@oneuptime/common 12.0.3 → 12.0.5

package/Models/DatabaseModels/AIRun.ts

@@ -21,6 +21,7 @@ import { Column, Entity, Index, JoinColumn, ManyToOne } from "typeorm";
 import EnableDocumentation from "../../Types/Database/EnableDocumentation";
 import AIRunType from "../../Types/AI/AIRunType";
 import AIRunStatus from "../../Types/AI/AIRunStatus";
+import AIRunCodeFixRecommendation from "../../Types/AI/AIRunCodeFixRecommendation";
 import AIRunHumanVerdict from "../../Types/AI/AIRunHumanVerdict";
 import AIRunAutoGrade from "../../Types/AI/AIRunAutoGrade";
 import CodeFixTaskType from "../../Types/AI/CodeFixTaskType";
@@ -243,6 +244,42 @@ export default class AIRun extends BaseModel {
   })
   public status?: AIRunStatus = undefined;
 
+  /*
+   * The server-authored decision that controls whether an incident/alert
+   * investigation may be turned into a FixFromIncident task. New subject
+   * investigations move to Pending in the atomic Completed transition; the
+   * investigation engine settles the value after its structured
+   * classification and analysis post. Other lifecycle paths and legacy rows
+   * default to NotRecommended so a missing decision never creates a PR.
+   */
+  @ColumnAccessControl({
+    create: [],
+    read: [
+      Permission.ProjectOwner,
+      Permission.ProjectAdmin,
+      Permission.ProjectMember,
+      Permission.Viewer,
+    ],
+    update: [],
+  })
+  @TableColumn({
+    required: true,
+    type: TableColumnType.ShortText,
+    title: "Code Fix Recommendation",
+    description:
+      "For incident/alert investigations: whether the structured investigation outcome recommends opening a code-fix pull request.",
+    defaultValue: AIRunCodeFixRecommendation.NotRecommended,
+    isDefaultValueColumn: true,
+    canReadOnRelationQuery: true,
+  })
+  @Column({
+    nullable: false,
+    type: ColumnType.ShortText,
+    length: ColumnLength.ShortText,
+    default: AIRunCodeFixRecommendation.NotRecommended,
+  })
+  public codeFixRecommendation?: AIRunCodeFixRecommendation = undefined;
+
   @ColumnAccessControl({
     create: [],
     read: [
@@ -803,7 +840,7 @@ export default class AIRun extends BaseModel {
     type: TableColumnType.JSON,
     title: "Task Context",
     description:
-      "Internal: trigger-time context for code-fix recipes without a subject row (e.g. FixPerformance trace evidence).",
+      "Internal: immutable trigger-time context for code-fix recipes, including pinned investigation analyses and FixPerformance trace evidence.",
   })
   @Column({
     nullable: true,

package/Models/DatabaseModels/AlertFeed.ts

@@ -93,6 +93,7 @@ export enum AlertFeedEventType {
     "Log of the entire alert state change. This is a log of all the alert state changes, public notes, more etc.",
 })
 @Index(["alertId", "postedAt"]) // Alert detail page: feed sorted by postedAt
+@Index(["alertId", "aiRunId"]) // Exact AI investigation result lookup
 export default class AlertFeed extends BaseModel {
   @ColumnAccessControl({
     create: [
@@ -251,6 +252,35 @@ export default class AlertFeed extends BaseModel {
   })
   public alertId?: ObjectID = undefined;
 
+  @ColumnAccessControl({
+    create: [],
+    read: [
+      Permission.ProjectOwner,
+      Permission.ProjectAdmin,
+      Permission.ProjectMember,
+      Permission.Viewer,
+      Permission.AlertAdmin,
+      Permission.AlertMember,
+      Permission.AlertViewer,
+      Permission.ReadAlertFeed,
+    ],
+    update: [],
+  })
+  @TableColumn({
+    type: TableColumnType.ObjectID,
+    required: false,
+    canReadOnRelationQuery: true,
+    title: "AI Run ID",
+    description:
+      "AI investigation run that produced this feed item when the event is a root cause.",
+  })
+  @Column({
+    type: ColumnType.ObjectID,
+    nullable: true,
+    transformer: ObjectID.getDatabaseTransformer(),
+  })
+  public aiRunId?: ObjectID = undefined;
+
   @ColumnAccessControl({
     create: [
       Permission.ProjectOwner,

package/Models/DatabaseModels/CephCluster.ts

@@ -80,6 +80,20 @@ import {
  */
 @Index(["projectId", "name"], { unique: true })
 @Index(["projectId", "isArchived"])
+/*
+ * Restores a UNIQUE index that an autogenerated migration deleted.
+ *
+ * Declared natively and NAMED. TypeORM's schema builder matches database
+ * indexes to entity metadata by name and drops every one it cannot find, which
+ * is how the original was lost: it existed only in a migration, so entity
+ * metadata never mentioned it and `migration:generate` emitted a DROP. Naming
+ * it here keeps the original index name and lets the builder match, compare
+ * uniqueness and columns, and keep it.
+ */
+@Index("IDX_ceph_cluster_slug", ["slug"], {
+  unique: true,
+  where: '"deletedAt" IS NULL',
+})
 @TableMetadata({
   tableName: "CephCluster",
   singularName: "Ceph Cluster",

package/Models/DatabaseModels/CodeRepository.ts

@@ -649,13 +649,21 @@ export default class CodeRepository extends BaseModel {
   })
   public repositoryUrl?: URL = undefined;
 
-  // GitHub App specific fields
+  /*
+   * GitHub App specific fields.
+   *
+   * `create` is empty on purpose. This column decides which GitHub App
+   * installation a repository token is minted from, so a caller who could set
+   * it could name ANOTHER tenant's installation, put the row in a project they
+   * own, and pass every "is this row in your project?" check on the way to a
+   * live `ghs_` token. It is assigned server-side only — by the install
+   * callback and the installation webhooks, which write with `isRoot` after
+   * GitHub has confirmed the installation belongs to the project.
+   * CodeRepositoryService.onBeforeCreate/onBeforeUpdate enforce the same rule
+   * a second time, in case a future route writes as root.
+   */
   @ColumnAccessControl({
-    create: [
-      Permission.ProjectOwner,
-      Permission.ProjectAdmin,
-      Permission.CreateCodeRepository,
-    ],
+    create: [],
     read: [
       Permission.ProjectOwner,
       Permission.ProjectAdmin,

package/Models/DatabaseModels/Dashboard.ts

@@ -826,6 +826,7 @@ export default class Dashboard extends BaseModel {
     description:
       "Password required to unlock a public dashboard. This value is stored as a secure hash.",
     hashed: true,
+    hashSaltColumn: "masterPasswordSalt",
     type: TableColumnType.HashedString,
     placeholder: "Enter a new master password",
   })
@@ -837,6 +838,33 @@ export default class Dashboard extends BaseModel {
   })
   public masterPassword?: HashedString = undefined;
 
+  /*
+   * Per-dashboard salt mixed into `masterPassword`. Written by the database
+   * write path on every master-password write and never exposed to API
+   * callers. Nullable so existing unsalted hashes can be verified and
+   * upgraded after a successful unlock.
+   */
+  @ColumnAccessControl({
+    create: [],
+    read: [],
+    update: [],
+  })
+  @TableColumn({
+    title: "Master Password Salt",
+    description:
+      "Per-dashboard random salt mixed into this dashboard's master password hash.",
+    computed: true,
+    type: TableColumnType.ShortText,
+    hideColumnInDocumentation: true,
+  })
+  @Column({
+    type: ColumnType.ShortText,
+    length: ColumnLength.ShortText,
+    unique: false,
+    nullable: true,
+  })
+  public masterPasswordSalt?: string = undefined;
+
   @ColumnAccessControl({
     create: [
       Permission.ProjectOwner,

package/Models/DatabaseModels/DockerHost.ts

@@ -72,6 +72,20 @@ import {
 @CrudApiEndpoint(new Route("/docker-host"))
 @SlugifyColumn("name", "slug")
 @Index(["projectId", "isArchived"])
+/*
+ * Restores a UNIQUE index that an autogenerated migration deleted.
+ *
+ * Declared natively and NAMED. TypeORM's schema builder matches database
+ * indexes to entity metadata by name and drops every one it cannot find, which
+ * is how the original was lost: it existed only in a migration, so entity
+ * metadata never mentioned it and `migration:generate` emitted a DROP. Naming
+ * it here keeps the original index name and lets the builder match, compare
+ * uniqueness and columns, and keep it.
+ */
+@Index("IDX_docker_host_slug", ["slug"], {
+  unique: true,
+  where: '"deletedAt" IS NULL',
+})
 @TableMetadata({
   tableName: "DockerHost",
   singularName: "Docker Host",

package/Models/DatabaseModels/GlobalOidcProject.ts

@@ -39,6 +39,24 @@ import {
   update: [],
 })
 @CrudApiEndpoint(new Route("/global-oidc-project"))
+/*
+ * Restores a UNIQUE index that an autogenerated migration deleted.
+ *
+ * Declared natively and NAMED. TypeORM's schema builder matches database
+ * indexes to entity metadata by name and drops every one it cannot find, which
+ * is how the original was lost: it existed only in a migration, so entity
+ * metadata never mentioned it and `migration:generate` emitted a DROP. Naming
+ * it here keeps the original index name and lets the builder match, compare
+ * uniqueness and columns, and keep it.
+ */
+@Index(
+  "IDX_GlobalOIDCProject_globalOidcId_projectId",
+  ["globalOidcId", "projectId"],
+  {
+    unique: true,
+    where: '"deletedAt" IS NULL',
+  },
+)
 @TableMetadata({
   tableName: "GlobalOIDCProject",
   singularName: "Global OIDC Project",

package/Models/DatabaseModels/GlobalSsoProject.ts

@@ -42,6 +42,24 @@ import {
   update: [],
 })
 @CrudApiEndpoint(new Route("/global-sso-project"))
+/*
+ * Restores a UNIQUE index that an autogenerated migration deleted.
+ *
+ * Declared natively and NAMED. TypeORM's schema builder matches database
+ * indexes to entity metadata by name and drops every one it cannot find, which
+ * is how the original was lost: it existed only in a migration, so entity
+ * metadata never mentioned it and `migration:generate` emitted a DROP. Naming
+ * it here keeps the original index name and lets the builder match, compare
+ * uniqueness and columns, and keep it.
+ */
+@Index(
+  "IDX_GlobalSSOProject_globalSsoId_projectId",
+  ["globalSsoId", "projectId"],
+  {
+    unique: true,
+    where: '"deletedAt" IS NULL',
+  },
+)
 @TableMetadata({
   tableName: "GlobalSSOProject",
   singularName: "Global SSO Project",

package/Models/DatabaseModels/Incident.ts

@@ -1715,6 +1715,7 @@ export default class Incident extends BaseModel {
     ],
   })
   @TableColumn({
+    computed: true,
     type: TableColumnType.VeryLongText,
     title: "Notification Status Message",
     description:
@@ -1802,6 +1803,7 @@ export default class Incident extends BaseModel {
     ],
   })
   @TableColumn({
+    computed: true,
     type: TableColumnType.VeryLongText,
     title: "Notification Status Message on Postmortem Published",
     description:

package/Models/DatabaseModels/IncidentEpisode.ts

@@ -1680,6 +1680,7 @@ export default class IncidentEpisode extends BaseModel {
     update: [],
   })
   @TableColumn({
+    computed: true,
     type: TableColumnType.VeryLongText,
     title: "Subscriber Notification Status Message",
     description:

package/Models/DatabaseModels/IncidentEpisodePublicNote.ts

@@ -541,6 +541,7 @@ export default class IncidentEpisodePublicNote extends BaseModel {
     ],
   })
   @TableColumn({
+    computed: true,
     type: TableColumnType.VeryLongText,
     title: "Notification Status Message",
     description:

package/Models/DatabaseModels/IncidentEpisodeStateTimeline.ts

@@ -695,6 +695,7 @@ export default class IncidentEpisodeStateTimeline extends BaseModel {
     update: [],
   })
   @TableColumn({
+    computed: true,
     type: TableColumnType.VeryLongText,
     title: "Subscriber Notification Status Message",
     description:

package/Models/DatabaseModels/IncidentFeed.ts

@@ -93,6 +93,7 @@ export enum IncidentFeedEventType {
     "Log of the entire incident state change. This is a log of all the incident state changes, public notes, more etc.",
 })
 @Index(["incidentId", "postedAt"]) // Incident detail page: feed sorted by postedAt
+@Index(["incidentId", "aiRunId"]) // Exact AI investigation result lookup
 export default class IncidentFeed extends BaseModel {
   @ColumnAccessControl({
     create: [
@@ -253,6 +254,35 @@ export default class IncidentFeed extends BaseModel {
   })
   public incidentId?: ObjectID = undefined;
 
+  @ColumnAccessControl({
+    create: [],
+    read: [
+      Permission.ProjectOwner,
+      Permission.ProjectAdmin,
+      Permission.ProjectMember,
+      Permission.Viewer,
+      Permission.IncidentAdmin,
+      Permission.IncidentMember,
+      Permission.IncidentViewer,
+      Permission.ReadIncidentFeed,
+    ],
+    update: [],
+  })
+  @TableColumn({
+    type: TableColumnType.ObjectID,
+    required: false,
+    canReadOnRelationQuery: true,
+    title: "AI Run ID",
+    description:
+      "AI investigation run that produced this feed item when the event is a root cause.",
+  })
+  @Column({
+    type: ColumnType.ObjectID,
+    nullable: true,
+    transformer: ObjectID.getDatabaseTransformer(),
+  })
+  public aiRunId?: ObjectID = undefined;
+
   @ColumnAccessControl({
     create: [
       Permission.ProjectOwner,

package/Models/DatabaseModels/IncidentPublicNote.ts

@@ -544,6 +544,7 @@ export default class IncidentPublicNote extends BaseModel {
     ],
   })
   @TableColumn({
+    computed: true,
     type: TableColumnType.VeryLongText,
     title: "Notification Status Message",
     description:

package/Models/DatabaseModels/IncidentStateTimeline.ts

@@ -544,6 +544,7 @@ export default class IncidentStateTimeline extends BaseModel {
     ],
   })
   @TableColumn({
+    computed: true,
     type: TableColumnType.VeryLongText,
     title: "Notification Status Message",
     description:

package/Models/DatabaseModels/IoTFleet.ts

@@ -80,6 +80,20 @@ import {
  */
 @Index(["projectId", "name"], { unique: true })
 @Index(["projectId", "isArchived"])
+/*
+ * Restores a UNIQUE index that an autogenerated migration deleted.
+ *
+ * Declared natively and NAMED. TypeORM's schema builder matches database
+ * indexes to entity metadata by name and drops every one it cannot find, which
+ * is how the original was lost: it existed only in a migration, so entity
+ * metadata never mentioned it and `migration:generate` emitted a DROP. Naming
+ * it here keeps the original index name and lets the builder match, compare
+ * uniqueness and columns, and keep it.
+ */
+@Index("IDX_iot_fleet_slug", ["slug"], {
+  unique: true,
+  where: '"deletedAt" IS NULL',
+})
 @TableMetadata({
   tableName: "IoTFleet",
   singularName: "IoT Fleet",

package/Models/DatabaseModels/KubernetesCluster.ts

@@ -79,6 +79,20 @@ import {
  */
 @Index(["projectId", "clusterIdentifier"], { unique: true })
 @Index(["projectId", "isArchived"])
+/*
+ * Restores a UNIQUE index that an autogenerated migration deleted.
+ *
+ * Declared natively and NAMED. TypeORM's schema builder matches database
+ * indexes to entity metadata by name and drops every one it cannot find, which
+ * is how the original was lost: it existed only in a migration, so entity
+ * metadata never mentioned it and `migration:generate` emitted a DROP. Naming
+ * it here keeps the original index name and lets the builder match, compare
+ * uniqueness and columns, and keep it.
+ */
+@Index("IDX_kubernetes_cluster_slug", ["slug"], {
+  unique: true,
+  where: '"deletedAt" IS NULL',
+})
 @TableMetadata({
   tableName: "KubernetesCluster",
   singularName: "Kubernetes Cluster",

package/Models/DatabaseModels/LogSavedView.ts

@@ -19,6 +19,7 @@ import TenantColumn from "../../Types/Database/TenantColumn";
 import IconProp from "../../Types/Icon/IconProp";
 import ObjectID from "../../Types/ObjectID";
 import Permission from "../../Types/Permission";
+import { TelemetrySavedViewTimeRange } from "../../Types/Telemetry/TelemetrySavedViewState";
 import { PlanType } from "../../Types/Billing/SubscriptionPlan";
 import { Column, Entity, Index, JoinColumn, ManyToOne } from "typeorm";
 
@@ -430,6 +431,38 @@ export default class LogSavedView extends BaseModel {
   })
   public pageSize?: number = undefined;
 
+  @ColumnAccessControl({
+    create: [
+      Permission.ProjectOwner,
+      Permission.ProjectAdmin,
+      Permission.ProjectMember,
+    ],
+    read: [
+      Permission.ProjectOwner,
+      Permission.ProjectAdmin,
+      Permission.ProjectMember,
+      Permission.Viewer,
+    ],
+    update: [
+      Permission.ProjectOwner,
+      Permission.ProjectAdmin,
+      Permission.ProjectMember,
+    ],
+  })
+  @TableColumn({
+    title: "Time Range",
+    required: false,
+    type: TableColumnType.JSON,
+    canReadOnRelationQuery: true,
+    description:
+      "Time selection for this saved view — the rolling range token (e.g. Past 1 Hour), or an absolute window when the range is Custom.",
+  })
+  @Column({
+    type: ColumnType.JSON,
+    nullable: true,
+  })
+  public timeRange?: TelemetrySavedViewTimeRange = undefined;
+
   @ColumnAccessControl({
     create: [
       Permission.ProjectOwner,

package/Models/DatabaseModels/NetworkDevice.ts

@@ -78,6 +78,20 @@ import {
 @CrudApiEndpoint(new Route("/network-device"))
 @SlugifyColumn("name", "slug")
 @Index(["projectId", "isArchived"])
+/*
+ * Restores a UNIQUE index that an autogenerated migration deleted.
+ *
+ * Declared natively and NAMED. TypeORM's schema builder matches database
+ * indexes to entity metadata by name and drops every one it cannot find, which
+ * is how the original was lost: it existed only in a migration, so entity
+ * metadata never mentioned it and `migration:generate` emitted a DROP. Naming
+ * it here keeps the original index name and lets the builder match, compare
+ * uniqueness and columns, and keep it.
+ */
+@Index("IDX_network_device_slug", ["slug"], {
+  unique: true,
+  where: '"deletedAt" IS NULL',
+})
 @TableMetadata({
   tableName: "NetworkDevice",
   singularName: "Network Device",

package/Models/DatabaseModels/NetworkInterface.ts

@@ -72,6 +72,24 @@ const decimalTransformer: ValueTransformer = {
 })
 @CrudApiEndpoint(new Route("/network-interface"))
 @Index(["projectId", "networkDeviceId"])
+/*
+ * Restores a UNIQUE index that an autogenerated migration deleted.
+ *
+ * Declared natively and NAMED. TypeORM's schema builder matches database
+ * indexes to entity metadata by name and drops every one it cannot find, which
+ * is how the original was lost: it existed only in a migration, so entity
+ * metadata never mentioned it and `migration:generate` emitted a DROP. Naming
+ * it here keeps the original index name and lets the builder match, compare
+ * uniqueness and columns, and keep it.
+ */
+@Index(
+  "IDX_network_interface_device_ifindex",
+  ["networkDeviceId", "interfaceIndex"],
+  {
+    unique: true,
+    where: '"deletedAt" IS NULL',
+  },
+)
 @TableMetadata({
   tableName: "NetworkInterface",
   singularName: "Network Interface",