Bombyx Website Assistant

Bombyx Website Assistant helps visitors ask questions and get useful answers while they stay on your website. Use the site-wide chat button, add the assistant inside a page with the block or shortcode, and adjust the text, colors, and per-page block layout from WordPress. Visitor questions are answered by the assistant you manage in Bombyx Labs. Support: https://bombyxlabs.com/contact External service disclosure:

• This plugin connects to the Bombyx Labs service at https://bombyxlabs.com.
• A Bombyx Labs account and configured website assistant are required.
• Visitor questions, the sanitized current page URL, the site URL, short-lived rendered page tokens, and a pseudonymous visitor/session identifier are sent to Bombyx Labs so the assistant can answer and report first-party assistant usage to the organization owner. Rendered page tokens are scoped by widget key, action, sanitized page URL, expiration, and per-action use limits; the site scan/proxy signing secret is never rendered in public markup.
• The plugin sends privacy-safe assistant analytics events for impressions, opens, closes, active visible time, source-link clicks, feedback, lead-card lifecycle, dictation lifecycle, attachment use, and helpful opener lifecycle. These analytics events do not include visitor message text, lead field values, query strings, fragments, private page paths, private page content, passwords, tokens, payment details, or customer email/phone values.
• If helpful openers are enabled, the plugin may send sanitized page URL, redacted page title, referrer domain or same-site referrer path, active visible time on page, scroll depth, recent same-site page trail, helpful opener fields, and shown/dismissed/responded lifecycle events to Bombyx Labs to decide whether to show one helpful opener and measure whether it was used. It does not send form values, query strings, fragments, private page paths, or private page content for helpful openers. Helpful openers are supported for the site-wide bubble, not inline block embeds.
• When an administrator starts a page scan, readable public WordPress page and post content and related URLs/titles are made available to Bombyx Labs so the assistant can use them as training material.
• When readable public pages or posts are saved, published, unpublished, trashed, or deleted, the plugin sends a signed refresh event to Bombyx Labs so training material can stay current.
• The plugin does not load executable JavaScript from Bombyx Labs.
• Do not use the assistant to collect passwords, payment information, health information, or other sensitive private information.
• Support: https://bombyxlabs.com/contact
• Terms of Use: https://bombyxlabs.com/terms
• Privacy Policy: https://bombyxlabs.com/privacy

1.0.171

• Places the Assistant Settings intro copy inside the first settings card and adds better Advanced settings label spacing.

1.0.170

• Makes the Advanced settings expand/collapse control explicit for mouse and keyboard users.

1.0.169

• Improves the simplified Assistant Settings preview layout and Advanced settings expand/collapse affordance.

1.0.168

• Tightens the simplified Assistant Settings layout on narrow WordPress admin screens.

1.0.167

• Simplifies the Assistant Settings screen with grouped sections and a collapsed Advanced settings area.
• Makes the Page Scan refresh status read like a human date/time message.

1.0.166

• Clears page cache when assistant appearance settings change so logged-out visitors see updated avatars and labels.

1.0.165

• Adds custom assistant avatar uploads through the plugin settings page.

1.0.164

• Preserves review audit history when visitors clear an audit-linked thumbs-up.

1.0.163

• Lets visitors change or clear answer feedback while keeping owner review status in sync.

1.0.162

• Aligns the plugin runtime version with the published release version.
• Keeps thumbs-down feedback marked as sent when the optional detail card is closed.

1.0.160

• Adds a built-in Bombyx Face avatar for the launcher, assistant messages, and settings preview.

1.0.159

• Keeps dictation from getting stuck in the recording waveform after the visitor taps the check mark.

1.0.158

• Shows dictation progress and transcription errors inside the assistant control instead of hiding them from visitors.

1.0.157

• Keeps assistant source dropdowns inside narrow sidecar iframe embeds.

1.0.156

• Keeps mobile sidekick chat messages scrolling above a bottom-pinned composer.

1.0.155

• Makes dictation retries honor non-retryable backend errors and wait long enough for backend retry.

1.0.154

• Keeps recorded dictation available for retry when transient transcription failures occur.

1.0.153

• Opens assistant source links in the top-level page instead of inside the assistant frame.

1.0.152

• Improves visitor-facing assistant fallback wording when an answer cannot be completed reliably.

1.0.151

• Keeps existing assistant settings active unless a replacement widget key is fully valid.

1.0.150

• Keeps existing assistant settings active when a new widget key cannot be verified.

1.0.149

• Keeps existing assistant activation active during temporary verification or scan-connection check failures.

1.0.148

• Fixes WordPress admin activation status when page-scan bootstrap proof fails and retries the scan connection automatically.

1.0.147

• Signs scanned Training material list requests, keeps the scan secret out of that request body, and shows safe admin details with a short last-loaded fallback when live refresh fails.

1.0.146

• Gives assistant open/minimize visual-state fixes priority over optimized transition bundles.

1.0.145

• Forces floating launcher and panel visual states during open/minimize toggles so optimized CSS cannot leave stale opacity or transforms.

1.0.144

• Keeps the launcher visible again after minimizing in reduced-motion browsers.

1.0.143

• Keeps reduced-motion browsers from leaving an opened assistant panel visually hidden.

1.0.142

• Stabilizes first-load rendering so launcher and panel transitions are suppressed until initial layout settles.

1.0.141

• Keeps the assistant disclosure tooltip hidden until hover or focus, then shows it inside the panel without clipping.

1.0.140

• Tightens rendered-token refresh permissions and removes leftover preview footer code for directory review clarity.

1.0.139

• Addresses directory review feedback for contributors, admin assets, and rendered-token refresh checks.

1.0.138

• Hardens first-party assistant analytics delivery by avoiding duplicate open events and recording launcher-toggle closes.

1.0.137

• Adds privacy-safe first-party assistant analytics events for impressions, opens, closes, engagement, source-link clicks, feedback, lead lifecycle, dictation lifecycle, attachment use, and helpful opener lifecycle.

1.0.136

• Links the full quoted source title when an answer mentions a longer source title that starts with a known page title.

1.0.135

• Keeps inline answer source links the same color as answer text while preserving underline and hover emphasis.

1.0.134

• Links source titles directly inside assistant answer text when the response names a linked source.

1.0.133

• Removes the private plugin updater for WordPress.org directory compatibility.

1.0.132

• Preserves RFC3986-encoded site-scan signature URLs while keeping Plugin Check request URI hardening.

1.0.131

• Improves WordPress.org-readiness and security-scan compatibility.

1.0.130

• Deduplicates feedback dismissal summaries, clears old summaries when a new feedback card opens, and uses the full-height sidecar assistant at narrower desktop widths.

1.0.129

• Fixes feedback summary punctuation when the selected feedback reason already ends with punctuation.

1.0.128

• Adds feedback submission summaries and auto-dismisses the inline thumbs-down feedback card after successful submission.

1.0.127

• Hides the normal question composer while the inline thumbs-down feedback card is open.

1.0.126

• Updates the recording finish button tooltip to describe the click action directly.

1.0.125

• Keeps dictation recorder action buttons inside the composer, matches their transparent icon styling, slightly reduces dictation glyphs, and shows a spinner while transcription is in progress.

1.0.124

• Keeps the inline thumbs-down feedback card scrolled fully into view after viewport changes or expanding written feedback.

1.0.123

• Replaces the thumbs-down composer improvement prompt with an inline feedback card for quick reasons and written suggestions.

1.0.122

• Rebalances the hidden-status microphone offset so submit spacing remains equal after unavailable-microphone states.

1.0.121

• Prevents microphone status text from shifting the composer controls when dictation is unavailable.

1.0.120

• Matches the microphone-to-submit spacing to the submit-to-input-edge spacing while keeping the full-width dictation recorder.

1.0.119

• Tightens microphone/send spacing and expands active dictation into a full-width ChatGPT-like recording bar with a longer animated waveform.

1.0.118

• Matches microphone sizing with other composer icons and keeps it left of the send arrow when sending is available.

1.0.117

• Keeps the enlarged send control in sync when visitors clear, paste, or cut composer text.

1.0.116

• Keeps links clickable when answer text uses bold markdown and preserves the larger composer controls.

1.0.115

• Improves composer accessibility and renders bold markdown in answers instead of showing raw **text** markers.

1.0.114

• Polishes the assistant UI with compact source, feedback, composer, user-bubble, and footer styling.

1.0.113

• Replaces topic-aware waiting copy with calm deterministic status labels that never quote visitor message words.

1.0.112

• Blocks internal schema-shaped text from appearing in visitor chat and updates lead-form success confirmation copy.

1.0.111

• Shows pure lead handoff responses as the structured contact card without a redundant assistant text bubble.

1.0.110

• Hides the normal question composer while the lead-capture card is active and adds a dismiss control that restores normal chat flow.

1.0.109

• Centers fullscreen assistant content on wide screens and caps the chat panel at 768px while the fullscreen shell still fills the viewport.

1.0.108

• Shows pasted and uploaded images as compact thumbnails in the composer and sent user message bubble.
• Marks sent thumbnails as sending, complete, or failed without storing image previews in chat history.

1.0.107

• Prevents mobile assistant opens from programmatically focusing the question field, avoiding unwanted keyboard and viewport jumps.
• Syncs assistant height to the visual viewport so the composer stays aligned above mobile keyboards.

1.0.106

• Keeps the floating assistant open across same-site page navigation until the visitor manually minimizes or closes it.
• Applies the same open-state persistence to direct WordPress bubbles and JavaScript embed shells.

1.0.105

• Makes image attachment delivery explicit so missing uploads and image-inspection failures show clear retry messages instead of silent text-only answers.
• Returns attachment handling metadata with widget message responses.

1.0.104

• Rebuilds the floating assistant as a responsive sidecar experience: wide screens open a full-height right workspace with page offset, medium screens use a top-right overlay, and phones open fullscreen.
• Keeps inline assistants in page flow while matching the WordPress bubble and JavaScript embed shell behavior.

1.0.103

• Moves the local conversation reset into a header New chat icon with an in-widget confirmation dialog.
• Removes the footer reset link so the disclosure and Bombyx attribution have more room.
• Adds optional shared-device mode to reset local visible chat after 15 minutes of inactivity.

1.0.102

• Makes the composer + and dictation icons use the same dark icon color as the other composer controls.
• Hides the send button until the visitor has typed text, dictated text, or attached an image.

1.0.101

• Changes the attachment control to a + button and moves it to the bottom-left inside the message input area.
• Keeps send and dictation controls aligned on the right side of the input row, ChatGPT-style.

1.0.99

• Fixes WordPress proxy forwarding for image attachments by sending signed multipart widget message requests to Bombyx.
• Adds multipart signature hardening for attachment hash validation so signed WordPress message uploads are accepted securely.

1.0.98

• Adds image attachment support in the public assistant composer: upload, paste, or drag/drop JPEG/PNG/WEBP images with compact preview chips.
• Sends attachment messages as multipart requests while keeping the text-only JSON path unchanged.
• Keeps attachment handling disabled in improvement mode so feedback flow remains text-only for this MVP.

1.0.97

• During dictation active states, the recorder fully takes over the input row: the question textarea, send-arrow, and mic trigger are hidden until dictation exits.
• Keeps the timer, cancel (X), and use (check) controls pinned to the right side while the waveform area stretches to fill remaining space.
• Keeps the cancel action before the use action to match ChatGPT-style dictation flow.

1.0.95

• Swaps dictation action order so Cancel (X) appears before Use (check) during recording.
• Hides the send-arrow action while dictation is starting, recording, or transcribing, then restores it after dictation ends.

1.0.94

• Adds browser dictation controls with microphone capture, recording controls, and transcript insertion in the widget input.
• Adds a local WordPress /bombyx/v1/dictation proxy endpoint that forwards signed multipart audio uploads to Bombyx.
• Adds iframe microphone permission support and dictation token/endpoint metadata for shared widget runtime compatibility.

1.0.93

• Adds on-page opener support for #bombyx-assistant, #ask-bombyx, and data-bombyx-open-assistant so links and buttons can open the floating assistant.
• Lets JavaScript embeds send a parent bombyx:open message so iframe mode can focus the input after opening.

1.0.92 Corrected the 1.0.91 upgrade path so existing sites receive the intended Expand chat and mobile fullscreen defaults after updating. 1.0.91

• Replaces the header close action with expand/restore and minimize icon controls.
• Moves the local reset control into the footer area and adds preset compact, comfortable, expanded, and mobile fullscreen sizing.
• Keeps inline assistants in page flow so minimize restores the original inline size instead of hiding the assistant.

1.0.90

• Fixes lead-card submissions by sending the sanitized page URL with the refreshed lead token.

1.0.89

• Tightens the lead-card layout and uses generic send-details copy so the card stays compact and does not expose organization-specific CTA text.

1.0.88

• Adds the structured in-chat lead card for handoff requests and proxies lead-card submissions through WordPress.

1.0.87

• Signs site-scan start requests without sending the scan secret in the request body.

1.0.86

• Shares the public assistant UI runtime with direct JavaScript embeds so iframe embeds match the WordPress bubble experience.

1.0.85

• Hides the floating launcher while the assistant is open and lets the panel use the launcher's bottom position with a short transition.

1.0.84

• Adds varied short working-status phrases, including lightweight topic-aware wording from the visitor's question.

1.0.83

• Adds a visible working status while the assistant checks trusted site information and prepares an answer, replacing the public widget and admin preview's bare Thinking... placeholder.

1.0.82

• Re-bootstrap and retry public WordPress proxy requests once when Bombyx rejects a stale local proxy signing secret, so restored or reinstalled sites heal without manual re-verification.

1.0.81

• Sends WordPress proxy signatures in query parameters as a fallback when upstream hosts strip custom X-Bombyx-* headers, while Bombyx still validates the same HMAC before accepting status and message requests.

1.0.80

• Re-bootstrap the WordPress proxy signing secret automatically when a verified site loses it, so public status and message requests do not fail closed with a misleading disabled-site message.

1.0.79

• Lets public assistant message proxy requests wait long enough for source-heavy LLM answers that complete after the previous 20-second WordPress HTTP timeout.

1.0.78

• Refreshes short-lived assistant page tokens from an uncached WordPress REST endpoint before status and message requests, so cached pages do not send expired widget tokens.

1.0.77

• Extends the WordPress REST handler execution window for source-heavy message answers.

1.0.76

• Allows longer message proxy requests so source-heavy AI answers can complete instead of showing a temporary unavailable message.

1.0.75

• Versions bundled frontend JavaScript and CSS with the installed asset modified time so plugin updates do not keep serving stale cached assistant assets under the new plugin version.

1.0.74

• Enforces a separate 429 throttle for repeated missing or invalid rendered page token attempts before any visitor action budget is consumed.

1.0.73

• Validates rendered page tokens before consuming visitor action rate limits, posts admin bootstrap proof to Bombyx instead of sending it in the URL, and keeps restored-history feedback using the current rendered feedback token.

1.0.72

• Scopes rendered REST proxy tokens by action and sanitized page URL, separates public status from admin bootstrap status, and includes the lifecycle token when logging helpful opener dismissals.

1.0.70

• Hardens page URL rendering so query strings and sensitive paths are not emitted in assistant data attributes.

1.0.69

• Signs proxied assistant requests with the stored site scan secret when available, removes the old visibility rescue, disables helpful openers by default for new WordPress installs, and sends opaque opener tokens for shown/reply attribution.

1.0.68

• Strips query strings and fragments from page context URLs before proactive opener and message proxy requests.

1.0.67

• Adds a markup-level proactive visibility observer so accepted openers display even when cached frontend assets leave the panel hidden.

1.0.66

• Forces the assistant panel visible from the proactive prompt bubble insertion path as a final live-browser fallback.

1.0.65

• Applies an inline visible panel display state for accepted proactive openers as a fallback when browser state keeps the hidden attribute in place.

1.0.64

• Hardens proactive opener panel display by using the shared open helper and removing the hidden attribute before and after rendering.

1.0.63

• Opens the assistant panel before adding the accepted helpful opener prompt so storage interruptions cannot leave the prompt hidden.

1.0.62

• Ensures accepted helpful openers open the assistant panel immediately without focusing the input.

1.0.61

• Adds multi-trigger helpful openers for high-intent pages, scroll depth, second-page journeys, return visits, and desktop exit intent.
• Sends the saved conversation token with helpful opener checks and keeps same-session manual-open/message suppression.
• Changes the default fallback delay to 12 seconds.

1.0.60

• Lets helpful openers appear in a new browser session even when older chat history is still saved locally, while still respecting same-session interaction and cooldown rules.
• Creates a stable visitor ID before a helpful opener so replies can be attributed to the proactive event.

1.0.59

• Adds helpful openers that can gently open the assistant with one page-aware, open-ended question.
• Forwards conversation tokens, proactive opener IDs, and safe page context through the WordPress REST proxy.

1.0.58

• Repositions the AI-disclosure tooltip so it opens inward from the widget edge and stays readable instead of getting clipped off the right side.

1.0.57

• Narrows the widget send-button styling so the AI-disclosure info control stays text-sized instead of inheriting the large circular submit-button treatment.

1.0.56

• Shrinks the public AI-disclosure info icon so it matches the disclosure text better and keeps its hover/focus state visually stable while the tooltip is open.

1.0.55

• Adds an always-visible AI disclosure with a hover/focus tooltip in the public assistant widget.

1.0.54

• Reuses one parsed DOM while preparing scan headings, links, and tables for more efficient structured Brain ingestion.

1.0.53

• Sends richer structured page content for Bombyx Brain site scans, including rendered content, raw content, blocks, headings, links, tables, excerpts, and stronger content hashes.

1.0.52

• Makes block alignment move the inline assistant within the available page/editor width instead of only changing hidden root margins.

1.0.51

• Polishes the block sidebar controls with full-width fields, clearer value readouts, and better spacing.

1.0.50

• Improves spacing and grouping for the block sidebar layout and design controls.

1.0.49

• Makes block width and padding overrides win against theme layout styles on the frontend and in the editor preview.

1.0.48

• Uses native block sidebar controls for the assistant layout and design overrides so the editor works across more WordPress versions.

1.0.47

• Adds page/post block controls for inline assistant width, alignment, padding, minimum height, corner style, and core color overrides.

1.0.46

• Adds the block editor dependency metadata used by the page/post design controls.

1.0.45

• Shows Bombyx's specific feedback guidance when an answer-improvement suggestion is too short.

1.0.44

• Scans public WordPress pages and posts by default, removes the old 10-item manual scan cap, and keeps private or password-protected content out of Page Scan.

1.0.43

• Keeps the turn-on message scoped to verified keys whose assistant is unpublished, while using setup-review copy for other verified-but-blocked states.

1.0.42

• Clarifies the verified-key-but-unpublished state and links directly to the Bombyx Labs turn-on section.

1.0.41

• Adds automatic signed refresh events for changed public WordPress pages and updates Page Scan copy to explain automatic refreshing.

1.0.40

• Keeps submitted thumbs-down improvement suggestions visible in the visitor's chat transcript.

1.0.39

• Keeps the Sources dropdown visible when an answer sits near the bottom of an inline assistant.

1.0.38

• Condenses answer feedback to thumb icons, moves source links into a Sources dropdown, and lets visitors optionally type an improvement after a thumbs-down.

1.0.37

• Adds the public local-reset control and confirmation flow to the live admin preview.

1.0.36

• Lets the live admin preview use the saved widget key when testing the assistant from the settings screen.

1.0.35

• Links scanned Training material page names directly to their WordPress pages and removes the separate Open page link.

1.0.34

• Shows scanned WordPress Training materials on the Page Scan tab, including excluded pages and Bombyx Labs management links.

1.0.33

• Moves the public WordPress page scan controls into their own Page Scan tab next to Assistant Settings.

1.0.32

• Keeps related-page links in restored chat history after reloads or navigation.
• Routes assistant answer and related-page link clicks through current-tab navigation.

1.0.31

• Opens assistant answer and related-page links in the current tab so browser environments that block new tabs still navigate reliably.

1.0.30

• Preserves generated site-scan credentials and last scan request status when WordPress sanitizes plugin settings.

1.0.29

• Shows related Bombyx source pages as clickable links under assistant answers when available.

1.0.28

• Starts Bombyx page scans after WordPress has finished saving scan credentials, avoiding a first-scan timing failure.

1.0.27

• Adds a signed public-page scan API and an admin action to send readable WordPress page content to Bombyx as assistant training material.
• Turns URLs and Markdown-style links in assistant answers into clickable links that open safely in a new tab.

1.0.26

• Adds a right-side settings preview with the floating launcher, so launcher text, color, font size, and padding changes are visible before saving.

1.0.25

• Stores organization details returned by Bombyx when a widget key is verified, so the activated status can name and link the owning organization.

1.0.24

• Improves the Key Activation screen after a key is verified, including organization-linked status, clearer setup links, and a more reliable Verify button.

1.0.23

• Shows real release notes in the plugin details Changelog tab instead of a placeholder.

1.0.22

• Marks compatibility with WordPress 6.9.4 and simplifies the public plugin description.

1.0.21

• Improves installed-plugin compatibility reporting when the current version is active.

1.0.20

• Improves installed-plugin upgrade handling for future releases.

1.0.19

• Replaces the browser alert for clearing chat history with an inline confirmation popover.

1.0.18

• Adds public chat history clearing, improves restored-history scrolling, uses saved settings in the editor preview, and simplifies the settings shortcode/disclosure display.

1.0.17

• Adds an explicit block editor asset version so WordPress loads the latest editor preview script after plugin updates.

1.0.16

• Simplifies the settings screen copy and keeps key activation guidance only where it is needed.
• Adds main-menu submenus for Assistant Settings and Key Activation, with Key Activation shown after Assistant Settings.
• Simplifies the editor block so it always inserts an inline assistant and no longer offers widget-key or bubble display overrides.
• Shows an inline assistant preview in the editor instead of a text-only placeholder.

1.0.15

• Adds a Key Activation tab with a hidden-by-default widget key, Show control, Verify action, activation status messaging, and a setup warning when no verified key is available.
• Adds a Settings shortcut link on the WordPress Plugins screen.
• Removes the duplicate Settings submenu entry because the plugin already has its own main admin menu item.

1.0.14

• Persists the visible chat transcript for the same visitor and widget across page navigation and refreshes.
• Lets inline page embeds size to their current chat content instead of reserving a tall empty message area.

1.0.13

• Adds launcher font-size and padding settings for the floating bubble.
• Makes the visitor question box two lines tall by default and changes the send control to an up-arrow icon button.

1.0.12

• Adds plugin settings for the launcher label, chat title, first welcome message, and question placeholder.
• Changes the visitor question field from a one-line input to an auto-growing multiline field.

1.0.11

• Updates service-provided footer handling for website assistants.

1.0.10

• Moves public assistant attribution decisions to the Bombyx service status response instead of a local WordPress setting.

1.0.9

• Improves formatted answer rendering for responses that mix an intro line with bullet lists.

1.0.8

• Adds a copyable shortcode row to settings, makes answer feedback optional, and restyles feedback controls as subtle inline actions.

1.0.7

• Formats assistant answers as readable paragraphs and bullet lists in the bundled WordPress UI.

1.0.6

• Adds accent text color control, direct hex color entry, live settings preview, and a top-level WordPress admin menu.

1.0.5

• Clarifies public answer feedback controls with an explanatory prompt and friendlier button labels.

1.0.4

• Keeps source references internal so public assistant visitors see only the answer and feedback controls.

1.0.3

• Adds simple appearance settings, an optional site-wide bubble, and linked Bombyx Labs attribution.

1.0.2

• Adds an inline chat box display mode for the block and shortcode.

1.0.1

• Improves the frontend assistant panel with a close control, loading state, live-region updates, and clearer feedback status handling.

1.0.0

• Initial WordPress.org-ready plugin with settings, block, shortcode, local UI assets, and Bombyx API proxy.