naro-cli 0.13.0 → 0.15.0

package/dist/index.js

@@ -1,5 +1,6 @@
 #!/usr/bin/env node
 import {
+  ANALYTICS_FILTER_KEYS,
   BACKEND_STEPS,
   BOOKMARK_FORMAT_MESSAGE,
   INDEX_SQL,
@@ -13,6 +14,7 @@ import {
   RESET_BACKEND_OUTDATED,
   RESTORE_OUTCOME_UNKNOWN_CODES,
   SCHEMA_SQL,
+  SPEED_INSIGHTS_FILTER_KEYS,
   SPEED_INSIGHTS_METRICS,
   SPEED_INSIGHTS_MIN_DEPLOYMENT_SAMPLES,
   STORAGE_OBJECTS_TABLE,
@@ -81,7 +83,7 @@ import {
   toNaroError,
   unreadablePolicyComment,
   writeProjectLink
-} from "./chunk-O4NJRDJE.js";
+} from "./chunk-6WJ3QQ5Y.js";
 import "./chunk-K3NQKI34.js";
 
 // src/args.ts
@@ -139,6 +141,12 @@ var STRING_FLAGS = {
   "--metric": "metric",
   "--range": "range",
   "--route": "route",
+  "--path": "path",
+  "--referrer": "referrer",
+  "--country": "country",
+  "--device": "device",
+  "--browser": "browser",
+  "--os": "os",
   "--file": "file",
   "--output": "output",
   "--lang": "lang",
@@ -490,86 +498,9 @@ import { readFileSync as readFileSync5 } from "fs";
 import { dirname as dirname4, join as join7 } from "path";
 import { fileURLToPath } from "url";
 
-// src/commands/auth.ts
-async function runLogin(context) {
-  const { output } = context;
-  output.log("Opening your browser to sign in with GitHub...");
-  const session = await login({
-    openBrowser: (url) => {
-      output.log(`If your browser did not open, visit:
-  ${url}`);
-      openBrowser(url);
-    }
-  });
-  saveSession(session);
-  output.result(
-    {
-      user: {
-        id: session.user.id,
-        email: session.user.email,
-        github: session.user.github
-      }
-    },
-    [`\u2705 Logged in as ${session.user.email ?? session.user.id}`]
-  );
-}
-async function runLogout(context) {
-  const session = loadStoredSession();
-  if (session) {
-    try {
-      const client = createAuthClient();
-      await client.auth.setSession({
-        access_token: session.access_token,
-        refresh_token: session.refresh_token
-      });
-      await client.auth.signOut();
-    } catch {
-    }
-  }
-  clearSession();
-  context.output.result({ loggedOut: true }, ["Logged out."]);
-}
-async function currentSession() {
-  let session = loadStoredSession();
-  if (!session)
-    throw new NaroError("NOT_LOGGED_IN", "Not logged in. Run `naro login`.");
-  if (isExpired(session)) {
-    try {
-      session = await refreshStoredSession(session.refresh_token);
-      saveSession(session);
-    } catch {
-      throw new NaroError(
-        "NOT_LOGGED_IN",
-        "Session expired. Run `naro login`."
-      );
-    }
-  }
-  return session;
-}
-async function runWhoami(context) {
-  const session = await currentSession();
-  const handle = session.user.github ? ` (${session.user.github})` : "";
-  context.output.result(
-    {
-      user: {
-        id: session.user.id,
-        email: session.user.email,
-        github: session.user.github
-      }
-    },
-    [`Logged in as ${session.user.email ?? session.user.id}${handle}`]
-  );
-}
-async function runToken(context) {
-  const session = await currentSession();
-  process.stderr.write(
-    "\u26A0 Access tokens expire after about an hour \u2014 generate one per CI run.\n"
-  );
-  context.output.result(
-    { token: session.access_token, expiresAt: session.expires_at },
-    [session.access_token]
-  );
-}
+// src/commands/migration.ts
+import { mkdirSync, readFileSync, writeFileSync } from "fs";
+import { join, relative } from "path";
 
 // src/commands/confirm.ts
 function cannotAsk(context) {
@@ -588,8 +519,6 @@ async function confirmOrAbort(context, question) {
 }
 
 // src/commands/migration.ts
-import { mkdirSync, readFileSync, writeFileSync } from "fs";
-import { join, relative } from "path";
 var processStdin = {
   stdinIsTty: () => process.stdin.isTTY === true,
   readStdin
@@ -763,63 +692,438 @@ async function runMigrationRepair(context) {
     context,
     status === "applied" ? `Mark ${key} as applied in the project database's ledger? Its SQL is not run.` : `Remove ${key} from the project database's ledger? Its SQL is not rolled back.`
   );
-  if (status === "applied" && ledger.length === 0)
-    await client.db.query(projectId, { sql: LEDGER_DDL });
-  const answer = await client.db.query(projectId, {
-    sql: status === "applied" ? LEDGER_INSERT : LEDGER_DELETE,
-    params: status === "applied" ? [key, key] : [key, withoutSuffix(key)]
-  });
-  const changed = (answer.statements[0]?.meta.changes ?? 0) > 0;
-  if (!changed) {
-    context.output.warn(nothingToDo);
-    context.output.result({ name: key, status, changed: false });
-    return;
-  }
-  context.output.result({ name: key, status, changed: true }, [
-    status === "applied" ? `\u2713 Marked ${key} as applied.` : `\u2713 Removed ${key} from the ledger.`
-  ]);
+  if (status === "applied" && ledger.length === 0)
+    await client.db.query(projectId, { sql: LEDGER_DDL });
+  const answer = await client.db.query(projectId, {
+    sql: status === "applied" ? LEDGER_INSERT : LEDGER_DELETE,
+    params: status === "applied" ? [key, key] : [key, withoutSuffix(key)]
+  });
+  const changed = (answer.statements[0]?.meta.changes ?? 0) > 0;
+  if (!changed) {
+    context.output.warn(nothingToDo);
+    context.output.result({ name: key, status, changed: false });
+    return;
+  }
+  context.output.result({ name: key, status, changed: true }, [
+    status === "applied" ? `\u2713 Marked ${key} as applied.` : `\u2713 Removed ${key} from the ledger.`
+  ]);
+}
+async function runMigrationUp(context) {
+  const client = await context.client();
+  const projectId = await context.resolveProjectId();
+  const dir = migrationsDir(context);
+  const local = listMigrationFiles(dir);
+  const ledger = await appliedMigrations(client, projectId);
+  const pending = compareMigrations(local, ledger).filter((row) => row.status === "pending").map((row) => row.name);
+  if (pending.length === 0) {
+    context.output.result({ projectId, applied: [], pending: [] }, [
+      "No pending migrations."
+    ]);
+    return;
+  }
+  if (context.flags.dryRun) {
+    const problems = policyProblems(dir, pending);
+    context.output.result({ projectId, dryRun: true, pending, problems }, [
+      `Pending migrations (${String(pending.length)}):`,
+      ...pending.map((name) => `  ${printable(name)}`),
+      ...problems.map(
+        (problem) => `${printable(problem.migration)}: ${printable(problem.message)}`
+      )
+    ]);
+    if (problems.length > 0) process.exitCode = 1;
+    return;
+  }
+  context.output.log(`Pending migrations (${String(pending.length)}):`);
+  for (const name of pending) context.output.log(`  ${printable(name)}`);
+  await confirmOrAbort(
+    context,
+    `Apply ${String(pending.length)} migration(s) to the project database? Each file is applied all-or-nothing; a failure stops the run.`
+  );
+  const { applied, warnings } = await applyMigrationFiles(
+    context,
+    client,
+    projectId,
+    dir,
+    pending
+  );
+  context.output.result({ projectId, applied, pending: [], warnings }, [
+    `\u2705 Applied ${String(applied.length)} migration(s).`
+  ]);
+}
+
+// src/commands/filters.ts
+function filtersOf(flags, keys) {
+  const filters = {};
+  for (const key of keys) {
+    const value = flags[key];
+    if (value !== void 0) filters[key] = value;
+  }
+  return filters;
+}
+function givenFilterFlag(flags) {
+  return ANALYTICS_FILTER_KEYS.find((key) => {
+    const value = flags[key];
+    return value !== void 0 && value !== "";
+  });
+}
+function filteredBy(filters) {
+  const applied = ANALYTICS_FILTER_KEYS.flatMap((key) => {
+    const value = filters[key];
+    return value ? [`${key}=${printable(value)}`] : [];
+  });
+  return applied.length === 0 ? "" : ` \xB7 filtered by ${applied.join(", ")}`;
+}
+
+// src/commands/insights-format.ts
+var OFF_LINE = "Speed Insights is off for this project. Turn it on: naro insights enable";
+var TURNED_ON = "Speed Insights is on. Measuring starts within about a minute; values arrive when visitors leave a page.";
+var TURNED_OFF = "Speed Insights is off. Measuring stops within about a minute; turning it back on shows past measurements again.";
+var RANGE_TEXT = {
+  "24h": "last 24 hours",
+  "7d": "last 7 days",
+  "30d": "last 30 days"
+};
+var PART_TEXT = {
+  ttfb: "TTFB",
+  loadDelay: "load delay",
+  loadDuration: "load duration",
+  renderDelay: "render delay",
+  inputDelay: "input delay",
+  processing: "processing",
+  presentation: "presentation"
+};
+var PAGE_LOAD_PART_TEXT = {
+  wait: "wait",
+  dns: "DNS",
+  connect: "connect",
+  server: "server",
+  download: "download",
+  processing: "processing",
+  onload: "onload"
+};
+function rangeText(range) {
+  const known = RANGE_TEXT;
+  return known[range] ?? printable(range);
+}
+function partText(name) {
+  const known = PART_TEXT;
+  return known[name] ?? printable(name);
+}
+function pageLoadPartText(name) {
+  const known = PAGE_LOAD_PART_TEXT;
+  return known[name] ?? printable(name);
+}
+var ATTRIBUTED = /* @__PURE__ */ new Set([
+  "lcp",
+  "inp",
+  "cls"
+]);
+var DEPLOYMENT_ROWS = 10;
+var SUBJECT_LENGTH = 50;
+function formatMs(ms) {
+  const rounded = Math.round(ms);
+  return rounded < 1e3 ? `${String(rounded)} ms` : `${(rounded / 1e3).toFixed(2)} s`;
+}
+function formatValue(metric, value) {
+  return metric === "cls" ? value.toFixed(2) : formatMs(value);
+}
+function formatChange(metric, change2) {
+  const size = formatValue(metric, Math.abs(change2));
+  if (Number.parseFloat(size) === 0) return "\xB10";
+  return change2 > 0 ? `\u25B2 +${size}` : `\u25BC \u2212${size}`;
+}
+function formatCount(count2) {
+  return Math.round(count2).toLocaleString("en-US");
+}
+function percent(part, total) {
+  return `${String(Math.round(part / total * 100))}%`;
+}
+function label(metric) {
+  return metric.toUpperCase();
+}
+function environmentSuffix(environment) {
+  return environment === "preview" ? ", preview" : "";
+}
+function environmentWord(environment) {
+  return environment === "preview" ? "preview " : "";
+}
+function table(rows) {
+  const widths = [];
+  for (const row of rows)
+    row.forEach((cell, i) => {
+      widths[i] = Math.max(widths[i] ?? 0, cell.length);
+    });
+  return rows.map(
+    (row) => `  ${row.map((cell, i) => cell.padEnd(widths[i] ?? 0)).join("  ")}`.trimEnd()
+  );
+}
+function summaryLines(report) {
+  return table([
+    ["Metric", "p75", "Good", "Needs improvement", "Poor", "Visits"],
+    ...SPEED_INSIGHTS_METRICS.map((metric) => {
+      const summary = report.summary[metric];
+      if (summary.p75 === null || summary.samples <= 0)
+        return [label(metric), "\u2014", "\u2014", "\u2014", "\u2014", "0"];
+      return [
+        label(metric),
+        formatValue(metric, summary.p75),
+        percent(summary.good, summary.samples),
+        percent(summary.needsImprovement, summary.samples),
+        percent(summary.poor, summary.samples),
+        formatCount(summary.samples)
+      ];
+    })
+  ]);
+}
+function pageLoadLine(pageLoad) {
+  if (!pageLoad || pageLoad.samples <= 0 || pageLoad.p75 === null) return null;
+  const head = `Page load p75 ${formatMs(pageLoad.p75)}`;
+  if (pageLoad.parts.length === 0) return head;
+  const steps = pageLoad.parts.map(
+    (part) => `${pageLoadPartText(part.name)} ${formatMs(part.ms)}`
+  );
+  return `${head} \xB7 mean per step: ${steps.join(" \xB7 ")}`;
+}
+function breakdownTable(heading, metric, rows) {
+  if (rows.length === 0) return ["  (none)"];
+  return table([
+    ["p75", "Visits", heading],
+    ...rows.map((row) => [
+      formatValue(metric, row.p75),
+      formatCount(row.samples),
+      printable(row.name)
+    ])
+  ]);
+}
+function elementLines(metric, elements) {
+  const lines = ["", `${label(metric)} elements behind slow visits`];
+  if (elements.length === 0) return [...lines, "  (none)"];
+  for (const row of elements) {
+    lines.push(
+      `  ${printable(row.element)} on ${printable(row.route)}: ${formatCount(row.slow)} slow visits, average ${formatValue(metric, row.average)}`
+    );
+    if (row.parts && row.parts.length > 0)
+      lines.push(
+        `    ${row.parts.map((part) => `${partText(part.name)} ${formatMs(part.ms)}`).join(" \xB7 ")}`
+      );
+    if (row.url) lines.push(`    image ${printable(row.url)}`);
+  }
+  return lines;
+}
+function deploymentName(row) {
+  if (row.source === "cli" || !row.commitSha) return row.id.slice(0, 8);
+  const sha = printable(row.commitSha.slice(0, 7));
+  const subject = [
+    ...printable(row.commitMessage?.split("\n")[0]?.trim() ?? "")
+  ];
+  if (subject.length === 0) return sha;
+  return subject.length > SUBJECT_LENGTH ? `${sha} ${subject.slice(0, SUBJECT_LENGTH - 1).join("")}\u2026` : `${sha} ${subject.join("")}`;
+}
+function changeText(metric, row) {
+  if (row.samples < SPEED_INSIGHTS_MIN_DEPLOYMENT_SAMPLES)
+    return "too few visits";
+  if (row.change === null) return "\u2013";
+  return formatChange(metric, row.change);
+}
+function deploymentLines(metric, deployments, environment) {
+  if (deployments === null) return [];
+  const lines = [
+    "",
+    `${label(metric)} by ${environmentWord(environment)}deployment, newest first`
+  ];
+  const measured = deployments.filter((row) => row.samples > 0).slice(0, DEPLOYMENT_ROWS);
+  if (measured.length === 0) return [...lines, "  (none)"];
+  return [
+    ...lines,
+    ...table([
+      ["", "p75", "Visits", "Change", "Deployment"],
+      ...measured.map((row) => [
+        row.liveUntil === null ? "Live" : "",
+        row.p75 === null ? "\u2014" : formatValue(metric, row.p75),
+        formatCount(row.samples),
+        changeText(metric, row),
+        deploymentName(row)
+      ])
+    ])
+  ];
+}
+function reportLines(report, deployments, filters = {}) {
+  if (!report.enabled) return [OFF_LINE];
+  const { metric, range, environment } = report;
+  const filtered = filteredBy(filters);
+  const head = `Speed Insights \u2014 ${label(metric)}, ${rangeText(range)}${environmentSuffix(environment)}${filtered}`;
+  if (SPEED_INSIGHTS_METRICS.every((m) => report.summary[m].samples <= 0))
+    return [
+      head,
+      "",
+      // The dashboard's noFilteredSamples: waiting is the wrong advice when a
+      // filter is what emptied the report.
+      filtered === "" ? `No ${environmentWord(environment)}measurements in the ${rangeText(range)} yet. Values arrive when visitors leave a page.` : "No measurements match these filters. Drop a filter to see more."
+    ];
+  const pageLoad = pageLoadLine(report.pageLoad);
+  return [
+    head,
+    "",
+    ...summaryLines(report),
+    ...pageLoad === null ? [] : ["", pageLoad],
+    "",
+    `${label(metric)} by page`,
+    ...breakdownTable("Page", metric, report.paths),
+    "",
+    `${label(metric)} by device`,
+    ...breakdownTable("Device", metric, report.devices),
+    ...ATTRIBUTED.has(metric) ? elementLines(metric, report.elements) : [],
+    ...deploymentLines(metric, deployments, environment)
+  ];
+}
+function routePathsLines(result, filters = {}) {
+  return [
+    `${label(result.metric)} p75 under ${printable(result.route)}, ${rangeText(result.range)}${environmentSuffix(result.environment)}${filteredBy(filters)}`,
+    ...breakdownTable("Path", result.metric, result.paths)
+  ];
+}
+
+// src/commands/analytics-format.ts
+var TABLES = [
+  { key: "pages", title: "Pages", column: "Page" },
+  { key: "referrers", title: "Referrers", column: "Referrer" },
+  { key: "countries", title: "Countries", column: "Country" },
+  { key: "devices", title: "Devices", column: "Device" },
+  { key: "browsers", title: "Browsers", column: "Browser" },
+  { key: "os", title: "Operating systems", column: "Operating system" }
+];
+function breakdownLines({ title, column }, rows) {
+  if (rows.length === 0) return [title, "  No data yet."];
+  return [
+    title,
+    ...table([
+      ["Page views", column],
+      // The name last: free text is never padded against anything after it.
+      ...rows.map((row) => [formatCount(row.views), printable(row.name)])
+    ])
+  ];
+}
+function analyticsLines(report, range, filters) {
+  const filtered = filteredBy(filters);
+  const head = `Visitors ${formatCount(report.totals.visitors)} \xB7 Page views ${formatCount(report.totals.views)} \xB7 last ${printable(range)}${filtered}`;
+  if (filtered !== "" && report.totals.views === 0)
+    return [
+      head,
+      "",
+      "No visits match these filters. Drop a filter to see more."
+    ];
+  return [
+    head,
+    ...TABLES.flatMap((spec) => [
+      "",
+      ...breakdownLines(spec, report[spec.key])
+    ])
+  ];
+}
+
+// src/commands/analytics.ts
+function queryOf(flags) {
+  const filters = filtersOf(flags, ANALYTICS_FILTER_KEYS);
+  return {
+    ...flags.range !== void 0 ? { range: flags.range } : {},
+    ...Object.keys(filters).length > 0 ? { filters } : {}
+  };
+}
+async function runAnalytics(context) {
+  if (context.flags.env !== void 0)
+    throw new NaroError(
+      "VALIDATION_FAILED",
+      "Analytics reads the production worker only; drop --env."
+    );
+  const client = await context.client();
+  const projectId = await context.resolveProjectId();
+  const query = queryOf(context.flags);
+  const report = await client.analytics.report(projectId, query);
+  context.output.result(
+    { projectId, ...report },
+    analyticsLines(report, report.range, query.filters ?? {})
+  );
+}
+
+// src/commands/auth.ts
+async function runLogin(context) {
+  const { output } = context;
+  output.log("Opening your browser to sign in with GitHub...");
+  const session = await login({
+    openBrowser: (url) => {
+      output.log(`If your browser did not open, visit:
+  ${url}`);
+      openBrowser(url);
+    }
+  });
+  saveSession(session);
+  output.result(
+    {
+      user: {
+        id: session.user.id,
+        email: session.user.email,
+        github: session.user.github
+      }
+    },
+    [`\u2705 Logged in as ${session.user.email ?? session.user.id}`]
+  );
+}
+async function runLogout(context) {
+  const session = loadStoredSession();
+  if (session) {
+    try {
+      const client = createAuthClient();
+      await client.auth.setSession({
+        access_token: session.access_token,
+        refresh_token: session.refresh_token
+      });
+      await client.auth.signOut();
+    } catch {
+    }
+  }
+  clearSession();
+  context.output.result({ loggedOut: true }, ["Logged out."]);
+}
+async function currentSession() {
+  let session = loadStoredSession();
+  if (!session)
+    throw new NaroError("NOT_LOGGED_IN", "Not logged in. Run `naro login`.");
+  if (isExpired(session)) {
+    try {
+      session = await refreshStoredSession(session.refresh_token);
+      saveSession(session);
+    } catch {
+      throw new NaroError(
+        "NOT_LOGGED_IN",
+        "Session expired. Run `naro login`."
+      );
+    }
+  }
+  return session;
+}
+async function runWhoami(context) {
+  const session = await currentSession();
+  const handle = session.user.github ? ` (${session.user.github})` : "";
+  context.output.result(
+    {
+      user: {
+        id: session.user.id,
+        email: session.user.email,
+        github: session.user.github
+      }
+    },
+    [`Logged in as ${session.user.email ?? session.user.id}${handle}`]
+  );
 }
-async function runMigrationUp(context) {
-  const client = await context.client();
-  const projectId = await context.resolveProjectId();
-  const dir = migrationsDir(context);
-  const local = listMigrationFiles(dir);
-  const ledger = await appliedMigrations(client, projectId);
-  const pending = compareMigrations(local, ledger).filter((row) => row.status === "pending").map((row) => row.name);
-  if (pending.length === 0) {
-    context.output.result({ projectId, applied: [], pending: [] }, [
-      "No pending migrations."
-    ]);
-    return;
-  }
-  if (context.flags.dryRun) {
-    const problems = policyProblems(dir, pending);
-    context.output.result({ projectId, dryRun: true, pending, problems }, [
-      `Pending migrations (${String(pending.length)}):`,
-      ...pending.map((name) => `  ${printable(name)}`),
-      ...problems.map(
-        (problem) => `${printable(problem.migration)}: ${printable(problem.message)}`
-      )
-    ]);
-    if (problems.length > 0) process.exitCode = 1;
-    return;
-  }
-  context.output.log(`Pending migrations (${String(pending.length)}):`);
-  for (const name of pending) context.output.log(`  ${printable(name)}`);
-  await confirmOrAbort(
-    context,
-    `Apply ${String(pending.length)} migration(s) to the project database? Each file is applied all-or-nothing; a failure stops the run.`
+async function runToken(context) {
+  const session = await currentSession();
+  process.stderr.write(
+    "\u26A0 Access tokens expire after about an hour \u2014 generate one per CI run.\n"
   );
-  const { applied, warnings } = await applyMigrationFiles(
-    context,
-    client,
-    projectId,
-    dir,
-    pending
+  context.output.result(
+    { token: session.access_token, expiresAt: session.expires_at },
+    [session.access_token]
   );
-  context.output.result({ projectId, applied, pending: [], warnings }, [
-    `\u2705 Applied ${String(applied.length)} migration(s).`
-  ]);
 }
 
 // src/commands/backend.ts
@@ -1455,7 +1759,7 @@ async function allUsers(client, projectId) {
 function orDash(value) {
   return value === null ? "-" : printable(value);
 }
-function label(user) {
+function label2(user) {
   return printable(user.username ?? user.email ?? user.id);
 }
 function userTable(users) {
@@ -1537,7 +1841,7 @@ async function runBackendUsersCreate(context, input = processStdin3) {
   );
   const signIn = user.username === null ? "naro.auth.signIn({ email, password })" : `naro.auth.signIn({ username: ${JSON.stringify(printable(user.username))}, password })`;
   context.output.result({ projectId, user }, [
-    `\u2705 Created user ${label(user)}. It signs in at once with ${signIn}.`,
+    `\u2705 Created user ${label2(user)}. It signs in at once with ${signIn}.`,
     ...userLines(user)
   ]);
 }
@@ -1562,7 +1866,7 @@ async function runBackendUsersDelete(context) {
       "USER_NOT_FOUND",
       `No user has the id, username or email ${printable(given)}. \`naro backend users\` lists them.`
     );
-  const named = user.id === label(user) ? label(user) : `${label(user)} (${printable(user.id)})`;
+  const named = user.id === label2(user) ? label2(user) : `${label2(user)} (${printable(user.id)})`;
   await confirmOrAbort(
     context,
     `Delete the user ${named}? Their sessions end at once and the account cannot be brought back.`
@@ -4583,206 +4887,35 @@ async function runGenTypes(context) {
   ]);
 }
 
-// src/commands/insights-format.ts
-var OFF_LINE = "Speed Insights is off for this project. Turn it on: naro insights enable";
-var TURNED_ON = "Speed Insights is on. Measuring starts within about a minute; values arrive when visitors leave a page.";
-var TURNED_OFF = "Speed Insights is off. Measuring stops within about a minute; turning it back on shows past measurements again.";
-var RANGE_TEXT = {
-  "24h": "last 24 hours",
-  "7d": "last 7 days",
-  "30d": "last 30 days"
-};
-var PART_TEXT = {
-  ttfb: "TTFB",
-  loadDelay: "load delay",
-  loadDuration: "load duration",
-  renderDelay: "render delay",
-  inputDelay: "input delay",
-  processing: "processing",
-  presentation: "presentation"
-};
-function rangeText(range) {
-  const known = RANGE_TEXT;
-  return known[range] ?? printable(range);
-}
-function partText(name) {
-  const known = PART_TEXT;
-  return known[name] ?? printable(name);
-}
-var ATTRIBUTED = /* @__PURE__ */ new Set([
-  "lcp",
-  "inp",
-  "cls"
-]);
-var DEPLOYMENT_ROWS = 10;
-var SUBJECT_LENGTH = 50;
-function formatMs(ms) {
-  const rounded = Math.round(ms);
-  return rounded < 1e3 ? `${String(rounded)} ms` : `${(rounded / 1e3).toFixed(2)} s`;
-}
-function formatValue(metric, value) {
-  return metric === "cls" ? value.toFixed(2) : formatMs(value);
-}
-function formatChange(metric, change2) {
-  const size = formatValue(metric, Math.abs(change2));
-  if (Number.parseFloat(size) === 0) return "\xB10";
-  return change2 > 0 ? `\u25B2 +${size}` : `\u25BC \u2212${size}`;
-}
-function formatCount(count2) {
-  return Math.round(count2).toLocaleString("en-US");
-}
-function percent(part, total) {
-  return `${String(Math.round(part / total * 100))}%`;
-}
-function label2(metric) {
-  return metric.toUpperCase();
-}
-function environmentSuffix(environment) {
-  return environment === "preview" ? ", preview" : "";
-}
-function environmentWord(environment) {
-  return environment === "preview" ? "preview " : "";
-}
-function table(rows) {
-  const widths = [];
-  for (const row of rows)
-    row.forEach((cell, i) => {
-      widths[i] = Math.max(widths[i] ?? 0, cell.length);
-    });
-  return rows.map(
-    (row) => `  ${row.map((cell, i) => cell.padEnd(widths[i] ?? 0)).join("  ")}`.trimEnd()
-  );
-}
-function summaryLines(report) {
-  return table([
-    ["Metric", "p75", "Good", "Needs improvement", "Poor", "Visits"],
-    ...SPEED_INSIGHTS_METRICS.map((metric) => {
-      const summary = report.summary[metric];
-      if (summary.p75 === null || summary.samples <= 0)
-        return [label2(metric), "\u2014", "\u2014", "\u2014", "\u2014", "0"];
-      return [
-        label2(metric),
-        formatValue(metric, summary.p75),
-        percent(summary.good, summary.samples),
-        percent(summary.needsImprovement, summary.samples),
-        percent(summary.poor, summary.samples),
-        formatCount(summary.samples)
-      ];
-    })
-  ]);
-}
-function breakdownTable(heading, metric, rows) {
-  if (rows.length === 0) return ["  (none)"];
-  return table([
-    ["p75", "Visits", heading],
-    ...rows.map((row) => [
-      formatValue(metric, row.p75),
-      formatCount(row.samples),
-      printable(row.name)
-    ])
-  ]);
-}
-function elementLines(metric, elements) {
-  const lines = ["", `${label2(metric)} elements behind slow visits`];
-  if (elements.length === 0) return [...lines, "  (none)"];
-  for (const row of elements) {
-    lines.push(
-      `  ${printable(row.element)} on ${printable(row.route)}: ${formatCount(row.slow)} slow visits, average ${formatValue(metric, row.average)}`
-    );
-    if (row.parts && row.parts.length > 0)
-      lines.push(
-        `    ${row.parts.map((part) => `${partText(part.name)} ${formatMs(part.ms)}`).join(" \xB7 ")}`
-      );
-    if (row.url) lines.push(`    image ${printable(row.url)}`);
-  }
-  return lines;
-}
-function deploymentName(row) {
-  if (row.source === "cli" || !row.commitSha) return row.id.slice(0, 8);
-  const sha = printable(row.commitSha.slice(0, 7));
-  const subject = [
-    ...printable(row.commitMessage?.split("\n")[0]?.trim() ?? "")
-  ];
-  if (subject.length === 0) return sha;
-  return subject.length > SUBJECT_LENGTH ? `${sha} ${subject.slice(0, SUBJECT_LENGTH - 1).join("")}\u2026` : `${sha} ${subject.join("")}`;
-}
-function changeText(metric, row) {
-  if (row.samples < SPEED_INSIGHTS_MIN_DEPLOYMENT_SAMPLES)
-    return "too few visits";
-  if (row.change === null) return "\u2013";
-  return formatChange(metric, row.change);
-}
-function deploymentLines(metric, deployments, environment) {
-  if (deployments === null) return [];
-  const lines = [
-    "",
-    `${label2(metric)} by ${environmentWord(environment)}deployment, newest first`
-  ];
-  const measured = deployments.filter((row) => row.samples > 0).slice(0, DEPLOYMENT_ROWS);
-  if (measured.length === 0) return [...lines, "  (none)"];
-  return [
-    ...lines,
-    ...table([
-      ["", "p75", "Visits", "Change", "Deployment"],
-      ...measured.map((row) => [
-        row.liveUntil === null ? "Live" : "",
-        row.p75 === null ? "\u2014" : formatValue(metric, row.p75),
-        formatCount(row.samples),
-        changeText(metric, row),
-        deploymentName(row)
-      ])
-    ])
-  ];
-}
-function reportLines(report, deployments) {
-  if (!report.enabled) return [OFF_LINE];
-  const { metric, range, environment } = report;
-  const head = `Speed Insights \u2014 ${label2(metric)}, ${rangeText(range)}${environmentSuffix(environment)}`;
-  if (SPEED_INSIGHTS_METRICS.every((m) => report.summary[m].samples <= 0))
-    return [
-      head,
-      "",
-      `No ${environmentWord(environment)}measurements in the ${rangeText(range)} yet. Values arrive when visitors leave a page.`
-    ];
-  return [
-    head,
-    "",
-    ...summaryLines(report),
-    "",
-    `${label2(metric)} by page`,
-    ...breakdownTable("Page", metric, report.paths),
-    "",
-    `${label2(metric)} by device`,
-    ...breakdownTable("Device", metric, report.devices),
-    ...ATTRIBUTED.has(metric) ? elementLines(metric, report.elements) : [],
-    ...deploymentLines(metric, deployments, environment)
-  ];
-}
-function routePathsLines(result) {
-  return [
-    `${label2(result.metric)} p75 under ${printable(result.route)}, ${rangeText(result.range)}${environmentSuffix(result.environment)}`,
-    ...breakdownTable("Path", result.metric, result.paths)
-  ];
-}
-
 // src/commands/insights.ts
-function queryOf(flags) {
+function queryOf2(flags) {
+  const filters = filtersOf(flags, SPEED_INSIGHTS_FILTER_KEYS);
   return {
     ...flags.range !== void 0 ? { range: flags.range } : {},
     ...flags.metric !== void 0 ? { metric: flags.metric } : {},
-    ...flags.env !== void 0 ? { environment: flags.env } : {}
+    ...flags.env !== void 0 ? { environment: flags.env } : {},
+    ...Object.keys(filters).length > 0 ? { filters } : {}
   };
 }
 async function runInsights(context) {
+  if (context.flags.referrer !== void 0 && context.flags.referrer !== "")
+    throw new NaroError(
+      "VALIDATION_FAILED",
+      "Speed Insights has no referrer; drop --referrer."
+    );
   const client = await context.client();
   const projectId = await context.resolveProjectId();
-  const query = queryOf(context.flags);
+  const query = queryOf2(context.flags);
+  const filters = query.filters ?? {};
   if (context.flags.route !== void 0) {
     const result = await client.insights.paths(projectId, {
       ...query,
       route: context.flags.route
     });
-    context.output.result({ projectId, ...result }, routePathsLines(result));
+    context.output.result(
+      { projectId, ...result },
+      routePathsLines(result, filters)
+    );
     return;
   }
   const overview = await client.insights.overview(projectId, query);
@@ -4792,7 +4925,7 @@ async function runInsights(context) {
     );
   context.output.result(
     { projectId, ...overview },
-    reportLines(overview.report, overview.deployments)
+    reportLines(overview.report, overview.deployments, filters)
   );
 }
 async function setInsights(context, enabled) {
@@ -4801,6 +4934,12 @@ async function setInsights(context, enabled) {
       "VALIDATION_FAILED",
       "Speed Insights has one switch for production and preview; drop --env."
     );
+  const filter = givenFilterFlag(context.flags);
+  if (filter !== void 0)
+    throw new NaroError(
+      "VALIDATION_FAILED",
+      `Filters only narrow a report; drop --${filter}.`
+    );
   const client = await context.client();
   const projectId = await context.resolveProjectId();
   const result = await client.insights.setEnabled(projectId, enabled);
@@ -5133,7 +5272,7 @@ function parseSize(text) {
     throw new NaroError("VALIDATION_FAILED", SIZE_MESSAGE);
   return bytes;
 }
-function binarySize(bytes) {
+function binarySize(bytes, decimals = 1) {
   const units = ["B", "KiB", "MiB", "GiB", "TiB"];
   let value = bytes;
   let unit = 0;
@@ -5141,7 +5280,7 @@ function binarySize(bytes) {
     value /= 1024;
     unit += 1;
   }
-  const shown = unit === 0 ? String(value) : String(Number(value.toFixed(1)));
+  const shown = unit === 0 ? String(value) : String(Number(value.toFixed(decimals)));
   return `${shown} ${units[unit] ?? "B"}`;
 }
 function count(n, noun) {
@@ -5169,6 +5308,51 @@ function bucketLine(bucket) {
   const line = `  ${cells.join("  ")}`;
   return bucket.deletingAt === null ? line : `${line}  (being removed: \`naro storage bucket remove ${name} --empty\` finishes it)`;
 }
+var WARN_PERCENT = 80;
+function utcClock(iso) {
+  const at = new Date(iso);
+  return Number.isNaN(at.getTime()) ? null : at.toISOString().slice(11, 16);
+}
+function warnedPercent(value, limit) {
+  if (limit === null || !(limit > 0)) return null;
+  const percent2 = Math.floor(value * 100 / limit);
+  return percent2 >= WARN_PERCENT ? percent2 : null;
+}
+function meterLines(info) {
+  const { today, limits } = info;
+  if (today === null) return [];
+  const reads = count(today.classBOps, "read");
+  const writes = today.classAOps.toLocaleString("en-US");
+  const dailyOps = limits.dailyOps?.toLocaleString("en-US") ?? null;
+  const lines = [
+    dailyOps === null ? `Today (UTC): ${writes} write operations, ${reads}` : `Today (UTC): ${writes} of ${dailyOps} write operations, ${reads}`
+  ];
+  if (today.measuredBytes === null)
+    lines.push("Measured:    not yet (the meter reads R2 every 15 minutes)");
+  else {
+    const time = today.measuredAt === null ? null : utcClock(today.measuredAt);
+    lines.push(
+      `Measured:    ${binarySize(today.measuredBytes, 2)} in R2${time === null ? "" : ` at ${time} UTC`}`
+    );
+  }
+  if (today.bytesBlocked)
+    lines.push(
+      today.measuredBytes === null ? `\u2717 Uploads are stopped: the bucket is at the storage limit of ${binarySize(limits.bytes)}. Delete objects; uploads reopen after the next measurement (usually within an hour).` : `\u2717 Uploads are stopped: R2 holds ${binarySize(today.measuredBytes, 2)} of ${binarySize(limits.bytes)}. Delete objects; uploads reopen after the next measurement (usually within an hour).`
+    );
+  if (today.opsBlocked)
+    lines.push(
+      dailyOps === null ? "\u2717 Uploads are stopped until 00:00 UTC: today's write operations are used. Downloads still work." : `\u2717 Uploads are stopped until 00:00 UTC: today's ${dailyOps} write operations are used. Downloads still work.`
+    );
+  const storage = today.bytesBlocked || today.measuredBytes === null ? null : warnedPercent(today.measuredBytes, limits.bytes);
+  if (storage !== null)
+    lines.push(`\u26A0 ${String(storage)}% of the storage limit is used.`);
+  const operations = today.opsBlocked ? null : warnedPercent(today.classAOps, limits.dailyOps);
+  if (operations !== null)
+    lines.push(
+      `\u26A0 ${String(operations)}% of today's write operations are used.`
+    );
+  return lines;
+}
 function storageLines(info) {
   if (!info.enabled)
     return [
@@ -5180,6 +5364,7 @@ function storageLines(info) {
     `Storage:     on (R2 bucket ${printable(info.bucket ?? "unknown")})`,
     `Limits:      ${binarySize(limits.bytes)} in all, ${binarySize(limits.objectBytes)} per object, ${binarySize(limits.singleUploadBytes)} per upload`,
     usage === null ? "Used:        not known yet: the backend is not ready (`naro backend` shows where it got to)" : `Used:        ${binarySize(usage.bytes)} in ${count(usage.objects, "object")}`,
+    ...meterLines(info),
     info.buckets.length === 0 ? "Buckets:     none yet (`naro storage bucket create <name>` makes one)" : `Buckets:     ${String(info.buckets.length)}`,
     ...info.buckets.map(bucketLine)
   ];
@@ -8061,9 +8246,13 @@ Usage:
   naro logs [deployment-id]          Runtime logs (or build logs of a deployment)
        [--type build|runtime] [--env production|preview] [--level error] [--follow]
 
-  naro insights [--metric lcp] [--range 7d] [--env preview]
+  naro analytics [--range 7d] [--path p] [--referrer host] [--country KR] [--device mobile] [--browser safari] [--os ios]
+                                     Web Analytics: visitors and page views, then the top pages,
+                                     referrers, countries, devices, browsers and operating systems
+  naro insights [--metric lcp] [--range 7d] [--env preview] [--path p] [--country KR] [--device mobile] [--browser safari] [--os ios]
                                      Speed Insights: Web Vitals p75 by page, device, the elements
-                                     behind slow visits and deployment (production by default)
+                                     behind slow visits and deployment, and the page load: its p75
+                                     and the mean of each step (production by default)
   naro insights --route '/posts/[id]'  The paths opened under one route
   naro insights enable | disable     Turn measuring on or off (production pages get a
                                      same-origin script, preview pages too; past measurements are kept)
@@ -8185,7 +8374,7 @@ Usage:
                                      naro_insert, naro_update, naro_delete (shorthand for CREATE POLICY)
   naro policy remove <table>         Drop every policy on it: back to deny (asks first)
 
-  naro storage [status]              Naro Storage: on or off, limits, what is stored, the buckets
+  naro storage [status]              Naro Storage: on or off, limits, what is stored, today's operations, the buckets
   naro storage enable                Turn Storage on: the project's R2 bucket, bound to its backend
                                      (safe to re-run; applies a plan change's limits)
   naro storage bucket list           The buckets: public or private, objects, bytes, limits
@@ -8221,8 +8410,14 @@ Global options:
   --prod          Deploy/target production
   --wait          Poll until the domain goes live (naro domains verify)
   --metric <m>    lcp, inp, cls, fcp or ttfb; lcp by default (naro insights)
-  --range <r>     24h, 7d or 30d; 7d by default (naro insights)
+  --range <r>     24h, 7d or 30d; 7d by default (naro analytics, naro insights)
   --route <pattern>  A route from the pages table, e.g. '/posts/[id]': the paths under it (naro insights)
+  --path <p>      Only this page, starting with /, e.g. /pricing (naro analytics, naro insights)
+  --referrer <host>  Only visits that came from this lowercase host, e.g. t.co (naro analytics only: Speed Insights has no referrer)
+  --country <cc>  Only this country, an uppercase two-letter code like KR (naro analytics, naro insights)
+  --device <d>    Only this device: desktop, mobile or tablet (naro analytics, naro insights)
+  --browser <b>   Only this browser: chrome, edge, firefox, opera, safari or other (naro analytics, naro insights)
+  --os <o>        Only this operating system: android, ios, linux, macos, windows or other (naro analytics, naro insights)
   --env <e>       production or preview (naro logs, naro insights: production by default; naro env pull: preview by default)
   --no-www        Register the apex alone (naro domains add)
   --file <path>   SQL file to run (naro db query, naro policy create)
@@ -8438,6 +8633,9 @@ function route(parsed) {
       return { handler: runCancel, positionals };
     case "logs":
       return { handler: runLogs, positionals };
+    // Spec 2026-10-08-analytics-cli-pageload §5.
+    case "analytics":
+      return positionals.length === 0 ? { handler: runAnalytics, positionals: [] } : null;
     // Spec 2026-10-08 §5.
     case "insights": {
       if (positionals.length > 1) return null;