@oneuptime/common 14.0.9 → 14.0.11

package/Server/Infrastructure/Postgres/SchemaMigrations/1796300000000-AddResourceAiAgents.ts

@@ -0,0 +1,423 @@
+import { MigrationInterface, QueryRunner } from "typeorm";
+
+/*
+ * Resource AI agents: OneUptime AI access to Docker and Podman hosts, Docker
+ * Swarm, Proxmox and Ceph clusters, VMware vCenters, database servers and
+ * hosts, through the AI agent installed next to each one — the same
+ * strategy as the Kubernetes AI agent, whose tables this does not touch.
+ *
+ * Schema only (generated):
+ *   - ResourceAiAgent: one row per resource for its AI agent (its own
+ *     identity, never a Runner). Polymorphic: keyed by (resourceType,
+ *     resourceId) with NO foreign key on resourceId, which points into a
+ *     different table for every resource type; unique per live resource;
+ *     cascades with its project.
+ *   - RunnerJob.targetResourceAiAgentId: the agent an AI resource command
+ *     (step type ResourceCommand) is targeted at (SET NULL when the agent
+ *     row goes), and RunnerJob.resourceType / resourceId: the resource it
+ *     ran against, for the resource's AI page.
+ *   - AutoRemediationSuggestion.resourceType / resourceId: the resource
+ *     whose AI remediation mode produced a suggestion (no rule).
+ *   - The AI access columns of DockerHost, PodmanHost, CephCluster,
+ *     ProxmoxCluster, DockerSwarmCluster, VMwareVCenter, Host and
+ *     DatabaseServer: isAiInvestigationEnabled (default false),
+ *     aiRemediationMode (default Disabled), aiCommandAllowlist and the
+ *     server-written aiAccessLastVerifiedAt, aiAccessLastError and
+ *     aiAccessConfiguredAt.
+ *
+ * No data is rewritten: every existing resource starts with AI switched
+ * off, exactly like a new one. down() reverses the schema.
+ */
+export class AddResourceAiAgents1796300000000 implements MigrationInterface {
+  public name: string = "AddResourceAiAgents1796300000000";
+
+  public async up(queryRunner: QueryRunner): Promise<void> {
+    await queryRunner.query(
+      `CREATE TABLE "ResourceAiAgent" ("_id" uuid NOT NULL DEFAULT uuid_generate_v4(), "createdAt" TIMESTAMP WITH TIME ZONE NOT NULL DEFAULT now(), "updatedAt" TIMESTAMP WITH TIME ZONE NOT NULL DEFAULT now(), "deletedAt" TIMESTAMP WITH TIME ZONE, "version" integer NOT NULL, "projectId" uuid NOT NULL, "resourceType" character varying(100) NOT NULL, "resourceId" uuid NOT NULL, "resourceIdentifier" character varying(500), "keyHash" character varying(100), "agentVersion" character varying(100), "posture" jsonb, "lastAliveAt" TIMESTAMP WITH TIME ZONE, "connectionStatus" character varying(100) NOT NULL DEFAULT 'disconnected', "lastRegisteredAt" TIMESTAMP WITH TIME ZONE, "registeredWithIngestionKeyId" uuid, "lastRefusedRegistrationAt" TIMESTAMP WITH TIME ZONE, "lastRefusedRegistrationReason" character varying(100), CONSTRAINT "PK_b24310cc7f12a4385d678d49eea" PRIMARY KEY ("_id"))`,
+    );
+    await queryRunner.query(
+      `CREATE INDEX "IDX_e61bd0e258b87311cc21cbaa95" ON "ResourceAiAgent" ("projectId") `,
+    );
+    await queryRunner.query(
+      `CREATE INDEX "IDX_06d7eb39aceb586c3c5565882b" ON "ResourceAiAgent" ("resourceType") `,
+    );
+    await queryRunner.query(
+      `CREATE INDEX "IDX_b5a1c152c918d42ef96c6a9a1c" ON "ResourceAiAgent" ("resourceId") `,
+    );
+    await queryRunner.query(
+      `CREATE UNIQUE INDEX "IDX_ResourceAiAgent_projectId_resourceType_resourceId" ON "ResourceAiAgent" ("projectId", "resourceType", "resourceId") WHERE "deletedAt" IS NULL`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "DockerHost" ADD "isAiInvestigationEnabled" boolean NOT NULL DEFAULT false`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "DockerHost" ADD "aiRemediationMode" character varying(100) NOT NULL DEFAULT 'Disabled'`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "DockerHost" ADD "aiCommandAllowlist" jsonb`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "DockerHost" ADD "aiAccessLastVerifiedAt" TIMESTAMP WITH TIME ZONE`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "DockerHost" ADD "aiAccessLastError" character varying`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "DockerHost" ADD "aiAccessConfiguredAt" TIMESTAMP WITH TIME ZONE`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "PodmanHost" ADD "isAiInvestigationEnabled" boolean NOT NULL DEFAULT false`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "PodmanHost" ADD "aiRemediationMode" character varying(100) NOT NULL DEFAULT 'Disabled'`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "PodmanHost" ADD "aiCommandAllowlist" jsonb`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "PodmanHost" ADD "aiAccessLastVerifiedAt" TIMESTAMP WITH TIME ZONE`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "PodmanHost" ADD "aiAccessLastError" character varying`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "PodmanHost" ADD "aiAccessConfiguredAt" TIMESTAMP WITH TIME ZONE`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "CephCluster" ADD "isAiInvestigationEnabled" boolean NOT NULL DEFAULT false`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "CephCluster" ADD "aiRemediationMode" character varying(100) NOT NULL DEFAULT 'Disabled'`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "CephCluster" ADD "aiCommandAllowlist" jsonb`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "CephCluster" ADD "aiAccessLastVerifiedAt" TIMESTAMP WITH TIME ZONE`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "CephCluster" ADD "aiAccessLastError" character varying`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "CephCluster" ADD "aiAccessConfiguredAt" TIMESTAMP WITH TIME ZONE`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "ProxmoxCluster" ADD "isAiInvestigationEnabled" boolean NOT NULL DEFAULT false`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "ProxmoxCluster" ADD "aiRemediationMode" character varying(100) NOT NULL DEFAULT 'Disabled'`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "ProxmoxCluster" ADD "aiCommandAllowlist" jsonb`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "ProxmoxCluster" ADD "aiAccessLastVerifiedAt" TIMESTAMP WITH TIME ZONE`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "ProxmoxCluster" ADD "aiAccessLastError" character varying`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "ProxmoxCluster" ADD "aiAccessConfiguredAt" TIMESTAMP WITH TIME ZONE`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "DockerSwarmCluster" ADD "isAiInvestigationEnabled" boolean NOT NULL DEFAULT false`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "DockerSwarmCluster" ADD "aiRemediationMode" character varying(100) NOT NULL DEFAULT 'Disabled'`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "DockerSwarmCluster" ADD "aiCommandAllowlist" jsonb`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "DockerSwarmCluster" ADD "aiAccessLastVerifiedAt" TIMESTAMP WITH TIME ZONE`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "DockerSwarmCluster" ADD "aiAccessLastError" character varying`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "DockerSwarmCluster" ADD "aiAccessConfiguredAt" TIMESTAMP WITH TIME ZONE`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "VMwareVCenter" ADD "isAiInvestigationEnabled" boolean NOT NULL DEFAULT false`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "VMwareVCenter" ADD "aiRemediationMode" character varying(100) NOT NULL DEFAULT 'Disabled'`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "VMwareVCenter" ADD "aiCommandAllowlist" jsonb`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "VMwareVCenter" ADD "aiAccessLastVerifiedAt" TIMESTAMP WITH TIME ZONE`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "VMwareVCenter" ADD "aiAccessLastError" character varying`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "VMwareVCenter" ADD "aiAccessConfiguredAt" TIMESTAMP WITH TIME ZONE`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "Host" ADD "isAiInvestigationEnabled" boolean NOT NULL DEFAULT false`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "Host" ADD "aiRemediationMode" character varying(100) NOT NULL DEFAULT 'Disabled'`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "Host" ADD "aiCommandAllowlist" jsonb`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "Host" ADD "aiAccessLastVerifiedAt" TIMESTAMP WITH TIME ZONE`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "Host" ADD "aiAccessLastError" character varying`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "Host" ADD "aiAccessConfiguredAt" TIMESTAMP WITH TIME ZONE`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "DatabaseServer" ADD "isAiInvestigationEnabled" boolean NOT NULL DEFAULT false`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "DatabaseServer" ADD "aiRemediationMode" character varying(100) NOT NULL DEFAULT 'Disabled'`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "DatabaseServer" ADD "aiCommandAllowlist" jsonb`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "DatabaseServer" ADD "aiAccessLastVerifiedAt" TIMESTAMP WITH TIME ZONE`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "DatabaseServer" ADD "aiAccessLastError" character varying`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "DatabaseServer" ADD "aiAccessConfiguredAt" TIMESTAMP WITH TIME ZONE`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "RunnerJob" ADD "resourceType" character varying(100)`,
+    );
+    await queryRunner.query(`ALTER TABLE "RunnerJob" ADD "resourceId" uuid`);
+    await queryRunner.query(
+      `ALTER TABLE "RunnerJob" ADD "targetResourceAiAgentId" uuid`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "AutoRemediationSuggestion" ADD "resourceType" character varying(100)`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "AutoRemediationSuggestion" ADD "resourceId" uuid`,
+    );
+    await queryRunner.query(
+      `CREATE INDEX "IDX_78a02785a95c03f9c7d542f21d" ON "RunnerJob" ("resourceType") `,
+    );
+    await queryRunner.query(
+      `CREATE INDEX "IDX_223854e59d60c3d9ece3cce60a" ON "RunnerJob" ("resourceId") `,
+    );
+    await queryRunner.query(
+      `CREATE INDEX "IDX_82b8db95070bbd7b3bbe3fb850" ON "RunnerJob" ("targetResourceAiAgentId") `,
+    );
+    await queryRunner.query(
+      `CREATE INDEX "IDX_ebdb04eb0e2b9cbdc7d0b664ff" ON "AutoRemediationSuggestion" ("resourceType") `,
+    );
+    await queryRunner.query(
+      `CREATE INDEX "IDX_2ecbd56658be5035f3bdfe6937" ON "AutoRemediationSuggestion" ("resourceId") `,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "ResourceAiAgent" ADD CONSTRAINT "FK_e61bd0e258b87311cc21cbaa95b" FOREIGN KEY ("projectId") REFERENCES "Project"("_id") ON DELETE CASCADE ON UPDATE NO ACTION`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "RunnerJob" ADD CONSTRAINT "FK_82b8db95070bbd7b3bbe3fb8509" FOREIGN KEY ("targetResourceAiAgentId") REFERENCES "ResourceAiAgent"("_id") ON DELETE SET NULL ON UPDATE NO ACTION`,
+    );
+  }
+
+  public async down(queryRunner: QueryRunner): Promise<void> {
+    await queryRunner.query(
+      `ALTER TABLE "RunnerJob" DROP CONSTRAINT "FK_82b8db95070bbd7b3bbe3fb8509"`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "ResourceAiAgent" DROP CONSTRAINT "FK_e61bd0e258b87311cc21cbaa95b"`,
+    );
+    await queryRunner.query(
+      `DROP INDEX "public"."IDX_2ecbd56658be5035f3bdfe6937"`,
+    );
+    await queryRunner.query(
+      `DROP INDEX "public"."IDX_ebdb04eb0e2b9cbdc7d0b664ff"`,
+    );
+    await queryRunner.query(
+      `DROP INDEX "public"."IDX_82b8db95070bbd7b3bbe3fb850"`,
+    );
+    await queryRunner.query(
+      `DROP INDEX "public"."IDX_223854e59d60c3d9ece3cce60a"`,
+    );
+    await queryRunner.query(
+      `DROP INDEX "public"."IDX_78a02785a95c03f9c7d542f21d"`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "AutoRemediationSuggestion" DROP COLUMN "resourceId"`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "AutoRemediationSuggestion" DROP COLUMN "resourceType"`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "RunnerJob" DROP COLUMN "targetResourceAiAgentId"`,
+    );
+    await queryRunner.query(`ALTER TABLE "RunnerJob" DROP COLUMN "resourceId"`);
+    await queryRunner.query(
+      `ALTER TABLE "RunnerJob" DROP COLUMN "resourceType"`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "DatabaseServer" DROP COLUMN "aiAccessConfiguredAt"`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "DatabaseServer" DROP COLUMN "aiAccessLastError"`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "DatabaseServer" DROP COLUMN "aiAccessLastVerifiedAt"`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "DatabaseServer" DROP COLUMN "aiCommandAllowlist"`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "DatabaseServer" DROP COLUMN "aiRemediationMode"`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "DatabaseServer" DROP COLUMN "isAiInvestigationEnabled"`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "Host" DROP COLUMN "aiAccessConfiguredAt"`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "Host" DROP COLUMN "aiAccessLastError"`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "Host" DROP COLUMN "aiAccessLastVerifiedAt"`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "Host" DROP COLUMN "aiCommandAllowlist"`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "Host" DROP COLUMN "aiRemediationMode"`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "Host" DROP COLUMN "isAiInvestigationEnabled"`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "VMwareVCenter" DROP COLUMN "aiAccessConfiguredAt"`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "VMwareVCenter" DROP COLUMN "aiAccessLastError"`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "VMwareVCenter" DROP COLUMN "aiAccessLastVerifiedAt"`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "VMwareVCenter" DROP COLUMN "aiCommandAllowlist"`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "VMwareVCenter" DROP COLUMN "aiRemediationMode"`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "VMwareVCenter" DROP COLUMN "isAiInvestigationEnabled"`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "DockerSwarmCluster" DROP COLUMN "aiAccessConfiguredAt"`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "DockerSwarmCluster" DROP COLUMN "aiAccessLastError"`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "DockerSwarmCluster" DROP COLUMN "aiAccessLastVerifiedAt"`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "DockerSwarmCluster" DROP COLUMN "aiCommandAllowlist"`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "DockerSwarmCluster" DROP COLUMN "aiRemediationMode"`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "DockerSwarmCluster" DROP COLUMN "isAiInvestigationEnabled"`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "ProxmoxCluster" DROP COLUMN "aiAccessConfiguredAt"`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "ProxmoxCluster" DROP COLUMN "aiAccessLastError"`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "ProxmoxCluster" DROP COLUMN "aiAccessLastVerifiedAt"`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "ProxmoxCluster" DROP COLUMN "aiCommandAllowlist"`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "ProxmoxCluster" DROP COLUMN "aiRemediationMode"`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "ProxmoxCluster" DROP COLUMN "isAiInvestigationEnabled"`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "CephCluster" DROP COLUMN "aiAccessConfiguredAt"`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "CephCluster" DROP COLUMN "aiAccessLastError"`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "CephCluster" DROP COLUMN "aiAccessLastVerifiedAt"`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "CephCluster" DROP COLUMN "aiCommandAllowlist"`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "CephCluster" DROP COLUMN "aiRemediationMode"`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "CephCluster" DROP COLUMN "isAiInvestigationEnabled"`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "PodmanHost" DROP COLUMN "aiAccessConfiguredAt"`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "PodmanHost" DROP COLUMN "aiAccessLastError"`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "PodmanHost" DROP COLUMN "aiAccessLastVerifiedAt"`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "PodmanHost" DROP COLUMN "aiCommandAllowlist"`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "PodmanHost" DROP COLUMN "aiRemediationMode"`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "PodmanHost" DROP COLUMN "isAiInvestigationEnabled"`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "DockerHost" DROP COLUMN "aiAccessConfiguredAt"`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "DockerHost" DROP COLUMN "aiAccessLastError"`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "DockerHost" DROP COLUMN "aiAccessLastVerifiedAt"`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "DockerHost" DROP COLUMN "aiCommandAllowlist"`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "DockerHost" DROP COLUMN "aiRemediationMode"`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "DockerHost" DROP COLUMN "isAiInvestigationEnabled"`,
+    );
+    await queryRunner.query(
+      `DROP INDEX "public"."IDX_ResourceAiAgent_projectId_resourceType_resourceId"`,
+    );
+    await queryRunner.query(
+      `DROP INDEX "public"."IDX_b5a1c152c918d42ef96c6a9a1c"`,
+    );
+    await queryRunner.query(
+      `DROP INDEX "public"."IDX_06d7eb39aceb586c3c5565882b"`,
+    );
+    await queryRunner.query(
+      `DROP INDEX "public"."IDX_e61bd0e258b87311cc21cbaa95"`,
+    );
+    await queryRunner.query(`DROP TABLE "ResourceAiAgent"`);
+  }
+}

package/Server/Infrastructure/Postgres/SchemaMigrations/1796400000000-AddIncidentForms.ts

@@ -0,0 +1,129 @@
+import { MigrationInterface, QueryRunner } from "typeorm";
+
+/*
+ * Generated with npm run generate-postgres-migration, then renumbered after
+ * the last registered migration. Incident forms and the per-template custom
+ * field settings (issue #4114):
+ *
+ *   - IncidentForm: forms anyone with the link can fill in to declare an
+ *     incident. shareKey is the key in the public link, unique across all
+ *     projects (the unique constraint is also the index a visit is looked up
+ *     by). incidentSeverityId is required by the app but nullable here:
+ *     deleting a severity - or a template, for incidentTemplateId - clears
+ *     it on the forms that use it, rather than being blocked by them or
+ *     deleting them;
+ *   - IncidentFormSubmission: one row per submission, deleted with its form
+ *     and kept, with no incident, when its incident is deleted;
+ *   - IncidentTemplate.customFieldSettings: which custom fields the Declare
+ *     Incident form asks for when an incident is declared from a template.
+ *     Nullable with no default, so every existing template keeps asking
+ *     exactly what it asked before.
+ */
+
+export class AddIncidentForms1796400000000 implements MigrationInterface {
+  public name: string = "AddIncidentForms1796400000000";
+
+  public async up(queryRunner: QueryRunner): Promise<void> {
+    await queryRunner.query(
+      `CREATE TABLE "IncidentForm" ("_id" uuid NOT NULL DEFAULT uuid_generate_v4(), "createdAt" TIMESTAMP WITH TIME ZONE NOT NULL DEFAULT now(), "updatedAt" TIMESTAMP WITH TIME ZONE NOT NULL DEFAULT now(), "deletedAt" TIMESTAMP WITH TIME ZONE, "version" integer NOT NULL, "projectId" uuid NOT NULL, "name" character varying(100) NOT NULL, "description" text, "isEnabled" boolean NOT NULL DEFAULT true, "shareKey" uuid NOT NULL, "incidentSeverityId" uuid, "allowReporterToChooseSeverity" boolean NOT NULL DEFAULT false, "incidentTemplateId" uuid, "descriptionSetting" character varying(100) NOT NULL DEFAULT 'Optional', "customFieldSettings" jsonb, "isReporterDetailsRequired" boolean NOT NULL DEFAULT true, "successMessage" text, "ipWhitelist" text, "createdByUserId" uuid, "deletedByUserId" uuid, CONSTRAINT "UQ_9c11c2b692cea31727c95c28e98" UNIQUE ("shareKey"), CONSTRAINT "PK_21977001f0d4b88fbc0135c7dd0" PRIMARY KEY ("_id"))`,
+    );
+    await queryRunner.query(
+      `CREATE INDEX "IDX_c7eb6e8981e8f6e9a2fe53b6bb" ON "IncidentForm" ("projectId") `,
+    );
+    await queryRunner.query(
+      `CREATE INDEX "IDX_473919ea7b451ba0dfc871a4c6" ON "IncidentForm" ("incidentSeverityId") `,
+    );
+    await queryRunner.query(
+      `CREATE INDEX "IDX_c94880b38a72f9b03328477c48" ON "IncidentForm" ("incidentTemplateId") `,
+    );
+    await queryRunner.query(
+      `CREATE TABLE "IncidentFormSubmission" ("_id" uuid NOT NULL DEFAULT uuid_generate_v4(), "createdAt" TIMESTAMP WITH TIME ZONE NOT NULL DEFAULT now(), "updatedAt" TIMESTAMP WITH TIME ZONE NOT NULL DEFAULT now(), "deletedAt" TIMESTAMP WITH TIME ZONE, "version" integer NOT NULL, "projectId" uuid NOT NULL, "incidentFormId" uuid NOT NULL, "incidentId" uuid, "reporterName" character varying(100), "reporterEmail" character varying(100), CONSTRAINT "PK_1b520515a97ed5403da203f4ab4" PRIMARY KEY ("_id"))`,
+    );
+    await queryRunner.query(
+      `CREATE INDEX "IDX_56fa38b3bc7c97117dac332110" ON "IncidentFormSubmission" ("projectId") `,
+    );
+    await queryRunner.query(
+      `CREATE INDEX "IDX_4fe1421ca5d762a0f1a8f78c68" ON "IncidentFormSubmission" ("incidentFormId") `,
+    );
+    await queryRunner.query(
+      `CREATE INDEX "IDX_44b1e21a80ccad4238d803c17d" ON "IncidentFormSubmission" ("incidentId") `,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "IncidentTemplate" ADD "customFieldSettings" jsonb`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "IncidentForm" ADD CONSTRAINT "FK_c7eb6e8981e8f6e9a2fe53b6bb8" FOREIGN KEY ("projectId") REFERENCES "Project"("_id") ON DELETE CASCADE ON UPDATE NO ACTION`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "IncidentForm" ADD CONSTRAINT "FK_473919ea7b451ba0dfc871a4c6e" FOREIGN KEY ("incidentSeverityId") REFERENCES "IncidentSeverity"("_id") ON DELETE SET NULL ON UPDATE NO ACTION`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "IncidentForm" ADD CONSTRAINT "FK_c94880b38a72f9b03328477c48c" FOREIGN KEY ("incidentTemplateId") REFERENCES "IncidentTemplate"("_id") ON DELETE SET NULL ON UPDATE NO ACTION`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "IncidentForm" ADD CONSTRAINT "FK_850356f3fc192628a97681f9385" FOREIGN KEY ("createdByUserId") REFERENCES "User"("_id") ON DELETE SET NULL ON UPDATE NO ACTION`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "IncidentForm" ADD CONSTRAINT "FK_76e881e65b593b3980158fadf81" FOREIGN KEY ("deletedByUserId") REFERENCES "User"("_id") ON DELETE SET NULL ON UPDATE NO ACTION`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "IncidentFormSubmission" ADD CONSTRAINT "FK_56fa38b3bc7c97117dac3321103" FOREIGN KEY ("projectId") REFERENCES "Project"("_id") ON DELETE CASCADE ON UPDATE NO ACTION`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "IncidentFormSubmission" ADD CONSTRAINT "FK_4fe1421ca5d762a0f1a8f78c687" FOREIGN KEY ("incidentFormId") REFERENCES "IncidentForm"("_id") ON DELETE CASCADE ON UPDATE NO ACTION`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "IncidentFormSubmission" ADD CONSTRAINT "FK_44b1e21a80ccad4238d803c17da" FOREIGN KEY ("incidentId") REFERENCES "Incident"("_id") ON DELETE SET NULL ON UPDATE NO ACTION`,
+    );
+  }
+
+  public async down(queryRunner: QueryRunner): Promise<void> {
+    await queryRunner.query(
+      `ALTER TABLE "IncidentFormSubmission" DROP CONSTRAINT "FK_44b1e21a80ccad4238d803c17da"`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "IncidentFormSubmission" DROP CONSTRAINT "FK_4fe1421ca5d762a0f1a8f78c687"`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "IncidentFormSubmission" DROP CONSTRAINT "FK_56fa38b3bc7c97117dac3321103"`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "IncidentForm" DROP CONSTRAINT "FK_76e881e65b593b3980158fadf81"`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "IncidentForm" DROP CONSTRAINT "FK_850356f3fc192628a97681f9385"`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "IncidentForm" DROP CONSTRAINT "FK_c94880b38a72f9b03328477c48c"`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "IncidentForm" DROP CONSTRAINT "FK_473919ea7b451ba0dfc871a4c6e"`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "IncidentForm" DROP CONSTRAINT "FK_c7eb6e8981e8f6e9a2fe53b6bb8"`,
+    );
+    await queryRunner.query(
+      `ALTER TABLE "IncidentTemplate" DROP COLUMN "customFieldSettings"`,
+    );
+    await queryRunner.query(
+      `DROP INDEX "public"."IDX_44b1e21a80ccad4238d803c17d"`,
+    );
+    await queryRunner.query(
+      `DROP INDEX "public"."IDX_4fe1421ca5d762a0f1a8f78c68"`,
+    );
+    await queryRunner.query(
+      `DROP INDEX "public"."IDX_56fa38b3bc7c97117dac332110"`,
+    );
+    await queryRunner.query(`DROP TABLE "IncidentFormSubmission"`);
+    await queryRunner.query(
+      `DROP INDEX "public"."IDX_c94880b38a72f9b03328477c48"`,
+    );
+    await queryRunner.query(
+      `DROP INDEX "public"."IDX_473919ea7b451ba0dfc871a4c6"`,
+    );
+    await queryRunner.query(
+      `DROP INDEX "public"."IDX_c7eb6e8981e8f6e9a2fe53b6bb"`,
+    );
+    await queryRunner.query(`DROP TABLE "IncidentForm"`);
+  }
+}

package/Server/Infrastructure/Postgres/SchemaMigrations/1796500000000-AddTeamComplianceRuleNotificationChannels.ts

@@ -0,0 +1,52 @@
+import { MigrationInterface, QueryRunner } from "typeorm";
+
+/*
+ * Generated with npm run generate-postgres-migration, then renumbered after
+ * the last registered migration, and given the backfill below.
+ *
+ * "notificationChannels": the channels an on-call compliance rule insists on,
+ * as a list - a member needs a rule on every one of them. Empty (or NULL) is
+ * "any channel". It replaces "notificationChannel", which could hold only one
+ * channel, as what a rule checks.
+ *
+ * "notificationChannel" is kept, not dropped. Everything that only knows that
+ * column - API clients from before the list, and a replica of the previous
+ * build still serving while this one rolls out - keeps reading and writing
+ * it, and TeamComplianceSettingService keeps it equal to the first channel of
+ * the list. See TeamComplianceSettingService.getStoredChannels for how a row
+ * is read when the two disagree.
+ */
+export class AddTeamComplianceRuleNotificationChannels1796500000000
+  implements MigrationInterface
+{
+  public name: string =
+    "AddTeamComplianceRuleNotificationChannels1796500000000";
+
+  public async up(queryRunner: QueryRunner): Promise<void> {
+    await queryRunner.query(
+      `ALTER TABLE "TeamComplianceSetting" ADD "notificationChannels" jsonb`,
+    );
+
+    /*
+     * Every rule that insists on a channel gets it as a one-item list, so it
+     * checks exactly what it checked before - and opens in the edit form,
+     * which reads only the list, with its channel still selected. A rule on
+     * any channel is left NULL, which reads as "any channel" too.
+     */
+    await queryRunner.query(
+      `UPDATE "TeamComplianceSetting" SET "notificationChannels" = jsonb_build_array("notificationChannel") WHERE "notificationChannel" IS NOT NULL AND "notificationChannels" IS NULL`,
+    );
+  }
+
+  public async down(queryRunner: QueryRunner): Promise<void> {
+    /*
+     * "notificationChannel" still holds each rule's first channel, so going
+     * back leaves every rule checking that one channel - never widened to
+     * "any channel". A rule on several channels loses the rest, the
+     * unavoidable cost of a schema that cannot hold them.
+     */
+    await queryRunner.query(
+      `ALTER TABLE "TeamComplianceSetting" DROP COLUMN "notificationChannels"`,
+    );
+  }
+}