fix: add ingest validation and missing stats query indexes

- ingest: reject payloads with neither exception nor message (400)
- migration: add (status, last_seen), (status, first_seen, last_seen)
  indexes for stats filtered counts, and bare created_at index on
  events for the global 24h count

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

Author: 2 people

migrations/20260321000000_stats_indexes.sql

@@ -0,0 +1,10 @@
+-- ── Stats query indexes ───────────────────────────────────────────────────────
+-- Supports COUNT(*) FILTER (WHERE status = '...' AND last_seen > NOW() - INTERVAL '24 hours')
+CREATE INDEX IF NOT EXISTS idx_issues_status_last_seen ON issues(status, last_seen DESC);
+
+-- Supports the regressions_24h filter: first_seen + last_seen + status
+CREATE INDEX IF NOT EXISTS idx_issues_status_first_last ON issues(status, first_seen, last_seen DESC);
+
+-- Supports global events count: COUNT(*) WHERE created_at > NOW() - INTERVAL '24 hours'
+-- (the existing idx_events_project_created requires a project_id match)
+CREATE INDEX IF NOT EXISTS idx_events_created ON events(created_at DESC);

src/routes/ingest.rs

@@ -30,7 +30,14 @@ pub async fn handle_ingest(
     .await?
     .ok_or_else(|| AppError::NotFound("Invalid API key".to_string()))?;
 
-    // 3. Push to Redis queue — return immediately (fire-and-forget)
+    // 3. Basic payload validation — require at least one of exception or message
+    if payload.exception.is_none() && payload.message.is_none() {
+        return Err(AppError::BadRequest(
+            "payload must include either 'exception' or 'message'".into(),
+        ));
+    }
+
+    // 4. Push to Redis queue — return immediately (fire-and-forget)
     push_job(&state.redis_pool, EventJob {
         project_id: project.id,
         payload,