@strapi/core 5.56.0 → 5.58.0

package/dist/ee/entitlements.js

@@ -0,0 +1,54 @@
+'use strict';
+
+/**
+ * Effective entitlement limits registry.
+ *
+ * Feature modules register a live resolver for each numeric limit they enforce;
+ * the license endpoint and the support debug dump read the resolved, normalized
+ * values. A numeric string is read as its number. A resolved value that is nullish,
+ * non-numeric, or greater than or equal to UNLIMITED_ENTITLEMENT_THRESHOLD is reported
+ * as `null`, meaning "Unlimited".
+ */ // The license registry ships a deliberately large number to mean "unlimited"
+// (see the "a number that will never be reached like 9999" convention in
+// content-releases validation). Kept server-side so the frontend never hard-codes it.
+const UNLIMITED_ENTITLEMENT_THRESHOLD = 9999;
+const normalize = (value)=>{
+    // License options are untyped JSON, and the registry has shipped some limits as numeric
+    // strings (`retentionDays: "90"`). Enforcement coerces those implicitly, so accepting only
+    // real numbers here showed a 90-day audit-logs cap as "Unlimited".
+    const limit = typeof value === 'string' && value.trim() !== '' ? Number(value) : value;
+    if (typeof limit !== 'number' || Number.isNaN(limit)) {
+        return null;
+    }
+    return limit >= UNLIMITED_ENTITLEMENT_THRESHOLD ? null : limit;
+};
+const createEntitlementsRegistry = ()=>{
+    const registry = [];
+    const register = (input)=>{
+        const index = registry.findIndex((entry)=>entry.feature === input.feature);
+        if (index >= 0) {
+            registry[index] = input;
+        } else {
+            registry.push(input);
+        }
+    };
+    const list = (getFeature = ()=>undefined)=>registry.map((entry)=>{
+            const feature = getFeature(entry.feature);
+            return {
+                feature: entry.feature,
+                limits: entry.limits.map((limit)=>({
+                        key: limit.key,
+                        unit: limit.unit,
+                        value: normalize(limit.get(feature))
+                    }))
+            };
+        });
+    return {
+        register,
+        list
+    };
+};
+
+exports.UNLIMITED_ENTITLEMENT_THRESHOLD = UNLIMITED_ENTITLEMENT_THRESHOLD;
+exports.createEntitlementsRegistry = createEntitlementsRegistry;
+//# sourceMappingURL=entitlements.js.map

package/dist/ee/entitlements.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"entitlements.js","sources":["../../src/ee/entitlements.ts"],"sourcesContent":["/**\n * Effective entitlement limits registry.\n *\n * Feature modules register a live resolver for each numeric limit they enforce;\n * the license endpoint and the support debug dump read the resolved, normalized\n * values. A numeric string is read as its number. A resolved value that is nullish,\n * non-numeric, or greater than or equal to UNLIMITED_ENTITLEMENT_THRESHOLD is reported\n * as `null`, meaning \"Unlimited\".\n */\n\n// The license registry ships a deliberately large number to mean \"unlimited\"\n// (see the \"a number that will never be reached like 9999\" convention in\n// content-releases validation). Kept server-side so the frontend never hard-codes it.\nexport const UNLIMITED_ENTITLEMENT_THRESHOLD = 9999;\n\n/** A feature as a license lists it: a bare name, or `{ name, options }`. */\nexport type EntitlementFeature =\n  | string\n  | { name: string; options?: Record<string, unknown>; [key: string]: unknown }\n  | undefined;\n\nexport interface EntitlementLimitInput {\n  key: string;\n  unit?: 'days' | 'count';\n  /**\n   * Resolves the limit the feature enforces from the feature as a license lists it. The same\n   * resolver serves the live license and a lapsed license's retained snapshot, so it must read\n   * options from the feature it is handed and apply its own defaults and clamps.\n   */\n  get: (feature?: EntitlementFeature) => unknown;\n}\n\nexport interface EntitlementInput {\n  feature: string;\n  limits: EntitlementLimitInput[];\n}\n\nexport interface EntitlementLimit {\n  key: string;\n  unit?: 'days' | 'count';\n  value: number | null;\n}\n\nexport interface Entitlement {\n  feature: string;\n  limits: EntitlementLimit[];\n}\n\nconst normalize = (value: unknown): number | null => {\n  // License options are untyped JSON, and the registry has shipped some limits as numeric\n  // strings (`retentionDays: \"90\"`). Enforcement coerces those implicitly, so accepting only\n  // real numbers here showed a 90-day audit-logs cap as \"Unlimited\".\n  const limit = typeof value === 'string' && value.trim() !== '' ? Number(value) : value;\n\n  if (typeof limit !== 'number' || Number.isNaN(limit)) {\n    return null;\n  }\n  return limit >= UNLIMITED_ENTITLEMENT_THRESHOLD ? null : limit;\n};\n\nexport const createEntitlementsRegistry = () => {\n  const registry: EntitlementInput[] = [];\n\n  const register = (input: EntitlementInput): void => {\n    const index = registry.findIndex((entry) => entry.feature === input.feature);\n    if (index >= 0) {\n      registry[index] = input;\n    } else {\n      registry.push(input);\n    }\n  };\n\n  const list = (\n    getFeature: (name: string) => EntitlementFeature = () => undefined\n  ): Entitlement[] =>\n    registry.map((entry) => {\n      const feature = getFeature(entry.feature);\n\n      return {\n        feature: entry.feature,\n        limits: entry.limits.map((limit) => ({\n          key: limit.key,\n          unit: limit.unit,\n          value: normalize(limit.get(feature)),\n        })),\n      };\n    });\n\n  return { register, list };\n};\n"],"names":["UNLIMITED_ENTITLEMENT_THRESHOLD","normalize","value","limit","trim","Number","isNaN","createEntitlementsRegistry","registry","register","input","index","findIndex","entry","feature","push","list","getFeature","undefined","map","limits","key","unit","get"],"mappings":";;AAAA;;;;;;;;AAQC;AAGD;AACA;AACO,MAAMA,kCAAkC;AAmC/C,MAAMC,YAAY,CAACC,KAAAA,GAAAA;;;;IAIjB,MAAMC,KAAAA,GAAQ,OAAOD,KAAAA,KAAU,QAAA,IAAYA,MAAME,IAAI,EAAA,KAAO,EAAA,GAAKC,MAAAA,CAAOH,KAAAA,CAAAA,GAASA,KAAAA;AAEjF,IAAA,IAAI,OAAOC,KAAAA,KAAU,QAAA,IAAYE,MAAAA,CAAOC,KAAK,CAACH,KAAAA,CAAAA,EAAQ;QACpD,OAAO,IAAA;AACT,IAAA;IACA,OAAOA,KAAAA,IAASH,kCAAkC,IAAA,GAAOG,KAAAA;AAC3D,CAAA;MAEaI,0BAAAA,GAA6B,IAAA;AACxC,IAAA,MAAMC,WAA+B,EAAE;AAEvC,IAAA,MAAMC,WAAW,CAACC,KAAAA,GAAAA;QAChB,MAAMC,KAAAA,GAAQH,QAAAA,CAASI,SAAS,CAAC,CAACC,QAAUA,KAAAA,CAAMC,OAAO,KAAKJ,KAAAA,CAAMI,OAAO,CAAA;AAC3E,QAAA,IAAIH,SAAS,CAAA,EAAG;YACdH,QAAQ,CAACG,MAAM,GAAGD,KAAAA;QACpB,CAAA,MAAO;AACLF,YAAAA,QAAAA,CAASO,IAAI,CAACL,KAAAA,CAAAA;AAChB,QAAA;AACF,IAAA,CAAA;IAEA,MAAMM,IAAAA,GAAO,CACXC,UAAAA,GAAmD,IAAMC,SAAS,GAElEV,QAAAA,CAASW,GAAG,CAAC,CAACN,KAAAA,GAAAA;YACZ,MAAMC,OAAAA,GAAUG,UAAAA,CAAWJ,KAAAA,CAAMC,OAAO,CAAA;YAExC,OAAO;AACLA,gBAAAA,OAAAA,EAASD,MAAMC,OAAO;AACtBM,gBAAAA,MAAAA,EAAQP,MAAMO,MAAM,CAACD,GAAG,CAAC,CAAChB,SAAW;AACnCkB,wBAAAA,GAAAA,EAAKlB,MAAMkB,GAAG;AACdC,wBAAAA,IAAAA,EAAMnB,MAAMmB,IAAI;wBAChBpB,KAAAA,EAAOD,SAAAA,CAAUE,KAAAA,CAAMoB,GAAG,CAACT,OAAAA,CAAAA;qBAC7B,CAAA;AACF,aAAA;AACF,QAAA,CAAA,CAAA;IAEF,OAAO;AAAEL,QAAAA,QAAAA;AAAUO,QAAAA;AAAK,KAAA;AAC1B;;;;;"}

package/dist/ee/entitlements.mjs

@@ -0,0 +1,51 @@
+/**
+ * Effective entitlement limits registry.
+ *
+ * Feature modules register a live resolver for each numeric limit they enforce;
+ * the license endpoint and the support debug dump read the resolved, normalized
+ * values. A numeric string is read as its number. A resolved value that is nullish,
+ * non-numeric, or greater than or equal to UNLIMITED_ENTITLEMENT_THRESHOLD is reported
+ * as `null`, meaning "Unlimited".
+ */ // The license registry ships a deliberately large number to mean "unlimited"
+// (see the "a number that will never be reached like 9999" convention in
+// content-releases validation). Kept server-side so the frontend never hard-codes it.
+const UNLIMITED_ENTITLEMENT_THRESHOLD = 9999;
+const normalize = (value)=>{
+    // License options are untyped JSON, and the registry has shipped some limits as numeric
+    // strings (`retentionDays: "90"`). Enforcement coerces those implicitly, so accepting only
+    // real numbers here showed a 90-day audit-logs cap as "Unlimited".
+    const limit = typeof value === 'string' && value.trim() !== '' ? Number(value) : value;
+    if (typeof limit !== 'number' || Number.isNaN(limit)) {
+        return null;
+    }
+    return limit >= UNLIMITED_ENTITLEMENT_THRESHOLD ? null : limit;
+};
+const createEntitlementsRegistry = ()=>{
+    const registry = [];
+    const register = (input)=>{
+        const index = registry.findIndex((entry)=>entry.feature === input.feature);
+        if (index >= 0) {
+            registry[index] = input;
+        } else {
+            registry.push(input);
+        }
+    };
+    const list = (getFeature = ()=>undefined)=>registry.map((entry)=>{
+            const feature = getFeature(entry.feature);
+            return {
+                feature: entry.feature,
+                limits: entry.limits.map((limit)=>({
+                        key: limit.key,
+                        unit: limit.unit,
+                        value: normalize(limit.get(feature))
+                    }))
+            };
+        });
+    return {
+        register,
+        list
+    };
+};
+
+export { UNLIMITED_ENTITLEMENT_THRESHOLD, createEntitlementsRegistry };
+//# sourceMappingURL=entitlements.mjs.map

package/dist/ee/entitlements.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"entitlements.mjs","sources":["../../src/ee/entitlements.ts"],"sourcesContent":["/**\n * Effective entitlement limits registry.\n *\n * Feature modules register a live resolver for each numeric limit they enforce;\n * the license endpoint and the support debug dump read the resolved, normalized\n * values. A numeric string is read as its number. A resolved value that is nullish,\n * non-numeric, or greater than or equal to UNLIMITED_ENTITLEMENT_THRESHOLD is reported\n * as `null`, meaning \"Unlimited\".\n */\n\n// The license registry ships a deliberately large number to mean \"unlimited\"\n// (see the \"a number that will never be reached like 9999\" convention in\n// content-releases validation). Kept server-side so the frontend never hard-codes it.\nexport const UNLIMITED_ENTITLEMENT_THRESHOLD = 9999;\n\n/** A feature as a license lists it: a bare name, or `{ name, options }`. */\nexport type EntitlementFeature =\n  | string\n  | { name: string; options?: Record<string, unknown>; [key: string]: unknown }\n  | undefined;\n\nexport interface EntitlementLimitInput {\n  key: string;\n  unit?: 'days' | 'count';\n  /**\n   * Resolves the limit the feature enforces from the feature as a license lists it. The same\n   * resolver serves the live license and a lapsed license's retained snapshot, so it must read\n   * options from the feature it is handed and apply its own defaults and clamps.\n   */\n  get: (feature?: EntitlementFeature) => unknown;\n}\n\nexport interface EntitlementInput {\n  feature: string;\n  limits: EntitlementLimitInput[];\n}\n\nexport interface EntitlementLimit {\n  key: string;\n  unit?: 'days' | 'count';\n  value: number | null;\n}\n\nexport interface Entitlement {\n  feature: string;\n  limits: EntitlementLimit[];\n}\n\nconst normalize = (value: unknown): number | null => {\n  // License options are untyped JSON, and the registry has shipped some limits as numeric\n  // strings (`retentionDays: \"90\"`). Enforcement coerces those implicitly, so accepting only\n  // real numbers here showed a 90-day audit-logs cap as \"Unlimited\".\n  const limit = typeof value === 'string' && value.trim() !== '' ? Number(value) : value;\n\n  if (typeof limit !== 'number' || Number.isNaN(limit)) {\n    return null;\n  }\n  return limit >= UNLIMITED_ENTITLEMENT_THRESHOLD ? null : limit;\n};\n\nexport const createEntitlementsRegistry = () => {\n  const registry: EntitlementInput[] = [];\n\n  const register = (input: EntitlementInput): void => {\n    const index = registry.findIndex((entry) => entry.feature === input.feature);\n    if (index >= 0) {\n      registry[index] = input;\n    } else {\n      registry.push(input);\n    }\n  };\n\n  const list = (\n    getFeature: (name: string) => EntitlementFeature = () => undefined\n  ): Entitlement[] =>\n    registry.map((entry) => {\n      const feature = getFeature(entry.feature);\n\n      return {\n        feature: entry.feature,\n        limits: entry.limits.map((limit) => ({\n          key: limit.key,\n          unit: limit.unit,\n          value: normalize(limit.get(feature)),\n        })),\n      };\n    });\n\n  return { register, list };\n};\n"],"names":["UNLIMITED_ENTITLEMENT_THRESHOLD","normalize","value","limit","trim","Number","isNaN","createEntitlementsRegistry","registry","register","input","index","findIndex","entry","feature","push","list","getFeature","undefined","map","limits","key","unit","get"],"mappings":"AAAA;;;;;;;;AAQC;AAGD;AACA;AACO,MAAMA,kCAAkC;AAmC/C,MAAMC,YAAY,CAACC,KAAAA,GAAAA;;;;IAIjB,MAAMC,KAAAA,GAAQ,OAAOD,KAAAA,KAAU,QAAA,IAAYA,MAAME,IAAI,EAAA,KAAO,EAAA,GAAKC,MAAAA,CAAOH,KAAAA,CAAAA,GAASA,KAAAA;AAEjF,IAAA,IAAI,OAAOC,KAAAA,KAAU,QAAA,IAAYE,MAAAA,CAAOC,KAAK,CAACH,KAAAA,CAAAA,EAAQ;QACpD,OAAO,IAAA;AACT,IAAA;IACA,OAAOA,KAAAA,IAASH,kCAAkC,IAAA,GAAOG,KAAAA;AAC3D,CAAA;MAEaI,0BAAAA,GAA6B,IAAA;AACxC,IAAA,MAAMC,WAA+B,EAAE;AAEvC,IAAA,MAAMC,WAAW,CAACC,KAAAA,GAAAA;QAChB,MAAMC,KAAAA,GAAQH,QAAAA,CAASI,SAAS,CAAC,CAACC,QAAUA,KAAAA,CAAMC,OAAO,KAAKJ,KAAAA,CAAMI,OAAO,CAAA;AAC3E,QAAA,IAAIH,SAAS,CAAA,EAAG;YACdH,QAAQ,CAACG,MAAM,GAAGD,KAAAA;QACpB,CAAA,MAAO;AACLF,YAAAA,QAAAA,CAASO,IAAI,CAACL,KAAAA,CAAAA;AAChB,QAAA;AACF,IAAA,CAAA;IAEA,MAAMM,IAAAA,GAAO,CACXC,UAAAA,GAAmD,IAAMC,SAAS,GAElEV,QAAAA,CAASW,GAAG,CAAC,CAACN,KAAAA,GAAAA;YACZ,MAAMC,OAAAA,GAAUG,UAAAA,CAAWJ,KAAAA,CAAMC,OAAO,CAAA;YAExC,OAAO;AACLA,gBAAAA,OAAAA,EAASD,MAAMC,OAAO;AACtBM,gBAAAA,MAAAA,EAAQP,MAAMO,MAAM,CAACD,GAAG,CAAC,CAAChB,SAAW;AACnCkB,wBAAAA,GAAAA,EAAKlB,MAAMkB,GAAG;AACdC,wBAAAA,IAAAA,EAAMnB,MAAMmB,IAAI;wBAChBpB,KAAAA,EAAOD,SAAAA,CAAUE,KAAAA,CAAMoB,GAAG,CAACT,OAAAA,CAAAA;qBAC7B,CAAA;AACF,aAAA;AACF,QAAA,CAAA,CAAA;IAEF,OAAO;AAAEL,QAAAA,QAAAA;AAAUO,QAAAA;AAAK,KAAA;AAC1B;;;;"}

package/dist/ee/index.d.ts

@@ -1,5 +1,21 @@
 import type { Logger } from '@strapi/logger';
 import type { Core } from '@strapi/types';
+interface LicenseInfoState {
+    licenseKey?: string;
+    features?: Array<{
+        name: string;
+        [key: string]: any;
+    } | string>;
+    expireAt?: string;
+    seats?: number;
+    type?: string;
+    isTrial: boolean;
+    subscriptionId?: string;
+    planPriceId?: string;
+    /** End of the subscription term, epoch milliseconds. */
+    renewalDate?: string | number;
+}
+type LicenseStatus = 'none' | 'active' | 'expired' | 'unknown';
 declare const _default: Readonly<{
     init: (licenseDir: string, logger?: Logger) => void;
     checkLicense: ({ strapi }: {
@@ -11,8 +27,20 @@ declare const _default: Readonly<{
         trialEndsAt: string;
     } | null>;
     readonly isEE: boolean;
+    readonly licenseStatus: LicenseStatus;
+    /** Display-only; see EE.retainedLicense. Never use for feature gating. */
+    readonly retainedLicense: Omit<LicenseInfoState, "licenseKey"> | null;
     readonly seats: number | undefined;
     readonly type: string | undefined;
+    readonly expireAt: string | undefined;
+    /** Null when the registry does not provide it yet; survives expiry via the retained snapshot. */
+    readonly renewalDate: string | number | null;
+    /**
+     * Every feature the current plan supports, in display order, regardless of whether this
+     * license includes it. Falls back to the retained license's type so an expired license
+     * still lists rows. See `PLAN_FEATURE_CATALOG` in `./license`.
+     */
+    readonly planFeatureCatalog: string[];
     readonly isTrial: boolean;
     readonly planPriceId: string | undefined;
     readonly subscriptionId: string | undefined;
@@ -27,6 +55,11 @@ declare const _default: Readonly<{
         } | undefined;
         isEnabled: (featureName: string) => boolean;
     }>;
+    entitlements: Readonly<{
+        register: (input: import("./entitlements").EntitlementInput) => void;
+        list: () => import("./entitlements").Entitlement[];
+        listRetained(): import("./entitlements").Entitlement[];
+    }>;
 }>;
 export default _default;
 //# sourceMappingURL=index.d.ts.map

package/dist/ee/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/ee/index.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,gBAAgB,CAAC;AAC7C,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,eAAe,CAAC;;uBAsEhB,MAAM,WAAW,MAAM;+BA4IT;QAAE,MAAM,EAAE,IAAI,CAAC,MAAM,CAAA;KAAE;mCA0B5D;QACD,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC;KACrB,KAAG,OAAO,CAAC;QAAE,WAAW,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;;;;;;;;;;kBA7Nd,MAAM;;2BA4PT,MAAM;;kBA5PH,MAAM;;iCA8RN,MAAM;;;AAhCnC,wBAkCG"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/ee/index.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,gBAAgB,CAAC;AAC7C,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,eAAe,CAAC;AAe1C,UAAU,gBAAgB;IACxB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,CAAC,GAAG,EAAE,MAAM,GAAG,GAAG,CAAA;KAAE,GAAG,MAAM,CAAC,CAAC;IAChE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,OAAO,CAAC;IACjB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,wDAAwD;IACxD,WAAW,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;CAC/B;AAED,KAAK,aAAa,GAAG,MAAM,GAAG,QAAQ,GAAG,SAAS,GAAG,SAAS,CAAC;;uBAgFrC,MAAM,WAAW,MAAM;+BAsJT;QAAE,MAAM,EAAE,IAAI,CAAC,MAAM,CAAA;KAAE;mCA0B5D;QACD,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC;KACrB,KAAG,OAAO,CAAC;QAAE,WAAW,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;;;IAgDzC,0EAA0E;;;;;IAiB1E,iGAAiG;;IAKjG;;;;OAIG;iCACuB,MAAM,EAAE;;;;;;;kBAxVT,MAAM;;2BA4SP,MAAM;;kBA5SL,MAAM;;iCA8WJ,MAAM;;;;;;;;AA9DnC,wBAuFG"}

package/dist/ee/index.js

@@ -1,8 +1,9 @@
 'use strict';
 
-var fp = require('lodash/fp');
+var _ = require('lodash');
 var fetch = require('../utils/fetch.js');
 var license = require('./license.js');
+var entitlements$1 = require('./entitlements.js');
 var cron = require('../utils/cron.js');
 
 const ONE_MINUTE = 1000 * 60;
@@ -10,17 +11,35 @@ const ee = {
     enabled: false,
     licenseInfo: {
         isTrial: false
-    }
+    },
+    retainedLicense: null,
+    licenseStatus: 'none'
 };
-const disable = (message)=>{
+const disable = (message, status = 'unknown')=>{
     // Prevent emitting ee.disable if it was already disabled
     const shouldEmitEvent = ee.enabled !== false;
     ee.logger?.warn(`${message} Switching to CE.`);
+    // Retain a display-only snapshot (never the key) BEFORE wiping, so the admin panel can
+    // still show which license this instance has and why it is unusable. Guarded on `type`
+    // so a repeat disable() call cannot overwrite the snapshot with an already-wiped one.
+    if (ee.licenseInfo.type) {
+        ee.retainedLicense = _.pick(ee.licenseInfo, [
+            'features',
+            'expireAt',
+            'seats',
+            'type',
+            'isTrial',
+            'subscriptionId',
+            'planPriceId',
+            'renewalDate'
+        ]);
+    }
+    ee.licenseStatus = status;
     // Only keep the license key and isTrial for potential re-enabling during a later check
-    ee.licenseInfo = fp.pick([
+    ee.licenseInfo = _.pick(ee.licenseInfo, [
         'licenseKey',
         'isTrial'
-    ], ee.licenseInfo);
+    ]);
     ee.licenseInfo.isTrial = false;
     ee.enabled = false;
     if (shouldEmitEvent) {
@@ -32,6 +51,8 @@ const enable = ()=>{
     // Prevent emitting ee.enable if it was already enabled
     const shouldEmitEvent = ee.enabled !== true;
     ee.enabled = true;
+    ee.licenseStatus = 'active';
+    ee.retainedLicense = null;
     if (shouldEmitEvent) {
         // Notify EE features that they should be disabled
         strapi.eventHub.emit('ee.enable');
@@ -79,8 +100,15 @@ let initialized = false;
             lastCheckAt: Date.now()
         };
         const fallback = (error)=>{
+            // Whether the registry was unreachable or actually refused the license is only
+            // knowable here, from `shouldFallback`. Record it rather than letting the admin
+            // panel infer it from the presence of a cached license: an instance that has never
+            // reached the registry has no cache to fall back to, and would otherwise be told
+            // its license was refused when the registry was merely unreachable.
+            result.errorKind = error instanceof license.LicenseCheckError && error.shouldFallback ? 'unreachable' : 'rejected';
             if (error instanceof license.LicenseCheckError && error.shouldFallback && storedInfo?.license) {
                 ee.logger?.warn(`${error.message} The last stored one will be used as a potential fallback.`);
+                result.error = error.message; // record why we fell back so usingCachedLicense is derivable
                 return storedInfo.license;
             }
             result.error = error.message;
@@ -96,7 +124,7 @@ let initialized = false;
             try {
                 // Verify license and check if its info changed
                 const newLicenseInfo = license.verifyLicense(license$1);
-                const licenseInfoChanged = !fp.isEqual(newLicenseInfo.features, ee.licenseInfo.features) || newLicenseInfo.seats !== ee.licenseInfo.seats || newLicenseInfo.type !== ee.licenseInfo.type;
+                const licenseInfoChanged = !_.isEqual(newLicenseInfo.features, ee.licenseInfo.features) || newLicenseInfo.seats !== ee.licenseInfo.seats || newLicenseInfo.type !== ee.licenseInfo.type;
                 // Store the new license info
                 ee.licenseInfo = newLicenseInfo;
                 const wasEnabled = ee.enabled;
@@ -144,7 +172,7 @@ const validateInfo = ()=>{
     }
     const expirationTime = new Date(ee.licenseInfo.expireAt).getTime();
     if (expirationTime < new Date().getTime()) {
-        return disable('License expired.');
+        return disable('License expired.', 'expired');
     }
     enable();
 };
@@ -191,6 +219,7 @@ const list = ()=>{
         }) || [];
 };
 const get = (featureName)=>list().find((feature)=>feature.name === featureName);
+const entitlements = entitlements$1.createEntitlementsRegistry();
 var index = Object.freeze({
     init,
     checkLicense,
@@ -198,12 +227,32 @@ var index = Object.freeze({
     get isEE () {
         return ee.enabled;
     },
+    get licenseStatus () {
+        return ee.licenseStatus;
+    },
+    /** Display-only; see EE.retainedLicense. Never use for feature gating. */ get retainedLicense () {
+        return ee.retainedLicense;
+    },
     get seats () {
         return ee.licenseInfo.seats;
     },
     get type () {
         return ee.licenseInfo.type;
     },
+    get expireAt () {
+        return ee.licenseInfo.expireAt;
+    },
+    /** Null when the registry does not provide it yet; survives expiry via the retained snapshot. */ get renewalDate () {
+        return ee.licenseInfo.renewalDate ?? ee.retainedLicense?.renewalDate ?? null;
+    },
+    /**
+   * Every feature the current plan supports, in display order, regardless of whether this
+   * license includes it. Falls back to the retained license's type so an expired license
+   * still lists rows. See `PLAN_FEATURE_CATALOG` in `./license`.
+   */ get planFeatureCatalog () {
+        const type = ee.licenseInfo.type ?? ee.retainedLicense?.type;
+        return type && type in license.PLAN_FEATURE_CATALOG ? license.PLAN_FEATURE_CATALOG[type] : [];
+    },
     get isTrial () {
         return ee.licenseInfo.isTrial;
     },
@@ -217,6 +266,24 @@ var index = Object.freeze({
         list,
         get,
         isEnabled: (featureName)=>get(featureName) !== undefined
+    }),
+    entitlements: Object.freeze({
+        register: entitlements.register,
+        // Resolvers are registered during `register()`, before the license is validated, and each
+        // falls back to a built-in default when the feature is absent. Without this gate an
+        // instance whose license was disabled would still report generous limits, which reads as
+        // "these are your granted limits". No license, no entitlements.
+        list: ()=>ee.enabled ? entitlements.list(get) : [],
+        // A lapsed license's limits, from the same resolvers run against its retained feature list,
+        // so a lapsed Plan card and the debug dump carry the defaults and clamps the plan enforced
+        // instead of raw options. Only features the retained license listed are reported.
+        listRetained () {
+            const retainedFeatures = (ee.retainedLicense?.features ?? []).map((feature)=>typeof feature === 'object' ? feature : {
+                    name: feature
+                });
+            const getRetained = (name)=>retainedFeatures.find((feature)=>feature.name === name);
+            return entitlements.list(getRetained).filter((entry)=>getRetained(entry.feature) !== undefined);
+        }
     })
 });
 

package/dist/ee/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sources":["../../src/ee/index.ts"],"sourcesContent":["import { pick, isEqual } from 'lodash/fp';\nimport type { Logger } from '@strapi/logger';\nimport type { Core } from '@strapi/types';\nimport { createStrapiFetch } from '../utils/fetch';\nimport {\n  readLicense,\n  verifyLicense,\n  fetchLicense,\n  LicenseCheckError,\n  LICENSE_REGISTRY_URI,\n} from './license';\nimport { shiftCronExpression } from '../utils/cron';\n\nconst ONE_MINUTE = 1000 * 60;\n\ninterface EE {\n  enabled: boolean;\n  licenseInfo: {\n    licenseKey?: string;\n    features?: Array<{ name: string; [key: string]: any } | string>;\n    expireAt?: string;\n    seats?: number;\n    type?: string;\n    isTrial: boolean;\n    subscriptionId?: string;\n    planPriceId?: string;\n  };\n  logger?: Logger;\n}\n\nconst ee: EE = {\n  enabled: false,\n  licenseInfo: {\n    isTrial: false,\n  },\n};\n\nconst disable = (message: string) => {\n  // Prevent emitting ee.disable if it was already disabled\n  const shouldEmitEvent = ee.enabled !== false;\n\n  ee.logger?.warn(`${message} Switching to CE.`);\n  // Only keep the license key and isTrial for potential re-enabling during a later check\n  ee.licenseInfo = pick(['licenseKey', 'isTrial'], ee.licenseInfo);\n\n  ee.licenseInfo.isTrial = false;\n\n  ee.enabled = false;\n\n  if (shouldEmitEvent) {\n    // Notify EE features that they should be disabled\n    strapi.eventHub.emit('ee.disable');\n  }\n};\n\nconst enable = () => {\n  // Prevent emitting ee.enable if it was already enabled\n  const shouldEmitEvent = ee.enabled !== true;\n\n  ee.enabled = true;\n\n  if (shouldEmitEvent) {\n    // Notify EE features that they should be disabled\n    strapi.eventHub.emit('ee.enable');\n  }\n};\n\nlet initialized = false;\n\n/**\n * Optimistically enable EE if the format of the license is valid, only run once.\n */\nconst init = (licenseDir: string, logger?: Logger) => {\n  if (initialized) {\n    return;\n  }\n\n  initialized = true;\n  ee.logger = logger;\n\n  if (process.env.STRAPI_DISABLE_EE?.toLowerCase() === 'true') {\n    return;\n  }\n\n  try {\n    const license = process.env.STRAPI_LICENSE || readLicense(licenseDir);\n\n    if (license) {\n      ee.licenseInfo = verifyLicense(license);\n      enable();\n    }\n  } catch (error) {\n    if (error instanceof Error) {\n      disable(error.message);\n    } else {\n      disable('Invalid license.');\n    }\n  }\n};\n\n/**\n * Contact the license registry to update the license to its latest state.\n *\n * Store the result in database to avoid unecessary requests, and will fallback to that in case of a network failure.\n */\nconst onlineUpdate = async ({ strapi }: { strapi: Core.Strapi }) => {\n  const { get, commit, rollback } = await strapi.db.transaction();\n  const transaction = get();\n\n  try {\n    const storedInfo = await strapi.db\n      ?.queryBuilder('strapi::core-store')\n      .where({ key: 'ee_information' })\n      .select('value')\n      .first()\n      .transacting(transaction)\n      .forUpdate()\n      .execute()\n      .then((result: any) => (result ? JSON.parse(result.value) : result));\n\n    const shouldContactRegistry = (storedInfo?.lastCheckAt ?? 0) < Date.now() - ONE_MINUTE;\n    const result: {\n      license?: string | null;\n      error?: string;\n      lastCheckAt?: number;\n    } = { lastCheckAt: Date.now() };\n\n    const fallback = (error: Error) => {\n      if (error instanceof LicenseCheckError && error.shouldFallback && storedInfo?.license) {\n        ee.logger?.warn(\n          `${error.message} The last stored one will be used as a potential fallback.`\n        );\n        return storedInfo.license;\n      }\n\n      result.error = error.message;\n      disable(error.message);\n    };\n\n    if (!ee?.licenseInfo?.licenseKey) {\n      throw new Error('Missing license key.');\n    }\n\n    const license = shouldContactRegistry\n      ? await fetchLicense({ strapi }, ee.licenseInfo.licenseKey, strapi.config.get('uuid')).catch(\n          fallback\n        )\n      : storedInfo.license;\n\n    if (license) {\n      try {\n        // Verify license and check if its info changed\n        const newLicenseInfo = verifyLicense(license);\n        const licenseInfoChanged =\n          !isEqual(newLicenseInfo.features, ee.licenseInfo.features) ||\n          newLicenseInfo.seats !== ee.licenseInfo.seats ||\n          newLicenseInfo.type !== ee.licenseInfo.type;\n\n        // Store the new license info\n        ee.licenseInfo = newLicenseInfo;\n        const wasEnabled = ee.enabled;\n        validateInfo();\n\n        // Notify EE features\n        if (licenseInfoChanged && wasEnabled) {\n          strapi.eventHub.emit('ee.update');\n        }\n      } catch (error) {\n        if (error instanceof Error) {\n          disable(error.message);\n        } else {\n          disable('Invalid license.');\n        }\n      }\n    } else if (!shouldContactRegistry) {\n      disable(storedInfo.error);\n    }\n\n    if (shouldContactRegistry) {\n      result.license = license ?? null;\n      const query = strapi.db.queryBuilder('strapi::core-store').transacting(transaction);\n\n      if (!storedInfo) {\n        query.insert({ key: 'ee_information', value: JSON.stringify(result) });\n      } else {\n        query.update({ value: JSON.stringify(result) }).where({ key: 'ee_information' });\n      }\n\n      await query.execute();\n    }\n\n    await commit();\n  } catch {\n    // Example of errors: SQLite does not support FOR UPDATE\n    await rollback();\n  }\n};\n\nconst validateInfo = () => {\n  if (typeof ee.licenseInfo.expireAt === 'undefined') {\n    throw new Error('Missing license key.');\n  }\n\n  const expirationTime = new Date(ee.licenseInfo.expireAt).getTime();\n\n  if (expirationTime < new Date().getTime()) {\n    return disable('License expired.');\n  }\n\n  enable();\n};\n\nconst checkLicense = async ({ strapi }: { strapi: Core.Strapi }) => {\n  const shouldStayOffline =\n    ee.licenseInfo.type === 'gold' &&\n    // This env variable support is temporarily used to ease the migration between online vs offline\n    process.env.STRAPI_DISABLE_LICENSE_PING?.toLowerCase() === 'true';\n\n  if (!shouldStayOffline) {\n    await onlineUpdate({ strapi });\n\n    strapi.cron.add({\n      onlineUpdate: {\n        task: () => onlineUpdate({ strapi }),\n        options: shiftCronExpression('0 0 */12 * * *'),\n      },\n    });\n  } else {\n    if (!ee.licenseInfo.expireAt) {\n      return disable('Your license does not have offline support.');\n    }\n\n    validateInfo();\n  }\n};\n\nconst getTrialEndDate = async ({\n  strapi,\n}: {\n  strapi: Core.Strapi;\n}): Promise<{ trialEndsAt: string } | null> => {\n  const silentFetch = createStrapiFetch(strapi, {\n    logs: false,\n  });\n\n  const res = await silentFetch(\n    `${LICENSE_REGISTRY_URI}/api/licenses/${ee.licenseInfo.licenseKey}/trial-countdown`,\n    {\n      method: 'GET',\n      headers: { 'Content-Type': 'application/json' },\n    }\n  ).catch(() => {\n    throw new LicenseCheckError(\n      'Could not proceed to retrieve the trial time left for your license.',\n      true\n    );\n  });\n\n  const data = (await res.json()) as { trialEndsAt: string } | null;\n\n  return data;\n};\n\nconst list = () => {\n  return (\n    ee.licenseInfo.features?.map((feature) =>\n      typeof feature === 'object' ? feature : { name: feature }\n    ) || []\n  );\n};\n\nconst get = (featureName: string) => list().find((feature) => feature.name === featureName);\n\nexport default Object.freeze({\n  init,\n  checkLicense,\n  getTrialEndDate,\n\n  get isEE() {\n    return ee.enabled;\n  },\n\n  get seats() {\n    return ee.licenseInfo.seats;\n  },\n\n  get type() {\n    return ee.licenseInfo.type;\n  },\n\n  get isTrial() {\n    return ee.licenseInfo.isTrial;\n  },\n\n  get planPriceId() {\n    return ee.licenseInfo.planPriceId;\n  },\n\n  get subscriptionId() {\n    return ee.licenseInfo.subscriptionId;\n  },\n\n  features: Object.freeze({\n    list,\n    get,\n    isEnabled: (featureName: string) => get(featureName) !== undefined,\n  }),\n});\n"],"names":["ONE_MINUTE","ee","enabled","licenseInfo","isTrial","disable","message","shouldEmitEvent","logger","warn","pick","strapi","eventHub","emit","enable","initialized","init","licenseDir","process","env","STRAPI_DISABLE_EE","toLowerCase","license","STRAPI_LICENSE","readLicense","verifyLicense","error","Error","onlineUpdate","get","commit","rollback","db","transaction","storedInfo","queryBuilder","where","key","select","first","transacting","forUpdate","execute","then","result","JSON","parse","value","shouldContactRegistry","lastCheckAt","Date","now","fallback","LicenseCheckError","shouldFallback","licenseKey","fetchLicense","config","catch","newLicenseInfo","licenseInfoChanged","isEqual","features","seats","type","wasEnabled","validateInfo","query","insert","stringify","update","expireAt","expirationTime","getTime","checkLicense","shouldStayOffline","STRAPI_DISABLE_LICENSE_PING","cron","add","task","options","shiftCronExpression","getTrialEndDate","silentFetch","createStrapiFetch","logs","res","LICENSE_REGISTRY_URI","method","headers","data","json","list","map","feature","name","featureName","find","Object","freeze","isEE","planPriceId","subscriptionId","isEnabled","undefined"],"mappings":";;;;;;;AAaA,MAAMA,aAAa,IAAA,GAAO,EAAA;AAiB1B,MAAMC,EAAAA,GAAS;IACbC,OAAAA,EAAS,KAAA;IACTC,WAAAA,EAAa;QACXC,OAAAA,EAAS;AACX;AACF,CAAA;AAEA,MAAMC,UAAU,CAACC,OAAAA,GAAAA;;IAEf,MAAMC,eAAAA,GAAkBN,EAAAA,CAAGC,OAAO,KAAK,KAAA;AAEvCD,IAAAA,EAAAA,CAAGO,MAAM,EAAEC,IAAAA,CAAK,CAAA,EAAGH,OAAAA,CAAQ,iBAAiB,CAAC,CAAA;;IAE7CL,EAAAA,CAAGE,WAAW,GAAGO,OAAAA,CAAK;AAAC,QAAA,YAAA;AAAc,QAAA;AAAU,KAAA,EAAET,GAAGE,WAAW,CAAA;IAE/DF,EAAAA,CAAGE,WAAW,CAACC,OAAO,GAAG,KAAA;AAEzBH,IAAAA,EAAAA,CAAGC,OAAO,GAAG,KAAA;AAEb,IAAA,IAAIK,eAAAA,EAAiB;;QAEnBI,MAAAA,CAAOC,QAAQ,CAACC,IAAI,CAAC,YAAA,CAAA;AACvB,IAAA;AACF,CAAA;AAEA,MAAMC,MAAAA,GAAS,IAAA;;IAEb,MAAMP,eAAAA,GAAkBN,EAAAA,CAAGC,OAAO,KAAK,IAAA;AAEvCD,IAAAA,EAAAA,CAAGC,OAAO,GAAG,IAAA;AAEb,IAAA,IAAIK,eAAAA,EAAiB;;QAEnBI,MAAAA,CAAOC,QAAQ,CAACC,IAAI,CAAC,WAAA,CAAA;AACvB,IAAA;AACF,CAAA;AAEA,IAAIE,WAAAA,GAAc,KAAA;AAElB;;IAGA,MAAMC,IAAAA,GAAO,CAACC,UAAAA,EAAoBT,MAAAA,GAAAA;AAChC,IAAA,IAAIO,WAAAA,EAAa;AACf,QAAA;AACF,IAAA;IAEAA,WAAAA,GAAc,IAAA;AACdd,IAAAA,EAAAA,CAAGO,MAAM,GAAGA,MAAAA;AAEZ,IAAA,IAAIU,QAAQC,GAAG,CAACC,iBAAiB,EAAEC,kBAAkB,MAAA,EAAQ;AAC3D,QAAA;AACF,IAAA;IAEA,IAAI;AACF,QAAA,MAAMC,YAAUJ,OAAAA,CAAQC,GAAG,CAACI,cAAc,IAAIC,mBAAAA,CAAYP,UAAAA,CAAAA;AAE1D,QAAA,IAAIK,SAAAA,EAAS;YACXrB,EAAAA,CAAGE,WAAW,GAAGsB,qBAAAA,CAAcH,SAAAA,CAAAA;AAC/BR,YAAAA,MAAAA,EAAAA;AACF,QAAA;AACF,IAAA,CAAA,CAAE,OAAOY,KAAAA,EAAO;AACd,QAAA,IAAIA,iBAAiBC,KAAAA,EAAO;AAC1BtB,YAAAA,OAAAA,CAAQqB,MAAMpB,OAAO,CAAA;QACvB,CAAA,MAAO;YACLD,OAAAA,CAAQ,kBAAA,CAAA;AACV,QAAA;AACF,IAAA;AACF,CAAA;AAEA;;;;AAIC,IACD,MAAMuB,YAAAA,GAAe,OAAO,EAAEjB,MAAAA,EAAAA,OAAM,EAA2B,GAAA;AAC7D,IAAA,MAAM,EAAEkB,GAAG,EAAEC,MAAM,EAAEC,QAAQ,EAAE,GAAG,MAAMpB,OAAAA,CAAOqB,EAAE,CAACC,WAAW,EAAA;AAC7D,IAAA,MAAMA,WAAAA,GAAcJ,GAAAA,EAAAA;IAEpB,IAAI;AACF,QAAA,MAAMK,aAAa,MAAMvB,OAAAA,CAAOqB,EAAE,EAC9BG,YAAAA,CAAa,sBACdC,KAAAA,CAAM;YAAEC,GAAAA,EAAK;AAAiB,SAAA,CAAA,CAC9BC,OAAO,OAAA,CAAA,CACPC,KAAAA,EAAAA,CACAC,WAAAA,CAAYP,WAAAA,CAAAA,CACZQ,YACAC,OAAAA,EAAAA,CACAC,IAAAA,CAAK,CAACC,MAAAA,GAAiBA,SAASC,IAAAA,CAAKC,KAAK,CAACF,MAAAA,CAAOG,KAAK,CAAA,GAAIH,MAAAA,CAAAA;QAE9D,MAAMI,qBAAAA,GAAwB,CAACd,UAAAA,EAAYe,eAAe,CAAA,IAAKC,IAAAA,CAAKC,GAAG,EAAA,GAAKnD,UAAAA;AAC5E,QAAA,MAAM4C,MAAAA,GAIF;AAAEK,YAAAA,WAAAA,EAAaC,KAAKC,GAAG;AAAG,SAAA;AAE9B,QAAA,MAAMC,WAAW,CAAC1B,KAAAA,GAAAA;AAChB,YAAA,IAAIA,iBAAiB2B,yBAAAA,IAAqB3B,KAAAA,CAAM4B,cAAc,IAAIpB,YAAYZ,OAAAA,EAAS;gBACrFrB,EAAAA,CAAGO,MAAM,EAAEC,IAAAA,CACT,CAAA,EAAGiB,MAAMpB,OAAO,CAAC,0DAA0D,CAAC,CAAA;AAE9E,gBAAA,OAAO4B,WAAWZ,OAAO;AAC3B,YAAA;YAEAsB,MAAAA,CAAOlB,KAAK,GAAGA,KAAAA,CAAMpB,OAAO;AAC5BD,YAAAA,OAAAA,CAAQqB,MAAMpB,OAAO,CAAA;AACvB,QAAA,CAAA;QAEA,IAAI,CAACL,EAAAA,EAAIE,WAAAA,EAAaoD,UAAAA,EAAY;AAChC,YAAA,MAAM,IAAI5B,KAAAA,CAAM,sBAAA,CAAA;AAClB,QAAA;QAEA,MAAML,SAAAA,GAAU0B,qBAAAA,GACZ,MAAMQ,oBAAAA,CAAa;YAAE7C,MAAAA,EAAAA;AAAO,SAAA,EAAGV,EAAAA,CAAGE,WAAW,CAACoD,UAAU,EAAE5C,OAAAA,CAAO8C,MAAM,CAAC5B,GAAG,CAAC,MAAA,CAAA,CAAA,CAAS6B,KAAK,CACxFN,QAAAA,CAAAA,GAEFlB,WAAWZ,OAAO;AAEtB,QAAA,IAAIA,SAAAA,EAAS;YACX,IAAI;;AAEF,gBAAA,MAAMqC,iBAAiBlC,qBAAAA,CAAcH,SAAAA,CAAAA;gBACrC,MAAMsC,kBAAAA,GACJ,CAACC,UAAAA,CAAQF,cAAAA,CAAeG,QAAQ,EAAE7D,EAAAA,CAAGE,WAAW,CAAC2D,QAAQ,CAAA,IACzDH,cAAAA,CAAeI,KAAK,KAAK9D,EAAAA,CAAGE,WAAW,CAAC4D,KAAK,IAC7CJ,cAAAA,CAAeK,IAAI,KAAK/D,EAAAA,CAAGE,WAAW,CAAC6D,IAAI;;AAG7C/D,gBAAAA,EAAAA,CAAGE,WAAW,GAAGwD,cAAAA;gBACjB,MAAMM,UAAAA,GAAahE,GAAGC,OAAO;AAC7BgE,gBAAAA,YAAAA,EAAAA;;AAGA,gBAAA,IAAIN,sBAAsBK,UAAAA,EAAY;oBACpCtD,OAAAA,CAAOC,QAAQ,CAACC,IAAI,CAAC,WAAA,CAAA;AACvB,gBAAA;AACF,YAAA,CAAA,CAAE,OAAOa,KAAAA,EAAO;AACd,gBAAA,IAAIA,iBAAiBC,KAAAA,EAAO;AAC1BtB,oBAAAA,OAAAA,CAAQqB,MAAMpB,OAAO,CAAA;gBACvB,CAAA,MAAO;oBACLD,OAAAA,CAAQ,kBAAA,CAAA;AACV,gBAAA;AACF,YAAA;QACF,CAAA,MAAO,IAAI,CAAC2C,qBAAAA,EAAuB;AACjC3C,YAAAA,OAAAA,CAAQ6B,WAAWR,KAAK,CAAA;AAC1B,QAAA;AAEA,QAAA,IAAIsB,qBAAAA,EAAuB;YACzBJ,MAAAA,CAAOtB,OAAO,GAAGA,SAAAA,IAAW,IAAA;YAC5B,MAAM6C,KAAAA,GAAQxD,QAAOqB,EAAE,CAACG,YAAY,CAAC,oBAAA,CAAA,CAAsBK,WAAW,CAACP,WAAAA,CAAAA;AAEvE,YAAA,IAAI,CAACC,UAAAA,EAAY;AACfiC,gBAAAA,KAAAA,CAAMC,MAAM,CAAC;oBAAE/B,GAAAA,EAAK,gBAAA;oBAAkBU,KAAAA,EAAOF,IAAAA,CAAKwB,SAAS,CAACzB,MAAAA;AAAQ,iBAAA,CAAA;YACtE,CAAA,MAAO;AACLuB,gBAAAA,KAAAA,CAAMG,MAAM,CAAC;oBAAEvB,KAAAA,EAAOF,IAAAA,CAAKwB,SAAS,CAACzB,MAAAA;AAAQ,iBAAA,CAAA,CAAGR,KAAK,CAAC;oBAAEC,GAAAA,EAAK;AAAiB,iBAAA,CAAA;AAChF,YAAA;AAEA,YAAA,MAAM8B,MAAMzB,OAAO,EAAA;AACrB,QAAA;QAEA,MAAMZ,MAAAA,EAAAA;AACR,IAAA,CAAA,CAAE,OAAM;;QAEN,MAAMC,QAAAA,EAAAA;AACR,IAAA;AACF,CAAA;AAEA,MAAMmC,YAAAA,GAAe,IAAA;AACnB,IAAA,IAAI,OAAOjE,EAAAA,CAAGE,WAAW,CAACoE,QAAQ,KAAK,WAAA,EAAa;AAClD,QAAA,MAAM,IAAI5C,KAAAA,CAAM,sBAAA,CAAA;AAClB,IAAA;IAEA,MAAM6C,cAAAA,GAAiB,IAAItB,IAAAA,CAAKjD,EAAAA,CAAGE,WAAW,CAACoE,QAAQ,EAAEE,OAAO,EAAA;AAEhE,IAAA,IAAID,cAAAA,GAAiB,IAAItB,IAAAA,EAAAA,CAAOuB,OAAO,EAAA,EAAI;AACzC,QAAA,OAAOpE,OAAAA,CAAQ,kBAAA,CAAA;AACjB,IAAA;AAEAS,IAAAA,MAAAA,EAAAA;AACF,CAAA;AAEA,MAAM4D,YAAAA,GAAe,OAAO,EAAE/D,MAAAA,EAAAA,OAAM,EAA2B,GAAA;AAC7D,IAAA,MAAMgE,oBACJ1E,EAAAA,CAAGE,WAAW,CAAC6D,IAAI,KAAK;AAExB9C,IAAAA,OAAAA,CAAQC,GAAG,CAACyD,2BAA2B,EAAEvD,WAAAA,EAAAA,KAAkB,MAAA;AAE7D,IAAA,IAAI,CAACsD,iBAAAA,EAAmB;AACtB,QAAA,MAAM/C,YAAAA,CAAa;YAAEjB,MAAAA,EAAAA;AAAO,SAAA,CAAA;QAE5BA,OAAAA,CAAOkE,IAAI,CAACC,GAAG,CAAC;YACdlD,YAAAA,EAAc;AACZmD,gBAAAA,IAAAA,EAAM,IAAMnD,YAAAA,CAAa;wBAAEjB,MAAAA,EAAAA;AAAO,qBAAA,CAAA;AAClCqE,gBAAAA,OAAAA,EAASC,wBAAAA,CAAoB,gBAAA;AAC/B;AACF,SAAA,CAAA;IACF,CAAA,MAAO;AACL,QAAA,IAAI,CAAChF,EAAAA,CAAGE,WAAW,CAACoE,QAAQ,EAAE;AAC5B,YAAA,OAAOlE,OAAAA,CAAQ,6CAAA,CAAA;AACjB,QAAA;AAEA6D,QAAAA,YAAAA,EAAAA;AACF,IAAA;AACF,CAAA;AAEA,MAAMgB,eAAAA,GAAkB,OAAO,EAC7BvE,MAAAA,EAAAA,OAAM,EAGP,GAAA;IACC,MAAMwE,WAAAA,GAAcC,wBAAkBzE,OAAAA,EAAQ;QAC5C0E,IAAAA,EAAM;AACR,KAAA,CAAA;AAEA,IAAA,MAAMC,GAAAA,GAAM,MAAMH,WAAAA,CAChB,CAAA,EAAGI,6BAAqB,cAAc,EAAEtF,EAAAA,CAAGE,WAAW,CAACoD,UAAU,CAAC,gBAAgB,CAAC,EACnF;QACEiC,MAAAA,EAAQ,KAAA;QACRC,OAAAA,EAAS;YAAE,cAAA,EAAgB;AAAmB;AAChD,KAAA,CAAA,CACA/B,KAAK,CAAC,IAAA;QACN,MAAM,IAAIL,0BACR,qEAAA,EACA,IAAA,CAAA;AAEJ,IAAA,CAAA,CAAA;IAEA,MAAMqC,IAAAA,GAAQ,MAAMJ,GAAAA,CAAIK,IAAI,EAAA;IAE5B,OAAOD,IAAAA;AACT,CAAA;AAEA,MAAME,IAAAA,GAAO,IAAA;IACX,OACE3F,EAAAA,CAAGE,WAAW,CAAC2D,QAAQ,EAAE+B,GAAAA,CAAI,CAACC,OAAAA,GAC5B,OAAOA,OAAAA,KAAY,QAAA,GAAWA,OAAAA,GAAU;YAAEC,IAAAA,EAAMD;AAAQ,SAAA,CAAA,IACrD,EAAE;AAEX,CAAA;AAEA,MAAMjE,GAAAA,GAAM,CAACmE,WAAAA,GAAwBJ,IAAAA,EAAAA,CAAOK,IAAI,CAAC,CAACH,OAAAA,GAAYA,OAAAA,CAAQC,IAAI,KAAKC,WAAAA,CAAAA;AAE/E,YAAeE,MAAAA,CAAOC,MAAM,CAAC;AAC3BnF,IAAAA,IAAAA;AACA0D,IAAAA,YAAAA;AACAQ,IAAAA,eAAAA;AAEA,IAAA,IAAIkB,IAAAA,CAAAA,GAAO;AACT,QAAA,OAAOnG,GAAGC,OAAO;AACnB,IAAA,CAAA;AAEA,IAAA,IAAI6D,KAAAA,CAAAA,GAAQ;QACV,OAAO9D,EAAAA,CAAGE,WAAW,CAAC4D,KAAK;AAC7B,IAAA,CAAA;AAEA,IAAA,IAAIC,IAAAA,CAAAA,GAAO;QACT,OAAO/D,EAAAA,CAAGE,WAAW,CAAC6D,IAAI;AAC5B,IAAA,CAAA;AAEA,IAAA,IAAI5D,OAAAA,CAAAA,GAAU;QACZ,OAAOH,EAAAA,CAAGE,WAAW,CAACC,OAAO;AAC/B,IAAA,CAAA;AAEA,IAAA,IAAIiG,WAAAA,CAAAA,GAAc;QAChB,OAAOpG,EAAAA,CAAGE,WAAW,CAACkG,WAAW;AACnC,IAAA,CAAA;AAEA,IAAA,IAAIC,cAAAA,CAAAA,GAAiB;QACnB,OAAOrG,EAAAA,CAAGE,WAAW,CAACmG,cAAc;AACtC,IAAA,CAAA;IAEAxC,QAAAA,EAAUoC,MAAAA,CAAOC,MAAM,CAAC;AACtBP,QAAAA,IAAAA;AACA/D,QAAAA,GAAAA;QACA0E,SAAAA,EAAW,CAACP,WAAAA,GAAwBnE,GAAAA,CAAImE,WAAAA,CAAAA,KAAiBQ;AAC3D,KAAA;AACF,CAAA,CAAA;;;;"}
+{"version":3,"file":"index.js","sources":["../../src/ee/index.ts"],"sourcesContent":["import { isEqual, pick } from 'lodash';\nimport type { Logger } from '@strapi/logger';\nimport type { Core } from '@strapi/types';\nimport { createStrapiFetch } from '../utils/fetch';\nimport {\n  readLicense,\n  verifyLicense,\n  fetchLicense,\n  LicenseCheckError,\n  LICENSE_REGISTRY_URI,\n  PLAN_FEATURE_CATALOG,\n} from './license';\nimport { createEntitlementsRegistry } from './entitlements';\nimport { shiftCronExpression } from '../utils/cron';\n\nconst ONE_MINUTE = 1000 * 60;\n\ninterface LicenseInfoState {\n  licenseKey?: string;\n  features?: Array<{ name: string; [key: string]: any } | string>;\n  expireAt?: string;\n  seats?: number;\n  type?: string;\n  isTrial: boolean;\n  subscriptionId?: string;\n  planPriceId?: string;\n  /** End of the subscription term, epoch milliseconds. */\n  renewalDate?: string | number;\n}\n\ntype LicenseStatus = 'none' | 'active' | 'expired' | 'unknown';\n\ninterface EE {\n  enabled: boolean;\n  licenseInfo: LicenseInfoState;\n  /**\n   * Display-only copy of the last known license, retained when a license exists but is\n   * not usable (expired / could not be validated) so the admin panel can explain why.\n   * NEVER read by enforcement paths (features.list/get/isEnabled, isEE) and never holds\n   * the license key.\n   */\n  retainedLicense: Omit<LicenseInfoState, 'licenseKey'> | null;\n  licenseStatus: LicenseStatus;\n  logger?: Logger;\n}\n\nconst ee: EE = {\n  enabled: false,\n  licenseInfo: {\n    isTrial: false,\n  },\n  retainedLicense: null,\n  licenseStatus: 'none',\n};\n\nconst disable = (message: string, status: 'expired' | 'unknown' = 'unknown') => {\n  // Prevent emitting ee.disable if it was already disabled\n  const shouldEmitEvent = ee.enabled !== false;\n\n  ee.logger?.warn(`${message} Switching to CE.`);\n\n  // Retain a display-only snapshot (never the key) BEFORE wiping, so the admin panel can\n  // still show which license this instance has and why it is unusable. Guarded on `type`\n  // so a repeat disable() call cannot overwrite the snapshot with an already-wiped one.\n  if (ee.licenseInfo.type) {\n    ee.retainedLicense = pick(ee.licenseInfo, [\n      'features',\n      'expireAt',\n      'seats',\n      'type',\n      'isTrial',\n      'subscriptionId',\n      'planPriceId',\n      'renewalDate',\n    ]);\n  }\n  ee.licenseStatus = status;\n\n  // Only keep the license key and isTrial for potential re-enabling during a later check\n  ee.licenseInfo = pick(ee.licenseInfo, ['licenseKey', 'isTrial']);\n\n  ee.licenseInfo.isTrial = false;\n\n  ee.enabled = false;\n\n  if (shouldEmitEvent) {\n    // Notify EE features that they should be disabled\n    strapi.eventHub.emit('ee.disable');\n  }\n};\n\nconst enable = () => {\n  // Prevent emitting ee.enable if it was already enabled\n  const shouldEmitEvent = ee.enabled !== true;\n\n  ee.enabled = true;\n  ee.licenseStatus = 'active';\n  ee.retainedLicense = null;\n\n  if (shouldEmitEvent) {\n    // Notify EE features that they should be disabled\n    strapi.eventHub.emit('ee.enable');\n  }\n};\n\nlet initialized = false;\n\n/**\n * Optimistically enable EE if the format of the license is valid, only run once.\n */\nconst init = (licenseDir: string, logger?: Logger) => {\n  if (initialized) {\n    return;\n  }\n\n  initialized = true;\n  ee.logger = logger;\n\n  if (process.env.STRAPI_DISABLE_EE?.toLowerCase() === 'true') {\n    return;\n  }\n\n  try {\n    const license = process.env.STRAPI_LICENSE || readLicense(licenseDir);\n\n    if (license) {\n      ee.licenseInfo = verifyLicense(license);\n      enable();\n    }\n  } catch (error) {\n    if (error instanceof Error) {\n      disable(error.message);\n    } else {\n      disable('Invalid license.');\n    }\n  }\n};\n\n/**\n * Contact the license registry to update the license to its latest state.\n *\n * Store the result in database to avoid unecessary requests, and will fallback to that in case of a network failure.\n */\nconst onlineUpdate = async ({ strapi }: { strapi: Core.Strapi }) => {\n  const { get, commit, rollback } = await strapi.db.transaction();\n  const transaction = get();\n\n  try {\n    const storedInfo = await strapi.db\n      ?.queryBuilder('strapi::core-store')\n      .where({ key: 'ee_information' })\n      .select('value')\n      .first()\n      .transacting(transaction)\n      .forUpdate()\n      .execute()\n      .then((result: any) => (result ? JSON.parse(result.value) : result));\n\n    const shouldContactRegistry = (storedInfo?.lastCheckAt ?? 0) < Date.now() - ONE_MINUTE;\n    const result: {\n      license?: string | null;\n      error?: string;\n      errorKind?: 'unreachable' | 'rejected';\n      lastCheckAt?: number;\n    } = { lastCheckAt: Date.now() };\n\n    const fallback = (error: Error) => {\n      // Whether the registry was unreachable or actually refused the license is only\n      // knowable here, from `shouldFallback`. Record it rather than letting the admin\n      // panel infer it from the presence of a cached license: an instance that has never\n      // reached the registry has no cache to fall back to, and would otherwise be told\n      // its license was refused when the registry was merely unreachable.\n      result.errorKind =\n        error instanceof LicenseCheckError && error.shouldFallback ? 'unreachable' : 'rejected';\n\n      if (error instanceof LicenseCheckError && error.shouldFallback && storedInfo?.license) {\n        ee.logger?.warn(\n          `${error.message} The last stored one will be used as a potential fallback.`\n        );\n        result.error = error.message; // record why we fell back so usingCachedLicense is derivable\n        return storedInfo.license;\n      }\n\n      result.error = error.message;\n      disable(error.message);\n    };\n\n    if (!ee?.licenseInfo?.licenseKey) {\n      throw new Error('Missing license key.');\n    }\n\n    const license = shouldContactRegistry\n      ? await fetchLicense({ strapi }, ee.licenseInfo.licenseKey, strapi.config.get('uuid')).catch(\n          fallback\n        )\n      : storedInfo.license;\n\n    if (license) {\n      try {\n        // Verify license and check if its info changed\n        const newLicenseInfo = verifyLicense(license);\n        const licenseInfoChanged =\n          !isEqual(newLicenseInfo.features, ee.licenseInfo.features) ||\n          newLicenseInfo.seats !== ee.licenseInfo.seats ||\n          newLicenseInfo.type !== ee.licenseInfo.type;\n\n        // Store the new license info\n        ee.licenseInfo = newLicenseInfo;\n        const wasEnabled = ee.enabled;\n        validateInfo();\n\n        // Notify EE features\n        if (licenseInfoChanged && wasEnabled) {\n          strapi.eventHub.emit('ee.update');\n        }\n      } catch (error) {\n        if (error instanceof Error) {\n          disable(error.message);\n        } else {\n          disable('Invalid license.');\n        }\n      }\n    } else if (!shouldContactRegistry) {\n      disable(storedInfo.error);\n    }\n\n    if (shouldContactRegistry) {\n      result.license = license ?? null;\n      const query = strapi.db.queryBuilder('strapi::core-store').transacting(transaction);\n\n      if (!storedInfo) {\n        query.insert({ key: 'ee_information', value: JSON.stringify(result) });\n      } else {\n        query.update({ value: JSON.stringify(result) }).where({ key: 'ee_information' });\n      }\n\n      await query.execute();\n    }\n\n    await commit();\n  } catch {\n    // Example of errors: SQLite does not support FOR UPDATE\n    await rollback();\n  }\n};\n\nconst validateInfo = () => {\n  if (typeof ee.licenseInfo.expireAt === 'undefined') {\n    throw new Error('Missing license key.');\n  }\n\n  const expirationTime = new Date(ee.licenseInfo.expireAt).getTime();\n\n  if (expirationTime < new Date().getTime()) {\n    return disable('License expired.', 'expired');\n  }\n\n  enable();\n};\n\nconst checkLicense = async ({ strapi }: { strapi: Core.Strapi }) => {\n  const shouldStayOffline =\n    ee.licenseInfo.type === 'gold' &&\n    // This env variable support is temporarily used to ease the migration between online vs offline\n    process.env.STRAPI_DISABLE_LICENSE_PING?.toLowerCase() === 'true';\n\n  if (!shouldStayOffline) {\n    await onlineUpdate({ strapi });\n\n    strapi.cron.add({\n      onlineUpdate: {\n        task: () => onlineUpdate({ strapi }),\n        options: shiftCronExpression('0 0 */12 * * *'),\n      },\n    });\n  } else {\n    if (!ee.licenseInfo.expireAt) {\n      return disable('Your license does not have offline support.');\n    }\n\n    validateInfo();\n  }\n};\n\nconst getTrialEndDate = async ({\n  strapi,\n}: {\n  strapi: Core.Strapi;\n}): Promise<{ trialEndsAt: string } | null> => {\n  const silentFetch = createStrapiFetch(strapi, {\n    logs: false,\n  });\n\n  const res = await silentFetch(\n    `${LICENSE_REGISTRY_URI}/api/licenses/${ee.licenseInfo.licenseKey}/trial-countdown`,\n    {\n      method: 'GET',\n      headers: { 'Content-Type': 'application/json' },\n    }\n  ).catch(() => {\n    throw new LicenseCheckError(\n      'Could not proceed to retrieve the trial time left for your license.',\n      true\n    );\n  });\n\n  const data = (await res.json()) as { trialEndsAt: string } | null;\n\n  return data;\n};\n\nconst list = () => {\n  return (\n    ee.licenseInfo.features?.map((feature) =>\n      typeof feature === 'object' ? feature : { name: feature }\n    ) || []\n  );\n};\n\nconst get = (featureName: string) => list().find((feature) => feature.name === featureName);\n\nconst entitlements = createEntitlementsRegistry();\n\nexport default Object.freeze({\n  init,\n  checkLicense,\n  getTrialEndDate,\n\n  get isEE() {\n    return ee.enabled;\n  },\n\n  get licenseStatus() {\n    return ee.licenseStatus;\n  },\n\n  /** Display-only; see EE.retainedLicense. Never use for feature gating. */\n  get retainedLicense() {\n    return ee.retainedLicense;\n  },\n\n  get seats() {\n    return ee.licenseInfo.seats;\n  },\n\n  get type() {\n    return ee.licenseInfo.type;\n  },\n\n  get expireAt() {\n    return ee.licenseInfo.expireAt;\n  },\n\n  /** Null when the registry does not provide it yet; survives expiry via the retained snapshot. */\n  get renewalDate() {\n    return ee.licenseInfo.renewalDate ?? ee.retainedLicense?.renewalDate ?? null;\n  },\n\n  /**\n   * Every feature the current plan supports, in display order, regardless of whether this\n   * license includes it. Falls back to the retained license's type so an expired license\n   * still lists rows. See `PLAN_FEATURE_CATALOG` in `./license`.\n   */\n  get planFeatureCatalog(): string[] {\n    const type = ee.licenseInfo.type ?? ee.retainedLicense?.type;\n    return type && type in PLAN_FEATURE_CATALOG\n      ? PLAN_FEATURE_CATALOG[type as keyof typeof PLAN_FEATURE_CATALOG]\n      : [];\n  },\n\n  get isTrial() {\n    return ee.licenseInfo.isTrial;\n  },\n\n  get planPriceId() {\n    return ee.licenseInfo.planPriceId;\n  },\n\n  get subscriptionId() {\n    return ee.licenseInfo.subscriptionId;\n  },\n\n  features: Object.freeze({\n    list,\n    get,\n    isEnabled: (featureName: string) => get(featureName) !== undefined,\n  }),\n\n  entitlements: Object.freeze({\n    register: entitlements.register,\n    // Resolvers are registered during `register()`, before the license is validated, and each\n    // falls back to a built-in default when the feature is absent. Without this gate an\n    // instance whose license was disabled would still report generous limits, which reads as\n    // \"these are your granted limits\". No license, no entitlements.\n    list: () => (ee.enabled ? entitlements.list(get) : []),\n    // A lapsed license's limits, from the same resolvers run against its retained feature list,\n    // so a lapsed Plan card and the debug dump carry the defaults and clamps the plan enforced\n    // instead of raw options. Only features the retained license listed are reported.\n    listRetained() {\n      const retainedFeatures = (ee.retainedLicense?.features ?? []).map((feature) =>\n        typeof feature === 'object' ? feature : { name: feature }\n      );\n      const getRetained = (name: string) =>\n        retainedFeatures.find((feature) => feature.name === name);\n\n      return entitlements\n        .list(getRetained)\n        .filter((entry) => getRetained(entry.feature) !== undefined);\n    },\n  }),\n});\n"],"names":["ONE_MINUTE","ee","enabled","licenseInfo","isTrial","retainedLicense","licenseStatus","disable","message","status","shouldEmitEvent","logger","warn","type","pick","strapi","eventHub","emit","enable","initialized","init","licenseDir","process","env","STRAPI_DISABLE_EE","toLowerCase","license","STRAPI_LICENSE","readLicense","verifyLicense","error","Error","onlineUpdate","get","commit","rollback","db","transaction","storedInfo","queryBuilder","where","key","select","first","transacting","forUpdate","execute","then","result","JSON","parse","value","shouldContactRegistry","lastCheckAt","Date","now","fallback","errorKind","LicenseCheckError","shouldFallback","licenseKey","fetchLicense","config","catch","newLicenseInfo","licenseInfoChanged","isEqual","features","seats","wasEnabled","validateInfo","query","insert","stringify","update","expireAt","expirationTime","getTime","checkLicense","shouldStayOffline","STRAPI_DISABLE_LICENSE_PING","cron","add","task","options","shiftCronExpression","getTrialEndDate","silentFetch","createStrapiFetch","logs","res","LICENSE_REGISTRY_URI","method","headers","data","json","list","map","feature","name","featureName","find","entitlements","createEntitlementsRegistry","Object","freeze","isEE","renewalDate","planFeatureCatalog","PLAN_FEATURE_CATALOG","planPriceId","subscriptionId","isEnabled","undefined","register","listRetained","retainedFeatures","getRetained","filter","entry"],"mappings":";;;;;;;;AAeA,MAAMA,aAAa,IAAA,GAAO,EAAA;AA+B1B,MAAMC,EAAAA,GAAS;IACbC,OAAAA,EAAS,KAAA;IACTC,WAAAA,EAAa;QACXC,OAAAA,EAAS;AACX,KAAA;IACAC,eAAAA,EAAiB,IAAA;IACjBC,aAAAA,EAAe;AACjB,CAAA;AAEA,MAAMC,OAAAA,GAAU,CAACC,OAAAA,EAAiBC,MAAAA,GAAgC,SAAS,GAAA;;IAEzE,MAAMC,eAAAA,GAAkBT,EAAAA,CAAGC,OAAO,KAAK,KAAA;AAEvCD,IAAAA,EAAAA,CAAGU,MAAM,EAAEC,IAAAA,CAAK,CAAA,EAAGJ,OAAAA,CAAQ,iBAAiB,CAAC,CAAA;;;;AAK7C,IAAA,IAAIP,EAAAA,CAAGE,WAAW,CAACU,IAAI,EAAE;AACvBZ,QAAAA,EAAAA,CAAGI,eAAe,GAAGS,MAAAA,CAAKb,EAAAA,CAAGE,WAAW,EAAE;AACxC,YAAA,UAAA;AACA,YAAA,UAAA;AACA,YAAA,OAAA;AACA,YAAA,MAAA;AACA,YAAA,SAAA;AACA,YAAA,gBAAA;AACA,YAAA,aAAA;AACA,YAAA;AACD,SAAA,CAAA;AACH,IAAA;AACAF,IAAAA,EAAAA,CAAGK,aAAa,GAAGG,MAAAA;;AAGnBR,IAAAA,EAAAA,CAAGE,WAAW,GAAGW,MAAAA,CAAKb,EAAAA,CAAGE,WAAW,EAAE;AAAC,QAAA,YAAA;AAAc,QAAA;AAAU,KAAA,CAAA;IAE/DF,EAAAA,CAAGE,WAAW,CAACC,OAAO,GAAG,KAAA;AAEzBH,IAAAA,EAAAA,CAAGC,OAAO,GAAG,KAAA;AAEb,IAAA,IAAIQ,eAAAA,EAAiB;;QAEnBK,MAAAA,CAAOC,QAAQ,CAACC,IAAI,CAAC,YAAA,CAAA;AACvB,IAAA;AACF,CAAA;AAEA,MAAMC,MAAAA,GAAS,IAAA;;IAEb,MAAMR,eAAAA,GAAkBT,EAAAA,CAAGC,OAAO,KAAK,IAAA;AAEvCD,IAAAA,EAAAA,CAAGC,OAAO,GAAG,IAAA;AACbD,IAAAA,EAAAA,CAAGK,aAAa,GAAG,QAAA;AACnBL,IAAAA,EAAAA,CAAGI,eAAe,GAAG,IAAA;AAErB,IAAA,IAAIK,eAAAA,EAAiB;;QAEnBK,MAAAA,CAAOC,QAAQ,CAACC,IAAI,CAAC,WAAA,CAAA;AACvB,IAAA;AACF,CAAA;AAEA,IAAIE,WAAAA,GAAc,KAAA;AAElB;;IAGA,MAAMC,IAAAA,GAAO,CAACC,UAAAA,EAAoBV,MAAAA,GAAAA;AAChC,IAAA,IAAIQ,WAAAA,EAAa;AACf,QAAA;AACF,IAAA;IAEAA,WAAAA,GAAc,IAAA;AACdlB,IAAAA,EAAAA,CAAGU,MAAM,GAAGA,MAAAA;AAEZ,IAAA,IAAIW,QAAQC,GAAG,CAACC,iBAAiB,EAAEC,kBAAkB,MAAA,EAAQ;AAC3D,QAAA;AACF,IAAA;IAEA,IAAI;AACF,QAAA,MAAMC,YAAUJ,OAAAA,CAAQC,GAAG,CAACI,cAAc,IAAIC,mBAAAA,CAAYP,UAAAA,CAAAA;AAE1D,QAAA,IAAIK,SAAAA,EAAS;YACXzB,EAAAA,CAAGE,WAAW,GAAG0B,qBAAAA,CAAcH,SAAAA,CAAAA;AAC/BR,YAAAA,MAAAA,EAAAA;AACF,QAAA;AACF,IAAA,CAAA,CAAE,OAAOY,KAAAA,EAAO;AACd,QAAA,IAAIA,iBAAiBC,KAAAA,EAAO;AAC1BxB,YAAAA,OAAAA,CAAQuB,MAAMtB,OAAO,CAAA;QACvB,CAAA,MAAO;YACLD,OAAAA,CAAQ,kBAAA,CAAA;AACV,QAAA;AACF,IAAA;AACF,CAAA;AAEA;;;;AAIC,IACD,MAAMyB,YAAAA,GAAe,OAAO,EAAEjB,MAAAA,EAAAA,OAAM,EAA2B,GAAA;AAC7D,IAAA,MAAM,EAAEkB,GAAG,EAAEC,MAAM,EAAEC,QAAQ,EAAE,GAAG,MAAMpB,OAAAA,CAAOqB,EAAE,CAACC,WAAW,EAAA;AAC7D,IAAA,MAAMA,WAAAA,GAAcJ,GAAAA,EAAAA;IAEpB,IAAI;AACF,QAAA,MAAMK,aAAa,MAAMvB,OAAAA,CAAOqB,EAAE,EAC9BG,YAAAA,CAAa,sBACdC,KAAAA,CAAM;YAAEC,GAAAA,EAAK;AAAiB,SAAA,CAAA,CAC9BC,OAAO,OAAA,CAAA,CACPC,KAAAA,EAAAA,CACAC,WAAAA,CAAYP,WAAAA,CAAAA,CACZQ,YACAC,OAAAA,EAAAA,CACAC,IAAAA,CAAK,CAACC,MAAAA,GAAiBA,SAASC,IAAAA,CAAKC,KAAK,CAACF,MAAAA,CAAOG,KAAK,CAAA,GAAIH,MAAAA,CAAAA;QAE9D,MAAMI,qBAAAA,GAAwB,CAACd,UAAAA,EAAYe,eAAe,CAAA,IAAKC,IAAAA,CAAKC,GAAG,EAAA,GAAKvD,UAAAA;AAC5E,QAAA,MAAMgD,MAAAA,GAKF;AAAEK,YAAAA,WAAAA,EAAaC,KAAKC,GAAG;AAAG,SAAA;AAE9B,QAAA,MAAMC,WAAW,CAAC1B,KAAAA,GAAAA;;;;;;AAMhBkB,YAAAA,MAAAA,CAAOS,SAAS,GACd3B,KAAAA,YAAiB4B,6BAAqB5B,KAAAA,CAAM6B,cAAc,GAAG,aAAA,GAAgB,UAAA;AAE/E,YAAA,IAAI7B,iBAAiB4B,yBAAAA,IAAqB5B,KAAAA,CAAM6B,cAAc,IAAIrB,YAAYZ,OAAAA,EAAS;gBACrFzB,EAAAA,CAAGU,MAAM,EAAEC,IAAAA,CACT,CAAA,EAAGkB,MAAMtB,OAAO,CAAC,0DAA0D,CAAC,CAAA;AAE9EwC,gBAAAA,MAAAA,CAAOlB,KAAK,GAAGA,KAAAA,CAAMtB,OAAO;AAC5B,gBAAA,OAAO8B,WAAWZ,OAAO;AAC3B,YAAA;YAEAsB,MAAAA,CAAOlB,KAAK,GAAGA,KAAAA,CAAMtB,OAAO;AAC5BD,YAAAA,OAAAA,CAAQuB,MAAMtB,OAAO,CAAA;AACvB,QAAA,CAAA;QAEA,IAAI,CAACP,EAAAA,EAAIE,WAAAA,EAAayD,UAAAA,EAAY;AAChC,YAAA,MAAM,IAAI7B,KAAAA,CAAM,sBAAA,CAAA;AAClB,QAAA;QAEA,MAAML,SAAAA,GAAU0B,qBAAAA,GACZ,MAAMS,oBAAAA,CAAa;YAAE9C,MAAAA,EAAAA;AAAO,SAAA,EAAGd,EAAAA,CAAGE,WAAW,CAACyD,UAAU,EAAE7C,OAAAA,CAAO+C,MAAM,CAAC7B,GAAG,CAAC,MAAA,CAAA,CAAA,CAAS8B,KAAK,CACxFP,QAAAA,CAAAA,GAEFlB,WAAWZ,OAAO;AAEtB,QAAA,IAAIA,SAAAA,EAAS;YACX,IAAI;;AAEF,gBAAA,MAAMsC,iBAAiBnC,qBAAAA,CAAcH,SAAAA,CAAAA;gBACrC,MAAMuC,kBAAAA,GACJ,CAACC,SAAAA,CAAQF,cAAAA,CAAeG,QAAQ,EAAElE,EAAAA,CAAGE,WAAW,CAACgE,QAAQ,CAAA,IACzDH,cAAAA,CAAeI,KAAK,KAAKnE,EAAAA,CAAGE,WAAW,CAACiE,KAAK,IAC7CJ,cAAAA,CAAenD,IAAI,KAAKZ,EAAAA,CAAGE,WAAW,CAACU,IAAI;;AAG7CZ,gBAAAA,EAAAA,CAAGE,WAAW,GAAG6D,cAAAA;gBACjB,MAAMK,UAAAA,GAAapE,GAAGC,OAAO;AAC7BoE,gBAAAA,YAAAA,EAAAA;;AAGA,gBAAA,IAAIL,sBAAsBI,UAAAA,EAAY;oBACpCtD,OAAAA,CAAOC,QAAQ,CAACC,IAAI,CAAC,WAAA,CAAA;AACvB,gBAAA;AACF,YAAA,CAAA,CAAE,OAAOa,KAAAA,EAAO;AACd,gBAAA,IAAIA,iBAAiBC,KAAAA,EAAO;AAC1BxB,oBAAAA,OAAAA,CAAQuB,MAAMtB,OAAO,CAAA;gBACvB,CAAA,MAAO;oBACLD,OAAAA,CAAQ,kBAAA,CAAA;AACV,gBAAA;AACF,YAAA;QACF,CAAA,MAAO,IAAI,CAAC6C,qBAAAA,EAAuB;AACjC7C,YAAAA,OAAAA,CAAQ+B,WAAWR,KAAK,CAAA;AAC1B,QAAA;AAEA,QAAA,IAAIsB,qBAAAA,EAAuB;YACzBJ,MAAAA,CAAOtB,OAAO,GAAGA,SAAAA,IAAW,IAAA;YAC5B,MAAM6C,KAAAA,GAAQxD,QAAOqB,EAAE,CAACG,YAAY,CAAC,oBAAA,CAAA,CAAsBK,WAAW,CAACP,WAAAA,CAAAA;AAEvE,YAAA,IAAI,CAACC,UAAAA,EAAY;AACfiC,gBAAAA,KAAAA,CAAMC,MAAM,CAAC;oBAAE/B,GAAAA,EAAK,gBAAA;oBAAkBU,KAAAA,EAAOF,IAAAA,CAAKwB,SAAS,CAACzB,MAAAA;AAAQ,iBAAA,CAAA;YACtE,CAAA,MAAO;AACLuB,gBAAAA,KAAAA,CAAMG,MAAM,CAAC;oBAAEvB,KAAAA,EAAOF,IAAAA,CAAKwB,SAAS,CAACzB,MAAAA;AAAQ,iBAAA,CAAA,CAAGR,KAAK,CAAC;oBAAEC,GAAAA,EAAK;AAAiB,iBAAA,CAAA;AAChF,YAAA;AAEA,YAAA,MAAM8B,MAAMzB,OAAO,EAAA;AACrB,QAAA;QAEA,MAAMZ,MAAAA,EAAAA;AACR,IAAA,CAAA,CAAE,OAAM;;QAEN,MAAMC,QAAAA,EAAAA;AACR,IAAA;AACF,CAAA;AAEA,MAAMmC,YAAAA,GAAe,IAAA;AACnB,IAAA,IAAI,OAAOrE,EAAAA,CAAGE,WAAW,CAACwE,QAAQ,KAAK,WAAA,EAAa;AAClD,QAAA,MAAM,IAAI5C,KAAAA,CAAM,sBAAA,CAAA;AAClB,IAAA;IAEA,MAAM6C,cAAAA,GAAiB,IAAItB,IAAAA,CAAKrD,EAAAA,CAAGE,WAAW,CAACwE,QAAQ,EAAEE,OAAO,EAAA;AAEhE,IAAA,IAAID,cAAAA,GAAiB,IAAItB,IAAAA,EAAAA,CAAOuB,OAAO,EAAA,EAAI;AACzC,QAAA,OAAOtE,QAAQ,kBAAA,EAAoB,SAAA,CAAA;AACrC,IAAA;AAEAW,IAAAA,MAAAA,EAAAA;AACF,CAAA;AAEA,MAAM4D,YAAAA,GAAe,OAAO,EAAE/D,MAAAA,EAAAA,OAAM,EAA2B,GAAA;AAC7D,IAAA,MAAMgE,oBACJ9E,EAAAA,CAAGE,WAAW,CAACU,IAAI,KAAK;AAExBS,IAAAA,OAAAA,CAAQC,GAAG,CAACyD,2BAA2B,EAAEvD,WAAAA,EAAAA,KAAkB,MAAA;AAE7D,IAAA,IAAI,CAACsD,iBAAAA,EAAmB;AACtB,QAAA,MAAM/C,YAAAA,CAAa;YAAEjB,MAAAA,EAAAA;AAAO,SAAA,CAAA;QAE5BA,OAAAA,CAAOkE,IAAI,CAACC,GAAG,CAAC;YACdlD,YAAAA,EAAc;AACZmD,gBAAAA,IAAAA,EAAM,IAAMnD,YAAAA,CAAa;wBAAEjB,MAAAA,EAAAA;AAAO,qBAAA,CAAA;AAClCqE,gBAAAA,OAAAA,EAASC,wBAAAA,CAAoB,gBAAA;AAC/B;AACF,SAAA,CAAA;IACF,CAAA,MAAO;AACL,QAAA,IAAI,CAACpF,EAAAA,CAAGE,WAAW,CAACwE,QAAQ,EAAE;AAC5B,YAAA,OAAOpE,OAAAA,CAAQ,6CAAA,CAAA;AACjB,QAAA;AAEA+D,QAAAA,YAAAA,EAAAA;AACF,IAAA;AACF,CAAA;AAEA,MAAMgB,eAAAA,GAAkB,OAAO,EAC7BvE,MAAAA,EAAAA,OAAM,EAGP,GAAA;IACC,MAAMwE,WAAAA,GAAcC,wBAAkBzE,OAAAA,EAAQ;QAC5C0E,IAAAA,EAAM;AACR,KAAA,CAAA;AAEA,IAAA,MAAMC,GAAAA,GAAM,MAAMH,WAAAA,CAChB,CAAA,EAAGI,6BAAqB,cAAc,EAAE1F,EAAAA,CAAGE,WAAW,CAACyD,UAAU,CAAC,gBAAgB,CAAC,EACnF;QACEgC,MAAAA,EAAQ,KAAA;QACRC,OAAAA,EAAS;YAAE,cAAA,EAAgB;AAAmB;AAChD,KAAA,CAAA,CACA9B,KAAK,CAAC,IAAA;QACN,MAAM,IAAIL,0BACR,qEAAA,EACA,IAAA,CAAA;AAEJ,IAAA,CAAA,CAAA;IAEA,MAAMoC,IAAAA,GAAQ,MAAMJ,GAAAA,CAAIK,IAAI,EAAA;IAE5B,OAAOD,IAAAA;AACT,CAAA;AAEA,MAAME,IAAAA,GAAO,IAAA;IACX,OACE/F,EAAAA,CAAGE,WAAW,CAACgE,QAAQ,EAAE8B,GAAAA,CAAI,CAACC,OAAAA,GAC5B,OAAOA,OAAAA,KAAY,QAAA,GAAWA,OAAAA,GAAU;YAAEC,IAAAA,EAAMD;AAAQ,SAAA,CAAA,IACrD,EAAE;AAEX,CAAA;AAEA,MAAMjE,GAAAA,GAAM,CAACmE,WAAAA,GAAwBJ,IAAAA,EAAAA,CAAOK,IAAI,CAAC,CAACH,OAAAA,GAAYA,OAAAA,CAAQC,IAAI,KAAKC,WAAAA,CAAAA;AAE/E,MAAME,YAAAA,GAAeC,yCAAAA,EAAAA;AAErB,YAAeC,MAAAA,CAAOC,MAAM,CAAC;AAC3BrF,IAAAA,IAAAA;AACA0D,IAAAA,YAAAA;AACAQ,IAAAA,eAAAA;AAEA,IAAA,IAAIoB,IAAAA,CAAAA,GAAO;AACT,QAAA,OAAOzG,GAAGC,OAAO;AACnB,IAAA,CAAA;AAEA,IAAA,IAAII,aAAAA,CAAAA,GAAgB;AAClB,QAAA,OAAOL,GAAGK,aAAa;AACzB,IAAA,CAAA;+EAGA,IAAID,eAAAA,CAAAA,GAAkB;AACpB,QAAA,OAAOJ,GAAGI,eAAe;AAC3B,IAAA,CAAA;AAEA,IAAA,IAAI+D,KAAAA,CAAAA,GAAQ;QACV,OAAOnE,EAAAA,CAAGE,WAAW,CAACiE,KAAK;AAC7B,IAAA,CAAA;AAEA,IAAA,IAAIvD,IAAAA,CAAAA,GAAO;QACT,OAAOZ,EAAAA,CAAGE,WAAW,CAACU,IAAI;AAC5B,IAAA,CAAA;AAEA,IAAA,IAAI8D,QAAAA,CAAAA,GAAW;QACb,OAAO1E,EAAAA,CAAGE,WAAW,CAACwE,QAAQ;AAChC,IAAA,CAAA;sGAGA,IAAIgC,WAAAA,CAAAA,GAAc;QAChB,OAAO1G,EAAAA,CAAGE,WAAW,CAACwG,WAAW,IAAI1G,EAAAA,CAAGI,eAAe,EAAEsG,WAAAA,IAAe,IAAA;AAC1E,IAAA,CAAA;AAEA;;;;AAIC,MACD,IAAIC,kBAAAA,CAAAA,GAA+B;QACjC,MAAM/F,IAAAA,GAAOZ,GAAGE,WAAW,CAACU,IAAI,IAAIZ,EAAAA,CAAGI,eAAe,EAAEQ,IAAAA;AACxD,QAAA,OAAOA,QAAQA,IAAAA,IAAQgG,4BAAAA,GACnBA,4BAAoB,CAAChG,IAAAA,CAA0C,GAC/D,EAAE;AACR,IAAA,CAAA;AAEA,IAAA,IAAIT,OAAAA,CAAAA,GAAU;QACZ,OAAOH,EAAAA,CAAGE,WAAW,CAACC,OAAO;AAC/B,IAAA,CAAA;AAEA,IAAA,IAAI0G,WAAAA,CAAAA,GAAc;QAChB,OAAO7G,EAAAA,CAAGE,WAAW,CAAC2G,WAAW;AACnC,IAAA,CAAA;AAEA,IAAA,IAAIC,cAAAA,CAAAA,GAAiB;QACnB,OAAO9G,EAAAA,CAAGE,WAAW,CAAC4G,cAAc;AACtC,IAAA,CAAA;IAEA5C,QAAAA,EAAUqC,MAAAA,CAAOC,MAAM,CAAC;AACtBT,QAAAA,IAAAA;AACA/D,QAAAA,GAAAA;QACA+E,SAAAA,EAAW,CAACZ,WAAAA,GAAwBnE,GAAAA,CAAImE,WAAAA,CAAAA,KAAiBa;AAC3D,KAAA,CAAA;IAEAX,YAAAA,EAAcE,MAAAA,CAAOC,MAAM,CAAC;AAC1BS,QAAAA,QAAAA,EAAUZ,aAAaY,QAAQ;;;;;QAK/BlB,IAAAA,EAAM,IAAO/F,GAAGC,OAAO,GAAGoG,aAAaN,IAAI,CAAC/D,OAAO,EAAE;;;;AAIrDkF,QAAAA,YAAAA,CAAAA,GAAAA;AACE,YAAA,MAAMC,mBAAmB,CAACnH,EAAAA,CAAGI,eAAe,EAAE8D,QAAAA,IAAY,EAAE,EAAE8B,GAAG,CAAC,CAACC,UACjE,OAAOA,OAAAA,KAAY,WAAWA,OAAAA,GAAU;oBAAEC,IAAAA,EAAMD;AAAQ,iBAAA,CAAA;YAE1D,MAAMmB,WAAAA,GAAc,CAAClB,IAAAA,GACnBiB,gBAAAA,CAAiBf,IAAI,CAAC,CAACH,OAAAA,GAAYA,OAAAA,CAAQC,IAAI,KAAKA,IAAAA,CAAAA;YAEtD,OAAOG,YAAAA,CACJN,IAAI,CAACqB,WAAAA,CAAAA,CACLC,MAAM,CAAC,CAACC,KAAAA,GAAUF,WAAAA,CAAYE,KAAAA,CAAMrB,OAAO,CAAA,KAAMe,SAAAA,CAAAA;AACtD,QAAA;AACF,KAAA;AACF,CAAA,CAAA;;;;"}

package/dist/ee/index.mjs

@@ -1,6 +1,7 @@
-import { isEqual, pick } from 'lodash/fp';
+import { isEqual, pick } from 'lodash';
 import { createStrapiFetch } from '../utils/fetch.mjs';
-import { LICENSE_REGISTRY_URI, LicenseCheckError, readLicense, verifyLicense, fetchLicense } from './license.mjs';
+import { PLAN_FEATURE_CATALOG, LICENSE_REGISTRY_URI, LicenseCheckError, readLicense, verifyLicense, fetchLicense } from './license.mjs';
+import { createEntitlementsRegistry } from './entitlements.mjs';
 import { shiftCronExpression } from '../utils/cron.mjs';
 
 const ONE_MINUTE = 1000 * 60;
@@ -8,17 +9,35 @@ const ee = {
     enabled: false,
     licenseInfo: {
         isTrial: false
-    }
+    },
+    retainedLicense: null,
+    licenseStatus: 'none'
 };
-const disable = (message)=>{
+const disable = (message, status = 'unknown')=>{
     // Prevent emitting ee.disable if it was already disabled
     const shouldEmitEvent = ee.enabled !== false;
     ee.logger?.warn(`${message} Switching to CE.`);
+    // Retain a display-only snapshot (never the key) BEFORE wiping, so the admin panel can
+    // still show which license this instance has and why it is unusable. Guarded on `type`
+    // so a repeat disable() call cannot overwrite the snapshot with an already-wiped one.
+    if (ee.licenseInfo.type) {
+        ee.retainedLicense = pick(ee.licenseInfo, [
+            'features',
+            'expireAt',
+            'seats',
+            'type',
+            'isTrial',
+            'subscriptionId',
+            'planPriceId',
+            'renewalDate'
+        ]);
+    }
+    ee.licenseStatus = status;
     // Only keep the license key and isTrial for potential re-enabling during a later check
-    ee.licenseInfo = pick([
+    ee.licenseInfo = pick(ee.licenseInfo, [
         'licenseKey',
         'isTrial'
-    ], ee.licenseInfo);
+    ]);
     ee.licenseInfo.isTrial = false;
     ee.enabled = false;
     if (shouldEmitEvent) {
@@ -30,6 +49,8 @@ const enable = ()=>{
     // Prevent emitting ee.enable if it was already enabled
     const shouldEmitEvent = ee.enabled !== true;
     ee.enabled = true;
+    ee.licenseStatus = 'active';
+    ee.retainedLicense = null;
     if (shouldEmitEvent) {
         // Notify EE features that they should be disabled
         strapi.eventHub.emit('ee.enable');
@@ -77,8 +98,15 @@ let initialized = false;
             lastCheckAt: Date.now()
         };
         const fallback = (error)=>{
+            // Whether the registry was unreachable or actually refused the license is only
+            // knowable here, from `shouldFallback`. Record it rather than letting the admin
+            // panel infer it from the presence of a cached license: an instance that has never
+            // reached the registry has no cache to fall back to, and would otherwise be told
+            // its license was refused when the registry was merely unreachable.
+            result.errorKind = error instanceof LicenseCheckError && error.shouldFallback ? 'unreachable' : 'rejected';
             if (error instanceof LicenseCheckError && error.shouldFallback && storedInfo?.license) {
                 ee.logger?.warn(`${error.message} The last stored one will be used as a potential fallback.`);
+                result.error = error.message; // record why we fell back so usingCachedLicense is derivable
                 return storedInfo.license;
             }
             result.error = error.message;
@@ -142,7 +170,7 @@ const validateInfo = ()=>{
     }
     const expirationTime = new Date(ee.licenseInfo.expireAt).getTime();
     if (expirationTime < new Date().getTime()) {
-        return disable('License expired.');
+        return disable('License expired.', 'expired');
     }
     enable();
 };
@@ -189,6 +217,7 @@ const list = ()=>{
         }) || [];
 };
 const get = (featureName)=>list().find((feature)=>feature.name === featureName);
+const entitlements = createEntitlementsRegistry();
 var index = Object.freeze({
     init,
     checkLicense,
@@ -196,12 +225,32 @@ var index = Object.freeze({
     get isEE () {
         return ee.enabled;
     },
+    get licenseStatus () {
+        return ee.licenseStatus;
+    },
+    /** Display-only; see EE.retainedLicense. Never use for feature gating. */ get retainedLicense () {
+        return ee.retainedLicense;
+    },
     get seats () {
         return ee.licenseInfo.seats;
     },
     get type () {
         return ee.licenseInfo.type;
     },
+    get expireAt () {
+        return ee.licenseInfo.expireAt;
+    },
+    /** Null when the registry does not provide it yet; survives expiry via the retained snapshot. */ get renewalDate () {
+        return ee.licenseInfo.renewalDate ?? ee.retainedLicense?.renewalDate ?? null;
+    },
+    /**
+   * Every feature the current plan supports, in display order, regardless of whether this
+   * license includes it. Falls back to the retained license's type so an expired license
+   * still lists rows. See `PLAN_FEATURE_CATALOG` in `./license`.
+   */ get planFeatureCatalog () {
+        const type = ee.licenseInfo.type ?? ee.retainedLicense?.type;
+        return type && type in PLAN_FEATURE_CATALOG ? PLAN_FEATURE_CATALOG[type] : [];
+    },
     get isTrial () {
         return ee.licenseInfo.isTrial;
     },
@@ -215,6 +264,24 @@ var index = Object.freeze({
         list,
         get,
         isEnabled: (featureName)=>get(featureName) !== undefined
+    }),
+    entitlements: Object.freeze({
+        register: entitlements.register,
+        // Resolvers are registered during `register()`, before the license is validated, and each
+        // falls back to a built-in default when the feature is absent. Without this gate an
+        // instance whose license was disabled would still report generous limits, which reads as
+        // "these are your granted limits". No license, no entitlements.
+        list: ()=>ee.enabled ? entitlements.list(get) : [],
+        // A lapsed license's limits, from the same resolvers run against its retained feature list,
+        // so a lapsed Plan card and the debug dump carry the defaults and clamps the plan enforced
+        // instead of raw options. Only features the retained license listed are reported.
+        listRetained () {
+            const retainedFeatures = (ee.retainedLicense?.features ?? []).map((feature)=>typeof feature === 'object' ? feature : {
+                    name: feature
+                });
+            const getRetained = (name)=>retainedFeatures.find((feature)=>feature.name === name);
+            return entitlements.list(getRetained).filter((entry)=>getRetained(entry.feature) !== undefined);
+        }
     })
 });