page selection" in a future update (v1.0.0 confirms on the booking page itself by default).

== 2. Connecting Stripe Webhooks (required) ==

1. In your Stripe Dashboard, go to Developers -> Webhooks -> Add endpoint.
2. Endpoint URL: copy the URL shown at the top of Wise Mirror -> Stripe Settings (looks like https://yoursite.com/?wmb_stripe_webhook=1).
3. Select these events: payment_intent.succeeded, payment_intent.payment_failed, payment_intent.canceled.
4. Save, then copy the "Signing secret" Stripe shows you.
5. Paste it into Wise Mirror -> Stripe Settings -> Webhook Signing Secret (Test Keys section for a test-mode endpoint, Live Keys section for a live-mode endpoint).
6. Repeat steps 1-5 for Live Mode once you're ready to go live.
7. The "Webhook Status" panel at the top of the Stripe Settings tab shows Connected / No events received yet for each mode, updated automatically the moment Stripe successfully delivers an event.

== 3. Folder Structure ==

wise-mirror-booking/ |-- wise-mirror-booking.php Main plugin file. Defines constants, | registers the autoloader, and boots | WMB_Loader on the 'plugins_loaded'- | adjacent init sequence. | |-- uninstall.php Runs ONLY when the plugin is deleted | (not on deactivate). Wipes tables and | uploaded images only if the admin | chose "Delete all data" under | Wise Mirror -> Permissions. | |-- includes/ Core logic, shared by admin + public. | |-- class-wmb-activator.php Runs on activation: creates DB | | tables, seeds default packages | | and settings. | |-- class-wmb-deactivator.php Runs on deactivation: clears the | | scheduled daily cron event. | |-- class-wmb-loader.php Boots every subsystem by calling | | each class's register_hooks(). | | This is the file to edit when | | wiring in a brand-new module. | |-- class-wmb-database.php Table schemas (dbDelta) + table | | name helpers. | |-- class-wmb-logger.php Writes/reads the activity log table. | |-- class-wmb-pricing.php Reads/writes the dynamic package | | list (option: wmb_packages). | |-- class-wmb-availability.php Calendar/time-slot generation from | | the admin's working-hours settings. | |-- class-wmb-uploads.php Validates and stores the booking | | photo uploads in a protected | | (non-web-accessible) folder. | |-- class-wmb-booking.php CRUD + status transitions for a | | booking row. | |-- class-wmb-payment.php CRUD + status transitions for a | | payment row. | |-- class-wmb-stripe.php Minimal Stripe REST client: create | | Payment Intent, retrieve Payment | | Intent, verify webhook signatures. | | No Composer/SDK dependency. | |-- class-wmb-webhook.php Listens for Stripe webhook POSTs | | at ?wmb_stripe_webhook=1, verifies | | the signature, and updates booking/ | | payment status + sends emails. | |-- class-wmb-ajax.php All front-end AJAX endpoints: get | | package, get available slots, | | submit booking, check payment | | status (the safeguard that stops | | the success page being reachable | | by URL alone). | |-- class-wmb-email.php Sends every customer/admin email, | | switches wp_mail between default | | and SMTP transport. | |-- class-wmb-export.php Streams Bookings/Payments as CSV. | |-- admin/ Everything shown in wp-admin. | |-- class-wmb-admin.php Registers the "Wise Mirror" menu, | | tab routing, and processes every | | settings form submission. | |-- css/admin.css, js/admin.js Admin styling + the image-preview | | toggle script. | |-- partials/ One file per tab: dashboard.php, | bookings.php, payments.php, | pricing.php, booking-settings.php, | stripe.php, email.php, | custom-code.php, logs.php, | tools.php, permissions.php. | |-- public/ Everything shown to site visitors. | |-- class-wmb-public.php Registers [wise_booking] and | | [wise_booking_status], enqueues | | front-end CSS/JS, prints the | | admin's Custom Code. | |-- partials/booking-form.php The two-column booking form + | | summary card markup. | |-- partials/status-page.php The dedicated confirmation-page | | markup (used with the second | | shortcode). | |-- css/public.css Front-end styling, built from the | | brand color palette. | |-- js/public.js Package selection, calendar/slot | | loading, form submit, Stripe | | Payment Element, and the polling | | logic that verifies payment status | | before ever showing "confirmed". | |-- templates/emails/ One HTML template per notification: | admin-notification.php, | booking-confirmation.php, | payment-successful.php, | payment-failed.php, | payment-cancelled.php. | |-- languages/ Empty; ready for a wise-mirror- | booking.pot translation file.

== 4. How payment verification works (important) ==

The booking form never marks itself "paid" on its own. Two independent checks both have to agree before a customer ever sees a confirmed booking:

1. Stripe Webhook (class-wmb-webhook.php) — the authoritative path. Stripe calls your site directly, server-to-server, the moment a payment intent succeeds/fails/cancels. The plugin verifies the request's cryptographic signature before trusting it at all.

2. Direct verification (class-wmb-ajax.php: check_payment_status) — whenever the booking page or confirmation page loads (including a raw URL visit, refresh, or a booking ID guessed from another confirmation), the plugin re-asks Stripe directly "what is the real status of this Payment Intent right now?" before showing anything. A booking + a matching random access token both have to be present and valid, so a URL can't be replayed for a different booking.

Only when one of these two checks confirms succeeded does the plugin flip the booking to Paid, send the confirmation emails, and show the success state.

== 5. Extending the plugin later ==

Future modules — Promo Codes/Discounts, additional payment gateways, a Customer Dashboard, PDF invoices, SMS notifications, REST API endpoints — can be added as new classes in includes/ (or a new includes/modules/ folder) and wired in from class-wmb-loader.php without modifying existing files. The wmb_loaded action fires once everything else is registered, specifically so a future module can hook in cleanly:

add_action( 'wmb_loaded', function () {
    // Register a new module here.
} );