@oneuptime/common 12.0.25 → 12.0.26

package/Types/NetworkSite/SiteHealthRollupPolicy.ts

@@ -0,0 +1,96 @@
+/*
+ * How a NetworkSite turns the health of the devices in its subtree into ONE
+ * status for itself.
+ *
+ * The two policies answer different questions, and which one a site should
+ * use depends entirely on what the site represents:
+ *
+ *   - A Unit (one store, one branch) wants WorstStatus. Four switches and a
+ *     firewall in one building are not independent - one of them dark is a
+ *     problem at that address, and averaging it away hides the outage.
+ *
+ *   - A Region above four hundred stores wants PercentThreshold. Under
+ *     WorstStatus a single dark switch in store 12,000 paints the whole
+ *     region Offline, which is true in the narrowest sense and useless in
+ *     every practical one: the region card can never be green, so it stops
+ *     carrying information.
+ *
+ * WorstStatus is the default so that upgrading changes nothing about how any
+ * existing site rolls up.
+ */
+export enum SiteHealthRollupPolicy {
+  /*
+   * The worst status any device in the subtree reports wins, where "worst"
+   * is the highest MonitorStatus.priority. One offline device makes the site
+   * offline, however many healthy devices sit beside it.
+   */
+  WorstStatus = "WorstStatus",
+
+  /*
+   * The site's status is decided by what SHARE of the subtree's devices are
+   * non-operational:
+   *
+   *   share >= offlineThresholdPercent -> the project's offline status
+   *   share > 0                        -> the project's degraded status
+   *                                       (its offline status when the
+   *                                       project has no degraded row)
+   *   share == 0                       -> the project's operational status
+   *
+   * Devices that have never reported are not counted in either the numerator
+   * or the denominator - the same rule WorstStatus uses when it skips a
+   * pending device rather than reading it as an outage.
+   */
+  PercentThreshold = "PercentThreshold",
+}
+
+/*
+ * Every policy value, for the settings dropdown and for validation. Kept
+ * next to the enum so a new policy cannot be added without the picker
+ * learning about it.
+ */
+export const SiteHealthRollupPolicyValues: Array<SiteHealthRollupPolicy> = [
+  SiteHealthRollupPolicy.WorstStatus,
+  SiteHealthRollupPolicy.PercentThreshold,
+];
+
+// Applied to any site that has never been given an explicit policy.
+export const DefaultSiteHealthRollupPolicy: SiteHealthRollupPolicy =
+  SiteHealthRollupPolicy.WorstStatus;
+
+/*
+ * Share of a subtree's reporting devices that must be non-operational before
+ * a PercentThreshold site calls itself offline. Half is a deliberately
+ * unopinionated starting point: it is the one value where "most of this
+ * region is down" and "most of this region is up" swap places.
+ */
+export const DefaultSiteOfflineThresholdPercent: number = 50;
+
+// Human-readable label for one policy, shared by the settings UI.
+export function getSiteHealthRollupPolicyLabel(
+  policy: SiteHealthRollupPolicy,
+): string {
+  if (policy === SiteHealthRollupPolicy.PercentThreshold) {
+    return "Percentage of devices down";
+  }
+  return "Worst status of any device";
+}
+
+/*
+ * Narrows an arbitrary stored string to a policy. A row written before the
+ * column existed, or by a client that invented a value, falls back to the
+ * default rather than throwing - a rollup must never fail because of one bad
+ * settings string.
+ */
+export function parseSiteHealthRollupPolicy(
+  value: string | null | undefined,
+): SiteHealthRollupPolicy {
+  if (
+    value &&
+    SiteHealthRollupPolicyValues.includes(value as SiteHealthRollupPolicy)
+  ) {
+    return value as SiteHealthRollupPolicy;
+  }
+  return DefaultSiteHealthRollupPolicy;
+}
+
+export default SiteHealthRollupPolicy;

package/Types/Permission.ts

@@ -178,6 +178,12 @@ enum Permission {
   EditProjectDetectionRule = "EditProjectDetectionRule",
   ReadProjectDetectionRule = "ReadProjectDetectionRule",
 
+  // Threat Intel Feeds (STIX/TAXII indicator feeds over security events)
+  CreateProjectThreatIntelFeed = "CreateProjectThreatIntelFeed",
+  DeleteProjectThreatIntelFeed = "DeleteProjectThreatIntelFeed",
+  EditProjectThreatIntelFeed = "EditProjectThreatIntelFeed",
+  ReadProjectThreatIntelFeed = "ReadProjectThreatIntelFeed",
+
   // Log Pipelines
   CreateProjectLogPipeline = "CreateProjectLogPipeline",
   DeleteProjectLogPipeline = "DeleteProjectLogPipeline",
@@ -260,6 +266,12 @@ enum Permission {
   EditTelemetryException = "EditTelemetryException",
   ReadTelemetryException = "ReadTelemetryException",
 
+  // Source Maps (unminify browser exception stack traces)
+  CreateTelemetrySourceMap = "CreateTelemetrySourceMap",
+  DeleteTelemetrySourceMap = "DeleteTelemetrySourceMap",
+  EditTelemetrySourceMap = "EditTelemetrySourceMap",
+  ReadTelemetrySourceMap = "ReadTelemetrySourceMap",
+
   // Spans
   CreateTelemetryServiceTraces = "CreateTelemetryServiceTraces",
   DeleteTelemetryServiceTraces = "DeleteTelemetryServiceTraces",
@@ -1022,6 +1034,43 @@ enum Permission {
   EditAlertFeed = "EditAlertFeed",
   ReadAlertFeed = "ReadAlertFeed",
 
+  // Feeds for infrastructure and catalog resources.
+  CreateKubernetesClusterFeed = "CreateKubernetesClusterFeed",
+  EditKubernetesClusterFeed = "EditKubernetesClusterFeed",
+  ReadKubernetesClusterFeed = "ReadKubernetesClusterFeed",
+
+  CreateDockerHostFeed = "CreateDockerHostFeed",
+  EditDockerHostFeed = "EditDockerHostFeed",
+  ReadDockerHostFeed = "ReadDockerHostFeed",
+
+  CreateDockerSwarmClusterFeed = "CreateDockerSwarmClusterFeed",
+  EditDockerSwarmClusterFeed = "EditDockerSwarmClusterFeed",
+  ReadDockerSwarmClusterFeed = "ReadDockerSwarmClusterFeed",
+
+  CreateCephClusterFeed = "CreateCephClusterFeed",
+  EditCephClusterFeed = "EditCephClusterFeed",
+  ReadCephClusterFeed = "ReadCephClusterFeed",
+
+  CreatePodmanHostFeed = "CreatePodmanHostFeed",
+  EditPodmanHostFeed = "EditPodmanHostFeed",
+  ReadPodmanHostFeed = "ReadPodmanHostFeed",
+
+  CreateProxmoxClusterFeed = "CreateProxmoxClusterFeed",
+  EditProxmoxClusterFeed = "EditProxmoxClusterFeed",
+  ReadProxmoxClusterFeed = "ReadProxmoxClusterFeed",
+
+  CreateHostFeed = "CreateHostFeed",
+  EditHostFeed = "EditHostFeed",
+  ReadHostFeed = "ReadHostFeed",
+
+  CreateCloudResourceFeed = "CreateCloudResourceFeed",
+  EditCloudResourceFeed = "EditCloudResourceFeed",
+  ReadCloudResourceFeed = "ReadCloudResourceFeed",
+
+  CreateServiceFeed = "CreateServiceFeed",
+  EditServiceFeed = "EditServiceFeed",
+  ReadServiceFeed = "ReadServiceFeed",
+
   // Incident Status Permissions (Owner + Admin Permission by default)
   CreateMonitorStatusTimeline = "CreateMonitorStatusTimeline",
   EditMonitorStatusTimeline = "EditMonitorStatusTimeline",
@@ -3257,6 +3306,285 @@ export class PermissionHelper {
         group: PermissionGroup.OnCallDutyPolicy,
       },
 
+      {
+        permission: Permission.CreateKubernetesClusterFeed,
+        title: "Create Kubernetes Cluster Feed",
+        description:
+          "This permission can create the activity feed of a Kubernetes cluster in this project.",
+        isAssignableToTenant: true,
+        isAccessControlPermission: false,
+        isRolePermission: false,
+        group: PermissionGroup.Telemetry,
+      },
+      {
+        permission: Permission.EditKubernetesClusterFeed,
+        title: "Edit Kubernetes Cluster Feed",
+        description:
+          "This permission can edit the activity feed of a Kubernetes cluster in this project.",
+        isAssignableToTenant: true,
+        isAccessControlPermission: false,
+        isRolePermission: false,
+        group: PermissionGroup.Telemetry,
+      },
+      {
+        permission: Permission.ReadKubernetesClusterFeed,
+        title: "Read Kubernetes Cluster Feed",
+        description:
+          "This permission can read the activity feed of a Kubernetes cluster in this project.",
+        isAssignableToTenant: true,
+        isAccessControlPermission: false,
+        isRolePermission: false,
+        group: PermissionGroup.Telemetry,
+      },
+
+      {
+        permission: Permission.CreateDockerHostFeed,
+        title: "Create Docker Host Feed",
+        description:
+          "This permission can create the activity feed of a Docker host in this project.",
+        isAssignableToTenant: true,
+        isAccessControlPermission: false,
+        isRolePermission: false,
+        group: PermissionGroup.Telemetry,
+      },
+      {
+        permission: Permission.EditDockerHostFeed,
+        title: "Edit Docker Host Feed",
+        description:
+          "This permission can edit the activity feed of a Docker host in this project.",
+        isAssignableToTenant: true,
+        isAccessControlPermission: false,
+        isRolePermission: false,
+        group: PermissionGroup.Telemetry,
+      },
+      {
+        permission: Permission.ReadDockerHostFeed,
+        title: "Read Docker Host Feed",
+        description:
+          "This permission can read the activity feed of a Docker host in this project.",
+        isAssignableToTenant: true,
+        isAccessControlPermission: false,
+        isRolePermission: false,
+        group: PermissionGroup.Telemetry,
+      },
+
+      {
+        permission: Permission.CreateDockerSwarmClusterFeed,
+        title: "Create Docker Swarm Cluster Feed",
+        description:
+          "This permission can create the activity feed of a Docker Swarm cluster in this project.",
+        isAssignableToTenant: true,
+        isAccessControlPermission: false,
+        isRolePermission: false,
+        group: PermissionGroup.Telemetry,
+      },
+      {
+        permission: Permission.EditDockerSwarmClusterFeed,
+        title: "Edit Docker Swarm Cluster Feed",
+        description:
+          "This permission can edit the activity feed of a Docker Swarm cluster in this project.",
+        isAssignableToTenant: true,
+        isAccessControlPermission: false,
+        isRolePermission: false,
+        group: PermissionGroup.Telemetry,
+      },
+      {
+        permission: Permission.ReadDockerSwarmClusterFeed,
+        title: "Read Docker Swarm Cluster Feed",
+        description:
+          "This permission can read the activity feed of a Docker Swarm cluster in this project.",
+        isAssignableToTenant: true,
+        isAccessControlPermission: false,
+        isRolePermission: false,
+        group: PermissionGroup.Telemetry,
+      },
+
+      {
+        permission: Permission.CreateCephClusterFeed,
+        title: "Create Ceph Cluster Feed",
+        description:
+          "This permission can create the activity feed of a Ceph cluster in this project.",
+        isAssignableToTenant: true,
+        isAccessControlPermission: false,
+        isRolePermission: false,
+        group: PermissionGroup.Telemetry,
+      },
+      {
+        permission: Permission.EditCephClusterFeed,
+        title: "Edit Ceph Cluster Feed",
+        description:
+          "This permission can edit the activity feed of a Ceph cluster in this project.",
+        isAssignableToTenant: true,
+        isAccessControlPermission: false,
+        isRolePermission: false,
+        group: PermissionGroup.Telemetry,
+      },
+      {
+        permission: Permission.ReadCephClusterFeed,
+        title: "Read Ceph Cluster Feed",
+        description:
+          "This permission can read the activity feed of a Ceph cluster in this project.",
+        isAssignableToTenant: true,
+        isAccessControlPermission: false,
+        isRolePermission: false,
+        group: PermissionGroup.Telemetry,
+      },
+
+      {
+        permission: Permission.CreatePodmanHostFeed,
+        title: "Create Podman Host Feed",
+        description:
+          "This permission can create the activity feed of a Podman host in this project.",
+        isAssignableToTenant: true,
+        isAccessControlPermission: false,
+        isRolePermission: false,
+        group: PermissionGroup.Telemetry,
+      },
+      {
+        permission: Permission.EditPodmanHostFeed,
+        title: "Edit Podman Host Feed",
+        description:
+          "This permission can edit the activity feed of a Podman host in this project.",
+        isAssignableToTenant: true,
+        isAccessControlPermission: false,
+        isRolePermission: false,
+        group: PermissionGroup.Telemetry,
+      },
+      {
+        permission: Permission.ReadPodmanHostFeed,
+        title: "Read Podman Host Feed",
+        description:
+          "This permission can read the activity feed of a Podman host in this project.",
+        isAssignableToTenant: true,
+        isAccessControlPermission: false,
+        isRolePermission: false,
+        group: PermissionGroup.Telemetry,
+      },
+
+      {
+        permission: Permission.CreateProxmoxClusterFeed,
+        title: "Create Proxmox Cluster Feed",
+        description:
+          "This permission can create the activity feed of a Proxmox cluster in this project.",
+        isAssignableToTenant: true,
+        isAccessControlPermission: false,
+        isRolePermission: false,
+        group: PermissionGroup.Telemetry,
+      },
+      {
+        permission: Permission.EditProxmoxClusterFeed,
+        title: "Edit Proxmox Cluster Feed",
+        description:
+          "This permission can edit the activity feed of a Proxmox cluster in this project.",
+        isAssignableToTenant: true,
+        isAccessControlPermission: false,
+        isRolePermission: false,
+        group: PermissionGroup.Telemetry,
+      },
+      {
+        permission: Permission.ReadProxmoxClusterFeed,
+        title: "Read Proxmox Cluster Feed",
+        description:
+          "This permission can read the activity feed of a Proxmox cluster in this project.",
+        isAssignableToTenant: true,
+        isAccessControlPermission: false,
+        isRolePermission: false,
+        group: PermissionGroup.Telemetry,
+      },
+
+      {
+        permission: Permission.CreateHostFeed,
+        title: "Create Host Feed",
+        description:
+          "This permission can create the activity feed of a host in this project.",
+        isAssignableToTenant: true,
+        isAccessControlPermission: false,
+        isRolePermission: false,
+        group: PermissionGroup.Telemetry,
+      },
+      {
+        permission: Permission.EditHostFeed,
+        title: "Edit Host Feed",
+        description:
+          "This permission can edit the activity feed of a host in this project.",
+        isAssignableToTenant: true,
+        isAccessControlPermission: false,
+        isRolePermission: false,
+        group: PermissionGroup.Telemetry,
+      },
+      {
+        permission: Permission.ReadHostFeed,
+        title: "Read Host Feed",
+        description:
+          "This permission can read the activity feed of a host in this project.",
+        isAssignableToTenant: true,
+        isAccessControlPermission: false,
+        isRolePermission: false,
+        group: PermissionGroup.Telemetry,
+      },
+
+      {
+        permission: Permission.CreateCloudResourceFeed,
+        title: "Create Cloud Resource Feed",
+        description:
+          "This permission can create the activity feed of a cloud resource in this project.",
+        isAssignableToTenant: true,
+        isAccessControlPermission: false,
+        isRolePermission: false,
+        group: PermissionGroup.Telemetry,
+      },
+      {
+        permission: Permission.EditCloudResourceFeed,
+        title: "Edit Cloud Resource Feed",
+        description:
+          "This permission can edit the activity feed of a cloud resource in this project.",
+        isAssignableToTenant: true,
+        isAccessControlPermission: false,
+        isRolePermission: false,
+        group: PermissionGroup.Telemetry,
+      },
+      {
+        permission: Permission.ReadCloudResourceFeed,
+        title: "Read Cloud Resource Feed",
+        description:
+          "This permission can read the activity feed of a cloud resource in this project.",
+        isAssignableToTenant: true,
+        isAccessControlPermission: false,
+        isRolePermission: false,
+        group: PermissionGroup.Telemetry,
+      },
+
+      {
+        permission: Permission.CreateServiceFeed,
+        title: "Create Service Feed",
+        description:
+          "This permission can create the activity feed of a service in this project.",
+        isAssignableToTenant: true,
+        isAccessControlPermission: false,
+        isRolePermission: false,
+        group: PermissionGroup.ServiceCatalog,
+      },
+      {
+        permission: Permission.EditServiceFeed,
+        title: "Edit Service Feed",
+        description:
+          "This permission can edit the activity feed of a service in this project.",
+        isAssignableToTenant: true,
+        isAccessControlPermission: false,
+        isRolePermission: false,
+        group: PermissionGroup.ServiceCatalog,
+      },
+      {
+        permission: Permission.ReadServiceFeed,
+        title: "Read Service Feed",
+        description:
+          "This permission can read the activity feed of a service in this project.",
+        isAssignableToTenant: true,
+        isAccessControlPermission: false,
+        isRolePermission: false,
+        group: PermissionGroup.ServiceCatalog,
+      },
+
       {
         permission: Permission.CreateAlertFeed,
         title: "Create Alert Feed",
@@ -7143,6 +7471,48 @@ export class PermissionHelper {
         group: PermissionGroup.Security,
       },
 
+      // Threat Intel Feed Permissions
+      {
+        permission: Permission.CreateProjectThreatIntelFeed,
+        title: "Create Threat Intel Feed",
+        description:
+          "This permission can create Threat Intel Feeds in this project.",
+        isAssignableToTenant: true,
+        isAccessControlPermission: false,
+        isRolePermission: false,
+        group: PermissionGroup.Security,
+      },
+      {
+        permission: Permission.DeleteProjectThreatIntelFeed,
+        title: "Delete Threat Intel Feed",
+        description:
+          "This permission can delete Threat Intel Feeds of this project.",
+        isAssignableToTenant: true,
+        isAccessControlPermission: false,
+        isRolePermission: false,
+        group: PermissionGroup.Security,
+      },
+      {
+        permission: Permission.EditProjectThreatIntelFeed,
+        title: "Edit Threat Intel Feed",
+        description:
+          "This permission can edit Threat Intel Feeds of this project.",
+        isAssignableToTenant: true,
+        isAccessControlPermission: false,
+        isRolePermission: false,
+        group: PermissionGroup.Security,
+      },
+      {
+        permission: Permission.ReadProjectThreatIntelFeed,
+        title: "Read Threat Intel Feed",
+        description:
+          "This permission can read Threat Intel Feeds of this project.",
+        isAssignableToTenant: true,
+        isAccessControlPermission: false,
+        isRolePermission: false,
+        group: PermissionGroup.Security,
+      },
+
       // Log Pipeline Permissions
       {
         permission: Permission.CreateProjectLogPipeline,
@@ -7728,6 +8098,47 @@ export class PermissionHelper {
         group: PermissionGroup.Telemetry,
       },
 
+      {
+        permission: Permission.CreateTelemetrySourceMap,
+        title: "Create Telemetry Source Map",
+        description:
+          "This permission can upload source maps for telemetry services of this project.",
+        isAssignableToTenant: true,
+        isAccessControlPermission: false,
+        isRolePermission: false,
+        group: PermissionGroup.Telemetry,
+      },
+      {
+        permission: Permission.DeleteTelemetrySourceMap,
+        title: "Delete Telemetry Source Map",
+        description:
+          "This permission can delete source maps for telemetry services of this project.",
+        isAssignableToTenant: true,
+        isAccessControlPermission: false,
+        isRolePermission: false,
+        group: PermissionGroup.Telemetry,
+      },
+      {
+        permission: Permission.EditTelemetrySourceMap,
+        title: "Edit Telemetry Source Map",
+        description:
+          "This permission can edit source maps for telemetry services of this project.",
+        isAssignableToTenant: true,
+        isAccessControlPermission: false,
+        isRolePermission: false,
+        group: PermissionGroup.Telemetry,
+      },
+      {
+        permission: Permission.ReadTelemetrySourceMap,
+        title: "Read Telemetry Source Map",
+        description:
+          "This permission can read source maps for telemetry services of this project.",
+        isAssignableToTenant: true,
+        isAccessControlPermission: false,
+        isRolePermission: false,
+        group: PermissionGroup.Telemetry,
+      },
+
       {
         permission: Permission.CreateProbeOwnerTeam,
         title: "Create Probe Owner Team",

package/Types/Probe/ProbeApiIngestResponse.ts

@@ -18,6 +18,24 @@ export interface PerSeriesCriteriaMatch {
   metricContext?: MetricCriteriaContext | undefined;
 }
 
+/**
+ * One criteria that matched on this evaluation, together with the
+ * series it matched. Grouped (per-series) monitors accumulate one entry
+ * per matching criteria instead of stopping at the first one, so a host
+ * breaching the "warning" band still gets its alert while another host
+ * holds the monitor in "critical".
+ */
+export interface MatchedCriteriaResult {
+  criteriaId: string;
+  rootCause: string;
+  /**
+   * The series this criteria matched. Empty is impossible here — a
+   * criteria with no matching series is not recorded as matched for a
+   * grouped monitor.
+   */
+  perSeriesMatches: Array<PerSeriesCriteriaMatch>;
+}
+
 export default interface ProbeApiIngestResponse {
   monitorId: ObjectID;
   ingestedMonitorStepId?: ObjectID | undefined;
@@ -33,4 +51,28 @@ export default interface ProbeApiIngestResponse {
    * + `rootCause` still drive the legacy single-incident path.
    */
   perSeriesMatches?: Array<PerSeriesCriteriaMatch> | undefined;
+  /**
+   * Every criteria that matched on this evaluation, in criteria order.
+   *
+   * Only populated for monitors that fan out per series (grouped metric
+   * monitors and grouped incoming-request monitors). Ungrouped monitors
+   * keep the historical "first matching criteria wins, stop there"
+   * semantics and leave this undefined, in which case `criteriaMetId` +
+   * `rootCause` + `perSeriesMatches` are the whole story.
+   *
+   * `criteriaMetId` always stays the FIRST match — the monitor has a
+   * single status and that is what sets it.
+   */
+  matchedCriteria?: Array<MatchedCriteriaResult> | undefined;
+  /**
+   * The ids of every criteria that was actually evaluated on this tick
+   * (matched or not, excluding disabled ones and — for ungrouped
+   * monitors — everything after the winner).
+   *
+   * The resolve pass needs this to tell "this criteria was evaluated and
+   * this series is no longer breaching it" (resolve) apart from "this
+   * criteria never ran, so its open records are none of my business"
+   * (leave alone).
+   */
+  evaluatedCriteriaIds?: Array<string> | undefined;
 }