Activity model (user_activity.py):
- Ignore pings from obvious bots so the feed reflects real humans
- Merge a logged-in user's anonymous doc by exact anonymous_id only (never
by shared NAT IP, which could tag another visitor as the logged-in user)
- Count distinct active visitors via aggregation so count matches the feed
- Track page views (on navigation) and accumulated online time per visitor
- New activity_history collection (5-min buckets, 7-day TTL) powering admin
trend charts; dedup-aware queries with field-length caps and graceful
Mongo failures so presence tracking never breaks a page
- Fix naive/aware datetime bug that made every second+ ping fail silently,
keeping last_seen stale (visitors would drop out of "active" after 5 min)
Routes + dashboard:
- Rate-limit /api/activity/ping, pass User-Agent through for bot filtering
- /api/activity/trend endpoint (admin) and enriched /api/admin/dashboard
with registered/guest split, top pages, and 24h trend
- Admin dashboard…
