watch-tail 0.3.1 → 0.5.0

package/build/server/chunks/entries/endpoints/api/series/_server.ts.js-DjGMqXKo.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts.js-DjGMqXKo.js","sources":["../../../../../../../.svelte-kit/output/server/entries/endpoints/api/series/_server.ts.js"],"sourcesContent":["import { t as getArchive } from \"../../../../chunks/archive.js\";\nimport { t as readEnv } from \"../../../../chunks/env2.js\";\nimport { l as apiError, n as REGION_PARAM_HINT, o as parseRegionParam, s as resolveAwsConfig } from \"../../../../chunks/aws.js\";\nimport { n as parseSourceParam, t as SOURCE_PARAM_HINT } from \"../../../../chunks/source.js\";\nimport { i as parseGroupParams, n as parseLevelParam, o as parseDurationMs, s as resolveWindow, t as LEVEL_PARAM_HINT } from \"../../../../chunks/level-filter.js\";\nimport { json } from \"@sveltejs/kit\";\n//#region src/lib/server/series.ts\n/** Message used when a caller asks for a series the app cannot aggregate. */\nvar SERIES_SOURCE_HINT = \"Series are only aggregated for source=archive; a live CloudWatch view buckets the events it has loaded\";\n/** Bucket widths offered to an automatic window, smallest first. */\nvar BUCKET_LADDER = [\n\t1e3,\n\t5e3,\n\t1e4,\n\t3e4,\n\t6e4,\n\t3e5,\n\t9e5,\n\t18e5,\n\t36e5,\n\t108e5,\n\t216e5,\n\t432e5,\n\t864e5,\n\t6048e5\n];\n/** Bounds on an explicit bucket width. */\nvar MIN_BUCKET_MS = 1e3;\nvar MAX_BUCKET_MS = 6048e5;\n/**\n* Picks a bucket width for a window.\n*\n* The smallest ladder step that keeps the number of buckets at or below\n* {@link TARGET_BUCKETS} wins, so a fifteen-minute window is bucketed in seconds\n* and a week in hours, and the axis never renders thousands of ticks.\n*/\nfunction chooseBucketMs(windowMs, target = 90) {\n\tconst span = Number.isFinite(windowMs) && windowMs > 0 ? windowMs : 6e4;\n\tconst wanted = Math.max(1, Math.round(target));\n\tfor (const step of BUCKET_LADDER) if (span / step <= wanted) return step;\n\treturn BUCKET_LADDER.at(-1);\n}\n/**\n* Reads an explicit `bucket` parameter.\n*\n* Accepts a duration (`30s`, `5m`, `2h`) or plain milliseconds, and returns\n* `null` for anything unusable so the caller falls back to an automatic width.\n* The result is clamped to {@link MIN_BUCKET_MS}..{@link MAX_BUCKET_MS}.\n*/\nfunction parseBucketParam(value) {\n\tif (typeof value !== \"string\") return null;\n\tconst trimmed = value.trim();\n\tif (trimmed.length === 0) return null;\n\tconst ms = /^\\d+$/.test(trimmed) ? Number(trimmed) : parseDurationMs(trimmed);\n\tif (ms === null || !Number.isFinite(ms) || ms <= 0) return null;\n\treturn Math.min(Math.max(Math.round(ms), MIN_BUCKET_MS), MAX_BUCKET_MS);\n}\n/** Sums rows per level, in a fixed severity order. */\nfunction summariseLevels(points) {\n\tconst order = [\n\t\t\"error\",\n\t\t\"warn\",\n\t\t\"info\",\n\t\t\"debug\",\n\t\t\"unknown\"\n\t];\n\tconst totals = /* @__PURE__ */ new Map();\n\tfor (const point of points) totals.set(point.level, (totals.get(point.level) ?? 0) + point.events);\n\treturn order.filter((level) => totals.has(level)).map((level) => ({\n\t\tlevel,\n\t\tevents: totals.get(level)\n\t}));\n}\n/** Sums rows per group, busiest first. */\nfunction summariseGroups(points) {\n\tconst totals = /* @__PURE__ */ new Map();\n\tfor (const point of points) totals.set(point.group, (totals.get(point.group) ?? 0) + point.events);\n\treturn [...totals.entries()].map(([group, events]) => ({\n\t\tgroup,\n\t\tevents\n\t})).toSorted((a, b) => b.events === a.events ? a.group.localeCompare(b.group) : b.events - a.events);\n}\n/** Builds the response body from raw bucket rows. */\nfunction buildSeriesResponse(input) {\n\tconst points = input.rows.map((row) => ({\n\t\tt: row.t,\n\t\tgroup: row.group,\n\t\tlevel: row.level,\n\t\tevents: row.events\n\t}));\n\treturn {\n\t\tfrom: input.from,\n\t\tto: input.to,\n\t\tbucketMs: input.bucketMs,\n\t\tlevels: summariseLevels(points),\n\t\tgroups: summariseGroups(points),\n\t\tpoints,\n\t\ttotals: {\n\t\t\tevents: points.reduce((sum, point) => sum + point.events, 0),\n\t\t\tpoints: points.length\n\t\t}\n\t};\n}\n/**\n* Reads the archived counts for a window.\n*\n* An unavailable archive answers an empty series rather than an error, so the\n* chart can show \"nothing archived yet\" instead of a failure.\n*/\nasync function readSeries(input) {\n\tconst bucketMs = input.bucketMs ?? chooseBucketMs(input.to - input.from);\n\tconst empty = buildSeriesResponse({\n\t\tfrom: input.from,\n\t\tto: input.to,\n\t\tbucketMs,\n\t\trows: []\n\t});\n\tif (!input.archive.available) return empty;\n\tconst rows = await input.archive.seriesQuery({\n\t\tregion: input.region,\n\t\tlogGroups: input.logGroups,\n\t\tstartTime: input.from,\n\t\tendTime: input.to,\n\t\tbucketMs,\n\t\tlevels: input.levels ?? null\n\t});\n\treturn buildSeriesResponse({\n\t\tfrom: input.from,\n\t\tto: input.to,\n\t\tbucketMs,\n\t\trows\n\t});\n}\n//#endregion\n//#region src/routes/api/series/+server.ts\n/**\n* `GET /api/series` - event counts per time bucket, per group and level.\n*\n* This is the chart's data. Only the archive can answer it: DuckDB counts a\n* whole window in one statement, while CloudWatch Logs has no aggregate API, so\n* the UI buckets the events it already streamed for a live or CloudWatch view.\n*\n* The window is not clamped to CloudWatch's 14 days, because the archive keeps\n* what CloudWatch has already dropped.\n*/\nvar GET = async ({ url }) => {\n\tconst parsedRegion = parseRegionParam(url.searchParams.get(\"region\"));\n\tif (!parsedRegion.ok) return apiError(400, REGION_PARAM_HINT, \"invalid-region\");\n\tconst source = parseSourceParam(url.searchParams.get(\"source\"));\n\tif (source === null) return apiError(400, SOURCE_PARAM_HINT, \"invalid-source\");\n\tif (source !== \"archive\") return apiError(400, SERIES_SOURCE_HINT, \"unsupported-source\");\n\tconst groups = parseGroupParams(url.searchParams.get(\"group\"), url.searchParams.get(\"groups\"));\n\tif (!groups.ok) return apiError(400, groups.message, groups.code);\n\tconst levels = parseLevelParam(url.searchParams.get(\"level\"));\n\tif (levels === void 0) return apiError(400, LEVEL_PARAM_HINT, \"invalid-level\");\n\tconst env = readEnv();\n\tconst region = resolveAwsConfig(env, parsedRegion.region).region ?? \"\";\n\tif (region === \"\") return apiError(400, \"Query parameter \\\"region\\\" is required when source=archive\", \"missing-region-param\");\n\tconst window = resolveWindow({\n\t\tmode: \"historic\",\n\t\trange: url.searchParams.get(\"range\"),\n\t\tfrom: url.searchParams.get(\"from\"),\n\t\tto: url.searchParams.get(\"to\"),\n\t\tnow: Date.now()\n\t}, { maxLookbackMs: null });\n\tif (!window.ok) return apiError(400, window.message, window.code);\n\tconst endTime = window.endTime ?? Date.now();\n\tconst series = await readSeries({\n\t\tarchive: await getArchive(env),\n\t\tregion,\n\t\tlogGroups: groups.names,\n\t\tfrom: window.startTime,\n\t\tto: endTime,\n\t\tlevels,\n\t\tbucketMs: parseBucketParam(url.searchParams.get(\"bucket\"))\n\t});\n\treturn json(series);\n};\n//#endregion\nexport { GET };\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;AAMA;AACA;AACA,IAAI,kBAAkB,GAAG,wGAAwG;AACjI;AACA,IAAI,aAAa,GAAG;AACpB,CAAC,GAAG;AACJ,CAAC,GAAG;AACJ,CAAC,GAAG;AACJ,CAAC,GAAG;AACJ,CAAC,GAAG;AACJ,CAAC,GAAG;AACJ,CAAC,GAAG;AACJ,CAAC,IAAI;AACL,CAAC,IAAI;AACL,CAAC,KAAK;AACN,CAAC,KAAK;AACN,CAAC,KAAK;AACN,CAAC,KAAK;AACN,CAAC;AACD,CAAC;AACD;AACA,IAAI,aAAa,GAAG,GAAG;AACvB,IAAI,aAAa,GAAG,MAAM;AAC1B;AACA;AACA;AACA;AACA;AACA;AACA;AACA,SAAS,cAAc,CAAC,QAAQ,EAAE,MAAM,GAAG,EAAE,EAAE;AAC/C,CAAC,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,QAAQ,GAAG,CAAC,GAAG,QAAQ,GAAG,GAAG;AACxE,CAAC,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;AAC/C,CAAC,KAAK,MAAM,IAAI,IAAI,aAAa,EAAE,IAAI,IAAI,GAAG,IAAI,IAAI,MAAM,EAAE,OAAO,IAAI;AACzE,CAAC,OAAO,aAAa,CAAC,EAAE,CAAC,EAAE,CAAC;AAC5B;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,SAAS,gBAAgB,CAAC,KAAK,EAAE;AACjC,CAAC,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,OAAO,IAAI;AAC3C,CAAC,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE;AAC7B,CAAC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,OAAO,IAAI;AACtC,CAAC,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,eAAe,CAAC,OAAO,CAAC;AAC9E,CAAC,IAAI,EAAE,KAAK,IAAI,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,OAAO,IAAI;AAChE,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,aAAa,CAAC,EAAE,aAAa,CAAC;AACxE;AACA;AACA,SAAS,eAAe,CAAC,MAAM,EAAE;AACjC,CAAC,MAAM,KAAK,GAAG;AACf,EAAE,OAAO;AACT,EAAE,MAAM;AACR,EAAE,MAAM;AACR,EAAE,OAAO;AACT,EAAE;AACF,EAAE;AACF,CAAC,MAAM,MAAM,mBAAmB,IAAI,GAAG,EAAE;AACzC,CAAC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC;AACnG,CAAC,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,KAAK,KAAK,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,MAAM;AACnE,EAAE,KAAK;AACP,EAAE,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,KAAK;AAC1B,EAAE,CAAC,CAAC;AACJ;AACA;AACA,SAAS,eAAe,CAAC,MAAM,EAAE;AACjC,CAAC,MAAM,MAAM,mBAAmB,IAAI,GAAG,EAAE;AACzC,CAAC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC;AACnG,CAAC,OAAO,CAAC,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM;AACxD,EAAE,KAAK;AACP,EAAE;AACF,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC;AACrG;AACA;AACA,SAAS,mBAAmB,CAAC,KAAK,EAAE;AACpC,CAAC,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,MAAM;AACzC,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC;AACV,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK;AAClB,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK;AAClB,EAAE,MAAM,EAAE,GAAG,CAAC;AACd,EAAE,CAAC,CAAC;AACJ,CAAC,OAAO;AACR,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI;AAClB,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE;AACd,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ;AAC1B,EAAE,MAAM,EAAE,eAAe,CAAC,MAAM,CAAC;AACjC,EAAE,MAAM,EAAE,eAAe,CAAC,MAAM,CAAC;AACjC,EAAE,MAAM;AACR,EAAE,MAAM,EAAE;AACV,GAAG,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,KAAK,KAAK,GAAG,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;AAC/D,GAAG,MAAM,EAAE,MAAM,CAAC;AAClB;AACA,EAAE;AACF;AACA;AACA;AACA;AACA;AACA;AACA;AACA,eAAe,UAAU,CAAC,KAAK,EAAE;AACjC,CAAC,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,IAAI,cAAc,CAAC,KAAK,CAAC,EAAE,GAAG,KAAK,CAAC,IAAI,CAAC;AACzE,CAAC,MAAM,KAAK,GAAG,mBAAmB,CAAC;AACnC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI;AAClB,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE;AACd,EAAE,QAAQ;AACV,EAAE,IAAI,EAAE;AACR,EAAE,CAAC;AACH,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,EAAE,OAAO,KAAK;AAC3C,CAAC,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC;AAC9C,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM;AACtB,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS;AAC5B,EAAE,SAAS,EAAE,KAAK,CAAC,IAAI;AACvB,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE;AACnB,EAAE,QAAQ;AACV,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,IAAI;AAC1B,EAAE,CAAC;AACH,CAAC,OAAO,mBAAmB,CAAC;AAC5B,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI;AAClB,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE;AACd,EAAE,QAAQ;AACV,EAAE;AACF,EAAE,CAAC;AACH;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACG,IAAC,GAAG,GAAG,OAAO,EAAE,GAAG,EAAE,KAAK;AAC7B,CAAC,MAAM,YAAY,GAAG,gBAAgB,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;AACtE,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,EAAE,OAAO,QAAQ,CAAC,GAAG,EAAE,iBAAiB,EAAE,gBAAgB,CAAC;AAChF,CAAC,MAAM,MAAM,GAAG,gBAAgB,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;AAChE,CAAC,IAAI,MAAM,KAAK,IAAI,EAAE,OAAO,QAAQ,CAAC,GAAG,EAAE,iBAAiB,EAAE,gBAAgB,CAAC;AAC/E,CAAC,IAAI,MAAM,KAAK,SAAS,EAAE,OAAO,QAAQ,CAAC,GAAG,EAAE,kBAAkB,EAAE,oBAAoB,CAAC;AACzF,CAAC,MAAM,MAAM,GAAG,gBAAgB,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;AAC/F,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,OAAO,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC;AAClE,CAAC,MAAM,MAAM,GAAG,eAAe,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;AAC9D,CAAC,IAAI,MAAM,KAAK,MAAM,EAAE,OAAO,QAAQ,CAAC,GAAG,EAAE,gBAAgB,EAAE,eAAe,CAAC;AAC/E,CAAC,MAAM,GAAG,GAAG,OAAO,EAAE;AACtB,CAAC,MAAM,MAAM,GAAG,gBAAgB,CAAC,GAAG,EAAE,YAAY,CAAC,MAAM,CAAC,CAAC,MAAM,IAAI,EAAE;AACvE,CAAC,IAAI,MAAM,KAAK,EAAE,EAAE,OAAO,QAAQ,CAAC,GAAG,EAAE,4DAA4D,EAAE,sBAAsB,CAAC;AAC9H,CAAC,MAAM,MAAM,GAAG,aAAa,CAAC;AAC9B,EAAE,IAAI,EAAE,UAAU;AAClB,EAAE,KAAK,EAAE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC;AACtC,EAAE,IAAI,EAAE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC;AACpC,EAAE,EAAE,EAAE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC;AAChC,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG;AACf,EAAE,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;AAC5B,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,OAAO,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC;AAClE,CAAC,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,IAAI,IAAI,CAAC,GAAG,EAAE;AAC7C,CAAC,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC;AACjC,EAAE,OAAO,EAAE,MAAM,UAAU,CAAC,GAAG,CAAC;AAChC,EAAE,MAAM;AACR,EAAE,SAAS,EAAE,MAAM,CAAC,KAAK;AACzB,EAAE,IAAI,EAAE,MAAM,CAAC,SAAS;AACxB,EAAE,EAAE,EAAE,OAAO;AACb,EAAE,MAAM;AACR,EAAE,QAAQ,EAAE,gBAAgB,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC;AAC3D,EAAE,CAAC;AACH,CAAC,OAAO,IAAI,CAAC,MAAM,CAAC;AACpB;;"}

package/build/server/chunks/entries/endpoints/api/stream/{_server.ts.js-D_i-xW6_.js → _server.ts.js-C-XDemlx.js}

@@ -1,208 +1,169 @@
-import { a as apiError, p as parseRegionParam, b as readEnv, r as resolveAwsConfig, c as createLogsClient, d as resolveEffectiveRegion, e as describeAwsError, R as REGION_PARAM_HINT } from '../../../../chunks/env2.js-D7xrfc37.js';
-import { H as HISTORIC_PRESETS, p as presetDurationMs, i as isHistoricPreset } from '../../../../chunks/time-range.js-BLMT8aU3.js';
+import { g as getArchive } from '../../../../chunks/archive.js-C6rz09rJ.js';
+import { r as readEnv } from '../../../../chunks/env2.js-CcIskxOZ.js';
+import { a as apiError, p as parseRegionParam, r as resolveAwsConfig, c as createLogsClient, d as describeAwsError, b as resolveEffectiveRegion, R as REGION_PARAM_HINT } from '../../../../chunks/aws.js-DkPqAybc.js';
+import { p as parseSourceParam, S as SOURCE_PARAM_HINT } from '../../../../chunks/source.js-DZEVvuho.js';
+import { p as parseGroupParams, a as parseLevelParam, r as resolveWindow, c as clampPollMs, w as withLevels, L as LEVEL_PARAM_HINT } from '../../../../chunks/level-filter.js-H_AdNbCw.js';
 import '../../../../chunks/utils.js-BIlHjgGW.js';
 import { FilterLogEventsCommand } from '@aws-sdk/client-cloudwatch-logs';
-import '../../../../chunks/shared-server.js-Dn5XheXH.js';
+import '../../../../chunks/log-buffer.js-CpI7gyom.js';
 import 'node:fs';
+import 'node:os';
 import 'node:path';
+import 'node:timers/promises';
+import 'node:crypto';
+import '../../../../chunks/shared-server.js-Dn5XheXH.js';
+import '@aws-sdk/client-sts';
+import '../../../../chunks/time-range.js-BLMT8aU3.js';
 import '../../../../chunks/shared.js-CgjUIvRK.js';
 import '../../../../chunks/uneval.js-DaakSYFQ.js';
 
-//#region src/lib/server/filter.ts
-/** Default lookback window when neither `startTime` nor `lookback` is usable. */
-var DEFAULT_LOOKBACK_MS = 3e5;
-/** CloudWatch Logs rejects `startTime` older than 14 days. */
-var MAX_LOOKBACK_MS = 12096e5;
-var DEFAULT_POLL_MS$1 = 1e3;
-var MIN_POLL_MS = 250;
-var MAX_POLL_MS = 15e3;
-var DURATION_UNITS = {
-	ms: 1,
-	s: 1e3,
-	m: 6e4,
-	h: 36e5,
-	d: 864e5,
-	w: 6048e5
-};
-var DURATION_PATTERN = /^(\d+(?:\.\d+)?)\s*(ms|s|m|h|d|w)$/i;
-var EPOCH_PATTERN = /^\d+$/;
-/**
-* Parses a single-unit duration such as `500ms`, `30s`, `15m`, `2h`, `3d` or
-* `1w`. Returns `null` for anything invalid, negative or zero.
-*/
-function parseDurationMs(value) {
-	if (typeof value !== "string") return null;
-	const match = DURATION_PATTERN.exec(value.trim());
-	if (match === null) return null;
-	const amount = Number(match[1]);
-	const unit = DURATION_UNITS[match[2].toLowerCase()];
-	if (unit === void 0 || !Number.isFinite(amount)) return null;
-	const ms = amount * unit;
-	if (!Number.isFinite(ms) || ms <= 0) return null;
-	return Math.round(ms);
+//#region src/lib/server/archive-tail.ts
+/** Page size used when the caller does not ask for one. */
+var DEFAULT_ARCHIVE_PAGE_SIZE = 1e3;
+/** Upper bound on one page, so a huge window cannot exhaust memory. */
+var MAX_ARCHIVE_PAGE_SIZE = 5e3;
+/** Events one archive request may return before it stops (matches the tailer). */
+var DEFAULT_ARCHIVE_MAX_EVENTS = 1e4;
+/** Message shown when DuckDB is missing or the file cannot be opened. */
+function archiveUnavailableMessage(archive) {
+	const reason = archive.error;
+	const base = "The local archive is not available on this machine";
+	return reason === null || reason.length === 0 ? base : `${base}: ${reason}`;
 }
 /**
-* Parses a start point into epoch milliseconds.
+* Yields archived events for one window, oldest first.
 *
-* Accepts epoch milliseconds (`1700000000000`), a duration relative to `now`
-* (`15m`) and ISO 8601 timestamps. Returns `null` when the value is missing or
-* cannot be understood.
+* An unavailable archive produces a single `error` batch instead of throwing, so
+* the browser shows a normal stream error. An aborted signal ends the generator
+* without yielding an `end` batch, which is what the route treats as a
+* client disconnect.
 */
-function parseStartTime(value, now) {
-	if (typeof value !== "string") return null;
-	const trimmed = value.trim();
-	if (trimmed.length === 0) return null;
-	if (EPOCH_PATTERN.test(trimmed)) return Number(trimmed);
-	const duration = parseDurationMs(trimmed);
-	if (duration !== null) return now - duration;
-	const parsed = Date.parse(trimmed);
-	return Number.isNaN(parsed) ? null : parsed;
-}
-/** Resolves the effective start time, clamped to the last 14 days and to `now`. */
-function resolveStartTime(input) {
-	const { now } = input;
-	let start = parseStartTime(input.startTime, now);
-	if (start === null) start = now - (parseDurationMs(input.lookback ?? "") ?? DEFAULT_LOOKBACK_MS);
-	const oldestAllowed = now - MAX_LOOKBACK_MS;
-	if (start > now) start = now;
-	if (start < oldestAllowed) start = oldestAllowed;
-	return Math.round(start);
-}
-/** Parses a poll interval in milliseconds, defaulting to 1000 and clamped to 250..15000. */
-function clampPollMs(value) {
-	if (typeof value !== "string") return DEFAULT_POLL_MS$1;
-	const trimmed = value.trim();
-	if (trimmed.length === 0) return DEFAULT_POLL_MS$1;
-	const parsed = Number(trimmed);
-	if (!Number.isFinite(parsed)) return DEFAULT_POLL_MS$1;
-	return Math.min(Math.max(Math.round(parsed), MIN_POLL_MS), MAX_POLL_MS);
-}
-/** Default historic window when neither `range` nor `from`/`to` is given. */
-var DEFAULT_HISTORIC_PRESET = "15m";
-/** Parses the `mode` parameter; `null` for an unrecognised value. */
-function parseMode(value) {
-	if (typeof value !== "string") return null;
-	const trimmed = value.trim().toLowerCase();
-	if (trimmed === "live" || trimmed === "historic") return trimmed;
-	return null;
-}
-/**
-* Parses an absolute instant: epoch milliseconds or an ISO 8601 timestamp.
-*
-* Relative durations are deliberately rejected here so an end bound can never
-* move with the clock.
-*/
-function parseInstant(value) {
-	if (typeof value !== "string") return null;
-	const trimmed = value.trim();
-	if (trimmed.length === 0) return null;
-	if (EPOCH_PATTERN.test(trimmed)) return Number(trimmed);
-	const parsed = Date.parse(trimmed);
-	return Number.isNaN(parsed) ? null : parsed;
+async function* tailArchivedEvents(options) {
+	const { archive, region, logGroups, startTime, endTime, search = null, streamPrefix = null, levels = null, signal } = options;
+	if (!archive.available) {
+		yield {
+			type: "error",
+			message: archiveUnavailableMessage(archive),
+			code: "archive-unavailable"
+		};
+		return;
+	}
+	const requestedPageSize = options.pageSize ?? 1e3;
+	const pageSize = Math.min(Math.max(Number.isFinite(requestedPageSize) ? Math.round(requestedPageSize) : DEFAULT_ARCHIVE_PAGE_SIZE, 1), MAX_ARCHIVE_PAGE_SIZE);
+	const requestedMax = options.maxEvents ?? 1e4;
+	const maxEvents = Number.isFinite(requestedMax) && requestedMax > 0 ? Math.floor(requestedMax) : DEFAULT_ARCHIVE_MAX_EVENTS;
+	let cursor = null;
+	let emitted = 0;
+	for (;;) {
+		if (signal?.aborted === true) return;
+		const page = await archive.page({
+			region,
+			logGroups,
+			startTime,
+			endTime,
+			search,
+			streamPrefix,
+			levels,
+			after: cursor,
+			limit: pageSize
+		});
+		if (page.events.length === 0) {
+			yield {
+				type: "end",
+				reason: "window-complete"
+			};
+			return;
+		}
+		emitted += page.events.length;
+		yield {
+			type: "events",
+			events: page.events
+		};
+		cursor = page.last;
+		if (cursor === null || page.events.length < pageSize) {
+			yield {
+				type: "end",
+				reason: "window-complete"
+			};
+			return;
+		}
+		if (emitted >= maxEvents) {
+			yield {
+				type: "end",
+				reason: "event-limit"
+			};
+			return;
+		}
+	}
 }
-/**
-* Clamps a window to what CloudWatch Logs can return: 14 days back, ending now.
-*
-* Returns `null` when the requested window ends before the retention floor, so
-* a request for month-old data fails loudly instead of returning a stub window.
-*/
-function clampWindow(start, end, now) {
-	const oldest = now - MAX_LOOKBACK_MS;
-	if (end <= oldest) return null;
-	const clampedStart = Math.min(Math.max(start, oldest), now);
-	const clampedEnd = Math.min(Math.max(end, clampedStart + 1), now);
-	return {
-		start: Math.round(clampedStart),
-		end: Math.round(clampedEnd),
-		clamped: clampedStart !== Math.round(start) || clampedEnd !== Math.round(end)
-	};
+//#endregion
+//#region src/lib/server/multi-tail.ts
+/** Events-payload batch reasons, worst first. */
+var END_PRECEDENCE = [
+	"repeated-errors",
+	"event-limit",
+	"window-complete"
+];
+/** Picks the most serious end reason from the sources. */
+function mergeEndReason(reasons) {
+	for (const candidate of END_PRECEDENCE) if (reasons.includes(candidate)) return candidate;
+	return "window-complete";
 }
 /**
-* Resolves the request window into a start time plus, for historic mode, an end
-* time.
+* Yields every batch of every source, then one `end`.
 *
-* Historic windows come from a preset (`range=24h`), from explicit bounds
-* (`from`/`to`, epoch ms or ISO 8601) or, when neither is given, from the
-* smallest preset. Windows are clamped to the last 14 days and to `now` so the
-* request can never ask CloudWatch for data it will not return.
+* A failing source yields its own `error` batch; it never cancels the others, so
+* one unreadable group does not silence the rest of the view.
 */
-function resolveWindow(input) {
-	const { now } = input;
-	const requestedMode = input.mode === null || input.mode === void 0 ? "live" : input.mode.trim();
-	const mode = requestedMode === "" ? "live" : parseMode(requestedMode);
-	if (mode === null) return {
-		ok: false,
-		code: "invalid-mode",
-		message: "Invalid mode: expected \"live\" or \"historic\""
-	};
-	if (mode === "live") return {
-		ok: true,
-		mode,
-		startTime: resolveStartTime({
-			startTime: input.startTime,
-			lookback: input.lookback,
-			now
-		}),
-		endTime: null,
-		preset: null,
-		clamped: false
-	};
-	const from = input.from?.trim() ?? "";
-	const to = input.to?.trim() ?? "";
-	if (from.length > 0 || to.length > 0) {
-		if (from.length === 0 || to.length === 0) return {
-			ok: false,
-			code: "invalid-window",
-			message: "A custom window needs both \"from\" and \"to\""
-		};
-		const parsedFrom = parseStartTime(from, now);
-		const parsedTo = parseInstant(to);
-		if (parsedFrom === null) return {
-			ok: false,
-			code: "invalid-time",
-			message: `Invalid "from": expected epoch milliseconds, a duration such as 3h, or an ISO 8601 timestamp`
-		};
-		if (parsedTo === null) return {
-			ok: false,
-			code: "invalid-time",
-			message: "Invalid \"to\": expected epoch milliseconds or an ISO 8601 timestamp"
-		};
-		if (parsedTo <= parsedFrom) return {
-			ok: false,
-			code: "invalid-window",
-			message: "The end of the window must be after its start"
-		};
-		const clamped = clampWindow(parsedFrom, parsedTo, now);
-		if (clamped === null || clamped.end <= clamped.start) return {
-			ok: false,
-			code: "invalid-window",
-			message: "The requested window is outside the 14 days CloudWatch Logs keeps"
-		};
-		return {
-			ok: true,
-			mode,
-			startTime: clamped.start,
-			endTime: clamped.end,
-			preset: null,
-			clamped: clamped.clamped
-		};
+async function* mergeTails(sources) {
+	if (sources.length === 0) return;
+	if (sources.length === 1) {
+		yield* sources[0];
+		return;
 	}
-	const requestedRange = input.range?.trim() ?? "";
-	const preset = requestedRange === "" ? DEFAULT_HISTORIC_PRESET : isHistoricPreset(requestedRange) ? requestedRange : null;
-	if (preset === null) return {
-		ok: false,
-		code: "invalid-range",
-		message: `Invalid range: expected one of ${HISTORIC_PRESETS.join(", ")} or an explicit from/to window`
-	};
-	const end = Math.round(now);
-	return {
-		ok: true,
-		mode,
-		startTime: Math.round(now - presetDurationMs(preset)),
-		endTime: end,
-		preset,
-		clamped: false
+	const queue = [];
+	let waiting = null;
+	/** Sources whose end marker has been consumed, so their batches are all out. */
+	let completed = 0;
+	const endReasons = [];
+	const push = (item) => {
+		queue.push(item);
+		const wake = waiting;
+		waiting = null;
+		wake?.();
 	};
+	for (const source of sources) (async () => {
+		let endReason = null;
+		try {
+			for await (const batch of source) if (batch.type === "end") endReason = batch.reason;
+			else push({ batch });
+		} catch {} finally {
+			if (endReason !== null) endReasons.push(endReason);
+			push({ done: true });
+		}
+	})();
+	for (;;) {
+		if (queue.length === 0) {
+			if (completed >= sources.length) {
+				yield {
+					type: "end",
+					reason: mergeEndReason(endReasons)
+				};
+				return;
+			}
+			await new Promise((resolve) => {
+				waiting = resolve;
+				if (queue.length > 0 || completed >= sources.length) {
+					waiting = null;
+					resolve();
+				}
+			});
+			continue;
+		}
+		const item = queue.shift();
+		if ("batch" in item) yield item.batch;
+		else completed += 1;
+	}
 }
 //#endregion
 //#region src/lib/server/sse.ts
@@ -434,6 +395,16 @@ async function* tailLogEvents(options) {
 var PING_INTERVAL_MS = 15e3;
 /** Stop the stream after this many consecutive failed polls. */
 var MAX_CONSECUTIVE_ERRORS = 8;
+/** Bounds for the archive `pageSize` parameter. */
+var ARCHIVE_PAGE_LIMITS = {
+	min: 1,
+	max: 5e3
+};
+/** Bounds for the archive `max` parameter (events per request). */
+var ARCHIVE_MAX_LIMITS = {
+	min: 1,
+	max: 1e5
+};
 var SSE_HEADERS = {
 	"content-type": "text/event-stream; charset=utf-8",
 	"cache-control": "no-cache, no-transform",
@@ -441,44 +412,180 @@ var SSE_HEADERS = {
 	"x-accel-buffering": "no"
 };
 /**
+* Tags every event of one tail with its log group.
+*
+* A merged multi-group stream has to say which group each line came from, both
+* for the archive and for the group column in the viewer.
+*/
+async function* taggedEvents(source, group) {
+	for await (const batch of source) {
+		if (batch.type !== "events") {
+			yield batch;
+			continue;
+		}
+		const events = [];
+		for (const event of batch.events) events.push({
+			...event,
+			group
+		});
+		yield {
+			type: "events",
+			events
+		};
+	}
+}
+/**
+* Writes one batch to the archive, under the right group.
+*
+* A merged multi-group stream tags every event with its own group, so a batch
+* that mixes groups is split; a single-group stream falls back to the group the
+* request named.
+*/
+async function recordBatch(archive, region, groupNames, events) {
+	const fallback = groupNames[0] ?? "";
+	const byGroup = /* @__PURE__ */ new Map();
+	for (const event of events) {
+		const group = event.group ?? fallback;
+		const bucket = byGroup.get(group);
+		if (bucket === void 0) byGroup.set(group, [event]);
+		else bucket.push(event);
+	}
+	for (const [group, groupEvents] of byGroup) await archive.record(region, group, groupEvents);
+}
+/**
+* Parses a positive integer parameter within `limits`.
+*
+* Returns `null` for a missing value (meaning "use the default") and for an
+* unusable one, so a typo falls back to the default instead of failing the
+* stream; an out-of-range value is clamped rather than rejected.
+*/
+function parseBoundedInt(value, limits) {
+	if (value === null) return null;
+	const trimmed = value.trim();
+	if (trimmed.length === 0) return null;
+	const parsed = Number(trimmed);
+	if (!Number.isFinite(parsed)) return null;
+	return Math.min(Math.max(Math.round(parsed), limits.min), limits.max);
+}
+/**
+* Builds the feed for a request.
+*
+* The archive path never creates a CloudWatch client, so browsing history works
+* with no credentials and no network; it does need a region, because archived
+* rows are stored per region. Failures come back as an `apiError` response the
+* route returns unchanged.
+*/
+async function resolveFeed(request) {
+	const { source, config, env, groupNames, startTime, endTime, signal } = request;
+	if (source === "archive") {
+		const region = config.region ?? "";
+		if (region === "") return apiError(400, "Query parameter \"region\" is required when source=archive", "missing-region-param");
+		return {
+			region,
+			groupNames,
+			generator: tailArchivedEvents({
+				archive: await getArchive(env),
+				region,
+				logGroups: groupNames,
+				startTime,
+				endTime: endTime ?? Date.now(),
+				search: request.search,
+				levels: request.levels,
+				...request.pageSize === null ? {} : { pageSize: request.pageSize },
+				...request.maxEvents === null ? {} : { maxEvents: request.maxEvents },
+				signal
+			}),
+			release: () => void 0
+		};
+	}
+	let client;
+	try {
+		client = createLogsClient(config);
+	} catch (error) {
+		const described = describeAwsError(error);
+		return apiError(502, described.message, described.code);
+	}
+	let region;
+	try {
+		region = await resolveEffectiveRegion(client, config);
+	} catch (error) {
+		client.destroy();
+		const described = describeAwsError(error);
+		return apiError(502, described.message, described.code);
+	}
+	const tails = groupNames.map((group) => taggedEvents(tailLogEvents({
+		client,
+		logGroupName: group,
+		startTime,
+		endTime,
+		pollIntervalMs: request.pollIntervalMs,
+		filterPattern: request.filterPattern,
+		signal,
+		maxConsecutiveErrors: MAX_CONSECUTIVE_ERRORS
+	}), group));
+	return {
+		region,
+		groupNames,
+		generator: mergeTails(tails),
+		release: () => client.destroy()
+	};
+}
+/**
 * `GET /api/stream` - server-sent events for one log group.
 *
 * Emits `ready` first, then `log` per batch, `ping` after 15 s of silence and
-* a final `end`. The region is optional: without it the tailer uses a client
-* that resolves the region from the ambient AWS configuration. The tailer is
-* cancelled through `request.signal`, and every timer and listener is removed
-* so the dev server can exit.
+* a final `end`. `source=cloudwatch` (the default) polls CloudWatch Logs with
+* the ambient credentials; `source=archive` replays the local DuckDB archive and
+* needs neither credentials nor a region parameter resolution.
+*
+* The stream is cancelled through `request.signal`, and every timer and listener
+* is removed so the dev server can exit.
 */
 var GET = async ({ url, request }) => {
-	const logGroupName = url.searchParams.get("group")?.trim() ?? "";
-	if (logGroupName.length === 0) return apiError(400, "Query parameter \"group\" is required", "missing-group");
+	const groupSelection = parseGroupParams(url.searchParams.get("group"), url.searchParams.get("groups"));
+	if (!groupSelection.ok) return apiError(400, groupSelection.message, groupSelection.code);
+	const groupNames = groupSelection.names;
 	const parsedRegion = parseRegionParam(url.searchParams.get("region"));
 	if (!parsedRegion.ok) return apiError(400, REGION_PARAM_HINT, "invalid-region");
+	const source = parseSourceParam(url.searchParams.get("source"));
+	if (source === null) return apiError(400, SOURCE_PARAM_HINT, "invalid-source");
 	const env = readEnv();
 	const config = resolveAwsConfig(env, parsedRegion.region);
 	const filterPattern = url.searchParams.get("filterPattern")?.trim();
+	const search = url.searchParams.get("search")?.trim() ?? "";
+	const levels = parseLevelParam(url.searchParams.get("level"));
+	if (levels === void 0) return apiError(400, LEVEL_PARAM_HINT, "invalid-level");
+	if (levels !== null && source !== "archive") return apiError(400, "The \"level\" filter applies to source=archive; use filterPattern to filter CloudWatch", "invalid-level");
 	const streamWindow = resolveWindow({
-		mode: url.searchParams.get("mode"),
+		mode: url.searchParams.get("mode") ?? (source === "archive" ? "historic" : null),
 		range: url.searchParams.get("range"),
 		from: url.searchParams.get("from"),
 		to: url.searchParams.get("to"),
 		startTime: url.searchParams.get("startTime"),
 		lookback: url.searchParams.get("lookback"),
 		now: Date.now()
-	});
+	}, source === "archive" ? { maxLookbackMs: null } : {});
 	if (!streamWindow.ok) return apiError(400, streamWindow.message, streamWindow.code);
-	const pollIntervalMs = clampPollMs(url.searchParams.get("poll"));
-	let client;
-	let region;
-	try {
-		client = createLogsClient(config);
-		region = await resolveEffectiveRegion(client, config);
-	} catch (error) {
-		const described = describeAwsError(error);
-		return apiError(502, described.message, described.code);
-	}
-	const encoder = new TextEncoder();
+	if (source === "archive" && streamWindow.mode === "live") return apiError(400, "The local archive only serves historic windows: use mode=historic, or source=cloudwatch to tail live", "invalid-mode");
 	const bodyAbort = new AbortController();
+	const feed = await resolveFeed({
+		source,
+		config,
+		env,
+		groupNames,
+		startTime: streamWindow.startTime,
+		endTime: streamWindow.endTime,
+		filterPattern,
+		search: search.length === 0 ? null : search,
+		levels,
+		pageSize: parseBoundedInt(url.searchParams.get("pageSize"), ARCHIVE_PAGE_LIMITS),
+		maxEvents: parseBoundedInt(url.searchParams.get("max"), ARCHIVE_MAX_LIMITS),
+		pollIntervalMs: clampPollMs(url.searchParams.get("poll")),
+		signal: bodyAbort.signal
+	});
+	if (feed instanceof Response) return feed;
+	const archive = source === "cloudwatch" ? await getArchive(env) : null;
+	const encoder = new TextEncoder();
 	let streamController;
 	let closed = false;
 	let pingTimer;
@@ -532,27 +639,20 @@ var GET = async ({ url, request }) => {
 		cleanedUp = true;
 		clearPing();
 		request.signal.removeEventListener("abort", onAbort);
-		client.destroy();
+		feed.release();
 	};
 	const pump = async () => {
 		let consecutiveErrors = 0;
 		let reason = "completed";
 		try {
-			for await (const batch of tailLogEvents({
-				client,
-				logGroupName,
-				startTime: streamWindow.startTime,
-				endTime: streamWindow.endTime,
-				pollIntervalMs,
-				filterPattern,
-				signal: bodyAbort.signal,
-				maxConsecutiveErrors: MAX_CONSECUTIVE_ERRORS
-			})) {
+			for await (const batch of feed.generator) {
 				if (closed || bodyAbort.signal.aborted) break;
 				if (batch.type === "events") {
-					const payload = { events: batch.events };
+					const events = source === "cloudwatch" ? withLevels(batch.events) : batch.events;
+					const payload = { events };
 					consecutiveErrors = 0;
 					enqueue(sseFrame("log", payload));
+					if (archive !== null) await recordBatch(archive, feed.region, feed.groupNames, events);
 				} else if (batch.type === "end") {
 					reason = batch.reason;
 					break;
@@ -583,9 +683,11 @@ var GET = async ({ url, request }) => {
 		start(controller) {
 			streamController = controller;
 			const payload = {
-				region,
-				logGroupName,
-				endpoint: config.endpoint,
+				region: feed.region,
+				logGroupName: feed.groupNames[0] ?? "",
+				groups: [...feed.groupNames],
+				endpoint: source === "archive" ? null : config.endpoint,
+				source,
 				startTime: streamWindow.startTime,
 				endTime: streamWindow.endTime,
 				mode: streamWindow.mode,
@@ -607,4 +709,4 @@ var GET = async ({ url, request }) => {
 };
 
 export { GET };
-//# sourceMappingURL=_server.ts.js-D_i-xW6_.js.map
+//# sourceMappingURL=_server.ts.js-C-XDemlx.js.map