@oneuptime/common 11.5.3 → 11.5.5

package/build/dist/Server/Utils/AI/SRE/ConfidenceSignal.js

@@ -0,0 +1,226 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+import AIService, { AI_CONFIDENCE_CLASSIFICATION_FEATURE, } from "../../../Services/AIService";
+import logger from "../../Logger";
+import CaptureSpan from "../../Telemetry/CaptureSpan";
+/*
+ * AI SRE — the structured, server-verified confidence signal (G6).
+ *
+ * The vision's §6 threat model forbids deriving control flow from free-form
+ * model prose: adversarial telemetry can steer what the model writes, so a
+ * regex over the analysis (the old INCONCLUSIVE_RE) was forgeable by prompt
+ * injection. This module replaces it with a two-part signal:
+ *
+ *   1. Deterministic evidence floor (pure, no LLM): computed from the run's
+ *      OWN recorded tool activity. Citations are minted server-side from
+ *      validated tool arguments — never by the model — so prose cannot fake
+ *      evidence that was never minted. Zero citations AND zero data-bearing
+ *      tool calls → INCONCLUSIVE, regardless of anything the analysis says.
+ *
+ *   2. Constrained classification (only when the floor passes): ONE metered
+ *      LLM call (temperature 0, tiny token cap, word-bounded single-token
+ *      parse — the InvestigationGrader idiom) asking whether the analysis
+ *      asserts a specific, evidenced root cause or is inconclusive. The
+ *      classifier sees the analysis as DATA and can only emit one of two
+ *      tokens — it cannot be steered into an arbitrary control decision.
+ *
+ * FAIL DIRECTIONS ARE PER-CONSUMER, and that is the point of the structured
+ * result: `{confident, source}` lets each consumer choose its own safe
+ * degradation when the classification itself failed (unparseable response or
+ * the call errored). As implemented:
+ *
+ *   | source                | confident | workspace ping | instrumentation PR |
+ *   |-----------------------|-----------|----------------|--------------------|
+ *   | deterministic-floor   | false     | no (quiet)     | yes (enqueue)      |
+ *   | classification        | true      | yes            | no                 |
+ *   | classification        | false     | no (quiet)     | yes (enqueue)      |
+ *   | classification-failed | false (*) | YES — louder   | NO — no PR         |
+ *
+ *   - The workspace ping treats classification-failed as CONFIDENT: quiet
+ *     mode's fail direction is "louder, not silent" (vision §6) — a broken
+ *     classifier must never suppress the on-call ping.
+ *   - The instrumentation trigger treats classification-failed as
+ *     NOT-inconclusive: autonomous PR creation (G11 posture) requires a
+ *     POSITIVE, verified inconclusive verdict — "we don't know" must fail
+ *     toward doing nothing.
+ *   - (*) When source is "classification-failed" the `confident` boolean is
+ *     a placeholder, NOT a verdict — consumers must route decisions through
+ *     the helpers below, never through the raw boolean.
+ *
+ * Budget accounting: the classification call runs AFTER the investigation's
+ * agent loop has finished, so it is deliberately OUTSIDE the engine's per-run
+ * caps (MAX_LLM_CALLS / MAX_OUTPUT_TOKENS govern the loop, whose counts are
+ * persisted at the Completed transition before this call fires). It is still
+ * metered per-call in LlmLog and its feature is in AUTONOMOUS_AI_FEATURES, so
+ * the G4 daily autonomous token budget covers it — and a budget rejection
+ * degrades the signal to "classification-failed", never a run failure.
+ */
+/*
+ * Persisted LlmLog label, and a member of AUTONOMOUS_AI_FEATURES (G4 budget).
+ * Owned by AIService so this writer and the budget match-list cannot drift —
+ * a drift would silently drop classification out of the budget forever.
+ */
+export const CONFIDENCE_CLASSIFICATION_FEATURE = AI_CONFIDENCE_CLASSIFICATION_FEATURE;
+// Truncation cap keeps the classification call cheap and inside context limits.
+const MAX_ANALYSIS_CHARS = 8000;
+/*
+ * Word-bounded token matchers (hoisted: wrap-regex and prettier disagree
+ * inline). Word boundaries mean CONFIDENTLY / INCONCLUSIVELY do not parse.
+ */
+const CONFIDENT_RE = /\bCONFIDENT\b/;
+const INCONCLUSIVE_RE = /\bINCONCLUSIVE\b/;
+export default class AIConfidenceSignal {
+    /*
+     * THE single definition of "data-bearing" (shared with the eval harness in
+     * Utils/AI/Eval): a tool result that carried at least one row of data.
+     * rowCount 0 is still server-verified evidence — proof of absence ("checked,
+     * found nothing") — but it is not data-BEARING. Both the live confidence
+     * floor (over minted citations) and the offline corpus derivation (over
+     * recorded AIRunEvent resultSummary.rowCount) route through this helper so
+     * the two can never drift apart.
+     */
+    static isDataBearingRowCount(rowCount) {
+        return (rowCount || 0) > 0;
+    }
+    // Derive the deterministic evidence inputs from the run's minted citations.
+    static evidenceFromCitations(citations) {
+        const dataBearingToolCallCount = citations.filter((citation) => {
+            return this.isDataBearingRowCount(citation.rowCount);
+        }).length;
+        return {
+            citationCount: citations.length,
+            dataBearingToolCallCount,
+            anyToolReturnedData: dataBearingToolCallCount > 0,
+        };
+    }
+    /*
+     * The deterministic floor (pure, exported for tests): zero citations AND
+     * zero successful data-bearing tool calls → no server-verified evidence
+     * exists, so the run is INCONCLUSIVE no matter what the prose claims.
+     * Prose cannot fake evidence that was never minted server-side.
+     */
+    static hasVerifiableEvidence(evidence) {
+        return (evidence.citationCount > 0 ||
+            evidence.dataBearingToolCallCount > 0 ||
+            evidence.anyToolReturnedData);
+    }
+    /*
+     * Defensive one-token parse (pure, exported for tests). The prompt demands
+     * exactly one token, but models editorialize — accept the verdict when
+     * exactly ONE of the two tokens appears, word-bounded. Both found, neither
+     * found, or empty → null (classification failed; per-consumer fail
+     * directions apply).
+     */
+    static parseClassificationToken(response) {
+        if (!response) {
+            return null;
+        }
+        const text = response.toUpperCase();
+        const isConfident = CONFIDENT_RE.test(text);
+        const isInconclusive = INCONCLUSIVE_RE.test(text);
+        if (isConfident === isInconclusive) {
+            // Both or neither → unparseable.
+            return null;
+        }
+        return isConfident;
+    }
+    /*
+     * Consumer decision: should the analysis post ping the workspace/on-call?
+     * Fail direction: classification-failed → TRUE. Quiet mode fails LOUDER,
+     * not silent — a broken classifier must never suppress the ping (the old
+     * regex's fail direction, kept deliberately).
+     */
+    static shouldSendWorkspaceNotification(signal) {
+        if (signal.source === "classification-failed") {
+            return true;
+        }
+        return signal.confident;
+    }
+    /*
+     * Consumer decision: should an ImproveInstrumentation fix task be enqueued
+     * (opted-in projects only — the trigger has its own gates)? Requires a
+     * POSITIVE inconclusive verdict: either the deterministic floor proved no
+     * evidence exists, or the classification said INCONCLUSIVE. Fail direction:
+     * classification-failed → FALSE — autonomous PR creation fails toward
+     * doing nothing (G11 posture).
+     */
+    static shouldEnqueueInstrumentationTask(signal) {
+        if (signal.source === "classification-failed") {
+            return false;
+        }
+        return !signal.confident;
+    }
+    /*
+     * Compute the full signal: deterministic floor first (no LLM call when it
+     * fails), then one constrained classification call. NEVER throws — an
+     * errored or unparseable classification returns "classification-failed"
+     * and each consumer applies its own fail direction.
+     */
+    static async computeConfidenceSignal(data) {
+        if (!this.hasVerifiableEvidence(data.evidence)) {
+            /*
+             * No server-minted evidence exists — inconclusive by construction,
+             * regardless of the prose. No classification call is spent.
+             */
+            return { confident: false, source: "deterministic-floor" };
+        }
+        try {
+            const response = await AIService.executeWithLogging({
+                projectId: data.projectId,
+                feature: CONFIDENCE_CLASSIFICATION_FEATURE,
+                aiRunId: data.aiRunId,
+                // The verdict drives control flow; no prompt previews in LlmLog.
+                storeContentPreviews: false,
+                temperature: 0,
+                maxTokens: 20,
+                messages: [
+                    {
+                        role: "system",
+                        content: [
+                            "You judge an AI incident investigation's own analysis.",
+                            "Does this analysis assert a specific root cause with supporting evidence, or is it inconclusive?",
+                            "Reply with exactly one token and nothing else:",
+                            "CONFIDENT — the analysis asserts a specific root cause with supporting evidence.",
+                            "INCONCLUSIVE — the analysis could not determine a cause, or asserts one without supporting evidence.",
+                        ].join("\n"),
+                    },
+                    {
+                        role: "user",
+                        content: [
+                            "AI investigation analysis:",
+                            '"""',
+                            data.analysisMarkdown.substring(0, MAX_ANALYSIS_CHARS),
+                            '"""',
+                            "",
+                            "One token only: CONFIDENT or INCONCLUSIVE.",
+                        ].join("\n"),
+                    },
+                ],
+            });
+            const verdict = this.parseClassificationToken(response.content);
+            if (verdict === null) {
+                logger.warn(`AI confidence: unparseable classification response for run ${data.aiRunId.toString()} — per-consumer fail directions apply.`);
+                return { confident: false, source: "classification-failed" };
+            }
+            return { confident: verdict, source: "classification" };
+        }
+        catch (error) {
+            logger.error(`AI confidence: classification call failed for run ${data.aiRunId.toString()} — per-consumer fail directions apply: ${error}`);
+            return { confident: false, source: "classification-failed" };
+        }
+    }
+}
+__decorate([
+    CaptureSpan(),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object]),
+    __metadata("design:returntype", Promise)
+], AIConfidenceSignal, "computeConfidenceSignal", null);
+//# sourceMappingURL=ConfidenceSignal.js.map

package/build/dist/Server/Utils/AI/SRE/ConfidenceSignal.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ConfidenceSignal.js","sourceRoot":"","sources":["../../../../../../Server/Utils/AI/SRE/ConfidenceSignal.ts"],"names":[],"mappings":";;;;;;;;;AAEA,OAAO,SAAS,EAAE,EAEhB,oCAAoC,GACrC,MAAM,6BAA6B,CAAC;AACrC,OAAO,MAAM,MAAM,cAAc,CAAC;AAClC,OAAO,WAAW,MAAM,6BAA6B,CAAC;AAEtD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmDG;AAEH;;;;GAIG;AACH,MAAM,CAAC,MAAM,iCAAiC,GAC5C,oCAAoC,CAAC;AAEvC,gFAAgF;AAChF,MAAM,kBAAkB,GAAW,IAAI,CAAC;AAExC;;;GAGG;AACH,MAAM,YAAY,GAAW,eAAe,CAAC;AAC7C,MAAM,eAAe,GAAW,kBAAkB,CAAC;AAgCnD,MAAM,CAAC,OAAO,OAAO,kBAAkB;IACrC;;;;;;;;OAQG;IACI,MAAM,CAAC,qBAAqB,CACjC,QAAmC;QAEnC,OAAO,CAAC,QAAQ,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;IAC7B,CAAC;IAED,4EAA4E;IACrE,MAAM,CAAC,qBAAqB,CACjC,SAAgC;QAEhC,MAAM,wBAAwB,GAAW,SAAS,CAAC,MAAM,CACvD,CAAC,QAAwB,EAAE,EAAE;YAC3B,OAAO,IAAI,CAAC,qBAAqB,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACvD,CAAC,CACF,CAAC,MAAM,CAAC;QAET,OAAO;YACL,aAAa,EAAE,SAAS,CAAC,MAAM;YAC/B,wBAAwB;YACxB,mBAAmB,EAAE,wBAAwB,GAAG,CAAC;SAClD,CAAC;IACJ,CAAC;IAED;;;;;OAKG;IACI,MAAM,CAAC,qBAAqB,CAAC,QAAuB;QACzD,OAAO,CACL,QAAQ,CAAC,aAAa,GAAG,CAAC;YAC1B,QAAQ,CAAC,wBAAwB,GAAG,CAAC;YACrC,QAAQ,CAAC,mBAAmB,CAC7B,CAAC;IACJ,CAAC;IAED;;;;;;OAMG;IACI,MAAM,CAAC,wBAAwB,CACpC,QAAmC;QAEnC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,IAAI,GAAW,QAAQ,CAAC,WAAW,EAAE,CAAC;QAE5C,MAAM,WAAW,GAAY,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACrD,MAAM,cAAc,GAAY,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAE3D,IAAI,WAAW,KAAK,cAAc,EAAE,CAAC;YACnC,iCAAiC;YACjC,OAAO,IAAI,CAAC;QACd,CAAC;QAED,OAAO,WAAW,CAAC;IACrB,CAAC;IAED;;;;;OAKG;IACI,MAAM,CAAC,+BAA+B,CAC3C,MAAwB;QAExB,IAAI,MAAM,CAAC,MAAM,KAAK,uBAAuB,EAAE,CAAC;YAC9C,OAAO,IAAI,CAAC;QACd,CAAC;QAED,OAAO,MAAM,CAAC,SAAS,CAAC;IAC1B,CAAC;IAED;;;;;;;OAOG;IACI,MAAM,CAAC,gCAAgC,CAC5C,MAAwB;QAExB,IAAI,MAAM,CAAC,MAAM,KAAK,uBAAuB,EAAE,CAAC;YAC9C,OAAO,KAAK,CAAC;QACf,CAAC;QAED,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC;IAC3B,CAAC;IAED;;;;;OAKG;IAEiB,AAAb,MAAM,CAAC,KAAK,CAAC,uBAAuB,CAAC,IAK3C;QACC,IAAI,CAAC,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC/C;;;eAGG;YACH,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,qBAAqB,EAAE,CAAC;QAC7D,CAAC;QAED,IAAI,CAAC;YACH,MAAM,QAAQ,GAAkB,MAAM,SAAS,CAAC,kBAAkB,CAAC;gBACjE,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,OAAO,EAAE,iCAAiC;gBAC1C,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,iEAAiE;gBACjE,oBAAoB,EAAE,KAAK;gBAC3B,WAAW,EAAE,CAAC;gBACd,SAAS,EAAE,EAAE;gBACb,QAAQ,EAAE;oBACR;wBACE,IAAI,EAAE,QAAQ;wBACd,OAAO,EAAE;4BACP,wDAAwD;4BACxD,kGAAkG;4BAClG,gDAAgD;4BAChD,kFAAkF;4BAClF,sGAAsG;yBACvG,CAAC,IAAI,CAAC,IAAI,CAAC;qBACb;oBACD;wBACE,IAAI,EAAE,MAAM;wBACZ,OAAO,EAAE;4BACP,4BAA4B;4BAC5B,KAAK;4BACL,IAAI,CAAC,gBAAgB,CAAC,SAAS,CAAC,CAAC,EAAE,kBAAkB,CAAC;4BACtD,KAAK;4BACL,EAAE;4BACF,4CAA4C;yBAC7C,CAAC,IAAI,CAAC,IAAI,CAAC;qBACb;iBACF;aACF,CAAC,CAAC;YAEH,MAAM,OAAO,GAAmB,IAAI,CAAC,wBAAwB,CAC3D,QAAQ,CAAC,OAAO,CACjB,CAAC;YAEF,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;gBACrB,MAAM,CAAC,IAAI,CACT,8DAA8D,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,wCAAwC,CAC9H,CAAC;gBACF,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,uBAAuB,EAAE,CAAC;YAC/D,CAAC;YAED,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC;QAC1D,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CACV,qDAAqD,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,0CAA0C,KAAK,EAAE,CAC9H,CAAC;YACF,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,uBAAuB,EAAE,CAAC;QAC/D,CAAC;IACH,CAAC;CACF;AAnEqB;IADnB,WAAW,EAAE;;;;uDAmEb"}

package/build/dist/Server/Utils/AI/SRE/FixFromIncidentTaskTrigger.js

@@ -0,0 +1,100 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+import AIRunType from "../../../../Types/AI/AIRunType";
+import AIRunStatus from "../../../../Types/AI/AIRunStatus";
+import CodeFixTaskType from "../../../../Types/AI/CodeFixTaskType";
+import BadDataException from "../../../../Types/Exception/BadDataException";
+import AIRunService from "../../../Services/AIRunService";
+import SubjectCodeFixRun from "./SubjectCodeFixRun";
+import CaptureSpan from "../../Telemetry/CaptureSpan";
+/*
+ * AI SRE — the FixFromIncident trigger (the roadmap's headline `code_fix`
+ * capability, vision §4.8, in human-triggered form).
+ *
+ * After a AI investigation posts a root-cause analysis on an incident
+ * or alert, the user can click "Open Fix PR from this analysis" on the
+ * investigation panel: the agent takes the posted analysis (the RootCause
+ * feed item) as its entire context and opens a fix pull request. Unlike the
+ * ImproveInstrumentation sibling this is NOT automatic — a human reads the
+ * analysis and decides a fix PR is worth opening, so no project opt-in flag
+ * is needed: the human in the loop IS the gate (G11 posture preserved).
+ *
+ * And unlike InstrumentationTaskTrigger (fire-and-forget inside the
+ * investigation's postAnalysis, never throws), this runs inside a
+ * user-facing endpoint (POST /ai-investigation/create-fix-task) and FAILS
+ * EARLY with a clear message when a gate is not met.
+ */
+export default class FixFromIncidentTaskTrigger {
+    /*
+     * Gate and enqueue a FixFromIncident CodeFix run for the subject. The
+     * caller must already have access-checked the subject under the USER's
+     * permissions — this method reads and writes as root. Exactly one of
+     * incidentId/alertId is expected; userId is the clicking user
+     * (attribution on the run).
+     *
+     * Throws BadDataException naming the failed gate: no completed
+     * investigation, no GitHub-App repository, or a duplicate active run.
+     */
+    static async createFixTaskFromInvestigation(data) {
+        if (!data.incidentId && !data.alertId) {
+            throw new BadDataException("An incident or alert subject is required to create a fix task.");
+        }
+        const subjectLabel = data.incidentId
+            ? "incident"
+            : "alert";
+        /*
+         * Gate 1: a COMPLETED investigation must exist for the subject — its
+         * posted analysis (the RootCause feed item) is the fix task's entire
+         * context. Without one the worker would have nothing to work from.
+         */
+        const completedInvestigation = await AIRunService.findOneBy({
+            query: Object.assign({ runType: AIRunType.Investigation, status: AIRunStatus.Completed }, (data.incidentId
+                ? { triggeredByIncidentId: data.incidentId }
+                : { triggeredByAlertId: data.alertId })),
+            select: { _id: true },
+            props: { isRoot: true },
+        });
+        if (!completedInvestigation) {
+            throw new BadDataException(`No completed AI investigation exists for this ${subjectLabel} — the fix task uses the investigation's posted analysis as its context. Wait for the investigation to complete, or enable AI investigations in the AI settings.`);
+        }
+        // Gate 2: a repository the agent can actually open a PR against.
+        const hasConnectedRepository = await SubjectCodeFixRun.hasGitHubAppConnectedRepository(data.projectId);
+        if (!hasConnectedRepository) {
+            throw new BadDataException("No GitHub-App-connected repository exists for this project, so the agent has nowhere to open the fix pull request. Connect one under AI > Code Repositories.");
+        }
+        /*
+         * Gate 3: per-subject dedupe — at most one non-terminal FixFromIncident
+         * run per incident/alert (repeated clicks must not fan out into
+         * duplicate PRs).
+         */
+        const existingRun = await SubjectCodeFixRun.findNonTerminalRunForSubject({
+            taskType: CodeFixTaskType.FixFromIncident,
+            incidentId: data.incidentId,
+            alertId: data.alertId,
+        });
+        if (existingRun) {
+            throw new BadDataException(`A fix pull request task is already queued or running for this ${subjectLabel}. Track its progress on the AI > Tasks page.`);
+        }
+        return SubjectCodeFixRun.enqueueSubjectCodeFixRun({
+            projectId: data.projectId,
+            taskType: CodeFixTaskType.FixFromIncident,
+            incidentId: data.incidentId,
+            alertId: data.alertId,
+            userId: data.userId,
+        });
+    }
+}
+__decorate([
+    CaptureSpan(),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object]),
+    __metadata("design:returntype", Promise)
+], FixFromIncidentTaskTrigger, "createFixTaskFromInvestigation", null);
+//# sourceMappingURL=FixFromIncidentTaskTrigger.js.map

package/build/dist/Server/Utils/AI/SRE/FixFromIncidentTaskTrigger.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"FixFromIncidentTaskTrigger.js","sourceRoot":"","sources":["../../../../../../Server/Utils/AI/SRE/FixFromIncidentTaskTrigger.ts"],"names":[],"mappings":";;;;;;;;;AACA,OAAO,SAAS,MAAM,gCAAgC,CAAC;AACvD,OAAO,WAAW,MAAM,kCAAkC,CAAC;AAC3D,OAAO,eAAe,MAAM,sCAAsC,CAAC;AACnE,OAAO,gBAAgB,MAAM,8CAA8C,CAAC;AAE5E,OAAO,YAAY,MAAM,gCAAgC,CAAC;AAC1D,OAAO,iBAAiB,MAAM,qBAAqB,CAAC;AACpD,OAAO,WAAW,MAAM,6BAA6B,CAAC;AAEtD;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,CAAC,OAAO,OAAO,0BAA0B;IAC7C;;;;;;;;;OASG;IAEiB,AAAb,MAAM,CAAC,KAAK,CAAC,8BAA8B,CAAC,IAKlD;QACC,IAAI,CAAC,IAAI,CAAC,UAAU,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;YACtC,MAAM,IAAI,gBAAgB,CACxB,gEAAgE,CACjE,CAAC;QACJ,CAAC;QAED,MAAM,YAAY,GAAyB,IAAI,CAAC,UAAU;YACxD,CAAC,CAAC,UAAU;YACZ,CAAC,CAAC,OAAO,CAAC;QAEZ;;;;WAIG;QACH,MAAM,sBAAsB,GAAiB,MAAM,YAAY,CAAC,SAAS,CAAC;YACxE,KAAK,kBACH,OAAO,EAAE,SAAS,CAAC,aAAa,EAChC,MAAM,EAAE,WAAW,CAAC,SAAS,IAC1B,CAAC,IAAI,CAAC,UAAU;gBACjB,CAAC,CAAC,EAAE,qBAAqB,EAAE,IAAI,CAAC,UAAU,EAAE;gBAC5C,CAAC,CAAC,EAAE,kBAAkB,EAAE,IAAI,CAAC,OAAQ,EAAE,CAAC,CAC3C;YACD,MAAM,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE;YACrB,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE;SACxB,CAAC,CAAC;QAEH,IAAI,CAAC,sBAAsB,EAAE,CAAC;YAC5B,MAAM,IAAI,gBAAgB,CACxB,iDAAiD,YAAY,kKAAkK,CAChO,CAAC;QACJ,CAAC;QAED,iEAAiE;QACjE,MAAM,sBAAsB,GAC1B,MAAM,iBAAiB,CAAC,+BAA+B,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAE1E,IAAI,CAAC,sBAAsB,EAAE,CAAC;YAC5B,MAAM,IAAI,gBAAgB,CACxB,8JAA8J,CAC/J,CAAC;QACJ,CAAC;QAED;;;;WAIG;QACH,MAAM,WAAW,GACf,MAAM,iBAAiB,CAAC,4BAA4B,CAAC;YACnD,QAAQ,EAAE,eAAe,CAAC,eAAe;YACzC,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,OAAO,EAAE,IAAI,CAAC,OAAO;SACtB,CAAC,CAAC;QAEL,IAAI,WAAW,EAAE,CAAC;YAChB,MAAM,IAAI,gBAAgB,CACxB,iEAAiE,YAAY,8CAA8C,CAC5H,CAAC;QACJ,CAAC;QAED,OAAO,iBAAiB,CAAC,wBAAwB,CAAC;YAChD,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,QAAQ,EAAE,eAAe,CAAC,eAAe;YACzC,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,MAAM,EAAE,IAAI,CAAC,MAAM;SACpB,CAAC,CAAC;IACL,CAAC;CACF;AA3EqB;IADnB,WAAW,EAAE;;;;sEA2Eb"}

package/build/dist/Server/Utils/AI/SRE/FixPerformanceTaskTrigger.js

@@ -0,0 +1,174 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+import CodeFixTaskType from "../../../../Types/AI/CodeFixTaskType";
+import BadDataException from "../../../../Types/Exception/BadDataException";
+import SpanTreeAnalyzer from "../PerfEvidence/SpanTreeAnalyzer";
+import SubjectCodeFixRun from "./SubjectCodeFixRun";
+import CaptureSpan from "../../Telemetry/CaptureSpan";
+/*
+ * AI SRE — the FixPerformance trigger: from a slow trace, one click opens
+ * a performance-fix pull request grounded in the actual span-tree evidence.
+ *
+ * The gate that makes this recipe honest is DETERMINISTIC: the
+ * SpanTreeAnalyzer must find a mechanical performance pattern (N+1,
+ * dominant span, sequential-that-could-be-parallel) in the trace's spans,
+ * or the task is refused — the agent never goes hunting for "something
+ * slow" on vibes. Like FixFromIncident (b4) this is human-triggered from a
+ * user-facing endpoint (POST /ai-investigation/create-performance-fix-task),
+ * so there is no project opt-in flag — the human in the loop IS the gate —
+ * and every unmet gate FAILS EARLY with a clear message.
+ *
+ * The findings (plus best-effort service attribution and code.* locations
+ * for repository resolution) are serialized into AIRun.taskContext at
+ * enqueue time: ClickHouse span retention is short, so by the time the
+ * worker claims the run the spans may be gone. The stored evidence IS the
+ * task's context.
+ */
+// Max code.* locations stored — mirrors the resolver's own candidate cap.
+const MAX_CODE_LOCATIONS = 10;
+export default class FixPerformanceTaskTrigger {
+    /*
+     * Collect code.filepath/code.function/code.lineno (and their newer
+     * semconv spellings) from the spans a finding implicates, so the
+     * task-details endpoint can attempt stack-trace-style repository
+     * resolution. Best-effort: most instrumentations do not stamp code
+     * attributes on client spans, and an empty result just means the
+     * resolver falls back to name-match / only-repository.
+     */
+    static collectCodeLocations(spans, findings) {
+        const implicatedSpanIds = new Set();
+        for (const finding of findings) {
+            for (const implicated of finding.implicatedSpans) {
+                implicatedSpanIds.add(implicated.spanId);
+            }
+        }
+        const locations = [];
+        const seenFilePaths = new Set();
+        for (const span of spans) {
+            if (!implicatedSpanIds.has(span.spanId) || !span.attributes) {
+                continue;
+            }
+            const filePath = span.attributes["code.filepath"] || span.attributes["code.file.path"];
+            if (!filePath || seenFilePaths.has(filePath)) {
+                continue;
+            }
+            seenFilePaths.add(filePath);
+            const functionName = span.attributes["code.function"] ||
+                span.attributes["code.function.name"];
+            const rawLineNumber = span.attributes["code.lineno"] || span.attributes["code.line.number"];
+            const lineNumber = rawLineNumber
+                ? parseInt(rawLineNumber, 10)
+                : NaN;
+            locations.push({
+                filePath,
+                functionName,
+                lineNumber: Number.isFinite(lineNumber) ? lineNumber : undefined,
+            });
+            if (locations.length >= MAX_CODE_LOCATIONS) {
+                break;
+            }
+        }
+        return locations;
+    }
+    /*
+     * Gate and enqueue a FixPerformance CodeFix run for a trace. The caller
+     * must already have loaded the spans under the USER's telemetry-read
+     * permissions (the access check) — this method reads and writes as root.
+     *
+     * Throws BadDataException naming the failed gate: no deterministic
+     * finding, no GitHub-App repository, or a duplicate active run for the
+     * same trace.
+     */
+    static async createPerformanceFixTaskFromTrace(data) {
+        if (!data.traceId) {
+            throw new BadDataException("A traceId is required to create a performance fix task.");
+        }
+        if (data.spans.length === 0) {
+            throw new BadDataException("This trace has no spans to analyze (or you do not have access to them).");
+        }
+        /*
+         * Gate 1 — the deterministic evidence gate, and the recipe's whole
+         * point: no mechanical pattern in the span tree means no fix task.
+         * This gate lives HERE, not in the findings entry point below: callers
+         * of that entry point (insight fix routing) hand over findings that
+         * were already computed — and gated on — at detect time.
+         */
+        const findings = SpanTreeAnalyzer.analyzeTrace(data.spans);
+        if (findings.length === 0) {
+            throw new BadDataException("No deterministic performance pattern was found in this trace. The analyzer looks for N+1 patterns (5+ near-identical sibling spans), a dominant slow span (60%+ of the trace), and sequential same-operation siblings that could run in parallel (3+, 50%+ of their parent) — none matched, so the AI agent has no grounded evidence to fix.");
+        }
+        return this.createPerformanceFixTaskFromFindings({
+            projectId: data.projectId,
+            traceId: data.traceId,
+            serviceName: data.serviceName,
+            findings,
+            codeLocations: this.collectCodeLocations(data.spans, findings),
+            userId: data.userId,
+        });
+    }
+    /*
+     * The findings-based entry point: gate and enqueue a FixPerformance run
+     * for ALREADY-COMPUTED deterministic findings (the spans path above after
+     * its analyzer gate, and AI insight fix routing whose findings were
+     * drilled — and stored as evidence — at detect time, because the spans
+     * are likely gone by now). `userId` is attribution for human-triggered
+     * callers; automatic triggers pass none and the run stays system-authored.
+     *
+     * Throws BadDataException naming the failed gate: no GitHub-App
+     * repository, a duplicate active run for the same trace, or (via
+     * enqueueSubjectCodeFixRun) the daily fix-run budget.
+     */
+    static async createPerformanceFixTaskFromFindings(data) {
+        if (!data.traceId) {
+            throw new BadDataException("A traceId is required to create a performance fix task.");
+        }
+        // Gate — a repository the agent can actually open a PR against.
+        const hasConnectedRepository = await SubjectCodeFixRun.hasGitHubAppConnectedRepository(data.projectId);
+        if (!hasConnectedRepository) {
+            throw new BadDataException("No GitHub-App-connected repository exists for this project, so the agent has nowhere to open the performance-fix pull request. Connect one under AI > Code Repositories.");
+        }
+        /*
+         * Gate — per-trace dedupe: at most one non-terminal FixPerformance
+         * run per trace (repeated clicks must not fan out into duplicate PRs).
+         */
+        const existingRun = await SubjectCodeFixRun.findNonTerminalPerformanceFixRunForTrace({
+            projectId: data.projectId,
+            traceId: data.traceId,
+        });
+        if (existingRun) {
+            throw new BadDataException("A performance fix task is already queued or running for this trace. Track its progress on the AI > Tasks page.");
+        }
+        const taskContext = {
+            traceId: data.traceId,
+            serviceName: data.serviceName,
+            performanceFindings: data.findings,
+            codeLocations: data.codeLocations,
+        };
+        return SubjectCodeFixRun.enqueueSubjectCodeFixRun({
+            projectId: data.projectId,
+            taskType: CodeFixTaskType.FixPerformance,
+            userId: data.userId,
+            taskContext,
+        });
+    }
+}
+__decorate([
+    CaptureSpan(),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object]),
+    __metadata("design:returntype", Promise)
+], FixPerformanceTaskTrigger, "createPerformanceFixTaskFromTrace", null);
+__decorate([
+    CaptureSpan(),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object]),
+    __metadata("design:returntype", Promise)
+], FixPerformanceTaskTrigger, "createPerformanceFixTaskFromFindings", null);
+//# sourceMappingURL=FixPerformanceTaskTrigger.js.map

package/build/dist/Server/Utils/AI/SRE/FixPerformanceTaskTrigger.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"FixPerformanceTaskTrigger.js","sourceRoot":"","sources":["../../../../../../Server/Utils/AI/SRE/FixPerformanceTaskTrigger.ts"],"names":[],"mappings":";;;;;;;;;AACA,OAAO,eAAe,MAAM,sCAAsC,CAAC;AAKnE,OAAO,gBAAgB,MAAM,8CAA8C,CAAC;AAE5E,OAAO,gBAEN,MAAM,kCAAkC,CAAC;AAC1C,OAAO,iBAAiB,MAAM,qBAAqB,CAAC;AACpD,OAAO,WAAW,MAAM,6BAA6B,CAAC;AAEtD;;;;;;;;;;;;;;;;;;GAkBG;AAEH,0EAA0E;AAC1E,MAAM,kBAAkB,GAAW,EAAE,CAAC;AAEtC,MAAM,CAAC,OAAO,OAAO,yBAAyB;IAC5C;;;;;;;OAOG;IACI,MAAM,CAAC,oBAAoB,CAChC,KAA4B,EAC5B,QAAmC;QAEnC,MAAM,iBAAiB,GAAgB,IAAI,GAAG,EAAE,CAAC;QAEjD,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;YAC/B,KAAK,MAAM,UAAU,IAAI,OAAO,CAAC,eAAe,EAAE,CAAC;gBACjD,iBAAiB,CAAC,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;YAC3C,CAAC;QACH,CAAC;QAED,MAAM,SAAS,GAAmC,EAAE,CAAC;QACrD,MAAM,aAAa,GAAgB,IAAI,GAAG,EAAE,CAAC;QAE7C,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;gBAC5D,SAAS;YACX,CAAC;YAED,MAAM,QAAQ,GACZ,IAAI,CAAC,UAAU,CAAC,eAAe,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,gBAAgB,CAAC,CAAC;YAExE,IAAI,CAAC,QAAQ,IAAI,aAAa,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC7C,SAAS;YACX,CAAC;YAED,aAAa,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YAE5B,MAAM,YAAY,GAChB,IAAI,CAAC,UAAU,CAAC,eAAe,CAAC;gBAChC,IAAI,CAAC,UAAU,CAAC,oBAAoB,CAAC,CAAC;YAExC,MAAM,aAAa,GACjB,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,kBAAkB,CAAC,CAAC;YACxE,MAAM,UAAU,GAAW,aAAa;gBACtC,CAAC,CAAC,QAAQ,CAAC,aAAa,EAAE,EAAE,CAAC;gBAC7B,CAAC,CAAC,GAAG,CAAC;YAER,SAAS,CAAC,IAAI,CAAC;gBACb,QAAQ;gBACR,YAAY;gBACZ,UAAU,EAAE,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS;aACjE,CAAC,CAAC;YAEH,IAAI,SAAS,CAAC,MAAM,IAAI,kBAAkB,EAAE,CAAC;gBAC3C,MAAM;YACR,CAAC;QACH,CAAC;QAED,OAAO,SAAS,CAAC;IACnB,CAAC;IAED;;;;;;;;OAQG;IAEiB,AAAb,MAAM,CAAC,KAAK,CAAC,iCAAiC,CAAC,IAMrD;QACC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;YAClB,MAAM,IAAI,gBAAgB,CACxB,yDAAyD,CAC1D,CAAC;QACJ,CAAC;QAED,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC5B,MAAM,IAAI,gBAAgB,CACxB,yEAAyE,CAC1E,CAAC;QACJ,CAAC;QAED;;;;;;WAMG;QACH,MAAM,QAAQ,GAA8B,gBAAgB,CAAC,YAAY,CACvE,IAAI,CAAC,KAAK,CACX,CAAC;QAEF,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC1B,MAAM,IAAI,gBAAgB,CACxB,8UAA8U,CAC/U,CAAC;QACJ,CAAC;QAED,OAAO,IAAI,CAAC,oCAAoC,CAAC;YAC/C,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,QAAQ;YACR,aAAa,EAAE,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,KAAK,EAAE,QAAQ,CAAC;YAC9D,MAAM,EAAE,IAAI,CAAC,MAAM;SACpB,CAAC,CAAC;IACL,CAAC;IAED;;;;;;;;;;;OAWG;IAEiB,AAAb,MAAM,CAAC,KAAK,CAAC,oCAAoC,CAAC,IAOxD;QACC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;YAClB,MAAM,IAAI,gBAAgB,CACxB,yDAAyD,CAC1D,CAAC;QACJ,CAAC;QAED,gEAAgE;QAChE,MAAM,sBAAsB,GAC1B,MAAM,iBAAiB,CAAC,+BAA+B,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAE1E,IAAI,CAAC,sBAAsB,EAAE,CAAC;YAC5B,MAAM,IAAI,gBAAgB,CACxB,0KAA0K,CAC3K,CAAC;QACJ,CAAC;QAED;;;WAGG;QACH,MAAM,WAAW,GACf,MAAM,iBAAiB,CAAC,wCAAwC,CAAC;YAC/D,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,OAAO,EAAE,IAAI,CAAC,OAAO;SACtB,CAAC,CAAC;QAEL,IAAI,WAAW,EAAE,CAAC;YAChB,MAAM,IAAI,gBAAgB,CACxB,gHAAgH,CACjH,CAAC;QACJ,CAAC;QAED,MAAM,WAAW,GAAuB;YACtC,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,mBAAmB,EAAE,IAAI,CAAC,QAAQ;YAClC,aAAa,EAAE,IAAI,CAAC,aAAa;SAClC,CAAC;QAEF,OAAO,iBAAiB,CAAC,wBAAwB,CAAC;YAChD,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,QAAQ,EAAE,eAAe,CAAC,cAAc;YACxC,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,WAAW;SACZ,CAAC,CAAC;IACL,CAAC;CACF;AAjHqB;IADnB,WAAW,EAAE;;;;wEA6Cb;AAemB;IADnB,WAAW,EAAE;;;;2EAsDb"}