@oneuptime/common 12.0.24 → 12.0.26

package/build/dist/Server/Services/CloudResourceService.js

@@ -18,6 +18,12 @@ import LIMIT_MAX from "../../Types/Database/LimitMax";
 import GlobalCache from "../Infrastructure/GlobalCache";
 import logger from "../Utils/Logger";
 import crypto from "crypto";
+import CloudResourceFeedService from "./CloudResourceFeedService";
+import { CloudResourceFeedEventType } from "../../Models/DatabaseModels/CloudResourceFeed";
+import ResourceFeedUtil from "../Utils/ResourceFeed/ResourceFeedUtil";
+import { Blue500, Gray500, Green500, Yellow500 } from "../../Types/BrandColors";
+import URL from "../../Types/API/URL";
+import DatabaseConfig from "../DatabaseConfig";
 import CloudResourceLabelRuleEngineService from "./CloudResourceLabelRuleEngineService";
 import CloudResourceOwnerRuleEngineService from "./CloudResourceOwnerRuleEngineService";
 const LAST_SEEN_CACHE_NAMESPACE = "cloud-resource-last-seen";
@@ -28,7 +34,7 @@ export class Service extends DatabaseService {
     constructor() {
         super(Model);
     }
-    async onCreateSuccess(_onCreate, createdItem) {
+    async onCreateSuccess(onCreate, createdItem) {
         if (createdItem.projectId && createdItem.id) {
             Promise.resolve()
                 .then(async () => {
@@ -45,6 +51,15 @@ export class Service extends DatabaseService {
                 });
             });
         }
+        /*
+         * The overview page can say what this cloud resource looks like now; only
+         * the feed can say why it exists at all - whether a person added it or
+         * ingest registered it the first time telemetry named it. Fire and
+         * forget: a feed write must never fail the create it describes.
+         */
+        this.writeCloudResourceCreatedFeed(createdItem, onCreate).catch((error) => {
+            logger.error(error);
+        });
         return createdItem;
     }
     async findOrCreateByResourceIdentifier(data) {
@@ -258,6 +273,141 @@ export class Service extends DatabaseService {
             }
         }
     }
+    /**
+     * Display name for this cloud resource, or an empty string when the row is
+     * gone. Feed writers call this on a best-effort basis, so a missing row must
+     * not throw and take the surrounding write down with it.
+     */
+    async getCloudResourceName(data) {
+        const cloudResource = await this.findOneById({
+            id: data.cloudResourceId,
+            select: {
+                name: true,
+            },
+            props: {
+                isRoot: true,
+            },
+        });
+        return (cloudResource === null || cloudResource === void 0 ? void 0 : cloudResource.name) || "";
+    }
+    async getCloudResourceLinkInDashboard(projectId, cloudResourceId) {
+        const dashboardUrl = await DatabaseConfig.getDashboardUrl();
+        return URL.fromString(dashboardUrl.toString()).addRoute(`/${projectId.toString()}/cloud/${cloudResourceId.toString()}`);
+    }
+    /**
+     * "[Cloud Resource prod-1](https://…)" - the form every feed item uses to
+     * name the resource it is about.
+     */
+    async getCloudResourceMarkdownLink(projectId, cloudResourceId) {
+        const name = await this.getCloudResourceName({
+            cloudResourceId: cloudResourceId,
+        });
+        const link = await this.getCloudResourceLinkInDashboard(projectId, cloudResourceId);
+        return `[Cloud Resource ${name}](${link.toString()})`;
+    }
+    async writeCloudResourceCreatedFeed(createdItem, onCreate) {
+        const projectId = createdItem.projectId;
+        const cloudResourceId = createdItem.id || undefined;
+        if (!projectId || !cloudResourceId) {
+            return;
+        }
+        /*
+         * Ingest creates these rows with root props and no acting user; every
+         * dashboard, API and Terraform create carries one. That is the whole
+         * signal for "was this discovered automatically or added by a person".
+         */
+        const createdByUserId = createdItem.createdByUserId ||
+            onCreate.createBy.props.userId ||
+            undefined;
+        const markdown = await ResourceFeedUtil.getCreatedFeedMarkdown({
+            resourceTypeName: "cloud resource",
+            resourceMarkdownLink: await this.getCloudResourceMarkdownLink(projectId, cloudResourceId),
+            projectId: projectId,
+            createdByUserId: createdByUserId,
+            identifierName: "Resource identifier",
+            identifierValue: createdItem.resourceIdentifier,
+            description: createdItem.description,
+        });
+        await CloudResourceFeedService.createCloudResourceFeedItem({
+            cloudResourceId: cloudResourceId,
+            projectId: projectId,
+            cloudResourceFeedEventType: CloudResourceFeedEventType.CloudResourceCreated,
+            displayColor: Green500,
+            feedInfoInMarkdown: markdown.feedInfoInMarkdown,
+            moreInformationInMarkdown: markdown.moreInformationInMarkdown,
+            userId: createdByUserId,
+        });
+    }
+    async onUpdateSuccess(onUpdate, updatedItemIds) {
+        this.writeCloudResourceUpdatedFeed(onUpdate, updatedItemIds).catch((error) => {
+            logger.error(error);
+        });
+        return onUpdate;
+    }
+    async writeCloudResourceUpdatedFeed(onUpdate, updatedItemIds) {
+        const updateData = onUpdate.updateBy
+            .data;
+        /*
+         * Heartbeats update lastSeenAt / otelCollectorStatus / agentVersion and the
+         * rollup counters constantly. Only the columns a person would recognise as
+         * a change earn a feed item - see MEANINGFUL_UPDATE_COLUMNS.
+         */
+        const changedColumns = ResourceFeedUtil.getUpdatedColumnsWorthRecording(updateData);
+        if (changedColumns.length === 0 || updatedItemIds.length === 0) {
+            return;
+        }
+        const isArchiveChange = ResourceFeedUtil.isArchiveChange(updateData);
+        const isArchived = Boolean(updateData["isArchived"]);
+        const otherColumns = changedColumns.filter((column) => {
+            return column !== "isArchived";
+        });
+        const updatedByUserId = onUpdate.updateBy.props.userId || undefined;
+        for (const cloudResourceId of updatedItemIds) {
+            const cloudResource = await this.findOneById({
+                id: cloudResourceId,
+                select: {
+                    projectId: true,
+                },
+                props: {
+                    isRoot: true,
+                },
+            });
+            const projectId = cloudResource === null || cloudResource === void 0 ? void 0 : cloudResource.projectId;
+            if (!projectId) {
+                continue;
+            }
+            const resourceMarkdownLink = await this.getCloudResourceMarkdownLink(projectId, cloudResourceId);
+            if (isArchiveChange) {
+                await CloudResourceFeedService.createCloudResourceFeedItem({
+                    cloudResourceId: cloudResourceId,
+                    projectId: projectId,
+                    cloudResourceFeedEventType: isArchived
+                        ? CloudResourceFeedEventType.CloudResourceArchived
+                        : CloudResourceFeedEventType.CloudResourceRestored,
+                    displayColor: isArchived ? Yellow500 : Blue500,
+                    feedInfoInMarkdown: isArchived
+                        ? `🗄️ ${resourceMarkdownLink} was archived.`
+                        : `♻️ ${resourceMarkdownLink} was restored from the archive.`,
+                    userId: updatedByUserId,
+                });
+            }
+            if (otherColumns.length > 0) {
+                const markdown = ResourceFeedUtil.getUpdatedFeedMarkdown({
+                    resourceMarkdownLink: resourceMarkdownLink,
+                    columns: otherColumns,
+                });
+                await CloudResourceFeedService.createCloudResourceFeedItem({
+                    cloudResourceId: cloudResourceId,
+                    projectId: projectId,
+                    cloudResourceFeedEventType: CloudResourceFeedEventType.CloudResourceUpdated,
+                    displayColor: Gray500,
+                    feedInfoInMarkdown: markdown.feedInfoInMarkdown,
+                    moreInformationInMarkdown: markdown.moreInformationInMarkdown,
+                    userId: updatedByUserId,
+                });
+            }
+        }
+    }
 }
 __decorate([
     CaptureSpan(),
@@ -289,6 +439,32 @@ __decorate([
     __metadata("design:paramtypes", []),
     __metadata("design:returntype", Promise)
 ], Service.prototype, "markDisconnectedResources", null);
+__decorate([
+    CaptureSpan(),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object]),
+    __metadata("design:returntype", Promise)
+], Service.prototype, "getCloudResourceName", null);
+__decorate([
+    CaptureSpan(),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [ObjectID,
+        ObjectID]),
+    __metadata("design:returntype", Promise)
+], Service.prototype, "getCloudResourceLinkInDashboard", null);
+__decorate([
+    CaptureSpan(),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [ObjectID,
+        ObjectID]),
+    __metadata("design:returntype", Promise)
+], Service.prototype, "getCloudResourceMarkdownLink", null);
+__decorate([
+    CaptureSpan(),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object, Array]),
+    __metadata("design:returntype", Promise)
+], Service.prototype, "onUpdateSuccess", null);
 function fingerprintLabelIds(labelIds) {
     const sorted = labelIds
         .map((id) => {

package/build/dist/Server/Services/CloudResourceService.js.map

@@ -1 +1 @@
-{"version":3,"file":"CloudResourceService.js","sourceRoot":"","sources":["../../../../Server/Services/CloudResourceService.ts"],"names":[],"mappings":";;;;;;;;;AAAA,OAAO,eAAe,MAAM,mBAAmB,CAAC;AAChD,OAAO,KAAK,MAAM,2CAA2C,CAAC;AAE9D,OAAO,WAAW,MAAM,gCAAgC,CAAC;AACzD,OAAO,iBAAiB,MAAM,sCAAsC,CAAC;AACrE,OAAO,QAAQ,MAAM,sBAAsB,CAAC;AAC5C,OAAO,WAAW,MAAM,+BAA+B,CAAC;AACxD,OAAO,aAAa,MAAM,kBAAkB,CAAC;AAC7C,OAAO,SAAS,MAAM,+BAA+B,CAAC;AACtD,OAAO,WAAW,MAAM,+BAA+B,CAAC;AACxD,OAAO,MAAyB,MAAM,iBAAiB,CAAC;AACxD,OAAO,MAAM,MAAM,QAAQ,CAAC;AAE5B,OAAO,mCAAmC,MAAM,uCAAuC,CAAC;AACxF,OAAO,mCAAmC,MAAM,uCAAuC,CAAC;AAExF,MAAM,yBAAyB,GAAW,0BAA0B,CAAC;AACrE,MAAM,0BAA0B,GAAW,EAAE,CAAC;AAE9C,MAAM,8BAA8B,GAAW,+BAA+B,CAAC;AAC/E,MAAM,gCAAgC,GAAW,EAAE,CAAC;AAEpD,MAAM,OAAO,OAAQ,SAAQ,eAAsB;IACjD;QACE,KAAK,CAAC,KAAK,CAAC,CAAC;IACf,CAAC;IAGwB,AAAN,KAAK,CAAC,eAAe,CACtC,SAA0B,EAC1B,WAAkB;QAElB,IAAI,WAAW,CAAC,SAAS,IAAI,WAAW,CAAC,EAAE,EAAE,CAAC;YAC5C,OAAO,CAAC,OAAO,EAAE;iBACd,IAAI,CAAC,KAAK,IAAI,EAAE;gBACf,MAAM,mCAAmC,CAAC,yBAAyB,CACjE,WAAW,CACZ,CAAC;YACJ,CAAC,CAAC;iBACD,IAAI,CAAC,KAAK,IAAI,EAAE;gBACf,MAAM,mCAAmC,CAAC,yBAAyB,CACjE,WAAW,CACZ,CAAC;YACJ,CAAC,CAAC;iBACD,KAAK,CAAC,CAAC,KAAY,EAAE,EAAE;;gBACtB,MAAM,CAAC,KAAK,CACV,gFAAgF,KAAK,EAAE,EACvF;oBACE,SAAS,EAAE,MAAA,WAAW,CAAC,SAAS,0CAAE,QAAQ,EAAE;oBAC5C,eAAe,EAAE,MAAA,WAAW,CAAC,EAAE,0CAAE,QAAQ,EAAE;iBAC3B,CACnB,CAAC;YACJ,CAAC,CAAC,CAAC;QACP,CAAC;QACD,OAAO,WAAW,CAAC;IACrB,CAAC;IAGY,AAAN,KAAK,CAAC,gCAAgC,CAAC,IAQ7C;QACC,MAAM,gBAAgB,GAAiB,MAAM,IAAI,CAAC,SAAS,CAAC;YAC1D,KAAK,EAAE;gBACL,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,kBAAkB,EAAE,WAAW,CAAC,gBAAgB,CAC9C,IAAI,CAAC,kBAAkB,CACxB;aACF;YACD,MAAM,EAAE;gBACN,GAAG,EAAE,IAAI;gBACT,SAAS,EAAE,IAAI;gBACf,kBAAkB,EAAE,IAAI;aACzB;YACD,KAAK,EAAE;gBACL,MAAM,EAAE,IAAI;aACb;SACF,CAAC,CAAC;QAEH,IAAI,gBAAgB,EAAE,CAAC;YACrB,OAAO,gBAAgB,CAAC;QAC1B,CAAC;QAED,IAAI,CAAC;YACH,MAAM,WAAW,GAAU,IAAI,KAAK,EAAE,CAAC;YACvC,WAAW,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;YACvC,WAAW,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,kBAAkB,CAAC;YACxD,WAAW,CAAC,kBAAkB,GAAG,IAAI,CAAC,kBAAkB,CAAC;YACzD,WAAW,CAAC,mBAAmB,GAAG,WAAW,CAAC;YAC9C,WAAW,CAAC,UAAU,GAAG,aAAa,CAAC,cAAc,EAAE,CAAC;YACxD,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;gBACvB,WAAW,CAAC,aAAa,GAAG,IAAI,CAAC,aAAa,CAAC;YACjD,CAAC;YACD,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;gBACvB,WAAW,CAAC,aAAa,GAAG,IAAI,CAAC,aAAa,CAAC;YACjD,CAAC;YACD,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;gBACrB,WAAW,CAAC,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC;YAC7C,CAAC;YACD,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;gBACxB,WAAW,CAAC,cAAc,GAAG,IAAI,CAAC,cAAc,CAAC;YACnD,CAAC;YAED,MAAM,eAAe,GAAU,MAAM,IAAI,CAAC,MAAM,CAAC;gBAC/C,IAAI,EAAE,WAAW;gBACjB,KAAK,EAAE;oBACL,MAAM,EAAE,IAAI;iBACb;aACF,CAAC,CAAC;YAEH,OAAO,eAAe,CAAC;QACzB,CAAC;QAAC,WAAM,CAAC;YACP,MAAM,iBAAiB,GAAiB,MAAM,IAAI,CAAC,SAAS,CAAC;gBAC3D,KAAK,EAAE;oBACL,SAAS,EAAE,IAAI,CAAC,SAAS;oBACzB,kBAAkB,EAAE,WAAW,CAAC,gBAAgB,CAC9C,IAAI,CAAC,kBAAkB,CACxB;iBACF;gBACD,MAAM,EAAE;oBACN,GAAG,EAAE,IAAI;oBACT,SAAS,EAAE,IAAI;oBACf,kBAAkB,EAAE,IAAI;iBACzB;gBACD,KAAK,EAAE;oBACL,MAAM,EAAE,IAAI;iBACb;aACF,CAAC,CAAC;YAEH,IAAI,iBAAiB,EAAE,CAAC;gBACtB,OAAO,iBAAiB,CAAC;YAC3B,CAAC;YAED,MAAM,IAAI,KAAK,CACb,2CAA2C,GAAG,IAAI,CAAC,kBAAkB,CACtE,CAAC;QACJ,CAAC;IACH,CAAC;IAGY,AAAN,KAAK,CAAC,cAAc,CACzB,eAAyB,EACzB,KAQC;;QAED,MAAM,iBAAiB,GAAW,MAAM;aACrC,UAAU,CAAC,MAAM,CAAC;aAClB,MAAM,CACL,IAAI,CAAC,SAAS,CAAC;YACb,YAAY,EAAE,MAAA,KAAK,aAAL,KAAK,uBAAL,KAAK,CAAE,YAAY,mCAAI,IAAI;YACzC,aAAa,EAAE,MAAA,KAAK,aAAL,KAAK,uBAAL,KAAK,CAAE,aAAa,mCAAI,IAAI;YAC3C,aAAa,EAAE,MAAA,KAAK,aAAL,KAAK,uBAAL,KAAK,CAAE,aAAa,mCAAI,IAAI;YAC3C,WAAW,EAAE,MAAA,KAAK,aAAL,KAAK,uBAAL,KAAK,CAAE,WAAW,mCAAI,IAAI;YACvC,cAAc,EAAE,MAAA,KAAK,aAAL,KAAK,uBAAL,KAAK,CAAE,cAAc,mCAAI,IAAI;YAC7C,WAAW,EAAE,MAAA,KAAK,aAAL,KAAK,uBAAL,KAAK,CAAE,WAAW,mCAAI,IAAI;YACvC,cAAc,EAAE,MAAA,KAAK,aAAL,KAAK,uBAAL,KAAK,CAAE,cAAc,mCAAI,IAAI;SAC9C,CAAC,CACH;aACA,MAAM,CAAC,KAAK,CAAC,CAAC;QAEjB,8DAA8D;QAC9D,MAAM,QAAQ,GAAQ;YACpB,UAAU,EAAE,aAAa,CAAC,cAAc,EAAE;YAC1C,mBAAmB,EAAE,WAAW;SACjC,CAAC;QAEF,8DAA8D;QAC9D,MAAM,QAAQ,GAAQ,EAAE,CAAC;QAEzB,IAAI,KAAK,aAAL,KAAK,uBAAL,KAAK,CAAE,YAAY,EAAE,CAAC;YACxB,QAAQ,CAAC,YAAY,GAAG,KAAK,CAAC,YAAY,CAAC;QAC7C,CAAC;QACD,IAAI,KAAK,aAAL,KAAK,uBAAL,KAAK,CAAE,aAAa,EAAE,CAAC;YACzB,QAAQ,CAAC,aAAa,GAAG,KAAK,CAAC,aAAa,CAAC;QAC/C,CAAC;QACD,IAAI,KAAK,aAAL,KAAK,uBAAL,KAAK,CAAE,aAAa,EAAE,CAAC;YACzB,QAAQ,CAAC,aAAa,GAAG,KAAK,CAAC,aAAa,CAAC;QAC/C,CAAC;QACD,IAAI,KAAK,aAAL,KAAK,uBAAL,KAAK,CAAE,WAAW,EAAE,CAAC;YACvB,QAAQ,CAAC,WAAW,GAAG,KAAK,CAAC,WAAW,CAAC;QAC3C,CAAC;QACD,IAAI,KAAK,aAAL,KAAK,uBAAL,KAAK,CAAE,cAAc,EAAE,CAAC;YAC1B,QAAQ,CAAC,cAAc,GAAG,KAAK,CAAC,cAAc,CAAC;QACjD,CAAC;QACD,IAAI,KAAK,aAAL,KAAK,uBAAL,KAAK,CAAE,WAAW,EAAE,CAAC;YACvB,QAAQ,CAAC,WAAW,GAAG,KAAK,CAAC,WAAW,CAAC;QAC3C,CAAC;QACD,IAAI,KAAK,aAAL,KAAK,uBAAL,KAAK,CAAE,cAAc,EAAE,CAAC;YAC1B,QAAQ,CAAC,cAAc,GAAG,KAAK,CAAC,cAAc,CAAC;QACjD,CAAC;QAED;;;;;WAKG;QACH,MAAM,iBAAiB,CAAC,KAAK,CAAC;YAC5B,OAAO,EAAE,IAAI;YACb,EAAE,EAAE,eAAe;YACnB,cAAc,EAAE,yBAAyB;YACzC,iBAAiB,EAAE,0BAA0B;YAC7C,QAAQ,EAAE,QAAQ;YAClB,QAAQ,EAAE,QAAQ;YAClB,WAAW,EAAE,iBAAiB;YAC9B,QAAQ,EAAE,kBAAkB,eAAe,CAAC,QAAQ,EAAE,EAAE;SACzD,CAAC,CAAC;IACL,CAAC;IAGY,AAAN,KAAK,CAAC,YAAY,CAAC,IAGzB;;QACC,IAAI,CAAC,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACjD,OAAO;QACT,CAAC;QAED,MAAM,QAAQ,GAAW,IAAI,CAAC,eAAe,CAAC,QAAQ,EAAE,CAAC;QACzD,MAAM,WAAW,GAAW,mBAAmB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC/D,MAAM,MAAM,GAAkB,MAAM,WAAW,CAAC,SAAS,CACvD,8BAA8B,EAC9B,QAAQ,CACT,CAAC;QACF,IAAI,MAAM,KAAK,WAAW,EAAE,CAAC;YAC3B,OAAO;QACT,CAAC;QAED,IAAI,CAAC;YACH,MAAM,aAAa,GAAW,IAAI,CAAC,eAAe,CAAC,QAAQ,EAAE,CAAC;YAC9D,MAAM,cAAc,GAAiB,MAAM,IAAI,CAAC,aAAa,EAAE;iBAC5D,kBAAkB,EAAE;iBACpB,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC;iBACzB,EAAE,CAAC,aAAa,CAAC;iBACjB,QAAQ,EAAE,CAAC;YAEd,MAAM,WAAW,GAAgB,IAAI,GAAG,EAAE,CAAC;YAC3C,KAAK,MAAM,GAAG,IAAI,cAAc,EAAE,CAAC;gBACjC,MAAM,KAAK,GAAuB,MAAA,GAAG,CAAC,GAAG,0CAAE,QAAQ,EAAE,CAAC;gBACtD,IAAI,KAAK,EAAE,CAAC;oBACV,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;gBACzB,CAAC;YACH,CAAC;YAED,MAAM,QAAQ,GAAkB,EAAE,CAAC;YACnC,MAAM,IAAI,GAAgB,IAAI,GAAG,EAAE,CAAC;YACpC,KAAK,MAAM,EAAE,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;gBAC/B,MAAM,KAAK,GAAW,EAAE,CAAC,QAAQ,EAAE,CAAC;gBACpC,IAAI,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;oBAC9C,SAAS;gBACX,CAAC;gBACD,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;gBAChB,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACvB,CAAC;YAED,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACxB,MAAM,IAAI,CAAC,aAAa,EAAE;qBACvB,kBAAkB,EAAE;qBACpB,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC;qBACzB,EAAE,CAAC,aAAa,CAAC;qBACjB,GAAG,CAAC,QAAQ,CAAC,CAAC;YACnB,CAAC;YAED,MAAM,WAAW,CAAC,SAAS,CACzB,8BAA8B,EAC9B,QAAQ,EACR,WAAW,EACX,EAAE,gBAAgB,EAAE,gCAAgC,EAAE,CACvD,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,IAAI,CACT,yDAAyD,IAAI,CAAC,eAAe,CAAC,QAAQ,EAAE,KACtF,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CACjD,EAAE,CACH,CAAC;QACJ,CAAC;IACH,CAAC;IAGY,AAAN,KAAK,CAAC,yBAAyB;QACpC;;;;;;;WAOG;QACH,MAAM,iBAAiB,GAAS,aAAa,CAAC,gBAAgB,CAC5D,aAAa,CAAC,cAAc,EAAE,EAC9B,CAAC,EAAE,CACJ,CAAC;QAEF,MAAM,kBAAkB,GAAiB,MAAM,IAAI,CAAC,MAAM,CAAC;YACzD,KAAK,EAAE;gBACL,mBAAmB,EAAE,WAAW;gBAChC,UAAU,EAAE,WAAW,CAAC,QAAQ,CAAC,iBAAiB,CAAC;aACpD;YACD,MAAM,EAAE;gBACN,GAAG,EAAE,IAAI;aACV;YACD,KAAK,EAAE,SAAS;YAChB,IAAI,EAAE,CAAC;YACP,KAAK,EAAE;gBACL,MAAM,EAAE,IAAI;aACb;SACF,CAAC,CAAC;QAEH,KAAK,MAAM,aAAa,IAAI,kBAAkB,EAAE,CAAC;YAC/C,IAAI,aAAa,CAAC,GAAG,EAAE,CAAC;gBACtB,MAAM,IAAI,CAAC,aAAa,CAAC;oBACvB,EAAE,EAAE,IAAI,QAAQ,CAAC,aAAa,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;oBAC9C,IAAI,EAAE;wBACJ,mBAAmB,EAAE,cAAc;qBACpC;oBACD,KAAK,EAAE;wBACL,MAAM,EAAE,IAAI;qBACb;iBACF,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;CACF;AAlT0B;IADxB,WAAW,EAAE;;6CAGC,KAAK;;8CAyBnB;AAGY;IADZ,WAAW,EAAE;;;;+DAqFb;AAGY;IADZ,WAAW,EAAE;;qCAEK,QAAQ;;6CAyE1B;AAGY;IADZ,WAAW,EAAE;;;;2CAmEb;AAGY;IADZ,WAAW,EAAE;;;;wDA2Cb;AAGH,SAAS,mBAAmB,CAAC,QAAyB;IACpD,MAAM,MAAM,GAAkB,QAAQ;SACnC,GAAG,CAAC,CAAC,EAAY,EAAE,EAAE;QACpB,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC;IACvB,CAAC,CAAC;SACD,IAAI,EAAE,CAAC;IACV,OAAO,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC1E,CAAC;AAED,eAAe,IAAI,OAAO,EAAE,CAAC"}
+{"version":3,"file":"CloudResourceService.js","sourceRoot":"","sources":["../../../../Server/Services/CloudResourceService.ts"],"names":[],"mappings":";;;;;;;;;AAAA,OAAO,eAAe,MAAM,mBAAmB,CAAC;AAChD,OAAO,KAAK,MAAM,2CAA2C,CAAC;AAE9D,OAAO,WAAW,MAAM,gCAAgC,CAAC;AACzD,OAAO,iBAAiB,MAAM,sCAAsC,CAAC;AACrE,OAAO,QAAQ,MAAM,sBAAsB,CAAC;AAC5C,OAAO,WAAW,MAAM,+BAA+B,CAAC;AACxD,OAAO,aAAa,MAAM,kBAAkB,CAAC;AAC7C,OAAO,SAAS,MAAM,+BAA+B,CAAC;AACtD,OAAO,WAAW,MAAM,+BAA+B,CAAC;AACxD,OAAO,MAAyB,MAAM,iBAAiB,CAAC;AACxD,OAAO,MAAM,MAAM,QAAQ,CAAC;AAE5B,OAAO,wBAAwB,MAAM,4BAA4B,CAAC;AAClE,OAAO,EAAE,0BAA0B,EAAE,MAAM,+CAA+C,CAAC;AAC3F,OAAO,gBAAgB,MAAM,wCAAwC,CAAC;AACtE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,yBAAyB,CAAC;AAEhF,OAAO,GAAG,MAAM,qBAAqB,CAAC;AACtC,OAAO,cAAc,MAAM,mBAAmB,CAAC;AAC/C,OAAO,mCAAmC,MAAM,uCAAuC,CAAC;AACxF,OAAO,mCAAmC,MAAM,uCAAuC,CAAC;AAExF,MAAM,yBAAyB,GAAW,0BAA0B,CAAC;AACrE,MAAM,0BAA0B,GAAW,EAAE,CAAC;AAE9C,MAAM,8BAA8B,GAAW,+BAA+B,CAAC;AAC/E,MAAM,gCAAgC,GAAW,EAAE,CAAC;AAEpD,MAAM,OAAO,OAAQ,SAAQ,eAAsB;IACjD;QACE,KAAK,CAAC,KAAK,CAAC,CAAC;IACf,CAAC;IAGwB,AAAN,KAAK,CAAC,eAAe,CACtC,QAAyB,EACzB,WAAkB;QAElB,IAAI,WAAW,CAAC,SAAS,IAAI,WAAW,CAAC,EAAE,EAAE,CAAC;YAC5C,OAAO,CAAC,OAAO,EAAE;iBACd,IAAI,CAAC,KAAK,IAAI,EAAE;gBACf,MAAM,mCAAmC,CAAC,yBAAyB,CACjE,WAAW,CACZ,CAAC;YACJ,CAAC,CAAC;iBACD,IAAI,CAAC,KAAK,IAAI,EAAE;gBACf,MAAM,mCAAmC,CAAC,yBAAyB,CACjE,WAAW,CACZ,CAAC;YACJ,CAAC,CAAC;iBACD,KAAK,CAAC,CAAC,KAAY,EAAE,EAAE;;gBACtB,MAAM,CAAC,KAAK,CACV,gFAAgF,KAAK,EAAE,EACvF;oBACE,SAAS,EAAE,MAAA,WAAW,CAAC,SAAS,0CAAE,QAAQ,EAAE;oBAC5C,eAAe,EAAE,MAAA,WAAW,CAAC,EAAE,0CAAE,QAAQ,EAAE;iBAC3B,CACnB,CAAC;YACJ,CAAC,CAAC,CAAC;QACP,CAAC;QACD;;;;;WAKG;QACH,IAAI,CAAC,6BAA6B,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC,KAAK,CAC7D,CAAC,KAAY,EAAE,EAAE;YACf,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACtB,CAAC,CACF,CAAC;QAEF,OAAO,WAAW,CAAC;IACrB,CAAC;IAGY,AAAN,KAAK,CAAC,gCAAgC,CAAC,IAQ7C;QACC,MAAM,gBAAgB,GAAiB,MAAM,IAAI,CAAC,SAAS,CAAC;YAC1D,KAAK,EAAE;gBACL,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,kBAAkB,EAAE,WAAW,CAAC,gBAAgB,CAC9C,IAAI,CAAC,kBAAkB,CACxB;aACF;YACD,MAAM,EAAE;gBACN,GAAG,EAAE,IAAI;gBACT,SAAS,EAAE,IAAI;gBACf,kBAAkB,EAAE,IAAI;aACzB;YACD,KAAK,EAAE;gBACL,MAAM,EAAE,IAAI;aACb;SACF,CAAC,CAAC;QAEH,IAAI,gBAAgB,EAAE,CAAC;YACrB,OAAO,gBAAgB,CAAC;QAC1B,CAAC;QAED,IAAI,CAAC;YACH,MAAM,WAAW,GAAU,IAAI,KAAK,EAAE,CAAC;YACvC,WAAW,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;YACvC,WAAW,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,kBAAkB,CAAC;YACxD,WAAW,CAAC,kBAAkB,GAAG,IAAI,CAAC,kBAAkB,CAAC;YACzD,WAAW,CAAC,mBAAmB,GAAG,WAAW,CAAC;YAC9C,WAAW,CAAC,UAAU,GAAG,aAAa,CAAC,cAAc,EAAE,CAAC;YACxD,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;gBACvB,WAAW,CAAC,aAAa,GAAG,IAAI,CAAC,aAAa,CAAC;YACjD,CAAC;YACD,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;gBACvB,WAAW,CAAC,aAAa,GAAG,IAAI,CAAC,aAAa,CAAC;YACjD,CAAC;YACD,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;gBACrB,WAAW,CAAC,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC;YAC7C,CAAC;YACD,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;gBACxB,WAAW,CAAC,cAAc,GAAG,IAAI,CAAC,cAAc,CAAC;YACnD,CAAC;YAED,MAAM,eAAe,GAAU,MAAM,IAAI,CAAC,MAAM,CAAC;gBAC/C,IAAI,EAAE,WAAW;gBACjB,KAAK,EAAE;oBACL,MAAM,EAAE,IAAI;iBACb;aACF,CAAC,CAAC;YAEH,OAAO,eAAe,CAAC;QACzB,CAAC;QAAC,WAAM,CAAC;YACP,MAAM,iBAAiB,GAAiB,MAAM,IAAI,CAAC,SAAS,CAAC;gBAC3D,KAAK,EAAE;oBACL,SAAS,EAAE,IAAI,CAAC,SAAS;oBACzB,kBAAkB,EAAE,WAAW,CAAC,gBAAgB,CAC9C,IAAI,CAAC,kBAAkB,CACxB;iBACF;gBACD,MAAM,EAAE;oBACN,GAAG,EAAE,IAAI;oBACT,SAAS,EAAE,IAAI;oBACf,kBAAkB,EAAE,IAAI;iBACzB;gBACD,KAAK,EAAE;oBACL,MAAM,EAAE,IAAI;iBACb;aACF,CAAC,CAAC;YAEH,IAAI,iBAAiB,EAAE,CAAC;gBACtB,OAAO,iBAAiB,CAAC;YAC3B,CAAC;YAED,MAAM,IAAI,KAAK,CACb,2CAA2C,GAAG,IAAI,CAAC,kBAAkB,CACtE,CAAC;QACJ,CAAC;IACH,CAAC;IAGY,AAAN,KAAK,CAAC,cAAc,CACzB,eAAyB,EACzB,KAQC;;QAED,MAAM,iBAAiB,GAAW,MAAM;aACrC,UAAU,CAAC,MAAM,CAAC;aAClB,MAAM,CACL,IAAI,CAAC,SAAS,CAAC;YACb,YAAY,EAAE,MAAA,KAAK,aAAL,KAAK,uBAAL,KAAK,CAAE,YAAY,mCAAI,IAAI;YACzC,aAAa,EAAE,MAAA,KAAK,aAAL,KAAK,uBAAL,KAAK,CAAE,aAAa,mCAAI,IAAI;YAC3C,aAAa,EAAE,MAAA,KAAK,aAAL,KAAK,uBAAL,KAAK,CAAE,aAAa,mCAAI,IAAI;YAC3C,WAAW,EAAE,MAAA,KAAK,aAAL,KAAK,uBAAL,KAAK,CAAE,WAAW,mCAAI,IAAI;YACvC,cAAc,EAAE,MAAA,KAAK,aAAL,KAAK,uBAAL,KAAK,CAAE,cAAc,mCAAI,IAAI;YAC7C,WAAW,EAAE,MAAA,KAAK,aAAL,KAAK,uBAAL,KAAK,CAAE,WAAW,mCAAI,IAAI;YACvC,cAAc,EAAE,MAAA,KAAK,aAAL,KAAK,uBAAL,KAAK,CAAE,cAAc,mCAAI,IAAI;SAC9C,CAAC,CACH;aACA,MAAM,CAAC,KAAK,CAAC,CAAC;QAEjB,8DAA8D;QAC9D,MAAM,QAAQ,GAAQ;YACpB,UAAU,EAAE,aAAa,CAAC,cAAc,EAAE;YAC1C,mBAAmB,EAAE,WAAW;SACjC,CAAC;QAEF,8DAA8D;QAC9D,MAAM,QAAQ,GAAQ,EAAE,CAAC;QAEzB,IAAI,KAAK,aAAL,KAAK,uBAAL,KAAK,CAAE,YAAY,EAAE,CAAC;YACxB,QAAQ,CAAC,YAAY,GAAG,KAAK,CAAC,YAAY,CAAC;QAC7C,CAAC;QACD,IAAI,KAAK,aAAL,KAAK,uBAAL,KAAK,CAAE,aAAa,EAAE,CAAC;YACzB,QAAQ,CAAC,aAAa,GAAG,KAAK,CAAC,aAAa,CAAC;QAC/C,CAAC;QACD,IAAI,KAAK,aAAL,KAAK,uBAAL,KAAK,CAAE,aAAa,EAAE,CAAC;YACzB,QAAQ,CAAC,aAAa,GAAG,KAAK,CAAC,aAAa,CAAC;QAC/C,CAAC;QACD,IAAI,KAAK,aAAL,KAAK,uBAAL,KAAK,CAAE,WAAW,EAAE,CAAC;YACvB,QAAQ,CAAC,WAAW,GAAG,KAAK,CAAC,WAAW,CAAC;QAC3C,CAAC;QACD,IAAI,KAAK,aAAL,KAAK,uBAAL,KAAK,CAAE,cAAc,EAAE,CAAC;YAC1B,QAAQ,CAAC,cAAc,GAAG,KAAK,CAAC,cAAc,CAAC;QACjD,CAAC;QACD,IAAI,KAAK,aAAL,KAAK,uBAAL,KAAK,CAAE,WAAW,EAAE,CAAC;YACvB,QAAQ,CAAC,WAAW,GAAG,KAAK,CAAC,WAAW,CAAC;QAC3C,CAAC;QACD,IAAI,KAAK,aAAL,KAAK,uBAAL,KAAK,CAAE,cAAc,EAAE,CAAC;YAC1B,QAAQ,CAAC,cAAc,GAAG,KAAK,CAAC,cAAc,CAAC;QACjD,CAAC;QAED;;;;;WAKG;QACH,MAAM,iBAAiB,CAAC,KAAK,CAAC;YAC5B,OAAO,EAAE,IAAI;YACb,EAAE,EAAE,eAAe;YACnB,cAAc,EAAE,yBAAyB;YACzC,iBAAiB,EAAE,0BAA0B;YAC7C,QAAQ,EAAE,QAAQ;YAClB,QAAQ,EAAE,QAAQ;YAClB,WAAW,EAAE,iBAAiB;YAC9B,QAAQ,EAAE,kBAAkB,eAAe,CAAC,QAAQ,EAAE,EAAE;SACzD,CAAC,CAAC;IACL,CAAC;IAGY,AAAN,KAAK,CAAC,YAAY,CAAC,IAGzB;;QACC,IAAI,CAAC,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACjD,OAAO;QACT,CAAC;QAED,MAAM,QAAQ,GAAW,IAAI,CAAC,eAAe,CAAC,QAAQ,EAAE,CAAC;QACzD,MAAM,WAAW,GAAW,mBAAmB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC/D,MAAM,MAAM,GAAkB,MAAM,WAAW,CAAC,SAAS,CACvD,8BAA8B,EAC9B,QAAQ,CACT,CAAC;QACF,IAAI,MAAM,KAAK,WAAW,EAAE,CAAC;YAC3B,OAAO;QACT,CAAC;QAED,IAAI,CAAC;YACH,MAAM,aAAa,GAAW,IAAI,CAAC,eAAe,CAAC,QAAQ,EAAE,CAAC;YAC9D,MAAM,cAAc,GAAiB,MAAM,IAAI,CAAC,aAAa,EAAE;iBAC5D,kBAAkB,EAAE;iBACpB,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC;iBACzB,EAAE,CAAC,aAAa,CAAC;iBACjB,QAAQ,EAAE,CAAC;YAEd,MAAM,WAAW,GAAgB,IAAI,GAAG,EAAE,CAAC;YAC3C,KAAK,MAAM,GAAG,IAAI,cAAc,EAAE,CAAC;gBACjC,MAAM,KAAK,GAAuB,MAAA,GAAG,CAAC,GAAG,0CAAE,QAAQ,EAAE,CAAC;gBACtD,IAAI,KAAK,EAAE,CAAC;oBACV,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;gBACzB,CAAC;YACH,CAAC;YAED,MAAM,QAAQ,GAAkB,EAAE,CAAC;YACnC,MAAM,IAAI,GAAgB,IAAI,GAAG,EAAE,CAAC;YACpC,KAAK,MAAM,EAAE,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;gBAC/B,MAAM,KAAK,GAAW,EAAE,CAAC,QAAQ,EAAE,CAAC;gBACpC,IAAI,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;oBAC9C,SAAS;gBACX,CAAC;gBACD,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;gBAChB,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACvB,CAAC;YAED,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACxB,MAAM,IAAI,CAAC,aAAa,EAAE;qBACvB,kBAAkB,EAAE;qBACpB,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC;qBACzB,EAAE,CAAC,aAAa,CAAC;qBACjB,GAAG,CAAC,QAAQ,CAAC,CAAC;YACnB,CAAC;YAED,MAAM,WAAW,CAAC,SAAS,CACzB,8BAA8B,EAC9B,QAAQ,EACR,WAAW,EACX,EAAE,gBAAgB,EAAE,gCAAgC,EAAE,CACvD,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,IAAI,CACT,yDAAyD,IAAI,CAAC,eAAe,CAAC,QAAQ,EAAE,KACtF,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CACjD,EAAE,CACH,CAAC;QACJ,CAAC;IACH,CAAC;IAGY,AAAN,KAAK,CAAC,yBAAyB;QACpC;;;;;;;WAOG;QACH,MAAM,iBAAiB,GAAS,aAAa,CAAC,gBAAgB,CAC5D,aAAa,CAAC,cAAc,EAAE,EAC9B,CAAC,EAAE,CACJ,CAAC;QAEF,MAAM,kBAAkB,GAAiB,MAAM,IAAI,CAAC,MAAM,CAAC;YACzD,KAAK,EAAE;gBACL,mBAAmB,EAAE,WAAW;gBAChC,UAAU,EAAE,WAAW,CAAC,QAAQ,CAAC,iBAAiB,CAAC;aACpD;YACD,MAAM,EAAE;gBACN,GAAG,EAAE,IAAI;aACV;YACD,KAAK,EAAE,SAAS;YAChB,IAAI,EAAE,CAAC;YACP,KAAK,EAAE;gBACL,MAAM,EAAE,IAAI;aACb;SACF,CAAC,CAAC;QAEH,KAAK,MAAM,aAAa,IAAI,kBAAkB,EAAE,CAAC;YAC/C,IAAI,aAAa,CAAC,GAAG,EAAE,CAAC;gBACtB,MAAM,IAAI,CAAC,aAAa,CAAC;oBACvB,EAAE,EAAE,IAAI,QAAQ,CAAC,aAAa,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;oBAC9C,IAAI,EAAE;wBACJ,mBAAmB,EAAE,cAAc;qBACpC;oBACD,KAAK,EAAE;wBACL,MAAM,EAAE,IAAI;qBACb;iBACF,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED;;;;OAIG;IAEU,AAAN,KAAK,CAAC,oBAAoB,CAAC,IAEjC;QACC,MAAM,aAAa,GAAiB,MAAM,IAAI,CAAC,WAAW,CAAC;YACzD,EAAE,EAAE,IAAI,CAAC,eAAe;YACxB,MAAM,EAAE;gBACN,IAAI,EAAE,IAAI;aACX;YACD,KAAK,EAAE;gBACL,MAAM,EAAE,IAAI;aACb;SACF,CAAC,CAAC;QAEH,OAAO,CAAA,aAAa,aAAb,aAAa,uBAAb,aAAa,CAAE,IAAI,KAAI,EAAE,CAAC;IACnC,CAAC;IAGY,AAAN,KAAK,CAAC,+BAA+B,CAC1C,SAAmB,EACnB,eAAyB;QAEzB,MAAM,YAAY,GAAQ,MAAM,cAAc,CAAC,eAAe,EAAE,CAAC;QAEjE,OAAO,GAAG,CAAC,UAAU,CAAC,YAAY,CAAC,QAAQ,EAAE,CAAC,CAAC,QAAQ,CACrD,IAAI,SAAS,CAAC,QAAQ,EAAE,UAAU,eAAe,CAAC,QAAQ,EAAE,EAAE,CAC/D,CAAC;IACJ,CAAC;IAED;;;OAGG;IAEU,AAAN,KAAK,CAAC,4BAA4B,CACvC,SAAmB,EACnB,eAAyB;QAEzB,MAAM,IAAI,GAAW,MAAM,IAAI,CAAC,oBAAoB,CAAC;YACnD,eAAe,EAAE,eAAe;SACjC,CAAC,CAAC;QACH,MAAM,IAAI,GAAQ,MAAM,IAAI,CAAC,+BAA+B,CAC1D,SAAS,EACT,eAAe,CAChB,CAAC;QAEF,OAAO,mBAAmB,IAAI,KAAK,IAAI,CAAC,QAAQ,EAAE,GAAG,CAAC;IACxD,CAAC;IAEO,KAAK,CAAC,6BAA6B,CACzC,WAAkB,EAClB,QAAyB;QAEzB,MAAM,SAAS,GAAyB,WAAW,CAAC,SAAS,CAAC;QAC9D,MAAM,eAAe,GAAyB,WAAW,CAAC,EAAE,IAAI,SAAS,CAAC;QAE1E,IAAI,CAAC,SAAS,IAAI,CAAC,eAAe,EAAE,CAAC;YACnC,OAAO;QACT,CAAC;QAED;;;;WAIG;QACH,MAAM,eAAe,GACnB,WAAW,CAAC,eAAe;YAC3B,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM;YAC9B,SAAS,CAAC;QAEZ,MAAM,QAAQ,GAGV,MAAM,gBAAgB,CAAC,sBAAsB,CAAC;YAChD,gBAAgB,EAAE,gBAAgB;YAClC,oBAAoB,EAAE,MAAM,IAAI,CAAC,4BAA4B,CAC3D,SAAS,EACT,eAAe,CAChB;YACD,SAAS,EAAE,SAAS;YACpB,eAAe,EAAE,eAAe;YAChC,cAAc,EAAE,qBAAqB;YACrC,eAAe,EAAE,WAAW,CAAC,kBAAkB;YAC/C,WAAW,EAAE,WAAW,CAAC,WAAW;SACrC,CAAC,CAAC;QAEH,MAAM,wBAAwB,CAAC,2BAA2B,CAAC;YACzD,eAAe,EAAE,eAAe;YAChC,SAAS,EAAE,SAAS;YACpB,0BAA0B,EACxB,0BAA0B,CAAC,oBAAoB;YACjD,YAAY,EAAE,QAAQ;YACtB,kBAAkB,EAAE,QAAQ,CAAC,kBAAkB;YAC/C,yBAAyB,EAAE,QAAQ,CAAC,yBAAyB;YAC7D,MAAM,EAAE,eAAe;SACxB,CAAC,CAAC;IACL,CAAC;IAGwB,AAAN,KAAK,CAAC,eAAe,CACtC,QAAyB,EACzB,cAA+B;QAE/B,IAAI,CAAC,6BAA6B,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC,KAAK,CAChE,CAAC,KAAY,EAAE,EAAE;YACf,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACtB,CAAC,CACF,CAAC;QAEF,OAAO,QAAQ,CAAC;IAClB,CAAC;IAEO,KAAK,CAAC,6BAA6B,CACzC,QAAyB,EACzB,cAA+B;QAE/B,MAAM,UAAU,GAAe,QAAQ,CAAC,QAAQ;aAC7C,IAA6B,CAAC;QAEjC;;;;WAIG;QACH,MAAM,cAAc,GAClB,gBAAgB,CAAC,+BAA+B,CAAC,UAAU,CAAC,CAAC;QAE/D,IAAI,cAAc,CAAC,MAAM,KAAK,CAAC,IAAI,cAAc,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC/D,OAAO;QACT,CAAC;QAED,MAAM,eAAe,GACnB,gBAAgB,CAAC,eAAe,CAAC,UAAU,CAAC,CAAC;QAC/C,MAAM,UAAU,GAAY,OAAO,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC,CAAC;QAC9D,MAAM,YAAY,GAAkB,cAAc,CAAC,MAAM,CACvD,CAAC,MAAc,EAAE,EAAE;YACjB,OAAO,MAAM,KAAK,YAAY,CAAC;QACjC,CAAC,CACF,CAAC;QAEF,MAAM,eAAe,GACnB,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,IAAI,SAAS,CAAC;QAE9C,KAAK,MAAM,eAAe,IAAI,cAAc,EAAE,CAAC;YAC7C,MAAM,aAAa,GAAiB,MAAM,IAAI,CAAC,WAAW,CAAC;gBACzD,EAAE,EAAE,eAAe;gBACnB,MAAM,EAAE;oBACN,SAAS,EAAE,IAAI;iBAChB;gBACD,KAAK,EAAE;oBACL,MAAM,EAAE,IAAI;iBACb;aACF,CAAC,CAAC;YAEH,MAAM,SAAS,GAAyB,aAAa,aAAb,aAAa,uBAAb,aAAa,CAAE,SAAS,CAAC;YAEjE,IAAI,CAAC,SAAS,EAAE,CAAC;gBACf,SAAS;YACX,CAAC;YAED,MAAM,oBAAoB,GACxB,MAAM,IAAI,CAAC,4BAA4B,CAAC,SAAS,EAAE,eAAe,CAAC,CAAC;YAEtE,IAAI,eAAe,EAAE,CAAC;gBACpB,MAAM,wBAAwB,CAAC,2BAA2B,CAAC;oBACzD,eAAe,EAAE,eAAe;oBAChC,SAAS,EAAE,SAAS;oBACpB,0BAA0B,EAAE,UAAU;wBACpC,CAAC,CAAC,0BAA0B,CAAC,qBAAqB;wBAClD,CAAC,CAAC,0BAA0B,CAAC,qBAAqB;oBACpD,YAAY,EAAE,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO;oBAC9C,kBAAkB,EAAE,UAAU;wBAC5B,CAAC,CAAC,OAAO,oBAAoB,gBAAgB;wBAC7C,CAAC,CAAC,MAAM,oBAAoB,iCAAiC;oBAC/D,MAAM,EAAE,eAAe;iBACxB,CAAC,CAAC;YACL,CAAC;YAED,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC5B,MAAM,QAAQ,GAGV,gBAAgB,CAAC,sBAAsB,CAAC;oBAC1C,oBAAoB,EAAE,oBAAoB;oBAC1C,OAAO,EAAE,YAAY;iBACtB,CAAC,CAAC;gBAEH,MAAM,wBAAwB,CAAC,2BAA2B,CAAC;oBACzD,eAAe,EAAE,eAAe;oBAChC,SAAS,EAAE,SAAS;oBACpB,0BAA0B,EACxB,0BAA0B,CAAC,oBAAoB;oBACjD,YAAY,EAAE,OAAO;oBACrB,kBAAkB,EAAE,QAAQ,CAAC,kBAAkB;oBAC/C,yBAAyB,EAAE,QAAQ,CAAC,yBAAyB;oBAC7D,MAAM,EAAE,eAAe;iBACxB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;CACF;AA5gB0B;IADxB,WAAW,EAAE;;6CAGC,KAAK;;8CAqCnB;AAGY;IADZ,WAAW,EAAE;;;;+DAqFb;AAGY;IADZ,WAAW,EAAE;;qCAEK,QAAQ;;6CAyE1B;AAGY;IADZ,WAAW,EAAE;;;;2CAmEb;AAGY;IADZ,WAAW,EAAE;;;;wDA2Cb;AAQY;IADZ,WAAW,EAAE;;;;mDAeb;AAGY;IADZ,WAAW,EAAE;;qCAED,QAAQ;QACF,QAAQ;;8DAO1B;AAOY;IADZ,WAAW,EAAE;;qCAED,QAAQ;QACF,QAAQ;;2DAW1B;AAoDwB;IADxB,WAAW,EAAE;;6CAGI,KAAK;;8CAStB;AA4FH,SAAS,mBAAmB,CAAC,QAAyB;IACpD,MAAM,MAAM,GAAkB,QAAQ;SACnC,GAAG,CAAC,CAAC,EAAY,EAAE,EAAE;QACpB,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC;IACvB,CAAC,CAAC;SACD,IAAI,EAAE,CAAC;IACV,OAAO,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC1E,CAAC;AAED,eAAe,IAAI,OAAO,EAAE,CAAC"}

package/build/dist/Server/Services/DatabaseService.js

@@ -1035,6 +1035,196 @@ class DatabaseService extends BaseService {
             throw this.getException(error);
         }
     }
+    /**
+     * Answers a question ABOUT the matched rows — how many, how much, how many
+     * of each — without loading them.
+     *
+     * Same permission pipeline as `findBy` and `countBy`: the query is run
+     * through `checkReadQueryPermission` first, so tenant scoping and
+     * label-block filtering apply exactly as they do to a list read (a blocked
+     * label produces the same relation join here that it produces there — the
+     * count cannot see rows the list would hide).
+     *
+     * Returns one row per group, or exactly one row when `groupBy` is omitted.
+     * Values come back as the driver produced them; read them through
+     * `AggregateResultUtil` rather than indexing in directly, because Postgres
+     * hands COUNT and SUM back as strings.
+     *
+     * See `AggregateBy` for the trust boundary on `expression`: constants only,
+     * every dynamic value through `parameters`.
+     */
+    async aggregateBy(aggregateBy) {
+        try {
+            this.setTelemetryContextFromProps(aggregateBy.props);
+            if (!aggregateBy.select || aggregateBy.select.length === 0) {
+                throw new BadDataException("aggregateBy needs at least one aggregate column to select.");
+            }
+            const groupByColumns = aggregateBy.groupBy || [];
+            /*
+             * Grouped columns are selected as well as grouped on. Doing it here
+             * rather than making callers list them twice is what keeps a group key
+             * and the bucket it labels from ever drifting apart.
+             */
+            const selectColumns = [
+                ...groupByColumns,
+                ...aggregateBy.select,
+            ];
+            const seenAliases = new Set();
+            for (const column of selectColumns) {
+                DatabaseService.assertSafeAggregateExpression(column.expression);
+                if (!DatabaseService.aggregateAliasPattern.test(column.alias)) {
+                    throw new BadDataException(`Invalid aggregate alias: ${column.alias}. Aliases must be plain identifiers.`);
+                }
+                if (seenAliases.has(column.alias)) {
+                    throw new BadDataException(`Duplicate aggregate alias: ${column.alias}.`);
+                }
+                seenAliases.add(column.alias);
+            }
+            /*
+             * Validated here rather than in the loop that applies them, so every
+             * expression in the request is checked BEFORE anything reaches the
+             * database — and so the check is reachable without a live connection,
+             * which is what makes it testable.
+             */
+            for (const order of aggregateBy.orderBy || []) {
+                DatabaseService.assertSafeAggregateExpression(order.expression);
+            }
+            const checkReadPermissionType = await ModelPermission.checkReadQueryPermission(this.modelType, aggregateBy.query, null, aggregateBy.props);
+            const queryBuilder = this.buildAggregateScope(checkReadPermissionType.query);
+            let isFirstColumn = true;
+            for (const column of selectColumns) {
+                if (isFirstColumn) {
+                    queryBuilder.select(column.expression, column.alias);
+                    isFirstColumn = false;
+                }
+                else {
+                    queryBuilder.addSelect(column.expression, column.alias);
+                }
+            }
+            for (const column of groupByColumns) {
+                queryBuilder.addGroupBy(column.expression);
+            }
+            for (const order of aggregateBy.orderBy || []) {
+                queryBuilder.addOrderBy(order.expression, order.sortOrder === SortOrder.Ascending ? "ASC" : "DESC");
+            }
+            if (aggregateBy.parameters) {
+                queryBuilder.setParameters(aggregateBy.parameters);
+            }
+            if (aggregateBy.limit !== undefined) {
+                if (!Number.isInteger(aggregateBy.limit) || aggregateBy.limit < 0) {
+                    throw new BadDataException(`Invalid aggregate limit: ${aggregateBy.limit}. It must be a non-negative integer.`);
+                }
+                /*
+                 * `.limit`, not `.take`: this is a raw read, and `take` is the
+                 * entity-hydrating pagination that would wrap the whole aggregate in
+                 * a distinct-id subquery.
+                 */
+                queryBuilder.limit(aggregateBy.limit);
+            }
+            return (await queryBuilder.getRawMany());
+        }
+        catch (error) {
+            await this.onCountError(error);
+            throw this.getException(error);
+        }
+    }
+    /**
+     * A query builder scoped to exactly the rows this read may see, and — this
+     * is the whole point — scoped so that each of them appears ONCE.
+     *
+     * The permission pipeline expresses a label-scoped read as a condition on
+     * the access-control RELATION: `{ labels: [permittedIds] }` for an allow
+     * permission, `{ labels: { _id: NotIn([...]) } }` for a block. Handed to
+     * TypeORM's FindOptions machinery those become a join through the
+     * many-to-many junction table — and a join multiplies rows. A device
+     * carrying two permitted labels comes back twice.
+     *
+     * `findBy` never notices, because entity hydration de-duplicates by primary
+     * key on the way out. An aggregate has no such step: COUNT(*) would report
+     * that device as two devices and SUM("interfacesDown") would double its dark
+     * ports — silently, and only for the label-scoped enterprise users who are
+     * least able to spot it. (Verified against Postgres: one device, two
+     * permitted labels, `COUNT(*) = 2`, `SUM = 2` for a stored value of 1.)
+     *
+     * `COUNT(DISTINCT _id)` would fix the counts and do nothing for the sums, so
+     * the de-duplication happens one level down instead: when the scoped query
+     * touches a relation at all, the aggregate runs over the base table filtered
+     * by a DISTINCT subquery of ids. The joins live inside that subquery, where
+     * duplicate rows collapse before anything is added up.
+     *
+     * The subquery is skipped when the query is flat — which is every read by a
+     * user whose permissions are not label-scoped, i.e. the hot path — so the
+     * ordinary full-fleet aggregate stays a single sequential scan.
+     */
+    buildAggregateScope(query) {
+        if (!this.queryTouchesARelation(query)) {
+            const flatBuilder = this.getQueryBuilder(this.modelName);
+            flatBuilder.setFindOptions({ where: query });
+            return flatBuilder;
+        }
+        /*
+         * A separate alias, so the subquery's joins cannot collide with the outer
+         * statement's table reference.
+         */
+        const scopeAlias = `${this.modelName}_aggregate_scope`;
+        const scopeBuilder = this.getQueryBuilder(scopeAlias);
+        scopeBuilder.setFindOptions({ where: query });
+        scopeBuilder.select(`DISTINCT "${scopeAlias}"."_id"`, "_id");
+        const queryBuilder = this.getQueryBuilder(this.modelName);
+        /*
+         * The alias is QUOTED. TypeORM renders it quoted everywhere else, and an
+         * unquoted `NetworkDevice."_id"` in a raw fragment is folded to lower case
+         * by Postgres — which then does not match the quoted alias at all.
+         */
+        queryBuilder.where(`"${this.modelName}"."_id" IN (${scopeBuilder.getQuery()})`);
+        /*
+         * The subquery's own bound values. Its placeholders are auto-named
+         * (`orm_param_N`) and the outer builder generates none of its own here —
+         * its only WHERE is the raw string above — so there is nothing to clash
+         * with. Caller-supplied parameters are named and applied later.
+         */
+        queryBuilder.setParameters(scopeBuilder.getParameters());
+        return queryBuilder;
+    }
+    /*
+     * Whether any top-level key of the query names a RELATION rather than a
+     * column — the shape that turns into a join.
+     *
+     * Deliberately conservative in both directions: a many-to-one relation joins
+     * at most one row and would not actually multiply anything, and metadata
+     * being unavailable is treated as "yes, there might be one". Both err
+     * towards the de-duplicating path, which is always correct and merely
+     * slower.
+     */
+    queryTouchesARelation(query) {
+        let metadata;
+        try {
+            metadata = this.getRepository().metadata;
+        }
+        catch (_a) {
+            return true;
+        }
+        for (const key of Object.keys(query)) {
+            if (metadata.findRelationWithPropertyPath(key)) {
+                return true;
+            }
+        }
+        return false;
+    }
+    /*
+     * A tripwire on the constants-only contract, not a sanitizer: an expression
+     * assembled from request data can be perfectly valid SQL and still be an
+     * injection. What this catches is the one shape that turns a leaked value
+     * into a second statement.
+     */
+    static assertSafeAggregateExpression(expression) {
+        if (!expression || !expression.trim()) {
+            throw new BadDataException("Aggregate expression cannot be empty.");
+        }
+        if (expression.includes(";")) {
+            throw new BadDataException("Aggregate expressions cannot contain statement separators.");
+        }
+    }
     async deleteOneById(deleteById) {
         await ModelPermission.checkDeletePermissionByModel({
             modelType: this.modelType,
@@ -2156,6 +2346,11 @@ class DatabaseService extends BaseService {
         return { items, count };
     }
 }
+/*
+ * A plain identifier, because an alias is interpolated into `AS "..."` and
+ * is structure rather than data — there is no parameter form for it.
+ */
+DatabaseService.aggregateAliasPattern = /^[a-zA-Z][a-zA-Z0-9_]*$/;
 __decorate([
     CaptureSpan(),
     __metadata("design:type", Function),
@@ -2188,6 +2383,12 @@ __decorate([
     __metadata("design:paramtypes", [Object]),
     __metadata("design:returntype", Promise)
 ], DatabaseService.prototype, "countBy", null);
+__decorate([
+    CaptureSpan(),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object]),
+    __metadata("design:returntype", Promise)
+], DatabaseService.prototype, "aggregateBy", null);
 __decorate([
     CaptureSpan(),
     __metadata("design:type", Function),