v1.6.3

• "Visit plugin site" opens the documentation. The Plugin URI header pointed at the marketing integrations page, whose setup steps are written for someone wiring a static site — create the forms, put the IDs in your environment, paste the snippets and deploy. Two of those three mean nothing on WordPress, and anyone clicking the link from the Plugins screen has already installed the plugin. It now opens https://sendbeam.io/docs/wordpress.
• Fixed: the block's asset version was stuck at 1.6.1. block.json and index.asset.php carry the version WordPress uses to decide whether the editor may reuse a cached copy of the block script, and the 1.6.2 bump missed both — so a site updating to 1.6.2 could have gone on serving the old script. tests/smoke.php now reads all five places a version lives, plus the changelog heading in readme.txt, and fails if any of them disagree.

Installing: download sendbeam.zip below and upload it under Plugins → Add New → Upload Plugin.

v1.6.2

Housekeeping before submission to the WordPress Plugin Directory. No change to what the plugin does.

• Passes the full WordPress Coding Standards and the Plugin Check tool with nothing reported. Every function is documented; the four wp_mail_* filters the mail relay re-fires are annotated as core's own rather than unprefixed hooks of ours; one parameter named after a reserved word was renamed.
• phpcs.xml.dist records the project's ruleset and its single deliberate exception: blocks/form/index.asset.php keeps the filename WordPress itself looks for beside index.js.
• The distributed zip no longer carries the repository's development files.
• CI now runs Plugin Check against the built plugin rather than the checkout, so it sees the same tree wordpress.org will.

Verified on a clean WordPress 7.1 install with WP_DEBUG on: activation, all six tabs, the block, the three shortcodes and uninstall, with nothing written to the debug log. Uninstall removed all fourteen options and the user meta the plugin had created.

Installing: download sendbeam.zip below and upload it under Plugins -> Add New -> Upload Plugin.

v1.6.1

Install by downloading sendbeam.zip below, then Plugins → Add New → Upload Plugin in WordPress.

Requires WordPress 6.1+ and PHP 7.4+. Documentation: https://sendbeam.io/docs/wordpress

Hardening

Messages from an embedded form are now only accepted from the origin serving that form. The listener previously matched on message contents alone, and a form ID is public — so another frame on the same page could resize an embed, or fire the sendbeam:submitted event that sites wire to analytics goals, producing conversions that never happened.

Since 1.5.x

• A Docs tab in the settings screen: shortcodes with copy buttons, what each API key permission is for, the developer hooks, and links to the full documentation.
• Uninstall removes everything the plugin stored — five options, four transients and a user-meta key it had been leaving behind, on multisite too. The API key lives in one of those options.
• The comment opt-in sits above the Post Comment button on any theme, rather than depending on theme code.
• Pop-ups respect "stay hidden for a week" on the scroll and exit-intent triggers, carry their own headline and copy, and size themselves to the form inside them.
• Forms take your site's colours, and size themselves to their content.
• Documentation rewritten against what actually ships, including which API key permissions each feature needs.

Full history in CHANGELOG.md.