evolclaw-web 1.0.1 → 1.1.0

package/dist/server.js

@@ -20,13 +20,30 @@ import { setDebugLog, dlog } from './debug-log.js';
 import { aidSource } from './sources/aid.js';
 import { msgSource } from './sources/msg.js';
 import { sessionSource } from './sources/session.js';
+import { cacheSource } from './sources/cache.js';
+import { systemSource } from './sources/system.js';
+import { triggersSource } from './sources/triggers.js';
+import { queryStatsForDashboard, queryStatsExplorer, queryStatsByPeer, queryStatsByAgent, queryStatsOverview } from './sources/stats.js';
+import { getSessionsAunDir, listLocalAids, listPeers, readMessages } from './fs-utils.js';
+import { ccProjectsDir } from './paths.js';
 const __dirname = path.dirname(fileURLToPath(import.meta.url));
 const STATIC_DIR = path.join(__dirname, 'static');
 const TOKEN_TTL_MS = 24 * 60 * 60 * 1000; // 24h
 const PAIRING_TTL_MS = 5 * 60 * 1000; // 5min
 const DEFAULT_PORT = 42705;
 const PROTOCOL_VERSION = 1; // 与 evolclaw ping response 对齐的软校验版本
-const SOURCES = { aid: aidSource, msg: msgSource, session: sessionSource };
+const SOURCES = { agents: aidSource, msg: msgSource, session: sessionSource, cache: cacheSource, system: systemSource, triggers: triggersSource };
+// ECWeb 自身版本：渲染 System 页时随快照下发（不走 daemon IPC，ECWeb 就是这个进程）。
+function readEcwebVersion() {
+    try {
+        const pkg = JSON.parse(fs.readFileSync(path.join(__dirname, '..', 'package.json'), 'utf-8'));
+        return pkg?.version ?? '0.0.0';
+    }
+    catch {
+        return '0.0.0';
+    }
+}
+const ECWEB_VERSION = readEcwebVersion();
 const MIME = {
     '.html': 'text/html; charset=utf-8',
     '.js': 'text/javascript; charset=utf-8',
@@ -108,12 +125,116 @@ function parseUrl(rawUrl) {
     }
     return { path: rawUrl.slice(0, qIdx), query };
 }
+function handleStatsApi(req, res) {
+    const { path: urlPath, query } = parseUrl(req.url || '');
+    res.setHeader('Content-Type', 'application/json');
+    if (urlPath === '/api/stats/dashboard') {
+        const data = queryStatsForDashboard();
+        if (!data) {
+            res.writeHead(503);
+            res.end(JSON.stringify({ error: 'stats unavailable (node:sqlite missing or no data)' }));
+        }
+        else {
+            res.writeHead(200);
+            res.end(JSON.stringify(data));
+        }
+    }
+    else if (urlPath === '/api/stats/explorer') {
+        const params = {};
+        if (query.from)
+            params.from_ts = Number(query.from);
+        if (query.to)
+            params.to_ts = Number(query.to);
+        if (query.agent)
+            params.agent_aid = query.agent;
+        if (query.peer)
+            params.peer_key = query.peer;
+        if (query.model)
+            params.model = query.model;
+        if (query.granularity)
+            params.granularity = query.granularity;
+        const data = queryStatsExplorer(params);
+        res.writeHead(200);
+        res.end(JSON.stringify(data));
+    }
+    else if (urlPath === '/api/stats/peers') {
+        const params = {};
+        if (query.from)
+            params.from_ts = Number(query.from);
+        if (query.to)
+            params.to_ts = Number(query.to);
+        if (query.agent)
+            params.agent_aid = query.agent;
+        if (query.limit)
+            params.limit = Number(query.limit);
+        const data = queryStatsByPeer(params);
+        res.writeHead(200);
+        res.end(JSON.stringify(data));
+    }
+    else if (urlPath === '/api/stats/agents') {
+        const params = {};
+        if (query.from)
+            params.from_ts = Number(query.from);
+        if (query.to)
+            params.to_ts = Number(query.to);
+        if (query.limit)
+            params.limit = Number(query.limit);
+        const data = queryStatsByAgent(params);
+        res.writeHead(200);
+        res.end(JSON.stringify(data));
+    }
+    else if (urlPath === '/api/stats/overview') {
+        const tokenStats = queryStatsOverview();
+        // session count: scan all CC project dirs
+        let sessionCount = 0;
+        try {
+            const base = ccProjectsDir();
+            for (const d of fs.readdirSync(base, { withFileTypes: true })) {
+                if (!d.isDirectory())
+                    continue;
+                try {
+                    sessionCount += fs.readdirSync(path.join(base, d.name)).filter(f => f.endsWith('.jsonl')).length;
+                }
+                catch { }
+            }
+        }
+        catch { }
+        // message counts: scan aun dir
+        let msgIn = 0, msgOut = 0;
+        try {
+            const aunDir = getSessionsAunDir();
+            for (const aid of listLocalAids(aunDir)) {
+                for (const peer of listPeers(aunDir, aid)) {
+                    for (const m of readMessages(aunDir, aid, peer)) {
+                        if (m.dir === 'in')
+                            msgIn++;
+                        else
+                            msgOut++;
+                    }
+                }
+            }
+        }
+        catch { }
+        res.writeHead(200);
+        res.end(JSON.stringify({ token_stats: tokenStats, session_count: sessionCount, msg_in: msgIn, msg_out: msgOut }));
+    }
+    else {
+        res.writeHead(404);
+        res.end(JSON.stringify({ error: 'not found' }));
+    }
+}
 function clientIp(req) {
     const fwd = req.headers['x-forwarded-for'];
     if (typeof fwd === 'string' && fwd)
         return fwd.split(',')[0].trim();
     return req.socket.remoteAddress || '?';
 }
+// 仅 localhost 可访问（取配对码）：直连 socket 地址必须是回环。
+// 不信任 x-forwarded-for（代理头可伪造），只看真实 TCP 来源。
+function isLocalhost(req) {
+    const addr = req.socket.remoteAddress || '';
+    return addr === '127.0.0.1' || addr === '::1' || addr === '::ffff:127.0.0.1';
+}
 function genPairingCode() {
     return String(crypto.randomInt(0, 1000000)).padStart(6, '0');
 }
@@ -173,15 +294,17 @@ function handleConnection(ws, req, log) {
             send({ type: 'error', message: `unknown view: ${view}` });
             return;
         }
+        // System 视图：把 ECWeb 自身版本合并进快照（前端版本卡用）
+        const decorate = (data) => (view === 'system' && data ? { ...data, ecwebVersion: ECWEB_VERSION } : data);
         try {
-            send({ type: 'snapshot', view, data: await source.snapshot(params) });
+            send({ type: 'snapshot', view, data: decorate(await source.snapshot(params)) });
         }
         catch (e) {
             send({ type: 'error', message: `snapshot failed: ${e?.message || e}` });
         }
         unsubscribe = source.subscribe(params, (data) => {
             if (currentView === view)
-                send({ type: 'delta', view, data });
+                send({ type: 'delta', view, data: decorate(data) });
         });
     };
     ws.on('message', async (raw) => {
@@ -206,8 +329,25 @@ function handleConnection(ws, req, log) {
                 params.sessionId = msg.sessionId;
             if (msg.project)
                 params.project = msg.project;
+            if (msg.agent)
+                params.agent = msg.agent;
             dlog(`▸ 订阅 ${msg.view}${msg.aid ? ` aid=${String(msg.aid).split('.')[0]}` : ''}${msg.peer ? ` peer=${String(msg.peer).split('.')[0]}` : ''}${msg.sessionId ? ` session=${String(msg.sessionId).slice(0, 8)}` : ''} from ${ip}`);
             await switchSubscription(msg.view, params);
+            return;
+        }
+        if (msg.type === 'menu' && msg.payload) {
+            const p = resolvePaths();
+            const resp = await ipcQuery(p.socket, { type: 'menu.exec', payload: msg.payload }, 5000);
+            if (resp?.ok) {
+                send({ type: 'menu.response', requestId: msg.requestId, data: resp.response });
+            }
+            else {
+                send({ type: 'menu.response', requestId: msg.requestId, data: {
+                        type: 'menu.response', id: msg.payload?.id ?? '',
+                        error: { code: 'INTERNAL', message: resp?.error ?? 'daemon unreachable' },
+                    } });
+            }
+            return;
         }
     });
     // NAT keepalive: ping every 25s to prevent middlebox from cutting the connection
@@ -270,6 +410,12 @@ export async function startWatchWebServer(opts = {}) {
     }
     const server = http.createServer((req, res) => {
         if (req.method === 'GET' && (req.url || '') === '/api/pair-code') {
+            // 仅 localhost 可取码：远程浏览器拿不到，必须由同机的 `ec watch web` 显示给用户
+            if (!isLocalhost(req)) {
+                res.writeHead(403, { 'Content-Type': 'application/json' });
+                res.end(JSON.stringify({ error: 'forbidden' }));
+                return;
+            }
             const { code, expiresAt } = freshPairing();
             res.writeHead(200, { 'Content-Type': 'application/json' });
             res.end(JSON.stringify({ code, expiresAt }));
@@ -277,6 +423,19 @@ export async function startWatchWebServer(opts = {}) {
         else if (req.method === 'POST' && (req.url || '').startsWith('/api/pair')) {
             handlePair(req, res, pairingCode, pairingExpiry, log);
         }
+        else if (req.method === 'GET' && (req.url || '').startsWith('/api/stats/')) {
+            // Stats API — requires auth
+            const authHeader = req.headers.authorization || '';
+            const bearerToken = authHeader.startsWith('Bearer ') ? authHeader.slice(7) : '';
+            const { query } = parseUrl(req.url || '');
+            const token = bearerToken || query.token || '';
+            if (!validateAndRenew(token, Date.now())) {
+                res.writeHead(401, { 'Content-Type': 'application/json' });
+                res.end(JSON.stringify({ error: 'unauthorized' }));
+                return;
+            }
+            handleStatsApi(req, res);
+        }
         else {
             serveStatic(req, res);
         }

package/dist/sources/aid.js

@@ -92,7 +92,7 @@ async function buildSnapshot() {
     };
 }
 export const aidSource = {
-    kind: 'aid',
+    kind: 'agents',
     async snapshot() {
         return buildSnapshot();
     },

package/dist/sources/cache.js

@@ -0,0 +1,43 @@
+/**
+ * Cache 数据源 — daemon 统一 FileCache 的运行统计（命中率/读盘/驱逐/失效）。
+ *
+ * 复用 daemon 的 IPC socket：拉 `cache-stats`（只读）。IPC 无推送，
+ * 故 1s 轮询 + JSON diff，仅在变化时 push（与 aidSource 同款）。
+ * daemon 未运行（ipcQuery 返回 null）→ { daemonRunning:false, stats:null }。
+ */
+import { resolvePaths } from '../paths.js';
+import { ipcQuery } from '../ipc-client.js';
+async function buildSnapshot() {
+    const p = resolvePaths();
+    const resp = await ipcQuery(p.socket, { type: 'cache-stats' });
+    if (resp === null || !resp.ok) {
+        // daemon 离线，或旧 daemon 不认识 cache-stats（回 {error:...}，ok 为 undefined）
+        return { daemonRunning: resp !== null, supported: !!resp?.ok, stats: null };
+    }
+    return { daemonRunning: true, supported: true, stats: resp.stats };
+}
+export const cacheSource = {
+    kind: 'cache',
+    async snapshot() {
+        return buildSnapshot();
+    },
+    subscribe(_params, push) {
+        let lastJson = '';
+        let stopped = false;
+        const tick = async () => {
+            if (stopped)
+                return;
+            try {
+                const snap = await buildSnapshot();
+                const json = JSON.stringify(snap);
+                if (json !== lastJson) {
+                    lastJson = json;
+                    push(snap);
+                }
+            }
+            catch { /* ignore transient IPC errors */ }
+        };
+        const timer = setInterval(tick, 1000);
+        return () => { stopped = true; clearInterval(timer); };
+    },
+};

package/dist/sources/control.js

@@ -0,0 +1,58 @@
+/**
+ * Control 数据源 — 通过 daemon IPC 的 menu.exec 代理拉取 menu.* 当前状态。
+ *
+ * snapshot: 一批 menu.list + menu.query（各 name 当前值）+ menu.options（列表类）。
+ * subscribe: 1s 轮询 + JSON diff，仅变化时 push（IPC 无推送，与 aid.ts 同款）。
+ *
+ * 写操作（update/action）不走这里——浏览器经 WS `menu` 消息直发，requestId 配对响应。
+ */
+import { resolvePaths } from '../paths.js';
+import { ipcQuery } from '../ipc-client.js';
+// 支持 query 当前值的 name
+const QUERY_NAMES = ['system', 'pwd', 'baseagent', 'model', 'effort',
+    'chatmode', 'permission', 'activity', 'dispatch', 'session'];
+// 列表类（options）
+const OPTIONS_NAMES = ['session', 'agent', 'trigger'];
+async function menuExec(payload) {
+    const p = resolvePaths();
+    const r = await ipcQuery(p.socket, { type: 'menu.exec', payload }, 5000);
+    return r?.ok ? r.response : null;
+}
+async function buildSnapshot() {
+    const [listResp, ...queryResps] = await Promise.all([
+        menuExec({ type: 'menu.list', id: 'ctrl-list' }),
+        ...QUERY_NAMES.map((name, i) => menuExec({ type: 'menu.query', id: `ctrl-q-${i}`, name })),
+    ]);
+    const optResps = await Promise.all(OPTIONS_NAMES.map((name, i) => menuExec({ type: 'menu.options', id: `ctrl-o-${i}`, name })));
+    const daemonRunning = listResp !== null;
+    const queries = {};
+    QUERY_NAMES.forEach((name, i) => { queries[name] = queryResps[i]; });
+    const options = {};
+    OPTIONS_NAMES.forEach((name, i) => { options[name] = optResps[i]; });
+    return { daemonRunning, list: listResp, queries, options };
+}
+export const controlSource = {
+    kind: 'control',
+    async snapshot() {
+        return buildSnapshot();
+    },
+    subscribe(_params, push) {
+        let lastJson = '';
+        let stopped = false;
+        const tick = async () => {
+            if (stopped)
+                return;
+            try {
+                const snap = await buildSnapshot();
+                const json = JSON.stringify(snap);
+                if (json !== lastJson) {
+                    lastJson = json;
+                    push(snap);
+                }
+            }
+            catch { /* ignore transient IPC errors */ }
+        };
+        const timer = setInterval(tick, 1000);
+        return () => { stopped = true; clearInterval(timer); };
+    },
+};

package/dist/sources/stats.js

@@ -0,0 +1,348 @@
+/**
+ * ecweb/src/sources/stats.ts — Stats 数据源，直接只读查 usage.db。
+ */
+import path from 'path';
+import fs from 'fs';
+import { createRequire } from 'module';
+import { resolvePaths } from '../paths.js';
+const requireFromHere = createRequire(import.meta.url);
+let sqliteModule;
+function loadSqlite() {
+    if (sqliteModule !== undefined)
+        return sqliteModule;
+    try {
+        sqliteModule = requireFromHere('node:sqlite');
+    }
+    catch {
+        sqliteModule = null;
+    }
+    return sqliteModule;
+}
+function getDbPath() {
+    const { root } = resolvePaths();
+    return path.join(root, 'data', 'stats', 'usage.db');
+}
+function openDb() {
+    const sqlite = loadSqlite();
+    if (!sqlite)
+        return null;
+    const dbPath = getDbPath();
+    if (!fs.existsSync(dbPath))
+        return null;
+    try {
+        return new sqlite.DatabaseSync(dbPath, { readOnly: true });
+    }
+    catch {
+        return null;
+    }
+}
+let _priceCache = null;
+let _aliasCache = null;
+let _priceCacheTs = 0;
+const PRICE_CACHE_TTL = 5 * 60 * 1000;
+function _loadPrices() {
+    const now = Date.now();
+    if (_priceCache && now - _priceCacheTs < PRICE_CACHE_TTL)
+        return _priceCache;
+    const { root } = resolvePaths();
+    const file = path.join(root, 'data', 'stats', 'model-prices.jsonl');
+    if (!fs.existsSync(file)) {
+        _priceCache = [];
+        _priceCacheTs = now;
+        return [];
+    }
+    try {
+        _priceCache = fs.readFileSync(file, 'utf-8').split('\n').filter(Boolean).map(l => JSON.parse(l));
+        _priceCacheTs = now;
+        return _priceCache;
+    }
+    catch {
+        return [];
+    }
+}
+function _loadAliases() {
+    const now = Date.now();
+    if (_aliasCache && now - _priceCacheTs < PRICE_CACHE_TTL)
+        return _aliasCache;
+    const { root } = resolvePaths();
+    const file = path.join(root, 'data', 'stats', 'model-aliases.jsonl');
+    if (!fs.existsSync(file)) {
+        _aliasCache = [];
+        return [];
+    }
+    try {
+        _aliasCache = fs.readFileSync(file, 'utf-8').split('\n').filter(Boolean).map(l => JSON.parse(l));
+        return _aliasCache;
+    }
+    catch {
+        return [];
+    }
+}
+function _resolvePrice(model, ts) {
+    const prices = _loadPrices();
+    let candidates = prices.filter(p => p.model === model && p.effective_from <= ts);
+    if (!candidates.length) {
+        const aliases = _loadAliases();
+        const entry = aliases.find(a => a.alias === model);
+        if (entry)
+            candidates = prices.filter(p => p.model === entry.canonical && p.effective_from <= ts);
+    }
+    if (!candidates.length)
+        return null;
+    return candidates.reduce((a, b) => a.effective_from >= b.effective_from ? a : b);
+}
+function _calcRowCost(row) {
+    const p = _resolvePrice(row.model, row.ts);
+    if (!p)
+        return { usd: 0, cny: 0 };
+    let cost = 0;
+    switch (p.billing_fn) {
+        case 'per_token_v1':
+            cost = ((p.price_input ?? 0) * (row.input_tokens ?? 0)
+                + (p.price_output ?? 0) * (row.output_tokens ?? 0)
+                + (p.price_cache_creation ?? 0) * (row.cache_creation_tokens ?? 0)
+                + (p.price_cache_read ?? 0) * (row.cache_read_tokens ?? 0)) / 1e6;
+            break;
+        case 'per_token_deepseek_v1':
+            cost = ((p.price_cache_hit ?? 0) * (row.cache_hit_tokens ?? 0)
+                + (p.price_cache_miss ?? 0) * (row.cache_miss_tokens ?? 0)
+                + (p.price_output ?? 0) * (row.output_tokens ?? 0)) / 1e6;
+            break;
+        case 'per_token_tiered_v1': {
+            const tiers = p.tiers;
+            if (!Array.isArray(tiers))
+                break;
+            const ctx = row.total_context_tokens ?? row.input_tokens ?? 0;
+            const tier = tiers.find(t => t.up_to_tokens == null || ctx <= t.up_to_tokens) ?? tiers[tiers.length - 1];
+            cost = ((tier.price_input ?? 0) * (row.input_tokens ?? 0)
+                + (tier.price_output ?? 0) * (row.output_tokens ?? 0)
+                + (tier.price_cache_read ?? 0) * (row.cache_read_tokens ?? 0)) / 1e6;
+            break;
+        }
+        case 'per_token_image_v1':
+            cost = ((p.price_input ?? 0) * (row.input_tokens ?? 0)
+                + (p.price_output ?? 0) * (row.output_tokens ?? 0)
+                + (p.price_image ?? 0) * (row.image_tokens ?? 0)) / 1e6;
+            break;
+    }
+    return p.currency === 'CNY' ? { usd: 0, cny: cost } : { usd: cost, cny: 0 };
+}
+export function queryStatsForDashboard() {
+    const db = openDb();
+    if (!db)
+        return null;
+    const now = new Date();
+    const todayStart = Date.UTC(now.getUTCFullYear(), now.getUTCMonth(), now.getUTCDate());
+    const h24ago = Date.now() - 24 * 60 * 60 * 1000;
+    try {
+        // Today summary
+        const todayRow = db.prepare(`
+      SELECT
+        COALESCE(SUM(input_tokens),0) AS input_tokens,
+        COALESCE(SUM(output_tokens),0) AS output_tokens,
+        COALESCE(SUM(cache_creation_tokens),0) AS cache_creation_tokens,
+        COALESCE(SUM(cache_read_tokens),0) AS cache_read_tokens,
+        COUNT(*) AS call_count
+      FROM usage_events WHERE ts >= ?
+    `).get(todayStart);
+        const totalIn = (todayRow.input_tokens ?? 0) + (todayRow.cache_read_tokens ?? 0);
+        const hitRate = totalIn > 0 ? (todayRow.cache_read_tokens ?? 0) / totalIn : 0;
+        // Today cost (逐行计算)
+        let costUsd = 0, costCny = 0;
+        const costRows = db.prepare(`SELECT * FROM usage_events WHERE ts >= ?`).all(todayStart);
+        for (const r of costRows) {
+            const c = _calcRowCost(r);
+            costUsd += c.usd;
+            costCny += c.cny;
+        }
+        // Hourly (last 24h)
+        const hourly = db.prepare(`
+      SELECT
+        strftime('%Y-%m-%d %H:00', ts/1000, 'unixepoch', 'localtime') AS hour,
+        COALESCE(SUM(input_tokens),0) AS input_tokens,
+        COALESCE(SUM(output_tokens),0) AS output_tokens,
+        COALESCE(SUM(cache_read_tokens),0) AS cache_read_tokens,
+        COUNT(*) AS call_count
+      FROM usage_events WHERE ts >= ?
+      GROUP BY hour ORDER BY hour
+    `).all(h24ago);
+        // Top models (today)
+        const top_models = db.prepare(`
+      SELECT model, SUM(input_tokens+output_tokens) AS total_tokens, COUNT(*) AS call_count
+      FROM usage_events WHERE ts >= ?
+      GROUP BY model ORDER BY total_tokens DESC LIMIT 10
+    `).all(todayStart);
+        // Top peers (today)
+        const top_peers = db.prepare(`
+      SELECT peer_key, SUM(input_tokens+output_tokens) AS total_tokens, COUNT(*) AS call_count
+      FROM usage_events WHERE ts >= ?
+      GROUP BY peer_key ORDER BY total_tokens DESC LIMIT 5
+    `).all(todayStart);
+        return {
+            today: { ...todayRow, cache_hit_rate: hitRate, cost_usd: costUsd, cost_cny: costCny },
+            hourly,
+            top_models,
+            top_peers,
+        };
+    }
+    finally {
+        db.close();
+    }
+}
+export function queryStatsExplorer(params) {
+    const db = openDb();
+    if (!db)
+        return [];
+    const gran = params.granularity || 'day';
+    const fmt = { hour: '%Y-%m-%d %H:00', day: '%Y-%m-%d', week: '%Y-W%W', month: '%Y-%m' };
+    const strfmt = fmt[gran] || fmt.day;
+    const conds = [];
+    const p = [];
+    if (params.from_ts) {
+        conds.push('ts >= ?');
+        p.push(params.from_ts);
+    }
+    if (params.to_ts) {
+        conds.push('ts < ?');
+        p.push(params.to_ts);
+    }
+    if (params.agent_aid) {
+        conds.push('agent_aid = ?');
+        p.push(params.agent_aid);
+    }
+    if (params.peer_key) {
+        conds.push('peer_key = ?');
+        p.push(params.peer_key);
+    }
+    if (params.model) {
+        conds.push('model = ?');
+        p.push(params.model);
+    }
+    const where = conds.length ? 'WHERE ' + conds.join(' AND ') : '';
+    try {
+        return db.prepare(`
+      SELECT
+        strftime('${strfmt}', ts/1000, 'unixepoch', 'localtime') AS period,
+        COALESCE(SUM(input_tokens),0) AS input_tokens,
+        COALESCE(SUM(output_tokens),0) AS output_tokens,
+        COALESCE(SUM(cache_creation_tokens),0) AS cache_creation_tokens,
+        COALESCE(SUM(cache_read_tokens),0) AS cache_read_tokens,
+        COUNT(*) AS call_count
+      FROM usage_events ${where}
+      GROUP BY period ORDER BY period
+    `).all(...p);
+    }
+    finally {
+        db.close();
+    }
+}
+/** 按 peer 分组聚合（支持时间范围过滤）。 */
+export function queryStatsByPeer(params) {
+    const db = openDb();
+    if (!db)
+        return [];
+    const conds = [];
+    const p = [];
+    if (params.from_ts) {
+        conds.push('ts >= ?');
+        p.push(params.from_ts);
+    }
+    if (params.to_ts) {
+        conds.push('ts < ?');
+        p.push(params.to_ts);
+    }
+    if (params.agent_aid) {
+        conds.push('agent_aid = ?');
+        p.push(params.agent_aid);
+    }
+    const where = conds.length ? 'WHERE ' + conds.join(' AND ') : '';
+    const limit = params.limit ?? 50;
+    try {
+        return db.prepare(`
+      SELECT peer_key, peer_type,
+        COALESCE(SUM(input_tokens),0) AS input_tokens,
+        COALESCE(SUM(output_tokens),0) AS output_tokens,
+        COALESCE(SUM(cache_read_tokens),0) AS cache_read_tokens,
+        COUNT(*) AS call_count
+      FROM usage_events ${where}
+      GROUP BY peer_key ORDER BY (input_tokens+output_tokens) DESC LIMIT ${limit}
+    `).all(...p);
+    }
+    finally {
+        db.close();
+    }
+}
+export function queryStatsOverview() {
+    const db = openDb();
+    if (!db)
+        return null;
+    try {
+        const allRows = db.prepare('SELECT * FROM usage_events').all();
+        let totIn = 0, totOut = 0, totCc = 0, totCr = 0, totCalls = 0, totUsd = 0, totCny = 0;
+        const byAgent = new Map();
+        for (const r of allRows) {
+            totIn += r.input_tokens ?? 0;
+            totOut += r.output_tokens ?? 0;
+            totCc += r.cache_creation_tokens ?? 0;
+            totCr += r.cache_read_tokens ?? 0;
+            totCalls++;
+            const { usd, cny } = _calcRowCost(r);
+            totUsd += usd;
+            totCny += cny;
+            const aid = r.agent_aid || '';
+            let a = byAgent.get(aid);
+            if (!a) {
+                a = { input_tokens: 0, output_tokens: 0, cache_creation_tokens: 0, cache_read_tokens: 0, call_count: 0, cost_usd: 0, cost_cny: 0 };
+                byAgent.set(aid, a);
+            }
+            a.input_tokens += r.input_tokens ?? 0;
+            a.output_tokens += r.output_tokens ?? 0;
+            a.cache_creation_tokens += r.cache_creation_tokens ?? 0;
+            a.cache_read_tokens += r.cache_read_tokens ?? 0;
+            a.call_count++;
+            a.cost_usd += usd;
+            a.cost_cny += cny;
+        }
+        return {
+            all_time: { input_tokens: totIn, output_tokens: totOut, cache_creation_tokens: totCc, cache_read_tokens: totCr, call_count: totCalls, cost_usd: totUsd, cost_cny: totCny },
+            by_agent: Array.from(byAgent.entries())
+                .map(([agent_aid, v]) => ({ agent_aid, ...v }))
+                .sort((a, b) => (b.input_tokens + b.output_tokens) - (a.input_tokens + a.output_tokens)),
+        };
+    }
+    finally {
+        db.close();
+    }
+}
+/** 按 agent 分组聚合（支持时间范围过滤）。 */
+export function queryStatsByAgent(params) {
+    const db = openDb();
+    if (!db)
+        return [];
+    const conds = [];
+    const p = [];
+    if (params.from_ts) {
+        conds.push('ts >= ?');
+        p.push(params.from_ts);
+    }
+    if (params.to_ts) {
+        conds.push('ts < ?');
+        p.push(params.to_ts);
+    }
+    const where = conds.length ? 'WHERE ' + conds.join(' AND ') : '';
+    const limit = params.limit ?? 50;
+    try {
+        return db.prepare(`
+      SELECT agent_aid,
+        COALESCE(SUM(input_tokens),0) AS input_tokens,
+        COALESCE(SUM(output_tokens),0) AS output_tokens,
+        COALESCE(SUM(cache_read_tokens),0) AS cache_read_tokens,
+        COUNT(*) AS call_count
+      FROM usage_events ${where}
+      GROUP BY agent_aid ORDER BY (input_tokens+output_tokens) DESC LIMIT ${limit}
+    `).all(...p);
+    }
+    finally {
+        db.close();
+    }
+}