tracksiy 0.7.0 → 0.9.0

package/README.md

@@ -132,6 +132,11 @@ Labels: `bug`, `feature`, `question`, `blocker`. `npx tracksiy support` prints t
 | `settings` | The project's reading rules: environments, grouping rules, privacy rules, source roots. | read | `settings` |
 | `settings set` | Change the project's reading rules. Only the flags given change; the rest are kept. | write | `settings_set` |
 | `privacy-preview` | Try privacy rules on the project's last 50 stored events: what each would change and what PII shapes would remain. Writes nothing. | read | `privacy_preview` |
+| `budgets get` | The project's performance budgets and each one's last verdict (judged every 5 minutes). | read | `budgets_get` |
+| `budgets set` | Declare performance budgets: told once when one is crossed and once when it is met again. | write | `budgets_set` |
+| `budgets check` | Judge every budget now -- for one release with --release. Exit code 10 if one is crossed. For a deploy to stop on. | read | `budgets_check` |
+| `performance findings` | Routes that got slower after a release and N+1 queries, which Tracksiy raised as issues on its own. | read | `performance_findings` |
+| `monitors timing <slug>` | Where an HTTP monitor's time goes (DNS, connect, server, TTFB, download, page size); how long a job runs and how close to its max runtime. | read | `monitors_timing` |
 | `issues list` | Recent issues of a project, newest activity first, with the frames that matter inlined. | read | `issues_list` |
 | `issues view <id>` | One issue in enough depth to act on: latest event, stack frames, tags, recent volume. | read | `issues_view` |
 | `issues resolve <ids...>` | Mark issues resolved, optionally fixed in a release so old clients do not reopen them. Records why. | write | `issues_resolve` |

package/dist/tracksiy.mjs

@@ -4,7 +4,7 @@
 import { readFileSync as readFileSync2 } from "node:fs";
 
 // src/version.ts
-var VERSION = true ? "0.7.0" : "0.0.0-dev";
+var VERSION = true ? "0.9.0" : "0.0.0-dev";
 var USER_AGENT = `tracksiy-cli/${VERSION} (node ${process.versions.node}; ${process.platform})`;
 
 // src/core/errors.ts
@@ -822,7 +822,7 @@ var monitorsList = {
     status: { type: "string", enum: ["all", "up", "down", "never"], description: "Filter by state. Default all." },
     type: { type: "string", enum: ["heartbeat", "get", "ping", "ssl", "ingest"], description: "Only this monitor type." }
   },
-  output: "{summary{total, up, down, never, unalertable}, monitors:[{id, name, project, monitorType, url, upNow, lastCheck, overdue, alertable, checkInUrl}], notes[]}",
+  output: "{summary{total, up, down, never, unalertable}, monitors:[{id, name, project, monitorType, url, upNow, lastCheck, overdue, alertable, checkInUrl, downReason, lastCheckDetail{status, expectedStatus, bytes, truncated, expectedTextFound, forbiddenTextFound, error, ms}}], notes[]}",
   text: (d) => `${kv(d.summary ?? {})}
 
 ${table(d.monitors ?? [], [
@@ -830,6 +830,7 @@ ${table(d.monitors ?? [], [
     "project",
     "monitorType",
     ["up", (r) => r.upNow == null ? "never" : r.upNow],
+    ["why down", (r) => r.downReason ?? ""],
     ["last check", (r) => ago(r.lastCheck)],
     ["alertable", (r) => r.alertable]
   ])}`,
@@ -945,7 +946,7 @@ var performance = {
   flags: {
     since: { type: "string", value: TIME, description: "Window start (default: server's, 24h; 7d with --release)." },
     op: { type: "string", value: "<op>", description: "Only this operation, e.g. http.server or pageload." },
-    sort: { type: "string", enum: ["slower", "duration", "p95", "failures"], description: "Order (default: slower first)." },
+    sort: { type: "string", enum: ["slower", "duration", "p95", "failures", "impact"], description: "Order (default: slower first). impact: total time taken (count x mean), the route that costs the most overall." },
     limit: { type: "integer", value: "<n>", description: "How many transactions." },
     release: { type: "string", value: "<version>", description: "Compare this release's transactions with --against instead of two time windows." },
     against: { type: "string", value: "<version>", description: "The release to compare with (default: the one before --release)." }
@@ -953,9 +954,11 @@ var performance = {
   examples: [
     { command: "tracksiy performance --sort p95", description: "The slowest routes by p95." },
     { command: "tracksiy performance --release web@$(git rev-parse HEAD)", description: "Did this deploy make anything slower or failing?" },
-    { command: "tracksiy performance --op pageload --select transactions.transaction,transactions.current.webVitals", description: "Core Web Vitals (p75) per page." }
+    { command: "tracksiy performance --op pageload --select transactions.transaction,transactions.current.webVitals", description: "Core Web Vitals (p75) per page." },
+    { command: "tracksiy performance --sort impact", description: "Where the server's time goes: count x mean, with each route's share." },
+    { command: "tracksiy performance --op ui.interaction --sort p95", description: "The slowest interactions (INP) by route." }
   ],
-  output: "{since, until, release?, againstRelease?, transactions:[{transaction, op, current{count, avgDurationMs, p50Ms, p95Ms, p99Ms, failureRate, failed, status, webVitals}, previous{...}, changeRatio, slower}], uptime[...], blindSpots[...]}",
+  output: "{since, until, release?, againstRelease?, transactions:[{transaction, op, current{count, avgDurationMs, p50Ms, p95Ms, p99Ms, failureRate, failed, status, webVitals}, previous{...}, changeRatio, slower, totalTimeMs, timeShare}], uptime[...], blindSpots[...]}",
   text: (d) => `${table(d.transactions ?? [], [
     "transaction",
     "op",
@@ -965,7 +968,8 @@ var performance = {
     ["fail", (r) => r.current?.failureRate == null ? "-" : `${(r.current.failureRate * 100).toFixed(1)}%`],
     ["count", (r) => r.current?.count ?? "-"],
     ["change", (r) => r.changeRatio == null ? "-" : `${r.changeRatio > 0 ? "+" : ""}${Math.round(r.changeRatio * 100)}%`],
-    ["slower", (r) => r.slower]
+    ["slower", (r) => r.slower],
+    ["share", (r) => r.timeShare == null ? "-" : `${(r.timeShare * 100).toFixed(1)}%`]
   ])}${(d.uptime ?? []).length ? `
 
 uptime:
@@ -1000,7 +1004,7 @@ var queries = {
     { command: "tracksiy queries --since 24h", description: "The queries that cost the most time today." },
     { command: "tracksiy queries --sort perTransaction --select queries.query,queries.maxPerTransaction,queries.routes", description: "N+1 candidates." }
   ],
-  output: "{since, until, queries:[{fingerprint, op, query, count, transactions, perTransaction, maxPerTransaction, totalMs, avgMs, maxMs, previous{count, avgMs}, changeRatio, nPlusOne, routes[{transaction, count, avgMs}]}], note}",
+  output: "{since, until, queries:[{fingerprint, op, query, count, transactions, perTransaction, maxPerTransaction, totalMs, avgMs, maxMs, previous{count, avgMs}, changeRatio, nPlusOne, routes[{transaction, count, avgMs}], origin{file, line, function, repoPath}}], note}",
   text: (d) => table(d.queries ?? [], [
     ["total ms", (r) => r.totalMs],
     ["avg", (r) => r.avgMs ?? "-"],
@@ -1008,7 +1012,8 @@ var queries = {
     ["count", (r) => r.count],
     ["per req", (r) => r.perTransaction],
     ["n+1", (r) => r.nPlusOne ? "yes" : ""],
-    ["query", (r) => String(r.query).slice(0, 90)]
+    ["query", (r) => String(r.query).slice(0, 90)],
+    ["where", (r) => r.origin ? `${r.origin.repoPath ?? r.origin.file}${r.origin.line ? `:${r.origin.line}` : ""}` : ""]
   ]),
   async run(ctx) {
     return ctx.api.get(await projectPath(ctx, "queries"), {
@@ -1045,7 +1050,7 @@ var settingsGet = {
   context: "project",
   effect: "read",
   endpoint: { method: "GET", path: "/api/agent/v1/projects/{org}/{project}/settings" },
-  output: "{sourceRoots[], environments[], environmentPolicy, fingerprintRules[], privacyRules[]}",
+  output: "{sourceRoots[], environments[], environmentPolicy, fingerprintRules[], privacyRules[], performanceIssues}",
   async run(ctx) {
     return ctx.api.get(await projectPath(ctx, "settings"));
   }
@@ -1073,18 +1078,19 @@ var settingsSet = {
   flags: {
     environments: { type: "list", value: "<env,...>", description: "The environments this project reports from (empty string: any)." },
     "environment-policy": { type: "string", enum: ["flag", "drop"], description: "What happens to an event from another environment." },
-    "source-root": { type: "list", split: false, value: "<path> | strip=<path>,prepend=<dir/>[,surface=<surface>]", description: "How frame paths become repo paths: a prefix to strip, or strip + prepend (for an SDK that already sends /app/... of a repo's backend/), optionally for one surface. Repeatable; replaces the list." },
+    "source-root": { type: "list", split: false, value: "<path> | strip=<path>,prepend=<dir/>[,surface=<surface>]", description: "How frame paths become repo paths: a prefix to strip, or strip + prepend, optionally for one surface. Each rule is tried on the frame's abs_path first (sentry-laravel: the full server path, /home/admin/web/shop/backend/app/...), then on filename (/app/...). Repeatable; replaces the list." },
     "fingerprint-rule": { type: "list", split: false, value: "type=<glob>,message=<glob>,fingerprint=<name>", description: "Group matching events into one issue. Repeatable; replaces the list." },
     "privacy-rule": { type: "list", split: false, value: "dropHeader=<name> | mask=<email|iban|card_number|tckn|jwt>,field=<path|*>", description: "Scrub before storage. Repeatable; replaces the list." },
+    "performance-issues": { type: "boolean", description: "Raise issues on its own for routes slower after a release and N+1 queries (default on). --no-performance-issues turns it off." },
     body: { type: "json", value: "<json|@file|->", description: "The whole declaration; overrides the flags." }
   },
   examples: [
     { command: "tracksiy settings set --environments production,staging --environment-policy drop", description: "local and local1 stop reaching Tracksiy." },
     { command: "tracksiy settings set --fingerprint-rule 'type=ViewException,message=syntax error*,fingerprint=blade-syntax'", description: "Every half-written template is one issue." },
     { command: "tracksiy settings set --source-root /home/admin/web/shop/", description: "Frames carry repoPath." },
-    { command: "tracksiy settings set --source-root 'strip=/,prepend=backend/,surface=backend'", description: "Laravel sends /app/Http/...; the repo has it under backend/." }
+    { command: "tracksiy settings set --source-root 'strip=/var/www/shop/,prepend=backend/,surface=backend'", description: "The server checkout is only the repo's backend/ directory." }
   ],
-  output: "{sourceRoots[], environments[], environmentPolicy, fingerprintRules[], privacyRules[]}",
+  output: "{sourceRoots[], environments[], environmentPolicy, fingerprintRules[], privacyRules[], performanceIssues}",
   async run(ctx) {
     const path = await projectPath(ctx, "settings");
     const i = ctx.input;
@@ -1095,7 +1101,8 @@ var settingsSet = {
       environments: i.environments ? i.environments.filter((e) => e) : current.environments ?? [],
       environmentPolicy: i.environmentPolicy ?? current.environmentPolicy ?? "flag",
       fingerprintRules: pairs(i.fingerprintRule, "fingerprint-rule") ?? current.fingerprintRules ?? [],
-      privacyRules: pairs(i.privacyRule, "privacy-rule") ?? current.privacyRules ?? []
+      privacyRules: pairs(i.privacyRule, "privacy-rule") ?? current.privacyRules ?? [],
+      performanceIssues: i.performanceIssues ?? current.performanceIssues ?? true
     };
     return ctx.api.send("PUT", path, next);
   }
@@ -1118,6 +1125,198 @@ var privacyPreview = {
 };
 var fleet_default = [orgs, projects, overview, changes, health, monitorsList, monitorsDeclare, monitorsDelete, monitorsDeleted, performance, queries, notFound, settingsGet, settingsSet, privacyPreview];
 
+// src/commands/perf.ts
+var METRICS = "p50|p75|p95|p99|failure_rate|lcp|fcp|inp|cls|ttfb (transactions); response_p95|ttfb_p95 (HTTP monitors); duration_p95 (heartbeats)";
+var BUDGET_KEYS = {
+  name: "name",
+  transaction: "transaction",
+  op: "op",
+  monitor: "monitor",
+  metric: "metric",
+  max: "max",
+  window: "windowMinutes",
+  "window-minutes": "windowMinutes",
+  windowMinutes: "windowMinutes",
+  "min-samples": "minSamples",
+  minSamples: "minSamples"
+};
+var NUMERIC = /* @__PURE__ */ new Set(["max", "windowMinutes", "minSamples"]);
+function parseBudget(raw) {
+  const out = {};
+  for (const part of String(raw).split(/,(?=\s*[\w-]+=)/)) {
+    const eq = part.indexOf("=");
+    if (eq < 1) throw usageError("bad_value", `--budget expects key=value,..., got ${JSON.stringify(raw)}`, "e.g. --budget 'name=init,transaction=GET /api/v1/init,metric=p95,max=800'");
+    const key = part.slice(0, eq).trim();
+    const field = BUDGET_KEYS[key];
+    if (!field) throw usageError("bad_value", `--budget: unknown key ${JSON.stringify(key)}`, `Keys: name, transaction, op, monitor, metric, max, window, min-samples.`);
+    const value = part.slice(eq + 1).trim();
+    if (NUMERIC.has(field)) {
+      const n = Number(value);
+      if (!Number.isFinite(n)) throw usageError("bad_value", `--budget ${key}=${value} is not a number`);
+      out[field] = n;
+    } else {
+      out[field] = value;
+    }
+  }
+  for (const required of ["name", "metric", "max"]) {
+    if (out[required] === void 0) throw usageError("bad_value", `--budget ${JSON.stringify(raw)} has no ${required}=`);
+  }
+  return out;
+}
+var budgetsText = (d) => `${table(d.budgets ?? [], [
+  "name",
+  ["target", (r) => r.monitor ? `monitor ${r.monitor}` : [r.op, r.transaction].filter(Boolean).join(" ") || "every transaction"],
+  "metric",
+  ["max", (r) => `${r.max}${r.unit === "ms" ? " ms" : ""}`],
+  ["value", (r) => r.value == null ? "-" : `${Math.round(r.value * 1e3) / 1e3}`],
+  ["status", (r) => r.status ?? "not yet"],
+  ["samples", (r) => r.samples],
+  ["since", (r) => r.breachedSince ? ago(r.breachedSince) : ""]
+])}${(d.changes ?? []).length ? `
+
+changes:
+${table(d.changes, ["name", "action"])}` : ""}`;
+var budgetsGet = {
+  path: ["budgets", "get"],
+  aliases: [["budgets"]],
+  summary: "The project's performance budgets and each one's last verdict (judged every 5 minutes).",
+  context: "project",
+  effect: "read",
+  endpoint: { method: "GET", path: "/api/agent/v1/projects/{org}/{project}/budgets" },
+  output: "{budgets:[{name, transaction, op, monitor, metric, max, unit, windowMinutes, minSamples, status, value, samples, evaluatedAt, breachedSince}], notes[]}",
+  text: budgetsText,
+  async run(ctx) {
+    return ctx.api.get(await projectPath(ctx, "budgets"));
+  }
+};
+var budgetsSet = {
+  path: ["budgets", "set"],
+  summary: "Declare performance budgets: told once when one is crossed and once when it is met again.",
+  description: `The list replaces the stored one, by name (--merge keeps the others). Metrics: ${METRICS}. max is an upper bound: ms, a 0..1 ratio for failure_rate, unitless for cls. Below min-samples the verdict is unknown, never pass. Alerts go through the project's rules with performance on (the default).`,
+  context: "project",
+  effect: "write",
+  idempotent: true,
+  endpoint: { method: "PUT", path: "/api/agent/v1/projects/{org}/{project}/budgets" },
+  flags: {
+    budget: {
+      type: "list",
+      split: false,
+      value: "name=<n>,metric=<m>,max=<x>[,transaction=<route|glob*>][,op=<op>][,monitor=<slug>][,window=<min>][,min-samples=<n>]",
+      description: "One budget. Repeatable."
+    },
+    merge: { type: "boolean", description: "Keep the stored budgets not named here (default: the list is the whole declaration)." },
+    "dry-run": { type: "boolean", description: "Report the changes without writing." },
+    body: { type: "json", value: "<json|@file|->", description: "Raw body {budgets:[...]}; overrides the flags." }
+  },
+  examples: [
+    { command: "tracksiy budgets set --budget 'name=init,transaction=GET /api/v1/init,metric=p95,max=800'", description: "Told when the init call's p95 passes 800 ms over an hour." },
+    { command: "tracksiy budgets set --merge --budget 'name=inp,op=ui.interaction,metric=inp,max=200,window=1440'", description: "INP p75 over a day, across every route; keeps the other budgets." },
+    { command: "tracksiy budgets set --merge --budget 'name=backup,monitor=db-backup-s3,metric=duration_p95,max=1200000,window=10080,min-samples=3'", description: "Told before the nightly backup gets near its max runtime." }
+  ],
+  output: "The stored budgets and `changes` [{name, action}], same shape as `budgets get`.",
+  text: budgetsText,
+  async run(ctx) {
+    const path = await projectPath(ctx, "budgets");
+    const i = ctx.input;
+    if (i.body) return ctx.api.send("PUT", path, i.body);
+    if (!i.budget?.length && !i.merge) throw usageError("missing_flag", "No --budget given.", `Pass --budget ... (repeatable), or --body. To delete every budget: --body '{"budgets": []}'.`);
+    let budgets = (i.budget ?? []).map(parseBudget);
+    if (i.merge) {
+      const current = await ctx.api.get(path);
+      const named = new Set(budgets.map((b) => b.name));
+      const kept = (current.budgets ?? []).filter((b) => !named.has(b.name)).map((b) => compact({ name: b.name, transaction: b.transaction ?? void 0, op: b.op ?? void 0, monitor: b.monitor ?? void 0, metric: b.metric, max: b.max, windowMinutes: b.windowMinutes, minSamples: b.minSamples }));
+      budgets = [...kept, ...budgets];
+    }
+    return ctx.api.send("PUT", path, compact({ budgets, dryRun: i.dryRun }));
+  }
+};
+var budgetsCheck = {
+  path: ["budgets", "check"],
+  summary: "Judge every budget now -- for one release with --release. Exit code 10 if one is crossed. For a deploy to stop on.",
+  description: "With --release, transaction budgets look only at that release's transactions since it was first known (run it after the canary or the first minutes of traffic). Monitor budgets use their window. Writes nothing and alerts nobody. An unknown verdict (too few samples) passes unless --strict. An upload token (project:releases) may run it.",
+  context: "project",
+  effect: "read",
+  endpoint: { method: "POST", path: "/api/agent/v1/projects/{org}/{project}/budgets/check" },
+  scopes: ["project:releases", "event:read", "project:read", "project:write", "project:admin"],
+  flags: {
+    release: { type: "string", value: "<version>", description: "Judge transaction budgets on this release only." },
+    since: { type: "string", value: TIME, description: "Instead of each budget's window: from this time." },
+    strict: { type: "boolean", description: "An unknown verdict (too few samples) fails too." }
+  },
+  examples: [
+    { command: "tracksiy budgets check --release web@$(git rev-parse HEAD)", description: "In the deploy, after a few minutes of traffic: stop if the release broke a budget." }
+  ],
+  output: "{ok, failed, unknown, release, results:[{name, metric, max, status, value, samples, minSamples, scope}]}",
+  text: (d) => `${kv({ ok: d.ok, failed: d.failed, unknown: d.unknown, release: d.release ?? "-" })}
+
+${table(d.results ?? [], ["name", "metric", "max", ["value", (r) => r.value ?? "-"], "status", "samples", "scope"])}`,
+  async run(ctx) {
+    const data = await ctx.api.send("POST", await projectPath(ctx, "budgets/check"), compact({ release: ctx.input.release, since: since(ctx.input.since) }));
+    const unknown = (data.results ?? []).filter((r) => r.status === "unknown").length;
+    if (data.failed) {
+      const names = data.results.filter((r) => r.status === "fail").map((r) => r.name).join(", ");
+      throw new CheckFailed(`${data.failed} budget(s) crossed: ${names}.`, data, "See `tracksiy performance --release <r>` and `tracksiy queries` for what got slow.");
+    }
+    if (ctx.input.strict && unknown) {
+      throw new CheckFailed(`${unknown} budget(s) could not be judged (too few samples).`, data, "Wait for more traffic, or lower minSamples.");
+    }
+    return data;
+  }
+};
+var findings = {
+  path: ["performance", "findings"],
+  summary: "Routes that got slower after a release and N+1 queries, which Tracksiy raised as issues on its own.",
+  context: "project",
+  effect: "read",
+  endpoint: { method: "GET", path: "/api/agent/v1/projects/{org}/{project}/performance/findings" },
+  flags: {
+    since: { type: "string", value: TIME, description: "Default 30 days." },
+    kind: { type: "string", enum: ["regression", "n_plus_one"], description: "Only one kind." },
+    limit: { type: "integer", value: "<n>", description: "How many (max 200)." }
+  },
+  examples: [{ command: "tracksiy performance findings --kind regression --since 7d", description: "What the last deploys made slower." }],
+  output: "{enabled, findings:[{kind, release, created, issue{id, title, status}, data}], note}",
+  text: (d) => `${d.enabled ? "" : "performanceIssues is OFF for this project (settings set --performance-issues).\n\n"}${table(d.findings ?? [], [
+    "kind",
+    ["release", (r) => r.release ?? "-"],
+    ["issue", (r) => r.issue?.id ?? "-"],
+    ["status", (r) => r.issue?.status ?? "-"],
+    ["what", (r) => String(r.issue?.title ?? r.data?.transaction ?? "").slice(0, 100)],
+    ["when", (r) => ago(r.created)]
+  ])}`,
+  async run(ctx) {
+    return ctx.api.get(await projectPath(ctx, "performance/findings"), { since: since(ctx.input.since), kind: ctx.input.kind, limit: ctx.input.limit });
+  }
+};
+var monitorsTiming = {
+  path: ["monitors", "timing"],
+  summary: "Where an HTTP monitor's time goes (DNS, connect, server, TTFB, download, page size); how long a job runs and how close to its max runtime.",
+  context: "project",
+  effect: "read",
+  endpoint: { method: "GET", path: "/api/agent/v1/projects/{org}/{project}/monitors/{slug}/timing" },
+  args: [{ name: "slug", required: true, description: "The monitor's slug (its name)." }],
+  flags: { since: { type: "string", value: TIME, description: "Default 24h for HTTP, 7d for jobs; compared with the window before." } },
+  examples: [
+    { command: "tracksiy monitors timing home", description: "Is the home page slow at the server, or on the wire?" },
+    { command: "tracksiy monitors timing db-backup-s3 --since 30d", description: "Is the backup getting slower?" }
+  ],
+  output: "{monitor, type, since, until, checks, http{phases{dns, connect, wait, ttfb, download, total: {p50, p95}}, bytes{p50, p95}, previousTtfbP95, ttfbChangeRatio, latest}, job{runs, p50Ms, p95Ms, maxMs, previousP95Ms, changeRatio, maxRuntimeMs, headroom, slowing}, note}",
+  text: (d) => {
+    if (d.job) return kv({ monitor: d.monitor, checks: d.checks, ...d.job });
+    const phases = d.http?.phases ?? {};
+    return `${kv({ monitor: d.monitor, type: d.type, checks: d.checks, "ttfb p95 before": d.http?.previousTtfbP95 ?? "-", "ttfb change": d.http?.ttfbChangeRatio ?? "-", bytes: d.http?.bytes?.p50 ?? "-" })}
+
+${table(
+      Object.entries(phases).map(([phase, v]) => ({ phase, p50: v.p50, p95: v.p95 })),
+      ["phase", "p50", "p95"]
+    )}`;
+  },
+  async run(ctx) {
+    return ctx.api.get(await projectPath(ctx, `monitors/${seg(ctx.input.slug)}/timing`), { since: since(ctx.input.since) });
+  }
+};
+var perf_default = [budgetsGet, budgetsSet, budgetsCheck, findings, monitorsTiming];
+
 // src/commands/issues.ts
 import { writeFileSync } from "node:fs";
 var FILTERS = {
@@ -1585,6 +1784,7 @@ var DECLARE = {
   "new-issue": { type: "boolean", description: "Alert on every new issue (default true). --no-new-issue to turn off." },
   threshold: { type: "string", value: "<events>/<minutes>", description: "Also alert when an issue gets this many events in this many minutes, e.g. 50/10." },
   uptime: { type: "boolean", description: "Alert when this project's monitors go down (default true)." },
+  performance: { type: "boolean", description: "Alert when a performance budget is crossed or met again (default true; see `budgets set`). Rides on the new-issue or uptime rule." },
   "replace-recipients": { type: "boolean", description: "Make the recipient list exactly this one (default: add to it)." },
   body: { type: "json", value: "<json|@file|->", description: "Raw request body; overrides the other flags." }
 };
@@ -1620,6 +1820,7 @@ function declareBody(i) {
     newIssue: i.newIssue,
     threshold: threshold(i.threshold),
     uptime: i.uptime,
+    performance: i.performance,
     replaceRecipients: i.replaceRecipients
   });
 }
@@ -1632,6 +1833,7 @@ ${table(d.rules ?? [], [
   ["new issue", (r) => r.newIssue],
   ["threshold", (r) => r.threshold ? `${r.threshold.events}/${r.threshold.minutes}m` : "-"],
   ["uptime", (r) => r.uptime],
+  ["perf", (r) => r.performance],
   ["recipients", (r) => (r.recipients ?? []).map((x) => `${x.type}${x.delivery === "digest" ? "(digest)" : ""}`).join(", ")]
 ])}${(d.notes ?? []).length ? `
 
@@ -1826,6 +2028,7 @@ var rotate = {
 var keys_default = [list2, set2, rotate];
 
 // src/commands/releases.ts
+import { execFileSync } from "node:child_process";
 var list3 = {
   path: ["releases", "list"],
   aliases: [["releases"]],
@@ -1879,19 +2082,57 @@ var declare = {
     ref: { type: "string", value: "<commit>", description: "Commit or tag it was built from." },
     url: { type: "string", value: "<url>", description: "Link to the release (changelog, CI run)." },
     released: { type: "boolean", description: "Mark it released now (if not already). --no-released clears it." },
-    "released-at": { type: "string", value: "<iso>", description: "Mark it released at this time." }
+    "released-at": { type: "string", value: "<iso>", description: "Mark it released at this time." },
+    commits: {
+      type: "list",
+      value: "<prev>..<head> | <sha,...>",
+      description: "The commits this release ships, so `issues resolve --in-commit` with any of them binds here (a push is more than its HEAD). A git range is expanded with `git rev-list` in the current directory (at most 1000). Replaces the list."
+    }
   },
   examples: [
-    { command: "tracksiy releases declare shop@$(git rev-parse --short HEAD) --ref $(git rev-parse HEAD) --released", description: "From a deploy script." }
+    { command: "tracksiy releases declare shop@$(git rev-parse --short HEAD) --ref $(git rev-parse HEAD) --released", description: "From a deploy script." },
+    { command: "tracksiy releases declare shop@$(git rev-parse HEAD) --ref $(git rev-parse HEAD) --commits $LAST_DEPLOYED..HEAD --released", description: "Every commit of the push: a fix resolved --in-commit with any of them binds to this release." }
   ],
-  output: "{version, ref, url, released, created, projects[], artifacts}",
+  output: "{version, ref, url, released, commitCount, boundResolutions, created, projects[], artifacts}",
   async run(ctx) {
     const i = ctx.input;
     if (i.released !== void 0 && i.releasedAt) throw usageError("conflict", "Pass --released or --released-at, not both.");
     if (i.releasedAt && !Number.isFinite(Date.parse(i.releasedAt))) throw usageError("bad_value", `--released-at is not a time: ${i.releasedAt}`);
-    return ctx.api.send("PUT", await projectPath(ctx, `releases/${seg(i.version)}`), compact({ ref: i.ref, url: i.url, released: i.releasedAt ?? i.released }));
+    return ctx.api.send(
+      "PUT",
+      await projectPath(ctx, `releases/${seg(i.version)}`),
+      compact({ ref: i.ref, url: i.url, released: i.releasedAt ?? i.released, commits: i.commits ? commitList(i.commits) : void 0 })
+    );
   }
 };
+var MAX_COMMITS = 1e3;
+var SHA = /^[0-9a-f]{7,40}$/i;
+function commitList(values, git = runGit) {
+  const out = [];
+  for (const raw of values) {
+    const value = raw.trim();
+    if (!value) continue;
+    if (value.includes("..")) {
+      let listed;
+      try {
+        listed = git(["rev-list", `--max-count=${MAX_COMMITS + 1}`, value]);
+      } catch (err) {
+        throw usageError("bad_value", `--commits ${value}: git rev-list failed: ${String(err?.stderr || err?.message || err).trim().split("\n")[0]}`, "Run it inside the repository, with both ends fetched (e.g. git fetch --unshallow in CI).");
+      }
+      out.push(...listed.split(/\s+/).filter(Boolean));
+    } else if (SHA.test(value)) {
+      out.push(value.toLowerCase());
+    } else {
+      throw usageError("bad_value", `--commits: ${JSON.stringify(value)} is neither a sha nor a <prev>..<head> range.`);
+    }
+  }
+  const unique = [...new Set(out.map((c) => c.toLowerCase()))];
+  if (unique.length > MAX_COMMITS) throw usageError("bad_value", `--commits names more than ${MAX_COMMITS} commits.`, "Is the range's base the last deployed commit?");
+  return unique;
+}
+function runGit(args) {
+  return execFileSync("git", args, { encoding: "utf8", stdio: ["ignore", "pipe", "pipe"] });
+}
 var releases_default = [list3, health2, declare];
 
 // src/commands/artifacts.ts
@@ -3349,6 +3590,7 @@ var COMMANDS = [
   ...init_default,
   ...auth_default,
   ...fleet_default,
+  ...perf_default,
   ...issues_default,
   ...projects_default,
   ...alerts_default,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "tracksiy",
-  "version": "0.7.0",
+  "version": "0.9.0",
   "description": "Agent-first CLI and MCP server for Tracksiy: errors, uptime, alerts, releases and source maps, from one token.",
   "type": "module",
   "bin": {