@oneuptime/common 12.0.30 → 12.0.32

package/build/dist/Server/API/GlobalConfigAPI.js

@@ -9,9 +9,12 @@ import HTTPErrorResponse from "../../Types/API/HTTPErrorResponse";
 import { AppVersion, DisableUpdateCheck, EnterpriseLicenseValidationUrl, Host, } from "../EnvironmentConfig";
 import VersionUtil from "../../Utils/VersionUtil";
 import UserMiddleware from "../Middleware/UserAuthorization";
+import MasterAdminAuthorization from "../Middleware/MasterAdminAuthorization";
+import EnterpriseLicenseSeatUtil from "../Utils/EnterpriseLicense/EnterpriseLicenseSeatUtil";
+import UserService from "../Services/UserService";
 export default class GlobalConfigAPI extends BaseAPI {
     constructor() {
-        var _a, _b, _c;
+        var _a, _b, _c, _d;
         super(GlobalConfig, GlobalConfigService);
         this.router.get(`${(_a = new this.entityType().getCrudApiPath()) === null || _a === void 0 ? void 0 : _a.toString()}/vars`, async (req, res, next) => {
             try {
@@ -66,62 +69,61 @@ export default class GlobalConfigAPI extends BaseAPI {
                 const licenseValid = Boolean((config === null || config === void 0 ? void 0 : config.enterpriseLicenseToken) &&
                     (config === null || config === void 0 ? void 0 : config.enterpriseLicenseExpiresAt) &&
                     config.enterpriseLicenseExpiresAt.getTime() > Date.now());
-                const responseBody = {
-                    companyName: (config === null || config === void 0 ? void 0 : config.enterpriseCompanyName) || null,
-                    expiresAt: (config === null || config === void 0 ? void 0 : config.enterpriseLicenseExpiresAt)
+                /*
+                 * What the seat limit actually means on this installation right now,
+                 * as opposed to what oneuptime.com last reported. Only for signed-in
+                 * callers: it is derived from the live User table, and an anonymous
+                 * visitor on the login page has no business being told how close this
+                 * server is to refusing new accounts.
+                 */
+                const seatUsage = isAuthenticatedUser
+                    ? await EnterpriseLicenseSeatUtil.getSeatUsageForLoadedGlobalConfig({
+                        config: config,
+                        getLocalUserCount: GlobalConfigAPI.getLocalUserCount,
+                    })
+                    : null;
+                const responseBody = Object.assign({ companyName: (config === null || config === void 0 ? void 0 : config.enterpriseCompanyName) || null, expiresAt: (config === null || config === void 0 ? void 0 : config.enterpriseLicenseExpiresAt)
                         ? config.enterpriseLicenseExpiresAt.toISOString()
-                        : null,
-                    licenseKey: isAuthenticatedUser
+                        : null, licenseKey: isAuthenticatedUser
                         ? (config === null || config === void 0 ? void 0 : config.enterpriseLicenseKey) || null
-                        : null,
-                    token: isAuthenticatedUser
+                        : null, token: isAuthenticatedUser
                         ? (config === null || config === void 0 ? void 0 : config.enterpriseLicenseToken) || null
-                        : null,
-                    licenseValid: licenseValid,
+                        : null, licenseValid: licenseValid, 
                     /*
                      * Whether this is an evaluation/testing license. Benign like the
                      * company name and expiry, so it is not gated behind sign-in — the
                      * edition modal shows the evaluation notice to anyone who opens it.
                      */
-                    isEvaluationLicense: Boolean(config === null || config === void 0 ? void 0 : config.enterpriseLicenseIsEvaluation),
-                    userLimit: typeof (config === null || config === void 0 ? void 0 : config.enterpriseLicenseUserLimit) === "number"
+                    isEvaluationLicense: Boolean(config === null || config === void 0 ? void 0 : config.enterpriseLicenseIsEvaluation), userLimit: typeof (config === null || config === void 0 ? void 0 : config.enterpriseLicenseUserLimit) === "number"
                         ? config.enterpriseLicenseUserLimit
-                        : null,
-                    currentUserCount: typeof (config === null || config === void 0 ? void 0 : config.enterpriseLicenseCurrentUserCount) === "number"
+                        : null, currentUserCount: typeof (config === null || config === void 0 ? void 0 : config.enterpriseLicenseCurrentUserCount) === "number"
                         ? config.enterpriseLicenseCurrentUserCount
-                        : null,
-                    userCountUpdatedAt: (config === null || config === void 0 ? void 0 : config.enterpriseLicenseUserCountUpdatedAt)
+                        : null, userCountUpdatedAt: (config === null || config === void 0 ? void 0 : config.enterpriseLicenseUserCountUpdatedAt)
                         ? config.enterpriseLicenseUserCountUpdatedAt.toISOString()
-                        : null,
-                    instances: isAuthenticatedUser &&
+                        : null, instances: isAuthenticatedUser &&
                         Array.isArray(config === null || config === void 0 ? void 0 : config.enterpriseLicenseInstances)
                         ? config.enterpriseLicenseInstances
-                        : [],
-                    instanceId: isAuthenticatedUser && (config === null || config === void 0 ? void 0 : config.instanceId)
+                        : [], instanceId: isAuthenticatedUser && (config === null || config === void 0 ? void 0 : config.instanceId)
                         ? config.instanceId.toString()
-                        : null,
+                        : null, 
                     /*
                      * Which build this installation runs, and whether a newer one has
                      * been released, are gated the same way as the instance topology:
                      * telling an anonymous visitor on the login page that this server
                      * is behind on patches advertises an unpatched target.
                      */
-                    currentVersion: isAuthenticatedUser ? AppVersion : null,
-                    latestVersion: isAuthenticatedUser
+                    currentVersion: isAuthenticatedUser ? AppVersion : null, latestVersion: isAuthenticatedUser
                         ? (config === null || config === void 0 ? void 0 : config.latestReleaseVersion) || null
-                        : null,
-                    latestVersionPublishedAt: isAuthenticatedUser && (config === null || config === void 0 ? void 0 : config.latestReleasePublishedAt)
+                        : null, latestVersionPublishedAt: isAuthenticatedUser && (config === null || config === void 0 ? void 0 : config.latestReleasePublishedAt)
                         ? config.latestReleasePublishedAt.toISOString()
-                        : null,
-                    latestVersionCheckedAt: isAuthenticatedUser && (config === null || config === void 0 ? void 0 : config.latestReleaseCheckedAt)
+                        : null, latestVersionCheckedAt: isAuthenticatedUser && (config === null || config === void 0 ? void 0 : config.latestReleaseCheckedAt)
                         ? config.latestReleaseCheckedAt.toISOString()
-                        : null,
-                    isUpdateAvailable: isAuthenticatedUser
+                        : null, isUpdateAvailable: isAuthenticatedUser
                         ? VersionUtil.isUpdateAvailable({
                             currentVersion: AppVersion,
                             latestVersion: config === null || config === void 0 ? void 0 : config.latestReleaseVersion,
                         })
-                        : false,
+                        : false, 
                     /*
                      * Lets the modal say "update checks are off" instead of "has not
                      * checked yet", which would be a promise the installation is never
@@ -129,175 +131,290 @@ export default class GlobalConfigAPI extends BaseAPI {
                      */
                     isUpdateCheckDisabled: isAuthenticatedUser
                         ? DisableUpdateCheck
-                        : false,
-                };
+                        : false }, GlobalConfigAPI.getSeatUsageResponseFields(seatUsage));
                 return Response.sendJsonObjectResponse(req, res, responseBody);
             }
             catch (err) {
                 next(err);
             }
         });
-        this.router.post(`${(_c = new this.entityType().getCrudApiPath()) === null || _c === void 0 ? void 0 : _c.toString()}/license`, UserMiddleware.getUserMiddleware, async (req, res, next) => {
-            var _a, _b, _c;
+        /*
+         * Activating (or replacing) the license key for the whole installation.
+         *
+         * Master admin only. This writes the terms that bound how many users the
+         * installation may have, so anyone who can reach it can change the seat
+         * limit UserService now enforces. It used to run on
+         * UserMiddleware.getUserMiddleware, which lets anonymous callers through
+         * (it has to — the GET above serves the signed-out login page), so the
+         * route was in practice unauthenticated.
+         */
+        this.router.post(`${(_c = new this.entityType().getCrudApiPath()) === null || _c === void 0 ? void 0 : _c.toString()}/license`, MasterAdminAuthorization.isAuthorizedMasterAdminMiddleware, async (req, res, next) => {
+            var _a;
             try {
                 const licenseKey = ((_a = req.body["licenseKey"]) === null || _a === void 0 ? void 0 : _a.trim()) || "";
                 if (!licenseKey) {
                     throw new BadDataException("License key is required");
                 }
-                const globalConfigId = ObjectID.getZeroObjectID();
-                const existingConfig = await GlobalConfigService.findOneById({
-                    id: globalConfigId,
+                const responseBody = await this.validateAndStoreLicenseKey(licenseKey);
+                return Response.sendJsonObjectResponse(req, res, responseBody);
+            }
+            catch (err) {
+                next(err);
+            }
+        });
+        /*
+         * Re-fetch the license this installation already holds.
+         *
+         * The seat limit and the expiry live on oneuptime.com and can change on
+         * any day — a customer buys ten more seats at noon. The daily report job
+         * picks that up eventually; this is the button an administrator presses
+         * when "eventually" is not good enough, and it is the only way to apply a
+         * change without re-typing the key.
+         *
+         * Deliberately takes no license key: it uses the stored one. A refresh
+         * that accepted a key would be an activation with a friendlier name, and
+         * would let a mistyped key replace a working license by accident.
+         */
+        this.router.post(`${(_d = new this.entityType().getCrudApiPath()) === null || _d === void 0 ? void 0 : _d.toString()}/license/refresh`, MasterAdminAuthorization.isAuthorizedMasterAdminMiddleware, async (req, res, next) => {
+            var _a;
+            try {
+                const config = await GlobalConfigService.findOneById({
+                    id: ObjectID.getZeroObjectID(),
                     select: {
-                        _id: true,
-                        instanceId: true,
+                        enterpriseLicenseKey: true,
                     },
                     props: {
                         isRoot: true,
-                        ignoreHooks: true,
-                    },
-                });
-                /*
-                 * Send this instance's id and host along with the key so the
-                 * license server registers this instance against the license and
-                 * it shows up in the instance list on all instances that share
-                 * the license.
-                 */
-                const instanceId = (existingConfig === null || existingConfig === void 0 ? void 0 : existingConfig.instanceId) || ObjectID.generate();
-                const validationResponse = await API.post({
-                    url: EnterpriseLicenseValidationUrl,
-                    data: {
-                        licenseKey,
-                        instanceId: instanceId.toString(),
-                        host: Host,
-                        /*
-                         * Sent here as well as from the daily report job so the version
-                         * lands on the license server the moment the key is validated,
-                         * rather than up to 24 hours later.
-                         */
-                        version: AppVersion,
                     },
                 });
-                if (!validationResponse.isSuccess()) {
-                    const errorMessage = validationResponse instanceof HTTPErrorResponse
-                        ? validationResponse.message ||
-                            "Failed to validate license key."
-                        : "Failed to validate license key.";
-                    throw new BadDataException(errorMessage);
-                }
-                const payload = validationResponse.data;
-                const companyNameRaw = ((_b = payload["companyName"]) === null || _b === void 0 ? void 0 : _b.trim()) || "";
-                const expiresAtRaw = payload["expiresAt"] || "";
-                const licenseKeyRaw = ((_c = payload["licenseKey"]) === null || _c === void 0 ? void 0 : _c.trim()) || licenseKey;
-                const licenseToken = payload["token"] || "";
-                let licenseExpiry = undefined;
-                if (expiresAtRaw) {
-                    const parsedDate = new Date(expiresAtRaw);
-                    if (Number.isNaN(parsedDate.getTime())) {
-                        throw new BadDataException("License expiration returned from server is invalid.");
-                    }
-                    licenseExpiry = parsedDate;
-                }
-                const userLimitRaw = payload["userLimit"];
-                const userLimit = typeof userLimitRaw === "number" && Number.isFinite(userLimitRaw)
-                    ? userLimitRaw
-                    : null;
-                const currentUserCountRaw = payload["currentUserCount"];
-                const currentUserCount = typeof currentUserCountRaw === "number" &&
-                    Number.isFinite(currentUserCountRaw)
-                    ? currentUserCountRaw
-                    : null;
-                const userCountUpdatedAtRaw = payload["userCountUpdatedAt"];
-                let userCountUpdatedAt = null;
-                if (userCountUpdatedAtRaw) {
-                    const parsedReportedAt = new Date(userCountUpdatedAtRaw);
-                    if (!Number.isNaN(parsedReportedAt.getTime())) {
-                        userCountUpdatedAt = parsedReportedAt;
-                    }
-                }
-                const isEvaluationLicense = payload["isEvaluationLicense"] === true;
-                const instances = Array.isArray(payload["instances"])
-                    ? payload["instances"]
-                    : [];
-                const updatePayload = {
-                    enterpriseCompanyName: companyNameRaw || null,
-                    enterpriseLicenseKey: licenseKeyRaw || null,
-                    enterpriseLicenseExpiresAt: licenseExpiry || null,
-                    enterpriseLicenseToken: licenseToken || null,
-                    enterpriseLicenseIsEvaluation: isEvaluationLicense,
-                    enterpriseLicenseUserLimit: userLimit,
-                    enterpriseLicenseCurrentUserCount: currentUserCount,
-                    enterpriseLicenseUserCountUpdatedAt: userCountUpdatedAt,
-                    enterpriseLicenseInstances: instances,
-                };
-                if (!(existingConfig === null || existingConfig === void 0 ? void 0 : existingConfig.instanceId)) {
-                    // Installs that predate instance ids: persist the one we generated.
-                    updatePayload.instanceId = instanceId;
-                }
-                if (existingConfig) {
-                    await GlobalConfigService.updateOneById({
-                        id: globalConfigId,
-                        data: updatePayload,
-                        props: {
-                            isRoot: true,
-                            ignoreHooks: true,
-                        },
-                    });
-                }
-                else {
-                    const newConfig = new GlobalConfig();
-                    newConfig.id = globalConfigId;
-                    if (companyNameRaw) {
-                        newConfig.enterpriseCompanyName = companyNameRaw;
-                    }
-                    if (licenseKeyRaw) {
-                        newConfig.enterpriseLicenseKey = licenseKeyRaw;
-                    }
-                    if (licenseToken) {
-                        newConfig.enterpriseLicenseToken = licenseToken;
-                    }
-                    newConfig.enterpriseLicenseIsEvaluation = isEvaluationLicense;
-                    if (licenseExpiry) {
-                        newConfig.enterpriseLicenseExpiresAt = licenseExpiry;
-                    }
-                    if (userLimit !== null) {
-                        newConfig.enterpriseLicenseUserLimit = userLimit;
-                    }
-                    if (currentUserCount !== null) {
-                        newConfig.enterpriseLicenseCurrentUserCount = currentUserCount;
-                    }
-                    if (userCountUpdatedAt) {
-                        newConfig.enterpriseLicenseUserCountUpdatedAt =
-                            userCountUpdatedAt;
-                    }
-                    newConfig.enterpriseLicenseInstances = instances;
-                    newConfig.instanceId = instanceId;
-                    await GlobalConfigService.create({
-                        data: newConfig,
-                        props: {
-                            isRoot: true,
-                            ignoreHooks: true,
-                        },
-                    });
+                const licenseKey = ((_a = config === null || config === void 0 ? void 0 : config.enterpriseLicenseKey) === null || _a === void 0 ? void 0 : _a.trim()) || "";
+                if (!licenseKey) {
+                    throw new BadDataException("This installation does not have an enterprise license key yet. Enter a license key to activate it first.");
                 }
-                return Response.sendJsonObjectResponse(req, res, {
-                    companyName: companyNameRaw || null,
-                    expiresAt: licenseExpiry ? licenseExpiry.toISOString() : null,
-                    licenseKey: licenseKeyRaw || null,
-                    token: licenseToken || null,
-                    isEvaluationLicense: isEvaluationLicense,
-                    userLimit: userLimit,
-                    currentUserCount: currentUserCount,
-                    userCountUpdatedAt: userCountUpdatedAt
-                        ? userCountUpdatedAt.toISOString()
-                        : null,
-                    instances: instances,
-                    instanceId: instanceId.toString(),
-                });
+                const responseBody = await this.validateAndStoreLicenseKey(licenseKey);
+                return Response.sendJsonObjectResponse(req, res, responseBody);
             }
             catch (err) {
                 next(err);
             }
         });
     }
+    /*
+     * Ask oneuptime.com what this license key is worth today, and mirror the
+     * answer into GlobalConfig.
+     *
+     * Shared by activation and refresh so the two cannot drift: the whole point
+     * of refresh is that it applies exactly what activation would have applied,
+     * and a second hand-written copy of this mapping is how the seat limit came
+     * to be dropped on the floor by the daily report job before.
+     */
+    async validateAndStoreLicenseKey(licenseKey) {
+        var _a, _b;
+        const globalConfigId = ObjectID.getZeroObjectID();
+        const existingConfig = await GlobalConfigService.findOneById({
+            id: globalConfigId,
+            select: {
+                _id: true,
+                instanceId: true,
+            },
+            props: {
+                isRoot: true,
+                ignoreHooks: true,
+            },
+        });
+        /*
+         * Send this instance's id and host along with the key so the
+         * license server registers this instance against the license and
+         * it shows up in the instance list on all instances that share
+         * the license.
+         */
+        const instanceId = (existingConfig === null || existingConfig === void 0 ? void 0 : existingConfig.instanceId) || ObjectID.generate();
+        const validationResponse = await API.post({
+            url: EnterpriseLicenseValidationUrl,
+            data: {
+                licenseKey,
+                instanceId: instanceId.toString(),
+                host: Host,
+                /*
+                 * Sent here as well as from the daily report job so the version
+                 * lands on the license server the moment the key is validated,
+                 * rather than up to 24 hours later.
+                 */
+                version: AppVersion,
+            },
+        });
+        if (!validationResponse.isSuccess()) {
+            const errorMessage = validationResponse instanceof HTTPErrorResponse
+                ? validationResponse.message || "Failed to validate license key."
+                : "Failed to validate license key.";
+            throw new BadDataException(errorMessage);
+        }
+        const payload = validationResponse.data;
+        const companyNameRaw = ((_a = payload["companyName"]) === null || _a === void 0 ? void 0 : _a.trim()) || "";
+        const expiresAtRaw = payload["expiresAt"] || "";
+        const licenseKeyRaw = ((_b = payload["licenseKey"]) === null || _b === void 0 ? void 0 : _b.trim()) || licenseKey;
+        const licenseToken = payload["token"] || "";
+        let licenseExpiry = undefined;
+        if (expiresAtRaw) {
+            const parsedDate = new Date(expiresAtRaw);
+            if (Number.isNaN(parsedDate.getTime())) {
+                throw new BadDataException("License expiration returned from server is invalid.");
+            }
+            licenseExpiry = parsedDate;
+        }
+        const userLimitRaw = payload["userLimit"];
+        const userLimit = typeof userLimitRaw === "number" && Number.isFinite(userLimitRaw)
+            ? userLimitRaw
+            : null;
+        const currentUserCountRaw = payload["currentUserCount"];
+        const currentUserCount = typeof currentUserCountRaw === "number" &&
+            Number.isFinite(currentUserCountRaw)
+            ? currentUserCountRaw
+            : null;
+        const userCountUpdatedAtRaw = payload["userCountUpdatedAt"];
+        let userCountUpdatedAt = null;
+        if (userCountUpdatedAtRaw) {
+            const parsedReportedAt = new Date(userCountUpdatedAtRaw);
+            if (!Number.isNaN(parsedReportedAt.getTime())) {
+                userCountUpdatedAt = parsedReportedAt;
+            }
+        }
+        const isEvaluationLicense = payload["isEvaluationLicense"] === true;
+        const instances = Array.isArray(payload["instances"])
+            ? payload["instances"]
+            : [];
+        const updatePayload = {
+            enterpriseCompanyName: companyNameRaw || null,
+            enterpriseLicenseKey: licenseKeyRaw || null,
+            enterpriseLicenseExpiresAt: licenseExpiry || null,
+            enterpriseLicenseToken: licenseToken || null,
+            enterpriseLicenseIsEvaluation: isEvaluationLicense,
+            enterpriseLicenseUserLimit: userLimit,
+            enterpriseLicenseCurrentUserCount: currentUserCount,
+            enterpriseLicenseUserCountUpdatedAt: userCountUpdatedAt,
+            enterpriseLicenseInstances: instances,
+        };
+        if (!(existingConfig === null || existingConfig === void 0 ? void 0 : existingConfig.instanceId)) {
+            // Installs that predate instance ids: persist the one we generated.
+            updatePayload.instanceId = instanceId;
+        }
+        if (existingConfig) {
+            await GlobalConfigService.updateOneById({
+                id: globalConfigId,
+                data: updatePayload,
+                props: {
+                    isRoot: true,
+                    ignoreHooks: true,
+                },
+            });
+        }
+        else {
+            const newConfig = new GlobalConfig();
+            newConfig.id = globalConfigId;
+            if (companyNameRaw) {
+                newConfig.enterpriseCompanyName = companyNameRaw;
+            }
+            if (licenseKeyRaw) {
+                newConfig.enterpriseLicenseKey = licenseKeyRaw;
+            }
+            if (licenseToken) {
+                newConfig.enterpriseLicenseToken = licenseToken;
+            }
+            newConfig.enterpriseLicenseIsEvaluation = isEvaluationLicense;
+            if (licenseExpiry) {
+                newConfig.enterpriseLicenseExpiresAt = licenseExpiry;
+            }
+            if (userLimit !== null) {
+                newConfig.enterpriseLicenseUserLimit = userLimit;
+            }
+            if (currentUserCount !== null) {
+                newConfig.enterpriseLicenseCurrentUserCount = currentUserCount;
+            }
+            if (userCountUpdatedAt) {
+                newConfig.enterpriseLicenseUserCountUpdatedAt = userCountUpdatedAt;
+            }
+            newConfig.enterpriseLicenseInstances = instances;
+            newConfig.instanceId = instanceId;
+            await GlobalConfigService.create({
+                data: newConfig,
+                props: {
+                    isRoot: true,
+                    ignoreHooks: true,
+                },
+            });
+        }
+        /*
+         * Seat usage recomputed from what was just stored, so the dialog that
+         * triggered this can show the new limit against the real user count
+         * without a second round trip - and so an administrator who just bought
+         * seats sees them land.
+         */
+        const seatUsage = await GlobalConfigAPI.getSeatUsageForResponse({
+            userLimit: userLimit,
+            currentUserCount: currentUserCount,
+            instances: instances,
+            instanceId: instanceId,
+        });
+        return Object.assign({ companyName: companyNameRaw || null, expiresAt: licenseExpiry ? licenseExpiry.toISOString() : null, licenseKey: licenseKeyRaw || null, token: licenseToken || null, isEvaluationLicense: isEvaluationLicense, userLimit: userLimit, currentUserCount: currentUserCount, userCountUpdatedAt: userCountUpdatedAt
+                ? userCountUpdatedAt.toISOString()
+                : null, instances: instances, instanceId: instanceId.toString() }, GlobalConfigAPI.getSeatUsageResponseFields(seatUsage));
+    }
+    /*
+     * Seat usage built from license terms held in memory rather than re-read
+     * from the database. Used right after a write, where re-reading would race
+     * the write it is describing.
+     */
+    static async getSeatUsageForResponse(data) {
+        const config = new GlobalConfig();
+        config.instanceId = data.instanceId;
+        config.enterpriseLicenseInstances = data.instances;
+        if (data.userLimit !== null) {
+            config.enterpriseLicenseUserLimit = data.userLimit;
+        }
+        if (data.currentUserCount !== null) {
+            config.enterpriseLicenseCurrentUserCount = data.currentUserCount;
+        }
+        return EnterpriseLicenseSeatUtil.getSeatUsageForLoadedGlobalConfig({
+            config: config,
+            getLocalUserCount: GlobalConfigAPI.getLocalUserCount,
+        });
+    }
+    /*
+     * How many users exist on this installation right now. Deliberately the live
+     * count rather than the last reported one: the number an administrator is
+     * about to act on is the number that decides whether the next invitation
+     * goes through.
+     */
+    static async getLocalUserCount() {
+        const userCount = await UserService.countBy({
+            query: {},
+            props: {
+                isRoot: true,
+            },
+        });
+        return userCount.toNumber();
+    }
+    /*
+     * The seat-enforcement half of a license response. Always the same keys, so
+     * a client never has to tell "this build does not report seats" apart from
+     * "this installation does not enforce them" by which fields are missing:
+     * isSeatLimitEnforced is the single flag that answers that.
+     */
+    static getSeatUsageResponseFields(seatUsage) {
+        if (!seatUsage || !seatUsage.isEnforced) {
+            return {
+                isSeatLimitEnforced: false,
+                seatsInUse: null,
+                seatsRemaining: null,
+                canAddMoreUsers: true,
+            };
+        }
+        return {
+            isSeatLimitEnforced: true,
+            seatsInUse: seatUsage.seatsInUse,
+            seatsRemaining: seatUsage.seatsRemaining,
+            canAddMoreUsers: seatUsage.hasSeatForNewUser,
+        };
+    }
 }
 //# sourceMappingURL=GlobalConfigAPI.js.map

package/build/dist/Server/API/GlobalConfigAPI.js.map

@@ -1 +1 @@
-{"version":3,"file":"GlobalConfigAPI.js","sourceRoot":"","sources":["../../../../Server/API/GlobalConfigAPI.ts"],"names":[],"mappings":"AAAA,OAAO,mBAEN,MAAM,iCAAiC,CAAC;AAOzC,OAAO,QAAQ,MAAM,mBAAmB,CAAC;AACzC,OAAO,OAAO,MAAM,WAAW,CAAC;AAChC,OAAO,YAAY,MAAM,0CAA0C,CAAC;AACpE,OAAO,QAAQ,MAAM,sBAAsB,CAAC;AAE5C,OAAO,gBAAgB,MAAM,wCAAwC,CAAC;AACtE,OAAO,GAAG,MAAM,iBAAiB,CAAC;AAClC,OAAO,iBAAiB,MAAM,mCAAmC,CAAC;AAGlE,OAAO,EACL,UAAU,EACV,kBAAkB,EAClB,8BAA8B,EAC9B,IAAI,GACL,MAAM,sBAAsB,CAAC;AAE9B,OAAO,WAAW,MAAM,yBAAyB,CAAC;AAClD,OAAO,cAAc,MAAM,iCAAiC,CAAC;AAE7D,MAAM,CAAC,OAAO,OAAO,eAAgB,SAAQ,OAG5C;IACC;;QACE,KAAK,CAAC,YAAY,EAAE,mBAAmB,CAAC,CAAC;QAEzC,IAAI,CAAC,MAAM,CAAC,GAAG,CACb,GAAG,MAAA,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC,cAAc,EAAE,0CAAE,QAAQ,EAAE,OAAO,EAC5D,KAAK,EAAE,GAAmB,EAAE,GAAoB,EAAE,IAAkB,EAAE,EAAE;YACtE,IAAI,CAAC;gBACH,MAAM,YAAY,GAChB,MAAM,mBAAmB,CAAC,WAAW,CAAC;oBACpC,EAAE,EAAE,QAAQ,CAAC,eAAe,EAAE;oBAC9B,MAAM,EAAE;wBACN,0BAA0B,EAAE,IAAI;qBACjC;oBACD,KAAK,EAAE;wBACL,MAAM,EAAE,IAAI;qBACb;iBACF,CAAC,CAAC;gBAEL,OAAO,QAAQ,CAAC,sBAAsB,CAAC,GAAG,EAAE,GAAG,EAAE;oBAC/C,0BAA0B,EAAE,OAAO,CACjC,YAAY,aAAZ,YAAY,uBAAZ,YAAY,CAAE,0BAA0B,CACzC;iBACF,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,CAAC,GAAG,CAAC,CAAC;YACZ,CAAC;QACH,CAAC,CACF,CAAC;QAEF,IAAI,CAAC,MAAM,CAAC,GAAG,CACb,GAAG,MAAA,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC,cAAc,EAAE,0CAAE,QAAQ,EAAE,UAAU,EAC/D,cAAc,CAAC,iBAAiB,EAChC,KAAK,EAAE,GAAmB,EAAE,GAAoB,EAAE,IAAkB,EAAE,EAAE;;YACtE,IAAI,CAAC;gBACH,MAAM,MAAM,GACV,MAAM,mBAAmB,CAAC,WAAW,CAAC;oBACpC,EAAE,EAAE,QAAQ,CAAC,eAAe,EAAE;oBAC9B,MAAM,EAAE;wBACN,qBAAqB,EAAE,IAAI;wBAC3B,0BAA0B,EAAE,IAAI;wBAChC,oBAAoB,EAAE,IAAI;wBAC1B,sBAAsB,EAAE,IAAI;wBAC5B,6BAA6B,EAAE,IAAI;wBACnC,0BAA0B,EAAE,IAAI;wBAChC,iCAAiC,EAAE,IAAI;wBACvC,mCAAmC,EAAE,IAAI;wBACzC,0BAA0B,EAAE,IAAI;wBAChC,UAAU,EAAE,IAAI;wBAChB,oBAAoB,EAAE,IAAI;wBAC1B,wBAAwB,EAAE,IAAI;wBAC9B,sBAAsB,EAAE,IAAI;qBAC7B;oBACD,KAAK,EAAE;wBACL,MAAM,EAAE,IAAI;qBACb;iBACF,CAAC,CAAC;gBAEL;;;;;mBAKG;gBACH,MAAM,mBAAmB,GAAY,OAAO,CAC1C,MAAC,GAAwB,CAAC,iBAAiB,0CAAE,MAAM,CACpD,CAAC;gBAEF,MAAM,YAAY,GAAY,OAAO,CACnC,CAAA,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,sBAAsB;qBAC5B,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,0BAA0B,CAAA;oBAClC,MAAM,CAAC,0BAA0B,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAC3D,CAAC;gBAEF,MAAM,YAAY,GAAe;oBAC/B,WAAW,EAAE,CAAA,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,qBAAqB,KAAI,IAAI;oBAClD,SAAS,EAAE,CAAA,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,0BAA0B;wBAC3C,CAAC,CAAC,MAAM,CAAC,0BAA0B,CAAC,WAAW,EAAE;wBACjD,CAAC,CAAC,IAAI;oBACR,UAAU,EAAE,mBAAmB;wBAC7B,CAAC,CAAC,CAAA,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,oBAAoB,KAAI,IAAI;wBACtC,CAAC,CAAC,IAAI;oBACR,KAAK,EAAE,mBAAmB;wBACxB,CAAC,CAAC,CAAA,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,sBAAsB,KAAI,IAAI;wBACxC,CAAC,CAAC,IAAI;oBACR,YAAY,EAAE,YAAY;oBAC1B;;;;uBAIG;oBACH,mBAAmB,EAAE,OAAO,CAAC,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,6BAA6B,CAAC;oBACnE,SAAS,EACP,OAAO,CAAA,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,0BAA0B,CAAA,KAAK,QAAQ;wBACpD,CAAC,CAAC,MAAM,CAAC,0BAA0B;wBACnC,CAAC,CAAC,IAAI;oBACV,gBAAgB,EACd,OAAO,CAAA,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,iCAAiC,CAAA,KAAK,QAAQ;wBAC3D,CAAC,CAAC,MAAM,CAAC,iCAAiC;wBAC1C,CAAC,CAAC,IAAI;oBACV,kBAAkB,EAAE,CAAA,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,mCAAmC;wBAC7D,CAAC,CAAC,MAAM,CAAC,mCAAmC,CAAC,WAAW,EAAE;wBAC1D,CAAC,CAAC,IAAI;oBACR,SAAS,EACP,mBAAmB;wBACnB,KAAK,CAAC,OAAO,CAAC,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,0BAA0B,CAAC;wBAC/C,CAAC,CAAC,MAAM,CAAC,0BAA0B;wBACnC,CAAC,CAAC,EAAE;oBACR,UAAU,EACR,mBAAmB,KAAI,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,UAAU,CAAA;wBACvC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,QAAQ,EAAE;wBAC9B,CAAC,CAAC,IAAI;oBACV;;;;;uBAKG;oBACH,cAAc,EAAE,mBAAmB,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI;oBACvD,aAAa,EAAE,mBAAmB;wBAChC,CAAC,CAAC,CAAA,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,oBAAoB,KAAI,IAAI;wBACtC,CAAC,CAAC,IAAI;oBACR,wBAAwB,EACtB,mBAAmB,KAAI,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,wBAAwB,CAAA;wBACrD,CAAC,CAAC,MAAM,CAAC,wBAAwB,CAAC,WAAW,EAAE;wBAC/C,CAAC,CAAC,IAAI;oBACV,sBAAsB,EACpB,mBAAmB,KAAI,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,sBAAsB,CAAA;wBACnD,CAAC,CAAC,MAAM,CAAC,sBAAsB,CAAC,WAAW,EAAE;wBAC7C,CAAC,CAAC,IAAI;oBACV,iBAAiB,EAAE,mBAAmB;wBACpC,CAAC,CAAC,WAAW,CAAC,iBAAiB,CAAC;4BAC5B,cAAc,EAAE,UAAU;4BAC1B,aAAa,EAAE,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,oBAAoB;yBAC5C,CAAC;wBACJ,CAAC,CAAC,KAAK;oBACT;;;;uBAIG;oBACH,qBAAqB,EAAE,mBAAmB;wBACxC,CAAC,CAAC,kBAAkB;wBACpB,CAAC,CAAC,KAAK;iBACV,CAAC;gBAEF,OAAO,QAAQ,CAAC,sBAAsB,CAAC,GAAG,EAAE,GAAG,EAAE,YAAY,CAAC,CAAC;YACjE,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,CAAC,GAAG,CAAC,CAAC;YACZ,CAAC;QACH,CAAC,CACF,CAAC;QAEF,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,GAAG,MAAA,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC,cAAc,EAAE,0CAAE,QAAQ,EAAE,UAAU,EAC/D,cAAc,CAAC,iBAAiB,EAChC,KAAK,EAAE,GAAmB,EAAE,GAAoB,EAAE,IAAkB,EAAE,EAAE;;YACtE,IAAI,CAAC;gBACH,MAAM,UAAU,GACd,CAAA,MAAC,GAAG,CAAC,IAAI,CAAC,YAAY,CAAwB,0CAAE,IAAI,EAAE,KAAI,EAAE,CAAC;gBAE/D,IAAI,CAAC,UAAU,EAAE,CAAC;oBAChB,MAAM,IAAI,gBAAgB,CAAC,yBAAyB,CAAC,CAAC;gBACxD,CAAC;gBAED,MAAM,cAAc,GAAa,QAAQ,CAAC,eAAe,EAAE,CAAC;gBAE5D,MAAM,cAAc,GAClB,MAAM,mBAAmB,CAAC,WAAW,CAAC;oBACpC,EAAE,EAAE,cAAc;oBAClB,MAAM,EAAE;wBACN,GAAG,EAAE,IAAI;wBACT,UAAU,EAAE,IAAI;qBACjB;oBACD,KAAK,EAAE;wBACL,MAAM,EAAE,IAAI;wBACZ,WAAW,EAAE,IAAI;qBAClB;iBACF,CAAC,CAAC;gBAEL;;;;;mBAKG;gBACH,MAAM,UAAU,GACd,CAAA,cAAc,aAAd,cAAc,uBAAd,cAAc,CAAE,UAAU,KAAI,QAAQ,CAAC,QAAQ,EAAE,CAAC;gBAEpD,MAAM,kBAAkB,GAEA,MAAM,GAAG,CAAC,IAAI,CAAa;oBACjD,GAAG,EAAE,8BAA8B;oBACnC,IAAI,EAAE;wBACJ,UAAU;wBACV,UAAU,EAAE,UAAU,CAAC,QAAQ,EAAE;wBACjC,IAAI,EAAE,IAAI;wBACV;;;;2BAIG;wBACH,OAAO,EAAE,UAAU;qBACpB;iBACF,CAAC,CAAC;gBAEH,IAAI,CAAC,kBAAkB,CAAC,SAAS,EAAE,EAAE,CAAC;oBACpC,MAAM,YAAY,GAChB,kBAAkB,YAAY,iBAAiB;wBAC7C,CAAC,CAAC,kBAAkB,CAAC,OAAO;4BAC1B,iCAAiC;wBACnC,CAAC,CAAC,iCAAiC,CAAC;oBACxC,MAAM,IAAI,gBAAgB,CAAC,YAAY,CAAC,CAAC;gBAC3C,CAAC;gBAED,MAAM,OAAO,GAAe,kBAAkB,CAAC,IAAkB,CAAC;gBAElE,MAAM,cAAc,GAClB,CAAA,MAAC,OAAO,CAAC,aAAa,CAAwB,0CAAE,IAAI,EAAE,KAAI,EAAE,CAAC;gBAC/D,MAAM,YAAY,GACf,OAAO,CAAC,WAAW,CAAwB,IAAI,EAAE,CAAC;gBACrD,MAAM,aAAa,GACjB,CAAA,MAAC,OAAO,CAAC,YAAY,CAAwB,0CAAE,IAAI,EAAE,KAAI,UAAU,CAAC;gBACtE,MAAM,YAAY,GACf,OAAO,CAAC,OAAO,CAAwB,IAAI,EAAE,CAAC;gBAEjD,IAAI,aAAa,GAAqB,SAAS,CAAC;gBAChD,IAAI,YAAY,EAAE,CAAC;oBACjB,MAAM,UAAU,GAAS,IAAI,IAAI,CAAC,YAAY,CAAC,CAAC;oBAEhD,IAAI,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC;wBACvC,MAAM,IAAI,gBAAgB,CACxB,qDAAqD,CACtD,CAAC;oBACJ,CAAC;oBAED,aAAa,GAAG,UAAU,CAAC;gBAC7B,CAAC;gBAED,MAAM,YAAY,GAAY,OAAO,CAAC,WAAW,CAAC,CAAC;gBACnD,MAAM,SAAS,GACb,OAAO,YAAY,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,YAAY,CAAC;oBAC/D,CAAC,CAAC,YAAY;oBACd,CAAC,CAAC,IAAI,CAAC;gBAEX,MAAM,mBAAmB,GAAY,OAAO,CAAC,kBAAkB,CAAC,CAAC;gBACjE,MAAM,gBAAgB,GACpB,OAAO,mBAAmB,KAAK,QAAQ;oBACvC,MAAM,CAAC,QAAQ,CAAC,mBAAmB,CAAC;oBAClC,CAAC,CAAC,mBAAmB;oBACrB,CAAC,CAAC,IAAI,CAAC;gBAEX,MAAM,qBAAqB,GAAuB,OAAO,CACvD,oBAAoB,CACC,CAAC;gBACxB,IAAI,kBAAkB,GAAgB,IAAI,CAAC;gBAC3C,IAAI,qBAAqB,EAAE,CAAC;oBAC1B,MAAM,gBAAgB,GAAS,IAAI,IAAI,CAAC,qBAAqB,CAAC,CAAC;oBAC/D,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,gBAAgB,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC;wBAC9C,kBAAkB,GAAG,gBAAgB,CAAC;oBACxC,CAAC;gBACH,CAAC;gBAED,MAAM,mBAAmB,GACvB,OAAO,CAAC,qBAAqB,CAAC,KAAK,IAAI,CAAC;gBAE1C,MAAM,SAAS,GACb,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;oBACjC,CAAC,CAAE,OAAO,CACN,WAAW,CACgC;oBAC/C,CAAC,CAAC,EAAE,CAAC;gBAET,MAAM,aAAa,GAAgC;oBACjD,qBAAqB,EAAE,cAAc,IAAI,IAAI;oBAC7C,oBAAoB,EAAE,aAAa,IAAI,IAAI;oBAC3C,0BAA0B,EAAE,aAAa,IAAI,IAAI;oBACjD,sBAAsB,EAAE,YAAY,IAAI,IAAI;oBAC5C,6BAA6B,EAAE,mBAAmB;oBAClD,0BAA0B,EAAE,SAAS;oBACrC,iCAAiC,EAAE,gBAAgB;oBACnD,mCAAmC,EAAE,kBAAkB;oBACvD,0BAA0B,EAAE,SAAS;iBACtC,CAAC;gBAEF,IAAI,CAAC,CAAA,cAAc,aAAd,cAAc,uBAAd,cAAc,CAAE,UAAU,CAAA,EAAE,CAAC;oBAChC,oEAAoE;oBACpE,aAAa,CAAC,UAAU,GAAG,UAAU,CAAC;gBACxC,CAAC;gBAED,IAAI,cAAc,EAAE,CAAC;oBACnB,MAAM,mBAAmB,CAAC,aAAa,CAAC;wBACtC,EAAE,EAAE,cAAc;wBAClB,IAAI,EAAE,aAAa;wBACnB,KAAK,EAAE;4BACL,MAAM,EAAE,IAAI;4BACZ,WAAW,EAAE,IAAI;yBAClB;qBACF,CAAC,CAAC;gBACL,CAAC;qBAAM,CAAC;oBACN,MAAM,SAAS,GAAiB,IAAI,YAAY,EAAE,CAAC;oBACnD,SAAS,CAAC,EAAE,GAAG,cAAc,CAAC;oBAE9B,IAAI,cAAc,EAAE,CAAC;wBACnB,SAAS,CAAC,qBAAqB,GAAG,cAAc,CAAC;oBACnD,CAAC;oBAED,IAAI,aAAa,EAAE,CAAC;wBAClB,SAAS,CAAC,oBAAoB,GAAG,aAAa,CAAC;oBACjD,CAAC;oBAED,IAAI,YAAY,EAAE,CAAC;wBACjB,SAAS,CAAC,sBAAsB,GAAG,YAAY,CAAC;oBAClD,CAAC;oBAED,SAAS,CAAC,6BAA6B,GAAG,mBAAmB,CAAC;oBAE9D,IAAI,aAAa,EAAE,CAAC;wBAClB,SAAS,CAAC,0BAA0B,GAAG,aAAa,CAAC;oBACvD,CAAC;oBAED,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;wBACvB,SAAS,CAAC,0BAA0B,GAAG,SAAS,CAAC;oBACnD,CAAC;oBAED,IAAI,gBAAgB,KAAK,IAAI,EAAE,CAAC;wBAC9B,SAAS,CAAC,iCAAiC,GAAG,gBAAgB,CAAC;oBACjE,CAAC;oBAED,IAAI,kBAAkB,EAAE,CAAC;wBACvB,SAAS,CAAC,mCAAmC;4BAC3C,kBAAkB,CAAC;oBACvB,CAAC;oBAED,SAAS,CAAC,0BAA0B,GAAG,SAAS,CAAC;oBACjD,SAAS,CAAC,UAAU,GAAG,UAAU,CAAC;oBAElC,MAAM,mBAAmB,CAAC,MAAM,CAAC;wBAC/B,IAAI,EAAE,SAAS;wBACf,KAAK,EAAE;4BACL,MAAM,EAAE,IAAI;4BACZ,WAAW,EAAE,IAAI;yBAClB;qBACF,CAAC,CAAC;gBACL,CAAC;gBAED,OAAO,QAAQ,CAAC,sBAAsB,CAAC,GAAG,EAAE,GAAG,EAAE;oBAC/C,WAAW,EAAE,cAAc,IAAI,IAAI;oBACnC,SAAS,EAAE,aAAa,CAAC,CAAC,CAAC,aAAa,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,IAAI;oBAC7D,UAAU,EAAE,aAAa,IAAI,IAAI;oBACjC,KAAK,EAAE,YAAY,IAAI,IAAI;oBAC3B,mBAAmB,EAAE,mBAAmB;oBACxC,SAAS,EAAE,SAAS;oBACpB,gBAAgB,EAAE,gBAAgB;oBAClC,kBAAkB,EAAE,kBAAkB;wBACpC,CAAC,CAAC,kBAAkB,CAAC,WAAW,EAAE;wBAClC,CAAC,CAAC,IAAI;oBACR,SAAS,EAAE,SAAS;oBACpB,UAAU,EAAE,UAAU,CAAC,QAAQ,EAAE;iBAClC,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,CAAC,GAAG,CAAC,CAAC;YACZ,CAAC;QACH,CAAC,CACF,CAAC;IACJ,CAAC;CACF"}
+{"version":3,"file":"GlobalConfigAPI.js","sourceRoot":"","sources":["../../../../Server/API/GlobalConfigAPI.ts"],"names":[],"mappings":"AAAA,OAAO,mBAEN,MAAM,iCAAiC,CAAC;AAOzC,OAAO,QAAQ,MAAM,mBAAmB,CAAC;AACzC,OAAO,OAAO,MAAM,WAAW,CAAC;AAChC,OAAO,YAAY,MAAM,0CAA0C,CAAC;AACpE,OAAO,QAAQ,MAAM,sBAAsB,CAAC;AAE5C,OAAO,gBAAgB,MAAM,wCAAwC,CAAC;AACtE,OAAO,GAAG,MAAM,iBAAiB,CAAC;AAClC,OAAO,iBAAiB,MAAM,mCAAmC,CAAC;AAGlE,OAAO,EACL,UAAU,EACV,kBAAkB,EAClB,8BAA8B,EAC9B,IAAI,GACL,MAAM,sBAAsB,CAAC;AAE9B,OAAO,WAAW,MAAM,yBAAyB,CAAC;AAClD,OAAO,cAAc,MAAM,iCAAiC,CAAC;AAC7D,OAAO,wBAAwB,MAAM,wCAAwC,CAAC;AAC9E,OAAO,yBAAyB,MAAM,sDAAsD,CAAC;AAE7F,OAAO,WAAW,MAAM,yBAAyB,CAAC;AAGlD,MAAM,CAAC,OAAO,OAAO,eAAgB,SAAQ,OAG5C;IACC;;QACE,KAAK,CAAC,YAAY,EAAE,mBAAmB,CAAC,CAAC;QAEzC,IAAI,CAAC,MAAM,CAAC,GAAG,CACb,GAAG,MAAA,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC,cAAc,EAAE,0CAAE,QAAQ,EAAE,OAAO,EAC5D,KAAK,EAAE,GAAmB,EAAE,GAAoB,EAAE,IAAkB,EAAE,EAAE;YACtE,IAAI,CAAC;gBACH,MAAM,YAAY,GAChB,MAAM,mBAAmB,CAAC,WAAW,CAAC;oBACpC,EAAE,EAAE,QAAQ,CAAC,eAAe,EAAE;oBAC9B,MAAM,EAAE;wBACN,0BAA0B,EAAE,IAAI;qBACjC;oBACD,KAAK,EAAE;wBACL,MAAM,EAAE,IAAI;qBACb;iBACF,CAAC,CAAC;gBAEL,OAAO,QAAQ,CAAC,sBAAsB,CAAC,GAAG,EAAE,GAAG,EAAE;oBAC/C,0BAA0B,EAAE,OAAO,CACjC,YAAY,aAAZ,YAAY,uBAAZ,YAAY,CAAE,0BAA0B,CACzC;iBACF,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,CAAC,GAAG,CAAC,CAAC;YACZ,CAAC;QACH,CAAC,CACF,CAAC;QAEF,IAAI,CAAC,MAAM,CAAC,GAAG,CACb,GAAG,MAAA,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC,cAAc,EAAE,0CAAE,QAAQ,EAAE,UAAU,EAC/D,cAAc,CAAC,iBAAiB,EAChC,KAAK,EAAE,GAAmB,EAAE,GAAoB,EAAE,IAAkB,EAAE,EAAE;;YACtE,IAAI,CAAC;gBACH,MAAM,MAAM,GACV,MAAM,mBAAmB,CAAC,WAAW,CAAC;oBACpC,EAAE,EAAE,QAAQ,CAAC,eAAe,EAAE;oBAC9B,MAAM,EAAE;wBACN,qBAAqB,EAAE,IAAI;wBAC3B,0BAA0B,EAAE,IAAI;wBAChC,oBAAoB,EAAE,IAAI;wBAC1B,sBAAsB,EAAE,IAAI;wBAC5B,6BAA6B,EAAE,IAAI;wBACnC,0BAA0B,EAAE,IAAI;wBAChC,iCAAiC,EAAE,IAAI;wBACvC,mCAAmC,EAAE,IAAI;wBACzC,0BAA0B,EAAE,IAAI;wBAChC,UAAU,EAAE,IAAI;wBAChB,oBAAoB,EAAE,IAAI;wBAC1B,wBAAwB,EAAE,IAAI;wBAC9B,sBAAsB,EAAE,IAAI;qBAC7B;oBACD,KAAK,EAAE;wBACL,MAAM,EAAE,IAAI;qBACb;iBACF,CAAC,CAAC;gBAEL;;;;;mBAKG;gBACH,MAAM,mBAAmB,GAAY,OAAO,CAC1C,MAAC,GAAwB,CAAC,iBAAiB,0CAAE,MAAM,CACpD,CAAC;gBAEF,MAAM,YAAY,GAAY,OAAO,CACnC,CAAA,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,sBAAsB;qBAC5B,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,0BAA0B,CAAA;oBAClC,MAAM,CAAC,0BAA0B,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAC3D,CAAC;gBAEF;;;;;;mBAMG;gBACH,MAAM,SAAS,GAAqB,mBAAmB;oBACrD,CAAC,CAAC,MAAM,yBAAyB,CAAC,iCAAiC,CAC/D;wBACE,MAAM,EAAE,MAAM;wBACd,iBAAiB,EAAE,eAAe,CAAC,iBAAiB;qBACrD,CACF;oBACH,CAAC,CAAC,IAAI,CAAC;gBAET,MAAM,YAAY,mBAChB,WAAW,EAAE,CAAA,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,qBAAqB,KAAI,IAAI,EAClD,SAAS,EAAE,CAAA,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,0BAA0B;wBAC3C,CAAC,CAAC,MAAM,CAAC,0BAA0B,CAAC,WAAW,EAAE;wBACjD,CAAC,CAAC,IAAI,EACR,UAAU,EAAE,mBAAmB;wBAC7B,CAAC,CAAC,CAAA,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,oBAAoB,KAAI,IAAI;wBACtC,CAAC,CAAC,IAAI,EACR,KAAK,EAAE,mBAAmB;wBACxB,CAAC,CAAC,CAAA,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,sBAAsB,KAAI,IAAI;wBACxC,CAAC,CAAC,IAAI,EACR,YAAY,EAAE,YAAY;oBAC1B;;;;uBAIG;oBACH,mBAAmB,EAAE,OAAO,CAAC,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,6BAA6B,CAAC,EACnE,SAAS,EACP,OAAO,CAAA,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,0BAA0B,CAAA,KAAK,QAAQ;wBACpD,CAAC,CAAC,MAAM,CAAC,0BAA0B;wBACnC,CAAC,CAAC,IAAI,EACV,gBAAgB,EACd,OAAO,CAAA,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,iCAAiC,CAAA,KAAK,QAAQ;wBAC3D,CAAC,CAAC,MAAM,CAAC,iCAAiC;wBAC1C,CAAC,CAAC,IAAI,EACV,kBAAkB,EAAE,CAAA,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,mCAAmC;wBAC7D,CAAC,CAAC,MAAM,CAAC,mCAAmC,CAAC,WAAW,EAAE;wBAC1D,CAAC,CAAC,IAAI,EACR,SAAS,EACP,mBAAmB;wBACnB,KAAK,CAAC,OAAO,CAAC,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,0BAA0B,CAAC;wBAC/C,CAAC,CAAC,MAAM,CAAC,0BAA0B;wBACnC,CAAC,CAAC,EAAE,EACR,UAAU,EACR,mBAAmB,KAAI,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,UAAU,CAAA;wBACvC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,QAAQ,EAAE;wBAC9B,CAAC,CAAC,IAAI;oBACV;;;;;uBAKG;oBACH,cAAc,EAAE,mBAAmB,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,EACvD,aAAa,EAAE,mBAAmB;wBAChC,CAAC,CAAC,CAAA,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,oBAAoB,KAAI,IAAI;wBACtC,CAAC,CAAC,IAAI,EACR,wBAAwB,EACtB,mBAAmB,KAAI,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,wBAAwB,CAAA;wBACrD,CAAC,CAAC,MAAM,CAAC,wBAAwB,CAAC,WAAW,EAAE;wBAC/C,CAAC,CAAC,IAAI,EACV,sBAAsB,EACpB,mBAAmB,KAAI,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,sBAAsB,CAAA;wBACnD,CAAC,CAAC,MAAM,CAAC,sBAAsB,CAAC,WAAW,EAAE;wBAC7C,CAAC,CAAC,IAAI,EACV,iBAAiB,EAAE,mBAAmB;wBACpC,CAAC,CAAC,WAAW,CAAC,iBAAiB,CAAC;4BAC5B,cAAc,EAAE,UAAU;4BAC1B,aAAa,EAAE,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,oBAAoB;yBAC5C,CAAC;wBACJ,CAAC,CAAC,KAAK;oBACT;;;;uBAIG;oBACH,qBAAqB,EAAE,mBAAmB;wBACxC,CAAC,CAAC,kBAAkB;wBACpB,CAAC,CAAC,KAAK,IACN,eAAe,CAAC,0BAA0B,CAAC,SAAS,CAAC,CACzD,CAAC;gBAEF,OAAO,QAAQ,CAAC,sBAAsB,CAAC,GAAG,EAAE,GAAG,EAAE,YAAY,CAAC,CAAC;YACjE,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,CAAC,GAAG,CAAC,CAAC;YACZ,CAAC;QACH,CAAC,CACF,CAAC;QAEF;;;;;;;;;WASG;QACH,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,GAAG,MAAA,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC,cAAc,EAAE,0CAAE,QAAQ,EAAE,UAAU,EAC/D,wBAAwB,CAAC,iCAAiC,EAC1D,KAAK,EAAE,GAAmB,EAAE,GAAoB,EAAE,IAAkB,EAAE,EAAE;;YACtE,IAAI,CAAC;gBACH,MAAM,UAAU,GACd,CAAA,MAAC,GAAG,CAAC,IAAI,CAAC,YAAY,CAAwB,0CAAE,IAAI,EAAE,KAAI,EAAE,CAAC;gBAE/D,IAAI,CAAC,UAAU,EAAE,CAAC;oBAChB,MAAM,IAAI,gBAAgB,CAAC,yBAAyB,CAAC,CAAC;gBACxD,CAAC;gBAED,MAAM,YAAY,GAChB,MAAM,IAAI,CAAC,0BAA0B,CAAC,UAAU,CAAC,CAAC;gBAEpD,OAAO,QAAQ,CAAC,sBAAsB,CAAC,GAAG,EAAE,GAAG,EAAE,YAAY,CAAC,CAAC;YACjE,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,CAAC,GAAG,CAAC,CAAC;YACZ,CAAC;QACH,CAAC,CACF,CAAC;QAEF;;;;;;;;;;;;WAYG;QACH,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,GAAG,MAAA,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC,cAAc,EAAE,0CAAE,QAAQ,EAAE,kBAAkB,EACvE,wBAAwB,CAAC,iCAAiC,EAC1D,KAAK,EAAE,GAAmB,EAAE,GAAoB,EAAE,IAAkB,EAAE,EAAE;;YACtE,IAAI,CAAC;gBACH,MAAM,MAAM,GACV,MAAM,mBAAmB,CAAC,WAAW,CAAC;oBACpC,EAAE,EAAE,QAAQ,CAAC,eAAe,EAAE;oBAC9B,MAAM,EAAE;wBACN,oBAAoB,EAAE,IAAI;qBAC3B;oBACD,KAAK,EAAE;wBACL,MAAM,EAAE,IAAI;qBACb;iBACF,CAAC,CAAC;gBAEL,MAAM,UAAU,GAAW,CAAA,MAAA,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,oBAAoB,0CAAE,IAAI,EAAE,KAAI,EAAE,CAAC;gBAEtE,IAAI,CAAC,UAAU,EAAE,CAAC;oBAChB,MAAM,IAAI,gBAAgB,CACxB,0GAA0G,CAC3G,CAAC;gBACJ,CAAC;gBAED,MAAM,YAAY,GAChB,MAAM,IAAI,CAAC,0BAA0B,CAAC,UAAU,CAAC,CAAC;gBAEpD,OAAO,QAAQ,CAAC,sBAAsB,CAAC,GAAG,EAAE,GAAG,EAAE,YAAY,CAAC,CAAC;YACjE,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,CAAC,GAAG,CAAC,CAAC;YACZ,CAAC;QACH,CAAC,CACF,CAAC;IACJ,CAAC;IAED;;;;;;;;OAQG;IACK,KAAK,CAAC,0BAA0B,CACtC,UAAkB;;QAElB,MAAM,cAAc,GAAa,QAAQ,CAAC,eAAe,EAAE,CAAC;QAE5D,MAAM,cAAc,GAClB,MAAM,mBAAmB,CAAC,WAAW,CAAC;YACpC,EAAE,EAAE,cAAc;YAClB,MAAM,EAAE;gBACN,GAAG,EAAE,IAAI;gBACT,UAAU,EAAE,IAAI;aACjB;YACD,KAAK,EAAE;gBACL,MAAM,EAAE,IAAI;gBACZ,WAAW,EAAE,IAAI;aAClB;SACF,CAAC,CAAC;QAEL;;;;;WAKG;QACH,MAAM,UAAU,GACd,CAAA,cAAc,aAAd,cAAc,uBAAd,cAAc,CAAE,UAAU,KAAI,QAAQ,CAAC,QAAQ,EAAE,CAAC;QAEpD,MAAM,kBAAkB,GACtB,MAAM,GAAG,CAAC,IAAI,CAAa;YACzB,GAAG,EAAE,8BAA8B;YACnC,IAAI,EAAE;gBACJ,UAAU;gBACV,UAAU,EAAE,UAAU,CAAC,QAAQ,EAAE;gBACjC,IAAI,EAAE,IAAI;gBACV;;;;mBAIG;gBACH,OAAO,EAAE,UAAU;aACpB;SACF,CAAC,CAAC;QAEL,IAAI,CAAC,kBAAkB,CAAC,SAAS,EAAE,EAAE,CAAC;YACpC,MAAM,YAAY,GAChB,kBAAkB,YAAY,iBAAiB;gBAC7C,CAAC,CAAC,kBAAkB,CAAC,OAAO,IAAI,iCAAiC;gBACjE,CAAC,CAAC,iCAAiC,CAAC;YACxC,MAAM,IAAI,gBAAgB,CAAC,YAAY,CAAC,CAAC;QAC3C,CAAC;QAED,MAAM,OAAO,GAAe,kBAAkB,CAAC,IAAkB,CAAC;QAElE,MAAM,cAAc,GAClB,CAAA,MAAC,OAAO,CAAC,aAAa,CAAwB,0CAAE,IAAI,EAAE,KAAI,EAAE,CAAC;QAC/D,MAAM,YAAY,GACf,OAAO,CAAC,WAAW,CAAwB,IAAI,EAAE,CAAC;QACrD,MAAM,aAAa,GACjB,CAAA,MAAC,OAAO,CAAC,YAAY,CAAwB,0CAAE,IAAI,EAAE,KAAI,UAAU,CAAC;QACtE,MAAM,YAAY,GAAY,OAAO,CAAC,OAAO,CAAwB,IAAI,EAAE,CAAC;QAE5E,IAAI,aAAa,GAAqB,SAAS,CAAC;QAChD,IAAI,YAAY,EAAE,CAAC;YACjB,MAAM,UAAU,GAAS,IAAI,IAAI,CAAC,YAAY,CAAC,CAAC;YAEhD,IAAI,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC;gBACvC,MAAM,IAAI,gBAAgB,CACxB,qDAAqD,CACtD,CAAC;YACJ,CAAC;YAED,aAAa,GAAG,UAAU,CAAC;QAC7B,CAAC;QAED,MAAM,YAAY,GAAY,OAAO,CAAC,WAAW,CAAC,CAAC;QACnD,MAAM,SAAS,GACb,OAAO,YAAY,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,YAAY,CAAC;YAC/D,CAAC,CAAC,YAAY;YACd,CAAC,CAAC,IAAI,CAAC;QAEX,MAAM,mBAAmB,GAAY,OAAO,CAAC,kBAAkB,CAAC,CAAC;QACjE,MAAM,gBAAgB,GACpB,OAAO,mBAAmB,KAAK,QAAQ;YACvC,MAAM,CAAC,QAAQ,CAAC,mBAAmB,CAAC;YAClC,CAAC,CAAC,mBAAmB;YACrB,CAAC,CAAC,IAAI,CAAC;QAEX,MAAM,qBAAqB,GAAuB,OAAO,CACvD,oBAAoB,CACC,CAAC;QACxB,IAAI,kBAAkB,GAAgB,IAAI,CAAC;QAC3C,IAAI,qBAAqB,EAAE,CAAC;YAC1B,MAAM,gBAAgB,GAAS,IAAI,IAAI,CAAC,qBAAqB,CAAC,CAAC;YAC/D,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,gBAAgB,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC;gBAC9C,kBAAkB,GAAG,gBAAgB,CAAC;YACxC,CAAC;QACH,CAAC;QAED,MAAM,mBAAmB,GACvB,OAAO,CAAC,qBAAqB,CAAC,KAAK,IAAI,CAAC;QAE1C,MAAM,SAAS,GAA4C,KAAK,CAAC,OAAO,CACtE,OAAO,CAAC,WAAW,CAAC,CACrB;YACC,CAAC,CAAE,OAAO,CAAC,WAAW,CAA6C;YACnE,CAAC,CAAC,EAAE,CAAC;QAEP,MAAM,aAAa,GAAgC;YACjD,qBAAqB,EAAE,cAAc,IAAI,IAAI;YAC7C,oBAAoB,EAAE,aAAa,IAAI,IAAI;YAC3C,0BAA0B,EAAE,aAAa,IAAI,IAAI;YACjD,sBAAsB,EAAE,YAAY,IAAI,IAAI;YAC5C,6BAA6B,EAAE,mBAAmB;YAClD,0BAA0B,EAAE,SAAS;YACrC,iCAAiC,EAAE,gBAAgB;YACnD,mCAAmC,EAAE,kBAAkB;YACvD,0BAA0B,EAAE,SAAS;SACtC,CAAC;QAEF,IAAI,CAAC,CAAA,cAAc,aAAd,cAAc,uBAAd,cAAc,CAAE,UAAU,CAAA,EAAE,CAAC;YAChC,oEAAoE;YACpE,aAAa,CAAC,UAAU,GAAG,UAAU,CAAC;QACxC,CAAC;QAED,IAAI,cAAc,EAAE,CAAC;YACnB,MAAM,mBAAmB,CAAC,aAAa,CAAC;gBACtC,EAAE,EAAE,cAAc;gBAClB,IAAI,EAAE,aAAa;gBACnB,KAAK,EAAE;oBACL,MAAM,EAAE,IAAI;oBACZ,WAAW,EAAE,IAAI;iBAClB;aACF,CAAC,CAAC;QACL,CAAC;aAAM,CAAC;YACN,MAAM,SAAS,GAAiB,IAAI,YAAY,EAAE,CAAC;YACnD,SAAS,CAAC,EAAE,GAAG,cAAc,CAAC;YAE9B,IAAI,cAAc,EAAE,CAAC;gBACnB,SAAS,CAAC,qBAAqB,GAAG,cAAc,CAAC;YACnD,CAAC;YAED,IAAI,aAAa,EAAE,CAAC;gBAClB,SAAS,CAAC,oBAAoB,GAAG,aAAa,CAAC;YACjD,CAAC;YAED,IAAI,YAAY,EAAE,CAAC;gBACjB,SAAS,CAAC,sBAAsB,GAAG,YAAY,CAAC;YAClD,CAAC;YAED,SAAS,CAAC,6BAA6B,GAAG,mBAAmB,CAAC;YAE9D,IAAI,aAAa,EAAE,CAAC;gBAClB,SAAS,CAAC,0BAA0B,GAAG,aAAa,CAAC;YACvD,CAAC;YAED,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;gBACvB,SAAS,CAAC,0BAA0B,GAAG,SAAS,CAAC;YACnD,CAAC;YAED,IAAI,gBAAgB,KAAK,IAAI,EAAE,CAAC;gBAC9B,SAAS,CAAC,iCAAiC,GAAG,gBAAgB,CAAC;YACjE,CAAC;YAED,IAAI,kBAAkB,EAAE,CAAC;gBACvB,SAAS,CAAC,mCAAmC,GAAG,kBAAkB,CAAC;YACrE,CAAC;YAED,SAAS,CAAC,0BAA0B,GAAG,SAAS,CAAC;YACjD,SAAS,CAAC,UAAU,GAAG,UAAU,CAAC;YAElC,MAAM,mBAAmB,CAAC,MAAM,CAAC;gBAC/B,IAAI,EAAE,SAAS;gBACf,KAAK,EAAE;oBACL,MAAM,EAAE,IAAI;oBACZ,WAAW,EAAE,IAAI;iBAClB;aACF,CAAC,CAAC;QACL,CAAC;QAED;;;;;WAKG;QACH,MAAM,SAAS,GACb,MAAM,eAAe,CAAC,uBAAuB,CAAC;YAC5C,SAAS,EAAE,SAAS;YACpB,gBAAgB,EAAE,gBAAgB;YAClC,SAAS,EAAE,SAAS;YACpB,UAAU,EAAE,UAAU;SACvB,CAAC,CAAC;QAEL,uBACE,WAAW,EAAE,cAAc,IAAI,IAAI,EACnC,SAAS,EAAE,aAAa,CAAC,CAAC,CAAC,aAAa,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,IAAI,EAC7D,UAAU,EAAE,aAAa,IAAI,IAAI,EACjC,KAAK,EAAE,YAAY,IAAI,IAAI,EAC3B,mBAAmB,EAAE,mBAAmB,EACxC,SAAS,EAAE,SAAS,EACpB,gBAAgB,EAAE,gBAAgB,EAClC,kBAAkB,EAAE,kBAAkB;gBACpC,CAAC,CAAC,kBAAkB,CAAC,WAAW,EAAE;gBAClC,CAAC,CAAC,IAAI,EACR,SAAS,EAAE,SAAS,EACpB,UAAU,EAAE,UAAU,CAAC,QAAQ,EAAE,IAC9B,eAAe,CAAC,0BAA0B,CAAC,SAAS,CAAC,EACxD;IACJ,CAAC;IAED;;;;OAIG;IACK,MAAM,CAAC,KAAK,CAAC,uBAAuB,CAAC,IAK5C;QACC,MAAM,MAAM,GAAiB,IAAI,YAAY,EAAE,CAAC;QAChD,MAAM,CAAC,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC;QACpC,MAAM,CAAC,0BAA0B,GAAG,IAAI,CAAC,SAAS,CAAC;QAEnD,IAAI,IAAI,CAAC,SAAS,KAAK,IAAI,EAAE,CAAC;YAC5B,MAAM,CAAC,0BAA0B,GAAG,IAAI,CAAC,SAAS,CAAC;QACrD,CAAC;QAED,IAAI,IAAI,CAAC,gBAAgB,KAAK,IAAI,EAAE,CAAC;YACnC,MAAM,CAAC,iCAAiC,GAAG,IAAI,CAAC,gBAAgB,CAAC;QACnE,CAAC;QAED,OAAO,yBAAyB,CAAC,iCAAiC,CAAC;YACjE,MAAM,EAAE,MAAM;YACd,iBAAiB,EAAE,eAAe,CAAC,iBAAiB;SACrD,CAAC,CAAC;IACL,CAAC;IAED;;;;;OAKG;IACK,MAAM,CAAC,KAAK,CAAC,iBAAiB;QACpC,MAAM,SAAS,GAAmB,MAAM,WAAW,CAAC,OAAO,CAAC;YAC1D,KAAK,EAAE,EAAE;YACT,KAAK,EAAE;gBACL,MAAM,EAAE,IAAI;aACb;SACF,CAAC,CAAC;QAEH,OAAO,SAAS,CAAC,QAAQ,EAAE,CAAC;IAC9B,CAAC;IAED;;;;;OAKG;IACK,MAAM,CAAC,0BAA0B,CACvC,SAA2B;QAE3B,IAAI,CAAC,SAAS,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,CAAC;YACxC,OAAO;gBACL,mBAAmB,EAAE,KAAK;gBAC1B,UAAU,EAAE,IAAI;gBAChB,cAAc,EAAE,IAAI;gBACpB,eAAe,EAAE,IAAI;aACtB,CAAC;QACJ,CAAC;QAED,OAAO;YACL,mBAAmB,EAAE,IAAI;YACzB,UAAU,EAAE,SAAS,CAAC,UAAU;YAChC,cAAc,EAAE,SAAS,CAAC,cAAc;YACxC,eAAe,EAAE,SAAS,CAAC,iBAAiB;SAC7C,CAAC;IACJ,CAAC;CACF"}

package/build/dist/Server/API/TelemetryAPI.js

@@ -6,7 +6,7 @@ import CommonAPI from "./CommonAPI";
 import TelemetryType from "../../Types/Telemetry/TelemetryType";
 import TelemetryAttributeService from "../Services/TelemetryAttributeService";
 import TelemetrySourceMapService from "../Services/TelemetrySourceMapService";
-import SourceMapResolver from "../Utils/Telemetry/SourceMapResolver";
+import SourceMapResolver, { MAX_FRAMES_PER_RESOLVE_REQUEST, } from "../Utils/Telemetry/SourceMapResolver";
 import LogAggregationService from "../Services/LogAggregationService";
 import TraceAggregationService from "../Services/TraceAggregationService";
 import ExceptionAggregationService from "../Services/ExceptionAggregationService";
@@ -79,9 +79,28 @@ const requireExceptionReadAccess = createTelemetryReadAccessGuard(Permission.Rea
 const requireProfileReadAccess = createTelemetryReadAccessGuard(Permission.ReadTelemetryServiceProfiles);
 /*
  * Mirrors the read access control declared on the SecurityEvent analytics
- * model.
+ * model - which, unlike every other signal above, is NOT the telemetry list.
+ * Security events read through the Security tiers only, so this route cannot
+ * be built from createTelemetryReadAccessGuard: doing so would leave the
+ * attribute endpoints open to ProjectMember and the Telemetry tiers while the
+ * model-backed CRUD API refused them, and the attribute keys and values of a
+ * SIEM table are themselves the sensitive part - usernames, hostnames, source
+ * IPs, and every value seen for them.
  */
-const requireSecurityEventReadAccess = createTelemetryReadAccessGuard(Permission.ReadSecurityEvent);
+const requireSecurityEventReadAccess = [
+    UserMiddleware.getUserMiddleware,
+    UserMiddleware.requireUserAuthentication,
+    UserMiddleware.requirePermission({
+        permissions: [
+            Permission.ProjectOwner,
+            Permission.ProjectAdmin,
+            Permission.SecurityAdmin,
+            Permission.SecurityMember,
+            Permission.SecurityViewer,
+            Permission.ReadSecurityEvent,
+        ],
+    }),
+];
 router.post("/telemetry/metrics/get-attributes", ...requireMetricReadAccess, async (req, res, next) => {
     return getAttributes(req, res, next, TelemetryType.Metric);
 });
@@ -141,6 +160,15 @@ router.post("/telemetry/exceptions/resolve-stack-trace", ...requireExceptionRead
         if (!Array.isArray(body["frames"])) {
             return Response.sendErrorResponse(req, res, new BadDataException("frames must be an array of stack frames"));
         }
+        /*
+         * Bound the array before sanitizing it. sanitizeMinifiedStackFrames
+         * never throws and never truncates, so without this the only limit on
+         * the work a caller can ask for is the body-size cap.
+         */
+        if (body["frames"].length >
+            MAX_FRAMES_PER_RESOLVE_REQUEST) {
+            return Response.sendErrorResponse(req, res, new BadDataException(`frames must contain at most ${MAX_FRAMES_PER_RESOLVE_REQUEST} stack frames.`));
+        }
         const frames = SourceMapResolver.sanitizeMinifiedStackFrames(body["frames"]);
         const result = await TelemetrySourceMapService.resolveFramesForService({
             projectId: databaseProps.tenantId,