@oneuptime/cli 14.0.85 → 14.0.87

package/build/dist/Index.js

@@ -117379,6 +117379,7 @@ var ObjectType = /* @__PURE__ */ ((ObjectType2) => {
   ObjectType2["NotContains"] = "NotContains";
   ObjectType2["Wildcard"] = "Wildcard";
   ObjectType2["NotWildcard"] = "NotWildcard";
+  ObjectType2["OwnedBy"] = "OwnedBy";
   ObjectType2["DashboardComponent"] = "DashboardComponent";
   ObjectType2["DashboardViewConfig"] = "DashboardViewConfig";
   return ObjectType2;
@@ -127761,6 +127762,140 @@ var NotWildcard = class _NotWildcard extends QueryOperator {
   }
 };
 
+// ../Common/Types/BaseDatabase/OwnedBy.ts
+var OwnedByMatch = /* @__PURE__ */ ((OwnedByMatch2) => {
+  OwnedByMatch2["AnyOf"] = "AnyOf";
+  OwnedByMatch2["NoneOf"] = "NoneOf";
+  OwnedByMatch2["AnyOwner"] = "AnyOwner";
+  OwnedByMatch2["NoOwner"] = "NoOwner";
+  return OwnedByMatch2;
+})(OwnedByMatch || {});
+var MAX_OWNED_BY_IDS = 1e3;
+var OWNED_BY_QUERY_KEY = "owners";
+var EXAMPLE_UUID = "550e8400-e29b-41d4-a716-446655440000";
+var OwnedBy = class _OwnedBy extends QueryOperator {
+  static {
+    __name(this, "OwnedBy");
+  }
+  constructor(data) {
+    super();
+    const match = data.match || "AnyOf" /* AnyOf */;
+    if (!Object.values(OwnedByMatch).includes(match)) {
+      throw new BadDataException(
+        `Invalid match for "${OWNED_BY_QUERY_KEY}" in the query: ${JSON.stringify(
+          refusedValue(match)
+        )}. It is one of ${Object.values(OwnedByMatch).join(", ")}.`
+      );
+    }
+    const userIds = _OwnedBy.toIds(data.userIds, "userIds");
+    const teamIds = _OwnedBy.toIds(data.teamIds, "teamIds");
+    const namesOwners = match === "AnyOf" /* AnyOf */ || match === "NoneOf" /* NoneOf */;
+    if (namesOwners && userIds.length === 0 && teamIds.length === 0) {
+      throw new BadDataException(
+        `"${OWNED_BY_QUERY_KEY}" with match ${match} names at least one person (userIds) or team (teamIds).`
+      );
+    }
+    if (!namesOwners && (userIds.length > 0 || teamIds.length > 0)) {
+      throw new BadDataException(
+        `"${OWNED_BY_QUERY_KEY}" with match ${match} asks whether a record has owners at all, so it names no people or teams.`
+      );
+    }
+    if (userIds.length + teamIds.length > MAX_OWNED_BY_IDS) {
+      throw new BadDataException(
+        `"${OWNED_BY_QUERY_KEY}" names at most ${MAX_OWNED_BY_IDS} people and teams together.`
+      );
+    }
+    this._userIds = userIds;
+    this._teamIds = teamIds;
+    this._match = match;
+  }
+  // The people named, as ids (each once).
+  get userIds() {
+    return [...this._userIds];
+  }
+  // The teams named, as ids (each once).
+  get teamIds() {
+    return [...this._teamIds];
+  }
+  get match() {
+    return this._match;
+  }
+  toString() {
+    return JSON.stringify(this.toJSON());
+  }
+  toJSON() {
+    return {
+      _type: "OwnedBy" /* OwnedBy */,
+      match: this._match,
+      userIds: [...this._userIds],
+      teamIds: [...this._teamIds]
+    };
+  }
+  static fromJSON(json) {
+    if (json["_type"] !== "OwnedBy" /* OwnedBy */) {
+      throw new BadDataException("Invalid JSON: " + JSON.stringify(json));
+    }
+    return new _OwnedBy({
+      match: json["match"] || void 0,
+      userIds: _OwnedBy.readIds(json["userIds"], "userIds"),
+      teamIds: _OwnedBy.readIds(json["teamIds"], "teamIds")
+    });
+  }
+  /*
+   * The ids a JSON array holds: text, or an ObjectID as it is serialized
+   * ({"_type": "ObjectID", "value": "..."}). Anything but an array is refused.
+   */
+  static readIds(value, field) {
+    if (value === void 0 || value === null) {
+      return void 0;
+    }
+    if (!Array.isArray(value)) {
+      throw new BadDataException(
+        `"${field}" of "${OWNED_BY_QUERY_KEY}" in the query is a list of IDs.`
+      );
+    }
+    return value.map((item) => {
+      if (item && typeof item === "object" && item["_type"] === "ObjectID" /* ObjectID */) {
+        return new ObjectID(item);
+      }
+      return item;
+    });
+  }
+  /*
+   * Every id as text Postgres reads as a uuid, each once, or the filter is
+   * refused with the words every ID filter uses.
+   */
+  static toIds(ids, field) {
+    if (ids === void 0 || ids === null) {
+      return [];
+    }
+    if (!Array.isArray(ids)) {
+      throw new BadDataException(
+        `"${field}" of "${OWNED_BY_QUERY_KEY}" in the query is a list of IDs.`
+      );
+    }
+    const seen = /* @__PURE__ */ new Set();
+    const result = [];
+    for (const id of ids) {
+      const text = id instanceof ObjectID ? id.toString() : typeof id === "string" ? id : null;
+      if (text === null || !ObjectID.isValidUUID(text)) {
+        throw new BadDataException(
+          `Invalid ID for "${OWNED_BY_QUERY_KEY}.${field}" in the query: ${JSON.stringify(
+            refusedValue(text === null ? JSON.stringify(id) : text)
+          )}. An ID is a UUID, such as "${EXAMPLE_UUID}".`
+        );
+      }
+      const key = text.toLowerCase();
+      if (seen.has(key)) {
+        continue;
+      }
+      seen.add(key);
+      result.push(key);
+    }
+    return result;
+  }
+};
+
 // ../Common/Types/BaseDatabase/IsNull.ts
 var IsNull2 = class _IsNull extends QueryOperator {
   static {
@@ -134919,6 +135054,7 @@ var MonitorStepDatabaseMonitorUtil = class {
 var ExternalStatusPageProviderType = /* @__PURE__ */ ((ExternalStatusPageProviderType2) => {
   ExternalStatusPageProviderType2["AtlassianStatuspage"] = "Atlassian Statuspage";
   ExternalStatusPageProviderType2["IncidentIo"] = "incident.io";
+  ExternalStatusPageProviderType2["OneUptime"] = "OneUptime Status Page";
   ExternalStatusPageProviderType2["RSS"] = "RSS";
   ExternalStatusPageProviderType2["Atom"] = "Atom";
   ExternalStatusPageProviderType2["Auto"] = "Auto";
@@ -137145,6 +137281,9 @@ var SerializableObjectDictionary = {
   get ["NotWildcard" /* NotWildcard */]() {
     return NotWildcard;
   },
+  get ["OwnedBy" /* OwnedBy */]() {
+    return OwnedBy;
+  },
   get ["NotNull" /* NotNull */]() {
     return NotNull;
   },
@@ -148907,6 +149046,7 @@ var Project = class extends TenantModel {
     this.planCutoffNoticeSentAt = void 0;
     this.enableAutomaticIncidentInvestigation = void 0;
     this.enableAutomaticAlertInvestigation = void 0;
+    this.enableAutomaticSecurityCaseTriage = void 0;
     this.enableAutomaticIncidentRemediation = void 0;
     this.enableAutomaticAlertRemediation = void 0;
     this.enableAutomaticPostmortemDraft = void 0;
@@ -150825,6 +150965,35 @@ __decorateClass([
     type: ColumnType_default.Boolean
   })
 ], Project.prototype, "enableAutomaticAlertInvestigation", 2);
+__decorateClass([
+  ColumnAccessControl_default({
+    create: [Permission_default.User],
+    read: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.ProjectMember,
+      Permission_default.Viewer,
+      Permission_default.ReadProject,
+      Permission_default.UnAuthorizedSsoUser,
+      Permission_default.ProjectUser
+    ],
+    update: [Permission_default.ProjectOwner, Permission_default.ProjectAdmin]
+  }),
+  TableColumn_default({
+    required: true,
+    isDefaultValueColumn: true,
+    type: TableColumnType_default.Boolean,
+    title: "Enable Automatic Security Case Triage",
+    description: "When enabled, OneUptime AI triages every new security case a detection opens: it posts what happened, how likely it is to be real, the priority it deserves and the playbook that fits to the case's timeline. It changes nothing: a person decides the verdict and priority and runs the playbook. On for new projects created in OneUptime; projects that existed before keep their setting. Requires AI to be enabled and an LLM provider to be configured.",
+    defaultValue: false,
+    example: true
+  }),
+  Column({
+    nullable: false,
+    default: false,
+    type: ColumnType_default.Boolean
+  })
+], Project.prototype, "enableAutomaticSecurityCaseTriage", 2);
 __decorateClass([
   ColumnAccessControl_default({
     create: [Permission_default.User],
@@ -152753,6 +152922,7 @@ var Label = class extends AccessControlModel {
     this.projectId = void 0;
     this.name = void 0;
     this.slug = void 0;
+    this.nameSortKey = void 0;
     this.description = void 0;
     this.createdByUser = void 0;
     this.createdByUserId = void 0;
@@ -152911,6 +153081,26 @@ __decorateClass([
     length: ColumnLength_default.Slug
   })
 ], Label.prototype, "slug", 2);
+__decorateClass([
+  ColumnAccessControl_default({
+    create: [],
+    read: [],
+    update: []
+  }),
+  TableColumn_default({
+    required: false,
+    type: TableColumnType_default.LongText,
+    computed: true,
+    hideColumnInDocumentation: true,
+    description: "The name as OneUptime puts labels in order: numbers by their value, then letters, case and accents aside. Written by OneUptime from the name."
+  }),
+  Column({
+    nullable: true,
+    type: ColumnType_default.LongText,
+    length: ColumnLength_default.LongText,
+    collation: "C"
+  })
+], Label.prototype, "nameSortKey", 2);
 __decorateClass([
   ColumnAccessControl_default({
     create: [
@@ -231680,6 +231870,7 @@ var OnCallDutyPolicy = class extends DatabaseBaseModel {
     this.archivedByUserId = void 0;
     this.repeatPolicyIfNoOneAcknowledges = void 0;
     this.repeatPolicyIfNoOneAcknowledgesNoOfTimes = void 0;
+    this.acknowledgementTimeoutInMinutes = void 0;
     this.customFields = void 0;
     this.postUpdatesToWorkspaceChannels = void 0;
   }
@@ -232281,6 +232472,48 @@ __decorateClass([
     type: ColumnType_default.Number
   })
 ], OnCallDutyPolicy.prototype, "repeatPolicyIfNoOneAcknowledgesNoOfTimes", 2);
+__decorateClass([
+  ColumnAccessControl_default({
+    create: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.ProjectMember,
+      Permission_default.OnCallAdmin,
+      Permission_default.OnCallMember,
+      Permission_default.CreateProjectOnCallDutyPolicy
+    ],
+    read: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.ProjectMember,
+      Permission_default.Viewer,
+      Permission_default.OnCallAdmin,
+      Permission_default.OnCallMember,
+      Permission_default.OnCallViewer,
+      Permission_default.ReadProjectOnCallDutyPolicy
+    ],
+    update: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.ProjectMember,
+      Permission_default.OnCallAdmin,
+      Permission_default.OnCallMember,
+      Permission_default.EditProjectOnCallDutyPolicy
+    ]
+  }),
+  TableColumn_default({
+    required: false,
+    isDefaultValueColumn: false,
+    type: TableColumnType_default.Number,
+    title: "Acknowledgement Timeout In Minutes",
+    description: "Page again when something this policy paged about is acknowledged but not resolved within this many minutes (5 to 1440). Empty: never.",
+    example: 30
+  }),
+  Column({
+    nullable: true,
+    type: ColumnType_default.Number
+  })
+], OnCallDutyPolicy.prototype, "acknowledgementTimeoutInMinutes", 2);
 __decorateClass([
   ColumnAccessControl_default({
     create: [
@@ -238794,6 +239027,10 @@ ServiceLevelObjective = __decorateClass([
   })
 ], ServiceLevelObjective);
 
+// ../Common/Types/CallAndSMS/TwilioConfigUse.ts
+var DEFAULT_TWILIO_CONFIG_USE = "Calls and SMS" /* CallsAndSms */;
+var USED_FOR_TITLE = "Used For";
+
 // ../Common/Utils/Project/NotificationChannels.ts
 var PROJECT_NOTIFICATION_CHANNEL_UPDATE_PERMISSIONS = [
   Permission_default.ProjectOwner,
@@ -238816,7 +239053,9 @@ var STATUS_PAGE_SMS_SUBSCRIPTIONS_SMS_OFF_MESSAGE = `Visitors can't subscribe by
 var SERVER_TWILIO_SETTINGS_PAGE = "Admin Dashboard > Settings > Call and SMS";
 var PROJECT_TWILIO_SETTINGS_PAGE = PROJECT_NOTIFICATION_CHANNEL_SETTINGS_PAGE;
 var WHO_MAY_ADD_A_PROJECT_TWILIO_ACCOUNT = "a project owner, a project admin or someone with Create Call and SMS";
+var WHO_MAY_EDIT_A_PROJECT_TWILIO_ACCOUNT = "a project owner, a project admin or someone with Edit Call and SMS";
 var WHO_CAN_ADD_A_TWILIO_ACCOUNT_SENTENCE = `The OneUptime server's administrator can add one in ${SERVER_TWILIO_SETTINGS_PAGE}, or ${WHO_MAY_ADD_A_PROJECT_TWILIO_ACCOUNT} can add this project's own in ${PROJECT_TWILIO_SETTINGS_PAGE}.`;
+var WHO_CAN_USE_THE_PROJECT_TWILIO_ACCOUNT_FOR_IT_SENTENCE = `The OneUptime server's administrator can add one in ${SERVER_TWILIO_SETTINGS_PAGE}, or ${WHO_MAY_EDIT_A_PROJECT_TWILIO_ACCOUNT} can use this project's config for calls and SMS in ${PROJECT_TWILIO_SETTINGS_PAGE}.`;
 var INCOMING_CALL_NUMBER_NO_TWILIO_ACCOUNT_MESSAGE = `Numbers for incoming calls are verified by SMS, and no Twilio account is set up to send SMS. ${WHO_CAN_ADD_A_TWILIO_ACCOUNT_SENTENCE}`;
 
 // ../Common/Types/CallAndSMS/TwilioPhoneNumbers.ts
@@ -238835,6 +239074,7 @@ var ProjectCallSMSConfig = class extends DatabaseBaseModel {
     this.createdByUserId = void 0;
     this.deletedByUser = void 0;
     this.deletedByUserId = void 0;
+    this.usedFor = void 0;
     this.twilioAccountSID = void 0;
     this.twilioAuthToken = void 0;
     this.twilioPrimaryPhoneNumber = void 0;
@@ -239179,87 +239419,23 @@ __decorateClass([
     ]
   }),
   TableColumn_default({
+    isDefaultValueColumn: true,
+    required: true,
     type: TableColumnType_default.ShortText,
-    title: "Twilio Account SID",
-    description: "Account SID for your Twilio Account",
-    example: "ACxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx"
+    canReadOnRelationQuery: true,
+    title: USED_FOR_TITLE,
+    description: `What this Twilio config is used for: "Calls and SMS" (the default), "SMS only" or "Calls only". Calls and SMS and Calls only need a Twilio Primary Phone Number; SMS only needs Twilio SMS Phone Numbers. A config used for SMS only makes no calls, and one used for calls only sends no SMS: those go through OneUptime's own Twilio account, as for a project without a config.`,
+    defaultValue: DEFAULT_TWILIO_CONFIG_USE,
+    example: "SMS only" /* SmsOnly */
   }),
   Column({
     type: ColumnType_default.ShortText,
     length: ColumnLength_default.ShortText,
-    nullable: true,
-    unique: false
-  })
-], ProjectCallSMSConfig.prototype, "twilioAccountSID", 2);
-__decorateClass([
-  ColumnAccessControl_default({
-    create: [
-      Permission_default.ProjectOwner,
-      Permission_default.ProjectAdmin,
-      Permission_default.CreateProjectCallSMSConfig
-    ],
-    read: [
-      Permission_default.ProjectOwner,
-      Permission_default.ProjectAdmin,
-      Permission_default.ReadProjectCallSMSConfig
-    ],
-    update: [
-      Permission_default.ProjectOwner,
-      Permission_default.ProjectAdmin,
-      Permission_default.EditProjectCallSMSConfig
-    ]
-  }),
-  TableColumn_default({
-    type: TableColumnType_default.LongText,
-    encrypted: true,
-    title: "Twilio Auth Token",
-    description: "Auth Token for your Twilio Account",
-    example: "your-twilio-auth-token"
-  }),
-  Column({
-    type: ColumnType_default.LongText,
-    length: ColumnLength_default.LongText,
-    nullable: true,
-    unique: false
-  })
-], ProjectCallSMSConfig.prototype, "twilioAuthToken", 2);
-__decorateClass([
-  ColumnAccessControl_default({
-    create: [
-      Permission_default.ProjectOwner,
-      Permission_default.ProjectAdmin,
-      Permission_default.CreateProjectCallSMSConfig
-    ],
-    read: [
-      Permission_default.ProjectOwner,
-      Permission_default.ProjectAdmin,
-      Permission_default.ProjectMember,
-      Permission_default.Viewer,
-      Permission_default.SettingsAdmin,
-      Permission_default.SettingsMember,
-      Permission_default.SettingsViewer,
-      Permission_default.ReadProjectCallSMSConfig
-    ],
-    update: [
-      Permission_default.ProjectOwner,
-      Permission_default.ProjectAdmin,
-      Permission_default.EditProjectCallSMSConfig
-    ]
-  }),
-  TableColumn_default({
-    type: TableColumnType_default.Phone,
-    title: "Twilio Primary Phone Number",
-    description: "Primary Phone Number for your Twilio account",
-    example: "+15551234567"
-  }),
-  Column({
-    type: ColumnType_default.Phone,
-    length: ColumnLength_default.Phone,
-    nullable: true,
+    nullable: false,
     unique: false,
-    transformer: Phone.getDatabaseTransformer()
+    default: DEFAULT_TWILIO_CONFIG_USE
   })
-], ProjectCallSMSConfig.prototype, "twilioPrimaryPhoneNumber", 2);
+], ProjectCallSMSConfig.prototype, "usedFor", 2);
 __decorateClass([
   ColumnAccessControl_default({
     create: [
@@ -239284,18 +239460,18 @@ __decorateClass([
     ]
   }),
   TableColumn_default({
-    type: TableColumnType_default.LongText,
-    title: "Twilio Secondary Phone Numbers",
-    description: "Secondary Phone Number for your Twilio account",
-    example: "+15551234568,+15551234569"
+    type: TableColumnType_default.ShortText,
+    title: "Twilio Account SID",
+    description: "Account SID for your Twilio Account",
+    example: "ACxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx"
   }),
   Column({
-    type: ColumnType_default.LongText,
-    length: ColumnLength_default.LongText,
+    type: ColumnType_default.ShortText,
+    length: ColumnLength_default.ShortText,
     nullable: true,
     unique: false
   })
-], ProjectCallSMSConfig.prototype, "twilioSecondaryPhoneNumbers", 2);
+], ProjectCallSMSConfig.prototype, "twilioAccountSID", 2);
 __decorateClass([
   ColumnAccessControl_default({
     create: [
@@ -239306,11 +239482,6 @@ __decorateClass([
     read: [
       Permission_default.ProjectOwner,
       Permission_default.ProjectAdmin,
-      Permission_default.ProjectMember,
-      Permission_default.Viewer,
-      Permission_default.SettingsAdmin,
-      Permission_default.SettingsMember,
-      Permission_default.SettingsViewer,
       Permission_default.ReadProjectCallSMSConfig
     ],
     update: [
@@ -239321,14 +239492,10 @@ __decorateClass([
   }),
   TableColumn_default({
     type: TableColumnType_default.LongText,
-    title: "Twilio SMS Phone Numbers",
-    /*
-     * As GlobalConfig's says it: no country named, and the example list the
-     * forms and the error that refuses a list show - no one country's
-     * numbers.
-     */
-    description: "Comma-separated numbers to send SMS from, for phone numbers that can only make calls. Once set, every SMS goes out from the one in the recipient's country, or else the first. Leave it empty to send SMS from the same numbers as calls.",
-    example: PHONE_NUMBER_LIST_EXAMPLE
+    encrypted: true,
+    title: "Twilio Auth Token",
+    description: "Auth Token for your Twilio Account",
+    example: "your-twilio-auth-token"
   }),
   Column({
     type: ColumnType_default.LongText,
@@ -239336,7 +239503,121 @@ __decorateClass([
     nullable: true,
     unique: false
   })
-], ProjectCallSMSConfig.prototype, "twilioSmsPhoneNumbers", 2);
+], ProjectCallSMSConfig.prototype, "twilioAuthToken", 2);
+__decorateClass([
+  ColumnAccessControl_default({
+    create: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.CreateProjectCallSMSConfig
+    ],
+    read: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.ProjectMember,
+      Permission_default.Viewer,
+      Permission_default.SettingsAdmin,
+      Permission_default.SettingsMember,
+      Permission_default.SettingsViewer,
+      Permission_default.ReadProjectCallSMSConfig
+    ],
+    update: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.EditProjectCallSMSConfig
+    ]
+  }),
+  TableColumn_default({
+    type: TableColumnType_default.Phone,
+    title: "Twilio Primary Phone Number",
+    description: "Primary Phone Number for your Twilio account",
+    example: "+15551234567"
+  }),
+  Column({
+    type: ColumnType_default.Phone,
+    length: ColumnLength_default.Phone,
+    nullable: true,
+    unique: false,
+    transformer: Phone.getDatabaseTransformer()
+  })
+], ProjectCallSMSConfig.prototype, "twilioPrimaryPhoneNumber", 2);
+__decorateClass([
+  ColumnAccessControl_default({
+    create: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.CreateProjectCallSMSConfig
+    ],
+    read: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.ProjectMember,
+      Permission_default.Viewer,
+      Permission_default.SettingsAdmin,
+      Permission_default.SettingsMember,
+      Permission_default.SettingsViewer,
+      Permission_default.ReadProjectCallSMSConfig
+    ],
+    update: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.EditProjectCallSMSConfig
+    ]
+  }),
+  TableColumn_default({
+    type: TableColumnType_default.LongText,
+    title: "Twilio Secondary Phone Numbers",
+    description: "Secondary Phone Number for your Twilio account",
+    example: "+15551234568,+15551234569"
+  }),
+  Column({
+    type: ColumnType_default.LongText,
+    length: ColumnLength_default.LongText,
+    nullable: true,
+    unique: false
+  })
+], ProjectCallSMSConfig.prototype, "twilioSecondaryPhoneNumbers", 2);
+__decorateClass([
+  ColumnAccessControl_default({
+    create: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.CreateProjectCallSMSConfig
+    ],
+    read: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.ProjectMember,
+      Permission_default.Viewer,
+      Permission_default.SettingsAdmin,
+      Permission_default.SettingsMember,
+      Permission_default.SettingsViewer,
+      Permission_default.ReadProjectCallSMSConfig
+    ],
+    update: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.EditProjectCallSMSConfig
+    ]
+  }),
+  TableColumn_default({
+    type: TableColumnType_default.LongText,
+    title: "Twilio SMS Phone Numbers",
+    /*
+     * As GlobalConfig's says it: no country named, and the example list the
+     * forms and the error that refuses a list show - no one country's
+     * numbers.
+     */
+    description: "Comma-separated numbers to send SMS from, for phone numbers that can only make calls. Once set, every SMS goes out from the one in the recipient's country, or else the first. Leave it empty to send SMS from the same numbers as calls.",
+    example: PHONE_NUMBER_LIST_EXAMPLE
+  }),
+  Column({
+    type: ColumnType_default.LongText,
+    length: ColumnLength_default.LongText,
+    nullable: true,
+    unique: false
+  })
+], ProjectCallSMSConfig.prototype, "twilioSmsPhoneNumbers", 2);
 __decorateClass([
   ColumnAccessControl_default({
     create: [
@@ -265429,6 +265710,7 @@ var GlobalConfig2 = class extends GlobalConfig {
     this.twilioPrimaryPhoneNumber = void 0;
     this.twilioSecondaryPhoneNumbers = void 0;
     this.twilioSmsPhoneNumbers = void 0;
+    this.twilioUsedFor = void 0;
     this.metaWhatsAppAccessToken = void 0;
     this.metaWhatsAppPhoneNumberId = void 0;
     this.metaWhatsAppBusinessAccountId = void 0;
@@ -265438,6 +265720,7 @@ var GlobalConfig2 = class extends GlobalConfig {
     this.telegramBotToken = void 0;
     this.telegramBotUsername = void 0;
     this.telegramWebhookSecretToken = void 0;
+    this.telegramPollForUpdates = void 0;
     this.emailServerType = void 0;
     this.sendgridApiKey = void 0;
     this.sendgridFromEmail = void 0;
@@ -265906,6 +266189,28 @@ __decorateClass([
     unique: false
   })
 ], GlobalConfig2.prototype, "twilioSmsPhoneNumbers", 2);
+__decorateClass([
+  ColumnAccessControl_default({
+    create: [],
+    read: [],
+    update: []
+  }),
+  TableColumn_default({
+    isDefaultValueColumn: true,
+    required: true,
+    type: TableColumnType_default.ShortText,
+    title: "Twilio Used For",
+    description: `What the server's Twilio account sends: "Calls and SMS", "SMS only" or "Calls only".`,
+    defaultValue: DEFAULT_TWILIO_CONFIG_USE
+  }),
+  Column({
+    type: ColumnType_default.ShortText,
+    length: ColumnLength_default.ShortText,
+    nullable: false,
+    unique: false,
+    default: DEFAULT_TWILIO_CONFIG_USE
+  })
+], GlobalConfig2.prototype, "twilioUsedFor", 2);
 __decorateClass([
   ColumnAccessControl_default({
     create: [],
@@ -266065,6 +266370,24 @@ __decorateClass([
     unique: true
   })
 ], GlobalConfig2.prototype, "telegramWebhookSecretToken", 2);
+__decorateClass([
+  ColumnAccessControl_default({
+    create: [],
+    read: [],
+    update: []
+  }),
+  TableColumn_default({
+    type: TableColumnType_default.Boolean,
+    title: "Poll Telegram for Messages",
+    description: "When enabled, OneUptime fetches the bot's messages from Telegram over outbound HTTPS instead of waiting for Telegram to call its webhook. For servers Telegram cannot reach, such as one behind a VPN or firewall.",
+    defaultValue: false
+  }),
+  Column({
+    type: ColumnType_default.Boolean,
+    nullable: true,
+    default: false
+  })
+], GlobalConfig2.prototype, "telegramPollForUpdates", 2);
 __decorateClass([
   ColumnAccessControl_default({
     create: [],
@@ -280010,15 +280333,15 @@ __decorateClass([
   }),
   TableColumn_default({
     required: true,
-    type: TableColumnType_default.Name,
+    type: TableColumnType_default.ShortText,
     canReadOnRelationQuery: true,
     title: "Name",
     description: "Friendly name for this detection rule."
   }),
   Column({
     nullable: false,
-    type: ColumnType_default.Name,
-    length: ColumnLength_default.Name
+    type: ColumnType_default.ShortText,
+    length: ColumnLength_default.ShortText
   })
 ], DetectionRule.prototype, "name", 2);
 __decorateClass([
@@ -282854,6 +283177,12 @@ var SecurityCase = class extends DatabaseBaseModel {
     this.notifiedPriority = void 0;
     this.incident = void 0;
     this.incidentId = void 0;
+    this.aiVerdict = void 0;
+    this.aiSuggestedPriority = void 0;
+    this.aiSuggestedPlaybookId = void 0;
+    this.aiTriageReport = void 0;
+    this.aiTriagedAt = void 0;
+    this.aiTriagePromptInjectionSuspected = void 0;
     this.labels = void 0;
     this.createdByUser = void 0;
     this.createdByUserId = void 0;
@@ -283403,6 +283732,87 @@ __decorateClass([
     transformer: ObjectID.getDatabaseTransformer()
   })
 ], SecurityCase.prototype, "incidentId", 2);
+__decorateClass([
+  ColumnAccessControl_default(serverWrittenColumnAccess),
+  TableColumn_default({
+    type: TableColumnType_default.ShortText,
+    computed: true,
+    title: "AI Verdict",
+    description: "What OneUptime AI made of the case when it triaged it: Likely Malicious, Likely Benign, Likely False Positive or Inconclusive. A suggestion; a person sets the case's verdict."
+  }),
+  Column({
+    nullable: true,
+    type: ColumnType_default.ShortText,
+    length: ColumnLength_default.ShortText
+  })
+], SecurityCase.prototype, "aiVerdict", 2);
+__decorateClass([
+  ColumnAccessControl_default(serverWrittenColumnAccess),
+  TableColumn_default({
+    type: TableColumnType_default.ShortText,
+    computed: true,
+    title: "AI Suggested Priority",
+    description: "The priority OneUptime AI suggested when it triaged the case. The case's own priority changes only when a person sets it."
+  }),
+  Column({
+    nullable: true,
+    type: ColumnType_default.ShortText,
+    length: ColumnLength_default.ShortText
+  })
+], SecurityCase.prototype, "aiSuggestedPriority", 2);
+__decorateClass([
+  ColumnAccessControl_default(serverWrittenColumnAccess),
+  TableColumn_default({
+    type: TableColumnType_default.ObjectID,
+    computed: true,
+    title: "AI Suggested Playbook ID",
+    description: "ID of the project's playbook OneUptime AI suggested running when it triaged the case. It runs only when a person runs it."
+  }),
+  Column({
+    type: ColumnType_default.ObjectID,
+    nullable: true,
+    transformer: ObjectID.getDatabaseTransformer()
+  })
+], SecurityCase.prototype, "aiSuggestedPlaybookId", 2);
+__decorateClass([
+  ColumnAccessControl_default(serverWrittenColumnAccess),
+  TableColumn_default({
+    type: TableColumnType_default.Markdown,
+    computed: true,
+    title: "AI Triage Report",
+    description: "The report OneUptime AI wrote when it last triaged the case: what happened, its read and the evidence for it, and the next steps."
+  }),
+  Column({
+    nullable: true,
+    type: ColumnType_default.Markdown
+  })
+], SecurityCase.prototype, "aiTriageReport", 2);
+__decorateClass([
+  ColumnAccessControl_default(serverWrittenColumnAccess),
+  TableColumn_default({
+    type: TableColumnType_default.Date,
+    computed: true,
+    title: "AI Triaged At",
+    description: "When OneUptime AI last finished triaging the case."
+  }),
+  Column({
+    nullable: true,
+    type: ColumnType_default.Date
+  })
+], SecurityCase.prototype, "aiTriagedAt", 2);
+__decorateClass([
+  ColumnAccessControl_default(serverWrittenColumnAccess),
+  TableColumn_default({
+    type: TableColumnType_default.Boolean,
+    computed: true,
+    title: "AI Triage Prompt Injection Suspected",
+    description: "Whether OneUptime AI found text in the case's data written to steer an AI when it triaged the case. It then leaves the call to a person."
+  }),
+  Column({
+    nullable: true,
+    type: ColumnType_default.Boolean
+  })
+], SecurityCase.prototype, "aiTriagePromptInjectionSuspected", 2);
 __decorateClass([
   ColumnAccessControl_default({
     create: createPermissions3,
@@ -284701,6 +285111,7 @@ SecurityDetection = __decorateClass([
 var SecurityPlaybookTrigger = /* @__PURE__ */ ((SecurityPlaybookTrigger2) => {
   SecurityPlaybookTrigger2["CaseOpened"] = "Case Opened";
   SecurityPlaybookTrigger2["DetectionAdded"] = "Detection Added";
+  SecurityPlaybookTrigger2["TriagedAsLikelyMalicious"] = "Triaged as Likely Malicious";
   SecurityPlaybookTrigger2["Manual"] = "Manual";
   return SecurityPlaybookTrigger2;
 })(SecurityPlaybookTrigger || {});
@@ -301162,6 +301573,8 @@ var OnCallDutyPolicyExecutionLog = class extends DatabaseBaseModel {
     this.scheduleGapRetryCount = void 0;
     this.pagingStartsAt = void 0;
     this.pagingStartedEarlyReason = void 0;
+    this.acknowledgementTimeoutStartedAt = void 0;
+    this.pageAgainNumber = void 0;
     this.triggeredByUser = void 0;
     this.triggeredByUserId = void 0;
     this.triggeredByWorkflowId = void 0;
@@ -302374,6 +302787,62 @@ __decorateClass([
     nullable: true
   })
 ], OnCallDutyPolicyExecutionLog.prototype, "pagingStartedEarlyReason", 2);
+__decorateClass([
+  ColumnAccessControl_default({
+    create: [],
+    read: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.ProjectMember,
+      Permission_default.Viewer,
+      Permission_default.OnCallAdmin,
+      Permission_default.OnCallMember,
+      Permission_default.OnCallViewer,
+      Permission_default.ReadProjectOnCallDutyPolicyExecutionLog
+    ],
+    update: []
+  }),
+  TableColumn_default({
+    type: TableColumnType_default.Date,
+    required: false,
+    title: "Acknowledgement Timeout Started At",
+    description: "When the acknowledgement timeout started counting for this run's record: its last acknowledgement. Empty when it is not counting.",
+    canReadOnRelationQuery: false,
+    example: "2024-01-15T09:00:00.000Z"
+  }),
+  Column({
+    type: ColumnType_default.Date,
+    nullable: true
+  })
+], OnCallDutyPolicyExecutionLog.prototype, "acknowledgementTimeoutStartedAt", 2);
+__decorateClass([
+  ColumnAccessControl_default({
+    create: [],
+    read: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.ProjectMember,
+      Permission_default.Viewer,
+      Permission_default.OnCallAdmin,
+      Permission_default.OnCallMember,
+      Permission_default.OnCallViewer,
+      Permission_default.ReadProjectOnCallDutyPolicyExecutionLog
+    ],
+    update: []
+  }),
+  TableColumn_default({
+    type: TableColumnType_default.Number,
+    required: false,
+    title: "Page Again Number",
+    description: "For a run that pages again because its record stayed acknowledged without being resolved: which time, from 1. Empty for every other run.",
+    canReadOnRelationQuery: false,
+    example: 1
+  }),
+  Column({
+    type: ColumnType_default.Number,
+    nullable: true
+  })
+], OnCallDutyPolicyExecutionLog.prototype, "pageAgainNumber", 2);
 __decorateClass([
   ColumnAccessControl_default({
     create: [
@@ -302550,6 +303019,9 @@ OnCallDutyPolicyExecutionLog = __decorateClass([
   Entity({
     name: "OnCallDutyPolicyExecutionLog"
   }),
+  Index(["acknowledgementTimeoutStartedAt"], {
+    where: '"acknowledgementTimeoutStartedAt" IS NOT NULL AND "deletedAt" IS NULL'
+  }),
   TableMetadata_default({
     tableName: "OnCallDutyPolicyExecutionLog",
     singularName: "On-Call Duty Execution Log",
@@ -321581,6 +322053,8 @@ var CodeRepository = class extends DatabaseBaseModel {
     this.maxOpenFixPullRequests = void 0;
     this.isGitHubCommandsEnabled = void 0;
     this.gitHubTriggerLabel = void 0;
+    this.isProductionReviewEnabled = void 0;
+    this.productionReviewPullRequestContent = void 0;
     this.repositoryUrl = void 0;
     this.gitHubAppInstallationId = void 0;
     this.gitLabProjectId = void 0;
@@ -322284,6 +322758,89 @@ __decorateClass([
     length: ColumnLength_default.ShortText
   })
 ], CodeRepository.prototype, "gitHubTriggerLabel", 2);
+__decorateClass([
+  ColumnAccessControl_default({
+    create: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.ProjectMember,
+      Permission_default.SettingsAdmin,
+      Permission_default.SettingsMember,
+      Permission_default.CreateCodeRepository
+    ],
+    read: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.ProjectMember,
+      Permission_default.Viewer,
+      Permission_default.SettingsAdmin,
+      Permission_default.SettingsMember,
+      Permission_default.SettingsViewer,
+      Permission_default.ReadCodeRepository
+    ],
+    update: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.ProjectMember,
+      Permission_default.SettingsAdmin,
+      Permission_default.SettingsMember,
+      Permission_default.EditCodeRepository
+    ]
+  }),
+  TableColumn_default({
+    required: false,
+    type: TableColumnType_default.Boolean,
+    title: "Review Pull Requests Against Production",
+    description: "Whether OneUptime comments on this repository's pull requests with what production says about the code they change: the exceptions thrown in it, how busy and slow the operations it runs are, and the incidents and deploys around it. Only pull requests from people who can write to the repository are reviewed on their own.",
+    example: true
+  }),
+  Column({
+    nullable: true,
+    type: ColumnType_default.Boolean
+  })
+], CodeRepository.prototype, "isProductionReviewEnabled", 2);
+__decorateClass([
+  ColumnAccessControl_default({
+    create: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.ProjectMember,
+      Permission_default.SettingsAdmin,
+      Permission_default.SettingsMember,
+      Permission_default.CreateCodeRepository
+    ],
+    read: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.ProjectMember,
+      Permission_default.Viewer,
+      Permission_default.SettingsAdmin,
+      Permission_default.SettingsMember,
+      Permission_default.SettingsViewer,
+      Permission_default.ReadCodeRepository
+    ],
+    update: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.ProjectMember,
+      Permission_default.SettingsAdmin,
+      Permission_default.SettingsMember,
+      Permission_default.EditCodeRepository
+    ]
+  }),
+  TableColumn_default({
+    required: false,
+    type: TableColumnType_default.ShortText,
+    title: "Production Review Comment",
+    description: "What a production review posts on a pull request. Review (the default): the review, or only a link to it in OneUptime on a public repository. Link: only a link, whatever the repository. ReviewEvenIfPublic: the review, even on a public repository.",
+    example: "Review"
+  }),
+  Column({
+    nullable: true,
+    type: ColumnType_default.ShortText,
+    length: ColumnLength_default.ShortText
+  })
+], CodeRepository.prototype, "productionReviewPullRequestContent", 2);
 __decorateClass([
   ColumnAccessControl_default({
     create: [
@@ -324712,8 +325269,10 @@ var AIRun = class extends DatabaseBaseModel {
     this.triggeredByAlertId = void 0;
     this.followUpForAlertId = void 0;
     this.ruleWaitMinutes = void 0;
+    this.llmProviderId = void 0;
     this.triggeredByTelemetryExceptionId = void 0;
     this.triggeredByAiInsightId = void 0;
+    this.triggeredBySecurityCaseId = void 0;
     this.triggeredByAutoRemediationSuggestionId = void 0;
     this.monitorId = void 0;
     this.aiAgentId = void 0;
@@ -325149,6 +325708,30 @@ __decorateClass([
     nullable: true
   })
 ], AIRun.prototype, "ruleWaitMinutes", 2);
+__decorateClass([
+  ColumnAccessControl_default({
+    create: [],
+    read: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.ProjectMember,
+      Permission_default.Viewer
+    ],
+    update: []
+  }),
+  TableColumn_default({
+    type: TableColumnType_default.ObjectID,
+    required: false,
+    canReadOnRelationQuery: true,
+    title: "LLM Provider ID",
+    description: "The LLM provider the rule that started this run picked for it. Empty when no rule picked one: the project's default provider, else the global one."
+  }),
+  Column({
+    type: ColumnType_default.ObjectID,
+    nullable: true,
+    transformer: ObjectID.getDatabaseTransformer()
+  })
+], AIRun.prototype, "llmProviderId", 2);
 __decorateClass([
   ColumnAccessControl_default({
     create: [],
@@ -325199,6 +325782,31 @@ __decorateClass([
     transformer: ObjectID.getDatabaseTransformer()
   })
 ], AIRun.prototype, "triggeredByAiInsightId", 2);
+__decorateClass([
+  ColumnAccessControl_default({
+    create: [],
+    read: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.ProjectMember,
+      Permission_default.Viewer
+    ],
+    update: []
+  }),
+  Index(),
+  TableColumn_default({
+    type: TableColumnType_default.ObjectID,
+    required: false,
+    canReadOnRelationQuery: true,
+    title: "Triggered By Security Case ID",
+    description: "The security case this run triaged (for security case triage runs)."
+  }),
+  Column({
+    type: ColumnType_default.ObjectID,
+    nullable: true,
+    transformer: ObjectID.getDatabaseTransformer()
+  })
+], AIRun.prototype, "triggeredBySecurityCaseId", 2);
 __decorateClass([
   ColumnAccessControl_default({
     create: [],
@@ -379858,6 +380466,8 @@ var AutoRemediationRule = class extends RuleBaseModel {
     this.runner = void 0;
     this.runnerId = void 0;
     this.codeRepositories = void 0;
+    this.llmProvider = void 0;
+    this.llmProviderId = void 0;
     this.openCodeFixPullRequests = void 0;
     this.openTelemetryPullRequests = void 0;
     this.verificationWindowMinutes = void 0;
@@ -380680,15 +381290,134 @@ __decorateClass([
     ]
   }),
   TableColumn_default({
-    manyToOneRelationColumn: "runnerId",
+    manyToOneRelationColumn: "runnerId",
+    type: TableColumnType_default.Entity,
+    modelType: Runner,
+    title: "Runner",
+    description: "The Runner OneUptime AI runs this rule's Bash commands on, inside your network. Empty means none: OneUptime AI runs no commands of its own for the rule. Commands on the affected Kubernetes cluster or host always go through its AI agent."
+  }),
+  ManyToOne(
+    () => {
+      return Runner;
+    },
+    {
+      eager: false,
+      nullable: true,
+      onDelete: "SET NULL",
+      orphanedRowAction: "nullify"
+    }
+  ),
+  JoinColumn({ name: "runnerId" })
+], AutoRemediationRule.prototype, "runner", 2);
+__decorateClass([
+  ColumnAccessControl_default({
+    create: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.CreateAutoRemediationRule
+    ],
+    read: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.ProjectMember,
+      Permission_default.Viewer,
+      Permission_default.ReadAutoRemediationRule
+    ],
+    update: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.EditAutoRemediationRule
+    ]
+  }),
+  Index(),
+  TableColumn_default({
+    type: TableColumnType_default.ObjectID,
+    required: false,
+    canReadOnRelationQuery: true,
+    title: "Runner ID",
+    description: "ID of the Runner OneUptime AI runs this rule's Bash commands on: one of the project's own Runners. Empty means none: OneUptime AI runs no commands of its own for the rule. Commands on the affected Kubernetes cluster or host always go through its AI agent."
+  }),
+  Column({
+    type: ColumnType_default.ObjectID,
+    nullable: true,
+    transformer: ObjectID.getDatabaseTransformer()
+  })
+], AutoRemediationRule.prototype, "runnerId", 2);
+__decorateClass([
+  ColumnAccessControl_default({
+    create: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.CreateAutoRemediationRule
+    ],
+    read: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.ProjectMember,
+      Permission_default.Viewer,
+      Permission_default.ReadAutoRemediationRule
+    ],
+    update: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.EditAutoRemediationRule
+    ]
+  }),
+  TableColumn_default({
+    required: false,
+    type: TableColumnType_default.EntityArray,
+    modelType: CodeRepository,
+    title: "Code Repositories",
+    description: "The code repositories OneUptime AI may read while it fixes what this rule matches, and open the rule's pull requests in. Leave empty to let it use every repository the project has connected."
+  }),
+  ManyToMany(
+    () => {
+      return CodeRepository;
+    },
+    { eager: false }
+  ),
+  JoinTable({
+    name: "AutoRemediationRuleCodeRepository",
+    inverseJoinColumn: {
+      name: "codeRepositoryId",
+      referencedColumnName: "_id"
+    },
+    joinColumn: {
+      name: "autoRemediationRuleId",
+      referencedColumnName: "_id"
+    }
+  })
+], AutoRemediationRule.prototype, "codeRepositories", 2);
+__decorateClass([
+  ColumnAccessControl_default({
+    create: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.CreateAutoRemediationRule
+    ],
+    read: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.ProjectMember,
+      Permission_default.Viewer,
+      Permission_default.ReadAutoRemediationRule
+    ],
+    update: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.EditAutoRemediationRule
+    ]
+  }),
+  TableColumn_default({
+    manyToOneRelationColumn: "llmProviderId",
     type: TableColumnType_default.Entity,
-    modelType: Runner,
-    title: "Runner",
-    description: "The Runner OneUptime AI runs this rule's Bash commands on, inside your network. Empty means none: OneUptime AI runs no commands of its own for the rule. Commands on the affected Kubernetes cluster or host always go through its AI agent."
+    modelType: LlmProvider,
+    title: "LLM Provider",
+    description: "The LLM provider OneUptime AI uses for everything this rule starts: one of the project's providers or a global one. Empty: the project's default provider, else the global one."
   }),
   ManyToOne(
     () => {
-      return Runner;
+      return LlmProvider;
     },
     {
       eager: false,
@@ -380697,8 +381426,8 @@ __decorateClass([
       orphanedRowAction: "nullify"
     }
   ),
-  JoinColumn({ name: "runnerId" })
-], AutoRemediationRule.prototype, "runner", 2);
+  JoinColumn({ name: "llmProviderId" })
+], AutoRemediationRule.prototype, "llmProvider", 2);
 __decorateClass([
   ColumnAccessControl_default({
     create: [
@@ -380724,60 +381453,15 @@ __decorateClass([
     type: TableColumnType_default.ObjectID,
     required: false,
     canReadOnRelationQuery: true,
-    title: "Runner ID",
-    description: "ID of the Runner OneUptime AI runs this rule's Bash commands on: one of the project's own Runners. Empty means none: OneUptime AI runs no commands of its own for the rule. Commands on the affected Kubernetes cluster or host always go through its AI agent."
+    title: "LLM Provider ID",
+    description: "ID of the LLM provider OneUptime AI uses for everything this rule starts. Empty: the project's default provider, else the global one."
   }),
   Column({
     type: ColumnType_default.ObjectID,
     nullable: true,
     transformer: ObjectID.getDatabaseTransformer()
   })
-], AutoRemediationRule.prototype, "runnerId", 2);
-__decorateClass([
-  ColumnAccessControl_default({
-    create: [
-      Permission_default.ProjectOwner,
-      Permission_default.ProjectAdmin,
-      Permission_default.CreateAutoRemediationRule
-    ],
-    read: [
-      Permission_default.ProjectOwner,
-      Permission_default.ProjectAdmin,
-      Permission_default.ProjectMember,
-      Permission_default.Viewer,
-      Permission_default.ReadAutoRemediationRule
-    ],
-    update: [
-      Permission_default.ProjectOwner,
-      Permission_default.ProjectAdmin,
-      Permission_default.EditAutoRemediationRule
-    ]
-  }),
-  TableColumn_default({
-    required: false,
-    type: TableColumnType_default.EntityArray,
-    modelType: CodeRepository,
-    title: "Code Repositories",
-    description: "The code repositories OneUptime AI may read while it fixes what this rule matches, and open the rule's pull requests in. Leave empty to let it use every repository the project has connected."
-  }),
-  ManyToMany(
-    () => {
-      return CodeRepository;
-    },
-    { eager: false }
-  ),
-  JoinTable({
-    name: "AutoRemediationRuleCodeRepository",
-    inverseJoinColumn: {
-      name: "codeRepositoryId",
-      referencedColumnName: "_id"
-    },
-    joinColumn: {
-      name: "autoRemediationRuleId",
-      referencedColumnName: "_id"
-    }
-  })
-], AutoRemediationRule.prototype, "codeRepositories", 2);
+], AutoRemediationRule.prototype, "llmProviderId", 2);
 __decorateClass([
   ColumnAccessControl_default({
     create: [
@@ -382325,6 +383009,8 @@ var AIInvestigationRule = class extends RuleBaseModel {
     this.onlyIfOpenAfterMinutes = void 0;
     this.externalMcpServers = void 0;
     this.codeRepositories = void 0;
+    this.llmProvider = void 0;
+    this.llmProviderId = void 0;
     this.createdByUser = void 0;
     this.createdByUserId = void 0;
     this.deletedByUser = void 0;
@@ -382807,6 +383493,62 @@ __decorateClass([
     }
   })
 ], AIInvestigationRule.prototype, "codeRepositories", 2);
+__decorateClass([
+  ColumnAccessControl_default({
+    create: [Permission_default.ProjectOwner, Permission_default.ProjectAdmin],
+    read: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.ProjectMember,
+      Permission_default.Viewer
+    ],
+    update: [Permission_default.ProjectOwner, Permission_default.ProjectAdmin]
+  }),
+  TableColumn_default({
+    manyToOneRelationColumn: "llmProviderId",
+    type: TableColumnType_default.Entity,
+    modelType: LlmProvider,
+    title: "LLM Provider",
+    description: "The LLM provider OneUptime AI uses for everything this rule starts: one of the project's providers or a global one. Empty: the project's default provider, else the global one."
+  }),
+  ManyToOne(
+    () => {
+      return LlmProvider;
+    },
+    {
+      eager: false,
+      nullable: true,
+      onDelete: "SET NULL",
+      orphanedRowAction: "nullify"
+    }
+  ),
+  JoinColumn({ name: "llmProviderId" })
+], AIInvestigationRule.prototype, "llmProvider", 2);
+__decorateClass([
+  ColumnAccessControl_default({
+    create: [Permission_default.ProjectOwner, Permission_default.ProjectAdmin],
+    read: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.ProjectMember,
+      Permission_default.Viewer
+    ],
+    update: [Permission_default.ProjectOwner, Permission_default.ProjectAdmin]
+  }),
+  Index(),
+  TableColumn_default({
+    type: TableColumnType_default.ObjectID,
+    required: false,
+    canReadOnRelationQuery: true,
+    title: "LLM Provider ID",
+    description: "ID of the LLM provider OneUptime AI uses for everything this rule starts. Empty: the project's default provider, else the global one."
+  }),
+  Column({
+    type: ColumnType_default.ObjectID,
+    nullable: true,
+    transformer: ObjectID.getDatabaseTransformer()
+  })
+], AIInvestigationRule.prototype, "llmProviderId", 2);
 __decorateClass([
   ColumnAccessControl_default({
     create: [Permission_default.ProjectOwner, Permission_default.ProjectAdmin],
@@ -382948,6 +383690,8 @@ var AIPostmortemRule = class extends RuleBaseModel {
     this.titlePattern = void 0;
     this.descriptionPattern = void 0;
     this.postmortemTemplates = void 0;
+    this.llmProvider = void 0;
+    this.llmProviderId = void 0;
     this.createdByUser = void 0;
     this.createdByUserId = void 0;
     this.deletedByUser = void 0;
@@ -383336,6 +384080,62 @@ __decorateClass([
     }
   })
 ], AIPostmortemRule.prototype, "postmortemTemplates", 2);
+__decorateClass([
+  ColumnAccessControl_default({
+    create: [Permission_default.ProjectOwner, Permission_default.ProjectAdmin],
+    read: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.ProjectMember,
+      Permission_default.Viewer
+    ],
+    update: [Permission_default.ProjectOwner, Permission_default.ProjectAdmin]
+  }),
+  TableColumn_default({
+    manyToOneRelationColumn: "llmProviderId",
+    type: TableColumnType_default.Entity,
+    modelType: LlmProvider,
+    title: "LLM Provider",
+    description: "The LLM provider OneUptime AI uses for everything this rule drafts: one of the project's providers or a global one. Empty: the project's default provider, else the global one."
+  }),
+  ManyToOne(
+    () => {
+      return LlmProvider;
+    },
+    {
+      eager: false,
+      nullable: true,
+      onDelete: "SET NULL",
+      orphanedRowAction: "nullify"
+    }
+  ),
+  JoinColumn({ name: "llmProviderId" })
+], AIPostmortemRule.prototype, "llmProvider", 2);
+__decorateClass([
+  ColumnAccessControl_default({
+    create: [Permission_default.ProjectOwner, Permission_default.ProjectAdmin],
+    read: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.ProjectMember,
+      Permission_default.Viewer
+    ],
+    update: [Permission_default.ProjectOwner, Permission_default.ProjectAdmin]
+  }),
+  Index(),
+  TableColumn_default({
+    type: TableColumnType_default.ObjectID,
+    required: false,
+    canReadOnRelationQuery: true,
+    title: "LLM Provider ID",
+    description: "ID of the LLM provider OneUptime AI uses for everything this rule drafts. Empty: the project's default provider, else the global one."
+  }),
+  Column({
+    type: ColumnType_default.ObjectID,
+    nullable: true,
+    transformer: ObjectID.getDatabaseTransformer()
+  })
+], AIPostmortemRule.prototype, "llmProviderId", 2);
 __decorateClass([
   ColumnAccessControl_default({
     create: [Permission_default.ProjectOwner, Permission_default.ProjectAdmin],
@@ -398452,6 +399252,7 @@ var AlertOwnerRule = class extends RuleBaseModel {
     this.monitorDescriptionPattern = void 0;
     this.ownerUsers = void 0;
     this.ownerTeams = void 0;
+    this.creatorTeams = void 0;
     this.inheritOwnersFromMonitors = void 0;
     this.inheritOwnersFromHosts = void 0;
     this.inheritOwnersFromKubernetesClusters = void 0;
@@ -399112,6 +399913,54 @@ __decorateClass([
     }
   })
 ], AlertOwnerRule.prototype, "ownerTeams", 2);
+__decorateClass([
+  ColumnAccessControl_default({
+    create: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.CreateAlertOwnerRule
+    ],
+    read: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.ProjectMember,
+      Permission_default.Viewer,
+      Permission_default.AlertAdmin,
+      Permission_default.AlertMember,
+      Permission_default.AlertViewer,
+      Permission_default.ReadAlertOwnerRule
+    ],
+    update: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.EditAlertOwnerRule
+    ]
+  }),
+  TableColumn_default({
+    required: false,
+    type: TableColumnType_default.EntityArray,
+    modelType: Team,
+    title: "Creator's Teams",
+    description: "Teams added as owners when the person who creates a matching alert is a member of them. Alerts with no creator get none."
+  }),
+  ManyToMany(
+    () => {
+      return Team;
+    },
+    { eager: false }
+  ),
+  JoinTable({
+    name: "AlertOwnerRuleCreatorTeam",
+    inverseJoinColumn: {
+      name: "teamId",
+      referencedColumnName: "_id"
+    },
+    joinColumn: {
+      name: "alertOwnerRuleId",
+      referencedColumnName: "_id"
+    }
+  })
+], AlertOwnerRule.prototype, "creatorTeams", 2);
 __decorateClass([
   ColumnAccessControl_default({
     create: [
@@ -409794,6 +410643,7 @@ var IncidentOwnerRule = class extends RuleBaseModel {
     this.monitorDescriptionPattern = void 0;
     this.ownerUsers = void 0;
     this.ownerTeams = void 0;
+    this.creatorTeams = void 0;
     this.inheritOwnersFromMonitors = void 0;
     this.inheritOwnersFromHosts = void 0;
     this.inheritOwnersFromKubernetesClusters = void 0;
@@ -410454,6 +411304,54 @@ __decorateClass([
     }
   })
 ], IncidentOwnerRule.prototype, "ownerTeams", 2);
+__decorateClass([
+  ColumnAccessControl_default({
+    create: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.CreateIncidentOwnerRule
+    ],
+    read: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.ProjectMember,
+      Permission_default.Viewer,
+      Permission_default.IncidentAdmin,
+      Permission_default.IncidentMember,
+      Permission_default.IncidentViewer,
+      Permission_default.ReadIncidentOwnerRule
+    ],
+    update: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.EditIncidentOwnerRule
+    ]
+  }),
+  TableColumn_default({
+    required: false,
+    type: TableColumnType_default.EntityArray,
+    modelType: Team,
+    title: "Creator's Teams",
+    description: "Teams added as owners when the person who declares a matching incident is a member of them. Incidents with no creator get none."
+  }),
+  ManyToMany(
+    () => {
+      return Team;
+    },
+    { eager: false }
+  ),
+  JoinTable({
+    name: "IncidentOwnerRuleCreatorTeam",
+    inverseJoinColumn: {
+      name: "teamId",
+      referencedColumnName: "_id"
+    },
+    joinColumn: {
+      name: "incidentOwnerRuleId",
+      referencedColumnName: "_id"
+    }
+  })
+], IncidentOwnerRule.prototype, "creatorTeams", 2);
 __decorateClass([
   ColumnAccessControl_default({
     create: [