@oneuptime/common 14.0.10 → 14.0.11

package/Models/DatabaseModels/AIConversation.ts

@@ -1,5 +1,7 @@
 import Project from "./Project";
 import User from "./User";
+import Incident from "./Incident";
+import Alert from "./Alert";
 import BaseModel from "./DatabaseBaseModel/DatabaseBaseModel";
 import Route from "../../Types/API/Route";
 import { PlanType } from "../../Types/Billing/SubscriptionPlan";
@@ -23,7 +25,10 @@ import { AIChatPageContext } from "../../Types/AI/AIChatPageContext";
 /*
  * A conversation between a user and the OneUptime AI about the project's
  * observability data. Conversations are personal: AIConversationService pins
- * all non-root reads/updates/deletes to the creating user.
+ * all non-root reads/updates/deletes to the creating user. The exception is
+ * an incident's or alert's shared investigation thread (incidentId /
+ * alertId set): it has no creating user and is served only by the
+ * investigation API to viewers who can read its incident or alert.
  */
 @EnableDocumentation()
 @TableBillingAccessControl({
@@ -267,6 +272,127 @@ export default class AIConversation extends BaseModel {
   })
   public pageContext?: AIChatPageContext = undefined;
 
+  /*
+   * Set on the one SHARED conversation of an incident's investigation box:
+   * every responder who can read the incident asks and acts in it, so it is
+   * never a personal conversation (no createdByUserId — the privacy pin keeps
+   * it out of everyone's Ask AI history) and is read only through the
+   * investigation API, after that API checked the viewer can read the
+   * incident. Deleting the incident deletes its thread.
+   */
+  @ColumnAccessControl({
+    create: [],
+    read: [
+      Permission.ProjectOwner,
+      Permission.ProjectAdmin,
+      Permission.ProjectMember,
+    ],
+    update: [],
+  })
+  @TableColumn({
+    manyToOneRelationColumn: "incidentId",
+    type: TableColumnType.Entity,
+    modelType: Incident,
+    title: "Incident",
+    description:
+      "The incident whose investigation box this shared conversation belongs to.",
+  })
+  @ManyToOne(
+    () => {
+      return Incident;
+    },
+    {
+      eager: false,
+      nullable: true,
+      onDelete: "CASCADE",
+      orphanedRowAction: "nullify",
+    },
+  )
+  @JoinColumn({ name: "incidentId" })
+  public incident?: Incident = undefined;
+
+  @ColumnAccessControl({
+    create: [],
+    read: [
+      Permission.ProjectOwner,
+      Permission.ProjectAdmin,
+      Permission.ProjectMember,
+    ],
+    update: [],
+  })
+  @Index()
+  @TableColumn({
+    type: TableColumnType.ObjectID,
+    required: false,
+    canReadOnRelationQuery: true,
+    title: "Incident ID",
+    description:
+      "ID of the incident whose investigation box this shared conversation belongs to.",
+  })
+  @Column({
+    type: ColumnType.ObjectID,
+    nullable: true,
+    transformer: ObjectID.getDatabaseTransformer(),
+  })
+  public incidentId?: ObjectID = undefined;
+
+  // The alert counterpart of incidentId — the shared thread of an alert.
+  @ColumnAccessControl({
+    create: [],
+    read: [
+      Permission.ProjectOwner,
+      Permission.ProjectAdmin,
+      Permission.ProjectMember,
+    ],
+    update: [],
+  })
+  @TableColumn({
+    manyToOneRelationColumn: "alertId",
+    type: TableColumnType.Entity,
+    modelType: Alert,
+    title: "Alert",
+    description:
+      "The alert whose investigation box this shared conversation belongs to.",
+  })
+  @ManyToOne(
+    () => {
+      return Alert;
+    },
+    {
+      eager: false,
+      nullable: true,
+      onDelete: "CASCADE",
+      orphanedRowAction: "nullify",
+    },
+  )
+  @JoinColumn({ name: "alertId" })
+  public alert?: Alert = undefined;
+
+  @ColumnAccessControl({
+    create: [],
+    read: [
+      Permission.ProjectOwner,
+      Permission.ProjectAdmin,
+      Permission.ProjectMember,
+    ],
+    update: [],
+  })
+  @Index()
+  @TableColumn({
+    type: TableColumnType.ObjectID,
+    required: false,
+    canReadOnRelationQuery: true,
+    title: "Alert ID",
+    description:
+      "ID of the alert whose investigation box this shared conversation belongs to.",
+  })
+  @Column({
+    type: ColumnType.ObjectID,
+    nullable: true,
+    transformer: ObjectID.getDatabaseTransformer(),
+  })
+  public alertId?: ObjectID = undefined;
+
   @ColumnAccessControl({
     create: [],
     read: [],

package/Models/DatabaseModels/CephCluster.ts

@@ -1,3 +1,5 @@
+import { PlanType } from "../../Types/Billing/SubscriptionPlan";
+import ColumnBillingAccessControl from "../../Types/Database/AccessControl/ColumnBillingAccessControl";
 import Label from "./Label";
 import Project from "./Project";
 import User from "./User";
@@ -1068,6 +1070,11 @@ export default class CephCluster extends BaseModel {
     nullable: true,
     unique: false,
   })
+  @ColumnBillingAccessControl({
+    read: PlanType.Free,
+    update: PlanType.Scale,
+    create: PlanType.Scale,
+  })
   public retainTelemetryDataForDays?: number = undefined;
 
   @ColumnAccessControl({
@@ -1109,6 +1116,11 @@ export default class CephCluster extends BaseModel {
     type: ColumnType.JSON,
     nullable: true,
   })
+  @ColumnBillingAccessControl({
+    read: PlanType.Free,
+    update: PlanType.Scale,
+    create: PlanType.Scale,
+  })
   public telemetryRetentionConfig?: TelemetryRetentionConfig = undefined;
 
   /*

package/Models/DatabaseModels/CloudResource.ts

@@ -1,3 +1,5 @@
+import { PlanType } from "../../Types/Billing/SubscriptionPlan";
+import ColumnBillingAccessControl from "../../Types/Database/AccessControl/ColumnBillingAccessControl";
 import Label from "./Label";
 import Project from "./Project";
 import User from "./User";
@@ -715,6 +717,11 @@ export default class CloudResource extends BaseModel {
     nullable: true,
     unique: false,
   })
+  @ColumnBillingAccessControl({
+    read: PlanType.Free,
+    update: PlanType.Scale,
+    create: PlanType.Scale,
+  })
   public retainTelemetryDataForDays?: number = undefined;
 
   @ColumnAccessControl({
@@ -756,6 +763,11 @@ export default class CloudResource extends BaseModel {
     type: ColumnType.JSON,
     nullable: true,
   })
+  @ColumnBillingAccessControl({
+    read: PlanType.Free,
+    update: PlanType.Scale,
+    create: PlanType.Scale,
+  })
   public telemetryRetentionConfig?: TelemetryRetentionConfig = undefined;
 
   @ColumnAccessControl({

package/Models/DatabaseModels/DatabaseServer.ts

@@ -1,3 +1,5 @@
+import { PlanType } from "../../Types/Billing/SubscriptionPlan";
+import ColumnBillingAccessControl from "../../Types/Database/AccessControl/ColumnBillingAccessControl";
 import DockerHost from "./DockerHost";
 import KubernetesCluster from "./KubernetesCluster";
 import Label from "./Label";
@@ -1606,6 +1608,11 @@ export default class DatabaseServer extends BaseModel {
     nullable: true,
     unique: false,
   })
+  @ColumnBillingAccessControl({
+    read: PlanType.Free,
+    update: PlanType.Scale,
+    create: PlanType.Scale,
+  })
   public retainTelemetryDataForDays?: number = undefined;
 
   @ColumnAccessControl({
@@ -1647,6 +1654,11 @@ export default class DatabaseServer extends BaseModel {
     type: ColumnType.JSON,
     nullable: true,
   })
+  @ColumnBillingAccessControl({
+    read: PlanType.Free,
+    update: PlanType.Scale,
+    create: PlanType.Scale,
+  })
   public telemetryRetentionConfig?: TelemetryRetentionConfig = undefined;
 
   /*

package/Models/DatabaseModels/DockerHost.ts

@@ -1,3 +1,5 @@
+import { PlanType } from "../../Types/Billing/SubscriptionPlan";
+import ColumnBillingAccessControl from "../../Types/Database/AccessControl/ColumnBillingAccessControl";
 import Label from "./Label";
 import Project from "./Project";
 import User from "./User";
@@ -963,6 +965,11 @@ export default class DockerHost extends BaseModel {
     nullable: true,
     unique: false,
   })
+  @ColumnBillingAccessControl({
+    read: PlanType.Free,
+    update: PlanType.Scale,
+    create: PlanType.Scale,
+  })
   public retainTelemetryDataForDays?: number = undefined;
 
   @ColumnAccessControl({
@@ -1004,6 +1011,11 @@ export default class DockerHost extends BaseModel {
     type: ColumnType.JSON,
     nullable: true,
   })
+  @ColumnBillingAccessControl({
+    read: PlanType.Free,
+    update: PlanType.Scale,
+    create: PlanType.Scale,
+  })
   public telemetryRetentionConfig?: TelemetryRetentionConfig = undefined;
 
   /*

package/Models/DatabaseModels/DockerSwarmCluster.ts

@@ -1,3 +1,5 @@
+import { PlanType } from "../../Types/Billing/SubscriptionPlan";
+import ColumnBillingAccessControl from "../../Types/Database/AccessControl/ColumnBillingAccessControl";
 import Label from "./Label";
 import Project from "./Project";
 import User from "./User";
@@ -1079,6 +1081,11 @@ export default class DockerSwarmCluster extends BaseModel {
     nullable: true,
     unique: false,
   })
+  @ColumnBillingAccessControl({
+    read: PlanType.Free,
+    update: PlanType.Scale,
+    create: PlanType.Scale,
+  })
   public retainTelemetryDataForDays?: number = undefined;
 
   @ColumnAccessControl({
@@ -1120,6 +1127,11 @@ export default class DockerSwarmCluster extends BaseModel {
     type: ColumnType.JSON,
     nullable: true,
   })
+  @ColumnBillingAccessControl({
+    read: PlanType.Free,
+    update: PlanType.Scale,
+    create: PlanType.Scale,
+  })
   public telemetryRetentionConfig?: TelemetryRetentionConfig = undefined;
 
   /*

package/Models/DatabaseModels/GlobalOidc.ts

@@ -4,7 +4,6 @@ import Route from "../../Types/API/Route";
 import URL from "../../Types/API/URL";
 import ColumnAccessControl from "../../Types/Database/AccessControl/ColumnAccessControl";
 import TableAccessControl from "../../Types/Database/AccessControl/TableAccessControl";
-import TableEditionAccessControl from "../../Types/Database/AccessControl/TableEditionAccessControl";
 import ColumnLength from "../../Types/Database/ColumnLength";
 import ColumnType from "../../Types/Database/ColumnType";
 import CrudApiEndpoint from "../../Types/Database/CrudApiEndpoint";
@@ -20,9 +19,6 @@ import { Column, Entity, JoinColumn, ManyToOne } from "typeorm";
  * Sibling of GlobalSSO for the OIDC protocol. Access is restricted to master
  * admins through empty access-control arrays (master-admin/isRoot bypass).
  */
-@TableEditionAccessControl({
-  requiresEnterprise: true,
-})
 @TableAccessControl({
   create: [],
   read: [],

package/Models/DatabaseModels/GlobalOidcProject.ts

@@ -6,7 +6,6 @@ import BaseModel from "./DatabaseBaseModel/DatabaseBaseModel";
 import Route from "../../Types/API/Route";
 import ColumnAccessControl from "../../Types/Database/AccessControl/ColumnAccessControl";
 import TableAccessControl from "../../Types/Database/AccessControl/TableAccessControl";
-import TableEditionAccessControl from "../../Types/Database/AccessControl/TableEditionAccessControl";
 import ColumnType from "../../Types/Database/ColumnType";
 import CrudApiEndpoint from "../../Types/Database/CrudApiEndpoint";
 import TableColumn from "../../Types/Database/TableColumn";
@@ -29,9 +28,6 @@ import {
  * defines the default teams a federated user is provisioned into on first
  * login. Sibling of GlobalSSOProject for the OIDC protocol.
  */
-@TableEditionAccessControl({
-  requiresEnterprise: true,
-})
 @TableAccessControl({
   create: [],
   read: [],

package/Models/DatabaseModels/GlobalSso.ts

@@ -4,7 +4,6 @@ import Route from "../../Types/API/Route";
 import URL from "../../Types/API/URL";
 import ColumnAccessControl from "../../Types/Database/AccessControl/ColumnAccessControl";
 import TableAccessControl from "../../Types/Database/AccessControl/TableAccessControl";
-import TableEditionAccessControl from "../../Types/Database/AccessControl/TableEditionAccessControl";
 import ColumnLength from "../../Types/Database/ColumnLength";
 import ColumnType from "../../Types/Database/ColumnType";
 import CrudApiEndpoint from "../../Types/Database/CrudApiEndpoint";
@@ -25,9 +24,6 @@ import { Column, Entity, JoinColumn, ManyToOne } from "typeorm";
  * the federated user is already a member of. Access is restricted to master
  * admins through empty access-control arrays (master-admin/isRoot bypass).
  */
-@TableEditionAccessControl({
-  requiresEnterprise: true,
-})
 @TableAccessControl({
   create: [],
   read: [],

package/Models/DatabaseModels/GlobalSsoProject.ts

@@ -6,7 +6,6 @@ import BaseModel from "./DatabaseBaseModel/DatabaseBaseModel";
 import Route from "../../Types/API/Route";
 import ColumnAccessControl from "../../Types/Database/AccessControl/ColumnAccessControl";
 import TableAccessControl from "../../Types/Database/AccessControl/TableAccessControl";
-import TableEditionAccessControl from "../../Types/Database/AccessControl/TableEditionAccessControl";
 import ColumnType from "../../Types/Database/ColumnType";
 import CrudApiEndpoint from "../../Types/Database/CrudApiEndpoint";
 import TableColumn from "../../Types/Database/TableColumn";
@@ -32,9 +31,6 @@ import {
  * explicitly attached here. If a GlobalSSO has NO attached projects, it
  * applies to all projects the user is already a member of (invite-first).
  */
-@TableEditionAccessControl({
-  requiresEnterprise: true,
-})
 @TableAccessControl({
   create: [],
   read: [],

package/Models/DatabaseModels/Host.ts

@@ -1,3 +1,5 @@
+import { PlanType } from "../../Types/Billing/SubscriptionPlan";
+import ColumnBillingAccessControl from "../../Types/Database/AccessControl/ColumnBillingAccessControl";
 import DockerHost from "./DockerHost";
 import KubernetesCluster from "./KubernetesCluster";
 import Label from "./Label";
@@ -1337,6 +1339,11 @@ export default class Host extends BaseModel {
     nullable: true,
     unique: false,
   })
+  @ColumnBillingAccessControl({
+    read: PlanType.Free,
+    update: PlanType.Scale,
+    create: PlanType.Scale,
+  })
   public retainTelemetryDataForDays?: number = undefined;
 
   @ColumnAccessControl({
@@ -1378,6 +1385,11 @@ export default class Host extends BaseModel {
     type: ColumnType.JSON,
     nullable: true,
   })
+  @ColumnBillingAccessControl({
+    read: PlanType.Free,
+    update: PlanType.Scale,
+    create: PlanType.Scale,
+  })
   public telemetryRetentionConfig?: TelemetryRetentionConfig = undefined;
 
   /*