Changeset 3732074

Timestamp:

10/07/2026 08:07:53 AM (2 weeks ago)

Author:

wpveloxa

Message:

Release 1.0.2

Location:

iot-data-widget

Files:

• tags/1.0.2 (copied) (copied from iot-data-widget/trunk )
• tags/1.0.2/admin/class-diagnostics-page.php (modified) (7 diffs)
• tags/1.0.2/admin/class-settings-page.php (modified) (2 diffs)
• tags/1.0.2/admin/class-setup-wizard.php (modified) (6 diffs)
• tags/1.0.2/admin/views/diagnostics.php (modified) (3 diffs)
• tags/1.0.2/admin/views/general-settings-page.php (modified) (2 diffs)
• tags/1.0.2/admin/views/settings-page.php (modified) (1 diff)
• tags/1.0.2/admin/views/wizard/step-0-location.php (modified) (2 diffs)
• tags/1.0.2/includes/class-history-recorder.php (modified) (1 diff)
• tags/1.0.2/includes/class-http-client.php (added)
• tags/1.0.2/includes/class-local-network.php (added)
• tags/1.0.2/includes/class-plugin.php (modified) (5 diffs)
• tags/1.0.2/includes/class-rest-api.php (modified) (1 diff)
• tags/1.0.2/includes/class-shortcode.php (modified) (7 diffs)
• tags/1.0.2/includes/class-value-normalizer.php (modified) (1 diff)
• tags/1.0.2/includes/class-widget-usage-tracker.php (modified) (3 diffs)
• tags/1.0.2/includes/connectors/abstract-connector.php (modified) (1 diff)
• tags/1.0.2/includes/connectors/class-ha-connector.php (modified) (2 diffs)
• tags/1.0.2/includes/connectors/class-rest-connector.php (modified) (1 diff)
• tags/1.0.2/iot-data-widget.php (modified) (2 diffs)
• tags/1.0.2/languages/iot-data-widget.pot (modified) (42 diffs)
• tags/1.0.2/public/css/widget-styles.css (modified) (3 diffs)
• tags/1.0.2/readme.txt (modified) (5 diffs)
• tags/1.0.2/vendor/bin (added)
• trunk/admin/class-diagnostics-page.php (modified) (7 diffs)
• trunk/admin/class-settings-page.php (modified) (2 diffs)
• trunk/admin/class-setup-wizard.php (modified) (6 diffs)
• trunk/admin/views/diagnostics.php (modified) (3 diffs)
• trunk/admin/views/general-settings-page.php (modified) (2 diffs)
• trunk/admin/views/settings-page.php (modified) (1 diff)
• trunk/admin/views/wizard/step-0-location.php (modified) (2 diffs)
• trunk/includes/class-history-recorder.php (modified) (1 diff)
• trunk/includes/class-http-client.php (added)
• trunk/includes/class-local-network.php (added)
• trunk/includes/class-plugin.php (modified) (5 diffs)
• trunk/includes/class-rest-api.php (modified) (1 diff)
• trunk/includes/class-shortcode.php (modified) (7 diffs)
• trunk/includes/class-value-normalizer.php (modified) (1 diff)
• trunk/includes/class-widget-usage-tracker.php (modified) (3 diffs)
• trunk/includes/connectors/abstract-connector.php (modified) (1 diff)
• trunk/includes/connectors/class-ha-connector.php (modified) (2 diffs)
• trunk/includes/connectors/class-rest-connector.php (modified) (1 diff)
• trunk/iot-data-widget.php (modified) (2 diffs)
• trunk/languages/iot-data-widget.pot (modified) (42 diffs)
• trunk/public/css/widget-styles.css (modified) (3 diffs)
• trunk/readme.txt (modified) (5 diffs)
• trunk/vendor/bin (added)

iot-data-widget/tags/1.0.2/admin/class-diagnostics-page.php

@@ -131 +131 @@
                 $cron_jobs         = $this->cron_jobs_info();
                 $connections       = $this->connections_info();
-                $alert_rules       = $this->alert_manager->get_rules();
+                // Null = sekcja ukryta: alerty są Pro (klasa fizycznie tylko w paczce Pro).
+                $alert_rules       = class_exists( 'IOTDW_Alert_Evaluator' ) ? $this->alert_manager->get_rules() : null;
                 $connections_by_id = array_column( $this->connector_manager->get_connections(), null, 'id' );
                 $recent_errors     = IOTDW_Diagnostics_Logger::get_recent_errors();
@@ -152 +153 @@
          * @param array $cron_jobs         Z cron_jobs_info().
          * @param array $connections       Z connections_info().
-         * @param array $alert_rules       Z IOTDW_Alert_Manager::get_rules().
+         * @param array|null $alert_rules  Z IOTDW_Alert_Manager::get_rules(); null = sekcja ukryta (wersja darmowa).
          * @param array $connections_by_id Połączenia indeksowane po ID.
          * @param array $recent_errors     Z IOTDW_Diagnostics_Logger::get_recent_errors().
@@ -158 +159 @@
          * @return string
          */
-        private function build_report_text( array $environment, array $cron_jobs, array $connections, array $alert_rules, array $connections_by_id, array $recent_errors, array $data_sizes ): string {
+        private function build_report_text( array $environment, array $cron_jobs, array $connections, ?array $alert_rules, array $connections_by_id, array $recent_errors, array $data_sizes ): string {
                 // Code review v1.8: wcześniej wszystkie stringi w tej metodzie były
                 // gołym angielskim tekstem, niezgodnie z CLAUDE.md ("i18n od
@@ -264 +265 @@
                 $lines[] = '';
 
-                $lines[] = __( '== Alert rules ==', 'iot-data-widget' );
-                if ( empty( $alert_rules ) ) {
-                        $lines[] = __( 'None configured.', 'iot-data-widget' );
-                } else {
+                if ( null !== $alert_rules ) {
+                        $lines[] = __( '== Alert rules ==', 'iot-data-widget' );
+                        if ( empty( $alert_rules ) ) {
+                                $lines[] = __( 'None configured.', 'iot-data-widget' );
+                        }
                         foreach ( $alert_rules as $rule ) {
                                 $rule_connection = $connections_by_id[ $rule['connection_id'] ] ?? null;
@@ -285 +287 @@
                                 );
                         }
-                }
-                $lines[] = '';
+                        $lines[] = '';
+                }
 
                 $lines[] = __( '== Recent errors ==', 'iot-data-widget' );
@@ -328 +330 @@
                 global $wpdb;
 
-                $tables = array(
-                        __( 'Recorded value history', 'iot-data-widget' ) => $wpdb->prefix . IOTDW_History_Recorder::TABLE,
-                        __( 'Widget usage tracking', 'iot-data-widget' ) => $wpdb->prefix . IOTDW_Widget_Usage_Tracker::TABLE,
-                        __( 'Alert rules', 'iot-data-widget' ) => $wpdb->prefix . IOTDW_Alert_Manager::TABLE,
-                        __( 'MQTT cache', 'iot-data-widget' )  => $wpdb->prefix . IOTDW_Cron_Value_Cache::CACHE_TABLE,
-                        __( 'Error log', 'iot-data-widget' )   => $wpdb->prefix . IOTDW_Diagnostics_Logger::TABLE_ERROR_LOG,
-                );
+                // Tabele funkcji Pro tylko wtedy, gdy klasa Pro istnieje w paczce.
+                $tables = array();
+
+                if ( class_exists( 'IOTDW_Renderer_Chart' ) ) {
+                        $tables[ __( 'Recorded value history', 'iot-data-widget' ) ] = $wpdb->prefix . IOTDW_History_Recorder::TABLE;
+                }
+
+                $tables[ __( 'Widget usage tracking', 'iot-data-widget' ) ] = $wpdb->prefix . IOTDW_Widget_Usage_Tracker::TABLE;
+
+                if ( class_exists( 'IOTDW_Alert_Evaluator' ) ) {
+                        $tables[ __( 'Alert rules', 'iot-data-widget' ) ] = $wpdb->prefix . IOTDW_Alert_Manager::TABLE;
+                }
+
+                if ( class_exists( 'IOTDW_MQTT_Poll_Engine' ) ) {
+                        $tables[ __( 'MQTT cache', 'iot-data-widget' ) ] = $wpdb->prefix . IOTDW_Cron_Value_Cache::CACHE_TABLE;
+                }
+
+                $tables[ __( 'Error log', 'iot-data-widget' ) ] = $wpdb->prefix . IOTDW_Diagnostics_Logger::TABLE_ERROR_LOG;
 
                 $rows = array();
@@ -478 +491 @@
          */
         private function cron_jobs_info(): array {
+                // 'requires_class' — crony funkcji Pro tylko wtedy, gdy klasa Pro
+                // fizycznie istnieje w paczce (wersja darmowa ich nie ma, więc wiersz
+                // "Poll MQTT brokers" itp. był tam mylący).
                 $hooks = array(
-                        IOTDW_History_Recorder::SNAPSHOT_HOOK => __( 'Record value history', 'iot-data-widget' ),
-                        IOTDW_History_Recorder::CLEANUP_HOOK  => __( 'Clean up old history & error log', 'iot-data-widget' ),
-                        IOTDW_Cron_Value_Cache::POLL_HOOK     => __( 'Poll MQTT brokers', 'iot-data-widget' ),
-                        // Dopisane (code review) — brakowało tu odkąd IOTDW_Email_Report_Sender
-                        // powstał (v1.3 Tydzień 7); ten cron logował się już wtedy do
-                        // IOTDW_Diagnostics_Logger, po prostu nikt nie dodał go na tej liście.
-                        IOTDW_Email_Report_Sender::SEND_HOOK  => __( 'Send due email reports', 'iot-data-widget' ),
+                        IOTDW_History_Recorder::SNAPSHOT_HOOK => array( __( 'Record value history', 'iot-data-widget' ), 'IOTDW_Renderer_Chart' ),
+                        IOTDW_History_Recorder::CLEANUP_HOOK  => array( __( 'Clean up old history & error log', 'iot-data-widget' ), '' ),
+                        IOTDW_Cron_Value_Cache::POLL_HOOK     => array( __( 'Poll MQTT brokers', 'iot-data-widget' ), 'IOTDW_MQTT_Poll_Engine' ),
+                        IOTDW_Email_Report_Sender::SEND_HOOK  => array( __( 'Send due email reports', 'iot-data-widget' ), 'IOTDW_Email_Report_Dispatcher' ),
                 );
 
                 $jobs = array();
 
-                foreach ( $hooks as $hook => $label ) {
+                foreach ( $hooks as $hook => list( $label, $requires_class ) ) {
+                        if ( '' !== $requires_class && ! class_exists( $requires_class ) ) {
+                                continue;
+                        }
+
                         $jobs[] = array(
                                 'hook'         => $hook,

iot-data-widget/tags/1.0.2/admin/class-settings-page.php

@@ -171 +171 @@
                 $remove_data_on_uninstall = (bool) ( $settings['remove_data_on_uninstall'] ?? false );
                 $stale_threshold_minutes  = (int) ( $settings[ IOTDW_Renderer::STALE_THRESHOLD_SETTING_KEY ] ?? IOTDW_Renderer::DEFAULT_STALE_MINUTES );
+                $allow_local_network      = ! empty( $settings[ IOTDW_Http_Client::SETTING_KEY ] );
+                $can_manage_local_network = IOTDW_Http_Client::can_manage_local_network();
                 $import_result            = get_transient( $this->import_result_transient_key() );
 
@@ -219 +221 @@
                 $settings['show_branding']            = ! empty( $_POST['show_branding'] );
                 $settings['remove_data_on_uninstall'] = ! empty( $_POST['remove_data_on_uninstall'] );
+
+                // Na multisite tylko manage_network_options (patrz IOTDW_Http_Client::can_manage_local_network()).
+                if ( IOTDW_Http_Client::can_manage_local_network() ) {
+                        $settings[ IOTDW_Http_Client::SETTING_KEY ] = ! empty( $_POST['allow_local_network'] );
+                }
 
                 if ( isset( $_POST['stale_threshold_minutes'] ) ) {

iot-data-widget/tags/1.0.2/admin/class-setup-wizard.php

@@ -898 +898 @@
          *
          * @param string               $push_type  Wybrana platforma.
-         * @param array<string,string> $connection Zapisany kanał (połączenie 'push').
+         * @param array<string,string> $iotdw_connection Zapisany kanał (połączenie 'push').
          */
         private function render_push_snippet_step( string $push_type, array $iotdw_connection ): void {
@@ -975 +975 @@
                         // jednego, rzadkiego przypadku brzegowego.
                         wp_safe_redirect(
-                                add_query_arg( 'iotdw_notice', 'connection_limit', admin_url( 'admin.php?page=iot-data-widget' ) )
+                                add_query_arg( 'iotdw_notice', 'demo_failed', admin_url( 'admin.php?page=iot-data-widget' ) )
                         );
                         exit;
@@ -1051 +1051 @@
          * przed obiema tymi ścieżkami.
          *
-         * @param string $type_key      Wybrany klucz typu (już zweryfikowany przez find_type() w render_page()).
+         * @param string $iotdw_type_key      Wybrany klucz typu (już zweryfikowany przez find_type() w render_page()).
          * @param string $connection_id ID istniejącego połączenia (powrót z Kroku 3), albo pusty string dla nowego.
          * @param string $mode          'pull'/'push'/'' — do linku "Back" (zgłoszenie 2026-09-07: bez tego "Back" gubił mode/group i wracał na Krok 0 zamiast na Krok 1).
@@ -1098 +1098 @@
          * pojedynczym entity=..., bez zapisu, bez zmian w tym przepływie.
          *
-         * @param string                $type_key   Wybrany klucz typu (do linku "Back").
-         * @param array<string, string> $connection Zapisane połączenie (Krok 2).
+         * @param string                $iotdw_type_key   Wybrany klucz typu (do linku "Back").
+         * @param array<string, string> $iotdw_connection Zapisane połączenie (Krok 2).
          */
         private function render_step_3( string $iotdw_type_key, array $iotdw_connection ): void {
@@ -1235 +1235 @@
          * krok 3), nie trzeba tego dublować w kreatorze.
          *
-         * @param string                $type_key    Wybrany klucz typu (do linku "Back").
-         * @param array<string, string> $connection  Zapisane połączenie.
+         * @param string                $iotdw_type_key    Wybrany klucz typu (do linku "Back").
+         * @param array<string, string> $iotdw_connection  Zapisane połączenie.
          * @param string[]              $entity_ids  Encje zaznaczone w Kroku 3 — jedna dla konektorów nie-Listable
          *                                            (bez zmian), kilka dla Listable (kreator multi-entity, v1.9 Tydzień 5).
@@ -1325 +1325 @@
          *
          * @param string                $type_key   Wybrany klucz typu.
-         * @param array<string, string> $connection Zapisane połączenie — użyte przez wymagany niżej widok (step-5-done.php), nie bezpośrednio w tej metodzie.
+         * @param array<string, string> $iotdw_connection Zapisane połączenie — użyte przez wymagany niżej widok (step-5-done.php), nie bezpośrednio w tej metodzie.
          * @param string[]              $entity_ids Encje zaznaczone w Kroku 3 (jedna albo kilka, v1.9) — jak wyżej, użyte przez widok.
          */

iot-data-widget/tags/1.0.2/admin/views/diagnostics.php

@@ -10 +10 @@
  * @var array<int, array{hook: string, label: string, is_scheduled: bool, next_run: int|false, last_run: array{ran_at: string, success: bool, message: string}|null}> $cron_jobs Zaplanowane zadania.
  * @var array<int, array{name: string, connector_label: string, last_checked_at: string|null, last_status: string|null, consecutive_errors: int, last_error_message: string|null, is_push: bool, push_active: bool|null, last_received_at: string|null}> $connections Skonfigurowane połączenia + ich status.
- * @var array<int, array<string, mixed>>     $alert_rules       Zapisane reguły alertów (IOTDW_Alert_Manager::get_rules()).
+ * @var array<int, array<string, mixed>>|null $alert_rules       Zapisane reguły alertów (IOTDW_Alert_Manager::get_rules()); null = wersja darmowa, sekcja ukryta.
  * @var array<string, array<string, string>> $connections_by_id Połączenia indeksowane po ID (do nazw w tabeli reguł alertów).
  * @var array<int, array{id: int, occurred_at: string, source: string, message: string}> $recent_errors Najnowsze wpisy logu błędów.
@@ -233 +233 @@
         ?>
 
+        <?php if ( null !== $alert_rules ) : // Alerty są Pro — na wersji darmowej sekcji nie ma. ?>
         <h2><?php esc_html_e( 'Alert rules', 'iot-data-widget' ); ?></h2>
         <?php
@@ -273 +274 @@
         require __DIR__ . '/partials/data-table.php';
         ?>
+        <?php endif; ?>
 
         <h2><?php esc_html_e( 'Recent errors', 'iot-data-widget' ); ?></h2>

iot-data-widget/tags/1.0.2/admin/views/general-settings-page.php

@@ -16 +16 @@
  * @var string                             $export_default_to     Domyślna data końcowa formularza eksportu CSV (v1.3 Tydzień 6).
  * @var int                                $stale_threshold_minutes Próg "stare dane" w minutach (v2.0, docs/mvp-v2-0-push-mode-plan.md §5).
+ * @var bool                               $allow_local_network   "Allow local network addresses" (1.0.2, IOTDW_Http_Client).
+ * @var bool                               $can_manage_local_network Czy bieżący użytkownik może to zmienić (multisite: manage_network_options).
  */
 
@@ -119 +121 @@
                         </tr>
                         <tr>
+                                <th><?php esc_html_e( 'Local network', 'iot-data-widget' ); ?></th>
+                                <td>
+                                        <label>
+                                                <input type="checkbox" name="allow_local_network" value="1" <?php checked( $allow_local_network ); ?> <?php disabled( ! $can_manage_local_network ); ?> />
+                                                <?php esc_html_e( 'Allow local network addresses', 'iot-data-widget' ); ?>
+                                        </label>
+                                        <p class="description">
+                                                <?php esc_html_e( 'Turn this on only if WordPress runs on the same network as your devices (e.g. a home server) and connects to addresses like 192.168.x.x or homeassistant.local. Off by default: it stops a misconfigured or malicious URL from reaching other services on your server\'s network. Cloud metadata and link-local addresses are always blocked.', 'iot-data-widget' ); ?>
+                                        </p>
+                                        <?php if ( ! $can_manage_local_network ) : ?>
+                                                <p class="description"><?php esc_html_e( 'On a multisite network, only a network administrator can change this.', 'iot-data-widget' ); ?></p>
+                                        <?php endif; ?>
+                                </td>
+                        </tr>
+                        <tr>
                                 <th><?php esc_html_e( 'Uninstall', 'iot-data-widget' ); ?></th>
                                 <td>

iot-data-widget/tags/1.0.2/admin/views/settings-page.php

@@ -32 +32 @@
                 $iotdw_current_notice = sanitize_key( wp_unslash( $_GET['iotdw_notice'] ) ); // phpcs:ignore WordPress.Security.NonceVerification.Recommended
 
-                if ( 'connection_limit' === $iotdw_current_notice ) {
+                if ( 'demo_failed' === $iotdw_current_notice ) {
+                        // Dawniej "The free version supports one connection" — pozostałość
+                        // po zniesionym limicie; zapis połączenia demo po prostu się nie udał.
                         $iotdw_notice_type    = 'error';
-                        $iotdw_notice_message = __( 'The free version supports one connection. Upgrade to Pro for unlimited connections.', 'iot-data-widget' );
+                        $iotdw_notice_message = __( 'The demo connection could not be saved. Please try again, or add a connection manually below.', 'iot-data-widget' );
                 } else {
                         $iotdw_notice_type    = 'success';

iot-data-widget/tags/1.0.2/admin/views/wizard/step-0-location.php

@@ -28 +28 @@
                         <?php esc_html_e( 'On external/shared hosting (typical) — my device sends data to my site', 'iot-data-widget' ); ?>
                 </a>
-                <a class="button button-hero" href="<?php echo esc_url( add_query_arg( 'mode', 'pull', $iotdw_base_url ) ); ?>">
+                <?php // 1.0.2: ta opcja włącza też "Allow local network addresses" (IOTDW_Local_Network::handle_enable()). ?>
+                <a class="button button-hero" href="<?php echo esc_url( IOTDW_Local_Network::enable_url( add_query_arg( 'mode', 'pull', $iotdw_base_url ) ) ); ?>">
                         <?php esc_html_e( 'Same network as my devices (Raspberry Pi, NAS, home server) — my site fetches data from the device', 'iot-data-widget' ); ?>
                 </a>
@@ -45 +46 @@
                 ?>
                 <a class="button button-hero" href="<?php echo esc_url( add_query_arg( 'mode', 'pull', $iotdw_base_url ) ); ?>">
-                        <?php esc_html_e( 'On external/shared hosting, but my device has its own cloud service (Shelly Cloud, Supla, a publicly-reachable Home Assistant) — my site fetches data from there', 'iot-data-widget' ); ?>
+                        <?php
+                        // Shelly Cloud i preset Supla są Pro — na wersji darmowej oznaczone.
+                        if ( class_exists( 'IOTDW_Connector_Presets' ) ) {
+                                esc_html_e( 'On external/shared hosting, but my device has its own cloud service (Shelly Cloud, Supla, a publicly-reachable Home Assistant) — my site fetches data from there', 'iot-data-widget' );
+                        } else {
+                                esc_html_e( 'On external/shared hosting, but my device has its own cloud service (a publicly-reachable Home Assistant; Shelly Cloud and Supla in Pro) — my site fetches data from there', 'iot-data-widget' );
+                        }
+                        ?>
                 </a>
         </p>

iot-data-widget/tags/1.0.2/includes/class-history-recorder.php

@@ -219 +219 @@
                 // phpcs:enable
 
+                $keys = array();
+
                 foreach ( $pairs as $pair ) {
-                        $this->record_snapshot( $pair->connection_id, $pair->entity_id );
+                        $keys[ $pair->connection_id . '|' . $pair->entity_id ] = array( $pair->connection_id, $pair->entity_id );
+                }
+
+                // Wykresy w obszarach widgetów motywu (1.0.2) — nie ma ich w tabeli.
+                foreach ( ( new IOTDW_Widget_Usage_Tracker( $this->connector_manager ) )->widget_area_usage() as $pair ) {
+                        if ( in_array( $pair['style'], array( 'chart', 'sparkline' ), true ) ) {
+                                $keys[ $pair['connection_id'] . '|' . $pair['entity_id'] ] = array( $pair['connection_id'], $pair['entity_id'] );
+                        }
+                }
+
+                foreach ( $keys as list( $connection_id, $entity_id ) ) {
+                        $this->record_snapshot( $connection_id, $entity_id );
                 }
         }

iot-data-widget/tags/1.0.2/includes/class-plugin.php

@@ -266 +266 @@
                 $this->init_modules();
                 $this->maybe_migrate_credentials();
+                // Osobno od maybe_upgrade_db() (ta nie czyta połączeń) — jednorazowo,
+                // dopóki ustawienie "Allow local network addresses" nie ma wartości.
+                IOTDW_Local_Network::maybe_migrate( $this->connector_manager );
 
                 add_action( 'admin_enqueue_scripts', array( $this, 'maybe_enqueue_admin_toolkit_css' ) );
@@ -327 +330 @@
                 IOTDW_Push_Channel_Manager::create_table();
 
+                // 1.0.2: aktualizacja z wersji darmowej <= 1.0.1 zdejmuje z
+                // harmonogramu crony funkcji Pro (patrz sync_cron_events()).
+                self::sync_cron_events();
+
                 update_option( self::DB_VERSION_OPTION, IOTDW_VERSION );
+        }
+
+        /**
+         * Planuje crony wtyczki — te funkcji Pro tylko wtedy, gdy plik Pro
+         * fizycznie istnieje w paczce (ten sam test file_exists() co
+         * init_modules()), w przeciwnym razie zdejmuje je z harmonogramu.
+         * Wersja darmowa <= 1.0.1 planowała wszystkie cztery (zgłoszenie
+         * 2026-10-06): MQTT/raporty nic nie robiły, a snapshot historii odpytywał
+         * urządzenia dla wykresów, których wersja darmowa nie wyświetla.
+         * Wołane przy aktywacji i przy każdej zmianie wersji.
+         */
+        public static function sync_cron_events(): void {
+                $premium = IOTDW_PLUGIN_DIR . 'includes/premium/';
+
+                // Niestandardowe harmonogramy muszą być znane, zanim wp_schedule_event() ich użyje.
+                add_filter( 'cron_schedules', array( 'IOTDW_History_Recorder', 'register_cron_schedule' ) ); // phpcs:ignore WordPress.WP.CronInterval.ChangeDetected
+                add_filter( 'cron_schedules', array( 'IOTDW_Cron_Value_Cache', 'register_cron_schedule' ) ); // phpcs:ignore WordPress.WP.CronInterval.ChangeDetected
+
+                $events = array(
+                        // Historia zasila wykresy/sparkline i alerty — obie funkcje Pro.
+                        IOTDW_History_Recorder::SNAPSHOT_HOOK => array( IOTDW_History_Recorder::CRON_SCHEDULE, file_exists( $premium . 'class-renderer-chart.php' ) || file_exists( $premium . 'class-alert-evaluator.php' ) ),
+                        // Czyści też dziennik błędów — potrzebny na obu wersjach.
+                        IOTDW_History_Recorder::CLEANUP_HOOK  => array( 'daily', true ),
+                        IOTDW_Cron_Value_Cache::POLL_HOOK     => array( IOTDW_Cron_Value_Cache::CRON_SCHEDULE, file_exists( $premium . 'class-mqtt-poll-engine.php' ) ),
+                        IOTDW_Email_Report_Sender::SEND_HOOK  => array( 'hourly', file_exists( $premium . 'class-email-report-dispatcher.php' ) ),
+                );
+
+                foreach ( $events as $hook => list( $recurrence, $wanted ) ) {
+                        if ( ! $wanted ) {
+                                wp_clear_scheduled_hook( $hook );
+                        } elseif ( ! wp_next_scheduled( $hook ) ) {
+                                wp_schedule_event( time(), $recurrence, $hook );
+                        }
+                }
         }
 
@@ -373 +414 @@
                 }
 
+                require_once IOTDW_PLUGIN_DIR . 'includes/class-http-client.php';
+                require_once IOTDW_PLUGIN_DIR . 'includes/class-local-network.php';
                 require_once IOTDW_PLUGIN_DIR . 'includes/class-value-normalizer.php';
                 require_once IOTDW_PLUGIN_DIR . 'includes/class-json-path.php';
@@ -557 +600 @@
                 $this->mqtt_poller   = new IOTDW_Cron_Value_Cache( $this->connector_manager );
                 $this->settings_page = new IOTDW_Settings_Page( $this->connector_manager, $this->widget_usage_tracker );
+                // 1.0.2 — "Allow local network addresses": powiadomienie + kreator (same hooki).
+                new IOTDW_Local_Network();
                 // alert_manager (skeleton: CRUD + schemat) zostaje zawsze —
                 // IOTDW_Diagnostics_Page je wstrzykuje (raport "Alert rules" działa
@@ -623 +668 @@
                 update_option( self::DB_VERSION_OPTION, IOTDW_VERSION );
 
-                // Rejestrujemy niestandardowe harmonogramy od razu — inaczej
-                // wp_schedule_event() poniżej nie znalazłby ich w wp_get_schedules().
-                add_filter( 'cron_schedules', array( 'IOTDW_History_Recorder', 'register_cron_schedule' ) ); // phpcs:ignore WordPress.WP.CronInterval.ChangeDetected
-                add_filter( 'cron_schedules', array( 'IOTDW_Cron_Value_Cache', 'register_cron_schedule' ) ); // phpcs:ignore WordPress.WP.CronInterval.ChangeDetected
-
-                if ( ! wp_next_scheduled( IOTDW_History_Recorder::SNAPSHOT_HOOK ) ) {
-                        wp_schedule_event( time(), IOTDW_History_Recorder::CRON_SCHEDULE, IOTDW_History_Recorder::SNAPSHOT_HOOK );
-                }
-
-                if ( ! wp_next_scheduled( IOTDW_History_Recorder::CLEANUP_HOOK ) ) {
-                        wp_schedule_event( time(), 'daily', IOTDW_History_Recorder::CLEANUP_HOOK );
-                }
-
-                if ( ! wp_next_scheduled( IOTDW_Cron_Value_Cache::POLL_HOOK ) ) {
-                        wp_schedule_event( time(), IOTDW_Cron_Value_Cache::CRON_SCHEDULE, IOTDW_Cron_Value_Cache::POLL_HOOK );
-                }
-
-                // Co godzinę — częstotliwość dzienna/tygodniowa nie wymaga precyzji
-                // większej niż to (patrz IOTDW_Email_Report_Sender::is_due()), a
-                // wbudowany harmonogram 'hourly' istnieje zawsze, bez rejestrowania
-                // własnego (w przeciwieństwie do History Recordera/MQTT Pollera).
-                if ( ! wp_next_scheduled( IOTDW_Email_Report_Sender::SEND_HOOK ) ) {
-                        wp_schedule_event( time(), 'hourly', IOTDW_Email_Report_Sender::SEND_HOOK );
-                }
+                self::sync_cron_events();
 
                 // Sygnał "pokaż kreator" dla IOTDW_Setup_Wizard::maybe_redirect_after_activation()

iot-data-widget/tags/1.0.2/includes/class-rest-api.php

@@ -618 +618 @@
                 }
 
+                // Wynik pokazywany wprost adminowi ("✓ …") — "false" z surowego bool
+                // JSON jako "Off", jak na karcie/liście.
+                if ( ! empty( $result['display_value'] ) ) {
+                        $result['display_value'] = IOTDW_Value_Normalizer::human_display( (string) $result['display_value'] );
+                }
+
                 return rest_ensure_response(
                         array(

iot-data-widget/tags/1.0.2/includes/class-shortcode.php

@@ -91 +91 @@
          */
         public function render( $atts ): string {
+                $html = $this->render_widget( $atts );
+
+                // Blokowy wrapper (1.0.2): motywy wyrównują swoje bloki do kolumny
+                // treści przez margin: auto, co nie działa na elementach inline-block
+                // (card/gauge stały przy krawędzi strony, np. w Twenty Twenty-One).
+                // Wrapper dostaje szerokość kolumny, widget stoi w nim do lewej.
+                // Pusty wynik (błąd ukryty przed gościem) — bez wrappera, żeby nie
+                // zostawiał pustego odstępu.
+                return '' === trim( $html ) ? $html : '<div class="iot-dw-widget-wrap">' . $html . '</div>';
+        }
+
+        /**
+         * Właściwe renderowanie widgetu (bez wrappera, patrz render()).
+         *
+         * @param array|string $atts Atrybuty shortcode.
+         * @return string
+         */
+        private function render_widget( $atts ): string {
                 $this->rendered_widget = true;
 
@@ -119 +137 @@
                 );
 
+                $this->enqueue_late( (string) $atts['style'] );
+
                 if ( 'list' === $atts['style'] ) {
                         return $this->render_list( $atts );
@@ -256 +276 @@
          *
          * @param IOTDW_Abstract_Connector $connector     Instancja konektora dla tego połączenia.
-         * @param array<string, mixed>      $connection_row Zapisane połączenie (musi zawierać 'id'/'connector', opcjonalnie 'preset') — do wyliczenia $min_ttl, patrz enforce_min_ttl().
-         * @param string                    $entity_id     ID/ścieżka encji.
-         * @param int                       $ttl           TTL cache dla udanej odpowiedzi (sekundy), zażądany przez shortcode/blok.
+         * @param array<string, mixed>     $connection_row Zapisane połączenie (musi zawierać 'id'/'connector', opcjonalnie 'preset') — do wyliczenia $min_ttl, patrz enforce_min_ttl().
+         * @param string                   $entity_id     ID/ścieżka encji.
+         * @param int                      $ttl           TTL cache dla udanej odpowiedzi (sekundy), zażądany przez shortcode/blok.
          * @return array Znormalizowana struktura danych konektora, ze stemplowanymi connection_id/entity_id.
          */
@@ -578 +598 @@
                 }
 
-                // v1.8 Tydzień 6 — tokeny (typografia/odstępy/cienie z Tygodnia 5)
-                // muszą się załadować przed widget-styles.css, które teraz z nich
-                // korzysta (var(--iot-dw-text-xl) itd.) — stąd jako zależność, nie
-                // tylko osobny enqueue obok.
+                $this->enqueue_styles();
+
+                // class_exists() (Guideline 5, 2026-09-24) — chart-widget.js/css są
+                // plikami premium-only, w paczce darmowej fizycznie nie istnieją.
+                if ( IOTDW_Widget_Usage_Tracker::content_has_style( $post->post_content, array( 'chart' ) ) ) {
+                        $this->enqueue_chart_assets();
+                }
+
+                // v1.8 Tydzień 3 — hybrydowe doładowanie. "chart" celowo poza listą
+                // stylów (patrz komentarz nagłówkowy public/js/widget-refresh.js).
+                if ( IOTDW_Widget_Usage_Tracker::content_has_style( $post->post_content, array( 'card', 'gauge', 'sparkline', 'list', 'grid' ) ) ) {
+                        $this->enqueue_refresh_script();
+                }
+        }
+
+        /**
+         * Późne ładowanie zasobów dla widgetu wyrenderowanego POZA treścią
+         * pojedynczego posta (1.0.2: obszar widgetów motywu klasycznego, lista
+         * wpisów, szablon) — maybe_enqueue_assets() widzi tylko post_content
+         * strony pojedynczej. WordPress drukuje style/skrypty dodane po wp_head
+         * w stopce. Tylko front-end — podglądy w adminie/REST mają własne.
+         *
+         * @param string $style Styl widgetu.
+         */
+        private function enqueue_late( string $style ): void {
+                if ( is_admin() || ! did_action( 'wp_enqueue_scripts' ) || ( defined( 'REST_REQUEST' ) && REST_REQUEST ) ) {
+                        return;
+                }
+
+                $this->enqueue_styles();
+
+                if ( 'chart' === $style ) {
+                        $this->enqueue_chart_assets();
+                } else {
+                        $this->enqueue_refresh_script();
+                }
+        }
+
+        /**
+         * CSS widgetu + zmienne wyglądu (raz na żądanie).
+         */
+        private function enqueue_styles(): void {
+                if ( wp_style_is( 'iot-data-widget-theme', 'enqueued' ) ) {
+                        return;
+                }
+
+                // v1.8 Tydzień 6 — tokeny muszą się załadować przed widget-styles.css.
                 wp_enqueue_style(
                         'iot-data-widget-tokens',
@@ -607 +670 @@
                         IOTDW_Style_Settings::build_css_rule( IOTDW_Style_Settings::css_variables( IOTDW_Style_Settings::get_settings() ) )
                 );
-
-                // class_exists() (Guideline 5, 2026-09-24; dawniej dodatkowo
-                // iotdw_is_premium(), usunięte jako runtime license-check) — bez
-                // tego warunku strona z style="chart" na wersji darmowej ładowała
-                // Chart.js + chart-widget.js/css na próżno (renderer i tak pokazuje
-                // komunikat "wymaga Pro", nigdy nie odwołuje się do tych plików) —
-                // zbędny ciężar, a chart-widget.js/css są plikami premium-only
-                // (patrz @fs_premium_only w iot-data-widget.php), więc w paczce
-                // darmowej fizycznie nie istnieją.
-                if ( class_exists( 'IOTDW_Renderer_Chart' ) && IOTDW_Widget_Usage_Tracker::content_has_style( $post->post_content, array( 'chart' ) ) ) {
-                        wp_enqueue_script(
-                                'chart-js',
-                                IOTDW_PLUGIN_URL . 'public/js/vendor/chart.umd.min.js',
-                                array(),
-                                '4.5.1',
-                                true
-                        );
-
-                        wp_enqueue_script(
-                                'iot-data-widget-chart',
-                                IOTDW_PLUGIN_URL . 'public/js/chart-widget.js',
-                                array( 'chart-js' ),
-                                IOTDW_VERSION,
-                                true
-                        );
-
-                        wp_enqueue_style(
-                                'iot-data-widget-chart',
-                                IOTDW_PLUGIN_URL . 'public/css/chart-widget.css',
-                                array( 'iot-data-widget' ),
-                                IOTDW_VERSION
-                        );
-                }
-
-                // v1.8 Tydzień 3 — hybrydowe doładowanie. "chart" celowo poza listą
-                // stylów (patrz komentarz nagłówkowy public/js/widget-refresh.js) —
-                // strona z samym wykresem nie ładuje tego skryptu w ogóle.
-                if ( IOTDW_Widget_Usage_Tracker::content_has_style( $post->post_content, array( 'card', 'gauge', 'sparkline', 'list', 'grid' ) ) ) {
-                        wp_enqueue_script(
-                                'iot-data-widget-widget-refresh',
-                                IOTDW_PLUGIN_URL . 'public/js/widget-refresh.js',
-                                array(),
-                                IOTDW_VERSION,
-                                true
-                        );
-
-                        wp_localize_script(
-                                'iot-data-widget-widget-refresh',
-                                'iotdwWidgetRefresh',
-                                array( 'restUrl' => esc_url_raw( rest_url( IOTDW_Rest_Api::NAMESPACE ) ) )
-                        );
-                }
+        }
+
+        /**
+         * Chart.js + chart-widget.js/css (tylko Pro — pliki istnieją tylko tam).
+         */
+        private function enqueue_chart_assets(): void {
+                if ( ! class_exists( 'IOTDW_Renderer_Chart' ) || wp_script_is( 'iot-data-widget-chart', 'enqueued' ) ) {
+                        return;
+                }
+
+                wp_enqueue_script(
+                        'chart-js',
+                        IOTDW_PLUGIN_URL . 'public/js/vendor/chart.umd.min.js',
+                        array(),
+                        '4.5.1',
+                        true
+                );
+
+                wp_enqueue_script(
+                        'iot-data-widget-chart',
+                        IOTDW_PLUGIN_URL . 'public/js/chart-widget.js',
+                        array( 'chart-js' ),
+                        IOTDW_VERSION,
+                        true
+                );
+
+                wp_enqueue_style(
+                        'iot-data-widget-chart',
+                        IOTDW_PLUGIN_URL . 'public/css/chart-widget.css',
+                        array( 'iot-data-widget' ),
+                        IOTDW_VERSION
+                );
+        }
+
+        /**
+         * Skrypt jednorazowego odświeżenia wartości po załadowaniu strony.
+         */
+        private function enqueue_refresh_script(): void {
+                if ( wp_script_is( 'iot-data-widget-widget-refresh', 'enqueued' ) ) {
+                        return;
+                }
+
+                wp_enqueue_script(
+                        'iot-data-widget-widget-refresh',
+                        IOTDW_PLUGIN_URL . 'public/js/widget-refresh.js',
+                        array(),
+                        IOTDW_VERSION,
+                        true
+                );
+
+                wp_localize_script(
+                        'iot-data-widget-widget-refresh',
+                        'iotdwWidgetRefresh',
+                        array( 'restUrl' => esc_url_raw( rest_url( IOTDW_Rest_Api::NAMESPACE ) ) )
+                );
         }
 
@@ -702 +768 @@
          *
          * @param IOTDW_Abstract_Connector $connector Instancja konektora.
-         * @param string                    $entity_id ID encji / ścieżka do wartości.
+         * @param string                   $entity_id ID encji / ścieżka do wartości.
          * @return array
          */
@@ -738 +804 @@
                                 'entities' => $connector->list_entities(),
                                 'error'    => null,
+                        );
+                } catch ( \RuntimeException $e ) {
+                        // Celowe błędy konektora (brak połączenia, 401, adres zablokowany)
+                        // — komunikat już jest dla użytkownika, bez "Unexpected".
+                        return array(
+                                'entities' => array(),
+                                'error'    => $e->getMessage(),
                         );
                 } catch ( \Throwable $e ) {

iot-data-widget/tags/1.0.2/includes/class-value-normalizer.php

@@ -87 +87 @@
                 );
         }
+
+        /**
+         * Tekst stanu do pokazania człowiekowi: dosłowne "true"/"false" (surowy
+         * bool z JSON, np. Shelly switch:0.output) → przetłumaczone "On"/"Off",
+         * tak jak robi to już IOTDW_Shortcode dla karty/listy. Każdy inny tekst
+         * (HA "home", Tasmota "ON"...) wraca bez zmian. Nie dla webhooków —
+         * tam display_value zostaje surowe (kontrakt dla odbiorców maszynowych).
+         *
+         * @param string $display_value display_value z konektora.
+         * @return string
+         */
+        public static function human_display( string $display_value ): string {
+                switch ( strtolower( trim( $display_value ) ) ) {
+                        case 'true':
+                                return __( 'On', 'iot-data-widget' );
+                        case 'false':
+                                return __( 'Off', 'iot-data-widget' );
+                        default:
+                                return $display_value;
+                }
+        }
 }

iot-data-widget/tags/1.0.2/includes/class-widget-usage-tracker.php

@@ -51 +51 @@
                 add_action( 'save_post', array( $this, 'sync_post' ) );
                 add_action( 'before_delete_post', array( $this, 'remove_post' ) );
+
+                foreach ( array( 'sidebars_widgets', 'widget_block', 'widget_text', 'widget_custom_html', IOTDW_Connector_Manager::CONNECTIONS_OPTION ) as $option ) {
+                        add_action( 'update_option_' . $option, array( __CLASS__, 'flush_widget_area_usage' ) );
+                        add_action( 'add_option_' . $option, array( __CLASS__, 'flush_widget_area_usage' ) );
+                }
+        }
+
+        /**
+         * Transient z parami użytymi w obszarach widgetów motywu klasycznego.
+         */
+        const WIDGET_AREA_TRANSIENT = 'iotdw_widget_area_usage';
+
+        /**
+         * Typy widgetów, w których treści szukamy [iotdw_widget] (id_base => pole treści).
+         */
+        const WIDGET_CONTENT_FIELDS = array(
+                'block'       => 'content',
+                'text'        => 'text',
+                'custom_html' => 'content',
+        );
+
+        /**
+         * Kasuje cache par z obszarów widgetów (zmiana widgetów/pasków/połączeń).
+         */
+        public static function flush_widget_area_usage(): void {
+                delete_transient( self::WIDGET_AREA_TRANSIENT );
+        }
+
+        /**
+         * Użycie widgetów w AKTYWNYCH obszarach widgetów motywu klasycznego —
+         * odpowiednik wierszy tabeli użycia dla postów (to samo: connection_id,
+         * entity_id, style), ale liczony z opcji widgetów zamiast zapisywany,
+         * żeby nie zmieniać schematu tabeli (post_id jest kluczem jej
+         * czyszczenia). Widgety nieaktywne (wp_inactive_widgets) się nie
+         * liczą — nie są nigdzie wyświetlane. Cache w transiencie, kasowany przy
+         * każdej zmianie widgetów/pasków/połączeń (patrz konstruktor).
+         *
+         * Konsumenci: is_publicly_used() (/widget-data), odpytywanie MQTT
+         * (IOTDW_MQTT_Poll_Engine) i zapis historii (IOTDW_History_Recorder).
+         *
+         * @return array<int, array{connection_id: string, entity_id: string, style: string}>
+         */
+        public function widget_area_usage(): array {
+                $cached = get_transient( self::WIDGET_AREA_TRANSIENT );
+
+                if ( is_array( $cached ) && ( array() === $cached || isset( $cached[0]['style'] ) ) ) {
+                        return $cached;
+                }
+
+                $usage = array();
+                // Opcja wprost — wp_get_sidebars_widgets() poza adminem zapamiętuje
+                // wynik w globalnej zmiennej na całe żądanie.
+                $sidebars = get_option( 'sidebars_widgets', array() );
+                $sidebars = is_array( $sidebars ) ? $sidebars : array();
+
+                foreach ( $sidebars as $sidebar_id => $widget_ids ) {
+                        if ( 'wp_inactive_widgets' === $sidebar_id || 'array_version' === $sidebar_id || ! is_array( $widget_ids ) ) {
+                                continue;
+                        }
+
+                        foreach ( $widget_ids as $widget_id ) {
+                                if ( ! preg_match( '/^(.+)-(\d+)$/', (string) $widget_id, $m ) || ! isset( self::WIDGET_CONTENT_FIELDS[ $m[1] ] ) ) {
+                                        continue;
+                                }
+
+                                $instances = get_option( 'widget_' . $m[1], array() );
+                                $content   = $instances[ (int) $m[2] ][ self::WIDGET_CONTENT_FIELDS[ $m[1] ] ] ?? '';
+
+                                if ( ! is_string( $content ) || '' === $content ) {
+                                        continue;
+                                }
+
+                                foreach ( $this->extract_tracked_pairs( $content ) as $pair ) {
+                                        $usage[ $pair['connection_id'] . '|' . $pair['entity_id'] . '|' . $pair['style'] ] = $pair;
+                                }
+                        }
+                }
+
+                $usage = array_values( $usage );
+
+                set_transient( self::WIDGET_AREA_TRANSIENT, $usage, DAY_IN_SECONDS );
+
+                return $usage;
         }
 
@@ -201 +284 @@
          * kwalifikują się — nie ma dla nich żadnego posta do zweryfikowania.
          *
+         * 1.0.2: kwalifikuje się też widget w AKTYWNYM obszarze widgetów motywu
+         * klasycznego (patrz widget_area_usage()) — wyświetlany publicznie tak
+         * samo jak opublikowany post. Wcześniej taki widget nigdy się nie
+         * odświeżał (404 z /widget-data).
+         *
          * @param string $connection_id ID połączenia (kanoniczne, nie nazwa).
          * @param string $entity_id     ID encji.
@@ -228 +316 @@
                         // ma, ale żądający je zna (poprawne ciasteczko).
                         if ( null !== $post && ! post_password_required( $post ) ) {
+                                return true;
+                        }
+                }
+
+                foreach ( $this->widget_area_usage() as $pair ) {
+                        if ( $pair['connection_id'] === $connection_id && $pair['entity_id'] === $entity_id ) {
                                 return true;
                         }

iot-data-widget/tags/1.0.2/includes/connectors/abstract-connector.php

@@ -132 +132 @@
                 }
 
+                if ( null !== IOTDW_Http_Client::check_blocked( $base_url ) ) {
+                        // Odrzucone przed wysłaniem — komunikat IOTDW_Http_Client już mówi dlaczego.
+                        return $message;
+                }
+
                 return $message . ' ' . sprintf(
                         /* translators: %s: the local-network host/IP that was configured */

iot-data-widget/tags/1.0.2/includes/connectors/class-ha-connector.php

@@ -54 +54 @@
          */
         public function fetch_data( string $entity_id ): array {
-                $response = wp_remote_get(
+                $response = IOTDW_Http_Client::get(
                         $this->base_url . '/api/states/' . rawurlencode( $entity_id ),
                         array(
@@ -137 +137 @@
                 // zwykle znacznie więcej danych niż pojedynczy odczyt encji, więc
                 // dłuższy zapas jest tu uzasadniony bez kosztu dla front-endu.
-                $response = wp_remote_get(
+                $response = IOTDW_Http_Client::get(
                         $this->base_url . '/api/states',
                         array(

iot-data-widget/tags/1.0.2/includes/connectors/class-rest-connector.php

@@ -153 +153 @@
                 }
 
-                $response = wp_remote_get(
+                $response = IOTDW_Http_Client::get(
                         $request_url,
                         array(

iot-data-widget/tags/1.0.2/iot-data-widget.php

@@ -4 +4 @@
  * Plugin Name:       IoT Data Widget
  * Description:       Displays live data from smart home devices (Home Assistant, REST API, MQTT, Shelly/Tasmota/ESPHome presets, Shelly Cloud) on your website via shortcode and Gutenberg block, with a guided setup wizard, a redesigned and auto-refreshing appearance, and a built-in diagnostics page. Pro adds threshold alerts, email reports, and a public embed mode.
- * Version:           1.0.1
+ * Version:           1.0.2
  * Requires at least: 6.0
  * Requires PHP:      8.1
@@ -175 +175 @@
         // phpcs:enable WordPress.NamingConventions.PrefixAllGlobals
     }
-    define( 'IOTDW_VERSION', '1.0.1' );
+    define( 'IOTDW_VERSION', '1.0.2' );
     define( 'IOTDW_PLUGIN_FILE', __FILE__ );
     define( 'IOTDW_PLUGIN_DIR', plugin_dir_path( __FILE__ ) );

iot-data-widget/tags/1.0.2/languages/iot-data-widget.pot

@@ -3 +3 @@
 msgid ""
 msgstr ""
-"Project-Id-Version: IoT Data Widget 1.0.1\n"
+"Project-Id-Version: IoT Data Widget 1.0.2\n"
 "Report-Msgid-Bugs-To: https://wordpress.org/support/plugin/iot-data-widget\n"
 "Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
@@ -10 +10 @@
 "Content-Type: text/plain; charset=UTF-8\n"
 "Content-Transfer-Encoding: 8bit\n"
-"POT-Creation-Date: 2026-10-06T10:46:23+00:00\n"
+"POT-Creation-Date: 2026-10-06T17:55:40+00:00\n"
 "PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
 "X-Generator: WP-CLI 2.12.0\n"
@@ -82 +82 @@
 #: admin/class-email-reports-page.php:151
 #: admin/class-email-reports-page.php:230
-#: admin/class-settings-page.php:213
-#: admin/class-settings-page.php:239
-#: admin/class-settings-page.php:261
-#: admin/class-settings-page.php:367
-#: admin/class-settings-page.php:435
+#: admin/class-settings-page.php:215
+#: admin/class-settings-page.php:246
+#: admin/class-settings-page.php:268
+#: admin/class-settings-page.php:374
+#: admin/class-settings-page.php:442
 #: admin/class-style-settings-page.php:157
+#: includes/class-local-network.php:140
+#: includes/class-local-network.php:173
 #: includes/premium/class-history-csv-export.php:59
 msgid "Insufficient permissions."
@@ -140 +142 @@
 #: admin/class-alert-rules-page.php:216
 #: admin/class-email-reports-page.php:207
-#: admin/class-settings-page.php:416
+#: admin/class-settings-page.php:423
 msgid "Please choose a valid connection."
 msgstr ""
@@ -146 +148 @@
 #: admin/class-alert-rules-page.php:220
 #: admin/class-email-reports-page.php:211
-#: admin/class-settings-page.php:420
+#: admin/class-settings-page.php:427
 msgid "Entity is required."
 msgstr ""
@@ -172 +174 @@
 msgstr ""
 
-#: admin/class-diagnostics-page.php:169
+#: admin/class-diagnostics-page.php:170
 msgid "IoT Data Widget — Diagnostic Report"
 msgstr ""
 
 #. translators: %s: current date/time in UTC, e.g. "2026-08-13 12:00:00"
-#: admin/class-diagnostics-page.php:171
+#: admin/class-diagnostics-page.php:172
 #, php-format
 msgid "Generated: %s UTC"
 msgstr ""
 
-#: admin/class-diagnostics-page.php:174
+#: admin/class-diagnostics-page.php:175
 msgid "== Environment =="
 msgstr ""
 
 #. translators: %s: PHP version, e.g. "8.1.34"
-#: admin/class-diagnostics-page.php:176
+#: admin/class-diagnostics-page.php:177
 #, php-format
 msgid "PHP version: %s"
@@ -193 +195 @@
 
 #. translators: %s: WordPress version, e.g. "7.0.3"
-#: admin/class-diagnostics-page.php:178
+#: admin/class-diagnostics-page.php:179
 #, php-format
 msgid "WordPress version: %s"
@@ -199 +201 @@
 
 #. translators: %s: active theme name and version, e.g. "Twenty Twenty-Five 1.4"
-#: admin/class-diagnostics-page.php:180
+#: admin/class-diagnostics-page.php:181
 #, php-format
 msgid "Active theme: %s"
@@ -205 +207 @@
 
 #. translators: %s: PHP memory limit, e.g. "256M"
-#: admin/class-diagnostics-page.php:182
+#: admin/class-diagnostics-page.php:183
 #, php-format
 msgid "Memory limit: %s"
@@ -211 +213 @@
 
 #. translators: %s: PHP max execution time in seconds, e.g. "30"
-#: admin/class-diagnostics-page.php:184
+#: admin/class-diagnostics-page.php:185
 #, php-format
 msgid "Max execution time: %ss"
@@ -217 +219 @@
 
 #. translators: %s: comma-separated list of other active plugin names, or "None"
-#: admin/class-diagnostics-page.php:187
+#: admin/class-diagnostics-page.php:188
 #, php-format
 msgid "Other active plugins: %s"
 msgstr ""
 
-#: admin/class-diagnostics-page.php:188
+#: admin/class-diagnostics-page.php:189
 #: admin/views/diagnostics.php:76
 msgid "None"
 msgstr ""
 
-#: admin/class-diagnostics-page.php:192
+#: admin/class-diagnostics-page.php:193
 msgid "== Scheduled tasks =="
 msgstr ""
 
-#: admin/class-diagnostics-page.php:195
+#: admin/class-diagnostics-page.php:196
 #: admin/views/diagnostics.php:102
 msgid "Not scheduled"
 msgstr ""
 
-#: admin/class-diagnostics-page.php:197
+#: admin/class-diagnostics-page.php:198
 #: admin/views/diagnostics.php:104
 msgid "Scheduled, never run yet"
 msgstr ""
 
-#: admin/class-diagnostics-page.php:199
+#: admin/class-diagnostics-page.php:200
 #: admin/views/diagnostics.php:106
 msgid "Scheduled & running"
@@ -247 +249 @@
 
 #. translators: %s: reason the last cron run failed
-#: admin/class-diagnostics-page.php:203
+#: admin/class-diagnostics-page.php:204
 #, php-format
 msgid "Scheduled, last run failed: %s"
@@ -253 +255 @@
 
 #. translators: 1: task label, 2: status text, 3: next scheduled run, 4: last run time
-#: admin/class-diagnostics-page.php:213
+#: admin/class-diagnostics-page.php:214
 #, php-format
 msgid "%1$s: %2$s (next: %3$s, last: %4$s)"
 msgstr ""
 
-#: admin/class-diagnostics-page.php:222
+#: admin/class-diagnostics-page.php:223
 msgid "== Connections =="
 msgstr ""
 
-#: admin/class-diagnostics-page.php:224
-#: admin/class-diagnostics-page.php:268
+#: admin/class-diagnostics-page.php:225
+#: admin/class-diagnostics-page.php:270
 msgid "None configured."
 msgstr ""
 
-#: admin/class-diagnostics-page.php:229
+#: admin/class-diagnostics-page.php:230
 msgid "no data received yet"
 msgstr ""
 
-#: admin/class-diagnostics-page.php:230
+#: admin/class-diagnostics-page.php:231
 msgid "active"
 msgstr ""
 
-#: admin/class-diagnostics-page.php:230
+#: admin/class-diagnostics-page.php:231
 msgid "inactive"
 msgstr ""
 
 #. translators: 1: connection name, 2: connector type label, 3: push status text, 4: last received time
-#: admin/class-diagnostics-page.php:234
+#: admin/class-diagnostics-page.php:235
 #, php-format
 msgid "%1$s (%2$s): %3$s, last received %4$s"
 msgstr ""
 
-#: admin/class-diagnostics-page.php:245
+#: admin/class-diagnostics-page.php:246
 #: admin/views/diagnostics.php:208
-#: admin/views/diagnostics.php:327
+#: admin/views/diagnostics.php:329
 msgid "No data yet"
 msgstr ""
 
-#: admin/class-diagnostics-page.php:246
+#: admin/class-diagnostics-page.php:247
 #: admin/views/diagnostics.php:210
 msgid "OK"
 msgstr ""
 
-#: admin/class-diagnostics-page.php:246
+#: admin/class-diagnostics-page.php:247
 #: admin/views/diagnostics.php:212
 msgid "Error"
@@ -302 +304 @@
 
 #. translators: 1: connection name, 2: connector type label, 3: status text, 4: consecutive error count, 5: last checked time
-#: admin/class-diagnostics-page.php:250
+#: admin/class-diagnostics-page.php:251
 #, php-format
 msgid "%1$s (%2$s): %3$s, %4$d consecutive errors, last checked %5$s"
@@ -308 +310 @@
 
 #. translators: %s: last recorded error message for this connection
-#: admin/class-diagnostics-page.php:260
+#: admin/class-diagnostics-page.php:261
 #, php-format
 msgid "  Last error: %s"
 msgstr ""
 
-#: admin/class-diagnostics-page.php:266
+#: admin/class-diagnostics-page.php:268
 msgid "== Alert rules =="
 msgstr ""
 
 #. translators: 1: connection name, 2: entity ID, 3: comparison operator (> or <), 4: threshold value, 5: "Triggered" or "Normal", 6: optional " (last triggered: ...)" note or empty string
-#: admin/class-diagnostics-page.php:275
+#: admin/class-diagnostics-page.php:277
 #, php-format
 msgid "%1$s / %2$s: %3$s %4$s — %5$s%6$s"
 msgstr ""
 
-#: admin/class-diagnostics-page.php:280
-#: admin/views/diagnostics.php:251
+#: admin/class-diagnostics-page.php:282
+#: admin/views/diagnostics.php:252
 #: includes/premium/admin-views/alert-rules-page.php:54
 msgid "Triggered"
 msgstr ""
 
-#: admin/class-diagnostics-page.php:280
-#: admin/views/diagnostics.php:252
+#: admin/class-diagnostics-page.php:282
+#: admin/views/diagnostics.php:253
 #: includes/premium/admin-views/alert-rules-page.php:55
 msgid "Normal"
@@ -336 +338 @@
 
 #. translators: %s: last-triggered date/time in UTC
-#: admin/class-diagnostics-page.php:283
+#: admin/class-diagnostics-page.php:285
 #, php-format
 msgid " (last triggered: %s UTC)"
 msgstr ""
 
-#: admin/class-diagnostics-page.php:290
+#: admin/class-diagnostics-page.php:292
 msgid "== Recent errors =="
 msgstr ""
 
-#: admin/class-diagnostics-page.php:292
+#: admin/class-diagnostics-page.php:294
 msgid "None recorded."
 msgstr ""
 
 #. translators: 1: date/time in UTC, 2: error source, 3: error message
-#: admin/class-diagnostics-page.php:297
+#: admin/class-diagnostics-page.php:299
 #, php-format
 msgid "[%1$s UTC] %2$s: %3$s"
 msgstr ""
 
-#: admin/class-diagnostics-page.php:306
+#: admin/class-diagnostics-page.php:308
 msgid "== Data size =="
 msgstr ""
 
 #. translators: 1: table label (already translated), 2: row count
-#: admin/class-diagnostics-page.php:310
+#: admin/class-diagnostics-page.php:312
 #, php-format
 msgid "%1$s: %2$d"
 msgstr ""
 
-#: admin/class-diagnostics-page.php:331
+#: admin/class-diagnostics-page.php:336
 msgid "Recorded value history"
 msgstr ""
 
-#: admin/class-diagnostics-page.php:332
+#: admin/class-diagnostics-page.php:339
 msgid "Widget usage tracking"
 msgstr ""
 
-#: admin/class-diagnostics-page.php:333
-#: admin/views/diagnostics.php:235
+#: admin/class-diagnostics-page.php:342
+#: admin/views/diagnostics.php:236
 #: includes/premium/admin-views/alert-rules-page.php:36
 msgid "Alert rules"
 msgstr ""
 
-#: admin/class-diagnostics-page.php:334
+#: admin/class-diagnostics-page.php:346
 msgid "MQTT cache"
 msgstr ""
 
-#: admin/class-diagnostics-page.php:335
+#: admin/class-diagnostics-page.php:349
 msgid "Error log"
 msgstr ""
 
-#: admin/class-diagnostics-page.php:481
+#: admin/class-diagnostics-page.php:497
 msgid "Record value history"
 msgstr ""
 
-#: admin/class-diagnostics-page.php:482
+#: admin/class-diagnostics-page.php:498
 msgid "Clean up old history & error log"
 msgstr ""
 
-#: admin/class-diagnostics-page.php:483
+#: admin/class-diagnostics-page.php:499
 msgid "Poll MQTT brokers"
 msgstr ""
 
-#: admin/class-diagnostics-page.php:487
+#: admin/class-diagnostics-page.php:500
 msgid "Send due email reports"
 msgstr ""
@@ -421 +423 @@
 
 #: admin/class-settings-page.php:101
-#: admin/views/general-settings-page.php:25
+#: admin/views/general-settings-page.php:27
 msgid "IoT Data Widget — Settings"
 msgstr ""
@@ -429 +431 @@
 msgstr ""
 
-#: admin/class-settings-page.php:288
+#: admin/class-settings-page.php:295
 msgid "No file was uploaded, or the upload failed."
 msgstr ""
 
-#: admin/class-settings-page.php:292
+#: admin/class-settings-page.php:299
 msgid "The uploaded file is too large to be a valid export."
 msgstr ""
 
-#: admin/class-settings-page.php:298
+#: admin/class-settings-page.php:305
 msgid "Invalid upload."
 msgstr ""
 
-#: admin/class-settings-page.php:304
+#: admin/class-settings-page.php:311
 msgid "Could not read the uploaded file."
 msgstr ""
 
-#: admin/class-settings-page.php:424
+#: admin/class-settings-page.php:431
 msgid "Please choose a valid widget style."
 msgstr ""
@@ -649 +651 @@
 
 #: admin/views/connector-form.php:18
-#: admin/views/general-settings-page.php:264
+#: admin/views/general-settings-page.php:281
 #: admin/views/wizard/step-push-2-channel.php:35
 #: includes/premium/admin-views/alert-rule-form.php:20
@@ -663 +665 @@
 
 #: admin/views/connector-form.php:32
-#: admin/views/settings-page.php:139
+#: admin/views/settings-page.php:141
 msgid "Add connection"
 msgstr ""
@@ -723 +725 @@
 #: admin/views/diagnostics.php:93
 #: admin/views/diagnostics.php:154
-#: admin/views/diagnostics.php:241
+#: admin/views/diagnostics.php:242
 #: includes/premium/admin-views/alert-rules-page.php:44
 msgid "Status"
@@ -750 +752 @@
 #: admin/views/diagnostics.php:171
 #: admin/views/diagnostics.php:202
-#: admin/views/diagnostics.php:257
-#: admin/views/diagnostics.php:290
+#: admin/views/diagnostics.php:258
+#: admin/views/diagnostics.php:292
 #, php-format
 msgid "%s UTC"
@@ -761 +763 @@
 
 #: admin/views/diagnostics.php:151
-#: admin/views/diagnostics.php:238
-#: admin/views/general-settings-page.php:169
-#: admin/views/general-settings-page.php:227
-#: admin/views/general-settings-page.php:277
+#: admin/views/diagnostics.php:239
+#: admin/views/general-settings-page.php:186
+#: admin/views/general-settings-page.php:244
+#: admin/views/general-settings-page.php:294
 #: includes/premium/admin-views/alert-rule-form.php:33
 #: includes/premium/admin-views/alert-rules-page.php:40
@@ -775 +777 @@
 
 #: admin/views/diagnostics.php:152
-#: admin/views/settings-page.php:67
+#: admin/views/settings-page.php:69
 msgid "Type"
 msgstr ""
@@ -804 +806 @@
 
 #: admin/views/diagnostics.php:230
-#: admin/views/settings-page.php:128
+#: admin/views/settings-page.php:130
 msgid "No connections configured yet."
 msgstr ""
 
-#: admin/views/diagnostics.php:239
-#: admin/views/general-settings-page.php:182
-#: admin/views/general-settings-page.php:193
-#: admin/views/general-settings-page.php:228
-#: admin/views/general-settings-page.php:293
-#: admin/views/general-settings-page.php:304
+#: admin/views/diagnostics.php:240
+#: admin/views/general-settings-page.php:199
+#: admin/views/general-settings-page.php:210
+#: admin/views/general-settings-page.php:245
+#: admin/views/general-settings-page.php:310
+#: admin/views/general-settings-page.php:321
 #: admin/views/wizard/step-5-done.php:34
 #: admin/views/wizard/step-push-3-snippet.php:117
@@ -831 +833 @@
 msgstr[1] ""
 
-#: admin/views/diagnostics.php:240
+#: admin/views/diagnostics.php:241
 #: includes/premium/admin-views/alert-rule-form.php:81
 #: includes/premium/admin-views/alert-rules-page.php:42
@@ -837 +839 @@
 msgstr ""
 
-#: admin/views/diagnostics.php:242
+#: admin/views/diagnostics.php:243
 msgid "Last triggered"
 msgstr ""
 
-#: admin/views/diagnostics.php:271
+#: admin/views/diagnostics.php:272
 #: includes/premium/admin-views/alert-rules-page.php:81
 msgid "No alert rules configured yet."
 msgstr ""
 
-#: admin/views/diagnostics.php:276
+#: admin/views/diagnostics.php:278
 msgid "Recent errors"
 msgstr ""
 
-#: admin/views/diagnostics.php:279
+#: admin/views/diagnostics.php:281
 msgid "When"
 msgstr ""
 
-#: admin/views/diagnostics.php:280
+#: admin/views/diagnostics.php:282
 msgid "Source"
 msgstr ""
 
-#: admin/views/diagnostics.php:281
+#: admin/views/diagnostics.php:283
 msgid "Message"
 msgstr ""
 
-#: admin/views/diagnostics.php:300
+#: admin/views/diagnostics.php:302
 msgid "No errors recorded — everything is working."
 msgstr ""
 
-#: admin/views/diagnostics.php:305
+#: admin/views/diagnostics.php:307
 msgid "Data size"
 msgstr ""
 
-#: admin/views/diagnostics.php:311
+#: admin/views/diagnostics.php:313
 msgid "Table"
 msgstr ""
 
-#: admin/views/diagnostics.php:312
+#: admin/views/diagnostics.php:314
 msgid "Rows"
 msgstr ""
 
-#: admin/views/general-settings-page.php:29
+#: admin/views/general-settings-page.php:31
 msgid "Settings saved."
 msgstr ""
 
-#: admin/views/general-settings-page.php:30
+#: admin/views/general-settings-page.php:32
 msgid "Manually tracked entity added."
 msgstr ""
 
-#: admin/views/general-settings-page.php:31
+#: admin/views/general-settings-page.php:33
 msgid "Manually tracked entity removed."
 msgstr ""
 
 #. translators: %d: number of imported connections
-#: admin/views/general-settings-page.php:50
+#: admin/views/general-settings-page.php:52
 #, php-format
 msgid "Imported %d connection."
@@ -899 +901 @@
 
 #. translators: %d: number of skipped entries
-#: admin/views/general-settings-page.php:61
+#: admin/views/general-settings-page.php:63
 #, php-format
 msgid "Skipped %d entry:"
@@ -906 +908 @@
 msgstr[1] ""
 
-#: admin/views/general-settings-page.php:74
+#: admin/views/general-settings-page.php:76
 msgid "Imported connections need their password/authorization re-entered before use — these are never included in an export, by design."
 msgstr ""
 
-#: admin/views/general-settings-page.php:79
+#: admin/views/general-settings-page.php:81
 msgid "Import failed:"
 msgstr ""
 
-#: admin/views/general-settings-page.php:86
+#: admin/views/general-settings-page.php:88
 msgid "Branding"
 msgstr ""
 
-#: admin/views/general-settings-page.php:92
+#: admin/views/general-settings-page.php:94
 msgid "Front-end attribution"
 msgstr ""
 
-#: admin/views/general-settings-page.php:96
+#: admin/views/general-settings-page.php:98
 msgid "Show \"Powered by IoT Data Widget\" beneath widgets"
 msgstr ""
 
-#: admin/views/general-settings-page.php:99
+#: admin/views/general-settings-page.php:101
 msgid "Off by default. Turn this on if you'd like to credit the plugin beneath your widgets."
 msgstr ""
 
-#: admin/views/general-settings-page.php:104
+#: admin/views/general-settings-page.php:106
 msgid "Stale data threshold"
 msgstr ""
 
-#: admin/views/general-settings-page.php:114
+#: admin/views/general-settings-page.php:116
 msgid "minutes"
 msgstr ""
 
-#: admin/views/general-settings-page.php:116
+#: admin/views/general-settings-page.php:118
 msgid "Past this age, widgets show the value grayed out with a timestamp instead of implying it's current — mainly relevant for push channels, where a device can stop sending data without any explicit connection error."
 msgstr ""
 
-#: admin/views/general-settings-page.php:121
+#: admin/views/general-settings-page.php:123
+msgid "Local network"
+msgstr ""
+
+#: admin/views/general-settings-page.php:127
+msgid "Allow local network addresses"
+msgstr ""
+
+#: admin/views/general-settings-page.php:130
+msgid "Turn this on only if WordPress runs on the same network as your devices (e.g. a home server) and connects to addresses like 192.168.x.x or homeassistant.local. Off by default: it stops a misconfigured or malicious URL from reaching other services on your server's network. Cloud metadata and link-local addresses are always blocked."
+msgstr ""
+
+#: admin/views/general-settings-page.php:133
+msgid "On a multisite network, only a network administrator can change this."
+msgstr ""
+
+#: admin/views/general-settings-page.php:138
 msgid "Uninstall"
 msgstr ""
 
-#: admin/views/general-settings-page.php:125
+#: admin/views/general-settings-page.php:142
 msgid "Remove all plugin data when the plugin is deleted"
 msgstr ""
 
-#: admin/views/general-settings-page.php:128
+#: admin/views/general-settings-page.php:145
 msgid "Off by default. Deactivating the plugin (e.g. during an update) never touches your data either way — only checking this box AND THEN deleting the plugin from the Plugins screen removes connections, history, alerts and every other setting. Leave this unchecked if you might reinstall later."
 msgstr ""
 
-#: admin/views/general-settings-page.php:133
+#: admin/views/general-settings-page.php:150
 msgid "Save settings"
 msgstr ""
 
-#: admin/views/general-settings-page.php:136
+#: admin/views/general-settings-page.php:153
 msgid "Export connections"
 msgstr ""
 
-#: admin/views/general-settings-page.php:137
+#: admin/views/general-settings-page.php:154
 msgid "Downloads a JSON file with all your connections. Passwords and authorization tokens are never included — re-enter them after importing."
 msgstr ""
 
-#: admin/views/general-settings-page.php:141
+#: admin/views/general-settings-page.php:158
 msgid "Download export"
 msgstr ""
 
-#: admin/views/general-settings-page.php:144
+#: admin/views/general-settings-page.php:161
 msgid "Import connections"
 msgstr ""
 
-#: admin/views/general-settings-page.php:145
+#: admin/views/general-settings-page.php:162
 msgid "Imports connections from a previously exported JSON file. Connections with a matching ID are overwritten; others are added. Existing connections not present in the file are left untouched."
 msgstr ""
 
-#: admin/views/general-settings-page.php:150
+#: admin/views/general-settings-page.php:167
 msgid "Import"
 msgstr ""
 
-#: admin/views/general-settings-page.php:153
+#: admin/views/general-settings-page.php:170
 msgid "Export history data"
 msgstr ""
 
-#: admin/views/general-settings-page.php:156
+#: admin/views/general-settings-page.php:173
 #: includes/premium/class-history-csv-export.php:71
 msgid "CSV export of recorded history requires the Pro version."
 msgstr ""
 
-#: admin/views/general-settings-page.php:160
+#: admin/views/general-settings-page.php:177
 msgid "Downloads the raw recorded history for one connection/entity as a CSV file, for further analysis outside the plugin. Only entities used by a Chart/Sparkline widget (or manually tracked below) have history recorded."
 msgstr ""
 
-#: admin/views/general-settings-page.php:172
-#: admin/views/general-settings-page.php:280
+#: admin/views/general-settings-page.php:189
+#: admin/views/general-settings-page.php:297
 #: includes/premium/admin-views/alert-rule-form.php:40
 #: includes/premium/admin-views/email-report-form.php:40
@@ -1003 +1021 @@
 msgstr ""
 
-#: admin/views/general-settings-page.php:187
-#: admin/views/general-settings-page.php:298
+#: admin/views/general-settings-page.php:204
+#: admin/views/general-settings-page.php:315
 #: includes/premium/admin-views/alert-rule-form.php:58
 #: includes/premium/admin-views/email-report-form.php:58
@@ -1012 +1030 @@
 msgstr ""
 
-#: admin/views/general-settings-page.php:197
+#: admin/views/general-settings-page.php:214
 msgid "Useful if the entity was renamed/removed from the live connection since history was recorded."
 msgstr ""
 
-#: admin/views/general-settings-page.php:201
-#: admin/views/general-settings-page.php:315
+#: admin/views/general-settings-page.php:218
+#: admin/views/general-settings-page.php:332
 #: includes/premium/admin-views/alert-rule-form.php:75
 #: includes/premium/admin-views/email-report-form.php:75
@@ -1025 +1043 @@
 msgstr ""
 
-#: admin/views/general-settings-page.php:207
+#: admin/views/general-settings-page.php:224
 msgid "From"
 msgstr ""
 
-#: admin/views/general-settings-page.php:211
+#: admin/views/general-settings-page.php:228
 msgid "To"
 msgstr ""
 
-#: admin/views/general-settings-page.php:216
+#: admin/views/general-settings-page.php:233
 msgid "Download CSV"
 msgstr ""
 
-#: admin/views/general-settings-page.php:220
+#: admin/views/general-settings-page.php:237
 msgid "Manually tracked entities"
 msgstr ""
 
-#: admin/views/general-settings-page.php:222
+#: admin/views/general-settings-page.php:239
 msgid "Widgets placed in post/page content are detected automatically. If you output a widget from a theme template instead (e.g. in a widget area or a custom page template), add it here so it still gets polled for history/alerts even though there's no post content to scan."
 msgstr ""
 
-#: admin/views/general-settings-page.php:229
+#: admin/views/general-settings-page.php:246
 #: blocks/iot-widget/src/edit.js:478
 msgid "Style"
 msgstr ""
 
-#: admin/views/general-settings-page.php:241
+#: admin/views/general-settings-page.php:258
 msgid "Stop tracking this entity?"
 msgstr ""
 
-#: admin/views/general-settings-page.php:242
+#: admin/views/general-settings-page.php:259
 #: blocks/iot-widget/src/grid-item-editor.js:117
 msgid "Remove"
 msgstr ""
 
-#: admin/views/general-settings-page.php:255
+#: admin/views/general-settings-page.php:272
 msgid "No manually tracked entities yet."
 msgstr ""
 
-#: admin/views/general-settings-page.php:256
+#: admin/views/general-settings-page.php:273
 msgid "Track your first entity"
 msgstr ""
 
-#: admin/views/general-settings-page.php:288
+#: admin/views/general-settings-page.php:305
 #: includes/premium/admin-views/alert-rule-form.php:48
 #: includes/premium/admin-views/email-report-form.php:48
@@ -1073 +1091 @@
 msgstr ""
 
-#: admin/views/general-settings-page.php:321
+#: admin/views/general-settings-page.php:338
 msgid "Widget style"
 msgstr ""
 
-#: admin/views/general-settings-page.php:324
+#: admin/views/general-settings-page.php:341
 #: blocks/iot-widget/src/edit.js:75
 msgid "Card"
 msgstr ""
 
-#: admin/views/general-settings-page.php:325
+#: admin/views/general-settings-page.php:342
 #: blocks/iot-widget/src/edit.js:76
 msgid "Status list"
 msgstr ""
 
-#: admin/views/general-settings-page.php:326
+#: admin/views/general-settings-page.php:343
 #: blocks/iot-widget/src/edit.js:77
 msgid "Gauge"
 msgstr ""
 
-#: admin/views/general-settings-page.php:327
+#: admin/views/general-settings-page.php:344
 #: blocks/iot-widget/src/edit.js:78
 msgid "Chart"
 msgstr ""
 
-#: admin/views/general-settings-page.php:328
+#: admin/views/general-settings-page.php:345
 #: blocks/iot-widget/src/edit.js:79
 msgid "Mini trend (sparkline)"
 msgstr ""
 
-#: admin/views/general-settings-page.php:331
+#: admin/views/general-settings-page.php:348
 msgid "Must match the style actually rendered by your theme template — Chart/Sparkline are what determine whether this entity gets recorded into history."
 msgstr ""
 
-#: admin/views/general-settings-page.php:337
+#: admin/views/general-settings-page.php:354
 msgid "Add manually tracked entity"
 msgstr ""
 
 #: admin/views/partials/connector-fields.php:30
-#: admin/views/settings-page.php:66
+#: admin/views/settings-page.php:68
 msgid "Name"
 msgstr ""
@@ -1120 +1138 @@
 
 #: admin/views/partials/connector-fields.php:73
-#: admin/views/settings-page.php:68
+#: admin/views/settings-page.php:70
 msgid "URL"
 msgstr ""
@@ -1182 +1200 @@
 msgstr ""
 
-#: admin/views/settings-page.php:36
-msgid "The free version supports one connection. Upgrade to Pro for unlimited connections."
-msgstr ""
-
-#: admin/views/settings-page.php:40
+#: admin/views/settings-page.php:38
+msgid "The demo connection could not be saved. Please try again, or add a connection manually below."
+msgstr ""
+
+#: admin/views/settings-page.php:42
 msgid "Connection saved."
 msgstr ""
 
-#: admin/views/settings-page.php:41
+#: admin/views/settings-page.php:43
 msgid "Connection deleted."
 msgstr ""
 
-#: admin/views/settings-page.php:51
+#: admin/views/settings-page.php:53
 msgid "Now that you have a connection, try these next:"
 msgstr ""
 
-#: admin/views/settings-page.php:57
+#: admin/views/settings-page.php:59
 msgid "Dismiss this notice."
 msgstr ""
 
-#: admin/views/settings-page.php:62
+#: admin/views/settings-page.php:64
 msgid "Saved connections"
 msgstr ""
 
-#: admin/views/settings-page.php:69
+#: admin/views/settings-page.php:71
 msgid "Shortcode"
 msgstr ""
 
-#: admin/views/settings-page.php:108
+#: admin/views/settings-page.php:110
 #: includes/premium/admin-views/alert-rules-page.php:60
 #: includes/premium/admin-views/email-reports-page.php:56
@@ -1216 +1234 @@
 msgstr ""
 
-#: admin/views/settings-page.php:114
+#: admin/views/settings-page.php:116
 msgid "Are you sure you want to delete this connection?"
 msgstr ""
 
-#: admin/views/settings-page.php:129
+#: admin/views/settings-page.php:131
 msgid "Add your first connection"
 msgstr ""
 
-#: admin/views/settings-page.php:138
+#: admin/views/settings-page.php:140
 msgid "Edit connection"
 msgstr ""
@@ -1290 +1308 @@
 msgstr ""
 
-#: admin/views/wizard/step-0-location.php:31
+#: admin/views/wizard/step-0-location.php:32
 msgid "Same network as my devices (Raspberry Pi, NAS, home server) — my site fetches data from the device"
 msgstr ""
 
-#: admin/views/wizard/step-0-location.php:47
+#: admin/views/wizard/step-0-location.php:51
 msgid "On external/shared hosting, but my device has its own cloud service (Shelly Cloud, Supla, a publicly-reachable Home Assistant) — my site fetches data from there"
 msgstr ""
 
-#: admin/views/wizard/step-0-location.php:52
+#: admin/views/wizard/step-0-location.php:53
+msgid "On external/shared hosting, but my device has its own cloud service (a publicly-reachable Home Assistant; Shelly Cloud and Supla in Pro) — my site fetches data from there"
+msgstr ""
+
+#: admin/views/wizard/step-0-location.php:60
 msgid "Not sure? Choose the first option — it's the safer default."
 msgstr ""
 
-#: admin/views/wizard/step-0-location.php:57
+#: admin/views/wizard/step-0-location.php:65
 msgid "Devices behind a home router (NAT) almost never accept incoming connections from the internet — if your WordPress is hosted externally, it typically cannot reach a device address like 192.168.x.x at all. Sending data out from the device instead always works, and so does fetching from a cloud service the device already reports to."
 msgstr ""
 
-#: admin/views/wizard/step-0-location.php:71
+#: admin/views/wizard/step-0-location.php:79
 msgid "Security note: in push mode, this plugin never stores any credentials to your devices — the device sends data out, authenticated by a token this plugin generates that only allows writing one entity to one channel. In pull mode, a copy of your device's own credentials (e.g. a Home Assistant access token) is stored in your WordPress database."
 msgstr ""
 
-#: admin/views/wizard/step-0-location.php:75
+#: admin/views/wizard/step-0-location.php:83
 #: admin/views/wizard/step-1-connection-type.php:92
 #: admin/views/wizard/step-2-configure.php:87
@@ -1582 +1604 @@
 msgstr ""
 
+#: includes/class-http-client.php:98
+msgid "The server redirected too many times."
+msgstr ""
+
+#: includes/class-http-client.php:133
+msgid "The configured URL has no valid host (only http:// and https:// addresses are supported)."
+msgstr ""
+
+#. translators: %s: the host that was blocked
+#: includes/class-http-client.php:151
+#: includes/class-http-client.php:171
+#, php-format
+msgid "Refusing to connect to \"%s\" — it resolves to a link-local or reserved address (such as a cloud metadata service). This is always blocked."
+msgstr ""
+
+#. translators: %s: the host that was blocked
+#: includes/class-http-client.php:252
+#, php-format
+msgid "Refusing to connect to \"%s\" — it is a local network address. If WordPress runs on the same network as the device, enable \"Allow local network addresses\" under IoT Data Widget → Settings. Otherwise, use a push channel instead."
+msgstr ""
+
+#: includes/class-local-network.php:205
+msgid "Local network addresses are now allowed, so this site can reach devices on your network. You can change this under IoT Data Widget → Settings."
+msgstr ""
+
+#: includes/class-local-network.php:210
+msgid "Connections to local network addresses are blocked on this site, and only a network administrator can allow them (IoT Data Widget → Settings). Until then, choose push mode instead."
+msgstr ""
+
+#: includes/class-local-network.php:222
+msgid "Security update: IoT Data Widget now refuses connections to local network addresses unless \"Allow local network addresses\" is turned on. This site already connects to a device on your local network, so the setting was turned on automatically — nothing stopped working."
+msgstr ""
+
+#: includes/class-local-network.php:224
+msgid "Review settings"
+msgstr ""
+
+#: includes/class-local-network.php:226
+msgid "Dismiss"
+msgstr ""
+
 #: includes/class-push-ingest.php:120
 msgid "Request body is too large."
@@ -1702 +1765 @@
 
 #: includes/class-renderer.php:226
-#: includes/class-shortcode.php:133
+#: includes/class-shortcode.php:153
 msgid "This style requires the Pro version."
 msgstr ""
@@ -1773 +1836 @@
 msgstr[1] ""
 
-#: includes/class-rest-api.php:726
+#: includes/class-rest-api.php:732
 msgid "Not found."
 msgstr ""
 
-#: includes/class-shortcode.php:146
+#: includes/class-shortcode.php:166
 msgid "Fill in the \"connection\" and \"entity\" attributes in the [iotdw_widget] shortcode."
 msgstr ""
 
 #. translators: %s: connection name or ID given in the shortcode
-#: includes/class-shortcode.php:159
-#: includes/class-shortcode.php:461
-#: includes/class-shortcode.php:531
+#: includes/class-shortcode.php:179
+#: includes/class-shortcode.php:481
+#: includes/class-shortcode.php:551
 #, php-format
 msgid "Connection \"%s\" was not found."
 msgstr ""
 
-#: includes/class-shortcode.php:434
+#: includes/class-shortcode.php:454
 msgid "Powered by IoT Data Widget"
 msgstr ""
 
-#: includes/class-shortcode.php:448
+#: includes/class-shortcode.php:468
 msgid "Fill in the \"connection\" and \"entities\" attributes (comma-separated entity IDs) in the [iotdw_widget style=\"list\"] shortcode."
 msgstr ""
 
-#: includes/class-shortcode.php:512
+#: includes/class-shortcode.php:532
 msgid "Add at least one entity to the [iotdw_widget style=\"grid\"] shortcode via the \"items\" attribute."
 msgstr ""
 
-#: includes/class-shortcode.php:513
+#: includes/class-shortcode.php:533
 msgid "The \"items\" attribute of the [iotdw_widget style=\"grid\"] shortcode must be a comma-separated list of \"connection|entity\" pairs (e.g. items=\"Home|sensor.temperature,Workshop|relay_state\") — none of the given items matched that format."
 msgstr ""
 
 #. translators: %s: PHP error message
-#: includes/class-shortcode.php:714
-#: includes/class-shortcode.php:746
+#: includes/class-shortcode.php:780
+#: includes/class-shortcode.php:812
 #, php-format
 msgid "Unexpected connector error: %s"
 msgstr ""
 
-#: includes/class-shortcode.php:861
+#: includes/class-shortcode.php:927
+#: includes/class-value-normalizer.php:103
 #: blocks/iot-widget/src/edit.js:641
 msgid "On"
 msgstr ""
 
-#: includes/class-shortcode.php:862
+#: includes/class-shortcode.php:928
+#: includes/class-value-normalizer.php:105
 #: blocks/iot-widget/src/edit.js:651
 msgid "Off"
@@ -1823 +1888 @@
 
 #. translators: %s: the local-network host/IP that was configured
-#: includes/connectors/abstract-connector.php:136
+#: includes/connectors/abstract-connector.php:141
 #, php-format
 msgid "This looks like a local network address (%s) — it will only work if your WordPress server is on the same network as the device. Most external/shared hosting can't reach it; consider Shelly Cloud, a publicly reachable Home Assistant instance, or a differently-reachable REST endpoint instead."
@@ -2337 +2402 @@
 msgstr ""
 
-#: includes/premium/class-mqtt-poll-engine.php:186
+#: includes/premium/class-mqtt-poll-engine.php:194
 msgid "Missing MQTT broker host in the connection settings."
 msgstr ""
 
-#: includes/premium/class-mqtt-poll-engine.php:261
+#: includes/premium/class-mqtt-poll-engine.php:269
 msgid "Missing EMQX REST API URL in the connection settings."
 msgstr ""
 
 #. translators: %d: HTTP status code
-#: includes/premium/class-mqtt-poll-engine.php:298
+#: includes/premium/class-mqtt-poll-engine.php:306
 #, php-format
 msgid "EMQX REST API returned an unexpected response code: %d."
 msgstr ""
 
-#: includes/premium/class-mqtt-poll-engine.php:308
+#: includes/premium/class-mqtt-poll-engine.php:316
 msgid "Invalid or unexpected response shape from the EMQX REST API."
 msgstr ""

iot-data-widget/tags/1.0.2/public/css/widget-styles.css

@@ +1 @@
+/*
+ * Wrapper z IOTDW_Shortcode::render() — celowo bez szerokości/marginesów
+ * poziomych: dostaje je od motywu jak każdy inny blok (kolumna treści).
+ * Odstęp między dwoma widgetami pod rząd przez :where() (zerowa
+ * specyficzność) — motywy blokowe (blockGap) i tak go nadpisują swoim.
+ */
+:where(.iot-dw-widget-wrap + .iot-dw-widget-wrap) {
+        margin-top: 1em;
+}
+
 .iot-dw-widget {
         display: inline-block;
@@ -137 +147 @@
         display: block;
         list-style: none;
-        /* Tylko poziome — pionowe zostawiamy motywowi/WP (odstęp między blokami). */
-        margin-left: 0;
-        margin-right: 0;
+        margin: 0;
         padding: 0;
         box-sizing: border-box;
@@ -351 +359 @@
 }
 
-/*
- * Motywy blokowe (np. Twenty Twenty-Five): layout "constrained" wyrównuje
- * dzieci do kolumny treści przez `margin-left/right: auto !important`, ale
- * na elementach inline-level `auto` liczy się jako 0 — card/gauge/sparkline
- * lądowały na lewej krawędzi strony zamiast w kolumnie. Tu: blokowe, szerokość
- * wg treści, lewa krawędź = lewa krawędź kolumny. !important, bo reguła WP też
- * go ma (wygrywa wyższa specyficzność). Poza layoutem constrained (motywy
- * klasyczne, grupa Row/flex) bez zmian — dalej inline, obok siebie.
- */
-.is-layout-constrained > .iot-dw-widget--card,
-.is-layout-constrained > .iot-dw-widget--gauge,
-.is-layout-constrained > .iot-dw-widget--sparkline {
-        width: fit-content;
-        margin-left: max( 0px, calc( ( 100% - var( --wp--style--global--content-size, 100% ) ) / 2 ) ) !important;
-        margin-right: auto !important;
-}
-
-.is-layout-constrained > .iot-dw-widget--card {
-        display: block;
-}
-
-.is-layout-constrained > .iot-dw-widget--gauge,
-.is-layout-constrained > .iot-dw-widget--sparkline {
-        display: flex;
-}

iot-data-widget/tags/1.0.2/readme.txt

@@ -5 +5 @@
 Tested up to: 7.1
 Requires PHP: 8.1
-Stable tag: 1.0.1
+Stable tag: 1.0.2
 License: GPLv2 or later
 License URI: https://www.gnu.org/licenses/gpl-2.0.html
@@ -22 +22 @@
 2. Activate the plugin through the **Plugins** screen — this opens the **setup wizard** automatically (skip this step by activating several plugins at once, or by clicking "Skip the wizard" on its first screen).
 3. Follow the wizard: pick a connection type, configure and test it live, choose an entity, and copy the ready-made shortcode from the preview screen — or configure a connection manually under **IoT Data Widget** in the admin menu instead:
-   * **Home Assistant**: enter your instance URL (e.g. `http://homeassistant.local:8123`) and a Long-Lived Access Token. Generate one in Home Assistant under your profile page → **Security** → **Long-Lived Access Tokens** → **Create Token**.
+   * **Home Assistant**: enter your instance URL (e.g. `http://homeassistant.local:8123`) and a Long-Lived Access Token. Generate one in Home Assistant under your profile page → **Security** → **Long-Lived Access Tokens** → **Create Token**. If the URL is a local network address, also turn on **Settings → Allow local network addresses** (the wizard's "Same network as my devices" option does this for you).
    * **Push mode**: no URL/credentials to enter — the wizard generates a channel and a ready-to-paste snippet for your device instead.
    * **Generic REST, advanced mode**: enter the full URL of a JSON endpoint. Leave Authorization empty for public APIs, or enter a full header (e.g. `Authorization: Bearer xxx` or `X-API-Key: xxx`) if the API requires one.
@@ -66 +66 @@
 Generic REST (entity is a JSONPath into the JSON response): `[iotdw_widget connection="Weather API" entity="current_weather.temperature"]`
 
-Entities with a non-numeric state (a relay's on/off, a presence sensor's home/away...) show their real value ("ON", "true") in Card and Status list styles.
+Entities with a non-numeric state (a relay's on/off, a presence sensor's home/away...) show their real state ("ON", "home") in Card and Status list styles; a raw true/false from a JSON API shows as "On"/"Off".
 
 = I don't want to use the setup wizard — can I skip it? =
@@ -93 +93 @@
 
 Push mode sidesteps this entirely: the plugin never stores any credentials to your devices, because your device sends data to the plugin instead of the other way around.
+
+= My device is on the same network as WordPress, but the connection is refused =
+
+For security, the plugin doesn't connect to local network addresses (like 192.168.x.x or homeassistant.local) unless you allow it. If WordPress runs on the same network as your devices — a Raspberry Pi, NAS or home server — turn on **IoT Data Widget → Settings → Allow local network addresses** (on a multisite network, only a network administrator can). Choosing "Same network as my devices" in the setup wizard does this for you. If your site is hosted externally, use push mode instead: it can't reach your home network anyway.
 
 = Does this work with any REST API, or only Home Assistant? =
@@ -133 +137 @@
 == Changelog ==
 
+= 1.0.2 =
+* Security: requests to local network addresses (192.168.x.x, 10.x.x.x, homeassistant.local…) are now blocked unless "Allow local network addresses" is turned on under Settings; cloud metadata and link-local addresses are always blocked, including via redirects. If this site already connects to a device on your local network, the setting is turned on automatically during the update — nothing stops working. Choosing "Same network as my devices" in the setup wizard turns it on too.
+* Added: widgets placed in classic theme widget areas (sidebars, footers) now load their styles and refresh live — previously they appeared unstyled and never updated.
+* Fixed: widgets line up with the content column in classic themes such as Twenty Twenty-One. Widgets placed one after another now stack vertically — use a Row or Columns block to place them side by side.
+* Fixed: "Test connection" (and alert e-mails in Pro) show "On"/"Off" instead of "true"/"false" for on/off devices such as Shelly relays.
+* Fixed: the free version no longer schedules or lists Pro-only background tasks (MQTT polling, email reports, value history); updating removes them.
+* Fixed: the setup wizard labels Shelly Cloud and Supla as Pro, and shows an accurate message if the demo connection can't be saved.
+
 = 1.0.1 =
 * Added: "Upgrade" link in the plugin menu and the plugin list, and an upgrade link next to Pro-only styles (visible to administrators only).

iot-data-widget/trunk/admin/class-diagnostics-page.php

@@ -131 +131 @@
                 $cron_jobs         = $this->cron_jobs_info();
                 $connections       = $this->connections_info();
-                $alert_rules       = $this->alert_manager->get_rules();
+                // Null = sekcja ukryta: alerty są Pro (klasa fizycznie tylko w paczce Pro).
+                $alert_rules       = class_exists( 'IOTDW_Alert_Evaluator' ) ? $this->alert_manager->get_rules() : null;
                 $connections_by_id = array_column( $this->connector_manager->get_connections(), null, 'id' );
                 $recent_errors     = IOTDW_Diagnostics_Logger::get_recent_errors();
@@ -152 +153 @@
          * @param array $cron_jobs         Z cron_jobs_info().
          * @param array $connections       Z connections_info().
-         * @param array $alert_rules       Z IOTDW_Alert_Manager::get_rules().
+         * @param array|null $alert_rules  Z IOTDW_Alert_Manager::get_rules(); null = sekcja ukryta (wersja darmowa).
          * @param array $connections_by_id Połączenia indeksowane po ID.
          * @param array $recent_errors     Z IOTDW_Diagnostics_Logger::get_recent_errors().
@@ -158 +159 @@
          * @return string
          */
-        private function build_report_text( array $environment, array $cron_jobs, array $connections, array $alert_rules, array $connections_by_id, array $recent_errors, array $data_sizes ): string {
+        private function build_report_text( array $environment, array $cron_jobs, array $connections, ?array $alert_rules, array $connections_by_id, array $recent_errors, array $data_sizes ): string {
                 // Code review v1.8: wcześniej wszystkie stringi w tej metodzie były
                 // gołym angielskim tekstem, niezgodnie z CLAUDE.md ("i18n od
@@ -264 +265 @@
                 $lines[] = '';
 
-                $lines[] = __( '== Alert rules ==', 'iot-data-widget' );
-                if ( empty( $alert_rules ) ) {
-                        $lines[] = __( 'None configured.', 'iot-data-widget' );
-                } else {
+                if ( null !== $alert_rules ) {
+                        $lines[] = __( '== Alert rules ==', 'iot-data-widget' );
+                        if ( empty( $alert_rules ) ) {
+                                $lines[] = __( 'None configured.', 'iot-data-widget' );
+                        }
                         foreach ( $alert_rules as $rule ) {
                                 $rule_connection = $connections_by_id[ $rule['connection_id'] ] ?? null;
@@ -285 +287 @@
                                 );
                         }
-                }
-                $lines[] = '';
+                        $lines[] = '';
+                }
 
                 $lines[] = __( '== Recent errors ==', 'iot-data-widget' );
@@ -328 +330 @@
                 global $wpdb;
 
-                $tables = array(
-                        __( 'Recorded value history', 'iot-data-widget' ) => $wpdb->prefix . IOTDW_History_Recorder::TABLE,
-                        __( 'Widget usage tracking', 'iot-data-widget' ) => $wpdb->prefix . IOTDW_Widget_Usage_Tracker::TABLE,
-                        __( 'Alert rules', 'iot-data-widget' ) => $wpdb->prefix . IOTDW_Alert_Manager::TABLE,
-                        __( 'MQTT cache', 'iot-data-widget' )  => $wpdb->prefix . IOTDW_Cron_Value_Cache::CACHE_TABLE,
-                        __( 'Error log', 'iot-data-widget' )   => $wpdb->prefix . IOTDW_Diagnostics_Logger::TABLE_ERROR_LOG,
-                );
+                // Tabele funkcji Pro tylko wtedy, gdy klasa Pro istnieje w paczce.
+                $tables = array();
+
+                if ( class_exists( 'IOTDW_Renderer_Chart' ) ) {
+                        $tables[ __( 'Recorded value history', 'iot-data-widget' ) ] = $wpdb->prefix . IOTDW_History_Recorder::TABLE;
+                }
+
+                $tables[ __( 'Widget usage tracking', 'iot-data-widget' ) ] = $wpdb->prefix . IOTDW_Widget_Usage_Tracker::TABLE;
+
+                if ( class_exists( 'IOTDW_Alert_Evaluator' ) ) {
+                        $tables[ __( 'Alert rules', 'iot-data-widget' ) ] = $wpdb->prefix . IOTDW_Alert_Manager::TABLE;
+                }
+
+                if ( class_exists( 'IOTDW_MQTT_Poll_Engine' ) ) {
+                        $tables[ __( 'MQTT cache', 'iot-data-widget' ) ] = $wpdb->prefix . IOTDW_Cron_Value_Cache::CACHE_TABLE;
+                }
+
+                $tables[ __( 'Error log', 'iot-data-widget' ) ] = $wpdb->prefix . IOTDW_Diagnostics_Logger::TABLE_ERROR_LOG;
 
                 $rows = array();
@@ -478 +491 @@
          */
         private function cron_jobs_info(): array {
+                // 'requires_class' — crony funkcji Pro tylko wtedy, gdy klasa Pro
+                // fizycznie istnieje w paczce (wersja darmowa ich nie ma, więc wiersz
+                // "Poll MQTT brokers" itp. był tam mylący).
                 $hooks = array(
-                        IOTDW_History_Recorder::SNAPSHOT_HOOK => __( 'Record value history', 'iot-data-widget' ),
-                        IOTDW_History_Recorder::CLEANUP_HOOK  => __( 'Clean up old history & error log', 'iot-data-widget' ),
-                        IOTDW_Cron_Value_Cache::POLL_HOOK     => __( 'Poll MQTT brokers', 'iot-data-widget' ),
-                        // Dopisane (code review) — brakowało tu odkąd IOTDW_Email_Report_Sender
-                        // powstał (v1.3 Tydzień 7); ten cron logował się już wtedy do
-                        // IOTDW_Diagnostics_Logger, po prostu nikt nie dodał go na tej liście.
-                        IOTDW_Email_Report_Sender::SEND_HOOK  => __( 'Send due email reports', 'iot-data-widget' ),
+                        IOTDW_History_Recorder::SNAPSHOT_HOOK => array( __( 'Record value history', 'iot-data-widget' ), 'IOTDW_Renderer_Chart' ),
+                        IOTDW_History_Recorder::CLEANUP_HOOK  => array( __( 'Clean up old history & error log', 'iot-data-widget' ), '' ),
+                        IOTDW_Cron_Value_Cache::POLL_HOOK     => array( __( 'Poll MQTT brokers', 'iot-data-widget' ), 'IOTDW_MQTT_Poll_Engine' ),
+                        IOTDW_Email_Report_Sender::SEND_HOOK  => array( __( 'Send due email reports', 'iot-data-widget' ), 'IOTDW_Email_Report_Dispatcher' ),
                 );
 
                 $jobs = array();
 
-                foreach ( $hooks as $hook => $label ) {
+                foreach ( $hooks as $hook => list( $label, $requires_class ) ) {
+                        if ( '' !== $requires_class && ! class_exists( $requires_class ) ) {
+                                continue;
+                        }
+
                         $jobs[] = array(
                                 'hook'         => $hook,

iot-data-widget/trunk/admin/class-settings-page.php

@@ -171 +171 @@
                 $remove_data_on_uninstall = (bool) ( $settings['remove_data_on_uninstall'] ?? false );
                 $stale_threshold_minutes  = (int) ( $settings[ IOTDW_Renderer::STALE_THRESHOLD_SETTING_KEY ] ?? IOTDW_Renderer::DEFAULT_STALE_MINUTES );
+                $allow_local_network      = ! empty( $settings[ IOTDW_Http_Client::SETTING_KEY ] );
+                $can_manage_local_network = IOTDW_Http_Client::can_manage_local_network();
                 $import_result            = get_transient( $this->import_result_transient_key() );
 
@@ -219 +221 @@
                 $settings['show_branding']            = ! empty( $_POST['show_branding'] );
                 $settings['remove_data_on_uninstall'] = ! empty( $_POST['remove_data_on_uninstall'] );
+
+                // Na multisite tylko manage_network_options (patrz IOTDW_Http_Client::can_manage_local_network()).
+                if ( IOTDW_Http_Client::can_manage_local_network() ) {
+                        $settings[ IOTDW_Http_Client::SETTING_KEY ] = ! empty( $_POST['allow_local_network'] );
+                }
 
                 if ( isset( $_POST['stale_threshold_minutes'] ) ) {

iot-data-widget/trunk/admin/class-setup-wizard.php

@@ -898 +898 @@
          *
          * @param string               $push_type  Wybrana platforma.
-         * @param array<string,string> $connection Zapisany kanał (połączenie 'push').
+         * @param array<string,string> $iotdw_connection Zapisany kanał (połączenie 'push').
          */
         private function render_push_snippet_step( string $push_type, array $iotdw_connection ): void {
@@ -975 +975 @@
                         // jednego, rzadkiego przypadku brzegowego.
                         wp_safe_redirect(
-                                add_query_arg( 'iotdw_notice', 'connection_limit', admin_url( 'admin.php?page=iot-data-widget' ) )
+                                add_query_arg( 'iotdw_notice', 'demo_failed', admin_url( 'admin.php?page=iot-data-widget' ) )
                         );
                         exit;
@@ -1051 +1051 @@
          * przed obiema tymi ścieżkami.
          *
-         * @param string $type_key      Wybrany klucz typu (już zweryfikowany przez find_type() w render_page()).
+         * @param string $iotdw_type_key      Wybrany klucz typu (już zweryfikowany przez find_type() w render_page()).
          * @param string $connection_id ID istniejącego połączenia (powrót z Kroku 3), albo pusty string dla nowego.
          * @param string $mode          'pull'/'push'/'' — do linku "Back" (zgłoszenie 2026-09-07: bez tego "Back" gubił mode/group i wracał na Krok 0 zamiast na Krok 1).
@@ -1098 +1098 @@
          * pojedynczym entity=..., bez zapisu, bez zmian w tym przepływie.
          *
-         * @param string                $type_key   Wybrany klucz typu (do linku "Back").
-         * @param array<string, string> $connection Zapisane połączenie (Krok 2).
+         * @param string                $iotdw_type_key   Wybrany klucz typu (do linku "Back").
+         * @param array<string, string> $iotdw_connection Zapisane połączenie (Krok 2).
          */
         private function render_step_3( string $iotdw_type_key, array $iotdw_connection ): void {
@@ -1235 +1235 @@
          * krok 3), nie trzeba tego dublować w kreatorze.
          *
-         * @param string                $type_key    Wybrany klucz typu (do linku "Back").
-         * @param array<string, string> $connection  Zapisane połączenie.
+         * @param string                $iotdw_type_key    Wybrany klucz typu (do linku "Back").
+         * @param array<string, string> $iotdw_connection  Zapisane połączenie.
          * @param string[]              $entity_ids  Encje zaznaczone w Kroku 3 — jedna dla konektorów nie-Listable
          *                                            (bez zmian), kilka dla Listable (kreator multi-entity, v1.9 Tydzień 5).
@@ -1325 +1325 @@
          *
          * @param string                $type_key   Wybrany klucz typu.
-         * @param array<string, string> $connection Zapisane połączenie — użyte przez wymagany niżej widok (step-5-done.php), nie bezpośrednio w tej metodzie.
+         * @param array<string, string> $iotdw_connection Zapisane połączenie — użyte przez wymagany niżej widok (step-5-done.php), nie bezpośrednio w tej metodzie.
          * @param string[]              $entity_ids Encje zaznaczone w Kroku 3 (jedna albo kilka, v1.9) — jak wyżej, użyte przez widok.
          */

iot-data-widget/trunk/admin/views/diagnostics.php

@@ -10 +10 @@
  * @var array<int, array{hook: string, label: string, is_scheduled: bool, next_run: int|false, last_run: array{ran_at: string, success: bool, message: string}|null}> $cron_jobs Zaplanowane zadania.
  * @var array<int, array{name: string, connector_label: string, last_checked_at: string|null, last_status: string|null, consecutive_errors: int, last_error_message: string|null, is_push: bool, push_active: bool|null, last_received_at: string|null}> $connections Skonfigurowane połączenia + ich status.
- * @var array<int, array<string, mixed>>     $alert_rules       Zapisane reguły alertów (IOTDW_Alert_Manager::get_rules()).
+ * @var array<int, array<string, mixed>>|null $alert_rules       Zapisane reguły alertów (IOTDW_Alert_Manager::get_rules()); null = wersja darmowa, sekcja ukryta.
  * @var array<string, array<string, string>> $connections_by_id Połączenia indeksowane po ID (do nazw w tabeli reguł alertów).
  * @var array<int, array{id: int, occurred_at: string, source: string, message: string}> $recent_errors Najnowsze wpisy logu błędów.
@@ -233 +233 @@
         ?>
 
+        <?php if ( null !== $alert_rules ) : // Alerty są Pro — na wersji darmowej sekcji nie ma. ?>
         <h2><?php esc_html_e( 'Alert rules', 'iot-data-widget' ); ?></h2>
         <?php
@@ -273 +274 @@
         require __DIR__ . '/partials/data-table.php';
         ?>
+        <?php endif; ?>
 
         <h2><?php esc_html_e( 'Recent errors', 'iot-data-widget' ); ?></h2>

iot-data-widget/trunk/admin/views/general-settings-page.php

@@ -16 +16 @@
  * @var string                             $export_default_to     Domyślna data końcowa formularza eksportu CSV (v1.3 Tydzień 6).
  * @var int                                $stale_threshold_minutes Próg "stare dane" w minutach (v2.0, docs/mvp-v2-0-push-mode-plan.md §5).
+ * @var bool                               $allow_local_network   "Allow local network addresses" (1.0.2, IOTDW_Http_Client).
+ * @var bool                               $can_manage_local_network Czy bieżący użytkownik może to zmienić (multisite: manage_network_options).
  */
 
@@ -119 +121 @@
                         </tr>
                         <tr>
+                                <th><?php esc_html_e( 'Local network', 'iot-data-widget' ); ?></th>
+                                <td>
+                                        <label>
+                                                <input type="checkbox" name="allow_local_network" value="1" <?php checked( $allow_local_network ); ?> <?php disabled( ! $can_manage_local_network ); ?> />
+                                                <?php esc_html_e( 'Allow local network addresses', 'iot-data-widget' ); ?>
+                                        </label>
+                                        <p class="description">
+                                                <?php esc_html_e( 'Turn this on only if WordPress runs on the same network as your devices (e.g. a home server) and connects to addresses like 192.168.x.x or homeassistant.local. Off by default: it stops a misconfigured or malicious URL from reaching other services on your server\'s network. Cloud metadata and link-local addresses are always blocked.', 'iot-data-widget' ); ?>
+                                        </p>
+                                        <?php if ( ! $can_manage_local_network ) : ?>
+                                                <p class="description"><?php esc_html_e( 'On a multisite network, only a network administrator can change this.', 'iot-data-widget' ); ?></p>
+                                        <?php endif; ?>
+                                </td>
+                        </tr>
+                        <tr>
                                 <th><?php esc_html_e( 'Uninstall', 'iot-data-widget' ); ?></th>
                                 <td>

iot-data-widget/trunk/admin/views/settings-page.php

@@ -32 +32 @@
                 $iotdw_current_notice = sanitize_key( wp_unslash( $_GET['iotdw_notice'] ) ); // phpcs:ignore WordPress.Security.NonceVerification.Recommended
 
-                if ( 'connection_limit' === $iotdw_current_notice ) {
+                if ( 'demo_failed' === $iotdw_current_notice ) {
+                        // Dawniej "The free version supports one connection" — pozostałość
+                        // po zniesionym limicie; zapis połączenia demo po prostu się nie udał.
                         $iotdw_notice_type    = 'error';
-                        $iotdw_notice_message = __( 'The free version supports one connection. Upgrade to Pro for unlimited connections.', 'iot-data-widget' );
+                        $iotdw_notice_message = __( 'The demo connection could not be saved. Please try again, or add a connection manually below.', 'iot-data-widget' );
                 } else {
                         $iotdw_notice_type    = 'success';

iot-data-widget/trunk/admin/views/wizard/step-0-location.php

@@ -28 +28 @@
                         <?php esc_html_e( 'On external/shared hosting (typical) — my device sends data to my site', 'iot-data-widget' ); ?>
                 </a>
-                <a class="button button-hero" href="<?php echo esc_url( add_query_arg( 'mode', 'pull', $iotdw_base_url ) ); ?>">
+                <?php // 1.0.2: ta opcja włącza też "Allow local network addresses" (IOTDW_Local_Network::handle_enable()). ?>
+                <a class="button button-hero" href="<?php echo esc_url( IOTDW_Local_Network::enable_url( add_query_arg( 'mode', 'pull', $iotdw_base_url ) ) ); ?>">
                         <?php esc_html_e( 'Same network as my devices (Raspberry Pi, NAS, home server) — my site fetches data from the device', 'iot-data-widget' ); ?>
                 </a>
@@ -45 +46 @@
                 ?>
                 <a class="button button-hero" href="<?php echo esc_url( add_query_arg( 'mode', 'pull', $iotdw_base_url ) ); ?>">
-                        <?php esc_html_e( 'On external/shared hosting, but my device has its own cloud service (Shelly Cloud, Supla, a publicly-reachable Home Assistant) — my site fetches data from there', 'iot-data-widget' ); ?>
+                        <?php
+                        // Shelly Cloud i preset Supla są Pro — na wersji darmowej oznaczone.
+                        if ( class_exists( 'IOTDW_Connector_Presets' ) ) {
+                                esc_html_e( 'On external/shared hosting, but my device has its own cloud service (Shelly Cloud, Supla, a publicly-reachable Home Assistant) — my site fetches data from there', 'iot-data-widget' );
+                        } else {
+                                esc_html_e( 'On external/shared hosting, but my device has its own cloud service (a publicly-reachable Home Assistant; Shelly Cloud and Supla in Pro) — my site fetches data from there', 'iot-data-widget' );
+                        }
+                        ?>
                 </a>
         </p>

iot-data-widget/trunk/includes/class-history-recorder.php

@@ -219 +219 @@
                 // phpcs:enable
 
+                $keys = array();
+
                 foreach ( $pairs as $pair ) {
-                        $this->record_snapshot( $pair->connection_id, $pair->entity_id );
+                        $keys[ $pair->connection_id . '|' . $pair->entity_id ] = array( $pair->connection_id, $pair->entity_id );
+                }
+
+                // Wykresy w obszarach widgetów motywu (1.0.2) — nie ma ich w tabeli.
+                foreach ( ( new IOTDW_Widget_Usage_Tracker( $this->connector_manager ) )->widget_area_usage() as $pair ) {
+                        if ( in_array( $pair['style'], array( 'chart', 'sparkline' ), true ) ) {
+                                $keys[ $pair['connection_id'] . '|' . $pair['entity_id'] ] = array( $pair['connection_id'], $pair['entity_id'] );
+                        }
+                }
+
+                foreach ( $keys as list( $connection_id, $entity_id ) ) {
+                        $this->record_snapshot( $connection_id, $entity_id );
                 }
         }

iot-data-widget/trunk/includes/class-plugin.php

@@ -266 +266 @@
                 $this->init_modules();
                 $this->maybe_migrate_credentials();
+                // Osobno od maybe_upgrade_db() (ta nie czyta połączeń) — jednorazowo,
+                // dopóki ustawienie "Allow local network addresses" nie ma wartości.
+                IOTDW_Local_Network::maybe_migrate( $this->connector_manager );
 
                 add_action( 'admin_enqueue_scripts', array( $this, 'maybe_enqueue_admin_toolkit_css' ) );
@@ -327 +330 @@
                 IOTDW_Push_Channel_Manager::create_table();
 
+                // 1.0.2: aktualizacja z wersji darmowej <= 1.0.1 zdejmuje z
+                // harmonogramu crony funkcji Pro (patrz sync_cron_events()).
+                self::sync_cron_events();
+
                 update_option( self::DB_VERSION_OPTION, IOTDW_VERSION );
+        }
+
+        /**
+         * Planuje crony wtyczki — te funkcji Pro tylko wtedy, gdy plik Pro
+         * fizycznie istnieje w paczce (ten sam test file_exists() co
+         * init_modules()), w przeciwnym razie zdejmuje je z harmonogramu.
+         * Wersja darmowa <= 1.0.1 planowała wszystkie cztery (zgłoszenie
+         * 2026-10-06): MQTT/raporty nic nie robiły, a snapshot historii odpytywał
+         * urządzenia dla wykresów, których wersja darmowa nie wyświetla.
+         * Wołane przy aktywacji i przy każdej zmianie wersji.
+         */
+        public static function sync_cron_events(): void {
+                $premium = IOTDW_PLUGIN_DIR . 'includes/premium/';
+
+                // Niestandardowe harmonogramy muszą być znane, zanim wp_schedule_event() ich użyje.
+                add_filter( 'cron_schedules', array( 'IOTDW_History_Recorder', 'register_cron_schedule' ) ); // phpcs:ignore WordPress.WP.CronInterval.ChangeDetected
+                add_filter( 'cron_schedules', array( 'IOTDW_Cron_Value_Cache', 'register_cron_schedule' ) ); // phpcs:ignore WordPress.WP.CronInterval.ChangeDetected
+
+                $events = array(
+                        // Historia zasila wykresy/sparkline i alerty — obie funkcje Pro.
+                        IOTDW_History_Recorder::SNAPSHOT_HOOK => array( IOTDW_History_Recorder::CRON_SCHEDULE, file_exists( $premium . 'class-renderer-chart.php' ) || file_exists( $premium . 'class-alert-evaluator.php' ) ),
+                        // Czyści też dziennik błędów — potrzebny na obu wersjach.
+                        IOTDW_History_Recorder::CLEANUP_HOOK  => array( 'daily', true ),
+                        IOTDW_Cron_Value_Cache::POLL_HOOK     => array( IOTDW_Cron_Value_Cache::CRON_SCHEDULE, file_exists( $premium . 'class-mqtt-poll-engine.php' ) ),
+                        IOTDW_Email_Report_Sender::SEND_HOOK  => array( 'hourly', file_exists( $premium . 'class-email-report-dispatcher.php' ) ),
+                );
+
+                foreach ( $events as $hook => list( $recurrence, $wanted ) ) {
+                        if ( ! $wanted ) {
+                                wp_clear_scheduled_hook( $hook );
+                        } elseif ( ! wp_next_scheduled( $hook ) ) {
+                                wp_schedule_event( time(), $recurrence, $hook );
+                        }
+                }
         }
 
@@ -373 +414 @@
                 }
 
+                require_once IOTDW_PLUGIN_DIR . 'includes/class-http-client.php';
+                require_once IOTDW_PLUGIN_DIR . 'includes/class-local-network.php';
                 require_once IOTDW_PLUGIN_DIR . 'includes/class-value-normalizer.php';
                 require_once IOTDW_PLUGIN_DIR . 'includes/class-json-path.php';
@@ -557 +600 @@
                 $this->mqtt_poller   = new IOTDW_Cron_Value_Cache( $this->connector_manager );
                 $this->settings_page = new IOTDW_Settings_Page( $this->connector_manager, $this->widget_usage_tracker );
+                // 1.0.2 — "Allow local network addresses": powiadomienie + kreator (same hooki).
+                new IOTDW_Local_Network();
                 // alert_manager (skeleton: CRUD + schemat) zostaje zawsze —
                 // IOTDW_Diagnostics_Page je wstrzykuje (raport "Alert rules" działa
@@ -623 +668 @@
                 update_option( self::DB_VERSION_OPTION, IOTDW_VERSION );
 
-                // Rejestrujemy niestandardowe harmonogramy od razu — inaczej
-                // wp_schedule_event() poniżej nie znalazłby ich w wp_get_schedules().
-                add_filter( 'cron_schedules', array( 'IOTDW_History_Recorder', 'register_cron_schedule' ) ); // phpcs:ignore WordPress.WP.CronInterval.ChangeDetected
-                add_filter( 'cron_schedules', array( 'IOTDW_Cron_Value_Cache', 'register_cron_schedule' ) ); // phpcs:ignore WordPress.WP.CronInterval.ChangeDetected
-
-                if ( ! wp_next_scheduled( IOTDW_History_Recorder::SNAPSHOT_HOOK ) ) {
-                        wp_schedule_event( time(), IOTDW_History_Recorder::CRON_SCHEDULE, IOTDW_History_Recorder::SNAPSHOT_HOOK );
-                }
-
-                if ( ! wp_next_scheduled( IOTDW_History_Recorder::CLEANUP_HOOK ) ) {
-                        wp_schedule_event( time(), 'daily', IOTDW_History_Recorder::CLEANUP_HOOK );
-                }
-
-                if ( ! wp_next_scheduled( IOTDW_Cron_Value_Cache::POLL_HOOK ) ) {
-                        wp_schedule_event( time(), IOTDW_Cron_Value_Cache::CRON_SCHEDULE, IOTDW_Cron_Value_Cache::POLL_HOOK );
-                }
-
-                // Co godzinę — częstotliwość dzienna/tygodniowa nie wymaga precyzji
-                // większej niż to (patrz IOTDW_Email_Report_Sender::is_due()), a
-                // wbudowany harmonogram 'hourly' istnieje zawsze, bez rejestrowania
-                // własnego (w przeciwieństwie do History Recordera/MQTT Pollera).
-                if ( ! wp_next_scheduled( IOTDW_Email_Report_Sender::SEND_HOOK ) ) {
-                        wp_schedule_event( time(), 'hourly', IOTDW_Email_Report_Sender::SEND_HOOK );
-                }
+                self::sync_cron_events();
 
                 // Sygnał "pokaż kreator" dla IOTDW_Setup_Wizard::maybe_redirect_after_activation()

iot-data-widget/trunk/includes/class-rest-api.php

@@ -618 +618 @@
                 }
 
+                // Wynik pokazywany wprost adminowi ("✓ …") — "false" z surowego bool
+                // JSON jako "Off", jak na karcie/liście.
+                if ( ! empty( $result['display_value'] ) ) {
+                        $result['display_value'] = IOTDW_Value_Normalizer::human_display( (string) $result['display_value'] );
+                }
+
                 return rest_ensure_response(
                         array(

iot-data-widget/trunk/includes/class-shortcode.php

@@ -91 +91 @@
          */
         public function render( $atts ): string {
+                $html = $this->render_widget( $atts );
+
+                // Blokowy wrapper (1.0.2): motywy wyrównują swoje bloki do kolumny
+                // treści przez margin: auto, co nie działa na elementach inline-block
+                // (card/gauge stały przy krawędzi strony, np. w Twenty Twenty-One).
+                // Wrapper dostaje szerokość kolumny, widget stoi w nim do lewej.
+                // Pusty wynik (błąd ukryty przed gościem) — bez wrappera, żeby nie
+                // zostawiał pustego odstępu.
+                return '' === trim( $html ) ? $html : '<div class="iot-dw-widget-wrap">' . $html . '</div>';
+        }
+
+        /**
+         * Właściwe renderowanie widgetu (bez wrappera, patrz render()).
+         *
+         * @param array|string $atts Atrybuty shortcode.
+         * @return string
+         */
+        private function render_widget( $atts ): string {
                 $this->rendered_widget = true;
 
@@ -119 +137 @@
                 );
 
+                $this->enqueue_late( (string) $atts['style'] );
+
                 if ( 'list' === $atts['style'] ) {
                         return $this->render_list( $atts );
@@ -256 +276 @@
          *
          * @param IOTDW_Abstract_Connector $connector     Instancja konektora dla tego połączenia.
-         * @param array<string, mixed>      $connection_row Zapisane połączenie (musi zawierać 'id'/'connector', opcjonalnie 'preset') — do wyliczenia $min_ttl, patrz enforce_min_ttl().
-         * @param string                    $entity_id     ID/ścieżka encji.
-         * @param int                       $ttl           TTL cache dla udanej odpowiedzi (sekundy), zażądany przez shortcode/blok.
+         * @param array<string, mixed>     $connection_row Zapisane połączenie (musi zawierać 'id'/'connector', opcjonalnie 'preset') — do wyliczenia $min_ttl, patrz enforce_min_ttl().
+         * @param string                   $entity_id     ID/ścieżka encji.
+         * @param int                      $ttl           TTL cache dla udanej odpowiedzi (sekundy), zażądany przez shortcode/blok.
          * @return array Znormalizowana struktura danych konektora, ze stemplowanymi connection_id/entity_id.
          */
@@ -578 +598 @@
                 }
 
-                // v1.8 Tydzień 6 — tokeny (typografia/odstępy/cienie z Tygodnia 5)
-                // muszą się załadować przed widget-styles.css, które teraz z nich
-                // korzysta (var(--iot-dw-text-xl) itd.) — stąd jako zależność, nie
-                // tylko osobny enqueue obok.
+                $this->enqueue_styles();
+
+                // class_exists() (Guideline 5, 2026-09-24) — chart-widget.js/css są
+                // plikami premium-only, w paczce darmowej fizycznie nie istnieją.
+                if ( IOTDW_Widget_Usage_Tracker::content_has_style( $post->post_content, array( 'chart' ) ) ) {
+                        $this->enqueue_chart_assets();
+                }
+
+                // v1.8 Tydzień 3 — hybrydowe doładowanie. "chart" celowo poza listą
+                // stylów (patrz komentarz nagłówkowy public/js/widget-refresh.js).
+                if ( IOTDW_Widget_Usage_Tracker::content_has_style( $post->post_content, array( 'card', 'gauge', 'sparkline', 'list', 'grid' ) ) ) {
+                        $this->enqueue_refresh_script();
+                }
+        }
+
+        /**
+         * Późne ładowanie zasobów dla widgetu wyrenderowanego POZA treścią
+         * pojedynczego posta (1.0.2: obszar widgetów motywu klasycznego, lista
+         * wpisów, szablon) — maybe_enqueue_assets() widzi tylko post_content
+         * strony pojedynczej. WordPress drukuje style/skrypty dodane po wp_head
+         * w stopce. Tylko front-end — podglądy w adminie/REST mają własne.
+         *
+         * @param string $style Styl widgetu.
+         */
+        private function enqueue_late( string $style ): void {
+                if ( is_admin() || ! did_action( 'wp_enqueue_scripts' ) || ( defined( 'REST_REQUEST' ) && REST_REQUEST ) ) {
+                        return;
+                }
+
+                $this->enqueue_styles();
+
+                if ( 'chart' === $style ) {
+                        $this->enqueue_chart_assets();
+                } else {
+                        $this->enqueue_refresh_script();
+                }
+        }
+
+        /**
+         * CSS widgetu + zmienne wyglądu (raz na żądanie).
+         */
+        private function enqueue_styles(): void {
+                if ( wp_style_is( 'iot-data-widget-theme', 'enqueued' ) ) {
+                        return;
+                }
+
+                // v1.8 Tydzień 6 — tokeny muszą się załadować przed widget-styles.css.
                 wp_enqueue_style(
                         'iot-data-widget-tokens',
@@ -607 +670 @@
                         IOTDW_Style_Settings::build_css_rule( IOTDW_Style_Settings::css_variables( IOTDW_Style_Settings::get_settings() ) )
                 );
-
-                // class_exists() (Guideline 5, 2026-09-24; dawniej dodatkowo
-                // iotdw_is_premium(), usunięte jako runtime license-check) — bez
-                // tego warunku strona z style="chart" na wersji darmowej ładowała
-                // Chart.js + chart-widget.js/css na próżno (renderer i tak pokazuje
-                // komunikat "wymaga Pro", nigdy nie odwołuje się do tych plików) —
-                // zbędny ciężar, a chart-widget.js/css są plikami premium-only
-                // (patrz @fs_premium_only w iot-data-widget.php), więc w paczce
-                // darmowej fizycznie nie istnieją.
-                if ( class_exists( 'IOTDW_Renderer_Chart' ) && IOTDW_Widget_Usage_Tracker::content_has_style( $post->post_content, array( 'chart' ) ) ) {
-                        wp_enqueue_script(
-                                'chart-js',
-                                IOTDW_PLUGIN_URL . 'public/js/vendor/chart.umd.min.js',
-                                array(),
-                                '4.5.1',
-                                true
-                        );
-
-                        wp_enqueue_script(
-                                'iot-data-widget-chart',
-                                IOTDW_PLUGIN_URL . 'public/js/chart-widget.js',
-                                array( 'chart-js' ),
-                                IOTDW_VERSION,
-                                true
-                        );
-
-                        wp_enqueue_style(
-                                'iot-data-widget-chart',
-                                IOTDW_PLUGIN_URL . 'public/css/chart-widget.css',
-                                array( 'iot-data-widget' ),
-                                IOTDW_VERSION
-                        );
-                }
-
-                // v1.8 Tydzień 3 — hybrydowe doładowanie. "chart" celowo poza listą
-                // stylów (patrz komentarz nagłówkowy public/js/widget-refresh.js) —
-                // strona z samym wykresem nie ładuje tego skryptu w ogóle.
-                if ( IOTDW_Widget_Usage_Tracker::content_has_style( $post->post_content, array( 'card', 'gauge', 'sparkline', 'list', 'grid' ) ) ) {
-                        wp_enqueue_script(
-                                'iot-data-widget-widget-refresh',
-                                IOTDW_PLUGIN_URL . 'public/js/widget-refresh.js',
-                                array(),
-                                IOTDW_VERSION,
-                                true
-                        );
-
-                        wp_localize_script(
-                                'iot-data-widget-widget-refresh',
-                                'iotdwWidgetRefresh',
-                                array( 'restUrl' => esc_url_raw( rest_url( IOTDW_Rest_Api::NAMESPACE ) ) )
-                        );
-                }
+        }
+
+        /**
+         * Chart.js + chart-widget.js/css (tylko Pro — pliki istnieją tylko tam).
+         */
+        private function enqueue_chart_assets(): void {
+                if ( ! class_exists( 'IOTDW_Renderer_Chart' ) || wp_script_is( 'iot-data-widget-chart', 'enqueued' ) ) {
+                        return;
+                }
+
+                wp_enqueue_script(
+                        'chart-js',
+                        IOTDW_PLUGIN_URL . 'public/js/vendor/chart.umd.min.js',
+                        array(),
+                        '4.5.1',
+                        true
+                );
+
+                wp_enqueue_script(
+                        'iot-data-widget-chart',
+                        IOTDW_PLUGIN_URL . 'public/js/chart-widget.js',
+                        array( 'chart-js' ),
+                        IOTDW_VERSION,
+                        true
+                );
+
+                wp_enqueue_style(
+                        'iot-data-widget-chart',
+                        IOTDW_PLUGIN_URL . 'public/css/chart-widget.css',
+                        array( 'iot-data-widget' ),
+                        IOTDW_VERSION
+                );
+        }
+
+        /**
+         * Skrypt jednorazowego odświeżenia wartości po załadowaniu strony.
+         */
+        private function enqueue_refresh_script(): void {
+                if ( wp_script_is( 'iot-data-widget-widget-refresh', 'enqueued' ) ) {
+                        return;
+                }
+
+                wp_enqueue_script(
+                        'iot-data-widget-widget-refresh',
+                        IOTDW_PLUGIN_URL . 'public/js/widget-refresh.js',
+                        array(),
+                        IOTDW_VERSION,
+                        true
+                );
+
+                wp_localize_script(
+                        'iot-data-widget-widget-refresh',
+                        'iotdwWidgetRefresh',
+                        array( 'restUrl' => esc_url_raw( rest_url( IOTDW_Rest_Api::NAMESPACE ) ) )
+                );
         }
 
@@ -702 +768 @@
          *
          * @param IOTDW_Abstract_Connector $connector Instancja konektora.
-         * @param string                    $entity_id ID encji / ścieżka do wartości.
+         * @param string                   $entity_id ID encji / ścieżka do wartości.
          * @return array
          */
@@ -738 +804 @@
                                 'entities' => $connector->list_entities(),
                                 'error'    => null,
+                        );
+                } catch ( \RuntimeException $e ) {
+                        // Celowe błędy konektora (brak połączenia, 401, adres zablokowany)
+                        // — komunikat już jest dla użytkownika, bez "Unexpected".
+                        return array(
+                                'entities' => array(),
+                                'error'    => $e->getMessage(),
                         );
                 } catch ( \Throwable $e ) {

iot-data-widget/trunk/includes/class-value-normalizer.php

@@ -87 +87 @@
                 );
         }
+
+        /**
+         * Tekst stanu do pokazania człowiekowi: dosłowne "true"/"false" (surowy
+         * bool z JSON, np. Shelly switch:0.output) → przetłumaczone "On"/"Off",
+         * tak jak robi to już IOTDW_Shortcode dla karty/listy. Każdy inny tekst
+         * (HA "home", Tasmota "ON"...) wraca bez zmian. Nie dla webhooków —
+         * tam display_value zostaje surowe (kontrakt dla odbiorców maszynowych).
+         *
+         * @param string $display_value display_value z konektora.
+         * @return string
+         */
+        public static function human_display( string $display_value ): string {
+                switch ( strtolower( trim( $display_value ) ) ) {
+                        case 'true':
+                                return __( 'On', 'iot-data-widget' );
+                        case 'false':
+                                return __( 'Off', 'iot-data-widget' );
+                        default:
+                                return $display_value;
+                }
+        }
 }

iot-data-widget/trunk/includes/class-widget-usage-tracker.php

@@ -51 +51 @@
                 add_action( 'save_post', array( $this, 'sync_post' ) );
                 add_action( 'before_delete_post', array( $this, 'remove_post' ) );
+
+                foreach ( array( 'sidebars_widgets', 'widget_block', 'widget_text', 'widget_custom_html', IOTDW_Connector_Manager::CONNECTIONS_OPTION ) as $option ) {
+                        add_action( 'update_option_' . $option, array( __CLASS__, 'flush_widget_area_usage' ) );
+                        add_action( 'add_option_' . $option, array( __CLASS__, 'flush_widget_area_usage' ) );
+                }
+        }
+
+        /**
+         * Transient z parami użytymi w obszarach widgetów motywu klasycznego.
+         */
+        const WIDGET_AREA_TRANSIENT = 'iotdw_widget_area_usage';
+
+        /**
+         * Typy widgetów, w których treści szukamy [iotdw_widget] (id_base => pole treści).
+         */
+        const WIDGET_CONTENT_FIELDS = array(
+                'block'       => 'content',
+                'text'        => 'text',
+                'custom_html' => 'content',
+        );
+
+        /**
+         * Kasuje cache par z obszarów widgetów (zmiana widgetów/pasków/połączeń).
+         */
+        public static function flush_widget_area_usage(): void {
+                delete_transient( self::WIDGET_AREA_TRANSIENT );
+        }
+
+        /**
+         * Użycie widgetów w AKTYWNYCH obszarach widgetów motywu klasycznego —
+         * odpowiednik wierszy tabeli użycia dla postów (to samo: connection_id,
+         * entity_id, style), ale liczony z opcji widgetów zamiast zapisywany,
+         * żeby nie zmieniać schematu tabeli (post_id jest kluczem jej
+         * czyszczenia). Widgety nieaktywne (wp_inactive_widgets) się nie
+         * liczą — nie są nigdzie wyświetlane. Cache w transiencie, kasowany przy
+         * każdej zmianie widgetów/pasków/połączeń (patrz konstruktor).
+         *
+         * Konsumenci: is_publicly_used() (/widget-data), odpytywanie MQTT
+         * (IOTDW_MQTT_Poll_Engine) i zapis historii (IOTDW_History_Recorder).
+         *
+         * @return array<int, array{connection_id: string, entity_id: string, style: string}>
+         */
+        public function widget_area_usage(): array {
+                $cached = get_transient( self::WIDGET_AREA_TRANSIENT );
+
+                if ( is_array( $cached ) && ( array() === $cached || isset( $cached[0]['style'] ) ) ) {
+                        return $cached;
+                }
+
+                $usage = array();
+                // Opcja wprost — wp_get_sidebars_widgets() poza adminem zapamiętuje
+                // wynik w globalnej zmiennej na całe żądanie.
+                $sidebars = get_option( 'sidebars_widgets', array() );
+                $sidebars = is_array( $sidebars ) ? $sidebars : array();
+
+                foreach ( $sidebars as $sidebar_id => $widget_ids ) {
+                        if ( 'wp_inactive_widgets' === $sidebar_id || 'array_version' === $sidebar_id || ! is_array( $widget_ids ) ) {
+                                continue;
+                        }
+
+                        foreach ( $widget_ids as $widget_id ) {
+                                if ( ! preg_match( '/^(.+)-(\d+)$/', (string) $widget_id, $m ) || ! isset( self::WIDGET_CONTENT_FIELDS[ $m[1] ] ) ) {
+                                        continue;
+                                }
+
+                                $instances = get_option( 'widget_' . $m[1], array() );
+                                $content   = $instances[ (int) $m[2] ][ self::WIDGET_CONTENT_FIELDS[ $m[1] ] ] ?? '';
+
+                                if ( ! is_string( $content ) || '' === $content ) {
+                                        continue;
+                                }
+
+                                foreach ( $this->extract_tracked_pairs( $content ) as $pair ) {
+                                        $usage[ $pair['connection_id'] . '|' . $pair['entity_id'] . '|' . $pair['style'] ] = $pair;
+                                }
+                        }
+                }
+
+                $usage = array_values( $usage );
+
+                set_transient( self::WIDGET_AREA_TRANSIENT, $usage, DAY_IN_SECONDS );
+
+                return $usage;
         }
 
@@ -201 +284 @@
          * kwalifikują się — nie ma dla nich żadnego posta do zweryfikowania.
          *
+         * 1.0.2: kwalifikuje się też widget w AKTYWNYM obszarze widgetów motywu
+         * klasycznego (patrz widget_area_usage()) — wyświetlany publicznie tak
+         * samo jak opublikowany post. Wcześniej taki widget nigdy się nie
+         * odświeżał (404 z /widget-data).
+         *
          * @param string $connection_id ID połączenia (kanoniczne, nie nazwa).
          * @param string $entity_id     ID encji.
@@ -228 +316 @@
                         // ma, ale żądający je zna (poprawne ciasteczko).
                         if ( null !== $post && ! post_password_required( $post ) ) {
+                                return true;
+                        }
+                }
+
+                foreach ( $this->widget_area_usage() as $pair ) {
+                        if ( $pair['connection_id'] === $connection_id && $pair['entity_id'] === $entity_id ) {
                                 return true;
                         }

iot-data-widget/trunk/includes/connectors/abstract-connector.php

@@ -132 +132 @@
                 }
 
+                if ( null !== IOTDW_Http_Client::check_blocked( $base_url ) ) {
+                        // Odrzucone przed wysłaniem — komunikat IOTDW_Http_Client już mówi dlaczego.
+                        return $message;
+                }
+
                 return $message . ' ' . sprintf(
                         /* translators: %s: the local-network host/IP that was configured */

iot-data-widget/trunk/includes/connectors/class-ha-connector.php

@@ -54 +54 @@
          */
         public function fetch_data( string $entity_id ): array {
-                $response = wp_remote_get(
+                $response = IOTDW_Http_Client::get(
                         $this->base_url . '/api/states/' . rawurlencode( $entity_id ),
                         array(
@@ -137 +137 @@
                 // zwykle znacznie więcej danych niż pojedynczy odczyt encji, więc
                 // dłuższy zapas jest tu uzasadniony bez kosztu dla front-endu.
-                $response = wp_remote_get(
+                $response = IOTDW_Http_Client::get(
                         $this->base_url . '/api/states',
                         array(

iot-data-widget/trunk/includes/connectors/class-rest-connector.php

@@ -153 +153 @@
                 }
 
-                $response = wp_remote_get(
+                $response = IOTDW_Http_Client::get(
                         $request_url,
                         array(

iot-data-widget/trunk/iot-data-widget.php

@@ -4 +4 @@
  * Plugin Name:       IoT Data Widget
  * Description:       Displays live data from smart home devices (Home Assistant, REST API, MQTT, Shelly/Tasmota/ESPHome presets, Shelly Cloud) on your website via shortcode and Gutenberg block, with a guided setup wizard, a redesigned and auto-refreshing appearance, and a built-in diagnostics page. Pro adds threshold alerts, email reports, and a public embed mode.
- * Version:           1.0.1
+ * Version:           1.0.2
  * Requires at least: 6.0
  * Requires PHP:      8.1
@@ -175 +175 @@
         // phpcs:enable WordPress.NamingConventions.PrefixAllGlobals
     }
-    define( 'IOTDW_VERSION', '1.0.1' );
+    define( 'IOTDW_VERSION', '1.0.2' );
     define( 'IOTDW_PLUGIN_FILE', __FILE__ );
     define( 'IOTDW_PLUGIN_DIR', plugin_dir_path( __FILE__ ) );

iot-data-widget/trunk/languages/iot-data-widget.pot

@@ -3 +3 @@
 msgid ""
 msgstr ""
-"Project-Id-Version: IoT Data Widget 1.0.1\n"
+"Project-Id-Version: IoT Data Widget 1.0.2\n"
 "Report-Msgid-Bugs-To: https://wordpress.org/support/plugin/iot-data-widget\n"
 "Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
@@ -10 +10 @@
 "Content-Type: text/plain; charset=UTF-8\n"
 "Content-Transfer-Encoding: 8bit\n"
-"POT-Creation-Date: 2026-10-06T10:46:23+00:00\n"
+"POT-Creation-Date: 2026-10-06T17:55:40+00:00\n"
 "PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
 "X-Generator: WP-CLI 2.12.0\n"
@@ -82 +82 @@
 #: admin/class-email-reports-page.php:151
 #: admin/class-email-reports-page.php:230
-#: admin/class-settings-page.php:213
-#: admin/class-settings-page.php:239
-#: admin/class-settings-page.php:261
-#: admin/class-settings-page.php:367
-#: admin/class-settings-page.php:435
+#: admin/class-settings-page.php:215
+#: admin/class-settings-page.php:246
+#: admin/class-settings-page.php:268
+#: admin/class-settings-page.php:374
+#: admin/class-settings-page.php:442
 #: admin/class-style-settings-page.php:157
+#: includes/class-local-network.php:140
+#: includes/class-local-network.php:173
 #: includes/premium/class-history-csv-export.php:59
 msgid "Insufficient permissions."
@@ -140 +142 @@
 #: admin/class-alert-rules-page.php:216
 #: admin/class-email-reports-page.php:207
-#: admin/class-settings-page.php:416
+#: admin/class-settings-page.php:423
 msgid "Please choose a valid connection."
 msgstr ""
@@ -146 +148 @@
 #: admin/class-alert-rules-page.php:220
 #: admin/class-email-reports-page.php:211
-#: admin/class-settings-page.php:420
+#: admin/class-settings-page.php:427
 msgid "Entity is required."
 msgstr ""
@@ -172 +174 @@
 msgstr ""
 
-#: admin/class-diagnostics-page.php:169
+#: admin/class-diagnostics-page.php:170
 msgid "IoT Data Widget — Diagnostic Report"
 msgstr ""
 
 #. translators: %s: current date/time in UTC, e.g. "2026-08-13 12:00:00"
-#: admin/class-diagnostics-page.php:171
+#: admin/class-diagnostics-page.php:172
 #, php-format
 msgid "Generated: %s UTC"
 msgstr ""
 
-#: admin/class-diagnostics-page.php:174
+#: admin/class-diagnostics-page.php:175
 msgid "== Environment =="
 msgstr ""
 
 #. translators: %s: PHP version, e.g. "8.1.34"
-#: admin/class-diagnostics-page.php:176
+#: admin/class-diagnostics-page.php:177
 #, php-format
 msgid "PHP version: %s"
@@ -193 +195 @@
 
 #. translators: %s: WordPress version, e.g. "7.0.3"
-#: admin/class-diagnostics-page.php:178
+#: admin/class-diagnostics-page.php:179
 #, php-format
 msgid "WordPress version: %s"
@@ -199 +201 @@
 
 #. translators: %s: active theme name and version, e.g. "Twenty Twenty-Five 1.4"
-#: admin/class-diagnostics-page.php:180
+#: admin/class-diagnostics-page.php:181
 #, php-format
 msgid "Active theme: %s"
@@ -205 +207 @@
 
 #. translators: %s: PHP memory limit, e.g. "256M"
-#: admin/class-diagnostics-page.php:182
+#: admin/class-diagnostics-page.php:183
 #, php-format
 msgid "Memory limit: %s"
@@ -211 +213 @@
 
 #. translators: %s: PHP max execution time in seconds, e.g. "30"
-#: admin/class-diagnostics-page.php:184
+#: admin/class-diagnostics-page.php:185
 #, php-format
 msgid "Max execution time: %ss"
@@ -217 +219 @@
 
 #. translators: %s: comma-separated list of other active plugin names, or "None"
-#: admin/class-diagnostics-page.php:187
+#: admin/class-diagnostics-page.php:188
 #, php-format
 msgid "Other active plugins: %s"
 msgstr ""
 
-#: admin/class-diagnostics-page.php:188
+#: admin/class-diagnostics-page.php:189
 #: admin/views/diagnostics.php:76
 msgid "None"
 msgstr ""
 
-#: admin/class-diagnostics-page.php:192
+#: admin/class-diagnostics-page.php:193
 msgid "== Scheduled tasks =="
 msgstr ""
 
-#: admin/class-diagnostics-page.php:195
+#: admin/class-diagnostics-page.php:196
 #: admin/views/diagnostics.php:102
 msgid "Not scheduled"
 msgstr ""
 
-#: admin/class-diagnostics-page.php:197
+#: admin/class-diagnostics-page.php:198
 #: admin/views/diagnostics.php:104
 msgid "Scheduled, never run yet"
 msgstr ""
 
-#: admin/class-diagnostics-page.php:199
+#: admin/class-diagnostics-page.php:200
 #: admin/views/diagnostics.php:106
 msgid "Scheduled & running"
@@ -247 +249 @@
 
 #. translators: %s: reason the last cron run failed
-#: admin/class-diagnostics-page.php:203
+#: admin/class-diagnostics-page.php:204
 #, php-format
 msgid "Scheduled, last run failed: %s"
@@ -253 +255 @@
 
 #. translators: 1: task label, 2: status text, 3: next scheduled run, 4: last run time
-#: admin/class-diagnostics-page.php:213
+#: admin/class-diagnostics-page.php:214
 #, php-format
 msgid "%1$s: %2$s (next: %3$s, last: %4$s)"
 msgstr ""
 
-#: admin/class-diagnostics-page.php:222
+#: admin/class-diagnostics-page.php:223
 msgid "== Connections =="
 msgstr ""
 
-#: admin/class-diagnostics-page.php:224
-#: admin/class-diagnostics-page.php:268
+#: admin/class-diagnostics-page.php:225
+#: admin/class-diagnostics-page.php:270
 msgid "None configured."
 msgstr ""
 
-#: admin/class-diagnostics-page.php:229
+#: admin/class-diagnostics-page.php:230
 msgid "no data received yet"
 msgstr ""
 
-#: admin/class-diagnostics-page.php:230
+#: admin/class-diagnostics-page.php:231
 msgid "active"
 msgstr ""
 
-#: admin/class-diagnostics-page.php:230
+#: admin/class-diagnostics-page.php:231
 msgid "inactive"
 msgstr ""
 
 #. translators: 1: connection name, 2: connector type label, 3: push status text, 4: last received time
-#: admin/class-diagnostics-page.php:234
+#: admin/class-diagnostics-page.php:235
 #, php-format
 msgid "%1$s (%2$s): %3$s, last received %4$s"
 msgstr ""
 
-#: admin/class-diagnostics-page.php:245
+#: admin/class-diagnostics-page.php:246
 #: admin/views/diagnostics.php:208
-#: admin/views/diagnostics.php:327
+#: admin/views/diagnostics.php:329
 msgid "No data yet"
 msgstr ""
 
-#: admin/class-diagnostics-page.php:246
+#: admin/class-diagnostics-page.php:247
 #: admin/views/diagnostics.php:210
 msgid "OK"
 msgstr ""
 
-#: admin/class-diagnostics-page.php:246
+#: admin/class-diagnostics-page.php:247
 #: admin/views/diagnostics.php:212
 msgid "Error"
@@ -302 +304 @@
 
 #. translators: 1: connection name, 2: connector type label, 3: status text, 4: consecutive error count, 5: last checked time
-#: admin/class-diagnostics-page.php:250
+#: admin/class-diagnostics-page.php:251
 #, php-format
 msgid "%1$s (%2$s): %3$s, %4$d consecutive errors, last checked %5$s"
@@ -308 +310 @@
 
 #. translators: %s: last recorded error message for this connection
-#: admin/class-diagnostics-page.php:260
+#: admin/class-diagnostics-page.php:261
 #, php-format
 msgid "  Last error: %s"
 msgstr ""
 
-#: admin/class-diagnostics-page.php:266
+#: admin/class-diagnostics-page.php:268
 msgid "== Alert rules =="
 msgstr ""
 
 #. translators: 1: connection name, 2: entity ID, 3: comparison operator (> or <), 4: threshold value, 5: "Triggered" or "Normal", 6: optional " (last triggered: ...)" note or empty string
-#: admin/class-diagnostics-page.php:275
+#: admin/class-diagnostics-page.php:277
 #, php-format
 msgid "%1$s / %2$s: %3$s %4$s — %5$s%6$s"
 msgstr ""
 
-#: admin/class-diagnostics-page.php:280
-#: admin/views/diagnostics.php:251
+#: admin/class-diagnostics-page.php:282
+#: admin/views/diagnostics.php:252
 #: includes/premium/admin-views/alert-rules-page.php:54
 msgid "Triggered"
 msgstr ""
 
-#: admin/class-diagnostics-page.php:280
-#: admin/views/diagnostics.php:252
+#: admin/class-diagnostics-page.php:282
+#: admin/views/diagnostics.php:253
 #: includes/premium/admin-views/alert-rules-page.php:55
 msgid "Normal"
@@ -336 +338 @@
 
 #. translators: %s: last-triggered date/time in UTC
-#: admin/class-diagnostics-page.php:283
+#: admin/class-diagnostics-page.php:285
 #, php-format
 msgid " (last triggered: %s UTC)"
 msgstr ""
 
-#: admin/class-diagnostics-page.php:290
+#: admin/class-diagnostics-page.php:292
 msgid "== Recent errors =="
 msgstr ""
 
-#: admin/class-diagnostics-page.php:292
+#: admin/class-diagnostics-page.php:294
 msgid "None recorded."
 msgstr ""
 
 #. translators: 1: date/time in UTC, 2: error source, 3: error message
-#: admin/class-diagnostics-page.php:297
+#: admin/class-diagnostics-page.php:299
 #, php-format
 msgid "[%1$s UTC] %2$s: %3$s"
 msgstr ""
 
-#: admin/class-diagnostics-page.php:306
+#: admin/class-diagnostics-page.php:308
 msgid "== Data size =="
 msgstr ""
 
 #. translators: 1: table label (already translated), 2: row count
-#: admin/class-diagnostics-page.php:310
+#: admin/class-diagnostics-page.php:312
 #, php-format
 msgid "%1$s: %2$d"
 msgstr ""
 
-#: admin/class-diagnostics-page.php:331
+#: admin/class-diagnostics-page.php:336
 msgid "Recorded value history"
 msgstr ""
 
-#: admin/class-diagnostics-page.php:332
+#: admin/class-diagnostics-page.php:339
 msgid "Widget usage tracking"
 msgstr ""
 
-#: admin/class-diagnostics-page.php:333
-#: admin/views/diagnostics.php:235
+#: admin/class-diagnostics-page.php:342
+#: admin/views/diagnostics.php:236
 #: includes/premium/admin-views/alert-rules-page.php:36
 msgid "Alert rules"
 msgstr ""
 
-#: admin/class-diagnostics-page.php:334
+#: admin/class-diagnostics-page.php:346
 msgid "MQTT cache"
 msgstr ""
 
-#: admin/class-diagnostics-page.php:335
+#: admin/class-diagnostics-page.php:349
 msgid "Error log"
 msgstr ""
 
-#: admin/class-diagnostics-page.php:481
+#: admin/class-diagnostics-page.php:497
 msgid "Record value history"
 msgstr ""
 
-#: admin/class-diagnostics-page.php:482
+#: admin/class-diagnostics-page.php:498
 msgid "Clean up old history & error log"
 msgstr ""
 
-#: admin/class-diagnostics-page.php:483
+#: admin/class-diagnostics-page.php:499
 msgid "Poll MQTT brokers"
 msgstr ""
 
-#: admin/class-diagnostics-page.php:487
+#: admin/class-diagnostics-page.php:500
 msgid "Send due email reports"
 msgstr ""
@@ -421 +423 @@
 
 #: admin/class-settings-page.php:101
-#: admin/views/general-settings-page.php:25
+#: admin/views/general-settings-page.php:27
 msgid "IoT Data Widget — Settings"
 msgstr ""
@@ -429 +431 @@
 msgstr ""
 
-#: admin/class-settings-page.php:288
+#: admin/class-settings-page.php:295
 msgid "No file was uploaded, or the upload failed."
 msgstr ""
 
-#: admin/class-settings-page.php:292
+#: admin/class-settings-page.php:299
 msgid "The uploaded file is too large to be a valid export."
 msgstr ""
 
-#: admin/class-settings-page.php:298
+#: admin/class-settings-page.php:305
 msgid "Invalid upload."
 msgstr ""
 
-#: admin/class-settings-page.php:304
+#: admin/class-settings-page.php:311
 msgid "Could not read the uploaded file."
 msgstr ""
 
-#: admin/class-settings-page.php:424
+#: admin/class-settings-page.php:431
 msgid "Please choose a valid widget style."
 msgstr ""
@@ -649 +651 @@
 
 #: admin/views/connector-form.php:18
-#: admin/views/general-settings-page.php:264
+#: admin/views/general-settings-page.php:281
 #: admin/views/wizard/step-push-2-channel.php:35
 #: includes/premium/admin-views/alert-rule-form.php:20
@@ -663 +665 @@
 
 #: admin/views/connector-form.php:32
-#: admin/views/settings-page.php:139
+#: admin/views/settings-page.php:141
 msgid "Add connection"
 msgstr ""
@@ -723 +725 @@
 #: admin/views/diagnostics.php:93
 #: admin/views/diagnostics.php:154
-#: admin/views/diagnostics.php:241
+#: admin/views/diagnostics.php:242
 #: includes/premium/admin-views/alert-rules-page.php:44
 msgid "Status"
@@ -750 +752 @@
 #: admin/views/diagnostics.php:171
 #: admin/views/diagnostics.php:202
-#: admin/views/diagnostics.php:257
-#: admin/views/diagnostics.php:290
+#: admin/views/diagnostics.php:258
+#: admin/views/diagnostics.php:292
 #, php-format
 msgid "%s UTC"
@@ -761 +763 @@
 
 #: admin/views/diagnostics.php:151
-#: admin/views/diagnostics.php:238
-#: admin/views/general-settings-page.php:169
-#: admin/views/general-settings-page.php:227
-#: admin/views/general-settings-page.php:277
+#: admin/views/diagnostics.php:239
+#: admin/views/general-settings-page.php:186
+#: admin/views/general-settings-page.php:244
+#: admin/views/general-settings-page.php:294
 #: includes/premium/admin-views/alert-rule-form.php:33
 #: includes/premium/admin-views/alert-rules-page.php:40
@@ -775 +777 @@
 
 #: admin/views/diagnostics.php:152
-#: admin/views/settings-page.php:67
+#: admin/views/settings-page.php:69
 msgid "Type"
 msgstr ""
@@ -804 +806 @@
 
 #: admin/views/diagnostics.php:230
-#: admin/views/settings-page.php:128
+#: admin/views/settings-page.php:130
 msgid "No connections configured yet."
 msgstr ""
 
-#: admin/views/diagnostics.php:239
-#: admin/views/general-settings-page.php:182
-#: admin/views/general-settings-page.php:193
-#: admin/views/general-settings-page.php:228
-#: admin/views/general-settings-page.php:293
-#: admin/views/general-settings-page.php:304
+#: admin/views/diagnostics.php:240
+#: admin/views/general-settings-page.php:199
+#: admin/views/general-settings-page.php:210
+#: admin/views/general-settings-page.php:245
+#: admin/views/general-settings-page.php:310
+#: admin/views/general-settings-page.php:321
 #: admin/views/wizard/step-5-done.php:34
 #: admin/views/wizard/step-push-3-snippet.php:117
@@ -831 +833 @@
 msgstr[1] ""
 
-#: admin/views/diagnostics.php:240
+#: admin/views/diagnostics.php:241
 #: includes/premium/admin-views/alert-rule-form.php:81
 #: includes/premium/admin-views/alert-rules-page.php:42
@@ -837 +839 @@
 msgstr ""
 
-#: admin/views/diagnostics.php:242
+#: admin/views/diagnostics.php:243
 msgid "Last triggered"
 msgstr ""
 
-#: admin/views/diagnostics.php:271
+#: admin/views/diagnostics.php:272
 #: includes/premium/admin-views/alert-rules-page.php:81
 msgid "No alert rules configured yet."
 msgstr ""
 
-#: admin/views/diagnostics.php:276
+#: admin/views/diagnostics.php:278
 msgid "Recent errors"
 msgstr ""
 
-#: admin/views/diagnostics.php:279
+#: admin/views/diagnostics.php:281
 msgid "When"
 msgstr ""
 
-#: admin/views/diagnostics.php:280
+#: admin/views/diagnostics.php:282
 msgid "Source"
 msgstr ""
 
-#: admin/views/diagnostics.php:281
+#: admin/views/diagnostics.php:283
 msgid "Message"
 msgstr ""
 
-#: admin/views/diagnostics.php:300
+#: admin/views/diagnostics.php:302
 msgid "No errors recorded — everything is working."
 msgstr ""
 
-#: admin/views/diagnostics.php:305
+#: admin/views/diagnostics.php:307
 msgid "Data size"
 msgstr ""
 
-#: admin/views/diagnostics.php:311
+#: admin/views/diagnostics.php:313
 msgid "Table"
 msgstr ""
 
-#: admin/views/diagnostics.php:312
+#: admin/views/diagnostics.php:314
 msgid "Rows"
 msgstr ""
 
-#: admin/views/general-settings-page.php:29
+#: admin/views/general-settings-page.php:31
 msgid "Settings saved."
 msgstr ""
 
-#: admin/views/general-settings-page.php:30
+#: admin/views/general-settings-page.php:32
 msgid "Manually tracked entity added."
 msgstr ""
 
-#: admin/views/general-settings-page.php:31
+#: admin/views/general-settings-page.php:33
 msgid "Manually tracked entity removed."
 msgstr ""
 
 #. translators: %d: number of imported connections
-#: admin/views/general-settings-page.php:50
+#: admin/views/general-settings-page.php:52
 #, php-format
 msgid "Imported %d connection."
@@ -899 +901 @@
 
 #. translators: %d: number of skipped entries
-#: admin/views/general-settings-page.php:61
+#: admin/views/general-settings-page.php:63
 #, php-format
 msgid "Skipped %d entry:"
@@ -906 +908 @@
 msgstr[1] ""
 
-#: admin/views/general-settings-page.php:74
+#: admin/views/general-settings-page.php:76
 msgid "Imported connections need their password/authorization re-entered before use — these are never included in an export, by design."
 msgstr ""
 
-#: admin/views/general-settings-page.php:79
+#: admin/views/general-settings-page.php:81
 msgid "Import failed:"
 msgstr ""
 
-#: admin/views/general-settings-page.php:86
+#: admin/views/general-settings-page.php:88
 msgid "Branding"
 msgstr ""
 
-#: admin/views/general-settings-page.php:92
+#: admin/views/general-settings-page.php:94
 msgid "Front-end attribution"
 msgstr ""
 
-#: admin/views/general-settings-page.php:96
+#: admin/views/general-settings-page.php:98
 msgid "Show \"Powered by IoT Data Widget\" beneath widgets"
 msgstr ""
 
-#: admin/views/general-settings-page.php:99
+#: admin/views/general-settings-page.php:101
 msgid "Off by default. Turn this on if you'd like to credit the plugin beneath your widgets."
 msgstr ""
 
-#: admin/views/general-settings-page.php:104
+#: admin/views/general-settings-page.php:106
 msgid "Stale data threshold"
 msgstr ""
 
-#: admin/views/general-settings-page.php:114
+#: admin/views/general-settings-page.php:116
 msgid "minutes"
 msgstr ""
 
-#: admin/views/general-settings-page.php:116
+#: admin/views/general-settings-page.php:118
 msgid "Past this age, widgets show the value grayed out with a timestamp instead of implying it's current — mainly relevant for push channels, where a device can stop sending data without any explicit connection error."
 msgstr ""
 
-#: admin/views/general-settings-page.php:121
+#: admin/views/general-settings-page.php:123
+msgid "Local network"
+msgstr ""
+
+#: admin/views/general-settings-page.php:127
+msgid "Allow local network addresses"
+msgstr ""
+
+#: admin/views/general-settings-page.php:130
+msgid "Turn this on only if WordPress runs on the same network as your devices (e.g. a home server) and connects to addresses like 192.168.x.x or homeassistant.local. Off by default: it stops a misconfigured or malicious URL from reaching other services on your server's network. Cloud metadata and link-local addresses are always blocked."
+msgstr ""
+
+#: admin/views/general-settings-page.php:133
+msgid "On a multisite network, only a network administrator can change this."
+msgstr ""
+
+#: admin/views/general-settings-page.php:138
 msgid "Uninstall"
 msgstr ""
 
-#: admin/views/general-settings-page.php:125
+#: admin/views/general-settings-page.php:142
 msgid "Remove all plugin data when the plugin is deleted"
 msgstr ""
 
-#: admin/views/general-settings-page.php:128
+#: admin/views/general-settings-page.php:145
 msgid "Off by default. Deactivating the plugin (e.g. during an update) never touches your data either way — only checking this box AND THEN deleting the plugin from the Plugins screen removes connections, history, alerts and every other setting. Leave this unchecked if you might reinstall later."
 msgstr ""
 
-#: admin/views/general-settings-page.php:133
+#: admin/views/general-settings-page.php:150
 msgid "Save settings"
 msgstr ""
 
-#: admin/views/general-settings-page.php:136
+#: admin/views/general-settings-page.php:153
 msgid "Export connections"
 msgstr ""
 
-#: admin/views/general-settings-page.php:137
+#: admin/views/general-settings-page.php:154
 msgid "Downloads a JSON file with all your connections. Passwords and authorization tokens are never included — re-enter them after importing."
 msgstr ""
 
-#: admin/views/general-settings-page.php:141
+#: admin/views/general-settings-page.php:158
 msgid "Download export"
 msgstr ""
 
-#: admin/views/general-settings-page.php:144
+#: admin/views/general-settings-page.php:161
 msgid "Import connections"
 msgstr ""
 
-#: admin/views/general-settings-page.php:145
+#: admin/views/general-settings-page.php:162
 msgid "Imports connections from a previously exported JSON file. Connections with a matching ID are overwritten; others are added. Existing connections not present in the file are left untouched."
 msgstr ""
 
-#: admin/views/general-settings-page.php:150
+#: admin/views/general-settings-page.php:167
 msgid "Import"
 msgstr ""
 
-#: admin/views/general-settings-page.php:153
+#: admin/views/general-settings-page.php:170
 msgid "Export history data"
 msgstr ""
 
-#: admin/views/general-settings-page.php:156
+#: admin/views/general-settings-page.php:173
 #: includes/premium/class-history-csv-export.php:71
 msgid "CSV export of recorded history requires the Pro version."
 msgstr ""
 
-#: admin/views/general-settings-page.php:160
+#: admin/views/general-settings-page.php:177
 msgid "Downloads the raw recorded history for one connection/entity as a CSV file, for further analysis outside the plugin. Only entities used by a Chart/Sparkline widget (or manually tracked below) have history recorded."
 msgstr ""
 
-#: admin/views/general-settings-page.php:172
-#: admin/views/general-settings-page.php:280
+#: admin/views/general-settings-page.php:189
+#: admin/views/general-settings-page.php:297
 #: includes/premium/admin-views/alert-rule-form.php:40
 #: includes/premium/admin-views/email-report-form.php:40
@@ -1003 +1021 @@
 msgstr ""
 
-#: admin/views/general-settings-page.php:187
-#: admin/views/general-settings-page.php:298
+#: admin/views/general-settings-page.php:204
+#: admin/views/general-settings-page.php:315
 #: includes/premium/admin-views/alert-rule-form.php:58
 #: includes/premium/admin-views/email-report-form.php:58
@@ -1012 +1030 @@
 msgstr ""
 
-#: admin/views/general-settings-page.php:197
+#: admin/views/general-settings-page.php:214
 msgid "Useful if the entity was renamed/removed from the live connection since history was recorded."
 msgstr ""
 
-#: admin/views/general-settings-page.php:201
-#: admin/views/general-settings-page.php:315
+#: admin/views/general-settings-page.php:218
+#: admin/views/general-settings-page.php:332
 #: includes/premium/admin-views/alert-rule-form.php:75
 #: includes/premium/admin-views/email-report-form.php:75
@@ -1025 +1043 @@
 msgstr ""
 
-#: admin/views/general-settings-page.php:207
+#: admin/views/general-settings-page.php:224
 msgid "From"
 msgstr ""
 
-#: admin/views/general-settings-page.php:211
+#: admin/views/general-settings-page.php:228
 msgid "To"
 msgstr ""
 
-#: admin/views/general-settings-page.php:216
+#: admin/views/general-settings-page.php:233
 msgid "Download CSV"
 msgstr ""
 
-#: admin/views/general-settings-page.php:220
+#: admin/views/general-settings-page.php:237
 msgid "Manually tracked entities"
 msgstr ""
 
-#: admin/views/general-settings-page.php:222
+#: admin/views/general-settings-page.php:239
 msgid "Widgets placed in post/page content are detected automatically. If you output a widget from a theme template instead (e.g. in a widget area or a custom page template), add it here so it still gets polled for history/alerts even though there's no post content to scan."
 msgstr ""
 
-#: admin/views/general-settings-page.php:229
+#: admin/views/general-settings-page.php:246
 #: blocks/iot-widget/src/edit.js:478
 msgid "Style"
 msgstr ""
 
-#: admin/views/general-settings-page.php:241
+#: admin/views/general-settings-page.php:258
 msgid "Stop tracking this entity?"
 msgstr ""
 
-#: admin/views/general-settings-page.php:242
+#: admin/views/general-settings-page.php:259
 #: blocks/iot-widget/src/grid-item-editor.js:117
 msgid "Remove"
 msgstr ""
 
-#: admin/views/general-settings-page.php:255
+#: admin/views/general-settings-page.php:272
 msgid "No manually tracked entities yet."
 msgstr ""
 
-#: admin/views/general-settings-page.php:256
+#: admin/views/general-settings-page.php:273
 msgid "Track your first entity"
 msgstr ""
 
-#: admin/views/general-settings-page.php:288
+#: admin/views/general-settings-page.php:305
 #: includes/premium/admin-views/alert-rule-form.php:48
 #: includes/premium/admin-views/email-report-form.php:48
@@ -1073 +1091 @@
 msgstr ""
 
-#: admin/views/general-settings-page.php:321
+#: admin/views/general-settings-page.php:338
 msgid "Widget style"
 msgstr ""
 
-#: admin/views/general-settings-page.php:324
+#: admin/views/general-settings-page.php:341
 #: blocks/iot-widget/src/edit.js:75
 msgid "Card"
 msgstr ""
 
-#: admin/views/general-settings-page.php:325
+#: admin/views/general-settings-page.php:342
 #: blocks/iot-widget/src/edit.js:76
 msgid "Status list"
 msgstr ""
 
-#: admin/views/general-settings-page.php:326
+#: admin/views/general-settings-page.php:343
 #: blocks/iot-widget/src/edit.js:77
 msgid "Gauge"
 msgstr ""
 
-#: admin/views/general-settings-page.php:327
+#: admin/views/general-settings-page.php:344
 #: blocks/iot-widget/src/edit.js:78
 msgid "Chart"
 msgstr ""
 
-#: admin/views/general-settings-page.php:328
+#: admin/views/general-settings-page.php:345
 #: blocks/iot-widget/src/edit.js:79
 msgid "Mini trend (sparkline)"
 msgstr ""
 
-#: admin/views/general-settings-page.php:331
+#: admin/views/general-settings-page.php:348
 msgid "Must match the style actually rendered by your theme template — Chart/Sparkline are what determine whether this entity gets recorded into history."
 msgstr ""
 
-#: admin/views/general-settings-page.php:337
+#: admin/views/general-settings-page.php:354
 msgid "Add manually tracked entity"
 msgstr ""
 
 #: admin/views/partials/connector-fields.php:30
-#: admin/views/settings-page.php:66
+#: admin/views/settings-page.php:68
 msgid "Name"
 msgstr ""
@@ -1120 +1138 @@
 
 #: admin/views/partials/connector-fields.php:73
-#: admin/views/settings-page.php:68
+#: admin/views/settings-page.php:70
 msgid "URL"
 msgstr ""
@@ -1182 +1200 @@
 msgstr ""
 
-#: admin/views/settings-page.php:36
-msgid "The free version supports one connection. Upgrade to Pro for unlimited connections."
-msgstr ""
-
-#: admin/views/settings-page.php:40
+#: admin/views/settings-page.php:38
+msgid "The demo connection could not be saved. Please try again, or add a connection manually below."
+msgstr ""
+
+#: admin/views/settings-page.php:42
 msgid "Connection saved."
 msgstr ""
 
-#: admin/views/settings-page.php:41
+#: admin/views/settings-page.php:43
 msgid "Connection deleted."
 msgstr ""
 
-#: admin/views/settings-page.php:51
+#: admin/views/settings-page.php:53
 msgid "Now that you have a connection, try these next:"
 msgstr ""
 
-#: admin/views/settings-page.php:57
+#: admin/views/settings-page.php:59
 msgid "Dismiss this notice."
 msgstr ""
 
-#: admin/views/settings-page.php:62
+#: admin/views/settings-page.php:64
 msgid "Saved connections"
 msgstr ""
 
-#: admin/views/settings-page.php:69
+#: admin/views/settings-page.php:71
 msgid "Shortcode"
 msgstr ""
 
-#: admin/views/settings-page.php:108
+#: admin/views/settings-page.php:110
 #: includes/premium/admin-views/alert-rules-page.php:60
 #: includes/premium/admin-views/email-reports-page.php:56
@@ -1216 +1234 @@
 msgstr ""
 
-#: admin/views/settings-page.php:114
+#: admin/views/settings-page.php:116
 msgid "Are you sure you want to delete this connection?"
 msgstr ""
 
-#: admin/views/settings-page.php:129
+#: admin/views/settings-page.php:131
 msgid "Add your first connection"
 msgstr ""
 
-#: admin/views/settings-page.php:138
+#: admin/views/settings-page.php:140
 msgid "Edit connection"
 msgstr ""
@@ -1290 +1308 @@
 msgstr ""
 
-#: admin/views/wizard/step-0-location.php:31
+#: admin/views/wizard/step-0-location.php:32
 msgid "Same network as my devices (Raspberry Pi, NAS, home server) — my site fetches data from the device"
 msgstr ""
 
-#: admin/views/wizard/step-0-location.php:47
+#: admin/views/wizard/step-0-location.php:51
 msgid "On external/shared hosting, but my device has its own cloud service (Shelly Cloud, Supla, a publicly-reachable Home Assistant) — my site fetches data from there"
 msgstr ""
 
-#: admin/views/wizard/step-0-location.php:52
+#: admin/views/wizard/step-0-location.php:53
+msgid "On external/shared hosting, but my device has its own cloud service (a publicly-reachable Home Assistant; Shelly Cloud and Supla in Pro) — my site fetches data from there"
+msgstr ""
+
+#: admin/views/wizard/step-0-location.php:60
 msgid "Not sure? Choose the first option — it's the safer default."
 msgstr ""
 
-#: admin/views/wizard/step-0-location.php:57
+#: admin/views/wizard/step-0-location.php:65
 msgid "Devices behind a home router (NAT) almost never accept incoming connections from the internet — if your WordPress is hosted externally, it typically cannot reach a device address like 192.168.x.x at all. Sending data out from the device instead always works, and so does fetching from a cloud service the device already reports to."
 msgstr ""
 
-#: admin/views/wizard/step-0-location.php:71
+#: admin/views/wizard/step-0-location.php:79
 msgid "Security note: in push mode, this plugin never stores any credentials to your devices — the device sends data out, authenticated by a token this plugin generates that only allows writing one entity to one channel. In pull mode, a copy of your device's own credentials (e.g. a Home Assistant access token) is stored in your WordPress database."
 msgstr ""
 
-#: admin/views/wizard/step-0-location.php:75
+#: admin/views/wizard/step-0-location.php:83
 #: admin/views/wizard/step-1-connection-type.php:92
 #: admin/views/wizard/step-2-configure.php:87
@@ -1582 +1604 @@
 msgstr ""
 
+#: includes/class-http-client.php:98
+msgid "The server redirected too many times."
+msgstr ""
+
+#: includes/class-http-client.php:133
+msgid "The configured URL has no valid host (only http:// and https:// addresses are supported)."
+msgstr ""
+
+#. translators: %s: the host that was blocked
+#: includes/class-http-client.php:151
+#: includes/class-http-client.php:171
+#, php-format
+msgid "Refusing to connect to \"%s\" — it resolves to a link-local or reserved address (such as a cloud metadata service). This is always blocked."
+msgstr ""
+
+#. translators: %s: the host that was blocked
+#: includes/class-http-client.php:252
+#, php-format
+msgid "Refusing to connect to \"%s\" — it is a local network address. If WordPress runs on the same network as the device, enable \"Allow local network addresses\" under IoT Data Widget → Settings. Otherwise, use a push channel instead."
+msgstr ""
+
+#: includes/class-local-network.php:205
+msgid "Local network addresses are now allowed, so this site can reach devices on your network. You can change this under IoT Data Widget → Settings."
+msgstr ""
+
+#: includes/class-local-network.php:210
+msgid "Connections to local network addresses are blocked on this site, and only a network administrator can allow them (IoT Data Widget → Settings). Until then, choose push mode instead."
+msgstr ""
+
+#: includes/class-local-network.php:222
+msgid "Security update: IoT Data Widget now refuses connections to local network addresses unless \"Allow local network addresses\" is turned on. This site already connects to a device on your local network, so the setting was turned on automatically — nothing stopped working."
+msgstr ""
+
+#: includes/class-local-network.php:224
+msgid "Review settings"
+msgstr ""
+
+#: includes/class-local-network.php:226
+msgid "Dismiss"
+msgstr ""
+
 #: includes/class-push-ingest.php:120
 msgid "Request body is too large."
@@ -1702 +1765 @@
 
 #: includes/class-renderer.php:226
-#: includes/class-shortcode.php:133
+#: includes/class-shortcode.php:153
 msgid "This style requires the Pro version."
 msgstr ""
@@ -1773 +1836 @@
 msgstr[1] ""
 
-#: includes/class-rest-api.php:726
+#: includes/class-rest-api.php:732
 msgid "Not found."
 msgstr ""
 
-#: includes/class-shortcode.php:146
+#: includes/class-shortcode.php:166
 msgid "Fill in the \"connection\" and \"entity\" attributes in the [iotdw_widget] shortcode."
 msgstr ""
 
 #. translators: %s: connection name or ID given in the shortcode
-#: includes/class-shortcode.php:159
-#: includes/class-shortcode.php:461
-#: includes/class-shortcode.php:531
+#: includes/class-shortcode.php:179
+#: includes/class-shortcode.php:481
+#: includes/class-shortcode.php:551
 #, php-format
 msgid "Connection \"%s\" was not found."
 msgstr ""
 
-#: includes/class-shortcode.php:434
+#: includes/class-shortcode.php:454
 msgid "Powered by IoT Data Widget"
 msgstr ""
 
-#: includes/class-shortcode.php:448
+#: includes/class-shortcode.php:468
 msgid "Fill in the \"connection\" and \"entities\" attributes (comma-separated entity IDs) in the [iotdw_widget style=\"list\"] shortcode."
 msgstr ""
 
-#: includes/class-shortcode.php:512
+#: includes/class-shortcode.php:532
 msgid "Add at least one entity to the [iotdw_widget style=\"grid\"] shortcode via the \"items\" attribute."
 msgstr ""
 
-#: includes/class-shortcode.php:513
+#: includes/class-shortcode.php:533
 msgid "The \"items\" attribute of the [iotdw_widget style=\"grid\"] shortcode must be a comma-separated list of \"connection|entity\" pairs (e.g. items=\"Home|sensor.temperature,Workshop|relay_state\") — none of the given items matched that format."
 msgstr ""
 
 #. translators: %s: PHP error message
-#: includes/class-shortcode.php:714
-#: includes/class-shortcode.php:746
+#: includes/class-shortcode.php:780
+#: includes/class-shortcode.php:812
 #, php-format
 msgid "Unexpected connector error: %s"
 msgstr ""
 
-#: includes/class-shortcode.php:861
+#: includes/class-shortcode.php:927
+#: includes/class-value-normalizer.php:103
 #: blocks/iot-widget/src/edit.js:641
 msgid "On"
 msgstr ""
 
-#: includes/class-shortcode.php:862
+#: includes/class-shortcode.php:928
+#: includes/class-value-normalizer.php:105
 #: blocks/iot-widget/src/edit.js:651
 msgid "Off"
@@ -1823 +1888 @@
 
 #. translators: %s: the local-network host/IP that was configured
-#: includes/connectors/abstract-connector.php:136
+#: includes/connectors/abstract-connector.php:141
 #, php-format
 msgid "This looks like a local network address (%s) — it will only work if your WordPress server is on the same network as the device. Most external/shared hosting can't reach it; consider Shelly Cloud, a publicly reachable Home Assistant instance, or a differently-reachable REST endpoint instead."
@@ -2337 +2402 @@
 msgstr ""
 
-#: includes/premium/class-mqtt-poll-engine.php:186
+#: includes/premium/class-mqtt-poll-engine.php:194
 msgid "Missing MQTT broker host in the connection settings."
 msgstr ""
 
-#: includes/premium/class-mqtt-poll-engine.php:261
+#: includes/premium/class-mqtt-poll-engine.php:269
 msgid "Missing EMQX REST API URL in the connection settings."
 msgstr ""
 
 #. translators: %d: HTTP status code
-#: includes/premium/class-mqtt-poll-engine.php:298
+#: includes/premium/class-mqtt-poll-engine.php:306
 #, php-format
 msgid "EMQX REST API returned an unexpected response code: %d."
 msgstr ""
 
-#: includes/premium/class-mqtt-poll-engine.php:308
+#: includes/premium/class-mqtt-poll-engine.php:316
 msgid "Invalid or unexpected response shape from the EMQX REST API."
 msgstr ""

iot-data-widget/trunk/public/css/widget-styles.css

@@ +1 @@
+/*
+ * Wrapper z IOTDW_Shortcode::render() — celowo bez szerokości/marginesów
+ * poziomych: dostaje je od motywu jak każdy inny blok (kolumna treści).
+ * Odstęp między dwoma widgetami pod rząd przez :where() (zerowa
+ * specyficzność) — motywy blokowe (blockGap) i tak go nadpisują swoim.
+ */
+:where(.iot-dw-widget-wrap + .iot-dw-widget-wrap) {
+        margin-top: 1em;
+}
+
 .iot-dw-widget {
         display: inline-block;
@@ -137 +147 @@
         display: block;
         list-style: none;
-        /* Tylko poziome — pionowe zostawiamy motywowi/WP (odstęp między blokami). */
-        margin-left: 0;
-        margin-right: 0;
+        margin: 0;
         padding: 0;
         box-sizing: border-box;
@@ -351 +359 @@
 }
 
-/*
- * Motywy blokowe (np. Twenty Twenty-Five): layout "constrained" wyrównuje
- * dzieci do kolumny treści przez `margin-left/right: auto !important`, ale
- * na elementach inline-level `auto` liczy się jako 0 — card/gauge/sparkline
- * lądowały na lewej krawędzi strony zamiast w kolumnie. Tu: blokowe, szerokość
- * wg treści, lewa krawędź = lewa krawędź kolumny. !important, bo reguła WP też
- * go ma (wygrywa wyższa specyficzność). Poza layoutem constrained (motywy
- * klasyczne, grupa Row/flex) bez zmian — dalej inline, obok siebie.
- */
-.is-layout-constrained > .iot-dw-widget--card,
-.is-layout-constrained > .iot-dw-widget--gauge,
-.is-layout-constrained > .iot-dw-widget--sparkline {
-        width: fit-content;
-        margin-left: max( 0px, calc( ( 100% - var( --wp--style--global--content-size, 100% ) ) / 2 ) ) !important;
-        margin-right: auto !important;
-}
-
-.is-layout-constrained > .iot-dw-widget--card {
-        display: block;
-}
-
-.is-layout-constrained > .iot-dw-widget--gauge,
-.is-layout-constrained > .iot-dw-widget--sparkline {
-        display: flex;
-}

iot-data-widget/trunk/readme.txt

@@ -5 +5 @@
 Tested up to: 7.1
 Requires PHP: 8.1
-Stable tag: 1.0.1
+Stable tag: 1.0.2
 License: GPLv2 or later
 License URI: https://www.gnu.org/licenses/gpl-2.0.html
@@ -22 +22 @@
 2. Activate the plugin through the **Plugins** screen — this opens the **setup wizard** automatically (skip this step by activating several plugins at once, or by clicking "Skip the wizard" on its first screen).
 3. Follow the wizard: pick a connection type, configure and test it live, choose an entity, and copy the ready-made shortcode from the preview screen — or configure a connection manually under **IoT Data Widget** in the admin menu instead:
-   * **Home Assistant**: enter your instance URL (e.g. `http://homeassistant.local:8123`) and a Long-Lived Access Token. Generate one in Home Assistant under your profile page → **Security** → **Long-Lived Access Tokens** → **Create Token**.
+   * **Home Assistant**: enter your instance URL (e.g. `http://homeassistant.local:8123`) and a Long-Lived Access Token. Generate one in Home Assistant under your profile page → **Security** → **Long-Lived Access Tokens** → **Create Token**. If the URL is a local network address, also turn on **Settings → Allow local network addresses** (the wizard's "Same network as my devices" option does this for you).
    * **Push mode**: no URL/credentials to enter — the wizard generates a channel and a ready-to-paste snippet for your device instead.
    * **Generic REST, advanced mode**: enter the full URL of a JSON endpoint. Leave Authorization empty for public APIs, or enter a full header (e.g. `Authorization: Bearer xxx` or `X-API-Key: xxx`) if the API requires one.
@@ -66 +66 @@
 Generic REST (entity is a JSONPath into the JSON response): `[iotdw_widget connection="Weather API" entity="current_weather.temperature"]`
 
-Entities with a non-numeric state (a relay's on/off, a presence sensor's home/away...) show their real value ("ON", "true") in Card and Status list styles.
+Entities with a non-numeric state (a relay's on/off, a presence sensor's home/away...) show their real state ("ON", "home") in Card and Status list styles; a raw true/false from a JSON API shows as "On"/"Off".
 
 = I don't want to use the setup wizard — can I skip it? =
@@ -93 +93 @@
 
 Push mode sidesteps this entirely: the plugin never stores any credentials to your devices, because your device sends data to the plugin instead of the other way around.
+
+= My device is on the same network as WordPress, but the connection is refused =
+
+For security, the plugin doesn't connect to local network addresses (like 192.168.x.x or homeassistant.local) unless you allow it. If WordPress runs on the same network as your devices — a Raspberry Pi, NAS or home server — turn on **IoT Data Widget → Settings → Allow local network addresses** (on a multisite network, only a network administrator can). Choosing "Same network as my devices" in the setup wizard does this for you. If your site is hosted externally, use push mode instead: it can't reach your home network anyway.
 
 = Does this work with any REST API, or only Home Assistant? =
@@ -133 +137 @@
 == Changelog ==
 
+= 1.0.2 =
+* Security: requests to local network addresses (192.168.x.x, 10.x.x.x, homeassistant.local…) are now blocked unless "Allow local network addresses" is turned on under Settings; cloud metadata and link-local addresses are always blocked, including via redirects. If this site already connects to a device on your local network, the setting is turned on automatically during the update — nothing stops working. Choosing "Same network as my devices" in the setup wizard turns it on too.
+* Added: widgets placed in classic theme widget areas (sidebars, footers) now load their styles and refresh live — previously they appeared unstyled and never updated.
+* Fixed: widgets line up with the content column in classic themes such as Twenty Twenty-One. Widgets placed one after another now stack vertically — use a Row or Columns block to place them side by side.
+* Fixed: "Test connection" (and alert e-mails in Pro) show "On"/"Off" instead of "true"/"false" for on/off devices such as Shelly relays.
+* Fixed: the free version no longer schedules or lists Pro-only background tasks (MQTT polling, email reports, value history); updating removes them.
+* Fixed: the setup wizard labels Shelly Cloud and Supla as Pro, and shows an accurate message if the demo connection can't be saved.
+
 = 1.0.1 =
 * Added: "Upgrade" link in the plugin menu and the plugin list, and an upgrade link next to Pro-only styles (visible to administrators only).