Insightistic 4.6.0

Insightistic 4.6.0 — Cloudflare joins the one-key connector sync

One license key, one connect: the daily connector sync now pushes Cloudflare edge analytics alongside GA4, Search Console, and PageSpeed, all pulled with keys that live only in the plugin settings. The license key remains the only Insightistic credential a site ever exchanges — no second Google or Cloudflare connect in the app.

What's new

• Cloudflare edge analytics over the license connector. Sites with a Zone ID + API token in Settings → Cloudflare forward daily edge rows (requests, bandwidth, cache ratio, geo, threats, 4xx/5xx, firewall actions, bot user agents) to the Insightistic app during the daily sync. The dashboard's edge page fills from the same tables the platform's nightly sync uses — one converged row per day, never duplicates, and the Integrations page shows "connected via WordPress plugin".
• Plan-gated datasets degrade gracefully. If the zone's Cloudflare plan does not expose firewall or bot analytics, the push still delivers the daily traffic rows and the app renders its "not available on this plan" states instead of erroring. Bot classification stays platform-side, so the crawler taxonomy (AI crawler / search bot / known SEO crawler) lives in one place.

Security

• Legacy credential auto-migration. Encrypted values still stored in the pre-3.3.0 format are now re-encrypted into the authenticated v1 format (per-record salt + HKDF + encrypt-then-MAC) automatically the first time the plugin reads them after upgrading — no settings re-save needed. The weak legacy decrypt path is reachable for at most one read per credential.

Upgrade notes

• Requires the Insightistic SaaS at release b66a470 or later for the Cloudflare ingestion endpoint (POST /api/connector/v1/sync/cloudflare/daily). Older platforms simply don't receive the new push; everything else keeps working.
• No settings changes required. Existing GA4 / Search Console / PageSpeed / Cloudflare keys keep working exactly where they are.
• To activate Cloudflare in the app dashboard: Settings → Cloudflare → paste Zone ID + API token (Zone: Analytics: Read), then run or wait for the daily sync.

Verification

• 7/7 local test suites (including 20 new Cloudflare-sync assertions and lazy-migration regression tests); CI green on PHP 8.0/8.2/8.3 (lint, PHPCS, PHPCompatibility, assets, POT freshness, version contract).
• End-to-end on production: signed-route auth enforced, ingestion → dashboard read path covered by platform feature tests (ConnectorCloudflareSyncTest).

Full Changelog: insightistic-4.5.2...insightistic-4.6.0

Insightistic 4.5.2

Insightistic 4.5.2

This release improves the WordPress admin License page diagnostics.

Changed

• License activation, refresh, and sync actions now surface the actual WordPress/API JSON response when available.
• Admin AJAX failures now extract useful messages from JSON payloads before falling back to HTTP/session diagnostics.
• This prevents valid troubleshooting states, such as an invalid or mismatched key, from appearing as a generic server error.

Verification

• npm run release:check
• Release ZIP validation passed.
• ZIP SHA-256: D81480931D3BB6DE3C8E5120884F83AA2CC8E29E6DD91AA1F3FA337DEA94CF36

Insightistic 4.5.1

What's Changed

• Fix/release 4.4.2 integrity by @Shubochandrosarker in #1
• feat: begin WPistic platform + LTD entitlement integration by @Shubochandrosarker in #2
• feat(indexnow): submit published/updated URLs via the SaaS IndexNow pipeline (v4.4.3) by @Shubochandrosarker in #3
• Fix traffic and Al diagnostics by @Shubochandrosarker in #4
• Release Insightistic 4.5.1 with plan-aware AI defaults by @Shubochandrosarker in #5

New Contributors

• @Shubochandrosarker made their first contribution in #1

Full Changelog: insightistic-4.4.2...insightistic-4.5.1

Insightistic 4.4.3

What's Changed

• Fix/release 4.4.2 integrity by @Shubochandrosarker in #1
• feat: begin WPistic platform + LTD entitlement integration by @Shubochandrosarker in #2

Full Changelog: insightistic-4.4.2...insightistic-4.4.3

Insightistic 4.4.2

Full Changelog: insightistic-4.4.1...insightistic-4.4.2

Insightistic 4.4.1 — GA4 Data Fix + Gradient Gauges

Insightistic 4.4.1 — GA4 data fix + animated gradient gauges

🔧 Fixed — Dashboard KPI cards & email digests showed N/A

Root cause: The GA4 Data API returns data differently when date ranges carry names (current/previous): rows come back keyed by a dateRange dimension instead of the totals array the parser expected. Result: overview KPIs (Sessions, Users, Pageviews, Revenue, Transactions, Bounce Rate) rendered as N/A everywhere — dashboard cards AND scheduled email digests — while channel/page tables silently mixed current + previous periods into duplicated rows.

• get_overview() now parses both response shapes (rows-by-dateRange and legacy totals), restoring real numbers with true period-over-period changes.
• get_traffic_channels(), get_top_pages(), get_countries() now filter rows to the current period and map previous-period values correctly (the old code read a metricValues[3] index that never existed, so change % was always wrong).

Verified live: Sessions +40.2% period-over-period renders instead of N/A; duplicated "Organic Search / Direct" rows are gone; email digests now carry real KPIs.

✨ New — Animated red → green score gauges

• All score gauges (PageSpeed Performance / SEO / Accessibility / Best Practices, AI Readiness, and dashboard PSI rings) now render an animated SVG ring that fills through a red → amber → green gradient as the score climbs, with counting numbers, pop-in animation and hover glow.
• Accessibility: animations respect prefers-reduced-motion.

🎨 New — Addons page polish

• Addon cards get a gradient border glow on hover and a green enabled-state tint; toggles use a green→cyan gradient when on.

🏠 Housekeeping

• Version bump 4.4.0 → 4.4.1 (busts asset caches).

---

Full Changelog: insightistic-4.4.0...insightistic-4.4.1

Insightistic - GA4 Analytics & AI Insights

=== Insightistic - GA4 Analytics & AI Insights ===
Contributors: wordpressistic
Tags: google analytics, analytics, search console, pagespeed, ai insights
Requires at least: 5.6
Tested up to: 6.8
Requires PHP: 8.0
Stable tag: 4.4.0
License: GPLv2 or later
License URI: https://www.gnu.org/licenses/gpl-2.0.html

View GA4, Search Console, PageSpeed, Cloudflare, WooCommerce, and AI growth insights inside your WordPress dashboard.

== Description ==

Insightistic brings your most important website metrics directly into WordPress. It gives business owners, agencies, marketers, publishers, and WooCommerce stores a clean analytics dashboard without constant tab-switching.

Connect your Google Analytics 4 property and Google Search Console via a single service account (no OAuth pop-ups, no re-authentication). Add a PageSpeed API key for real-time Core Web Vitals scoring, and optionally activate AI insights powered by OpenAI, Google Gemini, OpenRouter, Groq, or Anthropic Claude.

= GA4 Overview =

• 8 stat cards Sessions, Users, Pageviews, Bounce Rate, Avg. Session Duration, New vs Returning, Revenue, Transactions all with period-over-period comparison
• Timeline chart: sessions and revenue over time
• Traffic source donut chart
• Top Countries, Top Pages, Top Channels with share bars
• Top Blog Posts automatically filters GA4 data for /blog/, /post/, /news/ paths
• Source/Medium attribution table with revenue %, revenue per session, and conversion rate

= Google Search Console =

• Clicks, Impressions, CTR, and Average Position at a glance
• Top 10 queries and top 10 pages
• Device breakdown (desktop / mobile / tablet)

= PageSpeed Insights =

• Animated score rings for mobile and desktop
• Core Web Vitals grid: LCP, INP, CLS, FCP, TBT, Speed Index each with a pass/fail badge
• Test any URL on your site, not just the homepage

= Engagement Tracking =

• Optional lightweight frontend script (under 2 KB) that fires custom GA4 events
• Tracks: outbound link clicks, scroll depth (25 / 50 / 75 / 100 %), file downloads, and element clicks
• Zero PII collected no cookies, no fingerprinting

= Cloudflare Traffic Insights =

• Zero configuration by default: connect your free Insightistic account (the same one used for AI Insights) and Traffic Insights turns on automatically — no Zone ID, no API token, nothing to paste
• Prefer not to connect an account? An Advanced section in Settings → Cloudflare lets you paste your own read-only Cloudflare API token instead
• Edge-level requests, cache hit rate, encrypted-traffic ratio, and threats blocked — data Google Analytics structurally cannot see (bots, ad-blockers, JS-disabled visitors, blocked scripts)
• Requests-over-time and status-code charts, Top Countries and TLS version breakdowns
• "Traffic Gap" callout: Cloudflare's edge pageviews vs GA4's client-side pageviews for the same period, with the likely causes for the delta
• Security section: firewall actions and top attacking countries from your zone's existing WAF events
• Optional "Get Traffic AI Insights" narrative (needs a free Insightistic account, same as every other AI Insights flow)
• Never required for anything else — if neither path is set up, the tab simply doesn't appear

= 404 & Broken Link Monitor =

• Free, on by default, purely server-side no script, no dependency on the engagement tracker
• Records request path, distinct referring domains, hit count, and last-seen time for every 404 on your site
• View the top offenders on the Dashboard Overview tab; clear the log any time
• No IP address or user agent stored

= AI Insights (on demand) =

• Click "Get AI Insights" on the dashboard to analyse your GA4 and GSC data
• Choose your AI provider: OpenAI, Google Gemini, OpenRouter (free models supported), Groq, Anthropic Claude, or Insightistic Cloud AI (no key needed runs on our self-hosted Ollama models and Hermes SEO agent, free with your account)
• AI never runs automatically you stay in full control of API usage and cost

= Email Automations (free account required) =

• Send branded analytics digests to your team on a daily, weekly, or monthly schedule
• Includes KPI cards, period-over-period changes, top channels, top pages, top content, and recommended next actions
• Schedule by site timezone, choose weekly day and send time, and send a manual test digest before launch
• Sending needs a free Insightistic account (no card, free forever) — everything else in the plugin works without one

= Addon Intelligence =

• Five free addons, every one unconditionally free to use: Email Automations, SEO Opportunity Finder, Anomaly Alerts, Content Performance Lab, and WooCommerce Intelligence for revenue, order, and product decisions
• Addon reports use cached GA4/GSC data to avoid unnecessary API usage
• System Status page checks credentials, cron, mail readiness, minified assets, tracker size, and WooCommerce availability
• Export/import non-secret plugin settings for faster migration and support

= Security =

• Service account authentication keys never expire, no OAuth callbacks
• All API keys and credentials are encrypted with AES-256-CBC before being stored in your database, using your WordPress auth salt as the encryption key
• Nonce-protected AJAX handlers; all inputs sanitised and escaped

= Performance =

• All analytics data is fetched via admin-only AJAX zero impact on frontend page load
• 15-minute transient caching minimises Google API quota usage
• Minified JS and CSS served in production (source files served when SCRIPT_DEBUG is on)
• Chart.js bundled locally no external CDN requests

== Installation ==

1. Upload the plugin folder to /wp-content/plugins/
2. Activate the plugin through the Plugins menu in WordPress
3. Go to Insightistic Settings and open the GA4 tab
4. Paste your Google Service Account JSON key (or use the "Import from JSON" button)
5. Enter your GA4 Property ID (numeric, e.g. 123456789)
6. Click Save Settings, then open the dashboard

GA4 Service Account setup:

1. Go to Google Cloud Console IAM & Admin Service Accounts
2. Create a new service account and download its JSON key file
3. In the plugin Settings GA4 tab, click Import from JSON and paste the key file contents
4. In your GA4 property, go to Admin Property Access Management and add the service account email with the Viewer role
5. Enter your GA4 Property ID and click Save

Search Console (optional):
Use the same service account email add it as a Full User in Google Search Console Settings Users and permissions.

PageSpeed (optional):
Create an API key in Google Cloud Console with the PageSpeed Insights API enabled and enter it in Settings PageSpeed.

== Frequently Asked Questions ==

= Does this slow down my site? =

No. All data is fetched in the WordPress admin via AJAX. The optional engagement tracking script is under 2 KB and is only loaded when you enable it.

= Why use a service account instead of OAuth? =

Service account tokens never expire and require no browser callback. OAuth tokens typically expire every 7 days and need periodic re-authorisation, which can silently break dashboards on shared or managed hosting.

= Are my API keys stored securely? =

Yes. Every credential is encrypted with AES-256-CBC using your site's unique WordPress auth salt before being written to the database. Keys are never stored in plaintext.

= Does the AI analysis run automatically? =

No. AI analysis is always triggered manually by clicking "Get AI Insights". This keeps you in full control of API usage and cost.

= Which AI providers are supported? =

OpenAI (GPT-4o Mini and above), Google Gemini (1.5 Flash and above), Anthropic Claude (Haiku and above), Groq (fast, low-cost Llama models), OpenRouter with free and paid models including Mistral, Llama, Gemma, Qwen, DeepSeek, and Phi, and Insightistic Cloud AI our own self-hosted Ollama models plus a Hermes SEO skill agent, free with a connected account and no key to manage.

= What does the engagement tracking script collect? =

When enabled, the script fires custom events to your GA4 property for: outbound link clicks, scroll depth milestones (25 / 50 / 75 / 100 %), file downloads (.pdf, .zip, etc.), and designated element clicks. No personally identifiable information is collected, no cookies are set, and no data is sent anywhere other than your own GA4 property.

= Is GA4 the only analytics platform supported? =

Yes. Insightistic is purpose-built for GA4. Universal Analytics was shut down by Google in July 2023.

= What date range does Search Console cover? =

Search Console data has a 23 day processing delay and covers up to 16 months of history. The plugin requests the last 90 days by default.

= Will this work on multisite? =

The plugin can be network-activated but each site requires its own credentials configured separately via its own Insightistic Settings page.

== Screenshots ==

1. Overview dashboard 8 stat cards, timeline chart, traffic source donut, top countries, pages, and channels
2. Search Console tab clicks, impressions, CTR, average position, top queries, top pages, and device breakdown
3. PageSpeed tab animated score rings for mobile and desktop, plus Core Web Vitals grid with pass/fail badges
4. AI Insights panel overall score, key findings, and prioritised recommendations
5. Settings page tabbed interface covering GA4, Search Console, PageSpeed, Engagement, AI, and Docs
6. Addons page five free modules: Email, SEO, Anomaly, Content Lab, and WooCommerce Intelligence

== Changelog ==

= 4.4.0 =

• Release: first public WordPressistic release package for Insightistic, keeping the current plugin version at 4.4.0 and preparing the plugin for clean public distribution.
• Change: Cloudflare Traffic Insights no l...