@oneuptime/common 14.0.11 → 14.0.12

package/build/dist/Types/Monitor/MonitorSecretAccess.js

@@ -0,0 +1,111 @@
+/*
+ * Which monitors may use a monitor secret (issue #1467).
+ *
+ * A secret has exactly one access mode, and the mode alone decides:
+ *
+ *   - All Monitors: every monitor in the secret's project, including monitors
+ *     created after the secret.
+ *   - Specific Monitors: the monitors in the secret's `monitors` list. This was
+ *     the only mode before #1467, so it is the default and every secret that
+ *     existed then has it.
+ *   - Monitors With Labels: monitors that carry at least one of the labels in
+ *     the secret's `labels` list. A monitor gains or loses the secret as its
+ *     labels change.
+ *
+ * Only the list that belongs to the mode is read. MonitorSecretService empties
+ * the other one whenever the mode is written, but a list written over the API
+ * without a mode can still sit there unused, and it must never grant anything:
+ * a forgotten `monitors` list on a label-scoped secret would hand the secret to
+ * monitors that carry none of the labels.
+ *
+ * No mode reaches across projects. The service checks that both lists name
+ * this project's records, but a row written before that check existed can hold
+ * another project's monitor or label, so a project mismatch denies whatever the
+ * lists say.
+ */
+var MonitorSecretAccess;
+(function (MonitorSecretAccess) {
+    MonitorSecretAccess["AllMonitors"] = "All Monitors";
+    MonitorSecretAccess["SpecificMonitors"] = "Specific Monitors";
+    MonitorSecretAccess["MonitorsWithLabels"] = "Monitors With Labels";
+})(MonitorSecretAccess || (MonitorSecretAccess = {}));
+export const MONITOR_SECRET_ACCESS_LISTS = ["monitors", "labels"];
+export class MonitorSecretAccessUtil {
+    static isValid(value) {
+        return (typeof value === "string" &&
+            MonitorSecretAccessUtil.ALL_ACCESS_MODES.includes(value));
+    }
+    // The list a mode reads, or null for All Monitors, which reads neither.
+    static getListUsedBy(access) {
+        switch (access) {
+            case MonitorSecretAccess.SpecificMonitors:
+                return "monitors";
+            case MonitorSecretAccess.MonitorsWithLabels:
+                return "labels";
+            default:
+                return null;
+        }
+    }
+    // The lists a mode leaves unread: what a write of that mode empties.
+    static getListsUnusedBy(access) {
+        const used = MonitorSecretAccessUtil.getListUsedBy(access);
+        return MONITOR_SECRET_ACCESS_LISTS.filter((list) => {
+            return list !== used;
+        });
+    }
+    /*
+     * The rule itself. Project first, then the mode, then only the mode's own
+     * list. Ids are compared case-insensitively: Postgres reads uuids back in
+     * lower case, while an ObjectID keeps whatever case it was built from.
+     */
+    static canMonitorUseSecret(data) {
+        const secretProjectId = MonitorSecretAccessUtil.normalizeId(data.secret.projectId);
+        const monitorProjectId = MonitorSecretAccessUtil.normalizeId(data.monitor.projectId);
+        if (!secretProjectId ||
+            !monitorProjectId ||
+            secretProjectId !== monitorProjectId) {
+            return false;
+        }
+        switch (data.secret.monitorAccess) {
+            case MonitorSecretAccess.AllMonitors:
+                return true;
+            case MonitorSecretAccess.SpecificMonitors: {
+                const monitorId = MonitorSecretAccessUtil.normalizeId(data.monitor.monitorId);
+                if (!monitorId) {
+                    return false;
+                }
+                return data.secret.monitorIds.some((id) => {
+                    return MonitorSecretAccessUtil.normalizeId(id) === monitorId;
+                });
+            }
+            case MonitorSecretAccess.MonitorsWithLabels: {
+                const monitorLabelIds = new Set();
+                for (const labelId of data.monitor.labelIds) {
+                    const normalized = MonitorSecretAccessUtil.normalizeId(labelId);
+                    if (normalized) {
+                        monitorLabelIds.add(normalized);
+                    }
+                }
+                return data.secret.labelIds.some((id) => {
+                    const normalized = MonitorSecretAccessUtil.normalizeId(id);
+                    return normalized !== null && monitorLabelIds.has(normalized);
+                });
+            }
+            default:
+                return false;
+        }
+    }
+    static normalizeId(id) {
+        const normalized = (id || "").toString().trim().toLowerCase();
+        return normalized || null;
+    }
+}
+// What a secret gets when nobody says otherwise. Matches the column default.
+MonitorSecretAccessUtil.DEFAULT_ACCESS = MonitorSecretAccess.SpecificMonitors;
+MonitorSecretAccessUtil.ALL_ACCESS_MODES = [
+    MonitorSecretAccess.AllMonitors,
+    MonitorSecretAccess.SpecificMonitors,
+    MonitorSecretAccess.MonitorsWithLabels,
+];
+export default MonitorSecretAccess;
+//# sourceMappingURL=MonitorSecretAccess.js.map

package/build/dist/Types/Monitor/MonitorSecretAccess.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"MonitorSecretAccess.js","sourceRoot":"","sources":["../../../../Types/Monitor/MonitorSecretAccess.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,IAAK,mBAIJ;AAJD,WAAK,mBAAmB;IACtB,mDAA4B,CAAA;IAC5B,6DAAsC,CAAA;IACtC,kEAA2C,CAAA;AAC7C,CAAC,EAJI,mBAAmB,KAAnB,mBAAmB,QAIvB;AAKD,MAAM,CAAC,MAAM,2BAA2B,GACtC,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;AA0BzB,MAAM,OAAO,uBAAuB;IAY3B,MAAM,CAAC,OAAO,CAAC,KAAc;QAClC,OAAO,CACL,OAAO,KAAK,KAAK,QAAQ;YACzB,uBAAuB,CAAC,gBAAgB,CAAC,QAAQ,CAC/C,KAA4B,CAC7B,CACF,CAAC;IACJ,CAAC;IAED,wEAAwE;IACjE,MAAM,CAAC,aAAa,CACzB,MAA2B;QAE3B,QAAQ,MAAM,EAAE,CAAC;YACf,KAAK,mBAAmB,CAAC,gBAAgB;gBACvC,OAAO,UAAU,CAAC;YACpB,KAAK,mBAAmB,CAAC,kBAAkB;gBACzC,OAAO,QAAQ,CAAC;YAClB;gBACE,OAAO,IAAI,CAAC;QAChB,CAAC;IACH,CAAC;IAED,qEAAqE;IAC9D,MAAM,CAAC,gBAAgB,CAC5B,MAA2B;QAE3B,MAAM,IAAI,GACR,uBAAuB,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;QAEhD,OAAO,2BAA2B,CAAC,MAAM,CACvC,CAAC,IAA6B,EAAW,EAAE;YACzC,OAAO,IAAI,KAAK,IAAI,CAAC;QACvB,CAAC,CACF,CAAC;IACJ,CAAC;IAED;;;;OAIG;IACI,MAAM,CAAC,mBAAmB,CAAC,IAGjC;QACC,MAAM,eAAe,GAAkB,uBAAuB,CAAC,WAAW,CACxE,IAAI,CAAC,MAAM,CAAC,SAAS,CACtB,CAAC;QACF,MAAM,gBAAgB,GAAkB,uBAAuB,CAAC,WAAW,CACzE,IAAI,CAAC,OAAO,CAAC,SAAS,CACvB,CAAC;QAEF,IACE,CAAC,eAAe;YAChB,CAAC,gBAAgB;YACjB,eAAe,KAAK,gBAAgB,EACpC,CAAC;YACD,OAAO,KAAK,CAAC;QACf,CAAC;QAED,QAAQ,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC;YAClC,KAAK,mBAAmB,CAAC,WAAW;gBAClC,OAAO,IAAI,CAAC;YAEd,KAAK,mBAAmB,CAAC,gBAAgB,CAAC,CAAC,CAAC;gBAC1C,MAAM,SAAS,GAAkB,uBAAuB,CAAC,WAAW,CAClE,IAAI,CAAC,OAAO,CAAC,SAAS,CACvB,CAAC;gBAEF,IAAI,CAAC,SAAS,EAAE,CAAC;oBACf,OAAO,KAAK,CAAC;gBACf,CAAC;gBAED,OAAO,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,EAAU,EAAW,EAAE;oBACzD,OAAO,uBAAuB,CAAC,WAAW,CAAC,EAAE,CAAC,KAAK,SAAS,CAAC;gBAC/D,CAAC,CAAC,CAAC;YACL,CAAC;YAED,KAAK,mBAAmB,CAAC,kBAAkB,CAAC,CAAC,CAAC;gBAC5C,MAAM,eAAe,GAAgB,IAAI,GAAG,EAAE,CAAC;gBAE/C,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;oBAC5C,MAAM,UAAU,GACd,uBAAuB,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;oBAE/C,IAAI,UAAU,EAAE,CAAC;wBACf,eAAe,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;oBAClC,CAAC;gBACH,CAAC;gBAED,OAAO,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,EAAU,EAAW,EAAE;oBACvD,MAAM,UAAU,GACd,uBAAuB,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;oBAE1C,OAAO,UAAU,KAAK,IAAI,IAAI,eAAe,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;gBAChE,CAAC,CAAC,CAAC;YACL,CAAC;YAED;gBACE,OAAO,KAAK,CAAC;QACjB,CAAC;IACH,CAAC;IAEO,MAAM,CAAC,WAAW,CAAC,EAA6B;QACtD,MAAM,UAAU,GAAW,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAEtE,OAAO,UAAU,IAAI,IAAI,CAAC;IAC5B,CAAC;;AAvHD,6EAA6E;AACtD,sCAAc,GACnC,mBAAmB,CAAC,gBAAgB,CAAC;AAEhB,wCAAgB,GACrC;IACE,mBAAmB,CAAC,WAAW;IAC/B,mBAAmB,CAAC,gBAAgB;IACpC,mBAAmB,CAAC,kBAAkB;CACvC,CAAC;AAiHN,eAAe,mBAAmB,CAAC"}

package/build/dist/Types/NotificationSetting/NotificationEmailRollupCategory.js

@@ -32,6 +32,7 @@ export var RollupCategory;
     RollupCategory["Probes"] = "probes";
     RollupCategory["AIAgents"] = "ai-agents";
     RollupCategory["Slos"] = "slos";
+    RollupCategory["IncomingCalls"] = "incoming-calls";
     RollupCategory["OnCall"] = "on-call";
     RollupCategory["Other"] = "other";
 })(RollupCategory || (RollupCategory = {}));
@@ -51,6 +52,7 @@ export const ROLLUP_CATEGORY_LABEL = {
     [RollupCategory.Probes]: "Probes",
     [RollupCategory.AIAgents]: "AI Agents",
     [RollupCategory.Slos]: "SLOs",
+    [RollupCategory.IncomingCalls]: "Incoming Calls",
     [RollupCategory.OnCall]: "On Call",
     [RollupCategory.Other]: "Other",
 };
@@ -60,10 +62,10 @@ export const ROLLUP_CATEGORY_LABEL = {
  * the same thing and a reader only has to learn one taxonomy.
  *
  * This is deliberately an exhaustive Record rather than a lookup with a
- * default: because the key type is the enum itself, adding a 48th member to
+ * default: because the key type is the enum itself, adding a 49th member to
  * NotificationSettingEventType is a COMPILE ERROR here until somebody decides
  * which bucket it belongs in. That is the same idiom the Dashboard's
- * EVENT_LIBRARY uses, and it is the whole reason to spell out 47 lines instead
+ * EVENT_LIBRARY uses, and it is the whole reason to spell out 48 lines instead
  * of matching on a name prefix - a prefix match would quietly file a new
  * resource type under the wrong heading, or under none, and nobody would
  * notice until a customer read the email.
@@ -119,6 +121,12 @@ export const ROLLUP_CATEGORY_BY_EVENT_TYPE = {
     // SLO
     [NotificationSettingEventType.SEND_SLO_OWNER_STATUS_CHANGE_NOTIFICATION]: RollupCategory.Slos,
     [NotificationSettingEventType.SEND_SLO_OWNER_ADDED_NOTIFICATION]: RollupCategory.Slos,
+    /*
+     * Incoming Call Policies. A category of its own so a burst of on-call
+     * configuration notices (one admin click can fan out a hundred) is never
+     * what pushes a missed customer call over the rollup threshold.
+     */
+    [NotificationSettingEventType.SEND_INCOMING_CALL_MISSED_OWNER_NOTIFICATION]: RollupCategory.IncomingCalls,
     /*
      * On Call Notifications, including the two shift reminders. Five of these
      * seven are never rolled up at all (see NotificationEmailRollupPolicy); they
@@ -160,6 +168,7 @@ export const ROLLUP_CATEGORY_ORDER = [
     RollupCategory.IncidentEpisodes,
     RollupCategory.Alerts,
     RollupCategory.AlertEpisodes,
+    RollupCategory.IncomingCalls,
     RollupCategory.Slos,
     RollupCategory.Monitors,
     RollupCategory.ScheduledMaintenance,

package/build/dist/Types/NotificationSetting/NotificationEmailRollupCategory.js.map

@@ -1 +1 @@
-{"version":3,"file":"NotificationEmailRollupCategory.js","sourceRoot":"","sources":["../../../../Types/NotificationSetting/NotificationEmailRollupCategory.ts"],"names":[],"mappings":"AAAA,OAAO,4BAA4B,MAAM,gCAAgC,CAAC;AAE1E;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,CAAN,IAAY,cAaX;AAbD,WAAY,cAAc;IACxB,yCAAuB,CAAA;IACvB,mCAAiB,CAAA;IACjB,wDAAsC,CAAA;IACtC,kDAAgC,CAAA;IAChC,uCAAqB,CAAA;IACrB,gEAA8C,CAAA;IAC9C,8CAA4B,CAAA;IAC5B,mCAAiB,CAAA;IACjB,wCAAsB,CAAA;IACtB,+BAAa,CAAA;IACb,oCAAkB,CAAA;IAClB,iCAAe,CAAA;AACjB,CAAC,EAbW,cAAc,KAAd,cAAc,QAazB;AAED;;;;GAIG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAmC;IACnE,CAAC,cAAc,CAAC,SAAS,CAAC,EAAE,WAAW;IACvC,CAAC,cAAc,CAAC,MAAM,CAAC,EAAE,QAAQ;IACjC,CAAC,cAAc,CAAC,gBAAgB,CAAC,EAAE,mBAAmB;IACtD,CAAC,cAAc,CAAC,aAAa,CAAC,EAAE,gBAAgB;IAChD,CAAC,cAAc,CAAC,QAAQ,CAAC,EAAE,UAAU;IACrC,CAAC,cAAc,CAAC,oBAAoB,CAAC,EAAE,uBAAuB;IAC9D,CAAC,cAAc,CAAC,WAAW,CAAC,EAAE,cAAc;IAC5C,CAAC,cAAc,CAAC,MAAM,CAAC,EAAE,QAAQ;IACjC,CAAC,cAAc,CAAC,QAAQ,CAAC,EAAE,WAAW;IACtC,CAAC,cAAc,CAAC,IAAI,CAAC,EAAE,MAAM;IAC7B,CAAC,cAAc,CAAC,MAAM,CAAC,EAAE,SAAS;IAClC,CAAC,cAAc,CAAC,KAAK,CAAC,EAAE,OAAO;CAChC,CAAC;AAEF;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAGtC;IACF,WAAW;IACX,CAAC,4BAA4B,CAAC,wCAAwC,CAAC,EACrE,cAAc,CAAC,SAAS;IAC1B,CAAC,4BAA4B,CAAC,4CAA4C,CAAC,EACzE,cAAc,CAAC,SAAS;IAC1B,CAAC,4BAA4B,CAAC,8CAA8C,CAAC,EAC3E,cAAc,CAAC,SAAS;IAC1B,CAAC,4BAA4B,CAAC,sCAAsC,CAAC,EACnE,cAAc,CAAC,SAAS;IAC1B,CAAC,4BAA4B,CAAC,uCAAuC,CAAC,EACpE,cAAc,CAAC,SAAS;IAC1B,CAAC,4BAA4B,CAAC,yCAAyC,CAAC,EACtE,cAAc,CAAC,SAAS;IAE1B,SAAS;IACT,CAAC,4BAA4B,CAAC,qCAAqC,CAAC,EAClE,cAAc,CAAC,MAAM;IACvB,CAAC,4BAA4B,CAAC,yCAAyC,CAAC,EACtE,cAAc,CAAC,MAAM;IACvB,CAAC,4BAA4B,CAAC,2CAA2C,CAAC,EACxE,cAAc,CAAC,MAAM;IACvB,CAAC,4BAA4B,CAAC,mCAAmC,CAAC,EAChE,cAAc,CAAC,MAAM;IACvB,CAAC,4BAA4B,CAAC,sCAAsC,CAAC,EACnE,cAAc,CAAC,MAAM;IAEvB,iBAAiB;IACjB,CAAC,4BAA4B,CAAC,6CAA6C,CAAC,EAC1E,cAAc,CAAC,aAAa;IAC9B,CAAC,4BAA4B,CAAC,iDAAiD,CAAC,EAC9E,cAAc,CAAC,aAAa;IAC9B,CAAC,4BAA4B,CAAC,mDAAmD,CAAC,EAChF,cAAc,CAAC,aAAa;IAC9B,CAAC,4BAA4B,CAAC,2CAA2C,CAAC,EACxE,cAAc,CAAC,aAAa;IAC9B,CAAC,4BAA4B,CAAC,8CAA8C,CAAC,EAC3E,cAAc,CAAC,aAAa;IAE9B,oBAAoB;IACpB,CAAC,4BAA4B,CAAC,gDAAgD,CAAC,EAC7E,cAAc,CAAC,gBAAgB;IACjC,CAAC,4BAA4B,CAAC,oDAAoD,CAAC,EACjF,cAAc,CAAC,gBAAgB;IACjC,CAAC,4BAA4B,CAAC,sDAAsD,CAAC,EACnF,cAAc,CAAC,gBAAgB;IACjC,CAAC,4BAA4B,CAAC,8CAA8C,CAAC,EAC3E,cAAc,CAAC,gBAAgB;IACjC,CAAC,4BAA4B,CAAC,iDAAiD,CAAC,EAC9E,cAAc,CAAC,gBAAgB;IAEjC,WAAW;IACX,CAAC,4BAA4B,CAAC,qCAAqC,CAAC,EAClE,cAAc,CAAC,QAAQ;IACzB,CAAC,4BAA4B,CAAC,uCAAuC,CAAC,EACpE,cAAc,CAAC,QAAQ;IACzB,CAAC,4BAA4B,CAAC,8CAA8C,CAAC,EAC3E,cAAc,CAAC,QAAQ;IACzB,CAAC,4BAA4B,CAAC,mDAAmD,CAAC,EAChF,cAAc,CAAC,QAAQ;IACzB,CAAC,4BAA4B,CAAC,mEAAmE,CAAC,EAChG,cAAc,CAAC,QAAQ;IAEzB,wBAAwB;IACxB,CAAC,4BAA4B,CAAC,qDAAqD,CAAC,EAClF,cAAc,CAAC,oBAAoB;IACrC,CAAC,4BAA4B,CAAC,yDAAyD,CAAC,EACtF,cAAc,CAAC,oBAAoB;IACrC,CAAC,4BAA4B,CAAC,mDAAmD,CAAC,EAChF,cAAc,CAAC,oBAAoB;IACrC,CAAC,4BAA4B,CAAC,2DAA2D,CAAC,EACxF,cAAc,CAAC,oBAAoB;IACrC,CAAC,4BAA4B,CAAC,sDAAsD,CAAC,EACnF,cAAc,CAAC,oBAAoB;IAErC,cAAc;IACd,CAAC,4BAA4B,CAAC,wDAAwD,CAAC,EACrF,cAAc,CAAC,WAAW;IAC5B,CAAC,4BAA4B,CAAC,2CAA2C,CAAC,EACxE,cAAc,CAAC,WAAW;IAC5B,CAAC,4BAA4B,CAAC,yCAAyC,CAAC,EACtE,cAAc,CAAC,WAAW;IAE5B,mCAAmC;IACnC,CAAC,4BAA4B,CAAC,4CAA4C,CAAC,EACzE,cAAc,CAAC,MAAM;IACvB,CAAC,4BAA4B,CAAC,mCAAmC,CAAC,EAChE,cAAc,CAAC,MAAM;IAEvB,sCAAsC;IACtC,CAAC,4BAA4B,CAAC,+CAA+C,CAAC,EAC5E,cAAc,CAAC,QAAQ;IACzB,CAAC,4BAA4B,CAAC,sCAAsC,CAAC,EACnE,cAAc,CAAC,QAAQ;IAEzB,MAAM;IACN,CAAC,4BAA4B,CAAC,yCAAyC,CAAC,EACtE,cAAc,CAAC,IAAI;IACrB,CAAC,4BAA4B,CAAC,iCAAiC,CAAC,EAC9D,cAAc,CAAC,IAAI;IAErB;;;;;;OAMG;IACH,CAAC,4BAA4B,CAAC,gCAAgC,CAAC,EAC7D,cAAc,CAAC,MAAM;IACvB,CAAC,4BAA4B,CAAC,qCAAqC,CAAC,EAClE,cAAc,CAAC,MAAM;IACvB,CAAC,4BAA4B,CAAC,yCAAyC,CAAC,EACtE,cAAc,CAAC,MAAM;IACvB,CAAC,4BAA4B,CAAC,6CAA6C,CAAC,EAC1E,cAAc,CAAC,MAAM;IACvB,CAAC,4BAA4B,CAAC,oDAAoD,CAAC,EACjF,cAAc,CAAC,MAAM;IACvB,CAAC,4BAA4B,CAAC,qCAAqC,CAAC,EAClE,cAAc,CAAC,MAAM;IACvB,CAAC,4BAA4B,CAAC,0CAA0C,CAAC,EACvE,cAAc,CAAC,MAAM;CACxB,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAkC;IAClE,cAAc,CAAC,SAAS;IACxB,cAAc,CAAC,gBAAgB;IAC/B,cAAc,CAAC,MAAM;IACrB,cAAc,CAAC,aAAa;IAC5B,cAAc,CAAC,IAAI;IACnB,cAAc,CAAC,QAAQ;IACvB,cAAc,CAAC,oBAAoB;IACnC,cAAc,CAAC,MAAM;IACrB,cAAc,CAAC,QAAQ;IACvB,cAAc,CAAC,WAAW;IAC1B,cAAc,CAAC,MAAM;IACrB,cAAc,CAAC,KAAK;CACrB,CAAC;AAMF;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAA8B,CAC1D,SAAuC,EACvB,EAAE;;IAClB,OAAO,MAAA,6BAA6B,CAAC,SAAS,CAAC,mCAAI,cAAc,CAAC,KAAK,CAAC;AAC1E,CAAC,CAAC;AAEF,eAAe,cAAc,CAAC"}
+{"version":3,"file":"NotificationEmailRollupCategory.js","sourceRoot":"","sources":["../../../../Types/NotificationSetting/NotificationEmailRollupCategory.ts"],"names":[],"mappings":"AAAA,OAAO,4BAA4B,MAAM,gCAAgC,CAAC;AAE1E;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,CAAN,IAAY,cAcX;AAdD,WAAY,cAAc;IACxB,yCAAuB,CAAA;IACvB,mCAAiB,CAAA;IACjB,wDAAsC,CAAA;IACtC,kDAAgC,CAAA;IAChC,uCAAqB,CAAA;IACrB,gEAA8C,CAAA;IAC9C,8CAA4B,CAAA;IAC5B,mCAAiB,CAAA;IACjB,wCAAsB,CAAA;IACtB,+BAAa,CAAA;IACb,kDAAgC,CAAA;IAChC,oCAAkB,CAAA;IAClB,iCAAe,CAAA;AACjB,CAAC,EAdW,cAAc,KAAd,cAAc,QAczB;AAED;;;;GAIG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAmC;IACnE,CAAC,cAAc,CAAC,SAAS,CAAC,EAAE,WAAW;IACvC,CAAC,cAAc,CAAC,MAAM,CAAC,EAAE,QAAQ;IACjC,CAAC,cAAc,CAAC,gBAAgB,CAAC,EAAE,mBAAmB;IACtD,CAAC,cAAc,CAAC,aAAa,CAAC,EAAE,gBAAgB;IAChD,CAAC,cAAc,CAAC,QAAQ,CAAC,EAAE,UAAU;IACrC,CAAC,cAAc,CAAC,oBAAoB,CAAC,EAAE,uBAAuB;IAC9D,CAAC,cAAc,CAAC,WAAW,CAAC,EAAE,cAAc;IAC5C,CAAC,cAAc,CAAC,MAAM,CAAC,EAAE,QAAQ;IACjC,CAAC,cAAc,CAAC,QAAQ,CAAC,EAAE,WAAW;IACtC,CAAC,cAAc,CAAC,IAAI,CAAC,EAAE,MAAM;IAC7B,CAAC,cAAc,CAAC,aAAa,CAAC,EAAE,gBAAgB;IAChD,CAAC,cAAc,CAAC,MAAM,CAAC,EAAE,SAAS;IAClC,CAAC,cAAc,CAAC,KAAK,CAAC,EAAE,OAAO;CAChC,CAAC;AAEF;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAGtC;IACF,WAAW;IACX,CAAC,4BAA4B,CAAC,wCAAwC,CAAC,EACrE,cAAc,CAAC,SAAS;IAC1B,CAAC,4BAA4B,CAAC,4CAA4C,CAAC,EACzE,cAAc,CAAC,SAAS;IAC1B,CAAC,4BAA4B,CAAC,8CAA8C,CAAC,EAC3E,cAAc,CAAC,SAAS;IAC1B,CAAC,4BAA4B,CAAC,sCAAsC,CAAC,EACnE,cAAc,CAAC,SAAS;IAC1B,CAAC,4BAA4B,CAAC,uCAAuC,CAAC,EACpE,cAAc,CAAC,SAAS;IAC1B,CAAC,4BAA4B,CAAC,yCAAyC,CAAC,EACtE,cAAc,CAAC,SAAS;IAE1B,SAAS;IACT,CAAC,4BAA4B,CAAC,qCAAqC,CAAC,EAClE,cAAc,CAAC,MAAM;IACvB,CAAC,4BAA4B,CAAC,yCAAyC,CAAC,EACtE,cAAc,CAAC,MAAM;IACvB,CAAC,4BAA4B,CAAC,2CAA2C,CAAC,EACxE,cAAc,CAAC,MAAM;IACvB,CAAC,4BAA4B,CAAC,mCAAmC,CAAC,EAChE,cAAc,CAAC,MAAM;IACvB,CAAC,4BAA4B,CAAC,sCAAsC,CAAC,EACnE,cAAc,CAAC,MAAM;IAEvB,iBAAiB;IACjB,CAAC,4BAA4B,CAAC,6CAA6C,CAAC,EAC1E,cAAc,CAAC,aAAa;IAC9B,CAAC,4BAA4B,CAAC,iDAAiD,CAAC,EAC9E,cAAc,CAAC,aAAa;IAC9B,CAAC,4BAA4B,CAAC,mDAAmD,CAAC,EAChF,cAAc,CAAC,aAAa;IAC9B,CAAC,4BAA4B,CAAC,2CAA2C,CAAC,EACxE,cAAc,CAAC,aAAa;IAC9B,CAAC,4BAA4B,CAAC,8CAA8C,CAAC,EAC3E,cAAc,CAAC,aAAa;IAE9B,oBAAoB;IACpB,CAAC,4BAA4B,CAAC,gDAAgD,CAAC,EAC7E,cAAc,CAAC,gBAAgB;IACjC,CAAC,4BAA4B,CAAC,oDAAoD,CAAC,EACjF,cAAc,CAAC,gBAAgB;IACjC,CAAC,4BAA4B,CAAC,sDAAsD,CAAC,EACnF,cAAc,CAAC,gBAAgB;IACjC,CAAC,4BAA4B,CAAC,8CAA8C,CAAC,EAC3E,cAAc,CAAC,gBAAgB;IACjC,CAAC,4BAA4B,CAAC,iDAAiD,CAAC,EAC9E,cAAc,CAAC,gBAAgB;IAEjC,WAAW;IACX,CAAC,4BAA4B,CAAC,qCAAqC,CAAC,EAClE,cAAc,CAAC,QAAQ;IACzB,CAAC,4BAA4B,CAAC,uCAAuC,CAAC,EACpE,cAAc,CAAC,QAAQ;IACzB,CAAC,4BAA4B,CAAC,8CAA8C,CAAC,EAC3E,cAAc,CAAC,QAAQ;IACzB,CAAC,4BAA4B,CAAC,mDAAmD,CAAC,EAChF,cAAc,CAAC,QAAQ;IACzB,CAAC,4BAA4B,CAAC,mEAAmE,CAAC,EAChG,cAAc,CAAC,QAAQ;IAEzB,wBAAwB;IACxB,CAAC,4BAA4B,CAAC,qDAAqD,CAAC,EAClF,cAAc,CAAC,oBAAoB;IACrC,CAAC,4BAA4B,CAAC,yDAAyD,CAAC,EACtF,cAAc,CAAC,oBAAoB;IACrC,CAAC,4BAA4B,CAAC,mDAAmD,CAAC,EAChF,cAAc,CAAC,oBAAoB;IACrC,CAAC,4BAA4B,CAAC,2DAA2D,CAAC,EACxF,cAAc,CAAC,oBAAoB;IACrC,CAAC,4BAA4B,CAAC,sDAAsD,CAAC,EACnF,cAAc,CAAC,oBAAoB;IAErC,cAAc;IACd,CAAC,4BAA4B,CAAC,wDAAwD,CAAC,EACrF,cAAc,CAAC,WAAW;IAC5B,CAAC,4BAA4B,CAAC,2CAA2C,CAAC,EACxE,cAAc,CAAC,WAAW;IAC5B,CAAC,4BAA4B,CAAC,yCAAyC,CAAC,EACtE,cAAc,CAAC,WAAW;IAE5B,mCAAmC;IACnC,CAAC,4BAA4B,CAAC,4CAA4C,CAAC,EACzE,cAAc,CAAC,MAAM;IACvB,CAAC,4BAA4B,CAAC,mCAAmC,CAAC,EAChE,cAAc,CAAC,MAAM;IAEvB,sCAAsC;IACtC,CAAC,4BAA4B,CAAC,+CAA+C,CAAC,EAC5E,cAAc,CAAC,QAAQ;IACzB,CAAC,4BAA4B,CAAC,sCAAsC,CAAC,EACnE,cAAc,CAAC,QAAQ;IAEzB,MAAM;IACN,CAAC,4BAA4B,CAAC,yCAAyC,CAAC,EACtE,cAAc,CAAC,IAAI;IACrB,CAAC,4BAA4B,CAAC,iCAAiC,CAAC,EAC9D,cAAc,CAAC,IAAI;IAErB;;;;OAIG;IACH,CAAC,4BAA4B,CAAC,4CAA4C,CAAC,EACzE,cAAc,CAAC,aAAa;IAE9B;;;;;;OAMG;IACH,CAAC,4BAA4B,CAAC,gCAAgC,CAAC,EAC7D,cAAc,CAAC,MAAM;IACvB,CAAC,4BAA4B,CAAC,qCAAqC,CAAC,EAClE,cAAc,CAAC,MAAM;IACvB,CAAC,4BAA4B,CAAC,yCAAyC,CAAC,EACtE,cAAc,CAAC,MAAM;IACvB,CAAC,4BAA4B,CAAC,6CAA6C,CAAC,EAC1E,cAAc,CAAC,MAAM;IACvB,CAAC,4BAA4B,CAAC,oDAAoD,CAAC,EACjF,cAAc,CAAC,MAAM;IACvB,CAAC,4BAA4B,CAAC,qCAAqC,CAAC,EAClE,cAAc,CAAC,MAAM;IACvB,CAAC,4BAA4B,CAAC,0CAA0C,CAAC,EACvE,cAAc,CAAC,MAAM;CACxB,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAkC;IAClE,cAAc,CAAC,SAAS;IACxB,cAAc,CAAC,gBAAgB;IAC/B,cAAc,CAAC,MAAM;IACrB,cAAc,CAAC,aAAa;IAC5B,cAAc,CAAC,aAAa;IAC5B,cAAc,CAAC,IAAI;IACnB,cAAc,CAAC,QAAQ;IACvB,cAAc,CAAC,oBAAoB;IACnC,cAAc,CAAC,MAAM;IACrB,cAAc,CAAC,QAAQ;IACvB,cAAc,CAAC,WAAW;IAC1B,cAAc,CAAC,MAAM;IACrB,cAAc,CAAC,KAAK;CACrB,CAAC;AAMF;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAA8B,CAC1D,SAAuC,EACvB,EAAE;;IAClB,OAAO,MAAA,6BAA6B,CAAC,SAAS,CAAC,mCAAI,cAAc,CAAC,KAAK,CAAC;AAC1E,CAAC,CAAC;AAEF,eAAe,cAAc,CAAC"}

package/build/dist/Types/NotificationSetting/NotificationEmailRollupPolicy.js

@@ -57,7 +57,7 @@ export const ROLLUP_ELIGIBLE_ON_CALL_ADMIN_EVENT_TYPES = new Set([
     NotificationSettingEventType.SEND_WHEN_USER_IS_REMOVED_FROM_ON_CALL_POLICY,
 ]);
 /*
- * Everything else - the other 42 members. Derived from the enum by exclusion
+ * Everything else - the other 43 members. Derived from the enum by exclusion
  * rather than listed by hand, so the two sets are a partition by construction
  * and cannot drift: there is no edit that adds a member to both, and no edit
  * that drops one from both.

package/build/dist/Types/NotificationSetting/NotificationSettingEventType.js

@@ -50,6 +50,8 @@ var NotificationSettingEventType;
     // SLO
     NotificationSettingEventType["SEND_SLO_OWNER_STATUS_CHANGE_NOTIFICATION"] = "Send SLO status change notification when I am the owner of the SLO";
     NotificationSettingEventType["SEND_SLO_OWNER_ADDED_NOTIFICATION"] = "Send notification when I am added as a owner to the SLO";
+    // Incoming Call Policies
+    NotificationSettingEventType["SEND_INCOMING_CALL_MISSED_OWNER_NOTIFICATION"] = "Send missed call notification when I am the owner of the incoming call policy";
     // On Call Notifications
     NotificationSettingEventType["SEND_WHEN_USER_IS_ON_CALL_ROSTER"] = "When user is on-call roster";
     NotificationSettingEventType["SEND_WHEN_USER_IS_NEXT_ON_CALL_ROSTER"] = "When user is next on-call roster";

package/build/dist/Types/NotificationSetting/NotificationSettingEventType.js.map

@@ -1 +1 @@
-{"version":3,"file":"NotificationSettingEventType.js","sourceRoot":"","sources":["../../../../Types/NotificationSetting/NotificationSettingEventType.ts"],"names":[],"mappings":"AAAA,IAAK,4BA0EJ;AA1ED,WAAK,4BAA4B;IAC/B,WAAW;IACX,mJAAmH,CAAA;IACnH,2JAA2H,CAAA;IAC3H,+JAA+H,CAAA;IAC/H,uIAAuG,CAAA;IACvG,2IAA2G,CAAA;IAC3G,6IAA6G,CAAA;IAE7G,SAAS;IAET,0IAA0G,CAAA;IAC1G,kJAAkH,CAAA;IAClH,sJAAsH,CAAA;IACtH,iIAAiG,CAAA;IACjG,uIAAuG,CAAA;IAEvG,iBAAiB;IAEjB,kKAAkI,CAAA;IAClI,0KAA0I,CAAA;IAC1I,8KAA8I,CAAA;IAC9I,iJAAiH,CAAA;IACjH,wJAAwH,CAAA;IAExH,oBAAoB;IAEpB,2KAA2I,CAAA;IAC3I,mLAAmJ,CAAA;IACnJ,uLAAuJ,CAAA;IACvJ,uJAAuH,CAAA;IACvH,iKAAiI,CAAA;IAEjI,WAAW;IACX,qIAAqG,CAAA;IACrG,gJAAgH,CAAA;IAChH,8JAA8H,CAAA;IAC9H,2IAA2G,CAAA;IAC3G,2KAA2I,CAAA;IAE3I,wBAAwB;IACxB,0JAA0H,CAAA;IAC1H,kKAAkI,CAAA;IAClI,iJAAiH,CAAA;IACjH,sKAAsI,CAAA;IACtI,oLAAoJ,CAAA;IAEpJ,cAAc;IACd,sLAAsJ,CAAA;IACtJ,4JAA4H,CAAA;IAC5H,6IAA6G,CAAA;IAE7G,mCAAmC;IACnC,wJAAwH,CAAA;IACxH,iIAAiG,CAAA;IAEjG,sCAAsC;IACtC,iKAAiI,CAAA;IACjI,uIAAuG,CAAA;IAEvG,MAAM;IACN,gJAAgH,CAAA;IAChH,6HAA6F,CAAA;IAE7F,wBAAwB;IACxB,gGAAgE,CAAA;IAChE,0GAA0E,CAAA;IAC1E,kHAAkF,CAAA;IAClF,0HAA0F,CAAA;IAC1F,wIAAwG,CAAA;IAExG,wDAAwD;IACxD,4GAA4E,CAAA;IAC5E,0HAA0F,CAAA;AAC5F,CAAC,EA1EI,4BAA4B,KAA5B,4BAA4B,QA0EhC;AAED,eAAe,4BAA4B,CAAC"}
+{"version":3,"file":"NotificationSettingEventType.js","sourceRoot":"","sources":["../../../../Types/NotificationSetting/NotificationSettingEventType.ts"],"names":[],"mappings":"AAAA,IAAK,4BA6EJ;AA7ED,WAAK,4BAA4B;IAC/B,WAAW;IACX,mJAAmH,CAAA;IACnH,2JAA2H,CAAA;IAC3H,+JAA+H,CAAA;IAC/H,uIAAuG,CAAA;IACvG,2IAA2G,CAAA;IAC3G,6IAA6G,CAAA;IAE7G,SAAS;IAET,0IAA0G,CAAA;IAC1G,kJAAkH,CAAA;IAClH,sJAAsH,CAAA;IACtH,iIAAiG,CAAA;IACjG,uIAAuG,CAAA;IAEvG,iBAAiB;IAEjB,kKAAkI,CAAA;IAClI,0KAA0I,CAAA;IAC1I,8KAA8I,CAAA;IAC9I,iJAAiH,CAAA;IACjH,wJAAwH,CAAA;IAExH,oBAAoB;IAEpB,2KAA2I,CAAA;IAC3I,mLAAmJ,CAAA;IACnJ,uLAAuJ,CAAA;IACvJ,uJAAuH,CAAA;IACvH,iKAAiI,CAAA;IAEjI,WAAW;IACX,qIAAqG,CAAA;IACrG,gJAAgH,CAAA;IAChH,8JAA8H,CAAA;IAC9H,2IAA2G,CAAA;IAC3G,2KAA2I,CAAA;IAE3I,wBAAwB;IACxB,0JAA0H,CAAA;IAC1H,kKAAkI,CAAA;IAClI,iJAAiH,CAAA;IACjH,sKAAsI,CAAA;IACtI,oLAAoJ,CAAA;IAEpJ,cAAc;IACd,sLAAsJ,CAAA;IACtJ,4JAA4H,CAAA;IAC5H,6IAA6G,CAAA;IAE7G,mCAAmC;IACnC,wJAAwH,CAAA;IACxH,iIAAiG,CAAA;IAEjG,sCAAsC;IACtC,iKAAiI,CAAA;IACjI,uIAAuG,CAAA;IAEvG,MAAM;IACN,gJAAgH,CAAA;IAChH,6HAA6F,CAAA;IAE7F,yBAAyB;IACzB,8JAA8H,CAAA;IAE9H,wBAAwB;IACxB,gGAAgE,CAAA;IAChE,0GAA0E,CAAA;IAC1E,kHAAkF,CAAA;IAClF,0HAA0F,CAAA;IAC1F,wIAAwG,CAAA;IAExG,wDAAwD;IACxD,4GAA4E,CAAA;IAC5E,0HAA0F,CAAA;AAC5F,CAAC,EA7EI,4BAA4B,KAA5B,4BAA4B,QA6EhC;AAED,eAAe,4BAA4B,CAAC"}

package/build/dist/Types/OnCallDutyPolicy/OnCallDutyPolicyArchive.js

@@ -0,0 +1,16 @@
+/*
+ * What an archived on-call policy leaves behind when something asks it to
+ * page people.
+ *
+ * An archived policy pages no one. An incident, alert or episode that still
+ * lists it - or a person running it from Slack, Microsoft Teams or the AI
+ * assistant - gets an execution log that says so, rather than nothing at all,
+ * so "why was nobody paged?" has an answer on the incident itself. An
+ * execution that was already escalating when the policy was archived stops
+ * at its next step.
+ */
+// The execution log of a run that was refused because the policy is archived.
+export const ON_CALL_POLICY_ARCHIVED_NOT_EXECUTED_MESSAGE = "Not executed: this on-call policy is archived, so it paged no one. Unarchive it to use it again.";
+// The execution log of a run that was escalating when the policy was archived.
+export const ON_CALL_POLICY_ARCHIVED_EXECUTION_STOPPED_MESSAGE = "Execution stopped because the on-call policy was archived. The remaining escalation rules were not run.";
+//# sourceMappingURL=OnCallDutyPolicyArchive.js.map

package/build/dist/Types/OnCallDutyPolicy/OnCallDutyPolicyArchive.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"OnCallDutyPolicyArchive.js","sourceRoot":"","sources":["../../../../Types/OnCallDutyPolicy/OnCallDutyPolicyArchive.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,8EAA8E;AAC9E,MAAM,CAAC,MAAM,4CAA4C,GACvD,kGAAkG,CAAC;AAErG,+EAA+E;AAC/E,MAAM,CAAC,MAAM,iDAAiD,GAC5D,yGAAyG,CAAC"}

package/build/dist/Types/Permission.js

@@ -116,6 +116,19 @@ var Permission;
     Permission["ReadProjectApiKey"] = "ReadProjectApiKey";
     Permission["EditProjectApiKey"] = "EditProjectApiKey";
     Permission["EditProjectApiKeyPermissions"] = "EditProjectApiKeyPermissions";
+    /*
+     * MCP clients that sign in with OAuth (Settings -> MCP Server).
+     *
+     * AuthorizeMcpClient is unlike the others in this file: every member of a
+     * project may connect an MCP client by signing in, so nobody has to be
+     * granted it. It exists to be BLOCKED - a block row for it on a team stops
+     * that team's members from authorizing clients for the project, and stops
+     * the tokens they already issued. The other two let somebody other than the
+     * member see, and revoke, what members have connected.
+     */
+    Permission["AuthorizeMcpClient"] = "AuthorizeMcpClient";
+    Permission["ReadMcpClientAuthorization"] = "ReadMcpClientAuthorization";
+    Permission["DeleteMcpClientAuthorization"] = "DeleteMcpClientAuthorization";
     Permission["CreateTelemetryIngestionKey"] = "CreateTelemetryIngestionKey";
     Permission["DeleteTelemetryIngestionKey"] = "DeleteTelemetryIngestionKey";
     Permission["ReadTelemetryIngestionKey"] = "ReadTelemetryIngestionKey";
@@ -14917,6 +14930,33 @@ export class PermissionHelper {
                 isRolePermission: false,
                 group: PermissionGroup.Project,
             },
+            {
+                permission: Permission.AuthorizeMcpClient,
+                title: "Authorize MCP Client",
+                description: "Every project member can connect an MCP client (an AI agent) to this project by signing in. Add this as a block permission on a team to stop its members from connecting MCP clients and to stop the clients they already connected.",
+                isAssignableToTenant: true,
+                isAccessControlPermission: false,
+                isRolePermission: false,
+                group: PermissionGroup.Settings,
+            },
+            {
+                permission: Permission.ReadMcpClientAuthorization,
+                title: "Read MCP Client Authorization",
+                description: "This permission can see which MCP clients every member has connected to this project. Members can always see their own.",
+                isAssignableToTenant: true,
+                isAccessControlPermission: false,
+                isRolePermission: false,
+                group: PermissionGroup.Settings,
+            },
+            {
+                permission: Permission.DeleteMcpClientAuthorization,
+                title: "Revoke MCP Client Authorization",
+                description: "This permission can revoke an MCP client any member has connected to this project. Members can always revoke their own.",
+                isAssignableToTenant: true,
+                isAccessControlPermission: false,
+                isRolePermission: false,
+                group: PermissionGroup.Settings,
+            },
         ];
         return [...permissions, ...morePermissionProps];
     }