@oneuptime/common 13.0.0 → 13.0.1

package/Types/OnCallDutyPolicy/ScheduleShiftUtil.ts

@@ -255,6 +255,35 @@ export default class ScheduleShiftUtil {
     return event.title;
   }
 
+  /*
+   * Grouping that keeps a shift inside ONE override window: the on-call user
+   * id, plus the override identity when the segment came from an override.
+   *
+   * This is what every surface that LABELS a shift as covered-by-override must
+   * group with. The default key is the user id alone, so a substitute who is
+   * ALSO on the roster has their own rostered segment and the segment they are
+   * covering folded into a single shift — and since a shift only inherits
+   * metadata from its FIRST segment, the merged shift would carry either a
+   * stale override or none at all. Either way the screen names the right person
+   * for the wrong reason: "Bob until 9pm", with nothing saying that half of that
+   * stretch is Bob covering for Alice.
+   *
+   * Unlike groupKeyByUserOverrideAndLayer this deliberately ignores the layer
+   * and the rotation period, so an ordinary hand-over inside one person's turn
+   * still reads as one shift. The only boundary it adds is the one the reader
+   * can see a reason for.
+   */
+  public static groupKeyByUserAndOverride(event: CalendarEvent): string {
+    const override: OverrideEventMeta | null =
+      UserOverrideUtil.getOverrideMeta(event);
+
+    if (!override) {
+      return event.title;
+    }
+
+    return `${event.title}|${override.originalUserId}@${override.overrideStartsAt.getTime()}-${override.overrideEndsAt.getTime()}`;
+  }
+
   /*
    * Grouping that keeps a shift inside ONE layer, ONE override window and ONE
    * rotation period: the user id, plus the override identity (original user +

package/Types/OnCallDutyPolicy/UserOverrideUtil.ts

@@ -16,6 +16,17 @@ export interface OverrideEventMeta {
   overrideUserId: string;
   overrideStartsAt: Date;
   overrideEndsAt: Date;
+  /*
+   * Which override produced this segment: null/undefined for a GLOBAL override
+   * (one that applies through every on-call policy), the policy's id for a
+   * policy-scoped one. Carried on the segment so a renderer can say WHY the
+   * substitution is in force without having to reverse-map the segment back to
+   * the override record that made it - a lookup by (users + window) that cannot
+   * distinguish two overrides sharing both. It is the same distinction the user
+   * makes when creating one from the project's overrides page (global) versus a
+   * policy's own overrides tab (scoped).
+   */
+  onCallDutyPolicyId?: string | null | undefined;
 }
 
 /*
@@ -150,6 +161,11 @@ export default class UserOverrideUtil {
       overrideUserId: override.routeAlertsToUserId,
       overrideStartsAt: override.startsAt,
       overrideEndsAt: override.endsAt,
+      /*
+       * Normalise the record's absent/null policy to null so a consumer can
+       * test one value for "global" instead of three.
+       */
+      onCallDutyPolicyId: override.onCallDutyPolicyId || null,
     };
 
     segments.push({

package/Types/Password.ts

@@ -11,11 +11,8 @@
  */
 
 /*
- * Six is the number every existing OneUptime password form already enforces
- * (Accounts sign-up, Accounts reset-password, the user profile, the status
- * page). It is stated here rather than raised so that adopting this module
- * cannot lock out anyone whose current password was accepted under the old
- * inline rule.
+ * Keep the existing minimum for password-management flows. New account
+ * signup uses the stronger policy below.
  */
 export const MINIMUM_PASSWORD_LENGTH: number = 6;
 
@@ -28,6 +25,88 @@ export const MINIMUM_PASSWORD_LENGTH: number = 6;
  */
 export const MAXIMUM_PASSWORD_LENGTH: number = 100;
 
+export const MINIMUM_SIGNUP_PASSWORD_LENGTH: number = 15;
+
+const COMMON_SIGNUP_PASSWORDS: Set<string> = new Set([
+  "password",
+  "oneuptime",
+  "letmein",
+  "iloveyou",
+  "welcome",
+  "admin",
+  "changeme",
+]);
+
+const REPEATED_SIGNUP_PASSWORD_PATTERN: RegExp = /^(.{1,14})\1+$/u;
+
+/**
+ * Check obvious patterns independently of length so signup can show each
+ * requirement as the user types. Blank input returns true so an empty form
+ * cannot complete this requirement.
+ * Passing this check alone does not mean the password is valid or strong.
+ */
+export function isPredictableSignupPassword(password: string): boolean {
+  if (password.trim().length === 0) {
+    return true;
+  }
+
+  // Comparison only: padding, punctuation and casing do not rescue an obvious pattern.
+  const comparable: string =
+    password.toLowerCase().replace(/[\s\p{P}\p{Sc}\p{Sm}\p{Sk}]/gu, "") ||
+    password.toLowerCase().replace(/\s/gu, "");
+  const sequences: Array<string> = [
+    "0123456789",
+    "abcdefghijklmnopqrstuvwxyz",
+    "qwertyuiopasdfghjklzxcvbnm",
+  ];
+  const isSequence: boolean = sequences.some((sequence: string): boolean => {
+    return (
+      sequence.repeat(10).includes(comparable) ||
+      Array.from(sequence).reverse().join("").repeat(10).includes(comparable)
+    );
+  });
+
+  return (
+    REPEATED_SIGNUP_PASSWORD_PATTERN.test(comparable) ||
+    COMMON_SIGNUP_PASSWORDS.has(comparable.replace(/\d+$/u, "")) ||
+    isSequence
+  );
+}
+
+/** New accounts use a stronger policy; existing credentials remain valid. */
+export function getSignupPasswordValidationError(
+  password: unknown,
+): string | null {
+  if (password === undefined || password === null || password === "") {
+    return "Password is required.";
+  }
+
+  if (typeof password !== "string") {
+    return "Password must be a string.";
+  }
+
+  if (password.trim().length === 0) {
+    return "Password cannot be blank.";
+  }
+
+  // Count Unicode characters, including emoji, once each. Never alter the secret.
+  const length: number = Array.from(password).length;
+
+  if (length < MINIMUM_SIGNUP_PASSWORD_LENGTH) {
+    return `Password must be at least ${MINIMUM_SIGNUP_PASSWORD_LENGTH} characters.`;
+  }
+
+  if (length > MAXIMUM_PASSWORD_LENGTH) {
+    return `Password cannot be more than ${MAXIMUM_PASSWORD_LENGTH} characters.`;
+  }
+
+  if (isPredictableSignupPassword(password)) {
+    return "Choose a less predictable password. Try a few unrelated words.";
+  }
+
+  return null;
+}
+
 /**
  * Why this password is unacceptable, or null if it is fine.
  *

package/Types/Permission.ts

@@ -703,12 +703,24 @@ enum Permission {
   EditCephClusterOwnerRule = "EditCephClusterOwnerRule",
   ReadCephClusterOwnerRule = "ReadCephClusterOwnerRule",
 
+  // vCenter (VMware) Owner Rule Permissions
+  CreateVMwareVCenterOwnerRule = "CreateVMwareVCenterOwnerRule",
+  DeleteVMwareVCenterOwnerRule = "DeleteVMwareVCenterOwnerRule",
+  EditVMwareVCenterOwnerRule = "EditVMwareVCenterOwnerRule",
+  ReadVMwareVCenterOwnerRule = "ReadVMwareVCenterOwnerRule",
+
   // Ceph Cluster Label Rule Permissions
   CreateCephClusterLabelRule = "CreateCephClusterLabelRule",
   DeleteCephClusterLabelRule = "DeleteCephClusterLabelRule",
   EditCephClusterLabelRule = "EditCephClusterLabelRule",
   ReadCephClusterLabelRule = "ReadCephClusterLabelRule",
 
+  // vCenter (VMware) Label Rule Permissions
+  CreateVMwareVCenterLabelRule = "CreateVMwareVCenterLabelRule",
+  DeleteVMwareVCenterLabelRule = "DeleteVMwareVCenterLabelRule",
+  EditVMwareVCenterLabelRule = "EditVMwareVCenterLabelRule",
+  ReadVMwareVCenterLabelRule = "ReadVMwareVCenterLabelRule",
+
   // Runbook Owner Rule Permissions
   CreateRunbookOwnerRule = "CreateRunbookOwnerRule",
   DeleteRunbookOwnerRule = "DeleteRunbookOwnerRule",
@@ -1075,6 +1087,10 @@ enum Permission {
   EditCephClusterFeed = "EditCephClusterFeed",
   ReadCephClusterFeed = "ReadCephClusterFeed",
 
+  CreateVMwareVCenterFeed = "CreateVMwareVCenterFeed",
+  EditVMwareVCenterFeed = "EditVMwareVCenterFeed",
+  ReadVMwareVCenterFeed = "ReadVMwareVCenterFeed",
+
   CreatePodmanHostFeed = "CreatePodmanHostFeed",
   EditPodmanHostFeed = "EditPodmanHostFeed",
   ReadPodmanHostFeed = "ReadPodmanHostFeed",
@@ -1507,6 +1523,11 @@ enum Permission {
   EditCephCluster = "EditCephCluster",
   ReadCephCluster = "ReadCephCluster",
 
+  CreateVMwareVCenter = "CreateVMwareVCenter",
+  DeleteVMwareVCenter = "DeleteVMwareVCenter",
+  EditVMwareVCenter = "EditVMwareVCenter",
+  ReadVMwareVCenter = "ReadVMwareVCenter",
+
   CreateProxmoxClusterOwnerTeam = "CreateProxmoxClusterOwnerTeam",
   CreateDockerSwarmClusterOwnerTeam = "CreateDockerSwarmClusterOwnerTeam",
   DeleteProxmoxClusterOwnerTeam = "DeleteProxmoxClusterOwnerTeam",
@@ -1540,11 +1561,21 @@ enum Permission {
   EditCephClusterOwnerTeam = "EditCephClusterOwnerTeam",
   ReadCephClusterOwnerTeam = "ReadCephClusterOwnerTeam",
 
+  CreateVMwareVCenterOwnerTeam = "CreateVMwareVCenterOwnerTeam",
+  DeleteVMwareVCenterOwnerTeam = "DeleteVMwareVCenterOwnerTeam",
+  EditVMwareVCenterOwnerTeam = "EditVMwareVCenterOwnerTeam",
+  ReadVMwareVCenterOwnerTeam = "ReadVMwareVCenterOwnerTeam",
+
   CreateCephClusterOwnerUser = "CreateCephClusterOwnerUser",
   DeleteCephClusterOwnerUser = "DeleteCephClusterOwnerUser",
   EditCephClusterOwnerUser = "EditCephClusterOwnerUser",
   ReadCephClusterOwnerUser = "ReadCephClusterOwnerUser",
 
+  CreateVMwareVCenterOwnerUser = "CreateVMwareVCenterOwnerUser",
+  DeleteVMwareVCenterOwnerUser = "DeleteVMwareVCenterOwnerUser",
+  EditVMwareVCenterOwnerUser = "EditVMwareVCenterOwnerUser",
+  ReadVMwareVCenterOwnerUser = "ReadVMwareVCenterOwnerUser",
+
   CreateHost = "CreateHost",
   DeleteHost = "DeleteHost",
   EditHost = "EditHost",
@@ -3499,6 +3530,37 @@ export class PermissionHelper {
         group: PermissionGroup.Telemetry,
       },
 
+      {
+        permission: Permission.CreateVMwareVCenterFeed,
+        title: "Create vCenter Feed",
+        description:
+          "This permission can create the activity feed of a vCenter in this project.",
+        isAssignableToTenant: true,
+        isAccessControlPermission: false,
+        isRolePermission: false,
+        group: PermissionGroup.Telemetry,
+      },
+      {
+        permission: Permission.EditVMwareVCenterFeed,
+        title: "Edit vCenter Feed",
+        description:
+          "This permission can edit the activity feed of a vCenter in this project.",
+        isAssignableToTenant: true,
+        isAccessControlPermission: false,
+        isRolePermission: false,
+        group: PermissionGroup.Telemetry,
+      },
+      {
+        permission: Permission.ReadVMwareVCenterFeed,
+        title: "Read vCenter Feed",
+        description:
+          "This permission can read the activity feed of a vCenter in this project.",
+        isAssignableToTenant: true,
+        isAccessControlPermission: false,
+        isRolePermission: false,
+        group: PermissionGroup.Telemetry,
+      },
+
       {
         permission: Permission.CreatePodmanHostFeed,
         title: "Create Podman Host Feed",
@@ -9259,6 +9321,43 @@ export class PermissionHelper {
         isRolePermission: false,
         group: PermissionGroup.Telemetry,
       },
+
+      {
+        permission: Permission.CreateVMwareVCenter,
+        title: "Create vCenter",
+        description: "This permission can create vCenter in this project.",
+        isAssignableToTenant: true,
+        isAccessControlPermission: false,
+        isRolePermission: false,
+        group: PermissionGroup.Telemetry,
+      },
+      {
+        permission: Permission.DeleteVMwareVCenter,
+        title: "Delete vCenter",
+        description: "This permission can delete vCenter of this project.",
+        isAssignableToTenant: true,
+        isAccessControlPermission: true,
+        isRolePermission: false,
+        group: PermissionGroup.Telemetry,
+      },
+      {
+        permission: Permission.EditVMwareVCenter,
+        title: "Edit vCenter",
+        description: "This permission can edit vCenter of this project.",
+        isAssignableToTenant: true,
+        isAccessControlPermission: true,
+        isRolePermission: false,
+        group: PermissionGroup.Telemetry,
+      },
+      {
+        permission: Permission.ReadVMwareVCenter,
+        title: "Read vCenter",
+        description: "This permission can read vCenter of this project.",
+        isAssignableToTenant: true,
+        isAccessControlPermission: true,
+        isRolePermission: false,
+        group: PermissionGroup.Telemetry,
+      },
     ];
 
     /*
@@ -10316,6 +10415,47 @@ export class PermissionHelper {
         group: PermissionGroup.Telemetry,
       },
 
+      {
+        permission: Permission.CreateVMwareVCenterOwnerTeam,
+        title: "Create vCenter Team Owner",
+        description:
+          "This permission can create vCenter Team Owner of this project.",
+        isAssignableToTenant: true,
+        isAccessControlPermission: false,
+        isRolePermission: false,
+        group: PermissionGroup.Telemetry,
+      },
+      {
+        permission: Permission.DeleteVMwareVCenterOwnerTeam,
+        title: "Delete vCenter Team Owner",
+        description:
+          "This permission can delete vCenter Team Owner of this project.",
+        isAssignableToTenant: true,
+        isAccessControlPermission: false,
+        isRolePermission: false,
+        group: PermissionGroup.Telemetry,
+      },
+      {
+        permission: Permission.EditVMwareVCenterOwnerTeam,
+        title: "Edit vCenter Team Owner",
+        description:
+          "This permission can edit vCenter Team Owner of this project.",
+        isAssignableToTenant: true,
+        isAccessControlPermission: false,
+        isRolePermission: false,
+        group: PermissionGroup.Telemetry,
+      },
+      {
+        permission: Permission.ReadVMwareVCenterOwnerTeam,
+        title: "Read vCenter Team Owner",
+        description:
+          "This permission can read vCenter Team Owner of this project.",
+        isAssignableToTenant: true,
+        isAccessControlPermission: false,
+        isRolePermission: false,
+        group: PermissionGroup.Telemetry,
+      },
+
       {
         permission: Permission.CreateCephClusterOwnerUser,
         title: "Create Ceph Cluster User Owner",
@@ -10357,6 +10497,47 @@ export class PermissionHelper {
         group: PermissionGroup.Telemetry,
       },
 
+      {
+        permission: Permission.CreateVMwareVCenterOwnerUser,
+        title: "Create vCenter User Owner",
+        description:
+          "This permission can create vCenter User Owner of this project.",
+        isAssignableToTenant: true,
+        isAccessControlPermission: false,
+        isRolePermission: false,
+        group: PermissionGroup.Telemetry,
+      },
+      {
+        permission: Permission.DeleteVMwareVCenterOwnerUser,
+        title: "Delete vCenter User Owner",
+        description:
+          "This permission can delete vCenter User Owner of this project.",
+        isAssignableToTenant: true,
+        isAccessControlPermission: false,
+        isRolePermission: false,
+        group: PermissionGroup.Telemetry,
+      },
+      {
+        permission: Permission.EditVMwareVCenterOwnerUser,
+        title: "Edit vCenter User Owner",
+        description:
+          "This permission can edit vCenter User Owner of this project.",
+        isAssignableToTenant: true,
+        isAccessControlPermission: false,
+        isRolePermission: false,
+        group: PermissionGroup.Telemetry,
+      },
+      {
+        permission: Permission.ReadVMwareVCenterOwnerUser,
+        title: "Read vCenter User Owner",
+        description:
+          "This permission can read vCenter User Owner of this project.",
+        isAssignableToTenant: true,
+        isAccessControlPermission: false,
+        isRolePermission: false,
+        group: PermissionGroup.Telemetry,
+      },
+
       {
         permission: Permission.CreateDockerHostOwnerTeam,
         title: "Create Docker Host Team Owner",
@@ -12994,6 +13175,48 @@ export class PermissionHelper {
         group: PermissionGroup.Telemetry,
       },
 
+      // vCenter (VMware) Owner Rule Permissions
+      {
+        permission: Permission.CreateVMwareVCenterOwnerRule,
+        title: "Create vCenter Owner Rule",
+        description:
+          "This permission can create vCenter Owner Rules in this project.",
+        isAssignableToTenant: true,
+        isAccessControlPermission: false,
+        isRolePermission: false,
+        group: PermissionGroup.Telemetry,
+      },
+      {
+        permission: Permission.DeleteVMwareVCenterOwnerRule,
+        title: "Delete vCenter Owner Rule",
+        description:
+          "This permission can delete vCenter Owner Rules of this project.",
+        isAssignableToTenant: true,
+        isAccessControlPermission: false,
+        isRolePermission: false,
+        group: PermissionGroup.Telemetry,
+      },
+      {
+        permission: Permission.EditVMwareVCenterOwnerRule,
+        title: "Edit vCenter Owner Rule",
+        description:
+          "This permission can edit vCenter Owner Rules of this project.",
+        isAssignableToTenant: true,
+        isAccessControlPermission: false,
+        isRolePermission: false,
+        group: PermissionGroup.Telemetry,
+      },
+      {
+        permission: Permission.ReadVMwareVCenterOwnerRule,
+        title: "Read vCenter Owner Rule",
+        description:
+          "This permission can read vCenter Owner Rules of this project.",
+        isAssignableToTenant: true,
+        isAccessControlPermission: false,
+        isRolePermission: false,
+        group: PermissionGroup.Telemetry,
+      },
+
       // Ceph Cluster Label Rule Permissions
       {
         permission: Permission.CreateCephClusterLabelRule,
@@ -13036,6 +13259,48 @@ export class PermissionHelper {
         group: PermissionGroup.Telemetry,
       },
 
+      // vCenter (VMware) Label Rule Permissions
+      {
+        permission: Permission.CreateVMwareVCenterLabelRule,
+        title: "Create vCenter Label Rule",
+        description:
+          "This permission can create vCenter Label Rules in this project.",
+        isAssignableToTenant: true,
+        isAccessControlPermission: false,
+        isRolePermission: false,
+        group: PermissionGroup.Telemetry,
+      },
+      {
+        permission: Permission.DeleteVMwareVCenterLabelRule,
+        title: "Delete vCenter Label Rule",
+        description:
+          "This permission can delete vCenter Label Rules of this project.",
+        isAssignableToTenant: true,
+        isAccessControlPermission: false,
+        isRolePermission: false,
+        group: PermissionGroup.Telemetry,
+      },
+      {
+        permission: Permission.EditVMwareVCenterLabelRule,
+        title: "Edit vCenter Label Rule",
+        description:
+          "This permission can edit vCenter Label Rules of this project.",
+        isAssignableToTenant: true,
+        isAccessControlPermission: false,
+        isRolePermission: false,
+        group: PermissionGroup.Telemetry,
+      },
+      {
+        permission: Permission.ReadVMwareVCenterLabelRule,
+        title: "Read vCenter Label Rule",
+        description:
+          "This permission can read vCenter Label Rules of this project.",
+        isAssignableToTenant: true,
+        isAccessControlPermission: false,
+        isRolePermission: false,
+        group: PermissionGroup.Telemetry,
+      },
+
       // Runbook Owner Rule Permissions
       {
         permission: Permission.CreateRunbookOwnerRule,

package/Types/Probe/RequestFailedDetails.ts

@@ -20,6 +20,13 @@ export enum RequestFailedPhase {
   NetworkError = "Network Error",
   // Certificate error
   CertificateError = "Certificate Error",
+  /*
+   * The probe never opened a socket: it could not turn the target hostname
+   * into an address it is allowed to dial. Covers DNS failures and egress
+   * policy rejections, which are deliberately reported as one phase so a
+   * tenant cannot tell them apart (see EgressGuardException).
+   */
+  TargetResolution = "Target Resolution",
   // Unknown error
   Unknown = "Unknown",
 }

package/Types/Runner/RunnerLiveStatus.ts

@@ -83,7 +83,7 @@ export const getRunnerLiveStatus: GetRunnerLiveStatusFunction = (
 /*
  * The English label for each state, which is also its i18next lookup key.
  *
- * "Connected" and "Disconnected" already had translations in all sixteen
+ * "Connected" and "Disconnected" already had translations in all seventeen
  * Dashboard locale files before any of this — the probe pages have used them
  * for years — so routing every Runner status label through these three
  * constants is what lets the new state reuse them instead of inventing a

package/Types/SecurityEvent/GoogleSecOpsDiagnostics.ts

@@ -0,0 +1,56 @@
+export type GoogleSecOpsRunType = "test" | "poll" | "preview" | "backfill";
+
+export type GoogleSecOpsRunStatus =
+  | "queued"
+  | "running"
+  | "success"
+  | "empty"
+  | "partial"
+  | "failed";
+
+export interface GoogleSecOpsRunOptions {
+  type: GoogleSecOpsRunType;
+  runId?: string | undefined;
+  startTime?: string | undefined;
+  endTime?: string | undefined;
+}
+
+export interface GoogleSecOpsDetectionSample {
+  id: string;
+  ruleName: string;
+  detectionTime?: string | undefined;
+  createdTime?: string | undefined;
+  isAlert?: boolean | undefined;
+}
+
+export interface GoogleSecOpsDiagnosticCheck {
+  name: string;
+  status: "success" | "failed";
+  durationMs: number;
+  message: string;
+}
+
+export interface GoogleSecOpsRunResult {
+  type: GoogleSecOpsRunType;
+  runId?: string | undefined;
+  status: GoogleSecOpsRunStatus;
+  startedAt: string;
+  completedAt: string;
+  durationMs: number;
+  windowStart: string;
+  windowEnd: string;
+  includeNonAlertingDetections: boolean;
+  fetchedCount: number;
+  ingestedCount: number;
+  duplicateCount: number;
+  rejectedCount: number;
+  failedCount: number;
+  complete: boolean;
+  requestCount: number;
+  warnings: Array<string>;
+  samples: Array<GoogleSecOpsDetectionSample>;
+  checks: Array<GoogleSecOpsDiagnosticCheck>;
+  eventTimeStart?: string | undefined;
+  eventTimeEnd?: string | undefined;
+  error?: string | undefined;
+}

package/Types/StatusPage/StatusPageLanguage.ts

@@ -31,6 +31,7 @@ export const SUPPORTED_STATUS_PAGE_LANGUAGES: Array<StatusPageLanguage> = [
     englishName: "Chinese (Traditional)",
   },
   { code: "hi", nativeName: "हिन्दी", englishName: "Hindi" },
+  { code: "fa", nativeName: "فارسی", englishName: "Persian" },
 ];
 
 export const SUPPORTED_STATUS_PAGE_LANGUAGE_CODES: Array<string> =

package/Types/Telemetry/EntityType.ts

@@ -38,6 +38,27 @@ enum EntityType {
   ProxmoxNode = "proxmox.node",
   ProxmoxGuest = "proxmox.guest",
   CephCluster = "ceph.cluster",
+  /*
+   * VMware vSphere types are OneUptime-defined (no upstream semconv exists)
+   * and follow the same dotted naming convention. The root identity
+   * attribute `vmware.vcenter.name` is NOT emitted by vSphere: it is stamped
+   * by the OneUptime VMware agent's collector config (a `resource`
+   * processor), names the vCenter Server or standalone ESXi endpoint the
+   * agent connects to, and doubles as the typed VMwareVCenter row's
+   * project-unique `name`. Every other identifying attribute
+   * (`vcenter.datacenter.name`, `vcenter.cluster.name`, `vcenter.host.name`,
+   * `vcenter.vm.id` / `vcenter.vm_template.id`, `vcenter.datastore.name`)
+   * is a resource attribute the OpenTelemetry Collector `vcenter` receiver
+   * emits per vSphere object; each child identity folds the vCenter
+   * identity in so two vCenters with a cluster named "Prod" never collide.
+   * Datacenters and resource pools are inventory rows (VMwareResource) but
+   * deliberately not entities.
+   */
+  VMwareVCenter = "vmware.vcenter",
+  VMwareCluster = "vmware.cluster",
+  VMwareHost = "vmware.host",
+  VMwareVirtualMachine = "vmware.vm",
+  VMwareDatastore = "vmware.datastore",
   /*
    * Docker Swarm types are OneUptime-defined (no upstream semconv
    * exists) but follow the same dotted naming convention. The

package/Types/Telemetry/ServiceType.ts

@@ -20,6 +20,7 @@ enum ServiceType {
   ProxmoxCluster = "ProxmoxCluster",
   CephCluster = "CephCluster",
   DockerSwarmCluster = "DockerSwarmCluster",
+  VMwareVCenter = "VMwareVCenter",
   IoTDevice = "IoTDevice",
   ServerlessFunction = "ServerlessFunction",
   CloudResource = "CloudResource",