@cccsaurora/howler-ui 2.19.0-cases.1111 → 2.19.0-cases.1129

package/components/routes/cases/detail/CreateRuleDialog.js

@@ -1,17 +1,14 @@
 import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
 import { useMonaco } from '@monaco-editor/react';
-import { Search } from '@mui/icons-material';
-import { Box, Button, Card, Checkbox, Dialog, DialogActions, DialogContent, DialogTitle, FormControlLabel, FormGroup, IconButton, Stack, TextField, Tooltip, Typography } from '@mui/material';
+import { CheckCircleOutline, FilterList, RadioButtonUnchecked, Search } from '@mui/icons-material';
+import { Autocomplete, Box, Button, Card, Chip, Dialog, DialogActions, DialogContent, DialogTitle, IconButton, Stack, TextField, Tooltip, Typography } from '@mui/material';
 import api from '@cccsaurora/howler-ui/api';
+import ChipPopper from '@cccsaurora/howler-ui/components/elements/display/ChipPopper';
 import QueryResultText from '@cccsaurora/howler-ui/components/elements/display/QueryResultText';
 import useMyApi from '@cccsaurora/howler-ui/components/hooks/useMyApi';
 import QueryEditor from '@cccsaurora/howler-ui/components/routes/advanced/QueryEditor';
-import dayjs, {} from 'dayjs';
 import { useCallback, useEffect, useState } from 'react';
 import { useTranslation } from 'react-i18next';
-import { LocalizationProvider } from '@mui/x-date-pickers';
-import { AdapterDayjs } from '@mui/x-date-pickers/AdapterDayjs';
-import { DateTimePicker } from '@mui/x-date-pickers/DateTimePicker';
 const DEFAULT_TIMEFRAME_DAYS = 14;
 const PROMPT_CONTEXT = 'isRecordQuery && !suggestWidgetVisible && !renameInputVisible && !inSnippetMode && !quickFixWidgetVisible';
 const OPTIONS = {
@@ -26,6 +23,15 @@ const OPTIONS = {
     renderLineHighlight: 'none',
     overviewRulerLanes: 0
 };
+const INDEX_OPTIONS = ['hit', 'event'];
+const Subtitle = ({ i18nKey }) => {
+    const { t } = useTranslation();
+    return (_jsx(Typography, { sx: theme => ({
+            color: theme.palette.text.secondary,
+            fontSize: '0.9em',
+            fontStyle: 'italic'
+        }), variant: "body2", children: t(i18nKey) }));
+};
 const CreateRuleDialog = ({ open, onClose, onSubmit }) => {
     const { t } = useTranslation();
     const { dispatchApi } = useMyApi();
@@ -33,8 +39,9 @@ const CreateRuleDialog = ({ open, onClose, onSubmit }) => {
     const [query, setQuery] = useState('');
     const [destination, setDestination] = useState('');
     const [indexes, setIndexes] = useState(['hit']);
-    const [timeframe, setTimeframe] = useState(dayjs().add(DEFAULT_TIMEFRAME_DAYS, 'day'));
-    const [noExpiry, setNoExpiry] = useState(false);
+    const [timeframeDays, setTimeframeDays] = useState(DEFAULT_TIMEFRAME_DAYS);
+    const [hasExpiry, setHasExpiry] = useState(true);
+    const [expireAfterResolved, setExpireAfterResolved] = useState(false);
     const [loading, setLoading] = useState(false);
     const [searching, setSearching] = useState(false);
     const [response, setResponse] = useState(null);
@@ -42,8 +49,9 @@ const CreateRuleDialog = ({ open, onClose, onSubmit }) => {
         setQuery('');
         setDestination('');
         setIndexes(['hit']);
-        setTimeframe(dayjs().add(DEFAULT_TIMEFRAME_DAYS, 'day'));
-        setNoExpiry(false);
+        setTimeframeDays(DEFAULT_TIMEFRAME_DAYS);
+        setHasExpiry(true);
+        setExpireAfterResolved(false);
         setResponse(null);
     }, []);
     const handleSearch = useCallback(async () => {
@@ -73,7 +81,8 @@ const CreateRuleDialog = ({ open, onClose, onSubmit }) => {
             await onSubmit({
                 query: query.trim(),
                 destination: destination.trim(),
-                timeframe: noExpiry ? undefined : timeframe.toISOString(),
+                timeframe: hasExpiry ? timeframeDays : null,
+                expire_after_resolved: hasExpiry ? expireAfterResolved : false,
                 indexes
             });
             onClose();
@@ -81,7 +90,7 @@ const CreateRuleDialog = ({ open, onClose, onSubmit }) => {
         finally {
             setLoading(false);
         }
-    }, [query, destination, noExpiry, timeframe, indexes, onSubmit, onClose]);
+    }, [query, destination, hasExpiry, timeframeDays, expireAfterResolved, indexes, onSubmit, onClose]);
     const onMount = useCallback((ed) => {
         ed.createContextKey('isRecordQuery', true);
     }, []);
@@ -116,48 +125,21 @@ const CreateRuleDialog = ({ open, onClose, onSubmit }) => {
     }, [monaco, handleSearch]);
     return (_jsxs(Dialog, { open: open, onClose: onClose, maxWidth: "md", fullWidth: true, id: "create-rule-dialog", TransitionProps: { onEnter: handleOpen }, PaperProps: {
             elevation: 0
-        }, children: [_jsx(DialogTitle, { children: t('page.cases.rules.create') }), _jsx(DialogContent, { children: _jsxs(Stack, { spacing: 2, sx: { mt: 1 }, children: [_jsxs(Box, { children: [_jsx(Typography, { variant: "subtitle2", gutterBottom: true, children: t('page.cases.rules.query') }), _jsxs(Stack, { direction: "row", alignItems: "center", spacing: 1, children: [_jsx(Box, { sx: { border: 1, borderColor: 'divider', borderRadius: 1, flex: 1 }, children: _jsx(Card, { variant: "outlined", sx: theme => ({
-                                                    width: '100%',
-                                                    height: theme.spacing(5),
-                                                    p: 1,
-                                                    position: 'relative',
-                                                    overflow: 'visible',
-                                                    display: 'flex',
-                                                    alignItems: 'center',
-                                                    justifyContent: 'space-between',
-                                                    '& .monaco-editor': {
-                                                        position: 'absolute !important'
-                                                    },
-                                                    transition: theme.transitions.create('border-color')
-                                                }), onKeyDown: e => e.stopPropagation(), children: _jsx(QueryEditor, { query: query, setQuery: handleQueryChange, language: "lucene", id: "rule-query-editor", height: "20px", editorOptions: OPTIONS, onMount: onMount }) }) }), _jsx(Tooltip, { title: t('route.search'), children: _jsx("span", { children: _jsx(IconButton, { id: "rule-search-button", onClick: handleSearch, disabled: searching || !query.trim(), children: _jsx(Search, {}) }) }) })] }), response ? (_jsx(QueryResultText, { count: response.total, query: query })) : (_jsx(Typography, { sx: theme => ({
-                                        color: theme.palette.text.secondary,
-                                        fontSize: '0.9em',
-                                        fontStyle: 'italic',
-                                        mt: 0.5
-                                    }), variant: "body2", children: t('hit.search.prompt') }))] }), _jsx(TextField, { id: "rule-destination-input", label: t('page.cases.rules.destination'), value: destination, onChange: e => setDestination(e.target.value), fullWidth: true, placeholder: "alerts/{{howler.analytic}}", helperText: t('page.cases.rules.destination.help'), size: "small" }), _jsxs(Box, { children: [_jsx(Typography, { variant: "subtitle2", gutterBottom: true, children: t('page.cases.rules.indexes') }), _jsxs(FormGroup, { row: true, children: [_jsx(FormControlLabel, { control: _jsx(Checkbox, { id: "rule-index-hit", checked: indexes.includes('hit'), onChange: (_e, checked) => {
-                                                    setIndexes(prev => {
-                                                        if (checked) {
-                                                            return prev.includes('hit') ? prev : [...prev, 'hit'];
-                                                        }
-                                                        return prev.filter(i => i !== 'hit');
-                                                    });
-                                                } }), label: t('hit.search.index.hit') }), _jsx(FormControlLabel, { control: _jsx(Checkbox, { id: "rule-index-event", checked: indexes.includes('event'), onChange: (_e, checked) => {
-                                                    setIndexes(prev => {
-                                                        if (checked) {
-                                                            return prev.includes('event') ? prev : [...prev, 'event'];
-                                                        }
-                                                        return prev.filter(i => i !== 'event');
-                                                    });
-                                                } }), label: t('hit.search.index.event') })] })] }), _jsxs(Stack, { direction: "row", spacing: 2, alignItems: "center", children: [_jsx(LocalizationProvider, { dateAdapter: AdapterDayjs, children: _jsx(DateTimePicker, { slotProps: {
-                                            textField: {
-                                                id: 'rule-timeframe-input',
-                                                fullWidth: true,
-                                                size: 'small'
-                                            }
-                                        }, label: t('page.cases.rules.timeframe'), value: timeframe, onChange: nv => {
-                                            if (nv) {
-                                                setTimeframe(nv);
-                                            }
-                                        }, disabled: noExpiry, ampm: false, disablePast: true, sx: { flex: 1 } }) }), _jsx(FormControlLabel, { control: _jsx(Checkbox, { id: "rule-no-expiry-checkbox", checked: noExpiry, onChange: (_e, checked) => setNoExpiry(checked) }), label: t('page.cases.rules.no_expiry') })] })] }) }), _jsxs(DialogActions, { children: [_jsx(Button, { onClick: onClose, children: t('cancel') }), _jsx(Button, { id: "rule-submit-button", variant: "contained", onClick: handleSubmit, disabled: !response || loading || !query.trim() || !destination.trim() || indexes.length === 0, children: t('page.cases.rules.create') })] })] }));
+        }, children: [_jsx(DialogTitle, { children: t('page.cases.rules.create') }), _jsx(DialogContent, { children: _jsxs(Stack, { spacing: 3, sx: { mt: 1 }, children: [_jsxs(Box, { children: [_jsxs(Stack, { direction: "row", justifyContent: "space-between", children: [_jsx(Typography, { variant: "subtitle2", gutterBottom: true, children: t('page.cases.rules.query') }), _jsx(ChipPopper, { icon: _jsx(FilterList, { fontSize: "small" }), label: indexes.map(opt => t(`hit.search.index.${opt}`)).join(', '), minWidth: "225px", slotProps: { chip: { size: 'small' } }, children: _jsx(Autocomplete, { size: "small", multiple: true, options: INDEX_OPTIONS, value: indexes, onChange: (_ev, values) => values.length > 0 && setIndexes(values), getOptionLabel: opt => t(`hit.search.index.${opt}`), renderInput: params => _jsx(TextField, { ...params }) }) })] }), _jsx(Stack, { direction: "row", alignItems: "center", spacing: 1, children: _jsx(Box, { sx: { border: 1, borderColor: 'divider', borderRadius: 1, flex: 1 }, children: _jsxs(Card, { variant: "outlined", sx: theme => ({
+                                                width: '100%',
+                                                height: theme.spacing(5),
+                                                py: 1,
+                                                pl: 1,
+                                                pr: 0.5,
+                                                position: 'relative',
+                                                overflow: 'visible',
+                                                display: 'flex',
+                                                alignItems: 'center',
+                                                justifyContent: 'space-between',
+                                                '& .monaco-editor': {
+                                                    position: 'absolute !important'
+                                                },
+                                                transition: theme.transitions.create('border-color')
+                                            }), onKeyDown: e => e.stopPropagation(), children: [_jsx(QueryEditor, { query: query, setQuery: handleQueryChange, language: "lucene", id: "rule-query-editor", height: "20px", editorOptions: OPTIONS, onMount: onMount }), _jsx(Tooltip, { title: t('route.search'), children: _jsx("span", { children: _jsx(IconButton, { size: "small", id: "rule-search-button", onClick: handleSearch, disabled: searching || !query.trim(), children: _jsx(Search, {}) }) }) })] }) }) }), response ? (_jsx(QueryResultText, { count: response.total, query: query, mb: 0 })) : (_jsx(Subtitle, { i18nKey: "hit.search.prompt" }))] }), _jsxs(Box, { children: [_jsx(TextField, { id: "rule-destination-input", label: t('page.cases.rules.destination'), value: destination, onChange: e => setDestination(e.target.value), fullWidth: true, placeholder: "alerts/{{howler.analytic}}", size: "small" }), _jsx(Subtitle, { i18nKey: "page.cases.rules.destination.help" })] }), _jsxs(Stack, { children: [_jsx(TextField, { id: "rule-timeframe-input", type: "number", label: t('page.cases.rules.timeframe'), value: timeframeDays, onChange: e => setTimeframeDays(Math.max(1, parseInt(e.target.value, 10) || 1)), size: "small", disabled: !hasExpiry, sx: { flex: 1 }, InputProps: { inputProps: { min: 1 } } }), _jsx(Subtitle, { i18nKey: "page.cases.rules.timeframe.help" })] }), _jsxs(Stack, { direction: "row", spacing: 1, alignItems: "center", flexWrap: "wrap", children: [_jsx(Chip, { id: "rule-no-expiry-checkbox", label: t('page.cases.rules.no_expiry'), icon: !hasExpiry ? _jsx(CheckCircleOutline, {}) : _jsx(RadioButtonUnchecked, {}), variant: "filled", color: !hasExpiry ? 'primary' : 'default', clickable: true, disabled: expireAfterResolved, onClick: () => setHasExpiry(prev => !prev) }), _jsx(Chip, { id: "rule-expire-after-resolved", label: t('page.cases.rules.expire_after_resolved'), icon: expireAfterResolved ? _jsx(CheckCircleOutline, {}) : _jsx(RadioButtonUnchecked, {}), variant: "filled", color: expireAfterResolved ? 'primary' : 'default', clickable: hasExpiry, onClick: () => setExpireAfterResolved(prev => !prev), disabled: !hasExpiry })] })] }) }), _jsxs(DialogActions, { children: [_jsx(Button, { onClick: onClose, children: t('cancel') }), _jsx(Button, { id: "rule-submit-button", variant: "contained", onClick: handleSubmit, disabled: !response || loading || !query.trim() || !destination.trim() || indexes.length === 0, children: t('page.cases.rules.create') })] })] }));
 };
 export default CreateRuleDialog;

package/components/routes/cases/detail/CreateRuleDialog.test.js

@@ -35,8 +35,8 @@ vi.mock('@mui/x-date-pickers/AdapterDayjs', () => ({
     AdapterDayjs: class {
     }
 }));
-vi.mock('@mui/x-date-pickers/DateTimePicker', () => ({
-    DateTimePicker: ({ label, disabled }) => (_jsx("input", { id: "rule-timeframe-input", "aria-label": label, disabled: disabled, readOnly: true }))
+vi.mock('components/elements/display/ChipPopper', () => ({
+    default: ({ children }) => _jsx(_Fragment, { children: children })
 }));
 import api from '@cccsaurora/howler-ui/api';
 import CreateRuleDialog from './CreateRuleDialog';
@@ -60,8 +60,8 @@ describe('CreateRuleDialog', () => {
         expect(screen.getByTestId('rule-destination-input')).toBeInTheDocument();
         expect(screen.getByTestId('rule-timeframe-input')).toBeInTheDocument();
         expect(screen.getByTestId('rule-no-expiry-checkbox')).toBeInTheDocument();
-        expect(screen.getByTestId('rule-index-hit')).toBeInTheDocument();
-        expect(screen.getByTestId('rule-index-event')).toBeInTheDocument();
+        expect(screen.getByTestId('rule-expire-after-resolved')).toBeInTheDocument();
+        expect(screen.getByRole('combobox')).toBeInTheDocument();
     });
     it('disables submit when query is empty', () => {
         render(_jsx(CreateRuleDialog, { ...defaultProps }));
@@ -149,7 +149,7 @@ describe('CreateRuleDialog', () => {
         expect(screen.getByText('hit.search.prompt')).toBeInTheDocument();
         expect(screen.queryByTestId('query-result-text')).not.toBeInTheDocument();
     });
-    it('includes timeframe as ISO string when no expiry is unchecked', async () => {
+    it('includes timeframe as number when expiry is enabled', async () => {
         const user = userEvent.setup();
         const onSubmit = vi.fn().mockResolvedValue(undefined);
         mockDispatchApi.mockResolvedValueOnce({ items: [], total: 1, offset: 0, rows: 0 });
@@ -169,7 +169,7 @@ describe('CreateRuleDialog', () => {
         });
         await waitFor(() => {
             expect(onSubmit).toHaveBeenCalledWith(expect.objectContaining({
-                timeframe: expect.any(String)
+                timeframe: 14
             }));
         });
     });
@@ -198,25 +198,18 @@ describe('CreateRuleDialog', () => {
             expect(onSubmit).toHaveBeenCalledWith(expect.objectContaining({
                 query: 'event.kind:alert',
                 destination: 'alerts/incoming',
-                timeframe: undefined
+                timeframe: null
             }));
         });
     });
-    it('defaults to hit index checked', () => {
-        render(_jsx(CreateRuleDialog, { ...defaultProps }));
-        const hitCheckbox = screen.getByTestId('rule-index-hit');
-        const eventCheckbox = screen.getByTestId('rule-index-event');
-        expect(hitCheckbox).toBeChecked();
-        expect(eventCheckbox).not.toBeChecked();
-    });
-    it('includes both indexes when both are selected', async () => {
+    it('includes expire_after_resolved when checkbox is checked', async () => {
         const user = userEvent.setup();
         const onSubmit = vi.fn().mockResolvedValue(undefined);
         mockDispatchApi.mockResolvedValueOnce({ items: [], total: 1, offset: 0, rows: 0 });
         api.search.hit.post.mockReturnValue('search-request');
         render(_jsx(CreateRuleDialog, { ...defaultProps, onSubmit: onSubmit }));
         await act(async () => {
-            await user.click(screen.getByTestId('rule-index-event'));
+            await user.click(screen.getByTestId('rule-expire-after-resolved'));
         });
         await act(async () => {
             await user.type(screen.getByTestId('rule-query-editor'), 'event.kind:alert');
@@ -232,15 +225,31 @@ describe('CreateRuleDialog', () => {
         });
         await waitFor(() => {
             expect(onSubmit).toHaveBeenCalledWith(expect.objectContaining({
-                indexes: expect.arrayContaining(['hit', 'event'])
+                timeframe: 14,
+                expire_after_resolved: true
             }));
         });
     });
-    it('disables submit when no indexes are selected', async () => {
+    it('defaults to hit index checked', () => {
+        render(_jsx(CreateRuleDialog, { ...defaultProps }));
+        // With 'hit' selected by default, its chip appears in the Autocomplete input area
+        expect(screen.getAllByText('hit.search.index.hit').length).toBeGreaterThan(0);
+        // 'event' is not selected, so its chip should not appear
+        expect(screen.queryByText('hit.search.index.event')).not.toBeInTheDocument();
+    });
+    it('includes both indexes when both are selected', async () => {
         const user = userEvent.setup();
+        const onSubmit = vi.fn().mockResolvedValue(undefined);
         mockDispatchApi.mockResolvedValueOnce({ items: [], total: 1, offset: 0, rows: 0 });
         api.search.hit.post.mockReturnValue('search-request');
-        render(_jsx(CreateRuleDialog, { ...defaultProps }));
+        render(_jsx(CreateRuleDialog, { ...defaultProps, onSubmit: onSubmit }));
+        // Open the index Autocomplete and select 'event'
+        await act(async () => {
+            await user.click(screen.getByRole('combobox'));
+        });
+        await act(async () => {
+            await user.click(screen.getByRole('option', { name: 'hit.search.index.event' }));
+        });
         await act(async () => {
             await user.type(screen.getByTestId('rule-query-editor'), 'event.kind:alert');
         });
@@ -250,10 +259,26 @@ describe('CreateRuleDialog', () => {
         await act(async () => {
             await user.type(screen.getByTestId('rule-destination-input'), 'alerts/incoming');
         });
-        // Uncheck the default hit index
         await act(async () => {
-            await user.click(screen.getByTestId('rule-index-hit'));
+            await user.click(screen.getByTestId('rule-submit-button'));
         });
-        expect(screen.getByTestId('rule-submit-button')).toBeDisabled();
+        await waitFor(() => {
+            expect(onSubmit).toHaveBeenCalledWith(expect.objectContaining({
+                indexes: expect.arrayContaining(['hit', 'event'])
+            }));
+        });
+    });
+    it('prevents deselecting the last index', async () => {
+        const user = userEvent.setup();
+        render(_jsx(CreateRuleDialog, { ...defaultProps }));
+        // 'hit' is selected by default; open the dropdown and try to deselect it
+        await act(async () => {
+            await user.click(screen.getByRole('combobox'));
+        });
+        await act(async () => {
+            await user.click(screen.getByRole('option', { name: 'hit.search.index.hit' }));
+        });
+        // 'hit' should still be selected because deselecting the last index is prevented
+        expect(screen.getAllByText('hit.search.index.hit').length).toBeGreaterThan(0);
     });
 });

package/components/routes/cases/detail/sidebar/CaseFolder.test.js

@@ -66,6 +66,7 @@ import CaseFolder from './CaseFolder';
 // Fixtures
 // ---------------------------------------------------------------------------
 const makeCase = (id, items = []) => ({
+    __index: 'case',
     case_id: id,
     title: `Case ${id}`,
     items

package/components/routes/cases/detail/sidebar/CaseFolderContextMenu.test.js

@@ -1,6 +1,7 @@
 import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
 import { fireEvent, render, screen, waitFor } from '@testing-library/react';
 import { act } from 'react';
+import { createMockCase } from '@cccsaurora/howler-ui/tests/utils';
 import { beforeEach, describe, expect, it, vi } from 'vitest';
 // ---------------------------------------------------------------------------
 // Mocks
@@ -51,7 +52,7 @@ import CaseFolderContextMenu, { collectAllLeaves, getOpenUrl } from './CaseFolde
 // ---------------------------------------------------------------------------
 // Fixtures
 // ---------------------------------------------------------------------------
-const mockCase = { case_id: 'case-1', title: 'Test Case', items: [] };
+const mockCase = createMockCase({ case_id: 'case-1' });
 const hitLeaf = { type: 'hit', value: 'hit-123', path: 'folder/hit-item' };
 const referenceLeaf = { type: 'reference', value: 'https://example.com', path: 'folder/ref-item' };
 const eventLeaf = { type: 'event', value: 'obs-456', path: 'folder/event-item' };
@@ -255,7 +256,7 @@ describe('CaseFolderContextMenu', () => {
             });
         });
         it('does not call the API when case_id is missing', () => {
-            renderMenu({ _case: { title: 'No ID' }, leaf: hitLeaf });
+            renderMenu({ _case: createMockCase({ case_id: undefined, title: 'No ID' }), leaf: hitLeaf });
             act(() => {
                 fireEvent.click(screen.getByTestId('remove-item'));
             });

package/components/routes/hits/search/shared/IndexPicker.d.ts

@@ -1,2 +1,8 @@
-declare const _default: import("react").NamedExoticComponent<{}>;
+import type { SearchIndex } from '@cccsaurora/howler-ui/api/v2/search';
+declare const _default: import("react").NamedExoticComponent<{
+    additionalOptions?: {
+        label: string;
+        value: SearchIndex;
+    }[];
+}>;
 export default _default;

package/components/routes/hits/search/shared/IndexPicker.js

@@ -10,11 +10,12 @@ const FILTER_OPTIONS = [
     { label: 'hit.search.index.hit', value: 'hit' },
     { label: 'hit.search.index.event', value: 'event' }
 ];
-const IndexPicker = () => {
+const IndexPicker = ({ additionalOptions = [] }) => {
     const { t } = useTranslation();
     const indexes = useContextSelector(ParameterContext, ctx => ctx.indexes);
     const setIndexes = useContextSelector(ParameterContext, ctx => ctx.setIndexes);
-    const selectedOptions = FILTER_OPTIONS.filter(opt => indexes.includes(opt.value));
-    return (_jsx(ChipPopper, { icon: _jsx(FilterList, { fontSize: "small" }), label: selectedOptions.map(opt => t(opt.label)).join(', '), minWidth: "225px", slotProps: { chip: { size: 'small' } }, children: _jsx(Autocomplete, { size: "small", multiple: true, options: FILTER_OPTIONS, value: selectedOptions, onChange: (_ev, values) => values.length > 0 && setIndexes(values.map(val => val.value)), isOptionEqualToValue: (opt, val) => opt.value === val.value, getOptionLabel: opt => t(opt.label), renderInput: params => _jsx(TextField, { ...params }) }) }));
+    const allOptions = [...FILTER_OPTIONS, ...additionalOptions];
+    const selectedOptions = allOptions.filter(opt => indexes.includes(opt.value));
+    return (_jsx(ChipPopper, { icon: _jsx(FilterList, { fontSize: "small" }), label: selectedOptions.map(opt => t(opt.label)).join(', '), minWidth: "225px", slotProps: { chip: { size: 'small' } }, children: _jsx(Autocomplete, { size: "small", multiple: true, options: allOptions, value: selectedOptions, onChange: (_ev, values) => values.length > 0 && setIndexes(values.map(val => val.value)), isOptionEqualToValue: (opt, val) => opt.value === val.value, getOptionLabel: opt => t(opt.label), renderInput: params => _jsx(TextField, { ...params }) }) }));
 };
 export default memo(IndexPicker);

package/locales/en/translation.json

@@ -116,6 +116,7 @@
     "edit": "Edit",
     "enabled": "Enabled",
     "event.module": "Event Module",
+    "event.open": "Open Event",
     "event.type": "Event Type",
     "features.warning.description": "This feature is undergoing active development, and is not yet in a finished state. You may encounter bugs or instability.",
     "features.warning.title": "Feature In Active Development",
@@ -187,8 +188,8 @@
     "hit.header.target": "Target",
     "hit.header.threat": "Threat",
     "hit.header.view.case": "View case {{id}}",
-    "hit.header.view.hit": "View hit {{id}}",
     "hit.header.view.event": "View event {{id}}",
+    "hit.header.view.hit": "View hit {{id}}",
     "hit.header.votes": "Votes: ",
     "hit.howler.related": "{{count}} related records",
     "hit.label": "Labels",
@@ -231,9 +232,9 @@
     "hit.panel.view.layout": "Change View Panel",
     "hit.quicksearch": "Search by assignment, analytic, detection or status",
     "hit.related.tab.case": "Cases",
+    "hit.related.tab.event": "Events",
     "hit.related.tab.hit": "Hits",
     "hit.related.tab.links": "Links",
-    "hit.related.tab.event": "Events",
     "hit.search.aggregate.button": "Create Summary",
     "hit.search.button": "Perform search",
     "hit.search.custom": "Custom Sort",
@@ -243,8 +244,9 @@
     "hit.search.filter.label": "Lookup Filters",
     "hit.search.filter.values": "Values",
     "hit.search.index": "Indexes",
-    "hit.search.index.hit": "Hits",
+    "hit.search.index.case": "Cases",
     "hit.search.index.event": "Events",
+    "hit.search.index.hit": "Hits",
     "hit.search.invalid": "Invalid Query",
     "hit.search.keyboard": "Keyboard shortcuts",
     "hit.search.keyboard.no_shortcuts": "No shortcuts",
@@ -368,7 +370,6 @@
     "no.data": "No Data",
     "none": "None",
     "normal": "Normal Priority",
-    "event.open": "Open Event",
     "on": "on",
     "open": "Open",
     "operations.add_label": "Add Label",
@@ -390,18 +391,6 @@
     "page.403.title": "403: Access Forbidden",
     "page.404.description": "The page you are looking for cannot be found...",
     "page.404.title": "404: Not found",
-    "page.cases.observables": "Observables",
-    "page.cases.observables.empty": "No observables found.",
-    "page.cases.observables.filter_by_type": "Filter by type:",
-    "page.cases.observables.seen_in": "Seen in",
-    "page.cases.observables.type.hash": "Hash",
-    "page.cases.observables.type.hosts": "Host",
-    "page.cases.observables.type.id": "ID",
-    "page.cases.observables.type.ids": "ID",
-    "page.cases.observables.type.ip": "IP",
-    "page.cases.observables.type.signature": "Signature",
-    "page.cases.observables.type.uri": "URI",
-    "page.cases.observables.type.user": "User",
     "page.cases.created": "Created",
     "page.cases.dashboard": "Dashboard",
     "page.cases.dashboard.alerts": "Alerts",
@@ -411,19 +400,31 @@
     "page.cases.dashboard.target": "Targets",
     "page.cases.dashboard.tasks": "Tasks",
     "page.cases.dashboard.tasks.add": "Add Task",
+    "page.cases.dashboard.tasks.child.empty": "No tasks in this child case.",
     "page.cases.dashboard.tasks.child_cases": "Child Cases",
     "page.cases.dashboard.tasks.filter_cases": "Filter child cases",
-    "page.cases.dashboard.tasks.show_child": "Show child case tasks",
     "page.cases.dashboard.tasks.hide_child": "Hide child case tasks",
-    "page.cases.dashboard.tasks.child.empty": "No tasks in this child case.",
+    "page.cases.dashboard.tasks.show_child": "Show child case tasks",
     "page.cases.dashboard.threat": "Threats",
+    "page.cases.detail.escalation": "Escalation",
     "page.cases.detail.participants": "Participants",
     "page.cases.detail.properties": "Properties",
     "page.cases.detail.status": "Status",
-    "page.cases.detail.escalation": "Escalation",
     "page.cases.detail.viewers": "Active Viewers",
     "page.cases.escalation": "Escalation",
     "page.cases.folder.drop.root": "Place here to move to root",
+    "page.cases.observables": "Observables",
+    "page.cases.observables.empty": "No observables found.",
+    "page.cases.observables.filter_by_type": "Filter by type:",
+    "page.cases.observables.seen_in": "Seen in",
+    "page.cases.observables.type.hash": "Hash",
+    "page.cases.observables.type.hosts": "Host",
+    "page.cases.observables.type.id": "ID",
+    "page.cases.observables.type.ids": "ID",
+    "page.cases.observables.type.ip": "IP",
+    "page.cases.observables.type.signature": "Signature",
+    "page.cases.observables.type.uri": "URI",
+    "page.cases.observables.type.user": "User",
     "page.cases.rules": "Rules",
     "page.cases.rules.author": "Author",
     "page.cases.rules.create": "Create Rule",
@@ -431,9 +432,15 @@
     "page.cases.rules.destination": "Alert Destination Path",
     "page.cases.rules.destination.help": "Handlebars template for the case item path (e.g. alerts/{{howler.analytic}})",
     "page.cases.rules.empty": "No correlation rules configured.",
+    "page.cases.rules.expire_after_resolved": "Start expiry after case is resolved",
+    "page.cases.rules.indexes": "Indexes",
     "page.cases.rules.no_expiry": "No expiry",
     "page.cases.rules.query": "Match Query",
     "page.cases.rules.timeframe": "Rule Expiry",
+    "page.cases.rules.timeframe.after_resolved": "{{days}} day(s) after resolved",
+    "page.cases.rules.timeframe.days": "{{days}} day(s)",
+    "page.cases.rules.timeframe.help": "Number of days before the rule expires",
+    "page.cases.search": "Search",
     "page.cases.sidebar.folder.remove": "Remove folder",
     "page.cases.sidebar.item.open": "Open item",
     "page.cases.sidebar.item.remove": "Remove item",
@@ -847,6 +854,13 @@
     "rule.interval.thirty.minutes": "Every thirty minutes",
     "rule.interval.three.hours": "Every three hours",
     "save": "Save",
+    "search.fuzzy.no_results": "No results found.",
+    "search.fuzzy.placeholder": "Search by IP, domain, hash, email, or keyword...",
+    "search.fuzzy.results.cases": "Cases",
+    "search.fuzzy.results.events": "Events",
+    "search.fuzzy.results.hits": "Hits",
+    "search.fuzzy.title": "Fuzzy Search",
+    "search.fuzzy.total_results": "results found",
     "search.layout.settings": "Edit search result layout",
     "search.open": "Open Search",
     "search.result.showing": "Showing {{offset}} to {{length}} of {{total}} results",

package/locales/fr/translation.json

@@ -116,6 +116,7 @@
     "edit": "Modifier",
     "enabled": "Activé",
     "event.module": "Module d'événement",
+    "event.open": "Ouvrir événement",
     "event.type": "Type d'événement",
     "features.warning.description": "Cette fonctionnalité fait l'objet d'un développement actif et n'est pas encore achevée. Il est possible que vous rencontriez des problèmes ou de l'instabilité.",
     "features.warning.title": "Fonctionnalité en développement actif",
@@ -187,8 +188,8 @@
     "hit.header.target": "Cible",
     "hit.header.threat": "Menace",
     "hit.header.view.case": "Voir le cas {{id}}",
-    "hit.header.view.hit": "Voir l'alerte {{id}}",
     "hit.header.view.event": "Voir l'événement {{id}}",
+    "hit.header.view.hit": "Voir l'alerte {{id}}",
     "hit.header.votes": "Votes: ",
     "hit.howler.related": "{{count}} enregistrements associés",
     "hit.label": "Étiquettes",
@@ -231,9 +232,9 @@
     "hit.panel.view.layout": "Modifier le panneau d'affichage",
     "hit.quicksearch": "Recherche par affectation, analytique, détection ou état",
     "hit.related.tab.case": "Cas",
+    "hit.related.tab.event": "Événements",
     "hit.related.tab.hit": "Alertes",
     "hit.related.tab.links": "Liens",
-    "hit.related.tab.event": "Événements",
     "hit.search.aggregate.button": "Créer un sommaire",
     "hit.search.button": "Effectuer une recherche",
     "hit.search.custom": "Triage personnalisé",
@@ -243,8 +244,9 @@
     "hit.search.filter.label": "Filtres de recherche",
     "hit.search.filter.values": "Valeurs",
     "hit.search.index": "Indexes",
-    "hit.search.index.hit": "Hits",
+    "hit.search.index.case": "Cas",
     "hit.search.index.event": "Événements",
+    "hit.search.index.hit": "Hits",
     "hit.search.invalid": "Requête invalide",
     "hit.search.keyboard": "Raccourcis clavier",
     "hit.search.keyboard.no_shortcuts": "Pas de raccourcis",
@@ -368,7 +370,6 @@
     "no.data": "Aucune donnée",
     "none": "Rien",
     "normal": "Priorité normale",
-    "event.open": "Ouvrir événement",
     "on": "sur",
     "open": "Ouvert",
     "operations.add_label": "Ajouter un label",
@@ -390,18 +391,6 @@
     "page.403.title": "403: Accès interdit",
     "page.404.description": "La page que vous recherchez est introuvable ...",
     "page.404.title": "404: Introuvable",
-    "page.cases.observables": "Observables",
-    "page.cases.observables.empty": "Aucun observable trouvé.",
-    "page.cases.observables.filter_by_type": "Filtrer par type :",
-    "page.cases.observables.seen_in": "Vu dans",
-    "page.cases.observables.type.hash": "Hachage",
-    "page.cases.observables.type.hosts": "Hôte",
-    "page.cases.observables.type.id": "Identifiant",
-    "page.cases.observables.type.ids": "Identifiant",
-    "page.cases.observables.type.ip": "IP",
-    "page.cases.observables.type.signature": "Signature",
-    "page.cases.observables.type.uri": "URI",
-    "page.cases.observables.type.user": "Utilisateur",
     "page.cases.created": "Créé",
     "page.cases.dashboard": "Tableau de bord",
     "page.cases.dashboard.alerts": "Alertes",
@@ -411,19 +400,31 @@
     "page.cases.dashboard.target": "Cibles",
     "page.cases.dashboard.tasks": "Tâches",
     "page.cases.dashboard.tasks.add": "Ajouter une tâche",
+    "page.cases.dashboard.tasks.child.empty": "Aucune tâche dans ce cas enfant.",
     "page.cases.dashboard.tasks.child_cases": "Cas enfants",
     "page.cases.dashboard.tasks.filter_cases": "Filtrer les cas enfants",
-    "page.cases.dashboard.tasks.show_child": "Afficher les tâches des cas enfants",
     "page.cases.dashboard.tasks.hide_child": "Masquer les tâches des cas enfants",
-    "page.cases.dashboard.tasks.child.empty": "Aucune tâche dans ce cas enfant.",
+    "page.cases.dashboard.tasks.show_child": "Afficher les tâches des cas enfants",
     "page.cases.dashboard.threat": "Menaces",
+    "page.cases.detail.escalation": "Escalade",
     "page.cases.detail.participants": "Participants",
     "page.cases.detail.properties": "Propriétés",
     "page.cases.detail.status": "Statut",
-    "page.cases.detail.escalation": "Escalade",
     "page.cases.detail.viewers": "Spectateurs actifs",
     "page.cases.escalation": "Escalade",
     "page.cases.folder.drop.root": "Déposer ici pour déplacer à la racine",
+    "page.cases.observables": "Observables",
+    "page.cases.observables.empty": "Aucun observable trouvé.",
+    "page.cases.observables.filter_by_type": "Filtrer par type :",
+    "page.cases.observables.seen_in": "Vu dans",
+    "page.cases.observables.type.hash": "Hachage",
+    "page.cases.observables.type.hosts": "Hôte",
+    "page.cases.observables.type.id": "Identifiant",
+    "page.cases.observables.type.ids": "Identifiant",
+    "page.cases.observables.type.ip": "IP",
+    "page.cases.observables.type.signature": "Signature",
+    "page.cases.observables.type.uri": "URI",
+    "page.cases.observables.type.user": "Utilisateur",
     "page.cases.rules": "Règles",
     "page.cases.rules.author": "Auteur",
     "page.cases.rules.create": "Créer une règle",
@@ -431,9 +432,15 @@
     "page.cases.rules.destination": "Chemin de destination des alertes",
     "page.cases.rules.destination.help": "Modèle Handlebars pour le chemin de l'élément de cas (ex. alerts/{{howler.analytic}})",
     "page.cases.rules.empty": "Aucune règle de corrélation configurée.",
+    "page.cases.rules.expire_after_resolved": "Démarrer l'expiration après la résolution du cas",
+    "page.cases.rules.indexes": "Index",
     "page.cases.rules.no_expiry": "Sans expiration",
     "page.cases.rules.query": "Requête de correspondance",
     "page.cases.rules.timeframe": "Expiration de la règle",
+    "page.cases.rules.timeframe.after_resolved": "{{days}} jour(s) après résolution",
+    "page.cases.rules.timeframe.days": "{{days}} jour(s)",
+    "page.cases.rules.timeframe.help": "Nombre de jours avant l'expiration de la règle",
+    "page.cases.search": "Rechercher",
     "page.cases.sidebar.folder.remove": "Supprimer le dossier",
     "page.cases.sidebar.item.open": "Ouvrir l'élément",
     "page.cases.sidebar.item.remove": "Supprimer l'élément",
@@ -847,6 +854,13 @@
     "rule.interval.thirty.minutes": "Toutes les trente minutes",
     "rule.interval.three.hours": "Toutes les trois heures",
     "save": "Sauvegarder",
+    "search.fuzzy.no_results": "Aucun résultat trouvé.",
+    "search.fuzzy.placeholder": "Rechercher par IP, domaine, hash, courriel ou mot-clé...",
+    "search.fuzzy.results.cases": "Cas",
+    "search.fuzzy.results.events": "Événements",
+    "search.fuzzy.results.hits": "Alertes",
+    "search.fuzzy.title": "Recherche floue",
+    "search.fuzzy.total_results": "résultats trouvés",
     "search.layout.settings": "Modifier la présentation des résultats de recherche",
     "search.open": "Ouvrir la recherche",
     "search.result.showing": "Affichage de {{offset}} à {{length}} sur {{total}} articles",

package/models/entities/generated/Case.d.ts

@@ -7,6 +7,7 @@ import type { Task } from './Task';
  * NOTE: This is an auto-generated file. Don't edit this manually.
  */
 export interface Case {
+  __index: 'case';
   case_id?: string;
   created?: string;
   end?: string;

package/models/entities/generated/Rule.d.ts

@@ -7,6 +7,8 @@ export interface Rule {
   query?: string;
   author?: string;
   enabled?: boolean;
-  timeframe?: string;
+  created_at?: string;
+  timeframe?: number;
+  expire_after_resolved?: boolean;
   indexes?: ('hit' | 'event')[];
 }