@meyicloud/meyi-insight-server 1.0.0

package/dist/models/source.model.js

@@ -0,0 +1,794 @@
+import { and, count, desc, eq, ilike, inArray, sql } from "drizzle-orm";
+import { ensureSourcePipelineDefaults } from "../pipeline/defaults/ensureDefaults.js";
+const DEFAULT_TOKEN_TTL_DAYS_RAW = Number.parseInt(process.env.INSIGHT_WEBHOOK_TOKEN_DEFAULT_DAYS || "30", 10);
+const DEFAULT_TOKEN_TTL_DAYS = Number.isFinite(DEFAULT_TOKEN_TTL_DAYS_RAW) && DEFAULT_TOKEN_TTL_DAYS_RAW > 0
+    ? DEFAULT_TOKEN_TTL_DAYS_RAW
+    : 30;
+function parseTtlDays(value) {
+    const parsed = Number.parseInt(String(value), 10);
+    if (!Number.isFinite(parsed) || parsed <= 0)
+        return DEFAULT_TOKEN_TTL_DAYS;
+    return parsed;
+}
+function buildExpiresAt(days) {
+    const expiresAt = new Date();
+    expiresAt.setDate(expiresAt.getDate() + parseTtlDays(days));
+    return expiresAt;
+}
+function tokenPolicyForRow(row) {
+    const mode = row?.webhookTokenNeverExpires ? "unlimited" : "expires";
+    return {
+        mode,
+        expiresAt: mode === "unlimited" ? null : row?.webhookTokenExpiresAt ?? null,
+        defaultTtlDays: DEFAULT_TOKEN_TTL_DAYS,
+    };
+}
+export class SourceModel {
+    db;
+    tbl;
+    alertsTbl;
+    cloudWatchSetupTbl;
+    grafanaSetupTbl;
+    prometheusSetupTbl;
+    healthTbl;
+    webhookFailureLogsTbl;
+    cloudTrailSetupTbl;
+    constructor(db, tbl, alertsTbl, cloudWatchSetupTbl, grafanaSetupTbl, prometheusSetupTbl, healthTbl, webhookFailureLogsTbl, cloudTrailSetupTbl) {
+        this.db = db;
+        this.tbl = tbl;
+        this.alertsTbl = alertsTbl;
+        this.cloudWatchSetupTbl = cloudWatchSetupTbl;
+        this.grafanaSetupTbl = grafanaSetupTbl;
+        this.prometheusSetupTbl = prometheusSetupTbl;
+        this.healthTbl = healthTbl;
+        this.webhookFailureLogsTbl = webhookFailureLogsTbl;
+        this.cloudTrailSetupTbl = cloudTrailSetupTbl;
+    }
+    mergeHealth(row, health) {
+        if (!row)
+            return row;
+        return {
+            ...row,
+            deliveryStatus: health?.deliveryStatus ?? "unknown",
+            lastWebhookReceivedAt: health?.lastWebhookReceivedAt ?? null,
+            lastSuccessfulWebhookAt: health?.lastSuccessfulWebhookAt ?? null,
+            lastFailedWebhookAt: health?.lastFailedWebhookAt ?? null,
+            lastErrorCode: health?.lastErrorCode ?? null,
+            lastErrorMessage: health?.lastErrorMessage ?? null,
+            lastAlertId: health?.lastAlertId ?? null,
+            webhookSuccessCount: Number(health?.successCount ?? 0),
+            webhookFailureCount: Number(health?.failureCount ?? 0),
+        };
+    }
+    async findHealth(sourceId) {
+        if (!this.healthTbl)
+            return null;
+        const [row] = await this.db
+            .select()
+            .from(this.healthTbl)
+            .where(eq(this.healthTbl.sourceId, sourceId))
+            .limit(1);
+        return row ?? null;
+    }
+    async findHealthRows(sourceIds) {
+        if (!this.healthTbl || sourceIds.length === 0)
+            return {};
+        const rows = await this.db
+            .select()
+            .from(this.healthTbl)
+            .where(inArray(this.healthTbl.sourceId, sourceIds));
+        return Object.fromEntries(rows.map((row) => [String(row.sourceId), row]));
+    }
+    mergeCloudWatchSetup(row, setup) {
+        if (!row)
+            return row;
+        const isCloudWatch = String(row.type || "").toLowerCase() === "cloudwatch";
+        if (!isCloudWatch && !setup)
+            return row;
+        return {
+            ...row,
+            ...(setup
+                ? {
+                    awsAccessKeyId: setup.awsAccessKeyId,
+                    awsSecretAccessKey: setup.awsSecretAccessKey,
+                    awsSessionToken: setup.awsSessionToken,
+                    awsRegion: setup.awsRegion,
+                    awsStackName: setup.awsStackName,
+                    awsLambdaName: setup.awsLambdaName,
+                    awsAlarmNamePrefix: setup.awsAlarmNamePrefix,
+                    awsSelectedAlarmNames: setup.awsSelectedAlarmNames ?? [],
+                    awsSelectedMetricKeys: setup.awsSelectedMetricKeys ?? [],
+                    awsDeploymentStatus: setup.awsDeploymentStatus ?? "not_started",
+                    awsDeploymentStatusReason: setup.awsDeploymentStatusReason,
+                    awsStackId: setup.awsStackId,
+                }
+                : {
+                    awsSelectedAlarmNames: [],
+                    awsSelectedMetricKeys: [],
+                    awsDeploymentStatus: "not_started",
+                    awsDeploymentStatusReason: null,
+                }),
+        };
+    }
+    async findCloudWatchSetup(sourceId) {
+        if (!this.cloudWatchSetupTbl)
+            return null;
+        const [row] = await this.db
+            .select()
+            .from(this.cloudWatchSetupTbl)
+            .where(eq(this.cloudWatchSetupTbl.sourceId, sourceId))
+            .limit(1);
+        return row ?? null;
+    }
+    async findCloudWatchSetups(sourceIds) {
+        if (!this.cloudWatchSetupTbl || sourceIds.length === 0)
+            return {};
+        const rows = await this.db
+            .select()
+            .from(this.cloudWatchSetupTbl)
+            .where(inArray(this.cloudWatchSetupTbl.sourceId, sourceIds));
+        return Object.fromEntries(rows.map((row) => [String(row.sourceId), row]));
+    }
+    mergeCloudTrailSetup(row, setup) {
+        if (!row)
+            return row;
+        const isCloudTrail = String(row.type || "").toLowerCase() === "cloudtrail";
+        if (!isCloudTrail && !setup)
+            return row;
+        return {
+            ...row,
+            ...(setup
+                ? {
+                    awsRegion: setup.awsRegion,
+                    awsStackName: setup.awsStackName,
+                    awsCreateNewTrail: setup.awsCreateNewTrail ?? true,
+                    awsDeploymentStatus: setup.awsDeploymentStatus ?? "not_started",
+                    awsDeploymentStatusReason: setup.awsDeploymentStatusReason,
+                    awsStackId: setup.awsStackId,
+                    awsDeploymentMode: setup.awsDeploymentMode,
+                    awsTargetOUs: setup.awsTargetOUs,
+                    awsTargetAccounts: setup.awsTargetAccounts,
+                    awsTargetRegions: setup.awsTargetRegions,
+                }
+                : {
+                    awsCreateNewTrail: true,
+                    awsDeploymentStatus: "not_started",
+                    awsDeploymentStatusReason: null,
+                    awsDeploymentMode: "Organizations",
+                }),
+        };
+    }
+    async findCloudTrailSetup(sourceId) {
+        if (!this.cloudTrailSetupTbl)
+            return null;
+        const [row] = await this.db
+            .select()
+            .from(this.cloudTrailSetupTbl)
+            .where(eq(this.cloudTrailSetupTbl.sourceId, sourceId))
+            .limit(1);
+        return row ?? null;
+    }
+    async findCloudTrailSetups(sourceIds) {
+        if (!this.cloudTrailSetupTbl || sourceIds.length === 0)
+            return {};
+        const rows = await this.db
+            .select()
+            .from(this.cloudTrailSetupTbl)
+            .where(inArray(this.cloudTrailSetupTbl.sourceId, sourceIds));
+        return Object.fromEntries(rows.map((row) => [String(row.sourceId), row]));
+    }
+    mergeGrafanaSetup(row, setup) {
+        if (!row || String(row.type || "").toLowerCase() !== "grafana")
+            return row;
+        return {
+            ...row,
+            grafanaBaseUrl: setup?.grafanaBaseUrl ?? null,
+            grafanaContactPointName: setup?.grafanaContactPointName ?? null,
+            grafanaAccountTokenEncrypted: setup?.grafanaAccountTokenEncrypted ?? null,
+            hasGrafanaAccountToken: Boolean(setup?.grafanaAccountTokenEncrypted),
+            grafanaAutoRoute: setup?.grafanaAutoRoute ?? false,
+            grafanaMatcherLabel: setup?.grafanaMatcherLabel ?? null,
+            grafanaMatcherValue: setup?.grafanaMatcherValue ?? null,
+            grafanaPolicyUpdated: setup?.grafanaPolicyUpdated ?? false,
+            grafanaSetupStatus: setup?.grafanaSetupStatus ?? "not_started",
+            grafanaSetupStatusReason: setup?.grafanaSetupStatusReason ?? null,
+        };
+    }
+    mergePrometheusSetup(row, setup) {
+        if (!row || String(row.type || "").toLowerCase() !== "prometheus")
+            return row;
+        return {
+            ...row,
+            prometheusEnvironment: setup?.prometheusEnvironment ?? null,
+            prometheusReceiverName: setup?.prometheusReceiverName ?? null,
+            prometheusBaseUrl: setup?.prometheusBaseUrl ?? null,
+            alertmanagerBaseUrl: setup?.alertmanagerBaseUrl ?? null,
+            prometheusSetupStatus: setup?.prometheusSetupStatus ?? "not_started",
+            prometheusSetupStatusReason: setup?.prometheusSetupStatusReason ?? null,
+        };
+    }
+    async findGrafanaSetup(sourceId) {
+        if (!this.grafanaSetupTbl)
+            return null;
+        const [row] = await this.db
+            .select()
+            .from(this.grafanaSetupTbl)
+            .where(eq(this.grafanaSetupTbl.sourceId, sourceId))
+            .limit(1);
+        return row ?? null;
+    }
+    async findPrometheusSetup(sourceId) {
+        if (!this.prometheusSetupTbl)
+            return null;
+        const [row] = await this.db
+            .select()
+            .from(this.prometheusSetupTbl)
+            .where(eq(this.prometheusSetupTbl.sourceId, sourceId))
+            .limit(1);
+        return row ?? null;
+    }
+    async findGrafanaSetups(sourceIds) {
+        if (!this.grafanaSetupTbl || sourceIds.length === 0)
+            return {};
+        const rows = await this.db
+            .select()
+            .from(this.grafanaSetupTbl)
+            .where(inArray(this.grafanaSetupTbl.sourceId, sourceIds));
+        return Object.fromEntries(rows.map((row) => [String(row.sourceId), row]));
+    }
+    async findPrometheusSetups(sourceIds) {
+        if (!this.prometheusSetupTbl || sourceIds.length === 0)
+            return {};
+        const rows = await this.db
+            .select()
+            .from(this.prometheusSetupTbl)
+            .where(inArray(this.prometheusSetupTbl.sourceId, sourceIds));
+        return Object.fromEntries(rows.map((row) => [String(row.sourceId), row]));
+    }
+    async assertUniqueName(name, excludeId, tenantId) {
+        const trimmed = String(name || "").trim();
+        if (!trimmed)
+            return;
+        const conditions = [sql `lower(${this.tbl.name}) = lower(${trimmed})`];
+        if (excludeId) {
+            conditions.push(sql `${this.tbl.id} <> ${excludeId}`);
+        }
+        if (tenantId) {
+            conditions.push(eq(this.tbl.tenantId, tenantId));
+        }
+        const [existing] = await this.db
+            .select({ id: this.tbl.id })
+            .from(this.tbl)
+            .where(and(...conditions))
+            .limit(1);
+        if (existing) {
+            throw new Error("Source name already exists");
+        }
+    }
+    async findById(id, tenantId) {
+        const conditions = [eq(this.tbl.id, id)];
+        if (tenantId)
+            conditions.push(eq(this.tbl.tenantId, tenantId));
+        const [row] = await this.db
+            .select()
+            .from(this.tbl)
+            .where(and(...conditions))
+            .limit(1);
+        if (!row)
+            return null;
+        const [cloudWatchSetup, grafanaSetup, prometheusSetup, cloudTrailSetup, health] = await Promise.all([
+            this.findCloudWatchSetup(row.id),
+            this.findGrafanaSetup(row.id),
+            this.findPrometheusSetup(row.id),
+            this.findCloudTrailSetup(row.id),
+            this.findHealth(row.id),
+        ]);
+        return this.mergeHealth(this.mergeCloudTrailSetup(this.mergePrometheusSetup(this.mergeGrafanaSetup(this.mergeCloudWatchSetup(row, cloudWatchSetup), grafanaSetup), prometheusSetup), cloudTrailSetup), health);
+    }
+    async findByToken(token) {
+        const result = await this.validateWebhookToken(token);
+        return result.source;
+    }
+    async validateWebhookToken(token, authToken) {
+        const [row] = await this.db
+            .select()
+            .from(this.tbl)
+            .where(eq(this.tbl.webhookToken, token))
+            .limit(1);
+        if (!row)
+            return { source: null, reason: "NOT_FOUND" };
+        if (row.webhookAuthToken && row.webhookAuthToken !== authToken) {
+            return { source: null, reason: "UNAUTHORIZED", rejectedSource: row };
+        }
+        if (!row.isActive) {
+            return { source: null, reason: "INACTIVE", rejectedSource: row };
+        }
+        if (!row.webhookTokenNeverExpires) {
+            const expiresAt = row.webhookTokenExpiresAt ? new Date(row.webhookTokenExpiresAt) : null;
+            if (!expiresAt || Number.isNaN(expiresAt.getTime()) || expiresAt.getTime() <= Date.now()) {
+                return { source: null, reason: "EXPIRED", rejectedSource: row };
+            }
+        }
+        const [cloudWatchSetup, grafanaSetup, prometheusSetup, cloudTrailSetup, health] = await Promise.all([
+            this.findCloudWatchSetup(row.id),
+            this.findGrafanaSetup(row.id),
+            this.findPrometheusSetup(row.id),
+            this.findCloudTrailSetup(row.id),
+            this.findHealth(row.id),
+        ]);
+        return {
+            source: this.mergeHealth(this.mergeCloudTrailSetup(this.mergePrometheusSetup(this.mergeGrafanaSetup(this.mergeCloudWatchSetup(row, cloudWatchSetup), grafanaSetup), prometheusSetup), cloudTrailSetup), health),
+            reason: null,
+        };
+    }
+    async list(params) {
+        const { page, limit } = params;
+        const offset = (page - 1) * limit;
+        const conditions = [];
+        if (params.search) {
+            conditions.push(ilike(this.tbl.name, `%${params.search}%`));
+        }
+        if (params.types?.length) {
+            conditions.push(inArray(this.tbl.type, params.types));
+        }
+        if (params.tenantId) {
+            conditions.push(eq(this.tbl.tenantId, params.tenantId));
+        }
+        const whereClause = conditions.length > 0 ? and(...conditions) : undefined;
+        let q = this.db
+            .select()
+            .from(this.tbl)
+            .$dynamic();
+        if (whereClause) {
+            q = q.where(whereClause);
+        }
+        const rows = await q.orderBy(desc(this.tbl.createdAt)).limit(limit).offset(offset);
+        let countQ = this.db.select({ value: count() }).from(this.tbl).$dynamic();
+        if (whereClause) {
+            countQ = countQ.where(whereClause);
+        }
+        const [{ value: total }] = await countQ;
+        const sourceIds = rows.map((r) => r.id).filter(Boolean);
+        let alertCountsBySourceId = {};
+        if (this.alertsTbl && sourceIds.length > 0) {
+            const counts = await this.db
+                .select({
+                sourceId: this.alertsTbl.sourceId,
+                value: count(),
+            })
+                .from(this.alertsTbl)
+                .where(inArray(this.alertsTbl.sourceId, sourceIds))
+                .groupBy(this.alertsTbl.sourceId);
+            alertCountsBySourceId = Object.fromEntries(counts
+                .filter((r) => r.sourceId)
+                .map((r) => [String(r.sourceId), Number(r.value || 0)]));
+        }
+        const [setupBySourceId, grafanaSetupBySourceId, prometheusSetupBySourceId, cloudTrailSetupBySourceId, healthBySourceId] = await Promise.all([
+            this.findCloudWatchSetups(sourceIds),
+            this.findGrafanaSetups(sourceIds),
+            this.findPrometheusSetups(sourceIds),
+            this.findCloudTrailSetups(sourceIds),
+            this.findHealthRows(sourceIds),
+        ]);
+        const sources = rows.map((row) => ({
+            ...this.mergeHealth(this.mergeCloudTrailSetup(this.mergePrometheusSetup(this.mergeGrafanaSetup(this.mergeCloudWatchSetup(row, setupBySourceId[String(row.id)]), grafanaSetupBySourceId[String(row.id)]), prometheusSetupBySourceId[String(row.id)]), cloudTrailSetupBySourceId[String(row.id)]), healthBySourceId[String(row.id)]),
+            webhookUrl: `/api/v1/insight/webhook/${row.webhookToken}`,
+            tokenPolicy: tokenPolicyForRow(row),
+            alertCount: alertCountsBySourceId[String(row.id)] ?? 0,
+        }));
+        return { sources, total: Number(total), page, limit };
+    }
+    async getOverview(id, tenantId) {
+        const source = await this.findById(id, tenantId);
+        if (!source)
+            return null;
+        let alarmsToday = 0;
+        let lastAlarm = null;
+        let errorCountLastHour = Number(source.webhookFailureCount ?? 0);
+        if (this.alertsTbl) {
+            const sinceToday = new Date();
+            sinceToday.setHours(0, 0, 0, 0);
+            const sinceHour = new Date(Date.now() - 60 * 60 * 1000);
+            const [[today], [last]] = await Promise.all([
+                this.db
+                    .select({ value: count() })
+                    .from(this.alertsTbl)
+                    .where(and(eq(this.alertsTbl.sourceId, id), sql `${this.alertsTbl.createdAt} >= ${sinceToday}`)),
+                this.db
+                    .select()
+                    .from(this.alertsTbl)
+                    .where(eq(this.alertsTbl.sourceId, id))
+                    .orderBy(desc(this.alertsTbl.createdAt))
+                    .limit(1),
+            ]);
+            alarmsToday = Number(today?.value ?? 0);
+            lastAlarm = last ?? null;
+            if (this.webhookFailureLogsTbl) {
+                const [errors] = await this.db
+                    .select({ value: count() })
+                    .from(this.webhookFailureLogsTbl)
+                    .where(and(eq(this.webhookFailureLogsTbl.sourceId, id), sql `${this.webhookFailureLogsTbl.createdAt} >= ${sinceHour}`));
+                errorCountLastHour = Number(errors?.value ?? 0);
+            }
+        }
+        const weeklyRate = await this.getAlarmRate(id, 7);
+        return {
+            source,
+            summary: {
+                status: source.isActive ? "Active" : "Disabled",
+                lastAlarmAt: lastAlarm?.createdAt ?? source.lastWebhookReceivedAt ?? null,
+                alarmsToday,
+                errorsLastHour: errorCountLastHour,
+                weeklyRate,
+                webhookEndpoint: `/api/v1/insight/webhook/${source.webhookToken}`,
+                authTokenPreview: source.webhookAuthToken,
+            },
+        };
+    }
+    async getAlarmRate(id, days = 7) {
+        const labels = ["Sun", "Mon", "Tue", "Wed", "Thu", "Fri", "Sat"];
+        const start = new Date();
+        start.setDate(start.getDate() - (days - 1));
+        start.setHours(0, 0, 0, 0);
+        const buckets = Array.from({ length: days }, (_, index) => {
+            const date = new Date(start);
+            date.setDate(start.getDate() + index);
+            return { date, day: labels[date.getDay()], count: 0 };
+        });
+        if (!this.alertsTbl)
+            return buckets.map(({ day, count }) => ({ day, count }));
+        const rows = await this.db
+            .select({
+            day: sql `to_char(${this.alertsTbl.createdAt}, 'YYYY-MM-DD')`,
+            value: count(),
+        })
+            .from(this.alertsTbl)
+            .where(and(eq(this.alertsTbl.sourceId, id), sql `${this.alertsTbl.createdAt} >= ${start}`))
+            .groupBy(sql `to_char(${this.alertsTbl.createdAt}, 'YYYY-MM-DD')`);
+        const counts = Object.fromEntries(rows.map((row) => [String(row.day), Number(row.value ?? 0)]));
+        return buckets.map(({ date, day }) => ({
+            day,
+            count: counts[date.toISOString().slice(0, 10)] ?? 0,
+        }));
+    }
+    async listSourceAlarms(id, params, tenantId) {
+        const page = Math.max(1, params?.page ?? 1);
+        const limit = Math.min(100, params?.limit ?? 20);
+        const offset = (page - 1) * limit;
+        if (!this.alertsTbl)
+            return { alarms: [], total: 0, page, limit };
+        const conditions = [eq(this.alertsTbl.sourceId, id)];
+        if (tenantId)
+            conditions.push(eq(this.alertsTbl.tenantId, tenantId));
+        const whereClause = conditions.length > 1 ? and(...conditions) : conditions[0];
+        const alarms = await this.db
+            .select()
+            .from(this.alertsTbl)
+            .where(whereClause)
+            .orderBy(desc(this.alertsTbl.createdAt))
+            .limit(limit)
+            .offset(offset);
+        const [{ value: total }] = await this.db.select({ value: count() }).from(this.alertsTbl).where(whereClause);
+        return { alarms, total: Number(total), page, limit };
+    }
+    async listSourceLogs(id, params, tenantId) {
+        const page = Math.max(1, params?.page ?? 1);
+        const limit = Math.min(100, params?.limit ?? 20);
+        const offset = (page - 1) * limit;
+        const logs = [];
+        if (this.alertsTbl) {
+            const conditions = [eq(this.alertsTbl.sourceId, id)];
+            if (tenantId)
+                conditions.push(eq(this.alertsTbl.tenantId, tenantId));
+            const whereClause = conditions.length > 1 ? and(...conditions) : conditions[0];
+            const alertRows = await this.db
+                .select()
+                .from(this.alertsTbl)
+                .where(whereClause)
+                .orderBy(desc(this.alertsTbl.createdAt))
+                .limit(limit)
+                .offset(offset);
+            logs.push(...alertRows.map((alert) => ({
+                id: alert.id,
+                timestamp: alert.createdAt,
+                httpStatus: 200,
+                sourceIp: "52.94.12.40",
+                payloadSize: JSON.stringify(alert.additionalConfiguration ?? alert).length,
+                result: alert.status === "dismissed" ? "suppressed" : "normalised",
+            })));
+        }
+        if (this.webhookFailureLogsTbl && logs.length < limit) {
+            const failures = await this.db
+                .select()
+                .from(this.webhookFailureLogsTbl)
+                .where(eq(this.webhookFailureLogsTbl.sourceId, id))
+                .orderBy(desc(this.webhookFailureLogsTbl.createdAt))
+                .limit(limit - logs.length);
+            logs.push(...failures.map((failure) => ({
+                id: failure.id,
+                timestamp: failure.createdAt,
+                httpStatus: failure.errorCode === "UNAUTHORIZED" ? 401 : 400,
+                sourceIp: failure.requestIp ?? "unknown",
+                payloadSize: JSON.stringify(failure.payload ?? {}).length,
+                result: failure.errorCode ?? "DLQ",
+            })));
+        }
+        const filtered = params?.search
+            ? logs.filter((log) => JSON.stringify(log).toLowerCase().includes(String(params.search).toLowerCase()))
+            : logs;
+        return { logs: filtered, total: filtered.length, page, limit };
+    }
+    async create(input) {
+        const name = input.name.trim();
+        await this.assertUniqueName(name, undefined, input.tenantId ?? null);
+        const webhookToken = crypto.randomUUID();
+        const webhookAuthToken = crypto.randomUUID().replace(/-/g, "") + crypto.randomUUID().replace(/-/g, "");
+        const mode = input.tokenPolicy?.mode === "unlimited" ? "unlimited" : "expires";
+        const ttlDays = parseTtlDays(input.tokenPolicy?.ttlDays);
+        const [row] = await this.db
+            .insert(this.tbl)
+            .values({
+            name,
+            type: input.type,
+            tenantId: input.tenantId ?? null,
+            webhookToken,
+            webhookAuthToken,
+            webhookTokenNeverExpires: mode === "unlimited",
+            webhookTokenExpiresAt: mode === "unlimited" ? null : buildExpiresAt(ttlDays),
+            isActive: true,
+            description: input.description ?? null,
+        })
+            .returning();
+        await ensureSourcePipelineDefaults(this.db, row.id, row.type, row.tenantId);
+        return row;
+    }
+    async update(id, data, tenantId) {
+        const existing = await this.findById(id, tenantId);
+        const oldName = existing?.name;
+        const updates = { updatedAt: new Date() };
+        if (data.name !== undefined) {
+            const name = data.name.trim();
+            await this.assertUniqueName(name, id, tenantId);
+            updates.name = name;
+        }
+        if (data.description !== undefined)
+            updates.description = data.description;
+        if (data.isActive !== undefined)
+            updates.isActive = data.isActive;
+        const updateConditions = [eq(this.tbl.id, id)];
+        if (tenantId)
+            updateConditions.push(eq(this.tbl.tenantId, tenantId));
+        await this.db
+            .update(this.tbl)
+            .set(updates)
+            .where(and(...updateConditions));
+        if (updates.name && oldName && updates.name !== oldName) {
+            try {
+                await this.db.execute(sql `UPDATE insight_alerts SET source_name = ${updates.name} WHERE source_id = ${id}`);
+                await this.db.execute(sql `UPDATE insight_incidents SET source = ${updates.name} WHERE source = ${oldName}`);
+                await this.db.execute(sql `UPDATE insight_sops SET source = ${updates.name} WHERE source = ${oldName}`);
+            }
+            catch (err) {
+                console.error("Failed to cascade source rename:", err);
+            }
+        }
+    }
+    async rotateToken(id, tenantId) {
+        const existing = await this.findById(id, tenantId);
+        if (!existing)
+            throw new Error("Source not found");
+        const newToken = crypto.randomUUID();
+        const updates = {
+            webhookToken: newToken,
+            updatedAt: new Date(),
+        };
+        if (existing.webhookTokenNeverExpires) {
+            updates.webhookTokenNeverExpires = true;
+            updates.webhookTokenExpiresAt = null;
+        }
+        else {
+            updates.webhookTokenNeverExpires = false;
+            updates.webhookTokenExpiresAt = buildExpiresAt(DEFAULT_TOKEN_TTL_DAYS);
+        }
+        await this.db
+            .update(this.tbl)
+            .set(updates)
+            .where(eq(this.tbl.id, id));
+        const refreshed = await this.findById(id);
+        return {
+            webhookToken: newToken,
+            tokenPolicy: tokenPolicyForRow(refreshed),
+        };
+    }
+    async updateTokenPolicy(id, tokenPolicy, tenantId) {
+        const mode = tokenPolicy.mode === "unlimited" ? "unlimited" : "expires";
+        const ttlDays = parseTtlDays(tokenPolicy.ttlDays);
+        const updates = {
+            updatedAt: new Date(),
+            webhookTokenNeverExpires: mode === "unlimited",
+            webhookTokenExpiresAt: mode === "unlimited" ? null : buildExpiresAt(ttlDays),
+        };
+        const updateConditions = [eq(this.tbl.id, id)];
+        if (tenantId)
+            updateConditions.push(eq(this.tbl.tenantId, tenantId));
+        await this.db
+            .update(this.tbl)
+            .set(updates)
+            .where(and(...updateConditions));
+        const refreshed = await this.findById(id, tenantId);
+        return tokenPolicyForRow(refreshed);
+    }
+    async updateCloudWatchSetup(id, data, tenantId) {
+        const values = {
+            sourceId: id,
+        };
+        const updates = {
+            updatedAt: new Date(),
+        };
+        if (data.awsAccessKeyId !== undefined)
+            values.awsAccessKeyId = updates.awsAccessKeyId = data.awsAccessKeyId;
+        if (data.awsSecretAccessKey !== undefined)
+            values.awsSecretAccessKey = updates.awsSecretAccessKey = data.awsSecretAccessKey;
+        if (data.awsSessionToken !== undefined)
+            values.awsSessionToken = updates.awsSessionToken = data.awsSessionToken;
+        if (data.awsRegion !== undefined)
+            values.awsRegion = updates.awsRegion = data.awsRegion;
+        if (data.awsStackName !== undefined)
+            values.awsStackName = updates.awsStackName = data.awsStackName;
+        if (data.awsLambdaName !== undefined)
+            values.awsLambdaName = updates.awsLambdaName = data.awsLambdaName;
+        if (data.awsAlarmNamePrefix !== undefined)
+            values.awsAlarmNamePrefix = updates.awsAlarmNamePrefix = data.awsAlarmNamePrefix;
+        if (data.awsSelectedAlarmNames !== undefined)
+            values.awsSelectedAlarmNames = updates.awsSelectedAlarmNames = data.awsSelectedAlarmNames;
+        if (data.awsSelectedMetricKeys !== undefined)
+            values.awsSelectedMetricKeys = updates.awsSelectedMetricKeys = data.awsSelectedMetricKeys;
+        if (data.awsDeploymentStatus !== undefined)
+            values.awsDeploymentStatus = updates.awsDeploymentStatus = data.awsDeploymentStatus;
+        if (data.awsDeploymentStatusReason !== undefined)
+            values.awsDeploymentStatusReason = updates.awsDeploymentStatusReason = data.awsDeploymentStatusReason;
+        if (data.awsStackId !== undefined)
+            values.awsStackId = updates.awsStackId = data.awsStackId;
+        if (!this.cloudWatchSetupTbl)
+            throw new Error("CloudWatch setup table is not configured");
+        await this.db
+            .insert(this.cloudWatchSetupTbl)
+            .values(values)
+            .onConflictDoUpdate({
+            target: this.cloudWatchSetupTbl.sourceId,
+            set: updates,
+        });
+        return this.findById(id, tenantId);
+    }
+    async updateCloudWatchDeployment(id, data, tenantId) {
+        const values = {
+            sourceId: id,
+            awsDeploymentStatus: data.awsDeploymentStatus,
+        };
+        const updates = {
+            updatedAt: new Date(),
+            awsDeploymentStatus: data.awsDeploymentStatus,
+        };
+        if (data.awsDeploymentStatusReason !== undefined)
+            values.awsDeploymentStatusReason = updates.awsDeploymentStatusReason = data.awsDeploymentStatusReason;
+        if (data.awsStackId !== undefined)
+            values.awsStackId = updates.awsStackId = data.awsStackId;
+        if (data.awsStackName !== undefined)
+            values.awsStackName = updates.awsStackName = data.awsStackName;
+        if (!this.cloudWatchSetupTbl)
+            throw new Error("CloudWatch setup table is not configured");
+        await this.db
+            .insert(this.cloudWatchSetupTbl)
+            .values(values)
+            .onConflictDoUpdate({
+            target: this.cloudWatchSetupTbl.sourceId,
+            set: updates,
+        });
+        return this.findById(id);
+    }
+    async updateGrafanaSetup(id, data, tenantId) {
+        if (!this.grafanaSetupTbl)
+            throw new Error("Grafana setup table is not configured");
+        const values = { sourceId: id };
+        const updates = { updatedAt: new Date() };
+        for (const [key, value] of Object.entries(data)) {
+            if (value !== undefined) {
+                values[key] = value;
+                updates[key] = value;
+            }
+        }
+        await this.db
+            .insert(this.grafanaSetupTbl)
+            .values(values)
+            .onConflictDoUpdate({
+            target: this.grafanaSetupTbl.sourceId,
+            set: updates,
+        });
+        return this.findById(id);
+    }
+    async updatePrometheusSetup(id, data, tenantId) {
+        if (!this.prometheusSetupTbl)
+            throw new Error("Prometheus setup table is not configured");
+        const values = { sourceId: id };
+        const updates = { updatedAt: new Date() };
+        for (const [key, value] of Object.entries(data)) {
+            if (value !== undefined) {
+                values[key] = value;
+                updates[key] = value;
+            }
+        }
+        await this.db
+            .insert(this.prometheusSetupTbl)
+            .values(values)
+            .onConflictDoUpdate({
+            target: this.prometheusSetupTbl.sourceId,
+            set: updates,
+        });
+        return this.findById(id);
+    }
+    async updateCloudTrailSetup(id, data, tenantId) {
+        if (!this.cloudTrailSetupTbl)
+            throw new Error("CloudTrail setup table is not configured");
+        const values = { sourceId: id };
+        const updates = { updatedAt: new Date() };
+        for (const [key, value] of Object.entries(data)) {
+            if (value !== undefined) {
+                values[key] = value;
+                updates[key] = value;
+            }
+        }
+        await this.db
+            .insert(this.cloudTrailSetupTbl)
+            .values(values)
+            .onConflictDoUpdate({
+            target: this.cloudTrailSetupTbl.sourceId,
+            set: updates,
+        });
+        return this.findById(id);
+    }
+    async updateCloudTrailDeployment(id, data, tenantId) {
+        const values = {
+            sourceId: id,
+            awsDeploymentStatus: data.awsDeploymentStatus,
+        };
+        const updates = {
+            updatedAt: new Date(),
+            awsDeploymentStatus: data.awsDeploymentStatus,
+        };
+        if (data.awsDeploymentStatusReason !== undefined)
+            values.awsDeploymentStatusReason = updates.awsDeploymentStatusReason = data.awsDeploymentStatusReason;
+        if (data.awsStackId !== undefined)
+            values.awsStackId = updates.awsStackId = data.awsStackId;
+        if (data.awsStackName !== undefined)
+            values.awsStackName = updates.awsStackName = data.awsStackName;
+        if (!this.cloudTrailSetupTbl)
+            throw new Error("CloudTrail setup table is not configured");
+        await this.db
+            .insert(this.cloudTrailSetupTbl)
+            .values(values)
+            .onConflictDoUpdate({
+            target: this.cloudTrailSetupTbl.sourceId,
+            set: updates,
+        });
+        return this.findById(id);
+    }
+    async delete(id, tenantId) {
+        if (this.cloudWatchSetupTbl) {
+            await this.db.delete(this.cloudWatchSetupTbl).where(eq(this.cloudWatchSetupTbl.sourceId, id));
+        }
+        if (this.grafanaSetupTbl) {
+            await this.db.delete(this.grafanaSetupTbl).where(eq(this.grafanaSetupTbl.sourceId, id));
+        }
+        if (this.prometheusSetupTbl) {
+            await this.db.delete(this.prometheusSetupTbl).where(eq(this.prometheusSetupTbl.sourceId, id));
+        }
+        if (this.cloudTrailSetupTbl) {
+            await this.db.delete(this.cloudTrailSetupTbl).where(eq(this.cloudTrailSetupTbl.sourceId, id));
+        }
+        const conditions = [eq(this.tbl.id, id)];
+        if (tenantId)
+            conditions.push(eq(this.tbl.tenantId, tenantId));
+        await this.db.delete(this.tbl).where(and(...conditions));
+    }
+}
+//# sourceMappingURL=source.model.js.map