@oneuptime/common 13.0.8 → 14.0.0

package/build/dist/Server/Utils/EnterpriseLicense/EnterpriseLicenseSeatUtil.js

@@ -1,145 +0,0 @@
-import BadDataException from "../../../Types/Exception/BadDataException";
-import ObjectID from "../../../Types/ObjectID";
-import EnterpriseLicenseSeatsUtil from "../../../Utils/EnterpriseLicense/EnterpriseLicenseSeats";
-import { IsBillingEnabled, IsEnterpriseEdition } from "../../EnvironmentConfig";
-import GlobalConfigService from "../../Services/GlobalConfigService";
-/*
- * Enforcement of the enterprise license seat limit on a self-hosted
- * installation.
- *
- * The limit itself is set on oneuptime.com and mirrored into GlobalConfig by
- * the daily report job (and by validating or refreshing the license by hand).
- * This is the half that acts on it: it is the only thing standing between a
- * customer's license terms and an unbounded User table.
- *
- * The seat arithmetic lives in Common/Utils/EnterpriseLicense/EnterpriseLicenseSeats
- * as a pure function; everything here is about reading the license state and
- * deciding whether the installation is one that enforces at all.
- */
-export default class EnterpriseLicenseSeatUtil {
-    /*
-     * Whether this process is an installation whose users are governed by an
-     * enterprise license at all.
-     *
-     * Community Edition has no license and no limit. oneuptime.com runs with
-     * billing enabled and bounds seats through subscriptions instead
-     * (TeamMemberService.onBeforeCreate) — enforcing a license limit there as
-     * well would be a second, wrong answer to the same question.
-     */
-    static isSeatLimitEnforceable() {
-        return IsEnterpriseEdition && !IsBillingEnabled;
-    }
-    /*
-     * Seat usage derived from an already-loaded GlobalConfig row. Kept separate
-     * from the loading so a caller that has the row in hand — the license
-     * endpoint, which has just read it — does not read it a second time.
-     *
-     * A null config (a fresh installation whose GlobalConfig has not been seeded
-     * yet) yields no limit, which is the same answer as a licence with no seat
-     * limit set.
-     */
-    static getSeatUsageFromGlobalConfig(data) {
-        const config = data.config;
-        const instances = Array.isArray(config === null || config === void 0 ? void 0 : config.enterpriseLicenseInstances)
-            ? config.enterpriseLicenseInstances
-            : [];
-        return EnterpriseLicenseSeatsUtil.getSeatUsage({
-            userLimit: config === null || config === void 0 ? void 0 : config.enterpriseLicenseUserLimit,
-            localUserCount: data.localUserCount,
-            aggregatedUserCount: config === null || config === void 0 ? void 0 : config.enterpriseLicenseCurrentUserCount,
-            instances: instances,
-            thisInstanceId: (config === null || config === void 0 ? void 0 : config.instanceId) ? config.instanceId.toString() : null,
-        });
-    }
-    /*
-     * Seat usage for this installation right now, or null on an installation
-     * that does not enforce a seat limit.
-     *
-     * Null rather than an unenforced SeatUsage so callers cannot accidentally
-     * present Community Edition with a seat report it has no business having,
-     * and so the user count is never queried there.
-     */
-    static async getSeatUsage(data) {
-        if (!this.isSeatLimitEnforceable()) {
-            return null;
-        }
-        const config = await GlobalConfigService.findOneById({
-            id: ObjectID.getZeroObjectID(),
-            select: {
-                enterpriseLicenseUserLimit: true,
-                enterpriseLicenseCurrentUserCount: true,
-                enterpriseLicenseInstances: true,
-                instanceId: true,
-            },
-            props: {
-                isRoot: true,
-            },
-        });
-        return this.getSeatUsageForLoadedGlobalConfig({
-            config: config,
-            getLocalUserCount: data.getLocalUserCount,
-        });
-    }
-    /*
-     * The same answer as getSeatUsage, for a caller that has already loaded the
-     * GlobalConfig row (the license endpoint reads it to build its response, and
-     * reading it twice per request would be silly).
-     *
-     * The row must have been selected with enterpriseLicenseUserLimit,
-     * enterpriseLicenseCurrentUserCount, enterpriseLicenseInstances and
-     * instanceId, or the numbers here are a fiction built from missing columns.
-     */
-    static async getSeatUsageForLoadedGlobalConfig(data) {
-        if (!this.isSeatLimitEnforceable()) {
-            return null;
-        }
-        /*
-         * The seat limit is read before the users are counted, and the count is
-         * skipped entirely when there is no limit. An unlimited licence is the
-         * common case on a large installation, and that is exactly the
-         * installation where counting the User table on every user creation would
-         * be worth avoiding.
-         */
-        const withoutLocalUsers = this.getSeatUsageFromGlobalConfig({
-            config: data.config,
-            localUserCount: 0,
-        });
-        if (!withoutLocalUsers.isEnforced) {
-            return withoutLocalUsers;
-        }
-        return this.getSeatUsageFromGlobalConfig({
-            config: data.config,
-            localUserCount: await data.getLocalUserCount(),
-        });
-    }
-    /*
-     * Throws if this installation cannot take another user.
-     *
-     * Called from UserService.onBeforeCreate, which every path that creates a
-     * user goes through — team invitations, self-service signup, SSO and OIDC
-     * just-in-time provisioning, SCIM, and the Admin Dashboard. Enforcing on the
-     * User row rather than on the invitation is what makes that true: a seat is
-     * consumed by a person existing on the installation, not by the particular
-     * door they came through.
-     *
-     * It is also why this deliberately does NOT exempt root/internal writes.
-     * Team invitations create the invited user with `isRoot: true`, so an
-     * isRoot escape hatch here would exempt the single most important path.
-     */
-    static async assertSeatAvailableForNewUser(data) {
-        const seatUsage = await this.getSeatUsage({
-            getLocalUserCount: data.getLocalUserCount,
-        });
-        if (!seatUsage || !seatUsage.isEnforced) {
-            return;
-        }
-        if (seatUsage.hasSeatForNewUser) {
-            return;
-        }
-        throw new BadDataException(EnterpriseLicenseSeatsUtil.getSeatLimitReachedMessage({
-            seatsInUse: seatUsage.seatsInUse,
-            userLimit: seatUsage.userLimit,
-        }));
-    }
-}
-//# sourceMappingURL=EnterpriseLicenseSeatUtil.js.map

package/build/dist/Server/Utils/EnterpriseLicense/EnterpriseLicenseSeatUtil.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"EnterpriseLicenseSeatUtil.js","sourceRoot":"","sources":["../../../../../Server/Utils/EnterpriseLicense/EnterpriseLicenseSeatUtil.ts"],"names":[],"mappings":"AAEA,OAAO,gBAAgB,MAAM,2CAA2C,CAAC;AACzE,OAAO,QAAQ,MAAM,yBAAyB,CAAC;AAC/C,OAAO,0BAEN,MAAM,yDAAyD,CAAC;AACjE,OAAO,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AAChF,OAAO,mBAAmB,MAAM,oCAAoC,CAAC;AAWrE;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,OAAO,OAAO,yBAAyB;IAC5C;;;;;;;;OAQG;IACI,MAAM,CAAC,sBAAsB;QAClC,OAAO,mBAAmB,IAAI,CAAC,gBAAgB,CAAC;IAClD,CAAC;IAED;;;;;;;;OAQG;IACI,MAAM,CAAC,4BAA4B,CAAC,IAG1C;QACC,MAAM,MAAM,GAAwB,IAAI,CAAC,MAAM,CAAC;QAEhD,MAAM,SAAS,GAA4C,KAAK,CAAC,OAAO,CACtE,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,0BAA0B,CACnC;YACC,CAAC,CAAC,MAAM,CAAC,0BAA0B;YACnC,CAAC,CAAC,EAAE,CAAC;QAEP,OAAO,0BAA0B,CAAC,YAAY,CAAC;YAC7C,SAAS,EAAE,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,0BAA0B;YAC7C,cAAc,EAAE,IAAI,CAAC,cAAc;YACnC,mBAAmB,EAAE,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,iCAAiC;YAC9D,SAAS,EAAE,SAAS;YACpB,cAAc,EAAE,CAAA,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,UAAU,EAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,IAAI;SACzE,CAAC,CAAC;IACL,CAAC;IAED;;;;;;;OAOG;IACI,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,IAEhC;QACC,IAAI,CAAC,IAAI,CAAC,sBAAsB,EAAE,EAAE,CAAC;YACnC,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,MAAM,GAAwB,MAAM,mBAAmB,CAAC,WAAW,CAAC;YACxE,EAAE,EAAE,QAAQ,CAAC,eAAe,EAAE;YAC9B,MAAM,EAAE;gBACN,0BAA0B,EAAE,IAAI;gBAChC,iCAAiC,EAAE,IAAI;gBACvC,0BAA0B,EAAE,IAAI;gBAChC,UAAU,EAAE,IAAI;aACjB;YACD,KAAK,EAAE;gBACL,MAAM,EAAE,IAAI;aACb;SACF,CAAC,CAAC;QAEH,OAAO,IAAI,CAAC,iCAAiC,CAAC;YAC5C,MAAM,EAAE,MAAM;YACd,iBAAiB,EAAE,IAAI,CAAC,iBAAiB;SAC1C,CAAC,CAAC;IACL,CAAC;IAED;;;;;;;;OAQG;IACI,MAAM,CAAC,KAAK,CAAC,iCAAiC,CAAC,IAGrD;QACC,IAAI,CAAC,IAAI,CAAC,sBAAsB,EAAE,EAAE,CAAC;YACnC,OAAO,IAAI,CAAC;QACd,CAAC;QAED;;;;;;WAMG;QACH,MAAM,iBAAiB,GAAc,IAAI,CAAC,4BAA4B,CAAC;YACrE,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,cAAc,EAAE,CAAC;SAClB,CAAC,CAAC;QAEH,IAAI,CAAC,iBAAiB,CAAC,UAAU,EAAE,CAAC;YAClC,OAAO,iBAAiB,CAAC;QAC3B,CAAC;QAED,OAAO,IAAI,CAAC,4BAA4B,CAAC;YACvC,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,cAAc,EAAE,MAAM,IAAI,CAAC,iBAAiB,EAAE;SAC/C,CAAC,CAAC;IACL,CAAC;IAED;;;;;;;;;;;;;OAaG;IACI,MAAM,CAAC,KAAK,CAAC,6BAA6B,CAAC,IAEjD;QACC,MAAM,SAAS,GAAqB,MAAM,IAAI,CAAC,YAAY,CAAC;YAC1D,iBAAiB,EAAE,IAAI,CAAC,iBAAiB;SAC1C,CAAC,CAAC;QAEH,IAAI,CAAC,SAAS,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,CAAC;YACxC,OAAO;QACT,CAAC;QAED,IAAI,SAAS,CAAC,iBAAiB,EAAE,CAAC;YAChC,OAAO;QACT,CAAC;QAED,MAAM,IAAI,gBAAgB,CACxB,0BAA0B,CAAC,0BAA0B,CAAC;YACpD,UAAU,EAAE,SAAS,CAAC,UAAU;YAChC,SAAS,EAAE,SAAS,CAAC,SAAmB;SACzC,CAAC,CACH,CAAC;IACJ,CAAC;CACF"}

package/build/dist/Server/Utils/InstanceHealth/PostgresHealth.js

@@ -1,194 +0,0 @@
-import PostgresAppInstance from "../../Infrastructure/PostgresDatabase";
-import logger from "../Logger";
-/*
- * Postgres refuses all writes once transaction-ID age reaches 2^31. Utilization
- * is expressed against that hard ceiling rather than autovacuum_freeze_max_age,
- * which is only the point where autovacuum is forced to intervene and is
- * routinely exceeded on a healthy instance.
- */
-export const POSTGRES_WRAPAROUND_CEILING = 2147483648;
-const BYTES_PER_GB = 1024 * 1024 * 1024;
-export function gigabytesToBytes(gigabytes) {
-    return gigabytes * BYTES_PER_GB;
-}
-function toNumberOrNull(value) {
-    if (value === null || value === undefined || value === "") {
-        return null;
-    }
-    const parsed = Number(value);
-    return Number.isFinite(parsed) ? parsed : null;
-}
-/*
- * Every probe is guarded on its own so a permission error or a feature missing
- * on this Postgres version (pg_replication_slots columns differ across major
- * versions) leaves that one field null instead of blanking the whole snapshot.
- * A null field means "not evaluated"; callers must not read it as healthy.
- */
-export async function getPostgresHealthSnapshot() {
-    var _a, _b, _c, _d, _e, _f, _g, _h, _j;
-    const dataSource = PostgresAppInstance.getDataSource();
-    if (!dataSource) {
-        return null;
-    }
-    const snapshot = {
-        databaseSizeInBytes: null,
-        walSizeInBytes: null,
-        maxConnections: null,
-        usableConnections: null,
-        clientBackends: null,
-        connectionUtilizationPercent: null,
-        transactionIdAge: null,
-        multiXactIdAge: null,
-        maxTransactionIdAge: null,
-        wraparoundUtilizationPercent: null,
-        replicationSlots: null,
-        isInRecovery: false,
-    };
-    try {
-        const rows = await dataSource.query("SELECT pg_is_in_recovery() AS in_recovery");
-        snapshot.isInRecovery = Boolean((_a = rows === null || rows === void 0 ? void 0 : rows[0]) === null || _a === void 0 ? void 0 : _a.in_recovery);
-    }
-    catch (error) {
-        logger.debug("InstanceHealth: postgres recovery-state probe failed");
-        logger.debug(error);
-    }
-    try {
-        const rows = await dataSource.query("SELECT pg_database_size(current_database()) AS size");
-        snapshot.databaseSizeInBytes = toNumberOrNull((_b = rows === null || rows === void 0 ? void 0 : rows[0]) === null || _b === void 0 ? void 0 : _b.size);
-    }
-    catch (error) {
-        logger.debug("InstanceHealth: pg_database_size probe failed");
-        logger.debug(error);
-    }
-    /*
-     * WAL is measured separately because it lives on the same volume but outside
-     * pg_database_size, and an abandoned replication slot parks tens of gigabytes
-     * there. Without it the storage check can read comfortably under threshold
-     * while the volume is full and writes are already failing. pg_ls_waldir()
-     * needs superuser or pg_monitor, so this stays best-effort.
-     */
-    try {
-        const rows = await dataSource.query("SELECT COALESCE(sum(size), 0) AS size FROM pg_ls_waldir()");
-        snapshot.walSizeInBytes = toNumberOrNull((_c = rows === null || rows === void 0 ? void 0 : rows[0]) === null || _c === void 0 ? void 0 : _c.size);
-    }
-    catch (error) {
-        logger.debug("InstanceHealth: pg_ls_waldir probe failed");
-        logger.debug(error);
-    }
-    /*
-     * Backends come from pg_stat_database.numbackends rather than counting
-     * pg_stat_activity rows. pg_stat_activity nulls backend_type (and state, and
-     * client_addr) for backends belonging to other roles unless the caller is a
-     * superuser or holds pg_read_all_stats/pg_monitor, so a filtered count sees
-     * only OneUptime's own connections on a managed or hardened cluster. That
-     * failure is silent — no error, no null — so it would read as healthy while
-     * another tenant exhausts the cluster, and would actively resolve an alert
-     * raised earlier from a privileged role. numbackends is not masked.
-     *
-     * The denominator subtracts the slots reserved for superusers (and, from PG
-     * 16, for pg_use_reserved_connections): ordinary clients are refused once
-     * those are all that remain, so measuring against raw max_connections
-     * understates saturation and can put the critical tier out of reach entirely
-     * on a small max_connections.
-     */
-    try {
-        const rows = await dataSource.query(`SELECT
-         (SELECT setting::int FROM pg_settings WHERE name = 'max_connections') AS max_connections,
-         COALESCE((SELECT setting::int FROM pg_settings WHERE name = 'superuser_reserved_connections'), 0)
-           + COALESCE((SELECT setting::int FROM pg_settings WHERE name = 'reserved_connections'), 0)
-           AS reserved_connections,
-         (SELECT COALESCE(sum(numbackends), 0) FROM pg_stat_database) AS backends`);
-        const maxConnections = toNumberOrNull((_d = rows === null || rows === void 0 ? void 0 : rows[0]) === null || _d === void 0 ? void 0 : _d.max_connections);
-        const reservedConnections = (_f = toNumberOrNull((_e = rows === null || rows === void 0 ? void 0 : rows[0]) === null || _e === void 0 ? void 0 : _e.reserved_connections)) !== null && _f !== void 0 ? _f : 0;
-        const clientBackends = toNumberOrNull((_g = rows === null || rows === void 0 ? void 0 : rows[0]) === null || _g === void 0 ? void 0 : _g.backends);
-        const usableConnections = maxConnections === null
-            ? null
-            : Math.max(1, maxConnections - reservedConnections);
-        snapshot.maxConnections = maxConnections;
-        snapshot.usableConnections = usableConnections;
-        snapshot.clientBackends = clientBackends;
-        snapshot.connectionUtilizationPercent =
-            usableConnections !== null && clientBackends !== null
-                ? (clientBackends / usableConnections) * 100
-                : null;
-    }
-    catch (error) {
-        logger.debug("InstanceHealth: postgres connection probe failed");
-        logger.debug(error);
-    }
-    /*
-     * Multixact age is an independent counter with the same 2^31 ceiling and the
-     * same consequence — Postgres stops accepting commands to avoid wraparound
-     * data loss. An FK-heavy or SELECT ... FOR SHARE workload can exhaust it while
-     * ordinary XID age looks fine, so the check reports whichever is worse.
-     */
-    try {
-        const rows = await dataSource.query(`SELECT
-         max(age(datfrozenxid)) AS max_xid_age,
-         max(mxid_age(datminmxid)) AS max_mxid_age
-       FROM pg_database`);
-        const transactionIdAge = toNumberOrNull((_h = rows === null || rows === void 0 ? void 0 : rows[0]) === null || _h === void 0 ? void 0 : _h.max_xid_age);
-        const multiXactIdAge = toNumberOrNull((_j = rows === null || rows === void 0 ? void 0 : rows[0]) === null || _j === void 0 ? void 0 : _j.max_mxid_age);
-        const maxTransactionIdAge = transactionIdAge === null && multiXactIdAge === null
-            ? null
-            : Math.max(transactionIdAge !== null && transactionIdAge !== void 0 ? transactionIdAge : 0, multiXactIdAge !== null && multiXactIdAge !== void 0 ? multiXactIdAge : 0);
-        snapshot.transactionIdAge = transactionIdAge;
-        snapshot.multiXactIdAge = multiXactIdAge;
-        snapshot.maxTransactionIdAge = maxTransactionIdAge;
-        snapshot.wraparoundUtilizationPercent =
-            maxTransactionIdAge !== null
-                ? (maxTransactionIdAge / POSTGRES_WRAPAROUND_CEILING) * 100
-                : null;
-    }
-    catch (error) {
-        logger.debug("InstanceHealth: postgres wraparound probe failed");
-        logger.debug(error);
-    }
-    /*
-     * wal_status arrived in Postgres 13. On an older external database the column
-     * simply does not exist and the whole statement errors, which would silence
-     * the slot check entirely — even though restart_lsn and pg_wal_lsn_diff are
-     * available there and the retained-WAL half of the check works fine. So the
-     * version-specific column is dropped on a retry rather than taking the rest
-     * of the probe down with it.
-     */
-    const buildSlotQuery = (withWalStatus) => {
-        return `SELECT
-         slot_name,
-         slot_type,
-         active,
-         ${withWalStatus ? "COALESCE(wal_status, 'unknown')" : "'unknown'"} AS wal_status,
-         CASE WHEN pg_is_in_recovery() THEN NULL
-              ELSE pg_wal_lsn_diff(pg_current_wal_lsn(), restart_lsn) END AS retained_bytes
-       FROM pg_replication_slots
-       ORDER BY slot_name ASC`;
-    };
-    let slotRows = null;
-    try {
-        slotRows = await dataSource.query(buildSlotQuery(true));
-    }
-    catch (error) {
-        logger.debug("InstanceHealth: pg_replication_slots probe failed, retrying without wal_status");
-        logger.debug(error);
-        try {
-            slotRows = await dataSource.query(buildSlotQuery(false));
-        }
-        catch (retryError) {
-            logger.debug("InstanceHealth: pg_replication_slots probe failed");
-            logger.debug(retryError);
-        }
-    }
-    if (slotRows) {
-        snapshot.replicationSlots = slotRows.map((row) => {
-            return {
-                slotName: String(row.slot_name || ""),
-                slotType: String(row.slot_type || "unknown"),
-                isActive: Boolean(row.active),
-                walStatus: String(row.wal_status || "unknown"),
-                retainedWalInBytes: toNumberOrNull(row.retained_bytes),
-            };
-        });
-    }
-    return snapshot;
-}
-//# sourceMappingURL=PostgresHealth.js.map

package/build/dist/Server/Utils/InstanceHealth/PostgresHealth.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"PostgresHealth.js","sourceRoot":"","sources":["../../../../../Server/Utils/InstanceHealth/PostgresHealth.ts"],"names":[],"mappings":"AAAA,OAAO,mBAEN,MAAM,uCAAuC,CAAC;AAC/C,OAAO,MAAM,MAAM,WAAW,CAAC;AAE/B;;;;;GAKG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAW,UAAU,CAAC;AAE9D,MAAM,YAAY,GAAW,IAAI,GAAG,IAAI,GAAG,IAAI,CAAC;AAsChD,MAAM,UAAU,gBAAgB,CAAC,SAAiB;IAChD,OAAO,SAAS,GAAG,YAAY,CAAC;AAClC,CAAC;AAED,SAAS,cAAc,CAAC,KAAc;IACpC,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,EAAE,EAAE,CAAC;QAC1D,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,MAAM,GAAW,MAAM,CAAC,KAAK,CAAC,CAAC;IACrC,OAAO,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;AACjD,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,yBAAyB;;IAC7C,MAAM,UAAU,GAA0B,mBAAmB,CAAC,aAAa,EAAE,CAAC;IAE9E,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,QAAQ,GAA2B;QACvC,mBAAmB,EAAE,IAAI;QACzB,cAAc,EAAE,IAAI;QACpB,cAAc,EAAE,IAAI;QACpB,iBAAiB,EAAE,IAAI;QACvB,cAAc,EAAE,IAAI;QACpB,4BAA4B,EAAE,IAAI;QAClC,gBAAgB,EAAE,IAAI;QACtB,cAAc,EAAE,IAAI;QACpB,mBAAmB,EAAE,IAAI;QACzB,4BAA4B,EAAE,IAAI;QAClC,gBAAgB,EAAE,IAAI;QACtB,YAAY,EAAE,KAAK;KACpB,CAAC;IAEF,IAAI,CAAC;QACH,MAAM,IAAI,GAAoC,MAAM,UAAU,CAAC,KAAK,CAClE,2CAA2C,CAC5C,CAAC;QACF,QAAQ,CAAC,YAAY,GAAG,OAAO,CAAC,MAAA,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAG,CAAC,CAAC,0CAAE,WAAW,CAAC,CAAC;IAC1D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,KAAK,CAAC,sDAAsD,CAAC,CAAC;QACrE,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACtB,CAAC;IAED,IAAI,CAAC;QACH,MAAM,IAAI,GAA4B,MAAM,UAAU,CAAC,KAAK,CAC1D,qDAAqD,CACtD,CAAC;QACF,QAAQ,CAAC,mBAAmB,GAAG,cAAc,CAAC,MAAA,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAG,CAAC,CAAC,0CAAE,IAAI,CAAC,CAAC;IACjE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,KAAK,CAAC,+CAA+C,CAAC,CAAC;QAC9D,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACtB,CAAC;IAED;;;;;;OAMG;IACH,IAAI,CAAC;QACH,MAAM,IAAI,GAA4B,MAAM,UAAU,CAAC,KAAK,CAC1D,2DAA2D,CAC5D,CAAC;QACF,QAAQ,CAAC,cAAc,GAAG,cAAc,CAAC,MAAA,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAG,CAAC,CAAC,0CAAE,IAAI,CAAC,CAAC;IAC5D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,KAAK,CAAC,2CAA2C,CAAC,CAAC;QAC1D,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACtB,CAAC;IAED;;;;;;;;;;;;;;;OAeG;IACH,IAAI,CAAC;QACH,MAAM,IAAI,GAIL,MAAM,UAAU,CAAC,KAAK,CACzB;;;;;kFAK4E,CAC7E,CAAC;QAEF,MAAM,cAAc,GAAkB,cAAc,CAClD,MAAA,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAG,CAAC,CAAC,0CAAE,eAAe,CAC3B,CAAC;QACF,MAAM,mBAAmB,GACvB,MAAA,cAAc,CAAC,MAAA,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAG,CAAC,CAAC,0CAAE,oBAAoB,CAAC,mCAAI,CAAC,CAAC;QACvD,MAAM,cAAc,GAAkB,cAAc,CAAC,MAAA,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAG,CAAC,CAAC,0CAAE,QAAQ,CAAC,CAAC;QAC1E,MAAM,iBAAiB,GACrB,cAAc,KAAK,IAAI;YACrB,CAAC,CAAC,IAAI;YACN,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,cAAc,GAAG,mBAAmB,CAAC,CAAC;QAExD,QAAQ,CAAC,cAAc,GAAG,cAAc,CAAC;QACzC,QAAQ,CAAC,iBAAiB,GAAG,iBAAiB,CAAC;QAC/C,QAAQ,CAAC,cAAc,GAAG,cAAc,CAAC;QACzC,QAAQ,CAAC,4BAA4B;YACnC,iBAAiB,KAAK,IAAI,IAAI,cAAc,KAAK,IAAI;gBACnD,CAAC,CAAC,CAAC,cAAc,GAAG,iBAAiB,CAAC,GAAG,GAAG;gBAC5C,CAAC,CAAC,IAAI,CAAC;IACb,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,KAAK,CAAC,kDAAkD,CAAC,CAAC;QACjE,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACtB,CAAC;IAED;;;;;OAKG;IACH,IAAI,CAAC;QACH,MAAM,IAAI,GAGL,MAAM,UAAU,CAAC,KAAK,CACzB;;;wBAGkB,CACnB,CAAC;QAEF,MAAM,gBAAgB,GAAkB,cAAc,CACpD,MAAA,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAG,CAAC,CAAC,0CAAE,WAAW,CACvB,CAAC;QACF,MAAM,cAAc,GAAkB,cAAc,CAClD,MAAA,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAG,CAAC,CAAC,0CAAE,YAAY,CACxB,CAAC;QACF,MAAM,mBAAmB,GACvB,gBAAgB,KAAK,IAAI,IAAI,cAAc,KAAK,IAAI;YAClD,CAAC,CAAC,IAAI;YACN,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,gBAAgB,aAAhB,gBAAgB,cAAhB,gBAAgB,GAAI,CAAC,EAAE,cAAc,aAAd,cAAc,cAAd,cAAc,GAAI,CAAC,CAAC,CAAC;QAE3D,QAAQ,CAAC,gBAAgB,GAAG,gBAAgB,CAAC;QAC7C,QAAQ,CAAC,cAAc,GAAG,cAAc,CAAC;QACzC,QAAQ,CAAC,mBAAmB,GAAG,mBAAmB,CAAC;QACnD,QAAQ,CAAC,4BAA4B;YACnC,mBAAmB,KAAK,IAAI;gBAC1B,CAAC,CAAC,CAAC,mBAAmB,GAAG,2BAA2B,CAAC,GAAG,GAAG;gBAC3D,CAAC,CAAC,IAAI,CAAC;IACb,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,KAAK,CAAC,kDAAkD,CAAC,CAAC;QACjE,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACtB,CAAC;IAED;;;;;;;OAOG;IACH,MAAM,cAAc,GAAuC,CACzD,aAAsB,EACd,EAAE;QACV,OAAO;;;;WAIA,aAAa,CAAC,CAAC,CAAC,iCAAiC,CAAC,CAAC,CAAC,WAAW;;;;8BAI5C,CAAC;IAC7B,CAAC,CAAC;IAUF,IAAI,QAAQ,GAA0B,IAAI,CAAC;IAE3C,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,UAAU,CAAC,KAAK,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC;IAC1D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,KAAK,CACV,gFAAgF,CACjF,CAAC;QACF,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAEpB,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,UAAU,CAAC,KAAK,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC;QAC3D,CAAC;QAAC,OAAO,UAAU,EAAE,CAAC;YACpB,MAAM,CAAC,KAAK,CAAC,mDAAmD,CAAC,CAAC;YAClE,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QAC3B,CAAC;IACH,CAAC;IAED,IAAI,QAAQ,EAAE,CAAC;QACb,QAAQ,CAAC,gBAAgB,GAAG,QAAQ,CAAC,GAAG,CACtC,CAAC,GAAY,EAAmC,EAAE;YAChD,OAAO;gBACL,QAAQ,EAAE,MAAM,CAAC,GAAG,CAAC,SAAS,IAAI,EAAE,CAAC;gBACrC,QAAQ,EAAE,MAAM,CAAC,GAAG,CAAC,SAAS,IAAI,SAAS,CAAC;gBAC5C,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC;gBAC7B,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC,UAAU,IAAI,SAAS,CAAC;gBAC9C,kBAAkB,EAAE,cAAc,CAAC,GAAG,CAAC,cAAc,CAAC;aACvD,CAAC;QACJ,CAAC,CACF,CAAC;IACJ,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/build/dist/Utils/EnterpriseLicense/EnterpriseLicenseSeats.js

@@ -1,168 +0,0 @@
-export default class EnterpriseLicenseSeatsUtil {
-    /*
-     * How many seats are in use, and whether one more user fits.
-     *
-     * The awkward part is that a license is shared by every instance the
-     * customer runs, and only oneuptime.com can deduplicate users across them —
-     * the same person on staging and production is one seat. So this instance
-     * has two numbers and neither one is the answer on its own:
-     *
-     *   localUserCount      live, but blind to the customer's other instances.
-     *   aggregatedUserCount complete, but up to a day old, so it does not know
-     *                       about anyone added since the last daily report —
-     *                       including the user being added right now.
-     *
-     * Combining them needs to know how much of the aggregate is NOT ours, which
-     * is what the per-instance breakdown is for: subtract our own last reported
-     * count from the aggregate and what is left is other instances. Add the live
-     * local count back and the result is current on this instance and complete
-     * on the others.
-     *
-     * When the breakdown does not say — an older license server that sends no
-     * instance list, an instance that has never registered — there is nothing to
-     * subtract, and the fallback is the larger of the two numbers on their own.
-     * That is the only case where the stale aggregate decides anything: with a
-     * usable breakdown it is deliberately NOT maxed in, because it would then
-     * outvote the live count in the one direction that hurts. Free twenty seats
-     * by deleting twenty users and a stale aggregate would go on refusing new
-     * ones until the next daily report.
-     *
-     * Which way it is allowed to be wrong: under-enforcing is recoverable (the
-     * next daily report corrects the count, and the breach emails already go
-     * out), over-enforcing locks a paying customer out of their own instance.
-     * So every "I cannot tell" branch below resolves towards under-enforcing.
-     */
-    static getSeatUsage(input) {
-        var _a;
-        const userLimit = this.parseUserLimit(input.userLimit);
-        const localUserCount = (_a = this.parseCount(input.localUserCount)) !== null && _a !== void 0 ? _a : 0;
-        const aggregatedUserCount = this.parseCount(input.aggregatedUserCount);
-        /*
-         * Null means the report is not complete enough to attribute seats to
-         * anybody, which is a different thing from attributing zero to them.
-         */
-        const otherInstanceSeats = this.getSeatsUsedByOtherInstances({
-            aggregatedUserCount: aggregatedUserCount,
-            instances: input.instances,
-            thisInstanceId: input.thisInstanceId,
-        });
-        const seatsUsedByOtherInstances = otherInstanceSeats !== null && otherInstanceSeats !== void 0 ? otherInstanceSeats : 0;
-        const seatsInUse = otherInstanceSeats === null
-            ? Math.max(localUserCount, aggregatedUserCount !== null && aggregatedUserCount !== void 0 ? aggregatedUserCount : 0)
-            : otherInstanceSeats + localUserCount;
-        if (userLimit === null) {
-            return {
-                isEnforced: false,
-                userLimit: null,
-                seatsInUse: seatsInUse,
-                seatsRemaining: null,
-                hasSeatForNewUser: true,
-                seatsUsedByOtherInstances: seatsUsedByOtherInstances,
-            };
-        }
-        return {
-            isEnforced: true,
-            userLimit: userLimit,
-            seatsInUse: seatsInUse,
-            seatsRemaining: Math.max(0, userLimit - seatsInUse),
-            hasSeatForNewUser: seatsInUse < userLimit,
-            seatsUsedByOtherInstances: seatsUsedByOtherInstances,
-        };
-    }
-    /*
-     * The message an administrator reads when a seat could not be taken. Built
-     * here rather than at each throw site so the invite form, the signup form
-     * and SSO/SCIM provisioning all explain the same thing the same way, and so
-     * the tests can assert on it without copying the wording.
-     */
-    static getSeatLimitReachedMessage(data) {
-        return (`This OneUptime installation has reached the ${data.userLimit.toLocaleString()}-user ` +
-            `limit of its enterprise license (${data.seatsInUse.toLocaleString()} in use). New users ` +
-            `cannot be invited, signed up or provisioned until a seat is freed up or the license is ` +
-            `expanded. Contact sales@oneuptime.com to add seats, then use "Refresh license" in the ` +
-            `edition dialog to apply the new limit.`);
-    }
-    /*
-     * The part of the aggregate that belongs to instances other than this one,
-     * or null when the report does not say.
-     *
-     * Null rather than zero, because the two lead somewhere different: zero means
-     * "this installation is the only one holding seats", and null means "the
-     * report cannot be decomposed, fall back to comparing the two totals". Every
-     * missing or unusable field lands on null.
-     *
-     * In particular, an instance list that does not contain us is NOT treated as
-     * "then all of the aggregate is somebody else's". That reading is right for a
-     * genuinely unregistered instance, and catastrophic for an instance whose id
-     * changed after its users were already counted under the old one: it would
-     * count this installation's users twice and lock it out.
-     */
-    static getSeatsUsedByOtherInstances(data) {
-        const aggregatedUserCount = data.aggregatedUserCount;
-        if (aggregatedUserCount === null) {
-            return null;
-        }
-        if (!Array.isArray(data.instances) || data.instances.length === 0) {
-            return null;
-        }
-        const thisInstanceId = typeof data.thisInstanceId === "string" ? data.thisInstanceId.trim() : "";
-        if (!thisInstanceId) {
-            return null;
-        }
-        const thisInstance = data.instances.find((instance) => {
-            return Boolean(instance) && instance.instanceId === thisInstanceId;
-        });
-        if (!thisInstance) {
-            return null;
-        }
-        /*
-         * The active-only aggregate contains none of this installation's stale
-         * reported users. Subtracting that old count would remove users belonging
-         * to active instances and under-enforce the license. Treat the complete
-         * aggregate as other-instance usage. We also cannot add the two counts:
-         * the same users may exist on both this installation and active ones.
-         * Return null to use the existing uncertainty fallback, which takes the
-         * larger complete-or-live total without subtracting or double-counting.
-         *
-         * Undefined retains the legacy behavior for responses from older license
-         * servers that did not send activity provenance.
-         */
-        if (thisInstance.isCountedTowardsUsage === false) {
-            return null;
-        }
-        const ownReportedCount = this.parseCount(thisInstance.userCount);
-        if (ownReportedCount === null) {
-            return null;
-        }
-        return Math.max(0, aggregatedUserCount - ownReportedCount);
-    }
-    /*
-     * A limit is only a limit when it is a positive whole number.
-     *
-     * Zero is deliberately read as "no limit" rather than "no seats at all",
-     * matching every other place in the product that measures seat usage
-     * (the license modal, the breach notification job). A license that really
-     * grants nobody an account is not a thing OneUptime issues, and reading a
-     * stray zero the other way would leave an installation unable to create even
-     * its first user.
-     */
-    static parseUserLimit(value) {
-        if (typeof value !== "number" ||
-            !Number.isFinite(value) ||
-            !Number.isInteger(value) ||
-            value <= 0) {
-            return null;
-        }
-        return value;
-    }
-    static parseCount(value) {
-        if (typeof value !== "number" ||
-            !Number.isFinite(value) ||
-            !Number.isInteger(value) ||
-            value < 0) {
-            return null;
-        }
-        return value;
-    }
-}
-//# sourceMappingURL=EnterpriseLicenseSeats.js.map

package/build/dist/Utils/EnterpriseLicense/EnterpriseLicenseSeats.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"EnterpriseLicenseSeats.js","sourceRoot":"","sources":["../../../../Utils/EnterpriseLicense/EnterpriseLicenseSeats.ts"],"names":[],"mappings":"AA4EA,MAAM,CAAC,OAAO,OAAO,0BAA0B;IAC7C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAgCG;IACI,MAAM,CAAC,YAAY,CAAC,KAAqB;;QAC9C,MAAM,SAAS,GAAkB,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QACtE,MAAM,cAAc,GAAW,MAAA,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,cAAc,CAAC,mCAAI,CAAC,CAAC;QAC1E,MAAM,mBAAmB,GAAkB,IAAI,CAAC,UAAU,CACxD,KAAK,CAAC,mBAAmB,CAC1B,CAAC;QAEF;;;WAGG;QACH,MAAM,kBAAkB,GAAkB,IAAI,CAAC,4BAA4B,CACzE;YACE,mBAAmB,EAAE,mBAAmB;YACxC,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,cAAc,EAAE,KAAK,CAAC,cAAc;SACrC,CACF,CAAC;QAEF,MAAM,yBAAyB,GAAW,kBAAkB,aAAlB,kBAAkB,cAAlB,kBAAkB,GAAI,CAAC,CAAC;QAElE,MAAM,UAAU,GACd,kBAAkB,KAAK,IAAI;YACzB,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,cAAc,EAAE,mBAAmB,aAAnB,mBAAmB,cAAnB,mBAAmB,GAAI,CAAC,CAAC;YACpD,CAAC,CAAC,kBAAkB,GAAG,cAAc,CAAC;QAE1C,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;YACvB,OAAO;gBACL,UAAU,EAAE,KAAK;gBACjB,SAAS,EAAE,IAAI;gBACf,UAAU,EAAE,UAAU;gBACtB,cAAc,EAAE,IAAI;gBACpB,iBAAiB,EAAE,IAAI;gBACvB,yBAAyB,EAAE,yBAAyB;aACrD,CAAC;QACJ,CAAC;QAED,OAAO;YACL,UAAU,EAAE,IAAI;YAChB,SAAS,EAAE,SAAS;YACpB,UAAU,EAAE,UAAU;YACtB,cAAc,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,SAAS,GAAG,UAAU,CAAC;YACnD,iBAAiB,EAAE,UAAU,GAAG,SAAS;YACzC,yBAAyB,EAAE,yBAAyB;SACrD,CAAC;IACJ,CAAC;IAED;;;;;OAKG;IACI,MAAM,CAAC,0BAA0B,CAAC,IAGxC;QACC,OAAO,CACL,+CAA+C,IAAI,CAAC,SAAS,CAAC,cAAc,EAAE,QAAQ;YACtF,oCAAoC,IAAI,CAAC,UAAU,CAAC,cAAc,EAAE,sBAAsB;YAC1F,yFAAyF;YACzF,wFAAwF;YACxF,wCAAwC,CACzC,CAAC;IACJ,CAAC;IAED;;;;;;;;;;;;;;OAcG;IACK,MAAM,CAAC,4BAA4B,CAAC,IAI3C;QACC,MAAM,mBAAmB,GAAkB,IAAI,CAAC,mBAAmB,CAAC;QAEpE,IAAI,mBAAmB,KAAK,IAAI,EAAE,CAAC;YACjC,OAAO,IAAI,CAAC;QACd,CAAC;QAED,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAClE,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,cAAc,GAClB,OAAO,IAAI,CAAC,cAAc,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAE5E,IAAI,CAAC,cAAc,EAAE,CAAC;YACpB,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,YAAY,GAChB,IAAI,CAAC,SAAS,CAAC,IAAI,CACjB,CAAC,QAA0C,EAAW,EAAE;YACtD,OAAO,OAAO,CAAC,QAAQ,CAAC,IAAI,QAAQ,CAAC,UAAU,KAAK,cAAc,CAAC;QACrE,CAAC,CACF,CAAC;QAEJ,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,OAAO,IAAI,CAAC;QACd,CAAC;QAED;;;;;;;;;;;WAWG;QACH,IAAI,YAAY,CAAC,qBAAqB,KAAK,KAAK,EAAE,CAAC;YACjD,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,gBAAgB,GAAkB,IAAI,CAAC,UAAU,CACrD,YAAY,CAAC,SAAS,CACvB,CAAC;QAEF,IAAI,gBAAgB,KAAK,IAAI,EAAE,CAAC;YAC9B,OAAO,IAAI,CAAC;QACd,CAAC;QAED,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,mBAAmB,GAAG,gBAAgB,CAAC,CAAC;IAC7D,CAAC;IAED;;;;;;;;;OASG;IACK,MAAM,CAAC,cAAc,CAAC,KAAc;QAC1C,IACE,OAAO,KAAK,KAAK,QAAQ;YACzB,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;YACvB,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC;YACxB,KAAK,IAAI,CAAC,EACV,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAEO,MAAM,CAAC,UAAU,CAAC,KAAc;QACtC,IACE,OAAO,KAAK,KAAK,QAAQ;YACzB,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;YACvB,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC;YACxB,KAAK,GAAG,CAAC,EACT,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;CACF"}