@oneuptime/common 14.0.10 → 14.0.11

package/Types/Permission.ts

@@ -1888,6 +1888,16 @@ enum Permission {
   EditIncidentAlert = "EditIncidentAlert",
   ReadIncidentAlert = "ReadIncidentAlert",
 
+  // Incident Form (public forms that declare incidents) Permissions
+  CreateIncidentForm = "CreateIncidentForm",
+  DeleteIncidentForm = "DeleteIncidentForm",
+  EditIncidentForm = "EditIncidentForm",
+  ReadIncidentForm = "ReadIncidentForm",
+
+  // Incident Form Submission Permissions
+  DeleteIncidentFormSubmission = "DeleteIncidentFormSubmission",
+  ReadIncidentFormSubmission = "ReadIncidentFormSubmission",
+
   // Incident Episode State Timeline Permissions
   CreateIncidentEpisodeStateTimeline = "CreateIncidentEpisodeStateTimeline",
   DeleteIncidentEpisodeStateTimeline = "DeleteIncidentEpisodeStateTimeline",
@@ -2067,6 +2077,36 @@ enum Permission {
   EditServiceLevelObjectiveLabelRule = "EditServiceLevelObjectiveLabelRule",
   ReadServiceLevelObjectiveLabelRule = "ReadServiceLevelObjectiveLabelRule",
 
+  // Queue (MessageQueue) Permissions
+  CreateMessageQueue = "CreateMessageQueue",
+  DeleteMessageQueue = "DeleteMessageQueue",
+  EditMessageQueue = "EditMessageQueue",
+  ReadMessageQueue = "ReadMessageQueue",
+
+  // Queue Owner Team Permissions
+  CreateMessageQueueOwnerTeam = "CreateMessageQueueOwnerTeam",
+  DeleteMessageQueueOwnerTeam = "DeleteMessageQueueOwnerTeam",
+  EditMessageQueueOwnerTeam = "EditMessageQueueOwnerTeam",
+  ReadMessageQueueOwnerTeam = "ReadMessageQueueOwnerTeam",
+
+  // Queue Owner User Permissions
+  CreateMessageQueueOwnerUser = "CreateMessageQueueOwnerUser",
+  DeleteMessageQueueOwnerUser = "DeleteMessageQueueOwnerUser",
+  EditMessageQueueOwnerUser = "EditMessageQueueOwnerUser",
+  ReadMessageQueueOwnerUser = "ReadMessageQueueOwnerUser",
+
+  // Queue Label Rule Permissions
+  CreateMessageQueueLabelRule = "CreateMessageQueueLabelRule",
+  DeleteMessageQueueLabelRule = "DeleteMessageQueueLabelRule",
+  EditMessageQueueLabelRule = "EditMessageQueueLabelRule",
+  ReadMessageQueueLabelRule = "ReadMessageQueueLabelRule",
+
+  // Queue Owner Rule Permissions
+  CreateMessageQueueOwnerRule = "CreateMessageQueueOwnerRule",
+  DeleteMessageQueueOwnerRule = "DeleteMessageQueueOwnerRule",
+  EditMessageQueueOwnerRule = "EditMessageQueueOwnerRule",
+  ReadMessageQueueOwnerRule = "ReadMessageQueueOwnerRule",
+
   /*
    * Wildcard permissions covering all models marked @OperationalResource().
    * These short-circuit table-level checks for that resource class. Scope on
@@ -13642,6 +13682,212 @@ export class PermissionHelper {
         group: PermissionGroup.Telemetry,
       },
 
+      // Queue (MessageQueue) Permissions
+      {
+        permission: Permission.CreateMessageQueue,
+        title: "Create Queue",
+        description: "This permission can create queues in this project.",
+        isAssignableToTenant: true,
+        isAccessControlPermission: false,
+        isRolePermission: false,
+        group: PermissionGroup.Telemetry,
+      },
+      {
+        permission: Permission.DeleteMessageQueue,
+        title: "Delete Queue",
+        description: "This permission can delete queues of this project.",
+        isAssignableToTenant: true,
+        isAccessControlPermission: true,
+        isRolePermission: false,
+        group: PermissionGroup.Telemetry,
+      },
+      {
+        permission: Permission.EditMessageQueue,
+        title: "Edit Queue",
+        description: "This permission can edit queues of this project.",
+        isAssignableToTenant: true,
+        isAccessControlPermission: true,
+        isRolePermission: false,
+        group: PermissionGroup.Telemetry,
+      },
+      {
+        permission: Permission.ReadMessageQueue,
+        title: "Read Queue",
+        description: "This permission can read queues of this project.",
+        isAssignableToTenant: true,
+        isAccessControlPermission: true,
+        isRolePermission: false,
+        group: PermissionGroup.Telemetry,
+      },
+
+      // Queue Team Owner Permissions
+      {
+        permission: Permission.CreateMessageQueueOwnerTeam,
+        title: "Create Queue Team Owner",
+        description:
+          "This permission can create Queue Team Owner of this project.",
+        isAssignableToTenant: true,
+        isAccessControlPermission: false,
+        isRolePermission: false,
+        group: PermissionGroup.Telemetry,
+      },
+      {
+        permission: Permission.DeleteMessageQueueOwnerTeam,
+        title: "Delete Queue Team Owner",
+        description:
+          "This permission can delete Queue Team Owner of this project.",
+        isAssignableToTenant: true,
+        isAccessControlPermission: false,
+        isRolePermission: false,
+        group: PermissionGroup.Telemetry,
+      },
+      {
+        permission: Permission.EditMessageQueueOwnerTeam,
+        title: "Edit Queue Team Owner",
+        description:
+          "This permission can edit Queue Team Owner of this project.",
+        isAssignableToTenant: true,
+        isAccessControlPermission: false,
+        isRolePermission: false,
+        group: PermissionGroup.Telemetry,
+      },
+      {
+        permission: Permission.ReadMessageQueueOwnerTeam,
+        title: "Read Queue Team Owner",
+        description:
+          "This permission can read Queue Team Owner of this project.",
+        isAssignableToTenant: true,
+        isAccessControlPermission: false,
+        isRolePermission: false,
+        group: PermissionGroup.Telemetry,
+      },
+
+      // Queue User Owner Permissions
+      {
+        permission: Permission.CreateMessageQueueOwnerUser,
+        title: "Create Queue User Owner",
+        description:
+          "This permission can create Queue User Owner of this project.",
+        isAssignableToTenant: true,
+        isAccessControlPermission: false,
+        isRolePermission: false,
+        group: PermissionGroup.Telemetry,
+      },
+      {
+        permission: Permission.DeleteMessageQueueOwnerUser,
+        title: "Delete Queue User Owner",
+        description:
+          "This permission can delete Queue User Owner of this project.",
+        isAssignableToTenant: true,
+        isAccessControlPermission: false,
+        isRolePermission: false,
+        group: PermissionGroup.Telemetry,
+      },
+      {
+        permission: Permission.EditMessageQueueOwnerUser,
+        title: "Edit Queue User Owner",
+        description:
+          "This permission can edit Queue User Owner of this project.",
+        isAssignableToTenant: true,
+        isAccessControlPermission: false,
+        isRolePermission: false,
+        group: PermissionGroup.Telemetry,
+      },
+      {
+        permission: Permission.ReadMessageQueueOwnerUser,
+        title: "Read Queue User Owner",
+        description:
+          "This permission can read Queue User Owner of this project.",
+        isAssignableToTenant: true,
+        isAccessControlPermission: false,
+        isRolePermission: false,
+        group: PermissionGroup.Telemetry,
+      },
+
+      // Queue Label Rule Permissions
+      {
+        permission: Permission.CreateMessageQueueLabelRule,
+        title: "Create Queue Label Rule",
+        description:
+          "This permission can create Queue Label Rules in this project.",
+        isAssignableToTenant: true,
+        isAccessControlPermission: false,
+        isRolePermission: false,
+        group: PermissionGroup.Telemetry,
+      },
+      {
+        permission: Permission.DeleteMessageQueueLabelRule,
+        title: "Delete Queue Label Rule",
+        description:
+          "This permission can delete Queue Label Rules of this project.",
+        isAssignableToTenant: true,
+        isAccessControlPermission: false,
+        isRolePermission: false,
+        group: PermissionGroup.Telemetry,
+      },
+      {
+        permission: Permission.EditMessageQueueLabelRule,
+        title: "Edit Queue Label Rule",
+        description:
+          "This permission can edit Queue Label Rules of this project.",
+        isAssignableToTenant: true,
+        isAccessControlPermission: false,
+        isRolePermission: false,
+        group: PermissionGroup.Telemetry,
+      },
+      {
+        permission: Permission.ReadMessageQueueLabelRule,
+        title: "Read Queue Label Rule",
+        description:
+          "This permission can read Queue Label Rules of this project.",
+        isAssignableToTenant: true,
+        isAccessControlPermission: false,
+        isRolePermission: false,
+        group: PermissionGroup.Telemetry,
+      },
+
+      // Queue Owner Rule Permissions
+      {
+        permission: Permission.CreateMessageQueueOwnerRule,
+        title: "Create Queue Owner Rule",
+        description:
+          "This permission can create Queue Owner Rules in this project.",
+        isAssignableToTenant: true,
+        isAccessControlPermission: false,
+        isRolePermission: false,
+        group: PermissionGroup.Telemetry,
+      },
+      {
+        permission: Permission.DeleteMessageQueueOwnerRule,
+        title: "Delete Queue Owner Rule",
+        description:
+          "This permission can delete Queue Owner Rules of this project.",
+        isAssignableToTenant: true,
+        isAccessControlPermission: false,
+        isRolePermission: false,
+        group: PermissionGroup.Telemetry,
+      },
+      {
+        permission: Permission.EditMessageQueueOwnerRule,
+        title: "Edit Queue Owner Rule",
+        description:
+          "This permission can edit Queue Owner Rules of this project.",
+        isAssignableToTenant: true,
+        isAccessControlPermission: false,
+        isRolePermission: false,
+        group: PermissionGroup.Telemetry,
+      },
+      {
+        permission: Permission.ReadMessageQueueOwnerRule,
+        title: "Read Queue Owner Rule",
+        description:
+          "This permission can read Queue Owner Rules of this project.",
+        isAssignableToTenant: true,
+        isAccessControlPermission: false,
+        isRolePermission: false,
+        group: PermissionGroup.Telemetry,
+      },
+
       // Runbook Owner Rule Permissions
       {
         permission: Permission.CreateRunbookOwnerRule,
@@ -15330,6 +15576,70 @@ export class PermissionHelper {
         group: PermissionGroup.Incident,
       },
 
+      // Incident Form Permissions
+      {
+        permission: Permission.CreateIncidentForm,
+        title: "Create Incident Form",
+        description:
+          "This permission can create incident forms in this project. Anyone with a form's link can declare an incident through it.",
+        isAssignableToTenant: true,
+        isAccessControlPermission: false,
+        isRolePermission: false,
+        group: PermissionGroup.Incident,
+      },
+      {
+        permission: Permission.DeleteIncidentForm,
+        title: "Delete Incident Form",
+        description:
+          "This permission can delete incident forms in this project.",
+        isAssignableToTenant: true,
+        isAccessControlPermission: false,
+        isRolePermission: false,
+        group: PermissionGroup.Incident,
+      },
+      {
+        permission: Permission.EditIncidentForm,
+        title: "Edit Incident Form",
+        description:
+          "This permission can edit incident forms in this project, including turning a form off and resetting its link.",
+        isAssignableToTenant: true,
+        isAccessControlPermission: false,
+        isRolePermission: false,
+        group: PermissionGroup.Incident,
+      },
+      {
+        permission: Permission.ReadIncidentForm,
+        title: "Read Incident Form",
+        description:
+          "This permission can read incident forms in this project, including their links.",
+        isAssignableToTenant: true,
+        isAccessControlPermission: false,
+        isRolePermission: false,
+        group: PermissionGroup.Incident,
+      },
+
+      // Incident Form Submission Permissions
+      {
+        permission: Permission.DeleteIncidentFormSubmission,
+        title: "Delete Incident Form Submission",
+        description:
+          "This permission can delete incident form submissions, and the reporter's name and email they hold, in this project.",
+        isAssignableToTenant: true,
+        isAccessControlPermission: false,
+        isRolePermission: false,
+        group: PermissionGroup.Incident,
+      },
+      {
+        permission: Permission.ReadIncidentFormSubmission,
+        title: "Read Incident Form Submission",
+        description:
+          "This permission can read the submissions made through incident forms in this project, including the reporter's name and email.",
+        isAssignableToTenant: true,
+        isAccessControlPermission: false,
+        isRolePermission: false,
+        group: PermissionGroup.Incident,
+      },
+
       // Incident Episode State Timeline Permissions
       {
         permission: Permission.CreateIncidentEpisodeStateTimeline,

package/Types/ResourceAiAgent/ResourceAiAccess.ts

@@ -566,9 +566,15 @@ export interface ResourceCommandJobPayload {
   tier: ResourceCommandTier;
 }
 
-// Caps shared by the investigation tool, the remediation toolkit and the agent.
-export const MAX_RESOURCE_COMMANDS_PER_INVESTIGATION: number = 8;
+/*
+ * Caps shared by the investigation tool, the remediation toolkit and the
+ * agent. The command count is a runaway guard, not a ration. The agent keeps
+ * up to a megabyte of a command's output, and the investigation and
+ * conversation toolkits read all of it and page it (ToolOutputPager); the
+ * character cap is only what a caller that does not page gets.
+ */
+export const MAX_RESOURCE_COMMANDS_PER_INVESTIGATION: number = 200;
 export const DEFAULT_RESOURCE_COMMAND_TIMEOUT_MS: number = 30 * 1000;
 export const MAX_RESOURCE_COMMAND_TIMEOUT_MS: number = 2 * 60 * 1000;
-export const MAX_RESOURCE_COMMAND_OUTPUT_CHARS_FOR_LLM: number = 8000;
-export const MAX_RESOURCE_AGENT_OUTPUT_BYTES: number = 50 * 1024;
+export const MAX_RESOURCE_COMMAND_OUTPUT_CHARS_FOR_LLM: number = 40_000;
+export const MAX_RESOURCE_AGENT_OUTPUT_BYTES: number = 1024 * 1024;

package/Types/Rules/RuleCriteriaFieldRegistry.ts

@@ -267,6 +267,18 @@ export const RULE_CRITERIA_FIELDS_BY_MODEL: Readonly<
     "kubernetesClusterNamePattern",
     "kubernetesClusterDescriptionPattern",
   ],
+  MessageQueueLabelRule: [
+    "messageQueueLabels",
+    "messageQueueNamePattern",
+    "messageQueueDescriptionPattern",
+    "messageQueueSystemPattern",
+  ],
+  MessageQueueOwnerRule: [
+    "messageQueueLabels",
+    "messageQueueNamePattern",
+    "messageQueueDescriptionPattern",
+    "messageQueueSystemPattern",
+  ],
   MonitorLabelRule: [
     "monitorLabels",
     "monitorNamePattern",

package/Types/Rules/RuleRun.ts

@@ -73,6 +73,8 @@ export enum RuleRunType {
   IoTFleetOwnerRule = "IoTFleetOwnerRule",
   KubernetesClusterLabelRule = "KubernetesClusterLabelRule",
   KubernetesClusterOwnerRule = "KubernetesClusterOwnerRule",
+  MessageQueueLabelRule = "MessageQueueLabelRule",
+  MessageQueueOwnerRule = "MessageQueueOwnerRule",
   MonitorLabelRule = "MonitorLabelRule",
   MonitorOwnerRule = "MonitorOwnerRule",
   NetworkDeviceLabelRule = "NetworkDeviceLabelRule",
@@ -245,6 +247,8 @@ export const RULE_RUN_TYPE_METADATA: Readonly<
     "Kubernetes cluster",
     "Kubernetes clusters",
   ),
+  [RuleRunType.MessageQueueLabelRule]: metadata(Labels, "queue", "queues"),
+  [RuleRunType.MessageQueueOwnerRule]: metadata(Owners, "queue", "queues"),
   [RuleRunType.MonitorLabelRule]: metadata(Labels, "monitor", "monitors"),
   [RuleRunType.MonitorOwnerRule]: metadata(Owners, "monitor", "monitors"),
   [RuleRunType.NetworkDeviceLabelRule]: metadata(

package/Types/Team/ComplianceNotificationChannel.ts

@@ -1,7 +1,8 @@
 /*
- * The notification channel an on-call compliance rule can insist on
- * (TeamComplianceSetting.notificationChannel). NULL on a setting means "any
- * channel". The string values are stored, so they must never be renamed.
+ * A notification channel an on-call compliance rule can insist on
+ * (TeamComplianceSetting.notificationChannels, every one of which a member
+ * must be notified on). No channels on a setting means "any channel". The
+ * string values are stored, so they must never be renamed.
  *
  * Every channel a UserNotificationRule can point at is here, because a
  * compliance rule that could only ask about four of the nine would report a

package/Types/Team/ComplianceRule.ts

@@ -18,7 +18,7 @@ export enum ComplianceRuleCategory {
   NotificationMethod = "NotificationMethod",
   /*
    * The member has on-call notification rules for a set of severities,
-   * optionally on one specific channel.
+   * optionally on specific channels - on every one of them.
    */
   OnCallRule = "OnCallRule",
 }
@@ -176,7 +176,7 @@ export const COMPLIANCE_RULE_DEFINITIONS: ReadonlyArray<ComplianceRuleDefinition
       subject: "incident",
       title: "Incident on-call rules",
       description:
-        "Members are notified when an incident on-call policy pages them - for the severities and channel you choose.",
+        "Members are notified when an incident on-call policy pages them - for the severities and channels you choose.",
     }),
     onCallRule({
       ruleType: ComplianceRuleType.HasAlertOnCallRules,
@@ -185,7 +185,7 @@ export const COMPLIANCE_RULE_DEFINITIONS: ReadonlyArray<ComplianceRuleDefinition
       subject: "alert",
       title: "Alert on-call rules",
       description:
-        "Members are notified when an alert on-call policy pages them - for the severities and channel you choose.",
+        "Members are notified when an alert on-call policy pages them - for the severities and channels you choose.",
     }),
     onCallRule({
       ruleType: ComplianceRuleType.HasIncidentEpisodeOnCallRules,
@@ -195,7 +195,7 @@ export const COMPLIANCE_RULE_DEFINITIONS: ReadonlyArray<ComplianceRuleDefinition
       subject: "incident episode",
       title: "Incident episode on-call rules",
       description:
-        "Members are notified when an incident episode on-call policy pages them - for the severities and channel you choose.",
+        "Members are notified when an incident episode on-call policy pages them - for the severities and channels you choose.",
     }),
     onCallRule({
       ruleType: ComplianceRuleType.HasAlertEpisodeOnCallRules,
@@ -204,7 +204,7 @@ export const COMPLIANCE_RULE_DEFINITIONS: ReadonlyArray<ComplianceRuleDefinition
       subject: "alert episode",
       title: "Alert episode on-call rules",
       description:
-        "Members are notified when an alert episode on-call policy pages them - for the severities and channel you choose.",
+        "Members are notified when an alert episode on-call policy pages them - for the severities and channels you choose.",
     }),
     methodRule({
       ruleType: ComplianceRuleType.HasNotificationCallMethod,
@@ -313,6 +313,32 @@ export default class ComplianceRule {
     );
   }
 
+  /*
+   * A rule's channels as one canonical list: the known channels in `value`,
+   * each once, in catalog order - so two lists naming the same channels read,
+   * compare and store alike however they were picked. Anything that is not a
+   * list reads as no channels ("any channel"), and so does a list of nothing
+   * this build recognises; the settings service refuses such input on write,
+   * so only rows it did not write can hold it.
+   */
+  public static normaliseChannels(
+    value: unknown,
+  ): Array<ComplianceNotificationChannel> {
+    if (!Array.isArray(value)) {
+      return [];
+    }
+
+    return COMPLIANCE_CHANNEL_DEFINITIONS.map(
+      (
+        definition: ComplianceChannelDefinition,
+      ): ComplianceNotificationChannel => {
+        return definition.channel;
+      },
+    ).filter((channel: ComplianceNotificationChannel): boolean => {
+      return value.includes(channel);
+    });
+  }
+
   public static isOnCallRule(ruleType: string | undefined | null): boolean {
     return (
       ComplianceRule.getDefinition(ruleType)?.category ===
@@ -321,7 +347,7 @@ export default class ComplianceRule {
   }
 
   /*
-   * Only on-call rules take a severity scope and a channel. A method rule
+   * Only on-call rules take a severity scope and channels. A method rule
    * ("has a verified email") has neither, and any that arrive with one are
    * ignored rather than half-applied.
    */
@@ -356,11 +382,12 @@ export default class ComplianceRule {
 
   /*
    * The rule's name as a list row shows it: "Call for incidents",
-   * "Incident on-call rules", "Verified push device".
+   * "Call and Push notification for incidents", "Incident on-call rules",
+   * "Verified push device".
    */
   public static getTitle(data: {
     ruleType: string | undefined | null;
-    notificationChannel?: string | undefined | null;
+    notificationChannels?: Array<string> | undefined | null;
   }): string {
     const definition: ComplianceRuleDefinition | undefined =
       ComplianceRule.getDefinition(data.ruleType);
@@ -369,11 +396,15 @@ export default class ComplianceRule {
       return data.ruleType || "Unknown rule";
     }
 
-    const channel: ComplianceChannelDefinition | undefined =
-      ComplianceRule.getChannelDefinition(data.notificationChannel);
+    const channelLabels: Array<string> = ComplianceRule.getChannelLabels(
+      data.notificationChannels,
+    );
 
-    if (definition.category === ComplianceRuleCategory.OnCallRule && channel) {
-      return `${channel.label} for ${definition.subject}s`;
+    if (
+      definition.category === ComplianceRuleCategory.OnCallRule &&
+      channelLabels.length > 0
+    ) {
+      return `${joinAsProse(channelLabels)} for ${definition.subject}s`;
     }
 
     return definition.title;
@@ -382,14 +413,16 @@ export default class ComplianceRule {
   /*
    * The rule as one sentence about what every member must have, e.g.
    * "Every member has an incident on-call rule that notifies them by Call for
-   * Critical Incident and Major Incident."
+   * Critical Incident and Major Incident." A rule on several channels needs a
+   * rule on each, and says so: "Every member has incident on-call rules that
+   * notify them by Call and by Push notification for Critical Incident."
    *
    * `severityNames` is the rule's scope. Empty means every severity, which is
    * what a rule with no severities selected enforces.
    */
   public static describe(data: {
     ruleType: string | undefined | null;
-    notificationChannel?: string | undefined | null;
+    notificationChannels?: Array<string> | undefined | null;
     severityNames?: Array<string> | undefined;
   }): string {
     const definition: ComplianceRuleDefinition | undefined =
@@ -416,16 +449,36 @@ export default class ComplianceRule {
         ? `every ${definition.subject} severity`
         : joinAsProse(severityNames);
 
-    const channel: ComplianceChannelDefinition | undefined =
-      ComplianceRule.getChannelDefinition(data.notificationChannel);
+    const channelLabels: Array<string> = ComplianceRule.getChannelLabels(
+      data.notificationChannels,
+    );
+
+    if (channelLabels.length > 1) {
+      return `Every member has ${definition.subject || ""} on-call rules that notify them ${joinAsProse(
+        channelLabels.map((label: string): string => {
+          return `by ${label}`;
+        }),
+      )} for ${scope}.`;
+    }
 
-    if (channel) {
-      return `Every member has ${ComplianceRule.withArticle(definition.subject || "")} on-call rule that notifies them by ${channel.label} for ${scope}.`;
+    if (channelLabels.length === 1) {
+      return `Every member has ${ComplianceRule.withArticle(definition.subject || "")} on-call rule that notifies them by ${channelLabels[0]} for ${scope}.`;
     }
 
     return `Every member has ${ComplianceRule.withArticle(definition.subject || "")} on-call rule for ${scope}.`;
   }
 
+  // The labels of the known channels in `channels`, in catalog order.
+  private static getChannelLabels(
+    channels: Array<string> | undefined | null,
+  ): Array<string> {
+    return ComplianceRule.normaliseChannels(channels).map(
+      (channel: ComplianceNotificationChannel): string => {
+        return ComplianceRule.getChannelDefinition(channel)?.label || channel;
+      },
+    );
+  }
+
   private static withArticle(noun: string): string {
     return "aeiou".includes(noun.charAt(0).toLowerCase())
       ? `an ${noun}`

package/Types/Team/ComplianceRuleType.ts

@@ -9,8 +9,8 @@
  *    method on that channel.
  *  - Has<Incident|Alert>[Episode]OnCallRules: the member has an on-call
  *    notification rule for the chosen severities (all of them when none are
- *    chosen), optionally on one specific channel - "call me for Critical
- *    incidents" is HasIncidentOnCallRules + Call + [Critical].
+ *    chosen), optionally on specific channels - one on each - "call me for
+ *    Critical incidents" is HasIncidentOnCallRules + [Call] + [Critical].
  */
 enum ComplianceRuleType {
   HasNotificationEmailMethod = "HasNotificationEmailMethod",

package/Types/Team/TeamComplianceStatus.ts

@@ -23,8 +23,12 @@ export interface TeamComplianceRuleJSON {
   settingId: string;
   ruleType: ComplianceRuleType;
   enabled: boolean;
-  // Null means "any channel" (and is always null for method rules).
-  notificationChannel: ComplianceNotificationChannel | null;
+  /*
+   * The channels an on-call rule insists on - a member needs a rule on each
+   * - in catalog order. Empty means "any channel", and is always empty for
+   * method rules.
+   */
+  notificationChannels: Array<ComplianceNotificationChannel>;
   // Which severity list scopes the rule; null for method rules.
   severityKind: ComplianceSeverityKind | null;
   /*

package/Types/Telemetry/EntityType.ts

@@ -109,6 +109,22 @@ enum EntityType {
    * dependency cron and keyed by engine + namespace.
    */
   DatabaseServer = "database.server",
+  /*
+   * A message QUEUE — a queue, topic, subscription or event hub (a
+   * "destination" in OpenTelemetry messaging terms) — the identity the
+   * Queues product (the MessageQueue table) scopes telemetry by.
+   * OneUptime-defined and MEMBERSHIP-ONLY, like DatabaseServer: ingest
+   * appends its key (`EntityKey.keyForMessageQueue`: `messaging.system` +
+   * the destination, plus the Azure namespace for Service Bus and Event
+   * Hubs) to the `entityKeys` of every messaging span and broker or
+   * messaging-client datapoint that resolves to a destination
+   * (Types/MessageQueue/MessagingTelemetryResolver). No resolver ever emits
+   * it, it is never promoted to an InventoryItem row, and so it has no
+   * prune TTL. Distinct from `RemoteService`, the node a messaging span's
+   * BROKER becomes on the service map (keyed by `messaging.system` +
+   * `server.address`, never by destination).
+   */
+  MessageQueue = "message.queue",
   /*
    * Inventory-mirrored types. Unlike everything above, these are never
    * derived from an OTLP resource — the estate they describe is collected

package/Types/Telemetry/LockedFilterDetail.ts

@@ -13,6 +13,19 @@
  * the reason it cannot. Display-only: nothing here changes the query.
  */
 
+/**
+ * One kind of thing a scope chip matches — "Endpoints" and every endpoint of
+ * a database, say. Telemetry from ANY listed value is in the scope.
+ */
+export interface LockedFilterScopeMatch {
+  /** What the values are, as the tooltip's heading: "Endpoints". */
+  label: string;
+  /** How telemetry reaches the scope through them, in one sentence. */
+  description?: string | undefined;
+  /** Each value's readable name, e.g. "db.prod.internal:5432". */
+  values: Array<string>;
+}
+
 export interface LockedFilterDetail {
   /**
    * Search-bar text that reproduces this filter on the explorer for the same
@@ -22,4 +35,13 @@ export interface LockedFilterDetail {
   searchToken?: string | undefined;
   /** Why `searchToken` is absent, when it is — shown in place of the syntax. */
   searchTokenUnavailableReason?: string | undefined;
+  /**
+   * For ONE chip that stands for several filters at once — a database is its
+   * own id, each of its endpoints and each pod it runs as — what it matches,
+   * by kind. The tooltip lists them so the reader can see exactly what the
+   * page filters on without a chip per filter.
+   */
+  scopeMatches?: Array<LockedFilterScopeMatch> | undefined;
+  /** The tooltip's opening line above `scopeMatches`. */
+  scopeSummary?: string | undefined;
 }