@oneuptime/common 12.0.8 → 12.0.9

package/build/dist/Types/Database/AccessControl/OwnerOnlyColumn.js

@@ -0,0 +1,60 @@
+import "reflect-metadata";
+/*
+ * WHY THIS DECORATOR EXISTS, AND WHY @ColumnAccessControl COULD NOT DO THE JOB.
+ *
+ * @ColumnAccessControl lists the PERMISSIONS that may read a column, and the
+ * permission layer satisfies it by intersecting that list with the permissions
+ * the caller holds. That works for "only a billing admin may read this", and it
+ * is useless for "only the person this row belongs to may read this", for one
+ * blunt reason: Permission.CurrentUser is auto-granted to every authenticated
+ * caller (DatabaseCommonInteractionPropsUtil.getUserPermissions pushes it onto
+ * the global permission list whenever props.userId is set). A column list of
+ * [CurrentUser] therefore admits EVERY logged-in user in the project, including
+ * an administrator reading somebody else's row. Row scoping has only ever come
+ * from the TABLE list, never from a column list, and no arrangement of column
+ * lists can restrict which VALUES a caller sees.
+ *
+ * So the marking here carries no permissions at all. It says one thing:
+ *
+ *   this column may be read only by a query that is pinned to the row's owner.
+ *
+ * What "pinned" means, and every route by which a marked column can be reached
+ * (a top-level select, a select nested through a relation, a sort key injected
+ * into the select after the permission check, and a WHERE predicate used to
+ * probe values), is enforced by OwnerOnlyColumnPermission on the server. This
+ * file is only the mark.
+ *
+ * Mark credentials, secrets, verification codes and directly-addressable
+ * delivery targets - a phone number, an email address, a webhook URL, a device
+ * token. Do NOT mark the labels an administrator legitimately needs in order to
+ * see that a row exists and what kind of thing it is: a webhook's name, a
+ * device's name and type, a verification flag, the owning user id. An admin
+ * surface that cannot name the rows it is administering is not a feature.
+ */
+const ownerOnlyColumnSymbol = Symbol("OwnerOnlyColumn");
+export default () => {
+    return Reflect.metadata(ownerOnlyColumnSymbol, true);
+};
+/**
+ * True when the named column of this model is marked owner-only. Reads through
+ * the prototype chain, so a model that extends another inherits its marks.
+ */
+export const isOwnerOnlyColumn = (target, propertyKey) => {
+    return (Reflect.getMetadata(ownerOnlyColumnSymbol, target, propertyKey) === true);
+};
+/**
+ * Every owner-only column on this model. Enumerating requires the property to
+ * exist on the instance, which it does for every declared column because model
+ * columns are initialised to `undefined` in the class body - the same
+ * assumption getTableColumns() already makes.
+ */
+export const getOwnerOnlyColumns = (target) => {
+    const columns = [];
+    for (const key of Object.keys(target)) {
+        if (Reflect.getMetadata(ownerOnlyColumnSymbol, target, key) === true) {
+            columns.push(key);
+        }
+    }
+    return columns;
+};
+//# sourceMappingURL=OwnerOnlyColumn.js.map

package/build/dist/Types/Database/AccessControl/OwnerOnlyColumn.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"OwnerOnlyColumn.js","sourceRoot":"","sources":["../../../../../Types/Database/AccessControl/OwnerOnlyColumn.ts"],"names":[],"mappings":"AAEA,OAAO,kBAAkB,CAAC;AAE1B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAEH,MAAM,qBAAqB,GAAW,MAAM,CAAC,iBAAiB,CAAC,CAAC;AAEhE,eAAe,GAA2B,EAAE;IAC1C,OAAO,OAAO,CAAC,QAAQ,CAAC,qBAAqB,EAAE,IAAI,CAAC,CAAC;AACvD,CAAC,CAAC;AAOF;;;GAGG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAA8B,CAG1D,MAAS,EACT,WAAmB,EACV,EAAE;IACX,OAAO,CACL,OAAO,CAAC,WAAW,CAAC,qBAAqB,EAAE,MAAM,EAAE,WAAW,CAAC,KAAK,IAAI,CACzE,CAAC;AACJ,CAAC,CAAC;AAMF;;;;;GAKG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAgC,CAG9D,MAAS,EACM,EAAE;IACjB,MAAM,OAAO,GAAkB,EAAE,CAAC;IAElC,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QACtC,IAAI,OAAO,CAAC,WAAW,CAAC,qBAAqB,EAAE,MAAM,EAAE,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC;YACrE,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACpB,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC,CAAC"}

package/build/dist/Types/Exception/ExceptionCode.js

@@ -18,6 +18,8 @@ var ExceptionCode;
     ExceptionCode[ExceptionCode["TimeoutException"] = 408] = "TimeoutException";
     ExceptionCode[ExceptionCode["TenantNotFoundException"] = 405] = "TenantNotFoundException";
     ExceptionCode[ExceptionCode["SsoAuthorizationException"] = 406] = "SsoAuthorizationException";
+    ExceptionCode[ExceptionCode["TooManyRequestsException"] = 429] = "TooManyRequestsException";
+    ExceptionCode[ExceptionCode["ServiceUnavailableException"] = 503] = "ServiceUnavailableException";
 })(ExceptionCode || (ExceptionCode = {}));
 export default ExceptionCode;
 //# sourceMappingURL=ExceptionCode.js.map

package/build/dist/Types/Exception/ExceptionCode.js.map

@@ -1 +1 @@
-{"version":3,"file":"ExceptionCode.js","sourceRoot":"","sources":["../../../../Types/Exception/ExceptionCode.ts"],"names":[],"mappings":"AAAA,IAAK,aAmBJ;AAnBD,WAAK,aAAa;IAChB,uFAA2B,CAAA;IAC3B,yEAAoB,CAAA;IACpB,iEAAgB,CAAA;IAChB,qGAAmC,CAAA;IACnC,mFAAyB,CAAA;IACzB,+EAAuB,CAAA;IACvB,2EAAsB,CAAA;IACtB,iFAAyB,CAAA;IACzB,+EAAwB,CAAA;IACxB,mGAAkC,CAAA;IAClC,yEAAqB,CAAA;IACrB,uFAA4B,CAAA;IAC5B,6FAA+B,CAAA;IAC/B,2FAA8B,CAAA;IAC9B,6EAAuB,CAAA;IACvB,2EAAsB,CAAA;IACtB,yFAA6B,CAAA;IAC7B,6FAA+B,CAAA;AACjC,CAAC,EAnBI,aAAa,KAAb,aAAa,QAmBjB;AAED,eAAe,aAAa,CAAC"}
+{"version":3,"file":"ExceptionCode.js","sourceRoot":"","sources":["../../../../Types/Exception/ExceptionCode.ts"],"names":[],"mappings":"AAAA,IAAK,aAqBJ;AArBD,WAAK,aAAa;IAChB,uFAA2B,CAAA;IAC3B,yEAAoB,CAAA;IACpB,iEAAgB,CAAA;IAChB,qGAAmC,CAAA;IACnC,mFAAyB,CAAA;IACzB,+EAAuB,CAAA;IACvB,2EAAsB,CAAA;IACtB,iFAAyB,CAAA;IACzB,+EAAwB,CAAA;IACxB,mGAAkC,CAAA;IAClC,yEAAqB,CAAA;IACrB,uFAA4B,CAAA;IAC5B,6FAA+B,CAAA;IAC/B,2FAA8B,CAAA;IAC9B,6EAAuB,CAAA;IACvB,2EAAsB,CAAA;IACtB,yFAA6B,CAAA;IAC7B,6FAA+B,CAAA;IAC/B,2FAA8B,CAAA;IAC9B,iGAAiC,CAAA;AACnC,CAAC,EArBI,aAAa,KAAb,aAAa,QAqBjB;AAED,eAAe,aAAa,CAAC"}

package/build/dist/Types/Exception/ServiceUnavailableException.js

@@ -0,0 +1,8 @@
+import Exception from "./Exception";
+import ExceptionCode from "./ExceptionCode";
+export default class ServiceUnavailableException extends Exception {
+    constructor(message) {
+        super(ExceptionCode.ServiceUnavailableException, message);
+    }
+}
+//# sourceMappingURL=ServiceUnavailableException.js.map

package/build/dist/Types/Exception/ServiceUnavailableException.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ServiceUnavailableException.js","sourceRoot":"","sources":["../../../../Types/Exception/ServiceUnavailableException.ts"],"names":[],"mappings":"AAAA,OAAO,SAAS,MAAM,aAAa,CAAC;AACpC,OAAO,aAAa,MAAM,iBAAiB,CAAC;AAE5C,MAAM,CAAC,OAAO,OAAO,2BAA4B,SAAQ,SAAS;IAChE,YAAmB,OAAe;QAChC,KAAK,CAAC,aAAa,CAAC,2BAA2B,EAAE,OAAO,CAAC,CAAC;IAC5D,CAAC;CACF"}

package/build/dist/Types/Exception/TooManyRequestsException.js

@@ -0,0 +1,8 @@
+import Exception from "./Exception";
+import ExceptionCode from "./ExceptionCode";
+export default class TooManyRequestsException extends Exception {
+    constructor(message) {
+        super(ExceptionCode.TooManyRequestsException, message);
+    }
+}
+//# sourceMappingURL=TooManyRequestsException.js.map

package/build/dist/Types/Exception/TooManyRequestsException.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"TooManyRequestsException.js","sourceRoot":"","sources":["../../../../Types/Exception/TooManyRequestsException.ts"],"names":[],"mappings":"AAAA,OAAO,SAAS,MAAM,aAAa,CAAC;AACpC,OAAO,aAAa,MAAM,iBAAiB,CAAC;AAE5C,MAAM,CAAC,OAAO,OAAO,wBAAyB,SAAQ,SAAS;IAC7D,YAAmB,OAAe;QAChC,KAAK,CAAC,aAAa,CAAC,wBAAwB,EAAE,OAAO,CAAC,CAAC;IACzD,CAAC;CACF"}

package/build/dist/Types/IP/IP.js

@@ -8,53 +8,76 @@ export default class IP extends DatabaseProperty {
     get ip() {
         return this._ip;
     }
+    /*
+     * Does ONE address match the allowlist?
+     *
+     * This deliberately takes a single `ip` rather than a list. It used to take
+     * an array and return true if ANY member matched, which made it trivially
+     * bypassable when callers fed it a whole X-Forwarded-For chain: the caller
+     * chooses the left-hand entries of that header, so "any entry matches" means
+     * "the caller can name any address they like". Resolve the one address you
+     * mean to check first -- see resolveClientIp in Server/Utils/ClientIp -- and
+     * check that.
+     *
+     * Throws BadDataException if `ip` is not a valid address, so callers must
+     * establish that before asking. Callers making an access decision should
+     * treat a throw as a denial.
+     */
     static isInWhitelist(data) {
-        for (const ip of data.ips) {
-            // If whitelist is empty, return false
-            if (!data.whitelist || data.whitelist.length === 0) {
-                return false;
+        const ip = data.ip;
+        // If whitelist is empty, return false
+        if (!data.whitelist || data.whitelist.length === 0) {
+            return false;
+        }
+        // Check if IP is valid
+        if (!IP.isIP(ip)) {
+            throw new BadDataException("Invalid IP address");
+        }
+        // Check each whitelist entry
+        for (const entry of data.whitelist) {
+            // Skip empty entries
+            const trimmedEntry = entry ? entry.trim() : "";
+            if (trimmedEntry === "") {
+                continue;
             }
-            // Check if IP is valid
-            if (!IP.isIP(ip)) {
-                throw new BadDataException("Invalid IP address");
+            // Direct IP match
+            if (trimmedEntry === ip) {
+                return true;
             }
-            // Check each whitelist entry
-            for (const entry of data.whitelist) {
-                // Skip empty entries
-                if (!entry || entry.trim() === "") {
-                    continue;
-                }
-                // Direct IP match
-                if (entry === ip) {
-                    return true;
-                }
-                // CIDR notation check (IPv4 only for now)
-                if (entry.includes("/") && IP.isIPv4(ip)) {
-                    try {
-                        const [network, prefixStr] = entry.split("/");
-                        if (!network || !prefixStr) {
-                            continue;
-                        }
-                        if (!IP.isIPv4(network)) {
-                            continue;
-                        }
-                        const prefix = parseInt(prefixStr, 10);
-                        if (isNaN(prefix) || prefix < 0 || prefix > 32) {
-                            continue;
-                        }
-                        // Convert IPs to integers for comparison
-                        const ipInt = this._ipv4ToInt(ip);
-                        const networkInt = this._ipv4ToInt(network);
-                        // Create mask from prefix
-                        const mask = ~((1 << (32 - prefix)) - 1) >>> 0;
-                        // Check if IP is in network
-                        if ((ipInt & mask) === (networkInt & mask)) {
-                            return true;
-                        }
+            // CIDR notation check (IPv4 only for now)
+            if (trimmedEntry.includes("/") && IP.isIPv4(ip)) {
+                try {
+                    const [network, prefixStr] = trimmedEntry.split("/");
+                    if (!network || !prefixStr) {
+                        continue;
                     }
-                    catch (_a) {
+                    if (!IP.isIPv4(network)) {
                         continue;
                     }
+                    const prefix = parseInt(prefixStr, 10);
+                    if (isNaN(prefix) || prefix < 0 || prefix > 32) {
+                        continue;
+                    }
+                    // Convert IPs to integers for comparison
+                    const ipInt = this._ipv4ToInt(ip);
+                    const networkInt = this._ipv4ToInt(network);
+                    /*
+                     * Create mask from prefix.
+                     *
+                     * Note: a /0 entry does NOT match everything here -- JS evaluates
+                     * `1 << 32` as `1 << 0`, so the mask comes out 0xFFFFFFFF and /0
+                     * degenerates into an exact match on the network address. Left
+                     * as-is deliberately: correcting it would WIDEN existing
+                     * allowlists, which does not belong in a hardening change.
+                     */
+                    const mask = ~((1 << (32 - prefix)) - 1) >>> 0;
+                    // Check if IP is in network
+                    if ((ipInt & mask) === (networkInt & mask)) {
+                        return true;
+                    }
+                }
+                catch (_a) {
+                    continue;
                 }
             }
         }
@@ -105,13 +128,34 @@ export default class IP extends DatabaseProperty {
     toString() {
         return this.ip;
     }
+    /*
+     * Both validators below are ANCHORED, and deliberately so.
+     *
+     * An unanchored pattern accepts any string that merely CONTAINS something
+     * address-shaped, which is never what a validator should mean. The IPv6
+     * pattern used to be unanchored, so `evil 2001:db8::1 evil`,
+     * `[2001:db8::1]:443` and `2001:0db8:85a3:::8a2e:0370:7334` all reported as
+     * valid addresses. Every consumer of isIP inherited that: an allowlist check
+     * accepted a value it could then never match, a monitor destination stored a
+     * hostname as an IP literal, and IpCanonicalUtil was handed input it could
+     * not canonicalize.
+     *
+     * Neither pattern carries the `g` flag either. `.test()` on a `g` regex is
+     * stateful -- it advances `lastIndex` between calls -- and only happens to
+     * be safe here because the literal is re-created on every call. A hoisted
+     * constant would have made alternate calls silently return the wrong answer.
+     *
+     * Note that neither validator trims: callers pass the exact string they mean
+     * to validate. Whitespace-padded input is rejected, which is how the IPv4
+     * side has always behaved.
+     */
     static isIPv4(str) {
-        const regexExp = /^(([0-9]|[1-9][0-9]|1[0-9]{2}|2[0-4][0-9]|25[0-5])\.){3}([0-9]|[1-9][0-9]|1[0-9]{2}|2[0-4][0-9]|25[0-5])$/gi;
+        const regexExp = /^(([0-9]|[1-9][0-9]|1[0-9]{2}|2[0-4][0-9]|25[0-5])\.){3}([0-9]|[1-9][0-9]|1[0-9]{2}|2[0-4][0-9]|25[0-5])$/i;
         const result = regexExp.test(str);
         return result;
     }
     static isIPv6(str) {
-        const regexExp = /(([0-9a-fA-F]{1,4}:){7,7}[0-9a-fA-F]{1,4}|([0-9a-fA-F]{1,4}:){1,7}:|([0-9a-fA-F]{1,4}:){1,6}:[0-9a-fA-F]{1,4}|([0-9a-fA-F]{1,4}:){1,5}(:[0-9a-fA-F]{1,4}){1,2}|([0-9a-fA-F]{1,4}:){1,4}(:[0-9a-fA-F]{1,4}){1,3}|([0-9a-fA-F]{1,4}:){1,3}(:[0-9a-fA-F]{1,4}){1,4}|([0-9a-fA-F]{1,4}:){1,2}(:[0-9a-fA-F]{1,4}){1,5}|[0-9a-fA-F]{1,4}:((:[0-9a-fA-F]{1,4}){1,6})|:((:[0-9a-fA-F]{1,4}){1,7}|:)|fe80:(:[0-9a-fA-F]{0,4}){0,4}%[0-9a-zA-Z]{1,}|::(ffff(:0{1,4}){0,1}:){0,1}((25[0-5]|(2[0-4]|1{0,1}[0-9]){0,1}[0-9])\.){3,3}(25[0-5]|(2[0-4]|1{0,1}[0-9]){0,1}[0-9])|([0-9a-fA-F]{1,4}:){1,4}:((25[0-5]|(2[0-4]|1{0,1}[0-9]){0,1}[0-9])\.){3,3}(25[0-5]|(2[0-4]|1{0,1}[0-9]){0,1}[0-9]))/gi;
+        const regexExp = /^(?:([0-9a-fA-F]{1,4}:){7,7}[0-9a-fA-F]{1,4}|([0-9a-fA-F]{1,4}:){1,7}:|([0-9a-fA-F]{1,4}:){1,6}:[0-9a-fA-F]{1,4}|([0-9a-fA-F]{1,4}:){1,5}(:[0-9a-fA-F]{1,4}){1,2}|([0-9a-fA-F]{1,4}:){1,4}(:[0-9a-fA-F]{1,4}){1,3}|([0-9a-fA-F]{1,4}:){1,3}(:[0-9a-fA-F]{1,4}){1,4}|([0-9a-fA-F]{1,4}:){1,2}(:[0-9a-fA-F]{1,4}){1,5}|[0-9a-fA-F]{1,4}:((:[0-9a-fA-F]{1,4}){1,6})|:((:[0-9a-fA-F]{1,4}){1,7}|:)|fe80:(:[0-9a-fA-F]{0,4}){0,4}%[0-9a-zA-Z]{1,}|::(ffff(:0{1,4}){0,1}:){0,1}((25[0-5]|(2[0-4]|1{0,1}[0-9]){0,1}[0-9])\.){3,3}(25[0-5]|(2[0-4]|1{0,1}[0-9]){0,1}[0-9])|([0-9a-fA-F]{1,4}:){1,4}:((25[0-5]|(2[0-4]|1{0,1}[0-9]){0,1}[0-9])\.){3,3}(25[0-5]|(2[0-4]|1{0,1}[0-9]){0,1}[0-9]))$/i;
         return regexExp.test(str);
     }
     isIPv4() {

package/build/dist/Types/IP/IP.js.map

@@ -1 +1 @@
-{"version":3,"file":"IP.js","sourceRoot":"","sources":["../../../../Types/IP/IP.ts"],"names":[],"mappings":"AAAA,OAAO,gBAAgB,MAAM,8BAA8B,CAAC;AAC5D,OAAO,gBAAgB,MAAM,+BAA+B,CAAC;AAC7D,OAAO,EAAc,UAAU,EAAE,MAAM,SAAS,CAAC;AACjD,OAAO,MAAM,MAAM,WAAW,CAAC;AAC/B,OAAO,MAAM,MAAM,UAAU,CAAC;AAE9B,OAAO,GAAkB,MAAM,wBAAwB,CAAC;AAExD,MAAM,CAAC,OAAO,OAAO,EAAG,SAAQ,gBAAgB;IAG9C,IAAW,EAAE;QACX,OAAO,IAAI,CAAC,GAAG,CAAC;IAClB,CAAC;IAEM,MAAM,CAAC,aAAa,CAAC,IAG3B;QACC,KAAK,MAAM,EAAE,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;YAC1B,sCAAsC;YACtC,IAAI,CAAC,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACnD,OAAO,KAAK,CAAC;YACf,CAAC;YAED,uBAAuB;YACvB,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;gBACjB,MAAM,IAAI,gBAAgB,CAAC,oBAAoB,CAAC,CAAC;YACnD,CAAC;YAED,6BAA6B;YAC7B,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;gBACnC,qBAAqB;gBACrB,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;oBAClC,SAAS;gBACX,CAAC;gBAED,kBAAkB;gBAClB,IAAI,KAAK,KAAK,EAAE,EAAE,CAAC;oBACjB,OAAO,IAAI,CAAC;gBACd,CAAC;gBAED,0CAA0C;gBAC1C,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC;oBACzC,IAAI,CAAC;wBACH,MAAM,CAAC,OAAO,EAAE,SAAS,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;wBAE9C,IAAI,CAAC,OAAO,IAAI,CAAC,SAAS,EAAE,CAAC;4BAC3B,SAAS;wBACX,CAAC;wBAED,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;4BACxB,SAAS;wBACX,CAAC;wBAED,MAAM,MAAM,GAAW,QAAQ,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;wBAC/C,IAAI,KAAK,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC,IAAI,MAAM,GAAG,EAAE,EAAE,CAAC;4BAC/C,SAAS;wBACX,CAAC;wBAED,yCAAyC;wBACzC,MAAM,KAAK,GAAW,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;wBAC1C,MAAM,UAAU,GAAW,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;wBAEpD,0BAA0B;wBAC1B,MAAM,IAAI,GAAW,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC;wBAEvD,4BAA4B;wBAC5B,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,GAAG,IAAI,CAAC,EAAE,CAAC;4BAC3C,OAAO,IAAI,CAAC;wBACd,CAAC;oBACH,CAAC;oBAAC,WAAM,CAAC;wBACP,SAAS;oBACX,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAED,2CAA2C;IACnC,MAAM,CAAC,UAAU,CAAC,EAAU;QAClC,MAAM,MAAM,GAAa,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAEnD,IACE,MAAM,CAAC,MAAM,KAAK,CAAC;YACnB,MAAM,CAAC,IAAI,CAAC,CAAC,KAAa,EAAE,EAAE;gBAC5B,OAAO,KAAK,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,IAAI,KAAK,GAAG,GAAG,CAAC;YAClD,CAAC,CAAC,EACF,CAAC;YACD,MAAM,IAAI,gBAAgB,CAAC,sBAAsB,CAAC,CAAC;QACrD,CAAC;QAED,OAAO,CACL,CAAC,CAAC,MAAM,CAAC,CAAC,CAAE,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC;YAC1B,CAAC,CAAC,MAAM,CAAC,CAAC,CAAE,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC;YAC1B,CAAC,CAAC,MAAM,CAAC,CAAC,CAAE,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC;YACzB,MAAM,CAAC,CAAC,CAAE,CACX,CAAC;IACJ,CAAC;IAED,IAAW,EAAE,CAAC,KAAa;QACzB,IAAI,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;YACrB,IAAI,CAAC,GAAG,GAAG,KAAK,CAAC;YACjB,IAAI,CAAC,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC;QAC1B,CAAC;aAAM,IAAI,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;YAC5B,IAAI,CAAC,GAAG,GAAG,KAAK,CAAC;YACjB,IAAI,CAAC,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC;QAC1B,CAAC;aAAM,CAAC;YACN,MAAM,IAAI,gBAAgB,CAAC,2BAA2B,CAAC,CAAC;QAC1D,CAAC;IACH,CAAC;IAED,YAAmB,EAAU;QAC3B,KAAK,EAAE,CAAC;QA1GF,QAAG,GAAW,EAAE,CAAC;QACf,SAAI,GAAW,MAAM,CAAC,IAAI,CAAC;QA2GnC,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC;IACf,CAAC;IAEM,MAAM,CAAC,UAAU,CAAC,EAAU;QACjC,OAAO,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC;IACpB,CAAC;IAEM,MAAM,CAAC,IAAI,CAAC,EAAU;QAC3B,IAAI,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC;YACnC,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAEe,QAAQ;QACtB,OAAO,IAAI,CAAC,EAAE,CAAC;IACjB,CAAC;IAEO,MAAM,CAAC,MAAM,CAAC,GAAW;QAC/B,MAAM,QAAQ,GACZ,6GAA6G,CAAC;QAChH,MAAM,MAAM,GAAY,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAE3C,OAAO,MAAM,CAAC;IAChB,CAAC;IAEO,MAAM,CAAC,MAAM,CAAC,GAAW;QAC/B,MAAM,QAAQ,GACZ,upBAAupB,CAAC;QAC1pB,OAAO,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC5B,CAAC;IAEM,MAAM;QACX,IAAI,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;YACvB,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAEM,MAAM;QACX,IAAI,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;YACvB,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAEM,MAAM,CAAU,QAAQ,CAAC,IAAgB;QAC9C,IAAI,IAAI,IAAI,IAAI,CAAC,OAAO,CAAC,KAAK,UAAU,CAAC,EAAE,EAAE,CAAC;YAC5C,MAAM,IAAI,gBAAgB,CAAC,qBAAqB,CAAC,CAAC;QACpD,CAAC;QAED,IAAI,IAAI,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,MAAM,CAAC,MAAM,EAAE,CAAC;YACpE,MAAM,IAAI,gBAAgB,CAAC,qBAAqB,CAAC,CAAC;QACpD,CAAC;QAED,OAAO,IAAI,EAAE,CAAC,IAAI,CAAC,OAAO,CAAW,CAAC,CAAC;IACzC,CAAC;IAEe,MAAM;QACpB,OAAO;YACL,KAAK,EAAE,IAAI,CAAC,QAAQ,EAAE;YACtB,KAAK,EAAE,UAAU,CAAC,EAAE;SACrB,CAAC;IACJ,CAAC;IAEM,MAAM,CAAU,UAAU,CAC/B,KAA4B;QAE5B,IAAI,KAAK,EAAE,CAAC;YACV,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;gBAC9B,KAAK,GAAG,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC;YACxB,CAAC;YAED,OAAO,KAAK,CAAC,QAAQ,EAAE,CAAC;QAC1B,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAEM,MAAM,CAAU,YAAY,CAAC,KAAa;QAC/C,IAAI,KAAK,EAAE,CAAC;YACV,OAAO,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC;QACvB,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAEM,MAAM,CAAU,SAAS;QAC9B,OAAO,GAAG,CAAC,MAAM,CAAC;YAChB,KAAK,EAAE,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;YACjC,KAAK,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC;gBAC1B,IAAI,EAAE,QAAQ;gBACd,OAAO,EAAE,aAAa;aACvB,CAAC;SACH,CAAC,CAAC,OAAO,CAAC;YACT,IAAI,EAAE,QAAQ;YACd,WAAW,EAAE,WAAW;YACxB,OAAO,EAAE,EAAE,KAAK,EAAE,UAAU,CAAC,EAAE,EAAE,KAAK,EAAE,aAAa,EAAE;SACxD,CAAC,CAAC;IACL,CAAC;CACF"}
+{"version":3,"file":"IP.js","sourceRoot":"","sources":["../../../../Types/IP/IP.ts"],"names":[],"mappings":"AAAA,OAAO,gBAAgB,MAAM,8BAA8B,CAAC;AAC5D,OAAO,gBAAgB,MAAM,+BAA+B,CAAC;AAC7D,OAAO,EAAc,UAAU,EAAE,MAAM,SAAS,CAAC;AACjD,OAAO,MAAM,MAAM,WAAW,CAAC;AAC/B,OAAO,MAAM,MAAM,UAAU,CAAC;AAE9B,OAAO,GAAkB,MAAM,wBAAwB,CAAC;AAExD,MAAM,CAAC,OAAO,OAAO,EAAG,SAAQ,gBAAgB;IAG9C,IAAW,EAAE;QACX,OAAO,IAAI,CAAC,GAAG,CAAC;IAClB,CAAC;IAED;;;;;;;;;;;;;;OAcG;IACI,MAAM,CAAC,aAAa,CAAC,IAG3B;QACC,MAAM,EAAE,GAAW,IAAI,CAAC,EAAE,CAAC;QAE3B,sCAAsC;QACtC,IAAI,CAAC,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACnD,OAAO,KAAK,CAAC;QACf,CAAC;QAED,uBAAuB;QACvB,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;YACjB,MAAM,IAAI,gBAAgB,CAAC,oBAAoB,CAAC,CAAC;QACnD,CAAC;QAED,6BAA6B;QAC7B,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACnC,qBAAqB;YACrB,MAAM,YAAY,GAAW,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAEvD,IAAI,YAAY,KAAK,EAAE,EAAE,CAAC;gBACxB,SAAS;YACX,CAAC;YAED,kBAAkB;YAClB,IAAI,YAAY,KAAK,EAAE,EAAE,CAAC;gBACxB,OAAO,IAAI,CAAC;YACd,CAAC;YAED,0CAA0C;YAC1C,IAAI,YAAY,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC;gBAChD,IAAI,CAAC;oBACH,MAAM,CAAC,OAAO,EAAE,SAAS,CAAC,GAAG,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;oBAErD,IAAI,CAAC,OAAO,IAAI,CAAC,SAAS,EAAE,CAAC;wBAC3B,SAAS;oBACX,CAAC;oBAED,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;wBACxB,SAAS;oBACX,CAAC;oBAED,MAAM,MAAM,GAAW,QAAQ,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;oBAC/C,IAAI,KAAK,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC,IAAI,MAAM,GAAG,EAAE,EAAE,CAAC;wBAC/C,SAAS;oBACX,CAAC;oBAED,yCAAyC;oBACzC,MAAM,KAAK,GAAW,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;oBAC1C,MAAM,UAAU,GAAW,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;oBAEpD;;;;;;;;uBAQG;oBACH,MAAM,IAAI,GAAW,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC;oBAEvD,4BAA4B;oBAC5B,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,GAAG,IAAI,CAAC,EAAE,CAAC;wBAC3C,OAAO,IAAI,CAAC;oBACd,CAAC;gBACH,CAAC;gBAAC,WAAM,CAAC;oBACP,SAAS;gBACX,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAED,2CAA2C;IACnC,MAAM,CAAC,UAAU,CAAC,EAAU;QAClC,MAAM,MAAM,GAAa,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAEnD,IACE,MAAM,CAAC,MAAM,KAAK,CAAC;YACnB,MAAM,CAAC,IAAI,CAAC,CAAC,KAAa,EAAE,EAAE;gBAC5B,OAAO,KAAK,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,IAAI,KAAK,GAAG,GAAG,CAAC;YAClD,CAAC,CAAC,EACF,CAAC;YACD,MAAM,IAAI,gBAAgB,CAAC,sBAAsB,CAAC,CAAC;QACrD,CAAC;QAED,OAAO,CACL,CAAC,CAAC,MAAM,CAAC,CAAC,CAAE,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC;YAC1B,CAAC,CAAC,MAAM,CAAC,CAAC,CAAE,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC;YAC1B,CAAC,CAAC,MAAM,CAAC,CAAC,CAAE,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC;YACzB,MAAM,CAAC,CAAC,CAAE,CACX,CAAC;IACJ,CAAC;IAED,IAAW,EAAE,CAAC,KAAa;QACzB,IAAI,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;YACrB,IAAI,CAAC,GAAG,GAAG,KAAK,CAAC;YACjB,IAAI,CAAC,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC;QAC1B,CAAC;aAAM,IAAI,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;YAC5B,IAAI,CAAC,GAAG,GAAG,KAAK,CAAC;YACjB,IAAI,CAAC,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC;QAC1B,CAAC;aAAM,CAAC;YACN,MAAM,IAAI,gBAAgB,CAAC,2BAA2B,CAAC,CAAC;QAC1D,CAAC;IACH,CAAC;IAED,YAAmB,EAAU;QAC3B,KAAK,EAAE,CAAC;QAnIF,QAAG,GAAW,EAAE,CAAC;QACf,SAAI,GAAW,MAAM,CAAC,IAAI,CAAC;QAoInC,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC;IACf,CAAC;IAEM,MAAM,CAAC,UAAU,CAAC,EAAU;QACjC,OAAO,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC;IACpB,CAAC;IAEM,MAAM,CAAC,IAAI,CAAC,EAAU;QAC3B,IAAI,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC;YACnC,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAEe,QAAQ;QACtB,OAAO,IAAI,CAAC,EAAE,CAAC;IACjB,CAAC;IAED;;;;;;;;;;;;;;;;;;;;OAoBG;IACK,MAAM,CAAC,MAAM,CAAC,GAAW;QAC/B,MAAM,QAAQ,GACZ,4GAA4G,CAAC;QAC/G,MAAM,MAAM,GAAY,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAE3C,OAAO,MAAM,CAAC;IAChB,CAAC;IAEO,MAAM,CAAC,MAAM,CAAC,GAAW;QAC/B,MAAM,QAAQ,GACZ,0pBAA0pB,CAAC;QAC7pB,OAAO,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC5B,CAAC;IAEM,MAAM;QACX,IAAI,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;YACvB,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAEM,MAAM;QACX,IAAI,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;YACvB,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAEM,MAAM,CAAU,QAAQ,CAAC,IAAgB;QAC9C,IAAI,IAAI,IAAI,IAAI,CAAC,OAAO,CAAC,KAAK,UAAU,CAAC,EAAE,EAAE,CAAC;YAC5C,MAAM,IAAI,gBAAgB,CAAC,qBAAqB,CAAC,CAAC;QACpD,CAAC;QAED,IAAI,IAAI,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,MAAM,CAAC,MAAM,EAAE,CAAC;YACpE,MAAM,IAAI,gBAAgB,CAAC,qBAAqB,CAAC,CAAC;QACpD,CAAC;QAED,OAAO,IAAI,EAAE,CAAC,IAAI,CAAC,OAAO,CAAW,CAAC,CAAC;IACzC,CAAC;IAEe,MAAM;QACpB,OAAO;YACL,KAAK,EAAE,IAAI,CAAC,QAAQ,EAAE;YACtB,KAAK,EAAE,UAAU,CAAC,EAAE;SACrB,CAAC;IACJ,CAAC;IAEM,MAAM,CAAU,UAAU,CAC/B,KAA4B;QAE5B,IAAI,KAAK,EAAE,CAAC;YACV,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;gBAC9B,KAAK,GAAG,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC;YACxB,CAAC;YAED,OAAO,KAAK,CAAC,QAAQ,EAAE,CAAC;QAC1B,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAEM,MAAM,CAAU,YAAY,CAAC,KAAa;QAC/C,IAAI,KAAK,EAAE,CAAC;YACV,OAAO,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC;QACvB,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAEM,MAAM,CAAU,SAAS;QAC9B,OAAO,GAAG,CAAC,MAAM,CAAC;YAChB,KAAK,EAAE,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;YACjC,KAAK,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC;gBAC1B,IAAI,EAAE,QAAQ;gBACd,OAAO,EAAE,aAAa;aACvB,CAAC;SACH,CAAC,CAAC,OAAO,CAAC;YACT,IAAI,EAAE,QAAQ;YACd,WAAW,EAAE,WAAW;YACxB,OAAO,EAAE,EAAE,KAAK,EAAE,UAAU,CAAC,EAAE,EAAE,KAAK,EAAE,aAAa,EAAE;SACxD,CAAC,CAAC;IACL,CAAC;CACF"}

package/build/dist/Types/NetworkDevice/NetworkDeviceMonitoringMethod.js

@@ -0,0 +1,50 @@
+/*
+ * How a NetworkDevice's health is established.
+ *
+ * The network product was built around SNMP: a device is a thing an assigned
+ * probe walks on a schedule, and everything downstream — the status pill, the
+ * site rollup, the topology map — reads freshness off `lastSeenAt`, which only
+ * a successful walk ever stamps.
+ *
+ * Plenty of real gear cannot be walked. Consumer APs, PDUs, cameras, anything
+ * with SNMP disabled by policy: an operator tracks those with an ordinary Ping
+ * or IP monitor. They are as real a part of the network as the switch they
+ * hang off, and before this existed they could not be recorded as devices at
+ * all — so they were absent from the site hierarchy and from the topology map,
+ * which is what issue #3023 is about.
+ *
+ * `Monitor` is that second answer: no probe, no credentials, no polling; the
+ * bound Monitor's status IS the device's status, stamped through the same
+ * bridge that already stamps SNMP devices watched by a Network Device monitor.
+ *
+ * Stored as free text on the column (the SnmpVersion precedent), so parse it
+ * through `NetworkDeviceMonitoringMethodUtil.parse` rather than comparing the
+ * raw column: rows written before this existed hold NULL and must read as
+ * `Snmp`, which is what they are.
+ */
+export var NetworkDeviceMonitoringMethod;
+(function (NetworkDeviceMonitoringMethod) {
+    // An assigned probe walks the device over SNMP on its own schedule.
+    NetworkDeviceMonitoringMethod["Snmp"] = "SNMP";
+    // No polling; a bound Monitor (Ping, IP, Port, ...) reports its health.
+    NetworkDeviceMonitoringMethod["Monitor"] = "Monitor";
+})(NetworkDeviceMonitoringMethod || (NetworkDeviceMonitoringMethod = {}));
+export class NetworkDeviceMonitoringMethodUtil {
+    /*
+     * NULL, empty and anything unrecognised read as Snmp — that is what every
+     * device created before this column existed is, and defaulting a device
+     * into "monitor-backed" would silently stop it being polled.
+     */
+    static parse(value) {
+        if ((value || "").trim().toLowerCase() === "monitor") {
+            return NetworkDeviceMonitoringMethod.Monitor;
+        }
+        return NetworkDeviceMonitoringMethod.Snmp;
+    }
+    static isMonitorBacked(value) {
+        return (NetworkDeviceMonitoringMethodUtil.parse(value) ===
+            NetworkDeviceMonitoringMethod.Monitor);
+    }
+}
+export default NetworkDeviceMonitoringMethod;
+//# sourceMappingURL=NetworkDeviceMonitoringMethod.js.map

package/build/dist/Types/NetworkDevice/NetworkDeviceMonitoringMethod.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"NetworkDeviceMonitoringMethod.js","sourceRoot":"","sources":["../../../../Types/NetworkDevice/NetworkDeviceMonitoringMethod.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,MAAM,CAAN,IAAY,6BAKX;AALD,WAAY,6BAA6B;IACvC,oEAAoE;IACpE,8CAAa,CAAA;IACb,wEAAwE;IACxE,oDAAmB,CAAA;AACrB,CAAC,EALW,6BAA6B,KAA7B,6BAA6B,QAKxC;AAED,MAAM,OAAO,iCAAiC;IAC5C;;;;OAIG;IACI,MAAM,CAAC,KAAK,CACjB,KAAgC;QAEhC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,KAAK,SAAS,EAAE,CAAC;YACrD,OAAO,6BAA6B,CAAC,OAAO,CAAC;QAC/C,CAAC;QACD,OAAO,6BAA6B,CAAC,IAAI,CAAC;IAC5C,CAAC;IAEM,MAAM,CAAC,eAAe,CAAC,KAAgC;QAC5D,OAAO,CACL,iCAAiC,CAAC,KAAK,CAAC,KAAK,CAAC;YAC9C,6BAA6B,CAAC,OAAO,CACtC,CAAC;IACJ,CAAC;CACF;AAED,eAAe,6BAA6B,CAAC"}