npm - @oneuptime/common - Versions diffs - 14.0.1 → 14.0.3 - Mend

@oneuptime/common 14.0.1 → 14.0.3

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (1241) hide show

package/build/dist/Server/Utils/Rules/OwnerRuleAssignment.js CHANGED Viewed

@@ -1,5 +1,6 @@
 import { LIMIT_PER_PROJECT } from "../../../Types/Database/LimitMax";
 import ObjectID from "../../../Types/ObjectID";
+import TeamMemberService from "../../Services/TeamMemberService";
 import QueryHelper from "../../Types/Database/QueryHelper";
 import PostgresErrorTranslator from "../Database/PostgresErrorTranslator";
 function uniqueIds(ids) {
@@ -68,11 +69,15 @@ export default class OwnerRuleAssignment {
     }
     /*
      * Inserts one owner row. Resolves true when the row was written and false
-     * when the owner was already there - whether the owner service's own check
-     * found the existing row, or the unique index rejected a concurrent insert
-     * that got past it. Every other failure is thrown as before.
+     * when it was not: the owner was already there - whether the owner
+     * service's own check found the existing row, or the unique index rejected
+     * a concurrent insert that got past it - or the owner is a user who is not
+     * a member of the project. Every other failure is thrown as before.
      */
     static async createOwner(data) {
+        if (!(await OwnerRuleAssignment.isOwnerInProject(data))) {
+            return false;
+        }
         try {
             await data.ownerService.create({
                 data: data.owner,
@@ -146,6 +151,24 @@ export default class OwnerRuleAssignment {
         }
         return added;
     }
+    /*
+     * Team owners are always in the project. A user owner must be a member:
+     * see TeamMemberService.isUserMemberOfProject.
+     */
+    static async isOwnerInProject(data) {
+        var _a, _b, _c;
+        const userId = (_a = data.owner
+            .getColumnValue("userId")) === null || _a === void 0 ? void 0 : _a.toString();
+        const projectId = ((_b = data.owner.getColumnValue("projectId")) === null || _b === void 0 ? void 0 : _b.toString()) ||
+            ((_c = data.props.tenantId) === null || _c === void 0 ? void 0 : _c.toString());
+        if (!userId || !projectId) {
+            return true;
+        }
+        return await TeamMemberService.isUserMemberOfProject({
+            projectId: new ObjectID(projectId),
+            userId: new ObjectID(userId),
+        });
+    }
     static buildOwner(data) {
         const owner = new data.ownerService.modelType();
         owner.setColumnValue(data.resourceIdColumn, data.resourceId);

package/build/dist/Server/Utils/Rules/OwnerRuleAssignment.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"OwnerRuleAssignment.js","sourceRoot":"","sources":["../../../../../Server/Utils/Rules/OwnerRuleAssignment.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,iBAAiB,EAAE,MAAM,kCAAkC,CAAC;AACrE,OAAO,QAAQ,MAAM,yBAAyB,CAAC;AAE/C,OAAO,WAAW,MAAM,kCAAkC,CAAC;AAE3D,OAAO,uBAAuB,MAAM,qCAAqC,CAAC;~~AAqB1E~~,SAAS,SAAS,CAAC,GAA6B;IAC9C,MAAM,IAAI,GAAgB,IAAI,GAAG,EAAU,CAAC;IAC5C,MAAM,MAAM,GAAoB,EAAE,CAAC;IAEnC,KAAK,MAAM,EAAE,IAAI,GAAG,EAAE,CAAC;QACrB,MAAM,KAAK,GAAW,CAAA,EAAE,aAAF,EAAE,uBAAF,EAAE,CAAE,QAAQ,EAAE,KAAI,EAAE,CAAC;QAE3C,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;YAC9B,SAAS;QACX,CAAC;QAED,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAChB,MAAM,CAAC,IAAI,CAAC,IAAI,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;IACnC,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,CAAC,OAAO,OAAO,mBAAmB;IACtC;;;OAGG;IACI,MAAM,CAAC,KAAK,CAAC,uBAAuB,CAGzC,IAQD;QACC,MAAM,OAAO,GAAoB,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACzD,MAAM,OAAO,GAAoB,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAEzD,MAAM,CAAC,aAAa,EAAE,aAAa,CAAC,GAGhC,MAAM,OAAO,CAAC,GAAG,CAAC;YACpB,OAAO,CAAC,MAAM,GAAG,CAAC;gBAChB,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC;oBAC3B,KAAK,EAAE;wBACL,CAAC,IAAI,CAAC,gBAAgB,CAAC,EAAE,IAAI,CAAC,UAAU;wBACxC,MAAM,EAAE,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC;qBACD;oBACjC,MAAM,EAAE,EAAE,MAAM,EAAE,IAAI,EAAW;oBACjC,KAAK,EAAE,iBAAiB;oBACxB,IAAI,EAAE,CAAC;oBACP,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE;iBACxB,CAAC;gBACJ,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,EAAuB,CAAC;YAC5C,OAAO,CAAC,MAAM,GAAG,CAAC;gBAChB,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC;oBAC3B,KAAK,EAAE;wBACL,CAAC,IAAI,CAAC,gBAAgB,CAAC,EAAE,IAAI,CAAC,UAAU;wBACxC,MAAM,EAAE,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC;qBACD;oBACjC,MAAM,EAAE,EAAE,MAAM,EAAE,IAAI,EAAW;oBACjC,KAAK,EAAE,iBAAiB;oBACxB,IAAI,EAAE,CAAC;oBACP,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE;iBACxB,CAAC;gBACJ,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,EAAuB,CAAC;SAC7C,CAAC,CAAC;QAEH,MAAM,eAAe,GAAgB,IAAI,GAAG,CAC1C,aAAa,CAAC,GAAG,CAAC,CAAC,GAAe,EAAU,EAAE;;YAC5C,OAAO,CAAA,MAAA,GAAG,CAAC,cAAc,CAAC,QAAQ,CAAC,0CAAE,QAAQ,EAAE,KAAI,EAAE,CAAC;QACxD,CAAC,CAAC,CACH,CAAC;QACF,MAAM,eAAe,GAAgB,IAAI,GAAG,CAC1C,aAAa,CAAC,GAAG,CAAC,CAAC,GAAe,EAAU,EAAE;;YAC5C,OAAO,CAAA,MAAA,GAAG,CAAC,cAAc,CAAC,QAAQ,CAAC,0CAAE,QAAQ,EAAE,KAAI,EAAE,CAAC;QACxD,CAAC,CAAC,CACH,CAAC;QAEF,OAAO;YACL,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,EAAY,EAAW,EAAE;gBAChD,OAAO,CAAC,eAAe,CAAC,GAAG,CAAC,EAAE,CAAC,QAAQ,EAAE,CAAC,CAAC;YAC7C,CAAC,CAAC;YACF,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,EAAY,EAAW,EAAE;gBAChD,OAAO,CAAC,eAAe,CAAC,GAAG,CAAC,EAAE,CAAC,QAAQ,EAAE,CAAC,CAAC;YAC7C,CAAC,CAAC;SACH,CAAC;IACJ,CAAC;IAED~~;;;;;OAKG~~;IACI,MAAM,CAAC,KAAK,CAAC,WAAW,CAA2B,IAIzD;QACC,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC;gBAC7B,IAAI,EAAE,IAAI,CAAC,KAAK;gBAChB,KAAK,EAAE,IAAI,CAAC,KAAK;aAClB,CAAC,CAAC;YAEH,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,uBAAuB,CAAC,iBAAiB,CAAC,KAAK,CAAC,EAAE,CAAC;gBACrD,OAAO,KAAK,CAAC;YACf,CAAC;YAED,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED;;;;;;;;OAQG;IACI,MAAM,CAAC,KAAK,CAAC,SAAS,CAG3B,IAgBD;QACC,MAAM,WAAW,GACf,MAAM,mBAAmB,CAAC,uBAAuB,CAAC;YAChD,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;YACvC,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;YACvC,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;YACvC,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,OAAO,EAAE,IAAI,CAAC,OAAO;SACtB,CAAC,CAAC;QAEL,MAAM,KAAK,GAAmB,EAAE,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;QAE3D,KAAK,MAAM,MAAM,IAAI,WAAW,CAAC,OAAO,EAAE,CAAC;YACzC,MAAM,KAAK,GAAe,mBAAmB,CAAC,UAAU,CAAC;gBACvD,YAAY,EAAE,IAAI,CAAC,gBAAgB;gBACnC,WAAW,EAAE,QAAQ;gBACrB,OAAO,EAAE,MAAM;gBACf,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;gBACvC,UAAU,EAAE,IAAI,CAAC,UAAU;gBAC3B,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,eAAe,EAAE,IAAI,CAAC,eAAe;gBACrC,eAAe,EAAE,IAAI,CAAC,eAAe;aACtC,CAAC,CAAC;YAEH,IACE,MAAM,mBAAmB,CAAC,WAAW,CAAC;gBACpC,YAAY,EAAE,IAAI,CAAC,gBAAgB;gBACnC,KAAK,EAAE,KAAK;gBACZ,KAAK,EAAE,IAAI,CAAC,KAAK;aAClB,CAAC,EACF,CAAC;gBACD,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAC7B,CAAC;QACH,CAAC;QAED,KAAK,MAAM,MAAM,IAAI,WAAW,CAAC,OAAO,EAAE,CAAC;YACzC,MAAM,KAAK,GAAe,mBAAmB,CAAC,UAAU,CAAC;gBACvD,YAAY,EAAE,IAAI,CAAC,gBAAgB;gBACnC,WAAW,EAAE,QAAQ;gBACrB,OAAO,EAAE,MAAM;gBACf,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;gBACvC,UAAU,EAAE,IAAI,CAAC,UAAU;gBAC3B,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,eAAe,EAAE,IAAI,CAAC,eAAe;gBACrC,eAAe,EAAE,IAAI,CAAC,eAAe;aACtC,CAAC,CAAC;YAEH,IACE,MAAM,mBAAmB,CAAC,WAAW,CAAC;gBACpC,YAAY,EAAE,IAAI,CAAC,gBAAgB;gBACnC,KAAK,EAAE,KAAK;gBACZ,KAAK,EAAE,IAAI,CAAC,KAAK;aAClB,CAAC,EACF,CAAC;gBACD,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAC7B,CAAC;QACH,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAEO,MAAM,CAAC,UAAU,CAA2B,IASnD;QACC,MAAM,KAAK,GAAW,IAAI,IAAI,CAAC,YAAY,CAAC,SAAS,EAAE,CAAC;QAExD,KAAK,CAAC,cAAc,CAAC,IAAI,CAAC,gBAAgB,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;QAC7D,KAAK,CAAC,cAAc,CAAC,WAAW,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;QAClD,KAAK,CAAC,cAAc,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;QAErD,IAAI,IAAI,CAAC,eAAe,KAAK,SAAS,EAAE,CAAC;YACvC,KAAK,CAAC,cAAc,CAAC,iBAAiB,EAAE,IAAI,CAAC,eAAe,CAAC,CAAC;QAChE,CAAC;QAED,IAAI,IAAI,CAAC,eAAe,EAAE,CAAC;YACzB,KAAK,CAAC,cAAc,CAAC,iBAAiB,EAAE,IAAI,CAAC,eAAe,CAAC,CAAC;QAChE,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;CACF"}
1	+ {"version":3,"file":"OwnerRuleAssignment.js","sourceRoot":"","sources":["../../../../../Server/Utils/Rules/OwnerRuleAssignment.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,iBAAiB,EAAE,MAAM,kCAAkC,CAAC;AACrE,OAAO,QAAQ,MAAM,yBAAyB,CAAC;AAE/C,OAAO,iBAAiB,MAAM,kCAAkC,CAAC;AACjE,OAAO,WAAW,MAAM,kCAAkC,CAAC;AAE3D,OAAO,uBAAuB,MAAM,qCAAqC,CAAC;AA0B1E,SAAS,SAAS,CAAC,GAA6B;IAC9C,MAAM,IAAI,GAAgB,IAAI,GAAG,EAAU,CAAC;IAC5C,MAAM,MAAM,GAAoB,EAAE,CAAC;IAEnC,KAAK,MAAM,EAAE,IAAI,GAAG,EAAE,CAAC;QACrB,MAAM,KAAK,GAAW,CAAA,EAAE,aAAF,EAAE,uBAAF,EAAE,CAAE,QAAQ,EAAE,KAAI,EAAE,CAAC;QAE3C,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;YAC9B,SAAS;QACX,CAAC;QAED,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAChB,MAAM,CAAC,IAAI,CAAC,IAAI,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;IACnC,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,CAAC,OAAO,OAAO,mBAAmB;IACtC;;;OAGG;IACI,MAAM,CAAC,KAAK,CAAC,uBAAuB,CAGzC,IAQD;QACC,MAAM,OAAO,GAAoB,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACzD,MAAM,OAAO,GAAoB,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAEzD,MAAM,CAAC,aAAa,EAAE,aAAa,CAAC,GAGhC,MAAM,OAAO,CAAC,GAAG,CAAC;YACpB,OAAO,CAAC,MAAM,GAAG,CAAC;gBAChB,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC;oBAC3B,KAAK,EAAE;wBACL,CAAC,IAAI,CAAC,gBAAgB,CAAC,EAAE,IAAI,CAAC,UAAU;wBACxC,MAAM,EAAE,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC;qBACD;oBACjC,MAAM,EAAE,EAAE,MAAM,EAAE,IAAI,EAAW;oBACjC,KAAK,EAAE,iBAAiB;oBACxB,IAAI,EAAE,CAAC;oBACP,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE;iBACxB,CAAC;gBACJ,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,EAAuB,CAAC;YAC5C,OAAO,CAAC,MAAM,GAAG,CAAC;gBAChB,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC;oBAC3B,KAAK,EAAE;wBACL,CAAC,IAAI,CAAC,gBAAgB,CAAC,EAAE,IAAI,CAAC,UAAU;wBACxC,MAAM,EAAE,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC;qBACD;oBACjC,MAAM,EAAE,EAAE,MAAM,EAAE,IAAI,EAAW;oBACjC,KAAK,EAAE,iBAAiB;oBACxB,IAAI,EAAE,CAAC;oBACP,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE;iBACxB,CAAC;gBACJ,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,EAAuB,CAAC;SAC7C,CAAC,CAAC;QAEH,MAAM,eAAe,GAAgB,IAAI,GAAG,CAC1C,aAAa,CAAC,GAAG,CAAC,CAAC,GAAe,EAAU,EAAE;;YAC5C,OAAO,CAAA,MAAA,GAAG,CAAC,cAAc,CAAC,QAAQ,CAAC,0CAAE,QAAQ,EAAE,KAAI,EAAE,CAAC;QACxD,CAAC,CAAC,CACH,CAAC;QACF,MAAM,eAAe,GAAgB,IAAI,GAAG,CAC1C,aAAa,CAAC,GAAG,CAAC,CAAC,GAAe,EAAU,EAAE;;YAC5C,OAAO,CAAA,MAAA,GAAG,CAAC,cAAc,CAAC,QAAQ,CAAC,0CAAE,QAAQ,EAAE,KAAI,EAAE,CAAC;QACxD,CAAC,CAAC,CACH,CAAC;QAEF,OAAO;YACL,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,EAAY,EAAW,EAAE;gBAChD,OAAO,CAAC,eAAe,CAAC,GAAG,CAAC,EAAE,CAAC,QAAQ,EAAE,CAAC,CAAC;YAC7C,CAAC,CAAC;YACF,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,EAAY,EAAW,EAAE;gBAChD,OAAO,CAAC,eAAe,CAAC,GAAG,CAAC,EAAE,CAAC,QAAQ,EAAE,CAAC,CAAC;YAC7C,CAAC,CAAC;SACH,CAAC;IACJ,CAAC;IAED;;;;;;OAMG;IACI,MAAM,CAAC,KAAK,CAAC,WAAW,CAA2B,IAIzD;QACC,IAAI,CAAC,CAAC,MAAM,mBAAmB,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;YACxD,OAAO,KAAK,CAAC;QACf,CAAC;QAED,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC;gBAC7B,IAAI,EAAE,IAAI,CAAC,KAAK;gBAChB,KAAK,EAAE,IAAI,CAAC,KAAK;aAClB,CAAC,CAAC;YAEH,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,uBAAuB,CAAC,iBAAiB,CAAC,KAAK,CAAC,EAAE,CAAC;gBACrD,OAAO,KAAK,CAAC;YACf,CAAC;YAED,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED;;;;;;;;OAQG;IACI,MAAM,CAAC,KAAK,CAAC,SAAS,CAG3B,IAgBD;QACC,MAAM,WAAW,GACf,MAAM,mBAAmB,CAAC,uBAAuB,CAAC;YAChD,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;YACvC,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;YACvC,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;YACvC,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,OAAO,EAAE,IAAI,CAAC,OAAO;SACtB,CAAC,CAAC;QAEL,MAAM,KAAK,GAAmB,EAAE,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;QAE3D,KAAK,MAAM,MAAM,IAAI,WAAW,CAAC,OAAO,EAAE,CAAC;YACzC,MAAM,KAAK,GAAe,mBAAmB,CAAC,UAAU,CAAC;gBACvD,YAAY,EAAE,IAAI,CAAC,gBAAgB;gBACnC,WAAW,EAAE,QAAQ;gBACrB,OAAO,EAAE,MAAM;gBACf,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;gBACvC,UAAU,EAAE,IAAI,CAAC,UAAU;gBAC3B,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,eAAe,EAAE,IAAI,CAAC,eAAe;gBACrC,eAAe,EAAE,IAAI,CAAC,eAAe;aACtC,CAAC,CAAC;YAEH,IACE,MAAM,mBAAmB,CAAC,WAAW,CAAC;gBACpC,YAAY,EAAE,IAAI,CAAC,gBAAgB;gBACnC,KAAK,EAAE,KAAK;gBACZ,KAAK,EAAE,IAAI,CAAC,KAAK;aAClB,CAAC,EACF,CAAC;gBACD,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAC7B,CAAC;QACH,CAAC;QAED,KAAK,MAAM,MAAM,IAAI,WAAW,CAAC,OAAO,EAAE,CAAC;YACzC,MAAM,KAAK,GAAe,mBAAmB,CAAC,UAAU,CAAC;gBACvD,YAAY,EAAE,IAAI,CAAC,gBAAgB;gBACnC,WAAW,EAAE,QAAQ;gBACrB,OAAO,EAAE,MAAM;gBACf,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;gBACvC,UAAU,EAAE,IAAI,CAAC,UAAU;gBAC3B,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,eAAe,EAAE,IAAI,CAAC,eAAe;gBACrC,eAAe,EAAE,IAAI,CAAC,eAAe;aACtC,CAAC,CAAC;YAEH,IACE,MAAM,mBAAmB,CAAC,WAAW,CAAC;gBACpC,YAAY,EAAE,IAAI,CAAC,gBAAgB;gBACnC,KAAK,EAAE,KAAK;gBACZ,KAAK,EAAE,IAAI,CAAC,KAAK;aAClB,CAAC,EACF,CAAC;gBACD,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAC7B,CAAC;QACH,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;;OAGG;IACK,MAAM,CAAC,KAAK,CAAC,gBAAgB,CAA2B,IAG/D;;QACC,MAAM,MAAM,GAAuB,MAAA,IAAI,CAAC,KAAK;aAC1C,cAAc,CAAC,QAAQ,CAAC,0CACvB,QAAQ,EAAE,CAAC;QAEf,MAAM,SAAS,GACb,CAAA,MAAA,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,WAAW,CAAC,0CAAE,QAAQ,EAAE;aAClD,MAAA,IAAI,CAAC,KAAK,CAAC,QAAQ,0CAAE,QAAQ,EAAE,CAAA,CAAC;QAElC,IAAI,CAAC,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC;YAC1B,OAAO,IAAI,CAAC;QACd,CAAC;QAED,OAAO,MAAM,iBAAiB,CAAC,qBAAqB,CAAC;YACnD,SAAS,EAAE,IAAI,QAAQ,CAAC,SAAS,CAAC;YAClC,MAAM,EAAE,IAAI,QAAQ,CAAC,MAAM,CAAC;SAC7B,CAAC,CAAC;IACL,CAAC;IAEO,MAAM,CAAC,UAAU,CAA2B,IASnD;QACC,MAAM,KAAK,GAAW,IAAI,IAAI,CAAC,YAAY,CAAC,SAAS,EAAE,CAAC;QAExD,KAAK,CAAC,cAAc,CAAC,IAAI,CAAC,gBAAgB,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;QAC7D,KAAK,CAAC,cAAc,CAAC,WAAW,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;QAClD,KAAK,CAAC,cAAc,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;QAErD,IAAI,IAAI,CAAC,eAAe,KAAK,SAAS,EAAE,CAAC;YACvC,KAAK,CAAC,cAAc,CAAC,iBAAiB,EAAE,IAAI,CAAC,eAAe,CAAC,CAAC;QAChE,CAAC;QAED,IAAI,IAAI,CAAC,eAAe,EAAE,CAAC;YACzB,KAAK,CAAC,cAAc,CAAC,iBAAiB,EAAE,IAAI,CAAC,eAAe,CAAC,CAAC;QAChE,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;CACF"}

package/build/dist/Server/Utils/Runbook/RunbookExecutePermission.js CHANGED Viewed

@@ -28,17 +28,50 @@ export const RUNBOOK_ADVANCE_PERMISSIONS = [
     ...RUNBOOK_EXECUTE_PERMISSIONS,
     Permission.EditRunbookExecution,
 ];
-function assertHoldsAny(data) {
+/*
+ * Does the caller hold a GRANT of any of `allowed` in this project? The
+ * primitive behind every check in this file, exported for other server-side
+ * guards that must decide "may this caller do X here" from the same props
+ * and read block rows the same way (e.g. who may loosen a Kubernetes
+ * cluster's AI access).
+ *
+ * Root and master-admin callers are the caller's business: this only reads
+ * the tenant permission rows, so a guard that exempts them must do so itself.
+ */
+export function holdsAnyPermission(data) {
     var _a, _b;
     const tenantPermission = (_a = data.props.userTenantAccessPermission) === null || _a === void 0 ? void 0 : _a[data.projectId.toString()];
     /*
      * A permission row can be a BLOCK rather than a grant, so matching on the
      * permission name alone would read a denial as an authorization.
      */
-    const hasPermission = Boolean((_b = tenantPermission === null || tenantPermission === void 0 ? void 0 : tenantPermission.permissions) === null || _b === void 0 ? void 0 : _b.some((p) => {
+    return Boolean((_b = tenantPermission === null || tenantPermission === void 0 ? void 0 : tenantPermission.permissions) === null || _b === void 0 ? void 0 : _b.some((p) => {
         return !p.isBlockPermission && data.allowed.includes(p.permission);
     }));
-    if (!hasPermission) {
+}
+/*
+ * Like holdsAnyPermission, but for deciding what a caller may SEE: a block
+ * row for any of `allowed` is a denial even when a grant is also present —
+ * a block row may be limited to some labels, and the caller of this cannot
+ * tell which object it would cover. Root and master admins see everything.
+ */
+export function holdsAnyUnblockedPermission(data) {
+    var _a, _b;
+    if (data.props.isRoot || data.props.isMasterAdmin) {
+        return true;
+    }
+    const permissions = ((_b = (_a = data.props.userTenantAccessPermission) === null || _a === void 0 ? void 0 : _a[data.projectId.toString()]) === null || _b === void 0 ? void 0 : _b.permissions) || [];
+    const isBlocked = permissions.some((p) => {
+        return p.isBlockPermission === true && data.allowed.includes(p.permission);
+    });
+    return !isBlocked && holdsAnyPermission(data);
+}
+function assertHoldsAny(data) {
+    if (!holdsAnyPermission({
+        props: data.props,
+        projectId: data.projectId,
+        allowed: data.allowed,
+    })) {
         throw new NotAuthorizedException(data.deniedMessage);
     }
 }
@@ -61,6 +94,8 @@ export function assertCanAdvanceRunbookExecutions(props, projectId) {
 export default {
     RUNBOOK_EXECUTE_PERMISSIONS,
     RUNBOOK_ADVANCE_PERMISSIONS,
+    holdsAnyPermission,
+    holdsAnyUnblockedPermission,
     assertCanExecuteRunbooks,
     assertCanAdvanceRunbookExecutions,
 };

package/build/dist/Server/Utils/Runbook/RunbookExecutePermission.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"RunbookExecutePermission.js","sourceRoot":"","sources":["../../../../../Server/Utils/Runbook/RunbookExecutePermission.ts"],"names":[],"mappings":"AAEA,OAAO,sBAAsB,MAAM,iDAAiD,CAAC;AACrF,OAAO,UAGN,MAAM,2BAA2B,CAAC;AAEnC;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAsB;IAC5D,UAAU,CAAC,YAAY;IACvB,UAAU,CAAC,YAAY;IACvB,UAAU,CAAC,aAAa;IACxB,UAAU,CAAC,sBAAsB;IACjC,UAAU,CAAC,YAAY;IACvB,UAAU,CAAC,aAAa;CACzB,CAAC;AAEF;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAsB;IAC5D,GAAG,2BAA2B;IAC9B,UAAU,CAAC,oBAAoB;CAChC,CAAC;AAEF,~~SAAS~~,~~cAAc~~,CAAC,~~IAKvB~~;;IACC,MAAM,gBAAgB,GACpB,MAAA,IAAI,CAAC,KAAK,CAAC,0BAA0B,0CAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,CAAC,CAAC;IAErE;;;OAGG;IACH,~~MAAM~~,~~aAAa,GAAY,~~OAAO,~~CACpC~~,MAAA,gBAAgB,aAAhB,gBAAgB,uBAAhB,gBAAgB,CAAE,WAAW,0CAAE,IAAI,CAAC,CAAC,CAAiB,EAAW,EAAE;QACjE,OAAO,CAAC,CAAC,CAAC,iBAAiB,IAAI,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;IACrE,CAAC,CAAC,CACH,CAAC;~~IAEF~~,IAAI,CAAC,aAAa,EAAE,CAAC;~~QACnB~~,MAAM,IAAI,sBAAsB,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IACvD,CAAC;AACH,CAAC;AAED,MAAM,UAAU,wBAAwB,CACtC,KAAqC,EACrC,SAAmB;IAEnB,cAAc,CAAC;QACb,KAAK;QACL,SAAS;QACT,OAAO,EAAE,2BAA2B;QACpC,aAAa,EACX,yEAAyE;KAC5E,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,iCAAiC,CAC/C,KAAqC,EACrC,SAAmB;IAEnB,cAAc,CAAC;QACb,KAAK;QACL,SAAS;QACT,OAAO,EAAE,2BAA2B;QACpC,aAAa,EACX,0EAA0E;KAC7E,CAAC,CAAC;AACL,CAAC;AAED,eAAe;IACb,2BAA2B;IAC3B,2BAA2B;IAC3B,wBAAwB;IACxB,iCAAiC;CAClC,CAAC"}
1	+ {"version":3,"file":"RunbookExecutePermission.js","sourceRoot":"","sources":["../../../../../Server/Utils/Runbook/RunbookExecutePermission.ts"],"names":[],"mappings":"AAEA,OAAO,sBAAsB,MAAM,iDAAiD,CAAC;AACrF,OAAO,UAGN,MAAM,2BAA2B,CAAC;AAEnC;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAsB;IAC5D,UAAU,CAAC,YAAY;IACvB,UAAU,CAAC,YAAY;IACvB,UAAU,CAAC,aAAa;IACxB,UAAU,CAAC,sBAAsB;IACjC,UAAU,CAAC,YAAY;IACvB,UAAU,CAAC,aAAa;CACzB,CAAC;AAEF;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAsB;IAC5D,GAAG,2BAA2B;IAC9B,UAAU,CAAC,oBAAoB;CAChC,CAAC;AAEF;;;;;;;;;GASG;AACH,MAAM,UAAU,kBAAkB,CAAC,IAIlC;;IACC,MAAM,gBAAgB,GACpB,MAAA,IAAI,CAAC,KAAK,CAAC,0BAA0B,0CAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,CAAC,CAAC;IAErE;;;OAGG;IACH,OAAO,OAAO,CACZ,MAAA,gBAAgB,aAAhB,gBAAgB,uBAAhB,gBAAgB,CAAE,WAAW,0CAAE,IAAI,CAAC,CAAC,CAAiB,EAAW,EAAE;QACjE,OAAO,CAAC,CAAC,CAAC,iBAAiB,IAAI,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;IACrE,CAAC,CAAC,CACH,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,2BAA2B,CAAC,IAI3C;;IACC,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,IAAI,CAAC,KAAK,CAAC,aAAa,EAAE,CAAC;QAClD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,WAAW,GACf,CAAA,MAAA,MAAA,IAAI,CAAC,KAAK,CAAC,0BAA0B,0CAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,CAAC,0CAC9D,WAAW,KAAI,EAAE,CAAC;IAExB,MAAM,SAAS,GAAY,WAAW,CAAC,IAAI,CAAC,CAAC,CAAiB,EAAW,EAAE;QACzE,OAAO,CAAC,CAAC,iBAAiB,KAAK,IAAI,IAAI,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;IAC7E,CAAC,CAAC,CAAC;IAEH,OAAO,CAAC,SAAS,IAAI,kBAAkB,CAAC,IAAI,CAAC,CAAC;AAChD,CAAC;AAED,SAAS,cAAc,CAAC,IAKvB;IACC,IACE,CAAC,kBAAkB,CAAC;QAClB,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,OAAO,EAAE,IAAI,CAAC,OAAO;KACtB,CAAC,EACF,CAAC;QACD,MAAM,IAAI,sBAAsB,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IACvD,CAAC;AACH,CAAC;AAED,MAAM,UAAU,wBAAwB,CACtC,KAAqC,EACrC,SAAmB;IAEnB,cAAc,CAAC;QACb,KAAK;QACL,SAAS;QACT,OAAO,EAAE,2BAA2B;QACpC,aAAa,EACX,yEAAyE;KAC5E,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,iCAAiC,CAC/C,KAAqC,EACrC,SAAmB;IAEnB,cAAc,CAAC;QACb,KAAK;QACL,SAAS;QACT,OAAO,EAAE,2BAA2B;QACpC,aAAa,EACX,0EAA0E;KAC7E,CAAC,CAAC;AACL,CAAC;AAED,eAAe;IACb,2BAA2B;IAC3B,2BAA2B;IAC3B,kBAAkB;IAClB,2BAA2B;IAC3B,wBAAwB;IACxB,iCAAiC;CAClC,CAAC"}

package/build/dist/Server/Utils/SessionReplay/SessionReplayGateCache.js CHANGED Viewed

@@ -76,6 +76,7 @@ const RUM_APPLICATION_POLICY_COLUMNS = [
     "sessionReplayMonthlyBudgetInGB",
     "sessionReplayIgnoreErrorPatterns",
     "sessionReplayTracePropagationOrigins",
+    "sessionReplaySameOriginTracePropagation",
     "sessionReplayLcpBudgetMs",
     "sessionReplayLongTaskBudgetMs",
     "sessionReplaySlowRequestBudgetMs",
@@ -320,6 +321,13 @@ export default class SessionReplayGateCache {
                 monthlyBudgetInGB: this.readNullableNumber(appView["sessionReplayMonthlyBudgetInGB"]),
                 ignoreErrorPatterns: this.readStringArray(appView["sessionReplayIgnoreErrorPatterns"]),
                 tracePropagationOrigins: this.readStringArray(appView["sessionReplayTracePropagationOrigins"]),
+                /*
+                 * Anything but an explicit false reads as on: the column defaults
+                 * to true, so an absent or null value is the model default, like
+                 * the consent / trigger / sample fallbacks above. Only an operator
+                 * who switched it off gets it off.
+                 */
+                sameOriginTracePropagation: appView["sessionReplaySameOriginTracePropagation"] !== false,
                 lcpBudgetMs: this.readNumber(appView["sessionReplayLcpBudgetMs"], 0),
                 longTaskBudgetMs: this.readNumber(appView["sessionReplayLongTaskBudgetMs"], 0),
                 slowRequestBudgetMs: this.readNumber(appView["sessionReplaySlowRequestBudgetMs"], 0),

package/build/dist/Server/Utils/SessionReplay/SessionReplayGateCache.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"SessionReplayGateCache.js","sourceRoot":"","sources":["../../../../../Server/Utils/SessionReplay/SessionReplayGateCache.ts"],"names":[],"mappings":"AAAA,OAAO,cAAc,MAAM,+BAA+B,CAAC;AAC3D,OAAO,qBAAqB,MAAM,sCAAsC,CAAC;AACzE,OAAO,WAAW,MAAM,kCAAkC,CAAC;AAC3D,OAAO,2BAA2B,EAAE,EAClC,mBAAmB,GAEpB,MAAM,+BAA+B,CAAC;AAEvC,OAAO,OAAO,MAAM,wCAAwC,CAAC;AAC7D,OAAO,cAAc,MAAM,+CAA+C,CAAC;AAG3E,OAAO,2BAA2B,MAAM,gDAAgD,CAAC;AACzF,OAAO,wBAAwB,MAAM,6CAA6C,CAAC;AACnF,OAAiC,EAC/B,6BAA6B,GAC9B,MAAM,6CAA6C,CAAC;AACrD,OAAO,EACL,wCAAwC,EACxC,qCAAqC,GACtC,MAAM,kCAAkC,CAAC;AAC1C,OAAO,eAAe,MAAM,oCAAoC,CAAC;AACjE,OAAO,eAAe,MAAM,0CAA0C,CAAC;AAEvE;;;;GAIG;AACH,MAAM,wCAAwC,GAAW,GAAG,CAAC;AAE7D;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAEH;;;;;;;;;;;GAWG;AACH,MAAM,8BAA8B,GAA0B;IAC5D,wBAAwB;IACxB,0BAA0B;IAC1B,4BAA4B;IAC5B,6BAA6B;IAC7B,6BAA6B;IAC7B,0BAA0B;IAC1B,6BAA6B;IAC7B,+BAA+B;IAC/B,kCAAkC;IAClC,yBAAyB;IACzB,2BAA2B;IAC3B,8BAA8B;IAC9B,gCAAgC;IAChC,kCAAkC;IAClC,sCAAsC;IACtC,0BAA0B;IAC1B,+BAA+B;IAC/B,kCAAkC;CACnC,CAAC;AAEF,MAAM,sBAAsB,GAA0B;IACpD,wBAAwB;CACzB,CAAC;~~AA+EF~~;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAN,IAAY,0BAoBX;AApBD,WAAY,0BAA0B;IACpC,mEAAmE;IACnE,uEAAyC,CAAA;IAEzC,0EAA0E;IAC1E,+EAAiD,CAAA;IAEjD;;;;;OAKG;IACH,wEAA0C,CAAA;IAE1C,6DAA6D;IAC7D,8DAAgC,CAAA;IAEhC,wCAAwC;IACxC,0EAA4C,CAAA;AAC9C,CAAC,EApBW,0BAA0B,KAA1B,0BAA0B,QAoBrC;AAoBD,MAAM,CAAC,OAAO,OAAO,sBAAsB;IACzC;;;;;;;;;;;;OAYG;IACI,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,IAG7B;QACC,MAAM,UAAU,GACd,MAAM,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC;QAEjC,OAAO,UAAU,CAAC,MAAM,CAAC;IAC3B,CAAC;IAED;;;OAGG;IACI,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,IAGjC;QACC,MAAM,aAAa,GAAW,IAAI,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC;QAExD,IAAI,CAAC,aAAa,EAAE,CAAC;YACnB,OAAO;gBACL,MAAM,EAAE,IAAI;gBACZ,OAAO,EAAE,0BAA0B,CAAC,iBAAiB;aACtD,CAAC;QACJ,CAAC;QAED,MAAM,QAAQ,GAAW,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,aAAa,CAAC,WAAW,EAAE,EAAE,CAAC;QAEvF,MAAM,MAAM,GACV,2BAA2B,CAAC,cAAc,CAAmB,QAAQ,CAAC,CAAC;QAEzE,IACE,MAAM;YACN,MAAM,CAAC,MAAM;YACb,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,QAAQ,GAAG,mBAAmB,EAClD,CAAC;YACD;;;;eAIG;YACH,IACE,MAAM,CAAC,MAAM,CAAC,MAAM;gBACpB,CAAC,MAAM,2BAA2B,CAAC,eAAe,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,EACnE,CAAC;gBACD,OAAO;oBACL,MAAM,EAAE,IAAI;oBACZ,OAAO,EAAE,0BAA0B,CAAC,aAAa;iBAClD,CAAC;YACJ,CAAC;YAED,OAAO;gBACL,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM;gBAC5B,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO;aAC/B,CAAC;QACJ,CAAC;QAED,MAAM,MAAM,GAAkC,MAAM,IAAI,CAAC,UAAU,CAAC;YAClE,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,aAAa,EAAE,aAAa;SAC7B,CAAC,CAAC;QAEH,2BAA2B,CAAC,cAAc,CAAmB,QAAQ,EAAE;YACrE,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,OAAO,EAAE,MAAM,CAAC,OAAO;SACxB,CAAC,CAAC;QAEH,IACE,MAAM,CAAC,MAAM;YACb,CAAC,MAAM,2BAA2B,CAAC,eAAe,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,EACnE,CAAC;YACD,OAAO;gBACL,MAAM,EAAE,IAAI;gBACZ,OAAO,EAAE,0BAA0B,CAAC,aAAa;aAClD,CAAC;QACJ,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;IAEO,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,IAG/B;QACC,MAAM,OAAO,GAAmB,MAAM,cAAc,CAAC,SAAS,CAAC;YAC7D,KAAK,EAAE;gBACL,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE;aAC/B;YACD,MAAM,EAAE,IAAI,CAAC,WAAW,CAAC,IAAI,OAAO,EAAE,EAAE,sBAAsB,CAAC;YAC/D,KAAK,EAAE;gBACL,MAAM,EAAE,IAAI;aACb;SACF,CAAC,CAAC;QAEH,IAAI,CAAC,OAAO,EAAE,CAAC;YACb;;;eAGG;YACH,OAAO;gBACL,MAAM,EAAE,IAAI;gBACZ,OAAO,EAAE,0BAA0B,CAAC,iBAAiB;aACtD,CAAC;QACJ,CAAC;QAED,MAAM,WAAW,GACf,OAA8C,CAAC;QAEjD,MAAM,gBAAgB,GACpB,WAAW,CAAC,wBAAwB,CAAC,KAAK,IAAI,CAAC;QAEjD,IAAI,GAAG,GAA0B,MAAM,qBAAqB,CAAC,SAAS,CAAC;YACrE,KAAK,EAAE;gBACL,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,aAAa,EAAE,WAAW,CAAC,gBAAgB,CAAC,IAAI,CAAC,aAAa,CAAC;aAChE;YACD,MAAM,EAAE,IAAI,CAAC,WAAW,CACtB,IAAI,cAAc,EAAE,EACpB,8BAA8B,CAC/B;YACD,KAAK,EAAE;gBACL,MAAM,EAAE,IAAI;aACb;SACF,CAAC,CAAC;QAEH;;;;;;;;;;;;;WAaG;QACH,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,IAAI,CAAC,gBAAgB,EAAE,CAAC;gBACtB,OAAO;oBACL,MAAM,EAAE,IAAI;oBACZ,OAAO,EAAE,0BAA0B,CAAC,iBAAiB;iBACtD,CAAC;YACJ,CAAC;YAED,MAAM,qBAAqB,CAAC,2BAA2B,CAAC;gBACtD,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,aAAa,EAAE,IAAI,CAAC,aAAa;aAClC,CAAC,CAAC;YAEH,GAAG,GAAG,MAAM,qBAAqB,CAAC,SAAS,CAAC;gBAC1C,KAAK,EAAE;oBACL,SAAS,EAAE,IAAI,CAAC,SAAS;oBACzB,aAAa,EAAE,WAAW,CAAC,gBAAgB,CAAC,IAAI,CAAC,aAAa,CAAC;iBAChE;gBACD,MAAM,EAAE,IAAI,CAAC,WAAW,CACtB,IAAI,cAAc,EAAE,EACpB,8BAA8B,CAC/B;gBACD,KAAK,EAAE;oBACL,MAAM,EAAE,IAAI;iBACb;aACF,CAAC,CAAC;QACL,CAAC;QAED,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACpB,OAAO;gBACL,MAAM,EAAE,IAAI;gBACZ,OAAO,EAAE,0BAA0B,CAAC,kBAAkB;aACvD,CAAC;QACJ,CAAC;QAED,MAAM,OAAO,GACX,GAA0C,CAAC;QAE7C,MAAM,YAAY,GAAY,OAAO,CAAC,wBAAwB,CAAC,KAAK,IAAI,CAAC;QAEzE;;;;;;WAMG;QACH,IAAI,CAAC,gBAAgB,EAAE,CAAC;YACtB,OAAO;gBACL,MAAM,EAAE,IAAI;gBACZ,OAAO,EAAE,0BAA0B,CAAC,iBAAiB;aACtD,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,OAAO;gBACL,MAAM,EAAE,IAAI;gBACZ,OAAO,EAAE,0BAA0B,CAAC,qBAAqB;aAC1D,CAAC;QACJ,CAAC;QAED,MAAM,sBAAsB,GAAW,IAAI,CAAC,UAAU,CACpD,OAAO,CAAC,8BAA8B,CAAC,EACvC,wCAAwC,CACzC,CAAC;QAEF;;;;;;;;;;;WAWG;QACH,OAAO;YACL,MAAM,EAAE;gBACN,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,gBAAgB,EAAE,GAAG,CAAC,EAAE;gBACxB,gBAAgB,EAAE,IAAI;gBACtB,YAAY,EAAE,IAAI;gBAClB,cAAc,EAAE,IAAI,CAAC,eAAe,CAClC,OAAO,CAAC,6BAA6B,CAAC,CACvC;gBACD,WAAW,EAAE,6BAA6B,CACxC,OAAO,CAAC,0BAA0B,CAAC,CACpC;gBACD,WAAW,EACT,OAAO,CAAC,0BAA0B,CAAC;oBACnC,wBAAwB,CAAC,eAAe;oBACtC,CAAC,CAAC,wBAAwB,CAAC,eAAe;oBAC1C,CAAC,CAAC,wBAAwB,CAAC,WAAW;gBAC1C,cAAc,EACZ,OAAO,CAAC,6BAA6B,CAAC;oBACtC,2BAA2B,CAAC,oBAAoB;oBAC9C,CAAC,CAAC,2BAA2B,CAAC,oBAAoB;oBAClD,CAAC,CAAC,2BAA2B,CAAC,MAAM;gBACxC,gBAAgB,EAAE,IAAI,CAAC,UAAU,CAC/B,OAAO,CAAC,+BAA+B,CAAC,EACxC,wCAAwC,CACzC;gBACD,aAAa,EAAE,IAAI,CAAC,eAAe,CACjC,OAAO,CAAC,4BAA4B,CAAC,CACtC;gBACD,cAAc,EAAE,IAAI,CAAC,eAAe,CAClC,OAAO,CAAC,6BAA6B,CAAC,CACvC;gBACD,YAAY,EAAE,OAAO,CAAC,2BAA2B,CAAC,KAAK,IAAI;gBAC3D,mBAAmB,EACjB,OAAO,CAAC,kCAAkC,CAAC,KAAK,IAAI;gBACtD,UAAU,EAAE,OAAO,CAAC,yBAAyB,CAAC,KAAK,IAAI;gBACvD,eAAe,EAAE,eAAe,CAAC,kBAAkB,CACjD,sBAAsB,EACtB,qCAAqC,EACrC,wCAAwC,CACzC;gBACD,iBAAiB,EAAE,IAAI,CAAC,kBAAkB,CACxC,OAAO,CAAC,gCAAgC,CAAC,CAC1C;gBACD,mBAAmB,EAAE,IAAI,CAAC,eAAe,CACvC,OAAO,CAAC,kCAAkC,CAAC,CAC5C;gBACD,uBAAuB,EAAE,IAAI,CAAC,eAAe,CAC3C,OAAO,CAAC,sCAAsC,CAAC,CAChD;gBACD,WAAW,EAAE,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,0BAA0B,CAAC,EAAE,CAAC,CAAC;gBACpE,gBAAgB,EAAE,IAAI,CAAC,UAAU,CAC/B,OAAO,CAAC,+BAA+B,CAAC,EACxC,CAAC,CACF;gBACD,mBAAmB,EAAE,IAAI,CAAC,UAAU,CAClC,OAAO,CAAC,kCAAkC,CAAC,EAC3C,CAAC,CACF;gBACD,WAAW,EAAE,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC;aACtC;YACD,OAAO,EAAE,IAAI;SACd,CAAC;IACJ,CAAC;IAED;;;;;;;;;;OAUG;IACI,MAAM,CAAC,eAAe,CAC3B,MAA+B,EAC/B,MAA0B;QAE1B;;;;;;;;;;;;;WAaG;QACH,IAAI,MAAM,CAAC,cAAc,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvC,OAAO,IAAI,CAAC;QACd,CAAC;QAED;;;;;WAKG;QACH,OAAO,eAAe,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,cAAc,CAAC,CAAC;IAChE,CAAC;IAED;;;OAGG;IACI,MAAM,CAAC,KAAK,CAAC,mBAAmB,CAAC,SAAmB;QACzD,OAAO,MAAM,2BAA2B,CAAC,mBAAmB,CAAC,SAAS,CAAC,CAAC;IAC1E,CAAC;IAEM,MAAM,CAAC,KAAK,CAAC,oBAAoB,CAAC,SAAmB;QAC1D,OAAO,MAAM,2BAA2B,CAAC,oBAAoB,CAAC,SAAS,CAAC,CAAC;IAC3E,CAAC;IAED,4DAA4D;IACrD,MAAM,CAAC,UAAU,CAAC,SAAgC;QACvD,2BAA2B,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;IACpD,CAAC;IAED;;;;;;;OAOG;IACK,MAAM,CAAC,WAAW,CACxB,QAAgB,EAChB,eAAsC;QAEtC,MAAM,QAAQ,GAAgB,IAAI,GAAG,CAAS,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;QAErE;;;;;;;WAOG;QACH,MAAM,MAAM,GAA4B;YACtC,GAAG,EAAE,IAAI;SACV,CAAC;QAEF,KAAK,MAAM,MAAM,IAAI,CAAC,WAAW,EAAE,WAAW,EAAE,GAAG,eAAe,CAAC,EAAE,CAAC;YACpE,IAAI,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;gBACzB,MAAM,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC;YACxB,CAAC;QACH,CAAC;QAED,OAAO,MAA+B,CAAC;IACzC,CAAC;IAED;;;;OAIG;IACK,MAAM,CAAC,cAAc,CAAC,GAAmB;QAC/C,MAAM,SAAS,GAAqB,GAAG,CAAC,SAAS,CAAC;QAElD,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,OAAO,CAAC,CAAC;QACX,CAAC;QAED,MAAM,MAAM,GAAW,IAAI,IAAI,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,CAAC;QAErD,OAAO,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;IAC9C,CAAC;IAEO,MAAM,CAAC,UAAU,CAAC,KAAc,EAAE,QAAgB;QACxD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YACxD,OAAO,KAAK,CAAC;QACf,CAAC;QAED,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9B,MAAM,MAAM,GAAW,MAAM,CAAC,KAAK,CAAC,CAAC;YAErC,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC5B,OAAO,MAAM,CAAC;YAChB,CAAC;QACH,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC;IAEO,MAAM,CAAC,kBAAkB,CAAC,KAAc;QAC9C,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YAC1C,OAAO,IAAI,CAAC;QACd,CAAC;QAED,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YACxD,OAAO,KAAK,CAAC;QACf,CAAC;QAED,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9B,MAAM,MAAM,GAAW,MAAM,CAAC,KAAK,CAAC,CAAC;YAErC,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC5B,OAAO,MAAM,CAAC;YAChB,CAAC;QACH,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAEO,MAAM,CAAC,eAAe,CAAC,KAAc;QAC3C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YAC1B,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,MAAM,MAAM,GAAkB,EAAE,CAAC;QAEjC,KAAK,MAAM,KAAK,IAAI,KAAK,EAAE,CAAC;YAC1B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC;gBAC9C,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;YAC5B,CAAC;QACH,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;CACF"}
1	+ {"version":3,"file":"SessionReplayGateCache.js","sourceRoot":"","sources":["../../../../../Server/Utils/SessionReplay/SessionReplayGateCache.ts"],"names":[],"mappings":"AAAA,OAAO,cAAc,MAAM,+BAA+B,CAAC;AAC3D,OAAO,qBAAqB,MAAM,sCAAsC,CAAC;AACzE,OAAO,WAAW,MAAM,kCAAkC,CAAC;AAC3D,OAAO,2BAA2B,EAAE,EAClC,mBAAmB,GAEpB,MAAM,+BAA+B,CAAC;AAEvC,OAAO,OAAO,MAAM,wCAAwC,CAAC;AAC7D,OAAO,cAAc,MAAM,+CAA+C,CAAC;AAG3E,OAAO,2BAA2B,MAAM,gDAAgD,CAAC;AACzF,OAAO,wBAAwB,MAAM,6CAA6C,CAAC;AACnF,OAAiC,EAC/B,6BAA6B,GAC9B,MAAM,6CAA6C,CAAC;AACrD,OAAO,EACL,wCAAwC,EACxC,qCAAqC,GACtC,MAAM,kCAAkC,CAAC;AAC1C,OAAO,eAAe,MAAM,oCAAoC,CAAC;AACjE,OAAO,eAAe,MAAM,0CAA0C,CAAC;AAEvE;;;;GAIG;AACH,MAAM,wCAAwC,GAAW,GAAG,CAAC;AAE7D;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAEH;;;;;;;;;;;GAWG;AACH,MAAM,8BAA8B,GAA0B;IAC5D,wBAAwB;IACxB,0BAA0B;IAC1B,4BAA4B;IAC5B,6BAA6B;IAC7B,6BAA6B;IAC7B,0BAA0B;IAC1B,6BAA6B;IAC7B,+BAA+B;IAC/B,kCAAkC;IAClC,yBAAyB;IACzB,2BAA2B;IAC3B,8BAA8B;IAC9B,gCAAgC;IAChC,kCAAkC;IAClC,sCAAsC;IACtC,yCAAyC;IACzC,0BAA0B;IAC1B,+BAA+B;IAC/B,kCAAkC;CACnC,CAAC;AAEF,MAAM,sBAAsB,GAA0B;IACpD,wBAAwB;CACzB,CAAC;AA4FF;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAN,IAAY,0BAoBX;AApBD,WAAY,0BAA0B;IACpC,mEAAmE;IACnE,uEAAyC,CAAA;IAEzC,0EAA0E;IAC1E,+EAAiD,CAAA;IAEjD;;;;;OAKG;IACH,wEAA0C,CAAA;IAE1C,6DAA6D;IAC7D,8DAAgC,CAAA;IAEhC,wCAAwC;IACxC,0EAA4C,CAAA;AAC9C,CAAC,EApBW,0BAA0B,KAA1B,0BAA0B,QAoBrC;AAoBD,MAAM,CAAC,OAAO,OAAO,sBAAsB;IACzC;;;;;;;;;;;;OAYG;IACI,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,IAG7B;QACC,MAAM,UAAU,GACd,MAAM,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC;QAEjC,OAAO,UAAU,CAAC,MAAM,CAAC;IAC3B,CAAC;IAED;;;OAGG;IACI,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,IAGjC;QACC,MAAM,aAAa,GAAW,IAAI,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC;QAExD,IAAI,CAAC,aAAa,EAAE,CAAC;YACnB,OAAO;gBACL,MAAM,EAAE,IAAI;gBACZ,OAAO,EAAE,0BAA0B,CAAC,iBAAiB;aACtD,CAAC;QACJ,CAAC;QAED,MAAM,QAAQ,GAAW,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,aAAa,CAAC,WAAW,EAAE,EAAE,CAAC;QAEvF,MAAM,MAAM,GACV,2BAA2B,CAAC,cAAc,CAAmB,QAAQ,CAAC,CAAC;QAEzE,IACE,MAAM;YACN,MAAM,CAAC,MAAM;YACb,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,QAAQ,GAAG,mBAAmB,EAClD,CAAC;YACD;;;;eAIG;YACH,IACE,MAAM,CAAC,MAAM,CAAC,MAAM;gBACpB,CAAC,MAAM,2BAA2B,CAAC,eAAe,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,EACnE,CAAC;gBACD,OAAO;oBACL,MAAM,EAAE,IAAI;oBACZ,OAAO,EAAE,0BAA0B,CAAC,aAAa;iBAClD,CAAC;YACJ,CAAC;YAED,OAAO;gBACL,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM;gBAC5B,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO;aAC/B,CAAC;QACJ,CAAC;QAED,MAAM,MAAM,GAAkC,MAAM,IAAI,CAAC,UAAU,CAAC;YAClE,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,aAAa,EAAE,aAAa;SAC7B,CAAC,CAAC;QAEH,2BAA2B,CAAC,cAAc,CAAmB,QAAQ,EAAE;YACrE,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,OAAO,EAAE,MAAM,CAAC,OAAO;SACxB,CAAC,CAAC;QAEH,IACE,MAAM,CAAC,MAAM;YACb,CAAC,MAAM,2BAA2B,CAAC,eAAe,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,EACnE,CAAC;YACD,OAAO;gBACL,MAAM,EAAE,IAAI;gBACZ,OAAO,EAAE,0BAA0B,CAAC,aAAa;aAClD,CAAC;QACJ,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;IAEO,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,IAG/B;QACC,MAAM,OAAO,GAAmB,MAAM,cAAc,CAAC,SAAS,CAAC;YAC7D,KAAK,EAAE;gBACL,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE;aAC/B;YACD,MAAM,EAAE,IAAI,CAAC,WAAW,CAAC,IAAI,OAAO,EAAE,EAAE,sBAAsB,CAAC;YAC/D,KAAK,EAAE;gBACL,MAAM,EAAE,IAAI;aACb;SACF,CAAC,CAAC;QAEH,IAAI,CAAC,OAAO,EAAE,CAAC;YACb;;;eAGG;YACH,OAAO;gBACL,MAAM,EAAE,IAAI;gBACZ,OAAO,EAAE,0BAA0B,CAAC,iBAAiB;aACtD,CAAC;QACJ,CAAC;QAED,MAAM,WAAW,GACf,OAA8C,CAAC;QAEjD,MAAM,gBAAgB,GACpB,WAAW,CAAC,wBAAwB,CAAC,KAAK,IAAI,CAAC;QAEjD,IAAI,GAAG,GAA0B,MAAM,qBAAqB,CAAC,SAAS,CAAC;YACrE,KAAK,EAAE;gBACL,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,aAAa,EAAE,WAAW,CAAC,gBAAgB,CAAC,IAAI,CAAC,aAAa,CAAC;aAChE;YACD,MAAM,EAAE,IAAI,CAAC,WAAW,CACtB,IAAI,cAAc,EAAE,EACpB,8BAA8B,CAC/B;YACD,KAAK,EAAE;gBACL,MAAM,EAAE,IAAI;aACb;SACF,CAAC,CAAC;QAEH;;;;;;;;;;;;;WAaG;QACH,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,IAAI,CAAC,gBAAgB,EAAE,CAAC;gBACtB,OAAO;oBACL,MAAM,EAAE,IAAI;oBACZ,OAAO,EAAE,0BAA0B,CAAC,iBAAiB;iBACtD,CAAC;YACJ,CAAC;YAED,MAAM,qBAAqB,CAAC,2BAA2B,CAAC;gBACtD,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,aAAa,EAAE,IAAI,CAAC,aAAa;aAClC,CAAC,CAAC;YAEH,GAAG,GAAG,MAAM,qBAAqB,CAAC,SAAS,CAAC;gBAC1C,KAAK,EAAE;oBACL,SAAS,EAAE,IAAI,CAAC,SAAS;oBACzB,aAAa,EAAE,WAAW,CAAC,gBAAgB,CAAC,IAAI,CAAC,aAAa,CAAC;iBAChE;gBACD,MAAM,EAAE,IAAI,CAAC,WAAW,CACtB,IAAI,cAAc,EAAE,EACpB,8BAA8B,CAC/B;gBACD,KAAK,EAAE;oBACL,MAAM,EAAE,IAAI;iBACb;aACF,CAAC,CAAC;QACL,CAAC;QAED,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACpB,OAAO;gBACL,MAAM,EAAE,IAAI;gBACZ,OAAO,EAAE,0BAA0B,CAAC,kBAAkB;aACvD,CAAC;QACJ,CAAC;QAED,MAAM,OAAO,GACX,GAA0C,CAAC;QAE7C,MAAM,YAAY,GAAY,OAAO,CAAC,wBAAwB,CAAC,KAAK,IAAI,CAAC;QAEzE;;;;;;WAMG;QACH,IAAI,CAAC,gBAAgB,EAAE,CAAC;YACtB,OAAO;gBACL,MAAM,EAAE,IAAI;gBACZ,OAAO,EAAE,0BAA0B,CAAC,iBAAiB;aACtD,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,OAAO;gBACL,MAAM,EAAE,IAAI;gBACZ,OAAO,EAAE,0BAA0B,CAAC,qBAAqB;aAC1D,CAAC;QACJ,CAAC;QAED,MAAM,sBAAsB,GAAW,IAAI,CAAC,UAAU,CACpD,OAAO,CAAC,8BAA8B,CAAC,EACvC,wCAAwC,CACzC,CAAC;QAEF;;;;;;;;;;;WAWG;QACH,OAAO;YACL,MAAM,EAAE;gBACN,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,gBAAgB,EAAE,GAAG,CAAC,EAAE;gBACxB,gBAAgB,EAAE,IAAI;gBACtB,YAAY,EAAE,IAAI;gBAClB,cAAc,EAAE,IAAI,CAAC,eAAe,CAClC,OAAO,CAAC,6BAA6B,CAAC,CACvC;gBACD,WAAW,EAAE,6BAA6B,CACxC,OAAO,CAAC,0BAA0B,CAAC,CACpC;gBACD,WAAW,EACT,OAAO,CAAC,0BAA0B,CAAC;oBACnC,wBAAwB,CAAC,eAAe;oBACtC,CAAC,CAAC,wBAAwB,CAAC,eAAe;oBAC1C,CAAC,CAAC,wBAAwB,CAAC,WAAW;gBAC1C,cAAc,EACZ,OAAO,CAAC,6BAA6B,CAAC;oBACtC,2BAA2B,CAAC,oBAAoB;oBAC9C,CAAC,CAAC,2BAA2B,CAAC,oBAAoB;oBAClD,CAAC,CAAC,2BAA2B,CAAC,MAAM;gBACxC,gBAAgB,EAAE,IAAI,CAAC,UAAU,CAC/B,OAAO,CAAC,+BAA+B,CAAC,EACxC,wCAAwC,CACzC;gBACD,aAAa,EAAE,IAAI,CAAC,eAAe,CACjC,OAAO,CAAC,4BAA4B,CAAC,CACtC;gBACD,cAAc,EAAE,IAAI,CAAC,eAAe,CAClC,OAAO,CAAC,6BAA6B,CAAC,CACvC;gBACD,YAAY,EAAE,OAAO,CAAC,2BAA2B,CAAC,KAAK,IAAI;gBAC3D,mBAAmB,EACjB,OAAO,CAAC,kCAAkC,CAAC,KAAK,IAAI;gBACtD,UAAU,EAAE,OAAO,CAAC,yBAAyB,CAAC,KAAK,IAAI;gBACvD,eAAe,EAAE,eAAe,CAAC,kBAAkB,CACjD,sBAAsB,EACtB,qCAAqC,EACrC,wCAAwC,CACzC;gBACD,iBAAiB,EAAE,IAAI,CAAC,kBAAkB,CACxC,OAAO,CAAC,gCAAgC,CAAC,CAC1C;gBACD,mBAAmB,EAAE,IAAI,CAAC,eAAe,CACvC,OAAO,CAAC,kCAAkC,CAAC,CAC5C;gBACD,uBAAuB,EAAE,IAAI,CAAC,eAAe,CAC3C,OAAO,CAAC,sCAAsC,CAAC,CAChD;gBACD;;;;;mBAKG;gBACH,0BAA0B,EACxB,OAAO,CAAC,yCAAyC,CAAC,KAAK,KAAK;gBAC9D,WAAW,EAAE,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,0BAA0B,CAAC,EAAE,CAAC,CAAC;gBACpE,gBAAgB,EAAE,IAAI,CAAC,UAAU,CAC/B,OAAO,CAAC,+BAA+B,CAAC,EACxC,CAAC,CACF;gBACD,mBAAmB,EAAE,IAAI,CAAC,UAAU,CAClC,OAAO,CAAC,kCAAkC,CAAC,EAC3C,CAAC,CACF;gBACD,WAAW,EAAE,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC;aACtC;YACD,OAAO,EAAE,IAAI;SACd,CAAC;IACJ,CAAC;IAED;;;;;;;;;;OAUG;IACI,MAAM,CAAC,eAAe,CAC3B,MAA+B,EAC/B,MAA0B;QAE1B;;;;;;;;;;;;;WAaG;QACH,IAAI,MAAM,CAAC,cAAc,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvC,OAAO,IAAI,CAAC;QACd,CAAC;QAED;;;;;WAKG;QACH,OAAO,eAAe,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,cAAc,CAAC,CAAC;IAChE,CAAC;IAED;;;OAGG;IACI,MAAM,CAAC,KAAK,CAAC,mBAAmB,CAAC,SAAmB;QACzD,OAAO,MAAM,2BAA2B,CAAC,mBAAmB,CAAC,SAAS,CAAC,CAAC;IAC1E,CAAC;IAEM,MAAM,CAAC,KAAK,CAAC,oBAAoB,CAAC,SAAmB;QAC1D,OAAO,MAAM,2BAA2B,CAAC,oBAAoB,CAAC,SAAS,CAAC,CAAC;IAC3E,CAAC;IAED,4DAA4D;IACrD,MAAM,CAAC,UAAU,CAAC,SAAgC;QACvD,2BAA2B,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;IACpD,CAAC;IAED;;;;;;;OAOG;IACK,MAAM,CAAC,WAAW,CACxB,QAAgB,EAChB,eAAsC;QAEtC,MAAM,QAAQ,GAAgB,IAAI,GAAG,CAAS,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;QAErE;;;;;;;WAOG;QACH,MAAM,MAAM,GAA4B;YACtC,GAAG,EAAE,IAAI;SACV,CAAC;QAEF,KAAK,MAAM,MAAM,IAAI,CAAC,WAAW,EAAE,WAAW,EAAE,GAAG,eAAe,CAAC,EAAE,CAAC;YACpE,IAAI,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;gBACzB,MAAM,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC;YACxB,CAAC;QACH,CAAC;QAED,OAAO,MAA+B,CAAC;IACzC,CAAC;IAED;;;;OAIG;IACK,MAAM,CAAC,cAAc,CAAC,GAAmB;QAC/C,MAAM,SAAS,GAAqB,GAAG,CAAC,SAAS,CAAC;QAElD,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,OAAO,CAAC,CAAC;QACX,CAAC;QAED,MAAM,MAAM,GAAW,IAAI,IAAI,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,CAAC;QAErD,OAAO,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;IAC9C,CAAC;IAEO,MAAM,CAAC,UAAU,CAAC,KAAc,EAAE,QAAgB;QACxD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YACxD,OAAO,KAAK,CAAC;QACf,CAAC;QAED,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9B,MAAM,MAAM,GAAW,MAAM,CAAC,KAAK,CAAC,CAAC;YAErC,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC5B,OAAO,MAAM,CAAC;YAChB,CAAC;QACH,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC;IAEO,MAAM,CAAC,kBAAkB,CAAC,KAAc;QAC9C,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YAC1C,OAAO,IAAI,CAAC;QACd,CAAC;QAED,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YACxD,OAAO,KAAK,CAAC;QACf,CAAC;QAED,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9B,MAAM,MAAM,GAAW,MAAM,CAAC,KAAK,CAAC,CAAC;YAErC,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC5B,OAAO,MAAM,CAAC;YAChB,CAAC;QACH,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAEO,MAAM,CAAC,eAAe,CAAC,KAAc;QAC3C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YAC1B,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,MAAM,MAAM,GAAkB,EAAE,CAAC;QAEjC,KAAK,MAAM,KAAK,IAAI,KAAK,EAAE,CAAC;YAC1B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC;gBAC9C,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;YAC5B,CAAC;QACH,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;CACF"}

package/build/dist/Server/Utils/SessionReplay/SessionReplayReadService.js CHANGED Viewed

@@ -16,11 +16,12 @@ import logger from "../Logger";
 import AnalyticsTableName from "../../../Types/AnalyticsDatabase/AnalyticsTableName";
 import TableColumnType from "../../../Types/AnalyticsDatabase/TableColumnType";
 import Includes from "../../../Types/BaseDatabase/Includes";
+import ObjectID from "../../../Types/ObjectID";
 import OneUptimeDate from "../../../Types/Date";
 import ChunkMath from "../../../Utils/Rum/ChunkMath";
 import { hasSessionRecordingEnded, hasTabRecordingEnded, } from "../../../Utils/Rum/SessionReplayRecordingEnded";
 import { MAX_SESSION_REPLAY_CHUNKS_PER_READ, MAX_SESSION_REPLAY_READ_BYTES, SESSION_REPLAY_LIST_SEARCH_MAX_LENGTH, SESSION_REPLAY_MAX_SESSION_MS, SESSION_REPLAY_MAX_TAG_KEYS, SESSION_REPLAY_RECORDER_CAPABILITIES, SessionReplaySealedReason, } from "../../../Types/Rum/SessionReplay";
-import { SESSION_REPLAY_SORT_BY_VALUES, } from "../../../Types/Rum/SessionReplayApi";
+import { SESSION_REPLAY_SESSION_ID_BATCH_MAX, SESSION_REPLAY_SESSION_ID_MAX_LENGTH, SESSION_REPLAY_SORT_BY_VALUES, } from "../../../Types/Rum/SessionReplayApi";
 import BadDataException from "../../../Types/Exception/BadDataException";
 import CaptureSpan from "../Telemetry/CaptureSpan";
 import ServiceType from "../../../Types/Telemetry/ServiceType";
@@ -80,13 +81,14 @@ const READ_QUERY_SETTINGS = getQuerySettings({
 export const DEFAULT_SESSION_REPLAY_LIST_LIMIT = 50;
 export const MAX_SESSION_REPLAY_LIST_LIMIT = 200;
 /*
- * Audit tables resolve the opaque session ids on one page in a single
- * ClickHouse read. Keep both the number of bound IN values and each value's
- * size bounded; session ids are browser-minted 32-character hex strings, but
- * older recorders and hand-written API callers may have stored another shape.
+ * Audit tables and replay links resolve the opaque session ids on one page
+ * in a single ClickHouse read. Keep both the number of bound IN values and
+ * each value's size bounded; session ids are browser-minted 32-character hex
+ * strings, but older recorders and hand-written API callers may have stored
+ * another shape. Shared with the Dashboard, which splits its batches to fit.
  */
-export const MAX_SESSION_REPLAY_SUMMARIES_BATCH_SIZE = 200;
-export const MAX_SESSION_REPLAY_SESSION_ID_LENGTH = 128;
+export const MAX_SESSION_REPLAY_SUMMARIES_BATCH_SIZE = SESSION_REPLAY_SESSION_ID_BATCH_MAX;
+export const MAX_SESSION_REPLAY_SESSION_ID_LENGTH = SESSION_REPLAY_SESSION_ID_MAX_LENGTH;
 /*
  * Page sizes for the per-user rollup (listUsers). Same figures as the
  * list, but the cost model differs: every page of the rollup
@@ -690,6 +692,28 @@ function readRecorderCapabilities(row) {
 }
 const activitySummaryCache = new Map();
 let publishedRecorderVersionProvider = null;
+/*
+ * The batch reads bind caller-supplied ids into one IN list. Validate the
+ * raw array (so repeats cannot slip past the size ceiling), then bind each
+ * id once, in first-occurrence order.
+ */
+function validateSessionIdBatch(sessionIds) {
+    if (sessionIds.length === 0) {
+        throw new BadDataException("sessionIds must contain at least one id");
+    }
+    if (sessionIds.length > MAX_SESSION_REPLAY_SUMMARIES_BATCH_SIZE) {
+        throw new BadDataException(`sessionIds must contain at most ${MAX_SESSION_REPLAY_SUMMARIES_BATCH_SIZE} ids`);
+    }
+    for (const sessionId of sessionIds) {
+        if (typeof sessionId !== "string" || sessionId.length === 0) {
+            throw new BadDataException("Every sessionId must be a non-empty string");
+        }
+        if (sessionId.length > MAX_SESSION_REPLAY_SESSION_ID_LENGTH) {
+            throw new BadDataException(`Every sessionId must be at most ${MAX_SESSION_REPLAY_SESSION_ID_LENGTH} characters.`);
+        }
+    }
+    return Array.from(new Set(sessionIds));
+}
 export default class SessionReplayReadService {
     static setPublishedRecorderVersionProvider(provider) {
         publishedRecorderVersionProvider = provider;
@@ -718,22 +742,7 @@ export default class SessionReplayReadService {
      * list, and argMax collapses provisional/finalized ReplacingMergeTree rows.
      */
     static async getSessionSummaries(request) {
-        if (request.sessionIds.length === 0) {
-            throw new BadDataException("sessionIds must contain at least one id");
-        }
-        if (request.sessionIds.length > MAX_SESSION_REPLAY_SUMMARIES_BATCH_SIZE) {
-            throw new BadDataException(`sessionIds must contain at most ${MAX_SESSION_REPLAY_SUMMARIES_BATCH_SIZE} ids`);
-        }
-        for (const sessionId of request.sessionIds) {
-            if (typeof sessionId !== "string" || sessionId.length === 0) {
-                throw new BadDataException("Every sessionId must be a non-empty string");
-            }
-            if (sessionId.length > MAX_SESSION_REPLAY_SESSION_ID_LENGTH) {
-                throw new BadDataException(`Every sessionId must be at most ${MAX_SESSION_REPLAY_SESSION_ID_LENGTH} characters.`);
-            }
-        }
-        /* Preserve first occurrence order while binding every id only once. */
-        const sessionIds = Array.from(new Set(request.sessionIds));
+        const sessionIds = validateSessionIdBatch(request.sessionIds);
         const statement = SQL `
       SELECT
         sessionId,
@@ -786,6 +795,111 @@ export default class SessionReplayReadService {
             return summary ? [summary] : [];
         });
     }
+    /*
+     * Session id -> the application that recorded it, project-wide, for the
+     * replay links on log, span and exception surfaces (none of which carry
+     * the application). One argMax read for a whole page of ids, never one
+     * getSessionHeader per row.
+     *
+     * An id recorded under more than one application is OMITTED, not
+     * guessed. sessionId is minted by the browser, so anyone holding one
+     * application's ingest key can record under an id another application
+     * already uses; answering with either group would point a log line at a
+     * recording it may not belong to. getSessionHeader refuses the same id
+     * unless the caller names the application, and a telemetry row has none
+     * to name.
+     *
+     * Which is why the label restriction is applied in QUALIFY, AFTER the
+     * window has counted every application in the project, and not in the
+     * WHERE: filtering first would make an id shared with an application the
+     * caller cannot see look unique, and resolve it. The WHERE stays
+     * (projectId, sessionId), which the idx_session_id bloom filter prunes.
+     */
+    static async resolveSessions(request) {
+        const sessionIds = validateSessionIdBatch(request.sessionIds);
+        if (request.accessibleRumApplicationIds &&
+            request.accessibleRumApplicationIds.length === 0) {
+            return [];
+        }
+        const statement = SQL `
+      SELECT
+        sessionId,
+        toString(rumApplicationId) AS applicationId,
+    `;
+        statement.append(`    ${toSelectList([
+            { alias: "aggStartTime", expression: argMaxDateTime("startTime") },
+        ])}`);
+        /* One grouped row per application, so this counts applications per id. */
+        statement.append(", count() OVER (PARTITION BY sessionId) AS matchedApplicationCount");
+        statement.append(SQL `
+      FROM ${AnalyticsTableName.RumSession}
+      WHERE projectId = ${{
+            type: TableColumnType.ObjectID,
+            value: request.projectId,
+        }}
+        AND sessionId IN (${{
+            type: TableColumnType.Text,
+            value: new Includes(sessionIds),
+        }})
+    `);
+        statement.append(RETENTION_FILTER);
+        statement.append(" GROUP BY projectId, rumApplicationId, sessionId");
+        statement.append(" QUALIFY matchedApplicationCount = 1");
+        if (request.accessibleRumApplicationIds) {
+            statement.append(SQL ` AND rumApplicationId IN (${{
+                type: TableColumnType.ObjectID,
+                value: new Includes(request.accessibleRumApplicationIds),
+            }})`);
+        }
+        /* At most one row per requested id survives QUALIFY. */
+        statement.append(SQL ` LIMIT ${{
+            type: TableColumnType.Number,
+            value: sessionIds.length,
+        }}`);
+        statement.append(READ_QUERY_SETTINGS);
+        const dbResult = await RumSessionService.executeQuery(statement);
+        const response = await dbResult.json();
+        const requestedIds = new Set(sessionIds);
+        const accessibleIds = request.accessibleRumApplicationIds
+            ? new Set(request.accessibleRumApplicationIds.map((applicationId) => {
+                return applicationId.toString().toLowerCase();
+            }))
+            : null;
+        /*
+         * QUALIFY is authoritative; this repeats it so a driver row that should
+         * not have survived can never widen the answer. A second row for an id
+         * is the ambiguity QUALIFY exists to refuse, so it refuses the id.
+         */
+        const resolvedById = new Map();
+        const refusedIds = new Set();
+        for (const row of response.data || []) {
+            const sessionId = readString(row, "sessionId");
+            const applicationId = readString(row, "applicationId");
+            if (!requestedIds.has(sessionId)) {
+                continue;
+            }
+            if (resolvedById.has(sessionId) ||
+                readNumber(row, "matchedApplicationCount") !== 1 ||
+                !ObjectID.isValidUUID(applicationId) ||
+                (accessibleIds !== null &&
+                    !accessibleIds.has(applicationId.toLowerCase()))) {
+                refusedIds.add(sessionId);
+                continue;
+            }
+            const startTime = readDate(row, "aggStartTime");
+            resolvedById.set(sessionId, {
+                sessionId: sessionId,
+                rumApplicationId: applicationId,
+                startTime: startTime,
+                startTimeUnixMs: startTime.getTime(),
+            });
+        }
+        /* Stable request order; missing and refused ids are simply absent. */
+        return sessionIds.flatMap((sessionId) => {
+            const resolved = resolvedById.get(sessionId);
+            return resolved && !refusedIds.has(sessionId) ? [resolved] : [];
+        });
+    }
     /*
      * Session list.
      *
@@ -2640,6 +2754,12 @@ __decorate([
     __metadata("design:paramtypes", [Object]),
     __metadata("design:returntype", Promise)
 ], SessionReplayReadService, "getSessionSummaries", null);
+__decorate([
+    CaptureSpan(),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object]),
+    __metadata("design:returntype", Promise)
+], SessionReplayReadService, "resolveSessions", null);
 __decorate([
     CaptureSpan(),
     __metadata("design:type", Function),