@pulsekit/core 0.0.1 → 0.0.3

package/package.json

@@ -1,22 +1,19 @@
 {
   "name": "@pulsekit/core",
-  "version": "0.0.1",
+  "version": "0.0.3",
   "main": "./dist/index.mjs",
   "types": "./dist/index.d.mts",
-  "files": [
-    "dist"
-  ],
+  "files": ["dist", "sql"],
   "exports": {
     ".": {
       "import": "./dist/index.mjs",
       "types": "./dist/index.d.mts"
     }
   },
-  "bin": {
-    "pulse-init": "./dist/cli.js"
-  },
-  "dependencies": {
-    "postgres": "^3.4.0"
+  "scripts": {
+    "build": "tsup",
+    "dev": "tsup --watch",
+    "clean": "rm -rf dist"
   },
   "devDependencies": {
     "@supabase/supabase-js": "^2.49.0",
@@ -25,10 +22,5 @@
   },
   "peerDependencies": {
     "@supabase/supabase-js": ">=2.0.0"
-  },
-  "scripts": {
-    "build": "tsup",
-    "dev": "tsup --watch",
-    "clean": "rm -rf dist"
   }
-}
+}

package/sql/001_init_pulse.sql

@@ -0,0 +1,76 @@
+create schema if not exists analytics;
+
+-- Add analytics to the schemas exposed by PostgREST
+alter role authenticator set pgrst.db_schemas = 'public, graphql_public, analytics';
+
+-- Schema-level access
+grant usage on schema analytics to anon, authenticated, service_role;
+alter default privileges in schema analytics grant all on tables to anon, authenticated, service_role;
+
+create table if not exists analytics.pulse_events (
+  id bigserial primary key,
+  site_id text not null,
+  session_id text,
+  path text not null,
+  event_type text not null,
+  meta jsonb,
+  created_at timestamptz not null default now()
+);
+
+create index if not exists idx_pulse_events_site_created_at
+  on analytics.pulse_events (site_id, created_at);
+
+create index if not exists idx_pulse_events_site_path_created_at
+  on analytics.pulse_events (site_id, path, created_at);
+
+alter table analytics.pulse_events enable row level security;                                                                                                                       
+                                                                                                                                                                                      
+-- Allow the anon key (API route) to insert events
+drop policy if exists "Allow anon insert on pulse_events" on analytics.pulse_events;
+create policy "Allow anon insert on pulse_events"
+  on analytics.pulse_events
+  for insert
+  to anon
+  with check (true);
+
+-- Only authenticated users (dashboard) can read events
+drop policy if exists "Allow authenticated select on pulse_events" on analytics.pulse_events;
+create policy "Allow authenticated select on pulse_events"
+  on analytics.pulse_events
+  for select
+  to authenticated
+  using (true);
+
+create table if not exists analytics.pulse_aggregates (
+  date date not null,
+  site_id text not null,
+  path text not null,
+  total_views integer not null default 0,
+  unique_visitors integer not null default 0,
+  primary key (date, site_id, path)
+);
+
+-- Grant table-level access (must be after table creation)
+grant all on all tables in schema analytics to anon, authenticated, service_role;
+grant all on all sequences in schema analytics to anon, authenticated, service_role;
+
+alter table analytics.pulse_aggregates enable row level security;
+
+-- Allow reading aggregates (dashboard)
+drop policy if exists "Allow authenticated select on pulse_aggregates" on analytics.pulse_aggregates;
+create policy "Allow authenticated select on pulse_aggregates"
+    on analytics.pulse_aggregates
+    for select
+    to authenticated
+    using (true);
+
+drop policy if exists "Allow anon select on pulse_aggregates" on analytics.pulse_aggregates;
+create policy "Allow anon select on pulse_aggregates"
+    on analytics.pulse_aggregates
+    for select
+    to anon
+    using (true);
+
+-- Reload PostgREST config and schema cache (must be last)
+notify pgrst, 'reload config';
+notify pgrst, 'reload schema';

package/sql/002_aggregation_function.sql

@@ -0,0 +1,25 @@
+-- Aggregation function: rolls up raw events into daily aggregates
+create or replace function analytics.pulse_refresh_aggregates(days_back integer default 7)
+returns void
+language sql
+security definer
+as $$
+  insert into analytics.pulse_aggregates (date, site_id, path, total_views, unique_visitors)
+  select
+    date_trunc('day', created_at)::date as date,
+    site_id,
+    path,
+    count(*) as total_views,
+    count(distinct session_id) as unique_visitors
+  from analytics.pulse_events
+  where created_at >= now() - (days_back || ' days')::interval
+  group by 1, 2, 3
+  on conflict (date, site_id, path) do update
+  set
+    total_views = excluded.total_views,
+    unique_visitors = excluded.unique_visitors;
+$$;
+
+-- Allow all roles to execute the aggregation function
+-- security definer ensures it runs with the owner's privileges regardless of caller
+grant execute on function analytics.pulse_refresh_aggregates(integer) to anon, authenticated, service_role;

package/sql/003_geo_and_timezone.sql

@@ -0,0 +1,77 @@
+-- Add geo columns to pulse_events
+alter table analytics.pulse_events
+  add column if not exists country text,
+  add column if not exists region text,
+  add column if not exists city text,
+  add column if not exists timezone text,
+  add column if not exists latitude double precision,
+  add column if not exists longitude double precision;
+
+-- Timezone-aware stats: queries raw events with AT TIME ZONE
+-- so the dashboard can display data bucketed by the viewer's local day.
+create or replace function analytics.pulse_stats_by_timezone(
+  p_site_id text,
+  p_timezone text default 'UTC',
+  p_days_back integer default 7
+)
+returns table (
+  date date,
+  path text,
+  total_views bigint,
+  unique_visitors bigint
+)
+language sql
+security definer
+stable
+as $$
+  select
+    date_trunc('day', created_at at time zone p_timezone)::date as date,
+    path,
+    count(*) as total_views,
+    count(distinct session_id) as unique_visitors
+  from analytics.pulse_events
+  where site_id = p_site_id
+    and created_at >= now() - make_interval(days => p_days_back + 1)
+  group by 1, 2;
+$$;
+
+grant execute on function analytics.pulse_stats_by_timezone(text, text, integer)
+  to anon, authenticated, service_role;
+
+-- Drop first so return type can change (CREATE OR REPLACE cannot alter return columns)
+drop function if exists analytics.pulse_location_stats(text, integer);
+
+-- Location stats: visitor counts grouped by country + city, with averaged coordinates
+create or replace function analytics.pulse_location_stats(
+  p_site_id text,
+  p_days_back integer default 7
+)
+returns table (
+  country text,
+  city text,
+  latitude double precision,
+  longitude double precision,
+  total_views bigint,
+  unique_visitors bigint
+)
+language sql
+security definer
+stable
+as $$
+  select
+    country,
+    city,
+    avg(latitude) as latitude,
+    avg(longitude) as longitude,
+    count(*) as total_views,
+    count(distinct session_id) as unique_visitors
+  from analytics.pulse_events
+  where site_id = p_site_id
+    and created_at >= now() - make_interval(days => p_days_back)
+    and country is not null
+  group by 1, 2
+  order by total_views desc;
+$$;
+
+grant execute on function analytics.pulse_location_stats(text, integer)
+  to anon, authenticated, service_role;

package/sql/004_web_vitals.sql

@@ -0,0 +1,56 @@
+-- 004_web_vitals.sql
+-- Partial index + RPC for Web Vitals p75 aggregation
+
+-- Partial index: only covers vitals events, stays small
+CREATE INDEX IF NOT EXISTS idx_pulse_events_vitals
+  ON analytics.pulse_events (site_id, created_at)
+  WHERE event_type = 'vitals';
+
+-- RPC: returns per-metric p75 for each page + site-wide (__overall__)
+CREATE OR REPLACE FUNCTION analytics.pulse_vitals_stats(
+  p_site_id  TEXT,
+  p_days_back INT DEFAULT 7
+)
+RETURNS TABLE (
+  path         TEXT,
+  metric       TEXT,
+  p75          DOUBLE PRECISION,
+  sample_count BIGINT
+)
+LANGUAGE sql SECURITY DEFINER STABLE
+AS $$
+  WITH vitals_raw AS (
+    SELECT
+      e.path,
+      kv.key   AS metric,
+      kv.value::double precision AS val
+    FROM analytics.pulse_events e,
+         LATERAL jsonb_each_text(e.meta) AS kv(key, value)
+    WHERE e.site_id    = p_site_id
+      AND e.event_type = 'vitals'
+      AND e.created_at >= NOW() - (p_days_back || ' days')::interval
+      AND kv.key IN ('lcp', 'inp', 'cls', 'fcp', 'ttfb')
+  )
+  -- Per-page stats
+  SELECT
+    vr.path,
+    vr.metric,
+    percentile_cont(0.75) WITHIN GROUP (ORDER BY vr.val) AS p75,
+    count(*)::bigint AS sample_count
+  FROM vitals_raw vr
+  GROUP BY vr.path, vr.metric
+
+  UNION ALL
+
+  -- Site-wide stats
+  SELECT
+    '__overall__'::text AS path,
+    vr.metric,
+    percentile_cont(0.75) WITHIN GROUP (ORDER BY vr.val) AS p75,
+    count(*)::bigint AS sample_count
+  FROM vitals_raw vr
+  GROUP BY vr.metric;
+$$;
+
+GRANT EXECUTE ON FUNCTION analytics.pulse_vitals_stats(TEXT, INT)
+  TO anon, authenticated, service_role;

package/dist/cli.js

@@ -1,47 +0,0 @@
-#!/usr/bin/env node
-"use strict";
-var __create = Object.create;
-var __defProp = Object.defineProperty;
-var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
-var __getOwnPropNames = Object.getOwnPropertyNames;
-var __getProtoOf = Object.getPrototypeOf;
-var __hasOwnProp = Object.prototype.hasOwnProperty;
-var __copyProps = (to, from, except, desc) => {
-  if (from && typeof from === "object" || typeof from === "function") {
-    for (let key of __getOwnPropNames(from))
-      if (!__hasOwnProp.call(to, key) && key !== except)
-        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
-  }
-  return to;
-};
-var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(
-  // If the importer is in node compatibility mode or this is not an ESM
-  // file that has been converted to a CommonJS file using a Babel-
-  // compatible transform (i.e. "__esModule" has not been set), then set
-  // "default" to the CommonJS "module.exports" for node compatibility.
-  isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target,
-  mod
-));
-
-// src/cli.ts
-var import_node_fs = __toESM(require("fs"));
-var import_node_path = __toESM(require("path"));
-var import_postgres = __toESM(require("postgres"));
-async function main() {
-  const url = process.env.DATABASE_URL;
-  if (!url) throw new Error("DATABASE_URL is required");
-  const sql = (0, import_postgres.default)(url, { max: 1 });
-  const sqlDir = import_node_path.default.join(__dirname, "../sql");
-  const files = import_node_fs.default.readdirSync(sqlDir).filter((f) => f.endsWith(".sql")).sort();
-  for (const file of files) {
-    const text = import_node_fs.default.readFileSync(import_node_path.default.join(sqlDir, file), "utf8");
-    await sql.unsafe(text);
-    console.log(`Applied: ${file}`);
-  }
-  await sql.end();
-  console.log("Pulse migration complete.");
-}
-main().catch((err) => {
-  console.error(err);
-  process.exit(1);
-});