{"database": "audit", "private": false, "path": "/audit", "size": 34469818368, "tables": [{"name": "account_apps_snapshots", "columns": ["snapshot_at", "store_hash", "app_id", "app_name"], "primary_keys": ["snapshot_at", "store_hash", "app_id"], "count": 18, "hidden": false, "fts_table": null, "foreign_keys": {"incoming": [], "outgoing": []}, "private": false}, {"name": "account_user_snapshots", "columns": ["snapshot_at", "store_hash", "user_id", "email", "first_name", "last_name", "status", "last_login_at", "permissions_json", "permissions_hash"], "primary_keys": ["snapshot_at", "store_hash", "user_id"], "count": 52, "hidden": false, "fts_table": null, "foreign_keys": {"incoming": [], "outgoing": []}, "private": false}, {"name": "anomaly_baseline_actors", "columns": ["source", "store", "actor", "first_seen", "last_seen", "event_count", "learned_at"], "primary_keys": ["source", "store", "actor"], "count": 38574, "hidden": false, "fts_table": null, "foreign_keys": {"incoming": [], "outgoing": []}, "private": false}, {"name": "anomaly_baseline_failed_logins", "columns": ["source", "target_type", "target_id", "mean_per_hour", "stddev", "sample_size", "learned_at"], "primary_keys": ["source", "target_type", "target_id"], "count": 0, "hidden": false, "fts_table": null, "foreign_keys": {"incoming": [], "outgoing": []}, "private": false}, {"name": "anomaly_baseline_hourofday", "columns": ["source", "actor", "hour", "event_count", "total_count", "learned_at"], "primary_keys": ["source", "actor", "hour"], "count": 6894, "hidden": false, "fts_table": null, "foreign_keys": {"incoming": [], "outgoing": []}, "private": false}, {"name": "anomaly_baseline_sequences", "columns": ["actor", "prev_action", "next_action", "transition_count", "actor_prev_total", "probability", "learned_at"], "primary_keys": ["actor", "prev_action", "next_action"], "count": 4031, "hidden": false, "fts_table": null, "foreign_keys": {"incoming": [], "outgoing": []}, "private": false}, {"name": "anomaly_baseline_volume", "columns": ["source", "day_of_week", "hour", "mean_per_hour", "stddev", "sample_size", "learned_at"], "primary_keys": ["source", "day_of_week", "hour"], "count": 1398, "hidden": false, "fts_table": null, "foreign_keys": {"incoming": [], "outgoing": []}, "private": false}, {"name": "anomaly_cohort_assignment", "columns": ["actor", "cohort_id", "confidence", "event_count", "learned_at"], "primary_keys": ["actor"], "count": 1016, "hidden": false, "fts_table": null, "foreign_keys": {"incoming": [], "outgoing": []}, "private": false}, {"name": "anomaly_cohort_baseline", "columns": ["cohort_id", "feature", "mean", "stddev", "member_count", "learned_at"], "primary_keys": ["cohort_id", "feature"], "count": 18, "hidden": false, "fts_table": null, "foreign_keys": {"incoming": [], "outgoing": []}, "private": false}, {"name": "chain_checkpoints", "columns": ["id", "checkpoint_at", "last_event_id", "last_row_hash", "signature", "notes"], "primary_keys": ["id"], "count": 27, "hidden": false, "fts_table": null, "foreign_keys": {"incoming": [], "outgoing": []}, "private": false}, {"name": "correlation_rules", "columns": ["id", "name", "event_a_source_glob", "event_a_category", "event_a_action_glob", "event_b_source_glob", "event_b_category", "event_b_action_glob", "same_actor", "max_seconds", "severity", "summary_template", "enabled", "created_at"], "primary_keys": ["id"], "count": 6, "hidden": false, "fts_table": null, "foreign_keys": {"incoming": [], "outgoing": []}, "private": false}, {"name": "coverage_refresh_state", "columns": ["k", "v"], "primary_keys": ["k"], "count": 2, "hidden": false, "fts_table": null, "foreign_keys": {"incoming": [], "outgoing": []}, "private": false}, {"name": "coverage_snapshot", "columns": ["source", "captured", "oldest", "newest", "most_recent_commit", "refreshed_at", "refresh_duration_ms"], "primary_keys": ["source"], "count": 81, "hidden": false, "fts_table": null, "foreign_keys": {"incoming": [], "outgoing": []}, "private": false}, {"name": "coverage_snapshot_monthly", "columns": ["source", "year_month", "captured"], "primary_keys": ["source", "year_month"], "count": 2394, "hidden": false, "fts_table": null, "foreign_keys": {"incoming": [], "outgoing": []}, "private": false}, {"name": "detection_signals", "columns": ["id", "fired_at", "rule_name", "severity", "store", "summary", "payload_json", "related_event_ids", "dedupe_key", "acknowledged_at", "acknowledged_by"], "primary_keys": ["id"], "count": 5154, "hidden": false, "fts_table": null, "foreign_keys": {"incoming": [], "outgoing": []}, "private": false}, {"name": "event_enrichments", "columns": ["event_id", "enrichment_status", "enrichment_attempts", "enrichment_next_at", "enrichment_started", "enriched_at", "enrichment_json", "enrichment_error"], "primary_keys": ["event_id"], "count": null, "hidden": false, "fts_table": null, "foreign_keys": {"incoming": [], "outgoing": [{"other_table": "events", "column": "event_id", "other_column": "id"}]}, "private": false}, {"name": "event_suppressions", "columns": ["event_id", "reason", "suppressed_by", "suppressed_at"], "primary_keys": ["event_id"], "count": 839, "hidden": false, "fts_table": null, "foreign_keys": {"incoming": [], "outgoing": []}, "private": false}, {"name": "events", "columns": ["id", "occurred_at", "received_at", "store", "source", "category", "action", "scope", "actor", "target_type", "target_id", "bc_log_id", "bc_hash", "severity", "payload_json", "enriched_json", "correlation_id", "prev_hash", "row_hash", "target_id_derived"], "primary_keys": ["id"], "count": null, "hidden": false, "fts_table": null, "foreign_keys": {"incoming": [{"other_table": "event_enrichments", "column": "id", "other_column": "event_id"}], "outgoing": []}, "private": false}, {"name": "ingest_log", "columns": ["id", "received_at", "endpoint", "remote_ip", "status", "detail", "body_size"], "primary_keys": ["id"], "count": null, "hidden": false, "fts_table": null, "foreign_keys": {"incoming": [], "outgoing": []}, "private": false}, {"name": "poll_cursors", "columns": ["store", "source", "last_id", "last_run_at", "last_status"], "primary_keys": ["store", "source"], "count": 2, "hidden": false, "fts_table": null, "foreign_keys": {"incoming": [], "outgoing": []}, "private": false}, {"name": "poll_heartbeats", "columns": ["id", "heartbeat_at", "source", "status", "detail", "events_emitted"], "primary_keys": ["id"], "count": null, "hidden": false, "fts_table": null, "foreign_keys": {"incoming": [], "outgoing": []}, "private": false}, {"name": "refund_attributions", "columns": ["store", "refund_id", "order_id", "refund_at", "refund_amount", "refund_tax", "refund_reason", "refund_item_count", "bc_user_id", "issuer_email", "issuer_name", "issuer_confidence", "customer_email", "gorgias_ticket_id", "gorgias_ticket_subject", "gorgias_assignee_email", "gorgias_match_confidence", "source_event_id", "built_at"], "primary_keys": ["store", "refund_id"], "count": 28621, "hidden": false, "fts_table": null, "foreign_keys": {"incoming": [], "outgoing": []}, "private": false}, {"name": "retention_audit", "columns": ["id", "ran_at", "deleted_count", "oldest_kept", "notes"], "primary_keys": ["id"], "count": 0, "hidden": false, "fts_table": null, "foreign_keys": {"incoming": [], "outgoing": []}, "private": false}, {"name": "security_snapshot", "columns": ["days_back", "refreshed_at", "fw_asn_json", "source_summary_json"], "primary_keys": ["days_back"], "count": 4, "hidden": false, "fts_table": null, "foreign_keys": {"incoming": [], "outgoing": []}, "private": false}, {"name": "source_truth", "columns": ["source", "api_total", "api_oldest", "api_newest", "measured_at", "method", "notes", "event_source", "event_category", "live_event_source", "live_event_category", "mode", "freshness_sla_minutes", "heartbeat_source"], "primary_keys": ["source"], "count": 81, "hidden": false, "fts_table": null, "foreign_keys": {"incoming": [], "outgoing": []}, "private": false}, {"name": "sqlite_sequence", "columns": ["name", "seq"], "primary_keys": [], "count": 6, "hidden": false, "fts_table": null, "foreign_keys": {"incoming": [], "outgoing": []}, "private": false}, {"name": "storefront_script_snapshots", "columns": ["snapshot_at", "store", "page_url", "script_id", "kind", "src", "integrity", "inline_hash", "inline_preview", "position"], "primary_keys": ["snapshot_at", "store", "script_id", "position"], "count": 534, "hidden": false, "fts_table": null, "foreign_keys": {"incoming": [], "outgoing": []}, "private": false}, {"name": "stream_distinct_values", "columns": ["col", "value", "n", "rank"], "primary_keys": ["col", "value"], "count": 197, "hidden": false, "fts_table": null, "foreign_keys": {"incoming": [], "outgoing": []}, "private": false}, {"name": "stream_source_counts", "columns": ["source", "n", "rank"], "primary_keys": ["source"], "count": 91, "hidden": false, "fts_table": null, "foreign_keys": {"incoming": [], "outgoing": []}, "private": false}, {"name": "stream_stat_snapshot", "columns": ["k", "v"], "primary_keys": ["k"], "count": 3, "hidden": false, "fts_table": null, "foreign_keys": {"incoming": [], "outgoing": []}, "private": false}, {"name": "theme_snapshots", "columns": ["snapshot_at", "store", "theme_uuid", "name", "is_active", "is_private"], "primary_keys": ["snapshot_at", "store", "theme_uuid"], "count": 0, "hidden": false, "fts_table": null, "foreign_keys": {"incoming": [], "outgoing": []}, "private": false}, {"name": "volume_baselines", "columns": ["source", "hour_of_week", "median", "mad", "sample_size", "computed_at"], "primary_keys": ["source", "hour_of_week"], "count": 0, "hidden": false, "fts_table": null, "foreign_keys": {"incoming": [], "outgoing": []}, "private": false}, {"name": "webhook_registrations", "columns": ["store", "scope", "hook_id", "is_active", "destination", "registered_at", "last_seen_at", "last_heartbeat_at"], "primary_keys": ["store", "scope"], "count": 128, "hidden": false, "fts_table": null, "foreign_keys": {"incoming": [], "outgoing": []}, "private": false}, {"name": "sqlite_stat1", "columns": ["tbl", "idx", "stat"], "primary_keys": [], "count": 64, "hidden": true, "fts_table": null, "foreign_keys": {"incoming": [], "outgoing": []}, "private": false}], "hidden_count": 1, "views": [], "queries": [], "allow_execute_sql": true, "query_ms": 1111.2568620592356}