@marinoscar/platform-api 0.0.0-stage → 0.1.0-next.3

package/dist/telemetry/stack/telemetry-stack.service.js

@@ -0,0 +1,122 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+var TelemetryStackService_1;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.TelemetryStackService = exports.TELEMETRY_STACK_DEPLOY_AUDIT_ACTION = void 0;
+exports.toDeploy = toDeploy;
+const common_1 = require("@nestjs/common");
+const ports_1 = require("../ports");
+const stack_agent_client_1 = require("./stack-agent.client");
+const telemetry_stack_deploy_handler_1 = require("./telemetry-stack-deploy.handler");
+// =============================================================================
+// TelemetryStackService — GET /api/admin/telemetry/stack and
+// POST /api/admin/telemetry/stack/deploy (issue #567, epic #528)
+// =============================================================================
+//
+// The status read asks the stack-agent for each telemetry container's state
+// (bounded to five seconds) and reads the most recent deploy job. It always
+// answers: an agent that is missing, unreachable or refusing the token is a
+// state, not an error.
+//
+// The deploy enqueues `telemetry.stack.deploy` — never calls the agent inline
+// (an image pull can take ten minutes). The job has no subject, so the queue's
+// active-dedup index makes the enqueue idempotent: while one is pending or
+// running, the call returns that job. Refused with 409 when this deployment
+// has no stack-agent, since the job could only fail.
+// =============================================================================
+exports.TELEMETRY_STACK_DEPLOY_AUDIT_ACTION = 'telemetry:stack_deploy';
+let TelemetryStackService = TelemetryStackService_1 = class TelemetryStackService {
+    agent;
+    jobs;
+    auditSink;
+    logger = new common_1.Logger(TelemetryStackService_1.name);
+    constructor(agent, jobs, auditSink) {
+        this.agent = agent;
+        this.jobs = jobs;
+        this.auditSink = auditSink;
+    }
+    async getStatus() {
+        const [status, latest] = await Promise.all([
+            this.agent.telemetryStatus(),
+            this.jobs.findLatest(telemetry_stack_deploy_handler_1.TELEMETRY_STACK_DEPLOY_TYPE),
+        ]);
+        let agent;
+        if (status.ok) {
+            agent = 'available';
+        }
+        else if (status.error === 'not_configured' || status.error === 'unauthorized') {
+            agent = status.error;
+        }
+        else {
+            agent = 'unavailable';
+        }
+        return {
+            agent,
+            // The client's message: origin and failure, never the token.
+            agentError: !status.ok && (agent === 'unavailable' || agent === 'unauthorized') ? status.message : null,
+            services: status.ok ? status.services : [],
+            deploy: latest ? toDeploy(latest) : null,
+        };
+    }
+    /** Queues a deploy (or returns the one in flight) and audits the request. */
+    async deploy(userId) {
+        if (!this.agent.isConfigured()) {
+            throw new common_1.ConflictException({
+                message: 'GreptimeDB cannot be deployed from here: this deployment has no stack agent ' +
+                    '(STACK_AGENT_URL and STACK_AGENT_TOKEN are not set).',
+                details: { reason: 'STACK_AGENT_NOT_CONFIGURED' },
+            });
+        }
+        const job = await this.jobs.enqueue({
+            type: telemetry_stack_deploy_handler_1.TELEMETRY_STACK_DEPLOY_TYPE,
+            // A person asking for the stack to be (re)started.
+            reason: 'rerun',
+            // GLOBAL — no subject — so the dedup key is constant for the type and
+            // at most one deploy is ever pending or running.
+            payload: { requestedByUserId: userId },
+        });
+        await this.auditSink.record({
+            actorUserId: userId,
+            action: exports.TELEMETRY_STACK_DEPLOY_AUDIT_ACTION,
+            targetType: 'job',
+            targetId: job.id,
+            meta: { type: telemetry_stack_deploy_handler_1.TELEMETRY_STACK_DEPLOY_TYPE, status: job.status },
+        });
+        this.logger.log(`Telemetry stack deploy requested by ${userId} (job ${job.id}, ${job.status})`);
+        return { jobId: job.id };
+    }
+};
+exports.TelemetryStackService = TelemetryStackService;
+exports.TelemetryStackService = TelemetryStackService = TelemetryStackService_1 = __decorate([
+    (0, common_1.Injectable)(),
+    __param(1, (0, common_1.Inject)(ports_1.TELEMETRY_JOBS)),
+    __param(2, (0, common_1.Inject)(ports_1.TELEMETRY_AUDIT_SINK)),
+    __metadata("design:paramtypes", [stack_agent_client_1.StackAgentClient, Object, Object])
+], TelemetryStackService);
+/** The API shape of one deploy job. `output` comes from the handler's `payload.result`. */
+function toDeploy(job) {
+    const payload = job.payload;
+    const output = payload && typeof payload === 'object' ? payload.result?.output : undefined;
+    return {
+        jobId: job.id,
+        // The queue's own status strings (`JobStatus`), which the wire enum mirrors.
+        status: job.status,
+        createdAt: job.createdAt.toISOString(),
+        finishedAt: job.finishedAt ? job.finishedAt.toISOString() : null,
+        // A succeeded job's `lastError` is history from an earlier attempt, not its outcome.
+        error: job.status === 'succeeded' ? null : (job.lastError ?? null),
+        output: typeof output === 'string' ? output : null,
+    };
+}
+//# sourceMappingURL=telemetry-stack.service.js.map

package/dist/telemetry/stack/telemetry-stack.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"telemetry-stack.service.js","sourceRoot":"","sources":["../../../src/telemetry/stack/telemetry-stack.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAqGA,4BAgBC;AArHD,2CAA+E;AAE/E,oCAMkB;AAElB,6DAAwD;AACxD,qFAA+E;AAE/E,gFAAgF;AAChF,6DAA6D;AAC7D,iEAAiE;AACjE,gFAAgF;AAChF,EAAE;AACF,4EAA4E;AAC5E,4EAA4E;AAC5E,4EAA4E;AAC5E,uBAAuB;AACvB,EAAE;AACF,8EAA8E;AAC9E,+EAA+E;AAC/E,2EAA2E;AAC3E,4EAA4E;AAC5E,qDAAqD;AACrD,gFAAgF;AAEnE,QAAA,mCAAmC,GAAG,wBAAwB,CAAC;AAGrE,IAAM,qBAAqB,6BAA3B,MAAM,qBAAqB;IAIb;IACwB;IACM;IALhC,MAAM,GAAG,IAAI,eAAM,CAAC,uBAAqB,CAAC,IAAI,CAAC,CAAC;IAEjE,YACmB,KAAuB,EACC,IAAuB,EACjB,SAA6B;QAF3D,UAAK,GAAL,KAAK,CAAkB;QACC,SAAI,GAAJ,IAAI,CAAmB;QACjB,cAAS,GAAT,SAAS,CAAoB;IAC3E,CAAC;IAEJ,KAAK,CAAC,SAAS;QACb,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YACzC,IAAI,CAAC,KAAK,CAAC,eAAe,EAAE;YAC5B,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,4DAA2B,CAAC;SAClD,CAAC,CAAC;QAEH,IAAI,KAA+B,CAAC;QACpC,IAAI,MAAM,CAAC,EAAE,EAAE,CAAC;YACd,KAAK,GAAG,WAAW,CAAC;QACtB,CAAC;aAAM,IAAI,MAAM,CAAC,KAAK,KAAK,gBAAgB,IAAI,MAAM,CAAC,KAAK,KAAK,cAAc,EAAE,CAAC;YAChF,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC;QACvB,CAAC;aAAM,CAAC;YACN,KAAK,GAAG,aAAa,CAAC;QACxB,CAAC;QAED,OAAO;YACL,KAAK;YACL,6DAA6D;YAC7D,UAAU,EAAE,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,KAAK,KAAK,aAAa,IAAI,KAAK,KAAK,cAAc,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI;YACvG,QAAQ,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE;YAC1C,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI;SACzC,CAAC;IACJ,CAAC;IAED,6EAA6E;IAC7E,KAAK,CAAC,MAAM,CAAC,MAAc;QACzB,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,EAAE,EAAE,CAAC;YAC/B,MAAM,IAAI,0BAAiB,CAAC;gBAC1B,OAAO,EACL,8EAA8E;oBAC9E,sDAAsD;gBACxD,OAAO,EAAE,EAAE,MAAM,EAAE,4BAA4B,EAAE;aAClD,CAAC,CAAC;QACL,CAAC;QAED,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC;YAClC,IAAI,EAAE,4DAA2B;YACjC,mDAAmD;YACnD,MAAM,EAAE,OAAO;YACf,sEAAsE;YACtE,iDAAiD;YACjD,OAAO,EAAE,EAAE,iBAAiB,EAAE,MAAM,EAAE;SACvC,CAAC,CAAC;QAEH,MAAM,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC;YAC1B,WAAW,EAAE,MAAM;YACnB,MAAM,EAAE,2CAAmC;YAC3C,UAAU,EAAE,KAAK;YACjB,QAAQ,EAAE,GAAG,CAAC,EAAE;YAChB,IAAI,EAAE,EAAE,IAAI,EAAE,4DAA2B,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE;SAChE,CAAC,CAAC;QAEH,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,uCAAuC,MAAM,SAAS,GAAG,CAAC,EAAE,KAAK,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC;QAEhG,OAAO,EAAE,KAAK,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC;IAC3B,CAAC;CACF,CAAA;AAjEY,sDAAqB;gCAArB,qBAAqB;IADjC,IAAA,mBAAU,GAAE;IAMR,WAAA,IAAA,eAAM,EAAC,sBAAc,CAAC,CAAA;IACtB,WAAA,IAAA,eAAM,EAAC,4BAAoB,CAAC,CAAA;qCAFL,qCAAgB;GAJ/B,qBAAqB,CAiEjC;AAED,2FAA2F;AAC3F,SAAgB,QAAQ,CACtB,GAAqG;IAErG,MAAM,OAAO,GAAG,GAAG,CAAC,OAAmD,CAAC;IACxE,MAAM,MAAM,GAAG,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;IAE3F,OAAO;QACL,KAAK,EAAE,GAAG,CAAC,EAAE;QACb,6EAA6E;QAC7E,MAAM,EAAE,GAAG,CAAC,MAAwC;QACpD,SAAS,EAAE,GAAG,CAAC,SAAS,CAAC,WAAW,EAAE;QACtC,UAAU,EAAE,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,IAAI;QAChE,qFAAqF;QACrF,KAAK,EAAE,GAAG,CAAC,MAAM,KAAK,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,IAAI,IAAI,CAAC;QAClE,MAAM,EAAE,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI;KACnD,CAAC;AACJ,CAAC"}

package/dist/telemetry/tasks/telemetry-retention.task.d.ts

@@ -0,0 +1,8 @@
+import { type TelemetryJobsPort } from '../ports';
+export declare class TelemetryRetentionTask {
+    private readonly jobs;
+    private readonly logger;
+    constructor(jobs: TelemetryJobsPort);
+    handleCron(): Promise<void>;
+}
+//# sourceMappingURL=telemetry-retention.task.d.ts.map

package/dist/telemetry/tasks/telemetry-retention.task.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"telemetry-retention.task.d.ts","sourceRoot":"","sources":["../../../src/telemetry/tasks/telemetry-retention.task.ts"],"names":[],"mappings":"AAmBA,OAAO,EAAkB,KAAK,iBAAiB,EAAE,MAAM,UAAU,CAAC;AAElE,qBACa,sBAAsB;IAGG,OAAO,CAAC,QAAQ,CAAC,IAAI;IAFzD,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA2C;gBAEb,IAAI,EAAE,iBAAiB;IAGtE,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;CAOlC"}

package/dist/telemetry/tasks/telemetry-retention.task.js

@@ -0,0 +1,61 @@
+"use strict";
+// =============================================================================
+// Daily telemetry retention scheduler (issue #534, epic #528)
+// =============================================================================
+//
+// ⚠ THIS TASK TOUCHES NO DATABASE BUT ITS OWN QUEUE. It enqueues one global
+// `telemetry.retention.apply` job through the shared housekeeping helper, and
+// `TelemetryRetentionHandler` runs the `ALTER DATABASE` on a worker slot.
+// Pinned by `apps/api/test/jobs/cron-enqueue-only.spec.ts`.
+//
+// Daily re-assertion, not just on save: GreptimeDB may have been recreated
+// (a fresh volume starts with no TTL), or the save-time job may have been
+// skipped because GreptimeDB was down at that moment. The statement is
+// idempotent, so running it every night costs one metadata write.
+// =============================================================================
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+var TelemetryRetentionTask_1;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.TelemetryRetentionTask = void 0;
+const common_1 = require("@nestjs/common");
+const schedule_1 = require("@nestjs/schedule");
+const telemetry_retention_handler_1 = require("../handlers/telemetry-retention.handler");
+const ports_1 = require("../ports");
+let TelemetryRetentionTask = TelemetryRetentionTask_1 = class TelemetryRetentionTask {
+    jobs;
+    logger = new common_1.Logger(TelemetryRetentionTask_1.name);
+    constructor(jobs) {
+        this.jobs = jobs;
+    }
+    async handleCron() {
+        await this.jobs.enqueueHousekeepingJob({
+            logger: this.logger,
+            type: telemetry_retention_handler_1.TELEMETRY_RETENTION_TYPE,
+            what: 'telemetry retention',
+        });
+    }
+};
+exports.TelemetryRetentionTask = TelemetryRetentionTask;
+__decorate([
+    (0, schedule_1.Cron)(schedule_1.CronExpression.EVERY_DAY_AT_4AM),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", []),
+    __metadata("design:returntype", Promise)
+], TelemetryRetentionTask.prototype, "handleCron", null);
+exports.TelemetryRetentionTask = TelemetryRetentionTask = TelemetryRetentionTask_1 = __decorate([
+    (0, common_1.Injectable)(),
+    __param(0, (0, common_1.Inject)(ports_1.TELEMETRY_JOBS)),
+    __metadata("design:paramtypes", [Object])
+], TelemetryRetentionTask);
+//# sourceMappingURL=telemetry-retention.task.js.map

package/dist/telemetry/tasks/telemetry-retention.task.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"telemetry-retention.task.js","sourceRoot":"","sources":["../../../src/telemetry/tasks/telemetry-retention.task.ts"],"names":[],"mappings":";AAAA,gFAAgF;AAChF,8DAA8D;AAC9D,gFAAgF;AAChF,EAAE;AACF,4EAA4E;AAC5E,8EAA8E;AAC9E,0EAA0E;AAC1E,4DAA4D;AAC5D,EAAE;AACF,2EAA2E;AAC3E,0EAA0E;AAC1E,uEAAuE;AACvE,kEAAkE;AAClE,gFAAgF;;;;;;;;;;;;;;;;AAEhF,2CAA4D;AAC5D,+CAAwD;AAExD,yFAAmF;AACnF,oCAAkE;AAG3D,IAAM,sBAAsB,8BAA5B,MAAM,sBAAsB;IAGoB;IAFpC,MAAM,GAAG,IAAI,eAAM,CAAC,wBAAsB,CAAC,IAAI,CAAC,CAAC;IAElE,YAAqD,IAAuB;QAAvB,SAAI,GAAJ,IAAI,CAAmB;IAAG,CAAC;IAG1E,AAAN,KAAK,CAAC,UAAU;QACd,MAAM,IAAI,CAAC,IAAI,CAAC,sBAAsB,CAAC;YACrC,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,IAAI,EAAE,sDAAwB;YAC9B,IAAI,EAAE,qBAAqB;SAC5B,CAAC,CAAC;IACL,CAAC;CACF,CAAA;AAbY,wDAAsB;AAM3B;IADL,IAAA,eAAI,EAAC,yBAAc,CAAC,gBAAgB,CAAC;;;;wDAOrC;iCAZU,sBAAsB;IADlC,IAAA,mBAAU,GAAE;IAIE,WAAA,IAAA,eAAM,EAAC,sBAAc,CAAC,CAAA;;GAHxB,sBAAsB,CAalC"}

package/dist/telemetry/telemetry-admin.controller.d.ts

@@ -0,0 +1,14 @@
+import { Type } from '@nestjs/common';
+import type { ResolvedTelemetryModuleOptions } from './telemetry.options';
+/**
+ * Creates the `TelemetryAdminController` class for one set of module options: its routes
+ * guarded by the app's access decorators (`options.host.access`), the caller
+ * resolved by `options.actorId`. `TelemetryModule.forRoot()` calls it.
+ *
+ * @param options - the resolved module options.
+ * @returns the controller class.
+ *
+ * @stability experimental
+ */
+export declare function createTelemetryAdminController(options: ResolvedTelemetryModuleOptions): Type<unknown>;
+//# sourceMappingURL=telemetry-admin.controller.d.ts.map

package/dist/telemetry/telemetry-admin.controller.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"telemetry-admin.controller.d.ts","sourceRoot":"","sources":["../../src/telemetry/telemetry-admin.controller.ts"],"names":[],"mappings":"AAAA,OAAO,EAA+C,IAAI,EAAE,MAAM,gBAAgB,CAAC;AAQnF,OAAO,KAAK,EAAE,8BAA8B,EAAE,MAAM,qBAAqB,CAAC;AAiB1E;;;;;;;;;GASG;AACH,wBAAgB,8BAA8B,CAAC,OAAO,EAAE,8BAA8B,GAAG,IAAI,CAAC,OAAO,CAAC,CAwFrG"}

package/dist/telemetry/telemetry-admin.controller.js

@@ -0,0 +1,148 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createTelemetryAdminController = createTelemetryAdminController;
+const common_1 = require("@nestjs/common");
+const swagger_1 = require("@nestjs/swagger");
+const index_1 = require("../core/index");
+const telemetry_config_dto_1 = require("./dto/telemetry-config.dto");
+const telemetry_status_dto_1 = require("./dto/telemetry-status.dto");
+const telemetry_settings_service_1 = require("./telemetry-settings.service");
+const telemetry_status_service_1 = require("./telemetry-status.service");
+const telemetry_permissions_1 = require("./telemetry.permissions");
+// =============================================================================
+// TelemetryAdminController (issue #534, epic #528)
+// =============================================================================
+//
+//   GET  /api/admin/telemetry/config   telemetry:read
+//   PUT  /api/admin/telemetry/config   telemetry:write   (If-Match optional → 409)
+//   GET  /api/admin/telemetry/status   telemetry:read
+//
+// The admin settings card for telemetry declares `telemetry:read` — the exact
+// string enforced here (CLAUDE.md, Settings UI Pattern rule 3). Running SQL
+// against the store is `telemetry:query` and lives in the explorer (#535),
+// not here.
+// =============================================================================
+/**
+ * Creates the `TelemetryAdminController` class for one set of module options: its routes
+ * guarded by the app's access decorators (`options.host.access`), the caller
+ * resolved by `options.actorId`. `TelemetryModule.forRoot()` calls it.
+ *
+ * @param options - the resolved module options.
+ * @returns the controller class.
+ *
+ * @stability experimental
+ */
+function createTelemetryAdminController(options) {
+    const access = options.host.access;
+    const ActorId = options.actorIdParam;
+    let TelemetryAdminController = class TelemetryAdminController {
+        settings;
+        status;
+        constructor(settings, status) {
+            this.settings = settings;
+            this.status = status;
+        }
+        async getConfig() {
+            return this.settings.describeForAdmin();
+        }
+        async replaceConfig(dto, userId, ifMatch) {
+            // An unparseable `If-Match` is treated as absent, exactly as the AI and
+            // storage admin controllers do.
+            const parsed = ifMatch !== undefined ? Number.parseInt(ifMatch, 10) : NaN;
+            const expectedVersion = Number.isInteger(parsed) ? parsed : undefined;
+            return this.settings.replace(dto, userId, expectedVersion);
+        }
+        async getStatus() {
+            return this.status.getStatus();
+        }
+    };
+    __decorate([
+        (0, common_1.Get)('config'),
+        (access.requirePermissions([telemetry_permissions_1.TELEMETRY_PERMISSIONS.READ])),
+        (0, swagger_1.ApiOperation)({
+            summary: 'Get the telemetry configuration (Admin only)',
+            description: 'The `telemetry` settings namespace — whether telemetry is exported, its retention, the ' +
+                'bounds an ad-hoc query is held to, and the telemetry assistant — plus `available` ' +
+                '(whether this deployment has a telemetry store at all), `retentionApplicable` (whether ' +
+                'the store\'s admin credential is configured, which applying retention needs), ' +
+                '`instanceIdDefault`/`instanceIdEffective` (what a null `instanceId` resolves to, and the ' +
+                '`app.instance.id` label currently stamped on exported telemetry) and the settings row ' +
+                '`version` to send back as `If-Match`.',
+        }),
+        (0, swagger_1.ApiResponse)({ status: 200, description: 'The telemetry configuration', type: telemetry_config_dto_1.TelemetryConfigResponseDto }),
+        __metadata("design:type", Function),
+        __metadata("design:paramtypes", []),
+        __metadata("design:returntype", Promise)
+    ], TelemetryAdminController.prototype, "getConfig", null);
+    __decorate([
+        (0, common_1.Put)('config'),
+        (access.requirePermissions([telemetry_permissions_1.TELEMETRY_PERMISSIONS.WRITE])),
+        (0, swagger_1.ApiOperation)({
+            summary: 'Replace the telemetry configuration (Admin only)',
+            description: 'Full replace of the `telemetry` namespace; `assistant.provider`/`assistant.modelId` sent ' +
+                'as null clear a stored value. `instanceId` is optional: omitted keeps the stored value, ' +
+                'null returns to the application-slug default, and a value (1-63 characters of `a-z`, ' +
+                '`0-9`, `.`, `_`, `-`, starting with a letter or digit) becomes the `app.instance.id` ' +
+                'resource attribute on every exported span, log record and metric. Export starts or ' +
+                'stops, and a new instance id applies, immediately on this instance and within five ' +
+                'seconds on every other one — no restart. Telemetry is only exported while ' +
+                '`enabled` is true AND a telemetry store is configured.\n\n' +
+                'Every save also queues a `telemetry.retention.apply` job, which sets the telemetry ' +
+                'store\'s database TTL to `retentionDays` (the same job re-asserts it nightly).',
+        }),
+        (0, swagger_1.ApiHeader)({
+            name: 'If-Match',
+            description: 'Expected `version` for optimistic concurrency (`0` asserts nothing is stored yet). ' +
+                'Omit to overwrite unconditionally. This is the version of the whole system-settings ' +
+                'row, so a concurrent save of an unrelated setting can cause a conflict — reload and ' +
+                're-apply.',
+            required: false,
+        }),
+        (0, swagger_1.ApiResponse)({ status: 200, description: 'The updated telemetry configuration', type: telemetry_config_dto_1.TelemetryConfigResponseDto }),
+        (0, swagger_1.ApiResponse)({ status: 400, description: 'Validation error', type: index_1.ErrorDto }),
+        (0, swagger_1.ApiResponse)({ status: 409, description: 'Version conflict', type: index_1.ErrorDto }),
+        __param(0, (0, common_1.Body)()),
+        __param(1, ActorId()),
+        __param(2, (0, common_1.Headers)('if-match')),
+        __metadata("design:type", Function),
+        __metadata("design:paramtypes", [telemetry_config_dto_1.UpdateTelemetryConfigDto, String, String]),
+        __metadata("design:returntype", Promise)
+    ], TelemetryAdminController.prototype, "replaceConfig", null);
+    __decorate([
+        (0, common_1.Get)('status'),
+        (access.requirePermissions([telemetry_permissions_1.TELEMETRY_PERMISSIONS.READ])),
+        (0, swagger_1.ApiOperation)({
+            summary: 'Get the telemetry store status (Admin only)',
+            description: 'Whether the telemetry store (GreptimeDB) is configured and reachable, its version, the ' +
+                'retention TTL currently in force, and its tables with row estimates. **Always 200**: an ' +
+                'unconfigured or unreachable store is reported in `configured`, `reachable` and `error`, ' +
+                'not as an error status.',
+        }),
+        (0, swagger_1.ApiResponse)({ status: 200, description: 'The telemetry store status', type: telemetry_status_dto_1.TelemetryStatusDto }),
+        __metadata("design:type", Function),
+        __metadata("design:paramtypes", []),
+        __metadata("design:returntype", Promise)
+    ], TelemetryAdminController.prototype, "getStatus", null);
+    TelemetryAdminController = __decorate([
+        (0, swagger_1.ApiTags)('Telemetry'),
+        (0, common_1.Controller)('admin/telemetry'),
+        __param(0, (0, common_1.Inject)(telemetry_settings_service_1.TelemetrySettingsService)),
+        __param(1, (0, common_1.Inject)(telemetry_status_service_1.TelemetryStatusService)),
+        __metadata("design:paramtypes", [telemetry_settings_service_1.TelemetrySettingsService,
+            telemetry_status_service_1.TelemetryStatusService])
+    ], TelemetryAdminController);
+    return TelemetryAdminController;
+}
+//# sourceMappingURL=telemetry-admin.controller.js.map

package/dist/telemetry/telemetry-admin.controller.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"telemetry-admin.controller.js","sourceRoot":"","sources":["../../src/telemetry/telemetry-admin.controller.ts"],"names":[],"mappings":";;;;;;;;;;;;;;AAmCA,wEAwFC;AA3HD,2CAAmF;AACnF,6CAAgF;AAEhF,yCAAyC;AACzC,qEAAkG;AAClG,qEAAgE;AAChE,6EAAwE;AACxE,yEAAoE;AAEpE,mEAAgE;AAEhE,gFAAgF;AAChF,mDAAmD;AACnD,gFAAgF;AAChF,EAAE;AACF,sDAAsD;AACtD,mFAAmF;AACnF,sDAAsD;AACtD,EAAE;AACF,8EAA8E;AAC9E,4EAA4E;AAC5E,2EAA2E;AAC3E,YAAY;AACZ,gFAAgF;AAEhF;;;;;;;;;GASG;AACH,SAAgB,8BAA8B,CAAC,OAAuC;IACpF,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC;IACnC,MAAM,OAAO,GAAG,OAAO,CAAC,YAAY,CAAC;IAErC,IAEM,wBAAwB,GAF9B,MAEM,wBAAwB;QAEyB;QACF;QAFnD,YACqD,QAAkC,EACpC,MAA8B;YAD5B,aAAQ,GAAR,QAAQ,CAA0B;YACpC,WAAM,GAAN,MAAM,CAAwB;QAC9E,CAAC;QAgBE,AAAN,KAAK,CAAC,SAAS;YACb,OAAO,IAAI,CAAC,QAAQ,CAAC,gBAAgB,EAAE,CAAC;QAC1C,CAAC;QA8BK,AAAN,KAAK,CAAC,aAAa,CACT,GAA6B,EAC1B,MAAc,EACJ,OAAgB;YAErC,wEAAwE;YACxE,gCAAgC;YAChC,MAAM,MAAM,GAAG,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;YAC1E,MAAM,eAAe,GAAG,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;YAEtE,OAAO,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,eAAe,CAAC,CAAC;QAC7D,CAAC;QAaK,AAAN,KAAK,CAAC,SAAS;YACb,OAAO,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;QACjC,CAAC;KACF,CAAA;IA3DO;QAdL,IAAA,YAAG,EAAC,QAAQ,CAAC;QACb,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC,6CAAqB,CAAC,IAAI,CAAC,CAAC,CAAC;QACzD,IAAA,sBAAY,EAAC;YACZ,OAAO,EAAE,8CAA8C;YACvD,WAAW,EACT,yFAAyF;gBACzF,oFAAoF;gBACpF,yFAAyF;gBACzF,gFAAgF;gBAChF,2FAA2F;gBAC3F,wFAAwF;gBACxF,uCAAuC;SAC1C,CAAC;QACD,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,6BAA6B,EAAE,IAAI,EAAE,iDAA0B,EAAE,CAAC;;;;6DAG1G;IA8BK;QA5BL,IAAA,YAAG,EAAC,QAAQ,CAAC;QACb,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC,6CAAqB,CAAC,KAAK,CAAC,CAAC,CAAC;QAC1D,IAAA,sBAAY,EAAC;YACZ,OAAO,EAAE,kDAAkD;YAC3D,WAAW,EACT,2FAA2F;gBAC3F,0FAA0F;gBAC1F,uFAAuF;gBACvF,uFAAuF;gBACvF,qFAAqF;gBACrF,qFAAqF;gBACrF,4EAA4E;gBAC5E,4DAA4D;gBAC5D,qFAAqF;gBACrF,gFAAgF;SACnF,CAAC;QACD,IAAA,mBAAS,EAAC;YACT,IAAI,EAAE,UAAU;YAChB,WAAW,EACT,qFAAqF;gBACrF,sFAAsF;gBACtF,sFAAsF;gBACtF,WAAW;YACb,QAAQ,EAAE,KAAK;SAChB,CAAC;QACD,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,qCAAqC,EAAE,IAAI,EAAE,iDAA0B,EAAE,CAAC;QAClH,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,kBAAkB,EAAE,IAAI,EAAE,gBAAQ,EAAE,CAAC;QAC7E,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,kBAAkB,EAAE,IAAI,EAAE,gBAAQ,EAAE,CAAC;QAE3E,WAAA,IAAA,aAAI,GAAE,CAAA;QACN,WAAA,OAAO,EAAE,CAAA;QACT,WAAA,IAAA,gBAAO,EAAC,UAAU,CAAC,CAAA;;yCAFP,+CAAwB;;iEAUtC;IAaK;QAXL,IAAA,YAAG,EAAC,QAAQ,CAAC;QACb,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC,6CAAqB,CAAC,IAAI,CAAC,CAAC,CAAC;QACzD,IAAA,sBAAY,EAAC;YACZ,OAAO,EAAE,6CAA6C;YACtD,WAAW,EACT,yFAAyF;gBACzF,0FAA0F;gBAC1F,0FAA0F;gBAC1F,yBAAyB;SAC5B,CAAC;QACD,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,4BAA4B,EAAE,IAAI,EAAE,yCAAkB,EAAE,CAAC;;;;6DAGjG;IA9EG,wBAAwB;QAF7B,IAAA,iBAAO,EAAC,WAAW,CAAC;QACpB,IAAA,mBAAU,EAAC,iBAAiB,CAAC;QAGzB,WAAA,IAAA,eAAM,EAAC,qDAAwB,CAAC,CAAA;QAChC,WAAA,IAAA,eAAM,EAAC,iDAAsB,CAAC,CAAA;yCAD8B,qDAAwB;YAC5B,iDAAsB;OAH7E,wBAAwB,CA+E7B;IAED,OAAO,wBAAwB,CAAC;AAClC,CAAC"}

package/dist/telemetry/telemetry-config.controller.d.ts

@@ -0,0 +1,14 @@
+import { Type } from '@nestjs/common';
+import type { ResolvedTelemetryModuleOptions } from './telemetry.options';
+/**
+ * Creates the `TelemetryConfigController` class for one set of module options: its routes
+ * guarded by the app's access decorators (`options.host.access`).
+ * `TelemetryModule.forRoot()` calls it.
+ *
+ * @param options - the resolved module options.
+ * @returns the controller class.
+ *
+ * @stability experimental
+ */
+export declare function createTelemetryConfigController(options: ResolvedTelemetryModuleOptions): Type<unknown>;
+//# sourceMappingURL=telemetry-config.controller.d.ts.map

package/dist/telemetry/telemetry-config.controller.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"telemetry-config.controller.d.ts","sourceRoot":"","sources":["../../src/telemetry/telemetry-config.controller.ts"],"names":[],"mappings":"AAAA,OAAO,EAA2B,IAAI,EAAE,MAAM,gBAAgB,CAAC;AAK/D,OAAO,KAAK,EAAE,8BAA8B,EAAE,MAAM,qBAAqB,CAAC;AAa1E;;;;;;;;;GASG;AACH,wBAAgB,+BAA+B,CAAC,OAAO,EAAE,8BAA8B,GAAG,IAAI,CAAC,OAAO,CAAC,CAyBtG"}

package/dist/telemetry/telemetry-config.controller.js

@@ -0,0 +1,73 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createTelemetryConfigController = createTelemetryConfigController;
+const common_1 = require("@nestjs/common");
+const swagger_1 = require("@nestjs/swagger");
+const telemetry_config_dto_1 = require("./dto/telemetry-config.dto");
+const telemetry_settings_service_1 = require("./telemetry-settings.service");
+// =============================================================================
+// TelemetryConfigController — GET /api/telemetry/config (issue #534)
+// =============================================================================
+//
+// `@Auth()` with NO permission, like `GET /api/ai/config`: the web app decides
+// whether to render any telemetry surface (nav entries, the settings card's
+// feature gate) from this answer, for every signed-in user. It carries three
+// booleans and nothing else — no bounds, no provenance, no store details.
+// =============================================================================
+/**
+ * Creates the `TelemetryConfigController` class for one set of module options: its routes
+ * guarded by the app's access decorators (`options.host.access`).
+ * `TelemetryModule.forRoot()` calls it.
+ *
+ * @param options - the resolved module options.
+ * @returns the controller class.
+ *
+ * @stability experimental
+ */
+function createTelemetryConfigController(options) {
+    const access = options.host.access;
+    let TelemetryConfigController = class TelemetryConfigController {
+        settings;
+        constructor(settings) {
+            this.settings = settings;
+        }
+        async getConfig() {
+            return this.settings.describePublic();
+        }
+    };
+    __decorate([
+        (0, common_1.Get)('config'),
+        (access.requireAuthenticated()),
+        (0, swagger_1.ApiOperation)({
+            summary: 'Get the telemetry capabilities of this deployment',
+            description: 'Whether a telemetry store is deployed (`available` — false when GreptimeDB is not ' +
+                'configured), whether telemetry collection is switched on (`enabled`), and whether the ' +
+                'telemetry assistant is switched on (`assistantEnabled`). Readable by any signed-in ' +
+                'user; answers may lag an administrator\'s change by up to five seconds.',
+        }),
+        (0, swagger_1.ApiResponse)({ status: 200, description: 'The telemetry capabilities', type: telemetry_config_dto_1.TelemetryPublicConfigDto }),
+        __metadata("design:type", Function),
+        __metadata("design:paramtypes", []),
+        __metadata("design:returntype", Promise)
+    ], TelemetryConfigController.prototype, "getConfig", null);
+    TelemetryConfigController = __decorate([
+        (0, swagger_1.ApiTags)('Telemetry'),
+        (0, common_1.Controller)('telemetry'),
+        __param(0, (0, common_1.Inject)(telemetry_settings_service_1.TelemetrySettingsService)),
+        __metadata("design:paramtypes", [telemetry_settings_service_1.TelemetrySettingsService])
+    ], TelemetryConfigController);
+    return TelemetryConfigController;
+}
+//# sourceMappingURL=telemetry-config.controller.js.map

package/dist/telemetry/telemetry-config.controller.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"telemetry-config.controller.js","sourceRoot":"","sources":["../../src/telemetry/telemetry-config.controller.ts"],"names":[],"mappings":";;;;;;;;;;;;;;AA4BA,0EAyBC;AArDD,2CAA+D;AAC/D,6CAAqE;AAErE,qEAAsE;AACtE,6EAAwE;AAIxE,gFAAgF;AAChF,qEAAqE;AACrE,gFAAgF;AAChF,EAAE;AACF,+EAA+E;AAC/E,4EAA4E;AAC5E,6EAA6E;AAC7E,0EAA0E;AAC1E,gFAAgF;AAEhF;;;;;;;;;GASG;AACH,SAAgB,+BAA+B,CAAC,OAAuC;IACrF,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC;IAEnC,IAEM,yBAAyB,GAF/B,MAEM,yBAAyB;QACkC;QAA/D,YAA+D,QAAkC;YAAlC,aAAQ,GAAR,QAAQ,CAA0B;QAAG,CAAC;QAa/F,AAAN,KAAK,CAAC,SAAS;YACb,OAAO,IAAI,CAAC,QAAQ,CAAC,cAAc,EAAE,CAAC;QACxC,CAAC;KACF,CAAA;IAHO;QAXL,IAAA,YAAG,EAAC,QAAQ,CAAC;QACb,CAAC,MAAM,CAAC,oBAAoB,EAAE,CAAC;QAC/B,IAAA,sBAAY,EAAC;YACZ,OAAO,EAAE,mDAAmD;YAC5D,WAAW,EACT,oFAAoF;gBACpF,wFAAwF;gBACxF,qFAAqF;gBACrF,yEAAyE;SAC5E,CAAC;QACD,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,4BAA4B,EAAE,IAAI,EAAE,+CAAwB,EAAE,CAAC;;;;8DAGvG;IAhBG,yBAAyB;QAF9B,IAAA,iBAAO,EAAC,WAAW,CAAC;QACpB,IAAA,mBAAU,EAAC,WAAW,CAAC;QAET,WAAA,IAAA,eAAM,EAAC,qDAAwB,CAAC,CAAA;yCAA4B,qDAAwB;OAD7F,yBAAyB,CAiB9B;IAED,OAAO,yBAAyB,CAAC;AACnC,CAAC"}

package/dist/telemetry/telemetry-explorer.controller.d.ts

@@ -0,0 +1,14 @@
+import { Type } from '@nestjs/common';
+import type { ResolvedTelemetryModuleOptions } from './telemetry.options';
+/**
+ * Creates the `TelemetryExplorerController` class for one set of module options: its routes
+ * guarded by the app's access decorators (`options.host.access`), the caller
+ * resolved by `options.actorId`. `TelemetryModule.forRoot()` calls it.
+ *
+ * @param options - the resolved module options.
+ * @returns the controller class.
+ *
+ * @stability experimental
+ */
+export declare function createTelemetryExplorerController(options: ResolvedTelemetryModuleOptions): Type<unknown>;
+//# sourceMappingURL=telemetry-explorer.controller.d.ts.map

package/dist/telemetry/telemetry-explorer.controller.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"telemetry-explorer.controller.d.ts","sourceRoot":"","sources":["../../src/telemetry/telemetry-explorer.controller.ts"],"names":[],"mappings":"AAAA,OAAO,EAAkE,IAAI,EAAE,MAAM,gBAAgB,CAAC;AActG,OAAO,KAAK,EAAE,8BAA8B,EAAE,MAAM,qBAAqB,CAAC;AA6B1E;;;;;;;;;GASG;AACH,wBAAgB,iCAAiC,CAAC,OAAO,EAAE,8BAA8B,GAAG,IAAI,CAAC,OAAO,CAAC,CAyHxG"}