@oneuptime/common 11.3.25 → 11.3.28

package/Models/DatabaseModels/MigrationFailure.ts

@@ -0,0 +1,170 @@
+import BaseModel from "./DatabaseBaseModel/DatabaseBaseModel";
+import ColumnAccessControl from "../../Types/Database/AccessControl/ColumnAccessControl";
+import TableAccessControl from "../../Types/Database/AccessControl/TableAccessControl";
+import ColumnLength from "../../Types/Database/ColumnLength";
+import ColumnType from "../../Types/Database/ColumnType";
+import TableColumn from "../../Types/Database/TableColumn";
+import TableColumnType from "../../Types/Database/TableColumnType";
+import TableMetadata from "../../Types/Database/TableMetadata";
+import IconProp from "../../Types/Icon/IconProp";
+import { Column, Entity, Index } from "typeorm";
+
+/*
+ * Persistent log of migrations that FAILED to apply. Neither the TypeORM
+ * `migrations` table nor the `DataMigrations` table records failures — they
+ * only ever gain a row on SUCCESS — so without this table the admin health
+ * page can show that a migration is pending but never why. Each failed attempt
+ * appends a row here (name + redacted error + when it ran), which the
+ * migration-status endpoint reads back to explain a stuck / behind schema.
+ *
+ * Access control is empty (root-only): rows are written by the migration
+ * runners and read by the master-admin health endpoint via raw/isRoot queries,
+ * never by tenant users, so no CRUD API is exposed.
+ */
+@TableAccessControl({
+  create: [],
+  read: [],
+  delete: [],
+  update: [],
+})
+@TableMetadata({
+  tableName: "MigrationFailure",
+  singularName: "Migration Failure",
+  pluralName: "Migration Failures",
+  icon: IconProp.Database,
+  tableDescription:
+    "Log of database migrations that failed to apply, with the error and when they were attempted.",
+})
+@Entity({
+  name: "MigrationFailure",
+})
+export default class MigrationFailure extends BaseModel {
+  @ColumnAccessControl({
+    create: [],
+    read: [],
+    update: [],
+  })
+  @Index()
+  @TableColumn({
+    required: true,
+    type: TableColumnType.ShortText,
+    title: "Migration Name",
+    description: "Name of the migration that failed to apply.",
+  })
+  @Column({
+    nullable: false,
+    type: ColumnType.ShortText,
+    length: ColumnLength.ShortText,
+  })
+  public migrationName?: string = undefined;
+
+  @ColumnAccessControl({
+    create: [],
+    read: [],
+    update: [],
+  })
+  @Index()
+  @TableColumn({
+    required: true,
+    type: TableColumnType.ShortText,
+    title: "Migration Type",
+    description:
+      "Which runner the migration belongs to: 'PostgresSchema' (TypeORM schema migration) or 'DataMigration' (ClickHouse / data backfill).",
+  })
+  @Column({
+    nullable: false,
+    type: ColumnType.ShortText,
+    length: ColumnLength.ShortText,
+  })
+  public migrationType?: string = undefined;
+
+  @ColumnAccessControl({
+    create: [],
+    read: [],
+    update: [],
+  })
+  @TableColumn({
+    required: true,
+    type: TableColumnType.VeryLongText,
+    title: "Error Message",
+    description:
+      "The error message from the failed attempt (credentials redacted).",
+  })
+  @Column({
+    nullable: false,
+    type: ColumnType.VeryLongText,
+  })
+  public errorMessage?: string = undefined;
+
+  @ColumnAccessControl({
+    create: [],
+    read: [],
+    update: [],
+  })
+  @TableColumn({
+    required: false,
+    type: TableColumnType.VeryLongText,
+    title: "Error Stack",
+    description:
+      "The stack trace from the failed attempt, if available (credentials redacted).",
+  })
+  @Column({
+    nullable: true,
+    type: ColumnType.VeryLongText,
+  })
+  public errorStack?: string = undefined;
+
+  @ColumnAccessControl({
+    create: [],
+    read: [],
+    update: [],
+  })
+  @Index()
+  @TableColumn({
+    required: true,
+    type: TableColumnType.Date,
+    title: "Attempted At",
+    description: "When this migration was attempted (and failed).",
+  })
+  @Column({
+    nullable: false,
+    type: ColumnType.Date,
+  })
+  public attemptedAt?: Date = undefined;
+
+  @ColumnAccessControl({
+    create: [],
+    read: [],
+    update: [],
+  })
+  @TableColumn({
+    required: false,
+    type: TableColumnType.ShortText,
+    title: "Host Name",
+    description: "Hostname / pod that ran the failed migration.",
+  })
+  @Column({
+    nullable: true,
+    type: ColumnType.ShortText,
+    length: ColumnLength.ShortText,
+  })
+  public hostName?: string = undefined;
+
+  @ColumnAccessControl({
+    create: [],
+    read: [],
+    update: [],
+  })
+  @TableColumn({
+    required: false,
+    type: TableColumnType.ShortText,
+    title: "App Version",
+    description: "Build / app version that attempted the migration.",
+  })
+  @Column({
+    nullable: true,
+    type: ColumnType.ShortText,
+    length: ColumnLength.ShortText,
+  })
+  public appVersion?: string = undefined;
+}

package/Models/DatabaseModels/OnCallDutyPolicyExecutionLog.ts

@@ -1017,7 +1017,16 @@ export default class OnCallDutyPolicyExecutionLog extends BaseModel {
       Permission.OnCallMember,
       Permission.CreateProjectOnCallDutyPolicyExecutionLog,
     ],
-    read: [],
+    read: [
+      Permission.ProjectOwner,
+      Permission.ProjectAdmin,
+      Permission.ProjectMember,
+      Permission.Viewer,
+      Permission.OnCallAdmin,
+      Permission.OnCallMember,
+      Permission.OnCallViewer,
+      Permission.ReadProjectOnCallDutyPolicyExecutionLog,
+    ],
     update: [],
   })
   @Index()
@@ -1180,7 +1189,16 @@ export default class OnCallDutyPolicyExecutionLog extends BaseModel {
       Permission.OnCallMember,
       Permission.CreateProjectOnCallDutyPolicyExecutionLog,
     ],
-    read: [],
+    read: [
+      Permission.ProjectOwner,
+      Permission.ProjectAdmin,
+      Permission.ProjectMember,
+      Permission.Viewer,
+      Permission.OnCallAdmin,
+      Permission.OnCallMember,
+      Permission.OnCallViewer,
+      Permission.ReadProjectOnCallDutyPolicyExecutionLog,
+    ],
     update: [],
   })
   @Index()
@@ -1201,6 +1219,37 @@ export default class OnCallDutyPolicyExecutionLog extends BaseModel {
   })
   public onCallPolicyExecutionRepeatCount?: number = undefined;
 
+  @ColumnAccessControl({
+    create: [],
+    read: [
+      Permission.ProjectOwner,
+      Permission.ProjectAdmin,
+      Permission.ProjectMember,
+      Permission.Viewer,
+      Permission.OnCallAdmin,
+      Permission.OnCallMember,
+      Permission.OnCallViewer,
+      Permission.ReadProjectOnCallDutyPolicyExecutionLog,
+    ],
+    update: [],
+  })
+  @TableColumn({
+    type: TableColumnType.Number,
+    required: true,
+    isDefaultValueColumn: true,
+    title: "Schedule Gap Retry Count",
+    description:
+      "How many times the current escalation rule has been re-sampled because its target schedule(s) momentarily had no on-call user.",
+    defaultValue: 0,
+    example: 0,
+  })
+  @Column({
+    type: ColumnType.Number,
+    nullable: false,
+    default: 0,
+  })
+  public scheduleGapRetryCount?: number = undefined;
+
   @ColumnAccessControl({
     create: [
       Permission.ProjectOwner,

package/Models/DatabaseModels/OnCallDutyPolicySchedule.ts

@@ -20,6 +20,7 @@ import TenantColumn from "../../Types/Database/TenantColumn";
 import IconProp from "../../Types/Icon/IconProp";
 import ObjectID from "../../Types/ObjectID";
 import Permission from "../../Types/Permission";
+import Timezone from "../../Types/Timezone";
 import {
   Column,
   Entity,
@@ -319,6 +320,49 @@ export default class OnCallDutyPolicySchedule extends BaseModel {
   })
   public description?: string = undefined;
 
+  @ColumnAccessControl({
+    create: [
+      Permission.ProjectOwner,
+      Permission.ProjectAdmin,
+      Permission.ProjectMember,
+      Permission.OnCallAdmin,
+      Permission.OnCallMember,
+      Permission.CreateProjectOnCallDutyPolicySchedule,
+    ],
+    read: [
+      Permission.ProjectOwner,
+      Permission.ProjectAdmin,
+      Permission.ProjectMember,
+      Permission.Viewer,
+      Permission.OnCallAdmin,
+      Permission.OnCallMember,
+      Permission.OnCallViewer,
+      Permission.ReadProjectOnCallDutyPolicySchedule,
+    ],
+    update: [
+      Permission.ProjectOwner,
+      Permission.ProjectAdmin,
+      Permission.ProjectMember,
+      Permission.OnCallAdmin,
+      Permission.OnCallMember,
+      Permission.EditProjectOnCallDutyPolicySchedule,
+    ],
+  })
+  @TableColumn({
+    required: false,
+    type: TableColumnType.ShortText,
+    title: "Timezone",
+    description:
+      "IANA timezone this schedule's restriction and hand-off wall-clock times are interpreted in. When empty, times are interpreted in the server's local timezone (legacy behavior).",
+    example: "America/New_York",
+  })
+  @Column({
+    nullable: true,
+    type: ColumnType.ShortText,
+    length: ColumnLength.ShortText,
+  })
+  public timezone?: Timezone = undefined;
+
   @Index()
   @ColumnAccessControl({
     create: [

package/Models/DatabaseModels/OnCallDutyPolicyScheduleLayer.ts

@@ -52,11 +52,17 @@ import { Column, Entity, Index, JoinColumn, ManyToOne } from "typeorm";
   delete: [
     Permission.ProjectOwner,
     Permission.ProjectAdmin,
+    Permission.ProjectMember,
+    Permission.OnCallAdmin,
+    Permission.OnCallMember,
     Permission.DeleteOnCallDutyPolicyScheduleLayer,
   ],
   update: [
     Permission.ProjectOwner,
     Permission.ProjectAdmin,
+    Permission.ProjectMember,
+    Permission.OnCallAdmin,
+    Permission.OnCallMember,
     Permission.EditOnCallDutyPolicyScheduleLayer,
   ],
 })

package/Models/DatabaseModels/OnCallDutyPolicyScheduleLayerUser.ts

@@ -50,11 +50,17 @@ import { Column, Entity, Index, JoinColumn, ManyToOne } from "typeorm";
   delete: [
     Permission.ProjectOwner,
     Permission.ProjectAdmin,
+    Permission.ProjectMember,
+    Permission.OnCallAdmin,
+    Permission.OnCallMember,
     Permission.DeleteOnCallDutyPolicyScheduleLayer,
   ],
   update: [
     Permission.ProjectOwner,
     Permission.ProjectAdmin,
+    Permission.ProjectMember,
+    Permission.OnCallAdmin,
+    Permission.OnCallMember,
     Permission.EditOnCallDutyPolicyScheduleLayer,
   ],
 })

package/Models/DatabaseModels/OnCallDutyPolicyTimeLog.ts

@@ -458,7 +458,7 @@ export default class OnCallDutyPolicyTimeLog extends BaseModel {
     {
       eager: false,
       nullable: true,
-      onDelete: "SET NULL",
+      onDelete: "CASCADE",
       orphanedRowAction: "nullify",
     },
   )

package/Models/DatabaseModels/OnCallDutyPolicyUserOverride.ts

@@ -357,7 +357,7 @@ export default class OnCallDutyPolicyUserOverride extends BaseModel {
     {
       eager: false,
       nullable: true,
-      onDelete: "SET NULL",
+      onDelete: "CASCADE",
       orphanedRowAction: "nullify",
     },
   )
@@ -435,7 +435,7 @@ export default class OnCallDutyPolicyUserOverride extends BaseModel {
     {
       eager: false,
       nullable: true,
-      onDelete: "SET NULL",
+      onDelete: "CASCADE",
       orphanedRowAction: "nullify",
     },
   )