Release 4.5.1: streamline first successful Connect setup

changelog.txt

@@ -1,4 +1,15 @@
 == Changelog ==
+= 4.5.1 - 2026-11-12 =
+* ENHANCEMENT - fresh, unconfigured activations and the Plugins screen lead directly to Stateless Connect; manual bucket and service-account settings remain available under Advanced.
+* ENHANCEMENT - the recommended setup creates a project and US multi-region bucket with CDN mode, while existing projects, buckets, locations and modes remain available under Advanced.
+* ENHANCEMENT - Google sign-in stays in the same tab, setup explains billing and key custody, and missing billing has a Check again path that preserves the storage choices.
+* ENHANCEMENT - storage setup shows its progress on the Connect screen and no longer depends on one long request: it survives slow Google operations, proxy timeouts and page reloads, and an interrupted setup resumes its saved project, bucket and key instead of starting over.
+* NEW - privacy-limited setup events measure actual Connect clicks through provisioning and the first verified upload without recording site addresses, email addresses, project IDs, bucket names or free-form errors.
+* FIX - storage drafts restore the selected project and bucket after a failed attempt, and new project names are generated in Google's accepted format.
+* FIX - the result of a storage setup, including the explanation when it fails, stays on the Connect screen until the next action, so reloading the page no longer loses it.
+* FIX - a storage setup that is interrupted or replaced by another no longer leaves a service account key behind: the next setup or a disconnect revokes it, and a revocation that fails is retried.
+* SECURITY - stateless.ci excludes OAuth callback query parameters from its load-balancer log sinks and retains only pseudonymous, short-lived setup-funnel records.
+
 = 4.5.0 - 2026-11-02 =
 * NEW - Stateless Connect replaces the setup wizard: sign in with Google from wp-admin, confirm your site on stateless.ci, and WP-Stateless creates the project, bucket, service account and key inside your own Google Cloud account. No iframe, no copying of keys.
 * NEW - setup works from Network Admin on multisite, with network and per-site connections kept separate.

changes.md

@@ -1,3 +1,14 @@
+#### 4.5.1 - 2026-11-12
+* ENHANCEMENT - fresh, unconfigured activations and the Plugins screen lead directly to Stateless Connect; manual bucket and service-account settings remain available under Advanced.
+* ENHANCEMENT - the recommended setup creates a project and US multi-region bucket with CDN mode, while existing projects, buckets, locations and modes remain available under Advanced.
+* ENHANCEMENT - Google sign-in stays in the same tab, setup explains billing and key custody, and missing billing has a Check again path that preserves the storage choices.
+* ENHANCEMENT - storage setup shows its progress on the Connect screen and no longer depends on one long request: it survives slow Google operations, proxy timeouts and page reloads, and an interrupted setup resumes its saved project, bucket and key instead of starting over.
+* NEW - privacy-limited setup events measure actual Connect clicks through provisioning and the first verified upload without recording site addresses, email addresses, project IDs, bucket names or free-form errors.
+* FIX - storage drafts restore the selected project and bucket after a failed attempt, and new project names are generated in Google's accepted format.
+* FIX - the result of a storage setup, including the explanation when it fails, stays on the Connect screen until the next action, so reloading the page no longer loses it.
+* FIX - a storage setup that is interrupted or replaced by another no longer leaves a service account key behind: the next setup or a disconnect revokes it, and a revocation that fails is retried.
+* SECURITY - stateless.ci excludes OAuth callback query parameters from its load-balancer log sinks and retains only pseudonymous, short-lived setup-funnel records.
+
 #### 4.5.0 - 2026-11-02
 * NEW - Stateless Connect replaces the setup wizard: sign in with Google from wp-admin, confirm your site on stateless.ci, and WP-Stateless creates the project, bucket, service account and key inside your own Google Cloud account. No iframe, no copying of keys.
 * NEW - setup works from Network Admin on multisite, with network and per-site connections kept separate.

lib/classes/class-bootstrap.php

@@ -1760,35 +1760,30 @@ public function wp_delete_site($old_site) {
        * @param string $plugin
        */
       public function redirect_to_splash($plugin = '') {
-        // $this->settings = new Settings();
+        $configured = $this->settings->get('sm.key_json') && $this->settings->get('sm.bucket');
 
-        if (defined('WP_CLI') || $this->settings->get('sm.key_json') || isset($_POST['checked']) && count($_POST['checked']) > 1) {
+        if (defined('WP_CLI') || $configured || isset($_POST['checked']) && count($_POST['checked']) > 1) {
+          return;
+        }
+
+        if (GoogleConnect::hidden_for_site() && !is_network_admin()) {
           return;
         }
 
         if (
-          !$this->settings->get('sm.key_json') &&
           defined('WP_STATELESS_MEDIA_HIDE_SETUP_ASSISTANT') && WP_STATELESS_MEDIA_HIDE_SETUP_ASSISTANT == true &&
           defined('WP_STATELESS_MEDIA_HIDE_SETTINGS_PANEL') && WP_STATELESS_MEDIA_HIDE_SETTINGS_PANEL == true
         ) {
           return;
         }
 
-        if (!$this->settings->get('sm.key_json') && defined('WP_STATELESS_MEDIA_HIDE_SETUP_ASSISTANT') && WP_STATELESS_MEDIA_HIDE_SETUP_ASSISTANT == true) {
+        if (defined('WP_STATELESS_MEDIA_HIDE_SETUP_ASSISTANT') && WP_STATELESS_MEDIA_HIDE_SETUP_ASSISTANT == true) {
           $url = $this->get_settings_page_url('?page=stateless-settings');
-          exit(wp_redirect($url));
+          exit(wp_safe_redirect($url));
         }
 
         if ($plugin == plugin_basename($this->boot_file)) {
-          // #152
-          // $url = $this->get_settings_page_url('?page=stateless-setup&step=splash-screen');
-          $url = $this->get_settings_page_url('?page=stateless-settings');
-
-          if (json_decode($this->settings->get('sm.key_json'))) {
-            $url = $this->get_settings_page_url('?page=stateless-settings');
-          }
-
-          exit( wp_redirect($url) );
+          exit(wp_safe_redirect(GoogleConnect::instance()->page_url()));
         }
       }