@adobe/spacecat-shared-data-access 4.15.2 → 4.16.0

package/CHANGELOG.md

@@ -1,3 +1,15 @@
+## [@adobe/spacecat-shared-data-access-v4.16.0](https://github.com/adobe/spacecat-shared/compare/@adobe/spacecat-shared-data-access-v4.15.3...@adobe/spacecat-shared-data-access-v4.16.0) (2026-07-31)
+
+### Features
+
+* **data-access:** expose deployedAt on FixEntity (SITES-47997/48823) ([#1857](https://github.com/adobe/spacecat-shared/issues/1857)) ([512d991](https://github.com/adobe/spacecat-shared/commit/512d991aaee98cad2387807193852937cede6ddd))
+
+## [@adobe/spacecat-shared-data-access-v4.15.3](https://github.com/adobe/spacecat-shared/compare/@adobe/spacecat-shared-data-access-v4.15.2...@adobe/spacecat-shared-data-access-v4.15.3) (2026-07-29)
+
+### Bug Fixes
+
+* bound cdnlogsFilter value length and entry counts ([#1855](https://github.com/adobe/spacecat-shared/issues/1855)) ([ec88c22](https://github.com/adobe/spacecat-shared/commit/ec88c2202f8c3fabd75c3a35be21589a8f7bf29d))
+
 ## [@adobe/spacecat-shared-data-access-v4.15.2](https://github.com/adobe/spacecat-shared/compare/@adobe/spacecat-shared-data-access-v4.15.1...@adobe/spacecat-shared-data-access-v4.15.2) (2026-07-29)
 
 ### Bug Fixes

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@adobe/spacecat-shared-data-access",
-  "version": "4.15.2",
+  "version": "4.16.0",
   "description": "Shared modules of the Spacecat Services - Data Access",
   "type": "module",
   "engines": {

package/src/models/fix-entity/fix-entity.schema.js

@@ -33,6 +33,14 @@ const schema = new SchemaBuilder(FixEntity, FixEntityCollection)
     type: 'string',
     validate: (value) => !value || isIsoDate(value),
   })
+  // SITES-47997/48823 — the DEPLOYED moment (written/confirmed to author),
+  // distinct from executedAt (apply executed) and publishedAt (live). Maps to
+  // the fix_entities.deployed_at column; stamped by mystique on the -> DEPLOYED
+  // transition. Optional (null for rows created before the column).
+  .addAttribute('deployedAt', {
+    type: 'string',
+    validate: (value) => !value || isIsoDate(value),
+  })
   .addAttribute('publishedAt', {
     type: 'string',
     validate: (value) => !value || isIsoDate(value),

package/src/models/fix-entity/index.d.ts

@@ -20,6 +20,8 @@ export interface FixEntity extends BaseModel {
   setChangeDetails(value: object): this;
   getExecutedAt(): string;
   setExecutedAt(value: string): this;
+  getDeployedAt(): string;
+  setDeployedAt(value: string): this;
   getExecutedBy(): string;
   setExecutedBy(value: string): this;
   getOpportunity(): Promise<Opportunity>;

package/src/models/site/config.js

@@ -85,12 +85,22 @@ export const CDN_LOGS_FILTER_KEYS = [
   'cdn_provider',
 ];
 
-const CDN_LOGS_FILTER_SCHEMA = Joi.array().items(
+// Bounds on the filter values. `value` entries become Athena regex patterns
+// downstream; SQL injection is already prevented by escaping in the audit worker,
+// but capping length/count limits regex abuse (ReDoS) and stored size.
+const CDN_LOGS_FILTER_MAX_ENTRIES = 50;
+const CDN_LOGS_FILTER_MAX_VALUES = 100;
+const CDN_LOGS_FILTER_MAX_VALUE_LENGTH = 500;
+
+const CDN_LOGS_FILTER_SCHEMA = Joi.array().max(CDN_LOGS_FILTER_MAX_ENTRIES).items(
   Joi.object({
     // Athena folds column identifiers to lowercase; normalize before matching
     // the allowlist so a stored 'X_forwarded_host' is accepted as the same column.
     key: Joi.string().lowercase().valid(...CDN_LOGS_FILTER_KEYS).required(),
-    value: Joi.array().items(Joi.string()).required(),
+    value: Joi.array()
+      .max(CDN_LOGS_FILTER_MAX_VALUES)
+      .items(Joi.string().max(CDN_LOGS_FILTER_MAX_VALUE_LENGTH))
+      .required(),
     type: Joi.string().valid('include', 'exclude').optional(),
   }),
 );