@oneuptime/common 11.5.7 → 11.5.9

package/Models/DatabaseModels/AIAgentTaskPullRequest.ts

@@ -189,13 +189,21 @@ export default class AIAgentTaskPullRequest extends BaseModel {
     ],
     update: [],
   })
+  /*
+   * Nullable since 2026-07-15: a pull request can now originate from an AI
+   * chat turn, which has no AIAgent behind it (the agent record belongs to the
+   * autonomous fix worker). A null aiAgent therefore means "authored from
+   * chat", and every consumer must tolerate it — SyncPullRequestStates already
+   * guards on aiRunId for the same reason.
+   */
   @TableColumn({
     type: TableColumnType.Entity,
-    required: true,
+    required: false,
     modelType: AIAgent,
     manyToOneRelationColumn: "aiAgentId",
     title: "AI Agent",
-    description: "AI Agent that created this pull request.",
+    description:
+      "AI Agent that created this pull request. Null when it was proposed from an AI chat conversation.",
   })
   @ManyToOne(
     () => {
@@ -204,7 +212,7 @@ export default class AIAgentTaskPullRequest extends BaseModel {
     {
       cascade: false,
       eager: false,
-      nullable: false,
+      nullable: true,
       onDelete: "CASCADE",
       orphanedRowAction: "nullify",
     },
@@ -231,14 +239,15 @@ export default class AIAgentTaskPullRequest extends BaseModel {
   @Index()
   @TableColumn({
     type: TableColumnType.ObjectID,
-    required: true,
+    required: false,
     canReadOnRelationQuery: true,
     title: "AI Agent ID",
-    description: "ID of the AI Agent that created this pull request.",
+    description:
+      "ID of the AI Agent that created this pull request. Null when it was proposed from an AI chat conversation.",
   })
   @Column({
     type: ColumnType.ObjectID,
-    nullable: false,
+    nullable: true,
     transformer: ObjectID.getDatabaseTransformer(),
   })
   public aiAgentId?: ObjectID = undefined;

package/Models/DatabaseModels/AIRun.ts

@@ -66,6 +66,7 @@ import CodeFixTaskContext from "../../Types/AI/CodeFixTaskContext";
     Permission.ProjectOwner,
     Permission.ProjectAdmin,
     Permission.ProjectMember,
+    Permission.Viewer,
   ],
   delete: [],
   update: [],
@@ -77,6 +78,7 @@ export default class AIRun extends BaseModel {
       Permission.ProjectOwner,
       Permission.ProjectAdmin,
       Permission.ProjectMember,
+      Permission.Viewer,
     ],
     update: [],
   })
@@ -109,6 +111,7 @@ export default class AIRun extends BaseModel {
       Permission.ProjectOwner,
       Permission.ProjectAdmin,
       Permission.ProjectMember,
+      Permission.Viewer,
     ],
     update: [],
   })
@@ -133,6 +136,7 @@ export default class AIRun extends BaseModel {
       Permission.ProjectOwner,
       Permission.ProjectAdmin,
       Permission.ProjectMember,
+      Permission.Viewer,
     ],
     update: [],
   })
@@ -157,6 +161,7 @@ export default class AIRun extends BaseModel {
       Permission.ProjectOwner,
       Permission.ProjectAdmin,
       Permission.ProjectMember,
+      Permission.Viewer,
     ],
     update: [],
   })
@@ -175,12 +180,50 @@ export default class AIRun extends BaseModel {
   })
   public codeFixTaskType?: CodeFixTaskType = undefined;
 
+  /*
+   * The per-project sequential task number shown as "#42" — the stable handle
+   * a human cites when reporting a bad run, the same role Incident.incidentNumber
+   * plays. Set only on CodeFix runs (the AI Tasks list): chat turns and
+   * investigations also live in this table but are not tasks, so numbering them
+   * would burn the counter on every Ask-AI message. Null therefore means "not a
+   * task", and also covers CodeFix rows created before this column existed —
+   * the backfill numbers those by age.
+   */
+  @ColumnAccessControl({
+    create: [],
+    read: [
+      Permission.ProjectOwner,
+      Permission.ProjectAdmin,
+      Permission.ProjectMember,
+      Permission.Viewer,
+    ],
+    update: [],
+  })
+  @Index()
+  @TableColumn({
+    isDefaultValueColumn: false,
+    required: false,
+    type: TableColumnType.Number,
+    title: "Task Number",
+    description:
+      "Per-project sequential number for this AI task (code-fix runs only).",
+    example: 42,
+    computed: true,
+    canReadOnRelationQuery: true,
+  })
+  @Column({
+    type: ColumnType.Number,
+    nullable: true,
+  })
+  public taskNumber?: number = undefined;
+
   @ColumnAccessControl({
     create: [],
     read: [
       Permission.ProjectOwner,
       Permission.ProjectAdmin,
       Permission.ProjectMember,
+      Permission.Viewer,
     ],
     update: [],
   })
@@ -206,6 +249,7 @@ export default class AIRun extends BaseModel {
       Permission.ProjectOwner,
       Permission.ProjectAdmin,
       Permission.ProjectMember,
+      Permission.Viewer,
     ],
     update: [],
   })
@@ -238,6 +282,7 @@ export default class AIRun extends BaseModel {
       Permission.ProjectOwner,
       Permission.ProjectAdmin,
       Permission.ProjectMember,
+      Permission.Viewer,
     ],
     update: [],
   })
@@ -262,6 +307,7 @@ export default class AIRun extends BaseModel {
       Permission.ProjectOwner,
       Permission.ProjectAdmin,
       Permission.ProjectMember,
+      Permission.Viewer,
     ],
     update: [],
   })
@@ -294,6 +340,7 @@ export default class AIRun extends BaseModel {
       Permission.ProjectOwner,
       Permission.ProjectAdmin,
       Permission.ProjectMember,
+      Permission.Viewer,
     ],
     update: [],
   })
@@ -318,6 +365,7 @@ export default class AIRun extends BaseModel {
       Permission.ProjectOwner,
       Permission.ProjectAdmin,
       Permission.ProjectMember,
+      Permission.Viewer,
     ],
     update: [],
   })
@@ -343,6 +391,7 @@ export default class AIRun extends BaseModel {
       Permission.ProjectOwner,
       Permission.ProjectAdmin,
       Permission.ProjectMember,
+      Permission.Viewer,
     ],
     update: [],
   })
@@ -368,6 +417,7 @@ export default class AIRun extends BaseModel {
       Permission.ProjectOwner,
       Permission.ProjectAdmin,
       Permission.ProjectMember,
+      Permission.Viewer,
     ],
     update: [],
   })
@@ -397,6 +447,7 @@ export default class AIRun extends BaseModel {
       Permission.ProjectOwner,
       Permission.ProjectAdmin,
       Permission.ProjectMember,
+      Permission.Viewer,
     ],
     update: [],
   })
@@ -422,6 +473,7 @@ export default class AIRun extends BaseModel {
       Permission.ProjectOwner,
       Permission.ProjectAdmin,
       Permission.ProjectMember,
+      Permission.Viewer,
     ],
     update: [],
   })
@@ -447,6 +499,7 @@ export default class AIRun extends BaseModel {
       Permission.ProjectOwner,
       Permission.ProjectAdmin,
       Permission.ProjectMember,
+      Permission.Viewer,
     ],
     update: [],
   })
@@ -472,6 +525,7 @@ export default class AIRun extends BaseModel {
       Permission.ProjectOwner,
       Permission.ProjectAdmin,
       Permission.ProjectMember,
+      Permission.Viewer,
     ],
     update: [],
   })
@@ -497,6 +551,7 @@ export default class AIRun extends BaseModel {
       Permission.ProjectOwner,
       Permission.ProjectAdmin,
       Permission.ProjectMember,
+      Permission.Viewer,
     ],
     update: [],
   })
@@ -518,6 +573,7 @@ export default class AIRun extends BaseModel {
       Permission.ProjectOwner,
       Permission.ProjectAdmin,
       Permission.ProjectMember,
+      Permission.Viewer,
     ],
     update: [],
   })
@@ -539,6 +595,7 @@ export default class AIRun extends BaseModel {
       Permission.ProjectOwner,
       Permission.ProjectAdmin,
       Permission.ProjectMember,
+      Permission.Viewer,
     ],
     update: [],
   })
@@ -561,6 +618,7 @@ export default class AIRun extends BaseModel {
       Permission.ProjectOwner,
       Permission.ProjectAdmin,
       Permission.ProjectMember,
+      Permission.Viewer,
     ],
     update: [],
   })
@@ -583,6 +641,7 @@ export default class AIRun extends BaseModel {
       Permission.ProjectOwner,
       Permission.ProjectAdmin,
       Permission.ProjectMember,
+      Permission.Viewer,
     ],
     update: [],
   })
@@ -605,6 +664,7 @@ export default class AIRun extends BaseModel {
       Permission.ProjectOwner,
       Permission.ProjectAdmin,
       Permission.ProjectMember,
+      Permission.Viewer,
     ],
     update: [],
   })
@@ -627,6 +687,7 @@ export default class AIRun extends BaseModel {
       Permission.ProjectOwner,
       Permission.ProjectAdmin,
       Permission.ProjectMember,
+      Permission.Viewer,
     ],
     update: [],
   })
@@ -649,6 +710,7 @@ export default class AIRun extends BaseModel {
       Permission.ProjectOwner,
       Permission.ProjectAdmin,
       Permission.ProjectMember,
+      Permission.Viewer,
     ],
     update: [],
   })
@@ -724,6 +786,7 @@ export default class AIRun extends BaseModel {
       Permission.ProjectOwner,
       Permission.ProjectAdmin,
       Permission.ProjectMember,
+      Permission.Viewer,
     ],
     update: [],
   })
@@ -753,6 +816,7 @@ export default class AIRun extends BaseModel {
       Permission.ProjectOwner,
       Permission.ProjectAdmin,
       Permission.ProjectMember,
+      Permission.Viewer,
     ],
     update: [],
   })
@@ -777,6 +841,7 @@ export default class AIRun extends BaseModel {
       Permission.ProjectOwner,
       Permission.ProjectAdmin,
       Permission.ProjectMember,
+      Permission.Viewer,
     ],
     update: [],
   })
@@ -798,6 +863,7 @@ export default class AIRun extends BaseModel {
       Permission.ProjectOwner,
       Permission.ProjectAdmin,
       Permission.ProjectMember,
+      Permission.Viewer,
     ],
     update: [],
   })
@@ -828,6 +894,7 @@ export default class AIRun extends BaseModel {
       Permission.ProjectOwner,
       Permission.ProjectAdmin,
       Permission.ProjectMember,
+      Permission.Viewer,
     ],
     update: [],
   })
@@ -852,6 +919,7 @@ export default class AIRun extends BaseModel {
       Permission.ProjectOwner,
       Permission.ProjectAdmin,
       Permission.ProjectMember,
+      Permission.Viewer,
     ],
     update: [],
   })

package/Models/DatabaseModels/AIRunEvent.ts

@@ -21,7 +21,10 @@ import { JSONObject } from "../../Types/JSON";
 import { Column, Entity, Index, JoinColumn, ManyToOne } from "typeorm";
 import EnableDocumentation from "../../Types/Database/EnableDocumentation";
 import AIRunEventType from "../../Types/AI/AIRunEventType";
-import { AIRunEventResultSummary } from "../../Types/AI/AIChatTypes";
+import {
+  AIRunEventContentPayload,
+  AIRunEventResultSummary,
+} from "../../Types/AI/AIChatTypes";
 
 /*
  * One event in an AI run: an LLM call, a tool call with its validated
@@ -364,6 +367,36 @@ export default class AIRunEvent extends BaseModel {
   })
   public citationId?: string = undefined;
 
+  /*
+   * The verbatim LLM/tool content behind this event (see
+   * AIRunEventContentPayload). Server-only — the read ACL is empty, like
+   * AIRun.pausedState and AIRun.taskContext, and for the same reason: a
+   * code-fix run's prompts embed customer source code, whose reach is
+   * narrower than this table's project-member read. LlmLog redacts the same
+   * content for exactly this reason and continues to.
+   *
+   * Reachable only through GET /code-fix-run/logs, which gates on
+   * ProjectOwner/ProjectAdmin. Never widen this ACL — doing so would publish
+   * customer source code to every project member through the CRUD API.
+   */
+  @ColumnAccessControl({
+    create: [],
+    read: [],
+    update: [],
+  })
+  @TableColumn({
+    required: false,
+    type: TableColumnType.JSON,
+    title: "Content Payload",
+    description:
+      "Internal: the verbatim LLM prompt/response and tool output behind this event.",
+  })
+  @Column({
+    nullable: true,
+    type: ColumnType.JSON,
+  })
+  public contentPayload?: AIRunEventContentPayload = undefined;
+
   @ColumnAccessControl({
     create: [],
     read: [],

package/Models/DatabaseModels/NetworkDeviceDiscoveryScan.ts

@@ -377,6 +377,221 @@ export default class NetworkDeviceDiscoveryScan extends BaseModel {
   })
   public snmpPort?: number = undefined;
 
+  /*
+   * SNMP v3 credentials tried against every host in the subnet. These mirror
+   * the flattened snmpV3* columns on NetworkDevice so a v3 scan can be imported
+   * into a v3 device without re-entering credentials. Like the other SNMP
+   * config columns above they are create+read only (update: []): a scan's
+   * config is fixed once it is dispatched to the probe.
+   */
+  @ColumnAccessControl({
+    create: [
+      Permission.ProjectOwner,
+      Permission.ProjectAdmin,
+      Permission.ProjectMember,
+      Permission.SettingsAdmin,
+      Permission.SettingsMember,
+      Permission.CreateNetworkDeviceDiscoveryScan,
+    ],
+    read: [
+      Permission.ProjectOwner,
+      Permission.ProjectAdmin,
+      Permission.ProjectMember,
+      Permission.Viewer,
+      Permission.SettingsAdmin,
+      Permission.SettingsMember,
+      Permission.SettingsViewer,
+      Permission.ReadNetworkDeviceDiscoveryScan,
+    ],
+    update: [],
+  })
+  @TableColumn({
+    required: false,
+    type: TableColumnType.ShortText,
+    title: "SNMP v3 Security Level",
+    description:
+      "SNMP v3 security level tried against every host: noAuthNoPriv, authNoPriv, or authPriv",
+    example: "authPriv",
+  })
+  @Column({
+    nullable: true,
+    type: ColumnType.ShortText,
+    length: ColumnLength.ShortText,
+  })
+  public snmpV3SecurityLevel?: string = undefined;
+
+  @ColumnAccessControl({
+    create: [
+      Permission.ProjectOwner,
+      Permission.ProjectAdmin,
+      Permission.ProjectMember,
+      Permission.SettingsAdmin,
+      Permission.SettingsMember,
+      Permission.CreateNetworkDeviceDiscoveryScan,
+    ],
+    read: [
+      Permission.ProjectOwner,
+      Permission.ProjectAdmin,
+      Permission.ProjectMember,
+      Permission.Viewer,
+      Permission.SettingsAdmin,
+      Permission.SettingsMember,
+      Permission.SettingsViewer,
+      Permission.ReadNetworkDeviceDiscoveryScan,
+    ],
+    update: [],
+  })
+  @TableColumn({
+    required: false,
+    type: TableColumnType.ShortText,
+    title: "SNMP v3 Username",
+    description: "SNMP v3 security name (username) tried against every host",
+    example: "monitoring",
+  })
+  @Column({
+    nullable: true,
+    type: ColumnType.ShortText,
+    length: ColumnLength.ShortText,
+  })
+  public snmpV3Username?: string = undefined;
+
+  @ColumnAccessControl({
+    create: [
+      Permission.ProjectOwner,
+      Permission.ProjectAdmin,
+      Permission.ProjectMember,
+      Permission.SettingsAdmin,
+      Permission.SettingsMember,
+      Permission.CreateNetworkDeviceDiscoveryScan,
+    ],
+    read: [
+      Permission.ProjectOwner,
+      Permission.ProjectAdmin,
+      Permission.ProjectMember,
+      Permission.Viewer,
+      Permission.SettingsAdmin,
+      Permission.SettingsMember,
+      Permission.SettingsViewer,
+      Permission.ReadNetworkDeviceDiscoveryScan,
+    ],
+    update: [],
+  })
+  @TableColumn({
+    required: false,
+    type: TableColumnType.ShortText,
+    title: "SNMP v3 Authentication Protocol",
+    description: "SNMP v3 authentication protocol: MD5, SHA, SHA256, or SHA512",
+    example: "SHA",
+  })
+  @Column({
+    nullable: true,
+    type: ColumnType.ShortText,
+    length: ColumnLength.ShortText,
+  })
+  public snmpV3AuthProtocol?: string = undefined;
+
+  @ColumnAccessControl({
+    create: [
+      Permission.ProjectOwner,
+      Permission.ProjectAdmin,
+      Permission.ProjectMember,
+      Permission.SettingsAdmin,
+      Permission.SettingsMember,
+      Permission.CreateNetworkDeviceDiscoveryScan,
+    ],
+    read: [
+      Permission.ProjectOwner,
+      Permission.ProjectAdmin,
+      Permission.ProjectMember,
+      Permission.Viewer,
+      Permission.SettingsAdmin,
+      Permission.SettingsMember,
+      Permission.SettingsViewer,
+      Permission.ReadNetworkDeviceDiscoveryScan,
+    ],
+    update: [],
+  })
+  @TableColumn({
+    required: false,
+    type: TableColumnType.LongText,
+    title: "SNMP v3 Authentication Key",
+    description: "SNMP v3 authentication passphrase tried against every host",
+  })
+  @Column({
+    nullable: true,
+    type: ColumnType.LongText,
+  })
+  public snmpV3AuthKey?: string = undefined;
+
+  @ColumnAccessControl({
+    create: [
+      Permission.ProjectOwner,
+      Permission.ProjectAdmin,
+      Permission.ProjectMember,
+      Permission.SettingsAdmin,
+      Permission.SettingsMember,
+      Permission.CreateNetworkDeviceDiscoveryScan,
+    ],
+    read: [
+      Permission.ProjectOwner,
+      Permission.ProjectAdmin,
+      Permission.ProjectMember,
+      Permission.Viewer,
+      Permission.SettingsAdmin,
+      Permission.SettingsMember,
+      Permission.SettingsViewer,
+      Permission.ReadNetworkDeviceDiscoveryScan,
+    ],
+    update: [],
+  })
+  @TableColumn({
+    required: false,
+    type: TableColumnType.ShortText,
+    title: "SNMP v3 Privacy Protocol",
+    description: "SNMP v3 privacy (encryption) protocol: DES, AES, or AES256",
+    example: "AES",
+  })
+  @Column({
+    nullable: true,
+    type: ColumnType.ShortText,
+    length: ColumnLength.ShortText,
+  })
+  public snmpV3PrivProtocol?: string = undefined;
+
+  @ColumnAccessControl({
+    create: [
+      Permission.ProjectOwner,
+      Permission.ProjectAdmin,
+      Permission.ProjectMember,
+      Permission.SettingsAdmin,
+      Permission.SettingsMember,
+      Permission.CreateNetworkDeviceDiscoveryScan,
+    ],
+    read: [
+      Permission.ProjectOwner,
+      Permission.ProjectAdmin,
+      Permission.ProjectMember,
+      Permission.Viewer,
+      Permission.SettingsAdmin,
+      Permission.SettingsMember,
+      Permission.SettingsViewer,
+      Permission.ReadNetworkDeviceDiscoveryScan,
+    ],
+    update: [],
+  })
+  @TableColumn({
+    required: false,
+    type: TableColumnType.LongText,
+    title: "SNMP v3 Privacy Key",
+    description:
+      "SNMP v3 privacy (encryption) passphrase tried against every host",
+  })
+  @Column({
+    nullable: true,
+    type: ColumnType.LongText,
+  })
+  public snmpV3PrivKey?: string = undefined;
+
   @ColumnAccessControl({
     create: [],
     read: [

package/Models/DatabaseModels/Project.ts

@@ -832,6 +832,31 @@ export default class Project extends TenantModel {
   })
   public incidentEpisodeCounter?: number = undefined;
 
+  /*
+   * Numbers AI code-fix tasks only. Chat and investigation runs share the
+   * AIRun table but are not tasks, so they never draw from this counter —
+   * see AIRunService.onBeforeCreate.
+   */
+  @ColumnAccessControl({
+    create: [],
+    read: [],
+    update: [],
+  })
+  @TableColumn({
+    type: TableColumnType.Number,
+    isDefaultValueColumn: true,
+    required: true,
+    hideColumnInDocumentation: true,
+    computed: true,
+  })
+  @Column({
+    type: ColumnType.Number,
+    nullable: false,
+    unique: false,
+    default: 0,
+  })
+  public aiRunCounter?: number = undefined;
+
   @ColumnAccessControl({
     create: [],
     read: [],

package/Models/DatabaseModels/StatusPage.ts

@@ -1063,6 +1063,48 @@ export default class StatusPage extends BaseModel {
   })
   public isPublicStatusPage?: boolean = undefined;
 
+  @ColumnAccessControl({
+    create: [
+      Permission.ProjectOwner,
+      Permission.ProjectAdmin,
+      Permission.ProjectMember,
+      Permission.StatusPageAdmin,
+      Permission.StatusPageMember,
+      Permission.CreateProjectStatusPage,
+    ],
+    read: [
+      Permission.ProjectOwner,
+      Permission.ProjectAdmin,
+      Permission.ProjectMember,
+      Permission.Viewer,
+      Permission.StatusPageAdmin,
+      Permission.StatusPageMember,
+      Permission.StatusPageViewer,
+      Permission.ReadProjectStatusPage,
+    ],
+    update: [
+      Permission.ProjectOwner,
+      Permission.ProjectAdmin,
+      Permission.ProjectMember,
+      Permission.StatusPageAdmin,
+      Permission.StatusPageMember,
+      Permission.EditProjectStatusPage,
+    ],
+  })
+  @TableColumn({
+    isDefaultValueColumn: true,
+    type: TableColumnType.Boolean,
+    title: "Enable MCP Server",
+    description:
+      "Can AI agents read this status page over the public OneUptime MCP server? This does not affect the status page website, its RSS feed, or its public JSON API.",
+    defaultValue: true,
+  })
+  @Column({
+    type: ColumnType.Boolean,
+    default: true,
+  })
+  public enableMcpServer?: boolean = undefined;
+
   @ColumnAccessControl({
     create: [
       Permission.ProjectOwner,