@oneuptime/common 11.7.4 → 12.0.1

package/build/dist/Types/Permission.js

@@ -13,6 +13,7 @@ export var PermissionGroup;
     PermissionGroup["Telemetry"] = "Telemetry";
     PermissionGroup["Workflow"] = "Workflow";
     PermissionGroup["Runbook"] = "Runbook";
+    PermissionGroup["AutoRemediation"] = "Auto Remediation";
     PermissionGroup["Team"] = "Team";
     PermissionGroup["Billing"] = "Billing";
     PermissionGroup["ServiceCatalog"] = "Service Catalog";
@@ -637,6 +638,10 @@ var Permission;
     Permission["DeleteRunbookRule"] = "DeleteRunbookRule";
     Permission["EditRunbookRule"] = "EditRunbookRule";
     Permission["ReadRunbookRule"] = "ReadRunbookRule";
+    Permission["CreateAutoRemediationRule"] = "CreateAutoRemediationRule";
+    Permission["DeleteAutoRemediationRule"] = "DeleteAutoRemediationRule";
+    Permission["EditAutoRemediationRule"] = "EditAutoRemediationRule";
+    Permission["ReadAutoRemediationRule"] = "ReadAutoRemediationRule";
     Permission["CreateRunbookOwnerTeam"] = "CreateRunbookOwnerTeam";
     Permission["DeleteRunbookOwnerTeam"] = "DeleteRunbookOwnerTeam";
     Permission["EditRunbookOwnerTeam"] = "EditRunbookOwnerTeam";
@@ -645,22 +650,26 @@ var Permission;
     Permission["DeleteRunbookOwnerUser"] = "DeleteRunbookOwnerUser";
     Permission["EditRunbookOwnerUser"] = "EditRunbookOwnerUser";
     Permission["ReadRunbookOwnerUser"] = "ReadRunbookOwnerUser";
-    Permission["CreateRunbookAgent"] = "CreateRunbookAgent";
-    Permission["DeleteRunbookAgent"] = "DeleteRunbookAgent";
-    Permission["EditRunbookAgent"] = "EditRunbookAgent";
-    Permission["ReadRunbookAgent"] = "ReadRunbookAgent";
-    Permission["CreateRunbookAgentOwnerTeam"] = "CreateRunbookAgentOwnerTeam";
-    Permission["DeleteRunbookAgentOwnerTeam"] = "DeleteRunbookAgentOwnerTeam";
-    Permission["EditRunbookAgentOwnerTeam"] = "EditRunbookAgentOwnerTeam";
-    Permission["ReadRunbookAgentOwnerTeam"] = "ReadRunbookAgentOwnerTeam";
-    Permission["CreateRunbookAgentOwnerUser"] = "CreateRunbookAgentOwnerUser";
-    Permission["DeleteRunbookAgentOwnerUser"] = "DeleteRunbookAgentOwnerUser";
-    Permission["EditRunbookAgentOwnerUser"] = "EditRunbookAgentOwnerUser";
-    Permission["ReadRunbookAgentOwnerUser"] = "ReadRunbookAgentOwnerUser";
+    Permission["CreateRunner"] = "CreateRunner";
+    Permission["DeleteRunner"] = "DeleteRunner";
+    Permission["EditRunner"] = "EditRunner";
+    Permission["ReadRunner"] = "ReadRunner";
+    Permission["CreateRunnerOwnerTeam"] = "CreateRunnerOwnerTeam";
+    Permission["DeleteRunnerOwnerTeam"] = "DeleteRunnerOwnerTeam";
+    Permission["EditRunnerOwnerTeam"] = "EditRunnerOwnerTeam";
+    Permission["ReadRunnerOwnerTeam"] = "ReadRunnerOwnerTeam";
+    Permission["CreateRunnerOwnerUser"] = "CreateRunnerOwnerUser";
+    Permission["DeleteRunnerOwnerUser"] = "DeleteRunnerOwnerUser";
+    Permission["EditRunnerOwnerUser"] = "EditRunnerOwnerUser";
+    Permission["ReadRunnerOwnerUser"] = "ReadRunnerOwnerUser";
     Permission["CreateRunbookSecret"] = "CreateRunbookSecret";
     Permission["EditRunbookSecret"] = "EditRunbookSecret";
     Permission["DeleteRunbookSecret"] = "DeleteRunbookSecret";
     Permission["ReadRunbookSecret"] = "ReadRunbookSecret";
+    Permission["CreateRunbookCredential"] = "CreateRunbookCredential";
+    Permission["EditRunbookCredential"] = "EditRunbookCredential";
+    Permission["DeleteRunbookCredential"] = "DeleteRunbookCredential";
+    Permission["ReadRunbookCredential"] = "ReadRunbookCredential";
     Permission["CreateStatusPageGroup"] = "CreateStatusPageGroup";
     Permission["DeleteStatusPageGroup"] = "DeleteStatusPageGroup";
     Permission["EditStatusPageGroup"] = "EditStatusPageGroup";
@@ -1102,6 +1111,22 @@ var Permission;
     Permission["DeleteRumApplication"] = "DeleteRumApplication";
     Permission["EditRumApplication"] = "EditRumApplication";
     Permission["ReadRumApplication"] = "ReadRumApplication";
+    /*
+     * Session replay is deliberately NOT covered by ReadRumApplication.
+     *
+     * RumApplication's read ACL includes Permission.Viewer, the project-wide
+     * read-only role — so reusing it would let every read-only member watch
+     * recordings of real end users' screens. Listing sessions and *watching*
+     * one are also split, so a support engineer can triage "which sessions
+     * errored" without playing anyone's screen back.
+     */
+    Permission["CreateRumSessionReplay"] = "CreateRumSessionReplay";
+    Permission["ReadRumSessionReplay"] = "ReadRumSessionReplay";
+    Permission["DeleteRumSessionReplay"] = "DeleteRumSessionReplay";
+    Permission["ReadRumSessionReplayPayload"] = "ReadRumSessionReplayPayload";
+    Permission["ReadRumSessionReplayAudit"] = "ReadRumSessionReplayAudit";
+    Permission["CreateRumSessionErasureRequest"] = "CreateRumSessionErasureRequest";
+    Permission["ReadRumSessionErasureRequest"] = "ReadRumSessionErasureRequest";
     Permission["CreateRumApplicationOwnerTeam"] = "CreateRumApplicationOwnerTeam";
     Permission["DeleteRumApplicationOwnerTeam"] = "DeleteRumApplicationOwnerTeam";
     Permission["EditRumApplicationOwnerTeam"] = "EditRumApplicationOwnerTeam";
@@ -3537,6 +3562,42 @@ export class PermissionHelper {
                 isRolePermission: false,
                 group: PermissionGroup.Runbook,
             },
+            {
+                permission: Permission.CreateAutoRemediationRule,
+                title: "Create Auto Remediation Rule",
+                description: "This permission can create Auto Remediation Rules in this project.",
+                isAssignableToTenant: true,
+                isAccessControlPermission: false,
+                isRolePermission: false,
+                group: PermissionGroup.AutoRemediation,
+            },
+            {
+                permission: Permission.DeleteAutoRemediationRule,
+                title: "Delete Auto Remediation Rule",
+                description: "This permission can delete Auto Remediation Rules in this project.",
+                isAssignableToTenant: true,
+                isAccessControlPermission: false,
+                isRolePermission: false,
+                group: PermissionGroup.AutoRemediation,
+            },
+            {
+                permission: Permission.EditAutoRemediationRule,
+                title: "Edit Auto Remediation Rule",
+                description: "This permission can edit Auto Remediation Rules in this project.",
+                isAssignableToTenant: true,
+                isAccessControlPermission: false,
+                isRolePermission: false,
+                group: PermissionGroup.AutoRemediation,
+            },
+            {
+                permission: Permission.ReadAutoRemediationRule,
+                title: "Read Auto Remediation Rule",
+                description: "This permission can read Auto Remediation Rules in this project.",
+                isAssignableToTenant: true,
+                isAccessControlPermission: false,
+                isRolePermission: false,
+                group: PermissionGroup.AutoRemediation,
+            },
             {
                 permission: Permission.CreateRunbookOwnerTeam,
                 title: "Create Runbook Team Owner",
@@ -3610,7 +3671,7 @@ export class PermissionHelper {
                 group: PermissionGroup.Runbook,
             },
             {
-                permission: Permission.CreateRunbookAgent,
+                permission: Permission.CreateRunner,
                 title: "Create Runbook Agent",
                 description: "This permission can register Runbook Agents in this project. Runbook Agents execute Bash steps in your own infrastructure.",
                 isAssignableToTenant: true,
@@ -3619,7 +3680,7 @@ export class PermissionHelper {
                 group: PermissionGroup.Runbook,
             },
             {
-                permission: Permission.DeleteRunbookAgent,
+                permission: Permission.DeleteRunner,
                 title: "Delete Runbook Agent",
                 description: "This permission can delete Runbook Agents in this project.",
                 isAssignableToTenant: true,
@@ -3628,7 +3689,7 @@ export class PermissionHelper {
                 group: PermissionGroup.Runbook,
             },
             {
-                permission: Permission.EditRunbookAgent,
+                permission: Permission.EditRunner,
                 title: "Edit Runbook Agent",
                 description: "This permission can edit Runbook Agents (name, description, tags, key) in this project.",
                 isAssignableToTenant: true,
@@ -3637,7 +3698,7 @@ export class PermissionHelper {
                 group: PermissionGroup.Runbook,
             },
             {
-                permission: Permission.ReadRunbookAgent,
+                permission: Permission.ReadRunner,
                 title: "Read Runbook Agent",
                 description: "This permission can read Runbook Agents in this project.",
                 isAssignableToTenant: true,
@@ -3646,7 +3707,7 @@ export class PermissionHelper {
                 group: PermissionGroup.Runbook,
             },
             {
-                permission: Permission.CreateRunbookAgentOwnerTeam,
+                permission: Permission.CreateRunnerOwnerTeam,
                 title: "Create Runbook Agent Team Owner",
                 description: "This permission can create Runbook Agent Team Owners of this project.",
                 isAssignableToTenant: true,
@@ -3655,7 +3716,7 @@ export class PermissionHelper {
                 group: PermissionGroup.Runbook,
             },
             {
-                permission: Permission.DeleteRunbookAgentOwnerTeam,
+                permission: Permission.DeleteRunnerOwnerTeam,
                 title: "Delete Runbook Agent Team Owner",
                 description: "This permission can delete Runbook Agent Team Owner of this project.",
                 isAssignableToTenant: true,
@@ -3664,7 +3725,7 @@ export class PermissionHelper {
                 group: PermissionGroup.Runbook,
             },
             {
-                permission: Permission.EditRunbookAgentOwnerTeam,
+                permission: Permission.EditRunnerOwnerTeam,
                 title: "Edit Runbook Agent Team Owner",
                 description: "This permission can edit Runbook Agent Team Owner of this project.",
                 isAssignableToTenant: true,
@@ -3673,7 +3734,7 @@ export class PermissionHelper {
                 group: PermissionGroup.Runbook,
             },
             {
-                permission: Permission.ReadRunbookAgentOwnerTeam,
+                permission: Permission.ReadRunnerOwnerTeam,
                 title: "Read Runbook Agent Team Owner",
                 description: "This permission can read Runbook Agent Team Owner of this project.",
                 isAssignableToTenant: true,
@@ -3682,7 +3743,7 @@ export class PermissionHelper {
                 group: PermissionGroup.Runbook,
             },
             {
-                permission: Permission.CreateRunbookAgentOwnerUser,
+                permission: Permission.CreateRunnerOwnerUser,
                 title: "Create Runbook Agent User Owner",
                 description: "This permission can create Runbook Agent User Owners of this project.",
                 isAssignableToTenant: true,
@@ -3691,7 +3752,7 @@ export class PermissionHelper {
                 group: PermissionGroup.Runbook,
             },
             {
-                permission: Permission.DeleteRunbookAgentOwnerUser,
+                permission: Permission.DeleteRunnerOwnerUser,
                 title: "Delete Runbook Agent User Owner",
                 description: "This permission can delete Runbook Agent User Owner of this project.",
                 isAssignableToTenant: true,
@@ -3700,7 +3761,7 @@ export class PermissionHelper {
                 group: PermissionGroup.Runbook,
             },
             {
-                permission: Permission.EditRunbookAgentOwnerUser,
+                permission: Permission.EditRunnerOwnerUser,
                 title: "Edit Runbook Agent User Owner",
                 description: "This permission can edit Runbook Agent User Owner of this project.",
                 isAssignableToTenant: true,
@@ -3709,7 +3770,7 @@ export class PermissionHelper {
                 group: PermissionGroup.Runbook,
             },
             {
-                permission: Permission.ReadRunbookAgentOwnerUser,
+                permission: Permission.ReadRunnerOwnerUser,
                 title: "Read Runbook Agent User Owner",
                 description: "This permission can read Runbook Agent User Owner of this project.",
                 isAssignableToTenant: true,
@@ -3753,6 +3814,42 @@ export class PermissionHelper {
                 isRolePermission: false,
                 group: PermissionGroup.Runbook,
             },
+            {
+                permission: Permission.CreateRunbookCredential,
+                title: "Create Runbook Credential",
+                description: "This permission can create runbook credentials (SSH keys, Kubernetes service account tokens).",
+                isAssignableToTenant: true,
+                isAccessControlPermission: false,
+                isRolePermission: false,
+                group: PermissionGroup.Runbook,
+            },
+            {
+                permission: Permission.DeleteRunbookCredential,
+                title: "Delete Runbook Credential",
+                description: "This permission can delete runbook credentials.",
+                isAssignableToTenant: true,
+                isAccessControlPermission: false,
+                isRolePermission: false,
+                group: PermissionGroup.Runbook,
+            },
+            {
+                permission: Permission.EditRunbookCredential,
+                title: "Edit Runbook Credential",
+                description: "This permission can edit runbook credentials.",
+                isAssignableToTenant: true,
+                isAccessControlPermission: false,
+                isRolePermission: false,
+                group: PermissionGroup.Runbook,
+            },
+            {
+                permission: Permission.ReadRunbookCredential,
+                title: "Read Runbook Credential",
+                description: "This permission can read runbook credentials. Secret values are never returned by the API.",
+                isAssignableToTenant: true,
+                isAccessControlPermission: false,
+                isRolePermission: false,
+                group: PermissionGroup.Runbook,
+            },
             {
                 permission: Permission.ReadAuditLog,
                 title: "Read Audit Log",
@@ -7429,6 +7526,69 @@ export class PermissionHelper {
                 isRolePermission: false,
                 group: PermissionGroup.Telemetry,
             },
+            {
+                permission: Permission.CreateRumSessionReplay,
+                title: "Create Session Replay",
+                description: "This permission can ingest session replay recordings for this project.",
+                isAssignableToTenant: true,
+                isAccessControlPermission: true,
+                isRolePermission: false,
+                group: PermissionGroup.Telemetry,
+            },
+            {
+                permission: Permission.ReadRumSessionReplay,
+                title: "List Session Replays",
+                description: "This permission can list session replay recordings and their metadata for this project. It does NOT grant the ability to watch a recording.",
+                isAssignableToTenant: true,
+                isAccessControlPermission: true,
+                isRolePermission: false,
+                group: PermissionGroup.Telemetry,
+            },
+            {
+                permission: Permission.ReadRumSessionReplayPayload,
+                title: "Watch Session Replays",
+                description: "This permission can play back session replay recordings, viewing what a real end user saw on screen. Grant sparingly and separately from listing.",
+                isAssignableToTenant: true,
+                isAccessControlPermission: true,
+                isRolePermission: false,
+                group: PermissionGroup.Telemetry,
+            },
+            {
+                permission: Permission.DeleteRumSessionReplay,
+                title: "Delete Session Replays",
+                description: "This permission can delete session replay recordings of this project.",
+                isAssignableToTenant: true,
+                isAccessControlPermission: true,
+                isRolePermission: false,
+                group: PermissionGroup.Telemetry,
+            },
+            {
+                permission: Permission.ReadRumSessionReplayAudit,
+                title: "Read Session Replay Audit",
+                description: "This permission can read the audit trail of who watched which session replay recording.",
+                isAssignableToTenant: true,
+                isAccessControlPermission: true,
+                isRolePermission: false,
+                group: PermissionGroup.Telemetry,
+            },
+            {
+                permission: Permission.CreateRumSessionErasureRequest,
+                title: "Create Session Replay Erasure Request",
+                description: "This permission can request erasure of session replay recordings, for example to satisfy a right-to-erasure request from an end user.",
+                isAssignableToTenant: true,
+                isAccessControlPermission: true,
+                isRolePermission: false,
+                group: PermissionGroup.Telemetry,
+            },
+            {
+                permission: Permission.ReadRumSessionErasureRequest,
+                title: "Read Session Replay Erasure Requests",
+                description: "This permission can read session replay erasure requests and their completion status.",
+                isAssignableToTenant: true,
+                isAccessControlPermission: true,
+                isRolePermission: false,
+                group: PermissionGroup.Telemetry,
+            },
             {
                 permission: Permission.CreateRumApplicationOwnerTeam,
                 title: "Create RUM Application Team Owner",