Fixed WordPress.org plugin review blockers from the manual round-two review:
All admin CSS and JavaScript are now enqueued via wp_enqueue_style / wp_enqueue_script — no inline <style> or <script> blocks remain. The legacy-notice suppressor and the plugin-row “Go Pro” link styling are real on-disk assets loaded only where they apply.
The two require_once ABSPATH . ‘wp-admin/includes/…’ calls flagged by the reviewer (image.php in the media sideloader and plugin.php in the active-plugin probe) have been removed; the helpers they were guarding have lived in core since well before our WP 6.4 floor.
Two unescaped echoes in tab-pro.php and tab-pairing.php (inline SVG icons and the Shopee wordmark) now pass through wp_kses() with strict per-element allowlists — no phpcs:ignore suppression remains.
The External Services section of this readme links the Terms of Use and Privacy Policy as proper Markdown links so the WordPress.org link-validation step picks them up.
Refreshed the readme to clarify Free vs Pro and the affiliation-with-Shopee disclaimer at the top of the description.
No database or settings migration is required.
1.5.7
Asset cache-busting and pointer-event fixes for the staging-area glossary modal.
Internal QA build.
1.5.0
Renamed plugin to “Lestari Importer for Woo with Shopee” to comply with WordPress.org trademark and naming guidelines.
Updated text domain, admin slug, REST namespace, public URLs, and the affiliation disclaimer to use the new canonical slug lestari.
1.4.13
Report-a-Bug modal: bounded local log (50 entries, FIFO), opt-out diagnostics, paste-from-clipboard, and an inline “See what will be sent” preview before Send.
Hardened sealed daily-import counter (AES-256-GCM envelope bound to the UTC date).
Pro Features tab is now a factual, non-intrusive description of the optional paid add-on — no form fields, no inert inputs, no urgency copy. Hidden automatically when the Pro add-on registers its own License tab.
1.4.0
HPOS compatibility declaration and Cart/Checkout-blocks compatibility declaration.
MIME-sniff from magic bytes for sideloaded images (JPEG / PNG / WebP).
1.0.0
First public release of the importer with paired browser-extension intake, HMAC-signed REST endpoint, staging area, image sideloading with deduplication, and configurable duplicate handling.
