@marinoscar/platform-api 0.1.0-next.18 → 0.1.0-next.20

package/dist/alerts/alerts.options.js

@@ -0,0 +1,34 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ALERTS_OPTIONS = void 0;
+exports.resolveAlertsModuleOptions = resolveAlertsModuleOptions;
+const alerts_constants_1 = require("./alerts.constants");
+Object.defineProperty(exports, "ALERTS_OPTIONS", { enumerable: true, get: function () { return alerts_constants_1.ALERTS_OPTIONS; } });
+/**
+ * Applies the defaults and validates.
+ *
+ * @param options - the app's options.
+ * @returns the resolved, frozen options.
+ * @throws Error naming the option when one is out of range.
+ *
+ * @stability experimental
+ */
+function resolveAlertsModuleOptions(options = {}) {
+    const retention = options.incidentRetentionDays ?? 90;
+    if (!Number.isInteger(retention) || retention < 1 || retention > 3650) {
+        throw new Error(`AlertsModule.forRoot: incidentRetentionDays must be a whole number from 1 to 3650 (got ${retention})`);
+    }
+    const budget = options.evaluationBudgetMs ?? 20_000;
+    if (!Number.isInteger(budget) || budget < 1_000 || budget > 110_000) {
+        throw new Error(`AlertsModule.forRoot: evaluationBudgetMs must be a whole number from 1000 to 110000 (got ${budget})`);
+    }
+    return Object.freeze({
+        evaluateTask: options.tasks?.evaluate !== false,
+        purgeTask: options.tasks?.purge !== false,
+        incidentRetentionDays: retention,
+        evaluationBudgetMs: budget,
+        seedStarterRules: options.seedStarterRules !== false,
+        imports: Object.freeze([...(options.imports ?? [])]),
+    });
+}
+//# sourceMappingURL=alerts.options.js.map

package/dist/alerts/alerts.options.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"alerts.options.js","sourceRoot":"","sources":["../../src/alerts/alerts.options.ts"],"names":[],"mappings":";;;AAoEA,gEAiBC;AAnFD,yDAAoD;AAE3C,+FAFA,iCAAc,OAEA;AAuDvB;;;;;;;;GAQG;AACH,SAAgB,0BAA0B,CAAC,UAA+B,EAAE;IAC1E,MAAM,SAAS,GAAG,OAAO,CAAC,qBAAqB,IAAI,EAAE,CAAC;IACtD,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC,IAAI,SAAS,GAAG,CAAC,IAAI,SAAS,GAAG,IAAI,EAAE,CAAC;QACtE,MAAM,IAAI,KAAK,CAAC,0FAA0F,SAAS,GAAG,CAAC,CAAC;IAC1H,CAAC;IACD,MAAM,MAAM,GAAG,OAAO,CAAC,kBAAkB,IAAI,MAAM,CAAC;IACpD,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,KAAK,IAAI,MAAM,GAAG,OAAO,EAAE,CAAC;QACpE,MAAM,IAAI,KAAK,CAAC,4FAA4F,MAAM,GAAG,CAAC,CAAC;IACzH,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,YAAY,EAAE,OAAO,CAAC,KAAK,EAAE,QAAQ,KAAK,KAAK;QAC/C,SAAS,EAAE,OAAO,CAAC,KAAK,EAAE,KAAK,KAAK,KAAK;QACzC,qBAAqB,EAAE,SAAS;QAChC,kBAAkB,EAAE,MAAM;QAC1B,gBAAgB,EAAE,OAAO,CAAC,gBAAgB,KAAK,KAAK;QACpD,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,CAAC;KACrD,CAAC,CAAC;AACL,CAAC"}

package/dist/alerts/alerts.permissions.d.ts

@@ -0,0 +1,27 @@
+import type { PermissionDeclaration } from '../core/index';
+/**
+ * One permission this slice declares.
+ *
+ * @typeParam Id - the permission string.
+ *
+ * @stability experimental
+ */
+export type AlertsPermissionDeclaration<Id extends string = string> = PermissionDeclaration<Id>;
+/**
+ * The alerts slice's permissions, keyed by the `PERMISSIONS` constant name the
+ * reference app derives from them. System scope, granted to `admin`.
+ *
+ * @example
+ * ```ts
+ * registerPermissions(ALERTS_PERMISSIONS);
+ * ```
+ *
+ * @stability experimental
+ */
+export declare const ALERTS_PERMISSIONS: {
+    /** `alerts:read`: view alert rules, incidents and the firing summary. */
+    readonly ALERTS_READ: AlertsPermissionDeclaration<'alerts:read'>;
+    /** `alerts:write`: create, edit and delete rules; test them; acknowledge incidents. */
+    readonly ALERTS_WRITE: AlertsPermissionDeclaration<'alerts:write'>;
+};
+//# sourceMappingURL=alerts.permissions.d.ts.map

package/dist/alerts/alerts.permissions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"alerts.permissions.d.ts","sourceRoot":"","sources":["../../src/alerts/alerts.permissions.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAC;AAE3D;;;;;;GAMG;AACH,MAAM,MAAM,2BAA2B,CAAC,EAAE,SAAS,MAAM,GAAG,MAAM,IAAI,qBAAqB,CAAC,EAAE,CAAC,CAAC;AAEhG;;;;;;;;;;GAUG;AACH,eAAO,MAAM,kBAAkB,EAAE;IAC/B,yEAAyE;IACzE,QAAQ,CAAC,WAAW,EAAE,2BAA2B,CAAC,aAAa,CAAC,CAAC;IACjE,uFAAuF;IACvF,QAAQ,CAAC,YAAY,EAAE,2BAA2B,CAAC,cAAc,CAAC,CAAC;CAcpE,CAAC"}

package/dist/alerts/alerts.permissions.js

@@ -0,0 +1,29 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ALERTS_PERMISSIONS = void 0;
+/**
+ * The alerts slice's permissions, keyed by the `PERMISSIONS` constant name the
+ * reference app derives from them. System scope, granted to `admin`.
+ *
+ * @example
+ * ```ts
+ * registerPermissions(ALERTS_PERMISSIONS);
+ * ```
+ *
+ * @stability experimental
+ */
+exports.ALERTS_PERMISSIONS = {
+    ALERTS_READ: {
+        id: 'alerts:read',
+        description: 'View alert rules, incidents and the firing summary',
+        scope: 'system',
+        defaultGrants: ['admin'],
+    },
+    ALERTS_WRITE: {
+        id: 'alerts:write',
+        description: 'Create, edit and delete alert rules; test them; acknowledge incidents',
+        scope: 'system',
+        defaultGrants: ['admin'],
+    },
+};
+//# sourceMappingURL=alerts.permissions.js.map

package/dist/alerts/alerts.permissions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"alerts.permissions.js","sourceRoot":"","sources":["../../src/alerts/alerts.permissions.ts"],"names":[],"mappings":";;;AAWA;;;;;;;;;;GAUG;AACU,QAAA,kBAAkB,GAK3B;IACF,WAAW,EAAE;QACX,EAAE,EAAE,aAAa;QACjB,WAAW,EAAE,oDAAoD;QACjE,KAAK,EAAE,QAAQ;QACf,aAAa,EAAE,CAAC,OAAO,CAAC;KACzB;IACD,YAAY,EAAE;QACZ,EAAE,EAAE,cAAc;QAClB,WAAW,EAAE,uEAAuE;QACpF,KAAK,EAAE,QAAQ;QACf,aAAa,EAAE,CAAC,OAAO,CAAC;KACzB;CACF,CAAC"}

package/dist/alerts/alerts.types.d.ts

@@ -0,0 +1,182 @@
+import type { z } from 'zod';
+import type { AlertObservation, AlertSeverity } from '@marinoscar/platform-contract/alerts';
+import type { TelemetryQueryFacade } from '../telemetry/index';
+import type { AlertsPrisma } from './data/alerts-db';
+export type { AlertObservation } from '@marinoscar/platform-contract/alerts';
+/**
+ * The rule a kind evaluates: the row's identity and the kind's parsed config.
+ *
+ * @typeParam C - the kind's config type.
+ *
+ * @stability experimental
+ */
+export interface AlertRuleView<C = unknown> {
+    /** The rule id. */
+    readonly id: string;
+    /** The stable key of a starter rule, else `null`. */
+    readonly key: string | null;
+    /** Display name, for summaries. */
+    readonly name: string;
+    /** The rule's severity. */
+    readonly severity: AlertSeverity;
+    /** The kind id. */
+    readonly kind: string;
+    /** The config, already parsed by the kind's `configSchema`. */
+    readonly config: C;
+}
+/**
+ * One metric table of the telemetry store, as the `metric_threshold` kind sees it.
+ *
+ * @stability experimental
+ */
+export interface AlertMetricTable {
+    /** The table name. */
+    readonly name: string;
+    /** Every column. */
+    readonly columns: ReadonlySet<string>;
+    /** The series-identifying columns (tags), sorted. */
+    readonly tags: readonly string[];
+}
+/**
+ * What a kind may read from the telemetry store.
+ *
+ * @stability experimental
+ */
+export interface AlertTelemetryAccess {
+    /** The guarded query facade (SQL guard, row cap, timeout). */
+    readonly query: TelemetryQueryFacade;
+    /** The metric tables the store has, by table name. */
+    readonly tables: ReadonlyMap<string, AlertMetricTable>;
+}
+/**
+ * The dashboard verdict, as the `verdict` kind reads it.
+ *
+ * @stability experimental
+ */
+export interface AlertVerdict {
+    /** `healthy`, `degraded`, `critical` or `no_data`. */
+    readonly level: string;
+    /** One line per rule that fired. */
+    readonly reasons: readonly string[];
+}
+/**
+ * Everything a kind may touch while evaluating. Kinds are functions of this
+ * context, so they run against fakes in a test.
+ *
+ * @stability experimental
+ */
+export interface AlertEvaluationContext {
+    /** The instant the evaluation is for. */
+    readonly now: Date;
+    /** Aborted when the rule's time budget is spent. */
+    readonly signal: AbortSignal;
+    /** The database (the nodes tables included), read-only for a kind. */
+    readonly db: AlertsPrisma;
+    /**
+     * The telemetry store.
+     *
+     * @throws AlertStoreUnavailableError when it is not configured, disabled or unreachable.
+     */
+    telemetry(): Promise<AlertTelemetryAccess>;
+    /**
+     * The dashboard verdict, computed in-process.
+     *
+     * @throws AlertStoreUnavailableError when it cannot be computed.
+     */
+    verdict(): Promise<AlertVerdict>;
+    /** The fleet's stale-heartbeat window in seconds (the `nodes` policy). */
+    staleHeartbeatSeconds(): Promise<number>;
+}
+/**
+ * A node event, as the event path hands it to a kind.
+ *
+ * @stability experimental
+ */
+export interface AlertNodeEventPayload {
+    /** The node. */
+    readonly nodeId: string;
+    /** Its name. */
+    readonly nodeName: string;
+    /** The dotted event type. */
+    readonly type: string;
+    /** `info`, `warning` or `critical`. */
+    readonly severity: string;
+    /** The node's scalar attributes. */
+    readonly attrs: Readonly<Record<string, string | number | boolean>>;
+    /** When it happened (ISO 8601). */
+    readonly occurredAt: string;
+}
+/**
+ * One rule kind: how a rule of this kind is validated, evaluated and described.
+ *
+ * @typeParam C - the parsed config type.
+ *
+ * @example
+ * ```ts
+ * registerAlertRuleKind({
+ *   id: 'queue_stuck',
+ *   label: 'Queue stuck',
+ *   description: 'The queue has pending jobs and nothing is running.',
+ *   configSchema: z.object({}).strict(),
+ *   evaluate: async (ctx) => [{ labels: {}, value: null, breached: false, summary: 'ok' }],
+ *   describe: () => 'The queue has pending jobs and nothing is running.',
+ * });
+ * ```
+ *
+ * @extensionPoint registry
+ * @stability experimental
+ */
+export interface AlertRuleKind<C = any> {
+    /** Lower snake case id; PERMANENT once rules of this kind exist. */
+    readonly id: string;
+    /** Short label for the rule editor. */
+    readonly label: string;
+    /** One sentence on what the kind watches. */
+    readonly description: string;
+    /** Validates (and defaults) a rule's `config`. */
+    readonly configSchema: z.ZodType<C>;
+    /** The kind reacts to node events as well as to the periodic evaluation. */
+    readonly eventDriven?: boolean;
+    /**
+     * Evaluates one rule now. Returns one observation per label set it can
+     * tell about, breached or not; a label set that was breached and is not
+     * returned any more counts as clear. Throws `AlertStoreUnavailableError`
+     * when its data source is down.
+     */
+    evaluate(ctx: AlertEvaluationContext, rule: AlertRuleView<C>): Promise<AlertObservation[]>;
+    /**
+     * For an `eventDriven` kind: whether `event` can change this rule's
+     * observations (the event path skips the rule when it cannot). Pure.
+     */
+    matchesEvent?(config: C, event: AlertNodeEventPayload): boolean;
+    /** A one-line description of what a rule of this kind with this config watches. */
+    describe(rule: AlertRuleView<C>): string;
+}
+/**
+ * The OPTIONAL webhook port: a way to emit an event to webhook subscribers.
+ * Bind it to the webhooks slice's emitter (or any function) with
+ * {@link ALERTS_WEBHOOK_EMITTER}; without a binding the alerts slice emits
+ * nothing and compiles without the webhooks slice.
+ *
+ * @extensionPoint token
+ * @stability experimental
+ */
+export interface AlertsWebhookEmitter {
+    /**
+     * Emits one event.
+     *
+     * @param eventKey - `alerts.alert.fired` or `alerts.alert.resolved`.
+     * @param data - the event data (`alertWebhookDataSchema`).
+     * @param ctx - the audience: `orgId: null` is the system audience.
+     */
+    emit(eventKey: string, data: Record<string, unknown>, ctx: {
+        orgId: string | null;
+    }): Promise<void>;
+    /** Optional: called once so the emitter can register the event keys it will be asked to emit. */
+    registerEvents?(events: ReadonlyArray<{
+        key: string;
+        label: string;
+        description: string;
+    }>): void;
+}
+//# sourceMappingURL=alerts.types.d.ts.map

package/dist/alerts/alerts.types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"alerts.types.d.ts","sourceRoot":"","sources":["../../src/alerts/alerts.types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAC7B,OAAO,KAAK,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,sCAAsC,CAAC;AAE5F,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAC/D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAErD,YAAY,EAAE,gBAAgB,EAAE,MAAM,sCAAsC,CAAC;AAE7E;;;;;;GAMG;AACH,MAAM,WAAW,aAAa,CAAC,CAAC,GAAG,OAAO;IACxC,mBAAmB;IACnB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,qDAAqD;IACrD,QAAQ,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,mCAAmC;IACnC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,2BAA2B;IAC3B,QAAQ,CAAC,QAAQ,EAAE,aAAa,CAAC;IACjC,mBAAmB;IACnB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,+DAA+D;IAC/D,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;CACpB;AAED;;;;GAIG;AACH,MAAM,WAAW,gBAAgB;IAC/B,sBAAsB;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,oBAAoB;IACpB,QAAQ,CAAC,OAAO,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IACtC,qDAAqD;IACrD,QAAQ,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,CAAC;CAClC;AAED;;;;GAIG;AACH,MAAM,WAAW,oBAAoB;IACnC,8DAA8D;IAC9D,QAAQ,CAAC,KAAK,EAAE,oBAAoB,CAAC;IACrC,sDAAsD;IACtD,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;CACxD;AAED;;;;GAIG;AACH,MAAM,WAAW,YAAY;IAC3B,sDAAsD;IACtD,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,oCAAoC;IACpC,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;CACrC;AAED;;;;;GAKG;AACH,MAAM,WAAW,sBAAsB;IACrC,yCAAyC;IACzC,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC;IACnB,oDAAoD;IACpD,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC;IAC7B,sEAAsE;IACtE,QAAQ,CAAC,EAAE,EAAE,YAAY,CAAC;IAC1B;;;;OAIG;IACH,SAAS,IAAI,OAAO,CAAC,oBAAoB,CAAC,CAAC;IAC3C;;;;OAIG;IACH,OAAO,IAAI,OAAO,CAAC,YAAY,CAAC,CAAC;IACjC,0EAA0E;IAC1E,qBAAqB,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC;CAC1C;AAED;;;;GAIG;AACH,MAAM,WAAW,qBAAqB;IACpC,gBAAgB;IAChB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,gBAAgB;IAChB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,6BAA6B;IAC7B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,uCAAuC;IACvC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,oCAAoC;IACpC,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC;IACpE,mCAAmC;IACnC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC7B;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,WAAW,aAAa,CAAC,CAAC,GAAG,GAAG;IACpC,oEAAoE;IACpE,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,uCAAuC;IACvC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,6CAA6C;IAC7C,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,kDAAkD;IAClD,QAAQ,CAAC,YAAY,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IACpC,4EAA4E;IAC5E,QAAQ,CAAC,WAAW,CAAC,EAAE,OAAO,CAAC;IAC/B;;;;;OAKG;IACH,QAAQ,CAAC,GAAG,EAAE,sBAAsB,EAAE,IAAI,EAAE,aAAa,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAAC;IAC3F;;;OAGG;IACH,YAAY,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,qBAAqB,GAAG,OAAO,CAAC;IAChE,mFAAmF;IACnF,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC;CAC1C;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,oBAAoB;IACnC;;;;;;OAMG;IACH,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,GAAG,EAAE;QAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACpG,iGAAiG;IACjG,cAAc,CAAC,CAAC,MAAM,EAAE,aAAa,CAAC;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE,CAAC,GAAG,IAAI,CAAC;CACnG"}

package/dist/alerts/alerts.types.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=alerts.types.js.map

package/dist/alerts/alerts.types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"alerts.types.js","sourceRoot":"","sources":["../../src/alerts/alerts.types.ts"],"names":[],"mappings":""}

package/dist/alerts/data/alerts-db.d.ts

@@ -0,0 +1,169 @@
+/**
+ * Prisma's arguments for one delegate call, untyped on purpose: the app's
+ * client checks them at run time.
+ *
+ * @stability experimental
+ */
+export type AlertsQueryArgs = any;
+/**
+ * One `alert_rules` row.
+ *
+ * @stability experimental
+ */
+export interface AlertRuleRow {
+    /** Primary key. */
+    id: string;
+    /** Reserved for organization-scoped rules; `null` for a deployment rule. */
+    orgId: string | null;
+    /** Stable key of a seeded starter rule, else `null`. */
+    key: string | null;
+    /** Display name. */
+    name: string;
+    /** Free text, or `null`. */
+    description: string | null;
+    /** Whether the evaluator runs it. */
+    enabled: boolean;
+    /** The kind id (`registerAlertRuleKind`). */
+    kind: string;
+    /** `info`, `warning` or `critical`. */
+    severity: string;
+    /** The kind's config (validated by the kind's schema). */
+    config: unknown;
+    /** The condition must hold this long before firing. */
+    forSeconds: number;
+    /** Minimum gap between notifications for the same label set. */
+    cooldownSeconds: number;
+    /** Notification channel ids; empty means no restriction. */
+    notifyChannels: string[];
+    /** Also emit the webhook events. */
+    webhook: boolean;
+    /** The creating administrator, or `null`. */
+    createdById: string | null;
+    /** Creation time. */
+    createdAt: Date;
+    /** Last update. */
+    updatedAt: Date;
+    /** The last evaluation. */
+    lastEvaluatedAt: Date | null;
+    /** The last evaluation error. */
+    lastError: string | null;
+}
+/**
+ * One `alert_incidents` row.
+ *
+ * @stability experimental
+ */
+export interface AlertIncidentRow {
+    /** Primary key. */
+    id: string;
+    /** The rule. */
+    ruleId: string;
+    /** Canonical sorted `k=v,k=v`; `''` when unlabelled. */
+    labelsKey: string;
+    /** The label set. */
+    labels: unknown;
+    /** `pending`, `firing` or `resolved`. */
+    state: string;
+    /** The rule's severity when the incident was last touched. */
+    severity: string;
+    /** When the condition first held (pending). */
+    pendingSince: Date | null;
+    /** When it fired. */
+    firedAt: Date | null;
+    /** When it resolved. */
+    resolvedAt: Date | null;
+    /** The last observed value. */
+    lastValue: number | null;
+    /** The last evaluation that saw it breached. */
+    lastSeenAt: Date;
+    /** One human sentence. */
+    summary: string;
+    /** When an administrator acknowledged it. */
+    acknowledgedAt: Date | null;
+    /** Who. */
+    acknowledgedById: string | null;
+    /** Creation time. */
+    createdAt: Date;
+}
+/**
+ * The columns of `worker_node_events` the `node_event` kind reads.
+ *
+ * @stability experimental
+ */
+export interface AlertNodeEventRow {
+    /** Primary key. */
+    id: string;
+    /** The node. */
+    nodeId: string;
+    /** Dotted event type. */
+    type: string;
+    /** `info`, `warning` or `critical`. */
+    severity: string;
+    /** The node's scalar attributes. */
+    attrs: unknown;
+    /** The node's clock. */
+    occurredAt: Date;
+    /** The server's clock. */
+    receivedAt: Date;
+}
+/**
+ * The columns of `worker_nodes` the `node_offline` kind reads.
+ *
+ * @stability experimental
+ */
+export interface AlertNodeRow {
+    /** Primary key. */
+    id: string;
+    /** Operator-facing name. */
+    name: string;
+    /** `online`, `draining`, `offline` or `disabled`. */
+    status: string;
+    /** The last heartbeat, or `null`. */
+    lastHeartbeatAt: Date | null;
+}
+/**
+ * The result of a bulk write.
+ *
+ * @stability experimental
+ */
+export interface AlertsBatchResult {
+    /** Rows affected. */
+    count: number;
+}
+/** The delegate methods the slice calls on one model. @stability experimental */
+export interface AlertsDelegate<Row> {
+    /** Reads rows. */
+    findMany(args?: AlertsQueryArgs): Promise<Row[]>;
+    /** Reads one row. */
+    findUnique(args: AlertsQueryArgs): Promise<Row | null>;
+    /** Reads the first matching row. */
+    findFirst(args?: AlertsQueryArgs): Promise<Row | null>;
+    /** Creates a row. */
+    create(args: AlertsQueryArgs): Promise<Row>;
+    /** Updates one row. */
+    update(args: AlertsQueryArgs): Promise<Row>;
+    /** Updates many rows. */
+    updateMany(args: AlertsQueryArgs): Promise<AlertsBatchResult>;
+    /** Deletes one row. */
+    delete(args: AlertsQueryArgs): Promise<Row>;
+    /** Deletes many rows. */
+    deleteMany(args?: AlertsQueryArgs): Promise<AlertsBatchResult>;
+    /** Counts rows. */
+    count(args?: AlertsQueryArgs): Promise<number>;
+}
+/**
+ * The models the alerts slice touches, as one client sees them.
+ *
+ * @stability experimental
+ */
+export interface AlertsPrisma {
+    /** `alert_rules`. */
+    alertRule: AlertsDelegate<AlertRuleRow>;
+    /** `alert_incidents`. */
+    alertIncident: AlertsDelegate<AlertIncidentRow>;
+    /** `worker_node_events` (the nodes slice). */
+    workerNodeEvent: Pick<AlertsDelegate<AlertNodeEventRow>, 'findMany'>;
+    /** `worker_nodes` (the nodes slice). */
+    workerNode: Pick<AlertsDelegate<AlertNodeRow>, 'findMany'>;
+}
+//# sourceMappingURL=alerts-db.d.ts.map

package/dist/alerts/data/alerts-db.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"alerts-db.d.ts","sourceRoot":"","sources":["../../../src/alerts/data/alerts-db.ts"],"names":[],"mappings":"AAgBA;;;;;GAKG;AACH,MAAM,MAAM,eAAe,GAAG,GAAG,CAAC;AAElC;;;;GAIG;AACH,MAAM,WAAW,YAAY;IAC3B,mBAAmB;IACnB,EAAE,EAAE,MAAM,CAAC;IACX,4EAA4E;IAC5E,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,wDAAwD;IACxD,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IACnB,oBAAoB;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,4BAA4B;IAC5B,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,qCAAqC;IACrC,OAAO,EAAE,OAAO,CAAC;IACjB,6CAA6C;IAC7C,IAAI,EAAE,MAAM,CAAC;IACb,uCAAuC;IACvC,QAAQ,EAAE,MAAM,CAAC;IACjB,0DAA0D;IAC1D,MAAM,EAAE,OAAO,CAAC;IAChB,uDAAuD;IACvD,UAAU,EAAE,MAAM,CAAC;IACnB,gEAAgE;IAChE,eAAe,EAAE,MAAM,CAAC;IACxB,4DAA4D;IAC5D,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,oCAAoC;IACpC,OAAO,EAAE,OAAO,CAAC;IACjB,6CAA6C;IAC7C,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,qBAAqB;IACrB,SAAS,EAAE,IAAI,CAAC;IAChB,mBAAmB;IACnB,SAAS,EAAE,IAAI,CAAC;IAChB,2BAA2B;IAC3B,eAAe,EAAE,IAAI,GAAG,IAAI,CAAC;IAC7B,iCAAiC;IACjC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B;AAED;;;;GAIG;AACH,MAAM,WAAW,gBAAgB;IAC/B,mBAAmB;IACnB,EAAE,EAAE,MAAM,CAAC;IACX,gBAAgB;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,wDAAwD;IACxD,SAAS,EAAE,MAAM,CAAC;IAClB,qBAAqB;IACrB,MAAM,EAAE,OAAO,CAAC;IAChB,yCAAyC;IACzC,KAAK,EAAE,MAAM,CAAC;IACd,8DAA8D;IAC9D,QAAQ,EAAE,MAAM,CAAC;IACjB,+CAA+C;IAC/C,YAAY,EAAE,IAAI,GAAG,IAAI,CAAC;IAC1B,qBAAqB;IACrB,OAAO,EAAE,IAAI,GAAG,IAAI,CAAC;IACrB,wBAAwB;IACxB,UAAU,EAAE,IAAI,GAAG,IAAI,CAAC;IACxB,+BAA+B;IAC/B,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,gDAAgD;IAChD,UAAU,EAAE,IAAI,CAAC;IACjB,0BAA0B;IAC1B,OAAO,EAAE,MAAM,CAAC;IAChB,6CAA6C;IAC7C,cAAc,EAAE,IAAI,GAAG,IAAI,CAAC;IAC5B,WAAW;IACX,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,qBAAqB;IACrB,SAAS,EAAE,IAAI,CAAC;CACjB;AAED;;;;GAIG;AACH,MAAM,WAAW,iBAAiB;IAChC,mBAAmB;IACnB,EAAE,EAAE,MAAM,CAAC;IACX,gBAAgB;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,yBAAyB;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,uCAAuC;IACvC,QAAQ,EAAE,MAAM,CAAC;IACjB,oCAAoC;IACpC,KAAK,EAAE,OAAO,CAAC;IACf,wBAAwB;IACxB,UAAU,EAAE,IAAI,CAAC;IACjB,0BAA0B;IAC1B,UAAU,EAAE,IAAI,CAAC;CAClB;AAED;;;;GAIG;AACH,MAAM,WAAW,YAAY;IAC3B,mBAAmB;IACnB,EAAE,EAAE,MAAM,CAAC;IACX,4BAA4B;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,qDAAqD;IACrD,MAAM,EAAE,MAAM,CAAC;IACf,qCAAqC;IACrC,eAAe,EAAE,IAAI,GAAG,IAAI,CAAC;CAC9B;AAED;;;;GAIG;AACH,MAAM,WAAW,iBAAiB;IAChC,qBAAqB;IACrB,KAAK,EAAE,MAAM,CAAC;CACf;AAED,iFAAiF;AACjF,MAAM,WAAW,cAAc,CAAC,GAAG;IACjC,kBAAkB;IAClB,QAAQ,CAAC,IAAI,CAAC,EAAE,eAAe,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IACjD,qBAAqB;IACrB,UAAU,CAAC,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,GAAG,GAAG,IAAI,CAAC,CAAC;IACvD,oCAAoC;IACpC,SAAS,CAAC,IAAI,CAAC,EAAE,eAAe,GAAG,OAAO,CAAC,GAAG,GAAG,IAAI,CAAC,CAAC;IACvD,qBAAqB;IACrB,MAAM,CAAC,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;IAC5C,uBAAuB;IACvB,MAAM,CAAC,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;IAC5C,yBAAyB;IACzB,UAAU,CAAC,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC;IAC9D,uBAAuB;IACvB,MAAM,CAAC,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;IAC5C,yBAAyB;IACzB,UAAU,CAAC,IAAI,CAAC,EAAE,eAAe,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC;IAC/D,mBAAmB;IACnB,KAAK,CAAC,IAAI,CAAC,EAAE,eAAe,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;CAChD;AAED;;;;GAIG;AACH,MAAM,WAAW,YAAY;IAC3B,qBAAqB;IACrB,SAAS,EAAE,cAAc,CAAC,YAAY,CAAC,CAAC;IACxC,yBAAyB;IACzB,aAAa,EAAE,cAAc,CAAC,gBAAgB,CAAC,CAAC;IAChD,8CAA8C;IAC9C,eAAe,EAAE,IAAI,CAAC,cAAc,CAAC,iBAAiB,CAAC,EAAE,UAAU,CAAC,CAAC;IACrE,wCAAwC;IACxC,UAAU,EAAE,IAAI,CAAC,cAAc,CAAC,YAAY,CAAC,EAAE,UAAU,CAAC,CAAC;CAC5D"}

package/dist/alerts/data/alerts-db.js

@@ -0,0 +1,18 @@
+"use strict";
+// =============================================================================
+// The data the alerts slice reads and writes, structurally (issue #1047)
+// =============================================================================
+//
+// Like every other slice, alerts never imports a generated Prisma client: the
+// package is built and tested before any app's `prisma generate`. The client
+// arrives through the core port `PLATFORM_PRISMA` and is seen as
+// {@link AlertsPrisma}. Every delegate method takes Prisma's arguments untyped
+// and returns the model's row; the rows mirror the `alerts` fragment of
+// `@marinoscar/platform-db` column for column (a column added there is added
+// here in the same change).
+//
+// `worker_nodes` and `worker_node_events` are the nodes slice's tables; only
+// the columns the `node_event` and `node_offline` kinds read are named.
+// =============================================================================
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=alerts-db.js.map

package/dist/alerts/data/alerts-db.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"alerts-db.js","sourceRoot":"","sources":["../../../src/alerts/data/alerts-db.ts"],"names":[],"mappings":";AAAA,gFAAgF;AAChF,yEAAyE;AACzE,gFAAgF;AAChF,EAAE;AACF,8EAA8E;AAC9E,6EAA6E;AAC7E,iEAAiE;AACjE,+EAA+E;AAC/E,wEAAwE;AACxE,6EAA6E;AAC7E,4BAA4B;AAC5B,EAAE;AACF,6EAA6E;AAC7E,wEAAwE;AACxE,gFAAgF"}

package/dist/alerts/dto/alerts.dto.d.ts

@@ -0,0 +1,132 @@
+declare const CreateAlertRuleDto_base: import("nestjs-zod").ZodDto<import("zod").ZodObject<{
+    name: import("zod").ZodString;
+    description: import("zod").ZodOptional<import("zod").ZodNullable<import("zod").ZodString>>;
+    enabled: import("zod").ZodDefault<import("zod").ZodBoolean>;
+    kind: import("zod").ZodString;
+    severity: import("zod").ZodEnum<import("@marinoscar/platform-contract/alerts").AlertEnumEntries<"info" | "warning" | "critical">>;
+    config: import("zod").ZodDefault<import("zod").ZodRecord<import("zod").ZodString, import("zod").ZodUnknown>>;
+    forSeconds: import("zod").ZodDefault<import("zod").ZodNumber>;
+    cooldownSeconds: import("zod").ZodDefault<import("zod").ZodNumber>;
+    notifyChannels: import("zod").ZodDefault<import("zod").ZodArray<import("zod").ZodString>>;
+    webhook: import("zod").ZodDefault<import("zod").ZodBoolean>;
+}, import("zod/v4/core").$strip>, false>;
+/** `POST /api/admin/alerts/rules` body. @stability experimental */
+export declare class CreateAlertRuleDto extends CreateAlertRuleDto_base {
+}
+declare const UpdateAlertRuleDto_base: import("nestjs-zod").ZodDto<import("zod").ZodObject<{
+    name: import("zod").ZodOptional<import("zod").ZodString>;
+    description: import("zod").ZodOptional<import("zod").ZodNullable<import("zod").ZodString>>;
+    enabled: import("zod").ZodOptional<import("zod").ZodBoolean>;
+    severity: import("zod").ZodOptional<import("zod").ZodEnum<import("@marinoscar/platform-contract/alerts").AlertEnumEntries<"info" | "warning" | "critical">>>;
+    config: import("zod").ZodOptional<import("zod").ZodRecord<import("zod").ZodString, import("zod").ZodUnknown>>;
+    forSeconds: import("zod").ZodOptional<import("zod").ZodNumber>;
+    cooldownSeconds: import("zod").ZodOptional<import("zod").ZodNumber>;
+    notifyChannels: import("zod").ZodOptional<import("zod").ZodArray<import("zod").ZodString>>;
+    webhook: import("zod").ZodOptional<import("zod").ZodBoolean>;
+}, import("zod/v4/core").$strict>, false>;
+/** `PATCH /api/admin/alerts/rules/:id` body. @stability experimental */
+export declare class UpdateAlertRuleDto extends UpdateAlertRuleDto_base {
+}
+declare const AlertRuleListQueryDto_base: import("nestjs-zod").ZodDto<import("zod").ZodObject<{
+    kind: import("zod").ZodOptional<import("zod").ZodString>;
+    severity: import("zod").ZodOptional<import("zod").ZodEnum<import("@marinoscar/platform-contract/alerts").AlertEnumEntries<"info" | "warning" | "critical">>>;
+    enabled: import("zod").ZodOptional<import("zod").ZodPipe<import("zod").ZodEnum<import("@marinoscar/platform-contract/alerts").AlertEnumEntries<"true" | "false">>, import("zod").ZodTransform<boolean, "true" | "false">>>;
+}, import("zod/v4/core").$strip>, false>;
+/** `GET /api/admin/alerts/rules` query. @stability experimental */
+export declare class AlertRuleListQueryDto extends AlertRuleListQueryDto_base {
+}
+declare const AlertIncidentListQueryDto_base: import("nestjs-zod").ZodDto<import("zod").ZodObject<{
+    state: import("zod").ZodOptional<import("zod").ZodEnum<import("@marinoscar/platform-contract/alerts").AlertEnumEntries<"pending" | "firing" | "resolved">>>;
+    severity: import("zod").ZodOptional<import("zod").ZodEnum<import("@marinoscar/platform-contract/alerts").AlertEnumEntries<"info" | "warning" | "critical">>>;
+    ruleId: import("zod").ZodOptional<import("zod").ZodUUID>;
+    page: import("zod").ZodDefault<import("zod").ZodCoercedNumber<unknown>>;
+    pageSize: import("zod").ZodDefault<import("zod").ZodCoercedNumber<unknown>>;
+}, import("zod/v4/core").$strip>, false>;
+/** `GET /api/admin/alerts/incidents` query. @stability experimental */
+export declare class AlertIncidentListQueryDto extends AlertIncidentListQueryDto_base {
+}
+declare const AlertRuleDto_base: import("nestjs-zod").ZodDto<import("zod").ZodObject<{
+    id: import("zod").ZodString;
+    key: import("zod").ZodNullable<import("zod").ZodString>;
+    starter: import("zod").ZodBoolean;
+    name: import("zod").ZodString;
+    description: import("zod").ZodNullable<import("zod").ZodString>;
+    enabled: import("zod").ZodBoolean;
+    kind: import("zod").ZodString;
+    severity: import("zod").ZodEnum<import("@marinoscar/platform-contract/alerts").AlertEnumEntries<"info" | "warning" | "critical">>;
+    config: import("zod").ZodRecord<import("zod").ZodString, import("zod").ZodUnknown>;
+    forSeconds: import("zod").ZodNumber;
+    cooldownSeconds: import("zod").ZodNumber;
+    notifyChannels: import("zod").ZodArray<import("zod").ZodString>;
+    webhook: import("zod").ZodBoolean;
+    createdById: import("zod").ZodNullable<import("zod").ZodString>;
+    createdAt: import("zod").ZodString;
+    updatedAt: import("zod").ZodString;
+    lastEvaluatedAt: import("zod").ZodNullable<import("zod").ZodString>;
+    lastError: import("zod").ZodNullable<import("zod").ZodString>;
+    openIncidents: import("zod").ZodNumber;
+}, import("zod/v4/core").$strip>, false>;
+/** A rule. @stability experimental */
+export declare class AlertRuleDto extends AlertRuleDto_base {
+}
+declare const AlertRuleTestResponseDto_base: import("nestjs-zod").ZodDto<import("zod").ZodObject<{
+    ruleId: import("zod").ZodString;
+    kind: import("zod").ZodString;
+    evaluatedAt: import("zod").ZodString;
+    durationMs: import("zod").ZodNumber;
+    observations: import("zod").ZodArray<import("zod").ZodObject<{
+        labels: import("zod").ZodRecord<import("zod").ZodString, import("zod").ZodString>;
+        value: import("zod").ZodNullable<import("zod").ZodNumber>;
+        breached: import("zod").ZodBoolean;
+        summary: import("zod").ZodString;
+    }, import("zod/v4/core").$strip>>;
+    error: import("zod").ZodNullable<import("zod").ZodString>;
+}, import("zod/v4/core").$strip>, false>;
+/** The dry-run response. @stability experimental */
+export declare class AlertRuleTestResponseDto extends AlertRuleTestResponseDto_base {
+}
+declare const AlertKindDto_base: import("nestjs-zod").ZodDto<import("zod").ZodObject<{
+    id: import("zod").ZodString;
+    label: import("zod").ZodString;
+    description: import("zod").ZodString;
+    eventDriven: import("zod").ZodBoolean;
+    builtin: import("zod").ZodBoolean;
+    configSchema: import("zod").ZodRecord<import("zod").ZodString, import("zod").ZodUnknown>;
+}, import("zod/v4/core").$strip>, false>;
+/** A registered kind. @stability experimental */
+export declare class AlertKindDto extends AlertKindDto_base {
+}
+declare const AlertIncidentDto_base: import("nestjs-zod").ZodDto<import("zod").ZodObject<{
+    id: import("zod").ZodString;
+    ruleId: import("zod").ZodString;
+    ruleName: import("zod").ZodString;
+    ruleKind: import("zod").ZodString;
+    labels: import("zod").ZodRecord<import("zod").ZodString, import("zod").ZodString>;
+    state: import("zod").ZodEnum<import("@marinoscar/platform-contract/alerts").AlertEnumEntries<"pending" | "firing" | "resolved">>;
+    severity: import("zod").ZodEnum<import("@marinoscar/platform-contract/alerts").AlertEnumEntries<"info" | "warning" | "critical">>;
+    pendingSince: import("zod").ZodNullable<import("zod").ZodString>;
+    firedAt: import("zod").ZodNullable<import("zod").ZodString>;
+    resolvedAt: import("zod").ZodNullable<import("zod").ZodString>;
+    lastValue: import("zod").ZodNullable<import("zod").ZodNumber>;
+    lastSeenAt: import("zod").ZodString;
+    summary: import("zod").ZodString;
+    acknowledgedAt: import("zod").ZodNullable<import("zod").ZodString>;
+    acknowledgedById: import("zod").ZodNullable<import("zod").ZodString>;
+    createdAt: import("zod").ZodString;
+}, import("zod/v4/core").$strip>, false>;
+/** An incident. @stability experimental */
+export declare class AlertIncidentDto extends AlertIncidentDto_base {
+}
+declare const AlertSummaryDto_base: import("nestjs-zod").ZodDto<import("zod").ZodObject<{
+    firing: import("zod").ZodObject<{
+        critical: import("zod").ZodNumber;
+        warning: import("zod").ZodNumber;
+        info: import("zod").ZodNumber;
+    }, import("zod/v4/core").$strip>;
+    lastEvaluatedAt: import("zod").ZodNullable<import("zod").ZodString>;
+}, import("zod/v4/core").$strip>, false>;
+/** The firing summary. @stability experimental */
+export declare class AlertSummaryDto extends AlertSummaryDto_base {
+}
+export {};
+//# sourceMappingURL=alerts.dto.d.ts.map

package/dist/alerts/dto/alerts.dto.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"alerts.dto.d.ts","sourceRoot":"","sources":["../../../src/alerts/dto/alerts.dto.ts"],"names":[],"mappings":";;;;;;;;;;;;AAaA,mEAAmE;AACnE,qBAAa,kBAAmB,SAAQ,uBAAmC;CAAG;;;;;;;;;;;;AAE9E,wEAAwE;AACxE,qBAAa,kBAAmB,SAAQ,uBAAmC;CAAG;;;;;;AAE9E,mEAAmE;AACnE,qBAAa,qBAAsB,SAAQ,0BAAsC;CAAG;;;;;;;;AAEpF,uEAAuE;AACvE,qBAAa,yBAA0B,SAAQ,8BAA0C;CAAG;;;;;;;;;;;;;;;;;;;;;;AAE5F,sCAAsC;AACtC,qBAAa,YAAa,SAAQ,iBAA6B;CAAG;;;;;;;;;;;;;;AAElE,oDAAoD;AACpD,qBAAa,wBAAyB,SAAQ,6BAAyC;CAAG;;;;;;;;;AAE1F,iDAAiD;AACjD,qBAAa,YAAa,SAAQ,iBAA6B;CAAG;;;;;;;;;;;;;;;;;;;AAElE,2CAA2C;AAC3C,qBAAa,gBAAiB,SAAQ,qBAAiC;CAAG;;;;;;;;;AAE1E,kDAAkD;AAClD,qBAAa,eAAgB,SAAQ,oBAAgC;CAAG"}