@oneuptime/common 14.0.6 → 14.0.8

package/build/dist/Types/StatusPage/IncidentSubscriberAudience.js

@@ -0,0 +1,183 @@
+/*
+ * Who an incident's status page notifications reach, shown before anything is
+ * sent: on the last step of declaring an incident, and above a public note
+ * while it is being written. "Will notify: Site 03 (up to 41 email), Site 07
+ * (up to 18 email)".
+ *
+ * POST /incident/subscriber-audience (IncidentAPI) answers it, from the same
+ * helper the subscriber jobs send through (IncidentStatusPageScope), so the
+ * preview and the send cannot disagree about which pages an incident reaches.
+ * It takes either an incident that is being declared - the monitors and the
+ * status pages picked on the form - or one that exists.
+ *
+ * The counts are "up to": they count the confirmed subscribers of each page
+ * who have not unsubscribed, per channel. A subscriber who picked only some
+ * of a page's resources, or only some event types, is filtered out at send
+ * time; and for an incident limited to specific pages an email address or
+ * phone number on two of them gets one message, not two. Addresses themselves
+ * never leave the server - only counts do.
+ *
+ * Everything here is shared by the server, which builds the answer, and the
+ * dashboard, which reads it, so the two cannot drift apart.
+ */
+// Why a status page that lists the incident's monitors is not notified.
+export var IncidentSubscriberAudienceExclusionReason;
+(function (IncidentSubscriberAudienceExclusionReason) {
+    // The incident is limited to other status pages.
+    IncidentSubscriberAudienceExclusionReason["OutsideIncidentScope"] = "OutsideIncidentScope";
+    // The page only shows incidents limited to it, and this one is not.
+    IncidentSubscriberAudienceExclusionReason["OnlyShowsScopedIncidents"] = "OnlyShowsScopedIncidents";
+    // The page does not show incidents at all (Show Incidents is off).
+    IncidentSubscriberAudienceExclusionReason["HidesIncidents"] = "HidesIncidents";
+    /*
+     * Asked for a Retry of the incident's 'created' notification only: the
+     * page was already sent it in full (Incident.statusPagesNotifiedOnCreation),
+     * and Retry resumes after it.
+     */
+    IncidentSubscriberAudienceExclusionReason["AlreadyNotified"] = "AlreadyNotified";
+})(IncidentSubscriberAudienceExclusionReason || (IncidentSubscriberAudienceExclusionReason = {}));
+// The order channels are listed in, and what each is called on screen.
+export const INCIDENT_SUBSCRIBER_AUDIENCE_CHANNELS = [
+    { channel: "email", label: "email" },
+    { channel: "sms", label: "SMS" },
+    { channel: "slack", label: "Slack" },
+    { channel: "microsoftTeams", label: "Microsoft Teams" },
+    { channel: "webhook", label: "webhook" },
+];
+class IncidentSubscriberAudience {
+    static getEmptyCounts() {
+        return {
+            email: 0,
+            sms: 0,
+            slack: 0,
+            microsoftTeams: 0,
+            webhook: 0,
+        };
+    }
+    static getTotal(counts) {
+        return INCIDENT_SUBSCRIBER_AUDIENCE_CHANNELS.reduce((total, entry) => {
+            return total + (counts[entry.channel] || 0);
+        }, 0);
+    }
+    /*
+     * The channels of one page that reach anyone, in display order, with their
+     * counts: [{channel: "email", label: "email", count: 41}, ...].
+     */
+    static getNonEmptyChannels(counts) {
+        return INCIDENT_SUBSCRIBER_AUDIENCE_CHANNELS.map((entry) => {
+            return {
+                channel: entry.channel,
+                label: entry.label,
+                count: counts[entry.channel] || 0,
+            };
+        }).filter((entry) => {
+            return entry.count > 0;
+        });
+    }
+    // Whether anyone at all will be sent anything.
+    static reachesAnyone(audience) {
+        if (audience.isHiddenFromStatusPages || !audience.hasMonitors) {
+            return false;
+        }
+        return (audience.hiddenStatusPageCount > 0 ||
+            audience.statusPages.some((statusPage) => {
+                return this.getTotal(statusPage.subscriberCounts) > 0;
+            }));
+    }
+    /*
+     * The server's answer as the dashboard receives it. Read defensively: the
+     * summary is advisory, and a field that is missing or of the wrong type
+     * must read as "nothing" rather than break the form it sits on.
+     */
+    static fromJSON(json) {
+        const toArray = (value) => {
+            return Array.isArray(value)
+                ? value.filter((item) => {
+                    return Boolean(item) && typeof item === "object";
+                })
+                : [];
+        };
+        const toCount = (value) => {
+            const count = Number(value);
+            return Number.isFinite(count) && count > 0 ? Math.floor(count) : 0;
+        };
+        const toNamed = (item) => {
+            return {
+                statusPageId: String(item["statusPageId"] || ""),
+                name: String(item["name"] || ""),
+            };
+        };
+        const reasons = Object.values(IncidentSubscriberAudienceExclusionReason);
+        return {
+            hasMonitors: json["hasMonitors"] === true,
+            isScoped: json["isScoped"] === true,
+            isHiddenFromStatusPages: json["isHiddenFromStatusPages"] === true,
+            statusPages: toArray(json["statusPages"]).map((item) => {
+                return Object.assign(Object.assign({}, toNamed(item)), { subscriberCounts: this.countsFromJSON(item["subscriberCounts"]) });
+            }),
+            hiddenStatusPageCount: toCount(json["hiddenStatusPageCount"]),
+            excludedStatusPages: toArray(json["excludedStatusPages"])
+                .filter((item) => {
+                return reasons.includes(String(item["reason"]));
+            })
+                .map((item) => {
+                return Object.assign(Object.assign({}, toNamed(item)), { reason: item["reason"] });
+            }),
+            selectedStatusPagesNotListingMonitors: toArray(json["selectedStatusPagesNotListingMonitors"]).map(toNamed),
+        };
+    }
+    /*
+     * One page's counts as they arrive, each a whole number of at least 0: a
+     * count that is missing or not a number reads as 0.
+     */
+    static countsFromJSON(value) {
+        const counts = value && typeof value === "object" && !Array.isArray(value)
+            ? value
+            : {};
+        const toCount = (count) => {
+            const number = Number(count);
+            return Number.isFinite(number) && number > 0 ? Math.floor(number) : 0;
+        };
+        return {
+            email: toCount(counts["email"]),
+            sms: toCount(counts["sms"]),
+            slack: toCount(counts["slack"]),
+            microsoftTeams: toCount(counts["microsoftTeams"]),
+            webhook: toCount(counts["webhook"]),
+        };
+    }
+    static toJSON(audience) {
+        return {
+            hasMonitors: audience.hasMonitors,
+            isScoped: audience.isScoped,
+            isHiddenFromStatusPages: audience.isHiddenFromStatusPages,
+            statusPages: audience.statusPages.map((statusPage) => {
+                return {
+                    statusPageId: statusPage.statusPageId,
+                    name: statusPage.name,
+                    subscriberCounts: Object.assign({}, statusPage.subscriberCounts),
+                };
+            }),
+            hiddenStatusPageCount: audience.hiddenStatusPageCount,
+            excludedStatusPages: audience.excludedStatusPages.map((statusPage) => {
+                return {
+                    statusPageId: statusPage.statusPageId,
+                    name: statusPage.name,
+                    reason: statusPage.reason,
+                };
+            }),
+            selectedStatusPagesNotListingMonitors: audience.selectedStatusPagesNotListingMonitors.map((statusPage) => {
+                return {
+                    statusPageId: statusPage.statusPageId,
+                    name: statusPage.name,
+                };
+            }),
+        };
+    }
+}
+// The route, under the API's base URL.
+IncidentSubscriberAudience.apiPath = "/incident/subscriber-audience";
+// How many monitors or status pages one request may name.
+IncidentSubscriberAudience.maxIdsPerRequest = 1000;
+export default IncidentSubscriberAudience;
+//# sourceMappingURL=IncidentSubscriberAudience.js.map

package/build/dist/Types/StatusPage/IncidentSubscriberAudience.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"IncidentSubscriberAudience.js","sourceRoot":"","sources":["../../../../Types/StatusPage/IncidentSubscriberAudience.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,wEAAwE;AACxE,MAAM,CAAN,IAAY,yCAaX;AAbD,WAAY,yCAAyC;IACnD,iDAAiD;IACjD,0FAA6C,CAAA;IAC7C,oEAAoE;IACpE,kGAAqD,CAAA;IACrD,mEAAmE;IACnE,8EAAiC,CAAA;IACjC;;;;OAIG;IACH,gFAAmC,CAAA;AACrC,CAAC,EAbW,yCAAyC,KAAzC,yCAAyC,QAapD;AAsED,uEAAuE;AACvE,MAAM,CAAC,MAAM,qCAAqC,GAG7C;IACH,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE;IACpC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE;IAChC,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE;IACpC,EAAE,OAAO,EAAE,gBAAgB,EAAE,KAAK,EAAE,iBAAiB,EAAE;IACvD,EAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE;CACzC,CAAC;AAEF,MAAqB,0BAA0B;IAOtC,MAAM,CAAC,cAAc;QAC1B,OAAO;YACL,KAAK,EAAE,CAAC;YACR,GAAG,EAAE,CAAC;YACN,KAAK,EAAE,CAAC;YACR,cAAc,EAAE,CAAC;YACjB,OAAO,EAAE,CAAC;SACX,CAAC;IACJ,CAAC;IAEM,MAAM,CAAC,QAAQ,CAAC,MAAwC;QAC7D,OAAO,qCAAqC,CAAC,MAAM,CACjD,CACE,KAAa,EACb,KAAqD,EAC7C,EAAE;YACV,OAAO,KAAK,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;QAC9C,CAAC,EACD,CAAC,CACF,CAAC;IACJ,CAAC;IAED;;;OAGG;IACI,MAAM,CAAC,mBAAmB,CAC/B,MAAwC;QAMxC,OAAO,qCAAqC,CAAC,GAAG,CAC9C,CAAC,KAGA,EAAE,EAAE;YACH,OAAO;gBACL,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;aAClC,CAAC;QACJ,CAAC,CACF,CAAC,MAAM,CAAC,CAAC,KAAwB,EAAW,EAAE;YAC7C,OAAO,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC;QACzB,CAAC,CAAC,CAAC;IACL,CAAC;IAED,+CAA+C;IACxC,MAAM,CAAC,aAAa,CACzB,QAA0C;QAE1C,IAAI,QAAQ,CAAC,uBAAuB,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;YAC9D,OAAO,KAAK,CAAC;QACf,CAAC;QAED,OAAO,CACL,QAAQ,CAAC,qBAAqB,GAAG,CAAC;YAClC,QAAQ,CAAC,WAAW,CAAC,IAAI,CACvB,CAAC,UAAgD,EAAW,EAAE;gBAC5D,OAAO,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC;YACxD,CAAC,CACF,CACF,CAAC;IACJ,CAAC;IAED;;;;OAIG;IACI,MAAM,CAAC,QAAQ,CAAC,IAAgB;QACrC,MAAM,OAAO,GAA0C,CACrD,KAAc,EACK,EAAE;YACrB,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;gBACzB,CAAC,CAAE,KAAK,CAAC,MAAM,CAAC,CAAC,IAAa,EAAW,EAAE;oBACvC,OAAO,OAAO,CAAC,IAAI,CAAC,IAAI,OAAO,IAAI,KAAK,QAAQ,CAAC;gBACnD,CAAC,CAAuB;gBAC1B,CAAC,CAAC,EAAE,CAAC;QACT,CAAC,CAAC;QAEF,MAAM,OAAO,GAA+B,CAAC,KAAc,EAAU,EAAE;YACrE,MAAM,KAAK,GAAW,MAAM,CAAC,KAAK,CAAC,CAAC;YACpC,OAAO,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACrE,CAAC,CAAC;QAEF,MAAM,OAAO,GAEoC,CAC/C,IAAgB,EAC2B,EAAE;YAC7C,OAAO;gBACL,YAAY,EAAE,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC;gBAChD,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;aACjC,CAAC;QACJ,CAAC,CAAC;QAEF,MAAM,OAAO,GAAkB,MAAM,CAAC,MAAM,CAC1C,yCAAyC,CAC1C,CAAC;QAEF,OAAO;YACL,WAAW,EAAE,IAAI,CAAC,aAAa,CAAC,KAAK,IAAI;YACzC,QAAQ,EAAE,IAAI,CAAC,UAAU,CAAC,KAAK,IAAI;YACnC,uBAAuB,EAAE,IAAI,CAAC,yBAAyB,CAAC,KAAK,IAAI;YACjE,WAAW,EAAE,OAAO,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,GAAG,CAC3C,CAAC,IAAgB,EAAwC,EAAE;gBACzD,uCACK,OAAO,CAAC,IAAI,CAAC,KAChB,gBAAgB,EAAE,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,IAC/D;YACJ,CAAC,CACF;YACD,qBAAqB,EAAE,OAAO,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;YAC7D,mBAAmB,EAAE,OAAO,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;iBACtD,MAAM,CAAC,CAAC,IAAgB,EAAW,EAAE;gBACpC,OAAO,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;YAClD,CAAC,CAAC;iBACD,GAAG,CACF,CAAC,IAAgB,EAAgD,EAAE;gBACjE,uCACK,OAAO,CAAC,IAAI,CAAC,KAChB,MAAM,EAAE,IAAI,CACV,QAAQ,CACoC,IAC9C;YACJ,CAAC,CACF;YACH,qCAAqC,EAAE,OAAO,CAC5C,IAAI,CAAC,uCAAuC,CAAC,CAC9C,CAAC,GAAG,CAAC,OAAO,CAAC;SACf,CAAC;IACJ,CAAC;IAED;;;OAGG;IACI,MAAM,CAAC,cAAc,CAC1B,KAAc;QAEd,MAAM,MAAM,GACV,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;YACzD,CAAC,CAAE,KAAoB;YACvB,CAAC,CAAC,EAAE,CAAC;QAET,MAAM,OAAO,GAA+B,CAAC,KAAc,EAAU,EAAE;YACrE,MAAM,MAAM,GAAW,MAAM,CAAC,KAAK,CAAC,CAAC;YACrC,OAAO,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACxE,CAAC,CAAC;QAEF,OAAO;YACL,KAAK,EAAE,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YAC/B,GAAG,EAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAC3B,KAAK,EAAE,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YAC/B,cAAc,EAAE,OAAO,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;YACjD,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;SACpC,CAAC;IACJ,CAAC;IAEM,MAAM,CAAC,MAAM,CAAC,QAA0C;QAC7D,OAAO;YACL,WAAW,EAAE,QAAQ,CAAC,WAAW;YACjC,QAAQ,EAAE,QAAQ,CAAC,QAAQ;YAC3B,uBAAuB,EAAE,QAAQ,CAAC,uBAAuB;YACzD,WAAW,EAAE,QAAQ,CAAC,WAAW,CAAC,GAAG,CACnC,CAAC,UAAgD,EAAc,EAAE;gBAC/D,OAAO;oBACL,YAAY,EAAE,UAAU,CAAC,YAAY;oBACrC,IAAI,EAAE,UAAU,CAAC,IAAI;oBACrB,gBAAgB,oBACX,UAAU,CAAC,gBAAgB,CAC/B;iBACF,CAAC;YACJ,CAAC,CACF;YACD,qBAAqB,EAAE,QAAQ,CAAC,qBAAqB;YACrD,mBAAmB,EAAE,QAAQ,CAAC,mBAAmB,CAAC,GAAG,CACnD,CACE,UAAwD,EAC5C,EAAE;gBACd,OAAO;oBACL,YAAY,EAAE,UAAU,CAAC,YAAY;oBACrC,IAAI,EAAE,UAAU,CAAC,IAAI;oBACrB,MAAM,EAAE,UAAU,CAAC,MAAM;iBAC1B,CAAC;YACJ,CAAC,CACF;YACD,qCAAqC,EACnC,QAAQ,CAAC,qCAAqC,CAAC,GAAG,CAChD,CACE,UAAqD,EACzC,EAAE;gBACd,OAAO;oBACL,YAAY,EAAE,UAAU,CAAC,YAAY;oBACrC,IAAI,EAAE,UAAU,CAAC,IAAI;iBACtB,CAAC;YACJ,CAAC,CACF;SACJ,CAAC;IACJ,CAAC;;AAhND,uCAAuC;AAChB,kCAAO,GAAW,+BAA+B,CAAC;AAEzE,0DAA0D;AACnC,2CAAgB,GAAW,IAAI,CAAC;eALpC,0BAA0B"}

package/build/dist/Types/StatusPage/StatusPageSubscriberUnsubscribe.js

@@ -0,0 +1,277 @@
+import URL from "../API/URL";
+/*
+ * The unsubscribe link every status page subscriber notification carries, and
+ * what the status page's unsubscribe page and its API say about one.
+ *
+ * WHY A TOKEN
+ *
+ * The link used to be the subscriber's manage page,
+ * {statusPageUrl}/update-subscription/{subscriberId}. On a private status page
+ * that page, like everything else on the page, needs a signed-in visitor - and
+ * the people a private page emails are often not people who have an account on
+ * it (a site's staff, a mailing list). So an internal audience had no way to
+ * stop the emails. The link now carries a random token that belongs to the one
+ * subscription (StatusPageSubscriber.unsubscribeToken): holding the link is
+ * what lets its recipient unsubscribe, signed in or not, on a public page or a
+ * private one, and nothing about the page itself is shown to them.
+ *
+ * WHY A CONFIRMATION
+ *
+ * Opening the link changes nothing. Mail scanners and link previewers fetch
+ * every link in a message, and a single stray click is not a decision - least
+ * of all for an address a team added on purpose, such as a site's mailing
+ * list, where one reader could otherwise take the whole site off the list. The
+ * page asks, and only its POST unsubscribes.
+ *
+ * THE LINK'S SHAPE
+ *
+ *   {statusPageUrl}/unsubscribe/{subscriberId}-{token}
+ *
+ * The subscriber id and the token travel as ONE path segment on purpose. The
+ * status page registers "unsubscribe" as a route whose next segment is a
+ * bearer credential (Common/Server/Views/Partials/SensitiveUrlToken.ejs), so
+ * the credential is moved out of the address bar before any analytics tag a
+ * status page loads can report it - the same treatment a password reset link
+ * gets. That mechanism strips exactly one segment. The id is kept in the
+ * credential so the server can find the subscription by its primary key and
+ * compare the token in constant time, rather than look the token itself up.
+ *
+ * A credential with no token - just the id - is what an out-of-date link
+ * leads to (see StatusPageSubscriberAPI's old GET route); the page then says
+ * the link has expired instead of offering to unsubscribe.
+ *
+ * Browser-safe: the status page app, the server and the workers all use this
+ * file, so they agree on the link, the credential and the answers.
+ */
+// What the unsubscribe API answers about a link, before and after confirming.
+export var StatusPageSubscriberUnsubscribeState;
+(function (StatusPageSubscriberUnsubscribeState) {
+    // The link is good and the subscription is live: the page asks to confirm.
+    StatusPageSubscriberUnsubscribeState["Subscribed"] = "Subscribed";
+    // The link is good and the subscription is already cancelled.
+    StatusPageSubscriberUnsubscribeState["Unsubscribed"] = "Unsubscribed";
+    /*
+     * Everything else: a wrong token, a subscriber that does not exist or was
+     * deleted, one on another status page, or a malformed link. One answer for
+     * all of them, so the API cannot be used to find out which subscriptions
+     * exist.
+     */
+    StatusPageSubscriberUnsubscribeState["Invalid"] = "Invalid";
+})(StatusPageSubscriberUnsubscribeState || (StatusPageSubscriberUnsubscribeState = {}));
+// Which kind of subscription a link belongs to, so the page can name it.
+export var StatusPageSubscriberUnsubscribeChannel;
+(function (StatusPageSubscriberUnsubscribeChannel) {
+    StatusPageSubscriberUnsubscribeChannel["Email"] = "Email";
+    StatusPageSubscriberUnsubscribeChannel["SMS"] = "SMS";
+    StatusPageSubscriberUnsubscribeChannel["Slack"] = "Slack";
+    StatusPageSubscriberUnsubscribeChannel["MicrosoftTeams"] = "MicrosoftTeams";
+    StatusPageSubscriberUnsubscribeChannel["Webhook"] = "Webhook";
+})(StatusPageSubscriberUnsubscribeChannel || (StatusPageSubscriberUnsubscribeChannel = {}));
+const UUID_PATTERN = "[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}";
+const TOKEN_PATTERN = /^[0-9a-f]{64}$/;
+const CREDENTIAL_PATTERN = new RegExp(`^(${UUID_PATTERN})(?:-([0-9a-fA-F]{64}))?$`);
+/*
+ * An unsubscribe link's credential anywhere in a text: the route segment, the
+ * subscriber id, and the 64 hex characters of its token. No lookahead after
+ * the token, so a token that some template runs straight into more text is
+ * still caught.
+ */
+const LINK_TOKEN_PATTERN = new RegExp(`(/unsubscribe/${UUID_PATTERN})-[0-9a-fA-F]{64}`, "g");
+class StatusPageSubscriberUnsubscribe {
+    static isWellFormedToken(value) {
+        return typeof value === "string" && TOKEN_PATTERN.test(value);
+    }
+    /*
+     * The text with the token of every unsubscribe link in it replaced by
+     * "[redacted]": ".../unsubscribe/{id}-[redacted]".
+     *
+     * For any copy of a message that is kept where people other than its
+     * recipient can read it. The token is the whole of what lets the link's
+     * holder cancel the subscription without signing in, on a private status
+     * page too, so it may only ever leave the server inside the message to the
+     * subscription's own contact. An SMS is the case in point: the SMS log keeps
+     * its text, and project members who may not touch subscribers (Viewer, and
+     * any role with Read SMS Log) can read that log. The id is kept, so the log
+     * still says which subscription the message went to.
+     */
+    static redactCredentials(text) {
+        if (!text || typeof text !== "string") {
+            return text;
+        }
+        return text.replace(LINK_TOKEN_PATTERN, `$1-${StatusPageSubscriberUnsubscribe.REDACTED_TOKEN}`);
+    }
+    /*
+     * The one path segment the link carries: "{subscriberId}-{token}", or just
+     * the id when there is no token.
+     */
+    static buildCredential(data) {
+        const subscriberId = data.subscriberId.toString().toLowerCase();
+        if (!StatusPageSubscriberUnsubscribe.isWellFormedToken(data.unsubscribeToken)) {
+            return subscriberId;
+        }
+        return `${subscriberId}-${data.unsubscribeToken}`;
+    }
+    /*
+     * Read a credential back. Returns null for anything that is not one - a
+     * stale token from another flow that shares the same sessionStorage slot,
+     * a truncated link, a guess - so the page can show its "invalid link"
+     * state without asking the server.
+     */
+    static parseCredential(value) {
+        if (!value || typeof value !== "string") {
+            return null;
+        }
+        const match = value
+            .trim()
+            .match(CREDENTIAL_PATTERN);
+        if (!match || !match[1]) {
+            return null;
+        }
+        return {
+            subscriberId: match[1].toLowerCase(),
+            token: match[2] ? match[2].toLowerCase() : null,
+        };
+    }
+    /*
+     * The link that goes into every subscriber notification. Without a token -
+     * which only a subscription created around the migration could lack - the
+     * link still leads somewhere useful: the page that says the link is out of
+     * date and what to do instead.
+     */
+    static buildLink(data) {
+        return URL.fromString(data.statusPageUrl.toString()).addRoute(`/${StatusPageSubscriberUnsubscribe.PAGE_ROUTE_SEGMENT}/${StatusPageSubscriberUnsubscribe.buildCredential({
+            subscriberId: data.subscriberId,
+            unsubscribeToken: data.unsubscribeToken,
+        })}`);
+    }
+    /*
+     * The link an SMS to this subscriber carries where every other message
+     * carries its unsubscribe link (unsubscribeUrl, from buildLink).
+     *
+     * On a public status page an SMS keeps the subscriber's manage page,
+     * {statusPageUrl}/update-subscription/{subscriberId}, as it always had.
+     * That page works there without signing in, and is 57 characters shorter
+     * than the token link - and an SMS is billed by the 160-character segment,
+     * so the token link would push most default subscriber texts into another
+     * segment, at a cost to every SMS subscriber on every notification, for
+     * nothing the manage page does not already do. Opening either link changes
+     * nothing by itself.
+     *
+     * On a private status page (or when it is not known whether the page is
+     * public) the manage page needs a signed-in visitor, so the SMS carries the
+     * unsubscribe link, the only way its recipient can stop the texts.
+     *
+     * Email, Slack, Microsoft Teams and webhooks carry the unsubscribe link on
+     * every page: length costs nothing there, and its confirmation page is
+     * what keeps mail scanners from unsubscribing anyone.
+     */
+    static buildSmsLink(data) {
+        if (data.isPublicStatusPage === true) {
+            return StatusPageSubscriberUnsubscribe.buildManageSubscriptionLink({
+                statusPageUrl: data.statusPageUrl,
+                subscriberId: data.subscriberId,
+            }).toString();
+        }
+        return data.unsubscribeUrl.toString();
+    }
+    /*
+     * The subscriber's manage page, where a subscriber on a public status page
+     * (or a signed-in one on a private page) chooses which resources and event
+     * types they hear about. It is keyed by the subscriber id alone and is still
+     * what the "manage your subscription" email links to, and what an SMS from
+     * a public status page carries (see buildSmsLink); every other
+     * notification links to the unsubscribe page instead, which offers this one
+     * on public pages.
+     */
+    static buildManageSubscriptionLink(data) {
+        return URL.fromString(data.statusPageUrl.toString()).addRoute(`/update-subscription/${data.subscriberId.toString()}`);
+    }
+    /*
+     * What the unsubscribe page names the subscription by. An email address is
+     * shown in full: it is where the link was sent, and recognising a shared
+     * address such as site03-all@ is the point. A phone number is masked to its
+     * last four digits. Slack and Teams show the workspace name they were
+     * registered with, and a webhook only its host - never a webhook URL, which
+     * is itself a credential.
+     *
+     * The team's own notice about an unsubscribe passes maskPhone: false - the
+     * team can read the number on the dashboard already, and needs it to know
+     * which subscriber left.
+     */
+    static describeContact(subscriber, options) {
+        const text = (value) => {
+            if (value === null || value === undefined) {
+                return "";
+            }
+            return String(value).trim();
+        };
+        const email = text(subscriber.subscriberEmail);
+        if (email) {
+            return {
+                channel: StatusPageSubscriberUnsubscribeChannel.Email,
+                contact: email,
+            };
+        }
+        const phone = text(subscriber.subscriberPhone);
+        if (phone) {
+            return {
+                channel: StatusPageSubscriberUnsubscribeChannel.SMS,
+                contact: (options === null || options === void 0 ? void 0 : options.maskPhone) === false
+                    ? phone
+                    : StatusPageSubscriberUnsubscribe.maskPhone(phone),
+            };
+        }
+        if (text(subscriber.slackIncomingWebhookUrl) ||
+            text(subscriber.slackWorkspaceName)) {
+            return {
+                channel: StatusPageSubscriberUnsubscribeChannel.Slack,
+                contact: text(subscriber.slackWorkspaceName),
+            };
+        }
+        if (text(subscriber.microsoftTeamsIncomingWebhookUrl) ||
+            text(subscriber.microsoftTeamsWorkspaceName)) {
+            return {
+                channel: StatusPageSubscriberUnsubscribeChannel.MicrosoftTeams,
+                contact: text(subscriber.microsoftTeamsWorkspaceName),
+            };
+        }
+        const webhook = text(subscriber.subscriberWebhook);
+        if (webhook) {
+            return {
+                channel: StatusPageSubscriberUnsubscribeChannel.Webhook,
+                contact: StatusPageSubscriberUnsubscribe.hostOf(webhook),
+            };
+        }
+        return null;
+    }
+    // Every digit but the last four replaced, so the number is recognisable only to its owner.
+    static maskPhone(phone) {
+        const digitCount = (phone.match(/\d/g) || []).length;
+        let digitsSeen = 0;
+        return phone.replace(/\d/g, (digit) => {
+            digitsSeen++;
+            return digitsSeen > digitCount - 4 ? digit : "•";
+        });
+    }
+    static hostOf(url) {
+        const match = url.match(/^[a-zA-Z][a-zA-Z0-9+.-]*:\/\/(?:[^@/?#]*@)?([^/?#:]+)/);
+        return match && match[1] ? match[1].toLowerCase() : "";
+    }
+}
+/*
+ * The status page route segment the link opens, on both a custom domain
+ * (/unsubscribe/...) and the page's own address (/status-page/{id}/unsubscribe/...).
+ * SensitiveUrlToken.ejs and Common/UI/Utils/SensitiveUrlToken.ts list it
+ * as a token-bearing route.
+ */
+StatusPageSubscriberUnsubscribe.PAGE_ROUTE_SEGMENT = "unsubscribe";
+/*
+ * 32 random bytes as lowercase hex (StatusPageSubscriberUnsubscribeToken
+ * generates them; the migration backfills the same shape from two random
+ * UUIDs with their dashes removed).
+ */
+StatusPageSubscriberUnsubscribe.TOKEN_LENGTH = 64;
+// What redactCredentials puts where a token was.
+StatusPageSubscriberUnsubscribe.REDACTED_TOKEN = "[redacted]";
+export default StatusPageSubscriberUnsubscribe;
+//# sourceMappingURL=StatusPageSubscriberUnsubscribe.js.map

package/build/dist/Types/StatusPage/StatusPageSubscriberUnsubscribe.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"StatusPageSubscriberUnsubscribe.js","sourceRoot":"","sources":["../../../../Types/StatusPage/StatusPageSubscriberUnsubscribe.ts"],"names":[],"mappings":"AAAA,OAAO,GAAG,MAAM,YAAY,CAAC;AAE7B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2CG;AAEH,8EAA8E;AAC9E,MAAM,CAAN,IAAY,oCAYX;AAZD,WAAY,oCAAoC;IAC9C,2EAA2E;IAC3E,iEAAyB,CAAA;IACzB,8DAA8D;IAC9D,qEAA6B,CAAA;IAC7B;;;;;OAKG;IACH,2DAAmB,CAAA;AACrB,CAAC,EAZW,oCAAoC,KAApC,oCAAoC,QAY/C;AAED,yEAAyE;AACzE,MAAM,CAAN,IAAY,sCAMX;AAND,WAAY,sCAAsC;IAChD,yDAAe,CAAA;IACf,qDAAW,CAAA;IACX,yDAAe,CAAA;IACf,2EAAiC,CAAA;IACjC,6DAAmB,CAAA;AACrB,CAAC,EANW,sCAAsC,KAAtC,sCAAsC,QAMjD;AAmDD,MAAM,YAAY,GAChB,6EAA6E,CAAC;AAEhF,MAAM,aAAa,GAAW,gBAAgB,CAAC;AAE/C,MAAM,kBAAkB,GAAW,IAAI,MAAM,CAC3C,KAAK,YAAY,2BAA2B,CAC7C,CAAC;AAEF;;;;;GAKG;AACH,MAAM,kBAAkB,GAAW,IAAI,MAAM,CAC3C,iBAAiB,YAAY,mBAAmB,EAChD,GAAG,CACJ,CAAC;AAEF,MAAqB,+BAA+B;IAmB3C,MAAM,CAAC,iBAAiB,CAAC,KAAc;QAC5C,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAChE,CAAC;IAED;;;;;;;;;;;;OAYG;IACI,MAAM,CAAC,iBAAiB,CAAC,IAAY;QAC1C,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;YACtC,OAAO,IAAI,CAAC;QACd,CAAC;QAED,OAAO,IAAI,CAAC,OAAO,CACjB,kBAAkB,EAClB,MAAM,+BAA+B,CAAC,cAAc,EAAE,CACvD,CAAC;IACJ,CAAC;IAED;;;OAGG;IACI,MAAM,CAAC,eAAe,CAAC,IAG7B;QACC,MAAM,YAAY,GAAW,IAAI,CAAC,YAAY,CAAC,QAAQ,EAAE,CAAC,WAAW,EAAE,CAAC;QAExE,IACE,CAAC,+BAA+B,CAAC,iBAAiB,CAAC,IAAI,CAAC,gBAAgB,CAAC,EACzE,CAAC;YACD,OAAO,YAAY,CAAC;QACtB,CAAC;QAED,OAAO,GAAG,YAAY,IAAI,IAAI,CAAC,gBAAgB,EAAE,CAAC;IACpD,CAAC;IAED;;;;;OAKG;IACI,MAAM,CAAC,eAAe,CAC3B,KAAgC;QAEhC,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YACxC,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,KAAK,GAA4B,KAAK;aACzC,IAAI,EAAE;aACN,KAAK,CAAC,kBAAkB,CAAC,CAAC;QAE7B,IAAI,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;YACxB,OAAO,IAAI,CAAC;QACd,CAAC;QAED,OAAO;YACL,YAAY,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE;YACpC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,IAAI;SAChD,CAAC;IACJ,CAAC;IAED;;;;;OAKG;IACI,MAAM,CAAC,SAAS,CAAC,IAIvB;QACC,OAAO,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,aAAa,CAAC,QAAQ,EAAE,CAAC,CAAC,QAAQ,CAC3D,IAAI,+BAA+B,CAAC,kBAAkB,IAAI,+BAA+B,CAAC,eAAe,CACvG;YACE,YAAY,EAAE,IAAI,CAAC,YAAY;YAC/B,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;SACxC,CACF,EAAE,CACJ,CAAC;IACJ,CAAC;IAED;;;;;;;;;;;;;;;;;;;;OAoBG;IACI,MAAM,CAAC,YAAY,CAAC,IAK1B;QACC,IAAI,IAAI,CAAC,kBAAkB,KAAK,IAAI,EAAE,CAAC;YACrC,OAAO,+BAA+B,CAAC,2BAA2B,CAAC;gBACjE,aAAa,EAAE,IAAI,CAAC,aAAa;gBACjC,YAAY,EAAE,IAAI,CAAC,YAAY;aAChC,CAAC,CAAC,QAAQ,EAAE,CAAC;QAChB,CAAC;QAED,OAAO,IAAI,CAAC,cAAc,CAAC,QAAQ,EAAE,CAAC;IACxC,CAAC;IAED;;;;;;;;OAQG;IACI,MAAM,CAAC,2BAA2B,CAAC,IAGzC;QACC,OAAO,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,aAAa,CAAC,QAAQ,EAAE,CAAC,CAAC,QAAQ,CAC3D,wBAAwB,IAAI,CAAC,YAAY,CAAC,QAAQ,EAAE,EAAE,CACvD,CAAC;IACJ,CAAC;IAED;;;;;;;;;;;OAWG;IACI,MAAM,CAAC,eAAe,CAC3B,UAA6C,EAC7C,OAAyD;QAEzD,MAAM,IAAI,GAA+B,CAAC,KAAc,EAAU,EAAE;YAClE,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;gBAC1C,OAAO,EAAE,CAAC;YACZ,CAAC;YAED,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC;QAC9B,CAAC,CAAC;QAEF,MAAM,KAAK,GAAW,IAAI,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC;QAEvD,IAAI,KAAK,EAAE,CAAC;YACV,OAAO;gBACL,OAAO,EAAE,sCAAsC,CAAC,KAAK;gBACrD,OAAO,EAAE,KAAK;aACf,CAAC;QACJ,CAAC;QAED,MAAM,KAAK,GAAW,IAAI,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC;QAEvD,IAAI,KAAK,EAAE,CAAC;YACV,OAAO;gBACL,OAAO,EAAE,sCAAsC,CAAC,GAAG;gBACnD,OAAO,EACL,CAAA,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,SAAS,MAAK,KAAK;oBAC1B,CAAC,CAAC,KAAK;oBACP,CAAC,CAAC,+BAA+B,CAAC,SAAS,CAAC,KAAK,CAAC;aACvD,CAAC;QACJ,CAAC;QAED,IACE,IAAI,CAAC,UAAU,CAAC,uBAAuB,CAAC;YACxC,IAAI,CAAC,UAAU,CAAC,kBAAkB,CAAC,EACnC,CAAC;YACD,OAAO;gBACL,OAAO,EAAE,sCAAsC,CAAC,KAAK;gBACrD,OAAO,EAAE,IAAI,CAAC,UAAU,CAAC,kBAAkB,CAAC;aAC7C,CAAC;QACJ,CAAC;QAED,IACE,IAAI,CAAC,UAAU,CAAC,gCAAgC,CAAC;YACjD,IAAI,CAAC,UAAU,CAAC,2BAA2B,CAAC,EAC5C,CAAC;YACD,OAAO;gBACL,OAAO,EAAE,sCAAsC,CAAC,cAAc;gBAC9D,OAAO,EAAE,IAAI,CAAC,UAAU,CAAC,2BAA2B,CAAC;aACtD,CAAC;QACJ,CAAC;QAED,MAAM,OAAO,GAAW,IAAI,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAC;QAE3D,IAAI,OAAO,EAAE,CAAC;YACZ,OAAO;gBACL,OAAO,EAAE,sCAAsC,CAAC,OAAO;gBACvD,OAAO,EAAE,+BAA+B,CAAC,MAAM,CAAC,OAAO,CAAC;aACzD,CAAC;QACJ,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAED,2FAA2F;IACpF,MAAM,CAAC,SAAS,CAAC,KAAa;QACnC,MAAM,UAAU,GAAW,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC;QAC7D,IAAI,UAAU,GAAW,CAAC,CAAC;QAE3B,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,KAAa,EAAU,EAAE;YACpD,UAAU,EAAE,CAAC;YACb,OAAO,UAAU,GAAG,UAAU,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC;QACnD,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,MAAM,CAAC,MAAM,CAAC,GAAW;QAC/B,MAAM,KAAK,GAA4B,GAAG,CAAC,KAAK,CAC9C,uDAAuD,CACxD,CAAC;QAEF,OAAO,KAAK,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACzD,CAAC;;AAtQD;;;;;GAKG;AACoB,kDAAkB,GAAW,aAAa,CAAC;AAElE;;;;GAIG;AACoB,4CAAY,GAAW,EAAE,CAAC;AAEjD,iDAAiD;AAC1B,8CAAc,GAAW,YAAY,CAAC;eAjB1C,+BAA+B"}

package/build/dist/Types/StatusPage/SubscriberNotificationInterruption.js

@@ -0,0 +1,27 @@
+/*
+ * What a subscriber notification says when its send was interrupted: its
+ * worker crashed, was redeployed or lost its database connection part-way,
+ * so nothing was left to settle it, and the sweeper
+ * (StatusPageSubscriber:TimeoutStuckNotifications) marked it Failed rather
+ * than leave it "being sent" forever.
+ *
+ * Shared by the sweeper, which writes it, and anything that wants to tell an
+ * interruption from an ordinary failure.
+ */
+class SubscriberNotificationInterruption {
+    static isInterruptedMessage(message) {
+        return Boolean(message &&
+            message.startsWith(SubscriberNotificationInterruption.messagePrefix));
+    }
+}
+SubscriberNotificationInterruption.messagePrefix = "Interrupted:";
+/*
+ * For the incident created notification, which records the status pages
+ * it has told as it goes (Incident.statusPagesNotifiedOnCreation), so
+ * Retry picks up after them.
+ */
+SubscriberNotificationInterruption.resumesMessage = `${SubscriberNotificationInterruption.messagePrefix} this notification stopped being sent before it finished, because the server sending it restarted or stopped responding. The status pages it finished are recorded, so Retry sends it only to the status pages that were not sent it in full.`;
+// For every other notification, which Retry sends to every status page.
+SubscriberNotificationInterruption.resendsMessage = `${SubscriberNotificationInterruption.messagePrefix} this notification stopped being sent before it finished, because the server sending it restarted or stopped responding, so some subscribers may not have been sent it. Retry sends it again to every status page, including the subscribers who already got it.`;
+export default SubscriberNotificationInterruption;
+//# sourceMappingURL=SubscriberNotificationInterruption.js.map

package/build/dist/Types/StatusPage/SubscriberNotificationInterruption.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"SubscriberNotificationInterruption.js","sourceRoot":"","sources":["../../../../Types/StatusPage/SubscriberNotificationInterruption.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,MAAqB,kCAAkC;IAa9C,MAAM,CAAC,oBAAoB,CAChC,OAAkC;QAElC,OAAO,OAAO,CACZ,OAAO;YACL,OAAO,CAAC,UAAU,CAAC,kCAAkC,CAAC,aAAa,CAAC,CACvE,CAAC;IACJ,CAAC;;AAnBsB,gDAAa,GAAW,cAAc,CAAC;AAE9D;;;;GAIG;AACoB,iDAAc,GAAW,GAAG,kCAAkC,CAAC,aAAa,+OAA+O,CAAC;AAEnV,wEAAwE;AACjD,iDAAc,GAAW,GAAG,kCAAkC,CAAC,aAAa,kQAAkQ,CAAC;eAXnV,kCAAkC"}