@oneuptime/common 14.0.11 → 14.0.12

package/build/dist/Server/Utils/AI/CodeFix/FixRunBudget.js

@@ -15,38 +15,23 @@ import ProjectService from "../../../Services/ProjectService";
 import AIRunService from "../../../Services/AIRunService";
 import QueryHelper from "../../../Types/Database/QueryHelper";
 import CaptureSpan from "../../Telemetry/CaptureSpan";
-/*
- * Per-project daily fix-run budget (Preventive-lane X guardrail, G11).
- *
- * Every CodeFix AIRun counts against the daily cap for its lane: incident,
- * alert, or subjectless. Incident and alert runs use their independent
- * settings; recipes with neither subject always use the default below.
- * Null/unset means the default and 0 pauses that lane.
- *
- * Enforced centrally at BOTH creation paths:
- *   - TelemetryExceptionService.createCodeFixRunForException (the
- *     exception-page recipes: FixException, WriteRegressionTest)
- *   - SubjectCodeFixRun.enqueueSubjectCodeFixRun (every subject/perf
- *     recipe: ImproveInstrumentation, FixFromIncident, FixPerformance)
- *
- * User-triggered paths surface the rejection as a clear BadDataException;
- * the automatic instrumentation trigger pre-checks the budget and treats
- * over-budget as a logged skip (it must never throw into an investigation).
- */
-// Fix runs allowed per project per UTC day when no explicit limit is set.
-export const DEFAULT_DAILY_FIX_RUN_LIMIT = 25;
 export default class FixRunBudget {
     /*
      * The pure budget decision, separated from IO so it can be tested
-     * directly. Null/undefined means "use the default cap" — unlike the
-     * token budget, an unset fix-task limit is NOT unlimited: fix runs fan
-     * out into pull requests on customer repositories, so they always ship
-     * with a ceiling. 0 (or negative) pauses fix tasks entirely.
+     * directly. Null/undefined means no limit, like the token budget: AI fix
+     * tasks are opened as often as the work calls for until a project sets a
+     * ceiling. 0 (or negative) pauses fix tasks entirely.
      */
     static evaluate(data) {
-        const limit = data.configuredLimit === null || data.configuredLimit === undefined
-            ? DEFAULT_DAILY_FIX_RUN_LIMIT
-            : data.configuredLimit;
+        if (data.configuredLimit === null || data.configuredLimit === undefined) {
+            return {
+                allowed: true,
+                limit: null,
+                paused: false,
+                runsToday: data.runsToday,
+            };
+        }
+        const limit = data.configuredLimit;
         if (limit <= 0) {
             return {
                 allowed: false,
@@ -70,27 +55,30 @@ export default class FixRunBudget {
     static async getBudgetStatus(projectId, subject) {
         var _a, _b;
         const lane = this.getLane(subject);
-        let configuredLimit = null;
-        if (lane !== "other") {
-            const project = await ProjectService.findOneById({
-                id: projectId,
-                select: lane === "incident"
-                    ? { incidentAiDailyFixTaskLimit: true }
-                    : { alertAiDailyFixTaskLimit: true },
-                props: { isRoot: true },
-            });
-            configuredLimit =
-                lane === "incident"
-                    ? (_a = project === null || project === void 0 ? void 0 : project.incidentAiDailyFixTaskLimit) !== null && _a !== void 0 ? _a : null
-                    : (_b = project === null || project === void 0 ? void 0 : project.alertAiDailyFixTaskLimit) !== null && _b !== void 0 ? _b : null;
+        // Subjectless fix tasks have no setting, so no limit and nothing to read.
+        if (lane === "other") {
+            return this.evaluate({ configuredLimit: null, runsToday: 0 });
         }
-        // Paused short-circuits the count query (mirrors the token budget).
-        const pausedCheck = this.evaluate({
+        const project = await ProjectService.findOneById({
+            id: projectId,
+            select: lane === "incident"
+                ? { incidentAiDailyFixTaskLimit: true }
+                : { alertAiDailyFixTaskLimit: true },
+            props: { isRoot: true },
+        });
+        const configuredLimit = lane === "incident"
+            ? (_a = project === null || project === void 0 ? void 0 : project.incidentAiDailyFixTaskLimit) !== null && _a !== void 0 ? _a : null
+            : (_b = project === null || project === void 0 ? void 0 : project.alertAiDailyFixTaskLimit) !== null && _b !== void 0 ? _b : null;
+        /*
+         * Paused and unlimited both short-circuit the count query (mirrors the
+         * token budget): neither decision depends on today's count.
+         */
+        const uncountedCheck = this.evaluate({
             configuredLimit,
             runsToday: 0,
         });
-        if (pausedCheck.paused) {
-            return pausedCheck;
+        if (uncountedCheck.paused || uncountedCheck.limit === null) {
+            return uncountedCheck;
         }
         const runsToday = (await AIRunService.countBy({
             query: Object.assign(Object.assign({ projectId, runType: AIRunType.CodeFix }, (lane === "incident"
@@ -98,15 +86,10 @@ export default class FixRunBudget {
                     triggeredByIncidentId: QueryHelper.notNull(),
                     triggeredByAlertId: QueryHelper.isNull(),
                 }
-                : lane === "alert"
-                    ? {
-                        triggeredByIncidentId: QueryHelper.isNull(),
-                        triggeredByAlertId: QueryHelper.notNull(),
-                    }
-                    : {
-                        triggeredByIncidentId: QueryHelper.isNull(),
-                        triggeredByAlertId: QueryHelper.isNull(),
-                    })), { createdAt: QueryHelper.greaterThanEqualTo(OneUptimeDate.getStartOfDay(OneUptimeDate.getCurrentDate(), "UTC")) }),
+                : {
+                    triggeredByIncidentId: QueryHelper.isNull(),
+                    triggeredByAlertId: QueryHelper.notNull(),
+                })), { createdAt: QueryHelper.greaterThanEqualTo(OneUptimeDate.getStartOfDay(OneUptimeDate.getCurrentDate(), "UTC")) }),
             props: { isRoot: true },
         })).toNumber();
         return this.evaluate({ configuredLimit, runsToday });
@@ -126,7 +109,10 @@ export default class FixRunBudget {
     // Human-readable rejection naming the cap and the setting that controls it.
     static describeRejection(decision, subject) {
         const lane = this.getLane(subject);
-        // Subjectless fix tasks have a fixed daily cap with no setting.
+        /*
+         * getBudgetStatus never rejects a subjectless fix task (that lane has no
+         * limit), so a decision for it has no setting to point at.
+         */
         if (lane === "other") {
             return `The project's daily fix task limit for AI work outside incidents and alerts has been reached (${decision.runsToday} of ${decision.limit} fix tasks created today, UTC). New fix tasks can be created tomorrow.`;
         }
@@ -134,13 +120,13 @@ export default class FixRunBudget {
             ? "Daily Incident AI Fix Task Limit"
             : "Daily Alert AI Fix Task Limit";
         const settingsLocation = lane === "incident"
-            ? "Incidents > AI > Investigation"
-            : "Alerts > AI > Investigation";
+            ? "Incidents > Settings > AI"
+            : "Alerts > Settings > AI";
         const laneLabel = `${lane} AI`;
         if (decision.paused) {
             return `${laneLabel} fix tasks are paused for this project — the "${settingTitle}" is set to 0. Raise or unset it under ${settingsLocation} to resume.`;
         }
-        return `The project's ${laneLabel} fix task limit has been reached (${decision.runsToday} of ${decision.limit} fix tasks created today, UTC). New fix tasks can be created tomorrow — or raise the "${settingTitle}" under ${settingsLocation} (unset means the default of ${DEFAULT_DAILY_FIX_RUN_LIMIT}/day).`;
+        return `The project's ${laneLabel} fix task limit has been reached (${decision.runsToday} of ${decision.limit} fix tasks created today, UTC). New fix tasks can be created tomorrow — or raise the "${settingTitle}" under ${settingsLocation}, or clear it for no limit.`;
     }
     /*
      * Throw a clear BadDataException when the project is over its daily

package/build/dist/Server/Utils/AI/CodeFix/FixRunBudget.js.map

@@ -1 +1 @@
-{"version":3,"file":"FixRunBudget.js","sourceRoot":"","sources":["../../../../../../Server/Utils/AI/CodeFix/FixRunBudget.ts"],"names":[],"mappings":";;;;;;;;;AAAA,OAAO,QAAQ,MAAM,4BAA4B,CAAC;AAClD,OAAO,SAAS,MAAM,gCAAgC,CAAC;AACvD,OAAO,gBAAgB,MAAM,8CAA8C,CAAC;AAC5E,OAAO,aAAa,MAAM,wBAAwB,CAAC;AAEnD,OAAO,cAAc,MAAM,kCAAkC,CAAC;AAC9D,OAAO,YAAY,MAAM,gCAAgC,CAAC;AAC1D,OAAO,WAAW,MAAM,qCAAqC,CAAC;AAC9D,OAAO,WAAW,MAAM,6BAA6B,CAAC;AAEtD;;;;;;;;;;;;;;;;;GAiBG;AAEH,0EAA0E;AAC1E,MAAM,CAAC,MAAM,2BAA2B,GAAW,EAAE,CAAC;AAmBtD,MAAM,CAAC,OAAO,OAAO,YAAY;IAC/B;;;;;;OAMG;IACI,MAAM,CAAC,QAAQ,CAAC,IAGtB;QACC,MAAM,KAAK,GACT,IAAI,CAAC,eAAe,KAAK,IAAI,IAAI,IAAI,CAAC,eAAe,KAAK,SAAS;YACjE,CAAC,CAAC,2BAA2B;YAC7B,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC;QAE3B,IAAI,KAAK,IAAI,CAAC,EAAE,CAAC;YACf,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,KAAK;gBACL,MAAM,EAAE,IAAI;gBACZ,SAAS,EAAE,IAAI,CAAC,SAAS;aAC1B,CAAC;QACJ,CAAC;QAED,OAAO;YACL,OAAO,EAAE,IAAI,CAAC,SAAS,GAAG,KAAK;YAC/B,KAAK;YACL,MAAM,EAAE,KAAK;YACb,SAAS,EAAE,IAAI,CAAC,SAAS;SAC1B,CAAC;IACJ,CAAC;IAED;;;;OAIG;IAEiB,AAAb,MAAM,CAAC,KAAK,CAAC,eAAe,CACjC,SAAmB,EACnB,OAAyC;;QAEzC,MAAM,IAAI,GAAqB,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAErD,IAAI,eAAe,GAAkB,IAAI,CAAC;QAE1C,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;YACrB,MAAM,OAAO,GAAmB,MAAM,cAAc,CAAC,WAAW,CAAC;gBAC/D,EAAE,EAAE,SAAS;gBACb,MAAM,EACJ,IAAI,KAAK,UAAU;oBACjB,CAAC,CAAC,EAAE,2BAA2B,EAAE,IAAI,EAAE;oBACvC,CAAC,CAAC,EAAE,wBAAwB,EAAE,IAAI,EAAE;gBACxC,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE;aACxB,CAAC,CAAC;YAEH,eAAe;gBACb,IAAI,KAAK,UAAU;oBACjB,CAAC,CAAC,MAAA,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,2BAA2B,mCAAI,IAAI;oBAC9C,CAAC,CAAC,MAAA,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,wBAAwB,mCAAI,IAAI,CAAC;QAClD,CAAC;QAED,oEAAoE;QACpE,MAAM,WAAW,GAAyB,IAAI,CAAC,QAAQ,CAAC;YACtD,eAAe;YACf,SAAS,EAAE,CAAC;SACb,CAAC,CAAC;QAEH,IAAI,WAAW,CAAC,MAAM,EAAE,CAAC;YACvB,OAAO,WAAW,CAAC;QACrB,CAAC;QAED,MAAM,SAAS,GAAW,CACxB,MAAM,YAAY,CAAC,OAAO,CAAC;YACzB,KAAK,gCACH,SAAS,EACT,OAAO,EAAE,SAAS,CAAC,OAAO,IACvB,CAAC,IAAI,KAAK,UAAU;gBACrB,CAAC,CAAC;oBACE,qBAAqB,EAAE,WAAW,CAAC,OAAO,EAAE;oBAC5C,kBAAkB,EAAE,WAAW,CAAC,MAAM,EAAE;iBACzC;gBACH,CAAC,CAAC,IAAI,KAAK,OAAO;oBAChB,CAAC,CAAC;wBACE,qBAAqB,EAAE,WAAW,CAAC,MAAM,EAAE;wBAC3C,kBAAkB,EAAE,WAAW,CAAC,OAAO,EAAE;qBAC1C;oBACH,CAAC,CAAC;wBACE,qBAAqB,EAAE,WAAW,CAAC,MAAM,EAAE;wBAC3C,kBAAkB,EAAE,WAAW,CAAC,MAAM,EAAE;qBACzC,CAAC,KACR,SAAS,EAAE,WAAW,CAAC,kBAAkB,CACvC,aAAa,CAAC,aAAa,CAAC,aAAa,CAAC,cAAc,EAAE,EAAE,KAAK,CAAC,CACnE,GACF;YACD,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE;SACxB,CAAC,CACH,CAAC,QAAQ,EAAE,CAAC;QAEb,OAAO,IAAI,CAAC,QAAQ,CAAC,EAAE,eAAe,EAAE,SAAS,EAAE,CAAC,CAAC;IACvD,CAAC;IAEO,MAAM,CAAC,OAAO,CACpB,OAAyC;QAEzC,IAAI,CAAA,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,UAAU,KAAI,OAAO,CAAC,OAAO,EAAE,CAAC;YAC3C,MAAM,IAAI,gBAAgB,CACxB,4DAA4D,CAC7D,CAAC;QACJ,CAAC;QAED,IAAI,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,UAAU,EAAE,CAAC;YACxB,OAAO,UAAU,CAAC;QACpB,CAAC;QAED,IAAI,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,OAAO,EAAE,CAAC;YACrB,OAAO,OAAO,CAAC;QACjB,CAAC;QAED,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,4EAA4E;IACrE,MAAM,CAAC,iBAAiB,CAC7B,QAA8B,EAC9B,OAAyC;QAEzC,MAAM,IAAI,GAAqB,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAErD,gEAAgE;QAChE,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;YACrB,OAAO,iGAAiG,QAAQ,CAAC,SAAS,OAAO,QAAQ,CAAC,KAAK,wEAAwE,CAAC;QAC1N,CAAC;QAED,MAAM,YAAY,GAChB,IAAI,KAAK,UAAU;YACjB,CAAC,CAAC,kCAAkC;YACpC,CAAC,CAAC,+BAA+B,CAAC;QACtC,MAAM,gBAAgB,GACpB,IAAI,KAAK,UAAU;YACjB,CAAC,CAAC,gCAAgC;YAClC,CAAC,CAAC,6BAA6B,CAAC;QACpC,MAAM,SAAS,GAAW,GAAG,IAAI,KAAK,CAAC;QAEvC,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC;YACpB,OAAO,GAAG,SAAS,iDAAiD,YAAY,0CAA0C,gBAAgB,aAAa,CAAC;QAC1J,CAAC;QAED,OAAO,iBAAiB,SAAS,qCAAqC,QAAQ,CAAC,SAAS,OAAO,QAAQ,CAAC,KAAK,yFAAyF,YAAY,WAAW,gBAAgB,gCAAgC,2BAA2B,QAAQ,CAAC;IACnT,CAAC;IAED;;;;OAIG;IAEiB,AAAb,MAAM,CAAC,KAAK,CAAC,kBAAkB,CACpC,SAAmB,EACnB,OAAyC;QAEzC,MAAM,QAAQ,GAAyB,MAAM,IAAI,CAAC,eAAe,CAC/D,SAAS,EACT,OAAO,CACR,CAAC;QAEF,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;YACrB,OAAO;QACT,CAAC;QAED,MAAM,IAAI,gBAAgB,CAAC,IAAI,CAAC,iBAAiB,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC;IACxE,CAAC;CACF;AAtIqB;IADnB,WAAW,EAAE;;qCAED,QAAQ;;yCA6DpB;AAyDmB;IADnB,WAAW,EAAE;;qCAED,QAAQ;;4CAapB"}
+{"version":3,"file":"FixRunBudget.js","sourceRoot":"","sources":["../../../../../../Server/Utils/AI/CodeFix/FixRunBudget.ts"],"names":[],"mappings":";;;;;;;;;AAAA,OAAO,QAAQ,MAAM,4BAA4B,CAAC;AAClD,OAAO,SAAS,MAAM,gCAAgC,CAAC;AACvD,OAAO,gBAAgB,MAAM,8CAA8C,CAAC;AAC5E,OAAO,aAAa,MAAM,wBAAwB,CAAC;AAEnD,OAAO,cAAc,MAAM,kCAAkC,CAAC;AAC9D,OAAO,YAAY,MAAM,gCAAgC,CAAC;AAC1D,OAAO,WAAW,MAAM,qCAAqC,CAAC;AAC9D,OAAO,WAAW,MAAM,6BAA6B,CAAC;AA0CtD,MAAM,CAAC,OAAO,OAAO,YAAY;IAC/B;;;;;OAKG;IACI,MAAM,CAAC,QAAQ,CAAC,IAGtB;QACC,IAAI,IAAI,CAAC,eAAe,KAAK,IAAI,IAAI,IAAI,CAAC,eAAe,KAAK,SAAS,EAAE,CAAC;YACxE,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,KAAK,EAAE,IAAI;gBACX,MAAM,EAAE,KAAK;gBACb,SAAS,EAAE,IAAI,CAAC,SAAS;aAC1B,CAAC;QACJ,CAAC;QAED,MAAM,KAAK,GAAW,IAAI,CAAC,eAAe,CAAC;QAE3C,IAAI,KAAK,IAAI,CAAC,EAAE,CAAC;YACf,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,KAAK;gBACL,MAAM,EAAE,IAAI;gBACZ,SAAS,EAAE,IAAI,CAAC,SAAS;aAC1B,CAAC;QACJ,CAAC;QAED,OAAO;YACL,OAAO,EAAE,IAAI,CAAC,SAAS,GAAG,KAAK;YAC/B,KAAK;YACL,MAAM,EAAE,KAAK;YACb,SAAS,EAAE,IAAI,CAAC,SAAS;SAC1B,CAAC;IACJ,CAAC;IAED;;;;OAIG;IAEiB,AAAb,MAAM,CAAC,KAAK,CAAC,eAAe,CACjC,SAAmB,EACnB,OAAyC;;QAEzC,MAAM,IAAI,GAAqB,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAErD,0EAA0E;QAC1E,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;YACrB,OAAO,IAAI,CAAC,QAAQ,CAAC,EAAE,eAAe,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC,CAAC;QAChE,CAAC;QAED,MAAM,OAAO,GAAmB,MAAM,cAAc,CAAC,WAAW,CAAC;YAC/D,EAAE,EAAE,SAAS;YACb,MAAM,EACJ,IAAI,KAAK,UAAU;gBACjB,CAAC,CAAC,EAAE,2BAA2B,EAAE,IAAI,EAAE;gBACvC,CAAC,CAAC,EAAE,wBAAwB,EAAE,IAAI,EAAE;YACxC,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE;SACxB,CAAC,CAAC;QAEH,MAAM,eAAe,GACnB,IAAI,KAAK,UAAU;YACjB,CAAC,CAAC,MAAA,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,2BAA2B,mCAAI,IAAI;YAC9C,CAAC,CAAC,MAAA,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,wBAAwB,mCAAI,IAAI,CAAC;QAEhD;;;WAGG;QACH,MAAM,cAAc,GAAyB,IAAI,CAAC,QAAQ,CAAC;YACzD,eAAe;YACf,SAAS,EAAE,CAAC;SACb,CAAC,CAAC;QAEH,IAAI,cAAc,CAAC,MAAM,IAAI,cAAc,CAAC,KAAK,KAAK,IAAI,EAAE,CAAC;YAC3D,OAAO,cAAc,CAAC;QACxB,CAAC;QAED,MAAM,SAAS,GAAW,CACxB,MAAM,YAAY,CAAC,OAAO,CAAC;YACzB,KAAK,gCACH,SAAS,EACT,OAAO,EAAE,SAAS,CAAC,OAAO,IACvB,CAAC,IAAI,KAAK,UAAU;gBACrB,CAAC,CAAC;oBACE,qBAAqB,EAAE,WAAW,CAAC,OAAO,EAAE;oBAC5C,kBAAkB,EAAE,WAAW,CAAC,MAAM,EAAE;iBACzC;gBACH,CAAC,CAAC;oBACE,qBAAqB,EAAE,WAAW,CAAC,MAAM,EAAE;oBAC3C,kBAAkB,EAAE,WAAW,CAAC,OAAO,EAAE;iBAC1C,CAAC,KACN,SAAS,EAAE,WAAW,CAAC,kBAAkB,CACvC,aAAa,CAAC,aAAa,CAAC,aAAa,CAAC,cAAc,EAAE,EAAE,KAAK,CAAC,CACnE,GACF;YACD,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE;SACxB,CAAC,CACH,CAAC,QAAQ,EAAE,CAAC;QAEb,OAAO,IAAI,CAAC,QAAQ,CAAC,EAAE,eAAe,EAAE,SAAS,EAAE,CAAC,CAAC;IACvD,CAAC;IAEO,MAAM,CAAC,OAAO,CACpB,OAAyC;QAEzC,IAAI,CAAA,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,UAAU,KAAI,OAAO,CAAC,OAAO,EAAE,CAAC;YAC3C,MAAM,IAAI,gBAAgB,CACxB,4DAA4D,CAC7D,CAAC;QACJ,CAAC;QAED,IAAI,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,UAAU,EAAE,CAAC;YACxB,OAAO,UAAU,CAAC;QACpB,CAAC;QAED,IAAI,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,OAAO,EAAE,CAAC;YACrB,OAAO,OAAO,CAAC;QACjB,CAAC;QAED,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,4EAA4E;IACrE,MAAM,CAAC,iBAAiB,CAC7B,QAA8B,EAC9B,OAAyC;QAEzC,MAAM,IAAI,GAAqB,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAErD;;;WAGG;QACH,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;YACrB,OAAO,iGAAiG,QAAQ,CAAC,SAAS,OAAO,QAAQ,CAAC,KAAK,wEAAwE,CAAC;QAC1N,CAAC;QAED,MAAM,YAAY,GAChB,IAAI,KAAK,UAAU;YACjB,CAAC,CAAC,kCAAkC;YACpC,CAAC,CAAC,+BAA+B,CAAC;QACtC,MAAM,gBAAgB,GACpB,IAAI,KAAK,UAAU;YACjB,CAAC,CAAC,2BAA2B;YAC7B,CAAC,CAAC,wBAAwB,CAAC;QAC/B,MAAM,SAAS,GAAW,GAAG,IAAI,KAAK,CAAC;QAEvC,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC;YACpB,OAAO,GAAG,SAAS,iDAAiD,YAAY,0CAA0C,gBAAgB,aAAa,CAAC;QAC1J,CAAC;QAED,OAAO,iBAAiB,SAAS,qCAAqC,QAAQ,CAAC,SAAS,OAAO,QAAQ,CAAC,KAAK,yFAAyF,YAAY,WAAW,gBAAgB,6BAA6B,CAAC;IAC7Q,CAAC;IAED;;;;OAIG;IAEiB,AAAb,MAAM,CAAC,KAAK,CAAC,kBAAkB,CACpC,SAAmB,EACnB,OAAyC;QAEzC,MAAM,QAAQ,GAAyB,MAAM,IAAI,CAAC,eAAe,CAC/D,SAAS,EACT,OAAO,CACR,CAAC;QAEF,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;YACrB,OAAO;QACT,CAAC;QAED,MAAM,IAAI,gBAAgB,CAAC,IAAI,CAAC,iBAAiB,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC;IACxE,CAAC;CACF;AAxIqB;IADnB,WAAW,EAAE;;qCAED,QAAQ;;yCA4DpB;AA4DmB;IADnB,WAAW,EAAE;;qCAED,QAAQ;;4CAapB"}

package/build/dist/Server/Utils/AI/CodeFix/OpenPullRequestCap.js

@@ -10,34 +10,23 @@ var __metadata = (this && this.__metadata) || function (k, v) {
 import PullRequestState from "../../../../Types/CodeRepository/PullRequestState";
 import AIAgentTaskPullRequestService from "../../../Services/AIAgentTaskPullRequestService";
 import CaptureSpan from "../../Telemetry/CaptureSpan";
-/*
- * Per-repository open-PR cap (Preventive-lane X guardrail, G11).
- *
- * A repository may have at most `CodeRepository.maxOpenFixPullRequests`
- * OPEN AI-authored fix pull requests at a time (null/unset = the default
- * below, 0 = no AI fix PRs for this repository). Open-PR counts come from
- * AIAgentTaskPullRequest rows, whose states the AIAgent:SyncPullRequestStates
- * worker keeps current — merging or closing an AI PR frees a slot within
- * its 30-minute sync window.
- *
- * Enforced SERVER-SIDE at the repository-token gate
- * (/ai-agent-data/get-repository-token): the agent worker cannot clone or
- * push without an installation token, so a repo at its cap is physically
- * unable to receive another AI branch or PR — no token, no push. The
- * worker surfaces the rejection message as the run's failure guidance.
- */
-// Open AI fix PRs allowed per repository when no explicit cap is set.
-export const DEFAULT_MAX_OPEN_FIX_PULL_REQUESTS = 5;
 export default class OpenPullRequestCap {
     /*
      * The pure cap decision, separated from IO so it can be tested directly.
-     * At/over the cap rejects: `openCount >= limit` means the repository
-     * already carries a full review queue of unreviewed AI PRs.
+     * Unset means no cap. At/over a set cap rejects: `openCount >= limit`
+     * means the repository already carries a full review queue of unreviewed
+     * AI PRs.
      */
     static evaluate(data) {
-        const limit = data.configuredLimit === null || data.configuredLimit === undefined
-            ? DEFAULT_MAX_OPEN_FIX_PULL_REQUESTS
-            : data.configuredLimit;
+        if (data.configuredLimit === null || data.configuredLimit === undefined) {
+            return {
+                allowed: true,
+                limit: null,
+                paused: false,
+                openCount: data.openCount,
+            };
+        }
+        const limit = data.configuredLimit;
         if (limit <= 0) {
             return {
                 allowed: false,
@@ -59,13 +48,13 @@ export default class OpenPullRequestCap {
      * SyncPullRequestStates worker).
      */
     static async checkForRepository(data) {
-        // A blocked repo (cap 0) never needs the count query.
-        const pausedCheck = this.evaluate({
+        // A blocked repo (cap 0) or one with no cap never needs the count query.
+        const uncountedCheck = this.evaluate({
             configuredLimit: data.configuredLimit,
             openCount: 0,
         });
-        if (pausedCheck.paused) {
-            return pausedCheck;
+        if (uncountedCheck.paused || uncountedCheck.limit === null) {
+            return uncountedCheck;
         }
         const openCount = (await AIAgentTaskPullRequestService.countBy({
             query: {
@@ -87,7 +76,7 @@ export default class OpenPullRequestCap {
         if (data.decision.paused) {
             return `AI fix pull requests are blocked for repository ${data.repositoryName} — its "Max Open Fix Pull Requests" setting is 0. Raise or unset the setting on the repository's Settings page to allow AI fix pull requests again.`;
         }
-        return `Repository ${data.repositoryName} is at its open AI fix pull request cap (${data.decision.openCount} open of a maximum ${data.decision.limit}). Review and merge or close the open AI pull requests to free a slot, or raise the "Max Open Fix Pull Requests" setting on the repository's Settings page (unset means the default of ${DEFAULT_MAX_OPEN_FIX_PULL_REQUESTS}).`;
+        return `Repository ${data.repositoryName} is at its open AI fix pull request cap (${data.decision.openCount} open of a maximum ${data.decision.limit}). Review and merge or close the open AI pull requests to free a slot, or raise the "Max Open Fix Pull Requests" setting on the repository's Settings page, or clear it for no cap.`;
     }
 }
 __decorate([

package/build/dist/Server/Utils/AI/CodeFix/OpenPullRequestCap.js.map

@@ -1 +1 @@
-{"version":3,"file":"OpenPullRequestCap.js","sourceRoot":"","sources":["../../../../../../Server/Utils/AI/CodeFix/OpenPullRequestCap.ts"],"names":[],"mappings":";;;;;;;;;AACA,OAAO,gBAAgB,MAAM,mDAAmD,CAAC;AACjF,OAAO,6BAA6B,MAAM,iDAAiD,CAAC;AAC5F,OAAO,WAAW,MAAM,6BAA6B,CAAC;AAEtD;;;;;;;;;;;;;;;GAeG;AAEH,sEAAsE;AACtE,MAAM,CAAC,MAAM,kCAAkC,GAAW,CAAC,CAAC;AAW5D,MAAM,CAAC,OAAO,OAAO,kBAAkB;IACrC;;;;OAIG;IACI,MAAM,CAAC,QAAQ,CAAC,IAGtB;QACC,MAAM,KAAK,GACT,IAAI,CAAC,eAAe,KAAK,IAAI,IAAI,IAAI,CAAC,eAAe,KAAK,SAAS;YACjE,CAAC,CAAC,kCAAkC;YACpC,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC;QAE3B,IAAI,KAAK,IAAI,CAAC,EAAE,CAAC;YACf,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,KAAK;gBACL,MAAM,EAAE,IAAI;gBACZ,SAAS,EAAE,IAAI,CAAC,SAAS;aAC1B,CAAC;QACJ,CAAC;QAED,OAAO;YACL,OAAO,EAAE,IAAI,CAAC,SAAS,GAAG,KAAK;YAC/B,KAAK;YACL,MAAM,EAAE,KAAK;YACb,SAAS,EAAE,IAAI,CAAC,SAAS;SAC1B,CAAC;IACJ,CAAC;IAED;;;;OAIG;IAEiB,AAAb,MAAM,CAAC,KAAK,CAAC,kBAAkB,CAAC,IAGtC;QACC,sDAAsD;QACtD,MAAM,WAAW,GAA+B,IAAI,CAAC,QAAQ,CAAC;YAC5D,eAAe,EAAE,IAAI,CAAC,eAAe;YACrC,SAAS,EAAE,CAAC;SACb,CAAC,CAAC;QAEH,IAAI,WAAW,CAAC,MAAM,EAAE,CAAC;YACvB,OAAO,WAAW,CAAC;QACrB,CAAC;QAED,MAAM,SAAS,GAAW,CACxB,MAAM,6BAA6B,CAAC,OAAO,CAAC;YAC1C,KAAK,EAAE;gBACL,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;gBACvC,gBAAgB,EAAE,gBAAgB,CAAC,IAAI;aACxC;YACD,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE;SACxB,CAAC,CACH,CAAC,QAAQ,EAAE,CAAC;QAEb,OAAO,IAAI,CAAC,QAAQ,CAAC;YACnB,eAAe,EAAE,IAAI,CAAC,eAAe;YACrC,SAAS;SACV,CAAC,CAAC;IACL,CAAC;IAED;;;OAGG;IACI,MAAM,CAAC,iBAAiB,CAAC,IAG/B;QACC,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;YACzB,OAAO,mDAAmD,IAAI,CAAC,cAAc,qJAAqJ,CAAC;QACrO,CAAC;QAED,OAAO,cAAc,IAAI,CAAC,cAAc,4CAA4C,IAAI,CAAC,QAAQ,CAAC,SAAS,sBAAsB,IAAI,CAAC,QAAQ,CAAC,KAAK,0LAA0L,kCAAkC,IAAI,CAAC;IACvX,CAAC;CACF;AA5CqB;IADnB,WAAW,EAAE;;;;kDA6Bb"}
+{"version":3,"file":"OpenPullRequestCap.js","sourceRoot":"","sources":["../../../../../../Server/Utils/AI/CodeFix/OpenPullRequestCap.ts"],"names":[],"mappings":";;;;;;;;;AACA,OAAO,gBAAgB,MAAM,mDAAmD,CAAC;AACjF,OAAO,6BAA6B,MAAM,iDAAiD,CAAC;AAC5F,OAAO,WAAW,MAAM,6BAA6B,CAAC;AA8BtD,MAAM,CAAC,OAAO,OAAO,kBAAkB;IACrC;;;;;OAKG;IACI,MAAM,CAAC,QAAQ,CAAC,IAGtB;QACC,IAAI,IAAI,CAAC,eAAe,KAAK,IAAI,IAAI,IAAI,CAAC,eAAe,KAAK,SAAS,EAAE,CAAC;YACxE,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,KAAK,EAAE,IAAI;gBACX,MAAM,EAAE,KAAK;gBACb,SAAS,EAAE,IAAI,CAAC,SAAS;aAC1B,CAAC;QACJ,CAAC;QAED,MAAM,KAAK,GAAW,IAAI,CAAC,eAAe,CAAC;QAE3C,IAAI,KAAK,IAAI,CAAC,EAAE,CAAC;YACf,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,KAAK;gBACL,MAAM,EAAE,IAAI;gBACZ,SAAS,EAAE,IAAI,CAAC,SAAS;aAC1B,CAAC;QACJ,CAAC;QAED,OAAO;YACL,OAAO,EAAE,IAAI,CAAC,SAAS,GAAG,KAAK;YAC/B,KAAK;YACL,MAAM,EAAE,KAAK;YACb,SAAS,EAAE,IAAI,CAAC,SAAS;SAC1B,CAAC;IACJ,CAAC;IAED;;;;OAIG;IAEiB,AAAb,MAAM,CAAC,KAAK,CAAC,kBAAkB,CAAC,IAGtC;QACC,yEAAyE;QACzE,MAAM,cAAc,GAA+B,IAAI,CAAC,QAAQ,CAAC;YAC/D,eAAe,EAAE,IAAI,CAAC,eAAe;YACrC,SAAS,EAAE,CAAC;SACb,CAAC,CAAC;QAEH,IAAI,cAAc,CAAC,MAAM,IAAI,cAAc,CAAC,KAAK,KAAK,IAAI,EAAE,CAAC;YAC3D,OAAO,cAAc,CAAC;QACxB,CAAC;QAED,MAAM,SAAS,GAAW,CACxB,MAAM,6BAA6B,CAAC,OAAO,CAAC;YAC1C,KAAK,EAAE;gBACL,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;gBACvC,gBAAgB,EAAE,gBAAgB,CAAC,IAAI;aACxC;YACD,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE;SACxB,CAAC,CACH,CAAC,QAAQ,EAAE,CAAC;QAEb,OAAO,IAAI,CAAC,QAAQ,CAAC;YACnB,eAAe,EAAE,IAAI,CAAC,eAAe;YACrC,SAAS;SACV,CAAC,CAAC;IACL,CAAC;IAED;;;OAGG;IACI,MAAM,CAAC,iBAAiB,CAAC,IAG/B;QACC,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;YACzB,OAAO,mDAAmD,IAAI,CAAC,cAAc,qJAAqJ,CAAC;QACrO,CAAC;QAED,OAAO,cAAc,IAAI,CAAC,cAAc,4CAA4C,IAAI,CAAC,QAAQ,CAAC,SAAS,sBAAsB,IAAI,CAAC,QAAQ,CAAC,KAAK,qLAAqL,CAAC;IAC5U,CAAC;CACF;AA5CqB;IADnB,WAAW,EAAE;;;;kDA6Bb"}

package/build/dist/Server/Utils/AI/Remediation/RemediationExecutionRunner.js

@@ -78,29 +78,14 @@ import CaptureSpan from "../../Telemetry/CaptureSpan";
  * durable record: a run that finds commands already executed for its
  * suggestion settles what happened instead of re-executing anything.
  */
-/*
- * A cluster round: remediation a cluster's AI agent page asked for (its
- * Fixes mode), not an auto-remediation rule — it names a cluster and no
- * rule. The project's "Enable AI command execution" opt-in gates rule
- * rounds only; a cluster round's consent lives on the cluster (see
- * RemediationExecutionRunner.checkProjectGates). Keyed on the suggestion
- * row, never on the plan's step types: a rule can compose an all-kubectl
- * plan, and it was composed under the opt-in, so it stays under it. Shared
- * with the approve route so execution and approval can never disagree about
- * which rounds need the opt-in.
- */
-export function isClusterRemediationRound(suggestion) {
-    return (Boolean(suggestion.kubernetesClusterId) && !suggestion.autoRemediationRuleId);
-}
 /*
  * A resource round: remediation an infrastructure resource's AI agent page
  * asked for (its Fixes mode) — a Docker or Podman host, a Docker Swarm,
  * Proxmox, VMware or Ceph cluster, a database server or a host — not a
  * rule. It names a resource (type and id) and no rule. Like a cluster
  * round, its consent lives on the resource (its Fixes mode, and the agent's
- * own ONEUPTIME_AI_ALLOW_WRITES), so the project's "Enable AI command
- * execution" opt-in does not gate it. Keyed on the suggestion row, never on
- * the plan's step types, and shared with the approve route.
+ * own ONEUPTIME_AI_ALLOW_WRITES). Keyed on the suggestion row, never on the
+ * plan's step types.
  */
 export function isResourceRemediationRound(suggestion) {
     return (Boolean(suggestion.resourceType) &&
@@ -519,9 +504,8 @@ export default class RemediationExecutionRunner {
              * would fall into the rule lane below and be closed as "the rule
              * behind this suggestion was deleted", naming a rule that never
              * existed. Its server-written name is what is left to tell. Checked
-             * before the project gates: nothing is left to run, and with no
-             * cluster on the row it no longer reads as a cluster round, so the
-             * gates would otherwise blame an opt-in it never needed.
+             * before the project gate: nothing is left to run, so the deletion,
+             * not a project switch, is what the round's record should say.
              */
             const deletedClusterRound = !suggestion.kubernetesClusterId && !suggestion.autoRemediationRuleId
                 ? parseClusterRoundNameSnapshot(suggestion.ruleNameSnapshot)
@@ -535,9 +519,9 @@ export default class RemediationExecutionRunner {
                 return;
             }
             // Gates that must still hold at execution time, not just at rule match.
-            const gateFailure = await this.checkProjectGates(Object.assign({ projectId, isClusterRound: isClusterRemediationRound(suggestion) }, (isResourceRemediationRound(suggestion)
-                ? { isResourceRound: true }
-                : {})));
+            const gateFailure = await this.checkProjectGates({
+                projectId,
+            });
             if (gateFailure) {
                 await this.settleNoneApplicable({
                     suggestion,
@@ -1415,43 +1399,27 @@ export default class RemediationExecutionRunner {
         });
     }
     /*
-     * The project switches a round must still pass when it runs. Null when
-     * they do; otherwise the rationale for settling quietly.
+     * The project switch a round must still pass when it runs. Null when it
+     * does; otherwise the rationale for settling quietly.
      *
-     * Enable AI and Enable auto-remediation are kill switches for every
-     * round. The "Enable AI command execution" opt-in gates rule rounds
-     * (Bash/SSH on Runners, and kubectl a rule composes) but not a cluster
-     * round (isClusterRemediationRound): its consent is the cluster's own
-     * Fixes mode plus, for the in-cluster Kubernetes AI agent, the chart's
-     * write RBAC. A cluster reached through an advanced Runner with a
-     * Kubernetes credential has no chart RBAC behind it, so its status keeps
-     * the project_ai_command_execution_disabled gap while the opt-in is off —
-     * and the cluster round stops at isRemediationReady instead.
+     * Enable AI is the project's only AI switch and the kill switch for
+     * every round: rule rounds (Bash/SSH on Runners, and kubectl a rule
+     * composes), cluster rounds and resource rounds alike. Past it, a
+     * round's consent is its own: the rule's mode and allowlist and a
+     * Runner's Runs AI Remediation Commands, or the cluster's or resource's
+     * Fixes mode and its agent's write access.
      */
     static async checkProjectGates(data) {
         const project = await ProjectService.findOneById({
             id: data.projectId,
             select: {
                 enableAi: true,
-                enableAutoRemediation: true,
-                enableAiCommandExecution: true,
             },
             props: { isRoot: true },
         });
-        if (!project ||
-            project.enableAi === false ||
-            project.enableAutoRemediation === false) {
-            return "AI or auto-remediation was disabled for this project before the run started (Project Settings → AI Features) — nothing was run or proposed.";
-        }
-        if (data.isClusterRound || data.isResourceRound === true) {
-            return null;
-        }
-        /*
-         * Opt-in semantics (=== true): a rule's AI command execution never runs
-         * in a project that has not explicitly turned it on.
-         */
-        if (project.enableAiCommandExecution !== true) {
-            return "AI command execution is not enabled for this project (Project Settings → AI Features) — nothing was run or proposed.";
+        // === false: the column is NOT NULL DEFAULT true (see Project.enableAi).
+        if (!project || project.enableAi === false) {
+            return "AI was disabled for this project before the run started (Project Settings → AI Features) — nothing was run or proposed.";
         }
         return null;
     }