@harshankur/viewcounter 3.1.0 → 3.3.0

package/admin/locales/en.json

@@ -2,11 +2,14 @@
     "app": {
         "name": "viewcounter",
         "badge": "admin",
-        "documentTitle": "ViewCounter Admin"
+        "documentTitle": "ViewCounter Admin",
+        "version": "v{version}"
     },
     "nav": {
         "skip": "Skip to content",
-        "logout": "Sign out"
+        "logout": "Sign out",
+        "website": "Website",
+        "websiteTitle": "viewcounter's website, in a new tab"
     },
     "theme": {
         "label": "Colour theme",
@@ -22,12 +25,20 @@
         "submit": "Sign in",
         "signedOut": "You have been signed out."
     },
+    "session": {
+        "endedTitle": "Signed out",
+        "endedMessage": "Your session has ended. Sign in again to carry on where you left off.",
+        "confirmTitle": "Confirm it is you",
+        "confirmMessage": "Erasing views permanently cannot be undone. Enter your password to continue.",
+        "confirmAction": "Confirm"
+    },
     "tabs": {
         "label": "Sections",
-        "views": "views",
-        "trash": "trash",
-        "adminLog": "admin-log",
-        "viewLog": "view-log"
+        "overview": "Overview",
+        "views": "Views",
+        "trash": "Trash",
+        "trackingLog": "Tracking log",
+        "adminLog": "Admin log"
     },
     "common": {
         "none": "-",
@@ -43,10 +54,13 @@
         "TOO_MANY_ATTEMPTS": "Too many failed attempts. Wait a few minutes and try again.",
         "RATE_LIMITED": "Too many requests. Slow down for a moment and try again.",
         "CSRF_REJECTED": "The request was refused for security reasons. Reload the page and try again.",
+        "REAUTH_REQUIRED": "Enter your password again to continue.",
         "VALIDATION_FAILED": "The server did not accept that input.",
         "NOT_FOUND": "That was not found.",
         "SERVER_ERROR": "Something went wrong on the server. Please try again.",
-        "NETWORK": "The server could not be reached. Check your connection."
+        "NETWORK": "The server could not be reached. Check your connection.",
+        "ACCESS_EXPIRED": "Your sign-in to the site's access gateway (for example Cloudflare Access) has ended. Reload the page to sign in there again.",
+        "UNEXPECTED": "Something went wrong in this page. Reload it and try again."
     },
     "pager": {
         "previous": "Previous",
@@ -72,7 +86,7 @@
     },
     "toolbar": {
         "search": "Search views",
-        "searchPlaceholder": "Search page, title, source, note, event…",
+        "searchPlaceholder": "Search page, title, site, source, campaign, note, event, or view ID…",
         "modifiedFilter": "Filter by admin changes",
         "showDeleted": "Show deleted",
         "pageSize": "Rows per page",
@@ -110,19 +124,54 @@
         "selectPage": "Select every view on this page",
         "selectRow": "Select the view from {time}",
         "empty": "No views match.",
-        "emptyTrash": "The trash is empty."
+        "emptyTrash": "The trash is empty.",
+        "columns": "Columns",
+        "columnsTitle": "Columns",
+        "columnsIntro": "Tick the columns you want, and put them in order of importance. The table shows as many as fit its width, in this order; the rest of each row is one tap away, under it. Drag a column's edge in the table to change its width.",
+        "columnsReset": "Reset to default",
+        "columnsApply": "Apply",
+        "columnsNone": "Choose at least one column.",
+        "moveUp": "Move {column} up",
+        "moveDown": "Move {column} down",
+        "onlyAllApps": "shown under All apps",
+        "resize": "Width of the {column} column",
+        "resizeHint": "Drag to resize. Arrow keys also work, and Enter or a double click resets it.",
+        "showMore": {
+            "one": "Show {count} more field",
+            "other": "Show {count} more fields"
+        },
+        "hideMore": {
+            "one": "Hide {count} more field",
+            "other": "Hide {count} more fields"
+        },
+        "showMoreAll": "Show for every row: {columns}",
+        "hideMoreAll": "Hide for every row: {columns}"
     },
     "columns": {
-        "timestamp": "Time",
+        "time": "Time",
+        "deleted": "Deleted",
+        "app": "App",
         "page": "Page",
         "source": "Source",
+        "status": "Status",
+        "event": "Event",
+        "country": "Location",
         "device": "Device",
-        "country": "Country",
         "client": "Client",
-        "event": "Event",
-        "status": "Status",
-        "actions": "Actions",
-        "app": "App"
+        "title": "Title",
+        "site": "Site",
+        "referrer": "Referrer",
+        "campaign": "Campaign",
+        "language": "Language",
+        "browser": "Browser",
+        "system": "System",
+        "engagement": "Engagement",
+        "ip": "Masked IP",
+        "session": "Session ID",
+        "viewId": "View ID",
+        "note": "Note",
+        "modified": "Changed by admin",
+        "actions": "Actions"
     },
     "status": {
         "deleted": "In trash",
@@ -145,6 +194,7 @@
         "email": "Email",
         "campaign": "Campaign",
         "referral": "Referral",
+        "internal": "Internal",
         "unknown": "Unknown"
     },
     "deviceSizes": {
@@ -156,14 +206,16 @@
         "summary": {
             "one": "{active} view · {modified} modified · {deleted} in trash",
             "other": "{active} views · {modified} modified · {deleted} in trash"
-        }
+        },
+        "intro": "Every view and event the tracker recorded, one row each, newest first. These rows are what every number on the Overview is computed from. Correct a row, add a private note, or move it to the trash; every change is recorded in the Admin log."
     },
     "trash": {
         "retention": {
             "one": "Views in the trash no longer count in any statistic. They are erased permanently {count} day after being deleted, or sooner if you erase them here.",
             "other": "Views in the trash no longer count in any statistic. They are erased permanently {count} days after being deleted, or sooner if you erase them here."
         },
-        "retentionOff": "Views in the trash no longer count in any statistic. Automatic erasure is off (TRASH_RETENTION_DAYS=0), so they stay until erased here."
+        "retentionOff": "Views in the trash no longer count in any statistic. Automatic erasure is off (TRASH_RETENTION_DAYS=0), so they stay until erased here.",
+        "intro": "Views moved to the trash. They no longer count in any statistic and can be restored, or erased for good. Erasing asks for your password again."
     },
     "toasts": {
         "edited": {
@@ -240,7 +292,16 @@
         "purgeAction": "Erase permanently"
     },
     "details": {
-        "title": "View details"
+        "title": "View details",
+        "scrolled": "{percent}% of the page",
+        "groups": {
+            "view": "View",
+            "page": "Page",
+            "source": "Source and campaign",
+            "visitor": "Visitor",
+            "engagement": "Engagement",
+            "admin": "Admin changes"
+        }
     },
     "fields": {
         "id": "View ID",
@@ -258,13 +319,24 @@
         "browserVersion": "Browser version",
         "os": "Operating system",
         "osVersion": "OS version",
-        "sessionId": "Session ID",
+        "sessionId": "Session ID (sent by the site)",
         "eventType": "Event type",
         "eventData": "Event data",
         "isUnique": "Unique view",
         "note": "Note",
         "adminModifiedAt": "Modified by admin",
-        "deletedAt": "Moved to trash"
+        "deletedAt": "Moved to trash",
+        "hostname": "Site (hostname)",
+        "language": "Language",
+        "utmSource": "Campaign source",
+        "utmMedium": "Campaign medium",
+        "utmCampaign": "Campaign name",
+        "utmTerm": "Campaign term",
+        "utmContent": "Campaign content",
+        "region": "Region",
+        "city": "City",
+        "engagedMs": "Time on page",
+        "scrollDepth": "Scroll depth"
     },
     "edit": {
         "titleSingle": "Edit view",
@@ -298,16 +370,40 @@
         "allActions": "All actions",
         "filterApp": "Filter by app",
         "allApps": "All apps",
-        "filterSource": "Filter by source",
-        "allSources": "All sources",
+        "filterSource": "Filter by request type",
+        "allSources": "All request types",
+        "filterOutcome": "Filter by outcome",
+        "allOutcomes": "All outcomes",
         "system": "system",
         "emptyAdmin": "No admin operations recorded yet.",
-        "emptyViews": "No views recorded yet.",
-        "viewLogRetention": {
-            "one": "Entries are removed automatically {count} day after they are recorded. The views themselves are not affected.",
-            "other": "Entries are removed automatically {count} days after they are recorded. The views themselves are not affected."
+        "emptyTracking": "No tracking requests match.",
+        "adminIntro": "Everything done in this admin: sign-ins, edits, notes, moves to the trash, restores, and erasures, with the session and the masked address it came from. It never records what a view said, so an erased view leaves no trace of its content.",
+        "trackingIntro": "Every tracking request that reached the server, and what became of it. Views lists only what was recorded, and the Overview counts only that. This log also shows what was never stored: bots, and requests refused (an unregistered site, an unknown app, a malformed request). Use it to check that a site is sending views and to find out why some are not counted. Editing or deleting a view never changes it.",
+        "trackingRetention": {
+            "one": "Entries are removed automatically {count} day after they are recorded. Views are not affected.",
+            "other": "Entries are removed automatically {count} days after they are recorded. Views are not affected."
+        },
+        "trackingRetentionOff": "Entries are kept until removed by hand (VIEW_LOG_RETENTION_DAYS=0).",
+        "outcomesTitle": "What each outcome means",
+        "outcomeHelp": {
+            "recorded": "Stored as a view, and counted as a unique view.",
+            "repeat": "Stored as a view, from a visitor already counted in this window, so not counted as unique.",
+            "bot": "A crawler, preview fetcher, or automated browser. Never stored; counted here by name, per minute.",
+            "rejected": "Refused and never stored; the reason is shown. Counted per minute, without anything about the requester."
+        },
+        "lastHours": {
+            "one": "last {count} hour",
+            "other": "last {count} hours"
         },
-        "viewLogRetentionOff": "Entries are kept until removed by hand (VIEW_LOG_RETENTION_DAYS=0)."
+        "summaryLabel": {
+            "one": "Tracking requests in the last {count} hour",
+            "other": "Tracking requests in the last {count} hours"
+        },
+        "reasons": "Refused in the last day: {list}",
+        "noReasons": "Nothing refused in the last day.",
+        "autoRefresh": "Refresh every {seconds} s",
+        "openView": "Show this view",
+        "openViewNamed": "Show view {id}"
     },
     "logColumns": {
         "time": "Time",
@@ -317,10 +413,13 @@
         "fields": "Fields",
         "session": "Session",
         "ip": "IP (masked)",
-        "source": "Source",
+        "source": "Request",
+        "outcome": "Outcome",
+        "detail": "Reason or detail",
+        "view": "View",
+        "site": "Site",
         "event": "Event",
-        "unique": "Unique",
-        "view": "View ID"
+        "requests": "Requests"
     },
     "actions": {
         "login_succeeded": "Signed in",
@@ -333,13 +432,32 @@
         "views_restored": "Restored",
         "views_purged": "Erased",
         "trash_auto_purged": "Trash auto-erased",
-        "view_log_pruned": "View log pruned"
+        "view_log_pruned": "Tracking log pruned",
+        "password_confirmed": "Password confirmed"
+    },
+    "outcomes": {
+        "recorded": "Recorded",
+        "repeat": "Repeat visit",
+        "bot": "Bot",
+        "rejected": "Refused"
+    },
+    "rejectionReasons": {
+        "bot": "automated client",
+        "unknown_app": "unknown app",
+        "origin_not_allowed": "site not allowed",
+        "invalid_request": "invalid request",
+        "invalid_ip": "unreadable IP address",
+        "rate_limited": "rate limited",
+        "unknown_view": "view not found",
+        "server_error": "server error"
     },
     "logSources": {
         "registerView": "Page view",
-        "event": "Custom event"
+        "event": "Event",
+        "engage": "Engagement"
     },
     "ranges": {
+        "24h": "24 hours",
         "7d": "7 days",
         "30d": "30 days",
         "90d": "90 days",
@@ -347,48 +465,219 @@
         "all": "All time"
     },
     "eventTypes": {
-        "pageview": "Page view"
-    },
-    "insights": {
-        "title": "insights",
-        "scopeAll": "All apps, filtered like the table below",
-        "scopeApp": "{app}, filtered like the table below",
-        "span": "From {from} to {to}",
-        "noData": "No views match these filters.",
+        "pageview": "Page view",
+        "outbound": "Link to another site",
+        "download": "Download"
+    },
+    "deviceTypes": {
+        "desktop": "Desktop",
+        "mobile": "Phone",
+        "tablet": "Tablet",
+        "wearable": "Wearable",
+        "tv": "TV",
+        "console": "Games console"
+    },
+    "charts": {
         "views": "Views",
-        "uniqueViews": "Unique views",
-        "visitors": "Visitors",
-        "uniqueShare": "Unique views",
-        "countries": "Countries",
-        "modified": "Modified by admin",
-        "trendTitle": "Views over time",
-        "mapTitle": "Where views come from",
-        "showTable": "Show as table",
-        "showChart": "Show as chart",
+        "share": "of views",
+        "noData": "No views match these filters.",
+        "showTable": "Table",
+        "showChart": "Chart",
         "period": "Period",
         "weekOf": "Week of {date}",
-        "trendLabel": "Views over time from {from} to {to}, peaking at {peak}. Use the arrow keys to read each period.",
-        "share": "of views",
-        "other": "Other",
-        "otherTypes": "Other types",
-        "unknown": "Unknown",
+        "inProgress": "{period} (so far)",
+        "trendLabel": "{metric} from {from} to {to}, highest at {peak} on {peakAt}. Use the arrow keys to read each period.",
         "topCountries": "Countries by views",
         "mapLabel": "World map of views by country, {countries} countries with views. The list beside it gives the numbers.",
         "mapUnavailable": "The map could not be loaded. The list beside it has every number.",
         "noViews": "No views",
+        "otherTypes": "Other types",
         "moreCountries": {
             "one": "Show {count} more country",
             "other": "Show {count} more countries"
         },
-        "breakdown": {
-            "source": "Sources",
-            "deviceSize": "Device sizes",
-            "browser": "Browsers",
-            "os": "Operating systems",
-            "eventType": "Event types",
-            "app": "Apps"
+        "fewerCountries": "Show fewer",
+        "heatmapLabel": "Views by weekday and hour, busiest on {day} at {hour} with {views} views. Use the arrow keys to read each hour, or switch to the table.",
+        "heatmapCell": "{day}, {from} to {to}",
+        "hour": "Hour",
+        "minutesLabel": "Views per minute over the last {count} minutes, {views} in all. Use the arrow keys to read each minute.",
+        "minutesAgo": {
+            "one": "{count} minute ago",
+            "other": "{count} minutes ago"
         },
-        "inProgress": "{period} (so far)",
-        "fewerCountries": "Show fewer"
+        "now": "Now"
+    },
+    "overview": {
+        "intro": "Statistics for the app and period chosen below, computed from live views only (the trash never counts). Click any row in a breakdown to narrow everything to it.",
+        "showViews": "Show these views",
+        "removeFilter": "Remove the filter {filter}",
+        "clearFilters": "Clear filters",
+        "filterBy": "Show only {dimension}: {value}",
+        "cardView": "{card}: what to show",
+        "trendTitle": "{metric} over time",
+        "trendView": "Show the trend as",
+        "tilesLabel": "Headline numbers. Choose one to chart it over time.",
+        "span": {
+            "one": "From {from} to {to} · {countries} country · {unique} unique views · {modified} changed by an admin",
+            "other": "From {from} to {to} · {countries} countries · {unique} unique views · {modified} changed by an admin"
+        },
+        "empty": "No views match these filters.",
+        "allTime": "All time",
+        "noComparison": "Nothing to compare with",
+        "vsPrevious": {
+            "24h": "vs the 24 hours before",
+            "7d": "vs the 7 days before",
+            "30d": "vs the 30 days before",
+            "90d": "vs the 90 days before",
+            "1y": "vs the year before"
+        },
+        "points": "{value} pts",
+        "deltaNew": "New",
+        "helpTitle": "How these numbers are counted",
+        "metrics": {
+            "visitors": "Visitors",
+            "visits": "Visits",
+            "pageviews": "Page views",
+            "views": "Views and events",
+            "bounceRate": "Bounce rate",
+            "avgVisitMs": "Visit duration",
+            "pagesPerVisit": "Pages per visit",
+            "avgEngagedMs": "Time on page",
+            "avgScroll": "Scroll depth"
+        },
+        "help": {
+            "visitors": "Distinct visitors, told apart by a hash of the address and browser that changes every day and is never stored with anything that identifies a person. The same person on two days counts twice, and people sharing a network and browser count once.",
+            "visits": "Page views of one visitor with no pause longer than 30 minutes between them.",
+            "pageviews": "Views of a page, without custom events.",
+            "views": "Everything recorded: page views and custom events such as downloads or clicks on links to other sites.",
+            "bounceRate": "The share of visits that saw only one page.",
+            "avgVisitMs": "From the first page view of a visit to the last, plus how long the last page was visible. The average over visits.",
+            "pagesPerVisit": "Page views per visit, on average.",
+            "avgEngagedMs": "How long a page was actually visible on screen, as the tracker script measured it. Only pages with a measurement count.",
+            "avgScroll": "How much of a page had been on screen, at most, as the tracker script measured it."
+        },
+        "dims": {
+            "source": "Channel",
+            "referrer": "Referrer",
+            "referrerUrl": "Referring page",
+            "utmSource": "Campaign source",
+            "utmMedium": "Campaign medium",
+            "utmCampaign": "Campaign",
+            "utmTerm": "Campaign term",
+            "utmContent": "Campaign content",
+            "page": "Page",
+            "title": "Title",
+            "hostname": "Site",
+            "country": "Country",
+            "region": "Region",
+            "city": "City",
+            "language": "Language",
+            "deviceSize": "Screen size",
+            "deviceType": "Device type",
+            "browser": "Browser",
+            "browserVersion": "Browser version",
+            "os": "Operating system",
+            "osVersion": "System version",
+            "eventType": "Event type",
+            "app": "App",
+            "timeOnPage": "Time on page",
+            "scrollDepth": "Scrolled"
+        },
+        "noReferrer": "Direct or not sent",
+        "notTagged": "Not tagged",
+        "noTitle": "No title",
+        "unknown": "Unknown",
+        "other": "Everything else",
+        "columns": {
+            "visitors": "Visitors",
+            "views": "Views",
+            "share": "Share",
+            "visits": "Visits",
+            "bounceRate": "Bounce",
+            "timeOnPage": "Time",
+            "scroll": "Scroll",
+            "steps": "Times",
+            "count": "Count",
+            "pageviews": "Page views"
+        },
+        "noVisits": "No page views, so no visits, match these filters.",
+        "noFlow": "No visitor went from one page to another in these views.",
+        "noProperties": "No custom event carried properties in these views.",
+        "noEngagement": "No time or scrolling measured yet. The tracker script measures both; a site that registers views another way does not.",
+        "noCityData": "Regions and cities need a city database on the server (GEOIP_CITY_DB). Countries work without one.",
+        "flowHeader": "From page, to page",
+        "flowStep": "{from} → {to}",
+        "propertyHeader": "Property",
+        "property": "{key} = {value}",
+        "orMore": "{from} or more",
+        "under": "Under {to}",
+        "between": "{from} to {to}",
+        "scrollAll": "All of it (100%)",
+        "scrollBetween": "{from}% to {to}%",
+        "cards": {
+            "apps": "Apps",
+            "sources": "Sources",
+            "pages": "Pages",
+            "locations": "Locations",
+            "devices": "Devices",
+            "browsers": "Browsers",
+            "systems": "Operating systems",
+            "campaigns": "Campaigns",
+            "events": "Events",
+            "engagement": "Engagement",
+            "when": "When, by weekday and hour ({zone})",
+            "flow": "Page flow"
+        },
+        "tabs": {
+            "channels": "Channels",
+            "referrers": "Referrers",
+            "referringPages": "Referring pages",
+            "topPages": "Top",
+            "entryPages": "Entry",
+            "exitPages": "Exit",
+            "titles": "Titles",
+            "sites": "Sites",
+            "map": "Map",
+            "countries": "Countries",
+            "regions": "Regions",
+            "cities": "Cities",
+            "languages": "Languages",
+            "screenSizes": "Screen sizes",
+            "deviceTypes": "Device types",
+            "browsers": "Browsers",
+            "versions": "Versions",
+            "systems": "Systems",
+            "utmSource": "Source",
+            "utmMedium": "Medium",
+            "utmCampaign": "Campaign",
+            "utmTerm": "Term",
+            "utmContent": "Content",
+            "eventTypes": "Types",
+            "properties": "Properties",
+            "timeOnPage": "Time on page",
+            "scrollDepth": "Scroll depth"
+        },
+        "whenNote": "Covers up to the last year of the chosen period, in your time zone.",
+        "live": {
+            "title": "Right now",
+            "visitors": {
+                "one": "visitor in the last {minutes} minutes",
+                "other": "visitors in the last {minutes} minutes"
+            },
+            "pages": "Pages open now",
+            "nobody": "Nobody on the sites right now.",
+            "updated": "Updated {time}, every {seconds} s while this page is open. Live views of the chosen app; the filters above do not apply."
+        }
+    },
+    "footer": {
+        "product": "Version {version}",
+        "links": "About viewcounter",
+        "website": "Website",
+        "docs": "Admin guide",
+        "changelog": "Changelog",
+        "source": "Source code",
+        "npm": "npm package",
+        "credits": "Location data:",
+        "copyright": "{product} © {year} {holder}"
     }
 }

package/config/index.js

@@ -13,6 +13,7 @@ const {
     SERVER,
 } = require('../constants');
 const { filterValidAppIds } = require('../utils/appIdUtils');
+const { parseDuration, formatDuration } = require('../utils/durationUtils');
 const { getError, logWarning, ErrorType, WarningType } = require('../utils/errorUtils');
 const { LogLevel } = require('../utils/logger');
 
@@ -71,7 +72,7 @@ function readJsonFile(filePath) {
  *
  * CONFIG.md §4: never a shallow spread of a nested object. The previous
  * implementation returned the parsed file verbatim, so a `dbInfo.json` missing
- * `host` produced `host: undefined` instead of falling back — and an
+ * `host` produced `host: undefined` instead of falling back, and an
  * `allowed.json` missing `appId` produced `undefined`, which then threw on
  * `.join()` at startup.
  *
@@ -98,13 +99,16 @@ class Config {
         this.auth = this.loadAuthConfig();
         this.privacy = this.loadPrivacyConfig();
         this.admin = this.loadAdminConfig();
+        // Optional: an .mmdb city database (DB-IP City Lite or GeoLite2 City)
+        // for each view's region and city. Without it, country only.
+        this.geo = { cityDatabase: this.env.GEOIP_CITY_DB || null };
     }
 
     /**
      * Server, logging, and proxy settings.
      *
      * `nodeEnv` defaults to production. It previously defaulted to
-     * development, which is also what the setup wizard wrote into `.env` — and
+     * development, which is also what the setup wizard wrote into `.env`, and
      * ten route handlers echo raw database error text to the caller when the
      * environment is development. A deploy that forgot to set NODE_ENV leaked
      * table names and SQL fragments to anonymous callers.
@@ -209,7 +213,7 @@ class Config {
      *
      * Two sources, because they serve different deployments:
      *  - `READ_API_KEYS` (env): unscoped keys that can read every app. This is
-     *    the single-operator case — all the apps are yours anyway.
+     *    the single-operator case: all the apps are yours anyway.
      *  - `apiKeys` in allowed.json: `{ "<key>": ["blog"] }`, scoped to named
      *    apps. This is the multi-tenant case, where one customer's key must
      *    not read another customer's analytics. Use `"*"` for an unscoped key.
@@ -275,7 +279,7 @@ class Config {
         // Resolved lazily, on first read rather than at construction.
         //
         // This module is imported by index.js, and index.js is the package
-        // entry point — so an application that only wants to mount
+        // entry point, so an application that only wants to mount
         // createAnalyticsRouter would otherwise generate and persist a secret
         // purely as a side effect of `require('@harshankur/viewcounter')`, writing it into
         // node_modules where the next `npm ci` wipes it. Embedders supply their
@@ -319,7 +323,13 @@ class Config {
      * pruned: it is the record of who changed or erased what, and it grows only
      * with admin activity.
      *
-     * An out-of-range or unparseable value falls back to the default.
+     * An out-of-range or unparseable retention falls back to the default.
+     *
+     * `ADMIN_SESSION_IDLE_TIMEOUT` and `ADMIN_SESSION_MAX_AGE` ("30m", "12h",
+     * "7d") bound how long a sign-in lasts: signed out after that long unused,
+     * and after that long regardless. Unlike a retention, a malformed timeout
+     * stops startup: silently using the default would give a typo like
+     * "30 min" a week-long session.
      */
     loadAdminConfig() {
         const password = this.env.ADMIN_PASSWORD || '';
@@ -330,9 +340,34 @@ class Config {
             return days >= 0 && days <= max ? days : fallback;
         };
 
+        const duration = (field, fallback, min, max) => {
+            const raw = this.env[field];
+            if (raw === undefined || raw === '') return fallback;
+            const ms = parseDuration(raw);
+            if (ms === null || ms < min || ms > max) {
+                throw getError(ErrorType.CONFIG_INVALID_VALUE, {
+                    field,
+                    reason: `must be a duration such as 30m, 12h, or 7d, from ${formatDuration(min)} to ${formatDuration(max)}`,
+                });
+            }
+            return ms;
+        };
+        const sessionIdleMs = duration('ADMIN_SESSION_IDLE_TIMEOUT',
+            ADMIN.SESSION_IDLE_TIMEOUT_MS, ADMIN.SESSION_IDLE_MIN_MS, ADMIN.SESSION_IDLE_MAX_MS);
+        const sessionMaxAgeMs = duration('ADMIN_SESSION_MAX_AGE',
+            ADMIN.SESSION_ABSOLUTE_TIMEOUT_MS, ADMIN.SESSION_MAX_AGE_MIN_MS, ADMIN.SESSION_MAX_AGE_MAX_MS);
+        if (sessionIdleMs > sessionMaxAgeMs) {
+            throw getError(ErrorType.CONFIG_INVALID_VALUE, {
+                field: 'ADMIN_SESSION_IDLE_TIMEOUT',
+                reason: `must not be longer than ADMIN_SESSION_MAX_AGE (${formatDuration(sessionMaxAgeMs)})`,
+            });
+        }
+
         return {
             password,
             enabled: longEnough,
+            sessionIdleMs,
+            sessionMaxAgeMs,
             trashRetentionDays: retention(
                 this.env.TRASH_RETENTION_DAYS, ADMIN.DEFAULT_TRASH_RETENTION_DAYS, ADMIN.MAX_TRASH_RETENTION_DAYS),
             viewLogRetentionDays: retention(