@oneuptime/common 12.0.2 → 12.0.4

package/build/dist/Server/Utils/Monitor/MonitorStepsReferenceExtractor.js

@@ -0,0 +1,312 @@
+import MonitorSteps from "../../../Types/Monitor/MonitorSteps";
+import ObjectID from "../../../Types/ObjectID";
+import Typeof from "../../../Types/Typeof";
+/*
+ * `monitorSteps` is a free-form JSON column, so none of the ids it embeds have
+ * a foreign key behind them. They are still real references: the monitor status
+ * a criteria switches to, the severity it opens incidents and alerts with, the
+ * on-call policies it pages, the labels/owners it stamps on what it creates.
+ *
+ * Until issue #3039 the only guard over this blob scraped every uuid out of the
+ * serialized JSON with a regex and asked whether it happened to be another
+ * project's record. That can never reject an id that exists nowhere, because
+ * monitorSteps is FULL of uuids that are not references at all — step ids,
+ * criteria ids, incident/alert template ids — and they match nothing either.
+ *
+ * This walker exists to tell those apart. It reads the structure rather than the
+ * text, so every id it yields is known to be a reference to a specific model and
+ * can be checked for existence without any risk of a false rejection.
+ */
+export var MonitorStepsReferenceModel;
+(function (MonitorStepsReferenceModel) {
+    MonitorStepsReferenceModel["MonitorStatus"] = "Monitor Status";
+    MonitorStepsReferenceModel["IncidentSeverity"] = "Incident Severity";
+    MonitorStepsReferenceModel["AlertSeverity"] = "Alert Severity";
+    MonitorStepsReferenceModel["OnCallDutyPolicy"] = "On-Call Duty Policy";
+    MonitorStepsReferenceModel["Label"] = "Label";
+    MonitorStepsReferenceModel["Team"] = "Team";
+    MonitorStepsReferenceModel["User"] = "User";
+    MonitorStepsReferenceModel["IncidentRole"] = "Incident Role";
+    MonitorStepsReferenceModel["TelemetryService"] = "Telemetry Service";
+    MonitorStepsReferenceModel["NetworkDevice"] = "Network Device";
+})(MonitorStepsReferenceModel || (MonitorStepsReferenceModel = {}));
+/*
+ * Step-level sub-configs that scope a monitor to specific telemetry services.
+ * All five carry the field under the same name.
+ */
+const TELEMETRY_SERVICE_STEP_FIELDS = [
+    "logMonitor",
+    "traceMonitor",
+    "exceptionMonitor",
+    "profileMonitor",
+    "metricMonitor",
+];
+/*
+ * Every level of monitorSteps is persisted inside a `{ _type, value }` envelope
+ * (MonitorSteps.toJSON -> MonitorStep.toJSON -> MonitorCriteria.toJSON ->
+ * MonitorCriteriaInstance.toJSON). API callers - Terraform among them - post
+ * the same envelope. Unwrap it when it is there and accept the bare object when
+ * it is not, so a hand-written payload is walked just as thoroughly.
+ */
+function unwrap(value) {
+    if (!value || typeof value !== Typeof.Object || Array.isArray(value)) {
+        return null;
+    }
+    const object = value;
+    if (object["value"] && typeof object["value"] === Typeof.Object) {
+        return object["value"];
+    }
+    return object;
+}
+function asArray(value) {
+    return Array.isArray(value) ? value : [];
+}
+/*
+ * An id reaches here in every shape the codebase produces: a plain uuid string
+ * (MonitorSteps.toJSON stringifies defaultMonitorStatusId and monitorStatusId),
+ * a serialized `{ _type: "ObjectID", value }` envelope (what JSONFunctions.serialize
+ * does to the ObjectIDs nested inside the incidents/alerts arrays), a live
+ * ObjectID instance (validating a MonitorSteps object that was never
+ * serialized), or `{ value }` without the marker.
+ *
+ * Blank is treated as absent on purpose: a stored `{"_type":"ObjectID","value":""}`
+ * rehydrates to `new ObjectID("")`, which is truthy. Reporting that as a missing
+ * *reference* would be misleading - it is an unset field, and the required-field
+ * checks own that case.
+ */
+export function toReferenceId(value) {
+    if (!value) {
+        return null;
+    }
+    if (value instanceof ObjectID) {
+        return value.toString().trim() || null;
+    }
+    if (typeof value === Typeof.String) {
+        return value.trim() || null;
+    }
+    if (typeof value === Typeof.Object && !Array.isArray(value)) {
+        const inner = value["value"];
+        if (typeof inner === Typeof.String) {
+            return inner.trim() || null;
+        }
+    }
+    return null;
+}
+export default class MonitorStepsReferenceExtractor {
+    /*
+     * Walks monitorSteps and returns every id it holds that points at another
+     * record. Ids that are NOT references (step ids, criteria ids, the id on each
+     * incident/alert template) are deliberately not returned - they are local
+     * identity, not a pointer to a row.
+     */
+    static extract(monitorSteps) {
+        const root = this.toJSONObject(monitorSteps);
+        if (!root) {
+            return [];
+        }
+        const references = [];
+        this.push(references, {
+            model: MonitorStepsReferenceModel.MonitorStatus,
+            value: root["defaultMonitorStatusId"],
+            path: "default monitor status",
+            /*
+             * Always operative: MonitorResource stamps it onto the monitor's first
+             * MonitorStatusTimeline row, which is the very insert issue #3039 reports
+             * failing.
+             */
+            isOperative: true,
+        });
+        const steps = asArray(root["monitorStepsInstanceArray"]);
+        for (const step of steps) {
+            const stepValue = unwrap(step);
+            if (!stepValue) {
+                continue;
+            }
+            this.extractFromStepConfig(references, stepValue);
+            const criteria = unwrap(stepValue["monitorCriteria"]);
+            if (!criteria) {
+                continue;
+            }
+            const instances = asArray(criteria["monitorCriteriaInstanceArray"]);
+            for (let index = 0; index < instances.length; index++) {
+                this.extractFromCriteriaInstance({
+                    references: references,
+                    criteriaInstance: unwrap(instances[index]),
+                    index: index,
+                });
+            }
+        }
+        return references;
+    }
+    /*
+     * The step's own targets: the telemetry services a log/trace/exception/
+     * profile/metric monitor is scoped to, and the device a network monitor
+     * walks.
+     *
+     * These are reported as references — so a *cross-project* id in them is
+     * refused like any other — but never as `isOperative`, so they are not
+     * required to exist. Both already degrade on their own when the target is
+     * gone (the query simply matches nothing; NetworkDeviceHydrationUtil logs a
+     * warning and carries on), neither can produce the foreign key violation this
+     * guard exists for, and deleting a telemetry service is ordinary enough that
+     * refusing every later edit of a monitor that once watched it would be a
+     * worse failure than the one being fixed.
+     */
+    static extractFromStepConfig(references, step) {
+        for (const field of TELEMETRY_SERVICE_STEP_FIELDS) {
+            const config = unwrap(step[field]);
+            if (!config) {
+                continue;
+            }
+            for (const id of asArray(config["telemetryServiceIds"])) {
+                this.push(references, {
+                    model: MonitorStepsReferenceModel.TelemetryService,
+                    value: id,
+                    path: "monitored telemetry service",
+                    isOperative: false,
+                });
+            }
+        }
+        const networkDeviceMonitor = unwrap(step["networkDeviceMonitor"]);
+        if (networkDeviceMonitor) {
+            this.push(references, {
+                model: MonitorStepsReferenceModel.NetworkDevice,
+                value: networkDeviceMonitor["networkDeviceId"],
+                path: "monitored network device",
+                isOperative: false,
+            });
+        }
+    }
+    static extractFromCriteriaInstance(data) {
+        const criteriaInstance = data.criteriaInstance;
+        if (!criteriaInstance) {
+            return;
+        }
+        const name = criteriaInstance["name"] || `#${data.index + 1}`;
+        const label = `criteria "${name}"`;
+        this.push(data.references, {
+            model: MonitorStepsReferenceModel.MonitorStatus,
+            value: criteriaInstance["monitorStatusId"],
+            path: `${label} monitor status`,
+            isOperative: criteriaInstance["changeMonitorStatus"] === true,
+        });
+        const createsIncidents = criteriaInstance["createIncidents"] === true;
+        for (const incident of asArray(criteriaInstance["incidents"])) {
+            const incidentValue = unwrap(incident);
+            if (!incidentValue) {
+                continue;
+            }
+            this.push(data.references, {
+                model: MonitorStepsReferenceModel.IncidentSeverity,
+                value: incidentValue["incidentSeverityId"],
+                path: `${label} incident severity`,
+                isOperative: createsIncidents,
+            });
+            this.pushSharedNotificationReferences({
+                references: data.references,
+                source: incidentValue,
+                label: `${label} incident`,
+                isOperative: createsIncidents,
+            });
+            for (const roleAssignment of asArray(incidentValue["incidentMemberRoles"])) {
+                const assignment = unwrap(roleAssignment);
+                if (!assignment) {
+                    continue;
+                }
+                this.push(data.references, {
+                    model: MonitorStepsReferenceModel.IncidentRole,
+                    value: assignment["roleId"],
+                    path: `${label} incident member role`,
+                    isOperative: createsIncidents,
+                });
+                this.push(data.references, {
+                    model: MonitorStepsReferenceModel.User,
+                    value: assignment["userId"],
+                    path: `${label} incident member`,
+                    isOperative: createsIncidents,
+                });
+            }
+        }
+        const createsAlerts = criteriaInstance["createAlerts"] === true;
+        for (const alert of asArray(criteriaInstance["alerts"])) {
+            const alertValue = unwrap(alert);
+            if (!alertValue) {
+                continue;
+            }
+            this.push(data.references, {
+                model: MonitorStepsReferenceModel.AlertSeverity,
+                value: alertValue["alertSeverityId"],
+                path: `${label} alert severity`,
+                isOperative: createsAlerts,
+            });
+            this.pushSharedNotificationReferences({
+                references: data.references,
+                source: alertValue,
+                label: `${label} alert`,
+                isOperative: createsAlerts,
+            });
+        }
+    }
+    // The four id arrays CriteriaIncident and CriteriaAlert have in common.
+    static pushSharedNotificationReferences(data) {
+        const arrays = [
+            {
+                field: "onCallPolicyIds",
+                model: MonitorStepsReferenceModel.OnCallDutyPolicy,
+                path: "on-call policy",
+            },
+            {
+                field: "labelIds",
+                model: MonitorStepsReferenceModel.Label,
+                path: "label",
+            },
+            {
+                field: "ownerTeamIds",
+                model: MonitorStepsReferenceModel.Team,
+                path: "owner team",
+            },
+            {
+                field: "ownerUserIds",
+                model: MonitorStepsReferenceModel.User,
+                path: "owner user",
+            },
+        ];
+        for (const array of arrays) {
+            for (const id of asArray(data.source[array.field])) {
+                this.push(data.references, {
+                    model: array.model,
+                    value: id,
+                    path: `${data.label} ${array.path}`,
+                    isOperative: data.isOperative,
+                });
+            }
+        }
+    }
+    static push(references, data) {
+        const id = toReferenceId(data.value);
+        if (!id) {
+            return;
+        }
+        references.push({
+            model: data.model,
+            id: id,
+            path: data.path,
+            isOperative: data.isOperative,
+        });
+    }
+    static toJSONObject(monitorSteps) {
+        if (!monitorSteps) {
+            return null;
+        }
+        if (monitorSteps instanceof MonitorSteps) {
+            /*
+             * toJSON() on a MonitorSteps whose `data` is undefined returns the
+             * "new monitor steps" skeleton, which holds no references. Walking it is
+             * harmless.
+             */
+            return unwrap(monitorSteps.toJSON());
+        }
+        return unwrap(monitorSteps);
+    }
+}
+//# sourceMappingURL=MonitorStepsReferenceExtractor.js.map

package/build/dist/Server/Utils/Monitor/MonitorStepsReferenceExtractor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"MonitorStepsReferenceExtractor.js","sourceRoot":"","sources":["../../../../../Server/Utils/Monitor/MonitorStepsReferenceExtractor.ts"],"names":[],"mappings":"AACA,OAAO,YAAY,MAAM,qCAAqC,CAAC;AAC/D,OAAO,QAAQ,MAAM,yBAAyB,CAAC;AAC/C,OAAO,MAAM,MAAM,uBAAuB,CAAC;AAE3C;;;;;;;;;;;;;;;GAeG;AAEH,MAAM,CAAN,IAAY,0BAWX;AAXD,WAAY,0BAA0B;IACpC,8DAAgC,CAAA;IAChC,oEAAsC,CAAA;IACtC,8DAAgC,CAAA;IAChC,sEAAwC,CAAA;IACxC,6CAAe,CAAA;IACf,2CAAa,CAAA;IACb,2CAAa,CAAA;IACb,4DAA8B,CAAA;IAC9B,oEAAsC,CAAA;IACtC,8DAAgC,CAAA;AAClC,CAAC,EAXW,0BAA0B,KAA1B,0BAA0B,QAWrC;AAED;;;GAGG;AACH,MAAM,6BAA6B,GAAkB;IACnD,YAAY;IACZ,cAAc;IACd,kBAAkB;IAClB,gBAAgB;IAChB,eAAe;CAChB,CAAC;AA6BF;;;;;;GAMG;AACH,SAAS,MAAM,CAAC,KAA4B;IAC1C,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,MAAM,CAAC,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACrE,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,MAAM,GAAe,KAAmB,CAAC;IAE/C,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,OAAO,MAAM,CAAC,OAAO,CAAC,KAAK,MAAM,CAAC,MAAM,EAAE,CAAC;QAChE,OAAO,MAAM,CAAC,OAAO,CAAe,CAAC;IACvC,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,OAAO,CAAC,KAA4B;IAC3C,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAE,KAAmB,CAAC,CAAC,CAAC,EAAE,CAAC;AAC1D,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,aAAa,CAAC,KAA4B;IACxD,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,KAAK,YAAY,QAAQ,EAAE,CAAC;QAC9B,OAAO,KAAK,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,IAAI,IAAI,CAAC;IACzC,CAAC;IAED,IAAI,OAAO,KAAK,KAAK,MAAM,CAAC,MAAM,EAAE,CAAC;QACnC,OAAQ,KAAgB,CAAC,IAAI,EAAE,IAAI,IAAI,CAAC;IAC1C,CAAC;IAED,IAAI,OAAO,KAAK,KAAK,MAAM,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAC5D,MAAM,KAAK,GAA2B,KAAoB,CAAC,OAAO,CAAC,CAAC;QAEpE,IAAI,OAAO,KAAK,KAAK,MAAM,CAAC,MAAM,EAAE,CAAC;YACnC,OAAQ,KAAgB,CAAC,IAAI,EAAE,IAAI,IAAI,CAAC;QAC1C,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,CAAC,OAAO,OAAO,8BAA8B;IACjD;;;;;OAKG;IACI,MAAM,CAAC,OAAO,CACnB,YAA0D;QAE1D,MAAM,IAAI,GAAsB,IAAI,CAAC,YAAY,CAAC,YAAY,CAAC,CAAC;QAEhE,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,MAAM,UAAU,GAAiC,EAAE,CAAC;QAEpD,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE;YACpB,KAAK,EAAE,0BAA0B,CAAC,aAAa;YAC/C,KAAK,EAAE,IAAI,CAAC,wBAAwB,CAAC;YACrC,IAAI,EAAE,wBAAwB;YAC9B;;;;eAIG;YACH,WAAW,EAAE,IAAI;SAClB,CAAC,CAAC;QAEH,MAAM,KAAK,GAAc,OAAO,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC,CAAC;QAEpE,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,SAAS,GAAsB,MAAM,CAAC,IAAiB,CAAC,CAAC;YAE/D,IAAI,CAAC,SAAS,EAAE,CAAC;gBACf,SAAS;YACX,CAAC;YAED,IAAI,CAAC,qBAAqB,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;YAElD,MAAM,QAAQ,GAAsB,MAAM,CAAC,SAAS,CAAC,iBAAiB,CAAC,CAAC,CAAC;YAEzE,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,SAAS;YACX,CAAC;YAED,MAAM,SAAS,GAAc,OAAO,CAClC,QAAQ,CAAC,8BAA8B,CAAC,CACzC,CAAC;YAEF,KAAK,IAAI,KAAK,GAAW,CAAC,EAAE,KAAK,GAAG,SAAS,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC;gBAC9D,IAAI,CAAC,2BAA2B,CAAC;oBAC/B,UAAU,EAAE,UAAU;oBACtB,gBAAgB,EAAE,MAAM,CAAC,SAAS,CAAC,KAAK,CAAc,CAAC;oBACvD,KAAK,EAAE,KAAK;iBACb,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,OAAO,UAAU,CAAC;IACpB,CAAC;IAED;;;;;;;;;;;;;OAaG;IACK,MAAM,CAAC,qBAAqB,CAClC,UAAwC,EACxC,IAAgB;QAEhB,KAAK,MAAM,KAAK,IAAI,6BAA6B,EAAE,CAAC;YAClD,MAAM,MAAM,GAAsB,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;YAEtD,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,SAAS;YACX,CAAC;YAED,KAAK,MAAM,EAAE,IAAI,OAAO,CAAC,MAAM,CAAC,qBAAqB,CAAC,CAAC,EAAE,CAAC;gBACxD,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE;oBACpB,KAAK,EAAE,0BAA0B,CAAC,gBAAgB;oBAClD,KAAK,EAAE,EAAe;oBACtB,IAAI,EAAE,6BAA6B;oBACnC,WAAW,EAAE,KAAK;iBACnB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,MAAM,oBAAoB,GAAsB,MAAM,CACpD,IAAI,CAAC,sBAAsB,CAAC,CAC7B,CAAC;QAEF,IAAI,oBAAoB,EAAE,CAAC;YACzB,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE;gBACpB,KAAK,EAAE,0BAA0B,CAAC,aAAa;gBAC/C,KAAK,EAAE,oBAAoB,CAAC,iBAAiB,CAAC;gBAC9C,IAAI,EAAE,0BAA0B;gBAChC,WAAW,EAAE,KAAK;aACnB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAEO,MAAM,CAAC,2BAA2B,CAAC,IAI1C;QACC,MAAM,gBAAgB,GAAsB,IAAI,CAAC,gBAAgB,CAAC;QAElE,IAAI,CAAC,gBAAgB,EAAE,CAAC;YACtB,OAAO;QACT,CAAC;QAED,MAAM,IAAI,GACP,gBAAgB,CAAC,MAAM,CAAY,IAAI,IAAI,IAAI,CAAC,KAAK,GAAG,CAAC,EAAE,CAAC;QAC/D,MAAM,KAAK,GAAW,aAAa,IAAI,GAAG,CAAC;QAE3C,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE;YACzB,KAAK,EAAE,0BAA0B,CAAC,aAAa;YAC/C,KAAK,EAAE,gBAAgB,CAAC,iBAAiB,CAAC;YAC1C,IAAI,EAAE,GAAG,KAAK,iBAAiB;YAC/B,WAAW,EAAE,gBAAgB,CAAC,qBAAqB,CAAC,KAAK,IAAI;SAC9D,CAAC,CAAC;QAEH,MAAM,gBAAgB,GACpB,gBAAgB,CAAC,iBAAiB,CAAC,KAAK,IAAI,CAAC;QAE/C,KAAK,MAAM,QAAQ,IAAI,OAAO,CAAC,gBAAgB,CAAC,WAAW,CAAC,CAAC,EAAE,CAAC;YAC9D,MAAM,aAAa,GAAsB,MAAM,CAAC,QAAqB,CAAC,CAAC;YAEvE,IAAI,CAAC,aAAa,EAAE,CAAC;gBACnB,SAAS;YACX,CAAC;YAED,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE;gBACzB,KAAK,EAAE,0BAA0B,CAAC,gBAAgB;gBAClD,KAAK,EAAE,aAAa,CAAC,oBAAoB,CAAC;gBAC1C,IAAI,EAAE,GAAG,KAAK,oBAAoB;gBAClC,WAAW,EAAE,gBAAgB;aAC9B,CAAC,CAAC;YAEH,IAAI,CAAC,gCAAgC,CAAC;gBACpC,UAAU,EAAE,IAAI,CAAC,UAAU;gBAC3B,MAAM,EAAE,aAAa;gBACrB,KAAK,EAAE,GAAG,KAAK,WAAW;gBAC1B,WAAW,EAAE,gBAAgB;aAC9B,CAAC,CAAC;YAEH,KAAK,MAAM,cAAc,IAAI,OAAO,CAClC,aAAa,CAAC,qBAAqB,CAAC,CACrC,EAAE,CAAC;gBACF,MAAM,UAAU,GAAsB,MAAM,CAC1C,cAA2B,CAC5B,CAAC;gBAEF,IAAI,CAAC,UAAU,EAAE,CAAC;oBAChB,SAAS;gBACX,CAAC;gBAED,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE;oBACzB,KAAK,EAAE,0BAA0B,CAAC,YAAY;oBAC9C,KAAK,EAAE,UAAU,CAAC,QAAQ,CAAC;oBAC3B,IAAI,EAAE,GAAG,KAAK,uBAAuB;oBACrC,WAAW,EAAE,gBAAgB;iBAC9B,CAAC,CAAC;gBAEH,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE;oBACzB,KAAK,EAAE,0BAA0B,CAAC,IAAI;oBACtC,KAAK,EAAE,UAAU,CAAC,QAAQ,CAAC;oBAC3B,IAAI,EAAE,GAAG,KAAK,kBAAkB;oBAChC,WAAW,EAAE,gBAAgB;iBAC9B,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,MAAM,aAAa,GAAY,gBAAgB,CAAC,cAAc,CAAC,KAAK,IAAI,CAAC;QAEzE,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC;YACxD,MAAM,UAAU,GAAsB,MAAM,CAAC,KAAkB,CAAC,CAAC;YAEjE,IAAI,CAAC,UAAU,EAAE,CAAC;gBAChB,SAAS;YACX,CAAC;YAED,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE;gBACzB,KAAK,EAAE,0BAA0B,CAAC,aAAa;gBAC/C,KAAK,EAAE,UAAU,CAAC,iBAAiB,CAAC;gBACpC,IAAI,EAAE,GAAG,KAAK,iBAAiB;gBAC/B,WAAW,EAAE,aAAa;aAC3B,CAAC,CAAC;YAEH,IAAI,CAAC,gCAAgC,CAAC;gBACpC,UAAU,EAAE,IAAI,CAAC,UAAU;gBAC3B,MAAM,EAAE,UAAU;gBAClB,KAAK,EAAE,GAAG,KAAK,QAAQ;gBACvB,WAAW,EAAE,aAAa;aAC3B,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,wEAAwE;IAChE,MAAM,CAAC,gCAAgC,CAAC,IAK/C;QACC,MAAM,MAAM,GAIP;YACH;gBACE,KAAK,EAAE,iBAAiB;gBACxB,KAAK,EAAE,0BAA0B,CAAC,gBAAgB;gBAClD,IAAI,EAAE,gBAAgB;aACvB;YACD;gBACE,KAAK,EAAE,UAAU;gBACjB,KAAK,EAAE,0BAA0B,CAAC,KAAK;gBACvC,IAAI,EAAE,OAAO;aACd;YACD;gBACE,KAAK,EAAE,cAAc;gBACrB,KAAK,EAAE,0BAA0B,CAAC,IAAI;gBACtC,IAAI,EAAE,YAAY;aACnB;YACD;gBACE,KAAK,EAAE,cAAc;gBACrB,KAAK,EAAE,0BAA0B,CAAC,IAAI;gBACtC,IAAI,EAAE,YAAY;aACnB;SACF,CAAC;QAEF,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,KAAK,MAAM,EAAE,IAAI,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;gBACnD,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE;oBACzB,KAAK,EAAE,KAAK,CAAC,KAAK;oBAClB,KAAK,EAAE,EAAe;oBACtB,IAAI,EAAE,GAAG,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,IAAI,EAAE;oBACnC,WAAW,EAAE,IAAI,CAAC,WAAW;iBAC9B,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAEO,MAAM,CAAC,IAAI,CACjB,UAAwC,EACxC,IAKC;QAED,MAAM,EAAE,GAAkB,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAEpD,IAAI,CAAC,EAAE,EAAE,CAAC;YACR,OAAO;QACT,CAAC;QAED,UAAU,CAAC,IAAI,CAAC;YACd,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,EAAE,EAAE,EAAE;YACN,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,WAAW,EAAE,IAAI,CAAC,WAAW;SAC9B,CAAC,CAAC;IACL,CAAC;IAEO,MAAM,CAAC,YAAY,CACzB,YAA0D;QAE1D,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,OAAO,IAAI,CAAC;QACd,CAAC;QAED,IAAI,YAAY,YAAY,YAAY,EAAE,CAAC;YACzC;;;;eAIG;YACH,OAAO,MAAM,CAAC,YAAY,CAAC,MAAM,EAAE,CAAC,CAAC;QACvC,CAAC;QAED,OAAO,MAAM,CAAC,YAAY,CAAC,CAAC;IAC9B,CAAC;CACF"}

package/build/dist/Server/Utils/PasswordHash.js

@@ -0,0 +1,237 @@
+import { EncryptionSecret } from "../EnvironmentConfig";
+import BadDataException from "../../Types/Exception/BadDataException";
+import HashedString from "../../Types/HashedString";
+import crypto from "crypto";
+/*
+ * Password hashing for user credentials.
+ *
+ * WHY THIS IS NOT A PLAIN HASH
+ *
+ * SHA-256 is designed to be fast, and that is exactly wrong for a password.
+ * A commodity GPU computes billions of SHA-256 digests per second, so a
+ * leaked User table is a dictionary attack that finishes over lunch — a
+ * per-user salt stops the attacker amortising that work across accounts, but
+ * it does nothing to slow down any single guess.
+ *
+ * scrypt is deliberately expensive in BOTH time and memory. The memory cost
+ * is the important half: it is what stops an attacker buying a thousandfold
+ * speedup with GPUs or custom silicon, because memory bandwidth is the one
+ * thing that hardware cannot cheaply parallelise.
+ *
+ * THE CONSTRUCTION
+ *
+ *   input   = HMAC-SHA256(key = EncryptionSecret, message = password)
+ *   derived = scrypt(input, salt, 32 bytes, { N, r, p })
+ *
+ * The HMAC step carries the instance-wide EncryptionSecret as a "pepper".
+ * The pepper lives in configuration, not in the database, so a dump of
+ * Postgres alone is not enough to start guessing — the attacker also needs
+ * the deployment's secret. It also normalises the password to a fixed 32
+ * bytes before scrypt sees it, which sidesteps every question about very
+ * long or oddly-encoded inputs.
+ *
+ * THE STORED FORMAT
+ *
+ *   scrypt$N=16384,r=8,p=1$<64 hex characters>
+ *
+ * The hash carries the algorithm and the cost parameters it was produced
+ * with. That is what makes raising the cost later a non-event: old hashes
+ * keep verifying against the parameters recorded in them, and each user's
+ * hash is re-derived at their next successful login. Nothing about a cost
+ * bump requires a migration or a forced password reset.
+ *
+ * The salt is NOT in this string — it lives in the row's own salt column
+ * (see TableColumn.hashSaltColumn), which is where the previous scheme put
+ * it and where the write path keeps it in step with the hash.
+ */
+/*
+ * N is the CPU/memory cost. Memory used is 128 * N * r bytes, so the values
+ * below cost 16 MiB and roughly 50ms per hash on current server hardware.
+ *
+ * That is a deliberate middle: enough to make offline guessing expensive,
+ * cheap enough that a burst of logins does not exhaust the libuv thread pool
+ * or the box's memory. Raising N is a one-line change — bump it here, and
+ * every user is migrated to the new cost as they log in.
+ */
+const CURRENT_PARAMS = {
+    N: 16384,
+    r: 8,
+    p: 1,
+};
+/** Bytes of derived key. 32 bytes = the 64 hex characters stored. */
+const KEY_LENGTH_IN_BYTES = 32;
+const SCHEME_NAME = "scrypt";
+/*
+ * Refuse absurd parameters read back out of the database. Stored values are
+ * ours, not an attacker's, but a corrupted row must fail the login rather
+ * than ask Node to allocate gigabytes.
+ */
+const MAX_N = 1048576; // 2^20
+const MAX_R = 32;
+const MAX_P = 16;
+export default class PasswordHash {
+    /**
+     * A fresh, cryptographically random salt: 32 bytes as 64 hex characters.
+     *
+     * A salt is not a secret — its one job is to be UNIQUE per user, so that no
+     * precomputed table and no cracked password is ever worth anything against
+     * a second account.
+     */
+    static generateSalt() {
+        return crypto.randomBytes(32).toString("hex");
+    }
+    /** The `algorithm$params$` prefix that hashes written today carry. */
+    static getCurrentPrefix() {
+        return `${SCHEME_NAME}$${PasswordHash.encodeParams(CURRENT_PARAMS)}$`;
+    }
+    static getCurrentParams() {
+        return Object.assign({}, CURRENT_PARAMS);
+    }
+    static encodeParams(params) {
+        return `N=${params.N},r=${params.r},p=${params.p}`;
+    }
+    /**
+     * Pull the parameters and derived key back out of a stored value.
+     *
+     * Returns null for anything that is not one of our scrypt hashes — which
+     * includes every password written before this scheme existed. Callers use
+     * null to mean "fall back to the legacy comparison", so this must never
+     * throw on unrecognised input.
+     */
+    static parse(storedValue) {
+        const parts = storedValue.split("$");
+        if (parts.length !== 3 || parts[0] !== SCHEME_NAME) {
+            return null;
+        }
+        const match = parts[1].match(/^N=(\d+),r=(\d+),p=(\d+)$/);
+        if (!match) {
+            return null;
+        }
+        const params = {
+            N: Number(match[1]),
+            r: Number(match[2]),
+            p: Number(match[3]),
+        };
+        const isSane = params.N > 1 &&
+            params.N <= MAX_N &&
+            (params.N & (params.N - 1)) === 0 && // scrypt requires a power of two
+            params.r > 0 &&
+            params.r <= MAX_R &&
+            params.p > 0 &&
+            params.p <= MAX_P;
+        if (!isSane || !parts[2]) {
+            return null;
+        }
+        return { params: params, derivedKey: parts[2] };
+    }
+    /**
+     * The pepper step. Keyed with the instance's EncryptionSecret, so the
+     * database alone cannot be attacked offline.
+     */
+    static applyPepper(plainValue) {
+        return crypto
+            .createHmac("sha256", EncryptionSecret.toString())
+            .update(plainValue, "utf8")
+            .digest();
+    }
+    static derive(data) {
+        const { N, r, p } = data.params;
+        return new Promise((resolve, reject) => {
+            crypto.scrypt(PasswordHash.applyPepper(data.plainValue), data.salt, KEY_LENGTH_IN_BYTES, {
+                N: N,
+                r: r,
+                p: p,
+                /*
+                 * Node rejects the call outright when 128 * N * r exceeds
+                 * maxmem, and its default is a flat 32 MiB. Scale the ceiling
+                 * with the parameters instead, so raising N does not silently
+                 * become "Invalid scrypt params" at runtime.
+                 */
+                maxmem: 128 * N * r * 2,
+            }, (error, derivedKey) => {
+                if (error) {
+                    return reject(error);
+                }
+                return resolve(derivedKey.toString("hex"));
+            });
+        });
+    }
+    /**
+     * Hash a password for storage, at today's cost parameters.
+     *
+     * The returned string records the algorithm and the parameters used, so it
+     * stays verifiable after those parameters change.
+     */
+    static async hash(data) {
+        if (!data.plainValue) {
+            return "";
+        }
+        if (!data.salt) {
+            throw new BadDataException("A salt is required to hash a password.");
+        }
+        const derivedKey = await PasswordHash.derive({
+            plainValue: data.plainValue,
+            salt: data.salt,
+            params: CURRENT_PARAMS,
+        });
+        return `${PasswordHash.getCurrentPrefix()}${derivedKey}`;
+    }
+    /**
+     * Check a password against a stored value, whichever scheme wrote it.
+     *
+     * Three schemes are in circulation and all three have to keep working, or
+     * the change that introduced the next one locks people out:
+     *
+     *   scrypt$...   this one. Verified at the parameters recorded in the hash.
+     *   salted SHA   `SHA256("v2:" + salt + ":" + secret + ":" + password)`.
+     *   bare SHA     `SHA256(secret + password)`, from before salts existed.
+     *
+     * The last two are told apart by whether the row has a salt, which is the
+     * same rule they were written under. Anything not carrying a recognised
+     * scheme prefix is one of them.
+     */
+    static async verify(data) {
+        if (!data.plainValue || !data.storedValue) {
+            return false;
+        }
+        const parsed = PasswordHash.parse(data.storedValue);
+        if (!parsed) {
+            return await HashedString.verifyValue({
+                plainValue: data.plainValue,
+                hashedValue: data.storedValue,
+                encryptionSecret: EncryptionSecret,
+                salt: data.salt || null,
+            });
+        }
+        /*
+         * A scrypt hash is meaningless without the salt it was derived with.
+         * Reaching here without one means the caller did not select the salt
+         * column, which would otherwise look exactly like a wrong password.
+         */
+        if (!data.salt) {
+            throw new BadDataException("Cannot verify a salted password hash without its salt. Select the salt column alongside the hash.");
+        }
+        const derivedKey = await PasswordHash.derive({
+            plainValue: data.plainValue,
+            salt: data.salt,
+            params: parsed.params,
+        });
+        return HashedString.isEqual(derivedKey, parsed.derivedKey);
+    }
+    /**
+     * Should this stored value be re-hashed the next time the password is
+     * known to be correct?
+     *
+     * True for every hash that is not exactly what `hash()` writes today: the
+     * two SHA-256 schemes that came before, and any scrypt hash carrying
+     * parameters that are no longer current. This is the whole upgrade
+     * mechanism — raising the cost above is enough to start migrating users.
+     */
+    static needsUpgrade(storedValue) {
+        if (!storedValue) {
+            return false;
+        }
+        return !storedValue.startsWith(PasswordHash.getCurrentPrefix());
+    }
+}
+//# sourceMappingURL=PasswordHash.js.map

package/build/dist/Server/Utils/PasswordHash.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"PasswordHash.js","sourceRoot":"","sources":["../../../../Server/Utils/PasswordHash.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AACxD,OAAO,gBAAgB,MAAM,wCAAwC,CAAC;AACtE,OAAO,YAAY,MAAM,0BAA0B,CAAC;AACpD,OAAO,MAAM,MAAM,QAAQ,CAAC;AAE5B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyCG;AAEH;;;;;;;;GAQG;AACH,MAAM,cAAc,GAAiB;IACnC,CAAC,EAAE,KAAK;IACR,CAAC,EAAE,CAAC;IACJ,CAAC,EAAE,CAAC;CACL,CAAC;AAEF,qEAAqE;AACrE,MAAM,mBAAmB,GAAW,EAAE,CAAC;AAEvC,MAAM,WAAW,GAAW,QAAQ,CAAC;AAErC;;;;GAIG;AACH,MAAM,KAAK,GAAW,OAAO,CAAC,CAAC,OAAO;AACtC,MAAM,KAAK,GAAW,EAAE,CAAC;AACzB,MAAM,KAAK,GAAW,EAAE,CAAC;AAazB,MAAM,CAAC,OAAO,OAAO,YAAY;IAC/B;;;;;;OAMG;IACI,MAAM,CAAC,YAAY;QACxB,OAAO,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAChD,CAAC;IAED,sEAAsE;IAC/D,MAAM,CAAC,gBAAgB;QAC5B,OAAO,GAAG,WAAW,IAAI,YAAY,CAAC,YAAY,CAAC,cAAc,CAAC,GAAG,CAAC;IACxE,CAAC;IAEM,MAAM,CAAC,gBAAgB;QAC5B,yBAAY,cAAc,EAAG;IAC/B,CAAC;IAEO,MAAM,CAAC,YAAY,CAAC,MAAoB;QAC9C,OAAO,KAAK,MAAM,CAAC,CAAC,MAAM,MAAM,CAAC,CAAC,MAAM,MAAM,CAAC,CAAC,EAAE,CAAC;IACrD,CAAC;IAED;;;;;;;OAOG;IACK,MAAM,CAAC,KAAK,CAAC,WAAmB;QACtC,MAAM,KAAK,GAAkB,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAEpD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,WAAW,EAAE,CAAC;YACnD,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,KAAK,GAA6B,KAAK,CAAC,CAAC,CAAY,CAAC,KAAK,CAC/D,2BAA2B,CAC5B,CAAC;QAEF,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,MAAM,GAAiB;YAC3B,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YACnB,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YACnB,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;SACpB,CAAC;QAEF,MAAM,MAAM,GACV,MAAM,CAAC,CAAC,GAAG,CAAC;YACZ,MAAM,CAAC,CAAC,IAAI,KAAK;YACjB,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,iCAAiC;YACtE,MAAM,CAAC,CAAC,GAAG,CAAC;YACZ,MAAM,CAAC,CAAC,IAAI,KAAK;YACjB,MAAM,CAAC,CAAC,GAAG,CAAC;YACZ,MAAM,CAAC,CAAC,IAAI,KAAK,CAAC;QAEpB,IAAI,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;YACzB,OAAO,IAAI,CAAC;QACd,CAAC;QAED,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;IAClD,CAAC;IAED;;;OAGG;IACK,MAAM,CAAC,WAAW,CAAC,UAAkB;QAC3C,OAAO,MAAM;aACV,UAAU,CAAC,QAAQ,EAAE,gBAAgB,CAAC,QAAQ,EAAE,CAAC;aACjD,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC;aAC1B,MAAM,EAAE,CAAC;IACd,CAAC;IAEO,MAAM,CAAC,MAAM,CAAC,IAIrB;QACC,MAAM,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC;QAEhC,OAAO,IAAI,OAAO,CAChB,CAAC,OAAgC,EAAE,MAA8B,EAAE,EAAE;YACnE,MAAM,CAAC,MAAM,CACX,YAAY,CAAC,WAAW,CAAC,IAAI,CAAC,UAAU,CAAC,EACzC,IAAI,CAAC,IAAI,EACT,mBAAmB,EACnB;gBACE,CAAC,EAAE,CAAC;gBACJ,CAAC,EAAE,CAAC;gBACJ,CAAC,EAAE,CAAC;gBACJ;;;;;mBAKG;gBACH,MAAM,EAAE,GAAG,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC;aACxB,EACD,CAAC,KAAmB,EAAE,UAAkB,EAAQ,EAAE;gBAChD,IAAI,KAAK,EAAE,CAAC;oBACV,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;gBACvB,CAAC;gBAED,OAAO,OAAO,CAAC,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;YAC7C,CAAC,CACF,CAAC;QACJ,CAAC,CACF,CAAC;IACJ,CAAC;IAED;;;;;OAKG;IACI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,IAGxB;QACC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;YACrB,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;YACf,MAAM,IAAI,gBAAgB,CAAC,wCAAwC,CAAC,CAAC;QACvE,CAAC;QAED,MAAM,UAAU,GAAW,MAAM,YAAY,CAAC,MAAM,CAAC;YACnD,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,MAAM,EAAE,cAAc;SACvB,CAAC,CAAC;QAEH,OAAO,GAAG,YAAY,CAAC,gBAAgB,EAAE,GAAG,UAAU,EAAE,CAAC;IAC3D,CAAC;IAED;;;;;;;;;;;;;OAaG;IACI,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,IAI1B;QACC,IAAI,CAAC,IAAI,CAAC,UAAU,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;YAC1C,OAAO,KAAK,CAAC;QACf,CAAC;QAED,MAAM,MAAM,GAA8B,YAAY,CAAC,KAAK,CAC1D,IAAI,CAAC,WAAW,CACjB,CAAC;QAEF,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,MAAM,YAAY,CAAC,WAAW,CAAC;gBACpC,UAAU,EAAE,IAAI,CAAC,UAAU;gBAC3B,WAAW,EAAE,IAAI,CAAC,WAAW;gBAC7B,gBAAgB,EAAE,gBAAgB;gBAClC,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,IAAI;aACxB,CAAC,CAAC;QACL,CAAC;QAED;;;;WAIG;QACH,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;YACf,MAAM,IAAI,gBAAgB,CACxB,mGAAmG,CACpG,CAAC;QACJ,CAAC;QAED,MAAM,UAAU,GAAW,MAAM,YAAY,CAAC,MAAM,CAAC;YACnD,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,MAAM,EAAE,MAAM,CAAC,MAAM;SACtB,CAAC,CAAC;QAEH,OAAO,YAAY,CAAC,OAAO,CAAC,UAAU,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC;IAC7D,CAAC;IAED;;;;;;;;OAQG;IACI,MAAM,CAAC,YAAY,CAAC,WAAmB;QAC5C,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,OAAO,KAAK,CAAC;QACf,CAAC;QAED,OAAO,CAAC,WAAW,CAAC,UAAU,CAAC,YAAY,CAAC,gBAAgB,EAAE,CAAC,CAAC;IAClE,CAAC;CACF"}

package/build/dist/Server/Utils/SingleFlight.js

@@ -0,0 +1,76 @@
+/*
+ * In-process de-duplication of concurrent identical work.
+ *
+ * A Redis fence admits one writer per window across the FLEET, but every
+ * caller still pays a Redis round trip to discover it lost. That is the wrong
+ * unit of work when the duplicate callers are in the same process: an ingest
+ * pod running hundreds of concurrent jobs re-resolves the same handful of
+ * services on every batch, so hundreds of coroutines independently ask Redis
+ * the same question and then throw the answer away.
+ *
+ * SingleFlight collapses them first. The first caller for a key runs the work;
+ * everyone who arrives while it is still in flight awaits the SAME promise and
+ * gets the same result. Per pod, N concurrent duplicates cost one Redis round
+ * trip and at most one database write instead of N of each — which is what
+ * turns fleet-wide write amplification from (pods x jobs) into (pods).
+ *
+ * Deliberately unbounded in time but not in size: entries live only for the
+ * duration of the work itself and are removed in a `finally`, so the map holds
+ * exactly the set of operations currently running. There is no eviction policy
+ * to get wrong and nothing to leak if work hangs beyond a caller's patience —
+ * the entry is released when the underlying promise settles either way.
+ *
+ * This is a per-process optimisation and NOT a correctness mechanism: nothing
+ * here coordinates across pods. It composes with a distributed fence, it does
+ * not replace one.
+ */
+class SingleFlight {
+    /**
+     * Run `work` for `key`, or join the run already in flight for it.
+     *
+     * Followers observe whatever the leader observes, including a rejection.
+     * That is intentional: these callers asked for identical work, so they are
+     * entitled to identical outcomes, and a follower silently retrying a failure
+     * the leader just hit would re-create the stampede this exists to prevent.
+     */
+    static async run(key, work) {
+        const existing = this.inflight.get(key);
+        if (existing) {
+            return (await existing);
+        }
+        /*
+         * Invoke through a wrapper so a `work` that throws SYNCHRONOUSLY still
+         * produces a promise to register and await. Calling it bare would throw
+         * past the bookkeeping below and leave the key registered forever.
+         */
+        const promise = (async () => {
+            return await work();
+        })();
+        this.inflight.set(key, promise);
+        try {
+            return await promise;
+        }
+        finally {
+            /*
+             * Only clear the entry if it is still ours. A follower cannot install a
+             * new one (it awaited instead), but a later leader can, and blindly
+             * deleting here would evict that live run and let the next caller start
+             * a duplicate of work already underway.
+             */
+            if (this.inflight.get(key) === promise) {
+                this.inflight.delete(key);
+            }
+        }
+    }
+    /** Number of operations currently in flight. For tests and diagnostics. */
+    static inflightCount() {
+        return this.inflight.size;
+    }
+    /** Drop all bookkeeping. For tests only. */
+    static clear() {
+        this.inflight.clear();
+    }
+}
+SingleFlight.inflight = new Map();
+export default SingleFlight;
+//# sourceMappingURL=SingleFlight.js.map

package/build/dist/Server/Utils/SingleFlight.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"SingleFlight.js","sourceRoot":"","sources":["../../../../Server/Utils/SingleFlight.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,MAAqB,YAAY;IAM/B;;;;;;;OAOG;IACI,MAAM,CAAC,KAAK,CAAC,GAAG,CAAI,GAAW,EAAE,IAAsB;QAC5D,MAAM,QAAQ,GAAiC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAEtE,IAAI,QAAQ,EAAE,CAAC;YACb,OAAO,CAAC,MAAM,QAAQ,CAAM,CAAC;QAC/B,CAAC;QAED;;;;WAIG;QACH,MAAM,OAAO,GAAe,CAAC,KAAK,IAAI,EAAE;YACtC,OAAO,MAAM,IAAI,EAAE,CAAC;QACtB,CAAC,CAAC,EAAE,CAAC;QAEL,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QAEhC,IAAI,CAAC;YACH,OAAO,MAAM,OAAO,CAAC;QACvB,CAAC;gBAAS,CAAC;YACT;;;;;eAKG;YACH,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,OAAO,EAAE,CAAC;gBACvC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC5B,CAAC;QACH,CAAC;IACH,CAAC;IAED,2EAA2E;IACpE,MAAM,CAAC,aAAa;QACzB,OAAO,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;IAC5B,CAAC;IAED,4CAA4C;IACrC,MAAM,CAAC,KAAK;QACjB,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;IACxB,CAAC;;AAtDc,qBAAQ,GAAkC,IAAI,GAAG,EAG7D,CAAC;eAJe,YAAY"}