@oneuptime/common 12.0.32 → 12.0.34

package/build/dist/Utils/NetworkDevice/NetworkAlertPolicyBootstrapUtil.js

@@ -0,0 +1,180 @@
+import MonitorTemplate from "../../Models/DatabaseModels/MonitorTemplate";
+import NetworkAlertPolicy from "../../Models/DatabaseModels/NetworkAlertPolicy";
+import MonitorCriteria from "../../Types/Monitor/MonitorCriteria";
+import MonitorStep from "../../Types/Monitor/MonitorStep";
+import { MonitorStepNetworkDeviceMonitorUtil } from "../../Types/Monitor/MonitorStepNetworkDeviceMonitor";
+import MonitorSteps from "../../Types/Monitor/MonitorSteps";
+import MonitorType from "../../Types/Monitor/MonitorType";
+import NetworkDeviceAlertPackUtil from "../../Types/Monitor/SnmpMonitor/NetworkDeviceAlertPack";
+import { NetworkAlertPolicyScopeUtil } from "../../Types/NetworkDevice/NetworkAlertPolicyScope";
+import ObjectID from "../../Types/ObjectID";
+/*
+ * The "one click to alerting" path for network devices.
+ *
+ * An alert policy is only useful once it has a Network Device monitor
+ * template to clone, and building one by hand means walking the monitor
+ * template form: pick the type, add a step, add five criteria, fill in a
+ * severity and a status on each. Most operators want exactly the Recommended
+ * Alert Pack (NetworkDeviceAlertPack) on every device, so this util builds
+ * that template and the policy that applies it to the whole project, and the
+ * settings page find-or-creates the pair from its empty state.
+ *
+ * FIND-OR-CREATE BY MARKER. The template carries RECOMMENDED_TEMPLATE_MARKER
+ * in its description. The name is what an operator renames; the marker is
+ * what the bootstrap looks for, so clicking "create the recommended policy"
+ * twice — or after the recommended policy was deleted and its template kept
+ * — reuses the template instead of minting a second one, and instead of
+ * tripping the policy service's "another policy already uses this template"
+ * refusal on a duplicate nobody meant to make.
+ *
+ * WHY THE ITEMS ARE FILLED IN HERE. NetworkDeviceAlertPackUtil deliberately
+ * leaves severities and on-call policies for the user to complete on the
+ * monitor form. A policy's monitors are never opened in that form — the
+ * engine clones them — so a criteria whose `createIncidents` is on but whose
+ * `incidents` list is empty would clone into monitors that fire nothing.
+ * Every incident-creating item therefore gets one CriteriaIncident and every
+ * alert-creating item one CriteriaAlert, both auto-resolving, at the
+ * project's lowest-order severity (PingMonitorSeedIds resolves that).
+ *
+ * NO DEVICE ON THE TEMPLATE STEP. A Network Device step names the device it
+ * watches; a template step is a placeholder the engine rebinds per device
+ * (NetworkDeviceMonitorTemplateUtil.rebindMonitorSteps), which requires the
+ * `networkDeviceMonitor` block to exist and ignores what id it holds. The
+ * step is built with the block present and the id unset, which the
+ * template's reference validator skips rather than rejects.
+ *
+ * Pure: no database, no permissions. The caller persists both rows through
+ * ModelAPI / the services so tenancy, billing and the policy engine's hooks
+ * all run.
+ */
+export const RECOMMENDED_TEMPLATE_MARKER = "[oneuptime:network-alert-pack:v1]";
+export const RECOMMENDED_TEMPLATE_NAME = "Network device alert pack (recommended)";
+export const RECOMMENDED_POLICY_NAME = "Alert on every device";
+export default class NetworkAlertPolicyBootstrapUtil {
+    /**
+     * The template every device's monitor is cloned from: a Network Device
+     * template whose single step carries the Recommended Alert Pack, with an
+     * incident or an alert filled in on every item.
+     */
+    static buildRecommendedMonitorTemplate(data) {
+        const criteriaInstances = NetworkDeviceAlertPackUtil.buildCriteriaInstances({
+            downMonitorStatusId: data.offlineMonitorStatusId,
+        });
+        for (const criteriaInstance of criteriaInstances) {
+            NetworkAlertPolicyBootstrapUtil.fillCriteriaActions({
+                criteriaInstance: criteriaInstance,
+                incidentSeverityId: data.incidentSeverityId,
+                alertSeverityId: data.alertSeverityId,
+            });
+        }
+        const monitorCriteria = new MonitorCriteria();
+        monitorCriteria.data = {
+            monitorCriteriaInstanceArray: criteriaInstances,
+        };
+        const monitorStep = new MonitorStep();
+        monitorStep.data.networkDeviceMonitor =
+            MonitorStepNetworkDeviceMonitorUtil.getDefault();
+        monitorStep.data.monitorCriteria = monitorCriteria;
+        const monitorSteps = new MonitorSteps();
+        monitorSteps.data = {
+            monitorStepsInstanceArray: [monitorStep],
+            /*
+             * Where the monitor goes when no pack item matches — the device is
+             * reachable, its walk succeeds, its interfaces are up. Without this a
+             * monitor that once went Offline would never come back.
+             */
+            defaultMonitorStatusId: new ObjectID(data.onlineMonitorStatusId.toString()),
+        };
+        const template = new MonitorTemplate();
+        template.projectId = new ObjectID(data.projectId.toString());
+        template.templateName = RECOMMENDED_TEMPLATE_NAME;
+        template.templateDescription =
+            NetworkAlertPolicyBootstrapUtil.buildRecommendedTemplateDescription();
+        template.monitorType = MonitorType.NetworkDevice;
+        template.monitorSteps = monitorSteps;
+        /*
+         * Left blank on purpose: a policy's monitors are named after the device
+         * alone, and a default monitor name would become a suffix on every one
+         * of them (the auto-import precedent, issue #3486).
+         */
+        template.monitorDescription =
+            "Provisioned by a Network Alert Policy. Edit the policy's template to change what this monitor alerts on; it is re-synced from the template, so edits made here are overwritten.";
+        return template;
+    }
+    /**
+     * The policy that applies the template to every device in the project.
+     * Unscoped on purpose — that is what "recommended" means here, and the
+     * settings table says "All devices" against it so nobody misreads the
+     * reach.
+     */
+    static buildRecommendedPolicy(data) {
+        const policy = new NetworkAlertPolicy();
+        policy.projectId = new ObjectID(data.projectId.toString());
+        policy.name = RECOMMENDED_POLICY_NAME;
+        policy.description =
+            "Every probe-polled device in the project gets a Network Device monitor cloned from the recommended alert pack: an incident when it stops answering ping and SNMP or an interface goes down, and an alert when its SNMP walk fails, an interface saturates or an interface logs errors. A device with no SNMP credentials is pinged rather than walked, so only the reachability item can fire on it until credentials are set. Narrow the scope to sites, roles or labels to cover fewer devices.";
+        policy.isEnabled = true;
+        policy.monitorTemplateId = new ObjectID(data.monitorTemplateId.toString());
+        policy.scope = NetworkAlertPolicyScopeUtil.normalize({});
+        return policy;
+    }
+    /** Whether a template is the one this util minted, by its marker. */
+    static isRecommendedTemplate(template) {
+        return ((template === null || template === void 0 ? void 0 : template.templateDescription) || "").includes(RECOMMENDED_TEMPLATE_MARKER);
+    }
+    /**
+     * The recommended template among a project's templates, or null. The
+     * first marked one wins so a project that somehow holds two keeps reusing
+     * the same one rather than alternating.
+     */
+    static findRecommendedTemplate(templates) {
+        for (const template of templates) {
+            if (NetworkAlertPolicyBootstrapUtil.isRecommendedTemplate(template)) {
+                return template;
+            }
+        }
+        return null;
+    }
+    /**
+     * The description the marker lives in. The marker is on its own line at
+     * the end so an operator can rewrite the prose above it without losing
+     * the tag that makes the template findable.
+     */
+    static buildRecommendedTemplateDescription() {
+        return `The Recommended Alert Pack for network devices: an incident when a device stops answering ping and SNMP or an interface goes down, an alert when the SNMP walk fails, an interface runs above 80% utilization or an interface logs errors. Created by the "Create the recommended policy" action under Network > Settings > Alert Policies; edit the criteria here and every monitor the policy provisions follows. Keep the marker below so the action can find this template again.\n\n${RECOMMENDED_TEMPLATE_MARKER}`;
+    }
+    /*
+     * One CriteriaIncident on an incident-creating item, one CriteriaAlert on
+     * an alert-creating one, titled after the pack item so the incident an
+     * operator is paged with reads "Device unreachable", not "Criteria 1".
+     */
+    static fillCriteriaActions(data) {
+        const criteriaData = data.criteriaInstance.data;
+        if (!criteriaData) {
+            return;
+        }
+        if (criteriaData.createIncidents) {
+            const incident = {
+                id: ObjectID.generate().toString(),
+                title: criteriaData.name,
+                description: criteriaData.description,
+                incidentSeverityId: new ObjectID(data.incidentSeverityId.toString()),
+                autoResolveIncident: true,
+                onCallPolicyIds: [],
+            };
+            criteriaData.incidents = [incident];
+        }
+        if (criteriaData.createAlerts) {
+            const alert = {
+                id: ObjectID.generate().toString(),
+                title: criteriaData.name,
+                description: criteriaData.description,
+                alertSeverityId: new ObjectID(data.alertSeverityId.toString()),
+                autoResolveAlert: true,
+                onCallPolicyIds: [],
+            };
+            criteriaData.alerts = [alert];
+        }
+    }
+}
+//# sourceMappingURL=NetworkAlertPolicyBootstrapUtil.js.map

package/build/dist/Utils/NetworkDevice/NetworkAlertPolicyBootstrapUtil.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"NetworkAlertPolicyBootstrapUtil.js","sourceRoot":"","sources":["../../../../Utils/NetworkDevice/NetworkAlertPolicyBootstrapUtil.ts"],"names":[],"mappings":"AAAA,OAAO,eAAe,MAAM,6CAA6C,CAAC;AAC1E,OAAO,kBAAkB,MAAM,gDAAgD,CAAC;AAGhF,OAAO,eAAe,MAAM,qCAAqC,CAAC;AAElE,OAAO,WAAW,MAAM,iCAAiC,CAAC;AAC1D,OAAO,EAAE,mCAAmC,EAAE,MAAM,qDAAqD,CAAC;AAC1G,OAAO,YAAY,MAAM,kCAAkC,CAAC;AAC5D,OAAO,WAAW,MAAM,iCAAiC,CAAC;AAC1D,OAAO,0BAA0B,MAAM,wDAAwD,CAAC;AAChG,OAAO,EAAE,2BAA2B,EAAE,MAAM,mDAAmD,CAAC;AAChG,OAAO,QAAQ,MAAM,sBAAsB,CAAC;AAE5C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsCG;AAEH,MAAM,CAAC,MAAM,2BAA2B,GACtC,mCAAmC,CAAC;AAEtC,MAAM,CAAC,MAAM,yBAAyB,GACpC,yCAAyC,CAAC;AAE5C,MAAM,CAAC,MAAM,uBAAuB,GAAW,uBAAuB,CAAC;AAwBvE,MAAM,CAAC,OAAO,OAAO,+BAA+B;IAClD;;;;OAIG;IACI,MAAM,CAAC,+BAA+B,CAC3C,IAAuC;QAEvC,MAAM,iBAAiB,GACrB,0BAA0B,CAAC,sBAAsB,CAAC;YAChD,mBAAmB,EAAE,IAAI,CAAC,sBAAsB;SACjD,CAAC,CAAC;QAEL,KAAK,MAAM,gBAAgB,IAAI,iBAAiB,EAAE,CAAC;YACjD,+BAA+B,CAAC,mBAAmB,CAAC;gBAClD,gBAAgB,EAAE,gBAAgB;gBAClC,kBAAkB,EAAE,IAAI,CAAC,kBAAkB;gBAC3C,eAAe,EAAE,IAAI,CAAC,eAAe;aACtC,CAAC,CAAC;QACL,CAAC;QAED,MAAM,eAAe,GAAoB,IAAI,eAAe,EAAE,CAAC;QAC/D,eAAe,CAAC,IAAI,GAAG;YACrB,4BAA4B,EAAE,iBAAiB;SAChD,CAAC;QAEF,MAAM,WAAW,GAAgB,IAAI,WAAW,EAAE,CAAC;QACnD,WAAW,CAAC,IAAK,CAAC,oBAAoB;YACpC,mCAAmC,CAAC,UAAU,EAAE,CAAC;QACnD,WAAW,CAAC,IAAK,CAAC,eAAe,GAAG,eAAe,CAAC;QAEpD,MAAM,YAAY,GAAiB,IAAI,YAAY,EAAE,CAAC;QACtD,YAAY,CAAC,IAAI,GAAG;YAClB,yBAAyB,EAAE,CAAC,WAAW,CAAC;YACxC;;;;eAIG;YACH,sBAAsB,EAAE,IAAI,QAAQ,CAClC,IAAI,CAAC,qBAAqB,CAAC,QAAQ,EAAE,CACtC;SACF,CAAC;QAEF,MAAM,QAAQ,GAAoB,IAAI,eAAe,EAAE,CAAC;QACxD,QAAQ,CAAC,SAAS,GAAG,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC7D,QAAQ,CAAC,YAAY,GAAG,yBAAyB,CAAC;QAClD,QAAQ,CAAC,mBAAmB;YAC1B,+BAA+B,CAAC,mCAAmC,EAAE,CAAC;QACxE,QAAQ,CAAC,WAAW,GAAG,WAAW,CAAC,aAAa,CAAC;QACjD,QAAQ,CAAC,YAAY,GAAG,YAAY,CAAC;QACrC;;;;WAIG;QACH,QAAQ,CAAC,kBAAkB;YACzB,iLAAiL,CAAC;QAEpL,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED;;;;;OAKG;IACI,MAAM,CAAC,sBAAsB,CAClC,IAA8B;QAE9B,MAAM,MAAM,GAAuB,IAAI,kBAAkB,EAAE,CAAC;QAC5D,MAAM,CAAC,SAAS,GAAG,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC3D,MAAM,CAAC,IAAI,GAAG,uBAAuB,CAAC;QACtC,MAAM,CAAC,WAAW;YAChB,meAAme,CAAC;QACte,MAAM,CAAC,SAAS,GAAG,IAAI,CAAC;QACxB,MAAM,CAAC,iBAAiB,GAAG,IAAI,QAAQ,CAAC,IAAI,CAAC,iBAAiB,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC3E,MAAM,CAAC,KAAK,GAAG,2BAA2B,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QAEzD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,qEAAqE;IAC9D,MAAM,CAAC,qBAAqB,CACjC,QAAyD;QAEzD,OAAO,CAAC,CAAA,QAAQ,aAAR,QAAQ,uBAAR,QAAQ,CAAE,mBAAmB,KAAI,EAAE,CAAC,CAAC,QAAQ,CACnD,2BAA2B,CAC5B,CAAC;IACJ,CAAC;IAED;;;;OAIG;IACI,MAAM,CAAC,uBAAuB,CAEnC,SAA2B;QAC3B,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;YACjC,IAAI,+BAA+B,CAAC,qBAAqB,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACpE,OAAO,QAAQ,CAAC;YAClB,CAAC;QACH,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;;;OAIG;IACI,MAAM,CAAC,mCAAmC;QAC/C,OAAO,4dAA4d,2BAA2B,EAAE,CAAC;IACngB,CAAC;IAED;;;;OAIG;IACK,MAAM,CAAC,mBAAmB,CAAC,IAIlC;QACC,MAAM,YAAY,GAChB,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC;QAE7B,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,OAAO;QACT,CAAC;QAED,IAAI,YAAY,CAAC,eAAe,EAAE,CAAC;YACjC,MAAM,QAAQ,GAAqB;gBACjC,EAAE,EAAE,QAAQ,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;gBAClC,KAAK,EAAE,YAAY,CAAC,IAAI;gBACxB,WAAW,EAAE,YAAY,CAAC,WAAW;gBACrC,kBAAkB,EAAE,IAAI,QAAQ,CAAC,IAAI,CAAC,kBAAkB,CAAC,QAAQ,EAAE,CAAC;gBACpE,mBAAmB,EAAE,IAAI;gBACzB,eAAe,EAAE,EAAE;aACpB,CAAC;YAEF,YAAY,CAAC,SAAS,GAAG,CAAC,QAAQ,CAAC,CAAC;QACtC,CAAC;QAED,IAAI,YAAY,CAAC,YAAY,EAAE,CAAC;YAC9B,MAAM,KAAK,GAAkB;gBAC3B,EAAE,EAAE,QAAQ,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;gBAClC,KAAK,EAAE,YAAY,CAAC,IAAI;gBACxB,WAAW,EAAE,YAAY,CAAC,WAAW;gBACrC,eAAe,EAAE,IAAI,QAAQ,CAAC,IAAI,CAAC,eAAe,CAAC,QAAQ,EAAE,CAAC;gBAC9D,gBAAgB,EAAE,IAAI;gBACtB,eAAe,EAAE,EAAE;aACpB,CAAC;YAEF,YAAY,CAAC,MAAM,GAAG,CAAC,KAAK,CAAC,CAAC;QAChC,CAAC;IACH,CAAC;CACF"}

package/build/dist/Utils/NetworkDevice/SnmpCredentialUtil.js

@@ -0,0 +1,12 @@
+import { SnmpVersionUtil } from "../../Types/Monitor/SnmpMonitor/SnmpVersion";
+function isNonEmpty(value) {
+    return typeof value === "string" && value.trim().length > 0;
+}
+export const hasUsableCredentials = (carrier) => {
+    if (SnmpVersionUtil.isV3(carrier.snmpVersion)) {
+        return isNonEmpty(carrier.snmpV3Username);
+    }
+    return isNonEmpty(carrier.snmpCommunityString);
+};
+export default hasUsableCredentials;
+//# sourceMappingURL=SnmpCredentialUtil.js.map

package/build/dist/Utils/NetworkDevice/SnmpCredentialUtil.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"SnmpCredentialUtil.js","sourceRoot":"","sources":["../../../../Utils/NetworkDevice/SnmpCredentialUtil.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,6CAA6C,CAAC;AAqD9E,SAAS,UAAU,CAAC,KAAgC;IAClD,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC;AAC9D,CAAC;AAED,MAAM,CAAC,MAAM,oBAAoB,GAAiC,CAChE,OAA8B,EACrB,EAAE;IACX,IAAI,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC;QAC9C,OAAO,UAAU,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;IAC5C,CAAC;IAED,OAAO,UAAU,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC;AACjD,CAAC,CAAC;AAEF,eAAe,oBAAoB,CAAC"}

package/build/dist/Utils/NetworkDiscovery/AutoImportRuleMatcher.js

@@ -1,7 +1,6 @@
-import NetworkDeviceMonitoringMethod from "../../Types/NetworkDevice/NetworkDeviceMonitoringMethod";
 import CidrMatchUtil from "../NetworkSite/CidrMatchUtil";
 import RulePatternMatchUtil from "../Rules/RulePatternMatchUtil";
-import { monitoringMethodForDiscoveredHost } from "./DiscoveryImportEligibility";
+import { isPingOnlyDiscoveredHost } from "./DiscoveryImportEligibility";
 import ScanTargetUtil from "./ScanTargetUtil";
 /*
  * Longest subject string a pattern is evaluated against. SNMP DisplayStrings
@@ -58,10 +57,21 @@ export function matchesOidPattern(value, pattern) {
     return oid === oidPattern || oid.startsWith(oidPattern + ".");
 }
 export class AutoImportRuleMatcher {
-    // True when the host answered ping but not SNMP.
+    /*
+     * True when the host answered ping but not SNMP.
+     *
+     * Asked of the host's own SNMP answer (`isPingOnlyDiscoveredHost`), NOT of
+     * the method it would import under. Under ping-first polling EVERY
+     * discovered host imports as a Probe device, so
+     * `monitoringMethodForDiscoveredHost` is a constant — routing this gate
+     * through it made `isPingOnlyHost` permanently false and silently opened
+     * the default-closed gate below: one SNMP credential typo would have
+     * imported a whole subnet of half-identified hosts through rules that never
+     * opted in. How a host is MONITORED and what it ANSWERED are two different
+     * questions now, and this one is the second.
+     */
     static isPingOnlyHost(host) {
-        return (monitoringMethodForDiscoveredHost(host) ===
-            NetworkDeviceMonitoringMethod.Monitor);
+        return isPingOnlyDiscoveredHost(host);
     }
     /*
      * True when this rule's populated conditions all match the host.

package/build/dist/Utils/NetworkDiscovery/AutoImportRuleMatcher.js.map

@@ -1 +1 @@
-{"version":3,"file":"AutoImportRuleMatcher.js","sourceRoot":"","sources":["../../../../Utils/NetworkDiscovery/AutoImportRuleMatcher.ts"],"names":[],"mappings":"AACA,OAAO,6BAA6B,MAAM,yDAAyD,CAAC;AAEpG,OAAO,aAAa,MAAM,8BAA8B,CAAC;AACzD,OAAO,oBAAoB,MAAM,+BAA+B,CAAC;AACjE,OAAO,EAAE,iCAAiC,EAAE,MAAM,8BAA8B,CAAC;AACjF,OAAO,cAAc,MAAM,kBAAkB,CAAC;AAgE9C;;;;;;;;;;GAUG;AACH,MAAM,0BAA0B,GAAW,GAAG,CAAC;AAE/C,SAAS,YAAY,CAAC,KAAyB;IAC7C,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,OAAO,KAAK,CAAC;IACf,CAAC;IAED,OAAO,KAAK,CAAC,MAAM,GAAG,0BAA0B;QAC9C,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,EAAE,0BAA0B,CAAC;QAChD,CAAC,CAAC,KAAK,CAAC;AACZ,CAAC;AAED;;;GAGG;AACH,SAAS,YAAY,CAAC,KAAa;IACjC,OAAO,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;AAC5D,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,iBAAiB,CAC/B,KAAyB,EACzB,OAAe;IAEf,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3D,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,GAAG,GAAW,YAAY,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;IAC/C,MAAM,UAAU,GAAW,YAAY,CAAC,OAAO,CAAC,CAAC;IAEjD,IAAI,UAAU,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QAC7B,OAAO,aAAa,CAAC,uBAAuB,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;IAChE,CAAC;IAED,OAAO,GAAG,KAAK,UAAU,IAAI,GAAG,CAAC,UAAU,CAAC,UAAU,GAAG,GAAG,CAAC,CAAC;AAChE,CAAC;AAED,MAAM,OAAO,qBAAqB;IAChC,iDAAiD;IACzC,MAAM,CAAC,cAAc,CAAC,IAA6B;QACzD,OAAO,CACL,iCAAiC,CAAC,IAAI,CAAC;YACvC,6BAA6B,CAAC,OAAO,CACtC,CAAC;IACJ,CAAC;IAED;;;;;;;;;;OAUG;IACI,MAAM,CAAC,eAAe,CAC3B,IAA6B,EAC7B,IAA6B;QAE7B,MAAM,aAAa,GAAW,CAAC,IAAI,CAAC,aAAa,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QAChE,MAAM,cAAc,GAAW,CAAC,IAAI,CAAC,cAAc,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QAClE,MAAM,eAAe,GAAW,CAAC,IAAI,CAAC,eAAe,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACpE,MAAM,kBAAkB,GAAW,CAAC,IAAI,CAAC,kBAAkB,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QAE1E,uEAAuE;QACvE,IACE,CAAC,aAAa;YACd,CAAC,cAAc;YACf,CAAC,eAAe;YAChB,CAAC,kBAAkB,EACnB,CAAC;YACD,OAAO,KAAK,CAAC;QACf,CAAC;QAED,IACE,CAAC,IAAI,CAAC,WAAW;YACjB,CAAC,IAAI,CAAC,oBAAoB;YAC1B,qBAAqB,CAAC,cAAc,CAAC,IAAI,CAAC,EAC1C,CAAC;YACD,OAAO,KAAK,CAAC;QACf,CAAC;QAED,IAAI,aAAa,EAAE,CAAC;YAClB,IACE,CAAC,IAAI,CAAC,SAAS;gBACf,CAAC,cAAc,CAAC,QAAQ,CAAC,aAAa,EAAE,IAAI,CAAC,SAAS,CAAC,EACvD,CAAC;gBACD,OAAO,KAAK,CAAC;YACf,CAAC;QACH,CAAC;QAED;;;;;WAKG;QACH,IACE,cAAc;YACd,CAAC,oBAAoB,CAAC,OAAO,CAAC,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,cAAc,CAAC,EACzE,CAAC;YACD,OAAO,KAAK,CAAC;QACf,CAAC;QAED,IACE,eAAe;YACf,CAAC,oBAAoB,CAAC,OAAO,CAC3B,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC,EAC3B,eAAe,CAChB,EACD,CAAC;YACD,OAAO,KAAK,CAAC;QACf,CAAC;QAED,IACE,kBAAkB;YAClB,CAAC,iBAAiB,CAAC,YAAY,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,kBAAkB,CAAC,EACtE,CAAC;YACD,OAAO,KAAK,CAAC;QACf,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;;;;;;OAOG;IACI,MAAM,CAAC,YAAY,CACxB,KAAqC,EACrC,IAA6B;QAE7B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IACE,IAAI,CAAC,WAAW;gBAChB,qBAAqB,CAAC,eAAe,CAAC,IAAI,EAAE,IAAI,CAAC,EACjD,CAAC;gBACD,OAAO;oBACL,YAAY,EAAE,KAAK;oBACnB,YAAY,EAAE,EAAE;oBAChB,cAAc,EAAE,IAAI;iBACrB,CAAC;YACJ,CAAC;QACH,CAAC;QAED,MAAM,YAAY,GAAmC,KAAK,CAAC,MAAM,CAC/D,CAAC,IAA6B,EAAW,EAAE;YACzC,OAAO,CACL,CAAC,IAAI,CAAC,WAAW,IAAI,qBAAqB,CAAC,eAAe,CAAC,IAAI,EAAE,IAAI,CAAC,CACvE,CAAC;QACJ,CAAC,CACF,CAAC;QAEF,OAAO;YACL,YAAY,EAAE,YAAY,CAAC,MAAM,GAAG,CAAC;YACrC,YAAY,EAAE,YAAY;SAC3B,CAAC;IACJ,CAAC;CACF;AAED,eAAe,qBAAqB,CAAC"}
+{"version":3,"file":"AutoImportRuleMatcher.js","sourceRoot":"","sources":["../../../../Utils/NetworkDiscovery/AutoImportRuleMatcher.ts"],"names":[],"mappings":"AAEA,OAAO,aAAa,MAAM,8BAA8B,CAAC;AACzD,OAAO,oBAAoB,MAAM,+BAA+B,CAAC;AACjE,OAAO,EAAE,wBAAwB,EAAE,MAAM,8BAA8B,CAAC;AACxE,OAAO,cAAc,MAAM,kBAAkB,CAAC;AAgE9C;;;;;;;;;;GAUG;AACH,MAAM,0BAA0B,GAAW,GAAG,CAAC;AAE/C,SAAS,YAAY,CAAC,KAAyB;IAC7C,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,OAAO,KAAK,CAAC;IACf,CAAC;IAED,OAAO,KAAK,CAAC,MAAM,GAAG,0BAA0B;QAC9C,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,EAAE,0BAA0B,CAAC;QAChD,CAAC,CAAC,KAAK,CAAC;AACZ,CAAC;AAED;;;GAGG;AACH,SAAS,YAAY,CAAC,KAAa;IACjC,OAAO,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;AAC5D,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,iBAAiB,CAC/B,KAAyB,EACzB,OAAe;IAEf,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3D,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,GAAG,GAAW,YAAY,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;IAC/C,MAAM,UAAU,GAAW,YAAY,CAAC,OAAO,CAAC,CAAC;IAEjD,IAAI,UAAU,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QAC7B,OAAO,aAAa,CAAC,uBAAuB,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;IAChE,CAAC;IAED,OAAO,GAAG,KAAK,UAAU,IAAI,GAAG,CAAC,UAAU,CAAC,UAAU,GAAG,GAAG,CAAC,CAAC;AAChE,CAAC;AAED,MAAM,OAAO,qBAAqB;IAChC;;;;;;;;;;;;OAYG;IACK,MAAM,CAAC,cAAc,CAAC,IAA6B;QACzD,OAAO,wBAAwB,CAAC,IAAI,CAAC,CAAC;IACxC,CAAC;IAED;;;;;;;;;;OAUG;IACI,MAAM,CAAC,eAAe,CAC3B,IAA6B,EAC7B,IAA6B;QAE7B,MAAM,aAAa,GAAW,CAAC,IAAI,CAAC,aAAa,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QAChE,MAAM,cAAc,GAAW,CAAC,IAAI,CAAC,cAAc,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QAClE,MAAM,eAAe,GAAW,CAAC,IAAI,CAAC,eAAe,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACpE,MAAM,kBAAkB,GAAW,CAAC,IAAI,CAAC,kBAAkB,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QAE1E,uEAAuE;QACvE,IACE,CAAC,aAAa;YACd,CAAC,cAAc;YACf,CAAC,eAAe;YAChB,CAAC,kBAAkB,EACnB,CAAC;YACD,OAAO,KAAK,CAAC;QACf,CAAC;QAED,IACE,CAAC,IAAI,CAAC,WAAW;YACjB,CAAC,IAAI,CAAC,oBAAoB;YAC1B,qBAAqB,CAAC,cAAc,CAAC,IAAI,CAAC,EAC1C,CAAC;YACD,OAAO,KAAK,CAAC;QACf,CAAC;QAED,IAAI,aAAa,EAAE,CAAC;YAClB,IACE,CAAC,IAAI,CAAC,SAAS;gBACf,CAAC,cAAc,CAAC,QAAQ,CAAC,aAAa,EAAE,IAAI,CAAC,SAAS,CAAC,EACvD,CAAC;gBACD,OAAO,KAAK,CAAC;YACf,CAAC;QACH,CAAC;QAED;;;;;WAKG;QACH,IACE,cAAc;YACd,CAAC,oBAAoB,CAAC,OAAO,CAAC,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,cAAc,CAAC,EACzE,CAAC;YACD,OAAO,KAAK,CAAC;QACf,CAAC;QAED,IACE,eAAe;YACf,CAAC,oBAAoB,CAAC,OAAO,CAC3B,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC,EAC3B,eAAe,CAChB,EACD,CAAC;YACD,OAAO,KAAK,CAAC;QACf,CAAC;QAED,IACE,kBAAkB;YAClB,CAAC,iBAAiB,CAAC,YAAY,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,kBAAkB,CAAC,EACtE,CAAC;YACD,OAAO,KAAK,CAAC;QACf,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;;;;;;OAOG;IACI,MAAM,CAAC,YAAY,CACxB,KAAqC,EACrC,IAA6B;QAE7B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IACE,IAAI,CAAC,WAAW;gBAChB,qBAAqB,CAAC,eAAe,CAAC,IAAI,EAAE,IAAI,CAAC,EACjD,CAAC;gBACD,OAAO;oBACL,YAAY,EAAE,KAAK;oBACnB,YAAY,EAAE,EAAE;oBAChB,cAAc,EAAE,IAAI;iBACrB,CAAC;YACJ,CAAC;QACH,CAAC;QAED,MAAM,YAAY,GAAmC,KAAK,CAAC,MAAM,CAC/D,CAAC,IAA6B,EAAW,EAAE;YACzC,OAAO,CACL,CAAC,IAAI,CAAC,WAAW,IAAI,qBAAqB,CAAC,eAAe,CAAC,IAAI,EAAE,IAAI,CAAC,CACvE,CAAC;QACJ,CAAC,CACF,CAAC;QAEF,OAAO;YACL,YAAY,EAAE,YAAY,CAAC,MAAM,GAAG,CAAC;YACrC,YAAY,EAAE,YAAY;SAC3B,CAAC;IACJ,CAAC;CACF;AAED,eAAe,qBAAqB,CAAC"}

package/build/dist/Utils/NetworkDiscovery/DiscoveredDeviceBuilder.js

@@ -1,8 +1,7 @@
 import NetworkDevice from "../../Models/DatabaseModels/NetworkDevice";
-import NetworkDeviceMonitoringMethod from "../../Types/NetworkDevice/NetworkDeviceMonitoringMethod";
 import ObjectID from "../../Types/ObjectID";
 import SnmpScanConfigUtil from "./SnmpScanConfigUtil";
-import { monitoringMethodForDiscoveredHost } from "./DiscoveryImportEligibility";
+import { isPingOnlyDiscoveredHost, monitoringMethodForDiscoveredHost, } from "./DiscoveryImportEligibility";
 import { normalizeReverseDnsName } from "./ReverseDnsNameUtil";
 /*
  * One discovered host -> one NetworkDevice, the same way everywhere.
@@ -148,11 +147,18 @@ export function buildFallbackDeviceName(host) {
 /**
  * The NetworkDevice a discovered host imports as.
  *
- * An SNMP-reachable host becomes a polled device carrying the scan's probe
- * and credentials. A ping-only host becomes a monitor-backed device with no
- * probe, no credentials and polling off: it is recorded so it can belong to a
- * site and appear on the topology map, and binding a monitor to it stays a
- * separate, deliberate step.
+ * Every host becomes a Probe device polled by the scan's probe — the probe
+ * that just proved the host answers, so the one that can keep asking. An
+ * SNMP-reachable host also carries the credential set that answered it, so
+ * its first poll walks it for interfaces, inventory and health. A ping-only
+ * host carries no credentials at all: the probe pings it and nothing more, it
+ * has a status from its first poll, and adding credentials later on its
+ * Settings page is what turns the walk on.
+ *
+ * (It used to import as a monitor-backed device with no probe and polling
+ * off, which left it on "Pending" until an operator hand-bound a Ping monitor
+ * — issue #3447. Reachability is a built-in capability of every probe-polled
+ * device now, so that dead end is gone.)
  *
  * The caller supplies the name (normally `buildDeviceName(host)`) so the
  * name-collision retry can rebuild the same device under
@@ -191,12 +197,39 @@ export function buildNetworkDeviceFromDiscoveredHost(data) {
     }
     const monitoringMethod = monitoringMethodForDiscoveredHost(host);
     device.monitoringMethod = monitoringMethod;
-    if (monitoringMethod === NetworkDeviceMonitoringMethod.Monitor) {
+    /*
+     * The scan's probe, on EVERY device. It is the probe that just reached this
+     * host — over ping at the very least — so it is the one that can keep
+     * polling it. Written explicitly rather than left to the column default:
+     * a Probe device with no probe is claimed by nothing and never polls, which
+     * is the "Pending forever" the whole change exists to end.
+     */
+    if (data.scan.probeId) {
+        // Re-wrapped: the scan may hold a serialized id rather than an ObjectID.
+        device.probeId = new ObjectID(data.scan.probeId.toString());
+    }
+    /*
+     * Polling on, for both kinds of host. The column defaults to true, but this
+     * function is the recipe both import paths share and "the probe polls this
+     * device" is the whole point of it, so the recipe says so itself rather
+     * than trusting a default that a ping-only host used to override to false.
+     */
+    device.isPollingEnabled = true;
+    if (isPingOnlyDiscoveredHost(host)) {
         /*
-         * A ping-only host is never SNMP-polled, so the vendor-template
-         * auto-apply (which keys off a polled sysObjectID) stays off too.
+         * A ping-only host carries NO credentials, decided BEFORE any config is
+         * looked up: `snmpConfigId` and `snmpReachable` are two fields of the
+         * same probe-written jsonb row, and nothing enforces that a ping-only row
+         * leaves the first one unset. A device that answered nothing but a ping
+         * must not import carrying a community string it rejected — it would be
+         * walked with it on every poll and read as an SNMP failure rather than
+         * as the credential-less device it is. The probe pings it and nothing
+         * more until credentials are added on its Settings page.
+         *
+         * The OID template and the vendor-template auto-apply stay off too: both
+         * key off SNMP data — a polled sysObjectID, a walked OID list — that
+         * this host did not supply and will not until it has credentials.
          */
-        device.isPollingEnabled = false;
         return device;
     }
     if (data.oidTemplateId) {
@@ -205,10 +238,6 @@ export function buildNetworkDeviceFromDiscoveredHost(data) {
     if (data.autoApplyVendorHealthTemplate) {
         device.autoApplyVendorHealthTemplate = true;
     }
-    if (data.scan.probeId) {
-        // Re-wrapped: the scan may hold a serialized id rather than an ObjectID.
-        device.probeId = new ObjectID(data.scan.probeId.toString());
-    }
     /*
      * THE credential set that answered this host, not the scan's first one.
      *

package/build/dist/Utils/NetworkDiscovery/DiscoveredDeviceBuilder.js.map

@@ -1 +1 @@
-{"version":3,"file":"DiscoveredDeviceBuilder.js","sourceRoot":"","sources":["../../../../Utils/NetworkDiscovery/DiscoveredDeviceBuilder.ts"],"names":[],"mappings":"AAAA,OAAO,aAAa,MAAM,2CAA2C,CAAC;AAEtE,OAAO,6BAA6B,MAAM,yDAAyD,CAAC;AACpG,OAAO,QAAQ,MAAM,sBAAsB,CAAC;AAC5C,OAAO,kBAEN,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,iCAAiC,EAAE,MAAM,8BAA8B,CAAC;AACjF,OAAO,EAAE,uBAAuB,EAAE,MAAM,sBAAsB,CAAC;AAE/D;;;;;;;;GAQG;AAEH;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAW,EAAE,CAAC;AAEjD,+EAA+E;AAC/E,MAAM,CAAC,MAAM,6BAA6B,GAAW,GAAG,CAAC;AAEzD,SAAS,QAAQ,CAAC,KAAa,EAAE,SAAiB;IAChD,OAAO,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;AAC1E,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwCG;AACH,MAAM,UAAU,4BAA4B,CAC1C,IAA6B;;IAE7B;;;;;;;;OAQG;IACH;;;;;;;;;OASG;IACH,MAAM,OAAO,GACX,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAE9D,OAAO,CACL,OAAO;QACP,uBAAuB,CAAC,IAAI,CAAC,WAAW,CAAC;QACzC,MAAM,CAAC,MAAA,IAAI,CAAC,SAAS,mCAAI,EAAE,CAAC,CAC7B,CAAC;AACJ,CAAC;AAED,+EAA+E;AAC/E,MAAM,UAAU,eAAe,CAAC,IAA6B;IAC3D,OAAO,QAAQ,CAAC,4BAA4B,CAAC,IAAI,CAAC,EAAE,sBAAsB,CAAC,CAAC;AAC9E,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,uBAAuB,CAAC,IAA6B;;IACnE;;;;;;;;;;OAUG;IACH,MAAM,OAAO,GAAW,MAAM,CAAC,MAAA,IAAI,CAAC,SAAS,mCAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAE5D;;;;;;OAMG;IACH,MAAM,MAAM,GAAW,OAAO,CAAC,CAAC,CAAC,KAAK,OAAO,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;IAEtD,MAAM,QAAQ,GAAW,eAAe,CAAC,IAAI,CAAC,CAAC;IAE/C;;;;;;;OAOG;IACH,OAAO,QAAQ,CACb,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,sBAAsB,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;QACrE,MAAM,EACR,sBAAsB,CACvB,CAAC;AACJ,CAAC;AA8BD;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,oCAAoC,CAAC,IAmBpD;;IACC,MAAM,IAAI,GAA4B,IAAI,CAAC,IAAI,CAAC;IAEhD,MAAM,MAAM,GAAkB,IAAI,aAAa,EAAE,CAAC;IAClD,MAAM,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;IAClC,MAAM,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,eAAe,CAAC,IAAI,CAAC,CAAC;IACjD;;;;;;;;;;;;;;;;;;;;OAoBG;IACH,MAAM,CAAC,QAAQ,GAAG,MAAM,CAAC,MAAA,IAAI,CAAC,SAAS,mCAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAEtD,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;QAClB,MAAM,CAAC,WAAW,GAAG,QAAQ,CAAC,IAAI,CAAC,QAAQ,EAAE,6BAA6B,CAAC,CAAC;IAC9E,CAAC;IAED,MAAM,gBAAgB,GACpB,iCAAiC,CAAC,IAAI,CAAC,CAAC;IAC1C,MAAM,CAAC,gBAAgB,GAAG,gBAAgB,CAAC;IAE3C,IAAI,gBAAgB,KAAK,6BAA6B,CAAC,OAAO,EAAE,CAAC;QAC/D;;;WAGG;QACH,MAAM,CAAC,gBAAgB,GAAG,KAAK,CAAC;QAChC,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;QACvB,MAAM,CAAC,aAAa,GAAG,IAAI,CAAC,aAAa,CAAC;IAC5C,CAAC;IAED,IAAI,IAAI,CAAC,6BAA6B,EAAE,CAAC;QACvC,MAAM,CAAC,6BAA6B,GAAG,IAAI,CAAC;IAC9C,CAAC;IAED,IAAI,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;QACtB,yEAAyE;QACzE,MAAM,CAAC,OAAO,GAAG,IAAI,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC;IAC9D,CAAC;IAED;;;;;;;;;;;;;OAaG;IACH,MAAM,UAAU,GAA4B,kBAAkB,CAAC,cAAc,CAC3E,IAAI,CAAC,IAAI,EACT,IAAI,CAAC,YAAY,CAClB,CAAC;IAEF,IAAI,UAAU,CAAC,WAAW,EAAE,CAAC;QAC3B,MAAM,CAAC,WAAW,GAAG,UAAU,CAAC,WAAW,CAAC;IAC9C,CAAC;IAED,IAAI,UAAU,CAAC,mBAAmB,EAAE,CAAC;QACnC,MAAM,CAAC,mBAAmB,GAAG,UAAU,CAAC,mBAAmB,CAAC;IAC9D,CAAC;IAED,IAAI,UAAU,CAAC,QAAQ,EAAE,CAAC;QACxB,MAAM,CAAC,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC;IACxC,CAAC;IAED,gEAAgE;IAChE,IAAI,UAAU,CAAC,mBAAmB,EAAE,CAAC;QACnC,MAAM,CAAC,mBAAmB,GAAG,UAAU,CAAC,mBAAmB,CAAC;IAC9D,CAAC;IAED,IAAI,UAAU,CAAC,cAAc,EAAE,CAAC;QAC9B,MAAM,CAAC,cAAc,GAAG,UAAU,CAAC,cAAc,CAAC;IACpD,CAAC;IAED,IAAI,UAAU,CAAC,kBAAkB,EAAE,CAAC;QAClC,MAAM,CAAC,kBAAkB,GAAG,UAAU,CAAC,kBAAkB,CAAC;IAC5D,CAAC;IAED,IAAI,UAAU,CAAC,aAAa,EAAE,CAAC;QAC7B,MAAM,CAAC,aAAa,GAAG,UAAU,CAAC,aAAa,CAAC;IAClD,CAAC;IAED,IAAI,UAAU,CAAC,kBAAkB,EAAE,CAAC;QAClC,MAAM,CAAC,kBAAkB,GAAG,UAAU,CAAC,kBAAkB,CAAC;IAC5D,CAAC;IAED,IAAI,UAAU,CAAC,aAAa,EAAE,CAAC;QAC7B,MAAM,CAAC,aAAa,GAAG,UAAU,CAAC,aAAa,CAAC;IAClD,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC"}
+{"version":3,"file":"DiscoveredDeviceBuilder.js","sourceRoot":"","sources":["../../../../Utils/NetworkDiscovery/DiscoveredDeviceBuilder.ts"],"names":[],"mappings":"AAAA,OAAO,aAAa,MAAM,2CAA2C,CAAC;AAGtE,OAAO,QAAQ,MAAM,sBAAsB,CAAC;AAC5C,OAAO,kBAEN,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,wBAAwB,EACxB,iCAAiC,GAClC,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,uBAAuB,EAAE,MAAM,sBAAsB,CAAC;AAE/D;;;;;;;;GAQG;AAEH;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAW,EAAE,CAAC;AAEjD,+EAA+E;AAC/E,MAAM,CAAC,MAAM,6BAA6B,GAAW,GAAG,CAAC;AAEzD,SAAS,QAAQ,CAAC,KAAa,EAAE,SAAiB;IAChD,OAAO,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;AAC1E,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwCG;AACH,MAAM,UAAU,4BAA4B,CAC1C,IAA6B;;IAE7B;;;;;;;;OAQG;IACH;;;;;;;;;OASG;IACH,MAAM,OAAO,GACX,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAE9D,OAAO,CACL,OAAO;QACP,uBAAuB,CAAC,IAAI,CAAC,WAAW,CAAC;QACzC,MAAM,CAAC,MAAA,IAAI,CAAC,SAAS,mCAAI,EAAE,CAAC,CAC7B,CAAC;AACJ,CAAC;AAED,+EAA+E;AAC/E,MAAM,UAAU,eAAe,CAAC,IAA6B;IAC3D,OAAO,QAAQ,CAAC,4BAA4B,CAAC,IAAI,CAAC,EAAE,sBAAsB,CAAC,CAAC;AAC9E,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,uBAAuB,CAAC,IAA6B;;IACnE;;;;;;;;;;OAUG;IACH,MAAM,OAAO,GAAW,MAAM,CAAC,MAAA,IAAI,CAAC,SAAS,mCAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAE5D;;;;;;OAMG;IACH,MAAM,MAAM,GAAW,OAAO,CAAC,CAAC,CAAC,KAAK,OAAO,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;IAEtD,MAAM,QAAQ,GAAW,eAAe,CAAC,IAAI,CAAC,CAAC;IAE/C;;;;;;;OAOG;IACH,OAAO,QAAQ,CACb,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,sBAAsB,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;QACrE,MAAM,EACR,sBAAsB,CACvB,CAAC;AACJ,CAAC;AA+BD;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,UAAU,oCAAoC,CAAC,IAmBpD;;IACC,MAAM,IAAI,GAA4B,IAAI,CAAC,IAAI,CAAC;IAEhD,MAAM,MAAM,GAAkB,IAAI,aAAa,EAAE,CAAC;IAClD,MAAM,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;IAClC,MAAM,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,eAAe,CAAC,IAAI,CAAC,CAAC;IACjD;;;;;;;;;;;;;;;;;;;;OAoBG;IACH,MAAM,CAAC,QAAQ,GAAG,MAAM,CAAC,MAAA,IAAI,CAAC,SAAS,mCAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAEtD,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;QAClB,MAAM,CAAC,WAAW,GAAG,QAAQ,CAAC,IAAI,CAAC,QAAQ,EAAE,6BAA6B,CAAC,CAAC;IAC9E,CAAC;IAED,MAAM,gBAAgB,GACpB,iCAAiC,CAAC,IAAI,CAAC,CAAC;IAC1C,MAAM,CAAC,gBAAgB,GAAG,gBAAgB,CAAC;IAE3C;;;;;;OAMG;IACH,IAAI,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;QACtB,yEAAyE;QACzE,MAAM,CAAC,OAAO,GAAG,IAAI,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC;IAC9D,CAAC;IAED;;;;;OAKG;IACH,MAAM,CAAC,gBAAgB,GAAG,IAAI,CAAC;IAE/B,IAAI,wBAAwB,CAAC,IAAI,CAAC,EAAE,CAAC;QACnC;;;;;;;;;;;;;WAaG;QACH,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;QACvB,MAAM,CAAC,aAAa,GAAG,IAAI,CAAC,aAAa,CAAC;IAC5C,CAAC;IAED,IAAI,IAAI,CAAC,6BAA6B,EAAE,CAAC;QACvC,MAAM,CAAC,6BAA6B,GAAG,IAAI,CAAC;IAC9C,CAAC;IAED;;;;;;;;;;;;;OAaG;IACH,MAAM,UAAU,GAA4B,kBAAkB,CAAC,cAAc,CAC3E,IAAI,CAAC,IAAI,EACT,IAAI,CAAC,YAAY,CAClB,CAAC;IAEF,IAAI,UAAU,CAAC,WAAW,EAAE,CAAC;QAC3B,MAAM,CAAC,WAAW,GAAG,UAAU,CAAC,WAAW,CAAC;IAC9C,CAAC;IAED,IAAI,UAAU,CAAC,mBAAmB,EAAE,CAAC;QACnC,MAAM,CAAC,mBAAmB,GAAG,UAAU,CAAC,mBAAmB,CAAC;IAC9D,CAAC;IAED,IAAI,UAAU,CAAC,QAAQ,EAAE,CAAC;QACxB,MAAM,CAAC,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC;IACxC,CAAC;IAED,gEAAgE;IAChE,IAAI,UAAU,CAAC,mBAAmB,EAAE,CAAC;QACnC,MAAM,CAAC,mBAAmB,GAAG,UAAU,CAAC,mBAAmB,CAAC;IAC9D,CAAC;IAED,IAAI,UAAU,CAAC,cAAc,EAAE,CAAC;QAC9B,MAAM,CAAC,cAAc,GAAG,UAAU,CAAC,cAAc,CAAC;IACpD,CAAC;IAED,IAAI,UAAU,CAAC,kBAAkB,EAAE,CAAC;QAClC,MAAM,CAAC,kBAAkB,GAAG,UAAU,CAAC,kBAAkB,CAAC;IAC5D,CAAC;IAED,IAAI,UAAU,CAAC,aAAa,EAAE,CAAC;QAC7B,MAAM,CAAC,aAAa,GAAG,UAAU,CAAC,aAAa,CAAC;IAClD,CAAC;IAED,IAAI,UAAU,CAAC,kBAAkB,EAAE,CAAC;QAClC,MAAM,CAAC,kBAAkB,GAAG,UAAU,CAAC,kBAAkB,CAAC;IAC5D,CAAC;IAED,IAAI,UAAU,CAAC,aAAa,EAAE,CAAC;QAC7B,MAAM,CAAC,aAAa,GAAG,UAAU,CAAC,aAAa,CAAC;IAClD,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/build/dist/Utils/NetworkDiscovery/DiscoveryImportEligibility.js

@@ -2,10 +2,19 @@ import NetworkDeviceMonitoringMethod from "../../Types/NetworkDevice/NetworkDevi
 /*
  * Pure, react-free import rule for discovery scan results.
  *
- * Every host the sweep found alive is importable; what differs is HOW. A host
- * that answered SNMP becomes a polled device with the scan's credentials. A
- * host that answered only ping becomes a monitor-backed device: no probe, no
- * credentials, health supplied later by a monitor the operator binds to it.
+ * Every host the sweep found alive is importable, and every one of them
+ * imports as a probe-polled device: the scan's probe pings it on its schedule,
+ * and walks it over SNMP as well when it has credentials. What differs between
+ * a host that answered SNMP and one that only answered ping is therefore not
+ * HOW it is monitored but WHAT rides along — the SNMP host carries the scan's
+ * credential set that answered it, the ping-only host carries none and is
+ * simply pinged until somebody adds credentials.
+ *
+ * That is a change from the SNMP-first era, when a ping-only host had to
+ * import as a monitor-backed device with no probe and polling off, and read
+ * "Pending" until an operator hand-bound a Ping monitor to it (issue #3447).
+ * Reachability is a built-in capability of every probe-polled device now, so
+ * the ping-only host gets a status from its first poll like any other.
  *
  * Ping-only hosts used to be refused outright, on the reasoning that they
  * would turn up as ARP/FDB endpoints once their switch was monitored. That is
@@ -18,30 +27,50 @@ import NetworkDeviceMonitoringMethod from "../../Types/NetworkDevice/NetworkDevi
  * because the dashboard's Review dialog and the server-side auto-import rule
  * engine both decide "how does this host import" through it, and the two must
  * never disagree: the group a host is shown under in the dialog and the
- * monitoring method a rule imports it with are the same decision.
+ * device a rule imports it as are the same decision.
+ */
+/**
+ * True when the host answered ping but not SNMP — the "No SNMP" group in the
+ * Review dialog, and the host that imports with no credentials.
+ *
+ * Only an EXPLICIT snmpReachable === false is ping-only: scans stored before
+ * the field existed carry undefined, and every host on those scans answered
+ * SNMP (ping-only sweeps did not exist yet), so legacy rows keep importing
+ * with the scan's credentials.
+ *
+ * Nullish hosts read as NOT ping-only rather than throwing. `discoveredDevices`
+ * is jsonb written verbatim from the probe's payload and the only guard on it
+ * (DiscoveryScanOutcome.getDiscoveredHosts) checks that the VALUE is an array
+ * — never that its elements are objects. A single null element used to take
+ * the whole page down from inside a table cell or a modal body, where a thrown
+ * TypeError has nowhere useful to go. Every other kind of junk element (a
+ * number, a string, {}) already read as an SNMP host; null is simply
+ * consistent with them.
  */
+export function isPingOnlyDiscoveredHost(host) {
+    return (host === null || host === void 0 ? void 0 : host.snmpReachable) === false;
+}
 /**
  * Which monitoring method a discovered host should be imported under.
  *
- * Only an EXPLICIT snmpReachable === false means ping-only: scans stored
- * before the field existed carry undefined, and every host on those scans
- * answered SNMP (ping-only sweeps did not exist yet), so legacy rows keep
- * importing as SNMP devices.
+ * Probe, for every host. Under ping-first polling there is no discovered host
+ * a probe cannot monitor: the scan's probe just proved the host answers ping,
+ * and that is all a probe-polled device needs to have a status. SNMP is an
+ * enrichment layered on top when the host answered it, and
+ * `buildNetworkDeviceFromDiscoveredHost` decides that by
+ * `isPingOnlyDiscoveredHost`, not by this function.
+ *
+ * `Monitor` — a bound monitor's status IS the device's status — is an override
+ * an operator chooses on a device's Settings page for gear a probe cannot
+ * reach at all. Discovery never has grounds to choose it: every host it offers
+ * was reached by the probe that found it.
+ *
+ * Kept as a function, with the host as its argument, because it is the one
+ * seam through which the dialog and the rule engine ask the question, and a
+ * future rule that DID need to look at the host would land here.
  */
-export function monitoringMethodForDiscoveredHost(host) {
-    /*
-     * Nullish hosts read as SNMP rather than throwing. `discoveredDevices` is
-     * jsonb written verbatim from the probe's payload and the only guard on it
-     * (DiscoveryScanOutcome.getDiscoveredHosts) checks that the VALUE is an
-     * array — never that its elements are objects. A single null element used
-     * to take the whole page down from inside a table cell or a modal body,
-     * where a thrown TypeError has nowhere useful to go. Every other kind of
-     * junk element (a number, a string, {}) already read as SNMP; null is now
-     * simply consistent with them.
-     */
-    return (host === null || host === void 0 ? void 0 : host.snmpReachable) === false
-        ? NetworkDeviceMonitoringMethod.Monitor
-        : NetworkDeviceMonitoringMethod.Snmp;
+export function monitoringMethodForDiscoveredHost(_host) {
+    return NetworkDeviceMonitoringMethod.Probe;
 }
 /** True when the discovered host can be imported as a Network Device. */
 export function isImportableDiscoveredHost(_host) {

package/build/dist/Utils/NetworkDiscovery/DiscoveryImportEligibility.js.map

@@ -1 +1 @@
-{"version":3,"file":"DiscoveryImportEligibility.js","sourceRoot":"","sources":["../../../../Utils/NetworkDiscovery/DiscoveryImportEligibility.ts"],"names":[],"mappings":"AACA,OAAO,6BAA6B,MAAM,yDAAyD,CAAC;AAEpG;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH;;;;;;;GAOG;AACH,MAAM,UAAU,iCAAiC,CAC/C,IAAgD;IAEhD;;;;;;;;;OASG;IACH,OAAO,CAAA,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,aAAa,MAAK,KAAK;QAClC,CAAC,CAAC,6BAA6B,CAAC,OAAO;QACvC,CAAC,CAAC,6BAA6B,CAAC,IAAI,CAAC;AACzC,CAAC;AAED,yEAAyE;AACzE,MAAM,UAAU,0BAA0B,CACxC,KAA8B;IAE9B;;;;;;;;OAQG;IACH,OAAO,IAAI,CAAC;AACd,CAAC"}
+{"version":3,"file":"DiscoveryImportEligibility.js","sourceRoot":"","sources":["../../../../Utils/NetworkDiscovery/DiscoveryImportEligibility.ts"],"names":[],"mappings":"AACA,OAAO,6BAA6B,MAAM,yDAAyD,CAAC;AAEpG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAEH;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,UAAU,wBAAwB,CACtC,IAAgD;IAEhD,OAAO,CAAA,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,aAAa,MAAK,KAAK,CAAC;AACvC,CAAC;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,UAAU,iCAAiC,CAC/C,KAAiD;IAEjD,OAAO,6BAA6B,CAAC,KAAK,CAAC;AAC7C,CAAC;AAED,yEAAyE;AACzE,MAAM,UAAU,0BAA0B,CACxC,KAA8B;IAE9B;;;;;;;;OAQG;IACH,OAAO,IAAI,CAAC;AACd,CAAC"}

package/build/dist/Utils/NetworkDiscovery/DiscoveryScanStatus.js

@@ -0,0 +1,69 @@
+/*
+ * The lifecycle of one network discovery scan, as the four strings its
+ * `status` column actually holds.
+ *
+ * The column is a ShortText rather than an enum column, and the four values
+ * were written as bare literals in a dozen places: the probe-ingest claim and
+ * result endpoints, the requeue/reaper worker, the auto-import worker and its
+ * engine, the scan service's retire payload, and the Discovery page. That is
+ * fine until a question has to be answered the same way in several of them —
+ * and "which statuses may auto-import read from" is exactly such a question
+ * (OneUptime issue #3599), because the answer has to match in the worker's
+ * query, in the engine's re-read, and in the compare-and-set that stamps the
+ * scan afterwards. Three literals that agree today are three literals that
+ * can disagree tomorrow.
+ *
+ * Values are NOT a TypeScript enum: they are already persisted strings, and a
+ * plain object keeps them readable in a query, in jsonb and in a log line.
+ */
+export const DiscoveryScanStatus = {
+    // Queued, waiting for its probe to claim it.
+    Pending: "Pending",
+    /*
+     * Claimed by a probe and being swept RIGHT NOW. Since sweeps report
+     * incrementally, such a scan can already hold real results — see
+     * DISCOVERY_SCAN_IMPORTABLE_STATUSES.
+     */
+    InProgress: "In Progress",
+    // The sweep finished and reported. Its results are final for that run.
+    Completed: "Completed",
+    /*
+     * The sweep failed, or the server's reaper gave up on the probe. Any
+     * results on the row are from before the failure and are real, but partial
+     * in a way nobody chose.
+     */
+    Failed: "Failed",
+};
+/*
+ * The statuses whose stored results are worth importing from automatically.
+ *
+ * "In Progress" belongs here because a discovery sweep is no longer atomic:
+ * the probe uploads what it has found every 30 seconds while it is still
+ * working (Probe/Jobs/Discovery/FetchScans.ts). Before that, auto-import
+ * waited for the whole range — so on a 15,360-address scan the hundreds of
+ * switches already found, stored and visible in the product were unimportable
+ * for as long as the sweep ran (OneUptime issue #3599, compounded by the
+ * 24-hour sweep of #3598).
+ *
+ * "Pending" and "Failed" are deliberately absent, and for opposite reasons. A
+ * Pending row's results describe a run that has been superseded — the ingest
+ * endpoint discards results for one on exactly that ground. A Failed row's
+ * results are real, but the operator has been told that run failed, so
+ * importing from it should be their decision, through the rule's Run Now.
+ *
+ * Frozen because it is read by a query builder, a re-read and a
+ * compare-and-set that must all mean the same thing.
+ */
+export const DISCOVERY_SCAN_IMPORTABLE_STATUSES = Object.freeze([
+    DiscoveryScanStatus.Completed,
+    DiscoveryScanStatus.InProgress,
+]);
+/*
+ * True when the scan is mid-sweep, so anything on its row is a running total
+ * rather than a verdict. Nullish-safe: a row read without the column, or one
+ * from a shape this code does not control, is not "in progress".
+ */
+export function isDiscoveryScanInProgress(scan) {
+    return (scan === null || scan === void 0 ? void 0 : scan.status) === DiscoveryScanStatus.InProgress;
+}
+//# sourceMappingURL=DiscoveryScanStatus.js.map

package/build/dist/Utils/NetworkDiscovery/DiscoveryScanStatus.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"DiscoveryScanStatus.js","sourceRoot":"","sources":["../../../../Utils/NetworkDiscovery/DiscoveryScanStatus.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAK5B;IACF,6CAA6C;IAC7C,OAAO,EAAE,SAAS;IAClB;;;;OAIG;IACH,UAAU,EAAE,aAAa;IACzB,uEAAuE;IACvE,SAAS,EAAE,WAAW;IACtB;;;;OAIG;IACH,MAAM,EAAE,QAAQ;CACjB,CAAC;AAEF;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,CAAC,MAAM,kCAAkC,GAAkB,MAAM,CAAC,MAAM,CAAC;IAC7E,mBAAmB,CAAC,SAAS;IAC7B,mBAAmB,CAAC,UAAU;CAC/B,CAAkB,CAAC;AAEpB;;;;GAIG;AACH,MAAM,UAAU,yBAAyB,CACvC,IAA+D;IAE/D,OAAO,CAAA,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,MAAM,MAAK,mBAAmB,CAAC,UAAU,CAAC;AACzD,CAAC"}