Changelog

Version 1.2.6

Released: 2026-08-08 End of Life: 2028-08-08 Compatible with: WHMCS 8.13+

• New Dedicated addon cron for periodic work (ticket auto-reply, knowledge indexing, idle conversation close, conversation archiving, and knowledge database compaction), independent of the main WHMCS cron, with per-task intervals under Settings → Behavior → Cron.
• New Scheduled archival that removes only conversations idle longer than an administrator-defined retention period (separate from a full purge of all conversations).
• New Optional isolated SQLite knowledge store under the addon storage directory when available, with automatic fallback to the WHMCS database — reduces knowledge growth pressure on the billing database.
• Improvement Cron setup prefers a PHP CLI command suitable for cPanel, DirectAdmin, and Plesk; HTTP/webcron remains an optional fallback.
• Improvement Ending a chat session (manually or after idle auto-close) starts a fresh conversation immediately instead of leaving a closed banner until the next message.
• Improvement Assistant replies speak more directly as the site owner while still refusing to invent product facts that are not present in retrieved knowledge.
• Improvement Citation links are not repeated for the same page within one conversation unless the visitor explicitly asks for the source again.
• Improvement Short follow-up questions keep product context from the previous assistant reply so retrieval stays on the same topic.
• Improvement Reply language for each turn is reinforced so mixed Arabic/English threads are less likely to answer in the wrong language.
• Improvement HTML knowledge extraction strips common navigation chrome and collapses duplicated mobile/desktop blocks so indexed content focuses on the real page (rebuild the knowledge index after upgrading).
• Improvement Failed indexing sources no longer keep the cron in a hot retry loop; knowledge compaction failures retry on a short backoff without hammering indexing errors every minute.
• Improvement Overlapping cron triggers (dedicated cron and WHMCS AfterCronJob) claim work before execution to reduce double-runs.
• Fix Duplicate page content with different URLs no longer collapses to a single indexed document — each URL is retained in the index.
• Fix Relative crawl links that produced repeated language segments in paths (for example /en/en) are normalized.
• Fix Lexical-only retrieval respects the configured result limit after version preference filtering.
• Fix After tool calls, a provider failure returns a friendly message instead of aborting without a user-visible reply.
• Fix Citation footers are stripped from history shown in the widget and from history fed back to the model, while remaining available server-side for follow-up context.
• Fix Knowledge cleanup of a secondary engine waits until sources are fully healthy (no stale or in-progress indexing, with indexed content present).
• Fix When the active knowledge engine is forced to WHMCS, leftover SQLite knowledge data can still be inspected for migration and cleanup.
• Fix Knowledge database compaction no longer fails when it runs in the same cron cycle as indexing.
• Fix Widget session reset after close recovers cleanly if the first reset attempt fails.
• Security Production packages re-ship web denial rules for the addon storage/ directory so the knowledge database file cannot be downloaded over HTTP.
• Security Guest visitors can no longer list or resume other guests’ conversations via an unverified lead-capture email — only logged-in clients use the multi-thread list; guests stay on their current session.
• Security Sales and admin JSON APIs require a valid license gate, matching the main widget API.
• Security Cron authentication prefers a request header or POST body for the secret token; query-string tokens remain a compatibility fallback only; the dedicated cron entry point is included in release integrity checks.
• Security Starting a fresh widget session retires the previous visitor session token so a stolen cookie cannot keep using the same conversation.
• Change Product surface branding refreshed to AI Copilot Suite (addon display name in WHMCS lists and the admin panel; technical module directory unchanged).
• Change Module / Build 1.2.6 · Schema 1.2.10.
• Change DOCS: Administrator documentation navigation paths updated to Addons → AI Copilot Suite.
• Change DOCS: Cron guidance updated to recommend PHP CLI for hosting control panels.

Version 1.2.3

Released: 2026-07-20 End of Life: 2028-07-20 Compatible with: WHMCS 8.13+

• New Licensing rebuilt on a signed SDK package — file-tamper detection (Ed25519 manifest signature + per-file SHA-256) runs before every license check, fail-closed
• New Version/support-window gating — when an installed build falls outside the license's support period, admins see a bilingual (English/Arabic) explanation with the last supported version and a renew-support link, generated from the server's response fields (no client-side date math)
• New License key format updated to SRV-AI-XXXXXXXXXXXXXXXX (16 characters after the prefix)
• New scripts/hash-full-addon-manifest.php — generates an addon-wide (not just SDK) unsigned integrity manifest for signing at release time
• Fix The widget's build-version identifier was only ever defined on the admin config page, so every chat request (client widget, external embed) silently reported an outdated build to the license server and could be incorrectly version-blocked — now defined consistently for every entry point
• Fix A leftover secret setting from the previous licensing system could cause a valid license to fail verification after upgrading — cleared
• Fix A forced "recheck license now" action could still reuse a stale cached license state instead of guaranteeing a fresh server check
• Fix License settings page was loading admin styles from a stale, years-old cache-busting version tag
• Security License verification is fail-closed on any file-integrity failure — a tampered install is rejected before any network call is made, so a compromised installation cannot silently keep running on a previously-cached valid license
• Security Admin "Support Updates" status display now matches the same fail-closed default used by the actual access gate, instead of defaulting to "Active" when the field is unexpectedly missing
• Change Old bundled licensing SDK and license client fully removed
• Change Existing license keys in the previous format must be reissued in the new format — no backward-compatibility shim
• Change instructions/production-export/ build script updated for the new licensing source layout

Version 1.2.0

Released: 2026-07-15 End of Life: 2028-07-15 Compatible with: WHMCS 8.13+

• New Themes tab in Appearance — five base widget designs (classic, servlayer, lagom, macos, minimal) with live mini-previews
• New Servlayer brand theme — light slate by day; navy with indigo→teal gradients, layered shadow, and pulsing launcher in dark mode
• New Theme Studio — build, save, activate, duplicate, and delete custom themes on top of any base theme
• New Dual light/dark color palettes per custom theme (edit each mode separately and save both)
• New Liquid Glass controls for the macOS base (tint, opacity, blur, saturation, border glow) with separate light and dark values
• New Theme Studio preview-background toolbar (light / dark / gradient / busy) for tuning glass effects
• New Shadow strength, solid or gradient accent colors, user-message text color, and launcher shape/size in Theme Studio
• New Open live preview on your site from Appearance (client area opens with the widget auto-shown)
• New Knowledge replies can cite sources when citation is enabled
• New Smarter retrieval — keyword/title boost before vector ranking; optional abstain when no knowledge match is found
• New Knowledge stays fresher — product and announcement changes trigger targeted reindexing (including announcement delete)
• Improvement Widget light/dark follows the visitor’s site mode, including the Lagom dark-mode switch (not only the operating-system preference)
• Improvement Shared Lagom-style dark palette across themes; macOS stays glassy on top of that palette
• Improvement macOS window chrome (traffic lights, centered title, spring open, refined Liquid Glass panel)
• Improvement Appearance admin layout uses full width; Theme Studio keeps controls and preview sticky while you edit
• Improvement Active Theme Studio themes also apply on external embed sites (same tokens as the client-area widget)
• Fix Theme card now shows as selected immediately when you click it
• Fix Theme and admin CSS/JS cache-bust versions aligned so new theme assets load after updates
• Fix macOS chat message area no longer lets page content show through the glass panel
• Fix Lagom site dark toggle correctly switches the widget to dark mode
• Fix macOS Liquid Glass dark-mode sliders apply correctly (glass no longer stays solid/flat)
• Fix Theme Studio live preview no longer breaks the floating launcher position
• Fix Custom launcher selector example updated to #srvlivehelpdesk
• Fix Cart/session Origin and host-port checks correctly accept or reject the current site host
• Fix Knowledge reindex runs when a WHMCS announcement is deleted
• Security Knowledge crawler hardened against SSRF (safe redirect handling and DNS pinning)
• Security Cart session endpoint requires WHMCS CSRF token and matching Origin/Referer
• Security SVG icon uploads and SVG icon URLs are blocked for assistants and the widget
• Security Sales AI endpoints rate-limited by IP (default 20 / 5 minutes); ticket assist and KB summarize require a logged-in client
• Security Sales API rejects cross-origin browser requests (same protection as the main chat API)
• Security Custom CSS is sanitized and scoped under #srv-aichatbot before save and output
• Security Stricter same-origin checks for browser chat requests
• Change Appearance guide rewritten for Themes and Theme Studio (Live Editor workflow removed)
• Change New screenshots for Themes, Theme Studio, and Classic / macOS / Minimal light and dark widgets
• Change Security, Sales Assist, RAG behavior, assistant icon rules, and overview key features updated for 1.2.0

Version 1.0.2

Released: 2026-06-24 End of Life: 2028-06-24 Compatible with: WHMCS 8.13+

• Fix license

Version 1.0.0

Released: 2026-06-18 End of Life: 2028-06-18 Compatible with: WHMCS 8.13+

• New First Release