@oneuptime/common 12.0.5 → 12.0.7

package/Models/DatabaseModels/Monitor.ts

@@ -479,6 +479,117 @@ export default class Monitor extends BaseModel {
   })
   public labels?: Array<Label> = undefined;
 
+  @ColumnAccessControl({
+    create: [
+      Permission.ProjectOwner,
+      Permission.ProjectAdmin,
+      Permission.ProjectMember,
+      Permission.MonitorAdmin,
+      Permission.MonitorMember,
+      Permission.CreateProjectMonitor,
+    ],
+    read: [
+      Permission.ProjectOwner,
+      Permission.ProjectAdmin,
+      Permission.ProjectMember,
+      Permission.Viewer,
+      Permission.MonitorAdmin,
+      Permission.MonitorMember,
+      Permission.MonitorViewer,
+      Permission.ReadProjectMonitor,
+    ],
+    update: [
+      Permission.ProjectOwner,
+      Permission.ProjectAdmin,
+      Permission.ProjectMember,
+      Permission.MonitorAdmin,
+      Permission.MonitorMember,
+      Permission.EditProjectMonitor,
+    ],
+  })
+  @TableColumn({
+    required: false,
+    type: TableColumnType.EntityArray,
+    modelType: Monitor,
+    title: "Depends On Monitors",
+    description:
+      "Parent monitors this monitor depends on. When a parent is offline (or in one of the configured suppression statuses), alerts and incidents from this monitor are suppressed at creation time — the monitor keeps evaluating and its status timeline still updates.",
+  })
+  @ManyToMany(
+    () => {
+      return Monitor;
+    },
+    { eager: false },
+  )
+  @JoinTable({
+    name: "MonitorDependency",
+    inverseJoinColumn: {
+      name: "dependsOnMonitorId",
+      referencedColumnName: "_id",
+    },
+    joinColumn: {
+      name: "monitorId",
+      referencedColumnName: "_id",
+    },
+  })
+  public dependsOnMonitors?: Array<Monitor> = undefined;
+
+  @ColumnAccessControl({
+    create: [
+      Permission.ProjectOwner,
+      Permission.ProjectAdmin,
+      Permission.ProjectMember,
+      Permission.MonitorAdmin,
+      Permission.MonitorMember,
+      Permission.CreateProjectMonitor,
+    ],
+    read: [
+      Permission.ProjectOwner,
+      Permission.ProjectAdmin,
+      Permission.ProjectMember,
+      Permission.Viewer,
+      Permission.MonitorAdmin,
+      Permission.MonitorMember,
+      Permission.MonitorViewer,
+      Permission.ReadProjectMonitor,
+    ],
+    update: [
+      Permission.ProjectOwner,
+      Permission.ProjectAdmin,
+      Permission.ProjectMember,
+      Permission.MonitorAdmin,
+      Permission.MonitorMember,
+      Permission.EditProjectMonitor,
+    ],
+  })
+  @TableColumn({
+    required: false,
+    type: TableColumnType.EntityArray,
+    modelType: MonitorStatus,
+    title: "Suppress Alerts When Parent Monitor Status Is",
+    description:
+      "Parent monitor statuses that suppress this monitor's alerts and incidents. When empty, statuses flagged as offline suppress (the default). Only used when Depends On Monitors is set.",
+  })
+  @ManyToMany(
+    () => {
+      return MonitorStatus;
+    },
+    { eager: false },
+  )
+  @JoinTable({
+    name: "MonitorDependencySuppressionStatus",
+    inverseJoinColumn: {
+      name: "monitorStatusId",
+      referencedColumnName: "_id",
+    },
+    joinColumn: {
+      name: "monitorId",
+      referencedColumnName: "_id",
+    },
+  })
+  public suppressAlertsWhenParentMonitorStatuses?: Array<MonitorStatus> =
+    undefined;
+
   @ColumnAccessControl({
     create: [
       Permission.ProjectOwner,

package/Models/DatabaseModels/Project.ts

@@ -1654,7 +1654,7 @@ export default class Project extends TenantModel {
     type: TableColumnType.Boolean,
     title: "Enable Automatic Incident Code Fixes",
     description:
-      "When enabled, an incident AI investigation that ends with a confident, evidenced root cause analysis and recommends a repository code change automatically queues an AI agent task that opens a draft fix pull request from that analysis — the automatic form of the 'Open Fix PR from this analysis' button. Operational, infrastructure, external, user-error and inconclusive findings do not offer or open code-fix pull requests. Requires a repository connected through the GitHub App and a Runner with the code-fix capability. Pull requests are always human-reviewed — nothing merges automatically.",
+      "When enabled, an incident AI investigation that ends with a confident, evidenced root cause analysis and recommends a repository code change automatically queues an AI agent task that opens a fix pull request, ready for review, from that analysis — the automatic form of the 'Open Fix PR from this analysis' button. Operational, infrastructure, external, user-error and inconclusive findings do not offer or open code-fix pull requests. Requires a repository connected through the GitHub App and a Runner with the code-fix capability. Pull requests are always human-reviewed — nothing merges automatically.",
     defaultValue: false,
     example: true,
   })
@@ -1684,7 +1684,7 @@ export default class Project extends TenantModel {
     type: TableColumnType.Boolean,
     title: "Enable Automatic Alert Code Fixes",
     description:
-      "When enabled, an alert AI investigation that ends with a confident, evidenced root cause analysis and recommends a repository code change automatically queues an AI agent task that opens a draft fix pull request from that analysis — the automatic form of the 'Open Fix PR from this analysis' button. Operational, infrastructure, external, user-error and inconclusive findings do not offer or open code-fix pull requests. Requires a repository connected through the GitHub App and a Runner with the code-fix capability. Pull requests are always human-reviewed — nothing merges automatically.",
+      "When enabled, an alert AI investigation that ends with a confident, evidenced root cause analysis and recommends a repository code change automatically queues an AI agent task that opens a fix pull request, ready for review, from that analysis — the automatic form of the 'Open Fix PR from this analysis' button. Operational, infrastructure, external, user-error and inconclusive findings do not offer or open code-fix pull requests. Requires a repository connected through the GitHub App and a Runner with the code-fix capability. Pull requests are always human-reviewed — nothing merges automatically.",
     defaultValue: false,
     example: true,
   })
@@ -1744,7 +1744,7 @@ export default class Project extends TenantModel {
     type: TableColumnType.Boolean,
     title: "Enable Insight Fix Tasks",
     description:
-      "When enabled, insights whose deterministic evidence points at code (new or spiking exceptions with a resolvable repository, trace-latency regressions with span-tree findings) automatically queue an AI agent task that opens a draft pull request with a proposed fix. Honors the daily fix task budget and per-repository open-PR caps. Pull requests are always human-reviewed — nothing merges automatically.",
+      "When enabled, insights whose deterministic evidence points at code (new or spiking exceptions with a resolvable repository, trace-latency regressions with span-tree findings) automatically queue an AI agent task that opens a pull request with a proposed fix, ready for review. Honors the daily fix task budget and per-repository open-PR caps. Pull requests are always human-reviewed — nothing merges automatically.",
     defaultValue: false,
     example: true,
   })

package/Models/DatabaseModels/ProjectCallSMSConfig.ts

@@ -413,11 +413,18 @@ export default class ProjectCallSMSConfig extends BaseModel {
     description: "Account SID for your Twilio Account",
     example: "ACxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx",
   })
+  /*
+   * NOT unique. One Twilio account legitimately backs more than one config —
+   * a project splitting SMS and Voice across two numbers on the same account,
+   * or two projects on a shared instance using the same account. A global
+   * UNIQUE here made the second such config fail with a bare 500 (issue #3020),
+   * across the tenant boundary as well as within a project.
+   */
   @Column({
     type: ColumnType.ShortText,
     length: ColumnLength.ShortText,
     nullable: true,
-    unique: true,
+    unique: false,
   })
   public twilioAccountSID?: string = undefined;
 
@@ -449,11 +456,12 @@ export default class ProjectCallSMSConfig extends BaseModel {
     description: "Auth Token for your Twilio Account",
     example: "your-twilio-auth-token",
   })
+  /* NOT unique, for the same reason as twilioAccountSID above. */
   @Column({
     type: ColumnType.ShortText,
     length: ColumnLength.ShortText,
     nullable: true,
-    unique: true,
+    unique: false,
   })
   public twilioAuthToken?: string = undefined;
 

package/Models/DatabaseModels/User.ts

@@ -6,6 +6,7 @@ import JobRole from "../../Types/Company/JobRole";
 import AllowAccessIfSubscriptionIsUnpaid from "../../Types/Database/AccessControl/AllowAccessIfSubscriptionIsUnpaid";
 import ColumnAccessControl from "../../Types/Database/AccessControl/ColumnAccessControl";
 import TableAccessControl from "../../Types/Database/AccessControl/TableAccessControl";
+import AllowUserQueryWithoutTenant from "../../Types/Database/AllowUserQueryWithoutTenant";
 import ColumnLength from "../../Types/Database/ColumnLength";
 import ColumnType from "../../Types/Database/ColumnType";
 import CrudApiEndpoint from "../../Types/Database/CrudApiEndpoint";
@@ -48,6 +49,7 @@ import { Column, Entity, Index, JoinColumn, ManyToOne } from "typeorm";
   icon: IconProp.User,
   tableDescription: "A signed up or invited OneUptime user.",
 })
+@AllowUserQueryWithoutTenant(true)
 @CurrentUserCanAccessRecordBy("_id")
 class User extends UserModel {
   @ColumnAccessControl({

package/Models/DatabaseModels/UserOnCallLog.ts

@@ -18,6 +18,7 @@ import CanAccessIfCanReadOn from "../../Types/Database/CanAccessIfCanReadOn";
 import ColumnLength from "../../Types/Database/ColumnLength";
 import ColumnType from "../../Types/Database/ColumnType";
 import CrudApiEndpoint from "../../Types/Database/CrudApiEndpoint";
+import CurrentUserCanAccessRecordBy from "../../Types/Database/CurrentUserCanAccessRecordBy";
 import EnableDocumentation from "../../Types/Database/EnableDocumentation";
 import TableColumn from "../../Types/Database/TableColumn";
 import TableColumnType from "../../Types/Database/TableColumnType";
@@ -36,6 +37,7 @@ import Alert from "./Alert";
 
 @EnableDocumentation()
 @CanAccessIfCanReadOn("onCallDutyPolicy")
+@CurrentUserCanAccessRecordBy("userId")
 @TenantColumn("projectId")
 @TableBillingAccessControl({
   create: PlanType.Growth,

package/Models/DatabaseModels/UserOnCallLogTimeline.ts

@@ -29,6 +29,7 @@ import CanAccessIfCanReadOn from "../../Types/Database/CanAccessIfCanReadOn";
 import ColumnLength from "../../Types/Database/ColumnLength";
 import ColumnType from "../../Types/Database/ColumnType";
 import CrudApiEndpoint from "../../Types/Database/CrudApiEndpoint";
+import CurrentUserCanAccessRecordBy from "../../Types/Database/CurrentUserCanAccessRecordBy";
 import EnableDocumentation from "../../Types/Database/EnableDocumentation";
 import TableColumn from "../../Types/Database/TableColumn";
 import TableColumnType from "../../Types/Database/TableColumnType";
@@ -49,6 +50,7 @@ import { Column, Entity, Index, JoinColumn, ManyToOne } from "typeorm";
 })
 @EnableDocumentation()
 @CanAccessIfCanReadOn("onCallDutyPolicy")
+@CurrentUserCanAccessRecordBy("userId")
 @TenantColumn("projectId")
 @TableAccessControl({
   create: [],

package/Models/DatabaseModels/UserSession.ts

@@ -4,6 +4,7 @@ import Route from "../../Types/API/Route";
 import AllowAccessIfSubscriptionIsUnpaid from "../../Types/Database/AccessControl/AllowAccessIfSubscriptionIsUnpaid";
 import ColumnAccessControl from "../../Types/Database/AccessControl/ColumnAccessControl";
 import TableAccessControl from "../../Types/Database/AccessControl/TableAccessControl";
+import AllowUserQueryWithoutTenant from "../../Types/Database/AllowUserQueryWithoutTenant";
 import ColumnLength from "../../Types/Database/ColumnLength";
 import ColumnType from "../../Types/Database/ColumnType";
 import CrudApiEndpoint from "../../Types/Database/CrudApiEndpoint";
@@ -41,6 +42,7 @@ import { Column, Entity, Index, JoinColumn, ManyToOne } from "typeorm";
   tableDescription:
     "Active user sessions with refresh tokens and device metadata for enhanced authentication security.",
 })
+@AllowUserQueryWithoutTenant(true)
 @CurrentUserCanAccessRecordBy("userId")
 class UserSession extends BaseModel {
   @ColumnAccessControl({

package/Models/DatabaseModels/UserTotpAuth.ts

@@ -4,6 +4,7 @@ import Route from "../../Types/API/Route";
 import AllowAccessIfSubscriptionIsUnpaid from "../../Types/Database/AccessControl/AllowAccessIfSubscriptionIsUnpaid";
 import ColumnAccessControl from "../../Types/Database/AccessControl/ColumnAccessControl";
 import TableAccessControl from "../../Types/Database/AccessControl/TableAccessControl";
+import AllowUserQueryWithoutTenant from "../../Types/Database/AllowUserQueryWithoutTenant";
 import ColumnLength from "../../Types/Database/ColumnLength";
 import ColumnType from "../../Types/Database/ColumnType";
 import CrudApiEndpoint from "../../Types/Database/CrudApiEndpoint";
@@ -38,6 +39,7 @@ import { Column, Entity, JoinColumn, ManyToOne } from "typeorm";
   icon: IconProp.ShieldCheck,
   tableDescription: "TOTP Authentication for users",
 })
+@AllowUserQueryWithoutTenant(true)
 @CurrentUserCanAccessRecordBy("userId")
 class UserTotpAuth extends BaseModel {
   @ColumnAccessControl({
@@ -98,7 +100,7 @@ class UserTotpAuth extends BaseModel {
   @ColumnAccessControl({
     create: [Permission.CurrentUser],
     read: [Permission.CurrentUser],
-    update: [Permission.CurrentUser],
+    update: [],
   })
   @TableColumn({
     type: TableColumnType.Boolean,
@@ -163,9 +165,9 @@ class UserTotpAuth extends BaseModel {
   public deletedByUserId?: ObjectID = undefined;
 
   @ColumnAccessControl({
-    create: [Permission.CurrentUser],
+    create: [],
     read: [Permission.CurrentUser],
-    update: [Permission.CurrentUser],
+    update: [],
   })
   @TableColumn({
     manyToOneRelationColumn: "userId",
@@ -191,7 +193,7 @@ class UserTotpAuth extends BaseModel {
   @ColumnAccessControl({
     create: [Permission.CurrentUser],
     read: [Permission.CurrentUser],
-    update: [Permission.CurrentUser],
+    update: [],
   })
   @TableColumn({
     type: TableColumnType.ObjectID,

package/Models/DatabaseModels/UserWebAuthn.ts

@@ -4,6 +4,7 @@ import Route from "../../Types/API/Route";
 import AllowAccessIfSubscriptionIsUnpaid from "../../Types/Database/AccessControl/AllowAccessIfSubscriptionIsUnpaid";
 import ColumnAccessControl from "../../Types/Database/AccessControl/ColumnAccessControl";
 import TableAccessControl from "../../Types/Database/AccessControl/TableAccessControl";
+import AllowUserQueryWithoutTenant from "../../Types/Database/AllowUserQueryWithoutTenant";
 import ColumnLength from "../../Types/Database/ColumnLength";
 import ColumnType from "../../Types/Database/ColumnType";
 import CrudApiEndpoint from "../../Types/Database/CrudApiEndpoint";
@@ -38,6 +39,7 @@ import { Column, Entity, JoinColumn, ManyToOne } from "typeorm";
   icon: IconProp.ShieldCheck,
   tableDescription: "WebAuthn credentials for users (security keys)",
 })
+@AllowUserQueryWithoutTenant(true)
 @CurrentUserCanAccessRecordBy("userId")
 class UserWebAuthn extends BaseModel {
   @ColumnAccessControl({
@@ -198,9 +200,9 @@ class UserWebAuthn extends BaseModel {
   public deletedByUserId?: ObjectID = undefined;
 
   @ColumnAccessControl({
-    create: [Permission.CurrentUser],
+    create: [],
     read: [Permission.CurrentUser],
-    update: [Permission.CurrentUser],
+    update: [],
   })
   @TableColumn({
     manyToOneRelationColumn: "userId",
@@ -226,7 +228,7 @@ class UserWebAuthn extends BaseModel {
   @ColumnAccessControl({
     create: [Permission.CurrentUser],
     read: [Permission.CurrentUser],
-    update: [Permission.CurrentUser],
+    update: [],
   })
   @TableColumn({
     type: TableColumnType.ObjectID,

package/Models/DatabaseModels/WorkspaceProjectAuthToken.ts

@@ -36,6 +36,23 @@ export interface MicrosoftTeamsChat {
   addedAt?: string | undefined;
 }
 
+/*
+ * A team the OneUptime app has actually been installed into, captured from the
+ * bot's install / conversationUpdate events.
+ *
+ * Graph can list every team in the tenant with app-only permissions, but the
+ * Bot Framework will only accept a proactive post into a team the app is a
+ * roster member of. Listing a team is therefore NOT evidence that we can post
+ * to it — this record is, which is why channel sends check it before calling
+ * the Bot Framework.
+ */
+export interface MicrosoftTeamsInstalledTeam {
+  id: string; // Teams team (group) id.
+  name?: string | undefined;
+  serviceUrl?: string | undefined; // Bot Framework service URL captured on install. Required for GCC/DoD.
+  addedAt?: string | undefined;
+}
+
 export interface SlackMiscData extends MiscData {
   teamId: string;
   teamName: string;
@@ -59,9 +76,10 @@ export interface MicrosoftTeamsMiscData extends MiscData {
   lastAppTokenIssuedAt?: string;
   adminConsentGrantedAt?: string;
   adminConsentGrantedBy?: string;
-  availableTeams?: Record<string, MicrosoftTeamsTeam>;
+  availableTeams?: Record<string, MicrosoftTeamsTeam>; // keyed by team id. Every team Graph can see in the tenant.
   appAccessTokenExpiresAt?: string;
   availableChats?: Record<string, MicrosoftTeamsChat>; // keyed by chat id. Chats the OneUptime app has been added to.
+  installedTeams?: Record<string, MicrosoftTeamsInstalledTeam>; // keyed by team id. Teams the OneUptime app has been added to.
 }
 
 export type WorkspaceMiscData = SlackMiscData | MicrosoftTeamsMiscData;

package/Server/API/AIInsightAPI.ts

@@ -26,8 +26,12 @@ const router: ExpressRouter = Express.getRouter();
  * Human-action endpoints for the AI insights inbox. Insight rows are
  * server-authored (empty create/update table permissions) — humans act on
  * them only through these routes: a one-click Confirm / Dismiss verdict
- * (the G11 precision measurement), Resolve, and the live triage panel
- * read. Each route access-checks the insight under the USER's permissions
+ * (the G11 precision measurement), Resolve, Reopen (the undo for both
+ * terminal states), and the live triage panel read. Every human action an
+ * insight can reach must be reversible from here, or a misclick is
+ * permanent — a dismissal in particular also suppresses the fingerprint
+ * for the InsightStore cooldown.
+ * Each route access-checks the insight under the USER's permissions
  * first (project membership + the AIInsight read ACL), then the
  * service performs the root read/write — the AIInvestigationAPI idiom.
  */
@@ -82,9 +86,10 @@ async function findAccessibleInsight(
  * One-click human verdict (the G11 precision measurement — confirm/dismiss
  * rates per insight type gate future automation). Overwriting an existing
  * verdict is allowed: the latest verdict wins. Dismissed also closes the
- * insight; Confirmed leaves its status untouched.
+ * insight; Confirmed leaves its status untouched unless the insight was
+ * closed AS Dismissed, in which case it is reopened — see the service.
  * Body: { insightId, verdict: "Confirmed" | "Dismissed" }.
- * Response: { insightId, verdict }.
+ * Response: { insightId, verdict, status }.
  */
 router.post(
   "/ai-insight/verdict",
@@ -115,6 +120,7 @@ router.post(
       const result: {
         insightId: ObjectID;
         verdict: AIInsightHumanVerdict;
+        status: AIInsightStatus | null;
       } = await AIInsightService.applyHumanVerdict({
         insightId: insight.id!,
         verdict: verdict as AIInsightHumanVerdict,
@@ -124,6 +130,7 @@ router.post(
       Response.sendJsonObjectResponse(req, res, {
         insightId: result.insightId.toString(),
         verdict: result.verdict,
+        status: result.status,
       });
       return;
     } catch (err) {
@@ -169,6 +176,42 @@ router.post(
   },
 );
 
+/*
+ * Undo a terminal action: puts a Resolved or Dismissed insight back in the
+ * open queue and clears the human verdict that closed it. Reopening an
+ * already-open insight is a no-op that reports the current status.
+ * Body: { insightId }. Response: { insightId, status }.
+ */
+router.post(
+  "/ai-insight/reopen",
+  UserMiddleware.getUserMiddleware,
+  async (
+    req: ExpressRequest,
+    res: ExpressResponse,
+    next: NextFunction,
+  ): Promise<void> => {
+    try {
+      const props: DatabaseCommonInteractionProps = await getLoggedInProps(req);
+
+      const insight: AIInsight = await findAccessibleInsight(req, props);
+
+      const result: { insightId: ObjectID; status: AIInsightStatus } =
+        await AIInsightService.reopenInsight({
+          insightId: insight.id!,
+        });
+
+      Response.sendJsonObjectResponse(req, res, {
+        insightId: result.insightId.toString(),
+        status: result.status,
+      });
+      return;
+    } catch (err) {
+      next(err);
+      return;
+    }
+  },
+);
+
 /*
  * Live triage panel data: the insight's triage AIRun + its ordered event
  * trail (capped — see MAX_TRIAGE_RUN_EVENTS on the service). Triage runs

package/Server/API/AIInvestigationAPI.ts

@@ -195,6 +195,8 @@ async function sendLatestInvestigation(
       totalTokens: true,
       createdAt: true,
       codeFixRecommendation: true,
+      // The AI-written summary the panel shows above the report.
+      analysisTldr: true,
       // Measurement layer: the panel renders verdict/grade state from these.
       humanVerdict: true,
       humanVerdictAt: true,
@@ -214,6 +216,7 @@ async function sendLatestInvestigation(
       run: null,
       events: [],
       analysisMarkdown: null,
+      analysisTldr: null,
       isAnalysisPending: false,
     });
     return;
@@ -263,10 +266,32 @@ async function sendLatestInvestigation(
     analysisMarkdown,
   });
 
+  /*
+   * The TL;DR summarizes the report, so it is only meaningful alongside one.
+   * A run whose report is still settling (or which never published one) must
+   * not show a summary of something the reader cannot yet see, and the
+   * trimmed empty string is normalized to null so the panel has exactly one
+   * "no TL;DR" shape to render.
+   */
+  const analysisTldr: string | null = analysisMarkdown
+    ? (run.analysisTldr || "").trim() || null
+    : null;
+
+  /*
+   * The selected column also travels inside the serialized run, so the gate
+   * above has to be applied there too — otherwise a client reading
+   * run.analysisTldr would show a summary of a report the payload does not
+   * carry. One field, one rule: the summary exists only next to its report.
+   */
+  if (runJson) {
+    runJson["analysisTldr"] = analysisTldr;
+  }
+
   Response.sendJsonObjectResponse(req, res, {
     run: runJson || null,
     events: eventsJson,
     analysisMarkdown,
+    analysisTldr,
     isAnalysisPending,
   });
 }