=== Oryon SEO ===
Contributors: seoryon
Tags: seo, ai, content, publishing, automation
Requires at least: 5.6
Tested up to: 7.0
Requires PHP: 7.4
Stable tag: 1.0.0
License: GPLv2 or later
License URI: https://www.gnu.org/licenses/gpl-2.0.html

One-click connection between your WordPress site and Oryon. Publish AI-generated, competitor-aware SEO articles straight from your Oryon dashboard.

== Description ==

Oryon writes SEO articles using top-3 SERP outlines, your brand voice, and contextual internal links to your existing posts, then publishes them to your WordPress site automatically (or with a 24-hour review window).

This plugin handles the boring part: pairing your WordPress site with Oryon. You paste a one-time token from your Oryon dashboard, and the plugin generates a dedicated Application Password under your user, scoped specifically to Oryon. No copy-pasting credentials. No third-party password managers.

= What this plugin does =

* Generates a fresh Application Password just for Oryon, named so you can identify it under Users → Profile.
* Sends `home_url()`, your username, and the new password to Oryon's secure pairing endpoint, gated by a single-use token that expires in 30 minutes.
* Stores connection state locally so you can see and revoke the link at any time.
* On Disconnect, revokes the Application Password it created (a local WordPress core call), so the credential Oryon stored stops working immediately.

= What this plugin does NOT do =

* It does not run any cron and doesn't read or modify your posts. All publishing is initiated by Oryon's servers using the standard WordPress REST API.
* It does not phone home for telemetry. The ONLY outbound request this plugin ever makes is the pairing POST, when you click Connect. Disconnect is local-only: it revokes the Application Password via WordPress core and clears local state, with no outbound call.

== External services ==

This plugin is an interface to **Oryon** (https://app.seoryon.com), a paid SEO content service operated by Oryon Systems LLC. The plugin is a pairing tool and is not functional without an Oryon account.

It transmits the following to `https://app.seoryon.com` exactly once, when you click Connect:

* The site URL (`home_url()`).
* Your WordPress username.
* A newly-generated Application Password (created by WordPress core for this purpose; the plugin never stores it locally).
* The pairing token you pasted.

Oryon stores the credential encrypted at rest and uses it solely to publish and update articles on your site via the standard WordPress REST API. No other data is collected or transmitted by this plugin.

* Terms of Service: https://app.seoryon.com/terms
* Privacy Policy: https://app.seoryon.com/privacy

Disconnect at any time from Settings → Oryon SEO (this revokes the Application Password), or revoke it yourself from Users → Profile → Application Passwords. Either action immediately stops publishing.

== Installation ==

1. Upload the `oryon-seo` folder to `/wp-content/plugins/`, or install via the Plugins screen.
2. Activate the plugin.
3. Go to **Settings → Oryon SEO**.
4. In Oryon, open Settings → Integrations → WordPress and click **Connect via plugin** to mint a token.
5. Paste the token into the plugin and click Connect.

== Frequently Asked Questions ==

= Can I use this without the Oryon dashboard? =

No. The plugin is a pairing tool. Oryon is what writes and schedules content. Sign up at https://app.seoryon.com.

= How do I revoke access? =

Either Disconnect from Settings → Oryon SEO (which revokes the Application Password the plugin created), or delete the "Oryon SEO" entry from Users → Profile → Application Passwords. Both immediately invalidate the credentials Oryon stored.

= What happens if I delete the plugin without disconnecting? =

The pairing credential stays valid: it is an Application Password stored by WordPress core, not by the plugin. Oryon can still publish until you revoke it. Disconnect from Settings → Oryon SEO before deleting the plugin, or remove the "Oryon SEO" entry from Users → Profile → Application Passwords at any time, even after the plugin is gone.

= Why does the plugin need Application Passwords enabled? =

Oryon publishes via the standard WordPress REST API, which requires authentication. Application Passwords are the WP-recommended way to grant scoped, revocable access without sharing your real password.

= Does the plugin work with WP < 5.6? =

No. Application Passwords were added in WordPress 5.6. Please upgrade.

== Changelog ==

= 1.0.0 =
* Initial release: token-based pairing, automatic Application Password creation, revoke-on-disconnect.

== Upgrade Notice ==

= 1.0.0 =
First release.
