=== RAG Sitemap Chatbot ===
Contributors: mesvrwp
Tags: chatbot, rag, ai, sitemap, llms
Requires at least: 5.8
Tested up to: 7.1
Requires PHP: 7.4
Stable tag: 1.7.149
License: GPLv2 or later
License URI: https://www.gnu.org/licenses/gpl-2.0.html

Turn the WordPress content you already organized into a human- and AI-readable RAG Sitemap in one click—without embeddings or a vector database.

== Description ==

Your WordPress posts, pages, categories, titles, and descriptions already form a knowledge base. [RAG Sitemap](https://ragsitemap.com/en/) turns it into a plain-text map. [RAG Chatbot](https://ragsitemap.com/en/rag-chatbot/) navigates that map to find relevant site content and sends it to your chosen AI for an answer—without embeddings or a vector database.

= What makes RAG Sitemap different =

* **Long-term running cost can be $0.** The plugin adds no fee. Gemini Flash Lite's free API quota can handle roughly 50 to 100 replies per day.
* **No vector database.** It uses your titles and categories as the retrieval path, without embeddings or a second index.
* **Built for lightweight models.** Tested on 3B- and 8B-class models, its hierarchy narrows each choice from subject to category to post.
* **Bring your own AI.** Use your own key with supported providers, including Google AI Studio, Mistral, and OpenRouter, or connect private vLLM.
* **Local conversation history.** History stays in the visitor's browser. Chat requests send selected messages and history to the chosen provider; the plugin developer does not receive them.
* **Visible and editable.** Open the TXT map under uploads to see and improve what the chatbot navigates.
* **Design with an AI chat.** Export `Design.md`, describe a look in ChatGPT, Claude, or Gemini, then import the JSON. Twelve presets and responsive previews are included.

= What's included in Free =

* One-click RAG Sitemap generation for Posts, Pages, WooCommerce products, and custom post types
* Full chatbot UI with twelve presets, quick replies, live thinking, and responsive preview
* Theme export/import and a custom system prompt
* Every supported provider with your own key, including private vLLM endpoints
* Dashboard Playground, with no plugin message limit, trial period, or token markup; provider terms, limits, and charges apply

= What Premium adds =

The separately installed Premium add-on adds content selection and grouping, visitor image upload, source memory, richer Agentic RAG, provider failover, and multilingual subdirectory sites. Premium is a one-time purchase with lifetime updates; the Agency plan covers ten sites.

= External Services =

After provider setup, a connection test or chatbot message contacts that provider. Requests may include credentials, messages and enabled history, prompts, relevant sitemap or page content, page URLs, model settings, and HTTP metadata. Provider policies, limits, and charges apply.

= Providers with larger free tiers =

* Google: API https://generativelanguage.googleapis.com/ Privacy https://policies.google.com/privacy Terms https://policies.google.com/terms
* Cloudflare: API https://api.cloudflare.com/ Privacy https://www.cloudflare.com/privacypolicy/ Terms https://www.cloudflare.com/website-terms/
* Mistral AI: API https://api.mistral.ai/ Privacy https://legal.mistral.ai/terms/privacy-policy Terms https://legal.mistral.ai/terms/commercial-terms-of-service

= Other providers and gateways =

* OpenAI: API https://api.openai.com/ Privacy https://openai.com/policies/privacy-policy/ Terms https://openai.com/policies/service-terms/
* Anthropic: API https://api.anthropic.com/ Privacy https://www.anthropic.com/legal/privacy Terms https://www.anthropic.com/legal/commercial-terms
* Groq: API https://api.groq.com/ Privacy https://groq.com/privacy-policy/ Terms https://groq.com/terms-of-use/
* Cerebras: API https://api.cerebras.ai/ Privacy https://cloud.cerebras.ai/privacy Terms https://cloud.cerebras.ai/terms
* xAI: API https://api.x.ai/ Privacy https://x.ai/legal/privacy-policy Terms https://x.ai/legal/terms-of-service
* Vercel: API https://ai-gateway.vercel.sh/ Privacy https://vercel.com/legal/privacy-policy Terms https://vercel.com/legal/terms
* OpenRouter: API https://openrouter.ai/api/ Privacy https://openrouter.ai/privacy Terms https://openrouter.ai/terms
* Custom vLLM endpoint: supplied and controlled by the administrator; review its operator's policies.

= Google Fonts =

Selecting a Google Font makes browsers request Google files, disclosing IP addresses, headers, and requested URLs. Local/system fonts avoid this. Policies: https://policies.google.com/privacy and https://policies.google.com/terms

= Remote media URLs =

Browsers request administrator-configured image or `.lottie` URLs from their hosts, disclosing IP addresses, headers, and requested URLs. Lottie runtime is local.

= Freemius Hosted Checkout =

The Upgrade page neither loads its SDK nor contacts Freemius automatically. A purchase click opens Hosted Checkout, which may collect purchase, billing, device, and transaction data. Policies: https://freemius.com/privacy/ and https://freemius.com/terms/

= Privacy =

The plugin adds suggested text to **Settings > Privacy**. Credentials are stored in the WordPress database and encrypted with AES-256-CBC when PHP OpenSSL is available.

Conversation content stays in browser local storage until reset or cleared. A session ID and active queue waiter remain in session storage until the browser session ends.

The server-supplied visitor IP is used locally only for request rate limiting. Automatic rate-limit state uses a site-salted HMAC fingerprint in a WordPress transient with a 60-second expiration; the raw IP is not stored in the transient. Rate-limit warning logs contain neither the IP address nor its fingerprint, and this local rate limit sends neither identifier to the developer or a third party. Site owners must disclose enabled services, sent data, and retention.

= Bundled Libraries and Source Code =

* Marked source: https://github.com/markedjs/marked/tree/v18.0.6
* DOMPurify source: https://github.com/cure53/DOMPurify/tree/3.4.12
* dotLottie source: https://github.com/LottieFiles/dotlottie-web/tree/a853dba
* dotLottie WebAssembly source release: https://github.com/LottieFiles/dotlottie-web/tree/a853dba

License and rebuild details are under `assets/vendor/`.

== Installation ==

1. Install and activate **RAG Sitemap Chatbot**.
2. In **Quick Start > RAG Sitemap**, keep or adjust default sources, then click **Save Settings and Generate Sitemap**.
3. In **API & Routing**, add a provider, model, and credentials; select the Default API Profile.
4. Save Quick Start, test in **Dashboard > Playground**, then customize and enable the floating button.

== Frequently Asked Questions ==

= Does Free require Premium or include AI credits? =

No add-on is required; provider credits are not included. 401 usually means invalid credentials or endpoint. 429 means rate, quota, or billing limits; Retry cannot bypass them.

= What content and language does Free map? =

Published, public, non-password-protected Pages and Posts are selected by default. Adjust sources if needed; regenerate after content changes.

= Why is the chatbot missing on the front end? =

Test Playground, enable the Floating Button, clear caches, and ensure security or cache tools allow the plugin's REST requests.

== Screenshots ==

1. Compare chatbot theme presets.
2. Show live thinking and quick replies.
3. Preview light and dark chatbot styles.
4. Generate the Main-language RAG Sitemap.
5. Customize and preview Chatbot UI.
6. Add provider cards and credentials.
7. Select primary RAG API routes.

== Changelog ==

= 1.7.149 =
* Set the floating button to opt-in by default and refreshed the public product description.

= 1.7.148 =
* Corrected the Free privacy disclosure to describe local rate limiting without Premium-only IP blocking.
