@oneuptime/common 14.0.11 → 14.0.12

package/build/dist/Models/DatabaseModels/Project.js

@@ -129,21 +129,22 @@ let Project = class Project extends TenantModel {
         this.aiCurrentBalanceInUSDCents = undefined;
         this.autoAiRechargeByBalanceInUSD = undefined;
         this.autoRechargeAiWhenCurrentBalanceFallsInUSD = undefined;
-        this.enableAi = undefined;
-        this.enableAutoRemediation = undefined;
         /*
-         * Explicit opt-in (=== true semantics, unlike the kill switches above):
-         * AI-composed remediation COMMANDS never run in a project that has not
-         * turned this on, even when auto-remediation itself is enabled.
+         * The project's one AI switch. It used to have two companions, "Enable
+         * auto-remediation" and "Enable AI command execution"; both were folded
+         * into it, so auto-remediation and AI commands on Runners are on exactly
+         * when this is. Read with `=== false`: the column is NOT NULL DEFAULT
+         * true, so undefined means "not selected", never "off".
          */
-        this.enableAiCommandExecution = undefined;
+        this.enableAi = undefined;
         /*
-         * The automatic-investigation opt-ins are ON for projects created from now
-         * on, and the column default stays OFF on purpose. ProjectService's
-         * onBeforeCreate turns both on when the create request leaves them unset
-         * (every project created in the dashboard), which is why a creator may
-         * set them (create ACL): a create that says false keeps false. The column
-         * default and defaultValue stay false so existing projects are not
+         * The per-feature AI switches below (this one down to
+         * autoArchiveNonActionableExceptions) are ON for projects created from
+         * now on, and their column default stays OFF on purpose. ProjectService's
+         * onBeforeCreate turns each one on when the create request leaves it
+         * unset (every project created in the dashboard), which is why a creator
+         * may set them (create ACL): a create that says false keeps false. The
+         * column default and defaultValue stay false so existing projects are not
          * switched on (that would start spending their AI budget), and so the
          * generated Terraform provider's static default does not flip existing
          * Terraform-managed projects on their next apply.
@@ -153,9 +154,8 @@ let Project = class Project extends TenantModel {
         this.enableAutomaticAlertInvestigation = undefined;
         /*
          * Drafting a postmortem when an incident resolves used to ride on
-         * enableAutomaticIncidentInvestigation. It is its own switch now, off by
-         * default, so turning investigations on for new projects does not also
-         * start writing postmortem notes. The migration that added it copied each
+         * enableAutomaticIncidentInvestigation. It is its own switch now, on for
+         * new projects like the rest. The migration that added it copied each
          * existing project's investigation flag into it, so nothing changed for
          * projects that already had the behaviour.
          */
@@ -1713,7 +1713,7 @@ __decorate([
         isDefaultValueColumn: true,
         type: TableColumnType.Boolean,
         title: "Enable AI",
-        description: "Enable AI services for this project.",
+        description: "Master switch for AI in this project. When disabled, every AI feature stops: Ask AI, investigations, postmortem drafts, auto-remediation and AI commands on Runners.",
         defaultValue: true,
         example: true,
     }),
@@ -1724,66 +1724,6 @@ __decorate([
     }),
     __metadata("design:type", Boolean)
 ], Project.prototype, "enableAi", void 0);
-__decorate([
-    ColumnAccessControl({
-        create: [],
-        read: [
-            Permission.ProjectOwner,
-            Permission.ProjectAdmin,
-            Permission.ProjectMember,
-            Permission.Viewer,
-            Permission.ReadProject,
-            Permission.UnAuthorizedSsoUser,
-            Permission.ProjectUser,
-        ],
-        update: [Permission.ProjectOwner, Permission.ManageProjectBilling],
-    }),
-    TableColumn({
-        required: true,
-        isDefaultValueColumn: true,
-        type: TableColumnType.Boolean,
-        title: "Enable Auto Remediation",
-        description: "Kill switch for auto-remediation: when disabled, no auto-remediation rule fires in this project.",
-        defaultValue: true,
-        example: true,
-    }),
-    Column({
-        nullable: false,
-        default: true,
-        type: ColumnType.Boolean,
-    }),
-    __metadata("design:type", Boolean)
-], Project.prototype, "enableAutoRemediation", void 0);
-__decorate([
-    ColumnAccessControl({
-        create: [],
-        read: [
-            Permission.ProjectOwner,
-            Permission.ProjectAdmin,
-            Permission.ProjectMember,
-            Permission.Viewer,
-            Permission.ReadProject,
-            Permission.UnAuthorizedSsoUser,
-            Permission.ProjectUser,
-        ],
-        update: [Permission.ProjectOwner, Permission.ManageProjectBilling],
-    }),
-    TableColumn({
-        required: true,
-        isDefaultValueColumn: true,
-        type: TableColumnType.Boolean,
-        title: "Enable AI Command Execution",
-        description: "When enabled, auto-remediation rules may let the AI compose and run commands on opted-in Runners (with an operator allowlist for auto-execution, and one-click approval for everything else), and AI may fix Kubernetes clusters reached through a Runner with a Kubernetes credential. Fixes on a cluster through its in-cluster Kubernetes AI agent do not need it: that cluster's AI agent page and the agent's write access decide. Off by default.",
-        defaultValue: false,
-        example: false,
-    }),
-    Column({
-        nullable: false,
-        default: false,
-        type: ColumnType.Boolean,
-    }),
-    __metadata("design:type", Boolean)
-], Project.prototype, "enableAiCommandExecution", void 0);
 __decorate([
     ColumnAccessControl({
         create: [Permission.User],
@@ -1863,7 +1803,7 @@ __decorate([
         isDefaultValueColumn: true,
         type: TableColumnType.Boolean,
         title: "Enable Automatic Postmortem Draft",
-        description: "When enabled, OneUptime's AI SRE drafts a postmortem from the incident's timeline and telemetry when an incident is resolved, for a human to review and edit. It never overwrites a postmortem that already exists. Off by default. Requires AI to be enabled and an LLM provider to be configured.",
+        description: "When enabled, OneUptime's AI SRE drafts a postmortem from the incident's timeline and telemetry when an incident is resolved, for a human to review and edit. It never overwrites a postmortem that already exists. On for new projects created in OneUptime; projects that existed before keep their setting. Requires AI to be enabled and an LLM provider to be configured.",
         defaultValue: false,
         example: true,
     }),
@@ -1936,7 +1876,7 @@ __decorate([
 ], Project.prototype, "resolveLinkedAlertsWhenIncidentResolved", void 0);
 __decorate([
     ColumnAccessControl({
-        create: [],
+        create: [Permission.User],
         read: [
             Permission.ProjectOwner,
             Permission.ProjectAdmin,
@@ -1953,7 +1893,7 @@ __decorate([
         isDefaultValueColumn: true,
         type: TableColumnType.Boolean,
         title: "Enable Incident Instrumentation Fix Tasks",
-        description: "When enabled, an incident AI investigation that ends inconclusive (telemetry was insufficient to determine a root cause) automatically queues an AI agent task that opens a pull request adding the missing instrumentation to the implicated code paths. Requires a repository connected through the GitHub App. Pull requests are always human-reviewed — nothing merges automatically.",
+        description: "When enabled, an incident AI investigation that ends inconclusive (telemetry was insufficient to determine a root cause) automatically queues an AI agent task that opens a pull request adding the missing instrumentation to the implicated code paths. Requires a repository connected through the GitHub App. Pull requests are always human-reviewed — nothing merges automatically. On for new projects created in OneUptime; projects that existed before keep their setting.",
         defaultValue: false,
         example: true,
     }),
@@ -1966,7 +1906,7 @@ __decorate([
 ], Project.prototype, "enableIncidentInstrumentationFixTasks", void 0);
 __decorate([
     ColumnAccessControl({
-        create: [],
+        create: [Permission.User],
         read: [
             Permission.ProjectOwner,
             Permission.ProjectAdmin,
@@ -1983,7 +1923,7 @@ __decorate([
         isDefaultValueColumn: true,
         type: TableColumnType.Boolean,
         title: "Enable Alert Instrumentation Fix Tasks",
-        description: "When enabled, an alert AI investigation that ends inconclusive (telemetry was insufficient to determine a root cause) automatically queues an AI agent task that opens a pull request adding the missing instrumentation to the implicated code paths. Requires a repository connected through the GitHub App. Pull requests are always human-reviewed — nothing merges automatically.",
+        description: "When enabled, an alert AI investigation that ends inconclusive (telemetry was insufficient to determine a root cause) automatically queues an AI agent task that opens a pull request adding the missing instrumentation to the implicated code paths. Requires a repository connected through the GitHub App. Pull requests are always human-reviewed — nothing merges automatically. On for new projects created in OneUptime; projects that existed before keep their setting.",
         defaultValue: false,
         example: true,
     }),
@@ -1996,7 +1936,7 @@ __decorate([
 ], Project.prototype, "enableAlertInstrumentationFixTasks", void 0);
 __decorate([
     ColumnAccessControl({
-        create: [],
+        create: [Permission.User],
         read: [
             Permission.ProjectOwner,
             Permission.ProjectAdmin,
@@ -2013,7 +1953,7 @@ __decorate([
         isDefaultValueColumn: true,
         type: TableColumnType.Boolean,
         title: "Enable Automatic Incident Code Fixes",
-        description: "When enabled, an incident AI investigation that ends with a confident, evidenced root cause analysis and recommends a repository code change automatically queues an AI agent task that opens a fix pull request, ready for review, from that analysis — the automatic form of the 'Open Fix PR from this analysis' button. Operational, infrastructure, external, user-error and inconclusive findings do not offer or open code-fix pull requests. Requires a repository connected through the GitHub App and a Runner with the code-fix capability. Pull requests are always human-reviewed — nothing merges automatically.",
+        description: "When enabled, an incident AI investigation that ends with a confident, evidenced root cause analysis and recommends a repository code change automatically queues an AI agent task that opens a fix pull request, ready for review, from that analysis — the automatic form of the 'Open Fix PR from this analysis' button. Operational, infrastructure, external, user-error and inconclusive findings do not offer or open code-fix pull requests. Requires a repository connected through the GitHub App and a Runner with the code-fix capability. Pull requests are always human-reviewed — nothing merges automatically. On for new projects created in OneUptime; projects that existed before keep their setting.",
         defaultValue: false,
         example: true,
     }),
@@ -2026,7 +1966,7 @@ __decorate([
 ], Project.prototype, "enableAutomaticIncidentCodeFixes", void 0);
 __decorate([
     ColumnAccessControl({
-        create: [],
+        create: [Permission.User],
         read: [
             Permission.ProjectOwner,
             Permission.ProjectAdmin,
@@ -2043,7 +1983,7 @@ __decorate([
         isDefaultValueColumn: true,
         type: TableColumnType.Boolean,
         title: "Enable Automatic Alert Code Fixes",
-        description: "When enabled, an alert AI investigation that ends with a confident, evidenced root cause analysis and recommends a repository code change automatically queues an AI agent task that opens a fix pull request, ready for review, from that analysis — the automatic form of the 'Open Fix PR from this analysis' button. Operational, infrastructure, external, user-error and inconclusive findings do not offer or open code-fix pull requests. Requires a repository connected through the GitHub App and a Runner with the code-fix capability. Pull requests are always human-reviewed — nothing merges automatically.",
+        description: "When enabled, an alert AI investigation that ends with a confident, evidenced root cause analysis and recommends a repository code change automatically queues an AI agent task that opens a fix pull request, ready for review, from that analysis — the automatic form of the 'Open Fix PR from this analysis' button. Operational, infrastructure, external, user-error and inconclusive findings do not offer or open code-fix pull requests. Requires a repository connected through the GitHub App and a Runner with the code-fix capability. Pull requests are always human-reviewed — nothing merges automatically. On for new projects created in OneUptime; projects that existed before keep their setting.",
         defaultValue: false,
         example: true,
     }),
@@ -2056,7 +1996,7 @@ __decorate([
 ], Project.prototype, "enableAutomaticAlertCodeFixes", void 0);
 __decorate([
     ColumnAccessControl({
-        create: [],
+        create: [Permission.User],
         read: [
             Permission.ProjectOwner,
             Permission.ProjectAdmin,
@@ -2073,7 +2013,7 @@ __decorate([
         isDefaultValueColumn: true,
         type: TableColumnType.Boolean,
         title: "Enable AI Insights",
-        description: "When enabled, OneUptime AI continuously watches this project's telemetry with deterministic statistical sensors (error-log spikes, exception novelty and spikes, trace-latency regressions, week-over-week metric drift) and files quiet Insights — never pages, never opens incidents. Each new insight also gets a budgeted, read-only AI triage analysis when an LLM provider is configured.",
+        description: "When enabled, OneUptime AI continuously watches this project's telemetry with deterministic statistical sensors (error-log spikes, exception novelty and spikes, trace-latency regressions, week-over-week metric drift) and files quiet Insights — never pages, never opens incidents. Each new insight also gets a budgeted, read-only AI triage analysis when an LLM provider is configured. On for new projects created in OneUptime; projects that existed before keep their setting.",
         defaultValue: false,
         example: true,
     }),
@@ -2086,7 +2026,7 @@ __decorate([
 ], Project.prototype, "enableAiInsights", void 0);
 __decorate([
     ColumnAccessControl({
-        create: [],
+        create: [Permission.User],
         read: [
             Permission.ProjectOwner,
             Permission.ProjectAdmin,
@@ -2103,7 +2043,7 @@ __decorate([
         isDefaultValueColumn: true,
         type: TableColumnType.Boolean,
         title: "Enable Insight Fix Tasks",
-        description: "When enabled, insights whose deterministic evidence points at code (new or spiking exceptions with a resolvable repository, trace-latency regressions with span-tree findings) automatically queue an AI agent task that opens a pull request with a proposed fix, ready for review. Honors the daily fix task budget and per-repository open-PR caps. Pull requests are always human-reviewed — nothing merges automatically.",
+        description: "When enabled, insights whose deterministic evidence points at code (new or spiking exceptions with a resolvable repository, trace-latency regressions with span-tree findings) automatically queue an AI agent task that opens a pull request with a proposed fix, ready for review. Honors any open-PR cap set on the repository. Pull requests are always human-reviewed — nothing merges automatically. On for new projects created in OneUptime; projects that existed before keep their setting.",
         defaultValue: false,
         example: true,
     }),
@@ -2116,7 +2056,7 @@ __decorate([
 ], Project.prototype, "enableInsightFixTasks", void 0);
 __decorate([
     ColumnAccessControl({
-        create: [],
+        create: [Permission.User],
         read: [
             Permission.ProjectOwner,
             Permission.ProjectAdmin,
@@ -2133,7 +2073,7 @@ __decorate([
         isDefaultValueColumn: true,
         type: TableColumnType.Boolean,
         title: "Auto Archive Non-Actionable Exceptions",
-        description: "When enabled, exception groups the AI triage classifies as expected denials (auth failures, plan/paywall rejections, scanner probes tripping intentional validation) are automatically archived so they stop surfacing in the unresolved list and never queue AI fix tasks. Groups classified as user errors or infrastructure conditions are NOT auto-archived — only clear expected denials are. Archiving is reversible from the Archived tab.",
+        description: "When enabled, exception groups the AI triage classifies as expected denials (auth failures, plan/paywall rejections, scanner probes tripping intentional validation) are automatically archived so they stop surfacing in the unresolved list and never queue AI fix tasks. Groups classified as user errors or infrastructure conditions are NOT auto-archived — only clear expected denials are. Archiving is reversible from the Archived tab. On for new projects created in OneUptime; projects that existed before keep their setting.",
         defaultValue: false,
         example: true,
     }),
@@ -2163,7 +2103,7 @@ __decorate([
         type: TableColumnType.Entity,
         modelType: AlertSeverity,
         title: "Alert Investigation Minimum Severity",
-        description: "Only alerts at or above this severity are investigated automatically by AI. When unset, the top two severity tiers (by order) are investigated by default.",
+        description: "Only alerts at or above this severity are investigated automatically by AI. Unset means every alert is investigated, whatever its severity.",
     }),
     ManyToOne(() => {
         return AlertSeverity;
@@ -2222,7 +2162,7 @@ __decorate([
         required: false,
         type: TableColumnType.Number,
         title: "Daily Autonomous AI Token Limit",
-        description: "Fallback maximum tokens per UTC day for autonomous AI work that is not associated with an incident or alert. When the limit is reached, new autonomous work is skipped until the next day — interactive AI chat is never blocked. Unset means no limit.",
+        description: "Legacy setting, no longer enforced: autonomous AI work that is not associated with an incident or alert has no daily token limit. Use the Daily Incident AI Token Limit and Daily Alert AI Token Limit instead.",
         example: 500000,
     }),
     Column({
@@ -2303,7 +2243,7 @@ __decorate([
         required: false,
         type: TableColumnType.Number,
         title: "Daily AI Fix Task Limit",
-        description: "Fallback maximum AI fix tasks (agent runs that open pull requests) that may be created per UTC day for work not associated with an incident or alert, across every fix recipe and trigger. Unset means the default of 25 per day; 0 pauses these AI fix tasks entirely.",
+        description: "Legacy setting, no longer enforced: AI fix tasks that are not associated with an incident or alert have no daily limit. Use the Daily Incident AI Fix Task Limit and Daily Alert AI Fix Task Limit instead.",
         example: 25,
     }),
     Column({
@@ -2330,7 +2270,7 @@ __decorate([
         required: false,
         type: TableColumnType.Number,
         title: "Daily Incident AI Fix Task Limit",
-        description: "Maximum AI fix tasks derived from incidents that may be created per UTC day for this project. Unset means the default of 25 per day; 0 pauses incident AI fix tasks entirely.",
+        description: "Maximum AI fix tasks derived from incidents that may be created per UTC day for this project. Unset means no limit; 0 pauses incident AI fix tasks entirely.",
         example: 25,
     }),
     Column({
@@ -2357,7 +2297,7 @@ __decorate([
         required: false,
         type: TableColumnType.Number,
         title: "Daily Alert AI Fix Task Limit",
-        description: "Maximum AI fix tasks derived from alerts that may be created per UTC day for this project. Unset means the default of 25 per day; 0 pauses alert AI fix tasks entirely.",
+        description: "Maximum AI fix tasks derived from alerts that may be created per UTC day for this project. Unset means no limit; 0 pauses alert AI fix tasks entirely.",
         example: 25,
     }),
     Column({
@@ -2384,7 +2324,7 @@ __decorate([
         required: false,
         type: TableColumnType.Number,
         title: "Alert Re-investigation Cooldown (Minutes)",
-        description: "Repeat alerts from the same monitor within this many minutes are not re-investigated by AI — the first analysis stands. Unset means the default of 30 minutes; 0 disables the cooldown.",
+        description: "Repeat alerts from the same monitor within this many minutes are not re-investigated by AI — the first analysis stands. Unset or 0 means no cooldown, so every alert is investigated; at most 1440 minutes (a day).",
         example: 30,
     }),
     Column({
@@ -2412,7 +2352,7 @@ __decorate([
         type: TableColumnType.Entity,
         modelType: IncidentSeverity,
         title: "Incident Investigation Minimum Severity",
-        description: "Only incidents at or above this severity are investigated automatically by AI. Unset means every incident is investigated — unlike alerts, which default to the top two tiers, because an incident already cleared a human-authored threshold to exist.",
+        description: "Only incidents at or above this severity are investigated automatically by AI. Unset means every incident is investigated, whatever its severity.",
     }),
     ManyToOne(() => {
         return IncidentSeverity;
@@ -2470,7 +2410,7 @@ __decorate([
         required: false,
         type: TableColumnType.Number,
         title: "Incident Re-investigation Cooldown (Minutes)",
-        description: "Incidents affecting a monitor that AI investigated within this many minutes are not re-investigated — the first analysis stands. Unset means the default of 30 minutes; 0 disables the cooldown.",
+        description: "Incidents affecting a monitor that AI investigated within this many minutes are not re-investigated — the first analysis stands. Unset or 0 means no cooldown, so every incident is investigated; at most 1440 minutes (a day).",
         example: 30,
     }),
     Column({
@@ -2497,7 +2437,7 @@ __decorate([
         required: false,
         type: TableColumnType.Number,
         title: "Max Concurrent Investigations",
-        description: "Fallback maximum number of non-incident and non-alert AI investigations that may run at the same time for this project. Unset means the default of 3. Minimum 1 — pause autonomous work with its opt-in toggle or a daily token limit of 0 instead.",
+        description: "Legacy setting, no longer enforced: AI investigations that are not associated with an incident or alert have no concurrency limit. Use the Max Concurrent Incident Investigations and Max Concurrent Alert Investigations instead.",
         example: 3,
     }),
     Column({
@@ -2524,7 +2464,7 @@ __decorate([
         required: false,
         type: TableColumnType.Number,
         title: "Max Concurrent Incident Investigations",
-        description: "How many incident AI investigations may run at the same time for this project. Unset means the default of 3. Minimum 1 — pause incident investigations with the opt-in toggle or a daily token limit of 0 instead.",
+        description: "How many incident AI investigations may run at the same time for this project. Unset means no limit — every incident investigation starts right away. Minimum 1 — pause incident investigations with the Enable Automatic Incident Investigation toggle or a daily token limit of 0 instead.",
         example: 3,
     }),
     Column({
@@ -2551,7 +2491,7 @@ __decorate([
         required: false,
         type: TableColumnType.Number,
         title: "Max Concurrent Alert Investigations",
-        description: "How many alert AI investigations may run at the same time for this project. Unset means the default of 3. Minimum 1 — pause alert investigations with the opt-in toggle or a daily token limit of 0 instead.",
+        description: "How many alert AI investigations may run at the same time for this project. Unset means no limit — every alert investigation starts right away. Minimum 1 — pause alert investigations with the Enable Automatic Alert Investigation toggle or a daily token limit of 0 instead.",
         example: 3,
     }),
     Column({