@oneuptime/common 12.0.4 → 12.0.6

package/Models/DatabaseModels/AIRun.ts

@@ -21,6 +21,7 @@ import { Column, Entity, Index, JoinColumn, ManyToOne } from "typeorm";
 import EnableDocumentation from "../../Types/Database/EnableDocumentation";
 import AIRunType from "../../Types/AI/AIRunType";
 import AIRunStatus from "../../Types/AI/AIRunStatus";
+import AIRunCodeFixRecommendation from "../../Types/AI/AIRunCodeFixRecommendation";
 import AIRunHumanVerdict from "../../Types/AI/AIRunHumanVerdict";
 import AIRunAutoGrade from "../../Types/AI/AIRunAutoGrade";
 import CodeFixTaskType from "../../Types/AI/CodeFixTaskType";
@@ -243,6 +244,42 @@ export default class AIRun extends BaseModel {
   })
   public status?: AIRunStatus = undefined;
 
+  /*
+   * The server-authored decision that controls whether an incident/alert
+   * investigation may be turned into a FixFromIncident task. New subject
+   * investigations move to Pending in the atomic Completed transition; the
+   * investigation engine settles the value after its structured
+   * classification and analysis post. Other lifecycle paths and legacy rows
+   * default to NotRecommended so a missing decision never creates a PR.
+   */
+  @ColumnAccessControl({
+    create: [],
+    read: [
+      Permission.ProjectOwner,
+      Permission.ProjectAdmin,
+      Permission.ProjectMember,
+      Permission.Viewer,
+    ],
+    update: [],
+  })
+  @TableColumn({
+    required: true,
+    type: TableColumnType.ShortText,
+    title: "Code Fix Recommendation",
+    description:
+      "For incident/alert investigations: whether the structured investigation outcome recommends opening a code-fix pull request.",
+    defaultValue: AIRunCodeFixRecommendation.NotRecommended,
+    isDefaultValueColumn: true,
+    canReadOnRelationQuery: true,
+  })
+  @Column({
+    nullable: false,
+    type: ColumnType.ShortText,
+    length: ColumnLength.ShortText,
+    default: AIRunCodeFixRecommendation.NotRecommended,
+  })
+  public codeFixRecommendation?: AIRunCodeFixRecommendation = undefined;
+
   @ColumnAccessControl({
     create: [],
     read: [
@@ -803,7 +840,7 @@ export default class AIRun extends BaseModel {
     type: TableColumnType.JSON,
     title: "Task Context",
     description:
-      "Internal: trigger-time context for code-fix recipes without a subject row (e.g. FixPerformance trace evidence).",
+      "Internal: immutable trigger-time context for code-fix recipes, including pinned investigation analyses and FixPerformance trace evidence.",
   })
   @Column({
     nullable: true,
@@ -834,6 +871,39 @@ export default class AIRun extends BaseModel {
   })
   public errorMessage?: string = undefined;
 
+  /*
+   * For investigation runs: the plain-text TL;DR of the posted analysis —
+   * one or two sentences a paged engineer reads before anything else. Written
+   * only by the server (InvestigationTldr) right before the report is posted,
+   * from the analysis the run itself produced. Null for legacy runs, for runs
+   * that published no report, and whenever the bounded generation call failed
+   * — the panel simply omits the TL;DR then, so it is never load-bearing.
+   */
+  @ColumnAccessControl({
+    create: [],
+    read: [
+      Permission.ProjectOwner,
+      Permission.ProjectAdmin,
+      Permission.ProjectMember,
+      Permission.Viewer,
+    ],
+    update: [],
+  })
+  @TableColumn({
+    required: false,
+    type: TableColumnType.LongText,
+    title: "Analysis TL;DR",
+    description:
+      "For investigation runs: a one or two sentence plain-text summary of the posted analysis, generated by AI.",
+    canReadOnRelationQuery: true,
+  })
+  @Column({
+    nullable: true,
+    type: ColumnType.LongText,
+    length: ColumnLength.LongText,
+  })
+  public analysisTldr?: string = undefined;
+
   /*
    * Measurement layer (Phase 2): the one-click human verdict on a completed
    * investigation's posted analysis. Written only by the server via

package/Models/DatabaseModels/AlertFeed.ts

@@ -93,6 +93,7 @@ export enum AlertFeedEventType {
     "Log of the entire alert state change. This is a log of all the alert state changes, public notes, more etc.",
 })
 @Index(["alertId", "postedAt"]) // Alert detail page: feed sorted by postedAt
+@Index(["alertId", "aiRunId"]) // Exact AI investigation result lookup
 export default class AlertFeed extends BaseModel {
   @ColumnAccessControl({
     create: [
@@ -251,6 +252,35 @@ export default class AlertFeed extends BaseModel {
   })
   public alertId?: ObjectID = undefined;
 
+  @ColumnAccessControl({
+    create: [],
+    read: [
+      Permission.ProjectOwner,
+      Permission.ProjectAdmin,
+      Permission.ProjectMember,
+      Permission.Viewer,
+      Permission.AlertAdmin,
+      Permission.AlertMember,
+      Permission.AlertViewer,
+      Permission.ReadAlertFeed,
+    ],
+    update: [],
+  })
+  @TableColumn({
+    type: TableColumnType.ObjectID,
+    required: false,
+    canReadOnRelationQuery: true,
+    title: "AI Run ID",
+    description:
+      "AI investigation run that produced this feed item when the event is a root cause.",
+  })
+  @Column({
+    type: ColumnType.ObjectID,
+    nullable: true,
+    transformer: ObjectID.getDatabaseTransformer(),
+  })
+  public aiRunId?: ObjectID = undefined;
+
   @ColumnAccessControl({
     create: [
       Permission.ProjectOwner,

package/Models/DatabaseModels/Dashboard.ts

@@ -826,6 +826,7 @@ export default class Dashboard extends BaseModel {
     description:
       "Password required to unlock a public dashboard. This value is stored as a secure hash.",
     hashed: true,
+    hashSaltColumn: "masterPasswordSalt",
     type: TableColumnType.HashedString,
     placeholder: "Enter a new master password",
   })
@@ -837,6 +838,33 @@ export default class Dashboard extends BaseModel {
   })
   public masterPassword?: HashedString = undefined;
 
+  /*
+   * Per-dashboard salt mixed into `masterPassword`. Written by the database
+   * write path on every master-password write and never exposed to API
+   * callers. Nullable so existing unsalted hashes can be verified and
+   * upgraded after a successful unlock.
+   */
+  @ColumnAccessControl({
+    create: [],
+    read: [],
+    update: [],
+  })
+  @TableColumn({
+    title: "Master Password Salt",
+    description:
+      "Per-dashboard random salt mixed into this dashboard's master password hash.",
+    computed: true,
+    type: TableColumnType.ShortText,
+    hideColumnInDocumentation: true,
+  })
+  @Column({
+    type: ColumnType.ShortText,
+    length: ColumnLength.ShortText,
+    unique: false,
+    nullable: true,
+  })
+  public masterPasswordSalt?: string = undefined;
+
   @ColumnAccessControl({
     create: [
       Permission.ProjectOwner,