@oneuptime/common 14.0.0 → 14.0.2

package/build/dist/Server/Utils/Workspace/WorkspaceActionAuthorization.js

@@ -0,0 +1,197 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+import LIMIT_MAX from "../../../Types/Database/LimitMax";
+import NotAuthorizedException from "../../../Types/Exception/NotAuthorizedException";
+import AccessTokenService from "../../Services/AccessTokenService";
+import TeamMemberService from "../../Services/TeamMemberService";
+import ModelPermission from "../../Types/Database/Permissions/Index";
+import CaptureSpan from "../Telemetry/CaptureSpan";
+/*
+ * Slack and Microsoft Teams actions (buttons, modals, cards, emoji reactions)
+ * are signed by the workspace, not by a OneUptime session. The only link to a
+ * OneUptime user is the WorkspaceUserAuthToken row written when that user
+ * connected their chat account, and that row says nothing about what they may
+ * do in the project today: it survives a downgrade to a read-only role, and it
+ * used to survive removal from the project as well.
+ *
+ * The services those actions call (acknowledgeIncident, addNote,
+ * executePolicy, ...) write as root. So a chat action that changes data asks
+ * this class first, and gets the answer the dashboard would give the same
+ * user for the same change:
+ *
+ *   1. the user holds an accepted membership in the project, read from the
+ *      database rather than from the permission cache,
+ *   2. their project permissions allow creating the row the action writes.
+ *      The dashboard writes that same row through the API with those
+ *      permissions: an IncidentStateTimeline to acknowledge, resolve or change
+ *      state, an IncidentPublicNote for a public note, an
+ *      OnCallDutyPolicyExecutionLog to page an on-call policy, and so on,
+ *   3. every resource the action names is one the user can read in THIS
+ *      project, under their label, owner and privacy scoping. This also keeps
+ *      an id from another project out, since the services look rows up by id
+ *      alone.
+ */
+class WorkspaceActionAuthorization {
+    static async isProjectMember(data) {
+        const teamIds = await this.getAcceptedTeamIds(data);
+        return teamIds.length > 0;
+    }
+    /*
+     * The props a chat user acts with in a project, built the way the dashboard
+     * builds them for a signed-in request: global permission, tenant permission
+     * and accepted team ids (for the Owned permission scope). Throws
+     * NotAuthorizedException when the user is not a member of the project.
+     */
+    static async getProjectMemberProps(data) {
+        const { userId, projectId } = data;
+        /*
+         * Membership comes straight from TeamMember. Neither the tenant permission
+         * cache (Redis) nor TeamMemberService.getTeamIdsForUser (in-process) is
+         * guaranteed to have seen a removal made through another process.
+         */
+        const userTeamIds = await this.getAcceptedTeamIds(data);
+        if (userTeamIds.length === 0) {
+            throw new NotAuthorizedException(WorkspaceActionAuthorization.NOT_A_PROJECT_MEMBER_MESSAGE);
+        }
+        const userGlobalAccessPermission = await AccessTokenService.getUserGlobalAccessPermission(userId);
+        const userTenantAccessPermission = await AccessTokenService.getUserTenantAccessPermission(userId, projectId, {
+            userGlobalAccessPermission: userGlobalAccessPermission,
+        });
+        if (!userTenantAccessPermission) {
+            throw new NotAuthorizedException(WorkspaceActionAuthorization.NOT_A_PROJECT_MEMBER_MESSAGE);
+        }
+        return {
+            userId: userId,
+            tenantId: projectId,
+            userGlobalAccessPermission: userGlobalAccessPermission || undefined,
+            userTenantAccessPermission: {
+                [projectId.toString()]: userTenantAccessPermission,
+            },
+            userTeamIds: userTeamIds,
+        };
+    }
+    /*
+     * Throws NotAuthorizedException, with a message fit to show the user in
+     * chat, unless `props` may create a `modelType` row and read every one of
+     * `resources` in props.tenantId. `action` completes "You do not have
+     * permission to ...", e.g. "acknowledge this incident".
+     */
+    static async assertCanCreate(data) {
+        const { props, modelType, action } = data;
+        const projectId = props.tenantId;
+        if (!props.userId || !projectId) {
+            throw new NotAuthorizedException(`You do not have permission to ${action}.`);
+        }
+        try {
+            ModelPermission.checkCreatePermissions(modelType, new modelType(), props);
+        }
+        catch (err) {
+            if (err instanceof NotAuthorizedException) {
+                throw new NotAuthorizedException(`You do not have permission to ${action}. ${err.message}`);
+            }
+            throw err;
+        }
+        for (const resource of data.resources || []) {
+            let readableResource = null;
+            try {
+                readableResource = await resource.service.findOneBy({
+                    query: {
+                        _id: resource.id.toString(),
+                        projectId: projectId,
+                    },
+                    select: {
+                        _id: true,
+                    },
+                    props: props,
+                });
+            }
+            catch (err) {
+                if (!(err instanceof NotAuthorizedException)) {
+                    throw err;
+                }
+            }
+            if (!readableResource) {
+                const resourceName = (resource.service.getModel().singularName || "resource").toLowerCase();
+                throw new NotAuthorizedException(`You do not have permission to ${action}: the ${resourceName} was not found in this project, or you do not have access to it.`);
+            }
+        }
+    }
+    /*
+     * getProjectMemberProps followed by assertCanCreate. Returns the user's
+     * props so the caller can pass them on to anything else it writes.
+     */
+    static async authorize(data) {
+        const props = await this.getProjectMemberProps({
+            userId: data.userId,
+            projectId: data.projectId,
+        });
+        await this.assertCanCreate({
+            props: props,
+            modelType: data.modelType,
+            action: data.action,
+            resources: data.resources,
+        });
+        return props;
+    }
+    static async getAcceptedTeamIds(data) {
+        const memberships = await TeamMemberService.findBy({
+            query: {
+                userId: data.userId,
+                projectId: data.projectId,
+                hasAcceptedInvitation: true,
+            },
+            select: {
+                teamId: true,
+            },
+            limit: LIMIT_MAX,
+            skip: 0,
+            props: {
+                isRoot: true,
+            },
+        });
+        const teamIds = [];
+        const seen = new Set();
+        for (const membership of memberships) {
+            const teamId = membership.teamId;
+            if (teamId && !seen.has(teamId.toString())) {
+                seen.add(teamId.toString());
+                teamIds.push(teamId);
+            }
+        }
+        return teamIds;
+    }
+}
+WorkspaceActionAuthorization.NOT_A_PROJECT_MEMBER_MESSAGE = "Your OneUptime account is not a member of this project. Ask a project admin to invite you, then try again.";
+export default WorkspaceActionAuthorization;
+__decorate([
+    CaptureSpan(),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object]),
+    __metadata("design:returntype", Promise)
+], WorkspaceActionAuthorization, "isProjectMember", null);
+__decorate([
+    CaptureSpan(),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object]),
+    __metadata("design:returntype", Promise)
+], WorkspaceActionAuthorization, "getProjectMemberProps", null);
+__decorate([
+    CaptureSpan(),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object]),
+    __metadata("design:returntype", Promise)
+], WorkspaceActionAuthorization, "assertCanCreate", null);
+__decorate([
+    CaptureSpan(),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object]),
+    __metadata("design:returntype", Promise)
+], WorkspaceActionAuthorization, "authorize", null);
+//# sourceMappingURL=WorkspaceActionAuthorization.js.map

package/build/dist/Server/Utils/Workspace/WorkspaceActionAuthorization.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"WorkspaceActionAuthorization.js","sourceRoot":"","sources":["../../../../../Server/Utils/Workspace/WorkspaceActionAuthorization.ts"],"names":[],"mappings":";;;;;;;;;AAKA,OAAO,SAAS,MAAM,kCAAkC,CAAC;AACzD,OAAO,sBAAsB,MAAM,iDAAiD,CAAC;AAMrF,OAAO,kBAAkB,MAAM,mCAAmC,CAAC;AAEnE,OAAO,iBAAiB,MAAM,kCAAkC,CAAC;AACjE,OAAO,eAAe,MAAM,wCAAwC,CAAC;AAGrE,OAAO,WAAW,MAAM,0BAA0B,CAAC;AAYnD;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,MAAqB,4BAA4B;IAK3B,AAAb,MAAM,CAAC,KAAK,CAAC,eAAe,CAAC,IAGnC;QACC,MAAM,OAAO,GAAoB,MAAM,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC;QACrE,OAAO,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC;IAC5B,CAAC;IAED;;;;;OAKG;IAEiB,AAAb,MAAM,CAAC,KAAK,CAAC,qBAAqB,CAAC,IAGzC;QACC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,IAAI,CAAC;QAEnC;;;;WAIG;QACH,MAAM,WAAW,GAAoB,MAAM,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC;QAEzE,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC7B,MAAM,IAAI,sBAAsB,CAC9B,4BAA4B,CAAC,4BAA4B,CAC1D,CAAC;QACJ,CAAC;QAED,MAAM,0BAA0B,GAC9B,MAAM,kBAAkB,CAAC,6BAA6B,CAAC,MAAM,CAAC,CAAC;QAEjE,MAAM,0BAA0B,GAC9B,MAAM,kBAAkB,CAAC,6BAA6B,CACpD,MAAM,EACN,SAAS,EACT;YACE,0BAA0B,EAAE,0BAA0B;SACvD,CACF,CAAC;QAEJ,IAAI,CAAC,0BAA0B,EAAE,CAAC;YAChC,MAAM,IAAI,sBAAsB,CAC9B,4BAA4B,CAAC,4BAA4B,CAC1D,CAAC;QACJ,CAAC;QAED,OAAO;YACL,MAAM,EAAE,MAAM;YACd,QAAQ,EAAE,SAAS;YACnB,0BAA0B,EAAE,0BAA0B,IAAI,SAAS;YACnE,0BAA0B,EAAE;gBAC1B,CAAC,SAAS,CAAC,QAAQ,EAAE,CAAC,EAAE,0BAA0B;aACnD;YACD,WAAW,EAAE,WAAW;SACzB,CAAC;IACJ,CAAC;IAED;;;;;OAKG;IAEiB,AAAb,MAAM,CAAC,KAAK,CAAC,eAAe,CAAC,IAKnC;QACC,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;QAC1C,MAAM,SAAS,GAAyB,KAAK,CAAC,QAAQ,CAAC;QAEvD,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC;YAChC,MAAM,IAAI,sBAAsB,CAC9B,iCAAiC,MAAM,GAAG,CAC3C,CAAC;QACJ,CAAC;QAED,IAAI,CAAC;YACH,eAAe,CAAC,sBAAsB,CAAC,SAAS,EAAE,IAAI,SAAS,EAAE,EAAE,KAAK,CAAC,CAAC;QAC5E,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,sBAAsB,EAAE,CAAC;gBAC1C,MAAM,IAAI,sBAAsB,CAC9B,iCAAiC,MAAM,KAAK,GAAG,CAAC,OAAO,EAAE,CAC1D,CAAC;YACJ,CAAC;YAED,MAAM,GAAG,CAAC;QACZ,CAAC;QAED,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,SAAS,IAAI,EAAE,EAAE,CAAC;YAC5C,IAAI,gBAAgB,GAA6B,IAAI,CAAC;YAEtD,IAAI,CAAC;gBACH,gBAAgB,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,SAAS,CAAC;oBAClD,KAAK,EAAE;wBACL,GAAG,EAAE,QAAQ,CAAC,EAAE,CAAC,QAAQ,EAAE;wBAC3B,SAAS,EAAE,SAAS;qBACO;oBAC7B,MAAM,EAAE;wBACN,GAAG,EAAE,IAAI;qBACmB;oBAC9B,KAAK,EAAE,KAAK;iBACb,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,CAAC,CAAC,GAAG,YAAY,sBAAsB,CAAC,EAAE,CAAC;oBAC7C,MAAM,GAAG,CAAC;gBACZ,CAAC;YACH,CAAC;YAED,IAAI,CAAC,gBAAgB,EAAE,CAAC;gBACtB,MAAM,YAAY,GAAW,CAC3B,QAAQ,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,YAAY,IAAI,UAAU,CACvD,CAAC,WAAW,EAAE,CAAC;gBAEhB,MAAM,IAAI,sBAAsB,CAC9B,iCAAiC,MAAM,SAAS,YAAY,kEAAkE,CAC/H,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAED;;;OAGG;IAEiB,AAAb,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,IAM7B;QACC,MAAM,KAAK,GACT,MAAM,IAAI,CAAC,qBAAqB,CAAC;YAC/B,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,SAAS,EAAE,IAAI,CAAC,SAAS;SAC1B,CAAC,CAAC;QAEL,MAAM,IAAI,CAAC,eAAe,CAAC;YACzB,KAAK,EAAE,KAAK;YACZ,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,SAAS,EAAE,IAAI,CAAC,SAAS;SAC1B,CAAC,CAAC;QAEH,OAAO,KAAK,CAAC;IACf,CAAC;IAEO,MAAM,CAAC,KAAK,CAAC,kBAAkB,CAAC,IAGvC;QACC,MAAM,WAAW,GAAsB,MAAM,iBAAiB,CAAC,MAAM,CAAC;YACpE,KAAK,EAAE;gBACL,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,qBAAqB,EAAE,IAAI;aAC5B;YACD,MAAM,EAAE;gBACN,MAAM,EAAE,IAAI;aACb;YACD,KAAK,EAAE,SAAS;YAChB,IAAI,EAAE,CAAC;YACP,KAAK,EAAE;gBACL,MAAM,EAAE,IAAI;aACb;SACF,CAAC,CAAC;QAEH,MAAM,OAAO,GAAoB,EAAE,CAAC;QACpC,MAAM,IAAI,GAAgB,IAAI,GAAG,EAAU,CAAC;QAE5C,KAAK,MAAM,UAAU,IAAI,WAAW,EAAE,CAAC;YACrC,MAAM,MAAM,GAAyB,UAAU,CAAC,MAAM,CAAC;YAEvD,IAAI,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,EAAE,CAAC;gBAC3C,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;gBAC5B,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACvB,CAAC;QACH,CAAC;QAED,OAAO,OAAO,CAAC;IACjB,CAAC;;AAlMsB,yDAA4B,GACjD,4GAA4G,CAAC;eAF5F,4BAA4B;AAK3B;IADnB,WAAW,EAAE;;;;yDAOb;AASmB;IADnB,WAAW,EAAE;;;;+DA+Cb;AASmB;IADnB,WAAW,EAAE;;;;yDA0Db;AAOmB;IADnB,WAAW,EAAE;;;;mDAsBb"}

package/build/dist/Server/Utils/Workspace/WorkspaceBase.js

@@ -7,10 +7,42 @@ var __decorate = (this && this.__decorate) || function (decorators, target, key,
 var __metadata = (this && this.__metadata) || function (k, v) {
     if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 };
+import HTTPErrorResponse from "../../../Types/API/HTTPErrorResponse";
 import NotImplementedException from "../../../Types/Exception/NotImplementedException";
 import logger from "../Logger";
 import CaptureSpan from "../Telemetry/CaptureSpan";
 export default class WorkspaceBase {
+    /*
+     * A readable, non-empty message for whatever a send path threw. The
+     * providers do not only throw Errors: Slack's sendPayloadBlocksToChannel,
+     * joinChannel and isUserInChannel `throw response`, an HTTPErrorResponse,
+     * which is not an Error but exposes a `message` getter. Stringifying that
+     * gave "[object Object]" in user-facing test errors and in Notification
+     * Logs, so each shape is unwrapped here, and a response with no message
+     * still reports its HTTP status rather than nothing.
+     */
+    static getSendErrorMessage(err) {
+        const unknownErrorMessage = "Unknown error";
+        if (err === null || err === undefined) {
+            return unknownErrorMessage;
+        }
+        if (err instanceof Error) {
+            return err.message || unknownErrorMessage;
+        }
+        if (err instanceof HTTPErrorResponse) {
+            return err.message || `Request failed with HTTP status ${err.statusCode}`;
+        }
+        if (typeof err === "string") {
+            return err || unknownErrorMessage;
+        }
+        if (typeof err === "object") {
+            const message = err.message;
+            if (typeof message === "string" && message) {
+                return message;
+            }
+        }
+        return String(err);
+    }
     static async isUserInDirectMessageChannel(_data) {
         throw new NotImplementedException();
     }

package/build/dist/Server/Utils/Workspace/WorkspaceBase.js.map

@@ -1 +1 @@
-{"version":3,"file":"WorkspaceBase.js","sourceRoot":"","sources":["../../../../../Server/Utils/Workspace/WorkspaceBase.ts"],"names":[],"mappings":";;;;;;;;;AAGA,OAAO,uBAAuB,MAAM,kDAAkD,CAAC;AAmBvF,OAAO,MAAM,MAAM,WAAW,CAAC;AAE/B,OAAO,WAAW,MAAM,0BAA0B,CAAC;AA6BnD,MAAM,CAAC,OAAO,OAAO,aAAa;IAEZ,AAAb,MAAM,CAAC,KAAK,CAAC,4BAA4B,CAAC,KAIhD;QACC,MAAM,IAAI,uBAAuB,EAAE,CAAC;IACtC,CAAC;IAGmB,AAAb,MAAM,CAAC,KAAK,CAAC,gBAAgB,CAAC,KAKpC;QACC,MAAM,IAAI,uBAAuB,EAAE,CAAC;IACtC,CAAC;IAGmB,AAAb,MAAM,CAAC,KAAK,CAAC,eAAe,CAAC,KAMnC;QACC,MAAM,IAAI,uBAAuB,EAAE,CAAC;IACtC,CAAC;IAGmB,AAAb,MAAM,CAAC,KAAK,CAAC,qBAAqB,CAAC,KAIzC;QACC,MAAM,IAAI,uBAAuB,EAAE,CAAC;IACtC,CAAC;IAGmB,AAAb,MAAM,CAAC,KAAK,CAAC,eAAe,CAAC,KAInC;QACC,MAAM,IAAI,uBAAuB,EAAE,CAAC;IACtC,CAAC;IAGa,AAAP,MAAM,CAAC,gBAAgB,CAAC,KAE9B;QACC,MAAM,IAAI,uBAAuB,EAAE,CAAC;IACtC,CAAC;IAGa,AAAP,MAAM,CAAC,uBAAuB,CAAC,KAIrC;QACC,MAAM,IAAI,uBAAuB,EAAE,CAAC;IACtC,CAAC;IAGmB,AAAb,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,KAG/B;QACC,MAAM,IAAI,uBAAuB,EAAE,CAAC;IACtC,CAAC;IAGmB,AAAb,MAAM,CAAC,KAAK,CAAC,0BAA0B,CAAC,KAI9C;QACC,MAAM,IAAI,uBAAuB,EAAE,CAAC;IACtC,CAAC;IAGmB,AAAb,MAAM,CAAC,KAAK,CAAC,qBAAqB,CAAC,IAIzC;QACC,KAAK,MAAM,WAAW,IAAI,IAAI,CAAC,iCAAiC;aAC7D,YAAY,EAAE,CAAC;YAChB,MAAM,IAAI,CAAC,oBAAoB,CAAC;gBAC9B,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,WAAW,EAAE,WAAW;gBACxB,gBAAgB,EACd,IAAI,CAAC,iCAAiC,CAAC,gBAAgB;gBACzD,SAAS,EAAE,IAAI,CAAC,SAAS;aAC1B,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAGmB,AAAb,MAAM,CAAC,KAAK,CAAC,oBAAoB,CAAC,IAKxC;QACC,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,gBAAgB,EAAE,CAAC;YAC3C,MAAM,IAAI,CAAC,gCAAgC,CAAC;gBAC1C,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,WAAW,EAAE,IAAI,CAAC,WAAW;gBAC7B,eAAe,EAAE,MAAM;gBACvB,SAAS,EAAE,IAAI,CAAC,SAAS;aAC1B,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAGmB,AAAb,MAAM,CAAC,KAAK,CAAC,gCAAgC,CAAC,KAKpD;QACC,MAAM,IAAI,uBAAuB,EAAE,CAAC;IACtC,CAAC;IAGa,AAAP,MAAM,CAAC,sBAAsB,CAAC,KAEpC;QACC,MAAM,IAAI,uBAAuB,EAAE,CAAC;IACtC,CAAC;IAGmB,AAAb,MAAM,CAAC,KAAK,CAAC,8BAA8B,CAAC,KAIlD,IAAkB,CAAC;IAGA,AAAb,MAAM,CAAC,KAAK,CAAC,4BAA4B,CAAC,KAIhD;QACC,MAAM,IAAI,uBAAuB,EAAE,CAAC;IACtC,CAAC;IAGmB,AAAb,MAAM,CAAC,KAAK,CAAC,gCAAgC,CAAC,KAIpD;QACC,MAAM,IAAI,uBAAuB,EAAE,CAAC;IACtC,CAAC;IAGmB,AAAb,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,KAM/B;QACC,MAAM,IAAI,uBAAuB,EAAE,CAAC;IACtC,CAAC;IAGmB,AAAb,MAAM,CAAC,KAAK,CAAC,uBAAuB,CAAC,KAG3C;QACC,MAAM,IAAI,uBAAuB,EAAE,CAAC;IACtC,CAAC;IAGmB,AAAb,MAAM,CAAC,KAAK,CAAC,kCAAkC,CAAC,KAItD;QACC,MAAM,IAAI,uBAAuB,EAAE,CAAC;IACtC,CAAC;IAGmB,AAAb,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,KAKjC;QACC,MAAM,IAAI,uBAAuB,EAAE,CAAC;IACtC,CAAC;IAGa,AAAP,MAAM,CAAC,cAAc,CAAC,KAE5B;QACC,MAAM,IAAI,uBAAuB,EAAE,CAAC;IACtC,CAAC;IAGa,AAAP,MAAM,CAAC,eAAe;QAC3B,MAAM,IAAI,uBAAuB,EAAE,CAAC;IACtC,CAAC;IAGa,AAAP,MAAM,CAAC,gBAAgB,CAAC,KAE9B;QACC,MAAM,IAAI,uBAAuB,EAAE,CAAC;IACtC,CAAC;IAGa,AAAP,MAAM,CAAC,cAAc,CAAC,KAE5B;QACC,MAAM,IAAI,uBAAuB,EAAE,CAAC;IACtC,CAAC;IAGa,AAAP,MAAM,CAAC,oCAAoC,CAAC,IAElD;QACC,MAAM,EAAE,aAAa,EAAE,GAAG,IAAI,CAAC;QAE/B,MAAM,MAAM,GAAsB,EAAE,CAAC;QACrC,KAAK,MAAM,KAAK,IAAI,aAAa,EAAE,CAAC;YAClC,QAAQ,KAAK,CAAC,KAAK,EAAE,CAAC;gBACpB,KAAK,wBAAwB;oBAC3B,MAAM,CAAC,IAAI,CACT,IAAI,CAAC,cAAc,CAAC;wBAClB,kBAAkB,EAAE,KAA+B;qBACpD,CAAC,CACH,CAAC;oBACF,MAAM;gBACR,KAAK,0BAA0B;oBAC7B,MAAM,CAAC,IAAI,CACT,IAAI,CAAC,gBAAgB,CAAC;wBACpB,oBAAoB,EAAE,KAAiC;qBACxD,CAAC,CACH,CAAC;oBACF,MAAM;gBACR,KAAK,yBAAyB;oBAC5B,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC,CAAC;oBACpC,MAAM;gBACR,KAAK,yBAAyB;oBAC5B,MAAM,CAAC,IAAI,CACT,IAAI,CAAC,eAAe,CAAC;wBACnB,mBAAmB,EAAE,KAAgC;qBACtD,CAAC,CACH,CAAC;oBACF,MAAM;gBACR,KAAK,wBAAwB;oBAC3B,MAAM,CAAC,IAAI,CACT,IAAI,CAAC,gBAAgB,CAAC;wBACpB,oBAAoB,EAAE,KAA+B;qBACtD,CAAC,CACH,CAAC;oBACF,MAAM;gBACR,KAAK,uBAAuB;oBAC1B,MAAM,CAAC,IAAI,CACT,IAAI,CAAC,eAAe,CAAC;wBACnB,mBAAmB,EAAE,KAA8B;qBACpD,CAAC,CACH,CAAC;oBACF,MAAM;gBACR,KAAK,uBAAuB;oBAC1B,MAAM,CAAC,IAAI,CACT,IAAI,CAAC,aAAa,CAAC;wBACjB,iBAAiB,EAAE,KAA8B;qBAClD,CAAC,CACH,CAAC;oBACF,MAAM;gBACR,KAAK,wBAAwB;oBAC3B,MAAM,CAAC,IAAI,CACT,IAAI,CAAC,gBAAgB,CAAC;wBACpB,oBAAoB,EAAE,KAA+B;qBACtD,CAAC,CACH,CAAC;oBACF,MAAM;gBACR,KAAK,qBAAqB;oBACxB,MAAM,CAAC,IAAI,CACT,IAAI,CAAC,aAAa,CAAC;wBACjB,iBAAiB,EAAE,KAA4B;qBAChD,CAAC,CACH,CAAC;oBACF,MAAM;gBACR,KAAK,8BAA8B;oBACjC,MAAM,CAAC,IAAI,CACT,IAAI,CAAC,sBAAsB,CAAC;wBAC1B,0BAA0B,EAAE,KAAqC;qBAClE,CAAC,CACH,CAAC;oBACF,MAAM;gBACR;oBACE,MAAM,CAAC,KAAK,CAAC,sBAAsB,GAAG,KAAK,CAAC,KAAK,EAAE;wBACjD,SAAS,EAAE,KAAK,CAAC,KAAK;qBACvB,CAAC,CAAC;oBACH,MAAM;YACV,CAAC;QACH,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAGa,AAAP,MAAM,CAAC,gBAAgB,CAAC,KAE9B;QACC,MAAM,IAAI,uBAAuB,EAAE,CAAC;IACtC,CAAC;IAGa,AAAP,MAAM,CAAC,eAAe,CAAC,KAE7B;QACC,MAAM,IAAI,uBAAuB,EAAE,CAAC;IACtC,CAAC;IAGa,AAAP,MAAM,CAAC,aAAa,CAAC,KAE3B;QACC,MAAM,IAAI,uBAAuB,EAAE,CAAC;IACtC,CAAC;IAGa,AAAP,MAAM,CAAC,gBAAgB,CAAC,KAE9B;QACC,MAAM,IAAI,uBAAuB,EAAE,CAAC;IACtC,CAAC;IAGa,AAAP,MAAM,CAAC,aAAa,CAAC,KAE3B;QACC,MAAM,IAAI,uBAAuB,EAAE,CAAC;IACtC,CAAC;IAGa,AAAP,MAAM,CAAC,eAAe,CAAC,KAE7B;QACC,MAAM,IAAI,uBAAuB,EAAE,CAAC;IACtC,CAAC;IAGmB,AAAb,MAAM,CAAC,KAAK,CAAC,sCAAsC,CAAC,KAG1D;QACC,MAAM,IAAI,uBAAuB,EAAE,CAAC;IACtC,CAAC;IAGmB,AAAb,MAAM,CAAC,KAAK,CAAC,eAAe,CAAC,KAInC;QACC,MAAM,IAAI,uBAAuB,EAAE,CAAC;IACtC,CAAC;CACF;AA5WqB;IADnB,WAAW,EAAE;;;;uDAOb;AAGmB;IADnB,WAAW,EAAE;;;;2CAQb;AAGmB;IADnB,WAAW,EAAE;;;;0CASb;AAGmB;IADnB,WAAW,EAAE;;;;gDAOb;AAGmB;IADnB,WAAW,EAAE;;;;0CAOb;AAGa;IADb,WAAW,EAAE;;;;2CAKb;AAGa;IADb,WAAW,EAAE;;;;kDAOb;AAGmB;IADnB,WAAW,EAAE;;;;sCAMb;AAGmB;IADnB,WAAW,EAAE;;;;qDAOb;AAGmB;IADnB,WAAW,EAAE;;;;gDAgBb;AAGmB;IADnB,WAAW,EAAE;;;;+CAeb;AAGmB;IADnB,WAAW,EAAE;;;;2DAQb;AAGa;IADb,WAAW,EAAE;;;;iDAKb;AAGmB;IADnB,WAAW,EAAE;;;;yDAKM;AAGA;IADnB,WAAW,EAAE;;;;uDAOb;AAGmB;IADnB,WAAW,EAAE;;;;2DAOb;AAGmB;IADnB,WAAW,EAAE;;;;sCASb;AAGmB;IADnB,WAAW,EAAE;;;;kDAMb;AAGmB;IADnB,WAAW,EAAE;;;;6DAOb;AAGmB;IADnB,WAAW,EAAE;;;;wCAQb;AAGa;IADb,WAAW,EAAE;;;;yCAKb;AAGa;IADb,WAAW,EAAE;;;;0CAGb;AAGa;IADb,WAAW,EAAE;;;;2CAKb;AAGa;IADb,WAAW,EAAE;;;;yCAKb;AAGa;IADb,WAAW,EAAE;;;oCAGV,KAAK;+DAgFR;AAGa;IADb,WAAW,EAAE;;;;2CAKb;AAGa;IADb,WAAW,EAAE;;;;0CAKb;AAGa;IADb,WAAW,EAAE;;;;wCAKb;AAGa;IADb,WAAW,EAAE;;;;2CAKb;AAGa;IADb,WAAW,EAAE;;;;wCAKb;AAGa;IADb,WAAW,EAAE;;;;0CAKb;AAGmB;IADnB,WAAW,EAAE;;;;iEAMb;AAGmB;IADnB,WAAW,EAAE;;;;0CAOb"}
+{"version":3,"file":"WorkspaceBase.js","sourceRoot":"","sources":["../../../../../Server/Utils/Workspace/WorkspaceBase.ts"],"names":[],"mappings":";;;;;;;;;AAAA,OAAO,iBAAiB,MAAM,sCAAsC,CAAC;AAGrE,OAAO,uBAAuB,MAAM,kDAAkD,CAAC;AAmBvF,OAAO,MAAM,MAAM,WAAW,CAAC;AAE/B,OAAO,WAAW,MAAM,0BAA0B,CAAC;AA6BnD,MAAM,CAAC,OAAO,OAAO,aAAa;IAChC;;;;;;;;OAQG;IACI,MAAM,CAAC,mBAAmB,CAAC,GAAY;QAC5C,MAAM,mBAAmB,GAAW,eAAe,CAAC;QAEpD,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;YACtC,OAAO,mBAAmB,CAAC;QAC7B,CAAC;QAED,IAAI,GAAG,YAAY,KAAK,EAAE,CAAC;YACzB,OAAO,GAAG,CAAC,OAAO,IAAI,mBAAmB,CAAC;QAC5C,CAAC;QAED,IAAI,GAAG,YAAY,iBAAiB,EAAE,CAAC;YACrC,OAAO,GAAG,CAAC,OAAO,IAAI,mCAAmC,GAAG,CAAC,UAAU,EAAE,CAAC;QAC5E,CAAC;QAED,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;YAC5B,OAAO,GAAG,IAAI,mBAAmB,CAAC;QACpC,CAAC;QAED,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;YAC5B,MAAM,OAAO,GAAa,GAA6B,CAAC,OAAO,CAAC;YAEhE,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,EAAE,CAAC;gBAC3C,OAAO,OAAO,CAAC;YACjB,CAAC;QACH,CAAC;QAED,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC;IACrB,CAAC;IAGmB,AAAb,MAAM,CAAC,KAAK,CAAC,4BAA4B,CAAC,KAIhD;QACC,MAAM,IAAI,uBAAuB,EAAE,CAAC;IACtC,CAAC;IAGmB,AAAb,MAAM,CAAC,KAAK,CAAC,gBAAgB,CAAC,KAKpC;QACC,MAAM,IAAI,uBAAuB,EAAE,CAAC;IACtC,CAAC;IAGmB,AAAb,MAAM,CAAC,KAAK,CAAC,eAAe,CAAC,KAMnC;QACC,MAAM,IAAI,uBAAuB,EAAE,CAAC;IACtC,CAAC;IAGmB,AAAb,MAAM,CAAC,KAAK,CAAC,qBAAqB,CAAC,KAIzC;QACC,MAAM,IAAI,uBAAuB,EAAE,CAAC;IACtC,CAAC;IAGmB,AAAb,MAAM,CAAC,KAAK,CAAC,eAAe,CAAC,KAInC;QACC,MAAM,IAAI,uBAAuB,EAAE,CAAC;IACtC,CAAC;IAGa,AAAP,MAAM,CAAC,gBAAgB,CAAC,KAE9B;QACC,MAAM,IAAI,uBAAuB,EAAE,CAAC;IACtC,CAAC;IAGa,AAAP,MAAM,CAAC,uBAAuB,CAAC,KAIrC;QACC,MAAM,IAAI,uBAAuB,EAAE,CAAC;IACtC,CAAC;IAGmB,AAAb,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,KAG/B;QACC,MAAM,IAAI,uBAAuB,EAAE,CAAC;IACtC,CAAC;IAGmB,AAAb,MAAM,CAAC,KAAK,CAAC,0BAA0B,CAAC,KAI9C;QACC,MAAM,IAAI,uBAAuB,EAAE,CAAC;IACtC,CAAC;IAGmB,AAAb,MAAM,CAAC,KAAK,CAAC,qBAAqB,CAAC,IAIzC;QACC,KAAK,MAAM,WAAW,IAAI,IAAI,CAAC,iCAAiC;aAC7D,YAAY,EAAE,CAAC;YAChB,MAAM,IAAI,CAAC,oBAAoB,CAAC;gBAC9B,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,WAAW,EAAE,WAAW;gBACxB,gBAAgB,EACd,IAAI,CAAC,iCAAiC,CAAC,gBAAgB;gBACzD,SAAS,EAAE,IAAI,CAAC,SAAS;aAC1B,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAGmB,AAAb,MAAM,CAAC,KAAK,CAAC,oBAAoB,CAAC,IAKxC;QACC,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,gBAAgB,EAAE,CAAC;YAC3C,MAAM,IAAI,CAAC,gCAAgC,CAAC;gBAC1C,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,WAAW,EAAE,IAAI,CAAC,WAAW;gBAC7B,eAAe,EAAE,MAAM;gBACvB,SAAS,EAAE,IAAI,CAAC,SAAS;aAC1B,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAGmB,AAAb,MAAM,CAAC,KAAK,CAAC,gCAAgC,CAAC,KAKpD;QACC,MAAM,IAAI,uBAAuB,EAAE,CAAC;IACtC,CAAC;IAGa,AAAP,MAAM,CAAC,sBAAsB,CAAC,KAEpC;QACC,MAAM,IAAI,uBAAuB,EAAE,CAAC;IACtC,CAAC;IAGmB,AAAb,MAAM,CAAC,KAAK,CAAC,8BAA8B,CAAC,KAIlD,IAAkB,CAAC;IAGA,AAAb,MAAM,CAAC,KAAK,CAAC,4BAA4B,CAAC,KAIhD;QACC,MAAM,IAAI,uBAAuB,EAAE,CAAC;IACtC,CAAC;IAGmB,AAAb,MAAM,CAAC,KAAK,CAAC,gCAAgC,CAAC,KAIpD;QACC,MAAM,IAAI,uBAAuB,EAAE,CAAC;IACtC,CAAC;IAGmB,AAAb,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,KAM/B;QACC,MAAM,IAAI,uBAAuB,EAAE,CAAC;IACtC,CAAC;IAGmB,AAAb,MAAM,CAAC,KAAK,CAAC,uBAAuB,CAAC,KAG3C;QACC,MAAM,IAAI,uBAAuB,EAAE,CAAC;IACtC,CAAC;IAGmB,AAAb,MAAM,CAAC,KAAK,CAAC,kCAAkC,CAAC,KAItD;QACC,MAAM,IAAI,uBAAuB,EAAE,CAAC;IACtC,CAAC;IAGmB,AAAb,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,KAKjC;QACC,MAAM,IAAI,uBAAuB,EAAE,CAAC;IACtC,CAAC;IAGa,AAAP,MAAM,CAAC,cAAc,CAAC,KAE5B;QACC,MAAM,IAAI,uBAAuB,EAAE,CAAC;IACtC,CAAC;IAGa,AAAP,MAAM,CAAC,eAAe;QAC3B,MAAM,IAAI,uBAAuB,EAAE,CAAC;IACtC,CAAC;IAGa,AAAP,MAAM,CAAC,gBAAgB,CAAC,KAE9B;QACC,MAAM,IAAI,uBAAuB,EAAE,CAAC;IACtC,CAAC;IAGa,AAAP,MAAM,CAAC,cAAc,CAAC,KAE5B;QACC,MAAM,IAAI,uBAAuB,EAAE,CAAC;IACtC,CAAC;IAGa,AAAP,MAAM,CAAC,oCAAoC,CAAC,IAElD;QACC,MAAM,EAAE,aAAa,EAAE,GAAG,IAAI,CAAC;QAE/B,MAAM,MAAM,GAAsB,EAAE,CAAC;QACrC,KAAK,MAAM,KAAK,IAAI,aAAa,EAAE,CAAC;YAClC,QAAQ,KAAK,CAAC,KAAK,EAAE,CAAC;gBACpB,KAAK,wBAAwB;oBAC3B,MAAM,CAAC,IAAI,CACT,IAAI,CAAC,cAAc,CAAC;wBAClB,kBAAkB,EAAE,KAA+B;qBACpD,CAAC,CACH,CAAC;oBACF,MAAM;gBACR,KAAK,0BAA0B;oBAC7B,MAAM,CAAC,IAAI,CACT,IAAI,CAAC,gBAAgB,CAAC;wBACpB,oBAAoB,EAAE,KAAiC;qBACxD,CAAC,CACH,CAAC;oBACF,MAAM;gBACR,KAAK,yBAAyB;oBAC5B,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC,CAAC;oBACpC,MAAM;gBACR,KAAK,yBAAyB;oBAC5B,MAAM,CAAC,IAAI,CACT,IAAI,CAAC,eAAe,CAAC;wBACnB,mBAAmB,EAAE,KAAgC;qBACtD,CAAC,CACH,CAAC;oBACF,MAAM;gBACR,KAAK,wBAAwB;oBAC3B,MAAM,CAAC,IAAI,CACT,IAAI,CAAC,gBAAgB,CAAC;wBACpB,oBAAoB,EAAE,KAA+B;qBACtD,CAAC,CACH,CAAC;oBACF,MAAM;gBACR,KAAK,uBAAuB;oBAC1B,MAAM,CAAC,IAAI,CACT,IAAI,CAAC,eAAe,CAAC;wBACnB,mBAAmB,EAAE,KAA8B;qBACpD,CAAC,CACH,CAAC;oBACF,MAAM;gBACR,KAAK,uBAAuB;oBAC1B,MAAM,CAAC,IAAI,CACT,IAAI,CAAC,aAAa,CAAC;wBACjB,iBAAiB,EAAE,KAA8B;qBAClD,CAAC,CACH,CAAC;oBACF,MAAM;gBACR,KAAK,wBAAwB;oBAC3B,MAAM,CAAC,IAAI,CACT,IAAI,CAAC,gBAAgB,CAAC;wBACpB,oBAAoB,EAAE,KAA+B;qBACtD,CAAC,CACH,CAAC;oBACF,MAAM;gBACR,KAAK,qBAAqB;oBACxB,MAAM,CAAC,IAAI,CACT,IAAI,CAAC,aAAa,CAAC;wBACjB,iBAAiB,EAAE,KAA4B;qBAChD,CAAC,CACH,CAAC;oBACF,MAAM;gBACR,KAAK,8BAA8B;oBACjC,MAAM,CAAC,IAAI,CACT,IAAI,CAAC,sBAAsB,CAAC;wBAC1B,0BAA0B,EAAE,KAAqC;qBAClE,CAAC,CACH,CAAC;oBACF,MAAM;gBACR;oBACE,MAAM,CAAC,KAAK,CAAC,sBAAsB,GAAG,KAAK,CAAC,KAAK,EAAE;wBACjD,SAAS,EAAE,KAAK,CAAC,KAAK;qBACvB,CAAC,CAAC;oBACH,MAAM;YACV,CAAC;QACH,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAGa,AAAP,MAAM,CAAC,gBAAgB,CAAC,KAE9B;QACC,MAAM,IAAI,uBAAuB,EAAE,CAAC;IACtC,CAAC;IAGa,AAAP,MAAM,CAAC,eAAe,CAAC,KAE7B;QACC,MAAM,IAAI,uBAAuB,EAAE,CAAC;IACtC,CAAC;IAGa,AAAP,MAAM,CAAC,aAAa,CAAC,KAE3B;QACC,MAAM,IAAI,uBAAuB,EAAE,CAAC;IACtC,CAAC;IAGa,AAAP,MAAM,CAAC,gBAAgB,CAAC,KAE9B;QACC,MAAM,IAAI,uBAAuB,EAAE,CAAC;IACtC,CAAC;IAGa,AAAP,MAAM,CAAC,aAAa,CAAC,KAE3B;QACC,MAAM,IAAI,uBAAuB,EAAE,CAAC;IACtC,CAAC;IAGa,AAAP,MAAM,CAAC,eAAe,CAAC,KAE7B;QACC,MAAM,IAAI,uBAAuB,EAAE,CAAC;IACtC,CAAC;IAGmB,AAAb,MAAM,CAAC,KAAK,CAAC,sCAAsC,CAAC,KAG1D;QACC,MAAM,IAAI,uBAAuB,EAAE,CAAC;IACtC,CAAC;IAGmB,AAAb,MAAM,CAAC,KAAK,CAAC,eAAe,CAAC,KAInC;QACC,MAAM,IAAI,uBAAuB,EAAE,CAAC;IACtC,CAAC;CACF;AA5WqB;IADnB,WAAW,EAAE;;;;uDAOb;AAGmB;IADnB,WAAW,EAAE;;;;2CAQb;AAGmB;IADnB,WAAW,EAAE;;;;0CASb;AAGmB;IADnB,WAAW,EAAE;;;;gDAOb;AAGmB;IADnB,WAAW,EAAE;;;;0CAOb;AAGa;IADb,WAAW,EAAE;;;;2CAKb;AAGa;IADb,WAAW,EAAE;;;;kDAOb;AAGmB;IADnB,WAAW,EAAE;;;;sCAMb;AAGmB;IADnB,WAAW,EAAE;;;;qDAOb;AAGmB;IADnB,WAAW,EAAE;;;;gDAgBb;AAGmB;IADnB,WAAW,EAAE;;;;+CAeb;AAGmB;IADnB,WAAW,EAAE;;;;2DAQb;AAGa;IADb,WAAW,EAAE;;;;iDAKb;AAGmB;IADnB,WAAW,EAAE;;;;yDAKM;AAGA;IADnB,WAAW,EAAE;;;;uDAOb;AAGmB;IADnB,WAAW,EAAE;;;;2DAOb;AAGmB;IADnB,WAAW,EAAE;;;;sCASb;AAGmB;IADnB,WAAW,EAAE;;;;kDAMb;AAGmB;IADnB,WAAW,EAAE;;;;6DAOb;AAGmB;IADnB,WAAW,EAAE;;;;wCAQb;AAGa;IADb,WAAW,EAAE;;;;yCAKb;AAGa;IADb,WAAW,EAAE;;;;0CAGb;AAGa;IADb,WAAW,EAAE;;;;2CAKb;AAGa;IADb,WAAW,EAAE;;;;yCAKb;AAGa;IADb,WAAW,EAAE;;;oCAGV,KAAK;+DAgFR;AAGa;IADb,WAAW,EAAE;;;;2CAKb;AAGa;IADb,WAAW,EAAE;;;;0CAKb;AAGa;IADb,WAAW,EAAE;;;;wCAKb;AAGa;IADb,WAAW,EAAE;;;;2CAKb;AAGa;IADb,WAAW,EAAE;;;;wCAKb;AAGa;IADb,WAAW,EAAE;;;;0CAKb;AAGmB;IADnB,WAAW,EAAE;;;;iEAMb;AAGmB;IADnB,WAAW,EAAE;;;;0CAOb"}

package/build/dist/Server/Utils/Workspace/WorkspaceOAuthState.js

@@ -0,0 +1,199 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+import crypto from "crypto";
+import GlobalCache from "../../Infrastructure/GlobalCache";
+import CookieUtil from "../Cookie";
+import logger from "../Logger";
+import CaptureSpan from "../Telemetry/CaptureSpan";
+import ObjectID from "../../../Types/ObjectID";
+import Permission from "../../../Types/Permission";
+/*
+ * Every redirect-based flow that ends with OneUptime writing a Slack or
+ * Microsoft Teams binding. A state minted for one flow is never accepted by
+ * another, so a nonce issued for "sign in with Teams" cannot be spent on the
+ * admin-consent callback.
+ */
+export var WorkspaceOAuthFlow;
+(function (WorkspaceOAuthFlow) {
+    WorkspaceOAuthFlow["SlackInstall"] = "SlackInstall";
+    WorkspaceOAuthFlow["SlackUserSignIn"] = "SlackUserSignIn";
+    WorkspaceOAuthFlow["MicrosoftTeamsUserSignIn"] = "MicrosoftTeamsUserSignIn";
+    WorkspaceOAuthFlow["MicrosoftTeamsAdminConsent"] = "MicrosoftTeamsAdminConsent";
+    // Second leg of admin consent: the sign-in that proves which tenant it was.
+    WorkspaceOAuthFlow["MicrosoftTeamsAdminConsentSignIn"] = "MicrosoftTeamsAdminConsentSignIn";
+})(WorkspaceOAuthFlow || (WorkspaceOAuthFlow = {}));
+const STATE_NAMESPACE = "workspace-oauth-state";
+// 32 random bytes, base64url encoded without padding, is always 43 characters.
+const TOKEN_PATTERN = /^[A-Za-z0-9_-]{43}$/;
+/*
+ * The `state` parameter of the Slack and Microsoft Teams connect flows.
+ *
+ * The callbacks of those flows are unauthenticated by nature — Slack and
+ * Microsoft redirect the browser to them — and they write the binding that
+ * everything downstream trusts: which workspace or tenant a project's bot
+ * token belongs to, and which chat identity acts as which OneUptime user. So
+ * the callback must not learn the project or the user from anything in the
+ * redirect itself.
+ *
+ * The state is an opaque random token. What it stands for lives only on
+ * the server, recorded by an authenticated route after checking the caller
+ * may connect that project:
+ *
+ *  - it is single-use: the record is read and deleted in one atomic step, so
+ *    a replayed or concurrently double-submitted state is refused;
+ *  - it expires after EXPIRES_IN_SECONDS;
+ *  - it is bound to the browser that started the flow. A random value is kept
+ *    in an httpOnly cookie and only its hash is stored with the record, so a
+ *    connect link handed to someone else (to complete with THEIR workspace
+ *    or tenant) is refused at the callback, because their browser does not
+ *    hold the cookie.
+ *
+ * The raw state is never stored either — the cache key is its SHA-256 — so a
+ * read of the cache does not yield a usable state.
+ */
+class WorkspaceOAuthState {
+    static async create(data) {
+        /*
+         * One binding value per browser, reused while it lasts, so two flows
+         * started in two tabs do not invalidate each other.
+         */
+        const existingBinding = CookieUtil.getCookieFromExpressRequest(data.req, WorkspaceOAuthState.BROWSER_BINDING_COOKIE_NAME);
+        const browserBinding = WorkspaceOAuthState.isWellFormedToken(existingBinding)
+            ? existingBinding
+            : WorkspaceOAuthState.generateToken();
+        CookieUtil.setCookie(data.res, WorkspaceOAuthState.BROWSER_BINDING_COOKIE_NAME, browserBinding, {
+            maxAge: WorkspaceOAuthState.EXPIRES_IN_SECONDS * 1000,
+            httpOnly: true,
+        });
+        const state = WorkspaceOAuthState.generateToken();
+        const oidcNonce = data.includeOidcNonce
+            ? WorkspaceOAuthState.generateToken()
+            : undefined;
+        const record = {
+            flow: data.flow,
+            projectId: data.projectId.toString(),
+            userId: data.userId.toString(),
+            browserBindingHash: WorkspaceOAuthState.hash(browserBinding),
+            expiresAt: new Date(Date.now() + WorkspaceOAuthState.EXPIRES_IN_SECONDS * 1000).toISOString(),
+        };
+        if (data.tenantId) {
+            record["tenantId"] = data.tenantId;
+        }
+        if (oidcNonce) {
+            record["oidcNonce"] = oidcNonce;
+        }
+        await GlobalCache.setString(STATE_NAMESPACE, WorkspaceOAuthState.hash(state), JSON.stringify(record), {
+            expiresInSeconds: WorkspaceOAuthState.EXPIRES_IN_SECONDS,
+        });
+        return oidcNonce ? { state, oidcNonce } : { state };
+    }
+    /*
+     * Spends a state. Returns what it stood for, or null when it must be
+     * refused: unknown, expired, already used, minted for a different flow, or
+     * presented by a browser other than the one that started the flow.
+     *
+     * The record is deleted before any of those checks run, so a state is burnt
+     * by its first presentation whatever the outcome — a failed attempt cannot
+     * be retried with a different cookie.
+     */
+    static async consume(data) {
+        if (!WorkspaceOAuthState.isWellFormedToken(data.state)) {
+            logger.debug("Workspace OAuth callback refused: malformed state.");
+            return null;
+        }
+        const rawRecord = await GlobalCache.getAndDeleteString(STATE_NAMESPACE, WorkspaceOAuthState.hash(data.state));
+        if (!rawRecord) {
+            logger.debug("Workspace OAuth callback refused: state is unknown, expired, or already used.");
+            return null;
+        }
+        let record;
+        try {
+            record = JSON.parse(rawRecord);
+        }
+        catch (_a) {
+            return null;
+        }
+        const flow = record["flow"];
+        if (!data.flows.includes(flow)) {
+            logger.warn(`Workspace OAuth callback refused: state was issued for ${String(flow)}, not ${data.flows.join(" / ")}.`);
+            return null;
+        }
+        const expiresAt = Date.parse(String(record["expiresAt"]));
+        if (Number.isNaN(expiresAt) || expiresAt <= Date.now()) {
+            logger.debug("Workspace OAuth callback refused: state has expired.");
+            return null;
+        }
+        const browserBinding = CookieUtil.getCookieFromExpressRequest(data.req, WorkspaceOAuthState.BROWSER_BINDING_COOKIE_NAME);
+        if (!WorkspaceOAuthState.isWellFormedToken(browserBinding) ||
+            !WorkspaceOAuthState.hashesMatch(WorkspaceOAuthState.hash(browserBinding), String(record["browserBindingHash"] || ""))) {
+            logger.warn("Workspace OAuth callback refused: completed in a different browser from the one that started it.");
+            return null;
+        }
+        const projectId = String(record["projectId"] || "");
+        const userId = String(record["userId"] || "");
+        if (!projectId || !userId) {
+            return null;
+        }
+        return {
+            flow,
+            projectId: new ObjectID(projectId),
+            userId: new ObjectID(userId),
+            tenantId: record["tenantId"] || undefined,
+            oidcNonce: record["oidcNonce"] || undefined,
+        };
+    }
+    static generateToken() {
+        return crypto.randomBytes(32).toString("base64url");
+    }
+    static isWellFormedToken(value) {
+        return typeof value === "string" && TOKEN_PATTERN.test(value);
+    }
+    static hash(value) {
+        return crypto.createHash("sha256").update(value).digest("hex");
+    }
+    static hashesMatch(a, b) {
+        const bufferA = Buffer.from(a, "utf8");
+        const bufferB = Buffer.from(b, "utf8");
+        return (bufferA.length === bufferB.length &&
+            crypto.timingSafeEqual(bufferA, bufferB));
+    }
+}
+/*
+ * Long enough for an admin to get through a Microsoft or Slack sign-in with
+ * MFA and read the consent screen; short enough that an abandoned state is
+ * not a standing credential.
+ */
+WorkspaceOAuthState.EXPIRES_IN_SECONDS = 15 * 60;
+WorkspaceOAuthState.BROWSER_BINDING_COOKIE_NAME = "oneuptime-workspace-oauth-binding";
+WorkspaceOAuthState.INVALID_STATE_MESSAGE = "This connection link is invalid, has expired, or has already been used. Please start connecting again from your OneUptime project settings.";
+/*
+ * Who may start a flow that binds a Slack workspace or Microsoft 365 tenant
+ * to a project. These are the roles that could create that binding through
+ * the CRUD API before creation was restricted to these flows.
+ */
+WorkspaceOAuthState.MANAGE_CONNECTION_PERMISSIONS = [
+    Permission.ProjectOwner,
+    Permission.ProjectAdmin,
+    Permission.ProjectMember,
+];
+export default WorkspaceOAuthState;
+__decorate([
+    CaptureSpan(),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object]),
+    __metadata("design:returntype", Promise)
+], WorkspaceOAuthState, "create", null);
+__decorate([
+    CaptureSpan(),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object]),
+    __metadata("design:returntype", Promise)
+], WorkspaceOAuthState, "consume", null);
+//# sourceMappingURL=WorkspaceOAuthState.js.map

package/build/dist/Server/Utils/Workspace/WorkspaceOAuthState.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"WorkspaceOAuthState.js","sourceRoot":"","sources":["../../../../../Server/Utils/Workspace/WorkspaceOAuthState.ts"],"names":[],"mappings":";;;;;;;;;AAAA,OAAO,MAAM,MAAM,QAAQ,CAAC;AAC5B,OAAO,WAAW,MAAM,kCAAkC,CAAC;AAC3D,OAAO,UAAU,MAAM,WAAW,CAAC;AAEnC,OAAO,MAAM,MAAM,WAAW,CAAC;AAC/B,OAAO,WAAW,MAAM,0BAA0B,CAAC;AAEnD,OAAO,QAAQ,MAAM,yBAAyB,CAAC;AAC/C,OAAO,UAAU,MAAM,2BAA2B,CAAC;AAEnD;;;;;GAKG;AACH,MAAM,CAAN,IAAY,kBAOX;AAPD,WAAY,kBAAkB;IAC5B,mDAA6B,CAAA;IAC7B,yDAAmC,CAAA;IACnC,2EAAqD,CAAA;IACrD,+EAAyD,CAAA;IACzD,4EAA4E;IAC5E,2FAAqE,CAAA;AACvE,CAAC,EAPW,kBAAkB,KAAlB,kBAAkB,QAO7B;AAiBD,MAAM,eAAe,GAAW,uBAAuB,CAAC;AAExD,+EAA+E;AAC/E,MAAM,aAAa,GAAW,qBAAqB,CAAC;AAEpD;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,MAAqB,mBAAmB;IA0BlB,AAAb,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,IAQ1B;QACC;;;WAGG;QACH,MAAM,eAAe,GACnB,UAAU,CAAC,2BAA2B,CACpC,IAAI,CAAC,GAAG,EACR,mBAAmB,CAAC,2BAA2B,CAChD,CAAC;QAEJ,MAAM,cAAc,GAAW,mBAAmB,CAAC,iBAAiB,CAClE,eAAe,CAChB;YACC,CAAC,CAAC,eAAe;YACjB,CAAC,CAAC,mBAAmB,CAAC,aAAa,EAAE,CAAC;QAExC,UAAU,CAAC,SAAS,CAClB,IAAI,CAAC,GAAG,EACR,mBAAmB,CAAC,2BAA2B,EAC/C,cAAc,EACd;YACE,MAAM,EAAE,mBAAmB,CAAC,kBAAkB,GAAG,IAAI;YACrD,QAAQ,EAAE,IAAI;SACf,CACF,CAAC;QAEF,MAAM,KAAK,GAAW,mBAAmB,CAAC,aAAa,EAAE,CAAC;QAC1D,MAAM,SAAS,GAAuB,IAAI,CAAC,gBAAgB;YACzD,CAAC,CAAC,mBAAmB,CAAC,aAAa,EAAE;YACrC,CAAC,CAAC,SAAS,CAAC;QAEd,MAAM,MAAM,GAAe;YACzB,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE;YACpC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE;YAC9B,kBAAkB,EAAE,mBAAmB,CAAC,IAAI,CAAC,cAAc,CAAC;YAC5D,SAAS,EAAE,IAAI,IAAI,CACjB,IAAI,CAAC,GAAG,EAAE,GAAG,mBAAmB,CAAC,kBAAkB,GAAG,IAAI,CAC3D,CAAC,WAAW,EAAE;SAChB,CAAC;QAEF,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAClB,MAAM,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC;QACrC,CAAC;QAED,IAAI,SAAS,EAAE,CAAC;YACd,MAAM,CAAC,WAAW,CAAC,GAAG,SAAS,CAAC;QAClC,CAAC;QAED,MAAM,WAAW,CAAC,SAAS,CACzB,eAAe,EACf,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC,EAC/B,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EACtB;YACE,gBAAgB,EAAE,mBAAmB,CAAC,kBAAkB;SACzD,CACF,CAAC;QAEF,OAAO,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC;IACtD,CAAC;IAED;;;;;;;;OAQG;IAEiB,AAAb,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,IAI3B;QACC,IAAI,CAAC,mBAAmB,CAAC,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YACvD,MAAM,CAAC,KAAK,CAAC,oDAAoD,CAAC,CAAC;YACnE,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,SAAS,GAAkB,MAAM,WAAW,CAAC,kBAAkB,CACnE,eAAe,EACf,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CACrC,CAAC;QAEF,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CACV,+EAA+E,CAChF,CAAC;YACF,OAAO,IAAI,CAAC;QACd,CAAC;QAED,IAAI,MAAkB,CAAC;QAEvB,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAe,CAAC;QAC/C,CAAC;QAAC,WAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,IAAI,GAAuB,MAAM,CAAC,MAAM,CAAuB,CAAC;QAEtE,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YAC/B,MAAM,CAAC,IAAI,CACT,0DAA0D,MAAM,CAAC,IAAI,CAAC,SAAS,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CACzG,CAAC;YACF,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,SAAS,GAAW,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;QAElE,IAAI,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;YACvD,MAAM,CAAC,KAAK,CAAC,sDAAsD,CAAC,CAAC;YACrE,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,cAAc,GAClB,UAAU,CAAC,2BAA2B,CACpC,IAAI,CAAC,GAAG,EACR,mBAAmB,CAAC,2BAA2B,CAChD,CAAC;QAEJ,IACE,CAAC,mBAAmB,CAAC,iBAAiB,CAAC,cAAc,CAAC;YACtD,CAAC,mBAAmB,CAAC,WAAW,CAC9B,mBAAmB,CAAC,IAAI,CAAC,cAAc,CAAC,EACxC,MAAM,CAAC,MAAM,CAAC,oBAAoB,CAAC,IAAI,EAAE,CAAC,CAC3C,EACD,CAAC;YACD,MAAM,CAAC,IAAI,CACT,kGAAkG,CACnG,CAAC;YACF,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,SAAS,GAAW,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,CAAC;QAC5D,MAAM,MAAM,GAAW,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;QAEtD,IAAI,CAAC,SAAS,IAAI,CAAC,MAAM,EAAE,CAAC;YAC1B,OAAO,IAAI,CAAC;QACd,CAAC;QAED,OAAO;YACL,IAAI;YACJ,SAAS,EAAE,IAAI,QAAQ,CAAC,SAAS,CAAC;YAClC,MAAM,EAAE,IAAI,QAAQ,CAAC,MAAM,CAAC;YAC5B,QAAQ,EAAG,MAAM,CAAC,UAAU,CAAwB,IAAI,SAAS;YACjE,SAAS,EAAG,MAAM,CAAC,WAAW,CAAwB,IAAI,SAAS;SACpE,CAAC;IACJ,CAAC;IAEO,MAAM,CAAC,aAAa;QAC1B,OAAO,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IACtD,CAAC;IAEO,MAAM,CAAC,iBAAiB,CAAC,KAAc;QAC7C,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAChE,CAAC;IAEO,MAAM,CAAC,IAAI,CAAC,KAAa;QAC/B,OAAO,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACjE,CAAC;IAEO,MAAM,CAAC,WAAW,CAAC,CAAS,EAAE,CAAS;QAC7C,MAAM,OAAO,GAAW,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;QAC/C,MAAM,OAAO,GAAW,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;QAE/C,OAAO,CACL,OAAO,CAAC,MAAM,KAAK,OAAO,CAAC,MAAM;YACjC,MAAM,CAAC,eAAe,CAAC,OAAO,EAAE,OAAO,CAAC,CACzC,CAAC;IACJ,CAAC;;AA9MD;;;;GAIG;AACoB,sCAAkB,GAAW,EAAE,GAAG,EAAE,CAAC;AAErC,+CAA2B,GAChD,mCAAmC,CAAC;AAEf,yCAAqB,GAC1C,6IAA6I,CAAC;AAEhJ;;;;GAIG;AACoB,iDAA6B,GAAsB;IACxE,UAAU,CAAC,YAAY;IACvB,UAAU,CAAC,YAAY;IACvB,UAAU,CAAC,aAAa;CACzB,CAAC;eAvBiB,mBAAmB;AA0BlB;IADnB,WAAW,EAAE;;;;uCAqEb;AAYmB;IADnB,WAAW,EAAE;;;;wCAgFb"}

package/build/dist/Server/Utils/Workspace/WorkspaceProjectReferenceValidator.js

@@ -0,0 +1,91 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+import ObjectID from "../../../Types/ObjectID";
+import LabelService from "../../Services/LabelService";
+import MonitorService from "../../Services/MonitorService";
+import MonitorStatusService from "../../Services/MonitorStatusService";
+import OnCallDutyPolicyService from "../../Services/OnCallDutyPolicyService";
+import ProjectScopedReferenceValidator from "../Database/ProjectScopedReferenceValidator";
+import CaptureSpan from "../Telemetry/CaptureSpan";
+/*
+ * Slack and Microsoft Teams create incidents and scheduled maintenance events
+ * as root, from ids the chat client submits. The form only offers the linked
+ * project's monitors, labels and on-call policies, but the submitted payload is
+ * not bound to that form — a user linked to one project can send ids that
+ * belong to another.
+ *
+ * IncidentService / ScheduledMaintenanceService check the severity, state and
+ * change-to monitor status on create, but not the many-to-many relations. So
+ * without this check, another project's monitors get attached to the new
+ * record (and have their status changed by it), its labels are shown in this
+ * project, and its on-call policies are paged for this project's incident.
+ */
+export default class WorkspaceProjectReferenceValidator {
+    // Adaptive Card multi-selects submit their values as one comma-separated string.
+    static parseCommaSeparatedIds(value) {
+        if (!value) {
+            return [];
+        }
+        return value
+            .split(",")
+            .map((id) => {
+            return id.trim();
+        })
+            .filter((id) => {
+            return id;
+        })
+            .map((id) => {
+            return new ObjectID(id);
+        });
+    }
+    static async validateReferencesBelongToProject(data) {
+        const references = [];
+        for (const monitorId of data.monitorIds || []) {
+            references.push({
+                modelName: "Monitor",
+                id: monitorId,
+                service: MonitorService,
+            });
+        }
+        for (const labelId of data.labelIds || []) {
+            references.push({
+                modelName: "Label",
+                id: labelId,
+                service: LabelService,
+            });
+        }
+        for (const onCallDutyPolicyId of data.onCallDutyPolicyIds || []) {
+            references.push({
+                modelName: "On-Call Policy",
+                id: onCallDutyPolicyId,
+                service: OnCallDutyPolicyService,
+            });
+        }
+        if (data.monitorStatusId) {
+            references.push({
+                modelName: "Monitor Status",
+                id: data.monitorStatusId,
+                service: MonitorStatusService,
+            });
+        }
+        await ProjectScopedReferenceValidator.validateReferencesBelongToProject({
+            projectId: data.projectId,
+            subject: data.subject,
+            references: references,
+        });
+    }
+}
+__decorate([
+    CaptureSpan(),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object]),
+    __metadata("design:returntype", Promise)
+], WorkspaceProjectReferenceValidator, "validateReferencesBelongToProject", null);
+//# sourceMappingURL=WorkspaceProjectReferenceValidator.js.map

package/build/dist/Server/Utils/Workspace/WorkspaceProjectReferenceValidator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"WorkspaceProjectReferenceValidator.js","sourceRoot":"","sources":["../../../../../Server/Utils/Workspace/WorkspaceProjectReferenceValidator.ts"],"names":[],"mappings":";;;;;;;;;AAAA,OAAO,QAAQ,MAAM,yBAAyB,CAAC;AAC/C,OAAO,YAAY,MAAM,6BAA6B,CAAC;AACvD,OAAO,cAAc,MAAM,+BAA+B,CAAC;AAC3D,OAAO,oBAAoB,MAAM,qCAAqC,CAAC;AACvE,OAAO,uBAAuB,MAAM,wCAAwC,CAAC;AAC7E,OAAO,+BAEN,MAAM,6CAA6C,CAAC;AACrD,OAAO,WAAW,MAAM,0BAA0B,CAAC;AAEnD;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,OAAO,OAAO,kCAAkC;IACrD,iFAAiF;IAC1E,MAAM,CAAC,sBAAsB,CAClC,KAAgC;QAEhC,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,OAAO,KAAK;aACT,KAAK,CAAC,GAAG,CAAC;aACV,GAAG,CAAC,CAAC,EAAU,EAAE,EAAE;YAClB,OAAO,EAAE,CAAC,IAAI,EAAE,CAAC;QACnB,CAAC,CAAC;aACD,MAAM,CAAC,CAAC,EAAU,EAAE,EAAE;YACrB,OAAO,EAAE,CAAC;QACZ,CAAC,CAAC;aACD,GAAG,CAAC,CAAC,EAAU,EAAE,EAAE;YAClB,OAAO,IAAI,QAAQ,CAAC,EAAE,CAAC,CAAC;QAC1B,CAAC,CAAC,CAAC;IACP,CAAC;IAGmB,AAAb,MAAM,CAAC,KAAK,CAAC,iCAAiC,CAAC,IAQrD;QACC,MAAM,UAAU,GAAkC,EAAE,CAAC;QAErD,KAAK,MAAM,SAAS,IAAI,IAAI,CAAC,UAAU,IAAI,EAAE,EAAE,CAAC;YAC9C,UAAU,CAAC,IAAI,CAAC;gBACd,SAAS,EAAE,SAAS;gBACpB,EAAE,EAAE,SAAS;gBACb,OAAO,EAAE,cAAc;aACxB,CAAC,CAAC;QACL,CAAC;QAED,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,QAAQ,IAAI,EAAE,EAAE,CAAC;YAC1C,UAAU,CAAC,IAAI,CAAC;gBACd,SAAS,EAAE,OAAO;gBAClB,EAAE,EAAE,OAAO;gBACX,OAAO,EAAE,YAAY;aACtB,CAAC,CAAC;QACL,CAAC;QAED,KAAK,MAAM,kBAAkB,IAAI,IAAI,CAAC,mBAAmB,IAAI,EAAE,EAAE,CAAC;YAChE,UAAU,CAAC,IAAI,CAAC;gBACd,SAAS,EAAE,gBAAgB;gBAC3B,EAAE,EAAE,kBAAkB;gBACtB,OAAO,EAAE,uBAAuB;aACjC,CAAC,CAAC;QACL,CAAC;QAED,IAAI,IAAI,CAAC,eAAe,EAAE,CAAC;YACzB,UAAU,CAAC,IAAI,CAAC;gBACd,SAAS,EAAE,gBAAgB;gBAC3B,EAAE,EAAE,IAAI,CAAC,eAAe;gBACxB,OAAO,EAAE,oBAAoB;aAC9B,CAAC,CAAC;QACL,CAAC;QAED,MAAM,+BAA+B,CAAC,iCAAiC,CAAC;YACtE,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,UAAU,EAAE,UAAU;SACvB,CAAC,CAAC;IACL,CAAC;CACF;AAjDqB;IADnB,WAAW,EAAE;;;;iFAiDb"}