@oneuptime/cli 14.0.84 → 14.0.85

package/build/dist/Index.js

@@ -101890,10 +101890,6 @@ var Permission = /* @__PURE__ */ ((Permission3) => {
   Permission3["EditRunbookSecret"] = "EditRunbookSecret";
   Permission3["DeleteRunbookSecret"] = "DeleteRunbookSecret";
   Permission3["ReadRunbookSecret"] = "ReadRunbookSecret";
-  Permission3["CreateRunbookCredential"] = "CreateRunbookCredential";
-  Permission3["EditRunbookCredential"] = "EditRunbookCredential";
-  Permission3["DeleteRunbookCredential"] = "DeleteRunbookCredential";
-  Permission3["ReadRunbookCredential"] = "ReadRunbookCredential";
   Permission3["CreateStatusPageGroup"] = "CreateStatusPageGroup";
   Permission3["DeleteStatusPageGroup"] = "DeleteStatusPageGroup";
   Permission3["EditStatusPageGroup"] = "EditStatusPageGroup";
@@ -101951,6 +101947,10 @@ var Permission = /* @__PURE__ */ ((Permission3) => {
   Permission3["EditIncidentState"] = "EditIncidentState";
   Permission3["ReadIncidentState"] = "ReadIncidentState";
   Permission3["DeleteIncidentState"] = "DeleteIncidentState";
+  Permission3["CreateIncidentPostmortemStatus"] = "CreateIncidentPostmortemStatus";
+  Permission3["EditIncidentPostmortemStatus"] = "EditIncidentPostmortemStatus";
+  Permission3["ReadIncidentPostmortemStatus"] = "ReadIncidentPostmortemStatus";
+  Permission3["DeleteIncidentPostmortemStatus"] = "DeleteIncidentPostmortemStatus";
   Permission3["CreateAlertState"] = "CreateAlertState";
   Permission3["EditAlertState"] = "EditAlertState";
   Permission3["ReadAlertState"] = "ReadAlertState";
@@ -103752,6 +103752,42 @@ var PermissionHelper = class _PermissionHelper {
         isRolePermission: false,
         group: "Incident" /* Incident */
       },
+      {
+        permission: "CreateIncidentPostmortemStatus" /* CreateIncidentPostmortemStatus */,
+        title: "Create Postmortem Status",
+        description: "This permission can create postmortem statuses of this project.",
+        isAssignableToTenant: true,
+        isAccessControlPermission: false,
+        isRolePermission: false,
+        group: "Incident" /* Incident */
+      },
+      {
+        permission: "DeleteIncidentPostmortemStatus" /* DeleteIncidentPostmortemStatus */,
+        title: "Delete Postmortem Status",
+        description: "This permission can delete postmortem statuses of this project.",
+        isAssignableToTenant: true,
+        isAccessControlPermission: false,
+        isRolePermission: false,
+        group: "Incident" /* Incident */
+      },
+      {
+        permission: "EditIncidentPostmortemStatus" /* EditIncidentPostmortemStatus */,
+        title: "Edit Postmortem Status",
+        description: "This permission can edit postmortem statuses of this project.",
+        isAssignableToTenant: true,
+        isAccessControlPermission: false,
+        isRolePermission: false,
+        group: "Incident" /* Incident */
+      },
+      {
+        permission: "ReadIncidentPostmortemStatus" /* ReadIncidentPostmortemStatus */,
+        title: "Read Postmortem Status",
+        description: "This permission can read postmortem statuses of this project.",
+        isAssignableToTenant: true,
+        isAccessControlPermission: false,
+        isRolePermission: false,
+        group: "Incident" /* Incident */
+      },
       {
         permission: "CreateAlertState" /* CreateAlertState */,
         title: "Create Alert State",
@@ -105493,42 +105529,6 @@ var PermissionHelper = class _PermissionHelper {
         isRolePermission: false,
         group: "Runbook" /* Runbook */
       },
-      {
-        permission: "CreateRunbookCredential" /* CreateRunbookCredential */,
-        title: "Create Runbook Credential",
-        description: "This permission can create runbook credentials (SSH keys, Kubernetes service account tokens).",
-        isAssignableToTenant: true,
-        isAccessControlPermission: false,
-        isRolePermission: false,
-        group: "Runbook" /* Runbook */
-      },
-      {
-        permission: "DeleteRunbookCredential" /* DeleteRunbookCredential */,
-        title: "Delete Runbook Credential",
-        description: "This permission can delete runbook credentials.",
-        isAssignableToTenant: true,
-        isAccessControlPermission: false,
-        isRolePermission: false,
-        group: "Runbook" /* Runbook */
-      },
-      {
-        permission: "EditRunbookCredential" /* EditRunbookCredential */,
-        title: "Edit Runbook Credential",
-        description: "This permission can edit runbook credentials.",
-        isAssignableToTenant: true,
-        isAccessControlPermission: false,
-        isRolePermission: false,
-        group: "Runbook" /* Runbook */
-      },
-      {
-        permission: "ReadRunbookCredential" /* ReadRunbookCredential */,
-        title: "Read Runbook Credential",
-        description: "This permission can read runbook credentials. Secret values are never returned by the API.",
-        isAssignableToTenant: true,
-        isAccessControlPermission: false,
-        isRolePermission: false,
-        group: "Runbook" /* Runbook */
-      },
       {
         permission: "ReadAuditLog" /* ReadAuditLog */,
         title: "Read Audit Log",
@@ -146806,6 +146806,31 @@ var TableBillingAccessControl_default = /* @__PURE__ */ __name((accessControl) =
   };
 }, "default");
 
+// ../Common/Types/Database/EnableAuditLog.ts
+var EnableAuditLog_default = /* @__PURE__ */ __name((enableAuditLogOn = {
+  create: true,
+  update: true,
+  delete: true
+}) => {
+  return (ctr) => {
+    const config = {
+      create: enableAuditLogOn.create ?? true,
+      update: enableAuditLogOn.update ?? true,
+      delete: enableAuditLogOn.delete ?? true
+    };
+    if (enableAuditLogOn.rootResource) {
+      config.rootResource = { ...enableAuditLogOn.rootResource };
+    }
+    if (enableAuditLogOn.ignoreColumns) {
+      config.ignoreColumns = [...enableAuditLogOn.ignoreColumns];
+    }
+    if (enableAuditLogOn.resourceNameRelation) {
+      config.resourceNameRelation = enableAuditLogOn.resourceNameRelation;
+    }
+    ctr.prototype.enableAuditLogOn = config;
+  };
+}, "default");
+
 // ../Common/Types/Database/EnableMCP.ts
 var EnableMCP_default = /* @__PURE__ */ __name(() => {
   return (ctr) => {
@@ -146869,6 +146894,10 @@ var AlertSeverity = class extends DatabaseBaseModel {
     this.deletedByUserId = void 0;
     this.color = void 0;
     this.order = void 0;
+    this.isArchived = void 0;
+    this.archivedAt = void 0;
+    this.archivedByUser = void 0;
+    this.archivedByUserId = void 0;
   }
 };
 __name(AlertSeverity, "AlertSeverity");
@@ -147307,18 +147336,8 @@ __decorateClass([
     type: ColumnType_default.SmallNumber
   })
 ], AlertSeverity.prototype, "order", 2);
-AlertSeverity = __decorateClass([
-  TableBillingAccessControl_default({
-    create: "Growth" /* Growth */,
-    read: "Free" /* Free */,
-    update: "Growth" /* Growth */,
-    delete: "Growth" /* Growth */
-  }),
-  EnableDocumentation_default(),
-  EnableMCP_default(),
-  TenantColumn_default("projectId"),
-  ListOrderColumn_default({ column: "order", scopeColumns: ["projectId"] }),
-  TableAccessControl_default({
+__decorateClass([
+  ColumnAccessControl_default({
     create: [
       Permission_default.ProjectOwner,
       Permission_default.ProjectAdmin,
@@ -147338,12 +147357,6 @@ AlertSeverity = __decorateClass([
       Permission_default.SecurityViewer,
       Permission_default.ReadAlertSeverity
     ],
-    delete: [
-      Permission_default.ProjectOwner,
-      Permission_default.ProjectAdmin,
-      Permission_default.AlertAdmin,
-      Permission_default.DeleteAlertSeverity
-    ],
     update: [
       Permission_default.ProjectOwner,
       Permission_default.ProjectAdmin,
@@ -147351,204 +147364,365 @@ AlertSeverity = __decorateClass([
       Permission_default.EditAlertSeverity
     ]
   }),
-  EnableWorkflow_default({
-    create: true,
-    delete: true,
-    update: true,
-    read: true
-  }),
-  CrudApiEndpoint_default(new Route("/alert-severity")),
-  SlugifyColumn_default("name", "slug"),
-  TableMetadata_default({
-    tableName: "AlertSeverity",
-    singularName: "Alert Severity",
-    pluralName: "Alert Severities",
-    icon: IconProp_default.Alert,
-    tableDescription: "Manage alert severity for your project (Created, Acknowledged for example). Add / edit or remove severities."
-  }),
-  Entity({
-    name: "AlertSeverity"
+  TableColumn_default({
+    isDefaultValueColumn: true,
+    required: true,
+    type: TableColumnType_default.Boolean,
+    canReadOnRelationQuery: true,
+    title: "Is Archived",
+    description: "Archived severities stay on the alerts and episodes that have them, but can't be picked again. A project keeps at least one severity that is not archived.",
+    defaultValue: false,
+    example: false
   }),
-  Index(["projectId", "order"])
-], AlertSeverity);
-
-// ../Common/Models/DatabaseModels/IncidentSeverity.ts
-var IncidentSeverity = class extends DatabaseBaseModel {
-  constructor() {
-    super(...arguments);
-    this.project = void 0;
-    this.projectId = void 0;
-    this.name = void 0;
-    this.slug = void 0;
-    this.description = void 0;
-    this.createdByUser = void 0;
-    this.createdByUserId = void 0;
-    this.deletedByUser = void 0;
-    this.deletedByUserId = void 0;
-    this.color = void 0;
-    this.order = void 0;
-  }
-};
-__name(IncidentSeverity, "IncidentSeverity");
+  Column({
+    type: ColumnType_default.Boolean,
+    nullable: false,
+    default: false
+  })
+], AlertSeverity.prototype, "isArchived", 2);
 __decorateClass([
   ColumnAccessControl_default({
-    create: [
+    create: [],
+    read: [
       Permission_default.ProjectOwner,
       Permission_default.ProjectAdmin,
-      Permission_default.IncidentAdmin,
-      Permission_default.CreateIncidentSeverity
+      Permission_default.ProjectMember,
+      Permission_default.Viewer,
+      Permission_default.AlertAdmin,
+      Permission_default.AlertMember,
+      Permission_default.AlertViewer,
+      Permission_default.SecurityAdmin,
+      Permission_default.SecurityMember,
+      Permission_default.SecurityViewer,
+      Permission_default.ReadAlertSeverity
     ],
+    update: []
+  }),
+  TableColumn_default({
+    required: false,
+    type: TableColumnType_default.Date,
+    title: "Archived At",
+    description: "When this alert severity was archived. Empty while it is not archived."
+  }),
+  Column({
+    type: ColumnType_default.Date,
+    nullable: true
+  })
+], AlertSeverity.prototype, "archivedAt", 2);
+__decorateClass([
+  ColumnAccessControl_default({
+    create: [],
     read: [
       Permission_default.ProjectOwner,
       Permission_default.ProjectAdmin,
       Permission_default.ProjectMember,
       Permission_default.Viewer,
-      Permission_default.IncidentAdmin,
-      Permission_default.IncidentMember,
-      Permission_default.IncidentViewer,
+      Permission_default.AlertAdmin,
+      Permission_default.AlertMember,
+      Permission_default.AlertViewer,
       Permission_default.SecurityAdmin,
       Permission_default.SecurityMember,
       Permission_default.SecurityViewer,
-      Permission_default.ReadIncidentSeverity
+      Permission_default.ReadAlertSeverity
     ],
     update: []
   }),
   TableColumn_default({
-    manyToOneRelationColumn: "projectId",
+    manyToOneRelationColumn: "archivedByUserId",
     type: TableColumnType_default.Entity,
-    // Lazy: Project imports IncidentSeverity back (see modelTypeThunk).
-    modelTypeThunk: /* @__PURE__ */ __name(() => {
-      return Project;
-    }, "modelTypeThunk"),
-    title: "Project",
-    description: "Relation to Project Resource in which this object belongs"
+    modelType: User_default,
+    title: "Archived by User",
+    description: "Relation to User who archived this object (if this object was archived by a User)"
   }),
   ManyToOne(
     () => {
-      return Project;
+      return User_default;
     },
     {
       eager: false,
       nullable: true,
-      onDelete: "CASCADE",
+      onDelete: "SET NULL",
       orphanedRowAction: "nullify"
     }
   ),
-  JoinColumn({ name: "projectId" })
-], IncidentSeverity.prototype, "project", 2);
+  JoinColumn({ name: "archivedByUserId" })
+], AlertSeverity.prototype, "archivedByUser", 2);
 __decorateClass([
   ColumnAccessControl_default({
-    create: [
-      Permission_default.ProjectOwner,
-      Permission_default.ProjectAdmin,
-      Permission_default.IncidentAdmin,
-      Permission_default.CreateIncidentSeverity
-    ],
+    create: [],
     read: [
       Permission_default.ProjectOwner,
       Permission_default.ProjectAdmin,
       Permission_default.ProjectMember,
       Permission_default.Viewer,
-      Permission_default.IncidentAdmin,
-      Permission_default.IncidentMember,
-      Permission_default.IncidentViewer,
+      Permission_default.AlertAdmin,
+      Permission_default.AlertMember,
+      Permission_default.AlertViewer,
       Permission_default.SecurityAdmin,
       Permission_default.SecurityMember,
       Permission_default.SecurityViewer,
-      Permission_default.ReadIncidentSeverity
+      Permission_default.ReadAlertSeverity
     ],
     update: []
   }),
-  Index(),
   TableColumn_default({
     type: TableColumnType_default.ObjectID,
-    required: true,
-    canReadOnRelationQuery: true,
-    title: "Project ID",
-    description: "ID of your OneUptime Project in which this object belongs",
-    example: "5f8b9c0d-e1a2-4b3c-8d5e-6f7a8b9c0d1e"
+    title: "Archived by User ID",
+    description: "User ID who archived this object (if this object was archived by a User)"
   }),
   Column({
     type: ColumnType_default.ObjectID,
-    nullable: false,
+    nullable: true,
     transformer: ObjectID.getDatabaseTransformer()
   })
-], IncidentSeverity.prototype, "projectId", 2);
-__decorateClass([
-  ColumnAccessControl_default({
+], AlertSeverity.prototype, "archivedByUserId", 2);
+AlertSeverity = __decorateClass([
+  TableBillingAccessControl_default({
+    create: "Growth" /* Growth */,
+    read: "Free" /* Free */,
+    update: "Growth" /* Growth */,
+    delete: "Growth" /* Growth */
+  }),
+  EnableDocumentation_default(),
+  EnableMCP_default(),
+  TenantColumn_default("projectId"),
+  ListOrderColumn_default({ column: "order", scopeColumns: ["projectId"] }),
+  TableAccessControl_default({
     create: [
       Permission_default.ProjectOwner,
       Permission_default.ProjectAdmin,
-      Permission_default.IncidentAdmin,
-      Permission_default.CreateIncidentSeverity
+      Permission_default.AlertAdmin,
+      Permission_default.CreateAlertSeverity
     ],
     read: [
       Permission_default.ProjectOwner,
       Permission_default.ProjectAdmin,
       Permission_default.ProjectMember,
       Permission_default.Viewer,
-      Permission_default.IncidentAdmin,
-      Permission_default.IncidentMember,
-      Permission_default.IncidentViewer,
+      Permission_default.AlertAdmin,
+      Permission_default.AlertMember,
+      Permission_default.AlertViewer,
       Permission_default.SecurityAdmin,
       Permission_default.SecurityMember,
       Permission_default.SecurityViewer,
-      Permission_default.ReadIncidentSeverity
+      Permission_default.ReadAlertSeverity
+    ],
+    delete: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.AlertAdmin,
+      Permission_default.DeleteAlertSeverity
     ],
     update: [
       Permission_default.ProjectOwner,
       Permission_default.ProjectAdmin,
-      Permission_default.IncidentAdmin,
-      Permission_default.EditIncidentSeverity
+      Permission_default.AlertAdmin,
+      Permission_default.EditAlertSeverity
     ]
   }),
-  TableColumn_default({
-    required: true,
-    type: TableColumnType_default.ShortText,
-    canReadOnRelationQuery: true,
-    title: "Name",
-    description: "Any friendly name of this object",
-    example: "Critical"
-  }),
-  Column({
-    nullable: false,
-    type: ColumnType_default.ShortText,
-    length: ColumnLength_default.ShortText
+  EnableWorkflow_default({
+    create: true,
+    delete: true,
+    update: true,
+    read: true
   }),
-  UniqueColumnBy_default("projectId")
-], IncidentSeverity.prototype, "name", 2);
-__decorateClass([
-  ColumnAccessControl_default({
-    create: [],
-    read: [
-      Permission_default.ProjectOwner,
-      Permission_default.ProjectAdmin,
-      Permission_default.ProjectMember,
-      Permission_default.Viewer,
-      Permission_default.IncidentAdmin,
-      Permission_default.IncidentMember,
-      Permission_default.IncidentViewer,
-      Permission_default.SecurityAdmin,
-      Permission_default.SecurityMember,
-      Permission_default.SecurityViewer,
-      Permission_default.ReadIncidentSeverity
-    ],
-    update: []
+  EnableAuditLog_default(),
+  CrudApiEndpoint_default(new Route("/alert-severity")),
+  SlugifyColumn_default("name", "slug"),
+  TableMetadata_default({
+    tableName: "AlertSeverity",
+    singularName: "Alert Severity",
+    pluralName: "Alert Severities",
+    icon: IconProp_default.Alert,
+    tableDescription: "Manage alert severity for your project (Created, Acknowledged for example). Add / edit or remove severities."
   }),
-  TableColumn_default({
-    required: true,
-    unique: true,
-    type: TableColumnType_default.Slug,
-    computed: true,
-    title: "Slug",
-    description: "Friendly globally unique name for your object"
+  Entity({
+    name: "AlertSeverity"
   }),
-  Column({
-    nullable: false,
-    type: ColumnType_default.Slug,
-    length: ColumnLength_default.Slug
-  })
-], IncidentSeverity.prototype, "slug", 2);
+  Index(["projectId", "order"])
+], AlertSeverity);
+
+// ../Common/Models/DatabaseModels/IncidentSeverity.ts
+var IncidentSeverity = class extends DatabaseBaseModel {
+  constructor() {
+    super(...arguments);
+    this.project = void 0;
+    this.projectId = void 0;
+    this.name = void 0;
+    this.slug = void 0;
+    this.description = void 0;
+    this.createdByUser = void 0;
+    this.createdByUserId = void 0;
+    this.deletedByUser = void 0;
+    this.deletedByUserId = void 0;
+    this.color = void 0;
+    this.order = void 0;
+    this.isArchived = void 0;
+    this.archivedAt = void 0;
+    this.archivedByUser = void 0;
+    this.archivedByUserId = void 0;
+  }
+};
+__name(IncidentSeverity, "IncidentSeverity");
+__decorateClass([
+  ColumnAccessControl_default({
+    create: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.IncidentAdmin,
+      Permission_default.CreateIncidentSeverity
+    ],
+    read: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.ProjectMember,
+      Permission_default.Viewer,
+      Permission_default.IncidentAdmin,
+      Permission_default.IncidentMember,
+      Permission_default.IncidentViewer,
+      Permission_default.SecurityAdmin,
+      Permission_default.SecurityMember,
+      Permission_default.SecurityViewer,
+      Permission_default.ReadIncidentSeverity
+    ],
+    update: []
+  }),
+  TableColumn_default({
+    manyToOneRelationColumn: "projectId",
+    type: TableColumnType_default.Entity,
+    // Lazy: Project imports IncidentSeverity back (see modelTypeThunk).
+    modelTypeThunk: /* @__PURE__ */ __name(() => {
+      return Project;
+    }, "modelTypeThunk"),
+    title: "Project",
+    description: "Relation to Project Resource in which this object belongs"
+  }),
+  ManyToOne(
+    () => {
+      return Project;
+    },
+    {
+      eager: false,
+      nullable: true,
+      onDelete: "CASCADE",
+      orphanedRowAction: "nullify"
+    }
+  ),
+  JoinColumn({ name: "projectId" })
+], IncidentSeverity.prototype, "project", 2);
+__decorateClass([
+  ColumnAccessControl_default({
+    create: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.IncidentAdmin,
+      Permission_default.CreateIncidentSeverity
+    ],
+    read: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.ProjectMember,
+      Permission_default.Viewer,
+      Permission_default.IncidentAdmin,
+      Permission_default.IncidentMember,
+      Permission_default.IncidentViewer,
+      Permission_default.SecurityAdmin,
+      Permission_default.SecurityMember,
+      Permission_default.SecurityViewer,
+      Permission_default.ReadIncidentSeverity
+    ],
+    update: []
+  }),
+  Index(),
+  TableColumn_default({
+    type: TableColumnType_default.ObjectID,
+    required: true,
+    canReadOnRelationQuery: true,
+    title: "Project ID",
+    description: "ID of your OneUptime Project in which this object belongs",
+    example: "5f8b9c0d-e1a2-4b3c-8d5e-6f7a8b9c0d1e"
+  }),
+  Column({
+    type: ColumnType_default.ObjectID,
+    nullable: false,
+    transformer: ObjectID.getDatabaseTransformer()
+  })
+], IncidentSeverity.prototype, "projectId", 2);
+__decorateClass([
+  ColumnAccessControl_default({
+    create: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.IncidentAdmin,
+      Permission_default.CreateIncidentSeverity
+    ],
+    read: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.ProjectMember,
+      Permission_default.Viewer,
+      Permission_default.IncidentAdmin,
+      Permission_default.IncidentMember,
+      Permission_default.IncidentViewer,
+      Permission_default.SecurityAdmin,
+      Permission_default.SecurityMember,
+      Permission_default.SecurityViewer,
+      Permission_default.ReadIncidentSeverity
+    ],
+    update: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.IncidentAdmin,
+      Permission_default.EditIncidentSeverity
+    ]
+  }),
+  TableColumn_default({
+    required: true,
+    type: TableColumnType_default.ShortText,
+    canReadOnRelationQuery: true,
+    title: "Name",
+    description: "Any friendly name of this object",
+    example: "Critical"
+  }),
+  Column({
+    nullable: false,
+    type: ColumnType_default.ShortText,
+    length: ColumnLength_default.ShortText
+  }),
+  UniqueColumnBy_default("projectId")
+], IncidentSeverity.prototype, "name", 2);
+__decorateClass([
+  ColumnAccessControl_default({
+    create: [],
+    read: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.ProjectMember,
+      Permission_default.Viewer,
+      Permission_default.IncidentAdmin,
+      Permission_default.IncidentMember,
+      Permission_default.IncidentViewer,
+      Permission_default.SecurityAdmin,
+      Permission_default.SecurityMember,
+      Permission_default.SecurityViewer,
+      Permission_default.ReadIncidentSeverity
+    ],
+    update: []
+  }),
+  TableColumn_default({
+    required: true,
+    unique: true,
+    type: TableColumnType_default.Slug,
+    computed: true,
+    title: "Slug",
+    description: "Friendly globally unique name for your object"
+  }),
+  Column({
+    nullable: false,
+    type: ColumnType_default.Slug,
+    length: ColumnLength_default.Slug
+  })
+], IncidentSeverity.prototype, "slug", 2);
 __decorateClass([
   ColumnAccessControl_default({
     create: [
@@ -147825,6 +147999,146 @@ __decorateClass([
     type: ColumnType_default.SmallNumber
   })
 ], IncidentSeverity.prototype, "order", 2);
+__decorateClass([
+  ColumnAccessControl_default({
+    create: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.IncidentAdmin,
+      Permission_default.CreateIncidentSeverity
+    ],
+    read: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.ProjectMember,
+      Permission_default.Viewer,
+      Permission_default.IncidentAdmin,
+      Permission_default.IncidentMember,
+      Permission_default.IncidentViewer,
+      Permission_default.SecurityAdmin,
+      Permission_default.SecurityMember,
+      Permission_default.SecurityViewer,
+      Permission_default.ReadIncidentSeverity
+    ],
+    update: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.IncidentAdmin,
+      Permission_default.EditIncidentSeverity
+    ]
+  }),
+  TableColumn_default({
+    isDefaultValueColumn: true,
+    required: true,
+    type: TableColumnType_default.Boolean,
+    canReadOnRelationQuery: true,
+    title: "Is Archived",
+    description: "Archived severities stay on the incidents and episodes that have them, but can't be picked again. A project keeps at least one severity that is not archived.",
+    defaultValue: false,
+    example: false
+  }),
+  Column({
+    type: ColumnType_default.Boolean,
+    nullable: false,
+    default: false
+  })
+], IncidentSeverity.prototype, "isArchived", 2);
+__decorateClass([
+  ColumnAccessControl_default({
+    create: [],
+    read: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.ProjectMember,
+      Permission_default.Viewer,
+      Permission_default.IncidentAdmin,
+      Permission_default.IncidentMember,
+      Permission_default.IncidentViewer,
+      Permission_default.SecurityAdmin,
+      Permission_default.SecurityMember,
+      Permission_default.SecurityViewer,
+      Permission_default.ReadIncidentSeverity
+    ],
+    update: []
+  }),
+  TableColumn_default({
+    required: false,
+    type: TableColumnType_default.Date,
+    title: "Archived At",
+    description: "When this incident severity was archived. Empty while it is not archived."
+  }),
+  Column({
+    type: ColumnType_default.Date,
+    nullable: true
+  })
+], IncidentSeverity.prototype, "archivedAt", 2);
+__decorateClass([
+  ColumnAccessControl_default({
+    create: [],
+    read: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.ProjectMember,
+      Permission_default.Viewer,
+      Permission_default.IncidentAdmin,
+      Permission_default.IncidentMember,
+      Permission_default.IncidentViewer,
+      Permission_default.SecurityAdmin,
+      Permission_default.SecurityMember,
+      Permission_default.SecurityViewer,
+      Permission_default.ReadIncidentSeverity
+    ],
+    update: []
+  }),
+  TableColumn_default({
+    manyToOneRelationColumn: "archivedByUserId",
+    type: TableColumnType_default.Entity,
+    modelType: User_default,
+    title: "Archived by User",
+    description: "Relation to User who archived this object (if this object was archived by a User)"
+  }),
+  ManyToOne(
+    () => {
+      return User_default;
+    },
+    {
+      eager: false,
+      nullable: true,
+      onDelete: "SET NULL",
+      orphanedRowAction: "nullify"
+    }
+  ),
+  JoinColumn({ name: "archivedByUserId" })
+], IncidentSeverity.prototype, "archivedByUser", 2);
+__decorateClass([
+  ColumnAccessControl_default({
+    create: [],
+    read: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.ProjectMember,
+      Permission_default.Viewer,
+      Permission_default.IncidentAdmin,
+      Permission_default.IncidentMember,
+      Permission_default.IncidentViewer,
+      Permission_default.SecurityAdmin,
+      Permission_default.SecurityMember,
+      Permission_default.SecurityViewer,
+      Permission_default.ReadIncidentSeverity
+    ],
+    update: []
+  }),
+  TableColumn_default({
+    type: TableColumnType_default.ObjectID,
+    title: "Archived by User ID",
+    description: "User ID who archived this object (if this object was archived by a User)"
+  }),
+  Column({
+    type: ColumnType_default.ObjectID,
+    nullable: true,
+    transformer: ObjectID.getDatabaseTransformer()
+  })
+], IncidentSeverity.prototype, "archivedByUserId", 2);
 IncidentSeverity = __decorateClass([
   TableBillingAccessControl_default({
     create: "Growth" /* Growth */,
@@ -147875,6 +148189,7 @@ IncidentSeverity = __decorateClass([
     update: true,
     read: true
   }),
+  EnableAuditLog_default(),
   CrudApiEndpoint_default(new Route("/incident-severity")),
   SlugifyColumn_default("name", "slug"),
   TableMetadata_default({
@@ -148599,10 +148914,6 @@ var Project = class extends TenantModel {
     this.resolveLinkedAlertsWhenIncidentResolved = void 0;
     this.limitIncidentsToOneEpisode = void 0;
     this.limitAlertsToOneEpisode = void 0;
-    this.enableIncidentInstrumentationFixTasks = void 0;
-    this.enableAlertInstrumentationFixTasks = void 0;
-    this.enableAutomaticIncidentCodeFixes = void 0;
-    this.enableAutomaticAlertCodeFixes = void 0;
     this.enableAiInsights = void 0;
     this.enableInsightFixTasks = void 0;
     this.autoArchiveNonActionableExceptions = void 0;
@@ -150533,7 +150844,7 @@ __decorateClass([
     isDefaultValueColumn: true,
     type: TableColumnType_default.Boolean,
     title: "Enable Automatic Incident Remediation",
-    description: "When enabled, OneUptime fixes new incidents automatically: OneUptime AI fixes each one on the Kubernetes clusters and infrastructure it is linked to, the way each one's AI agent page allows, and Auto Remediation Rules - when there are any - choose which incidents are fixed, which runbooks run and whether a person approves first. Off by default, for new projects too. Any AI investigation of the incident settles first. Requires AI to be enabled. It also holds the incident pull-request switches, enableAutomaticIncidentCodeFixes and enableIncidentInstrumentationFixTasks: they open pull requests only while this is on. The dashboard turns them on and off with it; through the API, set them in the same request.",
+    description: "When enabled, OneUptime fixes new incidents automatically: OneUptime AI fixes each one on the Kubernetes clusters and infrastructure it is linked to, the way each one's AI agent page allows, and Auto Remediation Rules - when there are any - choose which incidents are fixed, which runbooks run and whether a person approves first. Off by default, for new projects too. Any AI investigation of the incident settles first. Requires AI to be enabled. Fix and telemetry pull requests open only while this is on, as each Auto Remediation Rule says (openCodeFixPullRequests, openTelemetryPullRequests - on by default, and on with no rule).",
     defaultValue: false,
     example: true
   }),
@@ -150562,7 +150873,7 @@ __decorateClass([
     isDefaultValueColumn: true,
     type: TableColumnType_default.Boolean,
     title: "Enable Automatic Alert Remediation",
-    description: "When enabled, OneUptime fixes new alerts automatically: OneUptime AI fixes each one on the Kubernetes clusters and infrastructure it is linked to, the way each one's AI agent page allows, and Auto Remediation Rules - when there are any - choose which alerts are fixed, which runbooks run and whether a person approves first. Off by default, for new projects too. Any AI investigation of the alert settles first. Requires AI to be enabled. It also holds the alert pull-request switches, enableAutomaticAlertCodeFixes and enableAlertInstrumentationFixTasks: they open pull requests only while this is on. The dashboard turns them on and off with it; through the API, set them in the same request.",
+    description: "When enabled, OneUptime fixes new alerts automatically: OneUptime AI fixes each one on the Kubernetes clusters and infrastructure it is linked to, the way each one's AI agent page allows, and Auto Remediation Rules - when there are any - choose which alerts are fixed, which runbooks run and whether a person approves first. Off by default, for new projects too. Any AI investigation of the alert settles first. Requires AI to be enabled. Fix and telemetry pull requests open only while this is on, as each Auto Remediation Rule says (openCodeFixPullRequests, openTelemetryPullRequests - on by default, and on with no rule).",
     defaultValue: false,
     example: true
   }),
@@ -150717,122 +151028,6 @@ __decorateClass([
     type: ColumnType_default.Boolean
   })
 ], Project.prototype, "limitAlertsToOneEpisode", 2);
-__decorateClass([
-  ColumnAccessControl_default({
-    create: [Permission_default.User],
-    read: [
-      Permission_default.ProjectOwner,
-      Permission_default.ProjectAdmin,
-      Permission_default.ProjectMember,
-      Permission_default.Viewer,
-      Permission_default.ReadProject,
-      Permission_default.UnAuthorizedSsoUser,
-      Permission_default.ProjectUser
-    ],
-    update: [Permission_default.ProjectOwner, Permission_default.ProjectAdmin]
-  }),
-  TableColumn_default({
-    required: true,
-    isDefaultValueColumn: true,
-    type: TableColumnType_default.Boolean,
-    title: "Enable Incident Instrumentation Fix Tasks",
-    description: "When enabled, an incident AI investigation that ends inconclusive (telemetry was insufficient to determine a root cause) automatically queues an AI agent task that opens a pull request adding the missing instrumentation to the implicated code paths. Requires a repository connected through the GitHub App. Pull requests are always human-reviewed \u2014 nothing merges automatically. Part of fixing: it acts only while enableAutomaticIncidentRemediation (Fix new incidents automatically) is on, and the dashboard turns it on and off with that switch. Off for new projects.",
-    defaultValue: false,
-    example: true
-  }),
-  Column({
-    nullable: false,
-    default: false,
-    type: ColumnType_default.Boolean
-  })
-], Project.prototype, "enableIncidentInstrumentationFixTasks", 2);
-__decorateClass([
-  ColumnAccessControl_default({
-    create: [Permission_default.User],
-    read: [
-      Permission_default.ProjectOwner,
-      Permission_default.ProjectAdmin,
-      Permission_default.ProjectMember,
-      Permission_default.Viewer,
-      Permission_default.ReadProject,
-      Permission_default.UnAuthorizedSsoUser,
-      Permission_default.ProjectUser
-    ],
-    update: [Permission_default.ProjectOwner, Permission_default.ProjectAdmin]
-  }),
-  TableColumn_default({
-    required: true,
-    isDefaultValueColumn: true,
-    type: TableColumnType_default.Boolean,
-    title: "Enable Alert Instrumentation Fix Tasks",
-    description: "When enabled, an alert AI investigation that ends inconclusive (telemetry was insufficient to determine a root cause) automatically queues an AI agent task that opens a pull request adding the missing instrumentation to the implicated code paths. Requires a repository connected through the GitHub App. Pull requests are always human-reviewed \u2014 nothing merges automatically. Part of fixing: it acts only while enableAutomaticAlertRemediation (Fix new alerts automatically) is on, and the dashboard turns it on and off with that switch. Off for new projects.",
-    defaultValue: false,
-    example: true
-  }),
-  Column({
-    nullable: false,
-    default: false,
-    type: ColumnType_default.Boolean
-  })
-], Project.prototype, "enableAlertInstrumentationFixTasks", 2);
-__decorateClass([
-  ColumnAccessControl_default({
-    create: [Permission_default.User],
-    read: [
-      Permission_default.ProjectOwner,
-      Permission_default.ProjectAdmin,
-      Permission_default.ProjectMember,
-      Permission_default.Viewer,
-      Permission_default.ReadProject,
-      Permission_default.UnAuthorizedSsoUser,
-      Permission_default.ProjectUser
-    ],
-    update: [Permission_default.ProjectOwner, Permission_default.ProjectAdmin]
-  }),
-  TableColumn_default({
-    required: true,
-    isDefaultValueColumn: true,
-    type: TableColumnType_default.Boolean,
-    title: "Enable Automatic Incident Code Fixes",
-    description: "When enabled, an incident AI investigation that ends with a confident, evidenced root cause analysis and recommends a repository code change automatically queues an AI agent task that opens a fix pull request, ready for review, from that analysis \u2014 the automatic form of the 'Open Fix PR from this analysis' button. Operational, infrastructure, external, user-error and inconclusive findings do not offer or open code-fix pull requests. Requires a repository connected through the GitHub App and a Runner with the code-fix capability. Pull requests are always human-reviewed \u2014 nothing merges automatically. Part of fixing: it acts only while enableAutomaticIncidentRemediation (Fix new incidents automatically) is on, and the dashboard turns it on and off with that switch. Off for new projects.",
-    defaultValue: false,
-    example: true
-  }),
-  Column({
-    nullable: false,
-    default: false,
-    type: ColumnType_default.Boolean
-  })
-], Project.prototype, "enableAutomaticIncidentCodeFixes", 2);
-__decorateClass([
-  ColumnAccessControl_default({
-    create: [Permission_default.User],
-    read: [
-      Permission_default.ProjectOwner,
-      Permission_default.ProjectAdmin,
-      Permission_default.ProjectMember,
-      Permission_default.Viewer,
-      Permission_default.ReadProject,
-      Permission_default.UnAuthorizedSsoUser,
-      Permission_default.ProjectUser
-    ],
-    update: [Permission_default.ProjectOwner, Permission_default.ProjectAdmin]
-  }),
-  TableColumn_default({
-    required: true,
-    isDefaultValueColumn: true,
-    type: TableColumnType_default.Boolean,
-    title: "Enable Automatic Alert Code Fixes",
-    description: "When enabled, an alert AI investigation that ends with a confident, evidenced root cause analysis and recommends a repository code change automatically queues an AI agent task that opens a fix pull request, ready for review, from that analysis \u2014 the automatic form of the 'Open Fix PR from this analysis' button. Operational, infrastructure, external, user-error and inconclusive findings do not offer or open code-fix pull requests. Requires a repository connected through the GitHub App and a Runner with the code-fix capability. Pull requests are always human-reviewed \u2014 nothing merges automatically. Part of fixing: it acts only while enableAutomaticAlertRemediation (Fix new alerts automatically) is on, and the dashboard turns it on and off with that switch. Off for new projects.",
-    defaultValue: false,
-    example: true
-  }),
-  Column({
-    nullable: false,
-    default: false,
-    type: ColumnType_default.Boolean
-  })
-], Project.prototype, "enableAutomaticAlertCodeFixes", 2);
 __decorateClass([
   ColumnAccessControl_default({
     create: [Permission_default.User],
@@ -152550,31 +152745,6 @@ var AccessControlModel = class extends DatabaseBaseModel {
   }
 };
 
-// ../Common/Types/Database/EnableAuditLog.ts
-var EnableAuditLog_default = /* @__PURE__ */ __name((enableAuditLogOn = {
-  create: true,
-  update: true,
-  delete: true
-}) => {
-  return (ctr) => {
-    const config = {
-      create: enableAuditLogOn.create ?? true,
-      update: enableAuditLogOn.update ?? true,
-      delete: enableAuditLogOn.delete ?? true
-    };
-    if (enableAuditLogOn.rootResource) {
-      config.rootResource = { ...enableAuditLogOn.rootResource };
-    }
-    if (enableAuditLogOn.ignoreColumns) {
-      config.ignoreColumns = [...enableAuditLogOn.ignoreColumns];
-    }
-    if (enableAuditLogOn.resourceNameRelation) {
-      config.resourceNameRelation = enableAuditLogOn.resourceNameRelation;
-    }
-    ctr.prototype.enableAuditLogOn = config;
-  };
-}, "default");
-
 // ../Common/Models/DatabaseModels/Label.ts
 var Label = class extends AccessControlModel {
   constructor() {
@@ -152589,6 +152759,10 @@ var Label = class extends AccessControlModel {
     this.deletedByUser = void 0;
     this.deletedByUserId = void 0;
     this.color = void 0;
+    this.isArchived = void 0;
+    this.archivedAt = void 0;
+    this.archivedByUser = void 0;
+    this.archivedByUserId = void 0;
   }
 };
 __name(Label, "Label");
@@ -152953,6 +153127,136 @@ __decorateClass([
     transformer: Color.getDatabaseTransformer()
   })
 ], Label.prototype, "color", 2);
+__decorateClass([
+  ColumnAccessControl_default({
+    create: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.CreateProjectLabel
+    ],
+    read: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.ProjectMember,
+      Permission_default.Viewer,
+      Permission_default.ProjectUser,
+      Permission_default.SettingsAdmin,
+      Permission_default.SettingsMember,
+      Permission_default.SettingsViewer,
+      Permission_default.ReadProjectLabel
+    ],
+    update: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.EditProjectLabel
+    ]
+  }),
+  TableColumn_default({
+    isDefaultValueColumn: true,
+    required: true,
+    type: TableColumnType_default.Boolean,
+    canReadOnRelationQuery: true,
+    title: "Is Archived",
+    description: "Archived labels stay on everything that has them, but can't be added to anything again.",
+    defaultValue: false,
+    example: false
+  }),
+  Column({
+    type: ColumnType_default.Boolean,
+    nullable: false,
+    default: false
+  })
+], Label.prototype, "isArchived", 2);
+__decorateClass([
+  ColumnAccessControl_default({
+    create: [],
+    read: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.ProjectMember,
+      Permission_default.Viewer,
+      Permission_default.ProjectUser,
+      Permission_default.SettingsAdmin,
+      Permission_default.SettingsMember,
+      Permission_default.SettingsViewer,
+      Permission_default.ReadProjectLabel
+    ],
+    update: []
+  }),
+  TableColumn_default({
+    required: false,
+    type: TableColumnType_default.Date,
+    title: "Archived At",
+    description: "When this label was archived. Empty while it is not archived."
+  }),
+  Column({
+    type: ColumnType_default.Date,
+    nullable: true
+  })
+], Label.prototype, "archivedAt", 2);
+__decorateClass([
+  ColumnAccessControl_default({
+    create: [],
+    read: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.ProjectMember,
+      Permission_default.Viewer,
+      Permission_default.ProjectUser,
+      Permission_default.SettingsAdmin,
+      Permission_default.SettingsMember,
+      Permission_default.SettingsViewer,
+      Permission_default.ReadProjectLabel
+    ],
+    update: []
+  }),
+  TableColumn_default({
+    manyToOneRelationColumn: "archivedByUserId",
+    type: TableColumnType_default.Entity,
+    modelType: User_default,
+    title: "Archived by User",
+    description: "Relation to User who archived this object (if this object was archived by a User)"
+  }),
+  ManyToOne(
+    () => {
+      return User_default;
+    },
+    {
+      eager: false,
+      nullable: true,
+      onDelete: "SET NULL",
+      orphanedRowAction: "nullify"
+    }
+  ),
+  JoinColumn({ name: "archivedByUserId" })
+], Label.prototype, "archivedByUser", 2);
+__decorateClass([
+  ColumnAccessControl_default({
+    create: [],
+    read: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.ProjectMember,
+      Permission_default.Viewer,
+      Permission_default.ProjectUser,
+      Permission_default.SettingsAdmin,
+      Permission_default.SettingsMember,
+      Permission_default.SettingsViewer,
+      Permission_default.ReadProjectLabel
+    ],
+    update: []
+  }),
+  TableColumn_default({
+    type: TableColumnType_default.ObjectID,
+    title: "Archived by User ID",
+    description: "User ID who archived this object (if this object was archived by a User)"
+  }),
+  Column({
+    type: ColumnType_default.ObjectID,
+    nullable: true,
+    transformer: ObjectID.getDatabaseTransformer()
+  })
+], Label.prototype, "archivedByUserId", 2);
 Label = __decorateClass([
   TableBillingAccessControl_default({
     create: "Growth" /* Growth */,
@@ -153437,7 +153741,7 @@ __decorateClass([
     required: true,
     type: TableColumnType_default.Boolean,
     title: "Runs AI Remediation Commands",
-    description: "Whether OneUptime AI may run commands through this Runner: read-only kubectl while investigating a cluster it is bound to, and policy-checked remediation commands (Bash, SSH, kubectl) that either match an allowlist or wait for one-click human approval. Set by OneUptime: on once an auto remediation rule picks this Runner or a Kubernetes cluster's AI settings bind it, and on for the in-cluster Runner the Kubernetes agent chart installs.",
+    description: "Whether OneUptime AI may run commands through this Runner: read-only kubectl while investigating a cluster it is bound to, and policy-checked remediation commands (Bash, kubectl) that either match an allowlist or wait for one-click human approval. Set by OneUptime: on once an auto remediation rule picks this Runner, and on for the in-cluster Runner the Kubernetes agent chart installs.",
     defaultValue: false,
     isDefaultValueColumn: true
   }),
@@ -153763,622 +154067,6 @@ Runner = __decorateClass([
   })
 ], Runner);
 
-// ../Common/Models/DatabaseModels/RunbookCredential.ts
-var RunbookCredential = class extends DatabaseBaseModel {
-  constructor() {
-    super(...arguments);
-    this.project = void 0;
-    this.projectId = void 0;
-    this.name = void 0;
-    this.description = void 0;
-    this.credentialType = void 0;
-    this.sshHostname = void 0;
-    this.sshPort = void 0;
-    this.sshUsername = void 0;
-    this.sshPrivateKey = void 0;
-    this.sshPassphrase = void 0;
-    this.sshPassword = void 0;
-    this.kubernetesApiServerUrl = void 0;
-    this.kubernetesServiceAccountToken = void 0;
-    this.kubernetesCaCertificate = void 0;
-    this.runners = void 0;
-    this.createdByUser = void 0;
-    this.createdByUserId = void 0;
-    this.deletedByUser = void 0;
-    this.deletedByUserId = void 0;
-  }
-};
-__name(RunbookCredential, "RunbookCredential");
-__decorateClass([
-  ColumnAccessControl_default({
-    create: [
-      Permission_default.ProjectOwner,
-      Permission_default.ProjectAdmin,
-      Permission_default.CreateRunbookCredential
-    ],
-    read: [
-      Permission_default.ProjectOwner,
-      Permission_default.ProjectAdmin,
-      Permission_default.ReadRunbookCredential
-    ],
-    update: []
-  }),
-  TableColumn_default({
-    manyToOneRelationColumn: "projectId",
-    type: TableColumnType_default.Entity,
-    modelType: Project,
-    title: "Project",
-    description: "Relation to Project Resource in which this object belongs"
-  }),
-  ManyToOne(
-    () => {
-      return Project;
-    },
-    {
-      eager: false,
-      nullable: true,
-      onDelete: "CASCADE",
-      orphanedRowAction: "nullify"
-    }
-  ),
-  JoinColumn({ name: "projectId" })
-], RunbookCredential.prototype, "project", 2);
-__decorateClass([
-  ColumnAccessControl_default({
-    create: [
-      Permission_default.ProjectOwner,
-      Permission_default.ProjectAdmin,
-      Permission_default.CreateRunbookCredential
-    ],
-    read: [
-      Permission_default.ProjectOwner,
-      Permission_default.ProjectAdmin,
-      Permission_default.ReadRunbookCredential
-    ],
-    update: []
-  }),
-  Index(),
-  TableColumn_default({
-    type: TableColumnType_default.ObjectID,
-    required: true,
-    canReadOnRelationQuery: true,
-    title: "Project ID",
-    description: "ID of your OneUptime Project in which this object belongs"
-  }),
-  Column({
-    type: ColumnType_default.ObjectID,
-    nullable: false,
-    transformer: ObjectID.getDatabaseTransformer()
-  })
-], RunbookCredential.prototype, "projectId", 2);
-__decorateClass([
-  ColumnAccessControl_default({
-    create: [
-      Permission_default.ProjectOwner,
-      Permission_default.ProjectAdmin,
-      Permission_default.CreateRunbookCredential
-    ],
-    read: [
-      Permission_default.ProjectOwner,
-      Permission_default.ProjectAdmin,
-      Permission_default.ReadRunbookCredential
-    ],
-    update: [
-      Permission_default.ProjectOwner,
-      Permission_default.ProjectAdmin,
-      Permission_default.EditRunbookCredential
-    ]
-  }),
-  TableColumn_default({
-    required: true,
-    type: TableColumnType_default.ShortText,
-    canReadOnRelationQuery: true,
-    title: "Name",
-    description: "Any friendly name of this object",
-    example: "prod-cluster"
-  }),
-  Column({
-    nullable: false,
-    type: ColumnType_default.ShortText,
-    length: ColumnLength_default.ShortText
-  }),
-  UniqueColumnBy_default("projectId")
-], RunbookCredential.prototype, "name", 2);
-__decorateClass([
-  ColumnAccessControl_default({
-    create: [
-      Permission_default.ProjectOwner,
-      Permission_default.ProjectAdmin,
-      Permission_default.CreateRunbookCredential
-    ],
-    read: [
-      Permission_default.ProjectOwner,
-      Permission_default.ProjectAdmin,
-      Permission_default.ReadRunbookCredential
-    ],
-    update: [
-      Permission_default.ProjectOwner,
-      Permission_default.ProjectAdmin,
-      Permission_default.EditRunbookCredential
-    ]
-  }),
-  TableColumn_default({
-    required: false,
-    type: TableColumnType_default.LongText,
-    title: "Description",
-    description: "Friendly description that will help you remember"
-  }),
-  Column({
-    nullable: true,
-    type: ColumnType_default.LongText,
-    length: ColumnLength_default.LongText
-  })
-], RunbookCredential.prototype, "description", 2);
-__decorateClass([
-  ColumnAccessControl_default({
-    create: [
-      Permission_default.ProjectOwner,
-      Permission_default.ProjectAdmin,
-      Permission_default.CreateRunbookCredential
-    ],
-    read: [
-      Permission_default.ProjectOwner,
-      Permission_default.ProjectAdmin,
-      Permission_default.ReadRunbookCredential
-    ],
-    update: []
-  }),
-  TableColumn_default({
-    required: true,
-    type: TableColumnType_default.ShortText,
-    canReadOnRelationQuery: true,
-    title: "Credential Type",
-    description: "SSH, or Kubernetes.",
-    example: "SSH"
-  }),
-  Column({
-    nullable: false,
-    type: ColumnType_default.ShortText
-  })
-], RunbookCredential.prototype, "credentialType", 2);
-__decorateClass([
-  ColumnAccessControl_default({
-    create: [
-      Permission_default.ProjectOwner,
-      Permission_default.ProjectAdmin,
-      Permission_default.CreateRunbookCredential
-    ],
-    read: [
-      Permission_default.ProjectOwner,
-      Permission_default.ProjectAdmin,
-      Permission_default.ReadRunbookCredential
-    ],
-    update: [
-      Permission_default.ProjectOwner,
-      Permission_default.ProjectAdmin,
-      Permission_default.EditRunbookCredential
-    ]
-  }),
-  TableColumn_default({
-    required: false,
-    type: TableColumnType_default.ShortText,
-    title: "SSH Hostname",
-    description: "Hostname or IP address the Runner connects to.",
-    example: "10.0.4.21"
-  }),
-  Column({
-    nullable: true,
-    type: ColumnType_default.ShortText,
-    length: ColumnLength_default.ShortText
-  })
-], RunbookCredential.prototype, "sshHostname", 2);
-__decorateClass([
-  ColumnAccessControl_default({
-    create: [
-      Permission_default.ProjectOwner,
-      Permission_default.ProjectAdmin,
-      Permission_default.CreateRunbookCredential
-    ],
-    read: [
-      Permission_default.ProjectOwner,
-      Permission_default.ProjectAdmin,
-      Permission_default.ReadRunbookCredential
-    ],
-    update: [
-      Permission_default.ProjectOwner,
-      Permission_default.ProjectAdmin,
-      Permission_default.EditRunbookCredential
-    ]
-  }),
-  TableColumn_default({
-    required: false,
-    type: TableColumnType_default.Number,
-    title: "SSH Port",
-    description: "Defaults to 22 when unset.",
-    example: 22
-  }),
-  Column({
-    nullable: true,
-    type: ColumnType_default.Number
-  })
-], RunbookCredential.prototype, "sshPort", 2);
-__decorateClass([
-  ColumnAccessControl_default({
-    create: [
-      Permission_default.ProjectOwner,
-      Permission_default.ProjectAdmin,
-      Permission_default.CreateRunbookCredential
-    ],
-    read: [
-      Permission_default.ProjectOwner,
-      Permission_default.ProjectAdmin,
-      Permission_default.ReadRunbookCredential
-    ],
-    update: [
-      Permission_default.ProjectOwner,
-      Permission_default.ProjectAdmin,
-      Permission_default.EditRunbookCredential
-    ]
-  }),
-  TableColumn_default({
-    required: false,
-    type: TableColumnType_default.ShortText,
-    title: "SSH Username",
-    description: "The user the Runner authenticates as.",
-    example: "deploy"
-  }),
-  Column({
-    nullable: true,
-    type: ColumnType_default.ShortText,
-    length: ColumnLength_default.ShortText
-  })
-], RunbookCredential.prototype, "sshUsername", 2);
-__decorateClass([
-  ColumnAccessControl_default({
-    create: [
-      Permission_default.ProjectOwner,
-      Permission_default.ProjectAdmin,
-      Permission_default.CreateRunbookCredential
-    ],
-    read: [],
-    update: [
-      Permission_default.ProjectOwner,
-      Permission_default.ProjectAdmin,
-      Permission_default.EditRunbookCredential
-    ]
-  }),
-  TableColumn_default({
-    required: false,
-    type: TableColumnType_default.VeryLongText,
-    encrypted: true,
-    title: "SSH Private Key",
-    description: "PEM private key used to authenticate. Encrypted at rest and never returned by the API."
-  }),
-  Column({
-    nullable: true,
-    type: ColumnType_default.VeryLongText
-  })
-], RunbookCredential.prototype, "sshPrivateKey", 2);
-__decorateClass([
-  ColumnAccessControl_default({
-    create: [
-      Permission_default.ProjectOwner,
-      Permission_default.ProjectAdmin,
-      Permission_default.CreateRunbookCredential
-    ],
-    read: [],
-    update: [
-      Permission_default.ProjectOwner,
-      Permission_default.ProjectAdmin,
-      Permission_default.EditRunbookCredential
-    ]
-  }),
-  TableColumn_default({
-    required: false,
-    type: TableColumnType_default.VeryLongText,
-    encrypted: true,
-    title: "SSH Private Key Passphrase",
-    description: "Passphrase protecting the private key, when it has one. Encrypted at rest and never returned by the API."
-  }),
-  Column({
-    nullable: true,
-    type: ColumnType_default.VeryLongText
-  })
-], RunbookCredential.prototype, "sshPassphrase", 2);
-__decorateClass([
-  ColumnAccessControl_default({
-    create: [
-      Permission_default.ProjectOwner,
-      Permission_default.ProjectAdmin,
-      Permission_default.CreateRunbookCredential
-    ],
-    read: [],
-    update: [
-      Permission_default.ProjectOwner,
-      Permission_default.ProjectAdmin,
-      Permission_default.EditRunbookCredential
-    ]
-  }),
-  TableColumn_default({
-    required: false,
-    type: TableColumnType_default.VeryLongText,
-    encrypted: true,
-    title: "SSH Password",
-    description: "Password authentication, for hosts without key access. Encrypted at rest and never returned by the API."
-  }),
-  Column({
-    nullable: true,
-    type: ColumnType_default.VeryLongText
-  })
-], RunbookCredential.prototype, "sshPassword", 2);
-__decorateClass([
-  ColumnAccessControl_default({
-    create: [
-      Permission_default.ProjectOwner,
-      Permission_default.ProjectAdmin,
-      Permission_default.CreateRunbookCredential
-    ],
-    read: [
-      Permission_default.ProjectOwner,
-      Permission_default.ProjectAdmin,
-      Permission_default.ReadRunbookCredential
-    ],
-    update: [
-      Permission_default.ProjectOwner,
-      Permission_default.ProjectAdmin,
-      Permission_default.EditRunbookCredential
-    ]
-  }),
-  TableColumn_default({
-    required: false,
-    type: TableColumnType_default.ShortText,
-    title: "Kubernetes API Server URL",
-    description: "For example https://10.0.0.1:6443",
-    example: "https://10.0.0.1:6443"
-  }),
-  Column({
-    nullable: true,
-    type: ColumnType_default.ShortText,
-    length: ColumnLength_default.LongText
-  })
-], RunbookCredential.prototype, "kubernetesApiServerUrl", 2);
-__decorateClass([
-  ColumnAccessControl_default({
-    create: [
-      Permission_default.ProjectOwner,
-      Permission_default.ProjectAdmin,
-      Permission_default.CreateRunbookCredential
-    ],
-    read: [],
-    update: [
-      Permission_default.ProjectOwner,
-      Permission_default.ProjectAdmin,
-      Permission_default.EditRunbookCredential
-    ]
-  }),
-  TableColumn_default({
-    required: false,
-    type: TableColumnType_default.VeryLongText,
-    encrypted: true,
-    title: "Kubernetes Service Account Token",
-    description: "Bearer token of a service account bound to a role that permits only the actions your runbooks need. Encrypted at rest and never returned by the API."
-  }),
-  Column({
-    nullable: true,
-    type: ColumnType_default.VeryLongText
-  })
-], RunbookCredential.prototype, "kubernetesServiceAccountToken", 2);
-__decorateClass([
-  ColumnAccessControl_default({
-    create: [
-      Permission_default.ProjectOwner,
-      Permission_default.ProjectAdmin,
-      Permission_default.CreateRunbookCredential
-    ],
-    read: [
-      Permission_default.ProjectOwner,
-      Permission_default.ProjectAdmin,
-      Permission_default.ReadRunbookCredential
-    ],
-    update: [
-      Permission_default.ProjectOwner,
-      Permission_default.ProjectAdmin,
-      Permission_default.EditRunbookCredential
-    ]
-  }),
-  TableColumn_default({
-    required: false,
-    type: TableColumnType_default.VeryLongText,
-    title: "Kubernetes CA Certificate",
-    description: "PEM certificate authority for the API server. Leave empty only if the API server presents a certificate your Runner already trusts."
-  }),
-  Column({
-    nullable: true,
-    type: ColumnType_default.VeryLongText
-  })
-], RunbookCredential.prototype, "kubernetesCaCertificate", 2);
-__decorateClass([
-  ColumnAccessControl_default({
-    create: [
-      Permission_default.ProjectOwner,
-      Permission_default.ProjectAdmin,
-      Permission_default.CreateRunbookCredential
-    ],
-    read: [
-      Permission_default.ProjectOwner,
-      Permission_default.ProjectAdmin,
-      Permission_default.ReadRunbookCredential
-    ],
-    update: [
-      Permission_default.ProjectOwner,
-      Permission_default.ProjectAdmin,
-      Permission_default.EditRunbookCredential
-    ]
-  }),
-  TableColumn_default({
-    required: false,
-    type: TableColumnType_default.EntityArray,
-    modelType: Runner,
-    title: "Runners",
-    description: "The Runners allowed to use this credential. A command that uses it must run on one of them."
-  }),
-  ManyToMany(
-    () => {
-      return Runner;
-    },
-    { eager: false }
-  ),
-  JoinTable({
-    name: "RunbookCredentialRunner",
-    inverseJoinColumn: {
-      name: "runnerId",
-      referencedColumnName: "_id"
-    },
-    joinColumn: {
-      name: "runbookCredentialId",
-      referencedColumnName: "_id"
-    }
-  })
-], RunbookCredential.prototype, "runners", 2);
-__decorateClass([
-  ColumnAccessControl_default({
-    create: [],
-    read: [
-      Permission_default.ProjectOwner,
-      Permission_default.ProjectAdmin,
-      Permission_default.ReadRunbookCredential
-    ],
-    update: []
-  }),
-  TableColumn_default({
-    manyToOneRelationColumn: "createdByUserId",
-    type: TableColumnType_default.Entity,
-    modelType: User_default,
-    title: "Created by User",
-    description: "Relation to User who created this object (if this object was created by a User)"
-  }),
-  ManyToOne(
-    () => {
-      return User_default;
-    },
-    {
-      eager: false,
-      nullable: true,
-      onDelete: "SET NULL",
-      orphanedRowAction: "nullify"
-    }
-  ),
-  JoinColumn({ name: "createdByUserId" })
-], RunbookCredential.prototype, "createdByUser", 2);
-__decorateClass([
-  ColumnAccessControl_default({
-    create: [],
-    read: [
-      Permission_default.ProjectOwner,
-      Permission_default.ProjectAdmin,
-      Permission_default.ReadRunbookCredential
-    ],
-    update: []
-  }),
-  TableColumn_default({
-    type: TableColumnType_default.ObjectID,
-    title: "Created by User ID",
-    description: "User ID who created this object (if this object was created by a User)"
-  }),
-  Column({
-    type: ColumnType_default.ObjectID,
-    nullable: true,
-    transformer: ObjectID.getDatabaseTransformer()
-  })
-], RunbookCredential.prototype, "createdByUserId", 2);
-__decorateClass([
-  ColumnAccessControl_default({
-    create: [],
-    read: [],
-    update: []
-  }),
-  TableColumn_default({
-    manyToOneRelationColumn: "deletedByUserId",
-    type: TableColumnType_default.Entity,
-    title: "Deleted by User",
-    description: "Relation to User who deleted this object (if this object was deleted by a User)",
-    modelType: User_default
-  }),
-  ManyToOne(
-    () => {
-      return User_default;
-    },
-    {
-      cascade: false,
-      eager: false,
-      nullable: true,
-      onDelete: "SET NULL",
-      orphanedRowAction: "nullify"
-    }
-  ),
-  JoinColumn({ name: "deletedByUserId" })
-], RunbookCredential.prototype, "deletedByUser", 2);
-__decorateClass([
-  ColumnAccessControl_default({
-    create: [],
-    read: [],
-    update: []
-  }),
-  TableColumn_default({
-    type: TableColumnType_default.ObjectID,
-    title: "Deleted by User ID",
-    description: "User ID who deleted this object (if this object was deleted by a User)"
-  }),
-  Column({
-    type: ColumnType_default.ObjectID,
-    nullable: true,
-    transformer: ObjectID.getDatabaseTransformer()
-  })
-], RunbookCredential.prototype, "deletedByUserId", 2);
-RunbookCredential = __decorateClass([
-  EnableDocumentation_default(),
-  TableBillingAccessControl_default({
-    create: "Growth" /* Growth */,
-    read: "Growth" /* Growth */,
-    update: "Growth" /* Growth */,
-    delete: "Growth" /* Growth */
-  }),
-  TenantColumn_default("projectId"),
-  TableAccessControl_default({
-    create: [
-      Permission_default.ProjectOwner,
-      Permission_default.ProjectAdmin,
-      Permission_default.CreateRunbookCredential
-    ],
-    read: [
-      Permission_default.ProjectOwner,
-      Permission_default.ProjectAdmin,
-      Permission_default.ReadRunbookCredential
-    ],
-    delete: [
-      Permission_default.ProjectOwner,
-      Permission_default.ProjectAdmin,
-      Permission_default.DeleteRunbookCredential
-    ],
-    update: [
-      Permission_default.ProjectOwner,
-      Permission_default.ProjectAdmin,
-      Permission_default.EditRunbookCredential
-    ]
-  }),
-  CrudApiEndpoint_default(new Route("/runbook-credential")),
-  TableMetadata_default({
-    tableName: "RunbookCredential",
-    singularName: "Runbook Credential",
-    pluralName: "Runbook Credentials",
-    icon: IconProp_default.Key,
-    tableDescription: "What OneUptime AI's commands reach through your Runners: an SSH host, or a Kubernetes cluster's API server. Secret material is encrypted at rest and can never be read back through the API; it is decrypted only when handed to an assigned Runner as it claims a command."
-  }),
-  Entity({
-    name: "RunbookCredential"
-  })
-], RunbookCredential);
-
 // ../Common/Types/Kubernetes/KubernetesClusterAiAccess.ts
 var DEFAULT_KUBECTL_TIMEOUT_MS = 30 * 1e3;
 var MAX_KUBECTL_TIMEOUT_MS = 2 * 60 * 1e3;
@@ -154413,8 +154101,6 @@ var KubernetesCluster = class extends DatabaseBaseModel {
     this.telemetryRetentionConfig = void 0;
     this.aiAccessRunner = void 0;
     this.aiAccessRunnerId = void 0;
-    this.aiAccessCredential = void 0;
-    this.aiAccessCredentialId = void 0;
     this.isAiInvestigationEnabled = void 0;
     this.aiRemediationMode = void 0;
     this.aiKubectlCommandAllowlist = void 0;
@@ -155334,7 +155020,7 @@ __decorateClass([
     type: TableColumnType_default.Entity,
     modelType: Runner,
     title: "AI Access Runner",
-    description: "The Runner OneUptime AI uses to run kubectl against this cluster \u2014 the in-cluster Runner installed by the Kubernetes agent chart (which binds itself here when it first registers, unless a Runner was bound here before), or any Runner you created that holds a Kubernetes credential for this cluster. Another cluster's in-cluster Runner cannot be bound. Binding a Runner, or switching to a different one, needs Project Owner, Project Admin or Edit Auto Remediation Rule; anyone who may edit the cluster can clear it."
+    description: "The in-cluster Runner an older Kubernetes agent chart installed, which binds itself here when it first registers (unless a Runner was bound here before) and runs OneUptime AI's kubectl while the cluster's Kubernetes AI agent is not online. Only this cluster's own in-cluster Runner can be bound. Binding it again needs Project Owner, Project Admin or Edit Auto Remediation Rule; anyone who may edit the cluster can clear it."
   }),
   ManyToOne(
     () => {
@@ -155377,7 +155063,7 @@ __decorateClass([
     required: false,
     canReadOnRelationQuery: true,
     title: "AI Access Runner ID",
-    description: "ID of the Runner OneUptime AI uses to run kubectl against this cluster. Another cluster's in-cluster Runner cannot be bound. Binding a Runner, or switching to a different one, needs Project Owner, Project Admin or Edit Auto Remediation Rule; anyone who may edit the cluster can clear it."
+    description: "ID of the in-cluster Runner an older Kubernetes agent chart installed on this cluster. Only this cluster's own in-cluster Runner can be bound. Binding it again needs Project Owner, Project Admin or Edit Auto Remediation Rule; anyone who may edit the cluster can clear it."
   }),
   Column({
     type: ColumnType_default.ObjectID,
@@ -155385,83 +155071,6 @@ __decorateClass([
     transformer: ObjectID.getDatabaseTransformer()
   })
 ], KubernetesCluster.prototype, "aiAccessRunnerId", 2);
-__decorateClass([
-  ColumnAccessControl_default({
-    create: [],
-    read: [
-      Permission_default.ProjectOwner,
-      Permission_default.ProjectAdmin,
-      Permission_default.ProjectMember,
-      Permission_default.Viewer,
-      Permission_default.SettingsAdmin,
-      Permission_default.SettingsMember,
-      Permission_default.SettingsViewer,
-      Permission_default.ReadKubernetesCluster
-    ],
-    update: [
-      Permission_default.ProjectOwner,
-      Permission_default.ProjectAdmin,
-      Permission_default.ProjectMember,
-      Permission_default.SettingsAdmin,
-      Permission_default.SettingsMember,
-      Permission_default.EditKubernetesCluster
-    ]
-  }),
-  TableColumn_default({
-    manyToOneRelationColumn: "aiAccessCredentialId",
-    type: TableColumnType_default.Entity,
-    modelType: RunbookCredential,
-    title: "AI Access Credential",
-    description: "The Kubernetes credential (API server URL and ServiceAccount token) the AI access Runner uses for this cluster; it must be a Kubernetes credential of this project that is assigned to that Runner. Leave empty for the in-cluster Runner, which uses its own ServiceAccount and is never given a credential. Binding a credential needs Project Owner, Project Admin or Edit Auto Remediation Rule, and also permission to read credentials (Project Owner, Project Admin or Read Runbook Credential); anyone who may edit the cluster can clear it."
-  }),
-  ManyToOne(
-    () => {
-      return RunbookCredential;
-    },
-    {
-      eager: false,
-      nullable: true,
-      onDelete: "SET NULL",
-      orphanedRowAction: "nullify"
-    }
-  ),
-  JoinColumn({ name: "aiAccessCredentialId" })
-], KubernetesCluster.prototype, "aiAccessCredential", 2);
-__decorateClass([
-  ColumnAccessControl_default({
-    create: [],
-    read: [
-      Permission_default.ProjectOwner,
-      Permission_default.ProjectAdmin,
-      Permission_default.ProjectMember,
-      Permission_default.Viewer,
-      Permission_default.SettingsAdmin,
-      Permission_default.SettingsMember,
-      Permission_default.SettingsViewer,
-      Permission_default.ReadKubernetesCluster
-    ],
-    update: [
-      Permission_default.ProjectOwner,
-      Permission_default.ProjectAdmin,
-      Permission_default.ProjectMember,
-      Permission_default.SettingsAdmin,
-      Permission_default.SettingsMember,
-      Permission_default.EditKubernetesCluster
-    ]
-  }),
-  TableColumn_default({
-    type: TableColumnType_default.ObjectID,
-    required: false,
-    canReadOnRelationQuery: true,
-    title: "AI Access Credential ID",
-    description: "ID of the Kubernetes credential the AI access Runner uses for this cluster; the credential must be assigned to that Runner. Empty for the in-cluster Runner, which is never given a credential. Binding a credential needs Project Owner, Project Admin or Edit Auto Remediation Rule, and also permission to read credentials (Project Owner, Project Admin or Read Runbook Credential); anyone who may edit the cluster can clear it."
-  }),
-  Column({
-    type: ColumnType_default.ObjectID,
-    nullable: true,
-    transformer: ObjectID.getDatabaseTransformer()
-  })
-], KubernetesCluster.prototype, "aiAccessCredentialId", 2);
 __decorateClass([
   ColumnAccessControl_default({
     create: [],
@@ -176225,6 +175834,10 @@ var MonitorStatus = class extends DatabaseBaseModel {
     this.isOperationalState = void 0;
     this.isOfflineState = void 0;
     this.priority = void 0;
+    this.isArchived = void 0;
+    this.archivedAt = void 0;
+    this.archivedByUser = void 0;
+    this.archivedByUserId = void 0;
   }
 };
 __name(MonitorStatus, "MonitorStatus");
@@ -176700,6 +176313,134 @@ __decorateClass([
     type: ColumnType_default.Number
   })
 ], MonitorStatus.prototype, "priority", 2);
+__decorateClass([
+  ColumnAccessControl_default({
+    create: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.MonitorAdmin,
+      Permission_default.CreateProjectMonitorStatus
+    ],
+    read: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.ProjectMember,
+      Permission_default.Viewer,
+      Permission_default.MonitorAdmin,
+      Permission_default.MonitorMember,
+      Permission_default.MonitorViewer,
+      Permission_default.ReadProjectMonitorStatus
+    ],
+    update: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.MonitorAdmin,
+      Permission_default.EditProjectMonitorStatus
+    ]
+  }),
+  TableColumn_default({
+    isDefaultValueColumn: true,
+    required: true,
+    type: TableColumnType_default.Boolean,
+    canReadOnRelationQuery: true,
+    title: "Is Archived",
+    description: "Archived statuses stay on the monitors that are in them, but can't be picked again. The operational and offline statuses can't be archived.",
+    defaultValue: false,
+    example: false
+  }),
+  Column({
+    type: ColumnType_default.Boolean,
+    nullable: false,
+    default: false
+  })
+], MonitorStatus.prototype, "isArchived", 2);
+__decorateClass([
+  ColumnAccessControl_default({
+    create: [],
+    read: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.ProjectMember,
+      Permission_default.Viewer,
+      Permission_default.MonitorAdmin,
+      Permission_default.MonitorMember,
+      Permission_default.MonitorViewer,
+      Permission_default.ReadProjectMonitorStatus
+    ],
+    update: []
+  }),
+  TableColumn_default({
+    required: false,
+    type: TableColumnType_default.Date,
+    title: "Archived At",
+    description: "When this monitor status was archived. Empty while it is not archived."
+  }),
+  Column({
+    type: ColumnType_default.Date,
+    nullable: true
+  })
+], MonitorStatus.prototype, "archivedAt", 2);
+__decorateClass([
+  ColumnAccessControl_default({
+    create: [],
+    read: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.ProjectMember,
+      Permission_default.Viewer,
+      Permission_default.MonitorAdmin,
+      Permission_default.MonitorMember,
+      Permission_default.MonitorViewer,
+      Permission_default.ReadProjectMonitorStatus
+    ],
+    update: []
+  }),
+  TableColumn_default({
+    manyToOneRelationColumn: "archivedByUserId",
+    type: TableColumnType_default.Entity,
+    modelType: User_default,
+    title: "Archived by User",
+    description: "Relation to User who archived this object (if this object was archived by a User)"
+  }),
+  ManyToOne(
+    () => {
+      return User_default;
+    },
+    {
+      eager: false,
+      nullable: true,
+      onDelete: "SET NULL",
+      orphanedRowAction: "nullify"
+    }
+  ),
+  JoinColumn({ name: "archivedByUserId" })
+], MonitorStatus.prototype, "archivedByUser", 2);
+__decorateClass([
+  ColumnAccessControl_default({
+    create: [],
+    read: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.ProjectMember,
+      Permission_default.Viewer,
+      Permission_default.MonitorAdmin,
+      Permission_default.MonitorMember,
+      Permission_default.MonitorViewer,
+      Permission_default.ReadProjectMonitorStatus
+    ],
+    update: []
+  }),
+  TableColumn_default({
+    type: TableColumnType_default.ObjectID,
+    title: "Archived by User ID",
+    description: "User ID who archived this object (if this object was archived by a User)"
+  }),
+  Column({
+    type: ColumnType_default.ObjectID,
+    nullable: true,
+    transformer: ObjectID.getDatabaseTransformer()
+  })
+], MonitorStatus.prototype, "archivedByUserId", 2);
 MonitorStatus = __decorateClass([
   TableBillingAccessControl_default({
     create: "Growth" /* Growth */,
@@ -176747,6 +176488,7 @@ MonitorStatus = __decorateClass([
     update: true,
     read: true
   }),
+  EnableAuditLog_default(),
   CrudApiEndpoint_default(new Route("/monitor-status")),
   SlugifyColumn_default("name", "slug"),
   TableMetadata_default({
@@ -231200,6 +230942,10 @@ var IncidentRole = class extends DatabaseBaseModel {
     this.isPrimaryRole = void 0;
     this.isDeleteable = void 0;
     this.canAssignMultipleUsers = void 0;
+    this.isArchived = void 0;
+    this.archivedAt = void 0;
+    this.archivedByUser = void 0;
+    this.archivedByUserId = void 0;
   }
 };
 __name(IncidentRole, "IncidentRole");
@@ -231716,6 +231462,138 @@ __decorateClass([
     default: false
   })
 ], IncidentRole.prototype, "canAssignMultipleUsers", 2);
+__decorateClass([
+  ColumnAccessControl_default({
+    create: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.ProjectMember,
+      Permission_default.IncidentAdmin,
+      Permission_default.IncidentMember,
+      Permission_default.CreateIncidentRole
+    ],
+    read: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.ProjectMember,
+      Permission_default.Viewer,
+      Permission_default.IncidentAdmin,
+      Permission_default.IncidentMember,
+      Permission_default.IncidentViewer,
+      Permission_default.ReadIncidentRole
+    ],
+    update: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.ProjectMember,
+      Permission_default.IncidentAdmin,
+      Permission_default.IncidentMember,
+      Permission_default.EditIncidentRole
+    ]
+  }),
+  TableColumn_default({
+    isDefaultValueColumn: true,
+    required: true,
+    type: TableColumnType_default.Boolean,
+    canReadOnRelationQuery: true,
+    title: "Is Archived",
+    description: "Archived roles stay on the incidents people hold them on, but nobody can be given them again. The primary role can't be archived.",
+    defaultValue: false,
+    example: false
+  }),
+  Column({
+    type: ColumnType_default.Boolean,
+    nullable: false,
+    default: false
+  })
+], IncidentRole.prototype, "isArchived", 2);
+__decorateClass([
+  ColumnAccessControl_default({
+    create: [],
+    read: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.ProjectMember,
+      Permission_default.Viewer,
+      Permission_default.IncidentAdmin,
+      Permission_default.IncidentMember,
+      Permission_default.IncidentViewer,
+      Permission_default.ReadIncidentRole
+    ],
+    update: []
+  }),
+  TableColumn_default({
+    required: false,
+    type: TableColumnType_default.Date,
+    title: "Archived At",
+    description: "When this incident role was archived. Empty while it is not archived."
+  }),
+  Column({
+    type: ColumnType_default.Date,
+    nullable: true
+  })
+], IncidentRole.prototype, "archivedAt", 2);
+__decorateClass([
+  ColumnAccessControl_default({
+    create: [],
+    read: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.ProjectMember,
+      Permission_default.Viewer,
+      Permission_default.IncidentAdmin,
+      Permission_default.IncidentMember,
+      Permission_default.IncidentViewer,
+      Permission_default.ReadIncidentRole
+    ],
+    update: []
+  }),
+  TableColumn_default({
+    manyToOneRelationColumn: "archivedByUserId",
+    type: TableColumnType_default.Entity,
+    modelType: User_default,
+    title: "Archived by User",
+    description: "Relation to User who archived this object (if this object was archived by a User)"
+  }),
+  ManyToOne(
+    () => {
+      return User_default;
+    },
+    {
+      eager: false,
+      nullable: true,
+      onDelete: "SET NULL",
+      orphanedRowAction: "nullify"
+    }
+  ),
+  JoinColumn({ name: "archivedByUserId" })
+], IncidentRole.prototype, "archivedByUser", 2);
+__decorateClass([
+  ColumnAccessControl_default({
+    create: [],
+    read: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.ProjectMember,
+      Permission_default.Viewer,
+      Permission_default.IncidentAdmin,
+      Permission_default.IncidentMember,
+      Permission_default.IncidentViewer,
+      Permission_default.ReadIncidentRole
+    ],
+    update: []
+  }),
+  TableColumn_default({
+    type: TableColumnType_default.ObjectID,
+    title: "Archived by User ID",
+    description: "User ID who archived this object (if this object was archived by a User)"
+  }),
+  Column({
+    type: ColumnType_default.ObjectID,
+    nullable: true,
+    transformer: ObjectID.getDatabaseTransformer()
+  })
+], IncidentRole.prototype, "archivedByUserId", 2);
 IncidentRole = __decorateClass([
   TableBillingAccessControl_default({
     create: "Growth" /* Growth */,
@@ -231767,6 +231645,7 @@ IncidentRole = __decorateClass([
     update: true,
     read: true
   }),
+  EnableAuditLog_default(),
   CrudApiEndpoint_default(new Route("/incident-role")),
   SlugifyColumn_default("name", "slug"),
   TableMetadata_default({
@@ -234397,6 +234276,10 @@ var IncidentState = class extends DatabaseBaseModel {
     this.isAcknowledgedState = void 0;
     this.isResolvedState = void 0;
     this.order = void 0;
+    this.isArchived = void 0;
+    this.archivedAt = void 0;
+    this.archivedByUser = void 0;
+    this.archivedByUserId = void 0;
   }
 };
 __name(IncidentState, "IncidentState");
@@ -234905,6 +234788,134 @@ __decorateClass([
     type: ColumnType_default.SmallNumber
   })
 ], IncidentState.prototype, "order", 2);
+__decorateClass([
+  ColumnAccessControl_default({
+    create: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.IncidentAdmin,
+      Permission_default.CreateIncidentState
+    ],
+    read: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.ProjectMember,
+      Permission_default.Viewer,
+      Permission_default.IncidentAdmin,
+      Permission_default.IncidentMember,
+      Permission_default.IncidentViewer,
+      Permission_default.ReadIncidentState
+    ],
+    update: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.IncidentAdmin,
+      Permission_default.EditIncidentState
+    ]
+  }),
+  TableColumn_default({
+    isDefaultValueColumn: true,
+    required: true,
+    type: TableColumnType_default.Boolean,
+    canReadOnRelationQuery: true,
+    title: "Is Archived",
+    description: "Archived states stay on the incidents and episodes that are in them, but can't be picked again. The created, acknowledged and resolved states can't be archived.",
+    defaultValue: false,
+    example: false
+  }),
+  Column({
+    type: ColumnType_default.Boolean,
+    nullable: false,
+    default: false
+  })
+], IncidentState.prototype, "isArchived", 2);
+__decorateClass([
+  ColumnAccessControl_default({
+    create: [],
+    read: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.ProjectMember,
+      Permission_default.Viewer,
+      Permission_default.IncidentAdmin,
+      Permission_default.IncidentMember,
+      Permission_default.IncidentViewer,
+      Permission_default.ReadIncidentState
+    ],
+    update: []
+  }),
+  TableColumn_default({
+    required: false,
+    type: TableColumnType_default.Date,
+    title: "Archived At",
+    description: "When this incident state was archived. Empty while it is not archived."
+  }),
+  Column({
+    type: ColumnType_default.Date,
+    nullable: true
+  })
+], IncidentState.prototype, "archivedAt", 2);
+__decorateClass([
+  ColumnAccessControl_default({
+    create: [],
+    read: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.ProjectMember,
+      Permission_default.Viewer,
+      Permission_default.IncidentAdmin,
+      Permission_default.IncidentMember,
+      Permission_default.IncidentViewer,
+      Permission_default.ReadIncidentState
+    ],
+    update: []
+  }),
+  TableColumn_default({
+    manyToOneRelationColumn: "archivedByUserId",
+    type: TableColumnType_default.Entity,
+    modelType: User_default,
+    title: "Archived by User",
+    description: "Relation to User who archived this object (if this object was archived by a User)"
+  }),
+  ManyToOne(
+    () => {
+      return User_default;
+    },
+    {
+      eager: false,
+      nullable: true,
+      onDelete: "SET NULL",
+      orphanedRowAction: "nullify"
+    }
+  ),
+  JoinColumn({ name: "archivedByUserId" })
+], IncidentState.prototype, "archivedByUser", 2);
+__decorateClass([
+  ColumnAccessControl_default({
+    create: [],
+    read: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.ProjectMember,
+      Permission_default.Viewer,
+      Permission_default.IncidentAdmin,
+      Permission_default.IncidentMember,
+      Permission_default.IncidentViewer,
+      Permission_default.ReadIncidentState
+    ],
+    update: []
+  }),
+  TableColumn_default({
+    type: TableColumnType_default.ObjectID,
+    title: "Archived by User ID",
+    description: "User ID who archived this object (if this object was archived by a User)"
+  }),
+  Column({
+    type: ColumnType_default.ObjectID,
+    nullable: true,
+    transformer: ObjectID.getDatabaseTransformer()
+  })
+], IncidentState.prototype, "archivedByUserId", 2);
 IncidentState = __decorateClass([
   TableBillingAccessControl_default({
     create: "Growth" /* Growth */,
@@ -234952,6 +234963,7 @@ IncidentState = __decorateClass([
     update: true,
     read: true
   }),
+  EnableAuditLog_default(),
   CrudApiEndpoint_default(new Route("/incident-state")),
   SlugifyColumn_default("name", "slug"),
   TableMetadata_default({
@@ -236756,6 +236768,728 @@ IncidentEpisode = __decorateClass([
   })
 ], IncidentEpisode);
 
+// ../Common/Models/DatabaseModels/IncidentPostmortemStatus.ts
+var IncidentPostmortemStatus = class extends DatabaseBaseModel {
+  constructor() {
+    super(...arguments);
+    this.project = void 0;
+    this.projectId = void 0;
+    this.name = void 0;
+    this.slug = void 0;
+    this.description = void 0;
+    this.createdByUser = void 0;
+    this.createdByUserId = void 0;
+    this.deletedByUser = void 0;
+    this.deletedByUserId = void 0;
+    this.color = void 0;
+    this.isNotStartedStatus = void 0;
+    this.isDraftStatus = void 0;
+    this.isCompletedStatus = void 0;
+    this.order = void 0;
+    this.isArchived = void 0;
+    this.archivedAt = void 0;
+    this.archivedByUser = void 0;
+    this.archivedByUserId = void 0;
+  }
+};
+__name(IncidentPostmortemStatus, "IncidentPostmortemStatus");
+__decorateClass([
+  ColumnAccessControl_default({
+    create: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.IncidentAdmin,
+      Permission_default.CreateIncidentPostmortemStatus
+    ],
+    read: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.ProjectMember,
+      Permission_default.Viewer,
+      Permission_default.IncidentAdmin,
+      Permission_default.IncidentMember,
+      Permission_default.IncidentViewer,
+      Permission_default.ReadIncidentPostmortemStatus
+    ],
+    update: []
+  }),
+  TableColumn_default({
+    manyToOneRelationColumn: "projectId",
+    type: TableColumnType_default.Entity,
+    modelType: Project,
+    title: "Project",
+    description: "Relation to Project Resource in which this object belongs"
+  }),
+  ManyToOne(
+    () => {
+      return Project;
+    },
+    {
+      eager: false,
+      nullable: true,
+      onDelete: "CASCADE",
+      orphanedRowAction: "nullify"
+    }
+  ),
+  JoinColumn({ name: "projectId" })
+], IncidentPostmortemStatus.prototype, "project", 2);
+__decorateClass([
+  ColumnAccessControl_default({
+    create: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.IncidentAdmin,
+      Permission_default.CreateIncidentPostmortemStatus
+    ],
+    read: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.ProjectMember,
+      Permission_default.Viewer,
+      Permission_default.IncidentAdmin,
+      Permission_default.IncidentMember,
+      Permission_default.IncidentViewer,
+      Permission_default.ReadIncidentPostmortemStatus
+    ],
+    update: []
+  }),
+  Index(),
+  TableColumn_default({
+    type: TableColumnType_default.ObjectID,
+    required: true,
+    canReadOnRelationQuery: true,
+    title: "Project ID",
+    description: "ID of your OneUptime Project in which this object belongs",
+    example: "5f8b9c0d-e1a2-4b3c-8d5e-6f7a8b9c0d1e"
+  }),
+  Column({
+    type: ColumnType_default.ObjectID,
+    nullable: false,
+    transformer: ObjectID.getDatabaseTransformer()
+  })
+], IncidentPostmortemStatus.prototype, "projectId", 2);
+__decorateClass([
+  ColumnAccessControl_default({
+    create: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.IncidentAdmin,
+      Permission_default.CreateIncidentPostmortemStatus
+    ],
+    read: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.ProjectMember,
+      Permission_default.Viewer,
+      Permission_default.IncidentAdmin,
+      Permission_default.IncidentMember,
+      Permission_default.IncidentViewer,
+      Permission_default.ReadIncidentPostmortemStatus
+    ],
+    update: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.IncidentAdmin,
+      Permission_default.EditIncidentPostmortemStatus
+    ]
+  }),
+  TableColumn_default({
+    required: true,
+    type: TableColumnType_default.ShortText,
+    canReadOnRelationQuery: true,
+    title: "Name",
+    description: "Any friendly name of this object",
+    example: "In Review"
+  }),
+  Column({
+    nullable: false,
+    type: ColumnType_default.ShortText,
+    length: ColumnLength_default.ShortText
+  }),
+  UniqueColumnBy_default("projectId")
+], IncidentPostmortemStatus.prototype, "name", 2);
+__decorateClass([
+  ColumnAccessControl_default({
+    create: [],
+    read: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.ProjectMember,
+      Permission_default.Viewer,
+      Permission_default.IncidentAdmin,
+      Permission_default.IncidentMember,
+      Permission_default.IncidentViewer,
+      Permission_default.ReadIncidentPostmortemStatus
+    ],
+    update: []
+  }),
+  TableColumn_default({
+    required: true,
+    unique: true,
+    type: TableColumnType_default.Slug,
+    computed: true,
+    title: "Slug",
+    description: "Friendly globally unique name for your object"
+  }),
+  Column({
+    nullable: false,
+    type: ColumnType_default.Slug,
+    length: ColumnLength_default.Slug
+  })
+], IncidentPostmortemStatus.prototype, "slug", 2);
+__decorateClass([
+  ColumnAccessControl_default({
+    create: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.IncidentAdmin,
+      Permission_default.CreateIncidentPostmortemStatus
+    ],
+    read: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.ProjectMember,
+      Permission_default.Viewer,
+      Permission_default.IncidentAdmin,
+      Permission_default.IncidentMember,
+      Permission_default.IncidentViewer,
+      Permission_default.ReadIncidentPostmortemStatus
+    ],
+    update: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.IncidentAdmin,
+      Permission_default.EditIncidentPostmortemStatus
+    ]
+  }),
+  TableColumn_default({
+    required: false,
+    type: TableColumnType_default.LongText,
+    title: "Description",
+    description: "Friendly description that will help you remember",
+    example: "The postmortem is written and waiting for the team's review."
+  }),
+  Column({
+    nullable: true,
+    type: ColumnType_default.LongText,
+    length: ColumnLength_default.LongText
+  })
+], IncidentPostmortemStatus.prototype, "description", 2);
+__decorateClass([
+  ColumnAccessControl_default({
+    create: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.IncidentAdmin,
+      Permission_default.CreateIncidentPostmortemStatus
+    ],
+    read: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.ProjectMember,
+      Permission_default.Viewer,
+      Permission_default.IncidentAdmin,
+      Permission_default.IncidentMember,
+      Permission_default.IncidentViewer,
+      Permission_default.ReadIncidentPostmortemStatus
+    ],
+    update: []
+  }),
+  TableColumn_default({
+    manyToOneRelationColumn: "createdByUserId",
+    type: TableColumnType_default.Entity,
+    modelType: User_default,
+    title: "Created by User",
+    description: "Relation to User who created this object (if this object was created by a User)"
+  }),
+  ManyToOne(
+    () => {
+      return User_default;
+    },
+    {
+      eager: false,
+      nullable: true,
+      onDelete: "SET NULL",
+      orphanedRowAction: "nullify"
+    }
+  ),
+  JoinColumn({ name: "createdByUserId" })
+], IncidentPostmortemStatus.prototype, "createdByUser", 2);
+__decorateClass([
+  ColumnAccessControl_default({
+    create: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.IncidentAdmin,
+      Permission_default.CreateIncidentPostmortemStatus
+    ],
+    read: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.ProjectMember,
+      Permission_default.Viewer,
+      Permission_default.IncidentAdmin,
+      Permission_default.IncidentMember,
+      Permission_default.IncidentViewer,
+      Permission_default.ReadIncidentPostmortemStatus
+    ],
+    update: []
+  }),
+  TableColumn_default({
+    type: TableColumnType_default.ObjectID,
+    title: "Created by User ID",
+    description: "User ID who created this object (if this object was created by a User)"
+  }),
+  Column({
+    type: ColumnType_default.ObjectID,
+    nullable: true,
+    transformer: ObjectID.getDatabaseTransformer()
+  })
+], IncidentPostmortemStatus.prototype, "createdByUserId", 2);
+__decorateClass([
+  ColumnAccessControl_default({
+    create: [],
+    read: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.ProjectMember,
+      Permission_default.Viewer,
+      Permission_default.IncidentAdmin,
+      Permission_default.IncidentMember,
+      Permission_default.IncidentViewer,
+      Permission_default.ReadIncidentPostmortemStatus
+    ],
+    update: []
+  }),
+  TableColumn_default({
+    manyToOneRelationColumn: "deletedByUserId",
+    type: TableColumnType_default.Entity,
+    title: "Deleted by User",
+    modelType: User_default,
+    description: "Relation to User who deleted this object (if this object was deleted by a User)"
+  }),
+  ManyToOne(
+    () => {
+      return User_default;
+    },
+    {
+      cascade: false,
+      eager: false,
+      nullable: true,
+      onDelete: "SET NULL",
+      orphanedRowAction: "nullify"
+    }
+  ),
+  JoinColumn({ name: "deletedByUserId" })
+], IncidentPostmortemStatus.prototype, "deletedByUser", 2);
+__decorateClass([
+  ColumnAccessControl_default({
+    create: [],
+    read: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.ProjectMember,
+      Permission_default.Viewer,
+      Permission_default.IncidentAdmin,
+      Permission_default.IncidentMember,
+      Permission_default.IncidentViewer,
+      Permission_default.ReadIncidentPostmortemStatus
+    ],
+    update: []
+  }),
+  TableColumn_default({
+    type: TableColumnType_default.ObjectID,
+    title: "Deleted by User ID",
+    description: "User ID who deleted this object (if this object was deleted by a User)"
+  }),
+  Column({
+    type: ColumnType_default.ObjectID,
+    nullable: true,
+    transformer: ObjectID.getDatabaseTransformer()
+  })
+], IncidentPostmortemStatus.prototype, "deletedByUserId", 2);
+__decorateClass([
+  ColumnAccessControl_default({
+    create: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.IncidentAdmin,
+      Permission_default.CreateIncidentPostmortemStatus
+    ],
+    read: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.ProjectMember,
+      Permission_default.Viewer,
+      Permission_default.IncidentAdmin,
+      Permission_default.IncidentMember,
+      Permission_default.IncidentViewer,
+      Permission_default.ReadIncidentPostmortemStatus
+    ],
+    update: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.IncidentAdmin,
+      Permission_default.EditIncidentPostmortemStatus
+    ]
+  }),
+  ColorField_default(),
+  TableColumn_default({
+    title: "Color",
+    required: true,
+    unique: false,
+    type: TableColumnType_default.Color,
+    canReadOnRelationQuery: true,
+    description: "Color of this resource in Hex (#32a852 for example)"
+  }),
+  Column({
+    type: ColumnType_default.Color,
+    length: ColumnLength_default.Color,
+    unique: false,
+    nullable: false,
+    transformer: Color.getDatabaseTransformer()
+  })
+], IncidentPostmortemStatus.prototype, "color", 2);
+__decorateClass([
+  ColumnAccessControl_default({
+    create: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.IncidentAdmin,
+      Permission_default.CreateIncidentPostmortemStatus
+    ],
+    read: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.ProjectMember,
+      Permission_default.Viewer,
+      Permission_default.IncidentAdmin,
+      Permission_default.IncidentMember,
+      Permission_default.IncidentViewer,
+      Permission_default.ReadIncidentPostmortemStatus
+    ],
+    update: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.IncidentAdmin,
+      Permission_default.EditIncidentPostmortemStatus
+    ]
+  }),
+  TableColumn_default({
+    isDefaultValueColumn: false,
+    type: TableColumnType_default.Boolean,
+    canReadOnRelationQuery: true,
+    title: "Is Not Started Status",
+    description: "Is it the status a new incident's postmortem starts in? A project has one, and it can't be deleted or archived."
+  }),
+  Column({
+    type: ColumnType_default.Boolean,
+    default: false
+  })
+], IncidentPostmortemStatus.prototype, "isNotStartedStatus", 2);
+__decorateClass([
+  ColumnAccessControl_default({
+    create: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.IncidentAdmin,
+      Permission_default.CreateIncidentPostmortemStatus
+    ],
+    read: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.ProjectMember,
+      Permission_default.Viewer,
+      Permission_default.IncidentAdmin,
+      Permission_default.IncidentMember,
+      Permission_default.IncidentViewer,
+      Permission_default.ReadIncidentPostmortemStatus
+    ],
+    update: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.IncidentAdmin,
+      Permission_default.EditIncidentPostmortemStatus
+    ]
+  }),
+  TableColumn_default({
+    isDefaultValueColumn: false,
+    type: TableColumnType_default.Boolean,
+    canReadOnRelationQuery: true,
+    title: "Is Draft Status",
+    description: "Is it the status a postmortem moves to once its note is written? A project has one, and it can't be deleted or archived."
+  }),
+  Column({
+    type: ColumnType_default.Boolean,
+    default: false
+  })
+], IncidentPostmortemStatus.prototype, "isDraftStatus", 2);
+__decorateClass([
+  ColumnAccessControl_default({
+    create: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.IncidentAdmin,
+      Permission_default.CreateIncidentPostmortemStatus
+    ],
+    read: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.ProjectMember,
+      Permission_default.Viewer,
+      Permission_default.IncidentAdmin,
+      Permission_default.IncidentMember,
+      Permission_default.IncidentViewer,
+      Permission_default.ReadIncidentPostmortemStatus
+    ],
+    update: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.IncidentAdmin,
+      Permission_default.EditIncidentPostmortemStatus
+    ]
+  }),
+  TableColumn_default({
+    isDefaultValueColumn: false,
+    type: TableColumnType_default.Boolean,
+    canReadOnRelationQuery: true,
+    title: "Is Completed Status",
+    description: "Is it the status a postmortem moves to once it is published on a status page? A postmortem in this status, or in one below it, counts as done. A project has one, and it can't be deleted or archived."
+  }),
+  Column({
+    type: ColumnType_default.Boolean,
+    default: false
+  })
+], IncidentPostmortemStatus.prototype, "isCompletedStatus", 2);
+__decorateClass([
+  ColumnAccessControl_default({
+    create: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.IncidentAdmin,
+      Permission_default.CreateIncidentPostmortemStatus
+    ],
+    read: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.ProjectMember,
+      Permission_default.Viewer,
+      Permission_default.IncidentAdmin,
+      Permission_default.IncidentMember,
+      Permission_default.IncidentViewer,
+      Permission_default.ReadIncidentPostmortemStatus
+    ],
+    update: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.IncidentAdmin,
+      Permission_default.EditIncidentPostmortemStatus
+    ]
+  }),
+  TableColumn_default({
+    isDefaultValueColumn: false,
+    type: TableColumnType_default.SmallNumber,
+    canReadOnRelationQuery: true,
+    title: "Order",
+    required: false,
+    description: "Where this status sits in the project's list of postmortem statuses: 1 is the top. A postmortem in the completed status, or in a status below it, counts as done; one above it is still owed. So the not started, draft and completed statuses have to stay in that order. A new status without a number goes just above the completed status. Setting a number moves the status to that place, and the ones in between shift by one. In the dashboard, drag the rows to reorder them."
+  }),
+  Column({
+    type: ColumnType_default.SmallNumber
+  })
+], IncidentPostmortemStatus.prototype, "order", 2);
+__decorateClass([
+  ColumnAccessControl_default({
+    create: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.IncidentAdmin,
+      Permission_default.CreateIncidentPostmortemStatus
+    ],
+    read: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.ProjectMember,
+      Permission_default.Viewer,
+      Permission_default.IncidentAdmin,
+      Permission_default.IncidentMember,
+      Permission_default.IncidentViewer,
+      Permission_default.ReadIncidentPostmortemStatus
+    ],
+    update: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.IncidentAdmin,
+      Permission_default.EditIncidentPostmortemStatus
+    ]
+  }),
+  TableColumn_default({
+    isDefaultValueColumn: true,
+    required: true,
+    type: TableColumnType_default.Boolean,
+    canReadOnRelationQuery: true,
+    title: "Is Archived",
+    description: "Archived statuses stay on the incidents whose postmortems are in them, but can't be picked again. The not started, draft and completed statuses can't be archived.",
+    defaultValue: false,
+    example: false
+  }),
+  Column({
+    type: ColumnType_default.Boolean,
+    nullable: false,
+    default: false
+  })
+], IncidentPostmortemStatus.prototype, "isArchived", 2);
+__decorateClass([
+  ColumnAccessControl_default({
+    create: [],
+    read: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.ProjectMember,
+      Permission_default.Viewer,
+      Permission_default.IncidentAdmin,
+      Permission_default.IncidentMember,
+      Permission_default.IncidentViewer,
+      Permission_default.ReadIncidentPostmortemStatus
+    ],
+    update: []
+  }),
+  TableColumn_default({
+    required: false,
+    type: TableColumnType_default.Date,
+    title: "Archived At",
+    description: "When this postmortem status was archived. Empty while it is not archived."
+  }),
+  Column({
+    type: ColumnType_default.Date,
+    nullable: true
+  })
+], IncidentPostmortemStatus.prototype, "archivedAt", 2);
+__decorateClass([
+  ColumnAccessControl_default({
+    create: [],
+    read: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.ProjectMember,
+      Permission_default.Viewer,
+      Permission_default.IncidentAdmin,
+      Permission_default.IncidentMember,
+      Permission_default.IncidentViewer,
+      Permission_default.ReadIncidentPostmortemStatus
+    ],
+    update: []
+  }),
+  TableColumn_default({
+    manyToOneRelationColumn: "archivedByUserId",
+    type: TableColumnType_default.Entity,
+    modelType: User_default,
+    title: "Archived by User",
+    description: "Relation to User who archived this object (if this object was archived by a User)"
+  }),
+  ManyToOne(
+    () => {
+      return User_default;
+    },
+    {
+      eager: false,
+      nullable: true,
+      onDelete: "SET NULL",
+      orphanedRowAction: "nullify"
+    }
+  ),
+  JoinColumn({ name: "archivedByUserId" })
+], IncidentPostmortemStatus.prototype, "archivedByUser", 2);
+__decorateClass([
+  ColumnAccessControl_default({
+    create: [],
+    read: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.ProjectMember,
+      Permission_default.Viewer,
+      Permission_default.IncidentAdmin,
+      Permission_default.IncidentMember,
+      Permission_default.IncidentViewer,
+      Permission_default.ReadIncidentPostmortemStatus
+    ],
+    update: []
+  }),
+  TableColumn_default({
+    type: TableColumnType_default.ObjectID,
+    title: "Archived by User ID",
+    description: "User ID who archived this object (if this object was archived by a User)"
+  }),
+  Column({
+    type: ColumnType_default.ObjectID,
+    nullable: true,
+    transformer: ObjectID.getDatabaseTransformer()
+  })
+], IncidentPostmortemStatus.prototype, "archivedByUserId", 2);
+IncidentPostmortemStatus = __decorateClass([
+  TableBillingAccessControl_default({
+    create: "Growth" /* Growth */,
+    read: "Free" /* Free */,
+    update: "Growth" /* Growth */,
+    delete: "Free" /* Free */
+  }),
+  EnableDocumentation_default(),
+  EnableMCP_default(),
+  TenantColumn_default("projectId"),
+  ListOrderColumn_default({ column: "order", scopeColumns: ["projectId"] }),
+  TableAccessControl_default({
+    create: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.IncidentAdmin,
+      Permission_default.CreateIncidentPostmortemStatus
+    ],
+    read: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.ProjectMember,
+      Permission_default.Viewer,
+      Permission_default.IncidentAdmin,
+      Permission_default.IncidentMember,
+      Permission_default.IncidentViewer,
+      Permission_default.ReadIncidentPostmortemStatus
+    ],
+    delete: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.IncidentAdmin,
+      Permission_default.DeleteIncidentPostmortemStatus
+    ],
+    update: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.IncidentAdmin,
+      Permission_default.EditIncidentPostmortemStatus
+    ]
+  }),
+  EnableWorkflow_default({
+    create: true,
+    delete: true,
+    update: true,
+    read: true
+  }),
+  EnableAuditLog_default(),
+  CrudApiEndpoint_default(new Route("/incident-postmortem-status")),
+  SlugifyColumn_default("name", "slug"),
+  TableMetadata_default({
+    tableName: "IncidentPostmortemStatus",
+    singularName: "Postmortem Status",
+    pluralName: "Postmortem Statuses",
+    icon: IconProp_default.ClipboardDocumentCheck,
+    tableDescription: "Manage the statuses an incident's postmortem moves through (Not Started, Draft, Completed for example). Add, edit, reorder or archive them."
+  }),
+  Entity({
+    name: "IncidentPostmortemStatus"
+  }),
+  Index(["projectId", "isNotStartedStatus"]),
+  Index(["projectId", "order"])
+], IncidentPostmortemStatus);
+
 // ../Common/Types/ServiceLevelObjective/SliType.ts
 var SliType = /* @__PURE__ */ ((SliType2) => {
   SliType2["MonitorUptime"] = "Monitor Uptime";
@@ -239324,6 +240058,7 @@ __decorateClass([
     title: "Transport",
     description: "How OneUptime delivers mail for this config. 'SMTP' uses the hostname/port. 'Microsoft Graph' sends via the Microsoft Graph REST API \u2014 use this when your Microsoft 365 tenant has SMTP AUTH disabled.",
     defaultValue: MailTransportType_default.SMTP,
+    isDefaultValueColumn: true,
     example: "SMTP"
   }),
   Column({
@@ -239362,6 +240097,7 @@ __decorateClass([
     title: "Authentication Type",
     description: "The type of authentication to use for this SMTP server. Options: Username and Password, OAuth, or None.",
     defaultValue: SMTPAuthenticationType_default.UsernamePassword,
+    isDefaultValueColumn: true,
     example: "Username and Password"
   }),
   Column({
@@ -243698,6 +244434,8 @@ var Incident = class extends DatabaseBaseModel {
     this.notifySubscribersOnPostmortemPublished = void 0;
     this.postmortemPostedAt = void 0;
     this.postmortemAttachments = void 0;
+    this.postmortemStatus = void 0;
+    this.postmortemStatusId = void 0;
     this.createdStateLog = void 0;
     this.createdCriteriaId = void 0;
     this.createdIncidentTemplateId = void 0;
@@ -245783,69 +246521,151 @@ __decorateClass([
     ]
   }),
   TableColumn_default({
-    isDefaultValueColumn: false,
+    isDefaultValueColumn: false,
+    required: false,
+    type: TableColumnType_default.JSON,
+    title: "Custom Fields",
+    description: "The incident's custom field values, keyed by each incident custom field's name. When a user or an API key creates or updates an incident, each value it sets or changes must fit its field - a number for a Number field, true or false for a Boolean, one of the options for a Dropdown, and so on - or the request is refused. Values left as they were, keys that are not the name of a field and empty values are not checked. Required on Create is not enforced here: it applies to the dashboard's Declare Incident form only."
+  }),
+  Column({
+    type: ColumnType_default.JSON,
+    nullable: true
+  })
+], Incident.prototype, "customFields", 2);
+__decorateClass([
+  ColumnAccessControl_default({ create: [], read: [], update: [] }),
+  TableColumn_default({
+    required: false,
+    type: TableColumnType_default.JSON,
+    title: "AI Investigation Decision",
+    description: "Internal: the reason automatic AI investigation did not start when this record was created."
+  }),
+  Column({ type: ColumnType_default.JSON, nullable: true })
+], Incident.prototype, "aiInvestigationDecision", 2);
+__decorateClass([
+  ColumnAccessControl_default({ create: [], read: [], update: [] }),
+  TableColumn_default({
+    required: false,
+    type: TableColumnType_default.Date,
+    title: "AI Investigation Waits Until",
+    description: "Internal: while an investigation rule makes OneUptime AI wait before it investigates this record, when the wait ends."
+  }),
+  Column({ type: ColumnType_default.Date, nullable: true })
+], Incident.prototype, "aiInvestigationWaitUntil", 2);
+__decorateClass([
+  ColumnAccessControl_default({
+    create: [],
+    read: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.ProjectMember,
+      Permission_default.Viewer,
+      Permission_default.IncidentAdmin,
+      Permission_default.IncidentMember,
+      Permission_default.IncidentViewer,
+      Permission_default.ReadProjectIncident
+    ],
+    update: []
+  }),
+  Index(),
+  TableColumn_default({
+    type: TableColumnType_default.Boolean,
+    computed: true,
+    hideColumnInDocumentation: true,
+    required: true,
+    isDefaultValueColumn: true,
+    title: "Are Owners Notified Of Resource Creation?",
+    description: "Are owners notified of when this resource is created?",
+    defaultValue: false
+  }),
+  Column({
+    type: ColumnType_default.Boolean,
+    nullable: false,
+    default: false
+  })
+], Incident.prototype, "isOwnerNotifiedOfResourceCreation", 2);
+__decorateClass([
+  ColumnAccessControl_default({
+    create: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.ProjectMember,
+      Permission_default.IncidentAdmin,
+      Permission_default.IncidentMember,
+      Permission_default.CreateProjectIncident
+    ],
+    read: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.ProjectMember,
+      Permission_default.Viewer,
+      Permission_default.IncidentAdmin,
+      Permission_default.IncidentMember,
+      Permission_default.IncidentViewer,
+      Permission_default.ReadProjectIncident
+    ],
+    update: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.ProjectMember,
+      Permission_default.IncidentAdmin,
+      Permission_default.IncidentMember,
+      Permission_default.EditProjectIncident
+    ]
+  }),
+  TableColumn_default({
+    type: TableColumnType_default.Markdown,
+    required: false,
+    isDefaultValueColumn: false,
+    title: "Root Cause",
+    description: "What is the root cause of this incident?"
+  }),
+  Column({
+    type: ColumnType_default.Markdown,
+    nullable: true
+  })
+], Incident.prototype, "rootCause", 2);
+__decorateClass([
+  ColumnAccessControl_default({
+    create: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.ProjectMember,
+      Permission_default.IncidentAdmin,
+      Permission_default.IncidentMember,
+      Permission_default.CreateProjectIncident
+    ],
+    read: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.ProjectMember,
+      Permission_default.Viewer,
+      Permission_default.IncidentAdmin,
+      Permission_default.IncidentMember,
+      Permission_default.IncidentViewer,
+      Permission_default.ReadProjectIncident
+    ],
+    update: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.ProjectMember,
+      Permission_default.IncidentAdmin,
+      Permission_default.IncidentMember,
+      Permission_default.EditProjectIncident
+    ]
+  }),
+  TableColumn_default({
+    type: TableColumnType_default.Markdown,
     required: false,
-    type: TableColumnType_default.JSON,
-    title: "Custom Fields",
-    description: "The incident's custom field values, keyed by each incident custom field's name. When a user or an API key creates or updates an incident, each value it sets or changes must fit its field - a number for a Number field, true or false for a Boolean, one of the options for a Dropdown, and so on - or the request is refused. Values left as they were, keys that are not the name of a field and empty values are not checked. Required on Create is not enforced here: it applies to the dashboard's Declare Incident form only."
+    isDefaultValueColumn: false,
+    title: "Postmortem Note",
+    description: "Document the postmortem summary for this incident."
   }),
   Column({
-    type: ColumnType_default.JSON,
+    type: ColumnType_default.Markdown,
     nullable: true
   })
-], Incident.prototype, "customFields", 2);
-__decorateClass([
-  ColumnAccessControl_default({ create: [], read: [], update: [] }),
-  TableColumn_default({
-    required: false,
-    type: TableColumnType_default.JSON,
-    title: "AI Investigation Decision",
-    description: "Internal: the reason automatic AI investigation did not start when this record was created."
-  }),
-  Column({ type: ColumnType_default.JSON, nullable: true })
-], Incident.prototype, "aiInvestigationDecision", 2);
-__decorateClass([
-  ColumnAccessControl_default({ create: [], read: [], update: [] }),
-  TableColumn_default({
-    required: false,
-    type: TableColumnType_default.Date,
-    title: "AI Investigation Waits Until",
-    description: "Internal: while an investigation rule makes OneUptime AI wait before it investigates this record, when the wait ends."
-  }),
-  Column({ type: ColumnType_default.Date, nullable: true })
-], Incident.prototype, "aiInvestigationWaitUntil", 2);
-__decorateClass([
-  ColumnAccessControl_default({
-    create: [],
-    read: [
-      Permission_default.ProjectOwner,
-      Permission_default.ProjectAdmin,
-      Permission_default.ProjectMember,
-      Permission_default.Viewer,
-      Permission_default.IncidentAdmin,
-      Permission_default.IncidentMember,
-      Permission_default.IncidentViewer,
-      Permission_default.ReadProjectIncident
-    ],
-    update: []
-  }),
-  Index(),
-  TableColumn_default({
-    type: TableColumnType_default.Boolean,
-    computed: true,
-    hideColumnInDocumentation: true,
-    required: true,
-    isDefaultValueColumn: true,
-    title: "Are Owners Notified Of Resource Creation?",
-    description: "Are owners notified of when this resource is created?",
-    defaultValue: false
-  }),
-  Column({
-    type: ColumnType_default.Boolean,
-    nullable: false,
-    default: false
-  })
-], Incident.prototype, "isOwnerNotifiedOfResourceCreation", 2);
+], Incident.prototype, "postmortemNote", 2);
 __decorateClass([
   ColumnAccessControl_default({
     create: [
@@ -245876,17 +246696,17 @@ __decorateClass([
     ]
   }),
   TableColumn_default({
-    type: TableColumnType_default.Markdown,
-    required: false,
-    isDefaultValueColumn: false,
-    title: "Root Cause",
-    description: "What is the root cause of this incident?"
+    type: TableColumnType_default.Boolean,
+    title: "Show postmortem on status page?",
+    description: "Should the postmortem note and attachments be visible on the status page once published?",
+    defaultValue: false,
+    isDefaultValueColumn: true
   }),
   Column({
-    type: ColumnType_default.Markdown,
-    nullable: true
+    type: ColumnType_default.Boolean,
+    default: false
   })
-], Incident.prototype, "rootCause", 2);
+], Incident.prototype, "showPostmortemOnStatusPage", 2);
 __decorateClass([
   ColumnAccessControl_default({
     create: [
@@ -245917,17 +246737,17 @@ __decorateClass([
     ]
   }),
   TableColumn_default({
-    type: TableColumnType_default.Markdown,
-    required: false,
-    isDefaultValueColumn: false,
-    title: "Postmortem Note",
-    description: "Document the postmortem summary for this incident."
+    type: TableColumnType_default.Boolean,
+    title: "Notify Subscribers on Postmortem Published",
+    description: "Should subscribers be notified when the postmortem is published?",
+    defaultValue: true,
+    isDefaultValueColumn: true
   }),
   Column({
-    type: ColumnType_default.Markdown,
-    nullable: true
+    type: ColumnType_default.Boolean,
+    default: true
   })
-], Incident.prototype, "postmortemNote", 2);
+], Incident.prototype, "notifySubscribersOnPostmortemPublished", 2);
 __decorateClass([
   ColumnAccessControl_default({
     create: [
@@ -245958,17 +246778,16 @@ __decorateClass([
     ]
   }),
   TableColumn_default({
-    type: TableColumnType_default.Boolean,
-    title: "Show postmortem on status page?",
-    description: "Should the postmortem note and attachments be visible on the status page once published?",
-    defaultValue: false,
-    isDefaultValueColumn: true
+    type: TableColumnType_default.Date,
+    title: "Postmortem Posted At",
+    description: "Timestamp that will be shown alongside the published postmortem on the status page.",
+    required: false
   }),
   Column({
-    type: ColumnType_default.Boolean,
-    default: false
+    type: ColumnType_default.Date,
+    nullable: true
   })
-], Incident.prototype, "showPostmortemOnStatusPage", 2);
+], Incident.prototype, "postmortemPostedAt", 2);
 __decorateClass([
   ColumnAccessControl_default({
     create: [
@@ -245999,17 +246818,27 @@ __decorateClass([
     ]
   }),
   TableColumn_default({
-    type: TableColumnType_default.Boolean,
-    title: "Notify Subscribers on Postmortem Published",
-    description: "Should subscribers be notified when the postmortem is published?",
-    defaultValue: true,
-    isDefaultValueColumn: true
+    type: TableColumnType_default.EntityArray,
+    modelType: File,
+    title: "Postmortem Attachments",
+    description: "Files that accompany the postmortem note and can be shared publicly when enabled.",
+    required: false
   }),
-  Column({
-    type: ColumnType_default.Boolean,
-    default: true
+  ManyToMany(() => {
+    return File;
+  }),
+  JoinTable({
+    name: "IncidentPostmortemAttachmentFile",
+    joinColumn: {
+      name: "incidentId",
+      referencedColumnName: "_id"
+    },
+    inverseJoinColumn: {
+      name: "fileId",
+      referencedColumnName: "_id"
+    }
   })
-], Incident.prototype, "notifySubscribersOnPostmortemPublished", 2);
+], Incident.prototype, "postmortemAttachments", 2);
 __decorateClass([
   ColumnAccessControl_default({
     create: [
@@ -246040,16 +246869,24 @@ __decorateClass([
     ]
   }),
   TableColumn_default({
-    type: TableColumnType_default.Date,
-    title: "Postmortem Posted At",
-    description: "Timestamp that will be shown alongside the published postmortem on the status page.",
-    required: false
+    manyToOneRelationColumn: "postmortemStatusId",
+    type: TableColumnType_default.Entity,
+    modelType: IncidentPostmortemStatus,
+    title: "Postmortem Status",
+    description: "How far the incident's postmortem has come: Not Started, Draft, Completed or another of the project's postmortem statuses."
   }),
-  Column({
-    type: ColumnType_default.Date,
-    nullable: true
-  })
-], Incident.prototype, "postmortemPostedAt", 2);
+  ManyToOne(
+    () => {
+      return IncidentPostmortemStatus;
+    },
+    {
+      eager: false,
+      nullable: true,
+      orphanedRowAction: "nullify"
+    }
+  ),
+  JoinColumn({ name: "postmortemStatusId" })
+], Incident.prototype, "postmortemStatus", 2);
 __decorateClass([
   ColumnAccessControl_default({
     create: [
@@ -246079,28 +246916,21 @@ __decorateClass([
       Permission_default.EditProjectIncident
     ]
   }),
+  Index(),
   TableColumn_default({
-    type: TableColumnType_default.EntityArray,
-    modelType: File,
-    title: "Postmortem Attachments",
-    description: "Files that accompany the postmortem note and can be shared publicly when enabled.",
-    required: false
-  }),
-  ManyToMany(() => {
-    return File;
+    type: TableColumnType_default.ObjectID,
+    required: false,
+    canReadOnRelationQuery: true,
+    title: "Postmortem Status ID",
+    description: "ID of the incident's postmortem status. Left out on create, the postmortem starts in the project's not started status - or its draft status when the incident is created with a postmortem note, its completed status when that note is published on a status page.",
+    example: "a1b2c3d4-e5f6-4a7b-8c9d-0e1f2a3b4c5d"
   }),
-  JoinTable({
-    name: "IncidentPostmortemAttachmentFile",
-    joinColumn: {
-      name: "incidentId",
-      referencedColumnName: "_id"
-    },
-    inverseJoinColumn: {
-      name: "fileId",
-      referencedColumnName: "_id"
-    }
+  Column({
+    type: ColumnType_default.ObjectID,
+    nullable: true,
+    transformer: ObjectID.getDatabaseTransformer()
   })
-], Incident.prototype, "postmortemAttachments", 2);
+], Incident.prototype, "postmortemStatusId", 2);
 __decorateClass([
   ColumnAccessControl_default({
     create: [],
@@ -247021,6 +247851,7 @@ Incident = __decorateClass([
     }
   }),
   Index(["projectId", "currentIncidentStateId"]),
+  Index(["projectId", "postmortemStatusId"]),
   Index(["aiInvestigationWaitUntil"], {
     where: '"aiInvestigationWaitUntil" IS NOT NULL AND "deletedAt" IS NULL'
   })
@@ -247883,6 +248714,10 @@ var AlertState = class extends DatabaseBaseModel {
     this.isAcknowledgedState = void 0;
     this.isResolvedState = void 0;
     this.order = void 0;
+    this.isArchived = void 0;
+    this.archivedAt = void 0;
+    this.archivedByUser = void 0;
+    this.archivedByUserId = void 0;
   }
 };
 __name(AlertState, "AlertState");
@@ -248278,16 +249113,90 @@ __decorateClass([
   }),
   TableColumn_default({
     isDefaultValueColumn: false,
-    type: TableColumnType_default.Boolean,
+    type: TableColumnType_default.Boolean,
+    canReadOnRelationQuery: true,
+    title: "Is Acknowledged State",
+    description: "Is it the acknowledged state of the alert?"
+  }),
+  Column({
+    type: ColumnType_default.Boolean,
+    default: false
+  })
+], AlertState.prototype, "isAcknowledgedState", 2);
+__decorateClass([
+  ColumnAccessControl_default({
+    create: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.AlertAdmin,
+      Permission_default.CreateAlertState
+    ],
+    read: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.ProjectMember,
+      Permission_default.Viewer,
+      Permission_default.AlertAdmin,
+      Permission_default.AlertMember,
+      Permission_default.AlertViewer,
+      Permission_default.ReadAlertState
+    ],
+    update: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.AlertAdmin,
+      Permission_default.EditAlertState
+    ]
+  }),
+  TableColumn_default({
+    isDefaultValueColumn: false,
+    type: TableColumnType_default.Boolean,
+    canReadOnRelationQuery: true,
+    title: "Is Resolved State",
+    description: "Is it the resolved state of the alert?"
+  }),
+  Column({
+    type: ColumnType_default.Boolean,
+    default: false
+  })
+], AlertState.prototype, "isResolvedState", 2);
+__decorateClass([
+  ColumnAccessControl_default({
+    create: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.AlertAdmin,
+      Permission_default.CreateAlertState
+    ],
+    read: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.ProjectMember,
+      Permission_default.Viewer,
+      Permission_default.AlertAdmin,
+      Permission_default.AlertMember,
+      Permission_default.AlertViewer,
+      Permission_default.ReadAlertState
+    ],
+    update: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.AlertAdmin,
+      Permission_default.EditAlertState
+    ]
+  }),
+  TableColumn_default({
+    isDefaultValueColumn: false,
+    type: TableColumnType_default.SmallNumber,
     canReadOnRelationQuery: true,
-    title: "Is Acknowledged State",
-    description: "Is it the acknowledged state of the alert?"
+    title: "Order",
+    required: false,
+    description: "Where this state sits in the project's list of alert states: 1 is the top. Alerts only ever move down the list, and an alert in a state at or below the acknowledged (or resolved) state counts as acknowledged (or resolved), so the created, acknowledged and resolved states have to stay in that order. A new state without a number goes just above the resolved state. Setting a number moves the state to that place, and the ones in between shift by one. In the dashboard, drag the rows to reorder them."
   }),
   Column({
-    type: ColumnType_default.Boolean,
-    default: false
+    type: ColumnType_default.SmallNumber
   })
-], AlertState.prototype, "isAcknowledgedState", 2);
+], AlertState.prototype, "order", 2);
 __decorateClass([
   ColumnAccessControl_default({
     create: [
@@ -248314,25 +249223,50 @@ __decorateClass([
     ]
   }),
   TableColumn_default({
-    isDefaultValueColumn: false,
+    isDefaultValueColumn: true,
+    required: true,
     type: TableColumnType_default.Boolean,
     canReadOnRelationQuery: true,
-    title: "Is Resolved State",
-    description: "Is it the resolved state of the alert?"
+    title: "Is Archived",
+    description: "Archived states stay on the alerts and episodes that are in them, but can't be picked again. The created, acknowledged and resolved states can't be archived.",
+    defaultValue: false,
+    example: false
   }),
   Column({
     type: ColumnType_default.Boolean,
+    nullable: false,
     default: false
   })
-], AlertState.prototype, "isResolvedState", 2);
+], AlertState.prototype, "isArchived", 2);
 __decorateClass([
   ColumnAccessControl_default({
-    create: [
+    create: [],
+    read: [
       Permission_default.ProjectOwner,
       Permission_default.ProjectAdmin,
+      Permission_default.ProjectMember,
+      Permission_default.Viewer,
       Permission_default.AlertAdmin,
-      Permission_default.CreateAlertState
+      Permission_default.AlertMember,
+      Permission_default.AlertViewer,
+      Permission_default.ReadAlertState
     ],
+    update: []
+  }),
+  TableColumn_default({
+    required: false,
+    type: TableColumnType_default.Date,
+    title: "Archived At",
+    description: "When this alert state was archived. Empty while it is not archived."
+  }),
+  Column({
+    type: ColumnType_default.Date,
+    nullable: true
+  })
+], AlertState.prototype, "archivedAt", 2);
+__decorateClass([
+  ColumnAccessControl_default({
+    create: [],
     read: [
       Permission_default.ProjectOwner,
       Permission_default.ProjectAdmin,
@@ -248343,25 +249277,54 @@ __decorateClass([
       Permission_default.AlertViewer,
       Permission_default.ReadAlertState
     ],
-    update: [
+    update: []
+  }),
+  TableColumn_default({
+    manyToOneRelationColumn: "archivedByUserId",
+    type: TableColumnType_default.Entity,
+    modelType: User_default,
+    title: "Archived by User",
+    description: "Relation to User who archived this object (if this object was archived by a User)"
+  }),
+  ManyToOne(
+    () => {
+      return User_default;
+    },
+    {
+      eager: false,
+      nullable: true,
+      onDelete: "SET NULL",
+      orphanedRowAction: "nullify"
+    }
+  ),
+  JoinColumn({ name: "archivedByUserId" })
+], AlertState.prototype, "archivedByUser", 2);
+__decorateClass([
+  ColumnAccessControl_default({
+    create: [],
+    read: [
       Permission_default.ProjectOwner,
       Permission_default.ProjectAdmin,
+      Permission_default.ProjectMember,
+      Permission_default.Viewer,
       Permission_default.AlertAdmin,
-      Permission_default.EditAlertState
-    ]
+      Permission_default.AlertMember,
+      Permission_default.AlertViewer,
+      Permission_default.ReadAlertState
+    ],
+    update: []
   }),
   TableColumn_default({
-    isDefaultValueColumn: false,
-    type: TableColumnType_default.SmallNumber,
-    canReadOnRelationQuery: true,
-    title: "Order",
-    required: false,
-    description: "Where this state sits in the project's list of alert states: 1 is the top. Alerts only ever move down the list, and an alert in a state at or below the acknowledged (or resolved) state counts as acknowledged (or resolved), so the created, acknowledged and resolved states have to stay in that order. A new state without a number goes just above the resolved state. Setting a number moves the state to that place, and the ones in between shift by one. In the dashboard, drag the rows to reorder them."
+    type: TableColumnType_default.ObjectID,
+    title: "Archived by User ID",
+    description: "User ID who archived this object (if this object was archived by a User)"
   }),
   Column({
-    type: ColumnType_default.SmallNumber
+    type: ColumnType_default.ObjectID,
+    nullable: true,
+    transformer: ObjectID.getDatabaseTransformer()
   })
-], AlertState.prototype, "order", 2);
+], AlertState.prototype, "archivedByUserId", 2);
 AlertState = __decorateClass([
   TableBillingAccessControl_default({
     create: "Growth" /* Growth */,
@@ -248409,6 +249372,7 @@ AlertState = __decorateClass([
     update: true,
     read: true
   }),
+  EnableAuditLog_default(),
   CrudApiEndpoint_default(new Route("/alert-state")),
   TableMetadata_default({
     tableName: "AlertState",
@@ -256426,6 +257390,10 @@ var ScheduledMaintenanceState = class extends DatabaseBaseModel {
     this.isEndedState = void 0;
     this.isResolvedState = void 0;
     this.order = void 0;
+    this.isArchived = void 0;
+    this.archivedAt = void 0;
+    this.archivedByUser = void 0;
+    this.archivedByUserId = void 0;
   }
 };
 __name(ScheduledMaintenanceState, "ScheduledMaintenanceState");
@@ -256972,6 +257940,134 @@ __decorateClass([
     type: ColumnType_default.SmallNumber
   })
 ], ScheduledMaintenanceState.prototype, "order", 2);
+__decorateClass([
+  ColumnAccessControl_default({
+    create: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.ScheduledMaintenanceAdmin,
+      Permission_default.CreateScheduledMaintenanceState
+    ],
+    read: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.ProjectMember,
+      Permission_default.Viewer,
+      Permission_default.ScheduledMaintenanceAdmin,
+      Permission_default.ScheduledMaintenanceMember,
+      Permission_default.ScheduledMaintenanceViewer,
+      Permission_default.ReadScheduledMaintenanceState
+    ],
+    update: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.ScheduledMaintenanceAdmin,
+      Permission_default.EditScheduledMaintenanceState
+    ]
+  }),
+  TableColumn_default({
+    isDefaultValueColumn: true,
+    required: true,
+    type: TableColumnType_default.Boolean,
+    canReadOnRelationQuery: true,
+    title: "Is Archived",
+    description: "Archived states stay on the maintenance events that are in them, but can't be picked again. The scheduled, ongoing, ended and completed states can't be archived.",
+    defaultValue: false,
+    example: false
+  }),
+  Column({
+    type: ColumnType_default.Boolean,
+    nullable: false,
+    default: false
+  })
+], ScheduledMaintenanceState.prototype, "isArchived", 2);
+__decorateClass([
+  ColumnAccessControl_default({
+    create: [],
+    read: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.ProjectMember,
+      Permission_default.Viewer,
+      Permission_default.ScheduledMaintenanceAdmin,
+      Permission_default.ScheduledMaintenanceMember,
+      Permission_default.ScheduledMaintenanceViewer,
+      Permission_default.ReadScheduledMaintenanceState
+    ],
+    update: []
+  }),
+  TableColumn_default({
+    required: false,
+    type: TableColumnType_default.Date,
+    title: "Archived At",
+    description: "When this scheduled maintenance state was archived. Empty while it is not archived."
+  }),
+  Column({
+    type: ColumnType_default.Date,
+    nullable: true
+  })
+], ScheduledMaintenanceState.prototype, "archivedAt", 2);
+__decorateClass([
+  ColumnAccessControl_default({
+    create: [],
+    read: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.ProjectMember,
+      Permission_default.Viewer,
+      Permission_default.ScheduledMaintenanceAdmin,
+      Permission_default.ScheduledMaintenanceMember,
+      Permission_default.ScheduledMaintenanceViewer,
+      Permission_default.ReadScheduledMaintenanceState
+    ],
+    update: []
+  }),
+  TableColumn_default({
+    manyToOneRelationColumn: "archivedByUserId",
+    type: TableColumnType_default.Entity,
+    modelType: User_default,
+    title: "Archived by User",
+    description: "Relation to User who archived this object (if this object was archived by a User)"
+  }),
+  ManyToOne(
+    () => {
+      return User_default;
+    },
+    {
+      eager: false,
+      nullable: true,
+      onDelete: "SET NULL",
+      orphanedRowAction: "nullify"
+    }
+  ),
+  JoinColumn({ name: "archivedByUserId" })
+], ScheduledMaintenanceState.prototype, "archivedByUser", 2);
+__decorateClass([
+  ColumnAccessControl_default({
+    create: [],
+    read: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.ProjectMember,
+      Permission_default.Viewer,
+      Permission_default.ScheduledMaintenanceAdmin,
+      Permission_default.ScheduledMaintenanceMember,
+      Permission_default.ScheduledMaintenanceViewer,
+      Permission_default.ReadScheduledMaintenanceState
+    ],
+    update: []
+  }),
+  TableColumn_default({
+    type: TableColumnType_default.ObjectID,
+    title: "Archived by User ID",
+    description: "User ID who archived this object (if this object was archived by a User)"
+  }),
+  Column({
+    type: ColumnType_default.ObjectID,
+    nullable: true,
+    transformer: ObjectID.getDatabaseTransformer()
+  })
+], ScheduledMaintenanceState.prototype, "archivedByUserId", 2);
 ScheduledMaintenanceState = __decorateClass([
   TableBillingAccessControl_default({
     create: "Growth" /* Growth */,
@@ -257019,6 +258115,7 @@ ScheduledMaintenanceState = __decorateClass([
     update: true,
     read: true
   }),
+  EnableAuditLog_default(),
   CrudApiEndpoint_default(new Route("/scheduled-maintenance-state")),
   SlugifyColumn_default("name", "slug"),
   TableMetadata_default({
@@ -276343,7 +277440,8 @@ __decorateClass([
     type: TableColumnType_default.Number,
     canReadOnRelationQuery: true,
     description: "Number of logs per page for this saved view.",
-    defaultValue: 100
+    defaultValue: 100,
+    isDefaultValueColumn: true
   }),
   Column({
     type: ColumnType_default.Number,
@@ -276422,7 +277520,8 @@ __decorateClass([
     canReadOnRelationQuery: true,
     title: "Is Default",
     description: "Whether this saved log view should be applied by default.",
-    defaultValue: false
+    defaultValue: false,
+    isDefaultValueColumn: true
   }),
   Column({
     nullable: false,
@@ -276803,7 +277902,8 @@ __decorateClass([
     canReadOnRelationQuery: true,
     title: "Is Default",
     description: "Whether this saved metric view should be applied by default.",
-    defaultValue: false
+    defaultValue: false,
+    isDefaultValueColumn: true
   }),
   Column({
     nullable: false,
@@ -277222,7 +278322,8 @@ __decorateClass([
     canReadOnRelationQuery: true,
     title: "Is Default",
     description: "Whether this saved trace view should be applied by default.",
-    defaultValue: false
+    defaultValue: false,
+    isDefaultValueColumn: true
   }),
   Column({
     nullable: false,
@@ -278031,7 +279132,8 @@ __decorateClass([
     canReadOnRelationQuery: true,
     title: "Enabled",
     description: "Whether this processor is active.",
-    defaultValue: true
+    defaultValue: true,
+    isDefaultValueColumn: true
   }),
   Column({
     nullable: false,
@@ -278968,7 +280070,8 @@ __decorateClass([
     canReadOnRelationQuery: true,
     title: "Enabled",
     description: "Whether this detection rule is evaluated.",
-    defaultValue: true
+    defaultValue: true,
+    isDefaultValueColumn: true
   }),
   Column({
     nullable: false,
@@ -278988,7 +280091,8 @@ __decorateClass([
     type: TableColumnType_default.Number,
     canReadOnRelationQuery: true,
     description: "How often this rule is evaluated, in minutes. The evaluation window covers the time since the previous evaluation.",
-    defaultValue: 1
+    defaultValue: 1,
+    isDefaultValueColumn: true
   }),
   Column({
     type: ColumnType_default.Number,
@@ -279072,7 +280176,8 @@ __decorateClass([
     canReadOnRelationQuery: true,
     title: "Create Alerts",
     description: "Whether matches open OneUptime alerts.",
-    defaultValue: true
+    defaultValue: true,
+    isDefaultValueColumn: true
   }),
   Column({
     nullable: false,
@@ -279092,7 +280197,8 @@ __decorateClass([
     canReadOnRelationQuery: true,
     title: "Write Detection Findings",
     description: "Whether matches also write a Detection Finding security event back into the events table.",
-    defaultValue: true
+    defaultValue: true,
+    isDefaultValueColumn: true
   }),
   Column({
     nullable: false,
@@ -279611,7 +280717,8 @@ __decorateClass([
     canReadOnRelationQuery: true,
     title: "Enabled",
     description: "Whether this connection is polled on its schedule.",
-    defaultValue: true
+    defaultValue: true,
+    isDefaultValueColumn: true
   }),
   Column({
     nullable: false,
@@ -279631,7 +280738,8 @@ __decorateClass([
     type: TableColumnType_default.Number,
     canReadOnRelationQuery: true,
     description: "How often new records are polled, in minutes.",
-    defaultValue: 5
+    defaultValue: 5,
+    isDefaultValueColumn: true
   }),
   Column({
     type: ColumnType_default.Number,
@@ -279651,6 +280759,7 @@ __decorateClass([
     title: "Alerting Records Only",
     description: "For providers that distinguish alerting from non-alerting records: import only the alerting ones.",
     defaultValue: true,
+    isDefaultValueColumn: true,
     canReadOnRelationQuery: true
   }),
   Column({ type: ColumnType_default.Boolean, nullable: false, default: true })
@@ -280637,7 +281746,8 @@ __decorateClass([
     type: TableColumnType_default.Boolean,
     title: "Is Complete",
     description: "False while the record's parts (layers, levels) are still being created.",
-    defaultValue: true
+    defaultValue: true,
+    isDefaultValueColumn: true
   }),
   Column({
     nullable: false,
@@ -280717,6 +281827,15 @@ ToolImportRecord = __decorateClass([
   })
 ], ToolImportRecord);
 
+// ../Common/Types/SecurityEvent/ThreatIntelFeedType.ts
+var ThreatIntelFeedType = /* @__PURE__ */ ((ThreatIntelFeedType2) => {
+  ThreatIntelFeedType2["Taxii"] = "taxii";
+  ThreatIntelFeedType2["List"] = "list";
+  ThreatIntelFeedType2["GoogleSecOps"] = "google-secops";
+  return ThreatIntelFeedType2;
+})(ThreatIntelFeedType || {});
+var ThreatIntelFeedType_default = ThreatIntelFeedType;
+
 // ../Common/Models/DatabaseModels/ThreatIntelFeed.ts
 var createPermissions2 = [
   Permission_default.ProjectOwner,
@@ -280747,7 +281866,12 @@ var ThreatIntelFeed = class extends DatabaseBaseModel {
     this.projectId = void 0;
     this.name = void 0;
     this.description = void 0;
+    this.feedType = void 0;
     this.apiRootUrl = void 0;
+    this.listUrl = void 0;
+    this.indicatorConfidence = void 0;
+    this.securityEventConnection = void 0;
+    this.securityEventConnectionId = void 0;
     this.collectionId = void 0;
     this.apiToken = void 0;
     this.basicAuthUsername = void 0;
@@ -280869,13 +281993,35 @@ __decorateClass([
   }),
   TableColumn_default({
     required: true,
+    type: TableColumnType_default.ShortText,
+    canReadOnRelationQuery: true,
+    title: "Source",
+    description: "Where the indicators come from: a TAXII 2.1 collection (taxii), a list at an https address (list) or Google SecOps (google-secops).",
+    defaultValue: ThreatIntelFeedType_default.Taxii,
+    isDefaultValueColumn: true
+  }),
+  Column({
+    nullable: false,
+    type: ColumnType_default.ShortText,
+    length: ColumnLength_default.ShortText,
+    default: ThreatIntelFeedType_default.Taxii
+  })
+], ThreatIntelFeed.prototype, "feedType", 2);
+__decorateClass([
+  ColumnAccessControl_default({
+    create: createPermissions2,
+    read: readPermissions5,
+    update: updatePermissions2
+  }),
+  TableColumn_default({
+    required: false,
     type: TableColumnType_default.LongText,
     canReadOnRelationQuery: true,
     title: "TAXII API Root URL",
     description: "The TAXII 2.1 API root, e.g. https://taxii.example.com/api1/. Collections are addressed beneath it."
   }),
   Column({
-    nullable: false,
+    nullable: true,
     type: ColumnType_default.LongText,
     length: ColumnLength_default.LongText
   })
@@ -280887,14 +282033,97 @@ __decorateClass([
     update: updatePermissions2
   }),
   TableColumn_default({
-    required: true,
+    required: false,
+    type: TableColumnType_default.LongText,
+    canReadOnRelationQuery: true,
+    title: "List URL",
+    description: "For a list feed: the https address of the list, one IP address, domain, URL or file hash a line."
+  }),
+  Column({
+    nullable: true,
+    type: ColumnType_default.LongText,
+    length: ColumnLength_default.LongText
+  })
+], ThreatIntelFeed.prototype, "listUrl", 2);
+__decorateClass([
+  ColumnAccessControl_default({
+    create: createPermissions2,
+    read: readPermissions5,
+    update: updatePermissions2
+  }),
+  TableColumn_default({
+    required: false,
+    type: TableColumnType_default.Number,
+    canReadOnRelationQuery: true,
+    title: "Confidence",
+    description: "For a list feed: how sure the list is, 1 to 100, given to each of its indicators. It sets the severity of a match."
+  }),
+  Column({
+    nullable: true,
+    type: ColumnType_default.Number
+  })
+], ThreatIntelFeed.prototype, "indicatorConfidence", 2);
+__decorateClass([
+  ColumnAccessControl_default({
+    create: createPermissions2,
+    read: readPermissions5,
+    update: updatePermissions2
+  }),
+  TableColumn_default({
+    manyToOneRelationColumn: "securityEventConnectionId",
+    type: TableColumnType_default.Entity,
+    modelType: SecurityEventConnection,
+    title: "Google SecOps Connection",
+    description: "For a Google SecOps feed: the connection whose key reads Google SecOps's indicator matches."
+  }),
+  ManyToOne(
+    () => {
+      return SecurityEventConnection;
+    },
+    {
+      eager: false,
+      nullable: true,
+      onDelete: "SET NULL",
+      orphanedRowAction: "nullify"
+    }
+  ),
+  JoinColumn({ name: "securityEventConnectionId" })
+], ThreatIntelFeed.prototype, "securityEventConnection", 2);
+__decorateClass([
+  ColumnAccessControl_default({
+    create: createPermissions2,
+    read: readPermissions5,
+    update: updatePermissions2
+  }),
+  Index(),
+  TableColumn_default({
+    type: TableColumnType_default.ObjectID,
+    required: false,
+    canReadOnRelationQuery: true,
+    title: "Google SecOps Connection ID",
+    description: "For a Google SecOps feed: the ID of the connection whose key reads Google SecOps's indicator matches."
+  }),
+  Column({
+    type: ColumnType_default.ObjectID,
+    nullable: true,
+    transformer: ObjectID.getDatabaseTransformer()
+  })
+], ThreatIntelFeed.prototype, "securityEventConnectionId", 2);
+__decorateClass([
+  ColumnAccessControl_default({
+    create: createPermissions2,
+    read: readPermissions5,
+    update: updatePermissions2
+  }),
+  TableColumn_default({
+    required: false,
     type: TableColumnType_default.ShortText,
     canReadOnRelationQuery: true,
     title: "Collection ID",
     description: "ID of the TAXII collection to poll for indicator objects."
   }),
   Column({
-    nullable: false,
+    nullable: true,
     type: ColumnType_default.ShortText,
     length: ColumnLength_default.ShortText
   })
@@ -280966,7 +282195,8 @@ __decorateClass([
     canReadOnRelationQuery: true,
     title: "Enabled",
     description: "Whether this feed is polled and matched.",
-    defaultValue: true
+    defaultValue: true,
+    isDefaultValueColumn: true
   }),
   Column({
     nullable: false,
@@ -281215,7 +282445,7 @@ __decorateClass([
     required: false,
     type: TableColumnType_default.LongText,
     canReadOnRelationQuery: true,
-    description: "Poll cursor: the TAXII added_after timestamp already ingested, as an ISO string."
+    description: "Poll cursor: for a TAXII feed the added_after timestamp already ingested, for a list feed the hash of the list last written and when, for a Google SecOps feed the end of the window last read."
   }),
   Column({
     type: ColumnType_default.LongText,
@@ -281457,7 +282687,7 @@ ThreatIntelFeed = __decorateClass([
     singularName: "Threat Intel Feed",
     pluralName: "Threat Intel Feeds",
     icon: IconProp_default.ShieldCheck,
-    tableDescription: "STIX/TAXII 2.1 threat-intelligence feeds. Indicators are polled on an interval and matched against incoming security events."
+    tableDescription: "Threat-intelligence feeds: TAXII 2.1 collections, lists of indicators and Google SecOps. Indicators are polled and matched against security events."
   }),
   TableAccessControl_default({
     create: createPermissions2,
@@ -284822,7 +286052,8 @@ __decorateClass([
     canReadOnRelationQuery: true,
     title: "Enabled",
     description: "Whether events are sent to this destination.",
-    defaultValue: true
+    defaultValue: true,
+    isDefaultValueColumn: true
   }),
   Column({
     nullable: false,
@@ -284842,7 +286073,8 @@ __decorateClass([
     canReadOnRelationQuery: true,
     title: "What to Send",
     description: "'detections' sends what OneUptime found (its detection rules' and threat intel's matches and imported alerts); 'all-events' sends every security event.",
-    defaultValue: SecurityEventDestinationScope_default.Detections
+    defaultValue: SecurityEventDestinationScope_default.Detections,
+    isDefaultValueColumn: true
   }),
   Column({
     nullable: false,
@@ -285123,7 +286355,8 @@ __decorateClass([
     canReadOnRelationQuery: true,
     title: "Enabled",
     description: "Whether OneUptime looks for security events in the project's logs.",
-    defaultValue: true
+    defaultValue: true,
+    isDefaultValueColumn: true
   }),
   Column({
     nullable: false,
@@ -287104,7 +288337,8 @@ __decorateClass([
     type: TableColumnType_default.ShortText,
     title: "Filter Condition",
     description: "How to combine filters: 'All' requires every filter to match (AND), 'Any' requires at least one to match (OR).",
-    defaultValue: FilterCondition_default.All
+    defaultValue: FilterCondition_default.All,
+    isDefaultValueColumn: true
   }),
   Column({
     nullable: false,
@@ -287389,7 +288623,8 @@ __decorateClass([
     canReadOnRelationQuery: true,
     title: "Enabled",
     description: "Whether this rule is active.",
-    defaultValue: true
+    defaultValue: true,
+    isDefaultValueColumn: true
   }),
   Column({
     nullable: false,
@@ -289484,7 +290719,8 @@ __decorateClass([
     canReadOnRelationQuery: true,
     title: "Enabled",
     description: "Whether this rule is evaluated by the recording rule cron.",
-    defaultValue: true
+    defaultValue: true,
+    isDefaultValueColumn: true
   }),
   Column({
     nullable: false,
@@ -290447,7 +291683,8 @@ __decorateClass([
     canReadOnRelationQuery: true,
     title: "Enabled",
     description: "Whether this processor is active.",
-    defaultValue: true
+    defaultValue: true,
+    isDefaultValueColumn: true
   }),
   Column({
     nullable: false,
@@ -292012,7 +293249,8 @@ __decorateClass([
     canReadOnRelationQuery: true,
     title: "Enabled",
     description: "Whether this rule is evaluated by the recording rule cron.",
-    defaultValue: true
+    defaultValue: true,
+    isDefaultValueColumn: true
   }),
   Column({
     nullable: false,
@@ -292491,7 +293729,8 @@ __decorateClass([
     canReadOnRelationQuery: true,
     title: "Enabled",
     description: "Whether this rule is evaluated by the log recording rule cron, every minute.",
-    defaultValue: true
+    defaultValue: true,
+    isDefaultValueColumn: true
   }),
   Column({
     nullable: false,
@@ -370398,7 +371637,8 @@ __decorateClass([
     type: TableColumnType_default.Boolean,
     title: "Secret",
     description: "Is this variable a secret. If true, then it'll not be in the logs",
-    defaultValue: false
+    defaultValue: false,
+    isDefaultValueColumn: true
   }),
   Column({
     nullable: false,
@@ -370434,6 +371674,7 @@ __decorateClass([
     title: "Variable Type",
     description: "Static: the content you save is used as is. OAuth 2.0: OneUptime fetches an access token from your identity provider and refreshes it automatically when a workflow uses it after it has expired.",
     defaultValue: "Static" /* Static */,
+    isDefaultValueColumn: true,
     example: "OAuth 2.0"
   }),
   Column({
@@ -378616,6 +379857,9 @@ var AutoRemediationRule = class extends RuleBaseModel {
     this.externalMcpServers = void 0;
     this.runner = void 0;
     this.runnerId = void 0;
+    this.codeRepositories = void 0;
+    this.openCodeFixPullRequests = void 0;
+    this.openTelemetryPullRequests = void 0;
     this.verificationWindowMinutes = void 0;
     this.autoResolveOnVerifiedRecovery = void 0;
     this.createdByUser = void 0;
@@ -378950,7 +380194,7 @@ __decorateClass([
     required: true,
     type: TableColumnType_default.Boolean,
     title: "Let AI Compose Commands",
-    description: "Kept for rules saved before rules were simplified: the AI investigates the incident/alert and composes Bash/SSH commands for the rule's Runner and Command Runners, and the rule does nothing else. Suggest mode proposes a command plan for one-click approval; FullAuto mode may execute commands inline, but only ones matching the command allowlist. A OneUptime AI rule now composes commands on its Runner when it picks one, so new rules leave this off.",
+    description: "Kept for rules saved before rules were simplified: the AI investigates the incident/alert and composes Bash commands for the rule's Runner and Command Runners, and the rule does nothing else. Suggest mode proposes a command plan for one-click approval; FullAuto mode may execute commands inline, but only ones matching the command allowlist. A OneUptime AI rule now composes commands on its Runner when it picks one, so new rules leave this off.",
     defaultValue: false,
     isDefaultValueColumn: true
   }),
@@ -379103,29 +380347,196 @@ __decorateClass([
   }),
   TableColumn_default({
     required: false,
-    type: TableColumnType_default.EntityArray,
-    modelType: IncidentSeverity,
-    title: "Incident Severities",
-    description: "Only trigger for incidents with these severities (incident rules only). Leave empty to match any severity."
+    type: TableColumnType_default.EntityArray,
+    modelType: IncidentSeverity,
+    title: "Incident Severities",
+    description: "Only trigger for incidents with these severities (incident rules only). Leave empty to match any severity."
+  }),
+  ManyToMany(
+    () => {
+      return IncidentSeverity;
+    },
+    { eager: false }
+  ),
+  JoinTable({
+    name: "AutoRemediationRuleIncidentSeverity",
+    inverseJoinColumn: {
+      name: "incidentSeverityId",
+      referencedColumnName: "_id"
+    },
+    joinColumn: {
+      name: "autoRemediationRuleId",
+      referencedColumnName: "_id"
+    }
+  })
+], AutoRemediationRule.prototype, "incidentSeverities", 2);
+__decorateClass([
+  ColumnAccessControl_default({
+    create: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.CreateAutoRemediationRule
+    ],
+    read: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.ProjectMember,
+      Permission_default.Viewer,
+      Permission_default.ReadAutoRemediationRule
+    ],
+    update: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.EditAutoRemediationRule
+    ]
+  }),
+  TableColumn_default({
+    required: false,
+    type: TableColumnType_default.EntityArray,
+    modelType: AlertSeverity,
+    title: "Alert Severities",
+    description: "Only trigger for alerts with these severities (alert rules only). Leave empty to match any severity."
+  }),
+  ManyToMany(
+    () => {
+      return AlertSeverity;
+    },
+    { eager: false }
+  ),
+  JoinTable({
+    name: "AutoRemediationRuleAlertSeverity",
+    inverseJoinColumn: {
+      name: "alertSeverityId",
+      referencedColumnName: "_id"
+    },
+    joinColumn: {
+      name: "autoRemediationRuleId",
+      referencedColumnName: "_id"
+    }
+  })
+], AutoRemediationRule.prototype, "alertSeverities", 2);
+__decorateClass([
+  ColumnAccessControl_default({
+    create: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.CreateAutoRemediationRule
+    ],
+    read: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.ProjectMember,
+      Permission_default.Viewer,
+      Permission_default.ReadAutoRemediationRule
+    ],
+    update: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.EditAutoRemediationRule
+    ]
+  }),
+  TableColumn_default({
+    required: false,
+    type: TableColumnType_default.EntityArray,
+    modelType: Label,
+    title: "Labels",
+    description: "Only trigger for incidents/alerts that carry at least one of these labels. Leave empty to match any label."
+  }),
+  ManyToMany(
+    () => {
+      return Label;
+    },
+    { eager: false }
+  ),
+  JoinTable({
+    name: "AutoRemediationRuleLabel",
+    inverseJoinColumn: {
+      name: "labelId",
+      referencedColumnName: "_id"
+    },
+    joinColumn: {
+      name: "autoRemediationRuleId",
+      referencedColumnName: "_id"
+    }
+  })
+], AutoRemediationRule.prototype, "labels", 2);
+__decorateClass([
+  ColumnAccessControl_default({
+    create: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.CreateAutoRemediationRule
+    ],
+    read: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.ProjectMember,
+      Permission_default.Viewer,
+      Permission_default.ReadAutoRemediationRule
+    ],
+    update: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.EditAutoRemediationRule
+    ]
+  }),
+  TableColumn_default({
+    required: false,
+    type: TableColumnType_default.EntityArray,
+    modelType: Label,
+    title: "Monitor Labels",
+    description: "Only trigger when the incident/alert's monitor carries at least one of these labels \u2014 the natural way to scope rules to environments (e.g. staging vs production). Leave empty to match any monitor label."
+  }),
+  ManyToMany(
+    () => {
+      return Label;
+    },
+    { eager: false }
+  ),
+  JoinTable({
+    name: "AutoRemediationRuleMonitorLabel",
+    inverseJoinColumn: {
+      name: "labelId",
+      referencedColumnName: "_id"
+    },
+    joinColumn: {
+      name: "autoRemediationRuleId",
+      referencedColumnName: "_id"
+    }
+  })
+], AutoRemediationRule.prototype, "monitorLabels", 2);
+__decorateClass([
+  ColumnAccessControl_default({
+    create: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.CreateAutoRemediationRule
+    ],
+    read: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.ProjectMember,
+      Permission_default.Viewer,
+      Permission_default.ReadAutoRemediationRule
+    ],
+    update: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.EditAutoRemediationRule
+    ]
+  }),
+  TableColumn_default({
+    required: false,
+    type: TableColumnType_default.LongText,
+    title: "Title Pattern",
+    description: "Case-insensitive regex matched against the entity's title. Leave empty to match any title."
   }),
-  ManyToMany(
-    () => {
-      return IncidentSeverity;
-    },
-    { eager: false }
-  ),
-  JoinTable({
-    name: "AutoRemediationRuleIncidentSeverity",
-    inverseJoinColumn: {
-      name: "incidentSeverityId",
-      referencedColumnName: "_id"
-    },
-    joinColumn: {
-      name: "autoRemediationRuleId",
-      referencedColumnName: "_id"
-    }
+  Column({
+    type: ColumnType_default.LongText,
+    nullable: true,
+    length: ColumnLength_default.LongText
   })
-], AutoRemediationRule.prototype, "incidentSeverities", 2);
+], AutoRemediationRule.prototype, "titlePattern", 2);
 __decorateClass([
   ColumnAccessControl_default({
     create: [
@@ -379148,29 +380559,16 @@ __decorateClass([
   }),
   TableColumn_default({
     required: false,
-    type: TableColumnType_default.EntityArray,
-    modelType: AlertSeverity,
-    title: "Alert Severities",
-    description: "Only trigger for alerts with these severities (alert rules only). Leave empty to match any severity."
+    type: TableColumnType_default.LongText,
+    title: "Description Pattern",
+    description: "Case-insensitive regex matched against the entity's description. Leave empty to match any description."
   }),
-  ManyToMany(
-    () => {
-      return AlertSeverity;
-    },
-    { eager: false }
-  ),
-  JoinTable({
-    name: "AutoRemediationRuleAlertSeverity",
-    inverseJoinColumn: {
-      name: "alertSeverityId",
-      referencedColumnName: "_id"
-    },
-    joinColumn: {
-      name: "autoRemediationRuleId",
-      referencedColumnName: "_id"
-    }
+  Column({
+    type: ColumnType_default.LongText,
+    nullable: true,
+    length: ColumnLength_default.LongText
   })
-], AutoRemediationRule.prototype, "alertSeverities", 2);
+], AutoRemediationRule.prototype, "descriptionPattern", 2);
 __decorateClass([
   ColumnAccessControl_default({
     create: [
@@ -379194,20 +380592,20 @@ __decorateClass([
   TableColumn_default({
     required: false,
     type: TableColumnType_default.EntityArray,
-    modelType: Label,
-    title: "Labels",
-    description: "Only trigger for incidents/alerts that carry at least one of these labels. Leave empty to match any label."
+    modelType: Runbook,
+    title: "Runbooks",
+    description: "The runbooks OneUptime AI may pick and run for this rule. Leave empty to let it pick any of the project's runbooks. A rule whose Fix With is Runbooks starts every one of them for every match instead."
   }),
   ManyToMany(
     () => {
-      return Label;
+      return Runbook;
     },
     { eager: false }
   ),
   JoinTable({
-    name: "AutoRemediationRuleLabel",
+    name: "AutoRemediationRuleRunbook",
     inverseJoinColumn: {
-      name: "labelId",
+      name: "runbookId",
       referencedColumnName: "_id"
     },
     joinColumn: {
@@ -379215,7 +380613,7 @@ __decorateClass([
       referencedColumnName: "_id"
     }
   })
-], AutoRemediationRule.prototype, "labels", 2);
+], AutoRemediationRule.prototype, "runbooks", 2);
 __decorateClass([
   ColumnAccessControl_default({
     create: [
@@ -379239,20 +380637,20 @@ __decorateClass([
   TableColumn_default({
     required: false,
     type: TableColumnType_default.EntityArray,
-    modelType: Label,
-    title: "Monitor Labels",
-    description: "Only trigger when the incident/alert's monitor carries at least one of these labels \u2014 the natural way to scope rules to environments (e.g. staging vs production). Leave empty to match any monitor label."
+    modelType: ExternalMcpServer,
+    title: "MCP Servers",
+    description: "The external MCP servers OneUptime AI may use while it fixes what this rule matches. Leave empty to let it use all of the project's MCP servers; changes through them are then always proposed for approval first."
   }),
   ManyToMany(
     () => {
-      return Label;
+      return ExternalMcpServer;
     },
     { eager: false }
   ),
   JoinTable({
-    name: "AutoRemediationRuleMonitorLabel",
+    name: "AutoRemediationRuleExternalMcpServer",
     inverseJoinColumn: {
-      name: "labelId",
+      name: "externalMcpServerId",
       referencedColumnName: "_id"
     },
     joinColumn: {
@@ -379260,7 +380658,7 @@ __decorateClass([
       referencedColumnName: "_id"
     }
   })
-], AutoRemediationRule.prototype, "monitorLabels", 2);
+], AutoRemediationRule.prototype, "externalMcpServers", 2);
 __decorateClass([
   ColumnAccessControl_default({
     create: [
@@ -379282,17 +380680,25 @@ __decorateClass([
     ]
   }),
   TableColumn_default({
-    required: false,
-    type: TableColumnType_default.LongText,
-    title: "Title Pattern",
-    description: "Case-insensitive regex matched against the entity's title. Leave empty to match any title."
+    manyToOneRelationColumn: "runnerId",
+    type: TableColumnType_default.Entity,
+    modelType: Runner,
+    title: "Runner",
+    description: "The Runner OneUptime AI runs this rule's Bash commands on, inside your network. Empty means none: OneUptime AI runs no commands of its own for the rule. Commands on the affected Kubernetes cluster or host always go through its AI agent."
   }),
-  Column({
-    type: ColumnType_default.LongText,
-    nullable: true,
-    length: ColumnLength_default.LongText
-  })
-], AutoRemediationRule.prototype, "titlePattern", 2);
+  ManyToOne(
+    () => {
+      return Runner;
+    },
+    {
+      eager: false,
+      nullable: true,
+      onDelete: "SET NULL",
+      orphanedRowAction: "nullify"
+    }
+  ),
+  JoinColumn({ name: "runnerId" })
+], AutoRemediationRule.prototype, "runner", 2);
 __decorateClass([
   ColumnAccessControl_default({
     create: [
@@ -379313,18 +380719,20 @@ __decorateClass([
       Permission_default.EditAutoRemediationRule
     ]
   }),
+  Index(),
   TableColumn_default({
+    type: TableColumnType_default.ObjectID,
     required: false,
-    type: TableColumnType_default.LongText,
-    title: "Description Pattern",
-    description: "Case-insensitive regex matched against the entity's description. Leave empty to match any description."
+    canReadOnRelationQuery: true,
+    title: "Runner ID",
+    description: "ID of the Runner OneUptime AI runs this rule's Bash commands on: one of the project's own Runners. Empty means none: OneUptime AI runs no commands of its own for the rule. Commands on the affected Kubernetes cluster or host always go through its AI agent."
   }),
   Column({
-    type: ColumnType_default.LongText,
+    type: ColumnType_default.ObjectID,
     nullable: true,
-    length: ColumnLength_default.LongText
+    transformer: ObjectID.getDatabaseTransformer()
   })
-], AutoRemediationRule.prototype, "descriptionPattern", 2);
+], AutoRemediationRule.prototype, "runnerId", 2);
 __decorateClass([
   ColumnAccessControl_default({
     create: [
@@ -379348,20 +380756,20 @@ __decorateClass([
   TableColumn_default({
     required: false,
     type: TableColumnType_default.EntityArray,
-    modelType: Runbook,
-    title: "Runbooks",
-    description: "The runbooks OneUptime AI may pick and run for this rule. Leave empty to let it pick any of the project's runbooks. A rule whose Fix With is Runbooks starts every one of them for every match instead."
+    modelType: CodeRepository,
+    title: "Code Repositories",
+    description: "The code repositories OneUptime AI may read while it fixes what this rule matches, and open the rule's pull requests in. Leave empty to let it use every repository the project has connected."
   }),
   ManyToMany(
     () => {
-      return Runbook;
+      return CodeRepository;
     },
     { eager: false }
   ),
   JoinTable({
-    name: "AutoRemediationRuleRunbook",
+    name: "AutoRemediationRuleCodeRepository",
     inverseJoinColumn: {
-      name: "runbookId",
+      name: "codeRepositoryId",
       referencedColumnName: "_id"
     },
     joinColumn: {
@@ -379369,7 +380777,7 @@ __decorateClass([
       referencedColumnName: "_id"
     }
   })
-], AutoRemediationRule.prototype, "runbooks", 2);
+], AutoRemediationRule.prototype, "codeRepositories", 2);
 __decorateClass([
   ColumnAccessControl_default({
     create: [
@@ -379391,30 +380799,20 @@ __decorateClass([
     ]
   }),
   TableColumn_default({
-    required: false,
-    type: TableColumnType_default.EntityArray,
-    modelType: ExternalMcpServer,
-    title: "MCP Servers",
-    description: "The external MCP servers OneUptime AI may use while it fixes what this rule matches. Leave empty to let it use all of the project's MCP servers; changes through them are then always proposed for approval first."
+    required: true,
+    type: TableColumnType_default.Boolean,
+    title: "Open Fix Pull Requests",
+    description: "When an investigation of an incident or alert this rule matches finds the cause in your code, OneUptime AI opens a pull request with the fix, for review. Nothing is merged. Acts only while fixing new incidents (or alerts) automatically is on. On by default.",
+    defaultValue: true,
+    isDefaultValueColumn: true,
+    example: true
   }),
-  ManyToMany(
-    () => {
-      return ExternalMcpServer;
-    },
-    { eager: false }
-  ),
-  JoinTable({
-    name: "AutoRemediationRuleExternalMcpServer",
-    inverseJoinColumn: {
-      name: "externalMcpServerId",
-      referencedColumnName: "_id"
-    },
-    joinColumn: {
-      name: "autoRemediationRuleId",
-      referencedColumnName: "_id"
-    }
+  Column({
+    type: ColumnType_default.Boolean,
+    nullable: false,
+    default: true
   })
-], AutoRemediationRule.prototype, "externalMcpServers", 2);
+], AutoRemediationRule.prototype, "openCodeFixPullRequests", 2);
 __decorateClass([
   ColumnAccessControl_default({
     create: [
@@ -379436,59 +380834,20 @@ __decorateClass([
     ]
   }),
   TableColumn_default({
-    manyToOneRelationColumn: "runnerId",
-    type: TableColumnType_default.Entity,
-    modelType: Runner,
-    title: "Runner",
-    description: "The Runner OneUptime AI runs this rule's commands on (Bash, SSH), inside your network. Empty means none: OneUptime AI fixes through the AI agent on the affected Kubernetes cluster or host."
-  }),
-  ManyToOne(
-    () => {
-      return Runner;
-    },
-    {
-      eager: false,
-      nullable: true,
-      onDelete: "SET NULL",
-      orphanedRowAction: "nullify"
-    }
-  ),
-  JoinColumn({ name: "runnerId" })
-], AutoRemediationRule.prototype, "runner", 2);
-__decorateClass([
-  ColumnAccessControl_default({
-    create: [
-      Permission_default.ProjectOwner,
-      Permission_default.ProjectAdmin,
-      Permission_default.CreateAutoRemediationRule
-    ],
-    read: [
-      Permission_default.ProjectOwner,
-      Permission_default.ProjectAdmin,
-      Permission_default.ProjectMember,
-      Permission_default.Viewer,
-      Permission_default.ReadAutoRemediationRule
-    ],
-    update: [
-      Permission_default.ProjectOwner,
-      Permission_default.ProjectAdmin,
-      Permission_default.EditAutoRemediationRule
-    ]
-  }),
-  Index(),
-  TableColumn_default({
-    type: TableColumnType_default.ObjectID,
-    required: false,
-    canReadOnRelationQuery: true,
-    title: "Runner ID",
-    description: "ID of the Runner OneUptime AI runs this rule's commands on: one of the project's own Runners. Empty means none: OneUptime AI fixes through the AI agent on the affected Kubernetes cluster or host."
+    required: true,
+    type: TableColumnType_default.Boolean,
+    title: "Open Telemetry Pull Requests",
+    description: "When missing logs, traces or metrics stop an investigation of an incident or alert this rule matches, OneUptime AI opens a pull request that adds them, for review. Nothing is merged. Acts only while fixing new incidents (or alerts) automatically is on. On by default.",
+    defaultValue: true,
+    isDefaultValueColumn: true,
+    example: true
   }),
   Column({
-    type: ColumnType_default.ObjectID,
-    nullable: true,
-    transformer: ObjectID.getDatabaseTransformer()
+    type: ColumnType_default.Boolean,
+    nullable: false,
+    default: true
   })
-], AutoRemediationRule.prototype, "runnerId", 2);
+], AutoRemediationRule.prototype, "openTelemetryPullRequests", 2);
 __decorateClass([
   ColumnAccessControl_default({
     create: [
@@ -379697,7 +381056,7 @@ AutoRemediationRule = __decorateClass([
     singularName: "Auto Remediation Rule",
     pluralName: "Auto Remediation Rules",
     icon: IconProp_default.Bolt,
-    tableDescription: "Which new incidents or alerts OneUptime AI fixes automatically, and whether it asks first. It may run the project's runbooks (only the rule's, when it names some), commands on a Runner the rule picks, and the tools of the project's external MCP servers (only the rule's, when it names some). With no rule, OneUptime AI fixes every one while automatic fixing is on."
+    tableDescription: "Which new incidents or alerts OneUptime AI fixes automatically, and whether it asks first. It may run the project's runbooks (only the rule's, when it names some), Bash commands on a Runner the rule picks, the tools of the project's external MCP servers (only the rule's, when it names some), and open fix and telemetry pull requests in the project's code repositories (only the rule's, when it names some). With no rule, OneUptime AI fixes every one while automatic fixing is on, pull requests included."
   })
 ], AutoRemediationRule);
 
@@ -380965,6 +382324,7 @@ var AIInvestigationRule = class extends RuleBaseModel {
     this.descriptionPattern = void 0;
     this.onlyIfOpenAfterMinutes = void 0;
     this.externalMcpServers = void 0;
+    this.codeRepositories = void 0;
     this.createdByUser = void 0;
     this.createdByUserId = void 0;
     this.deletedByUser = void 0;
@@ -381411,6 +382771,42 @@ __decorateClass([
     }
   })
 ], AIInvestigationRule.prototype, "externalMcpServers", 2);
+__decorateClass([
+  ColumnAccessControl_default({
+    create: [Permission_default.ProjectOwner, Permission_default.ProjectAdmin],
+    read: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.ProjectMember,
+      Permission_default.Viewer
+    ],
+    update: [Permission_default.ProjectOwner, Permission_default.ProjectAdmin]
+  }),
+  TableColumn_default({
+    required: false,
+    type: TableColumnType_default.EntityArray,
+    modelType: CodeRepository,
+    title: "Code Repositories",
+    description: "The code repositories OneUptime AI may read while it investigates what this rule matches. Leave empty to let it read every repository the project has connected."
+  }),
+  ManyToMany(
+    () => {
+      return CodeRepository;
+    },
+    { eager: false }
+  ),
+  JoinTable({
+    name: "AIInvestigationRuleCodeRepository",
+    inverseJoinColumn: {
+      name: "codeRepositoryId",
+      referencedColumnName: "_id"
+    },
+    joinColumn: {
+      name: "aiInvestigationRuleId",
+      referencedColumnName: "_id"
+    }
+  })
+], AIInvestigationRule.prototype, "codeRepositories", 2);
 __decorateClass([
   ColumnAccessControl_default({
     create: [Permission_default.ProjectOwner, Permission_default.ProjectAdmin],
@@ -446101,6 +447497,7 @@ __decorateClass([
     canReadOnRelationQuery: true,
     description: "Items on page",
     defaultValue: 10,
+    isDefaultValueColumn: true,
     example: 10
   }),
   Column({
@@ -449445,7 +450842,7 @@ __decorateClass([
     ]
   }),
   TableColumn_default({
-    isDefaultValueColumn: false,
+    isDefaultValueColumn: true,
     required: true,
     type: TableColumnType_default.Boolean,
     defaultValue: true,
@@ -468516,6 +469913,7 @@ var AllModelTypes = [
   IncidentSeverity,
   IncidentNoteTemplate,
   IncidentPostmortemTemplate,
+  IncidentPostmortemStatus,
   Form,
   FormSubmission,
   AlertState,
@@ -468665,7 +470063,6 @@ var AllModelTypes = [
   RunnerJob,
   RunnerOwnerTeam,
   RunnerOwnerUser,
-  RunbookCredential,
   RunbookVariable,
   ProjectSSO,
   ProjectOIDC,