@spotlightjs/spotlight@4.9.0

Minor Changes

• Add support for continuous profiling (Profiling V2) (#1202)

• Add self-documenting CLI commands with per-command help support (#1206)

  Each CLI command now provides its own metadata (short description, usage, detailed help, and examples). The main help output is generated dynamically from this metadata, and users can get detailed help for specific commands via spotlight help <command> or spotlight <command> --help.

Patch Changes

• Remove dead code (#1214)

• Fix profile visualization issues in trace views: (#1203)

  • Update frame colors to use vibrant, high-contrast colors for better visibility
  • Add custom nanovis palette for Spotlight's dark theme
  • Fix sunburst center text showing bytes instead of sample counts
  • Fix treemap visibility with proper color contrast

• added support for AI SDK v2 in AI Mode (#1216)

• updated the empty pages of traces and envelopes (#1213)

• open external links in default browser (#1212)

@spotlightjs/spotlight@4.8.0

Minor Changes

• Add --open / -o CLI flag to automatically open the Spotlight dashboard in your default browser when starting the sidecar (#1200)

Patch Changes

• Fixed flamechart tree building to iterate from root to leaf frames, resolving fragmented visualization (#1201)

• shifted electron dependencies to dev dependencies as there were getting installed with npx for spotlight run (#1184)

@spotlightjs/spotlight@4.7.2

Patch Changes

• Fix ANSI escape code rendering in log viewer. Logs containing ANSI escape sequences (colors, bold, italic, etc.) are now properly styled in the UI instead of showing raw escape characters. (#1187)

@spotlightjs/spotlight@4.7.1

Patch Changes

• Report github-ci environment to Sentry when running in GitHub Actions CI (#1178)

• Fix npx @spotlightjs/spotlight fail (#1181)

@spotlightjs/spotlight@4.7.0

Minor Changes

• Add --allowed-origin / -A CLI option and allowedOrigins API option for configuring additional CORS origins. Supports both full origins (e.g., https://ngrok.io:443) for strict matching and plain domains (e.g., myapp.local) for permissive matching. Fixes #1171. (#1176)

Patch Changes

• Restore draggable electron app and recover semaphore buttons (#1173)

• Allow any DNS pointing to localhost in CORS (#1175)

@spotlightjs/spotlight@4.6.0

Minor Changes

• Added spotlight sdk for helping others to build on top of it (#1140)

• Support COMPOSE_FILE environment variable for Docker Compose projects (#1131)

• Prompt user to choose between docker compose and package.json when both are present (#1120)

Patch Changes

• Refactor docker compose support (#1121)

• disable sentry in development mode (#1143)

• Security: Restrict CORS origins for Sidecar to prevent unauthorized access (#1138)

  The Sidecar now only accepts requests from trusted origins:

  • localhost with any port or protocol (http/https)
  • https://spotlightjs.com and https://*.spotlightjs.com (HTTPS only, default port)

  ⚠️ Potentially Breaking: If you were accessing the Sidecar from other origins (e.g., custom domains, non-HTTPS spotlightjs.com), those connections will now be rejected. This change improves security by preventing malicious websites from connecting to your local Sidecar instance.

• Fix file capture error handling to log errors instead of crashing when SPOTLIGHT_CAPTURE is enabled (#1142)

• Remove console logging integration from Sentry setup (#1146)

@spotlightjs/spotlight@4.5.1

Patch Changes

• Fix SDK categorization for Next.js by using User-Agent headers to distinguish browser from server events (#1110)

• Updated dependencies [0942c8a, bce012e, 7624030, 15a7f41, 13da542, b3a654a]:

  • @spotlightjs/sidecar@2.5.0
  • @spotlightjs/overlay@4.5.0

@spotlightjs/sidecar@2.5.0

Minor Changes

• Docker compose support for Spotlight run command (#1108)

• Added support for Last-Event-Id in SSE stream (#1104)

• Change tool names: change . for _ and remove spotlight preffix (#1114)

• Improved human formatter readability (#1112)

Patch Changes

• Fix breaking error when event type is not supported (#1111)

• Fix SDK categorization for Next.js by using User-Agent headers to distinguish browser from server events (#1110)

@spotlightjs/electron@1.11.1

Patch Changes

• Updated dependencies [0942c8a, bce012e, 7624030, 15a7f41, 13da542, b3a654a]:
  • @spotlightjs/sidecar@2.5.0
  • @spotlightjs/overlay@4.5.0

@spotlightjs/spotlight@4.5.0

Minor Changes

• Display attachments in Event and Trace Context tabs (#1075)

  This implements attachment display in the Context tabs of Error and Trace detail pages. Attachments from envelopes are now associated with their events/traces during envelope parsing and displayed alongside other context information.

  Changes:

  • Added EventAttachment type definition to store attachment headers and data
  • Added optional attachments field to event types
  • Updated envelope parsing to collect and associate attachments with events
  • Added attachment rendering in EventContexts component
  • Attachments are displayed for both individual events and traces (via root transaction)
  • Supports all content types: images, videos, JSON, code, and text files

  Fixes #274

• Reduce UI stalls when opening large envelopes by collapsing viewers by default and lazily rendering item payloads and attachments. (#1084)

Patch Changes

• Fix SDK column sorting by comparing SDK string properties instead of full log objects. (#1086)

• Updated dependencies [149cbec, 2394999, 3ab0fb1, e67f120, 49eec65]:

  • @spotlightjs/overlay@4.5.0
  • @spotlightjs/sidecar@2.4.1