signalk-questdb 1.6.0 → 1.7.0

package/.prettierignore

@@ -1,2 +1,4 @@
 dist/
 node_modules/
+.mf/
+public/

package/CLAUDE.md

@@ -4,8 +4,9 @@ This file provides guidance to Claude Code (claude.ai/code) when working with co
 
 ## Commands
 
-- `npm run build` — TypeScript compile (`tsc`) + webpack bundle of the React config panel into `public/`
-- `npm run build:config` — Webpack only (rebuild the config panel without recompiling TS)
+- `npm run build` — TypeScript compile (`tsc`) + panel typecheck + Vite bundle of the React config panel into `public/`
+- `npm run build:config` — Vite only (rebuild the config panel without recompiling TS)
+- `npm run typecheck:panel` — typecheck the config panel (`tsc -p src/configpanel --noEmit`); Vite only strips its types, so this is the only thing that checks them
 - `npm run watch` — `tsc --watch` for the plugin source
 - `npm test` — runs the Node built-in test runner against compiled output (`node --test 'dist/test/**/*.test.js'`). Tests must be built first; use `npm run build:all` to build then test.
 - `npm run format` — prettier write + eslint --fix
@@ -20,8 +21,10 @@ This is a Signal K **server plugin** that ingests vessel data into a managed **Q
 
 ### Two surfaces
 
-1. **Plugin runtime** (`src/index.ts` and siblings) — compiled by `tsc` to `dist/`, loaded by Signal K server as `main` (`dist/index.js`).
-2. **React config panel** (`src/configpanel/`) — bundled by webpack via **Module Federation** into `public/remoteEntry.js`, exposed to the Signal K Admin UI as `./PluginConfigurationPanel`. React 19 is shared as a singleton with the host UI.
+1. **Plugin runtime** (`src/index.ts` and siblings) — compiled by `tsc` to `dist/`, loaded by Signal K server as `main` (`dist/index.js`). The package is **ESM** (`"type": "module"`): `src/index.ts` ends in `export default`, and Signal K's `importOrRequire()` unwraps it. Node ≥ 20.19 can `require()` an ESM module, so this works on both supported Node versions.
+2. **React config panel** (`src/configpanel/`) — TypeScript + JSX, bundled by **Vite** (`vite.config.ts`) via **Module Federation** into `public/remoteEntry.js`, exposed to the Signal K Admin UI as `./PluginConfigurationPanel`. React 19 is shared as a singleton with the host UI. It has its own `tsconfig.json` (browser libs, classic JSX, `noEmit`) so DOM types never reach the Node compile.
+
+   Because the package is `"type": "module"`, the server injects the panel's script tag with `type="module"`, and the Admin UI then loads it as an **ESM remote**: `await import(remoteEntry.js)` expecting exported `get`/`init` (see the admin UI's `views/Webapps/dynamicutilities.ts`). Vite's federation output provides exactly that.
 
 Both build outputs are shipped in the npm package; `prepublishOnly` rebuilds them.
 
@@ -42,19 +45,28 @@ When `managedContainer` is false, the plugin connects to an external QuestDB at
 
 ### Config schema
 
-`src/config/schema.ts` uses **TypeBox** (`@sinclair/typebox`) — the schema is the single source of truth for the JSON-schema Signal K shows in the Admin UI **and** for the `Config` TS type. Add new options there.
+`src/config/schema.ts` uses **TypeBox** — the schema is the single source of truth for the JSON-schema Signal K shows in the Admin UI **and** for the `Config` TS type. Add new options there.
+
+The package is the unscoped `typebox` (1.x), not `@sinclair/typebox` (which stopped at 0.34). TypeBox 1 was published under a new name rather than a major bump, so `npm outdated` will never point at it.
 
 ### REST endpoints
 
 All extra plugin endpoints live under `/plugins/signalk-questdb/api/` and are wired in `src/index.ts` via the `IRouter` Signal K passes to `registerWithRouter`. The `/query` endpoint is gated by `isReadOnlySQL` in `src/query-client.ts` — DDL/DML must remain blocked.
 
+Their wire shapes live in `src/api-contract.ts` and are shared by both surfaces: handlers assert responses with `satisfies`, and the panel casts fetch results to the same types. Add or rename a response field there, not inline — that is what stops the server and panel drifting apart silently.
+
 ### Tests
 
 `src/test/` contains `node:test` suites for ILP encoding, time range parsing, query building, and v2 history. They run against the **compiled** JS in `dist/test/`, so always build before testing.
 
 ## Conventions
 
-- TypeScript strict mode; do not loosen `tsconfig.json`.
-- Prettier + eslint flat config (`eslint.config.js`); run `npm run format` before committing.
-- The config panel is plain JS (not TS) and uses React 19 with Module Federation — keep the federation `shared` block in sync with `package.json`'s React version.
+- TypeScript strict mode everywhere, panel included; do not loosen either `tsconfig.json`. In particular never add `jsx` or a DOM `lib` to the root one — server code referencing `document` would then typecheck clean.
+- **Relative imports in the runtime need the `.js` extension** (`./query-client.js`, even though the source is `.ts`). That is Node's ESM rule, enforced by `moduleResolution: "nodenext"`. Omitting it fails the build, which is the point — switching to `"bundler"` resolution would silently emit unresolvable specifiers instead.
+- **`.npmignore` excludes config files by exact filename** — rename one and the stale entry silently publishes it. `eslint.config.ts` is loaded through `jiti` (eslint 10 needs it for TypeScript configs); it is a devDependency and never ships.
+- **The three ignore files serve opposite purposes for build output.** `public/assets/` is gitignored and prettier-ignored, but must NEVER be added to `.npmignore`: `remoteEntry.js` imports those chunks by name, so excluding them publishes a panel that 404s on load. Only genuinely local artifacts (`.mf/`) belong in all three.
+- Prettier + eslint flat config (`eslint.config.ts`); run `npm run format` before committing.
+- The config panel uses React 19 with Module Federation — keep the federation `shared` block in sync with `package.json`'s React version.
+- **Classic JSX is load-bearing.** `jsxRuntime: "classic"` (vite.config.ts) and `"jsx": "react"` (panel tsconfig) must agree. The automatic runtime imports `react/jsx-runtime`, which is not in the federation `shared` scope, so the remote would carry its own copy of React's jsx runtime — a second React instance whose dispatcher is not the host's, so `useState` reads null and the panel fails to mount. At runtime, with no build error.
+- **Imports leaving `src/configpanel/` must be `import type`.** A value import pulls the module's runtime dependencies into the browser bundle (typebox via `config/schema`, `fs/promises` via `host-limits`). After changing panel imports, confirm with `grep -rl "typebox\|fs/promises" public/` — it must print nothing.
 - `signalk.appIcon` and `signalk.displayName` in `package.json` control how the plugin appears in the Admin UI.

package/README.md

@@ -113,27 +113,60 @@ wants to slice it into kopia-dedup-friendly shards. Allowed tables:
 
 ## Configuration
 
-| Setting                   | Default      | Description                                                                                           |
-| ------------------------- | ------------ | ----------------------------------------------------------------------------------------------------- |
-| QuestDB version           | `latest`     | Docker image tag (dropdown shows stable + pre-releases)                                               |
-| Managed container         | `true`       | Let signalk-container manage QuestDB, or connect to external                                          |
-| QuestDB host              | `127.0.0.1`  | External QuestDB host (only used when managed=false)                                                  |
-| HTTP port                 | `9000`       | External mode, or the host binding when "Bind to 0.0.0.0" is on                                       |
-| ILP port                  | `9009`       | External mode, or the host binding when "Bind to 0.0.0.0" is on                                       |
-| PostgreSQL port           | `8812`       | Host binding for Grafana/psql when "Bind to 0.0.0.0" is on                                            |
-| Sampling rate (ms)        | `2000`       | Default min ms between writes per path (0 = every update)                                             |
-| Write batch interval (ms) | `5000`       | How often buffered samples are committed — one WAL transaction per table per commit (see Performance) |
-| Memory limit              | `768m`       | Hard cgroup cap on QuestDB container RAM (empty = unlimited)                                          |
-| CPU limit (cores)         | `1.5`        | Max CPU cores QuestDB can use (0 = unlimited)                                                         |
-| Record own vessel         | `true`       | Record self context                                                                                   |
-| Record AIS targets        | `false`      | Record other vessels                                                                                  |
-| Retention (days)          | `0`          | Auto-delete old partitions (0 = keep forever)                                                         |
-| Path filter mode          | `exclude`    | `exclude` matching paths, or `include` only matching paths                                            |
-| Path filter paths         | _(empty)_    | Glob patterns, one per line (e.g. `navigation.position`); empty = record everything                   |
-| Compression codec         | `lz4`        | On-disk WAL compression: `none`, `lz4`, or `zstd`                                                     |
-| Compression level         | `3`          | ZSTD level 1-22 (only when codec is zstd)                                                             |
-| Container network         | `sk-network` | Shared network for QuestDB (only applied when binding to 0.0.0.0)                                     |
-| Bind to 0.0.0.0           | `false`      | Expose QuestDB's ports on the LAN (see Connectivity below)                                            |
+| Setting                    | Default      | Description                                                                                           |
+| -------------------------- | ------------ | ----------------------------------------------------------------------------------------------------- |
+| QuestDB version            | `latest`     | Docker image tag (dropdown shows stable + pre-releases)                                               |
+| Managed container          | `true`       | Let signalk-container manage QuestDB, or connect to external                                          |
+| QuestDB host               | `127.0.0.1`  | External QuestDB host (only used when managed=false)                                                  |
+| HTTP port                  | `9000`       | External mode, or the host binding when "Bind to 0.0.0.0" is on                                       |
+| ILP port                   | `9009`       | External mode, or the host binding when "Bind to 0.0.0.0" is on                                       |
+| PostgreSQL port            | `8812`       | Host binding for Grafana/psql when "Bind to 0.0.0.0" is on                                            |
+| Sampling rate (ms)         | `2000`       | Default min ms between writes per path (0 = every update)                                             |
+| Write batch interval (ms)  | `5000`       | How often buffered samples are committed — one WAL transaction per table per commit (see Performance) |
+| Memory limit               | `768m`       | Hard cgroup cap on QuestDB container RAM (empty = unlimited)                                          |
+| CPU limit (cores)          | `1.5`        | Max CPU cores QuestDB can use (0 = unlimited)                                                         |
+| Record own vessel          | `true`       | Record self context                                                                                   |
+| Record AIS targets         | `true`       | Record other vessels                                                                                  |
+| Restore vessels on startup | `false`      | Replay each vessel's last recorded position after a restart (see Startup restore)                     |
+| Restore max age (minutes)  | `9`          | Only replay values recorded within this window                                                        |
+| Retention (days)           | `0`          | Auto-delete old partitions (0 = keep forever)                                                         |
+| Path filter mode           | `exclude`    | `exclude` matching paths, or `include` only matching paths                                            |
+| Path filter paths          | _(empty)_    | Glob patterns, one per line (e.g. `navigation.position`); empty = record everything                   |
+| Compression codec          | `lz4`        | On-disk WAL compression: `none`, `lz4`, or `zstd`                                                     |
+| Compression level          | `3`          | ZSTD level 1-22 (only when codec is zstd)                                                             |
+| Container network          | `sk-network` | Shared network for QuestDB (only applied when binding to 0.0.0.0)                                     |
+| Bind to 0.0.0.0            | `false`      | Expose QuestDB's ports on the LAN (see Connectivity below)                                            |
+
+## Startup restore
+
+Signal K's data model lives in memory only. After a server restart every vessel
+is gone until it transmits again — for AIS that means roughly 30 seconds for a
+Class B target, up to 3 minutes for a Class A at anchor, and about 6 minutes
+before names arrive. The chart fills in gradually instead of showing the traffic
+that was there a moment ago.
+
+With **Restore vessels on startup** enabled, the plugin replays each vessel's
+last recorded position (plus course, speed, heading and identity) from QuestDB
+as soon as it connects, so the chart is populated immediately.
+
+**A restored position is where a vessel _was_, not where it is now.** Nothing is
+dead-reckoned forward. The plugin presents these values as the history they are
+rather than passing them off as live: each delta carries its original recorded
+timestamp, so a chart plotter ages it out under the same staleness rules it
+applies to any other target, and the deltas are tagged
+`$source: signalk-questdb.restore`.
+
+Values outside the **Restore max age** window are not replayed at all. The
+9-minute default matches Freeboard's AIS expiry, so a restored target is one that
+would still have been on the chart had the server never stopped. Raising it puts
+progressively staler positions in front of you — treat the window as a
+collision-avoidance setting, not a convenience one.
+
+Only navigation and identity paths are replayed, so stale tank levels and engine
+temperatures are not resurrected as though they were current readings. A vessel
+with no position in the window is skipped, as is one that has already transmitted
+since startup. Restore honours the recording toggles: with **Record AIS targets**
+off, no AIS target is restored.
 
 ## Connectivity
 
@@ -206,6 +239,30 @@ then browse to `http://localhost:9000`, or enable **"Bind to 0.0.0.0"** in the
 plugin config and use `http://<signalk-host-ip>:9000` (this exposes QuestDB to
 your network — see the warning under Grafana Integration).
 
+### The "Small transactions — consider batching" alert
+
+The console's Monitoring view flags any table whose 90th-percentile WAL
+transaction stays under QuestDB's recommended batch size (100 rows).
+`signalk_position` triggers this **structurally**: the plugin commits its
+write buffer every "Write batch interval", each commit is one WAL transaction
+per table, and the position table holds exactly one path — so its share of
+every commit is just the handful of GPS fixes since the last one. The other
+tables spread hundreds of paths across each transaction and are rarely
+flagged.
+
+At vessel data rates this alert is cosmetic. The numbers that actually matter
+are on the same page: **Write Amplification** near 1x, **Pending Rows** 0, and
+**Transaction Lag** 0 mean the WAL apply is perfectly healthy — QuestDB merges
+many small transactions per apply cycle anyway.
+
+If you want bigger transactions regardless, raise **"Write batch interval"**
+in the plugin config. Clearing the alert for the position table needs roughly
+100 fixes per commit — a batch window in the minutes, not seconds (the exact
+numbers depend on your sampling rate; the config panel states the current
+bounds). The trade-off is honest: up to one batch interval of buffered data is
+lost on a hard crash (a clean Signal K shutdown flushes first), and live-ish
+history queries see new data that much later.
+
 ## Performance (Pi / Low-Power Devices)
 
 The plugin is optimized for Raspberry Pi and similar low-power devices:

package/dist/api-contract.d.ts

@@ -0,0 +1,120 @@
+import type { MaxMapCountStatus } from "./host-limits.js";
+import type { SkipPlan, SuspendedTable } from "./wal-monitor.js";
+/**
+ * Every handler answers failures with `{ error }`, and the action endpoints
+ * answer success with `{ message }`. The panel reads both off one object and
+ * renders whichever is present, so both are optional everywhere rather than
+ * split into a union the callers would have to narrow at ten sites.
+ */
+export interface ApiError {
+    error?: string;
+    message?: string;
+}
+/**
+ * Mirror of signalk-container's `UlimitClamp` event, redeclared (not
+ * imported) for the same reason index.ts redeclares it: signalk-container is
+ * an optional peer reached through globalThis, so there is no type to import.
+ */
+export interface UlimitClampStatus {
+    ulimit: string;
+    requested: number;
+    granted: number;
+    reason: string;
+}
+export type SuspendedTableStatus = SuspendedTable & {
+    /** WAL monitor's verdict for the current stall point: "pending" | "failed". */
+    autoResume: string | null;
+};
+/**
+ * GET /api/status.
+ *
+ * Deliberately flat rather than a union discriminated on `status`: the panel
+ * gates the whole running-state block behind one `isRunning` alias, and TS
+ * does not narrow through an alias. Optional fields let the panel read
+ * `dbStatus?.totalRows` at the leaves instead of restructuring the render.
+ */
+export interface DbStatus extends ApiError {
+    status: "running" | "unhealthy" | "not_running";
+    totalRows?: number;
+    activePathsToday?: number;
+    walSuspended?: boolean;
+    suspendedTables?: SuspendedTableStatus[];
+    schemaMismatch?: boolean;
+    ulimitClamp?: UlimitClampStatus | null;
+    hostMaxMapCount?: MaxMapCountStatus | null;
+    endpoint?: string | null;
+}
+/** GET /api/versions — QuestDB releases, drafts filtered out. */
+export interface QuestdbVersion {
+    tag: string;
+    prerelease: boolean;
+}
+/** GET /api/update/check. */
+export interface UpdateInfo extends ApiError {
+    currentVersion: string;
+    latestVersion: string;
+    updateAvailable: boolean;
+}
+/**
+ * POST /api/update/apply. `newVersion` is the tag the container was actually
+ * recreated with, so the panel can sync its version field to reality.
+ */
+export interface UpdateApplyResponse extends ApiError {
+    status?: string;
+    newVersion?: string;
+}
+export type WalDiagnosisTable = SuspendedTable & {
+    autoResume: string | null;
+    /** Commit-time of the first unapplied txn = when apply froze. */
+    suspendedSince: string | null;
+    pendingSegments: number;
+    /** Null when the failure is a partition-open error, where skipping cannot help. */
+    skipPlan: SkipPlan | null;
+    partitionOpenFailure: boolean;
+    segmentError: string | null;
+    applyError: string | null;
+};
+/** GET /api/wal-diagnosis. */
+export interface WalDiagnosis extends ApiError {
+    tables: WalDiagnosisTable[];
+}
+export interface ResumeWalResult {
+    table: string;
+    ok: boolean;
+    error?: string;
+    writerTxn: number;
+    sequencerTxn: number;
+}
+/** POST /api/resume-wal. */
+export interface ResumeWalResponse extends ApiError {
+    results?: ResumeWalResult[];
+    /** How many of `results` succeeded. */
+    resumed?: number;
+}
+/**
+ * POST /api/resume-wal/skip — the lossy repair. The handler walks a safety
+ * ladder (lossless resume first, destructive skip only if that re-froze), and
+ * these flags say which rung it stopped on. The skip target itself is always
+ * computed server-side; `skipPlan` echoes back what was actually executed.
+ */
+export interface SkipWalResponse extends ApiError {
+    /** True only when the destructive RESUME WAL FROM TXN ran. */
+    skipped?: boolean;
+    /** True when the table was not suspended, or a lossless resume cleared it. */
+    healed?: boolean;
+    /** True when the writer advanced before re-suspending — state changed. */
+    progressed?: boolean;
+    /** True when the table re-suspended at a later segment after the skip. */
+    stillSuspended?: boolean;
+    skipPlan?: SkipPlan;
+}
+export interface MigrationSource {
+    type: string;
+    url: string;
+    status: string;
+    version?: string;
+}
+/** GET /api/migration/detect. */
+export interface MigrationDetectResponse extends ApiError {
+    sources: MigrationSource[];
+}

package/dist/api-contract.js

@@ -0,0 +1,12 @@
+// Wire shapes for the plugin's own REST endpoints under
+// /plugins/signalk-questdb/api/.
+//
+// Both surfaces import these: the handlers in index.ts assert their responses
+// against them with `satisfies`, and the config panel casts fetch results to
+// them. That makes a field rename a compile error on both sides instead of an
+// "undefined" that only shows up as a blank spot in the Admin UI.
+//
+// The panel is a browser bundle, so this file must stay type-only — no
+// imports that pull runtime code (fs, typebox) into webpack's graph.
+export {};
+//# sourceMappingURL=api-contract.js.map

package/dist/api-contract.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"api-contract.js","sourceRoot":"","sources":["../src/api-contract.ts"],"names":[],"mappings":"AAAA,wDAAwD;AACxD,iCAAiC;AACjC,EAAE;AACF,8EAA8E;AAC9E,6EAA6E;AAC7E,8EAA8E;AAC9E,kEAAkE;AAClE,EAAE;AACF,uEAAuE;AACvE,qEAAqE"}

package/dist/config/schema.d.ts

@@ -1,27 +1,29 @@
-import { Static } from "@sinclair/typebox";
-export declare const ConfigSchema: import("@sinclair/typebox").TObject<{
-    questdbHost: import("@sinclair/typebox").TString;
-    questdbIlpPort: import("@sinclair/typebox").TNumber;
-    questdbHttpPort: import("@sinclair/typebox").TNumber;
-    questdbPgPort: import("@sinclair/typebox").TNumber;
-    questdbVersion: import("@sinclair/typebox").TString;
-    managedContainer: import("@sinclair/typebox").TBoolean;
-    questdbMemoryLimit: import("@sinclair/typebox").TString;
-    questdbCpuLimit: import("@sinclair/typebox").TNumber;
-    pathFilter: import("@sinclair/typebox").TObject<{
-        mode: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"exclude">, import("@sinclair/typebox").TLiteral<"include">]>;
-        paths: import("@sinclair/typebox").TArray<import("@sinclair/typebox").TString>;
+import { Type, Static } from "typebox";
+export declare const ConfigSchema: Type.TObject<{
+    questdbHost: Type.TString;
+    questdbIlpPort: Type.TNumber;
+    questdbHttpPort: Type.TNumber;
+    questdbPgPort: Type.TNumber;
+    questdbVersion: Type.TString;
+    managedContainer: Type.TBoolean;
+    questdbMemoryLimit: Type.TString;
+    questdbCpuLimit: Type.TNumber;
+    pathFilter: Type.TObject<{
+        mode: Type.TUnion<[Type.TLiteral<"exclude">, Type.TLiteral<"include">]>;
+        paths: Type.TArray<Type.TString>;
     }>;
-    defaultSamplingRate: import("@sinclair/typebox").TNumber;
-    ilpFlushIntervalMs: import("@sinclair/typebox").TNumber;
-    samplingRates: import("@sinclair/typebox").TRecord<import("@sinclair/typebox").TString, import("@sinclair/typebox").TNumber>;
-    recordSelf: import("@sinclair/typebox").TBoolean;
-    recordOthers: import("@sinclair/typebox").TBoolean;
-    retentionDays: import("@sinclair/typebox").TNumber;
-    networkName: import("@sinclair/typebox").TString;
-    exposeToContainers: import("@sinclair/typebox").TBoolean;
-    compression: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"none">, import("@sinclair/typebox").TLiteral<"lz4">, import("@sinclair/typebox").TLiteral<"zstd">]>;
-    compressionLevel: import("@sinclair/typebox").TNumber;
+    defaultSamplingRate: Type.TNumber;
+    ilpFlushIntervalMs: Type.TNumber;
+    samplingRates: Type.TRecord<"^.*$", Type.TNumber>;
+    recordSelf: Type.TBoolean;
+    recordOthers: Type.TBoolean;
+    restoreOnStart: Type.TBoolean;
+    restoreMaxAgeMinutes: Type.TNumber;
+    retentionDays: Type.TNumber;
+    networkName: Type.TString;
+    exposeToContainers: Type.TBoolean;
+    compression: Type.TUnion<[Type.TLiteral<"none">, Type.TLiteral<"lz4">, Type.TLiteral<"zstd">]>;
+    compressionLevel: Type.TNumber;
 }>;
 export type Config = Static<typeof ConfigSchema>;
 /**

package/dist/config/schema.js

@@ -1,104 +1,111 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.ConfigSchema = void 0;
-exports.normalizeConfig = normalizeConfig;
-const typebox_1 = require("@sinclair/typebox");
-exports.ConfigSchema = typebox_1.Type.Object({
-    questdbHost: typebox_1.Type.String({
+import { Type } from "typebox";
+export const ConfigSchema = Type.Object({
+    questdbHost: Type.String({
         default: "127.0.0.1",
         title: "QuestDB host",
         description: "Only used when managed container is off (external QuestDB). In managed mode the address is resolved automatically.",
     }),
-    questdbIlpPort: typebox_1.Type.Number({
+    questdbIlpPort: Type.Number({
         default: 9009,
         title: "ILP port (writes)",
         description: "External mode, or the host binding when 'Bind to 0.0.0.0' is on. Ignored otherwise (signalk-container allocates the port).",
     }),
-    questdbHttpPort: typebox_1.Type.Number({
+    questdbHttpPort: Type.Number({
         default: 9000,
         title: "HTTP port (queries)",
         description: "External mode, or the host binding when 'Bind to 0.0.0.0' is on. Ignored otherwise (signalk-container allocates the port).",
     }),
-    questdbPgPort: typebox_1.Type.Number({
+    questdbPgPort: Type.Number({
         default: 8812,
         title: "PostgreSQL wire port",
         description: "Host binding for Grafana/psql when 'Bind to 0.0.0.0' is on. Ignored otherwise (signalk-container allocates the port).",
     }),
-    questdbVersion: typebox_1.Type.String({
+    questdbVersion: Type.String({
         default: "latest",
         title: "QuestDB image version",
     }),
-    managedContainer: typebox_1.Type.Boolean({
+    managedContainer: Type.Boolean({
         default: true,
         title: "Manage QuestDB container via signalk-container",
         description: "Disable to connect to an external QuestDB instance",
     }),
-    questdbMemoryLimit: typebox_1.Type.String({
+    questdbMemoryLimit: Type.String({
         default: "768m",
         title: "QuestDB memory limit",
         description: "Hard cgroup memory cap (e.g. 512m, 1g, 2g). Empty = unlimited. The JVM auto-sizes its heap to a fraction of this, so capping here bounds total footprint including off-heap.",
     }),
-    questdbCpuLimit: typebox_1.Type.Number({
+    questdbCpuLimit: Type.Number({
         default: 1.5,
         title: "QuestDB CPU limit (cores)",
         description: "Max CPU cores QuestDB can use (fractional, e.g. 1.5). 0 = unlimited.",
     }),
-    pathFilter: typebox_1.Type.Object({
-        mode: typebox_1.Type.Union([typebox_1.Type.Literal("exclude"), typebox_1.Type.Literal("include")], {
+    pathFilter: Type.Object({
+        mode: Type.Union([Type.Literal("exclude"), Type.Literal("include")], {
             default: "exclude",
             title: "Filter mode",
         }),
-        paths: typebox_1.Type.Array(typebox_1.Type.String(), {
+        paths: Type.Array(Type.String(), {
             default: [],
             title: "Path patterns (glob supported)",
             description: 'e.g. "notifications.*", "environment.wind.*"',
         }),
     }),
-    defaultSamplingRate: typebox_1.Type.Number({
+    defaultSamplingRate: Type.Number({
         default: 2000,
         title: "Default sampling rate (ms)",
         description: "Minimum ms between writes for any path (0 = write every update). 2000ms is a sensible default for Pi/Cerbo-class hardware; lower it per-path via samplingRates when you need finer resolution.",
     }),
-    ilpFlushIntervalMs: typebox_1.Type.Number({
+    ilpFlushIntervalMs: Type.Number({
         default: 5000,
         minimum: 500,
-        maximum: 60000,
+        maximum: 300000,
         title: "Write batch interval (ms)",
-        description: "How often buffered samples are committed to QuestDB. Each commit is one WAL transaction per table, so short intervals create huge numbers of tiny transactions whose apply cost eventually stalls recording on Pi-class hardware — QuestDB recommends >100 rows per transaction. Longer intervals mean at most this many ms of buffered data is lost on a hard crash.",
+        description: "How often buffered samples are committed to QuestDB. Each commit is one WAL transaction per table, so short intervals create huge numbers of tiny transactions whose apply cost eventually stalls recording on Pi-class hardware — QuestDB recommends >100 rows per transaction and its console flags tables below that (see README, 'Small transactions' alert). Longer intervals mean at most this many ms of buffered data is lost on a hard crash.",
     }),
-    samplingRates: typebox_1.Type.Record(typebox_1.Type.String(), typebox_1.Type.Number(), {
+    samplingRates: Type.Record(Type.String(), Type.Number(), {
         default: {},
         title: "Per-path sampling rates (ms)",
         description: 'Override default rate for specific paths. e.g. { "environment.wind.*": 200, "tanks.*": 10000 }',
     }),
-    recordSelf: typebox_1.Type.Boolean({
+    recordSelf: Type.Boolean({
         default: true,
         title: "Record own vessel",
     }),
-    recordOthers: typebox_1.Type.Boolean({
-        default: false,
+    recordOthers: Type.Boolean({
+        default: true,
         title: "Record AIS targets",
     }),
-    retentionDays: typebox_1.Type.Number({
+    restoreOnStart: Type.Boolean({
+        default: false,
+        title: "Restore vessels on startup",
+        description: "After a server restart, replay each vessel's last recorded position from QuestDB so AIS targets appear on the chart immediately instead of only when they next transmit. Restored values are historical — they carry their original timestamp and are aged out normally by the consumer.",
+    }),
+    restoreMaxAgeMinutes: Type.Number({
+        default: 9,
+        minimum: 1,
+        title: "Restore max age (minutes)",
+        description: "Only replay values recorded within this many minutes. Matches Freeboard's default AIS expiry (9 minutes), so a restored target is one that would still have been on the chart. Raising this puts progressively staler positions on the chart.",
+    }),
+    retentionDays: Type.Number({
         default: 0,
         title: "Retention (days, 0 = keep forever)",
     }),
-    networkName: typebox_1.Type.String({
+    networkName: Type.String({
         default: "sk-network",
         title: "Container network",
         description: "Shared Podman/Docker network for QuestDB. Only applied when 'Bind to 0.0.0.0' is on (so a separate-Docker Grafana can reach QuestDB by DNS).",
     }),
-    exposeToContainers: typebox_1.Type.Boolean({
+    exposeToContainers: Type.Boolean({
         default: false,
         title: "Bind to 0.0.0.0",
         description: "Publish QuestDB's ports on all interfaces so another machine or a separate-Docker Grafana can reach them. Off (default) keeps QuestDB private — Signal K still reaches it automatically. Caution! Enabling exposes your data to the network.",
     }),
-    compression: typebox_1.Type.Union([typebox_1.Type.Literal("none"), typebox_1.Type.Literal("lz4"), typebox_1.Type.Literal("zstd")], {
+    compression: Type.Union([Type.Literal("none"), Type.Literal("lz4"), Type.Literal("zstd")], {
         default: "lz4",
         title: "Compression codec",
         description: "Used for QuestDB on-disk WAL segments and Parquet exports (lz4 = fast, zstd = smaller)",
     }),
-    compressionLevel: typebox_1.Type.Number({
+    compressionLevel: Type.Number({
         default: 3,
         title: "Compression level",
         description: "zstd: 1-22 (default 3), lz4: ignored",
@@ -114,7 +121,7 @@ exports.ConfigSchema = typebox_1.Type.Object({
  * stopped. Normalize once at the config boundary instead of guarding every
  * consumer.
  */
-function normalizeConfig(config) {
+export function normalizeConfig(config) {
     return {
         ...config,
         pathFilter: {
@@ -122,6 +129,27 @@ function normalizeConfig(config) {
             paths: config.pathFilter?.paths ?? [],
         },
         samplingRates: config.samplingRates ?? {},
+        // Missing recording toggles get the schema defaults (both ON). The
+        // runtime guards read these directly, so without this a hand-edited or
+        // pre-panel config silently disabled the recording the schema promises.
+        recordSelf: config.recordSelf !== false,
+        recordOthers: config.recordOthers !== false,
+        // Restore is opt-in, so a missing key means OFF — the inverse of the
+        // recording toggles above. A zero or negative window would replay
+        // nothing; treat it as "unset" and use the schema default rather than
+        // silently disabling a feature the user turned on.
+        restoreOnStart: config.restoreOnStart === true,
+        restoreMaxAgeMinutes: config.restoreMaxAgeMinutes && config.restoreMaxAgeMinutes > 0
+            ? config.restoreMaxAgeMinutes
+            : 9,
+        // Missing resource limits get the schema defaults. Config-panel saves
+        // used to drop these keys entirely (issue #98), which ran QuestDB with
+        // NO memory cap instead of the promised 768m — this backfill repairs
+        // configs already damaged by those saves. The documented opt-outs
+        // survive: an explicit "" (memory) or 0 (CPU) means unlimited and is
+        // not a missing key.
+        questdbMemoryLimit: config.questdbMemoryLimit ?? "768m",
+        questdbCpuLimit: config.questdbCpuLimit ?? 1.5,
     };
 }
 //# sourceMappingURL=schema.js.map

package/dist/config/schema.js.map

@@ -1 +1 @@
-{"version":3,"file":"schema.js","sourceRoot":"","sources":["../../src/config/schema.ts"],"names":[],"mappings":";;;AA+IA,0CASC;AAxJD,+CAAiD;AAEpC,QAAA,YAAY,GAAG,cAAI,CAAC,MAAM,CAAC;IACtC,WAAW,EAAE,cAAI,CAAC,MAAM,CAAC;QACvB,OAAO,EAAE,WAAW;QACpB,KAAK,EAAE,cAAc;QACrB,WAAW,EACT,oHAAoH;KACvH,CAAC;IACF,cAAc,EAAE,cAAI,CAAC,MAAM,CAAC;QAC1B,OAAO,EAAE,IAAI;QACb,KAAK,EAAE,mBAAmB;QAC1B,WAAW,EACT,4HAA4H;KAC/H,CAAC;IACF,eAAe,EAAE,cAAI,CAAC,MAAM,CAAC;QAC3B,OAAO,EAAE,IAAI;QACb,KAAK,EAAE,qBAAqB;QAC5B,WAAW,EACT,4HAA4H;KAC/H,CAAC;IACF,aAAa,EAAE,cAAI,CAAC,MAAM,CAAC;QACzB,OAAO,EAAE,IAAI;QACb,KAAK,EAAE,sBAAsB;QAC7B,WAAW,EACT,uHAAuH;KAC1H,CAAC;IACF,cAAc,EAAE,cAAI,CAAC,MAAM,CAAC;QAC1B,OAAO,EAAE,QAAQ;QACjB,KAAK,EAAE,uBAAuB;KAC/B,CAAC;IAEF,gBAAgB,EAAE,cAAI,CAAC,OAAO,CAAC;QAC7B,OAAO,EAAE,IAAI;QACb,KAAK,EAAE,gDAAgD;QACvD,WAAW,EAAE,oDAAoD;KAClE,CAAC;IAEF,kBAAkB,EAAE,cAAI,CAAC,MAAM,CAAC;QAC9B,OAAO,EAAE,MAAM;QACf,KAAK,EAAE,sBAAsB;QAC7B,WAAW,EACT,8KAA8K;KACjL,CAAC;IAEF,eAAe,EAAE,cAAI,CAAC,MAAM,CAAC;QAC3B,OAAO,EAAE,GAAG;QACZ,KAAK,EAAE,2BAA2B;QAClC,WAAW,EACT,sEAAsE;KACzE,CAAC;IAEF,UAAU,EAAE,cAAI,CAAC,MAAM,CAAC;QACtB,IAAI,EAAE,cAAI,CAAC,KAAK,CAAC,CAAC,cAAI,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,cAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,EAAE;YACnE,OAAO,EAAE,SAAS;YAClB,KAAK,EAAE,aAAa;SACrB,CAAC;QACF,KAAK,EAAE,cAAI,CAAC,KAAK,CAAC,cAAI,CAAC,MAAM,EAAE,EAAE;YAC/B,OAAO,EAAE,EAAE;YACX,KAAK,EAAE,gCAAgC;YACvC,WAAW,EAAE,8CAA8C;SAC5D,CAAC;KACH,CAAC;IAEF,mBAAmB,EAAE,cAAI,CAAC,MAAM,CAAC;QAC/B,OAAO,EAAE,IAAI;QACb,KAAK,EAAE,4BAA4B;QACnC,WAAW,EACT,gMAAgM;KACnM,CAAC;IAEF,kBAAkB,EAAE,cAAI,CAAC,MAAM,CAAC;QAC9B,OAAO,EAAE,IAAI;QACb,OAAO,EAAE,GAAG;QACZ,OAAO,EAAE,KAAK;QACd,KAAK,EAAE,2BAA2B;QAClC,WAAW,EACT,uWAAuW;KAC1W,CAAC;IAEF,aAAa,EAAE,cAAI,CAAC,MAAM,CAAC,cAAI,CAAC,MAAM,EAAE,EAAE,cAAI,CAAC,MAAM,EAAE,EAAE;QACvD,OAAO,EAAE,EAAE;QACX,KAAK,EAAE,8BAA8B;QACrC,WAAW,EACT,gGAAgG;KACnG,CAAC;IAEF,UAAU,EAAE,cAAI,CAAC,OAAO,CAAC;QACvB,OAAO,EAAE,IAAI;QACb,KAAK,EAAE,mBAAmB;KAC3B,CAAC;IACF,YAAY,EAAE,cAAI,CAAC,OAAO,CAAC;QACzB,OAAO,EAAE,KAAK;QACd,KAAK,EAAE,oBAAoB;KAC5B,CAAC;IAEF,aAAa,EAAE,cAAI,CAAC,MAAM,CAAC;QACzB,OAAO,EAAE,CAAC;QACV,KAAK,EAAE,oCAAoC;KAC5C,CAAC;IAEF,WAAW,EAAE,cAAI,CAAC,MAAM,CAAC;QACvB,OAAO,EAAE,YAAY;QACrB,KAAK,EAAE,mBAAmB;QAC1B,WAAW,EACT,8IAA8I;KACjJ,CAAC;IAEF,kBAAkB,EAAE,cAAI,CAAC,OAAO,CAAC;QAC/B,OAAO,EAAE,KAAK;QACd,KAAK,EAAE,iBAAiB;QACxB,WAAW,EACT,8OAA8O;KACjP,CAAC;IAEF,WAAW,EAAE,cAAI,CAAC,KAAK,CACrB,CAAC,cAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,cAAI,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,cAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,EACjE;QACE,OAAO,EAAE,KAAK;QACd,KAAK,EAAE,mBAAmB;QAC1B,WAAW,EACT,wFAAwF;KAC3F,CACF;IACD,gBAAgB,EAAE,cAAI,CAAC,MAAM,CAAC;QAC5B,OAAO,EAAE,CAAC;QACV,KAAK,EAAE,mBAAmB;QAC1B,WAAW,EAAE,sCAAsC;KACpD,CAAC;CACH,CAAC,CAAC;AAIH;;;;;;;;;GASG;AACH,SAAgB,eAAe,CAAC,MAAc;IAC5C,OAAO;QACL,GAAG,MAAM;QACT,UAAU,EAAE;YACV,IAAI,EAAE,MAAM,CAAC,UAAU,EAAE,IAAI,IAAI,SAAS;YAC1C,KAAK,EAAE,MAAM,CAAC,UAAU,EAAE,KAAK,IAAI,EAAE;SACtC;QACD,aAAa,EAAE,MAAM,CAAC,aAAa,IAAI,EAAE;KAC1C,CAAC;AACJ,CAAC"}
+{"version":3,"file":"schema.js","sourceRoot":"","sources":["../../src/config/schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAU,MAAM,SAAS,CAAC;AAEvC,MAAM,CAAC,MAAM,YAAY,GAAG,IAAI,CAAC,MAAM,CAAC;IACtC,WAAW,EAAE,IAAI,CAAC,MAAM,CAAC;QACvB,OAAO,EAAE,WAAW;QACpB,KAAK,EAAE,cAAc;QACrB,WAAW,EACT,oHAAoH;KACvH,CAAC;IACF,cAAc,EAAE,IAAI,CAAC,MAAM,CAAC;QAC1B,OAAO,EAAE,IAAI;QACb,KAAK,EAAE,mBAAmB;QAC1B,WAAW,EACT,4HAA4H;KAC/H,CAAC;IACF,eAAe,EAAE,IAAI,CAAC,MAAM,CAAC;QAC3B,OAAO,EAAE,IAAI;QACb,KAAK,EAAE,qBAAqB;QAC5B,WAAW,EACT,4HAA4H;KAC/H,CAAC;IACF,aAAa,EAAE,IAAI,CAAC,MAAM,CAAC;QACzB,OAAO,EAAE,IAAI;QACb,KAAK,EAAE,sBAAsB;QAC7B,WAAW,EACT,uHAAuH;KAC1H,CAAC;IACF,cAAc,EAAE,IAAI,CAAC,MAAM,CAAC;QAC1B,OAAO,EAAE,QAAQ;QACjB,KAAK,EAAE,uBAAuB;KAC/B,CAAC;IAEF,gBAAgB,EAAE,IAAI,CAAC,OAAO,CAAC;QAC7B,OAAO,EAAE,IAAI;QACb,KAAK,EAAE,gDAAgD;QACvD,WAAW,EAAE,oDAAoD;KAClE,CAAC;IAEF,kBAAkB,EAAE,IAAI,CAAC,MAAM,CAAC;QAC9B,OAAO,EAAE,MAAM;QACf,KAAK,EAAE,sBAAsB;QAC7B,WAAW,EACT,8KAA8K;KACjL,CAAC;IAEF,eAAe,EAAE,IAAI,CAAC,MAAM,CAAC;QAC3B,OAAO,EAAE,GAAG;QACZ,KAAK,EAAE,2BAA2B;QAClC,WAAW,EACT,sEAAsE;KACzE,CAAC;IAEF,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC;QACtB,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,EAAE;YACnE,OAAO,EAAE,SAAS;YAClB,KAAK,EAAE,aAAa;SACrB,CAAC;QACF,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE;YAC/B,OAAO,EAAE,EAAE;YACX,KAAK,EAAE,gCAAgC;YACvC,WAAW,EAAE,8CAA8C;SAC5D,CAAC;KACH,CAAC;IAEF,mBAAmB,EAAE,IAAI,CAAC,MAAM,CAAC;QAC/B,OAAO,EAAE,IAAI;QACb,KAAK,EAAE,4BAA4B;QACnC,WAAW,EACT,gMAAgM;KACnM,CAAC;IAEF,kBAAkB,EAAE,IAAI,CAAC,MAAM,CAAC;QAC9B,OAAO,EAAE,IAAI;QACb,OAAO,EAAE,GAAG;QACZ,OAAO,EAAE,MAAM;QACf,KAAK,EAAE,2BAA2B;QAClC,WAAW,EACT,wbAAwb;KAC3b,CAAC;IAEF,aAAa,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,IAAI,CAAC,MAAM,EAAE,EAAE;QACvD,OAAO,EAAE,EAAE;QACX,KAAK,EAAE,8BAA8B;QACrC,WAAW,EACT,gGAAgG;KACnG,CAAC;IAEF,UAAU,EAAE,IAAI,CAAC,OAAO,CAAC;QACvB,OAAO,EAAE,IAAI;QACb,KAAK,EAAE,mBAAmB;KAC3B,CAAC;IACF,YAAY,EAAE,IAAI,CAAC,OAAO,CAAC;QACzB,OAAO,EAAE,IAAI;QACb,KAAK,EAAE,oBAAoB;KAC5B,CAAC;IAEF,cAAc,EAAE,IAAI,CAAC,OAAO,CAAC;QAC3B,OAAO,EAAE,KAAK;QACd,KAAK,EAAE,4BAA4B;QACnC,WAAW,EACT,0RAA0R;KAC7R,CAAC;IACF,oBAAoB,EAAE,IAAI,CAAC,MAAM,CAAC;QAChC,OAAO,EAAE,CAAC;QACV,OAAO,EAAE,CAAC;QACV,KAAK,EAAE,2BAA2B;QAClC,WAAW,EACT,+OAA+O;KAClP,CAAC;IAEF,aAAa,EAAE,IAAI,CAAC,MAAM,CAAC;QACzB,OAAO,EAAE,CAAC;QACV,KAAK,EAAE,oCAAoC;KAC5C,CAAC;IAEF,WAAW,EAAE,IAAI,CAAC,MAAM,CAAC;QACvB,OAAO,EAAE,YAAY;QACrB,KAAK,EAAE,mBAAmB;QAC1B,WAAW,EACT,8IAA8I;KACjJ,CAAC;IAEF,kBAAkB,EAAE,IAAI,CAAC,OAAO,CAAC;QAC/B,OAAO,EAAE,KAAK;QACd,KAAK,EAAE,iBAAiB;QACxB,WAAW,EACT,8OAA8O;KACjP,CAAC;IAEF,WAAW,EAAE,IAAI,CAAC,KAAK,CACrB,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,EACjE;QACE,OAAO,EAAE,KAAK;QACd,KAAK,EAAE,mBAAmB;QAC1B,WAAW,EACT,wFAAwF;KAC3F,CACF;IACD,gBAAgB,EAAE,IAAI,CAAC,MAAM,CAAC;QAC5B,OAAO,EAAE,CAAC;QACV,KAAK,EAAE,mBAAmB;QAC1B,WAAW,EAAE,sCAAsC;KACpD,CAAC;CACH,CAAC,CAAC;AAIH;;;;;;;;;GASG;AACH,MAAM,UAAU,eAAe,CAAC,MAAc;IAC5C,OAAO;QACL,GAAG,MAAM;QACT,UAAU,EAAE;YACV,IAAI,EAAE,MAAM,CAAC,UAAU,EAAE,IAAI,IAAI,SAAS;YAC1C,KAAK,EAAE,MAAM,CAAC,UAAU,EAAE,KAAK,IAAI,EAAE;SACtC;QACD,aAAa,EAAE,MAAM,CAAC,aAAa,IAAI,EAAE;QACzC,mEAAmE;QACnE,uEAAuE;QACvE,wEAAwE;QACxE,UAAU,EAAE,MAAM,CAAC,UAAU,KAAK,KAAK;QACvC,YAAY,EAAE,MAAM,CAAC,YAAY,KAAK,KAAK;QAC3C,qEAAqE;QACrE,kEAAkE;QAClE,sEAAsE;QACtE,mDAAmD;QACnD,cAAc,EAAE,MAAM,CAAC,cAAc,KAAK,IAAI;QAC9C,oBAAoB,EAClB,MAAM,CAAC,oBAAoB,IAAI,MAAM,CAAC,oBAAoB,GAAG,CAAC;YAC5D,CAAC,CAAC,MAAM,CAAC,oBAAoB;YAC7B,CAAC,CAAC,CAAC;QACP,sEAAsE;QACtE,uEAAuE;QACvE,qEAAqE;QACrE,kEAAkE;QAClE,qEAAqE;QACrE,qBAAqB;QACrB,kBAAkB,EAAE,MAAM,CAAC,kBAAkB,IAAI,MAAM;QACvD,eAAe,EAAE,MAAM,CAAC,eAAe,IAAI,GAAG;KAC/C,CAAC;AACJ,CAAC"}

package/dist/configpanel/responses.d.ts

@@ -0,0 +1,18 @@
+import type { MigrationSource, QuestdbVersion } from "../api-contract.js";
+/**
+ * GET /api/versions returns an array of releases. Anything else becomes an
+ * empty list, and malformed members are dropped: the version dropdown is
+ * then short or empty rather than the panel being gone.
+ *
+ * Members are validated, not just the array — `versions.filter(v =>
+ * !v.prerelease)` runs during render, so a single null element is as fatal
+ * as a non-array body.
+ */
+export declare function toVersionList(body: unknown): QuestdbVersion[];
+/**
+ * GET /api/migration/detect returns `{ sources: [...] }`. A body without it
+ * means "nothing detected", which is also what an empty array means — so the
+ * user gets the honest "no InfluxDB found" instead of a TypeError surfaced
+ * as "Detection failed".
+ */
+export declare function toMigrationSources(body: unknown): MigrationSource[];