gencow 0.1.156 → 0.1.157

package/lib/deploy-command.mjs

@@ -13,6 +13,7 @@ export function renderDeployHelp() {
   log(`  ${BOLD}Options:${RESET}`);
   log(`    ${DIM}--static [dir]${RESET}     Deploy backend first, then static files`);
   log(`    ${DIM}--prod${RESET}             Deploy to production (Pro+ only)`);
+  log(`    ${DIM}--region <slug>${RESET}    First production app placement region`);
   log(`    ${DIM}--rollback${RESET}          Rollback to previous deployment`);
   log(`    ${DIM}--force, -f${RESET}        Skip optional dependency scan`);
   log(`    ${DIM}--app, -a${RESET}          Target specific app\n`);
@@ -21,7 +22,7 @@ export function renderDeployHelp() {
   log(`    gencow deploy status`);
   log(`    gencow deploy logs -n 100`);
   log(`    gencow deploy --static dist/`);
-  log(`    gencow deploy --prod`);
+  log(`    gencow deploy --prod --region kr`);
   log(`    gencow deploy --rollback\n`);
 }
 

package/lib/deploy-runtime.mjs

@@ -15,6 +15,7 @@ export function parseDeployArgs(deployArgs) {
     envTarget: "dev",
     forceDeploy: false,
     isRollback: false,
+    region: null,
     staticDeploy: false,
     staticDirArg: null,
     unknownArg: null,
@@ -26,7 +27,21 @@ export function parseDeployArgs(deployArgs) {
     else if (arg === "--force" || arg === "-f") parsed.forceDeploy = true;
     else if (arg === "--rollback") parsed.isRollback = true;
     else if (arg === "--app" || arg === "-a") parsed.appId = deployArgs[++index];
-    else if (arg === "--static") {
+    else if (arg === "--region") {
+      const value = deployArgs[index + 1];
+      if (!value || value.startsWith("-")) {
+        parsed.unknownArg = arg;
+        break;
+      }
+      parsed.region = value;
+      index += 1;
+    } else if (arg.startsWith("--region=")) {
+      parsed.region = arg.slice("--region=".length) || null;
+      if (!parsed.region) {
+        parsed.unknownArg = arg;
+        break;
+      }
+    } else if (arg === "--static") {
       parsed.staticDeploy = true;
       const maybeDir = deployArgs[index + 1];
       if (maybeDir && !maybeDir.startsWith("-")) {
@@ -87,6 +102,7 @@ function showUnknownDeployArgument(arg, { errorImpl = error, infoImpl = info, lo
   infoImpl("Usage: gencow deploy [options]");
   infoImpl("  gencow deploy              Dev backend deploy");
   infoImpl("  gencow deploy --prod       Production backend deploy (Pro+)");
+  infoImpl("  gencow deploy --prod --region kr  First production app placement");
   infoImpl("  gencow deploy --rollback   Rollback to previous version");
   infoImpl("  gencow deploy logs         View server logs");
   infoImpl("  gencow deploy status       Check app status");
@@ -134,6 +150,7 @@ async function ensureProductionDeployTarget({
   writeFileSyncImpl = writeFileSync,
   exitImpl = (code) => process.exit(code),
   prodAppId = null,
+  region = null,
 }) {
   if (!appId || prodAppId) {
     return prodAppId ?? appId;
@@ -154,6 +171,7 @@ async function ensureProductionDeployTarget({
   const createProdRes = await platformFetchImpl(creds, `/platform/apps/${appId}/create-prod`, {
     method: "POST",
     headers: { "Content-Type": "application/json" },
+    body: JSON.stringify(region ? { region } : {}),
   });
 
   if (!createProdRes.ok) {
@@ -187,9 +205,17 @@ async function ensureProductionDeployTarget({
 
   if (createProdData.alreadyExists) {
     infoImpl(`Prod app verified: ${nextProdAppId}`);
+    if (region && createProdData.region && createProdData.region !== region) {
+      infoImpl(
+        `Region unchanged: existing prod app is in ${createProdData.region}; --region only applies to first prod creation.`,
+      );
+    }
   } else {
     successImpl(`Prod app created: ${nextProdAppId}`);
     infoImpl(`URL: ${createProdData.url}`);
+    if (createProdData.region) {
+      infoImpl(`Region: ${createProdData.region} (${createProdData.regionSource || "selected"})`);
+    }
     await new Promise((resolveDelay) => setTimeoutImpl(resolveDelay, 3000));
   }
 
@@ -391,10 +417,14 @@ export function createDeployCommand({
         writeFileSyncImpl,
         exitImpl,
         prodAppId,
+        region: parsed.region,
       });
       if (!prodTarget) return;
       appId = prodTarget;
       infoImpl(`Deploy target: ${CYAN}${appId}${RESET} (production)`);
+      if (prodAppId && parsed.region) {
+        infoImpl("Region option only applies when the production app is first created; no app move was requested.");
+      }
     }
 
     if (parsed.staticDeploy) {

package/lib/readme-codegen.mjs

@@ -298,7 +298,7 @@ export function buildAiPrompt(apiObj, namespaces) {
   md += `- Existing generated components can use ai.chat(), ai.vision.extractText(), ai.image.generate(), and ai.generateObject() through the Gencow facade.\n`;
   md += `- Do not import @ai-sdk/openai/createOpenAI directly, call provider APIs directly, or create wrapper files such as openai-direct.ts.\n`;
   md += `- Do not log image base64, prompts, provider tokens, or raw private document snippets.\n`;
-  md += `- Recommended models: gpt-5.4-mini for most apps, gpt-5.5 for highest quality, gpt-5.4-nano for high-volume extraction.\n`;
+  md += `- Recommended chat models: gpt-5.4-mini for most apps, gpt-5.5 for Pro/Scale highest quality, gpt-5.4-nano for high-volume extraction.\n`;
   md += `- Use ai.generateObject() with a Zod schema for structured output. Do not use ai.chat() + JSON.parse().\n`;
   md += `- Install AI with gencow add AI, RAG with gencow add RAG, Memory with gencow add Memory, and durable agents with gencow add Agent.\n`;
   md += `\`\`\`\n\n`;
@@ -307,7 +307,7 @@ export function buildAiPrompt(apiObj, namespaces) {
 
 export function buildAiUsageSection() {
   let md = `---\n\n## AI Usage\n\n`;
-  md += `Gencow supports GPT-5.5, GPT-5.4, GPT-5 mini/nano, GPT-4.1, GPT-4o, and GPT Image models through the platform \`model_pricing\` catalog.\n`;
+  md += `Gencow supports a focused active chat catalog: gpt-5.5 on Pro/Scale, gpt-5.4-mini by default, gpt-5.4-nano for high volume, and temporary legacy gpt-4o-mini compatibility. Image and embedding models are also controlled by the platform \`model_pricing\` catalog.\n`;
   md += `Local development uses \`OPENAI_API_KEY\`; cloud deployments automatically use the Gencow AI proxy and service credits.\n\n`;
   md += `\`\`\`typescript\n`;
   md += `import { generateImage, generateText } from "ai";\n`;
@@ -341,10 +341,10 @@ export function buildAiUsageSection() {
   md += `\`\`\`\n\n`;
   md += `| Purpose | Recommended model |\n`;
   md += `|---|---|\n`;
-  md += `| Highest quality / complex reasoning | \`gpt-5.5\` |\n`;
+  md += `| Highest quality / complex reasoning | \`gpt-5.5\` (Pro/Scale only) |\n`;
   md += `| Most production chat, coding, and agent tasks | \`gpt-5.4-mini\` |\n`;
   md += `| High-volume classification and extraction | \`gpt-5.4-nano\` |\n`;
-  md += `| Compatibility low-cost path | \`gpt-4o-mini\` |\n`;
+  md += `| Temporary legacy compatibility path | \`gpt-4o-mini\` |\n`;
   md += `| Image-to-text / OCR-style extraction | \`gpt-5.4-mini\` or \`gpt-4o-mini\` |\n`;
   md += `| Image generation | \`gpt-image-2\` or \`gpt-image-1-mini\` |\n\n`;
   md += `Do not wire \`@ai-sdk/openai\` or provider keys directly. Use \`createGencowAI()\` or the \`ai.*\` facade from \`./ai\`.\n\n`;

package/lib/static-command.mjs

@@ -1,8 +1,9 @@
-import { existsSync, readFileSync } from "fs";
+import { existsSync, readFileSync, writeFileSync } from "fs";
 import { resolve } from "path";
 
 import { readProjectDisplayName } from "./cli-project-runtime.mjs";
-import { BOLD, CYAN, DIM, RESET, error, info, log } from "./output.mjs";
+import { BOLD, CYAN, DIM, RESET, error, info, log, success } from "./output.mjs";
+import { platformFetch } from "./platform-client.mjs";
 import { detectStaticDeployBackend } from "./static-deploy-command.mjs";
 
 export function parseStaticArgs(staticArgs) {
@@ -10,6 +11,7 @@ export function parseStaticArgs(staticArgs) {
     appId: null,
     forceDeploy: false,
     isProd: false,
+    region: null,
     staticDir: null,
   };
 
@@ -17,6 +19,8 @@ export function parseStaticArgs(staticArgs) {
     const arg = staticArgs[index];
     if (arg === "--force" || arg === "-f") parsed.forceDeploy = true;
     else if (arg === "--prod") parsed.isProd = true;
+    else if (arg === "--region") parsed.region = staticArgs[++index] || null;
+    else if (arg.startsWith("--region=")) parsed.region = arg.slice("--region=".length) || null;
     else if (arg === "--app" || arg === "-a") parsed.appId = staticArgs[++index];
     else if (!arg.startsWith("-")) parsed.staticDir = arg;
   }
@@ -62,6 +66,57 @@ export function readStaticProjectContext(options = {}) {
   };
 }
 
+async function ensureStaticProductionTarget({
+  appId,
+  creds,
+  gencowJsonPath,
+  platformFetchImpl = platformFetch,
+  readFileSyncImpl = readFileSync,
+  region = null,
+  setTimeoutImpl = setTimeout,
+  successImpl = success,
+  errorImpl = error,
+  infoImpl = info,
+  writeFileSyncImpl = writeFileSync,
+}) {
+  if (!appId) {
+    errorImpl("App not found. Run from the project root with gencow.json.");
+    return null;
+  }
+
+  infoImpl("Creating prod app...");
+  const createProdRes = await platformFetchImpl(creds, `/platform/apps/${appId}/create-prod`, {
+    method: "POST",
+    headers: { "Content-Type": "application/json" },
+    body: JSON.stringify(region ? { region } : {}),
+  });
+
+  if (!createProdRes.ok) {
+    const errData = await createProdRes.json().catch(() => ({}));
+    errorImpl(`Prod app creation failed: ${errData.error || createProdRes.statusText}`);
+    return null;
+  }
+
+  const createProdData = await createProdRes.json();
+  const nextProdAppId = createProdData.prodApp;
+  const gencowJson = existsSync(gencowJsonPath) ? JSON.parse(readFileSyncImpl(gencowJsonPath, "utf8")) : {};
+  gencowJson.prodApp = nextProdAppId;
+  writeFileSyncImpl(gencowJsonPath, JSON.stringify(gencowJson, null, 2));
+
+  if (createProdData.alreadyExists) {
+    infoImpl(`Prod app verified: ${nextProdAppId}`);
+  } else {
+    successImpl(`Prod app created: ${nextProdAppId}`);
+    if (createProdData.url) infoImpl(`URL: ${createProdData.url}`);
+    if (createProdData.region) {
+      infoImpl(`Region: ${createProdData.region} (${createProdData.regionSource || "selected"})`);
+    }
+    await new Promise((resolveDelay) => setTimeoutImpl(resolveDelay, 3000));
+  }
+
+  return nextProdAppId;
+}
+
 export function createStaticCommand(options = {}) {
   const {
     BOLDValue = BOLD,
@@ -72,9 +127,14 @@ export function createStaticCommand(options = {}) {
     errorImpl = error,
     infoImpl = info,
     logImpl = log,
+    platformFetchImpl = platformFetch,
+    readFileSyncImpl = readFileSync,
     readStaticProjectContextImpl = readStaticProjectContext,
     requireCredsImpl,
     runStaticDeployRuntimeImpl,
+    setTimeoutImpl = setTimeout,
+    successImpl = success,
+    writeFileSyncImpl = writeFileSync,
   } = options;
 
   return async function runStaticCommand(...staticArgs) {
@@ -87,6 +147,7 @@ export function createStaticCommand(options = {}) {
       );
       logImpl(`  ${BOLDValue}Options:${RESETValue}`);
       logImpl(`    ${DIMValue}--prod${RESETValue}             Deploy to production app`);
+      logImpl(`    ${DIMValue}--region <slug>${RESETValue}    First production app placement region`);
       logImpl(`    ${DIMValue}--force, -f${RESETValue}        Skip optional dependency scan`);
       logImpl(`    ${DIMValue}--app, -a${RESETValue}          Target specific app\n`);
       logImpl(`  ${BOLDValue}Examples:${RESETValue}`);
@@ -104,13 +165,26 @@ export function createStaticCommand(options = {}) {
       cwd: cwdImpl(),
       explicitAppId: parsed.appId,
     });
-    const deployTarget = parsed.isProd ? prodAppId || appId : appId;
+    let deployTarget = parsed.isProd ? prodAppId || appId : appId;
     const envTarget = parsed.isProd ? "prod" : "dev";
 
     if (parsed.isProd && !prodAppId) {
-      errorImpl("No production app found. Run 'gencow deploy' first to create one.");
-      infoImpl(`${DIMValue}For dev static deploy, omit --prod: gencow static [dir]${RESETValue}\n`);
-      return;
+      deployTarget = await ensureStaticProductionTarget({
+        appId,
+        creds,
+        gencowJsonPath,
+        platformFetchImpl,
+        readFileSyncImpl,
+        region: parsed.region,
+        setTimeoutImpl,
+        successImpl,
+        errorImpl,
+        infoImpl,
+        writeFileSyncImpl,
+      });
+      if (!deployTarget) return;
+    } else if (parsed.isProd && parsed.region) {
+      infoImpl("Region option only applies when the production app is first created; no app move was requested.");
     }
 
     return runStaticDeployRuntimeImpl({

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "gencow",
-  "version": "0.1.156",
+  "version": "0.1.157",
   "description": "Gencow — AI Backend Engine",
   "type": "module",
   "bin": {

package/server/index.js

@@ -63151,7 +63151,7 @@ var require_html_writer = __commonJS({
       }
       function generateAttributeString(attributes) {
         return _3.map(attributes, function(value, key) {
-          return " " + key + '="' + escapeHtmlAttribute(value) + '"';
+          return " " + key + '="' + escapeHtmlAttribute2(value) + '"';
         }).join("");
       }
       function text2(value) {
@@ -63175,7 +63175,7 @@ var require_html_writer = __commonJS({
     function escapeHtmlText(value) {
       return value.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;");
     }
-    function escapeHtmlAttribute(value) {
+    function escapeHtmlAttribute2(value) {
       return value.replace(/&/g, "&amp;").replace(/"/g, "&quot;").replace(/</g, "&lt;").replace(/>/g, "&gt;");
     }
   }
@@ -93267,7 +93267,9 @@ async function ensurePlatformSchemaUpgrade(params) {
     await params.rawSql(`ALTER TABLE apps ADD COLUMN IF NOT EXISTS status_reason TEXT`);
     await params.rawSql(`ALTER TABLE apps ADD COLUMN IF NOT EXISTS status_message TEXT`);
     await params.rawSql(`ALTER TABLE apps ADD COLUMN IF NOT EXISTS status_updated_at TIMESTAMP`);
-    await params.rawSql(`ALTER TABLE apps ADD COLUMN IF NOT EXISTS memory_oom_count INTEGER NOT NULL DEFAULT 0`);
+    await params.rawSql(
+      `ALTER TABLE apps ADD COLUMN IF NOT EXISTS memory_oom_count INTEGER NOT NULL DEFAULT 0`
+    );
     await params.rawSql(`ALTER TABLE apps ADD COLUMN IF NOT EXISTS memory_oom_window_started_at TIMESTAMP`);
     await params.rawSql(`ALTER TABLE apps ADD COLUMN IF NOT EXISTS memory_oom_last_at TIMESTAMP`);
     await params.rawSql(`ALTER TABLE deployments ADD COLUMN IF NOT EXISTS env TEXT DEFAULT 'dev'`);
@@ -93555,20 +93557,20 @@ async function ensurePlatformSchemaUpgrade(params) {
     await params.rawSql(`INSERT INTO model_pricing (model, type, provider, display_name, unit_label, input_credit_per_token, output_credit_per_token, active, sort_order)
             VALUES
                 ('gpt-5.5',                 'chat',     'openai', 'GPT-5.5',             '1K tok', 50,    300,   true, 0),
-                ('gpt-5.4',                 'chat',     'openai', 'GPT-5.4',             '1K tok', 25,    150,   true, 10),
+                ('gpt-5.4',                 'chat',     'openai', 'GPT-5.4',             '1K tok', 25,    150,   false, 10),
                 ('gpt-5.4-mini',            'chat',     'openai', 'GPT-5.4 mini',        '1K tok', 7.5,   45,    true, 20),
                 ('gpt-5.4-nano',            'chat',     'openai', 'GPT-5.4 nano',        '1K tok', 2,     12.5,  true, 30),
-                ('gpt-5.3-chat-latest',     'chat',     'openai', 'GPT-5.3 Chat',        '1K tok', 17.5,  140,   true, 40),
-                ('gpt-5.2',                 'chat',     'openai', 'GPT-5.2',             '1K tok', 17.5,  140,   true, 50),
-                ('gpt-5.2-chat-latest',     'chat',     'openai', 'GPT-5.2 Chat',        '1K tok', 17.5,  140,   true, 60),
-                ('gpt-5.1',                 'chat',     'openai', 'GPT-5.1',             '1K tok', 12.5,  100,   true, 70),
-                ('gpt-5',                   'chat',     'openai', 'GPT-5',               '1K tok', 12.5,  100,   true, 80),
-                ('gpt-5-mini',              'chat',     'openai', 'GPT-5 mini',          '1K tok', 2.5,   20,    true, 90),
-                ('gpt-5-nano',              'chat',     'openai', 'GPT-5 nano',          '1K tok', 0.5,   4,     true, 100),
-                ('gpt-4.1',                 'chat',     'openai', 'GPT-4.1',             '1K tok', 20,    80,    true, 110),
-                ('gpt-4.1-mini',            'chat',     'openai', 'GPT-4.1 mini',        '1K tok', 4,     16,    true, 120),
-                ('gpt-4.1-nano',            'chat',     'openai', 'GPT-4.1 nano',        '1K tok', 1,     4,     true, 130),
-                ('gpt-4o',                  'chat',     'openai', 'GPT-4o',              '1K tok', 25,    100,   true, 140),
+                ('gpt-5.3-chat-latest',     'chat',     'openai', 'GPT-5.3 Chat',        '1K tok', 17.5,  140,   false, 40),
+                ('gpt-5.2',                 'chat',     'openai', 'GPT-5.2',             '1K tok', 17.5,  140,   false, 50),
+                ('gpt-5.2-chat-latest',     'chat',     'openai', 'GPT-5.2 Chat',        '1K tok', 17.5,  140,   false, 60),
+                ('gpt-5.1',                 'chat',     'openai', 'GPT-5.1',             '1K tok', 12.5,  100,   false, 70),
+                ('gpt-5',                   'chat',     'openai', 'GPT-5',               '1K tok', 12.5,  100,   false, 80),
+                ('gpt-5-mini',              'chat',     'openai', 'GPT-5 mini',          '1K tok', 2.5,   20,    false, 90),
+                ('gpt-5-nano',              'chat',     'openai', 'GPT-5 nano',          '1K tok', 0.5,   4,     false, 100),
+                ('gpt-4.1',                 'chat',     'openai', 'GPT-4.1',             '1K tok', 20,    80,    false, 110),
+                ('gpt-4.1-mini',            'chat',     'openai', 'GPT-4.1 mini',        '1K tok', 4,     16,    false, 120),
+                ('gpt-4.1-nano',            'chat',     'openai', 'GPT-4.1 nano',        '1K tok', 1,     4,     false, 130),
+                ('gpt-4o',                  'chat',     'openai', 'GPT-4o',              '1K tok', 25,    100,   false, 140),
                 ('gpt-4o-mini',             'chat',     'openai', 'GPT-4o mini',         '1K tok', 1.5,   6,     true, 150),
                 ('gpt-image-2',             'image',    'openai', 'GPT Image 2',         '1K tok', 50,    300,   true, 180),
                 ('gpt-image-1.5',           'image',    'openai', 'GPT Image 1.5',       '1K tok', 50,    320,   true, 190),
@@ -94043,6 +94045,19 @@ var compressibleStaticExtensions = /* @__PURE__ */ new Set([
 var encodedFileCache = /* @__PURE__ */ new Map();
 var encodedFileCacheTtlMs = 10 * 60 * 1e3;
 var encodedFileCacheMaxEntries = 240;
+function injectHtmlHeadTag(html2, tag, skipMarker) {
+  if (!tag || html2.includes(skipMarker)) return html2;
+  const headClose = /<\/head\s*>/i;
+  if (headClose.test(html2)) return html2.replace(headClose, `  ${tag}
+</head>`);
+  const htmlOpen = /<html(\s[^>]*)?>/i;
+  if (htmlOpen.test(html2)) return html2.replace(htmlOpen, (match2) => `${match2}
+<head>
+  ${tag}
+</head>`);
+  return `${tag}
+${html2}`;
+}
 function acceptsEncoding(value, encoding) {
   const tokens = value.toLowerCase().split(",").map((part) => part.trim());
   return tokens.some((token) => {
@@ -94085,6 +94100,16 @@ async function encodedStaticFile(filePath, encoding, originalSize) {
   encodedFileCache.set(cacheKey, { body: output, createdAt: Date.now() });
   return output;
 }
+function encodeStaticBuffer(input, encoding) {
+  if (!encoding || input.byteLength <= 0) return { body: input, encoding: null };
+  const output = encoding === "br" ? brotliCompressSync(input) : gzipSync(input);
+  if (output.byteLength >= input.byteLength) return { body: input, encoding: null };
+  return { body: output, encoding };
+}
+function bufferToBlob(buffer) {
+  const arrayBuffer = buffer.buffer.slice(buffer.byteOffset, buffer.byteOffset + buffer.byteLength);
+  return new Blob([arrayBuffer]);
+}
 async function serveStaticFile(params) {
   const staticDir = join2(params.dataDir, "static");
   const resolution = await resolveStaticFileRequest({
@@ -94100,15 +94125,34 @@ async function serveStaticFile(params) {
   const fileSize = file.size;
   const requestMethod = String(params.c?.req?.method ?? "").toUpperCase();
   const encoding = preferredStaticEncoding(requestHeader(params.c, "Accept-Encoding"), resolution.filePath);
-  const encodedBody = encoding && Number.isSafeInteger(fileSize) && fileSize > 0 ? await encodedStaticFile(resolution.filePath, encoding, fileSize) : null;
-  const responseBody = encodedBody ? new Uint8Array(encodedBody) : file;
-  const responseBytes = encodedBody?.byteLength ?? fileSize;
+  const isHtml = [".html", ".htm"].includes(extname2(resolution.filePath).toLowerCase());
+  const shouldInjectHtml = Boolean(params.htmlHeadInjection && isHtml);
+  let responseBody;
+  let responseBytes = fileSize;
+  let responseEncoding = null;
+  if (shouldInjectHtml) {
+    const originalHtml = await file.text();
+    const html2 = injectHtmlHeadTag(
+      originalHtml,
+      params.htmlHeadInjection ?? "",
+      params.htmlHeadInjectionSkipMarker ?? params.htmlHeadInjection ?? ""
+    );
+    const encoded = encodeStaticBuffer(Buffer.from(html2), encoding);
+    responseBody = bufferToBlob(encoded.body);
+    responseBytes = encoded.body.byteLength;
+    responseEncoding = encoded.encoding;
+  } else {
+    const encodedBody = encoding && Number.isSafeInteger(fileSize) && fileSize > 0 ? await encodedStaticFile(resolution.filePath, encoding, fileSize) : null;
+    responseBody = encodedBody ? bufferToBlob(encodedBody) : file;
+    responseBytes = encodedBody?.byteLength ?? fileSize;
+    responseEncoding = encodedBody ? encoding : null;
+  }
   if (requestMethod !== "HEAD" && Number.isSafeInteger(responseBytes) && responseBytes > 0) {
     params.recordBytes?.(responseBytes);
   }
   const headers = new Headers({ "Cache-Control": resolution.cacheControl });
-  if (encodedBody && encoding) {
-    headers.set("Content-Encoding", encoding);
+  if (responseEncoding) {
+    headers.set("Content-Encoding", responseEncoding);
     headers.set("Vary", "Accept-Encoding");
   }
   if (file.type) headers.set("Content-Type", file.type);
@@ -94478,6 +94522,15 @@ function createServerNodeProxyLoopbackRequest(params) {
 
 // ../server/src/server-platform-app-proxy.ts
 var INTERNAL_DOMAIN_VERIFY_PATH = "/internal/domain/verify";
+var HOSTED_ANALYTICS_SCRIPT_PATH = "/_gencow/analytics.js";
+function escapeHtmlAttribute(value) {
+  return value.replace(/&/g, "&amp;").replace(/"/g, "&quot;").replace(/</g, "&lt;").replace(/>/g, "&gt;");
+}
+function buildHostedAnalyticsScriptTag(appRow) {
+  const deploy = appRow.currentDeployId === null || appRow.currentDeployId === void 0 ? "" : String(appRow.currentDeployId);
+  const deployAttr = deploy ? ` data-deploy="${escapeHtmlAttribute(deploy)}"` : "";
+  return `<script defer src="${HOSTED_ANALYTICS_SCRIPT_PATH}" data-site="app:${escapeHtmlAttribute(String(appRow.id))}"${deployAttr}></script>`;
+}
 function buildRuntimeUnavailableBody(result2) {
   return {
     error: result2.error,
@@ -94590,6 +94643,7 @@ async function maybeServeHostedAnalytics(params) {
     app: params.appRow,
     host: params.host,
     rawSql: params.rawSql,
+    analyticsRawSql: params.analyticsRawSql ?? params.rawSql,
     logger: params.logger
   });
 }
@@ -94736,6 +94790,7 @@ function registerPlatformAppProxy(params) {
         c,
         functionsPath: params.functionsPath,
         rawSql: params.rawSql,
+        analyticsRawSql: params.analyticsRawSql ?? params.rawSql,
         logger: logger2
       });
       if (analyticsRes) {
@@ -94785,7 +94840,9 @@ function registerPlatformAppProxy(params) {
             dataDir: appRow.dataDir,
             pathname,
             appName,
-            recordBytes: (bytes) => params.addProxyMetric(appName, bytes)
+            recordBytes: (bytes) => params.addProxyMetric(appName, bytes),
+            htmlHeadInjection: buildHostedAnalyticsScriptTag(appRow),
+            htmlHeadInjectionSkipMarker: HOSTED_ANALYTICS_SCRIPT_PATH
           });
         }
         logger2.warn(
@@ -94877,7 +94934,9 @@ function registerPlatformAppProxy(params) {
           dataDir: appRow.dataDir,
           pathname,
           appName,
-          recordBytes: (bytes) => params.addProxyMetric(appName, bytes)
+          recordBytes: (bytes) => params.addProxyMetric(appName, bytes),
+          htmlHeadInjection: buildHostedAnalyticsScriptTag(appRow),
+          htmlHeadInjectionSkipMarker: HOSTED_ANALYTICS_SCRIPT_PATH
         });
       }
       if (hasBackend) {
@@ -98207,6 +98266,7 @@ async function bootstrapPlatformRuntime(params) {
     },
     generateInternalToken,
     rawSql: params.rawSql,
+    analyticsRawSql: params.analyticsRawSql ?? params.rawSql,
     functionsPath: params.functionsPath,
     addProxyMetric,
     createProxyRequestReplayPlan,
@@ -103654,6 +103714,7 @@ function createRequestContextBuilder(params) {
       db: createRlsDbImpl(params.db, refreshRls),
       unsafeDb: params.db,
       rawSql: params.rawSql,
+      analyticsRawSql: params.analyticsRawSql ?? params.rawSql,
       auth: refreshAuth,
       storage: params.storage,
       realtime: noopRealtime,
@@ -103721,6 +103782,7 @@ function createRequestContextBuilder(params) {
     );
     partialCtx.unsafeDb = params.db;
     partialCtx.rawSql = params.rawSql;
+    partialCtx.analyticsRawSql = params.analyticsRawSql ?? params.rawSql;
     return partialCtx;
   };
 }
@@ -110081,6 +110143,7 @@ async function bootstrapServerMainRuntime(params) {
   const buildCtx = createRequestContextBuilder({
     db: params.db,
     rawSql: params.rawSql,
+    analyticsRawSql: params.analyticsRawSql ?? params.rawSql,
     storage: params.storage,
     scheduler,
     isBaas: params.isBaas,
@@ -110405,6 +110468,76 @@ async function bootstrapServerMainRuntime(params) {
   return server;
 }
 
+// ../server/src/server-analytics-db.ts
+function isDisabledAnalyticsEnv(env2) {
+  const enabled = env2.GENCOW_ANALYTICS_ENABLED?.trim().toLowerCase();
+  const backend = env2.GENCOW_ANALYTICS_BACKEND?.trim().toLowerCase();
+  return ["0", "false", "off", "disabled", "no"].includes(enabled ?? "") || backend === "disabled";
+}
+function redactPostgresDsn(value) {
+  return value.replace(/postgres(?:ql)?:\/\/[^\s"']+/gi, "postgres://[redacted]");
+}
+async function connectPostgresAnalytics(url) {
+  const mod6 = await import("postgres");
+  return mod6.default(url, {
+    max: Number(process.env.GENCOW_ANALYTICS_DB_POOL_MAX || 3),
+    idle_timeout: Number(process.env.GENCOW_ANALYTICS_DB_IDLE_TIMEOUT_SEC || 20),
+    connect_timeout: Number(process.env.GENCOW_ANALYTICS_DB_CONNECT_TIMEOUT_SEC || 5)
+  });
+}
+function createUnavailableRawSql(reason) {
+  return (async () => {
+    throw new Error(`analytics database unavailable: ${redactPostgresDsn(reason).slice(0, 160)}`);
+  });
+}
+async function createAnalyticsSqlRuntime(params) {
+  const env2 = params.env ?? process.env;
+  const logger2 = params.logger ?? console;
+  const analyticsDatabaseUrl = env2.ANALYTICS_DATABASE_URL?.trim();
+  if (!analyticsDatabaseUrl || isDisabledAnalyticsEnv(env2)) {
+    return {
+      rawSql: params.fallbackRawSql,
+      source: "platform-fallback",
+      close: async () => {
+      }
+    };
+  }
+  const connect = params.connect ?? connectPostgresAnalytics;
+  const ensureSchema = params.ensureSchema ?? ensurePlatformAnalyticsSchema;
+  let client = null;
+  try {
+    client = await connect(analyticsDatabaseUrl);
+    const rawSql = (async (query2, sqlParams) => {
+      const result2 = sqlParams && sqlParams.length > 0 ? await client.unsafe(query2, sqlParams) : await client.unsafe(query2);
+      return Array.from(result2);
+    });
+    await ensureSchema({ rawSql });
+    logger2.log("[analytics] using dedicated Postgres analytics store (ANALYTICS_DATABASE_URL configured)");
+    return {
+      rawSql,
+      source: "dedicated-postgres",
+      close: async () => {
+        await client?.end?.();
+      }
+    };
+  } catch (error) {
+    const message = error instanceof Error ? error.message : String(error);
+    try {
+      await client?.end?.();
+    } catch {
+    }
+    logger2.warn(
+      `[analytics] dedicated analytics DB unavailable; collector/provider will fail open: ${redactPostgresDsn(message).slice(0, 160)}`
+    );
+    return {
+      rawSql: createUnavailableRawSql(message),
+      source: "unavailable",
+      close: async () => {
+      }
+    };
+  }
+}
+
 // ../server/src/server-websocket-runtime.ts
 function createServerWebsocketRuntime() {
   const { upgradeWebSocket: upgradeWebSocket3, websocket: baseWebsocket } = createBunWebSocket();
@@ -113066,6 +113199,8 @@ function createSettingsRoutes(rawSql, options) {
 var SYSTEM_ENV_KEYS = [
   "DATABASE_URL",
   // DB 비밀번호 포함 → 유출 시 다른 테넌트 접근 가능
+  "ANALYTICS_DATABASE_URL",
+  // Analytics 전용 DB 비밀번호 포함 → 서버 내부 store만 사용
   "GENCOW_WAKE_SIGNAL_DATABASE_URL",
   // LISTEN 전용 DB URL → DB 비밀번호 포함
   "GENCOW_REALTIME_OUTBOX_POLL_INTERVAL_MS",
@@ -113697,6 +113832,10 @@ async function main() {
   if (loadedCount > 0) {
     console.log(`[settings] Loaded ${loadedCount} env var(s) from DB \u2713`);
   }
+  const analyticsSqlRuntime = await createAnalyticsSqlRuntime({
+    fallbackRawSql: systemRawSql,
+    logger: console
+  });
   const platformEmailEnv = {
     RESEND_API_KEY: process.env.RESEND_API_KEY,
     PLATFORM_EMAIL_FROM: process.env.PLATFORM_EMAIL_FROM,
@@ -113737,6 +113876,7 @@ async function main() {
       app,
       db: platformSystemDb,
       rawSql: systemRawSql,
+      analyticsRawSql: analyticsSqlRuntime.rawSql,
       functionsPath,
       platformDomain: PLATFORM_DOMAIN,
       getBunServer: () => bunServer,
@@ -113760,7 +113900,11 @@ async function main() {
     db,
     platformSystemDb,
     rawSql,
-    close,
+    analyticsRawSql: analyticsSqlRuntime.rawSql,
+    close: async () => {
+      await analyticsSqlRuntime.close();
+      await close();
+    },
     driver,
     storage,
     storageDir,