adonisjs-server-stats 1.12.0 → 1.12.2

package/dist/src/provider/auth_middleware_detector.js

@@ -10,39 +10,53 @@ function isAuthMiddleware(importPath) {
         importPath.includes('silent_auth') ||
         importPath.includes('silentAuth'));
 }
+/**
+ * Check if an import path refers to session middleware.
+ */
+function isSessionMiddleware(importPath) {
+    return importPath.includes('session');
+}
 /**
  * Extract import paths from a `server.use([...])` or `router.use([...])`
- * block that match auth-related middleware.
+ * block that match the given predicate.
  */
-function extractAuthImportsFromBlock(block) {
+function extractMatchingImportsFromBlock(block, predicate) {
     const importRegex = /import\(\s*['"]([^'"]+)['"]\s*\)/g;
     const results = [];
     let importMatch;
     while ((importMatch = importRegex.exec(block)) !== null) {
         const importPath = importMatch[1];
-        if (isAuthMiddleware(importPath)) {
+        if (predicate(importPath)) {
             results.push(importPath);
         }
     }
     return results;
 }
 /**
- * Parse source code and detect auth-related middleware
+ * Parse source code and detect middleware matching a predicate
  * in `server.use()` or `router.use()` blocks.
  *
  * This is a pure function that operates on source text.
  */
-export function detectAuthMiddlewareInSource(source) {
+function detectMiddlewareInSource(source, predicate) {
     if (!source)
         return [];
     const found = [];
     const useBlockRegex = /(?:server|router)\.use\(\s*\[([\s\S]*?)\]\s*\)/g;
     let match;
     while ((match = useBlockRegex.exec(source)) !== null) {
-        found.push(...extractAuthImportsFromBlock(match[1]));
+        found.push(...extractMatchingImportsFromBlock(match[1], predicate));
     }
     return found;
 }
+/** Detect auth-related middleware in source text. */
+export function detectAuthMiddlewareInSource(source) {
+    return detectMiddlewareInSource(source, isAuthMiddleware);
+}
+/** Detect session middleware in source text. */
+export function detectSessionMiddlewareInSource(source) {
+    return detectMiddlewareInSource(source, isSessionMiddleware);
+}
 /**
  * Read the kernel source from disk, trying `.ts` then `.js` extensions.
  */
@@ -71,6 +85,18 @@ export function detectGlobalAuthMiddleware(makePath) {
         return [];
     }
 }
+/**
+ * Read `start/kernel.{ts,js}` from the app root and detect global session
+ * middleware. Returns an empty array if the file cannot be read.
+ */
+export function detectGlobalSessionMiddleware(makePath) {
+    try {
+        return detectSessionMiddlewareInSource(readKernelSource(makePath));
+    }
+    catch {
+        return [];
+    }
+}
 /**
  * Build the warning message lines for detected auth middleware.
  */
@@ -95,3 +121,24 @@ export function buildAuthMiddlewareWarning(found, dimFn, boldFn) {
         dimFn('router.group(() => { ... }).use(middleware.silentAuth())'),
     ];
 }
+/**
+ * Build the warning message lines for detected session middleware.
+ */
+export function buildSessionMiddlewareWarning(found, dimFn, boldFn) {
+    return [
+        ...found.map((m) => dimFn('→') + ' ' + m),
+        '',
+        dimFn('server-stats routes are polled every ~3s. global session middleware'),
+        dimFn('issues a Set-Cookie on every response, which can accumulate cookies'),
+        dimFn('and eventually break the browser.'),
+        '',
+        dimFn('server-stats already strips Set-Cookie headers from its own routes,'),
+        dimFn('but for best results, move session middleware to a named route group:'),
+        '',
+        boldFn('// start/kernel.ts — remove from router.use()'),
+        dimFn("// () => import('@adonisjs/session/session_middleware')"),
+        '',
+        boldFn('// start/routes.ts — add to your route groups instead'),
+        dimFn("router.group(() => { ... }).use(middleware.session())"),
+    ];
+}

package/dist/src/provider/boot_helpers.d.ts

@@ -17,4 +17,5 @@ export declare function collectRegisteredPaths(statsEndpoint: string | false, de
 export declare function checkDashboardDeps(appImport: (name: string) => Promise<unknown>): Promise<string[]>;
 export declare function logMissingDeps(missing: string[]): void;
 export declare function warnAboutAuthMiddleware(config: ResolvedServerStatsConfig, makePath: (dir: string, file: string) => string): void;
+export declare function warnAboutSessionMiddleware(makePath: (dir: string, file: string) => string): void;
 export declare function logDashboardError(category: 'missing-dep' | 'timeout' | 'unknown', err: unknown): void;

package/dist/src/provider/boot_helpers.js

@@ -1,5 +1,5 @@
 import { log, dim, bold } from '../utils/logger.js';
-import { detectGlobalAuthMiddleware, buildAuthMiddlewareWarning, } from './auth_middleware_detector.js';
+import { detectGlobalAuthMiddleware, detectGlobalSessionMiddleware, buildAuthMiddlewareWarning, buildSessionMiddlewareWarning, } from './auth_middleware_detector.js';
 export function deriveEndpointPaths(endpoint, devToolbar) {
     const statsEndpoint = typeof endpoint === 'string' ? endpoint : false;
     const debugEndpoint = devToolbar?.enabled
@@ -57,6 +57,12 @@ export function warnAboutAuthMiddleware(config, makePath) {
         return;
     log.block(bold('found global auth middleware that will run on every poll:'), buildAuthMiddlewareWarning(found, dim, bold));
 }
+export function warnAboutSessionMiddleware(makePath) {
+    const found = detectGlobalSessionMiddleware(makePath);
+    if (found.length === 0)
+        return;
+    log.block(bold('found global session middleware that affects server-stats routes:'), buildSessionMiddlewareWarning(found, dim, bold));
+}
 export function logDashboardError(category, err) {
     if (category === 'missing-dep') {
         log.block('Dashboard could not start — missing dependencies. Install with:', [

package/dist/src/provider/server_stats_provider.js

@@ -2,7 +2,7 @@ import { StatsEngine } from '../engine/stats_engine.js';
 import { setShouldShow, setExcludedPrefixes } from '../middleware/request_tracking_middleware.js';
 import { registerAllRoutes } from '../routes/register_routes.js';
 import { log, dim, setVerbose } from '../utils/logger.js';
-import { deriveEndpointPaths, computeDashboardPath, collectRegisteredPaths, warnAboutAuthMiddleware, } from './boot_helpers.js';
+import { deriveEndpointPaths, computeDashboardPath, collectRegisteredPaths, warnAboutAuthMiddleware, warnAboutSessionMiddleware, } from './boot_helpers.js';
 import { resolveToolbarConfig, buildExcludedPrefixes } from './dashboard_setup.js';
 import { buildDiagnostics } from './diagnostics.js';
 import { hookPinoToLogStream, setupLogStreamBroadcast, setupStatsIntervalHelper, checkDashboardDepsHelper, registerEdgePluginHelper, setupNonWebBridgeHelper, setupDevToolbarCore, applyToolbarResult, } from './provider_helpers_extra.js';
@@ -101,6 +101,7 @@ export default class ServerStatsProvider {
             return;
         log.list('routes auto-registered (no manual setup needed):', paths);
         warnAboutAuthMiddleware(config, this.app.makePath.bind(this.app));
+        warnAboutSessionMiddleware(this.app.makePath.bind(this.app));
     }
     async ready() {
         const config = this.app.config.get('server_stats');

package/dist/src/routes/no_session_middleware.d.ts

@@ -0,0 +1,14 @@
+import type { HttpContext } from '@adonisjs/core/http';
+/**
+ * Middleware that strips `Set-Cookie` headers from the response.
+ *
+ * AdonisJS session middleware (when registered globally via `router.use()`)
+ * issues a `Set-Cookie` on every request — even stateless API endpoints.
+ * Because this package's routes are polled every few seconds, this causes
+ * rapid cookie accumulation that can break the browser.
+ *
+ * This middleware runs after the route handler (and any global middleware)
+ * and removes the `Set-Cookie` header so sessions are never started by
+ * server-stats routes.
+ */
+export declare function noSessionMiddleware(ctx: HttpContext, next: () => Promise<void>): Promise<void>;

package/dist/src/routes/no_session_middleware.js

@@ -0,0 +1,16 @@
+/**
+ * Middleware that strips `Set-Cookie` headers from the response.
+ *
+ * AdonisJS session middleware (when registered globally via `router.use()`)
+ * issues a `Set-Cookie` on every request — even stateless API endpoints.
+ * Because this package's routes are polled every few seconds, this causes
+ * rapid cookie accumulation that can break the browser.
+ *
+ * This middleware runs after the route handler (and any global middleware)
+ * and removes the `Set-Cookie` header so sessions are never started by
+ * server-stats routes.
+ */
+export async function noSessionMiddleware(ctx, next) {
+    await next();
+    ctx.response.response.removeHeader('set-cookie');
+}

package/dist/src/routes/register_routes.js

@@ -1,12 +1,16 @@
 import { createAccessMiddleware } from './access_middleware.js';
 import { registerDashboardRoutes } from './dashboard_routes.js';
 import { registerDebugRoutes } from './debug_routes.js';
+import { noSessionMiddleware } from './no_session_middleware.js';
 import { registerStatsRoute } from './stats_routes.js';
 /**
  * Register all server-stats routes in a single call.
  */
 export function registerAllRoutes(options) {
-    const middleware = options.shouldShow ? [createAccessMiddleware(options.shouldShow)] : [];
+    const middleware = [
+        noSessionMiddleware,
+        ...(options.shouldShow ? [createAccessMiddleware(options.shouldShow)] : []),
+    ];
     if (typeof options.statsEndpoint === 'string') {
         registerStatsRoute(options.router, options.statsEndpoint, options.getStatsController, middleware);
     }

package/dist/vue/{CacheSection-Bx41lpfK.js → CacheSection-DRqV3YX2.js}

@@ -1,5 +1,5 @@
 import { defineComponent as E, inject as v, ref as h, computed as C, openBlock as a, createElementBlock as l, createElementVNode as e, toDisplayString as c, createCommentVNode as g, createVNode as F, unref as y, Fragment as N, renderList as A, withModifiers as B, createBlock as U } from "vue";
-import { u as H } from "./index-CptF6Qbp.js";
+import { u as H } from "./index-30jLw-_w.js";
 import { u as M } from "./useResizableTable-BoivAevK.js";
 import { DashboardApi as j, formatCacheSize as q, formatTtl as I } from "adonisjs-server-stats/core";
 import { u as G } from "./useApiClient-BQQ9CF-q.js";

package/dist/vue/{ConfigSection-fkfUdCmx.js → ConfigSection-C6pQCHAL.js}

@@ -1,5 +1,5 @@
 import { defineComponent as re, inject as m, ref as w, computed as x, openBlock as i, createElementBlock as r, createElementVNode as n, normalizeClass as a, createCommentVNode as b, Fragment as _, toDisplayString as u, unref as c, renderList as A, withModifiers as I, normalizeStyle as R } from "vue";
-import { u as ue } from "./index-CptF6Qbp.js";
+import { u as ue } from "./index-30jLw-_w.js";
 import { isRedactedValue as d, flattenConfig as z, TAB_ICONS as g, countLeaves as ce, collectTopLevelObjectKeys as pe, copyWithFeedback as de, formatFlatValue as ve } from "adonisjs-server-stats/core";
 const fe = { style: { position: "relative", flex: 1 } }, he = ["value"], ge = ["title", "onClick"], ye = ["viewBox", "innerHTML"], be = ["viewBox", "innerHTML"], $e = ["onClick"], we = { key: 0 }, xe = ["title", "onClick"], ke = ["viewBox", "innerHTML"], Ce = ["viewBox", "innerHTML"], _e = ["onClick"], Se = { key: 0 }, Be = { style: { padding: "4px 16px", fontSize: "10px", color: "var(--ss-muted)" } }, Le = ["onClick"], He = ["title"], Te = ["title"], je = ["title", "onClick"], Me = ["viewBox", "innerHTML"], me = ["viewBox", "innerHTML"], Ae = ["onClick"], Ie = ["title", "onClick"], Ee = ["viewBox", "innerHTML"], Ve = ["viewBox", "innerHTML"], Oe = {
   key: 1,

package/dist/vue/{EmailsSection-CbcDKF9Q.js → EmailsSection-BTNw3ZU2.js}

@@ -1,6 +1,6 @@
 import { defineComponent as V, inject as h, ref as f, computed as A, openBlock as o, createElementBlock as i, createElementVNode as e, Fragment as c, createTextVNode as u, toDisplayString as n, createCommentVNode as y, normalizeClass as _, createVNode as F, unref as r, renderList as B, createBlock as D } from "vue";
 import { formatTime as R, timeAgo as z } from "adonisjs-server-stats/core";
-import { u as L } from "./index-CptF6Qbp.js";
+import { u as L } from "./index-30jLw-_w.js";
 import { u as M } from "./useResizableTable-BoivAevK.js";
 import { _ as U } from "./FilterBar.vue_vue_type_script_setup_true_lang-ClJ37hhT.js";
 import { _ as q } from "./PaginationControls.vue_vue_type_script_setup_true_lang-CuN7g_8Z.js";

package/dist/vue/{EmailsTab-CNyEODVB.js → EmailsTab-CwIF1fik.js}

@@ -56,7 +56,7 @@ const F = { style: { position: "relative", height: "100%" } }, P = {
           d.authToken && (s.Authorization = `Bearer ${d.authToken}`);
           const u = await fetch(`${e}/emails/${l.id}/preview`, {
             headers: s,
-            credentials: d.authToken ? "omit" : "include"
+            credentials: d.authToken ? "omit" : "same-origin"
           });
           u.ok && (r.value = await u.text());
         } catch {

package/dist/vue/{EventsSection-CWbTYOBi.js → EventsSection-BpgkWIwM.js}

@@ -1,6 +1,6 @@
 import { defineComponent as E, inject as i, ref as p, computed as P, openBlock as s, createElementBlock as l, createVNode as v, unref as a, Fragment as h, createElementVNode as e, renderList as T, toDisplayString as c, createBlock as C, createCommentVNode as D } from "vue";
 import { formatTime as S, timeAgo as V } from "adonisjs-server-stats/core";
-import { u as $ } from "./index-CptF6Qbp.js";
+import { u as $ } from "./index-30jLw-_w.js";
 import { u as A } from "./useResizableTable-BoivAevK.js";
 import { _ as B } from "./FilterBar.vue_vue_type_script_setup_true_lang-ClJ37hhT.js";
 import { _ as R } from "./PaginationControls.vue_vue_type_script_setup_true_lang-CuN7g_8Z.js";

package/dist/vue/{JobsSection-CGGO6rtS.js → JobsSection-DrghFEKL.js}

@@ -1,6 +1,6 @@
 import { defineComponent as L, inject as h, ref as p, computed as g, openBlock as o, createElementBlock as d, createElementVNode as s, toDisplayString as n, createCommentVNode as v, createVNode as k, unref as a, withCtx as z, Fragment as _, renderList as x, normalizeClass as w, withModifiers as K, createBlock as M } from "vue";
 import { extractJobs as O, extractJobStats as Q, JOB_STATUS_FILTERS as W, getJobStatusBadgeColor as q, formatDuration as G, formatTime as H, timeAgo as X } from "adonisjs-server-stats/core";
-import { u as Y } from "./index-CptF6Qbp.js";
+import { u as Y } from "./index-30jLw-_w.js";
 import { u as Z } from "./useResizableTable-BoivAevK.js";
 import { _ as I } from "./JsonViewer.vue_vue_type_script_setup_true_lang-Bid05zpm.js";
 import { _ as j } from "./FilterBar.vue_vue_type_script_setup_true_lang-ClJ37hhT.js";

package/dist/vue/{LogsSection-BPB-C-XA.js → LogsSection-BDxx9Bfi.js}

@@ -1,7 +1,7 @@
 import { defineComponent as ie, inject as C, ref as u, computed as B, openBlock as a, createElementBlock as o, createVNode as O, unref as s, withCtx as ue, createElementVNode as n, Fragment as q, renderList as x, normalizeClass as $, toDisplayString as i, withKeys as V, createCommentVNode as _, createStaticVNode as re, createTextVNode as w, withModifiers as U, createBlock as de } from "vue";
 import { LOG_LEVELS as ce, getStructuredData as m, getLogLevelCssClass as ve, resolveLogLevel as W, resolveLogTimestamp as F, formatTime as pe, timeAgo as he, resolveLogRequestId as g, resolveLogMessage as _e } from "adonisjs-server-stats/core";
 import { _ as fe } from "./JsonViewer.vue_vue_type_script_setup_true_lang-Bid05zpm.js";
-import { u as me } from "./index-CptF6Qbp.js";
+import { u as me } from "./index-30jLw-_w.js";
 import { _ as ge } from "./FilterBar.vue_vue_type_script_setup_true_lang-ClJ37hhT.js";
 import { _ as ye } from "./PaginationControls.vue_vue_type_script_setup_true_lang-CuN7g_8Z.js";
 const ke = { class: "ss-dash-log-filters" }, be = ["onClick"], Ce = ["value"], qe = { class: "ss-dash-structured-search" }, $e = ["value"], Fe = ["value"], Le = ["value"], Se = {

package/dist/vue/{OverviewSection-BTcnPeoM.js → OverviewSection-BAgZTPjY.js}

@@ -1,6 +1,6 @@
 import { defineComponent as ws, openBlock as o, createElementBlock as n, Fragment as _, renderList as k, createElementVNode as s, normalizeClass as b, toDisplayString as r, inject as P, ref as D, watch as fs, computed as d, onUnmounted as Ws, unref as x, createVNode as N, createCommentVNode as v, normalizeStyle as ts, createTextVNode as gs } from "vue";
 import { formatDuration as F, formatTime as Os, timeAgo as Hs, durationClassName as Ks } from "adonisjs-server-stats/core";
-import { u as xs, _ as U } from "./index-CptF6Qbp.js";
+import { u as xs, _ as U } from "./index-30jLw-_w.js";
 const Gs = { class: "ss-dash-btn-group" }, Xs = ["onClick"], Ys = /* @__PURE__ */ ws({
   __name: "TimeRangeSelector",
   props: {