@gajae-code/stats 0.18.1 → 0.18.6

package/README.md

@@ -56,13 +56,22 @@ console.log(stats.byAgent.find(agent => agent.agent === "executor")?.totalCost);
 
 ## API Endpoints
 
+Endpoints marked *range* accept `?range=1h|24h|7d|30d|90d|all` (default `24h`; an unknown value falls back to `24h`). Time series use hourly buckets for `1h` and `24h` and daily buckets for longer ranges.
+
 | Endpoint | Description |
 |----------|-------------|
-| `GET /api/stats` | Overall stats with all breakdowns |
-| `GET /api/stats/models` | Per-model statistics |
-| `GET /api/stats/folders` | Per-folder/project statistics |
-| `GET /api/stats/timeseries` | Hourly time series data |
-| `POST /api/sync` | Trigger sync and return counts |
+| `GET /api/stats` | The full `DashboardStats` object: overall, failures, per-model/folder/agent breakdowns, the time, model, model-performance, and cost series, and the cache-miss attribution (*range*) |
+| `GET /api/stats/overview` | `overall` and `timeSeries` only (*range*) |
+| `GET /api/stats/models` | Per-model statistics, ordered by request count (*range*) |
+| `GET /api/stats/model-dashboard` | `byModel`, `modelSeries`, and `modelPerformanceSeries` (*range*) |
+| `GET /api/stats/folders` | Per-folder/project statistics (*range*) |
+| `GET /api/stats/timeseries` | Requests, errors, tokens, and cost per time bucket (*range*) |
+| `GET /api/stats/costs` | Daily cost per model and provider, split into input/output/cache (*range*) |
+| `GET /api/stats/behavior` | User-message behavior signals (yelling, profanity, repetition, and others): overall, per model, and over time (*range*) |
+| `GET /api/stats/recent` | Most recent requests, newest first (`?limit=`, default 100) |
+| `GET /api/stats/errors` | Most recent requests that stopped with an error (`?limit=`, default 100) |
+| `GET /api/request/:id` | One request with its stored messages and output; `404` if unknown |
+| `POST /api/sync` | Sync session files and return `{ processed, files, totalMessages }`; `409` while a sync is already running |
 
 ## Local server security
 
@@ -97,10 +106,10 @@ gjc stats --summary
 
 ### JSON output for scripting
 
-`gjc stats --json` prints a `Synced N new entries ...` status line and a blank line on stdout before the JSON object (sync progress goes to stderr). Skip to the first line that opens the object before piping into `jq`:
+With `--json`, stdout carries only the JSON document; the sync progress and the `Synced N new entries ...` summary go to stderr.
 
 ```bash
-gjc stats --json | sed -n '/^{/,$p' | jq '.overall.totalCost'
+gjc stats --json | jq '.overall.totalCost'
 ```
 
 ### Dashboard on a custom port
@@ -145,7 +154,7 @@ if (topModel) {
 
 ### Troubleshooting
 
-- **No data shown?** Check that session logs exist under `~/.gjc/agent/sessions/`.
+- **No data shown?** Check that session logs exist under `~/.gjc/agent/sessions/` (`~/<GJC_CONFIG_DIR>/agent/sessions/` if that variable is set). With a custom `GJC_CODING_AGENT_DIR`, sessions are in `$GJC_CODING_AGENT_DIR/sessions/`. Otherwise, on Linux and macOS, if `XDG_DATA_HOME` is set and `$XDG_DATA_HOME/gjc` exists (created by `gjc config init-xdg`), sessions are in `$XDG_DATA_HOME/gjc/sessions/`. These variables must come from your shell environment. A project `.env` cannot set them, and if the `.env` entry uses `$` expansion it blocks the shell value as well; in both cases the default path applies.
 - **Dashboard not starting?** Check that port 3847 (or the port passed to `--port`) is free.
 
 ## License

package/package.json

@@ -1,7 +1,7 @@
 {
 	"type": "module",
 	"name": "@gajae-code/stats",
-	"version": "0.18.1",
+	"version": "0.18.6",
 	"description": "Local observability dashboard for pi AI usage statistics",
 	"homepage": "https://gajae-code.com",
 	"author": "Yeachan-Heo",
@@ -38,8 +38,8 @@
 		"fmt": "biome format --write ."
 	},
 	"dependencies": {
-		"@gajae-code/ai": "0.18.1",
-		"@gajae-code/utils": "0.18.1",
+		"@gajae-code/ai": "0.18.6",
+		"@gajae-code/utils": "0.18.6",
 		"@tailwindcss/node": "^4.2.4",
 		"chart.js": "^4.5.1",
 		"date-fns": "^4.1.0",

package/src/server.ts

@@ -167,14 +167,16 @@ async function handleApi(req: Request, context: ApiContext): Promise<Response> {
 	}
 
 	if (path === "/api/stats/recent") {
-		const limit = url.searchParams.get("limit");
-		const stats = await getRecentRequests(limit ? parseInt(limit, 10) : undefined);
+		const limit = parseLimitParam(url.searchParams.get("limit"));
+		if (limit === null) return badRequest();
+		const stats = await getRecentRequests(limit);
 		return Response.json(stats);
 	}
 
 	if (path === "/api/stats/errors") {
-		const limit = url.searchParams.get("limit");
-		const stats = await getRecentErrors(limit ? parseInt(limit, 10) : undefined);
+		const limit = parseLimitParam(url.searchParams.get("limit"));
+		if (limit === null) return badRequest();
+		const stats = await getRecentErrors(limit);
 		return Response.json(stats);
 	}
 
@@ -194,9 +196,9 @@ async function handleApi(req: Request, context: ApiContext): Promise<Response> {
 	}
 
 	if (path.startsWith("/api/request/")) {
-		const id = path.split("/").pop();
-		if (!id) return new Response("Bad Request", { status: 400 });
-		const details = await getRequestDetails(parseInt(id, 10));
+		const id = parseIntegerParam(path.slice("/api/request/".length));
+		if (id === null) return badRequest();
+		const details = await getRequestDetails(id);
 		if (!details) return new Response("Not Found", { status: 404 });
 		return Response.json(details);
 	}
@@ -218,6 +220,25 @@ async function handleApi(req: Request, context: ApiContext): Promise<Response> {
 	return new Response("Not Found", { status: 404 });
 }
 
+/**
+ * A request parameter that must be a whole decimal number. `parseInt` alone
+ * accepts "1abc" and "-1", and SQLite rejects NaN with a datatype mismatch and
+ * treats a negative LIMIT as unlimited, so anything but plain digits is refused.
+ */
+function parseIntegerParam(value: string): number | null {
+	if (!/^\d{1,15}$/.test(value)) return null;
+	return Number(value);
+}
+
+/** `?limit=`: absent keeps the query's own default; present must be a whole number. */
+function parseLimitParam(value: string | null): number | undefined | null {
+	return value === null ? undefined : parseIntegerParam(value);
+}
+
+function badRequest(): Response {
+	return new Response("Bad Request", { status: 400 });
+}
+
 function forbidden(): Response {
 	return new Response("Forbidden", { status: 403 });
 }