@oneuptime/common 11.6.0 → 11.6.2

package/build/dist/Utils/NetworkSite/CidrMatchUtil.js

@@ -0,0 +1,222 @@
+/*
+ * Matching helpers for NetworkSite auto-assignment rules: IPv4 CIDR
+ * containment, case-insensitive '*' wildcard hostname patterns, and the
+ * highest-priority-wins rule picker. Pure and dependency-free so the rule
+ * engine's decisions are unit-testable.
+ */
+export class CidrMatchUtil {
+    /*
+     * True when the IPv4 address `ip` falls inside `cidr` ('10.0.0.0/8').
+     * Prefixes /0 through /32 are supported; a bare address is treated as /32.
+     * Any invalid input returns false instead of throwing.
+     */
+    static ipInCidr(ip, cidr) {
+        const ipValue = CidrMatchUtil.parseIpv4(ip);
+        if (ipValue === null) {
+            return false;
+        }
+        if (typeof cidr !== "string" || cidr.trim().length === 0) {
+            return false;
+        }
+        const parts = cidr.trim().split("/");
+        if (parts.length > 2) {
+            return false;
+        }
+        const baseValue = CidrMatchUtil.parseIpv4(parts[0] || "");
+        if (baseValue === null) {
+            return false;
+        }
+        let prefixLength = 32;
+        if (parts.length === 2) {
+            const prefixText = parts[1] || "";
+            if (!CidrMatchUtil.PREFIX_LENGTH_PATTERN.test(prefixText)) {
+                return false;
+            }
+            prefixLength = parseInt(prefixText, 10);
+            if (prefixLength < 0 || prefixLength > 32) {
+                return false;
+            }
+        }
+        /*
+         * JS bitwise ops are 32-bit signed; >>> 0 keeps the mask and the masked
+         * addresses unsigned. A shift by 32 is a no-op in JS, so /0 is special
+         * cased to the all-zero mask (matches everything).
+         */
+        const mask = prefixLength === 0 ? 0 : (0xffffffff << (32 - prefixLength)) >>> 0;
+        return (ipValue & mask) >>> 0 === (baseValue & mask) >>> 0;
+    }
+    // True when `cidr` is a well-formed IPv4 CIDR (or bare address == /32).
+    static isValidCidr(cidr) {
+        if (typeof cidr !== "string" || cidr.trim().length === 0) {
+            return false;
+        }
+        const parts = cidr.trim().split("/");
+        if (parts.length > 2) {
+            return false;
+        }
+        if (CidrMatchUtil.parseIpv4(parts[0] || "") === null) {
+            return false;
+        }
+        if (parts.length === 2) {
+            const prefixText = parts[1] || "";
+            if (!CidrMatchUtil.PREFIX_LENGTH_PATTERN.test(prefixText)) {
+                return false;
+            }
+            const prefixLength = parseInt(prefixText, 10);
+            if (prefixLength < 0 || prefixLength > 32) {
+                return false;
+            }
+        }
+        return true;
+    }
+    /*
+     * Case-insensitive wildcard match where '*' matches any run of characters
+     * (including none) and every other character is literal. The pattern must
+     * cover the whole hostname. Non-string or missing inputs never match, and
+     * so does an over-long pattern.
+     *
+     * Deliberately NOT a regex: compiling a user-authored pattern into
+     * /^.*a.*a.*a...$/ makes the backtracking engine explore an exponential
+     * number of split points on a long homogeneous input, which blocks the
+     * event loop for minutes. This matcher is O(hostname x pattern) worst case
+     * with no recursion, so a hostile rule cannot hang the process.
+     */
+    static hostnameMatchesWildcard(hostname, pattern) {
+        if (typeof hostname !== "string" || typeof pattern !== "string") {
+            return false;
+        }
+        const text = hostname.trim().toLowerCase();
+        const glob = pattern.trim().toLowerCase();
+        if (glob.length > CidrMatchUtil.MAX_HOSTNAME_PATTERN_LENGTH) {
+            return false;
+        }
+        /*
+         * Greedy two-pointer glob match. On a mismatch we rewind only to the
+         * most recent '*' and advance the character it consumed by one, so each
+         * character of the hostname is revisited at most once per '*'.
+         */
+        let textIndex = 0;
+        let globIndex = 0;
+        let lastStarIndex = -1;
+        let textIndexAtLastStar = 0;
+        while (textIndex < text.length) {
+            if (globIndex < glob.length && glob[globIndex] === "*") {
+                lastStarIndex = globIndex;
+                textIndexAtLastStar = textIndex;
+                globIndex++;
+            }
+            else if (globIndex < glob.length &&
+                glob[globIndex] === text[textIndex]) {
+                globIndex++;
+                textIndex++;
+            }
+            else if (lastStarIndex !== -1) {
+                globIndex = lastStarIndex + 1;
+                textIndexAtLastStar++;
+                textIndex = textIndexAtLastStar;
+            }
+            else {
+                return false;
+            }
+        }
+        // Any trailing '*' in the pattern can still match the empty remainder.
+        while (globIndex < glob.length && glob[globIndex] === "*") {
+            globIndex++;
+        }
+        return globIndex === glob.length;
+    }
+    /*
+     * True when the rule's populated criteria all match the target. A CIDR
+     * criterion matches the target's ip; a hostname pattern matches either the
+     * hostname or the SNMP sysName. A rule with no criteria never matches.
+     */
+    static ruleMatches(rule, target) {
+        const hasCidr = Boolean(rule.subnetCidr && rule.subnetCidr.trim().length > 0);
+        const hasPattern = Boolean(rule.hostnamePattern && rule.hostnamePattern.trim().length > 0);
+        if (!hasCidr && !hasPattern) {
+            return false;
+        }
+        if (hasCidr) {
+            if (!target.ip || !CidrMatchUtil.ipInCidr(target.ip, rule.subnetCidr)) {
+                return false;
+            }
+        }
+        if (hasPattern) {
+            const matchesHostname = Boolean(target.hostname &&
+                CidrMatchUtil.hostnameMatchesWildcard(target.hostname, rule.hostnamePattern));
+            const matchesSysName = Boolean(target.sysName &&
+                CidrMatchUtil.hostnameMatchesWildcard(target.sysName, rule.hostnamePattern));
+            if (!matchesHostname && !matchesSysName) {
+                return false;
+            }
+        }
+        return true;
+    }
+    /*
+     * Picks the winning rule for a target: among matching rules the highest
+     * priority number wins; ties go to the earlier createdAt when both rows
+     * carry one, otherwise the earlier rule in the input order (stable).
+     * Returns null when nothing matches.
+     */
+    static pickRule(rules, target) {
+        let best = null;
+        for (const rule of rules) {
+            if (!CidrMatchUtil.ruleMatches(rule, target)) {
+                continue;
+            }
+            if (!best) {
+                best = rule;
+                continue;
+            }
+            const bestPriority = best.priority || 0;
+            const rulePriority = rule.priority || 0;
+            if (rulePriority > bestPriority) {
+                best = rule;
+                continue;
+            }
+            if (rulePriority === bestPriority &&
+                rule.createdAt &&
+                best.createdAt &&
+                rule.createdAt.getTime() < best.createdAt.getTime()) {
+                best = rule;
+            }
+        }
+        return best;
+    }
+    // '10.0.0.1' -> unsigned 32-bit value; anything malformed -> null.
+    static parseIpv4(ip) {
+        if (typeof ip !== "string") {
+            return null;
+        }
+        const octets = ip.trim().split(".");
+        if (octets.length !== 4) {
+            return null;
+        }
+        let value = 0;
+        for (const octetText of octets) {
+            if (!CidrMatchUtil.OCTET_PATTERN.test(octetText)) {
+                return null;
+            }
+            const octet = parseInt(octetText, 10);
+            if (octet > 255) {
+                return null;
+            }
+            value = (value * 256 + octet) >>> 0;
+        }
+        return value;
+    }
+}
+/*
+ * Longest hostname pattern we will evaluate. The column itself is
+ * ShortText (100), and a DNS name tops out at 253 characters, so anything
+ * longer is either a mistake or an attempt to make matching expensive.
+ */
+CidrMatchUtil.MAX_HOSTNAME_PATTERN_LENGTH = 253;
+/*
+ * Hoisted out of the call sites so the literals are not the object of a
+ * member expression, which `wrap-regex` and Prettier cannot agree on.
+ */
+CidrMatchUtil.PREFIX_LENGTH_PATTERN = /^\d{1,2}$/;
+CidrMatchUtil.OCTET_PATTERN = /^\d{1,3}$/;
+export default CidrMatchUtil;
+//# sourceMappingURL=CidrMatchUtil.js.map

package/build/dist/Utils/NetworkSite/CidrMatchUtil.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"CidrMatchUtil.js","sourceRoot":"","sources":["../../../../Utils/NetworkSite/CidrMatchUtil.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAiBH,MAAM,OAAO,aAAa;IAgBxB;;;;OAIG;IACI,MAAM,CAAC,QAAQ,CAAC,EAAU,EAAE,IAAY;QAC7C,MAAM,OAAO,GAAkB,aAAa,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QAC3D,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;YACrB,OAAO,KAAK,CAAC;QACf,CAAC;QAED,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzD,OAAO,KAAK,CAAC;QACf,CAAC;QAED,MAAM,KAAK,GAAkB,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACpD,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACrB,OAAO,KAAK,CAAC;QACf,CAAC;QAED,MAAM,SAAS,GAAkB,aAAa,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QACzE,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;YACvB,OAAO,KAAK,CAAC;QACf,CAAC;QAED,IAAI,YAAY,GAAW,EAAE,CAAC;QAC9B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvB,MAAM,UAAU,GAAW,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YAC1C,IAAI,CAAC,aAAa,CAAC,qBAAqB,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;gBAC1D,OAAO,KAAK,CAAC;YACf,CAAC;YACD,YAAY,GAAG,QAAQ,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;YACxC,IAAI,YAAY,GAAG,CAAC,IAAI,YAAY,GAAG,EAAE,EAAE,CAAC;gBAC1C,OAAO,KAAK,CAAC;YACf,CAAC;QACH,CAAC;QAED;;;;WAIG;QACH,MAAM,IAAI,GACR,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,IAAI,CAAC,EAAE,GAAG,YAAY,CAAC,CAAC,KAAK,CAAC,CAAC;QAErE,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;IAC7D,CAAC;IAED,wEAAwE;IACjE,MAAM,CAAC,WAAW,CAAC,IAAY;QACpC,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzD,OAAO,KAAK,CAAC;QACf,CAAC;QACD,MAAM,KAAK,GAAkB,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACpD,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACrB,OAAO,KAAK,CAAC;QACf,CAAC;QACD,IAAI,aAAa,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC;YACrD,OAAO,KAAK,CAAC;QACf,CAAC;QACD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvB,MAAM,UAAU,GAAW,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YAC1C,IAAI,CAAC,aAAa,CAAC,qBAAqB,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;gBAC1D,OAAO,KAAK,CAAC;YACf,CAAC;YACD,MAAM,YAAY,GAAW,QAAQ,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;YACtD,IAAI,YAAY,GAAG,CAAC,IAAI,YAAY,GAAG,EAAE,EAAE,CAAC;gBAC1C,OAAO,KAAK,CAAC;YACf,CAAC;QACH,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;;;;;;;;;;OAWG;IACI,MAAM,CAAC,uBAAuB,CACnC,QAAgB,EAChB,OAAe;QAEf,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;YAChE,OAAO,KAAK,CAAC;QACf,CAAC;QAED,MAAM,IAAI,GAAW,QAAQ,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACnD,MAAM,IAAI,GAAW,OAAO,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAElD,IAAI,IAAI,CAAC,MAAM,GAAG,aAAa,CAAC,2BAA2B,EAAE,CAAC;YAC5D,OAAO,KAAK,CAAC;QACf,CAAC;QAED;;;;WAIG;QACH,IAAI,SAAS,GAAW,CAAC,CAAC;QAC1B,IAAI,SAAS,GAAW,CAAC,CAAC;QAC1B,IAAI,aAAa,GAAW,CAAC,CAAC,CAAC;QAC/B,IAAI,mBAAmB,GAAW,CAAC,CAAC;QAEpC,OAAO,SAAS,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;YAC/B,IAAI,SAAS,GAAG,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,SAAS,CAAC,KAAK,GAAG,EAAE,CAAC;gBACvD,aAAa,GAAG,SAAS,CAAC;gBAC1B,mBAAmB,GAAG,SAAS,CAAC;gBAChC,SAAS,EAAE,CAAC;YACd,CAAC;iBAAM,IACL,SAAS,GAAG,IAAI,CAAC,MAAM;gBACvB,IAAI,CAAC,SAAS,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,EACnC,CAAC;gBACD,SAAS,EAAE,CAAC;gBACZ,SAAS,EAAE,CAAC;YACd,CAAC;iBAAM,IAAI,aAAa,KAAK,CAAC,CAAC,EAAE,CAAC;gBAChC,SAAS,GAAG,aAAa,GAAG,CAAC,CAAC;gBAC9B,mBAAmB,EAAE,CAAC;gBACtB,SAAS,GAAG,mBAAmB,CAAC;YAClC,CAAC;iBAAM,CAAC;gBACN,OAAO,KAAK,CAAC;YACf,CAAC;QACH,CAAC;QAED,uEAAuE;QACvE,OAAO,SAAS,GAAG,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,SAAS,CAAC,KAAK,GAAG,EAAE,CAAC;YAC1D,SAAS,EAAE,CAAC;QACd,CAAC;QAED,OAAO,SAAS,KAAK,IAAI,CAAC,MAAM,CAAC;IACnC,CAAC;IAED;;;;OAIG;IACI,MAAM,CAAC,WAAW,CACvB,IAA6B,EAC7B,MAAuB;QAEvB,MAAM,OAAO,GAAY,OAAO,CAC9B,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CACrD,CAAC;QACF,MAAM,UAAU,GAAY,OAAO,CACjC,IAAI,CAAC,eAAe,IAAI,IAAI,CAAC,eAAe,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAC/D,CAAC;QAEF,IAAI,CAAC,OAAO,IAAI,CAAC,UAAU,EAAE,CAAC;YAC5B,OAAO,KAAK,CAAC;QACf,CAAC;QAED,IAAI,OAAO,EAAE,CAAC;YACZ,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,EAAE,IAAI,CAAC,UAAW,CAAC,EAAE,CAAC;gBACvE,OAAO,KAAK,CAAC;YACf,CAAC;QACH,CAAC;QAED,IAAI,UAAU,EAAE,CAAC;YACf,MAAM,eAAe,GAAY,OAAO,CACtC,MAAM,CAAC,QAAQ;gBACb,aAAa,CAAC,uBAAuB,CACnC,MAAM,CAAC,QAAQ,EACf,IAAI,CAAC,eAAgB,CACtB,CACJ,CAAC;YACF,MAAM,cAAc,GAAY,OAAO,CACrC,MAAM,CAAC,OAAO;gBACZ,aAAa,CAAC,uBAAuB,CACnC,MAAM,CAAC,OAAO,EACd,IAAI,CAAC,eAAgB,CACtB,CACJ,CAAC;YACF,IAAI,CAAC,eAAe,IAAI,CAAC,cAAc,EAAE,CAAC;gBACxC,OAAO,KAAK,CAAC;YACf,CAAC;QACH,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;;;;OAKG;IACI,MAAM,CAAC,QAAQ,CACpB,KAAe,EACf,MAAuB;QAEvB,IAAI,IAAI,GAAa,IAAI,CAAC;QAE1B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,CAAC,aAAa,CAAC,WAAW,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC;gBAC7C,SAAS;YACX,CAAC;YAED,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,IAAI,GAAG,IAAI,CAAC;gBACZ,SAAS;YACX,CAAC;YAED,MAAM,YAAY,GAAW,IAAI,CAAC,QAAQ,IAAI,CAAC,CAAC;YAChD,MAAM,YAAY,GAAW,IAAI,CAAC,QAAQ,IAAI,CAAC,CAAC;YAEhD,IAAI,YAAY,GAAG,YAAY,EAAE,CAAC;gBAChC,IAAI,GAAG,IAAI,CAAC;gBACZ,SAAS;YACX,CAAC;YAED,IACE,YAAY,KAAK,YAAY;gBAC7B,IAAI,CAAC,SAAS;gBACd,IAAI,CAAC,SAAS;gBACd,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,EACnD,CAAC;gBACD,IAAI,GAAG,IAAI,CAAC;YACd,CAAC;QACH,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAED,mEAAmE;IAC3D,MAAM,CAAC,SAAS,CAAC,EAAU;QACjC,IAAI,OAAO,EAAE,KAAK,QAAQ,EAAE,CAAC;YAC3B,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,MAAM,GAAkB,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACnD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACxB,OAAO,IAAI,CAAC;QACd,CAAC;QAED,IAAI,KAAK,GAAW,CAAC,CAAC;QACtB,KAAK,MAAM,SAAS,IAAI,MAAM,EAAE,CAAC;YAC/B,IAAI,CAAC,aAAa,CAAC,aAAa,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;gBACjD,OAAO,IAAI,CAAC;YACd,CAAC;YACD,MAAM,KAAK,GAAW,QAAQ,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;YAC9C,IAAI,KAAK,GAAG,GAAG,EAAE,CAAC;gBAChB,OAAO,IAAI,CAAC;YACd,CAAC;YACD,KAAK,GAAG,CAAC,KAAK,GAAG,GAAG,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;QACtC,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;;AA7QD;;;;GAIG;AACoB,yCAA2B,GAAW,GAAG,CAAC;AAEjE;;;GAGG;AACqB,mCAAqB,GAAW,WAAW,CAAC;AAE5C,2BAAa,GAAW,WAAW,CAAC;AAmQ9D,eAAe,aAAa,CAAC"}

package/build/dist/Utils/NetworkSite/MaterializedPathUtil.js

@@ -0,0 +1,89 @@
+/*
+ * Materialized-path helpers for the NetworkSite hierarchy.
+ *
+ * A site's path is the slash-separated list of its ancestor IDs ending with
+ * its own ID, in '/rootId/childId/.../ownId/' form. Root sites have the path
+ * '/ownId/'. All helpers are pure string operations so the tree math is
+ * unit-testable without a database.
+ */
+export class MaterializedPathUtil {
+    /*
+     * Builds the path for a site given its parent's path (null/undefined/empty
+     * for root sites). Tolerates a parent path missing its leading or trailing
+     * slash so a hand-edited row cannot poison every child path built from it.
+     */
+    static buildPath(parentPath, siteId) {
+        const normalizedParent = MaterializedPathUtil.normalizePath(parentPath || "");
+        return `${normalizedParent || "/"}${siteId}/`;
+    }
+    // '/a/b/' -> ['a', 'b']; invalid/empty input -> [].
+    static segmentsOf(path) {
+        if (!path || typeof path !== "string") {
+            return [];
+        }
+        return path.split("/").filter((segment) => {
+            return segment.length > 0;
+        });
+    }
+    /*
+     * Number of ancestors above the site this path belongs to: '/a/' -> 0,
+     * '/a/b/' -> 1. Empty/invalid paths report 0.
+     */
+    static depthOf(path) {
+        const segments = MaterializedPathUtil.segmentsOf(path);
+        return segments.length > 0 ? segments.length - 1 : 0;
+    }
+    /*
+     * True when `path` belongs to a strict descendant of the site that owns
+     * `ancestorPath` (a site is not its own descendant).
+     */
+    static isDescendant(path, ancestorPath) {
+        if (!path || !ancestorPath) {
+            return false;
+        }
+        const normalizedPath = MaterializedPathUtil.normalizePath(path);
+        const normalizedAncestor = MaterializedPathUtil.normalizePath(ancestorPath);
+        return (normalizedPath.startsWith(normalizedAncestor) &&
+            normalizedPath !== normalizedAncestor);
+    }
+    /*
+     * True when making the site with `siteId` a child of the site whose path is
+     * `newParentPath` would create a cycle - i.e. the proposed parent is the
+     * site itself or one of its descendants (its own ID appears anywhere in the
+     * parent's path). A null/empty parent path (becoming a root) can never
+     * create a cycle.
+     */
+    static wouldCreateCycle(siteId, newParentPath) {
+        if (!siteId || !newParentPath) {
+            return false;
+        }
+        const segments = MaterializedPathUtil.segmentsOf(newParentPath);
+        return segments.includes(siteId);
+    }
+    /*
+     * Rewrites subtree paths for a move: every affected path that starts with
+     * `oldParentPath` gets that prefix replaced with `newParentPath`. Paths
+     * outside the moved subtree are returned unchanged, in input order.
+     */
+    static rebasePaths(oldParentPath, newParentPath, affectedPaths) {
+        const oldPrefix = MaterializedPathUtil.normalizePath(oldParentPath);
+        const newPrefix = MaterializedPathUtil.normalizePath(newParentPath);
+        return affectedPaths.map((path) => {
+            const normalized = MaterializedPathUtil.normalizePath(path);
+            if (!oldPrefix || !normalized.startsWith(oldPrefix)) {
+                return path;
+            }
+            return `${newPrefix}${normalized.slice(oldPrefix.length)}`;
+        });
+    }
+    // Ensures '/a/b/' form: leading + trailing slash, no empty segments.
+    static normalizePath(path) {
+        const segments = MaterializedPathUtil.segmentsOf(path);
+        if (segments.length === 0) {
+            return "";
+        }
+        return `/${segments.join("/")}/`;
+    }
+}
+export default MaterializedPathUtil;
+//# sourceMappingURL=MaterializedPathUtil.js.map

package/build/dist/Utils/NetworkSite/MaterializedPathUtil.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"MaterializedPathUtil.js","sourceRoot":"","sources":["../../../../Utils/NetworkSite/MaterializedPathUtil.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,MAAM,OAAO,oBAAoB;IAC/B;;;;OAIG;IACI,MAAM,CAAC,SAAS,CACrB,UAAqC,EACrC,MAAc;QAEd,MAAM,gBAAgB,GAAW,oBAAoB,CAAC,aAAa,CACjE,UAAU,IAAI,EAAE,CACjB,CAAC;QACF,OAAO,GAAG,gBAAgB,IAAI,GAAG,GAAG,MAAM,GAAG,CAAC;IAChD,CAAC;IAED,oDAAoD;IAC7C,MAAM,CAAC,UAAU,CAAC,IAA+B;QACtD,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;YACtC,OAAO,EAAE,CAAC;QACZ,CAAC;QACD,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,OAAe,EAAE,EAAE;YAChD,OAAO,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC;QAC5B,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;;OAGG;IACI,MAAM,CAAC,OAAO,CAAC,IAA+B;QACnD,MAAM,QAAQ,GAAkB,oBAAoB,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QACtE,OAAO,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACvD,CAAC;IAED;;;OAGG;IACI,MAAM,CAAC,YAAY,CACxB,IAA+B,EAC/B,YAAuC;QAEvC,IAAI,CAAC,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;YAC3B,OAAO,KAAK,CAAC;QACf,CAAC;QACD,MAAM,cAAc,GAAW,oBAAoB,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC;QACxE,MAAM,kBAAkB,GACtB,oBAAoB,CAAC,aAAa,CAAC,YAAY,CAAC,CAAC;QACnD,OAAO,CACL,cAAc,CAAC,UAAU,CAAC,kBAAkB,CAAC;YAC7C,cAAc,KAAK,kBAAkB,CACtC,CAAC;IACJ,CAAC;IAED;;;;;;OAMG;IACI,MAAM,CAAC,gBAAgB,CAC5B,MAAc,EACd,aAAwC;QAExC,IAAI,CAAC,MAAM,IAAI,CAAC,aAAa,EAAE,CAAC;YAC9B,OAAO,KAAK,CAAC;QACf,CAAC;QACD,MAAM,QAAQ,GACZ,oBAAoB,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;QACjD,OAAO,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACnC,CAAC;IAED;;;;OAIG;IACI,MAAM,CAAC,WAAW,CACvB,aAAqB,EACrB,aAAqB,EACrB,aAA4B;QAE5B,MAAM,SAAS,GAAW,oBAAoB,CAAC,aAAa,CAAC,aAAa,CAAC,CAAC;QAC5E,MAAM,SAAS,GAAW,oBAAoB,CAAC,aAAa,CAAC,aAAa,CAAC,CAAC;QAE5E,OAAO,aAAa,CAAC,GAAG,CAAC,CAAC,IAAY,EAAE,EAAE;YACxC,MAAM,UAAU,GAAW,oBAAoB,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC;YACpE,IAAI,CAAC,SAAS,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;gBACpD,OAAO,IAAI,CAAC;YACd,CAAC;YACD,OAAO,GAAG,SAAS,GAAG,UAAU,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC;QAC7D,CAAC,CAAC,CAAC;IACL,CAAC;IAED,qEAAqE;IAC7D,MAAM,CAAC,aAAa,CAAC,IAAY;QACvC,MAAM,QAAQ,GAAkB,oBAAoB,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QACtE,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC1B,OAAO,EAAE,CAAC;QACZ,CAAC;QACD,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IACnC,CAAC;CACF;AAED,eAAe,oBAAoB,CAAC"}

package/build/dist/Utils/NetworkSite/SiteStatusRollupUtil.js

@@ -0,0 +1,60 @@
+/*
+ * Worst-of health rollup for a NetworkSite's device subtree.
+ *
+ * Each device contributes one MonitorStatus candidate and the highest
+ * priority number wins - MonitorStatus.priority is HIGHER = WORSE per the
+ * seeded rows (Operational 1 ... Offline 3), regardless of what the column
+ * docstring claims. Pure so the whole decision matrix is unit-testable.
+ */
+export class SiteStatusRollupUtil {
+    /*
+     * Returns the winning MonitorStatus id for a set of devices, or null when
+     * no device contributes anything (empty subtree, or freshness fallbacks
+     * unavailable because the project has no operational/offline rows) - the
+     * caller treats null as "leave the site's status untouched".
+     *
+     * Per device: a stamped monitor status (with a known priority) wins;
+     * otherwise lastSeenAt within the freshness window maps to the project's
+     * isOperationalState row and anything staler (or never seen) maps to the
+     * isOfflineState row. Priority ties keep the first contributor (stable).
+     */
+    static worstStatus(data) {
+        var _a;
+        const now = data.now || new Date();
+        const windowInMinutes = (_a = data.freshnessWindowInMinutes) !== null && _a !== void 0 ? _a : SiteStatusRollupUtil.DEFAULT_FRESHNESS_WINDOW_IN_MINUTES;
+        const windowInMs = windowInMinutes * 60 * 1000;
+        let winner = null;
+        for (const device of data.deviceStates) {
+            let candidate = null;
+            if (device.currentMonitorStatusId &&
+                typeof device.monitorStatusPriority === "number" &&
+                Number.isFinite(device.monitorStatusPriority)) {
+                candidate = {
+                    monitorStatusId: device.currentMonitorStatusId,
+                    priority: device.monitorStatusPriority,
+                };
+            }
+            else {
+                const lastSeenAtInMs = device.lastSeenAt
+                    ? new Date(device.lastSeenAt).getTime()
+                    : null;
+                const isFresh = lastSeenAtInMs !== null &&
+                    now.getTime() - lastSeenAtInMs <= windowInMs;
+                candidate = isFresh
+                    ? data.operationalStatus || null
+                    : data.offlineStatus || null;
+            }
+            if (!candidate) {
+                continue;
+            }
+            if (!winner || candidate.priority > winner.priority) {
+                winner = candidate;
+            }
+        }
+        return winner ? winner.monitorStatusId : null;
+    }
+}
+// A device is considered alive when SNMP data arrived within this window.
+SiteStatusRollupUtil.DEFAULT_FRESHNESS_WINDOW_IN_MINUTES = 15;
+export default SiteStatusRollupUtil;
+//# sourceMappingURL=SiteStatusRollupUtil.js.map

package/build/dist/Utils/NetworkSite/SiteStatusRollupUtil.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"SiteStatusRollupUtil.js","sourceRoot":"","sources":["../../../../Utils/NetworkSite/SiteStatusRollupUtil.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAqBH,MAAM,OAAO,oBAAoB;IAI/B;;;;;;;;;;OAUG;IACI,MAAM,CAAC,WAAW,CAAC,IAMzB;;QACC,MAAM,GAAG,GAAS,IAAI,CAAC,GAAG,IAAI,IAAI,IAAI,EAAE,CAAC;QACzC,MAAM,eAAe,GACnB,MAAA,IAAI,CAAC,wBAAwB,mCAC7B,oBAAoB,CAAC,mCAAmC,CAAC;QAC3D,MAAM,UAAU,GAAW,eAAe,GAAG,EAAE,GAAG,IAAI,CAAC;QAEvD,IAAI,MAAM,GAA8B,IAAI,CAAC;QAE7C,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;YACvC,IAAI,SAAS,GAA8B,IAAI,CAAC;YAEhD,IACE,MAAM,CAAC,sBAAsB;gBAC7B,OAAO,MAAM,CAAC,qBAAqB,KAAK,QAAQ;gBAChD,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,qBAAqB,CAAC,EAC7C,CAAC;gBACD,SAAS,GAAG;oBACV,eAAe,EAAE,MAAM,CAAC,sBAAsB;oBAC9C,QAAQ,EAAE,MAAM,CAAC,qBAAqB;iBACvC,CAAC;YACJ,CAAC;iBAAM,CAAC;gBACN,MAAM,cAAc,GAAkB,MAAM,CAAC,UAAU;oBACrD,CAAC,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,OAAO,EAAE;oBACvC,CAAC,CAAC,IAAI,CAAC;gBACT,MAAM,OAAO,GACX,cAAc,KAAK,IAAI;oBACvB,GAAG,CAAC,OAAO,EAAE,GAAG,cAAc,IAAI,UAAU,CAAC;gBAE/C,SAAS,GAAG,OAAO;oBACjB,CAAC,CAAC,IAAI,CAAC,iBAAiB,IAAI,IAAI;oBAChC,CAAC,CAAC,IAAI,CAAC,aAAa,IAAI,IAAI,CAAC;YACjC,CAAC;YAED,IAAI,CAAC,SAAS,EAAE,CAAC;gBACf,SAAS;YACX,CAAC;YAED,IAAI,CAAC,MAAM,IAAI,SAAS,CAAC,QAAQ,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAC;gBACpD,MAAM,GAAG,SAAS,CAAC;YACrB,CAAC;QACH,CAAC;QAED,OAAO,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC;IAChD,CAAC;;AAhED,0EAA0E;AACnD,wDAAmC,GAAW,EAAE,CAAC;AAkE1E,eAAe,oBAAoB,CAAC"}

package/build/dist/Utils/NetworkSite/SiteUptimeUtil.js

@@ -0,0 +1,76 @@
+/*
+ * Uptime percentage over a NetworkSiteStatusTimeline window.
+ *
+ * Every row whose status is not flagged operational counts as downtime.
+ * Rows are clamped to the window, an open row (endsAt null) extends to the
+ * window end, and overlapping down rows are merged so no second is counted
+ * twice. Time not covered by any row counts as up - the timeline only gains
+ * rows once a rollup has run, and absence of evidence is not an outage.
+ */
+export class SiteUptimeUtil {
+    /*
+     * Percent of [windowStart, windowEnd) the site was NOT in a
+     * non-operational status. Returns 100 for an empty or inverted window.
+     * The result is exact (not rounded) and clamped to 0..100.
+     */
+    static calculateUptimePercent(rows, windowStart, windowEnd) {
+        const windowStartInMs = windowStart.getTime();
+        const windowEndInMs = windowEnd.getTime();
+        const windowInMs = windowEndInMs - windowStartInMs;
+        if (!Number.isFinite(windowInMs) || windowInMs <= 0) {
+            return 100;
+        }
+        const downIntervals = [];
+        for (const row of rows) {
+            if (row.isOperationalState) {
+                continue;
+            }
+            const rowStartInMs = new Date(row.startsAt).getTime();
+            const rowEndInMs = row.endsAt
+                ? new Date(row.endsAt).getTime()
+                : windowEndInMs;
+            if (!Number.isFinite(rowStartInMs) || !Number.isFinite(rowEndInMs)) {
+                continue;
+            }
+            const clampedStartInMs = Math.max(rowStartInMs, windowStartInMs);
+            const clampedEndInMs = Math.min(rowEndInMs, windowEndInMs);
+            if (clampedEndInMs <= clampedStartInMs) {
+                continue;
+            }
+            downIntervals.push({
+                startInMs: clampedStartInMs,
+                endInMs: clampedEndInMs,
+            });
+        }
+        const downInMs = SiteUptimeUtil.totalCoveredMs(downIntervals);
+        const uptimePercent = ((windowInMs - downInMs) / windowInMs) * 100;
+        return Math.min(100, Math.max(0, uptimePercent));
+    }
+    // Sum of interval lengths after merging overlaps.
+    static totalCoveredMs(intervals) {
+        if (intervals.length === 0) {
+            return 0;
+        }
+        const sorted = [...intervals].sort((a, b) => {
+            return a.startInMs - b.startInMs;
+        });
+        let totalInMs = 0;
+        let currentStartInMs = sorted[0].startInMs;
+        let currentEndInMs = sorted[0].endInMs;
+        for (let i = 1; i < sorted.length; i++) {
+            const interval = sorted[i];
+            if (interval.startInMs <= currentEndInMs) {
+                currentEndInMs = Math.max(currentEndInMs, interval.endInMs);
+            }
+            else {
+                totalInMs += currentEndInMs - currentStartInMs;
+                currentStartInMs = interval.startInMs;
+                currentEndInMs = interval.endInMs;
+            }
+        }
+        totalInMs += currentEndInMs - currentStartInMs;
+        return totalInMs;
+    }
+}
+export default SiteUptimeUtil;
+//# sourceMappingURL=SiteUptimeUtil.js.map

package/build/dist/Utils/NetworkSite/SiteUptimeUtil.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"SiteUptimeUtil.js","sourceRoot":"","sources":["../../../../Utils/NetworkSite/SiteUptimeUtil.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAgBH,MAAM,OAAO,cAAc;IACzB;;;;OAIG;IACI,MAAM,CAAC,sBAAsB,CAClC,IAAkC,EAClC,WAAiB,EACjB,SAAe;QAEf,MAAM,eAAe,GAAW,WAAW,CAAC,OAAO,EAAE,CAAC;QACtD,MAAM,aAAa,GAAW,SAAS,CAAC,OAAO,EAAE,CAAC;QAClD,MAAM,UAAU,GAAW,aAAa,GAAG,eAAe,CAAC;QAE3D,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,UAAU,IAAI,CAAC,EAAE,CAAC;YACpD,OAAO,GAAG,CAAC;QACb,CAAC;QAED,MAAM,aAAa,GAAwB,EAAE,CAAC;QAE9C,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,IAAI,GAAG,CAAC,kBAAkB,EAAE,CAAC;gBAC3B,SAAS;YACX,CAAC;YAED,MAAM,YAAY,GAAW,IAAI,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,OAAO,EAAE,CAAC;YAC9D,MAAM,UAAU,GAAW,GAAG,CAAC,MAAM;gBACnC,CAAC,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE;gBAChC,CAAC,CAAC,aAAa,CAAC;YAElB,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;gBACnE,SAAS;YACX,CAAC;YAED,MAAM,gBAAgB,GAAW,IAAI,CAAC,GAAG,CAAC,YAAY,EAAE,eAAe,CAAC,CAAC;YACzE,MAAM,cAAc,GAAW,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC;YAEnE,IAAI,cAAc,IAAI,gBAAgB,EAAE,CAAC;gBACvC,SAAS;YACX,CAAC;YAED,aAAa,CAAC,IAAI,CAAC;gBACjB,SAAS,EAAE,gBAAgB;gBAC3B,OAAO,EAAE,cAAc;aACxB,CAAC,CAAC;QACL,CAAC;QAED,MAAM,QAAQ,GAAW,cAAc,CAAC,cAAc,CAAC,aAAa,CAAC,CAAC;QAEtE,MAAM,aAAa,GAAW,CAAC,CAAC,UAAU,GAAG,QAAQ,CAAC,GAAG,UAAU,CAAC,GAAG,GAAG,CAAC;QAC3E,OAAO,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,aAAa,CAAC,CAAC,CAAC;IACnD,CAAC;IAED,kDAAkD;IAC1C,MAAM,CAAC,cAAc,CAAC,SAA8B;QAC1D,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC3B,OAAO,CAAC,CAAC;QACX,CAAC;QAED,MAAM,MAAM,GAAwB,CAAC,GAAG,SAAS,CAAC,CAAC,IAAI,CACrD,CAAC,CAAe,EAAE,CAAe,EAAE,EAAE;YACnC,OAAO,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC,SAAS,CAAC;QACnC,CAAC,CACF,CAAC;QAEF,IAAI,SAAS,GAAW,CAAC,CAAC;QAC1B,IAAI,gBAAgB,GAAW,MAAM,CAAC,CAAC,CAAE,CAAC,SAAS,CAAC;QACpD,IAAI,cAAc,GAAW,MAAM,CAAC,CAAC,CAAE,CAAC,OAAO,CAAC;QAEhD,KAAK,IAAI,CAAC,GAAW,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YAC/C,MAAM,QAAQ,GAAiB,MAAM,CAAC,CAAC,CAAE,CAAC;YAC1C,IAAI,QAAQ,CAAC,SAAS,IAAI,cAAc,EAAE,CAAC;gBACzC,cAAc,GAAG,IAAI,CAAC,GAAG,CAAC,cAAc,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC;YAC9D,CAAC;iBAAM,CAAC;gBACN,SAAS,IAAI,cAAc,GAAG,gBAAgB,CAAC;gBAC/C,gBAAgB,GAAG,QAAQ,CAAC,SAAS,CAAC;gBACtC,cAAc,GAAG,QAAQ,CAAC,OAAO,CAAC;YACpC,CAAC;QACH,CAAC;QAED,SAAS,IAAI,cAAc,GAAG,gBAAgB,CAAC;QAC/C,OAAO,SAAS,CAAC;IACnB,CAAC;CACF;AAED,eAAe,cAAc,CAAC"}

package/build/dist/Utils/Slo/SloStatusColor.js

@@ -0,0 +1,18 @@
+import { Gray500, Green, Red, Yellow } from "../../Types/BrandColors";
+import SloStatus from "../../Types/ServiceLevelObjective/SloStatus";
+export const getSloStatusColor = (status) => {
+    if (status === SloStatus.Healthy) {
+        return Green;
+    }
+    if (status === SloStatus.AtRisk) {
+        return Yellow;
+    }
+    if (status === SloStatus.BudgetExhausted) {
+        return Red;
+    }
+    return Gray500;
+};
+export const getSloStatusText = (status) => {
+    return status || "Unknown";
+};
+//# sourceMappingURL=SloStatusColor.js.map

package/build/dist/Utils/Slo/SloStatusColor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"SloStatusColor.js","sourceRoot":"","sources":["../../../../Utils/Slo/SloStatusColor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,yBAAyB,CAAC;AAEtE,OAAO,SAAS,MAAM,6CAA6C,CAAC;AAoBpE,MAAM,CAAC,MAAM,iBAAiB,GAA8B,CAC1D,MAAoC,EAC7B,EAAE;IACT,IAAI,MAAM,KAAK,SAAS,CAAC,OAAO,EAAE,CAAC;QACjC,OAAO,KAAK,CAAC;IACf,CAAC;IAED,IAAI,MAAM,KAAK,SAAS,CAAC,MAAM,EAAE,CAAC;QAChC,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,IAAI,MAAM,KAAK,SAAS,CAAC,eAAe,EAAE,CAAC;QACzC,OAAO,GAAG,CAAC;IACb,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC,CAAC;AAWF,MAAM,CAAC,MAAM,gBAAgB,GAA6B,CACxD,MAAoC,EAC5B,EAAE;IACV,OAAO,MAAM,IAAI,SAAS,CAAC;AAC7B,CAAC,CAAC"}