@oneuptime/common 13.0.6 → 13.0.7

package/Models/DatabaseModels/ScheduledMaintenanceTemplateOwnerTeam.ts

@@ -13,6 +13,7 @@ import TableColumn from "../../Types/Database/TableColumn";
 import TableColumnType from "../../Types/Database/TableColumnType";
 import TableMetadata from "../../Types/Database/TableMetadata";
 import TenantColumn from "../../Types/Database/TenantColumn";
+import UniqueColumnsTogether from "../../Types/Database/UniqueColumnsTogether";
 import IconProp from "../../Types/Icon/IconProp";
 import ObjectID from "../../Types/ObjectID";
 import Permission from "../../Types/Permission";
@@ -75,6 +76,13 @@ import ScheduledMaintenanceTemplate from "./ScheduledMaintenanceTemplate";
 @Entity({
   name: "ScheduledMaintenanceTemplateOwnerTeam",
 })
+@Index(["scheduledMaintenanceTemplateId", "teamId", "projectId"], {
+  unique: true,
+})
+@UniqueColumnsTogether(
+  ["scheduledMaintenanceTemplateId", "teamId", "projectId"],
+  "This team is already an owner of this scheduled maintenance template.",
+)
 export default class ScheduledMaintenanceTemplateOwnerTeam extends BaseModel {
   @ColumnAccessControl({
     create: [

package/Models/DatabaseModels/ScheduledMaintenanceTemplateOwnerUser.ts

@@ -12,6 +12,7 @@ import TableColumn from "../../Types/Database/TableColumn";
 import TableColumnType from "../../Types/Database/TableColumnType";
 import TableMetadata from "../../Types/Database/TableMetadata";
 import TenantColumn from "../../Types/Database/TenantColumn";
+import UniqueColumnsTogether from "../../Types/Database/UniqueColumnsTogether";
 import IconProp from "../../Types/Icon/IconProp";
 import ObjectID from "../../Types/ObjectID";
 import Permission from "../../Types/Permission";
@@ -74,6 +75,13 @@ import ScheduledMaintenanceTemplate from "./ScheduledMaintenanceTemplate";
 @Entity({
   name: "ScheduledMaintenanceTemplateOwnerUser",
 })
+@Index(["scheduledMaintenanceTemplateId", "userId", "projectId"], {
+  unique: true,
+})
+@UniqueColumnsTogether(
+  ["scheduledMaintenanceTemplateId", "userId", "projectId"],
+  "This user is already an owner of this scheduled maintenance template.",
+)
 export default class ScheduledMaintenanceTemplateOwnerUser extends BaseModel {
   @ColumnAccessControl({
     create: [

package/Models/DatabaseModels/ServerlessFunctionOwnerTeam.ts

@@ -14,6 +14,7 @@ import TableColumn from "../../Types/Database/TableColumn";
 import TableColumnType from "../../Types/Database/TableColumnType";
 import TableMetadata from "../../Types/Database/TableMetadata";
 import TenantColumn from "../../Types/Database/TenantColumn";
+import UniqueColumnsTogether from "../../Types/Database/UniqueColumnsTogether";
 import IconProp from "../../Types/Icon/IconProp";
 import ObjectID from "../../Types/ObjectID";
 import Permission from "../../Types/Permission";
@@ -74,6 +75,11 @@ import { Column, Entity, Index, JoinColumn, ManyToOne } from "typeorm";
 @Entity({
   name: "ServerlessFunctionOwnerTeam",
 })
+@Index(["serverlessFunctionId", "teamId", "projectId"], { unique: true })
+@UniqueColumnsTogether(
+  ["serverlessFunctionId", "teamId", "projectId"],
+  "This team is already an owner of this serverless function.",
+)
 export default class ServerlessFunctionOwnerTeam extends BaseModel {
   @ColumnAccessControl({
     create: [

package/Models/DatabaseModels/ServerlessFunctionOwnerUser.ts

@@ -13,6 +13,7 @@ import TableColumn from "../../Types/Database/TableColumn";
 import TableColumnType from "../../Types/Database/TableColumnType";
 import TableMetadata from "../../Types/Database/TableMetadata";
 import TenantColumn from "../../Types/Database/TenantColumn";
+import UniqueColumnsTogether from "../../Types/Database/UniqueColumnsTogether";
 import IconProp from "../../Types/Icon/IconProp";
 import ObjectID from "../../Types/ObjectID";
 import Permission from "../../Types/Permission";
@@ -73,6 +74,11 @@ import { Column, Entity, Index, JoinColumn, ManyToOne } from "typeorm";
 @Entity({
   name: "ServerlessFunctionOwnerUser",
 })
+@Index(["serverlessFunctionId", "userId", "projectId"], { unique: true })
+@UniqueColumnsTogether(
+  ["serverlessFunctionId", "userId", "projectId"],
+  "This user is already an owner of this serverless function.",
+)
 export default class ServerlessFunctionOwnerUser extends BaseModel {
   @ColumnAccessControl({
     create: [

package/Models/DatabaseModels/ServiceLevelObjectiveOwnerTeam.ts

@@ -15,6 +15,7 @@ import TableColumn from "../../Types/Database/TableColumn";
 import TableColumnType from "../../Types/Database/TableColumnType";
 import TableMetadata from "../../Types/Database/TableMetadata";
 import TenantColumn from "../../Types/Database/TenantColumn";
+import UniqueColumnsTogether from "../../Types/Database/UniqueColumnsTogether";
 import IconProp from "../../Types/Icon/IconProp";
 import ObjectID from "../../Types/ObjectID";
 import Permission from "../../Types/Permission";
@@ -81,7 +82,11 @@ import { Column, Entity, Index, JoinColumn, ManyToOne } from "typeorm";
 @Entity({
   name: "ServiceLevelObjectiveOwnerTeam",
 })
-@Index(["serviceLevelObjectiveId", "teamId", "projectId"])
+@Index(["serviceLevelObjectiveId", "teamId", "projectId"], { unique: true })
+@UniqueColumnsTogether(
+  ["serviceLevelObjectiveId", "teamId", "projectId"],
+  "This team is already an owner of this service level objective.",
+)
 export default class ServiceLevelObjectiveOwnerTeam extends BaseModel {
   @ColumnAccessControl({
     create: [

package/Models/DatabaseModels/ServiceLevelObjectiveOwnerUser.ts

@@ -14,6 +14,7 @@ import TableColumn from "../../Types/Database/TableColumn";
 import TableColumnType from "../../Types/Database/TableColumnType";
 import TableMetadata from "../../Types/Database/TableMetadata";
 import TenantColumn from "../../Types/Database/TenantColumn";
+import UniqueColumnsTogether from "../../Types/Database/UniqueColumnsTogether";
 import IconProp from "../../Types/Icon/IconProp";
 import ObjectID from "../../Types/ObjectID";
 import Permission from "../../Types/Permission";
@@ -80,7 +81,11 @@ import { Column, Entity, Index, JoinColumn, ManyToOne } from "typeorm";
 @Entity({
   name: "ServiceLevelObjectiveOwnerUser",
 })
-@Index(["serviceLevelObjectiveId", "userId", "projectId"])
+@Index(["serviceLevelObjectiveId", "userId", "projectId"], { unique: true })
+@UniqueColumnsTogether(
+  ["serviceLevelObjectiveId", "userId", "projectId"],
+  "This user is already an owner of this service level objective.",
+)
 export default class ServiceLevelObjectiveOwnerUser extends BaseModel {
   @ColumnAccessControl({
     create: [

package/Models/DatabaseModels/ServiceOwnerTeam.ts

@@ -17,6 +17,7 @@ import TableColumn from "../../Types/Database/TableColumn";
 import TableColumnType from "../../Types/Database/TableColumnType";
 import TableMetadata from "../../Types/Database/TableMetadata";
 import TenantColumn from "../../Types/Database/TenantColumn";
+import UniqueColumnsTogether from "../../Types/Database/UniqueColumnsTogether";
 import IconProp from "../../Types/Icon/IconProp";
 import ObjectID from "../../Types/ObjectID";
 import Permission from "../../Types/Permission";
@@ -78,6 +79,11 @@ import { Column, Entity, Index, JoinColumn, ManyToOne } from "typeorm";
 @Entity({
   name: "ServiceOwnerTeam",
 })
+@Index(["serviceId", "teamId", "projectId"], { unique: true })
+@UniqueColumnsTogether(
+  ["serviceId", "teamId", "projectId"],
+  "This team is already an owner of this service.",
+)
 export default class ServiceOwnerTeam extends BaseModel {
   @ColumnAccessControl({
     create: [

package/Models/DatabaseModels/ServiceOwnerUser.ts

@@ -16,6 +16,7 @@ import TableColumn from "../../Types/Database/TableColumn";
 import TableColumnType from "../../Types/Database/TableColumnType";
 import TableMetadata from "../../Types/Database/TableMetadata";
 import TenantColumn from "../../Types/Database/TenantColumn";
+import UniqueColumnsTogether from "../../Types/Database/UniqueColumnsTogether";
 import IconProp from "../../Types/Icon/IconProp";
 import ObjectID from "../../Types/ObjectID";
 import Permission from "../../Types/Permission";
@@ -77,6 +78,11 @@ import { Column, Entity, Index, JoinColumn, ManyToOne } from "typeorm";
 @Entity({
   name: "ServiceOwnerUser",
 })
+@Index(["serviceId", "userId", "projectId"], { unique: true })
+@UniqueColumnsTogether(
+  ["serviceId", "userId", "projectId"],
+  "This user is already an owner of this service.",
+)
 export default class ServiceOwnerUser extends BaseModel {
   @ColumnAccessControl({
     create: [

package/Models/DatabaseModels/StatusPageOwnerTeam.ts

@@ -17,6 +17,7 @@ import TableColumn from "../../Types/Database/TableColumn";
 import TableColumnType from "../../Types/Database/TableColumnType";
 import TableMetadata from "../../Types/Database/TableMetadata";
 import TenantColumn from "../../Types/Database/TenantColumn";
+import UniqueColumnsTogether from "../../Types/Database/UniqueColumnsTogether";
 import IconProp from "../../Types/Icon/IconProp";
 import ObjectID from "../../Types/ObjectID";
 import Permission from "../../Types/Permission";
@@ -78,7 +79,11 @@ import { Column, Entity, Index, JoinColumn, ManyToOne } from "typeorm";
 @Entity({
   name: "StatusPageOwnerTeam",
 })
-@Index(["statusPageId", "teamId", "projectId"])
+@Index(["statusPageId", "teamId", "projectId"], { unique: true })
+@UniqueColumnsTogether(
+  ["statusPageId", "teamId", "projectId"],
+  "This team is already an owner of this status page.",
+)
 export default class StatusPageOwnerTeam extends BaseModel {
   @ColumnAccessControl({
     create: [

package/Models/DatabaseModels/StatusPageOwnerUser.ts

@@ -16,6 +16,7 @@ import TableColumn from "../../Types/Database/TableColumn";
 import TableColumnType from "../../Types/Database/TableColumnType";
 import TableMetadata from "../../Types/Database/TableMetadata";
 import TenantColumn from "../../Types/Database/TenantColumn";
+import UniqueColumnsTogether from "../../Types/Database/UniqueColumnsTogether";
 import IconProp from "../../Types/Icon/IconProp";
 import ObjectID from "../../Types/ObjectID";
 import Permission from "../../Types/Permission";
@@ -77,7 +78,11 @@ import { Column, Entity, Index, JoinColumn, ManyToOne } from "typeorm";
 @Entity({
   name: "StatusPageOwnerUser",
 })
-@Index(["statusPageId", "userId", "projectId"])
+@Index(["statusPageId", "userId", "projectId"], { unique: true })
+@UniqueColumnsTogether(
+  ["statusPageId", "userId", "projectId"],
+  "This user is already an owner of this status page.",
+)
 export default class StatusPageOwnerUser extends BaseModel {
   @ColumnAccessControl({
     create: [

package/Models/DatabaseModels/VMwareVCenterOwnerTeam.ts

@@ -14,6 +14,7 @@ import TableColumn from "../../Types/Database/TableColumn";
 import TableColumnType from "../../Types/Database/TableColumnType";
 import TableMetadata from "../../Types/Database/TableMetadata";
 import TenantColumn from "../../Types/Database/TenantColumn";
+import UniqueColumnsTogether from "../../Types/Database/UniqueColumnsTogether";
 import IconProp from "../../Types/Icon/IconProp";
 import ObjectID from "../../Types/ObjectID";
 import Permission from "../../Types/Permission";
@@ -74,6 +75,11 @@ import { Column, Entity, Index, JoinColumn, ManyToOne } from "typeorm";
 @Entity({
   name: "VMwareVCenterOwnerTeam",
 })
+@Index(["vmwareVCenterId", "teamId", "projectId"], { unique: true })
+@UniqueColumnsTogether(
+  ["vmwareVCenterId", "teamId", "projectId"],
+  "This team is already an owner of this vCenter.",
+)
 export default class VMwareVCenterOwnerTeam extends BaseModel {
   @ColumnAccessControl({
     create: [

package/Models/DatabaseModels/VMwareVCenterOwnerUser.ts

@@ -13,6 +13,7 @@ import TableColumn from "../../Types/Database/TableColumn";
 import TableColumnType from "../../Types/Database/TableColumnType";
 import TableMetadata from "../../Types/Database/TableMetadata";
 import TenantColumn from "../../Types/Database/TenantColumn";
+import UniqueColumnsTogether from "../../Types/Database/UniqueColumnsTogether";
 import IconProp from "../../Types/Icon/IconProp";
 import ObjectID from "../../Types/ObjectID";
 import Permission from "../../Types/Permission";
@@ -73,6 +74,11 @@ import { Column, Entity, Index, JoinColumn, ManyToOne } from "typeorm";
 @Entity({
   name: "VMwareVCenterOwnerUser",
 })
+@Index(["vmwareVCenterId", "userId", "projectId"], { unique: true })
+@UniqueColumnsTogether(
+  ["vmwareVCenterId", "userId", "projectId"],
+  "This user is already an owner of this vCenter.",
+)
 export default class VMwareVCenterOwnerUser extends BaseModel {
   @ColumnAccessControl({
     create: [

package/Models/DatabaseModels/WorkflowOwnerTeam.ts

@@ -14,6 +14,7 @@ import TableColumn from "../../Types/Database/TableColumn";
 import TableColumnType from "../../Types/Database/TableColumnType";
 import TableMetadata from "../../Types/Database/TableMetadata";
 import TenantColumn from "../../Types/Database/TenantColumn";
+import UniqueColumnsTogether from "../../Types/Database/UniqueColumnsTogether";
 import IconProp from "../../Types/Icon/IconProp";
 import ObjectID from "../../Types/ObjectID";
 import Permission from "../../Types/Permission";
@@ -74,7 +75,11 @@ import { Column, Entity, Index, JoinColumn, ManyToOne } from "typeorm";
 @Entity({
   name: "WorkflowOwnerTeam",
 })
-@Index(["workflowId", "teamId", "projectId"])
+@Index(["workflowId", "teamId", "projectId"], { unique: true })
+@UniqueColumnsTogether(
+  ["workflowId", "teamId", "projectId"],
+  "This team is already an owner of this workflow.",
+)
 export default class WorkflowOwnerTeam extends BaseModel {
   @ColumnAccessControl({
     create: [

package/Models/DatabaseModels/WorkflowOwnerUser.ts

@@ -13,6 +13,7 @@ import TableColumn from "../../Types/Database/TableColumn";
 import TableColumnType from "../../Types/Database/TableColumnType";
 import TableMetadata from "../../Types/Database/TableMetadata";
 import TenantColumn from "../../Types/Database/TenantColumn";
+import UniqueColumnsTogether from "../../Types/Database/UniqueColumnsTogether";
 import IconProp from "../../Types/Icon/IconProp";
 import ObjectID from "../../Types/ObjectID";
 import Permission from "../../Types/Permission";
@@ -73,7 +74,11 @@ import { Column, Entity, Index, JoinColumn, ManyToOne } from "typeorm";
 @Entity({
   name: "WorkflowOwnerUser",
 })
-@Index(["workflowId", "userId", "projectId"])
+@Index(["workflowId", "userId", "projectId"], { unique: true })
+@UniqueColumnsTogether(
+  ["workflowId", "userId", "projectId"],
+  "This user is already an owner of this workflow.",
+)
 export default class WorkflowOwnerUser extends BaseModel {
   @ColumnAccessControl({
     create: [

package/Scripts/benchmark-fanin-capacity.js

@@ -2,13 +2,13 @@
  * Isolated fan-in admission benchmark against the actual writer source.
  * Run with the supported Node runtime from the repository root:
  *
- *   node --expose-gc Common/Scripts/benchmark-fanin-capacity.js
+ *   node --expose-gc packages/Common/Scripts/benchmark-fanin-capacity.js
  *
  * Compare in separate processes, extracting the previous source without
  * modifying the checkout (the revision is the pre-change master):
  *
  *   git show 0b23baed11:Common/Server/Utils/Telemetry/TelemetryFanInWriter.ts > /tmp/oneuptime-fanin-before.ts
- *   node --expose-gc Common/Scripts/benchmark-fanin-capacity.js /tmp/oneuptime-fanin-before.ts
+ *   node --expose-gc packages/Common/Scripts/benchmark-fanin-capacity.js /tmp/oneuptime-fanin-before.ts
  *
  * 200 producers submit chunks sequentially and await all their acceptance
  * acknowledgements at the end, as ingest jobs do. ClickHouse remains blocked

package/Server/API/AIAgentDataAPI.ts

@@ -134,7 +134,7 @@ export default class AIAgentDataAPI {
   private initRoutes(): void {
     /*
      * Server-mediated LLM completion for the in-house code-fix agent (B4
-     * Tier 0, Internal/Roadmap/CodeFixSandboxDesign.md). One call = one
+     * Tier 0, Docs/Internal/Roadmap/CodeFixSandboxDesign.md). One call = one
      * completion of the worker's tool loop, executed through
      * AIService.executeWithLogging: metered, LlmLog-linked to the run,
      * inside the G4 daily budget, and under per-run loop budgets (max

package/Server/API/AIChatAPI.ts

@@ -164,10 +164,12 @@ router.post(
        * (an incident, a monitor, the logs explorer, …). It is a hint for the
        * system prompt, so an invalid payload is dropped, never an error.
        */
-      const pageContext: AIChatPageContext | undefined =
-        AIChatPageContextHelper.sanitize(
-          req.body["pageContext"] as JSONObject | undefined,
-        );
+      const pageContext: AIChatPageContext | null | undefined =
+        req.body["pageContext"] === null
+          ? null // Explicitly detaching also clears the conversation's subject.
+          : AIChatPageContextHelper.sanitize(
+              req.body["pageContext"] as JSONObject | undefined,
+            );
 
       // Plan gate: custom endpoints get no automatic billing check.
       if (

package/Server/API/AIInvestigationAPI.ts

@@ -1,3 +1,4 @@
+import InvestigationEligibility from "../Utils/AI/SRE/InvestigationEligibility";
 import UserMiddleware from "../Middleware/UserAuthorization";
 import CommonAPI from "./CommonAPI";
 import Express, {
@@ -348,6 +349,11 @@ async function sendLatestInvestigation(
   if (!run) {
     Response.sendJsonObjectResponse(req, res, {
       run: null,
+      notInvestigatedReason:
+        (await InvestigationEligibility.getNotStartedReason({
+          projectId: viewer.projectId,
+          ...subject,
+        })) as unknown as JSONObject,
       events: [],
       analysisMarkdown: null,
       analysisTldr: null,
@@ -459,6 +465,7 @@ async function sendLatestInvestigation(
 
   Response.sendJsonObjectResponse(req, res, {
     run: runJson || null,
+    notInvestigatedReason: null,
     events: eventsJson,
     analysisMarkdown,
     analysisTldr,

package/Server/API/StatusPageAPI.ts

@@ -1,4 +1,7 @@
 import UserMiddleware from "../Middleware/UserAuthorization";
+import PublicDashboardRateLimit, {
+  PublicDashboardRateLimitBucket,
+} from "../Middleware/PublicDashboardRateLimit";
 import InMemoryTTLCache from "../Infrastructure/InMemoryTTLCache";
 import AcmeChallengeService from "../Services/AcmeChallengeService";
 import IncidentEpisodeService from "../Services/IncidentEpisodeService";
@@ -1029,10 +1032,20 @@ export default class StatusPageAPI extends BaseAPI<
       },
     );
 
+    /*
+     * Every request here runs a scrypt verify, so the route carries a
+     * password attempt limit, the same one the dashboard master password
+     * route uses but with its own counters. It runs ahead of UserMiddleware so
+     * a refused attempt costs neither a session lookup nor a hash. See
+     * PublicDashboardRateLimit for the budget and why it fails closed.
+     */
     this.router.post(
       `${new this.entityType()
         .getCrudApiPath()
         ?.toString()}/master-password/:statusPageId`,
+      PublicDashboardRateLimit.getMiddleware(
+        PublicDashboardRateLimitBucket.StatusPageMasterPassword,
+      ),
       UserMiddleware.getUserMiddleware,
       async (req: ExpressRequest, res: ExpressResponse, next: NextFunction) => {
         try {

package/Server/Infrastructure/Postgres/LocalMigrationGenerationDataSource.ts

@@ -7,7 +7,7 @@ import { DataSource } from "typeorm";
  * localhost:5400 — hence the defaults below.
  *
  * DATABASE_MIGRATIONS_HOST / DATABASE_MIGRATIONS_PORT (already in
- * config.example.env, already honoured by migration-run.sh) override them, so
+ * config.example.env) override them, so
  * the schema-drift job can point this at a CI service container on a different
  * port without editing the file.
  */