=== Dreamanual Toolkit ===
Contributors: wuyifa001
Tags: toolbox, modules, ai-optimizer, seo, smtp
Requires at least: 6.4
Tested up to: 7.0
Requires PHP: 7.4
Stable tag: 1.2.2
License: GPL-2.0+
License URI: https://www.gnu.org/licenses/gpl-2.0.html

Modular WordPress toolbox consolidating micro-plugins into one. Each module toggles independently; disabled modules add zero overhead.

== Description ==

Dreamanual Toolkit gathers small single-purpose WordPress features - back-to-top button, maintenance mode, featured image tools, SMTP mail, content visibility, AI tag generation and more - into standalone modules under one plugin. Each module can be enabled or disabled independently; disabled modules load no code and register no hooks, so there is zero overhead.

Modules included:

* AI Optimizer - AI-powered tag generation with batch processing and multiple AI model support
* Content Visibility - per-category content visibility with per-channel hiding and role bypass
* Role Manager - fine-grained WordPress role and capability editing
* Site Enhance - back-to-top button, maintenance mode, featured image filters, default featured image, quick-edit excerpt, SMTP mail
* Site Optimize - 16 site optimization toggles plus Speculative Loading
* Search Push - auto-submits post links to Baidu and Bing on publish/update

Security features:

* API keys and SMTP passwords are AES-256-CBC encrypted with a key derived from AUTH_KEY + SECURE_AUTH_KEY
* Every AJAX endpoint uses check_ajax_referer + current_user_can double verification
* Front-end uses Vanilla JS with CSS BEM naming

== External Services ==

This plugin optionally connects to third-party services when the corresponding modules are enabled. All connections are initiated by the site admin and require explicitly configured credentials.

= AI Optimizer =
Sends post content (post title and body text) to your configured AI provider's API for tag and excerpt generation. Data is sent only when the admin clicks "Generate" or runs batch processing, and only if the module is enabled and an API key is provided.

Supported providers:

* DeepSeek - https://api.deepseek.com
  Terms of Service: https://platform.deepseek.com/policies/terms
  Privacy Policy: https://platform.deepseek.com/policies/privacy

* OpenAI - https://api.openai.com
  Terms of Service: https://openai.com/policies/terms-of-use
  Privacy Policy: https://openai.com/policies/privacy-policy

* Anthropic (Claude) - https://api.anthropic.com
  Terms of Service: https://www.anthropic.com/legal/terms
  Privacy Policy: https://www.anthropic.com/legal/privacy

* Kimi / Moonshot AI - https://api.moonshot.cn
  Terms of Service: https://kimi.moonshot.cn/user/agreement/modeluse
  Privacy Policy: https://kimi.moonshot.cn/user/agreement/userprivacy

= SMTP Mail (Site Enhance) =
Connects to your own SMTP server to send emails. SMTP host, port, credentials, and encryption are fully configured by the site admin. The plugin does not collect or send any data to third parties; all email is routed through the admin's own mail server.

= Search Push =
Submits post URLs to search engine indexing APIs when a post is published or updated. Requires site-specific API tokens configured by the site admin. No data is sent unless the module is enabled and tokens are provided.

* Baidu Search Resource Platform - http://data.zz.baidu.com
  Terms of Service: https://www.baidu.com/duty/
  Privacy Policy: https://www.baidu.com/duty/

* Bing Webmaster Tools - https://www.bing.com/webmasters
  Terms of Service: https://www.microsoft.com/en-us/legal/intellectualproperty/copyright/default.aspx
  Privacy Policy: https://privacy.microsoft.com/en-us/privacystatement

== Installation ==

1. Upload the dreamanual-toolkit folder to /wp-content/plugins/
2. Activate Dreamanual Toolkit on the Plugins page
3. Go to DM Toolkit - Module Management and enable the modules you need

== Frequently Asked Questions ==

= Does this plugin slow down my site? =

No. Disabled modules load no code and register no hooks, so there is zero overhead from unused features.

= Are API keys stored securely? =

Yes. API keys and SMTP passwords are encrypted with AES-256-CBC using a key derived from your wp-config.php AUTH_KEY and SECURE_AUTH_KEY.

== Changelog ==

= 1.2.2 =
* Fixed invalid Terms of Service and Privacy Policy URLs in readme
* Fixed update_option return value check in AI Optimizer module

= 1.2.1 =
* Replaced inline styles/scripts with proper wp_enqueue calls
* Added Terms of Service and Privacy Policy links for all external services
* Removed unnecessary load_plugin_textdomain() call

= 1.2.0 =
* Back-to-top button: SVG arrow icon, icon color customization with live preview
* All settings pages: save button disabled until form is modified
* Prepared for WordPress.org: .pot template, external service declarations, English description

= 1.1.0 =
* Site Enhance: SMTP password sanitization hardening
* Plugin Check compliance fixes across all modules
* Minor asset and styling refinements

= 1.0.0 =
* Initial release with 6 modules

== Upgrade Notice ==

= 1.2.2 =
Fixed broken external service documentation links and update_option check.

= 1.2.1 =
WordPress.org review compliance: enqueued assets, external service docs, removed deprecated function.

= 1.2.0 =
New back-to-top icon, smart save button behavior, WordPress.org release ready.

= 1.1.0 =
Compliance and security fixes. Recommended upgrade.
