fix(web): restore Snowflake usage analytics

[pandemicsyn]

Summary

• Reverse Revert "Revert "feat(web): serve /usage analytics from Postgres replica"" #5229 (d83bf8e687d161e8bb0955b110ed986e049ca64b) to restore Snowflake-backed personal and organization Usage summaries, timeseries, breakdowns, and tables.
• Remove the dedicated PostgreSQL Usage pool and restore ordinary read distribution across both configured EU replicas. Preserve the independent replica-error handling fix and existing scope authorization/user lookups.
• Resolve the later feat(ai-gateway): add managed OpenAI BYOK on Vercel #5333 BYOK conflict using SUM(user_byok_request_count), preserving the current user-provided-key definition rather than reverting to upstream/managed-provider BYOK counts.
• Treat missing Snowflake configuration as unavailable instead of returning misleading zero/empty usage. Keep the improved error/retry UI and log only fixed failure categories, not raw upstream error bodies.

Warehouse contract checked

Current dbt source has separate byok_request_count and user_byok_request_count aggregates in both models:

• Hourly model
• Daily model

This confirms the source contract, not the deployed warehouse state or credentials.

Validation

• pnpm --filter web test --runInBand --runTestsByPath src/routers/usage-analytics-router.test.ts src/lib/drizzle.test.ts src/lib/ai-gateway/providers/vercel/index.test.ts — 3 suites, 87 tests passed against local test PostgreSQL; Snowflake calls mocked.
• pnpm --filter web lint
• pnpm --filter web typecheck
• pnpm format on the four changed files and git diff --check
• Independent code review; raw error-body logging concern resolved.
• Before merge, verify the existing web-app Snowflake credentials can query both deployed rollups, including user_byok_request_count, and that required data is current.
• Verify representative personal/organization Usage in the preview or staging environment.

Scope

Only #5229 is reversed. This does not restore leaderboard endpoints deleted by #5233, remove the availability banner, re-enable Snowflake replication alerts, rotate credentials, or change the external replication connector. No production credentials or live Snowflake data were accessed.

[kilo-code-bot]

Code Review Summary

Status: No Issues Found | Recommendation: Merge

Files Reviewed (4 files)

• apps/web/src/lib/drizzle.ts
• apps/web/src/lib/drizzle.test.ts
• apps/web/src/routers/usage-analytics-router.ts
• apps/web/src/routers/usage-analytics-router.test.ts

---

_{Reviewed by grok-4.6 · Input: 222.3K · Output: 24.6K · Cached: 1M}

_{Review guidance: REVIEW.md from base branch main}