@oneuptime/common 12.0.32 → 12.0.34

package/Server/Infrastructure/Postgres/SchemaMigrations/1791200000000-AddNetworkSnmpCredentialProfilesAndAlertPolicies.ts

@@ -0,0 +1,191 @@
+import { MigrationInterface, QueryRunner } from "typeorm";
+
+/*
+ * Ping-first network device polling.
+ *
+ *   - NetworkSnmpCredentialProfile: reusable SNMP credentials, resolved for a
+ *     device as device columns -> device profile -> site profile -> ping only.
+ *   - NetworkAlertPolicy: a scope (all / sites / roles / labels) plus a
+ *     Network Device monitor template; the engine keeps one monitor per
+ *     covered device (Monitor.networkAlertPolicyId) so alerting is a policy,
+ *     not something configured device by device.
+ *   - NetworkSite.probeId / snmpCredentialProfileId: the site's monitoring
+ *     defaults, copied onto devices at write time.
+ *   - NetworkDevice.isSnmpReachable / lastSnmpSeenAt: the SNMP walk's own
+ *     result, separate from reachability (which ping now decides).
+ *   - NetworkDevice.monitoringMethod defaults to 'Probe' (formerly 'SNMP');
+ *     the NormalizeNetworkDeviceMonitoringMethod data migration rewrites the
+ *     stored values.
+ */
+export class AddNetworkSnmpCredentialProfilesAndAlertPolicies1791200000000
+  implements MigrationInterface
+{
+  public name: string =
+    "AddNetworkSnmpCredentialProfilesAndAlertPolicies1791200000000";
+
+  public async up(queryRunner: QueryRunner): Promise<void> {
+    await queryRunner.query(
+      `CREATE TABLE "NetworkAlertPolicy" ("_id" uuid NOT NULL DEFAULT uuid_generate_v4(), "createdAt" TIMESTAMP WITH TIME ZONE NOT NULL DEFAULT now(), "updatedAt" TIMESTAMP WITH TIME ZONE NOT NULL DEFAULT now(), "deletedAt" TIMESTAMP WITH TIME ZONE, "version" integer NOT NULL, "projectId" uuid NOT NULL, "name" character varying(100) NOT NULL, "description" character varying(500), "isEnabled" boolean NOT NULL DEFAULT true, "monitorTemplateId" uuid, "scope" jsonb NOT NULL DEFAULT '{}', "lastSyncAt" TIMESTAMP WITH TIME ZONE, "lastSyncError" character varying(500), "coveredDeviceCount" integer DEFAULT '0', "templateSyncedAt" TIMESTAMP WITH TIME ZONE, "createdByUserId" uuid, "deletedByUserId" uuid, CONSTRAINT "PK_a6fa7156f8fafda3d045689f33b" PRIMARY KEY ("_id"))`,
+    );
+    await queryRunner.query(
+      `CREATE INDEX "IDX_784e9f96c6229aadb1f3ff1f4f" ON "NetworkAlertPolicy" ("projectId") `,
+    );
+    await queryRunner.query(
+      `CREATE INDEX "IDX_248ef6126744a645d084cb2431" ON "NetworkAlertPolicy" ("monitorTemplateId") `,
+    );
+    await queryRunner.query(
+      `CREATE UNIQUE INDEX "IDX_network_alert_policy_project_template_unique" ON "NetworkAlertPolicy" ("projectId", "monitorTemplateId") WHERE "deletedAt" IS NULL AND "monitorTemplateId" IS NOT NULL`,
+    );
+    await queryRunner.query(
+      `CREATE TABLE "NetworkSnmpCredentialProfile" ("_id" uuid NOT NULL DEFAULT uuid_generate_v4(), "createdAt" TIMESTAMP WITH TIME ZONE NOT NULL DEFAULT now(), "updatedAt" TIMESTAMP WITH TIME ZONE NOT NULL DEFAULT now(), "deletedAt" TIMESTAMP WITH TIME ZONE, "version" integer NOT NULL, "projectId" uuid NOT NULL, "name" character varying(100) NOT NULL, "description" character varying(500), "snmpVersion" character varying(100) DEFAULT 'V2c', "snmpCommunityString" text, "snmpPort" integer DEFAULT '161', "snmpV3SecurityLevel" character varying(100), "snmpV3Username" character varying(100), "snmpV3AuthProtocol" character varying(100), "snmpV3AuthKey" text, "snmpV3PrivProtocol" character varying(100), "snmpV3PrivKey" text, "createdByUserId" uuid, "deletedByUserId" uuid, CONSTRAINT "PK_7bac722bd8323e891d3a1c5292f" PRIMARY KEY ("_id"))`,
+    );
+    await queryRunner.query(
+      `CREATE INDEX "IDX_3114361b9ddb6a70d7c538c28d" ON "NetworkSnmpCredentialProfile" ("projectId") `,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "Monitor" ADD "networkAlertPolicyId" uuid`,
+    );
+    await queryRunner.query(`ALTER TABLE "NetworkSite" ADD "probeId" uuid`);
+    await queryRunner.query(
+      `ALTER TABLE "NetworkSite" ADD "snmpCredentialProfileId" uuid`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "NetworkDevice" ADD "snmpCredentialProfileId" uuid`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "NetworkDevice" ADD "isSnmpReachable" boolean`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "NetworkDevice" ADD "lastSnmpSeenAt" TIMESTAMP WITH TIME ZONE`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "NetworkDevice" ALTER COLUMN "monitoringMethod" SET DEFAULT 'Probe'`,
+    );
+    await queryRunner.query(
+      `CREATE INDEX "IDX_51cac50b63aac2d24983010b47" ON "Monitor" ("networkAlertPolicyId") `,
+    );
+    await queryRunner.query(
+      `CREATE INDEX "IDX_b54c966057aa58e360a4f2e532" ON "NetworkSite" ("probeId") `,
+    );
+    await queryRunner.query(
+      `CREATE INDEX "IDX_79c8d9b3f4f3b3c93bddcbd713" ON "NetworkSite" ("snmpCredentialProfileId") `,
+    );
+    await queryRunner.query(
+      `CREATE INDEX "IDX_293e5f4308dec96413427b6739" ON "NetworkDevice" ("projectId", "snmpCredentialProfileId") `,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "NetworkAlertPolicy" ADD CONSTRAINT "FK_784e9f96c6229aadb1f3ff1f4f6" FOREIGN KEY ("projectId") REFERENCES "Project"("_id") ON DELETE CASCADE ON UPDATE NO ACTION`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "NetworkAlertPolicy" ADD CONSTRAINT "FK_248ef6126744a645d084cb24314" FOREIGN KEY ("monitorTemplateId") REFERENCES "MonitorTemplate"("_id") ON DELETE SET NULL ON UPDATE NO ACTION`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "NetworkAlertPolicy" ADD CONSTRAINT "FK_10debf45ebcfe435a30185a6c0c" FOREIGN KEY ("createdByUserId") REFERENCES "User"("_id") ON DELETE SET NULL ON UPDATE NO ACTION`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "NetworkAlertPolicy" ADD CONSTRAINT "FK_e7cc6526ed2f1f23a2f24560c65" FOREIGN KEY ("deletedByUserId") REFERENCES "User"("_id") ON DELETE SET NULL ON UPDATE NO ACTION`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "Monitor" ADD CONSTRAINT "FK_51cac50b63aac2d24983010b475" FOREIGN KEY ("networkAlertPolicyId") REFERENCES "NetworkAlertPolicy"("_id") ON DELETE SET NULL ON UPDATE NO ACTION`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "NetworkSnmpCredentialProfile" ADD CONSTRAINT "FK_3114361b9ddb6a70d7c538c28da" FOREIGN KEY ("projectId") REFERENCES "Project"("_id") ON DELETE CASCADE ON UPDATE NO ACTION`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "NetworkSnmpCredentialProfile" ADD CONSTRAINT "FK_0c011dba595b5a41a90a899728c" FOREIGN KEY ("createdByUserId") REFERENCES "User"("_id") ON DELETE SET NULL ON UPDATE NO ACTION`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "NetworkSnmpCredentialProfile" ADD CONSTRAINT "FK_66f88d052fc53906511384c1f65" FOREIGN KEY ("deletedByUserId") REFERENCES "User"("_id") ON DELETE SET NULL ON UPDATE NO ACTION`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "NetworkSite" ADD CONSTRAINT "FK_b54c966057aa58e360a4f2e532a" FOREIGN KEY ("probeId") REFERENCES "Probe"("_id") ON DELETE SET NULL ON UPDATE NO ACTION`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "NetworkSite" ADD CONSTRAINT "FK_79c8d9b3f4f3b3c93bddcbd7135" FOREIGN KEY ("snmpCredentialProfileId") REFERENCES "NetworkSnmpCredentialProfile"("_id") ON DELETE SET NULL ON UPDATE NO ACTION`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "NetworkDevice" ADD CONSTRAINT "FK_7a42f6f231d1f0db76ab884b22d" FOREIGN KEY ("snmpCredentialProfileId") REFERENCES "NetworkSnmpCredentialProfile"("_id") ON DELETE SET NULL ON UPDATE NO ACTION`,
+    );
+  }
+
+  public async down(queryRunner: QueryRunner): Promise<void> {
+    await queryRunner.query(
+      `ALTER TABLE "NetworkDevice" DROP CONSTRAINT "FK_7a42f6f231d1f0db76ab884b22d"`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "NetworkSite" DROP CONSTRAINT "FK_79c8d9b3f4f3b3c93bddcbd7135"`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "NetworkSite" DROP CONSTRAINT "FK_b54c966057aa58e360a4f2e532a"`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "NetworkSnmpCredentialProfile" DROP CONSTRAINT "FK_66f88d052fc53906511384c1f65"`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "NetworkSnmpCredentialProfile" DROP CONSTRAINT "FK_0c011dba595b5a41a90a899728c"`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "NetworkSnmpCredentialProfile" DROP CONSTRAINT "FK_3114361b9ddb6a70d7c538c28da"`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "Monitor" DROP CONSTRAINT "FK_51cac50b63aac2d24983010b475"`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "NetworkAlertPolicy" DROP CONSTRAINT "FK_e7cc6526ed2f1f23a2f24560c65"`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "NetworkAlertPolicy" DROP CONSTRAINT "FK_10debf45ebcfe435a30185a6c0c"`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "NetworkAlertPolicy" DROP CONSTRAINT "FK_248ef6126744a645d084cb24314"`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "NetworkAlertPolicy" DROP CONSTRAINT "FK_784e9f96c6229aadb1f3ff1f4f6"`,
+    );
+    await queryRunner.query(
+      `DROP INDEX "public"."IDX_293e5f4308dec96413427b6739"`,
+    );
+    await queryRunner.query(
+      `DROP INDEX "public"."IDX_79c8d9b3f4f3b3c93bddcbd713"`,
+    );
+    await queryRunner.query(
+      `DROP INDEX "public"."IDX_b54c966057aa58e360a4f2e532"`,
+    );
+    await queryRunner.query(
+      `DROP INDEX "public"."IDX_51cac50b63aac2d24983010b47"`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "NetworkDevice" ALTER COLUMN "monitoringMethod" SET DEFAULT 'SNMP'`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "NetworkDevice" DROP COLUMN "lastSnmpSeenAt"`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "NetworkDevice" DROP COLUMN "isSnmpReachable"`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "NetworkDevice" DROP COLUMN "snmpCredentialProfileId"`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "NetworkSite" DROP COLUMN "snmpCredentialProfileId"`,
+    );
+    await queryRunner.query(`ALTER TABLE "NetworkSite" DROP COLUMN "probeId"`);
+    await queryRunner.query(
+      `ALTER TABLE "Monitor" DROP COLUMN "networkAlertPolicyId"`,
+    );
+    await queryRunner.query(
+      `DROP INDEX "public"."IDX_3114361b9ddb6a70d7c538c28d"`,
+    );
+    await queryRunner.query(`DROP TABLE "NetworkSnmpCredentialProfile"`);
+    await queryRunner.query(
+      `DROP INDEX "public"."IDX_network_alert_policy_project_template_unique"`,
+    );
+    await queryRunner.query(
+      `DROP INDEX "public"."IDX_248ef6126744a645d084cb2431"`,
+    );
+    await queryRunner.query(
+      `DROP INDEX "public"."IDX_784e9f96c6229aadb1f3ff1f4f"`,
+    );
+    await queryRunner.query(`DROP TABLE "NetworkAlertPolicy"`);
+  }
+}

package/Server/Infrastructure/Postgres/SchemaMigrations/1791300000000-AddTelemetryIngestionKeyType.ts

@@ -0,0 +1,91 @@
+import { MigrationInterface, QueryRunner } from "typeorm";
+
+/*
+ * Splits TelemetryIngestionKey into two credential classes - Server (what
+ * every existing key is) and Browser (a public, write-only key that is safe to
+ * paste into a web page) - and adds the controls a public key needs to be
+ * safe: an origin allowlist, a pinned service.name, a rate limit, an expiry, a
+ * kill switch, and last-used visibility.
+ *
+ * Every column here is chosen so that this migration is a NO-OP for behaviour
+ * on existing rows, which matters because these keys are live credentials in
+ * customer infrastructure and a schema change must never be the reason a
+ * production collector stops shipping telemetry:
+ *
+ * - "keyType" is NOT NULL DEFAULT 'Server', so the ADD COLUMN backfills every
+ *   existing row to exactly what it already is. Nullable would have been worse
+ *   than useless: the ingest guard would then have to decide what NULL means,
+ *   and every wrong guess there is either "break every existing key" or
+ *   "treat an unknown key as the permissive class".
+ * - "isEnabled" is NOT NULL DEFAULT true - a key that worked yesterday keeps
+ *   working.
+ * - "allowedOrigins" is NOT NULL DEFAULT '[]' and is ignored for Server keys,
+ *   so the backfilled empty list changes nothing. It only becomes a strict
+ *   allowlist on Browser keys, which cannot exist before this migration runs.
+ * - the remaining four are nullable with no default, and NULL means "no
+ *   expiry", "no pinned service name", "never seen used", "no explicit rate
+ *   limit" respectively - each the pre-existing behaviour.
+ *
+ * SQL types mirror what the ORM emits for the corresponding ColumnType
+ * elsewhere in this directory: ShortText -> character varying(100),
+ * JSON -> jsonb, Boolean -> boolean, Date -> TIMESTAMP WITH TIME ZONE,
+ * Number -> integer.
+ */
+export class AddTelemetryIngestionKeyType1791300000000
+  implements MigrationInterface
+{
+  public name: string = "AddTelemetryIngestionKeyType1791300000000";
+
+  public async up(queryRunner: QueryRunner): Promise<void> {
+    await queryRunner.query(
+      `ALTER TABLE "TelemetryIngestionKey" ADD "keyType" character varying(100) NOT NULL DEFAULT 'Server'`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "TelemetryIngestionKey" ADD "allowedOrigins" jsonb NOT NULL DEFAULT '[]'`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "TelemetryIngestionKey" ADD "pinnedServiceName" character varying(100)`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "TelemetryIngestionKey" ADD "isEnabled" boolean NOT NULL DEFAULT true`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "TelemetryIngestionKey" ADD "expiresAt" TIMESTAMP WITH TIME ZONE`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "TelemetryIngestionKey" ADD "lastUsedAt" TIMESTAMP WITH TIME ZONE`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "TelemetryIngestionKey" ADD "requestsPerMinuteLimit" integer`,
+    );
+  }
+
+  /*
+   * Drops exactly the seven columns this migration added, in reverse order.
+   * No data is restored on the way down because none was rewritten on the way
+   * up - this migration only ever added columns.
+   */
+  public async down(queryRunner: QueryRunner): Promise<void> {
+    await queryRunner.query(
+      `ALTER TABLE "TelemetryIngestionKey" DROP COLUMN "requestsPerMinuteLimit"`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "TelemetryIngestionKey" DROP COLUMN "lastUsedAt"`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "TelemetryIngestionKey" DROP COLUMN "expiresAt"`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "TelemetryIngestionKey" DROP COLUMN "isEnabled"`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "TelemetryIngestionKey" DROP COLUMN "pinnedServiceName"`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "TelemetryIngestionKey" DROP COLUMN "allowedOrigins"`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "TelemetryIngestionKey" DROP COLUMN "keyType"`,
+    );
+  }
+}

package/Server/Infrastructure/Postgres/SchemaMigrations/1791400000000-SessionReplayRecordEverySessionByDefault.ts

@@ -0,0 +1,67 @@
+import { MigrationInterface, QueryRunner } from "typeorm";
+
+/*
+ * Record every session by default, not only the ones that broke.
+ *
+ *   - capture trigger: OnErrorOrFrustration -> Always
+ *   - sample percentage: 0 -> 100
+ *
+ * The two together were the reason a fresh install looked broken. The old
+ * pair means the recorder holds a rolling in-memory buffer and uploads
+ * NOTHING until an error, an unhandled rejection, a 5xx or a frustration
+ * signal fires, so the session list filled up with rows carrying signals
+ * and nothing else - and a session with no footage is indistinguishable
+ * from a feature that does not work. Replay is also simply useful on the
+ * sessions where nothing threw: the checkout nobody completed, the form
+ * everybody abandoned, the support call about a page that "looked wrong".
+ *
+ * On the backfill. ALTER COLUMN SET DEFAULT only reaches rows inserted
+ * afterwards, so on its own this would change nothing for any install
+ * that already has applications - which is every install that reported
+ * the problem. The UPDATE is therefore scoped to rows still holding BOTH
+ * previous defaults, which is the closest a migration can get to "was
+ * never configured": the schema keeps no record of whether a value was
+ * chosen or inherited. Requiring both to match is what protects a
+ * deliberate configuration - anyone who set a sample percentage, or who
+ * chose Always, keeps exactly what they set.
+ *
+ * This increases how much end-user data an existing install records and
+ * stores, which is not a change to make quietly, so it is called out in
+ * the changelog as well as here. The controls that bound it are
+ * unchanged and all still apply: the project-wide master switch, the
+ * per-application toggle, masking (sensitive inputs are masked in every
+ * mode), consent mode, and a 7-day default retention.
+ */
+export class SessionReplayRecordEverySessionByDefault1791400000000
+  implements MigrationInterface
+{
+  public name = "SessionReplayRecordEverySessionByDefault1791400000000";
+
+  public async up(queryRunner: QueryRunner): Promise<void> {
+    await queryRunner.query(
+      `ALTER TABLE "RumApplication" ALTER COLUMN "sessionReplayCaptureTrigger" SET DEFAULT 'Always'`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "RumApplication" ALTER COLUMN "sessionReplaySamplePercentage" SET DEFAULT 100`,
+    );
+
+    await queryRunner.query(
+      `UPDATE "RumApplication" SET "sessionReplayCaptureTrigger" = 'Always', "sessionReplaySamplePercentage" = 100 WHERE "sessionReplayCaptureTrigger" = 'OnErrorOrFrustration' AND "sessionReplaySamplePercentage" = 0`,
+    );
+  }
+
+  public async down(queryRunner: QueryRunner): Promise<void> {
+    /*
+     * Defaults only. The backfilled rows are indistinguishable from ones
+     * an operator chose after this migration ran, and moving them back
+     * would silently stop recording sessions somebody may now be relying
+     * on being able to watch.
+     */
+    await queryRunner.query(
+      `ALTER TABLE "RumApplication" ALTER COLUMN "sessionReplaySamplePercentage" SET DEFAULT 0`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "RumApplication" ALTER COLUMN "sessionReplayCaptureTrigger" SET DEFAULT 'OnErrorOrFrustration'`,
+    );
+  }
+}

package/Server/Infrastructure/Postgres/SchemaMigrations/1791500000000-WidenCustomFieldDropdownOptions.ts

@@ -0,0 +1,139 @@
+import { MigrationInterface, QueryRunner } from "typeorm";
+
+/*
+ * dropdownOptions on all nine custom-field tables becomes unbounded text.
+ *
+ * Hand-written ALTER COLUMN ... TYPE rather than the DROP + ADD pair TypeORM
+ * generates for this change: varchar -> text is binary-coercible in Postgres,
+ * so the ALTER rewrites nothing and, unlike DROP + ADD, keeps every option
+ * list customers have already configured.
+ */
+export class WidenCustomFieldDropdownOptions1791500000000
+  implements MigrationInterface
+{
+  public name: string = "WidenCustomFieldDropdownOptions1791500000000";
+
+  public async up(queryRunner: QueryRunner): Promise<void> {
+    /*
+     * Change dropdownOptions from varchar(500) to text on every custom-field
+     * table.
+     *
+     * The column holds the whole option list of a Dropdown / MultiSelectDropdown
+     * custom field, one option per line, so 500 characters is a cap on the
+     * number of options rather than on any single value — roughly 43 short
+     * options. That is too small for the reference lists these fields exist to
+     * model: a country list of 250 entries needs 2716 characters. Since #2974
+     * added per-option colours the list is serialised as JSON whenever any
+     * option carries one, at which point the same 250 entries need about 10 KB.
+     *
+     * There are no indexes, constraints or views on these columns, and nothing
+     * sorts, groups or filters by them, so widening is free.
+     */
+    await queryRunner.query(
+      `ALTER TABLE "AlertCustomField" ALTER COLUMN "dropdownOptions" TYPE text`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "IncidentCustomField" ALTER COLUMN "dropdownOptions" TYPE text`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "InventoryItemCustomField" ALTER COLUMN "dropdownOptions" TYPE text`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "MonitorCustomField" ALTER COLUMN "dropdownOptions" TYPE text`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "OnCallDutyPolicyCustomField" ALTER COLUMN "dropdownOptions" TYPE text`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "ScheduledMaintenanceCustomField" ALTER COLUMN "dropdownOptions" TYPE text`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "StatusPageCustomField" ALTER COLUMN "dropdownOptions" TYPE text`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "TeamCustomField" ALTER COLUMN "dropdownOptions" TYPE text`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "TeamMemberCustomField" ALTER COLUMN "dropdownOptions" TYPE text`,
+    );
+  }
+
+  public async down(queryRunner: QueryRunner): Promise<void> {
+    /*
+     * Revert to varchar(500). Truncate first — option lists written since `up`
+     * ran may exceed 500 characters, and Postgres refuses the narrowing cast
+     * with "value too long for type character varying(500)" rather than
+     * truncating for us.
+     *
+     * This direction is lossy by nature, and worse than it first looks. A
+     * plain newline-separated list loses its overflow and its final option is
+     * left half-written. A list where any option carries a colour is stored as
+     * a single-line JSON array, so clipping it yields a truncated fragment:
+     * parseCustomFieldDropdownOptions sees the leading "[", JSON.parse throws,
+     * and the fallback splits on newline and hands back the whole broken
+     * fragment as ONE option. Such a list has to be re-entered by hand after a
+     * downgrade. That is unavoidable for a narrowing cast, and it is the reason
+     * the forward migration is the one worth having.
+     *
+     * Reverse order of `up`, so the two read as inverses of each other — the
+     * shape 1789800000000-WidenSecurityEventLastErrorColumns.ts established.
+     * Atomicity does not come from the ordering: migrationsTransactionMode is
+     * "each" (DataSourceOptions.ts), so all nine tables commit or roll back
+     * together whichever order they are written in.
+     */
+    await queryRunner.query(
+      `UPDATE "TeamMemberCustomField" SET "dropdownOptions" = LEFT("dropdownOptions", 500) WHERE LENGTH("dropdownOptions") > 500`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "TeamMemberCustomField" ALTER COLUMN "dropdownOptions" TYPE character varying(500)`,
+    );
+    await queryRunner.query(
+      `UPDATE "TeamCustomField" SET "dropdownOptions" = LEFT("dropdownOptions", 500) WHERE LENGTH("dropdownOptions") > 500`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "TeamCustomField" ALTER COLUMN "dropdownOptions" TYPE character varying(500)`,
+    );
+    await queryRunner.query(
+      `UPDATE "StatusPageCustomField" SET "dropdownOptions" = LEFT("dropdownOptions", 500) WHERE LENGTH("dropdownOptions") > 500`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "StatusPageCustomField" ALTER COLUMN "dropdownOptions" TYPE character varying(500)`,
+    );
+    await queryRunner.query(
+      `UPDATE "ScheduledMaintenanceCustomField" SET "dropdownOptions" = LEFT("dropdownOptions", 500) WHERE LENGTH("dropdownOptions") > 500`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "ScheduledMaintenanceCustomField" ALTER COLUMN "dropdownOptions" TYPE character varying(500)`,
+    );
+    await queryRunner.query(
+      `UPDATE "OnCallDutyPolicyCustomField" SET "dropdownOptions" = LEFT("dropdownOptions", 500) WHERE LENGTH("dropdownOptions") > 500`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "OnCallDutyPolicyCustomField" ALTER COLUMN "dropdownOptions" TYPE character varying(500)`,
+    );
+    await queryRunner.query(
+      `UPDATE "MonitorCustomField" SET "dropdownOptions" = LEFT("dropdownOptions", 500) WHERE LENGTH("dropdownOptions") > 500`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "MonitorCustomField" ALTER COLUMN "dropdownOptions" TYPE character varying(500)`,
+    );
+    await queryRunner.query(
+      `UPDATE "InventoryItemCustomField" SET "dropdownOptions" = LEFT("dropdownOptions", 500) WHERE LENGTH("dropdownOptions") > 500`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "InventoryItemCustomField" ALTER COLUMN "dropdownOptions" TYPE character varying(500)`,
+    );
+    await queryRunner.query(
+      `UPDATE "IncidentCustomField" SET "dropdownOptions" = LEFT("dropdownOptions", 500) WHERE LENGTH("dropdownOptions") > 500`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "IncidentCustomField" ALTER COLUMN "dropdownOptions" TYPE character varying(500)`,
+    );
+    await queryRunner.query(
+      `UPDATE "AlertCustomField" SET "dropdownOptions" = LEFT("dropdownOptions", 500) WHERE LENGTH("dropdownOptions") > 500`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "AlertCustomField" ALTER COLUMN "dropdownOptions" TYPE character varying(500)`,
+    );
+  }
+}

package/Server/Infrastructure/Postgres/SchemaMigrations/1791600000000-AddCustomFieldValueMapping.ts

@@ -0,0 +1,121 @@
+import { MigrationInterface, QueryRunner } from "typeorm";
+
+export class AddCustomFieldValueMapping1791600000000
+  implements MigrationInterface
+{
+  public name: string = "AddCustomFieldValueMapping1791600000000";
+
+  public async up(queryRunner: QueryRunner): Promise<void> {
+    await queryRunner.query(
+      `ALTER TABLE "IncidentCustomField" ADD "mapFromResourceType" character varying(100)`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "IncidentCustomField" ADD "mapFromCustomFieldName" character varying(100)`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "MonitorCustomField" ADD "mapFromResourceType" character varying(100)`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "MonitorCustomField" ADD "mapFromCustomFieldName" character varying(100)`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "OnCallDutyPolicyCustomField" ADD "mapFromResourceType" character varying(100)`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "OnCallDutyPolicyCustomField" ADD "mapFromCustomFieldName" character varying(100)`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "ScheduledMaintenanceCustomField" ADD "mapFromResourceType" character varying(100)`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "ScheduledMaintenanceCustomField" ADD "mapFromCustomFieldName" character varying(100)`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "StatusPageCustomField" ADD "mapFromResourceType" character varying(100)`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "StatusPageCustomField" ADD "mapFromCustomFieldName" character varying(100)`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "TeamCustomField" ADD "mapFromResourceType" character varying(100)`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "TeamCustomField" ADD "mapFromCustomFieldName" character varying(100)`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "TeamMemberCustomField" ADD "mapFromResourceType" character varying(100)`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "TeamMemberCustomField" ADD "mapFromCustomFieldName" character varying(100)`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "InventoryItemCustomField" ADD "mapFromResourceType" character varying(100)`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "InventoryItemCustomField" ADD "mapFromCustomFieldName" character varying(100)`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "AlertCustomField" ADD "mapFromResourceType" character varying(100)`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "AlertCustomField" ADD "mapFromCustomFieldName" character varying(100)`,
+    );
+  }
+
+  public async down(queryRunner: QueryRunner): Promise<void> {
+    await queryRunner.query(
+      `ALTER TABLE "AlertCustomField" DROP COLUMN "mapFromCustomFieldName"`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "AlertCustomField" DROP COLUMN "mapFromResourceType"`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "InventoryItemCustomField" DROP COLUMN "mapFromCustomFieldName"`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "InventoryItemCustomField" DROP COLUMN "mapFromResourceType"`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "TeamMemberCustomField" DROP COLUMN "mapFromCustomFieldName"`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "TeamMemberCustomField" DROP COLUMN "mapFromResourceType"`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "TeamCustomField" DROP COLUMN "mapFromCustomFieldName"`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "TeamCustomField" DROP COLUMN "mapFromResourceType"`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "StatusPageCustomField" DROP COLUMN "mapFromCustomFieldName"`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "StatusPageCustomField" DROP COLUMN "mapFromResourceType"`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "ScheduledMaintenanceCustomField" DROP COLUMN "mapFromCustomFieldName"`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "ScheduledMaintenanceCustomField" DROP COLUMN "mapFromResourceType"`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "OnCallDutyPolicyCustomField" DROP COLUMN "mapFromCustomFieldName"`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "OnCallDutyPolicyCustomField" DROP COLUMN "mapFromResourceType"`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "MonitorCustomField" DROP COLUMN "mapFromCustomFieldName"`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "MonitorCustomField" DROP COLUMN "mapFromResourceType"`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "IncidentCustomField" DROP COLUMN "mapFromCustomFieldName"`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "IncidentCustomField" DROP COLUMN "mapFromResourceType"`,
+    );
+  }
+}

package/Server/Infrastructure/Postgres/SchemaMigrations/Index.ts

@@ -566,7 +566,17 @@ import { AddCertificateReissueRequestedAtToDomains1790300000000 } from "./179030
 import { AddOnCallCalendarFeeds1790400000000 } from "./1790400000000-AddOnCallCalendarFeeds";
 import { AddNetworkDeviceOidTemplate1790500000000 } from "./1790500000000-AddNetworkDeviceOidTemplate";
 import { AddAutoImportRuleOidTemplate1790600000000 } from "./1790600000000-AddAutoImportRuleOidTemplate";
+import { AddNetworkSiteTypeParentHierarchy1790700000000 } from "./1790700000000-AddNetworkSiteTypeParentHierarchy";
 import { AddNetworkDeviceRoleTable1790800000000 } from "./1790800000000-AddNetworkDeviceRoleTable";
+import { AddTelemetryExceptionErrorClass1790900000000 } from "./1790900000000-AddTelemetryExceptionErrorClass";
+import { AddEnterpriseLicenseUsageProvenance1790900000000 } from "./1790900000000-AddEnterpriseLicenseUsageProvenance";
+import { AddUserNotificationEmailRollup1791000000000 } from "./1791000000000-AddUserNotificationEmailRollup";
+import { AddUserNotificationEmailRollupSetting1791100000000 } from "./1791100000000-AddUserNotificationEmailRollupSetting";
+import { AddNetworkSnmpCredentialProfilesAndAlertPolicies1791200000000 } from "./1791200000000-AddNetworkSnmpCredentialProfilesAndAlertPolicies";
+import { AddTelemetryIngestionKeyType1791300000000 } from "./1791300000000-AddTelemetryIngestionKeyType";
+import { SessionReplayRecordEverySessionByDefault1791400000000 } from "./1791400000000-SessionReplayRecordEverySessionByDefault";
+import { WidenCustomFieldDropdownOptions1791500000000 } from "./1791500000000-WidenCustomFieldDropdownOptions";
+import { AddCustomFieldValueMapping1791600000000 } from "./1791600000000-AddCustomFieldValueMapping";
 
 export default [
   InitialMigration,
@@ -1137,5 +1147,15 @@ export default [
   AddOnCallCalendarFeeds1790400000000,
   AddNetworkDeviceOidTemplate1790500000000,
   AddAutoImportRuleOidTemplate1790600000000,
+  AddNetworkSiteTypeParentHierarchy1790700000000,
   AddNetworkDeviceRoleTable1790800000000,
+  AddTelemetryExceptionErrorClass1790900000000,
+  AddEnterpriseLicenseUsageProvenance1790900000000,
+  AddUserNotificationEmailRollup1791000000000,
+  AddUserNotificationEmailRollupSetting1791100000000,
+  AddNetworkSnmpCredentialProfilesAndAlertPolicies1791200000000,
+  AddTelemetryIngestionKeyType1791300000000,
+  SessionReplayRecordEverySessionByDefault1791400000000,
+  WidenCustomFieldDropdownOptions1791500000000,
+  AddCustomFieldValueMapping1791600000000,
 ];