@absolutejs/vulnerabilities-postgres 0.6.0 → 0.6.1

package/dist/alerts.d.ts

@@ -16,7 +16,7 @@ export type VulnerabilityAlertPolicyVersion = {
 export type ActiveVulnerabilityAlertPolicy = {
     configuration: VulnerabilityAlertConfiguration;
     tenantId: string;
-    version: number;
+    version: number | null;
 };
 export type VulnerabilityAlertIncidentRow = {
     acknowledged_at: Date | null;
@@ -124,11 +124,13 @@ export type VulnerabilityAlertIncidentStore = {
         observedAt?: string;
     }) => Promise<"observed" | "opened" | "reopened">;
     processEscalations: (input: {
+        fallbackPolicy?: ActiveVulnerabilityAlertPolicy;
         policies: ReadonlyMap<string, ActiveVulnerabilityAlertPolicy>;
         tenantIds?: readonly string[];
     }) => Promise<number>;
     resolveInactive: (input: {
         activeAlertIds: ReadonlySet<string>;
+        fallbackPolicy?: ActiveVulnerabilityAlertPolicy;
         policies: ReadonlyMap<string, ActiveVulnerabilityAlertPolicy>;
         resolvedAt?: string;
         tenantIds?: readonly string[];

package/dist/index.js

@@ -266,13 +266,13 @@ var createPostgresVulnerabilityAlertStores = (options) => {
       return sql`SELECT * FROM ${sql.unsafe(table.incidents)} ORDER BY last_observed_at DESC LIMIT ${boundedLimit(requestedLimit)}`;
     },
     observe,
-    processEscalations: async ({ policies, tenantIds }) => {
+    processEscalations: async ({ fallbackPolicy, policies, tenantIds }) => {
       await ready();
       const tenants = tenantPredicate(tenantIds);
       const due = await sql`SELECT alert_id, asset_id, occurrence_count, severity, tenant_id FROM ${sql.unsafe(table.incidents)} WHERE status = 'open' AND next_escalation_at <= now() AND (${tenants}::jsonb IS NULL OR tenant_id IN (SELECT jsonb_array_elements_text(${tenants}::jsonb)))`;
       let processed = 0;
       for (const incident of due) {
-        const policy = policies.get(incident.tenant_id);
+        const policy = policies.get(incident.tenant_id) ?? fallbackPolicy;
         if (!policy)
           continue;
         const changed = await transaction(sql, async (tx) => {
@@ -294,6 +294,7 @@ var createPostgresVulnerabilityAlertStores = (options) => {
     },
     resolveInactive: async ({
       activeAlertIds,
+      fallbackPolicy,
       policies,
       resolvedAt,
       tenantIds
@@ -306,7 +307,7 @@ var createPostgresVulnerabilityAlertStores = (options) => {
       for (const incident of open) {
         if (activeAlertIds.has(incident.alert_id))
           continue;
-        const policy = policies.get(incident.tenant_id);
+        const policy = policies.get(incident.tenant_id) ?? fallbackPolicy;
         if (!policy)
           continue;
         const changed = await transaction(sql, async (tx) => {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@absolutejs/vulnerabilities-postgres",
-  "version": "0.6.0",
+  "version": "0.6.1",
   "description": "Durable Postgres feeds, findings, alert incidents, policy history, delivery queues, remediation evidence, and risk assessments for AbsoluteJS vulnerability management.",
   "type": "module",
   "license": "BSL-1.1",