@oneuptime/common 14.0.8 → 14.0.10

package/build/dist/Types/AutoRemediation/AiRemediationCommandPlan.js

@@ -1,5 +1,17 @@
 import RunbookStepType from "../Runbook/RunbookStepType";
 import { KubectlCommandTier, PROTECTED_KUBERNETES_NAMESPACES, } from "../Kubernetes/KubernetesClusterAiAccess";
+import { AiRemediationCommandPolicyVerdict, MAX_COMMAND_LENGTH_CHARS, } from "./AiRemediationCommandPolicyVerdict";
+import { AI_RESOURCE_TYPE_INFO, isAiResourceType, } from "../ResourceAiAgent/AiResourceType";
+import { RESOURCE_AI_ALLOW_WRITES_ENV, RESOURCE_AI_WRITE_TARGETS_ENV, ResourceCommandTier, } from "../ResourceAiAgent/ResourceAiAccess";
+/*
+ * Defined in a leaf module of their own (no imports) so the pure kubectl
+ * policy closure — KubectlPolicy, KubectlWriteScope, CommandPolicy and the
+ * types they read — can be copied verbatim into the standalone Kubernetes AI
+ * agent (agents/KubernetesAIAgent) without dragging this file, and through
+ * its JSON import most of Common, along. Re-exported here so every existing
+ * importer keeps working.
+ */
+export { AiRemediationCommandPolicyVerdict, MAX_COMMAND_LENGTH_CHARS };
 /*
  * The AI-composed command plan stored on
  * AutoRemediationSuggestion.commandPlan (jsonb). Everything in here is
@@ -12,28 +24,18 @@ import { KubectlCommandTier, PROTECTED_KUBERNETES_NAMESPACES, } from "../Kuberne
  * The only step types an AI remediation run may compose. The structured
  * Kubernetes step (restart/scale) stays runbook-only; AI reaches a cluster
  * through the Kubectl step instead, whose argv is tiered by KubectlPolicy
- * and which targets a Runner the cluster's AI page bound.
+ * and which targets a Runner the cluster's AI page bound. Every other
+ * infrastructure resource (Docker, Podman, Swarm, Proxmox, VMware, Ceph, a
+ * database server, a host) is reached through ResourceCommand, whose argv
+ * is tiered by the resource command policy and which targets the
+ * resource's own AI agent — never a Runner.
  */
 export const AI_COMMAND_STEP_TYPES = [
     RunbookStepType.Bash,
     RunbookStepType.SSH,
     RunbookStepType.Kubectl,
+    RunbookStepType.ResourceCommand,
 ];
-export var AiRemediationCommandPolicyVerdict;
-(function (AiRemediationCommandPolicyVerdict) {
-    /*
-     * Matched the rule's operator-authored allowlist and passed the
-     * structural chain guard — eligible for FullAuto inline execution.
-     */
-    AiRemediationCommandPolicyVerdict["AutoApproved"] = "AutoApproved";
-    // Not denylisted, but a human must approve before it runs.
-    AiRemediationCommandPolicyVerdict["RequiresApproval"] = "RequiresApproval";
-    /*
-     * Matched the hard denylist. Denied commands are never stored in a plan —
-     * the verdict exists so policy evaluation has a complete result type.
-     */
-    AiRemediationCommandPolicyVerdict["Denied"] = "Denied";
-})(AiRemediationCommandPolicyVerdict || (AiRemediationCommandPolicyVerdict = {}));
 export var AiRemediationCommandExecutionStatus;
 (function (AiRemediationCommandExecutionStatus) {
     AiRemediationCommandExecutionStatus["Pending"] = "Pending";
@@ -99,7 +101,6 @@ export function getRollbackCommandStepId(command) {
 }
 // Hard caps — enforced at plan acceptance, not just in the prompt.
 export const MAX_PLAN_COMMANDS = 5;
-export const MAX_COMMAND_LENGTH_CHARS = 2000;
 export const MIN_COMMAND_TIMEOUT_MS = 1000;
 export const MAX_COMMAND_TIMEOUT_MS = 5 * 60 * 1000;
 export const DEFAULT_COMMAND_TIMEOUT_MS = 60 * 1000;
@@ -141,6 +142,45 @@ export const KUBECTL_AUTOMATIC_MODE_SUMMARY = getKubectlAutomaticModeSummary({ a
  */
 export const KUBECTL_BYPASS_MODE_SUMMARY = "Bypass approval: AI does not ask. Every change the policy allows — safe AND riskier — runs on its own, follow-up rounds included, except for what always needs a human.";
 export const KUBECTL_EVERY_MODE_LIMITS_SUMMARY = `In every mode, Bypass approval included: ${KUBECTL_NEVER_RUNS_SUMMARY}; ${KUBECTL_ALWAYS_ASKS_SUMMARY}; the cluster's in-cluster Runner never changes its own namespace, nor a namespace outside the ones its chart lets it change, nor nodes when its chart turned node operations off; and an unattended run becomes a proposal when the hourly per-cluster circuit breaker trips or another unattended round already holds the cluster.`;
+/*
+ * The resource command tiers and the unattended resource modes in the words
+ * every resource remediation prompt, tool description and feed item uses —
+ * for the Docker and Podman hosts, Docker Swarm, Proxmox, VMware and Ceph
+ * clusters, database servers and hosts reached through their resource AI
+ * agents. They restate the ResourceCommandTier and ResourceAiRemediationMode
+ * doc comments in Types/ResourceAiAgent/ResourceAiAccess and must keep
+ * matching them — and the resource command policy (ResourceCommandPolicy),
+ * which is what actually decides. What each kind of resource accepts is its
+ * tool policy's own guide (ResourceCommandPolicy.getWriteCommandGuide); these
+ * are the rules every kind shares. One copy, so a prompt can never describe
+ * a tier the policy no longer has.
+ */
+// SafeWrite: what an Automatic resource runs without a human.
+export const RESOURCE_SAFE_CHANGES_SUMMARY = "a reversible change to exactly ONE named object — restart or start one container, a rolling restart of one service, start one VM, restart one unit, cancel one query — never several objects at once";
+// RiskyWrite: needs a human unless the allowlist names it or approvals are bypassed.
+export const RESOURCE_RISKIER_CHANGES_SUMMARY = "a change that can take something down or alter what runs — stop, kill or pause a container, update limits, scale a service to zero, shut down, power off or reset a VM, mark an OSD out, stop a unit, terminate a session — and a change to several objects at once";
+/*
+ * Asks a human whatever the resource's mode, allowlist included: what the
+ * resource command policy marks requiresHuman (the canonical mode text in
+ * ResourceAiAccess).
+ */
+export const RESOURCE_ALWAYS_ASKS_SUMMARY = "a change the resource's command policy marks as always needing a human (draining a Swarm node, migrating a VM, putting an ESXi host into maintenance, killing a process on a host, ...) always needs a human, in every mode — Bypass approval and the allowlist included";
+// Denied: never runs, whoever approves it.
+export const RESOURCE_NEVER_RUNS_SUMMARY = "destructive commands never run, even with approval: exec, run, rm, prune, deleting or destroying anything, anything that reads or changes credentials, anything the resource's command policy does not know, and anything written as a shell line (pipes, redirects, ;, &&, $( ), sudo)";
+// How the resource's allowlist is read.
+export const RESOURCE_ALLOWLIST_SUMMARY = "the resource's command allowlist is matched word by word: a pattern must have exactly as many words as the command, a * stands for exactly one whole word (never part of one), and every other word must be spelled exactly as the command spells it";
+/*
+ * The every-mode clause about unattended resource runs (the resource
+ * sibling of ClusterAccessContext's UNATTENDED_ROUND_BECOMES_PROPOSAL_SUMMARY).
+ */
+export const RESOURCE_UNATTENDED_ROUND_BECOMES_PROPOSAL_SUMMARY = "an unattended run becomes a proposal when the hourly per-resource circuit breaker trips or another unattended round already holds the resource";
+export const RESOURCE_AUTOMATIC_MODE_SUMMARY = `Automatic: safe changes run without a human (${RESOURCE_SAFE_CHANGES_SUMMARY}). A riskier change (${RESOURCE_RISKIER_CHANGES_SUMMARY}) never runs without one: when the round could only find riskier fixes it ends by proposing exactly those for one-click approval; when it also ran safe fixes, a riskier fix is proposed only if verification shows the safe ones did not recover the signal (the follow-up round, which asks). Shapes on the resource's command allowlist run on their own.`;
+/*
+ * Interpolated into prompts and feed copy on its own, so it names the
+ * exceptions instead of pointing at a list "below".
+ */
+export const RESOURCE_BYPASS_MODE_SUMMARY = "Bypass approval: AI does not ask. Every change the policy allows — safe AND riskier — runs on its own, follow-up rounds included, except for what always needs a human.";
+export const RESOURCE_EVERY_MODE_LIMITS_SUMMARY = `In every mode, Bypass approval included: ${RESOURCE_NEVER_RUNS_SUMMARY}; ${RESOURCE_ALWAYS_ASKS_SUMMARY}; the resource's AI agent changes nothing unless it was started with ${RESOURCE_AI_ALLOW_WRITES_ENV}=true, never changes its own protected targets (itself and what it runs in), and with ${RESOURCE_AI_WRITE_TARGETS_ENV} set changes only the targets it names; and ${RESOURCE_UNATTENDED_ROUND_BECOMES_PROPOSAL_SUMMARY}.`;
 export class AiRemediationCommandPlanUtil {
     /*
      * Parse a jsonb column value back into a typed plan. Fail-closed: any
@@ -185,6 +225,19 @@ export class AiRemediationCommandPlanUtil {
                     !obj["kubernetesClusterId"].trim())) {
                 return null;
             }
+            /*
+             * A ResourceCommand step names its resource by type and id, runs
+             * through the resource's AI agent (runnerId holds the ResourceAiAgent
+             * id) and never carries a credential or a cluster. Anything else is a
+             * plan this build cannot execute safely, so the whole plan is refused.
+             */
+            let resourceFields = null;
+            if (stepType === RunbookStepType.ResourceCommand) {
+                resourceFields = AiRemediationCommandPlanUtil.parseResourceFields(obj);
+                if (!resourceFields) {
+                    return null;
+                }
+            }
             const kubectlTierRaw = String(obj["kubectlTier"] || "");
             const kubectlTier = Object.values(KubectlCommandTier).includes(kubectlTierRaw)
                 ? kubectlTierRaw
@@ -199,43 +252,27 @@ export class AiRemediationCommandPlanUtil {
             const timeoutInMs = typeof timeoutRaw === "number" && Number.isFinite(timeoutRaw)
                 ? Math.min(MAX_COMMAND_TIMEOUT_MS, Math.max(MIN_COMMAND_TIMEOUT_MS, Math.floor(timeoutRaw)))
                 : DEFAULT_COMMAND_TIMEOUT_MS;
-            commands.push({
-                sequence: typeof obj["sequence"] === "number"
+            commands.push(Object.assign(Object.assign({ sequence: typeof obj["sequence"] === "number"
                     ? obj["sequence"]
-                    : commands.length + 1,
-                stepType: stepType,
-                runnerId: runnerId,
-                runnerNameSnapshot: typeof obj["runnerNameSnapshot"] === "string"
+                    : commands.length + 1, stepType: stepType, runnerId: runnerId, runnerNameSnapshot: typeof obj["runnerNameSnapshot"] === "string"
                     ? obj["runnerNameSnapshot"]
-                    : "Runner",
-                credentialId: typeof obj["credentialId"] === "string"
+                    : (resourceFields === null || resourceFields === void 0 ? void 0 : resourceFields.resourceType)
+                        ? AI_RESOURCE_TYPE_INFO[resourceFields.resourceType]
+                            .agentDisplayName
+                        : "Runner", credentialId: typeof obj["credentialId"] === "string"
                     ? obj["credentialId"]
-                    : undefined,
-                credentialNameSnapshot: typeof obj["credentialNameSnapshot"] === "string"
+                    : undefined, credentialNameSnapshot: typeof obj["credentialNameSnapshot"] === "string"
                     ? obj["credentialNameSnapshot"]
-                    : undefined,
-                kubernetesClusterId: typeof obj["kubernetesClusterId"] === "string"
+                    : undefined, kubernetesClusterId: typeof obj["kubernetesClusterId"] === "string"
                     ? obj["kubernetesClusterId"]
-                    : undefined,
-                kubernetesClusterNameSnapshot: typeof obj["kubernetesClusterNameSnapshot"] === "string"
+                    : undefined, kubernetesClusterNameSnapshot: typeof obj["kubernetesClusterNameSnapshot"] === "string"
                     ? obj["kubernetesClusterNameSnapshot"]
-                    : undefined,
-                kubectlTier,
-                command: command,
-                timeoutInMs: timeoutInMs,
-                rationale: typeof obj["rationale"] === "string" ? obj["rationale"] : "",
-                expectedEffect: typeof obj["expectedEffect"] === "string"
+                    : undefined, kubectlTier }, (resourceFields || {})), { command: command, timeoutInMs: timeoutInMs, rationale: typeof obj["rationale"] === "string" ? obj["rationale"] : "", expectedEffect: typeof obj["expectedEffect"] === "string"
                     ? obj["expectedEffect"]
-                    : "",
-                rollbackCommand: typeof obj["rollbackCommand"] === "string" &&
+                    : "", rollbackCommand: typeof obj["rollbackCommand"] === "string" &&
                     obj["rollbackCommand"].trim()
                     ? obj["rollbackCommand"]
-                    : undefined,
-                policyVerdict: verdict,
-                wasAutoExecuted: obj["wasAutoExecuted"] === true,
-                execution: AiRemediationCommandPlanUtil.parseExecutionState(obj["execution"]),
-                rollbackExecution: AiRemediationCommandPlanUtil.parseExecutionState(obj["rollbackExecution"]),
-            });
+                    : undefined, policyVerdict: verdict, wasAutoExecuted: obj["wasAutoExecuted"] === true, execution: AiRemediationCommandPlanUtil.parseExecutionState(obj["execution"]), rollbackExecution: AiRemediationCommandPlanUtil.parseExecutionState(obj["rollbackExecution"]) }));
         }
         // Execution order must be unambiguous.
         commands.sort((a, b) => {
@@ -262,6 +299,50 @@ export class AiRemediationCommandPlanUtil {
         }
         return plan;
     }
+    /*
+     * The resource fields of a stored ResourceCommand step, or null when the
+     * step must not be trusted: an unknown resourceType, a blank resourceId,
+     * any credential or cluster field, or a tier that is Denied or not a
+     * tier at all.
+     */
+    static parseResourceFields(obj) {
+        const resourceType = obj["resourceType"];
+        if (!isAiResourceType(resourceType)) {
+            return null;
+        }
+        const resourceId = obj["resourceId"];
+        if (typeof resourceId !== "string" || !resourceId.trim()) {
+            return null;
+        }
+        for (const field of [
+            "credentialId",
+            "credentialNameSnapshot",
+            "credential",
+            "kubernetesClusterId",
+        ]) {
+            if (obj[field] !== undefined && obj[field] !== null) {
+                return null;
+            }
+        }
+        const tierRaw = obj["resourceCommandTier"];
+        let resourceCommandTier = undefined;
+        if (tierRaw !== undefined && tierRaw !== null && tierRaw !== "") {
+            if (typeof tierRaw !== "string" ||
+                !Object.values(ResourceCommandTier).includes(tierRaw) ||
+                tierRaw === ResourceCommandTier.Denied) {
+                return null;
+            }
+            resourceCommandTier = tierRaw;
+        }
+        return {
+            resourceType,
+            resourceId,
+            resourceNameSnapshot: typeof obj["resourceNameSnapshot"] === "string"
+                ? obj["resourceNameSnapshot"]
+                : undefined,
+            resourceCommandTier,
+        };
+    }
     static toJSON(plan) {
         return JSON.parse(JSON.stringify(plan));
     }

package/build/dist/Types/AutoRemediation/AiRemediationCommandPlan.js.map

@@ -1 +1 @@
-{"version":3,"file":"AiRemediationCommandPlan.js","sourceRoot":"","sources":["../../../../Types/AutoRemediation/AiRemediationCommandPlan.ts"],"names":[],"mappings":"AAAA,OAAO,eAAe,MAAM,4BAA4B,CAAC;AAEzD,OAAO,EACL,kBAAkB,EAClB,+BAA+B,GAChC,MAAM,yCAAyC,CAAC;AAEjD;;;;;;;GAOG;AAEH;;;;;GAKG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAA2B;IAC3D,eAAe,CAAC,IAAI;IACpB,eAAe,CAAC,GAAG;IACnB,eAAe,CAAC,OAAO;CACxB,CAAC;AAEF,MAAM,CAAN,IAAY,iCAaX;AAbD,WAAY,iCAAiC;IAC3C;;;OAGG;IACH,kEAA6B,CAAA;IAC7B,2DAA2D;IAC3D,0EAAqC,CAAA;IACrC;;;OAGG;IACH,sDAAiB,CAAA;AACnB,CAAC,EAbW,iCAAiC,KAAjC,iCAAiC,QAa5C;AAED,MAAM,CAAN,IAAY,mCAYX;AAZD,WAAY,mCAAmC;IAC7C,0DAAmB,CAAA;IACnB,0DAAmB,CAAA;IACnB,8DAAuB,CAAA;IACvB,wDAAiB,CAAA;IACjB;;;;;OAKG;IACH,0DAAmB,CAAA;AACrB,CAAC,EAZW,mCAAmC,KAAnC,mCAAmC,QAY9C;AAED,MAAM,CAAN,IAAY,gCAKX;AALD,WAAY,gCAAgC;IAC1C,6DAAyB,CAAA;IACzB,uDAAmB,CAAA;IACnB,2DAAuB,CAAA;IACvB,qDAAiB,CAAA;AACnB,CAAC,EALW,gCAAgC,KAAhC,gCAAgC,QAK3C;AAED,MAAM,CAAN,IAAY,2BAMX;AAND,WAAY,2BAA2B;IACrC,4DAA6B,CAAA;IAC7B,sDAAuB,CAAA;IACvB,gDAAiB,CAAA;IACjB,kDAAkD;IAClD,8DAA+B,CAAA;AACjC,CAAC,EANW,2BAA2B,KAA3B,2BAA2B,QAMtC;AAoED;;;GAGG;AACH,MAAM,UAAU,+BAA+B,CAC7C,MAAuD;IAEvD,OAAO,CACL,MAAM,KAAK,mCAAmC,CAAC,SAAS;QACxD,MAAM,KAAK,mCAAmC,CAAC,MAAM;QACrD,MAAM,KAAK,mCAAmC,CAAC,OAAO,CACvD,CAAC;AACJ,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAW,aAAa,CAAC;AACnE,MAAM,CAAC,MAAM,+BAA+B,GAAW,cAAc,CAAC;AACtE,MAAM,CAAC,MAAM,+BAA+B,GAAW,cAAc,CAAC;AAEtE;;;;GAIG;AACH,MAAM,UAAU,uBAAuB,CACrC,OAAmE;IAEnE,OAAO,GACL,OAAO,CAAC,eAAe,KAAK,IAAI;QAC9B,CAAC,CAAC,6BAA6B;QAC/B,CAAC,CAAC,+BACN,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC;AACxB,CAAC;AAED,MAAM,UAAU,wBAAwB,CACtC,OAA+C;IAE/C,OAAO,GAAG,+BAA+B,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC;AACjE,CAAC;AAED,mEAAmE;AACnE,MAAM,CAAC,MAAM,iBAAiB,GAAW,CAAC,CAAC;AAC3C,MAAM,CAAC,MAAM,wBAAwB,GAAW,IAAI,CAAC;AACrD,MAAM,CAAC,MAAM,sBAAsB,GAAW,IAAI,CAAC;AACnD,MAAM,CAAC,MAAM,sBAAsB,GAAW,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;AAC5D,MAAM,CAAC,MAAM,0BAA0B,GAAW,EAAE,GAAG,IAAI,CAAC;AAuB5D,6DAA6D;AAC7D,MAAM,UAAU,4BAA4B,CAC1C,OAAoC;IAEpC,OAAO,kIACL,OAAO,CAAC,mBAAmB,CAAC,CAAC,CAAC,+BAA+B,CAAC,CAAC,CAAC,EAClE,2LAA2L,CAAC;AAC9L,CAAC;AAED,qFAAqF;AACrF,MAAM,UAAU,+BAA+B,CAC7C,OAAoC;IAEpC,OAAO,mCACL,OAAO,CAAC,mBAAmB,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,EACnD,oIAAoI,CAAC;AACvI,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,2BAA2B,CACzC,OAAoC;IAEpC,OAAO,qCAAqC,+BAA+B,CAAC,IAAI,CAC9E,IAAI,CACL,IACC,OAAO,CAAC,mBAAmB;QACzB,CAAC,CAAC,gEAAgE;QAClE,CAAC,CAAC,eACN,sEAAsE,CAAC;AACzE,CAAC;AAED,MAAM,CAAC,MAAM,4BAA4B,GACvC,4BAA4B,CAAC,EAAE,mBAAmB,EAAE,IAAI,EAAE,CAAC,CAAC;AAE9D,MAAM,CAAC,MAAM,+BAA+B,GAC1C,+BAA+B,CAAC,EAAE,mBAAmB,EAAE,IAAI,EAAE,CAAC,CAAC;AAEjE,MAAM,CAAC,MAAM,2BAA2B,GAAW,2BAA2B,CAAC;IAC7E,mBAAmB,EAAE,IAAI;CAC1B,CAAC,CAAC;AAEH,2CAA2C;AAC3C,MAAM,CAAC,MAAM,0BAA0B,GACrC,2WAA2W,CAAC;AAE9W,uCAAuC;AACvC,MAAM,CAAC,MAAM,yBAAyB,GACpC,8MAA8M,CAAC;AAEjN,MAAM,UAAU,8BAA8B,CAC5C,OAAoC;IAEpC,OAAO,gDAAgD,4BAA4B,CACjF,OAAO,CACR,wBAAwB,+BAA+B,CACtD,OAAO,CACR,6VAA6V,CAAC;AACjW,CAAC;AAED,MAAM,CAAC,MAAM,8BAA8B,GACzC,8BAA8B,CAAC,EAAE,mBAAmB,EAAE,IAAI,EAAE,CAAC,CAAC;AAEhE;;;GAGG;AACH,MAAM,CAAC,MAAM,2BAA2B,GACtC,yKAAyK,CAAC;AAE5K,MAAM,CAAC,MAAM,iCAAiC,GAAW,4CAA4C,0BAA0B,KAAK,2BAA2B,sUAAsU,CAAC;AAEte,MAAM,OAAO,4BAA4B;IACvC;;;;OAIG;IACI,MAAM,CAAC,KAAK,CACjB,IAAmC;QAEnC,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;YACtC,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,WAAW,GAAY,IAAI,CAAC,UAAU,CAAC,CAAC;QAC9C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC5D,OAAO,IAAI,CAAC;QACd,CAAC;QAED,IAAI,WAAW,CAAC,MAAM,GAAG,iBAAiB,EAAE,CAAC;YAC3C,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,QAAQ,GAAgC,EAAE,CAAC;QAEjD,KAAK,MAAM,IAAI,IAAI,WAAW,EAAE,CAAC;YAC/B,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACtC,OAAO,IAAI,CAAC;YACd,CAAC;YACD,MAAM,GAAG,GAAe,IAAkB,CAAC;YAE3C,MAAM,QAAQ,GAAW,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC;YACvD,IAAI,CAAC,qBAAqB,CAAC,QAAQ,CAAC,QAA2B,CAAC,EAAE,CAAC;gBACjE,OAAO,IAAI,CAAC;YACd,CAAC;YAED,MAAM,OAAO,GACX,OAAO,GAAG,CAAC,SAAS,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3D,MAAM,QAAQ,GACZ,OAAO,GAAG,CAAC,UAAU,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7D,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC;gBACxC,OAAO,IAAI,CAAC;YACd,CAAC;YAED,IAAI,OAAO,CAAC,MAAM,GAAG,wBAAwB,EAAE,CAAC;gBAC9C,OAAO,IAAI,CAAC;YACd,CAAC;YAED,IACE,QAAQ,KAAK,eAAe,CAAC,GAAG;gBAChC,CAAC,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,QAAQ,IAAI,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,IAAI,EAAE,CAAC,EACxE,CAAC;gBACD,OAAO,IAAI,CAAC;YACd,CAAC;YAED,IACE,QAAQ,KAAK,eAAe,CAAC,OAAO;gBACpC,CAAC,OAAO,GAAG,CAAC,qBAAqB,CAAC,KAAK,QAAQ;oBAC7C,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC,IAAI,EAAE,CAAC,EACrC,CAAC;gBACD,OAAO,IAAI,CAAC;YACd,CAAC;YAED,MAAM,cAAc,GAAW,MAAM,CAAC,GAAG,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC,CAAC;YAChE,MAAM,WAAW,GAAmC,MAAM,CAAC,MAAM,CAC/D,kBAAkB,CACnB,CAAC,QAAQ,CAAC,cAAoC,CAAC;gBAC9C,CAAC,CAAE,cAAqC;gBACxC,CAAC,CAAC,SAAS,CAAC;YAEd,MAAM,OAAO,GAAW,MAAM,CAAC,GAAG,CAAC,eAAe,CAAC,IAAI,EAAE,CAAC,CAAC;YAC3D,IACE,OAAO,KAAK,iCAAiC,CAAC,YAAY;gBAC1D,OAAO,KAAK,iCAAiC,CAAC,gBAAgB,EAC9D,CAAC;gBACD,+CAA+C;gBAC/C,OAAO,IAAI,CAAC;YACd,CAAC;YAED,MAAM,UAAU,GAAY,GAAG,CAAC,aAAa,CAAC,CAAC;YAC/C,MAAM,WAAW,GACf,OAAO,UAAU,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC;gBAC3D,CAAC,CAAC,IAAI,CAAC,GAAG,CACN,sBAAsB,EACtB,IAAI,CAAC,GAAG,CAAC,sBAAsB,EAAE,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CACzD;gBACH,CAAC,CAAC,0BAA0B,CAAC;YAEjC,QAAQ,CAAC,IAAI,CAAC;gBACZ,QAAQ,EACN,OAAO,GAAG,CAAC,UAAU,CAAC,KAAK,QAAQ;oBACjC,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC;oBACjB,CAAC,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC;gBACzB,QAAQ,EAAE,QAA2B;gBACrC,QAAQ,EAAE,QAAQ;gBAClB,kBAAkB,EAChB,OAAO,GAAG,CAAC,oBAAoB,CAAC,KAAK,QAAQ;oBAC3C,CAAC,CAAC,GAAG,CAAC,oBAAoB,CAAC;oBAC3B,CAAC,CAAC,QAAQ;gBACd,YAAY,EACV,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,QAAQ;oBACrC,CAAC,CAAC,GAAG,CAAC,cAAc,CAAC;oBACrB,CAAC,CAAC,SAAS;gBACf,sBAAsB,EACpB,OAAO,GAAG,CAAC,wBAAwB,CAAC,KAAK,QAAQ;oBAC/C,CAAC,CAAC,GAAG,CAAC,wBAAwB,CAAC;oBAC/B,CAAC,CAAC,SAAS;gBACf,mBAAmB,EACjB,OAAO,GAAG,CAAC,qBAAqB,CAAC,KAAK,QAAQ;oBAC5C,CAAC,CAAC,GAAG,CAAC,qBAAqB,CAAC;oBAC5B,CAAC,CAAC,SAAS;gBACf,6BAA6B,EAC3B,OAAO,GAAG,CAAC,+BAA+B,CAAC,KAAK,QAAQ;oBACtD,CAAC,CAAC,GAAG,CAAC,+BAA+B,CAAC;oBACtC,CAAC,CAAC,SAAS;gBACf,WAAW;gBACX,OAAO,EAAE,OAAO;gBAChB,WAAW,EAAE,WAAW;gBACxB,SAAS,EAAE,OAAO,GAAG,CAAC,WAAW,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,EAAE;gBACvE,cAAc,EACZ,OAAO,GAAG,CAAC,gBAAgB,CAAC,KAAK,QAAQ;oBACvC,CAAC,CAAC,GAAG,CAAC,gBAAgB,CAAC;oBACvB,CAAC,CAAC,EAAE;gBACR,eAAe,EACb,OAAO,GAAG,CAAC,iBAAiB,CAAC,KAAK,QAAQ;oBAC1C,GAAG,CAAC,iBAAiB,CAAC,CAAC,IAAI,EAAE;oBAC3B,CAAC,CAAC,GAAG,CAAC,iBAAiB,CAAC;oBACxB,CAAC,CAAC,SAAS;gBACf,aAAa,EAAE,OAA4C;gBAC3D,eAAe,EAAE,GAAG,CAAC,iBAAiB,CAAC,KAAK,IAAI;gBAChD,SAAS,EAAE,4BAA4B,CAAC,mBAAmB,CACzD,GAAG,CAAC,WAAW,CAAC,CACjB;gBACD,iBAAiB,EAAE,4BAA4B,CAAC,mBAAmB,CACjE,GAAG,CAAC,mBAAmB,CAAC,CACzB;aACF,CAAC,CAAC;QACL,CAAC;QAED,uCAAuC;QACvC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAuB,EAAE,CAAuB,EAAE,EAAE;YACjE,OAAO,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC,QAAQ,CAAC;QACjC,CAAC,CAAC,CAAC;QAEH,MAAM,IAAI,GAA6B,EAAE,QAAQ,EAAE,CAAC;QAEpD,MAAM,eAAe,GAAW,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,IAAI,EAAE,CAAC,CAAC;QACtE,IACE,MAAM,CAAC,MAAM,CAAC,gCAAgC,CAAC,CAAC,QAAQ,CACtD,eAAmD,CACpD,EACD,CAAC;YACD,IAAI,CAAC,eAAe;gBAClB,eAAmD,CAAC;QACxD,CAAC;QACD,IAAI,OAAO,IAAI,CAAC,oBAAoB,CAAC,KAAK,QAAQ,EAAE,CAAC;YACnD,IAAI,CAAC,kBAAkB,GAAG,IAAI,CAAC,oBAAoB,CAAC,CAAC;QACvD,CAAC;QACD,IAAI,OAAO,IAAI,CAAC,sBAAsB,CAAC,KAAK,QAAQ,EAAE,CAAC;YACrD,IAAI,CAAC,oBAAoB,GAAG,IAAI,CAAC,sBAAsB,CAAC,CAAC;QAC3D,CAAC;QACD,MAAM,cAAc,GAAW,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,IAAI,EAAE,CAAC,CAAC;QACpE,IACE,MAAM,CAAC,MAAM,CAAC,2BAA2B,CAAC,CAAC,QAAQ,CACjD,cAA6C,CAC9C,EACD,CAAC;YACD,IAAI,CAAC,cAAc,GAAG,cAA6C,CAAC;QACtE,CAAC;QACD,IAAI,OAAO,IAAI,CAAC,qBAAqB,CAAC,KAAK,QAAQ,EAAE,CAAC;YACpD,IAAI,CAAC,mBAAmB,GAAG,IAAI,CAAC,qBAAqB,CAAC,CAAC;QACzD,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAEM,MAAM,CAAC,MAAM,CAAC,IAA8B;QACjD,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAe,CAAC;IACxD,CAAC;IAEO,MAAM,CAAC,mBAAmB,CAChC,KAAc;QAEd,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YACxC,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,MAAM,GAAG,GAAe,KAAmB,CAAC;QAC5C,MAAM,MAAM,GAAW,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;QACnD,IACE,CAAC,MAAM,CAAC,MAAM,CAAC,mCAAmC,CAAC,CAAC,QAAQ,CAC1D,MAA6C,CAC9C,EACD,CAAC;YACD,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,OAAO;YACL,MAAM,EAAE,MAA6C;YACrD,WAAW,EACT,OAAO,GAAG,CAAC,aAAa,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,SAAS;YACzE,MAAM,EAAE,OAAO,GAAG,CAAC,QAAQ,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS;YACrE,QAAQ,EACN,OAAO,GAAG,CAAC,UAAU,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS;YACnE,YAAY,EACV,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,QAAQ;gBACrC,CAAC,CAAC,GAAG,CAAC,cAAc,CAAC;gBACrB,CAAC,CAAC,SAAS;YACf,SAAS,EACP,OAAO,GAAG,CAAC,WAAW,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,SAAS;YACrE,WAAW,EACT,OAAO,GAAG,CAAC,aAAa,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,SAAS;SAC1E,CAAC;IACJ,CAAC;CACF"}
+{"version":3,"file":"AiRemediationCommandPlan.js","sourceRoot":"","sources":["../../../../Types/AutoRemediation/AiRemediationCommandPlan.ts"],"names":[],"mappings":"AAAA,OAAO,eAAe,MAAM,4BAA4B,CAAC;AAEzD,OAAO,EACL,kBAAkB,EAClB,+BAA+B,GAChC,MAAM,yCAAyC,CAAC;AACjD,OAAO,EACL,iCAAiC,EACjC,wBAAwB,GACzB,MAAM,qCAAqC,CAAC;AAC7C,OAAuB,EACrB,qBAAqB,EACrB,gBAAgB,GACjB,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EACL,4BAA4B,EAC5B,6BAA6B,EAC7B,mBAAmB,GACpB,MAAM,qCAAqC,CAAC;AAE7C;;;;;;;GAOG;AACH,OAAO,EAAE,iCAAiC,EAAE,wBAAwB,EAAE,CAAC;AAEvE;;;;;;;GAOG;AAEH;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAA2B;IAC3D,eAAe,CAAC,IAAI;IACpB,eAAe,CAAC,GAAG;IACnB,eAAe,CAAC,OAAO;IACvB,eAAe,CAAC,eAAe;CAChC,CAAC;AAEF,MAAM,CAAN,IAAY,mCAYX;AAZD,WAAY,mCAAmC;IAC7C,0DAAmB,CAAA;IACnB,0DAAmB,CAAA;IACnB,8DAAuB,CAAA;IACvB,wDAAiB,CAAA;IACjB;;;;;OAKG;IACH,0DAAmB,CAAA;AACrB,CAAC,EAZW,mCAAmC,KAAnC,mCAAmC,QAY9C;AAED,MAAM,CAAN,IAAY,gCAKX;AALD,WAAY,gCAAgC;IAC1C,6DAAyB,CAAA;IACzB,uDAAmB,CAAA;IACnB,2DAAuB,CAAA;IACvB,qDAAiB,CAAA;AACnB,CAAC,EALW,gCAAgC,KAAhC,gCAAgC,QAK3C;AAED,MAAM,CAAN,IAAY,2BAMX;AAND,WAAY,2BAA2B;IACrC,4DAA6B,CAAA;IAC7B,sDAAuB,CAAA;IACvB,gDAAiB,CAAA;IACjB,kDAAkD;IAClD,8DAA+B,CAAA;AACjC,CAAC,EANW,2BAA2B,KAA3B,2BAA2B,QAMtC;AAuFD;;;GAGG;AACH,MAAM,UAAU,+BAA+B,CAC7C,MAAuD;IAEvD,OAAO,CACL,MAAM,KAAK,mCAAmC,CAAC,SAAS;QACxD,MAAM,KAAK,mCAAmC,CAAC,MAAM;QACrD,MAAM,KAAK,mCAAmC,CAAC,OAAO,CACvD,CAAC;AACJ,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAW,aAAa,CAAC;AACnE,MAAM,CAAC,MAAM,+BAA+B,GAAW,cAAc,CAAC;AACtE,MAAM,CAAC,MAAM,+BAA+B,GAAW,cAAc,CAAC;AAEtE;;;;GAIG;AACH,MAAM,UAAU,uBAAuB,CACrC,OAAmE;IAEnE,OAAO,GACL,OAAO,CAAC,eAAe,KAAK,IAAI;QAC9B,CAAC,CAAC,6BAA6B;QAC/B,CAAC,CAAC,+BACN,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC;AACxB,CAAC;AAED,MAAM,UAAU,wBAAwB,CACtC,OAA+C;IAE/C,OAAO,GAAG,+BAA+B,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC;AACjE,CAAC;AAED,mEAAmE;AACnE,MAAM,CAAC,MAAM,iBAAiB,GAAW,CAAC,CAAC;AAC3C,MAAM,CAAC,MAAM,sBAAsB,GAAW,IAAI,CAAC;AACnD,MAAM,CAAC,MAAM,sBAAsB,GAAW,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;AAC5D,MAAM,CAAC,MAAM,0BAA0B,GAAW,EAAE,GAAG,IAAI,CAAC;AAuB5D,6DAA6D;AAC7D,MAAM,UAAU,4BAA4B,CAC1C,OAAoC;IAEpC,OAAO,kIACL,OAAO,CAAC,mBAAmB,CAAC,CAAC,CAAC,+BAA+B,CAAC,CAAC,CAAC,EAClE,2LAA2L,CAAC;AAC9L,CAAC;AAED,qFAAqF;AACrF,MAAM,UAAU,+BAA+B,CAC7C,OAAoC;IAEpC,OAAO,mCACL,OAAO,CAAC,mBAAmB,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,EACnD,oIAAoI,CAAC;AACvI,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,2BAA2B,CACzC,OAAoC;IAEpC,OAAO,qCAAqC,+BAA+B,CAAC,IAAI,CAC9E,IAAI,CACL,IACC,OAAO,CAAC,mBAAmB;QACzB,CAAC,CAAC,gEAAgE;QAClE,CAAC,CAAC,eACN,sEAAsE,CAAC;AACzE,CAAC;AAED,MAAM,CAAC,MAAM,4BAA4B,GACvC,4BAA4B,CAAC,EAAE,mBAAmB,EAAE,IAAI,EAAE,CAAC,CAAC;AAE9D,MAAM,CAAC,MAAM,+BAA+B,GAC1C,+BAA+B,CAAC,EAAE,mBAAmB,EAAE,IAAI,EAAE,CAAC,CAAC;AAEjE,MAAM,CAAC,MAAM,2BAA2B,GAAW,2BAA2B,CAAC;IAC7E,mBAAmB,EAAE,IAAI;CAC1B,CAAC,CAAC;AAEH,2CAA2C;AAC3C,MAAM,CAAC,MAAM,0BAA0B,GACrC,2WAA2W,CAAC;AAE9W,uCAAuC;AACvC,MAAM,CAAC,MAAM,yBAAyB,GACpC,8MAA8M,CAAC;AAEjN,MAAM,UAAU,8BAA8B,CAC5C,OAAoC;IAEpC,OAAO,gDAAgD,4BAA4B,CACjF,OAAO,CACR,wBAAwB,+BAA+B,CACtD,OAAO,CACR,6VAA6V,CAAC;AACjW,CAAC;AAED,MAAM,CAAC,MAAM,8BAA8B,GACzC,8BAA8B,CAAC,EAAE,mBAAmB,EAAE,IAAI,EAAE,CAAC,CAAC;AAEhE;;;GAGG;AACH,MAAM,CAAC,MAAM,2BAA2B,GACtC,yKAAyK,CAAC;AAE5K,MAAM,CAAC,MAAM,iCAAiC,GAAW,4CAA4C,0BAA0B,KAAK,2BAA2B,sUAAsU,CAAC;AAEte;;;;;;;;;;;;GAYG;AAEH,8DAA8D;AAC9D,MAAM,CAAC,MAAM,6BAA6B,GACxC,sMAAsM,CAAC;AAEzM,qFAAqF;AACrF,MAAM,CAAC,MAAM,gCAAgC,GAC3C,qQAAqQ,CAAC;AAExQ;;;;GAIG;AACH,MAAM,CAAC,MAAM,4BAA4B,GACvC,0QAA0Q,CAAC;AAE7Q,2CAA2C;AAC3C,MAAM,CAAC,MAAM,2BAA2B,GACtC,yRAAyR,CAAC;AAE5R,wCAAwC;AACxC,MAAM,CAAC,MAAM,0BAA0B,GACrC,sPAAsP,CAAC;AAEzP;;;GAGG;AACH,MAAM,CAAC,MAAM,kDAAkD,GAC7D,gJAAgJ,CAAC;AAEnJ,MAAM,CAAC,MAAM,+BAA+B,GAAW,gDAAgD,6BAA6B,wBAAwB,gCAAgC,8VAA8V,CAAC;AAE3hB;;;GAGG;AACH,MAAM,CAAC,MAAM,4BAA4B,GACvC,yKAAyK,CAAC;AAE5K,MAAM,CAAC,MAAM,kCAAkC,GAAW,4CAA4C,2BAA2B,KAAK,4BAA4B,wEAAwE,4BAA4B,yFAAyF,6BAA6B,+CAA+C,kDAAkD,GAAG,CAAC;AAEje,MAAM,OAAO,4BAA4B;IACvC;;;;OAIG;IACI,MAAM,CAAC,KAAK,CACjB,IAAmC;QAEnC,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;YACtC,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,WAAW,GAAY,IAAI,CAAC,UAAU,CAAC,CAAC;QAC9C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC5D,OAAO,IAAI,CAAC;QACd,CAAC;QAED,IAAI,WAAW,CAAC,MAAM,GAAG,iBAAiB,EAAE,CAAC;YAC3C,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,QAAQ,GAAgC,EAAE,CAAC;QAEjD,KAAK,MAAM,IAAI,IAAI,WAAW,EAAE,CAAC;YAC/B,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACtC,OAAO,IAAI,CAAC;YACd,CAAC;YACD,MAAM,GAAG,GAAe,IAAkB,CAAC;YAE3C,MAAM,QAAQ,GAAW,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC;YACvD,IAAI,CAAC,qBAAqB,CAAC,QAAQ,CAAC,QAA2B,CAAC,EAAE,CAAC;gBACjE,OAAO,IAAI,CAAC;YACd,CAAC;YAED,MAAM,OAAO,GACX,OAAO,GAAG,CAAC,SAAS,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3D,MAAM,QAAQ,GACZ,OAAO,GAAG,CAAC,UAAU,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7D,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC;gBACxC,OAAO,IAAI,CAAC;YACd,CAAC;YAED,IAAI,OAAO,CAAC,MAAM,GAAG,wBAAwB,EAAE,CAAC;gBAC9C,OAAO,IAAI,CAAC;YACd,CAAC;YAED,IACE,QAAQ,KAAK,eAAe,CAAC,GAAG;gBAChC,CAAC,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,QAAQ,IAAI,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,IAAI,EAAE,CAAC,EACxE,CAAC;gBACD,OAAO,IAAI,CAAC;YACd,CAAC;YAED,IACE,QAAQ,KAAK,eAAe,CAAC,OAAO;gBACpC,CAAC,OAAO,GAAG,CAAC,qBAAqB,CAAC,KAAK,QAAQ;oBAC7C,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC,IAAI,EAAE,CAAC,EACrC,CAAC;gBACD,OAAO,IAAI,CAAC;YACd,CAAC;YAED;;;;;eAKG;YACH,IAAI,cAAc,GAMP,IAAI,CAAC;YAEhB,IAAI,QAAQ,KAAK,eAAe,CAAC,eAAe,EAAE,CAAC;gBACjD,cAAc,GAAG,4BAA4B,CAAC,mBAAmB,CAAC,GAAG,CAAC,CAAC;gBAEvE,IAAI,CAAC,cAAc,EAAE,CAAC;oBACpB,OAAO,IAAI,CAAC;gBACd,CAAC;YACH,CAAC;YAED,MAAM,cAAc,GAAW,MAAM,CAAC,GAAG,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC,CAAC;YAChE,MAAM,WAAW,GAAmC,MAAM,CAAC,MAAM,CAC/D,kBAAkB,CACnB,CAAC,QAAQ,CAAC,cAAoC,CAAC;gBAC9C,CAAC,CAAE,cAAqC;gBACxC,CAAC,CAAC,SAAS,CAAC;YAEd,MAAM,OAAO,GAAW,MAAM,CAAC,GAAG,CAAC,eAAe,CAAC,IAAI,EAAE,CAAC,CAAC;YAC3D,IACE,OAAO,KAAK,iCAAiC,CAAC,YAAY;gBAC1D,OAAO,KAAK,iCAAiC,CAAC,gBAAgB,EAC9D,CAAC;gBACD,+CAA+C;gBAC/C,OAAO,IAAI,CAAC;YACd,CAAC;YAED,MAAM,UAAU,GAAY,GAAG,CAAC,aAAa,CAAC,CAAC;YAC/C,MAAM,WAAW,GACf,OAAO,UAAU,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC;gBAC3D,CAAC,CAAC,IAAI,CAAC,GAAG,CACN,sBAAsB,EACtB,IAAI,CAAC,GAAG,CAAC,sBAAsB,EAAE,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CACzD;gBACH,CAAC,CAAC,0BAA0B,CAAC;YAEjC,QAAQ,CAAC,IAAI,+BACX,QAAQ,EACN,OAAO,GAAG,CAAC,UAAU,CAAC,KAAK,QAAQ;oBACjC,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC;oBACjB,CAAC,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EACzB,QAAQ,EAAE,QAA2B,EACrC,QAAQ,EAAE,QAAQ,EAClB,kBAAkB,EAChB,OAAO,GAAG,CAAC,oBAAoB,CAAC,KAAK,QAAQ;oBAC3C,CAAC,CAAC,GAAG,CAAC,oBAAoB,CAAC;oBAC3B,CAAC,CAAC,CAAA,cAAc,aAAd,cAAc,uBAAd,cAAc,CAAE,YAAY;wBAC5B,CAAC,CAAC,qBAAqB,CAAC,cAAc,CAAC,YAAY,CAAC;6BAC/C,gBAAgB;wBACrB,CAAC,CAAC,QAAQ,EAChB,YAAY,EACV,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,QAAQ;oBACrC,CAAC,CAAC,GAAG,CAAC,cAAc,CAAC;oBACrB,CAAC,CAAC,SAAS,EACf,sBAAsB,EACpB,OAAO,GAAG,CAAC,wBAAwB,CAAC,KAAK,QAAQ;oBAC/C,CAAC,CAAC,GAAG,CAAC,wBAAwB,CAAC;oBAC/B,CAAC,CAAC,SAAS,EACf,mBAAmB,EACjB,OAAO,GAAG,CAAC,qBAAqB,CAAC,KAAK,QAAQ;oBAC5C,CAAC,CAAC,GAAG,CAAC,qBAAqB,CAAC;oBAC5B,CAAC,CAAC,SAAS,EACf,6BAA6B,EAC3B,OAAO,GAAG,CAAC,+BAA+B,CAAC,KAAK,QAAQ;oBACtD,CAAC,CAAC,GAAG,CAAC,+BAA+B,CAAC;oBACtC,CAAC,CAAC,SAAS,EACf,WAAW,IACR,CAAC,cAAc,IAAI,EAAE,CAAC,KACzB,OAAO,EAAE,OAAO,EAChB,WAAW,EAAE,WAAW,EACxB,SAAS,EAAE,OAAO,GAAG,CAAC,WAAW,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,EAAE,EACvE,cAAc,EACZ,OAAO,GAAG,CAAC,gBAAgB,CAAC,KAAK,QAAQ;oBACvC,CAAC,CAAC,GAAG,CAAC,gBAAgB,CAAC;oBACvB,CAAC,CAAC,EAAE,EACR,eAAe,EACb,OAAO,GAAG,CAAC,iBAAiB,CAAC,KAAK,QAAQ;oBAC1C,GAAG,CAAC,iBAAiB,CAAC,CAAC,IAAI,EAAE;oBAC3B,CAAC,CAAC,GAAG,CAAC,iBAAiB,CAAC;oBACxB,CAAC,CAAC,SAAS,EACf,aAAa,EAAE,OAA4C,EAC3D,eAAe,EAAE,GAAG,CAAC,iBAAiB,CAAC,KAAK,IAAI,EAChD,SAAS,EAAE,4BAA4B,CAAC,mBAAmB,CACzD,GAAG,CAAC,WAAW,CAAC,CACjB,EACD,iBAAiB,EAAE,4BAA4B,CAAC,mBAAmB,CACjE,GAAG,CAAC,mBAAmB,CAAC,CACzB,IACD,CAAC;QACL,CAAC;QAED,uCAAuC;QACvC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAuB,EAAE,CAAuB,EAAE,EAAE;YACjE,OAAO,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC,QAAQ,CAAC;QACjC,CAAC,CAAC,CAAC;QAEH,MAAM,IAAI,GAA6B,EAAE,QAAQ,EAAE,CAAC;QAEpD,MAAM,eAAe,GAAW,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,IAAI,EAAE,CAAC,CAAC;QACtE,IACE,MAAM,CAAC,MAAM,CAAC,gCAAgC,CAAC,CAAC,QAAQ,CACtD,eAAmD,CACpD,EACD,CAAC;YACD,IAAI,CAAC,eAAe;gBAClB,eAAmD,CAAC;QACxD,CAAC;QACD,IAAI,OAAO,IAAI,CAAC,oBAAoB,CAAC,KAAK,QAAQ,EAAE,CAAC;YACnD,IAAI,CAAC,kBAAkB,GAAG,IAAI,CAAC,oBAAoB,CAAC,CAAC;QACvD,CAAC;QACD,IAAI,OAAO,IAAI,CAAC,sBAAsB,CAAC,KAAK,QAAQ,EAAE,CAAC;YACrD,IAAI,CAAC,oBAAoB,GAAG,IAAI,CAAC,sBAAsB,CAAC,CAAC;QAC3D,CAAC;QACD,MAAM,cAAc,GAAW,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,IAAI,EAAE,CAAC,CAAC;QACpE,IACE,MAAM,CAAC,MAAM,CAAC,2BAA2B,CAAC,CAAC,QAAQ,CACjD,cAA6C,CAC9C,EACD,CAAC;YACD,IAAI,CAAC,cAAc,GAAG,cAA6C,CAAC;QACtE,CAAC;QACD,IAAI,OAAO,IAAI,CAAC,qBAAqB,CAAC,KAAK,QAAQ,EAAE,CAAC;YACpD,IAAI,CAAC,mBAAmB,GAAG,IAAI,CAAC,qBAAqB,CAAC,CAAC;QACzD,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;;;;OAKG;IACK,MAAM,CAAC,mBAAmB,CAChC,GAAe;QAQf,MAAM,YAAY,GAAY,GAAG,CAAC,cAAc,CAAC,CAAC;QAElD,IAAI,CAAC,gBAAgB,CAAC,YAAY,CAAC,EAAE,CAAC;YACpC,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,UAAU,GAAY,GAAG,CAAC,YAAY,CAAC,CAAC;QAE9C,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,EAAE,CAAC;YACzD,OAAO,IAAI,CAAC;QACd,CAAC;QAED,KAAK,MAAM,KAAK,IAAI;YAClB,cAAc;YACd,wBAAwB;YACxB,YAAY;YACZ,qBAAqB;SACtB,EAAE,CAAC;YACF,IAAI,GAAG,CAAC,KAAK,CAAC,KAAK,SAAS,IAAI,GAAG,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC;gBACpD,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC;QAED,MAAM,OAAO,GAAY,GAAG,CAAC,qBAAqB,CAAC,CAAC;QACpD,IAAI,mBAAmB,GAAoC,SAAS,CAAC;QAErE,IAAI,OAAO,KAAK,SAAS,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,KAAK,EAAE,EAAE,CAAC;YAChE,IACE,OAAO,OAAO,KAAK,QAAQ;gBAC3B,CAAE,MAAM,CAAC,MAAM,CAAC,mBAAmB,CAAmB,CAAC,QAAQ,CAC7D,OAAO,CACR;gBACD,OAAO,KAAK,mBAAmB,CAAC,MAAM,EACtC,CAAC;gBACD,OAAO,IAAI,CAAC;YACd,CAAC;YAED,mBAAmB,GAAG,OAA8B,CAAC;QACvD,CAAC;QAED,OAAO;YACL,YAAY;YACZ,UAAU;YACV,oBAAoB,EAClB,OAAO,GAAG,CAAC,sBAAsB,CAAC,KAAK,QAAQ;gBAC7C,CAAC,CAAC,GAAG,CAAC,sBAAsB,CAAC;gBAC7B,CAAC,CAAC,SAAS;YACf,mBAAmB;SACpB,CAAC;IACJ,CAAC;IAEM,MAAM,CAAC,MAAM,CAAC,IAA8B;QACjD,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAe,CAAC;IACxD,CAAC;IAEO,MAAM,CAAC,mBAAmB,CAChC,KAAc;QAEd,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YACxC,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,MAAM,GAAG,GAAe,KAAmB,CAAC;QAC5C,MAAM,MAAM,GAAW,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;QACnD,IACE,CAAC,MAAM,CAAC,MAAM,CAAC,mCAAmC,CAAC,CAAC,QAAQ,CAC1D,MAA6C,CAC9C,EACD,CAAC;YACD,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,OAAO;YACL,MAAM,EAAE,MAA6C;YACrD,WAAW,EACT,OAAO,GAAG,CAAC,aAAa,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,SAAS;YACzE,MAAM,EAAE,OAAO,GAAG,CAAC,QAAQ,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS;YACrE,QAAQ,EACN,OAAO,GAAG,CAAC,UAAU,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS;YACnE,YAAY,EACV,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,QAAQ;gBACrC,CAAC,CAAC,GAAG,CAAC,cAAc,CAAC;gBACrB,CAAC,CAAC,SAAS;YACf,SAAS,EACP,OAAO,GAAG,CAAC,WAAW,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,SAAS;YACrE,WAAW,EACT,OAAO,GAAG,CAAC,aAAa,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,SAAS;SAC1E,CAAC;IACJ,CAAC;CACF"}

package/build/dist/Types/AutoRemediation/AiRemediationCommandPolicyVerdict.js

@@ -0,0 +1,28 @@
+/*
+ * The verdict the command policies (CommandPolicy, KubectlPolicy) give one
+ * AI-composed command, and the longest command either accepts.
+ *
+ * A leaf module with no imports on purpose: it is part of the pure policy
+ * closure that agents/KubernetesAIAgent carries a byte-identical copy of
+ * (see Tests/Utils/AiRemediation/KubernetesAiAgentPolicyCopyParity.test.ts),
+ * so it must never import anything outside that closure.
+ * AiRemediationCommandPlan re-exports both names.
+ */
+export var AiRemediationCommandPolicyVerdict;
+(function (AiRemediationCommandPolicyVerdict) {
+    /*
+     * Matched the rule's operator-authored allowlist and passed the
+     * structural chain guard — eligible for FullAuto inline execution.
+     */
+    AiRemediationCommandPolicyVerdict["AutoApproved"] = "AutoApproved";
+    // Not denylisted, but a human must approve before it runs.
+    AiRemediationCommandPolicyVerdict["RequiresApproval"] = "RequiresApproval";
+    /*
+     * Matched the hard denylist. Denied commands are never stored in a plan —
+     * the verdict exists so policy evaluation has a complete result type.
+     */
+    AiRemediationCommandPolicyVerdict["Denied"] = "Denied";
+})(AiRemediationCommandPolicyVerdict || (AiRemediationCommandPolicyVerdict = {}));
+// Hard cap — enforced at plan acceptance, not just in the prompt.
+export const MAX_COMMAND_LENGTH_CHARS = 2000;
+//# sourceMappingURL=AiRemediationCommandPolicyVerdict.js.map

package/build/dist/Types/AutoRemediation/AiRemediationCommandPolicyVerdict.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"AiRemediationCommandPolicyVerdict.js","sourceRoot":"","sources":["../../../../Types/AutoRemediation/AiRemediationCommandPolicyVerdict.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,MAAM,CAAN,IAAY,iCAaX;AAbD,WAAY,iCAAiC;IAC3C;;;OAGG;IACH,kEAA6B,CAAA;IAC7B,2DAA2D;IAC3D,0EAAqC,CAAA;IACrC;;;OAGG;IACH,sDAAiB,CAAA;AACnB,CAAC,EAbW,iCAAiC,KAAjC,iCAAiC,QAa5C;AAED,kEAAkE;AAClE,MAAM,CAAC,MAAM,wBAAwB,GAAW,IAAI,CAAC"}

package/build/dist/Types/Kubernetes/KubernetesClusterAiAccess.js

@@ -1,12 +1,18 @@
 /*
  * OneUptime AI access to a Kubernetes cluster.
  *
- * A cluster's AI page binds one Runner (in-cluster, installed by the
- * kubernetes-agent chart, or an existing Runner plus a Kubernetes
- * credential) and two switches: whether AI may run read-only kubectl during
- * investigations, and how AI may remediate. Everything here is shared by the
- * server, the Runner binary and the dashboard so the three never disagree
- * about what a mode or a tier means.
+ * AI reaches a cluster through one access target: the Kubernetes AI agent
+ * the kubernetes-agent chart installs (its own identity, never a Runner), the
+ * chart's previous in-cluster Runner, or an existing Runner plus a Kubernetes
+ * credential. Two switches decide what AI may do there: whether it may run
+ * read-only kubectl during investigations, and how it may remediate.
+ * Everything here is shared by the server, the Runner binary, the Kubernetes
+ * AI agent and the dashboard so they never disagree about what a mode or a
+ * tier means.
+ *
+ * This file has NO imports on purpose: the Kubernetes AI agent
+ * (agents/KubernetesAIAgent) carries a byte-identical copy of it and must
+ * compile without the rest of Common.
  */
 /*
  * How OneUptime AI may change a cluster once it has diagnosed a signal.
@@ -83,6 +89,16 @@ export var KubectlCommandTier;
     KubectlCommandTier["RiskyWrite"] = "RiskyWrite";
     KubectlCommandTier["Denied"] = "Denied";
 })(KubectlCommandTier || (KubectlCommandTier = {}));
+/*
+ * The kind of an access target summary, defaulting an absent kind to
+ * "runner" the way the field is documented.
+ */
+export function getKubernetesAiAccessTargetKind(runner) {
+    if (!runner) {
+        return null;
+    }
+    return runner.kind === "ai_agent" ? "ai_agent" : "runner";
+}
 // Runner rows the kubernetes-agent chart registers are named from this prefix.
 export const KUBERNETES_AGENT_RUNNER_NAME_PREFIX = "kubernetes-agent";
 export function getKubernetesAgentRunnerName(clusterIdentifier) {
@@ -107,20 +123,31 @@ export function isKubernetesAgentRunnerName(name) {
             .startsWith(`${KUBERNETES_AGENT_RUNNER_NAME_PREFIX}/`));
 }
 /*
- * The Runner is the only component that ever holds cluster credentials, so
- * the server learns the Runner's write posture from the Runner itself. A
- * Runner installed with read-only RBAC reports allowWrites=false and the
- * server then never enqueues a write for it.
+ * The in-cluster executor (the Kubernetes AI agent, or a Runner) is the only
+ * component that ever holds cluster credentials, so the server learns its
+ * write posture from the executor itself. One installed with read-only RBAC
+ * reports allowWrites=false and the server then never enqueues a write for
+ * it.
+ *
+ * parseKubernetesAgentPosture reads a BARE posture object: the body the
+ * Kubernetes AI agent sends and the KubernetesAiAgent.posture column.
+ * parseKubernetesRunnerPosture reads a Runner's hostInfo, where the same
+ * object sits under hostInfo.kubernetes. Both validate every field the same
+ * way: anything of the wrong type is dropped, never trusted.
  */
-export function parseKubernetesRunnerPosture(hostInfo) {
-    if (!hostInfo || typeof hostInfo !== "object") {
+export function parseKubernetesAgentPosture(raw) {
+    if (!raw || typeof raw !== "object") {
         return undefined;
     }
-    const kubernetes = hostInfo["kubernetes"];
-    if (!kubernetes || typeof kubernetes !== "object") {
+    return parsePostureFields(raw);
+}
+export function parseKubernetesRunnerPosture(hostInfo) {
+    if (!hostInfo || typeof hostInfo !== "object") {
         return undefined;
     }
-    const raw = kubernetes;
+    return parseKubernetesAgentPosture(hostInfo["kubernetes"]);
+}
+function parsePostureFields(raw) {
     return {
         clusterIdentifier: typeof raw["clusterIdentifier"] === "string"
             ? raw["clusterIdentifier"]
@@ -238,8 +265,37 @@ export const KUBECTL_ALLOW_WRITES_ENV = "ONEUPTIME_KUBECTL_ALLOW_WRITES";
 export const KUBECTL_WRITE_NAMESPACES_ENV = "ONEUPTIME_KUBECTL_WRITE_NAMESPACES";
 export const RUNNER_POD_NAMESPACE_ENV = "ONEUPTIME_RUNNER_POD_NAMESPACE";
 export const KUBECTL_ALLOW_NODE_OPERATIONS_ENV = "ONEUPTIME_KUBECTL_ALLOW_NODE_OPERATIONS";
+/*
+ * The Kubernetes AI agent (image KUBERNETES_AI_AGENT_IMAGE_REPOSITORY) is
+ * the chart's in-cluster kubectl executor from this release on. It reads
+ * KUBECTL_ALLOW_WRITES_ENV, KUBECTL_WRITE_NAMESPACES_ENV and
+ * KUBECTL_ALLOW_NODE_OPERATIONS_ENV with exactly the meanings above (the
+ * chart fills them from aiAgent.remediation.*), plus its own pod namespace
+ * from AI_AGENT_POD_NAMESPACE_ENV (downward API) — the namespace it never
+ * writes into, reported as posture.podNamespace.
+ */
+export const AI_AGENT_POD_NAMESPACE_ENV = "ONEUPTIME_AI_AGENT_POD_NAMESPACE";
+// The chart labels the agent's Deployment and pod `component: ai-agent`.
+export const KUBERNETES_AI_AGENT_COMPONENT = "ai-agent";
+export const KUBERNETES_AI_AGENT_IMAGE_REPOSITORY = "oneuptime/kubernetes-ai-agent";
+// How the agent is named wherever a Runner name would otherwise appear.
+export const KUBERNETES_AI_AGENT_DISPLAY_NAME = "Kubernetes AI agent";
+/*
+ * The agent heartbeats every 30 seconds; it counts as online while its last
+ * heartbeat is at most this old (the same window a Runner gets).
+ */
+export const KUBERNETES_AI_AGENT_ALIVE_WINDOW_IN_MINUTES = 5;
+// The legacy Runner refusals that clear on their own.
+export const TRANSIENT_KUBERNETES_AGENT_REGISTRATION_REFUSALS = ["previous_instance_online", "superseded_by_ai_agent"];
 // Refusals that clear without anyone doing anything; retrying is right.
 export function isTransientKubernetesAgentRegistrationRefusal(reason) {
-    return reason === "previous_instance_online";
+    return (typeof reason === "string" &&
+        TRANSIENT_KUBERNETES_AGENT_REGISTRATION_REFUSALS.includes(reason));
+}
+export const TRANSIENT_KUBERNETES_AI_AGENT_REGISTRATION_REFUSALS = ["previous_instance_online", "legacy_runner_online"];
+// Agent refusals that clear without anyone doing anything; retrying is right.
+export function isTransientKubernetesAiAgentRegistrationRefusal(reason) {
+    return (typeof reason === "string" &&
+        TRANSIENT_KUBERNETES_AI_AGENT_REGISTRATION_REFUSALS.includes(reason));
 }
 //# sourceMappingURL=KubernetesClusterAiAccess.js.map

package/build/dist/Types/Kubernetes/KubernetesClusterAiAccess.js.map

@@ -1 +1 @@
-{"version":3,"file":"KubernetesClusterAiAccess.js","sourceRoot":"","sources":["../../../../Types/Kubernetes/KubernetesClusterAiAccess.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AACH,MAAM,CAAN,IAAY,2BAKX;AALD,WAAY,2BAA2B;IACrC,oDAAqB,CAAA;IACrB,kEAAmC,CAAA;IACnC,sDAAuB,CAAA;IACvB,gEAAiC,CAAA;AACnC,CAAC,EALW,2BAA2B,KAA3B,2BAA2B,QAKtC;AAED,oEAAoE;AACpE,MAAM,CAAC,MAAM,4BAA4B,GACvC;IACE,2BAA2B,CAAC,SAAS;IACrC,2BAA2B,CAAC,cAAc;CAC3C,CAAC;AAEJ,MAAM,UAAU,2BAA2B,CACzC,IAA6C;IAE7C,OAAO,IAAI,KAAK,SAAS,IAAI,4BAA4B,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;AAC3E,CAAC;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,CAAN,IAAY,kBAKX;AALD,WAAY,kBAAkB;IAC5B,mCAAa,CAAA;IACb,6CAAuB,CAAA;IACvB,+CAAyB,CAAA;IACzB,uCAAiB,CAAA;AACnB,CAAC,EALW,kBAAkB,KAAlB,kBAAkB,QAK7B;AA0HD,+EAA+E;AAC/E,MAAM,CAAC,MAAM,mCAAmC,GAAW,kBAAkB,CAAC;AAE9E,MAAM,UAAU,4BAA4B,CAC1C,iBAAyB;IAEzB,OAAO,GAAG,mCAAmC,IAAI,iBAAiB,EAAE,CAAC;AACvE,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,2BAA2B,CAAC,IAAa;IACvD,OAAO,CACL,OAAO,IAAI,KAAK,QAAQ;QACxB,IAAI;aACD,IAAI,EAAE;aACN,WAAW,EAAE;aACb,UAAU,CAAC,GAAG,mCAAmC,GAAG,CAAC,CACzD,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,4BAA4B,CAC1C,QAAiB;IAEjB,IAAI,CAAC,QAAQ,IAAI,OAAO,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC9C,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,UAAU,GAAa,QAAoC,CAC/D,YAAY,CACb,CAAC;IAEF,IAAI,CAAC,UAAU,IAAI,OAAO,UAAU,KAAK,QAAQ,EAAE,CAAC;QAClD,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,GAAG,GAA4B,UAAqC,CAAC;IAE3E,OAAO;QACL,iBAAiB,EACf,OAAO,GAAG,CAAC,mBAAmB,CAAC,KAAK,QAAQ;YAC1C,CAAC,CAAC,GAAG,CAAC,mBAAmB,CAAC;YAC1B,CAAC,CAAC,SAAS;QACf,SAAS,EAAE,GAAG,CAAC,WAAW,CAAC,KAAK,IAAI;QACpC,WAAW,EAAE,GAAG,CAAC,aAAa,CAAC,KAAK,IAAI;QACxC,cAAc,EACZ,OAAO,GAAG,CAAC,gBAAgB,CAAC,KAAK,QAAQ;YACvC,CAAC,CAAC,GAAG,CAAC,gBAAgB,CAAC;YACvB,CAAC,CAAC,SAAS;QACf,iBAAiB,EACf,OAAO,GAAG,CAAC,mBAAmB,CAAC,KAAK,QAAQ;YAC1C,CAAC,CAAC,GAAG,CAAC,mBAAmB,CAAC;YAC1B,CAAC,CAAC,SAAS;QACf,eAAe,EAAE,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;YACpD,CAAC,CAAE,GAAG,CAAC,iBAAiB,CAAoB,CAAC,MAAM,CAC/C,CAAC,SAAkB,EAAuB,EAAE;gBAC1C,OAAO,OAAO,SAAS,KAAK,QAAQ,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC;YAC/D,CAAC,CACF;YACH,CAAC,CAAC,SAAS;QACb,YAAY,EACV,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,QAAQ,IAAI,GAAG,CAAC,cAAc,CAAC,CAAC,MAAM,GAAG,CAAC;YACvE,CAAC,CAAC,GAAG,CAAC,cAAc,CAAC;YACrB,CAAC,CAAC,SAAS;QACf,mBAAmB,EACjB,OAAO,GAAG,CAAC,qBAAqB,CAAC,KAAK,SAAS;YAC7C,CAAC,CAAC,GAAG,CAAC,qBAAqB,CAAC;YAC5B,CAAC,CAAC,SAAS;KAChB,CAAC;AACJ,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,oCAAoC,CAAC,KAAc;IACjE,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;AACrE,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,iCAAiC,CAC/C,CAAU,EACV,CAAU;IAEV,MAAM,IAAI,GAAW,oCAAoC,CAAC,CAAC,CAAC,CAAC;IAC7D,MAAM,KAAK,GAAW,oCAAoC,CAAC,CAAC,CAAC,CAAC;IAE9D,OAAO,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,IAAI,KAAK,KAAK,CAAC;AAC/D,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,8BAA8B,CAC5C,OAA4C;IAE5C,OAAO,OAAO,CACZ,CAAA,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,SAAS,MAAK,IAAI;QACzB,oCAAoC,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC,MAAM;YACpE,CAAC,CACN,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,4BAA4B,CAC1C,OAA4C,EAC5C,iBAA0B;IAE1B,OAAO,CACL,8BAA8B,CAAC,OAAO,CAAC;QACvC,iCAAiC,CAC/B,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,iBAAiB,EAC1B,iBAAiB,CAClB,CACF,CAAC;AACJ,CAAC;AAwCD,qEAAqE;AACrE,MAAM,CAAC,MAAM,sCAAsC,GAAW,CAAC,CAAC;AAChE,MAAM,CAAC,MAAM,0BAA0B,GAAW,EAAE,GAAG,IAAI,CAAC;AAC5D,MAAM,CAAC,MAAM,sBAAsB,GAAW,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;AAC5D,MAAM,CAAC,MAAM,gCAAgC,GAAW,IAAI,CAAC;AAE7D;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAA0B;IACpE,aAAa;IACb,aAAa;IACb,iBAAiB;CAClB,CAAC;AAEF,MAAM,UAAU,8BAA8B,CAAC,SAAkB;IAC/D,OAAO,CACL,OAAO,SAAS,KAAK,QAAQ;QAC7B,+BAA+B,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CACzE,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,CAAC,MAAM,wBAAwB,GACnC,gCAAgC,CAAC;AACnC,MAAM,CAAC,MAAM,4BAA4B,GACvC,oCAAoC,CAAC;AACvC,MAAM,CAAC,MAAM,wBAAwB,GACnC,gCAAgC,CAAC;AACnC,MAAM,CAAC,MAAM,iCAAiC,GAC5C,yCAAyC,CAAC;AA2B5C,wEAAwE;AACxE,MAAM,UAAU,6CAA6C,CAC3D,MAAe;IAEf,OAAO,MAAM,KAAK,0BAA0B,CAAC;AAC/C,CAAC"}
+{"version":3,"file":"KubernetesClusterAiAccess.js","sourceRoot":"","sources":["../../../../Types/Kubernetes/KubernetesClusterAiAccess.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AACH,MAAM,CAAN,IAAY,2BAKX;AALD,WAAY,2BAA2B;IACrC,oDAAqB,CAAA;IACrB,kEAAmC,CAAA;IACnC,sDAAuB,CAAA;IACvB,gEAAiC,CAAA;AACnC,CAAC,EALW,2BAA2B,KAA3B,2BAA2B,QAKtC;AAED,oEAAoE;AACpE,MAAM,CAAC,MAAM,4BAA4B,GACvC;IACE,2BAA2B,CAAC,SAAS;IACrC,2BAA2B,CAAC,cAAc;CAC3C,CAAC;AAEJ,MAAM,UAAU,2BAA2B,CACzC,IAA6C;IAE7C,OAAO,IAAI,KAAK,SAAS,IAAI,4BAA4B,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;AAC3E,CAAC;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,CAAN,IAAY,kBAKX;AALD,WAAY,kBAAkB;IAC5B,mCAAa,CAAA;IACb,6CAAuB,CAAA;IACvB,+CAAyB,CAAA;IACzB,uCAAiB,CAAA;AACnB,CAAC,EALW,kBAAkB,KAAlB,kBAAkB,QAK7B;AA8ID;;;GAGG;AACH,MAAM,UAAU,+BAA+B,CAC7C,MAGa;IAEb,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,MAAM,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC;AAC5D,CAAC;AAyFD,+EAA+E;AAC/E,MAAM,CAAC,MAAM,mCAAmC,GAAW,kBAAkB,CAAC;AAE9E,MAAM,UAAU,4BAA4B,CAC1C,iBAAyB;IAEzB,OAAO,GAAG,mCAAmC,IAAI,iBAAiB,EAAE,CAAC;AACvE,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,2BAA2B,CAAC,IAAa;IACvD,OAAO,CACL,OAAO,IAAI,KAAK,QAAQ;QACxB,IAAI;aACD,IAAI,EAAE;aACN,WAAW,EAAE;aACb,UAAU,CAAC,GAAG,mCAAmC,GAAG,CAAC,CACzD,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,2BAA2B,CACzC,GAAY;IAEZ,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;QACpC,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,OAAO,kBAAkB,CAAC,GAA8B,CAAC,CAAC;AAC5D,CAAC;AAED,MAAM,UAAU,4BAA4B,CAC1C,QAAiB;IAEjB,IAAI,CAAC,QAAQ,IAAI,OAAO,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC9C,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,OAAO,2BAA2B,CAC/B,QAAoC,CAAC,YAAY,CAAC,CACpD,CAAC;AACJ,CAAC;AAED,SAAS,kBAAkB,CACzB,GAA4B;IAE5B,OAAO;QACL,iBAAiB,EACf,OAAO,GAAG,CAAC,mBAAmB,CAAC,KAAK,QAAQ;YAC1C,CAAC,CAAC,GAAG,CAAC,mBAAmB,CAAC;YAC1B,CAAC,CAAC,SAAS;QACf,SAAS,EAAE,GAAG,CAAC,WAAW,CAAC,KAAK,IAAI;QACpC,WAAW,EAAE,GAAG,CAAC,aAAa,CAAC,KAAK,IAAI;QACxC,cAAc,EACZ,OAAO,GAAG,CAAC,gBAAgB,CAAC,KAAK,QAAQ;YACvC,CAAC,CAAC,GAAG,CAAC,gBAAgB,CAAC;YACvB,CAAC,CAAC,SAAS;QACf,iBAAiB,EACf,OAAO,GAAG,CAAC,mBAAmB,CAAC,KAAK,QAAQ;YAC1C,CAAC,CAAC,GAAG,CAAC,mBAAmB,CAAC;YAC1B,CAAC,CAAC,SAAS;QACf,eAAe,EAAE,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;YACpD,CAAC,CAAE,GAAG,CAAC,iBAAiB,CAAoB,CAAC,MAAM,CAC/C,CAAC,SAAkB,EAAuB,EAAE;gBAC1C,OAAO,OAAO,SAAS,KAAK,QAAQ,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC;YAC/D,CAAC,CACF;YACH,CAAC,CAAC,SAAS;QACb,YAAY,EACV,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,QAAQ,IAAI,GAAG,CAAC,cAAc,CAAC,CAAC,MAAM,GAAG,CAAC;YACvE,CAAC,CAAC,GAAG,CAAC,cAAc,CAAC;YACrB,CAAC,CAAC,SAAS;QACf,mBAAmB,EACjB,OAAO,GAAG,CAAC,qBAAqB,CAAC,KAAK,SAAS;YAC7C,CAAC,CAAC,GAAG,CAAC,qBAAqB,CAAC;YAC5B,CAAC,CAAC,SAAS;KAChB,CAAC;AACJ,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,oCAAoC,CAAC,KAAc;IACjE,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;AACrE,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,iCAAiC,CAC/C,CAAU,EACV,CAAU;IAEV,MAAM,IAAI,GAAW,oCAAoC,CAAC,CAAC,CAAC,CAAC;IAC7D,MAAM,KAAK,GAAW,oCAAoC,CAAC,CAAC,CAAC,CAAC;IAE9D,OAAO,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,IAAI,KAAK,KAAK,CAAC;AAC/D,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,8BAA8B,CAC5C,OAA4C;IAE5C,OAAO,OAAO,CACZ,CAAA,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,SAAS,MAAK,IAAI;QACzB,oCAAoC,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC,MAAM;YACpE,CAAC,CACN,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,4BAA4B,CAC1C,OAA4C,EAC5C,iBAA0B;IAE1B,OAAO,CACL,8BAA8B,CAAC,OAAO,CAAC;QACvC,iCAAiC,CAC/B,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,iBAAiB,EAC1B,iBAAiB,CAClB,CACF,CAAC;AACJ,CAAC;AA2CD,qEAAqE;AACrE,MAAM,CAAC,MAAM,sCAAsC,GAAW,CAAC,CAAC;AAChE,MAAM,CAAC,MAAM,0BAA0B,GAAW,EAAE,GAAG,IAAI,CAAC;AAC5D,MAAM,CAAC,MAAM,sBAAsB,GAAW,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;AAC5D,MAAM,CAAC,MAAM,gCAAgC,GAAW,IAAI,CAAC;AAE7D;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAA0B;IACpE,aAAa;IACb,aAAa;IACb,iBAAiB;CAClB,CAAC;AAEF,MAAM,UAAU,8BAA8B,CAAC,SAAkB;IAC/D,OAAO,CACL,OAAO,SAAS,KAAK,QAAQ;QAC7B,+BAA+B,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CACzE,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,CAAC,MAAM,wBAAwB,GACnC,gCAAgC,CAAC;AACnC,MAAM,CAAC,MAAM,4BAA4B,GACvC,oCAAoC,CAAC;AACvC,MAAM,CAAC,MAAM,wBAAwB,GACnC,gCAAgC,CAAC;AACnC,MAAM,CAAC,MAAM,iCAAiC,GAC5C,yCAAyC,CAAC;AAE5C;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,0BAA0B,GACrC,kCAAkC,CAAC;AAErC,yEAAyE;AACzE,MAAM,CAAC,MAAM,6BAA6B,GAAW,UAAU,CAAC;AAEhE,MAAM,CAAC,MAAM,oCAAoC,GAC/C,+BAA+B,CAAC;AAElC,wEAAwE;AACxE,MAAM,CAAC,MAAM,gCAAgC,GAAW,qBAAqB,CAAC;AAE9E;;;GAGG;AACH,MAAM,CAAC,MAAM,2CAA2C,GAAW,CAAC,CAAC;AAkCrE,sDAAsD;AACtD,MAAM,CAAC,MAAM,gDAAgD,GAC3D,CAAC,0BAA0B,EAAE,wBAAwB,CAAC,CAAC;AAEzD,wEAAwE;AACxE,MAAM,UAAU,6CAA6C,CAC3D,MAAe;IAEf,OAAO,CACL,OAAO,MAAM,KAAK,QAAQ;QAExB,gDACD,CAAC,QAAQ,CAAC,MAAM,CAAC,CACnB,CAAC;AACJ,CAAC;AA2BD,MAAM,CAAC,MAAM,mDAAmD,GAC9D,CAAC,0BAA0B,EAAE,sBAAsB,CAAC,CAAC;AAEvD,8EAA8E;AAC9E,MAAM,UAAU,+CAA+C,CAC7D,MAAe;IAEf,OAAO,CACL,OAAO,MAAM,KAAK,QAAQ;QAExB,mDACD,CAAC,QAAQ,CAAC,MAAM,CAAC,CACnB,CAAC;AACJ,CAAC"}

package/build/dist/Types/Kubernetes/KubernetesClusterAiAccessPermissions.js

@@ -6,16 +6,20 @@ import Permission, { PermissionHelper } from "../Permission";
  * imports and which therefore stays free of the permission catalog.
  */
 /*
- * Who may LOOSEN a cluster's AI access: switch remediation to an unattended
- * mode (Automatic or Bypass approval), author a kubectl allowlist, or bind
- * the Runner / Kubernetes credential kubectl runs through. A cluster's AI
- * mode does the job of a FullAuto AutoRemediationRule without a rule row, so
- * it takes the same set AutoRemediationRule uses for executionMode,
- * commandAllowlist and commandRunners.
+ * Who may LOOSEN a cluster's AI access: turn AI fixes on (any move up from
+ * Off, Ask for approval included) or give them more autonomy (Automatic,
+ * Bypass approval), author a kubectl allowlist, bind the Runner / Kubernetes
+ * credential kubectl runs through, or clear that binding while the cluster
+ * has a Kubernetes AI agent (which hands the cluster to the agent), and
+ * reset the cluster's Kubernetes AI agent. A cluster's AI mode does the job
+ * of a FullAuto AutoRemediationRule without a rule row, so it takes the
+ * same set AutoRemediationRule uses for executionMode, commandAllowlist and
+ * commandRunners.
  *
- * Tightening (Off or Ask for approval, clearing the allowlist or the
- * binding) stays open to anyone who may edit the cluster: making AI do less
- * never needs more privilege than the cluster itself.
+ * Tightening (Off, moving down, clearing the allowlist, or clearing the
+ * binding of a cluster with no AI agent) stays open to anyone who may edit
+ * the cluster: making AI do less never needs more privilege than the
+ * cluster itself.
  */
 export const KUBERNETES_AI_ACCESS_ADMIN_PERMISSIONS = [
     Permission.ProjectOwner,
@@ -33,17 +37,17 @@ export const KUBERNETES_AI_ACCESS_CREDENTIAL_PERMISSIONS = [
     Permission.ReadRunbookCredential,
 ];
 /*
- * Why deleting an in-cluster Runner is a two-step remedy. The binding's
- * foreign key is ON DELETE SET NULL, so a deleted Runner's clusters are
- * left with no Runner bound, and registration never binds a cluster that
- * had one (left_unbound_by_operator): the fresh Runner the agent registers
- * is used only once someone selects it on the cluster's AI page. Selecting
- * a Runner loosens AI access, so it needs one of these permissions — which
+ * What deleting a previous in-cluster Runner does. The binding's foreign
+ * key is ON DELETE SET NULL, so a deleted Runner's clusters are left with
+ * no Runner bound, and registration never binds a cluster that had one
+ * (left_unbound_by_operator): such a cluster is then reached through its
+ * Kubernetes AI agent, which the current chart installs. Binding a Runner
+ * again loosens AI access, so it needs one of these permissions — which
  * whoever deleted the Runner may not hold. Here, not in
  * KubernetesClusterAiAccessService, so RunnerService (which that service
  * imports) can name it too without an import cycle.
  */
 export function getDeletedAgentRunnerRebindNote() {
-    return `Deleting a Runner leaves the clusters it was bound to with no Runner bound, and a registering Runner never binds a cluster that had one. Selecting a Runner needs one of these permissions: ${PermissionHelper.getPermissionTitles(KUBERNETES_AI_ACCESS_ADMIN_PERMISSIONS).join(", ")}.`;
+    return `Deleting a Runner leaves the clusters it was bound to with no Runner bound; they then use their Kubernetes AI agent (upgrade the Kubernetes agent chart to install it). A registering Runner never binds a cluster that had one, and binding a Runner again needs one of these permissions: ${PermissionHelper.getPermissionTitles(KUBERNETES_AI_ACCESS_ADMIN_PERMISSIONS).join(", ")}.`;
 }
 //# sourceMappingURL=KubernetesClusterAiAccessPermissions.js.map

package/build/dist/Types/Kubernetes/KubernetesClusterAiAccessPermissions.js.map

@@ -1 +1 @@
-{"version":3,"file":"KubernetesClusterAiAccessPermissions.js","sourceRoot":"","sources":["../../../../Types/Kubernetes/KubernetesClusterAiAccessPermissions.ts"],"names":[],"mappings":"AAAA,OAAO,UAAU,EAAE,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAE7D;;;;;GAKG;AAEH;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,MAAM,sCAAsC,GAAsB;IACvE,UAAU,CAAC,YAAY;IACvB,UAAU,CAAC,YAAY;IACvB,UAAU,CAAC,uBAAuB;CACnC,CAAC;AAEF;;;;GAIG;AACH,MAAM,CAAC,MAAM,2CAA2C,GAAsB;IAC5E,UAAU,CAAC,YAAY;IACvB,UAAU,CAAC,YAAY;IACvB,UAAU,CAAC,qBAAqB;CACjC,CAAC;AAEF;;;;;;;;;;GAUG;AACH,MAAM,UAAU,+BAA+B;IAC7C,OAAO,+LAA+L,gBAAgB,CAAC,mBAAmB,CACxO,sCAAsC,CACvC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC;AAClB,CAAC"}
+{"version":3,"file":"KubernetesClusterAiAccessPermissions.js","sourceRoot":"","sources":["../../../../Types/Kubernetes/KubernetesClusterAiAccessPermissions.ts"],"names":[],"mappings":"AAAA,OAAO,UAAU,EAAE,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAE7D;;;;;GAKG;AAEH;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAC,MAAM,sCAAsC,GAAsB;IACvE,UAAU,CAAC,YAAY;IACvB,UAAU,CAAC,YAAY;IACvB,UAAU,CAAC,uBAAuB;CACnC,CAAC;AAEF;;;;GAIG;AACH,MAAM,CAAC,MAAM,2CAA2C,GAAsB;IAC5E,UAAU,CAAC,YAAY;IACvB,UAAU,CAAC,YAAY;IACvB,UAAU,CAAC,qBAAqB;CACjC,CAAC;AAEF;;;;;;;;;;GAUG;AACH,MAAM,UAAU,+BAA+B;IAC7C,OAAO,+RAA+R,gBAAgB,CAAC,mBAAmB,CACxU,sCAAsC,CACvC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC;AAClB,CAAC"}

package/build/dist/Types/Kubernetes/KubernetesClusterAiInsights.js

@@ -0,0 +1,17 @@
+/*
+ * What OneUptime AI investigated and changed on one Kubernetes cluster: the
+ * response of POST /api/kubernetes-cluster/ai-access/insights, which the
+ * cluster's AI Insights page renders.
+ *
+ * Summaries only. Nothing here carries kubectl output, a prompt or a
+ * command plan: the route is readable by everyone who may read the
+ * cluster, a wider audience than the AI runs, suggestions and Runner jobs
+ * it summarises.
+ */
+// How many investigations, and how many fixes, the route returns (newest).
+export const KUBERNETES_CLUSTER_AI_INSIGHTS_LIMIT = 25;
+// The window commandCounts covers.
+export const KUBERNETES_CLUSTER_AI_INSIGHTS_COMMAND_WINDOW_IN_DAYS = 30;
+// How much of a fix's rationale the route returns.
+export const KUBERNETES_CLUSTER_AI_INSIGHTS_RATIONALE_MAX_LENGTH = 300;
+//# sourceMappingURL=KubernetesClusterAiInsights.js.map

package/build/dist/Types/Kubernetes/KubernetesClusterAiInsights.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"KubernetesClusterAiInsights.js","sourceRoot":"","sources":["../../../../Types/Kubernetes/KubernetesClusterAiInsights.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,2EAA2E;AAC3E,MAAM,CAAC,MAAM,oCAAoC,GAAW,EAAE,CAAC;AAE/D,mCAAmC;AACnC,MAAM,CAAC,MAAM,qDAAqD,GAAW,EAAE,CAAC;AAEhF,mDAAmD;AACnD,MAAM,CAAC,MAAM,mDAAmD,GAAW,GAAG,CAAC"}

package/build/dist/Types/Monitor/ProxmoxAlertTemplates.js

@@ -197,7 +197,7 @@ export function buildProxmoxRatioMonitorConfig(args) {
 const nodeOfflineTemplate = {
     id: "pve-node-offline",
     name: "Node Offline",
-    description: "Alert when any Proxmox node reports as down (pve_up = 0, scoped to nodes via pve.scope). One incident per node.",
+    description: "Alert when any Proxmox node is down (pve_up = 0, scoped to nodes via pve.scope). One incident per node. On the Proxmox VE native OpenTelemetry push, a node that stops reporting is reported down by the nodes still alive, so this fires about 5 minutes after its last report; a standalone host or a whole cluster going silent turns the cluster Disconnected instead.",
     category: "Availability",
     severity: "Critical",
     getMonitorStep: (args) => {
@@ -225,7 +225,7 @@ const nodeOfflineTemplate = {
                 filterType: FilterType.LessThan,
                 value: 1,
                 incidentTitle: `[Proxmox] Node Offline - ${args.monitorName}`,
-                incidentDescription: `A Proxmox node is reporting as down (pve_up = 0). The node is unreachable or has crashed and every guest running on it may be offline. Check the root cause for the affected node id, verify the node's power/network state, and check whether HA has relocated its guests.`,
+                incidentDescription: `A Proxmox node is down (pve_up = 0): the cluster reports it offline or, on the Proxmox VE native OpenTelemetry push, it has stopped reporting and the nodes still alive report it (those points carry oneuptime.proxmox.inferred = not-reporting). The node may have crashed or lost power or network, and every guest running on it may be offline; a node that is up but whose pvestatd or pmxcfs has stopped, or that cannot reach OneUptime, is reported the same way. Check the root cause for the affected node id, verify the node's power/network state and its pvestatd service, and check whether HA has relocated its guests. If you took the node out of the cluster on purpose, use Remove Node on its page in OneUptime to resolve this.`,
                 criteriaName: "Node Offline - pve_up < 1",
                 criteriaDescription: "Triggers when any node reports pve_up below 1 over the monitoring window.",
             }),
@@ -360,7 +360,7 @@ const guestDownTemplate = {
 const quorumRiskTemplate = {
     id: "pve-quorum-risk",
     name: "Cluster Quorum at Risk",
-    description: "Alert when 50% or fewer of the cluster's nodes are online. Derived from node visibility (online pve_up nodes ÷ pve_node_info node count) — pve-exporter exposes no corosync metric, so this is the honest quorum proxy: at ≤50% node availability the cluster has lost (or is about to lose) quorum and HA recovery stops.",
+    description: "Alert when 50% or fewer of the cluster's nodes are online. Derived from node visibility (online pve_up nodes ÷ pve_node_info node count) — pve-exporter exposes no corosync metric, so this is the honest quorum proxy: at ≤50% node availability the cluster has lost (or is about to lose) quorum and HA recovery stops. On the Proxmox VE native OpenTelemetry push, a node that stops reporting counts as offline (the nodes still alive report it); a whole cluster going silent turns the cluster Disconnected instead.",
     category: "Availability",
     severity: "Critical",
     getMonitorStep: (args) => {
@@ -391,7 +391,7 @@ const quorumRiskTemplate = {
                 filterType: FilterType.LessThanOrEqualTo,
                 value: 50,
                 incidentTitle: `[Proxmox] CRITICAL: Cluster Quorum at Risk - ${args.monitorName}`,
-                incidentDescription: `Half or more of the Proxmox cluster's nodes are offline. With ≤50% of nodes online the cluster has lost (or is about to lose) corosync quorum — pmxcfs goes read-only, guests cannot be started or migrated, and HA recovery stops. Identify and recover the offline nodes immediately. (This is derived from node visibility: online nodes ÷ total nodes; pve-exporter exposes no direct corosync metric.)`,
+                incidentDescription: `Half or more of the Proxmox cluster's nodes are offline. With ≤50% of nodes online the cluster has lost (or is about to lose) corosync quorum — pmxcfs goes read-only, guests cannot be started or migrated, and HA recovery stops. Identify and recover the offline nodes immediately. (This is derived from node visibility: online nodes ÷ total nodes; pve-exporter exposes no direct corosync metric. On the Proxmox VE native OpenTelemetry push, a node counts as offline once it has stopped reporting, as reported by the nodes still alive — so a node that is up but cannot reach OneUptime counts too.)`,
                 criteriaName: "Quorum Risk - Node Availability <= 50%",
                 criteriaDescription: "Triggers when 50% or fewer of the cluster's nodes report as online.",
             }),