Jira Issue Comment Silence Nudge Gate

id: jira-issue-comment-silence-nudge-gate
namespace: company.team

description: |
  Read a Jira issue's full comment history, classify how many days have passed since the last
  real comment, post an automatic nudge comment only when explicitly authorized, alert Slack
  otherwise, and log a governance audit trail either way.

inputs:
  - id: jira_base_url
    type: STRING
    displayName: Jira base URL
    description: Base Jira Cloud or Server URL, for example
      https://your-domain.atlassian.net.
    defaults: "https://your-domain.atlassian.net"

  - id: jira_username
    type: STRING
    displayName: Jira username
    description: Jira account email used for Basic authentication alongside the API token.
    defaults: "<your-jira-account-email>"

  - id: issue_key
    type: STRING
    displayName: Issue key
    description: Jira issue key to monitor, for example PROJ-123.
    defaults: "PROJ-123"

  - id: silence_days
    type: INT
    displayName: Silence threshold in days
    description: An issue whose most recent comment is this many days old or older
      is classified silent.
    defaults: 7

  - id: confirm_nudge
    type: BOOL
    displayName: Confirm automatic nudge
    description: When true, this flow is authorized to post a nudge comment on the
      issue itself. When false, silence only alerts Slack so a human follows up.
    defaults: false

tasks:
  - id: get_comments
    type: io.kestra.plugin.jira.comments.Get
    description: Read-only probe. Fetches every comment on the issue; nothing is
      posted here.
    allowFailure: true
    baseUrl: "{{ inputs.jira_base_url }}"
    username: "{{ inputs.jira_username }}"
    password: "{{ secret('JIRA_API_TOKEN') }}"
    issueIdOrKey: "{{ inputs.issue_key }}"
    fetchType: FETCH

  - id: evaluate
    type: io.kestra.plugin.core.output.OutputValues
    description: Takes the date-only portion of every comment's created timestamp
      (sidestepping Jira's non-standard timezone-offset format, which jq's
      fromdateiso8601 cannot parse directly) and compares the most recent one
      against silence_days, folding confirm_nudge into the silent classification
      so the Switch branch needs no further nesting.
    values:
      comment_count: "{{ outputs.get_comments is not defined ? -1 :
        outputs.get_comments.size }}"
      last_comment_date: >-
        {{ outputs.get_comments is not defined ? '' : (({'rows':
        outputs.get_comments.rows} | jq('[(.rows // [])[] | .created[0:10]] | if
        length == 0 then "1970-01-01" else max end')) | first) }}
      severity: >-
        {{ outputs.get_comments is not defined ? 'PROBE_FAILED' : (((({'rows':
        outputs.get_comments.rows} | jq('[(.rows // [])[] | .created[0:10]] | if
        length == 0 then "1970-01-01" else max end')) | first) <= (now() |
        dateAdd(-inputs.silence_days, 'DAYS') | date('yyyy-MM-dd'))) ?
        (inputs.confirm_nudge ? 'SILENT_AUTO_NUDGE' : 'SILENT_NEEDS_HUMAN') :
        'ACTIVE') }}

  - id: route
    type: io.kestra.plugin.core.flow.Switch
    description: ACTIVE just logs. SILENT_AUTO_NUDGE performs the safe remediation
      (a comment is reversible and adds visibility, it changes no issue field)
      only when confirm_nudge authorizes it. SILENT_NEEDS_HUMAN and PROBE_FAILED
      both alert Slack instead.
    value: "{{ outputs.evaluate.values.severity }}"
    cases:
      "ACTIVE":
        - id: log_active
          type: io.kestra.plugin.core.log.Log
          message: "{{ inputs.issue_key }} has {{ outputs.evaluate.values.comment_count }}
            comment(s), last on {{ outputs.evaluate.values.last_comment_date }},
            within the {{ inputs.silence_days }}-day silence threshold."
      "SILENT_AUTO_NUDGE":
        - id: post_nudge_comment
          type: io.kestra.plugin.jira.issues.CreateComment
          description: Posts an automatic nudge comment now that confirm_nudge explicitly
            authorizes this flow to act; a comment is reversible and changes no
            issue field.
          baseUrl: "{{ inputs.jira_base_url }}"
          username: "{{ inputs.jira_username }}"
          password: "{{ secret('JIRA_API_TOKEN') }}"
          issueIdOrKey: "{{ inputs.issue_key }}"
          body: "Automated nudge: this issue has had no comment since {{
            outputs.evaluate.values.last_comment_date }}, over the {{
            inputs.silence_days }}-day silence threshold. Flagging for an
            update."
        - id: alert_auto_nudged
          type: io.kestra.plugin.slack.notifications.SlackIncomingWebhook
          url: "{{ secret('SLACK_WEBHOOK_URL') }}"
          payload: |
            {{ {'text': 'SILENT_AUTO_NUDGE: ' ~ inputs.issue_key ~ ' has had no comment since ' ~ outputs.evaluate.values.last_comment_date ~ ', over the ' ~ inputs.silence_days ~ '-day threshold. Posted an automatic nudge comment.'} | toJson }}
      "SILENT_NEEDS_HUMAN":
        - id: alert_silent
          type: io.kestra.plugin.slack.notifications.SlackIncomingWebhook
          url: "{{ secret('SLACK_WEBHOOK_URL') }}"
          payload: |
            {{ {'text': 'SILENT_NEEDS_HUMAN: ' ~ inputs.issue_key ~ ' has had no comment since ' ~ outputs.evaluate.values.last_comment_date ~ ', over the ' ~ inputs.silence_days ~ '-day threshold. Set confirm_nudge to true to let this flow comment automatically, or follow up manually now.'} | toJson }}
      "PROBE_FAILED":
        - id: alert_probe_failed
          type: io.kestra.plugin.slack.notifications.SlackIncomingWebhook
          url: "{{ secret('SLACK_WEBHOOK_URL') }}"
          payload: |
            {{ {'text': 'PROBE_FAILED: could not read comments for ' ~ inputs.issue_key ~ '. Check the JIRA_API_TOKEN secret, jira_base_url, and that the issue key is correct.'} | toJson }}

  - id: summary
    type: io.kestra.plugin.core.log.Log
    message: "Jira issue comment silence nudge gate complete for {{ inputs.issue_key
      }}: {{ outputs.evaluate.values.comment_count }} comment(s), severity {{
      outputs.evaluate.values.severity }}."

errors:
  - id: alert_flow_failure
    type: io.kestra.plugin.slack.notifications.SlackIncomingWebhook
    url: "{{ secret('SLACK_WEBHOOK_URL') }}"
    payload: |
      {{ {'text': 'Jira issue comment silence nudge gate failed (execution ' ~ execution.id ~ '). Check the logs.'} | toJson }}

triggers:
  - id: daily
    type: io.kestra.plugin.core.trigger.Schedule
    description: Shipped disabled. Enable once JIRA_API_TOKEN and SLACK_WEBHOOK_URL
      are set and issue_key points at a real issue; confirm_nudge stays false by
      default so silence alerts a human rather than auto-commenting until you
      deliberately opt in.
    cron: "0 9 * * *"
    disabled: true
    inputs:
      jira_base_url: "https://your-domain.atlassian.net"
      jira_username: "<your-jira-account-email>"
      issue_key: "PROJ-123"
      silence_days: 7
      confirm_nudge: false