wp-bnb/CLAUDE.md

# WordPress BnB Manager

**Author:** Marco Graetsch
**Author URL:** <https://src.bundespruefstelle.ch/magdev>
**Author Email:** <magdev3.0@gmail.com>
**Repository URL:** <https://src.bundespruefstelle.ch/magdev/wp-bnb>
**Issues URL:** <https://src.bundespruefstelle.ch/magdev/wp-bnb/issues>

## Project Overview

This plugin enables Wordpress to act as an full management system for BnB hosts. It can handle multiple buildings with multiple rooms each, the booking of the rooms and the guests data required for renting a room. It also can handle different prices for short-, mid- and longterm rentings, configurable by the owner.  In future versions - but not yet - there could be an optional possibility to pay the bookings upfront employing parts of WooCommerce, especially the payment and invoicing functions. Each Booking can have multiple additional Service options with either a price tag or can be marked as included.

### Features

- Full data definition for the owner of the business
- Custom Post-types for Buildings and Rooms, while Rooms must be assigned to a building.
- Multiple pricing classes for short- (days), mid- (weeks) and longterm (months) bookings.
- Fully integrated using Gutenberg-Blocks, Widgets and Shortcodes
- Integrates with CF7 for forms (more Form plugins my follow in future versions)

#### Frontend

- Advanced Search and filtering for rooms, taking availability into account
- **Gutenberg-Blocks:** Building, Room, Booking
- **Sidebar Widgets:** Similar Rooms, Buildings
- **Shortcodes:** Similar Rooms, Buildings

#### Administration

- Dedicated pages for management of buildings, rooms, guests and bookings
- Dashboard with relevant statistics

### Key Fact: 100% AI-Generated

This project is proudly **"vibe-coded"** using Claude.AI - the entire codebase was created through AI assistance.

## Temporary Roadmap

**Note for AI Assistants:** Clean this section after the specific features are done or new releases are made. Effective changes are tracked in `CHANGELOG.md`. Do not add completed versions here - document them in the Session History section at the end of this file.

### Known Bugs

No known bugs at this time.

## Technical Stack

- **Language:** PHP 8.3.x
- **PHP-Standards:** PSR-4
- **Framework:** Latest WordPress Plugin API
- **E-commerce:** WooCommerce 10.0+ (optional, not used yet)
- **Template Engine:** Twig 3.0 (via Composer)
- **Wordpress Form-Plugin:** CF7 (for Bookings et al)
- **Wordpress Base Theme** twentytwentyfive
- **Frontend:** Vanilla JavaScript
- **Styling:** Custom CSS
- **Dependency Management:** Composer
- **Internationalization:** WordPress i18n (.pot/.po/.mo files)
- **Canonical Plugin Name:** `wp-bnb`
- **License Client:** `magdev/wc-licensed-product-client`

### Security Best Practices

- All user inputs are sanitized (integers for quantities/prices)
- Nonce verification on form submissions
- Output escaping in templates (`esc_attr`, `esc_html`, `esc_js`)
- Direct file access prevention via `ABSPATH` check
- XSS-safe DOM construction in JavaScript (no `innerHTML` with user data)
- SQL injection prevention using `$wpdb->prepare()` throughout

### Translation Ready

All user-facing strings use:

```php
__('Text to translate', 'wp-bnb')
_e('Text to translate', 'wp-bnb')
```

Text domain: `wp-bnb`

#### Translation Template

- Base `.pot` file created: `languages/wp-bnb.pot`
- Ready for translation to any locale
- All translatable strings properly marked with text domain

#### Available Translations

- `en_US` - English (United States) [base language - .pot template]
- `de_CH` - German (Switzerland, formal)

To compile translations to .mo files for production:

```bash
for po in languages/*.po; do msgfmt -o "${po%.po}.mo" "$po"; done
```

### Create releases

- The `vendor/` directory MUST be included in releases (Dependencies required for runtime)
- **CRITICAL**: Build `vendor/` for the MINIMUM supported PHP version, not the development version
  - Use `composer config platform.php 8.3.0` before building release packages
  - Run `composer update --no-dev --optimize-autoloader` to rebuild dependencies
- **CRITICAL**: WordPress requires plugins in a subdirectory structure
  - Run zip from the `plugins/` parent directory, NOT from within the plugin directory
  - Package must extract to `wp-bnb/` subdirectory with main file at `wp-bnb/wp-bnb.php`
  - Correct command: `cd /wp-content/plugins/ && zip -r wp-bnb/releases/wp-bnb-x.x.x.zip wp-bnb ...`
  - Wrong: Running zip from inside the plugin directory creates files at root level
- **CRITICAL**: Exclude symlinks explicitly - zip follows symlinks by default
  - Always use `-x "wp-bnb/wp-core" -x "wp-bnb/wp-core/*" -x "wp-bnb/wp-plugins" -x "wp-bnb/wp-plugins/*"` to exclude development symlinks
  - Otherwise the entire linked directory contents will be included in the package
- Exclusion patterns must match the relative path structure used in zip command
- Always verify the package structure with `unzip -l` before distribution
  - Check all files are prefixed with `wp-bnb/`
  - Verify main file is at `wp-bnb/wp-bnb.php`
  - Check for duplicate entries (indicates multiple builds in same archive)
- Test installation on the minimum supported PHP version before final deployment
- Releases are stored in `releases/` including checksums
- Track release changes in a single `CHANGELOG.md` file
- Bump the version number to either bugfix release versions or on new features minor release versions
- **CRITICAL**: WordPress reads version from TWO places - BOTH must be updated:
  1. Plugin header comment `Version: x.x.x` - WordPress uses THIS for admin display
  2. PHP constant `WP_BNB_VERSION` (line ~28) - Used internally by the plugin
  - If only the constant is updated, WordPress will show the old version in Plugins list

**Important Git Notes:**

- Default branch while development is `dev`
- Create releases from branch `main` after merging branch `dev`
- Tags should use format `vX.X.X` (e.g., `v1.1.22`), start with v0.0.1
- Use annotated tags (`-a`) not lightweight tags
- Commit messages should follow the established format with Claude Code attribution
- `.claude/settings.local.json` changes are typically local-only (stash before rebasing)

**CRITICAL - Release Workflow:**

On every new version, ALWAYS execute this complete workflow:

```bash
# 1. Commit changes to dev branch
git add <files>
git commit -m "Description of changes (vX.X.X)"

# 2. Merge dev to main
git checkout main
git merge dev --no-edit

# 3. Create annotated tag
git tag -a vX.X.X -m "Version X.X.X - Brief description"

# 4. Push everything to origin
git push origin dev main vX.X.X

# 5. Switch back to dev for continued development
git checkout dev
```

Never skip any of these steps. The release is not complete until all branches and the tag are pushed to origin.

#### What Gets Released

- All plugin source files
- Compiled vendor dependencies
- Translation files (.mo compiled from .po)
- Assets (CSS, JS)
- Documentation (README, CHANGELOG, etc.)

#### What's Excluded

- Git metadata (`.git/`)
- Development files (`.vscode/`, `.claude/`, `CLAUDE.md`, `wp-core`, `wp-plugins`)
- Logs and cache files
- Previous releases
- `composer.lock` (but `vendor/` is included)

---

**For AI Assistants:**

When starting a new session on this project:

1. Read this CLAUDE.md file first
2. Semantic versioning follows the `MAJOR.MINOR.BUGFIX` pattern
3. Check git log for recent changes
4. Verify you're on the `dev` branch before making changes
5. Run `composer install` if vendor/ is missing
6. Test changes before committing
7. Follow commit message format with Claude Code attribution
8. Update this session history section with learnings
9. Never commit backup files (`*.po~`, `*.bak`, etc.) - check `git status` before committing
10. Follow markdown linting rules (see below)

Always refer to this document when starting work on this project.

### Markdown Linting Rules

When editing CLAUDE.md or other markdown files, follow these rules to avoid linting errors:

1. **MD031 - Blank lines around fenced code blocks**: Always add a blank line before and after fenced code blocks, even when they follow list items. Example of correct format:

   - **Item label**:

     (blank line here)
     \`\`\`php
     code example
     \`\`\`
     (blank line here)

2. **MD056 - Table column count**: Table separators must have matching column counts and proper spacing. Use consistent dash lengths that match column header widths.
3. **MD009 - No trailing spaces**: Remove trailing whitespace from lines
4. **MD012 - No multiple consecutive blank lines**: Use only single blank lines between sections
5. **MD040 - Fenced code blocks should have a language specified**: Always add a language identifier to code blocks (e.g., `txt`, `bash`, `php`). For shortcode examples, use `txt`.
6. **MD032 - Lists should be surrounded by blank lines**: Add a blank line before AND after list blocks, including after bold labels like `**Attributes:**`.
7. **MD034 - Bare URLs**: Wrap URLs in angle brackets (e.g., `<https://example.com>`) or use markdown link syntax `[text](url)`.
8. **Author section formatting**: Use a heading (`### Name`) instead of bold (`**Name**`) for the author name to maintain consistent document structure.

## Project Architecture

### Directory Structure

```text
wp-bnb/
├── wp-bnb.php              # Main plugin file (entry point)
├── composer.json           # Composer configuration
├── composer.lock           # Dependency lock file
├── CHANGELOG.md            # Version history
├── CLAUDE.md               # AI assistant documentation
├── PLAN.md                 # Implementation roadmap
├── README.md               # User documentation
├── .editorconfig           # Editor configuration
├── .gitignore              # Git ignore patterns
├── .gitmodules             # Git submodule configuration
├── .gitea/
│   └── workflows/
│       └── release.yml     # CI/CD release pipeline
├── src/                    # PHP source code (PSR-4: Magdev\WpBnb)
│   ├── Plugin.php          # Main plugin singleton
│   ├── Admin/              # Admin pages
│   │   ├── Calendar.php    # Availability calendar page
│   │   └── Seasons.php     # Seasons management page
│   ├── Blocks/             # Gutenberg blocks
│   │   └── BlockRegistrar.php # Block registration and rendering
│   ├── Booking/            # Booking system
│   │   ├── Availability.php # Availability checking
│   │   └── EmailNotifier.php # Email notifications
│   ├── Frontend/           # Frontend components
│   │   ├── Search.php      # Room search and AJAX handlers
│   │   ├── Shortcodes.php  # All shortcode handlers
│   │   └── Widgets/        # WordPress widgets
│   │       ├── AvailabilityCalendar.php
│   │       ├── BuildingRooms.php
│   │       └── SimilarRooms.php
│   ├── License/
│   │   └── Manager.php     # License management
│   ├── PostTypes/          # Custom post types
│   │   ├── Booking.php     # Booking post type
│   │   ├── Building.php    # Building post type
│   │   └── Room.php        # Room post type
│   ├── Pricing/            # Pricing system
│   │   ├── Calculator.php  # Price calculation
│   │   ├── PricingTier.php # Pricing tier enum
│   │   └── Season.php      # Seasonal pricing
│   ├── Integration/        # Third-party integrations
│   │   └── CF7.php         # Contact Form 7 integration
│   └── Taxonomies/         # Custom taxonomies
│       ├── Amenity.php     # Amenity taxonomy (tags)
│       └── RoomType.php    # Room type taxonomy (categories)
├── lib/                    # Git submodules
│   └── wc-licensed-product-client/  # License client library
├── vendor/                 # Composer dependencies (auto-generated)
├── assets/
│   ├── css/
│   │   ├── admin.css       # Admin styles
│   │   ├── blocks-editor.css # Gutenberg editor styles
│   │   ├── cf7-integration.css # CF7 form styles
│   │   └── frontend.css    # Frontend styles (~1250 lines)
│   └── js/
│       ├── admin.js        # Admin scripts
│       ├── blocks-editor.js # Gutenberg editor scripts
│       ├── cf7-integration.js # CF7 form scripts
│       └── frontend.js     # Frontend scripts (~825 lines)
├── templates/              # Twig templates (future)
├── languages/              # Translation files (future)
└── releases/               # Release packages (git-ignored)
```

### Implementation Details

#### Main Plugin File (`wp-bnb.php`)

- Plugin header with metadata
- Version constants: `WP_BNB_VERSION`, `WP_BNB_PATH`, `WP_BNB_URL`
- PHP 8.3+ and WordPress 6.0+ version checks
- Composer autoloader loading
- Activation/deactivation hooks

#### Plugin Class (`src/Plugin.php`)

- Singleton pattern for global access
- Twig environment initialization
- Admin menu registration (Dashboard, Settings)
- Settings page with tabs (General, License)
- Asset enqueuing (admin and frontend)
- License-gated frontend components

#### License Manager (`src/License/Manager.php`)

- Integration with `SecureLicenseClient` or `LicenseClient`
- Option storage for license key, server URL, server secret
- License validation with domain binding
- License activation with domain
- Status caching (24-hour transient)
- AJAX handlers for admin operations
- Exception handling for all license states

#### Frontend Restriction Logic

```php
// In Plugin::init_components()
if ( ! is_admin() && LicenseManager::is_license_valid() ) {
    $this->init_frontend();  // Load frontend components
}
```

Admin features always work; frontend requires valid license.

---

## Session History

### 2026-01-31 - Version 0.0.1 (Initial Setup)

**Completed:**

- Explored existing project structure (configuration files only)
- Added git submodule for `wc-licensed-product-client` at `lib/wc-licensed-product-client`
- Installed Composer dependencies (Twig 3.0, license client, Symfony HttpClient)
- Studied license client documentation and wp-fedistream implementation
- Created main plugin file `wp-bnb.php` with version checks
- Created `Plugin` singleton class with admin integration
- Created `License\Manager` with SecureLicenseClient integration
- Implemented license settings page with validation/activation buttons
- Created admin CSS and JavaScript for license management
- Created Gitea CI/CD pipeline at `.gitea/workflows/release.yml`
- Created `PLAN.md` with full implementation roadmap (10 phases)
- Created `README.md` with user documentation
- Created `CHANGELOG.md` following Keep a Changelog format
- Updated `CLAUDE.md` with architecture details

**Learnings:**

- License client requires checkout of specific tag (v0.2.2) for Composer path repository
- Relative URL in `.gitmodules` (`../wc-licensed-product-client.git`) works for Gitea hosting
- wp-fedistream pattern: `LicenseManager::is_license_valid()` guards frontend initialization
- Settings page uses tabs with nonce-protected form submission
- AJAX handlers require `check_ajax_referer()` and `current_user_can()` checks
- CI/CD workflow excludes `lib/` directory but includes `vendor/` in releases

### 2026-01-31 - Version 0.1.0 (Core Data Structures)

**Completed:**

- Created Custom Post Type: Buildings (`bnb_building`)
  - Address meta box with full address fields
  - Contact meta box with phone, email, website
  - Details meta box with rooms count, floors, year built, check-in/out times
  - Custom admin columns (city, country, room count)
  - Sortable columns and country dropdown
- Created Custom Post Type: Rooms (`bnb_room`)
  - Building relationship via meta field
  - Room details: number, floor, size, capacity, beds, bathrooms
  - Room status with color-coded badges
  - Image gallery with media library and drag-and-drop sorting
  - Building filter dropdown in admin list
  - Custom admin columns with building link
- Created Custom Taxonomy: Room Types (`bnb_room_type`)
  - Hierarchical structure with parent/child support
  - Base capacity and sort order meta fields
  - Default terms with subtypes (Standard > Single/Double/Twin, etc.)
- Created Custom Taxonomy: Amenities (`bnb_amenity`)
  - Non-hierarchical (tag-like) structure
  - Dashicon selection for visual display
  - Icon column in taxonomy list
  - Default amenities: WiFi, Parking, Breakfast, etc.
- Updated Plugin class to register post types and taxonomies
- Enhanced admin assets for post type edit screens
- Added gallery JavaScript with media library integration
- Updated activation hook to register CPTs before flushing rewrites
- Updated version to 0.1.0

**Learnings:**

- Taxonomies must be registered before post types that use them
- `show_in_menu => 'wp-bnb'` adds post types under the plugin's main menu
- Room-building relationship uses post meta, not hierarchical post types
- Gallery implementation uses `wp.media` frame with multiple selection
- Admin assets need conditional loading based on both hook suffix and post type
- Status badges use inline styles for color coding (avoiding extra CSS complexity)

### 2026-01-31 - Version 0.2.0 (Pricing System)

**Completed:**

- Created `src/Pricing/PricingTier.php` enum class
  - SHORT_TERM, MID_TERM, LONG_TERM cases
  - Labels, units, default thresholds
  - `fromNights()` for automatic tier detection
- Created `src/Pricing/Season.php` class
  - Seasonal pricing with date ranges (MM-DD format)
  - Year-spanning seasons support (e.g., Dec 20 to Jan 6)
  - Price modifier (multiplier) per season
  - Priority system for overlapping seasons
  - CRUD operations stored in wp_options
  - Default seasons: High Season, Winter Holidays, Low Season
- Created `src/Pricing/Calculator.php` class
  - Price calculation with tier detection
  - Seasonal modifier application
  - Weekend surcharge support
  - Detailed price breakdown
  - Currency formatting with symbol/suffix
- Added pricing meta box to Room post type
  - Base prices for each tier
  - Weekend surcharge field
  - Link to pricing settings
  - Price column in admin list
- Added Pricing tab to settings page
  - Configurable tier thresholds
  - Weekend days selection (checkboxes)
  - Quick view of configured seasons
- Created `src/Admin/Seasons.php` admin page
  - List view with all seasons
  - Add/Edit season forms
  - Delete with confirmation
  - Create default seasons option
  - Date formatting for display
- Updated admin.css with pricing styles
- Updated admin.js with pricing interactions
- Updated Plugin.php to register Seasons admin page
- Updated version to 0.2.0

**Learnings:**

- PHP 8.1+ enums work well for pricing tiers with methods
- Season date ranges use MM-DD format for annual recurrence
- Year-spanning seasons require special comparison logic
- Price modifiers as multipliers are more flexible than percentages
- Calculator class separates concerns from post type class
- Weekend days stored as comma-separated string in options

### 2026-01-31 - Version 0.3.0 (Booking System)

**Completed:**

- Created `src/PostTypes/Booking.php` custom post type
  - Room and guest relationship tracking
  - Check-in/check-out date management with validation
  - Status workflow (pending, confirmed, checked_in, checked_out, cancelled)
  - Auto-generated booking references (BNB-YYYY-NNNNN)
  - Four meta boxes: Room & Dates, Guest Info, Pricing, Status & Notes
  - Conflict detection prevents double-booking
  - Price calculation using existing Calculator class
  - Admin columns with room, guest, dates, nights, price, status
  - Filters by room and status
  - Status badges with color coding
- Created `src/Booking/Availability.php` class
  - Real-time availability checking via AJAX
  - Conflict detection algorithm
  - Calendar data generation for rooms and buildings
  - Utility methods for upcoming bookings, today's check-ins/outs
- Created `src/Admin/Calendar.php` admin page
  - Monthly calendar view with room/building filters
  - Color-coded booking status display
  - Month navigation (previous/next/today)
  - Click-to-edit booking functionality
  - Hover tooltips with booking details
  - Legend for status colors
- Created `src/Booking/EmailNotifier.php` class
  - Admin notification for new bookings
  - Guest confirmation email on booking confirmation
  - Cancellation emails to guest and admin
  - HTML email templates with inline styles
  - Placeholder-based template system
  - Filter hooks for customizing emails
- Updated `src/Plugin.php`
  - Registered Booking post type
  - Initialized Calendar admin page
  - Initialized EmailNotifier
  - Added AJAX handler for availability checking
  - Updated asset enqueuing for Booking screens
- Updated `assets/js/admin.js`
  - Booking form with AJAX availability checking
  - Real-time nights display
  - Price calculation and display
  - Status preview update
  - Date validation (check-out after check-in)
  - Calendar page interactivity
- Updated `assets/css/admin.css`
  - Booking info display styles
  - Availability status indicators
  - Price breakdown styles
  - Calendar grid and cell styles
  - Legend and filter styles
  - Responsive design for calendar
- Updated version to 0.3.0

**Learnings:**

- Booking conflicts use overlap detection: `A.check_in < B.check_out AND A.check_out > B.check_in`
- Excluding cancelled bookings from conflict checks allows rebooking same dates
- Guest info stored in booking meta (Phase 4 will add separate Guest CPT)
- AJAX availability check returns price calculation for immediate feedback
- Calendar displays bookings color-coded by status for quick visual overview
- HTML email templates with inline CSS for better email client compatibility
- Status transitions can trigger different email notifications via hooks
- **Release workflow** must always include: commit to dev → merge to main → create tag → push all to origin
- Git fast-forward merge works well when dev is ahead of main with no conflicts

**Released:**

- Committed: `0c601df` on dev branch
- Merged to main (fast-forward)
- Tagged: `v0.3.0`
- Pushed to origin: dev, main, v0.3.0

### 2026-01-31 - Version 0.5.0 (Additional Services)

**Completed:**

- Created Custom Taxonomy: Service Categories (`bnb_service_category`)
  - Non-hierarchical (tag-like) structure
  - Dashicon selection for visual display
  - Sort order meta field for custom ordering
  - Default categories: Food & Dining, Transportation, Wellness & Spa, Activities, Housekeeping
- Created Custom Post Type: Services (`bnb_service`)
  - Three pricing types: Included (free), Per Booking, Per Night
  - Price configuration per service
  - Service status (active/inactive)
  - Sort order for display ordering
  - Maximum quantity setting per service
  - Custom admin columns: pricing type, price, status
  - Filters by status and pricing type
  - Helper methods: `get_service_data()`, `calculate_service_price()`, `get_services_for_booking()`, `format_service_price()`
- Updated Booking post type with services integration
  - Added `SERVICES_META_KEY` constant for services storage
  - New meta box: Additional Services with checkbox selection
  - Quantity input for services with max_quantity > 1
  - Real-time per-service line total calculation
  - Services total display
  - Price breakdown now shows services cost
  - Grand total (room + services) in pricing meta box
  - Admin list price column shows total including services
  - Helper methods: `calculate_booking_services_total()`, `get_booking_services()`
- Updated `src/Plugin.php`
  - Registered ServiceCategory taxonomy
  - Registered Service post type
  - Added Service post type to asset enqueuing
  - Added i18n strings for service pricing descriptions
- Updated `assets/css/admin.css`
  - Service status badges
  - Service pricing meta box styles
  - Booking services selector styles
  - Service item with selected state
  - Quantity inputs and line totals
  - Services total summary
  - Grand total display
- Updated `assets/js/admin.js`
  - `initServicePricing()`: Toggle price row based on pricing type
  - `initBookingServices()`: Service selection with real-time price calculation
  - Quantity change handlers with min/max enforcement
  - Automatic recalculation when booking dates change
- Updated version to 0.5.0
- Updated CHANGELOG.md with Phase 5 changes
- Updated PLAN.md to mark Phase 5 complete

**Learnings:**

- Service pricing calculation depends on pricing_type: included=0, per_booking=price*qty, per_night=price*qty*nights
- Services are stored as JSON array in booking meta with service_id, quantity, price, pricing_type
- Same namespace classes can reference each other directly without use statements
- Services meta box renders before pricing meta box so services total is available
- Grand total calculation happens both on save (server-side) and on change (client-side JS)

### 2026-02-02 - Version 0.6.0 (Frontend Features)

**Completed:**

- Created `src/Frontend/Search.php` class
  - Room search with multiple filters: availability, capacity, room type, amenities, price range, building
  - AJAX endpoints: `wp_bnb_search_rooms`, `wp_bnb_get_availability`, `wp_bnb_get_calendar`, `wp_bnb_calculate_price`
  - Pagination support with configurable per_page
  - Room data formatting for JSON responses with thumbnails, pricing, amenities
  - Price range filtering using Calculator integration
  - Availability filtering using Availability class
- Created `src/Frontend/Shortcodes.php` class
  - `[bnb_buildings]` - Buildings list/grid with layout, columns, limit, orderby options
  - `[bnb_rooms]` - Rooms list/grid with building, room_type, amenities filters
  - `[bnb_room_search]` - Interactive search form with results container
  - `[bnb_building id="X"]` - Single building display with rooms
  - `[bnb_room id="X"]` - Single room display with availability form
  - Grid system with 1-4 column support
  - Sorting options: title, date, price, capacity
- Created `src/Frontend/Widgets/` directory with three widgets
  - `SimilarRooms.php` - Shows rooms from same building/room type
  - `BuildingRooms.php` - Lists all rooms in a building
  - `AvailabilityCalendar.php` - Mini calendar with booking status
  - All widgets extend `WP_Widget` with form/update/widget methods
  - Auto-detection of current building/room from page context
- Created `src/Blocks/BlockRegistrar.php` class
  - Five Gutenberg blocks: Building, Room, Room Search, Buildings List, Rooms List
  - Server-side rendering using shortcode system
  - Block editor assets (CSS/JS) enqueuing
  - Block data localization with buildings, rooms, room types, amenities
  - `render_callback` functions for each block type
- Created `assets/js/blocks-editor.js`
  - Block registration using `wp.blocks.registerBlockType`
  - InspectorControls for sidebar settings panels
  - ServerSideRender for live preview in editor
  - Attribute definitions matching shortcode parameters
- Created `assets/css/blocks-editor.css`
  - Minimal editor styling for block placeholders
  - Preview container styling
- Updated `assets/css/frontend.css` (~1250 lines)
  - CSS custom properties for theming (colors, spacing, border-radius)
  - Building and room card components
  - Search form with field groups
  - Results grid with responsive columns
  - Calendar widget with availability states (available, booked, past, today)
  - Legend styling
  - Responsive breakpoints: 480px, 768px, 1024px
- Updated `assets/js/frontend.js` (~825 lines)
  - `WpBnb` namespace with utility methods (ajax, formatDate, parseDate, debounce)
  - `SearchForm` class: form submission, date validation, results rendering, load more
  - `CalendarWidget` class: month navigation, AJAX calendar loading
  - `AvailabilityForm` class: availability checking on single room pages
  - `PriceCalculator` class: real-time price calculation with breakdown
  - XSS-safe DOM construction using textContent instead of innerHTML
- Updated `src/Plugin.php`
  - Added use statements for new frontend classes
  - `init_frontend()` initializes Search, Shortcodes, BlockRegistrar
  - `register_widgets()` method for widget registration
  - `wp_localize_script()` adds AJAX URL, nonce, i18n strings to frontend
- Updated version to 0.6.0 in both plugin header and constant
- Updated CHANGELOG.md with comprehensive v0.6.0 release notes
- Updated PLAN.md to mark Phase 6 complete

**Learnings:**

- Server-side rendered Gutenberg blocks avoid complex build processes and ensure PHP/JS output consistency
- Shortcode system works well as render backend for blocks via `render_callback`
- Widget auto-detection from page context (`is_singular()`, `get_the_ID()`) reduces configuration
- CSS custom properties enable easy theming without modifying core styles
- AJAX nonce verification requires `wp_ajax_nopriv_` for non-logged-in users in frontend search
- Calendar data from `Availability::get_calendar_data()` provides consistent format for PHP and JS rendering
- XSS prevention in JS: use `textContent` for user data, `createElement` for structure
- Frontend components require license check (`LicenseManager::is_license_valid()`) before initialization
- Block editor requires separate script handle from frontend to avoid conflicts

**Released:**

- Committed: `864b8b2` on dev branch
- Merged to main (fast-forward)
- Tagged: `v0.6.0`
- Pushed to origin: dev, main, v0.6.0

### 2026-02-03 - Bug Fixes and Enhancements

**Completed:**

- Fixed gap between settings page tabs and tab content
  - Changed `.nav-tab-wrapper` margin-bottom from 20px to 0
  - Added explicit border-bottom to create seamless connection with tab content
- Added license bypass for localhost development environments
  - Created `LicenseManager::is_localhost()` method
  - Detects: localhost, 127.0.0.1, ::1, .local/.test/.localhost/.dev/.ddev.site domains, private IP ranges
  - `is_license_valid()` now returns true for localhost environments
  - Added "Development Mode" notice on license settings page and dashboard when localhost detected
- Expanded General Settings with business owner fields
  - Added Address section: street, city, postal code, country
  - Added Contact section: email, phone, website
  - Added Social Media section: Facebook, Instagram, X (Twitter), LinkedIn, TripAdvisor
  - Updated `save_general_settings()` with proper sanitization for all new fields
- Created subtabs on Pricing settings tab
  - Three subtabs: Pricing Tiers, Weekend Days, Seasons
  - Each subtab has its own save button and focused content
  - Added CSS for subtab navigation styling
  - Seasons subtab now shows priority column and direct link to Seasons Manager
- Implemented auto-updates system
  - Created `src/License/Updater.php` class
  - Integrates with WordPress plugin update system via `pre_set_site_transient_update_plugins`
  - Provides plugin info for "View details" modal via `plugins_api` filter
  - Uses license client's `checkForUpdates()` method
  - Configurable check frequency (1-168 hours)
  - Options for notifications enabled and auto-install enabled
  - Automatic cache clearing when license settings change or after updates
- Added Updates tab to settings page
  - Enable/disable update notifications
  - Enable/disable automatic updates
  - Configurable update check frequency
  - Manual "Check for Updates" button with AJAX
  - Display of last check timestamp and current version
- Reordered admin submenu for better organization
  - Dashboard at top, Settings at bottom
  - Logical grouping: Buildings, Rooms, Bookings, Guests, Services, Calendar, Seasons
- Fixed Booking admin issues
  - Fixed auto-draft status causing type errors (check for WP_Post object)
  - Fixed guest dropdown to always load existing guests
  - Booking title now auto-generates with guest name and dates (room removed per user request)
  - Fixed booking history display on Guest edit page
- Implemented guest auto-creation from booking form
  - When new guest data is entered in booking, guest record is automatically created
  - Links booking to the new guest via guest_id meta
- Added encryption for sensitive guest data
  - ID/passport numbers encrypted using AES-256-CBC
  - Uses WordPress AUTH_KEY for encryption key derivation
  - `encrypt()` and `decrypt()` methods in Guest class
  - Backward compatible with legacy unencrypted data
  - Security notice displayed in Identification meta box
- Disabled Gutenberg block editor for form-based post types
  - Service, Guest, and Booking post types now use classic editor
  - Added `disable_block_editor()` filter to each post type class
  - Meta boxes now appear properly instead of being hidden at bottom
  - Form-based interfaces are more appropriate than block editor for data entry

**Files Changed:**

- `assets/css/admin.css` - Fixed tab gap, added subtab styles, booking form styles
- `assets/js/admin.js` - AJAX update check, booking form improvements, guest auto-creation
- `src/License/Manager.php` - Added `is_localhost()` method, updated `is_license_valid()`
- `src/License/Updater.php` - New file for auto-updates with configurable settings
- `src/Plugin.php` - Business owner settings, pricing subtabs, updates tab, menu reordering
- `src/PostTypes/Booking.php` - Auto-draft fixes, title generation, guest creation, disable Gutenberg
- `src/PostTypes/Guest.php` - AES-256-CBC encryption for ID numbers, disable Gutenberg
- `src/PostTypes/Service.php` - Disable Gutenberg for classic editor UI

**Learnings:**

- WordPress nav-tab styling expects tabs and content to be flush (no margin/gap)
- Localhost detection should cover common development TLDs (.local, .test, .dev, .ddev.site)
- Private IP ranges can be detected using `FILTER_FLAG_NO_PRIV_RANGE`
- WordPress plugin updates require hooking into `pre_set_site_transient_update_plugins` and `plugins_api`
- Subtabs can be implemented with query parameters and conditional rendering within a single settings callback
- URL fields should use `esc_url_raw()` for sanitization, email fields use `sanitize_email()`
- Always check if post object is valid (`$post instanceof \WP_Post`) before accessing properties - auto-draft causes issues
- AES-256-CBC encryption with random IV provides secure storage for sensitive data
- Store IV concatenated with encrypted data (IV is not secret, just needs to be unique)
- `use_block_editor_for_post_type` filter disables Gutenberg per post type
- Post types with `show_in_rest => true` get Gutenberg by default, which hides traditional meta boxes
- Form-based admin interfaces (data entry) should use classic editor, not block editor

### 2026-02-03 - Version 0.7.0 (Contact Form 7 Integration)

**Completed:**

- Created `src/Integration/CF7.php` (~750 lines)
  - Custom form tags: `[bnb_building_select]`, `[bnb_room_select]`, `[bnb_date_checkin]`, `[bnb_date_checkout]`, `[bnb_guests]`
  - Server-side validation for all custom tags
  - Availability validation in `wpcf7_before_send_mail` hook
  - Automatic booking creation on form submission via `wpcf7_mail_sent`
  - Guest record creation/linking using `find_or_create_guest()` pattern
  - Custom mail tags: `[_bnb_room_name]`, `[_bnb_building_name]`, `[_bnb_calculated_price]`, `[_bnb_nights]`, `[_bnb_booking_reference]`
  - Form type detection via CSS class `wp-bnb-booking-form`
- Created `assets/js/cf7-integration.js` (~230 lines)
  - Building-based room filtering (rooms dropdown updates when building selected)
  - Date validation (check-out after check-in, no past dates)
  - Guest capacity validation against room limits
  - AJAX availability checking with status display
  - AJAX price calculation with formatted display
  - Debounced updates to prevent excessive requests
- Created `assets/css/cf7-integration.css` (~200 lines)
  - Two-column responsive form layout
  - Availability status indicators (checking spinner, available checkmark, unavailable X)
  - Price display formatting
  - Capacity warning styling
  - Dark mode support via `prefers-color-scheme`
  - Print styles (hide interactive elements)
- Updated `src/Plugin.php`
  - Added `use Magdev\WpBnb\Integration\CF7` import
  - CF7 initialization in `init_frontend()` when WPCF7 class exists
  - CF7 assets enqueuing with localized i18n strings
- Updated `README.md` with comprehensive CF7 documentation
  - Custom form tags reference with options
  - Example booking form template
  - Example inquiry form template
  - Custom mail tags documentation

**Files Created:**

- `src/Integration/CF7.php` - Main CF7 integration class
- `assets/js/cf7-integration.js` - Frontend JavaScript
- `assets/css/cf7-integration.css` - Form styling

**Learnings:**

- CF7 custom tags registered via `wpcf7_add_form_tag()` with callback functions
- Validation filters follow pattern `wpcf7_validate_{tag_name}`
- `wpcf7_before_send_mail` can abort submission by setting `$abort` to true and adding validation error
- `wpcf7_mail_sent` fires after successful email, ideal for booking creation
- Custom mail tags via `wpcf7_special_mail_tags` filter receive submission data
- Form type detection by CSS class more reliable than checking for specific tags
- Room dropdown with `data-building` attributes enables client-side filtering
- AJAX endpoints reuse existing `wp_bnb_get_availability` and `wp_bnb_calculate_price` actions
- CF7 assets should depend on `contact-form-7` script/style handles
- Guest linking uses email as unique identifier for find-or-create pattern

**Released:**

- Committed: `28350aa` on dev branch
- Merged to main (fast-forward)
- Tagged: `v0.7.0`
- Pushed to origin: dev, main, v0.7.0