toilscript 0.1.48 → 0.1.50

package/dist/importmap.json

@@ -1,7 +1,7 @@
 {
   "imports": {
-    "toilscript": "https://cdn.jsdelivr.net/npm/toilscript@0.1.48/dist/toilscript.js",
-    "toilscript/cli": "https://cdn.jsdelivr.net/npm/toilscript@0.1.48/dist/cli.js",
+    "toilscript": "https://cdn.jsdelivr.net/npm/toilscript@0.1.50/dist/toilscript.js",
+    "toilscript/cli": "https://cdn.jsdelivr.net/npm/toilscript@0.1.50/dist/cli.js",
     "binaryen": "https://cdn.jsdelivr.net/npm/binaryen@130.0.0-nightly.20260609/index.js",
     "long": "https://cdn.jsdelivr.net/npm/long@5.3.2/index.js"
   }

package/dist/web.js

@@ -1,8 +1,8 @@
-var ASSEMBLYSCRIPT_VERSION = "0.1.48";
+var ASSEMBLYSCRIPT_VERSION = "0.1.50";
   var ASSEMBLYSCRIPT_IMPORTMAP = {
   "imports": {
-    "toilscript": "https://cdn.jsdelivr.net/npm/toilscript@0.1.48/dist/toilscript.js",
-    "toilscript/cli": "https://cdn.jsdelivr.net/npm/toilscript@0.1.48/dist/cli.js",
+    "toilscript": "https://cdn.jsdelivr.net/npm/toilscript@0.1.50/dist/toilscript.js",
+    "toilscript/cli": "https://cdn.jsdelivr.net/npm/toilscript@0.1.50/dist/cli.js",
     "binaryen": "https://cdn.jsdelivr.net/npm/binaryen@130.0.0-nightly.20260609/index.js",
     "long": "https://cdn.jsdelivr.net/npm/long@5.3.2/index.js"
   }

package/package.json

@@ -8,7 +8,7 @@
     "toilscript",
     "wasm"
   ],
-  "version": "0.1.48",
+  "version": "0.1.50",
   "author": "Daniel Wirtz <dcode+assemblyscript@dcode.io>",
   "license": "Apache-2.0",
   "homepage": "https://github.com/dacely-cloud/toilscript",

package/std/assembly/bindings/toildb.ts

@@ -273,3 +273,19 @@ export namespace toildbHost {
   @external("env", "data.write_allowed")
   export declare function writeAllowed(): i32;
 }
+
+// Per-domain analytics read. The host stashes a versioned little-endian TenantStats
+// frame in the SAME result buffer the `data.*` ops use, so the guest drains it with
+// `toildbHost.takeResult`. Returns the frame length (>= 0), -2 absent (no caller
+// context / unknown domain), -3 forbidden (a non-dacely caller asked for another domain).
+export namespace analyticsHost {
+  // @ts-ignore: decorator
+  @external("env", "analytics_read")
+  export declare function read(domainPtr: usize, domainLen: i32): i32;
+
+  // analytics_list_sites(cursor, limit): frame length (count u32 | (u32 nameLen, name)* |
+  // has_more u8) stashed for takeResult; -3 forbidden when the caller is not dacely.com.
+  // @ts-ignore: decorator
+  @external("env", "analytics_list_sites")
+  export declare function listSites(cursorPtr: usize, cursorLen: i32, limit: i32): i32;
+}

package/std/assembly/toildb.ts

@@ -13,8 +13,8 @@
 // static through a type parameter, but `instantiate<V>()` + `v.decodeInto(buf)`
 // works). Value types must be default-constructible.
 
-import { toildbHost } from "bindings/toildb";
-import { DataWriter } from "data";
+import { analyticsHost, toildbHost } from "bindings/toildb";
+import { DataReader, DataWriter } from "data";
 
 /// Resolve a `"<db>/<collection>"` name to its numeric host handle. Called once
 /// per collection at module init by the generated `App` binding.
@@ -438,6 +438,80 @@ export class Counter<K> {
   }
 }
 
+/// One tenant's analytics snapshot (the metering counters + plan limits), read via the
+/// `Analytics` API. `lifetime` holds the per-domain lifetime totals by metric name
+/// (`requests`, `bytes_served`, `status_2xx`.., `db_ops`, `stream_*`, ...); the request
+/// windows pair the current minute/day usage with the plan cap (cap 0 = unlimited).
+export class TenantStats {
+  lifetime: Map<string, i64> = new Map<string, i64>();
+  reqMinuteUsed: i64 = 0;
+  reqMinuteCap: u64 = 0;
+  reqDayUsed: i64 = 0;
+  reqDayCap: u64 = 0;
+}
+
+/// A page of site names from `Analytics.listSites` (dacely.com only). When `hasMore` is
+/// true, pass the last `sites` entry back as the next call's cursor.
+export class SiteList {
+  sites: string[] = [];
+  hasMore: bool = false;
+}
+
+/// Per-domain analytics. A site reads its OWN stats with `Analytics.self()`. The
+/// privileged `dacely.com` domain may read ANY site with `Analytics.site(domain)`; any
+/// other caller gets `null` for a cross-domain read (`null` is also an unknown domain).
+/// The trusted calling domain is decided host-side — the guest cannot forge it.
+export class Analytics {
+  private static decode(buf: Uint8Array): TenantStats {
+    const r = new DataReader(buf);
+    const stats = new TenantStats();
+    r.readU16(); // frame version (currently 1)
+    const count = r.readU32();
+    for (let i: u32 = 0; i < count && r.ok; i++) {
+      const name = r.readString();
+      stats.lifetime.set(name, r.readI64());
+    }
+    stats.reqMinuteUsed = r.readI64();
+    stats.reqMinuteCap = r.readU64();
+    stats.reqDayUsed = r.readI64();
+    stats.reqDayCap = r.readU64();
+    return stats;
+  }
+
+  /// This site's own analytics. Returns empty stats if unavailable.
+  static self(): TenantStats {
+    const status = analyticsHost.read(0, 0);
+    if (status < 0) return new TenantStats();
+    return Analytics.decode(__toildbTake(status));
+  }
+
+  /// Another site's analytics. Only `dacely.com` may call this for a domain other than
+  /// its own; every other caller (and an unknown domain) gets `null`.
+  static site(domain: string): TenantStats | null {
+    const db = Uint8Array.wrap(String.UTF8.encode(domain));
+    const status = analyticsHost.read(db.dataStart, db.byteLength);
+    if (status < 0) return null;
+    return Analytics.decode(__toildbTake(status));
+  }
+
+  /// Enumerate sites, paginated. ONLY `dacely.com` gets results; any other caller gets an
+  /// empty list. `cursor` is the previous page's last name (`""` = from the start); reads up
+  /// to `limit` names. When `hasMore` is true, pass the last `sites` entry as the next cursor.
+  static listSites(cursor: string = "", limit: i32 = 256): SiteList {
+    const cb = Uint8Array.wrap(String.UTF8.encode(cursor));
+    const out = new SiteList();
+    const status = analyticsHost.listSites(cb.dataStart, cb.byteLength, limit);
+    if (status < 0) return out;
+    const r = new DataReader(__toildbTake(status));
+    const count = r.readU32();
+    for (let i: u32 = 0; i < count && r.ok; i++) {
+      out.sites.push(r.readString());
+    }
+    out.hasMore = r.readU8() != 0;
+    return out;
+  }
+}
+
 /// An append-only event log (spec 7.5): activity feeds, audit trails, the
 /// fact stream a `@derive` consumes. `V` is the `@data` event type, `K` the
 /// `@data` stream-key type.

package/std/assembly/toilscript.d.ts

@@ -282,6 +282,32 @@ declare class Events<K, V> {
   latest(key: K, limit: i32): V[];
 }
 
+/** One tenant's analytics snapshot: per-metric lifetime totals + the request rate
+ *  windows (current usage paired with the plan cap; cap 0 = unlimited). */
+declare class TenantStats {
+  lifetime: Map<string, i64>;
+  reqMinuteUsed: i64;
+  reqMinuteCap: u64;
+  reqDayUsed: i64;
+  reqDayCap: u64;
+}
+
+/** Per-domain analytics. `Analytics.self()` reads this site's own stats; the privileged
+ *  `dacely.com` domain may read any site via `Analytics.site(domain)` (any other caller,
+ *  or an unknown domain, gets `null`). The calling domain is decided host-side. */
+/** A page of site names from `Analytics.listSites` (dacely.com only). When `hasMore` is
+ *  true, pass the last `sites` entry back as the next call's cursor. */
+declare class SiteList {
+  sites: string[];
+  hasMore: bool;
+}
+
+declare class Analytics {
+  static self(): TenantStats;
+  static site(domain: string): TenantStats | null;
+  static listSites(cursor?: string, limit?: i32): SiteList;
+}
+
 // Big integers, native globals implemented in std/assembly/bignum. The
 // arithmetic/bitwise/comparison operators
 // (+ - * / % & | ^ << >> == != < > <= >=) are operator overloads resolved by