create-safest-tools 0.6.0 → 0.7.0

package/template/src/workspace-governance.ts

@@ -268,12 +268,14 @@ export async function expireExports(env: Env, limit = 100): Promise<number> {
   return expired;
 }
 
-export async function loadWorkflowAnalytics(db: D1Database, days: number): Promise<Record<string, unknown>> {
+export async function loadWorkflowAnalytics(db: D1Database, days: number, queueScope: string[] | null = null): Promise<Record<string, unknown>> {
   const since = new Date(Date.now() - Math.max(1, Math.min(366, days)) * 86_400_000).toISOString();
+  const scope = queueScope === null ? null : JSON.stringify(queueScope);
+  const visibleReports = `SELECT id FROM reports WHERE (?3 IS NULL OR queue_id IN (SELECT value FROM json_each(?3)))`;
   const [states, steps, components] = await Promise.all([
-    db.prepare(`SELECT state, run_kind AS runKind, COUNT(*) AS count, AVG((julianday(COALESCE(finished_at, ?2)) - julianday(COALESCE(started_at, created_at))) * 86400000) AS averageDurationMs FROM workflow_runs WHERE created_at >= ?1 GROUP BY state, run_kind ORDER BY run_kind, state`).bind(since, now()).all(),
-    db.prepare(`SELECT node_type AS nodeType, state, COUNT(*) AS count, AVG((julianday(COALESCE(finished_at, ?2)) - julianday(started_at)) * 86400000) AS averageDurationMs FROM workflow_step_runs WHERE updated_at >= ?1 GROUP BY node_type, state ORDER BY node_type, state`).bind(since, now()).all(),
-    db.prepare(`SELECT d.component_key AS componentKey, r.state, COUNT(*) AS count, AVG((julianday(COALESCE(r.finished_at, ?2)) - julianday(r.started_at)) * 86400000) AS averageDurationMs FROM component_runs r JOIN component_versions v ON v.id = r.component_version_id JOIN component_definitions d ON d.id = v.definition_id WHERE r.created_at >= ?1 GROUP BY d.component_key, r.state ORDER BY d.component_key, r.state`).bind(since, now()).all(),
+    db.prepare(`SELECT state, run_kind AS runKind, COUNT(*) AS count, AVG((julianday(COALESCE(finished_at, ?2)) - julianday(COALESCE(started_at, created_at))) * 86400000) AS averageDurationMs FROM workflow_runs WHERE created_at >= ?1 AND report_id IN (${visibleReports}) GROUP BY state, run_kind ORDER BY run_kind, state`).bind(since, now(), scope).all(),
+    db.prepare(`SELECT node_type AS nodeType, state, COUNT(*) AS count, AVG((julianday(COALESCE(finished_at, ?2)) - julianday(started_at)) * 86400000) AS averageDurationMs FROM workflow_step_runs WHERE updated_at >= ?1 AND run_id IN (SELECT id FROM workflow_runs WHERE report_id IN (${visibleReports})) GROUP BY node_type, state ORDER BY node_type, state`).bind(since, now(), scope).all(),
+    db.prepare(`SELECT d.component_key AS componentKey, r.state, COUNT(*) AS count, AVG((julianday(COALESCE(r.finished_at, ?2)) - julianday(r.started_at)) * 86400000) AS averageDurationMs FROM component_runs r JOIN component_versions v ON v.id = r.component_version_id JOIN component_definitions d ON d.id = v.definition_id WHERE r.created_at >= ?1 AND r.report_id IN (${visibleReports}) GROUP BY d.component_key, r.state ORDER BY d.component_key, r.state`).bind(since, now(), scope).all(),
   ]);
   return { since, runStates: states.results, stepPerformance: steps.results, componentPerformance: components.results };
 }

package/template/tsconfig.json

@@ -3,6 +3,7 @@
     "target": "ES2022",
     "module": "ESNext",
     "moduleResolution": "Bundler",
+    "resolveJsonModule": true,
     "lib": [
       "ES2022"
     ],

package/template/vite.console.config.ts

@@ -1,9 +1,36 @@
 import { fileURLToPath, URL } from "node:url";
+import { createHash } from "node:crypto";
+import { readFile, writeFile } from "node:fs/promises";
 import react from "@vitejs/plugin-react";
-import { defineConfig } from "vite";
+import { defineConfig, type Plugin } from "vite";
+
+// Fixed URLs can retain an older release in a customer's browser even after
+// cache headers change. Fingerprint every shell dependency on every build.
+function workspaceRelease(): Plugin {
+  const path = (name: string) => fileURLToPath(new URL(`./public/${name}`, import.meta.url));
+  const hash = (value: string) => createHash("sha256").update(value).digest("hex").slice(0, 20);
+  return {
+    name: "workspace-release",
+    async closeBundle() {
+      const tokens = hash(await readFile(path("brand-tokens.css"), "utf8"));
+      const styles = (await readFile(path("styles.css"), "utf8")).replace(/\.\/brand-tokens\.css(?:\?v=[a-f0-9]+)?/g, `./brand-tokens.css?v=${tokens}`);
+      await writeFile(path("styles.css"), styles);
+      let html = (await readFile(path("index.html"), "utf8")).replace(/\s*<meta name="safest-release" content="[a-f0-9]+"\s*\/>/, "");
+      for (const name of ["styles.css", "workspace.css", "console/workspace-features.css", "customer-brand.js", "widget.js", "console/auth-shell.js"]) {
+        const fingerprint = hash(await readFile(path(name), "utf8"));
+        const pattern = new RegExp(`\\./${name.replaceAll(".", "\\.")}(?:\\?v=[a-f0-9]+)?(?=")`, "g");
+        html = html.replace(pattern, `./${name}?v=${fingerprint}`);
+      }
+      const release = hash(html);
+      html = html.replace("<head>", `<head>\n    <meta name="safest-release" content="${release}" />`);
+      await writeFile(path("index.html"), html);
+      await writeFile(path("console/release.json"), `${JSON.stringify({ release })}\n`);
+    },
+  };
+}
 
 export default defineConfig({
-  plugins: [react()],
+  plugins: [react(), workspaceRelease()],
   publicDir: false,
   define: { "process.env.NODE_ENV": JSON.stringify("production") },
   build: {
@@ -15,6 +42,7 @@ export default defineConfig({
       entry: fileURLToPath(new URL("./console/main.tsx", import.meta.url)),
       formats: ["es"],
       fileName: () => "auth-shell.js",
+      cssFileName: "workspace-features",
     },
   },
 });

package/template/worker-configuration.d.ts

@@ -1,5 +1,5 @@
 /* eslint-disable */
-// Generated by Wrangler by running `wrangler types --env-file=config/dev.vars.example --include-runtime=false --strict-vars=false` (hash: 2d2c98e01480f3c1492835530279c5f1)
+// Generated by Wrangler by running `wrangler types --env-file=config/dev.vars.example --include-runtime=false --strict-vars=false` (hash: c7dab1dfe1b9b2d1711cbd0adcafd9a7)
 interface __BaseEnv_Env {
 	PROFILE_MEDIA: R2Bucket;
 	WORKFLOW_ARTIFACTS: R2Bucket;
@@ -47,12 +47,13 @@ interface __BaseEnv_Env {
 	AI_LOCAL_FIXTURE_ENABLED: string;
 	AI_LOCAL_FIXTURE_JSON: string;
 	WORKSPACE_PRESENCE: DurableObjectNamespace<import("./src/index").WorkspacePresence>;
+	CASE_INVESTIGATOR: DurableObjectNamespace<import("./src/index").CaseInvestigator>;
 	WORKFLOWS: Workflow<Parameters<import("./src/index").DynamicWorkflow['run']>[0]['payload']>;
 }
 declare namespace Cloudflare {
 	interface GlobalProps {
 		mainModule: typeof import("./src/index");
-		durableNamespaces: "WorkspacePresence";
+		durableNamespaces: "WorkspacePresence" | "CaseInvestigator";
 	}
 	interface Env extends __BaseEnv_Env {}
 }