emdash 1.0.0 → 1.0.1-rc.1

package/dist/cron-ktyapbdB.mjs

@@ -0,0 +1,306 @@
+import { sql } from "kysely";
+import { ulid } from "ulidx";
+import { Cron } from "croner";
+
+//#region src/plugins/cron.ts
+/**
+* Plugin Cron System
+*
+* Provides scheduled task execution for plugins:
+* - CronExecutor: claims overdue tasks, invokes per-plugin cron hook, updates next run.
+* - CronAccessImpl: per-plugin API for schedule/cancel/list.
+*
+*/
+/** Matches the Workers runtime, which always runs in UTC, so Node hosts fire at the same instant. */
+const CRON_TIMEZONE = "UTC";
+/** Stale lock threshold in minutes */
+const STALE_LOCK_MINUTES = 10;
+const ISO_DATETIME_PATTERN = /^\d{4}-\d{2}-\d{2}[T ]\d{2}:\d{2}(?::\d{2}(?:\.\d+)?)?(?:Z|[+-]\d{2}:?\d{2})?$/;
+const ISO_TIMEZONE_PATTERN = /(?:Z|[+-]\d{2}:?\d{2})$/;
+/**
+* Executes overdue cron tasks.
+*
+* Called by the platform driver: the NodeCronScheduler timer on Node, or the
+* Worker's `scheduled()` handler (via runScheduledTasks) on Cloudflare.
+* Stateless — all state lives in the database.
+*/
+var CronExecutor = class {
+	/**
+	* Resolves the database connection to use for this tick. A resolver (not a
+	* captured instance) so connection-backed adapters work across events: on
+	* Cloudflare the `scheduled()` handler installs an event-scoped connection
+	* in ALS, and this resolves to it instead of the per-isolate singleton
+	* whose socket belongs to an earlier request. Accepts a plain `Kysely` too
+	* (wrapped in a constant resolver) for callers/tests that don't need ALS.
+	*/
+	resolveDb;
+	constructor(db, invokeCronHook, now = () => /* @__PURE__ */ new Date()) {
+		this.invokeCronHook = invokeCronHook;
+		this.now = now;
+		this.resolveDb = typeof db === "function" ? db : () => db;
+	}
+	get db() {
+		return this.resolveDb();
+	}
+	/**
+	* Process all overdue tasks.
+	*
+	* 1. Atomically claim tasks whose next_run_at <= now, status = idle, enabled = 1.
+	* 2. For each claimed task, invoke the plugin's cron hook.
+	* 3. On success: compute next_run_at and reset to idle, or delete one-shots.
+	* 4. On failure: reset to idle (retry on next tick).
+	*/
+	async tick() {
+		const currentTime = this.now();
+		const now = currentTime.toISOString();
+		let processed = 0;
+		const claimed = await sql`
+			UPDATE _emdash_cron_tasks
+			SET status = 'running', locked_at = ${now}
+			WHERE id IN (
+				SELECT id FROM _emdash_cron_tasks
+				WHERE next_run_at <= ${now}
+				  AND status = 'idle'
+				  AND enabled = 1
+				ORDER BY next_run_at ASC
+				LIMIT 10
+			)
+			RETURNING id, plugin_id, task_name, schedule, is_oneshot, data, next_run_at
+		`.execute(this.db);
+		for (const task of claimed.rows) {
+			let parsedData;
+			if (task.data) try {
+				parsedData = JSON.parse(task.data);
+			} catch {
+				console.error(`[cron] Invalid JSON data for ${task.plugin_id}:${task.task_name}, skipping`);
+				await sql`
+						UPDATE _emdash_cron_tasks
+						SET status = 'idle', locked_at = NULL, enabled = 0
+						WHERE id = ${task.id}
+					`.execute(this.db);
+				continue;
+			}
+			const event = {
+				name: task.task_name,
+				data: parsedData,
+				scheduledAt: task.next_run_at
+			};
+			let hookFailed = false;
+			try {
+				await this.invokeCronHook(task.plugin_id, event);
+			} catch (error) {
+				hookFailed = true;
+				console.error(`[cron] Hook failed for ${task.plugin_id}:${task.task_name}:`, error);
+			}
+			if (task.is_oneshot) if (hookFailed) {
+				const meta = parsedData?.__emdash != null && typeof parsedData.__emdash === "object" ? parsedData.__emdash : void 0;
+				const raw = meta?.retryCount;
+				const retryCount = typeof raw === "number" && Number.isFinite(raw) && raw > 0 ? Math.floor(raw) : 0;
+				const MAX_ONESHOT_RETRIES = 5;
+				if (retryCount >= MAX_ONESHOT_RETRIES) {
+					console.error(`[cron] One-shot task ${task.plugin_id}:${task.task_name} exceeded ${MAX_ONESHOT_RETRIES} retries, removing`);
+					await sql`
+						DELETE FROM _emdash_cron_tasks WHERE id = ${task.id}
+					`.execute(this.db);
+				} else {
+					const backoffMs = 6e4 * Math.pow(2, retryCount);
+					await sql`
+						UPDATE _emdash_cron_tasks
+						SET status = 'idle', locked_at = NULL, next_run_at = ${new Date(currentTime.getTime() + backoffMs).toISOString()}, data = ${JSON.stringify({
+						...parsedData,
+						__emdash: {
+							...meta,
+							retryCount: retryCount + 1
+						}
+					})}
+						WHERE id = ${task.id}
+					`.execute(this.db);
+				}
+			} else await sql`
+						DELETE FROM _emdash_cron_tasks WHERE id = ${task.id}
+					`.execute(this.db);
+			else {
+				let nextRun;
+				try {
+					nextRun = nextCronTime(task.schedule, currentTime);
+				} catch (error) {
+					console.error(`[cron] Disabling unsatisfiable schedule for ${task.plugin_id}:${task.task_name}:`, error);
+					await sql`
+						UPDATE _emdash_cron_tasks
+						SET status = 'idle', locked_at = NULL, last_run_at = ${now}, enabled = 0
+						WHERE id = ${task.id}
+					`.execute(this.db);
+					processed++;
+					continue;
+				}
+				await sql`
+					UPDATE _emdash_cron_tasks
+					SET status = 'idle',
+						locked_at = NULL,
+						last_run_at = ${now},
+						next_run_at = ${nextRun}
+					WHERE id = ${task.id}
+				`.execute(this.db);
+			}
+			processed++;
+		}
+		return processed;
+	}
+	/**
+	* Recover tasks stuck in 'running' for more than STALE_LOCK_MINUTES.
+	* These likely crashed mid-execution.
+	*/
+	async recoverStaleLocks() {
+		const result = await sql`
+			UPDATE _emdash_cron_tasks
+			SET status = 'idle', locked_at = NULL
+			WHERE status = 'running'
+			  AND locked_at < ${(/* @__PURE__ */ new Date(this.now().getTime() - STALE_LOCK_MINUTES * 60 * 1e3)).toISOString()}
+		`.execute(this.db);
+		return Number(result.numAffectedRows ?? 0);
+	}
+	/**
+	* Get the next due time across all enabled tasks.
+	* Returns null if no tasks are scheduled.
+	*/
+	async getNextDueTime() {
+		return (await sql`
+			SELECT MIN(next_run_at) as next
+			FROM _emdash_cron_tasks
+			WHERE status = 'idle' AND enabled = 1
+		`.execute(this.db)).rows[0]?.next ?? null;
+	}
+};
+/**
+* Per-plugin cron API implementation.
+* Scoped to a single plugin ID — plugins cannot see or modify other plugins' tasks.
+*/
+var CronAccessImpl = class {
+	constructor(db, pluginId, reschedule, now = () => /* @__PURE__ */ new Date()) {
+		this.db = db;
+		this.pluginId = pluginId;
+		this.reschedule = reschedule;
+		this.now = now;
+	}
+	async schedule(name, opts) {
+		validateTaskName(name);
+		validateSchedule(opts.schedule);
+		const oneshot = isOneShot(opts.schedule);
+		const nextRun = oneshot ? oneShotTime(opts.schedule) : nextCronTime(opts.schedule, this.now());
+		const dataJson = opts.data ? JSON.stringify(opts.data) : null;
+		await sql`
+			INSERT INTO _emdash_cron_tasks (id, plugin_id, task_name, schedule, is_oneshot, data, next_run_at, status, enabled)
+			VALUES (${ulid()}, ${this.pluginId}, ${name}, ${opts.schedule}, ${oneshot ? 1 : 0}, ${dataJson}, ${nextRun}, 'idle', 1)
+			ON CONFLICT (plugin_id, task_name) DO UPDATE SET
+				schedule = ${opts.schedule},
+				is_oneshot = ${oneshot ? 1 : 0},
+				data = ${dataJson},
+				next_run_at = ${nextRun},
+				status = CASE WHEN _emdash_cron_tasks.status = 'running' THEN 'running' ELSE 'idle' END,
+				locked_at = CASE WHEN _emdash_cron_tasks.status = 'running' THEN _emdash_cron_tasks.locked_at ELSE NULL END,
+				enabled = 1
+		`.execute(this.db);
+		this.reschedule();
+	}
+	async cancel(name) {
+		await sql`
+			DELETE FROM _emdash_cron_tasks
+			WHERE plugin_id = ${this.pluginId} AND task_name = ${name}
+		`.execute(this.db);
+		this.reschedule();
+	}
+	async list() {
+		return (await sql`
+			SELECT task_name, schedule, next_run_at, last_run_at
+			FROM _emdash_cron_tasks
+			WHERE plugin_id = ${this.pluginId} AND enabled = 1
+			ORDER BY next_run_at ASC
+		`.execute(this.db)).rows.map((row) => ({
+			name: row.task_name,
+			schedule: row.schedule,
+			nextRunAt: row.next_run_at,
+			lastRunAt: row.last_run_at
+		}));
+	}
+};
+/**
+* Enable or disable all cron tasks for a plugin.
+* Called by admin disable/enable endpoints and PluginManager lifecycle.
+* Gracefully handles the cron table not existing yet (pre-migration).
+*/
+async function setCronTasksEnabled(db, pluginId, enabled) {
+	try {
+		await sql`
+			UPDATE _emdash_cron_tasks
+			SET enabled = ${enabled ? 1 : 0}
+			WHERE plugin_id = ${pluginId}
+		`.execute(db);
+	} catch {}
+}
+/**
+* Compute the next fire time for a cron expression, resolved in UTC.
+* Supports standard cron (5-field), extended (6-field with seconds), and
+* aliases like @daily, @weekly, @hourly, @monthly, @yearly.
+*/
+function nextCronTime(expression, currentTime = /* @__PURE__ */ new Date()) {
+	const next = new Cron(expression, { timezone: CRON_TIMEZONE }).nextRun(currentTime);
+	if (!next) throw new Error(`Invalid cron expression or no future run: "${expression}"`);
+	return next.toISOString();
+}
+/**
+* Check whether a string is a valid cron expression.
+*/
+function isCronExpression(schedule) {
+	try {
+		new Cron(schedule, { timezone: CRON_TIMEZONE });
+		return true;
+	} catch {
+		return false;
+	}
+}
+/**
+* Check if a schedule string is a one-shot (ISO 8601 datetime) rather than
+* a recurring cron expression.
+*
+* Recognizes the supported ISO date-time shape before consulting the cron
+* parser, which also accepts ISO timestamps. Other values are parsed as cron
+* first so expressions like "1-5 * * * *" are not misclassified as dates.
+*/
+function isOneShot(schedule) {
+	if (schedule.startsWith("@")) return false;
+	if (ISO_DATETIME_PATTERN.test(schedule)) return !isNaN(Date.parse(schedule));
+	if (isCronExpression(schedule)) return false;
+	return !isNaN(Date.parse(schedule));
+}
+function oneShotTime(schedule) {
+	const withoutZone = ISO_DATETIME_PATTERN.test(schedule) && !ISO_TIMEZONE_PATTERN.test(schedule);
+	const normalized = ISO_DATETIME_PATTERN.test(schedule) ? schedule.replace(" ", "T") : schedule;
+	const input = withoutZone ? `${normalized}Z` : normalized;
+	return new Date(input).toISOString();
+}
+/** Max length for a task name */
+const MAX_TASK_NAME_LENGTH = 128;
+/** Task name pattern: alphanumeric, dashes, underscores */
+const TASK_NAME_RE = /^[a-zA-Z][a-zA-Z0-9_-]*$/;
+/**
+* Validate a cron task name.
+* Must be non-empty, ≤128 chars, alphanumeric with dashes/underscores.
+*/
+function validateTaskName(name) {
+	if (!name || name.length > MAX_TASK_NAME_LENGTH) throw new Error(`Invalid task name: must be 1-${MAX_TASK_NAME_LENGTH} characters, got ${name.length}`);
+	if (!TASK_NAME_RE.test(name)) throw new Error(`Invalid task name "${name}": must start with a letter and contain only letters, numbers, dashes, or underscores`);
+}
+/**
+* Validate a schedule string at registration time.
+* Must be a valid cron expression or a parseable ISO 8601 datetime.
+*/
+function validateSchedule(schedule) {
+	if (!schedule || schedule.length > 256) throw new Error(`Invalid schedule: must be 1-256 characters, got ${schedule.length}`);
+	if (isCronExpression(schedule)) return;
+	const parsed = Date.parse(schedule);
+	if (isNaN(parsed)) throw new Error(`Invalid schedule "${schedule}": must be a valid cron expression or ISO 8601 datetime`);
+}
+
+//#endregion
+export { CronExecutor as n, setCronTasksEnabled as r, CronAccessImpl as t };
+//# sourceMappingURL=cron-ktyapbdB.mjs.map

package/dist/cron-ktyapbdB.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"cron-ktyapbdB.mjs","names":[],"sources":["../src/plugins/cron.ts"],"sourcesContent":["/**\n * Plugin Cron System\n *\n * Provides scheduled task execution for plugins:\n * - CronExecutor: claims overdue tasks, invokes per-plugin cron hook, updates next run.\n * - CronAccessImpl: per-plugin API for schedule/cancel/list.\n *\n */\n\nimport { Cron } from \"croner\";\nimport type { Kysely } from \"kysely\";\nimport { sql } from \"kysely\";\nimport { ulid } from \"ulidx\";\n\nimport type { Database } from \"../database/types.js\";\nimport type { CronAccess, CronEvent, CronTaskInfo } from \"./types.js\";\n\n/** Matches the Workers runtime, which always runs in UTC, so Node hosts fire at the same instant. */\nconst CRON_TIMEZONE = \"UTC\";\n\n/** Stale lock threshold in minutes */\nconst STALE_LOCK_MINUTES = 10;\nconst ISO_DATETIME_PATTERN =\n\t/^\\d{4}-\\d{2}-\\d{2}[T ]\\d{2}:\\d{2}(?::\\d{2}(?:\\.\\d+)?)?(?:Z|[+-]\\d{2}:?\\d{2})?$/;\nconst ISO_TIMEZONE_PATTERN = /(?:Z|[+-]\\d{2}:?\\d{2})$/;\n\n/**\n * Callback to invoke a plugin's cron hook.\n * Provided by PluginManager so CronExecutor stays decoupled from the hook pipeline.\n */\nexport type InvokeCronHookFn = (pluginId: string, event: CronEvent) => Promise<void>;\n\n/**\n * Callback to notify the scheduler that the next due time may have changed.\n */\nexport type RescheduleFn = () => void;\n\n// ─── CronExecutor ──────────────────────────────────────────────────────────\n\n/**\n * Executes overdue cron tasks.\n *\n * Called by the platform driver: the NodeCronScheduler timer on Node, or the\n * Worker's `scheduled()` handler (via runScheduledTasks) on Cloudflare.\n * Stateless — all state lives in the database.\n */\nexport class CronExecutor {\n\t/**\n\t * Resolves the database connection to use for this tick. A resolver (not a\n\t * captured instance) so connection-backed adapters work across events: on\n\t * Cloudflare the `scheduled()` handler installs an event-scoped connection\n\t * in ALS, and this resolves to it instead of the per-isolate singleton\n\t * whose socket belongs to an earlier request. Accepts a plain `Kysely` too\n\t * (wrapped in a constant resolver) for callers/tests that don't need ALS.\n\t */\n\tprivate readonly resolveDb: () => Kysely<Database>;\n\n\tconstructor(\n\t\tdb: Kysely<Database> | (() => Kysely<Database>),\n\t\tprivate invokeCronHook: InvokeCronHookFn,\n\t\tprivate readonly now: () => Date = () => new Date(),\n\t) {\n\t\tthis.resolveDb = typeof db === \"function\" ? db : () => db;\n\t}\n\n\tprivate get db(): Kysely<Database> {\n\t\treturn this.resolveDb();\n\t}\n\n\t/**\n\t * Process all overdue tasks.\n\t *\n\t * 1. Atomically claim tasks whose next_run_at <= now, status = idle, enabled = 1.\n\t * 2. For each claimed task, invoke the plugin's cron hook.\n\t * 3. On success: compute next_run_at and reset to idle, or delete one-shots.\n\t * 4. On failure: reset to idle (retry on next tick).\n\t */\n\tasync tick(): Promise<number> {\n\t\tconst currentTime = this.now();\n\t\tconst now = currentTime.toISOString();\n\t\tlet processed = 0;\n\n\t\t// Claim overdue tasks atomically\n\t\tconst claimed = await sql<{\n\t\t\tid: string;\n\t\t\tplugin_id: string;\n\t\t\ttask_name: string;\n\t\t\tschedule: string;\n\t\t\tis_oneshot: number;\n\t\t\tdata: string | null;\n\t\t\tnext_run_at: string;\n\t\t}>`\n\t\t\tUPDATE _emdash_cron_tasks\n\t\t\tSET status = 'running', locked_at = ${now}\n\t\t\tWHERE id IN (\n\t\t\t\tSELECT id FROM _emdash_cron_tasks\n\t\t\t\tWHERE next_run_at <= ${now}\n\t\t\t\t  AND status = 'idle'\n\t\t\t\t  AND enabled = 1\n\t\t\t\tORDER BY next_run_at ASC\n\t\t\t\tLIMIT 10\n\t\t\t)\n\t\t\tRETURNING id, plugin_id, task_name, schedule, is_oneshot, data, next_run_at\n\t\t`.execute(this.db);\n\n\t\tfor (const task of claimed.rows) {\n\t\t\t// Parse task data safely ��� malformed JSON must not crash the entire batch\n\t\t\tlet parsedData: Record<string, unknown> | undefined;\n\t\t\tif (task.data) {\n\t\t\t\ttry {\n\t\t\t\t\tparsedData = JSON.parse(task.data) as Record<string, unknown>;\n\t\t\t\t} catch {\n\t\t\t\t\tconsole.error(\n\t\t\t\t\t\t`[cron] Invalid JSON data for ${task.plugin_id}:${task.task_name}, skipping`,\n\t\t\t\t\t);\n\t\t\t\t\tawait sql`\n\t\t\t\t\t\tUPDATE _emdash_cron_tasks\n\t\t\t\t\t\tSET status = 'idle', locked_at = NULL, enabled = 0\n\t\t\t\t\t\tWHERE id = ${task.id}\n\t\t\t\t\t`.execute(this.db);\n\t\t\t\t\tcontinue;\n\t\t\t\t}\n\t\t\t}\n\n\t\t\tconst event: CronEvent = {\n\t\t\t\tname: task.task_name,\n\t\t\t\tdata: parsedData,\n\t\t\t\tscheduledAt: task.next_run_at,\n\t\t\t};\n\n\t\t\tlet hookFailed = false;\n\t\t\ttry {\n\t\t\t\tawait this.invokeCronHook(task.plugin_id, event);\n\t\t\t} catch (error) {\n\t\t\t\thookFailed = true;\n\t\t\t\tconsole.error(`[cron] Hook failed for ${task.plugin_id}:${task.task_name}:`, error);\n\t\t\t}\n\n\t\t\tif (task.is_oneshot) {\n\t\t\t\tif (hookFailed) {\n\t\t\t\t\t// Retry metadata is namespaced under __emdash to avoid collisions\n\t\t\t\t\t// with plugin-controlled data fields.\n\t\t\t\t\tconst meta =\n\t\t\t\t\t\tparsedData?.__emdash != null && typeof parsedData.__emdash === \"object\"\n\t\t\t\t\t\t\t? (parsedData.__emdash as Record<string, unknown>)\n\t\t\t\t\t\t\t: undefined;\n\t\t\t\t\tconst raw = meta?.retryCount;\n\t\t\t\t\tconst retryCount =\n\t\t\t\t\t\ttypeof raw === \"number\" && Number.isFinite(raw) && raw > 0 ? Math.floor(raw) : 0;\n\t\t\t\t\tconst MAX_ONESHOT_RETRIES = 5;\n\n\t\t\t\t\tif (retryCount >= MAX_ONESHOT_RETRIES) {\n\t\t\t\t\t\tconsole.error(\n\t\t\t\t\t\t\t`[cron] One-shot task ${task.plugin_id}:${task.task_name} exceeded ${MAX_ONESHOT_RETRIES} retries, removing`,\n\t\t\t\t\t\t);\n\t\t\t\t\t\tawait sql`\n\t\t\t\t\t\tDELETE FROM _emdash_cron_tasks WHERE id = ${task.id}\n\t\t\t\t\t`.execute(this.db);\n\t\t\t\t\t} else {\n\t\t\t\t\t\t// Retry with exponential backoff: 1m, 2m, 4m, 8m, 16m\n\t\t\t\t\t\tconst backoffMs = 60_000 * Math.pow(2, retryCount);\n\t\t\t\t\t\tconst retryAt = new Date(currentTime.getTime() + backoffMs).toISOString();\n\t\t\t\t\t\tconst updatedData = JSON.stringify({\n\t\t\t\t\t\t\t...parsedData,\n\t\t\t\t\t\t\t__emdash: { ...meta, retryCount: retryCount + 1 },\n\t\t\t\t\t\t});\n\t\t\t\t\t\tawait sql`\n\t\t\t\t\t\tUPDATE _emdash_cron_tasks\n\t\t\t\t\t\tSET status = 'idle', locked_at = NULL, next_run_at = ${retryAt}, data = ${updatedData}\n\t\t\t\t\t\tWHERE id = ${task.id}\n\t\t\t\t\t`.execute(this.db);\n\t\t\t\t\t}\n\t\t\t\t} else {\n\t\t\t\t\t// Success: delete the one-shot task\n\t\t\t\t\tawait sql`\n\t\t\t\t\t\tDELETE FROM _emdash_cron_tasks WHERE id = ${task.id}\n\t\t\t\t\t`.execute(this.db);\n\t\t\t\t}\n\t\t\t} else {\n\t\t\t\t// Recurring: compute next run and reset\n\t\t\t\tlet nextRun: string;\n\t\t\t\ttry {\n\t\t\t\t\tnextRun = nextCronTime(task.schedule, currentTime);\n\t\t\t\t} catch (error) {\n\t\t\t\t\tconsole.error(\n\t\t\t\t\t\t`[cron] Disabling unsatisfiable schedule for ${task.plugin_id}:${task.task_name}:`,\n\t\t\t\t\t\terror,\n\t\t\t\t\t);\n\t\t\t\t\tawait sql`\n\t\t\t\t\t\tUPDATE _emdash_cron_tasks\n\t\t\t\t\t\tSET status = 'idle', locked_at = NULL, last_run_at = ${now}, enabled = 0\n\t\t\t\t\t\tWHERE id = ${task.id}\n\t\t\t\t\t`.execute(this.db);\n\t\t\t\t\tprocessed++;\n\t\t\t\t\tcontinue;\n\t\t\t\t}\n\t\t\t\tawait sql`\n\t\t\t\t\tUPDATE _emdash_cron_tasks\n\t\t\t\t\tSET status = 'idle',\n\t\t\t\t\t\tlocked_at = NULL,\n\t\t\t\t\t\tlast_run_at = ${now},\n\t\t\t\t\t\tnext_run_at = ${nextRun}\n\t\t\t\t\tWHERE id = ${task.id}\n\t\t\t\t`.execute(this.db);\n\t\t\t}\n\n\t\t\tprocessed++;\n\t\t}\n\n\t\treturn processed;\n\t}\n\n\t/**\n\t * Recover tasks stuck in 'running' for more than STALE_LOCK_MINUTES.\n\t * These likely crashed mid-execution.\n\t */\n\tasync recoverStaleLocks(): Promise<number> {\n\t\tconst cutoff = new Date(this.now().getTime() - STALE_LOCK_MINUTES * 60 * 1000).toISOString();\n\n\t\tconst result = await sql`\n\t\t\tUPDATE _emdash_cron_tasks\n\t\t\tSET status = 'idle', locked_at = NULL\n\t\t\tWHERE status = 'running'\n\t\t\t  AND locked_at < ${cutoff}\n\t\t`.execute(this.db);\n\n\t\treturn Number(result.numAffectedRows ?? 0);\n\t}\n\n\t/**\n\t * Get the next due time across all enabled tasks.\n\t * Returns null if no tasks are scheduled.\n\t */\n\tasync getNextDueTime(): Promise<string | null> {\n\t\tconst result = await sql<{ next: string | null }>`\n\t\t\tSELECT MIN(next_run_at) as next\n\t\t\tFROM _emdash_cron_tasks\n\t\t\tWHERE status = 'idle' AND enabled = 1\n\t\t`.execute(this.db);\n\n\t\treturn result.rows[0]?.next ?? null;\n\t}\n}\n\n// ─── CronAccessImpl ────────────────────────────────────────────────────────\n\n/**\n * Per-plugin cron API implementation.\n * Scoped to a single plugin ID — plugins cannot see or modify other plugins' tasks.\n */\nexport class CronAccessImpl implements CronAccess {\n\tconstructor(\n\t\tprivate db: Kysely<Database>,\n\t\tprivate pluginId: string,\n\t\tprivate reschedule: RescheduleFn,\n\t\tprivate readonly now: () => Date = () => new Date(),\n\t) {}\n\n\tasync schedule(\n\t\tname: string,\n\t\topts: { schedule: string; data?: Record<string, unknown> },\n\t): Promise<void> {\n\t\tvalidateTaskName(name);\n\t\tvalidateSchedule(opts.schedule);\n\n\t\tconst oneshot = isOneShot(opts.schedule);\n\t\tconst nextRun = oneshot ? oneShotTime(opts.schedule) : nextCronTime(opts.schedule, this.now());\n\t\tconst dataJson = opts.data ? JSON.stringify(opts.data) : null;\n\t\tconst id = ulid();\n\n\t\t// Upsert: if task already exists for this plugin+name, update it.\n\t\t// Guard: don't clobber a task that is currently executing.\n\t\tawait sql`\n\t\t\tINSERT INTO _emdash_cron_tasks (id, plugin_id, task_name, schedule, is_oneshot, data, next_run_at, status, enabled)\n\t\t\tVALUES (${id}, ${this.pluginId}, ${name}, ${opts.schedule}, ${oneshot ? 1 : 0}, ${dataJson}, ${nextRun}, 'idle', 1)\n\t\t\tON CONFLICT (plugin_id, task_name) DO UPDATE SET\n\t\t\t\tschedule = ${opts.schedule},\n\t\t\t\tis_oneshot = ${oneshot ? 1 : 0},\n\t\t\t\tdata = ${dataJson},\n\t\t\t\tnext_run_at = ${nextRun},\n\t\t\t\tstatus = CASE WHEN _emdash_cron_tasks.status = 'running' THEN 'running' ELSE 'idle' END,\n\t\t\t\tlocked_at = CASE WHEN _emdash_cron_tasks.status = 'running' THEN _emdash_cron_tasks.locked_at ELSE NULL END,\n\t\t\t\tenabled = 1\n\t\t`.execute(this.db);\n\n\t\tthis.reschedule();\n\t}\n\n\tasync cancel(name: string): Promise<void> {\n\t\tawait sql`\n\t\t\tDELETE FROM _emdash_cron_tasks\n\t\t\tWHERE plugin_id = ${this.pluginId} AND task_name = ${name}\n\t\t`.execute(this.db);\n\n\t\tthis.reschedule();\n\t}\n\n\tasync list(): Promise<CronTaskInfo[]> {\n\t\tconst rows = await sql<{\n\t\t\ttask_name: string;\n\t\t\tschedule: string;\n\t\t\tnext_run_at: string;\n\t\t\tlast_run_at: string | null;\n\t\t}>`\n\t\t\tSELECT task_name, schedule, next_run_at, last_run_at\n\t\t\tFROM _emdash_cron_tasks\n\t\t\tWHERE plugin_id = ${this.pluginId} AND enabled = 1\n\t\t\tORDER BY next_run_at ASC\n\t\t`.execute(this.db);\n\n\t\treturn rows.rows.map((row) => ({\n\t\t\tname: row.task_name,\n\t\t\tschedule: row.schedule,\n\t\t\tnextRunAt: row.next_run_at,\n\t\t\tlastRunAt: row.last_run_at,\n\t\t}));\n\t}\n}\n\n// ─── Cron task lifecycle helpers ────────────────────────────────────────────\n\n/**\n * Enable or disable all cron tasks for a plugin.\n * Called by admin disable/enable endpoints and PluginManager lifecycle.\n * Gracefully handles the cron table not existing yet (pre-migration).\n */\nexport async function setCronTasksEnabled(\n\tdb: Kysely<Database>,\n\tpluginId: string,\n\tenabled: boolean,\n): Promise<void> {\n\ttry {\n\t\tawait sql`\n\t\t\tUPDATE _emdash_cron_tasks\n\t\t\tSET enabled = ${enabled ? 1 : 0}\n\t\t\tWHERE plugin_id = ${pluginId}\n\t\t`.execute(db);\n\t} catch {\n\t\t// Cron table may not exist yet (pre-migration). Non-fatal.\n\t}\n}\n\n// ─── Cron utilities ────────────────────────────────────────────────────────\n\n/**\n * Compute the next fire time for a cron expression, resolved in UTC.\n * Supports standard cron (5-field), extended (6-field with seconds), and\n * aliases like @daily, @weekly, @hourly, @monthly, @yearly.\n */\nexport function nextCronTime(expression: string, currentTime: Date = new Date()): string {\n\tconst job = new Cron(expression, { timezone: CRON_TIMEZONE });\n\tconst next = job.nextRun(currentTime);\n\tif (!next) {\n\t\tthrow new Error(`Invalid cron expression or no future run: \"${expression}\"`);\n\t}\n\treturn next.toISOString();\n}\n\n/**\n * Check whether a string is a valid cron expression.\n */\nfunction isCronExpression(schedule: string): boolean {\n\ttry {\n\t\tconst _cron = new Cron(schedule, { timezone: CRON_TIMEZONE });\n\t\tvoid _cron;\n\t\treturn true;\n\t} catch {\n\t\treturn false;\n\t}\n}\n\n/**\n * Check if a schedule string is a one-shot (ISO 8601 datetime) rather than\n * a recurring cron expression.\n *\n * Recognizes the supported ISO date-time shape before consulting the cron\n * parser, which also accepts ISO timestamps. Other values are parsed as cron\n * first so expressions like \"1-5 * * * *\" are not misclassified as dates.\n */\nexport function isOneShot(schedule: string): boolean {\n\tif (schedule.startsWith(\"@\")) return false;\n\tif (ISO_DATETIME_PATTERN.test(schedule)) {\n\t\treturn !isNaN(Date.parse(schedule));\n\t}\n\tif (isCronExpression(schedule)) return false;\n\treturn !isNaN(Date.parse(schedule));\n}\n\nfunction oneShotTime(schedule: string): string {\n\tconst withoutZone = ISO_DATETIME_PATTERN.test(schedule) && !ISO_TIMEZONE_PATTERN.test(schedule);\n\tconst normalized = ISO_DATETIME_PATTERN.test(schedule) ? schedule.replace(\" \", \"T\") : schedule;\n\tconst input = withoutZone ? `${normalized}Z` : normalized;\n\treturn new Date(input).toISOString();\n}\n\n/** Max length for a task name */\nconst MAX_TASK_NAME_LENGTH = 128;\n/** Task name pattern: alphanumeric, dashes, underscores */\nconst TASK_NAME_RE = /^[a-zA-Z][a-zA-Z0-9_-]*$/;\n\n/**\n * Validate a cron task name.\n * Must be non-empty, ≤128 chars, alphanumeric with dashes/underscores.\n */\nexport function validateTaskName(name: string): void {\n\tif (!name || name.length > MAX_TASK_NAME_LENGTH) {\n\t\tthrow new Error(\n\t\t\t`Invalid task name: must be 1-${MAX_TASK_NAME_LENGTH} characters, got ${name.length}`,\n\t\t);\n\t}\n\tif (!TASK_NAME_RE.test(name)) {\n\t\tthrow new Error(\n\t\t\t`Invalid task name \"${name}\": must start with a letter and contain only letters, numbers, dashes, or underscores`,\n\t\t);\n\t}\n}\n\n/**\n * Validate a schedule string at registration time.\n * Must be a valid cron expression or a parseable ISO 8601 datetime.\n */\nexport function validateSchedule(schedule: string): void {\n\tif (!schedule || schedule.length > 256) {\n\t\tthrow new Error(`Invalid schedule: must be 1-256 characters, got ${schedule.length}`);\n\t}\n\n\t// Try cron first\n\tif (isCronExpression(schedule)) return;\n\n\tconst parsed = Date.parse(schedule);\n\tif (isNaN(parsed)) {\n\t\tthrow new Error(\n\t\t\t`Invalid schedule \"${schedule}\": must be a valid cron expression or ISO 8601 datetime`,\n\t\t);\n\t}\n}\n"],"mappings":";;;;;;;;;;;;;;AAkBA,MAAM,gBAAgB;;AAGtB,MAAM,qBAAqB;AAC3B,MAAM,uBACL;AACD,MAAM,uBAAuB;;;;;;;;AAsB7B,IAAa,eAAb,MAA0B;;;;;;;;;CASzB,AAAiB;CAEjB,YACC,IACA,AAAQ,gBACR,AAAiB,4BAAwB,IAAI,MAAM,EAClD;EAFO;EACS;AAEjB,OAAK,YAAY,OAAO,OAAO,aAAa,WAAW;;CAGxD,IAAY,KAAuB;AAClC,SAAO,KAAK,WAAW;;;;;;;;;;CAWxB,MAAM,OAAwB;EAC7B,MAAM,cAAc,KAAK,KAAK;EAC9B,MAAM,MAAM,YAAY,aAAa;EACrC,IAAI,YAAY;EAGhB,MAAM,UAAU,MAAM,GAQpB;;yCAEqC,IAAI;;;2BAGlB,IAAI;;;;;;;IAO3B,QAAQ,KAAK,GAAG;AAElB,OAAK,MAAM,QAAQ,QAAQ,MAAM;GAEhC,IAAI;AACJ,OAAI,KAAK,KACR,KAAI;AACH,iBAAa,KAAK,MAAM,KAAK,KAAK;WAC3B;AACP,YAAQ,MACP,gCAAgC,KAAK,UAAU,GAAG,KAAK,UAAU,YACjE;AACD,UAAM,GAAG;;;mBAGK,KAAK,GAAG;OACpB,QAAQ,KAAK,GAAG;AAClB;;GAIF,MAAM,QAAmB;IACxB,MAAM,KAAK;IACX,MAAM;IACN,aAAa,KAAK;IAClB;GAED,IAAI,aAAa;AACjB,OAAI;AACH,UAAM,KAAK,eAAe,KAAK,WAAW,MAAM;YACxC,OAAO;AACf,iBAAa;AACb,YAAQ,MAAM,0BAA0B,KAAK,UAAU,GAAG,KAAK,UAAU,IAAI,MAAM;;AAGpF,OAAI,KAAK,WACR,KAAI,YAAY;IAGf,MAAM,OACL,YAAY,YAAY,QAAQ,OAAO,WAAW,aAAa,WAC3D,WAAW,WACZ;IACJ,MAAM,MAAM,MAAM;IAClB,MAAM,aACL,OAAO,QAAQ,YAAY,OAAO,SAAS,IAAI,IAAI,MAAM,IAAI,KAAK,MAAM,IAAI,GAAG;IAChF,MAAM,sBAAsB;AAE5B,QAAI,cAAc,qBAAqB;AACtC,aAAQ,MACP,wBAAwB,KAAK,UAAU,GAAG,KAAK,UAAU,YAAY,oBAAoB,oBACzF;AACD,WAAM,GAAG;kDACmC,KAAK,GAAG;OACnD,QAAQ,KAAK,GAAG;WACX;KAEN,MAAM,YAAY,MAAS,KAAK,IAAI,GAAG,WAAW;AAMlD,WAAM,GAAG;;6DALO,IAAI,KAAK,YAAY,SAAS,GAAG,UAAU,CAAC,aAAa,CAOV,WAN3C,KAAK,UAAU;MAClC,GAAG;MACH,UAAU;OAAE,GAAG;OAAM,YAAY,aAAa;OAAG;MACjD,CAAC,CAGoF;mBACzE,KAAK,GAAG;OACpB,QAAQ,KAAK,GAAG;;SAIlB,OAAM,GAAG;kDACoC,KAAK,GAAG;OACnD,QAAQ,KAAK,GAAG;QAEb;IAEN,IAAI;AACJ,QAAI;AACH,eAAU,aAAa,KAAK,UAAU,YAAY;aAC1C,OAAO;AACf,aAAQ,MACP,+CAA+C,KAAK,UAAU,GAAG,KAAK,UAAU,IAChF,MACA;AACD,WAAM,GAAG;;6DAE+C,IAAI;mBAC9C,KAAK,GAAG;OACpB,QAAQ,KAAK,GAAG;AAClB;AACA;;AAED,UAAM,GAAG;;;;sBAIS,IAAI;sBACJ,QAAQ;kBACZ,KAAK,GAAG;MACpB,QAAQ,KAAK,GAAG;;AAGnB;;AAGD,SAAO;;;;;;CAOR,MAAM,oBAAqC;EAG1C,MAAM,SAAS,MAAM,GAAG;;;;wCAFT,IAAI,KAAK,KAAK,KAAK,CAAC,SAAS,GAAG,qBAAqB,KAAK,IAAK,EAAC,aAAa,CAMhE;IAC1B,QAAQ,KAAK,GAAG;AAElB,SAAO,OAAO,OAAO,mBAAmB,EAAE;;;;;;CAO3C,MAAM,iBAAyC;AAO9C,UANe,MAAM,GAA4B;;;;IAI/C,QAAQ,KAAK,GAAG,EAEJ,KAAK,IAAI,QAAQ;;;;;;;AAUjC,IAAa,iBAAb,MAAkD;CACjD,YACC,AAAQ,IACR,AAAQ,UACR,AAAQ,YACR,AAAiB,4BAAwB,IAAI,MAAM,EAClD;EAJO;EACA;EACA;EACS;;CAGlB,MAAM,SACL,MACA,MACgB;AAChB,mBAAiB,KAAK;AACtB,mBAAiB,KAAK,SAAS;EAE/B,MAAM,UAAU,UAAU,KAAK,SAAS;EACxC,MAAM,UAAU,UAAU,YAAY,KAAK,SAAS,GAAG,aAAa,KAAK,UAAU,KAAK,KAAK,CAAC;EAC9F,MAAM,WAAW,KAAK,OAAO,KAAK,UAAU,KAAK,KAAK,GAAG;AAKzD,QAAM,GAAG;;aAJE,MAAM,CAMH,IAAI,KAAK,SAAS,IAAI,KAAK,IAAI,KAAK,SAAS,IAAI,UAAU,IAAI,EAAE,IAAI,SAAS,IAAI,QAAQ;;iBAEzF,KAAK,SAAS;mBACZ,UAAU,IAAI,EAAE;aACtB,SAAS;oBACF,QAAQ;;;;IAIxB,QAAQ,KAAK,GAAG;AAElB,OAAK,YAAY;;CAGlB,MAAM,OAAO,MAA6B;AACzC,QAAM,GAAG;;uBAEY,KAAK,SAAS,mBAAmB,KAAK;IACzD,QAAQ,KAAK,GAAG;AAElB,OAAK,YAAY;;CAGlB,MAAM,OAAgC;AAarC,UAZa,MAAM,GAKjB;;;uBAGmB,KAAK,SAAS;;IAEjC,QAAQ,KAAK,GAAG,EAEN,KAAK,KAAK,SAAS;GAC9B,MAAM,IAAI;GACV,UAAU,IAAI;GACd,WAAW,IAAI;GACf,WAAW,IAAI;GACf,EAAE;;;;;;;;AAWL,eAAsB,oBACrB,IACA,UACA,SACgB;AAChB,KAAI;AACH,QAAM,GAAG;;mBAEQ,UAAU,IAAI,EAAE;uBACZ,SAAS;IAC5B,QAAQ,GAAG;SACN;;;;;;;AAYT,SAAgB,aAAa,YAAoB,8BAAoB,IAAI,MAAM,EAAU;CAExF,MAAM,OADM,IAAI,KAAK,YAAY,EAAE,UAAU,eAAe,CAAC,CAC5C,QAAQ,YAAY;AACrC,KAAI,CAAC,KACJ,OAAM,IAAI,MAAM,8CAA8C,WAAW,GAAG;AAE7E,QAAO,KAAK,aAAa;;;;;AAM1B,SAAS,iBAAiB,UAA2B;AACpD,KAAI;AACW,MAAI,KAAK,UAAU,EAAE,UAAU,eAAe,CAAC;AAE7D,SAAO;SACA;AACP,SAAO;;;;;;;;;;;AAYT,SAAgB,UAAU,UAA2B;AACpD,KAAI,SAAS,WAAW,IAAI,CAAE,QAAO;AACrC,KAAI,qBAAqB,KAAK,SAAS,CACtC,QAAO,CAAC,MAAM,KAAK,MAAM,SAAS,CAAC;AAEpC,KAAI,iBAAiB,SAAS,CAAE,QAAO;AACvC,QAAO,CAAC,MAAM,KAAK,MAAM,SAAS,CAAC;;AAGpC,SAAS,YAAY,UAA0B;CAC9C,MAAM,cAAc,qBAAqB,KAAK,SAAS,IAAI,CAAC,qBAAqB,KAAK,SAAS;CAC/F,MAAM,aAAa,qBAAqB,KAAK,SAAS,GAAG,SAAS,QAAQ,KAAK,IAAI,GAAG;CACtF,MAAM,QAAQ,cAAc,GAAG,WAAW,KAAK;AAC/C,QAAO,IAAI,KAAK,MAAM,CAAC,aAAa;;;AAIrC,MAAM,uBAAuB;;AAE7B,MAAM,eAAe;;;;;AAMrB,SAAgB,iBAAiB,MAAoB;AACpD,KAAI,CAAC,QAAQ,KAAK,SAAS,qBAC1B,OAAM,IAAI,MACT,gCAAgC,qBAAqB,mBAAmB,KAAK,SAC7E;AAEF,KAAI,CAAC,aAAa,KAAK,KAAK,CAC3B,OAAM,IAAI,MACT,sBAAsB,KAAK,uFAC3B;;;;;;AAQH,SAAgB,iBAAiB,UAAwB;AACxD,KAAI,CAAC,YAAY,SAAS,SAAS,IAClC,OAAM,IAAI,MAAM,mDAAmD,SAAS,SAAS;AAItF,KAAI,iBAAiB,SAAS,CAAE;CAEhC,MAAM,SAAS,KAAK,MAAM,SAAS;AACnC,KAAI,MAAM,OAAO,CAChB,OAAM,IAAI,MACT,qBAAqB,SAAS,yDAC9B"}

package/dist/dashboard-BoV4pwPP.mjs

@@ -0,0 +1,151 @@
+import { t as validateIdentifier } from "./validate-DANX1-Qi.mjs";
+import { t as OptionsRepository } from "./options-DhrI7eMv.mjs";
+import { t as ContentRepository } from "./content-RzEXY3QX.mjs";
+import { t as MediaRepository } from "./media-CputjGE1.mjs";
+import { t as UserRepository } from "./user-BOvuF1sQ.mjs";
+import { r as isScheduledPolicyRejection, t as SCHEDULED_POLICY_REJECTION_PREFIX } from "./content-policy-Dm32n9C6.mjs";
+import { sql } from "kysely";
+
+//#region src/scheduler-health.ts
+const SCHEDULER_HEARTBEAT_OPTION = "system:scheduler:last_completed_at";
+const SCHEDULER_STALE_AFTER_MS = 300 * 1e3;
+async function recordSchedulerHeartbeat(db, completedAt = /* @__PURE__ */ new Date()) {
+	await new OptionsRepository(db).set(SCHEDULER_HEARTBEAT_OPTION, completedAt.toISOString());
+}
+async function recordSchedulerHeartbeatSafely(db, completedAt = /* @__PURE__ */ new Date()) {
+	try {
+		await recordSchedulerHeartbeat(db, completedAt);
+	} catch (error) {
+		console.error("[scheduler] Failed to record heartbeat:", error);
+	}
+}
+async function getSchedulerHealth(db, now = /* @__PURE__ */ new Date()) {
+	const lastCompletedAt = await new OptionsRepository(db).get(SCHEDULER_HEARTBEAT_OPTION);
+	const lastCompletedAtMs = lastCompletedAt ? Date.parse(lastCompletedAt) : NaN;
+	if (!lastCompletedAt || Number.isNaN(lastCompletedAtMs)) return {
+		status: "unknown",
+		lastCompletedAt: null
+	};
+	return {
+		status: now.getTime() - lastCompletedAtMs > SCHEDULER_STALE_AFTER_MS ? "stale" : "healthy",
+		lastCompletedAt
+	};
+}
+
+//#endregion
+//#region src/api/handlers/dashboard.ts
+/**
+* Dashboard stats handler
+*
+* Returns summary data for the admin dashboard in a single request:
+* collection content counts, media count, user count, and recent
+* content across all collections.
+*/
+const POLICY_REJECTION_PREVIEW_LIMIT = 20;
+/**
+* Fetch dashboard statistics.
+*
+* Queries are intentionally lightweight — counts use indexed columns,
+* and recent items are capped at 10.
+*/
+async function handleDashboardStats(db, now = /* @__PURE__ */ new Date()) {
+	try {
+		const collections = await db.selectFrom("_emdash_collections").select(["slug", "label"]).orderBy("slug", "asc").execute();
+		const contentRepo = new ContentRepository(db);
+		const collectionStats = await Promise.all(collections.map(async (col) => {
+			const stats = await contentRepo.getStats(col.slug, now);
+			return {
+				slug: col.slug,
+				label: col.label,
+				total: stats.total,
+				published: stats.published,
+				draft: stats.draft,
+				scheduled: stats.scheduled,
+				overdueScheduled: stats.overdueScheduled
+			};
+		}));
+		const mediaRepo = new MediaRepository(db);
+		const userRepo = new UserRepository(db);
+		const optionsRepo = new OptionsRepository(db);
+		const [mediaCount, userCount, schedulerHealth, policyRejectedScheduled, versionedPolicyRejectionOptions] = await Promise.all([
+			mediaRepo.count(),
+			userRepo.count(),
+			getSchedulerHealth(db, now),
+			optionsRepo.countByPrefix(SCHEDULED_POLICY_REJECTION_PREFIX),
+			optionsRepo.getVersionedByPrefix(SCHEDULED_POLICY_REJECTION_PREFIX, { limit: POLICY_REJECTION_PREVIEW_LIMIT })
+		]);
+		const policyRejections = [...versionedPolicyRejectionOptions.values()].filter(({ value }) => isScheduledPolicyRejection(value)).map(({ value, revision }) => ({
+			...value,
+			_rev: revision
+		}));
+		return {
+			success: true,
+			data: {
+				collections: collectionStats,
+				mediaCount,
+				userCount,
+				recentItems: await fetchRecentItems(db, collections),
+				schedulerHealth,
+				policyRejectedScheduled,
+				policyRejections
+			}
+		};
+	} catch (error) {
+		console.error("Dashboard stats error:", error);
+		return {
+			success: false,
+			error: {
+				code: "DASHBOARD_STATS_ERROR",
+				message: "Failed to load dashboard statistics"
+			}
+		};
+	}
+}
+/**
+* Fetch the 10 most recently updated items across all collections.
+*
+* Uses UNION ALL over each ec_* table. The query is safe because
+* collection slugs come from the system table and are validated.
+*
+* `title` is not a standard column — it's a user-defined field. We query
+* `_emdash_fields` to discover which collections have one and fall back
+* to `slug` (which is always present) otherwise.
+*/
+async function fetchRecentItems(db, collections) {
+	if (collections.length === 0) return [];
+	const titleFields = await db.selectFrom("_emdash_fields as f").innerJoin("_emdash_collections as c", "c.id", "f.collection_id").select(["c.slug as collection_slug"]).where("f.slug", "=", "title").execute();
+	const collectionsWithTitle = new Set(titleFields.map((r) => r.collection_slug));
+	return (await Promise.all(collections.map(async (col) => {
+		validateIdentifier(col.slug);
+		const table = `ec_${col.slug}`;
+		const titleExpr = collectionsWithTitle.has(col.slug) ? sql`COALESCE(title, slug, id)` : sql`COALESCE(slug, id)`;
+		return (await sql`
+				SELECT
+					id,
+					${sql.lit(col.slug)} AS collection,
+					${sql.lit(col.label)} AS collection_label,
+					${titleExpr} AS title,
+					slug,
+					status,
+					updated_at,
+					author_id
+				FROM ${sql.ref(table)}
+				WHERE deleted_at IS NULL
+				ORDER BY updated_at DESC
+				LIMIT 10
+			`.execute(db)).rows;
+	}))).flat().toSorted((a, b) => a.updated_at < b.updated_at ? 1 : a.updated_at > b.updated_at ? -1 : 0).slice(0, 10).map((row) => ({
+		id: row.id,
+		collection: row.collection,
+		collectionLabel: row.collection_label,
+		title: row.title,
+		slug: row.slug,
+		status: row.status,
+		updatedAt: row.updated_at,
+		authorId: row.author_id
+	}));
+}
+
+//#endregion
+export { recordSchedulerHeartbeatSafely as n, handleDashboardStats as t };
+//# sourceMappingURL=dashboard-BoV4pwPP.mjs.map

package/dist/dashboard-BoV4pwPP.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"dashboard-BoV4pwPP.mjs","names":[],"sources":["../src/scheduler-health.ts","../src/api/handlers/dashboard.ts"],"sourcesContent":["import type { Kysely } from \"kysely\";\n\nimport { OptionsRepository } from \"./database/repositories/options.js\";\nimport type { Database } from \"./database/types.js\";\n\nexport const SCHEDULER_HEARTBEAT_OPTION = \"system:scheduler:last_completed_at\";\nexport const SCHEDULER_STALE_AFTER_MS = 5 * 60 * 1000;\n\nexport interface SchedulerHealth {\n\tstatus: \"healthy\" | \"stale\" | \"unknown\";\n\tlastCompletedAt: string | null;\n}\n\nexport async function recordSchedulerHeartbeat(\n\tdb: Kysely<Database>,\n\tcompletedAt = new Date(),\n): Promise<void> {\n\tawait new OptionsRepository(db).set(SCHEDULER_HEARTBEAT_OPTION, completedAt.toISOString());\n}\n\nexport async function recordSchedulerHeartbeatSafely(\n\tdb: Kysely<Database>,\n\tcompletedAt = new Date(),\n): Promise<void> {\n\ttry {\n\t\tawait recordSchedulerHeartbeat(db, completedAt);\n\t} catch (error) {\n\t\tconsole.error(\"[scheduler] Failed to record heartbeat:\", error);\n\t}\n}\n\nexport async function getSchedulerHealth(\n\tdb: Kysely<Database>,\n\tnow = new Date(),\n): Promise<SchedulerHealth> {\n\tconst lastCompletedAt = await new OptionsRepository(db).get<string>(SCHEDULER_HEARTBEAT_OPTION);\n\tconst lastCompletedAtMs = lastCompletedAt ? Date.parse(lastCompletedAt) : Number.NaN;\n\tif (!lastCompletedAt || Number.isNaN(lastCompletedAtMs)) {\n\t\treturn { status: \"unknown\", lastCompletedAt: null };\n\t}\n\n\treturn {\n\t\tstatus: now.getTime() - lastCompletedAtMs > SCHEDULER_STALE_AFTER_MS ? \"stale\" : \"healthy\",\n\t\tlastCompletedAt,\n\t};\n}\n","/**\n * Dashboard stats handler\n *\n * Returns summary data for the admin dashboard in a single request:\n * collection content counts, media count, user count, and recent\n * content across all collections.\n */\n\nimport { sql, type Kysely } from \"kysely\";\n\nimport { ContentRepository } from \"../../database/repositories/content.js\";\nimport { MediaRepository } from \"../../database/repositories/media.js\";\nimport { OptionsRepository } from \"../../database/repositories/options.js\";\nimport { UserRepository } from \"../../database/repositories/user.js\";\nimport type { Database } from \"../../database/types.js\";\nimport { validateIdentifier } from \"../../database/validate.js\";\nimport {\n\tSCHEDULED_POLICY_REJECTION_PREFIX,\n\tisScheduledPolicyRejection,\n\ttype ScheduledPolicyRejection,\n\ttype VersionedScheduledPolicyRejection,\n} from \"../../plugins/content-policy.js\";\nimport { getSchedulerHealth, type SchedulerHealth } from \"../../scheduler-health.js\";\nimport type { ApiResult } from \"../types.js\";\n\nexport interface CollectionStats {\n\tslug: string;\n\tlabel: string;\n\ttotal: number;\n\tpublished: number;\n\tdraft: number;\n\tscheduled: number;\n\toverdueScheduled: number;\n}\n\nexport interface RecentItem {\n\tid: string;\n\tcollection: string;\n\tcollectionLabel: string;\n\ttitle: string;\n\tslug: string | null;\n\tstatus: string;\n\tupdatedAt: string;\n\tauthorId: string | null;\n}\n\nexport interface DashboardStats {\n\tcollections: CollectionStats[];\n\tmediaCount: number;\n\tuserCount: number;\n\trecentItems: RecentItem[];\n\tschedulerHealth: SchedulerHealth;\n\tpolicyRejectedScheduled: number;\n\tpolicyRejections: VersionedScheduledPolicyRejection[];\n}\n\nconst POLICY_REJECTION_PREVIEW_LIMIT = 20;\n\n/**\n * Fetch dashboard statistics.\n *\n * Queries are intentionally lightweight — counts use indexed columns,\n * and recent items are capped at 10.\n */\nexport async function handleDashboardStats(\n\tdb: Kysely<Database>,\n\tnow = new Date(),\n): Promise<ApiResult<DashboardStats>> {\n\ttry {\n\t\t// Discover collections from the system table\n\t\tconst collections = await db\n\t\t\t.selectFrom(\"_emdash_collections\")\n\t\t\t.select([\"slug\", \"label\"])\n\t\t\t.orderBy(\"slug\", \"asc\")\n\t\t\t.execute();\n\n\t\t// Gather per-collection counts in parallel\n\t\tconst contentRepo = new ContentRepository(db);\n\t\tconst collectionStats: CollectionStats[] = await Promise.all(\n\t\t\tcollections.map(async (col) => {\n\t\t\t\tconst stats = await contentRepo.getStats(col.slug, now);\n\t\t\t\treturn {\n\t\t\t\t\tslug: col.slug,\n\t\t\t\t\tlabel: col.label,\n\t\t\t\t\ttotal: stats.total,\n\t\t\t\t\tpublished: stats.published,\n\t\t\t\t\tdraft: stats.draft,\n\t\t\t\t\tscheduled: stats.scheduled,\n\t\t\t\t\toverdueScheduled: stats.overdueScheduled,\n\t\t\t\t};\n\t\t\t}),\n\t\t);\n\n\t\t// Media and user counts\n\t\tconst mediaRepo = new MediaRepository(db);\n\t\tconst userRepo = new UserRepository(db);\n\t\tconst optionsRepo = new OptionsRepository(db);\n\t\tconst [\n\t\t\tmediaCount,\n\t\t\tuserCount,\n\t\t\tschedulerHealth,\n\t\t\tpolicyRejectedScheduled,\n\t\t\tversionedPolicyRejectionOptions,\n\t\t] = await Promise.all([\n\t\t\tmediaRepo.count(),\n\t\t\tuserRepo.count(),\n\t\t\tgetSchedulerHealth(db, now),\n\t\t\toptionsRepo.countByPrefix(SCHEDULED_POLICY_REJECTION_PREFIX),\n\t\t\toptionsRepo.getVersionedByPrefix<ScheduledPolicyRejection>(\n\t\t\t\tSCHEDULED_POLICY_REJECTION_PREFIX,\n\t\t\t\t{\n\t\t\t\t\tlimit: POLICY_REJECTION_PREVIEW_LIMIT,\n\t\t\t\t},\n\t\t\t),\n\t\t]);\n\t\tconst policyRejections = [...versionedPolicyRejectionOptions.values()]\n\t\t\t.filter(({ value }) => isScheduledPolicyRejection(value))\n\t\t\t.map(({ value, revision }) => ({ ...value, _rev: revision }));\n\n\t\t// Recent items across all collections (last 10 updated, any status)\n\t\tconst recentItems = await fetchRecentItems(db, collections);\n\n\t\treturn {\n\t\t\tsuccess: true,\n\t\t\tdata: {\n\t\t\t\tcollections: collectionStats,\n\t\t\t\tmediaCount,\n\t\t\t\tuserCount,\n\t\t\t\trecentItems,\n\t\t\t\tschedulerHealth,\n\t\t\t\tpolicyRejectedScheduled,\n\t\t\t\tpolicyRejections,\n\t\t\t},\n\t\t};\n\t} catch (error) {\n\t\tconsole.error(\"Dashboard stats error:\", error);\n\t\treturn {\n\t\t\tsuccess: false,\n\t\t\terror: {\n\t\t\t\tcode: \"DASHBOARD_STATS_ERROR\",\n\t\t\t\tmessage: \"Failed to load dashboard statistics\",\n\t\t\t},\n\t\t};\n\t}\n}\n\n/** Raw row shape from the UNION ALL query — all snake_case. */\ninterface RecentItemRow {\n\tid: string;\n\tcollection: string;\n\tcollection_label: string;\n\ttitle: string;\n\tslug: string | null;\n\tstatus: string;\n\tupdated_at: string;\n\tauthor_id: string | null;\n}\n\n/**\n * Fetch the 10 most recently updated items across all collections.\n *\n * Uses UNION ALL over each ec_* table. The query is safe because\n * collection slugs come from the system table and are validated.\n *\n * `title` is not a standard column — it's a user-defined field. We query\n * `_emdash_fields` to discover which collections have one and fall back\n * to `slug` (which is always present) otherwise.\n */\nasync function fetchRecentItems(\n\tdb: Kysely<Database>,\n\tcollections: Array<{ slug: string; label: string }>,\n): Promise<RecentItem[]> {\n\tif (collections.length === 0) return [];\n\n\t// Discover which collections have a \"title\" column\n\tconst titleFields = await db\n\t\t.selectFrom(\"_emdash_fields as f\")\n\t\t.innerJoin(\"_emdash_collections as c\", \"c.id\", \"f.collection_id\")\n\t\t.select([\"c.slug as collection_slug\"])\n\t\t.where(\"f.slug\", \"=\", \"title\")\n\t\t.execute();\n\n\tconst collectionsWithTitle = new Set(titleFields.map((r) => r.collection_slug));\n\n\t// Issue one query per collection in parallel, then merge in JS.\n\t// A single UNION ALL across N collections trips D1's\n\t// SQLITE_LIMIT_COMPOUND_SELECT cap when N is large enough (#895);\n\t// per-collection queries side-step that. Each query fetches at most\n\t// 10 rows, so the merge handles at most N * 10 rows before slicing.\n\tconst perCollection = await Promise.all(\n\t\tcollections.map(async (col) => {\n\t\t\tvalidateIdentifier(col.slug);\n\t\t\tconst table = `ec_${col.slug}`;\n\t\t\tconst hasTitle = collectionsWithTitle.has(col.slug);\n\n\t\t\t// Use title column if it exists, otherwise fall back to slug, id.\n\t\t\t// All output uses snake_case to avoid SQLite quoting issues on D1.\n\t\t\tconst titleExpr = hasTitle ? sql`COALESCE(title, slug, id)` : sql`COALESCE(slug, id)`;\n\n\t\t\tconst result = await sql<RecentItemRow>`\n\t\t\t\tSELECT\n\t\t\t\t\tid,\n\t\t\t\t\t${sql.lit(col.slug)} AS collection,\n\t\t\t\t\t${sql.lit(col.label)} AS collection_label,\n\t\t\t\t\t${titleExpr} AS title,\n\t\t\t\t\tslug,\n\t\t\t\t\tstatus,\n\t\t\t\t\tupdated_at,\n\t\t\t\t\tauthor_id\n\t\t\t\tFROM ${sql.ref(table)}\n\t\t\t\tWHERE deleted_at IS NULL\n\t\t\t\tORDER BY updated_at DESC\n\t\t\t\tLIMIT 10\n\t\t\t`.execute(db);\n\t\t\treturn result.rows;\n\t\t}),\n\t);\n\n\t// Merge across collections, sort by updated_at desc, take top 10.\n\tconst merged = perCollection\n\t\t.flat()\n\t\t.toSorted((a, b) => (a.updated_at < b.updated_at ? 1 : a.updated_at > b.updated_at ? -1 : 0))\n\t\t.slice(0, 10);\n\n\t// Map snake_case DB rows to camelCase API shape\n\treturn merged.map((row) => ({\n\t\tid: row.id,\n\t\tcollection: row.collection,\n\t\tcollectionLabel: row.collection_label,\n\t\ttitle: row.title,\n\t\tslug: row.slug,\n\t\tstatus: row.status,\n\t\tupdatedAt: row.updated_at,\n\t\tauthorId: row.author_id,\n\t}));\n}\n"],"mappings":";;;;;;;;;AAKA,MAAa,6BAA6B;AAC1C,MAAa,2BAA2B,MAAS;AAOjD,eAAsB,yBACrB,IACA,8BAAc,IAAI,MAAM,EACR;AAChB,OAAM,IAAI,kBAAkB,GAAG,CAAC,IAAI,4BAA4B,YAAY,aAAa,CAAC;;AAG3F,eAAsB,+BACrB,IACA,8BAAc,IAAI,MAAM,EACR;AAChB,KAAI;AACH,QAAM,yBAAyB,IAAI,YAAY;UACvC,OAAO;AACf,UAAQ,MAAM,2CAA2C,MAAM;;;AAIjE,eAAsB,mBACrB,IACA,sBAAM,IAAI,MAAM,EACW;CAC3B,MAAM,kBAAkB,MAAM,IAAI,kBAAkB,GAAG,CAAC,IAAY,2BAA2B;CAC/F,MAAM,oBAAoB,kBAAkB,KAAK,MAAM,gBAAgB,GAAG;AAC1E,KAAI,CAAC,mBAAmB,OAAO,MAAM,kBAAkB,CACtD,QAAO;EAAE,QAAQ;EAAW,iBAAiB;EAAM;AAGpD,QAAO;EACN,QAAQ,IAAI,SAAS,GAAG,oBAAoB,2BAA2B,UAAU;EACjF;EACA;;;;;;;;;;;;ACYF,MAAM,iCAAiC;;;;;;;AAQvC,eAAsB,qBACrB,IACA,sBAAM,IAAI,MAAM,EACqB;AACrC,KAAI;EAEH,MAAM,cAAc,MAAM,GACxB,WAAW,sBAAsB,CACjC,OAAO,CAAC,QAAQ,QAAQ,CAAC,CACzB,QAAQ,QAAQ,MAAM,CACtB,SAAS;EAGX,MAAM,cAAc,IAAI,kBAAkB,GAAG;EAC7C,MAAM,kBAAqC,MAAM,QAAQ,IACxD,YAAY,IAAI,OAAO,QAAQ;GAC9B,MAAM,QAAQ,MAAM,YAAY,SAAS,IAAI,MAAM,IAAI;AACvD,UAAO;IACN,MAAM,IAAI;IACV,OAAO,IAAI;IACX,OAAO,MAAM;IACb,WAAW,MAAM;IACjB,OAAO,MAAM;IACb,WAAW,MAAM;IACjB,kBAAkB,MAAM;IACxB;IACA,CACF;EAGD,MAAM,YAAY,IAAI,gBAAgB,GAAG;EACzC,MAAM,WAAW,IAAI,eAAe,GAAG;EACvC,MAAM,cAAc,IAAI,kBAAkB,GAAG;EAC7C,MAAM,CACL,YACA,WACA,iBACA,yBACA,mCACG,MAAM,QAAQ,IAAI;GACrB,UAAU,OAAO;GACjB,SAAS,OAAO;GAChB,mBAAmB,IAAI,IAAI;GAC3B,YAAY,cAAc,kCAAkC;GAC5D,YAAY,qBACX,mCACA,EACC,OAAO,gCACP,CACD;GACD,CAAC;EACF,MAAM,mBAAmB,CAAC,GAAG,gCAAgC,QAAQ,CAAC,CACpE,QAAQ,EAAE,YAAY,2BAA2B,MAAM,CAAC,CACxD,KAAK,EAAE,OAAO,gBAAgB;GAAE,GAAG;GAAO,MAAM;GAAU,EAAE;AAK9D,SAAO;GACN,SAAS;GACT,MAAM;IACL,aAAa;IACb;IACA;IACA,aARkB,MAAM,iBAAiB,IAAI,YAAY;IASzD;IACA;IACA;IACA;GACD;UACO,OAAO;AACf,UAAQ,MAAM,0BAA0B,MAAM;AAC9C,SAAO;GACN,SAAS;GACT,OAAO;IACN,MAAM;IACN,SAAS;IACT;GACD;;;;;;;;;;;;;AA0BH,eAAe,iBACd,IACA,aACwB;AACxB,KAAI,YAAY,WAAW,EAAG,QAAO,EAAE;CAGvC,MAAM,cAAc,MAAM,GACxB,WAAW,sBAAsB,CACjC,UAAU,4BAA4B,QAAQ,kBAAkB,CAChE,OAAO,CAAC,4BAA4B,CAAC,CACrC,MAAM,UAAU,KAAK,QAAQ,CAC7B,SAAS;CAEX,MAAM,uBAAuB,IAAI,IAAI,YAAY,KAAK,MAAM,EAAE,gBAAgB,CAAC;AA2C/E,SApCsB,MAAM,QAAQ,IACnC,YAAY,IAAI,OAAO,QAAQ;AAC9B,qBAAmB,IAAI,KAAK;EAC5B,MAAM,QAAQ,MAAM,IAAI;EAKxB,MAAM,YAJW,qBAAqB,IAAI,IAAI,KAAK,GAItB,GAAG,8BAA8B,GAAG;AAiBjE,UAfe,MAAM,GAAkB;;;OAGnC,IAAI,IAAI,IAAI,KAAK,CAAC;OAClB,IAAI,IAAI,IAAI,MAAM,CAAC;OACnB,UAAU;;;;;WAKN,IAAI,IAAI,MAAM,CAAC;;;;KAIrB,QAAQ,GAAG,EACC;GACb,CACF,EAIC,MAAM,CACN,UAAU,GAAG,MAAO,EAAE,aAAa,EAAE,aAAa,IAAI,EAAE,aAAa,EAAE,aAAa,KAAK,EAAG,CAC5F,MAAM,GAAG,GAAG,CAGA,KAAK,SAAS;EAC3B,IAAI,IAAI;EACR,YAAY,IAAI;EAChB,iBAAiB,IAAI;EACrB,OAAO,IAAI;EACX,MAAM,IAAI;EACV,QAAQ,IAAI;EACZ,WAAW,IAAI;EACf,UAAU,IAAI;EACd,EAAE"}

package/dist/database/instrumentation.d.mts

@@ -16,6 +16,19 @@ interface QueryRecorder {
   route: string;
   method: string;
   phase: string;
+  /**
+   * Set once the recorder has been emitted, so a flush is idempotent.
+   * Without this, a fallback flush and the stream-end flush could both
+   * fire and double-emit the events.
+   */
+  flushed?: boolean;
+  /**
+   * Set when the response body is wrapped for stream-end metrics. The
+   * recorder is then flushed when the body finishes streaming (so it
+   * captures queries issued by components during streaming) rather than
+   * when middleware returns (headers ready, body not yet streamed).
+   */
+  deferredFlush?: boolean;
 }
 declare function createRecorder(route: string, method: string, phase: string): QueryRecorder;
 declare function recordEvent(rec: QueryRecorder, sql: string, params: readonly unknown[], durationMs: number): void;
@@ -24,6 +37,12 @@ declare function recordEvent(rec: QueryRecorder, sql: string, params: readonly u
  * harness pipes the child's stdout, filters lines beginning with
  * QUERY_LOG_PREFIX, and writes them to its own file. Using stdout means
  * the sink works uniformly in Node and in workerd (which has no fs).
+ *
+ * Idempotent: the first call emits and marks the recorder flushed, later
+ * calls no-op. For streamed responses the flush is deferred to stream end
+ * (see wrapBodyForStreamMetrics) so it captures queries issued while the
+ * body is still rendering; bodyless responses fall back to a flush when
+ * middleware returns.
  */
 declare function flushRecorder(rec: QueryRecorder): void;
 /**
@@ -35,11 +54,22 @@ declare function flushRecorder(rec: QueryRecorder): void;
  */
 declare function isInstrumentationEnabled(): boolean;
 /**
- * Returns a Kysely `log` option when instrumentation is enabled, or undefined.
- * Pass as `new Kysely({ dialect, log: kyselyLogOption() })` so disabled mode
- * has zero overhead — Kysely skips query timing entirely when `log` is absent.
+ * Returns a Kysely `log` callback. Always returns a function so per-request
+ * counters (db.count, db.total, db.first, db.last) and the optional NDJSON
+ * recorder both get fed. The cost over the previous "undefined when off"
+ * behaviour is one `performance.now()` pair per query inside Kysely, which
+ * is in the noise compared to any real query.
  */
-declare function kyselyLogOption(): Logger | undefined;
+declare function kyselyLogOption(): Logger;
+/**
+ * Record physical database round trips for the current request.
+ *
+ * Called by backends that batch (the DO SQL driver coalesces same-turn SELECTs
+ * into one RPC), so we can see round-trip count separately from logical query
+ * count (`dbCount`, bumped by the Kysely log hook). No-op outside a request or
+ * when metrics aren't attached (e.g. migrations on the singleton).
+ */
+declare function recordRpc(count?: number): void;
 //#endregion
-export { QUERY_LOG_ENV, QUERY_LOG_PREFIX, QueryEvent, QueryRecorder, createRecorder, flushRecorder, isInstrumentationEnabled, kyselyLogOption, recordEvent };
+export { QUERY_LOG_ENV, QUERY_LOG_PREFIX, QueryEvent, QueryRecorder, createRecorder, flushRecorder, isInstrumentationEnabled, kyselyLogOption, recordEvent, recordRpc };
 //# sourceMappingURL=instrumentation.d.mts.map

package/dist/database/instrumentation.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"instrumentation.d.mts","names":[],"sources":["../../src/database/instrumentation.ts"],"mappings":";;;cAkBa,aAAA;AAAA,cACA,gBAAA;AAAA,UAEI,UAAA;EAChB,GAAA;EACA,MAAA;EACA,UAAA;EACA,KAAA;EACA,MAAA;EACA,KAAA;AAAA;AAAA,UAGgB,aAAA;EAChB,MAAA,EAAQ,UAAA;EACR,KAAA;EACA,MAAA;EACA,KAAA;AAAA;AAAA,iBAGe,cAAA,CAAe,KAAA,UAAe,MAAA,UAAgB,KAAA,WAAgB,aAAA;AAAA,iBAI9D,WAAA,CACf,GAAA,EAAK,aAAA,EACL,GAAA,UACA,MAAA,sBACA,UAAA;;;;;AARD;;iBA0BgB,aAAA,CAAc,GAAA,EAAK,aAAA;;;;;;;;iBAcnB,wBAAA,CAAA;;;;;;iBAkBA,eAAA,CAAA,GAAmB,MAAA"}
+{"version":3,"file":"instrumentation.d.mts","names":[],"sources":["../../src/database/instrumentation.ts"],"mappings":";;;cAkBa,aAAA;AAAA,cACA,gBAAA;AAAA,UAEI,UAAA;EAChB,GAAA;EACA,MAAA;EACA,UAAA;EACA,KAAA;EACA,MAAA;EACA,KAAA;AAAA;AAAA,UAGgB,aAAA;EAChB,MAAA,EAAQ,UAAA;EACR,KAAA;EACA,MAAA;EACA,KAAA;EAHA;;;;;EASA,OAAA;EAOA;;;AAGD;;;EAHC,aAAA;AAAA;AAAA,iBAGe,cAAA,CAAe,KAAA,UAAe,MAAA,UAAgB,KAAA,WAAgB,aAAA;AAAA,iBAI9D,WAAA,CACf,GAAA,EAAK,aAAA,EACL,GAAA,UACA,MAAA,sBACA,UAAA;;;;AAJD;;;;;;;;;iBA4BgB,aAAA,CAAc,GAAA,EAAK,aAAA;;AAAnC;;;;;AAeA;iBAAgB,wBAAA,CAAA;;;;AAgChB;;;;iBAAgB,eAAA,CAAA,GAAmB,MAAA;AAYnC;;;;;;;;AAAA,iBAAgB,SAAA,CAAU,KAAA"}

package/dist/database/instrumentation.mjs

@@ -26,9 +26,16 @@ function recordEvent(rec, sql, params, durationMs) {
 * harness pipes the child's stdout, filters lines beginning with
 * QUERY_LOG_PREFIX, and writes them to its own file. Using stdout means
 * the sink works uniformly in Node and in workerd (which has no fs).
+*
+* Idempotent: the first call emits and marks the recorder flushed, later
+* calls no-op. For streamed responses the flush is deferred to stream end
+* (see wrapBodyForStreamMetrics) so it captures queries issued while the
+* body is still rendering; bodyless responses fall back to a flush when
+* middleware returns.
 */
 function flushRecorder(rec) {
-	if (rec.events.length === 0) return;
+	if (rec.flushed) return;
+	rec.flushed = true;
 	for (const e of rec.events) console.log(`${QUERY_LOG_PREFIX} ${JSON.stringify(e)}`);
 }
 /**
@@ -43,19 +50,43 @@ function isInstrumentationEnabled() {
 }
 function kyselyLog(event) {
 	if (event.level !== "query") return;
-	const rec = getRequestContext()?.queryRecorder;
-	if (!rec) return;
-	recordEvent(rec, event.query.sql, event.query.parameters, event.queryDurationMillis);
+	const ctx = getRequestContext();
+	if (!ctx) return;
+	const dur = event.queryDurationMillis;
+	if (ctx.metrics) {
+		const m = ctx.metrics;
+		m.dbCount += 1;
+		m.dbTotalMs += dur;
+		const finishedAt = performance.now() - m.start;
+		const startedAt = finishedAt - dur;
+		if (m.dbFirstOffset === null) m.dbFirstOffset = startedAt;
+		m.dbLastOffset = finishedAt;
+	}
+	if (ctx.queryRecorder) recordEvent(ctx.queryRecorder, event.query.sql, event.query.parameters, dur);
 }
 /**
-* Returns a Kysely `log` option when instrumentation is enabled, or undefined.
-* Pass as `new Kysely({ dialect, log: kyselyLogOption() })` so disabled mode
-* has zero overhead — Kysely skips query timing entirely when `log` is absent.
+* Returns a Kysely `log` callback. Always returns a function so per-request
+* counters (db.count, db.total, db.first, db.last) and the optional NDJSON
+* recorder both get fed. The cost over the previous "undefined when off"
+* behaviour is one `performance.now()` pair per query inside Kysely, which
+* is in the noise compared to any real query.
 */
 function kyselyLogOption() {
-	return isInstrumentationEnabled() ? kyselyLog : void 0;
+	return kyselyLog;
+}
+/**
+* Record physical database round trips for the current request.
+*
+* Called by backends that batch (the DO SQL driver coalesces same-turn SELECTs
+* into one RPC), so we can see round-trip count separately from logical query
+* count (`dbCount`, bumped by the Kysely log hook). No-op outside a request or
+* when metrics aren't attached (e.g. migrations on the singleton).
+*/
+function recordRpc(count = 1) {
+	const ctx = getRequestContext();
+	if (ctx?.metrics) ctx.metrics.rpcCount += count;
 }
 
 //#endregion
-export { QUERY_LOG_ENV, QUERY_LOG_PREFIX, createRecorder, flushRecorder, isInstrumentationEnabled, kyselyLogOption, recordEvent };
+export { QUERY_LOG_ENV, QUERY_LOG_PREFIX, createRecorder, flushRecorder, isInstrumentationEnabled, kyselyLogOption, recordEvent, recordRpc };
 //# sourceMappingURL=instrumentation.mjs.map