=== Updawa – WordPress Update & SSL Monitoring API ===

Contributors: Designer Solutions
Tags: monitoring, rest api, updates, ssl monitor, maintenance, dashboard
Requires at least: 6.0
Tested up to: 7.0
Requires PHP: 7.2
Stable tag: 1.0.10
License: GPLv2 or later
License URI: https://www.gnu.org/licenses/gpl-2.0.html

The lightweight, headless REST API for monitoring WordPress core, plugin, theme updates, and SSL certificate expiry.

== Description ==

Tired of heavy, bloated SaaS management tools? **Updawa** is a lightweight, headless monitoring plugin built for developers, sysadmins, and agencies.

Instead of forcing you into a proprietary third-party dashboard, Updawa turns your WordPress site into a secure data node. It gives you a clean admin dashboard to check site health instantly, while exposing a secure **REST API endpoint** that you can poll from any external monitoring tool, custom script, or mobile app.

Whether you manage one site or a hundred, Updawa is the perfect API-first alternative to heavy management plugins.

= Why Choose Updawa? =

* **Headless & Flexible:** Build your own dashboard using Grafana, custom Node/Python scripts, or your agency's proprietary software.
* **100% Private (No SaaS Lock-in):** Zero external dependencies. Your data never leaves your server. No pings to third-party tracking services.
* **Ultra-Lightweight:** Only runs when queried. No background bloat, database clutter, or heavy admin scripts.

= Key Features =

* **Secure REST API Endpoint:** Fetch a full JSON snapshot of your site's status via `GET /wp-json/updawa/v1/status`.
* **Bearer Token Security:** The API is protected by a 256-bit cryptographically random token that you can regenerate or revoke at any time.
* **SSL Certificate Monitoring:** Automatically checks your site's HTTPS endpoint and reports the exact expiry date and days remaining.
* **Beautiful Local Dashboard:** View pending update counts (Core, Plugins, Themes) and SSL status with intuitive colour-coded badges.
* **QR Code Integration:** Easily import your API credentials into mobile monitoring apps via the bundled (zero-dependency) QR generator.
* **Android App:** Monitor all your Updawa-enabled sites from your pocket, with push notifications for expiring SSLs and pending updates. [Download on Google Play](https://play.google.com/store/apps/details?id=com.plz.updawa).
* **JSON View:** See your site's full API payload directly in the backend with a one-click Copy button.
* **Zero External Dependencies:** The QR code library is fully bundled and runs locally in your browser. No data is sent to external servers.

= REST API =

The endpoint is read-only and dead simple to use. Just pass your Bearer token:

    curl -H "Authorization: Bearer YOUR_TOKEN" https://example.com/wp-json/updawa/v1/status

Example JSON response:

    {
      "generated_at": "2026-04-14T09:10:41+00:00",
      "wordpress": {
        "current_version": "6.9.4",
        "update_available": false,
        "new_version": null,
        "package_url": null
      },
      "plugins": [ ... ],
      "themes":  [ ... ],
      "ssl_expires_at": "2026-07-05T01:48:00+00:00"
    }

== Screenshots ==

1. **The Updawa Dashboard:** A modern, at-a-glance overview of WordPress core, SSL certificate, plugins, and themes with colour-coded stat cards.
2. **API & Token Management:** Manage your Bearer token, copy the `curl` command, or scan the QR code for instant mobile access.
3. **JSON View:** See your site's full API payload directly in the backend with a one-click Copy button.

== Installation ==

1. Upload the `updawa` folder to the `/wp-content/plugins/` directory, or install it directly via the WordPress Plugin Directory.
2. Activate the plugin through the **Plugins** menu in WordPress.
3. Navigate to **Updawa** in your WordPress admin sidebar.
4. Open the **Token API** tab to copy your API token or scan the QR code to connect your external monitoring tools.


== Frequently Asked Questions ==

= Can I use the REST API from a remote monitoring system? =

Yes! That is exactly what Updawa was built for. Simply copy the Bearer token from the **Token API** tab and include it as the `Authorization: Bearer {TOKEN}` header in your HTTP requests.

= Does the plugin monitor SSL certificates? =

Yes. If your site runs on HTTPS, Updawa securely connects to your domain on port 443 to read the certificate expiry date. The dashboard shows a warning badge when fewer than 30 days remain.

= Does Updawa send my data to external servers? =

No. Zero data is sent to external servers. Updawa uses WordPress's native built-in functions for update checks. The QR code library is fully bundled and runs locally in your browser.

= How is the API token stored and secured? =

The token is safely stored as a WordPress option (`updawa_token`) in your database. It is never transmitted to us or logged by the plugin. If compromised, you can instantly invalidate it by clicking **Regenerate token**.

= What happens to my data when I delete the plugin? =

The plugin's uninstall routine removes the `updawa_token` option from the database when the plugin is deleted through the WordPress admin.

= Is there a mobile app? =

Yes, the Updawa Android app is available on [Google Play](https://play.google.com/store/apps/details?id=com.plz.updawa). It lets you monitor update and SSL status across multiple WordPress sites from your phone, with push notifications when updates are available or certificates are about to expire. Scan the QR code in the **Token API** tab to import your site instantly.


== Changelog ==

= 1.0.10 =
* The correct changlog should be now shown in 'See information about the version' dialog


= 1.0.9 =
* Fixed: readme.txt


= 1.0.8 =
* Tested with Wordpress 7.0


= 1.0.7 =
* Minor editorial improvements.


= 1.0.6 =
* Added information about the Updawa Android app, now available on Google Play.

= 1.0.5 =
* Fixed false positive update notifications for plugins and themes.

= 1.0.4 =
* Fixed empty "More Info" modal in the WordPress plugin directory.

= 1.0.3 =
* New modern admin UI with stat cards, colour-coded badges, and card-based layout.
* SSL certificate monitoring added to the Status tab.
* Copy button added to the Example API Call card.

= 1.0.2 =
* Plugin renamed to Updawa.

= 1.0.1 =
* Fixed regulatory compliance issues.

= 1.0.0 =
* Initial release.
