@oneuptime/common 12.0.2 → 12.0.4

package/Models/DatabaseModels/CephCluster.ts

@@ -80,6 +80,20 @@ import {
  */
 @Index(["projectId", "name"], { unique: true })
 @Index(["projectId", "isArchived"])
+/*
+ * Restores a UNIQUE index that an autogenerated migration deleted.
+ *
+ * Declared natively and NAMED. TypeORM's schema builder matches database
+ * indexes to entity metadata by name and drops every one it cannot find, which
+ * is how the original was lost: it existed only in a migration, so entity
+ * metadata never mentioned it and `migration:generate` emitted a DROP. Naming
+ * it here keeps the original index name and lets the builder match, compare
+ * uniqueness and columns, and keep it.
+ */
+@Index("IDX_ceph_cluster_slug", ["slug"], {
+  unique: true,
+  where: '"deletedAt" IS NULL',
+})
 @TableMetadata({
   tableName: "CephCluster",
   singularName: "Ceph Cluster",

package/Models/DatabaseModels/CodeRepository.ts

@@ -649,13 +649,21 @@ export default class CodeRepository extends BaseModel {
   })
   public repositoryUrl?: URL = undefined;
 
-  // GitHub App specific fields
+  /*
+   * GitHub App specific fields.
+   *
+   * `create` is empty on purpose. This column decides which GitHub App
+   * installation a repository token is minted from, so a caller who could set
+   * it could name ANOTHER tenant's installation, put the row in a project they
+   * own, and pass every "is this row in your project?" check on the way to a
+   * live `ghs_` token. It is assigned server-side only — by the install
+   * callback and the installation webhooks, which write with `isRoot` after
+   * GitHub has confirmed the installation belongs to the project.
+   * CodeRepositoryService.onBeforeCreate/onBeforeUpdate enforce the same rule
+   * a second time, in case a future route writes as root.
+   */
   @ColumnAccessControl({
-    create: [
-      Permission.ProjectOwner,
-      Permission.ProjectAdmin,
-      Permission.CreateCodeRepository,
-    ],
+    create: [],
     read: [
       Permission.ProjectOwner,
       Permission.ProjectAdmin,

package/Models/DatabaseModels/DatabaseBaseModel/DatabaseBaseModel.ts

@@ -17,6 +17,10 @@ import TableColumn, {
   getTableColumns,
 } from "../../../Types/Database/TableColumn";
 import TableColumnType from "../../../Types/Database/TableColumnType";
+import {
+  coerceNumericColumnValue,
+  isNumericTableColumnType,
+} from "../../../Types/Database/NumericColumnValue";
 import { getFirstColorFieldColumn } from "../../../Types/Database/ColorField";
 import Dictionary from "../../../Types/Dictionary";
 import Email from "../../../Types/Email";
@@ -727,6 +731,16 @@ export default class DatabaseBaseModel extends BaseEntity {
             json[key] as JSONArray,
             tableColumnMetadata.modelType,
           );
+        } else if (isNumericTableColumnType(tableColumnMetadata.type)) {
+          /*
+           * An `<input type="number">` hands back a string, so the dashboard
+           * posts "10" for a number column. This is the one place that knows
+           * the column's declared type, and it runs on both sides of the
+           * wire — ModelForm on the way out, BaseAPI on the way in — so a
+           * number column holds a number before any hook or validator reads
+           * it. See Types/Database/NumericColumnValue.
+           */
+          (baseModel as any)[key] = coerceNumericColumnValue(json[key]);
         } else {
           (baseModel as any)[key] = json[key];
         }

package/Models/DatabaseModels/DockerHost.ts

@@ -72,6 +72,20 @@ import {
 @CrudApiEndpoint(new Route("/docker-host"))
 @SlugifyColumn("name", "slug")
 @Index(["projectId", "isArchived"])
+/*
+ * Restores a UNIQUE index that an autogenerated migration deleted.
+ *
+ * Declared natively and NAMED. TypeORM's schema builder matches database
+ * indexes to entity metadata by name and drops every one it cannot find, which
+ * is how the original was lost: it existed only in a migration, so entity
+ * metadata never mentioned it and `migration:generate` emitted a DROP. Naming
+ * it here keeps the original index name and lets the builder match, compare
+ * uniqueness and columns, and keep it.
+ */
+@Index("IDX_docker_host_slug", ["slug"], {
+  unique: true,
+  where: '"deletedAt" IS NULL',
+})
 @TableMetadata({
   tableName: "DockerHost",
   singularName: "Docker Host",

package/Models/DatabaseModels/GlobalOidcProject.ts

@@ -39,6 +39,24 @@ import {
   update: [],
 })
 @CrudApiEndpoint(new Route("/global-oidc-project"))
+/*
+ * Restores a UNIQUE index that an autogenerated migration deleted.
+ *
+ * Declared natively and NAMED. TypeORM's schema builder matches database
+ * indexes to entity metadata by name and drops every one it cannot find, which
+ * is how the original was lost: it existed only in a migration, so entity
+ * metadata never mentioned it and `migration:generate` emitted a DROP. Naming
+ * it here keeps the original index name and lets the builder match, compare
+ * uniqueness and columns, and keep it.
+ */
+@Index(
+  "IDX_GlobalOIDCProject_globalOidcId_projectId",
+  ["globalOidcId", "projectId"],
+  {
+    unique: true,
+    where: '"deletedAt" IS NULL',
+  },
+)
 @TableMetadata({
   tableName: "GlobalOIDCProject",
   singularName: "Global OIDC Project",

package/Models/DatabaseModels/GlobalSsoProject.ts

@@ -42,6 +42,24 @@ import {
   update: [],
 })
 @CrudApiEndpoint(new Route("/global-sso-project"))
+/*
+ * Restores a UNIQUE index that an autogenerated migration deleted.
+ *
+ * Declared natively and NAMED. TypeORM's schema builder matches database
+ * indexes to entity metadata by name and drops every one it cannot find, which
+ * is how the original was lost: it existed only in a migration, so entity
+ * metadata never mentioned it and `migration:generate` emitted a DROP. Naming
+ * it here keeps the original index name and lets the builder match, compare
+ * uniqueness and columns, and keep it.
+ */
+@Index(
+  "IDX_GlobalSSOProject_globalSsoId_projectId",
+  ["globalSsoId", "projectId"],
+  {
+    unique: true,
+    where: '"deletedAt" IS NULL',
+  },
+)
 @TableMetadata({
   tableName: "GlobalSSOProject",
   singularName: "Global SSO Project",

package/Models/DatabaseModels/Index.ts

@@ -375,6 +375,7 @@ import MonitorOwnerRule from "./MonitorOwnerRule";
 import MonitorLabelRule from "./MonitorLabelRule";
 import StatusPageOwnerRule from "./StatusPageOwnerRule";
 import StatusPageLabelRule from "./StatusPageLabelRule";
+import StatusPageMonitorRule from "./StatusPageMonitorRule";
 import HostOwnerRule from "./HostOwnerRule";
 import HostLabelRule from "./HostLabelRule";
 import ServiceOwnerRule from "./ServiceOwnerRule";
@@ -559,6 +560,7 @@ const AllModelTypes: Array<{
   MonitorLabelRule,
   StatusPageOwnerRule,
   StatusPageLabelRule,
+  StatusPageMonitorRule,
   HostOwnerRule,
   HostLabelRule,
   ServiceOwnerRule,

package/Models/DatabaseModels/IoTFleet.ts

@@ -80,6 +80,20 @@ import {
  */
 @Index(["projectId", "name"], { unique: true })
 @Index(["projectId", "isArchived"])
+/*
+ * Restores a UNIQUE index that an autogenerated migration deleted.
+ *
+ * Declared natively and NAMED. TypeORM's schema builder matches database
+ * indexes to entity metadata by name and drops every one it cannot find, which
+ * is how the original was lost: it existed only in a migration, so entity
+ * metadata never mentioned it and `migration:generate` emitted a DROP. Naming
+ * it here keeps the original index name and lets the builder match, compare
+ * uniqueness and columns, and keep it.
+ */
+@Index("IDX_iot_fleet_slug", ["slug"], {
+  unique: true,
+  where: '"deletedAt" IS NULL',
+})
 @TableMetadata({
   tableName: "IoTFleet",
   singularName: "IoT Fleet",

package/Models/DatabaseModels/KubernetesCluster.ts

@@ -79,6 +79,20 @@ import {
  */
 @Index(["projectId", "clusterIdentifier"], { unique: true })
 @Index(["projectId", "isArchived"])
+/*
+ * Restores a UNIQUE index that an autogenerated migration deleted.
+ *
+ * Declared natively and NAMED. TypeORM's schema builder matches database
+ * indexes to entity metadata by name and drops every one it cannot find, which
+ * is how the original was lost: it existed only in a migration, so entity
+ * metadata never mentioned it and `migration:generate` emitted a DROP. Naming
+ * it here keeps the original index name and lets the builder match, compare
+ * uniqueness and columns, and keep it.
+ */
+@Index("IDX_kubernetes_cluster_slug", ["slug"], {
+  unique: true,
+  where: '"deletedAt" IS NULL',
+})
 @TableMetadata({
   tableName: "KubernetesCluster",
   singularName: "Kubernetes Cluster",

package/Models/DatabaseModels/LogDropFilter.ts

@@ -7,6 +7,7 @@ import TableAccessControl from "../../Types/Database/AccessControl/TableAccessCo
 import TableBillingAccessControl from "../../Types/Database/AccessControl/TableBillingAccessControl";
 import ColumnLength from "../../Types/Database/ColumnLength";
 import ColumnType from "../../Types/Database/ColumnType";
+import { getBigIntDatabaseTransformer } from "../../Types/Database/BigIntColumnTransformer";
 import CrudApiEndpoint from "../../Types/Database/CrudApiEndpoint";
 import EnableDocumentation from "../../Types/Database/EnableDocumentation";
 import TableColumn from "../../Types/Database/TableColumn";
@@ -436,26 +437,14 @@ export default class LogDropFilter extends BaseModel {
     type: ColumnType.BigPositiveNumber,
     nullable: false,
     default: 0,
-    transformer: {
-      to: (value: number | null | undefined): string | null => {
-        if (value === null || value === undefined) {
-          return null;
-        }
-        return Math.trunc(value).toString();
-      },
-      /*
-       * Postgres bigint comes back from the driver as a string. The UI
-       * renders this as a number, so normalize here rather than making
-       * every reader remember.
-       */
-      from: (value: string | null | undefined): number | null => {
-        if (value === null || value === undefined) {
-          return null;
-        }
-        const parsed: number = parseInt(value, 10);
-        return isNaN(parsed) ? null : parsed;
-      },
-    },
+    /*
+     * Shared transformer, not an inline one: it has to preserve `undefined`
+     * so this NOT NULL column's DEFAULT 0 is what a create actually gets.
+     * An inline transformer that mapped `undefined` to `null` made every
+     * drop-filter insert fail the not-null constraint. See
+     * Types/Database/BigIntColumnTransformer.
+     */
+    transformer: getBigIntDatabaseTransformer(),
   })
   public droppedCount?: number = undefined;
 

package/Models/DatabaseModels/NetworkDevice.ts

@@ -78,6 +78,20 @@ import {
 @CrudApiEndpoint(new Route("/network-device"))
 @SlugifyColumn("name", "slug")
 @Index(["projectId", "isArchived"])
+/*
+ * Restores a UNIQUE index that an autogenerated migration deleted.
+ *
+ * Declared natively and NAMED. TypeORM's schema builder matches database
+ * indexes to entity metadata by name and drops every one it cannot find, which
+ * is how the original was lost: it existed only in a migration, so entity
+ * metadata never mentioned it and `migration:generate` emitted a DROP. Naming
+ * it here keeps the original index name and lets the builder match, compare
+ * uniqueness and columns, and keep it.
+ */
+@Index("IDX_network_device_slug", ["slug"], {
+  unique: true,
+  where: '"deletedAt" IS NULL',
+})
 @TableMetadata({
   tableName: "NetworkDevice",
   singularName: "Network Device",

package/Models/DatabaseModels/NetworkInterface.ts

@@ -72,6 +72,24 @@ const decimalTransformer: ValueTransformer = {
 })
 @CrudApiEndpoint(new Route("/network-interface"))
 @Index(["projectId", "networkDeviceId"])
+/*
+ * Restores a UNIQUE index that an autogenerated migration deleted.
+ *
+ * Declared natively and NAMED. TypeORM's schema builder matches database
+ * indexes to entity metadata by name and drops every one it cannot find, which
+ * is how the original was lost: it existed only in a migration, so entity
+ * metadata never mentioned it and `migration:generate` emitted a DROP. Naming
+ * it here keeps the original index name and lets the builder match, compare
+ * uniqueness and columns, and keep it.
+ */
+@Index(
+  "IDX_network_interface_device_ifindex",
+  ["networkDeviceId", "interfaceIndex"],
+  {
+    unique: true,
+    where: '"deletedAt" IS NULL',
+  },
+)
 @TableMetadata({
   tableName: "NetworkInterface",
   singularName: "Network Interface",

package/Models/DatabaseModels/Project.ts

@@ -2583,7 +2583,21 @@ export default class Project extends TenantModel {
   })
   public doNotAddGlobalProbesByDefaultOnNewMonitors?: boolean = undefined;
 
-  // GitHub App Installation ID for this project
+  /*
+   * GitHub App Installation ID for this project.
+   *
+   * This column IS the authority on which GitHub App installation a project
+   * owns — every path that mints a repository token re-derives the binding
+   * from it (see GitHubInstallationBinding). That makes it security state, not
+   * project configuration, so `update` is empty: a Project Owner who could PUT
+   * an arbitrary installation ID here would simply be writing their own
+   * permission slip to another tenant's repositories.
+   *
+   * It is written server-side only, with `isRoot`, by the GitHub App install
+   * callback — and only after the OAuth user-to-server round trip has proved
+   * to GitHub's satisfaction that the installer controls that installation —
+   * and cleared again by the `installation.deleted` webhook.
+   */
   @ColumnAccessControl({
     create: [],
     read: [
@@ -2593,7 +2607,7 @@ export default class Project extends TenantModel {
       Permission.Viewer,
       Permission.ReadProject,
     ],
-    update: [Permission.ProjectOwner, Permission.ProjectAdmin],
+    update: [],
   })
   @TableColumn({
     required: false,

package/Models/DatabaseModels/ProxmoxCluster.ts

@@ -81,6 +81,20 @@ import {
  */
 @Index(["projectId", "name"], { unique: true })
 @Index(["projectId", "isArchived"])
+/*
+ * Restores a UNIQUE index that an autogenerated migration deleted.
+ *
+ * Declared natively and NAMED. TypeORM's schema builder matches database
+ * indexes to entity metadata by name and drops every one it cannot find, which
+ * is how the original was lost: it existed only in a migration, so entity
+ * metadata never mentioned it and `migration:generate` emitted a DROP. Naming
+ * it here keeps the original index name and lets the builder match, compare
+ * uniqueness and columns, and keep it.
+ */
+@Index("IDX_proxmox_cluster_slug", ["slug"], {
+  unique: true,
+  where: '"deletedAt" IS NULL',
+})
 @TableMetadata({
   tableName: "ProxmoxCluster",
   singularName: "Proxmox Cluster",

package/Models/DatabaseModels/Service.ts

@@ -26,6 +26,7 @@ import Permission from "../../Types/Permission";
 import TechStack from "../../Types/Service/TechStack";
 import MetricDownsamplingRetentionDays from "../../Types/Metrics/MetricDownsamplingRetentionDays";
 import TelemetryRetentionConfig from "../../Types/Telemetry/TelemetryRetentionConfig";
+import UNSYNCHRONIZED_INDEX from "../../Types/Database/UnsynchronizedIndex";
 import {
   Column,
   Entity,
@@ -101,6 +102,35 @@ import {
  */
 @Index(["projectId", "name"], { unique: true })
 @Index(["projectId", "isArchived"])
+/*
+ * Serves the hottest read on the telemetry ingest path: OTLP resource
+ * resolution looks a service up by `service.name` case-insensitively, so
+ * `QueryHelper.findWithSameText` emits `LOWER("Service"."name") = $2`. The
+ * unique index above is over the RAW name column and cannot satisfy that
+ * predicate — Postgres can only use its `projectId` prefix as an index qual and
+ * must then heap-fetch and filter every service in the project. The real
+ * definition is an EXPRESSION index and lives in migration
+ * 1786100000000-RestoreServiceLowerNameIndex; `@Index()` cannot express
+ * `LOWER(...)`.
+ *
+ * `synchronize: false` is the load-bearing part of this declaration, and it is
+ * why the index is declared here at all rather than only in the migration.
+ * TypeORM's schema builder matches database indexes to entity metadata BY NAME
+ * and drops every one it cannot find (RdbmsSchemaBuilder.dropOldIndices). An
+ * index created only in a migration is therefore invisible to it and gets
+ * emitted as a DROP by the next autogenerated migration. That is not
+ * hypothetical: this exact index existed once, as
+ * IDX_SERVICE_PROJECT_NAME_UNIQUE in migration 1774559064921, and migration
+ * 1775735059360 dropped it as collateral damage — its down() even "restores"
+ * it without the LOWER(), so the round-trip silently loses the expression.
+ * Naming it here with synchronize:false makes the builder skip it in both
+ * directions: it will never drop it, and it will never try to create it.
+ */
+@Index(
+  "IDX_SERVICE_PROJECT_LOWER_NAME",
+  ["projectId", "name"],
+  UNSYNCHRONIZED_INDEX,
+)
 @TableMetadata({
   tableName: "Service",
   singularName: "Service",