@oneuptime/common 13.0.5 → 13.0.6

package/UI/Components/TelemetryViewer/components/LockedFilterActions.tsx

@@ -1,205 +0,0 @@
-import React, { FunctionComponent, ReactElement } from "react";
-import Icon from "../../Icon/Icon";
-import Link from "../../Link/Link";
-import Tooltip from "../../Tooltip/Tooltip";
-import IconProp from "../../../../Types/Icon/IconProp";
-import Route from "../../../../Types/API/Route";
-import URL from "../../../../Types/API/URL";
-import {
-  TELEMETRY_EXPLORER_LABELS,
-  TelemetrySignal,
-} from "../../../../Utils/Telemetry/LockedFilterSearch";
-import { CopiedFeedback, useCopiedFeedback } from "./LockedFilterChip";
-
-/*
- * The two ways out of a locked scope: copy every locked chip as search
- * syntax to paste into the main explorer, or open that explorer with the
- * same filters already applied. Rendered once, after the locked chips, so
- * the whole pinned scope travels together — a reader on a Docker host's
- * Logs tab wants "host AND runtime", not one of them.
- */
-
-/** What the host viewer knows about reproducing its locked scope elsewhere. */
-export interface LockedFilterActionOptions {
-  /** Search-bar text reproducing every locked chip on the same-signal explorer. */
-  copyText?: string | undefined;
-  /** The same-signal explorer, with the locked filters in its URL. */
-  openExplorerRoute?: Route | URL | undefined;
-  /** Locked filters the link cannot carry, as short labels. */
-  notCarried?: Array<string> | undefined;
-}
-
-export interface LockedFilterActionsProps extends LockedFilterActionOptions {
-  signal: TelemetrySignal;
-}
-
-const ACTION_CLASS_NAME: string =
-  "inline-flex h-6 items-center gap-1.5 rounded-md px-2 text-xs font-medium transition-colors focus:outline-none focus-visible:ring-2 focus-visible:ring-indigo-400";
-
-const ACTION_IDLE_CLASS_NAME: string =
-  "text-gray-600 hover:bg-gray-100 hover:text-gray-900";
-
-const ACTION_COPIED_CLASS_NAME: string = "bg-emerald-50 text-emerald-600";
-
-const ACTION_FAILED_CLASS_NAME: string = "bg-rose-50 text-rose-600";
-
-type GetCopyAriaLabelFunction = (explorerLabel: string) => string;
-
-export const getCopyLockedFiltersAriaLabel: GetCopyAriaLabelFunction = (
-  explorerLabel: string,
-): string => {
-  return `Copy locked filters as ${explorerLabel} search`;
-};
-
-type FormatNotCarriedFunction = (
-  notCarried: Array<string> | undefined,
-) => string;
-
-/** " — not carried over: a, b", or "" when everything travels. */
-export const formatNotCarriedSuffix: FormatNotCarriedFunction = (
-  notCarried: Array<string> | undefined,
-): string => {
-  const labels: Array<string> = (notCarried || []).filter((label: string) => {
-    return typeof label === "string" && label.trim().length > 0;
-  });
-
-  if (labels.length === 0) {
-    return "";
-  }
-
-  return ` — not carried over: ${labels.join(", ")}`;
-};
-
-type GetOpenAriaLabelFunction = (
-  explorerLabel: string,
-  notCarried?: Array<string> | undefined,
-) => string;
-
-/**
- * The accessible name of the "Open in …" link: its visible text plus, when
- * the link cannot carry everything, the same caveat the tooltip shows. The
- * caveat rides a visually-hidden span inside the link rather than a title,
- * so a screen reader hears it before activating, and hovering shows one
- * bubble (the tooltip) instead of the tooltip and the browser's own.
- */
-export const getOpenExplorerAriaLabel: GetOpenAriaLabelFunction = (
-  explorerLabel: string,
-  notCarried?: Array<string> | undefined,
-): string => {
-  return `Open in ${explorerLabel}${formatNotCarriedSuffix(notCarried)}`;
-};
-
-type CopyButtonTextFunction = (feedback: CopiedFeedback) => string;
-
-const copyButtonText: CopyButtonTextFunction = (
-  feedback: CopiedFeedback,
-): string => {
-  if (feedback.copied) {
-    return "Copied!";
-  }
-
-  if (feedback.failed) {
-    return "Copy failed";
-  }
-
-  return "Copy filter";
-};
-
-const LockedFilterActions: FunctionComponent<LockedFilterActionsProps> = (
-  props: LockedFilterActionsProps,
-): ReactElement | null => {
-  const feedback: CopiedFeedback = useCopiedFeedback();
-
-  const copyText: string = (props.copyText || "").trim();
-  const hasCopy: boolean = copyText.length > 0;
-  const hasOpen: boolean = Boolean(props.openExplorerRoute);
-
-  if (!hasCopy && !hasOpen) {
-    return null;
-  }
-
-  const explorerLabel: string = TELEMETRY_EXPLORER_LABELS[props.signal];
-  const notCarriedSuffix: string = formatNotCarriedSuffix(props.notCarried);
-
-  const copyClassName: string = feedback.copied
-    ? ACTION_COPIED_CLASS_NAME
-    : feedback.failed
-      ? ACTION_FAILED_CLASS_NAME
-      : ACTION_IDLE_CLASS_NAME;
-
-  return (
-    <div
-      className="inline-flex items-center gap-0.5 rounded-md border border-gray-200 bg-white p-0.5 shadow-sm"
-      role="group"
-      aria-label="Locked filter actions"
-      data-testid="locked-filter-actions"
-    >
-      {hasCopy && (
-        <Tooltip
-          richContent={
-            <div className="w-72 max-w-full space-y-1.5 p-1 text-left text-xs">
-              <p className="text-gray-700">
-                Copies the locked filters as search syntax. Paste it into the{" "}
-                {explorerLabel} explorer search bar to see the same slice there.
-              </p>
-              <code className="block break-all rounded border border-gray-200 bg-gray-50 px-1.5 py-1 font-mono text-[11px] text-gray-800">
-                {copyText}
-              </code>
-            </div>
-          }
-        >
-          <button
-            type="button"
-            aria-label={getCopyLockedFiltersAriaLabel(explorerLabel)}
-            className={`${ACTION_CLASS_NAME} ${copyClassName}`}
-            onClick={(event: React.MouseEvent<HTMLButtonElement>) => {
-              event.preventDefault();
-              event.stopPropagation();
-              void feedback.copy(copyText);
-            }}
-          >
-            <Icon
-              icon={
-                feedback.copied
-                  ? IconProp.Check
-                  : feedback.failed
-                    ? IconProp.Close
-                    : IconProp.Clipboard
-              }
-              className="h-3.5 w-3.5"
-            />
-            <span>{copyButtonText(feedback)}</span>
-          </button>
-        </Tooltip>
-      )}
-      {hasOpen && (
-        <Tooltip
-          text={`Opens the ${explorerLabel} explorer with these filters applied${notCarriedSuffix}`}
-        >
-          {/*
-           * Tippy attaches to its child through a ref, which the Link
-           * component (a plain function component) cannot take — the span
-           * is the tooltip's anchor, the anchor inside it is the link. No
-           * title on the link: Link mirrors a title into aria-label AND a
-           * native bubble, which would both contradict the caveat and
-           * double the tooltip.
-           */}
-          <span className="inline-flex">
-            <Link
-              to={props.openExplorerRoute}
-              className={`${ACTION_CLASS_NAME} ${ACTION_IDLE_CLASS_NAME}`}
-            >
-              <Icon icon={IconProp.ExternalLink} className="h-3.5 w-3.5" />
-              <span>Open in {explorerLabel}</span>
-              {notCarriedSuffix && (
-                <span className="sr-only">{notCarriedSuffix}</span>
-              )}
-            </Link>
-          </span>
-        </Tooltip>
-      )}
-    </div>
-  );
-};
-
-export default LockedFilterActions;

package/build/dist/Models/DatabaseModels/GoogleSecOpsConnection.js

@@ -1,478 +0,0 @@
-var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
-    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
-    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-    return c > 3 && r && Object.defineProperty(target, key, r), r;
-};
-var __metadata = (this && this.__metadata) || function (k, v) {
-    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
-};
-import Project from "./Project";
-import User from "./User";
-import BaseModel from "./DatabaseBaseModel/DatabaseBaseModel";
-import Route from "../../Types/API/Route";
-import ColumnAccessControl from "../../Types/Database/AccessControl/ColumnAccessControl";
-import TableAccessControl from "../../Types/Database/AccessControl/TableAccessControl";
-import TableBillingAccessControl from "../../Types/Database/AccessControl/TableBillingAccessControl";
-import ColumnLength from "../../Types/Database/ColumnLength";
-import ColumnType from "../../Types/Database/ColumnType";
-import CrudApiEndpoint from "../../Types/Database/CrudApiEndpoint";
-import EnableDocumentation from "../../Types/Database/EnableDocumentation";
-import TableColumn from "../../Types/Database/TableColumn";
-import TableColumnType from "../../Types/Database/TableColumnType";
-import TableMetadata from "../../Types/Database/TableMetadata";
-import TenantColumn from "../../Types/Database/TenantColumn";
-import IconProp from "../../Types/Icon/IconProp";
-import ObjectID from "../../Types/ObjectID";
-import Permission from "../../Types/Permission";
-import { PlanType } from "../../Types/Billing/SubscriptionPlan";
-import { Column, Entity, Index, JoinColumn, ManyToOne } from "typeorm";
-/*
- * Configuring the connector means pointing the project at someone's Chronicle
- * instance and holding the service-account key that reads it, so it stays on
- * the Admin tiers. SecurityAdmin joins them: this is the SIEM's own plumbing,
- * and the role that runs the SIEM is the one that should be able to connect it
- * to a source without also being a project administrator.
- *
- * The key itself is not covered by any of these - serviceAccountJson declares
- * `read: []` and is never returned by the API.
- */
-const adminPermissions = [
-    Permission.ProjectOwner,
-    Permission.ProjectAdmin,
-    Permission.SecurityAdmin,
-];
-const readPermissions = [
-    Permission.ProjectOwner,
-    Permission.ProjectAdmin,
-    Permission.SecurityAdmin,
-    Permission.SecurityMember,
-    Permission.SecurityViewer,
-];
-/*
- * Managed pull connector for Google SecOps (Chronicle): the detections
- * poller. Each connection holds the tenant's instance resource name plus
- * a service-account credential; a Workers cron polls detection alerts on
- * an interval and ingests them as Detection Finding security events.
- */
-let GoogleSecOpsConnection = class GoogleSecOpsConnection extends BaseModel {
-    constructor() {
-        super(...arguments);
-        this.project = undefined;
-        this.projectId = undefined;
-        this.name = undefined;
-        this.region = undefined;
-        this.instanceResourceName = undefined;
-        this.serviceAccountJson = undefined;
-        this.isEnabled = undefined;
-        this.pollIntervalInMinutes = undefined;
-        this.includeNonAlertingDetections = undefined;
-        this.lastSuccessfulPollAt = undefined;
-        this.lastEventIngestedAt = undefined;
-        this.lastPollResult = undefined;
-        /*
-         * Poller-owned state. Written only by the connection worker.
-         */
-        this.lastPolledAt = undefined;
-        this.cursor = undefined;
-        this.lastError = undefined;
-        this.createdByUser = undefined;
-        this.createdByUserId = undefined;
-        this.deletedByUser = undefined;
-        this.deletedByUserId = undefined;
-    }
-};
-__decorate([
-    ColumnAccessControl({
-        create: adminPermissions,
-        read: readPermissions,
-        update: [],
-    }),
-    TableColumn({
-        manyToOneRelationColumn: "projectId",
-        type: TableColumnType.Entity,
-        modelType: Project,
-        title: "Project",
-        description: "Relation to the project this connection belongs to.",
-    }),
-    ManyToOne(() => {
-        return Project;
-    }, {
-        eager: false,
-        nullable: true,
-        onDelete: "CASCADE",
-        orphanedRowAction: "nullify",
-    }),
-    JoinColumn({ name: "projectId" }),
-    __metadata("design:type", Project)
-], GoogleSecOpsConnection.prototype, "project", void 0);
-__decorate([
-    ColumnAccessControl({
-        create: adminPermissions,
-        read: readPermissions,
-        update: [],
-    }),
-    Index(),
-    TableColumn({
-        type: TableColumnType.ObjectID,
-        required: true,
-        canReadOnRelationQuery: true,
-        title: "Project ID",
-        description: "ID of the project this connection belongs to.",
-    }),
-    Column({
-        type: ColumnType.ObjectID,
-        nullable: false,
-        transformer: ObjectID.getDatabaseTransformer(),
-    }),
-    __metadata("design:type", ObjectID)
-], GoogleSecOpsConnection.prototype, "projectId", void 0);
-__decorate([
-    ColumnAccessControl({
-        create: adminPermissions,
-        read: readPermissions,
-        update: adminPermissions,
-    }),
-    TableColumn({
-        required: true,
-        type: TableColumnType.Name,
-        canReadOnRelationQuery: true,
-        title: "Name",
-        description: "Friendly name for this connection.",
-    }),
-    Column({
-        nullable: false,
-        type: ColumnType.Name,
-        length: ColumnLength.Name,
-    }),
-    __metadata("design:type", String)
-], GoogleSecOpsConnection.prototype, "name", void 0);
-__decorate([
-    ColumnAccessControl({
-        create: adminPermissions,
-        read: readPermissions,
-        update: adminPermissions,
-    }),
-    TableColumn({
-        required: true,
-        type: TableColumnType.ShortText,
-        canReadOnRelationQuery: true,
-        title: "Region",
-        description: "Google SecOps regional endpoint prefix, e.g. 'us' or 'europe'. Used to build the API base URL.",
-    }),
-    Column({
-        nullable: false,
-        type: ColumnType.ShortText,
-        length: ColumnLength.ShortText,
-    }),
-    __metadata("design:type", String)
-], GoogleSecOpsConnection.prototype, "region", void 0);
-__decorate([
-    ColumnAccessControl({
-        create: adminPermissions,
-        read: readPermissions,
-        update: adminPermissions,
-    }),
-    TableColumn({
-        required: true,
-        type: TableColumnType.LongText,
-        canReadOnRelationQuery: true,
-        title: "Instance Resource Name",
-        description: "The Chronicle instance resource name: projects/{project}/locations/{location}/instances/{instance}.",
-    }),
-    Column({
-        nullable: false,
-        type: ColumnType.LongText,
-        length: ColumnLength.LongText,
-    }),
-    __metadata("design:type", String)
-], GoogleSecOpsConnection.prototype, "instanceResourceName", void 0);
-__decorate([
-    ColumnAccessControl({
-        create: adminPermissions,
-        read: [],
-        update: adminPermissions,
-    }),
-    TableColumn({
-        required: true,
-        type: TableColumnType.VeryLongText,
-        encrypted: true,
-        title: "Service Account JSON",
-        description: "Google Cloud service-account key (JSON) with Chronicle API read access. Encrypted at rest and never returned by the API.",
-    }),
-    Column({
-        nullable: false,
-        type: ColumnType.VeryLongText,
-    }),
-    __metadata("design:type", String)
-], GoogleSecOpsConnection.prototype, "serviceAccountJson", void 0);
-__decorate([
-    ColumnAccessControl({
-        create: adminPermissions,
-        read: readPermissions,
-        update: adminPermissions,
-    }),
-    Index(),
-    TableColumn({
-        required: true,
-        type: TableColumnType.Boolean,
-        canReadOnRelationQuery: true,
-        title: "Enabled",
-        description: "Whether this connection is polled.",
-        defaultValue: true,
-    }),
-    Column({
-        nullable: false,
-        type: ColumnType.Boolean,
-        default: true,
-    }),
-    __metadata("design:type", Boolean)
-], GoogleSecOpsConnection.prototype, "isEnabled", void 0);
-__decorate([
-    ColumnAccessControl({
-        create: adminPermissions,
-        read: readPermissions,
-        update: adminPermissions,
-    }),
-    TableColumn({
-        title: "Poll Interval (Minutes)",
-        required: true,
-        type: TableColumnType.Number,
-        canReadOnRelationQuery: true,
-        description: "How often detection alerts are polled, in minutes.",
-        defaultValue: 5,
-    }),
-    Column({
-        type: ColumnType.Number,
-        nullable: false,
-        default: 5,
-    }),
-    __metadata("design:type", Number)
-], GoogleSecOpsConnection.prototype, "pollIntervalInMinutes", void 0);
-__decorate([
-    ColumnAccessControl({
-        create: adminPermissions,
-        read: readPermissions,
-        update: adminPermissions,
-    }),
-    TableColumn({
-        type: TableColumnType.Boolean,
-        required: true,
-        title: "Include Non-alerting Detections",
-        description: "Include detections that have not been marked as alerts in Google SecOps.",
-        defaultValue: false,
-        canReadOnRelationQuery: true,
-    }),
-    Column({ type: ColumnType.Boolean, nullable: false, default: false }),
-    __metadata("design:type", Boolean)
-], GoogleSecOpsConnection.prototype, "includeNonAlertingDetections", void 0);
-__decorate([
-    ColumnAccessControl({ create: [], read: readPermissions, update: [] }),
-    TableColumn({
-        type: TableColumnType.Date,
-        required: false,
-        title: "Last Successful Poll",
-        description: "When a complete poll last finished successfully, including an empty result.",
-        canReadOnRelationQuery: true,
-    }),
-    Column({ type: ColumnType.Date, nullable: true }),
-    __metadata("design:type", Date)
-], GoogleSecOpsConnection.prototype, "lastSuccessfulPollAt", void 0);
-__decorate([
-    ColumnAccessControl({ create: [], read: readPermissions, update: [] }),
-    TableColumn({
-        type: TableColumnType.Date,
-        required: false,
-        title: "Last Event Imported",
-        description: "When a new security event was last imported, independently of its detection time.",
-        canReadOnRelationQuery: true,
-    }),
-    Column({ type: ColumnType.Date, nullable: true }),
-    __metadata("design:type", Date)
-], GoogleSecOpsConnection.prototype, "lastEventIngestedAt", void 0);
-__decorate([
-    ColumnAccessControl({ create: [], read: readPermissions, update: [] }),
-    TableColumn({
-        type: TableColumnType.JSON,
-        required: false,
-        title: "Last Poll Result",
-        description: "The latest scheduled or on-demand poll result with counts and warnings.",
-    }),
-    Column({ type: ColumnType.JSON, nullable: true }),
-    __metadata("design:type", Object)
-], GoogleSecOpsConnection.prototype, "lastPollResult", void 0);
-__decorate([
-    ColumnAccessControl({
-        create: [],
-        read: readPermissions,
-        update: [],
-    }),
-    TableColumn({
-        title: "Last Polled At",
-        required: false,
-        type: TableColumnType.Date,
-        canReadOnRelationQuery: true,
-        description: "When this connection was last polled. Null means it has never run.",
-    }),
-    Column({
-        type: ColumnType.Date,
-        nullable: true,
-    }),
-    __metadata("design:type", Date)
-], GoogleSecOpsConnection.prototype, "lastPolledAt", void 0);
-__decorate([
-    ColumnAccessControl({
-        create: [],
-        read: readPermissions,
-        update: [],
-    }),
-    TableColumn({
-        title: "Cursor",
-        required: false,
-        type: TableColumnType.LongText,
-        canReadOnRelationQuery: true,
-        description: "Poll cursor: the end of the last completely processed window, or the boundary retained for retry, as an ISO string.",
-    }),
-    Column({
-        type: ColumnType.LongText,
-        nullable: true,
-        length: ColumnLength.LongText,
-    }),
-    __metadata("design:type", String)
-], GoogleSecOpsConnection.prototype, "cursor", void 0);
-__decorate([
-    ColumnAccessControl({
-        create: [],
-        read: readPermissions,
-        update: [],
-    }),
-    TableColumn({
-        title: "Last Error",
-        required: false,
-        /*
-         * Keep complete diagnostic messages so customers can copy them for
-         * support. The poller redacts credentials before storing the error.
-         */
-        type: TableColumnType.VeryLongText,
-        canReadOnRelationQuery: true,
-        description: "The most recent poll error, if any. Cleared on the next successful poll.",
-    }),
-    Column({
-        type: ColumnType.VeryLongText,
-        nullable: true,
-    }),
-    __metadata("design:type", String)
-], GoogleSecOpsConnection.prototype, "lastError", void 0);
-__decorate([
-    ColumnAccessControl({
-        create: [],
-        read: readPermissions,
-        update: [],
-    }),
-    TableColumn({
-        manyToOneRelationColumn: "createdByUserId",
-        type: TableColumnType.Entity,
-        modelType: User,
-        title: "Created By User",
-        description: "Relation to the user who created this connection.",
-    }),
-    ManyToOne(() => {
-        return User;
-    }, {
-        eager: false,
-        nullable: true,
-        onDelete: "SET NULL",
-        orphanedRowAction: "nullify",
-    }),
-    JoinColumn({ name: "createdByUserId" }),
-    __metadata("design:type", User)
-], GoogleSecOpsConnection.prototype, "createdByUser", void 0);
-__decorate([
-    ColumnAccessControl({
-        create: [],
-        read: readPermissions,
-        update: [],
-    }),
-    TableColumn({
-        type: TableColumnType.ObjectID,
-        title: "Created By User ID",
-        description: "ID of the user who created this connection.",
-    }),
-    Column({
-        type: ColumnType.ObjectID,
-        nullable: true,
-        transformer: ObjectID.getDatabaseTransformer(),
-    }),
-    __metadata("design:type", ObjectID)
-], GoogleSecOpsConnection.prototype, "createdByUserId", void 0);
-__decorate([
-    ColumnAccessControl({
-        create: [],
-        read: readPermissions,
-        update: [],
-    }),
-    TableColumn({
-        manyToOneRelationColumn: "deletedByUserId",
-        type: TableColumnType.Entity,
-        modelType: User,
-        title: "Deleted By User",
-        description: "Relation to the user who deleted this connection.",
-    }),
-    ManyToOne(() => {
-        return User;
-    }, {
-        eager: false,
-        nullable: true,
-        onDelete: "SET NULL",
-        orphanedRowAction: "nullify",
-    }),
-    JoinColumn({ name: "deletedByUserId" }),
-    __metadata("design:type", User)
-], GoogleSecOpsConnection.prototype, "deletedByUser", void 0);
-__decorate([
-    ColumnAccessControl({
-        create: [],
-        read: readPermissions,
-        update: [],
-    }),
-    TableColumn({
-        type: TableColumnType.ObjectID,
-        title: "Deleted By User ID",
-        description: "ID of the user who deleted this connection.",
-    }),
-    Column({
-        type: ColumnType.ObjectID,
-        nullable: true,
-        transformer: ObjectID.getDatabaseTransformer(),
-    }),
-    __metadata("design:type", ObjectID)
-], GoogleSecOpsConnection.prototype, "deletedByUserId", void 0);
-GoogleSecOpsConnection = __decorate([
-    EnableDocumentation(),
-    TableBillingAccessControl({
-        create: PlanType.Free,
-        read: PlanType.Free,
-        update: PlanType.Free,
-        delete: PlanType.Free,
-    }),
-    TenantColumn("projectId"),
-    CrudApiEndpoint(new Route("/google-secops-connection")),
-    Entity({
-        name: "GoogleSecOpsConnection",
-    }),
-    TableMetadata({
-        tableName: "GoogleSecOpsConnection",
-        singularName: "Google SecOps Connection",
-        pluralName: "Google SecOps Connections",
-        icon: IconProp.ShieldCheck,
-        tableDescription: "Connections to Google SecOps (Chronicle) tenants. Detection alerts are polled on an interval and ingested as security events.",
-    }),
-    TableAccessControl({
-        create: adminPermissions,
-        read: readPermissions,
-        delete: adminPermissions,
-        update: adminPermissions,
-    })
-], GoogleSecOpsConnection);
-export default GoogleSecOpsConnection;
-//# sourceMappingURL=GoogleSecOpsConnection.js.map