@madewithremy/admin 0.1.25 → 0.1.27

package/dist/prod.js

@@ -987,6 +987,7 @@ import { execFileSync } from "child_process";
 
 // src/config.ts
 var WORKSPACE_DIR = process.env["WORKSPACE_DIR"] || "/home/remy/workspace";
+var SIDECAR_URL = process.env["REMY_SIDECAR_URL"] || "http://127.0.0.1:4388";
 
 // src/ops/releases.ts
 function list3(ctx, params = {}) {
@@ -2235,7 +2236,7 @@ function liftFromLive(ctx, params = {}) {
 // src/commands/data.ts
 var dataSpecs = {
   "data lift-from-dev": {
-    usage: "Usage: remy-admin data lift-from-dev <appId> --confirm [--release-id <id>]\nRefusing to run without the exact appId and --confirm: this destructively replaces the live release's databases with a snapshot of dev. Wipes any rows live had \u2014 including signed-up users. Intended for first-publish / pre-launch data sync only.\n--release-id names which of your dev workspaces to lift from, and is required only when you have more than one open (a box and a laptop CLI). The ambiguity error lists the ids.",
+    usage: "Usage: remy-admin data lift-from-dev <appId> --confirm [--release-id <id>]\nRefusing to run without the exact appId and --confirm: this destructively replaces the live release's databases with a snapshot of dev. Wipes any rows live had \u2014 including signed-up users. Intended for first-publish / pre-launch data sync only.\n--release-id names the dev release to lift from; without it, your dev workspace in this app.",
     positionals: [{ name: "appId", required: true }],
     flags: { confirm: { type: "boolean" }, "release-id": { type: "string" } },
     requireAnyOf: {
@@ -2244,7 +2245,7 @@ var dataSpecs = {
     }
   },
   "data lift-from-live": {
-    usage: "Usage: remy-admin data lift-from-live [--truncate] --confirm [--release-id <id>]\nRefusing to run without --confirm: this destructively replaces the dev release's databases with a snapshot of live (wiping local dev data). Live/prod data is never touched. With --truncate it instead empties the dev databases (keeps schema, no data pulled from live).\n--release-id names which of your dev workspaces to overwrite, and is required only when you have more than one open.",
+    usage: "Usage: remy-admin data lift-from-live [--truncate] --confirm [--release-id <id>]\nRefusing to run without --confirm: this destructively replaces the dev release's databases with a snapshot of live (wiping local dev data). Live/prod data is never touched. With --truncate it instead empties the dev databases (keeps schema, no data pulled from live).\n--release-id names the dev release to overwrite; without it, your dev workspace in this app.",
     flags: {
       truncate: { type: "boolean" },
       confirm: { type: "boolean" },
@@ -6480,7 +6481,7 @@ var eventsSpecs = {
     }
   },
   "events publish": {
-    usage: "Usage: remy-admin events publish <channel> <json> [--scope live]\nPublishes exactly as the app's own events.publish would \u2014 same validation, delivery, and metering.",
+    usage: "Usage: remy-admin events publish <channel> <json> [--scope live]\nPublishes exactly as the app's own events.publish would \u2014 same validation, delivery, and metering. Goes to your own dev session unless --scope says otherwise; --scope live reaches real users.",
     positionals: [
       { name: "channel", required: true },
       { name: "json", required: true }
@@ -6567,18 +6568,21 @@ Notes:
   run from a script.
 
   publish lets a frontend subscriber be verified before the backend trigger
-  exists. The response's 'delivered' counts live subscriber connections per
-  published channel \u2014 0 means nobody is listening right now, which is normal,
-  not an error.
+  exists. It goes to YOUR dev session by default (the preview you're building
+  in); pass --scope live to reach real users' browsers. The response's
+  'scope' says where it went, and 'delivered' counts live subscriber
+  connections per published channel \u2014 0 means nobody is listening right now,
+  which is normal, not an error.
 
   channels list is the mismatch-finder: a channel with subscribers but no
   recent publish (or the reverse) usually means the frontend and backend spell
   the channel differently. Window is 24h; channels are exact strings \u2014 there
   are no wildcards anywhere in app events.
 
-  Scopes: events never cross execution environments. --scope defaults to
-  'live'; use 'dev:<devSessionId>' to inspect a tunnel session's world or
-  'preview:<releaseId>' for a branch preview.`;
+  Scopes: events never cross execution environments. tail and channels list
+  default to 'live', publish to your own dev session; use
+  'dev:<devSessionId>' for a dev session's world (a publish prints its own)
+  or 'preview:<releaseId>' for a branch preview.`;
 
 // src/ops/jewels.ts
 var JEWEL_RUN_TIMEOUT_MS = 6e5;
@@ -8180,11 +8184,13 @@ Today the one kind is dedicated retrieval: the app's own vector-store capacity
 for data sources, isolated from the shared pool. Sizes and prices come from the
 platform catalog (\`infra list\` prints them); nothing is priced client-side.
 
-A resource bills by the hour from activation, at the retained-storage rate while
-hibernated, and not at all once destroyed. Provisioning (and growing) needs a
-month's worth of credits available in the workspace, checked before the request
-is accepted; nothing is charged until activation. The provision output prints
-the price it committed to. Every action below is audited.
+A resource bills by the clock hour at the active rate for every hour it is
+active in, including the hour a resume lands in, and costs nothing while
+hibernated or once destroyed. Provisioning, growing and resuming need a month's
+worth of credits available in the workspace, checked before the request is
+accepted (insufficient_credits); nothing is charged until activation. The
+provision output prints the price it committed to. Every action below is
+audited.
 
 Subcommands:
   list        Resources on this app, plus the offerings you can provision
@@ -8192,7 +8198,7 @@ Subcommands:
   logs        The platform's log for a resource (--follow to keep reading)
   provision   Lease a new resource (needs a month's credits; prints the price)
   hibernate   Park it: data kept, searches paused, compute charge stops
-  resume      Bring a hibernated resource back
+  resume      Bring a hibernated resource back (needs a month's credits)
   resize      Change its size, data intact (passes through hibernated)
   destroy     Delete it (refused while data sources are placed on it)
   rename      Change the display name
@@ -8263,6 +8269,205 @@ Billing and the log:
 --wait exit codes: 0 reached the target phase \xB7 1 the platform reported failure \xB7
 2 still transitioning when --timeout elapsed (default 600s).`;
 
+// src/ops/qaRecordings.ts
+var RECORDING_STORE = "qa-recordings";
+async function ls2(ctx, params = {}) {
+  const page = await ls(ctx, {
+    store: RECORDING_STORE,
+    access: "private",
+    ...params.sessionId ? { prefix: `${params.sessionId}/` } : {},
+    ...params.cursor ? { cursor: params.cursor } : {},
+    ...params.limit ? { limit: params.limit } : {}
+  });
+  const sessions = /* @__PURE__ */ new Map();
+  for (const entry of page.files) {
+    const parts = entry.key.split("/");
+    if (parts.length !== 3) {
+      continue;
+    }
+    const [sessionId, runId] = parts;
+    let session = sessions.get(sessionId);
+    if (!session) {
+      session = { sessionId, chunks: 0, bytes: 0, runs: [] };
+      sessions.set(sessionId, session);
+    }
+    let run3 = session.runs.find((r) => r.runId === runId);
+    if (!run3) {
+      run3 = { runId, chunks: 0, bytes: 0, keys: [] };
+      session.runs.push(run3);
+    }
+    const size = entry.size ?? 0;
+    session.chunks += 1;
+    session.bytes += size;
+    run3.chunks += 1;
+    run3.bytes += size;
+    run3.keys.push(entry.key);
+    if (entry.updatedAt) {
+      if (!session.startedAt || entry.updatedAt < session.startedAt) {
+        session.startedAt = entry.updatedAt;
+      }
+      if (!session.endedAt || entry.updatedAt > session.endedAt) {
+        session.endedAt = entry.updatedAt;
+      }
+    }
+  }
+  for (const session of sessions.values()) {
+    for (const run3 of session.runs) {
+      run3.keys.sort((a, b) => seqOf(a) - seqOf(b));
+    }
+  }
+  return {
+    store: RECORDING_STORE,
+    sessions: [...sessions.values()].sort(
+      (a, b) => (b.endedAt ?? "").localeCompare(a.endedAt ?? "")
+    ),
+    ...page.cursor ? { cursor: page.cursor } : {}
+  };
+}
+function seqOf(key) {
+  const n = Number(
+    key.split("/").pop()?.replace(/\.json$/, "")
+  );
+  return Number.isFinite(n) ? n : 0;
+}
+var DEFAULT_EXPORT_TIMEOUT_MS = 66e4;
+async function exportVideo(_ctx, params) {
+  const body = {
+    recordingSessionId: params.sessionId,
+    startTs: params.from,
+    endTs: params.to,
+    ...params.store ? { store: params.store } : {},
+    ...params.access ? { access: params.access } : {}
+  };
+  let res;
+  try {
+    res = await fetch(`${SIDECAR_URL}/export-recording`, {
+      method: "POST",
+      headers: { "Content-Type": "application/json" },
+      body: JSON.stringify(body),
+      signal: AbortSignal.timeout(
+        params.timeoutMs ?? DEFAULT_EXPORT_TIMEOUT_MS
+      )
+    });
+  } catch (err) {
+    throw new Error(
+      `Could not reach the sandbox at ${SIDECAR_URL} (${err instanceof Error ? err.message : String(err)}). Rendering a replay needs the dev box that recorded it \u2014 this command only works inside a Remy sandbox.`
+    );
+  }
+  const payload = await res.json().catch(() => ({}));
+  if (!res.ok) {
+    throw new Error(
+      typeof payload.error === "string" ? payload.error : `The sandbox refused the export (HTTP ${res.status}).`
+    );
+  }
+  const status2 = payload.export;
+  if (!status2) {
+    throw new Error(
+      "The sandbox accepted the export but reported no result. Check the box's tunnel logs."
+    );
+  }
+  return status2;
+}
+
+// src/commands/qaRecordings.ts
+var qaRecordingsSpecs = {
+  "qa-recordings ls": {
+    usage: "Usage: remy-admin qa-recordings ls [--session <id>] [--cursor <cursor>] [--limit <n>]",
+    flags: {
+      session: { type: "string" },
+      cursor: { type: "string" },
+      limit: { type: "number", min: 1 }
+    }
+  },
+  "qa-recordings export": {
+    usage: "Usage: remy-admin qa-recordings export --session <id> --from <epochMs> --to <epochMs> [--store <name>] [--private]",
+    flags: {
+      session: { type: "string" },
+      from: { type: "number" },
+      to: { type: "number" },
+      store: { type: "string" },
+      private: { type: "boolean" }
+    }
+  }
+};
+async function qaRecordingsLs(ctx, a) {
+  out(
+    await ls2(ctx, {
+      sessionId: a.str("session"),
+      cursor: a.str("cursor"),
+      limit: a.num("limit")
+    })
+  );
+}
+async function qaRecordingsExport(ctx, a) {
+  const sessionId = a.str("session");
+  const from = a.num("from");
+  const to = a.num("to");
+  if (!sessionId) {
+    fatal("--session is required (see `remy-admin qa-recordings ls`).");
+  }
+  if (from === void 0 || to === void 0) {
+    fatal(
+      "--from and --to are required (epoch milliseconds). A QA run reports both on its result."
+    );
+  }
+  const result = await exportVideo(ctx, {
+    sessionId,
+    from,
+    to,
+    store: a.str("store"),
+    access: a.bool("private") ? "private" : void 0
+  });
+  if (result.status !== "completed") {
+    fatal(
+      result.errorCode === "FFMPEG_UNAVAILABLE" ? "This sandbox has no ffmpeg \u2014 video export needs a box on the current devbox image." : result.error ?? `Export ${result.status}.`
+    );
+  }
+  out(result);
+}
+var qaRecordingsHandlers = {
+  "qa-recordings ls": qaRecordingsLs,
+  "qa-recordings export": qaRecordingsExport
+};
+var qaRecordingsHelp = `remy-admin qa-recordings \u2014 Browser-QA session replays.
+
+Every automated browser test records what the page did, as rrweb (a DOM
+recording, not video). The chunks are ordinary private files in the
+'qa-recordings' store, so 'remy-admin files' works on them directly: sign one
+for a link, download one, or copy one into a public store to embed it.
+
+'export' turns a replay into an mp4 \u2014 the shareable artifact, for a changelog
+entry, a release note or a bug report. It renders on the dev box (real browser,
+real ffmpeg, no AI-generated frames), so it only works inside a sandbox, it
+blocks for the length of the clip, and it won't start while a video export is
+already running.
+
+Subcommands:
+  ls      Recording sessions in this app, grouped into runs
+  export  Render a window of a session to an mp4 and print where it landed
+
+Usage:
+  remy-admin qa-recordings ls [--session <id>] [--limit <n>]
+  remy-admin qa-recordings export --session <id> --from <epochMs> --to <epochMs> [--store <name>] [--private]
+
+Options:
+  --session   Recording session id (32 hex characters)
+  --from/--to The window to render, as epoch milliseconds. A QA run prints the
+              session and both bounds on its result.
+  --store     Destination store for the mp4 (default: assets)
+  --private   Write the mp4 privately instead of publicly. No URL is returned;
+              use 'files sign' to make one.
+
+Examples:
+  # What was recorded recently
+  remy-admin qa-recordings ls --limit 200
+
+  # Render a run and get a public URL to embed
+  remy-admin qa-recordings export --session 9f2c\u2026 --from 1758000000000 --to 1758000042000
+
+  # The raw rrweb chunks for a session (download, inspect, or rehost)
+  remy-admin files ls --private --store qa-recordings --prefix 9f2c\u2026/`;
+
 // src/commands/index.ts
 var SPECS = {
   ...requestsSpecs,
@@ -8291,7 +8496,8 @@ var SPECS = {
   ...settingsSpecs,
   ...emailSpecs,
   ...cronSpecs,
-  ...infraSpecs
+  ...infraSpecs,
+  ...qaRecordingsSpecs
 };
 var HANDLERS = {
   ...requestsHandlers,
@@ -8320,7 +8526,8 @@ var HANDLERS = {
   ...settingsHandlers,
   ...emailHandlers,
   ...cronHandlers,
-  ...infraHandlers
+  ...infraHandlers,
+  ...qaRecordingsHandlers
 };
 var GROUP_HELP = {
   requests: requestsHelp,
@@ -8345,7 +8552,8 @@ var GROUP_HELP = {
   settings: settingsHelp,
   email: emailHelp,
   cron: cronHelp,
-  infra: infraHelp
+  infra: infraHelp,
+  "qa-recordings": qaRecordingsHelp
 };
 
 // src/ctx.ts
@@ -8405,29 +8613,30 @@ var HELP = `remy-admin \u2014 Manage your production Remy app.
 Usage: remy-admin <command> <subcommand> [options]
 
 Commands:
-  requests    View request logs and metrics
-  crashes     View frontend (browser) crash groups and events
-  analytics   View traffic, top-N, geo, and AI-referral insights
-  releases    View and monitor releases
-  diagnostics View the post-deploy Lighthouse audit (scores, issues, raw report)
-  domains     Manage custom subdomain
-  users       Manage app users and roles
-  db          Query the production database
-  secrets     Manage app secrets (env vars)
-  methods     List and invoke methods
-  data        Sync databases between dev and live (lift-from-dev / lift-from-live)
-  issues      File and manage issues, in this app or another app in the workspace
-  prerender   Manage + verify prerendered snapshots served to bots/crawlers
-  files       Store, retrieve, share (signed links) + manage files in the app's stores
-  datasources Build and query searchable document corpora (RAG)
-  voice       Phone numbers, voice call log + transcripts, voice policy settings
-  agent       Agent (chat) conversation log + transcripts
-  events      Realtime events \u2014 live tail, test publish, channel activity
-  jewels      Monitor jewel shadowing; review + approve the proposal queue
-  settings    App settings \u2014 signup allowlist, test accounts, embed origins, toggles
-  email       Email \u2014 delivery log, blast stats, unsubscribes, inbox, custom domains
-  cron        Scheduled jobs \u2014 schedules, run history, manual trigger
-  infra       Dedicated infrastructure \u2014 provision, hibernate, resize + destroy retrieval capacity
+  requests      View request logs and metrics
+  crashes       View frontend (browser) crash groups and events
+  analytics     View traffic, top-N, geo, and AI-referral insights
+  releases      View and monitor releases
+  diagnostics   View the post-deploy Lighthouse audit (scores, issues, raw report)
+  domains       Manage custom subdomain
+  users         Manage app users and roles
+  db            Query the production database
+  secrets       Manage app secrets (env vars)
+  methods       List and invoke methods
+  data          Sync databases between dev and live (lift-from-dev / lift-from-live)
+  issues        File and manage issues, in this app or another app in the workspace
+  prerender     Manage + verify prerendered snapshots served to bots/crawlers
+  files         Store, retrieve, share (signed links) + manage files in the app's stores
+  datasources   Build and query searchable document corpora (RAG)
+  voice         Phone numbers, voice call log + transcripts, voice policy settings
+  agent         Agent (chat) conversation log + transcripts
+  events        Realtime events \u2014 live tail, test publish, channel activity
+  jewels        Monitor jewel shadowing; review + approve the proposal queue
+  settings      App settings \u2014 signup allowlist, test accounts, embed origins, toggles
+  email         Email \u2014 delivery log, blast stats, unsubscribes, inbox, custom domains
+  cron          Scheduled jobs \u2014 schedules, run history, manual trigger
+  infra         Dedicated infrastructure \u2014 provision, hibernate, resize + destroy retrieval capacity
+  qa-recordings Browser-QA session replays \u2014 list them, render one as an mp4
 
 Run 'remy-admin <command> --help' for details on each command.
 
@@ -8460,7 +8669,8 @@ var GROUPS = [
   "settings",
   "email",
   "cron",
-  "infra"
+  "infra",
+  "qa-recordings"
 ];
 var KEYS = new Set(Object.keys(SPECS));
 function resolveRoute(argv) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@madewithremy/admin",
-  "version": "0.1.25",
+  "version": "0.1.27",
   "description": "Admin SDK + CLI for managing production Remy apps",
   "type": "module",
   "main": "./dist/index.js",
@@ -21,9 +21,10 @@
   "scripts": {
     "build": "tsup",
     "dev": "tsup --watch",
-    "typecheck": "tsc --noEmit",
-    "lint:fix": "prettier --write ./src",
-    "prepublishOnly": "npm run build"
+    "typecheck": "npm run tsc -- --noEmit",
+    "prepublishOnly": "npm run build",
+    "tsc": "node node_modules/@typescript/native/bin/tsc",
+    "//tsc": "The native TypeScript 7 compiler by explicit path. It (typescript@7 under the @typescript/native alias) and the JS compiler API behind the `typescript` alias — which tsup's dts step needs — both declare a `tsc` bin, so node_modules/.bin/tsc is whichever npm linked last."
   },
   "engines": {
     "node": ">=22.0.0"
@@ -53,9 +54,9 @@
   },
   "devDependencies": {
     "@types/node": "^25.3.2",
-    "prettier": "^3.8.1",
+    "@typescript/native": "npm:typescript@^7.0.2",
     "tsup": "^8",
     "tsx": "^4",
-    "typescript": "^5.5"
+    "typescript": "npm:@typescript/typescript6@^6.0.2"
   }
 }