@oneuptime/common 12.0.27 → 12.0.29

package/build/dist/Utils/Array.js

@@ -1,4 +1,29 @@
 export default class ArrayUtil {
+    /*
+     * Run handler over every item, at most `concurrency` of them in flight.
+     *
+     * For work that is spent waiting on the network rather than on the CPU -
+     * walking a list of customer domains and making a request against each -
+     * awaiting one at a time leaves the caller idle for almost all of its wall
+     * clock, and a single slow item delays every item behind it.
+     *
+     * Items are handed out in order, so a caller that has sorted by urgency still
+     * gets the urgent ones started first. handler is expected to deal with its
+     * own failures: as with Promise.all, the first rejection is what the caller
+     * sees, and it does not stop work already in flight.
+     */
+    static async forEachWithConcurrency(array, concurrency, handler) {
+        let nextIndex = 0;
+        const worker = async () => {
+            while (nextIndex < array.length) {
+                const index = nextIndex++;
+                await handler(array[index]);
+            }
+        };
+        await Promise.all(Array.from({ length: Math.max(1, Math.min(concurrency, array.length)) }, () => {
+            return worker();
+        }));
+    }
     static mergeStringArrays(array1, array2) {
         return ArrayUtil.removeDuplicates([...array1, ...array2]);
     }

package/build/dist/Utils/Array.js.map

@@ -1 +1 @@
-{"version":3,"file":"Array.js","sourceRoot":"","sources":["../../../Utils/Array.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,OAAO,OAAO,SAAS;IACrB,MAAM,CAAC,iBAAiB,CAC7B,MAAqB,EACrB,MAAqB;QAErB,OAAO,SAAS,CAAC,gBAAgB,CAAC,CAAC,GAAG,MAAM,EAAE,GAAG,MAAM,CAAC,CAAC,CAAC;IAC5D,CAAC;IAEM,MAAM,CAAC,kBAAkB,CAC9B,MAAqB,EACrB,MAAqB;QAErB,OAAO,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC3C,CAAC;IAEM,MAAM,CAAC,gBAAgB,CAAC,KAAiB;QAC9C,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,KAAU,EAAE,KAAa,EAAE,IAAgB,EAAE,EAAE;YAClE,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,KAAK,CAAC;QACvC,CAAC,CAAC,CAAC;IACL,CAAC;IAEM,MAAM,CAAC,OAAO,CAAI,KAAe;QACtC,MAAM,aAAa,GAAa,CAAC,GAAG,KAAK,CAAC,CAAC;QAC3C,KAAK,IAAI,CAAC,GAAW,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;YAC1D,MAAM,CAAC,GAAW,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YAEtD,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC;gBACtB,SAAS;YACX,CAAC;YAED,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC;gBACtB,SAAS;YACX,CAAC;YAED,CAAC,aAAa,CAAC,CAAC,CAAQ,EAAE,aAAa,CAAC,CAAC,CAAQ,CAAC,GAAG;gBACnD,aAAa,CAAC,CAAC,CAAC;gBAChB,aAAa,CAAC,CAAC,CAAC;aACjB,CAAC;QACJ,CAAC;QACD,OAAO,aAAa,CAAC;IACvB,CAAC;IAEM,MAAM,CAAC,iCAAiC,CAC7C,KAAsB;QAEtB,MAAM,WAAW,GAAoB,EAAE,CAAC;QAExC,KAAK,MAAM,QAAQ,IAAI,KAAK,EAAE,CAAC;YAC7B,IACE,WAAW,CAAC,MAAM,CAAC,CAAC,IAAc,EAAE,EAAE;gBACpC,OAAO,IAAI,CAAC,QAAQ,EAAE,KAAK,QAAQ,CAAC,QAAQ,EAAE,CAAC;YACjD,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,EACb,CAAC;gBACD,SAAS;YACX,CAAC;YAED,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC7B,CAAC;QAED,OAAO,WAAW,CAAC;IACrB,CAAC;IAEM,MAAM,CAAC,OAAO,CAAC,CAAa,EAAE,CAAa;QAChD,2CAA2C;QAC3C,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM,EAAE,CAAC;YAC1B,OAAO,KAAK,CAAC;QACf,CAAC;QAED,gDAAgD;QAChD,MAAM,UAAU,GAAW,IAAI,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QACzD,MAAM,UAAU,GAAW,IAAI,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QAEzD,4BAA4B;QAC5B,OAAO,UAAU,KAAK,UAAU,CAAC;IACnC,CAAC;IAEM,MAAM,CAAC,eAAe,CAAC,SAAiB;QAC7C,OAAO,CAAC,CAAM,EAAE,CAAM,EAAU,EAAE;YAChC,IAAI,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,EAAE,CAAC;gBAChC,OAAO,CAAC,CAAC,CAAC;YACZ,CAAC;YACD,IAAI,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,EAAE,CAAC;gBAChC,OAAO,CAAC,CAAC;YACX,CAAC;YACD,OAAO,CAAC,CAAC;QACX,CAAC,CAAC;IACJ,CAAC;IAEM,MAAM,CAAC,kBAAkB,CAAI,KAAe;QACjD,OAAO,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,KAAK,CAAC,MAAM,CAAC,CAAE,CAAC;IAC1D,CAAC;IAEM,MAAM,CAAC,mBAAmB,CAC/B,KAAiB,EACjB,SAAiB;QAEjB,qDAAqD;QACrD,MAAM,cAAc,GAAe,KAAK;aACrC,GAAG,CAAC,CAAC,IAAS,EAAE,EAAE;YACjB,OAAO,IAAI,CAAC,SAAS,CAAC,CAAC;QACzB,CAAC,CAAC;aACD,MAAM,CAAC,CAAC,KAAU,EAAE,KAAa,EAAE,IAAgB,EAAE,EAAE;YACtD,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,KAAK,CAAC;QACvC,CAAC,CAAC,CAAC;QAEL,8CAA8C;QAC9C,MAAM,aAAa,GAAe,EAAE,CAAC;QACrC,KAAK,MAAM,KAAK,IAAI,cAAc,EAAE,CAAC;YACnC,MAAM,IAAI,GAAQ,KAAK,CAAC,IAAI,CAAC,CAAC,IAAS,EAAE,EAAE;gBACzC,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,KAAK,CAAC;YACnC,CAAC,CAAC,CAAC;YACH,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC3B,CAAC;QAED,OAAO,aAAa,CAAC;IACvB,CAAC;CACF"}
+{"version":3,"file":"Array.js","sourceRoot":"","sources":["../../../Utils/Array.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,OAAO,OAAO,SAAS;IAC5B;;;;;;;;;;;;OAYG;IACI,MAAM,CAAC,KAAK,CAAC,sBAAsB,CACxC,KAAe,EACf,WAAmB,EACnB,OAAmC;QAEnC,IAAI,SAAS,GAAW,CAAC,CAAC;QAE1B,MAAM,MAAM,GAAwB,KAAK,IAAmB,EAAE;YAC5D,OAAO,SAAS,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC;gBAChC,MAAM,KAAK,GAAW,SAAS,EAAE,CAAC;gBAClC,MAAM,OAAO,CAAC,KAAK,CAAC,KAAK,CAAM,CAAC,CAAC;YACnC,CAAC;QACH,CAAC,CAAC;QAEF,MAAM,OAAO,CAAC,GAAG,CACf,KAAK,CAAC,IAAI,CACR,EAAE,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,EAAE,EAC5D,GAAkB,EAAE;YAClB,OAAO,MAAM,EAAE,CAAC;QAClB,CAAC,CACF,CACF,CAAC;IACJ,CAAC;IAEM,MAAM,CAAC,iBAAiB,CAC7B,MAAqB,EACrB,MAAqB;QAErB,OAAO,SAAS,CAAC,gBAAgB,CAAC,CAAC,GAAG,MAAM,EAAE,GAAG,MAAM,CAAC,CAAC,CAAC;IAC5D,CAAC;IAEM,MAAM,CAAC,kBAAkB,CAC9B,MAAqB,EACrB,MAAqB;QAErB,OAAO,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC3C,CAAC;IAEM,MAAM,CAAC,gBAAgB,CAAC,KAAiB;QAC9C,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,KAAU,EAAE,KAAa,EAAE,IAAgB,EAAE,EAAE;YAClE,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,KAAK,CAAC;QACvC,CAAC,CAAC,CAAC;IACL,CAAC;IAEM,MAAM,CAAC,OAAO,CAAI,KAAe;QACtC,MAAM,aAAa,GAAa,CAAC,GAAG,KAAK,CAAC,CAAC;QAC3C,KAAK,IAAI,CAAC,GAAW,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;YAC1D,MAAM,CAAC,GAAW,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YAEtD,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC;gBACtB,SAAS;YACX,CAAC;YAED,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC;gBACtB,SAAS;YACX,CAAC;YAED,CAAC,aAAa,CAAC,CAAC,CAAQ,EAAE,aAAa,CAAC,CAAC,CAAQ,CAAC,GAAG;gBACnD,aAAa,CAAC,CAAC,CAAC;gBAChB,aAAa,CAAC,CAAC,CAAC;aACjB,CAAC;QACJ,CAAC;QACD,OAAO,aAAa,CAAC;IACvB,CAAC;IAEM,MAAM,CAAC,iCAAiC,CAC7C,KAAsB;QAEtB,MAAM,WAAW,GAAoB,EAAE,CAAC;QAExC,KAAK,MAAM,QAAQ,IAAI,KAAK,EAAE,CAAC;YAC7B,IACE,WAAW,CAAC,MAAM,CAAC,CAAC,IAAc,EAAE,EAAE;gBACpC,OAAO,IAAI,CAAC,QAAQ,EAAE,KAAK,QAAQ,CAAC,QAAQ,EAAE,CAAC;YACjD,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,EACb,CAAC;gBACD,SAAS;YACX,CAAC;YAED,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC7B,CAAC;QAED,OAAO,WAAW,CAAC;IACrB,CAAC;IAEM,MAAM,CAAC,OAAO,CAAC,CAAa,EAAE,CAAa;QAChD,2CAA2C;QAC3C,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM,EAAE,CAAC;YAC1B,OAAO,KAAK,CAAC;QACf,CAAC;QAED,gDAAgD;QAChD,MAAM,UAAU,GAAW,IAAI,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QACzD,MAAM,UAAU,GAAW,IAAI,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QAEzD,4BAA4B;QAC5B,OAAO,UAAU,KAAK,UAAU,CAAC;IACnC,CAAC;IAEM,MAAM,CAAC,eAAe,CAAC,SAAiB;QAC7C,OAAO,CAAC,CAAM,EAAE,CAAM,EAAU,EAAE;YAChC,IAAI,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,EAAE,CAAC;gBAChC,OAAO,CAAC,CAAC,CAAC;YACZ,CAAC;YACD,IAAI,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,EAAE,CAAC;gBAChC,OAAO,CAAC,CAAC;YACX,CAAC;YACD,OAAO,CAAC,CAAC;QACX,CAAC,CAAC;IACJ,CAAC;IAEM,MAAM,CAAC,kBAAkB,CAAI,KAAe;QACjD,OAAO,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,KAAK,CAAC,MAAM,CAAC,CAAE,CAAC;IAC1D,CAAC;IAEM,MAAM,CAAC,mBAAmB,CAC/B,KAAiB,EACjB,SAAiB;QAEjB,qDAAqD;QACrD,MAAM,cAAc,GAAe,KAAK;aACrC,GAAG,CAAC,CAAC,IAAS,EAAE,EAAE;YACjB,OAAO,IAAI,CAAC,SAAS,CAAC,CAAC;QACzB,CAAC,CAAC;aACD,MAAM,CAAC,CAAC,KAAU,EAAE,KAAa,EAAE,IAAgB,EAAE,EAAE;YACtD,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,KAAK,CAAC;QACvC,CAAC,CAAC,CAAC;QAEL,8CAA8C;QAC9C,MAAM,aAAa,GAAe,EAAE,CAAC;QACrC,KAAK,MAAM,KAAK,IAAI,cAAc,EAAE,CAAC;YACnC,MAAM,IAAI,GAAQ,KAAK,CAAC,IAAI,CAAC,CAAC,IAAS,EAAE,EAAE;gBACzC,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,KAAK,CAAC;YACnC,CAAC,CAAC,CAAC;YACH,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC3B,CAAC;QAED,OAAO,aAAa,CAAC;IACvB,CAAC;CACF"}

package/build/dist/Utils/CertificateReissue.js

@@ -0,0 +1,97 @@
+import OneUptimeDate from "../Types/Date";
+/*
+ * The cooldown that sits behind the "Reissue SSL Certificate" button on a
+ * custom domain.
+ *
+ * OneUptime orders certificates from Let's Encrypt against a single ACME
+ * account shared by every customer on the installation, so a button that any
+ * customer can press is a button that spends everybody's allowance. Two of
+ * Let's Encrypt's limits are the ones this guards:
+ *
+ *  - 5 failed validations per account, per hostname, per hour. A domain whose
+ *    CNAME is half-broken fails validation every single time, so an
+ *    unthrottled button is a way to burn that hostname's whole hourly budget
+ *    in seconds - including the budget the automated renewal cron needs.
+ *  - 5 duplicate certificates per week for the same exact set of hostnames.
+ *    A reissue is by definition a duplicate certificate: same hostname, no
+ *    change. This is the limit a determined presser reaches second.
+ *
+ * Deliberately pure and synchronous, and deliberately in Common/Utils rather
+ * than Common/Server: the dashboard renders the very same countdown the API
+ * will enforce, so the button explains itself before it is pressed instead of
+ * only after the request comes back rejected.
+ *
+ * The cooldown is keyed off when a reissue was REQUESTED, not when one
+ * succeeded. A request that fails at the CA still cost a validation attempt,
+ * and a failing domain is exactly the domain a frustrated customer presses
+ * again - so a failed attempt must start the clock just as a successful one
+ * does.
+ */
+class CertificateReissueUtil {
+    /*
+     * The newest "requested at" stamp that is already out of cooldown.
+     *
+     * A row is eligible for another reissue when its stamp is null or is at or
+     * before this instant. The server turns this into the WHERE clause it
+     * claims the row with, so the comparison that decides eligibility is the
+     * same one on both sides.
+     */
+    static getCooldownCutoff(now) {
+        return OneUptimeDate.addRemoveHours(OneUptimeDate.fromString(now), -CertificateReissueUtil.COOLDOWN_IN_HOURS);
+    }
+    // When the domain may be reissued again, given its last request.
+    static getNextReissueAllowedAt(lastRequestedAt) {
+        return OneUptimeDate.addRemoveHours(OneUptimeDate.fromString(lastRequestedAt), CertificateReissueUtil.COOLDOWN_IN_HOURS);
+    }
+    /*
+     * A domain that has never been reissued is never cooling down, which is why
+     * null is accepted here rather than being the caller's problem.
+     */
+    static isInCooldown(lastRequestedAt, now) {
+        if (!lastRequestedAt) {
+            return false;
+        }
+        return OneUptimeDate.isAfter(CertificateReissueUtil.getNextReissueAllowedAt(lastRequestedAt), OneUptimeDate.fromString(now));
+    }
+    /*
+     * How much longer the customer has to wait, in words. Whole minutes, since
+     * the countdown is only ever read by a person deciding whether to come back
+     * later.
+     */
+    static getTimeRemainingText(lastRequestedAt, now) {
+        const nextAllowedAt = CertificateReissueUtil.getNextReissueAllowedAt(lastRequestedAt);
+        const totalMinutes = Math.max(0, OneUptimeDate.getMinutesBetweenTwoDates(OneUptimeDate.fromString(now), nextAllowedAt));
+        if (totalMinutes < 1) {
+            return "less than a minute";
+        }
+        const hours = Math.floor(totalMinutes / 60);
+        const minutes = totalMinutes % 60;
+        const parts = [];
+        if (hours > 0) {
+            parts.push(`${hours} ${hours === 1 ? "hour" : "hours"}`);
+        }
+        if (minutes > 0) {
+            parts.push(`${minutes} ${minutes === 1 ? "minute" : "minutes"}`);
+        }
+        return parts.join(" ");
+    }
+    /*
+     * The one sentence the API returns and the dashboard shows. Kept here so a
+     * customer reads the same explanation wherever they hit the limit.
+     */
+    static getCooldownMessage(lastRequestedAt, now) {
+        return `A certificate reissue was already requested for this domain in the last ${CertificateReissueUtil.COOLDOWN_IN_HOURS} hours. Certificates are issued by Let's Encrypt, which rate limits how often the same domain can be issued, so a reissue can only be requested once every ${CertificateReissueUtil.COOLDOWN_IN_HOURS} hours. Please try again in ${CertificateReissueUtil.getTimeRemainingText(lastRequestedAt, now)}.`;
+    }
+}
+/*
+ * Note on the value: 24 hours permits 7 reissues a week, which is above the
+ * 5-duplicate-certificates-per-week limit described above. That is a
+ * deliberate choice, not an oversight - reaching it needs a customer to
+ * press the button on six consecutive days, and the failure that follows is
+ * a clear, temporary error from the CA rather than the sustained burst the
+ * per-hour validation limit punishes. The value is a single constant so the
+ * trade can be revisited in one place.
+ */
+CertificateReissueUtil.COOLDOWN_IN_HOURS = 24;
+export default CertificateReissueUtil;
+//# sourceMappingURL=CertificateReissue.js.map

package/build/dist/Utils/CertificateReissue.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"CertificateReissue.js","sourceRoot":"","sources":["../../../Utils/CertificateReissue.ts"],"names":[],"mappings":"AAAA,OAAO,aAAa,MAAM,eAAe,CAAC;AAE1C;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,MAAqB,sBAAsB;IAYzC;;;;;;;OAOG;IACI,MAAM,CAAC,iBAAiB,CAAC,GAAS;QACvC,OAAO,aAAa,CAAC,cAAc,CACjC,aAAa,CAAC,UAAU,CAAC,GAAG,CAAC,EAC7B,CAAC,sBAAsB,CAAC,iBAAiB,CAC1C,CAAC;IACJ,CAAC;IAED,iEAAiE;IAC1D,MAAM,CAAC,uBAAuB,CAAC,eAAqB;QACzD,OAAO,aAAa,CAAC,cAAc,CACjC,aAAa,CAAC,UAAU,CAAC,eAAe,CAAC,EACzC,sBAAsB,CAAC,iBAAiB,CACzC,CAAC;IACJ,CAAC;IAED;;;OAGG;IACI,MAAM,CAAC,YAAY,CACxB,eAAwC,EACxC,GAAS;QAET,IAAI,CAAC,eAAe,EAAE,CAAC;YACrB,OAAO,KAAK,CAAC;QACf,CAAC;QAED,OAAO,aAAa,CAAC,OAAO,CAC1B,sBAAsB,CAAC,uBAAuB,CAAC,eAAe,CAAC,EAC/D,aAAa,CAAC,UAAU,CAAC,GAAG,CAAC,CAC9B,CAAC;IACJ,CAAC;IAED;;;;OAIG;IACI,MAAM,CAAC,oBAAoB,CAAC,eAAqB,EAAE,GAAS;QACjE,MAAM,aAAa,GACjB,sBAAsB,CAAC,uBAAuB,CAAC,eAAe,CAAC,CAAC;QAElE,MAAM,YAAY,GAAW,IAAI,CAAC,GAAG,CACnC,CAAC,EACD,aAAa,CAAC,yBAAyB,CACrC,aAAa,CAAC,UAAU,CAAC,GAAG,CAAC,EAC7B,aAAa,CACd,CACF,CAAC;QAEF,IAAI,YAAY,GAAG,CAAC,EAAE,CAAC;YACrB,OAAO,oBAAoB,CAAC;QAC9B,CAAC;QAED,MAAM,KAAK,GAAW,IAAI,CAAC,KAAK,CAAC,YAAY,GAAG,EAAE,CAAC,CAAC;QACpD,MAAM,OAAO,GAAW,YAAY,GAAG,EAAE,CAAC;QAE1C,MAAM,KAAK,GAAkB,EAAE,CAAC;QAEhC,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;YACd,KAAK,CAAC,IAAI,CAAC,GAAG,KAAK,IAAI,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;QAC3D,CAAC;QAED,IAAI,OAAO,GAAG,CAAC,EAAE,CAAC;YAChB,KAAK,CAAC,IAAI,CAAC,GAAG,OAAO,IAAI,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC;QACnE,CAAC;QAED,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACzB,CAAC;IAED;;;OAGG;IACI,MAAM,CAAC,kBAAkB,CAAC,eAAqB,EAAE,GAAS;QAC/D,OAAO,2EAA2E,sBAAsB,CAAC,iBAAiB,8JAA8J,sBAAsB,CAAC,iBAAiB,+BAA+B,sBAAsB,CAAC,oBAAoB,CAAC,eAAe,EAAE,GAAG,CAAC,GAAG,CAAC;IACta,CAAC;;AA/FD;;;;;;;;GAQG;AACoB,wCAAiB,GAAW,EAAE,CAAC;eAVnC,sBAAsB"}

package/build/dist/Utils/Grok/Grok.js

@@ -0,0 +1,324 @@
+import BadDataException from "../../Types/Exception/BadDataException";
+import GrokPatterns from "./GrokPatterns";
+/*
+ * Grok engine.
+ *
+ * A grok pattern is a regex with named references into a pattern
+ * library: `%{IPV4:client_ip} - %{WORD:verb}` means "the IPv4 regex,
+ * captured as client_ip, then a literal ' - ', then a word captured as
+ * verb". Anything that is not a `%{...}` reference is passed through to
+ * the regex verbatim, so raw regex and grok references can be mixed.
+ *
+ * Supported reference forms:
+ *
+ *   %{NAME}              match, capture nothing
+ *   %{NAME:field}        capture into `field` as a string
+ *   %{NAME:field:type}   capture into `field`, coerced (int/float/boolean)
+ *
+ * Compilation expands references recursively into one JavaScript RegExp
+ * and records, for each captured field, the internal group name that
+ * holds it. Only the groups this engine injects capture — every library
+ * definition uses `(?:...)` — so extraction is a `match.groups` lookup
+ * with no index arithmetic.
+ *
+ * Matching is deliberately UNANCHORED, like Logstash: a pattern
+ * describes a fragment of the line unless the author anchors it with
+ * `^`/`$` themselves.
+ *
+ * This runs once per ingested log record on the telemetry hot path
+ * against text the customer's users control, so the compiler enforces
+ * hard ceilings on expansion (depth, count, final source length) and
+ * the matcher refuses inputs above MAX_GROK_INPUT_LENGTH rather than
+ * handing an unbounded string to a backtracking engine.
+ */
+export var GrokFieldType;
+(function (GrokFieldType) {
+    GrokFieldType["String"] = "string";
+    GrokFieldType["Integer"] = "integer";
+    GrokFieldType["Float"] = "float";
+    GrokFieldType["Boolean"] = "boolean";
+})(GrokFieldType || (GrokFieldType = {}));
+/** Longest raw pattern a user may save. */
+export const MAX_GROK_PATTERN_LENGTH = 4000;
+/** Longest expanded regex source a pattern may compile to. */
+export const MAX_GROK_SOURCE_LENGTH = 20000;
+/** How deep `%{A}` -> `%{B}` -> `%{C}` nesting may go. */
+export const MAX_GROK_EXPANSION_DEPTH = 20;
+/** Total number of references expanded while compiling one pattern. */
+export const MAX_GROK_EXPANSIONS = 500;
+/** Fields one pattern may capture. */
+export const MAX_GROK_CAPTURES = 100;
+/*
+ * Inputs longer than this are not parsed. A backtracking regex cannot be
+ * interrupted once started, so the only bound available on the ingest
+ * hot path is the length of what we feed it.
+ */
+export const MAX_GROK_INPUT_LENGTH = 32768;
+/*
+ * `%{NAME}`, `%{NAME:field}` or `%{NAME:field:type}`. The field and type
+ * segments exclude `{`, `}` and `:` so a malformed reference fails to
+ * match here and is reported as unparsable rather than being silently
+ * split at the wrong colon.
+ */
+const GROK_REFERENCE_SOURCE = "%\\{([A-Za-z0-9_]+)(?::([^:{}]*))?(?::([^:{}]*))?\\}";
+/*
+ * Field names become log attribute keys. Dots are allowed because OTel
+ * semantic-convention keys use them (`http.request.method`).
+ */
+const FIELD_NAME_REGEX = /^[A-Za-z_][A-Za-z0-9_.@-]*$/;
+function parseFieldType(rawType) {
+    if (!rawType) {
+        return GrokFieldType.String;
+    }
+    switch (rawType.trim().toLowerCase()) {
+        case "int":
+        case "integer":
+        case "long":
+            return GrokFieldType.Integer;
+        case "float":
+        case "double":
+        case "number":
+            return GrokFieldType.Float;
+        case "bool":
+        case "boolean":
+            return GrokFieldType.Boolean;
+        case "string":
+        case "text":
+            return GrokFieldType.String;
+        default:
+            throw new BadDataException(`Unknown grok field type "${rawType}". Supported types are: int, long, float, double, boolean, string.`);
+    }
+}
+function resolveReference(match, context) {
+    const patternName = match[1];
+    const rawFieldName = match[2];
+    const rawFieldType = match[3];
+    context.expansions++;
+    if (context.expansions > MAX_GROK_EXPANSIONS) {
+        throw new BadDataException(`This grok pattern expands to more than ${MAX_GROK_EXPANSIONS} sub-patterns. Please simplify it.`);
+    }
+    const definition = context.patterns[patternName];
+    if (definition === undefined) {
+        throw new BadDataException(`Unknown grok pattern "%{${patternName}}". Check the list of supported patterns.`);
+    }
+    if (context.stack.includes(patternName)) {
+        throw new BadDataException(`Grok pattern "%{${patternName}}" refers to itself. Circular pattern references are not supported.`);
+    }
+    if (context.stack.length >= MAX_GROK_EXPANSION_DEPTH) {
+        throw new BadDataException(`Grok pattern "%{${patternName}}" nests more than ${MAX_GROK_EXPANSION_DEPTH} levels deep. Please simplify it.`);
+    }
+    context.stack.push(patternName);
+    const expanded = expandPattern(definition, context);
+    context.stack.pop();
+    if (rawFieldName === undefined) {
+        return `(?:${expanded})`;
+    }
+    const fieldName = rawFieldName.trim();
+    if (!FIELD_NAME_REGEX.test(fieldName)) {
+        throw new BadDataException(`"${rawFieldName}" is not a valid grok field name. Use letters, digits, and . _ - @ (starting with a letter or underscore).`);
+    }
+    if (context.captures.length >= MAX_GROK_CAPTURES) {
+        throw new BadDataException(`This grok pattern captures more than ${MAX_GROK_CAPTURES} fields. Please capture fewer fields.`);
+    }
+    const groupName = `oug${context.captures.length}`;
+    context.captures.push({
+        groupName: groupName,
+        fieldName: fieldName,
+        fieldType: parseFieldType(rawFieldType),
+    });
+    return `(?<${groupName}>${expanded})`;
+}
+function expandPattern(source, context) {
+    /*
+     * A fresh RegExp per call: `lastIndex` is per-object state and
+     * expansion recurses, so a shared instance would have nested calls
+     * stepping on each other's scan position.
+     */
+    const referenceRegex = new RegExp(GROK_REFERENCE_SOURCE, "g");
+    let output = "";
+    let cursor = 0;
+    let match = referenceRegex.exec(source);
+    while (match !== null) {
+        output += source.slice(cursor, match.index);
+        output += resolveReference(match, context);
+        cursor = match.index + match[0].length;
+        if (output.length > MAX_GROK_SOURCE_LENGTH) {
+            throw new BadDataException(`This grok pattern expands to more than ${MAX_GROK_SOURCE_LENGTH} characters of regex. Please simplify it.`);
+        }
+        match = referenceRegex.exec(source);
+    }
+    output += source.slice(cursor);
+    return output;
+}
+/*
+ * Compile a grok pattern. Throws BadDataException with a message meant
+ * for the person who typed the pattern — this is what save-time
+ * validation and the pattern tester in the dashboard show.
+ */
+export function compileGrokPattern(pattern, extraPatterns) {
+    if (typeof pattern !== "string" || pattern.trim().length === 0) {
+        throw new BadDataException("Grok pattern cannot be empty.");
+    }
+    if (pattern.length > MAX_GROK_PATTERN_LENGTH) {
+        throw new BadDataException(`Grok pattern cannot be longer than ${MAX_GROK_PATTERN_LENGTH} characters.`);
+    }
+    const context = {
+        patterns: extraPatterns
+            ? Object.assign(Object.assign({}, GrokPatterns), extraPatterns) : GrokPatterns,
+        captures: [],
+        stack: [],
+        expansions: 0,
+    };
+    const source = expandPattern(pattern, context);
+    if (source.length > MAX_GROK_SOURCE_LENGTH) {
+        throw new BadDataException(`This grok pattern expands to more than ${MAX_GROK_SOURCE_LENGTH} characters of regex. Please simplify it.`);
+    }
+    let regex;
+    try {
+        /*
+         * No `g`/`y` flag on purpose: those carry `lastIndex` between calls
+         * and a compiled pattern is reused for every record.
+         */
+        regex = new RegExp(source);
+    }
+    catch (err) {
+        throw new BadDataException(`This grok pattern is not valid: ${err instanceof Error ? err.message : String(err)}`);
+    }
+    return {
+        regex: regex,
+        captures: context.captures,
+        source: source,
+    };
+}
+function coerceValue(raw, fieldType) {
+    if (fieldType === GrokFieldType.Integer) {
+        const parsed = parseInt(raw, 10);
+        return Number.isFinite(parsed) ? parsed : raw;
+    }
+    if (fieldType === GrokFieldType.Float) {
+        const parsed = parseFloat(raw);
+        return Number.isFinite(parsed) ? parsed : raw;
+    }
+    if (fieldType === GrokFieldType.Boolean) {
+        const normalized = raw.trim().toLowerCase();
+        if (normalized === "true" ||
+            normalized === "yes" ||
+            normalized === "y" ||
+            normalized === "1") {
+            return true;
+        }
+        if (normalized === "false" ||
+            normalized === "no" ||
+            normalized === "n" ||
+            normalized === "0") {
+            return false;
+        }
+        /*
+         * Not recognisably a boolean — keep the raw text rather than
+         * inventing a `false` the log never said.
+         */
+        return raw;
+    }
+    return raw;
+}
+/*
+ * Run a compiled pattern against one string. Returns null when the
+ * pattern does not match; returns the captured fields otherwise (which
+ * is an empty object for a pattern that matches but captures nothing).
+ *
+ * Empty captures are dropped, matching Logstash's default
+ * `keep_empty_captures => false`: an optional group that did not
+ * participate should not write a blank attribute onto the log.
+ */
+export function matchGrokPattern(compiled, input) {
+    if (typeof input !== "string" || input.length === 0) {
+        return null;
+    }
+    if (input.length > MAX_GROK_INPUT_LENGTH) {
+        return null;
+    }
+    const match = compiled.regex.exec(input);
+    if (!match) {
+        return null;
+    }
+    const groups = match.groups || {};
+    const extracted = {};
+    for (const capture of compiled.captures) {
+        const raw = groups[capture.groupName];
+        if (raw === undefined || raw === "") {
+            continue;
+        }
+        /*
+         * The same field name can legitimately appear twice (alternation
+         * branches, or a library pattern that already names it). Whichever
+         * group actually matched first wins, so a later branch that did not
+         * participate cannot blank out a real value.
+         */
+        if (extracted[capture.fieldName] !== undefined) {
+            continue;
+        }
+        extracted[capture.fieldName] = coerceValue(raw, capture.fieldType);
+    }
+    return extracted;
+}
+/*
+ * Process-wide compile cache for the ingest path.
+ *
+ * Compiling walks the pattern library and builds a RegExp; doing that
+ * per log record would dominate the cost of the processor. Compiled
+ * patterns are immutable and carry no `lastIndex` state (no `g` flag),
+ * so one instance is safely shared by every project using the same
+ * pattern text.
+ *
+ * Failures are cached too. An invalid pattern that reaches ingest would
+ * otherwise be recompiled — and rejected — once per record.
+ */
+const compileCache = new Map();
+export const MAX_CACHED_GROK_PATTERNS = 500;
+export function compileGrokPatternCached(pattern) {
+    const cached = compileCache.get(pattern);
+    if (cached !== undefined) {
+        if (cached instanceof BadDataException) {
+            throw cached;
+        }
+        return cached;
+    }
+    let result;
+    try {
+        result = compileGrokPattern(pattern);
+    }
+    catch (err) {
+        result =
+            err instanceof BadDataException ? err : new BadDataException(String(err));
+    }
+    if (compileCache.size >= MAX_CACHED_GROK_PATTERNS) {
+        // Insertion-ordered: drop the oldest entry to bound the cache.
+        const oldestKey = compileCache.keys().next().value;
+        if (oldestKey !== undefined) {
+            compileCache.delete(oldestKey);
+        }
+    }
+    compileCache.set(pattern, result);
+    if (result instanceof BadDataException) {
+        throw result;
+    }
+    return result;
+}
+/** Test seam: forget every cached compilation. */
+export function clearGrokCompileCache() {
+    compileCache.clear();
+}
+/*
+ * Compile + match in one call. Convenience for the dashboard's pattern
+ * tester and for tests; ingest compiles once and reuses the result.
+ */
+export function parseWithGrokPattern(pattern, input) {
+    return matchGrokPattern(compileGrokPattern(pattern), input);
+}
+export default {
+    compileGrokPattern,
+    compileGrokPatternCached,
+    matchGrokPattern,
+    parseWithGrokPattern,
+};
+//# sourceMappingURL=Grok.js.map

package/build/dist/Utils/Grok/Grok.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Grok.js","sourceRoot":"","sources":["../../../../Utils/Grok/Grok.ts"],"names":[],"mappings":"AAAA,OAAO,gBAAgB,MAAM,wCAAwC,CAAC;AACtE,OAAO,YAAY,MAAM,gBAAgB,CAAC;AAE1C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AAEH,MAAM,CAAN,IAAY,aAKX;AALD,WAAY,aAAa;IACvB,kCAAiB,CAAA;IACjB,oCAAmB,CAAA;IACnB,gCAAe,CAAA;IACf,oCAAmB,CAAA;AACrB,CAAC,EALW,aAAa,KAAb,aAAa,QAKxB;AAmBD,2CAA2C;AAC3C,MAAM,CAAC,MAAM,uBAAuB,GAAW,IAAI,CAAC;AAEpD,8DAA8D;AAC9D,MAAM,CAAC,MAAM,sBAAsB,GAAW,KAAK,CAAC;AAEpD,0DAA0D;AAC1D,MAAM,CAAC,MAAM,wBAAwB,GAAW,EAAE,CAAC;AAEnD,uEAAuE;AACvE,MAAM,CAAC,MAAM,mBAAmB,GAAW,GAAG,CAAC;AAE/C,sCAAsC;AACtC,MAAM,CAAC,MAAM,iBAAiB,GAAW,GAAG,CAAC;AAE7C;;;;GAIG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAW,KAAK,CAAC;AAEnD;;;;;GAKG;AACH,MAAM,qBAAqB,GACzB,sDAAsD,CAAC;AAEzD;;;GAGG;AACH,MAAM,gBAAgB,GAAW,6BAA6B,CAAC;AAU/D,SAAS,cAAc,CAAC,OAA2B;IACjD,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,aAAa,CAAC,MAAM,CAAC;IAC9B,CAAC;IAED,QAAQ,OAAO,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;QACrC,KAAK,KAAK,CAAC;QACX,KAAK,SAAS,CAAC;QACf,KAAK,MAAM;YACT,OAAO,aAAa,CAAC,OAAO,CAAC;QAC/B,KAAK,OAAO,CAAC;QACb,KAAK,QAAQ,CAAC;QACd,KAAK,QAAQ;YACX,OAAO,aAAa,CAAC,KAAK,CAAC;QAC7B,KAAK,MAAM,CAAC;QACZ,KAAK,SAAS;YACZ,OAAO,aAAa,CAAC,OAAO,CAAC;QAC/B,KAAK,QAAQ,CAAC;QACd,KAAK,MAAM;YACT,OAAO,aAAa,CAAC,MAAM,CAAC;QAC9B;YACE,MAAM,IAAI,gBAAgB,CACxB,4BAA4B,OAAO,oEAAoE,CACxG,CAAC;IACN,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB,CACvB,KAAsB,EACtB,OAAuB;IAEvB,MAAM,WAAW,GAAW,KAAK,CAAC,CAAC,CAAW,CAAC;IAC/C,MAAM,YAAY,GAAuB,KAAK,CAAC,CAAC,CAAC,CAAC;IAClD,MAAM,YAAY,GAAuB,KAAK,CAAC,CAAC,CAAC,CAAC;IAElD,OAAO,CAAC,UAAU,EAAE,CAAC;IAErB,IAAI,OAAO,CAAC,UAAU,GAAG,mBAAmB,EAAE,CAAC;QAC7C,MAAM,IAAI,gBAAgB,CACxB,0CAA0C,mBAAmB,oCAAoC,CAClG,CAAC;IACJ,CAAC;IAED,MAAM,UAAU,GAAuB,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IAErE,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;QAC7B,MAAM,IAAI,gBAAgB,CACxB,2BAA2B,WAAW,2CAA2C,CAClF,CAAC;IACJ,CAAC;IAED,IAAI,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;QACxC,MAAM,IAAI,gBAAgB,CACxB,mBAAmB,WAAW,qEAAqE,CACpG,CAAC;IACJ,CAAC;IAED,IAAI,OAAO,CAAC,KAAK,CAAC,MAAM,IAAI,wBAAwB,EAAE,CAAC;QACrD,MAAM,IAAI,gBAAgB,CACxB,mBAAmB,WAAW,sBAAsB,wBAAwB,mCAAmC,CAChH,CAAC;IACJ,CAAC;IAED,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IAChC,MAAM,QAAQ,GAAW,aAAa,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;IAC5D,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;IAEpB,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;QAC/B,OAAO,MAAM,QAAQ,GAAG,CAAC;IAC3B,CAAC;IAED,MAAM,SAAS,GAAW,YAAY,CAAC,IAAI,EAAE,CAAC;IAE9C,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;QACtC,MAAM,IAAI,gBAAgB,CACxB,IAAI,YAAY,4GAA4G,CAC7H,CAAC;IACJ,CAAC;IAED,IAAI,OAAO,CAAC,QAAQ,CAAC,MAAM,IAAI,iBAAiB,EAAE,CAAC;QACjD,MAAM,IAAI,gBAAgB,CACxB,wCAAwC,iBAAiB,uCAAuC,CACjG,CAAC;IACJ,CAAC;IAED,MAAM,SAAS,GAAW,MAAM,OAAO,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;IAE1D,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC;QACpB,SAAS,EAAE,SAAS;QACpB,SAAS,EAAE,SAAS;QACpB,SAAS,EAAE,cAAc,CAAC,YAAY,CAAC;KACxC,CAAC,CAAC;IAEH,OAAO,MAAM,SAAS,IAAI,QAAQ,GAAG,CAAC;AACxC,CAAC;AAED,SAAS,aAAa,CAAC,MAAc,EAAE,OAAuB;IAC5D;;;;OAIG;IACH,MAAM,cAAc,GAAW,IAAI,MAAM,CAAC,qBAAqB,EAAE,GAAG,CAAC,CAAC;IAEtE,IAAI,MAAM,GAAW,EAAE,CAAC;IACxB,IAAI,MAAM,GAAW,CAAC,CAAC;IACvB,IAAI,KAAK,GAA2B,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAEhE,OAAO,KAAK,KAAK,IAAI,EAAE,CAAC;QACtB,MAAM,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;QAC5C,MAAM,IAAI,gBAAgB,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QAC3C,MAAM,GAAG,KAAK,CAAC,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;QAEvC,IAAI,MAAM,CAAC,MAAM,GAAG,sBAAsB,EAAE,CAAC;YAC3C,MAAM,IAAI,gBAAgB,CACxB,0CAA0C,sBAAsB,2CAA2C,CAC5G,CAAC;QACJ,CAAC;QAED,KAAK,GAAG,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACtC,CAAC;IAED,MAAM,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAE/B,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAChC,OAAe,EACf,aAAkD;IAElD,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC/D,MAAM,IAAI,gBAAgB,CAAC,+BAA+B,CAAC,CAAC;IAC9D,CAAC;IAED,IAAI,OAAO,CAAC,MAAM,GAAG,uBAAuB,EAAE,CAAC;QAC7C,MAAM,IAAI,gBAAgB,CACxB,sCAAsC,uBAAuB,cAAc,CAC5E,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GAAmB;QAC9B,QAAQ,EAAE,aAAa;YACrB,CAAC,iCAAM,YAAY,GAAK,aAAa,EACrC,CAAC,CAAC,YAAY;QAChB,QAAQ,EAAE,EAAE;QACZ,KAAK,EAAE,EAAE;QACT,UAAU,EAAE,CAAC;KACd,CAAC;IAEF,MAAM,MAAM,GAAW,aAAa,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAEvD,IAAI,MAAM,CAAC,MAAM,GAAG,sBAAsB,EAAE,CAAC;QAC3C,MAAM,IAAI,gBAAgB,CACxB,0CAA0C,sBAAsB,2CAA2C,CAC5G,CAAC;IACJ,CAAC;IAED,IAAI,KAAa,CAAC;IAElB,IAAI,CAAC;QACH;;;WAGG;QACH,KAAK,GAAG,IAAI,MAAM,CAAC,MAAM,CAAC,CAAC;IAC7B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,gBAAgB,CACxB,mCAAmC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CACtF,CAAC;IACJ,CAAC;IAED,OAAO;QACL,KAAK,EAAE,KAAK;QACZ,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,MAAM,EAAE,MAAM;KACf,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAAC,GAAW,EAAE,SAAwB;IACxD,IAAI,SAAS,KAAK,aAAa,CAAC,OAAO,EAAE,CAAC;QACxC,MAAM,MAAM,GAAW,QAAQ,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QACzC,OAAO,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC;IAChD,CAAC;IAED,IAAI,SAAS,KAAK,aAAa,CAAC,KAAK,EAAE,CAAC;QACtC,MAAM,MAAM,GAAW,UAAU,CAAC,GAAG,CAAC,CAAC;QACvC,OAAO,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC;IAChD,CAAC;IAED,IAAI,SAAS,KAAK,aAAa,CAAC,OAAO,EAAE,CAAC;QACxC,MAAM,UAAU,GAAW,GAAG,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAEpD,IACE,UAAU,KAAK,MAAM;YACrB,UAAU,KAAK,KAAK;YACpB,UAAU,KAAK,GAAG;YAClB,UAAU,KAAK,GAAG,EAClB,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QAED,IACE,UAAU,KAAK,OAAO;YACtB,UAAU,KAAK,IAAI;YACnB,UAAU,KAAK,GAAG;YAClB,UAAU,KAAK,GAAG,EAClB,CAAC;YACD,OAAO,KAAK,CAAC;QACf,CAAC;QAED;;;WAGG;QACH,OAAO,GAAG,CAAC;IACb,CAAC;IAED,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,gBAAgB,CAC9B,QAA6B,EAC7B,KAAa;IAEb,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACpD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,KAAK,CAAC,MAAM,GAAG,qBAAqB,EAAE,CAAC;QACzC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,KAAK,GAA2B,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAEjE,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,MAAM,GAAuC,KAAK,CAAC,MAAM,IAAI,EAAE,CAAC;IACtE,MAAM,SAAS,GAA8B,EAAE,CAAC;IAEhD,KAAK,MAAM,OAAO,IAAI,QAAQ,CAAC,QAAQ,EAAE,CAAC;QACxC,MAAM,GAAG,GAAuB,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAE1D,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,EAAE,EAAE,CAAC;YACpC,SAAS;QACX,CAAC;QAED;;;;;WAKG;QACH,IAAI,SAAS,CAAC,OAAO,CAAC,SAAS,CAAC,KAAK,SAAS,EAAE,CAAC;YAC/C,SAAS;QACX,CAAC;QAED,SAAS,CAAC,OAAO,CAAC,SAAS,CAAC,GAAG,WAAW,CAAC,GAAG,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;IACrE,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,YAAY,GAChB,IAAI,GAAG,EAAkD,CAAC;AAE5D,MAAM,CAAC,MAAM,wBAAwB,GAAW,GAAG,CAAC;AAEpD,MAAM,UAAU,wBAAwB,CAAC,OAAe;IACtD,MAAM,MAAM,GACV,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAE5B,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,IAAI,MAAM,YAAY,gBAAgB,EAAE,CAAC;YACvC,MAAM,MAAM,CAAC;QACf,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,IAAI,MAA8C,CAAC;IAEnD,IAAI,CAAC;QACH,MAAM,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;IACvC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM;YACJ,GAAG,YAAY,gBAAgB,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,gBAAgB,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9E,CAAC;IAED,IAAI,YAAY,CAAC,IAAI,IAAI,wBAAwB,EAAE,CAAC;QAClD,+DAA+D;QAC/D,MAAM,SAAS,GAAuB,YAAY,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC;QAEvE,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;YAC5B,YAAY,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QACjC,CAAC;IACH,CAAC;IAED,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAElC,IAAI,MAAM,YAAY,gBAAgB,EAAE,CAAC;QACvC,MAAM,MAAM,CAAC;IACf,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,kDAAkD;AAClD,MAAM,UAAU,qBAAqB;IACnC,YAAY,CAAC,KAAK,EAAE,CAAC;AACvB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,oBAAoB,CAClC,OAAe,EACf,KAAa;IAEb,OAAO,gBAAgB,CAAC,kBAAkB,CAAC,OAAO,CAAC,EAAE,KAAK,CAAC,CAAC;AAC9D,CAAC;AAED,eAAe;IACb,kBAAkB;IAClB,wBAAwB;IACxB,gBAAgB;IAChB,oBAAoB;CACrB,CAAC"}

package/build/dist/Utils/Grok/GrokPatterns.js

@@ -0,0 +1,112 @@
+/*
+ * Built-in grok pattern library.
+ *
+ * Grok is regex with names: `%{IPV4:client_ip}` is just the IPv4 regex
+ * plus "put what it matched in client_ip". This file holds the named
+ * regex halves; Grok.ts does the naming.
+ *
+ * Two rules every entry here must follow:
+ *
+ *   1. NO capturing groups. Use `(?:...)`. Grok.ts injects its own
+ *      named groups around the pattern it is asked to capture and reads
+ *      results back through `match.groups`, so a stray `(...)` in a
+ *      definition would silently shift nothing but still cost a capture
+ *      slot on every record.
+ *
+ *   2. JavaScript-compatible syntax only. The upstream Logstash
+ *      definitions are Oniguruma and use possessive quantifiers (`++`)
+ *      and atomic groups (`(?>...)`), neither of which V8 accepts —
+ *      those have been rewritten here rather than copied.
+ *
+ * Every repetition of a group consumes at least one character, which is
+ * what keeps `(?:/[\w]*)+`-shaped patterns linear instead of
+ * exponential. Keep it that way when adding patterns: these run once
+ * per ingested log record against attacker-supplied text.
+ */
+const GrokPatterns = {
+    /* --- Primitives --- */
+    USERNAME: String.raw `[a-zA-Z0-9._-]+`,
+    USER: String.raw `%{USERNAME}`,
+    INT: String.raw `(?:[+-]?(?:[0-9]+))`,
+    BASE10NUM: String.raw `(?:[+-]?(?:[0-9]+(?:\.[0-9]+)?|\.[0-9]+))`,
+    NUMBER: String.raw `(?:%{BASE10NUM})`,
+    BASE16NUM: String.raw `(?:0[xX])?(?:[0-9A-Fa-f]+)`,
+    POSINT: String.raw `\b(?:[1-9][0-9]*)\b`,
+    NONNEGINT: String.raw `\b(?:[0-9]+)\b`,
+    WORD: String.raw `\b\w+\b`,
+    NOTSPACE: String.raw `\S+`,
+    SPACE: String.raw `\s*`,
+    DATA: String.raw `.*?`,
+    GREEDYDATA: String.raw `.*`,
+    QUOTEDSTRING: String.raw `(?:"(?:\\.|[^\\"])*"|'(?:\\.|[^\\'])*')`,
+    QS: String.raw `%{QUOTEDSTRING}`,
+    UUID: String.raw `[A-Fa-f0-9]{8}-(?:[A-Fa-f0-9]{4}-){3}[A-Fa-f0-9]{12}`,
+    /* --- Network --- */
+    IPV4: String.raw `(?<![0-9])(?:(?:25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)\.){3}(?:25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)(?![0-9])`,
+    /*
+     * Alternation is first-match, not longest-match, so order carries
+     * meaning here: the IPv4-embedded forms come first (a generic hex form
+     * would otherwise stop before the dotted quad), and the "::"-elision
+     * forms are ordered so a shape that can only match a prefix never sits
+     * ahead of one that matches the whole address.
+     */
+    IPV6: String.raw `(?:::(?:[Ff]{4}(?::0{1,4})?:)?%{IPV4}|(?:[0-9A-Fa-f]{1,4}:){1,4}:%{IPV4}|(?:[0-9A-Fa-f]{1,4}:){7}[0-9A-Fa-f]{1,4}|[0-9A-Fa-f]{1,4}:(?::[0-9A-Fa-f]{1,4}){1,6}|(?:[0-9A-Fa-f]{1,4}:){1,2}(?::[0-9A-Fa-f]{1,4}){1,5}|(?:[0-9A-Fa-f]{1,4}:){1,3}(?::[0-9A-Fa-f]{1,4}){1,4}|(?:[0-9A-Fa-f]{1,4}:){1,4}(?::[0-9A-Fa-f]{1,4}){1,3}|(?:[0-9A-Fa-f]{1,4}:){1,5}(?::[0-9A-Fa-f]{1,4}){1,2}|(?:[0-9A-Fa-f]{1,4}:){1,6}:[0-9A-Fa-f]{1,4}|(?:[0-9A-Fa-f]{1,4}:){1,7}:|:(?:(?::[0-9A-Fa-f]{1,4}){1,7}|:))`,
+    IP: String.raw `(?:%{IPV6}|%{IPV4})`,
+    HOSTNAME: String.raw `\b(?:[0-9A-Za-z][0-9A-Za-z-]{0,62})(?:\.(?:[0-9A-Za-z][0-9A-Za-z-]{0,62}))*\.?`,
+    IPORHOST: String.raw `(?:%{IP}|%{HOSTNAME})`,
+    HOSTPORT: String.raw `%{IPORHOST}:%{POSINT}`,
+    COMMONMAC: String.raw `(?:(?:[A-Fa-f0-9]{2}:){5}[A-Fa-f0-9]{2})`,
+    CISCOMAC: String.raw `(?:(?:[A-Fa-f0-9]{4}\.){2}[A-Fa-f0-9]{4})`,
+    WINDOWSMAC: String.raw `(?:(?:[A-Fa-f0-9]{2}-){5}[A-Fa-f0-9]{2})`,
+    MAC: String.raw `(?:%{CISCOMAC}|%{WINDOWSMAC}|%{COMMONMAC})`,
+    EMAILLOCALPART: String.raw `[a-zA-Z0-9!#$%&'*+\-/=?^_{|}~]{1,64}(?:\.[a-zA-Z0-9!#$%&'*+\-/=?^_{|}~]{1,62}){0,63}`,
+    EMAILADDRESS: String.raw `%{EMAILLOCALPART}@%{HOSTNAME}`,
+    /* --- Paths and URIs --- */
+    UNIXPATH: String.raw `(?:/[\w_%!$@:.,+~-]*)+`,
+    WINPATH: String.raw `(?:[A-Za-z]+:|\\)(?:\\[^\\?*]*)+`,
+    PATH: String.raw `(?:%{UNIXPATH}|%{WINPATH})`,
+    URIPROTO: String.raw `[A-Za-z][A-Za-z0-9+.-]+`,
+    URIHOST: String.raw `%{IPORHOST}(?::%{POSINT})?`,
+    URIPATH: String.raw `(?:/[A-Za-z0-9$.+!*'(){},~:;=@#%&_-]*)+`,
+    URIPARAM: String.raw `\?[A-Za-z0-9$.+!*'|(){},~@#%&/=:;_?<>\[\]-]*`,
+    URIPATHPARAM: String.raw `%{URIPATH}(?:%{URIPARAM})?`,
+    URI: String.raw `%{URIPROTO}://(?:%{USER}(?::[^@]*)?@)?(?:%{URIHOST})?(?:%{URIPATHPARAM})?`,
+    /* --- Dates and times --- */
+    MONTH: String.raw `\b(?:Jan(?:uary)?|Feb(?:ruary)?|Mar(?:ch)?|Apr(?:il)?|May|Jun(?:e)?|Jul(?:y)?|Aug(?:ust)?|Sep(?:tember)?|Oct(?:ober)?|Nov(?:ember)?|Dec(?:ember)?)\b`,
+    MONTHNUM: String.raw `(?:0?[1-9]|1[0-2])`,
+    MONTHNUM2: String.raw `(?:0[1-9]|1[0-2])`,
+    MONTHDAY: String.raw `(?:0[1-9]|[12][0-9]|3[01]|[1-9])`,
+    DAY: String.raw `(?:Mon(?:day)?|Tue(?:sday)?|Wed(?:nesday)?|Thu(?:rsday)?|Fri(?:day)?|Sat(?:urday)?|Sun(?:day)?)`,
+    YEAR: String.raw `(?:\d\d){1,2}`,
+    HOUR: String.raw `(?:2[0123]|[01]?[0-9])`,
+    MINUTE: String.raw `(?:[0-5][0-9])`,
+    SECOND: String.raw `(?:(?:[0-5]?[0-9]|60)(?:[:.,][0-9]+)?)`,
+    TIME: String.raw `(?:%{HOUR}:%{MINUTE}(?::%{SECOND})?)`,
+    DATE_US: String.raw `%{MONTHNUM}[/-]%{MONTHDAY}[/-]%{YEAR}`,
+    DATE_EU: String.raw `%{MONTHDAY}[./-]%{MONTHNUM}[./-]%{YEAR}`,
+    DATE: String.raw `(?:%{DATE_US}|%{DATE_EU})`,
+    ISO8601_TIMEZONE: String.raw `(?:Z|[+-]%{HOUR}(?::?%{MINUTE})?)`,
+    TIMESTAMP_ISO8601: String.raw `%{YEAR}-%{MONTHNUM2}-%{MONTHDAY}[T ]%{HOUR}:?%{MINUTE}(?::?%{SECOND})?(?:%{ISO8601_TIMEZONE})?`,
+    DATESTAMP: String.raw `%{DATE}[- ]%{TIME}`,
+    TZ: String.raw `(?:[APMCE][SD]T|UTC|GMT)`,
+    HTTPDATE: String.raw `%{MONTHDAY}/%{MONTH}/%{YEAR}:%{TIME} %{INT}`,
+    SYSLOGTIMESTAMP: String.raw `%{MONTH} +%{MONTHDAY} %{TIME}`,
+    /* --- Log shapes --- */
+    LOGLEVEL: String.raw `(?:[Aa]lert|ALERT|[Tt]race|TRACE|[Dd]ebug|DEBUG|[Nn]otice|NOTICE|[Ii]nfo(?:rmation)?|INFO(?:RMATION)?|[Ww]arn(?:ing)?|WARN(?:ING)?|[Ee]rr(?:or)?|ERR(?:OR)?|[Cc]rit(?:ical)?|CRIT(?:ICAL)?|[Ff]atal|FATAL|[Ss]evere|SEVERE|[Ee]merg(?:ency)?|EMERG(?:ENCY)?)`,
+    PROG: String.raw `[\x21-\x5a\x5c\x5e-\x7e]+`,
+    SYSLOGPROG: String.raw `%{PROG:program}(?:\[%{POSINT:pid}\])?`,
+    SYSLOGFACILITY: String.raw `<%{NONNEGINT:facility}\.%{NONNEGINT:priority}>`,
+    SYSLOGBASE: String.raw `%{SYSLOGTIMESTAMP:timestamp} (?:%{SYSLOGFACILITY} )?%{IPORHOST:logsource} %{SYSLOGPROG}:`,
+    JAVACLASS: String.raw `(?:[a-zA-Z$_][a-zA-Z$_0-9]*\.)*[a-zA-Z$_][a-zA-Z$_0-9]*`,
+    COMMONAPACHELOG: String.raw `%{IPORHOST:clientip} %{USER:ident} %{USER:auth} \[%{HTTPDATE:timestamp}\] "(?:%{WORD:verb} %{NOTSPACE:request}(?: HTTP/%{NUMBER:httpversion})?|%{DATA:rawrequest})" %{NUMBER:response} (?:%{NUMBER:bytes}|-)`,
+    COMBINEDAPACHELOG: String.raw `%{COMMONAPACHELOG} %{QS:referrer} %{QS:agent}`,
+};
+/*
+ * Names only, sorted — the pattern picker in the processor form lists
+ * these so a user can see what is available without leaving the page.
+ */
+export function getGrokPatternNames() {
+    return Object.keys(GrokPatterns).sort();
+}
+export default GrokPatterns;
+//# sourceMappingURL=GrokPatterns.js.map

package/build/dist/Utils/Grok/GrokPatterns.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"GrokPatterns.js","sourceRoot":"","sources":["../../../../Utils/Grok/GrokPatterns.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH,MAAM,YAAY,GAA2B;IAC3C,wBAAwB;IACxB,QAAQ,EAAE,MAAM,CAAC,GAAG,CAAA,iBAAiB;IACrC,IAAI,EAAE,MAAM,CAAC,GAAG,CAAA,aAAa;IAC7B,GAAG,EAAE,MAAM,CAAC,GAAG,CAAA,qBAAqB;IACpC,SAAS,EAAE,MAAM,CAAC,GAAG,CAAA,2CAA2C;IAChE,MAAM,EAAE,MAAM,CAAC,GAAG,CAAA,kBAAkB;IACpC,SAAS,EAAE,MAAM,CAAC,GAAG,CAAA,4BAA4B;IACjD,MAAM,EAAE,MAAM,CAAC,GAAG,CAAA,qBAAqB;IACvC,SAAS,EAAE,MAAM,CAAC,GAAG,CAAA,gBAAgB;IACrC,IAAI,EAAE,MAAM,CAAC,GAAG,CAAA,SAAS;IACzB,QAAQ,EAAE,MAAM,CAAC,GAAG,CAAA,KAAK;IACzB,KAAK,EAAE,MAAM,CAAC,GAAG,CAAA,KAAK;IACtB,IAAI,EAAE,MAAM,CAAC,GAAG,CAAA,KAAK;IACrB,UAAU,EAAE,MAAM,CAAC,GAAG,CAAA,IAAI;IAC1B,YAAY,EAAE,MAAM,CAAC,GAAG,CAAA,yCAAyC;IACjE,EAAE,EAAE,MAAM,CAAC,GAAG,CAAA,iBAAiB;IAC/B,IAAI,EAAE,MAAM,CAAC,GAAG,CAAA,sDAAsD;IAEtE,qBAAqB;IACrB,IAAI,EAAE,MAAM,CAAC,GAAG,CAAA,8GAA8G;IAC9H;;;;;;OAMG;IACH,IAAI,EAAE,MAAM,CAAC,GAAG,CAAA,8dAA8d;IAC9e,EAAE,EAAE,MAAM,CAAC,GAAG,CAAA,qBAAqB;IACnC,QAAQ,EAAE,MAAM,CAAC,GAAG,CAAA,gFAAgF;IACpG,QAAQ,EAAE,MAAM,CAAC,GAAG,CAAA,uBAAuB;IAC3C,QAAQ,EAAE,MAAM,CAAC,GAAG,CAAA,uBAAuB;IAC3C,SAAS,EAAE,MAAM,CAAC,GAAG,CAAA,0CAA0C;IAC/D,QAAQ,EAAE,MAAM,CAAC,GAAG,CAAA,2CAA2C;IAC/D,UAAU,EAAE,MAAM,CAAC,GAAG,CAAA,0CAA0C;IAChE,GAAG,EAAE,MAAM,CAAC,GAAG,CAAA,4CAA4C;IAC3D,cAAc,EAAE,MAAM,CAAC,GAAG,CAAA,sFAAsF;IAChH,YAAY,EAAE,MAAM,CAAC,GAAG,CAAA,+BAA+B;IAEvD,4BAA4B;IAC5B,QAAQ,EAAE,MAAM,CAAC,GAAG,CAAA,wBAAwB;IAC5C,OAAO,EAAE,MAAM,CAAC,GAAG,CAAA,kCAAkC;IACrD,IAAI,EAAE,MAAM,CAAC,GAAG,CAAA,4BAA4B;IAC5C,QAAQ,EAAE,MAAM,CAAC,GAAG,CAAA,yBAAyB;IAC7C,OAAO,EAAE,MAAM,CAAC,GAAG,CAAA,4BAA4B;IAC/C,OAAO,EAAE,MAAM,CAAC,GAAG,CAAA,yCAAyC;IAC5D,QAAQ,EAAE,MAAM,CAAC,GAAG,CAAA,8CAA8C;IAClE,YAAY,EAAE,MAAM,CAAC,GAAG,CAAA,4BAA4B;IACpD,GAAG,EAAE,MAAM,CAAC,GAAG,CAAA,2EAA2E;IAE1F,6BAA6B;IAC7B,KAAK,EAAE,MAAM,CAAC,GAAG,CAAA,sJAAsJ;IACvK,QAAQ,EAAE,MAAM,CAAC,GAAG,CAAA,oBAAoB;IACxC,SAAS,EAAE,MAAM,CAAC,GAAG,CAAA,mBAAmB;IACxC,QAAQ,EAAE,MAAM,CAAC,GAAG,CAAA,kCAAkC;IACtD,GAAG,EAAE,MAAM,CAAC,GAAG,CAAA,iGAAiG;IAChH,IAAI,EAAE,MAAM,CAAC,GAAG,CAAA,eAAe;IAC/B,IAAI,EAAE,MAAM,CAAC,GAAG,CAAA,wBAAwB;IACxC,MAAM,EAAE,MAAM,CAAC,GAAG,CAAA,gBAAgB;IAClC,MAAM,EAAE,MAAM,CAAC,GAAG,CAAA,wCAAwC;IAC1D,IAAI,EAAE,MAAM,CAAC,GAAG,CAAA,sCAAsC;IACtD,OAAO,EAAE,MAAM,CAAC,GAAG,CAAA,uCAAuC;IAC1D,OAAO,EAAE,MAAM,CAAC,GAAG,CAAA,yCAAyC;IAC5D,IAAI,EAAE,MAAM,CAAC,GAAG,CAAA,2BAA2B;IAC3C,gBAAgB,EAAE,MAAM,CAAC,GAAG,CAAA,mCAAmC;IAC/D,iBAAiB,EAAE,MAAM,CAAC,GAAG,CAAA,gGAAgG;IAC7H,SAAS,EAAE,MAAM,CAAC,GAAG,CAAA,oBAAoB;IACzC,EAAE,EAAE,MAAM,CAAC,GAAG,CAAA,0BAA0B;IACxC,QAAQ,EAAE,MAAM,CAAC,GAAG,CAAA,6CAA6C;IACjE,eAAe,EAAE,MAAM,CAAC,GAAG,CAAA,+BAA+B;IAE1D,wBAAwB;IACxB,QAAQ,EAAE,MAAM,CAAC,GAAG,CAAA,8PAA8P;IAClR,IAAI,EAAE,MAAM,CAAC,GAAG,CAAA,2BAA2B;IAC3C,UAAU,EAAE,MAAM,CAAC,GAAG,CAAA,uCAAuC;IAC7D,cAAc,EAAE,MAAM,CAAC,GAAG,CAAA,gDAAgD;IAC1E,UAAU,EAAE,MAAM,CAAC,GAAG,CAAA,0FAA0F;IAChH,SAAS,EAAE,MAAM,CAAC,GAAG,CAAA,yDAAyD;IAC9E,eAAe,EAAE,MAAM,CAAC,GAAG,CAAA,8MAA8M;IACzO,iBAAiB,EAAE,MAAM,CAAC,GAAG,CAAA,+CAA+C;CAC7E,CAAC;AAEF;;;GAGG;AACH,MAAM,UAAU,mBAAmB;IACjC,OAAO,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,IAAI,EAAE,CAAC;AAC1C,CAAC;AAED,eAAe,YAAY,CAAC"}