@oneuptime/common 12.0.2 → 12.0.3

package/build/dist/Server/Utils/Monitor/MonitorStepsProjectValidator.js

@@ -1,117 +1,129 @@
 import AlertSeverityService from "../../Services/AlertSeverityService";
+import IncidentRoleService from "../../Services/IncidentRoleService";
 import IncidentSeverityService from "../../Services/IncidentSeverityService";
+import LabelService from "../../Services/LabelService";
 import MonitorStatusService from "../../Services/MonitorStatusService";
-import QueryHelper from "../../Types/Database/QueryHelper";
-import { LIMIT_PER_PROJECT } from "../../../Types/Database/LimitMax";
-import BadDataException from "../../../Types/Exception/BadDataException";
-import MonitorSteps from "../../../Types/Monitor/MonitorSteps";
-const UUID_REGEX = /[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}/g;
+import NetworkDeviceService from "../../Services/NetworkDeviceService";
+import OnCallDutyPolicyService from "../../Services/OnCallDutyPolicyService";
+import ServiceService from "../../Services/ServiceService";
+import TeamService from "../../Services/TeamService";
+import UserService from "../../Services/UserService";
+import ProjectScopedReferenceValidator from "../Database/ProjectScopedReferenceValidator";
+import MonitorStepsReferenceExtractor, { MonitorStepsReferenceModel, } from "./MonitorStepsReferenceExtractor";
 /*
- * `monitorSteps` is a JSON blob that embeds ids of other project-scoped
- * records — the default monitor status, the status each criteria switches to,
- * and the severities used to open incidents and alerts. Nothing used to check
- * that those ids belonged to the monitor's own project, so a status id from a
- * second project could be saved and then stamped onto every
- * MonitorStatusTimeline row the monitor wrote. That silently ties two projects
- * together and leaves the referenced project undeletable.
+ * `monitorSteps` is a JSON blob that embeds ids of other records — the default
+ * monitor status, the status each criteria switches to, the severities used to
+ * open incidents and alerts, and the on-call policies, labels, teams and users
+ * stamped on what those incidents and alerts create.
  *
- * The check below is deliberately narrow: it only rejects an id that really is
- * another project's record. monitorSteps is full of unrelated uuids (step ids,
- * criteria ids, incident/alert template ids) and those never match a row here,
- * so they pass through untouched. Ids that match nothing at all are also left
- * alone — refusing them would block users from saving their way out of a
- * monitor that already references a deleted record.
+ * Two things can be wrong with one of those ids, and both used to be accepted:
+ *
+ * 1. It belongs to ANOTHER project. That silently ties two projects together
+ *    and leaves the referenced project undeletable, because the row the id ends
+ *    up on (a MonitorStatusTimeline, an Incident) has an ON DELETE NO ACTION
+ *    foreign key pointing back at it.
+ *
+ * 2. It exists nowhere at all (issue #3039). The monitor saved fine and then
+ *    failed every time it ran, deep inside the probe worker, with
+ *      insert or update on table "MonitorStatusTimeline" violates foreign key
+ *      constraint
+ *    and nothing surfaced to whoever supplied the id — which is easy to do over
+ *    the REST API or Terraform, where these are just uuids in a JSON body.
+ *
+ * Telling a real reference apart from the many uuids in monitorSteps that are
+ * NOT references (step ids, criteria ids, incident/alert template ids) is what
+ * makes check 2 possible, and that is MonitorStepsReferenceExtractor's job: it
+ * walks the structure instead of scraping the text, so every id it hands back
+ * is known to point at a specific model.
  */
+const SERVICE_BY_MODEL = {
+    [MonitorStepsReferenceModel.MonitorStatus]: MonitorStatusService,
+    [MonitorStepsReferenceModel.IncidentSeverity]: IncidentSeverityService,
+    [MonitorStepsReferenceModel.AlertSeverity]: AlertSeverityService,
+    [MonitorStepsReferenceModel.OnCallDutyPolicy]: OnCallDutyPolicyService,
+    [MonitorStepsReferenceModel.Label]: LabelService,
+    [MonitorStepsReferenceModel.Team]: TeamService,
+    [MonitorStepsReferenceModel.User]: UserService,
+    [MonitorStepsReferenceModel.IncidentRole]: IncidentRoleService,
+    [MonitorStepsReferenceModel.TelemetryService]: ServiceService,
+    [MonitorStepsReferenceModel.NetworkDevice]: NetworkDeviceService,
+};
 export default class MonitorStepsProjectValidator {
     static async validateMonitorStepsBelongToProject(data) {
-        var _a, _b, _c, _d, _e, _f;
         if (!data.monitorSteps || !data.projectId) {
             return;
         }
-        const referencedIds = this.extractUuids(data.monitorSteps);
-        if (referencedIds.length === 0) {
+        const references = MonitorStepsReferenceExtractor.extract(data.monitorSteps);
+        if (references.length === 0) {
             return;
         }
-        const foreignReferences = [];
-        const monitorStatuses = await MonitorStatusService.findBy({
-            query: {
-                _id: QueryHelper.any(referencedIds),
-            },
-            select: { _id: true, name: true, projectId: true },
-            limit: LIMIT_PER_PROJECT,
-            skip: 0,
-            props: { isRoot: true },
+        /*
+         * An id the record ALREADY holds is this write's inheritance, not its
+         * doing, and is left alone entirely — neither checked for existence nor for
+         * belonging to another project.
+         *
+         * None of these ids has a foreign key behind it, so one really can end up
+         * wrong through no fault of the person now saving: deleting a monitor
+         * status, label, team or on-call policy does not rewrite the criteria that
+         * name it, and the 1785240000000 repair migration deliberately left behind
+         * the cross-project ids it could not map to a local equivalent. The
+         * dashboard re-submits the whole blob on every save and renders an
+         * unresolvable id as an empty dropdown, so checking them would refuse EVERY
+         * edit of such a monitor — including renaming it — over a field the user
+         * never touched and cannot see is wrong, with no migration to get them out.
+         *
+         * Letting a stale id ride costs less than it used to. The status and
+         * severity ids — the ones that reach a foreign-key column and made the
+         * referenced project undeletable — are now screened where they are written:
+         * MonitorStatusTimelineService rejects a status that does not resolve, and
+         * the probe worker skips one it cannot use rather than writing it, as
+         * MonitorIncident and MonitorAlert already did for severities.
+         *
+         * That screening does NOT extend to the ids that land on join rows
+         * (IncidentLabel, IncidentOnCallDutyPolicy and friends). A stale label or
+         * on-call policy carried forward here can still fail when the criteria
+         * fires. That is a pre-existing gap in MonitorIncident/MonitorAlert rather
+         * than something this exemption opens up — those ids were not validated at
+         * all before — and refusing the SAVE would not close it, because the
+         * monitor that never gets edited again fails just the same.
+         *
+         * What this write INTRODUCES is checked in full. That is issue #3039.
+         *
+         * Compared case-insensitively: ObjectID keeps whatever case it was given,
+         * so the same id can be stored as Postgres rendered it (lower) and re-sent
+         * by a caller in upper.
+         */
+        const grandfatheredIds = new Set(MonitorStepsReferenceExtractor.extract(data.alreadyStoredMonitorSteps).map((reference) => {
+            return reference.id.toLowerCase();
+        }));
+        const introduced = references.filter((reference) => {
+            return !grandfatheredIds.has(reference.id.toLowerCase());
         });
-        for (const monitorStatus of monitorStatuses) {
-            if (((_a = monitorStatus.projectId) === null || _a === void 0 ? void 0 : _a.toString()) !== data.projectId.toString()) {
-                foreignReferences.push({
-                    modelName: "Monitor Status",
-                    name: monitorStatus.name || ((_b = monitorStatus.id) === null || _b === void 0 ? void 0 : _b.toString()) || "",
-                });
-            }
-        }
-        const incidentSeverities = await IncidentSeverityService.findBy({
-            query: {
-                _id: QueryHelper.any(referencedIds),
-            },
-            select: { _id: true, name: true, projectId: true },
-            limit: LIMIT_PER_PROJECT,
-            skip: 0,
-            props: { isRoot: true },
-        });
-        for (const incidentSeverity of incidentSeverities) {
-            if (((_c = incidentSeverity.projectId) === null || _c === void 0 ? void 0 : _c.toString()) !== data.projectId.toString()) {
-                foreignReferences.push({
-                    modelName: "Incident Severity",
-                    name: incidentSeverity.name || ((_d = incidentSeverity.id) === null || _d === void 0 ? void 0 : _d.toString()) || "",
-                });
-            }
+        if (introduced.length === 0) {
+            return;
         }
-        const alertSeverities = await AlertSeverityService.findBy({
-            query: {
-                _id: QueryHelper.any(referencedIds),
-            },
-            select: { _id: true, name: true, projectId: true },
-            limit: LIMIT_PER_PROJECT,
-            skip: 0,
-            props: { isRoot: true },
+        await ProjectScopedReferenceValidator.validateReferencesBelongToProject({
+            projectId: data.projectId,
+            subject: "monitor's criteria",
+            references: introduced.map((reference) => {
+                return {
+                    /*
+                     * The path — `criteria "Monitor is offline" incident severity` —
+                     * rather than the bare model name, so the message points at the
+                     * field to fix. monitorSteps can hold a dozen of these.
+                     */
+                    modelName: `${reference.model} (${reference.path})`,
+                    id: reference.id,
+                    service: SERVICE_BY_MODEL[reference.model],
+                    /*
+                     * Only ids the monitor actually reads at run time are required to
+                     * exist — see MonitorStepsReference.isOperative. The rest are still
+                     * checked for belonging to this project.
+                     */
+                    mustExist: reference.isOperative,
+                };
+            }),
         });
-        for (const alertSeverity of alertSeverities) {
-            if (((_e = alertSeverity.projectId) === null || _e === void 0 ? void 0 : _e.toString()) !== data.projectId.toString()) {
-                foreignReferences.push({
-                    modelName: "Alert Severity",
-                    name: alertSeverity.name || ((_f = alertSeverity.id) === null || _f === void 0 ? void 0 : _f.toString()) || "",
-                });
-            }
-        }
-        if (foreignReferences.length > 0) {
-            const described = foreignReferences
-                .map((reference) => {
-                return `${reference.modelName} "${reference.name}"`;
-            })
-                .join(", ");
-            throw new BadDataException(`Monitor criteria reference records that belong to a different project: ${described}. Please pick values from this project and try again.`);
-        }
-    }
-    static extractUuids(monitorSteps) {
-        let serialized = "";
-        try {
-            serialized =
-                monitorSteps instanceof MonitorSteps
-                    ? JSON.stringify(monitorSteps.toJSON())
-                    : JSON.stringify(monitorSteps);
-        }
-        catch (_a) {
-            /*
-             * Unserializable monitorSteps is a different problem and is reported by
-             * MonitorSteps' own validation. Nothing to check here.
-             */
-            return [];
-        }
-        const matches = serialized.match(UUID_REGEX) || [];
-        return Array.from(new Set(matches.map((match) => {
-            return match.toLowerCase();
-        })));
     }
 }
 //# sourceMappingURL=MonitorStepsProjectValidator.js.map

package/build/dist/Server/Utils/Monitor/MonitorStepsProjectValidator.js.map

@@ -1 +1 @@
-{"version":3,"file":"MonitorStepsProjectValidator.js","sourceRoot":"","sources":["../../../../../Server/Utils/Monitor/MonitorStepsProjectValidator.ts"],"names":[],"mappings":"AAAA,OAAO,oBAAoB,MAAM,qCAAqC,CAAC;AACvE,OAAO,uBAAuB,MAAM,wCAAwC,CAAC;AAC7E,OAAO,oBAAoB,MAAM,qCAAqC,CAAC;AACvE,OAAO,WAAW,MAAM,kCAAkC,CAAC;AAC3D,OAAO,EAAE,iBAAiB,EAAE,MAAM,kCAAkC,CAAC;AACrE,OAAO,gBAAgB,MAAM,2CAA2C,CAAC;AAEzE,OAAO,YAAY,MAAM,qCAAqC,CAAC;AAM/D,MAAM,UAAU,GACd,8EAA8E,CAAC;AAOjF;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAC,OAAO,OAAO,4BAA4B;IACxC,MAAM,CAAC,KAAK,CAAC,mCAAmC,CAAC,IAGvD;;QACC,IAAI,CAAC,IAAI,CAAC,YAAY,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;YAC1C,OAAO;QACT,CAAC;QAED,MAAM,aAAa,GAAkB,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAE1E,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC/B,OAAO;QACT,CAAC;QAED,MAAM,iBAAiB,GAA4B,EAAE,CAAC;QAEtD,MAAM,eAAe,GACnB,MAAM,oBAAoB,CAAC,MAAM,CAAC;YAChC,KAAK,EAAE;gBACL,GAAG,EAAE,WAAW,CAAC,GAAG,CAAC,aAAa,CAAC;aACpC;YACD,MAAM,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE;YAClD,KAAK,EAAE,iBAAiB;YACxB,IAAI,EAAE,CAAC;YACP,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE;SACxB,CAAC,CAAC;QAEL,KAAK,MAAM,aAAa,IAAI,eAAe,EAAE,CAAC;YAC5C,IAAI,CAAA,MAAA,aAAa,CAAC,SAAS,0CAAE,QAAQ,EAAE,MAAK,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,EAAE,CAAC;gBACtE,iBAAiB,CAAC,IAAI,CAAC;oBACrB,SAAS,EAAE,gBAAgB;oBAC3B,IAAI,EAAE,aAAa,CAAC,IAAI,KAAI,MAAA,aAAa,CAAC,EAAE,0CAAE,QAAQ,EAAE,CAAA,IAAI,EAAE;iBAC/D,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,MAAM,kBAAkB,GACtB,MAAM,uBAAuB,CAAC,MAAM,CAAC;YACnC,KAAK,EAAE;gBACL,GAAG,EAAE,WAAW,CAAC,GAAG,CAAC,aAAa,CAAC;aACpC;YACD,MAAM,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE;YAClD,KAAK,EAAE,iBAAiB;YACxB,IAAI,EAAE,CAAC;YACP,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE;SACxB,CAAC,CAAC;QAEL,KAAK,MAAM,gBAAgB,IAAI,kBAAkB,EAAE,CAAC;YAClD,IACE,CAAA,MAAA,gBAAgB,CAAC,SAAS,0CAAE,QAAQ,EAAE,MAAK,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,EACpE,CAAC;gBACD,iBAAiB,CAAC,IAAI,CAAC;oBACrB,SAAS,EAAE,mBAAmB;oBAC9B,IAAI,EAAE,gBAAgB,CAAC,IAAI,KAAI,MAAA,gBAAgB,CAAC,EAAE,0CAAE,QAAQ,EAAE,CAAA,IAAI,EAAE;iBACrE,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,MAAM,eAAe,GACnB,MAAM,oBAAoB,CAAC,MAAM,CAAC;YAChC,KAAK,EAAE;gBACL,GAAG,EAAE,WAAW,CAAC,GAAG,CAAC,aAAa,CAAC;aACpC;YACD,MAAM,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE;YAClD,KAAK,EAAE,iBAAiB;YACxB,IAAI,EAAE,CAAC;YACP,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE;SACxB,CAAC,CAAC;QAEL,KAAK,MAAM,aAAa,IAAI,eAAe,EAAE,CAAC;YAC5C,IAAI,CAAA,MAAA,aAAa,CAAC,SAAS,0CAAE,QAAQ,EAAE,MAAK,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,EAAE,CAAC;gBACtE,iBAAiB,CAAC,IAAI,CAAC;oBACrB,SAAS,EAAE,gBAAgB;oBAC3B,IAAI,EAAE,aAAa,CAAC,IAAI,KAAI,MAAA,aAAa,CAAC,EAAE,0CAAE,QAAQ,EAAE,CAAA,IAAI,EAAE;iBAC/D,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,IAAI,iBAAiB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACjC,MAAM,SAAS,GAAW,iBAAiB;iBACxC,GAAG,CAAC,CAAC,SAA2B,EAAE,EAAE;gBACnC,OAAO,GAAG,SAAS,CAAC,SAAS,KAAK,SAAS,CAAC,IAAI,GAAG,CAAC;YACtD,CAAC,CAAC;iBACD,IAAI,CAAC,IAAI,CAAC,CAAC;YAEd,MAAM,IAAI,gBAAgB,CACxB,0EAA0E,SAAS,uDAAuD,CAC3I,CAAC;QACJ,CAAC;IACH,CAAC;IAEO,MAAM,CAAC,YAAY,CACzB,YAAuC;QAEvC,IAAI,UAAU,GAAW,EAAE,CAAC;QAE5B,IAAI,CAAC;YACH,UAAU;gBACR,YAAY,YAAY,YAAY;oBAClC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,MAAM,EAAE,CAAC;oBACvC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;QACrC,CAAC;QAAC,WAAM,CAAC;YACP;;;eAGG;YACH,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,MAAM,OAAO,GAAkB,UAAU,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC;QAElE,OAAO,KAAK,CAAC,IAAI,CACf,IAAI,GAAG,CACL,OAAO,CAAC,GAAG,CAAC,CAAC,KAAa,EAAE,EAAE;YAC5B,OAAO,KAAK,CAAC,WAAW,EAAE,CAAC;QAC7B,CAAC,CAAC,CACH,CACF,CAAC;IACJ,CAAC;CACF"}
+{"version":3,"file":"MonitorStepsProjectValidator.js","sourceRoot":"","sources":["../../../../../Server/Utils/Monitor/MonitorStepsProjectValidator.ts"],"names":[],"mappings":"AAAA,OAAO,oBAAoB,MAAM,qCAAqC,CAAC;AAEvE,OAAO,mBAAmB,MAAM,oCAAoC,CAAC;AACrE,OAAO,uBAAuB,MAAM,wCAAwC,CAAC;AAC7E,OAAO,YAAY,MAAM,6BAA6B,CAAC;AACvD,OAAO,oBAAoB,MAAM,qCAAqC,CAAC;AACvE,OAAO,oBAAoB,MAAM,qCAAqC,CAAC;AACvE,OAAO,uBAAuB,MAAM,wCAAwC,CAAC;AAC7E,OAAO,cAAc,MAAM,+BAA+B,CAAC;AAC3D,OAAO,WAAW,MAAM,4BAA4B,CAAC;AACrD,OAAO,WAAW,MAAM,4BAA4B,CAAC;AACrD,OAAO,+BAEN,MAAM,6CAA6C,CAAC;AACrD,OAAO,8BAA8B,EAAE,EAErC,0BAA0B,GAC3B,MAAM,kCAAkC,CAAC;AAM1C;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAEH,MAAM,gBAAgB,GAGlB;IACF,CAAC,0BAA0B,CAAC,aAAa,CAAC,EACxC,oBAAqE;IACvE,CAAC,0BAA0B,CAAC,gBAAgB,CAAC,EAC3C,uBAAwE;IAC1E,CAAC,0BAA0B,CAAC,aAAa,CAAC,EACxC,oBAAqE;IACvE,CAAC,0BAA0B,CAAC,gBAAgB,CAAC,EAC3C,uBAAwE;IAC1E,CAAC,0BAA0B,CAAC,KAAK,CAAC,EAChC,YAA6D;IAC/D,CAAC,0BAA0B,CAAC,IAAI,CAAC,EAC/B,WAA4D;IAC9D,CAAC,0BAA0B,CAAC,IAAI,CAAC,EAC/B,WAA4D;IAC9D,CAAC,0BAA0B,CAAC,YAAY,CAAC,EACvC,mBAAoE;IACtE,CAAC,0BAA0B,CAAC,gBAAgB,CAAC,EAC3C,cAA+D;IACjE,CAAC,0BAA0B,CAAC,aAAa,CAAC,EACxC,oBAAqE;CACxE,CAAC;AAEF,MAAM,CAAC,OAAO,OAAO,4BAA4B;IACxC,MAAM,CAAC,KAAK,CAAC,mCAAmC,CAAC,IAUvD;QACC,IAAI,CAAC,IAAI,CAAC,YAAY,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;YAC1C,OAAO;QACT,CAAC;QAED,MAAM,UAAU,GACd,8BAA8B,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAE5D,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC5B,OAAO;QACT,CAAC;QAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;WAmCG;QACH,MAAM,gBAAgB,GAAgB,IAAI,GAAG,CAC3C,8BAA8B,CAAC,OAAO,CACpC,IAAI,CAAC,yBAAyB,CAC/B,CAAC,GAAG,CAAC,CAAC,SAAgC,EAAE,EAAE;YACzC,OAAO,SAAS,CAAC,EAAE,CAAC,WAAW,EAAE,CAAC;QACpC,CAAC,CAAC,CACH,CAAC;QAEF,MAAM,UAAU,GAAiC,UAAU,CAAC,MAAM,CAChE,CAAC,SAAgC,EAAE,EAAE;YACnC,OAAO,CAAC,gBAAgB,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;QAC3D,CAAC,CACF,CAAC;QAEF,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC5B,OAAO;QACT,CAAC;QAED,MAAM,+BAA+B,CAAC,iCAAiC,CAAC;YACtE,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,OAAO,EAAE,oBAAoB;YAC7B,UAAU,EAAE,UAAU,CAAC,GAAG,CACxB,CAAC,SAAgC,EAA0B,EAAE;gBAC3D,OAAO;oBACL;;;;uBAIG;oBACH,SAAS,EAAE,GAAG,SAAS,CAAC,KAAK,KAAK,SAAS,CAAC,IAAI,GAAG;oBACnD,EAAE,EAAE,SAAS,CAAC,EAAE;oBAChB,OAAO,EAAE,gBAAgB,CAAC,SAAS,CAAC,KAAK,CAAC;oBAC1C;;;;uBAIG;oBACH,SAAS,EAAE,SAAS,CAAC,WAAW;iBACjC,CAAC;YACJ,CAAC,CACF;SACF,CAAC,CAAC;IACL,CAAC;CACF"}

package/build/dist/Server/Utils/Monitor/MonitorStepsReferenceExtractor.js

@@ -0,0 +1,312 @@
+import MonitorSteps from "../../../Types/Monitor/MonitorSteps";
+import ObjectID from "../../../Types/ObjectID";
+import Typeof from "../../../Types/Typeof";
+/*
+ * `monitorSteps` is a free-form JSON column, so none of the ids it embeds have
+ * a foreign key behind them. They are still real references: the monitor status
+ * a criteria switches to, the severity it opens incidents and alerts with, the
+ * on-call policies it pages, the labels/owners it stamps on what it creates.
+ *
+ * Until issue #3039 the only guard over this blob scraped every uuid out of the
+ * serialized JSON with a regex and asked whether it happened to be another
+ * project's record. That can never reject an id that exists nowhere, because
+ * monitorSteps is FULL of uuids that are not references at all — step ids,
+ * criteria ids, incident/alert template ids — and they match nothing either.
+ *
+ * This walker exists to tell those apart. It reads the structure rather than the
+ * text, so every id it yields is known to be a reference to a specific model and
+ * can be checked for existence without any risk of a false rejection.
+ */
+export var MonitorStepsReferenceModel;
+(function (MonitorStepsReferenceModel) {
+    MonitorStepsReferenceModel["MonitorStatus"] = "Monitor Status";
+    MonitorStepsReferenceModel["IncidentSeverity"] = "Incident Severity";
+    MonitorStepsReferenceModel["AlertSeverity"] = "Alert Severity";
+    MonitorStepsReferenceModel["OnCallDutyPolicy"] = "On-Call Duty Policy";
+    MonitorStepsReferenceModel["Label"] = "Label";
+    MonitorStepsReferenceModel["Team"] = "Team";
+    MonitorStepsReferenceModel["User"] = "User";
+    MonitorStepsReferenceModel["IncidentRole"] = "Incident Role";
+    MonitorStepsReferenceModel["TelemetryService"] = "Telemetry Service";
+    MonitorStepsReferenceModel["NetworkDevice"] = "Network Device";
+})(MonitorStepsReferenceModel || (MonitorStepsReferenceModel = {}));
+/*
+ * Step-level sub-configs that scope a monitor to specific telemetry services.
+ * All five carry the field under the same name.
+ */
+const TELEMETRY_SERVICE_STEP_FIELDS = [
+    "logMonitor",
+    "traceMonitor",
+    "exceptionMonitor",
+    "profileMonitor",
+    "metricMonitor",
+];
+/*
+ * Every level of monitorSteps is persisted inside a `{ _type, value }` envelope
+ * (MonitorSteps.toJSON -> MonitorStep.toJSON -> MonitorCriteria.toJSON ->
+ * MonitorCriteriaInstance.toJSON). API callers - Terraform among them - post
+ * the same envelope. Unwrap it when it is there and accept the bare object when
+ * it is not, so a hand-written payload is walked just as thoroughly.
+ */
+function unwrap(value) {
+    if (!value || typeof value !== Typeof.Object || Array.isArray(value)) {
+        return null;
+    }
+    const object = value;
+    if (object["value"] && typeof object["value"] === Typeof.Object) {
+        return object["value"];
+    }
+    return object;
+}
+function asArray(value) {
+    return Array.isArray(value) ? value : [];
+}
+/*
+ * An id reaches here in every shape the codebase produces: a plain uuid string
+ * (MonitorSteps.toJSON stringifies defaultMonitorStatusId and monitorStatusId),
+ * a serialized `{ _type: "ObjectID", value }` envelope (what JSONFunctions.serialize
+ * does to the ObjectIDs nested inside the incidents/alerts arrays), a live
+ * ObjectID instance (validating a MonitorSteps object that was never
+ * serialized), or `{ value }` without the marker.
+ *
+ * Blank is treated as absent on purpose: a stored `{"_type":"ObjectID","value":""}`
+ * rehydrates to `new ObjectID("")`, which is truthy. Reporting that as a missing
+ * *reference* would be misleading - it is an unset field, and the required-field
+ * checks own that case.
+ */
+export function toReferenceId(value) {
+    if (!value) {
+        return null;
+    }
+    if (value instanceof ObjectID) {
+        return value.toString().trim() || null;
+    }
+    if (typeof value === Typeof.String) {
+        return value.trim() || null;
+    }
+    if (typeof value === Typeof.Object && !Array.isArray(value)) {
+        const inner = value["value"];
+        if (typeof inner === Typeof.String) {
+            return inner.trim() || null;
+        }
+    }
+    return null;
+}
+export default class MonitorStepsReferenceExtractor {
+    /*
+     * Walks monitorSteps and returns every id it holds that points at another
+     * record. Ids that are NOT references (step ids, criteria ids, the id on each
+     * incident/alert template) are deliberately not returned - they are local
+     * identity, not a pointer to a row.
+     */
+    static extract(monitorSteps) {
+        const root = this.toJSONObject(monitorSteps);
+        if (!root) {
+            return [];
+        }
+        const references = [];
+        this.push(references, {
+            model: MonitorStepsReferenceModel.MonitorStatus,
+            value: root["defaultMonitorStatusId"],
+            path: "default monitor status",
+            /*
+             * Always operative: MonitorResource stamps it onto the monitor's first
+             * MonitorStatusTimeline row, which is the very insert issue #3039 reports
+             * failing.
+             */
+            isOperative: true,
+        });
+        const steps = asArray(root["monitorStepsInstanceArray"]);
+        for (const step of steps) {
+            const stepValue = unwrap(step);
+            if (!stepValue) {
+                continue;
+            }
+            this.extractFromStepConfig(references, stepValue);
+            const criteria = unwrap(stepValue["monitorCriteria"]);
+            if (!criteria) {
+                continue;
+            }
+            const instances = asArray(criteria["monitorCriteriaInstanceArray"]);
+            for (let index = 0; index < instances.length; index++) {
+                this.extractFromCriteriaInstance({
+                    references: references,
+                    criteriaInstance: unwrap(instances[index]),
+                    index: index,
+                });
+            }
+        }
+        return references;
+    }
+    /*
+     * The step's own targets: the telemetry services a log/trace/exception/
+     * profile/metric monitor is scoped to, and the device a network monitor
+     * walks.
+     *
+     * These are reported as references — so a *cross-project* id in them is
+     * refused like any other — but never as `isOperative`, so they are not
+     * required to exist. Both already degrade on their own when the target is
+     * gone (the query simply matches nothing; NetworkDeviceHydrationUtil logs a
+     * warning and carries on), neither can produce the foreign key violation this
+     * guard exists for, and deleting a telemetry service is ordinary enough that
+     * refusing every later edit of a monitor that once watched it would be a
+     * worse failure than the one being fixed.
+     */
+    static extractFromStepConfig(references, step) {
+        for (const field of TELEMETRY_SERVICE_STEP_FIELDS) {
+            const config = unwrap(step[field]);
+            if (!config) {
+                continue;
+            }
+            for (const id of asArray(config["telemetryServiceIds"])) {
+                this.push(references, {
+                    model: MonitorStepsReferenceModel.TelemetryService,
+                    value: id,
+                    path: "monitored telemetry service",
+                    isOperative: false,
+                });
+            }
+        }
+        const networkDeviceMonitor = unwrap(step["networkDeviceMonitor"]);
+        if (networkDeviceMonitor) {
+            this.push(references, {
+                model: MonitorStepsReferenceModel.NetworkDevice,
+                value: networkDeviceMonitor["networkDeviceId"],
+                path: "monitored network device",
+                isOperative: false,
+            });
+        }
+    }
+    static extractFromCriteriaInstance(data) {
+        const criteriaInstance = data.criteriaInstance;
+        if (!criteriaInstance) {
+            return;
+        }
+        const name = criteriaInstance["name"] || `#${data.index + 1}`;
+        const label = `criteria "${name}"`;
+        this.push(data.references, {
+            model: MonitorStepsReferenceModel.MonitorStatus,
+            value: criteriaInstance["monitorStatusId"],
+            path: `${label} monitor status`,
+            isOperative: criteriaInstance["changeMonitorStatus"] === true,
+        });
+        const createsIncidents = criteriaInstance["createIncidents"] === true;
+        for (const incident of asArray(criteriaInstance["incidents"])) {
+            const incidentValue = unwrap(incident);
+            if (!incidentValue) {
+                continue;
+            }
+            this.push(data.references, {
+                model: MonitorStepsReferenceModel.IncidentSeverity,
+                value: incidentValue["incidentSeverityId"],
+                path: `${label} incident severity`,
+                isOperative: createsIncidents,
+            });
+            this.pushSharedNotificationReferences({
+                references: data.references,
+                source: incidentValue,
+                label: `${label} incident`,
+                isOperative: createsIncidents,
+            });
+            for (const roleAssignment of asArray(incidentValue["incidentMemberRoles"])) {
+                const assignment = unwrap(roleAssignment);
+                if (!assignment) {
+                    continue;
+                }
+                this.push(data.references, {
+                    model: MonitorStepsReferenceModel.IncidentRole,
+                    value: assignment["roleId"],
+                    path: `${label} incident member role`,
+                    isOperative: createsIncidents,
+                });
+                this.push(data.references, {
+                    model: MonitorStepsReferenceModel.User,
+                    value: assignment["userId"],
+                    path: `${label} incident member`,
+                    isOperative: createsIncidents,
+                });
+            }
+        }
+        const createsAlerts = criteriaInstance["createAlerts"] === true;
+        for (const alert of asArray(criteriaInstance["alerts"])) {
+            const alertValue = unwrap(alert);
+            if (!alertValue) {
+                continue;
+            }
+            this.push(data.references, {
+                model: MonitorStepsReferenceModel.AlertSeverity,
+                value: alertValue["alertSeverityId"],
+                path: `${label} alert severity`,
+                isOperative: createsAlerts,
+            });
+            this.pushSharedNotificationReferences({
+                references: data.references,
+                source: alertValue,
+                label: `${label} alert`,
+                isOperative: createsAlerts,
+            });
+        }
+    }
+    // The four id arrays CriteriaIncident and CriteriaAlert have in common.
+    static pushSharedNotificationReferences(data) {
+        const arrays = [
+            {
+                field: "onCallPolicyIds",
+                model: MonitorStepsReferenceModel.OnCallDutyPolicy,
+                path: "on-call policy",
+            },
+            {
+                field: "labelIds",
+                model: MonitorStepsReferenceModel.Label,
+                path: "label",
+            },
+            {
+                field: "ownerTeamIds",
+                model: MonitorStepsReferenceModel.Team,
+                path: "owner team",
+            },
+            {
+                field: "ownerUserIds",
+                model: MonitorStepsReferenceModel.User,
+                path: "owner user",
+            },
+        ];
+        for (const array of arrays) {
+            for (const id of asArray(data.source[array.field])) {
+                this.push(data.references, {
+                    model: array.model,
+                    value: id,
+                    path: `${data.label} ${array.path}`,
+                    isOperative: data.isOperative,
+                });
+            }
+        }
+    }
+    static push(references, data) {
+        const id = toReferenceId(data.value);
+        if (!id) {
+            return;
+        }
+        references.push({
+            model: data.model,
+            id: id,
+            path: data.path,
+            isOperative: data.isOperative,
+        });
+    }
+    static toJSONObject(monitorSteps) {
+        if (!monitorSteps) {
+            return null;
+        }
+        if (monitorSteps instanceof MonitorSteps) {
+            /*
+             * toJSON() on a MonitorSteps whose `data` is undefined returns the
+             * "new monitor steps" skeleton, which holds no references. Walking it is
+             * harmless.
+             */
+            return unwrap(monitorSteps.toJSON());
+        }
+        return unwrap(monitorSteps);
+    }
+}
+//# sourceMappingURL=MonitorStepsReferenceExtractor.js.map

package/build/dist/Server/Utils/Monitor/MonitorStepsReferenceExtractor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"MonitorStepsReferenceExtractor.js","sourceRoot":"","sources":["../../../../../Server/Utils/Monitor/MonitorStepsReferenceExtractor.ts"],"names":[],"mappings":"AACA,OAAO,YAAY,MAAM,qCAAqC,CAAC;AAC/D,OAAO,QAAQ,MAAM,yBAAyB,CAAC;AAC/C,OAAO,MAAM,MAAM,uBAAuB,CAAC;AAE3C;;;;;;;;;;;;;;;GAeG;AAEH,MAAM,CAAN,IAAY,0BAWX;AAXD,WAAY,0BAA0B;IACpC,8DAAgC,CAAA;IAChC,oEAAsC,CAAA;IACtC,8DAAgC,CAAA;IAChC,sEAAwC,CAAA;IACxC,6CAAe,CAAA;IACf,2CAAa,CAAA;IACb,2CAAa,CAAA;IACb,4DAA8B,CAAA;IAC9B,oEAAsC,CAAA;IACtC,8DAAgC,CAAA;AAClC,CAAC,EAXW,0BAA0B,KAA1B,0BAA0B,QAWrC;AAED;;;GAGG;AACH,MAAM,6BAA6B,GAAkB;IACnD,YAAY;IACZ,cAAc;IACd,kBAAkB;IAClB,gBAAgB;IAChB,eAAe;CAChB,CAAC;AA6BF;;;;;;GAMG;AACH,SAAS,MAAM,CAAC,KAA4B;IAC1C,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,MAAM,CAAC,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACrE,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,MAAM,GAAe,KAAmB,CAAC;IAE/C,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,OAAO,MAAM,CAAC,OAAO,CAAC,KAAK,MAAM,CAAC,MAAM,EAAE,CAAC;QAChE,OAAO,MAAM,CAAC,OAAO,CAAe,CAAC;IACvC,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,OAAO,CAAC,KAA4B;IAC3C,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAE,KAAmB,CAAC,CAAC,CAAC,EAAE,CAAC;AAC1D,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,aAAa,CAAC,KAA4B;IACxD,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,KAAK,YAAY,QAAQ,EAAE,CAAC;QAC9B,OAAO,KAAK,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,IAAI,IAAI,CAAC;IACzC,CAAC;IAED,IAAI,OAAO,KAAK,KAAK,MAAM,CAAC,MAAM,EAAE,CAAC;QACnC,OAAQ,KAAgB,CAAC,IAAI,EAAE,IAAI,IAAI,CAAC;IAC1C,CAAC;IAED,IAAI,OAAO,KAAK,KAAK,MAAM,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAC5D,MAAM,KAAK,GAA2B,KAAoB,CAAC,OAAO,CAAC,CAAC;QAEpE,IAAI,OAAO,KAAK,KAAK,MAAM,CAAC,MAAM,EAAE,CAAC;YACnC,OAAQ,KAAgB,CAAC,IAAI,EAAE,IAAI,IAAI,CAAC;QAC1C,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,CAAC,OAAO,OAAO,8BAA8B;IACjD;;;;;OAKG;IACI,MAAM,CAAC,OAAO,CACnB,YAA0D;QAE1D,MAAM,IAAI,GAAsB,IAAI,CAAC,YAAY,CAAC,YAAY,CAAC,CAAC;QAEhE,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,MAAM,UAAU,GAAiC,EAAE,CAAC;QAEpD,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE;YACpB,KAAK,EAAE,0BAA0B,CAAC,aAAa;YAC/C,KAAK,EAAE,IAAI,CAAC,wBAAwB,CAAC;YACrC,IAAI,EAAE,wBAAwB;YAC9B;;;;eAIG;YACH,WAAW,EAAE,IAAI;SAClB,CAAC,CAAC;QAEH,MAAM,KAAK,GAAc,OAAO,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC,CAAC;QAEpE,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,SAAS,GAAsB,MAAM,CAAC,IAAiB,CAAC,CAAC;YAE/D,IAAI,CAAC,SAAS,EAAE,CAAC;gBACf,SAAS;YACX,CAAC;YAED,IAAI,CAAC,qBAAqB,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;YAElD,MAAM,QAAQ,GAAsB,MAAM,CAAC,SAAS,CAAC,iBAAiB,CAAC,CAAC,CAAC;YAEzE,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,SAAS;YACX,CAAC;YAED,MAAM,SAAS,GAAc,OAAO,CAClC,QAAQ,CAAC,8BAA8B,CAAC,CACzC,CAAC;YAEF,KAAK,IAAI,KAAK,GAAW,CAAC,EAAE,KAAK,GAAG,SAAS,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC;gBAC9D,IAAI,CAAC,2BAA2B,CAAC;oBAC/B,UAAU,EAAE,UAAU;oBACtB,gBAAgB,EAAE,MAAM,CAAC,SAAS,CAAC,KAAK,CAAc,CAAC;oBACvD,KAAK,EAAE,KAAK;iBACb,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,OAAO,UAAU,CAAC;IACpB,CAAC;IAED;;;;;;;;;;;;;OAaG;IACK,MAAM,CAAC,qBAAqB,CAClC,UAAwC,EACxC,IAAgB;QAEhB,KAAK,MAAM,KAAK,IAAI,6BAA6B,EAAE,CAAC;YAClD,MAAM,MAAM,GAAsB,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;YAEtD,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,SAAS;YACX,CAAC;YAED,KAAK,MAAM,EAAE,IAAI,OAAO,CAAC,MAAM,CAAC,qBAAqB,CAAC,CAAC,EAAE,CAAC;gBACxD,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE;oBACpB,KAAK,EAAE,0BAA0B,CAAC,gBAAgB;oBAClD,KAAK,EAAE,EAAe;oBACtB,IAAI,EAAE,6BAA6B;oBACnC,WAAW,EAAE,KAAK;iBACnB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,MAAM,oBAAoB,GAAsB,MAAM,CACpD,IAAI,CAAC,sBAAsB,CAAC,CAC7B,CAAC;QAEF,IAAI,oBAAoB,EAAE,CAAC;YACzB,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE;gBACpB,KAAK,EAAE,0BAA0B,CAAC,aAAa;gBAC/C,KAAK,EAAE,oBAAoB,CAAC,iBAAiB,CAAC;gBAC9C,IAAI,EAAE,0BAA0B;gBAChC,WAAW,EAAE,KAAK;aACnB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAEO,MAAM,CAAC,2BAA2B,CAAC,IAI1C;QACC,MAAM,gBAAgB,GAAsB,IAAI,CAAC,gBAAgB,CAAC;QAElE,IAAI,CAAC,gBAAgB,EAAE,CAAC;YACtB,OAAO;QACT,CAAC;QAED,MAAM,IAAI,GACP,gBAAgB,CAAC,MAAM,CAAY,IAAI,IAAI,IAAI,CAAC,KAAK,GAAG,CAAC,EAAE,CAAC;QAC/D,MAAM,KAAK,GAAW,aAAa,IAAI,GAAG,CAAC;QAE3C,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE;YACzB,KAAK,EAAE,0BAA0B,CAAC,aAAa;YAC/C,KAAK,EAAE,gBAAgB,CAAC,iBAAiB,CAAC;YAC1C,IAAI,EAAE,GAAG,KAAK,iBAAiB;YAC/B,WAAW,EAAE,gBAAgB,CAAC,qBAAqB,CAAC,KAAK,IAAI;SAC9D,CAAC,CAAC;QAEH,MAAM,gBAAgB,GACpB,gBAAgB,CAAC,iBAAiB,CAAC,KAAK,IAAI,CAAC;QAE/C,KAAK,MAAM,QAAQ,IAAI,OAAO,CAAC,gBAAgB,CAAC,WAAW,CAAC,CAAC,EAAE,CAAC;YAC9D,MAAM,aAAa,GAAsB,MAAM,CAAC,QAAqB,CAAC,CAAC;YAEvE,IAAI,CAAC,aAAa,EAAE,CAAC;gBACnB,SAAS;YACX,CAAC;YAED,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE;gBACzB,KAAK,EAAE,0BAA0B,CAAC,gBAAgB;gBAClD,KAAK,EAAE,aAAa,CAAC,oBAAoB,CAAC;gBAC1C,IAAI,EAAE,GAAG,KAAK,oBAAoB;gBAClC,WAAW,EAAE,gBAAgB;aAC9B,CAAC,CAAC;YAEH,IAAI,CAAC,gCAAgC,CAAC;gBACpC,UAAU,EAAE,IAAI,CAAC,UAAU;gBAC3B,MAAM,EAAE,aAAa;gBACrB,KAAK,EAAE,GAAG,KAAK,WAAW;gBAC1B,WAAW,EAAE,gBAAgB;aAC9B,CAAC,CAAC;YAEH,KAAK,MAAM,cAAc,IAAI,OAAO,CAClC,aAAa,CAAC,qBAAqB,CAAC,CACrC,EAAE,CAAC;gBACF,MAAM,UAAU,GAAsB,MAAM,CAC1C,cAA2B,CAC5B,CAAC;gBAEF,IAAI,CAAC,UAAU,EAAE,CAAC;oBAChB,SAAS;gBACX,CAAC;gBAED,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE;oBACzB,KAAK,EAAE,0BAA0B,CAAC,YAAY;oBAC9C,KAAK,EAAE,UAAU,CAAC,QAAQ,CAAC;oBAC3B,IAAI,EAAE,GAAG,KAAK,uBAAuB;oBACrC,WAAW,EAAE,gBAAgB;iBAC9B,CAAC,CAAC;gBAEH,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE;oBACzB,KAAK,EAAE,0BAA0B,CAAC,IAAI;oBACtC,KAAK,EAAE,UAAU,CAAC,QAAQ,CAAC;oBAC3B,IAAI,EAAE,GAAG,KAAK,kBAAkB;oBAChC,WAAW,EAAE,gBAAgB;iBAC9B,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,MAAM,aAAa,GAAY,gBAAgB,CAAC,cAAc,CAAC,KAAK,IAAI,CAAC;QAEzE,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC;YACxD,MAAM,UAAU,GAAsB,MAAM,CAAC,KAAkB,CAAC,CAAC;YAEjE,IAAI,CAAC,UAAU,EAAE,CAAC;gBAChB,SAAS;YACX,CAAC;YAED,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE;gBACzB,KAAK,EAAE,0BAA0B,CAAC,aAAa;gBAC/C,KAAK,EAAE,UAAU,CAAC,iBAAiB,CAAC;gBACpC,IAAI,EAAE,GAAG,KAAK,iBAAiB;gBAC/B,WAAW,EAAE,aAAa;aAC3B,CAAC,CAAC;YAEH,IAAI,CAAC,gCAAgC,CAAC;gBACpC,UAAU,EAAE,IAAI,CAAC,UAAU;gBAC3B,MAAM,EAAE,UAAU;gBAClB,KAAK,EAAE,GAAG,KAAK,QAAQ;gBACvB,WAAW,EAAE,aAAa;aAC3B,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,wEAAwE;IAChE,MAAM,CAAC,gCAAgC,CAAC,IAK/C;QACC,MAAM,MAAM,GAIP;YACH;gBACE,KAAK,EAAE,iBAAiB;gBACxB,KAAK,EAAE,0BAA0B,CAAC,gBAAgB;gBAClD,IAAI,EAAE,gBAAgB;aACvB;YACD;gBACE,KAAK,EAAE,UAAU;gBACjB,KAAK,EAAE,0BAA0B,CAAC,KAAK;gBACvC,IAAI,EAAE,OAAO;aACd;YACD;gBACE,KAAK,EAAE,cAAc;gBACrB,KAAK,EAAE,0BAA0B,CAAC,IAAI;gBACtC,IAAI,EAAE,YAAY;aACnB;YACD;gBACE,KAAK,EAAE,cAAc;gBACrB,KAAK,EAAE,0BAA0B,CAAC,IAAI;gBACtC,IAAI,EAAE,YAAY;aACnB;SACF,CAAC;QAEF,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,KAAK,MAAM,EAAE,IAAI,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;gBACnD,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE;oBACzB,KAAK,EAAE,KAAK,CAAC,KAAK;oBAClB,KAAK,EAAE,EAAe;oBACtB,IAAI,EAAE,GAAG,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,IAAI,EAAE;oBACnC,WAAW,EAAE,IAAI,CAAC,WAAW;iBAC9B,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAEO,MAAM,CAAC,IAAI,CACjB,UAAwC,EACxC,IAKC;QAED,MAAM,EAAE,GAAkB,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAEpD,IAAI,CAAC,EAAE,EAAE,CAAC;YACR,OAAO;QACT,CAAC;QAED,UAAU,CAAC,IAAI,CAAC;YACd,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,EAAE,EAAE,EAAE;YACN,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,WAAW,EAAE,IAAI,CAAC,WAAW;SAC9B,CAAC,CAAC;IACL,CAAC;IAEO,MAAM,CAAC,YAAY,CACzB,YAA0D;QAE1D,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,OAAO,IAAI,CAAC;QACd,CAAC;QAED,IAAI,YAAY,YAAY,YAAY,EAAE,CAAC;YACzC;;;;eAIG;YACH,OAAO,MAAM,CAAC,YAAY,CAAC,MAAM,EAAE,CAAC,CAAC;QACvC,CAAC;QAED,OAAO,MAAM,CAAC,YAAY,CAAC,CAAC;IAC9B,CAAC;CACF"}

package/build/dist/Server/Utils/SingleFlight.js

@@ -0,0 +1,76 @@
+/*
+ * In-process de-duplication of concurrent identical work.
+ *
+ * A Redis fence admits one writer per window across the FLEET, but every
+ * caller still pays a Redis round trip to discover it lost. That is the wrong
+ * unit of work when the duplicate callers are in the same process: an ingest
+ * pod running hundreds of concurrent jobs re-resolves the same handful of
+ * services on every batch, so hundreds of coroutines independently ask Redis
+ * the same question and then throw the answer away.
+ *
+ * SingleFlight collapses them first. The first caller for a key runs the work;
+ * everyone who arrives while it is still in flight awaits the SAME promise and
+ * gets the same result. Per pod, N concurrent duplicates cost one Redis round
+ * trip and at most one database write instead of N of each — which is what
+ * turns fleet-wide write amplification from (pods x jobs) into (pods).
+ *
+ * Deliberately unbounded in time but not in size: entries live only for the
+ * duration of the work itself and are removed in a `finally`, so the map holds
+ * exactly the set of operations currently running. There is no eviction policy
+ * to get wrong and nothing to leak if work hangs beyond a caller's patience —
+ * the entry is released when the underlying promise settles either way.
+ *
+ * This is a per-process optimisation and NOT a correctness mechanism: nothing
+ * here coordinates across pods. It composes with a distributed fence, it does
+ * not replace one.
+ */
+class SingleFlight {
+    /**
+     * Run `work` for `key`, or join the run already in flight for it.
+     *
+     * Followers observe whatever the leader observes, including a rejection.
+     * That is intentional: these callers asked for identical work, so they are
+     * entitled to identical outcomes, and a follower silently retrying a failure
+     * the leader just hit would re-create the stampede this exists to prevent.
+     */
+    static async run(key, work) {
+        const existing = this.inflight.get(key);
+        if (existing) {
+            return (await existing);
+        }
+        /*
+         * Invoke through a wrapper so a `work` that throws SYNCHRONOUSLY still
+         * produces a promise to register and await. Calling it bare would throw
+         * past the bookkeeping below and leave the key registered forever.
+         */
+        const promise = (async () => {
+            return await work();
+        })();
+        this.inflight.set(key, promise);
+        try {
+            return await promise;
+        }
+        finally {
+            /*
+             * Only clear the entry if it is still ours. A follower cannot install a
+             * new one (it awaited instead), but a later leader can, and blindly
+             * deleting here would evict that live run and let the next caller start
+             * a duplicate of work already underway.
+             */
+            if (this.inflight.get(key) === promise) {
+                this.inflight.delete(key);
+            }
+        }
+    }
+    /** Number of operations currently in flight. For tests and diagnostics. */
+    static inflightCount() {
+        return this.inflight.size;
+    }
+    /** Drop all bookkeeping. For tests only. */
+    static clear() {
+        this.inflight.clear();
+    }
+}
+SingleFlight.inflight = new Map();
+export default SingleFlight;
+//# sourceMappingURL=SingleFlight.js.map