@oneuptime/common 14.0.12 → 14.0.14

package/build/dist/Server/Services/IncidentFormService.js

@@ -1,1202 +0,0 @@
-var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
-    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
-    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-    return c > 3 && r && Object.defineProperty(target, key, r), r;
-};
-var __metadata = (this && this.__metadata) || function (k, v) {
-    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
-};
-import { IsBillingEnabled, getAllEnvVars } from "../EnvironmentConfig";
-import DatabaseService from "./DatabaseService";
-import IncidentCustomFieldService from "./IncidentCustomFieldService";
-import IncidentFormSubmissionService from "./IncidentFormSubmissionService";
-import IncidentInternalNoteService from "./IncidentInternalNoteService";
-import IncidentService from "./IncidentService";
-import IncidentSeverityService from "./IncidentSeverityService";
-import IncidentTemplateOwnerTeamService from "./IncidentTemplateOwnerTeamService";
-import IncidentTemplateOwnerUserService from "./IncidentTemplateOwnerUserService";
-import IncidentTemplateService from "./IncidentTemplateService";
-import ProjectService from "./ProjectService";
-import SortOrder from "../../Types/BaseDatabase/SortOrder";
-import SubscriptionPlan, { PlanType, } from "../../Types/Billing/SubscriptionPlan";
-import { compactCustomFieldCreateSettings, getIncidentFormAskedDefinitions, validateCustomFieldCreateSettings, } from "../../Types/CustomField/CustomFieldCreateSettings";
-import { getCustomFieldInheritanceSource, getCustomFieldMappingRelationSelect, isCustomFieldInheritedByRecord, } from "../../Types/CustomField/CustomFieldMappingCatalog";
-import CustomFieldType from "../../Types/CustomField/CustomFieldType";
-import LIMIT_MAX, { LIMIT_PER_PROJECT } from "../../Types/Database/LimitMax";
-import Email from "../../Types/Email";
-import BadDataException from "../../Types/Exception/BadDataException";
-import ForbiddenException from "../../Types/Exception/ForbiddenException";
-import NotFoundException from "../../Types/Exception/NotFoundException";
-import ServerException from "../../Types/Exception/ServerException";
-import { INCIDENT_FORM_QUESTION_LABELS, INCIDENT_FORM_TITLE_MAX_LENGTH, WHOLE_EMAIL_ADDRESS, formatIncidentFormSubmissionErrors, getPublicIncidentForm, isIncidentFormFieldSetting, validateIncidentFormSubmission, } from "../../Types/Incident/IncidentFormPublic";
-import { getIncidentFormIpAllowlistEntries, getIpv4OfMappedAddress, validateIncidentFormIpAllowlist, } from "../../Types/Incident/IncidentFormIpAllowlist";
-import IP from "../../Types/IP/IP";
-import ObjectID from "../../Types/ObjectID";
-import IpCanonicalUtil from "../../Utils/IpCanonicalUtil";
-import { escapeMarkdownInline } from "../../Utils/Markdown/MarkdownEscape";
-import { neutralizeChatControlSequences, neutralizeUntrustedMarkdown, neutralizeUntrustedPlainText, } from "../../Utils/Markdown/UntrustedMarkdown";
-import Incident from "../../Models/DatabaseModels/Incident";
-import IncidentCustomField from "../../Models/DatabaseModels/IncidentCustomField";
-import Model from "../../Models/DatabaseModels/IncidentForm";
-import IncidentFormSubmission from "../../Models/DatabaseModels/IncidentFormSubmission";
-import IncidentInternalNote from "../../Models/DatabaseModels/IncidentInternalNote";
-import IncidentTemplate from "../../Models/DatabaseModels/IncidentTemplate";
-import IncidentFormRateLimit from "../Middleware/IncidentFormRateLimit";
-import CaptchaUtil from "../Utils/Captcha";
-import ProjectScopedReferenceValidator, { resolveReferenceId, } from "../Utils/Database/ProjectScopedReferenceValidator";
-import logger from "../Utils/Logger";
-import CaptureSpan from "../Utils/Telemetry/CaptureSpan";
-/*
- * What an incident form may hold. The public page that submits a form - and
- * the incident each submission declares - trust everything checked here, so
- * a form is refused at the write that would make it wrong rather than at a
- * stranger's submission:
- *
- *   - its link key is minted on create, never taken from the request, and
- *     only ever replaced by another UUID;
- *   - its custom field questions and description question are settings the
- *     public page and the submit route understand;
- *   - its IP allowlist holds only entries the public routes can match;
- *   - its severity and template belong to its own project, because every
- *     incident declared through it is created in that project with them;
- *   - it has a severity: a submission needs one, and "incidentSeverityId is
- *     required" says less than the message below.
- *
- * The public routes themselves live in IncidentFormAPI, and are thin: what a
- * visitor is told about a form and what a submission turns into are decided
- * here, in getPublicForm and submitPublicForm.
- */
-export const INCIDENT_FORM_SEVERITY_REQUIRED_MESSAGE = "An incident form needs a severity for the incidents it declares. Choose one of the project's incident severities.";
-export const INCIDENT_FORM_DESCRIPTION_SETTING_MESSAGE = "Description Question must be Required, Optional or Hidden.";
-export const INCIDENT_FORM_SHARE_KEY_MESSAGE = "Share Key must be a UUID, such as the one the dashboard's Reset Link generates.";
-/*
- * The one answer a public request gets for every form it may not use: a
- * link that is malformed or names no form, a form that is turned off, and a
- * form whose project's plan does not include forms or whose subscription is
- * unpaid (see isProjectOnPlan). They all read the same, word for word and
- * status for status, so trying links tells a stranger nothing about which
- * forms exist or why one is unavailable.
- */
-export const INCIDENT_FORM_NOT_AVAILABLE_MESSAGE = "This form is not available. It may have been turned off, or the link may be out of date.";
-/*
- * The form's IP allowlist refused the visitor. Only reached for a form that
- * exists and is on, so it can say what is wrong: the visitor can do
- * something about their network, and nothing about a form that is gone.
- */
-export const INCIDENT_FORM_NETWORK_NOT_ALLOWED_MESSAGE = "This form can only be opened from an allowed network.";
-/*
- * Neither the reporter, the form nor its template has a severity - the
- * form's own was deleted (the column is cleared with it) and the template
- * sets none. The reporter cannot fix that, so the message asks them to tell
- * the people who can.
- */
-export const INCIDENT_FORM_NO_SEVERITY_MESSAGE = "This form cannot declare an incident because it has no severity. Please let the team that shared it know.";
-/*
- * Declaring the incident itself failed. Why is logged with the form and the
- * project; the reporter, who can only try again, is not handed internal
- * messages or ids.
- */
-export const INCIDENT_FORM_SUBMIT_FAILED_MESSAGE = "Your report could not be submitted. Please try again in a few minutes.";
-/*
- * An address an autolink carries whole everywhere: letters, digits, dots
- * and hyphens, and of the rest of what an address may hold only "_", "~",
- * "$", "'", "*" and "+" - the characters a mailto: link may carry as they
- * are (RFC 6068) and that every renderer here keeps inside an autolink.
- * Every other one is written as an explicit link (see
- * getIncidentFormReporterNote), because somewhere the autolink would
- * write to another address:
- *
- *   - "!" anywhere: micromark, behind the dashboard and slackify, does not
- *     take "!" in an autolink's address, so <first.last!ops@corp.example>
- *     became a link to ops@corp.example (and a leading "!", like a leading
- *     "#", opens like a Slack control sequence);
- *   - "^": marked, which renders the owners' email, drops "^" from its
- *     autolink rule, so <jane^doe@corp.example> linked doe@corp.example;
- *   - "#", "?" and "%": a mail client reads them in a mailto: link as a
- *     fragment, headers or an escape - <a#b@example.com> writes to "a",
- *     <a%41@example.com> to aA@example.com - and slackify cannot even read
- *     an address with a stray "%" in it;
- *   - "&", "/", "=", "`", "{", "|" and "}": RFC 6068 has them
- *     percent-encoded in a mailto: link, which an autolink cannot do.
- */
-const EXPLICIT_LINK_ADDRESS_PATTERN = /[^a-z0-9.@_~$'*+-]/i;
-/*
- * The characters of an address a mailto: link carries only percent-encoded
- * (RFC 6068): all but unreserved characters and "!", "$", "'", "*", "+"
- * and "@".
- */
-const MAILTO_ENCODED_CHARACTER_PATTERN = /[^a-z0-9.@_~!$'*+-]/gi;
-// A mailto: link that writes to exactly this address.
-const getMailtoLink = (email) => {
-    return `mailto:${email.replace(MAILTO_ENCODED_CHARACTER_PATTERN, (character) => {
-        return `%${character
-            .charCodeAt(0)
-            .toString(16)
-            .toUpperCase()
-            .padStart(2, "0")}`;
-    })}`;
-};
-/**
- * The private note a submission leaves on the incident it declared: which
- * form it came through, and who sent it as far as they said. Private, so the
- * reporter's name and address never reach a status page the way the
- * incident's description can.
- *
- * Every value is escaped where it is placed, as every feed sentence the
- * server writes escapes the names in it. The note is posted as it is - no
- * person reads it over first - so a name such as "[x](javascript:...)" must
- * reach the responders as those characters, not as a link, and "**bold**"
- * as asterisks rather than as emphasis. The form's name is escaped too: an
- * admin chose it, but it sits inside the note's own bold.
- *
- * The note is posted to the incident's Slack and Teams channels as well, so
- * a name such as "<!channel>" must not reach Slack as a mention either: the
- * names go through neutralizeChatControlSequences before they are escaped.
- *
- * The address is the exception: it is written as an autolink,
- * <jane@example.com>, so every renderer links the whole of it. It has
- * already passed WHOLE_EMAIL_ADDRESS - one dot-atom address, with no space,
- * bracket, angle bracket or backslash that could end the autolink early.
- * Backslash-escaping it instead broke the link where it matters: marked,
- * which renders the owners' "note posted" email, restarts its bare-address
- * link after every escape, so mary\-jane.watson@corp.example linked
- * mailto:jane.watson@corp.example - somebody else's mailbox. An address an
- * autolink would not carry whole in every renderer, or that a mailto: link
- * carries only percent-encoded (see EXPLICIT_LINK_ADDRESS_PATTERN: one with
- * "!", "^", "#", "?", "%" and the like in it) is written as a plain link
- * instead, [address](mailto:...), with those characters percent-encoded in
- * its address - a form marked, the dashboard and slackify all link whole.
- * A value that is not one whole address (the function is exported, and
- * could be handed anything) is escaped like the name.
- */
-export const getIncidentFormReporterNote = (data) => {
-    var _a;
-    const formName = escapeMarkdownInline(neutralizeChatControlSequences(data.formName)).trim();
-    const form = formName
-        ? `the incident form **${formName}**`
-        : "an incident form";
-    const reporterName = escapeMarkdownInline(neutralizeChatControlSequences(data.reporterName)).trim();
-    const email = String((_a = data.reporterEmail) !== null && _a !== void 0 ? _a : "").trim();
-    let reporterEmail = escapeMarkdownInline(neutralizeChatControlSequences(email)).trim();
-    if (email && WHOLE_EMAIL_ADDRESS.test(email)) {
-        reporterEmail = EXPLICIT_LINK_ADDRESS_PATTERN.test(email)
-            ? `[${escapeMarkdownInline(email)}](${getMailtoLink(email)})`
-            : `<${email}>`;
-    }
-    if (reporterName && reporterEmail) {
-        return `Reported through ${form} by ${reporterName} (${reporterEmail}).`;
-    }
-    if (reporterName || reporterEmail) {
-        return `Reported through ${form} by ${reporterName || reporterEmail}.`;
-    }
-    return `Reported anonymously through ${form}.`;
-};
-/*
- * Incident.title is a varchar(500), and breaking a chat sequence or image
- * syntax in the title adds an invisible character (see
- * neutralizeIncidentFormTitle), so a title of nearly 500 characters full of
- * "<!" or "![" can outgrow it. Worded as the validator's own length refusal.
- */
-export const INCIDENT_FORM_TITLE_TOO_LONG_MESSAGE = `${INCIDENT_FORM_QUESTION_LABELS.title} cannot be more than ${INCIDENT_FORM_TITLE_MAX_LENGTH} characters.`;
-const KNOWN_CUSTOM_FIELD_TYPES = Object.values(CustomFieldType);
-/*
- * A reporter's title as the incident stores it - one definition, for the
- * length check before anything is declared and for the report itself. It
- * is plain text, but much of OneUptime places an incident's title into
- * Markdown as it is: an episode grouped from the incident takes it as its
- * title, and episode feed items, chat messages, summaries and note
- * templates carry it on, rendered without the viewer's safe mode. So its
- * chat control sequences, its image syntax and any mermaid fence in it are
- * broken with an invisible character (neutralizeUntrustedPlainText) -
- * wherever the title lands, it mentions nobody and fetches nothing - and it
- * still reads exactly as typed, in an email subject and a text message too.
- */
-const neutralizeIncidentFormTitle = (title) => {
-    return neutralizeUntrustedPlainText(title);
-};
-/**
- * The validated answers as the incident stores them, with nothing left in
- * them that acts on its own when shown (see UntrustedMarkdown): a
- * stranger's report is posted to the project's Slack and Teams channels and
- * rendered for every responder and in owners' emails, and nobody reads it
- * over first.
- *
- * - The title (see neutralizeIncidentFormTitle): chat control sequences
- *   such as <!channel>, image syntax and mermaid fences are broken,
- *   invisibly.
- * - Every Text or Long Text answer (and an answer to a field of a type this
- *   version does not know, which the form asks as text): chat control
- *   sequences are broken, invisibly.
- * - The description and every Markdown answer: chat control sequences are
- *   broken, and images become links and mermaid diagrams code, so nothing
- *   is fetched or run.
- * - Everything else - a dropdown option, a number, a date, a yes/no - was
- *   checked against its field and is left as it is.
- *
- * The reporter's name and address are left as validated: the submission
- * record shows them as plain text, and the private note neutralises them
- * where it places them (getIncidentFormReporterNote).
- */
-export const neutralizeIncidentFormReport = (data) => {
-    /*
-     * The answers are copied key by key, defined rather than assigned, as
-     * the validator stores them: a field may be named "__proto__", and
-     * assigning that name (which a spread compiles to) would set the
-     * object's prototype instead of copying the answer.
-     */
-    const customFields = {};
-    for (const [name, value] of Object.entries(data.answers.customFields)) {
-        Object.defineProperty(customFields, name, {
-            value: value,
-            enumerable: true,
-            writable: true,
-            configurable: true,
-        });
-    }
-    const report = Object.assign(Object.assign({}, data.answers), { title: neutralizeIncidentFormTitle(data.answers.title), customFields: customFields });
-    if (data.answers.description) {
-        report.description = neutralizeUntrustedMarkdown(data.answers.description);
-    }
-    for (const definition of data.askedDefinitions) {
-        const name = definition.name;
-        if (typeof name !== "string" ||
-            !Object.prototype.hasOwnProperty.call(report.customFields, name)) {
-            continue;
-        }
-        const value = report.customFields[name];
-        if (typeof value !== "string") {
-            continue;
-        }
-        const type = definition.customFieldType || "";
-        let neutralized = value;
-        if (type === CustomFieldType.Markdown) {
-            neutralized = neutralizeUntrustedMarkdown(value);
-        }
-        else if (type === CustomFieldType.Text ||
-            type === CustomFieldType.LongText ||
-            !KNOWN_CUSTOM_FIELD_TYPES.includes(type)) {
-            neutralized = neutralizeChatControlSequences(value);
-        }
-        Object.defineProperty(report.customFields, name, {
-            value: neutralized,
-            enumerable: true,
-            writable: true,
-            configurable: true,
-        });
-    }
-    return report;
-};
-export class Service extends DatabaseService {
-    constructor() {
-        super(Model);
-    }
-    async onBeforeCreate(createBy) {
-        /*
-         * Always a fresh key, whatever the request carried: a key the caller
-         * chose could be one somebody else already knows. The column is computed,
-         * so a key in the request is not refused - it is replaced.
-         */
-        createBy.data.shareKey = ObjectID.generate();
-        if (!resolveReferenceId(createBy.data.incidentSeverityId) &&
-            !resolveReferenceId(createBy.data.incidentSeverity)) {
-            throw new BadDataException(INCIDENT_FORM_SEVERITY_REQUIRED_MESSAGE);
-        }
-        this.assertValidCustomFieldSettings(createBy.data.customFieldSettings);
-        this.assertValidIpAllowlist(createBy.data.ipWhitelist);
-        /*
-         * Null is the column's default on create (DatabaseService drops a null
-         * sent for a default-value column), so only a value is checked here.
-         */
-        if (createBy.data.descriptionSetting !== undefined &&
-            createBy.data.descriptionSetting !== null) {
-            this.assertValidDescriptionSetting(createBy.data.descriptionSetting);
-        }
-        await ProjectScopedReferenceValidator.validateReferencesBelongToProject({
-            projectId: createBy.props.tenantId || createBy.data.projectId,
-            subject: "incident form",
-            references: this.getProjectScopedReferences(createBy.data),
-        });
-        return { createBy, carryForward: null };
-    }
-    async onBeforeUpdate(updateBy) {
-        const data = updateBy.data;
-        /*
-         * The severity column is nullable only so that deleting a severity
-         * leaves its forms behind; clearing it by hand would leave a form that
-         * refuses every submission.
-         */
-        for (const column of ["incidentSeverityId", "incidentSeverity"]) {
-            if (Object.prototype.hasOwnProperty.call(data, column) &&
-                data[column] !== undefined &&
-                !resolveReferenceId(data[column])) {
-                throw new BadDataException(INCIDENT_FORM_SEVERITY_REQUIRED_MESSAGE);
-            }
-        }
-        if (data["customFieldSettings"] !== undefined) {
-            this.assertValidCustomFieldSettings(data["customFieldSettings"]);
-        }
-        if (data["ipWhitelist"] !== undefined) {
-            this.assertValidIpAllowlist(data["ipWhitelist"]);
-        }
-        // NOT NULL in the database, so null is refused here rather than there.
-        if (data["descriptionSetting"] !== undefined) {
-            this.assertValidDescriptionSetting(data["descriptionSetting"]);
-        }
-        if (data["shareKey"] !== undefined) {
-            this.assertValidShareKey(data["shareKey"]);
-        }
-        const references = this.getProjectScopedReferences(updateBy.data);
-        if (references.every((reference) => {
-            return !reference.id;
-        })) {
-            return { updateBy, carryForward: null };
-        }
-        /*
-         * Root/API updates do not always carry a tenantId, so fall back to the
-         * project of each form the query actually matches.
-         */
-        const projectIds = updateBy.props.tenantId
-            ? [updateBy.props.tenantId]
-            : await this.getProjectIdsForUpdateQuery(updateBy);
-        for (const projectId of projectIds) {
-            await ProjectScopedReferenceValidator.validateReferencesBelongToProject({
-                projectId: projectId,
-                subject: "incident form",
-                references: references,
-            });
-        }
-        return { updateBy, carryForward: null };
-    }
-    /**
-     * What the public page shows for the form a link names: its questions, in
-     * the safe subset getPublicIncidentForm builds field by field - never the
-     * form's id, project, template, link key or allowlist, never a custom
-     * field the form does not ask, and the project's severities only when the
-     * reporter may choose one.
-     *
-     * clientIp is the trusted client address (resolveClientIp), or undefined
-     * when there is none; a form with an IP allowlist refuses the latter.
-     */
-    async getPublicForm(data) {
-        const form = await this.getFormForPublicRequest(data);
-        const [askedDefinitions, severities] = await Promise.all([
-            this.getAskedCustomFields(form),
-            this.getSeveritiesForReporter(form),
-        ]);
-        return getPublicIncidentForm({
-            form: form,
-            askedDefinitions: askedDefinitions,
-            severities: severities,
-            isCaptchaRequired: CaptchaUtil.isCaptchaEnabled(),
-        });
-    }
-    /**
-     * Declares the incident a public submission reports, and tells the
-     * reporter its number.
-     *
-     * In order, each step refusing before the next one costs anything: the
-     * same checks as getPublicForm (link, form on, plan, network), then the
-     * instance captcha when it is on, then the answers against the form's
-     * questions (validateIncidentFormSubmission) and the length of the title
-     * as it will be stored, then the severity, and last the form's hourly
-     * ceiling (IncidentFormRateLimit.reserveFormSubmission), which only a
-     * submission that passed all of those may spend. Only then are the
-     * answers made safe to show (neutralizeIncidentFormReport) - the one step
-     * whose cost grows with the Markdown in them, and one that cannot refuse
-     * - and the incident created, as root, from them and the form's own
-     * settings. Nothing else in the request reaches it, least of all a
-     * project id: the incident goes to the form's project.
-     *
-     * Once the incident exists the reporter is told it was declared whatever
-     * happens next. The submission record and the private note are each
-     * attempted, and a failure is logged rather than turned into an error
-     * that would invite the reporter to send - and page on-call with - the
-     * same report again. (The template's owners go with the create itself:
-     * see declareIncident.)
-     */
-    async submitPublicForm(data) {
-        var _a, _b, _c;
-        const form = await this.getFormForPublicRequest({
-            shareKey: data.shareKey,
-            clientIp: data.clientIp,
-        });
-        if (CaptchaUtil.isCaptchaEnabled()) {
-            await CaptchaUtil.verifyCaptcha({
-                token: (_a = data.request) === null || _a === void 0 ? void 0 : _a.captchaToken,
-                remoteIp: data.captchaRemoteIp || null,
-            });
-        }
-        const [askedDefinitions, severities] = await Promise.all([
-            this.getAskedCustomFields(form),
-            this.getSeveritiesForReporter(form),
-        ]);
-        const validation = validateIncidentFormSubmission({
-            form: form,
-            askedDefinitions: askedDefinitions,
-            severities: severities,
-            data: (_b = data.request) === null || _b === void 0 ? void 0 : _b.data,
-        });
-        if (!validation.isValid) {
-            throw new BadDataException(formatIncidentFormSubmissionErrors(validation.errors));
-        }
-        const answers = validation.value;
-        // The title as it will be stored, which must still fit Incident.title.
-        if (neutralizeIncidentFormTitle(answers.title).length >
-            INCIDENT_FORM_TITLE_MAX_LENGTH) {
-            throw new BadDataException(INCIDENT_FORM_TITLE_TOO_LONG_MESSAGE);
-        }
-        const incidentSeverityId = await this.getSubmissionSeverityId({ form, answers });
-        /*
-         * Everything that can refuse this submission has passed, so only now
-         * does it count against the form's hourly ceiling - the bound on how
-         * many incidents, and pages, its link can cause. Counted any earlier, a
-         * request refused by the IP allowlist, the captcha or the answers would
-         * use up the allowance everybody shares. Fails closed (503) when the
-         * counter cannot be reached; over the ceiling it is a 429, which the
-         * route answers with Retry-After.
-         */
-        await IncidentFormRateLimit.reserveFormSubmission({
-            shareKey: data.shareKey,
-        });
-        /*
-         * Only a submission about to declare an incident - which the ceiling
-         * above bounds - pays for reading its Markdown; one refused on the way
-         * here never does.
-         */
-        const report = neutralizeIncidentFormReport({
-            answers: answers,
-            askedDefinitions: askedDefinitions,
-        });
-        const incident = await this.declareIncident({
-            form,
-            answers: report,
-            incidentSeverityId,
-        });
-        if (incident.id) {
-            await this.recordSubmission({ form, incidentId: incident.id, answers });
-            await this.addReporterNote({ form, incidentId: incident.id, answers });
-        }
-        else {
-            logger.error(`IncidentFormService: incident form ${(_c = form.id) === null || _c === void 0 ? void 0 : _c.toString()} declared an incident that came back without an id; its submission and note were not added.`, this.getLogAttributes(form));
-        }
-        const result = {};
-        const incidentNumber = incident.incidentNumberWithPrefix ||
-            (typeof incident.incidentNumber === "number"
-                ? `#${incident.incidentNumber}`
-                : undefined);
-        if (incidentNumber) {
-            result.incidentNumber = incidentNumber;
-        }
-        if (form.successMessage && form.successMessage.trim().length > 0) {
-            result.successMessage = form.successMessage;
-        }
-        return result;
-    }
-    /*
-     * Whether the form's project is on a plan that includes incident forms.
-     *
-     * Checked by hand because the public routes read as root, and root never
-     * carries a plan, so none of the model's billing gate runs for them. This
-     * stands in for all of it (BillingPermission.checkBillingPermissions), not
-     * only @TableBillingAccessControl: a project whose subscription is unpaid
-     * is off plan too. The dashboard refuses every IncidentForm request of
-     * such a project - its admins cannot even turn a form off - so its link
-     * must not keep declaring incidents and paging on-call meanwhile.
-     *
-     * Fails closed: a project whose plan cannot be read (deleted mid-request,
-     * still onboarding) is treated as below plan - that costs one "not
-     * available" page, where failing open would let anyone with a link page
-     * on-call on a plan that does not include forms.
-     */
-    async isProjectOnPlan(projectId) {
-        if (!IsBillingEnabled) {
-            return true;
-        }
-        try {
-            const current = await ProjectService.getCurrentPlan(projectId);
-            if (!current.plan || current.isSubscriptionUnpaid) {
-                return false;
-            }
-            return SubscriptionPlan.isFeatureAccessibleOnCurrentPlan(PlanType.Growth, current.plan, getAllEnvVars());
-        }
-        catch (err) {
-            logger.warn(`IncidentFormService: could not read the plan of project ${projectId.toString()}; treating it as below plan.`);
-            logger.warn(err);
-            return false;
-        }
-    }
-    /*
-     * Whether a form's IP allowlist lets this client address in: one IP
-     * address or CIDR range per line, as the dashboard's public IP allowlist.
-     * The same address resolution as the dashboard's too (resolveClientIp: the
-     * trusted end of X-Forwarded-For), so a caller cannot name their own
-     * address by sending the header.
-     *
-     * A list with no entries - empty, or only blank lines left behind by a
-     * textarea - lets anyone in, as the column's description promises. Once
-     * there is an entry, a request whose address cannot be established is
-     * refused, and so is one IP.isInWhitelist cannot read: this is an access
-     * decision, so every doubt is a no.
-     *
-     * An address is compared in its canonical spelling on both sides
-     * (IpCanonicalUtil): IP.isInWhitelist matches an IPv6 entry letter for
-     * letter, and "2001:DB8::1" or "2001:db8:0:0:0:0:0:1" written in the list
-     * is the very address the proxy reports as "2001:db8::1". Nothing is
-     * rewritten in the stored list, and ranges are left to the matcher.
-     *
-     * An IPv4 visitor is compared as its IPv4 address, whichever way it was
-     * reported, so the list's IPv4 entries and ranges match it:
-     * resolveClientIp unwraps the dotted IPv6 spelling ("::ffff:203.0.113.7")
-     * already, and one a proxy wrote in hex ("::ffff:cb00:7107") is read the
-     * same way here. The list itself cannot hold that spelling: it is refused
-     * when saved (validateIncidentFormIpAllowlist).
-     */
-    isClientIpAllowed(data) {
-        const entries = getIncidentFormIpAllowlistEntries(data.ipWhitelist).map((entry) => {
-            return IP.isIP(entry) ? IpCanonicalUtil.canonicalize(entry) : entry;
-        });
-        if (entries.length === 0) {
-            return true;
-        }
-        if (!data.clientIp) {
-            return false;
-        }
-        const clientIp = IP.isIP(data.clientIp)
-            ? getIpv4OfMappedAddress(data.clientIp) ||
-                IpCanonicalUtil.canonicalize(data.clientIp)
-            : data.clientIp;
-        try {
-            return IP.isInWhitelist({
-                ip: clientIp,
-                whitelist: entries,
-            });
-        }
-        catch (_a) {
-            return false;
-        }
-    }
-    /**
-     * Takes a deleted incident custom field off every form of its project:
-     * its key is removed from each form's questions (customFieldSettings).
-     * Returns how many forms asked it.
-     *
-     * Forms ask fields by template key, and a field created later with the
-     * same name gets the same key back (generateCustomFieldVariableKey) - as
-     * does any field whose name gives the same key. Left behind, the key
-     * would put that new field, with its own description and dropdown
-     * options, straight onto every public form that asked the deleted one,
-     * and no admin could clear it from the Questions card meanwhile: the card
-     * lists only fields that exist. A public form must never show a field an
-     * admin did not choose for it. Templates keep their settings on purpose -
-     * a field created again gets its template setting back - so only forms
-     * are touched here.
-     *
-     * One raw statement, as CustomFieldRename moves values: removing a
-     * reference to a deleted field changes no form an admin configured, so it
-     * must not start every form's "On Update" workflow, bump its version or
-     * move its updatedAt. The table and column names come from the entity
-     * metadata and every value is a bound parameter.
-     */
-    async removeCustomFieldFromQuestions(data) {
-        var _a, _b;
-        const repository = this.getRepository();
-        const metadata = repository.metadata;
-        const settingsColumn = (_a = metadata.findColumnWithPropertyName("customFieldSettings")) === null || _a === void 0 ? void 0 : _a.databaseName;
-        const projectIdColumn = (_b = metadata.findColumnWithPropertyName("projectId")) === null || _b === void 0 ? void 0 : _b.databaseName;
-        if (!settingsColumn || !projectIdColumn) {
-            throw new ServerException(`Cannot remove a custom field from ${metadata.tableName}: it has no customFieldSettings or projectId column.`);
-        }
-        /*
-         * In a CTE so the statement answers with the rows it wrote. jsonb_typeof
-         * guards the operators: on a jsonb array "-" and jsonb_exists act on its
-         * string elements, and settings that are not an object hold no keys.
-         */
-        const result = await repository.manager.query(`WITH "updated" AS (
-        UPDATE "${metadata.tableName}"
-        SET "${settingsColumn}" = "${settingsColumn}" - $2::text
-        WHERE "${projectIdColumn}" = $1
-          AND jsonb_typeof("${settingsColumn}") = 'object'
-          AND jsonb_exists("${settingsColumn}", $2::text)
-        RETURNING 1
-      ) SELECT COUNT(*)::int AS "count" FROM "updated"`, [data.projectId.toString(), data.variableKey]);
-        const row = Array.isArray(result)
-            ? result[0]
-            : undefined;
-        return Number(row === null || row === void 0 ? void 0 : row["count"]) || 0;
-    }
-    /*
-     * The form a public request names, once the request has passed every
-     * check that comes before learning anything about it. Checked in this
-     * order, each needing the one before: the link has a share key's shape
-     * (so junk never reaches Postgres), a form holds that key, the form is on,
-     * its project's plan includes forms, and the visitor's network is allowed.
-     */
-    async getFormForPublicRequest(data) {
-        const shareKey = typeof data.shareKey === "string"
-            ? data.shareKey.trim().toLowerCase()
-            : "";
-        if (!ObjectID.isValidUUID(shareKey)) {
-            throw new NotFoundException(INCIDENT_FORM_NOT_AVAILABLE_MESSAGE);
-        }
-        const form = await this.findOneBy({
-            query: {
-                shareKey: new ObjectID(shareKey),
-            },
-            select: {
-                _id: true,
-                projectId: true,
-                name: true,
-                description: true,
-                isEnabled: true,
-                incidentSeverityId: true,
-                allowReporterToChooseSeverity: true,
-                incidentTemplateId: true,
-                descriptionSetting: true,
-                customFieldSettings: true,
-                isReporterDetailsRequired: true,
-                successMessage: true,
-                ipWhitelist: true,
-            },
-            props: {
-                isRoot: true,
-            },
-        });
-        // Only a form that is switched on. A missing or null switch is off.
-        if (!form || !form.id || !form.projectId || form.isEnabled !== true) {
-            throw new NotFoundException(INCIDENT_FORM_NOT_AVAILABLE_MESSAGE);
-        }
-        if (!(await this.isProjectOnPlan(form.projectId))) {
-            throw new NotFoundException(INCIDENT_FORM_NOT_AVAILABLE_MESSAGE);
-        }
-        if (!this.isClientIpAllowed({
-            ipWhitelist: form.ipWhitelist,
-            clientIp: data.clientIp,
-        })) {
-            if (!data.clientIp) {
-                logger.error(`IncidentFormService: could not establish the client address of a request to incident form ${form.id.toString()}, which has an IP allowlist; refused.`, this.getLogAttributes(form));
-            }
-            throw new ForbiddenException(INCIDENT_FORM_NETWORK_NOT_ALLOWED_MESSAGE);
-        }
-        return form;
-    }
-    /*
-     * The custom fields the form asks, in the order to ask them, with each
-     * one's Required taken from the form (getIncidentFormAskedDefinitions).
-     * The same list serves the page and checks the answers, so a submission
-     * can only answer what the page showed. A form that asks no field does
-     * not read the project's fields at all.
-     *
-     * Less the fields the incident will copy from a monitor instead (see
-     * leaveOutInheritedFields).
-     */
-    async getAskedCustomFields(form) {
-        const askedSettings = compactCustomFieldCreateSettings(form.customFieldSettings, {
-            dropHidden: true,
-        });
-        if (Object.keys(askedSettings).length === 0) {
-            return [];
-        }
-        const definitions = await IncidentCustomFieldService.findBy({
-            query: {
-                projectId: form.projectId,
-            },
-            select: {
-                name: true,
-                description: true,
-                customFieldType: true,
-                dropdownOptions: true,
-                variableKey: true,
-                sortOrder: true,
-                mapFromResourceType: true,
-                mapFromCustomFieldName: true,
-            },
-            limit: LIMIT_PER_PROJECT,
-            skip: 0,
-            /*
-             * The order the dashboard reads them in (fetchIncidentCustomFieldDefinitions):
-             * by Sort Order, and - because DatabaseService appends the primary
-             * key to every sort - by _id among fields that have none. The stable
-             * sortCustomFieldDefinitions below keeps that tie order, so fields
-             * without a sort order are asked in the order the form's Questions
-             * card lists them. With no sort, DatabaseService would read them
-             * newest first, and the reporter would get a different order than
-             * the admin set up.
-             */
-            sort: {
-                sortOrder: SortOrder.Ascending,
-            },
-            props: {
-                isRoot: true,
-            },
-        });
-        return await this.leaveOutInheritedFields({
-            form: form,
-            askedDefinitions: getIncidentFormAskedDefinitions(definitions, form.customFieldSettings),
-        });
-    }
-    /*
-     * A field mapped from a monitor field takes the monitor's value when the
-     * incident has a monitor: IncidentService applies the mapping last on
-     * create, over whatever the reporter answered. So such a field is not
-     * asked once the incident will have a monitor - the rule the dashboard's
-     * Declare Incident form follows (isCustomFieldInheritedByRecord) - and an
-     * answer sent anyway is dropped as one to a question the form does not
-     * ask, rather than being required and then silently thrown away.
-     *
-     * A form's incident only gets monitors from the form's template, so the
-     * template is what decides, read per request (its monitors can change
-     * after the form's questions are set), and only when the form has one and
-     * asks a mapped field.
-     */
-    async leaveOutInheritedFields(data) {
-        const definitionTableName = new IncidentCustomField().tableName || undefined;
-        const sources = [];
-        for (const definition of data.askedDefinitions) {
-            const source = getCustomFieldInheritanceSource({
-                definitionTableName: definitionTableName,
-                definition: definition,
-            });
-            if (source && !sources.includes(source)) {
-                sources.push(source);
-            }
-        }
-        if (sources.length === 0 || !data.form.incidentTemplateId) {
-            return data.askedDefinitions;
-        }
-        /*
-         * The template's own relations stand for the incident's: the template
-         * branch copies them onto it. A relation the template does not have
-         * cannot reach the incident.
-         */
-        const template = new IncidentTemplate();
-        const select = {};
-        for (const source of sources) {
-            if (template.hasColumn(source.targetRelationProperty)) {
-                Object.assign(select, getCustomFieldMappingRelationSelect(source));
-            }
-        }
-        if (Object.keys(select).length === 0) {
-            return data.askedDefinitions;
-        }
-        const stored = await IncidentTemplateService.findOneBy({
-            query: {
-                _id: data.form.incidentTemplateId.toString(),
-                projectId: data.form.projectId,
-            },
-            select: select,
-            props: {
-                isRoot: true,
-            },
-        });
-        if (!stored) {
-            return data.askedDefinitions;
-        }
-        return data.askedDefinitions.filter((definition) => {
-            return !isCustomFieldInheritedByRecord({
-                definitionTableName: definitionTableName,
-                definition: definition,
-                record: stored,
-            });
-        });
-    }
-    /*
-     * The project's severities, in their own order, for a form that lets the
-     * reporter choose one; none otherwise, since nothing would use them. Both
-     * what the page lists and what a submission's choice is checked against.
-     */
-    async getSeveritiesForReporter(form) {
-        if (form.allowReporterToChooseSeverity !== true) {
-            return [];
-        }
-        const severities = await IncidentSeverityService.findBy({
-            query: {
-                projectId: form.projectId,
-            },
-            select: {
-                _id: true,
-                name: true,
-                color: true,
-                order: true,
-            },
-            sort: {
-                order: SortOrder.Ascending,
-            },
-            limit: LIMIT_PER_PROJECT,
-            skip: 0,
-            props: {
-                isRoot: true,
-            },
-        });
-        const listed = [];
-        for (const severity of severities) {
-            if (!severity.id) {
-                continue;
-            }
-            const entry = {
-                _id: severity.id.toString(),
-                name: severity.name || "",
-            };
-            if (severity.color) {
-                entry.color = severity.color.toString();
-            }
-            listed.push(entry);
-        }
-        return listed;
-    }
-    /*
-     * The severity to declare the incident with: the reporter's choice when
-     * the form offers one and they made it (validateIncidentFormSubmission has
-     * already checked it is one of the project's), otherwise the form's own.
-     *
-     * A form's severity is required, but deleting that severity clears it, so
-     * a form can be left without one. Then its template's severity applies -
-     * returned as "none" so IncidentService's template branch fills it in -
-     * and with no template severity either the submission is refused here,
-     * with a message the reporter can pass on, rather than failing inside the
-     * create as a missing required column.
-     */
-    async getSubmissionSeverityId(data) {
-        if (data.answers.incidentSeverityId) {
-            return new ObjectID(data.answers.incidentSeverityId);
-        }
-        if (data.form.incidentSeverityId) {
-            return data.form.incidentSeverityId;
-        }
-        if (data.form.incidentTemplateId) {
-            const template = await IncidentTemplateService.findOneBy({
-                query: {
-                    _id: data.form.incidentTemplateId.toString(),
-                    projectId: data.form.projectId,
-                },
-                select: {
-                    incidentSeverityId: true,
-                },
-                props: {
-                    isRoot: true,
-                },
-            });
-            if (template === null || template === void 0 ? void 0 : template.incidentSeverityId) {
-                return undefined;
-            }
-        }
-        throw new BadDataException(INCIDENT_FORM_NO_SEVERITY_MESSAGE);
-    }
-    /*
-     * Creates the incident, as root, in the form's project.
-     *
-     * With a template, createdIncidentTemplateId hands the rest to
-     * IncidentService's template branch: the initial state, the severity when
-     * none is set here, the description when the reporter wrote none, the
-     * monitors, services, labels, on-call policies and status pages, and the
-     * template's custom field values under the reporter's answers. That branch
-     * only runs when no state is given, so currentIncidentStateId is never set
-     * here; and it only fills in what is undefined, so an unanswered
-     * description is left out rather than sent empty.
-     *
-     * The incident starts off every status page and without notifying their
-     * subscribers, whatever the template says: a stranger's report is for the
-     * responders to triage before anything about it is published. It is not
-     * private, and has no creating user - nobody signed in to send it.
-     *
-     * The template's owners are handed over with the create, not added once
-     * it returns: IncidentService adds them after the incident's Slack and
-     * Microsoft Teams channels exist, so their own hooks invite them to those
-     * channels (added any earlier, they would find no channel to join, and
-     * nothing invites an existing owner later). notifyOwners asks for them to
-     * be notified - they are the people a report through this form is meant
-     * to reach - and IncidentService holds the incident's "Incident Created"
-     * notification until they are its owners, so that it reaches them rather
-     * than the project's owners.
-     */
-    async declareIncident(data) {
-        var _a;
-        const owners = await this.getTemplateOwners(data.form);
-        const miscDataProps = {};
-        if (owners.userIds.length > 0) {
-            miscDataProps["ownerUsers"] = owners.userIds;
-        }
-        if (owners.teamIds.length > 0) {
-            miscDataProps["ownerTeams"] = owners.teamIds;
-        }
-        if (Object.keys(miscDataProps).length > 0) {
-            miscDataProps["notifyOwners"] = true;
-        }
-        const incident = new Incident();
-        incident.projectId = data.form.projectId;
-        incident.title = data.answers.title;
-        if (data.answers.description) {
-            incident.description = data.answers.description;
-        }
-        if (data.incidentSeverityId) {
-            incident.incidentSeverityId = data.incidentSeverityId;
-        }
-        if (data.form.incidentTemplateId) {
-            incident.createdIncidentTemplateId =
-                data.form.incidentTemplateId.toString();
-        }
-        incident.customFields = data.answers.customFields;
-        incident.isVisibleOnStatusPage = false;
-        incident.shouldStatusPageSubscribersBeNotifiedOnIncidentCreated = false;
-        const createBy = {
-            data: incident,
-            props: {
-                isRoot: true,
-            },
-        };
-        if (Object.keys(miscDataProps).length > 0) {
-            createBy.miscDataProps = miscDataProps;
-        }
-        try {
-            return await IncidentService.create(createBy);
-        }
-        catch (err) {
-            logger.error(`IncidentFormService: incident form ${(_a = data.form.id) === null || _a === void 0 ? void 0 : _a.toString()} could not declare an incident.`, this.getLogAttributes(data.form));
-            logger.error(err, this.getLogAttributes(data.form));
-            throw new ServerException(INCIDENT_FORM_SUBMIT_FAILED_MESSAGE);
-        }
-    }
-    /*
-     * The owners of the form's template, which become the incident's: none
-     * when the form has no template, or its template no owners. A failure to
-     * read them is logged, and the incident is declared without them - the
-     * report still reaches on-call through the template's policies and the
-     * project's rules.
-     */
-    async getTemplateOwners(form) {
-        var _a;
-        const owners = { userIds: [], teamIds: [] };
-        if (!form.incidentTemplateId) {
-            return owners;
-        }
-        try {
-            const query = {
-                incidentTemplateId: form.incidentTemplateId,
-                projectId: form.projectId,
-            };
-            const [ownerUsers, ownerTeams] = await Promise.all([
-                IncidentTemplateOwnerUserService.findBy({
-                    query: query,
-                    select: {
-                        userId: true,
-                    },
-                    limit: LIMIT_PER_PROJECT,
-                    skip: 0,
-                    props: {
-                        isRoot: true,
-                    },
-                }),
-                IncidentTemplateOwnerTeamService.findBy({
-                    query: query,
-                    select: {
-                        teamId: true,
-                    },
-                    limit: LIMIT_PER_PROJECT,
-                    skip: 0,
-                    props: {
-                        isRoot: true,
-                    },
-                }),
-            ]);
-            for (const owner of ownerUsers) {
-                if (owner.userId) {
-                    owners.userIds.push(owner.userId);
-                }
-            }
-            for (const owner of ownerTeams) {
-                if (owner.teamId) {
-                    owners.teamIds.push(owner.teamId);
-                }
-            }
-        }
-        catch (err) {
-            logger.error(`IncidentFormService: could not read the owners of the template of incident form ${(_a = form.id) === null || _a === void 0 ? void 0 : _a.toString()}; the incident is declared without them.`, this.getLogAttributes(form));
-            logger.error(err, this.getLogAttributes(form));
-            return { userIds: [], teamIds: [] };
-        }
-        return owners;
-    }
-    // The record the dashboard lists under the form's Submissions.
-    async recordSubmission(data) {
-        try {
-            const submission = new IncidentFormSubmission();
-            submission.projectId = data.form.projectId;
-            submission.incidentFormId = data.form.id;
-            submission.incidentId = data.incidentId;
-            if (data.answers.reporterName) {
-                submission.reporterName = data.answers.reporterName;
-            }
-            if (data.answers.reporterEmail) {
-                submission.reporterEmail = new Email(data.answers.reporterEmail);
-            }
-            await IncidentFormSubmissionService.create({
-                data: submission,
-                props: {
-                    isRoot: true,
-                },
-            });
-        }
-        catch (err) {
-            this.logFailureAfterIncident({
-                form: data.form,
-                incidentId: data.incidentId,
-                step: "record the submission for",
-                error: err,
-            });
-        }
-    }
-    // Who reported the incident, where only the responders can read it.
-    async addReporterNote(data) {
-        try {
-            const note = new IncidentInternalNote();
-            note.projectId = data.form.projectId;
-            note.incidentId = data.incidentId;
-            note.note = getIncidentFormReporterNote({
-                formName: data.form.name,
-                reporterName: data.answers.reporterName,
-                reporterEmail: data.answers.reporterEmail,
-            });
-            await IncidentInternalNoteService.create({
-                data: note,
-                props: {
-                    isRoot: true,
-                },
-            });
-        }
-        catch (err) {
-            this.logFailureAfterIncident({
-                form: data.form,
-                incidentId: data.incidentId,
-                step: "add the reporter's private note to",
-                error: err,
-            });
-        }
-    }
-    logFailureAfterIncident(data) {
-        var _a;
-        const attributes = Object.assign(Object.assign({}, this.getLogAttributes(data.form)), { incidentId: data.incidentId.toString() });
-        logger.error(`IncidentFormService: could not ${data.step} incident ${data.incidentId.toString()}, declared through incident form ${(_a = data.form.id) === null || _a === void 0 ? void 0 : _a.toString()}. The incident stands.`, attributes);
-        logger.error(data.error, attributes);
-    }
-    getLogAttributes(form) {
-        var _a, _b;
-        return {
-            projectId: (_a = form.projectId) === null || _a === void 0 ? void 0 : _a.toString(),
-            incidentFormId: (_b = form.id) === null || _b === void 0 ? void 0 : _b.toString(),
-        };
-    }
-    /*
-     * The public page asks exactly the fields these settings name, and the
-     * submit route checks the answers against them, so a value they would
-     * read as "nothing asked" must not be stored by mistake. Stored exactly as
-     * sent when valid (see validateCustomFieldCreateSettings).
-     */
-    assertValidCustomFieldSettings(value) {
-        const problem = validateCustomFieldCreateSettings(value);
-        if (problem) {
-            throw new BadDataException(problem);
-        }
-    }
-    /*
-     * Every line an entry the public routes can match (see
-     * IncidentFormIpAllowlist): an entry that can never match would lock every
-     * reporter on that network out, silently. Refused, never rewritten.
-     */
-    assertValidIpAllowlist(value) {
-        const problem = validateIncidentFormIpAllowlist(value);
-        if (problem) {
-            throw new BadDataException(problem);
-        }
-    }
-    assertValidDescriptionSetting(value) {
-        if (!isIncidentFormFieldSetting(value)) {
-            throw new BadDataException(INCIDENT_FORM_DESCRIPTION_SETTING_MESSAGE);
-        }
-    }
-    /*
-     * Form editors may replace the key - the dashboard's Reset Link sends a
-     * freshly generated UUID - but the column is a uuid, so anything else
-     * would fail inside Postgres, and null would leave a form with no link.
-     */
-    assertValidShareKey(value) {
-        const key = value instanceof ObjectID || typeof value === "string"
-            ? value.toString()
-            : "";
-        if (!ObjectID.isValidUUID(key)) {
-            throw new BadDataException(INCIDENT_FORM_SHARE_KEY_MESSAGE);
-        }
-    }
-    /*
-     * Built per call rather than at module load: these services sit in an
-     * import graph that loops back to this one, and a module-level table would
-     * capture whichever of them had not finished loading yet as undefined.
-     */
-    getProjectScopedReferences(data) {
-        return [
-            {
-                modelName: "Incident Severity",
-                id: resolveReferenceId(data.incidentSeverityId) ||
-                    resolveReferenceId(data.incidentSeverity),
-                service: IncidentSeverityService,
-            },
-            {
-                modelName: "Incident Template",
-                id: resolveReferenceId(data.incidentTemplateId) ||
-                    resolveReferenceId(data.incidentTemplate),
-                service: IncidentTemplateService,
-            },
-        ];
-    }
-    async getProjectIdsForUpdateQuery(updateBy) {
-        const forms = await this.findBy({
-            query: updateBy.query,
-            select: {
-                projectId: true,
-            },
-            limit: LIMIT_MAX,
-            skip: 0,
-            props: {
-                isRoot: true,
-            },
-        });
-        const projectIds = {};
-        for (const form of forms) {
-            if (form.projectId) {
-                projectIds[form.projectId.toString()] = form.projectId;
-            }
-        }
-        return Object.values(projectIds);
-    }
-}
-__decorate([
-    CaptureSpan(),
-    __metadata("design:type", Function),
-    __metadata("design:paramtypes", [Object]),
-    __metadata("design:returntype", Promise)
-], Service.prototype, "onBeforeCreate", null);
-__decorate([
-    CaptureSpan(),
-    __metadata("design:type", Function),
-    __metadata("design:paramtypes", [Object]),
-    __metadata("design:returntype", Promise)
-], Service.prototype, "onBeforeUpdate", null);
-__decorate([
-    CaptureSpan(),
-    __metadata("design:type", Function),
-    __metadata("design:paramtypes", [Object]),
-    __metadata("design:returntype", Promise)
-], Service.prototype, "getPublicForm", null);
-__decorate([
-    CaptureSpan(),
-    __metadata("design:type", Function),
-    __metadata("design:paramtypes", [Object]),
-    __metadata("design:returntype", Promise)
-], Service.prototype, "submitPublicForm", null);
-__decorate([
-    CaptureSpan(),
-    __metadata("design:type", Function),
-    __metadata("design:paramtypes", [ObjectID]),
-    __metadata("design:returntype", Promise)
-], Service.prototype, "isProjectOnPlan", null);
-export default new Service();
-//# sourceMappingURL=IncidentFormService.js.map