Restore

Restore file to captured state

Every captured change carries its SHA-256-addressed content in BLOB_STORE. Restoring writes that content back to the original path — current file gets backed up to <path>.drift_restore_backup_<epoch> before overwrite.

What will change

Preview -- nothing has been written yet.

Target file	/var/www/vhosts/3dshawn.com/site1/dashboard.cgi
Site	DriftSense self-monitor on local
Kind	local
Captured at	2026-07-11 23:34:26
Captured SHA	b7658e07661d45aff519143566af43c7f663191232dcb45085e008761036a05c

Current state on disk

Live check just now. If SHAs match, the restore is a no-op.

File present	yes
Size	17372 bytes
Current SHA	0fee4fd03c84
Same as captured?	no -- restore will change it

See exactly what's different →

What restore will change — live diff

Left column shows current on-disk content; right shows what restore will write. +0 additions, -83 deletions, 328 unchanged context lines.

1	1	#!/usr/bin/perl
2	2	#======================================================================
3	3	# DriftSense -- /dashboard.cgi
4	4	#
5	5	# Landing page. Shows portfolio-wide health at a glance:
6	6	# * KPI tiles: file changes today \| schema changes 7d \| named releases \| drift alerts
7	7	# * Recent activity table (last 30 file + schema changes, merged, newest first)
8	8	# * Named releases strip (last 5 bookmarks)
9	9	# * Servers status strip
10	10	#======================================================================
11	11	use strict;
12	12	use warnings;
13	13	use CGI ();
14	14	use MODS::Config;
15	15	use MODS::DBConnect;
16	16	use MODS::Template;
17	17	use MODS::PageWrapper;
18	18	use MODS::Charts;
19	19
20	20	my $cfg = MODS::Config->new;
21	21	my $db = MODS::DBConnect->new;
22	22	my $tpl = MODS::Template->new;
23	23	my $wrap = MODS::PageWrapper->new;
24	24
25	25	# Headers
26	26	$\|=1;
27	27	print "Content-Type: text/html; charset=utf-8\nCache-Control: no-cache\n\n";
28	28
29	29	my $dbh = $db->db_connect
30	30	or die "DriftSense: cannot connect to storage DB. Check /etc/drift_sense/drift_sense.conf.\n";
31	31
32	32	# ----- KPI queries ----------------------------------------------------
33	33	my $file_today = $db->db_readwrite($dbh, q~
34	34	SELECT COUNT(*) AS n FROM FILE_CHANGES
35	35	WHERE date_time >= DATE_SUB(NOW(), INTERVAL 1 DAY)
36		~, __FILE__, __LINE__);
37		my $file_prev = $db->db_readwrite($dbh, q~
38		SELECT COUNT(*) AS n FROM FILE_CHANGES
39		WHERE date_time >= DATE_SUB(NOW(), INTERVAL 2 DAY)
40		AND date_time < DATE_SUB(NOW(), INTERVAL 1 DAY)
41	36	~, __FILE__, __LINE__);
42	37
43	38	my $schema_7d = $db->db_readwrite($dbh, q~
44	39	SELECT COUNT(*) AS n FROM SCHEMA_CHANGE
45	40	WHERE change_datetime >= DATE_SUB(NOW(), INTERVAL 7 DAY)
46		~, __FILE__, __LINE__);
47		my $schema_prev = $db->db_readwrite($dbh, q~
48		SELECT COUNT(*) AS n FROM SCHEMA_CHANGE
49		WHERE change_datetime >= DATE_SUB(NOW(), INTERVAL 14 DAY)
50		AND change_datetime < DATE_SUB(NOW(), INTERVAL 7 DAY)
51	41	~, __FILE__, __LINE__);
52	42
53	43	my $releases_ct = $db->db_readwrite($dbh, q~
54	44	SELECT COUNT(*) AS n FROM NAMED_RELEASES
55	45	~, __FILE__, __LINE__);
56	46
57	47	my $drifted_ct = $db->db_readwrite($dbh, q~
58	48	SELECT COUNT(*) AS n FROM CONFIG_DRIFT_BASELINES WHERE is_drifted = 1
59	49	~, __FILE__, __LINE__);
60	50
61	51	# ----- Recent activity (merged file + schema changes, newest first) --
62	52	my @file_recent = $db->db_readwrite_multiple($dbh, q~
63	53	SELECT 'file' AS kind,
64	54	file_changes_id AS id,
65	55	file_name AS what,
66	56	status AS detail,
67	57	date_time AS ts,
68	58	UNIX_TIMESTAMP(date_time) AS ts_epoch,
69	59	server_id
70	60	FROM FILE_CHANGES
71	61	ORDER BY date_time DESC
72	62	LIMIT 20
73	63	~, __FILE__, __LINE__);
74	64	my @schema_recent = $db->db_readwrite_multiple($dbh, q~
75	65	SELECT 'schema' AS kind,
76	66	schema_change_id AS id,
77	67	CONCAT(database_name, '.', table_name) AS what,
78	68	changes AS detail,
79	69	change_datetime AS ts,
80	70	UNIX_TIMESTAMP(change_datetime) AS ts_epoch,
81	71	server_id
82	72	FROM SCHEMA_CHANGE
83	73	ORDER BY change_datetime DESC
84	74	LIMIT 20
85	75	~, __FILE__, __LINE__);
86	76	my @recent = sort { ($b->{ts} \|\| '') cmp ($a->{ts} \|\| '') } (@file_recent, @schema_recent);
87	77	@recent = splice(@recent, 0, 20) if @recent > 20;
88	78	foreach my $r (@recent) {
89	79	my $d = $r->{detail} // '';
90	80	$d =~ s/\s+/ /g;
91	81	$r->{detail} = length($d) > 90 ? substr($d, 0, 87) . '...' : $d;
92	82	$r->{what} = length($r->{what} // '') > 60 ? substr($r->{what}, 0, 57) . '...' : $r->{what};
93	83	$r->{diff_url} = ($r->{kind} eq 'file'
94	84	? "/diff.cgi?kind=file&id=$r->{id}"
95	85	: "/diff.cgi?kind=schema&id=$r->{id}");
96	86	$r->{ts} //= '';
97	87	$r->{ts_epoch} //= 0;
98	88	$r->{kind_pill} = ($r->{kind} eq 'file') ? 'pill-info' : 'pill-warn';
99	89	}
100	90
101	91	# ----- 90-day activity timeline (stacked bars) -----------------------
102	92	my $today_dow = 0;
103	93	my @file_by_day = $db->db_readwrite_multiple($dbh, q~
104	94	SELECT DATE_FORMAT(date_time, '%Y-%m-%d') AS d, COUNT(*) AS n
105	95	FROM FILE_CHANGES
106	96	WHERE date_time >= DATE_SUB(NOW(), INTERVAL 90 DAY)
107	97	GROUP BY d
108	98	~, __FILE__, __LINE__);
109	99	my @schema_by_day = $db->db_readwrite_multiple($dbh, q~
110	100	SELECT DATE_FORMAT(change_datetime, '%Y-%m-%d') AS d, COUNT(*) AS n
111	101	FROM SCHEMA_CHANGE
112	102	WHERE change_datetime >= DATE_SUB(NOW(), INTERVAL 90 DAY)
113	103	GROUP BY d
114	104	~, __FILE__, __LINE__);
115	105	my (%file_map, %schema_map);
116	106	$file_map{$_->{d}} = $_->{n} for @file_by_day;
117	107	$schema_map{$_->{d}} = $_->{n} for @schema_by_day;
118	108
119	109	use POSIX ();
120	110	my (@days, @day_keys, @file_series, @schema_series);
121	111	my $today = time;
122	112	for (my $i = 89; $i >= 0; $i--) {
123	113	my $t = $today - ($i * 86400);
124	114	my $key = POSIX::strftime('%Y-%m-%d', localtime($t));
125	115	my $lbl = POSIX::strftime('%b %d', localtime($t));
126	116	push @days, $lbl;
127	117	push @day_keys, $key;
128	118	push @file_series, ($file_map{$key} \|\| 0);
129	119	push @schema_series, ($schema_map{$key} \|\| 0);
130	120	}
131	121	my $timeline_svg = MODS::Charts::stacked_bars(
132	122	days => \@days,
133	123	day_keys => \@day_keys,
134	124	series => { file => \@file_series, schema => \@schema_series },
135	125	width => 1080,
136	126	height => 180,
137	127	);
138	128
139	129	# ----- Per-site health (Feature 2) -----------------------------------
140	130	# One row per active file monitor: total captured, active (non-deleted) files,
141	131	# last change timestamp. Sparkline of last 30 days per site.
142	132	my @per_site = $db->db_readwrite_multiple($dbh, q~
143	133	SELECT m.file_monitor_list_id AS mid,
144	134	m.scan_name,
145	135	m.scan_path,
146	136	s.server_name,
147	137	s.kind AS server_kind,
148	138	COUNT(fc.file_changes_id) AS captured_ct,
149	139	COUNT(DISTINCT CASE WHEN fc.status != 'deleted'
150	140	THEN fc.file_name END) AS active_files,
151	141	SUM(CASE WHEN fc.date_time >= DATE_SUB(NOW(), INTERVAL 24 HOUR)
152	142	THEN 1 ELSE 0 END) AS changes_24h,
153	143	MAX(UNIX_TIMESTAMP(fc.date_time)) AS last_change_epoch,
154	144	DATE_FORMAT(MAX(fc.date_time), '%b %d %H:%i') AS last_change_h
155	145	FROM FILE_MONITOR_SETTINGS m
156	146	LEFT JOIN SERVERS s ON s.server_id = m.server_id
157	147	LEFT JOIN FILE_CHANGES fc ON fc.file_monitor_list_id = m.file_monitor_list_id
158	148	WHERE m.status = 1
159	149	GROUP BY m.file_monitor_list_id, m.scan_name, m.scan_path, s.server_name, s.kind
160	150	ORDER BY captured_ct DESC
161	151	~, __FILE__, __LINE__);
162	152
163	153	# 30-day sparkline per monitor (one query, bucket in Perl)
164	154	my %spark_by_mid;
165	155	{
166	156	my @day_rows = $db->db_readwrite_multiple($dbh, q~
167	157	SELECT file_monitor_list_id AS mid,
168	158	DATE_FORMAT(date_time, '%Y-%m-%d') AS d,
169	159	COUNT(*) AS n
170	160	FROM FILE_CHANGES
171	161	WHERE date_time >= DATE_SUB(NOW(), INTERVAL 30 DAY)
172	162	GROUP BY file_monitor_list_id, d
173	163	~, __FILE__, __LINE__);
174	164	my %by;
175	165	foreach my $r (@day_rows) { $by{$r->{mid}}{$r->{d}} = $r->{n}; }
176	166	my $now = time;
177	167	my @keys;
178	168	for (my $i = 29; $i >= 0; $i--) {
179	169	push @keys, POSIX::strftime('%Y-%m-%d', localtime($now - $i * 86400));
180	170	}
181	171	foreach my $r (@per_site) {
182	172	my @series;
183	173	for my $k (@keys) { push @series, ($by{$r->{mid}}{$k} \|\| 0); }
184	174	$spark_by_mid{$r->{mid}} = \@series;
185	175	}
186	176	}
187	177	foreach my $r (@per_site) {
188	178	$r->{active_files} //= 0;
189	179	$r->{captured_ct} //= 0;
190	180	$r->{changes_24h} //= 0;
191	181	$r->{last_change_epoch} //= 0;
192	182	$r->{last_change_h} //= 'never';
193	183	$r->{kind_pill} = ($r->{server_kind} // '') eq 'ssh_agent' ? 'pill-info' : 'pill-mute';
194	184	my $s = $spark_by_mid{$r->{mid}};
195	185	$r->{spark_svg} = $s ? MODS::Charts::sparkline(values => $s, width => 120, height => 28) : '';
196	186	$r->{drilldown_url} = "/file_changes.cgi?monitor=" . $r->{mid};
197	187	$r->{path_short} = length($r->{scan_path} // '') > 55
198	188	? '...' . substr($r->{scan_path}, -52) : ($r->{scan_path} // '');
199	189	}
200	190
201	191	# ----- Change-frequency ranking (Feature 5) --------------------------
202	192	# Top-20 files by change count in the last 30 days -- the "live-config"
203	193	# heatmap. Shows which files are being edited most, per-site.
204	194	my @top_files = $db->db_readwrite_multiple($dbh, q~
205	195	SELECT fc.file_name,
206	196	m.scan_name,
207	197	COUNT(*) AS change_ct,
208	198	MAX(fc.file_changes_id) AS latest_id,
209	199	MAX(UNIX_TIMESTAMP(fc.date_time)) AS latest_epoch,
210	200	DATE_FORMAT(MAX(fc.date_time), '%b %d %H:%i') AS latest_h
211	201	FROM FILE_CHANGES fc
212	202	LEFT JOIN FILE_MONITOR_SETTINGS m ON m.file_monitor_list_id = fc.file_monitor_list_id
213	203	WHERE fc.date_time >= DATE_SUB(NOW(), INTERVAL 30 DAY)
214	204	GROUP BY fc.file_name, m.scan_name
215	205	ORDER BY change_ct DESC, latest_epoch DESC
216	206	LIMIT 20
217	207	~, __FILE__, __LINE__);
218	208	foreach my $t (@top_files) {
219	209	$t->{file_short} = length($t->{file_name} // '') > 70
220	210	? '...' . substr($t->{file_name}, -67) : ($t->{file_name} // '');
221	211	$t->{diff_url} = "/diff.cgi?kind=file&id=" . ($t->{latest_id} \|\| 0);
222	212	$t->{scan_name} //= 'unknown';
223	213	$t->{latest_epoch} //= 0;
224	214	}
225	215
226	216	# ----- Cross-site dedup surfacing (Feature 3, dashboard preview) -----
227	217	# Blobs that appear in FILE_CHANGES rows tied to >1 distinct monitor.
228	218	my @shared_blobs = $db->db_readwrite_multiple($dbh, q~
229	219	SELECT fc.blob_sha,
230	220	COUNT(DISTINCT fc.file_monitor_list_id) AS site_ct,
231	221	COUNT(DISTINCT fc.file_name) AS distinct_names,
232	222	GROUP_CONCAT(DISTINCT m.scan_name ORDER BY m.scan_name SEPARATOR ' \| ') AS scans,
233	223	MAX(fc.file_changes_id) AS example_id,
234	224	bs.size_uncompressed,
235	225	bs.ref_count
236	226	FROM FILE_CHANGES fc
237	227	JOIN BLOB_STORE bs ON bs.blob_sha = fc.blob_sha
238	228	LEFT JOIN FILE_MONITOR_SETTINGS m ON m.file_monitor_list_id = fc.file_monitor_list_id
239	229	WHERE fc.blob_sha IS NOT NULL
240	230	GROUP BY fc.blob_sha, bs.size_uncompressed, bs.ref_count
241	231	HAVING site_ct > 1
242	232	ORDER BY site_ct DESC, distinct_names DESC
243	233	LIMIT 8
244	234	~, __FILE__, __LINE__);
245	235	foreach my $b (@shared_blobs) {
246	236	$b->{sha_short} = substr($b->{blob_sha} // '', 0, 12);
247	237	$b->{size_h} = _fmt_bytes($b->{size_uncompressed} \|\| 0);
248	238	$b->{diff_url} = "/diff.cgi?kind=file&id=" . ($b->{example_id} \|\| 0);
249	239	$b->{scans_h} = length($b->{scans} // '') > 90 ? substr($b->{scans}, 0, 87) . '...' : $b->{scans};
250	240	}
251	241
252	242	sub _fmt_bytes {
253	243	my $n = shift; $n //= 0;
254	244	return "$n B" if $n < 1024;
255	245	return sprintf('%.1f KB', $n/1024) if $n < 1024*1024;
256	246	return sprintf('%.1f MB', $n/1024/1024);
257	247	}
258	248
259	249	# ----- Named releases strip (last 5) ---------------------------------
260	250	my @releases = $db->db_readwrite_multiple($dbh, q~
261	251	SELECT named_release_id, name, description,
262	252	DATE_FORMAT(released_at, '%b %d, %Y') AS released_h,
263	253	UNIX_TIMESTAMP(released_at) AS released_epoch,
264	254	released_by
265	255	FROM NAMED_RELEASES
266	256	ORDER BY released_at DESC
267	257	LIMIT 5
268	258	~, __FILE__, __LINE__);
269	259	$_->{released_epoch} //= 0 for @releases;
270	260
271	261	# ----- Server status strip -------------------------------------------
272	262	my @servers = $db->db_readwrite_multiple($dbh, q~
273	263	SELECT server_id, server_name, hostname, role, status,
274	264	DATE_FORMAT(last_heartbeat_at, '%b %d %H:%i') AS last_heartbeat_h,
275	265	UNIX_TIMESTAMP(last_heartbeat_at) AS heartbeat_epoch
276	266	FROM SERVERS
277	267	ORDER BY (status='active') DESC, server_id ASC
278	268	LIMIT 8
279	269	~, __FILE__, __LINE__);
280	270	foreach my $s (@servers) {
281	271	$s->{status_pill} = $s->{status} eq 'active' ? 'pill-ok'
282	272	: $s->{status} eq 'offline' ? 'pill-bad'
283	273	: 'pill-mute';
284	274	$s->{last_heartbeat_h} //= 'never';
285	275	$s->{heartbeat_epoch} //= 0;
286		}
287
288		# ----- Stable versions tile (Wave 5 F2 / user ask) ------------------
289		my @stable_versions = $db->db_readwrite_multiple($dbh, q~
290		SELECT nr.named_release_id AS id, nr.name, nr.version_label, nr.tier,
291		nr.description,
292		DATE_FORMAT(nr.released_at, '%b %d, %Y') AS released_h,
293		UNIX_TIMESTAMP(nr.released_at) AS released_epoch,
294		(SELECT COUNT(*) FROM NAMED_RELEASE_PINS p WHERE p.named_release_id = nr.named_release_id) AS pin_ct
295		FROM NAMED_RELEASES nr
296		WHERE nr.tier IN ('stable', 'working')
297		ORDER BY (nr.tier = 'stable') DESC, nr.released_at DESC
298		LIMIT 6
299		~, __FILE__, __LINE__);
300		foreach my $r (@stable_versions) {
301		$r->{label} = $r->{version_label} \|\| $r->{name};
302		$r->{tier_pill} = $r->{tier} eq 'stable' ? 'pill-ok' : 'pill-info';
303		$r->{tier_lbl} = uc($r->{tier});
304		$r->{restore_url} = "/restore_release.cgi?release_id=$r->{id}";
305		$r->{released_epoch} //= 0;
306		$r->{pin_ct} //= 0;
307		}
308
309		# ----- Pin-drift tile (Wave 5 feature 1) ----------------------------
310		my $drift_kpi = $db->db_readwrite($dbh, q~
311		SELECT COUNT(*) AS drifted_ct,
312		COUNT(DISTINCT named_release_id) AS releases_affected
313		FROM PIN_DRIFT_LOG
314		WHERE notified = 0
315		AND detected_at >= DATE_SUB(NOW(), INTERVAL 30 DAY)
316		~, __FILE__, __LINE__);
317
318		my @drift_rows = $db->db_readwrite_multiple($dbh, q~
319		SELECT d.file_name, d.pinned_sha, d.current_sha,
320		r.name AS release_name, r.named_release_id AS rid,
321		UNIX_TIMESTAMP(d.detected_at) AS detected_epoch,
322		DATE_FORMAT(d.detected_at, '%b %d %H:%i') AS detected_h
323		FROM PIN_DRIFT_LOG d
324		LEFT JOIN NAMED_RELEASES r ON r.named_release_id = d.named_release_id
325		WHERE d.notified = 0
326		ORDER BY d.drift_id DESC
327		LIMIT 5
328		~, __FILE__, __LINE__);
329		foreach my $d (@drift_rows) {
330		$d->{file_short} = length($d->{file_name} // '') > 55
331		? '...' . substr($d->{file_name}, -52) : $d->{file_name};
332		$d->{pinned_short} = substr($d->{pinned_sha} // '', 0, 12);
333		$d->{current_short} = substr($d->{current_sha} // '', 0, 12);
334		$d->{restore_url} = "/restore_release.cgi?release_id=" . ($d->{rid} \|\| 0);
335		$d->{detected_epoch} //= 0;
336	276	}
337	277
338	278	# ----- Recent restores (last 5) --------------------------------------
339	279	my @recent_restores = $db->db_readwrite_multiple($dbh, q~
340	280	SELECT rl.restore_id, rl.target_file, rl.status,
341	281	UNIX_TIMESTAMP(rl.restored_at) AS restored_epoch,
342	282	DATE_FORMAT(rl.restored_at, '%b %d %H:%i') AS restored_h,
343	283	LEFT(rl.error_message, 100) AS err_short,
344	284	s.server_name
345	285	FROM RESTORE_LOG rl
346	286	LEFT JOIN SERVERS s ON s.server_id = rl.server_id
347	287	ORDER BY rl.restore_id DESC
348	288	LIMIT 5
349	289	~, __FILE__, __LINE__);
350	290	foreach my $r (@recent_restores) {
351	291	$r->{status_pill} = $r->{status} eq 'success' ? 'pill-ok' :
352	292	$r->{status} eq 'failed' ? 'pill-bad' : 'pill-mute';
353	293	$r->{restored_epoch} //= 0;
354	294	$r->{file_short} = length($r->{target_file} // '') > 55
355	295	? '...' . substr($r->{target_file}, -52) : $r->{target_file};
356	296	}
357	297
358	298	$db->db_disconnect($dbh);
359
360		sub _trend {
361		my ($cur, $prev) = @_;
362		$cur //= 0; $prev //= 0;
363		if ($prev == 0 && $cur == 0) { return ('flat', '—'); }
364		if ($prev == 0) { return ('up', '↑ new'); }
365		my $delta = ($cur - $prev) / $prev * 100;
366		my $sign = $delta > 5 ? 'up' : $delta < -5 ? 'down' : 'flat';
367		my $arrow = $sign eq 'up' ? '↑' : $sign eq 'down' ? '↓' : '•';
368		return ($sign, sprintf('%s %+.0f%%', $arrow, $delta));
369		}
370		my ($ft_class, $ft_txt) = _trend(($file_today && $file_today->{n}), ($file_prev && $file_prev->{n}));
371		my ($st_class, $st_txt) = _trend(($schema_7d && $schema_7d->{n}), ($schema_prev && $schema_prev->{n}));
372	299
373	300	# ----- Render body ---------------------------------------------------
374	301	my $tvars = {
375	302	kpi_file_today => ($file_today && $file_today->{n}) \|\| 0,
376		kpi_file_prev => ($file_prev && $file_prev->{n}) \|\| 0,
377		kpi_file_class => $ft_class, kpi_file_txt => $ft_txt,
378	303	kpi_schema_7d => ($schema_7d && $schema_7d->{n}) \|\| 0,
379		kpi_schema_prev => ($schema_prev && $schema_prev->{n}) \|\| 0,
380		kpi_schema_class => $st_class, kpi_schema_txt => $st_txt,
381	304	kpi_releases => ($releases_ct && $releases_ct->{n}) \|\| 0,
382	305	kpi_drifted => ($drifted_ct && $drifted_ct->{n}) \|\| 0,
383	306	timeline_svg => $timeline_svg,
384	307	per_site => \@per_site,
385	308	has_per_site => scalar(@per_site) ? 1 : 0,
386	309	top_files => \@top_files,
387	310	has_top_files => scalar(@top_files) ? 1 : 0,
388	311	shared_blobs => \@shared_blobs,
389	312	has_shared_blobs => scalar(@shared_blobs) ? 1 : 0,
390	313	recent_restores => \@recent_restores,
391	314	has_restores => scalar(@recent_restores) ? 1 : 0,
392		drifted_ct => ($drift_kpi && $drift_kpi->{drifted_ct}) \|\| 0,
393		releases_affected=> ($drift_kpi && $drift_kpi->{releases_affected}) \|\| 0,
394		drift_rows => \@drift_rows,
395		has_drifts => scalar(@drift_rows) ? 1 : 0,
396		stable_versions => \@stable_versions,
397		has_stables => scalar(@stable_versions) ? 1 : 0,
398	315	has_recent => scalar(@recent) ? 1 : 0,
399	316	recent => \@recent,
400	317	has_releases => scalar(@releases) ? 1 : 0,
401	318	releases => \@releases,
402	319	servers => \@servers,
403	320	};
404	321	my @body = $tpl->template('dashboard.html', $tvars);
405	322
406	323	$wrap->wrapper(
407	324	page_title => 'Dashboard',
408	325	page_key => 'dashboard',
409	326	body_html => join('', @body),
410	327	userinfo => { display_name => 'Operator' }, # single-user install; auth added later
411	328	);

Confirm restore

Backs current content to <target>.drift_restore_backup_<epoch>, writes the captured content, verifies SHA post-write.