@secondlayer/shared 13.8.0 → 13.9.0

package/dist/src/insights/thresholds.js.map

@@ -2,9 +2,9 @@
   "version": 3,
   "sources": ["../src/insights/thresholds.ts"],
   "sourcesContent": [
-    "// Detector thresholds. Named constants, not config. Tune from real data;\n// until then these stay conservative: a wrong insight costs more trust than\n// a missed one.\n//\n// This file must stay import-free. The SDK's webhook doctor imports it, and\n// the doctor reaches the browser through apps/web, so anything imported here\n// would ship to the client bundle.\n//\n// Constants computed from an expression carry an explicit `: number`: the\n// bundled `.d.ts` otherwise types them `unknown`.\n\n// ── Webhook doctor (shared with the SDK / `sl webhooks doctor`) ────────\nexport const RATE_LIMITED_MIN_ATTEMPTS = 10;\nexport const RATE_LIMITED_MIN_RATIO = 0.5;\nexport const DOWN_MIN_CONSECUTIVE = 5;\nexport const REJECTS_MIN_CONSECUTIVE = 5;\nexport const SLOW_WINDOW = 20;\nexport const SLOW_MIN_SAMPLES = 5;\nexport const SLOW_TIMEOUT_RATIO = 0.5;\nexport const LAG_WINDOW = 20;\nexport const LAG_MIN_SAMPLES = 5;\nexport const LAG_THRESHOLD_MS = 60_000;\n\n// ── Tenant rules ───────────────────────────────────────────────────────\n/** Consecutive newest 2xx HTML responses that mean a login wall. */\nexport const LOGIN_WALL_MIN_CONSECUTIVE = 20;\n/** Share of prior-week 2xx responses that must have been JSON. */\nexport const LOGIN_WALL_PRIOR_JSON_RATIO = 0.8;\n/** Prior-week successful responses needed before a baseline counts. */\nexport const LOGIN_WALL_MIN_PRIOR = 10;\nexport const SLOWING_DAYS = 14;\nexport const SLOWING_MIN_RISING_DAYS = 10;\nexport const SLOWING_MIN_R2 = 0.8;\nexport const TLS_WARN_DAYS = 14;\n/** Dead outbox rows are deleted at 90 days; warn at 83. */\nexport const DEAD_LETTER_WARN_AGE_DAYS = 83;\nexport const DEAD_LETTER_DELETE_AGE_DAYS = 90;\nexport const TEST_ENDPOINT_MIN_AGE_DAYS = 7;\nexport const HANDLER_ERRORS_MIN_24H = 10;\n/** Blocks behind tip, for 3 consecutive snapshots. */\nexport const SUBGRAPH_LAG_BLOCKS = 20;\nexport const SUBGRAPH_LAG_SNAPSHOTS = 3;\nexport const SUBGRAPH_LAG_LOSING_BLOCKS = 500;\n\n// ── Platform rules ─────────────────────────────────────────────────────\n/**\n * Index and Streams cap one page at 1000 rows\n * (`packages/api/src/index/_shared.ts` `Math.min(1000, parsed)`,\n * `packages/api/src/routes/streams.ts` `limit: Math.min(1000, limit)`).\n */\nexport const PAGE_CAP_ROWS = 1000;\nexport const DUPLICATE_READS_MIN_PAGES = 3;\nexport const DUPLICATE_READS_WINDOW_MS = 3_600_000;\n/** Only repeats that started within this long ago count as current. */\nexport const DUPLICATE_READS_LOOKBACK_MS: number = 24 * 3_600_000;\nexport const POLLING_MIN_DURATION_MS = 3_600_000;\n/** Requests needed in the window before an interval means anything. */\nexport const POLLING_MIN_REQUESTS = 5;\nexport const POLLING_LOOKBACK_MS: number = 6 * 3_600_000;\nexport const POLLING_MAX_STDDEV_RATIO = 0.2;\nexport const POLLING_MIN_EMPTY_RATIO = 0.8;\nexport const SERVER_ERRORS_MIN_5XX = 3;\nexport const BACKFILL_DAY_SHARE = 0.25;\nexport const BACKFILL_FULL_PAGE_RATIO = 0.9;\n/** A day under this many rows is never called a backfill, however full its pages. */\nexport const BACKFILL_MIN_DAY_ROWS = 100_000;\nexport const CREDITS_RUNWAY_WARN_DAYS = 7;\n/** An account key idle this many days (or unused since creation) is flagged. */\nexport const KEY_UNUSED_DAYS = 30;\n\n// ── Lifecycle ──────────────────────────────────────────────────────────\n/** A resolved insight stays visible as \"recovered\" for this long. */\nexport const RECOVERED_VISIBLE_MS: number = 24 * 3600_000;\n/** Consecutive clean evaluations before an open insight resolves. */\nexport const CLEAR_STREAK_TO_RESOLVE = 2;\n"
+    "// Detector thresholds. Named constants, not config. Tune from real data;\n// until then these stay conservative: a wrong insight costs more trust than\n// a missed one.\n//\n// This file must stay import-free. The SDK's webhook doctor imports it, and\n// the doctor reaches the browser through apps/web, so anything imported here\n// would ship to the client bundle.\n//\n// Constants computed from an expression carry an explicit `: number`: the\n// bundled `.d.ts` otherwise types them `unknown`.\n\n// ── Webhook doctor (shared with the SDK / `sl webhooks doctor`) ────────\nexport const RATE_LIMITED_MIN_ATTEMPTS = 10;\nexport const RATE_LIMITED_MIN_RATIO = 0.5;\nexport const DOWN_MIN_CONSECUTIVE = 5;\nexport const REJECTS_MIN_CONSECUTIVE = 5;\nexport const SLOW_WINDOW = 20;\nexport const SLOW_MIN_SAMPLES = 5;\nexport const SLOW_TIMEOUT_RATIO = 0.5;\nexport const LAG_WINDOW = 20;\nexport const LAG_MIN_SAMPLES = 5;\nexport const LAG_THRESHOLD_MS = 60_000;\n\n// ── Tenant rules ───────────────────────────────────────────────────────\n/** Consecutive newest 2xx HTML responses that mean a login wall. */\nexport const LOGIN_WALL_MIN_CONSECUTIVE = 20;\n/** Share of prior-week 2xx responses that must have been JSON. */\nexport const LOGIN_WALL_PRIOR_JSON_RATIO = 0.8;\n/** Prior-week successful responses needed before a baseline counts. */\nexport const LOGIN_WALL_MIN_PRIOR = 10;\nexport const SLOWING_DAYS = 14;\nexport const SLOWING_MIN_RISING_DAYS = 10;\nexport const SLOWING_MIN_R2 = 0.8;\nexport const TLS_WARN_DAYS = 14;\n/** Dead outbox rows are deleted at 90 days; warn at 83. */\nexport const DEAD_LETTER_WARN_AGE_DAYS = 83;\nexport const DEAD_LETTER_DELETE_AGE_DAYS = 90;\nexport const TEST_ENDPOINT_MIN_AGE_DAYS = 7;\nexport const HANDLER_ERRORS_MIN_24H = 10;\n/** Blocks behind tip, for 3 consecutive snapshots. */\nexport const SUBGRAPH_LAG_BLOCKS = 20;\nexport const SUBGRAPH_LAG_SNAPSHOTS = 3;\nexport const SUBGRAPH_LAG_LOSING_BLOCKS = 500;\n\n// ── Platform rules ─────────────────────────────────────────────────────\n/**\n * Index and Streams cap one page at 1000 rows\n * (`packages/api/src/index/_shared.ts` `Math.min(1000, parsed)`,\n * `packages/api/src/routes/streams.ts` `limit: Math.min(1000, limit)`).\n */\nexport const PAGE_CAP_ROWS = 1000;\nexport const DUPLICATE_READS_MIN_PAGES = 3;\nexport const DUPLICATE_READS_WINDOW_MS = 3_600_000;\n/** Only repeats that started within this long ago count as current. */\nexport const DUPLICATE_READS_LOOKBACK_MS: number = 24 * 3_600_000;\nexport const POLLING_MIN_DURATION_MS = 3_600_000;\n/** Requests needed in the window before an interval means anything. */\nexport const POLLING_MIN_REQUESTS = 5;\nexport const POLLING_LOOKBACK_MS: number = 6 * 3_600_000;\nexport const POLLING_MAX_STDDEV_RATIO = 0.2;\n/** A request this soon after the previous one is a cursor-follow page of the same poll. */\nexport const POLLING_FOLLOW_GAP_MS = 10_000;\nexport const POLLING_MIN_EMPTY_RATIO = 0.8;\nexport const SERVER_ERRORS_MIN_5XX = 3;\nexport const BACKFILL_DAY_SHARE = 0.25;\nexport const BACKFILL_FULL_PAGE_RATIO = 0.9;\n/** A day under this many rows is never called a backfill, however full its pages. */\nexport const BACKFILL_MIN_DAY_ROWS = 100_000;\nexport const CREDITS_RUNWAY_WARN_DAYS = 7;\n/** An account key idle this many days (or unused since creation) is flagged. */\nexport const KEY_UNUSED_DAYS = 30;\n/** A revoked key called within this long is still in use; older calls only\n *  count toward the 24h evidence, so the insight clears once calls stop. */\nexport const REVOKED_KEY_ACTIVE_MS = 3_600_000;\n\n// ── Lifecycle ──────────────────────────────────────────────────────────\n/** A resolved insight stays visible as \"recovered\" for this long. */\nexport const RECOVERED_VISIBLE_MS: number = 24 * 3600_000;\n/** Consecutive clean evaluations before an open insight resolves. */\nexport const CLEAR_STREAK_TO_RESOLVE = 2;\n"
   ],
-  "mappings": ";AAYO,IAAM,4BAA4B;AAClC,IAAM,yBAAyB;AAC/B,IAAM,uBAAuB;AAC7B,IAAM,0BAA0B;AAChC,IAAM,cAAc;AACpB,IAAM,mBAAmB;AACzB,IAAM,qBAAqB;AAC3B,IAAM,aAAa;AACnB,IAAM,kBAAkB;AACxB,IAAM,mBAAmB;AAIzB,IAAM,6BAA6B;AAEnC,IAAM,8BAA8B;AAEpC,IAAM,uBAAuB;AAC7B,IAAM,eAAe;AACrB,IAAM,0BAA0B;AAChC,IAAM,iBAAiB;AACvB,IAAM,gBAAgB;AAEtB,IAAM,4BAA4B;AAClC,IAAM,8BAA8B;AACpC,IAAM,6BAA6B;AACnC,IAAM,yBAAyB;AAE/B,IAAM,sBAAsB;AAC5B,IAAM,yBAAyB;AAC/B,IAAM,6BAA6B;AAQnC,IAAM,gBAAgB;AACtB,IAAM,4BAA4B;AAClC,IAAM,4BAA4B;AAElC,IAAM,8BAAsC,KAAK;AACjD,IAAM,0BAA0B;AAEhC,IAAM,uBAAuB;AAC7B,IAAM,sBAA8B,IAAI;AACxC,IAAM,2BAA2B;AACjC,IAAM,0BAA0B;AAChC,IAAM,wBAAwB;AAC9B,IAAM,qBAAqB;AAC3B,IAAM,2BAA2B;AAEjC,IAAM,wBAAwB;AAC9B,IAAM,2BAA2B;AAEjC,IAAM,kBAAkB;AAIxB,IAAM,uBAA+B,KAAK;AAE1C,IAAM,0BAA0B;",
-  "debugId": "DFFD28AC82D2ED9A64756E2164756E21",
+  "mappings": ";AAYO,IAAM,4BAA4B;AAClC,IAAM,yBAAyB;AAC/B,IAAM,uBAAuB;AAC7B,IAAM,0BAA0B;AAChC,IAAM,cAAc;AACpB,IAAM,mBAAmB;AACzB,IAAM,qBAAqB;AAC3B,IAAM,aAAa;AACnB,IAAM,kBAAkB;AACxB,IAAM,mBAAmB;AAIzB,IAAM,6BAA6B;AAEnC,IAAM,8BAA8B;AAEpC,IAAM,uBAAuB;AAC7B,IAAM,eAAe;AACrB,IAAM,0BAA0B;AAChC,IAAM,iBAAiB;AACvB,IAAM,gBAAgB;AAEtB,IAAM,4BAA4B;AAClC,IAAM,8BAA8B;AACpC,IAAM,6BAA6B;AACnC,IAAM,yBAAyB;AAE/B,IAAM,sBAAsB;AAC5B,IAAM,yBAAyB;AAC/B,IAAM,6BAA6B;AAQnC,IAAM,gBAAgB;AACtB,IAAM,4BAA4B;AAClC,IAAM,4BAA4B;AAElC,IAAM,8BAAsC,KAAK;AACjD,IAAM,0BAA0B;AAEhC,IAAM,uBAAuB;AAC7B,IAAM,sBAA8B,IAAI;AACxC,IAAM,2BAA2B;AAEjC,IAAM,wBAAwB;AAC9B,IAAM,0BAA0B;AAChC,IAAM,wBAAwB;AAC9B,IAAM,qBAAqB;AAC3B,IAAM,2BAA2B;AAEjC,IAAM,wBAAwB;AAC9B,IAAM,2BAA2B;AAEjC,IAAM,kBAAkB;AAGxB,IAAM,wBAAwB;AAI9B,IAAM,uBAA+B,KAAK;AAE1C,IAAM,0BAA0B;",
+  "debugId": "C74533CBF9BC87AC64756E2164756E21",
   "names": []
 }

package/dist/src/node/local-client.d.ts

@@ -306,6 +306,9 @@ interface AccountsTable {
 	email: string | null;
 	/** True for anonymous self-serve accounts until claimed via magic link. */
 	ghost: Generated<boolean>;
+	/** First-party service account: usage priced at $0, never gated on
+	*  credits. Set by ops only. */
+	internal: Generated<boolean>;
 	/** Stacks principal owning a wallet-ghost account. */
 	wallet_principal: string | null;
 	display_name: string | null;
@@ -1196,6 +1199,8 @@ interface ApiFailedRequestsTable {
 	message: Generated<string>;
 	query: Record<string, unknown>;
 	origin: string | null;
+	/** Revoked account key the request presented (`KEY_REVOKED` only). */
+	api_key_id: string | null;
 	created_at: Generated<Date>;
 }
 /**

package/migrations/0174_internal_accounts.ts

@@ -0,0 +1,21 @@
+import { type Kysely, sql } from "kysely";
+import { onControlPlane } from "../src/db/migration-role.ts";
+
+/**
+ * First-party accounts (Sentinel's service account): usage is still written
+ * to `usage_ledger`, priced at $0, and no balance, floor or cap ever stops
+ * them. Set by ops only; no route writes it.
+ */
+export async function up(db: Kysely<unknown>): Promise<void> {
+	await onControlPlane(async () => {
+		await sql`
+			ALTER TABLE accounts ADD COLUMN IF NOT EXISTS internal boolean NOT NULL DEFAULT false
+		`.execute(db);
+	});
+}
+
+export async function down(db: Kysely<unknown>): Promise<void> {
+	await onControlPlane(async () => {
+		await sql`ALTER TABLE accounts DROP COLUMN IF EXISTS internal`.execute(db);
+	});
+}

package/migrations/0175_failed_request_key_id.ts

@@ -0,0 +1,23 @@
+import { type Kysely, sql } from "kysely";
+import { onControlPlane } from "../src/db/migration-role.ts";
+
+/**
+ * The key a failed request presented, when there was one we know: today only
+ * a revoked account key (`KEY_REVOKED`), so the account can see which revoked
+ * key is still being called. Nullable, no FK: rows live 24h.
+ */
+export async function up(db: Kysely<unknown>): Promise<void> {
+	await onControlPlane(async () => {
+		await sql`
+			ALTER TABLE api_failed_requests ADD COLUMN IF NOT EXISTS api_key_id uuid
+		`.execute(db);
+	});
+}
+
+export async function down(db: Kysely<unknown>): Promise<void> {
+	await onControlPlane(async () => {
+		await sql`ALTER TABLE api_failed_requests DROP COLUMN IF EXISTS api_key_id`.execute(
+			db,
+		);
+	});
+}

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@secondlayer/shared",
-	"version": "13.8.0",
+	"version": "13.9.0",
 	"description": "Internal building blocks shared across Secondlayer packages.",
 	"license": "MIT",
 	"repository": {