TenantAtlas/app/Models/AlertRule.php

<?php

declare(strict_types=1);

namespace App\Models;

use Illuminate\Database\Eloquent\Factories\HasFactory;
use Illuminate\Database\Eloquent\Model;
use Illuminate\Database\Eloquent\Relations\BelongsTo;
use Illuminate\Database\Eloquent\Relations\BelongsToMany;
use Illuminate\Database\Eloquent\Relations\HasMany;

class AlertRule extends Model
{
    use HasFactory;

    public const string EVENT_HIGH_DRIFT = 'high_drift';

    public const string EVENT_COMPARE_FAILED = 'compare_failed';

    public const string EVENT_SLA_DUE = 'sla_due';

    public const string EVENT_PERMISSION_MISSING = 'permission_missing';

    public const string EVENT_ENTRA_ADMIN_ROLES_HIGH = 'entra.admin_roles.high';

    public const string TENANT_SCOPE_ALL = 'all';

    public const string TENANT_SCOPE_ALLOWLIST = 'allowlist';

    protected $guarded = [];

    protected $casts = [
        'is_enabled' => 'boolean',
        'tenant_allowlist' => 'array',
        'cooldown_seconds' => 'integer',
        'quiet_hours_enabled' => 'boolean',
    ];

    public function workspace(): BelongsTo
    {
        return $this->belongsTo(Workspace::class);
    }

    public function destinations(): BelongsToMany
    {
        return $this->belongsToMany(AlertDestination::class, 'alert_rule_destinations')
            ->using(AlertRuleDestination::class)
            ->withPivot(['id', 'workspace_id'])
            ->withTimestamps();
    }

    public function deliveries(): HasMany
    {
        return $this->hasMany(AlertDelivery::class);
    }

    public function appliesToTenant(int $tenantId): bool
    {
        if ($this->tenant_scope_mode !== self::TENANT_SCOPE_ALLOWLIST) {
            return true;
        }

        $allowlist = is_array($this->tenant_allowlist) ? $this->tenant_allowlist : [];
        $allowlist = array_values(array_unique(array_map(static fn (mixed $value): int => (int) $value, $allowlist)));

        return in_array($tenantId, $allowlist, true);
    }
}