=== YoMorph: Build and Customize Your WordPress Site with AI ===
Contributors: yomorph
Tags: ai, woocommerce, page builder, customize, no-code
Requires at least: 6.6
Tested up to: 7.1
Requires PHP: 7.4
Stable tag: 0.2.1
License: GPLv2 or later
License URI: https://www.gnu.org/licenses/gpl-2.0.html

Build and customize your WordPress site by describing what you want in your own words. No need to know code or hire a developer.

== Description ==

https://www.youtube.com/watch?v=cCKU2i47mE0

YoMorph lets anyone change how their website looks and works by describing it in plain words:

* "Add a Black Friday banner with a countdown to the end of our sale"
* "Create a contact page with a form and a map"
* "Give my shop a Christmas look for December"
* "Show how much more customers need to spend to get free shipping"

The assistant looks at your site first and asks follow-up questions when something is unclear. When it writes a feature you can preview it privately (only you see it) before anything changes on your live site.

**You stay in control**

* Nothing goes live until you review and approve it. A simple summary explains every change; the generated code is available if you want to look at it.
* Every feature can be switched on or off from the "My changes" panel, and every version is kept so you can roll back.
* If a feature ever causes an error, it is switched off automatically and you are told why.
* The YoMorph screen itself never runs your features, so you can always open it and switch one off.

**Where the features live**

Features are stored as PHP files in `wp-content/yomorph/` (or in the uploads folder on hosts where the content folder is read-only). They survive plugin updates. They only run while the plugin is active, and they are deleted when the plugin is deleted. Deleting the folder by hand is always safe: your site keeps working, just without the features.

**Privacy**

* YoMorph is used only by administrators. It collects nothing from your visitors, adds no tracking and sets no cookies for them.
* When you chat, your messages and the parts of your site the assistant looks at are sent to YoMorph Cloud (see "External services" below). YoMorph Cloud passes them to the AI model and does not store them.
* Conversations and features are stored in your own site and deleted when you delete the plugin.
* Images you attach in the chat are saved in your uploads folder and sent to the AI service. If a change you apply uses one, it joins your Media Library. If not, it is deleted after a week or when you delete the chat.
* YoMorph adds a suggested text to Settings → Privacy → Policy guide for your site's privacy policy.
* If a feature would collect personal data, set cookies or embed outside content, the assistant tells you, because you may need visitor consent and a line in your privacy policy.

**Security**

Everything the AI service returns is treated as untrusted and checked on your site before it is used:

* Only administrators can use YoMorph, and every request is protected by WordPress's security checks (capabilities and nonces).
* Generated code is checked before it ever runs: syntax errors, clashes with existing functions, and dangerous functions (running programs on the server, running code built at run time, unpacking hidden code, changing file permissions) are refused.
* New code first runs only as a private preview for the administrator who asked for it. Nothing reaches visitors until it is approved.
* While a preview runs, the page can't contact other websites or send email, so unapproved code can't send your data anywhere.
* After a change goes live, the site is checked; if it breaks, the change is switched off and rolled back automatically.
* Page content is filtered with WordPress's own HTML filter, and only a fixed list of settings can be changed.
* If your site turns off file changes (`DISALLOW_FILE_MODS`), YoMorph does not write code at all and offers content and setting changes only.
* Connections to YoMorph Cloud use HTTPS, and your site is identified with its own key.

**Source code**

YoMorph is free software under the GPL (see license.txt). The admin screen in the build folder is compiled from React source code, which is included in the source folder with instructions to build it.

YoMorph Cloud's full privacy policy explains what it processes, why, for how long, and your rights under the GDPR (link below).

== External services ==

This plugin needs an AI model to work. It connects to the following services:

**YoMorph Cloud (default)**
Used to run the AI assistant with prepaid credits. Every time you send a message, the conversation, a description of your request, and the parts of your site the assistant looked at (theme files, page HTML, settings, the list of installed plugins, and error log lines with email and IP addresses removed when you report a problem), plus any design picture you attach and a picture of the private preview used to check a proposed change, are sent to the service, which forwards them to an AI provider and returns the reply. Your site address is sent when you connect your site. When you apply a change, the plugin tells the service how many changes went live and their general kind from a fixed list (for example "shop" or "design"), never the change itself.
Terms of service: https://yomorph.com/terms — Privacy policy: https://yomorph.com/privacy

**Updates from yomorph.com**
A few times a day WordPress checks for a newer version of YoMorph at https://yomorph.com/download/latest.json, and downloads it from there when you update. Nothing about your site is sent: the check and the download use a generic "YoMorph" user agent instead of WordPress's default one, which includes your site address. The site is served by Cloudflare.

**WordPress.org Plugin Directory**
When the assistant looks for an existing plugin that could solve your request, it searches the public WordPress.org plugin directory (api.wordpress.org). Only the search words are sent.

== Frequently Asked Questions ==

= What does it cost? =

Every new site gets free credits to try YoMorph, with no sign-up and no card. After that you buy credit packs; each request uses credits according to its size, and you see your balance in the plugin. Credits don't expire. If a change can't be applied because of a technical problem, its credits are given back automatically.

= How do I get help? =

Email support@yomorph.com. For anything else, write to hello@yomorph.com.

= Something went wrong and my site is broken. What do I do? =

Features that cause errors are switched off automatically, and you are told which one and why.

If something still looks wrong, open **YoMorph → My changes** and switch the feature off, or roll it back to an earlier version. The YoMorph screen never runs your features, so it keeps working even when another page does not.

If you cannot get into the dashboard at all, switch off the features with your hosting file manager or FTP. Start with the first option and only go further if it does not help:

1. **Turn on safe mode in wp-config.php.** Add `define( 'YOMORPH_SAFE_MODE', true );` to `wp-config.php`. All features stop running, but the plugin stays active, so you can open the YoMorph screen and switch off only the one that caused the problem. Remove the line again afterwards. Nothing is deleted.
2. **Rename (or delete) the plugin folder** `wp-content/plugins/yomorph`. WordPress switches the plugin off, and features only run while it is active. They are kept: rename the folder back (or reinstall the plugin) and reactivate it to bring them back.
3. **Delete the features folder** `wp-content/yomorph` (or `wp-content/uploads/yomorph` on hosts with a read-only content folder). This removes the features for good. Your site keeps working, just without them.

= What happens when I deactivate the plugin? =

Your features stop running but are kept, so they come back when you reactivate it.

= Who can use it? =

Only administrators. On a multisite network, only super admins, because YoMorph adds code that runs for the whole network.

== Screenshots ==

1. Describe the change you want in your own words. YoMorph suggests ideas for the season.
2. See the change on your own site first. Only you can see the preview.
3. Check what will go live, then apply it.
4. A whole new look in one request: Christmas on the homepage.
5. Every change in one place. Switch it off or delete it anytime.

== Changelog ==

= 0.2.1 =
* Safety and polish
* Stronger safety checks on the code the assistant writes
* While a preview runs, the page can't contact other sites or send email
* Error messages appear in your site's language
* Updates work on hosts where wp-content is a link, and never send your site address
* The Help link goes to support@yomorph.com

= 0.2.0 =
* Test release of the release pipeline
* Updates come from yomorph.com, with automatic updates on by default
* Previews start by themselves
* The YoMorph logo on the Updates screen

= 0.1.0 =
* First release.
