@oneuptime/common 12.0.2 → 12.0.4

package/build/dist/Types/Decimal.js.map

@@ -1 +1 @@
-{"version":3,"file":"Decimal.js","sourceRoot":"","sources":["../../../Types/Decimal.ts"],"names":[],"mappings":"AAAA,4DAA4D;AAC5D,OAAO,gBAAgB,MAAM,6BAA6B,CAAC;AAC3D,OAAO,gBAAgB,MAAM,8BAA8B,CAAC;AAC5D,OAAO,EAAc,UAAU,EAAE,MAAM,QAAQ,CAAC;AAGhD,MAAM,CAAC,OAAO,OAAO,OAAQ,SAAQ,gBAAgB;IAEnD,IAAW,KAAK;QACd,OAAO,IAAI,CAAC,MAAM,CAAC;IACrB,CAAC;IACD,IAAW,KAAK,CAAC,CAAS;QACxB,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC;IAClB,CAAC;IAED,YAAmB,KAAgC;QACjD,KAAK,EAAE,CAAC;QATF,WAAM,GAAW,CAAC,CAAC;QAWzB,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9B,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;QAC5B,CAAC;QAED,IAAI,KAAK,YAAY,OAAO,EAAE,CAAC;YAC7B,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC;QACtB,CAAC;QAED,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;IACrB,CAAC;IAEM,MAAM,CAAC,KAAc;QAC1B,OAAO,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,KAAK,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC;IAC1D,CAAC;IAEe,QAAQ;QACtB,OAAO,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC;IAC/B,CAAC;IAES,MAAM,CAAU,UAAU,CAClC,KAAsC;QAEtC,IAAI,KAAK,EAAE,CAAC;YACV,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;gBAC9B,KAAK,GAAG,IAAI,OAAO,CAAC,KAAK,CAAC,CAAC;YAC7B,CAAC;YAED,OAAO,KAAK,CAAC,QAAQ,EAAE,CAAC;QAC1B,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAEe,MAAM;QACpB,OAAO;YACL,KAAK,EAAE,UAAU,CAAC,OAAO;YACzB,KAAK,EAAG,IAAgB,CAAC,QAAQ,EAAE;SACpC,CAAC;IACJ,CAAC;IAEM,MAAM,CAAU,QAAQ,CAAC,IAAgB;QAC9C,IAAI,IAAI,CAAC,OAAO,CAAC,KAAK,UAAU,CAAC,OAAO,EAAE,CAAC;YACzC,OAAO,IAAI,OAAO,CAAE,IAAI,CAAC,OAAO,CAAY,IAAI,CAAC,CAAC,CAAC;QACrD,CAAC;QAED,MAAM,IAAI,gBAAgB,CAAC,gBAAgB,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;IACtE,CAAC;IAES,MAAM,CAAU,YAAY,CAAC,MAAc;QACnD,IAAI,MAAM,EAAE,CAAC;YACX,OAAO,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC;QAC7B,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAEM,MAAM,CAAC,UAAU,CAAC,KAAa;QACpC,OAAO,IAAI,OAAO,CAAC,KAAK,CAAC,CAAC;IAC5B,CAAC;CACF"}
+{"version":3,"file":"Decimal.js","sourceRoot":"","sources":["../../../Types/Decimal.ts"],"names":[],"mappings":"AAAA,4DAA4D;AAC5D,OAAO,gBAAgB,MAAM,6BAA6B,CAAC;AAC3D,OAAO,gBAAgB,MAAM,8BAA8B,CAAC;AAC5D,OAAO,EAAc,UAAU,EAAE,MAAM,QAAQ,CAAC;AAGhD,MAAM,CAAC,OAAO,OAAO,OAAQ,SAAQ,gBAAgB;IAEnD,IAAW,KAAK;QACd,OAAO,IAAI,CAAC,MAAM,CAAC;IACrB,CAAC;IACD,IAAW,KAAK,CAAC,CAAS;QACxB,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC;IAClB,CAAC;IAED,YAAmB,KAAgC;QACjD,KAAK,EAAE,CAAC;QATF,WAAM,GAAW,CAAC,CAAC;QAWzB,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9B,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;QAC5B,CAAC;QAED,IAAI,KAAK,YAAY,OAAO,EAAE,CAAC;YAC7B,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC;QACtB,CAAC;QAED,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;IACrB,CAAC;IAEM,MAAM,CAAC,KAAc;QAC1B,OAAO,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,KAAK,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC;IAC1D,CAAC;IAEe,QAAQ;QACtB,OAAO,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC;IAC/B,CAAC;IAED;;;;;;;;;OASG;IACO,MAAM,CAAU,UAAU,CAClC,KAAsC;QAEtC,MAAM,QAAQ,GAAY,KAAK,CAAC;QAEhC,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,OAAO,QAAQ,KAAK,QAAQ,EAAE,CAAC;YACjE,OAAO,IAAI,OAAO,CAAC,QAAQ,CAAC,CAAC,QAAQ,EAAE,CAAC;QAC1C,CAAC;QAED,IAAI,KAAK,EAAE,CAAC;YACV,OAAO,KAAK,CAAC,QAAQ,EAAE,CAAC;QAC1B,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAEe,MAAM;QACpB,OAAO;YACL,KAAK,EAAE,UAAU,CAAC,OAAO;YACzB,KAAK,EAAG,IAAgB,CAAC,QAAQ,EAAE;SACpC,CAAC;IACJ,CAAC;IAEM,MAAM,CAAU,QAAQ,CAAC,IAAgB;QAC9C,IAAI,IAAI,CAAC,OAAO,CAAC,KAAK,UAAU,CAAC,OAAO,EAAE,CAAC;YACzC,OAAO,IAAI,OAAO,CAAE,IAAI,CAAC,OAAO,CAAY,IAAI,CAAC,CAAC,CAAC;QACrD,CAAC;QAED,MAAM,IAAI,gBAAgB,CAAC,gBAAgB,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;IACtE,CAAC;IAES,MAAM,CAAU,YAAY,CAAC,MAAc;QACnD,IAAI,MAAM,EAAE,CAAC;YACX,OAAO,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC;QAC7B,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAEM,MAAM,CAAC,UAAU,CAAC,KAAa;QACpC,OAAO,IAAI,OAAO,CAAC,KAAK,CAAC,CAAC;IAC5B,CAAC;CACF"}

package/build/dist/Types/HashedString.js

@@ -4,6 +4,28 @@ import BadDataException from "./Exception/BadDataException";
 import BadOperationException from "./Exception/BadOperationException";
 import { ObjectType } from "./JSON";
 import CryptoJS from "crypto-js";
+/*
+ * SHA-256 hashing for values that are ALREADY high-entropy: session refresh
+ * tokens, email verification tokens, reset tokens, permission fingerprints.
+ * Those are random values the server minted, so there is nothing to guess and
+ * a fast hash is the right tool — it also keeps them searchable by hash,
+ * which is how they are looked up.
+ *
+ * User passwords are NOT hashed here any more. A password is low-entropy and
+ * guessable, so it goes through scrypt in Common/Server/Utils/PasswordHash,
+ * which is deliberately slow and memory-hard. What remains in this class is
+ * the two SHA-256 schemes passwords used to be stored under, kept so those
+ * rows still verify (and are then upgraded) at their owner's next login:
+ *
+ *   no salt   `SHA256(secret + value)`, from before per-user salts existed.
+ *   salted    `SHA256("v2:" + salt + ":" + secret + ":" + value)`.
+ *
+ * Neither records its scheme in the digest — it is a bare hex SHA-256 either
+ * way — so they are told apart by whether the row carries a salt. The "v2"
+ * prefix and the separators exist for domain separation: without them a
+ * crafted salt could make a salted input collide with an unsalted one.
+ */
+const SALTED_HASH_SCHEME_VERSION = "v2";
 export default class HashedString extends DatabaseProperty {
     get value() {
         return this._value;
@@ -48,21 +70,89 @@ export default class HashedString extends DatabaseProperty {
     isValueHashed() {
         return this.isHashed;
     }
-    async hashValue(encryptionSecret) {
+    /**
+     * Adopt an already-computed digest.
+     *
+     * For hashes this class does not compute itself — user passwords go
+     * through scrypt in Common/Server/Utils/PasswordHash, which is server-only
+     * because this type is also bundled into the browser. The guard is the
+     * same one hashValue() carries: a value is hashed once and never re-hashed
+     * over the top of itself.
+     */
+    setHashedValue(hashedValue) {
+        if (this.isHashed) {
+            throw new BadOperationException("Value is already hashed");
+        }
+        this.isHashed = true;
+        this.value = hashedValue;
+    }
+    /**
+     * The exact byte string fed to SHA-256.
+     *
+     * The unsalted branch MUST stay byte-for-byte identical forever: every
+     * password hashed before per-user salts existed is verified through it.
+     */
+    static buildValueToHash(value, encryptionSecret, salt) {
+        if (!salt) {
+            return (encryptionSecret || "") + value;
+        }
+        return `${SALTED_HASH_SCHEME_VERSION}:${salt}:${encryptionSecret || ""}:${value}`;
+    }
+    static computeHash(value, encryptionSecret, salt) {
+        if (!value) {
+            return "";
+        }
+        return CryptoJS.SHA256(HashedString.buildValueToHash(value, encryptionSecret, salt || null)).toString();
+    }
+    async hashValue(encryptionSecret, salt) {
         if (!this.value) {
             return "";
         }
         if (this.isHashed) {
             throw new BadOperationException("Value is already hashed");
         }
-        const valueToHash = (encryptionSecret || "") + this.value;
         this.isHashed = true;
-        this.value = CryptoJS.SHA256(valueToHash).toString();
+        this.value = HashedString.computeHash(this.value, encryptionSecret, salt || null);
         return this.value;
     }
-    static async hashValue(value, encryptionSecret) {
+    static async hashValue(value, encryptionSecret, salt) {
         const hashstring = new HashedString(value, false);
-        return await hashstring.hashValue(encryptionSecret);
+        return await hashstring.hashValue(encryptionSecret, salt || null);
+    }
+    /**
+     * Compare two already-hashed values without leaking, through timing, how
+     * many leading characters matched. Comparing digests with `===` lets an
+     * attacker who can measure response time recover a stored hash one
+     * character at a time; recovering the hash is what makes offline cracking
+     * possible in the first place.
+     *
+     * Lengths are compared up front. Digests here are always the same length,
+     * so an early exit only happens on malformed input, where the length is
+     * not the secret.
+     */
+    static isEqual(a, b) {
+        if (a.length !== b.length) {
+            return false;
+        }
+        let difference = 0;
+        for (let i = 0; i < a.length; i++) {
+            difference |= a.charCodeAt(i) ^ b.charCodeAt(i);
+        }
+        return difference === 0;
+    }
+    /**
+     * Verify a plaintext value against a stored hash.
+     *
+     * Pass the salt stored alongside the hash. Pass null/undefined for records
+     * written before per-user salts existed — those verify against the legacy
+     * unsalted scheme, and the caller should re-hash them with a fresh salt
+     * once the value is known to be correct.
+     */
+    static async verifyValue(data) {
+        if (!data.plainValue || !data.hashedValue) {
+            return false;
+        }
+        return HashedString.isEqual(HashedString.computeHash(data.plainValue, data.encryptionSecret, data.salt || null), data.hashedValue);
     }
     static fromDatabase(_value) {
         if (_value) {

package/build/dist/Types/HashedString.js.map

@@ -1 +1 @@
-{"version":3,"file":"HashedString.js","sourceRoot":"","sources":["../../../Types/HashedString.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,eAAe,CAAC;AACjC,OAAO,gBAAgB,MAAM,6BAA6B,CAAC;AAC3D,OAAO,gBAAgB,MAAM,8BAA8B,CAAC;AAC5D,OAAO,qBAAqB,MAAM,mCAAmC,CAAC;AACtE,OAAO,EAAc,UAAU,EAAE,MAAM,QAAQ,CAAC;AAEhD,OAAO,QAAQ,MAAM,WAAW,CAAC;AAGjC,MAAM,CAAC,OAAO,OAAO,YAAa,SAAQ,gBAAgB;IAIxD,IAAW,KAAK;QACd,OAAO,IAAI,CAAC,MAAM,CAAC;IACrB,CAAC;IACD,IAAW,KAAK,CAAC,CAAS;QACxB,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC;IAClB,CAAC;IAED,YAAmB,KAAa,EAAE,gBAAyB,KAAK;QAC9D,KAAK,EAAE,CAAC;QAXF,aAAQ,GAAY,KAAK,CAAC;QAE1B,WAAM,GAAW,EAAE,CAAC;QAU1B,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QACnB,IAAI,CAAC,QAAQ,GAAG,aAAa,CAAC;IAChC,CAAC;IAEe,MAAM;QACpB,OAAO;YACL,KAAK,EAAE,UAAU,CAAC,YAAY;YAC9B,KAAK,EAAG,IAAqB,CAAC,QAAQ,EAAE;SACzC,CAAC;IACJ,CAAC;IAEM,MAAM,CAAU,QAAQ,CAAC,IAAgB;QAC9C,IAAI,IAAI,CAAC,OAAO,CAAC,KAAK,UAAU,CAAC,YAAY,EAAE,CAAC;YAC9C,OAAO,IAAI,YAAY,CAAE,IAAI,CAAC,OAAO,CAAY,IAAI,EAAE,CAAC,CAAC;QAC3D,CAAC;QAED,MAAM,IAAI,gBAAgB,CAAC,gBAAgB,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;IACtE,CAAC;IAEe,QAAQ;QACtB,OAAO,IAAI,CAAC,KAAK,CAAC;IACpB,CAAC;IAEM,MAAM,CAAC,QAAQ;QACpB,OAAO,IAAI,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;IACnC,CAAC;IAES,MAAM,CAAU,UAAU,CAClC,KAAgD;QAEhD,IAAI,KAAK,EAAE,CAAC;YACV,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;gBAC9B,KAAK,GAAG,IAAI,YAAY,CAAC,KAAK,CAAC,CAAC;YAClC,CAAC;YAED,OAAO,KAAK,CAAC,QAAQ,EAAE,CAAC;QAC1B,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAEM,aAAa;QAClB,OAAO,IAAI,CAAC,QAAQ,CAAC;IACvB,CAAC;IAEM,KAAK,CAAC,SAAS,CAAC,gBAAiC;QACtD,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;YAChB,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAClB,MAAM,IAAI,qBAAqB,CAAC,yBAAyB,CAAC,CAAC;QAC7D,CAAC;QAED,MAAM,WAAW,GAAW,CAAC,gBAAgB,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC;QAClE,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;QAErB,IAAI,CAAC,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,QAAQ,EAAE,CAAC;QACrD,OAAO,IAAI,CAAC,KAAK,CAAC;IACpB,CAAC;IAEM,MAAM,CAAC,KAAK,CAAC,SAAS,CAC3B,KAAa,EACb,gBAAiC;QAEjC,MAAM,UAAU,GAAiB,IAAI,YAAY,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QAChE,OAAO,MAAM,UAAU,CAAC,SAAS,CAAC,gBAAgB,CAAC,CAAC;IACtD,CAAC;IAES,MAAM,CAAU,YAAY,CAAC,MAAc;QACnD,IAAI,MAAM,EAAE,CAAC;YACX,OAAO,IAAI,YAAY,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QACxC,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAEM,MAAM,CAAC,UAAU,CAAC,KAAa;QACpC,OAAO,IAAI,YAAY,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IACxC,CAAC;CACF"}
+{"version":3,"file":"HashedString.js","sourceRoot":"","sources":["../../../Types/HashedString.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,eAAe,CAAC;AACjC,OAAO,gBAAgB,MAAM,6BAA6B,CAAC;AAC3D,OAAO,gBAAgB,MAAM,8BAA8B,CAAC;AAC5D,OAAO,qBAAqB,MAAM,mCAAmC,CAAC;AACtE,OAAO,EAAc,UAAU,EAAE,MAAM,QAAQ,CAAC;AAEhD,OAAO,QAAQ,MAAM,WAAW,CAAC;AAGjC;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,0BAA0B,GAAW,IAAI,CAAC;AAEhD,MAAM,CAAC,OAAO,OAAO,YAAa,SAAQ,gBAAgB;IAIxD,IAAW,KAAK;QACd,OAAO,IAAI,CAAC,MAAM,CAAC;IACrB,CAAC;IACD,IAAW,KAAK,CAAC,CAAS;QACxB,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC;IAClB,CAAC;IAED,YAAmB,KAAa,EAAE,gBAAyB,KAAK;QAC9D,KAAK,EAAE,CAAC;QAXF,aAAQ,GAAY,KAAK,CAAC;QAE1B,WAAM,GAAW,EAAE,CAAC;QAU1B,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QACnB,IAAI,CAAC,QAAQ,GAAG,aAAa,CAAC;IAChC,CAAC;IAEe,MAAM;QACpB,OAAO;YACL,KAAK,EAAE,UAAU,CAAC,YAAY;YAC9B,KAAK,EAAG,IAAqB,CAAC,QAAQ,EAAE;SACzC,CAAC;IACJ,CAAC;IAEM,MAAM,CAAU,QAAQ,CAAC,IAAgB;QAC9C,IAAI,IAAI,CAAC,OAAO,CAAC,KAAK,UAAU,CAAC,YAAY,EAAE,CAAC;YAC9C,OAAO,IAAI,YAAY,CAAE,IAAI,CAAC,OAAO,CAAY,IAAI,EAAE,CAAC,CAAC;QAC3D,CAAC;QAED,MAAM,IAAI,gBAAgB,CAAC,gBAAgB,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;IACtE,CAAC;IAEe,QAAQ;QACtB,OAAO,IAAI,CAAC,KAAK,CAAC;IACpB,CAAC;IAEM,MAAM,CAAC,QAAQ;QACpB,OAAO,IAAI,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;IACnC,CAAC;IAES,MAAM,CAAU,UAAU,CAClC,KAAgD;QAEhD,IAAI,KAAK,EAAE,CAAC;YACV,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;gBAC9B,KAAK,GAAG,IAAI,YAAY,CAAC,KAAK,CAAC,CAAC;YAClC,CAAC;YAED,OAAO,KAAK,CAAC,QAAQ,EAAE,CAAC;QAC1B,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAEM,aAAa;QAClB,OAAO,IAAI,CAAC,QAAQ,CAAC;IACvB,CAAC;IAED;;;;;;;;OAQG;IACI,cAAc,CAAC,WAAmB;QACvC,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAClB,MAAM,IAAI,qBAAqB,CAAC,yBAAyB,CAAC,CAAC;QAC7D,CAAC;QAED,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;QACrB,IAAI,CAAC,KAAK,GAAG,WAAW,CAAC;IAC3B,CAAC;IAED;;;;;OAKG;IACK,MAAM,CAAC,gBAAgB,CAC7B,KAAa,EACb,gBAAiC,EACjC,IAAmB;QAEnB,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,OAAO,CAAC,gBAAgB,IAAI,EAAE,CAAC,GAAG,KAAK,CAAC;QAC1C,CAAC;QAED,OAAO,GAAG,0BAA0B,IAAI,IAAI,IAC1C,gBAAgB,IAAI,EACtB,IAAI,KAAK,EAAE,CAAC;IACd,CAAC;IAEM,MAAM,CAAC,WAAW,CACvB,KAAa,EACb,gBAAiC,EACjC,IAAoB;QAEpB,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,OAAO,QAAQ,CAAC,MAAM,CACpB,YAAY,CAAC,gBAAgB,CAAC,KAAK,EAAE,gBAAgB,EAAE,IAAI,IAAI,IAAI,CAAC,CACrE,CAAC,QAAQ,EAAE,CAAC;IACf,CAAC;IAEM,KAAK,CAAC,SAAS,CACpB,gBAAiC,EACjC,IAAoB;QAEpB,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;YAChB,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAClB,MAAM,IAAI,qBAAqB,CAAC,yBAAyB,CAAC,CAAC;QAC7D,CAAC;QAED,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;QAErB,IAAI,CAAC,KAAK,GAAG,YAAY,CAAC,WAAW,CACnC,IAAI,CAAC,KAAK,EACV,gBAAgB,EAChB,IAAI,IAAI,IAAI,CACb,CAAC;QACF,OAAO,IAAI,CAAC,KAAK,CAAC;IACpB,CAAC;IAEM,MAAM,CAAC,KAAK,CAAC,SAAS,CAC3B,KAAa,EACb,gBAAiC,EACjC,IAAoB;QAEpB,MAAM,UAAU,GAAiB,IAAI,YAAY,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QAChE,OAAO,MAAM,UAAU,CAAC,SAAS,CAAC,gBAAgB,EAAE,IAAI,IAAI,IAAI,CAAC,CAAC;IACpE,CAAC;IAED;;;;;;;;;;OAUG;IACI,MAAM,CAAC,OAAO,CAAC,CAAS,EAAE,CAAS;QACxC,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM,EAAE,CAAC;YAC1B,OAAO,KAAK,CAAC;QACf,CAAC;QAED,IAAI,UAAU,GAAW,CAAC,CAAC;QAE3B,KAAK,IAAI,CAAC,GAAW,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YAC1C,UAAU,IAAI,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;QAClD,CAAC;QAED,OAAO,UAAU,KAAK,CAAC,CAAC;IAC1B,CAAC;IAED;;;;;;;OAOG;IACI,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,IAK/B;QACC,IAAI,CAAC,IAAI,CAAC,UAAU,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;YAC1C,OAAO,KAAK,CAAC;QACf,CAAC;QAED,OAAO,YAAY,CAAC,OAAO,CACzB,YAAY,CAAC,WAAW,CACtB,IAAI,CAAC,UAAU,EACf,IAAI,CAAC,gBAAgB,EACrB,IAAI,CAAC,IAAI,IAAI,IAAI,CAClB,EACD,IAAI,CAAC,WAAW,CACjB,CAAC;IACJ,CAAC;IAES,MAAM,CAAU,YAAY,CAAC,MAAc;QACnD,IAAI,MAAM,EAAE,CAAC;YACX,OAAO,IAAI,YAAY,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QACxC,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAEM,MAAM,CAAC,UAAU,CAAC,KAAa;QACpC,OAAO,IAAI,YAAY,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IACxC,CAAC;CACF"}

package/build/dist/Types/Permission.js

@@ -380,6 +380,11 @@ var Permission;
     Permission["DeleteStatusPageLabelRule"] = "DeleteStatusPageLabelRule";
     Permission["EditStatusPageLabelRule"] = "EditStatusPageLabelRule";
     Permission["ReadStatusPageLabelRule"] = "ReadStatusPageLabelRule";
+    // Status Page Monitor Rule Permissions
+    Permission["CreateStatusPageMonitorRule"] = "CreateStatusPageMonitorRule";
+    Permission["DeleteStatusPageMonitorRule"] = "DeleteStatusPageMonitorRule";
+    Permission["EditStatusPageMonitorRule"] = "EditStatusPageMonitorRule";
+    Permission["ReadStatusPageMonitorRule"] = "ReadStatusPageMonitorRule";
     // Host Owner Rule Permissions
     Permission["CreateHostOwnerRule"] = "CreateHostOwnerRule";
     Permission["DeleteHostOwnerRule"] = "DeleteHostOwnerRule";
@@ -9790,6 +9795,43 @@ export class PermissionHelper {
                 isRolePermission: false,
                 group: PermissionGroup.StatusPage,
             },
+            // Status Page Monitor Rule Permissions
+            {
+                permission: Permission.CreateStatusPageMonitorRule,
+                title: "Create Status Page Monitor Rule",
+                description: "This permission can create Status Page Monitor Rules in this project.",
+                isAssignableToTenant: true,
+                isAccessControlPermission: false,
+                isRolePermission: false,
+                group: PermissionGroup.StatusPage,
+            },
+            {
+                permission: Permission.DeleteStatusPageMonitorRule,
+                title: "Delete Status Page Monitor Rule",
+                description: "This permission can delete Status Page Monitor Rules of this project.",
+                isAssignableToTenant: true,
+                isAccessControlPermission: false,
+                isRolePermission: false,
+                group: PermissionGroup.StatusPage,
+            },
+            {
+                permission: Permission.EditStatusPageMonitorRule,
+                title: "Edit Status Page Monitor Rule",
+                description: "This permission can edit Status Page Monitor Rules of this project.",
+                isAssignableToTenant: true,
+                isAccessControlPermission: false,
+                isRolePermission: false,
+                group: PermissionGroup.StatusPage,
+            },
+            {
+                permission: Permission.ReadStatusPageMonitorRule,
+                title: "Read Status Page Monitor Rule",
+                description: "This permission can read Status Page Monitor Rules of this project.",
+                isAssignableToTenant: true,
+                isAccessControlPermission: false,
+                isRolePermission: false,
+                group: PermissionGroup.StatusPage,
+            },
             // Host Owner Rule Permissions
             {
                 permission: Permission.CreateHostOwnerRule,