=== StylistPro Try-On ===
Contributors: stylistpro
Requires at least: 6.5
Tested up to: 7.1
Requires PHP: 8.1
Stable tag: 1.2.3
WC requires at least: 8.0
WC tested up to: 11.1
License: GPLv2 or later

Virtual try-on for WooCommerce via StylistPro Connect. The browser never sees the API key.

== Description ==

Proxies try-on requests through WordPress REST (logged-in nonce). HMAC request signing matches `packages/contracts/src/connect/signing-vectors.json`.

Admin lives under WooCommerce → StylistPro with tabs for connection, products, storefront bootstrap, and sync status. Enabled products sync to the StylistPro display shop (hourly light sync + on-save full upsert).

== Security notes ==

* The API key lives only in WordPress options and is sent server-to-server. Use an HTTPS API base URL in production.
* Only administrators (manage_options) can change the connection; shop managers can manage products.
* Shopper uploads are checked by magic bytes (JPEG/PNG/WebP, max 8 MB).

== Changelog ==

= 1.2.3 =
* Settings → Connection shows a 4-step onboarding box with links to the StylistPro business panel.
* After the try-on profile is saved, «بازگشت به فروشگاه» returns to the same-site product, or the shop page. The try-on control is highlighted with a short tip.

= 1.2.0 =
* Security: generic upstream errors to the browser (no internal hosts), redirects not followed, image content-type allowlist + nosniff, signed result tokens stripped, connection editable by admins only, base URL validation.
* Shoppers: photo validated before any write, no profile write on invalid input, per-user rate limits, 30 s shopper cache, "temporarily unavailable" state.
* WooCommerce: HPOS + cart/checkout blocks compatibility declared, Requires Plugins header, notice when WooCommerce is missing.
* Sync: never-synced products are no longer archived on every save; archive runs once; unpublish archive deferred to cron.
* i18n: compiled fa_IR .mo shipped; admin UI is now Persian.
* Accessibility: modal focus trap and focus restore.
* uninstall.php removes the plugin's options, meta, transients and cron events.


= 1.1.0 =
* WooCommerce submenu with Connection / Products / Storefront / Status tabs.
* Product data tab for try-on enable + audience.
* Catalog sync (bootstrap, upsert, archive, hourly batch) via Connect catalog API.

= 1.0.0 =
* Initial Connect v1 plugin.
