feat(audit): M5.6 SourceNode sentinel backfill (purge-role) + CLI + runbook note (T5)

2026-06-16 22:02:21 -04:00
parent de2968b03d
commit 55630b48b6
12 changed files with 1399 additions and 10 deletions
@@ -29,6 +29,7 @@ public static class AuditCommands
        command.Add(BuildExport(urlOption, formatOption, usernameOption, passwordOption));
        command.Add(BuildTree(urlOption, formatOption, usernameOption, passwordOption));
        command.Add(BuildVerifyChain(urlOption, formatOption, usernameOption, passwordOption));
+        command.Add(BuildBackfillSourceNode(urlOption, formatOption, usernameOption, passwordOption));

        return command;
    }
@@ -288,4 +289,76 @@ public static class AuditCommands
        });
        return cmd;
    }
+
+    /// <summary>
+    /// Builds the <c>audit backfill-source-node</c> sub-command (Audit Log #23 M5.6 T5).
+    /// Sets <c>SourceNode</c> on historical pre-feature rows whose <c>SourceNode IS NULL</c>
+    /// and <c>OccurredAtUtc</c> is older than <c>--before</c>, in batches. Admin-only.
+    /// </summary>
+    private static Command BuildBackfillSourceNode(Option<string> urlOption, Option<string> formatOption, Option<string> usernameOption, Option<string> passwordOption)
+    {
+        var sentinelOption = new Option<string>("--sentinel")
+        {
+            Description = "Value to write for pre-feature rows whose node-of-origin is unknown (default: unknown)",
+        };
+        sentinelOption.DefaultValueFactory = _ => "unknown";
+
+        var beforeOption = new Option<string>("--before")
+        {
+            Description = "ISO-8601 UTC datetime; only rows older than this date are eligible (required)",
+            Required = true,
+        };
+
+        var batchOption = new Option<int>("--batch")
+        {
+            Description = "Max rows updated per batch (default: 5000)",
+        };
+        batchOption.DefaultValueFactory = _ => 5000;
+
+        var cmd = new Command("backfill-source-node")
+        {
+            Description = "Set SourceNode to a sentinel value on pre-feature rows where it is NULL (admin-only, maintenance path)",
+        };
+        cmd.Add(sentinelOption);
+        cmd.Add(beforeOption);
+        cmd.Add(batchOption);
+
+        cmd.SetAction(async (ParseResult result) =>
+        {
+            var connection = AuditCommandHelpers.ResolveConnection(result, urlOption, usernameOption, passwordOption);
+            if (connection.Error != null)
+            {
+                OutputFormatter.WriteError(connection.Error, connection.ErrorCode!);
+                return 1;
+            }
+
+            var sentinel = result.GetValue(sentinelOption) ?? "unknown";
+            var before = result.GetValue(beforeOption)!;
+            var batch = result.GetValue(batchOption);
+
+            if (string.IsNullOrWhiteSpace(sentinel))
+            {
+                OutputFormatter.WriteError("--sentinel must be a non-empty string.", "INVALID_ARGUMENT");
+                return 1;
+            }
+
+            if (batch <= 0)
+            {
+                OutputFormatter.WriteError("--batch must be > 0.", "INVALID_ARGUMENT");
+                return 1;
+            }
+
+            var args = new AuditBackfillSourceNodeArgs
+            {
+                Sentinel = sentinel,
+                Before = before,
+                BatchSize = batch,
+            };
+
+            using var client = new ManagementHttpClient(connection.Url!, connection.Username!, connection.Password!);
+            return await AuditBackfillHelpers.RunBackfillAsync(client, args, Console.Out);
+        });
+
+        return cmd;
+    }
 }