@littlebearapps/platform-admin-sdk 1.2.0 → 1.4.1

package/templates/shared/workers/lib/usage/queue/budget-enforcement.ts

@@ -357,7 +357,8 @@ export async function checkAndTripCircuitBreakers(env: Env): Promise<boolean> {
 
   // Fetch settings and D1 writes in parallel
   const [settings, writes24h] = await Promise.all([getPlatformSettings(env), getD1WriteCount(env)]);
-  const d1WriteLimit = settings.d1WriteLimit;
+  // Defense-in-depth: floor critical limits to prevent stale/poisoned cache values
+  const d1WriteLimit = Math.max(settings.d1WriteLimit, 1000);
 
   // Check D1 write limit (global)
   const d1Status = determineCircuitBreakerStatus(writes24h, d1WriteLimit);
@@ -869,8 +870,9 @@ const MONTHLY_METRIC_TO_COLUMN: Record<string, string> = {
 /** Allowlist for safe column interpolation in SQL. */
 const ALLOWED_MONTHLY_COLUMNS = new Set(Object.values(MONTHLY_METRIC_TO_COLUMN));
 
-// TODO: Add your project IDs here (must match project_registry in D1)
-const MONTHLY_PROJECTS = ['all', 'platform'] as const;
+// TODO: Add your project slugs from project_registry (e.g., 'my-app', 'my-api')
+// 'all' is the account-level aggregate and should always be included.
+const MONTHLY_PROJECTS = ['all'] as const;
 
 /**
  * Check monthly budget usage against limits.
@@ -910,6 +912,10 @@ export async function checkMonthlyBudgets(env: Env): Promise<number> {
       return 0;
     }
 
+    // Pre-calculate month start to enable index usage on (project, snapshot_date)
+    const now = new Date();
+    const monthStart = `${now.getUTCFullYear()}-${String(now.getUTCMonth() + 1).padStart(2, '0')}-01`;
+
     // For each project, get monthly totals from daily_usage_rollups
     for (const project of MONTHLY_PROJECTS) {
       // Get the monthly sum for this project
@@ -929,9 +935,9 @@ export async function checkMonthlyBudgets(env: Env): Promise<number> {
           SUM(vectorize_queries) as vectorize_queries,
           SUM(vectorize_inserts) as vectorize_inserts
         FROM daily_usage_rollups
-        WHERE project = ? AND snapshot_date >= date('now', 'start of month')
+        WHERE project = ? AND snapshot_date >= ?
         LIMIT 1
-      `).bind(project).first<Record<string, number | null>>();
+      `).bind(project, monthStart).first<Record<string, number | null>>();
 
       if (!monthlyTotals) continue;
 

package/templates/shared/workers/lib/usage/scheduled/anomaly-detection.ts

@@ -388,8 +388,9 @@ const MONITORED_METRICS = [
  * Projects monitored for per-project anomaly detection.
  * Includes 'all' (aggregate) plus individual projects.
  */
-// TODO: Add your project IDs here (must match project_registry in D1)
-const MONITORED_PROJECTS = ['all', 'platform'] as const;
+// TODO: Add your project slugs from project_registry (e.g., 'my-app', 'my-api')
+// 'all' is the account-level aggregate and should always be included.
+const MONITORED_PROJECTS = ['all'] as const;
 
 /**
  * Run anomaly detection for key metrics across all monitored projects.
@@ -467,6 +468,13 @@ export async function calculateHourlyRollingStats(
   }
 
   try {
+    // Pre-calculate time bounds to enable index usage on snapshot_hour
+    const now = new Date();
+    const sevenDaysAgo = new Date(now.getTime() - 7 * 24 * 60 * 60 * 1000);
+    const oneHourAgo = new Date(now.getTime() - 60 * 60 * 1000);
+    const sevenDaysAgoStr = sevenDaysAgo.toISOString().replace(/\.\d{3}Z$/, 'Z');
+    const oneHourAgoStr = oneHourAgo.toISOString().replace(/\.\d{3}Z$/, 'Z');
+
     const result = await env.PLATFORM_DB.prepare(
       `
       SELECT
@@ -476,11 +484,11 @@ export async function calculateHourlyRollingStats(
         AVG(${metric}) as avg_value
       FROM hourly_usage_snapshots
       WHERE project = ?
-        AND snapshot_hour >= datetime('now', '-7 days')
-        AND snapshot_hour < datetime('now', '-1 hour')
+        AND snapshot_hour >= ?
+        AND snapshot_hour < ?
     `
     )
-      .bind(project)
+      .bind(project, sevenDaysAgoStr, oneHourAgoStr)
       .first<{
         sample_count: number;
         sum_value: number;
@@ -522,19 +530,26 @@ export async function detectHourlyD1WriteAnomalies(env: Env): Promise<number> {
   const log = createLoggerFromEnv(env, 'platform-usage', 'platform:usage:anomaly');
 
   try {
+    // Pre-calculate time bounds to enable index usage on snapshot_hour
+    const now = new Date();
+    const twoHoursAgo = new Date(now.getTime() - 2 * 60 * 60 * 1000);
+    const oneHourAgo = new Date(now.getTime() - 60 * 60 * 1000);
+    const twoHoursAgoStr = twoHoursAgo.toISOString().replace(/\.\d{3}Z$/, 'Z');
+    const oneHourAgoStr = oneHourAgo.toISOString().replace(/\.\d{3}Z$/, 'Z');
+
     // Get the last completed hour's value
     const lastHourResult = await env.PLATFORM_DB.prepare(
       `
       SELECT ${metric} as value
       FROM hourly_usage_snapshots
       WHERE project = ?
-        AND snapshot_hour >= datetime('now', '-2 hours')
-        AND snapshot_hour < datetime('now', '-1 hour')
+        AND snapshot_hour >= ?
+        AND snapshot_hour < ?
       ORDER BY snapshot_hour DESC
       LIMIT 1
     `
     )
-      .bind(project)
+      .bind(project, twoHoursAgoStr, oneHourAgoStr)
       .first<{ value: number }>();
 
     if (!lastHourResult || lastHourResult.value === 0) {

package/templates/shared/workers/lib/usage/scheduled/rollups.ts

@@ -127,11 +127,14 @@ export async function runDailyRollup(env: Env, date: string): Promise<number> {
   const log = createLoggerFromEnv(env, 'platform-usage', 'platform:usage:scheduled');
   log.info(`Running daily rollup for ${date}`, { tag: 'SCHEDULED' });
 
-  // Calculate the previous day's date
+  // Calculate previous and next day dates for range queries (index-friendly)
   const targetDate = new Date(date + 'T00:00:00Z');
   const prevDate = new Date(targetDate);
   prevDate.setUTCDate(prevDate.getUTCDate() - 1);
   const prevDateStr = prevDate.toISOString().split('T')[0];
+  const nextDate = new Date(targetDate);
+  nextDate.setUTCDate(nextDate.getUTCDate() + 1);
+  const nextDateStr = nextDate.toISOString().split('T')[0];
 
   // Check if this is the first day of the month
   const isFirstDayOfMonth = targetDate.getUTCDate() === 1;
@@ -269,11 +272,11 @@ export async function runDailyRollup(env: Env, date: string): Promise<number> {
       MAX(total_cost_usd) as total_cost_usd,
       COUNT(*) as samples_count
     FROM hourly_usage_snapshots
-    WHERE DATE(snapshot_hour) = ?
+    WHERE snapshot_hour >= ? AND snapshot_hour < ?
     GROUP BY project
     `
   )
-    .bind(date)
+    .bind(date + 'T00:00:00Z', nextDateStr + 'T00:00:00Z')
     .all<HourlyMaxRow>();
 
   if (!todayResult.results || todayResult.results.length === 0) {
@@ -324,11 +327,11 @@ export async function runDailyRollup(env: Env, date: string): Promise<number> {
         MAX(COALESCE(workflows_cost_usd, 0)) as workflows_cost_usd,
         MAX(total_cost_usd) as total_cost_usd
       FROM hourly_usage_snapshots
-      WHERE DATE(snapshot_hour) = ?
+      WHERE snapshot_hour >= ? AND snapshot_hour < ?
       GROUP BY project
       `
     )
-      .bind(prevDateStr)
+      .bind(prevDateStr + 'T00:00:00Z', date + 'T00:00:00Z')
       .all<PrevDayMaxRow>();
 
     if (prevResult.results) {