feat: add alert lifecycle, bulk ops, settings, inline editing, and UX improvements

- Add alert occurrence tracking, ticket URL linking, runbook URL support
- Add archived status with enum casing migration (uppercase → lowercase)
- Add bulk acknowledge/resolve with multi-select UI
- Add tag search filtering with clickable tags
- Add inline editing for silences, notification channels, and notes
- Add settings page with app config display and archive controls
- Add keyboard shortcuts (?, Esc, a, r, j/k navigation)
- Add incident phase badges (detection/investigation/mitigation/resolution)
- Fix URL normalization for ticket links (auto-prepend https://)
- Move settings into main nav bar alongside other views

Author: springdom

backend/api/routes/alerts.py

@@ -1,24 +1,33 @@
 import uuid
+from datetime import UTC, datetime
 
 from fastapi import APIRouter, Depends, HTTPException, Query
 from sqlalchemy import select
 from sqlalchemy.ext.asyncio import AsyncSession
 
 from backend.database import get_db
-from backend.models import Alert
+from backend.models import Alert, AlertOccurrence
 from backend.schemas import (
     AlertAckRequest,
     AlertListResponse,
     AlertNoteCreate,
     AlertNoteListResponse,
     AlertNoteResponse,
     AlertNoteUpdate,
+    AlertOccurrenceListResponse,
+    AlertOccurrenceResponse,
     AlertResponse,
     AlertTagsUpdate,
+    AlertTicketUpdate,
+    BulkAlertActionRequest,
+    BulkAlertActionResponse,
 )
 from backend.services import (
     acknowledge_alert,
     add_alert_tag,
+    archive_alerts,
+    bulk_acknowledge_alerts,
+    bulk_resolve_alerts,
     create_alert_note,
     delete_alert_note,
     get_alert_notes,
@@ -67,6 +76,52 @@ async def remove_note(
         raise HTTPException(status_code=404, detail="Note not found")
 
 
+# ─── Bulk actions ──────────────────────────────────────────
+
+
+@router.post(
+    "/bulk/acknowledge",
+    response_model=BulkAlertActionResponse,
+    summary="Bulk acknowledge alerts",
+)
+async def bulk_acknowledge(
+    body: BulkAlertActionRequest,
+    db: AsyncSession = Depends(get_db),
+) -> BulkAlertActionResponse:
+    """Acknowledge multiple alerts at once."""
+    updated_ids = await bulk_acknowledge_alerts(db, body.alert_ids)
+    return BulkAlertActionResponse(updated=len(updated_ids), alert_ids=updated_ids)
+
+
+@router.post(
+    "/bulk/resolve",
+    response_model=BulkAlertActionResponse,
+    summary="Bulk resolve alerts",
+)
+async def bulk_resolve(
+    body: BulkAlertActionRequest,
+    db: AsyncSession = Depends(get_db),
+) -> BulkAlertActionResponse:
+    """Resolve multiple alerts at once."""
+    updated_ids = await bulk_resolve_alerts(db, body.alert_ids)
+    return BulkAlertActionResponse(updated=len(updated_ids), alert_ids=updated_ids)
+
+
+@router.post(
+    "/archive",
+    summary="Archive old resolved alerts",
+)
+async def archive_old_alerts(
+    older_than_days: int = Query(
+        default=30, ge=1, description="Archive resolved alerts older than N days",
+    ),
+    db: AsyncSession = Depends(get_db),
+) -> dict:
+    """Archive resolved alerts that are older than the specified number of days."""
+    count = await archive_alerts(db, older_than_days=older_than_days)
+    return {"archived": count}
+
+
 # ─── Alert list & detail ──────────────────────────────────
 
 
@@ -79,7 +134,8 @@ async def list_alerts(
     status: str | None = Query(default=None, description="Filter by status"),
     severity: str | None = Query(default=None, description="Filter by severity"),
     service: str | None = Query(default=None, description="Filter by service"),
-    q: str | None = Query(default=None, description="Search name, service, host, description"),
+    q: str | None = Query(default=None, description="Search across name, service, host, tags"),
+    tag: str | None = Query(default=None, description="Filter by exact tag"),
     sort_by: str = Query(default="created_at", description="Sort field"),
     sort_order: str = Query(default="desc", pattern="^(asc|desc)$", description="Sort order"),
     page: int = Query(default=1, ge=1, description="Page number"),
@@ -89,7 +145,7 @@ async def list_alerts(
     """List alerts with optional filtering, search, sorting, and pagination."""
     alerts, total = await get_alerts(
         db, status=status, severity=severity, service=service,
-        search=q, sort_by=sort_by, sort_order=sort_order,
+        search=q, tag=tag, sort_by=sort_by, sort_order=sort_order,
         page=page, page_size=page_size,
     )
 
@@ -253,3 +309,59 @@ async def add_note(
     except ValueError:
         raise HTTPException(status_code=404, detail="Alert not found")
     return AlertNoteResponse.model_validate(note)
+
+
+# ─── Ticket URL ────────────────────────────────────────────
+
+
+@router.put(
+    "/{alert_id}/ticket",
+    response_model=AlertResponse,
+    summary="Set or update external ticket URL",
+)
+async def set_ticket_url(
+    alert_id: uuid.UUID,
+    body: AlertTicketUpdate,
+    db: AsyncSession = Depends(get_db),
+) -> AlertResponse:
+    """Link an alert to an external ticket (Jira, GitHub issue, etc)."""
+    stmt = select(Alert).where(Alert.id == alert_id)
+    result = await db.execute(stmt)
+    alert = result.scalar_one_or_none()
+    if not alert:
+        raise HTTPException(status_code=404, detail="Alert not found")
+    url = body.ticket_url.strip()
+    if url and not url.startswith(("http://", "https://")):
+        url = "https://" + url
+    alert.ticket_url = url
+    alert.updated_at = datetime.now(UTC)
+    await db.flush()
+    await db.refresh(alert)
+    return AlertResponse.model_validate(alert)
+
+
+# ─── Occurrence History ────────────────────────────────────
+
+
+@router.get(
+    "/{alert_id}/history",
+    response_model=AlertOccurrenceListResponse,
+    summary="Get alert occurrence history",
+)
+async def get_alert_history(
+    alert_id: uuid.UUID,
+    db: AsyncSession = Depends(get_db),
+) -> AlertOccurrenceListResponse:
+    """Get the timeline of when this alert (and its duplicates) were received."""
+    stmt = (
+        select(AlertOccurrence)
+        .where(AlertOccurrence.alert_id == alert_id)
+        .order_by(AlertOccurrence.received_at.desc())
+        .limit(100)
+    )
+    result = await db.execute(stmt)
+    occurrences = list(result.scalars().all())
+    return AlertOccurrenceListResponse(
+        occurrences=[AlertOccurrenceResponse.model_validate(o) for o in occurrences],
+        total=len(occurrences),
+    )

backend/api/routes/settings.py

@@ -0,0 +1,19 @@
+from fastapi import APIRouter
+
+from backend.config import get_settings
+
+router = APIRouter(prefix="/settings", tags=["settings"])
+
+
+@router.get("", summary="Get application settings")
+async def get_app_settings() -> dict:
+    """Return read-only application configuration."""
+    s = get_settings()
+    return {
+        "app_name": s.app_name,
+        "app_env": s.app_env,
+        "dedup_window_seconds": s.dedup_window_seconds,
+        "correlation_window_seconds": s.correlation_window_seconds,
+        "notification_cooldown_seconds": s.notification_cooldown_seconds,
+        "solace_dashboard_url": s.solace_dashboard_url,
+    }

backend/integrations/__init__.py

@@ -40,6 +40,8 @@ def __init__(
         starts_at: datetime | None = None,
         ends_at: datetime | None = None,
         generator_url: str | None = None,
+        runbook_url: str | None = None,
+        ticket_url: str | None = None,
         raw_payload: dict | None = None,
     ):
         self.name = name
@@ -57,6 +59,8 @@ def __init__(
         self.starts_at = starts_at or datetime.now(UTC)
         self.ends_at = ends_at
         self.generator_url = generator_url
+        self.runbook_url = runbook_url
+        self.ticket_url = ticket_url
         self.raw_payload = raw_payload
 
 
@@ -111,6 +115,8 @@ def normalize(self, payload: dict) -> list[NormalizedAlert]:
             starts_at=data.starts_at,
             ends_at=data.ends_at,
             generator_url=data.generator_url,
+            runbook_url=data.runbook_url,
+            ticket_url=data.ticket_url,
             raw_payload=payload,
         )
 

backend/main.py

@@ -5,6 +5,7 @@
 
 from backend.api.deps import require_api_key
 from backend.api.routes import alerts, health, incidents, notifications, silences, stats, webhooks
+from backend.api.routes import settings as settings_routes
 from backend.api.routes.ws import router as ws_router
 from backend.config import get_settings
 
@@ -56,6 +57,7 @@
 app.include_router(stats.router, prefix=settings.api_prefix, dependencies=api_deps)
 app.include_router(silences.router, prefix=settings.api_prefix, dependencies=api_deps)
 app.include_router(notifications.router, prefix=settings.api_prefix, dependencies=api_deps)
+app.include_router(settings_routes.router, prefix=settings.api_prefix, dependencies=api_deps)
 
 
 # ─── Startup / Shutdown ──────────────────────────────────

backend/migrations/versions/d4e5f6a7b8c9_add_features_v2.py

@@ -0,0 +1,55 @@
+"""add runbook_url, ticket_url, archived_at, alert_occurrences, incident phase
+
+Revision ID: d4e5f6a7b8c9
+Revises: c3d4e5f6a7b8
+Create Date: 2026-02-13 12:00:00.000000
+
+"""
+from collections.abc import Sequence
+
+import sqlalchemy as sa
+from alembic import op
+
+# revision identifiers, used by Alembic.
+revision: str = 'd4e5f6a7b8c9'
+down_revision: str | None = 'c3d4e5f6a7b8'
+branch_labels: str | Sequence[str] | None = None
+depends_on: str | Sequence[str] | None = None
+
+
+def upgrade() -> None:
+    # Add 'archived' value to the alertstatus enum
+    op.execute("ALTER TYPE alertstatus ADD VALUE IF NOT EXISTS 'archived'")
+
+    # Add new columns to alerts table
+    op.add_column('alerts', sa.Column('runbook_url', sa.Text(), nullable=True))
+    op.add_column('alerts', sa.Column('ticket_url', sa.Text(), nullable=True))
+    op.add_column('alerts', sa.Column('archived_at', sa.DateTime(timezone=True), nullable=True))
+
+    # Add phase column to incidents table
+    op.add_column('incidents', sa.Column('phase', sa.String(length=50), nullable=True))
+
+    # Create alert_occurrences table
+    op.create_table('alert_occurrences',
+        sa.Column('id', sa.UUID(), nullable=False),
+        sa.Column('alert_id', sa.UUID(), nullable=False),
+        sa.Column('received_at', sa.DateTime(timezone=True), server_default=sa.text('now()'), nullable=False),
+        sa.ForeignKeyConstraint(['alert_id'], ['alerts.id'], ondelete='CASCADE'),
+        sa.PrimaryKeyConstraint('id'),
+    )
+    op.create_index('idx_alert_occurrences_alert_id', 'alert_occurrences', ['alert_id'])
+    op.create_index('idx_alert_occurrences_received_at', 'alert_occurrences', ['received_at'])
+
+
+def downgrade() -> None:
+    op.drop_index('idx_alert_occurrences_received_at', table_name='alert_occurrences')
+    op.drop_index('idx_alert_occurrences_alert_id', table_name='alert_occurrences')
+    op.drop_table('alert_occurrences')
+
+    op.drop_column('incidents', 'phase')
+    op.drop_column('alerts', 'archived_at')
+    op.drop_column('alerts', 'ticket_url')
+    op.drop_column('alerts', 'runbook_url')
+
+    # Note: PostgreSQL does not support removing enum values.
+    # The 'archived' value will remain in the enum type after downgrade.

backend/migrations/versions/e5f6a7b8c9d0_fix_enum_casing.py

@@ -0,0 +1,106 @@
+"""fix enum casing: uppercase to lowercase values
+
+PostgreSQL enum values were created as UPPERCASE (FIRING, CRITICAL, etc.)
+but SQLAlchemy with values_callable expects lowercase (firing, critical, etc.).
+
+Strategy: Drop enum constraints, convert columns to text, update values to
+lowercase, recreate enum types with only lowercase values, cast back.
+
+Revision ID: e5f6a7b8c9d0
+Revises: d4e5f6a7b8c9
+Create Date: 2026-02-13 18:00:00.000000
+
+"""
+from collections.abc import Sequence
+
+from alembic import op
+
+# revision identifiers, used by Alembic.
+revision: str = 'e5f6a7b8c9d0'
+down_revision: str | None = 'd4e5f6a7b8c9'
+branch_labels: str | Sequence[str] | None = None
+depends_on: str | Sequence[str] | None = None
+
+
+def upgrade() -> None:
+    # ── alertstatus enum ──────────────────────────────────
+    # Convert column to text, update values, recreate enum, cast back
+    op.execute("ALTER TABLE alerts ALTER COLUMN status TYPE text")
+    op.execute("UPDATE alerts SET status = LOWER(status)")
+    op.execute("DROP TYPE alertstatus")
+    op.execute("CREATE TYPE alertstatus AS ENUM ('firing', 'acknowledged', 'resolved', 'suppressed', 'archived')")
+    op.execute("ALTER TABLE alerts ALTER COLUMN status TYPE alertstatus USING status::alertstatus")
+
+    # ── severity enum ─────────────────────────────────────
+    # Used by both alerts and incidents tables
+    op.execute("ALTER TABLE alerts ALTER COLUMN severity TYPE text")
+    op.execute("ALTER TABLE incidents ALTER COLUMN severity TYPE text")
+    op.execute("UPDATE alerts SET severity = LOWER(severity)")
+    op.execute("UPDATE incidents SET severity = LOWER(severity)")
+    op.execute("DROP TYPE severity")
+    op.execute("CREATE TYPE severity AS ENUM ('critical', 'high', 'warning', 'low', 'info')")
+    op.execute("ALTER TABLE alerts ALTER COLUMN severity TYPE severity USING severity::severity")
+    op.execute("ALTER TABLE incidents ALTER COLUMN severity TYPE severity USING severity::severity")
+
+    # ── incidentstatus enum ───────────────────────────────
+    op.execute("ALTER TABLE incidents ALTER COLUMN status TYPE text")
+    op.execute("UPDATE incidents SET status = LOWER(status)")
+    op.execute("DROP TYPE incidentstatus")
+    op.execute("CREATE TYPE incidentstatus AS ENUM ('open', 'acknowledged', 'resolved')")
+    op.execute("ALTER TABLE incidents ALTER COLUMN status TYPE incidentstatus USING status::incidentstatus")
+
+    # ── channeltype enum ──────────────────────────────────
+    op.execute("ALTER TABLE notification_channels ALTER COLUMN channel_type TYPE text")
+    op.execute("UPDATE notification_channels SET channel_type = LOWER(channel_type)")
+    op.execute("DROP TYPE channeltype")
+    op.execute("CREATE TYPE channeltype AS ENUM ('slack', 'email')")
+    op.execute("ALTER TABLE notification_channels ALTER COLUMN channel_type TYPE channeltype USING channel_type::channeltype")
+
+    # ── notificationstatus enum ───────────────────────────
+    op.execute("ALTER TABLE notification_logs ALTER COLUMN status TYPE text")
+    op.execute("UPDATE notification_logs SET status = LOWER(status)")
+    op.execute("DROP TYPE notificationstatus")
+    op.execute("CREATE TYPE notificationstatus AS ENUM ('pending', 'sent', 'failed')")
+    op.execute("ALTER TABLE notification_logs ALTER COLUMN status TYPE notificationstatus USING status::notificationstatus")
+
+
+def downgrade() -> None:
+    # Reverse: recreate with uppercase values
+
+    # ── alertstatus ───────────────────────────────────────
+    op.execute("ALTER TABLE alerts ALTER COLUMN status TYPE text")
+    op.execute("UPDATE alerts SET status = UPPER(status)")
+    op.execute("DROP TYPE alertstatus")
+    op.execute("CREATE TYPE alertstatus AS ENUM ('FIRING', 'ACKNOWLEDGED', 'RESOLVED', 'SUPPRESSED', 'ARCHIVED')")
+    op.execute("ALTER TABLE alerts ALTER COLUMN status TYPE alertstatus USING status::alertstatus")
+
+    # ── severity ──────────────────────────────────────────
+    op.execute("ALTER TABLE alerts ALTER COLUMN severity TYPE text")
+    op.execute("ALTER TABLE incidents ALTER COLUMN severity TYPE text")
+    op.execute("UPDATE alerts SET severity = UPPER(severity)")
+    op.execute("UPDATE incidents SET severity = UPPER(severity)")
+    op.execute("DROP TYPE severity")
+    op.execute("CREATE TYPE severity AS ENUM ('CRITICAL', 'HIGH', 'WARNING', 'LOW', 'INFO')")
+    op.execute("ALTER TABLE alerts ALTER COLUMN severity TYPE severity USING severity::severity")
+    op.execute("ALTER TABLE incidents ALTER COLUMN severity TYPE severity USING severity::severity")
+
+    # ── incidentstatus ────────────────────────────────────
+    op.execute("ALTER TABLE incidents ALTER COLUMN status TYPE text")
+    op.execute("UPDATE incidents SET status = UPPER(status)")
+    op.execute("DROP TYPE incidentstatus")
+    op.execute("CREATE TYPE incidentstatus AS ENUM ('OPEN', 'ACKNOWLEDGED', 'RESOLVED')")
+    op.execute("ALTER TABLE incidents ALTER COLUMN status TYPE incidentstatus USING status::incidentstatus")
+
+    # ── channeltype ───────────────────────────────────────
+    op.execute("ALTER TABLE notification_channels ALTER COLUMN channel_type TYPE text")
+    op.execute("UPDATE notification_channels SET channel_type = UPPER(channel_type)")
+    op.execute("DROP TYPE channeltype")
+    op.execute("CREATE TYPE channeltype AS ENUM ('SLACK', 'EMAIL')")
+    op.execute("ALTER TABLE notification_channels ALTER COLUMN channel_type TYPE channeltype USING channel_type::channeltype")
+
+    # ── notificationstatus ────────────────────────────────
+    op.execute("ALTER TABLE notification_logs ALTER COLUMN status TYPE text")
+    op.execute("UPDATE notification_logs SET status = UPPER(status)")
+    op.execute("DROP TYPE notificationstatus")
+    op.execute("CREATE TYPE notificationstatus AS ENUM ('PENDING', 'SENT', 'FAILED')")
+    op.execute("ALTER TABLE notification_logs ALTER COLUMN status TYPE notificationstatus USING status::notificationstatus")