@absolutejs/vulnerabilities-postgres 0.6.0 → 0.6.2

package/dist/alerts.d.ts

@@ -16,7 +16,7 @@ export type VulnerabilityAlertPolicyVersion = {
 export type ActiveVulnerabilityAlertPolicy = {
     configuration: VulnerabilityAlertConfiguration;
     tenantId: string;
-    version: number;
+    version: number | null;
 };
 export type VulnerabilityAlertIncidentRow = {
     acknowledged_at: Date | null;
@@ -77,6 +77,8 @@ export declare class VulnerabilityAlertConflictError extends Error {
 }
 export declare class VulnerabilityAlertNotFoundError extends Error {
 }
+export declare class VulnerabilityAlertValidationError extends Error {
+}
 export type VulnerabilityAlertPolicyStore = {
     activate: (input: {
         activatedAt: string;
@@ -124,11 +126,13 @@ export type VulnerabilityAlertIncidentStore = {
         observedAt?: string;
     }) => Promise<"observed" | "opened" | "reopened">;
     processEscalations: (input: {
+        fallbackPolicy?: ActiveVulnerabilityAlertPolicy;
         policies: ReadonlyMap<string, ActiveVulnerabilityAlertPolicy>;
         tenantIds?: readonly string[];
     }) => Promise<number>;
     resolveInactive: (input: {
         activeAlertIds: ReadonlySet<string>;
+        fallbackPolicy?: ActiveVulnerabilityAlertPolicy;
         policies: ReadonlyMap<string, ActiveVulnerabilityAlertPolicy>;
         resolvedAt?: string;
         tenantIds?: readonly string[];

package/dist/index.js

@@ -23,6 +23,9 @@ class VulnerabilityAlertConflictError extends Error {
 
 class VulnerabilityAlertNotFoundError extends Error {
 }
+
+class VulnerabilityAlertValidationError extends Error {
+}
 var IDENTIFIER = /^[a-zA-Z_][a-zA-Z0-9_]*$/;
 var tables = (prefix) => ({
   deliveries: `${prefix}_alert_deliveries`,
@@ -150,10 +153,15 @@ var createPostgresVulnerabilityAlertStores = (options) => {
   const alertPolicies = {
     activate: async (input) => {
       await ready();
-      const configuration = validateVulnerabilityAlertConfiguration(input.configuration);
+      let configuration;
+      try {
+        configuration = validateVulnerabilityAlertConfiguration(input.configuration);
+      } catch (error) {
+        throw new VulnerabilityAlertValidationError(error instanceof Error ? error.message : "Policy is invalid");
+      }
       const reason = input.reason.trim();
       if (!reason)
-        throw new Error("Policy activation reason is required");
+        throw new VulnerabilityAlertValidationError("Policy activation reason is required");
       return transaction(sql, async (tx) => {
         await tx`SELECT pg_advisory_xact_lock(hashtext(${`vulnerability-alert-policy:${input.tenantId}`}))`;
         const [latest] = await tx`SELECT COALESCE(MAX(version), 0)::integer AS version FROM ${tx.unsafe(table.policies)} WHERE tenant_id = ${input.tenantId}`;
@@ -266,13 +274,13 @@ var createPostgresVulnerabilityAlertStores = (options) => {
       return sql`SELECT * FROM ${sql.unsafe(table.incidents)} ORDER BY last_observed_at DESC LIMIT ${boundedLimit(requestedLimit)}`;
     },
     observe,
-    processEscalations: async ({ policies, tenantIds }) => {
+    processEscalations: async ({ fallbackPolicy, policies, tenantIds }) => {
       await ready();
       const tenants = tenantPredicate(tenantIds);
       const due = await sql`SELECT alert_id, asset_id, occurrence_count, severity, tenant_id FROM ${sql.unsafe(table.incidents)} WHERE status = 'open' AND next_escalation_at <= now() AND (${tenants}::jsonb IS NULL OR tenant_id IN (SELECT jsonb_array_elements_text(${tenants}::jsonb)))`;
       let processed = 0;
       for (const incident of due) {
-        const policy = policies.get(incident.tenant_id);
+        const policy = policies.get(incident.tenant_id) ?? fallbackPolicy;
         if (!policy)
           continue;
         const changed = await transaction(sql, async (tx) => {
@@ -294,6 +302,7 @@ var createPostgresVulnerabilityAlertStores = (options) => {
     },
     resolveInactive: async ({
       activeAlertIds,
+      fallbackPolicy,
       policies,
       resolvedAt,
       tenantIds
@@ -306,7 +315,7 @@ var createPostgresVulnerabilityAlertStores = (options) => {
       for (const incident of open) {
         if (activeAlertIds.has(incident.alert_id))
           continue;
-        const policy = policies.get(incident.tenant_id);
+        const policy = policies.get(incident.tenant_id) ?? fallbackPolicy;
         if (!policy)
           continue;
         const changed = await transaction(sql, async (tx) => {
@@ -1298,6 +1307,7 @@ export {
   vulnerabilityAlertPostgresSchemaSql,
   createPostgresVulnerabilityStore,
   createPostgresVulnerabilityAlertStores,
+  VulnerabilityAlertValidationError,
   VulnerabilityAlertNotFoundError,
   VulnerabilityAlertConflictError
 };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@absolutejs/vulnerabilities-postgres",
-  "version": "0.6.0",
+  "version": "0.6.2",
   "description": "Durable Postgres feeds, findings, alert incidents, policy history, delivery queues, remediation evidence, and risk assessments for AbsoluteJS vulnerability management.",
   "type": "module",
   "license": "BSL-1.1",