4ed831d9c3
New diagnostic_events table + per-account users.debug_mode_enabled flag.
When an account's flag is on, its client(s) POST a batch timeseries of
connectivity / UPnP-sync / power / lifecycle events to /api/diagnostics
(no-op 204 when off, kind whitelist mirrors the CHECK constraint).
Admin surface: GET /api/admin/diagnostics (optional account/device/kind/
time-window filters, RFC3339-or-epoch-ms, export-sized paging) + a
/diagnostics/devices overview + PUT /api/admin/users/{id}/debug-mode to
flip an account remotely while a bug is live. debug_mode_enabled is now
exposed on /api/me (client gate) and the admin user views.
Retention: a 30-day gc-worker sweep (GcPruneDiagnostics), keyed on the
server clock so a skewed device clock can't keep rows alive.
Refs Scribe M9 (#119), tasks #1172 #1173.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01K55iTxn95BtshocgdE1shW
104 lines
3.8 KiB
Go
104 lines
3.8 KiB
Go
// Package gc runs periodic garbage-collection / lifecycle sweeps
|
|
// against tables that have NO writer-side close path or NO retention
|
|
// policy. Each sweep addresses a drift finding from the 2026-06-02
|
|
// audit (Scribe parent #552) and is idempotent — re-running it on
|
|
// already-clean rows is a no-op.
|
|
//
|
|
// One Worker handles all sweeps so a single long-tick goroutine
|
|
// amortises the per-tick fixed cost. Each individual sweep is small
|
|
// (single UPDATE / DELETE with a time-bounded WHERE) and emits a
|
|
// log line with the affected-row count so the sweep cadence is
|
|
// visible in the application log without an explicit metrics layer.
|
|
//
|
|
// Sweeps:
|
|
// - GcCloseStalePlayEvents (#566)
|
|
// - GcClosePlaySessionsWithNoRecentEvents (#565)
|
|
// - GcExpireScrobbleQueueFailedRows (#567)
|
|
// - GcResetStuckSystemPlaylistRuns (#574)
|
|
// - GcDeleteExpiredPasswordResets (#575)
|
|
// - GcPruneDiagnostics (M9 — diagnostics 30d retention)
|
|
package gc
|
|
|
|
import (
|
|
"context"
|
|
"log/slog"
|
|
"time"
|
|
|
|
"github.com/jackc/pgx/v5/pgxpool"
|
|
|
|
"git.fabledsword.com/bvandeusen/minstrel/internal/db/dbq"
|
|
)
|
|
|
|
// defaultTick is the production sweep cadence. 1 hour is generous
|
|
// since each sweep's WHERE clause uses a multi-hour staleness
|
|
// threshold; the worst-case delay between a row becoming sweepable
|
|
// and the worker noticing is bounded by tick + threshold.
|
|
const defaultTick = 1 * time.Hour
|
|
|
|
// Worker holds the pool + logger + tick interval. Construct with
|
|
// [NewWorker]; pass the returned Worker to a goroutine that calls
|
|
// [Worker.Run] with a context that's cancelled on shutdown.
|
|
type Worker struct {
|
|
pool *pgxpool.Pool
|
|
logger *slog.Logger
|
|
tick time.Duration
|
|
}
|
|
|
|
// NewWorker builds a Worker with the production tick (1h). Tests can
|
|
// reach into the Worker after construction to override `tick` for
|
|
// faster iteration.
|
|
func NewWorker(pool *pgxpool.Pool, logger *slog.Logger) *Worker {
|
|
return &Worker{pool: pool, logger: logger, tick: defaultTick}
|
|
}
|
|
|
|
// Run blocks until ctx is cancelled, running every sweep on each
|
|
// tick. Sweeps fire in fixed order; an error in one does NOT abort
|
|
// the rest (the panic-vs-just-failed distinction matters here — a
|
|
// pgx transient error from one query shouldn't prevent the others
|
|
// from running).
|
|
func (w *Worker) Run(ctx context.Context) {
|
|
// Fire once at start so a freshly-deployed server doesn't wait a
|
|
// full tick before doing the initial sweep. Matches the scrobble
|
|
// + similarity workers' "sweep then tick" pattern.
|
|
w.tickOnce(ctx)
|
|
t := time.NewTicker(w.tick)
|
|
defer t.Stop()
|
|
for {
|
|
select {
|
|
case <-ctx.Done():
|
|
return
|
|
case <-t.C:
|
|
w.tickOnce(ctx)
|
|
}
|
|
}
|
|
}
|
|
|
|
// tickOnce runs each sweep once, logging the affected-row count.
|
|
// Errors are logged per-sweep but do NOT abort the remaining ones —
|
|
// each sweep is independent.
|
|
func (w *Worker) tickOnce(ctx context.Context) {
|
|
q := dbq.New(w.pool)
|
|
w.runSweep(ctx, "close_stale_play_events", q.GcCloseStalePlayEvents)
|
|
w.runSweep(ctx, "close_play_sessions", q.GcClosePlaySessionsWithNoRecentEvents)
|
|
w.runSweep(ctx, "expire_scrobble_failed", q.GcExpireScrobbleQueueFailedRows)
|
|
w.runSweep(ctx, "reset_stuck_system_runs", q.GcResetStuckSystemPlaylistRuns)
|
|
w.runSweep(ctx, "delete_expired_password_resets", q.GcDeleteExpiredPasswordResets)
|
|
w.runSweep(ctx, "prune_diagnostics", q.GcPruneDiagnostics)
|
|
}
|
|
|
|
// runSweep is a small adapter so each sweep call site is a one-liner
|
|
// in tickOnce. Logs at info on rows>0 and debug on rows=0 to keep
|
|
// the normal-case (nothing-to-do) noise out of operator logs.
|
|
func (w *Worker) runSweep(ctx context.Context, name string, fn func(context.Context) (int64, error)) {
|
|
rows, err := fn(ctx)
|
|
if err != nil {
|
|
w.logger.Error("gc sweep failed", "sweep", name, "err", err)
|
|
return
|
|
}
|
|
if rows > 0 {
|
|
w.logger.Info("gc sweep", "sweep", name, "rows_affected", rows)
|
|
} else {
|
|
w.logger.Debug("gc sweep", "sweep", name, "rows_affected", 0)
|
|
}
|
|
}
|