@oneuptime/common 13.0.7 → 14.0.0

package/build/dist/UI/Components/EditionLabel/EditionLabel.js

@@ -1,18 +1,17 @@
 import Modal, { ModalWidth } from "../Modal/Modal";
 import Icon from "../Icon/Icon";
 import IconProp from "../../../Types/Icon/IconProp";
-import Input from "../Input/Input";
 import Button, { ButtonStyleType } from "../Button/Button";
-import React, { useCallback, useEffect, useMemo, useRef, useState, } from "react";
+import React, { useCallback, useEffect, useMemo, useState, } from "react";
 import GlobalConfig from "../../../Models/DatabaseModels/GlobalConfig";
 import API from "../../Utils/API/API";
 import OneUptimeDate from "../../../Types/Date";
 import HTTPMethod from "../../../Types/API/HTTPMethod";
 import Route from "../../../Types/API/Route";
 import URL from "../../../Types/API/URL";
-import { APP_API_URL, BILLING_ENABLED, IS_ENTERPRISE_EDITION, } from "../../Config";
-import Alert, { AlertType } from "../Alerts/Alert";
+import { APP_API_URL, BILLING_ENABLED, IS_ENTERPRISE_EDITION, env, } from "../../Config";
 import VersionUtil from "../../../Utils/VersionUtil";
+import { ENTERPRISE_LICENSE_GRACE_PERIOD_IN_DAYS, ENTERPRISE_LICENSE_TRIAL_PERIOD_IN_DAYS, } from "../../../Types/EnterpriseLicense/EnterpriseLicensePeriods";
 import UserUtil from "../../Utils/User";
 const ENTERPRISE_URL = "https://oneuptime.com/enterprise/demo";
 /*
@@ -24,68 +23,60 @@ const ENTERPRISE_URL = "https://oneuptime.com/enterprise/demo";
  * the docs move in the repository.
  */
 const UPGRADE_GUIDE_URL = "https://oneuptime.com/docs/installation/upgrading";
-const SALES_EMAIL = "sales@oneuptime.com";
 const SALES_MAILTO_URL = "mailto:sales@oneuptime.com";
+const DAY_IN_MS = 24 * 60 * 60 * 1000;
+/*
+ * What stops when the license lapses, in one sentence set, so every notice in
+ * the dialog says it the same way. It has to be said plainly and before it
+ * happens: after the trial or the grace period, single sign-on (SAML and
+ * OIDC) and SCIM provisioning stop, "Require SSO" is no longer enforced (so
+ * nobody is locked out: users sign in with their password), and audit logging
+ * stops recording - the Community Edition's behaviour - until a license is
+ * activated, when everything resumes without a restart. Core monitoring is
+ * never touched.
+ */
+export const LICENSE_LAPSE_CONSEQUENCES = 'single sign-on (SAML and OIDC) stops and "Require SSO" is no longer enforced, so users sign in with their password; SCIM provisioning stops; audit logging stops recording; enterprise configuration becomes read-only; and the enterprise admin dashboards are locked. Everything resumes as soon as a license is activated, and core monitoring is never affected.';
+/*
+ * The two periods have different names and different lengths: an unlicensed
+ * installation's first ENTERPRISE_LICENSE_TRIAL_PERIOD_IN_DAYS days are its
+ * trial, and only a license that expired has a grace period
+ * (ENTERPRISE_LICENSE_GRACE_PERIOD_IN_DAYS days after its expiry). The
+ * numbers come from the constants the license classifier uses.
+ */
+export const TRIAL_ENFORCEMENT_SUMMARY = `Without a valid license (after the ${ENTERPRISE_LICENSE_TRIAL_PERIOD_IN_DAYS}-day trial), ${LICENSE_LAPSE_CONSEQUENCES}`;
+export const GRACE_ENFORCEMENT_SUMMARY = `Without a valid license (after the ${ENTERPRISE_LICENSE_GRACE_PERIOD_IN_DAYS}-day grace period), ${LICENSE_LAPSE_CONSEQUENCES}`;
+/*
+ * What has stopped once the license lapsed (expired past its grace period,
+ * missing after the trial, or invalid), after the reason the notice gives.
+ */
+export const LICENSE_LAPSED_STATE = 'Single sign-on (SAML and OIDC) and SCIM provisioning are off: "Require SSO" is not enforced, so users sign in with their password, and your identity provider\'s SCIM requests are refused. Audit logging is not recording. Enterprise configuration is read-only and the enterprise admin dashboards are locked. Everything resumes, without a restart, as soon as a valid license is added, and core monitoring is never affected.';
+const parseLicenseStatus = (value) => {
+    if (value === "valid" ||
+        value === "grace" ||
+        value === "expired" ||
+        value === "missing" ||
+        value === "invalid") {
+        return value;
+    }
+    return null;
+};
 /*
  * Seat usage at or above this percent asks the admin to talk to OneUptime about
  * expanding. Matches CRITICAL_CAPACITY_PERCENT in
  * App/FeatureSet/Workers/Jobs/InstanceHealth/EvaluateClickhouseCapacity.ts.
  */
 const SEAT_WARNING_PERCENT = 90;
-const parseLicenseInstances = (value) => {
-    if (!Array.isArray(value)) {
-        return [];
-    }
-    const instances = [];
-    for (const item of value) {
-        if (!item || typeof item !== "object") {
-            continue;
-        }
-        const instance = item;
-        instances.push({
-            instanceId: typeof instance["instanceId"] === "string"
-                ? instance["instanceId"]
-                : "",
-            host: typeof instance["host"] === "string" && instance["host"]
-                ? instance["host"]
-                : null,
-            userCount: typeof instance["userCount"] === "number"
-                ? instance["userCount"]
-                : null,
-            isCountedTowardsUsage: typeof instance["isCountedTowardsUsage"] === "boolean"
-                ? instance["isCountedTowardsUsage"]
-                : undefined,
-            lastReportedAt: typeof instance["lastReportedAt"] === "string"
-                ? instance["lastReportedAt"]
-                : null,
-            version: typeof instance["version"] === "string" && instance["version"]
-                ? instance["version"]
-                : null,
-        });
-    }
-    return instances;
-};
-const formatInstanceReportedAt = (lastReportedAt) => {
-    if (!lastReportedAt) {
-        return "No usage reported yet.";
-    }
-    const reportedAt = OneUptimeDate.fromString(lastReportedAt);
-    if (Number.isNaN(reportedAt.getTime())) {
-        return "No usage reported yet.";
-    }
-    return `Last reported ${reportedAt.toLocaleString()}.`;
-};
 const EditionLabel = (props) => {
     const [isDialogOpen, setIsDialogOpen] = useState(false);
     const [globalConfig, setGlobalConfig] = useState(null);
+    /*
+     * The last successful license GET, as the server sent it. Handed to the
+     * license manager, which reads its own fields (the instances, the
+     * activation mode) from it.
+     */
+    const [licensePayload, setLicensePayload] = useState(null);
     const [isConfigLoading, setIsConfigLoading] = useState(false);
     const [configError, setConfigError] = useState("");
-    const [licenseKeyInput, setLicenseKeyInput] = useState("");
-    const [validationError, setValidationError] = useState("");
-    const [successMessage, setSuccessMessage] = useState("");
-    const [isValidating, setIsValidating] = useState(false);
-    const [isRefreshingLicense, setIsRefreshingLicense] = useState(false);
-    const [isChangingLicense, setIsChangingLicense] = useState(false);
     /*
      * The seat limit as this installation actually enforces it, rather than as
      * oneuptime.com last reported it. The server computes it from the live User
@@ -98,8 +89,6 @@ const EditionLabel = (props) => {
     const [isSeatLimitEnforced, setIsSeatLimitEnforced] = useState(false);
     const [enforcedSeatsInUse, setEnforcedSeatsInUse] = useState(null);
     const [canAddMoreUsers, setCanAddMoreUsers] = useState(true);
-    const [licenseInstances, setLicenseInstances] = useState([]);
-    const [thisInstanceId, setThisInstanceId] = useState("");
     /*
      * Version state comes from the server rather than APP_VERSION in the
      * browser bundle: the frontend env var is empty in every build that was
@@ -124,13 +113,56 @@ const EditionLabel = (props) => {
      * cannot always derive validity from the token itself.
      */
     const [serverLicenseValid, setServerLicenseValid] = useState(null);
-    const licenseInputEditedRef = useRef(false);
-    if (BILLING_ENABLED) {
-        return React.createElement(React.Fragment, null);
-    }
     /*
-     * Both the license GET and the two license POSTs answer with the same seat
-     * fields, so the three responses are unpacked in one place.
+     * Where the license stands, as the Enterprise license client classified it:
+     * valid, grace (an expired license's grace period, or an unlicensed
+     * installation's trial counted from its first run), expired, missing or
+     * invalid - and whether it could be verified offline.
+     */
+    const [licenseStatus, setLicenseStatus] = useState(null);
+    const [licenseVerification, setLicenseVerification] = useState("");
+    const [graceReason, setGraceReason] = useState("");
+    const [graceEndsAt, setGraceEndsAt] = useState("");
+    // Why the license is not valid, when the server says (master admins only).
+    const [licenseMessage, setLicenseMessage] = useState("");
+    const isMasterAdmin = useMemo(() => {
+        return Boolean(UserUtil.isMasterAdmin());
+    }, []);
+    /*
+     * The Enterprise Edition's license manager, when the caller passed one (the
+     * Dashboard and the Admin Dashboard of the Enterprise image do). Never on
+     * the Community Edition, whatever the bundle holds: there is no license to
+     * manage there.
+     */
+    const LicenseManager = IS_ENTERPRISE_EDITION ? props.licenseManager : undefined;
+    /*
+     * Activating, replacing and refreshing the license are master-admin actions:
+     * the license is instance-wide, and its seat limit is what UserService
+     * enforces against, so being able to rewrite it is being able to raise the
+     * ceiling on the whole installation. The server enforces this
+     * (MasterAdminAuthorization on both POSTs, and it answers everybody else
+     * with the edition pill's fields only); hiding the controls just stops
+     * everyone else being offered a button that can only fail.
+     *
+     * It also takes a license manager to manage the license with. The login
+     * page (where a signed-out visitor sees the same pill) and a Community
+     * build pass none, and telling somebody to "add a license below" there
+     * would point at nothing.
+     */
+    const canManageLicense = isMasterAdmin && Boolean(LicenseManager);
+    /*
+     * The server says it was asked for the Enterprise Edition
+     * (IS_ENTERPRISE_EDITION=true) but runs the Community Edition image, which
+     * has no enterprise code. Only a master admin can fix that, so only a
+     * master admin is told.
+     */
+    const showEditionMismatchNotice = !IS_ENTERPRISE_EDITION &&
+        isMasterAdmin &&
+        env("ENTERPRISE_EDITION_REQUESTED_BUT_NOT_LOADED") === "true";
+    /*
+     * The license GET and the license manager's writes answer with the same
+     * seat fields, so every response is unpacked in one place (the manager
+     * calls this through applySeatEnforcement).
      * isSeatLimitEnforced is what tells "this installation does not enforce a
      * seat limit" apart from "this build did not report one" - without it, an
      * older server's silence would read as a limit of zero.
@@ -157,6 +189,17 @@ const EditionLabel = (props) => {
         setConfigError("");
         try {
             const licenseUrl = URL.fromURL(APP_API_URL).addRoute(new Route("/global-config/license"));
+            /*
+             * The route also serves the login page, so on its own it answers a
+             * caller with no session with the reduced anonymous payload and a 200.
+             * Inside a signed-in app that caller is us with an expired session,
+             * and the reduced payload reads as "no license, no instances". Saying
+             * we expect to be signed in makes the server answer 401 instead,
+             * which the API client refreshes and replays.
+             */
+            if (UserUtil.isLoggedIn()) {
+                licenseUrl.addQueryParam("signedIn", "true");
+            }
             const response = await API.fetch({
                 method: HTTPMethod.GET,
                 url: licenseUrl,
@@ -184,19 +227,24 @@ const EditionLabel = (props) => {
             if (typeof payload["currentUserCount"] === "number") {
                 configModel.enterpriseLicenseCurrentUserCount = payload["currentUserCount"];
             }
-            if (payload["userCountUpdatedAt"]) {
-                configModel.enterpriseLicenseUserCountUpdatedAt =
-                    OneUptimeDate.fromString(payload["userCountUpdatedAt"]);
-            }
             setGlobalConfig(configModel);
-            setLicenseInstances(parseLicenseInstances(payload["instances"]));
-            setThisInstanceId(typeof payload["instanceId"] === "string"
-                ? payload["instanceId"]
-                : "");
+            setLicensePayload(payload);
             setServerLicenseValid(typeof payload["licenseValid"] === "boolean"
                 ? payload["licenseValid"]
                 : null);
-            setIsEvaluationLicense(payload["isEvaluationLicense"] === true);
+            setIsEvaluationLicense(payload["isEvaluation"] === true ||
+                payload["isEvaluationLicense"] === true);
+            setLicenseStatus(parseLicenseStatus(payload["status"]));
+            setLicenseVerification(typeof payload["verification"] === "string"
+                ? payload["verification"]
+                : "");
+            setGraceReason(typeof payload["graceReason"] === "string"
+                ? payload["graceReason"]
+                : "");
+            setGraceEndsAt(typeof payload["graceEndsAt"] === "string"
+                ? payload["graceEndsAt"]
+                : "");
+            setLicenseMessage(typeof payload["message"] === "string" ? payload["message"] : "");
             setCurrentVersion(typeof payload["currentVersion"] === "string"
                 ? payload["currentVersion"]
                 : "");
@@ -212,15 +260,17 @@ const EditionLabel = (props) => {
             setIsUpdateAvailable(payload["isUpdateAvailable"] === true);
             setIsUpdateCheckDisabled(payload["isUpdateCheckDisabled"] === true);
             applySeatEnforcementPayload(payload);
-            if (!licenseInputEditedRef.current) {
-                setLicenseKeyInput(configModel.enterpriseLicenseKey || "");
-            }
         }
         catch (err) {
             setGlobalConfig(null);
-            setLicenseInstances([]);
+            setLicensePayload(null);
             setServerLicenseValid(null);
             setIsEvaluationLicense(false);
+            setLicenseStatus(null);
+            setLicenseVerification("");
+            setGraceReason("");
+            setGraceEndsAt("");
+            setLicenseMessage("");
             setCurrentVersion("");
             setLatestVersion("");
             setLatestVersionPublishedAt("");
@@ -243,7 +293,7 @@ const EditionLabel = (props) => {
      * opened rather than adding a request to every page load.
      */
     useEffect(() => {
-        if (!IS_ENTERPRISE_EDITION) {
+        if (BILLING_ENABLED || !IS_ENTERPRISE_EDITION) {
             return;
         }
         void fetchGlobalConfig();
@@ -267,6 +317,70 @@ const EditionLabel = (props) => {
         globalConfig === null || globalConfig === void 0 ? void 0 : globalConfig.enterpriseLicenseToken,
         serverLicenseValid,
     ]);
+    /*
+     * Whether a license token IS installed, whatever the license client made of
+     * it.
+     *
+     * It matters because "the unlicensed trial" is no longer only for an
+     * installation with no license: one whose token has no expiry recorded
+     * beside it falls back to the same trial and the same lapse (the license
+     * client's classifyUnverifiedWithoutExpiry), so the copy below must not tell
+     * a paying customer that no license is installed.
+     *
+     * Two signals, because the two audiences are told different things. A master
+     * admin is sent the token itself. Everybody else is sent only the
+     * verification, and the license client reports "none" there exactly when
+     * there was no token to judge - so an "unverified" or "verified" grace
+     * period is a grace period with a license behind it. Neither field is new:
+     * both already come back from GET /global-config/license.
+     */
+    const hasLicenseInstalled = IS_ENTERPRISE_EDITION &&
+        (Boolean(globalConfig === null || globalConfig === void 0 ? void 0 : globalConfig.enterpriseLicenseToken) ||
+            licenseVerification === "unverified" ||
+            licenseVerification === "verified");
+    /*
+     * The two faces of "grace". An unlicensed installation's trial (counted from
+     * the first run of the Enterprise Edition) is not an expired license, and
+     * the dialog must not tell somebody who never had a license to renew one.
+     */
+    const isUnlicensedTrial = IS_ENTERPRISE_EDITION &&
+        licenseStatus === "grace" &&
+        graceReason === "unlicensed";
+    const isExpiredGrace = IS_ENTERPRISE_EDITION &&
+        licenseStatus === "grace" &&
+        graceReason !== "unlicensed";
+    /*
+     * A license issued before OneUptime signed its licenses: accepted, but it
+     * cannot be verified offline.
+     */
+    const isUnverifiedLegacyLicense = IS_ENTERPRISE_EDITION &&
+        licenseValid &&
+        !isUnlicensedTrial &&
+        licenseVerification === "unverified";
+    const graceEndsAtText = useMemo(() => {
+        if (!graceEndsAt) {
+            return null;
+        }
+        const endsAt = OneUptimeDate.fromString(graceEndsAt);
+        if (Number.isNaN(endsAt.getTime())) {
+            return null;
+        }
+        return endsAt.toLocaleDateString();
+    }, [graceEndsAt]);
+    // Whole days left in the trial or the grace period, rounded up; never negative.
+    const graceDaysLeft = useMemo(() => {
+        if (!graceEndsAt) {
+            return null;
+        }
+        const endsAt = OneUptimeDate.fromString(graceEndsAt);
+        if (Number.isNaN(endsAt.getTime())) {
+            return null;
+        }
+        return Math.max(0, Math.ceil((endsAt.getTime() - Date.now()) / DAY_IN_MS));
+    }, [graceEndsAt]);
+    const graceDaysLeftText = graceDaysLeft === null
+        ? ""
+        : `${graceDaysLeft} ${graceDaysLeft === 1 ? "day" : "days"} left`;
     const licenseExpiresAtText = useMemo(() => {
         if (!(globalConfig === null || globalConfig === void 0 ? void 0 : globalConfig.enterpriseLicenseExpiresAt)) {
             return null;
@@ -381,16 +495,6 @@ const EditionLabel = (props) => {
         }
         return currentUserCount;
     }, [isSeatLimitEnforced, enforcedSeatsInUse, currentUserCount]);
-    const userCountUpdatedAtText = useMemo(() => {
-        if (!(globalConfig === null || globalConfig === void 0 ? void 0 : globalConfig.enterpriseLicenseUserCountUpdatedAt)) {
-            return null;
-        }
-        const reportedAt = OneUptimeDate.fromString(globalConfig.enterpriseLicenseUserCountUpdatedAt);
-        if (Number.isNaN(reportedAt.getTime())) {
-            return null;
-        }
-        return reportedAt.toLocaleString();
-    }, [globalConfig === null || globalConfig === void 0 ? void 0 : globalConfig.enterpriseLicenseUserCountUpdatedAt]);
     const isUserLimitBreached = useMemo(() => {
         if (!licenseValid) {
             return false;
@@ -433,41 +537,6 @@ const EditionLabel = (props) => {
         }
         return rounded;
     }, [rawUserUsagePercent]);
-    /*
-     * The displayed percent clamped to 0-100. Drives the bar width and
-     * aria-valuenow, so the fill can never overflow its track and aria-valuenow
-     * can never exceed aria-valuemax. Derived from the displayed percent rather
-     * than the raw ratio so the fill always agrees with the caption beneath it:
-     * 599/600 reads 99% and fills to 99%, not to a visually full 100%. The true
-     * figure for a breach goes in aria-valuetext.
-     */
-    const seatUsageBarPercent = useMemo(() => {
-        if (seatUsageDisplayPercent === null) {
-            return 0;
-        }
-        return Math.min(100, Math.max(0, seatUsageDisplayPercent));
-    }, [seatUsageDisplayPercent]);
-    const seatsRemaining = useMemo(() => {
-        if (typeof userLimit !== "number" || userLimit <= 0) {
-            return null;
-        }
-        if (typeof effectiveUserCount !== "number") {
-            return null;
-        }
-        return userLimit - effectiveUserCount;
-    }, [userLimit, effectiveUserCount]);
-    const seatsRemainingText = useMemo(() => {
-        if (typeof seatsRemaining !== "number") {
-            return "";
-        }
-        if (seatsRemaining > 0) {
-            return `${seatsRemaining.toLocaleString()} ${seatsRemaining === 1 ? "seat" : "seats"} remaining`;
-        }
-        if (seatsRemaining === 0) {
-            return "No seats remaining";
-        }
-        return `${Math.abs(seatsRemaining).toLocaleString()} over limit`;
-    }, [seatsRemaining]);
     /*
      * Total and mutually exclusive. isUserLimitBreached is tested first, so
      * reaching the >= 90 test structurally guarantees the limit is not exceeded
@@ -504,89 +573,39 @@ const EditionLabel = (props) => {
         canAddMoreUsers,
         seatUsageDisplayPercent,
     ]);
-    /*
-     * Copy containing apostrophes lives in string literals rather than JSX text,
-     * because react/no-unescaped-entities is enforced in this repo.
-     */
-    const seatAdvisoryTitle = useMemo(() => {
-        if (seatTone === "breached") {
-            const over = Math.abs(seatsRemaining || 0);
-            /*
-             * Reachable now that "every seat taken" is a breach in its own right:
-             * an installation sitting exactly on its limit is not "0 users over".
-             */
-            if (over === 0) {
-                return "Every licensed seat is in use";
-            }
-            return over === 1
-                ? "1 user over your licensed seats"
-                : `${over.toLocaleString()} users over your licensed seats`;
+    const editionName = useMemo(() => {
+        if (!IS_ENTERPRISE_EDITION) {
+            return "Community Edition";
         }
-        if (seatTone === "approaching") {
-            if (seatsRemaining === 0) {
-                return "Every licensed seat is in use";
-            }
-            return seatsRemaining === 1
-                ? "Only 1 seat left on your license"
-                : `Only ${(seatsRemaining || 0).toLocaleString()} seats left on your license`;
-        }
-        return "";
-    }, [seatTone, seatsRemaining]);
-    const seatAdvisoryBody = useMemo(() => {
-        const limitText = (userLimit || 0).toLocaleString();
-        const inUse = `${(effectiveUserCount || 0).toLocaleString()} of ${limitText}`;
-        if (seatTone === "breached") {
-            /*
-             * When the limit is being enforced this is no longer advice, it is a
-             * description of what the installation is already doing to invitations
-             * and signups - so it says so plainly rather than suggesting an upgrade
-             * as though adding people were still an option.
-             */
-            if (isSeatLimitEnforced && !canAddMoreUsers) {
-                return `This installation is using ${inUse} licensed seats. New users cannot be invited, signed up or provisioned until a seat is freed up or the license is expanded.`;
-            }
-            return `This installation is using ${inUse} licensed seats. Expand your license so it covers everyone on the platform.`;
+        if (isConfigLoading) {
+            return "Enterprise Edition (Checking...)";
         }
-        if (seatTone === "approaching") {
-            return `You're using ${inUse} licensed seats. Anyone you add beyond ${limitText} puts this installation over its licensed limit — if more people are joining, it's worth talking to OneUptime about expanding now.`;
+        if (isUnlicensedTrial) {
+            return graceDaysLeftText
+                ? `Enterprise Edition (Trial, ${graceDaysLeftText})`
+                : "Enterprise Edition (Trial)";
         }
-        return "";
-    }, [
-        seatTone,
-        effectiveUserCount,
-        userLimit,
-        isSeatLimitEnforced,
-        canAddMoreUsers,
-    ]);
-    const seatUsageAriaValueText = useMemo(() => {
-        if (typeof seatUsageDisplayPercent !== "number") {
-            return "";
+        if (isExpiredGrace) {
+            return "Enterprise Edition (License Expired, Grace Period)";
         }
-        if (seatTone === "breached") {
-            return `${seatUsageDisplayPercent}% of licensed seats in use — ${seatAdvisoryTitle}`;
+        if (licenseValid) {
+            return "Enterprise Edition";
+        }
+        if (licenseStatus === "expired") {
+            return "Enterprise Edition (License Expired)";
         }
-        if (typeof seatsRemaining === "number") {
-            return `${seatUsageDisplayPercent}% of licensed seats in use — ${seatsRemainingText}`;
+        if (licenseStatus === "invalid") {
+            return "Enterprise Edition (License Invalid)";
         }
-        return `${seatUsageDisplayPercent}% of licensed seats in use`;
+        return "Enterprise Edition (License Required)";
     }, [
-        seatUsageDisplayPercent,
-        seatTone,
-        seatAdvisoryTitle,
-        seatsRemaining,
-        seatsRemainingText,
+        isConfigLoading,
+        licenseValid,
+        licenseStatus,
+        isUnlicensedTrial,
+        isExpiredGrace,
+        graceDaysLeftText,
     ]);
-    const editionName = useMemo(() => {
-        if (!IS_ENTERPRISE_EDITION) {
-            return "Community Edition";
-        }
-        if (isConfigLoading) {
-            return "Enterprise Edition (Checking...)";
-        }
-        return licenseValid
-            ? "Enterprise Edition"
-            : "Enterprise Edition (License Required)";
-    }, [isConfigLoading, licenseValid]);
     const indicatorColor = useMemo(() => {
         if (!IS_ENTERPRISE_EDITION) {
             return "bg-indigo-400";
@@ -600,19 +619,31 @@ const EditionLabel = (props) => {
         if (seatTone === "breached") {
             return "bg-red-500";
         }
-        if (seatTone === "approaching") {
+        if (seatTone === "approaching" || licenseStatus === "grace") {
             return "bg-amber-500";
         }
         return "bg-emerald-500";
-    }, [isConfigLoading, licenseValid, seatTone]);
+    }, [isConfigLoading, licenseValid, seatTone, licenseStatus]);
     const ctaLabel = useMemo(() => {
         if (!IS_ENTERPRISE_EDITION) {
-            return "Learn more";
+            return showEditionMismatchNotice ? "Action needed" : "Learn more";
         }
         if (isConfigLoading) {
             return "Checking";
         }
+        if (isUnlicensedTrial) {
+            return "Add license";
+        }
+        if (isExpiredGrace) {
+            return "Renew license";
+        }
         if (!licenseValid) {
+            if (licenseStatus === "expired") {
+                return "Renew license";
+            }
+            if (licenseStatus === "invalid") {
+                return "Fix license";
+            }
             return "Validate license";
         }
         if (seatTone === "breached") {
@@ -622,24 +653,40 @@ const EditionLabel = (props) => {
             return "Seats nearly full";
         }
         return "View details";
-    }, [isConfigLoading, licenseValid, seatTone]);
+    }, [
+        isConfigLoading,
+        licenseValid,
+        licenseStatus,
+        seatTone,
+        isUnlicensedTrial,
+        isExpiredGrace,
+        showEditionMismatchNotice,
+    ]);
     const pillTone = useMemo(() => {
-        if (!IS_ENTERPRISE_EDITION || isConfigLoading) {
+        if (!IS_ENTERPRISE_EDITION) {
+            return showEditionMismatchNotice ? "warning" : "normal";
+        }
+        if (isConfigLoading) {
             return "normal";
         }
         if (seatTone === "breached" ||
-            (!licenseValid && Boolean(globalConfig === null || globalConfig === void 0 ? void 0 : globalConfig.enterpriseLicenseKey))) {
+            (!licenseValid &&
+                (Boolean(globalConfig === null || globalConfig === void 0 ? void 0 : globalConfig.enterpriseLicenseKey) ||
+                    licenseStatus === "expired" ||
+                    licenseStatus === "invalid"))) {
             return "alerted";
         }
-        if (seatTone === "approaching") {
+        if (seatTone === "approaching" || licenseStatus === "grace") {
             return "warning";
         }
         return "normal";
     }, [
         isConfigLoading,
         licenseValid,
+        licenseStatus,
         seatTone,
         globalConfig === null || globalConfig === void 0 ? void 0 : globalConfig.enterpriseLicenseKey,
+        showEditionMismatchNotice,
     ]);
     const modalDescription = useMemo(() => {
         if (!IS_ENTERPRISE_EDITION) {
@@ -648,33 +695,17 @@ const EditionLabel = (props) => {
         if (isConfigLoading) {
             return "Checking your license with OneUptime...";
         }
+        if (isUnlicensedTrial) {
+            return "No license is installed yet. Enterprise features are available during the trial.";
+        }
+        if (isExpiredGrace) {
+            return "Your license has expired. Renew it before the grace period ends.";
+        }
         if (!licenseValid) {
-            return "Validate your license key to activate Enterprise Edition.";
+            return "Add a valid license to turn single sign-on, SCIM and audit logging back on and make enterprise configuration editable.";
         }
         return "License, version, seat usage, and the instances covered by this key.";
-    }, [isConfigLoading, licenseValid]);
-    /*
-     * The per-instance counts only exceed the unique total when someone actually
-     * appears on more than one instance, and the component cannot know whether
-     * they do — it receives per-instance counts and the unique total separately.
-     * So the summation is stated as a possibility, and is dropped entirely when
-     * there is no unique total to compare against. It names the unique user count
-     * rather than "the total above", which would be ambiguous next to a hero
-     * reading "119 / 120 seats".
-     */
-    const instanceOverlapText = useMemo(() => {
-        const countingRule = `Seats are counted uniquely across all ${licenseInstances.length} instances that share this license — the same person on multiple instances uses one seat.`;
-        if (typeof currentUserCount !== "number") {
-            return countingRule;
-        }
-        return `${countingRule} Per-instance counts can therefore add up to more than the ${currentUserCount.toLocaleString()} unique ${currentUserCount === 1 ? "user" : "users"} counted above.`;
-    }, [licenseInstances.length, currentUserCount]);
-    const licenseKeyHelperText = useMemo(() => {
-        if (isChangingLicense) {
-            return "Enter the new enterprise license key and validate it to replace the current one. Your existing license stays active until the new key is validated.";
-        }
-        return "You have installed Enterprise Edition of OneUptime. You need to validate your license key. Need a license key? Contact our sales team at";
-    }, [isChangingLicense]);
+    }, [isConfigLoading, licenseValid, isUnlicensedTrial, isExpiredGrace]);
     const communityFeatures = useMemo(() => {
         return [
             "Full OneUptime platform with incident response, status pages, and workflow automation.",
@@ -694,30 +725,16 @@ const EditionLabel = (props) => {
             "Audit logs and many more enterprise-focused features.",
         ];
     }, []);
+    /*
+     * The license manager clears its own messages (and abandons a license
+     * change in progress) when the dialog opens or closes.
+     */
     const openDialog = () => {
         setIsDialogOpen(true);
-        setValidationError("");
-        setSuccessMessage("");
         void fetchGlobalConfig();
     };
     const closeDialog = () => {
         setIsDialogOpen(false);
-        setValidationError("");
-        setSuccessMessage("");
-        setIsChangingLicense(false);
-    };
-    const handleStartChangingLicense = () => {
-        setIsChangingLicense(true);
-        setValidationError("");
-        setSuccessMessage("");
-        setLicenseKeyInput("");
-        licenseInputEditedRef.current = true;
-    };
-    const handleCancelChangingLicense = () => {
-        setIsChangingLicense(false);
-        setValidationError("");
-        licenseInputEditedRef.current = false;
-        setLicenseKeyInput((globalConfig === null || globalConfig === void 0 ? void 0 : globalConfig.enterpriseLicenseKey) || "");
     };
     const handlePrimaryAction = () => {
         if (typeof window !== "undefined") {
@@ -725,134 +742,11 @@ const EditionLabel = (props) => {
         }
         closeDialog();
     };
-    const buildSeatExpansionMailto = () => {
-        const subject = seatTone === "breached"
-            ? "Expand OneUptime license - over seat limit"
-            : "Expand OneUptime license - nearly out of seats";
-        const body = [
-            "Hi OneUptime,",
-            "",
-            "We would like to expand the seat count on our enterprise license.",
-            "",
-            `Company: ${(globalConfig === null || globalConfig === void 0 ? void 0 : globalConfig.enterpriseCompanyName) || "Not specified"}`,
-            `Seats in use: ${(effectiveUserCount || 0).toLocaleString()} of ${(userLimit || 0).toLocaleString()}`,
-            `Instances on this license: ${licenseInstances.length}`,
-        ].join("\n");
-        return `${SALES_MAILTO_URL}?subject=${encodeURIComponent(subject)}&body=${encodeURIComponent(body)}`;
-    };
-    const handleRequestMoreSeats = () => {
-        if (typeof window !== "undefined") {
-            window.location.href = buildSeatExpansionMailto();
-        }
-    };
-    const runLicenseValidation = useCallback(async (key, setLoading) => {
-        const trimmedKey = key.trim();
-        if (!trimmedKey) {
-            setValidationError("Please enter a license key before validating.");
-            setSuccessMessage("");
-            return;
-        }
-        setValidationError("");
-        setSuccessMessage("");
-        setLoading(true);
-        try {
-            const validationUrl = URL.fromURL(APP_API_URL).addRoute(new Route("/global-config/license"));
-            const response = await API.fetch({
-                method: HTTPMethod.POST,
-                url: validationUrl,
-                data: {
-                    licenseKey: trimmedKey,
-                },
-            });
-            if (!response.isSuccess()) {
-                throw response;
-            }
-            const payload = response.data;
-            licenseInputEditedRef.current = false;
-            setLicenseKeyInput(payload["licenseKey"] || trimmedKey);
-            setSuccessMessage("License validated successfully.");
-            setIsChangingLicense(false);
-            await fetchGlobalConfig();
-        }
-        catch (err) {
-            setValidationError(API.getFriendlyMessage(err));
-        }
-        finally {
-            setLoading(false);
-        }
-    }, [fetchGlobalConfig]);
-    const handleValidateClick = () => {
-        if (isValidating) {
-            return;
-        }
-        void runLicenseValidation(licenseKeyInput, setIsValidating);
-    };
-    /*
-     * Re-ask oneuptime.com about the license this installation already holds.
-     *
-     * The seat limit and the expiry are changed on oneuptime.com, and the daily
-     * report job is what normally carries them here - so without this, an
-     * administrator who has just bought seats waits up to a day before the
-     * installation stops refusing invitations. Deliberately sends no key: the
-     * server refreshes the stored one.
-     */
-    const handleRefreshLicense = useCallback(() => {
-        if (isRefreshingLicense) {
-            return;
-        }
-        const refresh = async () => {
-            setValidationError("");
-            setSuccessMessage("");
-            setIsRefreshingLicense(true);
-            try {
-                const refreshUrl = URL.fromURL(APP_API_URL).addRoute(new Route("/global-config/license/refresh"));
-                const response = await API.fetch({
-                    method: HTTPMethod.POST,
-                    url: refreshUrl,
-                });
-                if (!response.isSuccess()) {
-                    throw response;
-                }
-                applySeatEnforcementPayload(response.data);
-                setSuccessMessage("License refreshed from OneUptime.");
-                /*
-                 * The POST already returned the new terms, but the modal renders from
-                 * what the GET reports - re-reading keeps one source of truth for the
-                 * whole dialog instead of two that can disagree.
-                 */
-                await fetchGlobalConfig();
-            }
-            catch (err) {
-                setValidationError(API.getFriendlyMessage(err));
-            }
-            finally {
-                setIsRefreshingLicense(false);
-            }
-        };
-        void refresh();
-    }, [isRefreshingLicense, fetchGlobalConfig, applySeatEnforcementPayload]);
     const handleRetryFetch = () => {
         if (!isConfigLoading) {
             void fetchGlobalConfig();
         }
     };
-    /*
-     * Activating, replacing and refreshing the license are master-admin actions:
-     * the license is instance-wide, and its seat limit is what UserService
-     * enforces against, so being able to rewrite it is being able to raise the
-     * ceiling on the whole installation. The server enforces this
-     * (MasterAdminAuthorization on both POSTs); hiding the controls here just
-     * stops everyone else being offered a button that can only fail.
-     *
-     * False for a signed-out visitor, which is what keeps the license key input
-     * off the login page where this same component renders the edition pill.
-     */
-    const canManageLicense = useMemo(() => {
-        return Boolean(UserUtil.isMasterAdmin());
-    }, []);
-    const showLicenseKeyInput = IS_ENTERPRISE_EDITION &&
-        canManageLicense &&
-        (!licenseValid || isChangingLicense);
     /*
      * Someone who cannot fix the license still needs to be told why the
      * installation is behaving like an unlicensed one, and who can fix it.
@@ -862,12 +756,18 @@ const EditionLabel = (props) => {
         !isConfigLoading &&
         !licenseValid &&
         !canManageLicense;
-    const shouldShowEnterpriseValidationButton = showLicenseKeyInput;
     /*
      * Collapses the !configError && !isConfigLoading && licenseValid chain that
-     * gates the stat strip, the seat card and the instances card.
+     * gates the stat strip here, and the license manager's seat card, instances
+     * card and footer actions.
      */
-    const showLicenseDetails = IS_ENTERPRISE_EDITION && !configError && !isConfigLoading && licenseValid;
+    const showLicenseDetails = IS_ENTERPRISE_EDITION &&
+        !configError &&
+        !isConfigLoading &&
+        licenseValid &&
+        !isUnlicensedTrial;
+    // Status notices describe the license, so they wait for it to load.
+    const showLicenseStatusNotices = IS_ENTERPRISE_EDITION && !configError && !isConfigLoading;
     /*
      * The evaluation notice rides along with the license details: it is only
      * meaningful once there is a valid license to describe, and it sits at the
@@ -879,7 +779,10 @@ const EditionLabel = (props) => {
      * admin sees "Evaluation" without opening the modal.
      */
     const showEvaluationTag = IS_ENTERPRISE_EDITION && licenseValid && isEvaluationLicense;
-    const showEnterpriseFeatureList = IS_ENTERPRISE_EDITION && !configError && !isConfigLoading && !licenseValid;
+    const showEnterpriseFeatureList = IS_ENTERPRISE_EDITION &&
+        !configError &&
+        !isConfigLoading &&
+        (!licenseValid || isUnlicensedTrial);
     /*
      * Gated on neither edition nor licenseValid: which build you run, and
      * whether a newer one exists, is a property of the installation rather than
@@ -888,32 +791,6 @@ const EditionLabel = (props) => {
      * anonymous visitor on the login page falls out here.
      */
     const showVersionCard = !configError && !isConfigLoading && Boolean(currentVersion);
-    /*
-     * GlobalConfigAPI returns userLimit and currentUserCount to anonymous callers
-     * because the same route serves the signed-out login page, and gates only
-     * licenseKey, token, instances and instanceId on isAuthenticatedUser. Gate
-     * the sales ask on a field the server does redact, so a signed-out visitor is
-     * never shown an administrator-targeted CTA.
-     */
-    const canSeeLicenseAdmin = Boolean(globalConfig === null || globalConfig === void 0 ? void 0 : globalConfig.enterpriseLicenseKey);
-    const modalSubmitButtonText = IS_ENTERPRISE_EDITION
-        ? shouldShowEnterpriseValidationButton
-            ? "Validate License"
-            : undefined
-        : "Talk to Sales";
-    const modalOnSubmit = IS_ENTERPRISE_EDITION
-        ? shouldShowEnterpriseValidationButton
-            ? handleValidateClick
-            : undefined
-        : handlePrimaryAction;
-    const modalIsLoading = IS_ENTERPRISE_EDITION && shouldShowEnterpriseValidationButton
-        ? isValidating
-        : false;
-    const modalDisableSubmitButton = IS_ENTERPRISE_EDITION
-        ? shouldShowEnterpriseValidationButton
-            ? !licenseKeyInput.trim() || isValidating || isConfigLoading
-            : undefined
-        : false;
     const modalRightElement = showLicenseDetails ? (React.createElement("span", { className: `inline-flex items-center gap-1.5 rounded-full border px-2.5 py-0.5 text-xs font-medium ${seatTone === "breached"
             ? "border-red-200 bg-red-50 text-red-700"
             : seatTone === "approaching"
@@ -928,10 +805,9 @@ const EditionLabel = (props) => {
             ? "Seat limit exceeded"
             : seatTone === "approaching"
                 ? "Seats nearly full"
-                : "License active")) : undefined;
-    const modalLeftFooterElement = showLicenseDetails && !isChangingLicense && canManageLicense ? (React.createElement("div", { className: "flex flex-wrap items-center gap-2" },
-        React.createElement(Button, { title: "Refresh license", icon: IconProp.Refresh, buttonStyle: ButtonStyleType.NORMAL, onClick: handleRefreshLicense, isLoading: isRefreshingLicense, disabled: isRefreshingLicense || isConfigLoading, tooltip: "Fetch the latest seat limit and expiry for this license from OneUptime.", dataTestId: "refresh-enterprise-license", className: "!mt-0 md:!ml-0" }),
-        React.createElement(Button, { title: "Change license key", icon: IconProp.Edit, buttonStyle: ButtonStyleType.NORMAL, onClick: handleStartChangingLicense, disabled: isRefreshingLicense, className: "!mt-0 md:!ml-0" }))) : undefined;
+                : isExpiredGrace
+                    ? "Grace period"
+                    : "License active")) : undefined;
     const pillClassName = pillTone === "alerted"
         ? "group inline-flex items-center gap-2 rounded-full border border-red-200 bg-red-50 px-3 py-1 text-xs font-medium text-red-700 shadow-sm transition hover:border-red-300 hover:bg-red-100 focus:outline-none focus-visible:ring-2 focus-visible:ring-red-400"
         : pillTone === "warning"
@@ -997,19 +873,123 @@ const EditionLabel = (props) => {
                     React.createElement("a", { href: `${SALES_MAILTO_URL}?subject=${encodeURIComponent("Moving our OneUptime evaluation to production")}`, className: "inline-flex items-center gap-1.5 rounded-md bg-violet-600 px-3 py-1.5 text-xs font-medium text-white shadow-sm transition hover:bg-violet-700 focus:outline-none focus-visible:ring-2 focus-visible:ring-violet-400 focus-visible:ring-offset-2" },
                         React.createElement(Icon, { icon: IconProp.Email, className: "h-3 w-3 shrink-0 text-white" }),
                         "Talk to sales about production")))))) : null;
-    return (React.createElement(React.Fragment, null,
-        React.createElement("button", { type: "button", onClick: openDialog, className: `${pillClassName} ${props.className ? props.className : ""}`, "aria-label": `${editionName}${showEvaluationTag ? ", Evaluation" : ""}, ${ctaLabel}` },
-            pillTone !== "normal" && (React.createElement(Icon, { icon: pillTone === "alerted"
-                    ? IconProp.Alert
-                    : IconProp.ExclaimationCircle, className: `h-3 w-3 ${pillTone === "alerted" ? "text-red-600" : "text-amber-600"}` })),
-            React.createElement("span", { className: `h-2 w-2 rounded-full transition group-hover:scale-110 ${indicatorColor}` }),
-            React.createElement("span", { className: "tracking-wide" }, editionName),
-            showEvaluationTag && (React.createElement("span", { className: "inline-flex items-center rounded-full bg-violet-100 px-1.5 py-0.5 text-[10px] font-semibold uppercase tracking-wide text-violet-700" }, "Evaluation")),
-            React.createElement("span", { className: pillCtaTextClassName }, ctaLabel)),
-        isDialogOpen && (React.createElement(Modal, { title: editionName, description: modalDescription, rightElement: modalRightElement, submitButtonText: modalSubmitButtonText, closeButtonText: "Close", onClose: closeDialog, onSubmit: modalOnSubmit, modalWidth: ModalWidth.Medium, isLoading: modalIsLoading, disableSubmitButton: modalDisableSubmitButton, isBodyLoading: IS_ENTERPRISE_EDITION ? isConfigLoading : false, leftFooterElement: modalLeftFooterElement },
+    /*
+     * What the license status means for this installation, in plain words.
+     * Before the lapse (the trial, the grace period) every branch warns what
+     * will stop and when (LICENSE_LAPSE_CONSEQUENCES); after it, what has
+     * stopped (LICENSE_LAPSED_STATE).
+     */
+    const licenseStatusNoticeElement = (() => {
+        if (!showLicenseStatusNotices) {
+            return null;
+        }
+        if (isUnlicensedTrial) {
+            return (React.createElement("section", { role: "status", "data-testid": "enterprise-license-trial-notice", className: "rounded-xl border border-amber-200 bg-amber-50 p-5" },
+                React.createElement("h4", { className: "text-sm font-semibold text-amber-900" }, graceDaysLeftText
+                    ? `Enterprise Edition trial: ${graceDaysLeftText}`
+                    : "Enterprise Edition trial"),
+                React.createElement("p", { className: "mt-1 text-xs leading-relaxed text-amber-800" }, `${hasLicenseInstalled
+                    ? "A license is installed, but this installation cannot tell whether it is still current, so it is treating this as an unlicensed install."
+                    : "No Enterprise license is installed."} Enterprise features stay fully available${graceEndsAtText ? ` until ${graceEndsAtText}` : ""}, counted from the first time this installation ran the Enterprise Edition. ${TRIAL_ENFORCEMENT_SUMMARY}`),
+                hasLicenseInstalled && licenseMessage && (React.createElement("p", { "data-testid": "enterprise-license-status-message", className: "mt-2 text-xs leading-relaxed text-amber-800" }, licenseMessage)),
+                React.createElement("p", { className: "mt-2 text-xs leading-relaxed text-amber-800" }, canManageLicense
+                    ? hasLicenseInstalled
+                        ? "Re-activate the license below before the trial ends, or let the daily license sync fetch its expiry from OneUptime, to keep single sign-on, SCIM and audit logging running and enterprise configuration editable."
+                        : "Add a license below before the trial ends to keep single sign-on, SCIM and audit logging running and enterprise configuration editable."
+                    : hasLicenseInstalled
+                        ? "Ask a master admin of this installation to re-activate the license."
+                        : "Ask a master admin of this installation to add a license.")));
+        }
+        if (isExpiredGrace) {
+            return (React.createElement("section", { role: "status", "data-testid": "enterprise-license-grace-notice", className: "rounded-xl border border-amber-200 bg-amber-50 p-5" },
+                React.createElement("h4", { className: "text-sm font-semibold text-amber-900" }, graceEndsAtText
+                    ? `License expired, grace period until ${graceEndsAtText}`
+                    : "License expired, grace period"),
+                React.createElement("p", { className: "mt-1 text-xs leading-relaxed text-amber-800" }, `The Enterprise license expired${licenseExpiresAtText ? ` on ${licenseExpiresAtText}` : ""}. Every enterprise feature keeps working until the grace period ends${graceDaysLeftText ? ` (${graceDaysLeftText})` : ""}. ${GRACE_ENFORCEMENT_SUMMARY}`),
+                React.createElement("p", { className: "mt-2 text-xs leading-relaxed text-amber-800" }, canManageLicense
+                    ? "Renew the license with OneUptime, then refresh it here."
+                    : "Ask a master admin of this installation to renew the license.")));
+        }
+        if (!licenseValid) {
+            const title = licenseStatus === "expired"
+                ? "License expired"
+                : licenseStatus === "invalid"
+                    ? "License not valid"
+                    : "No valid license";
+            const reason = licenseStatus === "expired"
+                ? `The Enterprise license expired${licenseExpiresAtText ? ` on ${licenseExpiresAtText}` : ""} and its grace period is over.`
+                : licenseStatus === "invalid"
+                    ? licenseMessage ||
+                        "The stored license could not be verified. Validate the license again."
+                    : hasLicenseInstalled
+                        ? "A license is installed, but this installation cannot confirm that it is current, so nothing is licensed by it."
+                        : "This installation has no valid Enterprise license.";
+            /*
+             * Whatever the license client said, for EVERY status and not only
+             * "invalid".
+             *
+             * The reason above is this component's own reading of a status code, and
+             * a status code cannot carry a diagnosis: "missing" is both "no license"
+             * and "a license whose expiry was never recorded, re-activate it or let
+             * the daily sync fetch it" (the license client's
+             * classifyUnverifiedWithoutExpiry). The second one is the whole point of
+             * the message field, and it used to be rendered nowhere but here in the
+             * "invalid" branch - which that state deliberately no longer is.
+             *
+             * Skipped when the reason already IS the message ("invalid"), so a master
+             * admin is never shown the same sentence twice.
+             */
+            const explanation = licenseMessage && licenseMessage !== reason ? licenseMessage : "";
+            return (React.createElement("section", { role: "alert", "data-testid": "enterprise-license-required-notice", className: "rounded-xl border border-red-200 bg-red-50 p-5" },
+                React.createElement("h4", { className: "text-sm font-semibold text-red-900" }, title),
+                explanation && (React.createElement("p", { "data-testid": "enterprise-license-status-message", className: "mt-1 text-xs leading-relaxed text-red-800" }, explanation)),
+                React.createElement("p", { className: "mt-1 text-xs leading-relaxed text-red-800" }, `${reason} ${LICENSE_LAPSED_STATE}`)));
+        }
+        if (isUnverifiedLegacyLicense && canManageLicense) {
+            return (React.createElement("section", { "data-testid": "enterprise-license-unverified-notice", className: "rounded-xl border border-gray-200 bg-gray-50 p-4" },
+                React.createElement("h4", { className: "text-sm font-semibold text-gray-900" }, "Legacy license"),
+                React.createElement("p", { className: "mt-1 text-xs leading-relaxed text-gray-600" }, "This license was issued before OneUptime signed its licenses, so this installation cannot verify it offline. It keeps working; refreshing the license replaces it with a signed one once OneUptime issues them.")));
+        }
+        return null;
+    })();
+    /*
+     * What the license manager needs to know, all of it read from the license
+     * GET (see LicenseManager.ts).
+     */
+    const licenseSnapshot = {
+        payload: licensePayload,
+        isLoading: isConfigLoading,
+        loadError: configError,
+        canManageLicense: canManageLicense,
+        licenseValid: licenseValid,
+        isUnlicensedTrial: isUnlicensedTrial,
+        showLicenseDetails: showLicenseDetails,
+        companyName: (globalConfig === null || globalConfig === void 0 ? void 0 : globalConfig.enterpriseCompanyName) || "",
+        licenseKey: (globalConfig === null || globalConfig === void 0 ? void 0 : globalConfig.enterpriseLicenseKey) || "",
+        userLimit: userLimit,
+        currentUserCount: currentUserCount,
+        effectiveUserCount: effectiveUserCount,
+        isSeatLimitEnforced: isSeatLimitEnforced,
+        canAddMoreUsers: canAddMoreUsers,
+        seatTone: seatTone,
+        seatUsageDisplayPercent: seatUsageDisplayPercent,
+        currentVersion: currentVersion,
+        latestVersion: latestVersion,
+        hasComparableVersion: hasComparableVersion,
+    };
+    /*
+     * The dialog, with whatever the license manager adds to it: its messages,
+     * the seat usage and instance cards, the activation input and the footer
+     * actions. With no manager (the Community Edition, the login page) the
+     * parts are empty and the dialog shows the license status only.
+     */
+    const renderDialog = (parts) => {
+        if (!isDialogOpen) {
+            return React.createElement(React.Fragment, null);
+        }
+        return (React.createElement(Modal, { title: editionName, description: modalDescription, rightElement: modalRightElement, submitButtonText: IS_ENTERPRISE_EDITION ? parts.submitButtonText : "Talk to Sales", closeButtonText: "Close", onClose: closeDialog, onSubmit: IS_ENTERPRISE_EDITION ? parts.onSubmit : handlePrimaryAction, modalWidth: ModalWidth.Medium, isLoading: IS_ENTERPRISE_EDITION ? Boolean(parts.isSubmitting) : false, disableSubmitButton: IS_ENTERPRISE_EDITION ? parts.disableSubmitButton : false, isBodyLoading: IS_ENTERPRISE_EDITION ? isConfigLoading : false, leftFooterElement: IS_ENTERPRISE_EDITION ? parts.leftFooterElement : undefined },
             React.createElement("div", { className: "space-y-4 text-sm text-gray-600" }, IS_ENTERPRISE_EDITION ? (React.createElement(React.Fragment, null,
-                !configError && successMessage && (React.createElement(Alert, { type: AlertType.SUCCESS, title: successMessage })),
-                !configError && validationError && !showLicenseKeyInput && (React.createElement(Alert, { type: AlertType.DANGER, title: validationError })),
+                parts.messages,
                 configError && (React.createElement("div", { className: "rounded-xl border border-red-200 bg-red-50 p-4" },
                     React.createElement("div", { className: "flex items-start gap-2.5" },
                         React.createElement(Icon, { icon: IconProp.Alert, className: "mt-0.5 h-4 w-4 shrink-0 text-red-600" }),
@@ -1019,6 +999,7 @@ const EditionLabel = (props) => {
                             React.createElement("div", { className: "mt-3" },
                                 React.createElement(Button, { title: "Try again", buttonStyle: ButtonStyleType.DANGER, onClick: handleRetryFetch, isLoading: isConfigLoading, className: "!mt-0 md:!ml-0" })))))),
                 evaluationNoticeElement,
+                licenseStatusNoticeElement,
                 showLicenseDetails && (React.createElement("dl", { className: "grid grid-cols-1 gap-px overflow-hidden rounded-xl border border-gray-200 bg-gray-200 sm:grid-cols-2" },
                     React.createElement("div", { className: "min-w-0 bg-white px-4 py-3" },
                         React.createElement("dt", { className: "text-[11px] font-medium uppercase tracking-wide text-gray-500" }, "Licensed to"),
@@ -1027,187 +1008,28 @@ const EditionLabel = (props) => {
                         React.createElement("dt", { className: "text-[11px] font-medium uppercase tracking-wide text-gray-500" }, "Expires"),
                         React.createElement("dd", { className: "mt-1 text-sm font-medium tabular-nums text-gray-900" }, licenseExpiresAtText || "—")))),
                 versionCardElement,
-                showLicenseDetails && (React.createElement("section", { "aria-labelledby": "edition-seats-heading", className: "rounded-xl border border-gray-200 bg-white p-5" },
-                    React.createElement("div", { className: "flex items-start justify-between gap-4" },
-                        React.createElement("div", { className: "min-w-0" },
-                            React.createElement("h4", { id: "edition-seats-heading", className: "text-sm font-semibold text-gray-900" }, "Licensed seats"),
-                            React.createElement("p", { className: "mt-0.5 text-xs text-gray-500" }, "Unique users across every instance on this license.")),
-                        seatTone !== "healthy" && (React.createElement("span", { className: `inline-flex shrink-0 items-center rounded-full px-2 py-0.5 text-xs font-medium ${seatTone === "breached"
-                                ? "bg-red-100 text-red-700"
-                                : "bg-amber-100 text-amber-800"}` }, seatTone === "breached"
-                            ? "Limit exceeded"
-                            : "Nearly full"))),
-                    React.createElement("div", { className: "mt-4 flex items-end justify-between gap-4" },
-                        React.createElement("p", { className: "flex items-baseline gap-1.5" },
-                            React.createElement("span", { className: `text-3xl font-semibold leading-none tabular-nums ${typeof effectiveUserCount !== "number"
-                                    ? "text-gray-300"
-                                    : seatTone === "breached"
-                                        ? "text-red-700"
-                                        : "text-gray-900"}` }, typeof effectiveUserCount === "number"
-                                ? effectiveUserCount.toLocaleString()
-                                : "—"),
-                            React.createElement("span", { className: "text-sm tabular-nums text-gray-500" },
-                                " / ",
-                                typeof userLimit === "number" && userLimit > 0
-                                    ? `${userLimit.toLocaleString()} seats`
-                                    : "unlimited")),
-                        typeof seatsRemaining === "number" && (React.createElement("p", { className: `text-xs font-medium tabular-nums ${seatTone === "breached"
-                                ? "text-red-700"
-                                : seatTone === "approaching"
-                                    ? "text-amber-700"
-                                    : "text-gray-500"}` }, seatsRemainingText))),
-                    typeof seatUsageDisplayPercent === "number" && (React.createElement("div", { className: "mt-2.5" },
-                        React.createElement("div", { className: "h-2.5 w-full overflow-hidden rounded-full bg-gray-100", role: "progressbar", "aria-label": "Licensed seat usage", "aria-valuenow": seatUsageBarPercent, "aria-valuemin": 0, "aria-valuemax": 100, "aria-valuetext": seatUsageAriaValueText },
-                            React.createElement("div", { className: `h-full rounded-full transition-all duration-300 ease-out ${seatTone === "breached"
-                                    ? "bg-red-500"
-                                    : seatTone === "approaching"
-                                        ? "bg-amber-500"
-                                        : "bg-emerald-500"}`, style: { width: `${seatUsageBarPercent}%` } })),
-                        React.createElement("p", { className: "mt-1.5 text-xs tabular-nums text-gray-500" },
-                            seatUsageDisplayPercent,
-                            "% of licensed seats in use"))),
-                    seatTone !== "healthy" && canSeeLicenseAdmin && (React.createElement("div", { role: seatTone === "breached" ? "alert" : "status", className: `mt-4 rounded-lg border p-3.5 ${seatTone === "breached"
-                            ? "border-red-200 bg-red-50"
-                            : "border-amber-200 bg-amber-50"}` },
-                        React.createElement("div", { className: "flex items-start gap-2.5" },
-                            React.createElement(Icon, { icon: seatTone === "breached"
-                                    ? IconProp.Alert
-                                    : IconProp.ExclaimationCircle, className: `mt-0.5 h-4 w-4 shrink-0 ${seatTone === "breached"
-                                    ? "text-red-600"
-                                    : "text-amber-600"}` }),
-                            React.createElement("div", { className: "min-w-0 flex-1" },
-                                React.createElement("h5", { className: `text-sm font-semibold ${seatTone === "breached"
-                                        ? "text-red-900"
-                                        : "text-amber-900"}` }, seatAdvisoryTitle),
-                                React.createElement("p", { className: `mt-1 text-xs leading-relaxed ${seatTone === "breached"
-                                        ? "text-red-800"
-                                        : "text-amber-800"}` }, seatAdvisoryBody),
-                                React.createElement("div", { className: "mt-3 flex flex-wrap items-center gap-x-3 gap-y-2" },
-                                    React.createElement(Button, { title: seatTone === "breached"
-                                            ? "Expand your license"
-                                            : "Request more seats", icon: IconProp.Email, buttonStyle: seatTone === "breached"
-                                            ? ButtonStyleType.DANGER
-                                            : ButtonStyleType.PRIMARY, onClick: handleRequestMoreSeats, className: "!mt-0 md:!ml-0" }),
-                                    React.createElement("span", { className: `text-[11px] ${seatTone === "breached"
-                                            ? "text-red-700"
-                                            : "text-amber-700"}` },
-                                        "Or email",
-                                        " ",
-                                        React.createElement("a", { href: SALES_MAILTO_URL, className: `font-medium underline ${seatTone === "breached"
-                                                ? "text-red-800 hover:text-red-900"
-                                                : "text-amber-900 hover:text-amber-950"}` }, SALES_EMAIL),
-                                        " ",
-                                        "directly.")))))),
-                    React.createElement("div", { className: "mt-4 border-t border-gray-100 pt-3" },
-                        React.createElement("p", { className: "text-xs text-gray-500" },
-                            userCountUpdatedAtText
-                                ? `Last reported to OneUptime on ${userCountUpdatedAtText}.`
-                                : "User count has not been reported to OneUptime yet. The first report will be sent within 24 hours.",
-                            isSeatLimitEnforced && (React.createElement(React.Fragment, null,
-                                " ",
-                                "This installation enforces the seat limit: users above it cannot be invited, signed up or provisioned.")),
-                            isSeatLimitEnforced && canManageLicense && (React.createElement(React.Fragment, null,
-                                " ",
-                                "Bought more seats? Use \"Refresh license\" below to apply the new limit without waiting for the next daily report.")))))),
-                showLicenseDetails && licenseInstances.length > 0 && (React.createElement("section", { "aria-labelledby": "edition-instances-heading", className: "rounded-xl border border-gray-200 bg-white p-5" },
-                    React.createElement("div", { className: "flex items-center justify-between gap-3" },
-                        React.createElement("h4", { id: "edition-instances-heading", className: "text-sm font-semibold text-gray-900" }, "Instances on this license"),
-                        React.createElement("span", { className: "shrink-0 rounded-full bg-gray-100 px-2 py-0.5 text-xs font-medium tabular-nums text-gray-600" },
-                            licenseInstances.length,
-                            " ",
-                            licenseInstances.length === 1
-                                ? "instance"
-                                : "instances")),
-                    React.createElement("p", { className: "mt-1 text-xs leading-relaxed text-gray-500" }, "Use the same license key on every instance you deploy (staging, production, and so on). Each instance reports its usage and the version it runs once a day."),
-                    licenseInstances.length > 1 && (React.createElement("p", { className: "mt-1.5 text-xs leading-relaxed text-gray-500" }, instanceOverlapText)),
-                    React.createElement("ul", { className: "mt-3 divide-y divide-gray-100 overflow-hidden rounded-lg border border-gray-200" }, licenseInstances.map((instance, index) => {
-                        const isThisInstance = Boolean(thisInstanceId) &&
-                            instance.instanceId === thisInstanceId;
-                        /*
-                         * The list is a snapshot of what each instance last
-                         * reported, refreshed at most once a day. For the
-                         * instance serving this page the server just told us
-                         * what it is running right now, so prefer that —
-                         * otherwise this row contradicts the "This
-                         * installation" card above it for up to a day after
-                         * an upgrade. hasComparableVersion keeps a dev build
-                         * from rendering "vunknown".
-                         */
-                        const displayVersion = isThisInstance && hasComparableVersion
-                            ? currentVersion
-                            : instance.version;
-                        /*
-                         * Per-instance, so an admin can see which of their
-                         * deployments are lagging rather than only the one
-                         * they happen to be signed in to.
-                         */
-                        const isInstanceOutdated = VersionUtil.isUpdateAvailable({
-                            currentVersion: displayVersion,
-                            latestVersion: latestVersion,
-                        });
-                        return (React.createElement("li", { key: instance.instanceId || index, className: "flex items-center justify-between gap-4 bg-white px-3 py-2.5 transition-colors hover:bg-gray-50" },
-                            React.createElement("div", { className: "min-w-0 flex-1" },
-                                React.createElement("div", { className: "flex min-w-0 flex-wrap items-center gap-x-2 gap-y-1" },
-                                    React.createElement("span", { className: "min-w-0 max-w-full truncate text-sm font-medium text-gray-900", title: instance.host || "Unknown host" }, instance.host || "Unknown host"),
-                                    isThisInstance && (React.createElement("span", { className: "shrink-0 rounded-full bg-indigo-50 px-1.5 py-0.5 text-[10px] font-medium uppercase tracking-wide text-indigo-700" }, "This instance")),
-                                    displayVersion && (React.createElement("span", { className: `shrink-0 rounded-full px-1.5 py-0.5 text-[10px] font-medium tabular-nums ${isInstanceOutdated
-                                            ? "bg-amber-50 text-amber-800"
-                                            : "bg-gray-100 text-gray-600"}`, title: isInstanceOutdated
-                                            ? `Running v${displayVersion}. OneUptime v${latestVersion} is available.`
-                                            : `Running v${displayVersion}.` },
-                                        "v",
-                                        displayVersion))),
-                                React.createElement("p", { className: "mt-0.5 truncate text-xs text-gray-500" },
-                                    formatInstanceReportedAt(instance.lastReportedAt),
-                                    isInstanceOutdated
-                                        ? " Update available."
-                                        : "")),
-                            React.createElement("div", { className: "flex shrink-0 items-baseline justify-end gap-1" }, typeof instance.userCount === "number" ? (React.createElement(React.Fragment, null,
-                                React.createElement("span", { className: "text-sm font-medium tabular-nums text-gray-900" }, instance.userCount.toLocaleString()),
-                                React.createElement("span", { className: "text-xs text-gray-500" }, instance.userCount === 1
-                                    ? "user"
-                                    : "users"))) : (React.createElement("span", { className: "text-sm text-gray-400" }, "\u2014")))));
-                    })))),
-                !configError &&
-                    !isConfigLoading &&
-                    !licenseValid &&
-                    (globalConfig === null || globalConfig === void 0 ? void 0 : globalConfig.enterpriseLicenseKey) && (React.createElement("div", { className: "rounded-xl border border-red-200 bg-red-50 p-4" },
-                    React.createElement("p", { className: "text-sm font-semibold text-red-900" }, "License validation required"),
-                    React.createElement("p", { className: "mt-1 text-xs leading-relaxed text-red-800" }, "The stored license information could not be verified. Please validate the license key again."))),
+                parts.usage,
                 showLicenseAdminRequiredNotice && (React.createElement("section", { className: "rounded-xl border border-amber-200 bg-amber-50 p-5" },
                     React.createElement("h4", { className: "text-sm font-semibold text-amber-900" }, "A master admin has to activate this license"),
                     React.createElement("p", { className: "mt-1 text-xs leading-relaxed text-amber-800" }, "This installation does not have a valid enterprise license. Ask a master admin of this OneUptime installation to enter or refresh the license key from this dialog."))),
-                !configError && showLicenseKeyInput && (React.createElement("section", { className: "rounded-xl border border-gray-200 bg-white p-5" },
-                    React.createElement("div", { className: "flex items-start justify-between gap-4" },
-                        React.createElement("div", { className: "min-w-0" },
-                            React.createElement("label", { htmlFor: "enterprise-license-key", className: "text-sm font-semibold text-gray-900" }, isChangingLicense
-                                ? "New license key"
-                                : "License key"),
-                            React.createElement("p", { className: "mt-0.5 text-xs leading-relaxed text-gray-500" },
-                                licenseKeyHelperText,
-                                !isChangingLicense && (React.createElement(React.Fragment, null,
-                                    " ",
-                                    React.createElement("a", { href: SALES_MAILTO_URL, className: "font-medium text-indigo-600 hover:text-indigo-700" }, SALES_EMAIL),
-                                    ".")))),
-                        isChangingLicense && (React.createElement(Button, { title: "Cancel", buttonStyle: ButtonStyleType.NORMAL, onClick: handleCancelChangingLicense, className: "!mt-0 shrink-0 md:!ml-0" }))),
-                    React.createElement("div", { className: "mt-3" },
-                        React.createElement(Input, { id: "enterprise-license-key", value: licenseKeyInput, onChange: (value) => {
-                                setLicenseKeyInput(value);
-                                licenseInputEditedRef.current = true;
-                            }, placeholder: "Enter your enterprise license key", disableSpellCheck: true })),
-                    validationError && (React.createElement("div", { className: "mt-3" },
-                        React.createElement(Alert, { type: AlertType.DANGER, title: validationError }))))),
+                parts.activation,
                 showEnterpriseFeatureList && (React.createElement("section", { "aria-labelledby": "edition-features-heading", className: "rounded-xl border border-indigo-100 bg-gradient-to-br from-indigo-50 via-white to-white p-5" },
                     React.createElement("h4", { id: "edition-features-heading", className: "text-sm font-semibold text-indigo-900" }, "What your license unlocks"),
-                    React.createElement("p", { className: "mt-0.5 text-xs text-indigo-700" }, canManageLicense
-                        ? "Validate your key above to turn these on immediately."
-                        : "A master admin can activate the license to turn these on."),
+                    React.createElement("p", { className: "mt-0.5 text-xs text-indigo-700" },
+                        canManageLicense
+                            ? "A valid license that includes them keeps single sign-on, SCIM provisioning and audit logging running, enterprise configuration (SSO, SCIM, team compliance, audit log settings) editable and the enterprise admin dashboards unlocked."
+                            : "A master admin can add the license to keep single sign-on, SCIM provisioning and audit logging running and enterprise configuration editable.",
+                        " ",
+                        "Core monitoring never depends on it."),
                     React.createElement("ul", { className: "mt-3 grid grid-cols-1 gap-2 sm:grid-cols-2" }, enterpriseFeatures.map((feature, index) => {
                         return (React.createElement("li", { key: index, className: "flex items-start gap-2 rounded-lg border border-gray-100 bg-white px-3 py-2.5" },
                             React.createElement("span", { className: "mt-0.5 flex h-4 w-4 shrink-0 items-center justify-center rounded-full bg-indigo-50" },
                                 React.createElement(Icon, { icon: IconProp.Check, className: "h-3 w-3 text-indigo-600" })),
                             React.createElement("span", { className: "text-xs leading-snug text-gray-700" }, feature)));
                     })))))) : (React.createElement(React.Fragment, null,
+                showEditionMismatchNotice && (React.createElement("section", { role: "alert", "data-testid": "enterprise-edition-image-mismatch", className: "rounded-xl border border-amber-200 bg-amber-50 p-5" },
+                    React.createElement("h4", { className: "text-sm font-semibold text-amber-900" }, "This is the Community Edition image"),
+                    React.createElement("p", { className: "mt-1 text-xs leading-relaxed text-amber-800" }, "IS_ENTERPRISE_EDITION is set but this is the Community Edition image \u2014 switch to the enterprise image (the enterprise-* image tags) to use Enterprise Edition features. Until then they are off; everything else keeps working."))),
                 versionCardElement,
                 React.createElement("p", null, "You are running the Community Edition of OneUptime. Here is a quick comparison to help you decide if Enterprise is the right fit for your team."),
                 React.createElement("div", { className: "grid gap-4 md:grid-cols-2" },
@@ -1227,7 +1049,25 @@ const EditionLabel = (props) => {
                                 React.createElement("span", { className: "leading-snug" }, feature)));
                         })),
                         React.createElement("p", { className: "mt-3 text-xs text-indigo-700" }, "Everything in Community plus white-glove onboarding, enterprise SLAs, and a partner dedicated to your reliability goals."))),
-                React.createElement("p", { className: "text-xs text-gray-500" }, "Ready to unlock enterprise capabilities? Click \"Talk to Sales\" to start the conversation."))))))));
+                React.createElement("p", { className: "text-xs text-gray-500" }, "Ready to unlock enterprise capabilities? Click \"Talk to Sales\" to start the conversation."))))));
+    };
+    /*
+     * Kept after every hook: oneuptime.com (billing enabled) bounds seats and
+     * plans through subscriptions and shows no edition pill at all.
+     */
+    if (BILLING_ENABLED) {
+        return React.createElement(React.Fragment, null);
+    }
+    return (React.createElement(React.Fragment, null,
+        React.createElement("button", { type: "button", onClick: openDialog, className: `${pillClassName} ${props.className ? props.className : ""}`, "aria-label": `${editionName}${showEvaluationTag ? ", Evaluation" : ""}, ${ctaLabel}` },
+            pillTone !== "normal" && (React.createElement(Icon, { icon: pillTone === "alerted"
+                    ? IconProp.Alert
+                    : IconProp.ExclaimationCircle, className: `h-3 w-3 ${pillTone === "alerted" ? "text-red-600" : "text-amber-600"}` })),
+            React.createElement("span", { className: `h-2 w-2 rounded-full transition group-hover:scale-110 ${indicatorColor}` }),
+            React.createElement("span", { className: "tracking-wide" }, editionName),
+            showEvaluationTag && (React.createElement("span", { className: "inline-flex items-center rounded-full bg-violet-100 px-1.5 py-0.5 text-[10px] font-semibold uppercase tracking-wide text-violet-700" }, "Evaluation")),
+            React.createElement("span", { className: pillCtaTextClassName }, ctaLabel)),
+        LicenseManager ? (React.createElement(LicenseManager, { license: licenseSnapshot, isDialogOpen: isDialogOpen, reloadLicense: fetchGlobalConfig, applySeatEnforcement: applySeatEnforcementPayload, renderDialog: renderDialog })) : (renderDialog({}))));
 };
 export default EditionLabel;
 //# sourceMappingURL=EditionLabel.js.map