@svelte-vitals/vite 0.9.2 → 0.11.0

package/dist/{chunk-LIC7DE52.js → chunk-4LXPHVAW.js}

@@ -108,6 +108,26 @@ function parseHtmlHead(html) {
   return { tags, htmlLang, headings, images };
 }
 
+// src/loopback.ts
+function isLoopbackOrigin(origin) {
+  try {
+    const host = new URL(origin).hostname;
+    return host === "localhost" || host === "127.0.0.1" || host === "[::1]";
+  } catch {
+    return false;
+  }
+}
+function isLoopbackHost(host) {
+  if (host === void 0) return false;
+  try {
+    return isLoopbackOrigin(`http://${host}`);
+  } catch {
+    return false;
+  }
+}
+
 export {
-  parseHtmlHead
+  parseHtmlHead,
+  isLoopbackOrigin,
+  isLoopbackHost
 };

package/dist/hooks/index.js

@@ -1,6 +1,7 @@
 import {
+  isLoopbackOrigin,
   parseHtmlHead
-} from "../chunk-LIC7DE52.js";
+} from "../chunk-4LXPHVAW.js";
 
 // src/hooks/handle.ts
 import { DEV } from "esm-env";
@@ -35,14 +36,6 @@ function findingSignature(results, config) {
 }
 
 // src/hooks/handle.ts
-function isLoopbackOrigin(origin) {
-  try {
-    const host = new URL(origin).hostname;
-    return host === "localhost" || host === "127.0.0.1" || host === "[::1]" || host === "::1";
-  } catch {
-    return false;
-  }
-}
 async function postIngest(origin, route, results) {
   if (!isLoopbackOrigin(origin)) {
     if (globalThis.process?.env?.SVELTE_VITALS_DEBUG) {

package/dist/index.js

@@ -1,11 +1,13 @@
 import {
+  isLoopbackHost,
+  isLoopbackOrigin,
   parseHtmlHead
-} from "./chunk-LIC7DE52.js";
+} from "./chunk-4LXPHVAW.js";
 
 // src/plugin.ts
 import { existsSync } from "fs";
 import { writeFile, mkdir } from "fs/promises";
-import { join as join3, isAbsolute, dirname } from "path";
+import { join as join4, isAbsolute, dirname } from "path";
 import { defineConfig as defineConfig2 } from "@svelte-vitals/core";
 
 // src/analyze.ts
@@ -97,6 +99,28 @@ async function collectRenderedProject(cwd, htmlLang) {
   };
 }
 
+// src/providers/source/components.ts
+import { readFile as readFile3, access as access2 } from "fs/promises";
+import { join as join3 } from "path";
+import { glob as glob2 } from "tinyglobby";
+import { collectComponentFacts as collect } from "@svelte-vitals/core";
+var nodeRuntime = {
+  readFile: (path) => readFile3(path, "utf8"),
+  async exists(path) {
+    try {
+      await access2(path);
+      return true;
+    } catch {
+      return false;
+    }
+  },
+  glob: (pattern, cwd) => glob2(pattern, { cwd, dot: false }),
+  join: (...parts) => join3(...parts)
+};
+function collectComponentFacts(root) {
+  return collect(nodeRuntime, root);
+}
+
 // src/version.ts
 import { readFileSync } from "fs";
 function readPackageVersion() {
@@ -118,14 +142,16 @@ async function analyze(prerenderPagesDir, cwd, options) {
   });
   const { heads, headings, images, htmlLang } = await collectRenderedHeads(prerenderPagesDir);
   const project = await collectRenderedProject(cwd, htmlLang);
+  const components = await collectComponentFacts(cwd);
   const results = applyRuleSeverities(
-    await runRules(selectRules(allRules, config), { heads, headings, images, project, config }),
+    await runRules(selectRules(allRules, config), { heads, headings, images, project, components, config }),
     config
   );
   const { score } = computeScore(results, config);
   const summary = summarize(results, config);
   const failed = hasFailureAtOrAbove(summary, config.failOn);
-  const coverageNote = `Analyzed ${heads.length} prerendered route(s). SSR/dynamic routes are not covered \u2014 run \`npx svelte-vitals\` for those.`;
+  const coverageNote = `Analyzed ${heads.length} prerendered route(s). SSR/dynamic routes are not covered \u2014 run \`npx svelte-vitals\` for those.
+Scanned ${components.length} component(s) under src/ for Correctness/Security/Architecture/Bundle findings.`;
   const consoleReport = formatConsoleReport(results, config, { mode: "rendered / plugin" }) + "\n" + coverageNote + "\n";
   const jsonReport = formatJsonReport(results, config, { version: readPackageVersion() });
   return {
@@ -186,11 +212,16 @@ function renderDashboard(results, config, meta) {
 
 // src/ui/middleware.ts
 var SEVERITIES = /* @__PURE__ */ new Set(["critical", "warning", "info"]);
+var CATEGORIES = /* @__PURE__ */ new Set(["seo", "performance", "correctness", "security", "architecture"]);
+function isOptionalString(v) {
+  return v === void 0 || typeof v === "string";
+}
 function isResultLike(x) {
   if (typeof x !== "object" || x === null) return false;
   const r = x;
   const d = r.detection;
-  return typeof r.id === "string" && typeof r.message === "string" && typeof r.severity === "string" && SEVERITIES.has(r.severity) && typeof d === "object" && d !== null && typeof d.presence === "string" && typeof d.value === "string";
+  const f = r.fix;
+  return typeof r.id === "string" && typeof r.message === "string" && typeof r.severity === "string" && SEVERITIES.has(r.severity) && typeof d === "object" && d !== null && typeof d.presence === "string" && typeof d.value === "string" && (r.category === void 0 || typeof r.category === "string" && CATEGORIES.has(r.category)) && isOptionalString(r.location) && isOptionalString(r.recommendation) && isOptionalString(r.docsUrl) && (f === void 0 || typeof f === "object" && f !== null && typeof f.description === "string" && isOptionalString(f.snippet) && isOptionalString(f.lang)) && (r.line === void 0 || typeof r.line === "number") && isOptionalString(r.route);
 }
 function installUiMiddleware(server, config, version) {
   const store = createStore();
@@ -210,6 +241,14 @@ function installUiMiddleware(server, config, version) {
   });
   server.middlewares.use("/__svelte-vitals", (req, res) => {
     const url = req.url ?? "/";
+    const origin = req.headers.origin;
+    const host = req.headers.host;
+    if (typeof origin === "string" && !isLoopbackOrigin(origin) || !isLoopbackHost(host)) {
+      req.resume();
+      res.statusCode = 403;
+      res.end("svelte-vitals dev UI is only available from localhost");
+      return;
+    }
     if (req.method === "POST" && url.startsWith("/ingest")) {
       const chunks = [];
       req.on("data", (c) => chunks.push(c));
@@ -237,8 +276,14 @@ function installUiMiddleware(server, config, version) {
       req.on("close", () => clients.delete(res));
       return;
     }
-    res.setHeader("Content-Type", "text/html");
-    res.end(renderDashboard(store.snapshot(), config, { version }));
+    try {
+      const html = renderDashboard(store.snapshot(), config, { version });
+      res.setHeader("Content-Type", "text/html");
+      res.end(html);
+    } catch {
+      res.statusCode = 500;
+      res.end("svelte-vitals dashboard failed to render");
+    }
   });
 }
 
@@ -254,8 +299,8 @@ function svelteVitals(options = {}) {
       if (!options.cwd) root = config.root;
     },
     async closeBundle() {
-      const pagesDir = options.prerenderDir ? options.prerenderDir : join3(root, DEFAULT_PRERENDER_DIR);
-      const resolved = isAbsolute(pagesDir) ? pagesDir : join3(root, pagesDir);
+      const pagesDir = options.prerenderDir ? options.prerenderDir : join4(root, DEFAULT_PRERENDER_DIR);
+      const resolved = isAbsolute(pagesDir) ? pagesDir : join4(root, pagesDir);
       if (!existsSync(resolved)) return;
       let result;
       try {
@@ -270,7 +315,7 @@ function svelteVitals(options = {}) {
         console.log(out);
       }
       if (options.outFile) {
-        const outPath = isAbsolute(options.outFile) ? options.outFile : join3(root, options.outFile);
+        const outPath = isAbsolute(options.outFile) ? options.outFile : join4(root, options.outFile);
         await mkdir(dirname(outPath), { recursive: true });
         await writeFile(outPath, result.jsonReport);
       }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@svelte-vitals/vite",
-  "version": "0.9.2",
+  "version": "0.11.0",
   "description": "Vite/SvelteKit plugin for svelte-vitals — analyzes prerendered HTML during vite build.",
   "type": "module",
   "license": "MIT",
@@ -22,7 +22,7 @@
   },
   "homepage": "https://github.com/oekazuma/svelte-vitals#readme",
   "engines": {
-    "node": ">=18.20.8"
+    "node": ">=22.13.0"
   },
   "sideEffects": false,
   "exports": {
@@ -40,13 +40,13 @@
   ],
   "dependencies": {
     "esm-env": "^1.2.2",
-    "node-html-parser": "^6.1.13",
+    "node-html-parser": "^8.0.4",
     "tinyglobby": "^0.2.17",
-    "@svelte-vitals/core": "0.18.0"
+    "@svelte-vitals/core": "0.20.0"
   },
   "peerDependencies": {
-    "@sveltejs/kit": "^2.0.0",
-    "vite": "^8.1.0"
+    "@sveltejs/kit": "^2.69.1",
+    "vite": "^8.1.3"
   },
   "peerDependenciesMeta": {
     "@sveltejs/kit": {
@@ -54,10 +54,10 @@
     }
   },
   "devDependencies": {
-    "@sveltejs/kit": "^2.0.0",
-    "@types/node": "^24.7.0",
-    "svelte": "^5.56.3",
-    "vite": "^8.1.0"
+    "@sveltejs/kit": "^2.69.1",
+    "@types/node": "^24.13.2",
+    "svelte": "^5.56.4",
+    "vite": "^8.1.3"
   },
   "scripts": {
     "build": "tsup",