@oneuptime/common 11.7.3 → 12.0.0

package/Models/DatabaseModels/LogDropFilter.ts

@@ -398,6 +398,95 @@ export default class LogDropFilter extends BaseModel {
   })
   public sortOrder?: number = undefined;
 
+  /*
+   * Ingest-owned counters. A drop filter used to discard logs with no
+   * record anywhere — no log line, no metric, no counter — so neither the
+   * customer nor support could tell a filter from a broken pipeline. These
+   * two columns are the customer-visible half of that fix (the operator
+   * half is the `oneuptime.telemetry.ingest.dropped.count` metric).
+   *
+   * Written only by the ingest path, via a throttled atomic UPDATE that
+   * batches many dropped records into one statement — never once per log.
+   * See App/FeatureSet/Telemetry/Utils/DropFilterDropRecorder.ts.
+   */
+  @ColumnAccessControl({
+    create: [],
+    read: [
+      Permission.ProjectOwner,
+      Permission.ProjectAdmin,
+      Permission.ProjectMember,
+      Permission.Viewer,
+      Permission.TelemetryAdmin,
+      Permission.TelemetryMember,
+      Permission.TelemetryViewer,
+      Permission.ReadProjectLogDropFilter,
+    ],
+    update: [],
+  })
+  @TableColumn({
+    title: "Dropped Count",
+    required: false,
+    type: TableColumnType.BigPositiveNumber,
+    canReadOnRelationQuery: true,
+    description:
+      "Total number of logs this filter has discarded since it was created.",
+    defaultValue: 0,
+  })
+  @Column({
+    type: ColumnType.BigPositiveNumber,
+    nullable: false,
+    default: 0,
+    transformer: {
+      to: (value: number | null | undefined): string | null => {
+        if (value === null || value === undefined) {
+          return null;
+        }
+        return Math.trunc(value).toString();
+      },
+      /*
+       * Postgres bigint comes back from the driver as a string. The UI
+       * renders this as a number, so normalize here rather than making
+       * every reader remember.
+       */
+      from: (value: string | null | undefined): number | null => {
+        if (value === null || value === undefined) {
+          return null;
+        }
+        const parsed: number = parseInt(value, 10);
+        return isNaN(parsed) ? null : parsed;
+      },
+    },
+  })
+  public droppedCount?: number = undefined;
+
+  @ColumnAccessControl({
+    create: [],
+    read: [
+      Permission.ProjectOwner,
+      Permission.ProjectAdmin,
+      Permission.ProjectMember,
+      Permission.Viewer,
+      Permission.TelemetryAdmin,
+      Permission.TelemetryMember,
+      Permission.TelemetryViewer,
+      Permission.ReadProjectLogDropFilter,
+    ],
+    update: [],
+  })
+  @TableColumn({
+    title: "Last Dropped At",
+    required: false,
+    type: TableColumnType.Date,
+    canReadOnRelationQuery: true,
+    description:
+      "When this filter most recently discarded a log. Null means it has never matched anything.",
+  })
+  @Column({
+    type: ColumnType.Date,
+    nullable: true,
+  })
+  public lastDroppedAt?: Date = undefined;
+
   @ColumnAccessControl({
     create: [],
     read: [

package/Models/DatabaseModels/MonitorCustomField.ts

@@ -276,7 +276,7 @@ export default class MonitorCustomField extends BaseModel {
     type: TableColumnType.LongText,
     title: "Dropdown Options",
     description:
-      "Options for the dropdown field, one per line. Only used when Custom Field Type is Dropdown.",
+      "Options and optional colors for dropdown fields. Plain one-per-line values remain supported.",
     example: "Option 1\nOption 2\nOption 3",
   })
   @Column({

package/Models/DatabaseModels/MonitorStatus.ts

@@ -555,7 +555,7 @@ export default class MonitorStatus extends BaseModel {
     canReadOnRelationQuery: true,
     title: "Order",
     description:
-      "Order / Priority of this status. For example: Operational has priority 1, Degraded has 2, Offline has 3. Lower priority would mean bad state of the resource. ",
+      "Order / Priority of this status. Behaves like an insertion slot: creating a status with priority P shifts every existing status with priority >= P up by one, and priority cannot be changed after creation (delete and recreate instead). When managing statuses declaratively, use high, gapped values (e.g. 101, 102, 103) created in ascending order so existing statuses are never shifted.",
   })
   @Column({
     type: ColumnType.Number,

package/Models/DatabaseModels/NetworkDeviceDiscoveryScan.ts

@@ -77,7 +77,7 @@ export interface DiscoveredNetworkDevice {
   pluralName: "Network Device Discovery Scans",
   icon: IconProp.Search,
   tableDescription:
-    "Subnet discovery scans that sweep a CIDR range via SNMP from a probe and report devices found, so they can be imported as Network Devices.",
+    "Network discovery scans that sweep an address space — a CIDR subnet or an octet range — via SNMP from a probe and report devices found, so they can be imported as Network Devices.",
 })
 @Entity({
   name: "NetworkDeviceDiscoveryScan",
@@ -260,12 +260,22 @@ export default class NetworkDeviceDiscoveryScan extends BaseModel {
     ],
     update: [],
   })
+  /*
+   * The address space this scan sweeps. Two notations are accepted (see
+   * Common/Utils/NetworkDiscovery/ScanTargetUtil): CIDR, and octet ranges
+   * where any octet may be an inclusive low-high range.
+   *
+   * The column keeps the name `cidr` it was created with: it is part of the
+   * public API surface and the probe payload, and renaming it would break both
+   * for a purely cosmetic gain.
+   */
   @TableColumn({
     required: true,
     type: TableColumnType.ShortText,
     canReadOnRelationQuery: true,
-    title: "CIDR",
-    description: "Subnet to scan in CIDR notation, e.g. 192.168.1.0/24",
+    title: "Scan Target",
+    description:
+      "Address space to scan, either in CIDR notation (192.168.1.0/24) or octet-range notation where any octet may be an inclusive low-high range (10.16-22.0-255.51-66)",
     example: "192.168.1.0/24",
   })
   @Column({

package/Models/DatabaseModels/NetworkDeviceLabelRule.ts

@@ -311,7 +311,7 @@ export default class NetworkDeviceLabelRule extends BaseModel {
     type: TableColumnType.LongText,
     title: "Network Device Name Pattern",
     description:
-      "Regex (case-insensitive) matched against the network device name. Leave empty to match any name.",
+      "Regex or * wildcard pattern (case-insensitive) matched against the network device name. Leave empty to match any name.",
   })
   @Column({
     type: ColumnType.LongText,
@@ -344,7 +344,7 @@ export default class NetworkDeviceLabelRule extends BaseModel {
     type: TableColumnType.LongText,
     title: "Network Device Description Pattern",
     description:
-      "Regex (case-insensitive) matched against the network device description. Leave empty to match any description.",
+      "Regex or * wildcard pattern (case-insensitive) matched against the network device description. Leave empty to match any description.",
   })
   @Column({
     type: ColumnType.LongText,

package/Models/DatabaseModels/NetworkDeviceOwnerRule.ts

@@ -347,7 +347,7 @@ export default class NetworkDeviceOwnerRule extends BaseModel {
     type: TableColumnType.LongText,
     title: "Network Device Name Pattern",
     description:
-      "Regex (case-insensitive) matched against the network device name. Leave empty to match any name.",
+      "Regex or * wildcard pattern (case-insensitive) matched against the network device name. Leave empty to match any name.",
   })
   @Column({
     type: ColumnType.LongText,
@@ -380,7 +380,7 @@ export default class NetworkDeviceOwnerRule extends BaseModel {
     type: TableColumnType.LongText,
     title: "Network Device Description Pattern",
     description:
-      "Regex (case-insensitive) matched against the network device description. Leave empty to match any description.",
+      "Regex or * wildcard pattern (case-insensitive) matched against the network device description. Leave empty to match any description.",
   })
   @Column({
     type: ColumnType.LongText,

package/Models/DatabaseModels/NetworkSiteAssignmentRule.ts

@@ -319,7 +319,7 @@ export default class NetworkSiteAssignmentRule extends BaseModel {
     canReadOnRelationQuery: true,
     title: "Hostname Pattern",
     description:
-      "Devices with a hostname matching this wildcard pattern are assigned to the site",
+      "Devices whose hostname, SNMP system name or display name matches this wildcard pattern are assigned to the site",
     example: "unit-1042-*",
   })
   @Column({

package/Models/DatabaseModels/OnCallDutyPolicyCustomField.ts

@@ -271,7 +271,7 @@ export default class OnCallDutyPolicyCustomField extends BaseModel {
     type: TableColumnType.LongText,
     title: "Dropdown Options",
     description:
-      "Options for the dropdown field, one per line. Only used when Custom Field Type is Dropdown.",
+      "Options and optional colors for dropdown fields. Plain one-per-line values remain supported.",
     example: "Option 1\nOption 2\nOption 3",
   })
   @Column({

package/Models/DatabaseModels/Project.ts

@@ -1,6 +1,7 @@
 import MetricDownsamplingRetentionDays from "../../Types/Metrics/MetricDownsamplingRetentionDays";
 import TelemetryRetentionConfig from "../../Types/Telemetry/TelemetryRetentionConfig";
 import AlertSeverity from "./AlertSeverity";
+import IncidentSeverity from "./IncidentSeverity";
 import Reseller from "./Reseller";
 import ResellerPlan from "./ResellerPlan";
 import User from "./User";
@@ -1449,6 +1450,71 @@ export default class Project extends TenantModel {
   })
   public enableAi?: boolean = undefined;
 
+  @ColumnAccessControl({
+    create: [],
+    read: [
+      Permission.ProjectOwner,
+      Permission.ProjectAdmin,
+      Permission.ProjectMember,
+      Permission.Viewer,
+      Permission.ReadProject,
+      Permission.UnAuthorizedSsoUser,
+      Permission.ProjectUser,
+    ],
+    update: [Permission.ProjectOwner, Permission.ManageProjectBilling],
+  })
+  @TableColumn({
+    required: true,
+    isDefaultValueColumn: true,
+    type: TableColumnType.Boolean,
+    title: "Enable Auto Remediation",
+    description:
+      "Kill switch for auto-remediation: when disabled, no auto-remediation rule fires in this project.",
+    defaultValue: true,
+    example: true,
+  })
+  @Column({
+    nullable: false,
+    default: true,
+    type: ColumnType.Boolean,
+  })
+  public enableAutoRemediation?: boolean = undefined;
+
+  /*
+   * Explicit opt-in (=== true semantics, unlike the kill switches above):
+   * AI-composed remediation COMMANDS never run in a project that has not
+   * turned this on, even when auto-remediation itself is enabled.
+   */
+  @ColumnAccessControl({
+    create: [],
+    read: [
+      Permission.ProjectOwner,
+      Permission.ProjectAdmin,
+      Permission.ProjectMember,
+      Permission.Viewer,
+      Permission.ReadProject,
+      Permission.UnAuthorizedSsoUser,
+      Permission.ProjectUser,
+    ],
+    update: [Permission.ProjectOwner, Permission.ManageProjectBilling],
+  })
+  @TableColumn({
+    required: true,
+    isDefaultValueColumn: true,
+    type: TableColumnType.Boolean,
+    title: "Enable AI Command Execution",
+    description:
+      "When enabled, auto-remediation rules may let the AI compose and run commands on opted-in Runners (with an operator allowlist for auto-execution, and one-click approval for everything else). Off by default.",
+    defaultValue: false,
+    example: false,
+  })
+  @Column({
+    nullable: false,
+    default: false,
+    type: ColumnType.Boolean,
+  })
+  public enableAiCommandExecution?: boolean = undefined;
+
   @ColumnAccessControl({
     create: [],
     read: [
@@ -1539,6 +1605,36 @@ export default class Project extends TenantModel {
   })
   public enableInstrumentationFixTasks?: boolean = undefined;
 
+  @ColumnAccessControl({
+    create: [],
+    read: [
+      Permission.ProjectOwner,
+      Permission.ProjectAdmin,
+      Permission.ProjectMember,
+      Permission.Viewer,
+      Permission.ReadProject,
+      Permission.UnAuthorizedSsoUser,
+      Permission.ProjectUser,
+    ],
+    update: [Permission.ProjectOwner, Permission.ProjectAdmin],
+  })
+  @TableColumn({
+    required: true,
+    isDefaultValueColumn: true,
+    type: TableColumnType.Boolean,
+    title: "Enable Automatic Code Fixes",
+    description:
+      "When enabled, an AI investigation that ends with a confident, evidenced root cause analysis automatically queues an AI agent task that opens a draft fix pull request from that analysis — the automatic form of the 'Open Fix PR from this analysis' button. Requires a repository connected through the GitHub App and a Runner with the code-fix capability. Pull requests are always human-reviewed — nothing merges automatically.",
+    defaultValue: false,
+    example: true,
+  })
+  @Column({
+    nullable: false,
+    default: false,
+    type: ColumnType.Boolean,
+  })
+  public enableAutomaticCodeFixes?: boolean = undefined;
+
   @ColumnAccessControl({
     create: [],
     read: [
@@ -1773,6 +1869,95 @@ export default class Project extends TenantModel {
   })
   public alertInvestigationDedupeWindowMinutes?: number = undefined;
 
+  @ColumnAccessControl({
+    create: [],
+    read: [
+      Permission.ProjectOwner,
+      Permission.ProjectAdmin,
+      Permission.ProjectMember,
+      Permission.Viewer,
+      Permission.ReadProject,
+      Permission.UnAuthorizedSsoUser,
+      Permission.ProjectUser,
+    ],
+    update: [Permission.ProjectOwner, Permission.ProjectAdmin],
+  })
+  @TableColumn({
+    manyToOneRelationColumn: "incidentInvestigationMinimumSeverityId",
+    type: TableColumnType.Entity,
+    modelType: IncidentSeverity,
+    title: "Incident Investigation Minimum Severity",
+    description:
+      "Only incidents at or above this severity are investigated automatically by AI. Unset means every incident is investigated — unlike alerts, which default to the top two tiers, because an incident already cleared a human-authored threshold to exist.",
+  })
+  @ManyToOne(
+    () => {
+      return IncidentSeverity;
+    },
+    {
+      eager: false,
+      nullable: true,
+      onDelete: "SET NULL",
+      orphanedRowAction: "nullify",
+    },
+  )
+  @JoinColumn({ name: "incidentInvestigationMinimumSeverityId" })
+  public incidentInvestigationMinimumSeverity?: IncidentSeverity = undefined;
+
+  @ColumnAccessControl({
+    create: [],
+    read: [
+      Permission.ProjectOwner,
+      Permission.ProjectAdmin,
+      Permission.ProjectMember,
+      Permission.Viewer,
+      Permission.ReadProject,
+      Permission.UnAuthorizedSsoUser,
+      Permission.ProjectUser,
+    ],
+    update: [Permission.ProjectOwner, Permission.ProjectAdmin],
+  })
+  @TableColumn({
+    required: false,
+    type: TableColumnType.ObjectID,
+    title: "Incident Investigation Minimum Severity ID",
+    description:
+      "ID of the minimum incident severity that is investigated automatically by AI.",
+  })
+  @Column({
+    type: ColumnType.ObjectID,
+    nullable: true,
+    transformer: ObjectID.getDatabaseTransformer(),
+  })
+  public incidentInvestigationMinimumSeverityId?: ObjectID = undefined;
+
+  @ColumnAccessControl({
+    create: [],
+    read: [
+      Permission.ProjectOwner,
+      Permission.ProjectAdmin,
+      Permission.ProjectMember,
+      Permission.Viewer,
+      Permission.ReadProject,
+      Permission.UnAuthorizedSsoUser,
+      Permission.ProjectUser,
+    ],
+    update: [Permission.ProjectOwner, Permission.ProjectAdmin],
+  })
+  @TableColumn({
+    required: false,
+    type: TableColumnType.Number,
+    title: "Incident Re-investigation Cooldown (Minutes)",
+    description:
+      "Incidents affecting a monitor that AI investigated within this many minutes are not re-investigated — the first analysis stands. Unset means the default of 30 minutes; 0 disables the cooldown.",
+    example: 30,
+  })
+  @Column({
+    nullable: true,
+    type: ColumnType.Number,
+  })
+  public incidentInvestigationDedupeWindowMinutes?: number = undefined;
+
   @ColumnAccessControl({
     create: [],
     read: [
@@ -2562,6 +2747,52 @@ export default class Project extends TenantModel {
   })
   public enableAuditLogs?: boolean = undefined;
 
+  /*
+   * Organisation-wide hard off switch for session replay, checked by both
+   * the recorder config endpoint and the ingest gate. Follows the shape of
+   * enableAuditLogs above, with one deliberate difference: no
+   * ColumnBillingAccessControl. Being able to switch off recording of your
+   * end users' screens must not depend on a plan tier, so update is not
+   * gated behind Enterprise the way audit logs are.
+   *
+   * Off by default. Every per-application toggle is ANDed with this, so a
+   * project that never opts in cannot have a recorder enabled by an
+   * application-level mistake.
+   */
+  @ColumnAccessControl({
+    create: [Permission.User],
+    read: [
+      Permission.ProjectOwner,
+      Permission.ProjectAdmin,
+      Permission.ProjectMember,
+      Permission.Viewer,
+      Permission.ReadProject,
+      Permission.UnAuthorizedSsoUser,
+      Permission.ProjectUser,
+    ],
+    update: [
+      Permission.ProjectOwner,
+      Permission.ProjectAdmin,
+      Permission.EditProject,
+    ],
+  })
+  @TableColumn({
+    required: true,
+    type: TableColumnType.Boolean,
+    isDefaultValueColumn: true,
+    defaultValue: true,
+    title: "Allow Session Replay",
+    description:
+      "When enabled, RUM applications in this project may record session replays if they are individually enabled too. On by default; switch it off here to stop session replay across the entire project in one place.",
+  })
+  @Column({
+    type: ColumnType.Boolean,
+    nullable: false,
+    unique: false,
+    default: true,
+  })
+  public isSessionReplayAllowed?: boolean = undefined;
+
   @ColumnAccessControl({
     create: [Permission.User],
     read: [