naro-cli 0.13.0 → 0.15.0

package/README.md

@@ -69,9 +69,13 @@ naro logs <deployment-id>          Build logs of a deployment
 naro logs --type build --follow    Stream build logs until READY/FAILED
 naro logs --env preview            Preview-surface runtime logs
 
-naro insights                      Speed Insights: Web Vitals p75 (--metric lcp, --range 7d)
+naro analytics                     Web Analytics: visitors, page views, top pages, referrers, countries, devices, browsers, operating systems (--range 7d)
+naro analytics --country KR --os ios  Narrow it: --path, --referrer, --country, --device, --browser, --os (one value each, all must match)
+
+naro insights                      Speed Insights: Web Vitals p75, and the page load's p75 and the mean of each step (--metric lcp, --range 7d)
 naro insights --route '/posts/[id]'  The paths under one route
 naro insights --env preview        The same for the preview worker
+naro insights --country KR --device mobile  Narrow it: --path, --country, --device, --browser, --os (no --referrer: Speed Insights has none)
 naro insights enable | disable     Turn measuring on or off
 
 naro protection                    Preview protection: on or off, and whether a bypass secret is set
@@ -169,7 +173,7 @@ naro policy set posts --from-file policy.json
                                    Shorthand: writes the policies naro_select … naro_delete
 naro policy remove todos           Drop every policy on the table: back to deny (asks first)
 
-naro storage                       Naro Storage: on or off, limits, usage, buckets
+naro storage                       Naro Storage: on or off, limits, usage, today's operations, buckets
 naro storage enable                Turn it on: the project's R2 bucket, bound to the backend
 naro storage bucket create avatars --public --file-size-limit 5MiB --allowed-mime-types image/png,image/jpeg
 naro storage bucket update avatars --private | --file-size-limit none | --allowed-mime-types any
@@ -789,6 +793,53 @@ An `--update-check` you give replaces the default: without
 
 ## Release notes
 
+### 0.15.0
+
+- `naro storage` shows the Storage meter's day between `Used:` and `Buckets:`:
+  `Today (UTC):` has the write operations (R2 Class A) against the daily limit
+  and the reads, `Measured:` the bucket size R2 reported and when R2 measured
+  it (R2 reports the size 30–45 minutes late, and the meter reads it every 15
+  minutes). A `✗` line
+  says uploads are stopped, over the storage limit until objects are deleted
+  or over the day's write operations until 00:00 UTC (downloads still work);
+  a `⚠` line warns from 80% of the storage limit or of the day's write
+  operations. Before the meter has run for the UTC day nothing is added, and
+  `--json` prints `storage.today` and `storage.limits.dailyOps` as the
+  control plane answered.
+
+### 0.14.0
+
+- `naro analytics` shows the project's Web Analytics from the terminal: the
+  range's visitors and page views (`--range 24h|7d|30d`, 7d by default), then
+  the top pages, referrers, countries, devices, browsers and operating systems
+  by page views, and `--json` prints the whole report, trend included. The
+  same six filters as on the dashboard narrow it, one value each, all of them
+  at once: `naro analytics --country KR --os ios`. The first line names the
+  filters that applied; filters that leave no visit print one line under it,
+  `No visits match these filters. Drop a filter to see more.`, instead of six
+  empty tables. The CLI does not check the values; the server answers
+  `400 VALIDATION_FAILED` with the rule the value broke (`--country` is an
+  uppercase two-letter code like `KR`, `--referrer` a lowercase host like
+  `t.co`; `kr` and `T.co` are refused). It reads the
+  production worker only, so `--env` is refused with `VALIDATION_FAILED` and
+  nothing is sent. An API token (`--token`, `NARO_TOKEN`) can read it.
+- `naro insights` takes the same filters: `--path`, `--country`, `--device`,
+  `--browser` and `--os` narrow it to one value each (`--referrer` is refused
+  with `VALIDATION_FAILED` and nothing is sent: a vitals row has no referrer).
+  The first line names the filters that applied
+  (`· filtered by country=KR, os=ios`); filters that leave no measurement print
+  `No measurements match these filters. Drop a filter to see more.` instead of
+  waiting advice.
+  The filters narrow a report only: `naro insights enable | disable` refuses
+  them (`Filters only narrow a report; drop --country.`) and sends nothing, and
+  an empty value (`--referrer=`) is no filter.
+- `naro insights` prints a `Page load p75 … · mean per step: …` line under the
+  metrics table: the p75 of how long visits took to load the page, to the end
+  of the load event, then the mean of each step (wait, DNS, connect, server,
+  download, processing, onload), so the steps need not add up to the p75. It is
+  left out until a visit has sent a page load. The dashboard's Speed Insights
+  tab has the same Page load card.
+
 ### 0.13.0
 
 - `naro insights` shows the project's Speed Insights from the terminal: each

package/dist/{chunk-O4NJRDJE.js → chunk-6WJ3QQ5Y.js}

@@ -294,9 +294,6 @@ function pathnameOf(url2) {
   }
 }
 
-// ../../packages/core/src/internal-auth.ts
-import { Buffer as Buffer2 } from "buffer";
-
 // ../../packages/core/src/migration-names.ts
 function normalizeMigrationName(name) {
   return name.trim().toLowerCase().replace(/\.sql$/, "").replace(/[^a-z0-9]+/g, "_").replace(/^_+|_+$/g, "");
@@ -15253,6 +15250,20 @@ function classifyNextVersion(raw, now) {
 // ../../packages/build/src/package-manager.ts
 import { access, readFile as readFile2 } from "fs/promises";
 import { join as join2 } from "path";
+function cacheEnv(dir) {
+  return {
+    npm_config_store_dir: dir,
+    npm_config_cache: dir,
+    YARN_CACHE_FOLDER: dir
+  };
+}
+function withSharedCache(spec, dir) {
+  return {
+    ...spec,
+    addArgs: (specs) => [...spec.addArgs(specs), ...spec.cacheArgs(dir)],
+    addEnv: { ...spec.addEnv, ...cacheEnv(dir) }
+  };
+}
 async function exists(path) {
   try {
     await access(path);
@@ -15706,7 +15717,7 @@ export default defineCloudflareConfig({});
 
 // ../../packages/build/src/vinext.ts
 var VINEXT_TOOLCHAIN = [
-  "vinext@1.0.0-beta.9",
+  "vinext@1.1.0",
   "@cloudflare/vite-plugin@1.54.7",
   "@vitejs/plugin-react@6.1.1",
   "@vitejs/plugin-rsc@0.5.34",
@@ -15722,7 +15733,7 @@ var VITE_CONFIG_NAMES = [
   "vite.config.mts",
   "vite.config.cts"
 ];
-var GENERATED_VITE_CONFIG = "vite.config.mjs";
+var GENERATED_VITE_CONFIG = "vite.config.js";
 var OUTPUT_DIR = "dist";
 var SERVER_DIR = "server";
 var CLIENT_DIR = "client";
@@ -15787,6 +15798,8 @@ async function createVinextBuildConfig(appRoot, deploymentId, writer = async (pa
 }
 var AUTO_FIXED_ISSUES = [/Missing "type": "module"/i];
 var ISSUE_LINE = /^\s*✗\s+(.+)$/;
+var PARTIAL_LINE = /^\s*~\s+(.+)$/;
+var BLOCKING_PARTIALS = [/^webpack\b/i];
 var ANSI_ESCAPE = /\u001B\[[0-9;]*m/g;
 var SUMMARY_LINE = /Overall:\s*(\d+)%\s*compatible\s*\(\s*(\d+)\s+supported,\s*(\d+)\s+partial,\s*(\d+)\s+issues?\s*\)/i;
 function parseVinextCheckReport(output) {
@@ -15798,12 +15811,18 @@ function parseVinextCheckReport(output) {
       plain.split("\n").map((line) => ISSUE_LINE.exec(line)?.[1]?.trim()).filter((line) => Boolean(line))
     )
   ];
+  const partialLines = [
+    ...new Set(
+      plain.split("\n").map((line) => PARTIAL_LINE.exec(line)?.[1]?.trim()).filter((line) => Boolean(line))
+    )
+  ];
   return {
     percent: Number(match[1]),
     supported: Number(match[2]),
     partial: Number(match[3]),
     issues: Number(match[4]),
-    issueLines
+    issueLines,
+    partialLines
   };
 }
 function vinextRouteFromCheck(report) {
@@ -15815,7 +15834,10 @@ function vinextRouteFromCheck(report) {
   const autoFixed = report.issueLines.filter(
     (line) => AUTO_FIXED_ISSUES.some((pattern) => pattern.test(line))
   );
-  const blocking = Math.max(0, report.issues - autoFixed.length);
+  const blockingPartials = report.partialLines.filter(
+    (line) => BLOCKING_PARTIALS.some((pattern) => pattern.test(line))
+  );
+  const blocking = Math.max(0, report.issues - autoFixed.length) + blockingPartials.length;
   if (blocking > 0)
     return {
       eligible: false,
@@ -17836,6 +17858,7 @@ function createVinextCloudflareStrategy(options) {
             // Not production: npm and classic Yarn read that as omit=dev and
             // would prune the project's devDependencies while adding ours.
             env: {
+              ...context.packageManager.addEnv,
               NODE_ENV: "development",
               NPM_CONFIG_USERCONFIG: context.packageManagerConfigPath
             },
@@ -18217,11 +18240,7 @@ var LocalBuildExecutor = class {
               env: {
                 NODE_ENV: "development",
                 NPM_CONFIG_USERCONFIG: packageManagerConfigPath,
-                ...cachePorts ? {
-                  npm_config_store_dir: pmCacheDir,
-                  npm_config_cache: pmCacheDir,
-                  YARN_CACHE_FOLDER: pmCacheDir
-                } : {}
+                ...cachePorts ? cacheEnv(pmCacheDir) : {}
               },
               timeoutMs: 10 * 6e4,
               stage: "INSTALLING",
@@ -18305,7 +18324,9 @@ var LocalBuildExecutor = class {
             identity,
             branch: input.branch,
             env: input.env ?? {},
-            packageManager,
+            // The toolchain add has to use the store the install linked
+            // node_modules from (withSharedCache).
+            packageManager: cachePorts ? withSharedCache(packageManager, pmCacheDir) : packageManager,
             packageManagerConfigPath,
             buildScript: resolved.buildScript,
             nextVersion: nextVersion ? `${String(nextVersion.major)}.${String(nextVersion.minor)}.${String(nextVersion.patch)}` : "unknown",
@@ -18488,6 +18509,16 @@ function createLogSender(ports) {
   };
 }
 
+// ../../packages/sdk/src/analytics.ts
+var ANALYTICS_FILTER_KEYS = [
+  "path",
+  "referrer",
+  "country",
+  "device",
+  "browser",
+  "os"
+];
+
 // ../../packages/sdk/src/auth.ts
 import { homedir as homedir2 } from "os";
 
@@ -18960,6 +18991,23 @@ function openBrowser(url2) {
   child.unref();
 }
 
+// ../../packages/sdk/src/insights.ts
+var SPEED_INSIGHTS_METRICS = [
+  "lcp",
+  "inp",
+  "cls",
+  "fcp",
+  "ttfb"
+];
+var SPEED_INSIGHTS_FILTER_KEYS = [
+  "path",
+  "country",
+  "device",
+  "browser",
+  "os"
+];
+var SPEED_INSIGHTS_MIN_DEPLOYMENT_SAMPLES = 20;
+
 // ../../packages/sdk/src/types.ts
 var TERMINAL_DEPLOYMENT_STATUSES = [
   "READY",
@@ -19052,6 +19100,7 @@ var NaroClient = class {
   backend;
   storage;
   insights;
+  analytics;
   protection;
   constructor(options) {
     this.baseUrl = (options.baseUrl ?? controlPlaneUrl()).replace(/\/$/, "");
@@ -19069,6 +19118,7 @@ var NaroClient = class {
     this.backend = new BackendApi(this);
     this.storage = new StorageApi(this);
     this.insights = new InsightsApi(this);
+    this.analytics = new AnalyticsApi(this);
     this.protection = new ProtectionApi(this);
   }
   async request(path, options) {
@@ -19477,12 +19527,20 @@ var LogsApi = class {
     return body.entries;
   }
 };
+function appendFilters(params, keys, filters) {
+  if (!filters) return;
+  for (const key of keys) {
+    const value = filters[key];
+    if (value) params.set(key, value);
+  }
+}
 function insightsQuery(options) {
   const params = new URLSearchParams();
   if (options.range !== void 0) params.set("range", options.range);
   if (options.metric !== void 0) params.set("metric", options.metric);
   if (options.environment !== void 0) params.set("env", options.environment);
   if (options.route !== void 0) params.set("route", options.route);
+  appendFilters(params, SPEED_INSIGHTS_FILTER_KEYS, options.filters);
   const text2 = params.toString();
   return text2 ? `?${text2}` : "";
 }
@@ -19493,7 +19551,7 @@ var InsightsApi = class {
   base(projectId) {
     return `/api/projects/${encodeURIComponent(projectId)}/speed-insights`;
   }
-  /** The five metrics' summary, and the trend, pages, devices and elements of one. */
+  /** The five metrics' summary, and the trend, pages, devices, browsers, operating systems, countries and elements of one. */
   async report(projectId, options = {}) {
     return this.client.request(
       `${this.base(projectId)}${insightsQuery(options)}`,
@@ -19553,6 +19611,22 @@ var InsightsApi = class {
     });
   }
 };
+var AnalyticsApi = class {
+  constructor(client) {
+    this.client = client;
+  }
+  /** Visitors, page views, the trend, and the pages, referrers, countries, devices, browsers and operating systems behind them. */
+  async report(projectId, options = {}) {
+    const params = new URLSearchParams();
+    if (options.range !== void 0) params.set("range", options.range);
+    appendFilters(params, ANALYTICS_FILTER_KEYS, options.filters);
+    const text2 = params.toString();
+    return this.client.request(
+      `/api/projects/${encodeURIComponent(projectId)}/analytics${text2 ? `?${text2}` : ""}`,
+      { context: "Read Analytics" }
+    );
+  }
+};
 var ProtectionApi = class {
   constructor(client) {
     this.client = client;
@@ -21056,6 +21130,12 @@ var CATALOG = {
     status: 507,
     message: () => "This project has used all of its storage. Delete objects to free space; uploads fail until then."
   },
+  // Storage 3-1d (design §6.4): like WRITE_QUOTA_EXCEEDED, a 429 that clears
+  // by itself at midnight; downloads, deletes and listings are not refused.
+  STORAGE_OPS_QUOTA_EXCEEDED: {
+    status: 429,
+    message: () => "This project has reached its daily storage operation limit. Downloads still work; uploads resume at 00:00 UTC."
+  },
   // R2 or its binding did not answer; the original error is logged, never sent.
   STORAGE_UNAVAILABLE: {
     status: 503,
@@ -27333,16 +27413,6 @@ function generateTypes(tables, options = {}) {
 `;
 }
 
-// ../../packages/sdk/src/insights.ts
-var SPEED_INSIGHTS_METRICS = [
-  "lcp",
-  "inp",
-  "cls",
-  "fcp",
-  "ttfb"
-];
-var SPEED_INSIGHTS_MIN_DEPLOYMENT_SAMPLES = 20;
-
 // ../../packages/sdk/src/link.ts
 import {
   existsSync as existsSync4,
@@ -28464,6 +28534,7 @@ export {
   schemaMigrationTitle,
   projectPath,
   splitStatements,
+  ANALYTICS_FILTER_KEYS,
   NaroError,
   isNaroError,
   toNaroError,
@@ -28477,6 +28548,9 @@ export {
   login,
   resolveAuth,
   openBrowser,
+  SPEED_INSIGHTS_METRICS,
+  SPEED_INSIGHTS_FILTER_KEYS,
+  SPEED_INSIGHTS_MIN_DEPLOYMENT_SAMPLES,
   isTerminalStatus,
   BACKEND_STEPS,
   isStalledBackend,
@@ -28515,8 +28589,6 @@ export {
   formatRedirectEntry,
   policiesForTypes,
   generateTypes,
-  SPEED_INSIGHTS_METRICS,
-  SPEED_INSIGHTS_MIN_DEPLOYMENT_SAMPLES,
   readProjectLink,
   writeProjectLink,
   removeProjectLink,

package/dist/deploy.js

@@ -5,7 +5,7 @@ import {
   parseDotenv,
   readProjectEnv,
   slugify
-} from "./chunk-O4NJRDJE.js";
+} from "./chunk-6WJ3QQ5Y.js";
 import "./chunk-K3NQKI34.js";
 export {
   deployDirectory,