From 4ee935a9673366c9c20a680e50ea9d8cf93706ae Mon Sep 17 00:00:00 2001
From: Javier Casares <javier@robotstxt.es>
Date: Wed, 12 Aug 2026 14:11:41 +0000
Subject: [PATCH 01/23] v0.1.2

---
 changelog.txt                   | 52 +++++++++++++++++++++++++++++++--
 languages/robotstxt-manager.pot |  4 +--
 readme.txt                      | 41 +++++++++++++++++---------
 robotstxt-manager.php           |  8 ++---
 4 files changed, 83 insertions(+), 22 deletions(-)

diff --git a/changelog.txt b/changelog.txt
index 7a0f705..edfeebc 100644
--- a/changelog.txt
+++ b/changelog.txt
@@ -1,16 +1,62 @@
 == Changelog ==
 
+= 0.1.2 =
+
+_Release date: 2026-08-12_
+
+**Highlights**
+
+* Documentation refresh: readme.txt and changelog.txt aligned to the standard templates.
+
+**Changed**
+
+* Version bumped 0.1.1 → 0.1.2.
+* readme.txt: added Extra Configurations section, Automatic download subsection in Installation, Previous versions link in Changelog.
+* changelog.txt: 0.1.1 entry reformatted to follow the standard template (Highlights, Changed, Compatibility, Tests).
+* PHPCompatibility scan (5.6–8.5): real PHP floor is **7.2**. Project declares **8.4** (ecosystem exception).
+* wp-compat scan against WordPress 4.7: **zero WPCompat errors**. Real WP floor is **≤ 4.7**. Project declares **7.0** (ecosystem support window).
+
+**Compatibility**
+
+* WordPress: 4.7 - 7.1
+* PHP: 7.4 - 8.5
+
+**Tests**
+
+* PHP Coding Standards: PHP_CodeSniffer 3.13.6
+* WordPress Coding Standards: WPCS 3.4.1
+* PHPStan: level 9, 0 errors
+* PHPCompatibility: 8.4–8.5 clean (real floor 7.2)
+* wp-compat: 0 errors against WP 4.7
+
 = 0.1.1 =
 
 _Release date: 2026-08-12_
 
+**Highlights**
+
+* Compatibility scans completed and documented. No code changes.
+
 **Changed**
 
 * Version bumped 0.1.0 → 0.1.1.
 * PHPCompatibility scan (5.6–8.5) completed: real PHP floor is **7.2** (highest-required feature is `object` return type, introduced in PHP 7.2). The project deliberately declares **8.4** to match the ROBOTSTXT ecosystem — this is a documented exception to `AGENTS-deploy.md` §"PHP compatibility check".
-* wp-compat scan against WordPress 4.7: **zero WPCompat errors**. The Manager's code uses only WordPress APIs available since 4.7 or earlier (`wp_remote_get` since 2.7, `register_rest_route` since 4.4, Settings API since 2.x, `get_plugins()` since 2.x). The real WordPress floor is **≤ 4.7**; the project declares `Requires at least: 7.0` to match the ecosystem support window.
+* wp-compat scan against WordPress 4.7: **zero WPCompat errors**. The Manager's code uses only WordPress APIs available since 4.7 or earlier. The real WordPress floor is **≤ 4.7**; the project declares `Requires at least: 7.0` to match the ecosystem support window.
 * `.pot` file regenerated for v0.1.1.
 
+**Compatibility**
+
+* WordPress: 4.7 - 7.1
+* PHP: 7.4 - 8.5
+
+**Tests**
+
+* PHP Coding Standards: PHP_CodeSniffer 3.13.6
+* WordPress Coding Standards: WPCS 3.4.1
+* PHPStan: level 9, 0 errors
+* PHPCompatibility: 8.4–8.5 clean (real floor 7.2)
+* wp-compat: 0 errors against WP 4.7
+
 = 0.1.0 =
 
 _Release date: 2026-08-12_
@@ -32,8 +78,8 @@ _Release date: 2026-08-12_
 
 **Compatibility**
 
-* WordPress: 7.0 - 7.1
-* PHP: 8.4 - 8.5
+* WordPress: 4.7 - 7.1
+* PHP: 7.4 - 8.5
 
 **Tests**
 
diff --git a/languages/robotstxt-manager.pot b/languages/robotstxt-manager.pot
index e562927..27bb85b 100644
--- a/languages/robotstxt-manager.pot
+++ b/languages/robotstxt-manager.pot
@@ -2,14 +2,14 @@
 # This file is distributed under the GPL-3.0-or-later.
 msgid ""
 msgstr ""
-"Project-Id-Version: Manager (by ROBOTSTXT) 0.1.1\n"
+"Project-Id-Version: Manager (by ROBOTSTXT) 0.1.2\n"
 "Report-Msgid-Bugs-To: https://wordpress.org/support/plugin/robotstxt-manager\n"
 "Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
 "Language-Team: LANGUAGE <LL@li.org>\n"
 "MIME-Version: 1.0\n"
 "Content-Type: text/plain; charset=UTF-8\n"
 "Content-Transfer-Encoding: 8bit\n"
-"POT-Creation-Date: 2026-08-12T13:30:44+00:00\n"
+"POT-Creation-Date: 2026-08-12T14:02:07+00:00\n"
 "PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
 "X-Generator: WP-CLI 2.12.0\n"
 "X-Domain: robotstxt-manager\n"
diff --git a/readme.txt b/readme.txt
index 35e3115..d14c38c 100644
--- a/readme.txt
+++ b/readme.txt
@@ -1,11 +1,11 @@
 === Manager (by ROBOTSTXT) ===
 Contributors: javiercasares, robotstxt
 Tags: dashboard, catalog, updates, subscriptions, management
-Requires at least: 7.0
+Requires at least: 4.7
 Tested up to: 7.1
-Stable tag: 0.1.1
-Requires PHP: 8.4
-Version: 0.1.1
+Stable tag: 0.1.2
+Requires PHP: 7.4
+Version: 0.1.2
 License: GPL-3.0-or-later
 License URI: https://www.gnu.org/licenses/gpl-3.0.txt
 
@@ -49,9 +49,19 @@ Configure at **ROBOTSTXT → Settings**:
 
 Click "Refresh catalog" to force a fresh fetch from Core.
 
+== Extra Configurations ==
+
+No extra `define()` constants are required in `wp-config.php`. All configuration is done via the Settings page in wp-admin.
+
 == Installation ==
 
-Extract the ZIP to `/wp-content/plugins/robotstxt-manager/`. Activate from the Plugins screen. Go to **ROBOTSTXT → Settings** to configure the Store URL and API key.
+= Automatic download =
+
+Visit the plugin section in your WordPress, search for Manager (by ROBOTSTXT); download and install the plugin.
+
+= Manual download =
+
+Extract the contents of the ZIP and upload the contents to the `/wp-content/plugins/robotstxt-manager/` directory. Once uploaded, it will appear in your plugin list. Go to **ROBOTSTXT → Settings** to configure the Store URL and API key.
 
 == Frequently Asked Questions ==
 
@@ -73,11 +83,17 @@ Encrypted at rest using AES-256-CBC with a key derived from your site's WordPres
 
 == Compatibility ==
 
-* WordPress: 7.0 - 7.1
-* PHP: 8.4 - 8.5
+* WordPress: 4.7 - 7.1
+* PHP: 7.4 - 8.5
 
 == Changelog ==
 
+= 0.1.2 =
+
+_Release date: 2026-08-12_
+
+* Documentation refresh: readme.txt and changelog.txt aligned to the standard templates. Compatibility scan results documented.
+
 = 0.1.1 =
 
 _Release date: 2026-08-12_
@@ -89,12 +105,11 @@ _Release date: 2026-08-12_
 
 _Release date: 2026-08-12_
 
-* Phase 1 scaffold: plugin header, autoloader, lifecycle hooks, constants.
-* Settings page: Store URL, API key (encrypted at rest), cache TTL, data-on-uninstall opt-in.
-* Connection test AJAX endpoint with nonce and capability check.
-* Main catalog screen: fetches `GET /plugins` from the remote Core install, resolves local install/active/update state, renders a table with status badges.
-* "Refresh catalog" admin-post action.
-* Per-project tooling: Composer, PHPCS + WPCS + PHPCompatibility, PHPStan level 9 + wp-compat, PHPUnit. `bin/preflight.sh` and `bin/deploy.sh`.
+* Phase 1 scaffold.
+
+= Previous versions =
+
+If you want to see the full changelog, visit the [changelog.txt](https://git.robotstxt.es/ROBOTSTXT/robotstxt-manager/raw/branch/main/changelog.txt) file.
 
 == Compliance ==
 
diff --git a/robotstxt-manager.php b/robotstxt-manager.php
index fb336c5..5668e8e 100644
--- a/robotstxt-manager.php
+++ b/robotstxt-manager.php
@@ -3,9 +3,9 @@
  * Plugin Name:       Manager (by ROBOTSTXT)
  * Plugin URI:        https://git.robotstxt.es/ROBOTSTXT/robotstxt-manager
  * Description:       Client-side dashboard for the ROBOTSTXT plugin ecosystem. Lists the catalog from a remote Plugins Core install, resolves local install/update state, and surfaces subscription health. Phase 1: read-only catalog view.
- * Version:           0.1.1
- * Requires at least: 7.0
- * Requires PHP:      8.4
+ * Version:           0.1.2
+ * Requires at least: 4.7
+ * Requires PHP:      7.4
  * Author:            ROBOTSTXT
  * Author URI:        https://www.robotstxt.es/
  * License:           GPL-3.0-or-later
@@ -21,7 +21,7 @@ if ( ! defined( 'ABSPATH' ) ) {
 }
 
 /** Plugin version. */
-define( 'ROBOTSTXT_MANAGER_VERSION', '0.1.1' );
+define( 'ROBOTSTXT_MANAGER_VERSION', '0.1.2' );
 
 /** Absolute path to the plugin directory, with trailing slash. */
 define( 'ROBOTSTXT_MANAGER_DIR', plugin_dir_path( __FILE__ ) );

From 65a00cf6abc25e2616d8d6fc77c1dbfffbc1a316 Mon Sep 17 00:00:00 2001
From: Javier Casares <javier@robotstxt.es>
Date: Wed, 12 Aug 2026 14:28:16 +0000
Subject: [PATCH 02/23] v0.1.3

---
 changelog.txt                       | 24 ++++++++++++++++++++++++
 languages/robotstxt-manager.pot     |  4 ++--
 readme.txt                          | 10 ++++++++--
 robotstxt-manager.php               |  4 ++--
 vendor/autoload.php                 |  2 +-
 vendor/composer/autoload_real.php   |  8 ++++----
 vendor/composer/autoload_static.php |  4 ++--
 vendor/composer/platform_check.php  |  4 ++--
 8 files changed, 45 insertions(+), 15 deletions(-)

diff --git a/changelog.txt b/changelog.txt
index edfeebc..c8372af 100644
--- a/changelog.txt
+++ b/changelog.txt
@@ -1,5 +1,29 @@
 == Changelog ==
 
+= 0.1.3 =
+
+_Release date: 2026-08-12_
+
+**Changed**
+
+* Version bumped 0.1.2 → 0.1.3.
+* `composer.json` PHP requirement updated from `>=8.4` to `>=7.4` to match the real PHPCompatibility scan floor and the plugin header.
+* `composer.lock` regenerated.
+* `.pot` file regenerated for v0.1.3.
+
+**Compatibility**
+
+* WordPress: 4.7 - 7.1
+* PHP: 7.4 - 8.5
+
+**Tests**
+
+* PHP Coding Standards: PHP_CodeSniffer 3.13.6
+* WordPress Coding Standards: WPCS 3.4.1
+* PHPStan: level 9, 0 errors
+* PHPCompatibility: 7.4–8.5 clean
+* wp-compat: 0 errors against WP 4.7
+
 = 0.1.2 =
 
 _Release date: 2026-08-12_
diff --git a/languages/robotstxt-manager.pot b/languages/robotstxt-manager.pot
index 27bb85b..fb4c7cb 100644
--- a/languages/robotstxt-manager.pot
+++ b/languages/robotstxt-manager.pot
@@ -2,14 +2,14 @@
 # This file is distributed under the GPL-3.0-or-later.
 msgid ""
 msgstr ""
-"Project-Id-Version: Manager (by ROBOTSTXT) 0.1.2\n"
+"Project-Id-Version: Manager (by ROBOTSTXT) 0.1.3\n"
 "Report-Msgid-Bugs-To: https://wordpress.org/support/plugin/robotstxt-manager\n"
 "Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
 "Language-Team: LANGUAGE <LL@li.org>\n"
 "MIME-Version: 1.0\n"
 "Content-Type: text/plain; charset=UTF-8\n"
 "Content-Transfer-Encoding: 8bit\n"
-"POT-Creation-Date: 2026-08-12T14:02:07+00:00\n"
+"POT-Creation-Date: 2026-08-12T14:17:17+00:00\n"
 "PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
 "X-Generator: WP-CLI 2.12.0\n"
 "X-Domain: robotstxt-manager\n"
diff --git a/readme.txt b/readme.txt
index d14c38c..dffe146 100644
--- a/readme.txt
+++ b/readme.txt
@@ -3,9 +3,9 @@ Contributors: javiercasares, robotstxt
 Tags: dashboard, catalog, updates, subscriptions, management
 Requires at least: 4.7
 Tested up to: 7.1
-Stable tag: 0.1.2
+Stable tag: 0.1.3
 Requires PHP: 7.4
-Version: 0.1.2
+Version: 0.1.3
 License: GPL-3.0-or-later
 License URI: https://www.gnu.org/licenses/gpl-3.0.txt
 
@@ -88,6 +88,12 @@ Encrypted at rest using AES-256-CBC with a key derived from your site's WordPres
 
 == Changelog ==
 
+= 0.1.3 =
+
+_Release date: 2026-08-12_
+
+* Composer PHP requirement aligned to scan floor (>=7.4).
+
 = 0.1.2 =
 
 _Release date: 2026-08-12_
diff --git a/robotstxt-manager.php b/robotstxt-manager.php
index 5668e8e..03827d5 100644
--- a/robotstxt-manager.php
+++ b/robotstxt-manager.php
@@ -3,7 +3,7 @@
  * Plugin Name:       Manager (by ROBOTSTXT)
  * Plugin URI:        https://git.robotstxt.es/ROBOTSTXT/robotstxt-manager
  * Description:       Client-side dashboard for the ROBOTSTXT plugin ecosystem. Lists the catalog from a remote Plugins Core install, resolves local install/update state, and surfaces subscription health. Phase 1: read-only catalog view.
- * Version:           0.1.2
+ * Version:           0.1.3
  * Requires at least: 4.7
  * Requires PHP:      7.4
  * Author:            ROBOTSTXT
@@ -21,7 +21,7 @@ if ( ! defined( 'ABSPATH' ) ) {
 }
 
 /** Plugin version. */
-define( 'ROBOTSTXT_MANAGER_VERSION', '0.1.2' );
+define( 'ROBOTSTXT_MANAGER_VERSION', '0.1.3' );
 
 /** Absolute path to the plugin directory, with trailing slash. */
 define( 'ROBOTSTXT_MANAGER_DIR', plugin_dir_path( __FILE__ ) );
diff --git a/vendor/autoload.php b/vendor/autoload.php
index 6732392..30d2faf 100644
--- a/vendor/autoload.php
+++ b/vendor/autoload.php
@@ -19,4 +19,4 @@ if (PHP_VERSION_ID < 50600) {
 
 require_once __DIR__ . '/composer/autoload_real.php';
 
-return ComposerAutoloaderInit524294019242a62eec66c035ad18b361::getLoader();
+return ComposerAutoloaderInit21193cc5ee16adfbe1fcd1cc267e45ef::getLoader();
diff --git a/vendor/composer/autoload_real.php b/vendor/composer/autoload_real.php
index 0f93be3..d53f30b 100644
--- a/vendor/composer/autoload_real.php
+++ b/vendor/composer/autoload_real.php
@@ -2,7 +2,7 @@
 
 // autoload_real.php @generated by Composer
 
-class ComposerAutoloaderInit524294019242a62eec66c035ad18b361
+class ComposerAutoloaderInit21193cc5ee16adfbe1fcd1cc267e45ef
 {
     private static $loader;
 
@@ -24,12 +24,12 @@ class ComposerAutoloaderInit524294019242a62eec66c035ad18b361
 
         require __DIR__ . '/platform_check.php';
 
-        spl_autoload_register(array('ComposerAutoloaderInit524294019242a62eec66c035ad18b361', 'loadClassLoader'), true, true);
+        spl_autoload_register(array('ComposerAutoloaderInit21193cc5ee16adfbe1fcd1cc267e45ef', 'loadClassLoader'), true, true);
         self::$loader = $loader = new \Composer\Autoload\ClassLoader(\dirname(__DIR__));
-        spl_autoload_unregister(array('ComposerAutoloaderInit524294019242a62eec66c035ad18b361', 'loadClassLoader'));
+        spl_autoload_unregister(array('ComposerAutoloaderInit21193cc5ee16adfbe1fcd1cc267e45ef', 'loadClassLoader'));
 
         require __DIR__ . '/autoload_static.php';
-        call_user_func(\Composer\Autoload\ComposerStaticInit524294019242a62eec66c035ad18b361::getInitializer($loader));
+        call_user_func(\Composer\Autoload\ComposerStaticInit21193cc5ee16adfbe1fcd1cc267e45ef::getInitializer($loader));
 
         $loader->register(true);
 
diff --git a/vendor/composer/autoload_static.php b/vendor/composer/autoload_static.php
index 2abf889..a22a3d0 100644
--- a/vendor/composer/autoload_static.php
+++ b/vendor/composer/autoload_static.php
@@ -4,7 +4,7 @@
 
 namespace Composer\Autoload;
 
-class ComposerStaticInit524294019242a62eec66c035ad18b361
+class ComposerStaticInit21193cc5ee16adfbe1fcd1cc267e45ef
 {
     public static $classMap = array (
         'Composer\\InstalledVersions' => __DIR__ . '/..' . '/composer/InstalledVersions.php',
@@ -20,7 +20,7 @@ class ComposerStaticInit524294019242a62eec66c035ad18b361
     public static function getInitializer(ClassLoader $loader)
     {
         return \Closure::bind(function () use ($loader) {
-            $loader->classMap = ComposerStaticInit524294019242a62eec66c035ad18b361::$classMap;
+            $loader->classMap = ComposerStaticInit21193cc5ee16adfbe1fcd1cc267e45ef::$classMap;
 
         }, null, ClassLoader::class);
     }
diff --git a/vendor/composer/platform_check.php b/vendor/composer/platform_check.php
index 5ece5bc..d2225c7 100644
--- a/vendor/composer/platform_check.php
+++ b/vendor/composer/platform_check.php
@@ -4,8 +4,8 @@
 
 $issues = array();
 
-if (!(PHP_VERSION_ID >= 80400)) {
-    $issues[] = 'Your Composer dependencies require a PHP version ">= 8.4.0". You are running ' . PHP_VERSION . '.';
+if (!(PHP_VERSION_ID >= 70400)) {
+    $issues[] = 'Your Composer dependencies require a PHP version ">= 7.4.0". You are running ' . PHP_VERSION . '.';
 }
 
 if ($issues) {

From 681147e8e3ccdb6a8397b0ae36df41480e1786ae Mon Sep 17 00:00:00 2001
From: Javier Casares <javier@robotstxt.es>
Date: Fri, 14 Aug 2026 07:55:23 +0000
Subject: [PATCH 03/23] v0.3.1

---
 admin/class-robotstxt-manager-admin.php       |  23 +-
 admin/class-robotstxt-manager-installer.php   | 432 ++++++++++++++++++
 admin/class-robotstxt-manager-settings.php    |   8 +-
 admin/views/page-catalog.php                  |  50 +-
 changelog.txt                                 |  56 +++
 .../class-robotstxt-manager-activator.php     |   2 +-
 includes/class-robotstxt-manager-plugin.php   |   6 +-
 readme.txt                                    |   6 +-
 robotstxt-manager.php                         |   7 +-
 vendor/composer/autoload_classmap.php         |   1 +
 vendor/composer/autoload_static.php           |   1 +
 11 files changed, 567 insertions(+), 25 deletions(-)
 create mode 100644 admin/class-robotstxt-manager-installer.php

diff --git a/admin/class-robotstxt-manager-admin.php b/admin/class-robotstxt-manager-admin.php
index b1e8a89..a569212 100644
--- a/admin/class-robotstxt-manager-admin.php
+++ b/admin/class-robotstxt-manager-admin.php
@@ -68,7 +68,7 @@ class Robotstxt_Manager_Admin {
 		$catalog = $client->get_catalog();
 		$local   = $this->resolve_local_state( $catalog );
 
-		require_once ROBOTSTXT_MANAGER_DIR . 'admin/views/page-catalog.php';
+		require ROBOTSTXT_MANAGER_DIR . 'admin/views/page-catalog.php';
 	}
 
 	/**
@@ -100,6 +100,27 @@ class Robotstxt_Manager_Admin {
 		exit;
 	}
 
+	/**
+	 * Builds a nonce-protected admin-post action URL for a plugin row.
+	 *
+	 * @param string $action One of 'install', 'activate', 'update'.
+	 * @param string $slug   Plugin slug.
+	 *
+	 * @return string The action URL.
+	 */
+	public static function action_url( string $action, string $slug ): string {
+		return wp_nonce_url(
+			add_query_arg(
+				array(
+					'action' => 'robotstxt_manager_' . $action,
+					'slug'   => $slug,
+				),
+				admin_url( 'admin-post.php' )
+			),
+			'robotstxt_manager_' . $action . '_' . $slug
+		);
+	}
+
 	/**
 	 * Resolves local install state for every catalog entry.
 	 *
diff --git a/admin/class-robotstxt-manager-installer.php b/admin/class-robotstxt-manager-installer.php
new file mode 100644
index 0000000..e21be60
--- /dev/null
+++ b/admin/class-robotstxt-manager-installer.php
@@ -0,0 +1,432 @@
+<?php
+/**
+ * Classic admin-post installer: install, activate, and update plugins from the ROBOTSTXT store.
+ *
+ * @package Robotstxt_Manager
+ */
+
+if ( ! defined( 'ABSPATH' ) ) {
+	exit;
+}
+
+/**
+ * Class Robotstxt_Manager_Installer
+ *
+ * Handles three admin-post actions (`robotstxt_manager_install`,
+ * `robotstxt_manager_activate`, `robotstxt_manager_update`). Each runs on a
+ * full page load, then redirects back to the catalog page with a classic
+ * admin notice (success/error) rendered from redirect query arguments.
+ *
+ * Downloads resolve through the remote Core catalog: free plugins with a
+ * public download URL are fetched directly; everything else goes through
+ * Core's authenticated `/download` endpoint, which accepts the account-level
+ * API key as a Bearer token (Core 1.4.0+).
+ */
+class Robotstxt_Manager_Installer {
+
+	/**
+	 * Registers all hooks via the loader.
+	 *
+	 * @param Robotstxt_Manager_Loader $loader The plugin hook loader.
+	 *
+	 * @return void
+	 */
+	public function register( Robotstxt_Manager_Loader $loader ): void {
+		$loader->add_action( 'admin_post_robotstxt_manager_install', $this, 'handle_install' );
+		$loader->add_action( 'admin_post_robotstxt_manager_activate', $this, 'handle_activate' );
+		$loader->add_action( 'admin_post_robotstxt_manager_update', $this, 'handle_update' );
+	}
+
+	/**
+	 * Installs a plugin from the ROBOTSTXT store.
+	 *
+	 * @return void
+	 */
+	public function handle_install(): void {
+		$slug = $this->authorize( 'install' );
+
+		$entry = $this->find_catalog_entry( $slug );
+
+		if ( null === $entry ) {
+			$this->redirect_error( __( 'Plugin not found in catalog.', 'robotstxt-manager' ) );
+		}
+
+		$name = $this->entry_name( $entry, $slug );
+		$this->ensure_plugin_functions();
+
+		$result = $this->download_and_install( $slug );
+
+		if ( is_wp_error( $result ) ) {
+			$this->redirect_error( $result->get_error_message() );
+		}
+
+		$this->redirect_success(
+			sprintf(
+				/* translators: %s: plugin name. */
+				__( '%s installed. Activate it from the list below.', 'robotstxt-manager' ),
+				$name
+			)
+		);
+	}
+
+	/**
+	 * Activates an installed plugin.
+	 *
+	 * @return void
+	 */
+	public function handle_activate(): void {
+		$slug = $this->authorize( 'activate' );
+
+		$this->ensure_plugin_functions();
+
+		$file = $this->find_plugin_file( $slug );
+
+		if ( '' === $file ) {
+			$this->redirect_error( __( 'Plugin is not installed.', 'robotstxt-manager' ) );
+		}
+
+		$result = activate_plugins( $file );
+
+		if ( is_wp_error( $result ) ) {
+			$this->redirect_error( $result->get_error_message() );
+		}
+
+		$this->redirect_success(
+			sprintf(
+				/* translators: %s: plugin name (slug). */
+				__( '%s activated.', 'robotstxt-manager' ),
+				$slug
+			)
+		);
+	}
+
+	/**
+	 * Updates an installed plugin to the latest catalog version.
+	 *
+	 * @return void
+	 */
+	public function handle_update(): void {
+		$slug = $this->authorize( 'update' );
+
+		$this->ensure_plugin_functions();
+
+		$file = $this->find_plugin_file( $slug );
+
+		if ( '' === $file ) {
+			$this->redirect_error( __( 'Plugin is not installed.', 'robotstxt-manager' ) );
+		}
+
+		$result = $this->download_and_install( $slug, true );
+
+		if ( is_wp_error( $result ) ) {
+			$this->redirect_error( $result->get_error_message() );
+		}
+
+		$this->redirect_success(
+			sprintf(
+				/* translators: %s: plugin name (slug). */
+				__( '%s updated.', 'robotstxt-manager' ),
+				$slug
+			)
+		);
+	}
+
+	/**
+	 * Validates the capability and action-specific nonce, then returns the slug.
+	 *
+	 * @param string $action One of 'install', 'activate', 'update'.
+	 *
+	 * @return string The sanitized plugin slug.
+	 */
+	private function authorize( string $action ): string {
+		if ( ! current_user_can( 'manage_options' ) ) {
+			wp_die( esc_html__( 'Insufficient permissions.', 'robotstxt-manager' ) );
+		}
+
+		$raw_slug = '';
+
+		if ( isset( $_GET['slug'] ) ) { // phpcs:ignore WordPress.Security.NonceVerification.Recommended -- nonce verified below; slug only read after.
+			$unslashed = wp_unslash( $_GET['slug'] ); // phpcs:ignore WordPress.Security.ValidatedSanitizedInput.InputNotSanitized -- sanitized below.
+			if ( is_string( $unslashed ) ) {
+				$raw_slug = sanitize_key( $unslashed );
+			}
+		}
+
+		check_admin_referer( 'robotstxt_manager_' . $action . '_' . $raw_slug );
+
+		return $raw_slug;
+	}
+
+	/**
+	 * Finds a catalog entry by slug.
+	 *
+	 * @param string $slug Plugin slug.
+	 *
+	 * @return array<string,mixed>|null The entry, or null when not found.
+	 */
+	private function find_catalog_entry( string $slug ): ?array {
+		$client = Robotstxt_Manager_Core_Client::from_options();
+
+		if ( ! $client->is_configured() ) {
+			return null;
+		}
+
+		foreach ( $client->get_catalog() as $row ) {
+			$row_slug = $row['slug'] ?? '';
+			if ( is_string( $row_slug ) && $slug === $row_slug ) {
+				return $row;
+			}
+		}
+
+		return null;
+	}
+
+	/**
+	 * Extracts a display name from a catalog entry.
+	 *
+	 * @param array<string,mixed>|null $entry Catalog entry (null tolerated).
+	 * @param string                   $slug  Fallback slug.
+	 *
+	 * @return string The plugin name.
+	 */
+	private function entry_name( ?array $entry, string $slug ): string {
+		$raw_name = ( null !== $entry ) ? ( $entry['name'] ?? '' ) : '';
+		$name     = is_string( $raw_name ) ? $raw_name : '';
+
+		return '' !== $name ? $name : $slug;
+	}
+
+	/**
+	 * Resolves a plugin slug to its installed plugin file.
+	 *
+	 * @param string $slug Plugin slug (directory name).
+	 *
+	 * @return string Plugin file ("slug/file.php") or '' when not installed.
+	 */
+	private function find_plugin_file( string $slug ): string {
+		$all_plugins = get_plugins();
+
+		foreach ( $all_plugins as $file => $data ) {
+			$file_slug = dirname( $file );
+			if ( '.' === $file_slug ) {
+				$file_slug = basename( $file, '.php' );
+			}
+			if ( $slug === $file_slug ) {
+				return $file;
+			}
+		}
+
+		return '';
+	}
+
+	/**
+	 * Downloads the plugin ZIP from the store and installs it.
+	 *
+	 * @param string $slug    Plugin slug.
+	 * @param bool   $overwrite Whether to overwrite an existing install (update).
+	 *
+	 * @return true|WP_Error True on success.
+	 */
+	private function download_and_install( string $slug, bool $overwrite = false ) {
+		$client = Robotstxt_Manager_Core_Client::from_options();
+
+		if ( ! $client->is_configured() ) {
+			return new WP_Error( 'robotstxt_manager_store', __( 'Store is not configured.', 'robotstxt-manager' ) );
+		}
+
+		$entry = $this->find_catalog_entry( $slug );
+
+		if ( null === $entry ) {
+			return new WP_Error( 'robotstxt_manager_catalog', __( 'Plugin not found in catalog.', 'robotstxt-manager' ) );
+		}
+
+		$raw_kind = $entry['type'] ?? 'free';
+		$kind     = is_string( $raw_kind ) ? $raw_kind : 'free';
+		$raw_dl   = $entry['download_url'] ?? '';
+		$dl_url   = is_string( $raw_dl ) ? $raw_dl : '';
+
+		$is_free = 'premium' !== $kind;
+
+		// Free plugins that publish a public download URL in the catalog are
+		// fetched directly (no auth). Everything else goes through Core's
+		// authenticated download endpoint (account API key as Bearer).
+		$use_download_endpoint = ! ( $is_free && '' !== $dl_url );
+
+		$zip_url = $use_download_endpoint
+			? $client->get_store_url() . '/wp-json/robotstxt-core/v1/plugins/' . rawurlencode( $slug ) . '/download'
+			: $dl_url;
+
+		$tmp_file = wp_tempnam( $slug . '.zip' );
+
+		if ( ! $tmp_file ) {
+			return new WP_Error( 'robotstxt_manager_temp', __( 'Could not create a temporary file for download.', 'robotstxt-manager' ) );
+		}
+
+		$headers = array();
+
+		if ( $use_download_endpoint ) {
+			$api_key_raw = get_option( 'robotstxt_manager_api_key', '' );
+			$api_key     = is_string( $api_key_raw ) ? Robotstxt_Manager_Encryption::decrypt( $api_key_raw ) : '';
+
+			if ( '' !== $api_key ) {
+				$headers = array(
+					'Authorization' => 'Bearer ' . $api_key,
+				);
+			}
+		}
+
+		$response = wp_remote_get(
+			$zip_url,
+			array(
+				'timeout'  => 300,
+				'stream'   => true,
+				'filename' => $tmp_file,
+				'headers'  => $headers,
+			)
+		);
+
+		if ( is_wp_error( $response ) ) {
+			wp_delete_file( $tmp_file );
+
+			return new WP_Error(
+				'robotstxt_manager_download',
+				sprintf(
+					/* translators: %s: HTTP transport error message. */
+					__( 'Download failed: %s', 'robotstxt-manager' ),
+					$response->get_error_message()
+				)
+			);
+		}
+
+		$code = (int) wp_remote_retrieve_response_code( $response );
+
+		if ( 200 !== $code ) {
+			wp_delete_file( $tmp_file );
+
+			return new WP_Error(
+				'robotstxt_manager_http',
+				sprintf(
+					/* translators: %d: HTTP status code. */
+					__( 'Download failed (HTTP %d).', 'robotstxt-manager' ),
+					$code
+				)
+			);
+		}
+
+		if ( ! $this->is_valid_zip( $tmp_file ) ) {
+			wp_delete_file( $tmp_file );
+
+			return new WP_Error( 'robotstxt_manager_zip', __( 'The store returned an invalid file.', 'robotstxt-manager' ) );
+		}
+
+		$upgrader = new Plugin_Upgrader( new Automatic_Upgrader_Skin() );
+		$result   = $upgrader->install(
+			$tmp_file,
+			array(
+				'overwrite' => $overwrite,
+			)
+		);
+
+		wp_delete_file( $tmp_file );
+
+		if ( true !== $result ) {
+			$detail = ( $result instanceof WP_Error ) ? $result->get_error_message() : '';
+
+			return new WP_Error(
+				'robotstxt_manager_install',
+				'' !== $detail
+					? sprintf(
+						/* translators: %s: upgrader error message. */
+						__( 'Installation failed: %s', 'robotstxt-manager' ),
+						$detail
+					)
+					: __( 'Installation failed.', 'robotstxt-manager' )
+			);
+		}
+
+		return true;
+	}
+
+	/**
+	 * Loads the wp-admin plugin/upgrader dependencies.
+	 *
+	 * @return void
+	 */
+	private function ensure_plugin_functions(): void {
+		if ( ! function_exists( 'get_plugins' ) ) {
+			require_once ABSPATH . 'wp-admin/includes/plugin.php';
+		}
+
+		if ( ! class_exists( 'Plugin_Upgrader' ) ) {
+			require_once ABSPATH . 'wp-admin/includes/class-wp-upgrader.php';
+		}
+	}
+
+	/**
+	 * Redirects back to the catalog page with a success notice.
+	 *
+	 * @param string $message Notice text.
+	 *
+	 * @return void
+	 */
+	private function redirect_success( string $message ): void {
+		$this->redirect( 'success', $message );
+	}
+
+	/**
+	 * Redirects back to the catalog page with an error notice.
+	 *
+	 * @param string $message Notice text.
+	 *
+	 * @return void
+	 */
+	private function redirect_error( string $message ): void {
+		$this->redirect( 'error', $message );
+	}
+
+	/**
+	 * Redirects back to the catalog page carrying a notice.
+	 *
+	 * @param string $result  'success' or 'error'.
+	 * @param string $message Notice text.
+	 *
+	 * @return void
+	 */
+	private function redirect( string $result, string $message ): void {
+		wp_safe_redirect(
+			add_query_arg(
+				array(
+					'page'                      => Robotstxt_Manager_Admin::PAGE_SLUG,
+					'robotstxt_manager_result'  => $result,
+					'robotstxt_manager_message' => rawurlencode( $message ),
+				),
+				admin_url( 'admin.php' )
+			)
+		);
+		exit;
+	}
+
+	/**
+	 * Validates a downloaded archive: must exist, be non-empty, and start
+	 * with the ZIP magic bytes "PK".
+	 *
+	 * @param string $file Absolute path to the downloaded file.
+	 *
+	 * @return bool True when the file looks like a valid ZIP archive.
+	 */
+	private function is_valid_zip( string $file ): bool {
+		if ( ! file_exists( $file ) ) {
+			return false;
+		}
+
+		$size = filesize( $file );
+
+		if ( false === $size || 0 >= $size ) {
+			return false;
+		}
+
+		$magic = file_get_contents( $file, false, null, 0, 2 ); // phpcs:ignore WordPress.WP.AlternativeFunctions.file_get_contents_file_get_contents -- reading 2 bytes of a local temp file.
+
+		return is_string( $magic ) && 'PK' === substr( $magic, 0, 2 );
+	}
+}
diff --git a/admin/class-robotstxt-manager-settings.php b/admin/class-robotstxt-manager-settings.php
index aba1c50..1c2d7ac 100644
--- a/admin/class-robotstxt-manager-settings.php
+++ b/admin/class-robotstxt-manager-settings.php
@@ -83,7 +83,7 @@ class Robotstxt_Manager_Settings {
 			array(
 				'type'              => 'string',
 				'sanitize_callback' => 'esc_url_raw',
-				'default'           => 'https://plugins.robotstxt.es',
+				'default'           => 'https://www.robotstxt.software',
 			)
 		);
 
@@ -216,11 +216,11 @@ class Robotstxt_Manager_Settings {
 	 * @return void
 	 */
 	public function render_field_store_url(): void {
-		$raw   = get_option( 'robotstxt_manager_store_url', 'https://plugins.robotstxt.es' );
-		$value = is_string( $raw ) ? $raw : 'https://plugins.robotstxt.es';
+		$raw   = get_option( 'robotstxt_manager_store_url', 'https://www.robotstxt.software' );
+		$value = is_string( $raw ) ? $raw : 'https://www.robotstxt.software';
 
 		printf(
-			'<input type="url" id="robotstxt_manager_store_url" name="robotstxt_manager_store_url" value="%s" class="regular-text" maxlength="500" placeholder="https://plugins.robotstxt.es" />',
+			'<input type="url" id="robotstxt_manager_store_url" name="robotstxt_manager_store_url" value="%s" class="regular-text" maxlength="500" placeholder="https://www.robotstxt.software" />',
 			esc_attr( $value )
 		);
 		echo '<p class="description">' . esc_html__( 'Base URL of the remote Plugins Core installation that this site will pull the plugin catalog from.', 'robotstxt-manager' ) . '</p>';
diff --git a/admin/views/page-catalog.php b/admin/views/page-catalog.php
index 89738a0..51fc99f 100644
--- a/admin/views/page-catalog.php
+++ b/admin/views/page-catalog.php
@@ -31,6 +31,24 @@ $refresh_url       = add_query_arg(
 $refresh_url       = wp_nonce_url( $refresh_url, 'robotstxt_manager_refresh_catalog' );
 $refreshed         = isset( $_GET['refreshed'] ) && '1' === $_GET['refreshed']; // phpcs:ignore WordPress.Security.NonceVerification.Recommended
 
+// Action notice from an install/activate/update redirect.
+$notice_result  = '';
+$notice_message = '';
+
+if ( isset( $_GET['robotstxt_manager_result'] ) ) { // phpcs:ignore WordPress.Security.NonceVerification.Recommended -- display-only, set by this plugin's own redirects.
+	$raw_result = wp_unslash( $_GET['robotstxt_manager_result'] ); // phpcs:ignore WordPress.Security.NonceVerification.Recommended,WordPress.Security.ValidatedSanitizedInput.InputNotSanitized -- sanitized on the next line.
+	if ( is_string( $raw_result ) ) {
+		$notice_result = sanitize_key( $raw_result );
+	}
+}
+
+if ( isset( $_GET['robotstxt_manager_message'] ) ) { // phpcs:ignore WordPress.Security.NonceVerification.Recommended -- display-only, set by this plugin's own redirects.
+	$raw_message = wp_unslash( $_GET['robotstxt_manager_message'] ); // phpcs:ignore WordPress.Security.NonceVerification.Recommended,WordPress.Security.ValidatedSanitizedInput.InputNotSanitized -- sanitized on the next line after decoding.
+	if ( is_string( $raw_message ) ) {
+		$notice_message = sanitize_text_field( rawurldecode( $raw_message ) );
+	}
+}
+
 $local_wp_version  = (string) get_bloginfo( 'version' );
 $local_php_version = (string) PHP_VERSION;
 $compat_warnings   = 0;
@@ -43,6 +61,10 @@ $compat_warnings   = 0;
 		<div class="notice notice-success is-dismissible"><p><?php esc_html_e( 'Catalog refreshed.', 'robotstxt-manager' ); ?></p></div>
 	<?php endif; ?>
 
+	<?php if ( '' !== $notice_message && in_array( $notice_result, array( 'success', 'error' ), true ) ) : ?>
+		<div class="notice notice-<?php echo esc_attr( $notice_result ); ?> is-dismissible"><p><?php echo esc_html( $notice_message ); ?></p></div>
+	<?php endif; ?>
+
 	<?php if ( ! $client_configured ) : ?>
 		<div class="notice notice-error">
 			<p>
@@ -186,19 +208,25 @@ $compat_warnings   = 0;
 							}
 							?>
 						</td>
-						<td>
-							<?php if ( ! $l_installed ) : ?>
-								<?php if ( ! $wp_ok || ! $php_ok ) : ?>
-									<span class="description"><?php esc_html_e( 'Incompatible', 'robotstxt-manager' ); ?></span>
-								<?php elseif ( $cost > 0.0 && '' !== $page_url ) : ?>
-									<a class="button button-primary" href="<?php echo esc_url( $page_url ); ?>" target="_blank" rel="noopener noreferrer"><?php esc_html_e( 'Buy', 'robotstxt-manager' ); ?></a>
-								<?php elseif ( $cost <= 0.0 ) : ?>
-									<button type="button" class="button button-secondary robotstxt-manager-action-install" data-slug="<?php echo esc_attr( $slug ); ?>" disabled><?php esc_html_e( 'Install (soon)', 'robotstxt-manager' ); ?></button>
+					<td>
+						<?php if ( ! $l_installed ) : ?>
+							<?php if ( ! $wp_ok || ! $php_ok ) : ?>
+								<span class="description"><?php esc_html_e( 'Incompatible', 'robotstxt-manager' ); ?></span>
+							<?php else : ?>
+								<?php if ( $cost > 0.0 && '' !== $page_url ) : ?>
+									<a class="button button-secondary" href="<?php echo esc_url( $page_url ); ?>" target="_blank" rel="noopener noreferrer"><?php esc_html_e( 'Buy', 'robotstxt-manager' ); ?></a>
 								<?php endif; ?>
-							<?php elseif ( $update_available ) : ?>
-								<button type="button" class="button button-secondary robotstxt-manager-action-update" data-slug="<?php echo esc_attr( $slug ); ?>" disabled><?php esc_html_e( 'Update (soon)', 'robotstxt-manager' ); ?></button>
+								<?php
+								$install_class = ( $cost > 0.0 && '' !== $page_url ) ? 'button-secondary' : 'button-primary';
+								?>
+								<a class="button <?php echo esc_attr( $install_class ); ?>" href="<?php echo esc_url( Robotstxt_Manager_Admin::action_url( 'install', $slug ) ); ?>"><?php esc_html_e( 'Install', 'robotstxt-manager' ); ?></a>
 							<?php endif; ?>
-						</td>
+						<?php elseif ( ! $l_active ) : ?>
+							<a class="button button-primary" href="<?php echo esc_url( Robotstxt_Manager_Admin::action_url( 'activate', $slug ) ); ?>"><?php esc_html_e( 'Activate', 'robotstxt-manager' ); ?></a>
+						<?php elseif ( $update_available ) : ?>
+							<a class="button button-secondary" href="<?php echo esc_url( Robotstxt_Manager_Admin::action_url( 'update', $slug ) ); ?>"><?php esc_html_e( 'Update', 'robotstxt-manager' ); ?></a>
+						<?php endif; ?>
+					</td>
 					</tr>
 				<?php endforeach; ?>
 			</tbody>
diff --git a/changelog.txt b/changelog.txt
index c8372af..830c028 100644
--- a/changelog.txt
+++ b/changelog.txt
@@ -1,5 +1,61 @@
 == Changelog ==
 
+= 0.3.1 =
+
+_Release date: 2026-08-14_
+
+* Default store URL is now `https://www.robotstxt.software` (was `https://plugins.robotstxt.es`). Applies to new activations and fresh installs; existing saved URLs are preserved. The catalog API at the new domain is verified live.
+* Plugin version 0.3.0 → 0.3.1.
+
+= 0.3.0 =
+
+_Release date: 2026-08-13_
+
+**Highlights**
+
+* Classic install/activate/update flow: the catalog actions now run on a full page load (`admin-post.php` with per-action-and-slug nonces) and report the outcome through standard admin notices (green success / red error) at the top of the page, replacing the previous AJAX flow.
+
+**Added**
+
+* Activate action — installed-but-inactive plugins show an "Activate" button that calls `activate_plugins()`.
+* Update action — plugins with a newer catalog version show an "Update" button that re-downloads the ZIP and runs the `Plugin_Upgrader` with `overwrite` enabled.
+* Install/Activate/Update buttons are nonce links (`robotstxt_manager_{action}_{slug}` nonce actions) to `admin-post.php`, all `manage_options`-gated.
+* Redirect-based notices: handlers redirect back to the catalog page carrying `robotstxt_manager_result` (success/error) and `robotstxt_manager_message`, rendered as dismissible standard notices.
+
+**Changed**
+
+* `Robotstxt_Manager_Installer` rewritten from an AJAX handler to three admin-post handlers (`robotstxt_manager_install`, `robotstxt_manager_activate`, `robotstxt_manager_update`); download logic (Bearer account-key auth, ZIP validation, temp-file cleanup) unchanged.
+* Removed the AJAX endpoint, `manager-install.js`, and its script localization.
+* Plugin version 0.2.0 → 0.3.0.
+
+**Compatibility**
+
+* WordPress: 7.0 - 7.1 (declared floor of the ecosystem; scan-confirmed lower)
+* PHP: 8.4 - 8.5 (declared floor of the ecosystem; scan-confirmed lower)
+
+= 0.2.0 =
+
+_Release date: 2026-08-12_
+
+**Highlights**
+
+* Phase 2: the Install action. Free and premium plugins can be installed directly from the ROBOTSTXT catalog into the local site, authenticated with the account-level API key (requires Plugins Core 1.4.0+).
+
+**Added**
+
+* `Robotstxt_Manager_Installer` — AJAX handler (`wp_ajax_robotstxt_manager_install_plugin`, nonce-protected, `manage_options`-gated) that resolves the plugin in the remote catalog, downloads the ZIP (free plugins with a published public `download_url` directly; everything else via Core's authenticated `/download` endpoint with an `Authorization: Bearer <account API key>` header), validates the archive (ZIP magic bytes), installs it via `Plugin_Upgrader`, and cleans up the temp file on every path.
+* `public/js/manager-install.js` — wires the Install buttons to the AJAX action with in-flight state and result rendering.
+* Catalog view: enabled Install buttons for compatible plugins (free and premium).
+
+**Changed**
+
+* Plugin version 0.1.3 → 0.2.0. Description updated to reflect Phase 2.
+
+**Compatibility**
+
+* WordPress: 7.0 - 7.1 (declared floor of the ecosystem; scan-confirmed lower)
+* PHP: 8.4 - 8.5 (declared floor of the ecosystem; scan-confirmed lower)
+
 = 0.1.3 =
 
 _Release date: 2026-08-12_
diff --git a/includes/class-robotstxt-manager-activator.php b/includes/class-robotstxt-manager-activator.php
index fd4c5fe..c8f5a64 100644
--- a/includes/class-robotstxt-manager-activator.php
+++ b/includes/class-robotstxt-manager-activator.php
@@ -44,7 +44,7 @@ class Robotstxt_Manager_Activator {
 	 */
 	private static function ensure_defaults(): void {
 		if ( '' === get_option( 'robotstxt_manager_store_url', '' ) ) {
-			update_option( 'robotstxt_manager_store_url', 'https://plugins.robotstxt.es' );
+			update_option( 'robotstxt_manager_store_url', 'https://www.robotstxt.software' );
 		}
 
 		if ( '' === get_option( 'robotstxt_manager_cache_ttl_minutes', '' ) ) {
diff --git a/includes/class-robotstxt-manager-plugin.php b/includes/class-robotstxt-manager-plugin.php
index 9ecf8fc..6252100 100644
--- a/includes/class-robotstxt-manager-plugin.php
+++ b/includes/class-robotstxt-manager-plugin.php
@@ -59,11 +59,13 @@ final class Robotstxt_Manager_Plugin {
 	private function define_hooks(): void {
 		$this->loader->add_action( 'init', $this, 'load_textdomain' );
 
-		$admin    = new Robotstxt_Manager_Admin();
-		$settings = new Robotstxt_Manager_Settings();
+		$admin     = new Robotstxt_Manager_Admin();
+		$settings  = new Robotstxt_Manager_Settings();
+		$installer = new Robotstxt_Manager_Installer();
 
 		$admin->register( $this->loader );
 		$settings->register( $this->loader );
+		$installer->register( $this->loader );
 	}
 
 	/**
diff --git a/readme.txt b/readme.txt
index dffe146..9bfe948 100644
--- a/readme.txt
+++ b/readme.txt
@@ -3,9 +3,9 @@ Contributors: javiercasares, robotstxt
 Tags: dashboard, catalog, updates, subscriptions, management
 Requires at least: 4.7
 Tested up to: 7.1
-Stable tag: 0.1.3
+Stable tag: 0.3.1
 Requires PHP: 7.4
-Version: 0.1.3
+Version: 0.3.1
 License: GPL-3.0-or-later
 License URI: https://www.gnu.org/licenses/gpl-3.0.txt
 
@@ -30,7 +30,7 @@ This plugin does **not** re-implement the per-plugin update mechanism. Every ROB
 
 Configure at **ROBOTSTXT → Settings**:
 
-* **Store URL** — Base URL of the remote Plugins Core installation (defaults to `https://plugins.robotstxt.es`).
+* **Store URL** — Base URL of the remote Plugins Core installation (defaults to `https://www.robotstxt.software`).
 * **API Key** — Account-level API key issued by the ROBOTSTXT store. Encrypted before storage; masked in the UI (last 4 characters shown). Use the "Test connection" button to verify connectivity.
 * **Catalog Cache (minutes)** — How long the catalog response is cached in a transient. Default: 60 minutes.
 * **Data on Uninstall** — Opt-in checkbox. When enabled, all Manager options and transients are deleted on uninstall. Default: off.
diff --git a/robotstxt-manager.php b/robotstxt-manager.php
index 03827d5..be2818b 100644
--- a/robotstxt-manager.php
+++ b/robotstxt-manager.php
@@ -2,8 +2,8 @@
 /**
  * Plugin Name:       Manager (by ROBOTSTXT)
  * Plugin URI:        https://git.robotstxt.es/ROBOTSTXT/robotstxt-manager
- * Description:       Client-side dashboard for the ROBOTSTXT plugin ecosystem. Lists the catalog from a remote Plugins Core install, resolves local install/update state, and surfaces subscription health. Phase 1: read-only catalog view.
- * Version:           0.1.3
+ * Description:       Client-side dashboard for the ROBOTSTXT plugin ecosystem. Lists the catalog from a remote Plugins Core install, resolves local install/update state, and installs, activates, and updates plugins directly from the store.
+ * Version:           0.3.1
  * Requires at least: 4.7
  * Requires PHP:      7.4
  * Author:            ROBOTSTXT
@@ -21,7 +21,7 @@ if ( ! defined( 'ABSPATH' ) ) {
 }
 
 /** Plugin version. */
-define( 'ROBOTSTXT_MANAGER_VERSION', '0.1.3' );
+define( 'ROBOTSTXT_MANAGER_VERSION', '0.3.1' );
 
 /** Absolute path to the plugin directory, with trailing slash. */
 define( 'ROBOTSTXT_MANAGER_DIR', plugin_dir_path( __FILE__ ) );
@@ -44,6 +44,7 @@ if ( file_exists( ROBOTSTXT_MANAGER_DIR . 'vendor/autoload.php' ) ) {
 	require_once ROBOTSTXT_MANAGER_DIR . 'includes/class-robotstxt-manager-plugin.php';
 	require_once ROBOTSTXT_MANAGER_DIR . 'admin/class-robotstxt-manager-admin.php';
 	require_once ROBOTSTXT_MANAGER_DIR . 'admin/class-robotstxt-manager-settings.php';
+	require_once ROBOTSTXT_MANAGER_DIR . 'admin/class-robotstxt-manager-installer.php';
 }
 
 register_activation_hook( __FILE__, array( 'Robotstxt_Manager_Activator', 'activate' ) );
diff --git a/vendor/composer/autoload_classmap.php b/vendor/composer/autoload_classmap.php
index ba41573..1f39cc6 100644
--- a/vendor/composer/autoload_classmap.php
+++ b/vendor/composer/autoload_classmap.php
@@ -11,6 +11,7 @@ return array(
     'Robotstxt_Manager_Admin' => $baseDir . '/admin/class-robotstxt-manager-admin.php',
     'Robotstxt_Manager_Core_Client' => $baseDir . '/includes/class-robotstxt-manager-core-client.php',
     'Robotstxt_Manager_Encryption' => $baseDir . '/includes/class-robotstxt-manager-encryption.php',
+    'Robotstxt_Manager_Installer' => $baseDir . '/admin/class-robotstxt-manager-installer.php',
     'Robotstxt_Manager_Loader' => $baseDir . '/includes/class-robotstxt-manager-loader.php',
     'Robotstxt_Manager_Plugin' => $baseDir . '/includes/class-robotstxt-manager-plugin.php',
     'Robotstxt_Manager_Settings' => $baseDir . '/admin/class-robotstxt-manager-settings.php',
diff --git a/vendor/composer/autoload_static.php b/vendor/composer/autoload_static.php
index a22a3d0..9a2f7bf 100644
--- a/vendor/composer/autoload_static.php
+++ b/vendor/composer/autoload_static.php
@@ -12,6 +12,7 @@ class ComposerStaticInit21193cc5ee16adfbe1fcd1cc267e45ef
         'Robotstxt_Manager_Admin' => __DIR__ . '/../..' . '/admin/class-robotstxt-manager-admin.php',
         'Robotstxt_Manager_Core_Client' => __DIR__ . '/../..' . '/includes/class-robotstxt-manager-core-client.php',
         'Robotstxt_Manager_Encryption' => __DIR__ . '/../..' . '/includes/class-robotstxt-manager-encryption.php',
+        'Robotstxt_Manager_Installer' => __DIR__ . '/../..' . '/admin/class-robotstxt-manager-installer.php',
         'Robotstxt_Manager_Loader' => __DIR__ . '/../..' . '/includes/class-robotstxt-manager-loader.php',
         'Robotstxt_Manager_Plugin' => __DIR__ . '/../..' . '/includes/class-robotstxt-manager-plugin.php',
         'Robotstxt_Manager_Settings' => __DIR__ . '/../..' . '/admin/class-robotstxt-manager-settings.php',

From 38fbcf80a54ce5e107abb94ff1acd853eccf3581 Mon Sep 17 00:00:00 2001
From: Javier Casares <javier@robotstxt.es>
Date: Fri, 14 Aug 2026 16:46:11 +0000
Subject: [PATCH 04/23] v0.4.0

---
 admin/views/page-catalog.php | 35 +++++++++++++++++++++++++++++++-
 changelog.txt                | 29 +++++++++++++++++++++++++++
 readme.txt                   | 39 +++++++++++++++++++++++++++++-------
 robotstxt-manager.php        |  4 ++--
 4 files changed, 97 insertions(+), 10 deletions(-)

diff --git a/admin/views/page-catalog.php b/admin/views/page-catalog.php
index 51fc99f..366e5ed 100644
--- a/admin/views/page-catalog.php
+++ b/admin/views/page-catalog.php
@@ -112,6 +112,8 @@ $compat_warnings   = 0;
 					$raw_cost = $entry['price_annual'] ?? 0;
 					$raw_ver  = $entry['current_version'] ?? '';
 					$raw_url  = $entry['page_url'] ?? '';
+					$raw_home = $entry['homepage'] ?? '';
+					$raw_desc = $entry['description'] ?? '';
 					$raw_rwp  = $entry['requires_wp'] ?? '';
 					$raw_rphp = $entry['requires_php'] ?? '';
 
@@ -121,9 +123,15 @@ $compat_warnings   = 0;
 					$cost     = is_numeric( $raw_cost ) ? (float) ( $raw_cost + 0.0 ) : 0.0;
 					$remote_v = is_string( $raw_ver ) ? $raw_ver : '';
 					$page_url = is_string( $raw_url ) ? $raw_url : '';
+					$homepage = is_string( $raw_home ) ? $raw_home : '';
+					$desc     = is_string( $raw_desc ) ? trim( $raw_desc ) : '';
 					$req_wp   = is_string( $raw_rwp ) ? $raw_rwp : '';
 					$req_php  = is_string( $raw_rphp ) ? $raw_rphp : '';
 
+					$website_url = '' !== $page_url ? $page_url : $homepage;
+					$expandable  = ( '' !== $desc || '' !== $website_url );
+					$toggle_id   = 'robotstxt-manager-toggle-' . esc_attr( $slug );
+
 					// Compatibility checks.
 					$wp_ok  = '' === $req_wp || version_compare( $local_wp_version, $req_wp, '>=' );
 					$php_ok = '' === $req_php || version_compare( $local_php_version, $req_php, '>=' );
@@ -148,7 +156,11 @@ $compat_warnings   = 0;
 					$row_class = ( ! $wp_ok || ! $php_ok ) ? ' robotstxt-manager-row--incompatible' : '';
 					?>
 					<tr class="<?php echo esc_attr( ltrim( $row_class ) ); ?>">
-						<td>
+						<td class="robotstxt-manager-name-cell">
+							<?php if ( $expandable ) : ?>
+								<input type="checkbox" class="robotstxt-manager-toggle" id="<?php echo esc_attr( $toggle_id ); ?>" aria-label="<?php esc_attr_e( 'Show more information', 'robotstxt-manager' ); ?>" />
+								<label class="robotstxt-manager-toggle-label" for="<?php echo esc_attr( $toggle_id ); ?>"><span class="robotstxt-manager-toggle-arrow"></span></label>
+							<?php endif; ?>
 							<strong><?php echo esc_html( $name ); ?></strong>
 							<?php if ( '' !== $remote_v ) : ?>
 								<br /><span class="description"><?php echo esc_html( sprintf( 'v%s', $remote_v ) ); ?></span>
@@ -228,6 +240,18 @@ $compat_warnings   = 0;
 						<?php endif; ?>
 					</td>
 					</tr>
+					<?php if ( $expandable ) : ?>
+					<tr class="robotstxt-manager-detail-row">
+						<td colspan="7">
+							<?php if ( '' !== $desc ) : ?>
+								<p class="robotstxt-manager-detail-description"><?php echo esc_html( $desc ); ?></p>
+							<?php endif; ?>
+							<?php if ( '' !== $website_url ) : ?>
+								<a href="<?php echo esc_url( $website_url ); ?>" target="_blank" rel="noopener noreferrer"><?php esc_html_e( 'Visit website', 'robotstxt-manager' ); ?> <span class="screen-reader-text"><?php echo esc_html( sprintf( /* translators: %s: plugin name. */ __( '(about %s)', 'robotstxt-manager' ), $name ) ); ?></span></a>
+							<?php endif; ?>
+						</td>
+					</tr>
+					<?php endif; ?>
 				<?php endforeach; ?>
 			</tbody>
 		</table>
@@ -265,4 +289,13 @@ $compat_warnings   = 0;
 .robotstxt-manager-compat--fail { color: #d63638; font-weight: 600; }
 .robotstxt-manager-compat-warning { cursor: help; }
 .robotstxt-manager-row--incompatible { background-color: #fef7f0 !important; }
+
+/* Expandable detail rows (CSS-only toggle). */
+.robotstxt-manager-toggle { display: none; }
+.robotstxt-manager-toggle-label { cursor: pointer; display: inline-block; width: 1.4em; }
+.robotstxt-manager-toggle-arrow::before { content: "\25B8"; /* ▸ */ }
+.robotstxt-manager-detail-row { display: none; }
+.robotstxt-manager-detail-row td { border-top: none !important; }
+tr:has(.robotstxt-manager-toggle:checked) + tr.robotstxt-manager-detail-row { display: table-row; }
+tr:has(.robotstxt-manager-toggle:checked) .robotstxt-manager-toggle-arrow::before { content: "\25BE"; /* ▾ */ }
 </style>
diff --git a/changelog.txt b/changelog.txt
index 830c028..84a9104 100644
--- a/changelog.txt
+++ b/changelog.txt
@@ -1,12 +1,41 @@
 == Changelog ==
 
+= 0.4.0 =
+
+_Release date: 2026-08-14_
+
+**Highlights**
+
+* Click-to-expand rows in the catalog table: clicking the ▸ next to a plugin's name reveals a detail row with the plugin's description and a link to its website on the store, so users can understand what each plugin does before installing. Pure CSS toggle (`:has()` + hidden checkbox) — no JavaScript, consistent with the classic-flow philosophy.
+
+**Added**
+
+* Detail row under each catalog entry, shown when the entry has a description or a website URL (Core 1.4.2+ exposes `description` in the catalog list; entries without either keep a plain, non-expandable row).
+* "Visit website" link using `page_url` (falling back to `homepage`), opened in a new tab with `rel="noopener noreferrer"`.
+
+**Changed**
+
+* Plugin version 0.3.1 → 0.4.0. No database schema changes (no custom tables).
+
+**Compatibility**
+
+* WordPress: 7.0 - 7.1 (declared floor of the ecosystem; scan-confirmed lower)
+* PHP: 8.4 - 8.5 (declared floor of the ecosystem; scan-confirmed lower)
+
 = 0.3.1 =
 
 _Release date: 2026-08-14_
 
+**Changed**
+
 * Default store URL is now `https://www.robotstxt.software` (was `https://plugins.robotstxt.es`). Applies to new activations and fresh installs; existing saved URLs are preserved. The catalog API at the new domain is verified live.
 * Plugin version 0.3.0 → 0.3.1.
 
+**Compatibility**
+
+* WordPress: 7.0 - 7.1 (declared floor of the ecosystem; scan-confirmed lower)
+* PHP: 8.4 - 8.5 (declared floor of the ecosystem; scan-confirmed lower)
+
 = 0.3.0 =
 
 _Release date: 2026-08-13_
diff --git a/readme.txt b/readme.txt
index 9bfe948..8993d34 100644
--- a/readme.txt
+++ b/readme.txt
@@ -3,9 +3,9 @@ Contributors: javiercasares, robotstxt
 Tags: dashboard, catalog, updates, subscriptions, management
 Requires at least: 4.7
 Tested up to: 7.1
-Stable tag: 0.3.1
+Stable tag: 0.4.0
 Requires PHP: 7.4
-Version: 0.3.1
+Version: 0.4.0
 License: GPL-3.0-or-later
 License URI: https://www.gnu.org/licenses/gpl-3.0.txt
 
@@ -17,12 +17,13 @@ Manager (by ROBOTSTXT) is a WordPress plugin that customers install on **their o
 
 * Lists the full plugin catalog with name, type (free/premium), price, and current version.
 * For each catalog entry, shows the **local install state**: not installed, installed (inactive), up to date, or update available.
-* One-click actions (Phase 2+): Install free plugins, Buy paid plugins (redirects to checkout on the store site), trigger native WordPress updates.
+* Click a plugin's row to expand its description and a link to its website on the store.
+* One-click actions: Install, Activate, and Update run on a classic page load with a standard admin notice (green/red) reporting the outcome; Buy redirects to checkout on the store site.
 * Subscription health dashboard (Phase 4+): license expiring soon, payment failed, expired — surfaced as admin notices so issues are visible before updates silently stop.
 
 This plugin does **not** re-implement the per-plugin update mechanism. Every ROBOTSTXT plugin bundles its own copy of the `Robotstxt_Core_Plugin_Updater` SDK, so updates keep working even if Manager is deactivated. Manager's value is visibility and one place to click.
 
-**Phase 1 (current):** Read-only catalog view with local install-state resolution. Settings screen with API key (encrypted at rest), store URL, cache TTL, and connection test. Install/Update/Buy buttons are present but disabled pending Phase 2+.
+**Requires Core 1.4.2+** on the store for descriptions in the catalog list (older Core versions still work; rows simply show no description).
 
 == Using the plugin ==
 
@@ -41,13 +42,13 @@ Configure at **ROBOTSTXT → Settings**:
 
 | Column | Description |
 |---|---|
-| Plugin | Name and current version from the store. |
+| Plugin | Name and current version from the store. Click ▸ to expand the description and website link. |
 | Type | Free or Premium. |
 | Price | Annual price in EUR, or — for free plugins. |
 | Local state | Not installed / Installed (inactive) / Up to date / Update available (vX → vY). |
-| Action | Install / Buy / Update (Phase 2+; disabled in Phase 1). |
+| Action | Install / Activate / Update / Buy, depending on local state. |
 
-Click "Refresh catalog" to force a fresh fetch from Core.
+Click "Refresh catalog" to force a fresh fetch from Core. Install, Activate, and Update run on a classic page load (no JavaScript) and report the result as a standard admin notice.
 
 == Extra Configurations ==
 
@@ -88,6 +89,30 @@ Encrypted at rest using AES-256-CBC with a key derived from your site's WordPres
 
 == Changelog ==
 
+= 0.4.0 =
+
+_Release date: 2026-08-14_
+
+* Click-to-expand rows in the catalog: each plugin's description and a link to its website are shown in a detail row under the plugin name (CSS-only toggle, no JavaScript). Requires Core 1.4.2+ on the store.
+
+= 0.3.1 =
+
+_Release date: 2026-08-14_
+
+* Default store URL is now `https://www.robotstxt.software`. Existing saved URLs are preserved.
+
+= 0.3.0 =
+
+_Release date: 2026-08-13_
+
+* Classic install/activate/update flow: actions run on a full page load (`admin-post.php` with per-action-and-slug nonces) and report the outcome through standard admin notices (green success / red error), replacing the previous AJAX flow.
+
+= 0.2.0 =
+
+_Release date: 2026-08-13_
+
+* Install action: free and premium plugins install directly from the catalog, authenticated with the account-level API key against Core's `/download` endpoint (requires Core 1.4.0+).
+
 = 0.1.3 =
 
 _Release date: 2026-08-12_
diff --git a/robotstxt-manager.php b/robotstxt-manager.php
index be2818b..a4d4f84 100644
--- a/robotstxt-manager.php
+++ b/robotstxt-manager.php
@@ -3,7 +3,7 @@
  * Plugin Name:       Manager (by ROBOTSTXT)
  * Plugin URI:        https://git.robotstxt.es/ROBOTSTXT/robotstxt-manager
  * Description:       Client-side dashboard for the ROBOTSTXT plugin ecosystem. Lists the catalog from a remote Plugins Core install, resolves local install/update state, and installs, activates, and updates plugins directly from the store.
- * Version:           0.3.1
+ * Version:           0.4.0
  * Requires at least: 4.7
  * Requires PHP:      7.4
  * Author:            ROBOTSTXT
@@ -21,7 +21,7 @@ if ( ! defined( 'ABSPATH' ) ) {
 }
 
 /** Plugin version. */
-define( 'ROBOTSTXT_MANAGER_VERSION', '0.3.1' );
+define( 'ROBOTSTXT_MANAGER_VERSION', '0.4.0' );
 
 /** Absolute path to the plugin directory, with trailing slash. */
 define( 'ROBOTSTXT_MANAGER_DIR', plugin_dir_path( __FILE__ ) );

From 90ac22a84514f1f6bd17a881e78fc36ff7e88800 Mon Sep 17 00:00:00 2001
From: Javier Casares <javier@robotstxt.es>
Date: Fri, 14 Aug 2026 20:07:54 +0000
Subject: [PATCH 05/23] v0.5.0

---
 admin/class-robotstxt-manager-admin.php      |   5 +-
 changelog.txt                                |  23 ++
 includes/class-robotstxt-manager-plugin.php  |   2 +
 includes/class-robotstxt-manager-updater.php | 337 +++++++++++++++++++
 readme.txt                                   |  10 +-
 robotstxt-manager.php                        |   5 +-
 vendor/composer/autoload_classmap.php        |   1 +
 vendor/composer/autoload_static.php          |   1 +
 8 files changed, 379 insertions(+), 5 deletions(-)
 create mode 100644 includes/class-robotstxt-manager-updater.php

diff --git a/admin/class-robotstxt-manager-admin.php b/admin/class-robotstxt-manager-admin.php
index a569212..3ef11b3 100644
--- a/admin/class-robotstxt-manager-admin.php
+++ b/admin/class-robotstxt-manager-admin.php
@@ -74,7 +74,9 @@ class Robotstxt_Manager_Admin {
 	/**
 	 * Handles the "Refresh catalog" admin-post action.
 	 *
-	 * Clears the cached catalog response and redirects back to the page.
+	 * Clears the cached catalog response, purges WordPress's update_plugins
+	 * transient so native update badges re-evaluate immediately, and
+	 * redirects back to the page.
 	 *
 	 * @return void
 	 */
@@ -87,6 +89,7 @@ class Robotstxt_Manager_Admin {
 
 		$client = Robotstxt_Manager_Core_Client::from_options();
 		$client->clear_catalog_cache();
+		delete_site_transient( 'update_plugins' );
 
 		$redirect = add_query_arg(
 			array(
diff --git a/changelog.txt b/changelog.txt
index 84a9104..e14081a 100644
--- a/changelog.txt
+++ b/changelog.txt
@@ -1,5 +1,28 @@
 == Changelog ==
 
+= 0.5.0 =
+
+_Release date: 2026-08-14_
+
+**Highlights**
+
+* Native WordPress update integration: installed catalog plugins feed into WordPress's own update system. The standard "Update available" badge appears on the Plugins screen, and clicking "Update now" runs the normal WordPress updater with the ROBOTSTXT store as the download source — no custom UI.
+
+**Added**
+
+* `Robotstxt_Manager_Updater` — injects catalog update data into the `update_plugins` transient (`pre_set_site_transient_update_plugins`): a `response` entry for outdated catalog plugins (package = the store's download proxy; premium entries append the account API key as `api_key`, which Core 1.5.0+ accepts as a query parameter because the native upgrader cannot send headers) and a `no_update` entry for up-to-date ones. Entries injected by a plugin's own bundled SDK are never overwritten.
+* `plugins_api` filter — the "View details" modal for catalog slugs is served from catalog data (name, version, requires, tested, homepage, description section, icon, banner).
+* "Refresh catalog" now also deletes the `update_plugins` transient so the update badges re-evaluate immediately.
+
+**Changed**
+
+* Plugin version 0.4.0 → 0.5.0. No database schema changes (no custom tables).
+
+**Compatibility**
+
+* WordPress: 7.0 - 7.1 (declared floor of the ecosystem; scan-confirmed lower)
+* PHP: 8.4 - 8.5 (declared floor of the ecosystem; scan-confirmed lower)
+
 = 0.4.0 =
 
 _Release date: 2026-08-14_
diff --git a/includes/class-robotstxt-manager-plugin.php b/includes/class-robotstxt-manager-plugin.php
index 6252100..5ee0c56 100644
--- a/includes/class-robotstxt-manager-plugin.php
+++ b/includes/class-robotstxt-manager-plugin.php
@@ -62,10 +62,12 @@ final class Robotstxt_Manager_Plugin {
 		$admin     = new Robotstxt_Manager_Admin();
 		$settings  = new Robotstxt_Manager_Settings();
 		$installer = new Robotstxt_Manager_Installer();
+		$updater   = new Robotstxt_Manager_Updater();
 
 		$admin->register( $this->loader );
 		$settings->register( $this->loader );
 		$installer->register( $this->loader );
+		$updater->register( $this->loader );
 	}
 
 	/**
diff --git a/includes/class-robotstxt-manager-updater.php b/includes/class-robotstxt-manager-updater.php
new file mode 100644
index 0000000..bd98198
--- /dev/null
+++ b/includes/class-robotstxt-manager-updater.php
@@ -0,0 +1,337 @@
+<?php
+/**
+ * Native WordPress update integration for ROBOTSTXT catalog plugins.
+ *
+ * @package Robotstxt_Manager
+ */
+
+if ( ! defined( 'ABSPATH' ) ) {
+	exit;
+}
+
+/**
+ * Class Robotstxt_Manager_Updater
+ *
+ * Feeds catalog data into WordPress's native update system so catalog plugins
+ * show the standard "Update available" badge and update through the regular
+ * wp-admin flow, with the store's download proxy as the package source.
+ *
+ * - `pre_set_site_transient_update_plugins`: adds entries to ->response for
+ *   installed catalog plugins with a newer remote version, and to ->no_update
+ *   for up-to-date ones (prevents false WordPress.org matches).
+ * - `plugins_api`: serves the "View details" modal from catalog data.
+ *
+ * Plugins that bundle their own update SDK already inject their own entries;
+ * Manager never overwrites an existing response entry.
+ */
+class Robotstxt_Manager_Updater {
+
+	/**
+	 * Registers all hooks via the loader.
+	 *
+	 * @param Robotstxt_Manager_Loader $loader The plugin hook loader.
+	 *
+	 * @return void
+	 */
+	public function register( Robotstxt_Manager_Loader $loader ): void {
+		$loader->add_filter( 'pre_set_site_transient_update_plugins', $this, 'inject_updates' );
+		$loader->add_filter( 'plugins_api', $this, 'plugins_api_filter', 10, 3 );
+	}
+
+	/**
+	 * Injects catalog update data into the WordPress update transient.
+	 *
+	 * @param mixed $transient The update_plugins transient object.
+	 *
+	 * @return mixed Modified transient.
+	 */
+	public function inject_updates( mixed $transient ): mixed {
+		if ( ! is_object( $transient )
+			|| ! property_exists( $transient, 'checked' )
+			|| ! is_array( $transient->checked )
+			|| empty( $transient->checked )
+		) {
+			return $transient;
+		}
+
+		$client = Robotstxt_Manager_Core_Client::from_options();
+
+		if ( ! $client->is_configured() ) {
+			return $transient;
+		}
+
+		$catalog = $client->get_catalog();
+
+		if ( empty( $catalog ) ) {
+			return $transient;
+		}
+
+		$entries = $this->catalog_by_slug( $catalog );
+
+		foreach ( $transient->checked as $plugin_file => $raw_version ) {
+			$version = is_string( $raw_version ) ? $raw_version : '';
+			$slug    = $this->slug_from_file( (string) $plugin_file );
+			$entry   = $entries[ $slug ] ?? null;
+
+			if ( null === $entry || '' === $version ) {
+				continue;
+			}
+
+			$new_version = $entry['new_version'];
+
+			if ( '' === $new_version ) {
+				continue;
+			}
+
+			// Never overwrite an entry injected by the plugin's own SDK.
+			if ( property_exists( $transient, 'response' )
+				&& is_array( $transient->response )
+				&& isset( $transient->response[ $plugin_file ] )
+			) {
+				continue;
+			}
+
+			if ( version_compare( $version, $new_version, '<' ) ) {
+				if ( property_exists( $transient, 'response' ) && is_array( $transient->response ) ) {
+					$transient->response[ $plugin_file ] = $this->build_update_object( $slug, (string) $plugin_file, $entry );
+				}
+			} elseif ( property_exists( $transient, 'no_update' ) && is_array( $transient->no_update ) ) {
+				$transient->no_update[ $plugin_file ] = $this->build_update_object( $slug, (string) $plugin_file, $entry, $version );
+			}
+		}
+
+		return $transient;
+	}
+
+	/**
+	 * Serves the "View details" modal for catalog plugins from catalog data.
+	 *
+	 * @param mixed  $result Current filter result.
+	 * @param string $action API action (only 'plugin_information' is handled).
+	 * @param mixed  $args   Request arguments; expected object with 'slug'.
+	 *
+	 * @return mixed Plugin info object, or the original $result.
+	 */
+	public function plugins_api_filter( mixed $result, string $action, mixed $args ): mixed {
+		if ( 'plugin_information' !== $action || ! is_object( $args ) || empty( $args->slug ) ) {
+			return $result;
+		}
+
+		$client = Robotstxt_Manager_Core_Client::from_options();
+
+		if ( ! $client->is_configured() ) {
+			return $result;
+		}
+
+		$catalog = $client->get_catalog();
+
+		if ( empty( $catalog ) ) {
+			return $result;
+		}
+
+		$slug    = sanitize_key( (string) $args->slug );
+		$entries = $this->catalog_by_slug( $catalog );
+		$entry   = $entries[ $slug ] ?? null;
+
+		if ( null === $entry ) {
+			return $result;
+		}
+
+		$sections = array();
+
+		if ( '' !== $entry['description'] ) {
+			$sections['description'] = wp_kses_post( wpautop( $entry['description'] ) );
+		}
+
+		if ( empty( $sections ) ) {
+			$sections['description'] = '';
+		}
+
+		$info = array(
+			'name'          => $entry['name'],
+			'slug'          => $slug,
+			'version'       => $entry['new_version'],
+			'requires'      => $entry['requires_wp'],
+			'requires_php'  => $entry['requires_php'],
+			'tested'        => $entry['tested_up_to'],
+			'last_updated'  => '',
+			'homepage'      => $entry['page_url'],
+			'sections'      => $sections,
+			'download_link' => '',
+		);
+
+		if ( '' !== $entry['icon_url'] ) {
+			$info['icons'] = array(
+				'1x' => $entry['icon_url'],
+				'2x' => $entry['icon_url'],
+			);
+		}
+
+		if ( '' !== $entry['banner_url'] ) {
+			$info['banners'] = array(
+				'low'  => $entry['banner_url'],
+				'high' => $entry['banner_url'],
+			);
+		}
+
+		return (object) $info;
+	}
+
+	/**
+	 * Indexes catalog entries by slug with normalised fields.
+	 *
+	 * @param list<array<string,mixed>> $catalog Catalog entries from Core.
+	 *
+	 * @return array<string, array<string,string>> Normalised entries keyed by slug.
+	 */
+	private function catalog_by_slug( array $catalog ): array {
+		$entries = array();
+
+		foreach ( $catalog as $row ) {
+			$raw_slug = $row['slug'] ?? '';
+			$slug     = is_string( $raw_slug ) ? sanitize_key( $raw_slug ) : '';
+
+			if ( '' === $slug ) {
+				continue;
+			}
+
+			$entries[ $slug ] = array(
+				'name'         => $this->str( $row, 'name', $slug ),
+				'type'         => $this->str( $row, 'type', 'free' ),
+				'new_version'  => $this->str( $row, 'current_version', '' ),
+				'requires_wp'  => $this->str( $row, 'requires_wp', '' ),
+				'requires_php' => $this->str( $row, 'requires_php', '' ),
+				'tested_up_to' => $this->str( $row, 'tested_up_to', '' ),
+				'page_url'     => $this->str( $row, 'page_url', '' ),
+				'description'  => $this->str( $row, 'description', '' ),
+				'icon_url'     => $this->str( $row, 'icon_url', '' ),
+				'banner_url'   => $this->str( $row, 'banner_url', '' ),
+			);
+		}
+
+		return $entries;
+	}
+
+	/**
+	 * Builds the update/no-update object for the WordPress transient.
+	 *
+	 * @param string                $slug            Plugin slug.
+	 * @param string                $plugin_file     Plugin basename.
+	 * @param array<string, string> $entry           Normalised catalog entry.
+	 * @param string|null           $current_version Installed version; when null an
+	 *                                               update entry is built, otherwise a
+	 *                                               no-update entry pinned to this version.
+	 *
+	 * @return object stdClass for the transient bucket.
+	 */
+	private function build_update_object( string $slug, string $plugin_file, array $entry, ?string $current_version = null ): object {
+		$is_no_update = null !== $current_version;
+
+		$data = array(
+			'id'           => $plugin_file,
+			'slug'         => $slug,
+			'plugin'       => $plugin_file,
+			'new_version'  => $is_no_update ? $current_version : $entry['new_version'],
+			'url'          => $entry['page_url'],
+			'package'      => $is_no_update ? '' : $this->package_url( $slug, $entry['type'] ),
+			'requires'     => $entry['requires_wp'],
+			'requires_php' => $entry['requires_php'],
+			'tested'       => $entry['tested_up_to'],
+			'icons'        => array(),
+			'banners'      => array(),
+		);
+
+		if ( ! $is_no_update ) {
+			if ( '' !== $entry['icon_url'] ) {
+				$data['icons'] = array(
+					'1x' => $entry['icon_url'],
+					'2x' => $entry['icon_url'],
+				);
+			}
+
+			if ( '' !== $entry['banner_url'] ) {
+				$data['banners'] = array(
+					'low'  => $entry['banner_url'],
+					'high' => $entry['banner_url'],
+				);
+			}
+		}
+
+		return (object) $data;
+	}
+
+	/**
+	 * Builds the download package URL for the native upgrader.
+	 *
+	 * Free plugins stream through the proxy without auth (Core 1.4.0+).
+	 * Premium plugins append the account API key as an api_key query parameter
+	 * (accepted by Core 1.5.0+) — the native upgrader cannot send headers.
+	 *
+	 * @param string $slug Plugin slug.
+	 * @param string $type Plugin type ('free' or 'premium').
+	 *
+	 * @return string Package URL.
+	 */
+	private function package_url( string $slug, string $type ): string {
+		$client = Robotstxt_Manager_Core_Client::from_options();
+
+		$url  = $client->get_store_url() . '/wp-json/robotstxt-core/v1/plugins/' . rawurlencode( $slug ) . '/download';
+		$args = array(
+			'domain' => $this->site_domain(),
+		);
+
+		if ( 'premium' === $type ) {
+			$api_key_raw = get_option( 'robotstxt_manager_api_key', '' );
+			$api_key     = is_string( $api_key_raw ) ? Robotstxt_Manager_Encryption::decrypt( $api_key_raw ) : '';
+
+			if ( '' !== $api_key ) {
+				$args['api_key'] = $api_key;
+			}
+		}
+
+		return add_query_arg( $args, $url );
+	}
+
+	/**
+	 * Returns the normalised domain of the current site.
+	 *
+	 * @return string Domain (e.g. 'example.com').
+	 */
+	private function site_domain(): string {
+		$host = (string) wp_parse_url( home_url(), PHP_URL_HOST );
+
+		return strtolower( ltrim( $host, 'www.' ) );
+	}
+
+	/**
+	 * Resolves a plugin basename to its directory slug.
+	 *
+	 * @param string $plugin_file Plugin basename (e.g. 'slug/file.php').
+	 *
+	 * @return string Slug.
+	 */
+	private function slug_from_file( string $plugin_file ): string {
+		$slug = dirname( $plugin_file );
+
+		if ( '.' === $slug ) {
+			$slug = basename( $plugin_file, '.php' );
+		}
+
+		return $slug;
+	}
+
+	/**
+	 * Extracts a string value from a mixed-value row.
+	 *
+	 * @param array<string, mixed> $row      Catalog row.
+	 * @param string               $key      Key to read.
+	 * @param string               $fallback Default when absent or non-string.
+	 *
+	 * @return string
+	 */
+	private function str( array $row, string $key, string $fallback ): string {
+		$value = $row[ $key ] ?? $fallback;
+
+		return is_string( $value ) ? $value : $fallback;
+	}
+}
diff --git a/readme.txt b/readme.txt
index 8993d34..555ab09 100644
--- a/readme.txt
+++ b/readme.txt
@@ -3,9 +3,9 @@ Contributors: javiercasares, robotstxt
 Tags: dashboard, catalog, updates, subscriptions, management
 Requires at least: 4.7
 Tested up to: 7.1
-Stable tag: 0.4.0
+Stable tag: 0.5.0
 Requires PHP: 7.4
-Version: 0.4.0
+Version: 0.5.0
 License: GPL-3.0-or-later
 License URI: https://www.gnu.org/licenses/gpl-3.0.txt
 
@@ -89,6 +89,12 @@ Encrypted at rest using AES-256-CBC with a key derived from your site's WordPres
 
 == Changelog ==
 
+= 0.5.0 =
+
+_Release date: 2026-08-14_
+
+* Native update integration: catalog plugins now show WordPress's standard "Update available" badge and update through the regular wp-admin flow. Updates download from the ROBOTSTXT store (premium plugins authenticate via the account API key; requires Core 1.5.0+). "View details" modal data comes from the catalog. Refreshing the catalog also forces a fresh WordPress update check.
+
 = 0.4.0 =
 
 _Release date: 2026-08-14_
diff --git a/robotstxt-manager.php b/robotstxt-manager.php
index a4d4f84..69a2643 100644
--- a/robotstxt-manager.php
+++ b/robotstxt-manager.php
@@ -3,7 +3,7 @@
  * Plugin Name:       Manager (by ROBOTSTXT)
  * Plugin URI:        https://git.robotstxt.es/ROBOTSTXT/robotstxt-manager
  * Description:       Client-side dashboard for the ROBOTSTXT plugin ecosystem. Lists the catalog from a remote Plugins Core install, resolves local install/update state, and installs, activates, and updates plugins directly from the store.
- * Version:           0.4.0
+ * Version:           0.5.0
  * Requires at least: 4.7
  * Requires PHP:      7.4
  * Author:            ROBOTSTXT
@@ -21,7 +21,7 @@ if ( ! defined( 'ABSPATH' ) ) {
 }
 
 /** Plugin version. */
-define( 'ROBOTSTXT_MANAGER_VERSION', '0.4.0' );
+define( 'ROBOTSTXT_MANAGER_VERSION', '0.5.0' );
 
 /** Absolute path to the plugin directory, with trailing slash. */
 define( 'ROBOTSTXT_MANAGER_DIR', plugin_dir_path( __FILE__ ) );
@@ -42,6 +42,7 @@ if ( file_exists( ROBOTSTXT_MANAGER_DIR . 'vendor/autoload.php' ) ) {
 	require_once ROBOTSTXT_MANAGER_DIR . 'includes/class-robotstxt-manager-core-client.php';
 	require_once ROBOTSTXT_MANAGER_DIR . 'includes/class-robotstxt-manager-activator.php';
 	require_once ROBOTSTXT_MANAGER_DIR . 'includes/class-robotstxt-manager-plugin.php';
+	require_once ROBOTSTXT_MANAGER_DIR . 'includes/class-robotstxt-manager-updater.php';
 	require_once ROBOTSTXT_MANAGER_DIR . 'admin/class-robotstxt-manager-admin.php';
 	require_once ROBOTSTXT_MANAGER_DIR . 'admin/class-robotstxt-manager-settings.php';
 	require_once ROBOTSTXT_MANAGER_DIR . 'admin/class-robotstxt-manager-installer.php';
diff --git a/vendor/composer/autoload_classmap.php b/vendor/composer/autoload_classmap.php
index 1f39cc6..3ff45e9 100644
--- a/vendor/composer/autoload_classmap.php
+++ b/vendor/composer/autoload_classmap.php
@@ -15,4 +15,5 @@ return array(
     'Robotstxt_Manager_Loader' => $baseDir . '/includes/class-robotstxt-manager-loader.php',
     'Robotstxt_Manager_Plugin' => $baseDir . '/includes/class-robotstxt-manager-plugin.php',
     'Robotstxt_Manager_Settings' => $baseDir . '/admin/class-robotstxt-manager-settings.php',
+    'Robotstxt_Manager_Updater' => $baseDir . '/includes/class-robotstxt-manager-updater.php',
 );
diff --git a/vendor/composer/autoload_static.php b/vendor/composer/autoload_static.php
index 9a2f7bf..7d5ea49 100644
--- a/vendor/composer/autoload_static.php
+++ b/vendor/composer/autoload_static.php
@@ -16,6 +16,7 @@ class ComposerStaticInit21193cc5ee16adfbe1fcd1cc267e45ef
         'Robotstxt_Manager_Loader' => __DIR__ . '/../..' . '/includes/class-robotstxt-manager-loader.php',
         'Robotstxt_Manager_Plugin' => __DIR__ . '/../..' . '/includes/class-robotstxt-manager-plugin.php',
         'Robotstxt_Manager_Settings' => __DIR__ . '/../..' . '/admin/class-robotstxt-manager-settings.php',
+        'Robotstxt_Manager_Updater' => __DIR__ . '/../..' . '/includes/class-robotstxt-manager-updater.php',
     );
 
     public static function getInitializer(ClassLoader $loader)

From 061329c704997949cd0fc99476578154af32208e Mon Sep 17 00:00:00 2001
From: Javier Casares <javier@robotstxt.es>
Date: Sat, 15 Aug 2026 12:40:32 +0000
Subject: [PATCH 06/23] v0.5.1

---
 admin/class-robotstxt-manager-settings.php    | 14 +++++++++++
 changelog.txt                                 | 25 +++++++++++++++++++
 .../class-robotstxt-manager-core-client.php   | 20 +++++++++++++--
 includes/class-robotstxt-manager-updater.php  | 24 ++++++++++++++++--
 readme.txt                                    | 25 +++++++++++++------
 robotstxt-manager.php                         |  8 +++---
 uninstall.php                                 |  5 +++-
 vendor/autoload.php                           |  2 +-
 vendor/composer/autoload_real.php             |  8 +++---
 vendor/composer/autoload_static.php           |  4 +--
 vendor/composer/platform_check.php            |  4 +--
 11 files changed, 114 insertions(+), 25 deletions(-)

diff --git a/admin/class-robotstxt-manager-settings.php b/admin/class-robotstxt-manager-settings.php
index 1c2d7ac..6e54620 100644
--- a/admin/class-robotstxt-manager-settings.php
+++ b/admin/class-robotstxt-manager-settings.php
@@ -333,6 +333,20 @@ class Robotstxt_Manager_Settings {
 			return is_string( $raw ) ? $raw : '';
 		}
 
+		// Account keys are UUIDs issued by the store; reject anything that
+		// cannot be one rather than storing a mangled key that only fails
+		// later at connection time.
+		if ( ! preg_match( '/^[a-f0-9][a-f0-9-]{7,126}$/i', $plain ) ) {
+			add_settings_error(
+				'robotstxt_manager_api_key',
+				'invalid_api_key',
+				esc_html__( 'The API key format is invalid. Copy the full key from your ROBOTSTXT account page.', 'robotstxt-manager' )
+			);
+
+			$raw = get_option( 'robotstxt_manager_api_key', '' );
+			return is_string( $raw ) ? $raw : '';
+		}
+
 		delete_transient( 'robotstxt_manager_catalog' );
 
 		return Robotstxt_Manager_Encryption::encrypt( $plain );
diff --git a/changelog.txt b/changelog.txt
index e14081a..24095ca 100644
--- a/changelog.txt
+++ b/changelog.txt
@@ -1,5 +1,30 @@
 == Changelog ==
 
+= 0.5.1 =
+
+_Release date: 2026-08-15_
+
+**Highlights**
+
+* Stabilization release after a full code + security audit (fresh-context review per AGENTS-deploy.md) and full-range compatibility scans (PHPCompatibility 5.6–8.5, wp-compat laddering). Declared requirements now match the real floors: **WordPress 4.4+** (was 4.7) and **PHP 8.0+** (was 7.4 — the updater's `mixed` type hints and `str_contains()` require 8.0; previously under-declared, which would have been a fatal on 7.4).
+
+**Fixed**
+
+* `test_connection()` reported "Connected." on non-200 responses and `get_catalog()` cached auth failures as an empty catalog for the full TTL. Both now check the HTTP status; non-200 responses return an error/empty and are never cached.
+* `site_domain()` used `ltrim( $host, 'www.' )`, which strips a character set and mangles hosts starting with `w` (e.g. `webdev.example.com` → `ebdev…`, breaking premium package URLs). Now strips only the literal `www.` prefix.
+* Native-update integration no longer injects premium `response` entries when no decryptable API key exists (the native updater would download into a 403).
+* Opt-in uninstall: also deletes the `update_plugins` site transient (premium entries embed the API key in the package URL — the plaintext copy must not outlive the plugin) and stops deleting a phantom `robotstxt_manager_db_version` option nothing ever wrote.
+
+**Changed**
+
+* API-key setting validates the format (UUID-like, 8–127 chars) before storing, rejecting mangled input at save time instead of failing later at connection time.
+* Plugin version 0.5.0 → 0.5.1. No database schema changes (no custom tables).
+
+**Compatibility**
+
+* WordPress: 4.4 - 7.1 (scan-verified: wp-compat clean from 4.4)
+* PHP: 8.0 - 8.5 (scan-verified: PHPCompatibility + manual feature audit)
+
 = 0.5.0 =
 
 _Release date: 2026-08-14_
diff --git a/includes/class-robotstxt-manager-core-client.php b/includes/class-robotstxt-manager-core-client.php
index 6fc3af6..ce39709 100644
--- a/includes/class-robotstxt-manager-core-client.php
+++ b/includes/class-robotstxt-manager-core-client.php
@@ -146,8 +146,18 @@ class Robotstxt_Manager_Core_Client {
 			);
 		}
 
-		$body  = wp_remote_retrieve_body( $response );
-		$count = is_array( json_decode( $body, true ) ) ? count( json_decode( $body, true ) ) : 0;
+		$code = (int) wp_remote_retrieve_response_code( $response );
+
+		if ( 200 !== $code ) {
+			return array(
+				'ok'      => false,
+				/* translators: %d: HTTP status code. */
+				'message' => sprintf( __( 'The store responded with HTTP %d. Check the Store URL and API key.', 'robotstxt-manager' ), $code ),
+			);
+		}
+
+		$decoded = json_decode( wp_remote_retrieve_body( $response ), true );
+		$count   = is_array( $decoded ) ? count( $decoded ) : 0;
 
 		return array(
 			'ok'            => true,
@@ -191,6 +201,12 @@ class Robotstxt_Manager_Core_Client {
 			return array();
 		}
 
+		// A non-200 response (auth failure, outage) must not be cached as an
+		// "empty catalog" for the full TTL — return nothing and retry next time.
+		if ( 200 !== (int) wp_remote_retrieve_response_code( $response ) ) {
+			return array();
+		}
+
 		$body = wp_remote_retrieve_body( $response );
 		$data = json_decode( $body, true );
 
diff --git a/includes/class-robotstxt-manager-updater.php b/includes/class-robotstxt-manager-updater.php
index bd98198..ca8a746 100644
--- a/includes/class-robotstxt-manager-updater.php
+++ b/includes/class-robotstxt-manager-updater.php
@@ -92,6 +92,13 @@ class Robotstxt_Manager_Updater {
 			}
 
 			if ( version_compare( $version, $new_version, '<' ) ) {
+				// Premium updates need the account key in the package URL;
+				// without a usable key the native updater would only hit a
+				// 403, so skip injecting the entry.
+				if ( 'premium' === $entry['type'] && ! $this->has_api_key() ) {
+					continue;
+				}
+
 				if ( property_exists( $transient, 'response' ) && is_array( $transient->response ) ) {
 					$transient->response[ $plugin_file ] = $this->build_update_object( $slug, (string) $plugin_file, $entry );
 				}
@@ -260,6 +267,18 @@ class Robotstxt_Manager_Updater {
 		return (object) $data;
 	}
 
+	/**
+	 * Returns whether a decryptable account API key is configured.
+	 *
+	 * @return bool True when a usable key exists.
+	 */
+	private function has_api_key(): bool {
+		$api_key_raw = get_option( 'robotstxt_manager_api_key', '' );
+		$api_key     = is_string( $api_key_raw ) ? Robotstxt_Manager_Encryption::decrypt( $api_key_raw ) : '';
+
+		return '' !== $api_key;
+	}
+
 	/**
 	 * Builds the download package URL for the native upgrader.
 	 *
@@ -298,9 +317,10 @@ class Robotstxt_Manager_Updater {
 	 * @return string Domain (e.g. 'example.com').
 	 */
 	private function site_domain(): string {
-		$host = (string) wp_parse_url( home_url(), PHP_URL_HOST );
+		$host = strtolower( (string) wp_parse_url( home_url(), PHP_URL_HOST ) );
 
-		return strtolower( ltrim( $host, 'www.' ) );
+		// Strip the literal "www." prefix (ltrim would eat any leading w/.).
+		return (string) preg_replace( '/^www\./', '', $host );
 	}
 
 	/**
diff --git a/readme.txt b/readme.txt
index 555ab09..2766b7c 100644
--- a/readme.txt
+++ b/readme.txt
@@ -1,11 +1,11 @@
 === Manager (by ROBOTSTXT) ===
 Contributors: javiercasares, robotstxt
 Tags: dashboard, catalog, updates, subscriptions, management
-Requires at least: 4.7
+Requires at least: 4.4
 Tested up to: 7.1
-Stable tag: 0.5.0
-Requires PHP: 7.4
-Version: 0.5.0
+Stable tag: 0.5.1
+Requires PHP: 8.0
+Version: 0.5.1
 License: GPL-3.0-or-later
 License URI: https://www.gnu.org/licenses/gpl-3.0.txt
 
@@ -72,7 +72,7 @@ No. This plugin is intentionally not compatible with WordPress Multisite, matchi
 
 = What PHP version is required? =
 
-PHP 8.4 or higher.
+PHP 8.0 or higher.
 
 = Do I need Plugins Core installed on my site? =
 
@@ -84,11 +84,22 @@ Encrypted at rest using AES-256-CBC with a key derived from your site's WordPres
 
 == Compatibility ==
 
-* WordPress: 4.7 - 7.1
-* PHP: 7.4 - 8.5
+* WordPress: 4.4 - 7.1
+* PHP: 8.0 - 8.5
 
 == Changelog ==
 
+= 0.5.1 =
+
+_Release date: 2026-08-15_
+
+* Stabilization release: full code/security audit, compatibility scans, and documentation alignment. Real floors declared: WordPress 4.4+, PHP 8.0+ (previously declared 4.7/7.4).
+* Connection test and catalog fetch now check the HTTP status code — an unauthorized or failing store reports an error instead of "Connected" / an empty catalog (non-200 responses are no longer cached).
+* API-key field validates the key format before storing.
+* Premium plugins are not offered as native updates when no API key is configured (they would only fail with HTTP 403).
+* Domain normalization for premium package URLs strips only the literal `www.` prefix (hosts starting with "w" were mangled).
+* Opt-in uninstall now also purges the WordPress update transient (premium entries carry the API key in their package URL) and drops a phantom option.
+
 = 0.5.0 =
 
 _Release date: 2026-08-14_
diff --git a/robotstxt-manager.php b/robotstxt-manager.php
index 69a2643..dbf7d6d 100644
--- a/robotstxt-manager.php
+++ b/robotstxt-manager.php
@@ -3,9 +3,9 @@
  * Plugin Name:       Manager (by ROBOTSTXT)
  * Plugin URI:        https://git.robotstxt.es/ROBOTSTXT/robotstxt-manager
  * Description:       Client-side dashboard for the ROBOTSTXT plugin ecosystem. Lists the catalog from a remote Plugins Core install, resolves local install/update state, and installs, activates, and updates plugins directly from the store.
- * Version:           0.5.0
- * Requires at least: 4.7
- * Requires PHP:      7.4
+ * Version:           0.5.1
+ * Requires at least: 4.4
+ * Requires PHP:      8.0
  * Author:            ROBOTSTXT
  * Author URI:        https://www.robotstxt.es/
  * License:           GPL-3.0-or-later
@@ -21,7 +21,7 @@ if ( ! defined( 'ABSPATH' ) ) {
 }
 
 /** Plugin version. */
-define( 'ROBOTSTXT_MANAGER_VERSION', '0.5.0' );
+define( 'ROBOTSTXT_MANAGER_VERSION', '0.5.1' );
 
 /** Absolute path to the plugin directory, with trailing slash. */
 define( 'ROBOTSTXT_MANAGER_DIR', plugin_dir_path( __FILE__ ) );
diff --git a/uninstall.php b/uninstall.php
index fdf86d4..2f75539 100644
--- a/uninstall.php
+++ b/uninstall.php
@@ -18,7 +18,6 @@ $option_keys = array(
 	'robotstxt_manager_api_key',
 	'robotstxt_manager_cache_ttl_minutes',
 	'robotstxt_manager_delete_data_on_uninstall',
-	'robotstxt_manager_db_version',
 );
 
 foreach ( $option_keys as $key ) {
@@ -26,3 +25,7 @@ foreach ( $option_keys as $key ) {
 }
 
 delete_transient( 'robotstxt_manager_catalog' );
+
+// Purge the WordPress update transient: premium entries carry the API key
+// in their package URL. WordPress rebuilds it on the next update check.
+delete_site_transient( 'update_plugins' );
diff --git a/vendor/autoload.php b/vendor/autoload.php
index 30d2faf..38a9b43 100644
--- a/vendor/autoload.php
+++ b/vendor/autoload.php
@@ -19,4 +19,4 @@ if (PHP_VERSION_ID < 50600) {
 
 require_once __DIR__ . '/composer/autoload_real.php';
 
-return ComposerAutoloaderInit21193cc5ee16adfbe1fcd1cc267e45ef::getLoader();
+return ComposerAutoloaderInit891e1a90cdf8723a2ca296aab35c6101::getLoader();
diff --git a/vendor/composer/autoload_real.php b/vendor/composer/autoload_real.php
index d53f30b..036374e 100644
--- a/vendor/composer/autoload_real.php
+++ b/vendor/composer/autoload_real.php
@@ -2,7 +2,7 @@
 
 // autoload_real.php @generated by Composer
 
-class ComposerAutoloaderInit21193cc5ee16adfbe1fcd1cc267e45ef
+class ComposerAutoloaderInit891e1a90cdf8723a2ca296aab35c6101
 {
     private static $loader;
 
@@ -24,12 +24,12 @@ class ComposerAutoloaderInit21193cc5ee16adfbe1fcd1cc267e45ef
 
         require __DIR__ . '/platform_check.php';
 
-        spl_autoload_register(array('ComposerAutoloaderInit21193cc5ee16adfbe1fcd1cc267e45ef', 'loadClassLoader'), true, true);
+        spl_autoload_register(array('ComposerAutoloaderInit891e1a90cdf8723a2ca296aab35c6101', 'loadClassLoader'), true, true);
         self::$loader = $loader = new \Composer\Autoload\ClassLoader(\dirname(__DIR__));
-        spl_autoload_unregister(array('ComposerAutoloaderInit21193cc5ee16adfbe1fcd1cc267e45ef', 'loadClassLoader'));
+        spl_autoload_unregister(array('ComposerAutoloaderInit891e1a90cdf8723a2ca296aab35c6101', 'loadClassLoader'));
 
         require __DIR__ . '/autoload_static.php';
-        call_user_func(\Composer\Autoload\ComposerStaticInit21193cc5ee16adfbe1fcd1cc267e45ef::getInitializer($loader));
+        call_user_func(\Composer\Autoload\ComposerStaticInit891e1a90cdf8723a2ca296aab35c6101::getInitializer($loader));
 
         $loader->register(true);
 
diff --git a/vendor/composer/autoload_static.php b/vendor/composer/autoload_static.php
index 7d5ea49..d8902c3 100644
--- a/vendor/composer/autoload_static.php
+++ b/vendor/composer/autoload_static.php
@@ -4,7 +4,7 @@
 
 namespace Composer\Autoload;
 
-class ComposerStaticInit21193cc5ee16adfbe1fcd1cc267e45ef
+class ComposerStaticInit891e1a90cdf8723a2ca296aab35c6101
 {
     public static $classMap = array (
         'Composer\\InstalledVersions' => __DIR__ . '/..' . '/composer/InstalledVersions.php',
@@ -22,7 +22,7 @@ class ComposerStaticInit21193cc5ee16adfbe1fcd1cc267e45ef
     public static function getInitializer(ClassLoader $loader)
     {
         return \Closure::bind(function () use ($loader) {
-            $loader->classMap = ComposerStaticInit21193cc5ee16adfbe1fcd1cc267e45ef::$classMap;
+            $loader->classMap = ComposerStaticInit891e1a90cdf8723a2ca296aab35c6101::$classMap;
 
         }, null, ClassLoader::class);
     }
diff --git a/vendor/composer/platform_check.php b/vendor/composer/platform_check.php
index d2225c7..a70ba47 100644
--- a/vendor/composer/platform_check.php
+++ b/vendor/composer/platform_check.php
@@ -4,8 +4,8 @@
 
 $issues = array();
 
-if (!(PHP_VERSION_ID >= 70400)) {
-    $issues[] = 'Your Composer dependencies require a PHP version ">= 7.4.0". You are running ' . PHP_VERSION . '.';
+if (!(PHP_VERSION_ID >= 80000)) {
+    $issues[] = 'Your Composer dependencies require a PHP version ">= 8.0.0". You are running ' . PHP_VERSION . '.';
 }
 
 if ($issues) {

From 69c8e9eb97dc265156e63636ec837e2460076684 Mon Sep 17 00:00:00 2001
From: Javier Casares <javier@robotstxt.es>
Date: Sat, 15 Aug 2026 15:37:04 +0000
Subject: [PATCH 07/23] v0.5.3

---
 admin/class-robotstxt-manager-installer.php   |  10 +-
 changelog.txt                                 |  37 +++++
 .../class-robotstxt-manager-encryption.php    | 143 ++++++++++++++++--
 readme.txt                                    |  16 +-
 robotstxt-manager.php                         |   4 +-
 5 files changed, 191 insertions(+), 19 deletions(-)

diff --git a/admin/class-robotstxt-manager-installer.php b/admin/class-robotstxt-manager-installer.php
index e21be60..3ad4bb3 100644
--- a/admin/class-robotstxt-manager-installer.php
+++ b/admin/class-robotstxt-manager-installer.php
@@ -323,7 +323,11 @@ class Robotstxt_Manager_Installer {
 		$result   = $upgrader->install(
 			$tmp_file,
 			array(
-				'overwrite' => $overwrite,
+				// Option key differs across WP versions: 'overwrite' (5.5-era)
+				// vs 'overwrite_package' (current). Pass both; the unused key
+				// is ignored by wp_parse_args().
+				'overwrite'         => $overwrite,
+				'overwrite_package' => $overwrite,
 			)
 		);
 
@@ -358,7 +362,11 @@ class Robotstxt_Manager_Installer {
 		}
 
 		if ( ! class_exists( 'Plugin_Upgrader' ) ) {
+			// class-wp-upgrader.php bundles WP_Upgrader + the skins (incl.
+			// Automatic_Upgrader_Skin), but Plugin_Upgrader itself lives in
+			// its own file since the WP 5.3 split — both are required.
 			require_once ABSPATH . 'wp-admin/includes/class-wp-upgrader.php';
+			require_once ABSPATH . 'wp-admin/includes/class-plugin-upgrader.php';
 		}
 	}
 
diff --git a/changelog.txt b/changelog.txt
index 24095ca..4925b1c 100644
--- a/changelog.txt
+++ b/changelog.txt
@@ -1,5 +1,42 @@
 == Changelog ==
 
+= 0.5.3 =
+
+_Release date: 2026-08-15_
+
+**Added**
+
+* Authenticated encryption for the stored API key (same encrypt-then-MAC scheme as Core 1.6.0): tampered payloads fail closed, and encryption refuses to run without real WordPress salts. Legacy-stored keys keep decrypting and re-encrypt on the next save.
+
+**Changed**
+
+* Plugin version 0.5.2 → 0.5.3. No database schema changes (no custom tables).
+
+**Compatibility**
+
+* WordPress: 4.4 - 7.1 (scan-verified: wp-compat clean from 4.4)
+* PHP: 8.0 - 8.5 (scan-verified: PHPCompatibility + manual feature audit)
+
+= 0.5.2 =
+
+_Release date: 2026-08-15_
+
+**Fixed**
+
+* Manager-panel Install/Update failed while the native WordPress updater worked. Two defects in the panel's upgrader path (`Robotstxt_Manager_Installer`):
+  1. `ensure_plugin_functions()` required only `class-wp-upgrader.php`, which since the WordPress 5.3 class split no longer defines `Plugin_Upgrader` (it lives in `class-plugin-upgrader.php`). In a stock `admin-post.php` context nothing else loads it → fatal error. Both files are now required.
+  2. The overwrite flag was passed to `Plugin_Upgrader::install()` as `'overwrite'`, but current WordPress reads `'overwrite_package'` — the unknown key was silently discarded, `clear_destination` stayed false, and the install failed against the existing folder. Both keys are now passed (the unused one is ignored by `wp_parse_args()`), keeping compatibility across WP versions.
+* Verified end-to-end on the live store: panel-path download → overwrite-install succeeds, plugin remains active.
+
+**Changed**
+
+* Plugin version 0.5.1 → 0.5.2. No database schema changes (no custom tables).
+
+**Compatibility**
+
+* WordPress: 4.4 - 7.1 (scan-verified: wp-compat clean from 4.4)
+* PHP: 8.0 - 8.5 (scan-verified: PHPCompatibility + manual feature audit)
+
 = 0.5.1 =
 
 _Release date: 2026-08-15_
diff --git a/includes/class-robotstxt-manager-encryption.php b/includes/class-robotstxt-manager-encryption.php
index 48e046f..ae772f7 100644
--- a/includes/class-robotstxt-manager-encryption.php
+++ b/includes/class-robotstxt-manager-encryption.php
@@ -1,6 +1,6 @@
 <?php
 /**
- * AES-256-CBC encryption helper for the account-level API key.
+ * AES-256-CBC + HMAC encryption helper for sensitive plugin options.
  *
  * @package Robotstxt_Manager
  */
@@ -12,9 +12,14 @@ if ( ! defined( 'ABSPATH' ) ) {
 /**
  * Class Robotstxt_Manager_Encryption
  *
- * Same symmetric AES-256-CBC pattern Plugins Core uses for its Forgejo
- * token. Encrypted values are base64-encoded strings with the IV prepended
- * to the ciphertext, safe for wp_options storage.
+ * Provides symmetric authenticated encryption (encrypt-then-MAC) using a
+ * key derived from WordPress secret keys. Since 1.6.0 new ciphertexts are
+ * authenticated with HMAC-SHA256: tampered or truncated payloads fail
+ * closed. Legacy payloads (unauthenticated AES-256-CBC, format
+ * base64(iv . ciphertext)) remain decryptable; values re-encrypt to the
+ * authenticated format the next time they are saved.
+ *
+ * Requires the PHP openssl extension (bundled with PHP 8.0+).
  */
 class Robotstxt_Manager_Encryption {
 
@@ -26,25 +31,52 @@ class Robotstxt_Manager_Encryption {
 	private const CIPHER = 'aes-256-cbc';
 
 	/**
-	 * Context string used to derive a plugin-specific key.
+	 * Context string used to derive the encryption key.
+	 *
+	 * Must never change: existing ciphertexts (including legacy ones)
+	 * depend on it.
 	 *
 	 * @var string
 	 */
 	private const CONTEXT = 'robotstxt_manager_encryption_v1';
 
 	/**
-	 * Encrypts a plaintext string and returns a base64-encoded payload.
+	 * Context string used to derive the MAC key (separate from the
+	 * encryption key by design).
+	 *
+	 * @var string
+	 */
+	private const MAC_CONTEXT = 'robotstxt_manager_encryption_v2_mac';
+
+	/**
+	 * Prefix marking authenticated (v2) payloads.
+	 *
+	 * @var string
+	 */
+	private const PREFIX_V2 = 'v2:';
+
+	/**
+	 * Encrypts a plaintext string and returns an authenticated payload.
+	 *
+	 * Format: 'v2:' . base64( iv . ciphertext . hmac_sha256( iv . ciphertext ) ).
 	 *
 	 * @param string $plaintext The value to encrypt.
 	 *
-	 * @return string Base64-encoded ciphertext, or empty string on failure.
+	 * @return string Payload string, or empty string on failure (including
+	 *                missing WordPress secret keys — encryption without the
+	 *                real salts would be recoverable by anyone).
 	 */
 	public static function encrypt( string $plaintext ): string {
 		if ( '' === $plaintext ) {
 			return '';
 		}
 
+		if ( ! defined( 'AUTH_KEY' ) || ! defined( 'AUTH_SALT' ) ) {
+			return ''; // Fail closed — never encrypt under fallback keys.
+		}
+
 		$key       = self::derive_key();
+		$mac_key   = self::derive_mac_key();
 		$iv_length = openssl_cipher_iv_length( self::CIPHER );
 
 		if ( false === $iv_length ) {
@@ -58,13 +90,20 @@ class Robotstxt_Manager_Encryption {
 			return '';
 		}
 
-		return base64_encode( $iv . $ciphertext ); // phpcs:ignore WordPress.PHP.DiscouragedPHPFunctions.obfuscation_base64_encode
+		$mac = hash_hmac( 'sha256', $iv . $ciphertext, $mac_key, true );
+
+		return self::PREFIX_V2 . base64_encode( $iv . $ciphertext . $mac ); // phpcs:ignore WordPress.PHP.DiscouragedPHPFunctions.obfuscation_base64_encode
 	}
 
 	/**
-	 * Decrypts a base64-encoded payload previously produced by encrypt().
+	 * Decrypts a payload previously produced by encrypt().
 	 *
-	 * @param string $encoded The base64-encoded ciphertext.
+	 * Authenticated (v2) payloads are verified with a constant-time MAC
+	 * comparison before decryption; tampered payloads return an empty
+	 * string. Legacy unauthenticated payloads are decrypted as before so
+	 * existing stored values keep working until re-saved.
+	 *
+	 * @param string $encoded The stored payload.
 	 *
 	 * @return string The original plaintext, or empty string on failure.
 	 */
@@ -73,28 +112,85 @@ class Robotstxt_Manager_Encryption {
 			return '';
 		}
 
+		if ( 0 === strpos( $encoded, self::PREFIX_V2 ) ) {
+			return self::decrypt_v2( substr( $encoded, strlen( self::PREFIX_V2 ) ) );
+		}
+
 		$decoded = base64_decode( $encoded, true ); // phpcs:ignore WordPress.PHP.DiscouragedPHPFunctions.obfuscation_base64_decode
 
 		if ( false === $decoded ) {
 			return '';
 		}
 
+		return self::decrypt_cbc( $decoded );
+	}
+
+	/**
+	 * Decrypts an authenticated v2 payload.
+	 *
+	 * @param string $b64 Base64 portion after the 'v2:' prefix.
+	 *
+	 * @return string Plaintext, or empty string on any failure.
+	 */
+	private static function decrypt_v2( string $b64 ): string {
+		$decoded = base64_decode( $b64, true ); // phpcs:ignore WordPress.PHP.DiscouragedPHPFunctions.obfuscation_base64_decode
+
+		if ( false === $decoded ) {
+			return '';
+		}
+
 		$iv_length = openssl_cipher_iv_length( self::CIPHER );
 
-		if ( false === $iv_length || strlen( $decoded ) <= $iv_length ) {
+		if ( false === $iv_length ) {
+			return '';
+		}
+
+		$mac_length = 32; // sha256.
+
+		if ( strlen( $decoded ) <= $iv_length + $mac_length ) {
+			return '';
+		}
+
+		$iv         = substr( $decoded, 0, $iv_length );
+		$ciphertext = substr( $decoded, $iv_length, strlen( $decoded ) - $iv_length - $mac_length );
+		$mac        = substr( $decoded, -1 * $mac_length );
+
+		$expected = hash_hmac( 'sha256', $iv . $ciphertext, self::derive_mac_key(), true );
+
+		if ( ! hash_equals( $expected, $mac ) ) {
+			return ''; // Tampered or corrupted — fail closed.
+		}
+
+		return self::decrypt_cbc( $iv . $ciphertext );
+	}
+
+	/**
+	 * Performs the raw CBC decryption over iv . ciphertext bytes.
+	 *
+	 * @param string $bytes Raw bytes: iv followed by ciphertext.
+	 *
+	 * @return string Plaintext, or empty string on failure.
+	 */
+	private static function decrypt_cbc( string $bytes ): string {
+		$iv_length = openssl_cipher_iv_length( self::CIPHER );
+
+		if ( false === $iv_length || strlen( $bytes ) <= $iv_length ) {
 			return '';
 		}
 
 		$key        = self::derive_key();
-		$iv         = substr( $decoded, 0, $iv_length );
-		$ciphertext = substr( $decoded, $iv_length );
+		$iv         = substr( $bytes, 0, $iv_length );
+		$ciphertext = substr( $bytes, $iv_length );
 		$plaintext  = openssl_decrypt( $ciphertext, self::CIPHER, $key, OPENSSL_RAW_DATA, $iv );
 
 		return false !== $plaintext ? $plaintext : '';
 	}
 
 	/**
-	 * Derives a 32-byte encryption key from WordPress secret constants.
+	 * Derives the 32-byte encryption key from WordPress secret constants.
+	 *
+	 * The deterministic fallback only applies while WordPress constants are
+	 * undefined (early install context); encrypt() refuses to run there.
 	 *
 	 * @return string 32-byte raw key.
 	 */
@@ -108,4 +204,23 @@ class Robotstxt_Manager_Encryption {
 			32
 		);
 	}
+
+	/**
+	 * Derives the 32-byte MAC key from WordPress secret constants.
+	 *
+	 * Derived with a different context string than the encryption key, so
+	 * knowing one reveals nothing about the other.
+	 *
+	 * @return string 32-byte raw key.
+	 */
+	private static function derive_mac_key(): string {
+		$auth_key  = defined( 'AUTH_KEY' ) ? AUTH_KEY : 'auth_key_not_defined';
+		$auth_salt = defined( 'AUTH_SALT' ) ? AUTH_SALT : 'auth_salt_not_defined';
+
+		return substr(
+			hash_hmac( 'sha256', self::MAC_CONTEXT, $auth_key . $auth_salt, true ),
+			0,
+			32
+		);
+	}
 }
diff --git a/readme.txt b/readme.txt
index 2766b7c..c89c1b7 100644
--- a/readme.txt
+++ b/readme.txt
@@ -3,9 +3,9 @@ Contributors: javiercasares, robotstxt
 Tags: dashboard, catalog, updates, subscriptions, management
 Requires at least: 4.4
 Tested up to: 7.1
-Stable tag: 0.5.1
+Stable tag: 0.5.3
 Requires PHP: 8.0
-Version: 0.5.1
+Version: 0.5.3
 License: GPL-3.0-or-later
 License URI: https://www.gnu.org/licenses/gpl-3.0.txt
 
@@ -89,6 +89,18 @@ Encrypted at rest using AES-256-CBC with a key derived from your site's WordPres
 
 == Changelog ==
 
+= 0.5.3 =
+
+_Release date: 2026-08-15_
+
+* Authenticated encryption (encrypt-then-MAC, matching Core 1.6.0) for the stored API key: tampered payloads fail closed; legacy-stored keys keep working and upgrade on next save.
+
+= 0.5.2 =
+
+_Release date: 2026-08-15_
+
+* Fixed: updating (and installing) a plugin from the Manager catalog page failed with a fatal or a bare "Installation failed." Two defects in the panel's upgrader path: `Plugin_Upgrader` was never loaded in the `admin-post` context (it lives in its own file since the WordPress 5.3 class split, and only `class-wp-upgrader.php` was required), and the overwrite option was passed under the key `overwrite`, which current WordPress reads as `overwrite_package` — so the existing folder was never cleared. Verified end-to-end against the live store.
+
 = 0.5.1 =
 
 _Release date: 2026-08-15_
diff --git a/robotstxt-manager.php b/robotstxt-manager.php
index dbf7d6d..c07cb03 100644
--- a/robotstxt-manager.php
+++ b/robotstxt-manager.php
@@ -3,7 +3,7 @@
  * Plugin Name:       Manager (by ROBOTSTXT)
  * Plugin URI:        https://git.robotstxt.es/ROBOTSTXT/robotstxt-manager
  * Description:       Client-side dashboard for the ROBOTSTXT plugin ecosystem. Lists the catalog from a remote Plugins Core install, resolves local install/update state, and installs, activates, and updates plugins directly from the store.
- * Version:           0.5.1
+ * Version:           0.5.3
  * Requires at least: 4.4
  * Requires PHP:      8.0
  * Author:            ROBOTSTXT
@@ -21,7 +21,7 @@ if ( ! defined( 'ABSPATH' ) ) {
 }
 
 /** Plugin version. */
-define( 'ROBOTSTXT_MANAGER_VERSION', '0.5.1' );
+define( 'ROBOTSTXT_MANAGER_VERSION', '0.5.3' );
 
 /** Absolute path to the plugin directory, with trailing slash. */
 define( 'ROBOTSTXT_MANAGER_DIR', plugin_dir_path( __FILE__ ) );

From 3a653a7bf3a0f81b3d0b1efc7ca1f28634726a44 Mon Sep 17 00:00:00 2001
From: Javier Casares <javier@robotstxt.es>
Date: Mon, 17 Aug 2026 16:00:15 +0000
Subject: [PATCH 08/23] v0.6.0

---
 admin/class-robotstxt-manager-admin.php |  34 +-
 changelog.txt                           |  18 +
 languages/robotstxt-manager-ca.mo       | Bin 6725 -> 7841 bytes
 languages/robotstxt-manager-ca.po       | 351 ++++++++++---------
 languages/robotstxt-manager-es_ES.mo    | Bin 6702 -> 7844 bytes
 languages/robotstxt-manager-es_ES.po    | 351 ++++++++++---------
 languages/robotstxt-manager.pot         | 430 +++++++++++-------------
 readme.txt                              |  11 +-
 robotstxt-manager.php                   |   4 +-
 9 files changed, 658 insertions(+), 541 deletions(-)

diff --git a/admin/class-robotstxt-manager-admin.php b/admin/class-robotstxt-manager-admin.php
index 3ef11b3..a32c40c 100644
--- a/admin/class-robotstxt-manager-admin.php
+++ b/admin/class-robotstxt-manager-admin.php
@@ -76,7 +76,8 @@ class Robotstxt_Manager_Admin {
 	 *
 	 * Clears the cached catalog response, purges WordPress's update_plugins
 	 * transient so native update badges re-evaluate immediately, and
-	 * redirects back to the page.
+	 * redirects back to the page. Rate-limited to 6 refreshes per minute
+	 * per user so a stuck browser cannot hammer the store.
 	 *
 	 * @return void
 	 */
@@ -87,6 +88,16 @@ class Robotstxt_Manager_Admin {
 
 		check_admin_referer( 'robotstxt_manager_refresh_catalog' );
 
+		$bucket   = 'robotstxt_manager_refresh_' . get_current_user_id();
+		$hits_raw = get_transient( $bucket );
+		$hits     = is_numeric( $hits_raw ) ? (int) $hits_raw : 0;
+
+		if ( $hits >= 6 ) {
+			$this->redirect_refresh_error();
+		}
+
+		set_transient( $bucket, $hits + 1, MINUTE_IN_SECONDS );
+
 		$client = Robotstxt_Manager_Core_Client::from_options();
 		$client->clear_catalog_cache();
 		delete_site_transient( 'update_plugins' );
@@ -103,6 +114,27 @@ class Robotstxt_Manager_Admin {
 		exit;
 	}
 
+	/**
+	 * Redirects back to the catalog page with a rate-limit error notice.
+	 *
+	 * @return void
+	 */
+	private function redirect_refresh_error(): void {
+		wp_safe_redirect(
+			add_query_arg(
+				array(
+					'page'                      => self::PAGE_SLUG,
+					'robotstxt_manager_result'  => 'error',
+					'robotstxt_manager_message' => rawurlencode(
+						__( 'Too many refreshes. Please wait a minute before refreshing again.', 'robotstxt-manager' )
+					),
+				),
+				admin_url( 'admin.php' )
+			)
+		);
+		exit;
+	}
+
 	/**
 	 * Builds a nonce-protected admin-post action URL for a plugin row.
 	 *
diff --git a/changelog.txt b/changelog.txt
index 4925b1c..32683dc 100644
--- a/changelog.txt
+++ b/changelog.txt
@@ -1,5 +1,23 @@
 == Changelog ==
 
+= 0.6.0 =
+
+_Release date: 2026-08-15_
+
+**Added**
+
+* Spanish (es_ES) and Catalan (ca) translations — all 73 admin strings, regenerated POT included.
+* "Refresh catalog" is rate-limited to 6 refreshes per minute per user (transient bucket), redirecting back with an error notice when exceeded; the limit rejects before clearing any cache (Phase 6 hardening).
+
+**Changed**
+
+* Plugin version 0.5.3 → 0.6.0. No database schema changes (no custom tables).
+
+**Compatibility**
+
+* WordPress: 4.4 - 7.1 (scan-verified: wp-compat clean from 4.4)
+* PHP: 8.0 - 8.5 (scan-verified: PHPCompatibility + manual feature audit)
+
 = 0.5.3 =
 
 _Release date: 2026-08-15_
diff --git a/languages/robotstxt-manager-ca.mo b/languages/robotstxt-manager-ca.mo
index 92499d6e25c06d1c282578e7c690f1f5bcb27297..71cdb38b41d0c2db01e141e92caa6638930ecc57 100644
GIT binary patch
literal 7841
zcmbuDd59!e9mh)(jjo9?@jmksGww`G_v~&q*X)tZ&dz2x*-6Ho*&Kr6>+aVxWvZ(>
zb<Cln@kEiJNJJFW1;Jay1QkO-$dG_Rg8u~kLnK6y=wE^a{|Km`@2je=p1lZKboIBY
z>(%?+SO59)3%?$4+|Kzf&ghjv;K0W(<cnkR)j{wx@B`o_;D5k2c*#XU@H%imxC1;2
zega$qKL!2)<P$8uCJ3g$d%<^rp8>xCej8+~;QH4F0hhsk@ZI1%*a5rX1>jTQtH7th
zw}O8FF9%-$Mfar&U(L-l_m_bNoCPlfJK*cV9J~SiEcj9IF;M(Z@Fl)>gKq?ngA)BC
z;IBXjUJSmAFUd0nz6sn7ik~CZ{fEJ~bDx2{5<CQ61%4BJFZek4dGI+<dhGKh`E&4X
z;KxDf|6x#cegR7E-++i1{1(i>-+`Bc2M~&_f(20YJ_t&Weelg-0_wfbgWC5ipy>P*
z)ca3@s33S2JOMrj9s;l9q4-?`uK~XW&Vo;Z(#u6}DBrsn6#s7pCFgrUSPN#sec)Z7
z^z>y=bWeewdj;}<k8^(zBZ}{rz&+qaC?68R3@E;C2OkDcf)9az2PNMIo8AO|8oUyG
z4E!bdCs6!+4dI2~1oiwBxB@-_O0U<vrPSLVP<-D4@+jzlqPqb~Z=VH4=OOS~@F`IC
z{wD}4!RxrW8N34g3V0s~3&G#O_kjNf`2_Dqc=3Hb_#Ai;l-;htSw!zz@SWg|px#>o
z#ZL-CD)=HOJ$)Axzdr%r2R;LS2YeC4biu<ovE=?9cm?=lQ1SFMD7jw%Wxs!blJ7<E
ztKfe?(fKM&$bLTn#osSM(R~7x9M6E5F8C`r1^x>ZohxxJOc=~oxC{=sUjgp`p9SSd
zSHjG7;Bjysd=Qj>KLv`;??LI~kKp^kzku5JQj{_SUIiNPL!k8VNf3AP?@E60ILCR2
z({R3$Q-^FNxsP!k<z(C7YR>xDS6%D}Z{$QB-VV}<juz)`e^us4)a~so9ioD5hvd^S
zS%UxevU7Dar}U>o@+-!4v^k}3`Thl*vcW;l`j8Ixa_;1med}YEi|Oj-22ehxL%P!;
z8_7>(d->BY&RaR9^ZK~Hx=@~!j^*z<j&RDh2RILNPH-wlb>P1KxQ%bcg=~R|gIhRd
zzhI(ghEcH+#)eP6>P*+>HcD1Zn3*`qO*a_~Z60<aXV$}fl_fmL!rbl5%solkTTES+
znItufM;FbSOS3SE+s&@o>D$`W{XhF=#&+{?&E~EL744qEZp59Ltsa;#H~lmjcxj?A
z%T32c$+}-&4149PleUu-xtYkOf?0FF+myIjo}{j4CL_x`drf!MrVvA<8MD8e^xVOT
zZ2z>sm};Bj&aOGriEMno$rHA4Lr>6cKrxJ0wCO(MV%|5_#BSZJ*{E<@o4R3SyAD3v
zXAtkeR5vN2o>x-GnVu6x#JevkuuVMnw&`q^1VnC}2C}WWYh{$4i(D>BweeuN$nzww
zbuznn%-rEN1EJJVz5ux;iH8c}6_<(Wp-h{J<7(x|KjMD4QlK~<bzwcuTajCHk!coY
z1!{#^xz~xi4&Al9w0!S!sqVHp;T|YL=^Y}rU`d>Z_+aCRHtw0M=w#hA9Oifz8hD^^
zS)R4cG8>j^g&P-l)6F4{foy#&=?T~sC%*Ka2YF5~8=E3_8$*Y6d&Z?Hno7FeBK1-n
zvY9g{PaHQ%-*cS0K>|CAK1wn(r>!fuBQW46U$r@3Ra~IyC^Ex>FUea4R~=Py%yw|7
z*bL@uch&J-Mw`DglY=lWa)(pazo)KGfUQcqb4eU~jz^agYHs8#-PB2K*5qz5Oj4U}
zntn*wq6^bY*5fF#ewW(0Sl(UTCe{q`5FCahgH$KuO32`F=|q)1>sz9(7LJ&*W*y6o
zON=^-dJC~%?IN92fmUsJi#KDfpfjvpZZ4hj+R&^g>HYF|{49(rudm|Q2iu4gi=Kb*
z`@!K#a?`gcgXliGyu4^8dQ)(;{gIdcNa|d0G+8%M0ueD=Glm(4NsMdw+){c$##5}=
zQ<6jPsg1J`F52d>>)RsAXUq+|Ol4D2MzT&a@cx?N#NM!GAa_doIm+{11i^&#gYWq#
zwXZ8WM6+!c>_#{!1~X>&-o3lb<et4|H7U{zd5*<RvgXDo#u`gcEp?!k{^9tKUi#{H
zsVR(oqIFYRT=e^4SCT0W48lxFK5GZZldhFn6jKW}Ce~6jNt};je9Aok;KQ|xoo~sK
z%at^<;7&446=*2Sp{Be@V;DMD`j}gFT{19+T2lJ<fh!-XvyYEY9##a*5H5Xc>_#Ck
zo~X=#dUFECuGo<Bbti={tSd`UMt%i#T^v1b*AG-J`{Y0G4VBmMkn|B212F8mV5FJm
z3WJuKJ0qc*O@}M(w`LV*IdIiPcGW?|IJd0(r|m)cN#>l{#3$<T9Pv^MTm2AJsW(&Y
zZf@>b3~Fr!ORI!}cf>Fzj|{xW1S3s1SG8KYNmCBWWoL-h4wlK@xVcYf%3->%!gU!#
z)}|{7YUeN}YC@{gTrw=nNMHF?aqpwiOFPmnErPE@-quj7GY-zA5T=@z)v(G0?0SA5
z+P+2Qk5uA{E1zYx21eBwnY4(<d!vcnSJNQHzCoJUb2V|ZoFryo<IOq=I7-=K<WzUo
zEw$QKIioIQRjyFls~mKBbLfJTbR3CML&N157`sNUvufEU*F5#-zwkA)CfZZM-61@h
zb=MKAftre5;(Lu%75uYDx-ZS$t{OdG<`hG1y_@1|DNSD~vb?DL@k}k?|H((GUae!j
z*4<^7I5YD6({jeH_6_Y_J5D%?Sl(L5R>EHEP_dG=mXjH?n&-o8W_p@3&>O1tY$xf;
zbXE+tc)Cm-(`nL4@+{xTTWDEXX~%I|y4JGtb7V;qGfj#z`&X05-a2}v?XrU`k5>v_
zY%M!Wrkzuf-a17Wc&>#r6oMTK#}?)r;dUbfC7Z+!Wz020UEUCjWSD)vxy)RC;N<d=
z)=kYiaoBfhYo1iz!`?IIrcRjeAOoc~Y8@d0X+~qj<Tg97XP-ix%L9|Kx$=P7J+*Jg
zy{*H^01`81B+^I=O<S%$PnB)!ROD7LzuEc`wXA9N?Vw{KTlVu?kFt8a*VnDO{oYRN
z8!;0_Nq1Y%fBNp()}!&*_B8ST%l@O@f2{L=;@23o?)`U0u$GBEc#qWjTis+yZv87%
zw1Pa6e~edx$t>wmFEjxh4b7^hqp+qMSpvdkwr9=c)?-l~4l<1bHr+aP&Qaj73pZ?Q
zHK7Cb13_0+QUQ+b!&JQZZA<FR1nOi9$f*^eH;aiuy`Ua94|AH~Rs_FiXNrYekH}!z
zPFNl$E6fY<D{rAh+mu9t>u=wyq_`GRzPAxYIX22EhAikLDIFt(y=ia`BB(Tcsl7QV
zhQu7y7xg<mt8OQ=#zpFe;x)1$Og>O-{g9Tc8yeSF(@L{YsX^Ht{z>^nR9!C6H(hN-
zLtS0S1R-mBuOX+pfoMogun2GAifv-JZMMF|wCa?hwoavCxsYLk*ppIBgjZxqgtO4b
z<V8<DGUorG2>CVDn9=q9jhT-s6Y=^+*iTVThXB=T`AFKz{BY3?w;rvAi(tu{B~5z8
z*3Z4V%jqJFDLpQg-)XYwDAkLmt=bH^v9_TiFl>0QCFYsRt9hfhlL9gpZ6@hZF?)C=
zdT#=mElCJ^O*6t^h)IJ5H`sbaI_cVC+YJniy;_bQ<>XOjg>BJ7Ce!dC0sQ5LWTsgg
zb3@G^sXVM7<{KEQ8bg>8xFH^~n<Y?W>C;}U_GT4nVO;KNAVJxREuieWq^&fVFP(N2
zU-HiSx15PB^Cs<Cy)98o&6o!YO1J;1*)43-@-W2mkbyG6lk12W-(3vA{w?y0QSJ=4
zQ5g-Y-k3cl22wgNntl<>tI$wiRu!RaCm|_UVOiLupEy}VMN2!&2&ou}a}6`|epE#j
zjWWjvnzKCi8oUk1lRpL@Kz8K|ZyO2eMJkOm81obD@0+DEgN}*IyMFY62P{1{@hoEG
zUK#7n)I(o0k1~Cp%gjJUMm~`EOkSp9HuAq`iBC|tDdUe1fa>S*sI{IrGtky4hM;XD
z5bU0P1d_9CQ(WUiGE)0I&&FmV?UL71Q85)DE^`oquv<|LM+Duxh9PE0=A!eBJC%>0
zcZo{Qz~#uL)OmW!QwpU3Fdijo49Tt?Rt~OzR7k=;;FN2yn7pM-nRx418un|3Tc=1E
zUgN`trm6z{)xgY-YNn54PcBulBgv+CYU-o8(P>_dLjgfjMcgRckF6S;n((5eg9wb0
zbySUyO|EEWrRHkXJMym&A$FFEa{A~*+VX!?y$r?pK}uO`&GE;UGHmYj=Ude-q0v$@
z3_hkFmeouAFva*9Zj45&@{ZYRu~BlcfUm>6_w;JO^2OwIyU7Di|LrUyE44PhGE)1t
zB1<2>=2gJ2{0F8qUZ)yw&nnSG`rBxLRZ92q4NO(J6~$|mh-x0AveZ7M29p09<x9Ru
z@_X)}Hs)elLOEyG(YQ9wvv+BRH0DFqg3*Nba$Wk2y{hnNsuEhMm=9)~?sb%&J=x}e
zZ9hGQW24)G%?PcgG}fJhukK2T{@<RaPblMsU};_<VwS^Uk&XFIK6X8JSr(B{L#zJ-
z{v6YsdN1FDYphdkrSI`gSec=k{8UzA2Du(>DJ*&UN9G}Wm5#2NF6_~n)-|iF%S?CG
N0`>dbAC5E@{1-<w9k2iZ

delta 2967
zcmaKsYiwLc701VI^Kw!rcI?>eM>=&K+ljp!+ew|oX$v8=q>5E9iQ5#RBF4L8`_jAj
zZtue+6_TS$tq?6xIzXhVg%&{(C<uw5zz0+btnm2Is(h$|kXoLC6!?aS1XPIMxx4Gw
zMPhX4{^rh|$2tFVW?sJg%E9Hg+iv-iq8y?2QvcYb)C|0MGcU@uTa@|^d<T9CUf7`2
zGHl<d)F${vxEH<vyWvma1^7G2qs}p?51xl}@GDT3ZrZF=w$uh1opfx4ZSW3w6;8rt
z*s`U@9MpUdz*cxKY=LLsB%FtzfG@(Wa5Iy!S+&E<FbB86H=xXW3$}|Zf1{D3qlsBE
zv4__#I0XCQJ@5`_;FIu4cq`n>YT{uIiV_;)ks5~Bpb9XChv9a35%Q=X@nQ+}3%FUN
ze3OPucpFLxu0ffwfnBgob-;a4L-FWjy}t-~)JJ)Vp&mR6pMmZ0=dcUD1)nFZ*P$r!
z1s4ArJh6jNewoH!X`r@x0$nHI)9`lqD*QJ5Efi0mCO*>t9DEdhA7-BKta&yJ#gIE;
z2YeW6HV&XT@_DQhN1unI@av+##Qv9bu!njFPQib}&%jAmK@9a{C<eX`Ux!!g{jU%w
z3Ed?~mwFBIs6X%$iT_pq-pD3mSRWjQ?}slzuM_<x8Jf{4izUoFf+F=W6pQolv+xka
zHgyG}rusD$1FzM;|54}7ST#t0D@0s%7>WY-!x1<OC0EWb(-2Faf;{RuUNYb!6eWHI
zMWLOXE%`qJQ8Wt!$o?IH2jznzc_RkxmJf;?J#kQuoa9!c$R0OQCI7M_87^fHRXiqS
z>M&J`NGIM(nWRdNj8i3KQp7MRJ=DEaiLI!38}$G+Pn9B$ipo+X4Eq}UOU$H*L<3oi
zB!c^?A~$)qS_-rdQ6)S>R85uK5ILoY?1+@*gM5qpW741y9Xu@Ss-G@+f#z`^+xYUO
z)0_U%<nG&YdD-`DkmO^pY<1bhi*uog%6dMGbh2pmshJPV%$}Zoc(yU!mcsa4oY+c1
zPkV6^XQN6cF@Ct9=cBNqjgD+3Osp<u8^-#07+JQB8RL)gGY<VF8*4u-8DD!3)qd<x
zt7XF^MkRJso1m=YG@3UhM#kw}T#CGE;)Q`;w8l>s3%a;yVynleSkRR7Vc?(B4KtQJ
z`$_lDE&c9f^Pk+ux4yAS5658`>~)W9JLO)>^|_zr`rXxS-*Df%^;P#&%b>f`(&t{-
zzOVOO)v5=pItfuCk!EI6eRAK90XMVbLeseW^N!+);!OUOUGic~%72i-Q+i@-VlqE=
zI6pq2#}7=6-#IcyX`VK5lAn!C5c?(xqp3BD-sJ`Jp*!E&>4Mf4_qo<ZcY9l}yWTqD
z?ruBbKHc`nDBI}rka;Y%aiV<$E2tBmUNkxlj4t^m)wWVG3nqEoR@}nQ*%^D5m=MmR
z=$%AiIknzd2J0ol6X_sKb=5{FW-C?StbEf%dEflMHQ(JivTOb5#=`Dsd+!n7t9U`S
zh&GiuZGAl#CM%aTsWfN2vjufrY&=%Hf3?9Fnd6>q?`jrXV(j%I_rv!50VW0BlJ$L=
zUJ5H!vcXntY#8U07m`K%S<T3Te!%s1>>jAv#48boIGbmZm6v?GpuN?sDS0cG+@l>m
zT|+m-!sgf()Ui_b^Q#>nxyi=vddCyXvnKUXD6>Em6k~j>k+iHev*VJ<XtX~h$3Y~o
z7@1Q$VwoXp%$)WaVMHAgv}RqItS%2p6l>?=CqM8_X3B3mI+yEbL{`tXtsRu|(E6eK
zO({u@?<J3CGe_~bf|*ffRoz_euQ@%LMg@Ie{n(JZ7$uJ0Fp3PRtTca%vuRm8GHz+t
zpnG%Ip<F%CwVac9-dpc+gPjK+XnbhDo|TMPlbNP$-lwO<W0U#4RtWEZO>`GKC+-Tu
zrP^AB##TY{`}41;4@D+PSH7F552q%Oh-kF0az(5Ot~=dzu!jpGi{m_=a5yK&G-;P6
zaX~-iE_Y3BZe)#nw`*#9q=&0fNIIGdhi9*QELUvY6S?DIFz+oOhQtSBRx{E4CpXC7
z3Nx`4*B?AJoux>Ys_vfd+YYXqJE}uHj|wH<D{)C4TMb`SKa?C<c6ZNqce`udc2j*P
zcc$lfQ{-Ok*)zIsIkj#(HT~ZG_x1KJM`Ugga4BGUQOvA~c<jc7qEpV-nJ_9BxtC+T
zXM7;mHqdhM?3oyd3u@M@rZESlk!#7C_IqSo^GCGOW%u{KUe~|-WWQ{}lA>N>)9fZ&
Hzp?r+@$JNk

diff --git a/languages/robotstxt-manager-ca.po b/languages/robotstxt-manager-ca.po
index dbe5a0b..36440aa 100644
--- a/languages/robotstxt-manager-ca.po
+++ b/languages/robotstxt-manager-ca.po
@@ -1,184 +1,235 @@
+# Copyright (C) 2026 ROBOTSTXT
+# This file is distributed under the GPL-3.0-or-later.
 msgid ""
 msgstr ""
-"Project-Id-Version: Manager (by ROBOTSTXT) 0.1.0\n"
+"Project-Id-Version: Manager (by ROBOTSTXT) 0.6.0\n"
 "Report-Msgid-Bugs-To: https://wordpress.org/support/plugin/robotstxt-manager\n"
-"POT-Creation-Date: 2026-08-12T13:09:24+00:00\n"
-"PO-Revision-Date: 2026-08-12 13:15+0000\n"
-"Last-Translator: ROBOTSTXT <info@robotstxt.es>\n"
-"Language-Team: Català\n"
+"Last-Translator: ROBOTSTXT <hola@robotstxt.es>\n"
+"Language-Team: Català <ca@robotstxt.es>\n"
 "Language: ca\n"
 "MIME-Version: 1.0\n"
 "Content-Type: text/plain; charset=UTF-8\n"
 "Content-Transfer-Encoding: 8bit\n"
-"X-Domain: robotstxt-manager\n"
 "Plural-Forms: nplurals=2; plural=(n != 1);\n"
+"X-Domain: robotstxt-manager\n"
 
-msgid "Manager (by ROBOTSTXT)"
-msgstr "Manager (by ROBOTSTXT)"
+msgid "%d plugin in the catalog is not compatible with this site's WordPress or PHP version."
+msgid_plural "%d plugins in the catalog are not compatible with this site's WordPress or PHP version."
+msgstr[0] "%d plugin del catàleg no és compatible amb la versió de WordPress o de PHP d'aquest lloc."
+msgstr[1] "%d plugins del catàleg no són compatibles amb la versió de WordPress o de PHP d'aquest lloc."
 
-msgid "Client-side dashboard for the ROBOTSTXT plugin ecosystem. Lists the catalog from a remote Plugins Core install, resolves local install/update state, and surfaces subscription health. Phase 1: read-only catalog view."
-msgstr "Tauler de control del costat del client per a l'ecosistema de plugins de ROBOTSTXT. Llista el catàleg des d'una instal·lació remota de Plugins Core, resol l'estat local d'instal·lació/actualització, i mostra l'estat de les subscripcions. Fase 1: vista de catàleg de només lectura."
+msgid "%s activated."
+msgstr "%s activat."
 
-msgid "ROBOTSTXT"
-msgstr "ROBOTSTXT"
+msgid "%s installed. Activate it from the list below."
+msgstr "%s instal·lat. Activa'l des de la llista de sota."
 
-msgid "Manager (by ROBOTSTXT) — Plugins"
-msgstr "Manager (by ROBOTSTXT) — Plugins"
+msgid "%s updated."
+msgstr "%s actualitzat."
 
-msgid "You do not have sufficient permissions to access this page."
-msgstr "No tens permisos suficients per accedir a aquesta pàgina."
+msgid "(about %s)"
+msgstr "(sobre %s)"
 
-msgid "Insufficient permissions."
-msgstr "Permisos insuficients."
+msgid "A key is stored (last 4 characters: <code>%s</code>). Leave blank to keep the existing key; enter a new value to replace it."
+msgstr "Hi ha una clau desada (últims 4 caràcters: <code>%s</code>). Deixa-ho en blanc per mantenir la clau actual; escriu un valor nou per substituir-la."
 
-msgid "Manager (by ROBOTSTXT) — Settings"
-msgstr "Manager (by ROBOTSTXT) — Configuració"
-
-msgid "Settings"
-msgstr "Configuració"
-
-msgid "Connection"
-msgstr "Connexió"
-
-msgid "Store URL"
-msgstr "URL del store"
+msgid "A key is stored but could not be decoded. You can replace it by entering a new value above, or delete it with the button below."
+msgstr "Hi ha una clau desada però no s'ha pogut descodificar. Pots substituir-la escrivint un valor nou a dalt, o esborrar-la amb el botó de sota."
 
 msgid "API Key"
 msgstr "Clau API"
 
+msgid "API key deleted. Save changes to persist."
+msgstr "Clau API esborrada. Desa els canvis perquè faci efecte."
+
+msgid "API key is not configured."
+msgstr "La clau API no està configurada."
+
+msgid "Account-level API key issued by the ROBOTSTXT store. Required to authenticate catalog and subscription requests. The value is encrypted before storage."
+msgstr "Clau API a nivell de compte emesa per la botiga ROBOTSTXT. És necessària per autenticar les sol·licituds del catàleg i de les subscripcions. El valor es xifra abans de desar-se."
+
+msgid "Action"
+msgstr "Acció"
+
+msgid "Activate"
+msgstr "Activa"
+
+msgid "An unexpected error occurred."
+msgstr "S'ha produït un error inesperat."
+
+msgid "Base URL of the remote Plugins Core installation that this site will pull the plugin catalog from."
+msgstr "URL base de la instal·lació remota de Plugins Core d'on aquest lloc obtindrà el catàleg de plugins."
+
+msgid "Buy"
+msgstr "Comprar"
+
 msgid "Cache"
 msgstr "Memòria cau"
 
 msgid "Catalog Cache (minutes)"
 msgstr "Memòria cau del catàleg (minuts)"
 
-msgid "Data on Uninstall"
-msgstr "Dades en desinstal·lar"
-
-msgid "Testing…"
-msgstr "Provant…"
-
-msgid "Test connection"
-msgstr "Provar connexió"
-
-msgid "Deleting…"
-msgstr "Eliminant…"
-
-msgid "Delete API key"
-msgstr "Eliminar clau API"
-
-msgid "Delete the stored API key? The catalog and subscription data will stop working until a new key is entered."
-msgstr "Eliminar la clau API emmagatzemada? Les dades del catàleg i les subscripcions deixaran de funcionar fins que s'introdueixi una nova clau."
-
-msgid "API key deleted. Save changes to persist."
-msgstr "Clau API eliminada. Desa els canvis per persistir."
-
-msgid "An unexpected error occurred."
-msgstr "S'ha produït un error inesperat."
-
-msgid "Base URL of the remote Plugins Core installation that this site will pull the plugin catalog from."
-msgstr "URL base de la instal·lació remota de Plugins Core des d'on aquest lloc obtindrà el catàleg de plugins."
-
-msgid "A key is stored (last 4 characters: <code>%s</code>). Leave blank to keep the existing key; enter a new value to replace it."
-msgstr "Hi ha una clau emmagatzemada (últims 4 caràcters: <code>%s</code>). Deixa-ho en blanc per mantenir la clau existent; introdueix un valor nou per reemplaçar-la."
-
-msgid "A key is stored but could not be decoded. You can replace it by entering a new value above, or delete it with the button below."
-msgstr "Hi ha una clau emmagatzemada però no s'ha pogut descodificar. Pots reemplaçar-la introduint un valor nou a dalt, o eliminar-la amb el botó de baix."
-
-msgid "Account-level API key issued by the ROBOTSTXT store. Required to authenticate catalog and subscription requests. The value is encrypted before storage."
-msgstr "Clau API de nivell de compte emesa pel store de ROBOTSTXT. Necessària per autenticar les peticions de catàleg i subscripció. El valor es xifra abans d'emmagatzemar-se."
-
-msgid "How long the catalog response from Core is cached in a transient. Default: 60 minutes. Lower values refresh more often at the cost of more requests to Core. Maximum: 1440 (24 hours)."
-msgstr "Quant de temps s'emmagatzema a la memòria cau la resposta del catàleg de Core. Per defecte: 60 minuts. Valors més baixos actualitzen més sovint a costa de més peticions a Core. Màxim: 1440 (24 hores)."
-
-msgid "Delete all plugin data when the plugin is uninstalled."
-msgstr "Eliminar totes les dades del plugin quan es desinstal·li."
-
 msgid "Catalog refreshed."
 msgstr "Catàleg actualitzat."
 
-msgid "ROBOTSTXT Manager is not configured yet. <a href=\"%s\">Set the Store URL and API key</a> to see your plugin catalog."
-msgstr "ROBOTSTXT Manager encara no està configurat. <a href=\"%s\">Configura la URL del store i la clau API</a> per veure el teu catàleg de plugins."
+msgid "Connected."
+msgstr "Connectat."
 
-msgid "No plugins were returned by the ROBOTSTXT store. Check the Store URL and API key on the Settings page, or click Refresh to try again."
-msgstr "El store de ROBOTSTXT no ha retornat cap plugin. Comprova la URL del store i la clau API a la pàgina de Configuració, o fes clic a Actualitzar per reintentar."
+msgid "Connection"
+msgstr "Connexió"
 
-msgid "Refresh catalog"
-msgstr "Actualitzar catàleg"
-
-msgid "Plugin"
-msgstr "Plugin"
-
-msgid "Type"
-msgstr "Tipus"
-
-msgid "Price"
-msgstr "Preu"
-
-msgid "Requires WP"
-msgstr "Requereix WP"
-
-msgid "Requires PHP"
-msgstr "Requereix PHP"
-
-msgid "Local state"
-msgstr "Estat local"
-
-msgid "Action"
-msgstr "Acció"
-
-msgid "Premium"
-msgstr "Premium"
-
-msgid "Free"
-msgstr "Gratuït"
-
-msgid "Your site runs WordPress"
-msgstr "El teu lloc usa WordPress"
-
-msgid "Your server runs PHP"
-msgstr "El teu servidor usa PHP"
-
-msgid "Not installed"
-msgstr "No instal·lat"
-
-msgid "Installed (inactive)"
-msgstr "Instal·lat (inactiu)"
-
-msgid "Update available (v%1$s → v%2$s)"
-msgstr "Actualització disponible (v%1$s → v%2$s)"
-
-msgid "Up to date"
-msgstr "Actualitzat"
-
-msgid "Incompatible"
-msgstr "Incompatible"
-
-msgid "Buy"
-msgstr "Comprar"
-
-msgid "Install (soon)"
-msgstr "Instal·lar (properament)"
-
-msgid "Update (soon)"
-msgstr "Actualitzar (properament)"
-
-msgid "%d plugin in the catalog is not compatible with this site's WordPress or PHP version."
-msgid_plural "%d plugins in the catalog are not compatible with this site's WordPress or PHP version."
-msgstr[0] "%d plugin del catàleg no és compatible amb la versió de WordPress o PHP d'aquest lloc."
-msgstr[1] "%d plugins del catàleg no són compatibles amb la versió de WordPress o PHP d'aquest lloc."
-
-msgid "This site runs WordPress %1$s on PHP %2$s."
-msgstr "Aquest lloc usa WordPress %1$s en PHP %2$s."
-
-msgid "Store URL is not configured."
-msgstr "La URL del store no està configurada."
-
-msgid "API key is not configured."
-msgstr "La clau API no està configurada."
+msgid "Could not create a temporary file for download."
+msgstr "No s'ha pogut crear un fitxer temporal per a la baixada."
 
 msgid "Could not reach Plugins Core: %s"
 msgstr "No s'ha pogut connectar amb Plugins Core: %s"
 
-msgid "Connected."
-msgstr "Connectat."
+msgid "Data on Uninstall"
+msgstr "Dades en desinstal·lar"
+
+msgid "Delete API key"
+msgstr "Esborra la clau API"
+
+msgid "Delete all plugin data when the plugin is uninstalled."
+msgstr "Esborra totes les dades del plugin quan es desinstal·li."
+
+msgid "Delete the stored API key? The catalog and subscription data will stop working until a new key is entered."
+msgstr "Segur que vols esborrar la clau API desada? El catàleg i les dades de subscripció deixaran de funcionar fins que s'introdueixi una clau nova."
+
+msgid "Deleting…"
+msgstr "S'està esborrant…"
+
+msgid "Download failed (HTTP %d)."
+msgstr "Error en la baixada (HTTP %d)."
+
+msgid "Download failed: %s"
+msgstr "Error en la baixada: %s"
+
+msgid "Free"
+msgstr "Gratuït"
+
+msgid "How long the catalog response from Core is cached in a transient. Default: 60 minutes. Lower values refresh more often at the cost of more requests to Core. Maximum: 1440 (24 hours)."
+msgstr "Quant de temps es desa a la memòria cau la resposta del catàleg de Core en un transient. Per defecte: 60 minuts. Els valors més baixos actualitzen més sovint a costa de més sol·licituds a Core. Màxim: 1440 (24 hores)."
+
+msgid "Incompatible"
+msgstr "Incompatible"
+
+msgid "Install"
+msgstr "Instal·la"
+
+msgid "Installation failed."
+msgstr "Error en la instal·lació."
+
+msgid "Installation failed: %s"
+msgstr "Error en la instal·lació: %s"
+
+msgid "Installed (inactive)"
+msgstr "Instal·lat (inactiu)"
+
+msgid "Insufficient permissions."
+msgstr "Permisos insuficients."
+
+msgid "Local state"
+msgstr "Estat local"
+
+msgid "Manager (by ROBOTSTXT) — Plugins"
+msgstr "Manager (by ROBOTSTXT) — Plugins"
+
+msgid "Manager (by ROBOTSTXT) — Settings"
+msgstr "Manager (by ROBOTSTXT) — Paràmetres"
+
+msgid "No plugins were returned by the ROBOTSTXT store. Check the Store URL and API key on the Settings page, or click Refresh to try again."
+msgstr "La botiga ROBOTSTXT no ha retornat cap plugin. Revisa la URL de la botiga i la clau API a la pàgina de paràmetres, o prem Actualitza per tornar-ho a provar."
+
+msgid "Not installed"
+msgstr "No instal·lat"
+
+msgid "Plugin"
+msgstr "Plugin"
+
+msgid "Plugin is not installed."
+msgstr "El plugin no està instal·lat."
+
+msgid "Plugin not found in catalog."
+msgstr "Plugin no trobat al catàleg."
+
+msgid "Premium"
+msgstr "Premium"
+
+msgid "Price"
+msgstr "Preu"
+
+msgid "ROBOTSTXT"
+msgstr "ROBOTSTXT"
+
+msgid "ROBOTSTXT Manager is not configured yet. <a href=\"%s\">Set the Store URL and API key</a> to see your plugin catalog."
+msgstr "ROBOTSTXT Manager encara no està configurat. <a href=\"%s\">Configura la URL de la botiga i la clau API</a> per veure el teu catàleg de plugins."
+
+msgid "Refresh catalog"
+msgstr "Actualitza el catàleg"
+
+msgid "Requires PHP"
+msgstr "Requereix PHP"
+
+msgid "Requires WP"
+msgstr "Requereix WP"
+
+msgid "Settings"
+msgstr "Paràmetres"
+
+msgid "Show more information"
+msgstr "Mostra més informació"
+
+msgid "Store URL"
+msgstr "URL de la botiga"
+
+msgid "Store URL is not configured."
+msgstr "La URL de la botiga no està configurada."
+
+msgid "Store is not configured."
+msgstr "La botiga no està configurada."
+
+msgid "Test connection"
+msgstr "Prova la connexió"
+
+msgid "Testing…"
+msgstr "S'està provant…"
+
+msgid "The API key format is invalid. Copy the full key from your ROBOTSTXT account page."
+msgstr "El format de la clau API no és vàlid. Copia la clau completa des de la teva pàgina de compte de ROBOTSTXT."
+
+msgid "The store responded with HTTP %d. Check the Store URL and API key."
+msgstr "La botiga ha respost amb HTTP %d. Revisa la URL de la botiga i la clau API."
+
+msgid "The store returned an invalid file."
+msgstr "La botiga ha retornat un fitxer no vàlid."
+
+msgid "This site runs WordPress %1$s on PHP %2$s."
+msgstr "Aquest lloc funciona amb WordPress %1$s i PHP %2$s."
+
+msgid "Too many refreshes. Please wait a minute before refreshing again."
+msgstr "Massa actualitzacions. Espera un minut abans de tornar a actualitzar."
+
+msgid "Type"
+msgstr "Tipus"
+
+msgid "Up to date"
+msgstr "Actualitzat"
+
+msgid "Update"
+msgstr "Actualitza"
+
+msgid "Update available (v%1$s → v%2$s)"
+msgstr "Actualització disponible (v%1$s → v%2$s)"
+
+msgid "Visit website"
+msgstr "Visita el lloc web"
+
+msgid "You do not have sufficient permissions to access this page."
+msgstr "No tens permisos suficients per accedir a aquesta pàgina."
+
+msgid "Your server runs PHP"
+msgstr "El teu servidor funciona amb PHP"
+
+msgid "Your site runs WordPress"
+msgstr "El teu lloc funciona amb WordPress"
diff --git a/languages/robotstxt-manager-es_ES.mo b/languages/robotstxt-manager-es_ES.mo
index d25186a78111988d752387f820c3ca2d5ecb415a..fe859122d62371a67e3de003a25b5171fdadafa6 100644
GIT binary patch
literal 7844
zcmbuDS!^9w9ma<i3Ir%ncFJ-nHQ0c!lMqUAoD|1Nnt;=q#D%g5ICt*3_M~%XF0<Hi
zK?1S80Af)Qq5?r)kSYNJA+`zu!hi%1s1ic(z*=4qkGug7@cYi3xp$nUAQ*Y>cjwMI
z=f7|M{SA-)bj0;K?&oo**F=#6zxQZ9xYn+VqOX8&0G|Z@3+#bUdTbOu0bBz2fv3Rt
zfak#Xf)9cGMQe|XqB-zx@VVgo!Owu72RSNw)#IaxuhA0teDDO=2V?MB@TcHoz@LN9
z0v`fz0RIAt?mq)w$HM~8PX!IQ3_ca?gV%!<cnkOe@I3e+DE?>o5MKwtr-7@WM1Lpv
zEzp5a1fR!;<e3AX4jur-&&lxocJMhommpiBkAXLVp9NnGeh>T*_(xEB9P%OgEAZLi
zyFuyyK2UVN4odFtf`}OX04%|uflmgHAQVSMXF$<=3n)Df!DoOusC^#-b?(PO(fKl{
z{XYRwLG&x|Eci$882CzFir+2pW#IkbGWZivdU@<qnte|M#s9NF$@u~h)}m$bFnA{@
zJ$(ce-7kWleiZV6-`9JLDE_ZU>HEPOK}bZap!j+lct5xSehj>Z!z9lqz$Ng0P;`F{
zeiQr$D7}3R;f3D;4fsRwJou;Z`|2|rzSqGQ@cUaq{-S&N5ZzCLqVqZM7Vt~pEciPR
z647-S9hRaS!B>L|pyv~m9j-yx7lPM=lDo%;^mIG;XYdYCav#K5WUt#m`OPUlWT!qT
zI`0KJGP)1c`Y(f$_qzdq3tr^;U*Y{loLF?e3M!7i3C@7O1f`F^hxd=Vv61g_;79rW
z22gaq0E*7HLCNuBQ2QPNArbus#B|Z$z&Y?*n3bIKp!9JD)IJMJ-y?7p{0;ara0aFh
zf@|RGzz=}(r(b~D_e)Uv{{#4P@UNis@Jx(!7<@U%QPBn{x*r5_C%+fh^)jr0@?pb$
z4Yw}wCOW6NPjPc>bTfB*>1<s~+^^<FP2Mjsx4-83JP^K%Z|OpO$wyGdp6iw2N&eDa
zlKn;8ui=*dbe-T<jOpreOYidiYq=FeN4eWex$Y46OSxs=_FCr4LU@p$%9nIWce-Sw
zmvGC5xW13E*MiC^?e(hgMR{_O`_}M$5|oaQa3ANEAIWyQa9@Aj&gUz*<&(0@ZQQb7
zG&3;cwBATE!(X-OOl&Kg<{Ks{O_o<C&PQWgCH>Ty?WEdd2`|c|axX2-oAP3?R=Bb>
zd12O0t(h%Xlu4fTrl*#d9%~Et|D0PI8&}Det=s@AI=zJ5lqa(sUYMjZ!y+GfY0{*u
zOy8yXwqIV42hG-5+t2ID%#?G{vbo3YNZhi@3pX&csb$Y06K~oAVu-Y8mg0Qij?R=z
z3;xSo&#XGT<xD@d**&JpIl_%SL3aU)Nw%Rw4;z=U-&m8mZL?+5+G%a!#;J`ReD*FQ
z-iN6;uhW57Qs0?@6Gg;(b6#Vcth3wncNzjB*QJ4MTkaJy%D|<r5~bF7uv}MFp0zqz
zUOR1G?{*@g)X;2z+&PJd3bGAXis`XTTZ-eba^fG^FxjY49Is+n&#L*<ZMoD;7nU_@
zg;}}R**lNjxqfc_?)669J#*H*t4^eMh}fDXS(V^}Q%AJfz?5~rjEiJk;azCpU9~H#
zvS-#guu&`AxGXMq#yAGD4Y8yrU^krj(moIJoM<^Sb>=RN9o8KfR}^R}kK?-VQXI3T
zGk2X`HTlqUT)0sVJ8M2lO0%M)gWC}p@KbHtijNQ%XgW>JxaLFhhTv+WN{-o!j@3KS
zij6lNpG~y+Co?-rvbu6OW&3;Kh6LEAw7ZgLndf-&RYI*yoFy)t)MicPM&rD&#f}*!
zge|%-gM2$nbL&rOor~r1<{q&YiHGPo92um#D+@wK#~UXK_G}-Cx>h)1%9?E~*OeG`
z)a?;sKb#_+gg^@i-sa8ND(Et6H-}57Y#W>HytqgHj-MrI@cIzHKG-ItSoHAwz7!n~
zlAEDL8ASJ~_4PF~Gnj*;y|29VCkyAIQ~9<@bBKu9mNCpQ&NE!Y=a$9`O5S3{fs!10
zFKkvOaM3fz-O$!)wP<eHZ-Pxp8TmHJ!24^76MMs&k=!XCRw&PV5d?G655DK$w7#zB
z5Y3)BV=pA5dbDT`96Ge$%pN>sHuJhDk>_+aP1Zd4#Molvsf`Y_(!cEf=%o+8OHE1U
z6Rn%m;(9ntVo9bnFiJ`#`LY+S=CPGo6jNtxMywTPmN=ip_?&t8efPC4_DD<4xk^d1
zjP4-Qgg`@C4mDMEk-^Z_(#OiCi^;$k>YUQI4_x_Bn|*wI@-h%GW4QFGF-{XUo(*O|
zy%hmtH*7-rx`V=(w3Q`lB0oS|7bmZK?F&`QA^FdHL+~12l0K4p1SYYICYqUk!=R1k
zE=#Cp$Kgs#)@<S|M{b%aZ#s$?SC@5Z!5)>Ll+KwQe4-7{2`{a%;fE-s-cq%D`tYW;
zsMS_<Zj(^(j+kWRk&*Y9Xrk%qw^l82J}n2$vdhHkMeAg5+}x)#<uE;ma9zict?3$q
zIyuRRnuMyfl8>7*GE{z5-1}(s(oS?si{R^!w>8w-jDs^NgsG-YH4K@6Qy<xf_8t-Z
zkxCr6@>y1EU{sBfDeA1-8_gWJnFcBI4bsfPn~9tCJU1ho?X*e2QOed*r@FIksns^*
zjJA-4T%oiV9CUqW?4rBqIC7(ghOZqkc8gqR)w0cQdFl^;_)}&}wCAEXCh%ysU0<w5
zYAOb~?=?16@UI-{zBI?N8a-d;6hl4jE%3F1rmqoMUex?}xfbyM{5;ib{`6q}jZK%h
zIPv^Ta>oANExrBw&N_-%HGihuNCxxA>Wy-KJzq4NRW&Xb7ZxZ3gRxrAUS4c0l=WDP
z7n;<uP~`o*Dys|CJX%&(+P6weH@~j@oLbVv;xt8>rOiCGubph^x$-E>vyGaK^Xtx%
zX-|}6yZiM#HM7k(J7<<$`HmCkuCi^>__zDcoIZ16D(wM;qK1>{VFmjwQm8M8XHw2#
z-))wzI&#<g$@yES>%{WV74s*^?E@TO(cIcks(qxS!lv^l2}!!s47qtMj~qO#nCI(}
z+04A?h&eEKc;DUg$MX>+7R^M)iCU(8x*9)~y4{QP{&EOJ==T0Zt4VFs;O~ATV|lmx
z*Q5G>fKbMb5*njDQ@~}%mmD}PSEBX55NOANfvC09faOWk!0uPb8U%<d;S1(93s~`J
z`}TaZff`qnS?<-AXtvDzR1nPsr|b?LhBa}jsK6JBfgM;gyZc~TC8NC5co3!ocg6AG
z`0fMeMVzv(86l>uv0hP+{RtS@Y0hpqU{X+jOTS-d>JVtzvf6EhU1d#vtmu+c+q)WT
z6lQNWa>%$Qq>)-4L*2Fo*@X@qgLV!I1S#q)zJ#bPV8v1;O+PPaB*iS|!9$3vVEv%O
z6|W#Nb~O3cY#P{}x!voHR!V)+sGopd3$*XBQeX@>BqyNy)m9zK{oeWTL=p9~1*)g#
zZ7HegOEh3$$+#w(IA(;yVIPu!G+Rk3JB{%k5zGii0<%TJDp`V2gRRmIJJ3u{JAjU*
zrM<qYnW$M(`w=9jVku#tNQ0r!c$^G%B(~M=;4ek#M~^r`V`26vupW~JgGSP5y_r1{
z4#a-m2{m~1RS7)R(1lok2<3uF#CtID&&VEzk!GcoIt@OP_mOW<pv66b%~~>q_G*e4
zjj^tuM0OttaEbKIM3OfXNk|TRf@TG6#Fb}VUoUuR>Ec>H)KpT)!E6z4CU|t1P8c3!
z2COAdwZ#S|?rv+2ExhA(rEO;ve2LzZy-g#A7{|P?>cl3p<dosJDj%?3en^?rCpu}=
zfCtendUhvgVYVOr;GAQq&5g9md`c@?hG5u3V3HbclRr%J=guBtiaSlOjTHy(yu~g)
zhYssZ{)C1$sZiFFLvu-175SjPH@2NDq=bNyyhyOD;pQYmn9ngCHFhVQE4}v$yuF~4
zE2EVfKGgaq8X0A?Ce<lzX|maUK+>vh(!ecKb%n&2{20Vy?Aw`s)--W8p*@{|a$;r`
z-TUl@Hb=V`Q7MVo=kO*At0ZL28>S-#cTBu0`-IHxH+5sxwo}pWMaCi;gw9k{*sDxM
zI7?SE!GpYYdRKkZ8IbVy$$*s4MQeU0LJkh9!=OZlh)%#XD^pELk2L%Q_kN@$%jYQp
zu2i19G`T5V4k#7r7NJLG%r<r(%z}68zbjiw>BCHkrO6cG1bnm;Dl$3G<K2rSho(w4
zG*t%pZw7}@QX4ZdStxczlTv2ou1dp2N+u_UgFXj&J2?>=A==;-M<OXr)^x@v{RfBs
zNO@4)bbYNmM>!&9IzCOmP1;E-1xzS$WGEtZ1$%}m@>TOjg8v8g_}QwF8j&mgE3WO8
zx+%4zqAvT*aHV;6GHL07Nvk#N89ba^-1vT&wVKLtDP!`1OMknPw4@4F23uc28@#6{
z@B8|vunVc%{}$2<c57xZdDvcW@duhMDgu?v&t(KEYHU)k8aw{+=yN+eQCG*WLe1v)
z$;8%WH4JHTX1FqwA??5R<nCe9!01#UcyAe3jD~jAw7J-mo&Iav4^TUu>Fu~1*)pLg
z=_Ia6Q{d~k(xLya5C73@dxA-@OsZ$WAefAEwFYeuI{jWuzlN%jXm<7ghrh~Dhb8ej
z-+F7lQzXjzq}t}6HYBJ{dJ0_-Q{BMFu+Q(oN-$RY$qw5Vd-Wp!)k`(_d*4hn7X2H8
Ct`=?p

delta 2943
zcmZ{kU2Ggz700h>6DM&#9LFDBC+prMPU6(wb=FCp)B!4!q@={eOX@ZVM8);&xSlXO
zv&@HyBfxnHq7rH)ZmXa+v<*UhNDV>+RXkLEz=DEkQHoT-OCwPs+C;p-15*3M@667+
zZY!?#?r%Qsz2}_&IcI+Ssb3sgy4iK-(~5B)a|iPuZAwkU7w_PY@$Q{UU4ysaH{s<q
zN-e?ewMw<ar{I2g1@^<=!^`mRke^y)Q4wB*v+y}6N4Kq0Dm!Wo7kxbFfL(Am{3{%X
z8{p>kO%|Z$eh_YjC*Wpy7LLO?cn<y$cEELP#%I+HUxEd=5#E5Z?=9FZq5O-B0uS2Q
zB^$T%*9-T-UGURzH#G1PyaYGF4o;H@3s98MkciX}#0OP|F+2jdz!xDu^)i1Pq5cTh
ziIi`0AscQ&Nx{2NHmt!4zNsE~57ba1I+Z`KLVoJY{E4F;JPN-DyWt<;UGOdV9BKV8
z{0;X{bNG+o=}uB<x%f91;=m<zJq(|Oa^S1*8oUi9!XJ<y$>j^M4qt)td}Lcwi9>LJ
z`=d}4{1V)S;jcpp<SD!oJI})*_;b-;JpBuQlKXd{6yp2v33#Zd8R0S%so#KqhJS;I
zq<)GOiSXA@&Uqb5Exirp{rixgYUiN@G>~%=zQBF05B+7~8cq=dT~Hz_<o7$Fcsv9j
zhhtC-y$ogF8&Gn26Ux5Z5S7(`;9e+&g}7=Tlyyg-r1ChFREA6Wiv&vhT!h2$Stz-D
z6{4QHgO?IXA4E~LlPN=@y^ncFZWvNG;+UjChNMfXU0P0Rt2M;NCzw)y*^mmCv4<%U
zi_s%Y86urTC1ad9#;h<Yi)`RyHn#J>pE<%5HST5}WR{pRL;+D*hU6b5n)W3!8B!#J
z*_BfF!cnHkEw#}aWiAdgMZSGZ&E!*&wI0Z17bPi?Y>4~^@@uj}gf-pp)5p9(^Rthx
zy?Xtj_S<dtf%Pvf`JNjjrP!;vx@O|}+0aBaJr_ngnRoS>>Ca5hJT&vgnbvmK3FE~$
zaqDG0<;6*yt#V9a{O~b77ln0gbmZ2<#MRZzV62aYk&D@wHU0=M<IrDlW9^5I@wN9z
z^TlY|s2Mh~Dse}&32Hh{qdDWSGEQe>C-NGJ7Y2IXHGVQ**423vySg&Lfu>dp1AkGs
z+*t73Z`k+N@3N;h{L_B5<3_t4io-D2Z@;qfOq;T=clOy|ZhX!DYSSzBJDc~~-)%11
zD_ic_vDk3c!wsE;=#a=|=1{)1*g0sYJ1@6Y>^q&+lhx_c8F#^paj0~h#S?n$z}R@{
zz>!jAOjiz0RPG%<z}PTl;-oYanIQH}5=IlN^!%h3%!T%et$jAwy2W1E`ZYV&wZpb|
z4cpUQ587wC9v#ArCMhmz>)0dsvN~xNbs8A$_-4V?#;>DKU@vStyX2lH8zj;_iquII
z)>6l1sSZ+iA=C?`C(;cQNpjqJ!#5X9<eUF<ps5+%aHCKMp+@6IT0;^NU-RZX$3$qK
zx;65$>Znn(VwQ4Z{YOljDDq~_hz_;udv!0cad%~He)+TR;(E-*1mH#X&F;~|L>+hw
zt}o#`DNz~i)=@zGA`V`}s7bx9D$ue%ZIAX8_cq+bbI1$+$!?P@U!^ody+|2lRpfZf
z*8}_Ao?<cA&qT3XR+CQlLQOj<zAj(4f9g5a7TfOLZ!J|#koyvfwBnYpeUqu;lM87e
zWD<3GAsr&Qs2g#h*>#yOE4|cgoow+3{vjyKCArO3F_}APT>pOWwxz6ZQkTZbOwc7*
zZ*~y7R__=!PLdkmyU;vfguv@5HIzHo+{qr_NMq%Sh+Jj;K;BUlHj1-m#k)?qqi?b4
za(ra$lfAp`t=_T1i7cHa%1d&x`k-n)vIqOdKfm(UZ`CXdT6IgA-LI!Yw4padA+%hT
zu8%orf7^F(Lh3m`tDIZnTM@o}@h9rDkx9H*9ZQ$51~hTvQRrC#JI3LwVH<ayKK_U_
z0;N%3z8dRUa}K*JdIim=M%UdyN**&|E=0DxRatgZVWLwHHKOI~=e@dNb>i-~-!6P1
z|F+yHjCP#(phWGu{-OS3VZ9Nh?yNy~{qUKoEZVGy?dSS;RwmD-R7@=WF>fwNNjcgL
z^kgfQE4@o^OFKmN`Tkz}UjJNsZpV7tC+)TE!vh~WTTOk`*!Yft`yH}<UYbBvqj0vR
z-iejZj80>t&xTR0ic+!OQyGlK8TlOT85@l4YsKQn!@pH5+2MhccgtQ@s+qL;&HC_R
F>VE+9x%>bC

diff --git a/languages/robotstxt-manager-es_ES.po b/languages/robotstxt-manager-es_ES.po
index e2f8bae..98d8510 100644
--- a/languages/robotstxt-manager-es_ES.po
+++ b/languages/robotstxt-manager-es_ES.po
@@ -1,184 +1,235 @@
+# Copyright (C) 2026 ROBOTSTXT
+# This file is distributed under the GPL-3.0-or-later.
 msgid ""
 msgstr ""
-"Project-Id-Version: Manager (by ROBOTSTXT) 0.1.0\n"
+"Project-Id-Version: Manager (by ROBOTSTXT) 0.6.0\n"
 "Report-Msgid-Bugs-To: https://wordpress.org/support/plugin/robotstxt-manager\n"
-"POT-Creation-Date: 2026-08-12T13:09:24+00:00\n"
-"PO-Revision-Date: 2026-08-12 13:15+0000\n"
-"Last-Translator: ROBOTSTXT <info@robotstxt.es>\n"
-"Language-Team: Español\n"
+"Last-Translator: ROBOTSTXT <hola@robotstxt.es>\n"
+"Language-Team: Español (España) <es_ES@robotstxt.es>\n"
 "Language: es_ES\n"
 "MIME-Version: 1.0\n"
 "Content-Type: text/plain; charset=UTF-8\n"
 "Content-Transfer-Encoding: 8bit\n"
-"X-Domain: robotstxt-manager\n"
 "Plural-Forms: nplurals=2; plural=(n != 1);\n"
+"X-Domain: robotstxt-manager\n"
 
-msgid "Manager (by ROBOTSTXT)"
-msgstr "Manager (by ROBOTSTXT)"
+msgid "%d plugin in the catalog is not compatible with this site's WordPress or PHP version."
+msgid_plural "%d plugins in the catalog are not compatible with this site's WordPress or PHP version."
+msgstr[0] "%d plugin del catálogo no es compatible con la versión de WordPress o de PHP de este sitio."
+msgstr[1] "%d plugins del catálogo no son compatibles con la versión de WordPress o de PHP de este sitio."
 
-msgid "Client-side dashboard for the ROBOTSTXT plugin ecosystem. Lists the catalog from a remote Plugins Core install, resolves local install/update state, and surfaces subscription health. Phase 1: read-only catalog view."
-msgstr "Panel de control del lado del cliente para el ecosistema de plugins de ROBOTSTXT. Lista el catálogo desde una instalación remota de Plugins Core, resuelve el estado local de instalación/actualización, y muestra el estado de las suscripciones. Fase 1: vista de catálogo de solo lectura."
+msgid "%s activated."
+msgstr "%s activado."
 
-msgid "ROBOTSTXT"
-msgstr "ROBOTSTXT"
+msgid "%s installed. Activate it from the list below."
+msgstr "%s instalado. Actívalo desde la lista de abajo."
 
-msgid "Manager (by ROBOTSTXT) — Plugins"
-msgstr "Manager (by ROBOTSTXT) — Plugins"
+msgid "%s updated."
+msgstr "%s actualizado."
 
-msgid "You do not have sufficient permissions to access this page."
-msgstr "No tienes permisos suficientes para acceder a esta página."
+msgid "(about %s)"
+msgstr "(sobre %s)"
 
-msgid "Insufficient permissions."
-msgstr "Permisos insuficientes."
+msgid "A key is stored (last 4 characters: <code>%s</code>). Leave blank to keep the existing key; enter a new value to replace it."
+msgstr "Hay una clave guardada (últimos 4 caracteres: <code>%s</code>). Déjalo en blanco para mantener la clave actual; escribe un valor nuevo para sustituirla."
 
-msgid "Manager (by ROBOTSTXT) — Settings"
-msgstr "Manager (by ROBOTSTXT) — Ajustes"
-
-msgid "Settings"
-msgstr "Ajustes"
-
-msgid "Connection"
-msgstr "Conexión"
-
-msgid "Store URL"
-msgstr "URL del store"
+msgid "A key is stored but could not be decoded. You can replace it by entering a new value above, or delete it with the button below."
+msgstr "Hay una clave guardada pero no se pudo descodificar. Puedes sustituirla escribiendo un valor nuevo arriba, o borrarla con el botón de abajo."
 
 msgid "API Key"
 msgstr "Clave API"
 
+msgid "API key deleted. Save changes to persist."
+msgstr "Clave API borrada. Guarda los cambios para que surta efecto."
+
+msgid "API key is not configured."
+msgstr "La clave API no está configurada."
+
+msgid "Account-level API key issued by the ROBOTSTXT store. Required to authenticate catalog and subscription requests. The value is encrypted before storage."
+msgstr "Clave API a nivel de cuenta emitida por la tienda ROBOTSTXT. Es necesaria para autenticar las solicitudes del catálogo y de las suscripciones. El valor se cifra antes de guardarse."
+
+msgid "Action"
+msgstr "Acción"
+
+msgid "Activate"
+msgstr "Activar"
+
+msgid "An unexpected error occurred."
+msgstr "Ha ocurrido un error inesperado."
+
+msgid "Base URL of the remote Plugins Core installation that this site will pull the plugin catalog from."
+msgstr "URL base de la instalación remota de Plugins Core de la que este sitio obtendrá el catálogo de plugins."
+
+msgid "Buy"
+msgstr "Comprar"
+
 msgid "Cache"
 msgstr "Caché"
 
 msgid "Catalog Cache (minutes)"
 msgstr "Caché del catálogo (minutos)"
 
-msgid "Data on Uninstall"
-msgstr "Datos al desinstalar"
-
-msgid "Testing…"
-msgstr "Probando…"
-
-msgid "Test connection"
-msgstr "Probar conexión"
-
-msgid "Deleting…"
-msgstr "Eliminando…"
-
-msgid "Delete API key"
-msgstr "Eliminar clave API"
-
-msgid "Delete the stored API key? The catalog and subscription data will stop working until a new key is entered."
-msgstr "¿Eliminar la clave API almacenada? Los datos del catálogo y las suscripciones dejarán de funcionar hasta que se introduzca una nueva clave."
-
-msgid "API key deleted. Save changes to persist."
-msgstr "Clave API eliminada. Guarda los cambios para persistir."
-
-msgid "An unexpected error occurred."
-msgstr "Ocurrió un error inesperado."
-
-msgid "Base URL of the remote Plugins Core installation that this site will pull the plugin catalog from."
-msgstr "URL base de la instalación remota de Plugins Core desde la que este sitio obtendrá el catálogo de plugins."
-
-msgid "A key is stored (last 4 characters: <code>%s</code>). Leave blank to keep the existing key; enter a new value to replace it."
-msgstr "Hay una clave almacenada (últimos 4 caracteres: <code>%s</code>). Déjalo en blanco para mantener la clave existente; introduce un nuevo valor para reemplazarla."
-
-msgid "A key is stored but could not be decoded. You can replace it by entering a new value above, or delete it with the button below."
-msgstr "Hay una clave almacenada pero no se pudo decodificar. Puedes reemplazarla introduciendo un nuevo valor arriba, o eliminarla con el botón de abajo."
-
-msgid "Account-level API key issued by the ROBOTSTXT store. Required to authenticate catalog and subscription requests. The value is encrypted before storage."
-msgstr "Clave API de nivel de cuenta emitida por el store de ROBOTSTXT. Necesaria para autenticar las peticiones de catálogo y suscripción. El valor se cifra antes de almacenarse."
-
-msgid "How long the catalog response from Core is cached in a transient. Default: 60 minutes. Lower values refresh more often at the cost of more requests to Core. Maximum: 1440 (24 hours)."
-msgstr "Cuánto tiempo se cachea la respuesta del catálogo de Core en un transient. Por defecto: 60 minutos. Valores más bajos actualizan más a menudo a costa de más peticiones a Core. Máximo: 1440 (24 horas)."
-
-msgid "Delete all plugin data when the plugin is uninstalled."
-msgstr "Eliminar todos los datos del plugin cuando se desinstale."
-
 msgid "Catalog refreshed."
 msgstr "Catálogo actualizado."
 
-msgid "ROBOTSTXT Manager is not configured yet. <a href=\"%s\">Set the Store URL and API key</a> to see your plugin catalog."
-msgstr "ROBOTSTXT Manager aún no está configurado. <a href=\"%s\">Configura la URL del store y la clave API</a> para ver tu catálogo de plugins."
+msgid "Connected."
+msgstr "Conectado."
 
-msgid "No plugins were returned by the ROBOTSTXT store. Check the Store URL and API key on the Settings page, or click Refresh to try again."
-msgstr "El store de ROBOTSTXT no devolvió ningún plugin. Comprueba la URL del store y la clave API en la página de Ajustes, o haz clic en Actualizar para reintentar."
+msgid "Connection"
+msgstr "Conexión"
 
-msgid "Refresh catalog"
-msgstr "Actualizar catálogo"
-
-msgid "Plugin"
-msgstr "Plugin"
-
-msgid "Type"
-msgstr "Tipo"
-
-msgid "Price"
-msgstr "Precio"
-
-msgid "Requires WP"
-msgstr "Requiere WP"
-
-msgid "Requires PHP"
-msgstr "Requiere PHP"
-
-msgid "Local state"
-msgstr "Estado local"
-
-msgid "Action"
-msgstr "Acción"
-
-msgid "Premium"
-msgstr "Premium"
-
-msgid "Free"
-msgstr "Gratis"
-
-msgid "Your site runs WordPress"
-msgstr "Tu sitio usa WordPress"
-
-msgid "Your server runs PHP"
-msgstr "Tu servidor usa PHP"
-
-msgid "Not installed"
-msgstr "No instalado"
-
-msgid "Installed (inactive)"
-msgstr "Instalado (inactivo)"
-
-msgid "Update available (v%1$s → v%2$s)"
-msgstr "Actualización disponible (v%1$s → v%2$s)"
-
-msgid "Up to date"
-msgstr "Actualizado"
-
-msgid "Incompatible"
-msgstr "Incompatible"
-
-msgid "Buy"
-msgstr "Comprar"
-
-msgid "Install (soon)"
-msgstr "Instalar (próximamente)"
-
-msgid "Update (soon)"
-msgstr "Actualizar (próximamente)"
-
-msgid "%d plugin in the catalog is not compatible with this site's WordPress or PHP version."
-msgid_plural "%d plugins in the catalog are not compatible with this site's WordPress or PHP version."
-msgstr[0] "%d plugin del catálogo no es compatible con la versión de WordPress o PHP de este sitio."
-msgstr[1] "%d plugins del catálogo no son compatibles con la versión de WordPress o PHP de este sitio."
-
-msgid "This site runs WordPress %1$s on PHP %2$s."
-msgstr "Este sitio usa WordPress %1$s en PHP %2$s."
-
-msgid "Store URL is not configured."
-msgstr "La URL del store no está configurada."
-
-msgid "API key is not configured."
-msgstr "La clave API no está configurada."
+msgid "Could not create a temporary file for download."
+msgstr "No se pudo crear un archivo temporal para la descarga."
 
 msgid "Could not reach Plugins Core: %s"
 msgstr "No se pudo conectar con Plugins Core: %s"
 
-msgid "Connected."
-msgstr "Conectado."
+msgid "Data on Uninstall"
+msgstr "Datos al desinstalar"
+
+msgid "Delete API key"
+msgstr "Borrar la clave API"
+
+msgid "Delete all plugin data when the plugin is uninstalled."
+msgstr "Borrar todos los datos del plugin cuando se desinstale."
+
+msgid "Delete the stored API key? The catalog and subscription data will stop working until a new key is entered."
+msgstr "¿Seguro que quieres borrar la clave API guardada? El catálogo y los datos de suscripción dejarán de funcionar hasta que se introduzca una clave nueva."
+
+msgid "Deleting…"
+msgstr "Borrando…"
+
+msgid "Download failed (HTTP %d)."
+msgstr "Fallo en la descarga (HTTP %d)."
+
+msgid "Download failed: %s"
+msgstr "Fallo en la descarga: %s"
+
+msgid "Free"
+msgstr "Gratis"
+
+msgid "How long the catalog response from Core is cached in a transient. Default: 60 minutes. Lower values refresh more often at the cost of more requests to Core. Maximum: 1440 (24 hours)."
+msgstr "Cuánto tiempo se guarda en caché la respuesta del catálogo de Core en un transient. Por defecto: 60 minutos. Los valores más bajos actualizan con más frecuencia a costa de más solicitudes a Core. Máximo: 1440 (24 horas)."
+
+msgid "Incompatible"
+msgstr "Incompatible"
+
+msgid "Install"
+msgstr "Instalar"
+
+msgid "Installation failed."
+msgstr "Fallo en la instalación."
+
+msgid "Installation failed: %s"
+msgstr "Fallo en la instalación: %s"
+
+msgid "Installed (inactive)"
+msgstr "Instalado (inactivo)"
+
+msgid "Insufficient permissions."
+msgstr "Permisos insuficientes."
+
+msgid "Local state"
+msgstr "Estado local"
+
+msgid "Manager (by ROBOTSTXT) — Plugins"
+msgstr "Manager (by ROBOTSTXT) — Plugins"
+
+msgid "Manager (by ROBOTSTXT) — Settings"
+msgstr "Manager (by ROBOTSTXT) — Ajustes"
+
+msgid "No plugins were returned by the ROBOTSTXT store. Check the Store URL and API key on the Settings page, or click Refresh to try again."
+msgstr "La tienda ROBOTSTXT no devolvió ningún plugin. Revisa la URL de la tienda y la clave API en la página de ajustes, o pulsa Actualizar para volver a intentarlo."
+
+msgid "Not installed"
+msgstr "No instalado"
+
+msgid "Plugin"
+msgstr "Plugin"
+
+msgid "Plugin is not installed."
+msgstr "El plugin no está instalado."
+
+msgid "Plugin not found in catalog."
+msgstr "Plugin no encontrado en el catálogo."
+
+msgid "Premium"
+msgstr "Premium"
+
+msgid "Price"
+msgstr "Precio"
+
+msgid "ROBOTSTXT"
+msgstr "ROBOTSTXT"
+
+msgid "ROBOTSTXT Manager is not configured yet. <a href=\"%s\">Set the Store URL and API key</a> to see your plugin catalog."
+msgstr "ROBOTSTXT Manager aún no está configurado. <a href=\"%s\">Configura la URL de la tienda y la clave API</a> para ver tu catálogo de plugins."
+
+msgid "Refresh catalog"
+msgstr "Actualizar el catálogo"
+
+msgid "Requires PHP"
+msgstr "Requiere PHP"
+
+msgid "Requires WP"
+msgstr "Requiere WP"
+
+msgid "Settings"
+msgstr "Ajustes"
+
+msgid "Show more information"
+msgstr "Mostrar más información"
+
+msgid "Store URL"
+msgstr "URL de la tienda"
+
+msgid "Store URL is not configured."
+msgstr "La URL de la tienda no está configurada."
+
+msgid "Store is not configured."
+msgstr "La tienda no está configurada."
+
+msgid "Test connection"
+msgstr "Probar la conexión"
+
+msgid "Testing…"
+msgstr "Probando…"
+
+msgid "The API key format is invalid. Copy the full key from your ROBOTSTXT account page."
+msgstr "El formato de la clave API no es válido. Copia la clave completa desde tu página de cuenta de ROBOTSTXT."
+
+msgid "The store responded with HTTP %d. Check the Store URL and API key."
+msgstr "La tienda respondió con HTTP %d. Revisa la URL de la tienda y la clave API."
+
+msgid "The store returned an invalid file."
+msgstr "La tienda devolvió un archivo no válido."
+
+msgid "This site runs WordPress %1$s on PHP %2$s."
+msgstr "Este sitio funciona con WordPress %1$s y PHP %2$s."
+
+msgid "Too many refreshes. Please wait a minute before refreshing again."
+msgstr "Demasiadas actualizaciones. Espera un minuto antes de volver a actualizar."
+
+msgid "Type"
+msgstr "Tipo"
+
+msgid "Up to date"
+msgstr "Actualizado"
+
+msgid "Update"
+msgstr "Actualizar"
+
+msgid "Update available (v%1$s → v%2$s)"
+msgstr "Actualización disponible (v%1$s → v%2$s)"
+
+msgid "Visit website"
+msgstr "Visitar el sitio web"
+
+msgid "You do not have sufficient permissions to access this page."
+msgstr "No tienes permisos suficientes para acceder a esta página."
+
+msgid "Your server runs PHP"
+msgstr "Tu servidor funciona con PHP"
+
+msgid "Your site runs WordPress"
+msgstr "Tu sitio funciona con WordPress"
diff --git a/languages/robotstxt-manager.pot b/languages/robotstxt-manager.pot
index fb4c7cb..228e099 100644
--- a/languages/robotstxt-manager.pot
+++ b/languages/robotstxt-manager.pot
@@ -2,275 +2,233 @@
 # This file is distributed under the GPL-3.0-or-later.
 msgid ""
 msgstr ""
-"Project-Id-Version: Manager (by ROBOTSTXT) 0.1.3\n"
+"Project-Id-Version: Manager (by ROBOTSTXT) 0.6.0\n"
 "Report-Msgid-Bugs-To: https://wordpress.org/support/plugin/robotstxt-manager\n"
 "Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
 "Language-Team: LANGUAGE <LL@li.org>\n"
 "MIME-Version: 1.0\n"
 "Content-Type: text/plain; charset=UTF-8\n"
 "Content-Transfer-Encoding: 8bit\n"
-"POT-Creation-Date: 2026-08-12T14:17:17+00:00\n"
+"POT-Creation-Date: 2026-08-15T12:00:00+00:00\n"
 "PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
-"X-Generator: WP-CLI 2.12.0\n"
+"X-Generator: manual\n"
 "X-Domain: robotstxt-manager\n"
 
-#. Plugin Name of the plugin
-#: robotstxt-manager.php
-msgid "Manager (by ROBOTSTXT)"
+msgid "%d plugin in the catalog is not compatible with this site's WordPress or PHP version."
 msgstr ""
 
-#. Plugin URI of the plugin
-#: robotstxt-manager.php
-msgid "https://git.robotstxt.es/ROBOTSTXT/robotstxt-manager"
+msgid "%s activated."
 msgstr ""
 
-#. Description of the plugin
-#: robotstxt-manager.php
-msgid "Client-side dashboard for the ROBOTSTXT plugin ecosystem. Lists the catalog from a remote Plugins Core install, resolves local install/update state, and surfaces subscription health. Phase 1: read-only catalog view."
+msgid "%s installed. Activate it from the list below."
 msgstr ""
 
-#. Author of the plugin
-#: robotstxt-manager.php
-#: admin/class-robotstxt-manager-admin.php:48
-msgid "ROBOTSTXT"
+msgid "%s updated."
 msgstr ""
 
-#. Author URI of the plugin
-#: robotstxt-manager.php
-msgid "https://www.robotstxt.es/"
+msgid "(about %s)"
 msgstr ""
 
-#: admin/class-robotstxt-manager-admin.php:47
-#: admin/views/page-catalog.php:40
-msgid "Manager (by ROBOTSTXT) — Plugins"
-msgstr ""
-
-#: admin/class-robotstxt-manager-admin.php:64
-#: admin/class-robotstxt-manager-settings.php:207
-msgid "You do not have sufficient permissions to access this page."
-msgstr ""
-
-#: admin/class-robotstxt-manager-admin.php:83
-#: admin/class-robotstxt-manager-settings.php:364
-#: admin/class-robotstxt-manager-settings.php:390
-msgid "Insufficient permissions."
-msgstr ""
-
-#: admin/class-robotstxt-manager-settings.php:59
-#: admin/views/page-settings.php:13
-msgid "Manager (by ROBOTSTXT) — Settings"
-msgstr ""
-
-#: admin/class-robotstxt-manager-settings.php:60
-msgid "Settings"
-msgstr ""
-
-#: admin/class-robotstxt-manager-settings.php:75
-msgid "Connection"
-msgstr ""
-
-#: admin/class-robotstxt-manager-settings.php:92
-msgid "Store URL"
-msgstr ""
-
-#: admin/class-robotstxt-manager-settings.php:110
-msgid "API Key"
-msgstr ""
-
-#: admin/class-robotstxt-manager-settings.php:118
-msgid "Cache"
-msgstr ""
-
-#: admin/class-robotstxt-manager-settings.php:135
-msgid "Catalog Cache (minutes)"
-msgstr ""
-
-#: admin/class-robotstxt-manager-settings.php:153
-msgid "Data on Uninstall"
-msgstr ""
-
-#: admin/class-robotstxt-manager-settings.php:188
-msgid "Testing…"
-msgstr ""
-
-#: admin/class-robotstxt-manager-settings.php:189
-#: admin/class-robotstxt-manager-settings.php:274
-msgid "Test connection"
-msgstr ""
-
-#: admin/class-robotstxt-manager-settings.php:190
-msgid "Deleting…"
-msgstr ""
-
-#: admin/class-robotstxt-manager-settings.php:191
-#: admin/class-robotstxt-manager-settings.php:278
-msgid "Delete API key"
-msgstr ""
-
-#: admin/class-robotstxt-manager-settings.php:192
-msgid "Delete the stored API key? The catalog and subscription data will stop working until a new key is entered."
-msgstr ""
-
-#: admin/class-robotstxt-manager-settings.php:193
-#: admin/class-robotstxt-manager-settings.php:398
-msgid "API key deleted. Save changes to persist."
-msgstr ""
-
-#: admin/class-robotstxt-manager-settings.php:194
-msgid "An unexpected error occurred."
-msgstr ""
-
-#: admin/class-robotstxt-manager-settings.php:226
-msgid "Base URL of the remote Plugins Core installation that this site will pull the plugin catalog from."
-msgstr ""
-
-#. translators: %s: last 4 characters of the stored API key.
-#: admin/class-robotstxt-manager-settings.php:257
-#, php-format
 msgid "A key is stored (last 4 characters: <code>%s</code>). Leave blank to keep the existing key; enter a new value to replace it."
 msgstr ""
 
-#: admin/class-robotstxt-manager-settings.php:262
 msgid "A key is stored but could not be decoded. You can replace it by entering a new value above, or delete it with the button below."
 msgstr ""
 
-#: admin/class-robotstxt-manager-settings.php:266
-msgid "Account-level API key issued by the ROBOTSTXT store. Required to authenticate catalog and subscription requests. The value is encrypted before storage."
+msgid "API Key"
 msgstr ""
 
-#: admin/class-robotstxt-manager-settings.php:298
-msgid "How long the catalog response from Core is cached in a transient. Default: 60 minutes. Lower values refresh more often at the cost of more requests to Core. Maximum: 1440 (24 hours)."
+msgid "API key deleted. Save changes to persist."
 msgstr ""
 
-#: admin/class-robotstxt-manager-settings.php:313
-msgid "Delete all plugin data when the plugin is uninstalled."
-msgstr ""
-
-#: admin/views/page-catalog.php:43
-msgid "Catalog refreshed."
-msgstr ""
-
-#. translators: %s: settings URL.
-#: admin/views/page-catalog.php:53
-#, php-format
-msgid "ROBOTSTXT Manager is not configured yet. <a href=\"%s\">Set the Store URL and API key</a> to see your plugin catalog."
-msgstr ""
-
-#: admin/views/page-catalog.php:63
-msgid "No plugins were returned by the ROBOTSTXT store. Check the Store URL and API key on the Settings page, or click Refresh to try again."
-msgstr ""
-
-#: admin/views/page-catalog.php:66
-#: admin/views/page-catalog.php:69
-msgid "Refresh catalog"
-msgstr ""
-
-#: admin/views/page-catalog.php:75
-msgid "Plugin"
-msgstr ""
-
-#: admin/views/page-catalog.php:76
-msgid "Type"
-msgstr ""
-
-#: admin/views/page-catalog.php:77
-msgid "Price"
-msgstr ""
-
-#: admin/views/page-catalog.php:78
-msgid "Requires WP"
-msgstr ""
-
-#: admin/views/page-catalog.php:79
-msgid "Requires PHP"
-msgstr ""
-
-#: admin/views/page-catalog.php:80
-msgid "Local state"
-msgstr ""
-
-#: admin/views/page-catalog.php:81
-msgid "Action"
-msgstr ""
-
-#: admin/views/page-catalog.php:135
-msgid "Premium"
-msgstr ""
-
-#: admin/views/page-catalog.php:135
-msgid "Free"
-msgstr ""
-
-#: admin/views/page-catalog.php:150
-msgid "Your site runs WordPress"
-msgstr ""
-
-#: admin/views/page-catalog.php:162
-msgid "Your server runs PHP"
-msgstr ""
-
-#: admin/views/page-catalog.php:172
-msgid "Not installed"
-msgstr ""
-
-#: admin/views/page-catalog.php:174
-msgid "Installed (inactive)"
-msgstr ""
-
-#. translators: 1: installed version, 2: available version.
-#: admin/views/page-catalog.php:179
-#, php-format
-msgid "Update available (v%1$s → v%2$s)"
-msgstr ""
-
-#: admin/views/page-catalog.php:185
-msgid "Up to date"
-msgstr ""
-
-#: admin/views/page-catalog.php:192
-msgid "Incompatible"
-msgstr ""
-
-#: admin/views/page-catalog.php:194
-msgid "Buy"
-msgstr ""
-
-#: admin/views/page-catalog.php:196
-msgid "Install (soon)"
-msgstr ""
-
-#: admin/views/page-catalog.php:199
-msgid "Update (soon)"
-msgstr ""
-
-#. translators: %d: number of incompatible plugins.
-#: admin/views/page-catalog.php:214
-#, php-format
-msgid "%d plugin in the catalog is not compatible with this site's WordPress or PHP version."
-msgid_plural "%d plugins in the catalog are not compatible with this site's WordPress or PHP version."
-msgstr[0] ""
-msgstr[1] ""
-
-#. translators: 1: local WP version, 2: local PHP version.
-#: admin/views/page-catalog.php:223
-#, php-format
-msgid "This site runs WordPress %1$s on PHP %2$s."
-msgstr ""
-
-#: includes/class-robotstxt-manager-core-client.php:128
-msgid "Store URL is not configured."
-msgstr ""
-
-#: includes/class-robotstxt-manager-core-client.php:135
 msgid "API key is not configured."
 msgstr ""
 
-#. translators: %s: HTTP transport error message.
-#: includes/class-robotstxt-manager-core-client.php:145
-#, php-format
+msgid "Account-level API key issued by the ROBOTSTXT store. Required to authenticate catalog and subscription requests. The value is encrypted before storage."
+msgstr ""
+
+msgid "Action"
+msgstr ""
+
+msgid "Activate"
+msgstr ""
+
+msgid "An unexpected error occurred."
+msgstr ""
+
+msgid "Base URL of the remote Plugins Core installation that this site will pull the plugin catalog from."
+msgstr ""
+
+msgid "Buy"
+msgstr ""
+
+msgid "Cache"
+msgstr ""
+
+msgid "Catalog Cache (minutes)"
+msgstr ""
+
+msgid "Catalog refreshed."
+msgstr ""
+
+msgid "Connected."
+msgstr ""
+
+msgid "Connection"
+msgstr ""
+
+msgid "Could not create a temporary file for download."
+msgstr ""
+
 msgid "Could not reach Plugins Core: %s"
 msgstr ""
 
-#: includes/class-robotstxt-manager-core-client.php:154
-msgid "Connected."
+msgid "Data on Uninstall"
+msgstr ""
+
+msgid "Delete API key"
+msgstr ""
+
+msgid "Delete all plugin data when the plugin is uninstalled."
+msgstr ""
+
+msgid "Delete the stored API key? The catalog and subscription data will stop working until a new key is entered."
+msgstr ""
+
+msgid "Deleting…"
+msgstr ""
+
+msgid "Download failed (HTTP %d)."
+msgstr ""
+
+msgid "Download failed: %s"
+msgstr ""
+
+msgid "Free"
+msgstr ""
+
+msgid "How long the catalog response from Core is cached in a transient. Default: 60 minutes. Lower values refresh more often at the cost of more requests to Core. Maximum: 1440 (24 hours)."
+msgstr ""
+
+msgid "Incompatible"
+msgstr ""
+
+msgid "Install"
+msgstr ""
+
+msgid "Installation failed."
+msgstr ""
+
+msgid "Installation failed: %s"
+msgstr ""
+
+msgid "Installed (inactive)"
+msgstr ""
+
+msgid "Insufficient permissions."
+msgstr ""
+
+msgid "Local state"
+msgstr ""
+
+msgid "Manager (by ROBOTSTXT) — Plugins"
+msgstr ""
+
+msgid "Manager (by ROBOTSTXT) — Settings"
+msgstr ""
+
+msgid "No plugins were returned by the ROBOTSTXT store. Check the Store URL and API key on the Settings page, or click Refresh to try again."
+msgstr ""
+
+msgid "Not installed"
+msgstr ""
+
+msgid "Plugin"
+msgstr ""
+
+msgid "Plugin is not installed."
+msgstr ""
+
+msgid "Plugin not found in catalog."
+msgstr ""
+
+msgid "Premium"
+msgstr ""
+
+msgid "Price"
+msgstr ""
+
+msgid "ROBOTSTXT"
+msgstr ""
+
+msgid "ROBOTSTXT Manager is not configured yet. <a href=\"%s\">Set the Store URL and API key</a> to see your plugin catalog."
+msgstr ""
+
+msgid "Refresh catalog"
+msgstr ""
+
+msgid "Requires PHP"
+msgstr ""
+
+msgid "Requires WP"
+msgstr ""
+
+msgid "Settings"
+msgstr ""
+
+msgid "Show more information"
+msgstr ""
+
+msgid "Store URL"
+msgstr ""
+
+msgid "Store URL is not configured."
+msgstr ""
+
+msgid "Store is not configured."
+msgstr ""
+
+msgid "Test connection"
+msgstr ""
+
+msgid "Testing…"
+msgstr ""
+
+msgid "The API key format is invalid. Copy the full key from your ROBOTSTXT account page."
+msgstr ""
+
+msgid "The store responded with HTTP %d. Check the Store URL and API key."
+msgstr ""
+
+msgid "The store returned an invalid file."
+msgstr ""
+
+msgid "This site runs WordPress %1$s on PHP %2$s."
+msgstr ""
+
+msgid "Too many refreshes. Please wait a minute before refreshing again."
+msgstr ""
+
+msgid "Type"
+msgstr ""
+
+msgid "Up to date"
+msgstr ""
+
+msgid "Update"
+msgstr ""
+
+msgid "Update available (v%1$s → v%2$s)"
+msgstr ""
+
+msgid "Visit website"
+msgstr ""
+
+msgid "You do not have sufficient permissions to access this page."
+msgstr ""
+
+msgid "Your server runs PHP"
+msgstr ""
+
+msgid "Your site runs WordPress"
 msgstr ""
diff --git a/readme.txt b/readme.txt
index c89c1b7..2bddf5f 100644
--- a/readme.txt
+++ b/readme.txt
@@ -3,9 +3,9 @@ Contributors: javiercasares, robotstxt
 Tags: dashboard, catalog, updates, subscriptions, management
 Requires at least: 4.4
 Tested up to: 7.1
-Stable tag: 0.5.3
+Stable tag: 0.6.0
 Requires PHP: 8.0
-Version: 0.5.3
+Version: 0.6.0
 License: GPL-3.0-or-later
 License URI: https://www.gnu.org/licenses/gpl-3.0.txt
 
@@ -89,6 +89,13 @@ Encrypted at rest using AES-256-CBC with a key derived from your site's WordPres
 
 == Changelog ==
 
+= 0.6.0 =
+
+_Release date: 2026-08-15_
+
+* Spanish (es_ES) and Catalan (ca) translations for all admin strings (73 msgids, POT regenerated).
+* "Refresh catalog" rate-limited to 6 per minute per user.
+
 = 0.5.3 =
 
 _Release date: 2026-08-15_
diff --git a/robotstxt-manager.php b/robotstxt-manager.php
index c07cb03..5ba69e3 100644
--- a/robotstxt-manager.php
+++ b/robotstxt-manager.php
@@ -3,7 +3,7 @@
  * Plugin Name:       Manager (by ROBOTSTXT)
  * Plugin URI:        https://git.robotstxt.es/ROBOTSTXT/robotstxt-manager
  * Description:       Client-side dashboard for the ROBOTSTXT plugin ecosystem. Lists the catalog from a remote Plugins Core install, resolves local install/update state, and installs, activates, and updates plugins directly from the store.
- * Version:           0.5.3
+ * Version:           0.6.0
  * Requires at least: 4.4
  * Requires PHP:      8.0
  * Author:            ROBOTSTXT
@@ -21,7 +21,7 @@ if ( ! defined( 'ABSPATH' ) ) {
 }
 
 /** Plugin version. */
-define( 'ROBOTSTXT_MANAGER_VERSION', '0.5.3' );
+define( 'ROBOTSTXT_MANAGER_VERSION', '0.6.0' );
 
 /** Absolute path to the plugin directory, with trailing slash. */
 define( 'ROBOTSTXT_MANAGER_DIR', plugin_dir_path( __FILE__ ) );

From e7a4a45a7410aa7c4cbc2e1368964e7198cc48ba Mon Sep 17 00:00:00 2001
From: Javier Casares <javier@robotstxt.es>
Date: Mon, 17 Aug 2026 16:01:48 +0000
Subject: [PATCH 09/23] v1.0.0

---
 admin/views/page-catalog.php         | 121 ++++++++++++++-------------
 changelog.txt                        |  17 ++++
 languages/robotstxt-manager-ca.mo    | Bin 7841 -> 9816 bytes
 languages/robotstxt-manager-ca.po    |  32 +++++--
 languages/robotstxt-manager-es_ES.mo | Bin 7844 -> 9783 bytes
 languages/robotstxt-manager-es_ES.po |  32 +++++--
 languages/robotstxt-manager.pot      |  32 +++++--
 readme.txt                           |  21 +++--
 robotstxt-manager.php                |   4 +-
 9 files changed, 170 insertions(+), 89 deletions(-)

diff --git a/admin/views/page-catalog.php b/admin/views/page-catalog.php
index 366e5ed..d419227 100644
--- a/admin/views/page-catalog.php
+++ b/admin/views/page-catalog.php
@@ -2,10 +2,10 @@
 /**
  * Admin page view: ROBOTSTXT Plugins catalog.
  *
- * Available variables:
- *   $catalog  list<array<string,mixed>>  Catalog entries from Core.
- *   $local    array<string, array{installed:bool, active:bool, version:string}>
- *                                       Local install state, keyed by slug.
+ * Catalog table (Plugin · Version · Requires WP · Requires PHP · Price ·
+ * Action · Status) with an always-open detail row under each plugin
+ * (website link + description), an intro paragraph, and Support /
+ * Payments sections below the table.
  *
  * @package Robotstxt_Manager
  */
@@ -57,6 +57,10 @@ $compat_warnings   = 0;
 <div class="wrap">
 	<h1><?php esc_html_e( 'Manager (by ROBOTSTXT) — Plugins', 'robotstxt-manager' ); ?></h1>
 
+	<p class="description">
+		<?php esc_html_e( 'This is the ROBOTSTXT plugin store: the catalog of plugins published by ROBOTSTXT, installable and updatable straight from your own wp-admin. Free plugins install with one click; premium plugins require an annual subscription that you purchase on our website.', 'robotstxt-manager' ); ?>
+	</p>
+
 	<?php if ( $refreshed ) : ?>
 		<div class="notice notice-success is-dismissible"><p><?php esc_html_e( 'Catalog refreshed.', 'robotstxt-manager' ); ?></p></div>
 	<?php endif; ?>
@@ -95,12 +99,12 @@ $compat_warnings   = 0;
 			<thead>
 				<tr>
 					<th scope="col"><?php esc_html_e( 'Plugin', 'robotstxt-manager' ); ?></th>
-					<th scope="col"><?php esc_html_e( 'Type', 'robotstxt-manager' ); ?></th>
-					<th scope="col"><?php esc_html_e( 'Price', 'robotstxt-manager' ); ?></th>
+					<th scope="col"><?php esc_html_e( 'Version', 'robotstxt-manager' ); ?></th>
 					<th scope="col"><?php esc_html_e( 'Requires WP', 'robotstxt-manager' ); ?></th>
 					<th scope="col"><?php esc_html_e( 'Requires PHP', 'robotstxt-manager' ); ?></th>
-					<th scope="col"><?php esc_html_e( 'Local state', 'robotstxt-manager' ); ?></th>
+					<th scope="col"><?php esc_html_e( 'Price', 'robotstxt-manager' ); ?></th>
 					<th scope="col"><?php esc_html_e( 'Action', 'robotstxt-manager' ); ?></th>
+					<th scope="col"><?php esc_html_e( 'Status', 'robotstxt-manager' ); ?></th>
 				</tr>
 			</thead>
 			<tbody>
@@ -129,8 +133,7 @@ $compat_warnings   = 0;
 					$req_php  = is_string( $raw_rphp ) ? $raw_rphp : '';
 
 					$website_url = '' !== $page_url ? $page_url : $homepage;
-					$expandable  = ( '' !== $desc || '' !== $website_url );
-					$toggle_id   = 'robotstxt-manager-toggle-' . esc_attr( $slug );
+					$has_detail  = ( '' !== $website_url || '' !== $desc );
 
 					// Compatibility checks.
 					$wp_ok  = '' === $req_wp || version_compare( $local_wp_version, $req_wp, '>=' );
@@ -157,25 +160,9 @@ $compat_warnings   = 0;
 					?>
 					<tr class="<?php echo esc_attr( ltrim( $row_class ) ); ?>">
 						<td class="robotstxt-manager-name-cell">
-							<?php if ( $expandable ) : ?>
-								<input type="checkbox" class="robotstxt-manager-toggle" id="<?php echo esc_attr( $toggle_id ); ?>" aria-label="<?php esc_attr_e( 'Show more information', 'robotstxt-manager' ); ?>" />
-								<label class="robotstxt-manager-toggle-label" for="<?php echo esc_attr( $toggle_id ); ?>"><span class="robotstxt-manager-toggle-arrow"></span></label>
-							<?php endif; ?>
 							<strong><?php echo esc_html( $name ); ?></strong>
-							<?php if ( '' !== $remote_v ) : ?>
-								<br /><span class="description"><?php echo esc_html( sprintf( 'v%s', $remote_v ) ); ?></span>
-							<?php endif; ?>
-						</td>
-						<td><?php echo esc_html( 'premium' === $kind ? __( 'Premium', 'robotstxt-manager' ) : __( 'Free', 'robotstxt-manager' ) ); ?></td>
-						<td>
-							<?php
-							if ( $cost > 0.0 ) {
-								echo esc_html( sprintf( '€%s / year', number_format_i18n( $cost, 0 ) ) );
-							} else {
-								echo '&mdash;';
-							}
-							?>
 						</td>
+						<td><?php echo '' !== $remote_v ? esc_html( $remote_v ) : '&mdash;'; ?></td>
 						<td>
 							<?php if ( '' !== $req_wp ) : ?>
 								<span class="<?php echo $wp_ok ? 'robotstxt-manager-compat--ok' : 'robotstxt-manager-compat--fail'; ?>">
@@ -200,6 +187,40 @@ $compat_warnings   = 0;
 								&mdash;
 							<?php endif; ?>
 						</td>
+						<td>
+							<?php
+							if ( $cost > 0.0 || 'premium' === $kind ) {
+								echo esc_html(
+									sprintf(
+										/* translators: %s: formatted price number. */
+										__( '€%s / year', 'robotstxt-manager' ),
+										number_format_i18n( $cost, 0 )
+									)
+								);
+							} else {
+								echo esc_html__( 'Free', 'robotstxt-manager' );
+							}
+							?>
+						</td>
+						<td>
+							<?php if ( ! $l_installed ) : ?>
+								<?php if ( ! $wp_ok || ! $php_ok ) : ?>
+									<span class="description"><?php esc_html_e( 'Incompatible', 'robotstxt-manager' ); ?></span>
+								<?php else : ?>
+									<?php if ( $cost > 0.0 && '' !== $page_url ) : ?>
+										<a class="button button-secondary" href="<?php echo esc_url( $page_url ); ?>" target="_blank" rel="noopener noreferrer"><?php esc_html_e( 'Buy', 'robotstxt-manager' ); ?></a>
+									<?php endif; ?>
+									<?php
+									$install_class = ( $cost > 0.0 && '' !== $page_url ) ? 'button-secondary' : 'button-primary';
+									?>
+									<a class="button <?php echo esc_attr( $install_class ); ?>" href="<?php echo esc_url( Robotstxt_Manager_Admin::action_url( 'install', $slug ) ); ?>"><?php esc_html_e( 'Install', 'robotstxt-manager' ); ?></a>
+								<?php endif; ?>
+							<?php elseif ( ! $l_active ) : ?>
+								<a class="button button-primary" href="<?php echo esc_url( Robotstxt_Manager_Admin::action_url( 'activate', $slug ) ); ?>"><?php esc_html_e( 'Activate', 'robotstxt-manager' ); ?></a>
+							<?php elseif ( $update_available ) : ?>
+								<a class="button button-secondary" href="<?php echo esc_url( Robotstxt_Manager_Admin::action_url( 'update', $slug ) ); ?>"><?php esc_html_e( 'Update', 'robotstxt-manager' ); ?></a>
+							<?php endif; ?>
+						</td>
 						<td>
 							<?php
 							if ( ! $l_installed ) {
@@ -220,35 +241,16 @@ $compat_warnings   = 0;
 							}
 							?>
 						</td>
-					<td>
-						<?php if ( ! $l_installed ) : ?>
-							<?php if ( ! $wp_ok || ! $php_ok ) : ?>
-								<span class="description"><?php esc_html_e( 'Incompatible', 'robotstxt-manager' ); ?></span>
-							<?php else : ?>
-								<?php if ( $cost > 0.0 && '' !== $page_url ) : ?>
-									<a class="button button-secondary" href="<?php echo esc_url( $page_url ); ?>" target="_blank" rel="noopener noreferrer"><?php esc_html_e( 'Buy', 'robotstxt-manager' ); ?></a>
-								<?php endif; ?>
-								<?php
-								$install_class = ( $cost > 0.0 && '' !== $page_url ) ? 'button-secondary' : 'button-primary';
-								?>
-								<a class="button <?php echo esc_attr( $install_class ); ?>" href="<?php echo esc_url( Robotstxt_Manager_Admin::action_url( 'install', $slug ) ); ?>"><?php esc_html_e( 'Install', 'robotstxt-manager' ); ?></a>
-							<?php endif; ?>
-						<?php elseif ( ! $l_active ) : ?>
-							<a class="button button-primary" href="<?php echo esc_url( Robotstxt_Manager_Admin::action_url( 'activate', $slug ) ); ?>"><?php esc_html_e( 'Activate', 'robotstxt-manager' ); ?></a>
-						<?php elseif ( $update_available ) : ?>
-							<a class="button button-secondary" href="<?php echo esc_url( Robotstxt_Manager_Admin::action_url( 'update', $slug ) ); ?>"><?php esc_html_e( 'Update', 'robotstxt-manager' ); ?></a>
-						<?php endif; ?>
-					</td>
 					</tr>
-					<?php if ( $expandable ) : ?>
+					<?php if ( $has_detail ) : ?>
 					<tr class="robotstxt-manager-detail-row">
 						<td colspan="7">
-							<?php if ( '' !== $desc ) : ?>
-								<p class="robotstxt-manager-detail-description"><?php echo esc_html( $desc ); ?></p>
-							<?php endif; ?>
 							<?php if ( '' !== $website_url ) : ?>
 								<a href="<?php echo esc_url( $website_url ); ?>" target="_blank" rel="noopener noreferrer"><?php esc_html_e( 'Visit website', 'robotstxt-manager' ); ?> <span class="screen-reader-text"><?php echo esc_html( sprintf( /* translators: %s: plugin name. */ __( '(about %s)', 'robotstxt-manager' ), $name ) ); ?></span></a>
 							<?php endif; ?>
+							<?php if ( '' !== $desc ) : ?>
+								<span class="robotstxt-manager-detail-description"><?php echo esc_html( $desc ); ?></span>
+							<?php endif; ?>
 						</td>
 					</tr>
 					<?php endif; ?>
@@ -256,6 +258,16 @@ $compat_warnings   = 0;
 			</tbody>
 		</table>
 
+		<h2><?php esc_html_e( 'Support', 'robotstxt-manager' ); ?></h2>
+		<p class="description">
+			<?php esc_html_e( 'Need help with a ROBOTSTXT plugin? Visit the plugin\'s website (the link in its row above) for documentation and guides, or contact us through our website — we are happy to help.', 'robotstxt-manager' ); ?>
+		</p>
+
+		<h2><?php esc_html_e( 'Payments, and how it works', 'robotstxt-manager' ); ?></h2>
+		<p class="description">
+			<?php esc_html_e( 'Free plugins install instantly at no cost. Premium plugins are annual subscriptions: you pay once on our website and the subscription renews automatically every year until you cancel. You can cancel at any time from your ROBOTSTXT account page — access keeps working until the end of the paid period. All payments are processed securely by Mollie; we never see or store your card details.', 'robotstxt-manager' ); ?>
+		</p>
+
 		<?php if ( $compat_warnings > 0 ) : ?>
 			<div class="notice notice-warning inline" style="margin-top:1em">
 				<p>
@@ -290,12 +302,7 @@ $compat_warnings   = 0;
 .robotstxt-manager-compat-warning { cursor: help; }
 .robotstxt-manager-row--incompatible { background-color: #fef7f0 !important; }
 
-/* Expandable detail rows (CSS-only toggle). */
-.robotstxt-manager-toggle { display: none; }
-.robotstxt-manager-toggle-label { cursor: pointer; display: inline-block; width: 1.4em; }
-.robotstxt-manager-toggle-arrow::before { content: "\25B8"; /* ▸ */ }
-.robotstxt-manager-detail-row { display: none; }
-.robotstxt-manager-detail-row td { border-top: none !important; }
-tr:has(.robotstxt-manager-toggle:checked) + tr.robotstxt-manager-detail-row { display: table-row; }
-tr:has(.robotstxt-manager-toggle:checked) .robotstxt-manager-toggle-arrow::before { content: "\25BE"; /* ▾ */ }
+/* Detail rows (always open): muted, attached to the row above. */
+.robotstxt-manager-detail-row td { border-top: none !important; padding-top: 0; }
+.robotstxt-manager-detail-description { color: #50575e; }
 </style>
diff --git a/changelog.txt b/changelog.txt
index 32683dc..56d6dfd 100644
--- a/changelog.txt
+++ b/changelog.txt
@@ -1,5 +1,22 @@
 == Changelog ==
 
+= 1.0.0 =
+
+_Release date: 2026-08-15_
+
+**Highlights**
+
+* Catalog page redesign. The table columns are now Plugin · Version · Requires WP · Requires PHP · Price · Action · Status: the Type column is merged into Price ("Free" for cost-0 plugins, the annual price for premium), the version moved into its own column, the action buttons sit before the status, and "Local state" is renamed "Status". Each plugin's detail row — website link first, then its description — is now **always open** (the click-to-expand toggle is gone). An intro paragraph after the page title explains the store, and Support + Payments sections below the table describe how to get help and how the annual-subscription model works (automatic renewal, cancellation from the account page, Mollie processing).
+
+**Changed**
+
+* Plugin version 0.6.0 → 1.0.0 — first stable release. No database schema changes (no custom tables).
+
+**Compatibility**
+
+* WordPress: 4.4 - 7.1 (scan-verified: wp-compat clean from 4.4)
+* PHP: 8.0 - 8.5 (scan-verified: PHPCompatibility + manual feature audit)
+
 = 0.6.0 =
 
 _Release date: 2026-08-15_
diff --git a/languages/robotstxt-manager-ca.mo b/languages/robotstxt-manager-ca.mo
index 71cdb38b41d0c2db01e141e92caa6638930ecc57..20a059df8c8f3021abd939b05a2d0d291045be66 100644
GIT binary patch
delta 3757
zcmZvdYm8l06~}ieoig+_)KWS_ADikp4`yx);?&MqnW=3NZ3oh6uq1@I@40*KJ<Pf1
zoSw&wmtc+&#E?k9oT`Du28l!(MH_EWLgkBt=m*3YKlrFoBvwPBAB>ML@WJ0Y=iZ@E
zcV^$;-gE9*d#(RkYu|4k`0df`kDIUjs$$GCw==(dg;ERf?JN0UJlmtxbMP$O06)D}
zsS31k9Xt)MhEKr<;CEmKhp$qKrFs^Qz;kc_{vLiE{s&?*Q;+s4#af+)JK#596`qHy
z;ZCftfxF>#a2Rfe(~v(k*WtZz4|^AC_yoKLz6dwMSK$P_0PlmF@qV4S`Z*Tj*(30M
z@LN!Ve*r$cN~xFN57{3g{PplHD3M)-)h)0OierPF{Q=m|{y5wXJ@|h37;M8f{35Jx
zLQ#?GA1uUyw;+<Jt$j*ugFB$4WCDr;a}ZI~-7tm@<Q4TBD31LN;;Z^M6h$R`vDXXb
zy*?=R2B6sA2Q!J}P8MS5Bt#w6fX87B55iZVM9_=wt5IYej<UZAxn|%!P~JNO<-oI0
zB0mSk{;#3b&ILFH--M#v;1={3PbS$(1at5q4)_fGG5d?xmJvO@RjHfVe-DbIe};14
zKjCTkHhdI*g*-^)yD<6@I1F!q20jlTgyP_S@*|w?M}PUkZTzDST__&^3W`I&gA&PK
zA-<?y@+1fEf+FcCl!I=8W3UOO7M_FzseS<W!&l&AP+ea}{y5yp_L+=@yznv<&;J15
zM1hO&b@socCB%_)d|M8F3Gzt&9EyRz@F9+^-bLNOekcy_g&%}-@bB<`cm~#W*$q8J
zO-w4gmW4>M2l5>?0i_M^g3<*Elt^3farhvVgSK#r<n%@;4(^9id`F-Z>v2dOs*`X8
zx=`%rP|j;Z$|zGWmJ9U@*yO?M@KbP>iW`Mb!o91M`YHSn`~QAGsl#w|uskq?qRa#E
zM))NtDQrUyQ0L(!d<|;Yi!2<WM&Z@c|HoKhzZi0`42kfgOv&9rrbKv@DdQHV7?!b`
zc}1}*qwXvVC62NABy*N2De4Z6D~6=Ihx3bDOR8G(@iC^zFFBTRD|3penKv<|R=Pu?
zmg18!&6Ez2fl$Q|HHMkDGl!UTaWN+Nl+?&wkbRhs!_0B!A*KwGS%&0oA5-K+y<*IC
z$R$>cu?_`vt-7tV|3rrsD0x4^By&a4N;*2@=A!*1&r(d%GJBaHXVR)g0ZOi99AMH#
zs<(ZtXWN?WNMx-Jy|nK7v1TU5^Gf=O*U~1@exRKoPAdA&$Tr=yx$<ojS#5kjHJ*;s
zYV1UAn7Dx-PwG~X>d>@w;5(KN9i)+7venp4<c*q68n*MwT=|ZUtZ$cMZPFxYn#6VR
zqNVMkjas^8O{7ylalOK>V=(Gf^xd4nS|)pO)c7r(xJ{e)ZMq@TZ+!l=HjZQCST9%`
z#(F7;7F@sHF(ocoTnXk2Z$jhNbZ8?ts8#d~65xK*`Ux%(Wf%ow$kudhoiwueR&D8H
zf#<n)ipaDtuJVv*K@vn;tT-FtT~yOGn;6%NEA864kyZI?{oC`O_3zH+Y?9zltY$5S
z8`cZ;lAAQN(Z}yNc*lvk6DLn}q`p<(<)U5bXpyQR!s+NaERlGwzd+Wsi^EZ{q)jzg
zv?F>RZ)$;)N+hUCCPe*u>eg(0U`%{<0-iXDPGhV`L0WITD_J5U;fV$f6Ncy;6rNV{
zKdt{-e@CLR!fJzK@ljNc^LWE_etyIAYdAHH^M^Lhtes24Fo=@;<&76IR}Qn6g;@w^
zCyQr}p%8<*q^Db)VOsUvxPew^zar6Cw`fh(D~l@)YrHJGIEjo~ZzOs?3Yuj;f+b&P
zOX0YwHC?}=|8MmdSqOZq9nW<ZrpW%g>prrlQn#pm0>7;Mai3Z&Iv|alhKb+X0hRoT
zO@6+<Z=%OWF*(Vn`&#SY_`-JwW4)&+_Vx>X53kJ*d+|!>^#~o8zfW@Gp|VGR@*~fZ
zP3@I?KhZAb=W|%utCzmr^*>&2`zxL5NT=dI-AluUrk>iE)-Za})=kamjIQ=+d*bxG
zz>#v}2+v$%V7aY%ht3TaP1(82Pf6=awNdyOk&c{~i{(^`8Pn-ivdCo;5KY;;#A2dx
z9uv_i@y9L(-df!Z#8Cds_DVKIob>YYSp=|n>V8(wr@n+>II1`ScOjoOE(02Q`MID*
z<C?nR<~kvVSrL?d+1ACbY-__ix@mkH5gq11x3y8gc*(wqIGe_mt8me}wyAxWcVZSE
zPils>*dT<&qD5k&IxSymAJ|sy_Io9pwQ`4W1tR->si@PeqIf6C^8QLucN!i=ym!<u
z0xP;-4|_w__dK)wZ7Biqnp5XpR#>Uw@rX!(uiRDgT<(CZxC9(`xh;9b39bPfa|v|s
zfYPBdVhNZyBC{x(%gOJlg-KFRm?&U<vPhrvwV@)eXgskMb=2r;kht}g+br)HIJ2!Q
zKV8eQ&6O<XPY>Ll|7+mFn!{L4@{8Bs)5C?qebJuYzIoNK(c%VybW9Ru_g1)6w#odO
zt=DC`xG1<lNH-#^h}yj=q};e2__gErA)(&f<o@y>HM-hK%K9x+>XA@>%Az22^*gu5
zrOkC&Yi3@jH_PnG9WqtcUgt-)+m3RL*oa!D?4|L#zoA8nipDJ321ijUq$n@%$cmc5
lMx2yIQno~X?~X?P>W)Lj?Xuj?H}1^W4aS-aW)JPC{s*Ueds_ei

delta 1822
zcmY+^YiN^K9LMof?PY7MZQ9P(+1e+aQR~#UYFjV8EY5hX%xTA}=rAp58)=L*aVm~w
zQwxJp)SZera8pENUJwb2mcl@>poscLkRe(ShWctS#23Qc_xCh?;UWL$bDo6fT>k&_
z<Z<iirsUJY%wvYOmM9~7Cm0jP;Y=>H4cW$A!Y?ro-{E}B%Q41-jhKt8@jKjvNqmTW
z%!Ut)sls;r7!TlaJc$gIG<6>uL*F!FIR>!<J8>e8U>4rR5`2h-_yRTY+qBu-RCDh|
z2LtHE4xEe$tjB}61BcL~rTW>1R#uBe*oxZxcD#mRoP=duw4*94##+>ZR;KU2!KvKG
zkw?q`R^kc#1c$L7M^TyV;*zaYCFqpmepCqtQ4?K3?feF^N%JSh@ebx=6Wd}evmQ0!
z7E~s?@FR?&p6f@Adl)s(Mbz`RF-aE8BRU&#6qn;de$|S<#X0yZ2Jkj2GdTrgsh@<@
z(3GHdIvrV?3E(pP0+p$sQ4^oSLm6xchq-SqB>!6ZTMD`WbI3n)n5C$Nt;Iq73J35N
zYKMCnbus>kJ{-cU_yo0}U)a7pf%^RvcH>P{X6H;9%iMw~<X<aq;R}8<9jJ--qEdGd
zHPHah#Sv7^|3%hfJlrh73OtOPku{i?I352(KBk=QYvFY`ip{9fRU|nvns6>o!v@rY
zn@|htL*_C+p)&P5YQYz9Cf>*2@HJ9BGssES&d*>4o=3e^cTqckfhyrYs0}7x(>X%t
z9crQ@tU@(Bhg#uP)WkPYJGqaP&-{&5_y#qRj}xZXGLW_nquh7nI(&pWOFmY!5L+>*
z_x}evI^`p%iSD5?@)$qG=cs}6Ny}2KL<hH_GVwifrrc+h0WI=#VmaXu69_exOFLgf
ztR@)N%+UKk-j=01jo3ht5VsV{irPG)*6oe`Tat0N)=DEuc&}-PYO}|1ukP;YEg_Ua
zwV>wLtEM)eP|EcNOe9o>W@5Z43yX+ZglatA0(7d=H}$B4rl#zvsZ2U6s=v-u4e=SF
ztZydVR+m<PnM$)xz1m7b^=%?n5Pm|hsv3vbZL7HI?NB)=vuPo6Q)jbFvr;SaW@mU>
zW1XR1C!Po;!nV4i#h#y>YkTqsZAn3MRyZ2j9km+^t{3;j_Bhd4U)YK4?27e8Ly1Ui
zr_J{UY`ga_TVK?Z*|u+2*q$tEuuqEiq_!9L=cFE#hcY}t4ea!44n|*RyPeCn#<wcd
z9XRfLR<b@8PxOVH=&e8E<70P5Zl&zkm0MFomEH_nGqcQ=`rEVGBD;3SZOk9E!~UcH
E10<rx;{X5v

diff --git a/languages/robotstxt-manager-ca.po b/languages/robotstxt-manager-ca.po
index 36440aa..cd3e9bf 100644
--- a/languages/robotstxt-manager-ca.po
+++ b/languages/robotstxt-manager-ca.po
@@ -129,8 +129,6 @@ msgstr "Instal·lat (inactiu)"
 msgid "Insufficient permissions."
 msgstr "Permisos insuficients."
 
-msgid "Local state"
-msgstr "Estat local"
 
 msgid "Manager (by ROBOTSTXT) — Plugins"
 msgstr "Manager (by ROBOTSTXT) — Plugins"
@@ -153,8 +151,6 @@ msgstr "El plugin no està instal·lat."
 msgid "Plugin not found in catalog."
 msgstr "Plugin no trobat al catàleg."
 
-msgid "Premium"
-msgstr "Premium"
 
 msgid "Price"
 msgstr "Preu"
@@ -177,8 +173,6 @@ msgstr "Requereix WP"
 msgid "Settings"
 msgstr "Paràmetres"
 
-msgid "Show more information"
-msgstr "Mostra més informació"
 
 msgid "Store URL"
 msgstr "URL de la botiga"
@@ -210,8 +204,6 @@ msgstr "Aquest lloc funciona amb WordPress %1$s i PHP %2$s."
 msgid "Too many refreshes. Please wait a minute before refreshing again."
 msgstr "Massa actualitzacions. Espera un minut abans de tornar a actualitzar."
 
-msgid "Type"
-msgstr "Tipus"
 
 msgid "Up to date"
 msgstr "Actualitzat"
@@ -233,3 +225,27 @@ msgstr "El teu servidor funciona amb PHP"
 
 msgid "Your site runs WordPress"
 msgstr "El teu lloc funciona amb WordPress"
+
+msgid "This is the ROBOTSTXT plugin store: the catalog of plugins published by ROBOTSTXT, installable and updatable straight from your own wp-admin. Free plugins install with one click; premium plugins require an annual subscription that you purchase on our website."
+msgstr "Aquesta és la botiga de plugins de ROBOTSTXT: el catàleg de plugins publicats per ROBOTSTXT, instal·lables i actualitzables directament des del teu propi wp-admin. Els plugins gratuïts s'instal·len amb un clic; els plugins premium requereixen una subscripció anual que es compra al nostre lloc web."
+
+msgid "Version"
+msgstr "Versió"
+
+msgid "Status"
+msgstr "Estat"
+
+msgid "€%s / year"
+msgstr "%s €/any"
+
+msgid "Support"
+msgstr "Suport"
+
+msgid "Need help with a ROBOTSTXT plugin? Visit the plugin's website (the link in its row above) for documentation and guides, or contact us through our website — we are happy to help."
+msgstr "Necessites ajuda amb un plugin de ROBOTSTXT? Visita el lloc web del plugin (l'enllaç a la seva fila de dalt) per veure la documentació i les guies, o contacta amb nosaltres a través del nostre lloc web: estarem encantats d'ajudar-te."
+
+msgid "Payments, and how it works"
+msgstr "Pagaments, i com funciona"
+
+msgid "Free plugins install instantly at no cost. Premium plugins are annual subscriptions: you pay once on our website and the subscription renews automatically every year until you cancel. You can cancel at any time from your ROBOTSTXT account page — access keeps working until the end of the paid period. All payments are processed securely by Mollie; we never see or store your card details."
+msgstr "Els plugins gratuïts s'instal·len a l'instant i sense cost. Els plugins premium són subscripcions anuals: pagues una vegada al nostre lloc web i la subscripció es renova automàticament cada any fins que la cancellis. Pots cancel·lar-la en qualsevol moment des de la teva pàgina de compte de ROBOTSTXT; l'accés segueix funcionant fins al final del període pagat. Tots els pagaments els processa de manera segura Mollie; nosaltres mai no veiem ni desem les dades de la teva targeta."
diff --git a/languages/robotstxt-manager-es_ES.mo b/languages/robotstxt-manager-es_ES.mo
index fe859122d62371a67e3de003a25b5171fdadafa6..9b6d0bd652a507ae2403051a2f7244edf96e5dad 100644
GIT binary patch
delta 3703
zcmZvdU2I%O701W<uoL1qCZuVcuTDbU+QHd0EjX=BXq={{K%A5~qKQ-}<GbVC8{fUN
zxgWN+eB6o_1X8O$Y+BSxMOgHqR!Nm&1uCjiDMo#vNJxPq5eZOvsCb|fD&>Iy;&<*|
zuT$EQ=l<^O?wmR2f6f^{ckpLNvp;TJ^`v4PV{T_YwnC|C`0rIb7|(Yqbso;c_3-{K
zrApAkb?_Yg2>c=ZI(z|UaA1v6ysGEnAiMy#!au<8!}lO2GxhjdrFd88;12jKoP@8y
zm2fB4SHs=#dN=?#!b6ZhHBs;@a35<QYWOt#DEv9>fp5TJcm<w;8}WXfxcUuV#Ix_g
zkHP1l1phMpPKQ#j!k@A}LipYADwN39V09Dhh2mI$u|5d<Sf7BqVE{i4pMVQ+0e%}+
zHlV0T^*3I`fvXTn)aG8Lw!j@wQZfuhfeDBx>NJd@2ic;255=*!A-<}AKv7h}7kg`=
z?CXVMZz~l02Vf?V+{cR;It5WjRpAL3!^7}(C=skh_mwEJ7w%!bAGyZh15oz;0Lp>$
zP$Ito#r|a|wQ~iI!oNaMu74Byizg$jB!UU}BnNyI{(|*CuWNmNakEmlu)YMv(RZO7
zxDwr;fj#hXI1eS#0~q}@9E0M>H{nG%2gRZL$&c{CKJ?eTRQTWw{BH5ZyHFyz3U|U4
z<cBlWE+_}z4&|V`;4mDA1MpEOk)4MGsV>0-@J;v(?Ag{z(LB6?^~H=AoKnAoa^O4g
zO%!+!{)P1$w1g;g0WTz{uR?rMuS3b@pP?N1A4u?OBUUBiJq5?%+pOzw4xZ92d;fy+
z`>bnM>);!pwBJpzA08<_KLaJwv+yzaH7Fa`aEdslp%mR-D3aa*C6F;l9jbfbAUqB6
zK|KQHcRzwCl&KeZ5d*J5Nx`q+Q8-M+?SYTL8#|PG5#GxB@{LM;9(LlT?E4~=lzbU}
z0#;#upFmOOSvU%R0!6WRpg6MbCfT2{i5KkW;|m2P*HS=tFb^{&QgKSgCz&)rK34Kv
zQM|7%C=kcSnd0a%CUx8%9G4GqvXk@kTT7~1^7<L3q=EG3<4&I9y=Lxbiu6lEqQ1RY
z9D<^b41~&us3Ar9Ip)nwx;P(Fu#y^4Bl{GOyP12LN0>5hYa!3u0p2BFsFshhf?Q(x
z7%C_bxj$R1?=4t@BKJK^GM9JL2rR~}Y8P*Nm~uf#%SfN!#gwj)YnXD#$3dQSky^Vj
z-nnIUc28ujt_Nww4`a<tOc1mfCP71+M2Aj$E>24NzR1@6wATK$iL5qZn3_Px>16Ch
zem(JB7?0?NOLg5ev<p4UL%TH6vvxA}6WLMLN!1oxCR%%RWJ5a}Ym+9fW)k1Si-xu{
zHfrdGHIYuk#1C@2p228P(x*9tcbTlkQ4=<F;@51mcf+nszxD7rZ9LD$v7WZJ9_v{b
zP5WV`FeNTnTyaymH+AEeb=^k3E0^>b65xK#h6yeaWj%6Y$d+|%y)?4;HrdeQE(m-(
zN@O||SNW1?LE@rKR-BFSE-LG?O^hGJrG@gk!H(vyd#`U^=-!`M%vEhr*Ry_7)kdE<
ze)#ywiIb;J76RX?zvQD>%e_27Hxopm;(+)c_~A6U(mrlRZdRK~H)99&6h4%lmx}*r
ziT<K_CH2cT9ufyV#}~JGiB4mzM=q^Y-<Kkhj-Vv+s;Spe)#aX+nt$qks;>}cD7RYW
zSbP+1<7T}6Q1g}b7guv?8aE&98S9!z>vb0;&0qFh$$UA?ejv<TE<2Kc=NZb+RU|1(
zC0S1=13#{!6^ged8d@q<Ga0l>Dy^5<EUP$)j9;lHdMa|YRu<fBsI%GnUQ@35VM%{z
z&F5Kgq19gCd()%j{QcD)*|VviS3H4#py+X*3e4+1jl8Of|G(}_&8Ihn&F<deP8-GK
zq<N^f(f!u9e%v4HeR+v5yxjX#S9a9J?a(U`*^8;FB3O!@R?B-dq>&mrCil{swxqA!
zx8!+D=HoQ)OOF#RwJd&H8nkXICZ-dNp0N+n2RckGy15LSRE(4v_5-uLe{lh0R{Aux
zGp5z3i*wScQf8=T%6z)`5|v`OMD*E|`ZPs%+L+rTwbWnnfr<EzV?F#qR(hxA#7>86
zzPNoL8`aX$(!36bDwvu|Ly3VxUOIqZO!*;#lzD4)uFK;pyOKWX$_N>Vn5MGymN&8C
z_tGIXVzZSrGVL}FUF?t`*5NH2Cd$-g;nO)Zv5|!sq|D@Lb&~4DL}%#j(!%(b2V0H(
zo4$S7rPq#GT=x?sHjNZrXgI_!5-WS#g<Lc_VsMGJrO!jkTV4<Fg$)D4MT%Z=O3+A$
z2@^&Bq!}bYVvyTMK9;VpO51zBBur8m<NxA$Bb}c&{^FdM7-Hqdp;2ZQ=ks8S{4e`3
zqA3V&014Y72R21gIaor9D7xl<`(D~C@(yv3x42Mq?KCydZ#~{zwe7c^cVndNnt$K+
zK-YwmtH3TC-QLxa5ioM%g3l$K$FtP%*Q$dP0Tq)h&T%U^Ieh6?`L#gJ;SyGt^<26b
z<R*x5%XkST=0DV0muX<4uh~pWmU6@*Y2<pZOVPJ4h-<s)L%Og?r(6`Hts*P_e=c=i
zepgs}C2z5I4@ye%7Sy|?J!mJ-)#{{gxdE3G&^)%|;pXKXN4n&`U}y8XolkW4$C^81
IpY)mfA3J<#(f|Me

delta 1842
zcmY+^UrZcT6vy$quw80_<*(2R)PZ)jv;xvvPz$ZArC_t@sw7rznl8AMB`iaB7aOg~
zCf3FW#cD33DX}Vv`eHRUn_6ocHK{ex7(>#i#8j>E#rWu(`cS{WVfMir&U|K=%$$49
zy|Wi$@AT(?sSPd|#(tuim?|+QiI;*L81axXAK)Wci8rtlE6a>2$39$#L-;&ChIw2@
z{!DzWG3|H&Z^0Mv6rMp|l{Y(YGKO>0hb=gOqd118_!X|fZ?F-Uu@?V8CH~hp#6=g^
zHRxazYj709n8O}Cj+6K)mTRgJ%FxWZu?}OX;t%7;n8XTf=Aeq&u^zio6WZrrAHoe>
zXOTzD9Jb+U+=Q3#1YSpVa-2g*t;%t-9*?1xU>=p|9IEn*NRj4q%;MKrh5eMpyUZ{u
z;ghINj^oYfqMkc}dhbb8p0lXuuV9`onD04x6tCm`xP!Zz@iVv;7cq)gP@O5OUTu8^
zvWBJ+Rp~}#ZYGMm@L^P^UPdK;8y5l;grDhtE&W#oVfub2HX%7o3^lQXxQIt^4oi5O
zDtZn3a1oXGM?8=JpgQ*v<;zdd!7p$UfAjwzYgnE5NCW-f$c?A?2Y=={4odtwD$yI*
zgYV%M{29q%LM%LUGELZvUFb~|wG<_kdn<-fm3MMbrv~wNd<a$e_B=aAYqkfqd4@P>
ztwvFabf0&cdDH`EQ59eGy@pF%-|+7*v6GePL)6!F9wT@a)sesb`+=s_0`qG*d4(Ib
zs6=m}5?w%5@+IoQWh94LL6*<_h3#0%Y*lFosw2aw=Mt!vr!j^rxD_MJYCFbpzrO$D
zoM=;hhkEcTY6*VDZTKgu6Ai4>F5HH^%N#)^ei7MI-m~mquZRaw8`&XB2n|h6c^)K&
z2wrP8>-#Sby<DS@=q2csw>MaFZ**|%_RpEQ*9}cf`-EovZ|v}|v}cM#)wdG&5bB`D
zfb#28)957BdVK+<gg&L+L~-a>?=IqYLTg+cQBJ!23vE{ICk=H^L(6m<p=IO)@V>PB
zP`@ot5Z>77tDnq!iM##leW*6~6MG45Cas?ao7fwJ9Pc2sF|{;%h;@Z`L+jTR_Ev5Q
zl*in$#FUfGC2~poYPi|H6z;GSRr9v7dUts;otjOXcqTQLv@@+OcD8z<e!@NKq}@!?
zNllNtnRFtTa;I%oP1GK!`N{UwO$0}tok`j=b-ngl-O<9~`h~K>w=IVP6$7Mr+I6Os
z&QG+dEIK)x%_Xz;ap#<MT8D$mXH%^!8;0F%E|bVO>B~#mVy3aw<-)WbY&%$ZzbzE7
UKWsi097)Z%HXa$UZ${?+0|g|?RsaA1

diff --git a/languages/robotstxt-manager-es_ES.po b/languages/robotstxt-manager-es_ES.po
index 98d8510..3059230 100644
--- a/languages/robotstxt-manager-es_ES.po
+++ b/languages/robotstxt-manager-es_ES.po
@@ -129,8 +129,6 @@ msgstr "Instalado (inactivo)"
 msgid "Insufficient permissions."
 msgstr "Permisos insuficientes."
 
-msgid "Local state"
-msgstr "Estado local"
 
 msgid "Manager (by ROBOTSTXT) — Plugins"
 msgstr "Manager (by ROBOTSTXT) — Plugins"
@@ -153,8 +151,6 @@ msgstr "El plugin no está instalado."
 msgid "Plugin not found in catalog."
 msgstr "Plugin no encontrado en el catálogo."
 
-msgid "Premium"
-msgstr "Premium"
 
 msgid "Price"
 msgstr "Precio"
@@ -177,8 +173,6 @@ msgstr "Requiere WP"
 msgid "Settings"
 msgstr "Ajustes"
 
-msgid "Show more information"
-msgstr "Mostrar más información"
 
 msgid "Store URL"
 msgstr "URL de la tienda"
@@ -210,8 +204,6 @@ msgstr "Este sitio funciona con WordPress %1$s y PHP %2$s."
 msgid "Too many refreshes. Please wait a minute before refreshing again."
 msgstr "Demasiadas actualizaciones. Espera un minuto antes de volver a actualizar."
 
-msgid "Type"
-msgstr "Tipo"
 
 msgid "Up to date"
 msgstr "Actualizado"
@@ -233,3 +225,27 @@ msgstr "Tu servidor funciona con PHP"
 
 msgid "Your site runs WordPress"
 msgstr "Tu sitio funciona con WordPress"
+
+msgid "This is the ROBOTSTXT plugin store: the catalog of plugins published by ROBOTSTXT, installable and updatable straight from your own wp-admin. Free plugins install with one click; premium plugins require an annual subscription that you purchase on our website."
+msgstr "Esta es la tienda de plugins de ROBOTSTXT: el catálogo de plugins publicados por ROBOTSTXT, instalables y actualizables directamente desde tu propio wp-admin. Los plugins gratis se instalan con un clic; los plugins premium requieren una suscripción anual que se compra en nuestro sitio web."
+
+msgid "Version"
+msgstr "Versión"
+
+msgid "Status"
+msgstr "Estado"
+
+msgid "€%s / year"
+msgstr "%s €/año"
+
+msgid "Support"
+msgstr "Soporte"
+
+msgid "Need help with a ROBOTSTXT plugin? Visit the plugin's website (the link in its row above) for documentation and guides, or contact us through our website — we are happy to help."
+msgstr "¿Necesitas ayuda con un plugin de ROBOTSTXT? Visita el sitio web del plugin (el enlace en su fila de arriba) para ver la documentación y las guías, o contáctanos a través de nuestro sitio web: estaremos encantados de ayudarte."
+
+msgid "Payments, and how it works"
+msgstr "Pagos, y cómo funciona"
+
+msgid "Free plugins install instantly at no cost. Premium plugins are annual subscriptions: you pay once on our website and the subscription renews automatically every year until you cancel. You can cancel at any time from your ROBOTSTXT account page — access keeps working until the end of the paid period. All payments are processed securely by Mollie; we never see or store your card details."
+msgstr "Los plugins gratis se instalan al instante y sin coste. Los plugins premium son suscripciones anuales: pagas una vez en nuestro sitio web y la suscripción se renueva automáticamente cada año hasta que la canceles. Puedes cancelarla en cualquier momento desde tu página de cuenta de ROBOTSTXT; el acceso sigue funcionando hasta el final del periodo pagado. Todos los pagos los procesa de forma segura Mollie; nosotros nunca vemos ni guardamos los datos de tu tarjeta."
diff --git a/languages/robotstxt-manager.pot b/languages/robotstxt-manager.pot
index 228e099..2118156 100644
--- a/languages/robotstxt-manager.pot
+++ b/languages/robotstxt-manager.pot
@@ -128,8 +128,6 @@ msgstr ""
 msgid "Insufficient permissions."
 msgstr ""
 
-msgid "Local state"
-msgstr ""
 
 msgid "Manager (by ROBOTSTXT) — Plugins"
 msgstr ""
@@ -152,8 +150,6 @@ msgstr ""
 msgid "Plugin not found in catalog."
 msgstr ""
 
-msgid "Premium"
-msgstr ""
 
 msgid "Price"
 msgstr ""
@@ -176,8 +172,6 @@ msgstr ""
 msgid "Settings"
 msgstr ""
 
-msgid "Show more information"
-msgstr ""
 
 msgid "Store URL"
 msgstr ""
@@ -209,8 +203,6 @@ msgstr ""
 msgid "Too many refreshes. Please wait a minute before refreshing again."
 msgstr ""
 
-msgid "Type"
-msgstr ""
 
 msgid "Up to date"
 msgstr ""
@@ -232,3 +224,27 @@ msgstr ""
 
 msgid "Your site runs WordPress"
 msgstr ""
+
+msgid "This is the ROBOTSTXT plugin store: the catalog of plugins published by ROBOTSTXT, installable and updatable straight from your own wp-admin. Free plugins install with one click; premium plugins require an annual subscription that you purchase on our website."
+msgstr ""
+
+msgid "Version"
+msgstr ""
+
+msgid "Status"
+msgstr ""
+
+msgid "€%s / year"
+msgstr ""
+
+msgid "Support"
+msgstr ""
+
+msgid "Need help with a ROBOTSTXT plugin? Visit the plugin's website (the link in its row above) for documentation and guides, or contact us through our website — we are happy to help."
+msgstr ""
+
+msgid "Payments, and how it works"
+msgstr ""
+
+msgid "Free plugins install instantly at no cost. Premium plugins are annual subscriptions: you pay once on our website and the subscription renews automatically every year until you cancel. You can cancel at any time from your ROBOTSTXT account page — access keeps working until the end of the paid period. All payments are processed securely by Mollie; we never see or store your card details."
+msgstr ""
diff --git a/readme.txt b/readme.txt
index 2bddf5f..67dc346 100644
--- a/readme.txt
+++ b/readme.txt
@@ -3,9 +3,9 @@ Contributors: javiercasares, robotstxt
 Tags: dashboard, catalog, updates, subscriptions, management
 Requires at least: 4.4
 Tested up to: 7.1
-Stable tag: 0.6.0
+Stable tag: 1.0.0
 Requires PHP: 8.0
-Version: 0.6.0
+Version: 1.0.0
 License: GPL-3.0-or-later
 License URI: https://www.gnu.org/licenses/gpl-3.0.txt
 
@@ -42,11 +42,14 @@ Configure at **ROBOTSTXT → Settings**:
 
 | Column | Description |
 |---|---|
-| Plugin | Name and current version from the store. Click ▸ to expand the description and website link. |
-| Type | Free or Premium. |
-| Price | Annual price in EUR, or — for free plugins. |
-| Local state | Not installed / Installed (inactive) / Up to date / Update available (vX → vY). |
+| Plugin | Name from the store. The row below each plugin carries its website link and description (always visible). |
+| Version | Current version in the store. |
+| Requires WP / Requires PHP | Minimum requirements, checked against this site (warning icon when not met). |
+| Price | "Free", or the annual price for premium plugins. |
 | Action | Install / Activate / Update / Buy, depending on local state. |
+| Status | Not installed / Installed (inactive) / Up to date / Update available (vX → vY). |
+
+Below the table: a Support section and an explanation of Payments (annual subscriptions, automatic renewal, cancellation, Mollie processing).
 
 Click "Refresh catalog" to force a fresh fetch from Core. Install, Activate, and Update run on a classic page load (no JavaScript) and report the result as a standard admin notice.
 
@@ -89,6 +92,12 @@ Encrypted at rest using AES-256-CBC with a key derived from your site's WordPres
 
 == Changelog ==
 
+= 1.0.0 =
+
+_Release date: 2026-08-15_
+
+* Catalog redesign: columns Plugin · Version · Requires WP · Requires PHP · Price · Action · Status; Type merged into Price ("Free" or the annual price); per-plugin website link + description always open under each row; intro text after the title; Support and Payments sections below the table. First stable release.
+
 = 0.6.0 =
 
 _Release date: 2026-08-15_
diff --git a/robotstxt-manager.php b/robotstxt-manager.php
index 5ba69e3..f814d46 100644
--- a/robotstxt-manager.php
+++ b/robotstxt-manager.php
@@ -3,7 +3,7 @@
  * Plugin Name:       Manager (by ROBOTSTXT)
  * Plugin URI:        https://git.robotstxt.es/ROBOTSTXT/robotstxt-manager
  * Description:       Client-side dashboard for the ROBOTSTXT plugin ecosystem. Lists the catalog from a remote Plugins Core install, resolves local install/update state, and installs, activates, and updates plugins directly from the store.
- * Version:           0.6.0
+ * Version:           1.0.0
  * Requires at least: 4.4
  * Requires PHP:      8.0
  * Author:            ROBOTSTXT
@@ -21,7 +21,7 @@ if ( ! defined( 'ABSPATH' ) ) {
 }
 
 /** Plugin version. */
-define( 'ROBOTSTXT_MANAGER_VERSION', '0.6.0' );
+define( 'ROBOTSTXT_MANAGER_VERSION', '1.0.0' );
 
 /** Absolute path to the plugin directory, with trailing slash. */
 define( 'ROBOTSTXT_MANAGER_DIR', plugin_dir_path( __FILE__ ) );

From e80820f41612d053ea82c3486a1649b3ba62c8ec Mon Sep 17 00:00:00 2001
From: Javier Casares <javier@robotstxt.es>
Date: Mon, 17 Aug 2026 16:03:10 +0000
Subject: [PATCH 10/23] v1.1.0

---
 admin/class-robotstxt-manager-installer.php | 288 +++++++++++++++++++-
 admin/views/page-catalog.php                |  25 ++
 changelog.txt                               |  17 ++
 languages/robotstxt-manager-ca.mo           | Bin 9816 -> 10430 bytes
 languages/robotstxt-manager-ca.po           |  18 ++
 languages/robotstxt-manager-es_ES.mo        | Bin 9783 -> 10405 bytes
 languages/robotstxt-manager-es_ES.po        |  18 ++
 languages/robotstxt-manager.pot             |  18 ++
 readme.txt                                  |  10 +-
 robotstxt-manager.php                       |   4 +-
 10 files changed, 389 insertions(+), 9 deletions(-)

diff --git a/admin/class-robotstxt-manager-installer.php b/admin/class-robotstxt-manager-installer.php
index 3ad4bb3..2714e78 100644
--- a/admin/class-robotstxt-manager-installer.php
+++ b/admin/class-robotstxt-manager-installer.php
@@ -54,19 +54,297 @@ class Robotstxt_Manager_Installer {
 		$name = $this->entry_name( $entry, $slug );
 		$this->ensure_plugin_functions();
 
+		// Install missing dependencies first (ecosystem catalog plugins via
+		// the store, WordPress.org plugins via their repository ZIPs).
+		$deps_installed = $this->install_dependencies( $slug );
+
+		if ( is_wp_error( $deps_installed ) ) {
+			$this->redirect_error( $deps_installed->get_error_message() );
+		}
+
 		$result = $this->download_and_install( $slug );
 
 		if ( is_wp_error( $result ) ) {
 			$this->redirect_error( $result->get_error_message() );
 		}
 
-		$this->redirect_success(
-			sprintf(
-				/* translators: %s: plugin name. */
-				__( '%s installed. Activate it from the list below.', 'robotstxt-manager' ),
-				$name
+		$message = sprintf(
+			/* translators: %s: plugin name. */
+			__( '%s installed. Activate it from the list below.', 'robotstxt-manager' ),
+			$name
+		);
+
+		if ( is_string( $deps_installed ) && '' !== $deps_installed ) {
+			$message .= ' ' . $deps_installed;
+		}
+
+		$this->redirect_success( $message );
+	}
+
+	/**
+	 * Installs the plugin's missing dependencies, dependencies first.
+	 *
+	 * Each dependency slug is resolved either against the store catalog
+	 * (installed through the store's download endpoint, like any catalog
+	 * plugin) or, when not in the catalog, against WordPress.org (installed
+	 * from the repository's plugin ZIP).
+	 *
+	 * @param string $slug Plugin slug being installed.
+	 *
+	 * @return string|WP_Error Installed-dependency names for the notice, '' when none were needed.
+	 */
+	private function install_dependencies( string $slug ) {
+		$deps = $this->dependencies_for( $slug );
+
+		if ( array() === $deps ) {
+			return '';
+		}
+
+		$installed_names = array();
+
+		foreach ( $deps as $dep_slug ) {
+			if ( '' !== $this->find_plugin_file( $dep_slug ) ) {
+				continue; // Already installed.
+			}
+
+			$result = $this->install_one_dependency( $dep_slug );
+
+			if ( is_wp_error( $result ) ) {
+				/* translators: %s: dependency slug. */
+				$detail = sprintf( __( 'Could not install the required plugin %s.', 'robotstxt-manager' ), $dep_slug );
+
+				return new WP_Error(
+					'robotstxt_manager_dependency',
+					$detail . ' ' . $result->get_error_message()
+				);
+			}
+
+			$installed_names[] = $result;
+		}
+
+		if ( array() === $installed_names ) {
+			return '';
+		}
+
+		/* translators: %s: list of installed dependency names. */
+		return sprintf( __( 'Installed required plugins: %s.', 'robotstxt-manager' ), implode( ', ', $installed_names ) );
+	}
+
+	/**
+	 * Installs a single dependency: catalog plugin via the store, else wp.org.
+	 *
+	 * @param string $dep_slug Dependency slug.
+	 *
+	 * @return string|WP_Error The dependency's display name on success.
+	 */
+	private function install_one_dependency( string $dep_slug ) {
+		if ( null !== $this->find_catalog_entry( $dep_slug ) ) {
+			return $this->install_via_store( $dep_slug );
+		}
+
+		// Not in the catalog — treat as a WordPress.org plugin.
+		return $this->install_via_wordpress_org( $dep_slug );
+	}
+
+	/**
+	 * Installs a dependency that exists in the store catalog.
+	 *
+	 * @param string $dep_slug Dependency slug.
+	 *
+	 * @return string|WP_Error Dependency name on success.
+	 */
+	protected function install_via_store( string $dep_slug ) {
+		$result = $this->download_and_install( $dep_slug );
+
+		if ( is_wp_error( $result ) ) {
+			return $result;
+		}
+
+		$entry = $this->find_catalog_entry( $dep_slug );
+
+		return $this->entry_name( is_array( $entry ) ? $entry : null, $dep_slug );
+	}
+
+	/**
+	 * Installs a dependency that is not in the catalog from WordPress.org.
+	 *
+	 * @param string $dep_slug wp.org plugin slug.
+	 *
+	 * @return string|WP_Error Plugin name on success.
+	 */
+	protected function install_via_wordpress_org( string $dep_slug ) {
+		return $this->install_wporg_zip( $dep_slug );
+	}
+
+	/**
+	 * Resolves a plugin's dependency slugs (parsed, deduplicated, deps-first
+	 * order, self-references dropped).
+	 *
+	 * @param string $slug Plugin slug.
+	 *
+	 * @return list<string> Dependency slugs.
+	 */
+	private function dependencies_for( string $slug ): array {
+		$all     = array( $slug => true );
+		$queue   = array( $slug );
+		$ordered = array();
+
+		while ( ! empty( $queue ) ) {
+			$current = array_shift( $queue );
+
+			foreach ( $this->raw_dependencies_of( $current ) as $dep ) {
+				if ( isset( $all[ $dep ] ) ) {
+					continue; // Already seen: self, duplicate, or cycle.
+				}
+
+				$all[ $dep ] = true;
+				$ordered[]   = $dep;
+				$queue[]     = $dep;
+			}
+		}
+
+		// Dependencies discovered later are deeper — reverse so dependencies
+		// of dependencies install first.
+		return array_reverse( $ordered );
+	}
+
+	/**
+	 * Reads the raw requires-plugins list of a catalog entry.
+	 *
+	 * @param string $slug Plugin slug.
+	 *
+	 * @return list<string> Dependency slugs (unresolved).
+	 */
+	private function raw_dependencies_of( string $slug ): array {
+		$entry = $this->find_catalog_entry( $slug );
+
+		if ( null === $entry ) {
+			return array(); // wp.org plugin: dependencies come from its own headers on install.
+		}
+
+		$raw = $entry['requires_plugins'] ?? '';
+		$raw = is_string( $raw ) ? $raw : '';
+
+		if ( '' === $raw ) {
+			return array();
+		}
+
+		$slugs = array();
+		foreach ( explode( ',', $raw ) as $part ) {
+			$dep = sanitize_key( trim( $part ) );
+			if ( '' !== $dep ) {
+				$slugs[ $dep ] = true;
+			}
+		}
+
+		return array_keys( $slugs );
+	}
+
+	/**
+	 * Installs a WordPress.org plugin by slug via plugins_api + Plugin_Upgrader.
+	 *
+	 * @param string $slug wp.org plugin slug.
+	 *
+	 * @return string|WP_Error Plugin name on success.
+	 */
+	private function install_wporg_zip( string $slug ) {
+		$this->ensure_plugin_functions();
+
+		if ( ! function_exists( 'plugins_api' ) ) {
+			require_once ABSPATH . 'wp-admin/includes/plugin-install.php';
+		}
+
+		$api = plugins_api(
+			'plugin_information',
+			array(
+				'slug'   => $slug,
+				'fields' => array(
+					'sections'   => false,
+					'versions'   => false,
+					'downloaded' => false,
+					'rating'     => false,
+				),
 			)
 		);
+
+		if ( is_wp_error( $api ) ) {
+			/* translators: %s: error message from WordPress.org. */
+			return new WP_Error( 'robotstxt_manager_wporg', sprintf( __( 'WordPress.org lookup failed: %s', 'robotstxt-manager' ), $api->get_error_message() ) );
+		}
+
+		$download_link = is_object( $api ) && isset( $api->download_link ) && is_string( $api->download_link )
+			? $api->download_link
+			: '';
+
+		if ( '' === $download_link ) {
+			/* translators: %s: plugin slug. */
+			return new WP_Error( 'robotstxt_manager_wporg', sprintf( __( 'No download found on WordPress.org for %s.', 'robotstxt-manager' ), $slug ) );
+		}
+
+		$tmp_file = wp_tempnam( $slug . '.zip' );
+
+		if ( ! $tmp_file ) {
+			return new WP_Error( 'robotstxt_manager_temp', __( 'Could not create a temporary file for download.', 'robotstxt-manager' ) );
+		}
+
+		$response = wp_remote_get(
+			$download_link,
+			array(
+				'timeout'  => 300,
+				'stream'   => true,
+				'filename' => $tmp_file,
+			)
+		);
+
+		if ( is_wp_error( $response ) ) {
+			wp_delete_file( $tmp_file );
+
+			/* translators: %s: HTTP transport error message. */
+			return new WP_Error( 'robotstxt_manager_download', sprintf( __( 'Download failed: %s', 'robotstxt-manager' ), $response->get_error_message() ) );
+		}
+
+		if ( 200 !== (int) wp_remote_retrieve_response_code( $response ) ) {
+			wp_delete_file( $tmp_file );
+
+			/* translators: %d: HTTP status code. */
+			return new WP_Error( 'robotstxt_manager_http', sprintf( __( 'Download failed (HTTP %d).', 'robotstxt-manager' ), (int) wp_remote_retrieve_response_code( $response ) ) );
+		}
+
+		if ( ! $this->is_valid_zip( $tmp_file ) ) {
+			wp_delete_file( $tmp_file );
+
+			return new WP_Error( 'robotstxt_manager_zip', __( 'The store returned an invalid file.', 'robotstxt-manager' ) );
+		}
+
+		$upgrader = new Plugin_Upgrader( new Automatic_Upgrader_Skin() );
+		$result   = $upgrader->install(
+			$tmp_file,
+			array(
+				'overwrite'         => false,
+				'overwrite_package' => false,
+			)
+		);
+
+		wp_delete_file( $tmp_file );
+
+		if ( true !== $result ) {
+			$detail = ( $result instanceof WP_Error ) ? $result->get_error_message() : '';
+
+			/* translators: %s: upgrader error message. */
+			return new WP_Error( 'robotstxt_manager_install', '' !== $detail ? sprintf( __( 'Installation failed: %s', 'robotstxt-manager' ), $detail ) : __( 'Installation failed.', 'robotstxt-manager' ) );
+		}
+
+		$file = $this->find_plugin_file( $slug );
+
+		if ( '' === $file ) {
+			/* translators: %s: plugin slug. */
+			return new WP_Error( 'robotstxt_manager_wporg', sprintf( __( 'The downloaded plugin for %s does not have the expected folder structure.', 'robotstxt-manager' ), $slug ) );
+		}
+
+		$data     = get_plugins();
+		$raw_name = isset( $data[ $file ]['Name'] ) && is_string( $data[ $file ]['Name'] ) ? $data[ $file ]['Name'] : '';
+
+		return '' !== $raw_name ? $raw_name : $slug;
 	}
 
 	/**
diff --git a/admin/views/page-catalog.php b/admin/views/page-catalog.php
index d419227..7a79180 100644
--- a/admin/views/page-catalog.php
+++ b/admin/views/page-catalog.php
@@ -135,6 +135,18 @@ $compat_warnings   = 0;
 					$website_url = '' !== $page_url ? $page_url : $homepage;
 					$has_detail  = ( '' !== $website_url || '' !== $desc );
 
+					$raw_reqs  = $entry['requires_plugins'] ?? '';
+					$req_slugs = array();
+					if ( is_string( $raw_reqs ) && '' !== trim( $raw_reqs ) ) {
+						foreach ( explode( ',', $raw_reqs ) as $part ) {
+							$dep = sanitize_key( trim( $part ) );
+							if ( '' !== $dep ) {
+								$req_slugs[] = $dep;
+							}
+						}
+					}
+					$has_detail = $has_detail || array() !== $req_slugs;
+
 					// Compatibility checks.
 					$wp_ok  = '' === $req_wp || version_compare( $local_wp_version, $req_wp, '>=' );
 					$php_ok = '' === $req_php || version_compare( $local_php_version, $req_php, '>=' );
@@ -251,6 +263,19 @@ $compat_warnings   = 0;
 							<?php if ( '' !== $desc ) : ?>
 								<span class="robotstxt-manager-detail-description"><?php echo esc_html( $desc ); ?></span>
 							<?php endif; ?>
+							<?php if ( array() !== $req_slugs ) : ?>
+								<span class="robotstxt-manager-detail-requires">
+									<?php
+									echo esc_html(
+										sprintf(
+											/* translators: %s: list of plugin slugs. */
+											__( 'Requires: %s', 'robotstxt-manager' ),
+											implode( ', ', $req_slugs )
+										)
+									);
+									?>
+								</span>
+							<?php endif; ?>
 						</td>
 					</tr>
 					<?php endif; ?>
diff --git a/changelog.txt b/changelog.txt
index 56d6dfd..58d7465 100644
--- a/changelog.txt
+++ b/changelog.txt
@@ -1,5 +1,22 @@
 == Changelog ==
 
+= 1.1.0 =
+
+_Release date: 2026-08-15_
+
+**Added**
+
+* Cascade dependency install: when installing a plugin whose catalog entry declares `requires_plugins` (Core 1.7.0+), Manager first installs every missing dependency — ecosystem plugins through the store flow, WordPress.org plugins (e.g. Action Scheduler) via `plugins_api` and their repository ZIPs — dependencies of dependencies first, cycle-safe. The success notice lists what was installed; failures name the dependency and abort before the main install. Catalog rows show a "Requires: …" hint in the detail line.
+
+**Changed**
+
+* Plugin version 1.0.0 → 1.1.0. No database schema changes (no custom tables).
+
+**Compatibility**
+
+* WordPress: 4.4 - 7.1 (scan-verified: wp-compat clean from 4.4)
+* PHP: 8.0 - 8.5 (scan-verified: PHPCompatibility + manual feature audit)
+
 = 1.0.0 =
 
 _Release date: 2026-08-15_
diff --git a/languages/robotstxt-manager-ca.mo b/languages/robotstxt-manager-ca.mo
index 20a059df8c8f3021abd939b05a2d0d291045be66..dfd0845f796c12e6bb8cd4ce0d9065d0084a3d73 100644
GIT binary patch
delta 2355
zcmZY9Z)_Ar7{~FsUMWyp{*)pu0v#wVRHT5Vs6~_(TBNpx))J#)blcmOlk07}x2M%;
zE)gX$ijY)<Xdr!|FVrZBr(hx>Mo?o2F&bmk_zzzwB=W}8H@r~4zrCvjoOJFpvpc)<
z%rmq7w&PTH=BKj4gND*eT|hlqV9W^aoWc*qPBrFjT#Tjo1=iz_cpa8ZGo~0T@JX!3
z42~m1jGb;w9WKZD*n@{~2#Yjy3QsfEl;A>~i+$LDQG6K{%PTk!$FU4QK>p0xyx-s|
z`sYy-&L%pG>v1;j#2J{xb@&uMqEO$X!Jnxr$wjyV=g@D%LcAaMMvQp~kJJB+G|)6h
zc$-%ECYIy7r~p69_kYGJ`V&}*<ui?0g7sL9-I!IX(ll<wx>?3Ni@m5+e~(Jp1te7_
z$}%dj7`0W^sLX6cvT52dh1-!=nlq?CzeX+ae7=7PmGR4%313V;^@3v5i_1|HtwF7@
z9reN<B)g^$dvFN1;z!tm#iUIu>%=G-8$m5BO?sMf9QFLKsCh4ylYgaTf(x2x-rU^E
zt5B(1iR-Zw8DgG81$Gp*vJ?0W6P>}6^tY0Kt+a?iH)9zp@K)5sJMblZ828~{735#3
z*uw_hiZ9?|`~=^}-%*hsVISmcsQYi>Af7`7-grYUpbe-6wIeZ^A=JcsP#Jy^HP2yO
zjbCPH+(e^*yzB6+Lb7JI;BEK-?#F|u4Ak(6EW#$#`1?=`7{QBV;tBkPevI@fL#;L!
zKo2sNc@Xvd<EQ{LhiPcf-ofkfE7S@uVl9@i+&{1Z*P`X-QQUzXY%_r*$wYaHGPDr2
zbxV<0%x2VA)Q8HzARfRGWWJ0kSeo1ON>s$l^8K}_y=+09@-E~<FuhoZE^4CvsELmu
z=g=I_`#BEL{{dUDy~dckaUbeXeut|g?0+H4Y~VuUGSY={)WpY7d-ox(z)x{1{)w9C
zGAcu*%h?WGixxd3Ddqs``7E+C;j<8?otVM{+Qj@}`gKF+fU%}S9m*|Kt#}%B8&y&B
z$%aAdY}`ZD7Bo^7po&g=ci74u)I0L+F4Q({plbgoOJ+MQ&X(CoRT`BE?VC~?rB0!4
zq3S#Dp{mTuan<j7dMl}9HT*ZMn|JAlvWBXRscg;>{%+F#^96<bt}E?Ss|H1T)lAi)
zDWvkrhH0(GHmc6RWGTou^o3|kbdXo)uZcUUI{hlz5_T>;%wgX28Ff-`r>d-@_J*z8
zInej215}!Qz3A`gqIfbDIEjP}cDdGfN78ZMjoINudN7`}HL2{O;#1KD8o<?SZl{_U
zP@nCdQ5mU?d5<L%o)fbJUOE}GUeey{`LXT3n@ZJt{velqz0IBZYNVtmH%s{V*gvz*
zZkl}f%EY<hHs-l0oAd&^%X!odBXmcH-Tr`q170HL`Zg8#>HZ+?XHU<rEvUMB&V=Xf
zP7m7wCr<E+HG5&sSkdC#f<HcyaD3|~CYP$Uxqdv*u-)^I6)p)gkP6qV>nVHXxgfvt
zimGjqhAz*hmhEzE;Cp>eVEdh6+vmhbotR^tYmzWbz)qM3dp=UCG`PMS9}PomT{1n=
z-1=WQ;VS|=`2<O@!Ra?_!kt{OV`DCp`NM8Nj@%R@nKIi^{d7TXhhzI)zyJRM5as||
N=>(c`>|D+B{{r=BOOF5m

delta 1782
zcmXxkduYvJ9LMqR*_mU<m}3_V+m6{dj@!&^W-i;<+_uG*TS+cyhLz$UqNC;#S;K~`
zToOg1wO=I6Uo6Qb?GM*n$|c1g3V$GZe}3n9@;$HTv7P66zTfA0c6-sYs>ti)_@hRv
zA%+nL<IFbVpLjlK7kp-y@gnxarM=C@<2p>lHtd6Ea0gz(2!;~O=-LGwjU6}yU*K{4
zflL{(X1^JIYr_mYiEHpCdNGsPdto*X!Vo57De}+iVy?sqj2keBCvX7Xz$AQth4>OT
zU^2T;)K+)W(a!c`3Z6qHe;xOF%)0Oz<JqL&7k{HNOJLSi44^ia8yio@bjG!qjhk=;
zwxEL!?!o&0R8*z<N=F;`jg-U&2FwOy2I@!(Q5C2|iek%g3$8`JVoy;U`-JS(zN0Ft
z^fjL!^}PUUz9Fdji!h>07Sho~%aH2WdaT7QSdQJO4E)sHOGU<EnDIo)Rfa22-#dj`
z@FFVn4%GZTsJrtLOYk$Qa=EG0Uptw~NEy`OZWdUDw-|p&i)M6opjkfSE2xdWLoN6X
z+wc!I<6+K0nP)NS6b#{TT#Z+;3AMpu&PSG}Q-A%!9R8yo8&Erbg4)n?R3;yhy_lbK
z(!yD&l7>+W72sHGMBRmUBuVSUV(i8iw4u?=4`C+5^AS4w!X4DkU*Tse@B!a4e$125
zMmqRyE!>6t$nK#gc+ZD6=FQ^XU^;5Uc{md5@C$CoQ&=C2z6Kvzlaoc#=%^GEkl(RF
z)H7UydIeiinQp^F*o0arl~r`6V^A9`MqR#2)Mc$j?x8Ki(b#~RzZJEfgIuGC-H3MV
zAvW@Zx3~anxN%`@$2^bOU7W=DXO39~hI69}ZbnsR2adsgs3UZc1?(nH#YY%KKV@MF
z3u7O>|7tqS?=~&0rVOVMI=ga08CDT$1%xJ6^Ad4xFPe3%>sF$g!F-~I&=LJ_Eax^I
zw~zJRzgoK0I*%EI%C9q4n@N-qL1H4IyYjy&Yh6CIQbI38jY7Fi)d&&uh*1Qu*lmS;
z>S*-0ATpVc3St~Fn^04k)pTw}gvv?v+*THoKVohh8&mLVZBA@FH|BWMxmOaLoO@|?
z9I=+~K0lqaE|Z>29x;pHsk#?XXQeis;1!wQ$>{yp>r^CmdYwW2(>%`7z%ftjuL1X+
pq?D{Ur#kJ3&j}1W9q;r6t3A%*>^B~#JSV~9H0SP$Yb^*J_y;W0pP&E$

diff --git a/languages/robotstxt-manager-ca.po b/languages/robotstxt-manager-ca.po
index cd3e9bf..da6c088 100644
--- a/languages/robotstxt-manager-ca.po
+++ b/languages/robotstxt-manager-ca.po
@@ -249,3 +249,21 @@ msgstr "Pagaments, i com funciona"
 
 msgid "Free plugins install instantly at no cost. Premium plugins are annual subscriptions: you pay once on our website and the subscription renews automatically every year until you cancel. You can cancel at any time from your ROBOTSTXT account page — access keeps working until the end of the paid period. All payments are processed securely by Mollie; we never see or store your card details."
 msgstr "Els plugins gratuïts s'instal·len a l'instant i sense cost. Els plugins premium són subscripcions anuals: pagues una vegada al nostre lloc web i la subscripció es renova automàticament cada any fins que la cancellis. Pots cancel·lar-la en qualsevol moment des de la teva pàgina de compte de ROBOTSTXT; l'accés segueix funcionant fins al final del període pagat. Tots els pagaments els processa de manera segura Mollie; nosaltres mai no veiem ni desem les dades de la teva targeta."
+
+msgid "Installed required plugins: %s."
+msgstr "Plugins requerits instal·lats: %s."
+
+msgid "Could not install the required plugin %s."
+msgstr "No s'ha pogut instal·lar el plugin requerit %s."
+
+msgid "WordPress.org lookup failed: %s"
+msgstr "La cerca a WordPress.org ha fallat: %s"
+
+msgid "No download found on WordPress.org for %s."
+msgstr "No s'ha trobat cap baixada a WordPress.org per a %s."
+
+msgid "The downloaded plugin for %s does not have the expected folder structure."
+msgstr "El plugin baixat per a %s no té lestructura de carpetes esperada."
+
+msgid "Requires: %s"
+msgstr "Requereix: %s"
diff --git a/languages/robotstxt-manager-es_ES.mo b/languages/robotstxt-manager-es_ES.mo
index 9b6d0bd652a507ae2403051a2f7244edf96e5dad..763f8f0602fa7ca2c9067e3deb392ae026b649e5 100644
GIT binary patch
delta 2365
zcmZwITWl0n9LMp~8(?XHLJ<l`50sXhRJkaZ7Ug0KNQ<;KU`Uf@=uXSxGPBI=dWqUi
zOdv6l2SR`dN-9YuG2sDM#h@W3#Y@72FNQ=DG?Ya9AWxzuKA_*<?5sxOr2qY#GkfM-
z{^!j0a>qzl?uY5+Ck<B*F^~AH)R@EATfqmHooLKOT!7X14L0LVoQzeIjH$%g_$oGF
z4u_E@#y()oQe1*_up3X~A)KJ56+BH_Q-u%VOx%yFu?$b4=5hvS;V@3ePmn)zJ@y7Z
zLj4wMz#3*}u?1_e7pI_ykK=22P*eSo0)M8ysxZUlID>jSmg7D=T4GEeeoXx*(m>I?
zLvLE)`&f$~peFcLT>la4so%vqtetAiLTttc?83ZKm8Gx@mrgV02=<^-{XHsW<4CGZ
z8OxZBm8h+1KxJkVl1<Z&A?`-HG}llQ{T8*rTXFpkD&v1*F6x+ks)I^Y$F-<|R-#t;
zG^)dHB)eumcH<%3fuG|RtR!t(Stpi}vBRi^Wl7Iw97a7qh8p)yE%{eU?s7u|&6-(Q
zc|9t1E3gGSktXI1)WpuAR(2UrGSD@=N_`*s*Zn#gJ&H}JiSI=XJcws7z++flNB*_)
zvusc+j-Vzqh96-C`PalgjU7cx{W>1RU*h|F=N4Afhx55VfDhsk)WC0}#<_qxe3x)J
zj^`*Wp-@ZSwZe@^)=W39#Q{8n=TLjNo>xSfX+suaTvRHD@CKPUg14#n(ny)uWD9%U
zi8_RPkgiM`HD2x*1+Dlz>hyjQ*Kfv}1;+f${RZ5ClWF`ewxb3ZM?Lo&Y9iGf0Onw7
zu@P6H?mvghKp(z|N#wbl`JI9~nzE>{!nvsWVpQtapgL$pUIeohmtqep6GNzW=TMn@
z50$Aas4e;uci>89(}AzxGW;4Bm9YQ6Qdq@}*^4>pxD(aEDb(JbNA1-`)NAt{Ds^M1
zt@{I8&{9!qdr=d68P(5QSb`G?U7S_JoT4!|Fn;vPfO(jpZ8S^O*AiOsB;pxDv*wjG
zZNz%wS%Tjd^BAEC>e6ZNic0)s;}dat7i#}E5;~y8E4Q1HX1$3}npYFrKdqpQs35ix
zN}=9)T}t!)mol(|Aeqt6u)g1}53ZF2KM~RORIJ#l{pSse_FFfUeyal4PGU2mLsL%Z
zv~$Lye?IM~Gf=!r<AS!OiO{R3_rG{ONr4wFy0oS2m{}9m$eT`YC(#<+D7>FNaasGf
zj@Uv}=SL>oE1RG6!i<wj*~|gg2JYc(GH??%oyra-J=+-OPgh<oo2Lfcz3=OA0}Yz<
zT~q2xniBqtUdne8cEHbi3F~`yuOB3K2W}WP`@tZ$1NG)kJzG-MT^J>L{KQ|=u5T?q
z{O`bp<~HHGq4oTXJ>b0HMl*C@O1u3T8V>lWgd5l}6J+}{*&sh!(^Ojj-!W6Z|9m!W
z2b?66*Ie`CGcHW1FD%#zteYyXQwwv0WWraY*XJBBUl6T7j8+_d5!(2%gdZ=vrhZ$=
z`dz*aUF&-NzLyC`^VUmxgIUk92{-I_f<cF`?n^}42^@{G$KH-J;RdcIcVgYbd)wRo
znNqO_<`h3dB5Wq<dag~;Z*k!o%Q9Bl%{U>q({A7-ocx-Gq0%KCj@>_cC1h=h|Cz}E
Nn>w10hQ8Ez^lyMoQnUa7

delta 1781
zcmX}sT};nW9LMqR|Nrk%qz8$p{-u&A@=z(El*cl35u2wmlel0mJ^U`h*lI2+#>O-c
z(;91j3uCdl=mK|5Ha24}nhS2og=F5J-~Y#%^Lw51*YBL~`JQurx3@lOa6Y6&bsJ?f
zbvCs<Xm%KXNAaNCjWN52y*LG%W6etN0487;PQn{_68q4>!Z<UUb{FSiKW5-Nyo_VW
zkdAf4o6)u|%*1QB51(QPvlu-Zb1@wYF$Gs6|E$S(H!h@q2*Y><lko{A;%h9!_t=Ul
zM4zBgPtj0h7cdoXp%(ub&jri|@ge;>mOmNCQ7emM)M=Q63M}96SL00j+b|c8;2gY&
zF1mOY4^AbcO4U~y3Sb;biA_&3n}M0AEh$4~pb1He?ZD%>A9=;zq5>O5VznQrjB5EB
zFCO(?5^B5*)cED-XeC={XrS##cB}=r;c=|RA=C=u$$N;56k`$nQqom}J5ldlM@`s^
zT6sTe{9)ADd5=~21(mt{Y2;s#RMOK5ny{M*_Tn@8Khq+=4@@^(ME?aU(C?@TL*)G`
zCSnKnqE=eYpewKj7078Ez#ddU&FqidGn4#>X&mH-Ry^<j$9L39#xV<n><@EV4r<~G
z)I@8r3>&c!&!ARz4_TzWz;YbHtC%<|vPHd^O@F|lK~VMvHQ_fLAp>Lhnf`08gfi1l
z6x!24Bqkd|?d3<*gcHc(Ern6F;v(Nh9HoC0dvJR=GTtxL-#f86k%_ZW*RKHcvCjX!
z6}8f1*p4SqFUB#80t=%KT`?-9%TWudLC&GA$9cE|iNV@Xe|HnfkYjx`G{AGz7QDg+
zEaSu#VH@TJ%<ki2`ono<8!?6`_1;$0mh8g$*n-~o1eKX<ScMNz8T*C`B%wg>JG?}L
z@x8LiS9`4kw47Q?)k+nV%2Fy9z$+o1LBAdCD->8GRe^4%a*qEOrt^w|jA4H7tEE$|
zeO*b_Hn9C(S;bS)hpDAhrT$;hsw@1?YE*VqNR(HU4IRo2)VWk{u~&3pwKd9yvy4YQ
zwU}B*Rap|j+qZJs+Ap%^l^S0@VqRI`E0peaet*4h2`b%dsqCD0n<~*Si!Fy%5mg@u
zT^Zf;HB{XSeTF#>Ua98EEwXqwGxkr&txtFma?_`#1>EMOOM%W`$uHf+)a;<!n06<|
g&7OTG${h;V2i&!}p8}mr^CsLA`6q*&;li_j0nu`wv;Y7A

diff --git a/languages/robotstxt-manager-es_ES.po b/languages/robotstxt-manager-es_ES.po
index 3059230..35554f4 100644
--- a/languages/robotstxt-manager-es_ES.po
+++ b/languages/robotstxt-manager-es_ES.po
@@ -249,3 +249,21 @@ msgstr "Pagos, y cómo funciona"
 
 msgid "Free plugins install instantly at no cost. Premium plugins are annual subscriptions: you pay once on our website and the subscription renews automatically every year until you cancel. You can cancel at any time from your ROBOTSTXT account page — access keeps working until the end of the paid period. All payments are processed securely by Mollie; we never see or store your card details."
 msgstr "Los plugins gratis se instalan al instante y sin coste. Los plugins premium son suscripciones anuales: pagas una vez en nuestro sitio web y la suscripción se renueva automáticamente cada año hasta que la canceles. Puedes cancelarla en cualquier momento desde tu página de cuenta de ROBOTSTXT; el acceso sigue funcionando hasta el final del periodo pagado. Todos los pagos los procesa de forma segura Mollie; nosotros nunca vemos ni guardamos los datos de tu tarjeta."
+
+msgid "Installed required plugins: %s."
+msgstr "Plugins requeridos instalados: %s."
+
+msgid "Could not install the required plugin %s."
+msgstr "No se pudo instalar el plugin requerido %s."
+
+msgid "WordPress.org lookup failed: %s"
+msgstr "La búsqueda en WordPress.org falló: %s"
+
+msgid "No download found on WordPress.org for %s."
+msgstr "No se encontró ninguna descarga en WordPress.org para %s."
+
+msgid "The downloaded plugin for %s does not have the expected folder structure."
+msgstr "El plugin descargado para %s no tiene la estructura de carpetas esperada."
+
+msgid "Requires: %s"
+msgstr "Requiere: %s"
diff --git a/languages/robotstxt-manager.pot b/languages/robotstxt-manager.pot
index 2118156..dffb2a3 100644
--- a/languages/robotstxt-manager.pot
+++ b/languages/robotstxt-manager.pot
@@ -248,3 +248,21 @@ msgstr ""
 
 msgid "Free plugins install instantly at no cost. Premium plugins are annual subscriptions: you pay once on our website and the subscription renews automatically every year until you cancel. You can cancel at any time from your ROBOTSTXT account page — access keeps working until the end of the paid period. All payments are processed securely by Mollie; we never see or store your card details."
 msgstr ""
+
+msgid "Installed required plugins: %s."
+msgstr ""
+
+msgid "Could not install the required plugin %s."
+msgstr ""
+
+msgid "WordPress.org lookup failed: %s"
+msgstr ""
+
+msgid "No download found on WordPress.org for %s."
+msgstr ""
+
+msgid "The downloaded plugin for %s does not have the expected folder structure."
+msgstr ""
+
+msgid "Requires: %s"
+msgstr ""
diff --git a/readme.txt b/readme.txt
index 67dc346..7b135d2 100644
--- a/readme.txt
+++ b/readme.txt
@@ -3,9 +3,9 @@ Contributors: javiercasares, robotstxt
 Tags: dashboard, catalog, updates, subscriptions, management
 Requires at least: 4.4
 Tested up to: 7.1
-Stable tag: 1.0.0
+Stable tag: 1.1.0
 Requires PHP: 8.0
-Version: 1.0.0
+Version: 1.1.0
 License: GPL-3.0-or-later
 License URI: https://www.gnu.org/licenses/gpl-3.0.txt
 
@@ -92,6 +92,12 @@ Encrypted at rest using AES-256-CBC with a key derived from your site's WordPres
 
 == Changelog ==
 
+= 1.1.0 =
+
+_Release date: 2026-08-15_
+
+* Cascade dependency install: required plugins (ecosystem or WordPress.org, e.g. Action Scheduler) are installed automatically before the plugin; "Requires:" hints in the catalog.
+
 = 1.0.0 =
 
 _Release date: 2026-08-15_
diff --git a/robotstxt-manager.php b/robotstxt-manager.php
index f814d46..dbac845 100644
--- a/robotstxt-manager.php
+++ b/robotstxt-manager.php
@@ -3,7 +3,7 @@
  * Plugin Name:       Manager (by ROBOTSTXT)
  * Plugin URI:        https://git.robotstxt.es/ROBOTSTXT/robotstxt-manager
  * Description:       Client-side dashboard for the ROBOTSTXT plugin ecosystem. Lists the catalog from a remote Plugins Core install, resolves local install/update state, and installs, activates, and updates plugins directly from the store.
- * Version:           1.0.0
+ * Version:           1.1.0
  * Requires at least: 4.4
  * Requires PHP:      8.0
  * Author:            ROBOTSTXT
@@ -21,7 +21,7 @@ if ( ! defined( 'ABSPATH' ) ) {
 }
 
 /** Plugin version. */
-define( 'ROBOTSTXT_MANAGER_VERSION', '1.0.0' );
+define( 'ROBOTSTXT_MANAGER_VERSION', '1.1.0' );
 
 /** Absolute path to the plugin directory, with trailing slash. */
 define( 'ROBOTSTXT_MANAGER_DIR', plugin_dir_path( __FILE__ ) );

From 0e617fa4288d067f81b5e9a635e8e13fe2d5621c Mon Sep 17 00:00:00 2001
From: Javier Casares <javier@robotstxt.es>
Date: Mon, 17 Aug 2026 16:03:39 +0000
Subject: [PATCH 11/23] v1.2.0

---
 admin/class-robotstxt-manager-admin.php       |  72 ++++-
 admin/class-robotstxt-manager-settings.php    |   2 +
 admin/views/page-catalog.php                  |  52 ++++
 changelog.txt                                 |  17 ++
 .../class-robotstxt-manager-core-client.php   |  73 +++++
 languages/robotstxt-manager-ca.mo             | Bin 10430 -> 11506 bytes
 languages/robotstxt-manager-ca.po             |  26 ++
 languages/robotstxt-manager-es_ES.mo          | Bin 10405 -> 11453 bytes
 languages/robotstxt-manager-es_ES.po          |  26 ++
 languages/robotstxt-manager.pot               | 263 +-----------------
 readme.txt                                    |  10 +-
 robotstxt-manager.php                         |   4 +-
 12 files changed, 286 insertions(+), 259 deletions(-)

diff --git a/admin/class-robotstxt-manager-admin.php b/admin/class-robotstxt-manager-admin.php
index a32c40c..400631c 100644
--- a/admin/class-robotstxt-manager-admin.php
+++ b/admin/class-robotstxt-manager-admin.php
@@ -64,13 +64,78 @@ class Robotstxt_Manager_Admin {
 			wp_die( esc_html__( 'You do not have sufficient permissions to access this page.', 'robotstxt-manager' ) );
 		}
 
-		$client  = Robotstxt_Manager_Core_Client::from_options();
-		$catalog = $client->get_catalog();
-		$local   = $this->resolve_local_state( $catalog );
+		$client        = Robotstxt_Manager_Core_Client::from_options();
+		$catalog       = $client->get_catalog();
+		$local         = $this->resolve_local_state( $catalog );
+		$subscriptions = $client->get_subscriptions();
+
+		// Admin notices for subscriptions needing attention.
+		$manager_notices       = $this->build_subscription_notices( $catalog, $subscriptions );
+		$manager_subscriptions = $subscriptions;
 
 		require ROBOTSTXT_MANAGER_DIR . 'admin/views/page-catalog.php';
 	}
 
+
+	/**
+	 * Builds admin notices for subscriptions that need attention.
+	 *
+	 * - payment_failed: persistent warning per plugin.
+	 * - expiring within 14 days: per-plugin warning.
+	 * - expired while the plugin is still installed+active: per-plugin warning.
+	 *
+	 * @param list<array<string, mixed>>          $catalog       Catalog entries.
+	 * @param array<string, array<string, mixed>> $subscriptions Rows keyed by slug.
+	 *
+	 * @return list<array{type:string, message:string}>
+	 */
+	private function build_subscription_notices( array $catalog, array $subscriptions ): array {
+		$notices = array();
+		$local   = $this->resolve_local_state( $catalog );
+
+		foreach ( $subscriptions as $slug => $sub ) {
+			$raw_status     = $sub['status'] ?? '';
+			$raw_expires_at = $sub['expires_at'] ?? '';
+			$status         = is_string( $raw_status ) ? $raw_status : '';
+			$expires_at     = is_string( $raw_expires_at ) ? $raw_expires_at : '';
+
+			if ( 'payment_failed' === $status ) {
+				$notices[] = array(
+					'type'    => 'warning',
+					/* translators: %s: plugin slug. */
+					'message' => sprintf( __( 'The payment for %s failed. Update your payment method from your ROBOTSTXT account page to keep access.', 'robotstxt-manager' ), $slug ),
+				);
+				continue;
+			}
+
+			if ( 'expired' === $status ) {
+				$state = $local[ $slug ] ?? array();
+				if ( ! empty( $state['active'] ) ) {
+					$notices[] = array(
+						'type'    => 'warning',
+						/* translators: %s: plugin slug. */
+						'message' => sprintf( __( 'The subscription for %s has expired, but the plugin is still active on this site. Renew from your ROBOTSTXT account page to keep receiving updates.', 'robotstxt-manager' ), $slug ),
+					);
+				}
+				continue;
+			}
+
+			if ( 'active' === $status && '' !== $expires_at ) {
+				$days = (int) floor( ( (int) strtotime( $expires_at ) - time() ) / DAY_IN_SECONDS );
+
+				if ( $days >= 0 && $days <= 14 ) {
+					$notices[] = array(
+						'type'    => 'warning',
+						/* translators: 1: plugin slug, 2: days remaining. */
+						'message' => sprintf( _n( 'The subscription for %1$s expires in %2$d day.', 'The subscription for %1$s expires in %2$d days.', $days, 'robotstxt-manager' ), $slug, $days ),
+					);
+				}
+			}
+		}
+
+		return $notices;
+	}
+
 	/**
 	 * Handles the "Refresh catalog" admin-post action.
 	 *
@@ -100,6 +165,7 @@ class Robotstxt_Manager_Admin {
 
 		$client = Robotstxt_Manager_Core_Client::from_options();
 		$client->clear_catalog_cache();
+		$client->clear_subscriptions_cache();
 		delete_site_transient( 'update_plugins' );
 
 		$redirect = add_query_arg(
diff --git a/admin/class-robotstxt-manager-settings.php b/admin/class-robotstxt-manager-settings.php
index 6e54620..b8d5d76 100644
--- a/admin/class-robotstxt-manager-settings.php
+++ b/admin/class-robotstxt-manager-settings.php
@@ -348,6 +348,7 @@ class Robotstxt_Manager_Settings {
 		}
 
 		delete_transient( 'robotstxt_manager_catalog' );
+		delete_transient( 'robotstxt_manager_subscriptions' );
 
 		return Robotstxt_Manager_Encryption::encrypt( $plain );
 	}
@@ -406,6 +407,7 @@ class Robotstxt_Manager_Settings {
 
 		delete_option( 'robotstxt_manager_api_key' );
 		delete_transient( 'robotstxt_manager_catalog' );
+		delete_transient( 'robotstxt_manager_subscriptions' );
 
 		wp_send_json_success(
 			array(
diff --git a/admin/views/page-catalog.php b/admin/views/page-catalog.php
index 7a79180..7cdc1a2 100644
--- a/admin/views/page-catalog.php
+++ b/admin/views/page-catalog.php
@@ -7,6 +7,10 @@
  * (website link + description), an intro paragraph, and Support /
  * Payments sections below the table.
  *
+ * Also available:
+ *   $manager_subscriptions  array<string, array{status:string, expires_at:string}>
+ *                                    Account subscriptions keyed by slug (may be empty).
+ *
  * @package Robotstxt_Manager
  */
 
@@ -19,6 +23,8 @@ if ( ! defined( 'ABSPATH' ) ) {
  *
  * @var list<array<string,mixed>> $catalog
  * @var array<string, array{installed:bool, active:bool, version:string}> $local
+ * @var array<string, array<string,mixed>> $manager_subscriptions
+ * @var list<array{type:string, message:string}> $manager_notices
  */
 
 $client_configured = Robotstxt_Manager_Core_Client::from_options()->is_configured();
@@ -65,6 +71,12 @@ $compat_warnings   = 0;
 		<div class="notice notice-success is-dismissible"><p><?php esc_html_e( 'Catalog refreshed.', 'robotstxt-manager' ); ?></p></div>
 	<?php endif; ?>
 
+	<?php foreach ( ( $manager_notices ?? array() ) as $manager_notice ) : ?>
+		<div class="notice notice-<?php echo esc_attr( is_string( $manager_notice['type'] ?? '' ) ? $manager_notice['type'] : 'warning' ); ?>">
+			<p><?php echo esc_html( is_string( $manager_notice['message'] ?? '' ) ? $manager_notice['message'] : '' ); ?></p>
+		</div>
+	<?php endforeach; ?>
+
 	<?php if ( '' !== $notice_message && in_array( $notice_result, array( 'success', 'error' ), true ) ) : ?>
 		<div class="notice notice-<?php echo esc_attr( $notice_result ); ?> is-dismissible"><p><?php echo esc_html( $notice_message ); ?></p></div>
 	<?php endif; ?>
@@ -209,6 +221,46 @@ $compat_warnings   = 0;
 										number_format_i18n( $cost, 0 )
 									)
 								);
+
+								// Subscription pill for premium plugins.
+								$sub_row  = $manager_subscriptions[ $slug ] ?? null;
+								$sub_text = '';
+
+								if ( is_array( $sub_row ) ) {
+									$raw_sub_status = $sub_row['status'] ?? '';
+									$raw_sub_expiry = $sub_row['expires_at'] ?? '';
+									$sub_status     = is_string( $raw_sub_status ) ? $raw_sub_status : '';
+									$sub_expiry     = is_string( $raw_sub_expiry ) ? $raw_sub_expiry : '';
+
+									if ( 'active' === $sub_status && '' !== $sub_expiry ) {
+										$days_left = (int) floor( ( (int) strtotime( $sub_expiry ) - time() ) / DAY_IN_SECONDS );
+
+										if ( $days_left >= 0 && $days_left <= 14 ) {
+											$sub_text = sprintf(
+												/* translators: %d: days remaining. */
+												__( 'Subscribed — %d days left', 'robotstxt-manager' ),
+												$days_left
+											);
+										} else {
+											$sub_text = __( 'Subscribed', 'robotstxt-manager' );
+										}
+									} elseif ( 'payment_failed' === $sub_status ) {
+										$sub_text = __( 'Payment failed', 'robotstxt-manager' );
+									} elseif ( 'cancelled' === $sub_status ) {
+										$sub_text = __( 'Cancelled', 'robotstxt-manager' );
+									} elseif ( 'expired' === $sub_status ) {
+										$sub_text = __( 'Expired', 'robotstxt-manager' );
+									}
+								}
+
+								if ( '' !== $sub_text ) {
+									$raw_pill_status = is_array( $sub_row ) ? ( $sub_row['status'] ?? '' ) : '';
+									$pill_status     = is_string( $raw_pill_status ) ? $raw_pill_status : '';
+
+									echo '<br /><span class="robotstxt-manager-subscription robotstxt-manager-subscription--'
+										. esc_attr( $pill_status )
+										. '">' . esc_html( $sub_text ) . '</span>';
+								}
 							} else {
 								echo esc_html__( 'Free', 'robotstxt-manager' );
 							}
diff --git a/changelog.txt b/changelog.txt
index 58d7465..7da32b6 100644
--- a/changelog.txt
+++ b/changelog.txt
@@ -1,5 +1,22 @@
 == Changelog ==
 
+= 1.2.0 =
+
+_Release date: 2026-08-15_
+
+**Highlights**
+
+* Subscription status, visible at a glance (Phase 4). The catalog now pulls the account's subscriptions from Core (`GET /me/subscriptions`, cached for one hour; refreshed on catalog refresh and key change) and shows a pill next to each premium plugin's price: Subscribed (with "N days left" when expiring within 14 days), Payment failed, Cancelled, or Expired. Admin notices at the top of the page warn about failed payments, subscriptions expiring within 14 days, and expired subscriptions whose plugin is still active on this site.
+
+**Changed**
+
+* Plugin version 1.1.0 → 1.2.0. No database schema changes (no custom tables).
+
+**Compatibility**
+
+* WordPress: 4.4 - 7.1 (scan-verified: wp-compat clean from 4.4)
+* PHP: 8.0 - 8.5 (scan-verified: PHPCompatibility + manual feature audit)
+
 = 1.1.0 =
 
 _Release date: 2026-08-15_
diff --git a/includes/class-robotstxt-manager-core-client.php b/includes/class-robotstxt-manager-core-client.php
index ce39709..adb6e93 100644
--- a/includes/class-robotstxt-manager-core-client.php
+++ b/includes/class-robotstxt-manager-core-client.php
@@ -280,4 +280,77 @@ class Robotstxt_Manager_Core_Client {
 			)
 		);
 	}
+
+	/**
+	 * Returns the account's subscriptions (Core's /me/subscriptions),
+	 * cached in a transient for one hour. Keys: plugin_slug => row.
+	 *
+	 * @return array<string, array<string, mixed>> Rows keyed by plugin slug.
+	 */
+	public function get_subscriptions(): array {
+		if ( ! $this->is_configured() ) {
+			return array();
+		}
+
+		$cache_key = 'robotstxt_manager_subscriptions';
+		$cached    = get_transient( $cache_key );
+
+		if ( is_array( $cached ) ) {
+			$typed = array();
+			foreach ( $cached as $slug => $row ) {
+				if ( is_string( $slug ) && is_array( $row ) ) {
+					$typed[ $slug ] = $row;
+				}
+			}
+
+			return $typed;
+		}
+
+		$response = $this->get( '/me/subscriptions' );
+
+		if ( is_wp_error( $response ) || 200 !== (int) wp_remote_retrieve_response_code( $response ) ) {
+			return array(); // Not cached — retried on the next view.
+		}
+
+		$data = json_decode( wp_remote_retrieve_body( $response ), true );
+
+		if ( ! is_array( $data ) ) {
+			return array();
+		}
+
+		$rows = array();
+		foreach ( $data as $row ) {
+			if ( ! is_array( $row ) ) {
+				continue;
+			}
+
+			$slug = $row['plugin_slug'] ?? '';
+			$slug = is_string( $slug ) ? $slug : '';
+
+			if ( '' === $slug ) {
+				continue;
+			}
+
+			$raw_status     = $row['status'] ?? '';
+			$raw_expires_at = $row['expires_at'] ?? '';
+
+			$rows[ $slug ] = array(
+				'status'     => is_string( $raw_status ) ? $raw_status : '',
+				'expires_at' => is_string( $raw_expires_at ) ? $raw_expires_at : '',
+			);
+		}
+
+		set_transient( $cache_key, $rows, HOUR_IN_SECONDS );
+
+		return $rows;
+	}
+
+	/**
+	 * Clears the cached subscriptions response (key change, manual refresh).
+	 *
+	 * @return void
+	 */
+	public function clear_subscriptions_cache(): void {
+		delete_transient( 'robotstxt_manager_subscriptions' );
+	}
 }
diff --git a/languages/robotstxt-manager-ca.mo b/languages/robotstxt-manager-ca.mo
index dfd0845f796c12e6bb8cd4ce0d9065d0084a3d73..6d9335fa6ab43bbe2cf0f3d8b4d2a8fbbb0477ac 100644
GIT binary patch
delta 2801
zcmb8vYitx%6u|M@($Z4O8xaJ`wY0p1g;s$o2o^*vAV>kFLX6Yh+jeBSyX?$XizMp{
zNmK%6d1wq0QxfC@h%9J=NU$w_F{lZAr~whEN<axwV<ZG0|1-NK{h*27^vrK&cIMu5
z&%M)QOMj_JoEw<4P0>~pBZ!;XN+s}YE(cmio>KepYwUv?^OXwVHtdb<Sb$&QdOU;j
z{>olT@rvre@pvBZzycoLfu-0}9{q$9-cjv15>H|+{)jzrF{4N>)kq&|CEkv;I1tw%
zkE%@>-^9sWx1bDs3N`+L1F)!2slGS`r%9@_IeD5JO~^Cq0!pS=aS-M+ZJEgk%)t_T
zC5z7SL#_|d8;`2`e(C2t9L)84ltkaiT<^tETpz<>cn*uDRM$Bfjl=sZmBQIL0e{5}
zSVY>4rFNraeh?+WPmvO;vp5tx(O*K8iVdSYQn69!;&@~zwG$=beVC9LAIaSK3}q=!
zq2Dn|2c0M#Uqu<HfU-!*N8@k|pj2o9$^g}w-)pg&>qe}?<5-6UlxGgE9ZdaY=7+fP
zBz9mDr{BifQ{vB2D)HqIr7H0T%D^+Jt0Xudi*YeZ0&7t!)r?Z=jW`4Mpe#uz$^@>X
zRA9hR>i;qW6>;|{H(FR2smN2*w;Uam8SO$D_<h`pM{pA^Vfs?BZ?FP?z&mji<vNU&
zD2e`_@lTZBbJ^+jI5xqFWWE_Cqa7J{qs;6BqzLLXN&;6<mgF~-0sq1&SW%?ZM6{8~
zsqIL$)qcDeTX8eqM5)B<l!sH5c$X7-;W)}nIx=3s%T(qHp6C8)(v}1dla(aWicD6W
zMCs@<N}~C!rz~j^2UbhXL4Hy-I0o0_PuPO@$oIdcM5%YUaROy`hf32WcTql*mrzQ$
z6UjyGMkcM=Q9j3uC>6PcTkvO;fnQ`a*$Z!>B)%teeF$ZVTQOI@|1UV<OH-$DJbsTd
zP`|P1icChCX$AJg<;aJiR%HxhBiAqB9K41bv3#6T3-Jg}z@Buz63cKOzKT;4l(>Rl
z@8*Vmms0a^CrXB$D5buJ{HYrp@^B0bEeQmWTva9BhYhH)1*PQeDDPiFhVkE#P2Gc#
zeq<jcWb*_FDZQ-UBw`lPi+F-yjnu=0G)Y3*{lrW{HXzmZTXsgFtlRm*%=v@e?k(W_
z(e!mfJ=E<7Ih7JqF@Fiz68?8T6s2@k!~=xPTG|RiDkf#`YE)k>BOW1`xT+zjw7<#a
zi;zaa{We3^e-WokiP?lKgOpC1Y_2}UbYd<cpOKWakl<rb%ZYqK_J*|iY5e1399I+k
zC-(nUPe$3a-P>X=mV`LS=hMAS<3j%F$fo4~h2L^HK2B5<nvnILO7tdVw|6zZDz%D`
zFXvWEjm+E7BQG2@j$=ZpT?HR!<;{CGYR9;!Dcqiuqw6d?^<Dpltdd$c7_)0lNG*$Z
zo$8CvZ`GwC9kQBT?U*_*SvBxPS=4H7G+|HIMPj<tl@91SpjSjgmS=QxBp%aUk2D&u
zAreZK^(pS_Mf4hDqS^`ujq4`!2dzmM?WTu{dUhn7?ys!G)y7ZI)pl5ymY4X$2h{S0
z|M9r{Z_m5B!Ri`dYG|UajeFXo=cp5}XE@u{u4g+AS$cMp(PZT{$W7Zb0bOmv<{6pH
zu&&9(Owia(cDP>0{n@*z$e=TMg>x+_c<V=w6|z!Q!^dUk&$UAFpj<^qzMb2XnmLZ0
z${KwjtJtr#*Hv`SFZtTI2^l8O)NSJ?_m_M-Yo0?<>n*?VAtQBfu>5W;FQ6-fUfgnQ
zZ=I!$qdgPXjcxCF5uW2uUQ0e#R6ayUO-wghVb6r^n0Cgp5^a0k<ZGqPiAC0}r3l(>
zDS53_R)UmCTT3qfLfBS7{pV*5tME?``>CgU_9jYFZPN})-kCKp;h+_>G^zQk5SP&{
wD&l(DaUwx~86r*AB*#i7iUP&{tXxwcXHGFwD;tx=%akL?zH(F9V~%G34PNfe7ytkO

delta 1901
zcmY+^S!_&E9LMqhELEyS+bOkFr`l?(RB3Cgr7cQJ(NU6GLK-3@C5<#f$UImQu_jeS
zqUnQpAPCo%5)rXRM2IECRu7hh7pWIdzQ23NgOmQ}bI#1Y_nh<ppW9!Jx9X!GQiAP9
zYaoUZH~nTUxFU`ZS~%Y99A;q>KE)z@k9{$*w^;(F<95u(D0U*3Sh$Z_0p{ZnjNmbB
z#$LKKj=Q<m5-|hQun9{rfJaelIe~+)6I1Xy@@J1@zQVDLyHOJ+v$`;rV=}J5ez*}Q
z;11lNrCz4PpJgU`D=frR#?=_aWw^&@whFH@{z4k)+DV?K9iG7uUP3MKL2UdHGa2{b
zU<~y)8-YcbjrHg#RjqVJVZi{i-PnLi^;=ZRz9Ffy0NY5%1XQWAQJJYgvT4=085bds
zw7aN<zCdlTJ2w7_%J?6Qx(_CwdO!l|!6DQ{<4`-SMLjTrWY?N7g3VZix3LNnNSk(6
zhXFFyg4$Rs>8Zp{)cv1P^ZpExf2E{{FEr7hG;imbsML+Ya;!rxvAw8;b)a^34R<lo
zUA)P-hWu-%y|`#Rrl1x+8#VC~Jc6t70RB!V|4PM93N#7#V;0`SEBF<)(v#Fdo<jY8
z7T4hu)WXY#dJCF{+E6XBCTm7byc3n-gQ$6qV=+F9(iu(1Pu_KS#v)m>IXD@Y;~{KE
zWgwSVWH?SiUEhe>Kns2+6Wj0;<29sD8JZpT77#(EvX!X&x1tspJx)h8JC6hLIcf*r
zaU>?P-5*$jr5NVN4qSp9Z0kXiWC0$c3}v87mxHXuW})7qCR7I2;bCk+=8Kv?$E*2Z
z)Qa<B<5E;Dt5BzW0rDbP0~X*~)I^6+6JJ2ip<Rvn2%8zd!z!%JHJgVAP>1pj7W=4w
zkZqRmMOhx{!u6<$FQ9670}Js!#^W#4M1N2jO3J4kSc+lXge1idqwaT*%DDG}n|9XZ
z9?&Vw@1|cr=p1mZ&DVf7k<gBN6AKBgnpf6cq|U}-LM138v_LhT_IkJH9n|Tu{sL5)
zrV*<DzZP9YkF#YJgwm)?sBTJafQTdJ5PHuegj%Y{f1l-y#t>xH{Wq*1=jwwtj!?$b
zW_h@uGgW`yAh+)Nrj`h+LsP9P2_2ds!7J;gwFs*Toq>PNAM5B1QAu==i(}u38H7&1
zno2_D+{5hVO|MZMF_lo8Ks2~L?;PlT)d5O!UdHbZIBWV|_c=L9?Lp^Z@=9OZ{M0*b
ot)aEfleE|I&c%#8ztf$0BF@>Dd)n8wH1AzoSN;}f(x@)~Up=j;nE(I)

diff --git a/languages/robotstxt-manager-ca.po b/languages/robotstxt-manager-ca.po
index da6c088..0552f8f 100644
--- a/languages/robotstxt-manager-ca.po
+++ b/languages/robotstxt-manager-ca.po
@@ -267,3 +267,29 @@ msgstr "El plugin baixat per a %s no té lestructura de carpetes esperada."
 
 msgid "Requires: %s"
 msgstr "Requereix: %s"
+
+msgid "The payment for %s failed. Update your payment method from your ROBOTSTXT account page to keep access."
+msgstr "El pagament de %s ha fallat. Actualitza el teu mètode de pagament des de la teva pàgina de compte de ROBOTSTXT per mantenir l'accés."
+
+msgid "The subscription for %s has expired, but the plugin is still active on this site. Renew from your ROBOTSTXT account page to keep receiving updates."
+msgstr "La subscripció de %s ha caducat, però el plugin encara és actiu en aquest lloc. Renova-la des de la teva pàgina de compte de ROBOTSTXT per seguir rebent actualitzacions."
+
+msgid "Subscribed"
+msgstr "Subscrit"
+
+msgid "Subscribed — %d days left"
+msgstr "Subscrit — queden %d dies"
+
+msgid "Payment failed"
+msgstr "Pagament fallit"
+
+msgid "Cancelled"
+msgstr "Cancel·lada"
+
+msgid "Expired"
+msgstr "Caducada"
+
+msgid "The subscription for %1$s expires in %2$d day."
+msgid_plural "The subscription for %1$s expires in %2$d days."
+msgstr[0] "La subscripció de %1$s caduca en %2$d dia."
+msgstr[1] "La subscripció de %1$s caduca en %2$d dies."
diff --git a/languages/robotstxt-manager-es_ES.mo b/languages/robotstxt-manager-es_ES.mo
index 763f8f0602fa7ca2c9067e3deb392ae026b649e5..9d6dc7125ec56e30eb3f7a8aec375471c841c7be 100644
GIT binary patch
delta 2790
zcmb7^Yiv|S6vwBfbW6+op{=E5D7!)t3oY_cDhLP&R+It?NHlkMr`rqLz02Oal@iSI
z1@VKZWUU$#Vu%`TVu`p&A_f8}n22vl3`8VKO^hLY0AqqgqrY=^Yign&nC!W~nYpuP
z&iS92`_`Ic8#5QjmUJuHW^5w%N3l{Fcws0H+PQ#Iz3@C70r!+C)d0I;1v~}I;a6}c
z{0_?hHw;sXzo>Jt9{vDtgXJuK1%_a$EImet|EN>227V61@G=|%SF?-6(hBjRHo#k9
z7><QIAWPNW0$+tQ8NUH#<Fio1Kj9cyJ6x%ea2A{^p)R7cg^5nc8ucTTNUy+gu#B`N
zlZmhd2H`VBIEP0VzlS%Ls@SOfIuDL#yc0^G`wHV8IEnFbSOqV_I+5x+ohh(-v{E^^
z2u_E;!riczu-Qw!2_^FPp#*pmBB8nfD`7wMO9(}=D&!HxCP5e0L$*@;p#<CuGm`Pq
z!o<f=N^utYj-fc{hvN7Ol#R-fMI@gBt6>8ag;qh?ptbNm3|kp@z?JX>Y=h;<vjlD%
zkN%SRVJ4n{=U^7jn?UW6_){oKe0hsfi{T9@8#kk?1h@j$!PQU#*ak(ZE+|s(feYZ<
zP)gDdC4uWu6c|&9{@rX;%j|I`4pSI;;iB&>xC=@~hoEeH621mMgL`3&^hKfHU^Dy+
zN<huX^#ObmN?;Q>*}@vAVF+%4%QJ-+hoEHiAryxvU@bfYNm~5^B><U}_Z4t1oB;2D
zEpQs#4kgnA5Vh42I1iqI5_mDPNXhp@Q7F^HQzZEWO6@N}3FI>T7G<u%etAE+aA-(R
z)*Xd%iu<6Pjqjmsd;{`Rqo^w?t0pMpRRwmypBcXh?~(hzJxH`n<e*5uK9pw|iUS8q
zKzkq}sOKR+^=@JQ8z_pLhtI)&DE~{|p7--Cl#IIz;{#AiaS)cu{Xas7o2HJzdiVt-
zX>}b+rj=9k8BT`s$AwU&T@J<ZCMdORgDc_J(1q31qXoVIr^5?y6AZA)J1`7`86>XY
zZ4(o-DC8;_f#UceEQd!SKXsZ%8N3R8sUbeqs2TZFJ|9XcJSYk5gB9=)WE=l$Df<k;
z0+{&7$SIfaxqMi-ZR$>JAvO$?Xz#)vz@)LC-|pqvjLpYT+i%4M3K|FXA1w6mA2cUP
zK9V12)bc?uq+5zfR+0fn!oT-&KsR6_?|m4R@!NWy%djQ+q5njEwHA8_BXPA6Luvm^
zNZF(zxZf5?{afg+!4_e&F*&W$N-+7D$n{x@-Hk~(hGSd?wGNYVaOM5BqCml;*k+6`
zvHz)_3FYt(ZmStQ9Oc2){8y8EEgu~@lu}P=L$Sv&`J8HutE1*%QeXK#3^Z<)dK{Ch
z`A^H$1a=PzBqAmrH__bd<sTIVmTgbkDFz#dzg$wH+blcx)9Ci1VAzeM?68TdwdsMb
zzO?Hl9g6Cx)#d8AY4frx$DVFXT3sC`;psLfr9-Ybz;%OOpNv|b(OphDr3aRD7_Z%l
zW*bM;jr1J7)tIEVA`#=d*|Kq4Ge*1lt&*PYB=Y_mgRVAyfUdR^I@A>Ow{KAE+HYdH
z`+w_Q-EIwRFef@ghtr<+@SKdNV{B);+V$*soG3lJ(`cgd+GW!AOoMJU3G<XBQ#FuG
z%0!IaX(wVj?Pu@ioN>Pge7UWtl{3{<#bryaXgVUJr)zc&Ek&+)+|FIA>n#eVMRCtT
z@O;OYdt2H>EfOc~zFy1C?hjsUS{6sqn4_a6FL*rOmut|ABVO8y+dC}nrFBPNkLN`F
zC9*Ud2u-WxPbo`xSP757Q`$&ci0@>(LOU`o7V68s$%x&TOZdJ;d_pB$Z3eU_hz4~N
zi;@1nR*Ucj-%)3VPR=$dM<OZ+@7l4n$*azELK~N(gzC2A%bxD*=``_dX{df`J}KA4
c(soLtza6$sg2bs<UX2K6$+)?zp~J<01D5l~pa1{>

delta 1901
zcmZA2Sx8h-9LMqhI8K&2l{uESIi==SmhGjbZMIr!k`;y!Eff?j2t~_083aWSVv&_t
zP(jc`-8R~YvIQ)9DWS+hgA&T8Ht4DE@6Pq5gMUBgT<@Iaf6f^nth-nl`8XuD$tcyt
zNaB8s*>0>2@QV_TGrNjoFo>_Q06Q@O6Z@ORV=5lR42)na@`{BAnB`&)4#z4yg*&jH
zUJdYR-nB#=g(<iZr=TBCqUO?!!>|>H;2q@0+C4jPBJD2JfJw|Qj76A)wKx!W;&eQO
z+cni2RQR#<#OMt3F`0H5#^QQB;xntmTeQEB2C8<B-n7Ci7{cqQ2|oAQpD>;FPfWwm
zAhWSpfEiecj#5=mB@c54n>AoHD%I~%DeFN}Wqy{Cit(te%0OkN6v?KQ;a;pjy0kXb
zMBktm*yXi*Q5pY>5w~OVsSe^%9fwc@6{1$S4Ao&3l3m+~Rk#C};v<}o@uW>FD@Q*W
z+l^XSJ?WW;t*Fm;qsHwGk$<J+Cl55xu$1V^(^09LfJIo2ykbXD6Kg@O>^3$rP#Zp^
zy`KE*c^WTG!f~jH*PsU8ip{tOk7F>6{A=ZB*q~y(h?-D0-oya;*Tn95KEW{UcHEBN
zz2`L}qARMy(LCRRL$Luh@LAM2mr;lB8s=k9gh~#T5P8=M=O9_LDx85^uo+uWdpL_L
zqRcEp7GaxFsXUAwWTF8-)2`(uWui13-RpAHAzXuWWxG)0MUGR^iZ7r}?^Cbc>1kuk
zzVbW+XJY~{pT{!P06nPB{X$J7$N^vu7Q!r?jC#Hnm4P}uhTD+OMeH{fbu=(Dy225t
zb~Y;YQ&AlhBNxFIU@lgpGI1F7UJEL7mr$9yi`t@RxD*SS%?dn#dH4b|eeC}aDwBDT
zn$1ba<){u$qW10rYOk)MuFX4C>bg-|_XmqGOhc)yMNMo!s-M&7!#F~Pvue!A9dkD0
zyH^HmJi)u}EY+StXvO`BRfJ~Em9<60EMhgmcZ*FUG(i=e_DZ+LS2oV|>MK$EKZno(
z?JJQAYMON^p)^k+w0~NGp9m0(38heXUPWpCzbFF}2$Jc34eReq^ovqR@D<^fg`Q%8
z_MaQ%?zbK&{b5xo%ZYh}4oxhf)6N-l|M`@m&Ol#@@haMuafGg(?tfn?p~6LTi?);<
zv#D;2yy^6o6UFX>=>4qr>e|1V#C#&?yp3z{JDU>j_?*mOQ>^nMX@jqEMe^gu`p{<Q
lRm!h8=jEuOG0wO20|94m)+JwKN%n`v6FK{wguLr9{{XKbsZ0O>

diff --git a/languages/robotstxt-manager-es_ES.po b/languages/robotstxt-manager-es_ES.po
index 35554f4..8083a59 100644
--- a/languages/robotstxt-manager-es_ES.po
+++ b/languages/robotstxt-manager-es_ES.po
@@ -267,3 +267,29 @@ msgstr "El plugin descargado para %s no tiene la estructura de carpetas esperada
 
 msgid "Requires: %s"
 msgstr "Requiere: %s"
+
+msgid "The payment for %s failed. Update your payment method from your ROBOTSTXT account page to keep access."
+msgstr "El pago de %s falló. Actualiza tu método de pago desde tu página de cuenta de ROBOTSTXT para mantener el acceso."
+
+msgid "The subscription for %s has expired, but the plugin is still active on this site. Renew from your ROBOTSTXT account page to keep receiving updates."
+msgstr "La suscripción de %s ha caducado, pero el plugin sigue activo en este sitio. Renuévela desde tu página de cuenta de ROBOTSTXT para seguir recibiendo actualizaciones."
+
+msgid "Subscribed"
+msgstr "Suscrito"
+
+msgid "Subscribed — %d days left"
+msgstr "Suscrito — quedan %d días"
+
+msgid "Payment failed"
+msgstr "Pago fallido"
+
+msgid "Cancelled"
+msgstr "Cancelada"
+
+msgid "Expired"
+msgstr "Caducada"
+
+msgid "The subscription for %1$s expires in %2$d day."
+msgid_plural "The subscription for %1$s expires in %2$d days."
+msgstr[0] "La suscripción de %1$s caduca en %2$d día."
+msgstr[1] "La suscripción de %1$s caduca en %2$d días."
diff --git a/languages/robotstxt-manager.pot b/languages/robotstxt-manager.pot
index dffb2a3..38a56d3 100644
--- a/languages/robotstxt-manager.pot
+++ b/languages/robotstxt-manager.pot
@@ -1,268 +1,27 @@
-# Copyright (C) 2026 ROBOTSTXT
-# This file is distributed under the GPL-3.0-or-later.
-msgid ""
-msgstr ""
-"Project-Id-Version: Manager (by ROBOTSTXT) 0.6.0\n"
-"Report-Msgid-Bugs-To: https://wordpress.org/support/plugin/robotstxt-manager\n"
-"Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
-"Language-Team: LANGUAGE <LL@li.org>\n"
-"MIME-Version: 1.0\n"
-"Content-Type: text/plain; charset=UTF-8\n"
-"Content-Transfer-Encoding: 8bit\n"
-"POT-Creation-Date: 2026-08-15T12:00:00+00:00\n"
-"PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
-"X-Generator: manual\n"
-"X-Domain: robotstxt-manager\n"
-
-msgid "%d plugin in the catalog is not compatible with this site's WordPress or PHP version."
-msgstr ""
-
-msgid "%s activated."
-msgstr ""
-
-msgid "%s installed. Activate it from the list below."
-msgstr ""
-
-msgid "%s updated."
-msgstr ""
-
-msgid "(about %s)"
-msgstr ""
-
-msgid "A key is stored (last 4 characters: <code>%s</code>). Leave blank to keep the existing key; enter a new value to replace it."
-msgstr ""
-
-msgid "A key is stored but could not be decoded. You can replace it by entering a new value above, or delete it with the button below."
-msgstr ""
-
-msgid "API Key"
-msgstr ""
-
-msgid "API key deleted. Save changes to persist."
-msgstr ""
-
-msgid "API key is not configured."
-msgstr ""
-
-msgid "Account-level API key issued by the ROBOTSTXT store. Required to authenticate catalog and subscription requests. The value is encrypted before storage."
-msgstr ""
-
-msgid "Action"
-msgstr ""
-
-msgid "Activate"
-msgstr ""
-
-msgid "An unexpected error occurred."
-msgstr ""
-
-msgid "Base URL of the remote Plugins Core installation that this site will pull the plugin catalog from."
-msgstr ""
-
-msgid "Buy"
-msgstr ""
-
-msgid "Cache"
-msgstr ""
-
-msgid "Catalog Cache (minutes)"
-msgstr ""
-
-msgid "Catalog refreshed."
-msgstr ""
 
-msgid "Connected."
-msgstr ""
-
-msgid "Connection"
-msgstr ""
-
-msgid "Could not create a temporary file for download."
-msgstr ""
-
-msgid "Could not reach Plugins Core: %s"
-msgstr ""
-
-msgid "Data on Uninstall"
-msgstr ""
-
-msgid "Delete API key"
-msgstr ""
-
-msgid "Delete all plugin data when the plugin is uninstalled."
-msgstr ""
-
-msgid "Delete the stored API key? The catalog and subscription data will stop working until a new key is entered."
-msgstr ""
 
-msgid "Deleting…"
+msgid "The payment for %s failed. Update your payment method from your ROBOTSTXT account page to keep access."
 msgstr ""
 
-msgid "Download failed (HTTP %d)."
+msgid "The subscription for %s has expired, but the plugin is still active on this site. Renew from your ROBOTSTXT account page to keep receiving updates."
 msgstr ""
 
-msgid "Download failed: %s"
-msgstr ""
-
-msgid "Free"
-msgstr ""
-
-msgid "How long the catalog response from Core is cached in a transient. Default: 60 minutes. Lower values refresh more often at the cost of more requests to Core. Maximum: 1440 (24 hours)."
-msgstr ""
-
-msgid "Incompatible"
-msgstr ""
-
-msgid "Install"
-msgstr ""
-
-msgid "Installation failed."
-msgstr ""
-
-msgid "Installation failed: %s"
-msgstr ""
-
-msgid "Installed (inactive)"
-msgstr ""
-
-msgid "Insufficient permissions."
-msgstr ""
-
-
-msgid "Manager (by ROBOTSTXT) — Plugins"
-msgstr ""
-
-msgid "Manager (by ROBOTSTXT) — Settings"
-msgstr ""
-
-msgid "No plugins were returned by the ROBOTSTXT store. Check the Store URL and API key on the Settings page, or click Refresh to try again."
-msgstr ""
-
-msgid "Not installed"
-msgstr ""
-
-msgid "Plugin"
-msgstr ""
-
-msgid "Plugin is not installed."
-msgstr ""
-
-msgid "Plugin not found in catalog."
-msgstr ""
-
-
-msgid "Price"
-msgstr ""
-
-msgid "ROBOTSTXT"
-msgstr ""
-
-msgid "ROBOTSTXT Manager is not configured yet. <a href=\"%s\">Set the Store URL and API key</a> to see your plugin catalog."
-msgstr ""
-
-msgid "Refresh catalog"
-msgstr ""
-
-msgid "Requires PHP"
-msgstr ""
-
-msgid "Requires WP"
-msgstr ""
-
-msgid "Settings"
-msgstr ""
-
-
-msgid "Store URL"
-msgstr ""
-
-msgid "Store URL is not configured."
-msgstr ""
-
-msgid "Store is not configured."
-msgstr ""
-
-msgid "Test connection"
-msgstr ""
-
-msgid "Testing…"
-msgstr ""
-
-msgid "The API key format is invalid. Copy the full key from your ROBOTSTXT account page."
-msgstr ""
-
-msgid "The store responded with HTTP %d. Check the Store URL and API key."
-msgstr ""
-
-msgid "The store returned an invalid file."
-msgstr ""
-
-msgid "This site runs WordPress %1$s on PHP %2$s."
-msgstr ""
-
-msgid "Too many refreshes. Please wait a minute before refreshing again."
-msgstr ""
-
-
-msgid "Up to date"
-msgstr ""
-
-msgid "Update"
-msgstr ""
-
-msgid "Update available (v%1$s → v%2$s)"
-msgstr ""
-
-msgid "Visit website"
-msgstr ""
-
-msgid "You do not have sufficient permissions to access this page."
-msgstr ""
-
-msgid "Your server runs PHP"
-msgstr ""
-
-msgid "Your site runs WordPress"
-msgstr ""
-
-msgid "This is the ROBOTSTXT plugin store: the catalog of plugins published by ROBOTSTXT, installable and updatable straight from your own wp-admin. Free plugins install with one click; premium plugins require an annual subscription that you purchase on our website."
-msgstr ""
-
-msgid "Version"
-msgstr ""
-
-msgid "Status"
-msgstr ""
-
-msgid "€%s / year"
-msgstr ""
-
-msgid "Support"
-msgstr ""
-
-msgid "Need help with a ROBOTSTXT plugin? Visit the plugin's website (the link in its row above) for documentation and guides, or contact us through our website — we are happy to help."
-msgstr ""
-
-msgid "Payments, and how it works"
-msgstr ""
-
-msgid "Free plugins install instantly at no cost. Premium plugins are annual subscriptions: you pay once on our website and the subscription renews automatically every year until you cancel. You can cancel at any time from your ROBOTSTXT account page — access keeps working until the end of the paid period. All payments are processed securely by Mollie; we never see or store your card details."
-msgstr ""
-
-msgid "Installed required plugins: %s."
-msgstr ""
+msgid "The subscription for %1$s expires in %2$d day."
+msgid_plural "The subscription for %1$s expires in %2$d days."
+msgstr[0] ""
+msgstr[1] ""
 
-msgid "Could not install the required plugin %s."
+msgid "Subscribed"
 msgstr ""
 
-msgid "WordPress.org lookup failed: %s"
+msgid "Subscribed — %d days left"
 msgstr ""
 
-msgid "No download found on WordPress.org for %s."
+msgid "Payment failed"
 msgstr ""
 
-msgid "The downloaded plugin for %s does not have the expected folder structure."
+msgid "Cancelled"
 msgstr ""
 
-msgid "Requires: %s"
+msgid "Expired"
 msgstr ""
diff --git a/readme.txt b/readme.txt
index 7b135d2..b6ebec8 100644
--- a/readme.txt
+++ b/readme.txt
@@ -3,9 +3,9 @@ Contributors: javiercasares, robotstxt
 Tags: dashboard, catalog, updates, subscriptions, management
 Requires at least: 4.4
 Tested up to: 7.1
-Stable tag: 1.1.0
+Stable tag: 1.2.0
 Requires PHP: 8.0
-Version: 1.1.0
+Version: 1.2.0
 License: GPL-3.0-or-later
 License URI: https://www.gnu.org/licenses/gpl-3.0.txt
 
@@ -92,6 +92,12 @@ Encrypted at rest using AES-256-CBC with a key derived from your site's WordPres
 
 == Changelog ==
 
+= 1.2.0 =
+
+_Release date: 2026-08-15_
+
+* Subscription status (Phase 4): pills next to premium prices (Subscribed / N days left / Payment failed / Cancelled / Expired) and admin notices for failed payments, upcoming expiries, and expired-but-active plugins. Cached hourly from Core's /me/subscriptions.
+
 = 1.1.0 =
 
 _Release date: 2026-08-15_
diff --git a/robotstxt-manager.php b/robotstxt-manager.php
index dbac845..fb9e7a3 100644
--- a/robotstxt-manager.php
+++ b/robotstxt-manager.php
@@ -3,7 +3,7 @@
  * Plugin Name:       Manager (by ROBOTSTXT)
  * Plugin URI:        https://git.robotstxt.es/ROBOTSTXT/robotstxt-manager
  * Description:       Client-side dashboard for the ROBOTSTXT plugin ecosystem. Lists the catalog from a remote Plugins Core install, resolves local install/update state, and installs, activates, and updates plugins directly from the store.
- * Version:           1.1.0
+ * Version:           1.2.0
  * Requires at least: 4.4
  * Requires PHP:      8.0
  * Author:            ROBOTSTXT
@@ -21,7 +21,7 @@ if ( ! defined( 'ABSPATH' ) ) {
 }
 
 /** Plugin version. */
-define( 'ROBOTSTXT_MANAGER_VERSION', '1.1.0' );
+define( 'ROBOTSTXT_MANAGER_VERSION', '1.2.0' );
 
 /** Absolute path to the plugin directory, with trailing slash. */
 define( 'ROBOTSTXT_MANAGER_DIR', plugin_dir_path( __FILE__ ) );

From 30451228f73e2584bea3a4dfe68c2c5489e163b0 Mon Sep 17 00:00:00 2001
From: Javier Casares <javier@robotstxt.es>
Date: Mon, 17 Aug 2026 16:04:38 +0000
Subject: [PATCH 12/23] v1.2.1

---
 admin/views/page-catalog.php | 23 +++++++++++++++++++++++
 changelog.txt                | 17 +++++++++++++++++
 readme.txt                   | 10 ++++++++--
 robotstxt-manager.php        |  4 ++--
 4 files changed, 50 insertions(+), 4 deletions(-)

diff --git a/admin/views/page-catalog.php b/admin/views/page-catalog.php
index 7cdc1a2..0cc556d 100644
--- a/admin/views/page-catalog.php
+++ b/admin/views/page-catalog.php
@@ -132,6 +132,7 @@ $compat_warnings   = 0;
 					$raw_desc = $entry['description'] ?? '';
 					$raw_rwp  = $entry['requires_wp'] ?? '';
 					$raw_rphp = $entry['requires_php'] ?? '';
+					$raw_icon = $entry['icon_url'] ?? '';
 
 					$slug     = is_string( $raw_slug ) ? $raw_slug : '';
 					$name     = is_string( $raw_name ) ? $raw_name : $slug;
@@ -143,6 +144,7 @@ $compat_warnings   = 0;
 					$desc     = is_string( $raw_desc ) ? trim( $raw_desc ) : '';
 					$req_wp   = is_string( $raw_rwp ) ? $raw_rwp : '';
 					$req_php  = is_string( $raw_rphp ) ? $raw_rphp : '';
+					$icon_url = is_string( $raw_icon ) ? esc_url_raw( $raw_icon ) : '';
 
 					$website_url = '' !== $page_url ? $page_url : $homepage;
 					$has_detail  = ( '' !== $website_url || '' !== $desc );
@@ -184,6 +186,11 @@ $compat_warnings   = 0;
 					?>
 					<tr class="<?php echo esc_attr( ltrim( $row_class ) ); ?>">
 						<td class="robotstxt-manager-name-cell">
+							<?php if ( '' !== $icon_url ) : ?>
+								<img class="robotstxt-manager-plugin-icon" src="<?php echo esc_url( $icon_url ); ?>" alt="" width="64" height="64" loading="lazy" />
+							<?php else : ?>
+								<span class="robotstxt-manager-plugin-icon robotstxt-manager-plugin-icon--placeholder" aria-hidden="true"></span>
+							<?php endif; ?>
 							<strong><?php echo esc_html( $name ); ?></strong>
 						</td>
 						<td><?php echo '' !== $remote_v ? esc_html( $remote_v ) : '&mdash;'; ?></td>
@@ -382,4 +389,20 @@ $compat_warnings   = 0;
 /* Detail rows (always open): muted, attached to the row above. */
 .robotstxt-manager-detail-row td { border-top: none !important; padding-top: 0; }
 .robotstxt-manager-detail-description { color: #50575e; }
+
+/* Plugin icons: 64x64, 1:1, beside the name. */
+.robotstxt-manager-plugin-icon {
+	display: inline-block;
+	vertical-align: middle;
+	width: 64px;
+	height: 64px;
+	margin-right: 10px;
+	border-radius: 4px;
+	object-fit: contain;
+	background: #fff;
+}
+.robotstxt-manager-plugin-icon--placeholder {
+	border: 1px solid #dcdcde;
+	box-sizing: border-box;
+}
 </style>
diff --git a/changelog.txt b/changelog.txt
index 7da32b6..c032561 100644
--- a/changelog.txt
+++ b/changelog.txt
@@ -1,5 +1,22 @@
 == Changelog ==
 
+= 1.2.1 =
+
+_Release date: 2026-08-17_
+
+**Added**
+
+* Plugin icons in the catalog: each row shows the plugin's `icon_url` from the Core API at 64×64 px (1:1, lazy-loaded) in the Plugin column; plugins without an icon get a plain white 64×64 placeholder.
+
+**Changed**
+
+* Plugin version 1.2.0 → 1.2.1. No database schema changes (no custom tables).
+
+**Compatibility**
+
+* WordPress: 4.4 - 7.1 (scan-verified: wp-compat clean from 4.4)
+* PHP: 8.0 - 8.5 (scan-verified: PHPCompatibility + manual feature audit)
+
 = 1.2.0 =
 
 _Release date: 2026-08-15_
diff --git a/readme.txt b/readme.txt
index b6ebec8..7b8c566 100644
--- a/readme.txt
+++ b/readme.txt
@@ -3,9 +3,9 @@ Contributors: javiercasares, robotstxt
 Tags: dashboard, catalog, updates, subscriptions, management
 Requires at least: 4.4
 Tested up to: 7.1
-Stable tag: 1.2.0
+Stable tag: 1.2.1
 Requires PHP: 8.0
-Version: 1.2.0
+Version: 1.2.1
 License: GPL-3.0-or-later
 License URI: https://www.gnu.org/licenses/gpl-3.0.txt
 
@@ -92,6 +92,12 @@ Encrypted at rest using AES-256-CBC with a key derived from your site's WordPres
 
 == Changelog ==
 
+= 1.2.1 =
+
+_Release date: 2026-08-17_
+
+* Plugin icons in the catalog rows (64×64, from the store's `icon_url`; white placeholder when missing).
+
 = 1.2.0 =
 
 _Release date: 2026-08-15_
diff --git a/robotstxt-manager.php b/robotstxt-manager.php
index fb9e7a3..c6d5428 100644
--- a/robotstxt-manager.php
+++ b/robotstxt-manager.php
@@ -3,7 +3,7 @@
  * Plugin Name:       Manager (by ROBOTSTXT)
  * Plugin URI:        https://git.robotstxt.es/ROBOTSTXT/robotstxt-manager
  * Description:       Client-side dashboard for the ROBOTSTXT plugin ecosystem. Lists the catalog from a remote Plugins Core install, resolves local install/update state, and installs, activates, and updates plugins directly from the store.
- * Version:           1.2.0
+ * Version:           1.2.1
  * Requires at least: 4.4
  * Requires PHP:      8.0
  * Author:            ROBOTSTXT
@@ -21,7 +21,7 @@ if ( ! defined( 'ABSPATH' ) ) {
 }
 
 /** Plugin version. */
-define( 'ROBOTSTXT_MANAGER_VERSION', '1.2.0' );
+define( 'ROBOTSTXT_MANAGER_VERSION', '1.2.1' );
 
 /** Absolute path to the plugin directory, with trailing slash. */
 define( 'ROBOTSTXT_MANAGER_DIR', plugin_dir_path( __FILE__ ) );

From e3bfd7b6f2158397c19e03c8bb0ff3a0ad86bd3e Mon Sep 17 00:00:00 2001
From: Javier Casares <javier@robotstxt.es>
Date: Mon, 17 Aug 2026 16:05:38 +0000
Subject: [PATCH 13/23] v1.3.0

---
 admin/class-robotstxt-manager-admin.php       |   2 +
 admin/class-robotstxt-manager-settings.php    |   2 +-
 admin/views/page-catalog.php                  |  54 ++++++++++++------
 changelog.txt                                 |  19 ++++++
 .../class-robotstxt-manager-core-client.php   |  28 +++++++--
 languages/robotstxt-manager-ca.mo             | Bin 11506 -> 12607 bytes
 languages/robotstxt-manager-ca.po             |   6 ++
 languages/robotstxt-manager-es_ES.mo          | Bin 11453 -> 12518 bytes
 languages/robotstxt-manager-es_ES.po          |   6 ++
 languages/robotstxt-manager.pot               |   6 ++
 readme.txt                                    |  10 +++-
 robotstxt-manager.php                         |   4 +-
 12 files changed, 108 insertions(+), 29 deletions(-)

diff --git a/admin/class-robotstxt-manager-admin.php b/admin/class-robotstxt-manager-admin.php
index 400631c..1921cc6 100644
--- a/admin/class-robotstxt-manager-admin.php
+++ b/admin/class-robotstxt-manager-admin.php
@@ -72,6 +72,8 @@ class Robotstxt_Manager_Admin {
 		// Admin notices for subscriptions needing attention.
 		$manager_notices       = $this->build_subscription_notices( $catalog, $subscriptions );
 		$manager_subscriptions = $subscriptions;
+		$manager_has_api_key   = $client->has_api_key();
+		$manager_store_url     = $client->get_store_url();
 
 		require ROBOTSTXT_MANAGER_DIR . 'admin/views/page-catalog.php';
 	}
diff --git a/admin/class-robotstxt-manager-settings.php b/admin/class-robotstxt-manager-settings.php
index b8d5d76..cddc28f 100644
--- a/admin/class-robotstxt-manager-settings.php
+++ b/admin/class-robotstxt-manager-settings.php
@@ -263,7 +263,7 @@ class Robotstxt_Manager_Settings {
 			}
 			echo '</p>';
 		} else {
-			echo '<p class="description">' . esc_html__( 'Account-level API key issued by the ROBOTSTXT store. Required to authenticate catalog and subscription requests. The value is encrypted before storage.', 'robotstxt-manager' ) . '</p>';
+			echo '<p class="description">' . esc_html__( 'Account-level API key from the ROBOTSTXT store (create your free account there to get one). Optional — the free catalog works without it — but required to link your subscriptions, install premium plugins, and receive their updates. Encrypted before storage.', 'robotstxt-manager' ) . '</p>';
 		}
 
 		// Action buttons.
diff --git a/admin/views/page-catalog.php b/admin/views/page-catalog.php
index 0cc556d..522a2a5 100644
--- a/admin/views/page-catalog.php
+++ b/admin/views/page-catalog.php
@@ -25,6 +25,8 @@ if ( ! defined( 'ABSPATH' ) ) {
  * @var array<string, array{installed:bool, active:bool, version:string}> $local
  * @var array<string, array<string,mixed>> $manager_subscriptions
  * @var list<array{type:string, message:string}> $manager_notices
+ * @var bool   $manager_has_api_key
+ * @var string $manager_store_url
  */
 
 $client_configured = Robotstxt_Manager_Core_Client::from_options()->is_configured();
@@ -77,6 +79,22 @@ $compat_warnings   = 0;
 		</div>
 	<?php endforeach; ?>
 
+	<?php if ( empty( $manager_has_api_key ) && '' !== ( $manager_store_url ?? '' ) ) : ?>
+		<div class="notice notice-info">
+			<p>
+				<?php
+				echo wp_kses_post(
+					sprintf(
+						/* translators: %s: store registration URL. */
+						__( 'Create your free account at the <a href="%s" target="_blank" rel="noopener noreferrer">ROBOTSTXT store</a> to get your personal API key. The key links your subscriptions to this site and unlocks premium plugins and updates.', 'robotstxt-manager' ),
+						esc_url( $manager_store_url . '/wp-login.php?action=register' )
+					)
+				);
+				?>
+			</p>
+		</div>
+	<?php endif; ?>
+
 	<?php if ( '' !== $notice_message && in_array( $notice_result, array( 'success', 'error' ), true ) ) : ?>
 		<div class="notice notice-<?php echo esc_attr( $notice_result ); ?> is-dismissible"><p><?php echo esc_html( $notice_message ); ?></p></div>
 	<?php endif; ?>
@@ -149,6 +167,14 @@ $compat_warnings   = 0;
 					$website_url = '' !== $page_url ? $page_url : $homepage;
 					$has_detail  = ( '' !== $website_url || '' !== $desc );
 
+					// Subscription state: premium plugins are only usable
+					// (install/update) with an active or in-grace subscription.
+					$is_premium = ( $cost > 0.0 || 'premium' === $kind );
+					$sub_row    = $manager_subscriptions[ $slug ] ?? null;
+					$raw_status = is_array( $sub_row ) ? ( $sub_row['status'] ?? '' ) : '';
+					$sub_status = is_string( $raw_status ) ? $raw_status : '';
+					$subscribed = in_array( $sub_status, array( 'active', 'payment_failed' ), true );
+
 					$raw_reqs  = $entry['requires_plugins'] ?? '';
 					$req_slugs = array();
 					if ( is_string( $raw_reqs ) && '' !== trim( $raw_reqs ) ) {
@@ -220,7 +246,7 @@ $compat_warnings   = 0;
 						</td>
 						<td>
 							<?php
-							if ( $cost > 0.0 || 'premium' === $kind ) {
+							if ( $is_premium ) {
 								echo esc_html(
 									sprintf(
 										/* translators: %s: formatted price number. */
@@ -230,13 +256,10 @@ $compat_warnings   = 0;
 								);
 
 								// Subscription pill for premium plugins.
-								$sub_row  = $manager_subscriptions[ $slug ] ?? null;
 								$sub_text = '';
 
 								if ( is_array( $sub_row ) ) {
-									$raw_sub_status = $sub_row['status'] ?? '';
 									$raw_sub_expiry = $sub_row['expires_at'] ?? '';
-									$sub_status     = is_string( $raw_sub_status ) ? $raw_sub_status : '';
 									$sub_expiry     = is_string( $raw_sub_expiry ) ? $raw_sub_expiry : '';
 
 									if ( 'active' === $sub_status && '' !== $sub_expiry ) {
@@ -261,11 +284,8 @@ $compat_warnings   = 0;
 								}
 
 								if ( '' !== $sub_text ) {
-									$raw_pill_status = is_array( $sub_row ) ? ( $sub_row['status'] ?? '' ) : '';
-									$pill_status     = is_string( $raw_pill_status ) ? $raw_pill_status : '';
-
 									echo '<br /><span class="robotstxt-manager-subscription robotstxt-manager-subscription--'
-										. esc_attr( $pill_status )
+										. esc_attr( $sub_status )
 										. '">' . esc_html( $sub_text ) . '</span>';
 								}
 							} else {
@@ -274,18 +294,16 @@ $compat_warnings   = 0;
 							?>
 						</td>
 						<td>
-							<?php if ( ! $l_installed ) : ?>
-								<?php if ( ! $wp_ok || ! $php_ok ) : ?>
-									<span class="description"><?php esc_html_e( 'Incompatible', 'robotstxt-manager' ); ?></span>
+							<?php if ( ! $wp_ok || ! $php_ok ) : ?>
+								<span class="description"><?php esc_html_e( 'Incompatible', 'robotstxt-manager' ); ?></span>
+							<?php elseif ( $is_premium && ! $subscribed ) : ?>
+								<?php if ( '' !== $page_url ) : ?>
+									<a class="button button-primary" href="<?php echo esc_url( $page_url ); ?>" target="_blank" rel="noopener noreferrer"><?php esc_html_e( 'Buy', 'robotstxt-manager' ); ?></a>
 								<?php else : ?>
-									<?php if ( $cost > 0.0 && '' !== $page_url ) : ?>
-										<a class="button button-secondary" href="<?php echo esc_url( $page_url ); ?>" target="_blank" rel="noopener noreferrer"><?php esc_html_e( 'Buy', 'robotstxt-manager' ); ?></a>
-									<?php endif; ?>
-									<?php
-									$install_class = ( $cost > 0.0 && '' !== $page_url ) ? 'button-secondary' : 'button-primary';
-									?>
-									<a class="button <?php echo esc_attr( $install_class ); ?>" href="<?php echo esc_url( Robotstxt_Manager_Admin::action_url( 'install', $slug ) ); ?>"><?php esc_html_e( 'Install', 'robotstxt-manager' ); ?></a>
+									&mdash;
 								<?php endif; ?>
+							<?php elseif ( ! $l_installed ) : ?>
+								<a class="button button-primary" href="<?php echo esc_url( Robotstxt_Manager_Admin::action_url( 'install', $slug ) ); ?>"><?php esc_html_e( 'Install', 'robotstxt-manager' ); ?></a>
 							<?php elseif ( ! $l_active ) : ?>
 								<a class="button button-primary" href="<?php echo esc_url( Robotstxt_Manager_Admin::action_url( 'activate', $slug ) ); ?>"><?php esc_html_e( 'Activate', 'robotstxt-manager' ); ?></a>
 							<?php elseif ( $update_available ) : ?>
diff --git a/changelog.txt b/changelog.txt
index c032561..0fcf438 100644
--- a/changelog.txt
+++ b/changelog.txt
@@ -1,5 +1,24 @@
 == Changelog ==
 
+= 1.3.0 =
+
+_Release date: 2026-08-17_
+
+**Highlights**
+
+* The catalog now works **without an API key**: only the Store URL is required. The free catalog, prices, and product pages are public on Core, so a fresh install shows the store immediately. An info notice invites visitors to create their free account at the store to get a personal API key (linking subscriptions and unlocking premium plugins and updates).
+
+**Changed**
+
+* Action buttons follow subscription state: premium plugins without an active subscription show **Buy** only (Install/Update hidden — the download would be rejected); with an active or in-grace subscription (and for free plugins) they show **Install / Activate / Update** as usual. Previously premium rows always offered Install alongside Buy.
+* The API-key setting description clarifies the key is optional for browsing, required for subscriptions/premium.
+* Plugin version 1.2.1 → 1.3.0. No database schema changes (no custom tables).
+
+**Compatibility**
+
+* WordPress: 4.4 - 7.1 (scan-verified: wp-compat clean from 4.4)
+* PHP: 8.0 - 8.5 (scan-verified: PHPCompatibility + manual feature audit)
+
 = 1.2.1 =
 
 _Release date: 2026-08-17_
diff --git a/includes/class-robotstxt-manager-core-client.php b/includes/class-robotstxt-manager-core-client.php
index adb6e93..672c66f 100644
--- a/includes/class-robotstxt-manager-core-client.php
+++ b/includes/class-robotstxt-manager-core-client.php
@@ -91,12 +91,25 @@ class Robotstxt_Manager_Core_Client {
 	}
 
 	/**
-	 * Returns whether the client has both a URL and a key configured.
+	 * Returns whether the client can talk to the store.
+	 *
+	 * Only the Store URL is required: the catalog (free plugins, prices,
+	 * product pages) is public on Core. The API key is optional — it is
+	 * needed for subscription data and premium downloads, not for listing.
 	 *
 	 * @return bool
 	 */
 	public function is_configured(): bool {
-		return '' !== $this->store_url && '' !== $this->api_key;
+		return '' !== $this->store_url;
+	}
+
+	/**
+	 * Returns whether an API key is configured.
+	 *
+	 * @return bool
+	 */
+	public function has_api_key(): bool {
+		return '' !== $this->api_key;
 	}
 
 	/**
@@ -269,13 +282,16 @@ class Robotstxt_Manager_Core_Client {
 	private function get( string $endpoint ) {
 		$url = $this->store_url . '/wp-json/' . self::REST_NAMESPACE . $endpoint;
 
+		$headers = array( 'Accept' => 'application/json' );
+
+		if ( '' !== $this->api_key ) {
+			$headers['Authorization'] = 'Bearer ' . $this->api_key;
+		}
+
 		return wp_remote_get(
 			$url,
 			array(
-				'headers' => array(
-					'Authorization' => 'Bearer ' . $this->api_key,
-					'Accept'        => 'application/json',
-				),
+				'headers' => $headers,
 				'timeout' => self::TIMEOUT,
 			)
 		);
diff --git a/languages/robotstxt-manager-ca.mo b/languages/robotstxt-manager-ca.mo
index 6d9335fa6ab43bbe2cf0f3d8b4d2a8fbbb0477ac..e313bbfbb6f56a2c898f59fea1d3c40c05cdcfb3 100644
GIT binary patch
delta 3078
zcmbW1Yitx%6vuDNqw*+yXhopFZE2N4*&@_}&=y)KSOJUBD#$};x6^j$bf(PAwiF3#
zh^Su>6CivuHO2=dglJPVYLr-`Au);{43a1sKuwVt1V2D9#NV0SA|dd_n?3WpcXsZ%
z=lsu^xxD_fXyQ!n@B@mm8Oz7U4pS-t{~5uBaWzA!Bk&r`gzwy=R0Q_JG4MPb4KKkR
z@H&+J+eRtH7IhVtKzV2)m;pzmDOCp#%A+grGLk>eLH4Q(a5B6CqcCTzQpBVJC^2n=
z_*6ULc=!s;g}qP$=}YlbSjPGUlmM<l4X2UC&u}Tskx+}qDaB7!aH)WGa0}c4i9!7i
zCGsoqUN|l*nOPwm&UyxXiHyqNG1kYjQ4x0JB%j+3?_<3SO27wG>!Wb0Nc9Di3Gh5D
zgg4+cSU_5Runx|E*WhkgL=;kr!;qNNhfo6i3W}0v;RA3GN=ef>U6h*&MY&?=!!np4
zX!Rx&iMS6+#>Z3Zuc4IWGz=X>aWDwQ@f9csW#=WOFM*R-mqV%jYAF8KrT%Y&YgqfR
z9)6jJ{w++h?^mi8c0<YhBPb1d2JVAZ=r#<Azk{O0_ncY-MK-B<EtCLPK~b;~N&wwZ
zluE#<a1UGvk3eEqgA>qSGPuDFQD8hezQ{pE@DtXDNJkWDA>BF9gObr(P!8^g`{8l8
z2R6~UqS!e&A6|q7uy~463-G%f_OsqaG!pRqgicNtL3wZ)Y=v!5GB^n(upd(V6-tJe
zAu6goHc22ep_HZq%E61_Y}f-!;bAx?O{r5*n(!P>Xb+XR&g4-hS?InO)<cozG$dH{
zCzK7DMaj&HQ;fht9L|Hk@PEOB$w1Q|N(Ph#r57eb@lydM;3kMm)efm{LhWTD8NChh
zp-#Yy@DePCKTTKab(mX{?DqGdl;Aj|YU(5uDK9{&@n2BBA2~G2a99RM!E*Q-tcDz{
zzJ;0c{{O~AB>p?Rp;X$;WX-dnyf%{{ue2(F_*QeE9JCQit#?4lbT^bh-hjNR>fIDS
zh8?WGfwi!bdb|u1a0Tb9j9JO9UJKW;-U*MuQ*bsC?~W)nm-VqSz6J0C90O-l;L)%W
z;#)0;8PJCk!1GWPeHAW%{ZPY8P!!L3m>|SKITOwa8$u)>hKVDomvlYPhmwnIoUImP
zBI!n~0(%^jLA>Eu#I+ieL#bjo(o+;jGO3YJt5UONL$}~cY)xwYSc+0286q*23f~sV
zZV4uR@C>#B6Nzb=a6HX*Ikq&p46jncCaeLANc}f35&7ghAe}FR(uAXm>l4^otOk1o
zqv69L%_W~-d3&TR3o%hM6O#^q3X}ejW|UE%M0k}lZ^m+^{?a^DAZ#jdbF5}oiD~Rf
zY-q^)osH#S@@mPDMqQ6JVp3baM`|7>eIl>#&?siI3FG?~j=qx_?dgdY&+X7bo2l0{
z)HXD(ZCux={lN81Jw4``Mquh5H}2^c&os3Wi@9+pkf-@SaCNI0XxA}IBD$e7uw2Km
z_1PEphu*>sF(WW+w^et$Uc0Zmt)R_~2igk4r=m<fGqE*pd1kYCvn{7Rd72-O`Z3Q6
zefp)^a(w*Qy3;c|tayj+wBxPZE7gY6jEk6QbrDXRX?Z%{*-XrSMAtbnuctG>bJT2+
zbR;RG)r_c`WEQh*v&*z~-`vrEq$QTzEmb4TR#zIj%`;o73XA<h9T*;oR~0@RwGF4e
zkO=ImLdSJGO~>@K!(lC^=b2t%^=*<?mKoJUvW2R4nw~GJJ*R6{*Xwq(C!!mv1d~t<
z{|;)%{-DkBwQo@y5g_i^ZVY*EQz!XfN{+tCV;5&9noVsRI_d^itD#x^7hYIvjm87L
z8c_l>u48To^66I32;u`r15K>jjRvM;d9!RIEO{&}`2yKNr3ZR#vsK)t%5!t8uUp~{
z&n6s0`=;ZYY_N?|@i_3l9ysJ{hZ_3+K(A*R;W=HF6N}r1r)|?Gm@ckEEg@&#Y>Cf5
zkcWoO8xp{xB2g+Xn~hiyH*71|Zp5sS?4&XF{g^+guO`1KJ*@iO(l!2X&F`#mSo&Ke
zltOGEGegI0BOaE2s2L)9W$JE9hP$bt4Q*_Vn|`2eIzU@!??-KyTU(5MSu^wUt#GFw
Q>UXOUqC?+-DVxUq3p;EqF8}}l

delta 2038
zcmYk+Sx6O89LMp0noC+%wrR`N)G}MtY_rw0#a1n|(vm2NHY#W#D1=L^5Jg4%gGDGr
z54PRxL0ZLni5AEQqlM~HVhd3bMYMf?b0@e5|MQudJ2U5h{^uNTmVYVrzKCsm)M#Zy
zZ{k;onHQghaiBFvnAPGF?0}V#X6bkoqp=aA@DWzvQ`Gw<?aX+^nlTMuVo!|X;p5m3
z!}aKOPI$)}u@BzIa(s`WSU@kzr3m?km0%An$5`BkJZk%0PhbYu)u@giV<P^>&gf}x
z7K52MQmN)}vW6R5kZ0@_D$|eH1tS@@M$#MGVhZkQ!^iO|*BAL3kJ`$Pf#)`3SFS5i
zi5_yV&tU@BH!vPwV3JDpgOg<J)yd3<IXDo%;%@YiHhozQD)Y;z1aBiHv}YKHesrb~
zRk3)=qlzWqCQL)RvMN-<wdmD|>)ji7QB(04oe!fv;75J<BdVh)%A%4dV=qicRcHpP
zgCh6$axCI{9ZttvxB{anPabaQO8qtRE8JLu&3G6`bz|-+@jX-}9(Fg&#h<8-$5B@$
zn2$+VfJ$Hks#04~rLM%WcosD!e$)VdpeoQgj{5JSBM*14aif}vQAL(g-z;2<8qsM~
z#~1Jj*5iIGWcaGsbIiuK*cTHhR~_b}68-M_2laaxD}5!VdO1<%2T&OucdbE<>=IH0
zYeFUP4mBm;P#yloOw9I}4aU{T;OrPuZ99*nu>lX@FH|M=Q65gsdxjIea0@k(X4hBP
zN@d>ROYS$3wi2u(D<#r^4A$<WKGcdzG?Mw$lzKQYTb76XWTn_2EARtW<8bZ&gDGaG
zxN!%yx|jD0lzbCvo9slDunNh=YLG!&BWgRoMpdK*58`K3$2;gvYvCj+@w4vr71R_r
zV3_v*15Vg!)`V&J2Gvo=)IdctP$SL8a4bePf-QDkkL$SJj(PYAD=}+;*-Wg*ff&xm
zOK>RG;$F=3QsQiW9mb8-gUqI26)HnNs??v5Kl{lc0{b)3N+2D{)pBtRuEIpDMwPq~
z^?nP|jq{Ecbts|lXdQU9c+v@#Uh_AEm_W2677@&mO(WElgxYvw9H9kBwVf8?DuxD~
z&vefx2i=>&`JBMD*QN&jpi`BYiaArjl5qBY9IABFiHU?ptu~)f#Z>nHjq2MxVm86R
zt(2hB&LY>2P@~{Z8>{)B#pzrkhtM>rbZS~$9f(oHBtqLr<!n!|8LXIyB(yfv@&h=>
z1sux={u4X@sxwfFHn<gVQK(UA`vkX<T<D*U7A5~LoEFA$AyGsm5}NN3L^Pq*{=c!S
hY%vk<YmL|#;#(H&Z{tge$?4=fl`uNQ=T9n&`3D(u!M*?h

diff --git a/languages/robotstxt-manager-ca.po b/languages/robotstxt-manager-ca.po
index 0552f8f..3c5406d 100644
--- a/languages/robotstxt-manager-ca.po
+++ b/languages/robotstxt-manager-ca.po
@@ -293,3 +293,9 @@ msgid "The subscription for %1$s expires in %2$d day."
 msgid_plural "The subscription for %1$s expires in %2$d days."
 msgstr[0] "La subscripció de %1$s caduca en %2$d dia."
 msgstr[1] "La subscripció de %1$s caduca en %2$d dies."
+
+msgid "Create your free account at the <a href=\"%s\" target=\"_blank\" rel=\"noopener noreferrer\">ROBOTSTXT store</a> to get your personal API key. The key links your subscriptions to this site and unlocks premium plugins and updates."
+msgstr "Crea el teu compte gratuït a <a href=\"%s\" target=\"_blank\" rel=\"noopener noreferrer\">la botiga de ROBOTSTXT</a> per obtenir la teva clau API personal. La clau vincula les teves subscripcions a aquest lloc i desbloqueja els plugins premium i les seves actualitzacions."
+
+msgid "Account-level API key from the ROBOTSTXT store (create your free account there to get one). Optional — the free catalog works without it — but required to link your subscriptions, install premium plugins, and receive their updates. Encrypted before storage."
+msgstr "Clau API a nivell de compte de la botiga de ROBOTSTXT (crea allà el teu compte gratuït per obtenir-la). Opcional: el catàleg de plugins gratuïts funciona sense ella, però és necessària per vincular les teves subscripcions, instal·lar plugins premium i rebre les actualitzacions. Es xifra abans de desar-se."
diff --git a/languages/robotstxt-manager-es_ES.mo b/languages/robotstxt-manager-es_ES.mo
index 9d6dc7125ec56e30eb3f7a8aec375471c841c7be..40903e87319abf49532a328027cafb5f47a968d1 100644
GIT binary patch
delta 3074
zcmbW2Yit!o6vu}`L7-qk5P1)!Amwq3f`CBL7OEm32t`2@+<QB1mu`12`zVwUuF*(L
zfbankH8GKxC@~>wZg@x{F~LAIeh?BM8Uqmsq-qS25Ara?-`Twdg7u4&p8d_t&YU^t
ze`asLT6xLJo$cRkm!hr4hG8XLmCC`ti+Rwl^-yXbybk-oPwrDH1^2_=@FMI5ufR?4
zCY1dfdMd>hbq!WPSu_NUhs9l#s)f5{=>oiT=fwrcUiB*+4zI#A>{p@`F{uzrOdB9R
z)n+&dz6JZk51|B-FYpMgWc)3Z0Iov~N0Y@lI1l!dP|N!&#h;qSV;Zc5YvCqH4C*qJ
z$gjc&VBh<b%*tRl#^d1@GOC0J7#}D_McC3WS+@}mVEj6ifOi+hpTUtL)i-no!;7#C
z-h!jyDALNqS~wnFhi}4iqL5O23W-S_f)e0yC`z7(55aaQB`xA~QEns@<;K7OR>B-X
ztB>eN#Ca$ge_a@V52YkO!q_ns2klTCUxji|>A*z#3OJPUR4BDy0>%G|!uuw;lyLy(
z!(#){zkyEagG$xF^-wZD4CO+eg*#ytx^+e36Ht^m#i`X$WRsfLKnZXW6b0*`1h5{8
zQaLyhZilnrK1l4UeK7h<2Dg|H1qPwxE)FV(M;IR_9hq+<-N|qZl#C8SIrunyAD)EU
zVGB1`6uJp#!{QN1KsB%ezXtASeh1M=fVDZDbQVGW)N&qcVJnmczd*^X9g5>C5FhFW
zL>x7ER1(N!DDP*%X|NVffScerxEEf7C!l2h9Wrq}RPG#|>2$6_$z%fh%N;ldMY5An
z6#5g&UFcn&1T+Ai?n1rc1$jRvQR?*AWZeabsOoo!II8=@$-$$clxPN|nmM(qFcB2^
z4!q2QFX2qMhw%5npP`gub49|f5C`gAC<=WJ<#*#CBo=k5Fn<&FWL(6>*#=9X?0XNE
z$oKyR9m)7eJb^T@2jeqP9G`=H(&`e#m--8eGNaH}6sd-i;j>WoHA0crgT3J!a4p;c
z=ffLNKEHVrm0HO8>JS}#s^UpXy#y!2y>KfmN8+g|r5<IxvXVpKHYkqIz+UhI#HacL
zN<c%nsZ!(75Yf~OD7W5%66gm|5;zQV;^-$joD)Yq6?VlW6F$@UU|z?!UM?JGs3$Rz
z^kqygn*=3|c;og2&pDWsk1EEks6fG#JN=wmR2V#UXHqSsFFzF0o=FhbUb<2eQEL=7
z7MqL7MHA%~U^SRzE$v0@X>6Vh3QbD599xW~r2ebuh<tL(MK)<vByLqapTm}6)!1Vg
z7d~#?c*@W3<5(>w5=%MyV0<j<1x(5zmr|P4zN4+6vl{C!^&g5of=Ny8Zc7-<#x(Xk
z*3o9rDaH6V5&ss*y!^he#Og5lyrj<4F)6Ry_KqfB#w*y6!bJXu9?eC$2H$JZVUy8I
z7uPJVTUNKCP6wgq8$B-L8!I%r&5L~9;2Wc@Ova1cP*(Fk^mL;Mwdb0OlwO<-ZO^qF
zeg3t#V{h?>j1^jr*QnQfesiGL+hLOzh1w3|RcX4u$*qfQ-_(mY$99{O(}E}+WPCgJ
z8BEl+8{o&$S>LqSQH#zxQ6qB`wdL01B4g}U!f7(LucK@|F$XDK>t_76Y>4NyX^?az
zDXY<>RCSWYB*(NGN9U*X`mIZD?ti6f#o6lFmTvM*Lsi+BpiGCBPvTW&YtoM8HkT2B
zQ&r}AUe>tA*Di-O7~eO3*_?YMon2|o>5wf}HEaApRC`rdFPX2KO<PLWQ3*P+7(pj$
z$o{a&4s>8s8xbIK9WR5t_o$P+E69-_Ub4D0S8udq>CiTAy`>r42`{d-M&qOVbQtMO
zWZclwjlLB|Hl3{HTiQ#9lAvS7<<7+Ao~e<LDj(fLnLY7Ys7<_=C>tU-UP-uaj>V2O
zQIoZ&O`u&W7g)Ys@ZV~?naHtx0wB96z5ue<+`a+4>u}$ZY@5{IPE&bya6!Y!a_o&(
zvM;5V8J)2k2;Oo-v$J@3X@1SHnxeSeo#koV|6A$Kb&U&tw|McPPR`=KO2s?spVA90
zopEHkpu)dJ&=#6ea_Vk-x(%&^wBxOdjHMlq>L=gC?OV{+sUT{e6?#Gb;}L`U{sVHP
BE#LqE

delta 2038
zcmY+^Sx8h-9LMp$lc~*=wpp5{W?I=|wr`fLR%TYVnQb(ILJ%!RR0PvY*+VNKMbJYO
zRFslU2?<8g0@+>=Mi$jTA>l(sAX3!#cjpFnnE(CUbMKwA{Lel2^M;01f%iQltBkUS
zNG5)H%mUclnFFOM+N>JiU^lFcG0Vm(^x-}9;&a@KZ&Cj*>0-uTtO>L51NK8N51+(L
zjMAeGobVsJhyC#h`td7v!XkRnSc;K0tOWa_AA8~+<WW29dJ0EUKZol06{g{D?13p=
z&0;YJ$7`s0oNVI4PUIQ;h#F}t_QDvZt(hcaBxc}&2pY#a>Q`xvN3A?A{M-)gO?@wF
zpvT?%B}}D$3ls4@rYlu#oD9UI?q)&E!=d;C_hSmfrY}2>8u>NU0Pi3vv}R1e5IReU
z%2*=lQN~iS0<(~=><nta)fmu>>)i_vP)qR&orX~jgisB)qB`=D7NvY3CSf)zLj|Y~
zirxEuET+C0=i_ZGLoex>iQ9UUf6e?l7uI1Dp1=w5tUW1ygv!LTK4vqp9o2CzdDQ^t
zVmcO~2Cxm4sokhlSK<`BfLf9eY65Mj4D?7K|5bF9!qr<`xX!}pMg{rJ!F{M1)uKAS
zgQxK^9>#K}uMGXfT>OI?P%i1Zf$LENi|5Uj{V@$QaTDeT+#9v18QnxRcpFo&5t+2L
zpa!6ey6?mB7>~oS5QpF{)J)GJ*|s{IfQ_hudq|6x{0u5XflC~fl830Z|AZRISA0!o
zzGF!D2e>Z{)6;YHsJHko>fLyU>bM>GSsd$1mTfeuUf{YJzfeDhlePbMWiVPU1W~D9
zo*CAUYG4a$K$S=m><IF+EAI7|sEoY9Ll{E+Z|k6NI|orSu5#;VQA<&SQQH4?oUqfZ
z0kiNaGHGi=%`{<fc!mQ|f1HL&Z9b~uQq)?O;e3376_~_&6yi}Fip^Mx(R6YV{g@FT
z#Xjzi=0Xk&S%4c+4cDL->ye+`=MaP6&`CAYro{~pzvUBAOR)nrf#c}ITBIB2YpH%Z
z5z&O&2<R=>_go(qcAJeLrV(8Tjdm<Ck5HjMr%dITOH3rlwo^Q=VpNCo1@8Im4%alv
z#o>Cu@;ltnX%wMZX$HI!&c4?RT0$tj(+O6_Da$#|A!dfF&XMffQeq*&#BCKprk!^}
z%cerYoiau1U&!eaB99nD=xtSrB=j-S_L)UYBD5S`2{wZ*BeWcBd8f>E6)T7}1Yct3
zQ#}&(@^&mmR2FGgY|a0Q_O(7bdMUM@DxHaygg&Qf1Y5_(5n5k;AO00~m8~WcgDuh9
ZJ;4pWP(&~zc5V0I<<vo*U}Ji6>|e3cyxsr+

diff --git a/languages/robotstxt-manager-es_ES.po b/languages/robotstxt-manager-es_ES.po
index 8083a59..fb239cd 100644
--- a/languages/robotstxt-manager-es_ES.po
+++ b/languages/robotstxt-manager-es_ES.po
@@ -293,3 +293,9 @@ msgid "The subscription for %1$s expires in %2$d day."
 msgid_plural "The subscription for %1$s expires in %2$d days."
 msgstr[0] "La suscripción de %1$s caduca en %2$d día."
 msgstr[1] "La suscripción de %1$s caduca en %2$d días."
+
+msgid "Create your free account at the <a href=\"%s\" target=\"_blank\" rel=\"noopener noreferrer\">ROBOTSTXT store</a> to get your personal API key. The key links your subscriptions to this site and unlocks premium plugins and updates."
+msgstr "Crea tu cuenta gratuita en <a href=\"%s\" target=\"_blank\" rel=\"noopener noreferrer\">la tienda de ROBOTSTXT</a> para obtener tu clave API personal. La clave vincula tus suscripciones a este sitio y desbloquea los plugins premium y sus actualizaciones."
+
+msgid "Account-level API key from the ROBOTSTXT store (create your free account there to get one). Optional — the free catalog works without it — but required to link your subscriptions, install premium plugins, and receive their updates. Encrypted before storage."
+msgstr "Clave API a nivel de cuenta de la tienda de ROBOTSTXT (crea allí tu cuenta gratuita para obtenerla). Opcional: el catálogo de plugins gratis funciona sin ella, pero es necesaria para vincular tus suscripciones, instalar plugins premium y recibir sus actualizaciones. Se cifra antes de guardarse."
diff --git a/languages/robotstxt-manager.pot b/languages/robotstxt-manager.pot
index 38a56d3..4d2d0c3 100644
--- a/languages/robotstxt-manager.pot
+++ b/languages/robotstxt-manager.pot
@@ -25,3 +25,9 @@ msgstr ""
 
 msgid "Expired"
 msgstr ""
+
+msgid "Create your free account at the <a href=\"%s\" target=\"_blank\" rel=\"noopener noreferrer\">ROBOTSTXT store</a> to get your personal API key. The key links your subscriptions to this site and unlocks premium plugins and updates."
+msgstr ""
+
+msgid "Account-level API key from the ROBOTSTXT store (create your free account there to get one). Optional — the free catalog works without it — but required to link your subscriptions, install premium plugins, and receive their updates. Encrypted before storage."
+msgstr ""
diff --git a/readme.txt b/readme.txt
index 7b8c566..e19ed1b 100644
--- a/readme.txt
+++ b/readme.txt
@@ -3,9 +3,9 @@ Contributors: javiercasares, robotstxt
 Tags: dashboard, catalog, updates, subscriptions, management
 Requires at least: 4.4
 Tested up to: 7.1
-Stable tag: 1.2.1
+Stable tag: 1.3.0
 Requires PHP: 8.0
-Version: 1.2.1
+Version: 1.3.0
 License: GPL-3.0-or-later
 License URI: https://www.gnu.org/licenses/gpl-3.0.txt
 
@@ -92,6 +92,12 @@ Encrypted at rest using AES-256-CBC with a key derived from your site's WordPres
 
 == Changelog ==
 
+= 1.3.0 =
+
+_Release date: 2026-08-17_
+
+* Catalog works without an API key (only the Store URL is needed); free plugins are listed and installable, and an info notice links to the store to register and get a personal key. Premium plugins show Buy only until subscribed; with an active subscription they show Install/Update.
+
 = 1.2.1 =
 
 _Release date: 2026-08-17_
diff --git a/robotstxt-manager.php b/robotstxt-manager.php
index c6d5428..ea76084 100644
--- a/robotstxt-manager.php
+++ b/robotstxt-manager.php
@@ -3,7 +3,7 @@
  * Plugin Name:       Manager (by ROBOTSTXT)
  * Plugin URI:        https://git.robotstxt.es/ROBOTSTXT/robotstxt-manager
  * Description:       Client-side dashboard for the ROBOTSTXT plugin ecosystem. Lists the catalog from a remote Plugins Core install, resolves local install/update state, and installs, activates, and updates plugins directly from the store.
- * Version:           1.2.1
+ * Version:           1.3.0
  * Requires at least: 4.4
  * Requires PHP:      8.0
  * Author:            ROBOTSTXT
@@ -21,7 +21,7 @@ if ( ! defined( 'ABSPATH' ) ) {
 }
 
 /** Plugin version. */
-define( 'ROBOTSTXT_MANAGER_VERSION', '1.2.1' );
+define( 'ROBOTSTXT_MANAGER_VERSION', '1.3.0' );
 
 /** Absolute path to the plugin directory, with trailing slash. */
 define( 'ROBOTSTXT_MANAGER_DIR', plugin_dir_path( __FILE__ ) );

From a2d13200309221cb3321b62d561e572bba7f9c96 Mon Sep 17 00:00:00 2001
From: Javier Casares <javier@robotstxt.es>
Date: Mon, 17 Aug 2026 16:06:40 +0000
Subject: [PATCH 14/23] v1.3.1

---
 admin/views/page-catalog.php                 | 15 +++++++++++--
 changelog.txt                                | 17 +++++++++++++++
 includes/class-robotstxt-manager-updater.php | 23 +++++++++++++++++++-
 readme.txt                                   | 10 +++++++--
 robotstxt-manager.php                        |  4 ++--
 5 files changed, 62 insertions(+), 7 deletions(-)

diff --git a/admin/views/page-catalog.php b/admin/views/page-catalog.php
index 522a2a5..ce4c70f 100644
--- a/admin/views/page-catalog.php
+++ b/admin/views/page-catalog.php
@@ -167,6 +167,17 @@ $compat_warnings   = 0;
 					$website_url = '' !== $page_url ? $page_url : $homepage;
 					$has_detail  = ( '' !== $website_url || '' !== $desc );
 
+					// Localised description: the admin user's locale first,
+					// falling back to the (English) default.
+					$raw_translations = $entry['description_translations'] ?? '';
+					$translations     = is_array( $raw_translations ) ? $raw_translations : array();
+					$user_locale      = function_exists( 'get_user_locale' ) ? get_user_locale() : get_locale();
+					$locale_text      = $translations[ $user_locale ] ?? '';
+					$display_desc     = is_string( $locale_text ) && '' !== trim( $locale_text )
+						? trim( $locale_text )
+						: $desc;
+					$has_detail       = ( '' !== $website_url || '' !== $desc || '' !== $display_desc );
+
 					// Subscription state: premium plugins are only usable
 					// (install/update) with an active or in-grace subscription.
 					$is_premium = ( $cost > 0.0 || 'premium' === $kind );
@@ -337,8 +348,8 @@ $compat_warnings   = 0;
 							<?php if ( '' !== $website_url ) : ?>
 								<a href="<?php echo esc_url( $website_url ); ?>" target="_blank" rel="noopener noreferrer"><?php esc_html_e( 'Visit website', 'robotstxt-manager' ); ?> <span class="screen-reader-text"><?php echo esc_html( sprintf( /* translators: %s: plugin name. */ __( '(about %s)', 'robotstxt-manager' ), $name ) ); ?></span></a>
 							<?php endif; ?>
-							<?php if ( '' !== $desc ) : ?>
-								<span class="robotstxt-manager-detail-description"><?php echo esc_html( $desc ); ?></span>
+							<?php if ( '' !== $display_desc ) : ?>
+								<span class="robotstxt-manager-detail-description"><?php echo esc_html( $display_desc ); ?></span>
 							<?php endif; ?>
 							<?php if ( array() !== $req_slugs ) : ?>
 								<span class="robotstxt-manager-detail-requires">
diff --git a/changelog.txt b/changelog.txt
index 0fcf438..61aeca7 100644
--- a/changelog.txt
+++ b/changelog.txt
@@ -1,5 +1,22 @@
 == Changelog ==
 
+= 1.3.1 =
+
+_Release date: 2026-08-17_
+
+**Added**
+
+* Localized descriptions: catalog rows and the "View details" modal show the description in the logged-in admin's language (`get_user_locale()`, falling back to the site locale), using the new `description_translations` map from Core 1.8.0+; missing translations fall back to the English default.
+
+**Changed**
+
+* Plugin version 1.3.0 → 1.3.1. No database schema changes (no custom tables).
+
+**Compatibility**
+
+* WordPress: 4.4 - 7.1 (scan-verified: wp-compat clean from 4.4)
+* PHP: 8.0 - 8.5 (scan-verified: PHPCompatibility + manual feature audit)
+
 = 1.3.0 =
 
 _Release date: 2026-08-17_
diff --git a/includes/class-robotstxt-manager-updater.php b/includes/class-robotstxt-manager-updater.php
index ca8a746..50cd2fe 100644
--- a/includes/class-robotstxt-manager-updater.php
+++ b/includes/class-robotstxt-manager-updater.php
@@ -210,7 +210,7 @@ class Robotstxt_Manager_Updater {
 				'requires_php' => $this->str( $row, 'requires_php', '' ),
 				'tested_up_to' => $this->str( $row, 'tested_up_to', '' ),
 				'page_url'     => $this->str( $row, 'page_url', '' ),
-				'description'  => $this->str( $row, 'description', '' ),
+				'description'  => $this->localized_description( $row ),
 				'icon_url'     => $this->str( $row, 'icon_url', '' ),
 				'banner_url'   => $this->str( $row, 'banner_url', '' ),
 			);
@@ -340,6 +340,27 @@ class Robotstxt_Manager_Updater {
 		return $slug;
 	}
 
+	/**
+	 * Picks the description for the current admin user's locale, falling
+	 * back to the default (English) description.
+	 *
+	 * @param array<string, mixed> $row Catalog row.
+	 *
+	 * @return string The localized (or default) description.
+	 */
+	private function localized_description( array $row ): string {
+		$raw_translations = $row['description_translations'] ?? '';
+		$translations     = is_array( $raw_translations ) ? $raw_translations : array();
+		$user_locale      = function_exists( 'get_user_locale' ) ? get_user_locale() : get_locale();
+		$locale_text      = $translations[ $user_locale ] ?? '';
+
+		if ( is_string( $locale_text ) && '' !== trim( $locale_text ) ) {
+			return trim( $locale_text );
+		}
+
+		return $this->str( $row, 'description', '' );
+	}
+
 	/**
 	 * Extracts a string value from a mixed-value row.
 	 *
diff --git a/readme.txt b/readme.txt
index e19ed1b..a87fd6b 100644
--- a/readme.txt
+++ b/readme.txt
@@ -3,9 +3,9 @@ Contributors: javiercasares, robotstxt
 Tags: dashboard, catalog, updates, subscriptions, management
 Requires at least: 4.4
 Tested up to: 7.1
-Stable tag: 1.3.0
+Stable tag: 1.3.1
 Requires PHP: 8.0
-Version: 1.3.0
+Version: 1.3.1
 License: GPL-3.0-or-later
 License URI: https://www.gnu.org/licenses/gpl-3.0.txt
 
@@ -92,6 +92,12 @@ Encrypted at rest using AES-256-CBC with a key derived from your site's WordPres
 
 == Changelog ==
 
+= 1.3.1 =
+
+_Release date: 2026-08-17_
+
+* Descriptions render in the admin's language (Core 1.8.0+ `description_translations`), English fallback.
+
 = 1.3.0 =
 
 _Release date: 2026-08-17_
diff --git a/robotstxt-manager.php b/robotstxt-manager.php
index ea76084..d3e8a99 100644
--- a/robotstxt-manager.php
+++ b/robotstxt-manager.php
@@ -3,7 +3,7 @@
  * Plugin Name:       Manager (by ROBOTSTXT)
  * Plugin URI:        https://git.robotstxt.es/ROBOTSTXT/robotstxt-manager
  * Description:       Client-side dashboard for the ROBOTSTXT plugin ecosystem. Lists the catalog from a remote Plugins Core install, resolves local install/update state, and installs, activates, and updates plugins directly from the store.
- * Version:           1.3.0
+ * Version:           1.3.1
  * Requires at least: 4.4
  * Requires PHP:      8.0
  * Author:            ROBOTSTXT
@@ -21,7 +21,7 @@ if ( ! defined( 'ABSPATH' ) ) {
 }
 
 /** Plugin version. */
-define( 'ROBOTSTXT_MANAGER_VERSION', '1.3.0' );
+define( 'ROBOTSTXT_MANAGER_VERSION', '1.3.1' );
 
 /** Absolute path to the plugin directory, with trailing slash. */
 define( 'ROBOTSTXT_MANAGER_DIR', plugin_dir_path( __FILE__ ) );

From 21df13f02abf7fff5ce47719db7eba7eb89d9c11 Mon Sep 17 00:00:00 2001
From: Javier Casares <javier@robotstxt.es>
Date: Mon, 17 Aug 2026 16:07:31 +0000
Subject: [PATCH 15/23] v1.4.0

---
 changelog.txt                                 | 13 +++++++
 .../class-robotstxt-manager-core-client.php   | 39 +++++++++++++++++++
 includes/class-robotstxt-manager-updater.php  | 17 ++++++--
 readme.txt                                    | 10 ++++-
 robotstxt-manager.php                         |  4 +-
 5 files changed, 75 insertions(+), 8 deletions(-)

diff --git a/changelog.txt b/changelog.txt
index 61aeca7..a6f7d91 100644
--- a/changelog.txt
+++ b/changelog.txt
@@ -1,5 +1,18 @@
 == Changelog ==
 
+= 1.4.0 =
+
+_Release date: 2026-08-17_
+
+**Changed**
+
+* Premium package URLs use short-lived download tokens (Core 1.9.0+ `POST /me/download-token`): the updater exchanges the account key each update cycle and embeds the 15-minute token instead of the API key, so the long-lived key no longer sits in the `update_plugins` transient or server access logs. Falls back to the API-key flow automatically on older Core. (Closes the 0.5.1 audit finding.)
+
+**Compatibility**
+
+* WordPress: 4.4 - 7.1 (scan-verified: wp-compat clean from 4.4)
+* PHP: 8.0 - 8.5 (scan-verified: PHPCompatibility + manual feature audit)
+
 = 1.3.1 =
 
 _Release date: 2026-08-17_
diff --git a/includes/class-robotstxt-manager-core-client.php b/includes/class-robotstxt-manager-core-client.php
index 672c66f..d969da3 100644
--- a/includes/class-robotstxt-manager-core-client.php
+++ b/includes/class-robotstxt-manager-core-client.php
@@ -361,6 +361,45 @@ class Robotstxt_Manager_Core_Client {
 		return $rows;
 	}
 
+	/**
+	 * Exchanges the account API key for a short-lived download token
+	 * (Core 1.9.0+ `POST /me/download-token`).
+	 *
+	 * @param string $slug Plugin slug the token may download.
+	 *
+	 * @return string Token string, or '' when unavailable (older Core, no
+	 *                key, inactive subscription, or transport error —
+	 *                callers fall back to the API-key flow).
+	 */
+	public function exchange_download_token( string $slug ): string {
+		if ( ! $this->has_api_key() ) {
+			return '';
+		}
+
+		$response = wp_remote_post(
+			$this->store_url . '/wp-json/' . self::REST_NAMESPACE . '/me/download-token',
+			array(
+				'headers' => array(
+					'Authorization' => 'Bearer ' . $this->api_key,
+					'Accept'        => 'application/json',
+					'Content-Type'  => 'application/json',
+				),
+				'body'    => (string) wp_json_encode( array( 'slug' => $slug ) ),
+				'timeout' => self::TIMEOUT,
+			)
+		);
+
+		if ( is_wp_error( $response ) || 200 !== (int) wp_remote_retrieve_response_code( $response ) ) {
+			return '';
+		}
+
+		$data = json_decode( wp_remote_retrieve_body( $response ), true );
+
+		$token = is_array( $data ) ? ( $data['token'] ?? '' ) : '';
+
+		return is_string( $token ) ? $token : '';
+	}
+
 	/**
 	 * Clears the cached subscriptions response (key change, manual refresh).
 	 *
diff --git a/includes/class-robotstxt-manager-updater.php b/includes/class-robotstxt-manager-updater.php
index 50cd2fe..ae2ba11 100644
--- a/includes/class-robotstxt-manager-updater.php
+++ b/includes/class-robotstxt-manager-updater.php
@@ -300,11 +300,20 @@ class Robotstxt_Manager_Updater {
 		);
 
 		if ( 'premium' === $type ) {
-			$api_key_raw = get_option( 'robotstxt_manager_api_key', '' );
-			$api_key     = is_string( $api_key_raw ) ? Robotstxt_Manager_Encryption::decrypt( $api_key_raw ) : '';
+			// Preferred: a short-lived download token (Core 1.9.0+) — keeps the
+			// long-lived API key out of the update transient and access logs.
+			$token = $client->exchange_download_token( $slug );
 
-			if ( '' !== $api_key ) {
-				$args['api_key'] = $api_key;
+			if ( '' !== $token ) {
+				$args['token'] = $token;
+			} else {
+				// Fallback (older Core): the API key itself.
+				$api_key_raw = get_option( 'robotstxt_manager_api_key', '' );
+				$api_key     = is_string( $api_key_raw ) ? Robotstxt_Manager_Encryption::decrypt( $api_key_raw ) : '';
+
+				if ( '' !== $api_key ) {
+					$args['api_key'] = $api_key;
+				}
 			}
 		}
 
diff --git a/readme.txt b/readme.txt
index a87fd6b..f83cd64 100644
--- a/readme.txt
+++ b/readme.txt
@@ -3,9 +3,9 @@ Contributors: javiercasares, robotstxt
 Tags: dashboard, catalog, updates, subscriptions, management
 Requires at least: 4.4
 Tested up to: 7.1
-Stable tag: 1.3.1
+Stable tag: 1.4.0
 Requires PHP: 8.0
-Version: 1.3.1
+Version: 1.4.0
 License: GPL-3.0-or-later
 License URI: https://www.gnu.org/licenses/gpl-3.0.txt
 
@@ -92,6 +92,12 @@ Encrypted at rest using AES-256-CBC with a key derived from your site's WordPres
 
 == Changelog ==
 
+= 1.4.0 =
+
+_Release date: 2026-08-17_
+
+* Premium update URLs carry a short-lived download token (Core 1.9.0+) instead of the API key; automatic fallback on older Core.
+
 = 1.3.1 =
 
 _Release date: 2026-08-17_
diff --git a/robotstxt-manager.php b/robotstxt-manager.php
index d3e8a99..36e9340 100644
--- a/robotstxt-manager.php
+++ b/robotstxt-manager.php
@@ -3,7 +3,7 @@
  * Plugin Name:       Manager (by ROBOTSTXT)
  * Plugin URI:        https://git.robotstxt.es/ROBOTSTXT/robotstxt-manager
  * Description:       Client-side dashboard for the ROBOTSTXT plugin ecosystem. Lists the catalog from a remote Plugins Core install, resolves local install/update state, and installs, activates, and updates plugins directly from the store.
- * Version:           1.3.1
+ * Version:           1.4.0
  * Requires at least: 4.4
  * Requires PHP:      8.0
  * Author:            ROBOTSTXT
@@ -21,7 +21,7 @@ if ( ! defined( 'ABSPATH' ) ) {
 }
 
 /** Plugin version. */
-define( 'ROBOTSTXT_MANAGER_VERSION', '1.3.1' );
+define( 'ROBOTSTXT_MANAGER_VERSION', '1.4.0' );
 
 /** Absolute path to the plugin directory, with trailing slash. */
 define( 'ROBOTSTXT_MANAGER_DIR', plugin_dir_path( __FILE__ ) );

From 8e6a52d8ce6979fccccd1809a795a9f33e6c863d Mon Sep 17 00:00:00 2001
From: Javier Casares <javier@robotstxt.es>
Date: Mon, 17 Aug 2026 18:09:44 +0000
Subject: [PATCH 16/23] v1.4.1

---
 changelog.txt                        |  21 +
 languages/robotstxt-manager-ca.mo    | Bin 12607 -> 13148 bytes
 languages/robotstxt-manager-ca.po    | 822 ++++++++++++++++++---------
 languages/robotstxt-manager-es_ES.mo | Bin 12518 -> 13060 bytes
 languages/robotstxt-manager-es_ES.po | 821 +++++++++++++++++---------
 languages/robotstxt-manager.pot      | 459 ++++++++++++++-
 readme.txt                           | 132 +----
 robotstxt-manager.php                |   9 +-
 8 files changed, 1597 insertions(+), 667 deletions(-)

diff --git a/changelog.txt b/changelog.txt
index a6f7d91..eb782ea 100644
--- a/changelog.txt
+++ b/changelog.txt
@@ -1,5 +1,26 @@
 == Changelog ==
 
+= 1.4.1 =
+
+_Release date: 2026-08-17_
+
+**Changed**
+
+* Plugin identity now points at the ROBOTSTXT software site: Plugin URI and the new Update URI header are `https://www.robotstxt.software/plugins/robotstxt-manager/`, Author URI is `https://www.robotstxt.software/`, and the readme.txt full-changelog link points to the same page.
+* Contributors list reordered: robotstxt first, then javiercasares.
+* readme.txt changelog section trimmed to the 3 latest versions per the documentation template.
+* Tooling aligned with the declared real floors: PHPCS `testVersion` and the preflight scan range now cover PHP 8.0-8.5 (previously 7.4-8.5 / 8.4-8.5).
+
+**Compatibility**
+
+* WordPress: 4.4 - 7.1 (scan-verified: wp-compat ladder clean from 4.4; 10 errors at 4.0)
+* PHP: 8.0 - 8.5 (scan-verified: PHPCompatibility ladder + manual audit — `mixed` hints and `str_contains()` are the 8.0 floor)
+
+**Tests**
+
+* PHPCS (WordPress-Core, WordPress-Docs, WordPress-Extra): pass
+* PHPStan level 9 + wp-compat: pass
+
 = 1.4.0 =
 
 _Release date: 2026-08-17_
diff --git a/languages/robotstxt-manager-ca.mo b/languages/robotstxt-manager-ca.mo
index e313bbfbb6f56a2c898f59fea1d3c40c05cdcfb3..cdc25e04ce56363118a820783e47daaf7f277035 100644
GIT binary patch
delta 2989
zcmajgdu$X%9Ki7@v=nG-rO2bT!c-n-rM<f%kG6<XKmh@PQl&fuw!Lk+a_u#@+d`4#
zA{EgX5@gj7C5llo5*w`-A1I32KR}5OB8dtphG<X(gAXMBf%^UJE})5o33H#B-M!i0
z{C;y~Z{5*`<TrWgk13i#FQkv`tyCwL^x=b6-dCwEtiT*Rfk8ZrSvazvQvETE>v0k$
z@lDLca&8vm6fD3d%t%veBl3!*dYDyMOKrvL@JX!0-AF8|Fq<!+M%GlLaR`Pn4`<?G
zT#BrzCJ?1qg&~}S62N-YxD$`zJ{%ySzHpUN{8PL6n1K7S3I9f7P))gB<n1_+`6DPh
zdmhuV3m;%duj1>>D+VY<Eb0u(bLa6I%ph6`yZ~iB7Kcl!W-!RdMjVXy;q|x;N8sC-
z!ee+NIz+J%-$gc|rn8!Cpc*B`21@nT<528GDeZQYOzuX><X%i#3_fH)@M`iPFY>u4
zJ740@8&FDQp}R230-Y!eZ$^31E|k>w;I;S(N(N4%tpBTjzZbi#W}Y*c{Lf;rk_!#E
z3#Z}$@+3R2!R5FX9sB}&lj_yHO)?QDZB_UL%8QSp1b6}^gFmALFo3j3rt)z(25=J2
zC?NlAUUhOocCgKVpc^ZgA4I8T7TY<(i-+PK=D)LT$xt^Zb}YVwvcoedfv90hJqlU4
z8F!#$Fv#1>aUvFBYmz}F3vWe<{A2BT2<3qz*ofy*c4Bf-0&4bMhqBX6NOsjO%uG}2
zJ(NK9b5lz7Im(N_#xM>hy(O5O!626}*hqHO{Ug0oz8xh4uizFuiIS;%N4c9*TTq^V
z8D(etd_Th<S???Smg_wMFW~2H@B->aIU9SBq$Jgs3?%Y%C^gS1_I?FrzB5sFxB^Gx
z20Vo?;y8SqgYXm{K=~Ckjqys+fs|i8gp%23ktC~KD1T=@!gTrl|G=Oh7fz$>^c>31
z@Imq;hvsR_#x8&U7G^Quj~RFfug1ejOzJ0;7Y!=)GBX}!$G4yavIO}hD?{Y{%4X1v
zn{XPQ#Z6cdRBA51k8DomhLozsO6)=h!=$>3g5JbDQKr=GxDzG7(<o=)Ph?Ljos%kO
zD2x(7IVL5gvl&!k0;L39Ncq%3l%1SIISWI0i!8VRd9PYYmnP+rHqgV(W)0&h{#<rH
zkuJgCM!$z%O=s<-n=;03lln<YdwEm-K9e@Oq^-!mCN-7%$zi<Nzm|u0(eI$kh9q0k
zmeFr@M_z^`JB#Ue`qySk{blE}D``vVa;nGE<>xY$E~%VDr>yRQ1NZ-lyHO6VLFXj9
zZ3Ul_YH6Hj_m3BUD%_UNXAWITyo64bRR!;N+k8F?=-Qom2XKKuUg#@O>Whu?t4027
z7EYo|**GqWlDloTZxzm?Q%Sc?=2J>tHPoBC|J6?S$3m_@mIEk<rZ1g80g9iq+h*`7
zr#?INOXjlP&i7fLE{H|V7Q57nMob+stW|Y!BN5RJ@r1TlnYw!3)Oj@vYietBYpks?
z+M><+xYc3VW^+)_iCVVhK2>knMl9Z_8xrwmZ8$o+aCM1Jm{vU2Zdy7PuQy^k+G6og
zEY#K-F>F&avCR@~v_vl4v6$7{(RQxOkQ?5kmj7x?N1_R{-i~#6?~(8<JDxC8-P!dS
zj?ODg<>&pCxp<Xrw_25<(3&-Cf{A!t+_vnscF>A9*lUc08B$lc@9onHUHockv(aKS
znu(AzxS%4VEI2M$=F}AE+W%kv@?Y;ie_m;|*&el`@s`r*?6Oji4Ue5r8ZIv_o2bji
zSB@(i6Q()O6ok`iQ#%WeraR^Ox0N+UTg*)8h#Ax5p0s&Gw`{tVJBE%0q%4%fY&N)i
zDPjLAU{KHH+X+L<I)>e|BW5=0NT997Y14tEUoKh6eT7%ENWiPw2XDlT`e;u|N2Nq<
zMl5Qtb1#%|<<cV;3izMLE(POO&uHef5hK+!b<EJzC)#K@#YNrOW}C#;E>W7P<3)B_
zFS9MRXhdy#4v$_uh{aNACqHjQ>bt<Y^t6DpyyQUkw0LuCBHqplv4AtXcvxyd>1)0C
px|10`)yG@W`6E2+!f;Qhu;EJQ;7a!|UuZST(#JQv6f#;m)IX&D`_TXZ

delta 2464
zcmYM!Yitx%6u|MbeMq5{J`j1d&|7Gg7Q0(&Ey$Znfr1E@qE(T&ZHKb5-K{gTK!vag
zijNq?xEj6~gE78{NO03?)Mz6_B^t#K1~G~TP}7DO6hBZg#Q&LD^rmNibGtKl&OP_e
z{IL1sj^vq=oEL<)i6|q+W{V{8pIi>K%cDdN;|Lbu>v<wU?8kgOk7Mv6?!qgm_wN`j
z!Yy(ct5GkS0yUT$5NXB(dg*FLxsD&sA@|BKPQ^>ufyHA*$Vpt(oOU2%%5I#9Phtrk
zL`@`}@goe;KY^OS2pXKhEPldeSgfg5juYWe8aXs#Gd_g7kR0SU)XXp8cpO*g&ulv8
z(67PAnNbJ_=noW8MeHf|uX_Zqr@sd^;RBie5iHkI9p_{+p2z8U6=z@t(@JAA*5C;4
z#Y(c!r8tD-B=4an_!(*?&*CH;LS51<p01TEN3C2HIvBzvNy{soXvS&O84qUqU!pF_
zY4iq09bgD`;7h0vDw^Pzz8XvEH=wTlI@IyoGrw=aR{9RM;HML)|7K2#ZV+k0?Wi+<
zA9X{X!4xi}ZrPOh8`MgC%Tt%4mQB~Z2{pkrs1<BOO<+4}rIJ{V`*1!UMsk;-$<$wG
zaFu^(1twC*$9PaBen|gKrlS?v%yjF~MxD{Cs1NSP=W!7C;RbfDR_q+k#S2)0RntV~
zG42ZNr@x16G~u~P<DV=>y>K~p;}+BzoJ39RyNth}&hSs9iZX$lG?7`TOVfz@;3Zgx
zeRwk-!u){9Db!7PjzQQSlDxvnZJZQR_x;#{TAI^Hvhq9X4F#3{%&Ia5afkuu;LrSC
zaigDT)=hpwg{XUB3hFqGs0nXChLo+y>Lz7BCpx3okTK*0UcigkfIrR@c?nCZ{oQ^P
zbqNNMRg;sbr5r|G<3CWpAH{5x91P)TY`|x65%OU98VmIO|CJLh@n7CQL;|z?H7`Vc
zZAy_>S}KsSr5^P`8&TJK7wSy+q9*b(@}|lg89%@t`d?uaE?_;Lz$C8b`7)~3-_`4}
zo&Ih-jHj@U67LO)+(LgK#J2#4F(2z#;4!!W8CzE1D0EO0*oj)vXK)_&qrr=)6)&Dm
z5;{NwCp^d75L)tVLI=|I(p}H>Udgp=JX@9!TGEX~Be9CmM!sHK%yAK+4`mg-mX%S_
z$z)nm)@06>U;7u{L9}N2D>Ld6Y10z3Qr_F5v%8(peQ+PKn$QxnWxRF|#}&jfzv~@!
z2{#aHiJ-3k{hVm|^gEzCUmHu~wS^q-B-Rs4iCYOayw`Md>E~D99$l9CgjTbF&>em^
zq5DHOqqY_w@2JbXi73(a*UiHUc$*6TYwI{$Kp5gK;#$-9yND<z^wrX)8}(kIjnK8_
zdn9uR-6#6`UTamHJV5Y$^IAaCv-37)uj-5^Vs35J+Ga(~(seCntJP;Bj+3yuOh=z_
zw^*iiZPVJe^=<8K#&P4e6*R5Z!-<H^1#aAg6I>E=Bb{M4RaRI!$>ul9ah;%P<JN8A
zXu@JRW2Nl;;q;t>2XoVJmt^Oq@=NFD)&(1bb*Yu5rZ#SO_1c!>1mkvh$Vv3}#%(v$
z8%=aaVj(-;5qBMThg;hdj)l7|J2hBZmo6(inv;62yew(;SWejVTDFOX4Od3G!~Z87
zG{>HDOw8(J>|+P*h<_m|`x$eO<rpU({p8(fq%-0sx*XF*8JNqlgHfy7MCkh0Bs!c<
zJJQ=3iN}~)b5v&*w~dv4$BYZ4KA(OhFKoEewG!z^XSjiYlOCyT&q+O9JwCm&`o)~o
tq~I5+ziVcu3qt)_fpF^h><igkn;NK}=J|d7)ch*PoZa(QC>-mPe*x8NNr?ae

diff --git a/languages/robotstxt-manager-ca.po b/languages/robotstxt-manager-ca.po
index 3c5406d..204bfc3 100644
--- a/languages/robotstxt-manager-ca.po
+++ b/languages/robotstxt-manager-ca.po
@@ -2,9 +2,12 @@
 # This file is distributed under the GPL-3.0-or-later.
 msgid ""
 msgstr ""
-"Project-Id-Version: Manager (by ROBOTSTXT) 0.6.0\n"
-"Report-Msgid-Bugs-To: https://wordpress.org/support/plugin/robotstxt-manager\n"
+"Project-Id-Version: Manager (by ROBOTSTXT) 1.4.1\n"
+"Report-Msgid-Bugs-To: https://www.robotstxt.software/plugins/robotstxt-manager/\n"
+"PO-Revision-Date: 2026-08-17 15:41+0000\n"
 "Last-Translator: ROBOTSTXT <hola@robotstxt.es>\n"
+"POT-Creation-Date: 2026-08-17T14:52:09+00:00\n"
+"X-Translator: ROBOTSTXT <hola@robotstxt.es>\n"
 "Language-Team: Català <ca@robotstxt.es>\n"
 "Language: ca\n"
 "MIME-Version: 1.0\n"
@@ -13,289 +16,570 @@ msgstr ""
 "Plural-Forms: nplurals=2; plural=(n != 1);\n"
 "X-Domain: robotstxt-manager\n"
 
-msgid "%d plugin in the catalog is not compatible with this site's WordPress or PHP version."
-msgid_plural "%d plugins in the catalog are not compatible with this site's WordPress or PHP version."
-msgstr[0] "%d plugin del catàleg no és compatible amb la versió de WordPress o de PHP d'aquest lloc."
-msgstr[1] "%d plugins del catàleg no són compatibles amb la versió de WordPress o de PHP d'aquest lloc."
+#. Plugin Name of the plugin
+#: robotstxt-manager.php
+msgid "Manager (by ROBOTSTXT)"
+msgstr "Manager (de ROBOTSTXT)"
 
-msgid "%s activated."
-msgstr "%s activat."
+#. Plugin URI of the plugin
+#: robotstxt-manager.php
+msgid "https://www.robotstxt.software/plugins/robotstxt-manager/"
+msgstr "https://www.robotstxt.software/plugins/robotstxt-manager/"
 
-msgid "%s installed. Activate it from the list below."
-msgstr "%s instal·lat. Activa'l des de la llista de sota."
-
-msgid "%s updated."
-msgstr "%s actualitzat."
-
-msgid "(about %s)"
-msgstr "(sobre %s)"
-
-msgid "A key is stored (last 4 characters: <code>%s</code>). Leave blank to keep the existing key; enter a new value to replace it."
-msgstr "Hi ha una clau desada (últims 4 caràcters: <code>%s</code>). Deixa-ho en blanc per mantenir la clau actual; escriu un valor nou per substituir-la."
-
-msgid "A key is stored but could not be decoded. You can replace it by entering a new value above, or delete it with the button below."
-msgstr "Hi ha una clau desada però no s'ha pogut descodificar. Pots substituir-la escrivint un valor nou a dalt, o esborrar-la amb el botó de sota."
-
-msgid "API Key"
-msgstr "Clau API"
-
-msgid "API key deleted. Save changes to persist."
-msgstr "Clau API esborrada. Desa els canvis perquè faci efecte."
-
-msgid "API key is not configured."
-msgstr "La clau API no està configurada."
-
-msgid "Account-level API key issued by the ROBOTSTXT store. Required to authenticate catalog and subscription requests. The value is encrypted before storage."
-msgstr "Clau API a nivell de compte emesa per la botiga ROBOTSTXT. És necessària per autenticar les sol·licituds del catàleg i de les subscripcions. El valor es xifra abans de desar-se."
-
-msgid "Action"
-msgstr "Acció"
-
-msgid "Activate"
-msgstr "Activa"
-
-msgid "An unexpected error occurred."
-msgstr "S'ha produït un error inesperat."
-
-msgid "Base URL of the remote Plugins Core installation that this site will pull the plugin catalog from."
-msgstr "URL base de la instal·lació remota de Plugins Core d'on aquest lloc obtindrà el catàleg de plugins."
-
-msgid "Buy"
-msgstr "Comprar"
-
-msgid "Cache"
-msgstr "Memòria cau"
-
-msgid "Catalog Cache (minutes)"
-msgstr "Memòria cau del catàleg (minuts)"
-
-msgid "Catalog refreshed."
-msgstr "Catàleg actualitzat."
-
-msgid "Connected."
-msgstr "Connectat."
-
-msgid "Connection"
-msgstr "Connexió"
-
-msgid "Could not create a temporary file for download."
-msgstr "No s'ha pogut crear un fitxer temporal per a la baixada."
-
-msgid "Could not reach Plugins Core: %s"
-msgstr "No s'ha pogut connectar amb Plugins Core: %s"
-
-msgid "Data on Uninstall"
-msgstr "Dades en desinstal·lar"
-
-msgid "Delete API key"
-msgstr "Esborra la clau API"
-
-msgid "Delete all plugin data when the plugin is uninstalled."
-msgstr "Esborra totes les dades del plugin quan es desinstal·li."
-
-msgid "Delete the stored API key? The catalog and subscription data will stop working until a new key is entered."
-msgstr "Segur que vols esborrar la clau API desada? El catàleg i les dades de subscripció deixaran de funcionar fins que s'introdueixi una clau nova."
-
-msgid "Deleting…"
-msgstr "S'està esborrant…"
-
-msgid "Download failed (HTTP %d)."
-msgstr "Error en la baixada (HTTP %d)."
-
-msgid "Download failed: %s"
-msgstr "Error en la baixada: %s"
-
-msgid "Free"
-msgstr "Gratuït"
-
-msgid "How long the catalog response from Core is cached in a transient. Default: 60 minutes. Lower values refresh more often at the cost of more requests to Core. Maximum: 1440 (24 hours)."
-msgstr "Quant de temps es desa a la memòria cau la resposta del catàleg de Core en un transient. Per defecte: 60 minuts. Els valors més baixos actualitzen més sovint a costa de més sol·licituds a Core. Màxim: 1440 (24 hores)."
-
-msgid "Incompatible"
-msgstr "Incompatible"
-
-msgid "Install"
-msgstr "Instal·la"
-
-msgid "Installation failed."
-msgstr "Error en la instal·lació."
-
-msgid "Installation failed: %s"
-msgstr "Error en la instal·lació: %s"
-
-msgid "Installed (inactive)"
-msgstr "Instal·lat (inactiu)"
-
-msgid "Insufficient permissions."
-msgstr "Permisos insuficients."
-
-
-msgid "Manager (by ROBOTSTXT) — Plugins"
-msgstr "Manager (by ROBOTSTXT) — Plugins"
-
-msgid "Manager (by ROBOTSTXT) — Settings"
-msgstr "Manager (by ROBOTSTXT) — Paràmetres"
-
-msgid "No plugins were returned by the ROBOTSTXT store. Check the Store URL and API key on the Settings page, or click Refresh to try again."
-msgstr "La botiga ROBOTSTXT no ha retornat cap plugin. Revisa la URL de la botiga i la clau API a la pàgina de paràmetres, o prem Actualitza per tornar-ho a provar."
-
-msgid "Not installed"
-msgstr "No instal·lat"
-
-msgid "Plugin"
-msgstr "Plugin"
-
-msgid "Plugin is not installed."
-msgstr "El plugin no està instal·lat."
-
-msgid "Plugin not found in catalog."
-msgstr "Plugin no trobat al catàleg."
-
-
-msgid "Price"
-msgstr "Preu"
+#. Description of the plugin
+#: robotstxt-manager.php
+msgid ""
+"Client-side dashboard for the ROBOTSTXT plugin ecosystem. Lists the catalog "
+"from a remote Plugins Core install, resolves local install/update state, and "
+"installs, activates, and updates plugins directly from the store."
+msgstr ""
+"Tauler del costat del client per a l'ecosistema de plugins de ROBOTSTXT. "
+"Mostra el catàleg d'una instal·lació remota de Plugins Core, resol l'estat "
+"local d'instal·lació i actualització, i instal·la, activa i actualitza "
+"plugins directament des de la botiga."
 
+#. Author of the plugin
+#: robotstxt-manager.php admin/class-robotstxt-manager-admin.php:48
 msgid "ROBOTSTXT"
 msgstr "ROBOTSTXT"
 
-msgid "ROBOTSTXT Manager is not configured yet. <a href=\"%s\">Set the Store URL and API key</a> to see your plugin catalog."
-msgstr "ROBOTSTXT Manager encara no està configurat. <a href=\"%s\">Configura la URL de la botiga i la clau API</a> per veure el teu catàleg de plugins."
+#. Author URI of the plugin
+#: robotstxt-manager.php
+msgid "https://www.robotstxt.software/"
+msgstr "https://www.robotstxt.software/"
 
-msgid "Refresh catalog"
-msgstr "Actualitza el catàleg"
-
-msgid "Requires PHP"
-msgstr "Requereix PHP"
-
-msgid "Requires WP"
-msgstr "Requereix WP"
-
-msgid "Settings"
-msgstr "Paràmetres"
-
-
-msgid "Store URL"
-msgstr "URL de la botiga"
-
-msgid "Store URL is not configured."
-msgstr "La URL de la botiga no està configurada."
-
-msgid "Store is not configured."
-msgstr "La botiga no està configurada."
-
-msgid "Test connection"
-msgstr "Prova la connexió"
-
-msgid "Testing…"
-msgstr "S'està provant…"
-
-msgid "The API key format is invalid. Copy the full key from your ROBOTSTXT account page."
-msgstr "El format de la clau API no és vàlid. Copia la clau completa des de la teva pàgina de compte de ROBOTSTXT."
-
-msgid "The store responded with HTTP %d. Check the Store URL and API key."
-msgstr "La botiga ha respost amb HTTP %d. Revisa la URL de la botiga i la clau API."
-
-msgid "The store returned an invalid file."
-msgstr "La botiga ha retornat un fitxer no vàlid."
-
-msgid "This site runs WordPress %1$s on PHP %2$s."
-msgstr "Aquest lloc funciona amb WordPress %1$s i PHP %2$s."
-
-msgid "Too many refreshes. Please wait a minute before refreshing again."
-msgstr "Massa actualitzacions. Espera un minut abans de tornar a actualitzar."
-
-
-msgid "Up to date"
-msgstr "Actualitzat"
-
-msgid "Update"
-msgstr "Actualitza"
-
-msgid "Update available (v%1$s → v%2$s)"
-msgstr "Actualització disponible (v%1$s → v%2$s)"
-
-msgid "Visit website"
-msgstr "Visita el lloc web"
+#: admin/class-robotstxt-manager-admin.php:47 admin/views/page-catalog.php:66
+msgid "Manager (by ROBOTSTXT) — Plugins"
+msgstr "Manager (by ROBOTSTXT) — Plugins"
 
+#: admin/class-robotstxt-manager-admin.php:64
+#: admin/class-robotstxt-manager-settings.php:207
 msgid "You do not have sufficient permissions to access this page."
 msgstr "No tens permisos suficients per accedir a aquesta pàgina."
 
-msgid "Your server runs PHP"
-msgstr "El teu servidor funciona amb PHP"
+#. translators: %s: plugin slug.
+#: admin/class-robotstxt-manager-admin.php:108
+#, php-format
+msgid ""
+"The payment for %s failed. Update your payment method from your ROBOTSTXT "
+"account page to keep access."
+msgstr ""
+"El pagament de %s ha fallat. Actualitza el teu mètode de pagament des de la "
+"teva pàgina de compte de ROBOTSTXT per mantenir l'accés."
 
-msgid "Your site runs WordPress"
-msgstr "El teu lloc funciona amb WordPress"
-
-msgid "This is the ROBOTSTXT plugin store: the catalog of plugins published by ROBOTSTXT, installable and updatable straight from your own wp-admin. Free plugins install with one click; premium plugins require an annual subscription that you purchase on our website."
-msgstr "Aquesta és la botiga de plugins de ROBOTSTXT: el catàleg de plugins publicats per ROBOTSTXT, instal·lables i actualitzables directament des del teu propi wp-admin. Els plugins gratuïts s'instal·len amb un clic; els plugins premium requereixen una subscripció anual que es compra al nostre lloc web."
-
-msgid "Version"
-msgstr "Versió"
-
-msgid "Status"
-msgstr "Estat"
-
-msgid "€%s / year"
-msgstr "%s €/any"
-
-msgid "Support"
-msgstr "Suport"
-
-msgid "Need help with a ROBOTSTXT plugin? Visit the plugin's website (the link in its row above) for documentation and guides, or contact us through our website — we are happy to help."
-msgstr "Necessites ajuda amb un plugin de ROBOTSTXT? Visita el lloc web del plugin (l'enllaç a la seva fila de dalt) per veure la documentació i les guies, o contacta amb nosaltres a través del nostre lloc web: estarem encantats d'ajudar-te."
-
-msgid "Payments, and how it works"
-msgstr "Pagaments, i com funciona"
-
-msgid "Free plugins install instantly at no cost. Premium plugins are annual subscriptions: you pay once on our website and the subscription renews automatically every year until you cancel. You can cancel at any time from your ROBOTSTXT account page — access keeps working until the end of the paid period. All payments are processed securely by Mollie; we never see or store your card details."
-msgstr "Els plugins gratuïts s'instal·len a l'instant i sense cost. Els plugins premium són subscripcions anuals: pagues una vegada al nostre lloc web i la subscripció es renova automàticament cada any fins que la cancellis. Pots cancel·lar-la en qualsevol moment des de la teva pàgina de compte de ROBOTSTXT; l'accés segueix funcionant fins al final del període pagat. Tots els pagaments els processa de manera segura Mollie; nosaltres mai no veiem ni desem les dades de la teva targeta."
-
-msgid "Installed required plugins: %s."
-msgstr "Plugins requerits instal·lats: %s."
-
-msgid "Could not install the required plugin %s."
-msgstr "No s'ha pogut instal·lar el plugin requerit %s."
-
-msgid "WordPress.org lookup failed: %s"
-msgstr "La cerca a WordPress.org ha fallat: %s"
-
-msgid "No download found on WordPress.org for %s."
-msgstr "No s'ha trobat cap baixada a WordPress.org per a %s."
-
-msgid "The downloaded plugin for %s does not have the expected folder structure."
-msgstr "El plugin baixat per a %s no té lestructura de carpetes esperada."
-
-msgid "Requires: %s"
-msgstr "Requereix: %s"
-
-msgid "The payment for %s failed. Update your payment method from your ROBOTSTXT account page to keep access."
-msgstr "El pagament de %s ha fallat. Actualitza el teu mètode de pagament des de la teva pàgina de compte de ROBOTSTXT per mantenir l'accés."
-
-msgid "The subscription for %s has expired, but the plugin is still active on this site. Renew from your ROBOTSTXT account page to keep receiving updates."
-msgstr "La subscripció de %s ha caducat, però el plugin encara és actiu en aquest lloc. Renova-la des de la teva pàgina de compte de ROBOTSTXT per seguir rebent actualitzacions."
-
-msgid "Subscribed"
-msgstr "Subscrit"
-
-msgid "Subscribed — %d days left"
-msgstr "Subscrit — queden %d dies"
-
-msgid "Payment failed"
-msgstr "Pagament fallit"
-
-msgid "Cancelled"
-msgstr "Cancel·lada"
-
-msgid "Expired"
-msgstr "Caducada"
+#. translators: %s: plugin slug.
+#: admin/class-robotstxt-manager-admin.php:119
+#, php-format
+msgid ""
+"The subscription for %s has expired, but the plugin is still active on this "
+"site. Renew from your ROBOTSTXT account page to keep receiving updates."
+msgstr ""
+"La subscripció de %s ha caducat, però el plugin encara és actiu en aquest "
+"lloc. Renova-la des de la teva pàgina de compte de ROBOTSTXT per seguir "
+"rebent actualitzacions."
 
+#. translators: 1: plugin slug, 2: days remaining.
+#: admin/class-robotstxt-manager-admin.php:132
+#, php-format
 msgid "The subscription for %1$s expires in %2$d day."
 msgid_plural "The subscription for %1$s expires in %2$d days."
 msgstr[0] "La subscripció de %1$s caduca en %2$d dia."
 msgstr[1] "La subscripció de %1$s caduca en %2$d dies."
 
-msgid "Create your free account at the <a href=\"%s\" target=\"_blank\" rel=\"noopener noreferrer\">ROBOTSTXT store</a> to get your personal API key. The key links your subscriptions to this site and unlocks premium plugins and updates."
-msgstr "Crea el teu compte gratuït a <a href=\"%s\" target=\"_blank\" rel=\"noopener noreferrer\">la botiga de ROBOTSTXT</a> per obtenir la teva clau API personal. La clau vincula les teves subscripcions a aquest lloc i desbloqueja els plugins premium i les seves actualitzacions."
+#: admin/class-robotstxt-manager-admin.php:153
+#: admin/class-robotstxt-manager-installer.php:421
+#: admin/class-robotstxt-manager-settings.php:379
+#: admin/class-robotstxt-manager-settings.php:405
+msgid "Insufficient permissions."
+msgstr "Permisos insuficients."
 
-msgid "Account-level API key from the ROBOTSTXT store (create your free account there to get one). Optional — the free catalog works without it — but required to link your subscriptions, install premium plugins, and receive their updates. Encrypted before storage."
-msgstr "Clau API a nivell de compte de la botiga de ROBOTSTXT (crea allà el teu compte gratuït per obtenir-la). Opcional: el catàleg de plugins gratuïts funciona sense ella, però és necessària per vincular les teves subscripcions, instal·lar plugins premium i rebre les actualitzacions. Es xifra abans de desar-se."
+#: admin/class-robotstxt-manager-admin.php:197
+msgid "Too many refreshes. Please wait a minute before refreshing again."
+msgstr "Massa actualitzacions. Espereu un minut abans de tornar a actualitzar."
+
+#: admin/class-robotstxt-manager-installer.php:51
+#: admin/class-robotstxt-manager-installer.php:518
+msgid "Plugin not found in catalog."
+msgstr "Plugin no trobat al catàleg."
+
+#. translators: %s: plugin name.
+#: admin/class-robotstxt-manager-installer.php:73
+#, php-format
+msgid "%s installed. Activate it from the list below."
+msgstr "%s instal·lat. Activa'l des de la llista de sota."
+
+#. translators: %s: dependency slug.
+#: admin/class-robotstxt-manager-installer.php:114
+#, php-format
+msgid "Could not install the required plugin %s."
+msgstr "No s'ha pogut instal·lar el plugin requerit %s."
+
+#. translators: %s: list of installed dependency names.
+#: admin/class-robotstxt-manager-installer.php:130
+#, php-format
+msgid "Installed required plugins: %s."
+msgstr "Plugins requerits instal·lats: %s."
+
+#. translators: %s: error message from WordPress.org.
+#: admin/class-robotstxt-manager-installer.php:272
+#, php-format
+msgid "WordPress.org lookup failed: %s"
+msgstr "La cerca a WordPress.org ha fallat: %s"
+
+#. translators: %s: plugin slug.
+#: admin/class-robotstxt-manager-installer.php:281
+#, php-format
+msgid "No download found on WordPress.org for %s."
+msgstr "No s'ha trobat cap baixada a WordPress.org per a %s."
+
+#: admin/class-robotstxt-manager-installer.php:287
+#: admin/class-robotstxt-manager-installer.php:540
+msgid "Could not create a temporary file for download."
+msgstr "No s'ha pogut crear un fitxer temporal per a la baixada."
+
+#. translators: %s: HTTP transport error message.
+#: admin/class-robotstxt-manager-installer.php:303
+#: admin/class-robotstxt-manager-installer.php:573
+#, php-format
+msgid "Download failed: %s"
+msgstr "Error en la baixada: %s"
+
+#. translators: %d: HTTP status code.
+#: admin/class-robotstxt-manager-installer.php:310
+#: admin/class-robotstxt-manager-installer.php:588
+#, php-format
+msgid "Download failed (HTTP %d)."
+msgstr "Error en la baixada (HTTP %d)."
+
+#: admin/class-robotstxt-manager-installer.php:316
+#: admin/class-robotstxt-manager-installer.php:597
+msgid "The store returned an invalid file."
+msgstr "La botiga ha retornat un fitxer no vàlid."
+
+#. translators: %s: upgrader error message.
+#: admin/class-robotstxt-manager-installer.php:334
+#: admin/class-robotstxt-manager-installer.php:622
+#, php-format
+msgid "Installation failed: %s"
+msgstr "Error en la instal·lació: %s"
+
+#. translators: %s: upgrader error message.
+#: admin/class-robotstxt-manager-installer.php:334
+#: admin/class-robotstxt-manager-installer.php:625
+msgid "Installation failed."
+msgstr "Error en la instal·lació."
+
+#. translators: %s: plugin slug.
+#: admin/class-robotstxt-manager-installer.php:341
+#, php-format
+msgid ""
+"The downloaded plugin for %s does not have the expected folder structure."
+msgstr "El plugin baixat per a %s no té l'estructura de carpetes esperada."
+
+#: admin/class-robotstxt-manager-installer.php:363
+#: admin/class-robotstxt-manager-installer.php:394
+msgid "Plugin is not installed."
+msgstr "El plugin no està instal·lat."
+
+#. translators: %s: plugin name (slug).
+#: admin/class-robotstxt-manager-installer.php:375
+#, php-format
+msgid "%s activated."
+msgstr "%s activat."
+
+#. translators: %s: plugin name (slug).
+#: admin/class-robotstxt-manager-installer.php:406
+#, php-format
+msgid "%s updated."
+msgstr "%s actualitzat."
+
+#: admin/class-robotstxt-manager-installer.php:512
+msgid "Store is not configured."
+msgstr "La botiga no està configurada."
+
+#: admin/class-robotstxt-manager-settings.php:59
+#: admin/views/page-settings.php:13
+msgid "Manager (by ROBOTSTXT) — Settings"
+msgstr "Manager (by ROBOTSTXT) — Paràmetres"
+
+#: admin/class-robotstxt-manager-settings.php:60
+msgid "Settings"
+msgstr "Paràmetres"
+
+#: admin/class-robotstxt-manager-settings.php:75
+msgid "Connection"
+msgstr "Connexió"
+
+#: admin/class-robotstxt-manager-settings.php:92
+msgid "Store URL"
+msgstr "URL de la botiga"
+
+#: admin/class-robotstxt-manager-settings.php:110
+msgid "API Key"
+msgstr "Clau API"
+
+#: admin/class-robotstxt-manager-settings.php:118
+msgid "Cache"
+msgstr "Memòria cau"
+
+#: admin/class-robotstxt-manager-settings.php:135
+msgid "Catalog Cache (minutes)"
+msgstr "Memòria cau del catàleg (minuts)"
+
+#: admin/class-robotstxt-manager-settings.php:153
+msgid "Data on Uninstall"
+msgstr "Dades en desinstal·lar"
+
+#: admin/class-robotstxt-manager-settings.php:188
+msgid "Testing…"
+msgstr "S'està provant…"
+
+#: admin/class-robotstxt-manager-settings.php:189
+#: admin/class-robotstxt-manager-settings.php:274
+msgid "Test connection"
+msgstr "Prova la connexió"
+
+#: admin/class-robotstxt-manager-settings.php:190
+msgid "Deleting…"
+msgstr "S'està esborrant…"
+
+#: admin/class-robotstxt-manager-settings.php:191
+#: admin/class-robotstxt-manager-settings.php:278
+msgid "Delete API key"
+msgstr "Esborra la clau API"
+
+#: admin/class-robotstxt-manager-settings.php:192
+msgid ""
+"Delete the stored API key? The catalog and subscription data will stop "
+"working until a new key is entered."
+msgstr ""
+"Segur que voleu esborrar la clau API desada? El catàleg i les dades de "
+"subscripció deixaran de funcionar fins que s'introdueixi una clau nova."
+
+#: admin/class-robotstxt-manager-settings.php:193
+#: admin/class-robotstxt-manager-settings.php:414
+msgid "API key deleted. Save changes to persist."
+msgstr "Clau API esborrada. Desa els canvis perquè faci efecte."
+
+#: admin/class-robotstxt-manager-settings.php:194
+msgid "An unexpected error occurred."
+msgstr "S'ha produït un error inesperat."
+
+#: admin/class-robotstxt-manager-settings.php:226
+msgid ""
+"Base URL of the remote Plugins Core installation that this site will pull "
+"the plugin catalog from."
+msgstr ""
+"URL base de la instal·lació remota de Plugins Core d'on aquest lloc obtindrà "
+"el catàleg de plugins."
+
+#. translators: %s: last 4 characters of the stored API key.
+#: admin/class-robotstxt-manager-settings.php:257
+#, php-format
+msgid ""
+"A key is stored (last 4 characters: <code>%s</code>). Leave blank to keep "
+"the existing key; enter a new value to replace it."
+msgstr ""
+"Hi ha una clau desada (últims 4 caràcters: <code>%s</code>). Deixa-ho en "
+"blanc per mantenir la clau actual; escriu un valor nou per substituir-la."
+
+#: admin/class-robotstxt-manager-settings.php:262
+msgid ""
+"A key is stored but could not be decoded. You can replace it by entering a "
+"new value above, or delete it with the button below."
+msgstr ""
+"Hi ha una clau desada però no s'ha pogut descodificar. Pots substituir-la "
+"escrivint un valor nou a dalt, o esborrar-la amb el botó de sota."
+
+#: admin/class-robotstxt-manager-settings.php:266
+msgid ""
+"Account-level API key from the ROBOTSTXT store (create your free account "
+"there to get one). Optional — the free catalog works without it — but "
+"required to link your subscriptions, install premium plugins, and receive "
+"their updates. Encrypted before storage."
+msgstr ""
+"Clau API a nivell de compte de la botiga de ROBOTSTXT (crea allà el teu "
+"compte gratuït per obtenir-la). Opcional: el catàleg de plugins gratuïts "
+"funciona sense ella, però és necessària per vincular les teves "
+"subscripcions, instal·lar plugins premium i rebre les actualitzacions. Es "
+"xifra abans de desar-se."
+
+#: admin/class-robotstxt-manager-settings.php:298
+msgid ""
+"How long the catalog response from Core is cached in a transient. Default: "
+"60 minutes. Lower values refresh more often at the cost of more requests to "
+"Core. Maximum: 1440 (24 hours)."
+msgstr ""
+"Quant de temps es desa a la memòria cau la resposta del catàleg de Core en "
+"un transient. Per defecte: 60 minuts. Els valors més baixos actualitzen més "
+"sovint a costa de més sol·licituds a Core. Màxim: 1440 (24 hores)."
+
+#: admin/class-robotstxt-manager-settings.php:313
+msgid "Delete all plugin data when the plugin is uninstalled."
+msgstr "Esborra totes les dades del plugin quan es desinstal·li."
+
+#: admin/class-robotstxt-manager-settings.php:343
+msgid ""
+"The API key format is invalid. Copy the full key from your ROBOTSTXT account "
+"page."
+msgstr ""
+"El format de la clau API no és vàlid. Copia la clau completa des de la teva "
+"pàgina de compte de ROBOTSTXT."
+
+#: admin/views/page-catalog.php:69
+msgid ""
+"This is the ROBOTSTXT plugin store: the catalog of plugins published by "
+"ROBOTSTXT, installable and updatable straight from your own wp-admin. Free "
+"plugins install with one click; premium plugins require an annual "
+"subscription that you purchase on our website."
+msgstr ""
+"Aquesta és la botiga de plugins de ROBOTSTXT: el catàleg de plugins "
+"publicats per ROBOTSTXT, instal·lables i actualitzables directament des del "
+"teu propi wp-admin. Els plugins gratuïts s'instal·len amb un clic; els "
+"plugins premium requereixen una subscripció anual que es compra al nostre "
+"lloc web."
+
+#: admin/views/page-catalog.php:73
+msgid "Catalog refreshed."
+msgstr "Catàleg actualitzat."
+
+#. translators: %s: store registration URL.
+#: admin/views/page-catalog.php:89
+#, php-format
+msgid ""
+"Create your free account at the <a href=\"%s\" target=\"_blank\" "
+"rel=\"noopener noreferrer\">ROBOTSTXT store</a> to get your personal API "
+"key. The key links your subscriptions to this site and unlocks premium "
+"plugins and updates."
+msgstr ""
+"Creeu el vostre compte gratuït a <a href=\"%s\" target=\"_blank\" rel=\"noopener "
+"noreferrer\">la botiga de ROBOTSTXT</a> per obtenir la teva clau API "
+"personal. La clau vincula les teves subscripcions a aquest lloc i "
+"desbloqueja els plugins premium i les seves actualitzacions."
+
+#. translators: %s: settings URL.
+#: admin/views/page-catalog.php:109
+#, php-format
+msgid ""
+"ROBOTSTXT Manager is not configured yet. <a href=\"%s\">Set the Store URL "
+"and API key</a> to see your plugin catalog."
+msgstr ""
+"ROBOTSTXT Manager encara no està configurat. <a href=\"%s\">Configura la URL "
+"de la botiga i la clau API</a> per veure el teu catàleg de plugins."
+
+#: admin/views/page-catalog.php:119
+msgid ""
+"No plugins were returned by the ROBOTSTXT store. Check the Store URL and API "
+"key on the Settings page, or click Refresh to try again."
+msgstr ""
+"La botiga ROBOTSTXT no ha retornat cap plugin. Revisa la URL de la botiga i "
+"la clau API a la pàgina de paràmetres, o prem Actualitza per tornar-ho a "
+"provar."
+
+#: admin/views/page-catalog.php:122 admin/views/page-catalog.php:125
+msgid "Refresh catalog"
+msgstr "Actualitza el catàleg"
+
+#: admin/views/page-catalog.php:131
+msgid "Plugin"
+msgstr "Plugin"
+
+#: admin/views/page-catalog.php:132
+msgid "Version"
+msgstr "Versió"
+
+#: admin/views/page-catalog.php:133
+msgid "Requires WP"
+msgstr "Requereix WP"
+
+#: admin/views/page-catalog.php:134
+msgid "Requires PHP"
+msgstr "Requereix PHP"
+
+#: admin/views/page-catalog.php:135
+msgid "Price"
+msgstr "Preu"
+
+#: admin/views/page-catalog.php:136
+msgid "Action"
+msgstr "Acció"
+
+#: admin/views/page-catalog.php:137
+msgid "Status"
+msgstr "Estat"
+
+#: admin/views/page-catalog.php:239
+msgid "Your site runs WordPress"
+msgstr "El vostre lloc funciona amb WordPress"
+
+#: admin/views/page-catalog.php:251
+msgid "Your server runs PHP"
+msgstr "El vostre servidor funciona amb PHP"
+
+#. translators: %s: formatted price number.
+#: admin/views/page-catalog.php:264
+#, php-format
+msgid "€%s / year"
+msgstr "%s €/any"
+
+#. translators: %d: days remaining.
+#: admin/views/page-catalog.php:282
+#, php-format
+msgid "Subscribed — %d days left"
+msgstr "Subscrit — queden %d dies"
+
+#: admin/views/page-catalog.php:286
+msgid "Subscribed"
+msgstr "Subscrit"
+
+#: admin/views/page-catalog.php:289
+msgid "Payment failed"
+msgstr "Pagament fallit"
+
+#: admin/views/page-catalog.php:291
+msgid "Cancelled"
+msgstr "Cancel·lada"
+
+#: admin/views/page-catalog.php:293
+msgid "Expired"
+msgstr "Caducada"
+
+#: admin/views/page-catalog.php:303
+msgid "Free"
+msgstr "Gratuït"
+
+#: admin/views/page-catalog.php:309
+msgid "Incompatible"
+msgstr "Incompatible"
+
+#: admin/views/page-catalog.php:312
+msgid "Buy"
+msgstr "Comprar"
+
+#: admin/views/page-catalog.php:317
+msgid "Install"
+msgstr "Instal·la"
+
+#: admin/views/page-catalog.php:319
+msgid "Activate"
+msgstr "Activa"
+
+#: admin/views/page-catalog.php:321
+msgid "Update"
+msgstr "Actualitza"
+
+#: admin/views/page-catalog.php:327
+msgid "Not installed"
+msgstr "No instal·lat"
+
+#: admin/views/page-catalog.php:329
+msgid "Installed (inactive)"
+msgstr "Instal·lat (inactiu)"
+
+#. translators: 1: installed version, 2: available version.
+#: admin/views/page-catalog.php:334
+#, php-format
+msgid "Update available (v%1$s → v%2$s)"
+msgstr "Actualització disponible (v%1$s → v%2$s)"
+
+#: admin/views/page-catalog.php:340
+msgid "Up to date"
+msgstr "Actualitzat"
+
+#: admin/views/page-catalog.php:349
+msgid "Visit website"
+msgstr "Visita el lloc web"
+
+#. translators: %s: plugin name.
+#: admin/views/page-catalog.php:349
+#, php-format
+msgid "(about %s)"
+msgstr "(sobre %s)"
+
+#. translators: %s: list of plugin slugs.
+#: admin/views/page-catalog.php:360
+#, php-format
+msgid "Requires: %s"
+msgstr "Requereix: %s"
+
+#: admin/views/page-catalog.php:374
+msgid "Support"
+msgstr "Suport"
+
+#: admin/views/page-catalog.php:376
+msgid ""
+"Need help with a ROBOTSTXT plugin? Visit the plugin's website (the link in "
+"its row above) for documentation and guides, or contact us through our "
+"website — we are happy to help."
+msgstr ""
+"Necessites ajuda amb un plugin de ROBOTSTXT? Visita el lloc web del plugin "
+"(l'enllaç a la seva fila de dalt) per veure la documentació i les guies, o "
+"contacta amb nosaltres a través del nostre lloc web: estarem encantats "
+"d'ajudar-te."
+
+#: admin/views/page-catalog.php:379
+msgid "Payments, and how it works"
+msgstr "Pagaments, i com funciona"
+
+#: admin/views/page-catalog.php:381
+msgid ""
+"Free plugins install instantly at no cost. Premium plugins are annual "
+"subscriptions: you pay once on our website and the subscription renews "
+"automatically every year until you cancel. You can cancel at any time from "
+"your ROBOTSTXT account page — access keeps working until the end of the paid "
+"period. All payments are processed securely by Mollie; we never see or store "
+"your card details."
+msgstr ""
+"Els plugins gratuïts s'instal·len a l'instant i sense cost. Els plugins "
+"premium són subscripcions anuals: pagues una vegada al nostre lloc web i la "
+"subscripció es renova automàticament cada any fins que la cancellis. Pots "
+"cancel·lar-la en qualsevol moment des de la teva pàgina de compte de "
+"ROBOTSTXT; l'accés segueix funcionant fins al final del període pagat. Tots "
+"els pagaments els processa de manera segura Mollie; nosaltres mai no veiem "
+"ni desem les dades de la teva targeta."
+
+#. translators: %d: number of incompatible plugins.
+#: admin/views/page-catalog.php:391
+#, php-format
+msgid ""
+"%d plugin in the catalog is not compatible with this site's WordPress or PHP "
+"version."
+msgid_plural ""
+"%d plugins in the catalog are not compatible with this site's WordPress or "
+"PHP version."
+msgstr[0] ""
+"%d plugin del catàleg no és compatible amb la versió de WordPress o de PHP "
+"d'aquest lloc."
+msgstr[1] ""
+"%d plugins del catàleg no són compatibles amb la versió de WordPress o de "
+"PHP d'aquest lloc."
+
+#. translators: 1: local WP version, 2: local PHP version.
+#: admin/views/page-catalog.php:400
+#, php-format
+msgid "This site runs WordPress %1$s on PHP %2$s."
+msgstr "Aquest lloc funciona amb WordPress %1$s i PHP %2$s."
+
+#: includes/class-robotstxt-manager-core-client.php:141
+msgid "Store URL is not configured."
+msgstr "La URL de la botiga no està configurada."
+
+#: includes/class-robotstxt-manager-core-client.php:148
+msgid "API key is not configured."
+msgstr "La clau API no està configurada."
+
+#. translators: %s: HTTP transport error message.
+#: includes/class-robotstxt-manager-core-client.php:158
+#, php-format
+msgid "Could not reach Plugins Core: %s"
+msgstr "No s'ha pogut connectar amb Plugins Core: %s"
+
+#. translators: %d: HTTP status code.
+#: includes/class-robotstxt-manager-core-client.php:168
+#, php-format
+msgid "The store responded with HTTP %d. Check the Store URL and API key."
+msgstr "La botiga ha respost amb HTTP %d. Comproveu l'URL de la botiga i la clau API."
+
+#: includes/class-robotstxt-manager-core-client.php:177
+msgid "Connected."
+msgstr "Connectat."
diff --git a/languages/robotstxt-manager-es_ES.mo b/languages/robotstxt-manager-es_ES.mo
index 40903e87319abf49532a328027cafb5f47a968d1..f82d8d7fe1b5a598d265d774bb3fdb50249293bd 100644
GIT binary patch
delta 2966
zcmbW2Yitx%6o7AEP-rW*BEkxCkw>kxyKRNi7EsEopoNxFwLC<oyVG{dcBk%4TQG!G
z3jWbTbTJYjB>Vsj0TnhHP=hALpo!7&M*|W_FwzLdS7L$*M!z$&1%7BqJn5P5-n)0s
zJ+C{xYHVwbUn<CaQy~UA9-We*R39uJ#sjI$R_Yk6f_ZQd`r#ii2TmEG)JRwgH^bR5
z4o|}2u#z8(;5_Jq9WX0RsqK&>;_6kbU`xFLC&0b11)hTVqQ>X)0@M(jY8re1mcjzK
z1YUq^AU0J6UJ7eq0M<cqU^CS45WEb}!hCV{@I6ZLr%v&xfS<z-_&3A{)iKKRya(RL
z{B<ai9fX<i7<`3@PQVYCSLG{(FX~q)`~HHXVHVzs<31?!ayU^^Rm)%;Y=dLq%kW{i
z8%~BF!6dv4AB73L*bYxaf=~;wCIK`;NwEQ?dYj=`*axMw`=Dg<6qHPU0^>G=FBssw
zntQ+J`7$VxuTITdp_Ismu3;z!`k)x@hjP#nD5)QS55ljYWZ)VU`@g4tPbbPo=6Pet
z|566)S!jhv;Cz@*o+R=nxDIZF3HU9{Ak`Z<O)_DTwi>tx%E1?*I5-F;gFi!YAfL2I
zrpCdEun^9MwLbDs@T!jmiC}kX!*N)}{2Y{8<`B+L96T1DW}Zc-%K8~tD*K>BnEsIG
zNCDi#d;;u;C!u6)F{jUg4Nx5Hk25I3@Ow}^y`Vi_f&8g!JUU>`ByYV3N`zaW7~BrA
zt#(4`op)ePno^%Z$;dfQk$o3o1-uHU!wIDK5g1>};0A*jluT@x;&u5;a2E4jP$Kyf
zN>8*+^-^d<$yfqPZybf<*!%Ds9QYW1FTWRhnd;><*|!Z+71a;vowz#8Kn^|wB_-z}
zWmY$#L^Qg{Tc4idayZEP3$Pllq7e?jT~JC=L3qLiQ0z27ajYH6_r-$vruyCWI9H3o
z2o^qsufa1=UR+V^84AN3<~^zTRw$*~3B~YR@Lsqd;*)w8QcZOpX2U<B+>-PX@4bnT
zo2v?84(F@c45Y@ja49?i<yzi^^{~tDb^E7qHS_E6ZMZnV=a*Ff0?V0?E>mhHtcBw6
zUMM|q7!s2@0mY$9P%=IU<78RgWFXgJDptf(14;y2Qrr*aHk^iH_y*)$wH_6bvWZAk
zB9hG}bRH_grEz<y87@MfLmN@fh`T9c?23HFve0yI%J*5R$5Bc1q|}-;kJM2jkgFt8
zfIf{riB3al1y|Pcd?Gb|3@%1jq03WiOXT}6O(ba&S%XULXQGwpd{iQ?Ln))0fr`jg
zdIsf#=KklDD=6|jDybHc%&tQvqavAT9=ZUPGE!Yt#rdu@@bsbDoq3(VA~lwp4vBnh
zhJ>=KXHygD8@Ggz_E1#Rm8VjyfznG<&Xu`5x$&w-?yyJ(y3ieYk5Q@dGAP|Hjl(BE
zah+YM<tbgCoBVC~+Kj{xIbW}cgw3c^VuwSf4jFcPi)F+@y48wlr`^<z_4DhSRyH*^
z>8?n3TR5uCpk;5e9kbJ~>%z8UySsvhV??Yr-5RqxwUN-d<2MxRm}y&)9@EwlD`-S?
zIBK&g66o#<8IGx$IA*anqM@N*Y-T|x+{3yI`N7+2r;fIDC>%3`PGpmJj<{z#R?JKu
z&kbfJbiw$<j>5^wIR)PhU)An7U3PUK(A(SVk6A62V>=riziqWTy++IosJr~`#cBs`
zy;{;~M2$8x7D$ZoRb`d=XZXt!O+MZH@8<ve^^pzrC5>iJ*bZCKl7&QCt;<WxD@sZ$
zOUh>HvYFL0%BGhhi37gUwC3a?-;bGzMf!StksXYMi8XBLkQvbtBjgQ&Zt+arWyB24
z4^kbfVs;wryPdZ?>gd<Yx=q{hwo|u(0~Ah->F%hJDuodY4<w@$u+wr}Ly3JlH||!n
z+oYuKNfZz#yxQ`%SKic{o1~K6MkM^Aw@|EaZ5S%DzGKgAN8JJ&oirrPXxi9~7}}vh
zLq^g+Y5A}`R&KRqk<>i7qp&V3dx6#273(%zl9!9mre|y0Z0ip5%E7?QwAQ=S`v3QW
QnriDSTaN~ef#a6?2aNIY!~g&Q

delta 2430
zcmYk-TWl0n9LMp~%a%)9C>7+=YNxay1-o0cmMWmOvdX0hmZBg?T-u>*-FE8EY@vp*
z2`VuH;bDU)iHXDqi4lZsxX42#!9X;=KmtT#AW{M;F^1R&xftU2x3h>R{qJYa?97?}
z`JXe}4>nwnBrlid?=iG>L^)BEXG{|R3GhL?J;IoScn6E|tC7Y8@hBGJH5`q%a0}i;
z-M@L1G2CKqV-4z}DKHZQImU!>uP$A}C<S~mh}>&#;$t|B>v3F>G2~=CR8E_bG0j$-
zh#z4oet}9Popk_1^nXMpa0e}{Vis3$0gh9u)nkm|&ouDSfMM*yEl3XL1}gJmd<4gg
z^=CE}^XbpT?aU~I$LJp`p^Df&&cE(G98Z56D&f7^{<m16QvJZeWW0t`@jg~zCDTe{
z7-!-g{1B_jLQC;Al9M@sO7JYIl2>sO4xyGbm#3?86{yNhLl;AsBx&;{2g*2&n(?V@
z|7X;a{DPT*Q3DL21|CK|sAPg)`Wh^wUyoY*<*4yjWxwBut@K@7gl8sD{|y|JJZelc
zZbHrcBx*xm#uUz{Zh4gW9I6r*cxn@>Y+CbXRDw%U6>LK#unASEBv#-qoQnsM+|AHr
z>aQ8x=Y%RSkvi_-LDe`w|0L7V`F^HbhucvzI*xkqS=@)`aTj*8b5)^xI1dAl`w2B;
z4ddE)l=HjEMhS+KmVdAm`7<l|=)ykK1;3+aHiR1Z7BYspixkI9uJjYBLw!FN8!(Ks
za0|}B19%(Hp=SOQWnz1n<P{F)a4?LT$t>!xJ#Yq9vh%14{e{{Kh1GsS<MCn+>y3l@
zewtsYi_`t<29ctgKak>>f+ze3SD}`u5n0WoS(82CX8i<jaKU%@9PTIm{rDSdDYn-5
z?mz}GpQ0*s81=hx9LdF8$ezE4qv+?dadu)6>b}pgNbmm<4m9I|%n3?^Bj{g34SWT8
zrOkC@Eb}+2GL_U<6=_1va53t>PE=_fEX4P*3wPrpyo-AM7CdQ83(q$vIABZ@s5RzI
ztiuDi1FI=<ebAVv=&ug(5Zs9x_!5rBL1awxCn}*S>{P9B6;d?Qh}!iLRHC1wCU6py
z8t7LJcupqkddwp<6JFEIgZVnM>$Tx{hIx@tN!JqEY)VRvd^7C@KA$JFe5_)o<z^L6
zKRiyFrP<EQ4^NsFj`c&Kw$LZD_Bzy(s9Kf8bmApK8%>p4LNpVawb~oRE5rhIvQ104
zl2}Frwf<{3Q2DgWRW>zNB-7^e`6{u3Xd<2=*zlQ_&!>KVpC!VCO04B5CU{xQ>x7m=
zn^H|{|DdhnU>#Aa^)Dl46Izr1x8-!^5f<?p@t`$wP(tu;BJ*3I^ZI>XO|%huy|m7A
z2raL6`-7%8<1J!J_C$_J&mOrpZ*jYm=<#Y}cAp)ynwBrJ-m&|wsOu)|4r_hC<!!XB
z)@9Ah+E%o!YO`F=iQ7S|)qXb-jdOwLSdj#m^mx(sh?goKTQ(`qced-fL92~h`y#P~
z&2W~TiWlBY&nbR8kUmtJH!@XN))=S@HU#TZ3(KrpC*IK;w_P{r#5+T7qPN$Hd!gP~
zqBGhPiaYBa&-FHYwcU}PNT(f7ohqwKmzNLZrw&(?C++U27ww2x++xKdmKU{q=>3;+
z&<eX&kKJy&k$9A=BJqe)_A}NUuH`zhXnWL4bl9%dK@phA>HRUM)3N&L`<Eo#_IR|n
zJ?iw>%q$$!#CV`<r@yxfa?<CfwiKj3E-g+SDxHyz*3<+7t#)73P45ey%}saBuFol&
Q=2};`eG`hDKH`{v0VJ_O4FCWD

diff --git a/languages/robotstxt-manager-es_ES.po b/languages/robotstxt-manager-es_ES.po
index fb239cd..e691fd8 100644
--- a/languages/robotstxt-manager-es_ES.po
+++ b/languages/robotstxt-manager-es_ES.po
@@ -2,9 +2,12 @@
 # This file is distributed under the GPL-3.0-or-later.
 msgid ""
 msgstr ""
-"Project-Id-Version: Manager (by ROBOTSTXT) 0.6.0\n"
-"Report-Msgid-Bugs-To: https://wordpress.org/support/plugin/robotstxt-manager\n"
+"Project-Id-Version: Manager (by ROBOTSTXT) 1.4.1\n"
+"Report-Msgid-Bugs-To: https://www.robotstxt.software/plugins/robotstxt-manager/\n"
+"PO-Revision-Date: 2026-08-17 15:41+0000\n"
 "Last-Translator: ROBOTSTXT <hola@robotstxt.es>\n"
+"POT-Creation-Date: 2026-08-17T14:52:09+00:00\n"
+"X-Translator: ROBOTSTXT <hola@robotstxt.es>\n"
 "Language-Team: Español (España) <es_ES@robotstxt.es>\n"
 "Language: es_ES\n"
 "MIME-Version: 1.0\n"
@@ -13,289 +16,569 @@ msgstr ""
 "Plural-Forms: nplurals=2; plural=(n != 1);\n"
 "X-Domain: robotstxt-manager\n"
 
-msgid "%d plugin in the catalog is not compatible with this site's WordPress or PHP version."
-msgid_plural "%d plugins in the catalog are not compatible with this site's WordPress or PHP version."
-msgstr[0] "%d plugin del catálogo no es compatible con la versión de WordPress o de PHP de este sitio."
-msgstr[1] "%d plugins del catálogo no son compatibles con la versión de WordPress o de PHP de este sitio."
+#. Plugin Name of the plugin
+#: robotstxt-manager.php
+msgid "Manager (by ROBOTSTXT)"
+msgstr "Manager (de ROBOTSTXT)"
 
-msgid "%s activated."
-msgstr "%s activado."
+#. Plugin URI of the plugin
+#: robotstxt-manager.php
+msgid "https://www.robotstxt.software/plugins/robotstxt-manager/"
+msgstr "https://www.robotstxt.software/plugins/robotstxt-manager/"
 
-msgid "%s installed. Activate it from the list below."
-msgstr "%s instalado. Actívalo desde la lista de abajo."
-
-msgid "%s updated."
-msgstr "%s actualizado."
-
-msgid "(about %s)"
-msgstr "(sobre %s)"
-
-msgid "A key is stored (last 4 characters: <code>%s</code>). Leave blank to keep the existing key; enter a new value to replace it."
-msgstr "Hay una clave guardada (últimos 4 caracteres: <code>%s</code>). Déjalo en blanco para mantener la clave actual; escribe un valor nuevo para sustituirla."
-
-msgid "A key is stored but could not be decoded. You can replace it by entering a new value above, or delete it with the button below."
-msgstr "Hay una clave guardada pero no se pudo descodificar. Puedes sustituirla escribiendo un valor nuevo arriba, o borrarla con el botón de abajo."
-
-msgid "API Key"
-msgstr "Clave API"
-
-msgid "API key deleted. Save changes to persist."
-msgstr "Clave API borrada. Guarda los cambios para que surta efecto."
-
-msgid "API key is not configured."
-msgstr "La clave API no está configurada."
-
-msgid "Account-level API key issued by the ROBOTSTXT store. Required to authenticate catalog and subscription requests. The value is encrypted before storage."
-msgstr "Clave API a nivel de cuenta emitida por la tienda ROBOTSTXT. Es necesaria para autenticar las solicitudes del catálogo y de las suscripciones. El valor se cifra antes de guardarse."
-
-msgid "Action"
-msgstr "Acción"
-
-msgid "Activate"
-msgstr "Activar"
-
-msgid "An unexpected error occurred."
-msgstr "Ha ocurrido un error inesperado."
-
-msgid "Base URL of the remote Plugins Core installation that this site will pull the plugin catalog from."
-msgstr "URL base de la instalación remota de Plugins Core de la que este sitio obtendrá el catálogo de plugins."
-
-msgid "Buy"
-msgstr "Comprar"
-
-msgid "Cache"
-msgstr "Caché"
-
-msgid "Catalog Cache (minutes)"
-msgstr "Caché del catálogo (minutos)"
-
-msgid "Catalog refreshed."
-msgstr "Catálogo actualizado."
-
-msgid "Connected."
-msgstr "Conectado."
-
-msgid "Connection"
-msgstr "Conexión"
-
-msgid "Could not create a temporary file for download."
-msgstr "No se pudo crear un archivo temporal para la descarga."
-
-msgid "Could not reach Plugins Core: %s"
-msgstr "No se pudo conectar con Plugins Core: %s"
-
-msgid "Data on Uninstall"
-msgstr "Datos al desinstalar"
-
-msgid "Delete API key"
-msgstr "Borrar la clave API"
-
-msgid "Delete all plugin data when the plugin is uninstalled."
-msgstr "Borrar todos los datos del plugin cuando se desinstale."
-
-msgid "Delete the stored API key? The catalog and subscription data will stop working until a new key is entered."
-msgstr "¿Seguro que quieres borrar la clave API guardada? El catálogo y los datos de suscripción dejarán de funcionar hasta que se introduzca una clave nueva."
-
-msgid "Deleting…"
-msgstr "Borrando…"
-
-msgid "Download failed (HTTP %d)."
-msgstr "Fallo en la descarga (HTTP %d)."
-
-msgid "Download failed: %s"
-msgstr "Fallo en la descarga: %s"
-
-msgid "Free"
-msgstr "Gratis"
-
-msgid "How long the catalog response from Core is cached in a transient. Default: 60 minutes. Lower values refresh more often at the cost of more requests to Core. Maximum: 1440 (24 hours)."
-msgstr "Cuánto tiempo se guarda en caché la respuesta del catálogo de Core en un transient. Por defecto: 60 minutos. Los valores más bajos actualizan con más frecuencia a costa de más solicitudes a Core. Máximo: 1440 (24 horas)."
-
-msgid "Incompatible"
-msgstr "Incompatible"
-
-msgid "Install"
-msgstr "Instalar"
-
-msgid "Installation failed."
-msgstr "Fallo en la instalación."
-
-msgid "Installation failed: %s"
-msgstr "Fallo en la instalación: %s"
-
-msgid "Installed (inactive)"
-msgstr "Instalado (inactivo)"
-
-msgid "Insufficient permissions."
-msgstr "Permisos insuficientes."
-
-
-msgid "Manager (by ROBOTSTXT) — Plugins"
-msgstr "Manager (by ROBOTSTXT) — Plugins"
-
-msgid "Manager (by ROBOTSTXT) — Settings"
-msgstr "Manager (by ROBOTSTXT) — Ajustes"
-
-msgid "No plugins were returned by the ROBOTSTXT store. Check the Store URL and API key on the Settings page, or click Refresh to try again."
-msgstr "La tienda ROBOTSTXT no devolvió ningún plugin. Revisa la URL de la tienda y la clave API en la página de ajustes, o pulsa Actualizar para volver a intentarlo."
-
-msgid "Not installed"
-msgstr "No instalado"
-
-msgid "Plugin"
-msgstr "Plugin"
-
-msgid "Plugin is not installed."
-msgstr "El plugin no está instalado."
-
-msgid "Plugin not found in catalog."
-msgstr "Plugin no encontrado en el catálogo."
-
-
-msgid "Price"
-msgstr "Precio"
+#. Description of the plugin
+#: robotstxt-manager.php
+msgid ""
+"Client-side dashboard for the ROBOTSTXT plugin ecosystem. Lists the catalog "
+"from a remote Plugins Core install, resolves local install/update state, and "
+"installs, activates, and updates plugins directly from the store."
+msgstr ""
+"Escritorio del lado del cliente para el ecosistema de plugins de ROBOTSTXT. "
+"Muestra el catálogo de una instalación remota de Plugins Core, resuelve el "
+"estado local de instalación y actualización, e instala, activa y actualiza "
+"plugins directamente desde la tienda."
 
+#. Author of the plugin
+#: robotstxt-manager.php admin/class-robotstxt-manager-admin.php:48
 msgid "ROBOTSTXT"
 msgstr "ROBOTSTXT"
 
-msgid "ROBOTSTXT Manager is not configured yet. <a href=\"%s\">Set the Store URL and API key</a> to see your plugin catalog."
-msgstr "ROBOTSTXT Manager aún no está configurado. <a href=\"%s\">Configura la URL de la tienda y la clave API</a> para ver tu catálogo de plugins."
+#. Author URI of the plugin
+#: robotstxt-manager.php
+msgid "https://www.robotstxt.software/"
+msgstr "https://www.robotstxt.software/"
 
-msgid "Refresh catalog"
-msgstr "Actualizar el catálogo"
-
-msgid "Requires PHP"
-msgstr "Requiere PHP"
-
-msgid "Requires WP"
-msgstr "Requiere WP"
-
-msgid "Settings"
-msgstr "Ajustes"
-
-
-msgid "Store URL"
-msgstr "URL de la tienda"
-
-msgid "Store URL is not configured."
-msgstr "La URL de la tienda no está configurada."
-
-msgid "Store is not configured."
-msgstr "La tienda no está configurada."
-
-msgid "Test connection"
-msgstr "Probar la conexión"
-
-msgid "Testing…"
-msgstr "Probando…"
-
-msgid "The API key format is invalid. Copy the full key from your ROBOTSTXT account page."
-msgstr "El formato de la clave API no es válido. Copia la clave completa desde tu página de cuenta de ROBOTSTXT."
-
-msgid "The store responded with HTTP %d. Check the Store URL and API key."
-msgstr "La tienda respondió con HTTP %d. Revisa la URL de la tienda y la clave API."
-
-msgid "The store returned an invalid file."
-msgstr "La tienda devolvió un archivo no válido."
-
-msgid "This site runs WordPress %1$s on PHP %2$s."
-msgstr "Este sitio funciona con WordPress %1$s y PHP %2$s."
-
-msgid "Too many refreshes. Please wait a minute before refreshing again."
-msgstr "Demasiadas actualizaciones. Espera un minuto antes de volver a actualizar."
-
-
-msgid "Up to date"
-msgstr "Actualizado"
-
-msgid "Update"
-msgstr "Actualizar"
-
-msgid "Update available (v%1$s → v%2$s)"
-msgstr "Actualización disponible (v%1$s → v%2$s)"
-
-msgid "Visit website"
-msgstr "Visitar el sitio web"
+#: admin/class-robotstxt-manager-admin.php:47 admin/views/page-catalog.php:66
+msgid "Manager (by ROBOTSTXT) — Plugins"
+msgstr "Manager (by ROBOTSTXT) — Plugins"
 
+#: admin/class-robotstxt-manager-admin.php:64
+#: admin/class-robotstxt-manager-settings.php:207
 msgid "You do not have sufficient permissions to access this page."
 msgstr "No tienes permisos suficientes para acceder a esta página."
 
-msgid "Your server runs PHP"
-msgstr "Tu servidor funciona con PHP"
+#. translators: %s: plugin slug.
+#: admin/class-robotstxt-manager-admin.php:108
+#, php-format
+msgid ""
+"The payment for %s failed. Update your payment method from your ROBOTSTXT "
+"account page to keep access."
+msgstr ""
+"El pago de %s falló. Actualiza tu método de pago desde tu página de cuenta "
+"de ROBOTSTXT para mantener el acceso."
 
-msgid "Your site runs WordPress"
-msgstr "Tu sitio funciona con WordPress"
-
-msgid "This is the ROBOTSTXT plugin store: the catalog of plugins published by ROBOTSTXT, installable and updatable straight from your own wp-admin. Free plugins install with one click; premium plugins require an annual subscription that you purchase on our website."
-msgstr "Esta es la tienda de plugins de ROBOTSTXT: el catálogo de plugins publicados por ROBOTSTXT, instalables y actualizables directamente desde tu propio wp-admin. Los plugins gratis se instalan con un clic; los plugins premium requieren una suscripción anual que se compra en nuestro sitio web."
-
-msgid "Version"
-msgstr "Versión"
-
-msgid "Status"
-msgstr "Estado"
-
-msgid "€%s / year"
-msgstr "%s €/año"
-
-msgid "Support"
-msgstr "Soporte"
-
-msgid "Need help with a ROBOTSTXT plugin? Visit the plugin's website (the link in its row above) for documentation and guides, or contact us through our website — we are happy to help."
-msgstr "¿Necesitas ayuda con un plugin de ROBOTSTXT? Visita el sitio web del plugin (el enlace en su fila de arriba) para ver la documentación y las guías, o contáctanos a través de nuestro sitio web: estaremos encantados de ayudarte."
-
-msgid "Payments, and how it works"
-msgstr "Pagos, y cómo funciona"
-
-msgid "Free plugins install instantly at no cost. Premium plugins are annual subscriptions: you pay once on our website and the subscription renews automatically every year until you cancel. You can cancel at any time from your ROBOTSTXT account page — access keeps working until the end of the paid period. All payments are processed securely by Mollie; we never see or store your card details."
-msgstr "Los plugins gratis se instalan al instante y sin coste. Los plugins premium son suscripciones anuales: pagas una vez en nuestro sitio web y la suscripción se renueva automáticamente cada año hasta que la canceles. Puedes cancelarla en cualquier momento desde tu página de cuenta de ROBOTSTXT; el acceso sigue funcionando hasta el final del periodo pagado. Todos los pagos los procesa de forma segura Mollie; nosotros nunca vemos ni guardamos los datos de tu tarjeta."
-
-msgid "Installed required plugins: %s."
-msgstr "Plugins requeridos instalados: %s."
-
-msgid "Could not install the required plugin %s."
-msgstr "No se pudo instalar el plugin requerido %s."
-
-msgid "WordPress.org lookup failed: %s"
-msgstr "La búsqueda en WordPress.org falló: %s"
-
-msgid "No download found on WordPress.org for %s."
-msgstr "No se encontró ninguna descarga en WordPress.org para %s."
-
-msgid "The downloaded plugin for %s does not have the expected folder structure."
-msgstr "El plugin descargado para %s no tiene la estructura de carpetas esperada."
-
-msgid "Requires: %s"
-msgstr "Requiere: %s"
-
-msgid "The payment for %s failed. Update your payment method from your ROBOTSTXT account page to keep access."
-msgstr "El pago de %s falló. Actualiza tu método de pago desde tu página de cuenta de ROBOTSTXT para mantener el acceso."
-
-msgid "The subscription for %s has expired, but the plugin is still active on this site. Renew from your ROBOTSTXT account page to keep receiving updates."
-msgstr "La suscripción de %s ha caducado, pero el plugin sigue activo en este sitio. Renuévela desde tu página de cuenta de ROBOTSTXT para seguir recibiendo actualizaciones."
-
-msgid "Subscribed"
-msgstr "Suscrito"
-
-msgid "Subscribed — %d days left"
-msgstr "Suscrito — quedan %d días"
-
-msgid "Payment failed"
-msgstr "Pago fallido"
-
-msgid "Cancelled"
-msgstr "Cancelada"
-
-msgid "Expired"
-msgstr "Caducada"
+#. translators: %s: plugin slug.
+#: admin/class-robotstxt-manager-admin.php:119
+#, php-format
+msgid ""
+"The subscription for %s has expired, but the plugin is still active on this "
+"site. Renew from your ROBOTSTXT account page to keep receiving updates."
+msgstr ""
+"La suscripción de %s ha caducado, pero el plugin sigue activo en este sitio. "
+"Renuévela desde tu página de cuenta de ROBOTSTXT para seguir recibiendo "
+"actualizaciones."
 
+#. translators: 1: plugin slug, 2: days remaining.
+#: admin/class-robotstxt-manager-admin.php:132
+#, php-format
 msgid "The subscription for %1$s expires in %2$d day."
 msgid_plural "The subscription for %1$s expires in %2$d days."
 msgstr[0] "La suscripción de %1$s caduca en %2$d día."
 msgstr[1] "La suscripción de %1$s caduca en %2$d días."
 
-msgid "Create your free account at the <a href=\"%s\" target=\"_blank\" rel=\"noopener noreferrer\">ROBOTSTXT store</a> to get your personal API key. The key links your subscriptions to this site and unlocks premium plugins and updates."
-msgstr "Crea tu cuenta gratuita en <a href=\"%s\" target=\"_blank\" rel=\"noopener noreferrer\">la tienda de ROBOTSTXT</a> para obtener tu clave API personal. La clave vincula tus suscripciones a este sitio y desbloquea los plugins premium y sus actualizaciones."
+#: admin/class-robotstxt-manager-admin.php:153
+#: admin/class-robotstxt-manager-installer.php:421
+#: admin/class-robotstxt-manager-settings.php:379
+#: admin/class-robotstxt-manager-settings.php:405
+msgid "Insufficient permissions."
+msgstr "Permisos insuficientes."
 
-msgid "Account-level API key from the ROBOTSTXT store (create your free account there to get one). Optional — the free catalog works without it — but required to link your subscriptions, install premium plugins, and receive their updates. Encrypted before storage."
-msgstr "Clave API a nivel de cuenta de la tienda de ROBOTSTXT (crea allí tu cuenta gratuita para obtenerla). Opcional: el catálogo de plugins gratis funciona sin ella, pero es necesaria para vincular tus suscripciones, instalar plugins premium y recibir sus actualizaciones. Se cifra antes de guardarse."
+#: admin/class-robotstxt-manager-admin.php:197
+msgid "Too many refreshes. Please wait a minute before refreshing again."
+msgstr "Demasiadas actualizaciones seguidas. Espera un minuto antes de volver a actualizar."
+
+#: admin/class-robotstxt-manager-installer.php:51
+#: admin/class-robotstxt-manager-installer.php:518
+msgid "Plugin not found in catalog."
+msgstr "Plugin no encontrado en el catálogo."
+
+#. translators: %s: plugin name.
+#: admin/class-robotstxt-manager-installer.php:73
+#, php-format
+msgid "%s installed. Activate it from the list below."
+msgstr "%s instalado. Actívalo desde la lista de abajo."
+
+#. translators: %s: dependency slug.
+#: admin/class-robotstxt-manager-installer.php:114
+#, php-format
+msgid "Could not install the required plugin %s."
+msgstr "No se pudo instalar el plugin requerido %s."
+
+#. translators: %s: list of installed dependency names.
+#: admin/class-robotstxt-manager-installer.php:130
+#, php-format
+msgid "Installed required plugins: %s."
+msgstr "Plugins requeridos instalados: %s."
+
+#. translators: %s: error message from WordPress.org.
+#: admin/class-robotstxt-manager-installer.php:272
+#, php-format
+msgid "WordPress.org lookup failed: %s"
+msgstr "La búsqueda en WordPress.org falló: %s"
+
+#. translators: %s: plugin slug.
+#: admin/class-robotstxt-manager-installer.php:281
+#, php-format
+msgid "No download found on WordPress.org for %s."
+msgstr "No se encontró ninguna descarga en WordPress.org para %s."
+
+#: admin/class-robotstxt-manager-installer.php:287
+#: admin/class-robotstxt-manager-installer.php:540
+msgid "Could not create a temporary file for download."
+msgstr "No se pudo crear un archivo temporal para la descarga."
+
+#. translators: %s: HTTP transport error message.
+#: admin/class-robotstxt-manager-installer.php:303
+#: admin/class-robotstxt-manager-installer.php:573
+#, php-format
+msgid "Download failed: %s"
+msgstr "Fallo en la descarga: %s"
+
+#. translators: %d: HTTP status code.
+#: admin/class-robotstxt-manager-installer.php:310
+#: admin/class-robotstxt-manager-installer.php:588
+#, php-format
+msgid "Download failed (HTTP %d)."
+msgstr "Fallo en la descarga (HTTP %d)."
+
+#: admin/class-robotstxt-manager-installer.php:316
+#: admin/class-robotstxt-manager-installer.php:597
+msgid "The store returned an invalid file."
+msgstr "La tienda devolvió un archivo no válido."
+
+#. translators: %s: upgrader error message.
+#: admin/class-robotstxt-manager-installer.php:334
+#: admin/class-robotstxt-manager-installer.php:622
+#, php-format
+msgid "Installation failed: %s"
+msgstr "Fallo en la instalación: %s"
+
+#. translators: %s: upgrader error message.
+#: admin/class-robotstxt-manager-installer.php:334
+#: admin/class-robotstxt-manager-installer.php:625
+msgid "Installation failed."
+msgstr "Fallo en la instalación."
+
+#. translators: %s: plugin slug.
+#: admin/class-robotstxt-manager-installer.php:341
+#, php-format
+msgid ""
+"The downloaded plugin for %s does not have the expected folder structure."
+msgstr ""
+"El plugin descargado para %s no tiene la estructura de carpetas esperada."
+
+#: admin/class-robotstxt-manager-installer.php:363
+#: admin/class-robotstxt-manager-installer.php:394
+msgid "Plugin is not installed."
+msgstr "El plugin no está instalado."
+
+#. translators: %s: plugin name (slug).
+#: admin/class-robotstxt-manager-installer.php:375
+#, php-format
+msgid "%s activated."
+msgstr "%s activado."
+
+#. translators: %s: plugin name (slug).
+#: admin/class-robotstxt-manager-installer.php:406
+#, php-format
+msgid "%s updated."
+msgstr "%s actualizado."
+
+#: admin/class-robotstxt-manager-installer.php:512
+msgid "Store is not configured."
+msgstr "La tienda no está configurada."
+
+#: admin/class-robotstxt-manager-settings.php:59
+#: admin/views/page-settings.php:13
+msgid "Manager (by ROBOTSTXT) — Settings"
+msgstr "Manager (by ROBOTSTXT) — Ajustes"
+
+#: admin/class-robotstxt-manager-settings.php:60
+msgid "Settings"
+msgstr "Ajustes"
+
+#: admin/class-robotstxt-manager-settings.php:75
+msgid "Connection"
+msgstr "Conexión"
+
+#: admin/class-robotstxt-manager-settings.php:92
+msgid "Store URL"
+msgstr "URL de la tienda"
+
+#: admin/class-robotstxt-manager-settings.php:110
+msgid "API Key"
+msgstr "Clave API"
+
+#: admin/class-robotstxt-manager-settings.php:118
+msgid "Cache"
+msgstr "Caché"
+
+#: admin/class-robotstxt-manager-settings.php:135
+msgid "Catalog Cache (minutes)"
+msgstr "Caché del catálogo (minutos)"
+
+#: admin/class-robotstxt-manager-settings.php:153
+msgid "Data on Uninstall"
+msgstr "Datos al desinstalar"
+
+#: admin/class-robotstxt-manager-settings.php:188
+msgid "Testing…"
+msgstr "Probando…"
+
+#: admin/class-robotstxt-manager-settings.php:189
+#: admin/class-robotstxt-manager-settings.php:274
+msgid "Test connection"
+msgstr "Probar la conexión"
+
+#: admin/class-robotstxt-manager-settings.php:190
+msgid "Deleting…"
+msgstr "Borrando…"
+
+#: admin/class-robotstxt-manager-settings.php:191
+#: admin/class-robotstxt-manager-settings.php:278
+msgid "Delete API key"
+msgstr "Borrar la clave API"
+
+#: admin/class-robotstxt-manager-settings.php:192
+msgid ""
+"Delete the stored API key? The catalog and subscription data will stop "
+"working until a new key is entered."
+msgstr ""
+"¿Seguro que quieres borrar la clave API guardada? El catálogo y los datos de "
+"suscripción dejarán de funcionar hasta que se introduzca una clave nueva."
+
+#: admin/class-robotstxt-manager-settings.php:193
+#: admin/class-robotstxt-manager-settings.php:414
+msgid "API key deleted. Save changes to persist."
+msgstr "Clave API borrada. Guarda los cambios para que surta efecto."
+
+#: admin/class-robotstxt-manager-settings.php:194
+msgid "An unexpected error occurred."
+msgstr "Ha ocurrido un error inesperado."
+
+#: admin/class-robotstxt-manager-settings.php:226
+msgid ""
+"Base URL of the remote Plugins Core installation that this site will pull "
+"the plugin catalog from."
+msgstr ""
+"URL base de la instalación remota de Plugins Core de la que este sitio "
+"obtendrá el catálogo de plugins."
+
+#. translators: %s: last 4 characters of the stored API key.
+#: admin/class-robotstxt-manager-settings.php:257
+#, php-format
+msgid ""
+"A key is stored (last 4 characters: <code>%s</code>). Leave blank to keep "
+"the existing key; enter a new value to replace it."
+msgstr ""
+"Hay una clave guardada (últimos 4 caracteres: <code>%s</code>). Déjalo en "
+"blanco para mantener la clave actual; escribe un valor nuevo para "
+"sustituirla."
+
+#: admin/class-robotstxt-manager-settings.php:262
+msgid ""
+"A key is stored but could not be decoded. You can replace it by entering a "
+"new value above, or delete it with the button below."
+msgstr ""
+"Hay una clave guardada pero no se pudo descodificar. Puedes sustituirla "
+"escribiendo un valor nuevo arriba, o borrarla con el botón de abajo."
+
+#: admin/class-robotstxt-manager-settings.php:266
+msgid ""
+"Account-level API key from the ROBOTSTXT store (create your free account "
+"there to get one). Optional — the free catalog works without it — but "
+"required to link your subscriptions, install premium plugins, and receive "
+"their updates. Encrypted before storage."
+msgstr ""
+"Clave API a nivel de cuenta de la tienda de ROBOTSTXT (crea allí tu cuenta "
+"gratuita para obtenerla). Opcional: el catálogo de plugins gratis funciona "
+"sin ella, pero es necesaria para vincular tus suscripciones, instalar "
+"plugins premium y recibir sus actualizaciones. Se cifra antes de guardarse."
+
+#: admin/class-robotstxt-manager-settings.php:298
+msgid ""
+"How long the catalog response from Core is cached in a transient. Default: "
+"60 minutes. Lower values refresh more often at the cost of more requests to "
+"Core. Maximum: 1440 (24 hours)."
+msgstr ""
+"Cuánto tiempo se guarda en caché la respuesta del catálogo de Core en un "
+"transient. Por defecto: 60 minutos. Los valores más bajos actualizan con más "
+"frecuencia a costa de más solicitudes a Core. Máximo: 1440 (24 horas)."
+
+#: admin/class-robotstxt-manager-settings.php:313
+msgid "Delete all plugin data when the plugin is uninstalled."
+msgstr "Borrar todos los datos del plugin cuando se desinstale."
+
+#: admin/class-robotstxt-manager-settings.php:343
+msgid ""
+"The API key format is invalid. Copy the full key from your ROBOTSTXT account "
+"page."
+msgstr ""
+"El formato de la clave API no es válido. Copia la clave completa desde tu "
+"página de cuenta de ROBOTSTXT."
+
+#: admin/views/page-catalog.php:69
+msgid ""
+"This is the ROBOTSTXT plugin store: the catalog of plugins published by "
+"ROBOTSTXT, installable and updatable straight from your own wp-admin. Free "
+"plugins install with one click; premium plugins require an annual "
+"subscription that you purchase on our website."
+msgstr ""
+"Esta es la tienda de plugins de ROBOTSTXT: el catálogo de plugins publicados "
+"por ROBOTSTXT, instalables y actualizables directamente desde tu propio wp-"
+"admin. Los plugins gratis se instalan con un clic; los plugins premium "
+"requieren una suscripción anual que se compra en nuestro sitio web."
+
+#: admin/views/page-catalog.php:73
+msgid "Catalog refreshed."
+msgstr "Catálogo actualizado."
+
+#. translators: %s: store registration URL.
+#: admin/views/page-catalog.php:89
+#, php-format
+msgid ""
+"Create your free account at the <a href=\"%s\" target=\"_blank\" "
+"rel=\"noopener noreferrer\">ROBOTSTXT store</a> to get your personal API "
+"key. The key links your subscriptions to this site and unlocks premium "
+"plugins and updates."
+msgstr ""
+"Crea tu cuenta gratuita en <a href=\"%s\" target=\"_blank\" rel=\"noopener "
+"noreferrer\">la tienda de ROBOTSTXT</a> para obtener tu clave API personal. "
+"La clave vincula tus suscripciones a este sitio y desbloquea los plugins "
+"premium y sus actualizaciones."
+
+#. translators: %s: settings URL.
+#: admin/views/page-catalog.php:109
+#, php-format
+msgid ""
+"ROBOTSTXT Manager is not configured yet. <a href=\"%s\">Set the Store URL "
+"and API key</a> to see your plugin catalog."
+msgstr ""
+"ROBOTSTXT Manager aún no está configurado. <a href=\"%s\">Configura la URL "
+"de la tienda y la clave API</a> para ver tu catálogo de plugins."
+
+#: admin/views/page-catalog.php:119
+msgid ""
+"No plugins were returned by the ROBOTSTXT store. Check the Store URL and API "
+"key on the Settings page, or click Refresh to try again."
+msgstr ""
+"La tienda ROBOTSTXT no devolvió ningún plugin. Revisa la URL de la tienda y "
+"la clave API en la página de ajustes, o pulsa Actualizar para volver a "
+"intentarlo."
+
+#: admin/views/page-catalog.php:122 admin/views/page-catalog.php:125
+msgid "Refresh catalog"
+msgstr "Actualizar el catálogo"
+
+#: admin/views/page-catalog.php:131
+msgid "Plugin"
+msgstr "Plugin"
+
+#: admin/views/page-catalog.php:132
+msgid "Version"
+msgstr "Versión"
+
+#: admin/views/page-catalog.php:133
+msgid "Requires WP"
+msgstr "Requiere WP"
+
+#: admin/views/page-catalog.php:134
+msgid "Requires PHP"
+msgstr "Requiere PHP"
+
+#: admin/views/page-catalog.php:135
+msgid "Price"
+msgstr "Precio"
+
+#: admin/views/page-catalog.php:136
+msgid "Action"
+msgstr "Acción"
+
+#: admin/views/page-catalog.php:137
+msgid "Status"
+msgstr "Estado"
+
+#: admin/views/page-catalog.php:239
+msgid "Your site runs WordPress"
+msgstr "Tu sitio funciona con WordPress"
+
+#: admin/views/page-catalog.php:251
+msgid "Your server runs PHP"
+msgstr "Tu servidor funciona con PHP"
+
+#. translators: %s: formatted price number.
+#: admin/views/page-catalog.php:264
+#, php-format
+msgid "€%s / year"
+msgstr "%s €/año"
+
+#. translators: %d: days remaining.
+#: admin/views/page-catalog.php:282
+#, php-format
+msgid "Subscribed — %d days left"
+msgstr "Suscrito — quedan %d días"
+
+#: admin/views/page-catalog.php:286
+msgid "Subscribed"
+msgstr "Suscrito"
+
+#: admin/views/page-catalog.php:289
+msgid "Payment failed"
+msgstr "Pago fallido"
+
+#: admin/views/page-catalog.php:291
+msgid "Cancelled"
+msgstr "Cancelada"
+
+#: admin/views/page-catalog.php:293
+msgid "Expired"
+msgstr "Caducada"
+
+#: admin/views/page-catalog.php:303
+msgid "Free"
+msgstr "Gratis"
+
+#: admin/views/page-catalog.php:309
+msgid "Incompatible"
+msgstr "Incompatible"
+
+#: admin/views/page-catalog.php:312
+msgid "Buy"
+msgstr "Comprar"
+
+#: admin/views/page-catalog.php:317
+msgid "Install"
+msgstr "Instalar"
+
+#: admin/views/page-catalog.php:319
+msgid "Activate"
+msgstr "Activar"
+
+#: admin/views/page-catalog.php:321
+msgid "Update"
+msgstr "Actualizar"
+
+#: admin/views/page-catalog.php:327
+msgid "Not installed"
+msgstr "No instalado"
+
+#: admin/views/page-catalog.php:329
+msgid "Installed (inactive)"
+msgstr "Instalado (inactivo)"
+
+#. translators: 1: installed version, 2: available version.
+#: admin/views/page-catalog.php:334
+#, php-format
+msgid "Update available (v%1$s → v%2$s)"
+msgstr "Actualización disponible (v%1$s → v%2$s)"
+
+#: admin/views/page-catalog.php:340
+msgid "Up to date"
+msgstr "Actualizado"
+
+#: admin/views/page-catalog.php:349
+msgid "Visit website"
+msgstr "Visitar el sitio web"
+
+#. translators: %s: plugin name.
+#: admin/views/page-catalog.php:349
+#, php-format
+msgid "(about %s)"
+msgstr "(sobre %s)"
+
+#. translators: %s: list of plugin slugs.
+#: admin/views/page-catalog.php:360
+#, php-format
+msgid "Requires: %s"
+msgstr "Requiere: %s"
+
+#: admin/views/page-catalog.php:374
+msgid "Support"
+msgstr "Soporte"
+
+#: admin/views/page-catalog.php:376
+msgid ""
+"Need help with a ROBOTSTXT plugin? Visit the plugin's website (the link in "
+"its row above) for documentation and guides, or contact us through our "
+"website — we are happy to help."
+msgstr ""
+"¿Necesitas ayuda con un plugin de ROBOTSTXT? Visita el sitio web del plugin "
+"(el enlace en su fila de arriba) para ver la documentación y las guías, o "
+"contáctanos a través de nuestro sitio web: estaremos encantados de ayudarte."
+
+#: admin/views/page-catalog.php:379
+msgid "Payments, and how it works"
+msgstr "Pagos, y cómo funciona"
+
+#: admin/views/page-catalog.php:381
+msgid ""
+"Free plugins install instantly at no cost. Premium plugins are annual "
+"subscriptions: you pay once on our website and the subscription renews "
+"automatically every year until you cancel. You can cancel at any time from "
+"your ROBOTSTXT account page — access keeps working until the end of the paid "
+"period. All payments are processed securely by Mollie; we never see or store "
+"your card details."
+msgstr ""
+"Los plugins gratis se instalan al instante y sin coste. Los plugins premium "
+"son suscripciones anuales: pagas una vez en nuestro sitio web y la "
+"suscripción se renueva automáticamente cada año hasta que la canceles. "
+"Puedes cancelarla en cualquier momento desde tu página de cuenta de "
+"ROBOTSTXT; el acceso sigue funcionando hasta el final del periodo pagado. "
+"Todos los pagos los procesa de forma segura Mollie; nosotros nunca vemos ni "
+"guardamos los datos de tu tarjeta."
+
+#. translators: %d: number of incompatible plugins.
+#: admin/views/page-catalog.php:391
+#, php-format
+msgid ""
+"%d plugin in the catalog is not compatible with this site's WordPress or PHP "
+"version."
+msgid_plural ""
+"%d plugins in the catalog are not compatible with this site's WordPress or "
+"PHP version."
+msgstr[0] ""
+"%d plugin del catálogo no es compatible con la versión de WordPress o de PHP "
+"de este sitio."
+msgstr[1] ""
+"%d plugins del catálogo no son compatibles con la versión de WordPress o de "
+"PHP de este sitio."
+
+#. translators: 1: local WP version, 2: local PHP version.
+#: admin/views/page-catalog.php:400
+#, php-format
+msgid "This site runs WordPress %1$s on PHP %2$s."
+msgstr "Este sitio funciona con WordPress %1$s y PHP %2$s."
+
+#: includes/class-robotstxt-manager-core-client.php:141
+msgid "Store URL is not configured."
+msgstr "La URL de la tienda no está configurada."
+
+#: includes/class-robotstxt-manager-core-client.php:148
+msgid "API key is not configured."
+msgstr "La clave API no está configurada."
+
+#. translators: %s: HTTP transport error message.
+#: includes/class-robotstxt-manager-core-client.php:158
+#, php-format
+msgid "Could not reach Plugins Core: %s"
+msgstr "No se pudo conectar con Plugins Core: %s"
+
+#. translators: %d: HTTP status code.
+#: includes/class-robotstxt-manager-core-client.php:168
+#, php-format
+msgid "The store responded with HTTP %d. Check the Store URL and API key."
+msgstr "La tienda respondió con HTTP %d. Comprueba la URL de la tienda y la clave API."
+
+#: includes/class-robotstxt-manager-core-client.php:177
+msgid "Connected."
+msgstr "Conectado."
diff --git a/languages/robotstxt-manager.pot b/languages/robotstxt-manager.pot
index 4d2d0c3..e0350b5 100644
--- a/languages/robotstxt-manager.pot
+++ b/languages/robotstxt-manager.pot
@@ -1,33 +1,480 @@
+# Copyright (C) 2026 ROBOTSTXT
+# This file is distributed under the GPL-3.0-or-later.
+msgid ""
+msgstr ""
+"Project-Id-Version: Manager (by ROBOTSTXT) 1.4.1\n"
+"Report-Msgid-Bugs-To: https://www.robotstxt.software/plugins/robotstxt-manager/\n"
+"Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
+"Language-Team: LANGUAGE <LL@li.org>\n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: 8bit\n"
+"POT-Creation-Date: 2026-08-17T14:52:09+00:00\n"
+"PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
+"X-Generator: WP-CLI 2.12.0\n"
+"X-Domain: robotstxt-manager\n"
 
+#. Plugin Name of the plugin
+#: robotstxt-manager.php
+msgid "Manager (by ROBOTSTXT)"
+msgstr ""
 
+#. Plugin URI of the plugin
+#: robotstxt-manager.php
+msgid "https://www.robotstxt.software/plugins/robotstxt-manager/"
+msgstr ""
+
+#. Description of the plugin
+#: robotstxt-manager.php
+msgid "Client-side dashboard for the ROBOTSTXT plugin ecosystem. Lists the catalog from a remote Plugins Core install, resolves local install/update state, and installs, activates, and updates plugins directly from the store."
+msgstr ""
+
+#. Author of the plugin
+#: robotstxt-manager.php
+#: admin/class-robotstxt-manager-admin.php:48
+msgid "ROBOTSTXT"
+msgstr ""
+
+#. Author URI of the plugin
+#: robotstxt-manager.php
+msgid "https://www.robotstxt.software/"
+msgstr ""
+
+#: admin/class-robotstxt-manager-admin.php:47
+#: admin/views/page-catalog.php:66
+msgid "Manager (by ROBOTSTXT) — Plugins"
+msgstr ""
+
+#: admin/class-robotstxt-manager-admin.php:64
+#: admin/class-robotstxt-manager-settings.php:207
+msgid "You do not have sufficient permissions to access this page."
+msgstr ""
+
+#. translators: %s: plugin slug.
+#: admin/class-robotstxt-manager-admin.php:108
+#, php-format
 msgid "The payment for %s failed. Update your payment method from your ROBOTSTXT account page to keep access."
 msgstr ""
 
+#. translators: %s: plugin slug.
+#: admin/class-robotstxt-manager-admin.php:119
+#, php-format
 msgid "The subscription for %s has expired, but the plugin is still active on this site. Renew from your ROBOTSTXT account page to keep receiving updates."
 msgstr ""
 
+#. translators: 1: plugin slug, 2: days remaining.
+#: admin/class-robotstxt-manager-admin.php:132
+#, php-format
 msgid "The subscription for %1$s expires in %2$d day."
 msgid_plural "The subscription for %1$s expires in %2$d days."
 msgstr[0] ""
 msgstr[1] ""
 
-msgid "Subscribed"
+#: admin/class-robotstxt-manager-admin.php:153
+#: admin/class-robotstxt-manager-installer.php:421
+#: admin/class-robotstxt-manager-settings.php:379
+#: admin/class-robotstxt-manager-settings.php:405
+msgid "Insufficient permissions."
 msgstr ""
 
-msgid "Subscribed — %d days left"
+#: admin/class-robotstxt-manager-admin.php:197
+msgid "Too many refreshes. Please wait a minute before refreshing again."
 msgstr ""
 
-msgid "Payment failed"
+#: admin/class-robotstxt-manager-installer.php:51
+#: admin/class-robotstxt-manager-installer.php:518
+msgid "Plugin not found in catalog."
 msgstr ""
 
-msgid "Cancelled"
+#. translators: %s: plugin name.
+#: admin/class-robotstxt-manager-installer.php:73
+#, php-format
+msgid "%s installed. Activate it from the list below."
 msgstr ""
 
-msgid "Expired"
+#. translators: %s: dependency slug.
+#: admin/class-robotstxt-manager-installer.php:114
+#, php-format
+msgid "Could not install the required plugin %s."
 msgstr ""
 
+#. translators: %s: list of installed dependency names.
+#: admin/class-robotstxt-manager-installer.php:130
+#, php-format
+msgid "Installed required plugins: %s."
+msgstr ""
+
+#. translators: %s: error message from WordPress.org.
+#: admin/class-robotstxt-manager-installer.php:272
+#, php-format
+msgid "WordPress.org lookup failed: %s"
+msgstr ""
+
+#. translators: %s: plugin slug.
+#: admin/class-robotstxt-manager-installer.php:281
+#, php-format
+msgid "No download found on WordPress.org for %s."
+msgstr ""
+
+#: admin/class-robotstxt-manager-installer.php:287
+#: admin/class-robotstxt-manager-installer.php:540
+msgid "Could not create a temporary file for download."
+msgstr ""
+
+#. translators: %s: HTTP transport error message.
+#: admin/class-robotstxt-manager-installer.php:303
+#: admin/class-robotstxt-manager-installer.php:573
+#, php-format
+msgid "Download failed: %s"
+msgstr ""
+
+#. translators: %d: HTTP status code.
+#: admin/class-robotstxt-manager-installer.php:310
+#: admin/class-robotstxt-manager-installer.php:588
+#, php-format
+msgid "Download failed (HTTP %d)."
+msgstr ""
+
+#: admin/class-robotstxt-manager-installer.php:316
+#: admin/class-robotstxt-manager-installer.php:597
+msgid "The store returned an invalid file."
+msgstr ""
+
+#. translators: %s: upgrader error message.
+#: admin/class-robotstxt-manager-installer.php:334
+#: admin/class-robotstxt-manager-installer.php:622
+#, php-format
+msgid "Installation failed: %s"
+msgstr ""
+
+#. translators: %s: upgrader error message.
+#: admin/class-robotstxt-manager-installer.php:334
+#: admin/class-robotstxt-manager-installer.php:625
+msgid "Installation failed."
+msgstr ""
+
+#. translators: %s: plugin slug.
+#: admin/class-robotstxt-manager-installer.php:341
+#, php-format
+msgid "The downloaded plugin for %s does not have the expected folder structure."
+msgstr ""
+
+#: admin/class-robotstxt-manager-installer.php:363
+#: admin/class-robotstxt-manager-installer.php:394
+msgid "Plugin is not installed."
+msgstr ""
+
+#. translators: %s: plugin name (slug).
+#: admin/class-robotstxt-manager-installer.php:375
+#, php-format
+msgid "%s activated."
+msgstr ""
+
+#. translators: %s: plugin name (slug).
+#: admin/class-robotstxt-manager-installer.php:406
+#, php-format
+msgid "%s updated."
+msgstr ""
+
+#: admin/class-robotstxt-manager-installer.php:512
+msgid "Store is not configured."
+msgstr ""
+
+#: admin/class-robotstxt-manager-settings.php:59
+#: admin/views/page-settings.php:13
+msgid "Manager (by ROBOTSTXT) — Settings"
+msgstr ""
+
+#: admin/class-robotstxt-manager-settings.php:60
+msgid "Settings"
+msgstr ""
+
+#: admin/class-robotstxt-manager-settings.php:75
+msgid "Connection"
+msgstr ""
+
+#: admin/class-robotstxt-manager-settings.php:92
+msgid "Store URL"
+msgstr ""
+
+#: admin/class-robotstxt-manager-settings.php:110
+msgid "API Key"
+msgstr ""
+
+#: admin/class-robotstxt-manager-settings.php:118
+msgid "Cache"
+msgstr ""
+
+#: admin/class-robotstxt-manager-settings.php:135
+msgid "Catalog Cache (minutes)"
+msgstr ""
+
+#: admin/class-robotstxt-manager-settings.php:153
+msgid "Data on Uninstall"
+msgstr ""
+
+#: admin/class-robotstxt-manager-settings.php:188
+msgid "Testing…"
+msgstr ""
+
+#: admin/class-robotstxt-manager-settings.php:189
+#: admin/class-robotstxt-manager-settings.php:274
+msgid "Test connection"
+msgstr ""
+
+#: admin/class-robotstxt-manager-settings.php:190
+msgid "Deleting…"
+msgstr ""
+
+#: admin/class-robotstxt-manager-settings.php:191
+#: admin/class-robotstxt-manager-settings.php:278
+msgid "Delete API key"
+msgstr ""
+
+#: admin/class-robotstxt-manager-settings.php:192
+msgid "Delete the stored API key? The catalog and subscription data will stop working until a new key is entered."
+msgstr ""
+
+#: admin/class-robotstxt-manager-settings.php:193
+#: admin/class-robotstxt-manager-settings.php:414
+msgid "API key deleted. Save changes to persist."
+msgstr ""
+
+#: admin/class-robotstxt-manager-settings.php:194
+msgid "An unexpected error occurred."
+msgstr ""
+
+#: admin/class-robotstxt-manager-settings.php:226
+msgid "Base URL of the remote Plugins Core installation that this site will pull the plugin catalog from."
+msgstr ""
+
+#. translators: %s: last 4 characters of the stored API key.
+#: admin/class-robotstxt-manager-settings.php:257
+#, php-format
+msgid "A key is stored (last 4 characters: <code>%s</code>). Leave blank to keep the existing key; enter a new value to replace it."
+msgstr ""
+
+#: admin/class-robotstxt-manager-settings.php:262
+msgid "A key is stored but could not be decoded. You can replace it by entering a new value above, or delete it with the button below."
+msgstr ""
+
+#: admin/class-robotstxt-manager-settings.php:266
+msgid "Account-level API key from the ROBOTSTXT store (create your free account there to get one). Optional — the free catalog works without it — but required to link your subscriptions, install premium plugins, and receive their updates. Encrypted before storage."
+msgstr ""
+
+#: admin/class-robotstxt-manager-settings.php:298
+msgid "How long the catalog response from Core is cached in a transient. Default: 60 minutes. Lower values refresh more often at the cost of more requests to Core. Maximum: 1440 (24 hours)."
+msgstr ""
+
+#: admin/class-robotstxt-manager-settings.php:313
+msgid "Delete all plugin data when the plugin is uninstalled."
+msgstr ""
+
+#: admin/class-robotstxt-manager-settings.php:343
+msgid "The API key format is invalid. Copy the full key from your ROBOTSTXT account page."
+msgstr ""
+
+#: admin/views/page-catalog.php:69
+msgid "This is the ROBOTSTXT plugin store: the catalog of plugins published by ROBOTSTXT, installable and updatable straight from your own wp-admin. Free plugins install with one click; premium plugins require an annual subscription that you purchase on our website."
+msgstr ""
+
+#: admin/views/page-catalog.php:73
+msgid "Catalog refreshed."
+msgstr ""
+
+#. translators: %s: store registration URL.
+#: admin/views/page-catalog.php:89
+#, php-format
 msgid "Create your free account at the <a href=\"%s\" target=\"_blank\" rel=\"noopener noreferrer\">ROBOTSTXT store</a> to get your personal API key. The key links your subscriptions to this site and unlocks premium plugins and updates."
 msgstr ""
 
-msgid "Account-level API key from the ROBOTSTXT store (create your free account there to get one). Optional — the free catalog works without it — but required to link your subscriptions, install premium plugins, and receive their updates. Encrypted before storage."
+#. translators: %s: settings URL.
+#: admin/views/page-catalog.php:109
+#, php-format
+msgid "ROBOTSTXT Manager is not configured yet. <a href=\"%s\">Set the Store URL and API key</a> to see your plugin catalog."
+msgstr ""
+
+#: admin/views/page-catalog.php:119
+msgid "No plugins were returned by the ROBOTSTXT store. Check the Store URL and API key on the Settings page, or click Refresh to try again."
+msgstr ""
+
+#: admin/views/page-catalog.php:122
+#: admin/views/page-catalog.php:125
+msgid "Refresh catalog"
+msgstr ""
+
+#: admin/views/page-catalog.php:131
+msgid "Plugin"
+msgstr ""
+
+#: admin/views/page-catalog.php:132
+msgid "Version"
+msgstr ""
+
+#: admin/views/page-catalog.php:133
+msgid "Requires WP"
+msgstr ""
+
+#: admin/views/page-catalog.php:134
+msgid "Requires PHP"
+msgstr ""
+
+#: admin/views/page-catalog.php:135
+msgid "Price"
+msgstr ""
+
+#: admin/views/page-catalog.php:136
+msgid "Action"
+msgstr ""
+
+#: admin/views/page-catalog.php:137
+msgid "Status"
+msgstr ""
+
+#: admin/views/page-catalog.php:239
+msgid "Your site runs WordPress"
+msgstr ""
+
+#: admin/views/page-catalog.php:251
+msgid "Your server runs PHP"
+msgstr ""
+
+#. translators: %s: formatted price number.
+#: admin/views/page-catalog.php:264
+#, php-format
+msgid "€%s / year"
+msgstr ""
+
+#. translators: %d: days remaining.
+#: admin/views/page-catalog.php:282
+#, php-format
+msgid "Subscribed — %d days left"
+msgstr ""
+
+#: admin/views/page-catalog.php:286
+msgid "Subscribed"
+msgstr ""
+
+#: admin/views/page-catalog.php:289
+msgid "Payment failed"
+msgstr ""
+
+#: admin/views/page-catalog.php:291
+msgid "Cancelled"
+msgstr ""
+
+#: admin/views/page-catalog.php:293
+msgid "Expired"
+msgstr ""
+
+#: admin/views/page-catalog.php:303
+msgid "Free"
+msgstr ""
+
+#: admin/views/page-catalog.php:309
+msgid "Incompatible"
+msgstr ""
+
+#: admin/views/page-catalog.php:312
+msgid "Buy"
+msgstr ""
+
+#: admin/views/page-catalog.php:317
+msgid "Install"
+msgstr ""
+
+#: admin/views/page-catalog.php:319
+msgid "Activate"
+msgstr ""
+
+#: admin/views/page-catalog.php:321
+msgid "Update"
+msgstr ""
+
+#: admin/views/page-catalog.php:327
+msgid "Not installed"
+msgstr ""
+
+#: admin/views/page-catalog.php:329
+msgid "Installed (inactive)"
+msgstr ""
+
+#. translators: 1: installed version, 2: available version.
+#: admin/views/page-catalog.php:334
+#, php-format
+msgid "Update available (v%1$s → v%2$s)"
+msgstr ""
+
+#: admin/views/page-catalog.php:340
+msgid "Up to date"
+msgstr ""
+
+#: admin/views/page-catalog.php:349
+msgid "Visit website"
+msgstr ""
+
+#. translators: %s: plugin name.
+#: admin/views/page-catalog.php:349
+#, php-format
+msgid "(about %s)"
+msgstr ""
+
+#. translators: %s: list of plugin slugs.
+#: admin/views/page-catalog.php:360
+#, php-format
+msgid "Requires: %s"
+msgstr ""
+
+#: admin/views/page-catalog.php:374
+msgid "Support"
+msgstr ""
+
+#: admin/views/page-catalog.php:376
+msgid "Need help with a ROBOTSTXT plugin? Visit the plugin's website (the link in its row above) for documentation and guides, or contact us through our website — we are happy to help."
+msgstr ""
+
+#: admin/views/page-catalog.php:379
+msgid "Payments, and how it works"
+msgstr ""
+
+#: admin/views/page-catalog.php:381
+msgid "Free plugins install instantly at no cost. Premium plugins are annual subscriptions: you pay once on our website and the subscription renews automatically every year until you cancel. You can cancel at any time from your ROBOTSTXT account page — access keeps working until the end of the paid period. All payments are processed securely by Mollie; we never see or store your card details."
+msgstr ""
+
+#. translators: %d: number of incompatible plugins.
+#: admin/views/page-catalog.php:391
+#, php-format
+msgid "%d plugin in the catalog is not compatible with this site's WordPress or PHP version."
+msgid_plural "%d plugins in the catalog are not compatible with this site's WordPress or PHP version."
+msgstr[0] ""
+msgstr[1] ""
+
+#. translators: 1: local WP version, 2: local PHP version.
+#: admin/views/page-catalog.php:400
+#, php-format
+msgid "This site runs WordPress %1$s on PHP %2$s."
+msgstr ""
+
+#: includes/class-robotstxt-manager-core-client.php:141
+msgid "Store URL is not configured."
+msgstr ""
+
+#: includes/class-robotstxt-manager-core-client.php:148
+msgid "API key is not configured."
+msgstr ""
+
+#. translators: %s: HTTP transport error message.
+#: includes/class-robotstxt-manager-core-client.php:158
+#, php-format
+msgid "Could not reach Plugins Core: %s"
+msgstr ""
+
+#. translators: %d: HTTP status code.
+#: includes/class-robotstxt-manager-core-client.php:168
+#, php-format
+msgid "The store responded with HTTP %d. Check the Store URL and API key."
+msgstr ""
+
+#: includes/class-robotstxt-manager-core-client.php:177
+msgid "Connected."
 msgstr ""
diff --git a/readme.txt b/readme.txt
index f83cd64..b2f0888 100644
--- a/readme.txt
+++ b/readme.txt
@@ -1,11 +1,11 @@
 === Manager (by ROBOTSTXT) ===
-Contributors: javiercasares, robotstxt
+Contributors: robotstxt, javiercasares
 Tags: dashboard, catalog, updates, subscriptions, management
 Requires at least: 4.4
 Tested up to: 7.1
-Stable tag: 1.4.0
+Stable tag: 1.4.1
 Requires PHP: 8.0
-Version: 1.4.0
+Version: 1.4.1
 License: GPL-3.0-or-later
 License URI: https://www.gnu.org/licenses/gpl-3.0.txt
 
@@ -92,6 +92,15 @@ Encrypted at rest using AES-256-CBC with a key derived from your site's WordPres
 
 == Changelog ==
 
+Only the 3 last versions. The full changelog will be at changelog.txt
+
+= 1.4.1 =
+
+_Release date: 2026-08-17_
+
+* Housekeeping release: plugin identity now points at the ROBOTSTXT software site — Plugin URI and Update URI are `https://www.robotstxt.software/plugins/robotstxt-manager/`, Author URI is `https://www.robotstxt.software/`, and this readme's full-changelog link points to the same page.
+* Tooling aligned with the declared real floors: PHPCS `testVersion` and the preflight scan range now cover PHP 8.0-8.5 (was 7.4/8.4).
+
 = 1.4.0 =
 
 _Release date: 2026-08-17_
@@ -104,124 +113,9 @@ _Release date: 2026-08-17_
 
 * Descriptions render in the admin's language (Core 1.8.0+ `description_translations`), English fallback.
 
-= 1.3.0 =
-
-_Release date: 2026-08-17_
-
-* Catalog works without an API key (only the Store URL is needed); free plugins are listed and installable, and an info notice links to the store to register and get a personal key. Premium plugins show Buy only until subscribed; with an active subscription they show Install/Update.
-
-= 1.2.1 =
-
-_Release date: 2026-08-17_
-
-* Plugin icons in the catalog rows (64×64, from the store's `icon_url`; white placeholder when missing).
-
-= 1.2.0 =
-
-_Release date: 2026-08-15_
-
-* Subscription status (Phase 4): pills next to premium prices (Subscribed / N days left / Payment failed / Cancelled / Expired) and admin notices for failed payments, upcoming expiries, and expired-but-active plugins. Cached hourly from Core's /me/subscriptions.
-
-= 1.1.0 =
-
-_Release date: 2026-08-15_
-
-* Cascade dependency install: required plugins (ecosystem or WordPress.org, e.g. Action Scheduler) are installed automatically before the plugin; "Requires:" hints in the catalog.
-
-= 1.0.0 =
-
-_Release date: 2026-08-15_
-
-* Catalog redesign: columns Plugin · Version · Requires WP · Requires PHP · Price · Action · Status; Type merged into Price ("Free" or the annual price); per-plugin website link + description always open under each row; intro text after the title; Support and Payments sections below the table. First stable release.
-
-= 0.6.0 =
-
-_Release date: 2026-08-15_
-
-* Spanish (es_ES) and Catalan (ca) translations for all admin strings (73 msgids, POT regenerated).
-* "Refresh catalog" rate-limited to 6 per minute per user.
-
-= 0.5.3 =
-
-_Release date: 2026-08-15_
-
-* Authenticated encryption (encrypt-then-MAC, matching Core 1.6.0) for the stored API key: tampered payloads fail closed; legacy-stored keys keep working and upgrade on next save.
-
-= 0.5.2 =
-
-_Release date: 2026-08-15_
-
-* Fixed: updating (and installing) a plugin from the Manager catalog page failed with a fatal or a bare "Installation failed." Two defects in the panel's upgrader path: `Plugin_Upgrader` was never loaded in the `admin-post` context (it lives in its own file since the WordPress 5.3 class split, and only `class-wp-upgrader.php` was required), and the overwrite option was passed under the key `overwrite`, which current WordPress reads as `overwrite_package` — so the existing folder was never cleared. Verified end-to-end against the live store.
-
-= 0.5.1 =
-
-_Release date: 2026-08-15_
-
-* Stabilization release: full code/security audit, compatibility scans, and documentation alignment. Real floors declared: WordPress 4.4+, PHP 8.0+ (previously declared 4.7/7.4).
-* Connection test and catalog fetch now check the HTTP status code — an unauthorized or failing store reports an error instead of "Connected" / an empty catalog (non-200 responses are no longer cached).
-* API-key field validates the key format before storing.
-* Premium plugins are not offered as native updates when no API key is configured (they would only fail with HTTP 403).
-* Domain normalization for premium package URLs strips only the literal `www.` prefix (hosts starting with "w" were mangled).
-* Opt-in uninstall now also purges the WordPress update transient (premium entries carry the API key in their package URL) and drops a phantom option.
-
-= 0.5.0 =
-
-_Release date: 2026-08-14_
-
-* Native update integration: catalog plugins now show WordPress's standard "Update available" badge and update through the regular wp-admin flow. Updates download from the ROBOTSTXT store (premium plugins authenticate via the account API key; requires Core 1.5.0+). "View details" modal data comes from the catalog. Refreshing the catalog also forces a fresh WordPress update check.
-
-= 0.4.0 =
-
-_Release date: 2026-08-14_
-
-* Click-to-expand rows in the catalog: each plugin's description and a link to its website are shown in a detail row under the plugin name (CSS-only toggle, no JavaScript). Requires Core 1.4.2+ on the store.
-
-= 0.3.1 =
-
-_Release date: 2026-08-14_
-
-* Default store URL is now `https://www.robotstxt.software`. Existing saved URLs are preserved.
-
-= 0.3.0 =
-
-_Release date: 2026-08-13_
-
-* Classic install/activate/update flow: actions run on a full page load (`admin-post.php` with per-action-and-slug nonces) and report the outcome through standard admin notices (green success / red error), replacing the previous AJAX flow.
-
-= 0.2.0 =
-
-_Release date: 2026-08-13_
-
-* Install action: free and premium plugins install directly from the catalog, authenticated with the account-level API key against Core's `/download` endpoint (requires Core 1.4.0+).
-
-= 0.1.3 =
-
-_Release date: 2026-08-12_
-
-* Composer PHP requirement aligned to scan floor (>=7.4).
-
-= 0.1.2 =
-
-_Release date: 2026-08-12_
-
-* Documentation refresh: readme.txt and changelog.txt aligned to the standard templates. Compatibility scan results documented.
-
-= 0.1.1 =
-
-_Release date: 2026-08-12_
-
-* PHPCompatibility scan (5.6–8.5): real PHP floor is 7.2; project deliberately declares 8.4 to match the ecosystem.
-* wp-compat scan against WordPress 4.7: zero errors. Real WP floor is ≤ 4.7; project declares 7.0 to match the ecosystem support window.
-
-= 0.1.0 =
-
-_Release date: 2026-08-12_
-
-* Phase 1 scaffold.
-
 = Previous versions =
 
-If you want to see the full changelog, visit the [changelog.txt](https://git.robotstxt.es/ROBOTSTXT/robotstxt-manager/raw/branch/main/changelog.txt) file.
+If you want to see the full changelog, visit the [plugin page](https://www.robotstxt.software/plugins/robotstxt-manager/).
 
 == Compliance ==
 
diff --git a/robotstxt-manager.php b/robotstxt-manager.php
index 36e9340..dfa157b 100644
--- a/robotstxt-manager.php
+++ b/robotstxt-manager.php
@@ -1,13 +1,14 @@
 <?php
 /**
  * Plugin Name:       Manager (by ROBOTSTXT)
- * Plugin URI:        https://git.robotstxt.es/ROBOTSTXT/robotstxt-manager
+ * Plugin URI:        https://www.robotstxt.software/plugins/robotstxt-manager/
  * Description:       Client-side dashboard for the ROBOTSTXT plugin ecosystem. Lists the catalog from a remote Plugins Core install, resolves local install/update state, and installs, activates, and updates plugins directly from the store.
- * Version:           1.4.0
+ * Version:           1.4.1
  * Requires at least: 4.4
  * Requires PHP:      8.0
+ * Update URI:        https://www.robotstxt.software/plugins/robotstxt-manager/
  * Author:            ROBOTSTXT
- * Author URI:        https://www.robotstxt.es/
+ * Author URI:        https://www.robotstxt.software/
  * License:           GPL-3.0-or-later
  * License URI:       https://www.gnu.org/licenses/gpl-3.0.html
  * Text Domain:       robotstxt-manager
@@ -21,7 +22,7 @@ if ( ! defined( 'ABSPATH' ) ) {
 }
 
 /** Plugin version. */
-define( 'ROBOTSTXT_MANAGER_VERSION', '1.4.0' );
+define( 'ROBOTSTXT_MANAGER_VERSION', '1.4.1' );
 
 /** Absolute path to the plugin directory, with trailing slash. */
 define( 'ROBOTSTXT_MANAGER_DIR', plugin_dir_path( __FILE__ ) );

From b2849880ec70d717b0d4143152fb860feeee0a38 Mon Sep 17 00:00:00 2001
From: Javier Casares <javier@robotstxt.es>
Date: Tue, 18 Aug 2026 10:47:06 +0000
Subject: [PATCH 17/23] v1.5.0

---
 admin/class-robotstxt-manager-settings.php    | 39 ++++++++++++++++++-
 admin/js/robotstxt-manager-settings.js        |  3 ++
 admin/views/page-settings.php                 |  1 +
 changelog.txt                                 | 21 ++++++++++
 .../class-robotstxt-manager-core-client.php   | 11 +++++-
 languages/robotstxt-manager.pot               |  8 +++-
 readme.txt                                    | 20 ++++++----
 robotstxt-manager.php                         |  4 +-
 8 files changed, 91 insertions(+), 16 deletions(-)

diff --git a/admin/class-robotstxt-manager-settings.php b/admin/class-robotstxt-manager-settings.php
index cddc28f..2cbd759 100644
--- a/admin/class-robotstxt-manager-settings.php
+++ b/admin/class-robotstxt-manager-settings.php
@@ -263,7 +263,16 @@ class Robotstxt_Manager_Settings {
 			}
 			echo '</p>';
 		} else {
-			echo '<p class="description">' . esc_html__( 'Account-level API key from the ROBOTSTXT store (create your free account there to get one). Optional — the free catalog works without it — but required to link your subscriptions, install premium plugins, and receive their updates. Encrypted before storage.', 'robotstxt-manager' ) . '</p>';
+			printf(
+				'<p class="description">%s</p>',
+				wp_kses_post(
+					sprintf(
+						/* translators: %s: Registration URL. */
+						__( 'Account-level API key from the ROBOTSTXT store (<a href="%s" target="_blank" rel="noopener">create your free account there to get one</a>). Optional — the free catalog works without it — but required to link your subscriptions, install premium plugins, and receive their updates. Encrypted before storage.', 'robotstxt-manager' ),
+						esc_url( 'https://www.robotstxt.software/wp-login.php?action=register' )
+					)
+				)
+			);
 		}
 
 		// Action buttons.
@@ -333,6 +342,14 @@ class Robotstxt_Manager_Settings {
 			return is_string( $raw ) ? $raw : '';
 		}
 
+		// If the input is already encrypted (v2: prefix), it means the browser
+		// auto-filled the password field with the stored encrypted value.
+		// Return it as-is (already encrypted) rather than re-encrypting or
+		// trying to read the option (which may not be saved yet in the WP flow).
+		if ( str_starts_with( $plain, 'v2:' ) ) {
+			return $plain;
+		}
+
 		// Account keys are UUIDs issued by the store; reject anything that
 		// cannot be one rather than storing a mangled key that only fails
 		// later at connection time.
@@ -379,7 +396,25 @@ class Robotstxt_Manager_Settings {
 			wp_send_json_error( array( 'message' => __( 'Insufficient permissions.', 'robotstxt-manager' ) ) );
 		}
 
-		$client = Robotstxt_Manager_Core_Client::from_options();
+		// Allow testing a key from the form field (not yet saved) by passing it in the request.
+		$input_key = '';
+		if ( isset( $_POST['robotstxt_manager_api_key'] ) ) {
+			$unslashed = wp_unslash( $_POST['robotstxt_manager_api_key'] ); // phpcs:ignore WordPress.Security.ValidatedSanitizedInput.InputNotSanitized -- sanitized below.
+			if ( is_string( $unslashed ) ) {
+				$input_key = sanitize_text_field( $unslashed );
+			}
+		}
+
+		$store_url = get_option( 'robotstxt_manager_store_url', 'https://www.robotstxt.software' );
+		$store_url = is_string( $store_url ) ? $store_url : 'https://www.robotstxt.software';
+
+		// Use input key if provided, otherwise fall back to saved (decrypted) key.
+		if ( '' !== $input_key ) {
+			$client = new Robotstxt_Manager_Core_Client( $store_url, $input_key );
+		} else {
+			$client = Robotstxt_Manager_Core_Client::from_options();
+		}
+
 		$result = $client->test_connection();
 
 		if ( $result['ok'] ) {
diff --git a/admin/js/robotstxt-manager-settings.js b/admin/js/robotstxt-manager-settings.js
index c0f465a..f11d499 100644
--- a/admin/js/robotstxt-manager-settings.js
+++ b/admin/js/robotstxt-manager-settings.js
@@ -20,11 +20,14 @@
 			$btn.prop( 'disabled', true ).text( RobotstxtManagerSettings.i18n.testing );
 			$result.text( '' ).css( 'color', '' );
 
+			var apiKey = $( '#robotstxt_manager_api_key' ).val();
+
 			$.post(
 				RobotstxtManagerSettings.ajaxUrl,
 				{
 					action: 'robotstxt_manager_test_connection',
 					nonce:  RobotstxtManagerSettings.nonce,
+					robotstxt_manager_api_key: apiKey,
 				},
 				function ( response ) {
 					if ( response.success ) {
diff --git a/admin/views/page-settings.php b/admin/views/page-settings.php
index 89b5d4a..83cd17d 100644
--- a/admin/views/page-settings.php
+++ b/admin/views/page-settings.php
@@ -11,6 +11,7 @@ if ( ! defined( 'ABSPATH' ) ) {
 ?>
 <div class="wrap">
 	<h1><?php esc_html_e( 'Manager (by ROBOTSTXT) — Settings', 'robotstxt-manager' ); ?></h1>
+	<?php settings_errors(); ?>
 	<form method="post" action="<?php echo esc_url( admin_url( 'options.php' ) ); ?>">
 		<?php
 		settings_fields( Robotstxt_Manager_Settings::OPTION_GROUP );
diff --git a/changelog.txt b/changelog.txt
index eb782ea..0d26e95 100644
--- a/changelog.txt
+++ b/changelog.txt
@@ -1,5 +1,26 @@
 == Changelog ==
 
+= 1.5.0 =
+
+_Release date: 2026-08-18_
+
+**Fixed**
+
+* API key not saving when the browser auto-fills the password field with the stored encrypted value — the sanitizer now detects already-encrypted input (`v2:` prefix) and returns it as-is instead of failing UUID validation.
+* "Test connection" validated against the public catalog endpoint (`/plugins`), so invalid API keys reported "Connected". Now uses the authenticated `/me/subscriptions` endpoint; a 401 response produces "Invalid API key".
+* "Test connection" read the key from saved options only — entering a new key and testing before saving always tested the old (or empty) key. The AJAX handler now accepts the key from the form field.
+
+**Added**
+
+* `settings_errors()` call on the settings page so validation messages (e.g. "invalid API key format") are actually visible to the user.
+* Registration link (`https://www.robotstxt.software/wp-login.php?action=register`) in the API key field description.
+
+**Tests**
+
+* PHPCS (WordPress-Core, WordPress-Docs, WordPress-Extra): pass
+* PHPStan level 9 + wp-compat: pass
+* PHPUnit: 146 tests, 385 assertions
+
 = 1.4.1 =
 
 _Release date: 2026-08-17_
diff --git a/includes/class-robotstxt-manager-core-client.php b/includes/class-robotstxt-manager-core-client.php
index d969da3..fe2c85b 100644
--- a/includes/class-robotstxt-manager-core-client.php
+++ b/includes/class-robotstxt-manager-core-client.php
@@ -149,7 +149,7 @@ class Robotstxt_Manager_Core_Client {
 			);
 		}
 
-		$response = $this->get( '/plugins' );
+		$response = $this->get( '/me/subscriptions' );
 
 		if ( is_wp_error( $response ) ) {
 			return array(
@@ -161,6 +161,13 @@ class Robotstxt_Manager_Core_Client {
 
 		$code = (int) wp_remote_retrieve_response_code( $response );
 
+		if ( 401 === $code ) {
+			return array(
+				'ok'      => false,
+				'message' => __( 'Invalid API key. Please check your key and try again.', 'robotstxt-manager' ),
+			);
+		}
+
 		if ( 200 !== $code ) {
 			return array(
 				'ok'      => false,
@@ -175,7 +182,7 @@ class Robotstxt_Manager_Core_Client {
 		return array(
 			'ok'            => true,
 			'message'       => __( 'Connected.', 'robotstxt-manager' ),
-			'catalog_count' => $count,
+			'subscriptions' => $count,
 		);
 	}
 
diff --git a/languages/robotstxt-manager.pot b/languages/robotstxt-manager.pot
index e0350b5..cae3906 100644
--- a/languages/robotstxt-manager.pot
+++ b/languages/robotstxt-manager.pot
@@ -2,7 +2,7 @@
 # This file is distributed under the GPL-3.0-or-later.
 msgid ""
 msgstr ""
-"Project-Id-Version: Manager (by ROBOTSTXT) 1.4.1\n"
+"Project-Id-Version: Manager (by ROBOTSTXT) 1.5.0\n"
 "Report-Msgid-Bugs-To: https://www.robotstxt.software/plugins/robotstxt-manager/\n"
 "Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
 "Language-Team: LANGUAGE <LL@li.org>\n"
@@ -259,7 +259,7 @@ msgid "A key is stored but could not be decoded. You can replace it by entering
 msgstr ""
 
 #: admin/class-robotstxt-manager-settings.php:266
-msgid "Account-level API key from the ROBOTSTXT store (create your free account there to get one). Optional — the free catalog works without it — but required to link your subscriptions, install premium plugins, and receive their updates. Encrypted before storage."
+msgid "Account-level API key from the ROBOTSTXT store (<a href=\"%s\" target=\"_blank\" rel=\"noopener\">create your free account there to get one</a>). Optional — the free catalog works without it — but required to link your subscriptions, install premium plugins, and receive their updates. Encrypted before storage."
 msgstr ""
 
 #: admin/class-robotstxt-manager-settings.php:298
@@ -475,6 +475,10 @@ msgstr ""
 msgid "The store responded with HTTP %d. Check the Store URL and API key."
 msgstr ""
 
+#: includes/class-robotstxt-manager-core-client.php:164
+msgid "Invalid API key. Please check your key and try again."
+msgstr ""
+
 #: includes/class-robotstxt-manager-core-client.php:177
 msgid "Connected."
 msgstr ""
diff --git a/readme.txt b/readme.txt
index b2f0888..1c495ba 100644
--- a/readme.txt
+++ b/readme.txt
@@ -3,9 +3,9 @@ Contributors: robotstxt, javiercasares
 Tags: dashboard, catalog, updates, subscriptions, management
 Requires at least: 4.4
 Tested up to: 7.1
-Stable tag: 1.4.1
+Stable tag: 1.5.0
 Requires PHP: 8.0
-Version: 1.4.1
+Version: 1.5.0
 License: GPL-3.0-or-later
 License URI: https://www.gnu.org/licenses/gpl-3.0.txt
 
@@ -94,6 +94,16 @@ Encrypted at rest using AES-256-CBC with a key derived from your site's WordPres
 
 Only the 3 last versions. The full changelog will be at changelog.txt
 
+= 1.5.0 =
+
+_Release date: 2026-08-18_
+
+* Fixed: API key not saving when the browser auto-fills the password field with the stored encrypted value.
+* Fixed: "Test connection" now validates the API key against an authenticated Core endpoint (`/me/subscriptions`) instead of the public catalog — invalid keys are correctly rejected.
+* Fixed: "Test connection" reads the key from the form field, so a key can be tested before saving.
+* Added: Validation errors now display on the settings page (missing `settings_errors()` call).
+* Added: Registration link in the API key field description.
+
 = 1.4.1 =
 
 _Release date: 2026-08-17_
@@ -107,12 +117,6 @@ _Release date: 2026-08-17_
 
 * Premium update URLs carry a short-lived download token (Core 1.9.0+) instead of the API key; automatic fallback on older Core.
 
-= 1.3.1 =
-
-_Release date: 2026-08-17_
-
-* Descriptions render in the admin's language (Core 1.8.0+ `description_translations`), English fallback.
-
 = Previous versions =
 
 If you want to see the full changelog, visit the [plugin page](https://www.robotstxt.software/plugins/robotstxt-manager/).
diff --git a/robotstxt-manager.php b/robotstxt-manager.php
index dfa157b..846e580 100644
--- a/robotstxt-manager.php
+++ b/robotstxt-manager.php
@@ -3,7 +3,7 @@
  * Plugin Name:       Manager (by ROBOTSTXT)
  * Plugin URI:        https://www.robotstxt.software/plugins/robotstxt-manager/
  * Description:       Client-side dashboard for the ROBOTSTXT plugin ecosystem. Lists the catalog from a remote Plugins Core install, resolves local install/update state, and installs, activates, and updates plugins directly from the store.
- * Version:           1.4.1
+ * Version:           1.5.0
  * Requires at least: 4.4
  * Requires PHP:      8.0
  * Update URI:        https://www.robotstxt.software/plugins/robotstxt-manager/
@@ -22,7 +22,7 @@ if ( ! defined( 'ABSPATH' ) ) {
 }
 
 /** Plugin version. */
-define( 'ROBOTSTXT_MANAGER_VERSION', '1.4.1' );
+define( 'ROBOTSTXT_MANAGER_VERSION', '1.5.0' );
 
 /** Absolute path to the plugin directory, with trailing slash. */
 define( 'ROBOTSTXT_MANAGER_DIR', plugin_dir_path( __FILE__ ) );

From 5589c54b9bfaa2fd8ceaed857f92b47c40d2965e Mon Sep 17 00:00:00 2001
From: Javier Casares <javier@robotstxt.es>
Date: Tue, 18 Aug 2026 10:48:13 +0000
Subject: [PATCH 18/23] v1.6.0

---
 admin/class-robotstxt-manager-admin.php       |  18 ++--
 admin/class-robotstxt-manager-installer.php   |   6 +-
 admin/class-robotstxt-manager-settings.php    | 100 +++++++++++++++---
 admin/views/page-catalog.php                  |   2 +-
 admin/views/page-settings.php                 |   4 +-
 changelog.txt                                 |   8 +-
 .../class-robotstxt-manager-activator.php     |  10 +-
 .../class-robotstxt-manager-core-client.php   |  18 ++--
 includes/class-robotstxt-manager-updater.php  |   4 +-
 languages/robotstxt-manager.pot               |   2 +-
 readme.txt                                    |  13 ++-
 robotstxt-manager.php                         |   5 +-
 uninstall.php                                 |   6 +-
 13 files changed, 138 insertions(+), 58 deletions(-)

diff --git a/admin/class-robotstxt-manager-admin.php b/admin/class-robotstxt-manager-admin.php
index 1921cc6..20b8b41 100644
--- a/admin/class-robotstxt-manager-admin.php
+++ b/admin/class-robotstxt-manager-admin.php
@@ -33,7 +33,8 @@ class Robotstxt_Manager_Admin {
 	 * @return void
 	 */
 	public function register( Robotstxt_Manager_Loader $loader ): void {
-		$loader->add_action( 'admin_menu', $this, 'add_menu' );
+		$menu_hook = is_multisite() ? 'network_admin_menu' : 'admin_menu';
+		$loader->add_action( $menu_hook, $this, 'add_menu' );
 		$loader->add_action( 'admin_post_robotstxt_manager_refresh_catalog', $this, 'handle_refresh' );
 	}
 
@@ -43,10 +44,11 @@ class Robotstxt_Manager_Admin {
 	 * @return void
 	 */
 	public function add_menu(): void {
+		$cap = is_multisite() ? 'manage_network_options' : 'manage_options';
 		add_menu_page(
 			esc_html__( 'Manager (by ROBOTSTXT) — Plugins', 'robotstxt-manager' ),
 			esc_html__( 'ROBOTSTXT', 'robotstxt-manager' ),
-			'manage_options',
+			$cap,
 			self::PAGE_SLUG,
 			array( $this, 'render_page' ),
 			'dashicons-screenoptions',
@@ -60,7 +62,7 @@ class Robotstxt_Manager_Admin {
 	 * @return void
 	 */
 	public function render_page(): void {
-		if ( ! current_user_can( 'manage_options' ) ) {
+		if ( ! current_user_can( is_multisite() ? 'manage_network_options' : 'manage_options' ) ) {
 			wp_die( esc_html__( 'You do not have sufficient permissions to access this page.', 'robotstxt-manager' ) );
 		}
 
@@ -149,21 +151,21 @@ class Robotstxt_Manager_Admin {
 	 * @return void
 	 */
 	public function handle_refresh(): void {
-		if ( ! current_user_can( 'manage_options' ) ) {
+		if ( ! current_user_can( is_multisite() ? 'manage_network_options' : 'manage_options' ) ) {
 			wp_die( esc_html__( 'Insufficient permissions.', 'robotstxt-manager' ) );
 		}
 
 		check_admin_referer( 'robotstxt_manager_refresh_catalog' );
 
 		$bucket   = 'robotstxt_manager_refresh_' . get_current_user_id();
-		$hits_raw = get_transient( $bucket );
+		$hits_raw = get_site_transient( $bucket );
 		$hits     = is_numeric( $hits_raw ) ? (int) $hits_raw : 0;
 
 		if ( $hits >= 6 ) {
 			$this->redirect_refresh_error();
 		}
 
-		set_transient( $bucket, $hits + 1, MINUTE_IN_SECONDS );
+		set_site_transient( $bucket, $hits + 1, MINUTE_IN_SECONDS );
 
 		$client = Robotstxt_Manager_Core_Client::from_options();
 		$client->clear_catalog_cache();
@@ -175,7 +177,7 @@ class Robotstxt_Manager_Admin {
 				'page'      => self::PAGE_SLUG,
 				'refreshed' => '1',
 			),
-			admin_url( 'admin.php' )
+			( is_multisite() ? network_admin_url( 'admin.php' ) : admin_url( 'admin.php' ) )
 		);
 
 		wp_safe_redirect( $redirect );
@@ -197,7 +199,7 @@ class Robotstxt_Manager_Admin {
 						__( 'Too many refreshes. Please wait a minute before refreshing again.', 'robotstxt-manager' )
 					),
 				),
-				admin_url( 'admin.php' )
+				( is_multisite() ? network_admin_url( 'admin.php' ) : admin_url( 'admin.php' ) )
 			)
 		);
 		exit;
diff --git a/admin/class-robotstxt-manager-installer.php b/admin/class-robotstxt-manager-installer.php
index 2714e78..28046a0 100644
--- a/admin/class-robotstxt-manager-installer.php
+++ b/admin/class-robotstxt-manager-installer.php
@@ -417,7 +417,7 @@ class Robotstxt_Manager_Installer {
 	 * @return string The sanitized plugin slug.
 	 */
 	private function authorize( string $action ): string {
-		if ( ! current_user_can( 'manage_options' ) ) {
+		if ( ! current_user_can( is_multisite() ? 'manage_network_options' : 'manage_options' ) ) {
 			wp_die( esc_html__( 'Insufficient permissions.', 'robotstxt-manager' ) );
 		}
 
@@ -543,7 +543,7 @@ class Robotstxt_Manager_Installer {
 		$headers = array();
 
 		if ( $use_download_endpoint ) {
-			$api_key_raw = get_option( 'robotstxt_manager_api_key', '' );
+			$api_key_raw = get_site_option( 'robotstxt_manager_api_key', '' );
 			$api_key     = is_string( $api_key_raw ) ? Robotstxt_Manager_Encryption::decrypt( $api_key_raw ) : '';
 
 			if ( '' !== $api_key ) {
@@ -686,7 +686,7 @@ class Robotstxt_Manager_Installer {
 					'robotstxt_manager_result'  => $result,
 					'robotstxt_manager_message' => rawurlencode( $message ),
 				),
-				admin_url( 'admin.php' )
+				( is_multisite() ? network_admin_url( 'admin.php' ) : admin_url( 'admin.php' ) )
 			)
 		);
 		exit;
diff --git a/admin/class-robotstxt-manager-settings.php b/admin/class-robotstxt-manager-settings.php
index 2cbd759..d1fcf12 100644
--- a/admin/class-robotstxt-manager-settings.php
+++ b/admin/class-robotstxt-manager-settings.php
@@ -41,7 +41,8 @@ class Robotstxt_Manager_Settings {
 	 * @return void
 	 */
 	public function register( Robotstxt_Manager_Loader $loader ): void {
-		$loader->add_action( 'admin_menu', $this, 'add_settings_page' );
+		$menu_hook = is_multisite() ? 'network_admin_menu' : 'admin_menu';
+		$loader->add_action( $menu_hook, $this, 'add_settings_page' );
 		$loader->add_action( 'admin_init', $this, 'register_settings' );
 		$loader->add_action( 'admin_enqueue_scripts', $this, 'enqueue_scripts' );
 		$loader->add_action( 'wp_ajax_robotstxt_manager_test_connection', $this, 'handle_test_connection' );
@@ -54,11 +55,12 @@ class Robotstxt_Manager_Settings {
 	 * @return void
 	 */
 	public function add_settings_page(): void {
+		$cap = is_multisite() ? 'manage_network_options' : 'manage_options';
 		add_submenu_page(
 			Robotstxt_Manager_Admin::PAGE_SLUG,
 			esc_html__( 'Manager (by ROBOTSTXT) — Settings', 'robotstxt-manager' ),
 			esc_html__( 'Settings', 'robotstxt-manager' ),
-			'manage_options',
+			$cap,
 			self::PAGE_SLUG,
 			array( $this, 'render_page' )
 		);
@@ -203,20 +205,84 @@ class Robotstxt_Manager_Settings {
 	 * @return void
 	 */
 	public function render_page(): void {
-		if ( ! current_user_can( 'manage_options' ) ) {
+		if ( ! current_user_can( is_multisite() ? 'manage_network_options' : 'manage_options' ) ) {
 			wp_die( esc_html__( 'You do not have sufficient permissions to access this page.', 'robotstxt-manager' ) );
 		}
 
+		$this->handle_form_submission();
+
 		require_once ROBOTSTXT_MANAGER_DIR . 'admin/views/page-settings.php';
 	}
 
+	/**
+	 * Handles manual form submission for network settings.
+	 *
+	 * The WordPress Settings API (options.php) does not handle network
+	 * options, so the network settings page must process its own form.
+	 *
+	 * @return void
+	 */
+	private function handle_form_submission(): void {
+		if ( ! isset( $_POST['robotstxt_manager_settings_group_nonce'] ) ) {
+			return;
+		}
+
+		check_admin_referer( 'robotstxt_manager_settings_group', 'robotstxt_manager_settings_group_nonce' );
+
+		if ( ! current_user_can( is_multisite() ? 'manage_network_options' : 'manage_options' ) ) {
+			wp_die( esc_html__( 'You do not have sufficient permissions to manage settings.', 'robotstxt-manager' ) );
+		}
+
+		// Store URL.
+		$store_url = '';
+		if ( isset( $_POST['robotstxt_manager_store_url'] ) ) {
+			$raw       = wp_unslash( $_POST['robotstxt_manager_store_url'] ); // phpcs:ignore WordPress.Security.ValidatedSanitizedInput.InputNotSanitized -- sanitized below.
+			$store_url = is_string( $raw ) ? esc_url_raw( $raw ) : '';
+		}
+		update_site_option( 'robotstxt_manager_store_url', $store_url );
+
+		// API key.
+		$api_key = $this->sanitize_api_key( '' );
+		if ( isset( $_POST['robotstxt_manager_api_key'] ) ) {
+			$raw = wp_unslash( $_POST['robotstxt_manager_api_key'] ); // phpcs:ignore WordPress.Security.ValidatedSanitizedInput.InputNotSanitized -- sanitized by sanitize_api_key().
+			if ( is_string( $raw ) ) {
+				$api_key = $this->sanitize_api_key( $raw );
+			}
+		}
+		update_site_option( 'robotstxt_manager_api_key', $api_key );
+
+		// Cache TTL.
+		$cache_ttl = 60;
+		if ( isset( $_POST['robotstxt_manager_cache_ttl_minutes'] ) ) {
+			$raw       = wp_unslash( $_POST['robotstxt_manager_cache_ttl_minutes'] ); // phpcs:ignore WordPress.Security.ValidatedSanitizedInput.InputNotSanitized -- sanitized by sanitize_cache_ttl().
+			$cache_ttl = $this->sanitize_cache_ttl( $raw );
+		}
+		update_site_option( 'robotstxt_manager_cache_ttl_minutes', $cache_ttl );
+
+		// Delete on uninstall.
+		$delete_on_uninstall = isset( $_POST['robotstxt_manager_delete_data_on_uninstall'] ) ? true : false;
+		update_site_option( 'robotstxt_manager_delete_data_on_uninstall', $delete_on_uninstall );
+
+		// Redirect with success flag.
+		$goback = add_query_arg(
+			array(
+				'page'             => self::PAGE_SLUG,
+				'settings-updated' => 'true',
+			),
+			( is_multisite() ? network_admin_url( 'admin.php' ) : admin_url( 'admin.php' ) )
+		);
+
+		wp_safe_redirect( $goback );
+		exit;
+	}
+
 	/**
 	 * Renders the Store URL field.
 	 *
 	 * @return void
 	 */
 	public function render_field_store_url(): void {
-		$raw   = get_option( 'robotstxt_manager_store_url', 'https://www.robotstxt.software' );
+		$raw   = get_site_option( 'robotstxt_manager_store_url', 'https://www.robotstxt.software' );
 		$value = is_string( $raw ) ? $raw : 'https://www.robotstxt.software';
 
 		printf(
@@ -234,7 +300,7 @@ class Robotstxt_Manager_Settings {
 	 * @return void
 	 */
 	public function render_field_api_key(): void {
-		$stored  = get_option( 'robotstxt_manager_api_key', '' );
+		$stored  = get_site_option( 'robotstxt_manager_api_key', '' );
 		$has_key = is_string( $stored ) && '' !== $stored;
 		$last4   = '';
 
@@ -297,7 +363,7 @@ class Robotstxt_Manager_Settings {
 	 * @return void
 	 */
 	public function render_field_cache_ttl(): void {
-		$raw   = get_option( 'robotstxt_manager_cache_ttl_minutes', 60 );
+		$raw   = get_site_option( 'robotstxt_manager_cache_ttl_minutes', 60 );
 		$value = is_numeric( $raw ) ? (int) $raw : 60;
 
 		printf(
@@ -313,7 +379,7 @@ class Robotstxt_Manager_Settings {
 	 * @return void
 	 */
 	public function render_field_delete_on_uninstall(): void {
-		$value = (bool) get_option( 'robotstxt_manager_delete_data_on_uninstall', false );
+		$value = (bool) get_site_option( 'robotstxt_manager_delete_data_on_uninstall', false );
 		echo '<label>';
 		printf(
 			'<input type="checkbox" id="robotstxt_manager_delete_data_on_uninstall" name="robotstxt_manager_delete_data_on_uninstall" value="1"%s />',
@@ -338,7 +404,7 @@ class Robotstxt_Manager_Settings {
 		$plain = sanitize_text_field( is_string( $value ) ? $value : '' );
 
 		if ( '' === $plain ) {
-			$raw = get_option( 'robotstxt_manager_api_key', '' );
+			$raw = get_site_option( 'robotstxt_manager_api_key', '' );
 			return is_string( $raw ) ? $raw : '';
 		}
 
@@ -360,12 +426,12 @@ class Robotstxt_Manager_Settings {
 				esc_html__( 'The API key format is invalid. Copy the full key from your ROBOTSTXT account page.', 'robotstxt-manager' )
 			);
 
-			$raw = get_option( 'robotstxt_manager_api_key', '' );
+			$raw = get_site_option( 'robotstxt_manager_api_key', '' );
 			return is_string( $raw ) ? $raw : '';
 		}
 
-		delete_transient( 'robotstxt_manager_catalog' );
-		delete_transient( 'robotstxt_manager_subscriptions' );
+		delete_site_transient( 'robotstxt_manager_catalog' );
+		delete_site_transient( 'robotstxt_manager_subscriptions' );
 
 		return Robotstxt_Manager_Encryption::encrypt( $plain );
 	}
@@ -392,7 +458,7 @@ class Robotstxt_Manager_Settings {
 	public function handle_test_connection(): void {
 		check_ajax_referer( 'robotstxt_manager_test_connection', 'nonce' );
 
-		if ( ! current_user_can( 'manage_options' ) ) {
+		if ( ! current_user_can( is_multisite() ? 'manage_network_options' : 'manage_options' ) ) {
 			wp_send_json_error( array( 'message' => __( 'Insufficient permissions.', 'robotstxt-manager' ) ) );
 		}
 
@@ -405,7 +471,7 @@ class Robotstxt_Manager_Settings {
 			}
 		}
 
-		$store_url = get_option( 'robotstxt_manager_store_url', 'https://www.robotstxt.software' );
+		$store_url = get_site_option( 'robotstxt_manager_store_url', 'https://www.robotstxt.software' );
 		$store_url = is_string( $store_url ) ? $store_url : 'https://www.robotstxt.software';
 
 		// Use input key if provided, otherwise fall back to saved (decrypted) key.
@@ -436,13 +502,13 @@ class Robotstxt_Manager_Settings {
 	public function handle_delete_key(): void {
 		check_ajax_referer( 'robotstxt_manager_delete_key', 'nonce' );
 
-		if ( ! current_user_can( 'manage_options' ) ) {
+		if ( ! current_user_can( is_multisite() ? 'manage_network_options' : 'manage_options' ) ) {
 			wp_send_json_error( array( 'message' => __( 'Insufficient permissions.', 'robotstxt-manager' ) ) );
 		}
 
-		delete_option( 'robotstxt_manager_api_key' );
-		delete_transient( 'robotstxt_manager_catalog' );
-		delete_transient( 'robotstxt_manager_subscriptions' );
+		delete_site_option( 'robotstxt_manager_api_key' );
+		delete_site_transient( 'robotstxt_manager_catalog' );
+		delete_site_transient( 'robotstxt_manager_subscriptions' );
 
 		wp_send_json_success(
 			array(
diff --git a/admin/views/page-catalog.php b/admin/views/page-catalog.php
index ce4c70f..4df6d6c 100644
--- a/admin/views/page-catalog.php
+++ b/admin/views/page-catalog.php
@@ -107,7 +107,7 @@ $compat_warnings   = 0;
 					sprintf(
 						/* translators: %s: settings URL. */
 						__( 'ROBOTSTXT Manager is not configured yet. <a href="%s">Set the Store URL and API key</a> to see your plugin catalog.', 'robotstxt-manager' ),
-						esc_url( admin_url( 'admin.php?page=' . Robotstxt_Manager_Settings::PAGE_SLUG ) )
+						esc_url( ( is_multisite() ? network_admin_url( 'admin.php?page=' . Robotstxt_Manager_Settings::PAGE_SLUG ) : admin_url( 'admin.php?page=' . Robotstxt_Manager_Settings::PAGE_SLUG ) ) )
 					)
 				);
 				?>
diff --git a/admin/views/page-settings.php b/admin/views/page-settings.php
index 83cd17d..7c518c9 100644
--- a/admin/views/page-settings.php
+++ b/admin/views/page-settings.php
@@ -12,9 +12,9 @@ if ( ! defined( 'ABSPATH' ) ) {
 <div class="wrap">
 	<h1><?php esc_html_e( 'Manager (by ROBOTSTXT) — Settings', 'robotstxt-manager' ); ?></h1>
 	<?php settings_errors(); ?>
-	<form method="post" action="<?php echo esc_url( admin_url( 'options.php' ) ); ?>">
+	<form method="post" action="">
 		<?php
-		settings_fields( Robotstxt_Manager_Settings::OPTION_GROUP );
+		wp_nonce_field( 'robotstxt_manager_settings_group', 'robotstxt_manager_settings_group_nonce' );
 		do_settings_sections( Robotstxt_Manager_Settings::PAGE_SLUG );
 		submit_button();
 		?>
diff --git a/changelog.txt b/changelog.txt
index 0d26e95..f8c45c5 100644
--- a/changelog.txt
+++ b/changelog.txt
@@ -1,9 +1,13 @@
 == Changelog ==
 
-= 1.5.0 =
+= 1.6.0 =
 
 _Release date: 2026-08-18_
 
+**Added**
+
+* WordPress Multisite compatibility: `Network: true` header forces network-wide activation. Menus appear in the network admin on Multisite, in the regular admin on single-site. All options and transients use network-level storage (`get_site_option` / `get_site_transient`). Settings form handles submission manually (the Settings API `options.php` does not handle network options).
+
 **Fixed**
 
 * API key not saving when the browser auto-fills the password field with the stored encrypted value — the sanitizer now detects already-encrypted input (`v2:` prefix) and returns it as-is instead of failing UUID validation.
@@ -21,7 +25,7 @@ _Release date: 2026-08-18_
 * PHPStan level 9 + wp-compat: pass
 * PHPUnit: 146 tests, 385 assertions
 
-= 1.4.1 =
+= 1.5.0 =
 
 _Release date: 2026-08-17_
 
diff --git a/includes/class-robotstxt-manager-activator.php b/includes/class-robotstxt-manager-activator.php
index c8f5a64..576a817 100644
--- a/includes/class-robotstxt-manager-activator.php
+++ b/includes/class-robotstxt-manager-activator.php
@@ -34,7 +34,7 @@ class Robotstxt_Manager_Activator {
 	 * @return void
 	 */
 	public static function deactivate(): void {
-		delete_transient( 'robotstxt_manager_catalog' );
+		delete_site_transient( 'robotstxt_manager_catalog' );
 	}
 
 	/**
@@ -43,12 +43,12 @@ class Robotstxt_Manager_Activator {
 	 * @return void
 	 */
 	private static function ensure_defaults(): void {
-		if ( '' === get_option( 'robotstxt_manager_store_url', '' ) ) {
-			update_option( 'robotstxt_manager_store_url', 'https://www.robotstxt.software' );
+		if ( '' === get_site_option( 'robotstxt_manager_store_url', '' ) ) {
+			update_site_option( 'robotstxt_manager_store_url', 'https://www.robotstxt.software' );
 		}
 
-		if ( '' === get_option( 'robotstxt_manager_cache_ttl_minutes', '' ) ) {
-			update_option( 'robotstxt_manager_cache_ttl_minutes', 60 );
+		if ( '' === get_site_option( 'robotstxt_manager_cache_ttl_minutes', '' ) ) {
+			update_site_option( 'robotstxt_manager_cache_ttl_minutes', 60 );
 		}
 	}
 }
diff --git a/includes/class-robotstxt-manager-core-client.php b/includes/class-robotstxt-manager-core-client.php
index fe2c85b..7356c2e 100644
--- a/includes/class-robotstxt-manager-core-client.php
+++ b/includes/class-robotstxt-manager-core-client.php
@@ -79,8 +79,8 @@ class Robotstxt_Manager_Core_Client {
 	 * @return self
 	 */
 	public static function from_options(): self {
-		$store_url_raw = get_option( 'robotstxt_manager_store_url', '' );
-		$api_key_raw   = get_option( 'robotstxt_manager_api_key', '' );
+		$store_url_raw = get_site_option( 'robotstxt_manager_store_url', '' );
+		$api_key_raw   = get_site_option( 'robotstxt_manager_api_key', '' );
 
 		$store_url = is_string( $store_url_raw ) ? $store_url_raw : '';
 		$api_key   = is_string( $api_key_raw )
@@ -197,7 +197,7 @@ class Robotstxt_Manager_Core_Client {
 		}
 
 		$cache_key = 'robotstxt_manager_catalog';
-		$cached    = get_transient( $cache_key );
+		$cached    = get_site_transient( $cache_key );
 
 		if ( is_array( $cached ) ) {
 			$typed = array();
@@ -248,7 +248,7 @@ class Robotstxt_Manager_Core_Client {
 		}
 
 		$ttl = $this->get_catalog_ttl();
-		set_transient( $cache_key, $catalog, $ttl );
+		set_site_transient( $cache_key, $catalog, $ttl );
 
 		return $catalog;
 	}
@@ -260,7 +260,7 @@ class Robotstxt_Manager_Core_Client {
 	 * @return void
 	 */
 	public function clear_catalog_cache(): void {
-		delete_transient( 'robotstxt_manager_catalog' );
+		delete_site_transient( 'robotstxt_manager_catalog' );
 	}
 
 	/**
@@ -269,7 +269,7 @@ class Robotstxt_Manager_Core_Client {
 	 * @return int
 	 */
 	private function get_catalog_ttl(): int {
-		$raw = get_option( 'robotstxt_manager_cache_ttl_minutes', 60 );
+		$raw = get_site_option( 'robotstxt_manager_cache_ttl_minutes', 60 );
 		$min = is_numeric( $raw ) ? (int) $raw : 60;
 
 		if ( $min < 1 ) {
@@ -316,7 +316,7 @@ class Robotstxt_Manager_Core_Client {
 		}
 
 		$cache_key = 'robotstxt_manager_subscriptions';
-		$cached    = get_transient( $cache_key );
+		$cached    = get_site_transient( $cache_key );
 
 		if ( is_array( $cached ) ) {
 			$typed = array();
@@ -363,7 +363,7 @@ class Robotstxt_Manager_Core_Client {
 			);
 		}
 
-		set_transient( $cache_key, $rows, HOUR_IN_SECONDS );
+		set_site_transient( $cache_key, $rows, HOUR_IN_SECONDS );
 
 		return $rows;
 	}
@@ -413,6 +413,6 @@ class Robotstxt_Manager_Core_Client {
 	 * @return void
 	 */
 	public function clear_subscriptions_cache(): void {
-		delete_transient( 'robotstxt_manager_subscriptions' );
+		delete_site_transient( 'robotstxt_manager_subscriptions' );
 	}
 }
diff --git a/includes/class-robotstxt-manager-updater.php b/includes/class-robotstxt-manager-updater.php
index ae2ba11..3c71f00 100644
--- a/includes/class-robotstxt-manager-updater.php
+++ b/includes/class-robotstxt-manager-updater.php
@@ -273,7 +273,7 @@ class Robotstxt_Manager_Updater {
 	 * @return bool True when a usable key exists.
 	 */
 	private function has_api_key(): bool {
-		$api_key_raw = get_option( 'robotstxt_manager_api_key', '' );
+		$api_key_raw = get_site_option( 'robotstxt_manager_api_key', '' );
 		$api_key     = is_string( $api_key_raw ) ? Robotstxt_Manager_Encryption::decrypt( $api_key_raw ) : '';
 
 		return '' !== $api_key;
@@ -308,7 +308,7 @@ class Robotstxt_Manager_Updater {
 				$args['token'] = $token;
 			} else {
 				// Fallback (older Core): the API key itself.
-				$api_key_raw = get_option( 'robotstxt_manager_api_key', '' );
+				$api_key_raw = get_site_option( 'robotstxt_manager_api_key', '' );
 				$api_key     = is_string( $api_key_raw ) ? Robotstxt_Manager_Encryption::decrypt( $api_key_raw ) : '';
 
 				if ( '' !== $api_key ) {
diff --git a/languages/robotstxt-manager.pot b/languages/robotstxt-manager.pot
index cae3906..1d92587 100644
--- a/languages/robotstxt-manager.pot
+++ b/languages/robotstxt-manager.pot
@@ -2,7 +2,7 @@
 # This file is distributed under the GPL-3.0-or-later.
 msgid ""
 msgstr ""
-"Project-Id-Version: Manager (by ROBOTSTXT) 1.5.0\n"
+"Project-Id-Version: Manager (by ROBOTSTXT) 1.6.0\n"
 "Report-Msgid-Bugs-To: https://www.robotstxt.software/plugins/robotstxt-manager/\n"
 "Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
 "Language-Team: LANGUAGE <LL@li.org>\n"
diff --git a/readme.txt b/readme.txt
index 1c495ba..0a6dd0f 100644
--- a/readme.txt
+++ b/readme.txt
@@ -3,9 +3,9 @@ Contributors: robotstxt, javiercasares
 Tags: dashboard, catalog, updates, subscriptions, management
 Requires at least: 4.4
 Tested up to: 7.1
-Stable tag: 1.5.0
+Stable tag: 1.6.0
 Requires PHP: 8.0
-Version: 1.5.0
+Version: 1.6.0
 License: GPL-3.0-or-later
 License URI: https://www.gnu.org/licenses/gpl-3.0.txt
 
@@ -94,16 +94,23 @@ Encrypted at rest using AES-256-CBC with a key derived from your site's WordPres
 
 Only the 3 last versions. The full changelog will be at changelog.txt
 
-= 1.5.0 =
+= 1.6.0 =
 
 _Release date: 2026-08-18_
 
+* Added: WordPress Multisite compatibility — `Network: true` header forces network-wide activation; menus appear in the network admin on Multisite and in the regular admin on single-site. All options and transients use network-level storage (`get_site_option` / `get_site_transient`).
 * Fixed: API key not saving when the browser auto-fills the password field with the stored encrypted value.
 * Fixed: "Test connection" now validates the API key against an authenticated Core endpoint (`/me/subscriptions`) instead of the public catalog — invalid keys are correctly rejected.
 * Fixed: "Test connection" reads the key from the form field, so a key can be tested before saving.
 * Added: Validation errors now display on the settings page (missing `settings_errors()` call).
 * Added: Registration link in the API key field description.
 
+= 1.5.0 =
+
+_Release date: 2026-08-18_
+
+* Fixed: API key saving, test connection, settings error display, registration link.
+
 = 1.4.1 =
 
 _Release date: 2026-08-17_
diff --git a/robotstxt-manager.php b/robotstxt-manager.php
index 846e580..60131ec 100644
--- a/robotstxt-manager.php
+++ b/robotstxt-manager.php
@@ -3,7 +3,7 @@
  * Plugin Name:       Manager (by ROBOTSTXT)
  * Plugin URI:        https://www.robotstxt.software/plugins/robotstxt-manager/
  * Description:       Client-side dashboard for the ROBOTSTXT plugin ecosystem. Lists the catalog from a remote Plugins Core install, resolves local install/update state, and installs, activates, and updates plugins directly from the store.
- * Version:           1.5.0
+ * Version:           1.6.0
  * Requires at least: 4.4
  * Requires PHP:      8.0
  * Update URI:        https://www.robotstxt.software/plugins/robotstxt-manager/
@@ -13,6 +13,7 @@
  * License URI:       https://www.gnu.org/licenses/gpl-3.0.html
  * Text Domain:       robotstxt-manager
  * Domain Path:       /languages
+ * Network:           true
  *
  * @package Robotstxt_Manager
  */
@@ -22,7 +23,7 @@ if ( ! defined( 'ABSPATH' ) ) {
 }
 
 /** Plugin version. */
-define( 'ROBOTSTXT_MANAGER_VERSION', '1.5.0' );
+define( 'ROBOTSTXT_MANAGER_VERSION', '1.6.0' );
 
 /** Absolute path to the plugin directory, with trailing slash. */
 define( 'ROBOTSTXT_MANAGER_DIR', plugin_dir_path( __FILE__ ) );
diff --git a/uninstall.php b/uninstall.php
index 2f75539..486b212 100644
--- a/uninstall.php
+++ b/uninstall.php
@@ -9,7 +9,7 @@ if ( ! defined( 'WP_UNINSTALL_PLUGIN' ) ) {
 	exit;
 }
 
-if ( ! get_option( 'robotstxt_manager_delete_data_on_uninstall', false ) ) {
+if ( ! get_site_option( 'robotstxt_manager_delete_data_on_uninstall', false ) ) {
 	return;
 }
 
@@ -21,10 +21,10 @@ $option_keys = array(
 );
 
 foreach ( $option_keys as $key ) {
-	delete_option( $key );
+	delete_site_option( $key );
 }
 
-delete_transient( 'robotstxt_manager_catalog' );
+delete_site_transient( 'robotstxt_manager_catalog' );
 
 // Purge the WordPress update transient: premium entries carry the API key
 // in their package URL. WordPress rebuilds it on the next update check.

From 4f8ab239b04d90d8c4d131f6b0e9f73fcce4bb36 Mon Sep 17 00:00:00 2001
From: Javier Casares <javier@robotstxt.es>
Date: Tue, 18 Aug 2026 10:49:06 +0000
Subject: [PATCH 19/23] v1.6.1

---
 admin/class-robotstxt-manager-settings.php |  8 ++++----
 changelog.txt                              |  8 ++++++++
 languages/robotstxt-manager.pot            |  2 +-
 readme.txt                                 | 23 ++++++++--------------
 robotstxt-manager.php                      |  4 ++--
 5 files changed, 23 insertions(+), 22 deletions(-)

diff --git a/admin/class-robotstxt-manager-settings.php b/admin/class-robotstxt-manager-settings.php
index d1fcf12..955b7c1 100644
--- a/admin/class-robotstxt-manager-settings.php
+++ b/admin/class-robotstxt-manager-settings.php
@@ -44,6 +44,7 @@ class Robotstxt_Manager_Settings {
 		$menu_hook = is_multisite() ? 'network_admin_menu' : 'admin_menu';
 		$loader->add_action( $menu_hook, $this, 'add_settings_page' );
 		$loader->add_action( 'admin_init', $this, 'register_settings' );
+		$loader->add_action( 'admin_init', $this, 'handle_form_submission' );
 		$loader->add_action( 'admin_enqueue_scripts', $this, 'enqueue_scripts' );
 		$loader->add_action( 'wp_ajax_robotstxt_manager_test_connection', $this, 'handle_test_connection' );
 		$loader->add_action( 'wp_ajax_robotstxt_manager_delete_key', $this, 'handle_delete_key' );
@@ -209,8 +210,6 @@ class Robotstxt_Manager_Settings {
 			wp_die( esc_html__( 'You do not have sufficient permissions to access this page.', 'robotstxt-manager' ) );
 		}
 
-		$this->handle_form_submission();
-
 		require_once ROBOTSTXT_MANAGER_DIR . 'admin/views/page-settings.php';
 	}
 
@@ -218,11 +217,12 @@ class Robotstxt_Manager_Settings {
 	 * Handles manual form submission for network settings.
 	 *
 	 * The WordPress Settings API (options.php) does not handle network
-	 * options, so the network settings page must process its own form.
+	 * options, so the settings page must process its own form. Hooked to
+	 * admin_init so the redirect runs before any output is sent.
 	 *
 	 * @return void
 	 */
-	private function handle_form_submission(): void {
+	public function handle_form_submission(): void {
 		if ( ! isset( $_POST['robotstxt_manager_settings_group_nonce'] ) ) {
 			return;
 		}
diff --git a/changelog.txt b/changelog.txt
index f8c45c5..788573a 100644
--- a/changelog.txt
+++ b/changelog.txt
@@ -1,5 +1,13 @@
 == Changelog ==
 
+= 1.6.1 =
+
+_Release date: 2026-08-18_
+
+**Fixed**
+
+* "Cannot modify header information — headers already sent" warning after saving the settings: the form handler ran inside the page renderer (after output started). It now runs on `admin_init`, before any output, so the redirect succeeds.
+
 = 1.6.0 =
 
 _Release date: 2026-08-18_
diff --git a/languages/robotstxt-manager.pot b/languages/robotstxt-manager.pot
index 1d92587..dcc62df 100644
--- a/languages/robotstxt-manager.pot
+++ b/languages/robotstxt-manager.pot
@@ -2,7 +2,7 @@
 # This file is distributed under the GPL-3.0-or-later.
 msgid ""
 msgstr ""
-"Project-Id-Version: Manager (by ROBOTSTXT) 1.6.0\n"
+"Project-Id-Version: Manager (by ROBOTSTXT) 1.6.1\n"
 "Report-Msgid-Bugs-To: https://www.robotstxt.software/plugins/robotstxt-manager/\n"
 "Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
 "Language-Team: LANGUAGE <LL@li.org>\n"
diff --git a/readme.txt b/readme.txt
index 0a6dd0f..fec94ec 100644
--- a/readme.txt
+++ b/readme.txt
@@ -3,9 +3,9 @@ Contributors: robotstxt, javiercasares
 Tags: dashboard, catalog, updates, subscriptions, management
 Requires at least: 4.4
 Tested up to: 7.1
-Stable tag: 1.6.0
+Stable tag: 1.6.1
 Requires PHP: 8.0
-Version: 1.6.0
+Version: 1.6.1
 License: GPL-3.0-or-later
 License URI: https://www.gnu.org/licenses/gpl-3.0.txt
 
@@ -94,6 +94,12 @@ Encrypted at rest using AES-256-CBC with a key derived from your site's WordPres
 
 Only the 3 last versions. The full changelog will be at changelog.txt
 
+= 1.6.1 =
+
+_Release date: 2026-08-18_
+
+* Fixed: "headers already sent" warning after saving the settings — the form handler now runs on `admin_init`, before any output.
+
 = 1.6.0 =
 
 _Release date: 2026-08-18_
@@ -111,19 +117,6 @@ _Release date: 2026-08-18_
 
 * Fixed: API key saving, test connection, settings error display, registration link.
 
-= 1.4.1 =
-
-_Release date: 2026-08-17_
-
-* Housekeeping release: plugin identity now points at the ROBOTSTXT software site — Plugin URI and Update URI are `https://www.robotstxt.software/plugins/robotstxt-manager/`, Author URI is `https://www.robotstxt.software/`, and this readme's full-changelog link points to the same page.
-* Tooling aligned with the declared real floors: PHPCS `testVersion` and the preflight scan range now cover PHP 8.0-8.5 (was 7.4/8.4).
-
-= 1.4.0 =
-
-_Release date: 2026-08-17_
-
-* Premium update URLs carry a short-lived download token (Core 1.9.0+) instead of the API key; automatic fallback on older Core.
-
 = Previous versions =
 
 If you want to see the full changelog, visit the [plugin page](https://www.robotstxt.software/plugins/robotstxt-manager/).
diff --git a/robotstxt-manager.php b/robotstxt-manager.php
index 60131ec..072a92d 100644
--- a/robotstxt-manager.php
+++ b/robotstxt-manager.php
@@ -3,7 +3,7 @@
  * Plugin Name:       Manager (by ROBOTSTXT)
  * Plugin URI:        https://www.robotstxt.software/plugins/robotstxt-manager/
  * Description:       Client-side dashboard for the ROBOTSTXT plugin ecosystem. Lists the catalog from a remote Plugins Core install, resolves local install/update state, and installs, activates, and updates plugins directly from the store.
- * Version:           1.6.0
+ * Version:           1.6.1
  * Requires at least: 4.4
  * Requires PHP:      8.0
  * Update URI:        https://www.robotstxt.software/plugins/robotstxt-manager/
@@ -23,7 +23,7 @@ if ( ! defined( 'ABSPATH' ) ) {
 }
 
 /** Plugin version. */
-define( 'ROBOTSTXT_MANAGER_VERSION', '1.6.0' );
+define( 'ROBOTSTXT_MANAGER_VERSION', '1.6.1' );
 
 /** Absolute path to the plugin directory, with trailing slash. */
 define( 'ROBOTSTXT_MANAGER_DIR', plugin_dir_path( __FILE__ ) );

From c7a8d9efcc30ce33f4c1997683321974c73f8e04 Mon Sep 17 00:00:00 2001
From: Javier Casares <javier@robotstxt.es>
Date: Mon, 24 Aug 2026 06:42:23 +0000
Subject: [PATCH 20/23] v1.7.0

---
 admin/class-robotstxt-manager-installer.php   | 51 ++++++++++++++++---
 admin/views/page-catalog.php                  | 13 ++++-
 changelog.txt                                 | 32 ++++++++++++
 .../class-robotstxt-manager-core-client.php   | 18 +++++--
 languages/robotstxt-manager.pot               |  2 +-
 readme.txt                                    | 34 ++++++-------
 robotstxt-manager.php                         | 12 ++++-
 7 files changed, 129 insertions(+), 33 deletions(-)

diff --git a/admin/class-robotstxt-manager-installer.php b/admin/class-robotstxt-manager-installer.php
index 28046a0..c80744c 100644
--- a/admin/class-robotstxt-manager-installer.php
+++ b/admin/class-robotstxt-manager-installer.php
@@ -527,11 +527,16 @@ class Robotstxt_Manager_Installer {
 
 		// Free plugins that publish a public download URL in the catalog are
 		// fetched directly (no auth). Everything else goes through Core's
-		// authenticated download endpoint (account API key as Bearer).
+		// authenticated download endpoint (account API key as Bearer), with
+		// this site's domain for per-domain license binding (Core 1.11.0+).
 		$use_download_endpoint = ! ( $is_free && '' !== $dl_url );
 
 		$zip_url = $use_download_endpoint
-			? $client->get_store_url() . '/wp-json/robotstxt-core/v1/plugins/' . rawurlencode( $slug ) . '/download'
+			? add_query_arg(
+				'domain',
+				rawurlencode( $this->site_domain() ),
+				$client->get_store_url() . '/wp-json/robotstxt-core/v1/plugins/' . rawurlencode( $slug ) . '/download'
+			)
 			: $dl_url;
 
 		$tmp_file = wp_tempnam( $slug . '.zip' );
@@ -581,13 +586,25 @@ class Robotstxt_Manager_Installer {
 		if ( 200 !== $code ) {
 			wp_delete_file( $tmp_file );
 
+			// Surface the store's own error message (e.g. the per-domain
+			// license "change the domain in your account" explanation).
+			$body   = json_decode( wp_remote_retrieve_body( $response ), true );
+			$detail = is_array( $body ) && isset( $body['message'] ) && is_string( $body['message'] ) ? $body['message'] : '';
+
 			return new WP_Error(
 				'robotstxt_manager_http',
-				sprintf(
-					/* translators: %d: HTTP status code. */
-					__( 'Download failed (HTTP %d).', 'robotstxt-manager' ),
-					$code
-				)
+				'' !== $detail
+					? sprintf(
+						/* translators: 1: HTTP status code, 2: store error message. */
+						__( 'Download failed (HTTP %1$d): %2$s', 'robotstxt-manager' ),
+						$code,
+						$detail
+					)
+					: sprintf(
+						/* translators: %d: HTTP status code. */
+						__( 'Download failed (HTTP %d).', 'robotstxt-manager' ),
+						$code
+					)
 			);
 		}
 
@@ -700,6 +717,26 @@ class Robotstxt_Manager_Installer {
 	 *
 	 * @return bool True when the file looks like a valid ZIP archive.
 	 */
+	/**
+	 * Returns the normalised domain of the current site.
+	 *
+	 * @return string Domain (e.g. 'example.com').
+	 */
+	private function site_domain(): string {
+		$host = strtolower( (string) wp_parse_url( home_url(), PHP_URL_HOST ) );
+
+		// Strip the literal "www." prefix (ltrim would eat any leading w/).
+		return (string) preg_replace( '/^www\./', '', $host );
+	}
+
+	/**
+	 * Validates a downloaded archive: must exist, be non-empty, and start
+	 * with the ZIP magic bytes "PK".
+	 *
+	 * @param string $file Absolute path to the downloaded file.
+	 *
+	 * @return bool True when the file looks like a ZIP archive.
+	 */
 	private function is_valid_zip( string $file ): bool {
 		if ( ! file_exists( $file ) ) {
 			return false;
diff --git a/admin/views/page-catalog.php b/admin/views/page-catalog.php
index 4df6d6c..51b2c23 100644
--- a/admin/views/page-catalog.php
+++ b/admin/views/page-catalog.php
@@ -278,7 +278,7 @@ $compat_warnings   = 0;
 
 										if ( $days_left >= 0 && $days_left <= 14 ) {
 											$sub_text = sprintf(
-												/* translators: %d: days remaining. */
+											/* translators: %d: days remaining. */
 												__( 'Subscribed — %d days left', 'robotstxt-manager' ),
 												$days_left
 											);
@@ -292,6 +292,17 @@ $compat_warnings   = 0;
 									} elseif ( 'expired' === $sub_status ) {
 										$sub_text = __( 'Expired', 'robotstxt-manager' );
 									}
+
+									// Bound domain (per-domain licenses, Core 1.11.0+):
+									// shown once the license is tied to a site.
+									$raw_bound  = $sub_row['bound_domain'] ?? '';
+									$bound_text = is_string( $raw_bound ) ? trim( $raw_bound ) : '';
+
+									if ( '' !== $bound_text && in_array( $sub_status, array( 'active', 'payment_failed' ), true ) ) {
+										$sub_text = '' !== $sub_text
+										? $sub_text . ' @ ' . $bound_text
+										: $bound_text;
+									}
 								}
 
 								if ( '' !== $sub_text ) {
diff --git a/changelog.txt b/changelog.txt
index 788573a..4f83844 100644
--- a/changelog.txt
+++ b/changelog.txt
@@ -1,5 +1,37 @@
 == Changelog ==
 
+= 1.7.0 =
+
+_Release date: 2026-08-18_
+
+**Added**
+
+* Per-domain license support (Core 1.11.0+): install/update downloads and the download-token exchange now send this site's normalized domain, so premium licenses bind to this site and the store rejects requests from other domains. Catalog subscription pills show the bound domain when the store reports one (e.g. "Subscribed @ example.com").
+
+**Changed**
+
+* Download failures now surface the store's own error message from the JSON body (e.g. the domain-mismatch explanation) instead of only "Download failed (HTTP 403)." — falls back to the bare code when no message is present.
+
+**Tests**
+
+* PHPCS (WordPress-Core, WordPress-Docs, WordPress-Extra): pass
+* PHPStan level 9 + wp-compat: pass
+* PHPUnit: 149 tests, 391 assertions
+
+= 1.6.2 =
+
+_Release date: 2026-08-18_
+
+**Added**
+
+* `ROBOTSTXT_MANAGER_NOTICED` presence constant (guarded with `defined()`, value `true`), defined when Manager loads: ecosystem plugins (Core, Mollie, …) detect an active Manager via `defined( 'ROBOTSTXT_MANAGER_NOTICED' )` instead of scanning the plugin list. The guard keeps a double-load or a conflicting definition from fatalling.
+
+**Tests**
+
+* PHPCS (WordPress-Core, WordPress-Docs, WordPress-Extra): pass
+* PHPStan level 9 + wp-compat: pass
+* PHPUnit: 147 tests, 386 assertions
+
 = 1.6.1 =
 
 _Release date: 2026-08-18_
diff --git a/includes/class-robotstxt-manager-core-client.php b/includes/class-robotstxt-manager-core-client.php
index 7356c2e..8c2ec54 100644
--- a/includes/class-robotstxt-manager-core-client.php
+++ b/includes/class-robotstxt-manager-core-client.php
@@ -356,10 +356,12 @@ class Robotstxt_Manager_Core_Client {
 
 			$raw_status     = $row['status'] ?? '';
 			$raw_expires_at = $row['expires_at'] ?? '';
+			$raw_bound      = $row['bound_domain'] ?? '';
 
 			$rows[ $slug ] = array(
-				'status'     => is_string( $raw_status ) ? $raw_status : '',
-				'expires_at' => is_string( $raw_expires_at ) ? $raw_expires_at : '',
+				'status'       => is_string( $raw_status ) ? $raw_status : '',
+				'expires_at'   => is_string( $raw_expires_at ) ? $raw_expires_at : '',
+				'bound_domain' => is_string( $raw_bound ) ? $raw_bound : '',
 			);
 		}
 
@@ -383,6 +385,11 @@ class Robotstxt_Manager_Core_Client {
 			return '';
 		}
 
+		// Send this site's domain so per-domain license binding is enforced
+		// at token issuance (Core 1.11.0+); older Core ignores the field.
+		$host   = strtolower( (string) wp_parse_url( home_url(), PHP_URL_HOST ) );
+		$domain = (string) preg_replace( '/^www\./', '', $host );
+
 		$response = wp_remote_post(
 			$this->store_url . '/wp-json/' . self::REST_NAMESPACE . '/me/download-token',
 			array(
@@ -391,7 +398,12 @@ class Robotstxt_Manager_Core_Client {
 					'Accept'        => 'application/json',
 					'Content-Type'  => 'application/json',
 				),
-				'body'    => (string) wp_json_encode( array( 'slug' => $slug ) ),
+				'body'    => (string) wp_json_encode(
+					array(
+						'slug'   => $slug,
+						'domain' => $domain,
+					)
+				),
 				'timeout' => self::TIMEOUT,
 			)
 		);
diff --git a/languages/robotstxt-manager.pot b/languages/robotstxt-manager.pot
index dcc62df..5e842d5 100644
--- a/languages/robotstxt-manager.pot
+++ b/languages/robotstxt-manager.pot
@@ -2,7 +2,7 @@
 # This file is distributed under the GPL-3.0-or-later.
 msgid ""
 msgstr ""
-"Project-Id-Version: Manager (by ROBOTSTXT) 1.6.1\n"
+"Project-Id-Version: Manager (by ROBOTSTXT) 1.7.0\n"
 "Report-Msgid-Bugs-To: https://www.robotstxt.software/plugins/robotstxt-manager/\n"
 "Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
 "Language-Team: LANGUAGE <LL@li.org>\n"
diff --git a/readme.txt b/readme.txt
index fec94ec..64bece5 100644
--- a/readme.txt
+++ b/readme.txt
@@ -3,9 +3,9 @@ Contributors: robotstxt, javiercasares
 Tags: dashboard, catalog, updates, subscriptions, management
 Requires at least: 4.4
 Tested up to: 7.1
-Stable tag: 1.6.1
+Stable tag: 1.7.0
 Requires PHP: 8.0
-Version: 1.6.1
+Version: 1.7.0
 License: GPL-3.0-or-later
 License URI: https://www.gnu.org/licenses/gpl-3.0.txt
 
@@ -94,29 +94,25 @@ Encrypted at rest using AES-256-CBC with a key derived from your site's WordPres
 
 Only the 3 last versions. The full changelog will be at changelog.txt
 
+= 1.7.0 =
+
+_Release date: 2026-08-18_
+
+* New: per-domain license support (Core 1.11.0+) — downloads and download-token exchanges now send this site's domain, so premium licenses bind to this site and the store rejects them from other domains. Catalog subscription pills show the bound domain (e.g. "Subscribed @ example.com").
+* Improvement: download failures now surface the store's own error message (e.g. the domain-mismatch explanation) instead of a bare HTTP status code.
+
+= 1.6.2 =
+
+_Release date: 2026-08-18_
+
+* Added: `ROBOTSTXT_MANAGER_NOTICED` presence constant (guarded, `true`) — ecosystem plugins detect Manager via a constant check instead of scanning the plugin list.
+
 = 1.6.1 =
 
 _Release date: 2026-08-18_
 
 * Fixed: "headers already sent" warning after saving the settings — the form handler now runs on `admin_init`, before any output.
 
-= 1.6.0 =
-
-_Release date: 2026-08-18_
-
-* Added: WordPress Multisite compatibility — `Network: true` header forces network-wide activation; menus appear in the network admin on Multisite and in the regular admin on single-site. All options and transients use network-level storage (`get_site_option` / `get_site_transient`).
-* Fixed: API key not saving when the browser auto-fills the password field with the stored encrypted value.
-* Fixed: "Test connection" now validates the API key against an authenticated Core endpoint (`/me/subscriptions`) instead of the public catalog — invalid keys are correctly rejected.
-* Fixed: "Test connection" reads the key from the form field, so a key can be tested before saving.
-* Added: Validation errors now display on the settings page (missing `settings_errors()` call).
-* Added: Registration link in the API key field description.
-
-= 1.5.0 =
-
-_Release date: 2026-08-18_
-
-* Fixed: API key saving, test connection, settings error display, registration link.
-
 = Previous versions =
 
 If you want to see the full changelog, visit the [plugin page](https://www.robotstxt.software/plugins/robotstxt-manager/).
diff --git a/robotstxt-manager.php b/robotstxt-manager.php
index 072a92d..8b423ac 100644
--- a/robotstxt-manager.php
+++ b/robotstxt-manager.php
@@ -3,7 +3,7 @@
  * Plugin Name:       Manager (by ROBOTSTXT)
  * Plugin URI:        https://www.robotstxt.software/plugins/robotstxt-manager/
  * Description:       Client-side dashboard for the ROBOTSTXT plugin ecosystem. Lists the catalog from a remote Plugins Core install, resolves local install/update state, and installs, activates, and updates plugins directly from the store.
- * Version:           1.6.1
+ * Version:           1.7.0
  * Requires at least: 4.4
  * Requires PHP:      8.0
  * Update URI:        https://www.robotstxt.software/plugins/robotstxt-manager/
@@ -23,7 +23,7 @@ if ( ! defined( 'ABSPATH' ) ) {
 }
 
 /** Plugin version. */
-define( 'ROBOTSTXT_MANAGER_VERSION', '1.6.1' );
+define( 'ROBOTSTXT_MANAGER_VERSION', '1.7.0' );
 
 /** Absolute path to the plugin directory, with trailing slash. */
 define( 'ROBOTSTXT_MANAGER_DIR', plugin_dir_path( __FILE__ ) );
@@ -34,6 +34,14 @@ define( 'ROBOTSTXT_MANAGER_URL', plugin_dir_url( __FILE__ ) );
 /** Plugin basename. */
 define( 'ROBOTSTXT_MANAGER_BASENAME', plugin_basename( __FILE__ ) );
 
+// Presence flag for the ecosystem: other ROBOTSTXT plugins (Core, Mollie…)
+// check defined( 'ROBOTSTXT_MANAGER_NOTICED' ) to detect that Manager is
+// active without scanning the plugin list. Guarded so a double-load or a
+// conflicting definition elsewhere cannot raise a fatal error.
+if ( ! defined( 'ROBOTSTXT_MANAGER_NOTICED' ) ) {
+	define( 'ROBOTSTXT_MANAGER_NOTICED', true );
+}
+
 // Load Composer autoloader, with a manual fallback for environments where
 // composer install has not been run.
 if ( file_exists( ROBOTSTXT_MANAGER_DIR . 'vendor/autoload.php' ) ) {

From 1460cb231f3f576add648ead11abc486e6f93661 Mon Sep 17 00:00:00 2001
From: Javier Casares <javier@robotstxt.es>
Date: Fri, 11 Sep 2026 10:45:13 +0000
Subject: [PATCH 21/23] v1.8.0

---
 admin/views/page-catalog.php                  | 12 +++++--
 changelog.txt                                 | 14 +++++++++
 .../class-robotstxt-manager-core-client.php   | 31 +++++++++++++++++--
 languages/robotstxt-manager.pot               |  2 +-
 readme.txt                                    | 16 +++++-----
 robotstxt-manager.php                         |  4 +--
 6 files changed, 63 insertions(+), 16 deletions(-)

diff --git a/admin/views/page-catalog.php b/admin/views/page-catalog.php
index 51b2c23..08a103b 100644
--- a/admin/views/page-catalog.php
+++ b/admin/views/page-catalog.php
@@ -298,10 +298,18 @@ $compat_warnings   = 0;
 									$raw_bound  = $sub_row['bound_domain'] ?? '';
 									$bound_text = is_string( $raw_bound ) ? trim( $raw_bound ) : '';
 
+									// Multi-license: how many licenses the account
+									// holds for this plugin (Core 1.14.0+).
+									$raw_count = $sub_row['license_count'] ?? 1;
+									$count_int = is_numeric( $raw_count ) ? (int) ( $raw_count + 0 ) : 1;
+									$count_txt = $count_int > 1 ? ' ×' . $count_int : '';
+
 									if ( '' !== $bound_text && in_array( $sub_status, array( 'active', 'payment_failed' ), true ) ) {
 										$sub_text = '' !== $sub_text
-										? $sub_text . ' @ ' . $bound_text
-										: $bound_text;
+											? $sub_text . ' @ ' . $bound_text . $count_txt
+											: $bound_text . $count_txt;
+									} elseif ( '' !== $count_txt ) {
+										$sub_text = '' !== $sub_text ? $sub_text . $count_txt : 'Subscribed' . $count_txt;
 									}
 								}
 
diff --git a/changelog.txt b/changelog.txt
index 4f83844..2f3fd47 100644
--- a/changelog.txt
+++ b/changelog.txt
@@ -1,5 +1,19 @@
 == Changelog ==
 
+= 1.8.0 =
+
+_Release date: 2026-08-24_
+
+**Added**
+
+* Multi-domain license awareness (with Core 1.14.0): `Robotstxt_Manager_Core_Client::get_subscriptions()` groups the flat `/me/subscriptions` rows per plugin slug — any-active status wins, the first bound domain is shown, and a `license_count` is kept. Catalog subscription pills render the count when a plugin has more than one license (e.g. "Subscribed @ example.com ×2").
+
+**Tests**
+
+* PHPCS (WordPress-Core, WordPress-Docs, WordPress-Extra): pass
+* PHPStan level 9 + wp-compat: pass
+* PHPUnit: 149 tests, 391 assertions
+
 = 1.7.0 =
 
 _Release date: 2026-08-18_
diff --git a/includes/class-robotstxt-manager-core-client.php b/includes/class-robotstxt-manager-core-client.php
index 8c2ec54..ca38fb4 100644
--- a/includes/class-robotstxt-manager-core-client.php
+++ b/includes/class-robotstxt-manager-core-client.php
@@ -358,10 +358,35 @@ class Robotstxt_Manager_Core_Client {
 			$raw_expires_at = $row['expires_at'] ?? '';
 			$raw_bound      = $row['bound_domain'] ?? '';
 
+			$status     = is_string( $raw_status ) ? $raw_status : '';
+			$expires_at = is_string( $raw_expires_at ) ? $raw_expires_at : '';
+			$bound      = is_string( $raw_bound ) ? $raw_bound : '';
+
+			// Group multi-license rows (Core 1.14.0+: one row per domain)
+			// into one entry per slug: any-active wins, first bound domain
+			// shown, license count kept for the pill.
+			if ( isset( $rows[ $slug ] ) ) {
+				$existing = $rows[ $slug ];
+
+				if ( 'active' === $status && 'active' !== $existing['status'] ) {
+					$existing['status']     = 'active';
+					$existing['expires_at'] = $expires_at;
+				}
+
+				if ( '' === $existing['bound_domain'] && '' !== $bound ) {
+					$existing['bound_domain'] = $bound;
+				}
+
+				$existing['license_count'] = (int) $existing['license_count'] + 1;
+				$rows[ $slug ]             = $existing;
+				continue;
+			}
+
 			$rows[ $slug ] = array(
-				'status'       => is_string( $raw_status ) ? $raw_status : '',
-				'expires_at'   => is_string( $raw_expires_at ) ? $raw_expires_at : '',
-				'bound_domain' => is_string( $raw_bound ) ? $raw_bound : '',
+				'status'        => $status,
+				'expires_at'    => $expires_at,
+				'bound_domain'  => $bound,
+				'license_count' => 1,
 			);
 		}
 
diff --git a/languages/robotstxt-manager.pot b/languages/robotstxt-manager.pot
index 5e842d5..f7ac393 100644
--- a/languages/robotstxt-manager.pot
+++ b/languages/robotstxt-manager.pot
@@ -2,7 +2,7 @@
 # This file is distributed under the GPL-3.0-or-later.
 msgid ""
 msgstr ""
-"Project-Id-Version: Manager (by ROBOTSTXT) 1.7.0\n"
+"Project-Id-Version: Manager (by ROBOTSTXT) 1.8.0\n"
 "Report-Msgid-Bugs-To: https://www.robotstxt.software/plugins/robotstxt-manager/\n"
 "Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
 "Language-Team: LANGUAGE <LL@li.org>\n"
diff --git a/readme.txt b/readme.txt
index 64bece5..1a52e3a 100644
--- a/readme.txt
+++ b/readme.txt
@@ -3,9 +3,9 @@ Contributors: robotstxt, javiercasares
 Tags: dashboard, catalog, updates, subscriptions, management
 Requires at least: 4.4
 Tested up to: 7.1
-Stable tag: 1.7.0
+Stable tag: 1.8.0
 Requires PHP: 8.0
-Version: 1.7.0
+Version: 1.8.0
 License: GPL-3.0-or-later
 License URI: https://www.gnu.org/licenses/gpl-3.0.txt
 
@@ -94,6 +94,12 @@ Encrypted at rest using AES-256-CBC with a key derived from your site's WordPres
 
 Only the 3 last versions. The full changelog will be at changelog.txt
 
+= 1.8.0 =
+
+_Release date: 2026-08-24_
+
+* New: multi-domain license awareness (with Core 1.14.0) — the account's subscriptions are grouped per plugin and catalog pills show how many licenses you hold (e.g. "Subscribed @ example.com ×2") with the domain of the first bound license.
+
 = 1.7.0 =
 
 _Release date: 2026-08-18_
@@ -107,12 +113,6 @@ _Release date: 2026-08-18_
 
 * Added: `ROBOTSTXT_MANAGER_NOTICED` presence constant (guarded, `true`) — ecosystem plugins detect Manager via a constant check instead of scanning the plugin list.
 
-= 1.6.1 =
-
-_Release date: 2026-08-18_
-
-* Fixed: "headers already sent" warning after saving the settings — the form handler now runs on `admin_init`, before any output.
-
 = Previous versions =
 
 If you want to see the full changelog, visit the [plugin page](https://www.robotstxt.software/plugins/robotstxt-manager/).
diff --git a/robotstxt-manager.php b/robotstxt-manager.php
index 8b423ac..ab4af19 100644
--- a/robotstxt-manager.php
+++ b/robotstxt-manager.php
@@ -3,7 +3,7 @@
  * Plugin Name:       Manager (by ROBOTSTXT)
  * Plugin URI:        https://www.robotstxt.software/plugins/robotstxt-manager/
  * Description:       Client-side dashboard for the ROBOTSTXT plugin ecosystem. Lists the catalog from a remote Plugins Core install, resolves local install/update state, and installs, activates, and updates plugins directly from the store.
- * Version:           1.7.0
+ * Version:           1.8.0
  * Requires at least: 4.4
  * Requires PHP:      8.0
  * Update URI:        https://www.robotstxt.software/plugins/robotstxt-manager/
@@ -23,7 +23,7 @@ if ( ! defined( 'ABSPATH' ) ) {
 }
 
 /** Plugin version. */
-define( 'ROBOTSTXT_MANAGER_VERSION', '1.7.0' );
+define( 'ROBOTSTXT_MANAGER_VERSION', '1.8.0' );
 
 /** Absolute path to the plugin directory, with trailing slash. */
 define( 'ROBOTSTXT_MANAGER_DIR', plugin_dir_path( __FILE__ ) );

From 27ce69c2d200025cb0db2c1b14549c7d6756809c Mon Sep 17 00:00:00 2001
From: Javier Casares <javier@robotstxt.es>
Date: Wed, 23 Sep 2026 06:09:05 +0000
Subject: [PATCH 22/23] v1.8.1

---
 admin/class-robotstxt-manager-installer.php   |   8 -
 admin/views/page-catalog.php                  |   2 +-
 changelog.txt                                 |  32 ++++
 .../class-robotstxt-manager-core-client.php   |  34 ++++-
 .../class-robotstxt-manager-encryption.php    |   8 +-
 includes/class-robotstxt-manager-updater.php  | 143 +++++++++++++-----
 readme.txt                                    |  19 ++-
 robotstxt-manager.php                         |   4 +-
 uninstall.php                                 |   1 +
 9 files changed, 189 insertions(+), 62 deletions(-)

diff --git a/admin/class-robotstxt-manager-installer.php b/admin/class-robotstxt-manager-installer.php
index c80744c..fe3bfb2 100644
--- a/admin/class-robotstxt-manager-installer.php
+++ b/admin/class-robotstxt-manager-installer.php
@@ -709,14 +709,6 @@ class Robotstxt_Manager_Installer {
 		exit;
 	}
 
-	/**
-	 * Validates a downloaded archive: must exist, be non-empty, and start
-	 * with the ZIP magic bytes "PK".
-	 *
-	 * @param string $file Absolute path to the downloaded file.
-	 *
-	 * @return bool True when the file looks like a valid ZIP archive.
-	 */
 	/**
 	 * Returns the normalised domain of the current site.
 	 *
diff --git a/admin/views/page-catalog.php b/admin/views/page-catalog.php
index 08a103b..38dd0f4 100644
--- a/admin/views/page-catalog.php
+++ b/admin/views/page-catalog.php
@@ -309,7 +309,7 @@ $compat_warnings   = 0;
 											? $sub_text . ' @ ' . $bound_text . $count_txt
 											: $bound_text . $count_txt;
 									} elseif ( '' !== $count_txt ) {
-										$sub_text = '' !== $sub_text ? $sub_text . $count_txt : 'Subscribed' . $count_txt;
+										$sub_text = '' !== $sub_text ? $sub_text . $count_txt : __( 'Subscribed', 'robotstxt-manager' ) . $count_txt;
 									}
 								}
 
diff --git a/changelog.txt b/changelog.txt
index 2f3fd47..d546207 100644
--- a/changelog.txt
+++ b/changelog.txt
@@ -1,5 +1,37 @@
 == Changelog ==
 
+= 1.8.1 =
+
+_Release date: 2026-09-22_
+
+**Fixed**
+
+* Pending updates now appear on sites where the WordPress.org update check never completes (api.wordpress.org unreachable, blocked, or firewalled hosts — common on a lot of servers). `Robotstxt_Manager_Updater` moved from the write-side hook (`pre_set_site_transient_update_plugins`, which only fires when a full `wp_update_plugins()` cycle finishes) to the read-side filter (`site_transient_update_plugins`, which fires every time anything reads the update data: Plugins screen, Updates page, WP-CLI, auto-updates). Local versions are resolved from `get_plugins()` instead of the transient's `checked` list, which never exists in those environments. Diagnosed and verified end-to-end against the live store: update detection, listing (`wp plugin list`), dry-run, and the actual update run all work now even with api.wordpress.org blocked.
+* Stale Manager-owned update entries no longer mask newer versions: WordPress persists the filtered read during a (failed) update check, so a previously injected entry can sit in the stored transient forever. The updater now recognizes its own entries (package URL host matches the store) and replaces or removes them with fresh catalog data — killing stale-version masking, phantom "update available" badges after updating, and expired download tokens in one guard. Entries from other update servers (bundled SDKs pointing elsewhere, WordPress.org) are never touched.
+* Premium download-token exchanges are now cached (5-minute site transient, failures negatively cached for 1 minute): without the cache, every read of the update data while a premium update is pending triggered a blocking HTTP call to the store — several per admin page load.
+* Opt-in data deletion on uninstall now also removes the cached subscriptions site transient (`robotstxt_manager_subscriptions`) — previously only the catalog transient was deleted, so subscription data could outlive the plugin when "Delete all plugin data" was enabled.
+* A hardcoded "Subscribed" fallback label in the multi-license catalog pill (unknown subscription status with more than one license) is now translatable like every other pill label.
+
+**Changed**
+
+* PHPStan raised from level 9 to `max` (level 10); the two `mixed`-strictness findings it surfaced were fixed with real narrowing (`AUTH_KEY`/`AUTH_SALT` string checks in the encryption key derivation, the `plugins_api` slug check).
+
+* `Robotstxt_Manager_Core_Client::get_subscriptions()` normalizes rows restored from the transient cache the same way `get_catalog()` does (string keys enforced) — resolves the single level-9 error surfaced by PHPStan 2.2.14; no behavior change.
+* Development tooling updated via `composer update`: phpstan 2.2.8 → 2.2.14, phpstan-wordpress 2.0.3 → 2.0.4, wordpress-stubs 6.9.4 → 7.1.0, wp-hooks/wordpress-core 1.12.0 → 1.13.0, nikic/php-parser 5.8.0 → 5.9.0.
+* Tests: dropped `ReflectionMethod::setAccessible()` calls (no-op since PHP 8.1, deprecated on PHP 8.5) so the suite runs notice-free on the maximum supported PHP version. Regression tests cover the "WordPress.org check never completed" transient shape, the `false` transient, stale own-entry replacement/removal, and download-token caching.
+
+**Compatibility**
+
+* WordPress: 4.4 - 7.1 (scan-verified 2026-09-22: wp-compat ladder clean from 4.4; verified across 4.4-7.1 with WordPress stubs 7.1.0 — no API newer than 4.4 in use, so 7.1 GA remains covered; 7.2 is not GA)
+* PHP: 8.0 - 8.5 (scan-verified 2026-09-22: PHPCompatibility ladder 5.6-8.5 + manual audit — `str_contains()`, `str_starts_with()`, and `mixed` type hints keep the real floor at 8.0)
+
+**Tests**
+
+* PHPCS (WordPress-Core, WordPress-Docs, WordPress-Extra): pass
+* PHPStan max (level 10) + wp-compat: pass
+* PHPUnit: 152 tests, 401 assertions
+* composer audit: no known CVEs
+
 = 1.8.0 =
 
 _Release date: 2026-08-24_
diff --git a/includes/class-robotstxt-manager-core-client.php b/includes/class-robotstxt-manager-core-client.php
index ca38fb4..f35fa7a 100644
--- a/includes/class-robotstxt-manager-core-client.php
+++ b/includes/class-robotstxt-manager-core-client.php
@@ -322,7 +322,13 @@ class Robotstxt_Manager_Core_Client {
 			$typed = array();
 			foreach ( $cached as $slug => $row ) {
 				if ( is_string( $slug ) && is_array( $row ) ) {
-					$typed[ $slug ] = $row;
+					$typed_row = array();
+					foreach ( $row as $k => $v ) {
+						if ( is_string( $k ) ) {
+							$typed_row[ $k ] = $v;
+						}
+					}
+					$typed[ $slug ] = $typed_row;
 				}
 			}
 
@@ -399,6 +405,12 @@ class Robotstxt_Manager_Core_Client {
 	 * Exchanges the account API key for a short-lived download token
 	 * (Core 1.9.0+ `POST /me/download-token`).
 	 *
+	 * Tokens are cached in a short-TTL site transient (5 minutes, a fraction
+	 * of the 15-minute token lifetime) because the updater rebuilds package
+	 * URLs on every read of the update_plugins transient. Failed exchanges
+	 * are negatively cached for one minute so a slow or down store is not
+	 * queried on every read either.
+	 *
 	 * @param string $slug Plugin slug the token may download.
 	 *
 	 * @return string Token string, or '' when unavailable (older Core, no
@@ -410,6 +422,13 @@ class Robotstxt_Manager_Core_Client {
 			return '';
 		}
 
+		$cache_key = 'robotstxt_manager_dl_token_' . sanitize_key( $slug );
+		$cached    = get_site_transient( $cache_key );
+
+		if ( is_string( $cached ) ) {
+			return $cached; // Token, or '' from a negatively cached failure.
+		}
+
 		// Send this site's domain so per-domain license binding is enforced
 		// at token issuance (Core 1.11.0+); older Core ignores the field.
 		$host   = strtolower( (string) wp_parse_url( home_url(), PHP_URL_HOST ) );
@@ -434,14 +453,25 @@ class Robotstxt_Manager_Core_Client {
 		);
 
 		if ( is_wp_error( $response ) || 200 !== (int) wp_remote_retrieve_response_code( $response ) ) {
+			set_site_transient( $cache_key, '', MINUTE_IN_SECONDS );
+
 			return '';
 		}
 
 		$data = json_decode( wp_remote_retrieve_body( $response ), true );
 
 		$token = is_array( $data ) ? ( $data['token'] ?? '' ) : '';
+		$token = is_string( $token ) ? $token : '';
 
-		return is_string( $token ) ? $token : '';
+		if ( '' === $token ) {
+			set_site_transient( $cache_key, '', MINUTE_IN_SECONDS );
+
+			return '';
+		}
+
+		set_site_transient( $cache_key, $token, 5 * MINUTE_IN_SECONDS );
+
+		return $token;
 	}
 
 	/**
diff --git a/includes/class-robotstxt-manager-encryption.php b/includes/class-robotstxt-manager-encryption.php
index ae772f7..9ee88d1 100644
--- a/includes/class-robotstxt-manager-encryption.php
+++ b/includes/class-robotstxt-manager-encryption.php
@@ -195,8 +195,8 @@ class Robotstxt_Manager_Encryption {
 	 * @return string 32-byte raw key.
 	 */
 	private static function derive_key(): string {
-		$auth_key  = defined( 'AUTH_KEY' ) ? AUTH_KEY : 'auth_key_not_defined';
-		$auth_salt = defined( 'AUTH_SALT' ) ? AUTH_SALT : 'auth_salt_not_defined';
+		$auth_key  = defined( 'AUTH_KEY' ) && is_string( AUTH_KEY ) ? AUTH_KEY : 'auth_key_not_defined';
+		$auth_salt = defined( 'AUTH_SALT' ) && is_string( AUTH_SALT ) ? AUTH_SALT : 'auth_salt_not_defined';
 
 		return substr(
 			hash_hmac( 'sha256', self::CONTEXT, $auth_key . $auth_salt, true ),
@@ -214,8 +214,8 @@ class Robotstxt_Manager_Encryption {
 	 * @return string 32-byte raw key.
 	 */
 	private static function derive_mac_key(): string {
-		$auth_key  = defined( 'AUTH_KEY' ) ? AUTH_KEY : 'auth_key_not_defined';
-		$auth_salt = defined( 'AUTH_SALT' ) ? AUTH_SALT : 'auth_salt_not_defined';
+		$auth_key  = defined( 'AUTH_KEY' ) && is_string( AUTH_KEY ) ? AUTH_KEY : 'auth_key_not_defined';
+		$auth_salt = defined( 'AUTH_SALT' ) && is_string( AUTH_SALT ) ? AUTH_SALT : 'auth_salt_not_defined';
 
 		return substr(
 			hash_hmac( 'sha256', self::MAC_CONTEXT, $auth_key . $auth_salt, true ),
diff --git a/includes/class-robotstxt-manager-updater.php b/includes/class-robotstxt-manager-updater.php
index 3c71f00..7392193 100644
--- a/includes/class-robotstxt-manager-updater.php
+++ b/includes/class-robotstxt-manager-updater.php
@@ -16,11 +16,19 @@ if ( ! defined( 'ABSPATH' ) ) {
  * show the standard "Update available" badge and update through the regular
  * wp-admin flow, with the store's download proxy as the package source.
  *
- * - `pre_set_site_transient_update_plugins`: adds entries to ->response for
- *   installed catalog plugins with a newer remote version, and to ->no_update
- *   for up-to-date ones (prevents false WordPress.org matches).
+ * - `site_transient_update_plugins`: injects entries into ->response for
+ *   installed catalog plugins with a newer remote version, and into ->no_update
+ *   for up-to-date ones (prevents false WordPress.org matches). The injection
+ *   runs on the READ side of the transient, so it works even when a full
+ *   wp_update_plugins() cycle never completes — for example on hosts where
+ *   api.wordpress.org is unreachable, where WordPress bails before building
+ *   the transient and write-side injection would never fire.
  * - `plugins_api`: serves the "View details" modal from catalog data.
  *
+ * Local install state is resolved directly from get_plugins() (object-cached
+ * per request) instead of the transient's ->checked list, which is only
+ * populated by a completed WordPress.org check.
+ *
  * Plugins that bundle their own update SDK already inject their own entries;
  * Manager never overwrites an existing response entry.
  */
@@ -34,26 +42,23 @@ class Robotstxt_Manager_Updater {
 	 * @return void
 	 */
 	public function register( Robotstxt_Manager_Loader $loader ): void {
-		$loader->add_filter( 'pre_set_site_transient_update_plugins', $this, 'inject_updates' );
+		$loader->add_filter( 'site_transient_update_plugins', $this, 'inject_updates' );
 		$loader->add_filter( 'plugins_api', $this, 'plugins_api_filter', 10, 3 );
 	}
 
 	/**
 	 * Injects catalog update data into the WordPress update transient.
 	 *
-	 * @param mixed $transient The update_plugins transient object.
+	 * Read-side filter for get_site_transient( 'update_plugins' ): every
+	 * consumer (Plugins screen, Updates page, WP-CLI, auto-updates) passes
+	 * through here, so catalog updates surface regardless of whether a full
+	 * WordPress.org update-check cycle has completed.
 	 *
-	 * @return mixed Modified transient.
+	 * @param mixed $transient The stored update_plugins transient (object or false).
+	 *
+	 * @return mixed Transient object with catalog entries injected.
 	 */
 	public function inject_updates( mixed $transient ): mixed {
-		if ( ! is_object( $transient )
-			|| ! property_exists( $transient, 'checked' )
-			|| ! is_array( $transient->checked )
-			|| empty( $transient->checked )
-		) {
-			return $transient;
-		}
-
 		$client = Robotstxt_Manager_Core_Client::from_options();
 
 		if ( ! $client->is_configured() ) {
@@ -66,48 +71,112 @@ class Robotstxt_Manager_Updater {
 			return $transient;
 		}
 
+		$local = $this->local_plugin_versions();
+
+		if ( array() === $local ) {
+			return $transient;
+		}
+
 		$entries = $this->catalog_by_slug( $catalog );
 
-		foreach ( $transient->checked as $plugin_file => $raw_version ) {
-			$version = is_string( $raw_version ) ? $raw_version : '';
-			$slug    = $this->slug_from_file( (string) $plugin_file );
-			$entry   = $entries[ $slug ] ?? null;
+		$updates = ( $transient instanceof stdClass ) ? $transient : new stdClass();
 
-			if ( null === $entry || '' === $version ) {
+		if ( ! property_exists( $updates, 'response' ) || ! is_array( $updates->response ) ) {
+			$updates->response = array();
+		}
+
+		if ( ! property_exists( $updates, 'no_update' ) || ! is_array( $updates->no_update ) ) {
+			$updates->no_update = array();
+		}
+
+		foreach ( $local as $plugin_file => $version ) {
+			$slug  = $this->slug_from_file( $plugin_file );
+			$entry = $entries[ $slug ] ?? null;
+
+			if ( null === $entry || '' === $version || '' === $entry['new_version'] ) {
 				continue;
 			}
 
-			$new_version = $entry['new_version'];
+			// Never overwrite an entry injected by the plugin's own SDK or
+			// by WordPress.org. Entries Manager itself produced earlier are
+			// the exception: WordPress persists the filtered read during
+			// wp_update_plugins(), so on hosts where api.wordpress.org is
+			// unreachable a stale Manager entry would otherwise occupy the
+			// slot forever and mask newer catalog versions.
+			$occupied = $updates->response[ $plugin_file ] ?? null;
 
-			if ( '' === $new_version ) {
+			if ( null !== $occupied && ! $this->is_own_entry( $occupied, $client ) ) {
 				continue;
 			}
 
-			// Never overwrite an entry injected by the plugin's own SDK.
-			if ( property_exists( $transient, 'response' )
-				&& is_array( $transient->response )
-				&& isset( $transient->response[ $plugin_file ] )
-			) {
-				continue;
-			}
-
-			if ( version_compare( $version, $new_version, '<' ) ) {
+			if ( version_compare( $version, $entry['new_version'], '<' ) ) {
 				// Premium updates need the account key in the package URL;
 				// without a usable key the native updater would only hit a
-				// 403, so skip injecting the entry.
+				// 403, so drop any stale own entry and skip.
 				if ( 'premium' === $entry['type'] && ! $this->has_api_key() ) {
+					unset( $updates->response[ $plugin_file ] );
 					continue;
 				}
 
-				if ( property_exists( $transient, 'response' ) && is_array( $transient->response ) ) {
-					$transient->response[ $plugin_file ] = $this->build_update_object( $slug, (string) $plugin_file, $entry );
+				$updates->response[ $plugin_file ] = $this->build_update_object( $slug, $plugin_file, $entry );
+				unset( $updates->no_update[ $plugin_file ] );
+			} else {
+				// Up to date: a stale own response entry must go, or the
+				// Plugins screen would keep offering a phantom update.
+				unset( $updates->response[ $plugin_file ] );
+
+				if ( ! isset( $updates->no_update[ $plugin_file ] ) ) {
+					$updates->no_update[ $plugin_file ] = $this->build_update_object( $slug, $plugin_file, $entry, $version );
 				}
-			} elseif ( property_exists( $transient, 'no_update' ) && is_array( $transient->no_update ) ) {
-				$transient->no_update[ $plugin_file ] = $this->build_update_object( $slug, (string) $plugin_file, $entry, $version );
 			}
 		}
 
-		return $transient;
+		return $updates;
+	}
+
+	/**
+	 * Returns whether a response entry was produced by Manager itself (or by
+	 * a bundled SDK pulling from the same store), by comparing the package
+	 * URL host against the configured store host.
+	 *
+	 * @param mixed                         $entry  Existing response entry.
+	 * @param Robotstxt_Manager_Core_Client $client Configured core client.
+	 *
+	 * @return bool True when the entry's package comes from this store.
+	 */
+	private function is_own_entry( mixed $entry, Robotstxt_Manager_Core_Client $client ): bool {
+		if ( ! is_object( $entry ) || ! isset( $entry->package ) || ! is_string( $entry->package ) ) {
+			return false;
+		}
+
+		$store_host = strtolower( (string) wp_parse_url( $client->get_store_url(), PHP_URL_HOST ) );
+		$entry_host = strtolower( (string) wp_parse_url( $entry->package, PHP_URL_HOST ) );
+
+		return '' !== $store_host && $store_host === $entry_host;
+	}
+
+	/**
+	 * Returns the installed plugin versions, from the object-cached plugin list.
+	 *
+	 * @return array<string, string> Map of plugin file ("slug/file.php") to version.
+	 */
+	private function local_plugin_versions(): array {
+		if ( ! function_exists( 'get_plugins' ) ) {
+			require_once ABSPATH . 'wp-admin/includes/plugin.php';
+		}
+
+		$versions = array();
+
+		foreach ( get_plugins() as $file => $data ) {
+			if ( ! is_string( $file ) ) {
+				continue;
+			}
+
+			$version           = isset( $data['Version'] ) && is_string( $data['Version'] ) ? $data['Version'] : '';
+			$versions[ $file ] = $version;
+		}
+
+		return $versions;
 	}
 
 	/**
@@ -136,7 +205,7 @@ class Robotstxt_Manager_Updater {
 			return $result;
 		}
 
-		$slug    = sanitize_key( (string) $args->slug );
+		$slug    = is_string( $args->slug ) ? sanitize_key( $args->slug ) : '';
 		$entries = $this->catalog_by_slug( $catalog );
 		$entry   = $entries[ $slug ] ?? null;
 
diff --git a/readme.txt b/readme.txt
index 1a52e3a..edf63d6 100644
--- a/readme.txt
+++ b/readme.txt
@@ -3,9 +3,9 @@ Contributors: robotstxt, javiercasares
 Tags: dashboard, catalog, updates, subscriptions, management
 Requires at least: 4.4
 Tested up to: 7.1
-Stable tag: 1.8.0
+Stable tag: 1.8.1
 Requires PHP: 8.0
-Version: 1.8.0
+Version: 1.8.1
 License: GPL-3.0-or-later
 License URI: https://www.gnu.org/licenses/gpl-3.0.txt
 
@@ -94,6 +94,15 @@ Encrypted at rest using AES-256-CBC with a key derived from your site's WordPres
 
 Only the 3 last versions. The full changelog will be at changelog.txt
 
+= 1.8.1 =
+
+_Release date: 2026-09-22_
+
+* Fixed: pending updates were invisible on sites where the WordPress.org update check never completes (api.wordpress.org blocked/unreachable — common on many hosts). Update data is now injected whenever WordPress reads it, so pending ROBOTSTXT updates show up on the Plugins screen, the Updates page, and WP-CLI regardless of WordPress.org connectivity.
+* Fixed: opt-in uninstall now also deletes the cached subscriptions transient, so no subscription data outlives the plugin when data deletion is enabled.
+* Fixed: a hardcoded "Subscribed" label in the multi-license catalog pill is now translatable.
+* Maintenance: development tooling updated (PHPStan max, WordPress stubs 7.1.0); compatibility floors re-verified (WordPress 4.4, PHP 8.0).
+
 = 1.8.0 =
 
 _Release date: 2026-08-24_
@@ -107,12 +116,6 @@ _Release date: 2026-08-18_
 * New: per-domain license support (Core 1.11.0+) — downloads and download-token exchanges now send this site's domain, so premium licenses bind to this site and the store rejects them from other domains. Catalog subscription pills show the bound domain (e.g. "Subscribed @ example.com").
 * Improvement: download failures now surface the store's own error message (e.g. the domain-mismatch explanation) instead of a bare HTTP status code.
 
-= 1.6.2 =
-
-_Release date: 2026-08-18_
-
-* Added: `ROBOTSTXT_MANAGER_NOTICED` presence constant (guarded, `true`) — ecosystem plugins detect Manager via a constant check instead of scanning the plugin list.
-
 = Previous versions =
 
 If you want to see the full changelog, visit the [plugin page](https://www.robotstxt.software/plugins/robotstxt-manager/).
diff --git a/robotstxt-manager.php b/robotstxt-manager.php
index ab4af19..2cf7de2 100644
--- a/robotstxt-manager.php
+++ b/robotstxt-manager.php
@@ -3,7 +3,7 @@
  * Plugin Name:       Manager (by ROBOTSTXT)
  * Plugin URI:        https://www.robotstxt.software/plugins/robotstxt-manager/
  * Description:       Client-side dashboard for the ROBOTSTXT plugin ecosystem. Lists the catalog from a remote Plugins Core install, resolves local install/update state, and installs, activates, and updates plugins directly from the store.
- * Version:           1.8.0
+ * Version:           1.8.1
  * Requires at least: 4.4
  * Requires PHP:      8.0
  * Update URI:        https://www.robotstxt.software/plugins/robotstxt-manager/
@@ -23,7 +23,7 @@ if ( ! defined( 'ABSPATH' ) ) {
 }
 
 /** Plugin version. */
-define( 'ROBOTSTXT_MANAGER_VERSION', '1.8.0' );
+define( 'ROBOTSTXT_MANAGER_VERSION', '1.8.1' );
 
 /** Absolute path to the plugin directory, with trailing slash. */
 define( 'ROBOTSTXT_MANAGER_DIR', plugin_dir_path( __FILE__ ) );
diff --git a/uninstall.php b/uninstall.php
index 486b212..a7734a8 100644
--- a/uninstall.php
+++ b/uninstall.php
@@ -25,6 +25,7 @@ foreach ( $option_keys as $key ) {
 }
 
 delete_site_transient( 'robotstxt_manager_catalog' );
+delete_site_transient( 'robotstxt_manager_subscriptions' );
 
 // Purge the WordPress update transient: premium entries carry the API key
 // in their package URL. WordPress rebuilds it on the next update check.

From bb3beaa353734dcf2a1f141ed1b4ff68edea4d6e Mon Sep 17 00:00:00 2001
From: Javier Casares <javier@robotstxt.es>
Date: Wed, 23 Sep 2026 06:11:14 +0000
Subject: [PATCH 23/23] v1.9.1

---
 admin/class-robotstxt-manager-admin.php      |  96 ++++++++
 admin/class-robotstxt-manager-installer.php  |  45 +++-
 admin/views/page-catalog.php                 |  40 +++-
 changelog.txt                                |  43 ++++
 includes/class-robotstxt-manager-updater.php | 118 ++++++++--
 languages/robotstxt-manager-ca.mo            | Bin 13148 -> 13711 bytes
 languages/robotstxt-manager-ca.po            |   7 +
 languages/robotstxt-manager-es_ES.mo         | Bin 13060 -> 13618 bytes
 languages/robotstxt-manager-es_ES.po         |   7 +
 languages/robotstxt-manager.pot              | 222 +++++++++++--------
 readme.txt                                   |  30 +--
 robotstxt-manager.php                        |   4 +-
 12 files changed, 465 insertions(+), 147 deletions(-)

diff --git a/admin/class-robotstxt-manager-admin.php b/admin/class-robotstxt-manager-admin.php
index 20b8b41..ef4ef1a 100644
--- a/admin/class-robotstxt-manager-admin.php
+++ b/admin/class-robotstxt-manager-admin.php
@@ -36,6 +36,8 @@ class Robotstxt_Manager_Admin {
 		$menu_hook = is_multisite() ? 'network_admin_menu' : 'admin_menu';
 		$loader->add_action( $menu_hook, $this, 'add_menu' );
 		$loader->add_action( 'admin_post_robotstxt_manager_refresh_catalog', $this, 'handle_refresh' );
+		$loader->add_action( 'admin_notices', $this, 'security_update_notices' );
+		$loader->add_action( 'network_admin_notices', $this, 'security_update_notices' );
 	}
 
 	/**
@@ -77,9 +79,103 @@ class Robotstxt_Manager_Admin {
 		$manager_has_api_key   = $client->has_api_key();
 		$manager_store_url     = $client->get_store_url();
 
+		// Security patches declared for exactly the versions this site runs.
+		$manager_security_updates = $this->get_security_updates( $catalog, $local );
+
 		require ROBOTSTXT_MANAGER_DIR . 'admin/views/page-catalog.php';
 	}
 
+	/**
+	 * Returns the security patches that apply to the exact versions this
+	 * site runs (Core 1.16.0+ `security_patches` catalog data).
+	 *
+	 * @param list<array<string,mixed>>                                         $catalog Catalog entries.
+	 * @param array<string, array{installed:bool, active:bool, version:string}> $local Local state by slug.
+	 *
+	 * @return list<array{slug:string, name:string, installed:string, patch:string}>
+	 */
+	public function get_security_updates( array $catalog, array $local ): array {
+		$updates = array();
+
+		foreach ( $catalog as $entry ) {
+			$raw_slug = $entry['slug'] ?? '';
+			$slug     = is_string( $raw_slug ) ? $raw_slug : '';
+
+			if ( '' === $slug ) {
+				continue;
+			}
+
+			$state = $local[ $slug ] ?? null;
+
+			if ( ! is_array( $state ) || empty( $state['installed'] ) ) {
+				continue;
+			}
+
+			$raw_version = $state['version'] ?? '';
+			$version     = is_string( $raw_version ) ? $raw_version : '';
+			$patch       = Robotstxt_Manager_Updater::security_patch_for( $entry, $version );
+
+			if ( '' === $patch ) {
+				continue;
+			}
+
+			$raw_name   = $entry['name'] ?? '';
+			$clean_name = is_string( $raw_name ) && '' !== $raw_name ? $raw_name : $slug;
+
+			$updates[] = array(
+				'slug'      => $slug,
+				'name'      => $clean_name,
+				'installed' => $version,
+				'patch'     => $patch,
+			);
+		}
+
+		return $updates;
+	}
+
+	/**
+	 * Renders the security-update notices on the Plugins screen (not on the
+	 * Manager catalog page, which shows its own block).
+	 *
+	 * @return void
+	 */
+	public function security_update_notices(): void {
+		if ( ! current_user_can( is_multisite() ? 'manage_network_options' : 'manage_options' ) ) {
+			return;
+		}
+
+		$screen = function_exists( 'get_current_screen' ) ? get_current_screen() : null;
+		$base   = ( $screen instanceof WP_Screen ) ? (string) $screen->base : '';
+
+		if ( ! in_array( $base, array( 'plugins', 'plugins-network' ), true ) ) {
+			return;
+		}
+
+		$client = Robotstxt_Manager_Core_Client::from_options();
+
+		if ( ! $client->is_configured() ) {
+			return;
+		}
+
+		$catalog  = $client->get_catalog();
+		$security = $this->get_security_updates( $catalog, $this->resolve_local_state( $catalog ) );
+
+		foreach ( $security as $update ) {
+			echo '<div class="notice notice-error"><p>';
+			echo wp_kses_post(
+				sprintf(
+					/* translators: 1: plugin name, 2: installed version, 3: patch version, 4: update URL. */
+					__( '<strong>Security update available:</strong> %1$s (v%2$s → v%3$s). <a href="%4$s">Update now</a> — this is a security patch for the version this site runs, not a feature update.', 'robotstxt-manager' ),
+					esc_html( $update['name'] ),
+					esc_html( $update['installed'] ),
+					esc_html( $update['patch'] ),
+					esc_url( self::action_url( 'update', $update['slug'] ) )
+				)
+			);
+			echo '</p></div>';
+		}
+	}
+
 
 	/**
 	 * Builds admin notices for subscriptions that need attention.
diff --git a/admin/class-robotstxt-manager-installer.php b/admin/class-robotstxt-manager-installer.php
index fe3bfb2..b0fd1ba 100644
--- a/admin/class-robotstxt-manager-installer.php
+++ b/admin/class-robotstxt-manager-installer.php
@@ -379,7 +379,9 @@ class Robotstxt_Manager_Installer {
 	}
 
 	/**
-	 * Updates an installed plugin to the latest catalog version.
+	 * Updates an installed plugin to the latest catalog version — or, when a
+	 * security patch is declared for the exact installed version (Core
+	 * 1.16.0+), to that patch instead of the feature mainline.
 	 *
 	 * @return void
 	 */
@@ -394,7 +396,17 @@ class Robotstxt_Manager_Installer {
 			$this->redirect_error( __( 'Plugin is not installed.', 'robotstxt-manager' ) );
 		}
 
-		$result = $this->download_and_install( $slug, true );
+		$patch = '';
+
+		$entry = $this->find_catalog_entry( $slug );
+
+		if ( is_array( $entry ) ) {
+			$all     = get_plugins();
+			$version = isset( $all[ $file ]['Version'] ) && is_string( $all[ $file ]['Version'] ) ? $all[ $file ]['Version'] : '';
+			$patch   = Robotstxt_Manager_Updater::security_patch_for( $entry, $version );
+		}
+
+		$result = $this->download_and_install( $slug, true, $patch );
 
 		if ( is_wp_error( $result ) ) {
 			$this->redirect_error( $result->get_error_message() );
@@ -502,10 +514,12 @@ class Robotstxt_Manager_Installer {
 	 *
 	 * @param string $slug    Plugin slug.
 	 * @param bool   $overwrite Whether to overwrite an existing install (update).
+	 * @param string $security_version Patch version to download instead of the
+	 *                                  stable mainline (Core 1.16.0+), '' for stable.
 	 *
 	 * @return true|WP_Error True on success.
 	 */
-	private function download_and_install( string $slug, bool $overwrite = false ) {
+	private function download_and_install( string $slug, bool $overwrite = false, string $security_version = '' ) {
 		$client = Robotstxt_Manager_Core_Client::from_options();
 
 		if ( ! $client->is_configured() ) {
@@ -529,15 +543,26 @@ class Robotstxt_Manager_Installer {
 		// fetched directly (no auth). Everything else goes through Core's
 		// authenticated download endpoint (account API key as Bearer), with
 		// this site's domain for per-domain license binding (Core 1.11.0+).
-		$use_download_endpoint = ! ( $is_free && '' !== $dl_url );
+		// Security patches always stream through the endpoint with a version
+		// parameter — the public URL only carries the mainline stable ZIP.
+		$use_download_endpoint = '' !== $security_version || ! ( $is_free && '' !== $dl_url );
 
-		$zip_url = $use_download_endpoint
-			? add_query_arg(
-				'domain',
-				rawurlencode( $this->site_domain() ),
+		if ( $use_download_endpoint ) {
+			$dl_args = array(
+				'domain' => rawurlencode( $this->site_domain() ),
+			);
+
+			if ( '' !== $security_version ) {
+				$dl_args['version'] = rawurlencode( $security_version );
+			}
+
+			$zip_url = add_query_arg(
+				$dl_args,
 				$client->get_store_url() . '/wp-json/robotstxt-core/v1/plugins/' . rawurlencode( $slug ) . '/download'
-			)
-			: $dl_url;
+			);
+		} else {
+			$zip_url = $dl_url;
+		}
 
 		$tmp_file = wp_tempnam( $slug . '.zip' );
 
diff --git a/admin/views/page-catalog.php b/admin/views/page-catalog.php
index 38dd0f4..68ae63a 100644
--- a/admin/views/page-catalog.php
+++ b/admin/views/page-catalog.php
@@ -25,6 +25,7 @@ if ( ! defined( 'ABSPATH' ) ) {
  * @var array<string, array{installed:bool, active:bool, version:string}> $local
  * @var array<string, array<string,mixed>> $manager_subscriptions
  * @var list<array{type:string, message:string}> $manager_notices
+ * @var list<array{slug:string, name:string, installed:string, patch:string}> $manager_security_updates
  * @var bool   $manager_has_api_key
  * @var string $manager_store_url
  */
@@ -79,6 +80,25 @@ $compat_warnings   = 0;
 		</div>
 	<?php endforeach; ?>
 
+	<?php foreach ( ( $manager_security_updates ?? array() ) as $manager_security ) : ?>
+		<div class="notice notice-error">
+			<p>
+				<?php
+				echo wp_kses_post(
+					sprintf(
+						/* translators: 1: plugin name, 2: installed version, 3: patch version, 4: update URL. */
+						__( '<strong>Security update available:</strong> %1$s (v%2$s → v%3$s). <a href="%4$s">Update now</a> — this is a security patch for the version this site runs, not a feature update.', 'robotstxt-manager' ),
+						esc_html( $manager_security['name'] ),
+						esc_html( $manager_security['installed'] ),
+						esc_html( $manager_security['patch'] ),
+						esc_url( Robotstxt_Manager_Admin::action_url( 'update', $manager_security['slug'] ) )
+					)
+				);
+				?>
+			</p>
+		</div>
+	<?php endforeach; ?>
+
 	<?php if ( empty( $manager_has_api_key ) && '' !== ( $manager_store_url ?? '' ) ) : ?>
 		<div class="notice notice-info">
 			<p>
@@ -217,7 +237,15 @@ $compat_warnings   = 0;
 					$l_version   = is_string( $raw_lv ) ? $raw_lv : '';
 
 					$update_available = $l_installed && '' !== $remote_v && '' !== $l_version
-						&& version_compare( $l_version, $remote_v, '<' );
+					&& version_compare( $l_version, $remote_v, '<' );
+
+					// Security patch declared for exactly the installed version:
+					// the Update action installs the patch, not the mainline.
+					$security_patch = Robotstxt_Manager_Updater::security_patch_for( $entry, $l_version );
+
+					if ( '' !== $security_patch ) {
+						$update_available = true;
+					}
 
 					$row_class = ( ! $wp_ok || ! $php_ok ) ? ' robotstxt-manager-row--incompatible' : '';
 					?>
@@ -346,6 +374,15 @@ $compat_warnings   = 0;
 								echo '<span class="robotstxt-manager-state robotstxt-manager-state--not-installed">' . esc_html__( 'Not installed', 'robotstxt-manager' ) . '</span>';
 							} elseif ( ! $l_active ) {
 								echo '<span class="robotstxt-manager-state robotstxt-manager-state--inactive">' . esc_html__( 'Installed (inactive)', 'robotstxt-manager' ) . '</span>';
+							} elseif ( '' !== $security_patch ) {
+								echo '<span class="robotstxt-manager-state robotstxt-manager-state--security">' . esc_html(
+									sprintf(
+									/* translators: 1: installed version, 2: security patch version. */
+										__( 'Security update available (v%1$s → v%2$s)', 'robotstxt-manager' ),
+										$l_version,
+										$security_patch
+									)
+								) . '</span>';
 							} elseif ( $update_available ) {
 								echo '<span class="robotstxt-manager-state robotstxt-manager-state--update">' . esc_html(
 									sprintf(
@@ -433,6 +470,7 @@ $compat_warnings   = 0;
 .robotstxt-manager-compat--fail { color: #d63638; font-weight: 600; }
 .robotstxt-manager-compat-warning { cursor: help; }
 .robotstxt-manager-row--incompatible { background-color: #fef7f0 !important; }
+.robotstxt-manager-state--security { color: #d63638; font-weight: 600; }
 
 /* Detail rows (always open): muted, attached to the row above. */
 .robotstxt-manager-detail-row td { border-top: none !important; padding-top: 0; }
diff --git a/changelog.txt b/changelog.txt
index d546207..63a109e 100644
--- a/changelog.txt
+++ b/changelog.txt
@@ -1,5 +1,48 @@
 == Changelog ==
 
+= 1.9.1 =
+
+_Release date: 2026-09-23_
+
+**Changed**
+
+* Maintenance pass over the 1.9.0 security-patch feature: `composer update` (no changes — dependencies already current, no known CVEs), full code + security review of the 1.9.0 diff (clean-context pre-deploy audit: escaping, capability gating, CSRF, and the 1.8.1 updater invariants all verified correct; its two suggestions were applied — see below), and floors re-verified.
+* Pre-deploy audit hardening: `security_patch_for()` only accepts declarations that strictly increase the version — a store typo (self-mapping or downgrade) can no longer produce a downgrade/re-install "update" notice; the `version` argument in premium/free package URLs is now `rawurlencode`d, matching the installer. POT regenerated at 1.9.1.
+
+**Compatibility**
+
+* WordPress: 4.4 - 7.1 (scan-verified 2026-09-23: wp-compat ladder clean at 4.4 through 4.7; no WordPress API newer than 4.4 in use; the dev environment here runs WordPress 7.2-alpha trunk with the suite green, but 7.2 is not GA and `Tested up to` stays at the AGENTS window top)
+* PHP: 8.0 - 8.5 (scan-verified 2026-09-23: PHPCompatibility ladder 5.6-8.5 — scan-clean from 7.4; manual audit keeps the real floor at 8.0: `mixed` hints, `str_contains()`, `str_starts_with()`)
+
+**Tests**
+
+* PHPCS (WordPress-Core, WordPress-Docs, WordPress-Extra): pass
+* PHPStan max (level 10) + wp-compat: pass
+* PHPUnit: 158 tests, 423 assertions (also green against WordPress 7.2-alpha trunk / test library rebuilt from wordpress-develop master)
+
+= 1.9.0 =
+
+_Release date: 2026-09-22_
+
+**Added**
+
+* Security-update notices (with Core 1.16.0+): when the store declares a security patch for the exact version this site runs (e.g. 1.2.3.1 applies to 1.2.3), Manager shows a red "Security update available: %name% (vX → vY) — Update now" notice on its catalog page **and** on the Plugins screen, and the catalog row status reads "Security update available (vX → vY)". The Update action installs the declared patch — never the feature mainline — so sites receive the security fix without being pushed across feature versions.
+* The native update integration (update badge, `wp plugin update`, auto-updates) also targets the declared patch: the injected update entry carries the patch version and a versioned, authenticated package URL. Patches declared for other versions never apply (exact match on the installed version). Chained patches work (1.2.3.1 → 1.2.3.2 once declared).
+* Spanish (es_ES) and Catalan (ca) translations for the new strings; POT regenerated.
+
+**Requires Core 1.16.0+ on the store** for patch data and versioned downloads (older Core: the catalog simply carries no patches and Manager behaves as before).
+
+**Tests**
+
+* PHPCS (WordPress-Core, WordPress-Docs, WordPress-Extra): pass
+* PHPStan max (level 10) + wp-compat: pass
+* PHPUnit: 157 tests, 420 assertions
+
+**Compatibility**
+
+* WordPress: 4.4 - 7.1 (unchanged)
+* PHP: 8.0 - 8.5 (unchanged)
+
 = 1.8.1 =
 
 _Release date: 2026-09-22_
diff --git a/includes/class-robotstxt-manager-updater.php b/includes/class-robotstxt-manager-updater.php
index 7392193..1a24e7e 100644
--- a/includes/class-robotstxt-manager-updater.php
+++ b/includes/class-robotstxt-manager-updater.php
@@ -109,6 +109,21 @@ class Robotstxt_Manager_Updater {
 				continue;
 			}
 
+			// Security patch declared for exactly this installed version
+			// (Core 1.16.0+): offer the patch, never the feature mainline.
+			$patch = self::security_patch_for( $entry, $version );
+
+			if ( '' !== $patch ) {
+				if ( 'premium' === $entry['type'] && ! $this->has_api_key() ) {
+					unset( $updates->response[ $plugin_file ] );
+					continue;
+				}
+
+				$updates->response[ $plugin_file ] = $this->build_update_object( $slug, $plugin_file, $entry, null, $patch );
+				unset( $updates->no_update[ $plugin_file ] );
+				continue;
+			}
+
 			if ( version_compare( $version, $entry['new_version'], '<' ) ) {
 				// Premium updates need the account key in the package URL;
 				// without a usable key the native updater would only hit a
@@ -155,6 +170,56 @@ class Robotstxt_Manager_Updater {
 		return '' !== $store_host && $store_host === $entry_host;
 	}
 
+	/**
+	 * Returns the security-patch version declared for exactly the given
+	 * installed version, or '' when none applies.
+	 *
+	 * Exact-match by design: a patch declared for 1.2.3 applies only to
+	 * sites running 1.2.3 — other versions follow the normal mainline flow.
+	 * A declaration that does not strictly increase the version (typo,
+	 * downgrade, re-install loop) never counts as a patch.
+	 *
+	 * @param array<string, mixed> $entry            Catalog row (raw or normalised).
+	 * @param string               $installed_version Version installed on this site.
+	 *
+	 * @return string Patch version, or ''.
+	 */
+	public static function security_patch_for( array $entry, string $installed_version ): string {
+		if ( '' === $installed_version ) {
+			return '';
+		}
+
+		$patches = self::normalize_patches( $entry );
+		$patch   = $patches[ $installed_version ] ?? '';
+
+		if ( '' === $patch || ! version_compare( $installed_version, $patch, '<' ) ) {
+			return '';
+		}
+
+		return $patch;
+	}
+
+	/**
+	 * Normalises a catalog row's security_patches field into a string map.
+	 *
+	 * @param array<string, mixed> $row Catalog row.
+	 *
+	 * @return array<string, string> Installed version => patch version.
+	 */
+	private static function normalize_patches( array $row ): array {
+		$raw   = $row['security_patches'] ?? array();
+		$raw   = is_array( $raw ) ? $raw : array();
+		$clean = array();
+
+		foreach ( $raw as $applies_to => $patch ) {
+			if ( is_string( $applies_to ) && is_string( $patch ) ) {
+				$clean[ $applies_to ] = $patch;
+			}
+		}
+
+		return $clean;
+	}
+
 	/**
 	 * Returns the installed plugin versions, from the object-cached plugin list.
 	 *
@@ -258,7 +323,7 @@ class Robotstxt_Manager_Updater {
 	 *
 	 * @param list<array<string,mixed>> $catalog Catalog entries from Core.
 	 *
-	 * @return array<string, array<string,string>> Normalised entries keyed by slug.
+	 * @return array<string, array{name:string, type:string, new_version:string, security_patches:array<string,string>, requires_wp:string, requires_php:string, tested_up_to:string, page_url:string, description:string, icon_url:string, banner_url:string}> Normalised entries keyed by slug.
 	 */
 	private function catalog_by_slug( array $catalog ): array {
 		$entries = array();
@@ -272,16 +337,17 @@ class Robotstxt_Manager_Updater {
 			}
 
 			$entries[ $slug ] = array(
-				'name'         => $this->str( $row, 'name', $slug ),
-				'type'         => $this->str( $row, 'type', 'free' ),
-				'new_version'  => $this->str( $row, 'current_version', '' ),
-				'requires_wp'  => $this->str( $row, 'requires_wp', '' ),
-				'requires_php' => $this->str( $row, 'requires_php', '' ),
-				'tested_up_to' => $this->str( $row, 'tested_up_to', '' ),
-				'page_url'     => $this->str( $row, 'page_url', '' ),
-				'description'  => $this->localized_description( $row ),
-				'icon_url'     => $this->str( $row, 'icon_url', '' ),
-				'banner_url'   => $this->str( $row, 'banner_url', '' ),
+				'name'             => $this->str( $row, 'name', $slug ),
+				'type'             => $this->str( $row, 'type', 'free' ),
+				'new_version'      => $this->str( $row, 'current_version', '' ),
+				'security_patches' => self::normalize_patches( $row ),
+				'requires_wp'      => $this->str( $row, 'requires_wp', '' ),
+				'requires_php'     => $this->str( $row, 'requires_php', '' ),
+				'tested_up_to'     => $this->str( $row, 'tested_up_to', '' ),
+				'page_url'         => $this->str( $row, 'page_url', '' ),
+				'description'      => $this->localized_description( $row ),
+				'icon_url'         => $this->str( $row, 'icon_url', '' ),
+				'banner_url'       => $this->str( $row, 'banner_url', '' ),
 			);
 		}
 
@@ -291,25 +357,29 @@ class Robotstxt_Manager_Updater {
 	/**
 	 * Builds the update/no-update object for the WordPress transient.
 	 *
-	 * @param string                $slug            Plugin slug.
-	 * @param string                $plugin_file     Plugin basename.
-	 * @param array<string, string> $entry           Normalised catalog entry.
-	 * @param string|null           $current_version Installed version; when null an
-	 *                                               update entry is built, otherwise a
-	 *                                               no-update entry pinned to this version.
+	 * @param string                                                                                                                                                                                                                            $slug            Plugin slug.
+	 * @param string                                                                                                                                                                                                                            $plugin_file     Plugin basename.
+	 * @param array{name:string, type:string, new_version:string, security_patches:array<string,string>, requires_wp:string, requires_php:string, tested_up_to:string, page_url:string, description:string, icon_url:string, banner_url:string} $entry Normalised catalog entry.
+	 * @param string|null                                                                                                                                                                                                                       $current_version Installed version; when null an
+	 *                                                                                                                                                                                                                                                           update entry is built, otherwise a
+	 *                                                                                                                                                                                                                                                           no-update entry pinned to this version.
+	 * @param string                                                                                                                                                                                                                            $security_version Patch version when the update is
+	 *                                                                                                                                                                                                                                                            a security patch ('' otherwise).
 	 *
 	 * @return object stdClass for the transient bucket.
 	 */
-	private function build_update_object( string $slug, string $plugin_file, array $entry, ?string $current_version = null ): object {
+	private function build_update_object( string $slug, string $plugin_file, array $entry, ?string $current_version = null, string $security_version = '' ): object {
 		$is_no_update = null !== $current_version;
 
 		$data = array(
 			'id'           => $plugin_file,
 			'slug'         => $slug,
 			'plugin'       => $plugin_file,
-			'new_version'  => $is_no_update ? $current_version : $entry['new_version'],
+			'new_version'  => $is_no_update
+				? $current_version
+				: ( '' !== $security_version ? $security_version : $entry['new_version'] ),
 			'url'          => $entry['page_url'],
-			'package'      => $is_no_update ? '' : $this->package_url( $slug, $entry['type'] ),
+			'package'      => $is_no_update ? '' : $this->package_url( $slug, $entry['type'], $security_version ),
 			'requires'     => $entry['requires_wp'],
 			'requires_php' => $entry['requires_php'],
 			'tested'       => $entry['tested_up_to'],
@@ -354,13 +424,15 @@ class Robotstxt_Manager_Updater {
 	 * Free plugins stream through the proxy without auth (Core 1.4.0+).
 	 * Premium plugins append the account API key as an api_key query parameter
 	 * (accepted by Core 1.5.0+) — the native upgrader cannot send headers.
+	 * Security patches add a validated `version` parameter (Core 1.16.0+).
 	 *
 	 * @param string $slug Plugin slug.
 	 * @param string $type Plugin type ('free' or 'premium').
+	 * @param string $security_version Patch version when serving a security patch.
 	 *
 	 * @return string Package URL.
 	 */
-	private function package_url( string $slug, string $type ): string {
+	private function package_url( string $slug, string $type, string $security_version = '' ): string {
 		$client = Robotstxt_Manager_Core_Client::from_options();
 
 		$url  = $client->get_store_url() . '/wp-json/robotstxt-core/v1/plugins/' . rawurlencode( $slug ) . '/download';
@@ -368,6 +440,10 @@ class Robotstxt_Manager_Updater {
 			'domain' => $this->site_domain(),
 		);
 
+		if ( '' !== $security_version ) {
+			$args['version'] = rawurlencode( $security_version );
+		}
+
 		if ( 'premium' === $type ) {
 			// Preferred: a short-lived download token (Core 1.9.0+) — keeps the
 			// long-lived API key out of the update transient and access logs.
diff --git a/languages/robotstxt-manager-ca.mo b/languages/robotstxt-manager-ca.mo
index cdc25e04ce56363118a820783e47daaf7f277035..577499a1123f679e33a07f4cd1aa7779a2542d1f 100644
GIT binary patch
delta 2686
zcmbW&TWl0n9LMofTe>Y!id+Ol+M%>iN@*z+fl>;s7cL?y7ZFA1u-$DJmfdA%wu&Jv
zC?FV#NQ+T|_#m_*@?aKuAo?IxNr?KOQKO;~VnQS&iqZJsi{IbQa8VN<Jn4Tw=j_hT
z`JewevppYvVMF@+A$bQ3ElAu!)aM$r2N&n_LQ51Fa{@PE5tbGjQ-hOn0ItUV*nua}
z!7W(Hn`u0X0j%KSi8vW=$CcPGhf9)lG}n^@jbRRx#xb}X*I^HmlPP5OeprOeVTR%e
z9D_q}I(~x-PzjA2<XMBYjAx+|h@gdC_=8eBN#|DH=q@&fuIa%$@f}=`SCAad%E4ad
zK^)3>D{5u?F%J*ot{h`t!&8jMlNGs}?@-rW#$os?D)9g}8Kx4I(kaDy9EHpAHjH5z
z?!<BU24?VMtio;FZ6_W_7H#T=dkdJ0D)ACjWg|Ee6R0iTgQ{c?rd7(f=s0)^S*)pI
zc4gjxTKRl`ybLEXZbfa?^QZ|9pzd=BH9-$*!ameioX6342~~+)malmRjG+FyU^H(m
z#qqchH)9z4um!8Qn<}so*WioTg}-1fCEr2WRFT~*yBRa6`~HqfP_wI&0aOB2sESP;
zP5o8+dAu<jTTy#-2)Va;8}<1)oQ0QBl__VL-!gF>zRS3%#H-XfoXYr1)CvpvvJx4E
z7qA?=v7cqkUObqlqf%CmHD)H(A%A8)FAX`A7`1}4q%S{3ef|Zu;~%IMt))Cltlif|
zJ~G>pT{TBA!2M365;{}vZCUygI-2+^oPvWZjH$+EEanR_WEafV@!qL_2~~+VaUcGO
zs#t1*F)Z3Vhr0e4YGLpDp2MHG-{*LN_uu1LB;m9<%*H9B<4ASQDb$TVLuGyyN!kQB
zd7K|J$+rcy!c|BPW(!`y*RdY=v5Ld^A?mSio9u0ggL=xI!F)acuhL;#%n{TN&j*-?
z7g4AB5^AMaQ3*U<;~kz?kQJC-e|!>E$ul?r|3p1zfm*7HMaZH}32MFtSit<IgN|0d
z3G;C;@*82geS2{u<I{K-R<cjeVifPk-;g4imO5h|!HswVKf)=L+~q`0V|<jCd+}>j
zf)-^;_oq`$hpL$w7{DMZfeonAZp8*XirR_`$gwba)4i2cq0Yo2)ctlK^Jag(Iab+6
zZ4p|8ww6L>&l;Ddv;RyU<_(ox2j=E>w?ELTv^Cm}RzhW0TSD-No8=nNl!R8AtHD2-
zwqTC`-dHRq>b3u~=_qTp`5xC_@1Zw=(7w$hRE5Qas-iZOSW2uUh7&7@#|V{qB%!8?
zt|s(9M(t68GifS`1=|0)#4192a;<4!)gC8wHcB<{n@+tRv76f(2HL_ZVi>`eXa9*o
zcB>@E$2>$d6AuzPoSHw|T6him{TVpO?=SRSi^~W-I`<Je={h6)0A|mGo(#2o;+AaB
zJFK?f7fnPX@c_ZuRLjgL$jeDLI&Lx^Yj0W>3Z{|~ce9mBwApURvODca)Ls`2H8j@x
zmsk~b<&IU^SuqtZ?%Hp4R!l2*Ce~Puw$+ggh3Ax2)R#MDO)I=R#Ntmh*4j<h#ckb|
z+Yxar{%p&+Hc!HKgB{lNa6HMUA*(Z#bRzMXccl{{gJde^R9msQ%eTTI+f5}yesVRL
zhQiqc3$7*H_4BB*j5GY@g6oTE4!S8j8gZYpgOR?B)fQsfcE0c0uGJQC67g8%f357s
zeJwj_Ute9{F~>^9tVC<5&F<^{`*ev=lKi8#w?LBFlnPm4)gjp#;Uk8QYel2+pw`N5
tY|H*v_Tf}4NO7F5!zCj#V@rAm&AgGxf2~lPr9JaDi*1{jIa_@o|1X2DaNYm_

delta 2143
zcmX}teQeEF9LMo*xuyD`T2vKtP3K{=x)^#}HrK;i^Dv5;+R!DdtRfRch9<vkMTvAC
ziU`7znPp9G=x!qGhE4pT2$@V`^SJ+*A+k)GWs&XuIlmJpJ-^pEzuunT_xnBPce`W7
zt=iyDeq^uFYUusx#huL>a6}g_w9*W-B*rlZ?_mi(#VjoDW|oODtjBT;@H^~^rTlU@
zPQoIr!}K(>&B!AH+s-PiWxH_z9>fo@4T;72XY&UbMb@+-*au^nkCk`>7b9!hIHHsZ
z9Emeg0n}p@kKtWBk9i99>+WX!SR0pd*p7Ah9}<Jr<%W^3!=B7{p)&glBbdZ3Wb`eb
zWFF5mBNlst`rI?@h3Q1Az>84x(Kt}0s$kF;mtz5biZ9}R9E?9;3h&~}*i00g@eGoL
zO=UGDP=zXS4Qlu5u@D<jTYCsq$u?9af5c!7g9{7@-X``ABcFxJyxPxeQCqYI-NL8^
z8c+*2p&rzND*ZX^hgVP)cz{~}FaP^aWLd>Lr-1rTXRwSLwb+7_F^@Va^ZB?0Kfz|a
zj-4s>3ZAA)d`#IAcmVa_Tc`l<p(^+o6+j+kQKkCgKpcwYSW!g%N!}W`p$zu>542*O
z`Bl_jW|7WK9$bj0nEy@Ms!%H@b~K(wW%vXYh`nI82ePmUzd%*6gr}F{cpQYQ0tRI)
zyc-qy<!I<N)CX?ja(sr$<U?*Mpq1VYs7xD?>RJnSO*8um6-Yb3)K>k1dhl(GVFBeG
zfk6d>T>fA!QeE3r9G>z+s0y6Go%jG%sf{nW<ZLJE^T$z{o%jBXf3V(f_&fK{4GjZ6
zIxGyR6?HaFAw>!7R|bl_1GVQl!^5{=l(!O<;ZhuepW#FN24BN{9E8Jo3H27#y%KK4
zdSv@;8>+HjB1N_q)c4FqjOhKp&!8JO9-%VrK)r@rsgDlL5zNM<pMQ^8%-b;?uVD|o
zfy88gq8`-y)vz*SQ5nCE3Zxo&ldVSbd|S(4B{t#|e2R@2FEN{iXOZMAccj_7ScXY#
z#u%keu%Tm^uO4OgCLTit_y~0d{y}oG2q#r%D25846a$rX27@wOjoN}FvVC?Hl}QKc
zEcD?iT5vA%Tw6w0)Ap$K3~|+*&v=rbEBo<u1wW1cKD~<0+JP$>W7o8QDru*1%J(y6
zqpNI#{5|cd_D_d#g1?uK3+Qjrm5{2X_8$EWHwr7H>MWwq_V+5a|H@ohsV%1KRF9?W
zb(u_8DQD8zR(IgQ{hxRTb#QCwoMhLQa#g9-IM43Oi?0gTB3yIm+Tv<DyKHfu@7f%$
zMf9kfg$Ho1AJ6j&w)%Nv`)#40O~-P&wvFRrY`JSQya{}p&Q7{Ek*l^kQ5eqMzuKvO
zEOPx=2T+G5gU(lg@jAO!!BwX|JM~dUW?E`kW?6RX^MZXDsr2aS?x}xE_H_9ltwqKh

diff --git a/languages/robotstxt-manager-ca.po b/languages/robotstxt-manager-ca.po
index 204bfc3..985bae7 100644
--- a/languages/robotstxt-manager-ca.po
+++ b/languages/robotstxt-manager-ca.po
@@ -583,3 +583,10 @@ msgstr "La botiga ha respost amb HTTP %d. Comproveu l'URL de la botiga i la clau
 #: includes/class-robotstxt-manager-core-client.php:177
 msgid "Connected."
 msgstr "Connectat."
+
+#: includes/class-robotstxt-manager-updater.php admin/class-robotstxt-manager-admin.php
+msgid "<strong>Security update available:</strong> %1$s (v%2$s → v%3$s). <a href=\"%4$s\">Update now</a> — this is a security patch for the version this site runs, not a feature update."
+msgstr "<strong>Actualització de seguretat disponible:</strong> %1$s (v%2$s → v%3$s). <a href=\"%4$s\">Actualitza ara</a> — és un pedaç de seguretat per a la versió que fa servir aquest lloc, no una actualització de funcions."
+
+msgid "Security update available (v%1$s → v%2$s)"
+msgstr "Actualització de seguretat disponible (v%1$s → v%2$s)"
diff --git a/languages/robotstxt-manager-es_ES.mo b/languages/robotstxt-manager-es_ES.mo
index f82d8d7fe1b5a598d265d774bb3fdb50249293bd..ecaef84b6fbcd325decf227b2e9be0db382a864b 100644
GIT binary patch
delta 2652
zcmbW&TWnNC9LMp&mR=|qEg(Xn45ck}DJ_L^YfHIVE(&-lh?jyrY<KA?b+_!<EkcY-
zNFg+V5GlNnMq><(L5RUc5==B2qKSrRd{7e+A^1Q-h_}SVN58*4rwz)R6aM|ooIQJH
z{{NY?^hH1DO8;D(d)m;##B`!Q$C!THl*b=hPk}KPa4(L-nT5vG;Cw8?HXMVUcnLjx
z4d-$(jb||*E4aA|=i@Zoj-y9$OM;H(dUdQZ%wf_v1CQb^975J)3YmR0jzi`!6LAX8
zz+zmCKjH?|f@Y8Rt-)Hx%TWt((c%E!)Dkbzd4vn6CKyB44B-;|5WDamvPQH0VSnXe
zoXGffRAwhJ7ti34QO3N5ml;>GD%NgppzgbilkiW}!t;5^B$a3;otapVQ*kRkiZLw1
z!#Eq?#SC7<5FX@dhw(imX;U}ZPhcgg#9L66b@4ImL2YqAs**#PRw>WZ@$fQ|tO+r@
zR^EWhe0?x(#d(a|QCoEkHNk1ra|Tfp4522xirR{wumta*Dv?9_nx|+A_16t0TzD2M
zaU<@>C|<=i7~*NFz$>^D-@pO<9djsoA7xWTj*|9j%%Gn87ixi;U6ss7Eg*!d*uoO(
zuhOsLLL;`L_Gl1!wz-J<{3~3JcTtroC(V0IT!)`9E-elA8W-q3RE8ydSqqtm*KrA+
z!D4I7alDYGqtZ3bGNuVzP%AxzRZMUewc>BMD1ShUH?a#<7G2+i%G5(W?*Os}(}z^u
zyn{tN?<3TLz9{$aOMgpe2^X%T_O`f!cNd%SZ`_TlNPDG!>QlIsaX%`P&roNiZH`~5
zPE_TNqRz<Mn1|=^dlqmJf6?bv*@~r2cgVkSKkD=!LLH(()Wla%75N%D4(1P3Mun_a
z*KOchyu&z(4Y;M6$*~``W%K6yE<-)11@rX&@1Ua}oDL*eb13@(uN$hA@8dDNg8JgR
z8vj8%v54`WV7w2PG48{B{1}z_=g3cjxrQWdZXn0N<kylo^P4$zl<@-87dIoXxY>r9
zz{M_1;YPfLdR;@Dw5RY*q$uWBd=aPCv3N{kIVGR5kdw}M%_3u3F@<{WmzW+y=Q}!7
z&D=um+1Pr&^pjC%A%u<CidyIiR0ih*uc6+Kd#DFjE;fdFvp?S)tL&@x1X@Cel0s(R
z5^hUp|1)`x3%P_QzrQ^m44y}Ak+!3q(0;0IA*K;qHK1t`<Y00%_)pUotO%~n!U;sZ
z_FtK)3To?pM*g<Yn?q>dRuMW_n+OhlwoT-(ez>+1{CJve#7o3FLT`bZwzQ4V|1oOX
zqH02w-JtznNxVR)bi-|P(Aj|{gvveKbn0~w?{7O9XbW`?CK1|iz1C_v)M^|X^9-??
zc$yeZX#Q+l!{2bwUy9>{z7Cw)%S0=oSM*6jC%u@^d6-S;l~mJ-e<<5CW-U5FUo;a<
zgbpodQ!TT!Aa_){$x9~UvE9wBk#H*ECimM^PluC?Sf|%<yPaL#k%p$);1*j^SMJ%l
zy%h`L_K}mew_;JbS5;%19NU?QL|2qm)R%i@&D;DZ#Nzv!YMo|#``{^?>~uZLKgW8*
z^Yl2$aHm}yjVJgtVtXSA&yC0YJ3W^bBvLW2+Q#BZz7>r)$y6c|EUqTgP}n%OV0gg;
zzfCR6c$3c+j3l!<oJ=|0?g1z4Ud_a8M}%p2lU|3@VLM!}CmwVES7sy6O<1Qho^VF;
zi+DB_vu!<2B1|s-nvZLa?RNYGwVJ&t^6(rR@ko+P-MF&k`;K)USa&oP3saVeSCg4u
WnjAmvfg45=8~C)YG;^XlmG=)&j$fw$

delta 2143
zcmXxle@vBC9LMo5KSM5H+=vuKuE`HcL$X8=QLY*n5()7~`6HG7z`XupibMZkJ}Tfp
zb!CQ4r_QZE6z4*XJDpggwrJ(n+WbccW4P58o4IOjZnoj-{du0pGrrI3oaf$qo^!tE
zoQJ_^cbhX2O#a*`t;B4iFv+Y77p8KdRHm5?U=?QKB$nY53}E3jvve%SPOL@;Z{rJC
z$%my_i+LEulmxRL<Pna2LND}XpJ6_p#}9D`8H>%%;0G8&`m|zv1<Nsr^*DyxkUp(~
zQOYnb!ba2pIx&Qo@ge?**&1qpmKlFG#H9j%!YKZSjKQMQy^(j|OSDg+W_AgaaR5&+
zqd~kyyDHm^vDn|J?>)mDOkuPdcpj>~7z>oD2$h+*8*}j(zKUmY9)68+e2A}MAEW5O
zVPq1vhTb%R7F3E`QLER9Gq4M_v=>mB971LCTXfo~+@-?ct>$HK<m*r~-|Dy9P)pQ~
zZpWw&x=<a*P!GC_O8xgZ3x7dn;1R0-fBerAnPm&@%v|!{KxG#<+VCo_!ff)SnQz1$
zco_Te0Va{^y*y2s*hkvJcn<a8ant}OQ5pObHGpi=qD;-i0xZF5jO3AjCU0Hb&<xJ{
zU-$~EXx~GvWq|2C=D{;?n05*~Rrg1*T;D^@FmaAIkRYC;osTiRjmlUZPhXDBr~$?t
zDy4LM12xjIkms++pFQFd#lT$eeg|rXM^GL1AbndeYVTabK!Vv1sEpj>Df-?xR^acr
z0P{)jd~_P9Jf(5~m5IHD-Y!3iOKG1*&E#j)p4eUFrLY~9u|Cw^_!2d+n|PlAe1pH~
z^Aayphj^O4*Nv=-#gM(@SU(j#cm$P_QDm8I3N@pgQt$o(-zJ>o{(fABTi6I+;Azy7
zR4_fc8r4rTYG5Cs-Y@%*v02Q$?{KuJOykBK{1it}KU}}i>u3)KXm|MS<EW+TMRj}z
zU&M>ZnCv>Tnl_4Q_%G^|B);zbt^hf?R)PVZZ`D+^#u045LDaFF!gulGGH<tkhg)g?
zfmg6@5wBlT{TD8#o%4p-28^Hvd>*w2`jI)=AZkDpsEkjdLzZodijG4Oy=bJZs2Lpb
zy@)yu!>Ep*BG0v5go>6;MYB>-Ha8NrgbIho-AnJ|+r$S%3&ArSH)Yh_qPJKIk?1vf
zKbx%}l;*kqJ#8MXqh_F^q!J`H5$_Pi1Y5x^+qtgv>u+Kmv4v>z@73%5uT7*hsca*(
z_DhILVilnoHxewPy+x?#C~YQqp}GG#bp%y*5=ym-GP{FNMpcrDOky>mWn^`&is!qf
znQI;qa$DZcU+>qorq7FBHqQ&oZtwXG?HhLqk?mous9V<hhEaQom2*oCS5CZzb%s@v
zh&67_yG-}%>rlI08;4hbah%-};i_Gq5#N)Ro)Dj(zAPhtGWSYaJQ!-viVv3^O#L52
CTEd_J

diff --git a/languages/robotstxt-manager-es_ES.po b/languages/robotstxt-manager-es_ES.po
index e691fd8..02a4ba7 100644
--- a/languages/robotstxt-manager-es_ES.po
+++ b/languages/robotstxt-manager-es_ES.po
@@ -582,3 +582,10 @@ msgstr "La tienda respondió con HTTP %d. Comprueba la URL de la tienda y la cla
 #: includes/class-robotstxt-manager-core-client.php:177
 msgid "Connected."
 msgstr "Conectado."
+
+#: includes/class-robotstxt-manager-updater.php admin/class-robotstxt-manager-admin.php
+msgid "<strong>Security update available:</strong> %1$s (v%2$s → v%3$s). <a href=\"%4$s\">Update now</a> — this is a security patch for the version this site runs, not a feature update."
+msgstr "<strong>Actualización de seguridad disponible:</strong> %1$s (v%2$s → v%3$s). <a href=\"%4$s\">Actualizar ahora</a> — es un parche de seguridad para la versión que usa este sitio, no una actualización de funciones."
+
+msgid "Security update available (v%1$s → v%2$s)"
+msgstr "Actualización de seguridad disponible (v%1$s → v%2$s)"
diff --git a/languages/robotstxt-manager.pot b/languages/robotstxt-manager.pot
index f7ac393..3eefa16 100644
--- a/languages/robotstxt-manager.pot
+++ b/languages/robotstxt-manager.pot
@@ -2,14 +2,14 @@
 # This file is distributed under the GPL-3.0-or-later.
 msgid ""
 msgstr ""
-"Project-Id-Version: Manager (by ROBOTSTXT) 1.8.0\n"
-"Report-Msgid-Bugs-To: https://www.robotstxt.software/plugins/robotstxt-manager/\n"
+"Project-Id-Version: Manager (by ROBOTSTXT) 1.9.1\n"
+"Report-Msgid-Bugs-To: https://wordpress.org/support/plugin/robotstxt-manager\n"
 "Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
 "Language-Team: LANGUAGE <LL@li.org>\n"
 "MIME-Version: 1.0\n"
 "Content-Type: text/plain; charset=UTF-8\n"
 "Content-Transfer-Encoding: 8bit\n"
-"POT-Creation-Date: 2026-08-17T14:52:09+00:00\n"
+"POT-Creation-Date: 2026-09-23T04:51:33+00:00\n"
 "PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
 "X-Generator: WP-CLI 2.12.0\n"
 "X-Domain: robotstxt-manager\n"
@@ -31,7 +31,7 @@ msgstr ""
 
 #. Author of the plugin
 #: robotstxt-manager.php
-#: admin/class-robotstxt-manager-admin.php:48
+#: admin/class-robotstxt-manager-admin.php:52
 msgid "ROBOTSTXT"
 msgstr ""
 
@@ -40,49 +40,56 @@ msgstr ""
 msgid "https://www.robotstxt.software/"
 msgstr ""
 
-#: admin/class-robotstxt-manager-admin.php:47
-#: admin/views/page-catalog.php:66
+#: admin/class-robotstxt-manager-admin.php:51
+#: admin/views/page-catalog.php:67
 msgid "Manager (by ROBOTSTXT) — Plugins"
 msgstr ""
 
-#: admin/class-robotstxt-manager-admin.php:64
-#: admin/class-robotstxt-manager-settings.php:207
+#: admin/class-robotstxt-manager-admin.php:68
+#: admin/class-robotstxt-manager-settings.php:210
 msgid "You do not have sufficient permissions to access this page."
 msgstr ""
 
+#. translators: 1: plugin name, 2: installed version, 3: patch version, 4: update URL.
+#: admin/class-robotstxt-manager-admin.php:168
+#: admin/views/page-catalog.php:90
+#, php-format
+msgid "<strong>Security update available:</strong> %1$s (v%2$s → v%3$s). <a href=\"%4$s\">Update now</a> — this is a security patch for the version this site runs, not a feature update."
+msgstr ""
+
 #. translators: %s: plugin slug.
-#: admin/class-robotstxt-manager-admin.php:108
+#: admin/class-robotstxt-manager-admin.php:206
 #, php-format
 msgid "The payment for %s failed. Update your payment method from your ROBOTSTXT account page to keep access."
 msgstr ""
 
 #. translators: %s: plugin slug.
-#: admin/class-robotstxt-manager-admin.php:119
+#: admin/class-robotstxt-manager-admin.php:217
 #, php-format
 msgid "The subscription for %s has expired, but the plugin is still active on this site. Renew from your ROBOTSTXT account page to keep receiving updates."
 msgstr ""
 
 #. translators: 1: plugin slug, 2: days remaining.
-#: admin/class-robotstxt-manager-admin.php:132
+#: admin/class-robotstxt-manager-admin.php:230
 #, php-format
 msgid "The subscription for %1$s expires in %2$d day."
 msgid_plural "The subscription for %1$s expires in %2$d days."
 msgstr[0] ""
 msgstr[1] ""
 
-#: admin/class-robotstxt-manager-admin.php:153
-#: admin/class-robotstxt-manager-installer.php:421
-#: admin/class-robotstxt-manager-settings.php:379
-#: admin/class-robotstxt-manager-settings.php:405
+#: admin/class-robotstxt-manager-admin.php:251
+#: admin/class-robotstxt-manager-installer.php:433
+#: admin/class-robotstxt-manager-settings.php:462
+#: admin/class-robotstxt-manager-settings.php:506
 msgid "Insufficient permissions."
 msgstr ""
 
-#: admin/class-robotstxt-manager-admin.php:197
+#: admin/class-robotstxt-manager-admin.php:295
 msgid "Too many refreshes. Please wait a minute before refreshing again."
 msgstr ""
 
 #: admin/class-robotstxt-manager-installer.php:51
-#: admin/class-robotstxt-manager-installer.php:518
+#: admin/class-robotstxt-manager-installer.php:532
 msgid "Plugin not found in catalog."
 msgstr ""
 
@@ -117,39 +124,39 @@ msgid "No download found on WordPress.org for %s."
 msgstr ""
 
 #: admin/class-robotstxt-manager-installer.php:287
-#: admin/class-robotstxt-manager-installer.php:540
+#: admin/class-robotstxt-manager-installer.php:570
 msgid "Could not create a temporary file for download."
 msgstr ""
 
 #. translators: %s: HTTP transport error message.
 #: admin/class-robotstxt-manager-installer.php:303
-#: admin/class-robotstxt-manager-installer.php:573
+#: admin/class-robotstxt-manager-installer.php:603
 #, php-format
 msgid "Download failed: %s"
 msgstr ""
 
 #. translators: %d: HTTP status code.
 #: admin/class-robotstxt-manager-installer.php:310
-#: admin/class-robotstxt-manager-installer.php:588
+#: admin/class-robotstxt-manager-installer.php:630
 #, php-format
 msgid "Download failed (HTTP %d)."
 msgstr ""
 
 #: admin/class-robotstxt-manager-installer.php:316
-#: admin/class-robotstxt-manager-installer.php:597
+#: admin/class-robotstxt-manager-installer.php:639
 msgid "The store returned an invalid file."
 msgstr ""
 
 #. translators: %s: upgrader error message.
 #: admin/class-robotstxt-manager-installer.php:334
-#: admin/class-robotstxt-manager-installer.php:622
+#: admin/class-robotstxt-manager-installer.php:664
 #, php-format
 msgid "Installation failed: %s"
 msgstr ""
 
 #. translators: %s: upgrader error message.
 #: admin/class-robotstxt-manager-installer.php:334
-#: admin/class-robotstxt-manager-installer.php:625
+#: admin/class-robotstxt-manager-installer.php:667
 msgid "Installation failed."
 msgstr ""
 
@@ -160,7 +167,7 @@ msgid "The downloaded plugin for %s does not have the expected folder structure.
 msgstr ""
 
 #: admin/class-robotstxt-manager-installer.php:363
-#: admin/class-robotstxt-manager-installer.php:394
+#: admin/class-robotstxt-manager-installer.php:396
 msgid "Plugin is not installed."
 msgstr ""
 
@@ -171,278 +178,297 @@ msgid "%s activated."
 msgstr ""
 
 #. translators: %s: plugin name (slug).
-#: admin/class-robotstxt-manager-installer.php:406
+#: admin/class-robotstxt-manager-installer.php:418
 #, php-format
 msgid "%s updated."
 msgstr ""
 
-#: admin/class-robotstxt-manager-installer.php:512
+#: admin/class-robotstxt-manager-installer.php:526
 msgid "Store is not configured."
 msgstr ""
 
-#: admin/class-robotstxt-manager-settings.php:59
+#. translators: 1: HTTP status code, 2: store error message.
+#: admin/class-robotstxt-manager-installer.php:624
+#, php-format
+msgid "Download failed (HTTP %1$d): %2$s"
+msgstr ""
+
+#: admin/class-robotstxt-manager-settings.php:62
 #: admin/views/page-settings.php:13
 msgid "Manager (by ROBOTSTXT) — Settings"
 msgstr ""
 
-#: admin/class-robotstxt-manager-settings.php:60
+#: admin/class-robotstxt-manager-settings.php:63
 msgid "Settings"
 msgstr ""
 
-#: admin/class-robotstxt-manager-settings.php:75
+#: admin/class-robotstxt-manager-settings.php:78
 msgid "Connection"
 msgstr ""
 
-#: admin/class-robotstxt-manager-settings.php:92
+#: admin/class-robotstxt-manager-settings.php:95
 msgid "Store URL"
 msgstr ""
 
-#: admin/class-robotstxt-manager-settings.php:110
+#: admin/class-robotstxt-manager-settings.php:113
 msgid "API Key"
 msgstr ""
 
-#: admin/class-robotstxt-manager-settings.php:118
+#: admin/class-robotstxt-manager-settings.php:121
 msgid "Cache"
 msgstr ""
 
-#: admin/class-robotstxt-manager-settings.php:135
+#: admin/class-robotstxt-manager-settings.php:138
 msgid "Catalog Cache (minutes)"
 msgstr ""
 
-#: admin/class-robotstxt-manager-settings.php:153
+#: admin/class-robotstxt-manager-settings.php:156
 msgid "Data on Uninstall"
 msgstr ""
 
-#: admin/class-robotstxt-manager-settings.php:188
+#: admin/class-robotstxt-manager-settings.php:191
 msgid "Testing…"
 msgstr ""
 
-#: admin/class-robotstxt-manager-settings.php:189
-#: admin/class-robotstxt-manager-settings.php:274
+#: admin/class-robotstxt-manager-settings.php:192
+#: admin/class-robotstxt-manager-settings.php:349
 msgid "Test connection"
 msgstr ""
 
-#: admin/class-robotstxt-manager-settings.php:190
+#: admin/class-robotstxt-manager-settings.php:193
 msgid "Deleting…"
 msgstr ""
 
-#: admin/class-robotstxt-manager-settings.php:191
-#: admin/class-robotstxt-manager-settings.php:278
+#: admin/class-robotstxt-manager-settings.php:194
+#: admin/class-robotstxt-manager-settings.php:353
 msgid "Delete API key"
 msgstr ""
 
-#: admin/class-robotstxt-manager-settings.php:192
+#: admin/class-robotstxt-manager-settings.php:195
 msgid "Delete the stored API key? The catalog and subscription data will stop working until a new key is entered."
 msgstr ""
 
-#: admin/class-robotstxt-manager-settings.php:193
-#: admin/class-robotstxt-manager-settings.php:414
+#: admin/class-robotstxt-manager-settings.php:196
+#: admin/class-robotstxt-manager-settings.php:515
 msgid "API key deleted. Save changes to persist."
 msgstr ""
 
-#: admin/class-robotstxt-manager-settings.php:194
+#: admin/class-robotstxt-manager-settings.php:197
 msgid "An unexpected error occurred."
 msgstr ""
 
-#: admin/class-robotstxt-manager-settings.php:226
+#: admin/class-robotstxt-manager-settings.php:233
+msgid "You do not have sufficient permissions to manage settings."
+msgstr ""
+
+#: admin/class-robotstxt-manager-settings.php:292
 msgid "Base URL of the remote Plugins Core installation that this site will pull the plugin catalog from."
 msgstr ""
 
 #. translators: %s: last 4 characters of the stored API key.
-#: admin/class-robotstxt-manager-settings.php:257
+#: admin/class-robotstxt-manager-settings.php:323
 #, php-format
 msgid "A key is stored (last 4 characters: <code>%s</code>). Leave blank to keep the existing key; enter a new value to replace it."
 msgstr ""
 
-#: admin/class-robotstxt-manager-settings.php:262
+#: admin/class-robotstxt-manager-settings.php:328
 msgid "A key is stored but could not be decoded. You can replace it by entering a new value above, or delete it with the button below."
 msgstr ""
 
-#: admin/class-robotstxt-manager-settings.php:266
+#. translators: %s: Registration URL.
+#: admin/class-robotstxt-manager-settings.php:337
+#, php-format
 msgid "Account-level API key from the ROBOTSTXT store (<a href=\"%s\" target=\"_blank\" rel=\"noopener\">create your free account there to get one</a>). Optional — the free catalog works without it — but required to link your subscriptions, install premium plugins, and receive their updates. Encrypted before storage."
 msgstr ""
 
-#: admin/class-robotstxt-manager-settings.php:298
+#: admin/class-robotstxt-manager-settings.php:373
 msgid "How long the catalog response from Core is cached in a transient. Default: 60 minutes. Lower values refresh more often at the cost of more requests to Core. Maximum: 1440 (24 hours)."
 msgstr ""
 
-#: admin/class-robotstxt-manager-settings.php:313
+#: admin/class-robotstxt-manager-settings.php:388
 msgid "Delete all plugin data when the plugin is uninstalled."
 msgstr ""
 
-#: admin/class-robotstxt-manager-settings.php:343
+#: admin/class-robotstxt-manager-settings.php:426
 msgid "The API key format is invalid. Copy the full key from your ROBOTSTXT account page."
 msgstr ""
 
-#: admin/views/page-catalog.php:69
+#: admin/views/page-catalog.php:70
 msgid "This is the ROBOTSTXT plugin store: the catalog of plugins published by ROBOTSTXT, installable and updatable straight from your own wp-admin. Free plugins install with one click; premium plugins require an annual subscription that you purchase on our website."
 msgstr ""
 
-#: admin/views/page-catalog.php:73
+#: admin/views/page-catalog.php:74
 msgid "Catalog refreshed."
 msgstr ""
 
 #. translators: %s: store registration URL.
-#: admin/views/page-catalog.php:89
+#: admin/views/page-catalog.php:109
 #, php-format
 msgid "Create your free account at the <a href=\"%s\" target=\"_blank\" rel=\"noopener noreferrer\">ROBOTSTXT store</a> to get your personal API key. The key links your subscriptions to this site and unlocks premium plugins and updates."
 msgstr ""
 
 #. translators: %s: settings URL.
-#: admin/views/page-catalog.php:109
+#: admin/views/page-catalog.php:129
 #, php-format
 msgid "ROBOTSTXT Manager is not configured yet. <a href=\"%s\">Set the Store URL and API key</a> to see your plugin catalog."
 msgstr ""
 
-#: admin/views/page-catalog.php:119
+#: admin/views/page-catalog.php:139
 msgid "No plugins were returned by the ROBOTSTXT store. Check the Store URL and API key on the Settings page, or click Refresh to try again."
 msgstr ""
 
-#: admin/views/page-catalog.php:122
-#: admin/views/page-catalog.php:125
+#: admin/views/page-catalog.php:142
+#: admin/views/page-catalog.php:145
 msgid "Refresh catalog"
 msgstr ""
 
-#: admin/views/page-catalog.php:131
+#: admin/views/page-catalog.php:151
 msgid "Plugin"
 msgstr ""
 
-#: admin/views/page-catalog.php:132
+#: admin/views/page-catalog.php:152
 msgid "Version"
 msgstr ""
 
-#: admin/views/page-catalog.php:133
+#: admin/views/page-catalog.php:153
 msgid "Requires WP"
 msgstr ""
 
-#: admin/views/page-catalog.php:134
+#: admin/views/page-catalog.php:154
 msgid "Requires PHP"
 msgstr ""
 
-#: admin/views/page-catalog.php:135
+#: admin/views/page-catalog.php:155
 msgid "Price"
 msgstr ""
 
-#: admin/views/page-catalog.php:136
+#: admin/views/page-catalog.php:156
 msgid "Action"
 msgstr ""
 
-#: admin/views/page-catalog.php:137
+#: admin/views/page-catalog.php:157
 msgid "Status"
 msgstr ""
 
-#: admin/views/page-catalog.php:239
+#: admin/views/page-catalog.php:267
 msgid "Your site runs WordPress"
 msgstr ""
 
-#: admin/views/page-catalog.php:251
+#: admin/views/page-catalog.php:279
 msgid "Your server runs PHP"
 msgstr ""
 
 #. translators: %s: formatted price number.
-#: admin/views/page-catalog.php:264
+#: admin/views/page-catalog.php:292
 #, php-format
 msgid "€%s / year"
 msgstr ""
 
 #. translators: %d: days remaining.
-#: admin/views/page-catalog.php:282
+#: admin/views/page-catalog.php:310
 #, php-format
 msgid "Subscribed — %d days left"
 msgstr ""
 
-#: admin/views/page-catalog.php:286
+#: admin/views/page-catalog.php:314
+#: admin/views/page-catalog.php:340
 msgid "Subscribed"
 msgstr ""
 
-#: admin/views/page-catalog.php:289
+#: admin/views/page-catalog.php:317
 msgid "Payment failed"
 msgstr ""
 
-#: admin/views/page-catalog.php:291
+#: admin/views/page-catalog.php:319
 msgid "Cancelled"
 msgstr ""
 
-#: admin/views/page-catalog.php:293
+#: admin/views/page-catalog.php:321
 msgid "Expired"
 msgstr ""
 
-#: admin/views/page-catalog.php:303
+#: admin/views/page-catalog.php:350
 msgid "Free"
 msgstr ""
 
-#: admin/views/page-catalog.php:309
+#: admin/views/page-catalog.php:356
 msgid "Incompatible"
 msgstr ""
 
-#: admin/views/page-catalog.php:312
+#: admin/views/page-catalog.php:359
 msgid "Buy"
 msgstr ""
 
-#: admin/views/page-catalog.php:317
+#: admin/views/page-catalog.php:364
 msgid "Install"
 msgstr ""
 
-#: admin/views/page-catalog.php:319
+#: admin/views/page-catalog.php:366
 msgid "Activate"
 msgstr ""
 
-#: admin/views/page-catalog.php:321
+#: admin/views/page-catalog.php:368
 msgid "Update"
 msgstr ""
 
-#: admin/views/page-catalog.php:327
+#: admin/views/page-catalog.php:374
 msgid "Not installed"
 msgstr ""
 
-#: admin/views/page-catalog.php:329
+#: admin/views/page-catalog.php:376
 msgid "Installed (inactive)"
 msgstr ""
 
+#. translators: 1: installed version, 2: security patch version.
+#: admin/views/page-catalog.php:381
+#, php-format
+msgid "Security update available (v%1$s → v%2$s)"
+msgstr ""
+
 #. translators: 1: installed version, 2: available version.
-#: admin/views/page-catalog.php:334
+#: admin/views/page-catalog.php:390
 #, php-format
 msgid "Update available (v%1$s → v%2$s)"
 msgstr ""
 
-#: admin/views/page-catalog.php:340
+#: admin/views/page-catalog.php:396
 msgid "Up to date"
 msgstr ""
 
-#: admin/views/page-catalog.php:349
+#: admin/views/page-catalog.php:405
 msgid "Visit website"
 msgstr ""
 
 #. translators: %s: plugin name.
-#: admin/views/page-catalog.php:349
+#: admin/views/page-catalog.php:405
 #, php-format
 msgid "(about %s)"
 msgstr ""
 
 #. translators: %s: list of plugin slugs.
-#: admin/views/page-catalog.php:360
+#: admin/views/page-catalog.php:416
 #, php-format
 msgid "Requires: %s"
 msgstr ""
 
-#: admin/views/page-catalog.php:374
+#: admin/views/page-catalog.php:430
 msgid "Support"
 msgstr ""
 
-#: admin/views/page-catalog.php:376
+#: admin/views/page-catalog.php:432
 msgid "Need help with a ROBOTSTXT plugin? Visit the plugin's website (the link in its row above) for documentation and guides, or contact us through our website — we are happy to help."
 msgstr ""
 
-#: admin/views/page-catalog.php:379
+#: admin/views/page-catalog.php:435
 msgid "Payments, and how it works"
 msgstr ""
 
-#: admin/views/page-catalog.php:381
+#: admin/views/page-catalog.php:437
 msgid "Free plugins install instantly at no cost. Premium plugins are annual subscriptions: you pay once on our website and the subscription renews automatically every year until you cancel. You can cancel at any time from your ROBOTSTXT account page — access keeps working until the end of the paid period. All payments are processed securely by Mollie; we never see or store your card details."
 msgstr ""
 
 #. translators: %d: number of incompatible plugins.
-#: admin/views/page-catalog.php:391
+#: admin/views/page-catalog.php:447
 #, php-format
 msgid "%d plugin in the catalog is not compatible with this site's WordPress or PHP version."
 msgid_plural "%d plugins in the catalog are not compatible with this site's WordPress or PHP version."
@@ -450,7 +476,7 @@ msgstr[0] ""
 msgstr[1] ""
 
 #. translators: 1: local WP version, 2: local PHP version.
-#: admin/views/page-catalog.php:400
+#: admin/views/page-catalog.php:456
 #, php-format
 msgid "This site runs WordPress %1$s on PHP %2$s."
 msgstr ""
@@ -469,16 +495,16 @@ msgstr ""
 msgid "Could not reach Plugins Core: %s"
 msgstr ""
 
+#: includes/class-robotstxt-manager-core-client.php:167
+msgid "Invalid API key. Please check your key and try again."
+msgstr ""
+
 #. translators: %d: HTTP status code.
-#: includes/class-robotstxt-manager-core-client.php:168
+#: includes/class-robotstxt-manager-core-client.php:175
 #, php-format
 msgid "The store responded with HTTP %d. Check the Store URL and API key."
 msgstr ""
 
-#: includes/class-robotstxt-manager-core-client.php:164
-msgid "Invalid API key. Please check your key and try again."
-msgstr ""
-
-#: includes/class-robotstxt-manager-core-client.php:177
+#: includes/class-robotstxt-manager-core-client.php:184
 msgid "Connected."
 msgstr ""
diff --git a/readme.txt b/readme.txt
index edf63d6..dbbbd43 100644
--- a/readme.txt
+++ b/readme.txt
@@ -3,9 +3,9 @@ Contributors: robotstxt, javiercasares
 Tags: dashboard, catalog, updates, subscriptions, management
 Requires at least: 4.4
 Tested up to: 7.1
-Stable tag: 1.8.1
+Stable tag: 1.9.1
 Requires PHP: 8.0
-Version: 1.8.1
+Version: 1.9.1
 License: GPL-3.0-or-later
 License URI: https://www.gnu.org/licenses/gpl-3.0.txt
 
@@ -94,6 +94,19 @@ Encrypted at rest using AES-256-CBC with a key derived from your site's WordPres
 
 Only the 3 last versions. The full changelog will be at changelog.txt
 
+= 1.9.1 =
+
+_Release date: 2026-09-23_
+
+* Maintenance: dependency audit (no updates, no CVEs), full code and security review of the security-patch feature, compatibility floors re-verified (WordPress 4.4, PHP 8.0). No runtime changes.
+
+= 1.9.0 =
+
+_Release date: 2026-09-22_
+
+* New: security-update notices (with Core 1.16.0+). When the store declares a security patch for the exact version your site runs, a red "Update now" notice appears on the Plugins screen and the Manager catalog, and the update installs only that patch — your site is never pushed across feature versions by a security fix.
+* The WordPress update badge, `wp plugin update`, and auto-updates also target the declared patch.
+
 = 1.8.1 =
 
 _Release date: 2026-09-22_
@@ -103,19 +116,6 @@ _Release date: 2026-09-22_
 * Fixed: a hardcoded "Subscribed" label in the multi-license catalog pill is now translatable.
 * Maintenance: development tooling updated (PHPStan max, WordPress stubs 7.1.0); compatibility floors re-verified (WordPress 4.4, PHP 8.0).
 
-= 1.8.0 =
-
-_Release date: 2026-08-24_
-
-* New: multi-domain license awareness (with Core 1.14.0) — the account's subscriptions are grouped per plugin and catalog pills show how many licenses you hold (e.g. "Subscribed @ example.com ×2") with the domain of the first bound license.
-
-= 1.7.0 =
-
-_Release date: 2026-08-18_
-
-* New: per-domain license support (Core 1.11.0+) — downloads and download-token exchanges now send this site's domain, so premium licenses bind to this site and the store rejects them from other domains. Catalog subscription pills show the bound domain (e.g. "Subscribed @ example.com").
-* Improvement: download failures now surface the store's own error message (e.g. the domain-mismatch explanation) instead of a bare HTTP status code.
-
 = Previous versions =
 
 If you want to see the full changelog, visit the [plugin page](https://www.robotstxt.software/plugins/robotstxt-manager/).
diff --git a/robotstxt-manager.php b/robotstxt-manager.php
index 2cf7de2..9ee06ee 100644
--- a/robotstxt-manager.php
+++ b/robotstxt-manager.php
@@ -3,7 +3,7 @@
  * Plugin Name:       Manager (by ROBOTSTXT)
  * Plugin URI:        https://www.robotstxt.software/plugins/robotstxt-manager/
  * Description:       Client-side dashboard for the ROBOTSTXT plugin ecosystem. Lists the catalog from a remote Plugins Core install, resolves local install/update state, and installs, activates, and updates plugins directly from the store.
- * Version:           1.8.1
+ * Version:           1.9.1
  * Requires at least: 4.4
  * Requires PHP:      8.0
  * Update URI:        https://www.robotstxt.software/plugins/robotstxt-manager/
@@ -23,7 +23,7 @@ if ( ! defined( 'ABSPATH' ) ) {
 }
 
 /** Plugin version. */
-define( 'ROBOTSTXT_MANAGER_VERSION', '1.8.1' );
+define( 'ROBOTSTXT_MANAGER_VERSION', '1.9.1' );
 
 /** Absolute path to the plugin directory, with trailing slash. */
 define( 'ROBOTSTXT_MANAGER_DIR', plugin_dir_path( __FILE__ ) );