@oneuptime/common 11.7.4 → 12.0.0

package/build/dist/Server/Services/RumSessionPinService.js

@@ -0,0 +1,208 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+import DatabaseService from "./DatabaseService";
+import Model from "../../Models/DatabaseModels/RumSessionPin";
+import BadDataException from "../../Types/Exception/BadDataException";
+import OneUptimeDate from "../../Types/Date";
+import QueryHelper from "../Types/Database/QueryHelper";
+import CaptureSpan from "../Utils/Telemetry/CaptureSpan";
+/* Postgres unique_violation. https://www.postgresql.org/docs/current/errcodes-appendix.html */
+const UNIQUE_VIOLATION = "23505";
+/*
+ * TypeORM wraps driver failures in QueryFailedError, which hoists the pg
+ * fields onto itself but also keeps the original under `driverError`.
+ * Check both rather than assuming which one carries the code.
+ */
+const isUniqueViolation = (error) => {
+    if (!error || typeof error !== "object") {
+        return false;
+    }
+    if (error.code === UNIQUE_VIOLATION) {
+        return true;
+    }
+    const driverError = error.driverError;
+    return Boolean(driverError &&
+        typeof driverError === "object" &&
+        driverError.code === UNIQUE_VIOLATION);
+};
+/*
+ * Pins that keep a session recording past its retention window.
+ *
+ * The unique index on (projectId, rumApplicationId, sessionId) is the real
+ * guard against duplicate copies; this service turns the resulting
+ * constraint violation into an idempotent "already pinned" so that
+ * clicking Pin twice, or pinning the same recording from two incidents,
+ * is not an error the user has to interpret.
+ */
+export class Service extends DatabaseService {
+    constructor() {
+        super(Model);
+    }
+    async onBeforeCreate(createBy) {
+        if (!createBy.data.projectId) {
+            throw new BadDataException("projectId is required");
+        }
+        if (!createBy.data.rumApplicationId) {
+            throw new BadDataException("rumApplicationId is required");
+        }
+        if (!createBy.data.sessionId) {
+            throw new BadDataException("sessionId is required");
+        }
+        /*
+         * materializedAt is never client-supplied: it asserts that the
+         * recording has actually been copied out of the expiring table, and
+         * a client that could set it would make an unprotected recording look
+         * protected.
+         */
+        delete createBy.data.materializedAt;
+        /*
+         * Assigned or removed, never left as the client sent it. pinnedByUserId
+         * is declared `computed` on the model, which is what lets this
+         * assignment survive the create-column permission check that runs after
+         * this hook; the delete is what stops an API-key caller (no
+         * props.userId) attributing the pin to a colleague.
+         */
+        if (createBy.props.userId) {
+            createBy.data.pinnedByUserId = createBy.props.userId;
+        }
+        else {
+            delete createBy.data.pinnedByUserId;
+        }
+        return { createBy, carryForward: null };
+    }
+    /*
+     * Pinning is idempotent, which is the whole reason this override exists.
+     * Clicking Pin twice, or pinning the same recording from two incidents,
+     * hits the unique index on (projectId, rumApplicationId, sessionId) and
+     * would otherwise surface as a raw 500 carrying a Postgres constraint
+     * name: checkForUniqueValues only understands single-column `unique`
+     * metadata, not a composite @Index, so nothing else catches it.
+     *
+     * The pre-check handles the common case and the catch closes the race
+     * between two concurrent pins of the same session.
+     */
+    async create(createBy) {
+        const projectId = createBy.data.projectId;
+        const rumApplicationId = createBy.data.rumApplicationId;
+        const sessionId = createBy.data.sessionId;
+        if (!projectId || !rumApplicationId || !sessionId) {
+            /* Let onBeforeCreate produce the specific validation message. */
+            return await super.create(createBy);
+        }
+        const existingPin = await this.getPinForSession({
+            projectId: projectId,
+            rumApplicationId: rumApplicationId,
+            sessionId: sessionId,
+        });
+        if (existingPin) {
+            return existingPin;
+        }
+        try {
+            return await super.create(createBy);
+        }
+        catch (err) {
+            if (!isUniqueViolation(err)) {
+                throw err;
+            }
+            const racedPin = await this.getPinForSession({
+                projectId: projectId,
+                rumApplicationId: rumApplicationId,
+                sessionId: sessionId,
+            });
+            if (racedPin) {
+                return racedPin;
+            }
+            throw err;
+        }
+    }
+    /* Null when the recording is not pinned. */
+    async getPinForSession(data) {
+        return await this.findOneBy({
+            query: {
+                projectId: data.projectId,
+                rumApplicationId: data.rumApplicationId,
+                sessionId: data.sessionId,
+            },
+            select: {
+                _id: true,
+                reason: true,
+                incidentId: true,
+                alertId: true,
+                expiresAt: true,
+                materializedAt: true,
+                pinnedByUserId: true,
+            },
+            props: { isRoot: true },
+        });
+    }
+    /*
+     * Pins whose copy has not happened yet. This is the worker's queue, and
+     * it is also the honest answer to "is this recording safe?" - a pin
+     * without a materializedAt protects nothing.
+     */
+    async getUnmaterializedPins(data) {
+        return await this.findBy({
+            query: {
+                materializedAt: QueryHelper.isNull(),
+            },
+            select: {
+                _id: true,
+                projectId: true,
+                rumApplicationId: true,
+                sessionId: true,
+                expiresAt: true,
+            },
+            skip: 0,
+            limit: data.limit,
+            props: { isRoot: true },
+        });
+    }
+    async markMaterialized(data) {
+        await this.updateOneById({
+            id: data.pinId,
+            data: {
+                materializedAt: OneUptimeDate.getCurrentDate(),
+            },
+            props: { isRoot: true },
+        });
+    }
+}
+__decorate([
+    CaptureSpan(),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object]),
+    __metadata("design:returntype", Promise)
+], Service.prototype, "onBeforeCreate", null);
+__decorate([
+    CaptureSpan(),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object]),
+    __metadata("design:returntype", Promise)
+], Service.prototype, "create", null);
+__decorate([
+    CaptureSpan(),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object]),
+    __metadata("design:returntype", Promise)
+], Service.prototype, "getPinForSession", null);
+__decorate([
+    CaptureSpan(),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object]),
+    __metadata("design:returntype", Promise)
+], Service.prototype, "getUnmaterializedPins", null);
+__decorate([
+    CaptureSpan(),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object]),
+    __metadata("design:returntype", Promise)
+], Service.prototype, "markMaterialized", null);
+export default new Service();
+//# sourceMappingURL=RumSessionPinService.js.map

package/build/dist/Server/Services/RumSessionPinService.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"RumSessionPinService.js","sourceRoot":"","sources":["../../../../Server/Services/RumSessionPinService.ts"],"names":[],"mappings":";;;;;;;;;AAAA,OAAO,eAAe,MAAM,mBAAmB,CAAC;AAChD,OAAO,KAAK,MAAM,2CAA2C,CAAC;AAC9D,OAAO,gBAAgB,MAAM,wCAAwC,CAAC;AAEtE,OAAO,aAAa,MAAM,kBAAkB,CAAC;AAG7C,OAAO,WAAW,MAAM,+BAA+B,CAAC;AACxD,OAAO,WAAW,MAAM,gCAAgC,CAAC;AAEzD,+FAA+F;AAC/F,MAAM,gBAAgB,GAAW,OAAO,CAAC;AAIzC;;;;GAIG;AACH,MAAM,iBAAiB,GAA8B,CACnD,KAAc,EACL,EAAE;IACX,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACxC,OAAO,KAAK,CAAC;IACf,CAAC;IAED,IAAK,KAAuC,CAAC,IAAI,KAAK,gBAAgB,EAAE,CAAC;QACvE,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,WAAW,GAAa,KAAmC,CAAC,WAAW,CAAC;IAE9E,OAAO,OAAO,CACZ,WAAW;QACT,OAAO,WAAW,KAAK,QAAQ;QAC9B,WAA6C,CAAC,IAAI,KAAK,gBAAgB,CAC3E,CAAC;AACJ,CAAC,CAAC;AAEF;;;;;;;;GAQG;AACH,MAAM,OAAO,OAAQ,SAAQ,eAAsB;IACjD;QACE,KAAK,CAAC,KAAK,CAAC,CAAC;IACf,CAAC;IAGwB,AAAN,KAAK,CAAC,cAAc,CACrC,QAAyB;QAEzB,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;YAC7B,MAAM,IAAI,gBAAgB,CAAC,uBAAuB,CAAC,CAAC;QACtD,CAAC;QAED,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,gBAAgB,EAAE,CAAC;YACpC,MAAM,IAAI,gBAAgB,CAAC,8BAA8B,CAAC,CAAC;QAC7D,CAAC;QAED,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;YAC7B,MAAM,IAAI,gBAAgB,CAAC,uBAAuB,CAAC,CAAC;QACtD,CAAC;QAED;;;;;WAKG;QACH,OAAO,QAAQ,CAAC,IAAI,CAAC,cAAc,CAAC;QAEpC;;;;;;WAMG;QACH,IAAI,QAAQ,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;YAC1B,QAAQ,CAAC,IAAI,CAAC,cAAc,GAAG,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC;QACvD,CAAC;aAAM,CAAC;YACN,OAAO,QAAQ,CAAC,IAAI,CAAC,cAAc,CAAC;QACtC,CAAC;QAED,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;IAC1C,CAAC;IAED;;;;;;;;;;OAUG;IAEmB,AAAN,KAAK,CAAC,MAAM,CAAC,QAAyB;QACpD,MAAM,SAAS,GAAyB,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC;QAChE,MAAM,gBAAgB,GACpB,QAAQ,CAAC,IAAI,CAAC,gBAAgB,CAAC;QACjC,MAAM,SAAS,GAAuB,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC;QAE9D,IAAI,CAAC,SAAS,IAAI,CAAC,gBAAgB,IAAI,CAAC,SAAS,EAAE,CAAC;YAClD,iEAAiE;YACjE,OAAO,MAAM,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QACtC,CAAC;QAED,MAAM,WAAW,GAAiB,MAAM,IAAI,CAAC,gBAAgB,CAAC;YAC5D,SAAS,EAAE,SAAS;YACpB,gBAAgB,EAAE,gBAAgB;YAClC,SAAS,EAAE,SAAS;SACrB,CAAC,CAAC;QAEH,IAAI,WAAW,EAAE,CAAC;YAChB,OAAO,WAAW,CAAC;QACrB,CAAC;QAED,IAAI,CAAC;YACH,OAAO,MAAM,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QACtC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC5B,MAAM,GAAG,CAAC;YACZ,CAAC;YAED,MAAM,QAAQ,GAAiB,MAAM,IAAI,CAAC,gBAAgB,CAAC;gBACzD,SAAS,EAAE,SAAS;gBACpB,gBAAgB,EAAE,gBAAgB;gBAClC,SAAS,EAAE,SAAS;aACrB,CAAC,CAAC;YAEH,IAAI,QAAQ,EAAE,CAAC;gBACb,OAAO,QAAQ,CAAC;YAClB,CAAC;YAED,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC;IAED,4CAA4C;IAE/B,AAAN,KAAK,CAAC,gBAAgB,CAAC,IAI7B;QACC,OAAO,MAAM,IAAI,CAAC,SAAS,CAAC;YAC1B,KAAK,EAAE;gBACL,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;gBACvC,SAAS,EAAE,IAAI,CAAC,SAAS;aAC1B;YACD,MAAM,EAAE;gBACN,GAAG,EAAE,IAAI;gBACT,MAAM,EAAE,IAAI;gBACZ,UAAU,EAAE,IAAI;gBAChB,OAAO,EAAE,IAAI;gBACb,SAAS,EAAE,IAAI;gBACf,cAAc,EAAE,IAAI;gBACpB,cAAc,EAAE,IAAI;aACrB;YACD,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE;SACxB,CAAC,CAAC;IACL,CAAC;IAED;;;;OAIG;IAEU,AAAN,KAAK,CAAC,qBAAqB,CAAC,IAElC;QACC,OAAO,MAAM,IAAI,CAAC,MAAM,CAAC;YACvB,KAAK,EAAE;gBACL,cAAc,EAAE,WAAW,CAAC,MAAM,EAAE;aACrC;YACD,MAAM,EAAE;gBACN,GAAG,EAAE,IAAI;gBACT,SAAS,EAAE,IAAI;gBACf,gBAAgB,EAAE,IAAI;gBACtB,SAAS,EAAE,IAAI;gBACf,SAAS,EAAE,IAAI;aAChB;YACD,IAAI,EAAE,CAAC;YACP,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE;SACxB,CAAC,CAAC;IACL,CAAC;IAGY,AAAN,KAAK,CAAC,gBAAgB,CAAC,IAAyB;QACrD,MAAM,IAAI,CAAC,aAAa,CAAC;YACvB,EAAE,EAAE,IAAI,CAAC,KAAK;YACd,IAAI,EAAE;gBACJ,cAAc,EAAE,aAAa,CAAC,cAAc,EAAE;aAC/C;YACD,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE;SACxB,CAAC,CAAC;IACL,CAAC;CACF;AA3J0B;IADxB,WAAW,EAAE;;;;6CAsCb;AAcqB;IADrB,WAAW,EAAE;;;;qCAyCb;AAIY;IADZ,WAAW,EAAE;;;;+CAuBb;AAQY;IADZ,WAAW,EAAE;;;;oDAmBb;AAGY;IADZ,WAAW,EAAE;;;;+CASb;AAGH,eAAe,IAAI,OAAO,EAAE,CAAC"}

package/build/dist/Server/Services/RumSessionReplayViewService.js

@@ -0,0 +1,180 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+import DatabaseService from "./DatabaseService";
+import Model from "../../Models/DatabaseModels/RumSessionReplayView";
+import ColumnLength from "../../Types/Database/ColumnLength";
+import { LIMIT_PER_PROJECT } from "../../Types/Database/LimitMax";
+import OneUptimeDate from "../../Types/Date";
+import SortOrder from "../../Types/BaseDatabase/SortOrder";
+import CaptureSpan from "../Utils/Telemetry/CaptureSpan";
+/*
+ * Session replay read audit.
+ *
+ * Every write here happens as root from the playback API, not from a
+ * client, because the audit row has to be written whether or not the
+ * caller would have had permission to create it - and because the caller
+ * must not be able to choose what it says.
+ *
+ * No hardDeleteItemsOlderThanInDays: unlike the SCIM logs this table is
+ * modelled on, the whole point of the audit is that it outlives the
+ * recording it describes.
+ */
+export class Service extends DatabaseService {
+    constructor() {
+        super(Model);
+    }
+    /*
+     * Record that somebody opened a recording for playback. Called from the
+     * manifest endpoint BEFORE any payload byte is served, so a read that
+     * fails halfway through is still audited.
+     */
+    async recordView(data) {
+        const item = new Model();
+        item.projectId = data.projectId;
+        item.rumApplicationId = data.rumApplicationId;
+        item.sessionId = data.sessionId;
+        item.viewedAt = OneUptimeDate.getCurrentDate();
+        item.secondsWatched = 0;
+        if (data.viewedByUserId) {
+            item.viewedByUserId = data.viewedByUserId;
+            /*
+             * The row is created as root, so createdByUserId would otherwise be
+             * null and the audit would not name the human behind the read.
+             */
+            item.createdByUserId = data.viewedByUserId;
+        }
+        if (data.viewedByApiKeyId) {
+            item.viewedByApiKeyId = data.viewedByApiKeyId;
+        }
+        /*
+         * All three come straight off an untrusted request: a header, or a
+         * free-text field in the body. Truncated rather than validated because
+         * failing the audit write would fail the playback it is auditing, and
+         * DatabaseService.checkMaxLengthOfFields throws on anything longer
+         * than the column. An oversized user agent must not be able to stop a
+         * read from being recorded.
+         */
+        if (data.ipAddress) {
+            item.ipAddress = data.ipAddress.substring(0, ColumnLength.ShortText);
+        }
+        if (data.userAgent) {
+            item.userAgent = data.userAgent.substring(0, ColumnLength.LongText);
+        }
+        if (data.accessReason) {
+            item.accessReason = data.accessReason.substring(0, ColumnLength.LongText);
+        }
+        if (data.linkedIncidentId) {
+            item.linkedIncidentId = data.linkedIncidentId;
+        }
+        if (data.linkedExceptionFingerprint) {
+            item.linkedExceptionFingerprint = data.linkedExceptionFingerprint;
+        }
+        return await this.create({
+            data: item,
+            props: { isRoot: true },
+        });
+    }
+    /*
+     * Advance how much of the recording was actually watched, from the
+     * player's throttled heartbeat.
+     *
+     * Monotonic on purpose: the heartbeat carries a cumulative total, and a
+     * player that seeks backwards or reloads would otherwise walk the
+     * recorded figure back down and make a full viewing look like a glance.
+     */
+    async recordSecondsWatched(data) {
+        if (!Number.isFinite(data.secondsWatched) || data.secondsWatched <= 0) {
+            return;
+        }
+        const existing = await this.findOneBy({
+            query: {
+                _id: data.viewId.toString(),
+                projectId: data.projectId,
+            },
+            select: {
+                _id: true,
+                secondsWatched: true,
+            },
+            props: { isRoot: true },
+        });
+        if (!existing) {
+            return;
+        }
+        const seconds = Math.floor(data.secondsWatched);
+        if ((existing.secondsWatched || 0) >= seconds) {
+            return;
+        }
+        await this.updateOneById({
+            id: data.viewId,
+            data: {
+                secondsWatched: seconds,
+            },
+            props: { isRoot: true },
+        });
+    }
+    /*
+     * Who has watched this recording. Shown on the player itself, not only
+     * in a log - inward visibility changes behaviour more than an audit
+     * trail nobody reads.
+     */
+    async getViewsForSession(data) {
+        return await this.findBy({
+            query: {
+                projectId: data.projectId,
+                rumApplicationId: data.rumApplicationId,
+                sessionId: data.sessionId,
+            },
+            select: {
+                _id: true,
+                viewedAt: true,
+                secondsWatched: true,
+                accessReason: true,
+                viewedByUserId: true,
+                viewedByUser: {
+                    _id: true,
+                    name: true,
+                    email: true,
+                    profilePictureId: true,
+                },
+            },
+            sort: {
+                viewedAt: SortOrder.Descending,
+            },
+            skip: 0,
+            /*
+             * Clamped rather than passed through: findBy rejects anything above
+             * LIMIT_PER_PROJECT with an exception, and a too-large page is not
+             * worth failing an audit listing over.
+             */
+            limit: Math.min(Math.max(data.limit, 1), LIMIT_PER_PROJECT),
+            props: { isRoot: true },
+        });
+    }
+}
+__decorate([
+    CaptureSpan(),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object]),
+    __metadata("design:returntype", Promise)
+], Service.prototype, "recordView", null);
+__decorate([
+    CaptureSpan(),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object]),
+    __metadata("design:returntype", Promise)
+], Service.prototype, "recordSecondsWatched", null);
+__decorate([
+    CaptureSpan(),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object]),
+    __metadata("design:returntype", Promise)
+], Service.prototype, "getViewsForSession", null);
+export default new Service();
+//# sourceMappingURL=RumSessionReplayViewService.js.map

package/build/dist/Server/Services/RumSessionReplayViewService.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"RumSessionReplayViewService.js","sourceRoot":"","sources":["../../../../Server/Services/RumSessionReplayViewService.ts"],"names":[],"mappings":";;;;;;;;;AAAA,OAAO,eAAe,MAAM,mBAAmB,CAAC;AAChD,OAAO,KAAK,MAAM,kDAAkD,CAAC;AACrE,OAAO,YAAY,MAAM,mCAAmC,CAAC;AAC7D,OAAO,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAC;AAElE,OAAO,aAAa,MAAM,kBAAkB,CAAC;AAC7C,OAAO,SAAS,MAAM,oCAAoC,CAAC;AAC3D,OAAO,WAAW,MAAM,gCAAgC,CAAC;AAEzD;;;;;;;;;;;GAWG;AACH,MAAM,OAAO,OAAQ,SAAQ,eAAsB;IACjD;QACE,KAAK,CAAC,KAAK,CAAC,CAAC;IACf,CAAC;IAED;;;;OAIG;IAEU,AAAN,KAAK,CAAC,UAAU,CAAC,IAWvB;QACC,MAAM,IAAI,GAAU,IAAI,KAAK,EAAE,CAAC;QAEhC,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;QAChC,IAAI,CAAC,gBAAgB,GAAG,IAAI,CAAC,gBAAgB,CAAC;QAC9C,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;QAChC,IAAI,CAAC,QAAQ,GAAG,aAAa,CAAC,cAAc,EAAE,CAAC;QAC/C,IAAI,CAAC,cAAc,GAAG,CAAC,CAAC;QAExB,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;YACxB,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC,cAAc,CAAC;YAC1C;;;eAGG;YACH,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC,cAAc,CAAC;QAC7C,CAAC;QAED,IAAI,IAAI,CAAC,gBAAgB,EAAE,CAAC;YAC1B,IAAI,CAAC,gBAAgB,GAAG,IAAI,CAAC,gBAAgB,CAAC;QAChD,CAAC;QAED;;;;;;;WAOG;QACH,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACnB,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,EAAE,YAAY,CAAC,SAAS,CAAC,CAAC;QACvE,CAAC;QAED,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACnB,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,EAAE,YAAY,CAAC,QAAQ,CAAC,CAAC;QACtE,CAAC;QAED,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;YACtB,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC,EAAE,YAAY,CAAC,QAAQ,CAAC,CAAC;QAC5E,CAAC;QAED,IAAI,IAAI,CAAC,gBAAgB,EAAE,CAAC;YAC1B,IAAI,CAAC,gBAAgB,GAAG,IAAI,CAAC,gBAAgB,CAAC;QAChD,CAAC;QAED,IAAI,IAAI,CAAC,0BAA0B,EAAE,CAAC;YACpC,IAAI,CAAC,0BAA0B,GAAG,IAAI,CAAC,0BAA0B,CAAC;QACpE,CAAC;QAED,OAAO,MAAM,IAAI,CAAC,MAAM,CAAC;YACvB,IAAI,EAAE,IAAI;YACV,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE;SACxB,CAAC,CAAC;IACL,CAAC;IAED;;;;;;;OAOG;IAEU,AAAN,KAAK,CAAC,oBAAoB,CAAC,IAIjC;QACC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,IAAI,CAAC,cAAc,IAAI,CAAC,EAAE,CAAC;YACtE,OAAO;QACT,CAAC;QAED,MAAM,QAAQ,GAAiB,MAAM,IAAI,CAAC,SAAS,CAAC;YAClD,KAAK,EAAE;gBACL,GAAG,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE;gBAC3B,SAAS,EAAE,IAAI,CAAC,SAAS;aAC1B;YACD,MAAM,EAAE;gBACN,GAAG,EAAE,IAAI;gBACT,cAAc,EAAE,IAAI;aACrB;YACD,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE;SACxB,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO;QACT,CAAC;QAED,MAAM,OAAO,GAAW,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QAExD,IAAI,CAAC,QAAQ,CAAC,cAAc,IAAI,CAAC,CAAC,IAAI,OAAO,EAAE,CAAC;YAC9C,OAAO;QACT,CAAC;QAED,MAAM,IAAI,CAAC,aAAa,CAAC;YACvB,EAAE,EAAE,IAAI,CAAC,MAAM;YACf,IAAI,EAAE;gBACJ,cAAc,EAAE,OAAO;aACxB;YACD,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE;SACxB,CAAC,CAAC;IACL,CAAC;IAED;;;;OAIG;IAEU,AAAN,KAAK,CAAC,kBAAkB,CAAC,IAW/B;QACC,OAAO,MAAM,IAAI,CAAC,MAAM,CAAC;YACvB,KAAK,EAAE;gBACL,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;gBACvC,SAAS,EAAE,IAAI,CAAC,SAAS;aAC1B;YACD,MAAM,EAAE;gBACN,GAAG,EAAE,IAAI;gBACT,QAAQ,EAAE,IAAI;gBACd,cAAc,EAAE,IAAI;gBACpB,YAAY,EAAE,IAAI;gBAClB,cAAc,EAAE,IAAI;gBACpB,YAAY,EAAE;oBACZ,GAAG,EAAE,IAAI;oBACT,IAAI,EAAE,IAAI;oBACV,KAAK,EAAE,IAAI;oBACX,gBAAgB,EAAE,IAAI;iBACvB;aACF;YACD,IAAI,EAAE;gBACJ,QAAQ,EAAE,SAAS,CAAC,UAAU;aAC/B;YACD,IAAI,EAAE,CAAC;YACP;;;;eAIG;YACH,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,EAAE,iBAAiB,CAAC;YAC3D,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE;SACxB,CAAC,CAAC;IACL,CAAC;CACF;AAtKc;IADZ,WAAW,EAAE;;;;yCAkEb;AAWY;IADZ,WAAW,EAAE;;;;mDAuCb;AAQY;IADZ,WAAW,EAAE;;;;iDA4Cb;AAGH,eAAe,IAAI,OAAO,EAAE,CAAC"}

package/build/dist/Server/Services/RumSessionService.js

@@ -0,0 +1,102 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+import AnalyticsDatabaseService from "./AnalyticsDatabaseService";
+import RumSession from "../../Models/AnalyticsModels/RumSession";
+import CaptureSpan from "../Utils/Telemetry/CaptureSpan";
+import TableColumnType from "../../Types/AnalyticsDatabase/TableColumnType";
+import { SQL } from "../Utils/AnalyticsDatabase/Statement";
+import { getQuerySettings } from "../Utils/AnalyticsDatabase/QuerySettingsHelper";
+export class RumSessionService extends AnalyticsDatabaseService {
+    constructor(clickhouseDatabase) {
+        super({ modelType: RumSession, database: clickhouseDatabase });
+    }
+    /*
+     * Session-replay usage for billing.
+     *
+     * Deliberately NOT the inherited groupTelemetryUsageByService, for two
+     * reasons that both matter:
+     *
+     * 1. It meters off THIS table, never the chunk table. Chunks are
+     *    partitioned by expiry date, so a "yesterday" window over them cannot
+     *    prune partitions and would full-scan a multi-gigabyte blob table under
+     *    the 120s cap. A timeout there is not a retry - stageTelemetryUsage
+     *    always targets yesterday and nothing re-stages an older date, so the
+     *    day would be billed as zero permanently.
+     *
+     * 2. It sums the exact payloadBytes recorded at ingest rather than
+     *    byteSize(*). byteSize is ClickHouse's uncompressed in-memory row size,
+     *    which for a table whose rows are mostly a few narrow numbers would
+     *    have nothing to do with what was actually ingested.
+     *
+     * isFinalized = 1 excludes provisional headers, whose aggregates are still
+     * zero. A session that finalizes across the staging boundary is therefore
+     * billed on the following day's run at its true size, rather than being
+     * billed now at zero and never corrected.
+     *
+     * The inner ORDER BY / LIMIT 1 BY collapses ReplacingMergeTree versions:
+     * there is no FINAL support anywhere in this repo, so duplicate versions of
+     * a header are visible until a merge and would otherwise be summed twice.
+     */
+    async groupSessionReplayUsageByEntity(data) {
+        if (!this.database) {
+            this.useDefaultDatabase();
+        }
+        const databaseName = this.database.getDatasourceOptions().database;
+        const statement = SQL `SELECT primaryEntityId AS primaryEntityId, primaryEntityType AS primaryEntityType, count() AS rowCount, sum(payloadBytes) AS estimatedBytes FROM (SELECT projectId, sessionId, primaryEntityId, primaryEntityType, payloadBytes FROM ${databaseName}.${this.model.tableName} WHERE projectId = ${{
+            type: TableColumnType.ObjectID,
+            value: data.projectId,
+        }} AND startTime >= ${{
+            type: TableColumnType.DateTime64,
+            value: data.startDate,
+        }} AND startTime <= ${{
+            type: TableColumnType.DateTime64,
+            value: data.endDate,
+        }} AND isFinalized = 1 ORDER BY version DESC LIMIT 1 BY projectId, sessionId) GROUP BY primaryEntityId, primaryEntityType`;
+        /*
+         * Same reasoning as the shared billing scan: no
+         * timeout_overflow_mode='break', because a partial aggregation would
+         * silently undercount and be billed as though it were complete.
+         */
+        statement.append(getQuerySettings({ maxExecutionTimeInSeconds: 120 }));
+        const dbResult = await this.executeQuery(statement);
+        const responseJSON = await dbResult.json();
+        const items = responseJSON.data ? responseJSON.data : [];
+        const results = [];
+        for (const item of items) {
+            const primaryEntityId = item["primaryEntityId"] || "";
+            if (!primaryEntityId) {
+                continue;
+            }
+            const entityTypeRaw = item["primaryEntityType"];
+            const primaryEntityType = typeof entityTypeRaw === "string" && entityTypeRaw.trim()
+                ? entityTypeRaw
+                : null;
+            results.push({
+                primaryEntityId: primaryEntityId,
+                primaryEntityType: primaryEntityType,
+                /*
+                 * 64-bit sums arrive from ClickHouse as JSON strings, so Number() is
+                 * load-bearing rather than defensive.
+                 */
+                rowCount: Number(item["rowCount"]) || 0,
+                estimatedBytes: Number(item["estimatedBytes"]) || 0,
+            });
+        }
+        return results;
+    }
+}
+__decorate([
+    CaptureSpan(),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object]),
+    __metadata("design:returntype", Promise)
+], RumSessionService.prototype, "groupSessionReplayUsageByEntity", null);
+export default new RumSessionService();
+//# sourceMappingURL=RumSessionService.js.map

package/build/dist/Server/Services/RumSessionService.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"RumSessionService.js","sourceRoot":"","sources":["../../../../Server/Services/RumSessionService.ts"],"names":[],"mappings":";;;;;;;;;AACA,OAAO,wBAAwB,MAAM,4BAA4B,CAAC;AAClE,OAAO,UAAU,MAAM,yCAAyC,CAAC;AACjE,OAAO,WAAW,MAAM,gCAAgC,CAAC;AACzD,OAAO,eAAe,MAAM,+CAA+C,CAAC;AAG5E,OAAO,EAAE,GAAG,EAAa,MAAM,sCAAsC,CAAC;AACtE,OAAO,EAAE,gBAAgB,EAAE,MAAM,gDAAgD,CAAC;AAGlF,MAAM,OAAO,iBAAkB,SAAQ,wBAAoC;IACzE,YAAmB,kBAAmD;QACpE,KAAK,CAAC,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,kBAAkB,EAAE,CAAC,CAAC;IACjE,CAAC;IAED;;;;;;;;;;;;;;;;;;;;;;;;;;OA0BG;IAEU,AAAN,KAAK,CAAC,+BAA+B,CAAC,IAI5C;QAQC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACnB,IAAI,CAAC,kBAAkB,EAAE,CAAC;QAC5B,CAAC;QAED,MAAM,YAAY,GAChB,IAAI,CAAC,QAAS,CAAC,oBAAoB,EAAE,CAAC,QAAS,CAAC;QAElD,MAAM,SAAS,GAAc,GAAG,CAAA,wOAAwO,YAAY,IAAI,IAAI,CAAC,KAAK,CAAC,SAAS,sBAAsB;YAChU,IAAI,EAAE,eAAe,CAAC,QAAQ;YAC9B,KAAK,EAAE,IAAI,CAAC,SAAS;SACtB,qBAAqB;YACpB,IAAI,EAAE,eAAe,CAAC,UAAU;YAChC,KAAK,EAAE,IAAI,CAAC,SAAS;SACtB,qBAAqB;YACpB,IAAI,EAAE,eAAe,CAAC,UAAU;YAChC,KAAK,EAAE,IAAI,CAAC,OAAO;SACpB,yHAAyH,CAAC;QAE3H;;;;WAIG;QACH,SAAS,CAAC,MAAM,CAAC,gBAAgB,CAAC,EAAE,yBAAyB,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;QAEvE,MAAM,QAAQ,GAAsB,MAAM,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC;QACvE,MAAM,YAAY,GAChB,MAAM,QAAQ,CAAC,IAAI,EAAc,CAAC;QACpC,MAAM,KAAK,GAAsB,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;QAE5E,MAAM,OAAO,GAKR,EAAE,CAAC;QAER,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,eAAe,GAAY,IAAI,CAAC,iBAAiB,CAAY,IAAI,EAAE,CAAC;YAE1E,IAAI,CAAC,eAAe,EAAE,CAAC;gBACrB,SAAS;YACX,CAAC;YAED,MAAM,aAAa,GAAY,IAAI,CAAC,mBAAmB,CAAC,CAAC;YACzD,MAAM,iBAAiB,GACrB,OAAO,aAAa,KAAK,QAAQ,IAAI,aAAa,CAAC,IAAI,EAAE;gBACvD,CAAC,CAAC,aAAa;gBACf,CAAC,CAAC,IAAI,CAAC;YAEX,OAAO,CAAC,IAAI,CAAC;gBACX,eAAe,EAAE,eAAe;gBAChC,iBAAiB,EAAE,iBAAiB;gBACpC;;;mBAGG;gBACH,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC;gBACvC,cAAc,EAAE,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,IAAI,CAAC;aACpD,CAAC,CAAC;QACL,CAAC;QAED,OAAO,OAAO,CAAC;IACjB,CAAC;CACF;AA5Ec;IADZ,WAAW,EAAE;;;;wEA4Eb;AAGH,eAAe,IAAI,iBAAiB,EAAE,CAAC"}

package/build/dist/Server/Services/RunbookCredentialService.js

@@ -0,0 +1,67 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+import DatabaseService from "./DatabaseService";
+import BadDataException from "../../Types/Exception/BadDataException";
+import RunbookCredentialType from "../../Types/Runbook/RunbookCredentialType";
+import RunbookCredential from "../../Models/DatabaseModels/RunbookCredential";
+import CaptureSpan from "../Utils/Telemetry/CaptureSpan";
+export class Service extends DatabaseService {
+    constructor() {
+        super(RunbookCredential);
+    }
+    /*
+     * A credential that is missing what its type needs is not a credential —
+     * it is a step that will fail at execution time, on the far side of an
+     * approval, in front of somebody's incident. Reject it at creation.
+     */
+    async onBeforeCreate(createBy) {
+        const type = createBy.data.credentialType;
+        if (!type) {
+            throw new BadDataException("Credential type is required.");
+        }
+        if (type === RunbookCredentialType.SSH) {
+            if (!createBy.data.sshHostname) {
+                throw new BadDataException("SSH credentials need a hostname.");
+            }
+            if (!createBy.data.sshUsername) {
+                throw new BadDataException("SSH credentials need a username.");
+            }
+            if (!createBy.data.sshPrivateKey && !createBy.data.sshPassword) {
+                throw new BadDataException("SSH credentials need either a private key or a password.");
+            }
+        }
+        /*
+         * The column is free text, not a database enum, so an unrecognised type
+         * would otherwise create a credential that skips every check below and
+         * can never be executed by anything.
+         */
+        if (type !== RunbookCredentialType.SSH &&
+            type !== RunbookCredentialType.Kubernetes) {
+            throw new BadDataException(`Unknown credential type: ${String(type)}`);
+        }
+        if (type === RunbookCredentialType.Kubernetes) {
+            if (!createBy.data.kubernetesApiServerUrl) {
+                throw new BadDataException("Kubernetes credentials need an API server URL.");
+            }
+            if (!createBy.data.kubernetesServiceAccountToken) {
+                throw new BadDataException("Kubernetes credentials need a service account token.");
+            }
+        }
+        return { createBy, carryForward: [] };
+    }
+}
+__decorate([
+    CaptureSpan(),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object]),
+    __metadata("design:returntype", Promise)
+], Service.prototype, "onBeforeCreate", null);
+export default new Service();
+//# sourceMappingURL=RunbookCredentialService.js.map

package/build/dist/Server/Services/RunbookCredentialService.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"RunbookCredentialService.js","sourceRoot":"","sources":["../../../../Server/Services/RunbookCredentialService.ts"],"names":[],"mappings":";;;;;;;;;AAAA,OAAO,eAAe,MAAM,mBAAmB,CAAC;AAGhD,OAAO,gBAAgB,MAAM,wCAAwC,CAAC;AACtE,OAAO,qBAAqB,MAAM,2CAA2C,CAAC;AAC9E,OAAO,iBAAiB,MAAM,+CAA+C,CAAC;AAC9E,OAAO,WAAW,MAAM,gCAAgC,CAAC;AAEzD,MAAM,OAAO,OAAQ,SAAQ,eAAkC;IAC7D;QACE,KAAK,CAAC,iBAAiB,CAAC,CAAC;IAC3B,CAAC;IAED;;;;OAIG;IAEsB,AAAN,KAAK,CAAC,cAAc,CACrC,QAAqC;QAErC,MAAM,IAAI,GACR,QAAQ,CAAC,IAAI,CAAC,cAAc,CAAC;QAE/B,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,gBAAgB,CAAC,8BAA8B,CAAC,CAAC;QAC7D,CAAC;QAED,IAAI,IAAI,KAAK,qBAAqB,CAAC,GAAG,EAAE,CAAC;YACvC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;gBAC/B,MAAM,IAAI,gBAAgB,CAAC,kCAAkC,CAAC,CAAC;YACjE,CAAC;YAED,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;gBAC/B,MAAM,IAAI,gBAAgB,CAAC,kCAAkC,CAAC,CAAC;YACjE,CAAC;YAED,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,aAAa,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;gBAC/D,MAAM,IAAI,gBAAgB,CACxB,0DAA0D,CAC3D,CAAC;YACJ,CAAC;QACH,CAAC;QAED;;;;WAIG;QACH,IACE,IAAI,KAAK,qBAAqB,CAAC,GAAG;YAClC,IAAI,KAAK,qBAAqB,CAAC,UAAU,EACzC,CAAC;YACD,MAAM,IAAI,gBAAgB,CAAC,4BAA4B,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACzE,CAAC;QAED,IAAI,IAAI,KAAK,qBAAqB,CAAC,UAAU,EAAE,CAAC;YAC9C,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,sBAAsB,EAAE,CAAC;gBAC1C,MAAM,IAAI,gBAAgB,CACxB,gDAAgD,CACjD,CAAC;YACJ,CAAC;YAED,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,6BAA6B,EAAE,CAAC;gBACjD,MAAM,IAAI,gBAAgB,CACxB,sDAAsD,CACvD,CAAC;YACJ,CAAC;QACH,CAAC;QAED,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC;IACxC,CAAC;CACF;AAtD0B;IADxB,WAAW,EAAE;;;;6CAsDb;AAGH,eAAe,IAAI,OAAO,EAAE,CAAC"}