@wizeworks/lens-cloud 0.0.0-stage → 0.3.0-alpha.1

package/dist/config.d.ts

@@ -0,0 +1,33 @@
+export type SignupMode = "open" | "invite";
+export interface CloudOptions {
+    /** "postgres://...", "pglite:<folder>", or "memory". Default "pglite:./.wizelens-cloud". */
+    database?: string;
+    /** Default 5970. 0 picks a free port. */
+    port?: number;
+    /** Default "0.0.0.0". */
+    host?: string;
+    /** The address people use, for links in invites and shares. Default http://localhost:<port>. */
+    publicUrl?: string;
+    /** "invite": only the first account and invited people can sign up. "open": anyone can. Default "invite". */
+    signup?: SignupMode;
+    /** Default retention for new organizations, in days. Default 30. */
+    retentionDays?: number;
+    /** Ingest calls per key per minute. Default 1200. */
+    ingestPerMinute?: number;
+    /** How often alert rules run, in ms. Default 60000. */
+    alertIntervalMs?: number;
+    /** Let alert webhooks call private and local addresses, and plain http. For self-hosting on a private network. Default false. */
+    allowPrivateWebhooks?: boolean;
+    redactKeys?: string[];
+    uiDir?: string;
+    /** For tests: the clock and the HTTP client alerts use. */
+    now?: () => number;
+    fetch?: typeof fetch;
+}
+export type CloudConfig = Required<Omit<CloudOptions, "uiDir" | "publicUrl">> & {
+    uiDir: string | undefined;
+    publicUrl: string | undefined;
+    secureCookies: boolean;
+};
+export declare function resolveConfig(o?: CloudOptions): CloudConfig;
+//# sourceMappingURL=config.d.ts.map

package/dist/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAEA,MAAM,MAAM,UAAU,GAAG,MAAM,GAAG,QAAQ,CAAC;AAE3C,MAAM,WAAW,YAAY;IAC3B,4FAA4F;IAC5F,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,yCAAyC;IACzC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,yBAAyB;IACzB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,gGAAgG;IAChG,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,6GAA6G;IAC7G,MAAM,CAAC,EAAE,UAAU,CAAC;IACpB,oEAAoE;IACpE,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,qDAAqD;IACrD,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,uDAAuD;IACvD,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,iIAAiI;IACjI,oBAAoB,CAAC,EAAE,OAAO,CAAC;IAC/B,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,2DAA2D;IAC3D,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;CACtB;AAED,MAAM,MAAM,WAAW,GAAG,QAAQ,CAAC,IAAI,CAAC,YAAY,EAAE,OAAO,GAAG,WAAW,CAAC,CAAC,GAAG;IAAE,KAAK,EAAE,MAAM,GAAG,SAAS,CAAC;IAAC,SAAS,EAAE,MAAM,GAAG,SAAS,CAAC;IAAC,aAAa,EAAE,OAAO,CAAA;CAAE,CAAC;AAErK,wBAAgB,aAAa,CAAC,CAAC,GAAE,YAAiB,GAAG,WAAW,CAiB/D"}

package/dist/config.js

@@ -0,0 +1,20 @@
+import { DEFAULT_REDACT_KEYS } from "@wizeworks/lens-core";
+export function resolveConfig(o = {}) {
+    return {
+        database: o.database ?? "pglite:./.wizelens-cloud",
+        port: o.port ?? 5970,
+        host: o.host ?? "0.0.0.0",
+        publicUrl: o.publicUrl?.replace(/\/+$/, ""),
+        signup: o.signup ?? "invite",
+        retentionDays: o.retentionDays ?? 30,
+        ingestPerMinute: o.ingestPerMinute ?? 1200,
+        alertIntervalMs: o.alertIntervalMs ?? 60_000,
+        allowPrivateWebhooks: o.allowPrivateWebhooks ?? false,
+        redactKeys: o.redactKeys ?? [...DEFAULT_REDACT_KEYS],
+        uiDir: o.uiDir,
+        now: o.now ?? Date.now,
+        fetch: o.fetch ?? fetch,
+        secureCookies: !!o.publicUrl?.startsWith("https://"),
+    };
+}
+//# sourceMappingURL=config.js.map

package/dist/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAgC3D,MAAM,UAAU,aAAa,CAAC,CAAC,GAAiB,EAAE;IAChD,OAAO;QACL,QAAQ,EAAE,CAAC,CAAC,QAAQ,IAAI,0BAA0B;QAClD,IAAI,EAAE,CAAC,CAAC,IAAI,IAAI,IAAI;QACpB,IAAI,EAAE,CAAC,CAAC,IAAI,IAAI,SAAS;QACzB,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;QAC3C,MAAM,EAAE,CAAC,CAAC,MAAM,IAAI,QAAQ;QAC5B,aAAa,EAAE,CAAC,CAAC,aAAa,IAAI,EAAE;QACpC,eAAe,EAAE,CAAC,CAAC,eAAe,IAAI,IAAI;QAC1C,eAAe,EAAE,CAAC,CAAC,eAAe,IAAI,MAAM;QAC5C,oBAAoB,EAAE,CAAC,CAAC,oBAAoB,IAAI,KAAK;QACrD,UAAU,EAAE,CAAC,CAAC,UAAU,IAAI,CAAC,GAAG,mBAAmB,CAAC;QACpD,KAAK,EAAE,CAAC,CAAC,KAAK;QACd,GAAG,EAAE,CAAC,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG;QACtB,KAAK,EAAE,CAAC,CAAC,KAAK,IAAI,KAAK;QACvB,aAAa,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,UAAU,CAAC,UAAU,CAAC;KACrD,CAAC;AACJ,CAAC"}

package/dist/db/db.d.ts

@@ -0,0 +1,19 @@
+/** Something that runs SQL: the database, or one transaction. Postgres syntax, `$1` parameters. */
+export interface Queryable {
+    query<T = Record<string, unknown>>(sql: string, params?: unknown[]): Promise<T[]>;
+}
+export interface Db extends Queryable {
+    /** Run `fn` in one transaction. It rolls back when `fn` throws. */
+    tx<T>(fn: (q: Queryable) => Promise<T>): Promise<T>;
+    /** Run several statements without parameters (migrations). */
+    exec(sql: string): Promise<void>;
+    close(): Promise<void>;
+    readonly kind: "postgres" | "pglite";
+}
+/** A managed Postgres, from a `postgres://` URL. */
+export declare function openPostgres(url: string): Promise<Db>;
+/** Postgres in this process (PGlite): a folder on disk, or memory when `dir` is undefined. For tests and trials. */
+export declare function openPglite(dir?: string): Promise<Db>;
+/** "postgres://..." opens Postgres; "pglite:<folder>" or "memory" opens PGlite. */
+export declare function openDb(url: string): Promise<Db>;
+//# sourceMappingURL=db.d.ts.map

package/dist/db/db.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"db.d.ts","sourceRoot":"","sources":["../../src/db/db.ts"],"names":[],"mappings":"AAGA,mGAAmG;AACnG,MAAM,WAAW,SAAS;IACxB,KAAK,CAAC,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC;CACnF;AAED,MAAM,WAAW,EAAG,SAAQ,SAAS;IACnC,mEAAmE;IACnE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,SAAS,KAAK,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;IACpD,8DAA8D;IAC9D,IAAI,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACjC,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACvB,QAAQ,CAAC,IAAI,EAAE,UAAU,GAAG,QAAQ,CAAC;CACtC;AAMD,oDAAoD;AACpD,wBAAsB,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,EAAE,CAAC,CAwB3D;AAED,oHAAoH;AACpH,wBAAsB,UAAU,CAAC,GAAG,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,EAAE,CAAC,CAa1D;AAED,mFAAmF;AACnF,wBAAgB,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,EAAE,CAAC,CAK/C"}

package/dist/db/db.js

@@ -0,0 +1,57 @@
+const wrap = (client) => ({
+    query: async (sql, params = []) => (await client.query(sql, params)).rows,
+});
+/** A managed Postgres, from a `postgres://` URL. */
+export async function openPostgres(url) {
+    const { default: pg } = await import("pg");
+    // Times are stored as double precision, so no bigint parsing is needed.
+    const pool = new pg.Pool({ connectionString: url, max: 10 });
+    return {
+        kind: "postgres",
+        ...wrap(pool),
+        async tx(fn) {
+            const client = await pool.connect();
+            try {
+                await client.query("BEGIN");
+                const out = await fn(wrap(client));
+                await client.query("COMMIT");
+                return out;
+            }
+            catch (err) {
+                await client.query("ROLLBACK");
+                throw err;
+            }
+            finally {
+                client.release();
+            }
+        },
+        exec: async (sql) => void (await pool.query(sql)),
+        close: () => pool.end(),
+    };
+}
+/** Postgres in this process (PGlite): a folder on disk, or memory when `dir` is undefined. For tests and trials. */
+export async function openPglite(dir) {
+    const { PGlite: Lite } = await import("@electric-sql/pglite");
+    const lite = await Lite.create(dir);
+    const q = (runner) => ({
+        query: async (sql, params = []) => (await runner.query(sql, params)).rows,
+    });
+    return {
+        kind: "pglite",
+        ...q(lite),
+        tx: (fn) => lite.transaction((t) => fn(q(t))),
+        exec: async (sql) => void (await lite.exec(sql)),
+        close: () => lite.close(),
+    };
+}
+/** "postgres://..." opens Postgres; "pglite:<folder>" or "memory" opens PGlite. */
+export function openDb(url) {
+    if (/^postgres(ql)?:\/\//i.test(url))
+        return openPostgres(url);
+    if (url === "memory")
+        return openPglite();
+    if (url.startsWith("pglite:"))
+        return openPglite(url.slice("pglite:".length));
+    throw new Error(`Unknown database URL "${url}". Use postgres://..., pglite:<folder>, or memory.`);
+}
+//# sourceMappingURL=db.js.map

package/dist/db/db.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"db.js","sourceRoot":"","sources":["../../src/db/db.ts"],"names":[],"mappings":"AAiBA,MAAM,IAAI,GAAG,CAAC,MAAyB,EAAa,EAAE,CAAC,CAAC;IACtD,KAAK,EAAE,KAAK,EAAK,GAAW,EAAE,MAAM,GAAc,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC,IAAW;CACvG,CAAC,CAAC;AAEH,oDAAoD;AACpD,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,GAAW;IAC5C,MAAM,EAAE,OAAO,EAAE,EAAE,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC;IAC3C,wEAAwE;IACxE,MAAM,IAAI,GAAG,IAAI,EAAE,CAAC,IAAI,CAAC,EAAE,gBAAgB,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC,CAAC;IAC7D,OAAO;QACL,IAAI,EAAE,UAAU;QAChB,GAAG,IAAI,CAAC,IAAI,CAAC;QACb,KAAK,CAAC,EAAE,CAAI,EAAgC;YAC1C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;YACpC,IAAI,CAAC;gBACH,MAAM,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;gBAC5B,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;gBACnC,MAAM,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;gBAC7B,OAAO,GAAG,CAAC;YACb,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;gBAC/B,MAAM,GAAG,CAAC;YACZ,CAAC;oBAAS,CAAC;gBACT,MAAM,CAAC,OAAO,EAAE,CAAC;YACnB,CAAC;QACH,CAAC;QACD,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACjD,KAAK,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE;KACxB,CAAC;AACJ,CAAC;AAED,oHAAoH;AACpH,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,GAAY;IAC3C,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,sBAAsB,CAAC,CAAC;IAC9D,MAAM,IAAI,GAAW,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAC5C,MAAM,CAAC,GAAG,CAAC,MAA6B,EAAa,EAAE,CAAC,CAAC;QACvD,KAAK,EAAE,KAAK,EAAK,GAAW,EAAE,MAAM,GAAc,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,MAAM,CAAC,KAAK,CAAI,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI;KACnG,CAAC,CAAC;IACH,OAAO;QACL,IAAI,EAAE,QAAQ;QACd,GAAG,CAAC,CAAC,IAAI,CAAC;QACV,EAAE,EAAE,CAAI,EAAgC,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC9E,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAChD,KAAK,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,EAAE;KAC1B,CAAC;AACJ,CAAC;AAED,mFAAmF;AACnF,MAAM,UAAU,MAAM,CAAC,GAAW;IAChC,IAAI,sBAAsB,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,YAAY,CAAC,GAAG,CAAC,CAAC;IAC/D,IAAI,GAAG,KAAK,QAAQ;QAAE,OAAO,UAAU,EAAE,CAAC;IAC1C,IAAI,GAAG,CAAC,UAAU,CAAC,SAAS,CAAC;QAAE,OAAO,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;IAC9E,MAAM,IAAI,KAAK,CAAC,yBAAyB,GAAG,oDAAoD,CAAC,CAAC;AACpG,CAAC"}

package/dist/db/migrate.d.ts

@@ -0,0 +1,6 @@
+import type { Db } from "./db.js";
+/** Apply every migration not applied yet, each in its own transaction. Returns how many ran. */
+export declare function migrate(db: Db): Promise<number>;
+/** One migration as single statements, so it runs inside a transaction on every driver. */
+export declare const splitStatements: (sql: string) => string[];
+//# sourceMappingURL=migrate.d.ts.map

package/dist/db/migrate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"migrate.d.ts","sourceRoot":"","sources":["../../src/db/migrate.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,EAAE,EAAE,MAAM,SAAS,CAAC;AAGlC,gGAAgG;AAChG,wBAAsB,OAAO,CAAC,EAAE,EAAE,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAcrD;AAED,2FAA2F;AAC3F,eAAO,MAAM,eAAe,QAAS,MAAM,KAAG,MAAM,EAIhC,CAAC"}

package/dist/db/migrate.js

@@ -0,0 +1,25 @@
+import { MIGRATIONS, MIGRATIONS_TABLE } from "./schema.js";
+/** Apply every migration not applied yet, each in its own transaction. Returns how many ran. */
+export async function migrate(db) {
+    await db.exec(MIGRATIONS_TABLE);
+    const done = new Set((await db.query("SELECT version FROM wizelens_migrations")).map((r) => r.version));
+    let ran = 0;
+    for (let i = 0; i < MIGRATIONS.length; i++) {
+        const version = i + 1;
+        if (done.has(version))
+            continue;
+        await db.tx(async (q) => {
+            for (const statement of splitStatements(MIGRATIONS[i]))
+                await q.query(statement);
+            await q.query("INSERT INTO wizelens_migrations (version, applied_ms) VALUES ($1, $2)", [version, Date.now()]);
+        });
+        ran++;
+    }
+    return ran;
+}
+/** One migration as single statements, so it runs inside a transaction on every driver. */
+export const splitStatements = (sql) => sql
+    .split(/;\s*\n/)
+    .map((s) => s.trim().replace(/;$/, ""))
+    .filter(Boolean);
+//# sourceMappingURL=migrate.js.map

package/dist/db/migrate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"migrate.js","sourceRoot":"","sources":["../../src/db/migrate.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAE3D,gGAAgG;AAChG,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,EAAM;IAClC,MAAM,EAAE,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;IAChC,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAsB,yCAAyC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IAC7H,IAAI,GAAG,GAAG,CAAC,CAAC;IACZ,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,UAAU,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAC3C,MAAM,OAAO,GAAG,CAAC,GAAG,CAAC,CAAC;QACtB,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC;YAAE,SAAS;QAChC,MAAM,EAAE,CAAC,EAAE,CAAC,KAAK,EAAE,CAAC,EAAE,EAAE;YACtB,KAAK,MAAM,SAAS,IAAI,eAAe,CAAC,UAAU,CAAC,CAAC,CAAE,CAAC;gBAAE,MAAM,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;YAClF,MAAM,CAAC,CAAC,KAAK,CAAC,uEAAuE,EAAE,CAAC,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QAChH,CAAC,CAAC,CAAC;QACH,GAAG,EAAE,CAAC;IACR,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,2FAA2F;AAC3F,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,GAAW,EAAY,EAAE,CACvD,GAAG;KACA,KAAK,CAAC,QAAQ,CAAC;KACf,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;KACtC,MAAM,CAAC,OAAO,CAAC,CAAC"}

package/dist/db/schema.d.ts

@@ -0,0 +1,3 @@
+export declare const MIGRATIONS: readonly string[];
+export declare const MIGRATIONS_TABLE = "CREATE TABLE IF NOT EXISTS wizelens_migrations (version INTEGER PRIMARY KEY, applied_ms DOUBLE PRECISION NOT NULL)";
+//# sourceMappingURL=schema.d.ts.map

package/dist/db/schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../src/db/schema.ts"],"names":[],"mappings":"AACA,eAAO,MAAM,UAAU,EAAE,SAAS,MAAM,EAoMvC,CAAC;AAEF,eAAO,MAAM,gBAAgB,uHAAuH,CAAC"}

package/dist/db/schema.js

@@ -0,0 +1,200 @@
+// Cloud schema, one entry per version. Never edit a shipped entry: add a new one (docs/CONTRACT.md, "Cloud storage").
+export const MIGRATIONS = [
+    `
+CREATE TABLE orgs (
+  id TEXT PRIMARY KEY, name TEXT NOT NULL, slug TEXT NOT NULL UNIQUE,
+  retention_days INTEGER NOT NULL DEFAULT 30, created_ms DOUBLE PRECISION NOT NULL
+);
+CREATE TABLE users (
+  id TEXT PRIMARY KEY, email TEXT NOT NULL UNIQUE, name TEXT NOT NULL, password_hash TEXT NOT NULL,
+  created_ms DOUBLE PRECISION NOT NULL
+);
+CREATE TABLE members (
+  org_id TEXT NOT NULL REFERENCES orgs(id) ON DELETE CASCADE, user_id TEXT NOT NULL REFERENCES users(id) ON DELETE CASCADE,
+  role TEXT NOT NULL, created_ms DOUBLE PRECISION NOT NULL, PRIMARY KEY (org_id, user_id)
+);
+CREATE TABLE sessions (
+  token_hash TEXT PRIMARY KEY, user_id TEXT NOT NULL REFERENCES users(id) ON DELETE CASCADE,
+  created_ms DOUBLE PRECISION NOT NULL, expires_ms DOUBLE PRECISION NOT NULL
+);
+CREATE TABLE invites (
+  token_hash TEXT PRIMARY KEY, org_id TEXT NOT NULL REFERENCES orgs(id) ON DELETE CASCADE, email TEXT NOT NULL,
+  role TEXT NOT NULL, created_by TEXT NOT NULL, created_ms DOUBLE PRECISION NOT NULL,
+  expires_ms DOUBLE PRECISION NOT NULL, accepted_ms DOUBLE PRECISION
+);
+CREATE TABLE projects (
+  id TEXT PRIMARY KEY, org_id TEXT NOT NULL REFERENCES orgs(id) ON DELETE CASCADE, name TEXT NOT NULL, slug TEXT NOT NULL,
+  created_ms DOUBLE PRECISION NOT NULL, UNIQUE (org_id, slug)
+);
+CREATE TABLE api_keys (
+  id TEXT PRIMARY KEY, org_id TEXT NOT NULL REFERENCES orgs(id) ON DELETE CASCADE, kind TEXT NOT NULL,
+  project_ids TEXT NOT NULL, name TEXT NOT NULL, prefix TEXT NOT NULL, token_hash TEXT NOT NULL UNIQUE,
+  created_by TEXT NOT NULL, created_ms DOUBLE PRECISION NOT NULL, last_used_ms DOUBLE PRECISION, revoked_ms DOUBLE PRECISION
+);
+CREATE TABLE traces (
+  project_id TEXT NOT NULL, trace_id TEXT NOT NULL, start_ms DOUBLE PRECISION NOT NULL, end_ms DOUBLE PRECISION NOT NULL,
+  updated_ms DOUBLE PRECISION NOT NULL, env TEXT NOT NULL DEFAULT '', PRIMARY KEY (project_id, trace_id)
+);
+CREATE TABLE spans (
+  project_id TEXT NOT NULL, trace_id TEXT NOT NULL, span_id TEXT NOT NULL, service TEXT NOT NULL,
+  start_ms DOUBLE PRECISION NOT NULL, duration_ms DOUBLE PRECISION NOT NULL, session TEXT, json TEXT NOT NULL,
+  PRIMARY KEY (project_id, trace_id, span_id)
+);
+CREATE TABLE logs (
+  project_id TEXT NOT NULL, trace_id TEXT NOT NULL, key TEXT NOT NULL, time_ms DOUBLE PRECISION NOT NULL, json TEXT NOT NULL,
+  PRIMARY KEY (project_id, trace_id, key)
+);
+CREATE TABLE services (
+  project_id TEXT NOT NULL, service TEXT NOT NULL, environment TEXT NOT NULL, host TEXT NOT NULL, via TEXT NOT NULL,
+  info TEXT NOT NULL, first_seen DOUBLE PRECISION NOT NULL, last_seen DOUBLE PRECISION NOT NULL,
+  PRIMARY KEY (project_id, service, environment, host)
+);
+CREATE TABLE alert_rules (
+  id TEXT PRIMARY KEY, project_id TEXT NOT NULL REFERENCES projects(id) ON DELETE CASCADE, name TEXT NOT NULL,
+  metric TEXT NOT NULL, op TEXT NOT NULL, threshold DOUBLE PRECISION NOT NULL, window_ms DOUBLE PRECISION NOT NULL,
+  env TEXT NOT NULL DEFAULT '', channels TEXT NOT NULL, enabled BOOLEAN NOT NULL DEFAULT TRUE,
+  state TEXT NOT NULL DEFAULT 'ok', last_value DOUBLE PRECISION, last_eval_ms DOUBLE PRECISION,
+  created_by TEXT NOT NULL, created_ms DOUBLE PRECISION NOT NULL
+);
+CREATE TABLE alert_events (
+  id TEXT PRIMARY KEY, rule_id TEXT NOT NULL REFERENCES alert_rules(id) ON DELETE CASCADE, project_id TEXT NOT NULL,
+  kind TEXT NOT NULL, value DOUBLE PRECISION, threshold DOUBLE PRECISION NOT NULL, message TEXT NOT NULL,
+  time_ms DOUBLE PRECISION NOT NULL, delivery TEXT NOT NULL DEFAULT ''
+);
+CREATE TABLE shares (
+  id TEXT PRIMARY KEY, project_id TEXT NOT NULL REFERENCES projects(id) ON DELETE CASCADE, trace_id TEXT NOT NULL,
+  token_hash TEXT NOT NULL UNIQUE, created_by TEXT NOT NULL, created_ms DOUBLE PRECISION NOT NULL,
+  expires_ms DOUBLE PRECISION NOT NULL, revoked_ms DOUBLE PRECISION, views INTEGER NOT NULL DEFAULT 0
+);
+CREATE TABLE audit (
+  id TEXT PRIMARY KEY, org_id TEXT NOT NULL, actor TEXT NOT NULL, action TEXT NOT NULL, detail TEXT NOT NULL,
+  time_ms DOUBLE PRECISION NOT NULL
+);
+CREATE INDEX ix_traces_updated ON traces (project_id, updated_ms);
+CREATE INDEX ix_traces_start ON traces (project_id, start_ms);
+CREATE INDEX ix_traces_start_all ON traces (start_ms);
+CREATE INDEX ix_spans_session ON spans (project_id, session) WHERE session IS NOT NULL;
+CREATE INDEX ix_alert_events_project ON alert_events (project_id, time_ms);
+CREATE INDEX ix_audit_org ON audit (org_id, time_ms);
+CREATE INDEX ix_members_user ON members (user_id);
+`,
+    `
+CREATE TABLE metric_points (
+  project_id TEXT NOT NULL, time_ms DOUBLE PRECISION NOT NULL, env TEXT NOT NULL DEFAULT '', service TEXT NOT NULL,
+  name TEXT NOT NULL, series_key TEXT NOT NULL, json TEXT NOT NULL
+);
+CREATE INDEX ix_metric_points_name ON metric_points (project_id, name, time_ms);
+CREATE INDEX ix_metric_points_time ON metric_points (project_id, time_ms);
+ALTER TABLE alert_rules ADD COLUMN metric_name TEXT NOT NULL DEFAULT '';
+ALTER TABLE alert_rules ADD COLUMN metric_stat TEXT NOT NULL DEFAULT '';
+ALTER TABLE alert_rules ADD COLUMN metric_service TEXT NOT NULL DEFAULT '';
+`,
+    `
+ALTER TABLE traces ADD COLUMN settled_ms DOUBLE PRECISION NOT NULL DEFAULT 0;
+ALTER TABLE traces ADD COLUMN contrib TEXT;
+CREATE INDEX ix_traces_dirty ON traces (start_ms) WHERE settled_ms < updated_ms;
+CREATE TABLE scale_meta (key TEXT PRIMARY KEY, value TEXT NOT NULL);
+CREATE TABLE fact_requests (
+  project_id TEXT NOT NULL, trace_id TEXT NOT NULL, env TEXT NOT NULL DEFAULT '', start_ms DOUBLE PRECISION NOT NULL,
+  method TEXT NOT NULL, path TEXT NOT NULL, endpoint TEXT NOT NULL, status INTEGER, status_class TEXT NOT NULL, failed BOOLEAN NOT NULL,
+  dur_class TEXT NOT NULL, aborted BOOLEAN NOT NULL, duration_ms DOUBLE PRECISION NOT NULL, server_ms DOUBLE PRECISION,
+  db_ms DOUBLE PRECISION NOT NULL, db_count INTEGER NOT NULL, fetch_count INTEGER NOT NULL, fetch_ms DOUBLE PRECISION NOT NULL,
+  render_ms DOUBLE PRECISION, network_ms DOUBLE PRECISION, service TEXT NOT NULL, services TEXT NOT NULL, errors INTEGER NOT NULL,
+  insights INTEGER NOT NULL, health TEXT NOT NULL, user_agent TEXT, client_address TEXT, end_user TEXT, request_id TEXT,
+  tags TEXT NOT NULL, search TEXT NOT NULL, PRIMARY KEY (project_id, trace_id)
+);
+CREATE INDEX ix_fact_requests_time ON fact_requests (project_id, start_ms);
+CREATE TABLE fact_traces (
+  project_id TEXT NOT NULL, trace_id TEXT NOT NULL, env TEXT NOT NULL DEFAULT '', start_ms DOUBLE PRECISION NOT NULL, path TEXT NOT NULL,
+  duration_ms DOUBLE PRECISION NOT NULL, health TEXT, status TEXT NOT NULL, services TEXT NOT NULL, span_count INTEGER NOT NULL,
+  slow BOOLEAN NOT NULL, search TEXT NOT NULL, PRIMARY KEY (project_id, trace_id)
+);
+CREATE INDEX ix_fact_traces_time ON fact_traces (project_id, start_ms);
+CREATE TABLE fact_logs (
+  project_id TEXT NOT NULL, trace_id TEXT NOT NULL, idx INTEGER NOT NULL, env TEXT NOT NULL DEFAULT '', time_ms DOUBLE PRECISION NOT NULL,
+  level TEXT NOT NULL, level_rank SMALLINT NOT NULL, service TEXT NOT NULL, category TEXT NOT NULL, message TEXT NOT NULL,
+  trace_name TEXT NOT NULL, span_id TEXT, attributes TEXT NOT NULL, search TEXT NOT NULL, PRIMARY KEY (project_id, trace_id, idx)
+);
+CREATE INDEX ix_fact_logs_time ON fact_logs (project_id, time_ms);
+CREATE TABLE fact_critical (
+  project_id TEXT NOT NULL, trace_id TEXT NOT NULL, span_id TEXT NOT NULL, env TEXT NOT NULL DEFAULT '', start_ms DOUBLE PRECISION NOT NULL,
+  duration_ms DOUBLE PRECISION NOT NULL, name TEXT NOT NULL, service TEXT NOT NULL, layer TEXT NOT NULL, PRIMARY KEY (project_id, trace_id, span_id)
+);
+CREATE INDEX ix_fact_critical_time ON fact_critical (project_id, start_ms);
+CREATE INDEX ix_fact_critical_slow ON fact_critical (project_id, duration_ms);
+CREATE TABLE rollup_10s (
+  project_id TEXT NOT NULL, env TEXT NOT NULL, kind TEXT NOT NULL, key TEXT NOT NULL, bucket_ms DOUBLE PRECISION NOT NULL,
+  n DOUBLE PRECISION NOT NULL, err DOUBLE PRECISION NOT NULL, sum_v DOUBLE PRECISION NOT NULL,
+  c0 DOUBLE PRECISION NOT NULL DEFAULT 0, c1 DOUBLE PRECISION NOT NULL DEFAULT 0, c2 DOUBLE PRECISION NOT NULL DEFAULT 0,
+  c3 DOUBLE PRECISION NOT NULL DEFAULT 0, c4 DOUBLE PRECISION NOT NULL DEFAULT 0, c5 DOUBLE PRECISION NOT NULL DEFAULT 0,
+  first_ms DOUBLE PRECISION NOT NULL, last_ms DOUBLE PRECISION NOT NULL, top_rank DOUBLE PRECISION NOT NULL DEFAULT 0,
+  top TEXT, ids TEXT NOT NULL DEFAULT '', PRIMARY KEY (project_id, kind, bucket_ms, env, key)
+);
+CREATE INDEX ix_rollup_10s_key ON rollup_10s (project_id, kind, key, bucket_ms);
+CREATE TABLE rollup_5m (
+  project_id TEXT NOT NULL, env TEXT NOT NULL, kind TEXT NOT NULL, key TEXT NOT NULL, bucket_ms DOUBLE PRECISION NOT NULL,
+  n DOUBLE PRECISION NOT NULL, err DOUBLE PRECISION NOT NULL, sum_v DOUBLE PRECISION NOT NULL,
+  c0 DOUBLE PRECISION NOT NULL DEFAULT 0, c1 DOUBLE PRECISION NOT NULL DEFAULT 0, c2 DOUBLE PRECISION NOT NULL DEFAULT 0,
+  c3 DOUBLE PRECISION NOT NULL DEFAULT 0, c4 DOUBLE PRECISION NOT NULL DEFAULT 0, c5 DOUBLE PRECISION NOT NULL DEFAULT 0,
+  first_ms DOUBLE PRECISION NOT NULL, last_ms DOUBLE PRECISION NOT NULL, top_rank DOUBLE PRECISION NOT NULL DEFAULT 0,
+  top TEXT, ids TEXT NOT NULL DEFAULT '', PRIMARY KEY (project_id, kind, bucket_ms, env, key)
+);
+CREATE INDEX ix_rollup_5m_key ON rollup_5m (project_id, kind, key, bucket_ms);
+CREATE TABLE rollup_1h (
+  project_id TEXT NOT NULL, env TEXT NOT NULL, kind TEXT NOT NULL, key TEXT NOT NULL, bucket_ms DOUBLE PRECISION NOT NULL,
+  n DOUBLE PRECISION NOT NULL, err DOUBLE PRECISION NOT NULL, sum_v DOUBLE PRECISION NOT NULL,
+  c0 DOUBLE PRECISION NOT NULL DEFAULT 0, c1 DOUBLE PRECISION NOT NULL DEFAULT 0, c2 DOUBLE PRECISION NOT NULL DEFAULT 0,
+  c3 DOUBLE PRECISION NOT NULL DEFAULT 0, c4 DOUBLE PRECISION NOT NULL DEFAULT 0, c5 DOUBLE PRECISION NOT NULL DEFAULT 0,
+  first_ms DOUBLE PRECISION NOT NULL, last_ms DOUBLE PRECISION NOT NULL, top_rank DOUBLE PRECISION NOT NULL DEFAULT 0,
+  top TEXT, ids TEXT NOT NULL DEFAULT '', PRIMARY KEY (project_id, kind, bucket_ms, env, key)
+);
+CREATE INDEX ix_rollup_1h_key ON rollup_1h (project_id, kind, key, bucket_ms);
+CREATE TABLE hist_10s (
+  project_id TEXT NOT NULL, env TEXT NOT NULL, kind TEXT NOT NULL, key TEXT NOT NULL, bucket_ms DOUBLE PRECISION NOT NULL,
+  bin INTEGER NOT NULL, cnt DOUBLE PRECISION NOT NULL, PRIMARY KEY (project_id, kind, bucket_ms, env, key, bin)
+);
+CREATE TABLE hist_5m (
+  project_id TEXT NOT NULL, env TEXT NOT NULL, kind TEXT NOT NULL, key TEXT NOT NULL, bucket_ms DOUBLE PRECISION NOT NULL,
+  bin INTEGER NOT NULL, cnt DOUBLE PRECISION NOT NULL, PRIMARY KEY (project_id, kind, bucket_ms, env, key, bin)
+);
+CREATE TABLE hist_1h (
+  project_id TEXT NOT NULL, env TEXT NOT NULL, kind TEXT NOT NULL, key TEXT NOT NULL, bucket_ms DOUBLE PRECISION NOT NULL,
+  bin INTEGER NOT NULL, cnt DOUBLE PRECISION NOT NULL, PRIMARY KEY (project_id, kind, bucket_ms, env, key, bin)
+);
+CREATE TABLE metric_series (
+  project_id TEXT NOT NULL, env TEXT NOT NULL, series_key TEXT NOT NULL, name TEXT NOT NULL, service TEXT NOT NULL, kind TEXT NOT NULL,
+  unit TEXT NOT NULL, description TEXT NOT NULL, monotonic BOOLEAN NOT NULL, temporality TEXT NOT NULL, attributes TEXT NOT NULL,
+  last_ms DOUBLE PRECISION NOT NULL, last_value DOUBLE PRECISION, last_hist TEXT, PRIMARY KEY (project_id, env, series_key)
+);
+CREATE INDEX ix_metric_series_name ON metric_series (project_id, name);
+CREATE TABLE metric_10s (
+  project_id TEXT NOT NULL, env TEXT NOT NULL, series_key TEXT NOT NULL, name TEXT NOT NULL, bucket_ms DOUBLE PRECISION NOT NULL,
+  cnt DOUBLE PRECISION NOT NULL, vsum DOUBLE PRECISION NOT NULL, vmin DOUBLE PRECISION, vmax DOUBLE PRECISION,
+  first_ms DOUBLE PRECISION NOT NULL, first_v DOUBLE PRECISION, last_ms DOUBLE PRECISION NOT NULL, last_v DOUBLE PRECISION,
+  rate_delta DOUBLE PRECISION NOT NULL DEFAULT 0, rate_ms DOUBLE PRECISION NOT NULL DEFAULT 0,
+  h_count DOUBLE PRECISION NOT NULL DEFAULT 0, h_sum DOUBLE PRECISION NOT NULL DEFAULT 0, h_min DOUBLE PRECISION, h_max DOUBLE PRECISION,
+  h_bounds TEXT, h_counts TEXT, PRIMARY KEY (project_id, name, bucket_ms, env, series_key)
+);
+CREATE TABLE metric_5m (
+  project_id TEXT NOT NULL, env TEXT NOT NULL, series_key TEXT NOT NULL, name TEXT NOT NULL, bucket_ms DOUBLE PRECISION NOT NULL,
+  cnt DOUBLE PRECISION NOT NULL, vsum DOUBLE PRECISION NOT NULL, vmin DOUBLE PRECISION, vmax DOUBLE PRECISION,
+  first_ms DOUBLE PRECISION NOT NULL, first_v DOUBLE PRECISION, last_ms DOUBLE PRECISION NOT NULL, last_v DOUBLE PRECISION,
+  rate_delta DOUBLE PRECISION NOT NULL DEFAULT 0, rate_ms DOUBLE PRECISION NOT NULL DEFAULT 0,
+  h_count DOUBLE PRECISION NOT NULL DEFAULT 0, h_sum DOUBLE PRECISION NOT NULL DEFAULT 0, h_min DOUBLE PRECISION, h_max DOUBLE PRECISION,
+  h_bounds TEXT, h_counts TEXT, PRIMARY KEY (project_id, name, bucket_ms, env, series_key)
+);
+CREATE TABLE metric_1h (
+  project_id TEXT NOT NULL, env TEXT NOT NULL, series_key TEXT NOT NULL, name TEXT NOT NULL, bucket_ms DOUBLE PRECISION NOT NULL,
+  cnt DOUBLE PRECISION NOT NULL, vsum DOUBLE PRECISION NOT NULL, vmin DOUBLE PRECISION, vmax DOUBLE PRECISION,
+  first_ms DOUBLE PRECISION NOT NULL, first_v DOUBLE PRECISION, last_ms DOUBLE PRECISION NOT NULL, last_v DOUBLE PRECISION,
+  rate_delta DOUBLE PRECISION NOT NULL DEFAULT 0, rate_ms DOUBLE PRECISION NOT NULL DEFAULT 0,
+  h_count DOUBLE PRECISION NOT NULL DEFAULT 0, h_sum DOUBLE PRECISION NOT NULL DEFAULT 0, h_min DOUBLE PRECISION, h_max DOUBLE PRECISION,
+  h_bounds TEXT, h_counts TEXT, PRIMARY KEY (project_id, name, bucket_ms, env, series_key)
+);
+CREATE INDEX ix_metric_10s_time ON metric_10s (project_id, bucket_ms);
+CREATE INDEX ix_metric_5m_time ON metric_5m (project_id, bucket_ms);
+CREATE INDEX ix_metric_1h_time ON metric_1h (project_id, bucket_ms);
+`,
+];
+export const MIGRATIONS_TABLE = `CREATE TABLE IF NOT EXISTS wizelens_migrations (version INTEGER PRIMARY KEY, applied_ms DOUBLE PRECISION NOT NULL)`;
+//# sourceMappingURL=schema.js.map

package/dist/db/schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.js","sourceRoot":"","sources":["../../src/db/schema.ts"],"names":[],"mappings":"AAAA,sHAAsH;AACtH,MAAM,CAAC,MAAM,UAAU,GAAsB;IAC3C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA6ED;IACC;;;;;;;;;;CAUD;IACC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAyGD;CACA,CAAC;AAEF,MAAM,CAAC,MAAM,gBAAgB,GAAG,oHAAoH,CAAC"}

package/dist/http/http.d.ts

@@ -0,0 +1,17 @@
+import type { IncomingMessage, ServerResponse } from "node:http";
+/** A failure that becomes one JSON error answer. */
+export declare class HttpError extends Error {
+    readonly status: number;
+    constructor(status: number, message: string);
+}
+export declare const fail: (status: number, message: string) => never;
+export declare function sendJson(res: ServerResponse, status: number, value: unknown, headers?: Record<string, string | string[]>): void;
+/** A small JSON body. Throws 400 for bad JSON or more than 1 MB. */
+export declare function readJsonBody(req: IncomingMessage): Promise<Record<string, unknown>>;
+export declare function cookieOf(req: IncomingMessage, name: string): string | undefined;
+/** A cookie header: HttpOnly, SameSite=Lax, Secure on https. `maxAgeS` 0 deletes it. */
+export declare const cookie: (name: string, value: string, maxAgeS: number, secure: boolean) => string;
+export declare const bearerOf: (req: IncomingMessage) => string | undefined;
+/** Read a string field. Throws 400 when it is required and missing. */
+export declare function str(body: Record<string, unknown>, key: string, required?: boolean): string;
+//# sourceMappingURL=http.d.ts.map

package/dist/http/http.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"http.d.ts","sourceRoot":"","sources":["../../src/http/http.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAIjE,oDAAoD;AACpD,qBAAa,SAAU,SAAQ,KAAK;IAEhC,QAAQ,CAAC,MAAM,EAAE,MAAM;IADzB,YACW,MAAM,EAAE,MAAM,EACvB,OAAO,EAAE,MAAM,EAGhB;CACF;AAED,eAAO,MAAM,IAAI,WAAY,MAAM,WAAW,MAAM,KAAG,KAEtD,CAAC;AAEF,wBAAgB,QAAQ,CAAC,GAAG,EAAE,cAAc,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,GAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,CAAM,GAAG,IAAI,CAGnI;AAED,oEAAoE;AACpE,wBAAsB,YAAY,CAAC,GAAG,EAAE,eAAe,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAiBzF;AAED,wBAAgB,QAAQ,CAAC,GAAG,EAAE,eAAe,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAM/E;AAED,wFAAwF;AACxF,eAAO,MAAM,MAAM,SAAU,MAAM,SAAS,MAAM,WAAW,MAAM,UAAU,OAAO,KAAG,MACgC,CAAC;AAExH,eAAO,MAAM,QAAQ,QAAS,eAAe,KAAG,MAAM,GAAG,SAGxD,CAAC;AAEF,uEAAuE;AACvE,wBAAgB,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,QAAQ,UAAO,GAAG,MAAM,CAKvF"}

package/dist/http/http.js

@@ -0,0 +1,62 @@
+const MAX_JSON = 1024 * 1024;
+/** A failure that becomes one JSON error answer. */
+export class HttpError extends Error {
+    status;
+    constructor(status, message) {
+        super(message);
+        this.status = status;
+    }
+}
+export const fail = (status, message) => {
+    throw new HttpError(status, message);
+};
+export function sendJson(res, status, value, headers = {}) {
+    res.writeHead(status, { "Content-Type": "application/json; charset=utf-8", "Cache-Control": "no-store", ...headers });
+    res.end(JSON.stringify(value));
+}
+/** A small JSON body. Throws 400 for bad JSON or more than 1 MB. */
+export async function readJsonBody(req) {
+    const chunks = [];
+    let size = 0;
+    for await (const chunk of req) {
+        const buf = Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk);
+        size += buf.length;
+        if (size > MAX_JSON)
+            fail(413, "The body is too large.");
+        chunks.push(buf);
+    }
+    const text = Buffer.concat(chunks).toString("utf8");
+    try {
+        const v = text ? JSON.parse(text) : {};
+        return v && typeof v === "object" && !Array.isArray(v) ? v : fail(400, "Send a JSON object.");
+    }
+    catch (err) {
+        if (err instanceof HttpError)
+            throw err;
+        return fail(400, "The body is not valid JSON.");
+    }
+}
+export function cookieOf(req, name) {
+    for (const part of String(req.headers.cookie ?? "").split(";")) {
+        const [k, ...v] = part.trim().split("=");
+        if (k === name)
+            return decodeURIComponent(v.join("="));
+    }
+    return undefined;
+}
+/** A cookie header: HttpOnly, SameSite=Lax, Secure on https. `maxAgeS` 0 deletes it. */
+export const cookie = (name, value, maxAgeS, secure) => `${name}=${encodeURIComponent(value)}; Path=/; HttpOnly; SameSite=Lax; Max-Age=${maxAgeS}${secure ? "; Secure" : ""}`;
+export const bearerOf = (req) => {
+    const auth = String(req.headers.authorization ?? "");
+    return auth.toLowerCase().startsWith("bearer ") ? auth.slice(7).trim() || undefined : undefined;
+};
+/** Read a string field. Throws 400 when it is required and missing. */
+export function str(body, key, required = true) {
+    const v = body[key];
+    if (typeof v === "string" && v.trim())
+        return v;
+    if (required)
+        fail(400, `"${key}" is required.`);
+    return "";
+}
+//# sourceMappingURL=http.js.map

package/dist/http/http.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http.js","sourceRoot":"","sources":["../../src/http/http.ts"],"names":[],"mappings":"AAEA,MAAM,QAAQ,GAAG,IAAI,GAAG,IAAI,CAAC;AAE7B,oDAAoD;AACpD,MAAM,OAAO,SAAU,SAAQ,KAAK;IAEvB,MAAM;IADjB,YACW,MAAc,EACvB,OAAe;QAEf,KAAK,CAAC,OAAO,CAAC,CAAC;sBAHN,MAAM;IAIjB,CAAC;CACF;AAED,MAAM,CAAC,MAAM,IAAI,GAAG,CAAC,MAAc,EAAE,OAAe,EAAS,EAAE;IAC7D,MAAM,IAAI,SAAS,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AACvC,CAAC,CAAC;AAEF,MAAM,UAAU,QAAQ,CAAC,GAAmB,EAAE,MAAc,EAAE,KAAc,EAAE,OAAO,GAAsC,EAAE;IAC3H,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,cAAc,EAAE,iCAAiC,EAAE,eAAe,EAAE,UAAU,EAAE,GAAG,OAAO,EAAE,CAAC,CAAC;IACtH,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;AACjC,CAAC;AAED,oEAAoE;AACpE,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,GAAoB;IACrD,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,GAAG,EAAE,CAAC;QAC9B,MAAM,GAAG,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAe,CAAC,CAAC;QAC1E,IAAI,IAAI,GAAG,CAAC,MAAM,CAAC;QACnB,IAAI,IAAI,GAAG,QAAQ;YAAE,IAAI,CAAC,GAAG,EAAE,wBAAwB,CAAC,CAAC;QACzD,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACnB,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACpD,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAa,CAAC,CAAC,CAAC,EAAE,CAAC;QACpD,OAAO,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAE,CAA6B,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,qBAAqB,CAAC,CAAC;IAC7H,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,SAAS;YAAE,MAAM,GAAG,CAAC;QACxC,OAAO,IAAI,CAAC,GAAG,EAAE,6BAA6B,CAAC,CAAC;IAClD,CAAC;AACH,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,GAAoB,EAAE,IAAY;IACzD,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QAC/D,MAAM,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACzC,IAAI,CAAC,KAAK,IAAI;YAAE,OAAO,kBAAkB,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IACzD,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,wFAAwF;AACxF,MAAM,CAAC,MAAM,MAAM,GAAG,CAAC,IAAY,EAAE,KAAa,EAAE,OAAe,EAAE,MAAe,EAAU,EAAE,CAC9F,GAAG,IAAI,IAAI,kBAAkB,CAAC,KAAK,CAAC,6CAA6C,OAAO,GAAG,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;AAExH,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC,GAAoB,EAAsB,EAAE;IACnE,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,aAAa,IAAI,EAAE,CAAC,CAAC;IACrD,OAAO,IAAI,CAAC,WAAW,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;AAClG,CAAC,CAAC;AAEF,uEAAuE;AACvE,MAAM,UAAU,GAAG,CAAC,IAA6B,EAAE,GAAW,EAAE,QAAQ,GAAG,IAAI;IAC7E,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC;IACpB,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,IAAI,EAAE;QAAE,OAAO,CAAC,CAAC;IAChD,IAAI,QAAQ;QAAE,IAAI,CAAC,GAAG,EAAE,IAAI,GAAG,gBAAgB,CAAC,CAAC;IACjD,OAAO,EAAE,CAAC;AACZ,CAAC"}

package/dist/http/limiter.d.ts

@@ -0,0 +1,11 @@
+/** A fixed-window counter per key: at most `limit` calls per `windowMs`. In memory, per process. */
+export declare class RateLimiter {
+    #private;
+    private readonly limit;
+    private readonly windowMs;
+    private readonly now;
+    constructor(limit: number, windowMs: number, now?: () => number);
+    /** True when the call is allowed. */
+    take(key: string): boolean;
+}
+//# sourceMappingURL=limiter.d.ts.map

package/dist/http/limiter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"limiter.d.ts","sourceRoot":"","sources":["../../src/http/limiter.ts"],"names":[],"mappings":"AAAA,oGAAoG;AACpG,qBAAa,WAAW;;IAIpB,OAAO,CAAC,QAAQ,CAAC,KAAK;IACtB,OAAO,CAAC,QAAQ,CAAC,QAAQ;IACzB,OAAO,CAAC,QAAQ,CAAC,GAAG;IAHtB,YACmB,KAAK,EAAE,MAAM,EACb,QAAQ,EAAE,MAAM,EAChB,GAAG,GAAE,MAAM,MAAiB,EAC3C;IAEJ,qCAAqC;IACrC,IAAI,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAUzB;CAKF"}

package/dist/http/limiter.js

@@ -0,0 +1,31 @@
+/** A fixed-window counter per key: at most `limit` calls per `windowMs`. In memory, per process. */
+export class RateLimiter {
+    limit;
+    windowMs;
+    now;
+    #counts = new Map();
+    constructor(limit, windowMs, now = Date.now) {
+        this.limit = limit;
+        this.windowMs = windowMs;
+        this.now = now;
+    }
+    /** True when the call is allowed. */
+    take(key) {
+        const t = this.now();
+        const c = this.#counts.get(key);
+        if (!c || t - c.start >= this.windowMs) {
+            this.#counts.set(key, { start: t, n: 1 });
+            if (this.#counts.size > 10_000)
+                this.#sweep(t);
+            return true;
+        }
+        c.n++;
+        return c.n <= this.limit;
+    }
+    #sweep(t) {
+        for (const [k, c] of this.#counts)
+            if (t - c.start >= this.windowMs)
+                this.#counts.delete(k);
+    }
+}
+//# sourceMappingURL=limiter.js.map

package/dist/http/limiter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"limiter.js","sourceRoot":"","sources":["../../src/http/limiter.ts"],"names":[],"mappings":"AAAA,oGAAoG;AACpG,MAAM,OAAO,WAAW;IAIH,KAAK;IACL,QAAQ;IACR,GAAG;IALb,OAAO,GAAG,IAAI,GAAG,EAAwC,CAAC;IAEnE,YACmB,KAAa,EACb,QAAgB,EAChB,GAAG,GAAiB,IAAI,CAAC,GAAG;qBAF5B,KAAK;wBACL,QAAQ;mBACR,GAAG;IACnB,CAAC;IAEJ,qCAAqC;IACrC,IAAI,CAAC,GAAW;QACd,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACrB,MAAM,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAChC,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YACvC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;YAC1C,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,GAAG,MAAM;gBAAE,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;YAC/C,OAAO,IAAI,CAAC;QACd,CAAC;QACD,CAAC,CAAC,CAAC,EAAE,CAAC;QACN,OAAO,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC;IAC3B,CAAC;IAED,MAAM,CAAC,CAAS;QACd,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,IAAI,CAAC,OAAO;YAAE,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,IAAI,IAAI,CAAC,QAAQ;gBAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IAC9F,CAAC;CACF"}

package/dist/http/router.d.ts

@@ -0,0 +1,21 @@
+import type { IncomingMessage, ServerResponse } from "node:http";
+export interface RouteCtx {
+    req: IncomingMessage;
+    res: ServerResponse;
+    url: URL;
+    params: Record<string, string>;
+}
+export type Handler<C extends RouteCtx = RouteCtx> = (ctx: C) => Promise<void>;
+/** Method and path matching, with `:name` path parts. Paths are below the base path. */
+export declare class Router<C extends RouteCtx = RouteCtx> {
+    #private;
+    on(method: string, path: string, handler: Handler<C>): this;
+    /** The handler and path params for a request, or undefined. */
+    match(method: string, path: string): {
+        handler: Handler<C>;
+        params: Record<string, string>;
+    } | undefined;
+    /** True when some route has this path with another method (for 405). */
+    hasPath(path: string): boolean;
+}
+//# sourceMappingURL=router.d.ts.map

package/dist/http/router.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"router.d.ts","sourceRoot":"","sources":["../../src/http/router.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAEjE,MAAM,WAAW,QAAQ;IACvB,GAAG,EAAE,eAAe,CAAC;IACrB,GAAG,EAAE,cAAc,CAAC;IACpB,GAAG,EAAE,GAAG,CAAC;IACT,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAChC;AAED,MAAM,MAAM,OAAO,CAAC,CAAC,SAAS,QAAQ,GAAG,QAAQ,IAAI,CAAC,GAAG,EAAE,CAAC,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;AAS/E,wFAAwF;AACxF,qBAAa,MAAM,CAAC,CAAC,SAAS,QAAQ,GAAG,QAAQ;;IAG/C,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,GAAG,IAAI,CAK1D;IAED,+DAA+D;IAC/D,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG;QAAE,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;KAAE,GAAG,SAAS,CASvG;IAED,wEAAwE;IACxE,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAE7B;CACF"}

package/dist/http/router.js

@@ -0,0 +1,28 @@
+/** Method and path matching, with `:name` path parts. Paths are below the base path. */
+export class Router {
+    #routes = [];
+    on(method, path, handler) {
+        const keys = [];
+        const source = path.replace(/:([a-zA-Z]+)/g, (_, k) => (keys.push(k), "([^/]+)"));
+        this.#routes.push({ method, pattern: new RegExp(`^${source}$`), keys, handler });
+        return this;
+    }
+    /** The handler and path params for a request, or undefined. */
+    match(method, path) {
+        for (const r of this.#routes) {
+            if (r.method !== method)
+                continue;
+            const m = r.pattern.exec(path);
+            if (!m)
+                continue;
+            const params = Object.fromEntries(r.keys.map((k, i) => [k, decodeURIComponent(m[i + 1])]));
+            return { handler: r.handler, params };
+        }
+        return undefined;
+    }
+    /** True when some route has this path with another method (for 405). */
+    hasPath(path) {
+        return this.#routes.some((r) => r.pattern.test(path));
+    }
+}
+//# sourceMappingURL=router.js.map

package/dist/http/router.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"router.js","sourceRoot":"","sources":["../../src/http/router.ts"],"names":[],"mappings":"AAkBA,wFAAwF;AACxF,MAAM,OAAO,MAAM;IACR,OAAO,GAAe,EAAE,CAAC;IAElC,EAAE,CAAC,MAAc,EAAE,IAAY,EAAE,OAAmB;QAClD,MAAM,IAAI,GAAa,EAAE,CAAC;QAC1B,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,eAAe,EAAE,CAAC,CAAC,EAAE,CAAS,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC;QAC1F,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;QACjF,OAAO,IAAI,CAAC;IACd,CAAC;IAED,+DAA+D;IAC/D,KAAK,CAAC,MAAc,EAAE,IAAY;QAChC,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YAC7B,IAAI,CAAC,CAAC,MAAM,KAAK,MAAM;gBAAE,SAAS;YAClC,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC/B,IAAI,CAAC,CAAC;gBAAE,SAAS;YACjB,MAAM,MAAM,GAAG,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,kBAAkB,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAE,CAAC,CAAC,CAAC,CAAC,CAAC;YAC5F,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,CAAC;QACxC,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,wEAAwE;IACxE,OAAO,CAAC,IAAY;QAClB,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IACxD,CAAC;CACF"}

package/dist/index.d.ts

@@ -0,0 +1,7 @@
+export { createCloud, CLOUD_VERSION } from "./server.js";
+export type { Cloud } from "./server.js";
+export type { CloudOptions } from "./config.js";
+export { openDb } from "./db/db.js";
+export type { Db } from "./db/db.js";
+export { migrate } from "./db/migrate.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AACzD,YAAY,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AACzC,YAAY,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,EAAE,MAAM,EAAE,MAAM,YAAY,CAAC;AACpC,YAAY,EAAE,EAAE,EAAE,MAAM,YAAY,CAAC;AACrC,OAAO,EAAE,OAAO,EAAE,MAAM,iBAAiB,CAAC"}