cartethyia 2.4.5 → 2.5.0

package/src/observability/runtime-metrics.ts

@@ -24,6 +24,12 @@ export interface RuntimeMetricSources {
   readonly ipAbuseKeys: () => number;
   /** Tracked keys in the in-process quota cache tier (0 when Redis-only paths are idle). */
   readonly quotaCacheEntries: () => number;
+
+  /**
+   * Entries in the per-provider model-catalog cache. Bounded, but a count that
+   * sits at the cap means every rebuild is evicting something it needs.
+   */
+  readonly modelCatalogEntries: () => number;
   /**
    * Live in-flight request count. Zero means the gateway is idle, so a
    * synchronous full collection is safe (no request to stall).
@@ -129,6 +135,7 @@ export class RuntimeMetricsSampler {
     metrics.cartethyia_routing_roundrobin_entries.set(roundRobin.provider, { scope: "provider" });
     metrics.cartethyia_ip_abuse_keys.set(this.sources.ipAbuseKeys());
     metrics.cartethyia_quota_cache_entries.set(this.sources.quotaCacheEntries());
+    metrics.cartethyia_model_catalog_entries.set(this.sources.modelCatalogEntries());
 
     this.checkPressure(memory.rss);
     this.checkIdleReclaim(memory.rss);

package/src/persistence/db-pg.ts

@@ -16,6 +16,7 @@ import {
   BASELINE_MIGRATION_ID,
   assertMigrationHistorySupported,
   baselineSchemaMarker,
+  acceptedBaselineSchemaMarkers,
   migrationFiles,
   resolveMigrationsFolder,
 } from "./migrate";
@@ -157,10 +158,10 @@ export async function applySqlMigrations(
 ): Promise<void> {
   const files = migrationFiles(folder);
   const baselineFile = files.find((file) => basename(file) === BASELINE_MIGRATION_ID);
+  const baselineSource =
+    baselineFile === undefined ? undefined : readFileSync(baselineFile, "utf8");
   const baselineMarker =
-    baselineFile === undefined
-      ? undefined
-      : baselineSchemaMarker(readFileSync(baselineFile, "utf8"));
+    baselineSource === undefined ? undefined : baselineSchemaMarker(baselineSource);
   const client = await pool.connect();
   try {
     await client.query(`SELECT pg_advisory_lock(hashtext('cartethyia:migrations'))`);
@@ -177,6 +178,7 @@ export async function applySqlMigrations(
       [
         ...files.map((file) => basename(file)),
         ...(baselineMarker === undefined ? [] : [baselineMarker]),
+      ...(baselineSource === undefined ? [] : acceptedBaselineSchemaMarkers(baselineSource)),
       ],
       tenants.rows[0]?.present === true,
       baselineMarker,
@@ -227,6 +229,10 @@ async function createMigrationLedger(client: PoolClient): Promise<void> {
 
 export function createPgHandle(): PgHandle {
   const pool = getPool();
+  // No `logger`: drizzle's default logger prints the full statement *and its
+  // bound parameters* on any failed query. On the auth path that includes the
+  // key hash, so one bad request wrote a credential-shaped string to the log —
+  // and a database outage wrote one per request.
   const db: CartethyiaDatabase = drizzle(pool, { schema: fullSchema });
   return {
     kind: "pg",