@oneuptime/common 14.0.6 → 14.0.8

package/build/dist/Server/API/StatusPageSubscriberAPI.js

@@ -1,26 +1,65 @@
 import StatusPageSubscriberService from "../Services/StatusPageSubscriberService";
+import StatusPageService from "../Services/StatusPageService";
 import Response from "../Utils/Response";
 import BaseAPI from "./BaseAPI";
 import StatusPageSubscriber from "../../Models/DatabaseModels/StatusPageSubscriber";
+import ObjectID from "../../Types/ObjectID";
+import StatusPageSubscriberUnsubscribe from "../../Types/StatusPage/StatusPageSubscriberUnsubscribe";
+/*
+ * What the old unsubscribe route answers for an id that is not a
+ * subscriber's. Static, so nothing from the request is ever echoed into it.
+ */
+export const OUT_OF_DATE_UNSUBSCRIBE_LINK_HTML = '<!DOCTYPE html><html lang="en"><head><meta charset="utf-8" /><meta name="robots" content="noindex" /><meta name="referrer" content="no-referrer" /><title>Unsubscribe link out of date</title></head><body><p>This unsubscribe link is out of date. To unsubscribe, use the unsubscribe link at the bottom of a recent message from the status page.</p></body></html>';
 export default class StatusPageSubscriberAPI extends BaseAPI {
     constructor() {
         var _a;
         super(StatusPageSubscriber, StatusPageSubscriberService);
+        /*
+         * The unsubscribe link notifications carried until the end of 2023:
+         * /api/status-page-subscriber/unsubscribe/{subscriberId}. It used to
+         * unsubscribe on the GET itself, knowing only the id - so a mail scanner
+         * fetching the link, or an <img> pointed at it from anywhere, cancelled
+         * the subscription.
+         *
+         * It no longer changes anything. An old link still leads somewhere
+         * useful: the status page's unsubscribe page, told only the id, which
+         * says the link is out of date and to use the one in a recent message
+         * (and, on a public page, offers the subscriber's manage page). It never
+         * hands out the subscriber's unsubscribe token - that would make the id
+         * alone enough to unsubscribe again. Notifications now carry
+         * {statusPageUrl}/unsubscribe/{id}-{token}, which asks before it acts.
+         */
         this.router.get(`${(_a = new this.entityType().getCrudApiPath()) === null || _a === void 0 ? void 0 : _a.toString()}/unsubscribe/:id`, async (req, res, next) => {
             try {
-                await this.service.updateOneBy({
-                    query: {
-                        _id: req.params["id"],
-                    },
-                    data: {
-                        isUnsubscribed: true,
-                    },
-                    props: {
-                        isRoot: true,
-                        ignoreHooks: true,
-                    },
-                });
-                return Response.sendHtmlResponse(req, res, "<html><body><p> You have been unsubscribed.</p><body><html>");
+                const subscriberId = req.params["id"] || "";
+                const subscriber = ObjectID.isValidUUID(subscriberId)
+                    ? await this.service.findOneBy({
+                        query: {
+                            _id: subscriberId,
+                        },
+                        select: {
+                            _id: true,
+                            statusPageId: true,
+                        },
+                        props: {
+                            isRoot: true,
+                            ignoreHooks: true,
+                        },
+                    })
+                    : null;
+                Response.setNoCacheHeaders(res);
+                if (!subscriber || !subscriber.id || !subscriber.statusPageId) {
+                    res.status(404);
+                    res.setHeader("Content-Type", "text/html; charset=utf-8");
+                    res.send(OUT_OF_DATE_UNSUBSCRIBE_LINK_HTML);
+                    return;
+                }
+                const statusPageUrl = await StatusPageService.getStatusPageURL(subscriber.statusPageId);
+                return Response.redirect(req, res, StatusPageSubscriberUnsubscribe.buildLink({
+                    statusPageUrl: statusPageUrl,
+                    subscriberId: subscriber.id,
+                    unsubscribeToken: null,
+                }));
             }
             catch (err) {
                 next(err);

package/build/dist/Server/API/StatusPageSubscriberAPI.js.map

@@ -1 +1 @@
-{"version":3,"file":"StatusPageSubscriberAPI.js","sourceRoot":"","sources":["../../../../Server/API/StatusPageSubscriberAPI.ts"],"names":[],"mappings":"AAAA,OAAO,2BAEN,MAAM,yCAAyC,CAAC;AAMjD,OAAO,QAAQ,MAAM,mBAAmB,CAAC;AACzC,OAAO,OAAO,MAAM,WAAW,CAAC;AAChC,OAAO,oBAAoB,MAAM,kDAAkD,CAAC;AAEpF,MAAM,CAAC,OAAO,OAAO,uBAAwB,SAAQ,OAGpD;IACC;;QACE,KAAK,CAAC,oBAAoB,EAAE,2BAA2B,CAAC,CAAC;QAEzD,IAAI,CAAC,MAAM,CAAC,GAAG,CACb,GAAG,MAAA,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC,cAAc,EAAE,0CAAE,QAAQ,EAAE,kBAAkB,EACvE,KAAK,EAAE,GAAmB,EAAE,GAAoB,EAAE,IAAkB,EAAE,EAAE;YACtE,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC;oBAC7B,KAAK,EAAE;wBACL,GAAG,EAAE,GAAG,CAAC,MAAM,CAAC,IAAI,CAAW;qBAChC;oBACD,IAAI,EAAE;wBACJ,cAAc,EAAE,IAAI;qBACrB;oBACD,KAAK,EAAE;wBACL,MAAM,EAAE,IAAI;wBACZ,WAAW,EAAE,IAAI;qBAClB;iBACF,CAAC,CAAC;gBAEH,OAAO,QAAQ,CAAC,gBAAgB,CAC9B,GAAG,EACH,GAAG,EACH,6DAA6D,CAC9D,CAAC;YACJ,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,CAAC,GAAG,CAAC,CAAC;YACZ,CAAC;QACH,CAAC,CACF,CAAC;IACJ,CAAC;CACF"}
+{"version":3,"file":"StatusPageSubscriberAPI.js","sourceRoot":"","sources":["../../../../Server/API/StatusPageSubscriberAPI.ts"],"names":[],"mappings":"AAAA,OAAO,2BAEN,MAAM,yCAAyC,CAAC;AACjD,OAAO,iBAAiB,MAAM,+BAA+B,CAAC;AAM9D,OAAO,QAAQ,MAAM,mBAAmB,CAAC;AACzC,OAAO,OAAO,MAAM,WAAW,CAAC;AAChC,OAAO,oBAAoB,MAAM,kDAAkD,CAAC;AACpF,OAAO,QAAQ,MAAM,sBAAsB,CAAC;AAC5C,OAAO,+BAA+B,MAAM,wDAAwD,CAAC;AAErG;;;GAGG;AACH,MAAM,CAAC,MAAM,iCAAiC,GAC5C,wWAAwW,CAAC;AAE3W,MAAM,CAAC,OAAO,OAAO,uBAAwB,SAAQ,OAGpD;IACC;;QACE,KAAK,CAAC,oBAAoB,EAAE,2BAA2B,CAAC,CAAC;QAEzD;;;;;;;;;;;;;;WAcG;QACH,IAAI,CAAC,MAAM,CAAC,GAAG,CACb,GAAG,MAAA,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC,cAAc,EAAE,0CAAE,QAAQ,EAAE,kBAAkB,EACvE,KAAK,EAAE,GAAmB,EAAE,GAAoB,EAAE,IAAkB,EAAE,EAAE;YACtE,IAAI,CAAC;gBACH,MAAM,YAAY,GAAY,GAAG,CAAC,MAAM,CAAC,IAAI,CAAY,IAAI,EAAE,CAAC;gBAEhE,MAAM,UAAU,GAAgC,QAAQ,CAAC,WAAW,CAClE,YAAY,CACb;oBACC,CAAC,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC;wBAC3B,KAAK,EAAE;4BACL,GAAG,EAAE,YAAY;yBAClB;wBACD,MAAM,EAAE;4BACN,GAAG,EAAE,IAAI;4BACT,YAAY,EAAE,IAAI;yBACnB;wBACD,KAAK,EAAE;4BACL,MAAM,EAAE,IAAI;4BACZ,WAAW,EAAE,IAAI;yBAClB;qBACF,CAAC;oBACJ,CAAC,CAAC,IAAI,CAAC;gBAET,QAAQ,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC;gBAEhC,IAAI,CAAC,UAAU,IAAI,CAAC,UAAU,CAAC,EAAE,IAAI,CAAC,UAAU,CAAC,YAAY,EAAE,CAAC;oBAC9D,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;oBAChB,GAAG,CAAC,SAAS,CAAC,cAAc,EAAE,0BAA0B,CAAC,CAAC;oBAC1D,GAAG,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAC;oBAC5C,OAAO;gBACT,CAAC;gBAED,MAAM,aAAa,GACjB,MAAM,iBAAiB,CAAC,gBAAgB,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;gBAEpE,OAAO,QAAQ,CAAC,QAAQ,CACtB,GAAG,EACH,GAAG,EACH,+BAA+B,CAAC,SAAS,CAAC;oBACxC,aAAa,EAAE,aAAa;oBAC5B,YAAY,EAAE,UAAU,CAAC,EAAE;oBAC3B,gBAAgB,EAAE,IAAI;iBACvB,CAAC,CACH,CAAC;YACJ,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,CAAC,GAAG,CAAC,CAAC;YACZ,CAAC;QACH,CAAC,CACF,CAAC;IACJ,CAAC;CACF"}

package/build/dist/Server/Infrastructure/Postgres/SchemaMigrations/1795200000000-AddInventoryItemProjectEntityKeyIndex.js

@@ -0,0 +1,165 @@
+import logger from "../../../Utils/Logger";
+export const INVENTORY_ITEM_PROJECT_ENTITY_KEY_INDEX = "IDX_INVENTORY_ITEM_PROJECT_ENTITY_KEY";
+/*
+ * Above this many InventoryItem rows the index is not built here (see
+ * "LOCKING" below). Roughly ten seconds of build on modest hardware.
+ */
+export const INVENTORY_ITEM_INLINE_INDEX_BUILD_MAX_ROWS = 1000000;
+/* What an operator runs to build the index online, under exactly this name. */
+export const INVENTORY_ITEM_PROJECT_ENTITY_KEY_INDEX_RUNBOOK = `CREATE INDEX CONCURRENTLY IF NOT EXISTS "${INVENTORY_ITEM_PROJECT_ENTITY_KEY_INDEX}" ON "InventoryItem" ("projectId", "entityKey")`;
+/*
+ * Adds ("projectId", "entityKey") on InventoryItem.
+ *
+ * WHY
+ *
+ * Relationships name both ends by entity key only. The Topology API resolves
+ * those keys to items constantly — the things services call, where they run,
+ * the other end of every row in the detail drawer — and the only index that
+ * leads with the key today is the unique ("projectId", "entityType",
+ * "entityKey"), which a type-less lookup can use only as one probe per type in
+ * the project. The queries are written to stay correct and acceptable without
+ * this index (they constrain "entityType" to the project's types so the
+ * unique index is usable), because on Helm installs migrations run
+ * asynchronously and the new API can serve traffic before this has been
+ * built. This makes the same lookups one probe.
+ *
+ * Relationships get no new index on purpose: InventoryItemRelationship is the
+ * largest inventory table and a plain CREATE INDEX would block its ingest
+ * writes for the whole build.
+ *
+ * WHY THIS IS HAND-WRITTEN
+ *
+ * A generated migration cannot bound its own lock wait or runtime, nor decide
+ * to leave a build to the operator, and this one runs against a table that
+ * ingest writes continuously. The entity declares the index by name with
+ * `synchronize: false` (see Types/Database/UnsynchronizedIndex.ts), so the
+ * schema builder neither generates a second copy nor drops this one.
+ *
+ * LOCKING, AND THE RUNBOOK FOR LARGE INSTALLS
+ *
+ * Migrations run one transaction each (migrationsTransactionMode "each"), so
+ * CREATE INDEX CONCURRENTLY is not available here. A plain CREATE INDEX holds
+ * a SHARE lock on InventoryItem for as long as the build takes: reads
+ * continue, inventory writes queue behind it and fail once their own
+ * lock_timeout (3 s in the app) or statement_timeout runs out.
+ *
+ * The build cannot be given more time than the connection allows. The
+ * effective ceiling is the client-side DATABASE_QUERY_TIMEOUT_MS of
+ * node-postgres (35 s by default), which no SET can raise: past it the client
+ * abandons the query — and the ROLLBACK queued behind it — while the server
+ * keeps building and keeps the lock. So statement_timeout stays at the
+ * connection's own value (30 s by default, below that ceiling; `DEFAULT`
+ * undoes anything an earlier statement on the session may have set), which
+ * makes Postgres cancel an overlong build itself and release the lock at
+ * once. `lock_timeout` stops the migration from queueing behind a long
+ * transaction (and parking every writer behind itself) for more than five
+ * seconds; a timeout fails the migration, which the next start retries.
+ *
+ * A build that would not finish comfortably inside that window is not
+ * attempted: when InventoryItem holds more than
+ * INVENTORY_ITEM_INLINE_INDEX_BUILD_MAX_ROWS rows (the planner's estimate
+ * from pg_class; a bounded count when the table has never been analyzed),
+ * this migration logs a warning and completes without the index. The
+ * Topology API is correct without it, only slower on key lookups. Such an
+ * install should build the index online, at any time, under exactly this
+ * name:
+ *
+ *   CREATE INDEX CONCURRENTLY IF NOT EXISTS "IDX_INVENTORY_ITEM_PROJECT_ENTITY_KEY"
+ *     ON "InventoryItem" ("projectId", "entityKey");
+ *
+ * Built before the upgrade, this migration finds it and does nothing. A
+ * CONCURRENTLY build that failed leaves an INVALID index behind under that
+ * name, which IF NOT EXISTS would otherwise accept forever; such a leftover
+ * is dropped here first (so the runbook works as written afterwards) and
+ * rebuilt when the table is small enough.
+ *
+ * An online build that is still RUNNING looks exactly like that leftover
+ * (pg_index.indisvalid is false until it finishes). Dropping it would queue
+ * for an ACCESS EXCLUSIVE lock behind the build and stall every reader and
+ * writer of InventoryItem meanwhile, so a build in progress
+ * (pg_stat_progress_create_index) is left to finish and this migration
+ * completes without touching it.
+ */
+export class AddInventoryItemProjectEntityKeyIndex1795200000000 {
+    /* Lowered only by tests; TypeORM constructs migrations without arguments. */
+    constructor(maxRowsForInlineBuild = INVENTORY_ITEM_INLINE_INDEX_BUILD_MAX_ROWS) {
+        this.maxRowsForInlineBuild = maxRowsForInlineBuild;
+        this.name = "AddInventoryItemProjectEntityKeyIndex1795200000000";
+    }
+    async up(queryRunner) {
+        await queryRunner.query(`SET LOCAL statement_timeout = DEFAULT`);
+        await queryRunner.query(`SET LOCAL lock_timeout = '5s'`);
+        const existing = await queryRunner.query(`SELECT x.indisvalid AS "isValid" FROM pg_index x
+       JOIN pg_class c ON c.oid = x.indexrelid
+       JOIN pg_namespace n ON n.oid = c.relnamespace
+       WHERE c.relname = $1 AND n.nspname = current_schema()`, [INVENTORY_ITEM_PROJECT_ENTITY_KEY_INDEX]);
+        if (existing.some((index) => {
+            return index.isValid === true;
+        })) {
+            /* Pre-built by an operator (or already migrated): nothing to do. */
+            return;
+        }
+        if (existing.length > 0) {
+            if (await this.isBuildInProgress(queryRunner)) {
+                logger.warn(`AddInventoryItemProjectEntityKeyIndex: an online build of ${INVENTORY_ITEM_PROJECT_ENTITY_KEY_INDEX} is in progress; leaving it to finish. If that build fails, drop the INVALID index it leaves behind and run again: ${INVENTORY_ITEM_PROJECT_ENTITY_KEY_INDEX_RUNBOOK};`);
+                return;
+            }
+            await queryRunner.query(`DROP INDEX IF EXISTS "${INVENTORY_ITEM_PROJECT_ENTITY_KEY_INDEX}"`);
+        }
+        const rows = await this.estimateRows(queryRunner);
+        if (rows > this.maxRowsForInlineBuild) {
+            logger.warn(`AddInventoryItemProjectEntityKeyIndex: InventoryItem holds about ${Math.round(rows)} rows, more than the ${this.maxRowsForInlineBuild} this migration builds an index over while it blocks inventory writes, so the index ${INVENTORY_ITEM_PROJECT_ENTITY_KEY_INDEX} was NOT created. The Topology maps work without it but resolve entity keys more slowly. Build it online (it does not block writes) by running on the OneUptime database: ${INVENTORY_ITEM_PROJECT_ENTITY_KEY_INDEX_RUNBOOK};`);
+            return;
+        }
+        await queryRunner.query(`CREATE INDEX IF NOT EXISTS "${INVENTORY_ITEM_PROJECT_ENTITY_KEY_INDEX}" ON "InventoryItem" ("projectId", "entityKey")`);
+    }
+    async down(queryRunner) {
+        /*
+         * DROP INDEX takes ACCESS EXCLUSIVE on the table; waiting for it would
+         * park every reader and writer of InventoryItem behind this statement.
+         */
+        await queryRunner.query(`SET LOCAL statement_timeout = DEFAULT`);
+        await queryRunner.query(`SET LOCAL lock_timeout = '5s'`);
+        await queryRunner.query(`DROP INDEX IF EXISTS "${INVENTORY_ITEM_PROJECT_ENTITY_KEY_INDEX}"`);
+    }
+    /* Whether a CREATE INDEX (CONCURRENTLY) of this index is running now. */
+    async isBuildInProgress(queryRunner) {
+        const builds = await queryRunner.query(`SELECT 1 FROM pg_stat_progress_create_index p
+       JOIN pg_class c ON c.oid = p.index_relid
+       JOIN pg_namespace n ON n.oid = c.relnamespace
+       WHERE c.relname = $1 AND n.nspname = current_schema()`, [INVENTORY_ITEM_PROJECT_ENTITY_KEY_INDEX]);
+        return builds.length > 0;
+    }
+    /*
+     * How many rows InventoryItem holds, from the statistics the planner uses:
+     * pg_class.reltuples scaled from the pages it was measured over to the
+     * table's current size (so growth since the last ANALYZE counts). A table
+     * that has never been analyzed (reltuples -1), or whose statistics saw no
+     * pages although it has some now, is counted instead — only up to just past
+     * the threshold, so the count stays cheap on any table.
+     */
+    async estimateRows(queryRunner) {
+        var _a, _b, _c, _d, _e, _f, _g, _h;
+        const statistics = await queryRunner.query(`SELECT c.reltuples::float8 AS "reltuples", c.relpages::float8 AS "relpages",
+         (pg_relation_size(c.oid) / current_setting('block_size')::int)::float8 AS "pages"
+       FROM pg_class c
+       JOIN pg_namespace n ON n.oid = c.relnamespace
+       WHERE c.relname = 'InventoryItem' AND n.nspname = current_schema()`);
+        const reltuples = Number((_b = (_a = statistics[0]) === null || _a === void 0 ? void 0 : _a.reltuples) !== null && _b !== void 0 ? _b : -1);
+        const relpages = Number((_d = (_c = statistics[0]) === null || _c === void 0 ? void 0 : _c.relpages) !== null && _d !== void 0 ? _d : 0);
+        const pages = Number((_f = (_e = statistics[0]) === null || _e === void 0 ? void 0 : _e.pages) !== null && _f !== void 0 ? _f : 0);
+        const isKnown = Number.isFinite(reltuples) &&
+            reltuples >= 0 &&
+            Number.isFinite(relpages) &&
+            Number.isFinite(pages) &&
+            (relpages > 0 || pages === 0);
+        if (isKnown) {
+            return relpages > 0
+                ? Math.max(reltuples, (reltuples / relpages) * pages)
+                : reltuples;
+        }
+        const counted = await queryRunner.query(`SELECT COUNT(*)::int AS "count" FROM (SELECT 1 FROM "InventoryItem" LIMIT $1) bounded`, [this.maxRowsForInlineBuild + 1]);
+        return Number((_h = (_g = counted[0]) === null || _g === void 0 ? void 0 : _g.count) !== null && _h !== void 0 ? _h : 0);
+    }
+}
+//# sourceMappingURL=1795200000000-AddInventoryItemProjectEntityKeyIndex.js.map

package/build/dist/Server/Infrastructure/Postgres/SchemaMigrations/1795200000000-AddInventoryItemProjectEntityKeyIndex.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"1795200000000-AddInventoryItemProjectEntityKeyIndex.js","sourceRoot":"","sources":["../../../../../../Server/Infrastructure/Postgres/SchemaMigrations/1795200000000-AddInventoryItemProjectEntityKeyIndex.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,uBAAuB,CAAC;AAG3C,MAAM,CAAC,MAAM,uCAAuC,GAClD,uCAAuC,CAAC;AAE1C;;;GAGG;AACH,MAAM,CAAC,MAAM,0CAA0C,GAAW,OAAS,CAAC;AAE5E,+EAA+E;AAC/E,MAAM,CAAC,MAAM,+CAA+C,GAAW,4CAA4C,uCAAuC,iDAAiD,CAAC;AAE5M;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwEG;AACH,MAAM,OAAO,kDAAkD;IAK7D,6EAA6E;IAC7E,YACU,wBAAgC,0CAA0C;QAA1E,0BAAqB,GAArB,qBAAqB,CAAqD;QAJ7E,SAAI,GAAW,oDAAoD,CAAC;IAKxE,CAAC;IAEG,KAAK,CAAC,EAAE,CAAC,WAAwB;QACtC,MAAM,WAAW,CAAC,KAAK,CAAC,uCAAuC,CAAC,CAAC;QACjE,MAAM,WAAW,CAAC,KAAK,CAAC,+BAA+B,CAAC,CAAC;QAEzD,MAAM,QAAQ,GAAgC,MAAM,WAAW,CAAC,KAAK,CACnE;;;6DAGuD,EACvD,CAAC,uCAAuC,CAAC,CAC1C,CAAC;QAEF,IACE,QAAQ,CAAC,IAAI,CAAC,CAAC,KAA2B,EAAW,EAAE;YACrD,OAAO,KAAK,CAAC,OAAO,KAAK,IAAI,CAAC;QAChC,CAAC,CAAC,EACF,CAAC;YACD,oEAAoE;YACpE,OAAO;QACT,CAAC;QAED,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxB,IAAI,MAAM,IAAI,CAAC,iBAAiB,CAAC,WAAW,CAAC,EAAE,CAAC;gBAC9C,MAAM,CAAC,IAAI,CACT,6DAA6D,uCAAuC,sHAAsH,+CAA+C,GAAG,CAC7Q,CAAC;gBACF,OAAO;YACT,CAAC;YACD,MAAM,WAAW,CAAC,KAAK,CACrB,yBAAyB,uCAAuC,GAAG,CACpE,CAAC;QACJ,CAAC;QAED,MAAM,IAAI,GAAW,MAAM,IAAI,CAAC,YAAY,CAAC,WAAW,CAAC,CAAC;QAE1D,IAAI,IAAI,GAAG,IAAI,CAAC,qBAAqB,EAAE,CAAC;YACtC,MAAM,CAAC,IAAI,CACT,oEAAoE,IAAI,CAAC,KAAK,CAC5E,IAAI,CACL,wBAAwB,IAAI,CAAC,qBAAqB,uFAAuF,uCAAuC,6KAA6K,+CAA+C,GAAG,CACjZ,CAAC;YACF,OAAO;QACT,CAAC;QAED,MAAM,WAAW,CAAC,KAAK,CACrB,+BAA+B,uCAAuC,iDAAiD,CACxH,CAAC;IACJ,CAAC;IAEM,KAAK,CAAC,IAAI,CAAC,WAAwB;QACxC;;;WAGG;QACH,MAAM,WAAW,CAAC,KAAK,CAAC,uCAAuC,CAAC,CAAC;QACjE,MAAM,WAAW,CAAC,KAAK,CAAC,+BAA+B,CAAC,CAAC;QACzD,MAAM,WAAW,CAAC,KAAK,CACrB,yBAAyB,uCAAuC,GAAG,CACpE,CAAC;IACJ,CAAC;IAED,yEAAyE;IACjE,KAAK,CAAC,iBAAiB,CAAC,WAAwB;QACtD,MAAM,MAAM,GAAmB,MAAM,WAAW,CAAC,KAAK,CACpD;;;6DAGuD,EACvD,CAAC,uCAAuC,CAAC,CAC1C,CAAC;QACF,OAAO,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC;IAC3B,CAAC;IAED;;;;;;;OAOG;IACK,KAAK,CAAC,YAAY,CAAC,WAAwB;;QACjD,MAAM,UAAU,GAIX,MAAM,WAAW,CAAC,KAAK,CAC1B;;;;0EAIoE,CACrE,CAAC;QAEF,MAAM,SAAS,GAAW,MAAM,CAAC,MAAA,MAAA,UAAU,CAAC,CAAC,CAAC,0CAAE,SAAS,mCAAI,CAAC,CAAC,CAAC,CAAC;QACjE,MAAM,QAAQ,GAAW,MAAM,CAAC,MAAA,MAAA,UAAU,CAAC,CAAC,CAAC,0CAAE,QAAQ,mCAAI,CAAC,CAAC,CAAC;QAC9D,MAAM,KAAK,GAAW,MAAM,CAAC,MAAA,MAAA,UAAU,CAAC,CAAC,CAAC,0CAAE,KAAK,mCAAI,CAAC,CAAC,CAAC;QAExD,MAAM,OAAO,GACX,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC;YAC1B,SAAS,IAAI,CAAC;YACd,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC;YACzB,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;YACtB,CAAC,QAAQ,GAAG,CAAC,IAAI,KAAK,KAAK,CAAC,CAAC,CAAC;QAEhC,IAAI,OAAO,EAAE,CAAC;YACZ,OAAO,QAAQ,GAAG,CAAC;gBACjB,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC,SAAS,GAAG,QAAQ,CAAC,GAAG,KAAK,CAAC;gBACrD,CAAC,CAAC,SAAS,CAAC;QAChB,CAAC;QAED,MAAM,OAAO,GAAsC,MAAM,WAAW,CAAC,KAAK,CACxE,uFAAuF,EACvF,CAAC,IAAI,CAAC,qBAAqB,GAAG,CAAC,CAAC,CACjC,CAAC;QAEF,OAAO,MAAM,CAAC,MAAA,MAAA,OAAO,CAAC,CAAC,CAAC,0CAAE,KAAK,mCAAI,CAAC,CAAC,CAAC;IACxC,CAAC;CACF"}

package/build/dist/Server/Infrastructure/Postgres/SchemaMigrations/1795300000000-SkipHiddenIncidentCreatedNotifications.js

@@ -0,0 +1,41 @@
+/*
+ * Data fix: settle the 'incident created' subscriber notification of hidden
+ * incidents that the worker left InProgress.
+ *
+ * Incident:SendNotificationToSubscribers used to mark an incident's 'created'
+ * notification InProgress and then, when the incident was not visible on
+ * status pages, move on without settling it. The job only ever picks up
+ * Pending rows, so those rows stayed InProgress forever: the dashboard showed
+ * "Notifications Being Sent" for good, and nothing could ever send them once
+ * the incident was published. The worker now marks them Skipped with a
+ * reason, and publishing such an incident can re-queue the notification (see
+ * IncidentCreatedRenotify) - but only from Skipped. This moves the rows the old
+ * worker stranded to the same Skipped state and reason, so they get that
+ * option too.
+ *
+ * Only hidden incidents are touched. `IS NOT TRUE` also covers a NULL
+ * visibility, which the worker treated as hidden. A visible incident that is
+ * InProgress may really be sending right now, and is left alone.
+ *
+ * The message is written out rather than imported so the migration keeps
+ * doing what it did when it shipped. It matches
+ * IncidentCreatedRenotify.hiddenFromStatusPagesMessage, which is what the
+ * worker writes, so migrated rows read exactly like newly skipped ones (a
+ * test pins the two together).
+ *
+ * down() restores nothing: putting rows back into a state that nothing ever
+ * leaves would only break them again.
+ */
+export const HIDDEN_FROM_STATUS_PAGES_MESSAGE = "Incident is not visible on status pages. Skipping notifications to subscribers.";
+export class SkipHiddenIncidentCreatedNotifications1795300000000 {
+    constructor() {
+        this.name = "SkipHiddenIncidentCreatedNotifications1795300000000";
+    }
+    async up(queryRunner) {
+        await queryRunner.query(`UPDATE "Incident" SET "subscriberNotificationStatusOnIncidentCreated" = 'Skipped', "subscriberNotificationStatusMessage" = $1 WHERE "subscriberNotificationStatusOnIncidentCreated" = 'InProgress' AND "isVisibleOnStatusPage" IS NOT TRUE`, [HIDDEN_FROM_STATUS_PAGES_MESSAGE]);
+    }
+    async down(_queryRunner) {
+        // Nothing to restore; see the note above.
+    }
+}
+//# sourceMappingURL=1795300000000-SkipHiddenIncidentCreatedNotifications.js.map

package/build/dist/Server/Infrastructure/Postgres/SchemaMigrations/1795300000000-SkipHiddenIncidentCreatedNotifications.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"1795300000000-SkipHiddenIncidentCreatedNotifications.js","sourceRoot":"","sources":["../../../../../../Server/Infrastructure/Postgres/SchemaMigrations/1795300000000-SkipHiddenIncidentCreatedNotifications.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,MAAM,CAAC,MAAM,gCAAgC,GAC3C,iFAAiF,CAAC;AAEpF,MAAM,OAAO,mDAAmD;IAAhE;QAGS,SAAI,GAAW,qDAAqD,CAAC;IAY9E,CAAC;IAVQ,KAAK,CAAC,EAAE,CAAC,WAAwB;QACtC,MAAM,WAAW,CAAC,KAAK,CACrB,4OAA4O,EAC5O,CAAC,gCAAgC,CAAC,CACnC,CAAC;IACJ,CAAC;IAEM,KAAK,CAAC,IAAI,CAAC,YAAyB;QACzC,0CAA0C;IAC5C,CAAC;CACF"}

package/build/dist/Server/Infrastructure/Postgres/SchemaMigrations/1795400000000-AddIncidentStatusPageScope.js

@@ -0,0 +1,57 @@
+/*
+ * Per-incident status page scope (Incident.statusPages).
+ *
+ * - IncidentStatusPage: the status pages an incident is limited to. Its join
+ *   rows cascade when either side is deleted.
+ * - Incident.isScopedToStatusPages: whether the incident is limited to its
+ *   status pages, so the status page queries can split on it in SQL. Existing
+ *   incidents are unscoped, which is today's behaviour, so the default needs
+ *   no backfill. It is never recomputed when join rows cascade away: an
+ *   incident whose only scoped page is deleted stays scoped - to nothing - and
+ *   is hidden rather than widened to every page its monitors reach. It is not
+ *   indexed: false on nearly every row, and an index built here would hold
+ *   this transaction's lock on Incident, reads included, for the whole build.
+ *   Adding the NOT NULL DEFAULT false column itself does not rewrite the
+ *   table.
+ * - Incident.statusPagesNotifiedOnCreation: the pages already sent the
+ *   incident's 'created' notification, so a page added later is told once.
+ * - IncidentTemplateStatusPage: the scope an incident template applies.
+ * - StatusPage.onlyShowScopedIncidents: pages that never show or notify an
+ *   unscoped incident. Off for every existing page.
+ */
+export class AddIncidentStatusPageScope1795400000000 {
+    constructor() {
+        this.name = "AddIncidentStatusPageScope1795400000000";
+    }
+    async up(queryRunner) {
+        await queryRunner.query(`CREATE TABLE "IncidentStatusPage" ("incidentId" uuid NOT NULL, "statusPageId" uuid NOT NULL, CONSTRAINT "PK_704cbe88e7fbb614b8276db4326" PRIMARY KEY ("incidentId", "statusPageId"))`);
+        await queryRunner.query(`CREATE INDEX "IDX_a4ad6eb224d14cc17708420961" ON "IncidentStatusPage" ("incidentId") `);
+        await queryRunner.query(`CREATE INDEX "IDX_12a8bd395d53349410e5fce974" ON "IncidentStatusPage" ("statusPageId") `);
+        await queryRunner.query(`CREATE TABLE "IncidentTemplateStatusPage" ("incidentTemplateId" uuid NOT NULL, "statusPageId" uuid NOT NULL, CONSTRAINT "PK_24de18b6b85dd0baf4e0016a807" PRIMARY KEY ("incidentTemplateId", "statusPageId"))`);
+        await queryRunner.query(`CREATE INDEX "IDX_20db51def3a2086a8bf62294a1" ON "IncidentTemplateStatusPage" ("incidentTemplateId") `);
+        await queryRunner.query(`CREATE INDEX "IDX_b1a0dee8efae60ea4a0c37f6b8" ON "IncidentTemplateStatusPage" ("statusPageId") `);
+        await queryRunner.query(`ALTER TABLE "StatusPage" ADD "onlyShowScopedIncidents" boolean NOT NULL DEFAULT false`);
+        await queryRunner.query(`ALTER TABLE "Incident" ADD "isScopedToStatusPages" boolean NOT NULL DEFAULT false`);
+        await queryRunner.query(`ALTER TABLE "Incident" ADD "statusPagesNotifiedOnCreation" jsonb`);
+        await queryRunner.query(`ALTER TABLE "IncidentStatusPage" ADD CONSTRAINT "FK_a4ad6eb224d14cc177084209619" FOREIGN KEY ("incidentId") REFERENCES "Incident"("_id") ON DELETE CASCADE ON UPDATE CASCADE`);
+        await queryRunner.query(`ALTER TABLE "IncidentStatusPage" ADD CONSTRAINT "FK_12a8bd395d53349410e5fce9743" FOREIGN KEY ("statusPageId") REFERENCES "StatusPage"("_id") ON DELETE CASCADE ON UPDATE CASCADE`);
+        await queryRunner.query(`ALTER TABLE "IncidentTemplateStatusPage" ADD CONSTRAINT "FK_20db51def3a2086a8bf62294a1f" FOREIGN KEY ("incidentTemplateId") REFERENCES "IncidentTemplate"("_id") ON DELETE CASCADE ON UPDATE CASCADE`);
+        await queryRunner.query(`ALTER TABLE "IncidentTemplateStatusPage" ADD CONSTRAINT "FK_b1a0dee8efae60ea4a0c37f6b81" FOREIGN KEY ("statusPageId") REFERENCES "StatusPage"("_id") ON DELETE CASCADE ON UPDATE CASCADE`);
+    }
+    async down(queryRunner) {
+        await queryRunner.query(`ALTER TABLE "IncidentTemplateStatusPage" DROP CONSTRAINT "FK_b1a0dee8efae60ea4a0c37f6b81"`);
+        await queryRunner.query(`ALTER TABLE "IncidentTemplateStatusPage" DROP CONSTRAINT "FK_20db51def3a2086a8bf62294a1f"`);
+        await queryRunner.query(`ALTER TABLE "IncidentStatusPage" DROP CONSTRAINT "FK_12a8bd395d53349410e5fce9743"`);
+        await queryRunner.query(`ALTER TABLE "IncidentStatusPage" DROP CONSTRAINT "FK_a4ad6eb224d14cc177084209619"`);
+        await queryRunner.query(`ALTER TABLE "Incident" DROP COLUMN "statusPagesNotifiedOnCreation"`);
+        await queryRunner.query(`ALTER TABLE "Incident" DROP COLUMN "isScopedToStatusPages"`);
+        await queryRunner.query(`ALTER TABLE "StatusPage" DROP COLUMN "onlyShowScopedIncidents"`);
+        await queryRunner.query(`DROP INDEX "public"."IDX_b1a0dee8efae60ea4a0c37f6b8"`);
+        await queryRunner.query(`DROP INDEX "public"."IDX_20db51def3a2086a8bf62294a1"`);
+        await queryRunner.query(`DROP TABLE "IncidentTemplateStatusPage"`);
+        await queryRunner.query(`DROP INDEX "public"."IDX_12a8bd395d53349410e5fce974"`);
+        await queryRunner.query(`DROP INDEX "public"."IDX_a4ad6eb224d14cc17708420961"`);
+        await queryRunner.query(`DROP TABLE "IncidentStatusPage"`);
+    }
+}
+//# sourceMappingURL=1795400000000-AddIncidentStatusPageScope.js.map

package/build/dist/Server/Infrastructure/Postgres/SchemaMigrations/1795400000000-AddIncidentStatusPageScope.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"1795400000000-AddIncidentStatusPageScope.js","sourceRoot":"","sources":["../../../../../../Server/Infrastructure/Postgres/SchemaMigrations/1795400000000-AddIncidentStatusPageScope.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,OAAO,uCAAuC;IAApD;QAGS,SAAI,GAAW,yCAAyC,CAAC;IAiFlE,CAAC;IA/EQ,KAAK,CAAC,EAAE,CAAC,WAAwB;QACtC,MAAM,WAAW,CAAC,KAAK,CACrB,sLAAsL,CACvL,CAAC;QACF,MAAM,WAAW,CAAC,KAAK,CACrB,uFAAuF,CACxF,CAAC;QACF,MAAM,WAAW,CAAC,KAAK,CACrB,yFAAyF,CAC1F,CAAC;QACF,MAAM,WAAW,CAAC,KAAK,CACrB,8MAA8M,CAC/M,CAAC;QACF,MAAM,WAAW,CAAC,KAAK,CACrB,uGAAuG,CACxG,CAAC;QACF,MAAM,WAAW,CAAC,KAAK,CACrB,iGAAiG,CAClG,CAAC;QACF,MAAM,WAAW,CAAC,KAAK,CACrB,uFAAuF,CACxF,CAAC;QACF,MAAM,WAAW,CAAC,KAAK,CACrB,mFAAmF,CACpF,CAAC;QACF,MAAM,WAAW,CAAC,KAAK,CACrB,kEAAkE,CACnE,CAAC;QACF,MAAM,WAAW,CAAC,KAAK,CACrB,8KAA8K,CAC/K,CAAC;QACF,MAAM,WAAW,CAAC,KAAK,CACrB,kLAAkL,CACnL,CAAC;QACF,MAAM,WAAW,CAAC,KAAK,CACrB,sMAAsM,CACvM,CAAC;QACF,MAAM,WAAW,CAAC,KAAK,CACrB,0LAA0L,CAC3L,CAAC;IACJ,CAAC;IAEM,KAAK,CAAC,IAAI,CAAC,WAAwB;QACxC,MAAM,WAAW,CAAC,KAAK,CACrB,2FAA2F,CAC5F,CAAC;QACF,MAAM,WAAW,CAAC,KAAK,CACrB,2FAA2F,CAC5F,CAAC;QACF,MAAM,WAAW,CAAC,KAAK,CACrB,mFAAmF,CACpF,CAAC;QACF,MAAM,WAAW,CAAC,KAAK,CACrB,mFAAmF,CACpF,CAAC;QACF,MAAM,WAAW,CAAC,KAAK,CACrB,oEAAoE,CACrE,CAAC;QACF,MAAM,WAAW,CAAC,KAAK,CACrB,4DAA4D,CAC7D,CAAC;QACF,MAAM,WAAW,CAAC,KAAK,CACrB,gEAAgE,CACjE,CAAC;QACF,MAAM,WAAW,CAAC,KAAK,CACrB,sDAAsD,CACvD,CAAC;QACF,MAAM,WAAW,CAAC,KAAK,CACrB,sDAAsD,CACvD,CAAC;QACF,MAAM,WAAW,CAAC,KAAK,CAAC,yCAAyC,CAAC,CAAC;QACnE,MAAM,WAAW,CAAC,KAAK,CACrB,sDAAsD,CACvD,CAAC;QACF,MAAM,WAAW,CAAC,KAAK,CACrB,sDAAsD,CACvD,CAAC;QACF,MAAM,WAAW,CAAC,KAAK,CAAC,iCAAiC,CAAC,CAAC;IAC7D,CAAC;CACF"}

package/build/dist/Server/Infrastructure/Postgres/SchemaMigrations/1795500000000-AddIncidentTemplateStatusPageScopeFlag.js

@@ -0,0 +1,23 @@
+/*
+ * IncidentTemplate.isScopedToStatusPages: whether a template limits the
+ * incidents declared from it to status pages, kept apart from its list of
+ * pages so that a template whose every page was deleted (the join rows
+ * cascade away) does not start declaring incidents that reach every status
+ * page (see the column in IncidentTemplate).
+ *
+ * Templates that already list status pages are scoped, so the flag is set for
+ * them. Nothing else changes: a template with no pages stays unscoped.
+ */
+export class AddIncidentTemplateStatusPageScopeFlag1795500000000 {
+    constructor() {
+        this.name = "AddIncidentTemplateStatusPageScopeFlag1795500000000";
+    }
+    async up(queryRunner) {
+        await queryRunner.query(`ALTER TABLE "IncidentTemplate" ADD "isScopedToStatusPages" boolean NOT NULL DEFAULT false`);
+        await queryRunner.query(`UPDATE "IncidentTemplate" SET "isScopedToStatusPages" = true WHERE "_id" IN (SELECT "incidentTemplateId" FROM "IncidentTemplateStatusPage")`);
+    }
+    async down(queryRunner) {
+        await queryRunner.query(`ALTER TABLE "IncidentTemplate" DROP COLUMN "isScopedToStatusPages"`);
+    }
+}
+//# sourceMappingURL=1795500000000-AddIncidentTemplateStatusPageScopeFlag.js.map

package/build/dist/Server/Infrastructure/Postgres/SchemaMigrations/1795500000000-AddIncidentTemplateStatusPageScopeFlag.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"1795500000000-AddIncidentTemplateStatusPageScopeFlag.js","sourceRoot":"","sources":["../../../../../../Server/Infrastructure/Postgres/SchemaMigrations/1795500000000-AddIncidentTemplateStatusPageScopeFlag.ts"],"names":[],"mappings":"AAEA;;;;;;;;;GASG;AACH,MAAM,OAAO,mDAAmD;IAAhE;QAGS,SAAI,GAAW,qDAAqD,CAAC;IAiB9E,CAAC;IAfQ,KAAK,CAAC,EAAE,CAAC,WAAwB;QACtC,MAAM,WAAW,CAAC,KAAK,CACrB,2FAA2F,CAC5F,CAAC;QAEF,MAAM,WAAW,CAAC,KAAK,CACrB,6IAA6I,CAC9I,CAAC;IACJ,CAAC;IAEM,KAAK,CAAC,IAAI,CAAC,WAAwB;QACxC,MAAM,WAAW,CAAC,KAAK,CACrB,oEAAoE,CACrE,CAAC;IACJ,CAAC;CACF"}

package/build/dist/Server/Infrastructure/Postgres/SchemaMigrations/1795600000000-AddStatusPageSubscriberUnsubscribeToken.js

@@ -0,0 +1,40 @@
+/*
+ * Unsubscribing without signing in (StatusPageSubscriber.unsubscribeToken,
+ * StatusPageSubscriber.unsubscribedAt).
+ *
+ * - unsubscribeToken: the random secret in each subscriber's unsubscribe
+ *   link, {statusPageUrl}/unsubscribe/{id}-{token}. Holding the link is what
+ *   lets a subscriber of a private status page unsubscribe without an account
+ *   on it. New subscribers get one from StatusPageSubscriberService.
+ * - unsubscribedAt: when a subscription was cancelled. Subscriptions
+ *   cancelled before this column existed have none - there is no record of
+ *   when they were - and are left empty rather than given a made-up date.
+ *
+ * Only the two nullable columns, which Postgres adds without rewriting the
+ * table. Existing subscribers are given their tokens by the
+ * BackfillStatusPageSubscriberUnsubscribeTokens data migration, in batches
+ * and outside this migration's transaction: one UPDATE of every row here
+ * would hold ADD COLUMN's exclusive lock on the table - blocking every
+ * notification, subscribe and subscriber list - for as long as it took, and
+ * on a large table it would run into the connection's statement timeout and
+ * fail the deploy. Until the backfill reaches a subscriber, the first sender
+ * to need its link gives it one (StatusPageSubscriberService
+ * .ensureUnsubscribeTokens).
+ *
+ * down() drops both columns; the tokens cannot be recovered afterwards, and
+ * every link already sent stops working.
+ */
+export class AddStatusPageSubscriberUnsubscribeToken1795600000000 {
+    constructor() {
+        this.name = "AddStatusPageSubscriberUnsubscribeToken1795600000000";
+    }
+    async up(queryRunner) {
+        await queryRunner.query(`ALTER TABLE "StatusPageSubscriber" ADD "unsubscribedAt" TIMESTAMP WITH TIME ZONE`);
+        await queryRunner.query(`ALTER TABLE "StatusPageSubscriber" ADD "unsubscribeToken" character varying(100)`);
+    }
+    async down(queryRunner) {
+        await queryRunner.query(`ALTER TABLE "StatusPageSubscriber" DROP COLUMN "unsubscribeToken"`);
+        await queryRunner.query(`ALTER TABLE "StatusPageSubscriber" DROP COLUMN "unsubscribedAt"`);
+    }
+}
+//# sourceMappingURL=1795600000000-AddStatusPageSubscriberUnsubscribeToken.js.map

package/build/dist/Server/Infrastructure/Postgres/SchemaMigrations/1795600000000-AddStatusPageSubscriberUnsubscribeToken.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"1795600000000-AddStatusPageSubscriberUnsubscribeToken.js","sourceRoot":"","sources":["../../../../../../Server/Infrastructure/Postgres/SchemaMigrations/1795600000000-AddStatusPageSubscriberUnsubscribeToken.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,MAAM,OAAO,oDAAoD;IAAjE;QAGS,SAAI,GAAW,sDAAsD,CAAC;IAmB/E,CAAC;IAjBQ,KAAK,CAAC,EAAE,CAAC,WAAwB;QACtC,MAAM,WAAW,CAAC,KAAK,CACrB,kFAAkF,CACnF,CAAC;QACF,MAAM,WAAW,CAAC,KAAK,CACrB,kFAAkF,CACnF,CAAC;IACJ,CAAC;IAEM,KAAK,CAAC,IAAI,CAAC,WAAwB;QACxC,MAAM,WAAW,CAAC,KAAK,CACrB,mEAAmE,CACpE,CAAC;QACF,MAAM,WAAW,CAAC,KAAK,CACrB,iEAAiE,CAClE,CAAC;IACJ,CAAC;CACF"}

package/build/dist/Server/Infrastructure/Postgres/SchemaMigrations/1795700000000-AddStatusPageSubscriberIsAddedByTeam.js

@@ -0,0 +1,26 @@
+/*
+ * StatusPageSubscriber.isAddedByTeam: whether the status page's team added a
+ * subscriber (from the dashboard, with an API key or by a workflow) rather
+ * than the subscriber signing up on the status page. It decides whether the
+ * page's owners are told when the subscriber unsubscribes itself - Created
+ * By cannot, because an API key's or a workflow's create carries no user.
+ *
+ * Postgres 11 and later add a NOT NULL column with a constant default without
+ * rewriting the table. Subscribers that already exist are marked from Created
+ * By by the BackfillStatusPageSubscriberUnsubscribeTokens data migration, in
+ * batches outside this transaction (see
+ * 1795600000000-AddStatusPageSubscriberUnsubscribeToken for why); until it
+ * reaches one, StatusPageSubscriberService reads Created By as well.
+ */
+export class AddStatusPageSubscriberIsAddedByTeam1795700000000 {
+    constructor() {
+        this.name = "AddStatusPageSubscriberIsAddedByTeam1795700000000";
+    }
+    async up(queryRunner) {
+        await queryRunner.query(`ALTER TABLE "StatusPageSubscriber" ADD "isAddedByTeam" boolean NOT NULL DEFAULT false`);
+    }
+    async down(queryRunner) {
+        await queryRunner.query(`ALTER TABLE "StatusPageSubscriber" DROP COLUMN "isAddedByTeam"`);
+    }
+}
+//# sourceMappingURL=1795700000000-AddStatusPageSubscriberIsAddedByTeam.js.map

package/build/dist/Server/Infrastructure/Postgres/SchemaMigrations/1795700000000-AddStatusPageSubscriberIsAddedByTeam.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"1795700000000-AddStatusPageSubscriberIsAddedByTeam.js","sourceRoot":"","sources":["../../../../../../Server/Infrastructure/Postgres/SchemaMigrations/1795700000000-AddStatusPageSubscriberIsAddedByTeam.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;;;;GAaG;AACH,MAAM,OAAO,iDAAiD;IAA9D;QAGS,SAAI,GAAW,mDAAmD,CAAC;IAa5E,CAAC;IAXQ,KAAK,CAAC,EAAE,CAAC,WAAwB;QACtC,MAAM,WAAW,CAAC,KAAK,CACrB,uFAAuF,CACxF,CAAC;IACJ,CAAC;IAEM,KAAK,CAAC,IAAI,CAAC,WAAwB;QACxC,MAAM,WAAW,CAAC,KAAK,CACrB,gEAAgE,CACjE,CAAC;IACJ,CAAC;CACF"}

package/build/dist/Server/Infrastructure/Postgres/SchemaMigrations/1795800000000-AddIncidentCustomFieldCreateAndNotificationSettings.js

@@ -0,0 +1,89 @@
+import { generateCustomFieldVariableKey } from "../../../../Types/CustomField/CustomFieldVariableKey";
+/*
+ * Incident custom field settings for declaring incidents and for subscriber
+ * emails (OneUptime/oneuptime#4035):
+ *
+ * - isRequiredOnCreate, sortOrder, showOnCreate and
+ *   includeInSubscriberNotifications: plain settings. The three flags start
+ *   off, and no field has an order, so every existing field behaves as it did.
+ * - variableKey: the key templates reach a field by, {{customFields.<key>}}.
+ *   Unique per project (the index), made from the name when a field is
+ *   created and never changed afterwards. Nullable only because the table
+ *   already has rows; the backfill below gives each of them a key.
+ *
+ * The backfill runs here, in the same transaction as the columns, rather than
+ * in a batched data migration like the subscriber tokens: definition tables
+ * hold a few dozen rows a project, and a key has to exist before anything
+ * lists a field's template variable. Keys are made by the same generator the
+ * service uses for a new field, so an existing field gets the key it would
+ * have got had it been created today. Within a project the oldest field wins
+ * the plain key and later ones get _2, _3, ...
+ *
+ * down() drops the columns and the index; the keys cannot be recovered, and
+ * templates that use them stop filling in.
+ */
+// Rows written per UPDATE: two parameters each, well under Postgres' limit.
+const BACKFILL_BATCH_SIZE = 500;
+/**
+ * Give every incident custom field without a template key one. Idempotent:
+ * a key already there is kept, and counted as taken for the others.
+ * Returns how many fields it gave a key.
+ */
+export const backfillIncidentCustomFieldVariableKeys = async (queryRunner) => {
+    const rows = await queryRunner.query(`SELECT "_id", "projectId", "name", "variableKey" FROM "IncidentCustomField" ORDER BY "projectId" ASC, "createdAt" ASC, "_id" ASC`);
+    const takenByProject = new Map();
+    for (const row of rows) {
+        const taken = takenByProject.get(row.projectId) || new Set();
+        if (row.variableKey) {
+            taken.add(row.variableKey);
+        }
+        takenByProject.set(row.projectId, taken);
+    }
+    const assignments = [];
+    for (const row of rows) {
+        if (row.variableKey) {
+            continue;
+        }
+        const taken = takenByProject.get(row.projectId);
+        const variableKey = generateCustomFieldVariableKey({
+            name: row.name || "",
+            existingKeys: taken,
+        });
+        taken.add(variableKey);
+        assignments.push({ id: row._id, variableKey: variableKey });
+    }
+    for (let start = 0; start < assignments.length; start += BACKFILL_BATCH_SIZE) {
+        const batch = assignments.slice(start, start + BACKFILL_BATCH_SIZE);
+        const values = [];
+        const parameters = [];
+        for (const assignment of batch) {
+            parameters.push(assignment.id, assignment.variableKey);
+            values.push(`($${parameters.length - 1}::uuid, $${parameters.length}::varchar)`);
+        }
+        await queryRunner.query(`UPDATE "IncidentCustomField" AS "field" SET "variableKey" = "keys"."variableKey" FROM (VALUES ${values.join(", ")}) AS "keys"("_id", "variableKey") WHERE "field"."_id" = "keys"."_id" AND "field"."variableKey" IS NULL`, parameters);
+    }
+    return assignments.length;
+};
+export class AddIncidentCustomFieldCreateAndNotificationSettings1795800000000 {
+    constructor() {
+        this.name = "AddIncidentCustomFieldCreateAndNotificationSettings1795800000000";
+    }
+    async up(queryRunner) {
+        await queryRunner.query(`ALTER TABLE "IncidentCustomField" ADD "isRequiredOnCreate" boolean NOT NULL DEFAULT false`);
+        await queryRunner.query(`ALTER TABLE "IncidentCustomField" ADD "sortOrder" integer`);
+        await queryRunner.query(`ALTER TABLE "IncidentCustomField" ADD "showOnCreate" boolean NOT NULL DEFAULT false`);
+        await queryRunner.query(`ALTER TABLE "IncidentCustomField" ADD "includeInSubscriberNotifications" boolean NOT NULL DEFAULT false`);
+        await queryRunner.query(`ALTER TABLE "IncidentCustomField" ADD "variableKey" character varying(100)`);
+        await queryRunner.query(`CREATE UNIQUE INDEX "IDX_0a49bcb055baad4356af439169" ON "IncidentCustomField" ("projectId", "variableKey") `);
+        await backfillIncidentCustomFieldVariableKeys(queryRunner);
+    }
+    async down(queryRunner) {
+        await queryRunner.query(`DROP INDEX "public"."IDX_0a49bcb055baad4356af439169"`);
+        await queryRunner.query(`ALTER TABLE "IncidentCustomField" DROP COLUMN "variableKey"`);
+        await queryRunner.query(`ALTER TABLE "IncidentCustomField" DROP COLUMN "includeInSubscriberNotifications"`);
+        await queryRunner.query(`ALTER TABLE "IncidentCustomField" DROP COLUMN "showOnCreate"`);
+        await queryRunner.query(`ALTER TABLE "IncidentCustomField" DROP COLUMN "sortOrder"`);
+        await queryRunner.query(`ALTER TABLE "IncidentCustomField" DROP COLUMN "isRequiredOnCreate"`);
+    }
+}
+//# sourceMappingURL=1795800000000-AddIncidentCustomFieldCreateAndNotificationSettings.js.map

package/build/dist/Server/Infrastructure/Postgres/SchemaMigrations/1795800000000-AddIncidentCustomFieldCreateAndNotificationSettings.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"1795800000000-AddIncidentCustomFieldCreateAndNotificationSettings.js","sourceRoot":"","sources":["../../../../../../Server/Infrastructure/Postgres/SchemaMigrations/1795800000000-AddIncidentCustomFieldCreateAndNotificationSettings.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,8BAA8B,EAAE,MAAM,sDAAsD,CAAC;AAGtG;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,4EAA4E;AAC5E,MAAM,mBAAmB,GAAW,GAAG,CAAC;AAWxC;;;;GAIG;AACH,MAAM,CAAC,MAAM,uCAAuC,GAE7B,KAAK,EAC1B,WAAgC,EACf,EAAE;IACnB,MAAM,IAAI,GAAoB,MAAM,WAAW,CAAC,KAAK,CACnD,kIAAkI,CACnI,CAAC;IAEF,MAAM,cAAc,GAA6B,IAAI,GAAG,EAGrD,CAAC;IAEJ,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,KAAK,GACT,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,IAAI,GAAG,EAAU,CAAC;QAEzD,IAAI,GAAG,CAAC,WAAW,EAAE,CAAC;YACpB,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QAC7B,CAAC;QAED,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;IAC3C,CAAC;IAED,MAAM,WAAW,GAA+C,EAAE,CAAC;IAEnE,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,IAAI,GAAG,CAAC,WAAW,EAAE,CAAC;YACpB,SAAS;QACX,CAAC;QAED,MAAM,KAAK,GAAgB,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,SAAS,CAAE,CAAC;QAE9D,MAAM,WAAW,GAAW,8BAA8B,CAAC;YACzD,IAAI,EAAE,GAAG,CAAC,IAAI,IAAI,EAAE;YACpB,YAAY,EAAE,KAAK;SACpB,CAAC,CAAC;QAEH,KAAK,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QACvB,WAAW,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,GAAG,CAAC,GAAG,EAAE,WAAW,EAAE,WAAW,EAAE,CAAC,CAAC;IAC9D,CAAC;IAED,KACE,IAAI,KAAK,GAAW,CAAC,EACrB,KAAK,GAAG,WAAW,CAAC,MAAM,EAC1B,KAAK,IAAI,mBAAmB,EAC5B,CAAC;QACD,MAAM,KAAK,GAA+C,WAAW,CAAC,KAAK,CACzE,KAAK,EACL,KAAK,GAAG,mBAAmB,CAC5B,CAAC;QAEF,MAAM,MAAM,GAAkB,EAAE,CAAC;QACjC,MAAM,UAAU,GAAkB,EAAE,CAAC;QAErC,KAAK,MAAM,UAAU,IAAI,KAAK,EAAE,CAAC;YAC/B,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,EAAE,UAAU,CAAC,WAAW,CAAC,CAAC;YACvD,MAAM,CAAC,IAAI,CACT,KAAK,UAAU,CAAC,MAAM,GAAG,CAAC,YAAY,UAAU,CAAC,MAAM,YAAY,CACpE,CAAC;QACJ,CAAC;QAED,MAAM,WAAW,CAAC,KAAK,CACrB,iGAAiG,MAAM,CAAC,IAAI,CAC1G,IAAI,CACL,wGAAwG,EACzG,UAAU,CACX,CAAC;IACJ,CAAC;IAED,OAAO,WAAW,CAAC,MAAM,CAAC;AAC5B,CAAC,CAAC;AAEF,MAAM,OAAO,gEAAgE;IAA7E;QAGS,SAAI,GACT,kEAAkE,CAAC;IA6CvE,CAAC;IA3CQ,KAAK,CAAC,EAAE,CAAC,WAAwB;QACtC,MAAM,WAAW,CAAC,KAAK,CACrB,2FAA2F,CAC5F,CAAC;QACF,MAAM,WAAW,CAAC,KAAK,CACrB,2DAA2D,CAC5D,CAAC;QACF,MAAM,WAAW,CAAC,KAAK,CACrB,qFAAqF,CACtF,CAAC;QACF,MAAM,WAAW,CAAC,KAAK,CACrB,yGAAyG,CAC1G,CAAC;QACF,MAAM,WAAW,CAAC,KAAK,CACrB,4EAA4E,CAC7E,CAAC;QACF,MAAM,WAAW,CAAC,KAAK,CACrB,6GAA6G,CAC9G,CAAC;QAEF,MAAM,uCAAuC,CAAC,WAAW,CAAC,CAAC;IAC7D,CAAC;IAEM,KAAK,CAAC,IAAI,CAAC,WAAwB;QACxC,MAAM,WAAW,CAAC,KAAK,CACrB,sDAAsD,CACvD,CAAC;QACF,MAAM,WAAW,CAAC,KAAK,CACrB,6DAA6D,CAC9D,CAAC;QACF,MAAM,WAAW,CAAC,KAAK,CACrB,kFAAkF,CACnF,CAAC;QACF,MAAM,WAAW,CAAC,KAAK,CACrB,8DAA8D,CAC/D,CAAC;QACF,MAAM,WAAW,CAAC,KAAK,CACrB,2DAA2D,CAC5D,CAAC;QACF,MAAM,WAAW,CAAC,KAAK,CACrB,oEAAoE,CACrE,CAAC;IACJ,CAAC;CACF"}

package/build/dist/Server/Infrastructure/Postgres/SchemaMigrations/1795900000000-AddSubscriberNotificationClaimedAt.js

@@ -0,0 +1,29 @@
+/*
+ * When a subscriber job claimed the 'incident created', 'postmortem' and
+ * 'episode created' notifications (SubscriberNotificationClaim), for the
+ * sweeper (StatusPageSubscriber:TimeoutStuckNotifications) to time an
+ * interrupted send from. It used updatedAt, which other code writes on a
+ * schedule while an incident or episode is open - the owners' reminders,
+ * state changes, incidents joining an episode - so a send cut off by a
+ * redeploy could stay In progress until the incident went quiet.
+ *
+ * Nullable timestamps with no default: adding them rewrites nothing. A row
+ * claimed before they existed has none, and the sweeper times it from
+ * updatedAt, as before.
+ */
+export class AddSubscriberNotificationClaimedAt1795900000000 {
+    constructor() {
+        this.name = "AddSubscriberNotificationClaimedAt1795900000000";
+    }
+    async up(queryRunner) {
+        await queryRunner.query(`ALTER TABLE "IncidentEpisode" ADD "subscriberNotificationClaimedAtOnEpisodeCreated" TIMESTAMP WITH TIME ZONE`);
+        await queryRunner.query(`ALTER TABLE "Incident" ADD "subscriberNotificationClaimedAtOnIncidentCreated" TIMESTAMP WITH TIME ZONE`);
+        await queryRunner.query(`ALTER TABLE "Incident" ADD "subscriberNotificationClaimedAtOnPostmortemPublished" TIMESTAMP WITH TIME ZONE`);
+    }
+    async down(queryRunner) {
+        await queryRunner.query(`ALTER TABLE "Incident" DROP COLUMN "subscriberNotificationClaimedAtOnPostmortemPublished"`);
+        await queryRunner.query(`ALTER TABLE "Incident" DROP COLUMN "subscriberNotificationClaimedAtOnIncidentCreated"`);
+        await queryRunner.query(`ALTER TABLE "IncidentEpisode" DROP COLUMN "subscriberNotificationClaimedAtOnEpisodeCreated"`);
+    }
+}
+//# sourceMappingURL=1795900000000-AddSubscriberNotificationClaimedAt.js.map

package/build/dist/Server/Infrastructure/Postgres/SchemaMigrations/1795900000000-AddSubscriberNotificationClaimedAt.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"1795900000000-AddSubscriberNotificationClaimedAt.js","sourceRoot":"","sources":["../../../../../../Server/Infrastructure/Postgres/SchemaMigrations/1795900000000-AddSubscriberNotificationClaimedAt.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;;;GAYG;AACH,MAAM,OAAO,+CAA+C;IAA5D;QAGS,SAAI,GAAW,iDAAiD,CAAC;IAyB1E,CAAC;IAvBQ,KAAK,CAAC,EAAE,CAAC,WAAwB;QACtC,MAAM,WAAW,CAAC,KAAK,CACrB,8GAA8G,CAC/G,CAAC;QACF,MAAM,WAAW,CAAC,KAAK,CACrB,wGAAwG,CACzG,CAAC;QACF,MAAM,WAAW,CAAC,KAAK,CACrB,4GAA4G,CAC7G,CAAC;IACJ,CAAC;IAEM,KAAK,CAAC,IAAI,CAAC,WAAwB;QACxC,MAAM,WAAW,CAAC,KAAK,CACrB,2FAA2F,CAC5F,CAAC;QACF,MAAM,WAAW,CAAC,KAAK,CACrB,uFAAuF,CACxF,CAAC;QACF,MAAM,WAAW,CAAC,KAAK,CACrB,6FAA6F,CAC9F,CAAC;IACJ,CAAC;CACF"}