@oneuptime/common 12.0.0 → 12.0.2

package/Models/DatabaseModels/Host.ts

@@ -594,6 +594,15 @@ export default class Host extends BaseModel {
   })
   public hostType?: string = undefined;
 
+  /*
+   * `text`, not varchar(500). A Docker/Kubernetes host with IPv6 enabled
+   * reports one host.ip entry per interface — physical NICs, docker
+   * bridges, every veth, plus an IPv6 link-local per interface. Real
+   * reports of 55 addresses / ~1450 characters exist, and the count grows
+   * with the number of containers, so any fixed bound is the wrong shape
+   * here. Overflowing it used to abort the whole Host metadata write and
+   * strand the host as "disconnected" (issue #3006).
+   */
   @ColumnAccessControl({
     create: [],
     read: [
@@ -614,17 +623,16 @@ export default class Host extends BaseModel {
   })
   @TableColumn({
     required: false,
-    type: TableColumnType.LongText,
+    type: TableColumnType.VeryLongText,
     canReadOnRelationQuery: true,
     title: "Host IP Addresses",
     description:
-      "Comma-separated list of IP addresses reported by the OTel host.ip resource attribute. The first non-loopback IPv4 is used for display.",
+      "Comma-separated list of every IP address reported by the OTel host.ip resource attribute, in the order the collector reported them, deduplicated. The Hosts list shows the most routable one (IPv4, non-loopback, non-link-local) first; the host detail page groups them all by category.",
     example: "192.168.1.42, 10.0.0.5",
   })
   @Column({
     nullable: true,
-    type: ColumnType.LongText,
-    length: ColumnLength.LongText,
+    type: ColumnType.VeryLongText,
   })
   public hostIpAddresses?: string = undefined;
 

package/Models/DatabaseModels/KubernetesContainer.ts

@@ -193,15 +193,16 @@ export default class KubernetesContainer extends BaseModel {
   })
   @TableColumn({
     required: true,
-    type: TableColumnType.ShortText,
+    type: TableColumnType.LongText,
     canReadOnRelationQuery: true,
     title: "Pod Name",
-    description: "metadata.name of the parent Pod.",
+    description:
+      "metadata.name of the parent Pod. Generated pod names (deployment + replicaset hash + pod hash) routinely run past 100 characters, so this is a 500-char column rather than the usual 100.",
   })
   @Column({
     nullable: false,
-    type: ColumnType.ShortText,
-    length: ColumnLength.ShortText,
+    type: ColumnType.LongText,
+    length: ColumnLength.LongText,
   })
   public podName?: string = undefined;
 

package/Models/DatabaseModels/KubernetesResource.ts

@@ -214,15 +214,16 @@ export default class KubernetesResource extends BaseModel {
   })
   @TableColumn({
     required: true,
-    type: TableColumnType.ShortText,
+    type: TableColumnType.LongText,
     canReadOnRelationQuery: true,
     title: "Name",
-    description: "Kubernetes resource name (metadata.name).",
+    description:
+      "Kubernetes resource name (metadata.name). Kubernetes allows DNS-subdomain names up to 253 characters, so this is a 500-char column rather than the usual 100.",
   })
   @Column({
     nullable: false,
-    type: ColumnType.ShortText,
-    length: ColumnLength.ShortText,
+    type: ColumnType.LongText,
+    length: ColumnLength.LongText,
   })
   public name?: string = undefined;
 
@@ -449,7 +450,7 @@ export default class KubernetesResource extends BaseModel {
   })
   @TableColumn({
     required: false,
-    type: TableColumnType.ShortText,
+    type: TableColumnType.LongText,
     canReadOnRelationQuery: true,
     title: "Controller Deployment Name",
     description:
@@ -457,8 +458,8 @@ export default class KubernetesResource extends BaseModel {
   })
   @Column({
     nullable: true,
-    type: ColumnType.ShortText,
-    length: ColumnLength.ShortText,
+    type: ColumnType.LongText,
+    length: ColumnLength.LongText,
   })
   public controllerDeploymentName?: string = undefined;
 

package/Models/DatabaseModels/OnCallDutyPolicyScheduleLayer.ts

@@ -571,10 +571,19 @@ export default class OnCallDutyPolicyScheduleLayer extends BaseModel {
       Permission.EditOnCallDutyPolicyScheduleLayer,
     ],
   })
+  /*
+   * The default is `.toJSON()` rather than the Recurring instance itself. Both
+   * serialize to the identical JSON, so the DDL is unchanged — but TypeORM
+   * compares a jsonb default by deep-comparing the entity default against the
+   * value parsed back out of the database, and that comparison rejects any pair
+   * whose constructors differ (OrmUtils.compare2Objects). An instance never
+   * equals the plain object Postgres hands back, so every generated migration
+   * re-emitted this SET DEFAULT as phantom drift. A plain object compares equal.
+   */
   @Column({
     nullable: false,
     type: ColumnType.JSON,
-    default: Recurring.getDefault(),
+    default: Recurring.getDefault().toJSON(),
     transformer: Recurring.getDatabaseTransformer(),
   })
   public rotation?: Recurring = undefined;
@@ -654,10 +663,11 @@ export default class OnCallDutyPolicyScheduleLayer extends BaseModel {
       Permission.EditOnCallDutyPolicyScheduleLayer,
     ],
   })
+  // Plain object, not the instance — see the note on `rotation` above.
   @Column({
     nullable: false,
     type: ColumnType.JSON,
-    default: RestrictionTimes.getDefault(),
+    default: RestrictionTimes.getDefault().toJSON(),
     transformer: RestrictionTimes.getDatabaseTransformer(),
   })
   public restrictionTimes?: RestrictionTimes = undefined;

package/Models/DatabaseModels/PodmanResource.ts

@@ -192,7 +192,7 @@ export default class PodmanResource extends BaseModel {
   })
   @TableColumn({
     required: true,
-    type: TableColumnType.ShortText,
+    type: TableColumnType.LongText,
     canReadOnRelationQuery: true,
     title: "Name",
     description:
@@ -200,8 +200,8 @@ export default class PodmanResource extends BaseModel {
   })
   @Column({
     nullable: false,
-    type: ColumnType.ShortText,
-    length: ColumnLength.ShortText,
+    type: ColumnType.LongText,
+    length: ColumnLength.LongText,
   })
   public name?: string = undefined;
 
@@ -232,7 +232,7 @@ export default class PodmanResource extends BaseModel {
   })
   @TableColumn({
     required: false,
-    type: TableColumnType.ShortText,
+    type: TableColumnType.LongText,
     canReadOnRelationQuery: true,
     title: "Image Name",
     description:
@@ -240,8 +240,8 @@ export default class PodmanResource extends BaseModel {
   })
   @Column({
     nullable: true,
-    type: ColumnType.ShortText,
-    length: ColumnLength.ShortText,
+    type: ColumnType.LongText,
+    length: ColumnLength.LongText,
   })
   public imageName?: string = undefined;
 

package/Models/DatabaseModels/ServiceLevelObjective.ts

@@ -493,6 +493,97 @@ export default class ServiceLevelObjective extends BaseModel {
   })
   public monitors?: Array<Monitor> = undefined;
 
+  @ColumnAccessControl({
+    create: [
+      Permission.ProjectOwner,
+      Permission.ProjectAdmin,
+      Permission.CreateServiceLevelObjective,
+    ],
+    read: [
+      Permission.ProjectOwner,
+      Permission.ProjectAdmin,
+      Permission.ProjectMember,
+      Permission.Viewer,
+      Permission.ReadServiceLevelObjective,
+    ],
+    update: [
+      Permission.ProjectOwner,
+      Permission.ProjectAdmin,
+      Permission.EditServiceLevelObjective,
+    ],
+  })
+  @TableColumn({
+    required: false,
+    type: TableColumnType.EntityArray,
+    modelType: Label,
+    title: "Auto-Add Monitors With Labels",
+    description:
+      "Monitor labels that automatically attach monitors to this SLO. Any monitor in the project carrying at least one of these labels is added to the Monitors list, and is removed again when it stops carrying any of them.",
+  })
+  @ManyToMany(
+    () => {
+      return Label;
+    },
+    { eager: false },
+  )
+  @JoinTable({
+    name: "ServiceLevelObjectiveMonitorLabel",
+    inverseJoinColumn: {
+      name: "labelId",
+      referencedColumnName: "_id",
+    },
+    joinColumn: {
+      name: "serviceLevelObjectiveId",
+      referencedColumnName: "_id",
+    },
+  })
+  public monitorLabels?: Array<Label> = undefined;
+
+  /*
+   * Bookkeeping shadow of `monitors`: the subset of attached monitors that the
+   * label rule put there. Without it the rule could not tell a monitor it
+   * added from one a human attached by hand, so "this monitor no longer
+   * matches, detach it" would silently delete deliberate, manual attachments.
+   * Root-only: it is derived state, never something a client sets.
+   */
+  @ColumnAccessControl({
+    create: [],
+    read: [
+      Permission.ProjectOwner,
+      Permission.ProjectAdmin,
+      Permission.ProjectMember,
+      Permission.Viewer,
+      Permission.ReadServiceLevelObjective,
+    ],
+    update: [],
+  })
+  @TableColumn({
+    required: false,
+    type: TableColumnType.EntityArray,
+    modelType: Monitor,
+    title: "Auto Added Monitors",
+    description:
+      "Monitors that were attached to this SLO by its label rule rather than by hand. Maintained by the server.",
+  })
+  @ManyToMany(
+    () => {
+      return Monitor;
+    },
+    { eager: false },
+  )
+  @JoinTable({
+    name: "ServiceLevelObjectiveAutoAddedMonitor",
+    inverseJoinColumn: {
+      name: "monitorId",
+      referencedColumnName: "_id",
+    },
+    joinColumn: {
+      name: "serviceLevelObjectiveId",
+      referencedColumnName: "_id",
+    },
+  })
+  public autoAddedMonitors?: Array<Monitor> = undefined;
+
   @ColumnAccessControl({
     create: [
       Permission.ProjectOwner,

package/Models/DatabaseModels/StatusPage.ts

@@ -44,6 +44,7 @@ import {
   ManyToOne,
 } from "typeorm";
 import UptimePrecision from "../../Types/StatusPage/UptimePrecision";
+import StatusPageReportPeriodType from "../../Types/StatusPage/StatusPageReportPeriodType";
 import { DEFAULT_STATUS_PAGE_LANGUAGE } from "../../Types/StatusPage/StatusPageLanguage";
 
 @OperationalResource()
@@ -2633,6 +2634,100 @@ export default class StatusPage extends BaseModel {
   })
   public reportDataInDays?: number = undefined;
 
+  @ColumnAccessControl({
+    create: [
+      Permission.ProjectOwner,
+      Permission.ProjectAdmin,
+      Permission.ProjectMember,
+      Permission.StatusPageAdmin,
+      Permission.StatusPageMember,
+      Permission.CreateProjectStatusPage,
+    ],
+    read: [
+      Permission.ProjectOwner,
+      Permission.ProjectAdmin,
+      Permission.ProjectMember,
+      Permission.Viewer,
+      Permission.StatusPageAdmin,
+      Permission.StatusPageMember,
+      Permission.StatusPageViewer,
+      Permission.ReadProjectStatusPage,
+    ],
+    update: [
+      Permission.ProjectOwner,
+      Permission.ProjectAdmin,
+      Permission.ProjectMember,
+      Permission.StatusPageAdmin,
+      Permission.StatusPageMember,
+      Permission.EditProjectStatusPage,
+    ],
+  })
+  @TableColumn({
+    type: TableColumnType.ShortText,
+    defaultValue: StatusPageReportPeriodType.Rolling,
+    title: "Report Period Type",
+    description:
+      "Should the report cover a rolling number of days, or the previous whole calendar period?",
+  })
+  @Column({
+    type: ColumnType.ShortText,
+    nullable: true,
+    default: StatusPageReportPeriodType.Rolling,
+  })
+  @ColumnBillingAccessControl({
+    read: PlanType.Free,
+    update: PlanType.Growth,
+    create: PlanType.Free,
+  })
+  public reportPeriodType?: StatusPageReportPeriodType = undefined;
+
+  @ColumnAccessControl({
+    create: [
+      Permission.ProjectOwner,
+      Permission.ProjectAdmin,
+      Permission.ProjectMember,
+      Permission.StatusPageAdmin,
+      Permission.StatusPageMember,
+      Permission.CreateProjectStatusPage,
+    ],
+    read: [
+      Permission.ProjectOwner,
+      Permission.ProjectAdmin,
+      Permission.ProjectMember,
+      Permission.Viewer,
+      Permission.StatusPageAdmin,
+      Permission.StatusPageMember,
+      Permission.StatusPageViewer,
+      Permission.ReadProjectStatusPage,
+    ],
+    update: [
+      Permission.ProjectOwner,
+      Permission.ProjectAdmin,
+      Permission.ProjectMember,
+      Permission.StatusPageAdmin,
+      Permission.StatusPageMember,
+      Permission.EditProjectStatusPage,
+    ],
+  })
+  @TableColumn({
+    type: TableColumnType.ShortText,
+    defaultValue: Timezone.UTC,
+    title: "Report Timezone",
+    description:
+      "The timezone report periods and send times are resolved in. A monthly report in this timezone runs from the 1st at 00:00 to the last day at 23:59.",
+  })
+  @Column({
+    type: ColumnType.ShortText,
+    nullable: true,
+    default: Timezone.UTC,
+  })
+  @ColumnBillingAccessControl({
+    read: PlanType.Free,
+    update: PlanType.Growth,
+    create: PlanType.Free,
+  })
+  public reportTimezone?: Timezone = undefined;
+
   @ColumnAccessControl({
     create: [
       Permission.ProjectOwner,

package/Server/API/TeamMemberAPI.ts

@@ -1,3 +1,4 @@
+import CommonAPI from "./CommonAPI";
 import UserMiddleware from "../Middleware/UserAuthorization";
 import ProjectSCIMService from "../Services/ProjectSCIMService";
 import TeamMemberService, {
@@ -12,6 +13,9 @@ import {
 } from "../Utils/Express";
 import Response from "../Utils/Response";
 import BaseAPI from "./BaseAPI";
+import DatabaseCommonInteractionProps from "../../Types/BaseDatabase/DatabaseCommonInteractionProps";
+import Query from "../../Types/BaseDatabase/Query";
+import { LIMIT_PER_PROJECT } from "../../Types/Database/LimitMax";
 import Email from "../../Types/Email";
 import BadDataException from "../../Types/Exception/BadDataException";
 import NotAuthorizedException from "../../Types/Exception/NotAuthorizedException";
@@ -77,6 +81,87 @@ export default class TeamMemberAPI extends BaseAPI<
       },
     );
 
+    /*
+     * Removes one user from the current project - every team they belong to in
+     * it - in a single call.
+     *
+     * The Users table lists people rather than memberships, so "remove" there
+     * means "remove from the project". Doing that as N separate DELETEs from
+     * the browser is not equivalent: TeamMemberService.onBeforeDelete rejects
+     * the removal of the last accepted member of a team that
+     * `shouldHaveAtLeastOneMember` (the Owners team), and it rejects it per
+     * request - so a client-side loop deletes every other membership first and
+     * only then hits the guard, leaving the user stripped of the teams the
+     * caller was told they had not been removed from. One deleteBy over the
+     * whole set runs that guard against all of the user's memberships before
+     * anything is deleted, so the removal either happens or it does not.
+     *
+     * The project is taken from the request's tenant, never from the body, and
+     * the delete runs with the caller's own permissions - so this grants
+     * nothing that DELETE /team-member/:id did not already grant.
+     */
+    this.router.post(
+      `${new this.entityType().getCrudApiPath()?.toString()}/remove-user-from-project`,
+      UserMiddleware.getUserMiddleware,
+      async (req: ExpressRequest, res: ExpressResponse, next: NextFunction) => {
+        try {
+          const oneUptimeRequest: OneUptimeRequest = req as OneUptimeRequest;
+
+          if (!oneUptimeRequest.userAuthorization?.userId) {
+            return Response.sendErrorResponse(
+              req,
+              res,
+              new NotAuthorizedException("Not authenticated"),
+            );
+          }
+
+          const props: DatabaseCommonInteractionProps =
+            await CommonAPI.getDatabaseCommonInteractionProps(req);
+
+          const projectId: ObjectID | undefined = props.tenantId;
+
+          if (!projectId) {
+            return Response.sendErrorResponse(
+              req,
+              res,
+              new BadDataException("Project ID is required"),
+            );
+          }
+
+          const userIdParam: string = (
+            (req.body?.["userId"] as string) || ""
+          ).trim();
+
+          if (!userIdParam) {
+            return Response.sendErrorResponse(
+              req,
+              res,
+              new BadDataException("User ID is required"),
+            );
+          }
+
+          ObjectID.validateUUID(userIdParam);
+
+          const numberOfMembershipsDeleted: number =
+            await this.service.deleteBy({
+              query: {
+                userId: new ObjectID(userIdParam),
+                projectId: projectId,
+              } as Query<TeamMember>,
+              limit: LIMIT_PER_PROJECT,
+              skip: 0,
+              props: props,
+            });
+
+          return Response.sendJsonObjectResponse(req, res, {
+            numberOfMembershipsDeleted: numberOfMembershipsDeleted,
+          });
+        } catch (err) {
+          return next(err);
+        }
+      },
+    );
+
     this.router.post(
       `${new this.entityType().getCrudApiPath()?.toString()}/:id/leave`,
       UserMiddleware.getUserMiddleware,

package/Server/Infrastructure/Postgres/LocalMigrationGenerationDataSource.ts

@@ -1,10 +1,20 @@
 import dataSourceOptions from "./DataSourceOptions";
 import { DataSource } from "typeorm";
 
+/*
+ * The app reaches Postgres over the compose network as `postgres:5432`, but the
+ * migration CLI runs on the host, where the same server is published on
+ * localhost:5400 — hence the defaults below.
+ *
+ * DATABASE_MIGRATIONS_HOST / DATABASE_MIGRATIONS_PORT (already in
+ * config.example.env, already honoured by migration-run.sh) override them, so
+ * the schema-drift job can point this at a CI service container on a different
+ * port without editing the file.
+ */
 const dataSourceOptionToMigrate: any = {
   ...dataSourceOptions,
-  host: "localhost",
-  port: 5400,
+  host: process.env["DATABASE_MIGRATIONS_HOST"] || "localhost",
+  port: parseInt(process.env["DATABASE_MIGRATIONS_PORT"] || "5400", 10),
 };
 
 const PostgresDataSource: DataSource = new DataSource(

package/Server/Infrastructure/Postgres/SchemaMigrations/1785900000000-AddSloMonitorLabelRule.ts

@@ -0,0 +1,84 @@
+import { MigrationInterface, QueryRunner } from "typeorm";
+
+/*
+ * The SLO monitor label rule: two many-to-many join tables for
+ * ServiceLevelObjective.
+ *
+ *   - ServiceLevelObjectiveMonitorLabel is the rule itself — the monitor
+ *     labels an SLO auto-attaches monitors by.
+ *
+ *   - ServiceLevelObjectiveAutoAddedMonitor is its bookkeeping: which of the
+ *     SLO's attached monitors the rule put there. It is what lets the rule
+ *     detach a monitor that stopped matching without ever touching one a
+ *     human attached by hand.
+ *
+ * Both are pure additions; no backfill. An existing SLO has no rule, so it
+ * keeps its hand-curated monitor list untouched until someone gives it one.
+ */
+export class AddSloMonitorLabelRule1785900000000 implements MigrationInterface {
+  public name = "AddSloMonitorLabelRule1785900000000";
+
+  public async up(queryRunner: QueryRunner): Promise<void> {
+    await queryRunner.query(
+      `CREATE TABLE "ServiceLevelObjectiveMonitorLabel" ("serviceLevelObjectiveId" uuid NOT NULL, "labelId" uuid NOT NULL, CONSTRAINT "PK_daea26f6963106215a4fea2da89" PRIMARY KEY ("serviceLevelObjectiveId", "labelId"))`,
+    );
+    await queryRunner.query(
+      `CREATE INDEX "IDX_cfda767c33fdbaa6ef9f268b8e" ON "ServiceLevelObjectiveMonitorLabel" ("serviceLevelObjectiveId") `,
+    );
+    await queryRunner.query(
+      `CREATE INDEX "IDX_46d9376cbba06f4911ed521b30" ON "ServiceLevelObjectiveMonitorLabel" ("labelId") `,
+    );
+    await queryRunner.query(
+      `CREATE TABLE "ServiceLevelObjectiveAutoAddedMonitor" ("serviceLevelObjectiveId" uuid NOT NULL, "monitorId" uuid NOT NULL, CONSTRAINT "PK_2a43ef3a0f312cd6a591838383b" PRIMARY KEY ("serviceLevelObjectiveId", "monitorId"))`,
+    );
+    await queryRunner.query(
+      `CREATE INDEX "IDX_f6f19994d02713e1f0021843ce" ON "ServiceLevelObjectiveAutoAddedMonitor" ("serviceLevelObjectiveId") `,
+    );
+    await queryRunner.query(
+      `CREATE INDEX "IDX_1c0e494a9f1082373a8b7efda5" ON "ServiceLevelObjectiveAutoAddedMonitor" ("monitorId") `,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "ServiceLevelObjectiveMonitorLabel" ADD CONSTRAINT "FK_cfda767c33fdbaa6ef9f268b8e7" FOREIGN KEY ("serviceLevelObjectiveId") REFERENCES "ServiceLevelObjective"("_id") ON DELETE CASCADE ON UPDATE CASCADE`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "ServiceLevelObjectiveMonitorLabel" ADD CONSTRAINT "FK_46d9376cbba06f4911ed521b308" FOREIGN KEY ("labelId") REFERENCES "Label"("_id") ON DELETE CASCADE ON UPDATE CASCADE`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "ServiceLevelObjectiveAutoAddedMonitor" ADD CONSTRAINT "FK_f6f19994d02713e1f0021843ce6" FOREIGN KEY ("serviceLevelObjectiveId") REFERENCES "ServiceLevelObjective"("_id") ON DELETE CASCADE ON UPDATE CASCADE`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "ServiceLevelObjectiveAutoAddedMonitor" ADD CONSTRAINT "FK_1c0e494a9f1082373a8b7efda5b" FOREIGN KEY ("monitorId") REFERENCES "Monitor"("_id") ON DELETE CASCADE ON UPDATE CASCADE`,
+    );
+  }
+
+  public async down(queryRunner: QueryRunner): Promise<void> {
+    await queryRunner.query(
+      `ALTER TABLE "ServiceLevelObjectiveAutoAddedMonitor" DROP CONSTRAINT "FK_1c0e494a9f1082373a8b7efda5b"`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "ServiceLevelObjectiveAutoAddedMonitor" DROP CONSTRAINT "FK_f6f19994d02713e1f0021843ce6"`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "ServiceLevelObjectiveMonitorLabel" DROP CONSTRAINT "FK_46d9376cbba06f4911ed521b308"`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "ServiceLevelObjectiveMonitorLabel" DROP CONSTRAINT "FK_cfda767c33fdbaa6ef9f268b8e7"`,
+    );
+    await queryRunner.query(
+      `DROP INDEX "public"."IDX_1c0e494a9f1082373a8b7efda5"`,
+    );
+    await queryRunner.query(
+      `DROP INDEX "public"."IDX_f6f19994d02713e1f0021843ce"`,
+    );
+    await queryRunner.query(
+      `DROP TABLE "ServiceLevelObjectiveAutoAddedMonitor"`,
+    );
+    await queryRunner.query(
+      `DROP INDEX "public"."IDX_46d9376cbba06f4911ed521b30"`,
+    );
+    await queryRunner.query(
+      `DROP INDEX "public"."IDX_cfda767c33fdbaa6ef9f268b8e"`,
+    );
+    await queryRunner.query(`DROP TABLE "ServiceLevelObjectiveMonitorLabel"`);
+  }
+}

package/Server/Infrastructure/Postgres/SchemaMigrations/1785915638551-IncreaseHostIpAddressesLength.ts

@@ -0,0 +1,40 @@
+import { MigrationInterface, QueryRunner } from "typeorm";
+
+export class IncreaseHostIpAddressesLength1785915638551
+  implements MigrationInterface
+{
+  public name = "IncreaseHostIpAddressesLength1785915638551";
+
+  public async up(queryRunner: QueryRunner): Promise<void> {
+    /*
+     * Change hostIpAddresses from varchar(500) to text.
+     *
+     * The OTel `host.ip` resource attribute is an array of every address on
+     * every interface. A Docker host with IPv6 enabled reports the physical
+     * NIC, one address per docker bridge, one per veth, plus an IPv6
+     * link-local per interface — 55 addresses / ~1450 characters observed in
+     * the wild, and the count grows with the container count. Overflowing
+     * varchar(500) aborted the entire Host metadata UPDATE, so lastSeenAt
+     * and otelCollectorStatus never advanced and a healthy host was shown as
+     * "Disconnected". See issue #3006.
+     */
+    await queryRunner.query(
+      `ALTER TABLE "Host" ALTER COLUMN "hostIpAddresses" TYPE text`,
+    );
+  }
+
+  public async down(queryRunner: QueryRunner): Promise<void> {
+    /*
+     * Revert to varchar(500). Truncate first — rows written since `up` ran
+     * may exceed 500 characters, and Postgres refuses the narrowing cast
+     * with "value too long for type character varying(500)" rather than
+     * truncating for us.
+     */
+    await queryRunner.query(
+      `UPDATE "Host" SET "hostIpAddresses" = LEFT("hostIpAddresses", 500) WHERE LENGTH("hostIpAddresses") > 500`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "Host" ALTER COLUMN "hostIpAddresses" TYPE character varying(500)`,
+    );
+  }
+}