@oneuptime/common 10.2.1 → 10.2.3

package/build/dist/Server/Services/UserWebhookService.js

@@ -0,0 +1,190 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+import DatabaseService from "./DatabaseService";
+import UserNotificationRuleService from "./UserNotificationRuleService";
+import LIMIT_MAX from "../../Types/Database/LimitMax";
+import BadDataException from "../../Types/Exception/BadDataException";
+import Model from "../../Models/DatabaseModels/UserWebhook";
+import URL from "../../Types/API/URL";
+import logger from "../Utils/Logger";
+import CaptureSpan from "../Utils/Telemetry/CaptureSpan";
+export class Service extends DatabaseService {
+    constructor() {
+        super(Model);
+    }
+    async onBeforeCreate(createBy) {
+        if (!createBy.data.webhookUrl) {
+            throw new BadDataException("Webhook URL is required");
+        }
+        if (!createBy.data.name) {
+            throw new BadDataException("Webhook name is required");
+        }
+        this.validateWebhookUrl(createBy.data.webhookUrl);
+        return {
+            createBy,
+            carryForward: null,
+        };
+    }
+    async onCreateSuccess(_onCreate, createdItem) {
+        /* Webhooks skip verification, so default on-call rules are seeded at create time. */
+        if (createdItem.projectId && createdItem.userId && createdItem.id) {
+            try {
+                await UserNotificationRuleService.addDefaultNotificationRulesForVerifiedMethod({
+                    projectId: createdItem.projectId,
+                    userId: createdItem.userId,
+                    notificationMethod: {
+                        userWebhookId: createdItem.id,
+                    },
+                });
+            }
+            catch (err) {
+                logger.error(err);
+            }
+        }
+        return createdItem;
+    }
+    async onBeforeDelete(deleteBy) {
+        const itemsToDelete = await this.findBy({
+            query: deleteBy.query,
+            select: {
+                _id: true,
+                projectId: true,
+            },
+            skip: 0,
+            limit: LIMIT_MAX,
+            props: {
+                isRoot: true,
+            },
+        });
+        for (const item of itemsToDelete) {
+            await UserNotificationRuleService.deleteBy({
+                query: {
+                    userWebhookId: item.id,
+                    projectId: item.projectId,
+                },
+                limit: LIMIT_MAX,
+                skip: 0,
+                props: {
+                    isRoot: true,
+                },
+            });
+        }
+        return {
+            deleteBy,
+            carryForward: null,
+        };
+    }
+    validateWebhookUrl(rawUrl) {
+        let parsed;
+        try {
+            parsed = URL.fromString(rawUrl);
+        }
+        catch (_a) {
+            throw new BadDataException("Webhook URL is not a valid URL");
+        }
+        const protocolValue = parsed.protocol.toString().toLowerCase();
+        if (protocolValue !== "http://" && protocolValue !== "https://") {
+            throw new BadDataException("Webhook URL must use http or https protocol.");
+        }
+        const hostname = parsed.hostname.hostname.toLowerCase();
+        if (!hostname) {
+            throw new BadDataException("Webhook URL must include a host.");
+        }
+        if (isBlockedHostnameLiteral(hostname)) {
+            throw new BadDataException("Webhook URL points to a private, loopback, or link-local address and is not allowed.");
+        }
+    }
+}
+__decorate([
+    CaptureSpan(),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object]),
+    __metadata("design:returntype", Promise)
+], Service.prototype, "onBeforeCreate", null);
+__decorate([
+    CaptureSpan(),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object, Model]),
+    __metadata("design:returntype", Promise)
+], Service.prototype, "onCreateSuccess", null);
+__decorate([
+    CaptureSpan(),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object]),
+    __metadata("design:returntype", Promise)
+], Service.prototype, "onBeforeDelete", null);
+function isBlockedHostnameLiteral(hostname) {
+    if (hostname === "localhost" ||
+        hostname.endsWith(".localhost") ||
+        hostname === "metadata.google.internal") {
+        return true;
+    }
+    // IPv4 literal check
+    const ipv4Match = hostname.match(/^(\d{1,3})\.(\d{1,3})\.(\d{1,3})\.(\d{1,3})$/);
+    if (ipv4Match) {
+        const octets = [
+            Number(ipv4Match[1]),
+            Number(ipv4Match[2]),
+            Number(ipv4Match[3]),
+            Number(ipv4Match[4]),
+        ];
+        if (octets.some((o) => {
+            return o < 0 || o > 255;
+        })) {
+            return true;
+        }
+        // 0.0.0.0/8
+        if (octets[0] === 0) {
+            return true;
+        }
+        // 127.0.0.0/8 loopback
+        if (octets[0] === 127) {
+            return true;
+        }
+        // 10.0.0.0/8
+        if (octets[0] === 10) {
+            return true;
+        }
+        // 172.16.0.0/12
+        if (octets[0] === 172 && (octets[1] & 0xf0) === 16) {
+            return true;
+        }
+        // 192.168.0.0/16
+        if (octets[0] === 192 && octets[1] === 168) {
+            return true;
+        }
+        // 169.254.0.0/16 link-local (incl. cloud metadata)
+        if (octets[0] === 169 && octets[1] === 254) {
+            return true;
+        }
+        // 100.64.0.0/10 carrier-grade NAT
+        if (octets[0] === 100 && (octets[1] & 0xc0) === 64) {
+            return true;
+        }
+        return false;
+    }
+    // IPv6 literal — block loopback, link-local, unique-local
+    if (hostname.includes(":")) {
+        const stripped = hostname.replace(/^\[|\]$/g, "");
+        if (stripped === "::1" || stripped === "::") {
+            return true;
+        }
+        if (stripped.startsWith("fe80:") || stripped.startsWith("fe80::")) {
+            return true;
+        }
+        if (IPV6_UNIQUE_LOCAL_REGEX.test(stripped)) {
+            return true;
+        }
+    }
+    return false;
+}
+const IPV6_UNIQUE_LOCAL_REGEX = /^f[cd][0-9a-f]{2}:/;
+export default new Service();
+//# sourceMappingURL=UserWebhookService.js.map

package/build/dist/Server/Services/UserWebhookService.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"UserWebhookService.js","sourceRoot":"","sources":["../../../../Server/Services/UserWebhookService.ts"],"names":[],"mappings":";;;;;;;;;AAGA,OAAO,eAAe,MAAM,mBAAmB,CAAC;AAChD,OAAO,2BAA2B,MAAM,+BAA+B,CAAC;AACxE,OAAO,SAAS,MAAM,+BAA+B,CAAC;AACtD,OAAO,gBAAgB,MAAM,wCAAwC,CAAC;AACtE,OAAO,KAAK,MAAM,yCAAyC,CAAC;AAC5D,OAAO,GAAG,MAAM,qBAAqB,CAAC;AACtC,OAAO,MAAM,MAAM,iBAAiB,CAAC;AACrC,OAAO,WAAW,MAAM,gCAAgC,CAAC;AAEzD,MAAM,OAAO,OAAQ,SAAQ,eAAsB;IACjD;QACE,KAAK,CAAC,KAAK,CAAC,CAAC;IACf,CAAC;IAGwB,AAAN,KAAK,CAAC,cAAc,CACrC,QAAyB;QAEzB,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;YAC9B,MAAM,IAAI,gBAAgB,CAAC,yBAAyB,CAAC,CAAC;QACxD,CAAC;QAED,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;YACxB,MAAM,IAAI,gBAAgB,CAAC,0BAA0B,CAAC,CAAC;QACzD,CAAC;QAED,IAAI,CAAC,kBAAkB,CAAC,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAElD,OAAO;YACL,QAAQ;YACR,YAAY,EAAE,IAAI;SACnB,CAAC;IACJ,CAAC;IAGwB,AAAN,KAAK,CAAC,eAAe,CACtC,SAA0B,EAC1B,WAAkB;QAElB,qFAAqF;QACrF,IAAI,WAAW,CAAC,SAAS,IAAI,WAAW,CAAC,MAAM,IAAI,WAAW,CAAC,EAAE,EAAE,CAAC;YAClE,IAAI,CAAC;gBACH,MAAM,2BAA2B,CAAC,4CAA4C,CAC5E;oBACE,SAAS,EAAE,WAAW,CAAC,SAAS;oBAChC,MAAM,EAAE,WAAW,CAAC,MAAM;oBAC1B,kBAAkB,EAAE;wBAClB,aAAa,EAAE,WAAW,CAAC,EAAE;qBAC9B;iBACF,CACF,CAAC;YACJ,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACpB,CAAC;QACH,CAAC;QAED,OAAO,WAAW,CAAC;IACrB,CAAC;IAGwB,AAAN,KAAK,CAAC,cAAc,CACrC,QAAyB;QAEzB,MAAM,aAAa,GAAiB,MAAM,IAAI,CAAC,MAAM,CAAC;YACpD,KAAK,EAAE,QAAQ,CAAC,KAAK;YACrB,MAAM,EAAE;gBACN,GAAG,EAAE,IAAI;gBACT,SAAS,EAAE,IAAI;aAChB;YACD,IAAI,EAAE,CAAC;YACP,KAAK,EAAE,SAAS;YAChB,KAAK,EAAE;gBACL,MAAM,EAAE,IAAI;aACb;SACF,CAAC,CAAC;QAEH,KAAK,MAAM,IAAI,IAAI,aAAa,EAAE,CAAC;YACjC,MAAM,2BAA2B,CAAC,QAAQ,CAAC;gBACzC,KAAK,EAAE;oBACL,aAAa,EAAE,IAAI,CAAC,EAAG;oBACvB,SAAS,EAAE,IAAI,CAAC,SAAU;iBAC3B;gBACD,KAAK,EAAE,SAAS;gBAChB,IAAI,EAAE,CAAC;gBACP,KAAK,EAAE;oBACL,MAAM,EAAE,IAAI;iBACb;aACF,CAAC,CAAC;QACL,CAAC;QAED,OAAO;YACL,QAAQ;YACR,YAAY,EAAE,IAAI;SACnB,CAAC;IACJ,CAAC;IAEO,kBAAkB,CAAC,MAAc;QACvC,IAAI,MAAW,CAAC;QAChB,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;QAClC,CAAC;QAAC,WAAM,CAAC;YACP,MAAM,IAAI,gBAAgB,CAAC,gCAAgC,CAAC,CAAC;QAC/D,CAAC;QAED,MAAM,aAAa,GAAW,MAAM,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC,WAAW,EAAE,CAAC;QACvE,IAAI,aAAa,KAAK,SAAS,IAAI,aAAa,KAAK,UAAU,EAAE,CAAC;YAChE,MAAM,IAAI,gBAAgB,CACxB,8CAA8C,CAC/C,CAAC;QACJ,CAAC;QAED,MAAM,QAAQ,GAAW,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;QAEhE,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,IAAI,gBAAgB,CAAC,kCAAkC,CAAC,CAAC;QACjE,CAAC;QAED,IAAI,wBAAwB,CAAC,QAAQ,CAAC,EAAE,CAAC;YACvC,MAAM,IAAI,gBAAgB,CACxB,sFAAsF,CACvF,CAAC;QACJ,CAAC;IACH,CAAC;CACF;AA5G0B;IADxB,WAAW,EAAE;;;;6CAkBb;AAGwB;IADxB,WAAW,EAAE;;6CAGC,KAAK;;8CAoBnB;AAGwB;IADxB,WAAW,EAAE;;;;6CAmCb;AA+BH,SAAS,wBAAwB,CAAC,QAAgB;IAChD,IACE,QAAQ,KAAK,WAAW;QACxB,QAAQ,CAAC,QAAQ,CAAC,YAAY,CAAC;QAC/B,QAAQ,KAAK,0BAA0B,EACvC,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,qBAAqB;IACrB,MAAM,SAAS,GAA4B,QAAQ,CAAC,KAAK,CACvD,8CAA8C,CAC/C,CAAC;IACF,IAAI,SAAS,EAAE,CAAC;QACd,MAAM,MAAM,GAAkB;YAC5B,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;YACpB,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;YACpB,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;YACpB,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;SACrB,CAAC;QAEF,IACE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAS,EAAE,EAAE;YACxB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC;QAC1B,CAAC,CAAC,EACF,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QAED,YAAY;QACZ,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;YACpB,OAAO,IAAI,CAAC;QACd,CAAC;QACD,uBAAuB;QACvB,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;YACtB,OAAO,IAAI,CAAC;QACd,CAAC;QACD,aAAa;QACb,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC;YACrB,OAAO,IAAI,CAAC;QACd,CAAC;QACD,gBAAgB;QAChB,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAE,GAAG,IAAI,CAAC,KAAK,EAAE,EAAE,CAAC;YACpD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,iBAAiB;QACjB,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;YAC3C,OAAO,IAAI,CAAC;QACd,CAAC;QACD,mDAAmD;QACnD,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;YAC3C,OAAO,IAAI,CAAC;QACd,CAAC;QACD,kCAAkC;QAClC,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAE,GAAG,IAAI,CAAC,KAAK,EAAE,EAAE,CAAC;YACpD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,0DAA0D;IAC1D,IAAI,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QAC3B,MAAM,QAAQ,GAAW,QAAQ,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;QAC1D,IAAI,QAAQ,KAAK,KAAK,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;YAC5C,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,QAAQ,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YAClE,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,uBAAuB,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC3C,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,uBAAuB,GAAW,oBAAoB,CAAC;AAE7D,eAAe,IAAI,OAAO,EAAE,CAAC"}

package/build/dist/Server/Services/WebhookLogService.js

@@ -0,0 +1,13 @@
+import { IsBillingEnabled } from "../EnvironmentConfig";
+import DatabaseService from "./DatabaseService";
+import Model from "../../Models/DatabaseModels/WebhookLog";
+export class Service extends DatabaseService {
+    constructor() {
+        super(Model);
+        if (IsBillingEnabled) {
+            this.hardDeleteItemsOlderThanInDays("createdAt", 3);
+        }
+    }
+}
+export default new Service();
+//# sourceMappingURL=WebhookLogService.js.map

package/build/dist/Server/Services/WebhookLogService.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"WebhookLogService.js","sourceRoot":"","sources":["../../../../Server/Services/WebhookLogService.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AACxD,OAAO,eAAe,MAAM,mBAAmB,CAAC;AAChD,OAAO,KAAK,MAAM,wCAAwC,CAAC;AAE3D,MAAM,OAAO,OAAQ,SAAQ,eAAsB;IACjD;QACE,KAAK,CAAC,KAAK,CAAC,CAAC;QAEb,IAAI,gBAAgB,EAAE,CAAC;YACrB,IAAI,CAAC,8BAA8B,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;QACtD,CAAC;IACH,CAAC;CACF;AAED,eAAe,IAAI,OAAO,EAAE,CAAC"}

package/build/dist/Server/Services/WebhookService.js

@@ -0,0 +1,92 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+import { AppApiHostname } from "../EnvironmentConfig";
+import ClusterKeyAuthorization from "../Middleware/ClusterKeyAuthorization";
+import BaseService from "./BaseService";
+import Protocol from "../../Types/API/Protocol";
+import Route from "../../Types/API/Route";
+import URL from "../../Types/API/URL";
+import API from "../../Utils/API";
+import CaptureSpan from "../Utils/Telemetry/CaptureSpan";
+export class WebhookService extends BaseService {
+    constructor() {
+        super();
+    }
+    async sendWebhook(message, options = {}) {
+        const body = {
+            url: message.url,
+            eventType: message.eventType,
+            payload: message.payload,
+        };
+        if (message.secret) {
+            body["secret"] = message.secret;
+        }
+        if (options.projectId) {
+            body["projectId"] = options.projectId.toString();
+        }
+        if (options.userOnCallLogTimelineId) {
+            body["userOnCallLogTimelineId"] =
+                options.userOnCallLogTimelineId.toString();
+        }
+        if (options.incidentId) {
+            body["incidentId"] = options.incidentId.toString();
+        }
+        if (options.alertId) {
+            body["alertId"] = options.alertId.toString();
+        }
+        if (options.monitorId) {
+            body["monitorId"] = options.monitorId.toString();
+        }
+        if (options.scheduledMaintenanceId) {
+            body["scheduledMaintenanceId"] =
+                options.scheduledMaintenanceId.toString();
+        }
+        if (options.statusPageId) {
+            body["statusPageId"] = options.statusPageId.toString();
+        }
+        if (options.statusPageAnnouncementId) {
+            body["statusPageAnnouncementId"] =
+                options.statusPageAnnouncementId.toString();
+        }
+        if (options.userId) {
+            body["userId"] = options.userId.toString();
+        }
+        if (options.onCallPolicyId) {
+            body["onCallPolicyId"] = options.onCallPolicyId.toString();
+        }
+        if (options.onCallPolicyEscalationRuleId) {
+            body["onCallPolicyEscalationRuleId"] =
+                options.onCallPolicyEscalationRuleId.toString();
+        }
+        if (options.onCallDutyPolicyExecutionLogTimelineId) {
+            body["onCallDutyPolicyExecutionLogTimelineId"] =
+                options.onCallDutyPolicyExecutionLogTimelineId.toString();
+        }
+        if (options.onCallScheduleId) {
+            body["onCallScheduleId"] = options.onCallScheduleId.toString();
+        }
+        if (options.teamId) {
+            body["teamId"] = options.teamId.toString();
+        }
+        return await API.post({
+            url: new URL(Protocol.HTTP, AppApiHostname, new Route("/api/notification/webhook/send")),
+            data: body,
+            headers: Object.assign({}, ClusterKeyAuthorization.getClusterKeyHeaders()),
+        });
+    }
+}
+__decorate([
+    CaptureSpan(),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object, Object]),
+    __metadata("design:returntype", Promise)
+], WebhookService.prototype, "sendWebhook", null);
+export default new WebhookService();
+//# sourceMappingURL=WebhookService.js.map

package/build/dist/Server/Services/WebhookService.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"WebhookService.js","sourceRoot":"","sources":["../../../../Server/Services/WebhookService.ts"],"names":[],"mappings":";;;;;;;;;AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,uBAAuB,MAAM,uCAAuC,CAAC;AAC5E,OAAO,WAAW,MAAM,eAAe,CAAC;AAIxC,OAAO,QAAQ,MAAM,0BAA0B,CAAC;AAChD,OAAO,KAAK,MAAM,uBAAuB,CAAC;AAC1C,OAAO,GAAG,MAAM,qBAAqB,CAAC;AAItC,OAAO,GAAG,MAAM,iBAAiB,CAAC;AAClC,OAAO,WAAW,MAAM,gCAAgC,CAAC;AAEzD,MAAM,OAAO,cAAe,SAAQ,WAAW;IAC7C;QACE,KAAK,EAAE,CAAC;IACV,CAAC;IAGY,AAAN,KAAK,CAAC,WAAW,CACtB,OAAuB,EACvB,UAeI,EAAE;QAEN,MAAM,IAAI,GAAe;YACvB,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,OAAO,EAAE,OAAO,CAAC,OAAO;SACzB,CAAC;QAEF,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;YACnB,IAAI,CAAC,QAAQ,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC;QAClC,CAAC;QAED,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;YACtB,IAAI,CAAC,WAAW,CAAC,GAAG,OAAO,CAAC,SAAS,CAAC,QAAQ,EAAE,CAAC;QACnD,CAAC;QAED,IAAI,OAAO,CAAC,uBAAuB,EAAE,CAAC;YACpC,IAAI,CAAC,yBAAyB,CAAC;gBAC7B,OAAO,CAAC,uBAAuB,CAAC,QAAQ,EAAE,CAAC;QAC/C,CAAC;QAED,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;YACvB,IAAI,CAAC,YAAY,CAAC,GAAG,OAAO,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QACrD,CAAC;QAED,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;YACpB,IAAI,CAAC,SAAS,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;QAC/C,CAAC;QAED,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;YACtB,IAAI,CAAC,WAAW,CAAC,GAAG,OAAO,CAAC,SAAS,CAAC,QAAQ,EAAE,CAAC;QACnD,CAAC;QAED,IAAI,OAAO,CAAC,sBAAsB,EAAE,CAAC;YACnC,IAAI,CAAC,wBAAwB,CAAC;gBAC5B,OAAO,CAAC,sBAAsB,CAAC,QAAQ,EAAE,CAAC;QAC9C,CAAC;QAED,IAAI,OAAO,CAAC,YAAY,EAAE,CAAC;YACzB,IAAI,CAAC,cAAc,CAAC,GAAG,OAAO,CAAC,YAAY,CAAC,QAAQ,EAAE,CAAC;QACzD,CAAC;QAED,IAAI,OAAO,CAAC,wBAAwB,EAAE,CAAC;YACrC,IAAI,CAAC,0BAA0B,CAAC;gBAC9B,OAAO,CAAC,wBAAwB,CAAC,QAAQ,EAAE,CAAC;QAChD,CAAC;QAED,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;YACnB,IAAI,CAAC,QAAQ,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;QAC7C,CAAC;QAED,IAAI,OAAO,CAAC,cAAc,EAAE,CAAC;YAC3B,IAAI,CAAC,gBAAgB,CAAC,GAAG,OAAO,CAAC,cAAc,CAAC,QAAQ,EAAE,CAAC;QAC7D,CAAC;QAED,IAAI,OAAO,CAAC,4BAA4B,EAAE,CAAC;YACzC,IAAI,CAAC,8BAA8B,CAAC;gBAClC,OAAO,CAAC,4BAA4B,CAAC,QAAQ,EAAE,CAAC;QACpD,CAAC;QAED,IAAI,OAAO,CAAC,sCAAsC,EAAE,CAAC;YACnD,IAAI,CAAC,wCAAwC,CAAC;gBAC5C,OAAO,CAAC,sCAAsC,CAAC,QAAQ,EAAE,CAAC;QAC9D,CAAC;QAED,IAAI,OAAO,CAAC,gBAAgB,EAAE,CAAC;YAC7B,IAAI,CAAC,kBAAkB,CAAC,GAAG,OAAO,CAAC,gBAAgB,CAAC,QAAQ,EAAE,CAAC;QACjE,CAAC;QAED,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;YACnB,IAAI,CAAC,QAAQ,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;QAC7C,CAAC;QAED,OAAO,MAAM,GAAG,CAAC,IAAI,CAAoB;YACvC,GAAG,EAAE,IAAI,GAAG,CACV,QAAQ,CAAC,IAAI,EACb,cAAc,EACd,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAC5C;YACD,IAAI,EAAE,IAAI;YACV,OAAO,oBACF,uBAAuB,CAAC,oBAAoB,EAAE,CAClD;SACF,CAAC,CAAC;IACL,CAAC;CACF;AAtGc;IADZ,WAAW,EAAE;;;;iDAsGb;AAGH,eAAe,IAAI,cAAc,EAAE,CAAC"}

package/build/dist/Types/OnCallDutyPolicy/UserOverrideUtil.js

@@ -0,0 +1,86 @@
+import OneUptimeDate from "../Date";
+/*
+ * CalendarEvent extends JSONObject so it accepts string-indexed metadata.
+ * We attach the override info under a known key so downstream consumers can
+ * detect and render the substitution distinctly.
+ */
+export const OVERRIDE_META_KEY = "_override";
+export default class UserOverrideUtil {
+    /**
+     * Returns true when this override should be applied on top of the schedule
+     * events. Global overrides always apply; policy-scoped overrides apply to
+     * any schedule, since a schedule's calendar shows coverage information for
+     * every user who could potentially be paged through it.
+     */
+    static isOverrideApplicable(_override) {
+        return true;
+    }
+    static applyOverridesToEvents(data) {
+        const applicable = data.overrides.filter(UserOverrideUtil.isOverrideApplicable);
+        if (applicable.length === 0) {
+            return data.events;
+        }
+        let working = data.events;
+        for (const override of applicable) {
+            const next = [];
+            for (const event of working) {
+                next.push(...UserOverrideUtil.splitEventByOverride(event, override));
+            }
+            working = next;
+        }
+        return UserOverrideUtil.reassignEventIds(working);
+    }
+    static splitEventByOverride(event, override) {
+        if (event.title !== override.overrideUserId) {
+            return [event];
+        }
+        // Override window doesn't overlap event window at all.
+        if (OneUptimeDate.isAfter(override.startsAt, event.end) ||
+            OneUptimeDate.isSame(override.startsAt, event.end) ||
+            OneUptimeDate.isBefore(override.endsAt, event.start) ||
+            OneUptimeDate.isSame(override.endsAt, event.start)) {
+            return [event];
+        }
+        const overrideStart = OneUptimeDate.isAfter(override.startsAt, event.start)
+            ? override.startsAt
+            : event.start;
+        const overrideEnd = OneUptimeDate.isBefore(override.endsAt, event.end)
+            ? override.endsAt
+            : event.end;
+        const segments = [];
+        // Segment before the override window — original user remains on call.
+        if (OneUptimeDate.isBefore(event.start, overrideStart)) {
+            segments.push(Object.assign(Object.assign({}, event), { end: overrideStart }));
+        }
+        // Override window — substitute user takes over.
+        const meta = {
+            isOverride: true,
+            originalUserId: override.overrideUserId,
+            overrideUserId: override.routeAlertsToUserId,
+            overrideStartsAt: override.startsAt,
+            overrideEndsAt: override.endsAt,
+        };
+        segments.push(Object.assign(Object.assign({}, event), { start: overrideStart, end: overrideEnd, title: override.routeAlertsToUserId, [OVERRIDE_META_KEY]: meta }));
+        // Segment after the override window — original user resumes.
+        if (OneUptimeDate.isAfter(event.end, overrideEnd)) {
+            segments.push(Object.assign(Object.assign({}, event), { start: overrideEnd }));
+        }
+        return segments;
+    }
+    static reassignEventIds(events) {
+        let id = 1;
+        return events.map((event) => {
+            return Object.assign(Object.assign({}, event), { id: id++ });
+        });
+    }
+    static getOverrideMeta(event) {
+        const meta = event[OVERRIDE_META_KEY];
+        if (meta &&
+            typeof meta === "object" &&
+            meta.isOverride === true) {
+            return meta;
+        }
+        return null;
+    }
+}
+//# sourceMappingURL=UserOverrideUtil.js.map

package/build/dist/Types/OnCallDutyPolicy/UserOverrideUtil.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"UserOverrideUtil.js","sourceRoot":"","sources":["../../../../Types/OnCallDutyPolicy/UserOverrideUtil.ts"],"names":[],"mappings":"AACA,OAAO,aAAa,MAAM,SAAS,CAAC;AAmBpC;;;;GAIG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAW,WAAW,CAAC;AAErD,MAAM,CAAC,OAAO,OAAO,gBAAgB;IACnC;;;;;OAKG;IACI,MAAM,CAAC,oBAAoB,CAAC,SAA6B;QAC9D,OAAO,IAAI,CAAC;IACd,CAAC;IAEM,MAAM,CAAC,sBAAsB,CAAC,IAGpC;QACC,MAAM,UAAU,GAA8B,IAAI,CAAC,SAAS,CAAC,MAAM,CACjE,gBAAgB,CAAC,oBAAoB,CACtC,CAAC;QAEF,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC5B,OAAO,IAAI,CAAC,MAAM,CAAC;QACrB,CAAC;QAED,IAAI,OAAO,GAAyB,IAAI,CAAC,MAAM,CAAC;QAEhD,KAAK,MAAM,QAAQ,IAAI,UAAU,EAAE,CAAC;YAClC,MAAM,IAAI,GAAyB,EAAE,CAAC;YACtC,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;gBAC5B,IAAI,CAAC,IAAI,CAAC,GAAG,gBAAgB,CAAC,oBAAoB,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC;YACvE,CAAC;YACD,OAAO,GAAG,IAAI,CAAC;QACjB,CAAC;QAED,OAAO,gBAAgB,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC;IACpD,CAAC;IAEO,MAAM,CAAC,oBAAoB,CACjC,KAAoB,EACpB,QAA4B;QAE5B,IAAI,KAAK,CAAC,KAAK,KAAK,QAAQ,CAAC,cAAc,EAAE,CAAC;YAC5C,OAAO,CAAC,KAAK,CAAC,CAAC;QACjB,CAAC;QAED,uDAAuD;QACvD,IACE,aAAa,CAAC,OAAO,CAAC,QAAQ,CAAC,QAAQ,EAAE,KAAK,CAAC,GAAG,CAAC;YACnD,aAAa,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,EAAE,KAAK,CAAC,GAAG,CAAC;YAClD,aAAa,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,EAAE,KAAK,CAAC,KAAK,CAAC;YACpD,aAAa,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,KAAK,CAAC,KAAK,CAAC,EAClD,CAAC;YACD,OAAO,CAAC,KAAK,CAAC,CAAC;QACjB,CAAC;QAED,MAAM,aAAa,GAAS,aAAa,CAAC,OAAO,CAC/C,QAAQ,CAAC,QAAQ,EACjB,KAAK,CAAC,KAAK,CACZ;YACC,CAAC,CAAC,QAAQ,CAAC,QAAQ;YACnB,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC;QAEhB,MAAM,WAAW,GAAS,aAAa,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,EAAE,KAAK,CAAC,GAAG,CAAC;YAC1E,CAAC,CAAC,QAAQ,CAAC,MAAM;YACjB,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC;QAEd,MAAM,QAAQ,GAAyB,EAAE,CAAC;QAE1C,sEAAsE;QACtE,IAAI,aAAa,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,EAAE,aAAa,CAAC,EAAE,CAAC;YACvD,QAAQ,CAAC,IAAI,iCACR,KAAK,KACR,GAAG,EAAE,aAAa,IAClB,CAAC;QACL,CAAC;QAED,gDAAgD;QAChD,MAAM,IAAI,GAAsB;YAC9B,UAAU,EAAE,IAAI;YAChB,cAAc,EAAE,QAAQ,CAAC,cAAc;YACvC,cAAc,EAAE,QAAQ,CAAC,mBAAmB;YAC5C,gBAAgB,EAAE,QAAQ,CAAC,QAAQ;YACnC,cAAc,EAAE,QAAQ,CAAC,MAAM;SAChC,CAAC;QAEF,QAAQ,CAAC,IAAI,iCACR,KAAK,KACR,KAAK,EAAE,aAAa,EACpB,GAAG,EAAE,WAAW,EAChB,KAAK,EAAE,QAAQ,CAAC,mBAAmB,EACnC,CAAC,iBAAiB,CAAC,EAAE,IAAwB,IAC7C,CAAC;QAEH,6DAA6D;QAC7D,IAAI,aAAa,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE,WAAW,CAAC,EAAE,CAAC;YAClD,QAAQ,CAAC,IAAI,iCACR,KAAK,KACR,KAAK,EAAE,WAAW,IAClB,CAAC;QACL,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC;IAEO,MAAM,CAAC,gBAAgB,CAC7B,MAA4B;QAE5B,IAAI,EAAE,GAAW,CAAC,CAAC;QACnB,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC,KAAoB,EAAE,EAAE;YACzC,uCAAY,KAAK,KAAE,EAAE,EAAE,EAAE,EAAE,IAAG;QAChC,CAAC,CAAC,CAAC;IACL,CAAC;IAEM,MAAM,CAAC,eAAe,CAC3B,KAAoB;QAEpB,MAAM,IAAI,GAAa,KAA4C,CACjE,iBAAiB,CAClB,CAAC;QACF,IACE,IAAI;YACJ,OAAO,IAAI,KAAK,QAAQ;YACvB,IAAiC,CAAC,UAAU,KAAK,IAAI,EACtD,CAAC;YACD,OAAO,IAAyB,CAAC;QACnC,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;CACF"}

package/build/dist/Types/Permission.js

@@ -214,6 +214,7 @@ var Permission;
     Permission["ReadEmailLog"] = "ReadEmailLog";
     Permission["ReadCallLog"] = "ReadCallLog";
     Permission["ReadPushLog"] = "ReadPushLog";
+    Permission["ReadWebhookLog"] = "ReadWebhookLog";
     Permission["ReadWorkspaceNotificationLog"] = "ReadWorkspaceNotificationLog";
     Permission["ReadLlmLog"] = "ReadLlmLog";
     Permission["ReadProjectSCIMLog"] = "ReadProjectSCIMLog";
@@ -414,6 +415,10 @@ var Permission;
     Permission["DeleteProjectSSO"] = "DeleteProjectSSO";
     Permission["EditProjectSSO"] = "EditProjectSSO";
     Permission["ReadProjectSSO"] = "ReadProjectSSO";
+    Permission["CreateProjectOIDC"] = "CreateProjectOIDC";
+    Permission["DeleteProjectOIDC"] = "DeleteProjectOIDC";
+    Permission["EditProjectOIDC"] = "EditProjectOIDC";
+    Permission["ReadProjectOIDC"] = "ReadProjectOIDC";
     Permission["CreateStatusPageSSO"] = "CreateStatusPageSSO";
     Permission["DeleteStatusPageSSO"] = "DeleteStatusPageSSO";
     Permission["EditStatusPageSSO"] = "EditStatusPageSSO";
@@ -2522,6 +2527,42 @@ export class PermissionHelper {
                 isRolePermission: false,
                 group: PermissionGroup.Settings,
             },
+            {
+                permission: Permission.CreateProjectOIDC,
+                title: "Create Project OIDC",
+                description: "This permission can create Project OIDC in this project.",
+                isAssignableToTenant: true,
+                isAccessControlPermission: false,
+                isRolePermission: false,
+                group: PermissionGroup.Settings,
+            },
+            {
+                permission: Permission.DeleteProjectOIDC,
+                title: "Delete Project OIDC",
+                description: "This permission can delete Project OIDC in this project.",
+                isAssignableToTenant: true,
+                isAccessControlPermission: false,
+                isRolePermission: false,
+                group: PermissionGroup.Settings,
+            },
+            {
+                permission: Permission.EditProjectOIDC,
+                title: "Edit Project OIDC",
+                description: "This permission can edit Project OIDC in this project.",
+                isAssignableToTenant: true,
+                isAccessControlPermission: false,
+                isRolePermission: false,
+                group: PermissionGroup.Settings,
+            },
+            {
+                permission: Permission.ReadProjectOIDC,
+                title: "Read Project OIDC",
+                description: "This permission can read Project OIDC in this project.",
+                isAssignableToTenant: true,
+                isAccessControlPermission: false,
+                isRolePermission: false,
+                group: PermissionGroup.Settings,
+            },
             {
                 permission: Permission.CreateStatusPageSSO,
                 title: "Create Status Page SSO",
@@ -4119,6 +4160,15 @@ export class PermissionHelper {
                 isRolePermission: false,
                 group: PermissionGroup.NotificationLog,
             },
+            {
+                permission: Permission.ReadWebhookLog,
+                title: "Read Webhook Log",
+                description: "This permission can read outbound Webhook request Logs of this project.",
+                isAssignableToTenant: true,
+                isAccessControlPermission: false,
+                isRolePermission: false,
+                group: PermissionGroup.NotificationLog,
+            },
             {
                 permission: Permission.ReadWorkspaceNotificationLog,
                 title: "Read Workspace Notification Log",