@stacksjs/ts-cloud 0.7.92 → 0.7.93

package/dist/{chunk-29fwqkb7.js → chunk-y5wrqyyz.js}

@@ -92,7 +92,7 @@ import {
 import { createHash as createHash5 } from "node:crypto";
 
 // src/control-plane/migrations.ts
-var CONTROL_PLANE_SCHEMA_VERSION = 35;
+var CONTROL_PLANE_SCHEMA_VERSION = 36;
 var controlPlaneMigrations = [
   {
     version: 1,
@@ -1506,11 +1506,56 @@ var controlPlaneMigrations = [
     CREATE INDEX cleanup_plan_status ON cleanup_plans(project_id,status,expires_at);
     CREATE INDEX dr_drill_status ON disaster_recovery_drills(project_id,status,created_at DESC);
   `
+  },
+  {
+    version: 36,
+    name: "telemetry_source_rollups",
+    sql: `
+      CREATE TABLE telemetry_source_rollups (
+        project_id TEXT NOT NULL REFERENCES projects(id) ON DELETE CASCADE,
+        environment_id TEXT NOT NULL DEFAULT '',
+        resource_id TEXT NOT NULL DEFAULT '',
+        source TEXT NOT NULL,
+        first_observed_at TEXT NOT NULL,
+        latest_observed_at TEXT NOT NULL,
+        ingested_bytes INTEGER NOT NULL DEFAULT 0 CHECK (ingested_bytes >= 0),
+        record_count INTEGER NOT NULL DEFAULT 0 CHECK (record_count >= 0),
+        PRIMARY KEY(project_id, environment_id, resource_id, source)
+      ) STRICT;
+
+      INSERT INTO telemetry_source_rollups (
+        project_id, environment_id, resource_id, source,
+        first_observed_at, latest_observed_at, ingested_bytes, record_count
+      )
+      SELECT
+        project_id, COALESCE(environment_id, ''), COALESCE(resource_id, ''), source,
+        MIN(observed_at), MAX(observed_at), SUM(ingested_bytes), COUNT(*)
+      FROM telemetry_records
+      GROUP BY project_id, COALESCE(environment_id, ''), COALESCE(resource_id, ''), source;
+
+      CREATE TRIGGER telemetry_source_rollups_insert
+      AFTER INSERT ON telemetry_records
+      BEGIN
+        INSERT INTO telemetry_source_rollups (
+          project_id, environment_id, resource_id, source,
+          first_observed_at, latest_observed_at, ingested_bytes, record_count
+        )
+        VALUES (
+          NEW.project_id, COALESCE(NEW.environment_id, ''), COALESCE(NEW.resource_id, ''), NEW.source,
+          NEW.observed_at, NEW.observed_at, NEW.ingested_bytes, 1
+        )
+        ON CONFLICT(project_id, environment_id, resource_id, source) DO UPDATE SET
+          first_observed_at = MIN(first_observed_at, excluded.first_observed_at),
+          latest_observed_at = MAX(latest_observed_at, excluded.latest_observed_at),
+          ingested_bytes = ingested_bytes + excluded.ingested_bytes,
+          record_count = record_count + 1;
+      END;
+    `
   }
 ];
 // src/control-plane/store.ts
 import { createHash, randomBytes } from "node:crypto";
-import { chmodSync, existsSync, mkdirSync, statSync, writeFileSync } from "node:fs";
+import { chmodSync, existsSync, mkdirSync, statSync } from "node:fs";
 import { dirname } from "node:path";
 import { Database } from "bun:sqlite";
 
@@ -1978,6 +2023,12 @@ class ControlPlaneStore {
       } catch {}
     }
   }
+  backupTo(path) {
+    this.database.run("VACUUM INTO ?", [path]);
+    try {
+      chmodSync(path, 384);
+    } catch {}
+  }
   migrate() {
     const row = this.database.query("PRAGMA user_version").get();
     const current = Number(row?.user_version ?? 0);
@@ -1988,7 +2039,7 @@ class ControlPlaneStore {
     let backupPath;
     if (current > 0 && this.path !== ":memory:") {
       backupPath = `${this.path}.v${current}.${Date.now()}.bak`;
-      writeFileSync(backupPath, this.database.serialize(), { mode: 384 });
+      this.backupTo(backupPath);
     }
     try {
       const apply = this.database.transaction(() => {
@@ -2263,7 +2314,7 @@ class ControlPlaneStore {
     return row ? mapMembership(row) : undefined;
   }
   listMemberships(organizationId, options = {}) {
-    const revoked = options.includeRevoked ? "" : "AND status = 'active'";
+    const revoked = options.includeRevoked ? "" : `AND status = 'active'`;
     return this.database.query(`SELECT * FROM organization_memberships WHERE organization_id = ? ${revoked} ORDER BY created_at, id`).all(organizationId).map(mapMembership);
   }
   updateMembership(input) {
@@ -2314,7 +2365,7 @@ class ControlPlaneStore {
     return membership;
   }
   assertAnotherOwner(current) {
-    const owners = Number(this.database.query("SELECT COUNT(*) AS count FROM organization_memberships WHERE organization_id = ? AND status = ? AND role_template = 'owner'").get(current.organizationId, "active")?.count ?? 0);
+    const owners = Number(this.database.query(`SELECT COUNT(*) AS count FROM organization_memberships WHERE organization_id = ? AND status = ? AND role_template = 'owner'`).get(current.organizationId, "active")?.count ?? 0);
     if (owners <= 1)
       throw new Error("Cannot remove or demote the last organization owner");
   }
@@ -2873,7 +2924,7 @@ class ControlPlaneStore {
     if (this.path === ":memory:")
       throw new Error("Cannot create a filesystem backup for an in-memory control plane");
     const backupPath = `${this.path}.${Date.now()}.bak`;
-    writeFileSync(backupPath, this.database.serialize(), { mode: 384 });
+    this.backupTo(backupPath);
     this.setSetting("storage.last_backup", { path: backupPath, createdAt: this.now(), reason });
     return backupPath;
   }
@@ -7990,7 +8041,7 @@ function estimateExistingStaticFullStackMonthlyCost(options = {}) {
 // src/deploy/container-image.ts
 import { execFileSync } from "node:child_process";
 import { createHash as createHash8 } from "node:crypto";
-import { existsSync as existsSync3, mkdirSync as mkdirSync2, mkdtempSync, readdirSync, readFileSync, rmSync, statSync as statSync2, writeFileSync as writeFileSync2 } from "node:fs";
+import { existsSync as existsSync3, mkdirSync as mkdirSync2, mkdtempSync, readdirSync, readFileSync, rmSync, statSync as statSync2, writeFileSync } from "node:fs";
 import { tmpdir } from "node:os";
 import { basename as basename2, join as join3, relative, resolve as resolve2 } from "node:path";
 var IGNORED_DIRECTORIES = new Set([".git", "node_modules", "dist", "coverage"]);
@@ -8093,7 +8144,7 @@ async function buildAndPushContainerImage(options, injected) {
     const registry = auth.proxyEndpoint.replace(/^https?:\/\//, "");
     const dockerConfig = join3(temporaryDirectory, "docker");
     mkdirSync2(dockerConfig, { recursive: true });
-    writeFileSync2(join3(dockerConfig, "config.json"), JSON.stringify({ auths: { [registry]: { auth: auth.authorizationToken } } }), { mode: 384 });
+    writeFileSync(join3(dockerConfig, "config.json"), JSON.stringify({ auths: { [registry]: { auth: auth.authorizationToken } } }), { mode: 384 });
     dependencies2.run("docker", ["push", imageUri], { env: { ...process.env, DOCKER_CONFIG: dockerConfig } });
   } finally {
     rmSync(temporaryDirectory, { recursive: true, force: true });
@@ -10895,9 +10946,11 @@ class TelemetryStore {
     if (environmentId)
       bindings.push(environmentId);
     const boundedResources = [...new Set(resourceIds ?? [])].slice(0, 100);
+    if (resourceIds && boundedResources.length === 0)
+      return [];
     const resources = resourceIds ? ` AND resource_id IN (${boundedResources.map(() => "?").join(",") || "''"})` : "";
     bindings.push(...boundedResources);
-    const rows = this.controlPlane.database.query(`SELECT source, MAX(observed_at) latest, SUM(ingested_bytes) bytes, COUNT(*) count, MIN(observed_at) first FROM telemetry_records WHERE project_id=?${environment2}${resources} GROUP BY source`).all(...bindings);
+    const rows = this.controlPlane.database.query(`SELECT source, MAX(latest_observed_at) latest, SUM(ingested_bytes) bytes, SUM(record_count) count, MIN(first_observed_at) first FROM telemetry_source_rollups WHERE project_id=?${environment2}${resources} GROUP BY source`).all(...bindings);
     const now = this.now().getTime();
     return rows.map((row) => {
       const latest = String(row.latest);
@@ -11016,8 +11069,26 @@ class TelemetryStore {
     const excess = Number(this.controlPlane.database.query(`SELECT MAX(0, COUNT(*)-?) excess FROM telemetry_records${projectId ? " WHERE project_id=?" : ""}`).get(policy.maxRecords, ...projectId ? [projectId] : [])?.excess ?? 0);
     if (excess > 0)
       this.controlPlane.database.run(`DELETE FROM telemetry_records WHERE id IN (SELECT id FROM telemetry_records${projectId ? " WHERE project_id=?" : ""} ORDER BY timestamp ASC LIMIT ?)`, projectId ? [projectId, excess] : [excess]);
+    this.rebuildStatusRollups(projectId);
     return { deleted: removed + excess, ...downsampled };
   }
+  rebuildStatusRollups(projectId) {
+    const scope = projectId ? " WHERE project_id=?" : "";
+    const bindings = projectId ? [projectId] : [];
+    const rebuild = this.controlPlane.database.transaction(() => {
+      this.controlPlane.database.run(`DELETE FROM telemetry_source_rollups${scope}`, bindings);
+      this.controlPlane.database.run(`INSERT INTO telemetry_source_rollups (
+          project_id, environment_id, resource_id, source,
+          first_observed_at, latest_observed_at, ingested_bytes, record_count
+        )
+        SELECT
+          project_id, COALESCE(environment_id, ''), COALESCE(resource_id, ''), source,
+          MIN(observed_at), MAX(observed_at), SUM(ingested_bytes), COUNT(*)
+        FROM telemetry_records${scope}
+        GROUP BY project_id, COALESCE(environment_id, ''), COALESCE(resource_id, ''), source`, bindings);
+    });
+    rebuild();
+  }
 }
 // src/alerts/telemetry.ts
 function evaluateTelemetryAlertRules(store4, projectId, environmentId, now = new Date) {
@@ -12075,7 +12146,7 @@ async function manifestRequest(fetchFn, root, image, token, signal, authorizatio
 }
 // src/onboarding/artifact-store.ts
 import { createHash as createHash12 } from "node:crypto";
-import { chmodSync as chmodSync2, existsSync as existsSync5, mkdirSync as mkdirSync3, renameSync, unlinkSync, writeFileSync as writeFileSync3 } from "node:fs";
+import { chmodSync as chmodSync2, existsSync as existsSync5, mkdirSync as mkdirSync3, renameSync, unlinkSync, writeFileSync as writeFileSync2 } from "node:fs";
 import { basename as basename3, join as join5 } from "node:path";
 function map2(row) {
   return {
@@ -12122,7 +12193,7 @@ class ApplicationArtifactStore {
     const path = join5(this.root, `${id}.archive`);
     const temporary = `${path}.partial`;
     try {
-      writeFileSync3(temporary, input.bytes, { mode: 384, flag: "wx" });
+      writeFileSync2(temporary, input.bytes, { mode: 384, flag: "wx" });
       renameSync(temporary, path);
       chmodSync2(path, 384);
       this.controlPlane.database.run("INSERT INTO application_artifacts (id, organization_id, project_id, filename, storage_path, sha256, size, format, entry_count, expanded_bytes, created_by_actor_id, created_at) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)", [
@@ -14755,7 +14826,7 @@ function webhookEndpoint(baseUrl, webhook) {
   return new URL(`/api/source/webhooks/${encodeURIComponent(webhook.endpointToken)}`, base).href;
 }
 // src/source/git-workspace.ts
-import { chmodSync as chmodSync3, mkdtempSync as mkdtempSync2, rmSync as rmSync2, writeFileSync as writeFileSync4 } from "node:fs";
+import { chmodSync as chmodSync3, mkdtempSync as mkdtempSync2, rmSync as rmSync2, writeFileSync as writeFileSync3 } from "node:fs";
 import { tmpdir as tmpdir2 } from "node:os";
 import { join as join6, resolve as resolve5 } from "node:path";
 function validateRemote(value, deployKey) {
@@ -14802,8 +14873,8 @@ function transportEnvironment(options) {
     directory = mkdtempSync2(join6(tmpdir2(), "ts-cloud-git-transport-"));
     const keyPath = join6(directory, "key");
     const knownHostsPath = join6(directory, "known_hosts");
-    writeFileSync4(keyPath, options.deployKey.privateKey, { mode: 384 });
-    writeFileSync4(knownHostsPath, `${options.deployKey.host} ${options.deployKey.hostKey}
+    writeFileSync3(keyPath, options.deployKey.privateKey, { mode: 384 });
+    writeFileSync3(knownHostsPath, `${options.deployKey.host} ${options.deployKey.hostKey}
 `, { mode: 384 });
     chmodSync3(keyPath, 384);
     chmodSync3(knownHostsPath, 384);
@@ -18280,7 +18351,7 @@ async function sendAuthenticationEmail(config, message) {
 }
 // src/auth/encryption.ts
 import { randomBytes as randomBytes6 } from "node:crypto";
-import { chmodSync as chmodSync4, existsSync as existsSync6, mkdirSync as mkdirSync4, readFileSync as readFileSync4, writeFileSync as writeFileSync5 } from "node:fs";
+import { chmodSync as chmodSync4, existsSync as existsSync6, mkdirSync as mkdirSync4, readFileSync as readFileSync4, writeFileSync as writeFileSync4 } from "node:fs";
 import { dirname as dirname2 } from "node:path";
 function authEncryptionKeyFile() {
   return statePath("auth-encryption-key");
@@ -18300,7 +18371,7 @@ function resolveAuthEncryptionKey(cwd) {
   const key = randomBytes6(32).toString("base64url");
   try {
     mkdirSync4(dirname2(file), { recursive: true, mode: 448 });
-    writeFileSync5(file, `${key}
+    writeFileSync4(file, `${key}
 `, { mode: 384 });
     chmodSync4(file, 384);
   } catch {}
@@ -23027,7 +23098,7 @@ import { homedir as homedir3 } from "os";
 import { dirname as dirname4, resolve as resolve12 } from "path";
 import process20 from "process";
 import { existsSync as existsSync22, statSync as statSync22 } from "fs";
-import { existsSync as existsSync82, mkdirSync as mkdirSync32, readdirSync as readdirSync32, writeFileSync as writeFileSync52 } from "fs";
+import { existsSync as existsSync82, mkdirSync as mkdirSync32, readdirSync as readdirSync32, writeFileSync as writeFileSync5 } from "fs";
 import { homedir as homedir2 } from "os";
 import { dirname as dirname3, resolve as resolve72 } from "path";
 import process12 from "process";
@@ -28162,7 +28233,7 @@ function generateConfigTypes(options) {
   const content = `// Generated by bunfig v${version}
 export type ConfigNames = ${files.length ? `'${files.join("' | '")}'` : "string"}
 `;
-  writeFileSync52(outputFile, content, { mode: 438 });
+  writeFileSync5(outputFile, content, { mode: 438 });
 }
 function createLibraryConfig(options) {
   let configCache = null;
@@ -40133,7 +40204,7 @@ function clearSessionCookie(options = { secure: true }) {
 }
 
 // src/deploy/dashboard-users.ts
-import { chmodSync as chmodSync6, existsSync as existsSync19, mkdirSync as mkdirSync7, readFileSync as readFileSync10, writeFileSync as writeFileSync10 } from "node:fs";
+import { chmodSync as chmodSync6, existsSync as existsSync19, mkdirSync as mkdirSync7, readFileSync as readFileSync10, writeFileSync as writeFileSync9 } from "node:fs";
 import { dirname as dirname8 } from "node:path";
 function usersFile() {
   return statePath("dashboard-users.json");
@@ -40188,7 +40259,7 @@ function loadUsers(cwd) {
 function saveUsers(cwd, users) {
   const file = usersFilePath(cwd);
   mkdirSync7(dirname8(file), { recursive: true });
-  writeFileSync10(file, `${JSON.stringify({ users }, null, 2)}
+  writeFileSync9(file, `${JSON.stringify({ users }, null, 2)}
 `);
   chmodSync6(file, 384);
 }

package/dist/control-plane/store.d.ts

@@ -13,6 +13,7 @@ export declare class ControlPlaneStore {
     constructor(options?: ControlPlaneStoreOptions);
     private now;
     private secureDatabaseFiles;
+    private backupTo;
     private migrate;
     close(): void;
     transaction<T>(callback: () => T): T;

package/dist/deploy/index.js

@@ -30,7 +30,7 @@ import {
   synchronizeDashboardUsers,
   trackDashboardOperation,
   verifyStaticApiOrigin
-} from "../chunk-29fwqkb7.js";
+} from "../chunk-y5wrqyyz.js";
 import {
   deleteStaticSite,
   deployStaticSite,

package/dist/index.js

@@ -283,7 +283,7 @@ import {
   volumeCapabilities,
   webhookEndpoint,
   zeroCapacity
-} from "./chunk-29fwqkb7.js";
+} from "./chunk-y5wrqyyz.js";
 import {
   deleteStaticSite,
   deployStaticSite,

package/dist/telemetry/store.d.ts

@@ -31,4 +31,5 @@ export declare class TelemetryStore {
         compacted: number;
         rollups: number;
     };
+    private rebuildStatusRollups;
 }