@oneuptime/common 11.7.1 → 11.7.3

package/Models/AnalyticsModels/KubernetesCostAllocation.ts

@@ -348,6 +348,12 @@ export default class KubernetesCostAllocation extends AnalyticsBaseModel {
           title: "CPU Core Usage Average",
           description: "Average CPU cores actually used over the window.",
         },
+        {
+          key: "cpuCoreLimitAverage",
+          title: "CPU Core Limit Average",
+          description:
+            "Average CPU core limit over the window. 0 when no limit is set — which is also what a row ingested before this column reads back.",
+        },
         {
           key: "cpuCost",
           title: "CPU Cost",
@@ -378,6 +384,18 @@ export default class KubernetesCostAllocation extends AnalyticsBaseModel {
           title: "RAM Bytes Usage Average",
           description: "Average RAM bytes actually used over the window.",
         },
+        {
+          key: "ramBytesLimitAverage",
+          title: "RAM Bytes Limit Average",
+          description:
+            "Average RAM byte limit over the window. 0 when no limit is set — which is also what a row ingested before this column reads back.",
+        },
+        {
+          key: "ramBytesUsageMax",
+          title: "RAM Bytes Usage Max",
+          description:
+            "Peak RAM bytes used during the window, from Prometheus rather than the cost engine — the engine only reports averages, and an hourly mean hides the burst that OOMKills a container. 0 when the agent has no Prometheus configured, when the scrape had no data, or on rows ingested before this column; treat 0 as 'unknown', never as a real peak.",
+        },
         {
           key: "ramCost",
           title: "RAM Cost",
@@ -472,6 +490,49 @@ export default class KubernetesCostAllocation extends AnalyticsBaseModel {
       },
     });
 
+    /*
+     * Delivery bookkeeping, not workload data. A window wider than the
+     * agent's batch size arrives as several independent ingest jobs, so the
+     * ingest service needs to tell "another chunk of the delivery I am
+     * already ingesting" (accept) from "a window a previous delivery already
+     * ingested" (drop, or a restarted agent double-counts spend). shipmentId
+     * is the agent's content hash of the window — identical across restarts,
+     * different when the engine's answer for that window changed.
+     *
+     * Empty / 0 on rows written before these columns existed and on rows
+     * from agents older than the shipment contract; the ingest service falls
+     * back to the whole-window guard for those.
+     */
+    const shipmentIdColumn: AnalyticsTableColumn = new AnalyticsTableColumn({
+      key: "shipmentId",
+      title: "Shipment ID",
+      description:
+        "Content hash identifying the agent delivery this row arrived in. Used to deduplicate re-shipped windows; empty for rows ingested before the shipment contract.",
+      required: true,
+      defaultValue: "",
+      type: TableColumnType.Text,
+      accessControl: {
+        read: readPermissions,
+        create: createPermissions,
+        update: [],
+      },
+    });
+
+    const shipmentChunkColumn: AnalyticsTableColumn = new AnalyticsTableColumn({
+      key: "shipmentChunk",
+      title: "Shipment Chunk",
+      description:
+        "Index of the request within its shipment that carried this row. 0 for single-request shipments and for rows ingested before the shipment contract.",
+      required: true,
+      defaultValue: 0,
+      type: TableColumnType.Number,
+      accessControl: {
+        read: readPermissions,
+        create: createPermissions,
+        update: [],
+      },
+    });
+
     const retentionDateColumn: AnalyticsTableColumn = new AnalyticsTableColumn({
       key: "retentionDate",
       codec: [{ codec: "DoubleDelta" }, { codec: "ZSTD", level: 1 }],
@@ -517,6 +578,8 @@ export default class KubernetesCostAllocation extends AnalyticsBaseModel {
         labelKeysColumn,
         ...measureColumns,
         currencyColumn,
+        shipmentIdColumn,
+        shipmentChunkColumn,
         retentionDateColumn,
       ],
       sortKeys: [
@@ -688,6 +751,14 @@ export default class KubernetesCostAllocation extends AnalyticsBaseModel {
     this.setColumnValue("cpuCoreUsageAverage", v);
   }
 
+  public get cpuCoreLimitAverage(): number | undefined {
+    return this.getColumnValue("cpuCoreLimitAverage") as number | undefined;
+  }
+
+  public set cpuCoreLimitAverage(v: number | undefined) {
+    this.setColumnValue("cpuCoreLimitAverage", v);
+  }
+
   public get cpuCost(): number | undefined {
     return this.getColumnValue("cpuCost") as number | undefined;
   }
@@ -736,6 +807,22 @@ export default class KubernetesCostAllocation extends AnalyticsBaseModel {
     this.setColumnValue("ramBytesUsageAverage", v);
   }
 
+  public get ramBytesLimitAverage(): number | undefined {
+    return this.getColumnValue("ramBytesLimitAverage") as number | undefined;
+  }
+
+  public set ramBytesLimitAverage(v: number | undefined) {
+    this.setColumnValue("ramBytesLimitAverage", v);
+  }
+
+  public get ramBytesUsageMax(): number | undefined {
+    return this.getColumnValue("ramBytesUsageMax") as number | undefined;
+  }
+
+  public set ramBytesUsageMax(v: number | undefined) {
+    this.setColumnValue("ramBytesUsageMax", v);
+  }
+
   public get ramCost(): number | undefined {
     return this.getColumnValue("ramCost") as number | undefined;
   }
@@ -832,6 +919,22 @@ export default class KubernetesCostAllocation extends AnalyticsBaseModel {
     this.setColumnValue("currency", v);
   }
 
+  public get shipmentId(): string | undefined {
+    return this.getColumnValue("shipmentId") as string | undefined;
+  }
+
+  public set shipmentId(v: string | undefined) {
+    this.setColumnValue("shipmentId", v);
+  }
+
+  public get shipmentChunk(): number | undefined {
+    return this.getColumnValue("shipmentChunk") as number | undefined;
+  }
+
+  public set shipmentChunk(v: number | undefined) {
+    this.setColumnValue("shipmentChunk", v);
+  }
+
   public get retentionDate(): Date | undefined {
     return this.getColumnValue("retentionDate") as Date | undefined;
   }

package/Models/DatabaseModels/DashboardDomain.ts

@@ -379,6 +379,7 @@ export default class DashboardDomain extends BaseModel {
       "Full domain of your dashboard (like dashboard.acmeinc.com). This is autogenerated and is derived from subdomain and domain.",
     example: "dashboard.acmeinc.com",
   })
+  @Index()
   @Column({
     nullable: false,
     type: ColumnType.ShortText,

package/Models/DatabaseModels/Incident.ts

@@ -1678,6 +1678,7 @@ export default class Incident extends BaseModel {
       "Status of notification sent to subscribers about this incident",
     defaultValue: StatusPageSubscriberNotificationStatus.Pending,
   })
+  @Index()
   @Column({
     type: ColumnType.ShortText,
     default: StatusPageSubscriberNotificationStatus.Pending,
@@ -1764,6 +1765,7 @@ export default class Incident extends BaseModel {
       "Status of notification sent to subscribers about this incident postmortem",
     defaultValue: StatusPageSubscriberNotificationStatus.Pending,
   })
+  @Index()
   @Column({
     type: ColumnType.ShortText,
     default: StatusPageSubscriberNotificationStatus.Pending,

package/Models/DatabaseModels/IncidentEpisode.ts

@@ -1657,6 +1657,7 @@ export default class IncidentEpisode extends BaseModel {
       "Status of notification sent to subscribers when this episode was created",
     defaultValue: StatusPageSubscriberNotificationStatus.Pending,
   })
+  @Index()
   @Column({
     type: ColumnType.ShortText,
     default: StatusPageSubscriberNotificationStatus.Pending,

package/Models/DatabaseModels/IncidentEpisodePublicNote.ts

@@ -504,6 +504,7 @@ export default class IncidentEpisodePublicNote extends BaseModel {
     description: "Status of notification sent to subscribers about this note",
     defaultValue: StatusPageSubscriberNotificationStatus.Pending,
   })
+  @Index()
   @Column({
     type: ColumnType.ShortText,
     default: StatusPageSubscriberNotificationStatus.Pending,

package/Models/DatabaseModels/IncidentEpisodeStateTimeline.ts

@@ -671,6 +671,7 @@ export default class IncidentEpisodeStateTimeline extends BaseModel {
       "Status of notification sent to subscribers about this state change",
     defaultValue: StatusPageSubscriberNotificationStatus.Pending,
   })
+  @Index()
   @Column({
     type: ColumnType.ShortText,
     default: StatusPageSubscriberNotificationStatus.Pending,

package/Models/DatabaseModels/IncidentPublicNote.ts

@@ -507,6 +507,7 @@ export default class IncidentPublicNote extends BaseModel {
     description: "Status of notification sent to subscribers about this note",
     defaultValue: StatusPageSubscriberNotificationStatus.Pending,
   })
+  @Index()
   @Column({
     type: ColumnType.ShortText,
     default: StatusPageSubscriberNotificationStatus.Pending,

package/Models/DatabaseModels/IncidentStateTimeline.ts

@@ -506,6 +506,7 @@ export default class IncidentStateTimeline extends BaseModel {
     defaultValue: StatusPageSubscriberNotificationStatus.Pending,
     example: "Sent",
   })
+  @Index()
   @Column({
     type: ColumnType.ShortText,
     default: StatusPageSubscriberNotificationStatus.Pending,

package/Models/DatabaseModels/Monitor.ts

@@ -595,6 +595,7 @@ export default class Monitor extends BaseModel {
     example: "API",
     canReadOnRelationQuery: true,
   })
+  @Index()
   @Column({
     nullable: false,
     type: ColumnType.ShortText,

package/Models/DatabaseModels/MonitorStatusTimeline.ts

@@ -418,6 +418,7 @@ export default class MonitorStatusTimeline extends BaseModel {
     {
       eager: false,
       nullable: true,
+      onDelete: "CASCADE",
       orphanedRowAction: "nullify",
     },
   )

package/Models/DatabaseModels/NetworkSite.ts

@@ -839,6 +839,7 @@ export default class NetworkSite extends BaseModel {
     title: "Last Rollup At",
     description: "When the health rollup for this site was last computed",
   })
+  @Index()
   @Column({
     nullable: true,
     type: ColumnType.Date,

package/Models/DatabaseModels/NetworkSiteStatusTimeline.ts

@@ -276,6 +276,7 @@ export default class NetworkSiteStatusTimeline extends BaseModel {
     {
       eager: false,
       nullable: true,
+      onDelete: "CASCADE",
       orphanedRowAction: "nullify",
     },
   )

package/Models/DatabaseModels/OnCallDutyPolicyExecutionLog.ts

@@ -593,6 +593,7 @@ export default class OnCallDutyPolicyExecutionLog extends BaseModel {
     canReadOnRelationQuery: false,
     example: "Executing",
   })
+  @Index()
   @Column({
     nullable: false,
     type: ColumnType.ShortText,

package/Models/DatabaseModels/OnCallDutyPolicySchedule.ts

@@ -690,6 +690,7 @@ export default class OnCallDutyPolicySchedule extends BaseModel {
       "When does the roster handoff occur for this schedule for the current user?",
     example: "2024-01-15T18:00:00.000Z",
   })
+  @Index()
   @Column({
     type: ColumnType.Date,
     nullable: true,
@@ -744,6 +745,7 @@ export default class OnCallDutyPolicySchedule extends BaseModel {
       "When does the next event start for this schedule for the next user?",
     example: "2024-01-22T09:00:00.000Z",
   })
+  @Index()
   @Column({
     type: ColumnType.Date,
     nullable: true,

package/Models/DatabaseModels/Probe.ts

@@ -285,7 +285,7 @@ export default class Probe extends BaseModel {
       Permission.ProjectMember,
       Permission.SettingsAdmin,
       Permission.SettingsMember,
-      Permission.CreateProjectStatusPage,
+      Permission.CreateProjectProbe,
     ],
     read: [
       Permission.ProjectOwner,
@@ -295,7 +295,7 @@ export default class Probe extends BaseModel {
       Permission.SettingsAdmin,
       Permission.SettingsMember,
       Permission.SettingsViewer,
-      Permission.ReadProjectStatusPage,
+      Permission.ReadProjectProbe,
     ],
     update: [
       Permission.ProjectOwner,
@@ -303,7 +303,7 @@ export default class Probe extends BaseModel {
       Permission.ProjectMember,
       Permission.SettingsAdmin,
       Permission.SettingsMember,
-      Permission.EditProjectStatusPage,
+      Permission.EditProjectProbe,
     ],
   })
   @TableColumn({
@@ -334,7 +334,7 @@ export default class Probe extends BaseModel {
       Permission.ProjectMember,
       Permission.SettingsAdmin,
       Permission.SettingsMember,
-      Permission.CreateProjectStatusPage,
+      Permission.CreateProjectProbe,
     ],
     read: [
       Permission.ProjectOwner,
@@ -344,7 +344,7 @@ export default class Probe extends BaseModel {
       Permission.SettingsAdmin,
       Permission.SettingsMember,
       Permission.SettingsViewer,
-      Permission.ReadProjectStatusPage,
+      Permission.ReadProjectProbe,
     ],
     update: [
       Permission.ProjectOwner,
@@ -352,7 +352,7 @@ export default class Probe extends BaseModel {
       Permission.ProjectMember,
       Permission.SettingsAdmin,
       Permission.SettingsMember,
-      Permission.EditProjectStatusPage,
+      Permission.EditProjectProbe,
     ],
   })
   @TableColumn({
@@ -546,7 +546,7 @@ export default class Probe extends BaseModel {
       Permission.ProjectMember,
       Permission.SettingsAdmin,
       Permission.SettingsMember,
-      Permission.CreateProjectStatusPage,
+      Permission.CreateProjectProbe,
     ],
     read: [
       Permission.ProjectOwner,
@@ -556,7 +556,7 @@ export default class Probe extends BaseModel {
       Permission.SettingsAdmin,
       Permission.SettingsMember,
       Permission.SettingsViewer,
-      Permission.ReadProjectStatusPage,
+      Permission.ReadProjectProbe,
     ],
     update: [
       Permission.ProjectOwner,
@@ -564,7 +564,7 @@ export default class Probe extends BaseModel {
       Permission.ProjectMember,
       Permission.SettingsAdmin,
       Permission.SettingsMember,
-      Permission.EditProjectStatusPage,
+      Permission.EditProjectProbe,
     ],
   })
   @TableColumn({
@@ -592,7 +592,7 @@ export default class Probe extends BaseModel {
       Permission.SettingsAdmin,
       Permission.SettingsMember,
       Permission.SettingsViewer,
-      Permission.ReadProjectStatusPage,
+      Permission.ReadProjectProbe,
     ],
     update: [],
   })
@@ -618,7 +618,7 @@ export default class Probe extends BaseModel {
       Permission.ProjectMember,
       Permission.SettingsAdmin,
       Permission.SettingsMember,
-      Permission.CreateProjectStatusPage,
+      Permission.CreateProjectProbe,
     ],
     read: [
       Permission.ProjectOwner,
@@ -628,7 +628,7 @@ export default class Probe extends BaseModel {
       Permission.SettingsAdmin,
       Permission.SettingsMember,
       Permission.SettingsViewer,
-      Permission.ReadProjectStatusPage,
+      Permission.ReadProjectProbe,
     ],
     update: [
       Permission.ProjectOwner,
@@ -636,7 +636,7 @@ export default class Probe extends BaseModel {
       Permission.ProjectMember,
       Permission.SettingsAdmin,
       Permission.SettingsMember,
-      Permission.EditProjectStatusPage,
+      Permission.EditProjectProbe,
     ],
   })
   @TableColumn({

package/Models/DatabaseModels/ScheduledMaintenance.ts

@@ -1389,6 +1389,7 @@ export default class ScheduledMaintenance extends BaseModel {
       "Status of notification sent to subscribers when event was scheduled",
     defaultValue: StatusPageSubscriberNotificationStatus.Pending,
   })
+  @Index()
   @Column({
     type: ColumnType.ShortText,
     default: StatusPageSubscriberNotificationStatus.Pending,

package/Models/DatabaseModels/ScheduledMaintenancePublicNote.ts

@@ -507,6 +507,7 @@ export default class ScheduledMaintenancePublicNote extends BaseModel {
     defaultValue: StatusPageSubscriberNotificationStatus.Pending,
     example: "Sent",
   })
+  @Index()
   @Column({
     type: ColumnType.ShortText,
     default: StatusPageSubscriberNotificationStatus.Pending,

package/Models/DatabaseModels/ScheduledMaintenanceStateTimeline.ts

@@ -503,6 +503,7 @@ export default class ScheduledMaintenanceStateTimeline extends BaseModel {
     defaultValue: StatusPageSubscriberNotificationStatus.Pending,
     example: "Sent",
   })
+  @Index()
   @Column({
     type: ColumnType.ShortText,
     default: StatusPageSubscriberNotificationStatus.Pending,

package/Models/DatabaseModels/ScheduledMaintenanceTemplate.ts

@@ -1285,6 +1285,7 @@ export default class ScheduledMaintenanceTemplate extends BaseModel {
     description: "When is the next event scheduled?",
     example: "2024-03-29T02:00:00.000Z",
   })
+  @Index()
   @Column({
     type: ColumnType.Date,
     nullable: true,

package/Models/DatabaseModels/StatusPage.ts

@@ -2575,6 +2575,7 @@ export default class StatusPage extends BaseModel {
     title: "Send Next Report By",
     description: "When should the next report be sent?",
   })
+  @Index()
   @Column({
     type: ColumnType.Date,
     nullable: true,

package/Models/DatabaseModels/StatusPageAnnouncement.ts

@@ -676,6 +676,7 @@ export default class StatusPageAnnouncement extends BaseModel {
     type: TableColumnType.ShortText,
     defaultValue: StatusPageSubscriberNotificationStatus.Pending,
   })
+  @Index()
   @Column({
     type: ColumnType.ShortText,
     default: StatusPageSubscriberNotificationStatus.Pending,

package/Models/DatabaseModels/StatusPageDomain.ts

@@ -380,6 +380,7 @@ export default class StatusPageDomain extends BaseModel {
       "Full domain of your status page (like status.acmeinc.com). This is autogenerated and is derived from subdomain and domain.",
     example: "status.acmeinc.com",
   })
+  @Index()
   @Column({
     nullable: false,
     type: ColumnType.ShortText,

package/Models/DatabaseModels/TableView.ts

@@ -555,4 +555,44 @@ export default class TableView extends BaseModel {
     nullable: true,
   })
   public facets?: JSONObject = undefined;
+
+  @ColumnAccessControl({
+    create: [
+      Permission.ProjectOwner,
+      Permission.ProjectAdmin,
+      Permission.CreateTableView,
+    ],
+    read: [
+      Permission.ProjectOwner,
+      Permission.ProjectAdmin,
+      Permission.ProjectMember,
+      Permission.Viewer,
+      Permission.SettingsAdmin,
+      Permission.SettingsMember,
+      Permission.SettingsViewer,
+      Permission.ReadTableView,
+    ],
+    update: [
+      Permission.ProjectOwner,
+      Permission.ProjectAdmin,
+      Permission.EditTableView,
+    ],
+  })
+  @TableColumn({
+    title: "Columns",
+    required: false,
+    unique: false,
+    type: TableColumnType.JSON,
+    canReadOnRelationQuery: true,
+    description:
+      "Which columns are shown, and in what order, for this table view",
+    example:
+      '{"order": ["name", "currentMonitorStatus"], "hidden": ["labels"]}',
+  })
+  @Column({
+    type: ColumnType.JSON,
+    unique: false,
+    nullable: true,
+  })
+  public columns?: JSONObject = undefined;
 }

package/Models/DatabaseModels/WorkspaceNotificationSummary.ts

@@ -698,6 +698,7 @@ class WorkspaceNotificationSummary extends BaseModel {
     title: "Next Send At",
     description: "When the next summary should be sent",
   })
+  @Index()
   @Column({
     type: ColumnType.Date,
     nullable: true,

package/Models/DatabaseModels/WorkspaceProjectAuthToken.ts

@@ -26,6 +26,16 @@ export interface MicrosoftTeamsTeam {
   name: string;
 }
 
+export type MicrosoftTeamsChatType = "personal" | "groupChat";
+
+export interface MicrosoftTeamsChat {
+  id: string; // Teams conversation id (e.g. 19:...@thread.v2)
+  name: string;
+  chatType: MicrosoftTeamsChatType;
+  serviceUrl?: string | undefined; // Bot Framework service URL captured when the bot was added.
+  addedAt?: string | undefined;
+}
+
 export interface SlackMiscData extends MiscData {
   teamId: string;
   teamName: string;
@@ -51,6 +61,7 @@ export interface MicrosoftTeamsMiscData extends MiscData {
   adminConsentGrantedBy?: string;
   availableTeams?: Record<string, MicrosoftTeamsTeam>;
   appAccessTokenExpiresAt?: string;
+  availableChats?: Record<string, MicrosoftTeamsChat>; // keyed by chat id. Chats the OneUptime app has been added to.
 }
 
 export type WorkspaceMiscData = SlackMiscData | MicrosoftTeamsMiscData;

package/Server/API/BaseAPI.ts

@@ -23,6 +23,7 @@ import {
 } from "../../Types/Database/LimitMax";
 import PartialEntity from "../../Types/Database/PartialEntity";
 import BadRequestException from "../../Types/Exception/BadRequestException";
+import NotAuthorizedException from "../../Types/Exception/NotAuthorizedException";
 import { JSONObject } from "../../Types/JSON";
 import JSONFunctions from "../../Types/JSONFunctions";
 import ObjectID from "../../Types/ObjectID";
@@ -406,12 +407,27 @@ export default class BaseAPI<
     delete (item as any)["createdAt"];
     delete (item as any)["updatedAt"];
 
-    await this.service.updateOneById({
+    const numberOfDocsAffected: number = await this.service.updateOneById({
       id: new ObjectID(objectIdString),
       data: item,
       props: await CommonAPI.getDatabaseCommonInteractionProps(req),
     });
 
+    /*
+     * The permission layer narrows the update query after we build it (tenant
+     * scope, access-control labels, owned scope), so it is possible to match
+     * no rows at all. Reporting 200 for that told the client the edit was
+     * saved when nothing was written - the change then "disappeared" on the
+     * next page load with no error anywhere.
+     */
+    if (numberOfDocsAffected === 0) {
+      throw new NotAuthorizedException(
+        `Unable to update this ${(
+          new this.entityType().singularName || "item"
+        ).toLowerCase()}. It either does not exist, has been deleted, or you do not have permission to update it.`,
+      );
+    }
+
     return Response.sendEmptySuccessResponse(req, res);
   }
 

package/Server/API/CommonAPI.ts

@@ -6,8 +6,40 @@ import { PlanType } from "../../Types/Billing/SubscriptionPlan";
 import UserType from "../../Types/UserType";
 import CaptureSpan from "../Utils/Telemetry/CaptureSpan";
 import SpanUtil from "../Utils/Telemetry/SpanUtil";
+import ObjectID from "../../Types/ObjectID";
+import BadDataException from "../../Types/Exception/BadDataException";
+import NotAuthorizedException from "../../Types/Exception/NotAuthorizedException";
 
 export default class CommonAPI {
+  /*
+   * getUserMiddleware lets unauthenticated requests through as "public" and
+   * takes the tenant id from a caller-supplied header — custom endpoints
+   * that disclose project data must require an authenticated member of the
+   * project themselves. Returns the project id when authorized, throws
+   * otherwise.
+   */
+  public static assertAuthenticatedProjectMember(
+    databaseProps: DatabaseCommonInteractionProps,
+  ): ObjectID {
+    const projectId: ObjectID | undefined = databaseProps.tenantId;
+
+    if (!projectId) {
+      throw new BadDataException("Project ID is required");
+    }
+
+    if (
+      !databaseProps.userId ||
+      !databaseProps.userTenantAccessPermission ||
+      !databaseProps.userTenantAccessPermission[projectId.toString()]
+    ) {
+      throw new NotAuthorizedException(
+        "You are not authorized to access this project's data.",
+      );
+    }
+
+    return projectId;
+  }
+
   @CaptureSpan()
   public static async getDatabaseCommonInteractionProps(
     req: ExpressRequest,