@oneuptime/common 12.0.15 → 12.0.17

package/build/dist/Models/DatabaseModels/DetectionRule.js

@@ -0,0 +1,598 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+import Project from "./Project";
+import User from "./User";
+import AlertSeverity from "./AlertSeverity";
+import IncidentSeverity from "./IncidentSeverity";
+import BaseModel from "./DatabaseBaseModel/DatabaseBaseModel";
+import Route from "../../Types/API/Route";
+import ColumnAccessControl from "../../Types/Database/AccessControl/ColumnAccessControl";
+import TableAccessControl from "../../Types/Database/AccessControl/TableAccessControl";
+import TableBillingAccessControl from "../../Types/Database/AccessControl/TableBillingAccessControl";
+import ColumnLength from "../../Types/Database/ColumnLength";
+import ColumnType from "../../Types/Database/ColumnType";
+import CrudApiEndpoint from "../../Types/Database/CrudApiEndpoint";
+import EnableDocumentation from "../../Types/Database/EnableDocumentation";
+import EnableWorkflow from "../../Types/Database/EnableWorkflow";
+import TableColumn from "../../Types/Database/TableColumn";
+import TableColumnType from "../../Types/Database/TableColumnType";
+import TableMetadata from "../../Types/Database/TableMetadata";
+import TenantColumn from "../../Types/Database/TenantColumn";
+import IconProp from "../../Types/Icon/IconProp";
+import ObjectID from "../../Types/ObjectID";
+import Permission from "../../Types/Permission";
+import { PlanType } from "../../Types/Billing/SubscriptionPlan";
+import { Column, Entity, Index, JoinColumn, ManyToOne } from "typeorm";
+const createPermissions = [
+    Permission.ProjectOwner,
+    Permission.ProjectAdmin,
+    Permission.CreateProjectDetectionRule,
+];
+const readPermissions = [
+    Permission.ProjectOwner,
+    Permission.ProjectAdmin,
+    Permission.ProjectMember,
+    Permission.Viewer,
+    Permission.TelemetryAdmin,
+    Permission.TelemetryMember,
+    Permission.TelemetryViewer,
+    Permission.ReadProjectDetectionRule,
+];
+const updatePermissions = [
+    Permission.ProjectOwner,
+    Permission.ProjectAdmin,
+    Permission.EditProjectDetectionRule,
+];
+/*
+ * Detections-as-code: a Sigma rule evaluated on a schedule against the
+ * SecurityEvent ClickHouse table. Matches open Alerts (deduped per rule +
+ * group-by fingerprint) and, optionally, write a Detection Finding row
+ * back into the security events table so detections are themselves
+ * queryable signals.
+ */
+let DetectionRule = class DetectionRule extends BaseModel {
+    constructor() {
+        super(...arguments);
+        this.project = undefined;
+        this.projectId = undefined;
+        this.name = undefined;
+        this.description = undefined;
+        this.sigmaRuleYaml = undefined;
+        this.isEnabled = undefined;
+        this.evaluationIntervalInMinutes = undefined;
+        this.groupByField = undefined;
+        this.shouldCreateAlert = undefined;
+        this.shouldWriteDetectionFinding = undefined;
+        /*
+         * Default FALSE, unlike shouldCreateAlert. An incident is the heavy
+         * machinery — workspace channels, SLAs, on-call escalation, status-page
+         * visibility — and a rule imported from a community Sigma pack must not
+         * open one per match group unless somebody chose that. The evaluator
+         * gates on === true for the same reason: an unset column must read as
+         * off, not as "probably on".
+         */
+        this.shouldCreateIncident = undefined;
+        this.alertSeverity = undefined;
+        this.alertSeverityId = undefined;
+        this.incidentSeverity = undefined;
+        this.incidentSeverityId = undefined;
+        /*
+         * Evaluator-owned state. Written only by the detection engine cron,
+         * never by users.
+         */
+        this.lastEvaluatedAt = undefined;
+        this.lastMatchAt = undefined;
+        this.lastError = undefined;
+        this.createdByUser = undefined;
+        this.createdByUserId = undefined;
+        this.deletedByUser = undefined;
+        this.deletedByUserId = undefined;
+    }
+};
+__decorate([
+    ColumnAccessControl({
+        create: createPermissions,
+        read: readPermissions,
+        update: [],
+    }),
+    TableColumn({
+        manyToOneRelationColumn: "projectId",
+        type: TableColumnType.Entity,
+        modelType: Project,
+        title: "Project",
+        description: "Relation to the project this detection rule belongs to.",
+    }),
+    ManyToOne(() => {
+        return Project;
+    }, {
+        eager: false,
+        nullable: true,
+        onDelete: "CASCADE",
+        orphanedRowAction: "nullify",
+    }),
+    JoinColumn({ name: "projectId" }),
+    __metadata("design:type", Project)
+], DetectionRule.prototype, "project", void 0);
+__decorate([
+    ColumnAccessControl({
+        create: createPermissions,
+        read: readPermissions,
+        update: [],
+    }),
+    Index(),
+    TableColumn({
+        type: TableColumnType.ObjectID,
+        required: true,
+        canReadOnRelationQuery: true,
+        title: "Project ID",
+        description: "ID of the project this detection rule belongs to.",
+    }),
+    Column({
+        type: ColumnType.ObjectID,
+        nullable: false,
+        transformer: ObjectID.getDatabaseTransformer(),
+    }),
+    __metadata("design:type", ObjectID)
+], DetectionRule.prototype, "projectId", void 0);
+__decorate([
+    ColumnAccessControl({
+        create: createPermissions,
+        read: readPermissions,
+        update: updatePermissions,
+    }),
+    TableColumn({
+        required: true,
+        type: TableColumnType.Name,
+        canReadOnRelationQuery: true,
+        title: "Name",
+        description: "Friendly name for this detection rule.",
+    }),
+    Column({
+        nullable: false,
+        type: ColumnType.Name,
+        length: ColumnLength.Name,
+    }),
+    __metadata("design:type", String)
+], DetectionRule.prototype, "name", void 0);
+__decorate([
+    ColumnAccessControl({
+        create: createPermissions,
+        read: readPermissions,
+        update: updatePermissions,
+    }),
+    TableColumn({
+        required: false,
+        type: TableColumnType.LongText,
+        canReadOnRelationQuery: true,
+        title: "Description",
+        description: "Description of what this detection rule looks for.",
+    }),
+    Column({
+        nullable: true,
+        type: ColumnType.LongText,
+        length: ColumnLength.LongText,
+    }),
+    __metadata("design:type", String)
+], DetectionRule.prototype, "description", void 0);
+__decorate([
+    ColumnAccessControl({
+        create: createPermissions,
+        read: readPermissions,
+        update: updatePermissions,
+    }),
+    TableColumn({
+        required: true,
+        type: TableColumnType.VeryLongText,
+        title: "Sigma Rule (YAML)",
+        description: "The Sigma rule to evaluate, in YAML. detection selections and condition are compiled to a ClickHouse query over security events.",
+    }),
+    Column({
+        nullable: false,
+        type: ColumnType.VeryLongText,
+    }),
+    __metadata("design:type", String)
+], DetectionRule.prototype, "sigmaRuleYaml", void 0);
+__decorate([
+    ColumnAccessControl({
+        create: createPermissions,
+        read: readPermissions,
+        update: updatePermissions,
+    }),
+    Index(),
+    TableColumn({
+        required: true,
+        type: TableColumnType.Boolean,
+        canReadOnRelationQuery: true,
+        title: "Enabled",
+        description: "Whether this detection rule is evaluated.",
+        defaultValue: true,
+    }),
+    Column({
+        nullable: false,
+        type: ColumnType.Boolean,
+        default: true,
+    }),
+    __metadata("design:type", Boolean)
+], DetectionRule.prototype, "isEnabled", void 0);
+__decorate([
+    ColumnAccessControl({
+        create: createPermissions,
+        read: readPermissions,
+        update: updatePermissions,
+    }),
+    TableColumn({
+        title: "Evaluation Interval (Minutes)",
+        required: true,
+        type: TableColumnType.Number,
+        canReadOnRelationQuery: true,
+        description: "How often this rule is evaluated, in minutes. The evaluation window covers the time since the previous evaluation.",
+        defaultValue: 1,
+    }),
+    Column({
+        type: ColumnType.Number,
+        nullable: false,
+        default: 1,
+    }),
+    __metadata("design:type", Number)
+], DetectionRule.prototype, "evaluationIntervalInMinutes", void 0);
+__decorate([
+    ColumnAccessControl({
+        create: createPermissions,
+        read: readPermissions,
+        update: updatePermissions,
+    }),
+    TableColumn({
+        title: "Group By Field",
+        required: false,
+        type: TableColumnType.ShortText,
+        canReadOnRelationQuery: true,
+        description: "Optional security-event field (e.g. principalHost, principalUser) to group matches by. One alert is opened per distinct value; empty groups all matches into one alert.",
+    }),
+    Column({
+        nullable: true,
+        type: ColumnType.ShortText,
+        length: ColumnLength.ShortText,
+    }),
+    __metadata("design:type", String)
+], DetectionRule.prototype, "groupByField", void 0);
+__decorate([
+    ColumnAccessControl({
+        create: createPermissions,
+        read: readPermissions,
+        update: updatePermissions,
+    }),
+    TableColumn({
+        required: true,
+        type: TableColumnType.Boolean,
+        canReadOnRelationQuery: true,
+        title: "Create Alerts",
+        description: "Whether matches open OneUptime alerts.",
+        defaultValue: true,
+    }),
+    Column({
+        nullable: false,
+        type: ColumnType.Boolean,
+        default: true,
+    }),
+    __metadata("design:type", Boolean)
+], DetectionRule.prototype, "shouldCreateAlert", void 0);
+__decorate([
+    ColumnAccessControl({
+        create: createPermissions,
+        read: readPermissions,
+        update: updatePermissions,
+    }),
+    TableColumn({
+        required: true,
+        type: TableColumnType.Boolean,
+        canReadOnRelationQuery: true,
+        title: "Write Detection Findings",
+        description: "Whether matches also write a Detection Finding security event back into the events table.",
+        defaultValue: true,
+    }),
+    Column({
+        nullable: false,
+        type: ColumnType.Boolean,
+        default: true,
+    }),
+    __metadata("design:type", Boolean)
+], DetectionRule.prototype, "shouldWriteDetectionFinding", void 0);
+__decorate([
+    ColumnAccessControl({
+        create: createPermissions,
+        read: readPermissions,
+        update: updatePermissions,
+    }),
+    TableColumn({
+        required: true,
+        type: TableColumnType.Boolean,
+        canReadOnRelationQuery: true,
+        title: "Create Incidents",
+        description: "Whether matches also open OneUptime incidents. Off by default: incidents drive on-call, SLAs and status pages, so opt in per rule.",
+        defaultValue: false,
+        /*
+         * Without this, checkRequiredFields 400s any create payload that
+         * omits the flag — including every API client written before the
+         * column existed — and the DB DEFAULT false can never apply.
+         */
+        isDefaultValueColumn: true,
+    }),
+    Column({
+        nullable: false,
+        type: ColumnType.Boolean,
+        default: false,
+    }),
+    __metadata("design:type", Boolean)
+], DetectionRule.prototype, "shouldCreateIncident", void 0);
+__decorate([
+    ColumnAccessControl({
+        create: createPermissions,
+        read: readPermissions,
+        update: updatePermissions,
+    }),
+    TableColumn({
+        manyToOneRelationColumn: "alertSeverityId",
+        type: TableColumnType.Entity,
+        modelType: AlertSeverity,
+        title: "Alert Severity",
+        description: "Severity of alerts opened by this rule. Defaults from the Sigma rule's level, mapped onto this project's severities, when unset.",
+    }),
+    ManyToOne(() => {
+        return AlertSeverity;
+    }, {
+        eager: false,
+        nullable: true,
+        onDelete: "SET NULL",
+        orphanedRowAction: "nullify",
+    }),
+    JoinColumn({ name: "alertSeverityId" }),
+    __metadata("design:type", AlertSeverity)
+], DetectionRule.prototype, "alertSeverity", void 0);
+__decorate([
+    ColumnAccessControl({
+        create: createPermissions,
+        read: readPermissions,
+        update: updatePermissions,
+    }),
+    TableColumn({
+        type: TableColumnType.ObjectID,
+        title: "Alert Severity ID",
+        description: "ID of the alert severity for alerts opened by this rule.",
+    }),
+    Column({
+        type: ColumnType.ObjectID,
+        nullable: true,
+        transformer: ObjectID.getDatabaseTransformer(),
+    }),
+    __metadata("design:type", ObjectID)
+], DetectionRule.prototype, "alertSeverityId", void 0);
+__decorate([
+    ColumnAccessControl({
+        create: createPermissions,
+        read: readPermissions,
+        update: updatePermissions,
+    }),
+    TableColumn({
+        manyToOneRelationColumn: "incidentSeverityId",
+        type: TableColumnType.Entity,
+        modelType: IncidentSeverity,
+        title: "Incident Severity",
+        description: "Severity of incidents opened by this rule. Defaults from the Sigma rule's level, mapped onto this project's incident severities, when unset.",
+    }),
+    ManyToOne(() => {
+        return IncidentSeverity;
+    }, {
+        eager: false,
+        nullable: true,
+        onDelete: "SET NULL",
+        orphanedRowAction: "nullify",
+    }),
+    JoinColumn({ name: "incidentSeverityId" }),
+    __metadata("design:type", IncidentSeverity)
+], DetectionRule.prototype, "incidentSeverity", void 0);
+__decorate([
+    ColumnAccessControl({
+        create: createPermissions,
+        read: readPermissions,
+        update: updatePermissions,
+    }),
+    TableColumn({
+        type: TableColumnType.ObjectID,
+        title: "Incident Severity ID",
+        description: "ID of the incident severity for incidents opened by this rule.",
+    }),
+    Column({
+        type: ColumnType.ObjectID,
+        nullable: true,
+        transformer: ObjectID.getDatabaseTransformer(),
+    }),
+    __metadata("design:type", ObjectID)
+], DetectionRule.prototype, "incidentSeverityId", void 0);
+__decorate([
+    ColumnAccessControl({
+        create: [],
+        read: readPermissions,
+        update: [],
+    }),
+    TableColumn({
+        title: "Last Evaluated At",
+        required: false,
+        type: TableColumnType.Date,
+        canReadOnRelationQuery: true,
+        description: "When the detection engine last evaluated this rule. Null means it has never run.",
+    }),
+    Column({
+        type: ColumnType.Date,
+        nullable: true,
+    }),
+    __metadata("design:type", Date)
+], DetectionRule.prototype, "lastEvaluatedAt", void 0);
+__decorate([
+    ColumnAccessControl({
+        create: [],
+        read: readPermissions,
+        update: [],
+    }),
+    TableColumn({
+        title: "Last Match At",
+        required: false,
+        type: TableColumnType.Date,
+        canReadOnRelationQuery: true,
+        description: "When this rule most recently matched security events. Null means it has never matched.",
+    }),
+    Column({
+        type: ColumnType.Date,
+        nullable: true,
+    }),
+    __metadata("design:type", Date)
+], DetectionRule.prototype, "lastMatchAt", void 0);
+__decorate([
+    ColumnAccessControl({
+        create: [],
+        read: readPermissions,
+        update: [],
+    }),
+    TableColumn({
+        title: "Last Error",
+        required: false,
+        type: TableColumnType.LongText,
+        canReadOnRelationQuery: true,
+        description: "The most recent evaluation error, if any. Cleared on the next successful evaluation.",
+    }),
+    Column({
+        type: ColumnType.LongText,
+        nullable: true,
+        length: ColumnLength.LongText,
+    }),
+    __metadata("design:type", String)
+], DetectionRule.prototype, "lastError", void 0);
+__decorate([
+    ColumnAccessControl({
+        create: [],
+        read: readPermissions,
+        update: [],
+    }),
+    TableColumn({
+        manyToOneRelationColumn: "createdByUserId",
+        type: TableColumnType.Entity,
+        modelType: User,
+        title: "Created By User",
+        description: "Relation to the user who created this detection rule.",
+    }),
+    ManyToOne(() => {
+        return User;
+    }, {
+        eager: false,
+        nullable: true,
+        onDelete: "SET NULL",
+        orphanedRowAction: "nullify",
+    }),
+    JoinColumn({ name: "createdByUserId" }),
+    __metadata("design:type", User)
+], DetectionRule.prototype, "createdByUser", void 0);
+__decorate([
+    ColumnAccessControl({
+        create: [],
+        read: readPermissions,
+        update: [],
+    }),
+    TableColumn({
+        type: TableColumnType.ObjectID,
+        title: "Created By User ID",
+        description: "ID of the user who created this detection rule.",
+    }),
+    Column({
+        type: ColumnType.ObjectID,
+        nullable: true,
+        transformer: ObjectID.getDatabaseTransformer(),
+    }),
+    __metadata("design:type", ObjectID)
+], DetectionRule.prototype, "createdByUserId", void 0);
+__decorate([
+    ColumnAccessControl({
+        create: [],
+        read: readPermissions,
+        update: [],
+    }),
+    TableColumn({
+        manyToOneRelationColumn: "deletedByUserId",
+        type: TableColumnType.Entity,
+        modelType: User,
+        title: "Deleted By User",
+        description: "Relation to the user who deleted this detection rule.",
+    }),
+    ManyToOne(() => {
+        return User;
+    }, {
+        eager: false,
+        nullable: true,
+        onDelete: "SET NULL",
+        orphanedRowAction: "nullify",
+    }),
+    JoinColumn({ name: "deletedByUserId" }),
+    __metadata("design:type", User)
+], DetectionRule.prototype, "deletedByUser", void 0);
+__decorate([
+    ColumnAccessControl({
+        create: [],
+        read: readPermissions,
+        update: [],
+    }),
+    TableColumn({
+        type: TableColumnType.ObjectID,
+        title: "Deleted By User ID",
+        description: "ID of the user who deleted this detection rule.",
+    }),
+    Column({
+        type: ColumnType.ObjectID,
+        nullable: true,
+        transformer: ObjectID.getDatabaseTransformer(),
+    }),
+    __metadata("design:type", ObjectID)
+], DetectionRule.prototype, "deletedByUserId", void 0);
+DetectionRule = __decorate([
+    EnableDocumentation(),
+    EnableWorkflow({
+        create: true,
+        delete: true,
+        update: true,
+        read: true,
+    }),
+    TableBillingAccessControl({
+        create: PlanType.Free,
+        read: PlanType.Free,
+        update: PlanType.Free,
+        delete: PlanType.Free,
+    }),
+    TenantColumn("projectId"),
+    CrudApiEndpoint(new Route("/detection-rule")),
+    Entity({
+        name: "DetectionRule",
+    }),
+    TableMetadata({
+        tableName: "DetectionRule",
+        singularName: "Detection Rule",
+        pluralName: "Detection Rules",
+        icon: IconProp.ShieldExclamation,
+        tableDescription: "Sigma detection rules evaluated against security events. Matches create alerts and detection findings.",
+    }),
+    TableAccessControl({
+        create: createPermissions,
+        read: readPermissions,
+        delete: [
+            Permission.ProjectOwner,
+            Permission.ProjectAdmin,
+            Permission.DeleteProjectDetectionRule,
+        ],
+        update: updatePermissions,
+    })
+], DetectionRule);
+export default DetectionRule;
+//# sourceMappingURL=DetectionRule.js.map

package/build/dist/Models/DatabaseModels/DetectionRule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"DetectionRule.js","sourceRoot":"","sources":["../../../../Models/DatabaseModels/DetectionRule.ts"],"names":[],"mappings":";;;;;;;;;AAAA,OAAO,OAAO,MAAM,WAAW,CAAC;AAChC,OAAO,IAAI,MAAM,QAAQ,CAAC;AAC1B,OAAO,aAAa,MAAM,iBAAiB,CAAC;AAC5C,OAAO,gBAAgB,MAAM,oBAAoB,CAAC;AAClD,OAAO,SAAS,MAAM,uCAAuC,CAAC;AAC9D,OAAO,KAAK,MAAM,uBAAuB,CAAC;AAC1C,OAAO,mBAAmB,MAAM,wDAAwD,CAAC;AACzF,OAAO,kBAAkB,MAAM,uDAAuD,CAAC;AACvF,OAAO,yBAAyB,MAAM,8DAA8D,CAAC;AACrG,OAAO,YAAY,MAAM,mCAAmC,CAAC;AAC7D,OAAO,UAAU,MAAM,iCAAiC,CAAC;AACzD,OAAO,eAAe,MAAM,sCAAsC,CAAC;AACnE,OAAO,mBAAmB,MAAM,0CAA0C,CAAC;AAC3E,OAAO,cAAc,MAAM,qCAAqC,CAAC;AACjE,OAAO,WAAW,MAAM,kCAAkC,CAAC;AAC3D,OAAO,eAAe,MAAM,sCAAsC,CAAC;AACnE,OAAO,aAAa,MAAM,oCAAoC,CAAC;AAC/D,OAAO,YAAY,MAAM,mCAAmC,CAAC;AAC7D,OAAO,QAAQ,MAAM,2BAA2B,CAAC;AACjD,OAAO,QAAQ,MAAM,sBAAsB,CAAC;AAC5C,OAAO,UAAU,MAAM,wBAAwB,CAAC;AAChD,OAAO,EAAE,QAAQ,EAAE,MAAM,sCAAsC,CAAC;AAChE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAEvE,MAAM,iBAAiB,GAAsB;IAC3C,UAAU,CAAC,YAAY;IACvB,UAAU,CAAC,YAAY;IACvB,UAAU,CAAC,0BAA0B;CACtC,CAAC;AAEF,MAAM,eAAe,GAAsB;IACzC,UAAU,CAAC,YAAY;IACvB,UAAU,CAAC,YAAY;IACvB,UAAU,CAAC,aAAa;IACxB,UAAU,CAAC,MAAM;IACjB,UAAU,CAAC,cAAc;IACzB,UAAU,CAAC,eAAe;IAC1B,UAAU,CAAC,eAAe;IAC1B,UAAU,CAAC,wBAAwB;CACpC,CAAC;AAEF,MAAM,iBAAiB,GAAsB;IAC3C,UAAU,CAAC,YAAY;IACvB,UAAU,CAAC,YAAY;IACvB,UAAU,CAAC,wBAAwB;CACpC,CAAC;AAEF;;;;;;GAMG;AAqCY,IAAM,aAAa,GAAnB,MAAM,aAAc,SAAQ,SAAS;IAArC;;QAyBN,YAAO,GAAa,SAAS,CAAC;QAoB9B,cAAS,GAAc,SAAS,CAAC;QAmBjC,SAAI,GAAY,SAAS,CAAC;QAmB1B,gBAAW,GAAY,SAAS,CAAC;QAkBjC,kBAAa,GAAY,SAAS,CAAC;QAqBnC,cAAS,GAAa,SAAS,CAAC;QAqBhC,gCAA2B,GAAY,SAAS,CAAC;QAoBjD,iBAAY,GAAY,SAAS,CAAC;QAoBlC,sBAAiB,GAAa,SAAS,CAAC;QAqBxC,gCAA2B,GAAa,SAAS,CAAC;QAEzD;;;;;;;WAOG;QA0BI,yBAAoB,GAAa,SAAS,CAAC;QA2B3C,kBAAa,GAAmB,SAAS,CAAC;QAiB1C,oBAAe,GAAc,SAAS,CAAC;QA2BvC,qBAAgB,GAAsB,SAAS,CAAC;QAkBhD,uBAAkB,GAAc,SAAS,CAAC;QAEjD;;;WAGG;QAkBI,oBAAe,GAAU,SAAS,CAAC;QAmBnC,gBAAW,GAAU,SAAS,CAAC;QAoB/B,cAAS,GAAY,SAAS,CAAC;QA0B/B,kBAAa,GAAU,SAAS,CAAC;QAiBjC,oBAAe,GAAc,SAAS,CAAC;QA0BvC,kBAAa,GAAU,SAAS,CAAC;QAiBjC,oBAAe,GAAc,SAAS,CAAC;IAChD,CAAC;CAAA,CAAA;AApcQ;IAxBN,mBAAmB,CAAC;QACnB,MAAM,EAAE,iBAAiB;QACzB,IAAI,EAAE,eAAe;QACrB,MAAM,EAAE,EAAE;KACX,CAAC;IACD,WAAW,CAAC;QACX,uBAAuB,EAAE,WAAW;QACpC,IAAI,EAAE,eAAe,CAAC,MAAM;QAC5B,SAAS,EAAE,OAAO;QAClB,KAAK,EAAE,SAAS;QAChB,WAAW,EAAE,yDAAyD;KACvE,CAAC;IACD,SAAS,CACR,GAAG,EAAE;QACH,OAAO,OAAO,CAAC;IACjB,CAAC,EACD;QACE,KAAK,EAAE,KAAK;QACZ,QAAQ,EAAE,IAAI;QACd,QAAQ,EAAE,SAAS;QACnB,iBAAiB,EAAE,SAAS;KAC7B,CACF;IACA,UAAU,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;8BACjB,OAAO;8CAAa;AAoB9B;IAlBN,mBAAmB,CAAC;QACnB,MAAM,EAAE,iBAAiB;QACzB,IAAI,EAAE,eAAe;QACrB,MAAM,EAAE,EAAE;KACX,CAAC;IACD,KAAK,EAAE;IACP,WAAW,CAAC;QACX,IAAI,EAAE,eAAe,CAAC,QAAQ;QAC9B,QAAQ,EAAE,IAAI;QACd,sBAAsB,EAAE,IAAI;QAC5B,KAAK,EAAE,YAAY;QACnB,WAAW,EAAE,mDAAmD;KACjE,CAAC;IACD,MAAM,CAAC;QACN,IAAI,EAAE,UAAU,CAAC,QAAQ;QACzB,QAAQ,EAAE,KAAK;QACf,WAAW,EAAE,QAAQ,CAAC,sBAAsB,EAAE;KAC/C,CAAC;8BACiB,QAAQ;gDAAa;AAmBjC;IAjBN,mBAAmB,CAAC;QACnB,MAAM,EAAE,iBAAiB;QACzB,IAAI,EAAE,eAAe;QACrB,MAAM,EAAE,iBAAiB;KAC1B,CAAC;IACD,WAAW,CAAC;QACX,QAAQ,EAAE,IAAI;QACd,IAAI,EAAE,eAAe,CAAC,IAAI;QAC1B,sBAAsB,EAAE,IAAI;QAC5B,KAAK,EAAE,MAAM;QACb,WAAW,EAAE,wCAAwC;KACtD,CAAC;IACD,MAAM,CAAC;QACN,QAAQ,EAAE,KAAK;QACf,IAAI,EAAE,UAAU,CAAC,IAAI;QACrB,MAAM,EAAE,YAAY,CAAC,IAAI;KAC1B,CAAC;;2CAC+B;AAmB1B;IAjBN,mBAAmB,CAAC;QACnB,MAAM,EAAE,iBAAiB;QACzB,IAAI,EAAE,eAAe;QACrB,MAAM,EAAE,iBAAiB;KAC1B,CAAC;IACD,WAAW,CAAC;QACX,QAAQ,EAAE,KAAK;QACf,IAAI,EAAE,eAAe,CAAC,QAAQ;QAC9B,sBAAsB,EAAE,IAAI;QAC5B,KAAK,EAAE,aAAa;QACpB,WAAW,EAAE,oDAAoD;KAClE,CAAC;IACD,MAAM,CAAC;QACN,QAAQ,EAAE,IAAI;QACd,IAAI,EAAE,UAAU,CAAC,QAAQ;QACzB,MAAM,EAAE,YAAY,CAAC,QAAQ;KAC9B,CAAC;;kDACsC;AAkBjC;IAhBN,mBAAmB,CAAC;QACnB,MAAM,EAAE,iBAAiB;QACzB,IAAI,EAAE,eAAe;QACrB,MAAM,EAAE,iBAAiB;KAC1B,CAAC;IACD,WAAW,CAAC;QACX,QAAQ,EAAE,IAAI;QACd,IAAI,EAAE,eAAe,CAAC,YAAY;QAClC,KAAK,EAAE,mBAAmB;QAC1B,WAAW,EACT,kIAAkI;KACrI,CAAC;IACD,MAAM,CAAC;QACN,QAAQ,EAAE,KAAK;QACf,IAAI,EAAE,UAAU,CAAC,YAAY;KAC9B,CAAC;;oDACwC;AAqBnC;IAnBN,mBAAmB,CAAC;QACnB,MAAM,EAAE,iBAAiB;QACzB,IAAI,EAAE,eAAe;QACrB,MAAM,EAAE,iBAAiB;KAC1B,CAAC;IACD,KAAK,EAAE;IACP,WAAW,CAAC;QACX,QAAQ,EAAE,IAAI;QACd,IAAI,EAAE,eAAe,CAAC,OAAO;QAC7B,sBAAsB,EAAE,IAAI;QAC5B,KAAK,EAAE,SAAS;QAChB,WAAW,EAAE,2CAA2C;QACxD,YAAY,EAAE,IAAI;KACnB,CAAC;IACD,MAAM,CAAC;QACN,QAAQ,EAAE,KAAK;QACf,IAAI,EAAE,UAAU,CAAC,OAAO;QACxB,OAAO,EAAE,IAAI;KACd,CAAC;;gDACqC;AAqBhC;IAnBN,mBAAmB,CAAC;QACnB,MAAM,EAAE,iBAAiB;QACzB,IAAI,EAAE,eAAe;QACrB,MAAM,EAAE,iBAAiB;KAC1B,CAAC;IACD,WAAW,CAAC;QACX,KAAK,EAAE,+BAA+B;QACtC,QAAQ,EAAE,IAAI;QACd,IAAI,EAAE,eAAe,CAAC,MAAM;QAC5B,sBAAsB,EAAE,IAAI;QAC5B,WAAW,EACT,oHAAoH;QACtH,YAAY,EAAE,CAAC;KAChB,CAAC;IACD,MAAM,CAAC;QACN,IAAI,EAAE,UAAU,CAAC,MAAM;QACvB,QAAQ,EAAE,KAAK;QACf,OAAO,EAAE,CAAC;KACX,CAAC;;kEACsD;AAoBjD;IAlBN,mBAAmB,CAAC;QACnB,MAAM,EAAE,iBAAiB;QACzB,IAAI,EAAE,eAAe;QACrB,MAAM,EAAE,iBAAiB;KAC1B,CAAC;IACD,WAAW,CAAC;QACX,KAAK,EAAE,gBAAgB;QACvB,QAAQ,EAAE,KAAK;QACf,IAAI,EAAE,eAAe,CAAC,SAAS;QAC/B,sBAAsB,EAAE,IAAI;QAC5B,WAAW,EACT,yKAAyK;KAC5K,CAAC;IACD,MAAM,CAAC;QACN,QAAQ,EAAE,IAAI;QACd,IAAI,EAAE,UAAU,CAAC,SAAS;QAC1B,MAAM,EAAE,YAAY,CAAC,SAAS;KAC/B,CAAC;;mDACuC;AAoBlC;IAlBN,mBAAmB,CAAC;QACnB,MAAM,EAAE,iBAAiB;QACzB,IAAI,EAAE,eAAe;QACrB,MAAM,EAAE,iBAAiB;KAC1B,CAAC;IACD,WAAW,CAAC;QACX,QAAQ,EAAE,IAAI;QACd,IAAI,EAAE,eAAe,CAAC,OAAO;QAC7B,sBAAsB,EAAE,IAAI;QAC5B,KAAK,EAAE,eAAe;QACtB,WAAW,EAAE,wCAAwC;QACrD,YAAY,EAAE,IAAI;KACnB,CAAC;IACD,MAAM,CAAC;QACN,QAAQ,EAAE,KAAK;QACf,IAAI,EAAE,UAAU,CAAC,OAAO;QACxB,OAAO,EAAE,IAAI;KACd,CAAC;;wDAC6C;AAqBxC;IAnBN,mBAAmB,CAAC;QACnB,MAAM,EAAE,iBAAiB;QACzB,IAAI,EAAE,eAAe;QACrB,MAAM,EAAE,iBAAiB;KAC1B,CAAC;IACD,WAAW,CAAC;QACX,QAAQ,EAAE,IAAI;QACd,IAAI,EAAE,eAAe,CAAC,OAAO;QAC7B,sBAAsB,EAAE,IAAI;QAC5B,KAAK,EAAE,0BAA0B;QACjC,WAAW,EACT,2FAA2F;QAC7F,YAAY,EAAE,IAAI;KACnB,CAAC;IACD,MAAM,CAAC;QACN,QAAQ,EAAE,KAAK;QACf,IAAI,EAAE,UAAU,CAAC,OAAO;QACxB,OAAO,EAAE,IAAI;KACd,CAAC;;kEACuD;AAmClD;IAzBN,mBAAmB,CAAC;QACnB,MAAM,EAAE,iBAAiB;QACzB,IAAI,EAAE,eAAe;QACrB,MAAM,EAAE,iBAAiB;KAC1B,CAAC;IACD,WAAW,CAAC;QACX,QAAQ,EAAE,IAAI;QACd,IAAI,EAAE,eAAe,CAAC,OAAO;QAC7B,sBAAsB,EAAE,IAAI;QAC5B,KAAK,EAAE,kBAAkB;QACzB,WAAW,EACT,oIAAoI;QACtI,YAAY,EAAE,KAAK;QACnB;;;;WAIG;QACH,oBAAoB,EAAE,IAAI;KAC3B,CAAC;IACD,MAAM,CAAC;QACN,QAAQ,EAAE,KAAK;QACf,IAAI,EAAE,UAAU,CAAC,OAAO;QACxB,OAAO,EAAE,KAAK;KACf,CAAC;;2DACgD;AA2B3C;IAzBN,mBAAmB,CAAC;QACnB,MAAM,EAAE,iBAAiB;QACzB,IAAI,EAAE,eAAe;QACrB,MAAM,EAAE,iBAAiB;KAC1B,CAAC;IACD,WAAW,CAAC;QACX,uBAAuB,EAAE,iBAAiB;QAC1C,IAAI,EAAE,eAAe,CAAC,MAAM;QAC5B,SAAS,EAAE,aAAa;QACxB,KAAK,EAAE,gBAAgB;QACvB,WAAW,EACT,kIAAkI;KACrI,CAAC;IACD,SAAS,CACR,GAAG,EAAE;QACH,OAAO,aAAa,CAAC;IACvB,CAAC,EACD;QACE,KAAK,EAAE,KAAK;QACZ,QAAQ,EAAE,IAAI;QACd,QAAQ,EAAE,UAAU;QACpB,iBAAiB,EAAE,SAAS;KAC7B,CACF;IACA,UAAU,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,CAAC;8BACjB,aAAa;oDAAa;AAiB1C;IAfN,mBAAmB,CAAC;QACnB,MAAM,EAAE,iBAAiB;QACzB,IAAI,EAAE,eAAe;QACrB,MAAM,EAAE,iBAAiB;KAC1B,CAAC;IACD,WAAW,CAAC;QACX,IAAI,EAAE,eAAe,CAAC,QAAQ;QAC9B,KAAK,EAAE,mBAAmB;QAC1B,WAAW,EAAE,0DAA0D;KACxE,CAAC;IACD,MAAM,CAAC;QACN,IAAI,EAAE,UAAU,CAAC,QAAQ;QACzB,QAAQ,EAAE,IAAI;QACd,WAAW,EAAE,QAAQ,CAAC,sBAAsB,EAAE;KAC/C,CAAC;8BACuB,QAAQ;sDAAa;AA2BvC;IAzBN,mBAAmB,CAAC;QACnB,MAAM,EAAE,iBAAiB;QACzB,IAAI,EAAE,eAAe;QACrB,MAAM,EAAE,iBAAiB;KAC1B,CAAC;IACD,WAAW,CAAC;QACX,uBAAuB,EAAE,oBAAoB;QAC7C,IAAI,EAAE,eAAe,CAAC,MAAM;QAC5B,SAAS,EAAE,gBAAgB;QAC3B,KAAK,EAAE,mBAAmB;QAC1B,WAAW,EACT,8IAA8I;KACjJ,CAAC;IACD,SAAS,CACR,GAAG,EAAE;QACH,OAAO,gBAAgB,CAAC;IAC1B,CAAC,EACD;QACE,KAAK,EAAE,KAAK;QACZ,QAAQ,EAAE,IAAI;QACd,QAAQ,EAAE,UAAU;QACpB,iBAAiB,EAAE,SAAS;KAC7B,CACF;IACA,UAAU,CAAC,EAAE,IAAI,EAAE,oBAAoB,EAAE,CAAC;8BACjB,gBAAgB;uDAAa;AAkBhD;IAhBN,mBAAmB,CAAC;QACnB,MAAM,EAAE,iBAAiB;QACzB,IAAI,EAAE,eAAe;QACrB,MAAM,EAAE,iBAAiB;KAC1B,CAAC;IACD,WAAW,CAAC;QACX,IAAI,EAAE,eAAe,CAAC,QAAQ;QAC9B,KAAK,EAAE,sBAAsB;QAC7B,WAAW,EACT,gEAAgE;KACnE,CAAC;IACD,MAAM,CAAC;QACN,IAAI,EAAE,UAAU,CAAC,QAAQ;QACzB,QAAQ,EAAE,IAAI;QACd,WAAW,EAAE,QAAQ,CAAC,sBAAsB,EAAE;KAC/C,CAAC;8BAC0B,QAAQ;yDAAa;AAuB1C;IAjBN,mBAAmB,CAAC;QACnB,MAAM,EAAE,EAAE;QACV,IAAI,EAAE,eAAe;QACrB,MAAM,EAAE,EAAE;KACX,CAAC;IACD,WAAW,CAAC;QACX,KAAK,EAAE,mBAAmB;QAC1B,QAAQ,EAAE,KAAK;QACf,IAAI,EAAE,eAAe,CAAC,IAAI;QAC1B,sBAAsB,EAAE,IAAI;QAC5B,WAAW,EACT,kFAAkF;KACrF,CAAC;IACD,MAAM,CAAC;QACN,IAAI,EAAE,UAAU,CAAC,IAAI;QACrB,QAAQ,EAAE,IAAI;KACf,CAAC;8BACuB,IAAI;sDAAa;AAmBnC;IAjBN,mBAAmB,CAAC;QACnB,MAAM,EAAE,EAAE;QACV,IAAI,EAAE,eAAe;QACrB,MAAM,EAAE,EAAE;KACX,CAAC;IACD,WAAW,CAAC;QACX,KAAK,EAAE,eAAe;QACtB,QAAQ,EAAE,KAAK;QACf,IAAI,EAAE,eAAe,CAAC,IAAI;QAC1B,sBAAsB,EAAE,IAAI;QAC5B,WAAW,EACT,wFAAwF;KAC3F,CAAC;IACD,MAAM,CAAC;QACN,IAAI,EAAE,UAAU,CAAC,IAAI;QACrB,QAAQ,EAAE,IAAI;KACf,CAAC;8BACmB,IAAI;kDAAa;AAoB/B;IAlBN,mBAAmB,CAAC;QACnB,MAAM,EAAE,EAAE;QACV,IAAI,EAAE,eAAe;QACrB,MAAM,EAAE,EAAE;KACX,CAAC;IACD,WAAW,CAAC;QACX,KAAK,EAAE,YAAY;QACnB,QAAQ,EAAE,KAAK;QACf,IAAI,EAAE,eAAe,CAAC,QAAQ;QAC9B,sBAAsB,EAAE,IAAI;QAC5B,WAAW,EACT,sFAAsF;KACzF,CAAC;IACD,MAAM,CAAC;QACN,IAAI,EAAE,UAAU,CAAC,QAAQ;QACzB,QAAQ,EAAE,IAAI;QACd,MAAM,EAAE,YAAY,CAAC,QAAQ;KAC9B,CAAC;;gDACoC;AA0B/B;IAxBN,mBAAmB,CAAC;QACnB,MAAM,EAAE,EAAE;QACV,IAAI,EAAE,eAAe;QACrB,MAAM,EAAE,EAAE;KACX,CAAC;IACD,WAAW,CAAC;QACX,uBAAuB,EAAE,iBAAiB;QAC1C,IAAI,EAAE,eAAe,CAAC,MAAM;QAC5B,SAAS,EAAE,IAAI;QACf,KAAK,EAAE,iBAAiB;QACxB,WAAW,EAAE,uDAAuD;KACrE,CAAC;IACD,SAAS,CACR,GAAG,EAAE;QACH,OAAO,IAAI,CAAC;IACd,CAAC,EACD;QACE,KAAK,EAAE,KAAK;QACZ,QAAQ,EAAE,IAAI;QACd,QAAQ,EAAE,UAAU;QACpB,iBAAiB,EAAE,SAAS;KAC7B,CACF;IACA,UAAU,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,CAAC;8BACjB,IAAI;oDAAa;AAiBjC;IAfN,mBAAmB,CAAC;QACnB,MAAM,EAAE,EAAE;QACV,IAAI,EAAE,eAAe;QACrB,MAAM,EAAE,EAAE;KACX,CAAC;IACD,WAAW,CAAC;QACX,IAAI,EAAE,eAAe,CAAC,QAAQ;QAC9B,KAAK,EAAE,oBAAoB;QAC3B,WAAW,EAAE,iDAAiD;KAC/D,CAAC;IACD,MAAM,CAAC;QACN,IAAI,EAAE,UAAU,CAAC,QAAQ;QACzB,QAAQ,EAAE,IAAI;QACd,WAAW,EAAE,QAAQ,CAAC,sBAAsB,EAAE;KAC/C,CAAC;8BACuB,QAAQ;sDAAa;AA0BvC;IAxBN,mBAAmB,CAAC;QACnB,MAAM,EAAE,EAAE;QACV,IAAI,EAAE,eAAe;QACrB,MAAM,EAAE,EAAE;KACX,CAAC;IACD,WAAW,CAAC;QACX,uBAAuB,EAAE,iBAAiB;QAC1C,IAAI,EAAE,eAAe,CAAC,MAAM;QAC5B,SAAS,EAAE,IAAI;QACf,KAAK,EAAE,iBAAiB;QACxB,WAAW,EAAE,uDAAuD;KACrE,CAAC;IACD,SAAS,CACR,GAAG,EAAE;QACH,OAAO,IAAI,CAAC;IACd,CAAC,EACD;QACE,KAAK,EAAE,KAAK;QACZ,QAAQ,EAAE,IAAI;QACd,QAAQ,EAAE,UAAU;QACpB,iBAAiB,EAAE,SAAS;KAC7B,CACF;IACA,UAAU,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,CAAC;8BACjB,IAAI;oDAAa;AAiBjC;IAfN,mBAAmB,CAAC;QACnB,MAAM,EAAE,EAAE;QACV,IAAI,EAAE,eAAe;QACrB,MAAM,EAAE,EAAE;KACX,CAAC;IACD,WAAW,CAAC;QACX,IAAI,EAAE,eAAe,CAAC,QAAQ;QAC9B,KAAK,EAAE,oBAAoB;QAC3B,WAAW,EAAE,iDAAiD;KAC/D,CAAC;IACD,MAAM,CAAC;QACN,IAAI,EAAE,UAAU,CAAC,QAAQ;QACzB,QAAQ,EAAE,IAAI;QACd,WAAW,EAAE,QAAQ,CAAC,sBAAsB,EAAE;KAC/C,CAAC;8BACuB,QAAQ;sDAAa;AA5d3B,aAAa;IApCjC,mBAAmB,EAAE;IACrB,cAAc,CAAC;QACd,MAAM,EAAE,IAAI;QACZ,MAAM,EAAE,IAAI;QACZ,MAAM,EAAE,IAAI;QACZ,IAAI,EAAE,IAAI;KACX,CAAC;IACD,yBAAyB,CAAC;QACzB,MAAM,EAAE,QAAQ,CAAC,IAAI;QACrB,IAAI,EAAE,QAAQ,CAAC,IAAI;QACnB,MAAM,EAAE,QAAQ,CAAC,IAAI;QACrB,MAAM,EAAE,QAAQ,CAAC,IAAI;KACtB,CAAC;IACD,YAAY,CAAC,WAAW,CAAC;IACzB,eAAe,CAAC,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAC;IAC7C,MAAM,CAAC;QACN,IAAI,EAAE,eAAe;KACtB,CAAC;IACD,aAAa,CAAC;QACb,SAAS,EAAE,eAAe;QAC1B,YAAY,EAAE,gBAAgB;QAC9B,UAAU,EAAE,iBAAiB;QAC7B,IAAI,EAAE,QAAQ,CAAC,iBAAiB;QAChC,gBAAgB,EACd,wGAAwG;KAC3G,CAAC;IACD,kBAAkB,CAAC;QAClB,MAAM,EAAE,iBAAiB;QACzB,IAAI,EAAE,eAAe;QACrB,MAAM,EAAE;YACN,UAAU,CAAC,YAAY;YACvB,UAAU,CAAC,YAAY;YACvB,UAAU,CAAC,0BAA0B;SACtC;QACD,MAAM,EAAE,iBAAiB;KAC1B,CAAC;GACmB,aAAa,CA6djC;eA7doB,aAAa"}