@oneuptime/common 11.7.3 → 12.0.0

package/build/dist/Server/Utils/Database/ProjectScopedReferenceValidator.js

@@ -0,0 +1,132 @@
+import QueryHelper from "../../Types/Database/QueryHelper";
+import { LIMIT_PER_PROJECT } from "../../../Types/Database/LimitMax";
+import BadDataException from "../../../Types/Exception/BadDataException";
+import ObjectID from "../../../Types/ObjectID";
+/*
+ * The same reference reaches a service hook in several shapes: the id column
+ * (`incidentSeverityId`), a relation object (`incidentSeverity: { _id }`), an
+ * ObjectID in either slot, or — on the update path — a bare uuid string in the
+ * relation slot, which DatabaseService.sanitizeCreateOrUpdate only turns into
+ * a relation entity *after* onBeforeUpdate has run. Reading `?._id` alone
+ * misses the string shape and the guard would silently pass.
+ */
+export function resolveReferenceId(value) {
+    if (!value) {
+        return undefined;
+    }
+    if (typeof value === "string") {
+        return value;
+    }
+    if (value instanceof ObjectID) {
+        return value;
+    }
+    const relation = value;
+    return relation._id || relation.id || undefined;
+}
+export default class ProjectScopedReferenceValidator {
+    static async validateReferencesBelongToProject(data) {
+        var _a, _b, _c;
+        if (!data.projectId) {
+            /*
+             * Root/internal writes do not always carry a project. Callers resolve the
+             * project themselves where they can; when they cannot there is nothing to
+             * compare against and the check is a no-op.
+             */
+            return;
+        }
+        /*
+         * One lookup per referenced model rather than one per id — an incident
+         * carries three of these and they are on the create path.
+         */
+        const idsByService = new Map();
+        for (const reference of data.references) {
+            const id = ((_a = reference.id) === null || _a === void 0 ? void 0 : _a.toString()) || "";
+            if (!id) {
+                continue;
+            }
+            if (!idsByService.has(reference.service)) {
+                idsByService.set(reference.service, new Map());
+            }
+            idsByService.get(reference.service).set(id, reference.modelName);
+        }
+        if (idsByService.size === 0) {
+            return;
+        }
+        const foreignReferences = [];
+        for (const [service, idToModelName] of idsByService) {
+            const records = await service.findBy({
+                query: {
+                    _id: QueryHelper.any(Array.from(idToModelName.keys())),
+                },
+                /*
+                 * `name` and `projectId` are not on DatabaseBaseModel, but every model
+                 * passed here is project scoped and named, so the cast is safe.
+                 */
+                select: {
+                    _id: true,
+                    name: true,
+                    projectId: true,
+                },
+                limit: LIMIT_PER_PROJECT,
+                skip: 0,
+                props: {
+                    isRoot: true,
+                },
+            });
+            for (const record of records) {
+                const recordProjectId = record.getValue("projectId") || undefined;
+                if ((recordProjectId === null || recordProjectId === void 0 ? void 0 : recordProjectId.toString()) === data.projectId.toString()) {
+                    continue;
+                }
+                const id = ((_b = record._id) === null || _b === void 0 ? void 0 : _b.toString()) || "";
+                foreignReferences.push({
+                    modelName: idToModelName.get(id) || "Record",
+                    name: ((_c = record.getValue("name")) === null || _c === void 0 ? void 0 : _c.toString()) || id,
+                });
+            }
+        }
+        if (foreignReferences.length === 0) {
+            return;
+        }
+        const described = foreignReferences
+            .map((reference) => {
+            return `${reference.modelName} "${reference.name}"`;
+        })
+            .join(", ");
+        throw new BadDataException(`This ${data.subject || "request"} references records that belong to a different project: ${described}. Please pick values from this project and try again.`);
+    }
+    /*
+     * "Can this project actually use this record?" — for callers that must not
+     * throw. The probe and telemetry ingest workers build incidents and alerts
+     * from monitor criteria, whose stored ids may still point at another
+     * project (monitorSteps repair could not always resolve them). Throwing
+     * there fails the whole ingest job for that monitor, so those callers ask
+     * this instead and fall back to their project's own default.
+     *
+     * Note the deliberate difference from validateReferencesBelongToProject: an
+     * id that matches NO record is unusable here (false), while the write guard
+     * lets it pass so a record already pointing at something deleted stays
+     * saveable.
+     */
+    static async isUsableInProject(data) {
+        var _a;
+        const id = ((_a = data.id) === null || _a === void 0 ? void 0 : _a.toString()) || "";
+        if (!id || !data.projectId) {
+            return false;
+        }
+        const record = await data.service.findOneBy({
+            query: {
+                _id: id,
+                projectId: data.projectId,
+            },
+            select: {
+                _id: true,
+            },
+            props: {
+                isRoot: true,
+            },
+        });
+        return Boolean(record);
+    }
+}
+//# sourceMappingURL=ProjectScopedReferenceValidator.js.map

package/build/dist/Server/Utils/Database/ProjectScopedReferenceValidator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ProjectScopedReferenceValidator.js","sourceRoot":"","sources":["../../../../../Server/Utils/Database/ProjectScopedReferenceValidator.ts"],"names":[],"mappings":"AAEA,OAAO,WAAW,MAAM,kCAAkC,CAAC;AAE3D,OAAO,EAAE,iBAAiB,EAAE,MAAM,kCAAkC,CAAC;AACrE,OAAO,gBAAgB,MAAM,2CAA2C,CAAC;AACzE,OAAO,QAAQ,MAAM,yBAAyB,CAAC;AAqC/C;;;;;;;GAOG;AACH,MAAM,UAAU,kBAAkB,CAChC,KAAc;IAEd,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,OAAO,KAAK,CAAC;IACf,CAAC;IAED,IAAI,KAAK,YAAY,QAAQ,EAAE,CAAC;QAC9B,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,QAAQ,GACZ,KAAgE,CAAC;IAEnE,OAAO,QAAQ,CAAC,GAAG,IAAI,QAAQ,CAAC,EAAE,IAAI,SAAS,CAAC;AAClD,CAAC;AAED,MAAM,CAAC,OAAO,OAAO,+BAA+B;IAC3C,MAAM,CAAC,KAAK,CAAC,iCAAiC,CAAC,IAKrD;;QACC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;YACpB;;;;eAIG;YACH,OAAO;QACT,CAAC;QAED;;;WAGG;QACH,MAAM,YAAY,GAGd,IAAI,GAAG,EAAE,CAAC;QAEd,KAAK,MAAM,SAAS,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACxC,MAAM,EAAE,GAAW,CAAA,MAAA,SAAS,CAAC,EAAE,0CAAE,QAAQ,EAAE,KAAI,EAAE,CAAC;YAElD,IAAI,CAAC,EAAE,EAAE,CAAC;gBACR,SAAS;YACX,CAAC;YAED,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC;gBACzC,YAAY,CAAC,GAAG,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,GAAG,EAAE,CAAC,CAAC;YACjD,CAAC;YAED,YAAY,CAAC,GAAG,CAAC,SAAS,CAAC,OAAO,CAAE,CAAC,GAAG,CAAC,EAAE,EAAE,SAAS,CAAC,SAAS,CAAC,CAAC;QACpE,CAAC;QAED,IAAI,YAAY,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;YAC5B,OAAO;QACT,CAAC;QAED,MAAM,iBAAiB,GAA4B,EAAE,CAAC;QAEtD,KAAK,MAAM,CAAC,OAAO,EAAE,aAAa,CAAC,IAAI,YAAY,EAAE,CAAC;YACpD,MAAM,OAAO,GAA6B,MAAM,OAAO,CAAC,MAAM,CAAC;gBAC7D,KAAK,EAAE;oBACL,GAAG,EAAE,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC,CAAC;iBACvD;gBACD;;;mBAGG;gBACH,MAAM,EAAE;oBACN,GAAG,EAAE,IAAI;oBACT,IAAI,EAAE,IAAI;oBACV,SAAS,EAAE,IAAI;iBACa;gBAC9B,KAAK,EAAE,iBAAiB;gBACxB,IAAI,EAAE,CAAC;gBACP,KAAK,EAAE;oBACL,MAAM,EAAE,IAAI;iBACb;aACF,CAAC,CAAC;YAEH,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;gBAC7B,MAAM,eAAe,GACnB,MAAM,CAAC,QAAQ,CAAW,WAAW,CAAC,IAAI,SAAS,CAAC;gBAEtD,IAAI,CAAA,eAAe,aAAf,eAAe,uBAAf,eAAe,CAAE,QAAQ,EAAE,MAAK,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,EAAE,CAAC;oBAC9D,SAAS;gBACX,CAAC;gBAED,MAAM,EAAE,GAAW,CAAA,MAAA,MAAM,CAAC,GAAG,0CAAE,QAAQ,EAAE,KAAI,EAAE,CAAC;gBAEhD,iBAAiB,CAAC,IAAI,CAAC;oBACrB,SAAS,EAAE,aAAa,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,QAAQ;oBAC5C,IAAI,EAAE,CAAA,MAAA,MAAM,CAAC,QAAQ,CAAS,MAAM,CAAC,0CAAE,QAAQ,EAAE,KAAI,EAAE;iBACxD,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,IAAI,iBAAiB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACnC,OAAO;QACT,CAAC;QAED,MAAM,SAAS,GAAW,iBAAiB;aACxC,GAAG,CAAC,CAAC,SAA2B,EAAE,EAAE;YACnC,OAAO,GAAG,SAAS,CAAC,SAAS,KAAK,SAAS,CAAC,IAAI,GAAG,CAAC;QACtD,CAAC,CAAC;aACD,IAAI,CAAC,IAAI,CAAC,CAAC;QAEd,MAAM,IAAI,gBAAgB,CACxB,QACE,IAAI,CAAC,OAAO,IAAI,SAClB,2DAA2D,SAAS,uDAAuD,CAC5H,CAAC;IACJ,CAAC;IAED;;;;;;;;;;;;OAYG;IACI,MAAM,CAAC,KAAK,CAAC,iBAAiB,CAAC,IAIrC;;QACC,MAAM,EAAE,GAAW,CAAA,MAAA,IAAI,CAAC,EAAE,0CAAE,QAAQ,EAAE,KAAI,EAAE,CAAC;QAE7C,IAAI,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;YAC3B,OAAO,KAAK,CAAC;QACf,CAAC;QAED,MAAM,MAAM,GAA6B,MAAM,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC;YACpE,KAAK,EAAE;gBACL,GAAG,EAAE,EAAE;gBACP,SAAS,EAAE,IAAI,CAAC,SAAS;aACE;YAC7B,MAAM,EAAE;gBACN,GAAG,EAAE,IAAI;aACV;YACD,KAAK,EAAE;gBACL,MAAM,EAAE,IAAI;aACb;SACF,CAAC,CAAC;QAEH,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC;IACzB,CAAC;CACF"}

package/build/dist/Server/Utils/Database/RelationIdUtil.js

@@ -0,0 +1,51 @@
+import ObjectID from "../../../Types/ObjectID";
+/*
+ * A many-to-one reference reaches a service hook under TWO different keys.
+ *
+ * The dashboard's forms post the RELATION object - `{ site: { _id: "..." } }`
+ * - because DatabaseBaseModel.toJSONObject serialises the entity column it
+ * was given (Common/Models/DatabaseModels/DatabaseBaseModel/
+ * DatabaseBaseModel.ts) and BaseAPI passes that body through to the service
+ * verbatim. Server-side callers, by contrast, write the FK column
+ * (`{ siteId: ... }`). onBeforeUpdate/onUpdateSuccess run BEFORE TypeORM
+ * resolves one into the other, so a hook that inspects only one spelling
+ * silently ignores every write made through the other - which is how a site
+ * picked in the UI could skip its tenancy check and its rollup refresh
+ * (OneUptime/oneuptime#2940).
+ *
+ * Give these helpers both spellings, FK column first.
+ */
+export default class RelationIdUtil {
+    // True when the payload writes the reference under any of `keys`.
+    static isWritten(dataKeys, keys) {
+        return keys.some((key) => {
+            return dataKeys.includes(key);
+        });
+    }
+    /*
+     * The id the payload points the reference at, or null when it clears the
+     * reference (or carries nothing resolvable). Accepts an ObjectID, a plain
+     * id string, or a serialised relation carrying `_id` / `id`.
+     */
+    static read(data, keys) {
+        for (const key of keys) {
+            const value = (data || {})[key];
+            if (!value) {
+                continue;
+            }
+            if (value instanceof ObjectID) {
+                return value;
+            }
+            if (typeof value === "string") {
+                return new ObjectID(value);
+            }
+            const relation = value;
+            const relationId = relation._id || relation.id;
+            if (relationId) {
+                return new ObjectID(relationId.toString());
+            }
+        }
+        return null;
+    }
+}
+//# sourceMappingURL=RelationIdUtil.js.map

package/build/dist/Server/Utils/Database/RelationIdUtil.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"RelationIdUtil.js","sourceRoot":"","sources":["../../../../../Server/Utils/Database/RelationIdUtil.ts"],"names":[],"mappings":"AAAA,OAAO,QAAQ,MAAM,yBAAyB,CAAC;AAE/C;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAC,OAAO,OAAO,cAAc;IACjC,kEAAkE;IAC3D,MAAM,CAAC,SAAS,CACrB,QAAuB,EACvB,IAAmB;QAEnB,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC,GAAW,EAAE,EAAE;YAC/B,OAAO,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QAChC,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;;;OAIG;IACI,MAAM,CAAC,IAAI,CAChB,IAAgD,EAChD,IAAmB;QAEnB,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,MAAM,KAAK,GAAY,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC;YAEzC,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,SAAS;YACX,CAAC;YAED,IAAI,KAAK,YAAY,QAAQ,EAAE,CAAC;gBAC9B,OAAO,KAAK,CAAC;YACf,CAAC;YAED,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;gBAC9B,OAAO,IAAI,QAAQ,CAAC,KAAK,CAAC,CAAC;YAC7B,CAAC;YAED,MAAM,QAAQ,GAAoC,KAGjD,CAAC;YAEF,MAAM,UAAU,GAAY,QAAQ,CAAC,GAAG,IAAI,QAAQ,CAAC,EAAE,CAAC;YAExD,IAAI,UAAU,EAAE,CAAC;gBACf,OAAO,IAAI,QAAQ,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC,CAAC;YAC7C,CAAC;QACH,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;CACF"}

package/build/dist/Server/Utils/DropFilterValidation.js

@@ -0,0 +1,80 @@
+import BadDataException from "../../Types/Exception/BadDataException";
+import { MAX_SAMPLE_PERCENTAGE, MIN_SAMPLE_PERCENTAGE, } from "../../Types/Telemetry/DropFilterSampling";
+/*
+ * Shared save-time validation for log and trace drop filters.
+ *
+ * Both drop-filter models have historically accepted configurations the
+ * ingest engine could not honour, and both failed silently and
+ * destructively:
+ *
+ *   - A blank `filterQuery` compiles to "match every record", so a drop
+ *     filter saved with an empty query discards 100% of a project's
+ *     telemetry. Nothing warned, and nothing recorded the drops.
+ *
+ *   - `samplePercentage` is nullable with no default and the form field is
+ *     optional, so `action = "sample"` could be saved with no percentage at
+ *     all. The engine then fell back to a hardcoded 50, i.e. "silently
+ *     throw away half of it", while the UI rendered the unset value as
+ *     "0% kept".
+ *
+ * Rejecting both at the API boundary is the only place a human is present
+ * to read the error. The ingest path additionally fails *safe* on rows that
+ * predate this validation (see DropFilterSampling.resolveSamplePercentage
+ * and LogDropFilterService.loadDropFilters).
+ *
+ * Deliberately not validated here: whether `filterQuery` actually parses.
+ * The parser lives in the App feature set, which Common must not import,
+ * and an unparsable query compiles to "match nothing" — a harmless no-op
+ * rather than a data-destroying one.
+ */
+/*
+ * Both LogDropFilterAction and TraceDropFilterAction spell this "sample";
+ * comparing the raw string keeps this validator usable from both services
+ * without either enum leaking in.
+ */
+export const SAMPLE_ACTION = "sample";
+export function validateDropFilterFilterQuery(filterQuery, options) {
+    if (filterQuery === undefined ||
+        filterQuery === null ||
+        filterQuery.trim().length === 0) {
+        throw new BadDataException(`Filter query is required. A drop filter with an empty query matches every record, which would discard all of this project's ${options.recordNoun}. Add a condition, or delete the filter.`);
+    }
+}
+export function validateDropFilterSamplePercentage(candidate, options) {
+    if (candidate.action !== SAMPLE_ACTION) {
+        return;
+    }
+    const samplePercentage = candidate.samplePercentage;
+    if (typeof samplePercentage !== "number" ||
+        !Number.isFinite(samplePercentage)) {
+        throw new BadDataException(`Sample percentage is required when the action is "Sample". Enter the percentage of matching ${options.recordNoun} to keep, between ${MIN_SAMPLE_PERCENTAGE} and ${MAX_SAMPLE_PERCENTAGE}.`);
+    }
+    if (samplePercentage < MIN_SAMPLE_PERCENTAGE ||
+        samplePercentage > MAX_SAMPLE_PERCENTAGE) {
+        throw new BadDataException(`Sample percentage must be between ${MIN_SAMPLE_PERCENTAGE} and ${MAX_SAMPLE_PERCENTAGE}. Use the "Drop" action to discard every matching record, or disable the filter to keep every one.`);
+    }
+}
+/*
+ * Validate a fully-resolved candidate row. Callers building this from an
+ * update must merge the incoming partial over the stored row first, so a
+ * request that flips `action` to "sample" without supplying a percentage is
+ * still caught.
+ */
+export function validateDropFilter(candidate, options) {
+    validateDropFilterFilterQuery(candidate.filterQuery, options);
+    validateDropFilterSamplePercentage(candidate, options);
+}
+/*
+ * `PartialEntity` values may be `() => string` raw SQL expressions rather
+ * than literals. We cannot evaluate one here, so an update that sets a
+ * validated field to an expression cannot be checked — validating a
+ * stringified function would be worse than not validating at all.
+ *
+ * Nothing in the product writes drop-filter fields this way; the branch
+ * exists so the types stay honest and a future caller that does it gets
+ * skipped rather than spuriously rejected.
+ */
+export function isSqlExpressionValue(value) {
+    return typeof value === "function";
+}
+//# sourceMappingURL=DropFilterValidation.js.map

package/build/dist/Server/Utils/DropFilterValidation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"DropFilterValidation.js","sourceRoot":"","sources":["../../../../Server/Utils/DropFilterValidation.ts"],"names":[],"mappings":"AAAA,OAAO,gBAAgB,MAAM,wCAAwC,CAAC;AACtE,OAAO,EACL,qBAAqB,EACrB,qBAAqB,GACtB,MAAM,0CAA0C,CAAC;AAElD;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAEH;;;;GAIG;AACH,MAAM,CAAC,MAAM,aAAa,GAAW,QAAQ,CAAC;AAgB9C,MAAM,UAAU,6BAA6B,CAC3C,WAAsC,EACtC,OAAoC;IAEpC,IACE,WAAW,KAAK,SAAS;QACzB,WAAW,KAAK,IAAI;QACpB,WAAW,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAC/B,CAAC;QACD,MAAM,IAAI,gBAAgB,CACxB,+HAA+H,OAAO,CAAC,UAAU,0CAA0C,CAC5L,CAAC;IACJ,CAAC;AACH,CAAC;AAED,MAAM,UAAU,kCAAkC,CAChD,SAA8B,EAC9B,OAAoC;IAEpC,IAAI,SAAS,CAAC,MAAM,KAAK,aAAa,EAAE,CAAC;QACvC,OAAO;IACT,CAAC;IAED,MAAM,gBAAgB,GACpB,SAAS,CAAC,gBAAgB,CAAC;IAE7B,IACE,OAAO,gBAAgB,KAAK,QAAQ;QACpC,CAAC,MAAM,CAAC,QAAQ,CAAC,gBAAgB,CAAC,EAClC,CAAC;QACD,MAAM,IAAI,gBAAgB,CACxB,+FAA+F,OAAO,CAAC,UAAU,qBAAqB,qBAAqB,QAAQ,qBAAqB,GAAG,CAC5L,CAAC;IACJ,CAAC;IAED,IACE,gBAAgB,GAAG,qBAAqB;QACxC,gBAAgB,GAAG,qBAAqB,EACxC,CAAC;QACD,MAAM,IAAI,gBAAgB,CACxB,qCAAqC,qBAAqB,QAAQ,qBAAqB,oGAAoG,CAC5L,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CAChC,SAA8B,EAC9B,OAAoC;IAEpC,6BAA6B,CAAC,SAAS,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;IAC9D,kCAAkC,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;AACzD,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,oBAAoB,CAAC,KAAc;IACjD,OAAO,OAAO,KAAK,KAAK,UAAU,CAAC;AACrC,CAAC"}

package/build/dist/Server/Utils/Errors.js

@@ -12,6 +12,9 @@ export default {
         SUBSCRIPTION_NOT_FOUND: "Subscription not found.",
         INVOICE_NOT_FOUND: "Invoice not found.",
         PAYMENT_INTENT_NOT_FOUND: "Payment intent not found.",
+        TRIAL_END_DATE_IN_PAST: "Trial end date must be in the future.",
+        TRIAL_END_DATE_TOO_FAR_IN_FUTURE: "Trial end date cannot be more than 730 days (two years) in the future. This is a limit imposed by the payment provider.",
+        CANNOT_EXTEND_TRIAL_ON_CANCELLED_SUBSCRIPTION: "This subscription has been cancelled. Its trial cannot be extended.",
     },
     TeamMemberService: {
         ALREADY_INVITED: "This user has already been invited to this team",

package/build/dist/Server/Utils/Errors.js.map

@@ -1 +1 @@
-{"version":3,"file":"Errors.js","sourceRoot":"","sources":["../../../../Server/Utils/Errors.ts"],"names":[],"mappings":"AAAA,eAAe;IACb,cAAc,EAAE;QACd,mBAAmB,EAAE,yCAAyC;QAC9D,qBAAqB,EAAE,iDAAiD;QACxE,kBAAkB,EAAE,qBAAqB;QACzC,qBAAqB,EAAE,wBAAwB;QAC/C,mCAAmC,EACjC,oKAAoK;QACtK,mBAAmB,EACjB,6FAA6F;QAC/F,oBAAoB,EAAE,sBAAsB;QAC5C,kBAAkB,EAAE,oBAAoB;QACxC,2BAA2B,EAAE,8BAA8B;QAC3D,sBAAsB,EAAE,yBAAyB;QACjD,iBAAiB,EAAE,oBAAoB;QACvC,wBAAwB,EAAE,2BAA2B;KACtD;IACD,iBAAiB,EAAE;QACjB,eAAe,EAAE,iDAAiD;QAClE,mBAAmB,EACjB,0EAA0E;QAC5E,aAAa,EACX,sJAAsJ;QACxJ,2BAA2B,EACzB,6GAA6G;KAChH;CACF,CAAC"}
+{"version":3,"file":"Errors.js","sourceRoot":"","sources":["../../../../Server/Utils/Errors.ts"],"names":[],"mappings":"AAAA,eAAe;IACb,cAAc,EAAE;QACd,mBAAmB,EAAE,yCAAyC;QAC9D,qBAAqB,EAAE,iDAAiD;QACxE,kBAAkB,EAAE,qBAAqB;QACzC,qBAAqB,EAAE,wBAAwB;QAC/C,mCAAmC,EACjC,oKAAoK;QACtK,mBAAmB,EACjB,6FAA6F;QAC/F,oBAAoB,EAAE,sBAAsB;QAC5C,kBAAkB,EAAE,oBAAoB;QACxC,2BAA2B,EAAE,8BAA8B;QAC3D,sBAAsB,EAAE,yBAAyB;QACjD,iBAAiB,EAAE,oBAAoB;QACvC,wBAAwB,EAAE,2BAA2B;QACrD,sBAAsB,EAAE,uCAAuC;QAC/D,gCAAgC,EAC9B,yHAAyH;QAC3H,6CAA6C,EAC3C,qEAAqE;KACxE;IACD,iBAAiB,EAAE;QACjB,eAAe,EAAE,iDAAiD;QAClE,mBAAmB,EACjB,0EAA0E;QAC5E,aAAa,EACX,sJAAsJ;QACxJ,2BAA2B,EACzB,6GAA6G;KAChH;CACF,CAAC"}

package/build/dist/Server/Utils/Incident/IncidentPrivacyFilter.js

@@ -94,4 +94,42 @@ export function applyIncidentRelatedRecordPrivacyFilter(query, props) {
     query.incidentId = combineWithPrivacyClause(query.incidentId, rawClause);
     return query;
 }
+/*
+ * Null-tolerant variant of the related-record filter for child tables whose
+ * incident link is OPTIONAL (e.g. AutoRemediationSuggestion, which links an
+ * incident OR an alert). In SQL, `NULL IN (subquery)` evaluates to NULL, so
+ * the strict clause above would hide every row whose incidentId is NULL —
+ * this variant lets NULL-linked rows through and defers to the sibling
+ * column's own filter.
+ */
+export function getOptionalIncidentRelatedRecordPrivacyRaw(props) {
+    if (shouldBypassIncidentPrivacy(props)) {
+        return undefined;
+    }
+    if (!props.userId) {
+        return Raw((alias) => {
+            return `(${alias} IS NULL OR ${alias} IN (SELECT i."_id" FROM "Incident" i WHERE i."deletedAt" IS NULL AND (i."isPrivate" IS NULL OR i."isPrivate" = FALSE)))`;
+        });
+    }
+    const uidRid = "uidRelOpt_" + Text.generateRandomText(10);
+    return Raw((alias) => {
+        return (`(${alias} IS NULL OR ${alias} IN (SELECT i."_id" FROM "Incident" i WHERE i."deletedAt" IS NULL AND (` +
+            `i."isPrivate" IS NULL OR i."isPrivate" = FALSE OR ` +
+            `i."_id" IN (SELECT iou."incidentId" FROM "IncidentOwnerUser" iou WHERE iou."userId" = :${uidRid} AND iou."deletedAt" IS NULL) OR ` +
+            `i."_id" IN (SELECT iot."incidentId" FROM "IncidentOwnerTeam" iot INNER JOIN "TeamMember" tm ON tm."teamId" = iot."teamId" WHERE tm."userId" = :${uidRid} AND tm."deletedAt" IS NULL AND iot."deletedAt" IS NULL))))`);
+    }, {
+        [uidRid]: props.userId.toString(),
+    });
+}
+export function applyOptionalIncidentRelatedRecordPrivacyFilter(query, props) {
+    const rawClause = getOptionalIncidentRelatedRecordPrivacyRaw(props);
+    if (!rawClause) {
+        return query;
+    }
+    if (!query) {
+        return { incidentId: rawClause };
+    }
+    query.incidentId = combineWithPrivacyClause(query.incidentId, rawClause);
+    return query;
+}
 //# sourceMappingURL=IncidentPrivacyFilter.js.map

package/build/dist/Server/Utils/Incident/IncidentPrivacyFilter.js.map

@@ -1 +1 @@
-{"version":3,"file":"IncidentPrivacyFilter.js","sourceRoot":"","sources":["../../../../../Server/Utils/Incident/IncidentPrivacyFilter.ts"],"names":[],"mappings":"AAEA,OAAO,UAGN,MAAM,2BAA2B,CAAC;AACnC,OAAO,IAAI,MAAM,qBAAqB,CAAC;AACvC,OAAO,EAAE,wBAAwB,EAAE,MAAM,sBAAsB,CAAC;AAChE,OAAO,EAAE,GAAG,EAAE,MAAM,SAAS,CAAC;AAE9B;;;;;GAKG;AACH,MAAM,UAAU,2BAA2B,CACzC,KAAqC;;IAErC,IAAI,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,aAAa,EAAE,CAAC;QACxC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,0BAA0B,EAAE,CAAC;QACvD,MAAM,UAAU,GACd,KAAK,CAAC,0BAA0B,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC,CAAC;QAE9D,IACE,MAAA,UAAU,aAAV,UAAU,uBAAV,UAAU,CAAE,WAAW,0CAAE,IAAI,CAAC,CAAC,CAAiB,EAAW,EAAE;YAC3D,OAAO,CACL,CAAC,CAAC,UAAU,KAAK,UAAU,CAAC,YAAY;gBACxC,CAAC,CAAC,UAAU,KAAK,UAAU,CAAC,YAAY,CACzC,CAAC;QACJ,CAAC,CAAC,EACF,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,yBAAyB,CACvC,KAAqC;IAErC,IAAI,2BAA2B,CAAC,KAAK,CAAC,EAAE,CAAC;QACvC,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;QAClB,OAAO,GAAG,CAAC,CAAC,KAAa,EAAU,EAAE;YACnC,OAAO,IAAI,KAAK,eAAe,KAAK,WAAW,CAAC;QAClD,CAAC,CAAC,CAAC;IACL,CAAC;IAED,MAAM,MAAM,GAAW,UAAU,GAAG,IAAI,CAAC,kBAAkB,CAAC,EAAE,CAAC,CAAC;IAEhE,OAAO,GAAG,CACR,CAAC,KAAa,EAAU,EAAE;QACxB,OAAO,CACL,IAAI,KAAK,eAAe,KAAK,cAAc;YAC3C,mGAAmG,MAAM,mCAAmC;YAC5I,2JAA2J,MAAM,2DAA2D,CAC7N,CAAC;IACJ,CAAC,EACD;QACE,CAAC,MAAM,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,QAAQ,EAAE;KAClC,CACF,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,kCAAkC,CAChD,KAAqC;IAErC,IAAI,2BAA2B,CAAC,KAAK,CAAC,EAAE,CAAC;QACvC,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;QAClB,OAAO,GAAG,CAAC,CAAC,KAAa,EAAU,EAAE;YACnC,OAAO,IAAI,KAAK,0HAA0H,CAAC;QAC7I,CAAC,CAAC,CAAC;IACL,CAAC;IAED,MAAM,MAAM,GAAW,SAAS,GAAG,IAAI,CAAC,kBAAkB,CAAC,EAAE,CAAC,CAAC;IAE/D,OAAO,GAAG,CACR,CAAC,KAAa,EAAU,EAAE;QACxB,OAAO,CACL,IAAI,KAAK,yEAAyE;YAClF,oDAAoD;YACpD,0FAA0F,MAAM,mCAAmC;YACnI,kJAAkJ,MAAM,6DAA6D,CACtN,CAAC;IACJ,CAAC,EACD;QACE,CAAC,MAAM,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,QAAQ,EAAE;KAClC,CACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,8BAA8B,CAC5C,KAAQ,EACR,KAAqC;IAErC,MAAM,SAAS,GACb,yBAAyB,CAAC,KAAK,CAAC,CAAC;IAEnC,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,OAAO,KAAK,CAAC;IACf,CAAC;IAED,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,EAAE,SAAS,EAAE,SAAS,EAAkB,CAAC;IAClD,CAAC;IAEA,KAAa,CAAC,SAAS,GAAG,wBAAwB,CAChD,KAAa,CAAC,SAAS,EACxB,SAAS,CACV,CAAC;IACF,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,uCAAuC,CACrD,KAAQ,EACR,KAAqC;IAErC,MAAM,SAAS,GACb,kCAAkC,CAAC,KAAK,CAAC,CAAC;IAE5C,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,OAAO,KAAK,CAAC;IACf,CAAC;IAED,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,EAAE,UAAU,EAAE,SAAS,EAAkB,CAAC;IACnD,CAAC;IAEA,KAAa,CAAC,UAAU,GAAG,wBAAwB,CACjD,KAAa,CAAC,UAAU,EACzB,SAAS,CACV,CAAC;IACF,OAAO,KAAK,CAAC;AACf,CAAC"}
+{"version":3,"file":"IncidentPrivacyFilter.js","sourceRoot":"","sources":["../../../../../Server/Utils/Incident/IncidentPrivacyFilter.ts"],"names":[],"mappings":"AAEA,OAAO,UAGN,MAAM,2BAA2B,CAAC;AACnC,OAAO,IAAI,MAAM,qBAAqB,CAAC;AACvC,OAAO,EAAE,wBAAwB,EAAE,MAAM,sBAAsB,CAAC;AAChE,OAAO,EAAE,GAAG,EAAE,MAAM,SAAS,CAAC;AAE9B;;;;;GAKG;AACH,MAAM,UAAU,2BAA2B,CACzC,KAAqC;;IAErC,IAAI,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,aAAa,EAAE,CAAC;QACxC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,0BAA0B,EAAE,CAAC;QACvD,MAAM,UAAU,GACd,KAAK,CAAC,0BAA0B,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC,CAAC;QAE9D,IACE,MAAA,UAAU,aAAV,UAAU,uBAAV,UAAU,CAAE,WAAW,0CAAE,IAAI,CAAC,CAAC,CAAiB,EAAW,EAAE;YAC3D,OAAO,CACL,CAAC,CAAC,UAAU,KAAK,UAAU,CAAC,YAAY;gBACxC,CAAC,CAAC,UAAU,KAAK,UAAU,CAAC,YAAY,CACzC,CAAC;QACJ,CAAC,CAAC,EACF,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,yBAAyB,CACvC,KAAqC;IAErC,IAAI,2BAA2B,CAAC,KAAK,CAAC,EAAE,CAAC;QACvC,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;QAClB,OAAO,GAAG,CAAC,CAAC,KAAa,EAAU,EAAE;YACnC,OAAO,IAAI,KAAK,eAAe,KAAK,WAAW,CAAC;QAClD,CAAC,CAAC,CAAC;IACL,CAAC;IAED,MAAM,MAAM,GAAW,UAAU,GAAG,IAAI,CAAC,kBAAkB,CAAC,EAAE,CAAC,CAAC;IAEhE,OAAO,GAAG,CACR,CAAC,KAAa,EAAU,EAAE;QACxB,OAAO,CACL,IAAI,KAAK,eAAe,KAAK,cAAc;YAC3C,mGAAmG,MAAM,mCAAmC;YAC5I,2JAA2J,MAAM,2DAA2D,CAC7N,CAAC;IACJ,CAAC,EACD;QACE,CAAC,MAAM,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,QAAQ,EAAE;KAClC,CACF,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,kCAAkC,CAChD,KAAqC;IAErC,IAAI,2BAA2B,CAAC,KAAK,CAAC,EAAE,CAAC;QACvC,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;QAClB,OAAO,GAAG,CAAC,CAAC,KAAa,EAAU,EAAE;YACnC,OAAO,IAAI,KAAK,0HAA0H,CAAC;QAC7I,CAAC,CAAC,CAAC;IACL,CAAC;IAED,MAAM,MAAM,GAAW,SAAS,GAAG,IAAI,CAAC,kBAAkB,CAAC,EAAE,CAAC,CAAC;IAE/D,OAAO,GAAG,CACR,CAAC,KAAa,EAAU,EAAE;QACxB,OAAO,CACL,IAAI,KAAK,yEAAyE;YAClF,oDAAoD;YACpD,0FAA0F,MAAM,mCAAmC;YACnI,kJAAkJ,MAAM,6DAA6D,CACtN,CAAC;IACJ,CAAC,EACD;QACE,CAAC,MAAM,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,QAAQ,EAAE;KAClC,CACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,8BAA8B,CAC5C,KAAQ,EACR,KAAqC;IAErC,MAAM,SAAS,GACb,yBAAyB,CAAC,KAAK,CAAC,CAAC;IAEnC,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,OAAO,KAAK,CAAC;IACf,CAAC;IAED,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,EAAE,SAAS,EAAE,SAAS,EAAkB,CAAC;IAClD,CAAC;IAEA,KAAa,CAAC,SAAS,GAAG,wBAAwB,CAChD,KAAa,CAAC,SAAS,EACxB,SAAS,CACV,CAAC;IACF,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,uCAAuC,CACrD,KAAQ,EACR,KAAqC;IAErC,MAAM,SAAS,GACb,kCAAkC,CAAC,KAAK,CAAC,CAAC;IAE5C,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,OAAO,KAAK,CAAC;IACf,CAAC;IAED,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,EAAE,UAAU,EAAE,SAAS,EAAkB,CAAC;IACnD,CAAC;IAEA,KAAa,CAAC,UAAU,GAAG,wBAAwB,CACjD,KAAa,CAAC,UAAU,EACzB,SAAS,CACV,CAAC;IACF,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,0CAA0C,CACxD,KAAqC;IAErC,IAAI,2BAA2B,CAAC,KAAK,CAAC,EAAE,CAAC;QACvC,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;QAClB,OAAO,GAAG,CAAC,CAAC,KAAa,EAAU,EAAE;YACnC,OAAO,IAAI,KAAK,eAAe,KAAK,0HAA0H,CAAC;QACjK,CAAC,CAAC,CAAC;IACL,CAAC;IAED,MAAM,MAAM,GAAW,YAAY,GAAG,IAAI,CAAC,kBAAkB,CAAC,EAAE,CAAC,CAAC;IAElE,OAAO,GAAG,CACR,CAAC,KAAa,EAAU,EAAE;QACxB,OAAO,CACL,IAAI,KAAK,eAAe,KAAK,yEAAyE;YACtG,oDAAoD;YACpD,0FAA0F,MAAM,mCAAmC;YACnI,kJAAkJ,MAAM,6DAA6D,CACtN,CAAC;IACJ,CAAC,EACD;QACE,CAAC,MAAM,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,QAAQ,EAAE;KAClC,CACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,+CAA+C,CAC7D,KAAQ,EACR,KAAqC;IAErC,MAAM,SAAS,GACb,0CAA0C,CAAC,KAAK,CAAC,CAAC;IAEpD,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,OAAO,KAAK,CAAC;IACf,CAAC;IAED,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,EAAE,UAAU,EAAE,SAAS,EAAkB,CAAC;IACnD,CAAC;IAEA,KAAa,CAAC,UAAU,GAAG,wBAAwB,CACjD,KAAa,CAAC,UAAU,EACzB,SAAS,CACV,CAAC;IACF,OAAO,KAAK,CAAC;AACf,CAAC"}

package/build/dist/Server/Utils/InstanceHealth/PostgresHealth.js

@@ -0,0 +1,194 @@
+import PostgresAppInstance from "../../Infrastructure/PostgresDatabase";
+import logger from "../Logger";
+/*
+ * Postgres refuses all writes once transaction-ID age reaches 2^31. Utilization
+ * is expressed against that hard ceiling rather than autovacuum_freeze_max_age,
+ * which is only the point where autovacuum is forced to intervene and is
+ * routinely exceeded on a healthy instance.
+ */
+export const POSTGRES_WRAPAROUND_CEILING = 2147483648;
+const BYTES_PER_GB = 1024 * 1024 * 1024;
+export function gigabytesToBytes(gigabytes) {
+    return gigabytes * BYTES_PER_GB;
+}
+function toNumberOrNull(value) {
+    if (value === null || value === undefined || value === "") {
+        return null;
+    }
+    const parsed = Number(value);
+    return Number.isFinite(parsed) ? parsed : null;
+}
+/*
+ * Every probe is guarded on its own so a permission error or a feature missing
+ * on this Postgres version (pg_replication_slots columns differ across major
+ * versions) leaves that one field null instead of blanking the whole snapshot.
+ * A null field means "not evaluated"; callers must not read it as healthy.
+ */
+export async function getPostgresHealthSnapshot() {
+    var _a, _b, _c, _d, _e, _f, _g, _h, _j;
+    const dataSource = PostgresAppInstance.getDataSource();
+    if (!dataSource) {
+        return null;
+    }
+    const snapshot = {
+        databaseSizeInBytes: null,
+        walSizeInBytes: null,
+        maxConnections: null,
+        usableConnections: null,
+        clientBackends: null,
+        connectionUtilizationPercent: null,
+        transactionIdAge: null,
+        multiXactIdAge: null,
+        maxTransactionIdAge: null,
+        wraparoundUtilizationPercent: null,
+        replicationSlots: null,
+        isInRecovery: false,
+    };
+    try {
+        const rows = await dataSource.query("SELECT pg_is_in_recovery() AS in_recovery");
+        snapshot.isInRecovery = Boolean((_a = rows === null || rows === void 0 ? void 0 : rows[0]) === null || _a === void 0 ? void 0 : _a.in_recovery);
+    }
+    catch (error) {
+        logger.debug("InstanceHealth: postgres recovery-state probe failed");
+        logger.debug(error);
+    }
+    try {
+        const rows = await dataSource.query("SELECT pg_database_size(current_database()) AS size");
+        snapshot.databaseSizeInBytes = toNumberOrNull((_b = rows === null || rows === void 0 ? void 0 : rows[0]) === null || _b === void 0 ? void 0 : _b.size);
+    }
+    catch (error) {
+        logger.debug("InstanceHealth: pg_database_size probe failed");
+        logger.debug(error);
+    }
+    /*
+     * WAL is measured separately because it lives on the same volume but outside
+     * pg_database_size, and an abandoned replication slot parks tens of gigabytes
+     * there. Without it the storage check can read comfortably under threshold
+     * while the volume is full and writes are already failing. pg_ls_waldir()
+     * needs superuser or pg_monitor, so this stays best-effort.
+     */
+    try {
+        const rows = await dataSource.query("SELECT COALESCE(sum(size), 0) AS size FROM pg_ls_waldir()");
+        snapshot.walSizeInBytes = toNumberOrNull((_c = rows === null || rows === void 0 ? void 0 : rows[0]) === null || _c === void 0 ? void 0 : _c.size);
+    }
+    catch (error) {
+        logger.debug("InstanceHealth: pg_ls_waldir probe failed");
+        logger.debug(error);
+    }
+    /*
+     * Backends come from pg_stat_database.numbackends rather than counting
+     * pg_stat_activity rows. pg_stat_activity nulls backend_type (and state, and
+     * client_addr) for backends belonging to other roles unless the caller is a
+     * superuser or holds pg_read_all_stats/pg_monitor, so a filtered count sees
+     * only OneUptime's own connections on a managed or hardened cluster. That
+     * failure is silent — no error, no null — so it would read as healthy while
+     * another tenant exhausts the cluster, and would actively resolve an alert
+     * raised earlier from a privileged role. numbackends is not masked.
+     *
+     * The denominator subtracts the slots reserved for superusers (and, from PG
+     * 16, for pg_use_reserved_connections): ordinary clients are refused once
+     * those are all that remain, so measuring against raw max_connections
+     * understates saturation and can put the critical tier out of reach entirely
+     * on a small max_connections.
+     */
+    try {
+        const rows = await dataSource.query(`SELECT
+         (SELECT setting::int FROM pg_settings WHERE name = 'max_connections') AS max_connections,
+         COALESCE((SELECT setting::int FROM pg_settings WHERE name = 'superuser_reserved_connections'), 0)
+           + COALESCE((SELECT setting::int FROM pg_settings WHERE name = 'reserved_connections'), 0)
+           AS reserved_connections,
+         (SELECT COALESCE(sum(numbackends), 0) FROM pg_stat_database) AS backends`);
+        const maxConnections = toNumberOrNull((_d = rows === null || rows === void 0 ? void 0 : rows[0]) === null || _d === void 0 ? void 0 : _d.max_connections);
+        const reservedConnections = (_f = toNumberOrNull((_e = rows === null || rows === void 0 ? void 0 : rows[0]) === null || _e === void 0 ? void 0 : _e.reserved_connections)) !== null && _f !== void 0 ? _f : 0;
+        const clientBackends = toNumberOrNull((_g = rows === null || rows === void 0 ? void 0 : rows[0]) === null || _g === void 0 ? void 0 : _g.backends);
+        const usableConnections = maxConnections === null
+            ? null
+            : Math.max(1, maxConnections - reservedConnections);
+        snapshot.maxConnections = maxConnections;
+        snapshot.usableConnections = usableConnections;
+        snapshot.clientBackends = clientBackends;
+        snapshot.connectionUtilizationPercent =
+            usableConnections !== null && clientBackends !== null
+                ? (clientBackends / usableConnections) * 100
+                : null;
+    }
+    catch (error) {
+        logger.debug("InstanceHealth: postgres connection probe failed");
+        logger.debug(error);
+    }
+    /*
+     * Multixact age is an independent counter with the same 2^31 ceiling and the
+     * same consequence — Postgres stops accepting commands to avoid wraparound
+     * data loss. An FK-heavy or SELECT ... FOR SHARE workload can exhaust it while
+     * ordinary XID age looks fine, so the check reports whichever is worse.
+     */
+    try {
+        const rows = await dataSource.query(`SELECT
+         max(age(datfrozenxid)) AS max_xid_age,
+         max(mxid_age(datminmxid)) AS max_mxid_age
+       FROM pg_database`);
+        const transactionIdAge = toNumberOrNull((_h = rows === null || rows === void 0 ? void 0 : rows[0]) === null || _h === void 0 ? void 0 : _h.max_xid_age);
+        const multiXactIdAge = toNumberOrNull((_j = rows === null || rows === void 0 ? void 0 : rows[0]) === null || _j === void 0 ? void 0 : _j.max_mxid_age);
+        const maxTransactionIdAge = transactionIdAge === null && multiXactIdAge === null
+            ? null
+            : Math.max(transactionIdAge !== null && transactionIdAge !== void 0 ? transactionIdAge : 0, multiXactIdAge !== null && multiXactIdAge !== void 0 ? multiXactIdAge : 0);
+        snapshot.transactionIdAge = transactionIdAge;
+        snapshot.multiXactIdAge = multiXactIdAge;
+        snapshot.maxTransactionIdAge = maxTransactionIdAge;
+        snapshot.wraparoundUtilizationPercent =
+            maxTransactionIdAge !== null
+                ? (maxTransactionIdAge / POSTGRES_WRAPAROUND_CEILING) * 100
+                : null;
+    }
+    catch (error) {
+        logger.debug("InstanceHealth: postgres wraparound probe failed");
+        logger.debug(error);
+    }
+    /*
+     * wal_status arrived in Postgres 13. On an older external database the column
+     * simply does not exist and the whole statement errors, which would silence
+     * the slot check entirely — even though restart_lsn and pg_wal_lsn_diff are
+     * available there and the retained-WAL half of the check works fine. So the
+     * version-specific column is dropped on a retry rather than taking the rest
+     * of the probe down with it.
+     */
+    const buildSlotQuery = (withWalStatus) => {
+        return `SELECT
+         slot_name,
+         slot_type,
+         active,
+         ${withWalStatus ? "COALESCE(wal_status, 'unknown')" : "'unknown'"} AS wal_status,
+         CASE WHEN pg_is_in_recovery() THEN NULL
+              ELSE pg_wal_lsn_diff(pg_current_wal_lsn(), restart_lsn) END AS retained_bytes
+       FROM pg_replication_slots
+       ORDER BY slot_name ASC`;
+    };
+    let slotRows = null;
+    try {
+        slotRows = await dataSource.query(buildSlotQuery(true));
+    }
+    catch (error) {
+        logger.debug("InstanceHealth: pg_replication_slots probe failed, retrying without wal_status");
+        logger.debug(error);
+        try {
+            slotRows = await dataSource.query(buildSlotQuery(false));
+        }
+        catch (retryError) {
+            logger.debug("InstanceHealth: pg_replication_slots probe failed");
+            logger.debug(retryError);
+        }
+    }
+    if (slotRows) {
+        snapshot.replicationSlots = slotRows.map((row) => {
+            return {
+                slotName: String(row.slot_name || ""),
+                slotType: String(row.slot_type || "unknown"),
+                isActive: Boolean(row.active),
+                walStatus: String(row.wal_status || "unknown"),
+                retainedWalInBytes: toNumberOrNull(row.retained_bytes),
+            };
+        });
+    }
+    return snapshot;
+}
+//# sourceMappingURL=PostgresHealth.js.map

package/build/dist/Server/Utils/InstanceHealth/PostgresHealth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"PostgresHealth.js","sourceRoot":"","sources":["../../../../../Server/Utils/InstanceHealth/PostgresHealth.ts"],"names":[],"mappings":"AAAA,OAAO,mBAEN,MAAM,uCAAuC,CAAC;AAC/C,OAAO,MAAM,MAAM,WAAW,CAAC;AAE/B;;;;;GAKG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAW,UAAU,CAAC;AAE9D,MAAM,YAAY,GAAW,IAAI,GAAG,IAAI,GAAG,IAAI,CAAC;AAsChD,MAAM,UAAU,gBAAgB,CAAC,SAAiB;IAChD,OAAO,SAAS,GAAG,YAAY,CAAC;AAClC,CAAC;AAED,SAAS,cAAc,CAAC,KAAc;IACpC,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,EAAE,EAAE,CAAC;QAC1D,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,MAAM,GAAW,MAAM,CAAC,KAAK,CAAC,CAAC;IACrC,OAAO,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;AACjD,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,yBAAyB;;IAC7C,MAAM,UAAU,GAA0B,mBAAmB,CAAC,aAAa,EAAE,CAAC;IAE9E,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,QAAQ,GAA2B;QACvC,mBAAmB,EAAE,IAAI;QACzB,cAAc,EAAE,IAAI;QACpB,cAAc,EAAE,IAAI;QACpB,iBAAiB,EAAE,IAAI;QACvB,cAAc,EAAE,IAAI;QACpB,4BAA4B,EAAE,IAAI;QAClC,gBAAgB,EAAE,IAAI;QACtB,cAAc,EAAE,IAAI;QACpB,mBAAmB,EAAE,IAAI;QACzB,4BAA4B,EAAE,IAAI;QAClC,gBAAgB,EAAE,IAAI;QACtB,YAAY,EAAE,KAAK;KACpB,CAAC;IAEF,IAAI,CAAC;QACH,MAAM,IAAI,GAAoC,MAAM,UAAU,CAAC,KAAK,CAClE,2CAA2C,CAC5C,CAAC;QACF,QAAQ,CAAC,YAAY,GAAG,OAAO,CAAC,MAAA,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAG,CAAC,CAAC,0CAAE,WAAW,CAAC,CAAC;IAC1D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,KAAK,CAAC,sDAAsD,CAAC,CAAC;QACrE,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACtB,CAAC;IAED,IAAI,CAAC;QACH,MAAM,IAAI,GAA4B,MAAM,UAAU,CAAC,KAAK,CAC1D,qDAAqD,CACtD,CAAC;QACF,QAAQ,CAAC,mBAAmB,GAAG,cAAc,CAAC,MAAA,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAG,CAAC,CAAC,0CAAE,IAAI,CAAC,CAAC;IACjE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,KAAK,CAAC,+CAA+C,CAAC,CAAC;QAC9D,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACtB,CAAC;IAED;;;;;;OAMG;IACH,IAAI,CAAC;QACH,MAAM,IAAI,GAA4B,MAAM,UAAU,CAAC,KAAK,CAC1D,2DAA2D,CAC5D,CAAC;QACF,QAAQ,CAAC,cAAc,GAAG,cAAc,CAAC,MAAA,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAG,CAAC,CAAC,0CAAE,IAAI,CAAC,CAAC;IAC5D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,KAAK,CAAC,2CAA2C,CAAC,CAAC;QAC1D,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACtB,CAAC;IAED;;;;;;;;;;;;;;;OAeG;IACH,IAAI,CAAC;QACH,MAAM,IAAI,GAIL,MAAM,UAAU,CAAC,KAAK,CACzB;;;;;kFAK4E,CAC7E,CAAC;QAEF,MAAM,cAAc,GAAkB,cAAc,CAClD,MAAA,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAG,CAAC,CAAC,0CAAE,eAAe,CAC3B,CAAC;QACF,MAAM,mBAAmB,GACvB,MAAA,cAAc,CAAC,MAAA,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAG,CAAC,CAAC,0CAAE,oBAAoB,CAAC,mCAAI,CAAC,CAAC;QACvD,MAAM,cAAc,GAAkB,cAAc,CAAC,MAAA,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAG,CAAC,CAAC,0CAAE,QAAQ,CAAC,CAAC;QAC1E,MAAM,iBAAiB,GACrB,cAAc,KAAK,IAAI;YACrB,CAAC,CAAC,IAAI;YACN,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,cAAc,GAAG,mBAAmB,CAAC,CAAC;QAExD,QAAQ,CAAC,cAAc,GAAG,cAAc,CAAC;QACzC,QAAQ,CAAC,iBAAiB,GAAG,iBAAiB,CAAC;QAC/C,QAAQ,CAAC,cAAc,GAAG,cAAc,CAAC;QACzC,QAAQ,CAAC,4BAA4B;YACnC,iBAAiB,KAAK,IAAI,IAAI,cAAc,KAAK,IAAI;gBACnD,CAAC,CAAC,CAAC,cAAc,GAAG,iBAAiB,CAAC,GAAG,GAAG;gBAC5C,CAAC,CAAC,IAAI,CAAC;IACb,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,KAAK,CAAC,kDAAkD,CAAC,CAAC;QACjE,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACtB,CAAC;IAED;;;;;OAKG;IACH,IAAI,CAAC;QACH,MAAM,IAAI,GAGL,MAAM,UAAU,CAAC,KAAK,CACzB;;;wBAGkB,CACnB,CAAC;QAEF,MAAM,gBAAgB,GAAkB,cAAc,CACpD,MAAA,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAG,CAAC,CAAC,0CAAE,WAAW,CACvB,CAAC;QACF,MAAM,cAAc,GAAkB,cAAc,CAClD,MAAA,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAG,CAAC,CAAC,0CAAE,YAAY,CACxB,CAAC;QACF,MAAM,mBAAmB,GACvB,gBAAgB,KAAK,IAAI,IAAI,cAAc,KAAK,IAAI;YAClD,CAAC,CAAC,IAAI;YACN,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,gBAAgB,aAAhB,gBAAgB,cAAhB,gBAAgB,GAAI,CAAC,EAAE,cAAc,aAAd,cAAc,cAAd,cAAc,GAAI,CAAC,CAAC,CAAC;QAE3D,QAAQ,CAAC,gBAAgB,GAAG,gBAAgB,CAAC;QAC7C,QAAQ,CAAC,cAAc,GAAG,cAAc,CAAC;QACzC,QAAQ,CAAC,mBAAmB,GAAG,mBAAmB,CAAC;QACnD,QAAQ,CAAC,4BAA4B;YACnC,mBAAmB,KAAK,IAAI;gBAC1B,CAAC,CAAC,CAAC,mBAAmB,GAAG,2BAA2B,CAAC,GAAG,GAAG;gBAC3D,CAAC,CAAC,IAAI,CAAC;IACb,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,KAAK,CAAC,kDAAkD,CAAC,CAAC;QACjE,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACtB,CAAC;IAED;;;;;;;OAOG;IACH,MAAM,cAAc,GAAuC,CACzD,aAAsB,EACd,EAAE;QACV,OAAO;;;;WAIA,aAAa,CAAC,CAAC,CAAC,iCAAiC,CAAC,CAAC,CAAC,WAAW;;;;8BAI5C,CAAC;IAC7B,CAAC,CAAC;IAUF,IAAI,QAAQ,GAA0B,IAAI,CAAC;IAE3C,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,UAAU,CAAC,KAAK,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC;IAC1D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,KAAK,CACV,gFAAgF,CACjF,CAAC;QACF,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAEpB,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,UAAU,CAAC,KAAK,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC;QAC3D,CAAC;QAAC,OAAO,UAAU,EAAE,CAAC;YACpB,MAAM,CAAC,KAAK,CAAC,mDAAmD,CAAC,CAAC;YAClE,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QAC3B,CAAC;IACH,CAAC;IAED,IAAI,QAAQ,EAAE,CAAC;QACb,QAAQ,CAAC,gBAAgB,GAAG,QAAQ,CAAC,GAAG,CACtC,CAAC,GAAY,EAAmC,EAAE;YAChD,OAAO;gBACL,QAAQ,EAAE,MAAM,CAAC,GAAG,CAAC,SAAS,IAAI,EAAE,CAAC;gBACrC,QAAQ,EAAE,MAAM,CAAC,GAAG,CAAC,SAAS,IAAI,SAAS,CAAC;gBAC5C,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC;gBAC7B,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC,UAAU,IAAI,SAAS,CAAC;gBAC9C,kBAAkB,EAAE,cAAc,CAAC,GAAG,CAAC,cAAc,CAAC;aACvD,CAAC;QACJ,CAAC,CACF,CAAC;IACJ,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC"}