@oneuptime/common 13.0.7 → 14.0.0

package/build/dist/Server/Types/Database/Permissions/Index.js

@@ -12,25 +12,79 @@ import CreatePermission from "./CreatePermission";
 import DeletePermission from "./DeletePermission";
 import ReadPermission from "./ReadPermission";
 import UpdatePermission from "./UpdatePermission";
+import DatabaseCommonInteractionPropsUtil from "../../../../Types/BaseDatabase/DatabaseCommonInteractionPropsUtil";
+import NotAuthenticatedException from "../../../../Types/Exception/NotAuthenticatedException";
+import NotAuthorizedException from "../../../../Types/Exception/NotAuthorizedException";
 import CaptureSpan from "../../../Utils/Telemetry/CaptureSpan";
 export default class ModelPermission {
+    /*
+     * A refusal of a caller with no credentials at all is a 401.
+     *
+     * The login check near the top of every permission check passes an
+     * anonymous caller straight through on models that are readable (or
+     * creatable) by Public - Probe, AIAgent, LlmProvider and friends - and the
+     * column, select and query checks that follow then refuse it with 422
+     * NotAuthorizedException. For the dashboard that caller is a signed-in user
+     * whose access-token cookie expired, and only a 401 makes the browser client
+     * refresh the session and replay the request. Callers with credentials keep
+     * the 422 they always got; the message is kept either way.
+     */
+    static toAnonymousRefusal(error, props) {
+        if (error instanceof NotAuthorizedException &&
+            !props.isRoot &&
+            !props.isMasterAdmin &&
+            DatabaseCommonInteractionPropsUtil.isAnonymous(props)) {
+            return new NotAuthenticatedException(error.message);
+        }
+        return error;
+    }
     static async checkDeletePermissionByModel(data) {
-        return DeletePermission.checkDeletePermissionByModel(data);
+        try {
+            return await DeletePermission.checkDeletePermissionByModel(data);
+        }
+        catch (error) {
+            throw ModelPermission.toAnonymousRefusal(error, data.props);
+        }
     }
     static async checkUpdatePermissionByModel(data) {
-        return UpdatePermission.checkUpdatePermissionByModel(data);
+        try {
+            return await UpdatePermission.checkUpdatePermissionByModel(data);
+        }
+        catch (error) {
+            throw ModelPermission.toAnonymousRefusal(error, data.props);
+        }
     }
     static async checkDeleteQueryPermission(modelType, query, props) {
-        return DeletePermission.checkDeletePermission(modelType, query, props);
+        try {
+            return await DeletePermission.checkDeletePermission(modelType, query, props);
+        }
+        catch (error) {
+            throw ModelPermission.toAnonymousRefusal(error, props);
+        }
     }
     static async checkUpdateQueryPermissions(modelType, query, data, props) {
-        return UpdatePermission.checkUpdatePermissions(modelType, query, data, props);
+        try {
+            return await UpdatePermission.checkUpdatePermissions(modelType, query, data, props);
+        }
+        catch (error) {
+            throw ModelPermission.toAnonymousRefusal(error, props);
+        }
     }
     static checkCreatePermissions(modelType, data, props) {
-        return CreatePermission.checkCreatePermissions(modelType, data, props);
+        try {
+            return CreatePermission.checkCreatePermissions(modelType, data, props);
+        }
+        catch (error) {
+            throw ModelPermission.toAnonymousRefusal(error, props);
+        }
     }
     static async checkReadQueryPermission(modelType, query, select, props) {
-        return ReadPermission.checkReadPermission(modelType, query, select, props);
+        try {
+            return await ReadPermission.checkReadPermission(modelType, query, select, props);
+        }
+        catch (error) {
+            throw ModelPermission.toAnonymousRefusal(error, props);
+        }
     }
 }
 __decorate([

package/build/dist/Server/Types/Database/Permissions/Index.js.map

@@ -1 +1 @@
-{"version":3,"file":"Index.js","sourceRoot":"","sources":["../../../../../../Server/Types/Database/Permissions/Index.ts"],"names":[],"mappings":";;;;;;;;;;AAGA,OAAO,gBAAgB,MAAM,oBAAoB,CAAC;AAClD,OAAO,gBAAgB,MAAM,oBAAoB,CAAC;AAClD,OAAO,cAA2C,MAAM,kBAAkB,CAAC;AAC3E,OAAO,gBAAgB,MAAM,oBAAoB,CAAC;AAGlD,OAAO,WAAW,MAAM,sCAAsC,CAAC;AAE/D,MAAM,CAAC,OAAO,OAAO,eAAe;IAEd,AAAb,MAAM,CAAC,KAAK,CAAC,4BAA4B,CAE9C,IAID;QACC,OAAO,gBAAgB,CAAC,4BAA4B,CAAC,IAAI,CAAC,CAAC;IAC7D,CAAC;IAGmB,AAAb,MAAM,CAAC,KAAK,CAAC,4BAA4B,CAE9C,IAID;QACC,OAAO,gBAAgB,CAAC,4BAA4B,CAAC,IAAI,CAAC,CAAC;IAC7D,CAAC;IAGmB,AAAb,MAAM,CAAC,KAAK,CAAC,0BAA0B,CAC5C,SAAiC,EACjC,KAAwB,EACxB,KAAqC;QAErC,OAAO,gBAAgB,CAAC,qBAAqB,CAAC,SAAS,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;IACzE,CAAC;IAGmB,AAAb,MAAM,CAAC,KAAK,CAAC,2BAA2B,CAC7C,SAAiC,EACjC,KAAwB,EACxB,IAAwC,EACxC,KAAqC;QAErC,OAAO,gBAAgB,CAAC,sBAAsB,CAC5C,SAAS,EACT,KAAK,EACL,IAAI,EACJ,KAAK,CACN,CAAC;IACJ,CAAC;IAGa,AAAP,MAAM,CAAC,sBAAsB,CAClC,SAAiC,EACjC,IAAgB,EAChB,KAAqC;QAErC,OAAO,gBAAgB,CAAC,sBAAsB,CAAC,SAAS,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;IACzE,CAAC;IAGmB,AAAb,MAAM,CAAC,KAAK,CAAC,wBAAwB,CAC1C,SAAiC,EACjC,KAAwB,EACxB,MAAiC,EACjC,KAAqC;QAErC,OAAO,cAAc,CAAC,mBAAmB,CAAC,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;IAC7E,CAAC;CACF;AA/DqB;IADnB,WAAW,EAAE;;;;yDASb;AAGmB;IADnB,WAAW,EAAE;;;;yDASb;AAGmB;IADnB,WAAW,EAAE;;;;uDAOb;AAGmB;IADnB,WAAW,EAAE;;;;wDAab;AAGa;IADb,WAAW,EAAE;;iEAGN,UAAU,oBAAV,UAAU;;mDAIjB;AAGmB;IADnB,WAAW,EAAE;;;;qDAQb"}
+{"version":3,"file":"Index.js","sourceRoot":"","sources":["../../../../../../Server/Types/Database/Permissions/Index.ts"],"names":[],"mappings":";;;;;;;;;;AAGA,OAAO,gBAAgB,MAAM,oBAAoB,CAAC;AAClD,OAAO,gBAAgB,MAAM,oBAAoB,CAAC;AAClD,OAAO,cAA2C,MAAM,kBAAkB,CAAC;AAC3E,OAAO,gBAAgB,MAAM,oBAAoB,CAAC;AAGlD,OAAO,kCAAkC,MAAM,mEAAmE,CAAC;AACnH,OAAO,yBAAyB,MAAM,uDAAuD,CAAC;AAC9F,OAAO,sBAAsB,MAAM,oDAAoD,CAAC;AACxF,OAAO,WAAW,MAAM,sCAAsC,CAAC;AAE/D,MAAM,CAAC,OAAO,OAAO,eAAe;IAClC;;;;;;;;;;;OAWG;IACK,MAAM,CAAC,kBAAkB,CAC/B,KAAc,EACd,KAAqC;QAErC,IACE,KAAK,YAAY,sBAAsB;YACvC,CAAC,KAAK,CAAC,MAAM;YACb,CAAC,KAAK,CAAC,aAAa;YACpB,kCAAkC,CAAC,WAAW,CAAC,KAAK,CAAC,EACrD,CAAC;YACD,OAAO,IAAI,yBAAyB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACtD,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAGmB,AAAb,MAAM,CAAC,KAAK,CAAC,4BAA4B,CAE9C,IAID;QACC,IAAI,CAAC;YACH,OAAO,MAAM,gBAAgB,CAAC,4BAA4B,CAAC,IAAI,CAAC,CAAC;QACnE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,eAAe,CAAC,kBAAkB,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;QAC9D,CAAC;IACH,CAAC;IAGmB,AAAb,MAAM,CAAC,KAAK,CAAC,4BAA4B,CAE9C,IAID;QACC,IAAI,CAAC;YACH,OAAO,MAAM,gBAAgB,CAAC,4BAA4B,CAAC,IAAI,CAAC,CAAC;QACnE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,eAAe,CAAC,kBAAkB,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;QAC9D,CAAC;IACH,CAAC;IAGmB,AAAb,MAAM,CAAC,KAAK,CAAC,0BAA0B,CAC5C,SAAiC,EACjC,KAAwB,EACxB,KAAqC;QAErC,IAAI,CAAC;YACH,OAAO,MAAM,gBAAgB,CAAC,qBAAqB,CACjD,SAAS,EACT,KAAK,EACL,KAAK,CACN,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,eAAe,CAAC,kBAAkB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QACzD,CAAC;IACH,CAAC;IAGmB,AAAb,MAAM,CAAC,KAAK,CAAC,2BAA2B,CAC7C,SAAiC,EACjC,KAAwB,EACxB,IAAwC,EACxC,KAAqC;QAErC,IAAI,CAAC;YACH,OAAO,MAAM,gBAAgB,CAAC,sBAAsB,CAClD,SAAS,EACT,KAAK,EACL,IAAI,EACJ,KAAK,CACN,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,eAAe,CAAC,kBAAkB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QACzD,CAAC;IACH,CAAC;IAGa,AAAP,MAAM,CAAC,sBAAsB,CAClC,SAAiC,EACjC,IAAgB,EAChB,KAAqC;QAErC,IAAI,CAAC;YACH,OAAO,gBAAgB,CAAC,sBAAsB,CAAC,SAAS,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;QACzE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,eAAe,CAAC,kBAAkB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QACzD,CAAC;IACH,CAAC;IAGmB,AAAb,MAAM,CAAC,KAAK,CAAC,wBAAwB,CAC1C,SAAiC,EACjC,KAAwB,EACxB,MAAiC,EACjC,KAAqC;QAErC,IAAI,CAAC;YACH,OAAO,MAAM,cAAc,CAAC,mBAAmB,CAC7C,SAAS,EACT,KAAK,EACL,MAAM,EACN,KAAK,CACN,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,eAAe,CAAC,kBAAkB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QACzD,CAAC;IACH,CAAC;CACF;AAhGqB;IADnB,WAAW,EAAE;;;;yDAab;AAGmB;IADnB,WAAW,EAAE;;;;yDAab;AAGmB;IADnB,WAAW,EAAE;;;;uDAeb;AAGmB;IADnB,WAAW,EAAE;;;;wDAiBb;AAGa;IADb,WAAW,EAAE;;iEAGN,UAAU,oBAAV,UAAU;;mDAQjB;AAGmB;IADnB,WAAW,EAAE;;;;qDAiBb"}

package/build/dist/Server/Types/Database/Permissions/TablePermission.js

@@ -39,10 +39,17 @@ export default class TablePermission {
         // 2nd CHECK: Is user project in active state?
         BillingPermissions.checkBillingPermissions(modelType, props, type);
         /*
-         * 3rd CHECK: Is this an enterprise-only feature being accessed on the
-         * community self-hosted build?
+         * 3rd CHECK: Is this a create of enterprise configuration that the
+         * edition or the license does not allow? (Reads and deletes always pass.)
+         * Updates are checked by UpdatePermission.checkUpdatePermissions instead,
+         * which every update runs and which sees what the update writes: an
+         * update that only tightens security (disabling an identity provider,
+         * rotating a SCIM token) needs no license, and this check, which is not
+         * handed the data, could only refuse it.
          */
-        EditionPermissions.checkEditionPermissions(modelType, props);
+        if (type !== DatabaseRequestType.Update) {
+            EditionPermissions.checkEditionPermissions(modelType, props, type);
+        }
         // 4th CHECK: Does user have access to CRUD data on this model.
         const userPermissions = DatabaseCommonInteractionPropsUtil.getUserPermissions(props, PermissionType.Allow);
         const modelPermissions = TablePermission.getTablePermission(modelType, type);
@@ -97,19 +104,20 @@ export default class TablePermission {
         // 2nd CHECK: Does user have access to CRUD data on this model.
         const userPermissions = DatabaseCommonInteractionPropsUtil.getUserPermissions(props, PermissionType.Block);
         const modelPermissions = TablePermission.getTablePermission(modelType, type);
-        const intersectingPermissions = PermissionHelper.getIntersectingPermissions(userPermissions.map((userPermission) => {
-            return userPermission.permission;
-        }) || [], modelPermissions);
-        if (intersectingPermissions && intersectingPermissions.length > 0) {
-            for (const permission of intersectingPermissions) {
-                const userPermission = userPermissions.find((userPermission) => {
-                    return userPermission.permission === permission;
-                });
-                if (userPermission &&
-                    (!userPermission.labelIds || userPermission.labelIds.length === 0)) {
-                    throw new NotAuthorizedException(`You are not authorized to ${type} ${new modelType().singularName} because ${userPermission.permission} is in your team's permission block list.`);
-                }
-            }
+        /*
+         * The user gets one block row per TeamPermission across all of their
+         * teams, unmerged and unordered, so the same permission can be blocked
+         * both for some labels and for the whole table. A row without labels
+         * blocks the whole table and must win whichever row comes first:
+         * ReadPermission and AccessControlPermission only enforce the labelled
+         * rows, so an unlabelled row missed here is enforced nowhere.
+         */
+        const tableWideBlock = userPermissions.find((userPermission) => {
+            return (modelPermissions.includes(userPermission.permission) &&
+                (!userPermission.labelIds || userPermission.labelIds.length === 0));
+        });
+        if (tableWideBlock) {
+            throw new NotAuthorizedException(`You are not authorized to ${type} ${new modelType().singularName} because ${tableWideBlock.permission} is in your team's permission block list.`);
         }
     }
 }

package/build/dist/Server/Types/Database/Permissions/TablePermission.js.map

@@ -1 +1 @@
-{"version":3,"file":"TablePermission.js","sourceRoot":"","sources":["../../../../../../Server/Types/Database/Permissions/TablePermission.ts"],"names":[],"mappings":";;;;;;;;;AAAA,OAAO,mBAAmB,MAAM,wCAAwC,CAAC;AACzE,OAAO,kBAAkB,MAAM,qBAAqB,CAAC;AACrD,OAAO,kBAAkB,MAAM,qBAAqB,CAAC;AACrD,OAAO,gBAAgB,MAAM,oBAAoB,CAAC;AAKlD,OAAO,kCAAkC,EAAE,EACzC,cAAc,GACf,MAAM,mEAAmE,CAAC;AAC3E,OAAO,sBAAsB,MAAM,oDAAoD,CAAC;AACxF,OAAO,WAAW,MAAM,sCAAsC,CAAC;AAC/D,OAAO,UAAU,EAAE,EACjB,gBAAgB,GAEjB,MAAM,8BAA8B,CAAC;AAEtC,MAAM,CAAC,OAAO,OAAO,eAAe;IAEpB,AAAP,MAAM,CAAC,kBAAkB,CAC9B,SAAgC,EAChC,IAAyB;QAEzB,IAAI,gBAAgB,GAAsB,EAAE,CAAC;QAC7C,MAAM,KAAK,GAAc,IAAI,SAAS,EAAE,CAAC;QAEzC,IAAI,IAAI,KAAK,mBAAmB,CAAC,MAAM,EAAE,CAAC;YACxC,gBAAgB,GAAG,KAAK,CAAC,uBAAuB,CAAC;QACnD,CAAC;QAED,IAAI,IAAI,KAAK,mBAAmB,CAAC,MAAM,EAAE,CAAC;YACxC,gBAAgB,GAAG,KAAK,CAAC,uBAAuB,CAAC;QACnD,CAAC;QAED,IAAI,IAAI,KAAK,mBAAmB,CAAC,MAAM,EAAE,CAAC;YACxC,gBAAgB,GAAG,KAAK,CAAC,uBAAuB,CAAC;QACnD,CAAC;QAED,IAAI,IAAI,KAAK,mBAAmB,CAAC,IAAI,EAAE,CAAC;YACtC,gBAAgB,GAAG,KAAK,CAAC,qBAAqB,CAAC;QACjD,CAAC;QAED,OAAO,gBAAgB,CAAC;IAC1B,CAAC;IAGa,AAAP,MAAM,CAAC,0BAA0B,CACtC,SAAgC,EAChC,KAAqC,EACrC,IAAyB;QAEzB,uFAAuF;QACvF,gBAAgB,CAAC,qBAAqB,CAAC,SAAS,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;QAE/D,8CAA8C;QAC9C,kBAAkB,CAAC,uBAAuB,CAAC,SAAS,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;QAEnE;;;WAGG;QACH,kBAAkB,CAAC,uBAAuB,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;QAE7D,+DAA+D;QAC/D,MAAM,eAAe,GACnB,kCAAkC,CAAC,kBAAkB,CACnD,KAAK,EACL,cAAc,CAAC,KAAK,CACrB,CAAC;QAEJ,MAAM,gBAAgB,GACpB,eAAe,CAAC,kBAAkB,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QAEtD,MAAM,yBAAyB,GAC7B,eAAe,CAAC,4BAA4B,CAC1C,SAAS,EACT,gBAAgB,EAChB,IAAI,CACL,CAAC;QAEJ,IACE,CAAC,gBAAgB,CAAC,wBAAwB,CACxC,eAAe,CAAC,GAAG,CAAC,CAAC,cAA8B,EAAE,EAAE;YACrD,OAAO,cAAc,CAAC,UAAU,CAAC;QACnC,CAAC,CAAC,IAAI,EAAE,EACR,yBAAyB,CAC1B,EACD,CAAC;YACD,MAAM,WAAW,GACf,gBAAgB,CAAC,mBAAmB,CAAC,gBAAgB,CAAC,CAAC;YAEzD,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC7B,MAAM,IAAI,sBAAsB,CAC9B,GAAG,IAAI,OAAO,IAAI,SAAS,EAAE,CAAC,YAAY,kBAAkB,CAC7D,CAAC;YACJ,CAAC;YAED,MAAM,IAAI,sBAAsB,CAC9B,kCAAkC,IAAI,IACpC,IAAI,SAAS,EAAE,CAAC,YAClB,wCAAwC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACjE,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;;;;;;;OAQG;IACK,MAAM,CAAC,4BAA4B,CACzC,SAAgC,EAChC,gBAAmC,EACnC,IAAyB;QAEzB,MAAM,SAAS,GAAsB,CAAC,GAAG,gBAAgB,CAAC,CAAC;QAE3D,MAAM,KAAK,GAAc,IAAI,SAAS,EAAE,CAAC;QACzC,IAAI,KAAK,CAAC,qBAAqB,EAAE,CAAC;YAChC,MAAM,QAAQ,GACZ,eAAe,CAAC,iCAAiC,CAAC,IAAI,CAAC,CAAC;YAC1D,IAAI,QAAQ,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC9C,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YAC3B,CAAC;QACH,CAAC;QAED,OAAO,SAAS,CAAC;IACnB,CAAC;IAEO,MAAM,CAAC,iCAAiC,CAC9C,IAAyB;QAEzB,QAAQ,IAAI,EAAE,CAAC;YACb,KAAK,mBAAmB,CAAC,IAAI;gBAC3B,OAAO,UAAU,CAAC,2BAA2B,CAAC;YAChD,KAAK,mBAAmB,CAAC,MAAM;gBAC7B,OAAO,UAAU,CAAC,2BAA2B,CAAC;YAChD,KAAK,mBAAmB,CAAC,MAAM;gBAC7B,OAAO,UAAU,CAAC,6BAA6B,CAAC;YAClD,KAAK,mBAAmB,CAAC,MAAM;gBAC7B,OAAO,UAAU,CAAC,6BAA6B,CAAC;YAClD;gBACE,OAAO,IAAI,CAAC;QAChB,CAAC;IACH,CAAC;IAGa,AAAP,MAAM,CAAC,+BAA+B,CAC3C,SAAgC,EAChC,KAAqC,EACrC,IAAyB;QAEzB,uFAAuF;QACvF,gBAAgB,CAAC,qBAAqB,CAAC,SAAS,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;QAE/D,+DAA+D;QAC/D,MAAM,eAAe,GACnB,kCAAkC,CAAC,kBAAkB,CACnD,KAAK,EACL,cAAc,CAAC,KAAK,CACrB,CAAC;QAEJ,MAAM,gBAAgB,GACpB,eAAe,CAAC,kBAAkB,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QAEtD,MAAM,uBAAuB,GAC3B,gBAAgB,CAAC,0BAA0B,CACzC,eAAe,CAAC,GAAG,CAAC,CAAC,cAA8B,EAAE,EAAE;YACrD,OAAO,cAAc,CAAC,UAAU,CAAC;QACnC,CAAC,CAAC,IAAI,EAAE,EACR,gBAAgB,CACjB,CAAC;QAEJ,IAAI,uBAAuB,IAAI,uBAAuB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAClE,KAAK,MAAM,UAAU,IAAI,uBAAuB,EAAE,CAAC;gBACjD,MAAM,cAAc,GAAmB,eAAe,CAAC,IAAI,CACzD,CAAC,cAA8B,EAAE,EAAE;oBACjC,OAAO,cAAc,CAAC,UAAU,KAAK,UAAU,CAAC;gBAClD,CAAC,CACgB,CAAC;gBAEpB,IACE,cAAc;oBACd,CAAC,CAAC,cAAc,CAAC,QAAQ,IAAI,cAAc,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC,EAClE,CAAC;oBACD,MAAM,IAAI,sBAAsB,CAC9B,6BAA6B,IAAI,IAC/B,IAAI,SAAS,EAAE,CAAC,YAClB,YACE,cAAc,CAAC,UACjB,2CAA2C,CAC5C,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;CACF;AArLe;IADb,WAAW,EAAE;;;oCAIX,KAAK;+CAqBP;AAGa;IADb,WAAW,EAAE;;;;uDA0Db;AAgDa;IADb,WAAW,EAAE;;;;4DAiDb"}
+{"version":3,"file":"TablePermission.js","sourceRoot":"","sources":["../../../../../../Server/Types/Database/Permissions/TablePermission.ts"],"names":[],"mappings":";;;;;;;;;AAAA,OAAO,mBAAmB,MAAM,wCAAwC,CAAC;AACzE,OAAO,kBAAkB,MAAM,qBAAqB,CAAC;AACrD,OAAO,kBAAkB,MAAM,qBAAqB,CAAC;AACrD,OAAO,gBAAgB,MAAM,oBAAoB,CAAC;AAKlD,OAAO,kCAAkC,EAAE,EACzC,cAAc,GACf,MAAM,mEAAmE,CAAC;AAC3E,OAAO,sBAAsB,MAAM,oDAAoD,CAAC;AACxF,OAAO,WAAW,MAAM,sCAAsC,CAAC;AAC/D,OAAO,UAAU,EAAE,EACjB,gBAAgB,GAEjB,MAAM,8BAA8B,CAAC;AAEtC,MAAM,CAAC,OAAO,OAAO,eAAe;IAEpB,AAAP,MAAM,CAAC,kBAAkB,CAC9B,SAAgC,EAChC,IAAyB;QAEzB,IAAI,gBAAgB,GAAsB,EAAE,CAAC;QAC7C,MAAM,KAAK,GAAc,IAAI,SAAS,EAAE,CAAC;QAEzC,IAAI,IAAI,KAAK,mBAAmB,CAAC,MAAM,EAAE,CAAC;YACxC,gBAAgB,GAAG,KAAK,CAAC,uBAAuB,CAAC;QACnD,CAAC;QAED,IAAI,IAAI,KAAK,mBAAmB,CAAC,MAAM,EAAE,CAAC;YACxC,gBAAgB,GAAG,KAAK,CAAC,uBAAuB,CAAC;QACnD,CAAC;QAED,IAAI,IAAI,KAAK,mBAAmB,CAAC,MAAM,EAAE,CAAC;YACxC,gBAAgB,GAAG,KAAK,CAAC,uBAAuB,CAAC;QACnD,CAAC;QAED,IAAI,IAAI,KAAK,mBAAmB,CAAC,IAAI,EAAE,CAAC;YACtC,gBAAgB,GAAG,KAAK,CAAC,qBAAqB,CAAC;QACjD,CAAC;QAED,OAAO,gBAAgB,CAAC;IAC1B,CAAC;IAGa,AAAP,MAAM,CAAC,0BAA0B,CACtC,SAAgC,EAChC,KAAqC,EACrC,IAAyB;QAEzB,uFAAuF;QACvF,gBAAgB,CAAC,qBAAqB,CAAC,SAAS,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;QAE/D,8CAA8C;QAC9C,kBAAkB,CAAC,uBAAuB,CAAC,SAAS,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;QAEnE;;;;;;;;WAQG;QACH,IAAI,IAAI,KAAK,mBAAmB,CAAC,MAAM,EAAE,CAAC;YACxC,kBAAkB,CAAC,uBAAuB,CAAC,SAAS,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;QACrE,CAAC;QAED,+DAA+D;QAC/D,MAAM,eAAe,GACnB,kCAAkC,CAAC,kBAAkB,CACnD,KAAK,EACL,cAAc,CAAC,KAAK,CACrB,CAAC;QAEJ,MAAM,gBAAgB,GACpB,eAAe,CAAC,kBAAkB,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QAEtD,MAAM,yBAAyB,GAC7B,eAAe,CAAC,4BAA4B,CAC1C,SAAS,EACT,gBAAgB,EAChB,IAAI,CACL,CAAC;QAEJ,IACE,CAAC,gBAAgB,CAAC,wBAAwB,CACxC,eAAe,CAAC,GAAG,CAAC,CAAC,cAA8B,EAAE,EAAE;YACrD,OAAO,cAAc,CAAC,UAAU,CAAC;QACnC,CAAC,CAAC,IAAI,EAAE,EACR,yBAAyB,CAC1B,EACD,CAAC;YACD,MAAM,WAAW,GACf,gBAAgB,CAAC,mBAAmB,CAAC,gBAAgB,CAAC,CAAC;YAEzD,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC7B,MAAM,IAAI,sBAAsB,CAC9B,GAAG,IAAI,OAAO,IAAI,SAAS,EAAE,CAAC,YAAY,kBAAkB,CAC7D,CAAC;YACJ,CAAC;YAED,MAAM,IAAI,sBAAsB,CAC9B,kCAAkC,IAAI,IACpC,IAAI,SAAS,EAAE,CAAC,YAClB,wCAAwC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACjE,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;;;;;;;OAQG;IACK,MAAM,CAAC,4BAA4B,CACzC,SAAgC,EAChC,gBAAmC,EACnC,IAAyB;QAEzB,MAAM,SAAS,GAAsB,CAAC,GAAG,gBAAgB,CAAC,CAAC;QAE3D,MAAM,KAAK,GAAc,IAAI,SAAS,EAAE,CAAC;QACzC,IAAI,KAAK,CAAC,qBAAqB,EAAE,CAAC;YAChC,MAAM,QAAQ,GACZ,eAAe,CAAC,iCAAiC,CAAC,IAAI,CAAC,CAAC;YAC1D,IAAI,QAAQ,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC9C,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YAC3B,CAAC;QACH,CAAC;QAED,OAAO,SAAS,CAAC;IACnB,CAAC;IAEO,MAAM,CAAC,iCAAiC,CAC9C,IAAyB;QAEzB,QAAQ,IAAI,EAAE,CAAC;YACb,KAAK,mBAAmB,CAAC,IAAI;gBAC3B,OAAO,UAAU,CAAC,2BAA2B,CAAC;YAChD,KAAK,mBAAmB,CAAC,MAAM;gBAC7B,OAAO,UAAU,CAAC,2BAA2B,CAAC;YAChD,KAAK,mBAAmB,CAAC,MAAM;gBAC7B,OAAO,UAAU,CAAC,6BAA6B,CAAC;YAClD,KAAK,mBAAmB,CAAC,MAAM;gBAC7B,OAAO,UAAU,CAAC,6BAA6B,CAAC;YAClD;gBACE,OAAO,IAAI,CAAC;QAChB,CAAC;IACH,CAAC;IAGa,AAAP,MAAM,CAAC,+BAA+B,CAC3C,SAAgC,EAChC,KAAqC,EACrC,IAAyB;QAEzB,uFAAuF;QACvF,gBAAgB,CAAC,qBAAqB,CAAC,SAAS,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;QAE/D,+DAA+D;QAC/D,MAAM,eAAe,GACnB,kCAAkC,CAAC,kBAAkB,CACnD,KAAK,EACL,cAAc,CAAC,KAAK,CACrB,CAAC;QAEJ,MAAM,gBAAgB,GACpB,eAAe,CAAC,kBAAkB,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QAEtD;;;;;;;WAOG;QACH,MAAM,cAAc,GAA+B,eAAe,CAAC,IAAI,CACrE,CAAC,cAA8B,EAAE,EAAE;YACjC,OAAO,CACL,gBAAgB,CAAC,QAAQ,CAAC,cAAc,CAAC,UAAU,CAAC;gBACpD,CAAC,CAAC,cAAc,CAAC,QAAQ,IAAI,cAAc,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC,CACnE,CAAC;QACJ,CAAC,CACF,CAAC;QAEF,IAAI,cAAc,EAAE,CAAC;YACnB,MAAM,IAAI,sBAAsB,CAC9B,6BAA6B,IAAI,IAC/B,IAAI,SAAS,EAAE,CAAC,YAClB,YACE,cAAc,CAAC,UACjB,2CAA2C,CAC5C,CAAC;QACJ,CAAC;IACH,CAAC;CACF;AAxLe;IADb,WAAW,EAAE;;;oCAIX,KAAK;+CAqBP;AAGa;IADb,WAAW,EAAE;;;;uDAiEb;AAgDa;IADb,WAAW,EAAE;;;;4DA6Cb"}

package/build/dist/Server/Types/Database/Permissions/UpdatePermission.js

@@ -11,6 +11,7 @@ import DatabaseRequestType from "../../BaseDatabase/DatabaseRequestType";
 import AccessControlUtil from "./AccessControlPermission";
 import BasePermission from "./BasePermission";
 import ColumnPermissions from "./ColumnPermission";
+import EditionPermissions from "./EditionPermission";
 import TablePermission from "./TablePermission";
 import CaptureSpan from "../../../Utils/Telemetry/CaptureSpan";
 export default class UpdatePermission {
@@ -19,11 +20,27 @@ export default class UpdatePermission {
         await AccessControlUtil.checkAccessControlPermissionByModel(Object.assign(Object.assign({}, data), { type: DatabaseRequestType.Update }));
     }
     static async checkUpdatePermissions(modelType, query, data, props) {
+        /*
+         * The edition check for updates runs here, the one permission entry
+         * point that sees what the update writes: an update that only tightens
+         * security (disabling an identity provider, rotating a SCIM token) needs
+         * no license, anything else does (see EditionPermission). TablePermission
+         * leaves updates to this method for that reason.
+         *
+         * Master admins skip every table-level check below, but not the edition
+         * check: changing enterprise configuration (global SSO/OIDC providers are
+         * only ever edited by master admins) needs the license for them too.
+         * Everyone else gets it right after the table-level check.
+         */
+        if (props.isMasterAdmin && !props.isRoot) {
+            EditionPermissions.checkEditionPermissions(modelType, props, DatabaseRequestType.Update, data);
+        }
         if (props.isRoot || props.isMasterAdmin) {
             // If system is making this query then let the query run!
             return query;
         }
         TablePermission.checkTableLevelPermissions(modelType, props, DatabaseRequestType.Update);
+        EditionPermissions.checkEditionPermissions(modelType, props, DatabaseRequestType.Update, data);
         const checkBasePermission = await BasePermission.checkPermissions(modelType, query, null, props, DatabaseRequestType.Update);
         query = checkBasePermission.query;
         ColumnPermissions.checkDataColumnPermissions(modelType, data, props, DatabaseRequestType.Update);

package/build/dist/Server/Types/Database/Permissions/UpdatePermission.js.map

@@ -1 +1 @@
-{"version":3,"file":"UpdatePermission.js","sourceRoot":"","sources":["../../../../../../Server/Types/Database/Permissions/UpdatePermission.ts"],"names":[],"mappings":";;;;;;;;;AAAA,OAAO,mBAAmB,MAAM,wCAAwC,CAAC;AAEzE,OAAO,iBAAiB,MAAM,2BAA2B,CAAC;AAC1D,OAAO,cAAgD,MAAM,kBAAkB,CAAC;AAChF,OAAO,iBAAiB,MAAM,oBAAoB,CAAC;AACnD,OAAO,eAAe,MAAM,mBAAmB,CAAC;AAIhD,OAAO,WAAW,MAAM,sCAAsC,CAAC;AAE/D,MAAM,CAAC,OAAO,OAAO,gBAAgB;IAEf,AAAb,MAAM,CAAC,KAAK,CAAC,4BAA4B,CAE9C,IAID;QACC,MAAM,iBAAiB,CAAC,wCAAwC,iCACzD,IAAI,KAAE,IAAI,EAAE,mBAAmB,CAAC,MAAM,IAC5C,CAAC;QAEF,MAAM,iBAAiB,CAAC,mCAAmC,iCACtD,IAAI,KACP,IAAI,EAAE,mBAAmB,CAAC,MAAM,IAChC,CAAC;IACL,CAAC;IAGmB,AAAb,MAAM,CAAC,KAAK,CAAC,sBAAsB,CACxC,SAAiC,EACjC,KAAwB,EACxB,IAAwC,EACxC,KAAqC;QAErC,IAAI,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,aAAa,EAAE,CAAC;YACxC,yDAAyD;YACzD,OAAO,KAAK,CAAC;QACf,CAAC;QAED,eAAe,CAAC,0BAA0B,CACxC,SAAS,EACT,KAAK,EACL,mBAAmB,CAAC,MAAM,CAC3B,CAAC;QAEF,MAAM,mBAAmB,GACvB,MAAM,cAAc,CAAC,gBAAgB,CACnC,SAAS,EACT,KAAK,EACL,IAAI,EACJ,KAAK,EACL,mBAAmB,CAAC,MAAM,CAC3B,CAAC;QAEJ,KAAK,GAAG,mBAAmB,CAAC,KAAK,CAAC;QAElC,iBAAiB,CAAC,0BAA0B,CAC1C,SAAS,EACT,IAAW,EACX,KAAK,EACL,mBAAmB,CAAC,MAAM,CAC3B,CAAC;QAEF,OAAO,KAAK,CAAC;IACf,CAAC;CACF;AAvDqB;IADnB,WAAW,EAAE;;;;0DAgBb;AAGmB;IADnB,WAAW,EAAE;;;;oDAqCb"}
+{"version":3,"file":"UpdatePermission.js","sourceRoot":"","sources":["../../../../../../Server/Types/Database/Permissions/UpdatePermission.ts"],"names":[],"mappings":";;;;;;;;;AAAA,OAAO,mBAAmB,MAAM,wCAAwC,CAAC;AAEzE,OAAO,iBAAiB,MAAM,2BAA2B,CAAC;AAC1D,OAAO,cAAgD,MAAM,kBAAkB,CAAC;AAChF,OAAO,iBAAiB,MAAM,oBAAoB,CAAC;AACnD,OAAO,kBAAkB,MAAM,qBAAqB,CAAC;AACrD,OAAO,eAAe,MAAM,mBAAmB,CAAC;AAIhD,OAAO,WAAW,MAAM,sCAAsC,CAAC;AAE/D,MAAM,CAAC,OAAO,OAAO,gBAAgB;IAEf,AAAb,MAAM,CAAC,KAAK,CAAC,4BAA4B,CAE9C,IAID;QACC,MAAM,iBAAiB,CAAC,wCAAwC,iCACzD,IAAI,KAAE,IAAI,EAAE,mBAAmB,CAAC,MAAM,IAC5C,CAAC;QAEF,MAAM,iBAAiB,CAAC,mCAAmC,iCACtD,IAAI,KACP,IAAI,EAAE,mBAAmB,CAAC,MAAM,IAChC,CAAC;IACL,CAAC;IAGmB,AAAb,MAAM,CAAC,KAAK,CAAC,sBAAsB,CACxC,SAAiC,EACjC,KAAwB,EACxB,IAAwC,EACxC,KAAqC;QAErC;;;;;;;;;;;WAWG;QACH,IAAI,KAAK,CAAC,aAAa,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;YACzC,kBAAkB,CAAC,uBAAuB,CACxC,SAAS,EACT,KAAK,EACL,mBAAmB,CAAC,MAAM,EAC1B,IAAI,CACL,CAAC;QACJ,CAAC;QAED,IAAI,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,aAAa,EAAE,CAAC;YACxC,yDAAyD;YACzD,OAAO,KAAK,CAAC;QACf,CAAC;QAED,eAAe,CAAC,0BAA0B,CACxC,SAAS,EACT,KAAK,EACL,mBAAmB,CAAC,MAAM,CAC3B,CAAC;QAEF,kBAAkB,CAAC,uBAAuB,CACxC,SAAS,EACT,KAAK,EACL,mBAAmB,CAAC,MAAM,EAC1B,IAAI,CACL,CAAC;QAEF,MAAM,mBAAmB,GACvB,MAAM,cAAc,CAAC,gBAAgB,CACnC,SAAS,EACT,KAAK,EACL,IAAI,EACJ,KAAK,EACL,mBAAmB,CAAC,MAAM,CAC3B,CAAC;QAEJ,KAAK,GAAG,mBAAmB,CAAC,KAAK,CAAC;QAElC,iBAAiB,CAAC,0BAA0B,CAC1C,SAAS,EACT,IAAW,EACX,KAAK,EACL,mBAAmB,CAAC,MAAM,CAC3B,CAAC;QAEF,OAAO,KAAK,CAAC;IACf,CAAC;CACF;AAnFqB;IADnB,WAAW,EAAE;;;;0DAgBb;AAGmB;IADnB,WAAW,EAAE;;;;oDAiEb"}

package/build/dist/Server/Types/Markdown.js

@@ -163,6 +163,37 @@ class Markdown {
                 `word-break:break-word;${align || "text-align:left;"}">` +
                 `${content}</${tag}>`);
         };
+        /*
+         * Lists. A platform monitor's root cause lists its affected resources
+         * as a numbered list with a bullet list of details nested under each
+         * item, and the cluster and metric details above it are bullets too.
+         *
+         * Left to the client, Gmail and Apple Mail indent every list level by
+         * 40px — close to a tenth of the card, twice over for a nested list —
+         * and Outlook's Word engine ignores padding on <ul>/<ol> and picks its
+         * own margins. So the indent is a margin-left, which Outlook honours,
+         * with padding zeroed: 24px holds a bullet, and 32px holds a numbered
+         * marker up to three digits ("100."). The vertical margins give each
+         * item's nested details a little air above and a gap below that
+         * separates it from the next item.
+         *
+         * margin-left is a physical side, so it is followed by the logical
+         * margin-inline-start / -end: a client that understands them moves
+         * the indent to the marker side in right-to-left text, and one that
+         * does not keeps the margin-left.
+         */
+        renderer.list = function (body, ordered, start) {
+            const tag = ordered ? "ol" : "ul";
+            const startAttribute = ordered && start !== "" && start !== 1 ? ` start="${start}"` : "";
+            const indent = ordered ? "32px" : "24px";
+            return (`<${tag}${startAttribute} style="margin:6px 0 12px 0;` +
+                `margin-left:${indent};margin-inline-start:${indent};` +
+                `margin-inline-end:0;padding:0;">` +
+                `${body}</${tag}>`);
+        };
+        renderer.listitem = function (text) {
+            return `<li style="margin:0 0 4px;padding:0;">${text}</li>`;
+        };
         /*
          * The root cause backticks metric names, aliases and timestamps. Left
          * bare they were indistinguishable from the prose around them.

package/build/dist/Server/Types/Markdown.js.map

@@ -1 +1 @@
-{"version":3,"file":"Markdown.js","sourceRoot":"","sources":["../../../../Server/Types/Markdown.ts"],"names":[],"mappings":";;;;;;;;;AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAC1C,OAAO,WAAW,MAAM,gCAAgC,CAAC;AACzD,OAAO,eAAe,MAAM,mBAAmB,CAAC;AAIhD,MAAM,CAAN,IAAY,mBAMX;AAND,WAAY,mBAAmB;IAC7B,6DAAI,CAAA;IACJ,6DAAI,CAAA;IACJ,+DAAK,CAAA;IACL,+EAA+E;IAC/E,iFAAc,CAAA;AAChB,CAAC,EANW,mBAAmB,KAAnB,mBAAmB,QAM9B;AAED,MAAqB,QAAQ;IAEb,AAAP,MAAM,CAAC,kBAAkB,CAAC,QAAgB;QAC/C,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,IAAI,IAAI,GAAW,QAAQ,CAAC;QAE5B,mBAAmB;QACnB,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;QAEpC,kDAAkD;QAClD,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,wBAAwB,EAAE,IAAI,CAAC,CAAC;QAEpD,uDAAuD;QACvD,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,yBAAyB,EAAE,IAAI,CAAC,CAAC;QAErD,sCAAsC;QACtC,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,kBAAkB,EAAE,IAAI,CAAC,CAAC,CAAC,WAAW;QAC1D,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE,IAAI,CAAC,CAAC,CAAC,WAAW;QACtD,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE,IAAI,CAAC,CAAC,CAAC,WAAW;QACtD,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC,CAAC,WAAW;QAEpD,gCAAgC;QAChC,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE,IAAI,CAAC,CAAC;QAE1C,8BAA8B;QAC9B,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,iBAAiB,EAAE,EAAE,CAAC,CAAC;QAC3C,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC;QAExC,0BAA0B;QAC1B,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC;QAExC,8BAA8B;QAC9B,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;QAEnC,mCAAmC;QACnC,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC;QAEzC,+BAA+B;QAC/B,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,kBAAkB,EAAE,EAAE,CAAC,CAAC;QAC5C,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,kBAAkB,EAAE,EAAE,CAAC,CAAC;QAE5C,uBAAuB;QACvB,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QAClC,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QAClC,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;QACnC,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;QACpC,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;QACnC,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;QAEpC,2DAA2D;QAC3D,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;QACtC,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;QAEpC,kBAAkB;QAClB,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAEnB,OAAO,IAAI,CAAC;IACd,CAAC;IAOmB,AAAb,MAAM,CAAC,KAAK,CAAC,aAAa,CAC/B,QAAgB,EAChB,WAAgC;QAEhC,IAAI,QAAQ,GAAoB,IAAI,CAAC;QAErC,IAAI,WAAW,KAAK,mBAAmB,CAAC,IAAI,EAAE,CAAC;YAC7C,QAAQ,GAAG,IAAI,CAAC,eAAe,EAAE,CAAC;QACpC,CAAC;QAED,IAAI,WAAW,KAAK,mBAAmB,CAAC,IAAI,EAAE,CAAC;YAC7C,QAAQ,GAAG,IAAI,CAAC,eAAe,EAAE,CAAC;QACpC,CAAC;QAED,IAAI,WAAW,KAAK,mBAAmB,CAAC,KAAK,EAAE,CAAC;YAC9C,QAAQ,GAAG,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACrC,CAAC;QAED,IAAI,WAAW,KAAK,mBAAmB,CAAC,cAAc,EAAE,CAAC;YACvD,QAAQ,GAAG,IAAI,CAAC,yBAAyB,EAAE,CAAC;QAC9C,CAAC;QAED;;;;WAIG;QACH,IAAI,QAAQ,EAAE,CAAC;YACb,QAAQ,CAAC,IAAI,GAAG,CAAC,IAAY,EAAU,EAAE;gBACvC,OAAO,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;YACnC,CAAC,CAAC;QACJ,CAAC;QAED,MAAM,QAAQ,GAAW,MAAM,MAAM,CAAC,QAAQ,EAAE;YAC9C,QAAQ,EAAE,QAAQ;SACnB,CAAC,CAAC;QAEH,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED;;;;;;;OAOG;IACI,MAAM,CAAC,UAAU,CAAC,IAAY;QACnC,OAAO,IAAI;aACR,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC;aACtB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;aACrB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;aACrB,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC;aACvB,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAC5B,CAAC;IAED;;;;;;;;;;;;;;;;;;;;;;;;OAwBG;IACK,MAAM,CAAC,gBAAgB;QAC7B,IAAI,IAAI,CAAC,aAAa,KAAK,IAAI,EAAE,CAAC;YAChC,OAAO,IAAI,CAAC,aAAa,CAAC;QAC5B,CAAC;QAED,MAAM,QAAQ,GAAa,IAAI,QAAQ,EAAE,CAAC;QAE1C,MAAM,QAAQ,GACZ,2IAA2I,CAAC;QAE9I,QAAQ,CAAC,KAAK,GAAG,UAAU,MAAc,EAAE,IAAY;YACrD,OAAO,CACL,iEAAiE;gBACjE,+DAA+D;gBAC/D,2CAA2C;gBAC3C,UAAU,MAAM,kBAAkB,IAAI,kBAAkB,CACzD,CAAC;QACJ,CAAC,CAAC;QAEF,QAAQ,CAAC,QAAQ,GAAG,UAAU,OAAe;YAC3C,OAAO,OAAO,OAAO,OAAO,CAAC;QAC/B,CAAC,CAAC;QAEF,QAAQ,CAAC,SAAS,GAAG,UACnB,OAAe,EACf,KAAkD;YAElD,MAAM,GAAG,GAAW,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;YAC/C,MAAM,KAAK,GAAW,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,cAAc,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;YAEtE;;;;eAIG;YACH,MAAM,IAAI,GAAW,KAAK,CAAC,MAAM;gBAC/B,CAAC,CAAC,yFAAyF;gBAC3F,CAAC,CAAC,gEAAgE,CAAC;YAErE,OAAO,CACL,IAAI,GAAG,4BAA4B,QAAQ,GAAG,IAAI,EAAE;gBACpD,yBAAyB,KAAK,IAAI,kBAAkB,IAAI;gBACxD,GAAG,OAAO,KAAK,GAAG,GAAG,CACtB,CAAC;QACJ,CAAC,CAAC;QAEF;;;;;;;;;;WAUG;QACH,QAAQ,CAAC,QAAQ,GAAG,UAAU,IAAY;YACxC,OAAO,CACL,sDAAsD;gBACtD,oCAAoC;gBACpC,8EAA8E;gBAC9E,oBAAoB,IAAI,SAAS,CAClC,CAAC;QACJ,CAAC,CAAC;QAEF,IAAI,CAAC,aAAa,GAAG,QAAQ,CAAC;QAE9B,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED;;;;;OAKG;IACK,MAAM,CAAC,yBAAyB;QACtC,IAAI,IAAI,CAAC,sBAAsB,KAAK,IAAI,EAAE,CAAC;YACzC,OAAO,IAAI,CAAC,sBAAsB,CAAC;QACrC,CAAC;QAED,MAAM,QAAQ,GAAa,IAAI,QAAQ,EAAE,CAAC;QAE1C,QAAQ,CAAC,OAAO,GAAG,UAAU,IAAI,EAAE,KAAK;YACtC,IAAI,KAAK,IAAI,CAAC,EAAE,CAAC;gBACf,OAAO,oKAAoK,IAAI,OAAO,CAAC;YACzL,CAAC;YACD,IAAI,KAAK,KAAK,CAAC,EAAE,CAAC;gBAChB,OAAO,+DAA+D,IAAI,OAAO,CAAC;YACpF,CAAC;YACD,OAAO,6DAA6D,IAAI,OAAO,CAAC;QAClF,CAAC,CAAC;QAEF,QAAQ,CAAC,SAAS,GAAG,UAAU,IAAI;YACjC,OAAO,2DAA2D,IAAI,MAAM,CAAC;QAC/E,CAAC,CAAC;QAEF,QAAQ,CAAC,IAAI,GAAG,UAAU,IAAI,EAAE,OAAO,EAAE,KAAK;YAC5C,MAAM,GAAG,GAAW,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;YAC1C,MAAM,GAAG,GAAW,OAAO;gBACzB,CAAC,CAAC,+EAA+E;gBACjF,CAAC,CAAC,4EAA4E,CAAC;YACjF,MAAM,SAAS,GACb,OAAO,IAAI,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,KAAK,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;YACpD,OAAO,IAAI,GAAG,GAAG,SAAS,WAAW,GAAG,KAAK,IAAI,KAAK,GAAG,GAAG,CAAC;QAC/D,CAAC,CAAC;QACF,QAAQ,CAAC,QAAQ,GAAG,UAAU,IAAI;YAChC,OAAO,oCAAoC,IAAI,OAAO,CAAC;QACzD,CAAC,CAAC;QAEF,QAAQ,CAAC,MAAM,GAAG,UAAU,IAAI;YAC9B,OAAO,+CAA+C,IAAI,WAAW,CAAC;QACxE,CAAC,CAAC;QACF,QAAQ,CAAC,EAAE,GAAG,UAAU,IAAI;YAC1B,OAAO,sBAAsB,IAAI,OAAO,CAAC;QAC3C,CAAC,CAAC;QAEF,QAAQ,CAAC,UAAU,GAAG,UAAU,KAAK;YACnC,OAAO,qFAAqF,KAAK,eAAe,CAAC;QACnH,CAAC,CAAC;QAEF,QAAQ,CAAC,EAAE,GAAG;YACZ,OAAO,8CAA8C,CAAC;QACxD,CAAC,CAAC;QAEF,QAAQ,CAAC,QAAQ,GAAG,UAAU,IAAI;YAChC,MAAM,OAAO,GAAW,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;YAClD,OAAO,wGAAwG,OAAO,SAAS,CAAC;QAClI,CAAC,CAAC;QAEF,QAAQ,CAAC,IAAI,GAAG,UAAU,IAAI,EAAE,QAAQ;YACtC,MAAM,OAAO,GAAW,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;YAClD,OAAO,oIAAoI,QAAQ,6BAA6B,OAAO,eAAe,CAAC;QACzM,CAAC,CAAC;QAEF,QAAQ,CAAC,KAAK,GAAG,UAAU,MAAM,EAAE,IAAI;YACrC,OAAO,mHAAmH,MAAM,GAAG,IAAI,gBAAgB,CAAC;QAC1J,CAAC,CAAC;QACF,QAAQ,CAAC,QAAQ,GAAG,UAAU,OAAO;YACnC,OAAO,wDAAwD,OAAO,OAAO,CAAC;QAChF,CAAC,CAAC;QACF,QAAQ,CAAC,SAAS,GAAG,UAAU,OAAO,EAAE,KAAK;YAC3C,MAAM,GAAG,GAAW,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;YAC/C,MAAM,KAAK,GAAW,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAChE,MAAM,WAAW,GAAW,KAAK,CAAC,MAAM;gBACtC,CAAC,CAAC,yCAAyC;gBAC3C,CAAC,CAAC,gBAAgB,CAAC;YACrB,OAAO,IAAI,GAAG,oBAAoB,KAAK,GAAG,WAAW,KAAK,OAAO,KAAK,GAAG,GAAG,CAAC;QAC/E,CAAC,CAAC;QAEF,QAAQ,CAAC,IAAI,GAAG,UAAU,IAAI,EAAE,MAAM,EAAE,IAAI;YAC1C,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,OAAO,IAAc,CAAC;YACxB,CAAC;YACD,MAAM,UAAU,GAAY,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;YACpD,MAAM,GAAG,GAAW,UAAU;gBAC5B,CAAC,CAAC,4CAA4C;gBAC9C,CAAC,CAAC,EAAE,CAAC;YACP,OAAO,YAAY,IAAI,IAAI,GAAG,sIAAsI,IAAI,MAAM,CAAC;QACjL,CAAC,CAAC;QAEF,IAAI,CAAC,sBAAsB,GAAG,QAAQ,CAAC;QAEvC,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED;;;;;OAKG;IACI,MAAM,CAAC,OAAO,CAAC,IAAY;QAChC,OAAO,eAAe,CAAC,IAAI,CAAC,CAAC;IAC/B,CAAC;IAgEO,MAAM,CAAC,eAAe;QAC5B,IAAI,IAAI,CAAC,YAAY,KAAK,IAAI,EAAE,CAAC;YAC/B,OAAO,IAAI,CAAC,YAAY,CAAC;QAC3B,CAAC;QAED,MAAM,QAAQ,GAAa,IAAI,QAAQ,EAAE,CAAC;QAE1C;;;;;;WAMG;QAEH,QAAQ,CAAC,SAAS,GAAG,UAAU,IAAI;YACjC,OAAO,MAAM,IAAI,MAAM,CAAC;QAC1B,CAAC,CAAC;QAEF,QAAQ,CAAC,UAAU,GAAG,UAAU,KAAK;YACnC,MAAM,YAAY,GAA4B,KAAK,CAAC,KAAK,CACvD,wEAAwE,CACzE,CAAC;YAEF,IAAI,YAAY,EAAE,CAAC;gBACjB,MAAM,IAAI,GAAW,YAAY,CAAC,CAAC,CAAE,CAAC,WAAW,EAAE,CAAC;gBACpD,MAAM,SAAS,GAAoD;oBACjE,IAAI,EAAE;wBACJ,IAAI,EAAE,uIAAuI;wBAC7I,KAAK,EAAE,MAAM;qBACd;oBACD,IAAI,EAAE;wBACJ,IAAI,EAAE,uIAAuI;wBAC7I,KAAK,EAAE,MAAM;qBACd;oBACD,GAAG,EAAE;wBACH,IAAI,EAAE,8RAA8R;wBACpS,KAAK,EAAE,KAAK;qBACb;oBACD,OAAO,EAAE;wBACP,IAAI,EAAE,uNAAuN;wBAC7N,KAAK,EAAE,SAAS;qBACjB;oBACD,OAAO,EAAE;wBACP,IAAI,EAAE,uNAAuN;wBAC7N,KAAK,EAAE,SAAS;qBACjB;oBACD,MAAM,EAAE;wBACN,IAAI,EAAE,+HAA+H;wBACrI,KAAK,EAAE,QAAQ;qBAChB;iBACF,CAAC;gBAEF,MAAM,MAAM,GACV,SAAS,CAAC,IAAI,CAAC,IAAI,SAAS,CAAC,MAAM,CAAE,CAAC;gBAExC,MAAM,OAAO,GAAW,KAAK,CAAC,OAAO,CACnC,2EAA2E,EAC3E,KAAK,CACN,CAAC;gBAEF,OAAO,0CAA0C,IAAI;;uHAE0D,MAAM,CAAC,IAAI;gDAClF,MAAM,CAAC,KAAK;;4CAEhB,OAAO;eACpC,CAAC;YACV,CAAC;YAED,OAAO,kCAAkC,KAAK,eAAe,CAAC;QAChE,CAAC,CAAC;QAEF,QAAQ,CAAC,KAAK,GAAG,UAAU,IAAI,EAAE,KAAK,EAAE,IAAI;YAC1C,MAAM,SAAS,GAAW,KAAK;gBAC7B,CAAC,CAAC,WAAW,QAAQ,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG;gBAC1C,CAAC,CAAC,EAAE,CAAC;YACP,OAAO,aAAa,IAAI,UAAU,IAAI,IAAI,EAAE,IAAI,SAAS,wDAAwD,CAAC;QACpH,CAAC,CAAC;QAEF,QAAQ,CAAC,IAAI,GAAG,UAAU,IAAI,EAAE,KAAK,EAAE,IAAI;YACzC,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,OAAO,IAAc,CAAC;YACxB,CAAC;YAED,MAAM,MAAM,GAAW,IAAI,CAAC,WAAW,EAAE,CAAC;YAC1C,MAAM,UAAU,GACd,CAAC,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,MAAM,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;gBAC/D,CAAC,MAAM,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC;YACpC,MAAM,SAAS,GAAW,KAAK;gBAC7B,CAAC,CAAC,WAAW,QAAQ,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG;gBAC1C,CAAC,CAAC,EAAE,CAAC;YACP,MAAM,aAAa,GAAW,UAAU;gBACtC,CAAC,CAAC,4CAA4C;gBAC9C,CAAC,CAAC,EAAE,CAAC;YACP,MAAM,MAAM,GAAW,UAAU;gBAC/B,CAAC,CAAC,0QAA0Q;gBAC5Q,CAAC,CAAC,EAAE,CAAC;YAEP,OAAO,8BAA8B,IAAI,IAAI,SAAS,GAAG,aAAa,IAAI,IAAI,GAAG,MAAM,MAAM,CAAC;QAChG,CAAC,CAAC;QAEF,QAAQ,CAAC,IAAI,GAAG,UAAU,IAAI,EAAE,QAAQ;YACtC,MAAM,IAAI,GAAW,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YAE3D,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;gBACvB;;;;mBAIG;gBACH,OAAO,kDAAkD,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,cAAc,CAAC;YACnG,CAAC;YAED,MAAM,OAAO,GAAW,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;YAClD,MAAM,KAAK,GAAuB,QAAQ,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC;YACnE;;;eAGG;YACH,MAAM,SAAS,GAAW,IAAI,CAAC,CAAC,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC;YACpE;;;;;eAKG;YACH,MAAM,GAAG,GAAW;0CACgB,KAAK,IAAI,EAAE;;;;;eAKtC,CAAC;YAEV,OAAO,yBAAyB,IAAI,CAAC,CAAC,CAAC,mBAAmB,IAAI,GAAG,CAAC,CAAC,CAAC,EAAE,IAAI,GAAG,qBAAqB,SAAS,KAAK,OAAO,qBAAqB,CAAC;QAC/I,CAAC,CAAC;QAEF,QAAQ,CAAC,OAAO,GAAG,UAAU,IAAI,EAAE,KAAK;YACtC,MAAM,IAAI,GAAW,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YAC5C,MAAM,MAAM,GACV,KAAK,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC;gBACtB,CAAC,CAAC,iCAAiC,IAAI,0CAA0C;gBACjF,CAAC,CAAC,EAAE,CAAC;YAET,MAAM,SAAS,GAAW,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YAE1D,OAAO,KAAK,SAAS,QAAQ,IAAI,+BAA+B,SAAS,sCAAsC,IAAI,UAAU,MAAM,MAAM,SAAS,GAAG,CAAC;QACxJ,CAAC,CAAC;QAEF,QAAQ,CAAC,EAAE,GAAG;YACZ,OAAO,wBAAwB,CAAC;QAClC,CAAC,CAAC;QAEF,QAAQ,CAAC,KAAK,GAAG,UAAU,MAAM,EAAE,IAAI;YACrC,OAAO,0EAA0E,MAAM,GAAG,IAAI,gBAAgB,CAAC;QACjH,CAAC,CAAC;QAEF,QAAQ,CAAC,QAAQ,GAAG,UAAU,OAAO;YACnC,OAAO,OAAO,OAAO,OAAO,CAAC;QAC/B,CAAC,CAAC;QAEF,QAAQ,CAAC,SAAS,GAAG,UAAU,OAAO,EAAE,KAAK;YAC3C,MAAM,GAAG,GAAW,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;YAC/C,MAAM,KAAK,GAAW,KAAK,CAAC,KAAK;gBAC/B,CAAC,CAAC,sBAAsB,KAAK,CAAC,KAAK,GAAG;gBACtC,CAAC,CAAC,EAAE,CAAC;YACP,OAAO,IAAI,GAAG,GAAG,KAAK,IAAI,OAAO,KAAK,GAAG,GAAG,CAAC;QAC/C,CAAC,CAAC;QAEF,cAAc;QACd,QAAQ,CAAC,QAAQ,GAAG,UAAU,IAAI;YAChC,MAAM,OAAO,GAAW,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;YAClD,OAAO,kCAAkC,OAAO,SAAS,CAAC;QAC5D,CAAC,CAAC;QAEF,IAAI,CAAC,YAAY,GAAG,QAAQ,CAAC;QAE7B,OAAO,QAAQ,CAAC;IAClB,CAAC;IAEO,MAAM,CAAC,eAAe;QAC5B,IAAI,IAAI,CAAC,YAAY,KAAK,IAAI,EAAE,CAAC;YAC/B,OAAO,IAAI,CAAC,YAAY,CAAC;QAC3B,CAAC;QAED,MAAM,QAAQ,GAAa,IAAI,QAAQ,EAAE,CAAC;QAE1C,QAAQ,CAAC,SAAS,GAAG,UAAU,IAAI;YACjC,OAAO,wDAAwD,IAAI,MAAM,CAAC;QAC5E,CAAC,CAAC;QAEF,QAAQ,CAAC,UAAU,GAAG,UAAU,KAAK;YACnC,OAAO;mDACsC,KAAK;sBAClC,CAAC;QACnB,CAAC,CAAC;QAEF,QAAQ,CAAC,IAAI,GAAG,UAAU,IAAI,EAAE,QAAQ;YACtC,MAAM,OAAO,GAAW,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;YAClD,OAAO,wBAAwB,QAAQ,sCAAsC,QAAQ,gBAAgB,OAAO,eAAe,CAAC;QAC9H,CAAC,CAAC;QAEF,QAAQ,CAAC,OAAO,GAAG,UAAU,IAAI,EAAE,KAAK;YACtC,IAAI,KAAK,KAAK,CAAC,EAAE,CAAC;gBAChB,OAAO,yEAAyE,IAAI,OAAO,CAAC;YAC9F,CAAC;iBAAM,IAAI,KAAK,KAAK,CAAC,EAAE,CAAC;gBACvB,OAAO,0EAA0E,IAAI,OAAO,CAAC;YAC/F,CAAC;iBAAM,IAAI,KAAK,KAAK,CAAC,EAAE,CAAC;gBACvB,OAAO,0EAA0E,IAAI,OAAO,CAAC;YAC/F,CAAC;iBAAM,IAAI,KAAK,KAAK,CAAC,EAAE,CAAC;gBACvB,OAAO,yEAAyE,IAAI,OAAO,CAAC;YAC9F,CAAC;iBAAM,IAAI,KAAK,KAAK,CAAC,EAAE,CAAC;gBACvB,OAAO,yEAAyE,IAAI,OAAO,CAAC;YAC9F,CAAC;YACD,OAAO,2DAA2D,IAAI,OAAO,CAAC;QAChF,CAAC,CAAC;QAEF,QAAQ;QACR,QAAQ,CAAC,IAAI,GAAG,UAAU,IAAI,EAAE,OAAO,EAAE,KAAK;YAC5C,MAAM,GAAG,GAAW,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;YAC1C,MAAM,GAAG,GAAW,OAAO;gBACzB,CAAC,CAAC,gDAAgD;gBAClD,CAAC,CAAC,6CAA6C,CAAC;YAClD,MAAM,SAAS,GACb,OAAO,IAAI,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,KAAK,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;YACpD,OAAO,IAAI,GAAG,GAAG,SAAS,WAAW,GAAG,KAAK,IAAI,KAAK,GAAG,GAAG,CAAC;QAC/D,CAAC,CAAC;QACF,QAAQ,CAAC,QAAQ,GAAG,UAAU,IAAI;YAChC,OAAO,yBAAyB,IAAI,OAAO,CAAC;QAC9C,CAAC,CAAC;QAEF,SAAS;QACT,QAAQ,CAAC,KAAK,GAAG,UAAU,MAAM,EAAE,IAAI;YACrC,OAAO;UACH,MAAM,GAAG,IAAI;qBACF,CAAC;QAClB,CAAC,CAAC;QACF,QAAQ,CAAC,QAAQ,GAAG,UAAU,OAAO;YACnC,OAAO,wCAAwC,OAAO,OAAO,CAAC;QAChE,CAAC,CAAC;QACF,QAAQ,CAAC,SAAS,GAAG,UAAU,OAAO,EAAE,KAAK;YAC3C,MAAM,IAAI,GAAW,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;YAChD,MAAM,IAAI,GAAW,oDAAoD,CAAC;YAC1E,MAAM,KAAK,GAAW,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAChE,MAAM,MAAM,GAAW,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,2BAA2B,CAAC,CAAC,CAAC,EAAE,CAAC;YACvE,OAAO,IAAI,IAAI,WAAW,IAAI,GAAG,KAAK,GAAG,MAAM,KAAK,OAAO,KAAK,IAAI,GAAG,CAAC;QAC1E,CAAC,CAAC;QAEF,cAAc;QACd,QAAQ,CAAC,QAAQ,GAAG,UAAU,IAAI;YAChC,MAAM,OAAO,GAAW,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;YAClD,OAAO,4EAA4E,OAAO,SAAS,CAAC;QACtG,CAAC,CAAC;QAEF,kBAAkB;QAClB,QAAQ,CAAC,EAAE,GAAG;YACZ,OAAO,+CAA+C,CAAC;QACzD,CAAC,CAAC;QAEF,oCAAoC;QACpC,QAAQ,CAAC,MAAM,GAAG,UAAU,IAAI;YAC9B,OAAO,+CAA+C,IAAI,WAAW,CAAC;QACxE,CAAC,CAAC;QACF,QAAQ,CAAC,EAAE,GAAG,UAAU,IAAI;YAC1B,OAAO,oCAAoC,IAAI,OAAO,CAAC;QACzD,CAAC,CAAC;QACF,QAAQ,CAAC,GAAG,GAAG,UAAU,IAAI;YAC3B,OAAO,2CAA2C,IAAI,QAAQ,CAAC;QACjE,CAAC,CAAC;QAEF,SAAS;QACT,QAAQ,CAAC,KAAK,GAAG,UAAU,IAAI,EAAE,MAAM,EAAE,IAAI;YAC3C,OAAO,kCAAkC,IAAI,UAAU,IAAI,oIAAoI,IAAI,IAAI,EAAE,wBAAwB,CAAC;QACpO,CAAC,CAAC;QAEF;;;;;WAKG;QACH,QAAQ,CAAC,IAAI,GAAG,UAAU,IAAI,EAAE,KAAK,EAAE,IAAI;YACzC,2CAA2C;YAC3C,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,OAAO,IAAc,CAAC;YACxB,CAAC;YAED,MAAM,MAAM,GAAY,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;YAC7C,MAAM,QAAQ,GAAY,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;YACrD,MAAM,KAAK,GAAY,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;YAC/C,MAAM,UAAU,GACd,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;gBACpB,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC;gBAC9B,MAAM;gBACN,QAAQ;gBACR,KAAK,CAAC;YAER,MAAM,WAAW,GAAW;gBAC1B,eAAe;gBACf,iBAAiB;gBACjB,WAAW;gBACX,oBAAoB;gBACpB,uBAAuB;gBACvB,6BAA6B;gBAC7B,uBAAuB;gBACvB,mBAAmB;aACpB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAEZ,MAAM,SAAS,GAAW,KAAK,CAAC,CAAC,CAAC,WAAW,KAAK,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3D,MAAM,aAAa,GAAW,UAAU;gBACtC,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC,4CAA4C,CAAC;YAEjD,OAAO,YAAY,IAAI,IAAI,SAAS,WAAW,WAAW,IAAI,aAAa,IAAI,IAAI,MAAM,CAAC;QAC5F,CAAC,CAAC;QAEF,IAAI,CAAC,YAAY,GAAG,QAAQ,CAAC;QAE7B,OAAO,QAAQ,CAAC;IAClB,CAAC;;AAvoBc,qBAAY,GAAoB,IAAI,CAAC;AACrC,qBAAY,GAAoB,IAAI,CAAC;AACrC,sBAAa,GAAoB,IAAI,CAAC;AACtC,+BAAsB,GAAoB,IAAI,CAAC;AAsQ9D;;;;;;GAMG;AACqB,0BAAiB,GAA2B;IAClE,MAAM,EAAE,QAAQ;IAChB,IAAI,EAAE,MAAM;IACZ,CAAC,EAAE,GAAG;IACN,GAAG,EAAE,KAAK;IACV,MAAM,EAAE,IAAI;IACZ,GAAG,EAAE,KAAK;IACV,IAAI,EAAE,MAAM;IACZ,GAAG,EAAE,UAAU;IACf,MAAM,EAAE,YAAY;IACpB,UAAU,EAAE,YAAY;IACxB,EAAE,EAAE,IAAI;IACR,OAAO,EAAE,SAAS;IAClB,MAAM,EAAE,QAAQ;IAChB,GAAG,EAAE,KAAK;IACV,IAAI,EAAE,MAAM;IACZ,IAAI,EAAE,MAAM;IACZ,GAAG,EAAE,KAAK;IACV,IAAI,EAAE,MAAM;IACZ,UAAU,EAAE,YAAY;IACxB,EAAE,EAAE,YAAY;IAChB,IAAI,EAAE,MAAM;IACZ,GAAG,EAAE,KAAK;IACV,MAAM,EAAE,QAAQ;IAChB,GAAG,EAAE,KAAK;IACV,QAAQ,EAAE,UAAU;IACpB,QAAQ,EAAE,UAAU;IACpB,EAAE,EAAE,UAAU;IACd,KAAK,EAAE,OAAO;IACd,IAAI,EAAE,MAAM;IACZ,GAAG,EAAE,KAAK;IACV,UAAU,EAAE,YAAY;IACxB,KAAK,EAAE,UAAU;IACjB,EAAE,EAAE,QAAQ;IACZ,MAAM,EAAE,QAAQ;IAChB,CAAC,EAAE,GAAG;IACN,EAAE,EAAE,MAAM;IACV,IAAI,EAAE,MAAM;IACZ,IAAI,EAAE,MAAM;IACZ,KAAK,EAAE,OAAO;IACd,EAAE,EAAE,OAAO;IACX,KAAK,EAAE,OAAO;IACd,GAAG,EAAE,KAAK;IACV,KAAK,EAAE,OAAO;IACd,SAAS,EAAE,WAAW;IACtB,IAAI,EAAE,MAAM;IACZ,EAAE,EAAE,YAAY;IAChB,GAAG,EAAE,KAAK;IACV,UAAU,EAAE,YAAY;IACxB,GAAG,EAAE,KAAK;IACV,IAAI,EAAE,MAAM;IACZ,GAAG,EAAE,MAAM;IACX,GAAG,EAAE,OAAO;CACb,CAAC;eAlYiB,QAAQ;AAEb;IADb,WAAW,EAAE;;;;wCA2Db;AAOmB;IADnB,WAAW,EAAE;;;;mCAuCb"}
+{"version":3,"file":"Markdown.js","sourceRoot":"","sources":["../../../../Server/Types/Markdown.ts"],"names":[],"mappings":";;;;;;;;;AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAC1C,OAAO,WAAW,MAAM,gCAAgC,CAAC;AACzD,OAAO,eAAe,MAAM,mBAAmB,CAAC;AAIhD,MAAM,CAAN,IAAY,mBAMX;AAND,WAAY,mBAAmB;IAC7B,6DAAI,CAAA;IACJ,6DAAI,CAAA;IACJ,+DAAK,CAAA;IACL,+EAA+E;IAC/E,iFAAc,CAAA;AAChB,CAAC,EANW,mBAAmB,KAAnB,mBAAmB,QAM9B;AAED,MAAqB,QAAQ;IAEb,AAAP,MAAM,CAAC,kBAAkB,CAAC,QAAgB;QAC/C,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,IAAI,IAAI,GAAW,QAAQ,CAAC;QAE5B,mBAAmB;QACnB,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;QAEpC,kDAAkD;QAClD,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,wBAAwB,EAAE,IAAI,CAAC,CAAC;QAEpD,uDAAuD;QACvD,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,yBAAyB,EAAE,IAAI,CAAC,CAAC;QAErD,sCAAsC;QACtC,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,kBAAkB,EAAE,IAAI,CAAC,CAAC,CAAC,WAAW;QAC1D,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE,IAAI,CAAC,CAAC,CAAC,WAAW;QACtD,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE,IAAI,CAAC,CAAC,CAAC,WAAW;QACtD,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC,CAAC,WAAW;QAEpD,gCAAgC;QAChC,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE,IAAI,CAAC,CAAC;QAE1C,8BAA8B;QAC9B,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,iBAAiB,EAAE,EAAE,CAAC,CAAC;QAC3C,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC;QAExC,0BAA0B;QAC1B,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC;QAExC,8BAA8B;QAC9B,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;QAEnC,mCAAmC;QACnC,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC;QAEzC,+BAA+B;QAC/B,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,kBAAkB,EAAE,EAAE,CAAC,CAAC;QAC5C,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,kBAAkB,EAAE,EAAE,CAAC,CAAC;QAE5C,uBAAuB;QACvB,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QAClC,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QAClC,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;QACnC,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;QACpC,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;QACnC,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;QAEpC,2DAA2D;QAC3D,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;QACtC,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;QAEpC,kBAAkB;QAClB,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAEnB,OAAO,IAAI,CAAC;IACd,CAAC;IAOmB,AAAb,MAAM,CAAC,KAAK,CAAC,aAAa,CAC/B,QAAgB,EAChB,WAAgC;QAEhC,IAAI,QAAQ,GAAoB,IAAI,CAAC;QAErC,IAAI,WAAW,KAAK,mBAAmB,CAAC,IAAI,EAAE,CAAC;YAC7C,QAAQ,GAAG,IAAI,CAAC,eAAe,EAAE,CAAC;QACpC,CAAC;QAED,IAAI,WAAW,KAAK,mBAAmB,CAAC,IAAI,EAAE,CAAC;YAC7C,QAAQ,GAAG,IAAI,CAAC,eAAe,EAAE,CAAC;QACpC,CAAC;QAED,IAAI,WAAW,KAAK,mBAAmB,CAAC,KAAK,EAAE,CAAC;YAC9C,QAAQ,GAAG,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACrC,CAAC;QAED,IAAI,WAAW,KAAK,mBAAmB,CAAC,cAAc,EAAE,CAAC;YACvD,QAAQ,GAAG,IAAI,CAAC,yBAAyB,EAAE,CAAC;QAC9C,CAAC;QAED;;;;WAIG;QACH,IAAI,QAAQ,EAAE,CAAC;YACb,QAAQ,CAAC,IAAI,GAAG,CAAC,IAAY,EAAU,EAAE;gBACvC,OAAO,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;YACnC,CAAC,CAAC;QACJ,CAAC;QAED,MAAM,QAAQ,GAAW,MAAM,MAAM,CAAC,QAAQ,EAAE;YAC9C,QAAQ,EAAE,QAAQ;SACnB,CAAC,CAAC;QAEH,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED;;;;;;;OAOG;IACI,MAAM,CAAC,UAAU,CAAC,IAAY;QACnC,OAAO,IAAI;aACR,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC;aACtB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;aACrB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;aACrB,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC;aACvB,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAC5B,CAAC;IAED;;;;;;;;;;;;;;;;;;;;;;;;OAwBG;IACK,MAAM,CAAC,gBAAgB;QAC7B,IAAI,IAAI,CAAC,aAAa,KAAK,IAAI,EAAE,CAAC;YAChC,OAAO,IAAI,CAAC,aAAa,CAAC;QAC5B,CAAC;QAED,MAAM,QAAQ,GAAa,IAAI,QAAQ,EAAE,CAAC;QAE1C,MAAM,QAAQ,GACZ,2IAA2I,CAAC;QAE9I,QAAQ,CAAC,KAAK,GAAG,UAAU,MAAc,EAAE,IAAY;YACrD,OAAO,CACL,iEAAiE;gBACjE,+DAA+D;gBAC/D,2CAA2C;gBAC3C,UAAU,MAAM,kBAAkB,IAAI,kBAAkB,CACzD,CAAC;QACJ,CAAC,CAAC;QAEF,QAAQ,CAAC,QAAQ,GAAG,UAAU,OAAe;YAC3C,OAAO,OAAO,OAAO,OAAO,CAAC;QAC/B,CAAC,CAAC;QAEF,QAAQ,CAAC,SAAS,GAAG,UACnB,OAAe,EACf,KAAkD;YAElD,MAAM,GAAG,GAAW,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;YAC/C,MAAM,KAAK,GAAW,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,cAAc,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;YAEtE;;;;eAIG;YACH,MAAM,IAAI,GAAW,KAAK,CAAC,MAAM;gBAC/B,CAAC,CAAC,yFAAyF;gBAC3F,CAAC,CAAC,gEAAgE,CAAC;YAErE,OAAO,CACL,IAAI,GAAG,4BAA4B,QAAQ,GAAG,IAAI,EAAE;gBACpD,yBAAyB,KAAK,IAAI,kBAAkB,IAAI;gBACxD,GAAG,OAAO,KAAK,GAAG,GAAG,CACtB,CAAC;QACJ,CAAC,CAAC;QAEF;;;;;;;;;;;;;;;;;;WAkBG;QACH,QAAQ,CAAC,IAAI,GAAG,UACd,IAAY,EACZ,OAAgB,EAChB,KAAkB;YAElB,MAAM,GAAG,GAAW,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;YAC1C,MAAM,cAAc,GAClB,OAAO,IAAI,KAAK,KAAK,EAAE,IAAI,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,KAAK,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;YACpE,MAAM,MAAM,GAAW,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC;YAEjD,OAAO,CACL,IAAI,GAAG,GAAG,cAAc,8BAA8B;gBACtD,eAAe,MAAM,wBAAwB,MAAM,GAAG;gBACtD,kCAAkC;gBAClC,GAAG,IAAI,KAAK,GAAG,GAAG,CACnB,CAAC;QACJ,CAAC,CAAC;QAEF,QAAQ,CAAC,QAAQ,GAAG,UAAU,IAAY;YACxC,OAAO,yCAAyC,IAAI,OAAO,CAAC;QAC9D,CAAC,CAAC;QAEF;;;;;;;;;;WAUG;QACH,QAAQ,CAAC,QAAQ,GAAG,UAAU,IAAY;YACxC,OAAO,CACL,sDAAsD;gBACtD,oCAAoC;gBACpC,8EAA8E;gBAC9E,oBAAoB,IAAI,SAAS,CAClC,CAAC;QACJ,CAAC,CAAC;QAEF,IAAI,CAAC,aAAa,GAAG,QAAQ,CAAC;QAE9B,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED;;;;;OAKG;IACK,MAAM,CAAC,yBAAyB;QACtC,IAAI,IAAI,CAAC,sBAAsB,KAAK,IAAI,EAAE,CAAC;YACzC,OAAO,IAAI,CAAC,sBAAsB,CAAC;QACrC,CAAC;QAED,MAAM,QAAQ,GAAa,IAAI,QAAQ,EAAE,CAAC;QAE1C,QAAQ,CAAC,OAAO,GAAG,UAAU,IAAI,EAAE,KAAK;YACtC,IAAI,KAAK,IAAI,CAAC,EAAE,CAAC;gBACf,OAAO,oKAAoK,IAAI,OAAO,CAAC;YACzL,CAAC;YACD,IAAI,KAAK,KAAK,CAAC,EAAE,CAAC;gBAChB,OAAO,+DAA+D,IAAI,OAAO,CAAC;YACpF,CAAC;YACD,OAAO,6DAA6D,IAAI,OAAO,CAAC;QAClF,CAAC,CAAC;QAEF,QAAQ,CAAC,SAAS,GAAG,UAAU,IAAI;YACjC,OAAO,2DAA2D,IAAI,MAAM,CAAC;QAC/E,CAAC,CAAC;QAEF,QAAQ,CAAC,IAAI,GAAG,UAAU,IAAI,EAAE,OAAO,EAAE,KAAK;YAC5C,MAAM,GAAG,GAAW,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;YAC1C,MAAM,GAAG,GAAW,OAAO;gBACzB,CAAC,CAAC,+EAA+E;gBACjF,CAAC,CAAC,4EAA4E,CAAC;YACjF,MAAM,SAAS,GACb,OAAO,IAAI,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,KAAK,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;YACpD,OAAO,IAAI,GAAG,GAAG,SAAS,WAAW,GAAG,KAAK,IAAI,KAAK,GAAG,GAAG,CAAC;QAC/D,CAAC,CAAC;QACF,QAAQ,CAAC,QAAQ,GAAG,UAAU,IAAI;YAChC,OAAO,oCAAoC,IAAI,OAAO,CAAC;QACzD,CAAC,CAAC;QAEF,QAAQ,CAAC,MAAM,GAAG,UAAU,IAAI;YAC9B,OAAO,+CAA+C,IAAI,WAAW,CAAC;QACxE,CAAC,CAAC;QACF,QAAQ,CAAC,EAAE,GAAG,UAAU,IAAI;YAC1B,OAAO,sBAAsB,IAAI,OAAO,CAAC;QAC3C,CAAC,CAAC;QAEF,QAAQ,CAAC,UAAU,GAAG,UAAU,KAAK;YACnC,OAAO,qFAAqF,KAAK,eAAe,CAAC;QACnH,CAAC,CAAC;QAEF,QAAQ,CAAC,EAAE,GAAG;YACZ,OAAO,8CAA8C,CAAC;QACxD,CAAC,CAAC;QAEF,QAAQ,CAAC,QAAQ,GAAG,UAAU,IAAI;YAChC,MAAM,OAAO,GAAW,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;YAClD,OAAO,wGAAwG,OAAO,SAAS,CAAC;QAClI,CAAC,CAAC;QAEF,QAAQ,CAAC,IAAI,GAAG,UAAU,IAAI,EAAE,QAAQ;YACtC,MAAM,OAAO,GAAW,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;YAClD,OAAO,oIAAoI,QAAQ,6BAA6B,OAAO,eAAe,CAAC;QACzM,CAAC,CAAC;QAEF,QAAQ,CAAC,KAAK,GAAG,UAAU,MAAM,EAAE,IAAI;YACrC,OAAO,mHAAmH,MAAM,GAAG,IAAI,gBAAgB,CAAC;QAC1J,CAAC,CAAC;QACF,QAAQ,CAAC,QAAQ,GAAG,UAAU,OAAO;YACnC,OAAO,wDAAwD,OAAO,OAAO,CAAC;QAChF,CAAC,CAAC;QACF,QAAQ,CAAC,SAAS,GAAG,UAAU,OAAO,EAAE,KAAK;YAC3C,MAAM,GAAG,GAAW,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;YAC/C,MAAM,KAAK,GAAW,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAChE,MAAM,WAAW,GAAW,KAAK,CAAC,MAAM;gBACtC,CAAC,CAAC,yCAAyC;gBAC3C,CAAC,CAAC,gBAAgB,CAAC;YACrB,OAAO,IAAI,GAAG,oBAAoB,KAAK,GAAG,WAAW,KAAK,OAAO,KAAK,GAAG,GAAG,CAAC;QAC/E,CAAC,CAAC;QAEF,QAAQ,CAAC,IAAI,GAAG,UAAU,IAAI,EAAE,MAAM,EAAE,IAAI;YAC1C,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,OAAO,IAAc,CAAC;YACxB,CAAC;YACD,MAAM,UAAU,GAAY,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;YACpD,MAAM,GAAG,GAAW,UAAU;gBAC5B,CAAC,CAAC,4CAA4C;gBAC9C,CAAC,CAAC,EAAE,CAAC;YACP,OAAO,YAAY,IAAI,IAAI,GAAG,sIAAsI,IAAI,MAAM,CAAC;QACjL,CAAC,CAAC;QAEF,IAAI,CAAC,sBAAsB,GAAG,QAAQ,CAAC;QAEvC,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED;;;;;OAKG;IACI,MAAM,CAAC,OAAO,CAAC,IAAY;QAChC,OAAO,eAAe,CAAC,IAAI,CAAC,CAAC;IAC/B,CAAC;IAgEO,MAAM,CAAC,eAAe;QAC5B,IAAI,IAAI,CAAC,YAAY,KAAK,IAAI,EAAE,CAAC;YAC/B,OAAO,IAAI,CAAC,YAAY,CAAC;QAC3B,CAAC;QAED,MAAM,QAAQ,GAAa,IAAI,QAAQ,EAAE,CAAC;QAE1C;;;;;;WAMG;QAEH,QAAQ,CAAC,SAAS,GAAG,UAAU,IAAI;YACjC,OAAO,MAAM,IAAI,MAAM,CAAC;QAC1B,CAAC,CAAC;QAEF,QAAQ,CAAC,UAAU,GAAG,UAAU,KAAK;YACnC,MAAM,YAAY,GAA4B,KAAK,CAAC,KAAK,CACvD,wEAAwE,CACzE,CAAC;YAEF,IAAI,YAAY,EAAE,CAAC;gBACjB,MAAM,IAAI,GAAW,YAAY,CAAC,CAAC,CAAE,CAAC,WAAW,EAAE,CAAC;gBACpD,MAAM,SAAS,GAAoD;oBACjE,IAAI,EAAE;wBACJ,IAAI,EAAE,uIAAuI;wBAC7I,KAAK,EAAE,MAAM;qBACd;oBACD,IAAI,EAAE;wBACJ,IAAI,EAAE,uIAAuI;wBAC7I,KAAK,EAAE,MAAM;qBACd;oBACD,GAAG,EAAE;wBACH,IAAI,EAAE,8RAA8R;wBACpS,KAAK,EAAE,KAAK;qBACb;oBACD,OAAO,EAAE;wBACP,IAAI,EAAE,uNAAuN;wBAC7N,KAAK,EAAE,SAAS;qBACjB;oBACD,OAAO,EAAE;wBACP,IAAI,EAAE,uNAAuN;wBAC7N,KAAK,EAAE,SAAS;qBACjB;oBACD,MAAM,EAAE;wBACN,IAAI,EAAE,+HAA+H;wBACrI,KAAK,EAAE,QAAQ;qBAChB;iBACF,CAAC;gBAEF,MAAM,MAAM,GACV,SAAS,CAAC,IAAI,CAAC,IAAI,SAAS,CAAC,MAAM,CAAE,CAAC;gBAExC,MAAM,OAAO,GAAW,KAAK,CAAC,OAAO,CACnC,2EAA2E,EAC3E,KAAK,CACN,CAAC;gBAEF,OAAO,0CAA0C,IAAI;;uHAE0D,MAAM,CAAC,IAAI;gDAClF,MAAM,CAAC,KAAK;;4CAEhB,OAAO;eACpC,CAAC;YACV,CAAC;YAED,OAAO,kCAAkC,KAAK,eAAe,CAAC;QAChE,CAAC,CAAC;QAEF,QAAQ,CAAC,KAAK,GAAG,UAAU,IAAI,EAAE,KAAK,EAAE,IAAI;YAC1C,MAAM,SAAS,GAAW,KAAK;gBAC7B,CAAC,CAAC,WAAW,QAAQ,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG;gBAC1C,CAAC,CAAC,EAAE,CAAC;YACP,OAAO,aAAa,IAAI,UAAU,IAAI,IAAI,EAAE,IAAI,SAAS,wDAAwD,CAAC;QACpH,CAAC,CAAC;QAEF,QAAQ,CAAC,IAAI,GAAG,UAAU,IAAI,EAAE,KAAK,EAAE,IAAI;YACzC,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,OAAO,IAAc,CAAC;YACxB,CAAC;YAED,MAAM,MAAM,GAAW,IAAI,CAAC,WAAW,EAAE,CAAC;YAC1C,MAAM,UAAU,GACd,CAAC,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,MAAM,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;gBAC/D,CAAC,MAAM,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC;YACpC,MAAM,SAAS,GAAW,KAAK;gBAC7B,CAAC,CAAC,WAAW,QAAQ,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG;gBAC1C,CAAC,CAAC,EAAE,CAAC;YACP,MAAM,aAAa,GAAW,UAAU;gBACtC,CAAC,CAAC,4CAA4C;gBAC9C,CAAC,CAAC,EAAE,CAAC;YACP,MAAM,MAAM,GAAW,UAAU;gBAC/B,CAAC,CAAC,0QAA0Q;gBAC5Q,CAAC,CAAC,EAAE,CAAC;YAEP,OAAO,8BAA8B,IAAI,IAAI,SAAS,GAAG,aAAa,IAAI,IAAI,GAAG,MAAM,MAAM,CAAC;QAChG,CAAC,CAAC;QAEF,QAAQ,CAAC,IAAI,GAAG,UAAU,IAAI,EAAE,QAAQ;YACtC,MAAM,IAAI,GAAW,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YAE3D,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;gBACvB;;;;mBAIG;gBACH,OAAO,kDAAkD,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,cAAc,CAAC;YACnG,CAAC;YAED,MAAM,OAAO,GAAW,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;YAClD,MAAM,KAAK,GAAuB,QAAQ,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC;YACnE;;;eAGG;YACH,MAAM,SAAS,GAAW,IAAI,CAAC,CAAC,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC;YACpE;;;;;eAKG;YACH,MAAM,GAAG,GAAW;0CACgB,KAAK,IAAI,EAAE;;;;;eAKtC,CAAC;YAEV,OAAO,yBAAyB,IAAI,CAAC,CAAC,CAAC,mBAAmB,IAAI,GAAG,CAAC,CAAC,CAAC,EAAE,IAAI,GAAG,qBAAqB,SAAS,KAAK,OAAO,qBAAqB,CAAC;QAC/I,CAAC,CAAC;QAEF,QAAQ,CAAC,OAAO,GAAG,UAAU,IAAI,EAAE,KAAK;YACtC,MAAM,IAAI,GAAW,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YAC5C,MAAM,MAAM,GACV,KAAK,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC;gBACtB,CAAC,CAAC,iCAAiC,IAAI,0CAA0C;gBACjF,CAAC,CAAC,EAAE,CAAC;YAET,MAAM,SAAS,GAAW,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YAE1D,OAAO,KAAK,SAAS,QAAQ,IAAI,+BAA+B,SAAS,sCAAsC,IAAI,UAAU,MAAM,MAAM,SAAS,GAAG,CAAC;QACxJ,CAAC,CAAC;QAEF,QAAQ,CAAC,EAAE,GAAG;YACZ,OAAO,wBAAwB,CAAC;QAClC,CAAC,CAAC;QAEF,QAAQ,CAAC,KAAK,GAAG,UAAU,MAAM,EAAE,IAAI;YACrC,OAAO,0EAA0E,MAAM,GAAG,IAAI,gBAAgB,CAAC;QACjH,CAAC,CAAC;QAEF,QAAQ,CAAC,QAAQ,GAAG,UAAU,OAAO;YACnC,OAAO,OAAO,OAAO,OAAO,CAAC;QAC/B,CAAC,CAAC;QAEF,QAAQ,CAAC,SAAS,GAAG,UAAU,OAAO,EAAE,KAAK;YAC3C,MAAM,GAAG,GAAW,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;YAC/C,MAAM,KAAK,GAAW,KAAK,CAAC,KAAK;gBAC/B,CAAC,CAAC,sBAAsB,KAAK,CAAC,KAAK,GAAG;gBACtC,CAAC,CAAC,EAAE,CAAC;YACP,OAAO,IAAI,GAAG,GAAG,KAAK,IAAI,OAAO,KAAK,GAAG,GAAG,CAAC;QAC/C,CAAC,CAAC;QAEF,cAAc;QACd,QAAQ,CAAC,QAAQ,GAAG,UAAU,IAAI;YAChC,MAAM,OAAO,GAAW,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;YAClD,OAAO,kCAAkC,OAAO,SAAS,CAAC;QAC5D,CAAC,CAAC;QAEF,IAAI,CAAC,YAAY,GAAG,QAAQ,CAAC;QAE7B,OAAO,QAAQ,CAAC;IAClB,CAAC;IAEO,MAAM,CAAC,eAAe;QAC5B,IAAI,IAAI,CAAC,YAAY,KAAK,IAAI,EAAE,CAAC;YAC/B,OAAO,IAAI,CAAC,YAAY,CAAC;QAC3B,CAAC;QAED,MAAM,QAAQ,GAAa,IAAI,QAAQ,EAAE,CAAC;QAE1C,QAAQ,CAAC,SAAS,GAAG,UAAU,IAAI;YACjC,OAAO,wDAAwD,IAAI,MAAM,CAAC;QAC5E,CAAC,CAAC;QAEF,QAAQ,CAAC,UAAU,GAAG,UAAU,KAAK;YACnC,OAAO;mDACsC,KAAK;sBAClC,CAAC;QACnB,CAAC,CAAC;QAEF,QAAQ,CAAC,IAAI,GAAG,UAAU,IAAI,EAAE,QAAQ;YACtC,MAAM,OAAO,GAAW,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;YAClD,OAAO,wBAAwB,QAAQ,sCAAsC,QAAQ,gBAAgB,OAAO,eAAe,CAAC;QAC9H,CAAC,CAAC;QAEF,QAAQ,CAAC,OAAO,GAAG,UAAU,IAAI,EAAE,KAAK;YACtC,IAAI,KAAK,KAAK,CAAC,EAAE,CAAC;gBAChB,OAAO,yEAAyE,IAAI,OAAO,CAAC;YAC9F,CAAC;iBAAM,IAAI,KAAK,KAAK,CAAC,EAAE,CAAC;gBACvB,OAAO,0EAA0E,IAAI,OAAO,CAAC;YAC/F,CAAC;iBAAM,IAAI,KAAK,KAAK,CAAC,EAAE,CAAC;gBACvB,OAAO,0EAA0E,IAAI,OAAO,CAAC;YAC/F,CAAC;iBAAM,IAAI,KAAK,KAAK,CAAC,EAAE,CAAC;gBACvB,OAAO,yEAAyE,IAAI,OAAO,CAAC;YAC9F,CAAC;iBAAM,IAAI,KAAK,KAAK,CAAC,EAAE,CAAC;gBACvB,OAAO,yEAAyE,IAAI,OAAO,CAAC;YAC9F,CAAC;YACD,OAAO,2DAA2D,IAAI,OAAO,CAAC;QAChF,CAAC,CAAC;QAEF,QAAQ;QACR,QAAQ,CAAC,IAAI,GAAG,UAAU,IAAI,EAAE,OAAO,EAAE,KAAK;YAC5C,MAAM,GAAG,GAAW,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;YAC1C,MAAM,GAAG,GAAW,OAAO;gBACzB,CAAC,CAAC,gDAAgD;gBAClD,CAAC,CAAC,6CAA6C,CAAC;YAClD,MAAM,SAAS,GACb,OAAO,IAAI,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,KAAK,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;YACpD,OAAO,IAAI,GAAG,GAAG,SAAS,WAAW,GAAG,KAAK,IAAI,KAAK,GAAG,GAAG,CAAC;QAC/D,CAAC,CAAC;QACF,QAAQ,CAAC,QAAQ,GAAG,UAAU,IAAI;YAChC,OAAO,yBAAyB,IAAI,OAAO,CAAC;QAC9C,CAAC,CAAC;QAEF,SAAS;QACT,QAAQ,CAAC,KAAK,GAAG,UAAU,MAAM,EAAE,IAAI;YACrC,OAAO;UACH,MAAM,GAAG,IAAI;qBACF,CAAC;QAClB,CAAC,CAAC;QACF,QAAQ,CAAC,QAAQ,GAAG,UAAU,OAAO;YACnC,OAAO,wCAAwC,OAAO,OAAO,CAAC;QAChE,CAAC,CAAC;QACF,QAAQ,CAAC,SAAS,GAAG,UAAU,OAAO,EAAE,KAAK;YAC3C,MAAM,IAAI,GAAW,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;YAChD,MAAM,IAAI,GAAW,oDAAoD,CAAC;YAC1E,MAAM,KAAK,GAAW,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAChE,MAAM,MAAM,GAAW,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,2BAA2B,CAAC,CAAC,CAAC,EAAE,CAAC;YACvE,OAAO,IAAI,IAAI,WAAW,IAAI,GAAG,KAAK,GAAG,MAAM,KAAK,OAAO,KAAK,IAAI,GAAG,CAAC;QAC1E,CAAC,CAAC;QAEF,cAAc;QACd,QAAQ,CAAC,QAAQ,GAAG,UAAU,IAAI;YAChC,MAAM,OAAO,GAAW,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;YAClD,OAAO,4EAA4E,OAAO,SAAS,CAAC;QACtG,CAAC,CAAC;QAEF,kBAAkB;QAClB,QAAQ,CAAC,EAAE,GAAG;YACZ,OAAO,+CAA+C,CAAC;QACzD,CAAC,CAAC;QAEF,oCAAoC;QACpC,QAAQ,CAAC,MAAM,GAAG,UAAU,IAAI;YAC9B,OAAO,+CAA+C,IAAI,WAAW,CAAC;QACxE,CAAC,CAAC;QACF,QAAQ,CAAC,EAAE,GAAG,UAAU,IAAI;YAC1B,OAAO,oCAAoC,IAAI,OAAO,CAAC;QACzD,CAAC,CAAC;QACF,QAAQ,CAAC,GAAG,GAAG,UAAU,IAAI;YAC3B,OAAO,2CAA2C,IAAI,QAAQ,CAAC;QACjE,CAAC,CAAC;QAEF,SAAS;QACT,QAAQ,CAAC,KAAK,GAAG,UAAU,IAAI,EAAE,MAAM,EAAE,IAAI;YAC3C,OAAO,kCAAkC,IAAI,UAAU,IAAI,oIAAoI,IAAI,IAAI,EAAE,wBAAwB,CAAC;QACpO,CAAC,CAAC;QAEF;;;;;WAKG;QACH,QAAQ,CAAC,IAAI,GAAG,UAAU,IAAI,EAAE,KAAK,EAAE,IAAI;YACzC,2CAA2C;YAC3C,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,OAAO,IAAc,CAAC;YACxB,CAAC;YAED,MAAM,MAAM,GAAY,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;YAC7C,MAAM,QAAQ,GAAY,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;YACrD,MAAM,KAAK,GAAY,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;YAC/C,MAAM,UAAU,GACd,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;gBACpB,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC;gBAC9B,MAAM;gBACN,QAAQ;gBACR,KAAK,CAAC;YAER,MAAM,WAAW,GAAW;gBAC1B,eAAe;gBACf,iBAAiB;gBACjB,WAAW;gBACX,oBAAoB;gBACpB,uBAAuB;gBACvB,6BAA6B;gBAC7B,uBAAuB;gBACvB,mBAAmB;aACpB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAEZ,MAAM,SAAS,GAAW,KAAK,CAAC,CAAC,CAAC,WAAW,KAAK,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3D,MAAM,aAAa,GAAW,UAAU;gBACtC,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC,4CAA4C,CAAC;YAEjD,OAAO,YAAY,IAAI,IAAI,SAAS,WAAW,WAAW,IAAI,aAAa,IAAI,IAAI,MAAM,CAAC;QAC5F,CAAC,CAAC;QAEF,IAAI,CAAC,YAAY,GAAG,QAAQ,CAAC;QAE7B,OAAO,QAAQ,CAAC;IAClB,CAAC;;AAhrBc,qBAAY,GAAoB,IAAI,CAAC;AACrC,qBAAY,GAAoB,IAAI,CAAC;AACrC,sBAAa,GAAoB,IAAI,CAAC;AACtC,+BAAsB,GAAoB,IAAI,CAAC;AA+S9D;;;;;;GAMG;AACqB,0BAAiB,GAA2B;IAClE,MAAM,EAAE,QAAQ;IAChB,IAAI,EAAE,MAAM;IACZ,CAAC,EAAE,GAAG;IACN,GAAG,EAAE,KAAK;IACV,MAAM,EAAE,IAAI;IACZ,GAAG,EAAE,KAAK;IACV,IAAI,EAAE,MAAM;IACZ,GAAG,EAAE,UAAU;IACf,MAAM,EAAE,YAAY;IACpB,UAAU,EAAE,YAAY;IACxB,EAAE,EAAE,IAAI;IACR,OAAO,EAAE,SAAS;IAClB,MAAM,EAAE,QAAQ;IAChB,GAAG,EAAE,KAAK;IACV,IAAI,EAAE,MAAM;IACZ,IAAI,EAAE,MAAM;IACZ,GAAG,EAAE,KAAK;IACV,IAAI,EAAE,MAAM;IACZ,UAAU,EAAE,YAAY;IACxB,EAAE,EAAE,YAAY;IAChB,IAAI,EAAE,MAAM;IACZ,GAAG,EAAE,KAAK;IACV,MAAM,EAAE,QAAQ;IAChB,GAAG,EAAE,KAAK;IACV,QAAQ,EAAE,UAAU;IACpB,QAAQ,EAAE,UAAU;IACpB,EAAE,EAAE,UAAU;IACd,KAAK,EAAE,OAAO;IACd,IAAI,EAAE,MAAM;IACZ,GAAG,EAAE,KAAK;IACV,UAAU,EAAE,YAAY;IACxB,KAAK,EAAE,UAAU;IACjB,EAAE,EAAE,QAAQ;IACZ,MAAM,EAAE,QAAQ;IAChB,CAAC,EAAE,GAAG;IACN,EAAE,EAAE,MAAM;IACV,IAAI,EAAE,MAAM;IACZ,IAAI,EAAE,MAAM;IACZ,KAAK,EAAE,OAAO;IACd,EAAE,EAAE,OAAO;IACX,KAAK,EAAE,OAAO;IACd,GAAG,EAAE,KAAK;IACV,KAAK,EAAE,OAAO;IACd,SAAS,EAAE,WAAW;IACtB,IAAI,EAAE,MAAM;IACZ,EAAE,EAAE,YAAY;IAChB,GAAG,EAAE,KAAK;IACV,UAAU,EAAE,YAAY;IACxB,GAAG,EAAE,KAAK;IACV,IAAI,EAAE,MAAM;IACZ,GAAG,EAAE,MAAM;IACX,GAAG,EAAE,OAAO;CACb,CAAC;eA3aiB,QAAQ;AAEb;IADb,WAAW,EAAE;;;;wCA2Db;AAOmB;IADnB,WAAW,EAAE;;;;mCAuCb"}

package/build/dist/Server/Utils/AI/AIChatPrivacyFilter.js

@@ -1,3 +1,4 @@
+import DatabaseCommonInteractionPropsUtil from "../../../Types/BaseDatabase/DatabaseCommonInteractionPropsUtil";
 import NotAuthorizedException from "../../../Types/Exception/NotAuthorizedException";
 /*
  * AI conversations (and their messages, runs and run events) are personal to
@@ -9,6 +10,12 @@ export function pinQueryToRequestingUser(query, props, userColumnName) {
     if (props.isRoot || props.isMasterAdmin) {
         return query;
     }
+    /*
+     * No credentials at all is an expired session, not someone else's data:
+     * 401 so the client refreshes. The countBy overrides reach this before the
+     * permission layer's own login check does.
+     */
+    DatabaseCommonInteractionPropsUtil.assertCredentialsPresent(props);
     if (!props.userId) {
         throw new NotAuthorizedException("AI conversations are personal and can only be accessed by the user who created them.");
     }

package/build/dist/Server/Utils/AI/AIChatPrivacyFilter.js.map

@@ -1 +1 @@
-{"version":3,"file":"AIChatPrivacyFilter.js","sourceRoot":"","sources":["../../../../../Server/Utils/AI/AIChatPrivacyFilter.ts"],"names":[],"mappings":"AACA,OAAO,sBAAsB,MAAM,iDAAiD,CAAC;AAErF;;;;;GAKG;AACH,MAAM,UAAU,wBAAwB,CACtC,KAAa,EACb,KAAqC,EACrC,cAAsB;IAEtB,IAAI,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,aAAa,EAAE,CAAC;QACxC,OAAO,KAAK,CAAC;IACf,CAAC;IAED,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;QAClB,MAAM,IAAI,sBAAsB,CAC9B,sFAAsF,CACvF,CAAC;IACJ,CAAC;IAEA,KAAiC,CAAC,cAAc,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC;IAElE,OAAO,KAAK,CAAC;AACf,CAAC"}
+{"version":3,"file":"AIChatPrivacyFilter.js","sourceRoot":"","sources":["../../../../../Server/Utils/AI/AIChatPrivacyFilter.ts"],"names":[],"mappings":"AACA,OAAO,kCAAkC,MAAM,gEAAgE,CAAC;AAChH,OAAO,sBAAsB,MAAM,iDAAiD,CAAC;AAErF;;;;;GAKG;AACH,MAAM,UAAU,wBAAwB,CACtC,KAAa,EACb,KAAqC,EACrC,cAAsB;IAEtB,IAAI,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,aAAa,EAAE,CAAC;QACxC,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;;;OAIG;IACH,kCAAkC,CAAC,wBAAwB,CAAC,KAAK,CAAC,CAAC;IAEnE,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;QAClB,MAAM,IAAI,sBAAsB,CAC9B,sFAAsF,CACvF,CAAC;IACJ,CAAC;IAEA,KAAiC,CAAC,cAAc,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC;IAElE,OAAO,KAAK,CAAC;AACf,CAAC"}

package/build/dist/Server/Utils/AI/AIRunPrivacyFilter.js

@@ -1,3 +1,4 @@
+import DatabaseCommonInteractionPropsUtil from "../../../Types/BaseDatabase/DatabaseCommonInteractionPropsUtil";
 import NotAuthorizedException from "../../../Types/Exception/NotAuthorizedException";
 import AIRunType from "../../../Types/AI/AIRunType";
 import Text from "../../../Types/Text";
@@ -51,6 +52,12 @@ export function getAIRunPrivacyRaw(props) {
      * /ai-run nor /code-fix-run grants today. That is a separate product
      * decision and must not ride in as a side effect of this filter.
      */
+    /*
+     * No credentials at all is an expired session, not someone else's data:
+     * 401 so the client refreshes. The countBy overrides reach this before the
+     * permission layer's own login check does.
+     */
+    DatabaseCommonInteractionPropsUtil.assertCredentialsPresent(props);
     if (!props.userId) {
         throw new NotAuthorizedException("AI runs are personal and can only be accessed by the user who created them.");
     }

package/build/dist/Server/Utils/AI/AIRunPrivacyFilter.js.map

@@ -1 +1 @@
-{"version":3,"file":"AIRunPrivacyFilter.js","sourceRoot":"","sources":["../../../../../Server/Utils/AI/AIRunPrivacyFilter.ts"],"names":[],"mappings":"AAEA,OAAO,sBAAsB,MAAM,iDAAiD,CAAC;AACrF,OAAO,SAAS,MAAM,6BAA6B,CAAC;AACpD,OAAO,IAAI,MAAM,qBAAqB,CAAC;AACvC,OAAO,EAAE,wBAAwB,EAAE,MAAM,sBAAsB,CAAC;AAChE,OAAO,EAAE,GAAG,EAAE,MAAM,SAAS,CAAC;AAE9B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AACH,MAAM,UAAU,kBAAkB,CAChC,KAAqC;IAErC,IAAI,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,aAAa,EAAE,CAAC;QACxC,OAAO,SAAS,CAAC;IACnB,CAAC;IAED;;;;;;;;;OASG;IACH,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;QAClB,MAAM,IAAI,sBAAsB,CAC9B,6EAA6E,CAC9E,CAAC;IACJ,CAAC;IAED,MAAM,SAAS,GAAW,WAAW,GAAG,IAAI,CAAC,kBAAkB,CAAC,EAAE,CAAC,CAAC;IACpE,MAAM,UAAU,GAAW,YAAY,GAAG,IAAI,CAAC,kBAAkB,CAAC,EAAE,CAAC,CAAC;IAEtE,OAAO,GAAG,CACR,CAAC,KAAa,EAAU,EAAE;QACxB,OAAO,IAAI,KAAK,OAAO,UAAU,2BAA2B,SAAS,GAAG,CAAC;IAC3E,CAAC,EACD;QACE,CAAC,UAAU,CAAC,EAAE,SAAS,CAAC,OAAO;QAC/B,CAAC,SAAS,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,QAAQ,EAAE;KACrC,CACF,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,uBAAuB,CACrC,KAAa,EACb,KAAqC;IAErC,MAAM,SAAS,GACb,kBAAkB,CAAC,KAAK,CAAC,CAAC;IAE5B,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,OAAO,KAAK,CAAC;IACf,CAAC;IAED,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,EAAE,OAAO,EAAE,SAAS,EAAuB,CAAC;IACrD,CAAC;IAEA,KAAa,CAAC,OAAO,GAAG,wBAAwB,CAC9C,KAAa,CAAC,OAAO,EACtB,SAAS,CACV,CAAC;IAEF,OAAO,KAAK,CAAC;AACf,CAAC"}
+{"version":3,"file":"AIRunPrivacyFilter.js","sourceRoot":"","sources":["../../../../../Server/Utils/AI/AIRunPrivacyFilter.ts"],"names":[],"mappings":"AACA,OAAO,kCAAkC,MAAM,gEAAgE,CAAC;AAEhH,OAAO,sBAAsB,MAAM,iDAAiD,CAAC;AACrF,OAAO,SAAS,MAAM,6BAA6B,CAAC;AACpD,OAAO,IAAI,MAAM,qBAAqB,CAAC;AACvC,OAAO,EAAE,wBAAwB,EAAE,MAAM,sBAAsB,CAAC;AAChE,OAAO,EAAE,GAAG,EAAE,MAAM,SAAS,CAAC;AAE9B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AACH,MAAM,UAAU,kBAAkB,CAChC,KAAqC;IAErC,IAAI,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,aAAa,EAAE,CAAC;QACxC,OAAO,SAAS,CAAC;IACnB,CAAC;IAED;;;;;;;;;OASG;IACH;;;;OAIG;IACH,kCAAkC,CAAC,wBAAwB,CAAC,KAAK,CAAC,CAAC;IAEnE,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;QAClB,MAAM,IAAI,sBAAsB,CAC9B,6EAA6E,CAC9E,CAAC;IACJ,CAAC;IAED,MAAM,SAAS,GAAW,WAAW,GAAG,IAAI,CAAC,kBAAkB,CAAC,EAAE,CAAC,CAAC;IACpE,MAAM,UAAU,GAAW,YAAY,GAAG,IAAI,CAAC,kBAAkB,CAAC,EAAE,CAAC,CAAC;IAEtE,OAAO,GAAG,CACR,CAAC,KAAa,EAAU,EAAE;QACxB,OAAO,IAAI,KAAK,OAAO,UAAU,2BAA2B,SAAS,GAAG,CAAC;IAC3E,CAAC,EACD;QACE,CAAC,UAAU,CAAC,EAAE,SAAS,CAAC,OAAO;QAC/B,CAAC,SAAS,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,QAAQ,EAAE;KACrC,CACF,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,uBAAuB,CACrC,KAAa,EACb,KAAqC;IAErC,MAAM,SAAS,GACb,kBAAkB,CAAC,KAAK,CAAC,CAAC;IAE5B,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,OAAO,KAAK,CAAC;IACf,CAAC;IAED,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,EAAE,OAAO,EAAE,SAAS,EAAuB,CAAC;IACrD,CAAC;IAEA,KAAa,CAAC,OAAO,GAAG,wBAAwB,CAC9C,KAAa,CAAC,OAAO,EACtB,SAAS,CACV,CAAC;IAEF,OAAO,KAAK,CAAC;AACf,CAAC"}

package/build/dist/Server/Utils/CommunityEditionSsoReport.js

@@ -0,0 +1,223 @@
+import EnterpriseEdition from "../Enterprise/EnterpriseEdition";
+import EnterpriseFeature from "../Enterprise/EnterpriseFeature";
+import { ENTERPRISE_LICENSE_GRACE_PERIOD_IN_DAYS, ENTERPRISE_LICENSE_TRIAL_PERIOD_IN_DAYS, } from "../Enterprise/EnterpriseLicenseSnapshot";
+import GlobalConfigService from "../Services/GlobalConfigService";
+import ProjectSCIMService from "../Services/ProjectSCIMService";
+import ProjectService from "../Services/ProjectService";
+import StatusPageService from "../Services/StatusPageService";
+import logger from "./Logger";
+// How many ids of each kind the log line names; the counts are always exact.
+export const MAX_IDS_LISTED_PER_KIND = 20;
+const COMMUNITY_CONTEXT = { reason: "community" };
+/*
+ * Tells the operator which configured security settings this server is not
+ * enforcing, so that never happens silently:
+ *
+ *   - Community Edition: moving from the Enterprise image to the Community
+ *     one keeps the database as it is, so a project that required SSO still
+ *     says so - but the SSO login routes are part of the Enterprise Edition,
+ *     so the requirement is relaxed rather than locking everyone out. Logged
+ *     once per process at boot.
+ *   - Enterprise Edition: when the license lapses, SSO and SCIM stop and the
+ *     same settings are relaxed until a license is activated. Logged each time
+ *     SSO or SCIM stops (EnterpriseEdition reports each change once),
+ *     including a license that has already lapsed at boot.
+ */
+class CommunityEditionSsoReport {
+    /*
+     * Called once at boot, after the enterprise loader. On the Community
+     * Edition it logs the relaxed settings once per process. On the Enterprise
+     * Edition it starts watching the license (once per process) and reports
+     * whenever SSO or SCIM stops. Never throws: a failed check is logged and
+     * boot carries on. Returns what the Community Edition report found (null
+     * when it did not run or the check failed).
+     */
+    static async logRelaxedEnforcementOnce() {
+        if (EnterpriseEdition.isLoaded()) {
+            CommunityEditionSsoReport.watchLicenseOnce();
+            return null;
+        }
+        if (CommunityEditionSsoReport.hasRun) {
+            return null;
+        }
+        CommunityEditionSsoReport.hasRun = true;
+        return await CommunityEditionSsoReport.report(COMMUNITY_CONTEXT);
+    }
+    /*
+     * Collects and logs the relaxed settings. Never throws. Returns what it
+     * found (null when the check failed).
+     */
+    static async report(context) {
+        try {
+            const summary = await CommunityEditionSsoReport.collect();
+            const message = CommunityEditionSsoReport.describe(summary, context);
+            if (message) {
+                logger.warn(message);
+            }
+            return summary;
+        }
+        catch (err) {
+            logger.error(context.reason === "community"
+                ? "Community Edition: could not check for SSO requirements and SCIM team locks left over from an Enterprise Edition install."
+                : "OneUptime Enterprise license lapsed: could not check which SSO requirements and SCIM team locks are no longer enforced.");
+            logger.error(err);
+            return null;
+        }
+    }
+    /*
+     * Watches the Enterprise license for SSO or SCIM stopping, once per
+     * process. The first look happens here, so a license that has already
+     * lapsed at boot is reported like a lapse at runtime.
+     */
+    static watchLicenseOnce() {
+        if (CommunityEditionSsoReport.stopWatchingLicense) {
+            return;
+        }
+        CommunityEditionSsoReport.stopWatchingLicense =
+            EnterpriseEdition.onFeatureStateChange((change) => {
+                CommunityEditionSsoReport.onFeatureStateChange(change);
+            });
+        try {
+            EnterpriseEdition.isFeatureActive(EnterpriseFeature.SSO);
+            EnterpriseEdition.isFeatureActive(EnterpriseFeature.SCIM);
+        }
+        catch (err) {
+            logger.error(err);
+        }
+    }
+    static onFeatureStateChange(change) {
+        const isSsoRelaxed = change.stopped.includes(EnterpriseFeature.SSO);
+        const isScimRelaxed = change.stopped.includes(EnterpriseFeature.SCIM);
+        if (!isSsoRelaxed && !isScimRelaxed) {
+            return;
+        }
+        void CommunityEditionSsoReport.report({
+            reason: "lapsed-license",
+            isSsoRelaxed,
+            isScimRelaxed,
+        });
+    }
+    // Reads the stored (not the masked) settings. Root reads are never masked.
+    static async collect() {
+        const [instanceRequiresSso, projectCount, projects, statusPageCount, statusPages, scimCount, scimConfigurations,] = await Promise.all([
+            GlobalConfigService.getRequireSsoForLogin(),
+            ProjectService.countBy({
+                query: { requireSsoForLogin: true },
+                props: { isRoot: true },
+            }),
+            ProjectService.findBy({
+                query: { requireSsoForLogin: true },
+                select: { _id: true },
+                limit: MAX_IDS_LISTED_PER_KIND,
+                skip: 0,
+                props: { isRoot: true },
+            }),
+            StatusPageService.countBy({
+                query: { requireSsoForLogin: true },
+                props: { isRoot: true },
+            }),
+            StatusPageService.findBy({
+                query: { requireSsoForLogin: true },
+                select: { _id: true },
+                limit: MAX_IDS_LISTED_PER_KIND,
+                skip: 0,
+                props: { isRoot: true },
+            }),
+            ProjectSCIMService.countBy({
+                query: { enablePushGroups: true },
+                props: { isRoot: true },
+            }),
+            ProjectSCIMService.findBy({
+                query: { enablePushGroups: true },
+                select: { projectId: true },
+                limit: MAX_IDS_LISTED_PER_KIND,
+                skip: 0,
+                props: { isRoot: true },
+            }),
+        ]);
+        return {
+            instanceRequiresSso: Boolean(instanceRequiresSso),
+            projectsRequiringSso: projectCount.toNumber(),
+            projectIdsRequiringSso: CommunityEditionSsoReport.toIds(projects.map((project) => {
+                var _a, _b;
+                return ((_a = project.id) === null || _a === void 0 ? void 0 : _a.toString()) || ((_b = project._id) === null || _b === void 0 ? void 0 : _b.toString());
+            })),
+            statusPagesRequiringSso: statusPageCount.toNumber(),
+            statusPageIdsRequiringSso: CommunityEditionSsoReport.toIds(statusPages.map((statusPage) => {
+                var _a, _b;
+                return ((_a = statusPage.id) === null || _a === void 0 ? void 0 : _a.toString()) || ((_b = statusPage._id) === null || _b === void 0 ? void 0 : _b.toString());
+            })),
+            scimConfigurationsWithPushGroups: scimCount.toNumber(),
+            projectIdsWithScimPushGroups: CommunityEditionSsoReport.toIds(scimConfigurations.map((scim) => {
+                var _a;
+                return (_a = scim.projectId) === null || _a === void 0 ? void 0 : _a.toString();
+            })),
+        };
+    }
+    // The log line, or null when nothing is relaxed.
+    static describe(summary, context = COMMUNITY_CONTEXT) {
+        const isSsoRelaxed = context.reason === "community" || context.isSsoRelaxed;
+        const isScimRelaxed = context.reason === "community" || context.isScimRelaxed;
+        const relaxed = [];
+        if (isSsoRelaxed && summary.instanceRequiresSso) {
+            relaxed.push('the instance-wide "Require SSO for Login" setting (Admin Dashboard > Settings > Authentication)');
+        }
+        if (isSsoRelaxed && summary.projectsRequiringSso > 0) {
+            relaxed.push(`${summary.projectsRequiringSso} project(s) that require SSO for login${CommunityEditionSsoReport.describeIds(summary.projectIdsRequiringSso, summary.projectsRequiringSso)}`);
+        }
+        if (isSsoRelaxed && summary.statusPagesRequiringSso > 0) {
+            relaxed.push(`${summary.statusPagesRequiringSso} private status page(s) that require SSO for login${CommunityEditionSsoReport.describeIds(summary.statusPageIdsRequiringSso, summary.statusPagesRequiringSso)}`);
+        }
+        if (isScimRelaxed && summary.scimConfigurationsWithPushGroups > 0) {
+            relaxed.push(`${summary.scimConfigurationsWithPushGroups} SCIM configuration(s) with Push Groups on, whose teams can be edited in OneUptime again${CommunityEditionSsoReport.describeIds(summary.projectIdsWithScimPushGroups, summary.scimConfigurationsWithPushGroups, "project ids")}`);
+        }
+        if (relaxed.length === 0) {
+            return null;
+        }
+        if (context.reason === "lapsed-license") {
+            const stopped = isSsoRelaxed && isScimRelaxed
+                ? "SSO login and SCIM provisioning have"
+                : isSsoRelaxed
+                    ? "SSO login has"
+                    : "SCIM provisioning has";
+            return ("OneUptime Enterprise license lapsed: this server has security settings that it no longer enforces, " +
+                `because ${stopped} stopped until a license that includes ${isSsoRelaxed && isScimRelaxed ? "them" : "it"} is activated. ` +
+                (isSsoRelaxed
+                    ? "Users of these projects and status pages sign in with email and password instead (users who only ever signed in with SSO can reset their password). "
+                    : "") +
+                `Not enforced: ${relaxed.join("; ")}. ` +
+                "The settings are kept unchanged and are enforced again as soon as a license is activated, without a restart.");
+        }
+        return ("Community Edition: this server has security settings from an Enterprise Edition install that it does not enforce, " +
+            "because SSO login and SCIM provisioning are part of the OneUptime Enterprise Edition. " +
+            "Users of these projects and status pages sign in with email and password instead. " +
+            `Not enforced: ${relaxed.join("; ")}. ` +
+            `The settings are kept unchanged and are enforced again when this server runs the Enterprise Edition image with a valid license (or during its ${ENTERPRISE_LICENSE_TRIAL_PERIOD_IN_DAYS}-day trial, or the ${ENTERPRISE_LICENSE_GRACE_PERIOD_IN_DAYS}-day grace period after a license expires).`);
+    }
+    // Test suites only: allow the next call to run again and stop watching.
+    static resetForTests() {
+        CommunityEditionSsoReport.hasRun = false;
+        if (CommunityEditionSsoReport.stopWatchingLicense) {
+            CommunityEditionSsoReport.stopWatchingLicense();
+            CommunityEditionSsoReport.stopWatchingLicense = null;
+        }
+    }
+    static toIds(values) {
+        return values
+            .filter((value) => {
+            return Boolean(value);
+        })
+            .slice(0, MAX_IDS_LISTED_PER_KIND);
+    }
+    static describeIds(ids, total, label = "ids") {
+        if (ids.length === 0) {
+            return "";
+        }
+        const more = total > ids.length ? ` and ${total - ids.length} more` : "";
+        return ` (${label}: ${ids.join(", ")}${more})`;
+    }
+}
+CommunityEditionSsoReport.hasRun = false;
+CommunityEditionSsoReport.stopWatchingLicense = null;
+export default CommunityEditionSsoReport;
+//# sourceMappingURL=CommunityEditionSsoReport.js.map