@svelte-vitals/vite 0.10.0 → 0.11.1

package/dist/{chunk-LIC7DE52.js → chunk-4LXPHVAW.js}

@@ -108,6 +108,26 @@ function parseHtmlHead(html) {
   return { tags, htmlLang, headings, images };
 }
 
+// src/loopback.ts
+function isLoopbackOrigin(origin) {
+  try {
+    const host = new URL(origin).hostname;
+    return host === "localhost" || host === "127.0.0.1" || host === "[::1]";
+  } catch {
+    return false;
+  }
+}
+function isLoopbackHost(host) {
+  if (host === void 0) return false;
+  try {
+    return isLoopbackOrigin(`http://${host}`);
+  } catch {
+    return false;
+  }
+}
+
 export {
-  parseHtmlHead
+  parseHtmlHead,
+  isLoopbackOrigin,
+  isLoopbackHost
 };

package/dist/hooks/index.js

@@ -1,6 +1,7 @@
 import {
+  isLoopbackOrigin,
   parseHtmlHead
-} from "../chunk-LIC7DE52.js";
+} from "../chunk-4LXPHVAW.js";
 
 // src/hooks/handle.ts
 import { DEV } from "esm-env";
@@ -35,14 +36,6 @@ function findingSignature(results, config) {
 }
 
 // src/hooks/handle.ts
-function isLoopbackOrigin(origin) {
-  try {
-    const host = new URL(origin).hostname;
-    return host === "localhost" || host === "127.0.0.1" || host === "[::1]" || host === "::1";
-  } catch {
-    return false;
-  }
-}
 async function postIngest(origin, route, results) {
   if (!isLoopbackOrigin(origin)) {
     if (globalThis.process?.env?.SVELTE_VITALS_DEBUG) {

package/dist/index.js

@@ -1,6 +1,8 @@
 import {
+  isLoopbackHost,
+  isLoopbackOrigin,
   parseHtmlHead
-} from "./chunk-LIC7DE52.js";
+} from "./chunk-4LXPHVAW.js";
 
 // src/plugin.ts
 import { existsSync } from "fs";
@@ -98,34 +100,25 @@ async function collectRenderedProject(cwd, htmlLang) {
 }
 
 // src/providers/source/components.ts
-import { readFile as readFile3 } from "fs/promises";
+import { readFile as readFile3, access as access2 } from "fs/promises";
 import { join as join3 } from "path";
 import { glob as glob2 } from "tinyglobby";
-import { parseComponentFacts } from "@svelte-vitals/core";
-async function collectComponentFacts(root) {
-  const files = await glob2("src/**/*.svelte", { cwd: root, dot: false });
-  return Promise.all(
-    files.sort().map(async (rel) => {
-      try {
-        const source = await readFile3(join3(root, rel), "utf8");
-        return { file: rel, ...parseComponentFacts(source, rel) };
-      } catch {
-        return {
-          file: rel,
-          eachBlocks: [],
-          effects: [],
-          htmlTags: [],
-          javascriptUrls: [],
-          loc: 0,
-          propCount: 0,
-          imports: [],
-          namespaceImports: [],
-          constableStates: [],
-          suppressions: []
-        };
-      }
-    })
-  );
+import { collectComponentFacts as collect } from "@svelte-vitals/core";
+var nodeRuntime = {
+  readFile: (path) => readFile3(path, "utf8"),
+  async exists(path) {
+    try {
+      await access2(path);
+      return true;
+    } catch {
+      return false;
+    }
+  },
+  glob: (pattern, cwd) => glob2(pattern, { cwd, dot: false }),
+  join: (...parts) => join3(...parts)
+};
+function collectComponentFacts(root) {
+  return collect(nodeRuntime, root);
 }
 
 // src/version.ts
@@ -219,11 +212,16 @@ function renderDashboard(results, config, meta) {
 
 // src/ui/middleware.ts
 var SEVERITIES = /* @__PURE__ */ new Set(["critical", "warning", "info"]);
+var CATEGORIES = /* @__PURE__ */ new Set(["seo", "performance", "correctness", "security", "architecture"]);
+function isOptionalString(v) {
+  return v === void 0 || typeof v === "string";
+}
 function isResultLike(x) {
   if (typeof x !== "object" || x === null) return false;
   const r = x;
   const d = r.detection;
-  return typeof r.id === "string" && typeof r.message === "string" && typeof r.severity === "string" && SEVERITIES.has(r.severity) && typeof d === "object" && d !== null && typeof d.presence === "string" && typeof d.value === "string";
+  const f = r.fix;
+  return typeof r.id === "string" && typeof r.message === "string" && typeof r.severity === "string" && SEVERITIES.has(r.severity) && typeof d === "object" && d !== null && typeof d.presence === "string" && typeof d.value === "string" && (r.category === void 0 || typeof r.category === "string" && CATEGORIES.has(r.category)) && isOptionalString(r.location) && isOptionalString(r.recommendation) && isOptionalString(r.docsUrl) && (f === void 0 || typeof f === "object" && f !== null && typeof f.description === "string" && isOptionalString(f.snippet) && isOptionalString(f.lang)) && (r.line === void 0 || typeof r.line === "number") && isOptionalString(r.route);
 }
 function installUiMiddleware(server, config, version) {
   const store = createStore();
@@ -243,6 +241,14 @@ function installUiMiddleware(server, config, version) {
   });
   server.middlewares.use("/__svelte-vitals", (req, res) => {
     const url = req.url ?? "/";
+    const origin = req.headers.origin;
+    const host = req.headers.host;
+    if (typeof origin === "string" && !isLoopbackOrigin(origin) || !isLoopbackHost(host)) {
+      req.resume();
+      res.statusCode = 403;
+      res.end("svelte-vitals dev UI is only available from localhost");
+      return;
+    }
     if (req.method === "POST" && url.startsWith("/ingest")) {
       const chunks = [];
       req.on("data", (c) => chunks.push(c));
@@ -270,8 +276,14 @@ function installUiMiddleware(server, config, version) {
       req.on("close", () => clients.delete(res));
       return;
     }
-    res.setHeader("Content-Type", "text/html");
-    res.end(renderDashboard(store.snapshot(), config, { version }));
+    try {
+      const html = renderDashboard(store.snapshot(), config, { version });
+      res.setHeader("Content-Type", "text/html");
+      res.end(html);
+    } catch {
+      res.statusCode = 500;
+      res.end("svelte-vitals dashboard failed to render");
+    }
   });
 }
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@svelte-vitals/vite",
-  "version": "0.10.0",
+  "version": "0.11.1",
   "description": "Vite/SvelteKit plugin for svelte-vitals — analyzes prerendered HTML during vite build.",
   "type": "module",
   "license": "MIT",
@@ -22,7 +22,7 @@
   },
   "homepage": "https://github.com/oekazuma/svelte-vitals#readme",
   "engines": {
-    "node": ">=18.20.8"
+    "node": ">=22.13.0"
   },
   "sideEffects": false,
   "exports": {
@@ -42,10 +42,10 @@
     "esm-env": "^1.2.2",
     "node-html-parser": "^8.0.4",
     "tinyglobby": "^0.2.17",
-    "@svelte-vitals/core": "0.19.0"
+    "@svelte-vitals/core": "0.21.0"
   },
   "peerDependencies": {
-    "@sveltejs/kit": "^2.69.0",
+    "@sveltejs/kit": "^2.69.1",
     "vite": "^8.1.3"
   },
   "peerDependenciesMeta": {
@@ -54,7 +54,7 @@
     }
   },
   "devDependencies": {
-    "@sveltejs/kit": "^2.69.0",
+    "@sveltejs/kit": "^2.69.1",
     "@types/node": "^24.13.2",
     "svelte": "^5.56.4",
     "vite": "^8.1.3"