' . esc_html__( 'Prefer wp-config.php constants or an IAM role. Database credentials are encrypted with WordPress salts and are never displayed after saving.', 'ai-chat-for-amazon-bedrock' ) . '
' . esc_html__( 'Supports environment variables, ECS or EKS task roles, and EC2 instance roles, so no long-lived AWS keys are stored in WordPress.', 'ai-chat-for-amazon-bedrock' ) . '
' . esc_html__( 'Streaming uses one authenticated POST request per message and falls back to a buffered response automatically.', 'ai-chat-for-amazon-bedrock' ) . '
';
} else {
echo '
' . esc_html__( 'This server cannot stream because the PHP cURL extension is unavailable. Buffered responses will be used.', 'ai-chat-for-amazon-bedrock' ) . '
';
}
}
public function governance_section_callback() {
echo '
' . esc_html__( 'Apply an Amazon Bedrock guardrail and cap daily requests. Counters store request and token totals only.', 'ai-chat-for-amazon-bedrock' ) . '
';
}
public function guardrail_id_render() {
$this->text_input( 'guardrail_id', '', 200 );
echo '
' . esc_html__( 'Optional. Applies an existing Amazon Bedrock guardrail to every request.', 'ai-chat-for-amazon-bedrock' ) . '
';
}
public function guardrail_version_render() {
$this->text_input( 'guardrail_version', 'DRAFT', 20 );
echo '
' . esc_html__( 'Use DRAFT or a published numeric version.', 'ai-chat-for-amazon-bedrock' ) . '
';
}
public function daily_request_limit_render() {
$value = absint( $this->option( 'daily_request_limit', 0 ) );
echo '';
echo '
' . esc_html__( 'Maximum Bedrock requests per day for the whole site. Use 0 for no plugin-side limit. This is not a billing guarantee; configure AWS Budgets as well.', 'ai-chat-for-amazon-bedrock' ) . '
';
}
public function knowledge_section_callback() {
echo '
' . esc_html__( 'Ground answers in your own content. Retrieved passages are passed to the model as reference data, never as instructions, and only published content is used.', 'ai-chat-for-amazon-bedrock' ) . '
';
}
public function enable_site_context_render() {
$checked = ! empty( $this->option( 'enable_site_context', false ) );
echo '';
echo '
' . esc_html__( 'Uses the built-in WordPress search. Password-protected, private and draft content is excluded.', 'ai-chat-for-amazon-bedrock' ) . '
';
}
public function context_results_render() {
$value = absint( $this->option( 'context_results', 3 ) );
echo '';
echo '
' . esc_html__( 'More passages improve grounding but increase input tokens and cost.', 'ai-chat-for-amazon-bedrock' ) . '
';
}
public function knowledge_base_id_render() {
$this->text_input( 'knowledge_base_id', '', 64 );
echo '
' . esc_html__( 'Optional. Queries an existing Amazon Bedrock knowledge base with the Retrieve API. Requires bedrock:Retrieve permission for that knowledge base.', 'ai-chat-for-amazon-bedrock' ) . '
';
}
public function abilities_tools_render() {
$checked = ! empty( $this->option( 'abilities_tools', false ) );
$available = AI_Chat_Bedrock_Abilities::available();
echo '';
if ( $available ) {
echo '
' . esc_html__( 'Abilities follow the same tool policy: a capability is required, permission callbacks are honored, and abilities that change data need explicit approval.', 'ai-chat-for-amazon-bedrock' ) . '
';
} else {
echo '
' . esc_html__( 'The WordPress Abilities API is not available on this site, so this option is inactive.', 'ai-chat-for-amazon-bedrock' ) . '
';
}
}
public function site_abilities_render() {
$checked = ! empty( $this->option( 'site_abilities', false ) );
$available = AI_Chat_Bedrock_Abilities::available();
echo '';
if ( $available ) {
echo '
' . esc_html__( 'Registers search, read, SEO suggestion and WooCommerce product lookup as read-only abilities, plus one write ability that creates drafts. Nothing is published, updated or deleted, and orders and customers are never exposed.', 'ai-chat-for-amazon-bedrock' ) . '
';
}
}
public function editor_assistant_render() {
$checked = ! empty( $this->option( 'editor_assistant', false ) );
echo '';
echo '
' . esc_html__( 'Improve, shorten, expand, summarize, suggest titles or translate. Suggestions are never saved automatically and require the edit_posts capability.', 'ai-chat-for-amazon-bedrock' ) . '
';
}
public function log_conversations_render() {
$checked = AI_Chat_Bedrock_Conversations::enabled();
$retention = AI_Chat_Bedrock_Conversations::retention_days();
echo ' ';
echo '';
echo '
' . esc_html__( 'Disabled by default. When enabled, chat content is stored in the database, capped at 200 recent entries, and visible to administrators. Disclose this to your visitors.', 'ai-chat-for-amazon-bedrock' ) . '
';
}
public function suggested_questions_render() {
$value = (string) $this->option( 'suggested_questions', '' );
echo '';
echo '
' . esc_html__( 'One question per line, up to four. They appear as buttons above the input so visitors know what to ask, and disappear once the conversation starts.', 'ai-chat-for-amazon-bedrock' ) . '
' . esc_html__( 'Optional. Leave a row empty to use the site-wide limit above. A visitor with several roles gets the most permissive of them, and requests are still counted per profile.', 'ai-chat-for-amazon-bedrock' ) . '
';
}
public function managed_prompt_render() {
$this->text_input( 'prompt_id', '', 2048 );
echo ' ';
echo '
' . esc_html__( 'Optional. Point at a prompt in Amazon Bedrock Prompt Management and its text replaces the system prompt above, so one prompt can be reviewed in AWS and reused by every site. The prompt must live in the same region as the chat. Leave the version empty to follow the draft.', 'ai-chat-for-amazon-bedrock' ) . '
';
printf(
/* translators: %s: comma separated list of variable names. */
esc_html__( 'These variables are sent literally because this plugin cannot resolve them: %s', 'ai-chat-for-amazon-bedrock' ),
esc_html( implode( ', ', $unresolved ) )
);
echo '
';
}
}
public function embedding_model_render() {
$choices = array( '' => __( 'Off, use keyword search only', 'ai-chat-for-amazon-bedrock' ) ) + AI_Chat_Bedrock_Embeddings::models();
$this->select( 'embedding_model_id', $choices, '' );
echo '
' . esc_html__( 'Finds content by meaning instead of shared words. It adds one embedding request per question, plus one per post while indexing. Keyword search still runs when nothing relevant is found.', 'ai-chat-for-amazon-bedrock' ) . '
';
if ( $next ) {
printf(
/* translators: %s: human readable time until the next scheduled run. */
esc_html__( 'Next background batch in %s. On a large site, run wp ai-chat-bedrock index once to finish faster.', 'ai-chat-for-amazon-bedrock' ),
esc_html( human_time_diff( time(), (int) $next ) )
);
} else {
esc_html_e( 'The background run will be scheduled on the next page load.', 'ai-chat-for-amazon-bedrock' );
}
echo '
';
}
echo '
' . esc_html__( 'Indexing runs in small batches. Editing a post marks it for re-indexing on the next run.', 'ai-chat-for-amazon-bedrock' ) . '
';
}
public function media_assistant_render() {
$checked = ! empty( $this->option( 'media_assistant', false ) );
echo '';
echo '
' . esc_html__( 'Adds a Generate alt text action to the media library and an excerpt helper for posts. Alt text needs a model that accepts images, such as Claude. Existing alt text is never replaced unless you ask.', 'ai-chat-for-amazon-bedrock' ) . '
';
}
public function model_id_render() {
$options = AI_Chat_Bedrock_Models::options();
$this->select( 'model_id', $options, AI_Chat_Bedrock_Models::DEFAULT_MODEL );
echo '
' . esc_html__( 'The list is discovered from your AWS account and region. Many current models require a cross-region inference profile ID.', 'ai-chat-for-amazon-bedrock' ) . '
' . esc_html__( 'Used only when the main model cannot answer because access was denied, the request was throttled, or Amazon Bedrock was unreachable. The reply states which model answered. Requests rejected for other reasons are never retried.', 'ai-chat-for-amazon-bedrock' ) . '
';
}
public function max_tokens_render() {
$value = $this->option( 'max_tokens', 1000 );
echo '';
}
public function temperature_render() {
$value = $this->option( 'temperature', 0.7 );
echo '';
}
public function system_prompt_render() {
echo '';
}
public function chat_title_render() {
$this->text_input( 'chat_title', 'Chat with AI', 120 );
}
public function welcome_message_render() {
$this->text_input( 'welcome_message', 'Hello! How can I help you today?', 500 );
}
public function allow_public_chat_render() {
$checked = ! empty( $this->option( 'allow_public_chat', false ) );
echo '';
echo '
' . esc_html__( 'Disabled by default. Enabling this can incur AWS charges even with rate limiting.', 'ai-chat-for-amazon-bedrock' ) . '
';
}
public function rate_limit_render() {
$value = $this->option( 'rate_limit_per_minute', 5 );
echo '';
}
public function popup_site_wide_render() {
$checked = ! empty( $this->option( 'popup_site_wide', false ) );
echo '';
$profiles = AI_Chat_Bedrock_Profiles::choices();
echo ' ';
echo '
' . esc_html__( 'Pages that already contain the chat block or shortcode are left unchanged. Use a profile with guest access if visitors should be able to chat.', 'ai-chat-for-amazon-bedrock' ) . '
';
}
public function debug_mode_render() {
$checked = 'on' === $this->option( 'debug_mode', 'off' );
echo '';
}
public function validate_settings( $input ) {
$input = is_array( $input ) ? $input : array();
$current = get_option( 'ai_chat_bedrock_settings', array() );
$current = is_array( $current ) ? $current : array();
$output = array();
// A tab only submits its own fields, so remember which keys it owns.
$submitted = isset( $input['_aicfab_fields'] ) ? (array) $input['_aicfab_fields'] : array();
$submitted = array_filter( array_map( 'sanitize_key', $submitted ) );
unset( $input['_aicfab_fields'] );
$regions = AI_Chat_Bedrock_Models::regions();
$region = isset( $input['aws_region'] ) ? sanitize_key( $input['aws_region'] ) : 'us-east-1';
$model = isset( $input['model_id'] ) ? sanitize_text_field( $input['model_id'] ) : AI_Chat_Bedrock_Models::DEFAULT_MODEL;
$output['aws_region'] = isset( $regions[ $region ] ) ? $region : 'us-east-1';
$output['model_id'] = AI_Chat_Bedrock_Models::is_valid_id( $model ) ? $model : AI_Chat_Bedrock_Models::DEFAULT_MODEL;
$fallback = isset( $input['fallback_model_id'] ) ? sanitize_text_field( $input['fallback_model_id'] ) : '';
if ( '' !== $fallback && ( ! AI_Chat_Bedrock_Models::is_valid_id( $fallback ) || $fallback === $output['model_id'] ) ) {
add_settings_error( 'ai_chat_bedrock_settings', 'fallback_model_id', __( 'The fallback model must be a valid model that differs from the main model; it was cleared.', 'ai-chat-for-amazon-bedrock' ) );
$fallback = '';
}
$output['fallback_model_id'] = $fallback;
if ( ! AI_Chat_Bedrock_Models::is_valid_id( $model ) ) {
add_settings_error( 'ai_chat_bedrock_settings', 'model_id', __( 'The submitted model ID was not valid; the default model was kept.', 'ai-chat-for-amazon-bedrock' ) );
}
if ( isset( $current['aws_region'] ) && $current['aws_region'] !== $output['aws_region'] ) {
AI_Chat_Bedrock_Models::flush_cache();
}
foreach ( array( 'aws_access_key', 'aws_secret_key', 'aws_session_token' ) as $key ) {
$new_value = isset( $input[ $key ] ) ? trim( sanitize_text_field( $input[ $key ] ) ) : '';
if ( '' === $new_value ) {
$output[ $key ] = isset( $current[ $key ] ) ? $current[ $key ] : '';
continue;
}
$encrypted = AI_Chat_Bedrock_Security::encrypt_secret( $new_value );
if ( '' === $encrypted ) {
add_settings_error( 'ai_chat_bedrock_settings', 'credential_encryption', __( 'The credential could not be encrypted; the existing value was preserved.', 'ai-chat-for-amazon-bedrock' ) );
$output[ $key ] = isset( $current[ $key ] ) ? $current[ $key ] : '';
} else {
$output[ $key ] = $encrypted;
}
}
$output['max_tokens'] = max( 100, min( 4000, isset( $input['max_tokens'] ) ? absint( $input['max_tokens'] ) : 1000 ) );
$output['temperature'] = max( 0, min( 1, isset( $input['temperature'] ) ? (float) $input['temperature'] : 0.7 ) );
$output['system_prompt'] = isset( $input['system_prompt'] ) ? AI_Chat_Bedrock_Security::string_substr( sanitize_textarea_field( $input['system_prompt'] ), 0, 8000 ) : '';
$output['chat_title'] = isset( $input['chat_title'] ) ? sanitize_text_field( $input['chat_title'] ) : 'Chat with AI';
$output['welcome_message'] = isset( $input['welcome_message'] ) ? sanitize_text_field( $input['welcome_message'] ) : 'Hello! How can I help you today?';
$output['suggested_questions'] = isset( $input['suggested_questions'] ) ? AI_Chat_Bedrock_Chat_Request::sanitize_suggestions( $input['suggested_questions'] ) : '';
$output['allow_public_chat'] = ! empty( $input['allow_public_chat'] );
$output['rate_limit_per_minute'] = max( 1, min( 60, isset( $input['rate_limit_per_minute'] ) ? absint( $input['rate_limit_per_minute'] ) : 5 ) );
if ( in_array( 'role_limits', $submitted, true ) || isset( $input['role_limits'] ) ) {
// Stored separately from the settings blob so role changes cannot bloat it.
AI_Chat_Bedrock_Rate_Limits::save( isset( $input['role_limits'] ) ? (array) $input['role_limits'] : array() );
}
unset( $output['role_limits'] );
$output['aws_use_role_credentials'] = ! empty( $input['aws_use_role_credentials'] );
$output['enable_streaming'] = empty( $input['enable_streaming'] ) ? 'off' : 'on';
$output['debug_mode'] = ! empty( $input['debug_mode'] ) ? 'on' : 'off';
$output['popup_site_wide'] = ! empty( $input['popup_site_wide'] );
$output['popup_profile'] = isset( $input['popup_profile'] ) ? AI_Chat_Bedrock_Profiles::sanitize_key( $input['popup_profile'] ) : '';
$guardrail_id = isset( $input['guardrail_id'] ) ? trim( sanitize_text_field( $input['guardrail_id'] ) ) : '';
$output['guardrail_id'] = preg_match( '#^[A-Za-z0-9._:/-]{0,200}$#', $guardrail_id ) ? $guardrail_id : '';
if ( '' !== $guardrail_id && '' === $output['guardrail_id'] ) {
add_settings_error( 'ai_chat_bedrock_settings', 'guardrail_id', __( 'The guardrail identifier contained unsupported characters and was cleared.', 'ai-chat-for-amazon-bedrock' ) );
}
$guardrail_version = isset( $input['guardrail_version'] ) ? strtoupper( trim( sanitize_text_field( $input['guardrail_version'] ) ) ) : 'DRAFT';
$output['guardrail_version'] = preg_match( '/^(?:DRAFT|[0-9]{1,10})$/', $guardrail_version ) ? $guardrail_version : 'DRAFT';
$output['daily_request_limit'] = min( 100000, isset( $input['daily_request_limit'] ) ? absint( $input['daily_request_limit'] ) : 0 );
$output['enable_site_context'] = ! empty( $input['enable_site_context'] );
$output['context_results'] = max( 1, min( 8, isset( $input['context_results'] ) ? absint( $input['context_results'] ) : 3 ) );
$output['abilities_tools'] = ! empty( $input['abilities_tools'] );
$output['site_abilities'] = ! empty( $input['site_abilities'] );
$output['editor_assistant'] = ! empty( $input['editor_assistant'] );
$output['log_conversations'] = ! empty( $input['log_conversations'] );
$output['media_assistant'] = ! empty( $input['media_assistant'] );
$embedding = isset( $input['embedding_model_id'] ) ? sanitize_text_field( $input['embedding_model_id'] ) : '';
$known = AI_Chat_Bedrock_Embeddings::models();
if ( '' !== $embedding && ! isset( $known[ $embedding ] ) ) {
add_settings_error( 'ai_chat_bedrock_settings', 'embedding_model_id', __( 'That embedding model is not supported; semantic search was left off.', 'ai-chat-for-amazon-bedrock' ) );
$embedding = '';
}
$output['embedding_model_id'] = $embedding;
$output['embedding_background'] = ! empty( $input['embedding_background'] );
$prompt_id = isset( $input['prompt_id'] ) ? trim( sanitize_text_field( $input['prompt_id'] ) ) : '';
if ( '' !== $prompt_id && ! preg_match( '#^[A-Za-z0-9:._/-]{1,2048}$#', $prompt_id ) ) {
add_settings_error( 'ai_chat_bedrock_settings', 'prompt_id', __( 'The managed prompt identifier contained unsupported characters and was cleared.', 'ai-chat-for-amazon-bedrock' ) );
$prompt_id = '';
}
$output['prompt_id'] = $prompt_id;
$prompt_version = isset( $input['prompt_version'] ) ? strtoupper( trim( sanitize_text_field( $input['prompt_version'] ) ) ) : '';
$output['prompt_version'] = preg_match( '/^(?:DRAFT|[0-9]{1,10})$/', $prompt_version ) ? $prompt_version : '';
if ( class_exists( 'AI_Chat_Bedrock_Prompts' ) ) {
// The cache key includes the identifier and version, so clear both the old and new entries.
AI_Chat_Bedrock_Prompts::flush( $current );
AI_Chat_Bedrock_Prompts::flush( $output );
}
$retention_days = isset( $input['log_retention_days'] ) ? absint( $input['log_retention_days'] ) : AI_Chat_Bedrock_Conversations::DEFAULT_DAYS;
$output['log_retention_days'] = max( 1, min( AI_Chat_Bedrock_Conversations::MAX_DAYS, $retention_days ) );
update_option( AI_Chat_Bedrock_Conversations::OPTION_ENABLED, $output['log_conversations'], false );
update_option( AI_Chat_Bedrock_Conversations::OPTION_RETENTION, $output['log_retention_days'], false );
update_option( 'ai_chat_bedrock_site_abilities', $output['site_abilities'], false );
$knowledge_base = isset( $input['knowledge_base_id'] ) ? trim( sanitize_text_field( $input['knowledge_base_id'] ) ) : '';
if ( '' === $knowledge_base || preg_match( '/^[A-Za-z0-9]{1,64}$/', $knowledge_base ) ) {
$output['knowledge_base_id'] = $knowledge_base;
} else {
$output['knowledge_base_id'] = '';
add_settings_error( 'ai_chat_bedrock_settings', 'knowledge_base_id', __( 'The knowledge base ID must be alphanumeric; the value was cleared.', 'ai-chat-for-amazon-bedrock' ) );
}
if ( class_exists( 'AI_Chat_Bedrock_AWS_Credentials' ) ) {
AI_Chat_Bedrock_AWS_Credentials::flush_cache();
}
/*
* Preserve settings owned by tabs that were not part of this submission.
*
* If the field list is missing, for example because a cached form was submitted,
* fall back to the keys that were actually posted. Losing unrelated settings is
* worse than ignoring a cleared checkbox in that rare case.
*/
if ( empty( $submitted ) && ! empty( $current ) ) {
$submitted = array_filter( array_map( 'sanitize_key', array_keys( $input ) ) );
}
if ( ! empty( $submitted ) ) {
$merged = $current;
foreach ( $submitted as $key ) {
if ( array_key_exists( $key, $output ) ) {
$merged[ $key ] = $output[ $key ];
}
}
foreach ( array( 'aws_access_key', 'aws_secret_key', 'aws_session_token', 'enable_streaming', 'log_retention_days', 'popup_profile', 'guardrail_version' ) as $paired ) {
if ( in_array( $paired, $submitted, true ) && array_key_exists( $paired, $output ) ) {
$merged[ $paired ] = $output[ $paired ];
}
}
$output = $merged;
}
return $output;
}
private function is_plugin_screen( $hook_suffix ) {
return false !== strpos( (string) $hook_suffix, $this->plugin_name );
}
const CHECKBOX_FIELDS = array(
'embedding_background',
'abilities_tools',
'allow_public_chat',
'aws_use_role_credentials',
'debug_mode',
'editor_assistant',
'enable_site_context',
'enable_streaming',
'log_conversations',
'media_assistant',
'popup_site_wide',
'site_abilities',
);
/**
* DOM id used to tie a settings row title to its control.
*
* @param string $key Setting key.
* @return string
*/
public static function control_id( $key ) {
return 'aicfab_field_' . sanitize_key( (string) $key );
}
private function field( $id, $title, $callback, $section ) {
$pages = array(
'aicfab_aws' => 'aicfab_tab_aws',
'aicfab_model' => 'aicfab_tab_model',
'aicfab_governance' => 'aicfab_tab_governance',
'aicfab_knowledge' => 'aicfab_tab_knowledge',
'aicfab_chat' => 'aicfab_tab_chat',
);
$page = isset( $pages[ $section ] ) ? $pages[ $section ] : 'aicfab_tab_chat';
/*
* Associate the row title with the control so screen readers announce a name.
* Checkbox fields already carry their own inline label and would be read twice.
*/
$args = in_array( $id, self::CHECKBOX_FIELDS, true ) ? array() : array( 'label_for' => self::control_id( $id ) );
add_settings_field( $id, $title, array( $this, $callback ), $page, $section, $args );
self::$tab_fields[ $page ][] = $id;
}
/**
* Settings tabs and the fields each one owns.
*
* @return array
*/
public static function tabs() {
return array(
'aws' => array(
'page' => 'aicfab_tab_aws',
'label' => __( 'AWS', 'ai-chat-for-amazon-bedrock' ),
),
'model' => array(
'page' => 'aicfab_tab_model',
'label' => __( 'Model', 'ai-chat-for-amazon-bedrock' ),
),
'chat' => array(
'page' => 'aicfab_tab_chat',
'label' => __( 'Chat', 'ai-chat-for-amazon-bedrock' ),
),
'knowledge' => array(
'page' => 'aicfab_tab_knowledge',
'label' => __( 'Grounding', 'ai-chat-for-amazon-bedrock' ),
),
'governance' => array(
'page' => 'aicfab_tab_governance',
'label' => __( 'Safety and spend', 'ai-chat-for-amazon-bedrock' ),
),
);
}
/**
* Field identifiers registered for one tab page.
*
* @param string $page Tab page slug.
* @return array
*/
public static function fields_for_page( $page ) {
return isset( self::$tab_fields[ $page ] ) ? self::$tab_fields[ $page ] : array();
}
private function option( $key, $fallback = '' ) {
$options = get_option( 'ai_chat_bedrock_settings', array() );
return isset( $options[ $key ] ) ? $options[ $key ] : $fallback;
}
private function text_input( $key, $fallback, $maxlength ) {
echo '';
}
private function credential_input( $key, $password ) {
$constants = array(
'aws_access_key' => 'AI_CHAT_BEDROCK_AWS_ACCESS_KEY',
'aws_secret_key' => 'AI_CHAT_BEDROCK_AWS_SECRET_KEY',
'aws_session_token' => 'AI_CHAT_BEDROCK_AWS_SESSION_TOKEN',
);
$configured = ( isset( $constants[ $key ] ) && defined( $constants[ $key ] ) ) || '' !== $this->option( $key, '' );
echo '';
}
private function select( $key, $values, $fallback ) {
$current = $this->option( $key, $fallback );
echo '';
}
}