Appearance

Vizoalica v0.9.0: one script tag, no cookies, nothing to copy ​

Deployment support: D1 migration 0003_static_sites_daily_visitors.sql (additive: sources.token_required and the daily_visitor_salts table). The backend (Worker) changed. Update a running backend with vizoalica deploy <name> --update. Existing websites keep requiring signed tokens until you turn that off.

On top of v0.8.0:

  • One script tag for any website. New websites need only a script tag, served by your backend at /vizoalica.js, on any host (GitHub Pages, Netlify, WordPress, plain HTML). Events from such a website are accepted only from its allowed addresses. Signed tokens are now an opt-in per website (Require a signed token). The Install page shows the tag and checks your home page for it. See Add a website.
  • Unique visitors without cookies or browser storage. The SDK stores nothing in the browser. The Worker counts visitors with a keyed digest of a random per-day salt, the website, the IP address and the user agent; each day's salt is deleted after the day ends. A person counts once per website per day. Counts from before the update are not comparable day to day. See Privacy defaults.
  • Nothing to copy at setup. vizoalica env add and vizoalica deploy show no secret. The administrator secret is saved on your computer; the token secret is needed only by signed-token websites and is fetched the first time with vizoalica rotate <name> token. --secrets-file is an optional backup.
  • OneCLI is opt-in. vizoalica env add asks nothing about OneCLI; it is used only with its options.
  • Plainer words. "Website key" and "website ID" in the console and docs; Share access (was Access keys), with a new Share with someone page; the header control is "Backend". The docs put multiple backends, OneCLI and the manual source-checkout guides under Advanced.
  • Homepage leads with the AI assistant, with a recorded Claude Code demo on fictional data.
  • Security: the fast-uri override is raised to 3.1.7 (GHSA-qw65-cvwx-89v3, GHSA-58mr-gqgx-xq4g).

Install or update ​

sh
npm install -g vizoalica      # or: npm update -g vizoalica
vizoalica --version           # 0.9.0
vizoalica deploy prod --update

Then, for a static website, open it in the console, turn off Require a signed token, and paste the script tag from its Install page.