@oneuptime/common 12.0.5 → 12.0.7

package/build/dist/Server/API/UserAPI.js

@@ -18,7 +18,7 @@ import BaseAPI from "./BaseAPI";
 const BLANK_PROFILE_PICTURE_PATH = "/usr/src/Common/UI/Images/users/blank-profile.svg";
 export default class UserAPI extends BaseAPI {
     constructor() {
-        var _a, _b, _c;
+        var _a, _b, _c, _d, _e, _f;
         super(User, UserService);
         /*
          * Every project one user belongs to, one row per project, for the Admin
@@ -131,7 +131,99 @@ export default class UserAPI extends BaseAPI {
                 return next(err);
             }
         });
-        this.router.get(`${(_c = new this.entityType().getCrudApiPath()) === null || _c === void 0 ? void 0 : _c.toString()}/profile-picture/:userId`, async (req, res) => {
+        /*
+         * How one user can sign in, for Admin Dashboard > User > Authentication.
+         *
+         * A dedicated endpoint rather than extra columns on the CRUD read, because
+         * the interesting fact -- "does this account have a password at all?" --
+         * cannot be answered from the CRUD API without shipping the password
+         * column itself. A master admin bypasses column read permissions, so
+         * selecting `password` in the browser would put every user's scrypt digest
+         * in a page's network tab. The booleans below are derived server-side and
+         * nothing secret crosses the wire.
+         */
+        this.router.get(`${(_c = new this.entityType().getCrudApiPath()) === null || _c === void 0 ? void 0 : _c.toString()}/:userId/authentication-status`, MasterAdminAuthorization.isAuthorizedMasterAdminMiddleware, async (req, res, next) => {
+            try {
+                const userId = UserAPI.getUserIdFromParams(req);
+                const status = await UserService.getAuthenticationStatus(userId);
+                /*
+                 * Whether an account has a password is exactly the sort of answer a
+                 * shared cache must not keep -- and it changes the moment either
+                 * action below is used.
+                 */
+                Response.setNoCacheHeaders(res);
+                return Response.sendJsonObjectResponse(req, res, status);
+            }
+            catch (err) {
+                return next(err);
+            }
+        });
+        /*
+         * Set a user's password on their behalf.
+         *
+         * Master-admin only, and deliberately its own route rather than a PUT to
+         * /user/:id with a password in it. That generic write would work -- a
+         * master admin bypasses the password column's `update: [CurrentUser]` ACL
+         * -- but nothing about the URL would say so, the password policy could not
+         * be enforced, and the payload would have to be a hand-serialized
+         * HashedString. Here the gate is a middleware anyone can grep for, and the
+         * body is a plain string.
+         *
+         * Session revocation and the "Password Changed." email happen in
+         * UserService's update hook, not here, so they cannot be forgotten by a
+         * caller and cannot fire twice.
+         */
+        this.router.post(`${(_d = new this.entityType().getCrudApiPath()) === null || _d === void 0 ? void 0 : _d.toString()}/:userId/set-password`, MasterAdminAuthorization.isAuthorizedMasterAdminMiddleware, async (req, res, next) => {
+            var _a;
+            try {
+                const userId = UserAPI.getUserIdFromParams(req);
+                const password = (_a = req.body) === null || _a === void 0 ? void 0 : _a["password"];
+                /*
+                 * Type-checked rather than cast. `as string` on a JSON body is a
+                 * lie the moment somebody posts {"password": {...}} or a number, and
+                 * the value flows into the hasher.
+                 */
+                if (typeof password !== "string") {
+                    throw new BadDataException("Password is required");
+                }
+                await UserService.setPassword({
+                    userId: userId,
+                    password: password,
+                });
+                return Response.sendEmptySuccessResponse(req, res);
+            }
+            catch (err) {
+                return next(err);
+            }
+        });
+        /*
+         * Email the user a link that lets them choose their own password.
+         *
+         * The counterpart to setting one for them: it never puts the operator in
+         * possession of the user's credentials, which is the better default when
+         * the point is simply to get somebody back into a locked-out account. The
+         * link is the same one /forgot-password sends, redeemed by the same page.
+         */
+        this.router.post(`${(_e = new this.entityType().getCrudApiPath()) === null || _e === void 0 ? void 0 : _e.toString()}/:userId/send-password-reset-link`, MasterAdminAuthorization.isAuthorizedMasterAdminMiddleware, async (req, res, next) => {
+            try {
+                const userId = UserAPI.getUserIdFromParams(req);
+                const email = await UserService.sendPasswordResetLink({
+                    userId: userId,
+                });
+                /*
+                 * Echoed back so the page can say where the link went. The caller is
+                 * a master admin who can already read this user's email through the
+                 * CRUD API, so this discloses nothing new.
+                 */
+                return Response.sendJsonObjectResponse(req, res, {
+                    email: email.toString(),
+                });
+            }
+            catch (err) {
+                return next(err);
+            }
+        });
+        this.router.get(`${(_f = new this.entityType().getCrudApiPath()) === null || _f === void 0 ? void 0 : _f.toString()}/profile-picture/:userId`, async (req, res) => {
             const userIdParam = req.params["userId"];
             if (!userIdParam) {
                 return this.sendBlankProfile(req, res);

package/build/dist/Server/API/UserAPI.js.map

@@ -1 +1 @@
-{"version":3,"file":"UserAPI.js","sourceRoot":"","sources":["../../../../Server/API/UserAPI.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,kCAAkC,CAAC;AACpD,OAAO,UAAU,MAAM,wCAAwC,CAAC;AAChE,OAAO,IAAI,MAAM,kCAAkC,CAAC;AACpD,OAAO,SAAS,MAAM,iEAAiE,CAAC;AAExF,OAAO,SAAS,EAAE,EAAE,aAAa,EAAE,MAAM,+BAA+B,CAAC;AACzE,OAAO,gBAAgB,MAAM,wCAAwC,CAAC;AACtE,OAAO,iBAAiB,MAAM,yCAAyC,CAAC;AAExE,OAAO,QAAQ,MAAM,sBAAsB,CAAC;AAC5C,OAAO,cAAc,MAAM,4BAA4B,CAAC;AACxD,OAAO,oBAEN,MAAM,kCAAkC,CAAC;AAC1C,OAAO,wBAAwB,MAAM,wCAAwC,CAAC;AAC9E,OAAO,iBAAiB,MAAM,+BAA+B,CAAC;AAC9D,OAAO,WAEN,MAAM,yBAAyB,CAAC;AACjC,OAAO,SAAS,MAAM,aAAa,CAAC;AAOpC,OAAO,MAAM,EAAE,EAAE,2BAA2B,EAAE,MAAM,iBAAiB,CAAC;AACtE,OAAO,QAAQ,MAAM,mBAAmB,CAAC;AACzC,OAAO,OAAO,MAAM,WAAW,CAAC;AAEhC,MAAM,0BAA0B,GAC9B,mDAAmD,CAAC;AAEtD,MAAM,CAAC,OAAO,OAAO,OAAQ,SAAQ,OAA8B;IACjE;;QACE,KAAK,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;QAEzB;;;;;;;;;;;;;;;;WAgBG;QACH,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,GAAG,MAAA,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC,cAAc,EAAE,0CAAE,QAAQ,EAAE,mBAAmB,EACxE,wBAAwB,CAAC,iCAAiC,EAC1D,KAAK,EAAE,GAAmB,EAAE,GAAoB,EAAE,IAAkB,EAAE,EAAE;YACtE,IAAI,CAAC;gBACH,MAAM,MAAM,GAAa,OAAO,CAAC,mBAAmB,CAAC,GAAG,CAAC,CAAC;gBAE1D,MAAM,WAAW,GAAsB,MAAM,iBAAiB,CAAC,MAAM,CACnE;oBACE,KAAK,EAAE;wBACL,MAAM,EAAE,MAAM;qBACf;oBACD,MAAM,EAAE;wBACN,GAAG,EAAE,IAAI;wBACT,SAAS,EAAE,IAAI;wBACf,MAAM,EAAE,IAAI;wBACZ,qBAAqB,EAAE,IAAI;wBAC3B,SAAS,EAAE,IAAI;wBACf,OAAO,EAAE;4BACP,GAAG,EAAE,IAAI;4BACT,IAAI,EAAE,IAAI;4BACV,IAAI,EAAE,IAAI;yBACX;wBACD,IAAI,EAAE;4BACJ,GAAG,EAAE,IAAI;4BACT,IAAI,EAAE,IAAI;yBACX;qBACF;oBACD,KAAK,EAAE,SAAS;oBAChB,IAAI,EAAE,CAAC;oBACP,IAAI,EAAE,EAAE;oBACR,KAAK,EAAE;wBACL,MAAM,EAAE,IAAI;qBACb;iBACF,CACF,CAAC;gBAEF,MAAM,IAAI,GACR,oBAAoB,CAAC,iBAAiB,CACpC,oBAAoB,CAAC,cAAc,CAAC,WAAW,CAAC,CACjD,CAAC;gBAEJ,MAAM,IAAI,GAAW,OAAO,CAAC,uBAAuB,CAClD,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,EACjB,CAAC,CACF,CAAC;gBACF,MAAM,KAAK,GAAW,OAAO,CAAC,uBAAuB,CACnD,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,EAClB,aAAa,CACd,CAAC;gBAEF,MAAM,IAAI,GAAiC,IAAI,CAAC,KAAK,CACnD,IAAI,EACJ,IAAI,GAAG,KAAK,CACb,CAAC;gBAEF,OAAO,QAAQ,CAAC,qBAAqB,CACnC,GAAG,EACH,GAAG,EACH,IAAI,CAAC,GAAG,CAAC,CAAC,GAA0B,EAAE,EAAE;oBACtC,OAAO,OAAO,CAAC,8BAA8B,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;gBAC7D,CAAC,CAAC,EACF,IAAI,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,CAChC,CAAC;YACJ,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC;YACnB,CAAC;QACH,CAAC,CACF,CAAC;QAEF;;;;;;;;;;;;;;;;;;;;;;;;WAwBG;QACH,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,GAAG,MAAA,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC,cAAc,EAAE,0CAAE,QAAQ,EAAE,8BAA8B,EACnF,wBAAwB,CAAC,iCAAiC,EAC1D,KAAK,EAAE,GAAmB,EAAE,GAAoB,EAAE,IAAkB,EAAE,EAAE;;YACtE,IAAI,CAAC;gBACH,MAAM,MAAM,GAAa,OAAO,CAAC,mBAAmB,CAAC,GAAG,CAAC,CAAC;gBAE1D,MAAM,cAAc,GAAW,CAC7B,CAAC,MAAA,GAAG,CAAC,IAAI,0CAAG,WAAW,CAAY,KAAI,EAAE,CAC1C,CAAC,IAAI,EAAE,CAAC;gBAET,IAAI,CAAC,cAAc,EAAE,CAAC;oBACpB,OAAO,QAAQ,CAAC,iBAAiB,CAC/B,GAAG,EACH,GAAG,EACH,IAAI,gBAAgB,CAAC,wBAAwB,CAAC,CAC/C,CAAC;gBACJ,CAAC;gBAED,QAAQ,CAAC,YAAY,CAAC,cAAc,CAAC,CAAC;gBAEtC,MAAM,KAAK,GACT,MAAM,SAAS,CAAC,iCAAiC,CAAC,GAAG,CAAC,CAAC;gBAEzD,MAAM,0BAA0B,GAC9B,MAAM,iBAAiB,CAAC,QAAQ,CAAC;oBAC/B,KAAK,EAAE;wBACL,MAAM,EAAE,MAAM;wBACd,SAAS,EAAE,IAAI,QAAQ,CAAC,cAAc,CAAC;qBACnB;oBACtB,KAAK,EAAE,SAAS;oBAChB,IAAI,EAAE,CAAC;oBACP,KAAK,EAAE,KAAK;iBACb,CAAC,CAAC;gBAEL,OAAO,QAAQ,CAAC,sBAAsB,CAAC,GAAG,EAAE,GAAG,EAAE;oBAC/C,0BAA0B,EAAE,0BAA0B;iBACvD,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC;YACnB,CAAC;QACH,CAAC,CACF,CAAC;QAEF,IAAI,CAAC,MAAM,CAAC,GAAG,CACb,GAAG,MAAA,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC,cAAc,EAAE,0CAAE,QAAQ,EAAE,0BAA0B,EAC/E,KAAK,EAAE,GAAmB,EAAE,GAAoB,EAAE,EAAE;YAClD,MAAM,WAAW,GAAuB,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YAE7D,IAAI,CAAC,WAAW,EAAE,CAAC;gBACjB,OAAO,IAAI,CAAC,gBAAgB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;YACzC,CAAC;YAED,IAAI,MAAgB,CAAC;YAErB,IAAI,CAAC;gBACH,MAAM,GAAG,IAAI,QAAQ,CAAC,WAAW,CAAC,CAAC;YACrC,CAAC;YAAC,WAAM,CAAC;gBACP,OAAO,IAAI,CAAC,gBAAgB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;YACzC,CAAC;YAED,IAAI,CAAC;gBACH,MAAM,oBAAoB,GAOtB;oBACF,kBAAkB,EAAE;wBAClB,GAAG,EAAE,IAAI;wBACT,IAAI,EAAE,IAAI;wBACV,QAAQ,EAAE,IAAI;wBACd,IAAI,EAAE,IAAI;qBACX;iBACF,CAAC;gBAEF,MAAM,QAAQ,GAAgB,MAAM,WAAW,CAAC,SAAS,CAAC;oBACxD,KAAK,EAAE;wBACL,GAAG,EAAE,MAAM;qBACZ;oBACD,MAAM,EAAE,oBAAoB;oBAC5B,KAAK,EAAE;wBACL,MAAM,EAAE,IAAI;qBACb;iBACF,CAAC,CAAC;gBAEH,IAAI,QAAQ,IAAI,QAAQ,CAAC,kBAAkB,EAAE,CAAC;oBAC5C,QAAQ,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC;oBAChC,OAAO,QAAQ,CAAC,gBAAgB,CAC9B,GAAG,EACH,GAAG,EACH,QAAQ,CAAC,kBAAkB,CAC5B,CAAC;gBACJ,CAAC;gBAED,OAAO,IAAI,CAAC,gBAAgB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;YACzC,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,2BAA2B,CAAC,GAAU,CAAC,CAAC,CAAC;gBAC7D,OAAO,IAAI,CAAC,gBAAgB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;YACzC,CAAC;QACH,CAAC,CACF,CAAC;IACJ,CAAC;IAED;;;;;;OAMG;IACK,MAAM,CAAC,mBAAmB,CAAC,GAAmB;QACpD,MAAM,WAAW,GAAW,CAAE,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAY,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QAE5E,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,MAAM,IAAI,gBAAgB,CAAC,qBAAqB,CAAC,CAAC;QACpD,CAAC;QAED,QAAQ,CAAC,YAAY,CAAC,WAAW,CAAC,CAAC;QAEnC,OAAO,IAAI,QAAQ,CAAC,WAAW,CAAC,CAAC;IACnC,CAAC;IAED;;;;;;OAMG;IACK,MAAM,CAAC,uBAAuB,CACpC,KAAc,EACd,QAAgB;QAEhB,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,EAAE,EAAE,CAAC;YAC1D,OAAO,QAAQ,CAAC;QAClB,CAAC;QAED,MAAM,MAAM,GAAW,MAAM,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC;QAEhD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC,EAAE,CAAC;YACxE,OAAO,QAAQ,CAAC;QAClB,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;;;;;;;OAQG;IACK,MAAM,CAAC,8BAA8B,CAC3C,MAAgB,EAChB,GAA0B;QAE1B,MAAM,UAAU,GAAe,IAAI,UAAU,EAAE,CAAC;QAEhD,IAAI,GAAG,CAAC,EAAE,EAAE,CAAC;YACX,UAAU,CAAC,GAAG,GAAG,GAAG,CAAC,EAAE,CAAC;QAC1B,CAAC;QAED,UAAU,CAAC,MAAM,GAAG,MAAM,CAAC;QAC3B,UAAU,CAAC,qBAAqB,GAAG,GAAG,CAAC,qBAAqB,CAAC;QAE7D,IAAI,GAAG,CAAC,SAAS,EAAE,CAAC;YAClB,UAAU,CAAC,SAAS,GAAG,GAAG,CAAC,SAAS,CAAC;QACvC,CAAC;QAED,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC;YAChB,UAAU,CAAC,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC;QACnC,CAAC;QAED,IAAI,GAAG,CAAC,QAAQ,EAAE,CAAC;YACjB,UAAU,CAAC,SAAS,GAAG,GAAG,CAAC,QAAQ,CAAC;QACtC,CAAC;QAED,MAAM,IAAI,GAAe,SAAS,CAAC,MAAM,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;QAElE,IAAI,CAAC,OAAO,CAAC,GAAG,SAAS,CAAC,WAAW,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,CAAc,CAAC;QACpE,IAAI,CAAC,WAAW,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC;QACrC,IAAI,CAAC,kBAAkB,CAAC,GAAG,GAAG,CAAC,gBAAgB,CAAC;QAChD,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC,aAAa,CAAC,CAAC;QAE/C,OAAO,IAAI,CAAC;IACd,CAAC;IAEO,gBAAgB,CAAC,GAAmB,EAAE,GAAoB;QAChE,QAAQ,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC;QAEhC,IAAI,CAAC;YACH,QAAQ,CAAC,cAAc,CAAC,GAAG,EAAE,GAAG,EAAE,0BAA0B,CAAC,CAAC;QAChE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,2BAA2B,CAAC,GAAU,CAAC,CAAC,CAAC;YAC7D,QAAQ,CAAC,iBAAiB,CACxB,GAAG,EACH,GAAG,EACH,IAAI,iBAAiB,CAAC,gCAAgC,CAAC,CACxD,CAAC;QACJ,CAAC;IACH,CAAC;CACF"}
+{"version":3,"file":"UserAPI.js","sourceRoot":"","sources":["../../../../Server/API/UserAPI.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,kCAAkC,CAAC;AACpD,OAAO,UAAU,MAAM,wCAAwC,CAAC;AAChE,OAAO,IAAI,MAAM,kCAAkC,CAAC;AACpD,OAAO,SAAS,MAAM,iEAAiE,CAAC;AAExF,OAAO,SAAS,EAAE,EAAE,aAAa,EAAE,MAAM,+BAA+B,CAAC;AACzE,OAAO,gBAAgB,MAAM,wCAAwC,CAAC;AACtE,OAAO,iBAAiB,MAAM,yCAAyC,CAAC;AAExE,OAAO,QAAQ,MAAM,sBAAsB,CAAC;AAC5C,OAAO,cAAc,MAAM,4BAA4B,CAAC;AACxD,OAAO,oBAEN,MAAM,kCAAkC,CAAC;AAE1C,OAAO,wBAAwB,MAAM,wCAAwC,CAAC;AAC9E,OAAO,iBAAiB,MAAM,+BAA+B,CAAC;AAE9D,OAAO,WAEN,MAAM,yBAAyB,CAAC;AACjC,OAAO,SAAS,MAAM,aAAa,CAAC;AAOpC,OAAO,MAAM,EAAE,EAAE,2BAA2B,EAAE,MAAM,iBAAiB,CAAC;AACtE,OAAO,QAAQ,MAAM,mBAAmB,CAAC;AACzC,OAAO,OAAO,MAAM,WAAW,CAAC;AAEhC,MAAM,0BAA0B,GAC9B,mDAAmD,CAAC;AAEtD,MAAM,CAAC,OAAO,OAAO,OAAQ,SAAQ,OAA8B;IACjE;;QACE,KAAK,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;QAEzB;;;;;;;;;;;;;;;;WAgBG;QACH,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,GAAG,MAAA,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC,cAAc,EAAE,0CAAE,QAAQ,EAAE,mBAAmB,EACxE,wBAAwB,CAAC,iCAAiC,EAC1D,KAAK,EAAE,GAAmB,EAAE,GAAoB,EAAE,IAAkB,EAAE,EAAE;YACtE,IAAI,CAAC;gBACH,MAAM,MAAM,GAAa,OAAO,CAAC,mBAAmB,CAAC,GAAG,CAAC,CAAC;gBAE1D,MAAM,WAAW,GAAsB,MAAM,iBAAiB,CAAC,MAAM,CACnE;oBACE,KAAK,EAAE;wBACL,MAAM,EAAE,MAAM;qBACf;oBACD,MAAM,EAAE;wBACN,GAAG,EAAE,IAAI;wBACT,SAAS,EAAE,IAAI;wBACf,MAAM,EAAE,IAAI;wBACZ,qBAAqB,EAAE,IAAI;wBAC3B,SAAS,EAAE,IAAI;wBACf,OAAO,EAAE;4BACP,GAAG,EAAE,IAAI;4BACT,IAAI,EAAE,IAAI;4BACV,IAAI,EAAE,IAAI;yBACX;wBACD,IAAI,EAAE;4BACJ,GAAG,EAAE,IAAI;4BACT,IAAI,EAAE,IAAI;yBACX;qBACF;oBACD,KAAK,EAAE,SAAS;oBAChB,IAAI,EAAE,CAAC;oBACP,IAAI,EAAE,EAAE;oBACR,KAAK,EAAE;wBACL,MAAM,EAAE,IAAI;qBACb;iBACF,CACF,CAAC;gBAEF,MAAM,IAAI,GACR,oBAAoB,CAAC,iBAAiB,CACpC,oBAAoB,CAAC,cAAc,CAAC,WAAW,CAAC,CACjD,CAAC;gBAEJ,MAAM,IAAI,GAAW,OAAO,CAAC,uBAAuB,CAClD,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,EACjB,CAAC,CACF,CAAC;gBACF,MAAM,KAAK,GAAW,OAAO,CAAC,uBAAuB,CACnD,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,EAClB,aAAa,CACd,CAAC;gBAEF,MAAM,IAAI,GAAiC,IAAI,CAAC,KAAK,CACnD,IAAI,EACJ,IAAI,GAAG,KAAK,CACb,CAAC;gBAEF,OAAO,QAAQ,CAAC,qBAAqB,CACnC,GAAG,EACH,GAAG,EACH,IAAI,CAAC,GAAG,CAAC,CAAC,GAA0B,EAAE,EAAE;oBACtC,OAAO,OAAO,CAAC,8BAA8B,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;gBAC7D,CAAC,CAAC,EACF,IAAI,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,CAChC,CAAC;YACJ,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC;YACnB,CAAC;QACH,CAAC,CACF,CAAC;QAEF;;;;;;;;;;;;;;;;;;;;;;;;WAwBG;QACH,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,GAAG,MAAA,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC,cAAc,EAAE,0CAAE,QAAQ,EAAE,8BAA8B,EACnF,wBAAwB,CAAC,iCAAiC,EAC1D,KAAK,EAAE,GAAmB,EAAE,GAAoB,EAAE,IAAkB,EAAE,EAAE;;YACtE,IAAI,CAAC;gBACH,MAAM,MAAM,GAAa,OAAO,CAAC,mBAAmB,CAAC,GAAG,CAAC,CAAC;gBAE1D,MAAM,cAAc,GAAW,CAC7B,CAAC,MAAA,GAAG,CAAC,IAAI,0CAAG,WAAW,CAAY,KAAI,EAAE,CAC1C,CAAC,IAAI,EAAE,CAAC;gBAET,IAAI,CAAC,cAAc,EAAE,CAAC;oBACpB,OAAO,QAAQ,CAAC,iBAAiB,CAC/B,GAAG,EACH,GAAG,EACH,IAAI,gBAAgB,CAAC,wBAAwB,CAAC,CAC/C,CAAC;gBACJ,CAAC;gBAED,QAAQ,CAAC,YAAY,CAAC,cAAc,CAAC,CAAC;gBAEtC,MAAM,KAAK,GACT,MAAM,SAAS,CAAC,iCAAiC,CAAC,GAAG,CAAC,CAAC;gBAEzD,MAAM,0BAA0B,GAC9B,MAAM,iBAAiB,CAAC,QAAQ,CAAC;oBAC/B,KAAK,EAAE;wBACL,MAAM,EAAE,MAAM;wBACd,SAAS,EAAE,IAAI,QAAQ,CAAC,cAAc,CAAC;qBACnB;oBACtB,KAAK,EAAE,SAAS;oBAChB,IAAI,EAAE,CAAC;oBACP,KAAK,EAAE,KAAK;iBACb,CAAC,CAAC;gBAEL,OAAO,QAAQ,CAAC,sBAAsB,CAAC,GAAG,EAAE,GAAG,EAAE;oBAC/C,0BAA0B,EAAE,0BAA0B;iBACvD,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC;YACnB,CAAC;QACH,CAAC,CACF,CAAC;QAEF;;;;;;;;;;WAUG;QACH,IAAI,CAAC,MAAM,CAAC,GAAG,CACb,GAAG,MAAA,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC,cAAc,EAAE,0CAAE,QAAQ,EAAE,gCAAgC,EACrF,wBAAwB,CAAC,iCAAiC,EAC1D,KAAK,EAAE,GAAmB,EAAE,GAAoB,EAAE,IAAkB,EAAE,EAAE;YACtE,IAAI,CAAC;gBACH,MAAM,MAAM,GAAa,OAAO,CAAC,mBAAmB,CAAC,GAAG,CAAC,CAAC;gBAE1D,MAAM,MAAM,GACV,MAAM,WAAW,CAAC,uBAAuB,CAAC,MAAM,CAAC,CAAC;gBAEpD;;;;mBAIG;gBACH,QAAQ,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC;gBAEhC,OAAO,QAAQ,CAAC,sBAAsB,CACpC,GAAG,EACH,GAAG,EACH,MAA+B,CAChC,CAAC;YACJ,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC;YACnB,CAAC;QACH,CAAC,CACF,CAAC;QAEF;;;;;;;;;;;;;;WAcG;QACH,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,GAAG,MAAA,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC,cAAc,EAAE,0CAAE,QAAQ,EAAE,uBAAuB,EAC5E,wBAAwB,CAAC,iCAAiC,EAC1D,KAAK,EAAE,GAAmB,EAAE,GAAoB,EAAE,IAAkB,EAAE,EAAE;;YACtE,IAAI,CAAC;gBACH,MAAM,MAAM,GAAa,OAAO,CAAC,mBAAmB,CAAC,GAAG,CAAC,CAAC;gBAE1D,MAAM,QAAQ,GAAY,MAAA,GAAG,CAAC,IAAI,0CAAG,UAAU,CAAC,CAAC;gBAEjD;;;;mBAIG;gBACH,IAAI,OAAO,QAAQ,KAAK,QAAQ,EAAE,CAAC;oBACjC,MAAM,IAAI,gBAAgB,CAAC,sBAAsB,CAAC,CAAC;gBACrD,CAAC;gBAED,MAAM,WAAW,CAAC,WAAW,CAAC;oBAC5B,MAAM,EAAE,MAAM;oBACd,QAAQ,EAAE,QAAQ;iBACnB,CAAC,CAAC;gBAEH,OAAO,QAAQ,CAAC,wBAAwB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;YACrD,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC;YACnB,CAAC;QACH,CAAC,CACF,CAAC;QAEF;;;;;;;WAOG;QACH,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,GAAG,MAAA,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC,cAAc,EAAE,0CAAE,QAAQ,EAAE,mCAAmC,EACxF,wBAAwB,CAAC,iCAAiC,EAC1D,KAAK,EAAE,GAAmB,EAAE,GAAoB,EAAE,IAAkB,EAAE,EAAE;YACtE,IAAI,CAAC;gBACH,MAAM,MAAM,GAAa,OAAO,CAAC,mBAAmB,CAAC,GAAG,CAAC,CAAC;gBAE1D,MAAM,KAAK,GAAU,MAAM,WAAW,CAAC,qBAAqB,CAAC;oBAC3D,MAAM,EAAE,MAAM;iBACf,CAAC,CAAC;gBAEH;;;;mBAIG;gBACH,OAAO,QAAQ,CAAC,sBAAsB,CAAC,GAAG,EAAE,GAAG,EAAE;oBAC/C,KAAK,EAAE,KAAK,CAAC,QAAQ,EAAE;iBACxB,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC;YACnB,CAAC;QACH,CAAC,CACF,CAAC;QAEF,IAAI,CAAC,MAAM,CAAC,GAAG,CACb,GAAG,MAAA,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC,cAAc,EAAE,0CAAE,QAAQ,EAAE,0BAA0B,EAC/E,KAAK,EAAE,GAAmB,EAAE,GAAoB,EAAE,EAAE;YAClD,MAAM,WAAW,GAAuB,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YAE7D,IAAI,CAAC,WAAW,EAAE,CAAC;gBACjB,OAAO,IAAI,CAAC,gBAAgB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;YACzC,CAAC;YAED,IAAI,MAAgB,CAAC;YAErB,IAAI,CAAC;gBACH,MAAM,GAAG,IAAI,QAAQ,CAAC,WAAW,CAAC,CAAC;YACrC,CAAC;YAAC,WAAM,CAAC;gBACP,OAAO,IAAI,CAAC,gBAAgB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;YACzC,CAAC;YAED,IAAI,CAAC;gBACH,MAAM,oBAAoB,GAOtB;oBACF,kBAAkB,EAAE;wBAClB,GAAG,EAAE,IAAI;wBACT,IAAI,EAAE,IAAI;wBACV,QAAQ,EAAE,IAAI;wBACd,IAAI,EAAE,IAAI;qBACX;iBACF,CAAC;gBAEF,MAAM,QAAQ,GAAgB,MAAM,WAAW,CAAC,SAAS,CAAC;oBACxD,KAAK,EAAE;wBACL,GAAG,EAAE,MAAM;qBACZ;oBACD,MAAM,EAAE,oBAAoB;oBAC5B,KAAK,EAAE;wBACL,MAAM,EAAE,IAAI;qBACb;iBACF,CAAC,CAAC;gBAEH,IAAI,QAAQ,IAAI,QAAQ,CAAC,kBAAkB,EAAE,CAAC;oBAC5C,QAAQ,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC;oBAChC,OAAO,QAAQ,CAAC,gBAAgB,CAC9B,GAAG,EACH,GAAG,EACH,QAAQ,CAAC,kBAAkB,CAC5B,CAAC;gBACJ,CAAC;gBAED,OAAO,IAAI,CAAC,gBAAgB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;YACzC,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,2BAA2B,CAAC,GAAU,CAAC,CAAC,CAAC;gBAC7D,OAAO,IAAI,CAAC,gBAAgB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;YACzC,CAAC;QACH,CAAC,CACF,CAAC;IACJ,CAAC;IAED;;;;;;OAMG;IACK,MAAM,CAAC,mBAAmB,CAAC,GAAmB;QACpD,MAAM,WAAW,GAAW,CAAE,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAY,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QAE5E,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,MAAM,IAAI,gBAAgB,CAAC,qBAAqB,CAAC,CAAC;QACpD,CAAC;QAED,QAAQ,CAAC,YAAY,CAAC,WAAW,CAAC,CAAC;QAEnC,OAAO,IAAI,QAAQ,CAAC,WAAW,CAAC,CAAC;IACnC,CAAC;IAED;;;;;;OAMG;IACK,MAAM,CAAC,uBAAuB,CACpC,KAAc,EACd,QAAgB;QAEhB,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,EAAE,EAAE,CAAC;YAC1D,OAAO,QAAQ,CAAC;QAClB,CAAC;QAED,MAAM,MAAM,GAAW,MAAM,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC;QAEhD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC,EAAE,CAAC;YACxE,OAAO,QAAQ,CAAC;QAClB,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;;;;;;;OAQG;IACK,MAAM,CAAC,8BAA8B,CAC3C,MAAgB,EAChB,GAA0B;QAE1B,MAAM,UAAU,GAAe,IAAI,UAAU,EAAE,CAAC;QAEhD,IAAI,GAAG,CAAC,EAAE,EAAE,CAAC;YACX,UAAU,CAAC,GAAG,GAAG,GAAG,CAAC,EAAE,CAAC;QAC1B,CAAC;QAED,UAAU,CAAC,MAAM,GAAG,MAAM,CAAC;QAC3B,UAAU,CAAC,qBAAqB,GAAG,GAAG,CAAC,qBAAqB,CAAC;QAE7D,IAAI,GAAG,CAAC,SAAS,EAAE,CAAC;YAClB,UAAU,CAAC,SAAS,GAAG,GAAG,CAAC,SAAS,CAAC;QACvC,CAAC;QAED,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC;YAChB,UAAU,CAAC,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC;QACnC,CAAC;QAED,IAAI,GAAG,CAAC,QAAQ,EAAE,CAAC;YACjB,UAAU,CAAC,SAAS,GAAG,GAAG,CAAC,QAAQ,CAAC;QACtC,CAAC;QAED,MAAM,IAAI,GAAe,SAAS,CAAC,MAAM,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;QAElE,IAAI,CAAC,OAAO,CAAC,GAAG,SAAS,CAAC,WAAW,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,CAAc,CAAC;QACpE,IAAI,CAAC,WAAW,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC;QACrC,IAAI,CAAC,kBAAkB,CAAC,GAAG,GAAG,CAAC,gBAAgB,CAAC;QAChD,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC,aAAa,CAAC,CAAC;QAE/C,OAAO,IAAI,CAAC;IACd,CAAC;IAEO,gBAAgB,CAAC,GAAmB,EAAE,GAAoB;QAChE,QAAQ,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC;QAEhC,IAAI,CAAC;YACH,QAAQ,CAAC,cAAc,CAAC,GAAG,EAAE,GAAG,EAAE,0BAA0B,CAAC,CAAC;QAChE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,2BAA2B,CAAC,GAAU,CAAC,CAAC,CAAC;YAC7D,QAAQ,CAAC,iBAAiB,CACxB,GAAG,EACH,GAAG,EACH,IAAI,iBAAiB,CAAC,gCAAgC,CAAC,CACxD,CAAC;QACJ,CAAC;IACH,CAAC;CACF"}

package/build/dist/Server/Infrastructure/ClickhouseConfig.js

@@ -4,6 +4,42 @@ import Hostname from "../../Types/API/Hostname";
 const hostProtocol = ClickHouseIsHostHttps ? "https" : "http";
 const clickhouseHost = ClickhouseHost || new Hostname("clickhouse");
 const clickhousePort = (ClickhousePort || 8123).toString();
+/*
+ * How long the client keeps an idle pooled HTTP socket alive before
+ * destroying it (keep_alive.idle_socket_ttl). @clickhouse/client enables
+ * keep-alive by default but expires idle sockets after only 2500ms, while
+ * the telemetry fan-in writer's flush window (TELEMETRY_FANIN_MAX_WAIT_MS,
+ * see TelemetryFanInWriter.ts) defaults to 5000ms — so under sub-saturation
+ * ingest load every pooled socket was destroyed between flushes and every
+ * flush paid TCP (+TLS) connection setup again. The default here is bounded
+ * on both sides:
+ *
+ *   - ABOVE the 5000ms fan-in flush window, so the socket a flush opened is
+ *     still alive when the next flush fires and gets reused instead of
+ *     being re-established;
+ *   - BELOW the ClickHouse server's keep_alive_timeout of 10s (the bundled
+ *     Clickhouse/config.xml pins <keep_alive_timeout>10</keep_alive_timeout>,
+ *     which is also the server default since 23.11), so the CLIENT always
+ *     retires an idle socket before the SERVER does. Operators who lower
+ *     the server's keep_alive_timeout below this TTL must lower
+ *     CLICKHOUSE_KEEP_ALIVE_IDLE_SOCKET_TTL_MS along with it (keeping it a
+ *     fair bit under the server value) — otherwise the client reuses
+ *     sockets the server has already closed and requests fail with
+ *     ECONNRESET.
+ *
+ * The value must be a positive number of milliseconds; unset, non-numeric,
+ * zero and negative values all fall back to the default. Zero is rejected
+ * deliberately: the client treats 0 as "disable idle-socket reaping
+ * entirely", which reintroduces the server-closes-first ECONNRESET failure
+ * mode this TTL exists to prevent.
+ */
+const DEFAULT_KEEP_ALIVE_IDLE_SOCKET_TTL_MS = 8000;
+const keepAliveIdleSocketTtlRawValue = (process.env["CLICKHOUSE_KEEP_ALIVE_IDLE_SOCKET_TTL_MS"] || "").trim();
+const keepAliveIdleSocketTtlParsedValue = parseInt(keepAliveIdleSocketTtlRawValue, 10);
+const keepAliveIdleSocketTtlInMs = Number.isFinite(keepAliveIdleSocketTtlParsedValue) &&
+    keepAliveIdleSocketTtlParsedValue > 0
+    ? keepAliveIdleSocketTtlParsedValue
+    : DEFAULT_KEEP_ALIVE_IDLE_SOCKET_TTL_MS;
 const options = {
     url: `${hostProtocol}://${clickhouseHost.toString()}:${clickhousePort}`,
     username: ClickhouseUsername,
@@ -53,6 +89,19 @@ const options = {
         request: true,
         response: true,
     },
+    /*
+     * Reuse pooled sockets across fan-in flush windows — see the note on
+     * keepAliveIdleSocketTtlInMs above for both bounds on the TTL and the
+     * operator warning about the server's keep_alive_timeout. `enabled: true`
+     * restates the client default explicitly so the pairing with
+     * idle_socket_ttl is visible here rather than implied. This lives on the
+     * shared `options` object, so every pool derived from it (query, ingest,
+     * migration, test) gets the same keep-alive behavior.
+     */
+    keep_alive: {
+        enabled: true,
+        idle_socket_ttl: keepAliveIdleSocketTtlInMs,
+    },
 };
 if (ShouldClickhouseSslEnable && ClickhouseTlsCa) {
     options.tls = {

package/build/dist/Server/Infrastructure/ClickhouseConfig.js.map

@@ -1 +1 @@
-{"version":3,"file":"ClickhouseConfig.js","sourceRoot":"","sources":["../../../../Server/Infrastructure/ClickhouseConfig.ts"],"names":[],"mappings":"AACA,OAAO,EACL,qBAAqB,EACrB,kBAAkB,EAClB,cAAc,EACd,kBAAkB,EAClB,cAAc,EACd,eAAe,EACf,iBAAiB,EACjB,gBAAgB,EAChB,kBAAkB,EAClB,wBAAwB,EACxB,8BAA8B,EAC9B,yBAAyB,GAC1B,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,mCAAmC,EAAE,MAAM,0CAA0C,CAAC;AAC/F,OAAO,QAAQ,MAAM,0BAA0B,CAAC;AAIhD,MAAM,YAAY,GAAW,qBAAqB,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC;AAEtE,MAAM,cAAc,GAAa,cAAc,IAAI,IAAI,QAAQ,CAAC,YAAY,CAAC,CAAC;AAC9E,MAAM,cAAc,GAAW,CAAC,cAAc,IAAI,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC;AAEnE,MAAM,OAAO,GAAkC;IAC7C,GAAG,EAAE,GAAG,YAAY,MAAM,cAAc,CAAC,QAAQ,EAAE,IAAI,cAAc,EAAE;IACvE,QAAQ,EAAE,kBAAkB;IAC5B,QAAQ,EAAE,kBAAkB;IAC5B,QAAQ,EAAE,kBAAkB;IAC5B,WAAW,EAAE,WAAW;IACxB;;;;;;;;;;;;;;;;;;;OAmBG;IACH,eAAe,EAAE,KAAM;IACvB;;;;;OAKG;IACH,oBAAoB,EAAE,wBAAwB;IAC9C;;;;;;;;;;OAUG;IACH,WAAW,EAAE;QACX,OAAO,EAAE,IAAI;QACb,QAAQ,EAAE,IAAI;KACf;CACF,CAAC;AAEF,IAAI,yBAAyB,IAAI,eAAe,EAAE,CAAC;IACjD,OAAO,CAAC,GAAG,GAAG;QACZ,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC;KACtC,CAAC;AACJ,CAAC;AAED,IACE,yBAAyB;IACzB,eAAe;IACf,iBAAiB;IACjB,gBAAgB,EAChB,CAAC;IACD,OAAO,CAAC,GAAG,GAAG;QACZ,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC;QACrC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC;QACpC,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC;KACnC,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,MAAM,iBAAiB,GAAkC,OAAO,CAAC;AAExE,MAAM,CAAC,MAAM,uBAAuB,mCAC/B,OAAO,KACV,oBAAoB,EAAE,8BAA8B,GACrD,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,MAAM,2BAA2B,GAAW,IAAI,CAAC,GAAG,CAClD,EAAE,GAAG,EAAE,GAAG,IAAI,EAAE,kBAAkB;AAClC,CAAC,mCAAmC,EAAE,GAAG,GAAG,CAAC,GAAG,IAAI,CACrD,CAAC;AAEF,MAAM,CAAC,MAAM,0BAA0B,mCAClC,OAAO,KACV,eAAe,EAAE,2BAA2B,GAC7C,CAAC;AAEF,MAAM,CAAC,MAAM,qBAAqB,GAChC,iBAAiB,CAAC"}
+{"version":3,"file":"ClickhouseConfig.js","sourceRoot":"","sources":["../../../../Server/Infrastructure/ClickhouseConfig.ts"],"names":[],"mappings":"AACA,OAAO,EACL,qBAAqB,EACrB,kBAAkB,EAClB,cAAc,EACd,kBAAkB,EAClB,cAAc,EACd,eAAe,EACf,iBAAiB,EACjB,gBAAgB,EAChB,kBAAkB,EAClB,wBAAwB,EACxB,8BAA8B,EAC9B,yBAAyB,GAC1B,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,mCAAmC,EAAE,MAAM,0CAA0C,CAAC;AAC/F,OAAO,QAAQ,MAAM,0BAA0B,CAAC;AAIhD,MAAM,YAAY,GAAW,qBAAqB,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC;AAEtE,MAAM,cAAc,GAAa,cAAc,IAAI,IAAI,QAAQ,CAAC,YAAY,CAAC,CAAC;AAC9E,MAAM,cAAc,GAAW,CAAC,cAAc,IAAI,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC;AAEnE;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,MAAM,qCAAqC,GAAW,IAAI,CAAC;AAE3D,MAAM,8BAA8B,GAAW,CAC7C,OAAO,CAAC,GAAG,CAAC,0CAA0C,CAAC,IAAI,EAAE,CAC9D,CAAC,IAAI,EAAE,CAAC;AAET,MAAM,iCAAiC,GAAW,QAAQ,CACxD,8BAA8B,EAC9B,EAAE,CACH,CAAC;AAEF,MAAM,0BAA0B,GAC9B,MAAM,CAAC,QAAQ,CAAC,iCAAiC,CAAC;IAClD,iCAAiC,GAAG,CAAC;IACnC,CAAC,CAAC,iCAAiC;IACnC,CAAC,CAAC,qCAAqC,CAAC;AAE5C,MAAM,OAAO,GAAkC;IAC7C,GAAG,EAAE,GAAG,YAAY,MAAM,cAAc,CAAC,QAAQ,EAAE,IAAI,cAAc,EAAE;IACvE,QAAQ,EAAE,kBAAkB;IAC5B,QAAQ,EAAE,kBAAkB;IAC5B,QAAQ,EAAE,kBAAkB;IAC5B,WAAW,EAAE,WAAW;IACxB;;;;;;;;;;;;;;;;;;;OAmBG;IACH,eAAe,EAAE,KAAM;IACvB;;;;;OAKG;IACH,oBAAoB,EAAE,wBAAwB;IAC9C;;;;;;;;;;OAUG;IACH,WAAW,EAAE;QACX,OAAO,EAAE,IAAI;QACb,QAAQ,EAAE,IAAI;KACf;IACD;;;;;;;;OAQG;IACH,UAAU,EAAE;QACV,OAAO,EAAE,IAAI;QACb,eAAe,EAAE,0BAA0B;KAC5C;CACF,CAAC;AAEF,IAAI,yBAAyB,IAAI,eAAe,EAAE,CAAC;IACjD,OAAO,CAAC,GAAG,GAAG;QACZ,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC;KACtC,CAAC;AACJ,CAAC;AAED,IACE,yBAAyB;IACzB,eAAe;IACf,iBAAiB;IACjB,gBAAgB,EAChB,CAAC;IACD,OAAO,CAAC,GAAG,GAAG;QACZ,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC;QACrC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC;QACpC,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC;KACnC,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,MAAM,iBAAiB,GAAkC,OAAO,CAAC;AAExE,MAAM,CAAC,MAAM,uBAAuB,mCAC/B,OAAO,KACV,oBAAoB,EAAE,8BAA8B,GACrD,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,MAAM,2BAA2B,GAAW,IAAI,CAAC,GAAG,CAClD,EAAE,GAAG,EAAE,GAAG,IAAI,EAAE,kBAAkB;AAClC,CAAC,mCAAmC,EAAE,GAAG,GAAG,CAAC,GAAG,IAAI,CACrD,CAAC;AAEF,MAAM,CAAC,MAAM,0BAA0B,mCAClC,OAAO,KACV,eAAe,EAAE,2BAA2B,GAC7C,CAAC;AAEF,MAAM,CAAC,MAAM,qBAAqB,GAChC,iBAAiB,CAAC"}

package/build/dist/Server/Infrastructure/Postgres/SchemaMigrations/1786303472848-AddDataSourceTable.js

@@ -0,0 +1,20 @@
+export class AddDataSourceTable1786303472848 {
+    constructor() {
+        this.name = "AddDataSourceTable1786303472848";
+    }
+    async up(queryRunner) {
+        await queryRunner.query(`CREATE TABLE "DataSource" ("_id" uuid NOT NULL DEFAULT uuid_generate_v4(), "createdAt" TIMESTAMP WITH TIME ZONE NOT NULL DEFAULT now(), "updatedAt" TIMESTAMP WITH TIME ZONE NOT NULL DEFAULT now(), "deletedAt" TIMESTAMP WITH TIME ZONE, "version" integer NOT NULL, "projectId" uuid NOT NULL, "name" character varying(100) NOT NULL, "slug" character varying(100) NOT NULL, "description" character varying(500), "dataSourceType" character varying(100) NOT NULL, "url" character varying, "databaseHost" character varying(100), "databasePort" integer, "databaseName" character varying(100), "username" character varying(100), "password" text, "apiToken" text, "customHeaders" jsonb, "additionalOptions" jsonb, "createdByUserId" uuid, "deletedByUserId" uuid, CONSTRAINT "PK_49141becafea4a0574d9b5219ca" PRIMARY KEY ("_id"))`);
+        await queryRunner.query(`CREATE INDEX "IDX_0e559ea9d7fbc66d014a29c380" ON "DataSource" ("projectId") `);
+        await queryRunner.query(`ALTER TABLE "DataSource" ADD CONSTRAINT "FK_0e559ea9d7fbc66d014a29c3804" FOREIGN KEY ("projectId") REFERENCES "Project"("_id") ON DELETE CASCADE ON UPDATE NO ACTION`);
+        await queryRunner.query(`ALTER TABLE "DataSource" ADD CONSTRAINT "FK_38843f53e5ca0ce0bf4de525d6f" FOREIGN KEY ("createdByUserId") REFERENCES "User"("_id") ON DELETE SET NULL ON UPDATE NO ACTION`);
+        await queryRunner.query(`ALTER TABLE "DataSource" ADD CONSTRAINT "FK_29f0d663494b52c4ed2c0cc8e88" FOREIGN KEY ("deletedByUserId") REFERENCES "User"("_id") ON DELETE SET NULL ON UPDATE NO ACTION`);
+    }
+    async down(queryRunner) {
+        await queryRunner.query(`ALTER TABLE "DataSource" DROP CONSTRAINT "FK_29f0d663494b52c4ed2c0cc8e88"`);
+        await queryRunner.query(`ALTER TABLE "DataSource" DROP CONSTRAINT "FK_38843f53e5ca0ce0bf4de525d6f"`);
+        await queryRunner.query(`ALTER TABLE "DataSource" DROP CONSTRAINT "FK_0e559ea9d7fbc66d014a29c3804"`);
+        await queryRunner.query(`DROP INDEX "public"."IDX_0e559ea9d7fbc66d014a29c380"`);
+        await queryRunner.query(`DROP TABLE "DataSource"`);
+    }
+}
+//# sourceMappingURL=1786303472848-AddDataSourceTable.js.map

package/build/dist/Server/Infrastructure/Postgres/SchemaMigrations/1786303472848-AddDataSourceTable.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"1786303472848-AddDataSourceTable.js","sourceRoot":"","sources":["../../../../../../Server/Infrastructure/Postgres/SchemaMigrations/1786303472848-AddDataSourceTable.ts"],"names":[],"mappings":"AAEA,MAAM,OAAO,+BAA+B;IAA5C;QACS,SAAI,GAAW,iCAAiC,CAAC;IAmC1D,CAAC;IAjCQ,KAAK,CAAC,EAAE,CAAC,WAAwB;QACtC,MAAM,WAAW,CAAC,KAAK,CACrB,kzBAAkzB,CACnzB,CAAC;QACF,MAAM,WAAW,CAAC,KAAK,CACrB,8EAA8E,CAC/E,CAAC;QACF,MAAM,WAAW,CAAC,KAAK,CACrB,sKAAsK,CACvK,CAAC;QACF,MAAM,WAAW,CAAC,KAAK,CACrB,0KAA0K,CAC3K,CAAC;QACF,MAAM,WAAW,CAAC,KAAK,CACrB,0KAA0K,CAC3K,CAAC;IACJ,CAAC;IAEM,KAAK,CAAC,IAAI,CAAC,WAAwB;QACxC,MAAM,WAAW,CAAC,KAAK,CACrB,2EAA2E,CAC5E,CAAC;QACF,MAAM,WAAW,CAAC,KAAK,CACrB,2EAA2E,CAC5E,CAAC;QACF,MAAM,WAAW,CAAC,KAAK,CACrB,2EAA2E,CAC5E,CAAC;QACF,MAAM,WAAW,CAAC,KAAK,CACrB,sDAAsD,CACvD,CAAC;QACF,MAAM,WAAW,CAAC,KAAK,CAAC,yBAAyB,CAAC,CAAC;IACrD,CAAC;CACF"}

package/build/dist/Server/Infrastructure/Postgres/SchemaMigrations/1786446545142-MigrationName.js

@@ -0,0 +1,34 @@
+export class MigrationName1786446545142 {
+    constructor() {
+        this.name = "MigrationName1786446545142";
+    }
+    async up(queryRunner) {
+        /*
+         * "File"."isPublic" backs a `boolean` field but was created as varchar,
+         * so every row holds the STRING 'true'/'false' and every server-side
+         * `!file.isPublic` gate was inert — 'false' is truthy in JS.
+         *
+         * Convert in place. TypeORM generates a DROP COLUMN + ADD COLUMN for
+         * this change, which would discard every stored value and re-default
+         * the whole table to public — the exact opposite of the fix.
+         */
+        await queryRunner.query(`ALTER TABLE "File" ALTER COLUMN "isPublic" DROP DEFAULT`);
+        await queryRunner.query(`ALTER TABLE "File" ALTER COLUMN "isPublic" TYPE boolean USING (lower("isPublic") IN ('true', 't', 'yes', 'y', '1'))`);
+        await queryRunner.query(`ALTER TABLE "File" ALTER COLUMN "isPublic" SET DEFAULT true`);
+        /*
+         * Probe and AI agent icons are the only consumers of the id-based
+         * image route, which serves public files only. Both upload through the
+         * file picker, which marks uploads private, so every icon attached
+         * before this migration would 404 once the gate starts working.
+         * ProbeService/AIAgentService now flip the icon public on attach; this
+         * backfills the rows attached before that hook existed.
+         */
+        await queryRunner.query(`UPDATE "File" SET "isPublic" = true WHERE "_id" IN (SELECT "iconFileId" FROM "Probe" WHERE "iconFileId" IS NOT NULL UNION SELECT "iconFileId" FROM "AIAgent" WHERE "iconFileId" IS NOT NULL)`);
+    }
+    async down(queryRunner) {
+        await queryRunner.query(`ALTER TABLE "File" ALTER COLUMN "isPublic" DROP DEFAULT`);
+        await queryRunner.query(`ALTER TABLE "File" ALTER COLUMN "isPublic" TYPE character varying(100) USING (CASE WHEN "isPublic" THEN 'true' ELSE 'false' END)`);
+        await queryRunner.query(`ALTER TABLE "File" ALTER COLUMN "isPublic" SET DEFAULT true`);
+    }
+}
+//# sourceMappingURL=1786446545142-MigrationName.js.map

package/build/dist/Server/Infrastructure/Postgres/SchemaMigrations/1786446545142-MigrationName.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"1786446545142-MigrationName.js","sourceRoot":"","sources":["../../../../../../Server/Infrastructure/Postgres/SchemaMigrations/1786446545142-MigrationName.ts"],"names":[],"mappings":"AAEA,MAAM,OAAO,0BAA0B;IAAvC;QACS,SAAI,GAAG,4BAA4B,CAAC;IA8C7C,CAAC;IA5CQ,KAAK,CAAC,EAAE,CAAC,WAAwB;QACtC;;;;;;;;WAQG;QACH,MAAM,WAAW,CAAC,KAAK,CACrB,yDAAyD,CAC1D,CAAC;QACF,MAAM,WAAW,CAAC,KAAK,CACrB,qHAAqH,CACtH,CAAC;QACF,MAAM,WAAW,CAAC,KAAK,CACrB,6DAA6D,CAC9D,CAAC;QAEF;;;;;;;WAOG;QACH,MAAM,WAAW,CAAC,KAAK,CACrB,8LAA8L,CAC/L,CAAC;IACJ,CAAC;IAEM,KAAK,CAAC,IAAI,CAAC,WAAwB;QACxC,MAAM,WAAW,CAAC,KAAK,CACrB,yDAAyD,CAC1D,CAAC;QACF,MAAM,WAAW,CAAC,KAAK,CACrB,kIAAkI,CACnI,CAAC;QACF,MAAM,WAAW,CAAC,KAAK,CACrB,6DAA6D,CAC9D,CAAC;IACJ,CAAC;CACF"}

package/build/dist/Server/Infrastructure/Postgres/SchemaMigrations/1786449497966-AddMonitorDependency.js

@@ -0,0 +1,30 @@
+export class AddMonitorDependency1786449497966 {
+    constructor() {
+        this.name = "AddMonitorDependency1786449497966";
+    }
+    async up(queryRunner) {
+        await queryRunner.query(`CREATE TABLE "MonitorDependency" ("monitorId" uuid NOT NULL, "dependsOnMonitorId" uuid NOT NULL, CONSTRAINT "PK_26790391f134c5a87b2aa70a902" PRIMARY KEY ("monitorId", "dependsOnMonitorId"))`);
+        await queryRunner.query(`CREATE INDEX "IDX_953533a93dba2f345283474c60" ON "MonitorDependency" ("monitorId") `);
+        await queryRunner.query(`CREATE INDEX "IDX_43f849731e1bda0ada73b3d887" ON "MonitorDependency" ("dependsOnMonitorId") `);
+        await queryRunner.query(`CREATE TABLE "MonitorDependencySuppressionStatus" ("monitorId" uuid NOT NULL, "monitorStatusId" uuid NOT NULL, CONSTRAINT "PK_2889f58c301e8a07d46dd82382c" PRIMARY KEY ("monitorId", "monitorStatusId"))`);
+        await queryRunner.query(`CREATE INDEX "IDX_747378c59669e4639c4209adc7" ON "MonitorDependencySuppressionStatus" ("monitorId") `);
+        await queryRunner.query(`CREATE INDEX "IDX_354bf0c679a6dfd64910eb6441" ON "MonitorDependencySuppressionStatus" ("monitorStatusId") `);
+        await queryRunner.query(`ALTER TABLE "MonitorDependency" ADD CONSTRAINT "FK_953533a93dba2f345283474c60f" FOREIGN KEY ("monitorId") REFERENCES "Monitor"("_id") ON DELETE CASCADE ON UPDATE CASCADE`);
+        await queryRunner.query(`ALTER TABLE "MonitorDependency" ADD CONSTRAINT "FK_43f849731e1bda0ada73b3d8874" FOREIGN KEY ("dependsOnMonitorId") REFERENCES "Monitor"("_id") ON DELETE CASCADE ON UPDATE CASCADE`);
+        await queryRunner.query(`ALTER TABLE "MonitorDependencySuppressionStatus" ADD CONSTRAINT "FK_747378c59669e4639c4209adc78" FOREIGN KEY ("monitorId") REFERENCES "Monitor"("_id") ON DELETE CASCADE ON UPDATE CASCADE`);
+        await queryRunner.query(`ALTER TABLE "MonitorDependencySuppressionStatus" ADD CONSTRAINT "FK_354bf0c679a6dfd64910eb64418" FOREIGN KEY ("monitorStatusId") REFERENCES "MonitorStatus"("_id") ON DELETE CASCADE ON UPDATE CASCADE`);
+    }
+    async down(queryRunner) {
+        await queryRunner.query(`ALTER TABLE "MonitorDependencySuppressionStatus" DROP CONSTRAINT "FK_354bf0c679a6dfd64910eb64418"`);
+        await queryRunner.query(`ALTER TABLE "MonitorDependencySuppressionStatus" DROP CONSTRAINT "FK_747378c59669e4639c4209adc78"`);
+        await queryRunner.query(`ALTER TABLE "MonitorDependency" DROP CONSTRAINT "FK_43f849731e1bda0ada73b3d8874"`);
+        await queryRunner.query(`ALTER TABLE "MonitorDependency" DROP CONSTRAINT "FK_953533a93dba2f345283474c60f"`);
+        await queryRunner.query(`DROP INDEX "public"."IDX_354bf0c679a6dfd64910eb6441"`);
+        await queryRunner.query(`DROP INDEX "public"."IDX_747378c59669e4639c4209adc7"`);
+        await queryRunner.query(`DROP TABLE "MonitorDependencySuppressionStatus"`);
+        await queryRunner.query(`DROP INDEX "public"."IDX_43f849731e1bda0ada73b3d887"`);
+        await queryRunner.query(`DROP INDEX "public"."IDX_953533a93dba2f345283474c60"`);
+        await queryRunner.query(`DROP TABLE "MonitorDependency"`);
+    }
+}
+//# sourceMappingURL=1786449497966-AddMonitorDependency.js.map

package/build/dist/Server/Infrastructure/Postgres/SchemaMigrations/1786449497966-AddMonitorDependency.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"1786449497966-AddMonitorDependency.js","sourceRoot":"","sources":["../../../../../../Server/Infrastructure/Postgres/SchemaMigrations/1786449497966-AddMonitorDependency.ts"],"names":[],"mappings":"AAEA,MAAM,OAAO,iCAAiC;IAA9C;QACS,SAAI,GAAG,mCAAmC,CAAC;IA+DpD,CAAC;IA7DQ,KAAK,CAAC,EAAE,CAAC,WAAwB;QACtC,MAAM,WAAW,CAAC,KAAK,CACrB,+LAA+L,CAChM,CAAC;QACF,MAAM,WAAW,CAAC,KAAK,CACrB,qFAAqF,CACtF,CAAC;QACF,MAAM,WAAW,CAAC,KAAK,CACrB,8FAA8F,CAC/F,CAAC;QACF,MAAM,WAAW,CAAC,KAAK,CACrB,0MAA0M,CAC3M,CAAC;QACF,MAAM,WAAW,CAAC,KAAK,CACrB,sGAAsG,CACvG,CAAC;QACF,MAAM,WAAW,CAAC,KAAK,CACrB,4GAA4G,CAC7G,CAAC;QACF,MAAM,WAAW,CAAC,KAAK,CACrB,2KAA2K,CAC5K,CAAC;QACF,MAAM,WAAW,CAAC,KAAK,CACrB,oLAAoL,CACrL,CAAC;QACF,MAAM,WAAW,CAAC,KAAK,CACrB,4LAA4L,CAC7L,CAAC;QACF,MAAM,WAAW,CAAC,KAAK,CACrB,wMAAwM,CACzM,CAAC;IACJ,CAAC;IAEM,KAAK,CAAC,IAAI,CAAC,WAAwB;QACxC,MAAM,WAAW,CAAC,KAAK,CACrB,mGAAmG,CACpG,CAAC;QACF,MAAM,WAAW,CAAC,KAAK,CACrB,mGAAmG,CACpG,CAAC;QACF,MAAM,WAAW,CAAC,KAAK,CACrB,kFAAkF,CACnF,CAAC;QACF,MAAM,WAAW,CAAC,KAAK,CACrB,kFAAkF,CACnF,CAAC;QACF,MAAM,WAAW,CAAC,KAAK,CACrB,sDAAsD,CACvD,CAAC;QACF,MAAM,WAAW,CAAC,KAAK,CACrB,sDAAsD,CACvD,CAAC;QACF,MAAM,WAAW,CAAC,KAAK,CAAC,iDAAiD,CAAC,CAAC;QAC3E,MAAM,WAAW,CAAC,KAAK,CACrB,sDAAsD,CACvD,CAAC;QACF,MAAM,WAAW,CAAC,KAAK,CACrB,sDAAsD,CACvD,CAAC;QACF,MAAM,WAAW,CAAC,KAAK,CAAC,gCAAgC,CAAC,CAAC;IAC5D,CAAC;CACF"}

package/build/dist/Server/Infrastructure/Postgres/SchemaMigrations/1786461136170-AddDeletedProjectTable.js

@@ -0,0 +1,20 @@
+export class AddDeletedProjectTable1786461136170 {
+    constructor() {
+        this.name = "AddDeletedProjectTable1786461136170";
+    }
+    async up(queryRunner) {
+        await queryRunner.query(`CREATE TABLE "DeletedProject" ("_id" uuid NOT NULL DEFAULT uuid_generate_v4(), "createdAt" TIMESTAMP WITH TIME ZONE NOT NULL DEFAULT now(), "updatedAt" TIMESTAMP WITH TIME ZONE NOT NULL DEFAULT now(), "deletedAt" TIMESTAMP WITH TIME ZONE, "version" integer NOT NULL, "projectId" uuid NOT NULL, "projectName" character varying(100) NOT NULL, "projectSlug" character varying(100), "projectCreatedAt" TIMESTAMP WITH TIME ZONE, "projectDeletedAt" TIMESTAMP WITH TIME ZONE NOT NULL, "deletionReason" text, "projectDeletedByUserId" uuid, "projectDeletedByUserName" character varying(50), "projectDeletedByUserEmail" character varying(100), "projectCreatedByUserId" uuid, "projectCreatedByUserName" character varying(50), "projectCreatedByUserEmail" character varying(100), "companyName" character varying(100), "companyPhoneNumber" character varying(30), "companySize" character varying(100), "jobRole" character varying(100), "planName" character varying(100), "paymentProviderPlanId" character varying(100), "paymentProviderCustomerId" character varying(100), "paymentProviderSubscriptionId" character varying(100), "paymentProviderSubscriptionStatus" character varying(100), "paymentProviderSubscriptionSeats" integer, "trialEndsAt" TIMESTAMP WITH TIME ZONE, "activeMonitorCount" integer, "wasProjectBlocked" boolean, CONSTRAINT "PK_bd397da7b51a8649b38c3c8b272" PRIMARY KEY ("_id"))`);
+        await queryRunner.query(`CREATE INDEX "idx_deleted_project_project_id" ON "DeletedProject" ("projectId") `);
+        await queryRunner.query(`CREATE INDEX "idx_deleted_project_project_deleted_at" ON "DeletedProject" ("projectDeletedAt") `);
+        await queryRunner.query(`ALTER TABLE "DeletedProject" ADD CONSTRAINT "FK_bb76f7ebe3ee418ffd79346f203" FOREIGN KEY ("projectDeletedByUserId") REFERENCES "User"("_id") ON DELETE SET NULL ON UPDATE NO ACTION`);
+        await queryRunner.query(`ALTER TABLE "DeletedProject" ADD CONSTRAINT "FK_084492367421031e80cd0fdbf1e" FOREIGN KEY ("projectCreatedByUserId") REFERENCES "User"("_id") ON DELETE SET NULL ON UPDATE NO ACTION`);
+    }
+    async down(queryRunner) {
+        await queryRunner.query(`ALTER TABLE "DeletedProject" DROP CONSTRAINT "FK_084492367421031e80cd0fdbf1e"`);
+        await queryRunner.query(`ALTER TABLE "DeletedProject" DROP CONSTRAINT "FK_bb76f7ebe3ee418ffd79346f203"`);
+        await queryRunner.query(`DROP INDEX "public"."idx_deleted_project_project_deleted_at"`);
+        await queryRunner.query(`DROP INDEX "public"."idx_deleted_project_project_id"`);
+        await queryRunner.query(`DROP TABLE "DeletedProject"`);
+    }
+}
+//# sourceMappingURL=1786461136170-AddDeletedProjectTable.js.map

package/build/dist/Server/Infrastructure/Postgres/SchemaMigrations/1786461136170-AddDeletedProjectTable.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"1786461136170-AddDeletedProjectTable.js","sourceRoot":"","sources":["../../../../../../Server/Infrastructure/Postgres/SchemaMigrations/1786461136170-AddDeletedProjectTable.ts"],"names":[],"mappings":"AAEA,MAAM,OAAO,mCAAmC;IAAhD;QACS,SAAI,GAAW,qCAAqC,CAAC;IAmC9D,CAAC;IAjCQ,KAAK,CAAC,EAAE,CAAC,WAAwB;QACtC,MAAM,WAAW,CAAC,KAAK,CACrB,q2CAAq2C,CACt2C,CAAC;QACF,MAAM,WAAW,CAAC,KAAK,CACrB,kFAAkF,CACnF,CAAC;QACF,MAAM,WAAW,CAAC,KAAK,CACrB,iGAAiG,CAClG,CAAC;QACF,MAAM,WAAW,CAAC,KAAK,CACrB,qLAAqL,CACtL,CAAC;QACF,MAAM,WAAW,CAAC,KAAK,CACrB,qLAAqL,CACtL,CAAC;IACJ,CAAC;IAEM,KAAK,CAAC,IAAI,CAAC,WAAwB;QACxC,MAAM,WAAW,CAAC,KAAK,CACrB,+EAA+E,CAChF,CAAC;QACF,MAAM,WAAW,CAAC,KAAK,CACrB,+EAA+E,CAChF,CAAC;QACF,MAAM,WAAW,CAAC,KAAK,CACrB,8DAA8D,CAC/D,CAAC;QACF,MAAM,WAAW,CAAC,KAAK,CACrB,sDAAsD,CACvD,CAAC;QACF,MAAM,WAAW,CAAC,KAAK,CAAC,6BAA6B,CAAC,CAAC;IACzD,CAAC;CACF"}

package/build/dist/Server/Infrastructure/Postgres/SchemaMigrations/1786600000000-AddInvestigationAnalysisTldr.js

@@ -0,0 +1,19 @@
+/*
+ * Generated with `npm run generate-postgres-migration` after adding
+ * AIRun.analysisTldr — the AI-written one or two sentence summary of a
+ * completed investigation's posted report. Nullable: legacy runs, runs that
+ * published no report, and runs whose bounded TL;DR call failed simply have
+ * none, and the panel omits the TL;DR block for them.
+ */
+export class AddInvestigationAnalysisTldr1786600000000 {
+    constructor() {
+        this.name = "AddInvestigationAnalysisTldr1786600000000";
+    }
+    async up(queryRunner) {
+        await queryRunner.query(`ALTER TABLE "AIRun" ADD "analysisTldr" character varying(500)`);
+    }
+    async down(queryRunner) {
+        await queryRunner.query(`ALTER TABLE "AIRun" DROP COLUMN "analysisTldr"`);
+    }
+}
+//# sourceMappingURL=1786600000000-AddInvestigationAnalysisTldr.js.map

package/build/dist/Server/Infrastructure/Postgres/SchemaMigrations/1786600000000-AddInvestigationAnalysisTldr.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"1786600000000-AddInvestigationAnalysisTldr.js","sourceRoot":"","sources":["../../../../../../Server/Infrastructure/Postgres/SchemaMigrations/1786600000000-AddInvestigationAnalysisTldr.ts"],"names":[],"mappings":"AAEA;;;;;;GAMG;AACH,MAAM,OAAO,yCAAyC;IAAtD;QAGS,SAAI,GAAG,2CAA2C,CAAC;IAW5D,CAAC;IATQ,KAAK,CAAC,EAAE,CAAC,WAAwB;QACtC,MAAM,WAAW,CAAC,KAAK,CACrB,+DAA+D,CAChE,CAAC;IACJ,CAAC;IAEM,KAAK,CAAC,IAAI,CAAC,WAAwB;QACxC,MAAM,WAAW,CAAC,KAAK,CAAC,gDAAgD,CAAC,CAAC;IAC5E,CAAC;CACF"}

package/build/dist/Server/Infrastructure/Postgres/SchemaMigrations/1786700000000-DropProjectCallSMSConfigCredentialUniques.js

@@ -0,0 +1,64 @@
+/*
+ * Drops the global UNIQUE constraints on ProjectCallSMSConfig's Twilio
+ * credentials. Generated with `npm run generate-postgres-migration` after
+ * flipping both columns to `unique: false`; the statements are the generator's,
+ * renumbered to sort last and given IF EXISTS (see below).
+ *
+ * WHY THEY WERE WRONG
+ *
+ * ProjectCallSMSConfig is tenant-scoped (@TenantColumn("projectId")) and
+ * inherently multi-row: a project has as many configs as it has Twilio
+ * setups. The constraints came from the InitialMigration, where this table's
+ * columns were modelled on GlobalConfig — a singleton table whose every column
+ * carries a pointless `unique: true`. On a singleton that is harmless. Here it
+ * meant no two rows anywhere in the instance could share a Twilio account.
+ *
+ * That is not a constraint anybody wants:
+ *
+ *   - One Twilio account, two numbers. Poland (and several other countries)
+ *     requires a Local number for Voice and a Mobile number for SMS, so a
+ *     single project legitimately needs two configs on one account. This is
+ *     what issue #3020 was reported against.
+ *   - Two projects, one account. On a shared instance the FIRST project to
+ *     save a given account SID locked every other project out of it, across
+ *     the tenant boundary — one tenant could deny another the use of its own
+ *     Twilio credentials, and neither could see why.
+ *
+ * Both surfaced the same way: Postgres raised unique_violation (23505),
+ * which is not a OneUptime Exception, so it fell through to the generic
+ * handler and reached the client as a bare 500 `{"error":"Server Error"}`
+ * with nothing to act on.
+ *
+ * NOT REPLACED WITH A NARROWER UNIQUE
+ *
+ * There is no uniqueness to restore at any scope. Reusing one account across
+ * configs is the supported case, not an accident to be guarded against. Config
+ * identity is `name`, which is already unique per project via
+ * @UniqueColumnBy("projectId"). After this migration ProjectCallSMSConfig has
+ * no UNIQUE constraint on any credential column, which matches every other
+ * tenant-scoped table: theirs are all on slugs, keys and tokens — identifiers
+ * that really are global.
+ *
+ * IF EXISTS
+ *
+ * Self-hosted operators hit by #3020 were told in the issue thread that the
+ * workaround is to drop the constraint by hand. IF EXISTS keeps this migration
+ * from failing on those databases. down() cannot be made safe the same way: it
+ * will fail if duplicates exist by then, which is correct — silently
+ * hard-deleting a project's Twilio config to make room for a constraint would
+ * be worse than a failed rollback.
+ */
+export class DropProjectCallSMSConfigCredentialUniques1786700000000 {
+    constructor() {
+        this.name = "DropProjectCallSMSConfigCredentialUniques1786700000000";
+    }
+    async up(queryRunner) {
+        await queryRunner.query(`ALTER TABLE "ProjectCallSMSConfig" DROP CONSTRAINT IF EXISTS "UQ_0886139eac04ad49627e446d477"`);
+        await queryRunner.query(`ALTER TABLE "ProjectCallSMSConfig" DROP CONSTRAINT IF EXISTS "UQ_2eb1a240d549a7701b6e82d2f94"`);
+    }
+    async down(queryRunner) {
+        await queryRunner.query(`ALTER TABLE "ProjectCallSMSConfig" ADD CONSTRAINT "UQ_2eb1a240d549a7701b6e82d2f94" UNIQUE ("twilioAuthToken")`);
+        await queryRunner.query(`ALTER TABLE "ProjectCallSMSConfig" ADD CONSTRAINT "UQ_0886139eac04ad49627e446d477" UNIQUE ("twilioAccountSID")`);
+    }
+}
+//# sourceMappingURL=1786700000000-DropProjectCallSMSConfigCredentialUniques.js.map

package/build/dist/Server/Infrastructure/Postgres/SchemaMigrations/1786700000000-DropProjectCallSMSConfigCredentialUniques.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"1786700000000-DropProjectCallSMSConfigCredentialUniques.js","sourceRoot":"","sources":["../../../../../../Server/Infrastructure/Postgres/SchemaMigrations/1786700000000-DropProjectCallSMSConfigCredentialUniques.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiDG;AACH,MAAM,OAAO,sDAAsD;IAAnE;QAGS,SAAI,GACT,wDAAwD,CAAC;IAmB7D,CAAC;IAjBQ,KAAK,CAAC,EAAE,CAAC,WAAwB;QACtC,MAAM,WAAW,CAAC,KAAK,CACrB,+FAA+F,CAChG,CAAC;QACF,MAAM,WAAW,CAAC,KAAK,CACrB,+FAA+F,CAChG,CAAC;IACJ,CAAC;IAEM,KAAK,CAAC,IAAI,CAAC,WAAwB;QACxC,MAAM,WAAW,CAAC,KAAK,CACrB,+GAA+G,CAChH,CAAC;QACF,MAAM,WAAW,CAAC,KAAK,CACrB,gHAAgH,CACjH,CAAC;IACJ,CAAC;CACF"}

package/build/dist/Server/Infrastructure/Postgres/SchemaMigrations/Index.js

@@ -509,6 +509,12 @@ import { RestoreDroppedUniqueIndexes1786200000000 } from "./1786200000000-Restor
 import { QuarantineUnboundGitHubInstallations1786300000000 } from "./1786300000000-QuarantineUnboundGitHubInstallations";
 import { AddMasterPasswordSalt1786400000000 } from "./1786400000000-AddMasterPasswordSalt";
 import { AddInvestigationCodeFixRecommendation1786500000000 } from "./1786500000000-AddInvestigationCodeFixRecommendation";
+import { AddInvestigationAnalysisTldr1786600000000 } from "./1786600000000-AddInvestigationAnalysisTldr";
+import { DropProjectCallSMSConfigCredentialUniques1786700000000 } from "./1786700000000-DropProjectCallSMSConfigCredentialUniques";
+import { AddDataSourceTable1786303472848 } from "./1786303472848-AddDataSourceTable";
+import { MigrationName1786446545142 } from "./1786446545142-MigrationName";
+import { AddMonitorDependency1786449497966 } from "./1786449497966-AddMonitorDependency";
+import { AddDeletedProjectTable1786461136170 } from "./1786461136170-AddDeletedProjectTable";
 export default [
     InitialMigration,
     MigrationName1717678334852,
@@ -1021,5 +1027,11 @@ export default [
     AddMasterPasswordSalt1786400000000,
     MigrationName1786105470826,
     AddInvestigationCodeFixRecommendation1786500000000,
+    AddInvestigationAnalysisTldr1786600000000,
+    DropProjectCallSMSConfigCredentialUniques1786700000000,
+    AddDataSourceTable1786303472848,
+    MigrationName1786446545142,
+    AddMonitorDependency1786449497966,
+    AddDeletedProjectTable1786461136170,
 ];
 //# sourceMappingURL=Index.js.map