@oneuptime/common 12.0.14 → 12.0.16

package/build/dist/Types/NetworkDevice/NetworkDeviceLinkRuleScope.js

@@ -0,0 +1,46 @@
+/*
+ * How wide a link rule's "exactly one parent" question is asked.
+ *
+ * A rule says every device carrying ALL the child labels gets one uplink to
+ * the SINGLE device carrying ALL the parent labels. "Single" needs a universe,
+ * and until now that universe was whatever device set the topology query
+ * happened to hand the resolver. The same rule therefore resolved fine on a
+ * site-filtered map and collapsed to `ambiguousParent` on the global one —
+ * issue #3260, where fourteen units each have a router carrying
+ * `SubCategory:Router` and the global map drew NO rule uplinks at all, not
+ * even the thirteen unambiguous ones.
+ *
+ * Site asks the same question once per site instead. Opt-in, never inferred:
+ * inferring it would silently change what an already-saved rule draws, and a
+ * rule that quietly re-points cables is worse than one that refuses to draw.
+ *
+ * Stored as free text on the column (the NetworkDeviceMonitoringMethod
+ * precedent), so read it through `parse` rather than comparing the raw column:
+ * rows written before this existed hold NULL and must read as Project, which
+ * is what they are.
+ */
+export var NetworkDeviceLinkRuleScope;
+(function (NetworkDeviceLinkRuleScope) {
+    // One parent for the whole project. What every rule written so far means.
+    NetworkDeviceLinkRuleScope["Project"] = "Project";
+    // One parent per site. Devices with no site are skipped, and said so.
+    NetworkDeviceLinkRuleScope["Site"] = "Site";
+})(NetworkDeviceLinkRuleScope || (NetworkDeviceLinkRuleScope = {}));
+export class NetworkDeviceLinkRuleScopeUtil {
+    /*
+     * NULL, empty, whitespace and anything unrecognised read as Project.
+     * Defaulting the other way would silently redraw somebody's map.
+     */
+    static parse(value) {
+        if ((value || "").trim().toLowerCase() === "site") {
+            return NetworkDeviceLinkRuleScope.Site;
+        }
+        return NetworkDeviceLinkRuleScope.Project;
+    }
+    static isSiteScoped(value) {
+        return (NetworkDeviceLinkRuleScopeUtil.parse(value) ===
+            NetworkDeviceLinkRuleScope.Site);
+    }
+}
+export default NetworkDeviceLinkRuleScope;
+//# sourceMappingURL=NetworkDeviceLinkRuleScope.js.map

package/build/dist/Types/NetworkDevice/NetworkDeviceLinkRuleScope.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"NetworkDeviceLinkRuleScope.js","sourceRoot":"","sources":["../../../../Types/NetworkDevice/NetworkDeviceLinkRuleScope.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,CAAN,IAAY,0BAKX;AALD,WAAY,0BAA0B;IACpC,0EAA0E;IAC1E,iDAAmB,CAAA;IACnB,sEAAsE;IACtE,2CAAa,CAAA;AACf,CAAC,EALW,0BAA0B,KAA1B,0BAA0B,QAKrC;AAED,MAAM,OAAO,8BAA8B;IACzC;;;OAGG;IACI,MAAM,CAAC,KAAK,CACjB,KAAgC;QAEhC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,KAAK,MAAM,EAAE,CAAC;YAClD,OAAO,0BAA0B,CAAC,IAAI,CAAC;QACzC,CAAC;QACD,OAAO,0BAA0B,CAAC,OAAO,CAAC;IAC5C,CAAC;IAEM,MAAM,CAAC,YAAY,CAAC,KAAgC;QACzD,OAAO,CACL,8BAA8B,CAAC,KAAK,CAAC,KAAK,CAAC;YAC3C,0BAA0B,CAAC,IAAI,CAChC,CAAC;IACJ,CAAC;CACF;AAED,eAAe,0BAA0B,CAAC"}

package/build/dist/Types/Permission.js

@@ -22,10 +22,27 @@ export var PermissionGroup;
     PermissionGroup["Probe"] = "Probe";
     PermissionGroup["NotificationLog"] = "Notification Log";
     PermissionGroup["AuditLog"] = "Audit Log";
+    PermissionGroup["Security"] = "Security";
 })(PermissionGroup || (PermissionGroup = {}));
 var Permission;
 (function (Permission) {
-    // All users in the project will have this permission.
+    /*
+     * Held by every user who is a member of the project, in addition to whatever
+     * roles their teams grant. It is not something an administrator hands out to
+     * make something work - AccessTokenService adds it to the tenant permission
+     * set of anyone who has accepted an invitation to the project.
+     *
+     * Its purpose is the shared plumbing of the dashboard: saved table views,
+     * labels, teams, member profiles. Those are not "settings" in the sense of a
+     * capability somebody is trusted with; they are the furniture every page is
+     * built out of, and a user scoped to a single domain (Monitor Viewer, say)
+     * needs to read them or the page they *are* allowed to see cannot render.
+     *
+     * Only models that are shared in that sense may list it. Anything holding
+     * data one role should be able to keep from another - billing, credentials,
+     * a domain's own records - must not, because every principal in the project
+     * has it. See ProjectSharedResources.test.ts, which enforces both halves.
+     */
     Permission["ProjectUser"] = "ProjectUser";
     Permission["AuthenticatedRequest"] = "AuthenticatedRequest";
     // Users who are in the project but do not have SSO authorization.
@@ -105,6 +122,16 @@ var Permission;
     Permission["DeleteTelemetryServiceLog"] = "DeleteTelemetryServiceLog";
     Permission["EditTelemetryServiceLog"] = "EditTelemetryServiceLog";
     Permission["ReadTelemetryServiceLog"] = "ReadTelemetryServiceLog";
+    // Security Events (SIEM signals stored in ClickHouse)
+    Permission["CreateSecurityEvent"] = "CreateSecurityEvent";
+    Permission["DeleteSecurityEvent"] = "DeleteSecurityEvent";
+    Permission["EditSecurityEvent"] = "EditSecurityEvent";
+    Permission["ReadSecurityEvent"] = "ReadSecurityEvent";
+    // Detection Rules (Sigma detections-as-code over security events)
+    Permission["CreateProjectDetectionRule"] = "CreateProjectDetectionRule";
+    Permission["DeleteProjectDetectionRule"] = "DeleteProjectDetectionRule";
+    Permission["EditProjectDetectionRule"] = "EditProjectDetectionRule";
+    Permission["ReadProjectDetectionRule"] = "ReadProjectDetectionRule";
     // Log Pipelines
     Permission["CreateProjectLogPipeline"] = "CreateProjectLogPipeline";
     Permission["DeleteProjectLogPipeline"] = "DeleteProjectLogPipeline";
@@ -130,6 +157,14 @@ var Permission;
     Permission["DeleteProjectMetricPipelineRule"] = "DeleteProjectMetricPipelineRule";
     Permission["EditProjectMetricPipelineRule"] = "EditProjectMetricPipelineRule";
     Permission["ReadProjectMetricPipelineRule"] = "ReadProjectMetricPipelineRule";
+    Permission["CreateProjectLlmCostBudget"] = "CreateProjectLlmCostBudget";
+    Permission["DeleteProjectLlmCostBudget"] = "DeleteProjectLlmCostBudget";
+    Permission["EditProjectLlmCostBudget"] = "EditProjectLlmCostBudget";
+    Permission["ReadProjectLlmCostBudget"] = "ReadProjectLlmCostBudget";
+    Permission["CreateProjectLlmModelPrice"] = "CreateProjectLlmModelPrice";
+    Permission["DeleteProjectLlmModelPrice"] = "DeleteProjectLlmModelPrice";
+    Permission["EditProjectLlmModelPrice"] = "EditProjectLlmModelPrice";
+    Permission["ReadProjectLlmModelPrice"] = "ReadProjectLlmModelPrice";
     // Metric Recording Rules (derived metrics)
     Permission["CreateProjectMetricRecordingRule"] = "CreateProjectMetricRecordingRule";
     Permission["DeleteProjectMetricRecordingRule"] = "DeleteProjectMetricRecordingRule";
@@ -1442,6 +1477,27 @@ var Permission;
     Permission["DeleteIncidentSlaRule"] = "DeleteIncidentSlaRule";
     Permission["EditIncidentSlaRule"] = "EditIncidentSlaRule";
     Permission["ReadIncidentSlaRule"] = "ReadIncidentSlaRule";
+    // Incident Measurement Permissions
+    Permission["CreateIncidentMeasurement"] = "CreateIncidentMeasurement";
+    Permission["DeleteIncidentMeasurement"] = "DeleteIncidentMeasurement";
+    Permission["EditIncidentMeasurement"] = "EditIncidentMeasurement";
+    Permission["ReadIncidentMeasurement"] = "ReadIncidentMeasurement";
+    // Incident Measurement Value Permissions
+    Permission["ReadIncidentMeasurementValue"] = "ReadIncidentMeasurementValue";
+    // Alert Measurement Permissions
+    Permission["CreateAlertMeasurement"] = "CreateAlertMeasurement";
+    Permission["DeleteAlertMeasurement"] = "DeleteAlertMeasurement";
+    Permission["EditAlertMeasurement"] = "EditAlertMeasurement";
+    Permission["ReadAlertMeasurement"] = "ReadAlertMeasurement";
+    // Alert Measurement Value Permissions
+    Permission["ReadAlertMeasurementValue"] = "ReadAlertMeasurementValue";
+    // Scheduled Maintenance Measurement Permissions
+    Permission["CreateScheduledMaintenanceMeasurement"] = "CreateScheduledMaintenanceMeasurement";
+    Permission["DeleteScheduledMaintenanceMeasurement"] = "DeleteScheduledMaintenanceMeasurement";
+    Permission["EditScheduledMaintenanceMeasurement"] = "EditScheduledMaintenanceMeasurement";
+    Permission["ReadScheduledMaintenanceMeasurement"] = "ReadScheduledMaintenanceMeasurement";
+    // Scheduled Maintenance Measurement Value Permissions
+    Permission["ReadScheduledMaintenanceMeasurementValue"] = "ReadScheduledMaintenanceMeasurementValue";
     // Incident Reminder Rule Permissions
     Permission["CreateIncidentReminderRule"] = "CreateIncidentReminderRule";
     Permission["DeleteIncidentReminderRule"] = "DeleteIncidentReminderRule";
@@ -1962,7 +2018,7 @@ export class PermissionHelper {
             {
                 permission: Permission.ProjectUser,
                 title: "Project User",
-                description: "User of this project.",
+                description: "Member of this project. Every user in the project holds this permission; it grants read access to shared workspace resources such as saved table views, labels, teams and member profiles.",
                 isAssignableToTenant: true,
                 isAccessControlPermission: false,
                 isRolePermission: false,
@@ -6117,6 +6173,80 @@ export class PermissionHelper {
                 isRolePermission: false,
                 group: PermissionGroup.Telemetry,
             },
+            // Security Event Permissions
+            {
+                permission: Permission.CreateSecurityEvent,
+                title: "Create Security Event",
+                description: "This permission can create Security Events in this project.",
+                isAssignableToTenant: true,
+                isAccessControlPermission: false,
+                isRolePermission: false,
+                group: PermissionGroup.Security,
+            },
+            {
+                permission: Permission.DeleteSecurityEvent,
+                title: "Delete Security Event",
+                description: "This permission can delete Security Events of this project.",
+                isAssignableToTenant: true,
+                isAccessControlPermission: false,
+                isRolePermission: false,
+                group: PermissionGroup.Security,
+            },
+            {
+                permission: Permission.EditSecurityEvent,
+                title: "Edit Security Event",
+                description: "This permission can edit Security Events of this project.",
+                isAssignableToTenant: true,
+                isAccessControlPermission: false,
+                isRolePermission: false,
+                group: PermissionGroup.Security,
+            },
+            {
+                permission: Permission.ReadSecurityEvent,
+                title: "Read Security Event",
+                description: "This permission can read Security Events of this project.",
+                isAssignableToTenant: true,
+                isAccessControlPermission: false,
+                isRolePermission: false,
+                group: PermissionGroup.Security,
+            },
+            // Detection Rule Permissions
+            {
+                permission: Permission.CreateProjectDetectionRule,
+                title: "Create Detection Rule",
+                description: "This permission can create Detection Rules in this project.",
+                isAssignableToTenant: true,
+                isAccessControlPermission: false,
+                isRolePermission: false,
+                group: PermissionGroup.Security,
+            },
+            {
+                permission: Permission.DeleteProjectDetectionRule,
+                title: "Delete Detection Rule",
+                description: "This permission can delete Detection Rules of this project.",
+                isAssignableToTenant: true,
+                isAccessControlPermission: false,
+                isRolePermission: false,
+                group: PermissionGroup.Security,
+            },
+            {
+                permission: Permission.EditProjectDetectionRule,
+                title: "Edit Detection Rule",
+                description: "This permission can edit Detection Rules of this project.",
+                isAssignableToTenant: true,
+                isAccessControlPermission: false,
+                isRolePermission: false,
+                group: PermissionGroup.Security,
+            },
+            {
+                permission: Permission.ReadProjectDetectionRule,
+                title: "Read Detection Rule",
+                description: "This permission can read Detection Rules of this project.",
+                isAssignableToTenant: true,
+                isAccessControlPermission: false,
+                isRolePermission: false,
+                group: PermissionGroup.Security,
+            },
             // Log Pipeline Permissions
             {
                 permission: Permission.CreateProjectLogPipeline,
@@ -6302,6 +6432,80 @@ export class PermissionHelper {
                 isRolePermission: false,
                 group: PermissionGroup.Telemetry,
             },
+            // LLM Cost Budget Permissions
+            {
+                permission: Permission.CreateProjectLlmCostBudget,
+                title: "Create LLM Cost Budget",
+                description: "This permission can create LLM Cost Budgets in this project.",
+                isAssignableToTenant: true,
+                isAccessControlPermission: false,
+                isRolePermission: false,
+                group: PermissionGroup.Telemetry,
+            },
+            {
+                permission: Permission.DeleteProjectLlmCostBudget,
+                title: "Delete LLM Cost Budget",
+                description: "This permission can delete LLM Cost Budgets of this project.",
+                isAssignableToTenant: true,
+                isAccessControlPermission: false,
+                isRolePermission: false,
+                group: PermissionGroup.Telemetry,
+            },
+            {
+                permission: Permission.EditProjectLlmCostBudget,
+                title: "Edit LLM Cost Budget",
+                description: "This permission can edit LLM Cost Budgets of this project.",
+                isAssignableToTenant: true,
+                isAccessControlPermission: false,
+                isRolePermission: false,
+                group: PermissionGroup.Telemetry,
+            },
+            {
+                permission: Permission.ReadProjectLlmCostBudget,
+                title: "Read LLM Cost Budget",
+                description: "This permission can read LLM Cost Budgets of this project.",
+                isAssignableToTenant: true,
+                isAccessControlPermission: false,
+                isRolePermission: false,
+                group: PermissionGroup.Telemetry,
+            },
+            // LLM Model Price Permissions
+            {
+                permission: Permission.CreateProjectLlmModelPrice,
+                title: "Create LLM Model Price",
+                description: "This permission can create LLM Model Prices in this project.",
+                isAssignableToTenant: true,
+                isAccessControlPermission: false,
+                isRolePermission: false,
+                group: PermissionGroup.Telemetry,
+            },
+            {
+                permission: Permission.DeleteProjectLlmModelPrice,
+                title: "Delete LLM Model Price",
+                description: "This permission can delete LLM Model Prices of this project.",
+                isAssignableToTenant: true,
+                isAccessControlPermission: false,
+                isRolePermission: false,
+                group: PermissionGroup.Telemetry,
+            },
+            {
+                permission: Permission.EditProjectLlmModelPrice,
+                title: "Edit LLM Model Price",
+                description: "This permission can edit LLM Model Prices of this project.",
+                isAssignableToTenant: true,
+                isAccessControlPermission: false,
+                isRolePermission: false,
+                group: PermissionGroup.Telemetry,
+            },
+            {
+                permission: Permission.ReadProjectLlmModelPrice,
+                title: "Read LLM Model Price",
+                description: "This permission can read LLM Model Prices of this project.",
+                isAssignableToTenant: true,
+                isAccessControlPermission: false,
+                isRolePermission: false,
+                group: PermissionGroup.Telemetry,
+            },
             // Metric Recording Rule Permissions (derived metrics)
             {
                 permission: Permission.CreateProjectMetricRecordingRule,
@@ -12730,6 +12934,147 @@ export class PermissionHelper {
                 isRolePermission: false,
                 group: PermissionGroup.Incident,
             },
+            // Incident Measurement Permissions
+            {
+                permission: Permission.CreateIncidentMeasurement,
+                title: "Create Incident Measurement",
+                description: "This permission can create Incident Measurements in this project.",
+                isAssignableToTenant: true,
+                isAccessControlPermission: false,
+                isRolePermission: false,
+                group: PermissionGroup.Incident,
+            },
+            {
+                permission: Permission.DeleteIncidentMeasurement,
+                title: "Delete Incident Measurement",
+                description: "This permission can delete Incident Measurements of this project.",
+                isAssignableToTenant: true,
+                isAccessControlPermission: false,
+                isRolePermission: false,
+                group: PermissionGroup.Incident,
+            },
+            {
+                permission: Permission.EditIncidentMeasurement,
+                title: "Edit Incident Measurement",
+                description: "This permission can edit Incident Measurements of this project.",
+                isAssignableToTenant: true,
+                isAccessControlPermission: false,
+                isRolePermission: false,
+                group: PermissionGroup.Incident,
+            },
+            {
+                permission: Permission.ReadIncidentMeasurement,
+                title: "Read Incident Measurement",
+                description: "This permission can read Incident Measurements of this project.",
+                isAssignableToTenant: true,
+                isAccessControlPermission: false,
+                isRolePermission: false,
+                group: PermissionGroup.Incident,
+            },
+            // Incident Measurement Value Permissions
+            {
+                permission: Permission.ReadIncidentMeasurementValue,
+                title: "Read Incident Measurement Value",
+                description: "This permission can read Incident Measurement Values of this project.",
+                isAssignableToTenant: true,
+                isAccessControlPermission: false,
+                isRolePermission: false,
+                group: PermissionGroup.Incident,
+            },
+            // Alert Measurement Permissions
+            {
+                permission: Permission.CreateAlertMeasurement,
+                title: "Create Alert Measurement",
+                description: "This permission can create Alert Measurements in this project.",
+                isAssignableToTenant: true,
+                isAccessControlPermission: false,
+                isRolePermission: false,
+                group: PermissionGroup.Alert,
+            },
+            {
+                permission: Permission.DeleteAlertMeasurement,
+                title: "Delete Alert Measurement",
+                description: "This permission can delete Alert Measurements of this project.",
+                isAssignableToTenant: true,
+                isAccessControlPermission: false,
+                isRolePermission: false,
+                group: PermissionGroup.Alert,
+            },
+            {
+                permission: Permission.EditAlertMeasurement,
+                title: "Edit Alert Measurement",
+                description: "This permission can edit Alert Measurements of this project.",
+                isAssignableToTenant: true,
+                isAccessControlPermission: false,
+                isRolePermission: false,
+                group: PermissionGroup.Alert,
+            },
+            {
+                permission: Permission.ReadAlertMeasurement,
+                title: "Read Alert Measurement",
+                description: "This permission can read Alert Measurements of this project.",
+                isAssignableToTenant: true,
+                isAccessControlPermission: false,
+                isRolePermission: false,
+                group: PermissionGroup.Alert,
+            },
+            // Alert Measurement Value Permissions
+            {
+                permission: Permission.ReadAlertMeasurementValue,
+                title: "Read Alert Measurement Value",
+                description: "This permission can read Alert Measurement Values of this project.",
+                isAssignableToTenant: true,
+                isAccessControlPermission: false,
+                isRolePermission: false,
+                group: PermissionGroup.Alert,
+            },
+            // Scheduled Maintenance Measurement Permissions
+            {
+                permission: Permission.CreateScheduledMaintenanceMeasurement,
+                title: "Create Scheduled Maintenance Measurement",
+                description: "This permission can create Scheduled Maintenance Measurements in this project.",
+                isAssignableToTenant: true,
+                isAccessControlPermission: false,
+                isRolePermission: false,
+                group: PermissionGroup.ScheduledMaintenance,
+            },
+            {
+                permission: Permission.DeleteScheduledMaintenanceMeasurement,
+                title: "Delete Scheduled Maintenance Measurement",
+                description: "This permission can delete Scheduled Maintenance Measurements of this project.",
+                isAssignableToTenant: true,
+                isAccessControlPermission: false,
+                isRolePermission: false,
+                group: PermissionGroup.ScheduledMaintenance,
+            },
+            {
+                permission: Permission.EditScheduledMaintenanceMeasurement,
+                title: "Edit Scheduled Maintenance Measurement",
+                description: "This permission can edit Scheduled Maintenance Measurements of this project.",
+                isAssignableToTenant: true,
+                isAccessControlPermission: false,
+                isRolePermission: false,
+                group: PermissionGroup.ScheduledMaintenance,
+            },
+            {
+                permission: Permission.ReadScheduledMaintenanceMeasurement,
+                title: "Read Scheduled Maintenance Measurement",
+                description: "This permission can read Scheduled Maintenance Measurements of this project.",
+                isAssignableToTenant: true,
+                isAccessControlPermission: false,
+                isRolePermission: false,
+                group: PermissionGroup.ScheduledMaintenance,
+            },
+            // Scheduled Maintenance Measurement Value Permissions
+            {
+                permission: Permission.ReadScheduledMaintenanceMeasurementValue,
+                title: "Read Scheduled Maintenance Measurement Value",
+                description: "This permission can read Scheduled Maintenance Measurement Values of this project.",
+                isAssignableToTenant: true,
+                isAccessControlPermission: false,
+                isRolePermission: false,
+                group: PermissionGroup.ScheduledMaintenance,
+            },
             // Incident Reminder Rule Permissions
             {
                 permission: Permission.CreateIncidentReminderRule,