@meyicloud/meyi-insight-server 1.0.3 → 1.0.5

package/dist/features/sla/domain/sla.resolver.d.ts

@@ -0,0 +1,16 @@
+import type { SlaPolicy, SlaPolicyRecord, SlaPolicyResolver } from "./sla.types.js";
+/** Fallback limits when an account has no explicit policy (matches historic behaviour). */
+export declare const DEFAULT_SLA_CRITICAL: {
+    readonly ackMinutes: 10;
+    readonly resolveMinutes: 60;
+};
+export declare const DEFAULT_SLA_STANDARD: {
+    readonly ackMinutes: 30;
+    readonly resolveMinutes: 120;
+};
+export declare function severityOf(tags?: Record<string, string> | null): string;
+export declare function defaultSlaPolicy(tags?: Record<string, string> | null): SlaPolicy;
+export declare function policyFromRecord(record: Pick<SlaPolicyRecord, "enabled" | "ackMinutes" | "resolveMinutes">): SlaPolicy;
+/** Builds a resolver over a set of account overrides. An account policy applies to every severity. */
+export declare function createSlaResolver(records: SlaPolicyRecord[]): SlaPolicyResolver;
+//# sourceMappingURL=sla.resolver.d.ts.map

package/dist/features/sla/domain/sla.resolver.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sla.resolver.d.ts","sourceRoot":"","sources":["../../../../src/features/sla/domain/sla.resolver.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,eAAe,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AAEpF,2FAA2F;AAC3F,eAAO,MAAM,oBAAoB;;;CAAkD,CAAC;AACpF,eAAO,MAAM,oBAAoB;;;CAAmD,CAAC;AAErF,wBAAgB,UAAU,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,IAAI,GAAG,MAAM,CAEvE;AAED,wBAAgB,gBAAgB,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,IAAI,GAAG,SAAS,CAIhF;AAED,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,IAAI,CAAC,eAAe,EAAE,SAAS,GAAG,YAAY,GAAG,gBAAgB,CAAC,GAAG,SAAS,CAOtH;AAED,sGAAsG;AACtG,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,eAAe,EAAE,GAAG,iBAAiB,CAM/E"}

package/dist/features/sla/domain/sla.resolver.js

@@ -0,0 +1,28 @@
+/** Fallback limits when an account has no explicit policy (matches historic behaviour). */
+export const DEFAULT_SLA_CRITICAL = { ackMinutes: 10, resolveMinutes: 60 };
+export const DEFAULT_SLA_STANDARD = { ackMinutes: 30, resolveMinutes: 120 };
+export function severityOf(tags) {
+    return String(tags?.severity || tags?.priority || "").toLowerCase();
+}
+export function defaultSlaPolicy(tags) {
+    const s = severityOf(tags);
+    const limits = s === "critical" || s === "p1" ? DEFAULT_SLA_CRITICAL : DEFAULT_SLA_STANDARD;
+    return { enabled: true, ...limits, source: "default" };
+}
+export function policyFromRecord(record) {
+    return {
+        enabled: record.enabled,
+        ackMinutes: record.ackMinutes,
+        resolveMinutes: record.resolveMinutes,
+        source: "account",
+    };
+}
+/** Builds a resolver over a set of account overrides. An account policy applies to every severity. */
+export function createSlaResolver(records) {
+    const byAccount = new Map(records.map((r) => [r.accountId, r]));
+    return (accountId, tags) => {
+        const record = accountId ? byAccount.get(accountId) : undefined;
+        return record ? policyFromRecord(record) : defaultSlaPolicy(tags);
+    };
+}
+//# sourceMappingURL=sla.resolver.js.map

package/dist/features/sla/domain/sla.resolver.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sla.resolver.js","sourceRoot":"","sources":["../../../../src/features/sla/domain/sla.resolver.ts"],"names":[],"mappings":"AAEA,2FAA2F;AAC3F,MAAM,CAAC,MAAM,oBAAoB,GAAG,EAAE,UAAU,EAAE,EAAE,EAAE,cAAc,EAAE,EAAE,EAAW,CAAC;AACpF,MAAM,CAAC,MAAM,oBAAoB,GAAG,EAAE,UAAU,EAAE,EAAE,EAAE,cAAc,EAAE,GAAG,EAAW,CAAC;AAErF,MAAM,UAAU,UAAU,CAAC,IAAoC;IAC7D,OAAO,MAAM,CAAC,IAAI,EAAE,QAAQ,IAAI,IAAI,EAAE,QAAQ,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;AACtE,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,IAAoC;IACnE,MAAM,CAAC,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;IAC3B,MAAM,MAAM,GAAG,CAAC,KAAK,UAAU,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,oBAAoB,CAAC;IAC5F,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;AACzD,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,MAA0E;IACzG,OAAO;QACL,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,cAAc,EAAE,MAAM,CAAC,cAAc;QACrC,MAAM,EAAE,SAAS;KAClB,CAAC;AACJ,CAAC;AAED,sGAAsG;AACtG,MAAM,UAAU,iBAAiB,CAAC,OAA0B;IAC1D,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAChE,OAAO,CAAC,SAAS,EAAE,IAAI,EAAE,EAAE;QACzB,MAAM,MAAM,GAAG,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAChE,OAAO,MAAM,CAAC,CAAC,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC;IACpE,CAAC,CAAC;AACJ,CAAC"}

package/dist/features/sla/domain/sla.types.d.ts

@@ -0,0 +1,59 @@
+/** Where an effective SLA policy came from. */
+export type SlaPolicySource = "account" | "default";
+export interface SlaPolicy {
+    enabled: boolean;
+    ackMinutes: number;
+    resolveMinutes: number;
+    source: SlaPolicySource;
+}
+/** Persisted per-account override (one row per tenant + AWS account). */
+export interface SlaPolicyRecord {
+    tenantId: string;
+    accountId: string;
+    enabled: boolean;
+    ackMinutes: number;
+    resolveMinutes: number;
+    updatedBy: string | null;
+    updatedAt: Date | string | null;
+}
+export type SlaPhaseState = "met" | "met_late" | "pending" | "overdue" | "disabled";
+export interface SlaPhase {
+    state: SlaPhaseState;
+    limitMinutes: number;
+    /** Minutes from creation until the phase completed (or until now while pending). */
+    elapsedMinutes: number | null;
+    /** Minutes left while pending; negative once overdue. Null when not pending. */
+    remainingMinutes: number | null;
+}
+export interface SlaEvaluation {
+    policy: SlaPolicy;
+    ack: SlaPhase;
+    resolve: SlaPhase;
+    /** True when either phase is overdue or was completed late. */
+    breached: boolean;
+}
+/** Minimal incident shape the evaluator needs. */
+export interface SlaIncidentInput {
+    status: string;
+    createdAt: Date | string | null | undefined;
+    /** When the incident left "open" (acknowledged). */
+    ackedAt?: Date | string | null;
+    resolvedAt?: Date | string | null;
+    accountId?: string | null;
+    tags?: Record<string, string> | null;
+}
+/** Resolves the effective policy for an incident's account. Built once per request. */
+export type SlaPolicyResolver = (accountId: string | null | undefined, tags?: Record<string, string> | null) => SlaPolicy;
+/**
+ * Port used by incident code so it doesn't depend on persistence details.
+ * `tenantId` undefined yields a resolver that only returns defaults.
+ */
+export interface SlaPolicyProvider {
+    loadResolver(tenantId?: string): Promise<SlaPolicyResolver>;
+}
+export declare const SLA_LIMITS: {
+    readonly minMinutes: 1;
+    /** 30 days. */
+    readonly maxMinutes: 43200;
+};
+//# sourceMappingURL=sla.types.d.ts.map

package/dist/features/sla/domain/sla.types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sla.types.d.ts","sourceRoot":"","sources":["../../../../src/features/sla/domain/sla.types.ts"],"names":[],"mappings":"AAAA,+CAA+C;AAC/C,MAAM,MAAM,eAAe,GAAG,SAAS,GAAG,SAAS,CAAC;AAEpD,MAAM,WAAW,SAAS;IACxB,OAAO,EAAE,OAAO,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,cAAc,EAAE,MAAM,CAAC;IACvB,MAAM,EAAE,eAAe,CAAC;CACzB;AAED,yEAAyE;AACzE,MAAM,WAAW,eAAe;IAC9B,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,OAAO,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,SAAS,EAAE,IAAI,GAAG,MAAM,GAAG,IAAI,CAAC;CACjC;AAED,MAAM,MAAM,aAAa,GAAG,KAAK,GAAG,UAAU,GAAG,SAAS,GAAG,SAAS,GAAG,UAAU,CAAC;AAEpF,MAAM,WAAW,QAAQ;IACvB,KAAK,EAAE,aAAa,CAAC;IACrB,YAAY,EAAE,MAAM,CAAC;IACrB,oFAAoF;IACpF,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,gFAAgF;IAChF,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;CACjC;AAED,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,SAAS,CAAC;IAClB,GAAG,EAAE,QAAQ,CAAC;IACd,OAAO,EAAE,QAAQ,CAAC;IAClB,+DAA+D;IAC/D,QAAQ,EAAE,OAAO,CAAC;CACnB;AAED,kDAAkD;AAClD,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,IAAI,GAAG,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC;IAC5C,oDAAoD;IACpD,OAAO,CAAC,EAAE,IAAI,GAAG,MAAM,GAAG,IAAI,CAAC;IAC/B,UAAU,CAAC,EAAE,IAAI,GAAG,MAAM,GAAG,IAAI,CAAC;IAClC,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,IAAI,CAAC;CACtC;AAED,uFAAuF;AACvF,MAAM,MAAM,iBAAiB,GAAG,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,IAAI,KAAK,SAAS,CAAC;AAE1H;;;GAGG;AACH,MAAM,WAAW,iBAAiB;IAChC,YAAY,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC;CAC7D;AAED,eAAO,MAAM,UAAU;;IAErB,eAAe;;CAEP,CAAC"}

package/dist/features/sla/domain/sla.types.js

@@ -0,0 +1,6 @@
+export const SLA_LIMITS = {
+    minMinutes: 1,
+    /** 30 days. */
+    maxMinutes: 43_200,
+};
+//# sourceMappingURL=sla.types.js.map

package/dist/features/sla/domain/sla.types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sla.types.js","sourceRoot":"","sources":["../../../../src/features/sla/domain/sla.types.ts"],"names":[],"mappings":"AA8DA,MAAM,CAAC,MAAM,UAAU,GAAG;IACxB,UAAU,EAAE,CAAC;IACb,eAAe;IACf,UAAU,EAAE,MAAM;CACV,CAAC"}

package/dist/features/sla/index.d.ts

@@ -0,0 +1,7 @@
+export * from "./domain/sla.types.js";
+export * from "./domain/sla.resolver.js";
+export * from "./domain/sla.evaluator.js";
+export { SlaPolicyModel } from "./sla-policy.model.js";
+export { SlaPolicyService, SlaError, type AccountSlaPolicy } from "./sla-policy.service.js";
+export { createSlaRouter } from "./sla.routes.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/features/sla/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/features/sla/index.ts"],"names":[],"mappings":"AAAA,cAAc,uBAAuB,CAAC;AACtC,cAAc,0BAA0B,CAAC;AACzC,cAAc,2BAA2B,CAAC;AAC1C,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,gBAAgB,EAAE,QAAQ,EAAE,KAAK,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAC5F,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC"}

package/dist/features/sla/index.js

@@ -0,0 +1,7 @@
+export * from "./domain/sla.types.js";
+export * from "./domain/sla.resolver.js";
+export * from "./domain/sla.evaluator.js";
+export { SlaPolicyModel } from "./sla-policy.model.js";
+export { SlaPolicyService, SlaError } from "./sla-policy.service.js";
+export { createSlaRouter } from "./sla.routes.js";
+//# sourceMappingURL=index.js.map

package/dist/features/sla/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/features/sla/index.ts"],"names":[],"mappings":"AAAA,cAAc,uBAAuB,CAAC;AACtC,cAAc,0BAA0B,CAAC;AACzC,cAAc,2BAA2B,CAAC;AAC1C,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,gBAAgB,EAAE,QAAQ,EAAyB,MAAM,yBAAyB,CAAC;AAC5F,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC"}

package/dist/features/sla/sla-policy.model.d.ts

@@ -0,0 +1,19 @@
+import type { SlaPolicyRecord } from "./domain/sla.types.js";
+/** Persistence only: every query is scoped by tenant_id. No business rules here. */
+export declare class SlaPolicyModel {
+    private db;
+    private tbl;
+    constructor(db: any, tbl: any);
+    listByTenant(tenantId: string): Promise<SlaPolicyRecord[]>;
+    findByAccount(tenantId: string, accountId: string): Promise<SlaPolicyRecord | null>;
+    upsert(input: {
+        tenantId: string;
+        accountId: string;
+        enabled: boolean;
+        ackMinutes: number;
+        resolveMinutes: number;
+        updatedBy: string | null;
+    }): Promise<SlaPolicyRecord>;
+    delete(tenantId: string, accountId: string): Promise<void>;
+}
+//# sourceMappingURL=sla-policy.model.d.ts.map

package/dist/features/sla/sla-policy.model.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sla-policy.model.d.ts","sourceRoot":"","sources":["../../../src/features/sla/sla-policy.model.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAE7D,oFAAoF;AACpF,qBAAa,cAAc;IAEvB,OAAO,CAAC,EAAE;IACV,OAAO,CAAC,GAAG;gBADH,EAAE,EAAE,GAAG,EACP,GAAG,EAAE,GAAG;IAGZ,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,EAAE,CAAC;IAI1D,aAAa,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC;IASnF,MAAM,CAAC,KAAK,EAAE;QAClB,QAAQ,EAAE,MAAM,CAAC;QACjB,SAAS,EAAE,MAAM,CAAC;QAClB,OAAO,EAAE,OAAO,CAAC;QACjB,UAAU,EAAE,MAAM,CAAC;QACnB,cAAc,EAAE,MAAM,CAAC;QACvB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;KAC1B,GAAG,OAAO,CAAC,eAAe,CAAC;IAkBtB,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAKjE"}

package/dist/features/sla/sla-policy.model.js

@@ -0,0 +1,44 @@
+import { and, eq } from "drizzle-orm";
+/** Persistence only: every query is scoped by tenant_id. No business rules here. */
+export class SlaPolicyModel {
+    db;
+    tbl;
+    constructor(db, tbl) {
+        this.db = db;
+        this.tbl = tbl;
+    }
+    async listByTenant(tenantId) {
+        return this.db.select().from(this.tbl).where(eq(this.tbl.tenantId, tenantId));
+    }
+    async findByAccount(tenantId, accountId) {
+        const [row] = await this.db
+            .select()
+            .from(this.tbl)
+            .where(and(eq(this.tbl.tenantId, tenantId), eq(this.tbl.accountId, accountId)))
+            .limit(1);
+        return row ?? null;
+    }
+    async upsert(input) {
+        const [row] = await this.db
+            .insert(this.tbl)
+            .values(input)
+            .onConflictDoUpdate({
+            target: [this.tbl.tenantId, this.tbl.accountId],
+            set: {
+                enabled: input.enabled,
+                ackMinutes: input.ackMinutes,
+                resolveMinutes: input.resolveMinutes,
+                updatedBy: input.updatedBy,
+                updatedAt: new Date(),
+            },
+        })
+            .returning();
+        return row;
+    }
+    async delete(tenantId, accountId) {
+        await this.db
+            .delete(this.tbl)
+            .where(and(eq(this.tbl.tenantId, tenantId), eq(this.tbl.accountId, accountId)));
+    }
+}
+//# sourceMappingURL=sla-policy.model.js.map

package/dist/features/sla/sla-policy.model.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sla-policy.model.js","sourceRoot":"","sources":["../../../src/features/sla/sla-policy.model.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,MAAM,aAAa,CAAC;AAGtC,oFAAoF;AACpF,MAAM,OAAO,cAAc;IAEf;IACA;IAFV,YACU,EAAO,EACP,GAAQ;QADR,OAAE,GAAF,EAAE,CAAK;QACP,QAAG,GAAH,GAAG,CAAK;IACf,CAAC;IAEJ,KAAK,CAAC,YAAY,CAAC,QAAgB;QACjC,OAAO,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC;IAChF,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,QAAgB,EAAE,SAAiB;QACrD,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,IAAI,CAAC,EAAE;aACxB,MAAM,EAAE;aACR,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC;aACd,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,QAAQ,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC;aAC9E,KAAK,CAAC,CAAC,CAAC,CAAC;QACZ,OAAO,GAAG,IAAI,IAAI,CAAC;IACrB,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,KAOZ;QACC,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,IAAI,CAAC,EAAE;aACxB,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;aAChB,MAAM,CAAC,KAAK,CAAC;aACb,kBAAkB,CAAC;YAClB,MAAM,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC;YAC/C,GAAG,EAAE;gBACH,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,UAAU,EAAE,KAAK,CAAC,UAAU;gBAC5B,cAAc,EAAE,KAAK,CAAC,cAAc;gBACpC,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,SAAS,EAAE,IAAI,IAAI,EAAE;aACtB;SACF,CAAC;aACD,SAAS,EAAE,CAAC;QACf,OAAO,GAAG,CAAC;IACb,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,QAAgB,EAAE,SAAiB;QAC9C,MAAM,IAAI,CAAC,EAAE;aACV,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;aAChB,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,QAAQ,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC;IACpF,CAAC;CACF"}

package/dist/features/sla/sla-policy.service.d.ts

@@ -0,0 +1,29 @@
+import type { ConnectorService } from "../../services/connector.service.js";
+import type { SlaPolicyModel } from "./sla-policy.model.js";
+import type { SlaPolicy, SlaPolicyProvider, SlaPolicyResolver } from "./domain/sla.types.js";
+export declare class SlaError extends Error {
+    readonly status: 400 | 404;
+    readonly details?: unknown;
+    constructor(status: 400 | 404, message: string, details?: unknown);
+}
+export interface AccountSlaPolicy extends SlaPolicy {
+    accountId: string;
+    updatedBy: string | null;
+    updatedAt: Date | string | null;
+}
+export declare class SlaPolicyService implements SlaPolicyProvider {
+    private model;
+    private connectors;
+    constructor(model: SlaPolicyModel, connectors: ConnectorService);
+    /** The account must be one of this tenant's connectors; prevents writing policies for foreign accounts. */
+    private assertConnector;
+    private toAccountPolicy;
+    list(tenantId: string): Promise<AccountSlaPolicy[]>;
+    get(tenantId: string, accountId: string): Promise<AccountSlaPolicy>;
+    upsert(tenantId: string, accountId: string, input: unknown, actor: string | null): Promise<AccountSlaPolicy>;
+    /** Removes the override so the account falls back to defaults. */
+    reset(tenantId: string, accountId: string): Promise<AccountSlaPolicy>;
+    /** One query per request; used by incident dashboards, analytics and detail. */
+    loadResolver(tenantId?: string): Promise<SlaPolicyResolver>;
+}
+//# sourceMappingURL=sla-policy.service.d.ts.map

package/dist/features/sla/sla-policy.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sla-policy.service.d.ts","sourceRoot":"","sources":["../../../src/features/sla/sla-policy.service.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,qCAAqC,CAAC;AAC5E,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAG5D,OAAO,KAAK,EAAE,SAAS,EAAE,iBAAiB,EAAmB,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAE9G,qBAAa,QAAS,SAAQ,KAAK;IAE/B,QAAQ,CAAC,MAAM,EAAE,GAAG,GAAG,GAAG;IAE1B,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO;gBAFjB,MAAM,EAAE,GAAG,GAAG,GAAG,EAC1B,OAAO,EAAE,MAAM,EACN,OAAO,CAAC,EAAE,OAAO;CAI7B;AAED,MAAM,WAAW,gBAAiB,SAAQ,SAAS;IACjD,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,SAAS,EAAE,IAAI,GAAG,MAAM,GAAG,IAAI,CAAC;CACjC;AAED,qBAAa,gBAAiB,YAAW,iBAAiB;IAEtD,OAAO,CAAC,KAAK;IACb,OAAO,CAAC,UAAU;gBADV,KAAK,EAAE,cAAc,EACrB,UAAU,EAAE,gBAAgB;IAGtC,2GAA2G;YAC7F,eAAe;IAK7B,OAAO,CAAC,eAAe;IAKjB,IAAI,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,EAAE,CAAC;IAKnD,GAAG,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAKnE,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAWlH,kEAAkE;IAC5D,KAAK,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAM3E,gFAAgF;IAC1E,YAAY,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,CAAC;CASlE"}

package/dist/features/sla/sla-policy.service.js

@@ -0,0 +1,67 @@
+import { SlaPolicyInputSchema } from "./sla.schema.js";
+import { createSlaResolver, defaultSlaPolicy, policyFromRecord } from "./domain/sla.resolver.js";
+export class SlaError extends Error {
+    status;
+    details;
+    constructor(status, message, details) {
+        super(message);
+        this.status = status;
+        this.details = details;
+    }
+}
+export class SlaPolicyService {
+    model;
+    connectors;
+    constructor(model, connectors) {
+        this.model = model;
+        this.connectors = connectors;
+    }
+    /** The account must be one of this tenant's connectors; prevents writing policies for foreign accounts. */
+    async assertConnector(tenantId, accountId) {
+        const connector = await this.connectors.findByAccountId(tenantId, accountId);
+        if (!connector)
+            throw new SlaError(404, "Connector not found");
+    }
+    toAccountPolicy(accountId, record) {
+        if (!record)
+            return { ...defaultSlaPolicy(), accountId, updatedBy: null, updatedAt: null };
+        return { ...policyFromRecord(record), accountId, updatedBy: record.updatedBy, updatedAt: record.updatedAt };
+    }
+    async list(tenantId) {
+        const records = await this.model.listByTenant(tenantId);
+        return records.map((r) => this.toAccountPolicy(r.accountId, r));
+    }
+    async get(tenantId, accountId) {
+        await this.assertConnector(tenantId, accountId);
+        return this.toAccountPolicy(accountId, await this.model.findByAccount(tenantId, accountId));
+    }
+    async upsert(tenantId, accountId, input, actor) {
+        const parsed = SlaPolicyInputSchema.safeParse(input);
+        if (!parsed.success) {
+            throw new SlaError(400, parsed.error.issues[0]?.message ?? "Invalid SLA policy", parsed.error.issues);
+        }
+        await this.assertConnector(tenantId, accountId);
+        const data = parsed.data;
+        const record = await this.model.upsert({ tenantId, accountId, ...data, updatedBy: actor });
+        return this.toAccountPolicy(accountId, record);
+    }
+    /** Removes the override so the account falls back to defaults. */
+    async reset(tenantId, accountId) {
+        await this.assertConnector(tenantId, accountId);
+        await this.model.delete(tenantId, accountId);
+        return this.toAccountPolicy(accountId, null);
+    }
+    /** One query per request; used by incident dashboards, analytics and detail. */
+    async loadResolver(tenantId) {
+        if (!tenantId)
+            return createSlaResolver([]);
+        try {
+            return createSlaResolver(await this.model.listByTenant(tenantId));
+        }
+        catch {
+            // Never break incident views because the policy table is unavailable; fall back to defaults.
+            return createSlaResolver([]);
+        }
+    }
+}
+//# sourceMappingURL=sla-policy.service.js.map

package/dist/features/sla/sla-policy.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sla-policy.service.js","sourceRoot":"","sources":["../../../src/features/sla/sla-policy.service.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,oBAAoB,EAAuB,MAAM,iBAAiB,CAAC;AAC5E,OAAO,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAGjG,MAAM,OAAO,QAAS,SAAQ,KAAK;IAEtB;IAEA;IAHX,YACW,MAAiB,EAC1B,OAAe,EACN,OAAiB;QAE1B,KAAK,CAAC,OAAO,CAAC,CAAC;QAJN,WAAM,GAAN,MAAM,CAAW;QAEjB,YAAO,GAAP,OAAO,CAAU;IAG5B,CAAC;CACF;AAQD,MAAM,OAAO,gBAAgB;IAEjB;IACA;IAFV,YACU,KAAqB,EACrB,UAA4B;QAD5B,UAAK,GAAL,KAAK,CAAgB;QACrB,eAAU,GAAV,UAAU,CAAkB;IACnC,CAAC;IAEJ,2GAA2G;IACnG,KAAK,CAAC,eAAe,CAAC,QAAgB,EAAE,SAAiB;QAC/D,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,eAAe,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;QAC7E,IAAI,CAAC,SAAS;YAAE,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,qBAAqB,CAAC,CAAC;IACjE,CAAC;IAEO,eAAe,CAAC,SAAiB,EAAE,MAA8B;QACvE,IAAI,CAAC,MAAM;YAAE,OAAO,EAAE,GAAG,gBAAgB,EAAE,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;QAC3F,OAAO,EAAE,GAAG,gBAAgB,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC;IAC9G,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,QAAgB;QACzB,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;QACxD,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,CAAC;IAClE,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,QAAgB,EAAE,SAAiB;QAC3C,MAAM,IAAI,CAAC,eAAe,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;QAChD,OAAO,IAAI,CAAC,eAAe,CAAC,SAAS,EAAE,MAAM,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAC;IAC9F,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,QAAgB,EAAE,SAAiB,EAAE,KAAc,EAAE,KAAoB;QACpF,MAAM,MAAM,GAAG,oBAAoB,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QACrD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,OAAO,IAAI,oBAAoB,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACxG,CAAC;QACD,MAAM,IAAI,CAAC,eAAe,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;QAChD,MAAM,IAAI,GAAmB,MAAM,CAAC,IAAI,CAAC;QACzC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC;QAC3F,OAAO,IAAI,CAAC,eAAe,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IACjD,CAAC;IAED,kEAAkE;IAClE,KAAK,CAAC,KAAK,CAAC,QAAgB,EAAE,SAAiB;QAC7C,MAAM,IAAI,CAAC,eAAe,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;QAChD,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;QAC7C,OAAO,IAAI,CAAC,eAAe,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IAC/C,CAAC;IAED,gFAAgF;IAChF,KAAK,CAAC,YAAY,CAAC,QAAiB;QAClC,IAAI,CAAC,QAAQ;YAAE,OAAO,iBAAiB,CAAC,EAAE,CAAC,CAAC;QAC5C,IAAI,CAAC;YACH,OAAO,iBAAiB,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC;QACpE,CAAC;QAAC,MAAM,CAAC;YACP,6FAA6F;YAC7F,OAAO,iBAAiB,CAAC,EAAE,CAAC,CAAC;QAC/B,CAAC;IACH,CAAC;CACF"}

package/dist/features/sla/sla.controller.d.ts

@@ -0,0 +1,9 @@
+import type { Request, Response } from "express";
+import { type SlaPolicyService } from "./sla-policy.service.js";
+export declare function createSlaController(service: SlaPolicyService): {
+    list(req: Request, res: Response): Promise<Response<any, Record<string, any>>>;
+    get(req: Request, res: Response): Promise<Response<any, Record<string, any>>>;
+    upsert(req: Request, res: Response): Promise<Response<any, Record<string, any>>>;
+    reset(req: Request, res: Response): Promise<Response<any, Record<string, any>>>;
+};
+//# sourceMappingURL=sla.controller.d.ts.map

package/dist/features/sla/sla.controller.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sla.controller.d.ts","sourceRoot":"","sources":["../../../src/features/sla/sla.controller.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAEjD,OAAO,EAAY,KAAK,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAe1E,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,gBAAgB;cAEzC,OAAO,OAAO,QAAQ;aAOvB,OAAO,OAAO,QAAQ;gBAOnB,OAAO,OAAO,QAAQ;eAQvB,OAAO,OAAO,QAAQ;EAQ1C"}

package/dist/features/sla/sla.controller.js

@@ -0,0 +1,52 @@
+import { resolveTenantId } from "../../tenancy.js";
+import { SlaError } from "./sla-policy.service.js";
+function actorLabel(req) {
+    const u = req.user;
+    if (!u)
+        return null;
+    return u.email || u.full_name || u.fullName || u.name || u.id || null;
+}
+function fail(res, e) {
+    if (e instanceof SlaError) {
+        return res.status(e.status).json({ ok: false, error: e.message, details: e.details });
+    }
+    return res.status(500).json({ ok: false, error: e?.message ?? "Internal error" });
+}
+export function createSlaController(service) {
+    return {
+        async list(req, res) {
+            try {
+                return res.json({ ok: true, policies: await service.list(resolveTenantId(req)) });
+            }
+            catch (e) {
+                return fail(res, e);
+            }
+        },
+        async get(req, res) {
+            try {
+                return res.json({ ok: true, policy: await service.get(resolveTenantId(req), req.params.accountId) });
+            }
+            catch (e) {
+                return fail(res, e);
+            }
+        },
+        async upsert(req, res) {
+            try {
+                const policy = await service.upsert(resolveTenantId(req), req.params.accountId, req.body, actorLabel(req));
+                return res.json({ ok: true, policy });
+            }
+            catch (e) {
+                return fail(res, e);
+            }
+        },
+        async reset(req, res) {
+            try {
+                return res.json({ ok: true, policy: await service.reset(resolveTenantId(req), req.params.accountId) });
+            }
+            catch (e) {
+                return fail(res, e);
+            }
+        },
+    };
+}
+//# sourceMappingURL=sla.controller.js.map

package/dist/features/sla/sla.controller.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sla.controller.js","sourceRoot":"","sources":["../../../src/features/sla/sla.controller.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,EAAE,QAAQ,EAAyB,MAAM,yBAAyB,CAAC;AAE1E,SAAS,UAAU,CAAC,GAAY;IAC9B,MAAM,CAAC,GAAI,GAAW,CAAC,IAAI,CAAC;IAC5B,IAAI,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACpB,OAAO,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,EAAE,IAAI,IAAI,CAAC;AACxE,CAAC;AAED,SAAS,IAAI,CAAC,GAAa,EAAE,CAAM;IACjC,IAAI,CAAC,YAAY,QAAQ,EAAE,CAAC;QAC1B,OAAO,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;IACxF,CAAC;IACD,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,IAAI,gBAAgB,EAAE,CAAC,CAAC;AACpF,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,OAAyB;IAC3D,OAAO;QACL,KAAK,CAAC,IAAI,CAAC,GAAY,EAAE,GAAa;YACpC,IAAI,CAAC;gBACH,OAAO,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC;YACpF,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,OAAO,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;YACtB,CAAC;QACH,CAAC;QACD,KAAK,CAAC,GAAG,CAAC,GAAY,EAAE,GAAa;YACnC,IAAI,CAAC;gBACH,OAAO,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;YACvG,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,OAAO,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;YACtB,CAAC;QACH,CAAC;QACD,KAAK,CAAC,MAAM,CAAC,GAAY,EAAE,GAAa;YACtC,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,eAAe,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,SAAS,EAAE,GAAG,CAAC,IAAI,EAAE,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;gBAC3G,OAAO,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;YACxC,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,OAAO,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;YACtB,CAAC;QACH,CAAC;QACD,KAAK,CAAC,KAAK,CAAC,GAAY,EAAE,GAAa;YACrC,IAAI,CAAC;gBACH,OAAO,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,OAAO,CAAC,KAAK,CAAC,eAAe,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;YACzG,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,OAAO,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;YACtB,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/features/sla/sla.routes.d.ts

@@ -0,0 +1,4 @@
+import { Router } from "express";
+import type { SlaPolicyService } from "./sla-policy.service.js";
+export declare function createSlaRouter(service: SlaPolicyService): Router;
+//# sourceMappingURL=sla.routes.d.ts.map

package/dist/features/sla/sla.routes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sla.routes.d.ts","sourceRoot":"","sources":["../../../src/features/sla/sla.routes.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAEjC,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAEhE,wBAAgB,eAAe,CAAC,OAAO,EAAE,gBAAgB,GAAG,MAAM,CAUjE"}

package/dist/features/sla/sla.routes.js

@@ -0,0 +1,12 @@
+import { Router } from "express";
+import { createSlaController } from "./sla.controller.js";
+export function createSlaRouter(service) {
+    const router = Router();
+    const ctrl = createSlaController(service);
+    router.get("/policies", ctrl.list.bind(ctrl));
+    router.get("/policies/:accountId", ctrl.get.bind(ctrl));
+    router.put("/policies/:accountId", ctrl.upsert.bind(ctrl));
+    router.delete("/policies/:accountId", ctrl.reset.bind(ctrl));
+    return router;
+}
+//# sourceMappingURL=sla.routes.js.map

package/dist/features/sla/sla.routes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sla.routes.js","sourceRoot":"","sources":["../../../src/features/sla/sla.routes.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAG1D,MAAM,UAAU,eAAe,CAAC,OAAyB;IACvD,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC;IACxB,MAAM,IAAI,GAAG,mBAAmB,CAAC,OAAO,CAAC,CAAC;IAE1C,MAAM,CAAC,GAAG,CAAC,WAAW,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IAC9C,MAAM,CAAC,GAAG,CAAC,sBAAsB,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IACxD,MAAM,CAAC,GAAG,CAAC,sBAAsB,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IAC3D,MAAM,CAAC,MAAM,CAAC,sBAAsB,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IAE7D,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/features/sla/sla.schema.d.ts

@@ -0,0 +1,8 @@
+import { z } from "zod";
+export declare const SlaPolicyInputSchema: z.ZodObject<{
+    enabled: z.ZodBoolean;
+    ackMinutes: z.ZodNumber;
+    resolveMinutes: z.ZodNumber;
+}, z.core.$strip>;
+export type SlaPolicyInput = z.infer<typeof SlaPolicyInputSchema>;
+//# sourceMappingURL=sla.schema.d.ts.map

package/dist/features/sla/sla.schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sla.schema.d.ts","sourceRoot":"","sources":["../../../src/features/sla/sla.schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AASxB,eAAO,MAAM,oBAAoB;;;;iBAS7B,CAAC;AAEL,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC"}

package/dist/features/sla/sla.schema.js

@@ -0,0 +1,18 @@
+import { z } from "zod";
+import { SLA_LIMITS } from "./domain/sla.types.js";
+const minutes = z
+    .number()
+    .int("Must be a whole number of minutes")
+    .min(SLA_LIMITS.minMinutes, `Must be at least ${SLA_LIMITS.minMinutes} minute`)
+    .max(SLA_LIMITS.maxMinutes, `Must be at most ${SLA_LIMITS.maxMinutes} minutes (30 days)`);
+export const SlaPolicyInputSchema = z
+    .object({
+    enabled: z.boolean(),
+    ackMinutes: minutes,
+    resolveMinutes: minutes,
+})
+    .refine((v) => v.resolveMinutes >= v.ackMinutes, {
+    message: "Resolve limit must be greater than or equal to the acknowledge limit",
+    path: ["resolveMinutes"],
+});
+//# sourceMappingURL=sla.schema.js.map

package/dist/features/sla/sla.schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sla.schema.js","sourceRoot":"","sources":["../../../src/features/sla/sla.schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AAEnD,MAAM,OAAO,GAAG,CAAC;KACd,MAAM,EAAE;KACR,GAAG,CAAC,mCAAmC,CAAC;KACxC,GAAG,CAAC,UAAU,CAAC,UAAU,EAAE,oBAAoB,UAAU,CAAC,UAAU,SAAS,CAAC;KAC9E,GAAG,CAAC,UAAU,CAAC,UAAU,EAAE,mBAAmB,UAAU,CAAC,UAAU,oBAAoB,CAAC,CAAC;AAE5F,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC;KAClC,MAAM,CAAC;IACN,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE;IACpB,UAAU,EAAE,OAAO;IACnB,cAAc,EAAE,OAAO;CACxB,CAAC;KACD,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,cAAc,IAAI,CAAC,CAAC,UAAU,EAAE;IAC/C,OAAO,EAAE,sEAAsE;IAC/E,IAAI,EAAE,CAAC,gBAAgB,CAAC;CACzB,CAAC,CAAC"}

package/dist/features/sources/cloudtrail/controller.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"controller.d.ts","sourceRoot":"","sources":["../../../../src/features/sources/cloudtrail/controller.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACjD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qCAAqC,CAAC;AACzE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,wCAAwC,CAAC;AA4F/E,wBAAgB,gCAAgC,CAC9C,aAAa,EAAE,aAAa,EAC5B,gBAAgB,CAAC,EAAE,gBAAgB;IAGjC;;;OAGG;kBACiB,OAAO,OAAO,QAAQ;IA6B1C;;;;;;;;;OASG;0BACyB,OAAO,OAAO,QAAQ;IA0LlD;;;OAGG;+BAC8B,OAAO,OAAO,QAAQ;IAiCvD;;;OAGG;gCAC+B,OAAO,OAAO,QAAQ;IAsDxD;;;;OAIG;0BACyB,OAAO,OAAO,QAAQ;EAmDrD"}
+{"version":3,"file":"controller.d.ts","sourceRoot":"","sources":["../../../../src/features/sources/cloudtrail/controller.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACjD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qCAAqC,CAAC;AACzE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,wCAAwC,CAAC;AA6F/E,wBAAgB,gCAAgC,CAC9C,aAAa,EAAE,aAAa,EAC5B,gBAAgB,CAAC,EAAE,gBAAgB;IAGjC;;;OAGG;kBACiB,OAAO,OAAO,QAAQ;IAkC1C;;;;;;;;;OASG;0BACyB,OAAO,OAAO,QAAQ;IA6LlD;;;OAGG;+BAC8B,OAAO,OAAO,QAAQ;IAiCvD;;;OAGG;gCAC+B,OAAO,OAAO,QAAQ;IAoExD;;;;OAIG;0BACyB,OAAO,OAAO,QAAQ;EAmDrD"}

package/dist/features/sources/cloudtrail/controller.js

@@ -1,5 +1,6 @@
 import { buildCloudTrailCentralStackTemplate, ALL_AWS_ACTIVE_REGIONS } from "./template.js";
 import { resolveTenantId } from "../../../tenancy.js";
+import { reconcileCloudTrailDeployment } from "./reconciler.js";
 function normalizeSourceType(value) {
     const normalized = String(value || "")
         .toLowerCase()
@@ -80,12 +81,16 @@ export function createCloudTrailSourceController(sourceService, connectorService
          */
         async getSetup(req, res) {
             try {
-                const source = await sourceService.getById(req.params.id);
+                let source = await sourceService.getById(req.params.id);
                 if (!source)
                     return res.status(404).json({ ok: false, error: "Source not found" });
                 if (!isCloudTrailType(source.type)) {
                     return res.status(400).json({ ok: false, error: "Source type must be cloudtrail" });
                 }
+                const tenantId = resolveTenantId(req);
+                if (String(source.awsDeploymentStatus || "").toLowerCase() === "pending") {
+                    source = await reconcileCloudTrailDeployment(source, sourceService, connectorService, tenantId);
+                }
                 return res.json({
                     ok: true,
                     source: {
@@ -119,13 +124,16 @@ export function createCloudTrailSourceController(sourceService, connectorService
          */
         async getConsoleDeploy(req, res) {
             try {
-                const source = await sourceService.getById(req.params.id);
+                let source = await sourceService.getById(req.params.id);
                 if (!source)
                     return res.status(404).json({ ok: false, error: "Source not found" });
                 if (!isCloudTrailType(source.type)) {
                     return res.status(400).json({ ok: false, error: "Source type must be cloudtrail" });
                 }
                 const tenantId = resolveTenantId(req);
+                if (String(source.awsDeploymentStatus || "").toLowerCase() === "pending") {
+                    source = await reconcileCloudTrailDeployment(source, sourceService, connectorService, tenantId);
+                }
                 const region = String(req.query.region || source.awsRegion || "ap-south-1").trim() || "ap-south-1";
                 const stackName = sanitizeAwsName(req.query.stackName || source.awsStackName, `meyi-cloudtrail-${source.id.slice(0, 8)}`, 128);
                 // createNewTrail: query param > stored value > default true
@@ -218,7 +226,7 @@ export function createCloudTrailSourceController(sourceService, connectorService
                     webhookUrl = `${urlObj.toString().replace(/\/$/, "")}${webhookPath}`;
                 }
                 const deploymentStatusPath = `/api/v1/insight/sources/${source.id}/aws/cloudtrail/deployment-status`;
-                const deploymentStatusUrl = `${baseUrl}${deploymentStatusPath}?token=${encodeURIComponent(source.webhookToken)}`;
+                const deploymentStatusUrl = `${baseUrl}${deploymentStatusPath}`;
                 const templatePath = `/api/v1/insight/sources/${source.id}/aws/cloudtrail/central-stack-template.yml`;
                 const templateUrl = `${baseUrl}${templatePath}?token=${encodeURIComponent(source.webhookToken)}`;
                 const templateDownloadUrl = templateUrl;
@@ -324,7 +332,16 @@ export function createCloudTrailSourceController(sourceService, connectorService
                 if (!isCloudTrailType(source.type)) {
                     return res.status(400).json({ ok: false, error: "Source type must be cloudtrail" });
                 }
-                const token = String(req.query.token || req.body?.token || "").trim();
+                let token = String(req.query.token || req.body?.token || "").trim();
+                if (!token && req.headers.authorization) {
+                    const auth = String(req.headers.authorization).trim();
+                    if (auth.toLowerCase().startsWith("bearer ")) {
+                        token = auth.slice(7).trim();
+                    }
+                    else {
+                        token = auth;
+                    }
+                }
                 if (!token || token !== String(source.webhookToken || "")) {
                     return res.status(403).json({ ok: false, error: "Invalid deployment status token" });
                 }
@@ -332,27 +349,31 @@ export function createCloudTrailSourceController(sourceService, connectorService
                 if (req.body?.source === "aws.cloudformation" && req.body?.detail) {
                     const detail = req.body.detail;
                     const statusDetails = detail["status-details"] || {};
+                    const statusVal = statusDetails["detailed-status"] || statusDetails["status"] || detail["status"];
                     parsedBody = {
-                        operationStatus: statusDetails["detailed-status"] || statusDetails["status"],
-                        reason: statusDetails["status-reason"],
-                        stackId: detail["stack-set-arn"] || detail["stack-id"] || req.body.resources?.[0],
-                        stackName: (detail["stack-set-arn"] || detail["stack-id"] || req.body.resources?.[0]) ? (detail["stack-set-arn"] || detail["stack-id"] || req.body.resources?.[0]).split("/")[1] : undefined
+                        operationStatus: statusVal,
+                        reason: statusDetails["status-reason"] || detail["status-reason"],
+                        stackId: detail["stack-id"] || detail["stack-set-arn"] || req.body.resources?.[0],
+                        stackName: (detail["stack-id"] || detail["stack-set-arn"] || req.body.resources?.[0]) ? (detail["stack-id"] || detail["stack-set-arn"] || req.body.resources?.[0]).split("/")[1] : undefined
                     };
                 }
-                // Map CloudFormation StackSet status to internal status
+                // Map CloudFormation Stack / StackSet / StackInstance status to internal status
                 const rawStatus = String(parsedBody?.operationStatus || parsedBody?.status || "").trim().toLowerCase();
                 let requestedStatus = rawStatus;
-                if (rawStatus === "succeeded" || rawStatus === "create_complete" || rawStatus === "update_complete" || rawStatus === "deployed")
+                if (rawStatus === "succeeded" || rawStatus === "create_complete" || rawStatus === "update_complete" || rawStatus === "deployed" || rawStatus === "current") {
                     requestedStatus = "deployed";
-                else if (rawStatus.includes("failed"))
+                }
+                else if (rawStatus.includes("failed") || rawStatus.includes("rollback")) {
                     requestedStatus = "failed";
-                else if (rawStatus === "delete_complete" || rawStatus === "deleted")
+                }
+                else if (rawStatus === "delete_complete" || rawStatus === "deleted") {
                     requestedStatus = "deleted";
+                }
                 const allowed = new Set(["not_started", "pending", "deployed", "failed", "deleted"]);
                 const status = allowed.has(requestedStatus) ? requestedStatus : "pending";
                 const updated = await sourceService.updateCloudTrailDeployment(source.id, {
                     awsDeploymentStatus: status,
-                    awsDeploymentStatusReason: String(parsedBody?.reason || "").trim() || null,
+                    awsDeploymentStatusReason: String(parsedBody?.reason || "").trim() || (status === "deployed" ? "Deployment completed in AWS" : null),
                     awsStackId: String(parsedBody?.stackId || "").trim() || null,
                     awsStackName: String(parsedBody?.stackName || source.awsStackName || "").trim() || null,
                 });
@@ -387,7 +408,7 @@ export function createCloudTrailSourceController(sourceService, connectorService
                 }
                 const baseUrl = buildPublicBaseUrl(req);
                 let webhookUrl = `${baseUrl}/api/v1/insight/webhook/${source.webhookToken}`;
-                const deploymentStatusUrl = `${baseUrl}/api/v1/insight/sources/${source.id}/aws/cloudtrail/deployment-status?token=${encodeURIComponent(source.webhookToken)}`;
+                const deploymentStatusUrl = `${baseUrl}/api/v1/insight/sources/${source.id}/aws/cloudtrail/deployment-status`;
                 // Read from query params first (if provided by frontend during download), then fallback to database
                 const reqCreateNewTrail = req.query.createNewTrail !== undefined
                     ? String(req.query.createNewTrail).toLowerCase() !== "false"