@oneuptime/common 12.0.16 → 12.0.18

package/build/dist/Server/Utils/SecurityEvent/DetectionRuleEvaluator.js

@@ -9,16 +9,21 @@ var __metadata = (this && this.__metadata) || function (k, v) {
 };
 import DetectionRule from "../../../Models/DatabaseModels/DetectionRule";
 import Alert from "../../../Models/DatabaseModels/Alert";
+import Incident from "../../../Models/DatabaseModels/Incident";
 import LIMIT_MAX, { LIMIT_PER_PROJECT } from "../../../Types/Database/LimitMax";
 import OneUptimeDate from "../../../Types/Date";
 import SortOrder from "../../../Types/BaseDatabase/SortOrder";
+import Includes from "../../../Types/BaseDatabase/Includes";
 import OcsfSeverity, { OcsfSeverityId, } from "../../../Types/SecurityEvent/OcsfSeverity";
 import { ocsfCategoryForClassUid } from "../../../Types/SecurityEvent/OcsfEventClass";
 import { SigmaLevel } from "../../../Types/SecurityEvent/SigmaRule";
+import { DETECTION_FINDING_CLASS_NAME, DETECTION_FINDING_CLASS_UID, DETECTION_GROUP_VALUE_ATTRIBUTE, DETECTION_MATCH_COUNT_ATTRIBUTE, DETECTION_RULE_ID_ATTRIBUTE, DETECTION_RULE_NAME_ATTRIBUTE, DETECTION_SIGMA_ID_ATTRIBUTE, } from "../../../Types/SecurityEvent/DetectionFindingConstants";
 import SigmaRuleParser from "../../../Utils/SecurityEvent/Sigma/SigmaRuleParser";
 import MetricSeriesFingerprint from "../../../Utils/Metrics/MetricSeriesFingerprint";
 import AlertService from "../../Services/AlertService";
 import AlertSeverityService from "../../Services/AlertSeverityService";
+import IncidentService from "../../Services/IncidentService";
+import IncidentSeverityService from "../../Services/IncidentSeverityService";
 import DetectionRuleService from "../../Services/DetectionRuleService";
 import OTelIngestService from "../../Services/OpenTelemetryIngestService";
 import SecurityEventService from "../../Services/SecurityEventService";
@@ -27,7 +32,6 @@ import logger from "../Logger";
 import CaptureSpan from "../Telemetry/CaptureSpan";
 import SigmaClickhouseCompiler, { buildSigmaFieldExpression, } from "./Sigma/SigmaClickhouseCompiler";
 import { buildSecurityEventDbRow } from "./SecurityEventRow";
-const DETECTION_FINDING_CLASS_UID = 2004;
 const DETECTIONS_SERVICE_NAME = "OneUptime Detections";
 /*
  * Cap on how far back one evaluation may scan, whatever lastEvaluatedAt
@@ -66,7 +70,9 @@ export default class DetectionRuleEvaluator {
                 groupByField: true,
                 shouldCreateAlert: true,
                 shouldWriteDetectionFinding: true,
+                shouldCreateIncident: true,
                 alertSeverityId: true,
+                incidentSeverityId: true,
                 lastEvaluatedAt: true,
             },
             skip: 0,
@@ -135,6 +141,7 @@ export default class DetectionRuleEvaluator {
             return row.matchCount > 0;
         });
         let alertsCreated = 0;
+        let incidentsCreated = 0;
         let findingsWritten = 0;
         let totalMatches = 0;
         for (const matchGroup of matchedGroups) {
@@ -150,6 +157,21 @@ export default class DetectionRuleEvaluator {
                     endTime,
                 });
             }
+            /*
+             * === true, not !== false like the alert gate: incidents are the
+             * heavy machinery (on-call, SLAs, status pages), and the column
+             * defaults to false — a rule fetched without the column selected
+             * must read as off, never as "probably on".
+             */
+            if (rule.shouldCreateIncident === true) {
+                incidentsCreated = await this.openIncidentsForMatches({
+                    rule,
+                    parsedRule,
+                    matchedGroups,
+                    startTime,
+                    endTime,
+                });
+            }
             if (rule.shouldWriteDetectionFinding !== false) {
                 findingsWritten = await this.writeDetectionFindings({
                     rule,
@@ -170,6 +192,7 @@ export default class DetectionRuleEvaluator {
             matchedGroups: matchedGroups.length,
             totalMatches,
             alertsCreated,
+            incidentsCreated,
             findingsWritten,
             error: null,
         };
@@ -195,9 +218,16 @@ export default class DetectionRuleEvaluator {
         const fingerprints = matchedGroups.map((matchGroup) => {
             return this.buildFingerprint(rule.id, matchGroup.groupValue);
         });
+        /*
+         * Scoped to THIS rule's candidate fingerprints (≤ MAX_GROUPS_PER_
+         * EVALUATION), not a scan of every open alert: a project with more
+         * open alerts than LIMIT_PER_PROJECT would otherwise age still-open
+         * detections out of the fetched window and re-open them every cycle.
+         */
         const openAlerts = await AlertService.findBy({
             query: {
                 projectId,
+                seriesFingerprint: new Includes(fingerprints),
                 currentAlertState: {
                     isResolvedState: false,
                 },
@@ -228,21 +258,14 @@ export default class DetectionRuleEvaluator {
             }
             const alert = new Alert();
             alert.projectId = projectId;
-            alert.title = matchGroup.groupValue
-                ? `[Detection] ${rule.name} — ${matchGroup.groupValue}`
-                : `[Detection] ${rule.name}`;
-            const descriptionParts = [];
-            if (rule.description || parsedRule.description) {
-                descriptionParts.push(rule.description || parsedRule.description);
-            }
-            descriptionParts.push(`Detection rule matched ${matchGroup.matchCount} security event${matchGroup.matchCount === 1 ? "" : "s"} between ${OneUptimeDate.getDateAsFormattedString(data.startTime)} and ${OneUptimeDate.getDateAsFormattedString(data.endTime)}.`);
-            if (matchGroup.sampleMessage) {
-                descriptionParts.push(`Sample event: ${matchGroup.sampleMessage}`);
-            }
-            if (matchGroup.sampleObservables.length > 0) {
-                descriptionParts.push(`Observables: ${matchGroup.sampleObservables.slice(0, 20).join(", ")}`);
-            }
-            alert.description = descriptionParts.join("\n\n");
+            alert.title = this.buildMatchTitle(rule, matchGroup);
+            alert.description = this.buildMatchDescription({
+                rule,
+                parsedRule,
+                matchGroup,
+                startTime: data.startTime,
+                endTime: data.endTime,
+            });
             alert.alertSeverityId = alertSeverityId;
             alert.seriesFingerprint = fingerprint;
             alert.isCreatedAutomatically = true;
@@ -263,6 +286,131 @@ export default class DetectionRuleEvaluator {
         }
         return created;
     }
+    /*
+     * The incident twin of openAlertsForMatches: same fingerprint, same
+     * title and description, deduped against the project's UNRESOLVED
+     * incidents the same way alerts dedupe against open alerts. Kept as a
+     * separate method rather than a parameterized one because the two
+     * models genuinely differ where it matters — severity comes from
+     * IncidentSeverity, and IncidentService.create is far heavier
+     * (workspace channels, SLAs, on-call execution), so each create is
+     * wrapped so one failing project cannot sink the whole rule.
+     *
+     * Detection incidents carry no monitors, so monitor-driven auto-resolve
+     * never touches them: the fingerprint dedupe is the only thing keeping
+     * a still-firing rule from stacking incidents. Dedupe must therefore
+     * run BEFORE create — incident numbers are user-visible and consumed
+     * per create.
+     */
+    static async openIncidentsForMatches(data) {
+        var _a, _b;
+        const { rule, parsedRule, matchedGroups } = data;
+        const projectId = rule.projectId;
+        const incidentSeverityId = await this.resolveIncidentSeverityId({
+            projectId,
+            rule,
+            parsedRule,
+        });
+        if (!incidentSeverityId) {
+            logger.warn(`DetectionRuleEvaluator: project ${projectId.toString()} has no incident severities; skipping incident creation for rule ${(_a = rule.id) === null || _a === void 0 ? void 0 : _a.toString()}.`);
+            return 0;
+        }
+        const fingerprints = matchedGroups.map((matchGroup) => {
+            return this.buildFingerprint(rule.id, matchGroup.groupValue);
+        });
+        /*
+         * Same fingerprint-scoped dedupe as the alert path — and it matters
+         * more here: a missed fingerprint re-fires IncidentService.create's
+         * whole side-effect train and burns a user-visible incident number.
+         */
+        const openIncidents = await IncidentService.findBy({
+            query: {
+                projectId,
+                seriesFingerprint: new Includes(fingerprints),
+                currentIncidentState: {
+                    isResolvedState: false,
+                },
+            },
+            select: {
+                _id: true,
+                seriesFingerprint: true,
+            },
+            skip: 0,
+            limit: LIMIT_PER_PROJECT,
+            props: {
+                isRoot: true,
+            },
+        });
+        const openFingerprints = new Set(openIncidents
+            .map((incident) => {
+            return incident.seriesFingerprint || "";
+        })
+            .filter((fingerprint) => {
+            return Boolean(fingerprint);
+        }));
+        let created = 0;
+        for (let index = 0; index < matchedGroups.length; index++) {
+            const matchGroup = matchedGroups[index];
+            const fingerprint = fingerprints[index];
+            if (openFingerprints.has(fingerprint)) {
+                continue;
+            }
+            const incident = new Incident();
+            incident.projectId = projectId;
+            incident.title = this.buildMatchTitle(rule, matchGroup);
+            incident.description = this.buildMatchDescription({
+                rule,
+                parsedRule,
+                matchGroup,
+                startTime: data.startTime,
+                endTime: data.endTime,
+            });
+            incident.incidentSeverityId = incidentSeverityId;
+            incident.seriesFingerprint = fingerprint;
+            incident.isCreatedAutomatically = true;
+            incident.rootCause = `Sigma detection rule "${rule.name}" matched security events.`;
+            try {
+                /*
+                 * Per-incident try/catch, like the alert path — but here it also
+                 * guards IncidentService.onBeforeCreate, which throws when the
+                 * project has no "created" incident state. That cannot be
+                 * pre-checked the way an empty severity list can.
+                 */
+                await IncidentService.create({
+                    data: incident,
+                    props: {
+                        isRoot: true,
+                    },
+                });
+                created++;
+            }
+            catch (error) {
+                logger.error(`DetectionRuleEvaluator: failed creating incident for rule ${(_b = rule.id) === null || _b === void 0 ? void 0 : _b.toString()}:`);
+                logger.error(error);
+            }
+        }
+        return created;
+    }
+    static buildMatchTitle(rule, matchGroup) {
+        return matchGroup.groupValue
+            ? `[Detection] ${rule.name} — ${matchGroup.groupValue}`
+            : `[Detection] ${rule.name}`;
+    }
+    static buildMatchDescription(data) {
+        const { rule, parsedRule, matchGroup } = data;
+        const descriptionParts = [];
+        if (rule.description || parsedRule.description) {
+            descriptionParts.push(rule.description || parsedRule.description);
+        }
+        descriptionParts.push(`Detection rule matched ${matchGroup.matchCount} security event${matchGroup.matchCount === 1 ? "" : "s"} between ${OneUptimeDate.getDateAsFormattedString(data.startTime)} and ${OneUptimeDate.getDateAsFormattedString(data.endTime)}.`);
+        if (matchGroup.sampleMessage) {
+            descriptionParts.push(`Sample event: ${matchGroup.sampleMessage}`);
+        }
+        if (matchGroup.sampleObservables.length > 0) {
+            descriptionParts.push(`Observables: ${matchGroup.sampleObservables.slice(0, 20).join(", ")}`);
+        }
+        return descriptionParts.join("\n\n");
+    }
     static async writeDetectionFindings(data) {
         const { rule, parsedRule, matchedGroups } = data;
         const projectId = rule.projectId;
@@ -286,7 +434,7 @@ export default class DetectionRuleEvaluator {
                 categoryUid,
                 categoryName,
                 classUid: DETECTION_FINDING_CLASS_UID,
-                className: "Detection Finding",
+                className: DETECTION_FINDING_CLASS_NAME,
                 activityName: "Create",
                 severityId: OcsfSeverityId[severityName],
                 severityName,
@@ -317,10 +465,10 @@ export default class DetectionRuleEvaluator {
                         }),
                     ]
                     : matchGroup.sampleObservables,
-                attributes: Object.assign(Object.assign({ "oneuptime.detection.rule_id": rule.id.toString(), "oneuptime.detection.rule_name": rule.name || parsedRule.title, "oneuptime.detection.match_count": String(matchGroup.matchCount) }, (matchGroup.groupValue
-                    ? { "oneuptime.detection.group_value": matchGroup.groupValue }
+                attributes: Object.assign(Object.assign({ [DETECTION_RULE_ID_ATTRIBUTE]: rule.id.toString(), [DETECTION_RULE_NAME_ATTRIBUTE]: rule.name || parsedRule.title, [DETECTION_MATCH_COUNT_ATTRIBUTE]: String(matchGroup.matchCount) }, (matchGroup.groupValue
+                    ? { [DETECTION_GROUP_VALUE_ATTRIBUTE]: matchGroup.groupValue }
                     : {})), (parsedRule.id
-                    ? { "oneuptime.detection.sigma_id": parsedRule.id }
+                    ? { [DETECTION_SIGMA_ID_ATTRIBUTE]: parsedRule.id }
                     : {})),
             };
             return buildSecurityEventDbRow({
@@ -363,19 +511,67 @@ export default class DetectionRuleEvaluator {
                 isRoot: true,
             },
         });
+        return this.pickSeverityByPrecedence({
+            severities,
+            explicitSeverityId: data.rule.alertSeverityId,
+            level: data.parsedRule.level,
+        });
+    }
+    /*
+     * Incident severity precedence, identical in shape to the alert
+     * resolver: the rule's explicit incident severity (validated to belong
+     * to this project — IncidentService.onBeforeCreate rejects cross-project
+     * ids with a thrown exception, so pre-validating here keeps a stale id
+     * a soft fallback instead of a hard failure), else a name match on the
+     * Sigma level, else severity by rank. Null only when the project has no
+     * incident severities at all.
+     */
+    static async resolveIncidentSeverityId(data) {
+        const severities = await IncidentSeverityService.findBy({
+            query: {
+                projectId: data.projectId,
+            },
+            select: {
+                _id: true,
+                name: true,
+            },
+            sort: {
+                order: SortOrder.Ascending,
+            },
+            skip: 0,
+            limit: LIMIT_PER_PROJECT,
+            props: {
+                isRoot: true,
+            },
+        });
+        return this.pickSeverityByPrecedence({
+            severities,
+            explicitSeverityId: data.rule.incidentSeverityId,
+            level: data.parsedRule.level,
+        });
+    }
+    /*
+     * The precedence logic both resolvers share. Severities arrive sorted
+     * by order ascending — lowest order is most severe, per the model's
+     * own convention — so "most severe" is the first element and "least
+     * severe" the last. An explicit id that is not in the list (deleted, or
+     * belonging to another project) falls through silently rather than
+     * failing the rule.
+     */
+    static pickSeverityByPrecedence(data) {
+        const { severities, explicitSeverityId, level } = data;
         if (severities.length === 0) {
             return null;
         }
-        if (data.rule.alertSeverityId) {
+        if (explicitSeverityId) {
             const explicit = severities.find((severity) => {
-                var _a, _b;
-                return (((_a = severity.id) === null || _a === void 0 ? void 0 : _a.toString()) === ((_b = data.rule.alertSeverityId) === null || _b === void 0 ? void 0 : _b.toString()));
+                var _a;
+                return ((_a = severity.id) === null || _a === void 0 ? void 0 : _a.toString()) === explicitSeverityId.toString();
             });
             if (explicit && explicit.id) {
                 return explicit.id;
             }
         }
-        const level = data.parsedRule.level;
         const nameMatch = severities.find((severity) => {
             return (severity.name || "").toLowerCase() === level.toLowerCase();
         });

package/build/dist/Server/Utils/SecurityEvent/DetectionRuleEvaluator.js.map

@@ -1 +1 @@
-{"version":3,"file":"DetectionRuleEvaluator.js","sourceRoot":"","sources":["../../../../../Server/Utils/SecurityEvent/DetectionRuleEvaluator.ts"],"names":[],"mappings":";;;;;;;;;AAAA,OAAO,aAAa,MAAM,8CAA8C,CAAC;AACzE,OAAO,KAAK,MAAM,sCAAsC,CAAC;AAEzD,OAAO,SAAS,EAAE,EAAE,iBAAiB,EAAE,MAAM,kCAAkC,CAAC;AAChF,OAAO,aAAa,MAAM,qBAAqB,CAAC;AAEhD,OAAO,SAAS,MAAM,uCAAuC,CAAC;AAG9D,OAAO,YAAY,EAAE,EACnB,cAAc,GACf,MAAM,2CAA2C,CAAC;AACnD,OAAO,EAAE,uBAAuB,EAAE,MAAM,6CAA6C,CAAC;AACtF,OAAkB,EAAE,UAAU,EAAE,MAAM,wCAAwC,CAAC;AAC/E,OAAO,eAAe,MAAM,oDAAoD,CAAC;AACjF,OAAO,uBAAuB,MAAM,gDAAgD,CAAC;AACrF,OAAO,YAAY,MAAM,6BAA6B,CAAC;AACvD,OAAO,oBAAoB,MAAM,qCAAqC,CAAC;AACvE,OAAO,oBAAoB,MAAM,qCAAqC,CAAC;AACvE,OAAO,iBAEN,MAAM,2CAA2C,CAAC;AACnD,OAAO,oBAEN,MAAM,qCAAqC,CAAC;AAC7C,OAAO,EAAE,+BAA+B,EAAE,MAAM,mDAAmD,CAAC;AACpG,OAAO,MAAM,MAAM,WAAW,CAAC;AAC/B,OAAO,WAAW,MAAM,0BAA0B,CAAC;AAEnD,OAAO,uBAAuB,EAAE,EAC9B,yBAAyB,GAC1B,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAE,uBAAuB,EAAE,MAAM,oBAAoB,CAAC;AAE7D,MAAM,2BAA2B,GAAW,IAAI,CAAC;AACjD,MAAM,uBAAuB,GAAW,sBAAsB,CAAC;AAE/D;;;;GAIG;AACH,MAAM,uBAAuB,GAAW,EAAE,GAAG,EAAE,CAAC;AAEhD,yDAAyD;AACzD,MAAM,yBAAyB,GAAW,GAAG,CAAC;AAE9C,MAAM,mBAAmB,GAAqC;IAC5D,CAAC,UAAU,CAAC,aAAa,CAAC,EAAE,YAAY,CAAC,aAAa;IACtD,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,YAAY,CAAC,GAAG;IAClC,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,YAAY,CAAC,MAAM;IACxC,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,YAAY,CAAC,IAAI;IACpC,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,YAAY,CAAC,QAAQ;CAC7C,CAAC;AAWF;;;;GAIG;AACH,MAAM,CAAC,OAAO,OAAO,sBAAsB;IAErB,AAAb,MAAM,CAAC,KAAK,CAAC,mBAAmB;;QACrC,MAAM,KAAK,GAAyB,MAAM,oBAAoB,CAAC,MAAM,CAAC;YACpE,KAAK,EAAE;gBACL,SAAS,EAAE,IAAI;aAChB;YACD,MAAM,EAAE;gBACN,GAAG,EAAE,IAAI;gBACT,SAAS,EAAE,IAAI;gBACf,IAAI,EAAE,IAAI;gBACV,WAAW,EAAE,IAAI;gBACjB,aAAa,EAAE,IAAI;gBACnB,2BAA2B,EAAE,IAAI;gBACjC,YAAY,EAAE,IAAI;gBAClB,iBAAiB,EAAE,IAAI;gBACvB,2BAA2B,EAAE,IAAI;gBACjC,eAAe,EAAE,IAAI;gBACrB,eAAe,EAAE,IAAI;aACtB;YACD,IAAI,EAAE,CAAC;YACP,KAAK,EAAE,SAAS;YAChB,KAAK,EAAE;gBACL,MAAM,EAAE,IAAI;aACb;SACF,CAAC,CAAC;QAEH,MAAM,GAAG,GAAS,aAAa,CAAC,cAAc,EAAE,CAAC;QAEjD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,iBAAiB,GAAW,IAAI,CAAC,GAAG,CACxC,CAAC,EACD,IAAI,CAAC,2BAA2B,IAAI,CAAC,CACtC,CAAC;YAEF,IAAI,IAAI,CAAC,eAAe,EAAE,CAAC;gBACzB,MAAM,KAAK,GAAS,aAAa,CAAC,gBAAgB,CAChD,IAAI,CAAC,eAAe,EACpB,iBAAiB,CAClB,CAAC;gBAEF,IAAI,aAAa,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,EAAE,CAAC;oBACtC,SAAS;gBACX,CAAC;YACH,CAAC;YAED,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;YAChC,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,CAAC,KAAK,CACV,iDAAiD,MAAA,IAAI,CAAC,EAAE,0CAAE,QAAQ,EAAE,GAAG,CACxE,CAAC;gBACF,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;gBAEpB,IAAI,IAAI,CAAC,EAAE,EAAE,CAAC;oBACZ,MAAM,oBAAoB,CAAC,aAAa,CAAC;wBACvC,EAAE,EAAE,IAAI,CAAC,EAAE;wBACX,IAAI,EAAE;4BACJ,eAAe,EAAE,aAAa,CAAC,cAAc,EAAE;4BAC/C,SAAS,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;yBAClE;wBACD,KAAK,EAAE;4BACL,MAAM,EAAE,IAAI;yBACb;qBACF,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAGmB,AAAb,MAAM,CAAC,KAAK,CAAC,YAAY,CAC9B,IAAmB;QAEnB,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,SAAS,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;YACvD,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;QACvE,CAAC;QAED,MAAM,UAAU,GAAc,eAAe,CAAC,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QACxE,MAAM,aAAa,GACjB,uBAAuB,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QAE9C,MAAM,OAAO,GAAS,aAAa,CAAC,cAAc,EAAE,CAAC;QACrD,MAAM,iBAAiB,GAAW,IAAI,CAAC,GAAG,CACxC,CAAC,EACD,IAAI,CAAC,2BAA2B,IAAI,CAAC,CACtC,CAAC;QAEF,MAAM,eAAe,GAAS,aAAa,CAAC,gBAAgB,CAC1D,OAAO,EACP,CAAC,uBAAuB,CACzB,CAAC;QAEF,IAAI,SAAS,GAAS,IAAI,CAAC,eAAe;YACxC,CAAC,CAAC,IAAI,CAAC,eAAe;YACtB,CAAC,CAAC,aAAa,CAAC,gBAAgB,CAAC,OAAO,EAAE,CAAC,iBAAiB,CAAC,CAAC;QAEhE,IAAI,aAAa,CAAC,QAAQ,CAAC,SAAS,EAAE,eAAe,CAAC,EAAE,CAAC;YACvD,SAAS,GAAG,eAAe,CAAC;QAC9B,CAAC;QAED,MAAM,iBAAiB,GAAqB,IAAI,CAAC,YAAY;YAC3D,CAAC,CAAC,yBAAyB,CAAC,IAAI,CAAC,YAAY,CAAC;YAC9C,CAAC,CAAC,IAAI,CAAC;QAET,MAAM,MAAM,GACV,MAAM,oBAAoB,CAAC,oBAAoB,CAAC;YAC9C,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,SAAS;YACT,OAAO;YACP,aAAa;YACb,iBAAiB;YACjB,SAAS,EAAE,yBAAyB;SACrC,CAAC,CAAC;QAEL,MAAM,aAAa,GAA+B,MAAM,CAAC,MAAM,CAC7D,CAAC,GAAwB,EAAW,EAAE;YACpC,OAAO,GAAG,CAAC,UAAU,GAAG,CAAC,CAAC;QAC5B,CAAC,CACF,CAAC;QAEF,IAAI,aAAa,GAAW,CAAC,CAAC;QAC9B,IAAI,eAAe,GAAW,CAAC,CAAC;QAChC,IAAI,YAAY,GAAW,CAAC,CAAC;QAE7B,KAAK,MAAM,UAAU,IAAI,aAAa,EAAE,CAAC;YACvC,YAAY,IAAI,UAAU,CAAC,UAAU,CAAC;QACxC,CAAC;QAED,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC7B,IAAI,IAAI,CAAC,iBAAiB,KAAK,KAAK,EAAE,CAAC;gBACrC,aAAa,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAAC;oBAC9C,IAAI;oBACJ,UAAU;oBACV,aAAa;oBACb,SAAS;oBACT,OAAO;iBACR,CAAC,CAAC;YACL,CAAC;YAED,IAAI,IAAI,CAAC,2BAA2B,KAAK,KAAK,EAAE,CAAC;gBAC/C,eAAe,GAAG,MAAM,IAAI,CAAC,sBAAsB,CAAC;oBAClD,IAAI;oBACJ,UAAU;oBACV,aAAa;iBACd,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,MAAM,oBAAoB,CAAC,aAAa,CAAC;YACvC,EAAE,EAAE,IAAI,CAAC,EAAE;YACX,IAAI,kBACF,eAAe,EAAE,OAAO,EACxB,SAAS,EAAE,IAAyB,IACjC,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAC9D;YACD,KAAK,EAAE;gBACL,MAAM,EAAE,IAAI;aACb;SACF,CAAC,CAAC;QAEH,OAAO;YACL,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC,QAAQ,EAAE;YAC1B,aAAa,EAAE,aAAa,CAAC,MAAM;YACnC,YAAY;YACZ,aAAa;YACb,eAAe;YACf,KAAK,EAAE,IAAI;SACZ,CAAC;IACJ,CAAC;IAEO,MAAM,CAAC,KAAK,CAAC,oBAAoB,CAAC,IAMzC;;QACC,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,aAAa,EAAE,GAAG,IAAI,CAAC;QACjD,MAAM,SAAS,GAAa,IAAI,CAAC,SAAU,CAAC;QAE5C,MAAM,eAAe,GAAoB,MAAM,IAAI,CAAC,sBAAsB,CAAC;YACzE,SAAS;YACT,IAAI;YACJ,UAAU;SACX,CAAC,CAAC;QAEH,IAAI,CAAC,eAAe,EAAE,CAAC;YACrB,MAAM,CAAC,IAAI,CACT,mCAAmC,SAAS,CAAC,QAAQ,EAAE,8DAA8D,MAAA,IAAI,CAAC,EAAE,0CAAE,QAAQ,EAAE,GAAG,CAC5I,CAAC;YACF,OAAO,CAAC,CAAC;QACX,CAAC;QAED;;;;WAIG;QACH,MAAM,YAAY,GAAkB,aAAa,CAAC,GAAG,CACnD,CAAC,UAA+B,EAAU,EAAE;YAC1C,OAAO,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,EAAG,EAAE,UAAU,CAAC,UAAU,CAAC,CAAC;QAChE,CAAC,CACF,CAAC;QAEF,MAAM,UAAU,GAAiB,MAAM,YAAY,CAAC,MAAM,CAAC;YACzD,KAAK,EAAE;gBACL,SAAS;gBACT,iBAAiB,EAAE;oBACjB,eAAe,EAAE,KAAK;iBACvB;aACF;YACD,MAAM,EAAE;gBACN,GAAG,EAAE,IAAI;gBACT,iBAAiB,EAAE,IAAI;aACxB;YACD,IAAI,EAAE,CAAC;YACP,KAAK,EAAE,iBAAiB;YACxB,KAAK,EAAE;gBACL,MAAM,EAAE,IAAI;aACb;SACF,CAAC,CAAC;QAEH,MAAM,gBAAgB,GAAgB,IAAI,GAAG,CAC3C,UAAU;aACP,GAAG,CAAC,CAAC,KAAY,EAAU,EAAE;YAC5B,OAAO,KAAK,CAAC,iBAAiB,IAAI,EAAE,CAAC;QACvC,CAAC,CAAC;aACD,MAAM,CAAC,CAAC,WAAmB,EAAW,EAAE;YACvC,OAAO,OAAO,CAAC,WAAW,CAAC,CAAC;QAC9B,CAAC,CAAC,CACL,CAAC;QAEF,IAAI,OAAO,GAAW,CAAC,CAAC;QAExB,KAAK,IAAI,KAAK,GAAW,CAAC,EAAE,KAAK,GAAG,aAAa,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC;YAClE,MAAM,UAAU,GAAwB,aAAa,CAAC,KAAK,CAAE,CAAC;YAC9D,MAAM,WAAW,GAAW,YAAY,CAAC,KAAK,CAAE,CAAC;YAEjD,IAAI,gBAAgB,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC;gBACtC,SAAS;YACX,CAAC;YAED,MAAM,KAAK,GAAU,IAAI,KAAK,EAAE,CAAC;YACjC,KAAK,CAAC,SAAS,GAAG,SAAS,CAAC;YAC5B,KAAK,CAAC,KAAK,GAAG,UAAU,CAAC,UAAU;gBACjC,CAAC,CAAC,eAAe,IAAI,CAAC,IAAI,MAAM,UAAU,CAAC,UAAU,EAAE;gBACvD,CAAC,CAAC,eAAe,IAAI,CAAC,IAAI,EAAE,CAAC;YAE/B,MAAM,gBAAgB,GAAkB,EAAE,CAAC;YAE3C,IAAI,IAAI,CAAC,WAAW,IAAI,UAAU,CAAC,WAAW,EAAE,CAAC;gBAC/C,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,IAAI,UAAU,CAAC,WAAW,CAAC,CAAC;YACpE,CAAC;YAED,gBAAgB,CAAC,IAAI,CACnB,0BAA0B,UAAU,CAAC,UAAU,kBAC7C,UAAU,CAAC,UAAU,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GACrC,YAAY,aAAa,CAAC,wBAAwB,CAChD,IAAI,CAAC,SAAS,CACf,QAAQ,aAAa,CAAC,wBAAwB,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CACjE,CAAC;YAEF,IAAI,UAAU,CAAC,aAAa,EAAE,CAAC;gBAC7B,gBAAgB,CAAC,IAAI,CAAC,iBAAiB,UAAU,CAAC,aAAa,EAAE,CAAC,CAAC;YACrE,CAAC;YAED,IAAI,UAAU,CAAC,iBAAiB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC5C,gBAAgB,CAAC,IAAI,CACnB,gBAAgB,UAAU,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACvE,CAAC;YACJ,CAAC;YAED,KAAK,CAAC,WAAW,GAAG,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAClD,KAAK,CAAC,eAAe,GAAG,eAAe,CAAC;YACxC,KAAK,CAAC,iBAAiB,GAAG,WAAW,CAAC;YACtC,KAAK,CAAC,sBAAsB,GAAG,IAAI,CAAC;YACpC,KAAK,CAAC,SAAS,GAAG,yBAAyB,IAAI,CAAC,IAAI,4BAA4B,CAAC;YAEjF,IAAI,CAAC;gBACH,MAAM,YAAY,CAAC,MAAM,CAAC;oBACxB,IAAI,EAAE,KAAK;oBACX,KAAK,EAAE;wBACL,MAAM,EAAE,IAAI;qBACb;iBACF,CAAC,CAAC;gBACH,OAAO,EAAE,CAAC;YACZ,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,CAAC,KAAK,CACV,0DAA0D,MAAA,IAAI,CAAC,EAAE,0CAAE,QAAQ,EAAE,GAAG,CACjF,CAAC;gBACF,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YACtB,CAAC;QACH,CAAC;QAED,OAAO,OAAO,CAAC;IACjB,CAAC;IAEO,MAAM,CAAC,KAAK,CAAC,sBAAsB,CAAC,IAI3C;QACC,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,aAAa,EAAE,GAAG,IAAI,CAAC;QACjD,MAAM,SAAS,GAAa,IAAI,CAAC,SAAU,CAAC;QAE5C,MAAM,eAAe,GACnB,MAAM,iBAAiB,CAAC,wBAAwB,CAAC;YAC/C,WAAW,EAAE,uBAAuB;YACpC,SAAS;SACV,CAAC,CAAC;QAEL,MAAM,aAAa,GAAW,+BAA+B,CAAC;YAC5D,MAAM,EAAE,gBAAgB;YACxB,aAAa,EAAE,eAAe,CAAC,sBAAsB;YACrD,sBAAsB,EAAE,eAAe,CAAC,sBAAsB;YAC9D,aAAa,EAAE,eAAe,CAAC,sBAAsB;YACrD,sBAAsB,EAAE,eAAe,CAAC,sBAAsB;SAC/D,CAAC,CAAC;QAEH,MAAM,YAAY,GAChB,mBAAmB,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,YAAY,CAAC,MAAM,CAAC;QAE/D,MAAM,EAAE,WAAW,EAAE,YAAY,EAAE,GAAG,uBAAuB,CAC3D,2BAA2B,CAC5B,CAAC;QAEF,MAAM,IAAI,GAAsB,aAAa,CAAC,GAAG,CAC/C,CAAC,UAA+B,EAAc,EAAE;YAC9C,MAAM,UAAU,GAA4B;gBAC1C,IAAI,EAAE,aAAa,CAAC,cAAc,EAAE;gBACpC,QAAQ,EAAE,aAAa,IAAI,CAAC,EAAG,CAAC,QAAQ,EAAE,IAAI,IAAI,CAAC,gBAAgB,CACjE,IAAI,CAAC,EAAG,EACR,UAAU,CAAC,UAAU,CACtB,IAAI,aAAa,CAAC,wBAAwB,EAAE,EAAE;gBAC/C,WAAW;gBACX,YAAY;gBACZ,QAAQ,EAAE,2BAA2B;gBACrC,SAAS,EAAE,mBAAmB;gBAC9B,YAAY,EAAE,QAAQ;gBACtB,UAAU,EAAE,cAAc,CAAC,YAAY,CAAC;gBACxC,YAAY;gBACZ,UAAU,EAAE,KAAK;gBACjB,OAAO,EAAE,UAAU,CAAC,UAAU;oBAC5B,CAAC,CAAC,cAAc,IAAI,CAAC,IAAI,MAAM,UAAU,CAAC,UAAU,KAAK,UAAU,CAAC,UAAU,UAAU;oBACxF,CAAC,CAAC,cAAc,IAAI,CAAC,IAAI,KAAK,UAAU,CAAC,UAAU,UAAU;gBAC/D,UAAU,EAAE,WAAW;gBACvB,WAAW,EAAE,sBAAsB;gBACnC,MAAM,EAAE,IAAI,CAAC,EAAG,CAAC,QAAQ,EAAE;gBAC3B,QAAQ,EAAE,IAAI,CAAC,IAAI,IAAI,UAAU,CAAC,KAAK;gBACvC,YAAY,EAAE,UAAU,CAAC,YAAY;gBACrC,eAAe,EAAE,UAAU,CAAC,eAAe;gBAC3C,aAAa,EAAE,EAAE;gBACjB,aAAa,EAAE,EAAE;gBACjB,WAAW,EAAE,EAAE;gBACf,gBAAgB,EAAE,EAAE;gBACpB,UAAU,EAAE,EAAE;gBACd,UAAU,EAAE,EAAE;gBACd,QAAQ,EAAE,EAAE;gBACZ,UAAU,EAAE,CAAC;gBACb,cAAc,EAAE,EAAE;gBAClB,WAAW,EAAE,UAAU,CAAC,UAAU;oBAChC,CAAC,CAAC;wBACE,UAAU,CAAC,UAAU;wBACrB,GAAG,UAAU,CAAC,iBAAiB,CAAC,MAAM,CACpC,CAAC,UAAkB,EAAW,EAAE;4BAC9B,OAAO,UAAU,KAAK,UAAU,CAAC,UAAU,CAAC;wBAC9C,CAAC,CACF;qBACF;oBACH,CAAC,CAAC,UAAU,CAAC,iBAAiB;gBAChC,UAAU,gCACR,6BAA6B,EAAE,IAAI,CAAC,EAAG,CAAC,QAAQ,EAAE,EAClD,+BAA+B,EAAE,IAAI,CAAC,IAAI,IAAI,UAAU,CAAC,KAAK,EAC9D,iCAAiC,EAAE,MAAM,CAAC,UAAU,CAAC,UAAU,CAAC,IAC7D,CAAC,UAAU,CAAC,UAAU;oBACvB,CAAC,CAAC,EAAE,iCAAiC,EAAE,UAAU,CAAC,UAAU,EAAE;oBAC9D,CAAC,CAAC,EAAE,CAAC,GACJ,CAAC,UAAU,CAAC,EAAE;oBACf,CAAC,CAAC,EAAE,8BAA8B,EAAE,UAAU,CAAC,EAAE,EAAE;oBACnD,CAAC,CAAC,EAAE,CAAC,CACR;aACF,CAAC;YAEF,OAAO,uBAAuB,CAAC;gBAC7B,UAAU;gBACV,SAAS;gBACT,eAAe;gBACf,aAAa;aACd,CAAC,CAAC;QACL,CAAC,CACF,CAAC;QAEF,MAAM,oBAAoB,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;QAEhD,OAAO,IAAI,CAAC,MAAM,CAAC;IACrB,CAAC;IAEO,MAAM,CAAC,gBAAgB,CAC7B,MAAgB,EAChB,UAAkB;QAElB,OAAO,kBAAkB,MAAM,CAAC,QAAQ,EAAE,IAAI,uBAAuB,CAAC,kBAAkB,CACtF;YACE,UAAU,EAAE,UAAU,IAAI,EAAE;SAC7B,CACF,EAAE,CAAC;IACN,CAAC;IAED;;;;;;OAMG;IACK,MAAM,CAAC,KAAK,CAAC,sBAAsB,CAAC,IAI3C;QACC,MAAM,UAAU,GAAyB,MAAM,oBAAoB,CAAC,MAAM,CAAC;YACzE,KAAK,EAAE;gBACL,SAAS,EAAE,IAAI,CAAC,SAAS;aAC1B;YACD,MAAM,EAAE;gBACN,GAAG,EAAE,IAAI;gBACT,IAAI,EAAE,IAAI;aACX;YACD,IAAI,EAAE;gBACJ,KAAK,EAAE,SAAS,CAAC,SAAS;aAC3B;YACD,IAAI,EAAE,CAAC;YACP,KAAK,EAAE,iBAAiB;YACxB,KAAK,EAAE;gBACL,MAAM,EAAE,IAAI;aACb;SACF,CAAC,CAAC;QAEH,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC5B,OAAO,IAAI,CAAC;QACd,CAAC;QAED,IAAI,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC;YAC9B,MAAM,QAAQ,GAA8B,UAAU,CAAC,IAAI,CACzD,CAAC,QAAuB,EAAW,EAAE;;gBACnC,OAAO,CACL,CAAA,MAAA,QAAQ,CAAC,EAAE,0CAAE,QAAQ,EAAE,OAAK,MAAA,IAAI,CAAC,IAAI,CAAC,eAAe,0CAAE,QAAQ,EAAE,CAAA,CAClE,CAAC;YACJ,CAAC,CACF,CAAC;YAEF,IAAI,QAAQ,IAAI,QAAQ,CAAC,EAAE,EAAE,CAAC;gBAC5B,OAAO,QAAQ,CAAC,EAAE,CAAC;YACrB,CAAC;QACH,CAAC;QAED,MAAM,KAAK,GAAe,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC;QAEhD,MAAM,SAAS,GAA8B,UAAU,CAAC,IAAI,CAC1D,CAAC,QAAuB,EAAW,EAAE;YACnC,OAAO,CAAC,QAAQ,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,KAAK,KAAK,CAAC,WAAW,EAAE,CAAC;QACrE,CAAC,CACF,CAAC;QAEF,IAAI,SAAS,IAAI,SAAS,CAAC,EAAE,EAAE,CAAC;YAC9B,OAAO,SAAS,CAAC,EAAE,CAAC;QACtB,CAAC;QAED,MAAM,QAAQ,GACZ,KAAK,KAAK,UAAU,CAAC,QAAQ,IAAI,KAAK,KAAK,UAAU,CAAC,IAAI,CAAC;QAE7D,MAAM,MAAM,GAAkB,QAAQ;YACpC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAE;YAChB,CAAC,CAAC,UAAU,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,CAAE,CAAC;QAEvC,OAAO,MAAM,CAAC,EAAE,IAAI,IAAI,CAAC;IAC3B,CAAC;CACF;AA5dqB;IADnB,WAAW,EAAE;;;;uDAmEb;AAGmB;IADnB,WAAW,EAAE;;qCAEN,aAAa;;gDAiGpB"}
+{"version":3,"file":"DetectionRuleEvaluator.js","sourceRoot":"","sources":["../../../../../Server/Utils/SecurityEvent/DetectionRuleEvaluator.ts"],"names":[],"mappings":";;;;;;;;;AAAA,OAAO,aAAa,MAAM,8CAA8C,CAAC;AACzE,OAAO,KAAK,MAAM,sCAAsC,CAAC;AAEzD,OAAO,QAAQ,MAAM,yCAAyC,CAAC;AAE/D,OAAO,SAAS,EAAE,EAAE,iBAAiB,EAAE,MAAM,kCAAkC,CAAC;AAChF,OAAO,aAAa,MAAM,qBAAqB,CAAC;AAEhD,OAAO,SAAS,MAAM,uCAAuC,CAAC;AAC9D,OAAO,QAAQ,MAAM,sCAAsC,CAAC;AAG5D,OAAO,YAAY,EAAE,EACnB,cAAc,GACf,MAAM,2CAA2C,CAAC;AACnD,OAAO,EAAE,uBAAuB,EAAE,MAAM,6CAA6C,CAAC;AACtF,OAAkB,EAAE,UAAU,EAAE,MAAM,wCAAwC,CAAC;AAC/E,OAAO,EACL,4BAA4B,EAC5B,2BAA2B,EAC3B,+BAA+B,EAC/B,+BAA+B,EAC/B,2BAA2B,EAC3B,6BAA6B,EAC7B,4BAA4B,GAC7B,MAAM,wDAAwD,CAAC;AAChE,OAAO,eAAe,MAAM,oDAAoD,CAAC;AACjF,OAAO,uBAAuB,MAAM,gDAAgD,CAAC;AACrF,OAAO,YAAY,MAAM,6BAA6B,CAAC;AACvD,OAAO,oBAAoB,MAAM,qCAAqC,CAAC;AACvE,OAAO,eAAe,MAAM,gCAAgC,CAAC;AAC7D,OAAO,uBAAuB,MAAM,wCAAwC,CAAC;AAC7E,OAAO,oBAAoB,MAAM,qCAAqC,CAAC;AACvE,OAAO,iBAEN,MAAM,2CAA2C,CAAC;AACnD,OAAO,oBAEN,MAAM,qCAAqC,CAAC;AAC7C,OAAO,EAAE,+BAA+B,EAAE,MAAM,mDAAmD,CAAC;AACpG,OAAO,MAAM,MAAM,WAAW,CAAC;AAC/B,OAAO,WAAW,MAAM,0BAA0B,CAAC;AAEnD,OAAO,uBAAuB,EAAE,EAC9B,yBAAyB,GAC1B,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAE,uBAAuB,EAAE,MAAM,oBAAoB,CAAC;AAE7D,MAAM,uBAAuB,GAAW,sBAAsB,CAAC;AAE/D;;;;GAIG;AACH,MAAM,uBAAuB,GAAW,EAAE,GAAG,EAAE,CAAC;AAEhD,yDAAyD;AACzD,MAAM,yBAAyB,GAAW,GAAG,CAAC;AAE9C,MAAM,mBAAmB,GAAqC;IAC5D,CAAC,UAAU,CAAC,aAAa,CAAC,EAAE,YAAY,CAAC,aAAa;IACtD,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,YAAY,CAAC,GAAG;IAClC,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,YAAY,CAAC,MAAM;IACxC,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,YAAY,CAAC,IAAI;IACpC,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,YAAY,CAAC,QAAQ;CAC7C,CAAC;AAYF;;;;GAIG;AACH,MAAM,CAAC,OAAO,OAAO,sBAAsB;IAErB,AAAb,MAAM,CAAC,KAAK,CAAC,mBAAmB;;QACrC,MAAM,KAAK,GAAyB,MAAM,oBAAoB,CAAC,MAAM,CAAC;YACpE,KAAK,EAAE;gBACL,SAAS,EAAE,IAAI;aAChB;YACD,MAAM,EAAE;gBACN,GAAG,EAAE,IAAI;gBACT,SAAS,EAAE,IAAI;gBACf,IAAI,EAAE,IAAI;gBACV,WAAW,EAAE,IAAI;gBACjB,aAAa,EAAE,IAAI;gBACnB,2BAA2B,EAAE,IAAI;gBACjC,YAAY,EAAE,IAAI;gBAClB,iBAAiB,EAAE,IAAI;gBACvB,2BAA2B,EAAE,IAAI;gBACjC,oBAAoB,EAAE,IAAI;gBAC1B,eAAe,EAAE,IAAI;gBACrB,kBAAkB,EAAE,IAAI;gBACxB,eAAe,EAAE,IAAI;aACtB;YACD,IAAI,EAAE,CAAC;YACP,KAAK,EAAE,SAAS;YAChB,KAAK,EAAE;gBACL,MAAM,EAAE,IAAI;aACb;SACF,CAAC,CAAC;QAEH,MAAM,GAAG,GAAS,aAAa,CAAC,cAAc,EAAE,CAAC;QAEjD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,iBAAiB,GAAW,IAAI,CAAC,GAAG,CACxC,CAAC,EACD,IAAI,CAAC,2BAA2B,IAAI,CAAC,CACtC,CAAC;YAEF,IAAI,IAAI,CAAC,eAAe,EAAE,CAAC;gBACzB,MAAM,KAAK,GAAS,aAAa,CAAC,gBAAgB,CAChD,IAAI,CAAC,eAAe,EACpB,iBAAiB,CAClB,CAAC;gBAEF,IAAI,aAAa,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,EAAE,CAAC;oBACtC,SAAS;gBACX,CAAC;YACH,CAAC;YAED,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;YAChC,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,CAAC,KAAK,CACV,iDAAiD,MAAA,IAAI,CAAC,EAAE,0CAAE,QAAQ,EAAE,GAAG,CACxE,CAAC;gBACF,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;gBAEpB,IAAI,IAAI,CAAC,EAAE,EAAE,CAAC;oBACZ,MAAM,oBAAoB,CAAC,aAAa,CAAC;wBACvC,EAAE,EAAE,IAAI,CAAC,EAAE;wBACX,IAAI,EAAE;4BACJ,eAAe,EAAE,aAAa,CAAC,cAAc,EAAE;4BAC/C,SAAS,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;yBAClE;wBACD,KAAK,EAAE;4BACL,MAAM,EAAE,IAAI;yBACb;qBACF,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAGmB,AAAb,MAAM,CAAC,KAAK,CAAC,YAAY,CAC9B,IAAmB;QAEnB,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,SAAS,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;YACvD,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;QACvE,CAAC;QAED,MAAM,UAAU,GAAc,eAAe,CAAC,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QACxE,MAAM,aAAa,GACjB,uBAAuB,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QAE9C,MAAM,OAAO,GAAS,aAAa,CAAC,cAAc,EAAE,CAAC;QACrD,MAAM,iBAAiB,GAAW,IAAI,CAAC,GAAG,CACxC,CAAC,EACD,IAAI,CAAC,2BAA2B,IAAI,CAAC,CACtC,CAAC;QAEF,MAAM,eAAe,GAAS,aAAa,CAAC,gBAAgB,CAC1D,OAAO,EACP,CAAC,uBAAuB,CACzB,CAAC;QAEF,IAAI,SAAS,GAAS,IAAI,CAAC,eAAe;YACxC,CAAC,CAAC,IAAI,CAAC,eAAe;YACtB,CAAC,CAAC,aAAa,CAAC,gBAAgB,CAAC,OAAO,EAAE,CAAC,iBAAiB,CAAC,CAAC;QAEhE,IAAI,aAAa,CAAC,QAAQ,CAAC,SAAS,EAAE,eAAe,CAAC,EAAE,CAAC;YACvD,SAAS,GAAG,eAAe,CAAC;QAC9B,CAAC;QAED,MAAM,iBAAiB,GAAqB,IAAI,CAAC,YAAY;YAC3D,CAAC,CAAC,yBAAyB,CAAC,IAAI,CAAC,YAAY,CAAC;YAC9C,CAAC,CAAC,IAAI,CAAC;QAET,MAAM,MAAM,GACV,MAAM,oBAAoB,CAAC,oBAAoB,CAAC;YAC9C,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,SAAS;YACT,OAAO;YACP,aAAa;YACb,iBAAiB;YACjB,SAAS,EAAE,yBAAyB;SACrC,CAAC,CAAC;QAEL,MAAM,aAAa,GAA+B,MAAM,CAAC,MAAM,CAC7D,CAAC,GAAwB,EAAW,EAAE;YACpC,OAAO,GAAG,CAAC,UAAU,GAAG,CAAC,CAAC;QAC5B,CAAC,CACF,CAAC;QAEF,IAAI,aAAa,GAAW,CAAC,CAAC;QAC9B,IAAI,gBAAgB,GAAW,CAAC,CAAC;QACjC,IAAI,eAAe,GAAW,CAAC,CAAC;QAChC,IAAI,YAAY,GAAW,CAAC,CAAC;QAE7B,KAAK,MAAM,UAAU,IAAI,aAAa,EAAE,CAAC;YACvC,YAAY,IAAI,UAAU,CAAC,UAAU,CAAC;QACxC,CAAC;QAED,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC7B,IAAI,IAAI,CAAC,iBAAiB,KAAK,KAAK,EAAE,CAAC;gBACrC,aAAa,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAAC;oBAC9C,IAAI;oBACJ,UAAU;oBACV,aAAa;oBACb,SAAS;oBACT,OAAO;iBACR,CAAC,CAAC;YACL,CAAC;YAED;;;;;eAKG;YACH,IAAI,IAAI,CAAC,oBAAoB,KAAK,IAAI,EAAE,CAAC;gBACvC,gBAAgB,GAAG,MAAM,IAAI,CAAC,uBAAuB,CAAC;oBACpD,IAAI;oBACJ,UAAU;oBACV,aAAa;oBACb,SAAS;oBACT,OAAO;iBACR,CAAC,CAAC;YACL,CAAC;YAED,IAAI,IAAI,CAAC,2BAA2B,KAAK,KAAK,EAAE,CAAC;gBAC/C,eAAe,GAAG,MAAM,IAAI,CAAC,sBAAsB,CAAC;oBAClD,IAAI;oBACJ,UAAU;oBACV,aAAa;iBACd,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,MAAM,oBAAoB,CAAC,aAAa,CAAC;YACvC,EAAE,EAAE,IAAI,CAAC,EAAE;YACX,IAAI,kBACF,eAAe,EAAE,OAAO,EACxB,SAAS,EAAE,IAAyB,IACjC,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAC9D;YACD,KAAK,EAAE;gBACL,MAAM,EAAE,IAAI;aACb;SACF,CAAC,CAAC;QAEH,OAAO;YACL,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC,QAAQ,EAAE;YAC1B,aAAa,EAAE,aAAa,CAAC,MAAM;YACnC,YAAY;YACZ,aAAa;YACb,gBAAgB;YAChB,eAAe;YACf,KAAK,EAAE,IAAI;SACZ,CAAC;IACJ,CAAC;IAEO,MAAM,CAAC,KAAK,CAAC,oBAAoB,CAAC,IAMzC;;QACC,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,aAAa,EAAE,GAAG,IAAI,CAAC;QACjD,MAAM,SAAS,GAAa,IAAI,CAAC,SAAU,CAAC;QAE5C,MAAM,eAAe,GAAoB,MAAM,IAAI,CAAC,sBAAsB,CAAC;YACzE,SAAS;YACT,IAAI;YACJ,UAAU;SACX,CAAC,CAAC;QAEH,IAAI,CAAC,eAAe,EAAE,CAAC;YACrB,MAAM,CAAC,IAAI,CACT,mCAAmC,SAAS,CAAC,QAAQ,EAAE,8DAA8D,MAAA,IAAI,CAAC,EAAE,0CAAE,QAAQ,EAAE,GAAG,CAC5I,CAAC;YACF,OAAO,CAAC,CAAC;QACX,CAAC;QAED;;;;WAIG;QACH,MAAM,YAAY,GAAkB,aAAa,CAAC,GAAG,CACnD,CAAC,UAA+B,EAAU,EAAE;YAC1C,OAAO,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,EAAG,EAAE,UAAU,CAAC,UAAU,CAAC,CAAC;QAChE,CAAC,CACF,CAAC;QAEF;;;;;WAKG;QACH,MAAM,UAAU,GAAiB,MAAM,YAAY,CAAC,MAAM,CAAC;YACzD,KAAK,EAAE;gBACL,SAAS;gBACT,iBAAiB,EAAE,IAAI,QAAQ,CAAC,YAAY,CAAC;gBAC7C,iBAAiB,EAAE;oBACjB,eAAe,EAAE,KAAK;iBACvB;aACF;YACD,MAAM,EAAE;gBACN,GAAG,EAAE,IAAI;gBACT,iBAAiB,EAAE,IAAI;aACxB;YACD,IAAI,EAAE,CAAC;YACP,KAAK,EAAE,iBAAiB;YACxB,KAAK,EAAE;gBACL,MAAM,EAAE,IAAI;aACb;SACF,CAAC,CAAC;QAEH,MAAM,gBAAgB,GAAgB,IAAI,GAAG,CAC3C,UAAU;aACP,GAAG,CAAC,CAAC,KAAY,EAAU,EAAE;YAC5B,OAAO,KAAK,CAAC,iBAAiB,IAAI,EAAE,CAAC;QACvC,CAAC,CAAC;aACD,MAAM,CAAC,CAAC,WAAmB,EAAW,EAAE;YACvC,OAAO,OAAO,CAAC,WAAW,CAAC,CAAC;QAC9B,CAAC,CAAC,CACL,CAAC;QAEF,IAAI,OAAO,GAAW,CAAC,CAAC;QAExB,KAAK,IAAI,KAAK,GAAW,CAAC,EAAE,KAAK,GAAG,aAAa,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC;YAClE,MAAM,UAAU,GAAwB,aAAa,CAAC,KAAK,CAAE,CAAC;YAC9D,MAAM,WAAW,GAAW,YAAY,CAAC,KAAK,CAAE,CAAC;YAEjD,IAAI,gBAAgB,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC;gBACtC,SAAS;YACX,CAAC;YAED,MAAM,KAAK,GAAU,IAAI,KAAK,EAAE,CAAC;YACjC,KAAK,CAAC,SAAS,GAAG,SAAS,CAAC;YAC5B,KAAK,CAAC,KAAK,GAAG,IAAI,CAAC,eAAe,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;YACrD,KAAK,CAAC,WAAW,GAAG,IAAI,CAAC,qBAAqB,CAAC;gBAC7C,IAAI;gBACJ,UAAU;gBACV,UAAU;gBACV,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,OAAO,EAAE,IAAI,CAAC,OAAO;aACtB,CAAC,CAAC;YACH,KAAK,CAAC,eAAe,GAAG,eAAe,CAAC;YACxC,KAAK,CAAC,iBAAiB,GAAG,WAAW,CAAC;YACtC,KAAK,CAAC,sBAAsB,GAAG,IAAI,CAAC;YACpC,KAAK,CAAC,SAAS,GAAG,yBAAyB,IAAI,CAAC,IAAI,4BAA4B,CAAC;YAEjF,IAAI,CAAC;gBACH,MAAM,YAAY,CAAC,MAAM,CAAC;oBACxB,IAAI,EAAE,KAAK;oBACX,KAAK,EAAE;wBACL,MAAM,EAAE,IAAI;qBACb;iBACF,CAAC,CAAC;gBACH,OAAO,EAAE,CAAC;YACZ,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,CAAC,KAAK,CACV,0DAA0D,MAAA,IAAI,CAAC,EAAE,0CAAE,QAAQ,EAAE,GAAG,CACjF,CAAC;gBACF,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YACtB,CAAC;QACH,CAAC;QAED,OAAO,OAAO,CAAC;IACjB,CAAC;IAED;;;;;;;;;;;;;;;OAeG;IACK,MAAM,CAAC,KAAK,CAAC,uBAAuB,CAAC,IAM5C;;QACC,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,aAAa,EAAE,GAAG,IAAI,CAAC;QACjD,MAAM,SAAS,GAAa,IAAI,CAAC,SAAU,CAAC;QAE5C,MAAM,kBAAkB,GACtB,MAAM,IAAI,CAAC,yBAAyB,CAAC;YACnC,SAAS;YACT,IAAI;YACJ,UAAU;SACX,CAAC,CAAC;QAEL,IAAI,CAAC,kBAAkB,EAAE,CAAC;YACxB,MAAM,CAAC,IAAI,CACT,mCAAmC,SAAS,CAAC,QAAQ,EAAE,oEAAoE,MAAA,IAAI,CAAC,EAAE,0CAAE,QAAQ,EAAE,GAAG,CAClJ,CAAC;YACF,OAAO,CAAC,CAAC;QACX,CAAC;QAED,MAAM,YAAY,GAAkB,aAAa,CAAC,GAAG,CACnD,CAAC,UAA+B,EAAU,EAAE;YAC1C,OAAO,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,EAAG,EAAE,UAAU,CAAC,UAAU,CAAC,CAAC;QAChE,CAAC,CACF,CAAC;QAEF;;;;WAIG;QACH,MAAM,aAAa,GAAoB,MAAM,eAAe,CAAC,MAAM,CAAC;YAClE,KAAK,EAAE;gBACL,SAAS;gBACT,iBAAiB,EAAE,IAAI,QAAQ,CAAC,YAAY,CAAC;gBAC7C,oBAAoB,EAAE;oBACpB,eAAe,EAAE,KAAK;iBACvB;aACF;YACD,MAAM,EAAE;gBACN,GAAG,EAAE,IAAI;gBACT,iBAAiB,EAAE,IAAI;aACxB;YACD,IAAI,EAAE,CAAC;YACP,KAAK,EAAE,iBAAiB;YACxB,KAAK,EAAE;gBACL,MAAM,EAAE,IAAI;aACb;SACF,CAAC,CAAC;QAEH,MAAM,gBAAgB,GAAgB,IAAI,GAAG,CAC3C,aAAa;aACV,GAAG,CAAC,CAAC,QAAkB,EAAU,EAAE;YAClC,OAAO,QAAQ,CAAC,iBAAiB,IAAI,EAAE,CAAC;QAC1C,CAAC,CAAC;aACD,MAAM,CAAC,CAAC,WAAmB,EAAW,EAAE;YACvC,OAAO,OAAO,CAAC,WAAW,CAAC,CAAC;QAC9B,CAAC,CAAC,CACL,CAAC;QAEF,IAAI,OAAO,GAAW,CAAC,CAAC;QAExB,KAAK,IAAI,KAAK,GAAW,CAAC,EAAE,KAAK,GAAG,aAAa,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC;YAClE,MAAM,UAAU,GAAwB,aAAa,CAAC,KAAK,CAAE,CAAC;YAC9D,MAAM,WAAW,GAAW,YAAY,CAAC,KAAK,CAAE,CAAC;YAEjD,IAAI,gBAAgB,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC;gBACtC,SAAS;YACX,CAAC;YAED,MAAM,QAAQ,GAAa,IAAI,QAAQ,EAAE,CAAC;YAC1C,QAAQ,CAAC,SAAS,GAAG,SAAS,CAAC;YAC/B,QAAQ,CAAC,KAAK,GAAG,IAAI,CAAC,eAAe,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;YACxD,QAAQ,CAAC,WAAW,GAAG,IAAI,CAAC,qBAAqB,CAAC;gBAChD,IAAI;gBACJ,UAAU;gBACV,UAAU;gBACV,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,OAAO,EAAE,IAAI,CAAC,OAAO;aACtB,CAAC,CAAC;YACH,QAAQ,CAAC,kBAAkB,GAAG,kBAAkB,CAAC;YACjD,QAAQ,CAAC,iBAAiB,GAAG,WAAW,CAAC;YACzC,QAAQ,CAAC,sBAAsB,GAAG,IAAI,CAAC;YACvC,QAAQ,CAAC,SAAS,GAAG,yBAAyB,IAAI,CAAC,IAAI,4BAA4B,CAAC;YAEpF,IAAI,CAAC;gBACH;;;;;mBAKG;gBACH,MAAM,eAAe,CAAC,MAAM,CAAC;oBAC3B,IAAI,EAAE,QAAQ;oBACd,KAAK,EAAE;wBACL,MAAM,EAAE,IAAI;qBACb;iBACF,CAAC,CAAC;gBACH,OAAO,EAAE,CAAC;YACZ,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,CAAC,KAAK,CACV,6DAA6D,MAAA,IAAI,CAAC,EAAE,0CAAE,QAAQ,EAAE,GAAG,CACpF,CAAC;gBACF,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YACtB,CAAC;QACH,CAAC;QAED,OAAO,OAAO,CAAC;IACjB,CAAC;IAEO,MAAM,CAAC,eAAe,CAC5B,IAAmB,EACnB,UAA+B;QAE/B,OAAO,UAAU,CAAC,UAAU;YAC1B,CAAC,CAAC,eAAe,IAAI,CAAC,IAAI,MAAM,UAAU,CAAC,UAAU,EAAE;YACvD,CAAC,CAAC,eAAe,IAAI,CAAC,IAAI,EAAE,CAAC;IACjC,CAAC;IAEO,MAAM,CAAC,qBAAqB,CAAC,IAMpC;QACC,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,UAAU,EAAE,GAAG,IAAI,CAAC;QAC9C,MAAM,gBAAgB,GAAkB,EAAE,CAAC;QAE3C,IAAI,IAAI,CAAC,WAAW,IAAI,UAAU,CAAC,WAAW,EAAE,CAAC;YAC/C,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,IAAI,UAAU,CAAC,WAAW,CAAC,CAAC;QACpE,CAAC;QAED,gBAAgB,CAAC,IAAI,CACnB,0BAA0B,UAAU,CAAC,UAAU,kBAC7C,UAAU,CAAC,UAAU,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GACrC,YAAY,aAAa,CAAC,wBAAwB,CAChD,IAAI,CAAC,SAAS,CACf,QAAQ,aAAa,CAAC,wBAAwB,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CACjE,CAAC;QAEF,IAAI,UAAU,CAAC,aAAa,EAAE,CAAC;YAC7B,gBAAgB,CAAC,IAAI,CAAC,iBAAiB,UAAU,CAAC,aAAa,EAAE,CAAC,CAAC;QACrE,CAAC;QAED,IAAI,UAAU,CAAC,iBAAiB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC5C,gBAAgB,CAAC,IAAI,CACnB,gBAAgB,UAAU,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACvE,CAAC;QACJ,CAAC;QAED,OAAO,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACvC,CAAC;IAEO,MAAM,CAAC,KAAK,CAAC,sBAAsB,CAAC,IAI3C;QACC,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,aAAa,EAAE,GAAG,IAAI,CAAC;QACjD,MAAM,SAAS,GAAa,IAAI,CAAC,SAAU,CAAC;QAE5C,MAAM,eAAe,GACnB,MAAM,iBAAiB,CAAC,wBAAwB,CAAC;YAC/C,WAAW,EAAE,uBAAuB;YACpC,SAAS;SACV,CAAC,CAAC;QAEL,MAAM,aAAa,GAAW,+BAA+B,CAAC;YAC5D,MAAM,EAAE,gBAAgB;YACxB,aAAa,EAAE,eAAe,CAAC,sBAAsB;YACrD,sBAAsB,EAAE,eAAe,CAAC,sBAAsB;YAC9D,aAAa,EAAE,eAAe,CAAC,sBAAsB;YACrD,sBAAsB,EAAE,eAAe,CAAC,sBAAsB;SAC/D,CAAC,CAAC;QAEH,MAAM,YAAY,GAChB,mBAAmB,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,YAAY,CAAC,MAAM,CAAC;QAE/D,MAAM,EAAE,WAAW,EAAE,YAAY,EAAE,GAAG,uBAAuB,CAC3D,2BAA2B,CAC5B,CAAC;QAEF,MAAM,IAAI,GAAsB,aAAa,CAAC,GAAG,CAC/C,CAAC,UAA+B,EAAc,EAAE;YAC9C,MAAM,UAAU,GAA4B;gBAC1C,IAAI,EAAE,aAAa,CAAC,cAAc,EAAE;gBACpC,QAAQ,EAAE,aAAa,IAAI,CAAC,EAAG,CAAC,QAAQ,EAAE,IAAI,IAAI,CAAC,gBAAgB,CACjE,IAAI,CAAC,EAAG,EACR,UAAU,CAAC,UAAU,CACtB,IAAI,aAAa,CAAC,wBAAwB,EAAE,EAAE;gBAC/C,WAAW;gBACX,YAAY;gBACZ,QAAQ,EAAE,2BAA2B;gBACrC,SAAS,EAAE,4BAA4B;gBACvC,YAAY,EAAE,QAAQ;gBACtB,UAAU,EAAE,cAAc,CAAC,YAAY,CAAC;gBACxC,YAAY;gBACZ,UAAU,EAAE,KAAK;gBACjB,OAAO,EAAE,UAAU,CAAC,UAAU;oBAC5B,CAAC,CAAC,cAAc,IAAI,CAAC,IAAI,MAAM,UAAU,CAAC,UAAU,KAAK,UAAU,CAAC,UAAU,UAAU;oBACxF,CAAC,CAAC,cAAc,IAAI,CAAC,IAAI,KAAK,UAAU,CAAC,UAAU,UAAU;gBAC/D,UAAU,EAAE,WAAW;gBACvB,WAAW,EAAE,sBAAsB;gBACnC,MAAM,EAAE,IAAI,CAAC,EAAG,CAAC,QAAQ,EAAE;gBAC3B,QAAQ,EAAE,IAAI,CAAC,IAAI,IAAI,UAAU,CAAC,KAAK;gBACvC,YAAY,EAAE,UAAU,CAAC,YAAY;gBACrC,eAAe,EAAE,UAAU,CAAC,eAAe;gBAC3C,aAAa,EAAE,EAAE;gBACjB,aAAa,EAAE,EAAE;gBACjB,WAAW,EAAE,EAAE;gBACf,gBAAgB,EAAE,EAAE;gBACpB,UAAU,EAAE,EAAE;gBACd,UAAU,EAAE,EAAE;gBACd,QAAQ,EAAE,EAAE;gBACZ,UAAU,EAAE,CAAC;gBACb,cAAc,EAAE,EAAE;gBAClB,WAAW,EAAE,UAAU,CAAC,UAAU;oBAChC,CAAC,CAAC;wBACE,UAAU,CAAC,UAAU;wBACrB,GAAG,UAAU,CAAC,iBAAiB,CAAC,MAAM,CACpC,CAAC,UAAkB,EAAW,EAAE;4BAC9B,OAAO,UAAU,KAAK,UAAU,CAAC,UAAU,CAAC;wBAC9C,CAAC,CACF;qBACF;oBACH,CAAC,CAAC,UAAU,CAAC,iBAAiB;gBAChC,UAAU,gCACR,CAAC,2BAA2B,CAAC,EAAE,IAAI,CAAC,EAAG,CAAC,QAAQ,EAAE,EAClD,CAAC,6BAA6B,CAAC,EAAE,IAAI,CAAC,IAAI,IAAI,UAAU,CAAC,KAAK,EAC9D,CAAC,+BAA+B,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC,UAAU,CAAC,IAC7D,CAAC,UAAU,CAAC,UAAU;oBACvB,CAAC,CAAC,EAAE,CAAC,+BAA+B,CAAC,EAAE,UAAU,CAAC,UAAU,EAAE;oBAC9D,CAAC,CAAC,EAAE,CAAC,GACJ,CAAC,UAAU,CAAC,EAAE;oBACf,CAAC,CAAC,EAAE,CAAC,4BAA4B,CAAC,EAAE,UAAU,CAAC,EAAE,EAAE;oBACnD,CAAC,CAAC,EAAE,CAAC,CACR;aACF,CAAC;YAEF,OAAO,uBAAuB,CAAC;gBAC7B,UAAU;gBACV,SAAS;gBACT,eAAe;gBACf,aAAa;aACd,CAAC,CAAC;QACL,CAAC,CACF,CAAC;QAEF,MAAM,oBAAoB,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;QAEhD,OAAO,IAAI,CAAC,MAAM,CAAC;IACrB,CAAC;IAEO,MAAM,CAAC,gBAAgB,CAC7B,MAAgB,EAChB,UAAkB;QAElB,OAAO,kBAAkB,MAAM,CAAC,QAAQ,EAAE,IAAI,uBAAuB,CAAC,kBAAkB,CACtF;YACE,UAAU,EAAE,UAAU,IAAI,EAAE;SAC7B,CACF,EAAE,CAAC;IACN,CAAC;IAED;;;;;;OAMG;IACK,MAAM,CAAC,KAAK,CAAC,sBAAsB,CAAC,IAI3C;QACC,MAAM,UAAU,GAAyB,MAAM,oBAAoB,CAAC,MAAM,CAAC;YACzE,KAAK,EAAE;gBACL,SAAS,EAAE,IAAI,CAAC,SAAS;aAC1B;YACD,MAAM,EAAE;gBACN,GAAG,EAAE,IAAI;gBACT,IAAI,EAAE,IAAI;aACX;YACD,IAAI,EAAE;gBACJ,KAAK,EAAE,SAAS,CAAC,SAAS;aAC3B;YACD,IAAI,EAAE,CAAC;YACP,KAAK,EAAE,iBAAiB;YACxB,KAAK,EAAE;gBACL,MAAM,EAAE,IAAI;aACb;SACF,CAAC,CAAC;QAEH,OAAO,IAAI,CAAC,wBAAwB,CAAC;YACnC,UAAU;YACV,kBAAkB,EAAE,IAAI,CAAC,IAAI,CAAC,eAAe;YAC7C,KAAK,EAAE,IAAI,CAAC,UAAU,CAAC,KAAK;SAC7B,CAAC,CAAC;IACL,CAAC;IAED;;;;;;;;OAQG;IACK,MAAM,CAAC,KAAK,CAAC,yBAAyB,CAAC,IAI9C;QACC,MAAM,UAAU,GACd,MAAM,uBAAuB,CAAC,MAAM,CAAC;YACnC,KAAK,EAAE;gBACL,SAAS,EAAE,IAAI,CAAC,SAAS;aAC1B;YACD,MAAM,EAAE;gBACN,GAAG,EAAE,IAAI;gBACT,IAAI,EAAE,IAAI;aACX;YACD,IAAI,EAAE;gBACJ,KAAK,EAAE,SAAS,CAAC,SAAS;aAC3B;YACD,IAAI,EAAE,CAAC;YACP,KAAK,EAAE,iBAAiB;YACxB,KAAK,EAAE;gBACL,MAAM,EAAE,IAAI;aACb;SACF,CAAC,CAAC;QAEL,OAAO,IAAI,CAAC,wBAAwB,CAAC;YACnC,UAAU;YACV,kBAAkB,EAAE,IAAI,CAAC,IAAI,CAAC,kBAAkB;YAChD,KAAK,EAAE,IAAI,CAAC,UAAU,CAAC,KAAK;SAC7B,CAAC,CAAC;IACL,CAAC;IAED;;;;;;;OAOG;IACK,MAAM,CAAC,wBAAwB,CAKrC,IAID;QACC,MAAM,EAAE,UAAU,EAAE,kBAAkB,EAAE,KAAK,EAAE,GAAG,IAAI,CAAC;QAEvD,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC5B,OAAO,IAAI,CAAC;QACd,CAAC;QAED,IAAI,kBAAkB,EAAE,CAAC;YACvB,MAAM,QAAQ,GAA0B,UAAU,CAAC,IAAI,CACrD,CAAC,QAAmB,EAAW,EAAE;;gBAC/B,OAAO,CAAA,MAAA,QAAQ,CAAC,EAAE,0CAAE,QAAQ,EAAE,MAAK,kBAAkB,CAAC,QAAQ,EAAE,CAAC;YACnE,CAAC,CACF,CAAC;YAEF,IAAI,QAAQ,IAAI,QAAQ,CAAC,EAAE,EAAE,CAAC;gBAC5B,OAAO,QAAQ,CAAC,EAAE,CAAC;YACrB,CAAC;QACH,CAAC;QAED,MAAM,SAAS,GAA0B,UAAU,CAAC,IAAI,CACtD,CAAC,QAAmB,EAAW,EAAE;YAC/B,OAAO,CAAC,QAAQ,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,KAAK,KAAK,CAAC,WAAW,EAAE,CAAC;QACrE,CAAC,CACF,CAAC;QAEF,IAAI,SAAS,IAAI,SAAS,CAAC,EAAE,EAAE,CAAC;YAC9B,OAAO,SAAS,CAAC,EAAE,CAAC;QACtB,CAAC;QAED,MAAM,QAAQ,GACZ,KAAK,KAAK,UAAU,CAAC,QAAQ,IAAI,KAAK,KAAK,UAAU,CAAC,IAAI,CAAC;QAE7D,MAAM,MAAM,GAAc,QAAQ;YAChC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAE;YAChB,CAAC,CAAC,UAAU,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,CAAE,CAAC;QAEvC,OAAO,MAAM,CAAC,EAAE,IAAI,IAAI,CAAC;IAC3B,CAAC;CACF;AA/sBqB;IADnB,WAAW,EAAE;;;;uDAqEb;AAGmB;IADnB,WAAW,EAAE;;qCAEN,aAAa;;gDAmHpB"}

package/build/dist/Types/Billing/PayAsYouGoPricing.js

@@ -9,7 +9,7 @@
  * price quoted in the product that disagrees with the price on the invoice is
  * worse than quoting no price at all, so there is exactly one copy.
  */
-// Telemetry ingest - logs, traces, metrics and profiles.
+// Telemetry ingest - logs, traces, metrics, profiles and security events.
 export const TELEMETRY_PRICE_IN_USD_PER_GB = 0.1;
 /*
  * Session replay recordings travel on the same ingestion key as the rest of

package/build/dist/Types/Billing/PayAsYouGoPricing.js.map

@@ -1 +1 @@
-{"version":3,"file":"PayAsYouGoPricing.js","sourceRoot":"","sources":["../../../../Types/Billing/PayAsYouGoPricing.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,yDAAyD;AACzD,MAAM,CAAC,MAAM,6BAA6B,GAAW,GAAG,CAAC;AAEzD;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,kCAAkC,GAAW,CAAC,CAAC;AAE5D,kEAAkE;AAClE,MAAM,CAAC,MAAM,iCAAiC,GAAW,EAAE,CAAC;AAE5D;;;GAGG;AACH,MAAM,CAAC,MAAM,qCAAqC,GAAW,CAAC,CAAC;AAE/D,MAAM,CAAC,MAAM,gBAAgB,GAAW,+BAA+B,CAAC;AAExE;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAAC,WAAmB;IAClD,IAAI,MAAM,CAAC,SAAS,CAAC,WAAW,CAAC,EAAE,CAAC;QAClC,OAAO,IAAI,WAAW,EAAE,CAAC;IAC3B,CAAC;IAED,OAAO,IAAI,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;AACtC,CAAC"}
+{"version":3,"file":"PayAsYouGoPricing.js","sourceRoot":"","sources":["../../../../Types/Billing/PayAsYouGoPricing.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,0EAA0E;AAC1E,MAAM,CAAC,MAAM,6BAA6B,GAAW,GAAG,CAAC;AAEzD;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,kCAAkC,GAAW,CAAC,CAAC;AAE5D,kEAAkE;AAClE,MAAM,CAAC,MAAM,iCAAiC,GAAW,EAAE,CAAC;AAE5D;;;GAGG;AACH,MAAM,CAAC,MAAM,qCAAqC,GAAW,CAAC,CAAC;AAE/D,MAAM,CAAC,MAAM,gBAAgB,GAAW,+BAA+B,CAAC;AAExE;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAAC,WAAmB;IAClD,IAAI,MAAM,CAAC,SAAS,CAAC,WAAW,CAAC,EAAE,CAAC;QAClC,OAAO,IAAI,WAAW,EAAE,CAAC;IAC3B,CAAC;IAED,OAAO,IAAI,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;AACtC,CAAC"}

package/build/dist/Types/SecurityEvent/DetectionFindingConstants.js

@@ -0,0 +1,18 @@
+/*
+ * The contract between the detection engine and everything that watches
+ * its output. writeDetectionFindings (DetectionRuleEvaluator) stamps every
+ * finding row with these class/attribute values, and the dashboard's
+ * "create a monitor from this rule" flow builds its filters from the same
+ * constants — one source, so a renamed attribute cannot silently orphan
+ * every monitor built on it.
+ */
+// OCSF Findings class the engine writes matches back as.
+export const DETECTION_FINDING_CLASS_UID = 2004;
+export const DETECTION_FINDING_CLASS_NAME = "Detection Finding";
+// Flattened attributes carried by every Detection Finding row.
+export const DETECTION_RULE_ID_ATTRIBUTE = "oneuptime.detection.rule_id";
+export const DETECTION_RULE_NAME_ATTRIBUTE = "oneuptime.detection.rule_name";
+export const DETECTION_MATCH_COUNT_ATTRIBUTE = "oneuptime.detection.match_count";
+export const DETECTION_GROUP_VALUE_ATTRIBUTE = "oneuptime.detection.group_value";
+export const DETECTION_SIGMA_ID_ATTRIBUTE = "oneuptime.detection.sigma_id";
+//# sourceMappingURL=DetectionFindingConstants.js.map

package/build/dist/Types/SecurityEvent/DetectionFindingConstants.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"DetectionFindingConstants.js","sourceRoot":"","sources":["../../../../Types/SecurityEvent/DetectionFindingConstants.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,yDAAyD;AACzD,MAAM,CAAC,MAAM,2BAA2B,GAAW,IAAI,CAAC;AACxD,MAAM,CAAC,MAAM,4BAA4B,GAAW,mBAAmB,CAAC;AAExE,+DAA+D;AAC/D,MAAM,CAAC,MAAM,2BAA2B,GACtC,6BAA6B,CAAC;AAChC,MAAM,CAAC,MAAM,6BAA6B,GACxC,+BAA+B,CAAC;AAClC,MAAM,CAAC,MAAM,+BAA+B,GAC1C,iCAAiC,CAAC;AACpC,MAAM,CAAC,MAAM,+BAA+B,GAC1C,iCAAiC,CAAC;AACpC,MAAM,CAAC,MAAM,4BAA4B,GACvC,8BAA8B,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@oneuptime/common",
-  "version": "12.0.16",
+  "version": "12.0.18",
   "description": "",
   "repository": {
     "type": "git",