Changeset d549549 in Klonkt for src/routes

Timestamp:

06/16/2026 09:41:28 AM (3 months ago)

Author:

roboburr <roboburr@…>

Branches:

main

Children:

029f047

Parents:

3f893bf

Message:

Statistics module (Phase 3): cookie-free tracking + premium stats page

Counters: posts.view_count, audio_tracks.play_count, stat_daily
(pageviews/day) + stat_visitor_day (unique visitors via daily rotating
salted hash of IP+UA, never stored → no cookie, no consent needed).
StatsService records pageview on home + post-view (skips admins), play on
the initial player stream fetch. /admin/stats (god-only +
premiumUnlocked-gated): cards + 14-day cookie-free bar chart
(visitors/views) + top posts/tracks. Dashboard button is premium-gated.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@…>

Location:

src/routes

Files:

• admin-stats.js (added)
• audio.js (modified) (2 diffs)
• posts.js (modified) (3 diffs)

src/routes/audio.js

@@ -28 +28 @@
 import path from 'path';
 import { fileURLToPath } from 'url';
+import db from '../config/database.js';
+import { recordPlay } from '../services/StatsService.js';
 
 const __dirname = path.dirname(fileURLToPath(import.meta.url));
@@ -90 +92 @@
   const range = req.headers.range;
 
+  // Statistieken: tel één play bij de initiële player-fetch (niet bij scrub/
+  // range-continuaties; replays binnen 24u komen uit de browsercache → geen
+  // dubbeltelling). Best-effort, mag nooit de stream breken.
+  if (req.get('X-Audio-Player') === '1' && (!range || /^bytes=0-/.test(range))) {
+    try {
+      const tr = db.prepare(`
+        SELECT t.id FROM audio_tracks t JOIN media m ON t.media_id = m.id
+        WHERE m.storage_path = ? OR m.storage_path LIKE ? LIMIT 1
+      `).get(filename, '%' + filename);
+      if (tr) recordPlay(tr.id);
+    } catch {}
+  }
+
   // Common headers
   res.setHeader('Content-Type', mime);

src/routes/posts.js

@@ -8 +8 @@
 import { requireAuth } from '../middleware/auth.js';
 import { renderPage } from '../middleware/render.js';
+import { recordPageview, recordPostView } from '../services/StatsService.js';
 import PermissionsService from '../services/PermissionsService.js';
 import MarkdownService from '../services/MarkdownService.js';
@@ -113 +114 @@
   `).all(site.id);
 
+  recordPageview(site.id, req);
+
   renderPage(req, res, 'pages/home', {
     pinnedPosts,
@@ -391 +394 @@
     if (!canEdit) return res.status(403).send('Not published');
   }
+
+  // Statistieken: tel de weergave (skipt beheerders + niet-gepubliceerd-eigen-preview).
+  if (post.status === 'published') recordPostView(post, req);
 
   // Render content. Content is now user-authored HTML (already sanitized on