Neon Serverless Branch Lifecycle and Compute Sentinel

id: neon-branch-lifecycle-and-compute-sentinel
namespace: company.finops

tasks:
  - id: list_neon_branches
    type: io.kestra.plugin.fs.http.Request
    uri: "https://console.neon.tech/api/v2/projects/{{ secret('NEON_PROJECT_ID')
      }}/branches"
    method: GET
    headers:
      Authorization: "Bearer {{ secret('NEON_API_KEY') }}"
      Accept: "application/json"

  - id: audit_stale_branches
    type: io.kestra.plugin.scripts.python.Script
    containerImage: python:3.12-slim
    script: |
      import json
      from datetime import datetime, timezone, timedelta
      from kestra import Kestra

      raw_data = """{{ outputs.list_neon_branches.body }}"""
      try:
          parsed = json.loads(raw_data) if raw_data else {}
      except Exception:
          parsed = {}

      branches = parsed.get("branches", [])
      now = datetime.now(timezone.utc)
      stale_branches = []

      # Audit preview/ephemeral branches older than TTL threshold (default 48 hours)
      for b in branches:
          b_name = b.get("name", "")
          # Skip primary/main production branch
          if b.get("primary", False) or b_name in ["main", "master", "production"]:
              continue

          created_str = b.get("created_at", "")
          if created_str:
              try:
                  created_dt = datetime.fromisoformat(created_str.replace("Z", "+00:00"))
                  age_hours = (now - created_dt).total_seconds() / 3600
                  if age_hours > 48:
                      stale_branches.append({
                          "id": b.get("id"),
                          "name": b_name,
                          "age_hours": round(age_hours, 1)
                      })
              except Exception:
                  pass

      print(f"Total branches inspected: {len(branches)}. Stale candidates: {len(stale_branches)}")
      Kestra.outputs({
          "total_count": len(branches),
          "stale_count": len(stale_branches),
          "stale_branches": stale_branches,
          "has_stale": len(stale_branches) > 0
      })

  - id: check_stale_threshold
    type: io.kestra.plugin.core.flow.If
    condition: "{{ outputs.audit_stale_branches.vars.has_stale }}"
    then:
      - id: notify_slack_finops
        type: io.kestra.plugin.slack.notifications.SlackIncomingWebhook
        url: "{{ secret('SLACK_WEBHOOK_URL') }}"
        payload: |
          {
            "text": ":money_with_wings: *Neon Ephemeral Branch FinOps Alert*\nProject ID: `{{ secret('NEON_PROJECT_ID') }}`\nDetected `{{ outputs.audit_stale_branches.vars.stale_count }}` orphaned feature branch(es) older than 48 hours.\nReview and prune to optimize compute costs."
          }

  - id: log_finops_audit
    type: io.kestra.plugin.core.log.Log
    message: "Neon branch lifecycle sentinel check completed. Inspected: {{
      outputs.audit_stale_branches.vars.total_count }}, Stale: {{
      outputs.audit_stale_branches.vars.stale_count }}"

triggers:
  - id: daily_finops_schedule
    type: io.kestra.plugin.core.trigger.Schedule
    cron: "0 8 * * *"