@oneuptime/common 11.4.1 → 11.5.0

package/Types/Monitor/SnmpMonitor/SnmpVendorTemplate.ts

@@ -0,0 +1,173 @@
+import SnmpOid from "./SnmpOid";
+
+/*
+ * Prebuilt SNMP health-OID profiles for common network vendors. Applying a
+ * template appends its OIDs (CPU, memory, temperature) to a Network Device
+ * monitor so those values are collected and alertable without the user
+ * having to look up MIBs. OIDs are the ".0" / indexed scalar instances that
+ * these platforms actually expose; users can prune or extend the list after
+ * applying.
+ */
+export interface SnmpVendorTemplate {
+  id: string;
+  label: string;
+  description: string;
+  oids: Array<SnmpOid>;
+}
+
+const CISCO: SnmpVendorTemplate = {
+  id: "cisco-ios",
+  label: "Cisco IOS / IOS-XE",
+  description:
+    "CPU (5-min average), memory pool used/free, and chassis temperature for Cisco IOS and IOS-XE devices.",
+  oids: [
+    {
+      oid: "1.3.6.1.4.1.9.9.109.1.1.1.1.8.1",
+      name: "CPU 5-min %",
+      description: "cpmCPUTotal5minRev — 5-minute CPU utilization.",
+    },
+    {
+      oid: "1.3.6.1.4.1.9.9.48.1.1.1.5.1",
+      name: "Memory Used (bytes)",
+      description: "ciscoMemoryPoolUsed — processor pool bytes in use.",
+    },
+    {
+      oid: "1.3.6.1.4.1.9.9.48.1.1.1.6.1",
+      name: "Memory Free (bytes)",
+      description: "ciscoMemoryPoolFree — processor pool bytes free.",
+    },
+    {
+      oid: "1.3.6.1.4.1.9.9.13.1.3.1.3.1",
+      name: "Temperature (C)",
+      description: "ciscoEnvMonTemperatureValue — first temperature sensor.",
+    },
+  ],
+};
+
+const MIKROTIK: SnmpVendorTemplate = {
+  id: "mikrotik-routeros",
+  label: "MikroTik RouterOS",
+  description:
+    "CPU load, CPU temperature, and voltage from the MikroTik health MIB, plus standard Host Resources CPU.",
+  oids: [
+    {
+      oid: "1.3.6.1.2.1.25.3.3.1.2.1",
+      name: "CPU Load %",
+      description: "hrProcessorLoad — first processor.",
+    },
+    {
+      oid: "1.3.6.1.4.1.14988.1.1.3.10.0",
+      name: "CPU Temperature (C)",
+      description: "mtxrHlProcessorTemperature.",
+    },
+    {
+      oid: "1.3.6.1.4.1.14988.1.1.3.8.0",
+      name: "Voltage (dV)",
+      description: "mtxrHlVoltage — decivolts.",
+    },
+  ],
+};
+
+const UBIQUITI: SnmpVendorTemplate = {
+  id: "ubiquiti-edgeos",
+  label: "Ubiquiti EdgeOS / UniFi",
+  description:
+    "CPU load and memory usage via the standard Host Resources MIB, which Ubiquiti EdgeOS and UniFi expose.",
+  oids: [
+    {
+      oid: "1.3.6.1.2.1.25.3.3.1.2.1",
+      name: "CPU Load %",
+      description: "hrProcessorLoad — first processor.",
+    },
+    {
+      oid: "1.3.6.1.4.1.2021.4.5.0",
+      name: "Total RAM (KB)",
+      description: "memTotalReal — UCD-SNMP-MIB.",
+    },
+    {
+      oid: "1.3.6.1.4.1.2021.4.6.0",
+      name: "Available RAM (KB)",
+      description: "memAvailReal — UCD-SNMP-MIB.",
+    },
+  ],
+};
+
+const HOST_RESOURCES: SnmpVendorTemplate = {
+  id: "host-resources-mib",
+  label: "Generic (Host Resources MIB)",
+  description:
+    "Vendor-neutral CPU load and memory from HOST-RESOURCES-MIB — works on most Linux/BSD-based network appliances (pfSense, OPNsense, and many others).",
+  oids: [
+    {
+      oid: "1.3.6.1.2.1.25.3.3.1.2.1",
+      name: "CPU Load %",
+      description: "hrProcessorLoad — first processor.",
+    },
+    {
+      oid: "1.3.6.1.4.1.2021.4.5.0",
+      name: "Total RAM (KB)",
+      description: "memTotalReal — UCD-SNMP-MIB.",
+    },
+    {
+      oid: "1.3.6.1.4.1.2021.4.6.0",
+      name: "Available RAM (KB)",
+      description: "memAvailReal — UCD-SNMP-MIB.",
+    },
+    {
+      oid: "1.3.6.1.4.1.2021.10.1.3.1",
+      name: "Load Average (1 min)",
+      description: "laLoad.1 — UCD-SNMP-MIB.",
+    },
+  ],
+};
+
+export const SnmpVendorTemplates: Array<SnmpVendorTemplate> = [
+  HOST_RESOURCES,
+  CISCO,
+  MIKROTIK,
+  UBIQUITI,
+];
+
+export default class SnmpVendorTemplateUtil {
+  public static getAll(): Array<SnmpVendorTemplate> {
+    return SnmpVendorTemplates;
+  }
+
+  public static getById(id: string): SnmpVendorTemplate | undefined {
+    return SnmpVendorTemplates.find((template: SnmpVendorTemplate) => {
+      return template.id === id;
+    });
+  }
+
+  /*
+   * Merges a template's OIDs into an existing list, skipping any OID already
+   * present so applying a template twice (or applying two overlapping ones)
+   * never duplicates rows.
+   */
+  public static mergeOids(
+    existing: Array<SnmpOid>,
+    templateId: string,
+  ): Array<SnmpOid> {
+    const template: SnmpVendorTemplate | undefined =
+      SnmpVendorTemplateUtil.getById(templateId);
+
+    if (!template) {
+      return existing;
+    }
+
+    const seen: Set<string> = new Set(
+      existing.map((oid: SnmpOid) => {
+        return oid.oid;
+      }),
+    );
+
+    const merged: Array<SnmpOid> = [...existing];
+    for (const oid of template.oids) {
+      if (!seen.has(oid.oid)) {
+        merged.push(oid);
+        seen.add(oid.oid);
+      }
+    }
+    return merged;
+  }
+}

package/Types/Permission.ts

@@ -511,6 +511,11 @@ enum Permission {
   EditDockerHostOwnerRule = "EditDockerHostOwnerRule",
   ReadDockerHostOwnerRule = "ReadDockerHostOwnerRule",
 
+  CreateNetworkDeviceOwnerRule = "CreateNetworkDeviceOwnerRule",
+  DeleteNetworkDeviceOwnerRule = "DeleteNetworkDeviceOwnerRule",
+  EditNetworkDeviceOwnerRule = "EditNetworkDeviceOwnerRule",
+  ReadNetworkDeviceOwnerRule = "ReadNetworkDeviceOwnerRule",
+
   // Podman Host Owner Rule Permissions
   CreatePodmanHostOwnerRule = "CreatePodmanHostOwnerRule",
   DeletePodmanHostOwnerRule = "DeletePodmanHostOwnerRule",
@@ -523,6 +528,11 @@ enum Permission {
   EditDockerHostLabelRule = "EditDockerHostLabelRule",
   ReadDockerHostLabelRule = "ReadDockerHostLabelRule",
 
+  CreateNetworkDeviceLabelRule = "CreateNetworkDeviceLabelRule",
+  DeleteNetworkDeviceLabelRule = "DeleteNetworkDeviceLabelRule",
+  EditNetworkDeviceLabelRule = "EditNetworkDeviceLabelRule",
+  ReadNetworkDeviceLabelRule = "ReadNetworkDeviceLabelRule",
+
   // Podman Host Label Rule Permissions
   CreatePodmanHostLabelRule = "CreatePodmanHostLabelRule",
   DeletePodmanHostLabelRule = "DeletePodmanHostLabelRule",
@@ -1167,6 +1177,16 @@ enum Permission {
   EditDockerHost = "EditDockerHost",
   ReadDockerHost = "ReadDockerHost",
 
+  CreateNetworkDevice = "CreateNetworkDevice",
+  DeleteNetworkDevice = "DeleteNetworkDevice",
+  EditNetworkDevice = "EditNetworkDevice",
+  ReadNetworkDevice = "ReadNetworkDevice",
+
+  CreateNetworkDeviceDiscoveryScan = "CreateNetworkDeviceDiscoveryScan",
+  DeleteNetworkDeviceDiscoveryScan = "DeleteNetworkDeviceDiscoveryScan",
+  EditNetworkDeviceDiscoveryScan = "EditNetworkDeviceDiscoveryScan",
+  ReadNetworkDeviceDiscoveryScan = "ReadNetworkDeviceDiscoveryScan",
+
   CreatePodmanHost = "CreatePodmanHost",
   DeletePodmanHost = "DeletePodmanHost",
   EditPodmanHost = "EditPodmanHost",
@@ -1177,6 +1197,11 @@ enum Permission {
   EditDockerHostOwnerTeam = "EditDockerHostOwnerTeam",
   ReadDockerHostOwnerTeam = "ReadDockerHostOwnerTeam",
 
+  CreateNetworkDeviceOwnerTeam = "CreateNetworkDeviceOwnerTeam",
+  DeleteNetworkDeviceOwnerTeam = "DeleteNetworkDeviceOwnerTeam",
+  EditNetworkDeviceOwnerTeam = "EditNetworkDeviceOwnerTeam",
+  ReadNetworkDeviceOwnerTeam = "ReadNetworkDeviceOwnerTeam",
+
   CreatePodmanHostOwnerTeam = "CreatePodmanHostOwnerTeam",
   DeletePodmanHostOwnerTeam = "DeletePodmanHostOwnerTeam",
   EditPodmanHostOwnerTeam = "EditPodmanHostOwnerTeam",
@@ -1187,6 +1212,11 @@ enum Permission {
   EditDockerHostOwnerUser = "EditDockerHostOwnerUser",
   ReadDockerHostOwnerUser = "ReadDockerHostOwnerUser",
 
+  CreateNetworkDeviceOwnerUser = "CreateNetworkDeviceOwnerUser",
+  DeleteNetworkDeviceOwnerUser = "DeleteNetworkDeviceOwnerUser",
+  EditNetworkDeviceOwnerUser = "EditNetworkDeviceOwnerUser",
+  ReadNetworkDeviceOwnerUser = "ReadNetworkDeviceOwnerUser",
+
   CreatePodmanHostOwnerUser = "CreatePodmanHostOwnerUser",
   DeletePodmanHostOwnerUser = "DeletePodmanHostOwnerUser",
   EditPodmanHostOwnerUser = "EditPodmanHostOwnerUser",
@@ -1206,6 +1236,11 @@ enum Permission {
   EditIoTFleet = "EditIoTFleet",
   ReadIoTFleet = "ReadIoTFleet",
 
+  CreateIoTDeviceCredential = "CreateIoTDeviceCredential",
+  DeleteIoTDeviceCredential = "DeleteIoTDeviceCredential",
+  EditIoTDeviceCredential = "EditIoTDeviceCredential",
+  ReadIoTDeviceCredential = "ReadIoTDeviceCredential",
+
   CreateCephCluster = "CreateCephCluster",
   DeleteCephCluster = "DeleteCephCluster",
   EditCephCluster = "EditCephCluster",
@@ -7503,6 +7538,84 @@ export class PermissionHelper {
         isRolePermission: false,
         group: PermissionGroup.Telemetry,
       },
+      {
+        permission: Permission.CreateNetworkDevice,
+        title: "Create Network Device",
+        description:
+          "This permission can create Network Device in this project.",
+        isAssignableToTenant: true,
+        isAccessControlPermission: false,
+        isRolePermission: false,
+        group: PermissionGroup.Monitor,
+      },
+      {
+        permission: Permission.DeleteNetworkDevice,
+        title: "Delete Network Device",
+        description:
+          "This permission can delete Network Device of this project.",
+        isAssignableToTenant: true,
+        isAccessControlPermission: true,
+        isRolePermission: false,
+        group: PermissionGroup.Monitor,
+      },
+      {
+        permission: Permission.EditNetworkDevice,
+        title: "Edit Network Device",
+        description: "This permission can edit Network Device of this project.",
+        isAssignableToTenant: true,
+        isAccessControlPermission: true,
+        isRolePermission: false,
+        group: PermissionGroup.Monitor,
+      },
+      {
+        permission: Permission.ReadNetworkDevice,
+        title: "Read Network Device",
+        description: "This permission can read Network Device of this project.",
+        isAssignableToTenant: true,
+        isAccessControlPermission: true,
+        isRolePermission: false,
+        group: PermissionGroup.Monitor,
+      },
+      {
+        permission: Permission.CreateNetworkDeviceDiscoveryScan,
+        title: "Create Network Device Discovery Scan",
+        description:
+          "This permission can create Network Device Discovery Scan in this project.",
+        isAssignableToTenant: true,
+        isAccessControlPermission: false,
+        isRolePermission: false,
+        group: PermissionGroup.Monitor,
+      },
+      {
+        permission: Permission.DeleteNetworkDeviceDiscoveryScan,
+        title: "Delete Network Device Discovery Scan",
+        description:
+          "This permission can delete Network Device Discovery Scan of this project.",
+        isAssignableToTenant: true,
+        isAccessControlPermission: true,
+        isRolePermission: false,
+        group: PermissionGroup.Monitor,
+      },
+      {
+        permission: Permission.EditNetworkDeviceDiscoveryScan,
+        title: "Edit Network Device Discovery Scan",
+        description:
+          "This permission can edit Network Device Discovery Scan of this project.",
+        isAssignableToTenant: true,
+        isAccessControlPermission: true,
+        isRolePermission: false,
+        group: PermissionGroup.Monitor,
+      },
+      {
+        permission: Permission.ReadNetworkDeviceDiscoveryScan,
+        title: "Read Network Device Discovery Scan",
+        description:
+          "This permission can read Network Device Discovery Scan of this project.",
+        isAssignableToTenant: true,
+        isAccessControlPermission: true,
+        isRolePermission: false,
+        group: PermissionGroup.Monitor,
+      },
       {
         permission: Permission.CreatePodmanHost,
         title: "Create Podman Host",
@@ -7658,6 +7771,47 @@ export class PermissionHelper {
         group: PermissionGroup.Telemetry,
       },
 
+      {
+        permission: Permission.CreateIoTDeviceCredential,
+        title: "Create IoT Device Credential",
+        description:
+          "This permission can create IoT Device Credentials in this project.",
+        isAssignableToTenant: true,
+        isAccessControlPermission: false,
+        isRolePermission: false,
+        group: PermissionGroup.Telemetry,
+      },
+      {
+        permission: Permission.DeleteIoTDeviceCredential,
+        title: "Delete IoT Device Credential",
+        description:
+          "This permission can delete IoT Device Credentials of this project.",
+        isAssignableToTenant: true,
+        isAccessControlPermission: false,
+        isRolePermission: false,
+        group: PermissionGroup.Telemetry,
+      },
+      {
+        permission: Permission.EditIoTDeviceCredential,
+        title: "Edit IoT Device Credential",
+        description:
+          "This permission can edit IoT Device Credentials of this project.",
+        isAssignableToTenant: true,
+        isAccessControlPermission: false,
+        isRolePermission: false,
+        group: PermissionGroup.Telemetry,
+      },
+      {
+        permission: Permission.ReadIoTDeviceCredential,
+        title: "Read IoT Device Credential",
+        description:
+          "This permission can read IoT Device Credentials of this project.",
+        isAssignableToTenant: true,
+        isAccessControlPermission: false,
+        isRolePermission: false,
+        group: PermissionGroup.Telemetry,
+      },
+
       {
         permission: Permission.CreateCephCluster,
         title: "Create Ceph Cluster",
@@ -8731,6 +8885,16 @@ export class PermissionHelper {
         isRolePermission: false,
         group: PermissionGroup.Telemetry,
       },
+      {
+        permission: Permission.CreateNetworkDeviceOwnerTeam,
+        title: "Create Network Device Team Owner",
+        description:
+          "This permission can create Network Device Team Owner of this project.",
+        isAssignableToTenant: true,
+        isAccessControlPermission: false,
+        isRolePermission: false,
+        group: PermissionGroup.Telemetry,
+      },
       {
         permission: Permission.DeleteDockerHostOwnerTeam,
         title: "Delete Docker Host Team Owner",
@@ -8741,6 +8905,16 @@ export class PermissionHelper {
         isRolePermission: false,
         group: PermissionGroup.Telemetry,
       },
+      {
+        permission: Permission.DeleteNetworkDeviceOwnerTeam,
+        title: "Delete Network Device Team Owner",
+        description:
+          "This permission can delete Network Device Team Owner of this project.",
+        isAssignableToTenant: true,
+        isAccessControlPermission: false,
+        isRolePermission: false,
+        group: PermissionGroup.Telemetry,
+      },
       {
         permission: Permission.EditDockerHostOwnerTeam,
         title: "Edit Docker Host Team Owner",
@@ -8751,6 +8925,16 @@ export class PermissionHelper {
         isRolePermission: false,
         group: PermissionGroup.Telemetry,
       },
+      {
+        permission: Permission.EditNetworkDeviceOwnerTeam,
+        title: "Edit Network Device Team Owner",
+        description:
+          "This permission can edit Network Device Team Owner of this project.",
+        isAssignableToTenant: true,
+        isAccessControlPermission: false,
+        isRolePermission: false,
+        group: PermissionGroup.Telemetry,
+      },
       {
         permission: Permission.ReadDockerHostOwnerTeam,
         title: "Read Docker Host Team Owner",
@@ -8761,6 +8945,16 @@ export class PermissionHelper {
         isRolePermission: false,
         group: PermissionGroup.Telemetry,
       },
+      {
+        permission: Permission.ReadNetworkDeviceOwnerTeam,
+        title: "Read Network Device Team Owner",
+        description:
+          "This permission can read Network Device Team Owner of this project.",
+        isAssignableToTenant: true,
+        isAccessControlPermission: false,
+        isRolePermission: false,
+        group: PermissionGroup.Telemetry,
+      },
 
       {
         permission: Permission.CreatePodmanHostOwnerTeam,
@@ -8813,6 +9007,16 @@ export class PermissionHelper {
         isRolePermission: false,
         group: PermissionGroup.Telemetry,
       },
+      {
+        permission: Permission.CreateNetworkDeviceOwnerUser,
+        title: "Create Network Device User Owner",
+        description:
+          "This permission can create Network Device User Owner of this project.",
+        isAssignableToTenant: true,
+        isAccessControlPermission: false,
+        isRolePermission: false,
+        group: PermissionGroup.Telemetry,
+      },
       {
         permission: Permission.DeleteDockerHostOwnerUser,
         title: "Delete Docker Host User Owner",
@@ -8823,6 +9027,16 @@ export class PermissionHelper {
         isRolePermission: false,
         group: PermissionGroup.Telemetry,
       },
+      {
+        permission: Permission.DeleteNetworkDeviceOwnerUser,
+        title: "Delete Network Device User Owner",
+        description:
+          "This permission can delete Network Device User Owner of this project.",
+        isAssignableToTenant: true,
+        isAccessControlPermission: false,
+        isRolePermission: false,
+        group: PermissionGroup.Telemetry,
+      },
       {
         permission: Permission.EditDockerHostOwnerUser,
         title: "Edit Docker Host User Owner",
@@ -8833,6 +9047,16 @@ export class PermissionHelper {
         isRolePermission: false,
         group: PermissionGroup.Telemetry,
       },
+      {
+        permission: Permission.EditNetworkDeviceOwnerUser,
+        title: "Edit Network Device User Owner",
+        description:
+          "This permission can edit Network Device User Owner of this project.",
+        isAssignableToTenant: true,
+        isAccessControlPermission: false,
+        isRolePermission: false,
+        group: PermissionGroup.Telemetry,
+      },
       {
         permission: Permission.ReadDockerHostOwnerUser,
         title: "Read Docker Host User Owner",
@@ -8843,6 +9067,16 @@ export class PermissionHelper {
         isRolePermission: false,
         group: PermissionGroup.Telemetry,
       },
+      {
+        permission: Permission.ReadNetworkDeviceOwnerUser,
+        title: "Read Network Device User Owner",
+        description:
+          "This permission can read Network Device User Owner of this project.",
+        isAssignableToTenant: true,
+        isAccessControlPermission: false,
+        isRolePermission: false,
+        group: PermissionGroup.Telemetry,
+      },
 
       {
         permission: Permission.CreatePodmanHostOwnerUser,
@@ -10617,6 +10851,16 @@ export class PermissionHelper {
         isRolePermission: false,
         group: PermissionGroup.Telemetry,
       },
+      {
+        permission: Permission.CreateNetworkDeviceOwnerRule,
+        title: "Create Network Device Owner Rule",
+        description:
+          "This permission can create Network Device Owner Rules in this project.",
+        isAssignableToTenant: true,
+        isAccessControlPermission: false,
+        isRolePermission: false,
+        group: PermissionGroup.Telemetry,
+      },
       {
         permission: Permission.DeleteDockerHostOwnerRule,
         title: "Delete Docker Host Owner Rule",
@@ -10627,6 +10871,16 @@ export class PermissionHelper {
         isRolePermission: false,
         group: PermissionGroup.Telemetry,
       },
+      {
+        permission: Permission.DeleteNetworkDeviceOwnerRule,
+        title: "Delete Network Device Owner Rule",
+        description:
+          "This permission can delete Network Device Owner Rules of this project.",
+        isAssignableToTenant: true,
+        isAccessControlPermission: false,
+        isRolePermission: false,
+        group: PermissionGroup.Telemetry,
+      },
       {
         permission: Permission.EditDockerHostOwnerRule,
         title: "Edit Docker Host Owner Rule",
@@ -10637,6 +10891,16 @@ export class PermissionHelper {
         isRolePermission: false,
         group: PermissionGroup.Telemetry,
       },
+      {
+        permission: Permission.EditNetworkDeviceOwnerRule,
+        title: "Edit Network Device Owner Rule",
+        description:
+          "This permission can edit Network Device Owner Rules of this project.",
+        isAssignableToTenant: true,
+        isAccessControlPermission: false,
+        isRolePermission: false,
+        group: PermissionGroup.Telemetry,
+      },
       {
         permission: Permission.ReadDockerHostOwnerRule,
         title: "Read Docker Host Owner Rule",
@@ -10647,6 +10911,16 @@ export class PermissionHelper {
         isRolePermission: false,
         group: PermissionGroup.Telemetry,
       },
+      {
+        permission: Permission.ReadNetworkDeviceOwnerRule,
+        title: "Read Network Device Owner Rule",
+        description:
+          "This permission can read Network Device Owner Rules of this project.",
+        isAssignableToTenant: true,
+        isAccessControlPermission: false,
+        isRolePermission: false,
+        group: PermissionGroup.Telemetry,
+      },
 
       // Podman Host Owner Rule Permissions
       {
@@ -10701,6 +10975,16 @@ export class PermissionHelper {
         isRolePermission: false,
         group: PermissionGroup.Telemetry,
       },
+      {
+        permission: Permission.CreateNetworkDeviceLabelRule,
+        title: "Create Network Device Label Rule",
+        description:
+          "This permission can create Network Device Label Rules in this project.",
+        isAssignableToTenant: true,
+        isAccessControlPermission: false,
+        isRolePermission: false,
+        group: PermissionGroup.Telemetry,
+      },
       {
         permission: Permission.DeleteDockerHostLabelRule,
         title: "Delete Docker Host Label Rule",
@@ -10711,6 +10995,16 @@ export class PermissionHelper {
         isRolePermission: false,
         group: PermissionGroup.Telemetry,
       },
+      {
+        permission: Permission.DeleteNetworkDeviceLabelRule,
+        title: "Delete Network Device Label Rule",
+        description:
+          "This permission can delete Network Device Label Rules of this project.",
+        isAssignableToTenant: true,
+        isAccessControlPermission: false,
+        isRolePermission: false,
+        group: PermissionGroup.Telemetry,
+      },
       {
         permission: Permission.EditDockerHostLabelRule,
         title: "Edit Docker Host Label Rule",
@@ -10721,6 +11015,16 @@ export class PermissionHelper {
         isRolePermission: false,
         group: PermissionGroup.Telemetry,
       },
+      {
+        permission: Permission.EditNetworkDeviceLabelRule,
+        title: "Edit Network Device Label Rule",
+        description:
+          "This permission can edit Network Device Label Rules of this project.",
+        isAssignableToTenant: true,
+        isAccessControlPermission: false,
+        isRolePermission: false,
+        group: PermissionGroup.Telemetry,
+      },
       {
         permission: Permission.ReadDockerHostLabelRule,
         title: "Read Docker Host Label Rule",
@@ -10731,6 +11035,16 @@ export class PermissionHelper {
         isRolePermission: false,
         group: PermissionGroup.Telemetry,
       },
+      {
+        permission: Permission.ReadNetworkDeviceLabelRule,
+        title: "Read Network Device Label Rule",
+        description:
+          "This permission can read Network Device Label Rules of this project.",
+        isAssignableToTenant: true,
+        isAccessControlPermission: false,
+        isRolePermission: false,
+        group: PermissionGroup.Telemetry,
+      },
 
       // Podman Host Label Rule Permissions
       {

package/Types/Probe/ProbeMonitorResponse.ts

@@ -7,6 +7,7 @@ import CustomCodeMonitorResponse from "../Monitor/CustomCodeMonitor/CustomCodeMo
 import SslMonitorResponse from "../Monitor/SSLMonitor/SslMonitorResponse";
 import SyntheticMonitorResponse from "../Monitor/SyntheticMonitors/SyntheticMonitorResponse";
 import SnmpMonitorResponse from "../Monitor/SnmpMonitor/SnmpMonitorResponse";
+import SnmpTrap from "../Monitor/SnmpMonitor/SnmpTrap";
 import DnsMonitorResponse from "../Monitor/DnsMonitor/DnsMonitorResponse";
 import PingMonitorResponse from "../Monitor/PingMonitor/PingMonitorResponse";
 import DomainMonitorResponse from "../Monitor/DomainMonitor/DomainMonitorResponse";
@@ -38,6 +39,13 @@ export default interface ProbeMonitorResponse {
   syntheticMonitorResponse?: Array<SyntheticMonitorResponse> | undefined;
   customCodeMonitorResponse?: CustomCodeMonitorResponse | undefined;
   snmpResponse?: SnmpMonitorResponse | undefined;
+  /*
+   * Present ONLY on event-driven responses generated when a probe's trap
+   * receiver forwards an SNMP trap matching this monitor. Trap responses
+   * carry no check data: they are evaluated exclusively against
+   * trap-received criteria and never change monitor state on their own.
+   */
+  snmpTrapResponse?: SnmpTrap | undefined;
   pingResponse?: PingMonitorResponse | undefined;
   /*
    * Traceroute + DNS lookup captured by the probe when a Ping/IP/Port check