@cccsaurora/howler-ui 2.18.0-dev.778 → 2.18.0-dev.794

package/models/entities/generated/Hit.d.ts

@@ -40,6 +40,7 @@ import type { Vulnerability } from './Vulnerability';
  * NOTE: This is an auto-generated file. Don't edit this manually.
  */
 export interface Hit {
+  __index: 'hit';
   agent?: Agent;
   assemblyline?: Assemblyline;
   aws?: Aws;

package/models/entities/generated/Howler.d.ts

@@ -14,8 +14,6 @@ export interface Howler {
   analytic: string;
   assessment?: string;
   assignment: string;
-  bundle_size?: number;
-  bundles?: string[];
   comment?: HowlerComment[];
   confidence?: number;
   data?: string[];
@@ -24,10 +22,8 @@ export interface Howler {
   escalation?: string;
   expiry?: string;
   hash: string;
-  hits?: string[];
   id: string;
   incidents?: Incident[];
-  is_bundle?: boolean;
   labels?: Labels;
   links?: Link[];
   log?: Log[];

package/models/entities/generated/HttpResponse.d.ts

@@ -0,0 +1,11 @@
+import type { Body } from './Body';
+
+/**
+ * NOTE: This is an auto-generated file. Don't edit this manually.
+ */
+export interface HttpResponse {
+  body?: Body;
+  bytes?: number;
+  mime_type?: string;
+  status_code?: number;
+}

package/models/entities/generated/Item.d.ts

@@ -0,0 +1,9 @@
+/**
+ * NOTE: This is an auto-generated file. Don't edit this manually.
+ */
+export interface Item {
+  path?: string;
+  type?: string;
+  value?: string;
+  visible?: boolean;
+}

package/models/entities/generated/Observable.d.ts

@@ -0,0 +1,85 @@
+import type { Agent } from './Agent';
+import type { Assemblyline } from './Assemblyline';
+import type { Aws } from './Aws';
+import type { Azure } from './Azure';
+import type { Cbs } from './Cbs';
+import type { Clue } from './Clue';
+import type { Container } from './Container';
+import type { Dns } from './Dns';
+import type { Ecs } from './Ecs';
+import type { Error } from './Error';
+import type { Event } from './Event';
+import type { Faas } from './Faas';
+import type { Gcp } from './Gcp';
+import type { Group } from './Group';
+import type { Host } from './Host';
+import type { Interface } from './Interface';
+import type { Network } from './Network';
+import type { ObservableCloud } from './ObservableCloud';
+import type { ObservableDestination } from './ObservableDestination';
+import type { ObservableEmail } from './ObservableEmail';
+import type { ObservableFile } from './ObservableFile';
+import type { ObservableHowler } from './ObservableHowler';
+import type { ObservableHttp } from './ObservableHttp';
+import type { ObservableObserver } from './ObservableObserver';
+import type { ObservableOrganization } from './ObservableOrganization';
+import type { ObservableProcess } from './ObservableProcess';
+import type { ObservableSource } from './ObservableSource';
+import type { ObservableThreat } from './ObservableThreat';
+import type { ObservableTls } from './ObservableTls';
+import type { Registry } from './Registry';
+import type { Related } from './Related';
+import type { Rule } from './Rule';
+import type { Server } from './Server';
+import type { Url } from './Url';
+import type { User } from './User';
+import type { UserAgent } from './UserAgent';
+import type { Vulnerability } from './Vulnerability';
+
+/**
+ * NOTE: This is an auto-generated file. Don't edit this manually.
+ */
+export interface Observable {
+  __index: 'observable';
+  agent?: Agent;
+  assemblyline?: Assemblyline;
+  aws?: Aws;
+  azure?: Azure;
+  cbs?: Cbs;
+  cloud?: ObservableCloud;
+  clue?: Clue;
+  container?: Container;
+  destination?: ObservableDestination;
+  dns?: Dns;
+  ecs?: Ecs;
+  email?: ObservableEmail;
+  error?: Error;
+  event?: Event;
+  faas?: Faas;
+  file?: ObservableFile;
+  gcp?: Gcp;
+  group?: Group;
+  host?: Host;
+  howler: ObservableHowler;
+  http?: ObservableHttp;
+  interface?: Interface;
+  labels?: { [index: string]: string };
+  message?: string;
+  network?: Network;
+  observer?: ObservableObserver;
+  organization?: ObservableOrganization;
+  process?: ObservableProcess;
+  registry?: Registry;
+  related?: Related;
+  rule?: Rule;
+  server?: Server;
+  source?: ObservableSource;
+  tags?: string[];
+  threat?: ObservableThreat;
+  timestamp: string;
+  tls?: ObservableTls;
+  url?: Url;
+  user?: User;
+  user_agent?: UserAgent;
+  vulnerability?: Vulnerability;
+}

package/models/entities/generated/ObservableCloud.d.ts

@@ -0,0 +1,20 @@
+import type { CloudAccount } from './CloudAccount';
+import type { Instance } from './Instance';
+import type { Machine } from './Machine';
+import type { Project } from './Project';
+import type { Service } from './Service';
+
+/**
+ * NOTE: This is an auto-generated file. Don't edit this manually.
+ */
+export interface ObservableCloud {
+  account?: CloudAccount;
+  availability_zone?: string;
+  instance?: Instance;
+  machine?: Machine;
+  project?: Project;
+  provider?: string;
+  region?: string;
+  service?: Service;
+  tenant_id?: string;
+}

package/models/entities/generated/ObservableDestination.d.ts

@@ -0,0 +1,23 @@
+import type { AutonomousSystems } from './AutonomousSystems';
+import type { DestinationOriginal } from './DestinationOriginal';
+import type { Geo } from './Geo';
+import type { Nat } from './Nat';
+import type { User } from './User';
+
+/**
+ * NOTE: This is an auto-generated file. Don't edit this manually.
+ */
+export interface ObservableDestination {
+  address?: string;
+  autonomous_systems?: AutonomousSystems;
+  bytes?: number;
+  domain?: string;
+  geo?: Geo;
+  ip?: string;
+  mac?: string;
+  nat?: Nat;
+  original?: DestinationOriginal;
+  packets?: number;
+  port?: number;
+  user?: User;
+}

package/models/entities/generated/ObservableEmail.d.ts

@@ -0,0 +1,30 @@
+import type { Bcc } from './Bcc';
+import type { Cc } from './Cc';
+import type { EmailAttachment } from './EmailAttachment';
+import type { EmailParent } from './EmailParent';
+import type { From } from './From';
+import type { ReplyTo } from './ReplyTo';
+import type { Sender } from './Sender';
+import type { To } from './To';
+
+/**
+ * NOTE: This is an auto-generated file. Don't edit this manually.
+ */
+export interface ObservableEmail {
+  attachments?: EmailAttachment[];
+  bcc?: Bcc;
+  cc?: Cc;
+  content_type?: string;
+  delivery_timestamp?: string;
+  direction?: string;
+  from?: From;
+  local_id?: string;
+  message_id?: string;
+  origination_timestamp?: string;
+  parent?: EmailParent;
+  reply_to?: ReplyTo;
+  sender?: Sender;
+  subject?: string;
+  to?: To;
+  x_mailer?: string;
+}

package/models/entities/generated/ObservableFile.d.ts

@@ -0,0 +1,36 @@
+import type { CodeSignature } from './CodeSignature';
+import type { Elf } from './Elf';
+import type { FileHash } from './FileHash';
+import type { Pe } from './Pe';
+
+/**
+ * NOTE: This is an auto-generated file. Don't edit this manually.
+ */
+export interface ObservableFile {
+  accessed?: string;
+  attributes?: string[];
+  code_signature?: CodeSignature;
+  created?: string;
+  ctime?: string;
+  device?: string;
+  directory?: string;
+  drive_letter?: string;
+  elf?: Elf;
+  extension?: string;
+  fork_name?: string;
+  gid?: string;
+  group?: string;
+  hash?: FileHash;
+  inode?: string;
+  mime_type?: string;
+  mode?: string;
+  mtime?: string;
+  name?: string;
+  owner?: string;
+  path?: string;
+  pe?: Pe;
+  size?: number;
+  target_path?: string;
+  type?: string;
+  uid?: string;
+}

package/models/entities/generated/ObservableHowler.d.ts

@@ -0,0 +1,43 @@
+import type { HowlerComment } from './HowlerComment';
+import type { HowlerDossier } from './HowlerDossier';
+import type { Incident } from './Incident';
+import type { Labels } from './Labels';
+import type { Link } from './Link';
+import type { Log } from './Log';
+import type { Outline } from './Outline';
+import type { Votes } from './Votes';
+
+/**
+ * NOTE: This is an auto-generated file. Don't edit this manually.
+ */
+export interface ObservableHowler {
+  analytic: string;
+  assessment?: string;
+  comment?: HowlerComment[];
+  confidence?: number;
+  data?: string[];
+  detection?: string;
+  dossier?: HowlerDossier[];
+  escalation?: string;
+  expiry?: string;
+  hash: string;
+  id: string;
+  incidents?: Incident[];
+  labels?: Labels;
+  links?: Link[];
+  log?: Log[];
+  mitigated?: string;
+  monitored?: string;
+  outline?: Outline;
+  rationale?: string;
+  related?: string[];
+  reliability?: number;
+  reported?: string;
+  score?: number;
+  scrutiny?: string;
+  severity?: number;
+  status?: string;
+  viewers?: string[];
+  volume?: number;
+  votes?: Votes;
+}

package/models/entities/generated/ObservableHttp.d.ts

@@ -0,0 +1,11 @@
+import type { HttpResponse } from './HttpResponse';
+import type { Request } from './Request';
+
+/**
+ * NOTE: This is an auto-generated file. Don't edit this manually.
+ */
+export interface ObservableHttp {
+  request?: Request;
+  response?: HttpResponse;
+  version?: string;
+}

package/models/entities/generated/ObservableObserver.d.ts

@@ -0,0 +1,21 @@
+import type { Egress } from './Egress';
+import type { Interface } from './Interface';
+import type { ObserverIngress } from './ObserverIngress';
+
+/**
+ * NOTE: This is an auto-generated file. Don't edit this manually.
+ */
+export interface ObservableObserver {
+  egress?: Egress;
+  hostname?: string;
+  ingress?: ObserverIngress;
+  interface?: Interface;
+  ip?: string[];
+  mac?: string[];
+  name?: string;
+  product?: string;
+  serial_number?: string;
+  type?: string;
+  vendor?: string;
+  version?: string;
+}

package/models/entities/generated/ObservableOrganization.d.ts

@@ -0,0 +1,7 @@
+/**
+ * NOTE: This is an auto-generated file. Don't edit this manually.
+ */
+export interface ObservableOrganization {
+  id?: string;
+  name?: string;
+}

package/models/entities/generated/ObservableProcess.d.ts

@@ -0,0 +1,34 @@
+import type { CodeSignature } from './CodeSignature';
+import type { EntryMeta } from './EntryMeta';
+import type { Pe } from './Pe';
+import type { ProcessHash } from './ProcessHash';
+import type { ProcessParent } from './ProcessParent';
+import type { ProcessUser } from './ProcessUser';
+
+/**
+ * NOTE: This is an auto-generated file. Don't edit this manually.
+ */
+export interface ObservableProcess {
+  args?: string[];
+  args_count?: number;
+  code_signature?: CodeSignature;
+  command_line?: string;
+  end?: string;
+  entity_id?: string;
+  entry_meta?: EntryMeta;
+  env_vars?: { [index: string]: string };
+  executable?: string;
+  exit_code?: number;
+  hash?: ProcessHash;
+  interactive?: boolean;
+  name?: string;
+  parent?: ProcessParent;
+  pe?: Pe;
+  pid?: number;
+  same_as_process?: boolean;
+  start?: string;
+  title?: string;
+  uptime?: number;
+  user?: ProcessUser;
+  working_directory?: string;
+}

package/models/entities/generated/ObservableSource.d.ts

@@ -0,0 +1,23 @@
+import type { AutonomousSystems } from './AutonomousSystems';
+import type { Geo } from './Geo';
+import type { Nat } from './Nat';
+import type { SourceOriginal } from './SourceOriginal';
+import type { User } from './User';
+
+/**
+ * NOTE: This is an auto-generated file. Don't edit this manually.
+ */
+export interface ObservableSource {
+  address?: string;
+  autonomous_systems?: AutonomousSystems;
+  bytes?: number;
+  domain?: string;
+  geo?: Geo;
+  ip?: string;
+  mac?: string;
+  nat?: Nat;
+  original?: SourceOriginal;
+  packets?: number;
+  port?: number;
+  user?: User;
+}

package/models/entities/generated/ObservableThreat.d.ts

@@ -0,0 +1,21 @@
+import type { Feed } from './Feed';
+import type { Software } from './Software';
+import type { ThreatEnrichment } from './ThreatEnrichment';
+import type { ThreatGroup } from './ThreatGroup';
+import type { ThreatIndicator } from './ThreatIndicator';
+import type { ThreatTactic } from './ThreatTactic';
+import type { ThreatTechnique } from './ThreatTechnique';
+
+/**
+ * NOTE: This is an auto-generated file. Don't edit this manually.
+ */
+export interface ObservableThreat {
+  enrichments?: ThreatEnrichment[];
+  feed?: Feed;
+  framework?: string;
+  group?: ThreatGroup;
+  indicator?: ThreatIndicator;
+  software?: Software;
+  tactic?: ThreatTactic;
+  technique?: ThreatTechnique;
+}

package/models/entities/generated/ObservableTls.d.ts

@@ -0,0 +1,12 @@
+import type { Client } from './Client';
+import type { TlsServer } from './TlsServer';
+
+/**
+ * NOTE: This is an auto-generated file. Don't edit this manually.
+ */
+export interface ObservableTls {
+  client?: Client;
+  server?: TlsServer;
+  version?: string;
+  version_protocol?: string;
+}

package/models/entities/generated/ObserverIngress.d.ts

@@ -0,0 +1,9 @@
+import type { Interface } from './Interface';
+
+/**
+ * NOTE: This is an auto-generated file. Don't edit this manually.
+ */
+export interface ObserverIngress {
+  interface?: Interface;
+  zone?: string;
+}

package/models/entities/generated/Rule.d.ts

@@ -2,14 +2,6 @@
  * NOTE: This is an auto-generated file. Don't edit this manually.
  */
 export interface Rule {
-  author?: string;
-  category?: string;
-  description?: string;
-  id?: string;
-  license?: string;
-  name?: string;
-  reference?: string;
-  ruleset?: string;
-  uuid?: string;
-  version?: string;
+  destination?: string;
+  query?: string;
 }

package/models/entities/generated/Task.d.ts

@@ -0,0 +1,10 @@
+/**
+ * NOTE: This is an auto-generated file. Don't edit this manually.
+ */
+export interface Task {
+  assignment?: string;
+  complete?: boolean;
+  id?: string;
+  path?: string;
+  summary?: string;
+}

package/models/entities/generated/Threat.d.ts

@@ -1,6 +1,6 @@
-import type { Enrichment } from './Enrichment';
 import type { Feed } from './Feed';
 import type { Software } from './Software';
+import type { ThreatEnrichment } from './ThreatEnrichment';
 import type { ThreatGroup } from './ThreatGroup';
 import type { ThreatIndicator } from './ThreatIndicator';
 import type { ThreatTactic } from './ThreatTactic';
@@ -10,7 +10,7 @@ import type { ThreatTechnique } from './ThreatTechnique';
  * NOTE: This is an auto-generated file. Don't edit this manually.
  */
 export interface Threat {
-  enrichments?: Enrichment[];
+  enrichments?: ThreatEnrichment[];
   feed?: Feed;
   framework?: string;
   group?: ThreatGroup;

package/models/entities/generated/{Enrichment.d.ts → ThreatEnrichment.d.ts}

@@ -4,7 +4,7 @@ import type { Matched } from './Matched';
 /**
  * NOTE: This is an auto-generated file. Don't edit this manually.
  */
-export interface Enrichment {
+export interface ThreatEnrichment {
   indicator?: Indicator;
   matched?: Matched;
 }

package/models/entities/generated/View.d.ts

@@ -12,4 +12,5 @@ export interface View {
   title?: string;
   type?: string;
   view_id?: string;
+  indexes?: string[];
 }

package/package.json

@@ -24,7 +24,7 @@
     "@jsonforms/core": "^3.7.0",
     "@jsonforms/material-renderers": "^3.7.0",
     "@jsonforms/react": "^3.7.0",
-    "@microlink/react-json-view": "^1.31.18",
+    "@microlink/react-json-view": "^1.31.17",
     "@monaco-editor/react": "^4.7.0",
     "ajv": "^8.18.0",
     "ajv-i18n": "^4.2.0",
@@ -34,7 +34,7 @@
     "chartjs-adapter-dayjs-4": "^1.0.4",
     "chartjs-plugin-zoom": "^2.2.0",
     "dayjs": "^1.11.20",
-    "dompurify": "^3.4.0",
+    "dompurify": "^3.3.3",
     "flat": "^6.0.1",
     "fuse.js": "^7.3.0",
     "handlebars": "^4.7.9",
@@ -101,7 +101,7 @@
     "internal-slot": "1.0.7"
   },
   "type": "module",
-  "version": "2.18.0-dev.778",
+  "version": "2.18.0-dev.794",
   "exports": {
     "./i18n": "./i18n.js",
     "./index.css": "./index.css",
@@ -148,9 +148,11 @@
     "./components/routes/home": "./components/routes/home/index.js",
     "./components/routes/dossiers/*": "./components/routes/dossiers/*.js",
     "./components/routes/help/*": "./components/routes/help/*.js",
+    "./components/routes/observables/*": "./components/routes/observables/*.js",
     "./components/routes/admin/*": "./components/routes/admin/*.js",
     "./components/routes/action/*": "./components/routes/action/*.js",
     "./components/routes/settings/*": "./components/routes/settings/*.js",
+    "./components/routes/cases/*": "./components/routes/cases/*.js",
     "./components/routes/views/*": "./components/routes/views/*.js",
     "./components/routes/overviews/*": "./components/routes/overviews/*.js",
     "./components/routes/analytics/*": "./components/routes/analytics/*.js",
@@ -168,12 +170,22 @@
     "./components/routes/action/shared/*": "./components/routes/action/shared/*.js",
     "./components/routes/action/view/*": "./components/routes/action/view/*.js",
     "./components/routes/action/view/markdown/*.md": "./components/routes/action/view/markdown/*.md.js",
+    "./components/routes/cases/modals/*": "./components/routes/cases/modals/*.js",
+    "./components/routes/cases/detail/*": "./components/routes/cases/detail/*.js",
+    "./components/routes/cases/search/*": "./components/routes/cases/search/*.js",
+    "./components/routes/cases/hooks/*": "./components/routes/cases/hooks/*.js",
+    "./components/routes/cases/detail/assets/*": "./components/routes/cases/detail/assets/*.js",
+    "./components/routes/cases/detail/sidebar/*": "./components/routes/cases/detail/sidebar/*.js",
+    "./components/routes/cases/detail/aggregates/*": "./components/routes/cases/detail/aggregates/*.js",
     "./components/routes/overviews/template/*": "./components/routes/overviews/template/*.js",
     "./components/routes/analytics/widgets/*": "./components/routes/analytics/widgets/*.js",
     "./components/logins/auth/*": "./components/logins/auth/*.js",
     "./components/logins/hooks/*": "./components/logins/hooks/*.js",
     "./components/elements/hit/*": "./components/elements/hit/*.js",
     "./components/elements/addons/*": "./components/elements/addons/*.js",
+    "./components/elements/record/*": "./components/elements/record/*.js",
+    "./components/elements/observable/*": "./components/elements/observable/*.js",
+    "./components/elements/case/*": "./components/elements/case/*.js",
     "./components/elements/view/*": "./components/elements/view/*.js",
     "./components/elements/display/*": "./components/elements/display/*.js",
     "./components/elements/hit/aggregate/*": "./components/elements/hit/aggregate/*.js",
@@ -224,6 +236,8 @@
     "./api/template": "./api/template/index.js",
     "./api/analytic/*": "./api/analytic/*.js",
     "./api/analytic": "./api/analytic/index.js",
+    "./api/v2/*": "./api/v2/*.js",
+    "./api/v2": "./api/v2/index.js",
     "./api/auth/*": "./api/auth/*.js",
     "./api/auth": "./api/auth/index.js",
     "./api/user/*": "./api/user/*.js",
@@ -244,6 +258,10 @@
     "./api/analytic/comments": "./api/analytic/comments/index.js",
     "./api/analytic/notebooks/*": "./api/analytic/notebooks/*.js",
     "./api/analytic/notebooks": "./api/analytic/notebooks/index.js",
+    "./api/v2/case/*": "./api/v2/case/*.js",
+    "./api/v2/case": "./api/v2/case/index.js",
+    "./api/v2/search/*": "./api/v2/search/*.js",
+    "./api/v2/search": "./api/v2/search/index.js",
     "./api/user/avatar/*": "./api/user/avatar/*.js",
     "./api/user/avatar": "./api/user/avatar/index.js",
     "./api/search/count/*": "./api/search/count/*.js",

package/plugins/clue/components/ClueTypography.js

@@ -3,8 +3,8 @@ import EnrichedTypography from '@cccsaurora/clue-ui/components/EnrichedTypograph
 import { Typography } from '@mui/material';
 import { memo } from 'react';
 import { useType } from '../utils';
-const ClueTypography = ({ children, value, context, field, hit, ...props }) => {
-    const type = useType(hit, field, value);
+const ClueTypography = ({ children, value, context, field, obj, ...props }) => {
+    const type = useType(obj, field, value);
     if (!type) {
         return _jsx(Typography, { ...props, children: children ?? value });
     }

package/plugins/clue/utils.d.ts

@@ -1,2 +1,3 @@
 import type { Hit } from '@cccsaurora/howler-ui/models/entities/generated/Hit';
-export declare const useType: (hit?: Hit, field?: string, value?: string) => any;
+import type { Observable } from '@cccsaurora/howler-ui/models/entities/generated/Observable';
+export declare const useType: (hit?: Hit | Observable, field?: string, value?: string) => any;

package/tests/mocks.d.ts

@@ -7,7 +7,17 @@ export declare const setupContextSelectorMock: () => void;
  * Sets up a mock for react-router-dom with common defaults
  * @param options - Override specific router behavior
  */
-export declare const setupReactRouterMock: () => void;
+export declare const setupReactRouterMock: () => {
+    mockSearchParams: URLSearchParams;
+    mockSetParams: import("vitest").Mock<(...args: any[]) => any>;
+    mockLocation: {
+        pathname: string;
+        search: string;
+    };
+    mockParams: {
+        id: any;
+    };
+};
 /**
  * Sets up a mock localStorage instance
  */

package/tests/mocks.js

@@ -31,15 +31,20 @@ export const setupReactRouterMock = () => {
     const mockSearchParams = vi.hoisted(() => new URLSearchParams());
     const mockSetParams = vi.hoisted(() => vi.fn());
     beforeAll(() => {
-        vi.mock('react-router-dom', () => ({
-            Link: forwardRef(({ to, children, ...props }, ref) => (_jsx("a", { ref: ref, href: to, ...props, children: children }))),
-            useLocation: vi.fn(() => mockLocation),
-            useParams: vi.fn(() => mockParams),
-            useSearchParams: vi.fn(() => [mockSearchParams, mockSetParams]),
-            useNavigate: () => vi.fn()
-        }));
+        vi.mock('react-router-dom', async () => {
+            const actual = await vi.importActual('react-router-dom');
+            return {
+                ...actual,
+                Link: forwardRef(({ to, children, ...props }, ref) => (_jsx("a", { ref: ref, href: to, ...props, children: children }))),
+                useLocation: vi.fn(() => mockLocation),
+                useParams: vi.fn(() => mockParams),
+                useSearchParams: vi.fn(() => [mockSearchParams, mockSetParams]),
+                useNavigate: () => vi.fn()
+            };
+        });
     });
     afterAll(() => vi.resetModules());
+    return { mockSearchParams, mockSetParams, mockLocation, mockParams };
 };
 /**
  * Sets up a mock localStorage instance