Salma/advanced hunting

[salmaaliia]

No description provided.

[Copilot]

Pull request overview

This PR introduces an “Advanced Hunting” capability by adding endpoints to execute Elasticsearch queries (ES|QL/KQL) and CRUD “saved hunting queries” persisted in PostgreSQL (Prisma), plus optional seed tooling and mock data to populate log sources/events and initial hunting queries.

Changes:

• Added a new Hunting module (routes/controllers/services/types/validation) and registered it under /hunting.
• Implemented a shared query runner for ES|QL/KQL execution with result shaping, plus shared DTO/result types and validation.
• Added Prisma schema + migration for HuntingQuery, and added seed script + mock dataset for local/demo environments.

Reviewed changes

Copilot reviewed 14 out of 14 changed files in this pull request and generated 4 comments.

Show a summary per file

File	Description
src/scripts/seedMockData.ts	Adds a script to seed Postgres log sources + hunting queries and index mock events into Elasticsearch.
src/scripts/mockData.json	Provides mock log sources, events, and default hunting queries used by the seed script.
src/routes/index.ts	Registers the new /hunting router.
src/modules/Hunting/validation/hunting.validation.ts	Adds Zod validation schemas for hunting query execution and saved queries.
src/modules/Hunting/types/types.ts	Adds DTO/types for hunting execution and saved-query CRUD/listing.
src/modules/Hunting/services/hunting.service.ts	Implements Elasticsearch execution and Postgres CRUD/pagination for saved queries.
src/modules/Hunting/routes/hunting.routes.ts	Defines authenticated hunting endpoints for execution and saved-query CRUD.
src/modules/Hunting/controllers/hunting.controller.ts	Adds request handlers for executing queries and managing saved queries.
src/common/validation/query.validation.ts	Adds shared body validation for query execution payloads.
src/common/utils/queryRunner.ts	Implements ES
src/common/interfaces/query.types.ts	Adds shared interfaces for query execution DTO and normalized results.
prisma/schema.prisma	Adds the HuntingQuery Prisma model.
prisma/migrations/20260712145451_add_hunting_query_model/migration.sql	Creates the HuntingQuery table + unique index (and currently also creates an unrelated enum).
docker-compose.yml	Exposes Postgres on host port 5433 while keeping container port 5432 for the API container.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[Copilot]

Pull request overview

Copilot reviewed 14 out of 14 changed files in this pull request and generated 3 comments.