@secondlayer/shared 13.7.1 → 13.9.0

package/dist/src/insights/index.d.ts

@@ -122,6 +122,8 @@ declare const POLLING_MIN_DURATION_MS = 36e5;
 declare const POLLING_MIN_REQUESTS = 5;
 declare const POLLING_LOOKBACK_MS: number;
 declare const POLLING_MAX_STDDEV_RATIO = .2;
+/** A request this soon after the previous one is a cursor-follow page of the same poll. */
+declare const POLLING_FOLLOW_GAP_MS = 1e4;
 declare const POLLING_MIN_EMPTY_RATIO = .8;
 declare const SERVER_ERRORS_MIN_5XX = 3;
 declare const BACKFILL_DAY_SHARE = .25;
@@ -131,6 +133,9 @@ declare const BACKFILL_MIN_DAY_ROWS = 1e5;
 declare const CREDITS_RUNWAY_WARN_DAYS = 7;
 /** An account key idle this many days (or unused since creation) is flagged. */
 declare const KEY_UNUSED_DAYS = 30;
+/** A revoked key called within this long is still in use; older calls only
+*  count toward the 24h evidence, so the insight clears once calls stop. */
+declare const REVOKED_KEY_ACTIVE_MS = 36e5;
 /** A resolved insight stays visible as "recovered" for this long. */
 declare const RECOVERED_VISIBLE_MS: number;
 /** Consecutive clean evaluations before an open insight resolves. */
@@ -474,6 +479,9 @@ interface AccountsTable {
 	email: string | null;
 	/** True for anonymous self-serve accounts until claimed via magic link. */
 	ghost: Generated<boolean>;
+	/** First-party service account: usage priced at $0, never gated on
+	*  credits. Set by ops only. */
+	internal: Generated<boolean>;
 	/** Stacks principal owning a wallet-ghost account. */
 	wallet_principal: string | null;
 	display_name: string | null;
@@ -1364,6 +1372,8 @@ interface ApiFailedRequestsTable {
 	message: Generated<string>;
 	query: Record<string, unknown>;
 	origin: string | null;
+	/** Revoked account key the request presented (`KEY_REVOKED` only). */
+	api_key_id: string | null;
 	created_at: Generated<Date>;
 }
 /**
@@ -1448,7 +1458,8 @@ declare function listOpenResources(db: Kysely<Database>, scope: InsightScope): P
 }[]>;
 /**
 * Open rows plus rows resolved within `RECOVERED_VISIBLE_MS`, minus dismissed
-* and muted ones. Resolved rows come back as `recovered`. Ranked.
+* and muted ones. Resolved rows come back as `recovered`. One row per
+* (resource, rule): the open incident, else the latest recovered one. Ranked.
 */
 declare function listInsights(db: Kysely<Database>, scope: InsightScope, now?: Date, filter?: {
 	kind?: string
@@ -1570,4 +1581,4 @@ interface TenantEvaluateDeps extends Omit<LabelDeps, "now"> {
 * exist resolve through the normal two-pass clear.
 */
 declare function evaluateTenantInsights(db: Kysely3<Database>, deps?: TenantEvaluateDeps): Promise<void>;
-export { BACKFILL_DAY_SHARE, BACKFILL_FULL_PAGE_RATIO, BACKFILL_MIN_DAY_ROWS, CLEAR_STREAK_TO_RESOLVE, CREDITS_RUNWAY_WARN_DAYS, DEAD_LETTER_DELETE_AGE_DAYS, DEAD_LETTER_WARN_AGE_DAYS, DOWN_MIN_CONSECUTIVE, DUPLICATE_READS_LOOKBACK_MS, DUPLICATE_READS_MIN_PAGES, DUPLICATE_READS_WINDOW_MS, DetectedInsight, EvaluatedKey, HANDLER_ERRORS_MIN_24H, InsightRule, InsightScope, KEY_UNUSED_DAYS, LAG_MIN_SAMPLES, LAG_THRESHOLD_MS, LAG_WINDOW, LOGIN_WALL_MIN_CONSECUTIVE, LOGIN_WALL_MIN_PRIOR, LOGIN_WALL_PRIOR_JSON_RATIO, PAGE_CAP_ROWS, POLLING_LOOKBACK_MS, POLLING_MAX_STDDEV_RATIO, POLLING_MIN_DURATION_MS, POLLING_MIN_EMPTY_RATIO, POLLING_MIN_REQUESTS, RATE_LIMITED_MIN_ATTEMPTS, RATE_LIMITED_MIN_RATIO, RECOVERED_VISIBLE_MS, REJECTS_MIN_CONSECUTIVE, SERVER_ERRORS_MIN_5XX, SLOWING_DAYS, SLOWING_MIN_R2, SLOWING_MIN_RISING_DAYS, SLOW_MIN_SAMPLES, SLOW_TIMEOUT_RATIO, SLOW_WINDOW, SUBGRAPH_LAG_BLOCKS, SUBGRAPH_LAG_LOSING_BLOCKS, SUBGRAPH_LAG_SNAPSHOTS, TEST_ENDPOINT_MIN_AGE_DAYS, TLS_WARN_DAYS, TenantEvaluateDeps, dismissInsight, evaluateTenantInsights, handoffPrompt, hostOf, listInsights, listOpenResources, maybeLabel, muteRule, plainSnippet, plural, purgeResolved, rankInsights, recordEvaluation, runRules, unmuteRule, utcDateTime, utcDay, utcTime };
+export { BACKFILL_DAY_SHARE, BACKFILL_FULL_PAGE_RATIO, BACKFILL_MIN_DAY_ROWS, CLEAR_STREAK_TO_RESOLVE, CREDITS_RUNWAY_WARN_DAYS, DEAD_LETTER_DELETE_AGE_DAYS, DEAD_LETTER_WARN_AGE_DAYS, DOWN_MIN_CONSECUTIVE, DUPLICATE_READS_LOOKBACK_MS, DUPLICATE_READS_MIN_PAGES, DUPLICATE_READS_WINDOW_MS, DetectedInsight, EvaluatedKey, HANDLER_ERRORS_MIN_24H, InsightRule, InsightScope, KEY_UNUSED_DAYS, LAG_MIN_SAMPLES, LAG_THRESHOLD_MS, LAG_WINDOW, LOGIN_WALL_MIN_CONSECUTIVE, LOGIN_WALL_MIN_PRIOR, LOGIN_WALL_PRIOR_JSON_RATIO, PAGE_CAP_ROWS, POLLING_FOLLOW_GAP_MS, POLLING_LOOKBACK_MS, POLLING_MAX_STDDEV_RATIO, POLLING_MIN_DURATION_MS, POLLING_MIN_EMPTY_RATIO, POLLING_MIN_REQUESTS, RATE_LIMITED_MIN_ATTEMPTS, RATE_LIMITED_MIN_RATIO, RECOVERED_VISIBLE_MS, REJECTS_MIN_CONSECUTIVE, REVOKED_KEY_ACTIVE_MS, SERVER_ERRORS_MIN_5XX, SLOWING_DAYS, SLOWING_MIN_R2, SLOWING_MIN_RISING_DAYS, SLOW_MIN_SAMPLES, SLOW_TIMEOUT_RATIO, SLOW_WINDOW, SUBGRAPH_LAG_BLOCKS, SUBGRAPH_LAG_LOSING_BLOCKS, SUBGRAPH_LAG_SNAPSHOTS, TEST_ENDPOINT_MIN_AGE_DAYS, TLS_WARN_DAYS, TenantEvaluateDeps, dismissInsight, evaluateTenantInsights, handoffPrompt, hostOf, listInsights, listOpenResources, maybeLabel, muteRule, plainSnippet, plural, purgeResolved, rankInsights, recordEvaluation, runRules, unmuteRule, utcDateTime, utcDay, utcTime };

package/dist/src/insights/index.js

@@ -122,6 +122,7 @@ var POLLING_MIN_DURATION_MS = 3600000;
 var POLLING_MIN_REQUESTS = 5;
 var POLLING_LOOKBACK_MS = 6 * 3600000;
 var POLLING_MAX_STDDEV_RATIO = 0.2;
+var POLLING_FOLLOW_GAP_MS = 1e4;
 var POLLING_MIN_EMPTY_RATIO = 0.8;
 var SERVER_ERRORS_MIN_5XX = 3;
 var BACKFILL_DAY_SHARE = 0.25;
@@ -129,6 +130,7 @@ var BACKFILL_FULL_PAGE_RATIO = 0.9;
 var BACKFILL_MIN_DAY_ROWS = 1e5;
 var CREDITS_RUNWAY_WARN_DAYS = 7;
 var KEY_UNUSED_DAYS = 30;
+var REVOKED_KEY_ACTIVE_MS = 3600000;
 var RECOVERED_VISIBLE_MS = 24 * 3600000;
 var CLEAR_STREAK_TO_RESOLVE = 2;
 // src/insights/prompt.ts
@@ -275,12 +277,16 @@ async function listInsights(db, scope, now = new Date, filter = {}) {
   const since = new Date(now.getTime() - RECOVERED_VISIBLE_MS);
   const { rows } = await sql2`
 		SELECT i.id, i.rule, i.severity, i.impact, i.payload, i.first_seen_at, i.resolved_at
-		FROM insights i
-		WHERE ${scopeWhere(scope, sql2.ref("i.account_id"))}
-			AND i.dismissed_at IS NULL
-			AND (i.resolved_at IS NULL OR i.resolved_at > ${since})
-			${filter.kind ? sql2`AND i.resource_kind = ${filter.kind}` : sql2``}
-			${filter.id ? sql2`AND i.resource_id = ${filter.id}` : sql2``}
+		FROM (
+			SELECT DISTINCT ON (resource_kind, resource_id, rule) *
+			FROM insights
+			WHERE ${scopeWhere(scope)}
+				AND (resolved_at IS NULL OR resolved_at > ${since})
+				${filter.kind ? sql2`AND resource_kind = ${filter.kind}` : sql2``}
+				${filter.id ? sql2`AND resource_id = ${filter.id}` : sql2``}
+			ORDER BY resource_kind, resource_id, rule, resolved_at DESC NULLS FIRST
+		) i
+		WHERE i.dismissed_at IS NULL
 			AND NOT EXISTS (
 				SELECT 1 FROM insight_mutes m
 				WHERE ${scopeWhere(scope, sql2.ref("m.account_id"))}
@@ -2241,6 +2247,7 @@ export {
   LOGIN_WALL_MIN_PRIOR,
   LOGIN_WALL_PRIOR_JSON_RATIO,
   PAGE_CAP_ROWS,
+  POLLING_FOLLOW_GAP_MS,
   POLLING_LOOKBACK_MS,
   POLLING_MAX_STDDEV_RATIO,
   POLLING_MIN_DURATION_MS,
@@ -2250,6 +2257,7 @@ export {
   RATE_LIMITED_MIN_RATIO,
   RECOVERED_VISIBLE_MS,
   REJECTS_MIN_CONSECUTIVE,
+  REVOKED_KEY_ACTIVE_MS,
   SERVER_ERRORS_MIN_5XX,
   SLOWING_DAYS,
   SLOWING_MIN_R2,
@@ -2282,5 +2290,5 @@ export {
   utcTime
 };
 
-//# debugId=2FC79923A60C146564756E2164756E21
+//# debugId=E9A0F04B4CC704E864756E2164756E21
 //# sourceMappingURL=index.js.map