@oneuptime/common 13.0.3 → 13.0.5

package/build/dist/Server/API/GoogleSecOpsConnectionAPI.js

@@ -2,8 +2,9 @@ import GoogleSecOpsConnection from "../../Models/DatabaseModels/GoogleSecOpsConn
 import BadDataException from "../../Types/Exception/BadDataException";
 import ObjectID from "../../Types/ObjectID";
 import UserMiddleware from "../Middleware/UserAuthorization";
-import GoogleSecOpsConnectionService from "../Services/GoogleSecOpsConnectionService";
+import GoogleSecOpsConnectionService, { Service as GoogleSecOpsConnectionServiceType, } from "../Services/GoogleSecOpsConnectionService";
 import Response from "../Utils/Response";
+import GoogleSecOpsConnectionTester from "../Utils/SecurityEvent/GoogleSecOps/GoogleSecOpsConnectionTester";
 import GoogleSecOpsRunExecutor from "../Utils/SecurityEvent/GoogleSecOps/GoogleSecOpsRunExecutor";
 import BaseAPI from "./BaseAPI";
 import CommonAPI from "./CommonAPI";
@@ -11,15 +12,12 @@ export default class GoogleSecOpsConnectionAPI extends BaseAPI {
     constructor() {
         var _a;
         super(GoogleSecOpsConnection, GoogleSecOpsConnectionService);
-        this.router.post(`${(_a = new this.entityType().getCrudApiPath()) === null || _a === void 0 ? void 0 : _a.toString()}/:connectionId/run`, UserMiddleware.getUserMiddleware, UserMiddleware.requireUserAuthentication, async (req, res, next) => {
+        const basePath = ((_a = new this.entityType().getCrudApiPath()) === null || _a === void 0 ? void 0 : _a.toString()) || "";
+        this.router.post(`${basePath}/:connectionId/run`, UserMiddleware.getUserMiddleware, UserMiddleware.requireUserAuthentication, async (req, res, next) => {
             try {
                 const props = await CommonAPI.getDatabaseCommonInteractionProps(req);
                 const projectId = CommonAPI.assertAuthenticatedProjectMember(props);
-                CommonAPI.assertPermittedInProject({
-                    databaseProps: props,
-                    allowedPermissions: new GoogleSecOpsConnection().getUpdatePermissions(),
-                    errorMessage: "Project owners, project administrators, and security administrators can run connection diagnostics.",
-                });
+                this.assertCanOperate(props);
                 const connectionId = req.params["connectionId"];
                 if (!connectionId || !ObjectID.isValidUUID(connectionId)) {
                     throw new BadDataException("A valid connection ID is required.");
@@ -51,6 +49,183 @@ export default class GoogleSecOpsConnectionAPI extends BaseAPI {
                 next(error);
             }
         });
+        /*
+         * Synchronous connection test, run in this process rather than through
+         * the Worker queue so it can report "no worker is consuming the queue"
+         * instead of sitting in "queued". Body is either
+         *   { connectionId, region?, instanceResourceName?,
+         *     includeNonAlertingDetections? } — a saved connection (credentials
+         *     read with root props here, never returned). The optional settings
+         *     are the edit form's unsaved values: they replace the stored ones
+         *     for this test only, while the stored key is always used, because
+         *     the key can never be read back into the form. Or
+         *   { region, instanceResourceName, serviceAccountJson,
+         *     includeNonAlertingDetections } — settings that were never saved,
+         *     so the create form can test before storing anything.
+         * Nothing is persisted except a run-history row for a saved connection
+         * tested exactly as stored: a row describing settings that were never
+         * saved would misstate that connection's history.
+         */
+        this.router.post(`${basePath}/test`, UserMiddleware.getUserMiddleware, UserMiddleware.requireUserAuthentication, async (req, res, next) => {
+            try {
+                const props = await CommonAPI.getDatabaseCommonInteractionProps(req);
+                const projectId = CommonAPI.assertAuthenticatedProjectMember(props);
+                this.assertCanOperate(props);
+                const body = req.body && typeof req.body === "object" && !Array.isArray(req.body)
+                    ? req.body
+                    : {};
+                const connectionIdValue = body["connectionId"];
+                let connection;
+                let recordRun = false;
+                if (connectionIdValue !== undefined && connectionIdValue !== null) {
+                    const connectionId = String(connectionIdValue);
+                    if (!ObjectID.isValidUUID(connectionId)) {
+                        throw new BadDataException("A valid connection ID is required.");
+                    }
+                    const accessible = await this.service.findOneBy({
+                        query: { _id: connectionId, projectId },
+                        select: { _id: true, projectId: true },
+                        props,
+                    });
+                    CommonAPI.assertResourceBelongsToProject({
+                        resourceProjectId: accessible === null || accessible === void 0 ? void 0 : accessible.projectId,
+                        projectId,
+                    });
+                    const loaded = await this.service.findOneById({
+                        id: new ObjectID(connectionId),
+                        select: {
+                            _id: true,
+                            projectId: true,
+                            name: true,
+                            region: true,
+                            instanceResourceName: true,
+                            serviceAccountJson: true,
+                            includeNonAlertingDetections: true,
+                            isEnabled: true,
+                            pollIntervalInMinutes: true,
+                            createdAt: true,
+                            lastPolledAt: true,
+                            lastSuccessfulPollAt: true,
+                            lastEventIngestedAt: true,
+                            lastError: true,
+                        },
+                        props: { isRoot: true },
+                    });
+                    if (!loaded) {
+                        throw new BadDataException("The connection no longer exists.");
+                    }
+                    const overlaid = GoogleSecOpsConnectionAPI.overlayEditedSettings({
+                        connection: loaded,
+                        body,
+                    });
+                    connection = loaded;
+                    recordRun = !overlaid;
+                }
+                else {
+                    const region = GoogleSecOpsConnectionAPI.readString(body["region"]);
+                    const instanceResourceName = GoogleSecOpsConnectionAPI.readString(body["instanceResourceName"]);
+                    const serviceAccountJson = GoogleSecOpsConnectionAPI.readString(body["serviceAccountJson"]);
+                    if (!region || !instanceResourceName || !serviceAccountJson) {
+                        throw new BadDataException("Provide a connectionId, or region, instanceResourceName and serviceAccountJson to test unsaved settings.");
+                    }
+                    const includeNonAlertingDetections = body["includeNonAlertingDetections"];
+                    // The same rules create and update apply, without a row.
+                    GoogleSecOpsConnectionServiceType.validateSettings({
+                        region,
+                        instanceResourceName,
+                        serviceAccountJson,
+                        includeNonAlertingDetections: includeNonAlertingDetections === undefined ||
+                            includeNonAlertingDetections === null
+                            ? undefined
+                            : includeNonAlertingDetections,
+                    });
+                    /*
+                     * A transient row with no id: the tester treats it as unsaved
+                     * (no schedule check, no run-history row) and nothing here
+                     * writes it.
+                     */
+                    connection = new GoogleSecOpsConnection();
+                    connection.projectId = projectId;
+                    connection.region = region;
+                    connection.instanceResourceName = instanceResourceName;
+                    connection.serviceAccountJson = serviceAccountJson;
+                    connection.includeNonAlertingDetections =
+                        includeNonAlertingDetections === true;
+                }
+                const report = await GoogleSecOpsConnectionTester.test({ connection, recordRun });
+                return Response.sendJsonObjectResponse(req, res, report);
+            }
+            catch (error) {
+                next(error);
+            }
+        });
+    }
+    assertCanOperate(props) {
+        CommonAPI.assertPermittedInProject({
+            databaseProps: props,
+            allowedPermissions: new GoogleSecOpsConnection().getUpdatePermissions(),
+            errorMessage: "Project owners, project administrators, and security administrators can run connection diagnostics.",
+        });
+    }
+    /*
+     * Applies the edit form's unsaved region, instance resource name and
+     * Detections selection to a loaded connection, validated with the same
+     * rules create and update apply (review finding
+     * edit-form-test-ignores-edited-settings: the stored values used to be
+     * tested and the edits silently ignored). Absent or null values keep the
+     * stored setting; the stored key is never replaced here.
+     *
+     * Returns true when any value differs from the stored one. A value equal
+     * to the stored one tests exactly what is saved, so it is not an overlay
+     * and the run can still be recorded against the connection.
+     */
+    static overlayEditedSettings(data) {
+        const regionValue = data.body["region"];
+        const instanceValue = data.body["instanceResourceName"];
+        const includeValue = data.body["includeNonAlertingDetections"];
+        const region = regionValue === undefined || regionValue === null
+            ? undefined
+            : GoogleSecOpsConnectionAPI.readString(regionValue);
+        const instanceResourceName = instanceValue === undefined || instanceValue === null
+            ? undefined
+            : GoogleSecOpsConnectionAPI.readString(instanceValue);
+        const includeNonAlertingDetections = includeValue === undefined || includeValue === null
+            ? undefined
+            : includeValue;
+        /*
+         * An empty region or instance is validated rather than ignored: the
+         * person cleared the field, and testing the stored value instead is the
+         * defect this overlay exists to remove.
+         */
+        GoogleSecOpsConnectionServiceType.validateSettings({
+            region,
+            instanceResourceName,
+            includeNonAlertingDetections,
+        });
+        let overlaid = false;
+        if (region !== undefined && region !== data.connection.region) {
+            data.connection.region = region;
+            overlaid = true;
+        }
+        if (instanceResourceName !== undefined &&
+            instanceResourceName !== data.connection.instanceResourceName) {
+            data.connection.instanceResourceName = instanceResourceName;
+            overlaid = true;
+        }
+        if (includeNonAlertingDetections !== undefined &&
+            includeNonAlertingDetections !==
+                (data.connection.includeNonAlertingDetections === true)) {
+            data.connection.includeNonAlertingDetections =
+                includeNonAlertingDetections;
+            overlaid = true;
+        }
+        return overlaid;
+    }
+    static readString(value) {
+        if (value === null || value === undefined) {
+            return "";
+        }
+        return typeof value === "string" ? value.trim() : String(value).trim();
     }
 }
 //# sourceMappingURL=GoogleSecOpsConnectionAPI.js.map

package/build/dist/Server/API/GoogleSecOpsConnectionAPI.js.map

@@ -1 +1 @@
-{"version":3,"file":"GoogleSecOpsConnectionAPI.js","sourceRoot":"","sources":["../../../../Server/API/GoogleSecOpsConnectionAPI.ts"],"names":[],"mappings":"AAAA,OAAO,sBAAsB,MAAM,oDAAoD,CAAC;AAExF,OAAO,gBAAgB,MAAM,wCAAwC,CAAC;AACtE,OAAO,QAAQ,MAAM,sBAAsB,CAAC;AAC5C,OAAO,cAAc,MAAM,iCAAiC,CAAC;AAC7D,OAAO,6BAEN,MAAM,2CAA2C,CAAC;AAMnD,OAAO,QAAQ,MAAM,mBAAmB,CAAC;AACzC,OAAO,uBAAuB,MAAM,6DAA6D,CAAC;AAClG,OAAO,OAAO,MAAM,WAAW,CAAC;AAChC,OAAO,SAAS,MAAM,aAAa,CAAC;AAEpC,MAAM,CAAC,OAAO,OAAO,yBAA0B,SAAQ,OAGtD;IACC;;QACE,KAAK,CAAC,sBAAsB,EAAE,6BAA6B,CAAC,CAAC;QAE7D,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,GAAG,MAAA,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC,cAAc,EAAE,0CAAE,QAAQ,EAAE,oBAAoB,EACzE,cAAc,CAAC,iBAAiB,EAChC,cAAc,CAAC,yBAAyB,EACxC,KAAK,EAAE,GAAmB,EAAE,GAAoB,EAAE,IAAkB,EAAE,EAAE;YACtE,IAAI,CAAC;gBACH,MAAM,KAAK,GACT,MAAM,SAAS,CAAC,iCAAiC,CAAC,GAAG,CAAC,CAAC;gBACzD,MAAM,SAAS,GACb,SAAS,CAAC,gCAAgC,CAAC,KAAK,CAAC,CAAC;gBACpD,SAAS,CAAC,wBAAwB,CAAC;oBACjC,aAAa,EAAE,KAAK;oBACpB,kBAAkB,EAChB,IAAI,sBAAsB,EAAE,CAAC,oBAAoB,EAAE;oBACrD,YAAY,EACV,qGAAqG;iBACxG,CAAC,CAAC;gBAEH,MAAM,YAAY,GAAuB,GAAG,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;gBACpE,IAAI,CAAC,YAAY,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,YAAY,CAAC,EAAE,CAAC;oBACzD,MAAM,IAAI,gBAAgB,CAAC,oCAAoC,CAAC,CAAC;gBACnE,CAAC;gBAED;;;mBAGG;gBACH,MAAM,UAAU,GACd,MAAM,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC;oBAC3B,KAAK,EAAE,EAAE,GAAG,EAAE,YAAY,EAAE,SAAS,EAAE;oBACvC,MAAM,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE;oBACtC,KAAK;iBACN,CAAC,CAAC;gBACL,SAAS,CAAC,8BAA8B,CAAC;oBACvC,iBAAiB,EAAE,UAAU,aAAV,UAAU,uBAAV,UAAU,CAAE,SAAS;oBACxC,SAAS;iBACV,CAAC,CAAC;gBAEH,MAAM,KAAK,GAAa,MAAM,uBAAuB,CAAC,OAAO,CAAC;oBAC5D,SAAS;oBACT,YAAY,EAAE,IAAI,QAAQ,CAAC,YAAY,CAAC;oBACxC,OAAO,EAAE,uBAAuB,CAAC,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC;oBAC1D,iBAAiB,EAAE,KAAK,CAAC,MAAM;iBAChC,CAAC,CAAC;gBACH,OAAO,QAAQ,CAAC,sBAAsB,CAAC,GAAG,EAAE,GAAG,EAAE;oBAC/C,KAAK,EAAE,KAAK,CAAC,QAAQ,EAAE;iBACxB,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,CAAC,KAAK,CAAC,CAAC;YACd,CAAC;QACH,CAAC,CACF,CAAC;IACJ,CAAC;CACF"}
+{"version":3,"file":"GoogleSecOpsConnectionAPI.js","sourceRoot":"","sources":["../../../../Server/API/GoogleSecOpsConnectionAPI.ts"],"names":[],"mappings":"AAAA,OAAO,sBAAsB,MAAM,oDAAoD,CAAC;AAExF,OAAO,gBAAgB,MAAM,wCAAwC,CAAC;AAEtE,OAAO,QAAQ,MAAM,sBAAsB,CAAC;AAE5C,OAAO,cAAc,MAAM,iCAAiC,CAAC;AAC7D,OAAO,6BAA6B,EAAE,EACpC,OAAO,IAAI,iCAAiC,GAC7C,MAAM,2CAA2C,CAAC;AAMnD,OAAO,QAAQ,MAAM,mBAAmB,CAAC;AACzC,OAAO,4BAA4B,MAAM,kEAAkE,CAAC;AAC5G,OAAO,uBAAuB,MAAM,6DAA6D,CAAC;AAClG,OAAO,OAAO,MAAM,WAAW,CAAC;AAChC,OAAO,SAAS,MAAM,aAAa,CAAC;AAEpC,MAAM,CAAC,OAAO,OAAO,yBAA0B,SAAQ,OAGtD;IACC;;QACE,KAAK,CAAC,sBAAsB,EAAE,6BAA6B,CAAC,CAAC;QAE7D,MAAM,QAAQ,GACZ,CAAA,MAAA,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC,cAAc,EAAE,0CAAE,QAAQ,EAAE,KAAI,EAAE,CAAC;QAE3D,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,GAAG,QAAQ,oBAAoB,EAC/B,cAAc,CAAC,iBAAiB,EAChC,cAAc,CAAC,yBAAyB,EACxC,KAAK,EAAE,GAAmB,EAAE,GAAoB,EAAE,IAAkB,EAAE,EAAE;YACtE,IAAI,CAAC;gBACH,MAAM,KAAK,GACT,MAAM,SAAS,CAAC,iCAAiC,CAAC,GAAG,CAAC,CAAC;gBACzD,MAAM,SAAS,GACb,SAAS,CAAC,gCAAgC,CAAC,KAAK,CAAC,CAAC;gBACpD,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC;gBAE7B,MAAM,YAAY,GAAuB,GAAG,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;gBACpE,IAAI,CAAC,YAAY,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,YAAY,CAAC,EAAE,CAAC;oBACzD,MAAM,IAAI,gBAAgB,CAAC,oCAAoC,CAAC,CAAC;gBACnE,CAAC;gBAED;;;mBAGG;gBACH,MAAM,UAAU,GACd,MAAM,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC;oBAC3B,KAAK,EAAE,EAAE,GAAG,EAAE,YAAY,EAAE,SAAS,EAAE;oBACvC,MAAM,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE;oBACtC,KAAK;iBACN,CAAC,CAAC;gBACL,SAAS,CAAC,8BAA8B,CAAC;oBACvC,iBAAiB,EAAE,UAAU,aAAV,UAAU,uBAAV,UAAU,CAAE,SAAS;oBACxC,SAAS;iBACV,CAAC,CAAC;gBAEH,MAAM,KAAK,GAAa,MAAM,uBAAuB,CAAC,OAAO,CAAC;oBAC5D,SAAS;oBACT,YAAY,EAAE,IAAI,QAAQ,CAAC,YAAY,CAAC;oBACxC,OAAO,EAAE,uBAAuB,CAAC,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC;oBAC1D,iBAAiB,EAAE,KAAK,CAAC,MAAM;iBAChC,CAAC,CAAC;gBACH,OAAO,QAAQ,CAAC,sBAAsB,CAAC,GAAG,EAAE,GAAG,EAAE;oBAC/C,KAAK,EAAE,KAAK,CAAC,QAAQ,EAAE;iBACxB,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,CAAC,KAAK,CAAC,CAAC;YACd,CAAC;QACH,CAAC,CACF,CAAC;QAEF;;;;;;;;;;;;;;;;WAgBG;QACH,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,GAAG,QAAQ,OAAO,EAClB,cAAc,CAAC,iBAAiB,EAChC,cAAc,CAAC,yBAAyB,EACxC,KAAK,EAAE,GAAmB,EAAE,GAAoB,EAAE,IAAkB,EAAE,EAAE;YACtE,IAAI,CAAC;gBACH,MAAM,KAAK,GACT,MAAM,SAAS,CAAC,iCAAiC,CAAC,GAAG,CAAC,CAAC;gBACzD,MAAM,SAAS,GACb,SAAS,CAAC,gCAAgC,CAAC,KAAK,CAAC,CAAC;gBACpD,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC;gBAE7B,MAAM,IAAI,GACR,GAAG,CAAC,IAAI,IAAI,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC;oBAClE,CAAC,CAAE,GAAG,CAAC,IAAmB;oBAC1B,CAAC,CAAC,EAAE,CAAC;gBAET,MAAM,iBAAiB,GAA0B,IAAI,CAAC,cAAc,CAAC,CAAC;gBACtE,IAAI,UAAkC,CAAC;gBACvC,IAAI,SAAS,GAAY,KAAK,CAAC;gBAE/B,IAAI,iBAAiB,KAAK,SAAS,IAAI,iBAAiB,KAAK,IAAI,EAAE,CAAC;oBAClE,MAAM,YAAY,GAAW,MAAM,CAAC,iBAAiB,CAAC,CAAC;oBAEvD,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,YAAY,CAAC,EAAE,CAAC;wBACxC,MAAM,IAAI,gBAAgB,CAAC,oCAAoC,CAAC,CAAC;oBACnE,CAAC;oBAED,MAAM,UAAU,GACd,MAAM,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC;wBAC3B,KAAK,EAAE,EAAE,GAAG,EAAE,YAAY,EAAE,SAAS,EAAE;wBACvC,MAAM,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE;wBACtC,KAAK;qBACN,CAAC,CAAC;oBACL,SAAS,CAAC,8BAA8B,CAAC;wBACvC,iBAAiB,EAAE,UAAU,aAAV,UAAU,uBAAV,UAAU,CAAE,SAAS;wBACxC,SAAS;qBACV,CAAC,CAAC;oBAEH,MAAM,MAAM,GACV,MAAM,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC;wBAC7B,EAAE,EAAE,IAAI,QAAQ,CAAC,YAAY,CAAC;wBAC9B,MAAM,EAAE;4BACN,GAAG,EAAE,IAAI;4BACT,SAAS,EAAE,IAAI;4BACf,IAAI,EAAE,IAAI;4BACV,MAAM,EAAE,IAAI;4BACZ,oBAAoB,EAAE,IAAI;4BAC1B,kBAAkB,EAAE,IAAI;4BACxB,4BAA4B,EAAE,IAAI;4BAClC,SAAS,EAAE,IAAI;4BACf,qBAAqB,EAAE,IAAI;4BAC3B,SAAS,EAAE,IAAI;4BACf,YAAY,EAAE,IAAI;4BAClB,oBAAoB,EAAE,IAAI;4BAC1B,mBAAmB,EAAE,IAAI;4BACzB,SAAS,EAAE,IAAI;yBAChB;wBACD,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE;qBACxB,CAAC,CAAC;oBAEL,IAAI,CAAC,MAAM,EAAE,CAAC;wBACZ,MAAM,IAAI,gBAAgB,CAAC,kCAAkC,CAAC,CAAC;oBACjE,CAAC;oBAED,MAAM,QAAQ,GACZ,yBAAyB,CAAC,qBAAqB,CAAC;wBAC9C,UAAU,EAAE,MAAM;wBAClB,IAAI;qBACL,CAAC,CAAC;oBAEL,UAAU,GAAG,MAAM,CAAC;oBACpB,SAAS,GAAG,CAAC,QAAQ,CAAC;gBACxB,CAAC;qBAAM,CAAC;oBACN,MAAM,MAAM,GAAW,yBAAyB,CAAC,UAAU,CACzD,IAAI,CAAC,QAAQ,CAAC,CACf,CAAC;oBACF,MAAM,oBAAoB,GACxB,yBAAyB,CAAC,UAAU,CAClC,IAAI,CAAC,sBAAsB,CAAC,CAC7B,CAAC;oBACJ,MAAM,kBAAkB,GACtB,yBAAyB,CAAC,UAAU,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC,CAAC;oBAEnE,IAAI,CAAC,MAAM,IAAI,CAAC,oBAAoB,IAAI,CAAC,kBAAkB,EAAE,CAAC;wBAC5D,MAAM,IAAI,gBAAgB,CACxB,0GAA0G,CAC3G,CAAC;oBACJ,CAAC;oBAED,MAAM,4BAA4B,GAChC,IAAI,CAAC,8BAA8B,CAAC,CAAC;oBAEvC,yDAAyD;oBACzD,iCAAiC,CAAC,gBAAgB,CAAC;wBACjD,MAAM;wBACN,oBAAoB;wBACpB,kBAAkB;wBAClB,4BAA4B,EAC1B,4BAA4B,KAAK,SAAS;4BAC1C,4BAA4B,KAAK,IAAI;4BACnC,CAAC,CAAC,SAAS;4BACX,CAAC,CAAE,4BAAwC;qBAChD,CAAC,CAAC;oBAEH;;;;uBAIG;oBACH,UAAU,GAAG,IAAI,sBAAsB,EAAE,CAAC;oBAC1C,UAAU,CAAC,SAAS,GAAG,SAAS,CAAC;oBACjC,UAAU,CAAC,MAAM,GAAG,MAAM,CAAC;oBAC3B,UAAU,CAAC,oBAAoB,GAAG,oBAAoB,CAAC;oBACvD,UAAU,CAAC,kBAAkB,GAAG,kBAAkB,CAAC;oBACnD,UAAU,CAAC,4BAA4B;wBACrC,4BAA4B,KAAK,IAAI,CAAC;gBAC1C,CAAC;gBAED,MAAM,MAAM,GACV,MAAM,4BAA4B,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC,CAAC;gBAErE,OAAO,QAAQ,CAAC,sBAAsB,CACpC,GAAG,EACH,GAAG,EACH,MAA+B,CAChC,CAAC;YACJ,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,CAAC,KAAK,CAAC,CAAC;YACd,CAAC;QACH,CAAC,CACF,CAAC;IACJ,CAAC;IAEO,gBAAgB,CAAC,KAAqC;QAC5D,SAAS,CAAC,wBAAwB,CAAC;YACjC,aAAa,EAAE,KAAK;YACpB,kBAAkB,EAAE,IAAI,sBAAsB,EAAE,CAAC,oBAAoB,EAAE;YACvE,YAAY,EACV,qGAAqG;SACxG,CAAC,CAAC;IACL,CAAC;IAED;;;;;;;;;;;OAWG;IACK,MAAM,CAAC,qBAAqB,CAAC,IAGpC;QACC,MAAM,WAAW,GAA0B,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC/D,MAAM,aAAa,GACjB,IAAI,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;QACpC,MAAM,YAAY,GAChB,IAAI,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAC;QAE5C,MAAM,MAAM,GACV,WAAW,KAAK,SAAS,IAAI,WAAW,KAAK,IAAI;YAC/C,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,yBAAyB,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC;QACxD,MAAM,oBAAoB,GACxB,aAAa,KAAK,SAAS,IAAI,aAAa,KAAK,IAAI;YACnD,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,yBAAyB,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;QAC1D,MAAM,4BAA4B,GAChC,YAAY,KAAK,SAAS,IAAI,YAAY,KAAK,IAAI;YACjD,CAAC,CAAC,SAAS;YACX,CAAC,CAAE,YAAwB,CAAC;QAEhC;;;;WAIG;QACH,iCAAiC,CAAC,gBAAgB,CAAC;YACjD,MAAM;YACN,oBAAoB;YACpB,4BAA4B;SAC7B,CAAC,CAAC;QAEH,IAAI,QAAQ,GAAY,KAAK,CAAC;QAE9B,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC;YAC9D,IAAI,CAAC,UAAU,CAAC,MAAM,GAAG,MAAM,CAAC;YAChC,QAAQ,GAAG,IAAI,CAAC;QAClB,CAAC;QAED,IACE,oBAAoB,KAAK,SAAS;YAClC,oBAAoB,KAAK,IAAI,CAAC,UAAU,CAAC,oBAAoB,EAC7D,CAAC;YACD,IAAI,CAAC,UAAU,CAAC,oBAAoB,GAAG,oBAAoB,CAAC;YAC5D,QAAQ,GAAG,IAAI,CAAC;QAClB,CAAC;QAED,IACE,4BAA4B,KAAK,SAAS;YAC1C,4BAA4B;gBAC1B,CAAC,IAAI,CAAC,UAAU,CAAC,4BAA4B,KAAK,IAAI,CAAC,EACzD,CAAC;YACD,IAAI,CAAC,UAAU,CAAC,4BAA4B;gBAC1C,4BAA4B,CAAC;YAC/B,QAAQ,GAAG,IAAI,CAAC;QAClB,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC;IAEO,MAAM,CAAC,UAAU,CAAC,KAA4B;QACpD,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YAC1C,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC;IACzE,CAAC;CACF"}

package/build/dist/Server/API/SecurityEventConnectionAPI.js

@@ -0,0 +1,171 @@
+import SecurityEventConnection from "../../Models/DatabaseModels/SecurityEventConnection";
+import BadDataException from "../../Types/Exception/BadDataException";
+import ObjectID from "../../Types/ObjectID";
+import UserMiddleware from "../Middleware/UserAuthorization";
+import SecurityEventConnectionService, { Service as SecurityEventConnectionServiceType, } from "../Services/SecurityEventConnectionService";
+import Response from "../Utils/Response";
+import SecurityEventConnectionRunExecutor from "../Utils/SecurityEvent/Connectors/SecurityEventConnectionRunExecutor";
+import SecurityEventConnectionTester from "../Utils/SecurityEvent/Connectors/SecurityEventConnectionTester";
+import BaseAPI from "./BaseAPI";
+import CommonAPI from "./CommonAPI";
+export default class SecurityEventConnectionAPI extends BaseAPI {
+    constructor() {
+        var _a;
+        super(SecurityEventConnection, SecurityEventConnectionService);
+        const basePath = ((_a = new this.entityType().getCrudApiPath()) === null || _a === void 0 ? void 0 : _a.toString()) || "";
+        /*
+         * Queue an operation (test, poll, preview, backfill) for the worker.
+         * Same gate as editing the connection: whoever may configure it may
+         * operate it.
+         */
+        this.router.post(`${basePath}/:connectionId/run`, UserMiddleware.getUserMiddleware, UserMiddleware.requireUserAuthentication, async (req, res, next) => {
+            try {
+                const props = await CommonAPI.getDatabaseCommonInteractionProps(req);
+                const projectId = CommonAPI.assertAuthenticatedProjectMember(props);
+                this.assertCanOperate(props);
+                const connectionId = req.params["connectionId"];
+                if (!connectionId || !ObjectID.isValidUUID(connectionId)) {
+                    throw new BadDataException("A valid connection ID is required.");
+                }
+                const connection = await this.service.findOneBy({
+                    query: { _id: connectionId, projectId },
+                    select: { _id: true, projectId: true },
+                    props,
+                });
+                CommonAPI.assertResourceBelongsToProject({
+                    resourceProjectId: connection === null || connection === void 0 ? void 0 : connection.projectId,
+                    projectId,
+                });
+                const runId = await SecurityEventConnectionRunExecutor.enqueue({
+                    projectId,
+                    connectionId: new ObjectID(connectionId),
+                    options: SecurityEventConnectionRunExecutor.validateOptions(req.body),
+                    requestedByUserId: props.userId,
+                });
+                return Response.sendJsonObjectResponse(req, res, {
+                    runId: runId.toString(),
+                });
+            }
+            catch (error) {
+                next(error);
+            }
+        });
+        /*
+         * Synchronous connection test. Body is either
+         *   { connectionId, config?, secrets? }  — a saved connection, optionally
+         *     with unsaved edits overlaid by the same rule a save applies (a
+         *     secret value replaces the stored one, "" or undefined keeps it,
+         *     null removes it, so the edit form can test a cleared optional
+         *     credential before saving), or
+         *   { provider, config, secrets, alertingOnly? } — settings that were
+         *     never saved, so the create form can test before storing anything.
+         * Nothing is persisted except a run-history row for a saved connection.
+         */
+        this.router.post(`${basePath}/test`, UserMiddleware.getUserMiddleware, UserMiddleware.requireUserAuthentication, async (req, res, next) => {
+            try {
+                const props = await CommonAPI.getDatabaseCommonInteractionProps(req);
+                const projectId = CommonAPI.assertAuthenticatedProjectMember(props);
+                this.assertCanOperate(props);
+                const body = req.body && typeof req.body === "object" && !Array.isArray(req.body)
+                    ? req.body
+                    : {};
+                const connectionIdValue = body["connectionId"];
+                let connection = undefined;
+                let settings;
+                if (connectionIdValue !== undefined && connectionIdValue !== null) {
+                    const connectionId = String(connectionIdValue);
+                    if (!ObjectID.isValidUUID(connectionId)) {
+                        throw new BadDataException("A valid connection ID is required.");
+                    }
+                    const accessible = await this.service.findOneBy({
+                        query: { _id: connectionId, projectId },
+                        select: { _id: true, projectId: true },
+                        props,
+                    });
+                    CommonAPI.assertResourceBelongsToProject({
+                        resourceProjectId: accessible === null || accessible === void 0 ? void 0 : accessible.projectId,
+                        projectId,
+                    });
+                    const loaded = await this.service.findOneById({
+                        id: new ObjectID(connectionId),
+                        select: {
+                            _id: true,
+                            projectId: true,
+                            name: true,
+                            provider: true,
+                            config: true,
+                            secrets: true,
+                            alertingOnly: true,
+                            isEnabled: true,
+                            pollIntervalInMinutes: true,
+                            createdAt: true,
+                            lastPolledAt: true,
+                            lastSuccessfulPollAt: true,
+                            lastEventIngestedAt: true,
+                            lastError: true,
+                        },
+                        props: { isRoot: true },
+                    });
+                    if (!loaded || !loaded.provider) {
+                        throw new BadDataException("The connection no longer exists.");
+                    }
+                    connection = loaded;
+                    const stored = await this.service.getConnectorSettings(loaded);
+                    const config = body["config"] !== undefined
+                        ? SecurityEventConnectionServiceType.parseJsonObject(body["config"], "Configuration")
+                        : stored.config;
+                    const overlay = body["secrets"] !== undefined
+                        ? SecurityEventConnectionServiceType.parseJsonObject(body["secrets"], "Credentials")
+                        : {};
+                    /*
+                     * The merge a save would apply. Testing with a different rule
+                     * would pass settings that cannot be stored, or report a
+                     * cleared credential as still in use (review finding
+                     * optional-secret-cannot-be-cleared).
+                     */
+                    const secrets = SecurityEventConnectionServiceType.mergeSecrets({
+                        definition: SecurityEventConnectionServiceType.getDefinitionOrThrow(loaded.provider),
+                        stored: stored.secrets,
+                        provided: overlay,
+                    });
+                    settings =
+                        await SecurityEventConnectionServiceType.validateSettings({
+                            provider: loaded.provider,
+                            config,
+                            secrets,
+                            alertingOnly: typeof body["alertingOnly"] === "boolean"
+                                ? body["alertingOnly"]
+                                : stored.alertingOnly,
+                            requireRequiredSecrets: true,
+                        });
+                }
+                else {
+                    settings =
+                        await SecurityEventConnectionServiceType.validateSettings({
+                            provider: body["provider"],
+                            config: SecurityEventConnectionServiceType.parseJsonObject(body["config"], "Configuration"),
+                            secrets: SecurityEventConnectionServiceType.parseJsonObject(body["secrets"], "Credentials"),
+                            alertingOnly: body["alertingOnly"] !== false,
+                            requireRequiredSecrets: true,
+                        });
+                }
+                const report = await SecurityEventConnectionTester.test({
+                    settings,
+                    connection,
+                });
+                return Response.sendJsonObjectResponse(req, res, report);
+            }
+            catch (error) {
+                next(error);
+            }
+        });
+    }
+    assertCanOperate(props) {
+        CommonAPI.assertPermittedInProject({
+            databaseProps: props,
+            allowedPermissions: new SecurityEventConnection().getUpdatePermissions(),
+            errorMessage: "Project owners, project administrators, and security administrators can run connection diagnostics.",
+        });
+    }
+}
+//# sourceMappingURL=SecurityEventConnectionAPI.js.map

package/build/dist/Server/API/SecurityEventConnectionAPI.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"SecurityEventConnectionAPI.js","sourceRoot":"","sources":["../../../../Server/API/SecurityEventConnectionAPI.ts"],"names":[],"mappings":"AAAA,OAAO,uBAAuB,MAAM,qDAAqD,CAAC;AAE1F,OAAO,gBAAgB,MAAM,wCAAwC,CAAC;AAEtE,OAAO,QAAQ,MAAM,sBAAsB,CAAC;AAE5C,OAAO,cAAc,MAAM,iCAAiC,CAAC;AAC7D,OAAO,8BAA8B,EAAE,EACrC,OAAO,IAAI,kCAAkC,GAC9C,MAAM,4CAA4C,CAAC;AAMpD,OAAO,QAAQ,MAAM,mBAAmB,CAAC;AACzC,OAAO,kCAAkC,MAAM,sEAAsE,CAAC;AACtH,OAAO,6BAA6B,MAAM,iEAAiE,CAAC;AAE5G,OAAO,OAAO,MAAM,WAAW,CAAC;AAChC,OAAO,SAAS,MAAM,aAAa,CAAC;AAEpC,MAAM,CAAC,OAAO,OAAO,0BAA2B,SAAQ,OAGvD;IACC;;QACE,KAAK,CAAC,uBAAuB,EAAE,8BAA8B,CAAC,CAAC;QAE/D,MAAM,QAAQ,GACZ,CAAA,MAAA,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC,cAAc,EAAE,0CAAE,QAAQ,EAAE,KAAI,EAAE,CAAC;QAE3D;;;;WAIG;QACH,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,GAAG,QAAQ,oBAAoB,EAC/B,cAAc,CAAC,iBAAiB,EAChC,cAAc,CAAC,yBAAyB,EACxC,KAAK,EAAE,GAAmB,EAAE,GAAoB,EAAE,IAAkB,EAAE,EAAE;YACtE,IAAI,CAAC;gBACH,MAAM,KAAK,GACT,MAAM,SAAS,CAAC,iCAAiC,CAAC,GAAG,CAAC,CAAC;gBACzD,MAAM,SAAS,GACb,SAAS,CAAC,gCAAgC,CAAC,KAAK,CAAC,CAAC;gBACpD,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC;gBAE7B,MAAM,YAAY,GAAuB,GAAG,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;gBAEpE,IAAI,CAAC,YAAY,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,YAAY,CAAC,EAAE,CAAC;oBACzD,MAAM,IAAI,gBAAgB,CAAC,oCAAoC,CAAC,CAAC;gBACnE,CAAC;gBAED,MAAM,UAAU,GACd,MAAM,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC;oBAC3B,KAAK,EAAE,EAAE,GAAG,EAAE,YAAY,EAAE,SAAS,EAAE;oBACvC,MAAM,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE;oBACtC,KAAK;iBACN,CAAC,CAAC;gBACL,SAAS,CAAC,8BAA8B,CAAC;oBACvC,iBAAiB,EAAE,UAAU,aAAV,UAAU,uBAAV,UAAU,CAAE,SAAS;oBACxC,SAAS;iBACV,CAAC,CAAC;gBAEH,MAAM,KAAK,GACT,MAAM,kCAAkC,CAAC,OAAO,CAAC;oBAC/C,SAAS;oBACT,YAAY,EAAE,IAAI,QAAQ,CAAC,YAAY,CAAC;oBACxC,OAAO,EAAE,kCAAkC,CAAC,eAAe,CACzD,GAAG,CAAC,IAAI,CACT;oBACD,iBAAiB,EAAE,KAAK,CAAC,MAAM;iBAChC,CAAC,CAAC;gBAEL,OAAO,QAAQ,CAAC,sBAAsB,CAAC,GAAG,EAAE,GAAG,EAAE;oBAC/C,KAAK,EAAE,KAAK,CAAC,QAAQ,EAAE;iBACxB,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,CAAC,KAAK,CAAC,CAAC;YACd,CAAC;QACH,CAAC,CACF,CAAC;QAEF;;;;;;;;;;WAUG;QACH,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,GAAG,QAAQ,OAAO,EAClB,cAAc,CAAC,iBAAiB,EAChC,cAAc,CAAC,yBAAyB,EACxC,KAAK,EAAE,GAAmB,EAAE,GAAoB,EAAE,IAAkB,EAAE,EAAE;YACtE,IAAI,CAAC;gBACH,MAAM,KAAK,GACT,MAAM,SAAS,CAAC,iCAAiC,CAAC,GAAG,CAAC,CAAC;gBACzD,MAAM,SAAS,GACb,SAAS,CAAC,gCAAgC,CAAC,KAAK,CAAC,CAAC;gBACpD,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC;gBAE7B,MAAM,IAAI,GACR,GAAG,CAAC,IAAI,IAAI,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC;oBAClE,CAAC,CAAE,GAAG,CAAC,IAAmB;oBAC1B,CAAC,CAAC,EAAE,CAAC;gBAET,MAAM,iBAAiB,GAA0B,IAAI,CAAC,cAAc,CAAC,CAAC;gBACtE,IAAI,UAAU,GAAwC,SAAS,CAAC;gBAChE,IAAI,QAAmC,CAAC;gBAExC,IAAI,iBAAiB,KAAK,SAAS,IAAI,iBAAiB,KAAK,IAAI,EAAE,CAAC;oBAClE,MAAM,YAAY,GAAW,MAAM,CAAC,iBAAiB,CAAC,CAAC;oBAEvD,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,YAAY,CAAC,EAAE,CAAC;wBACxC,MAAM,IAAI,gBAAgB,CAAC,oCAAoC,CAAC,CAAC;oBACnE,CAAC;oBAED,MAAM,UAAU,GACd,MAAM,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC;wBAC3B,KAAK,EAAE,EAAE,GAAG,EAAE,YAAY,EAAE,SAAS,EAAE;wBACvC,MAAM,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE;wBACtC,KAAK;qBACN,CAAC,CAAC;oBACL,SAAS,CAAC,8BAA8B,CAAC;wBACvC,iBAAiB,EAAE,UAAU,aAAV,UAAU,uBAAV,UAAU,CAAE,SAAS;wBACxC,SAAS;qBACV,CAAC,CAAC;oBAEH,MAAM,MAAM,GACV,MAAM,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC;wBAC7B,EAAE,EAAE,IAAI,QAAQ,CAAC,YAAY,CAAC;wBAC9B,MAAM,EAAE;4BACN,GAAG,EAAE,IAAI;4BACT,SAAS,EAAE,IAAI;4BACf,IAAI,EAAE,IAAI;4BACV,QAAQ,EAAE,IAAI;4BACd,MAAM,EAAE,IAAI;4BACZ,OAAO,EAAE,IAAI;4BACb,YAAY,EAAE,IAAI;4BAClB,SAAS,EAAE,IAAI;4BACf,qBAAqB,EAAE,IAAI;4BAC3B,SAAS,EAAE,IAAI;4BACf,YAAY,EAAE,IAAI;4BAClB,oBAAoB,EAAE,IAAI;4BAC1B,mBAAmB,EAAE,IAAI;4BACzB,SAAS,EAAE,IAAI;yBAChB;wBACD,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE;qBACxB,CAAC,CAAC;oBAEL,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;wBAChC,MAAM,IAAI,gBAAgB,CAAC,kCAAkC,CAAC,CAAC;oBACjE,CAAC;oBAED,UAAU,GAAG,MAAM,CAAC;oBAEpB,MAAM,MAAM,GACV,MAAM,IAAI,CAAC,OAAO,CAAC,oBAAoB,CAAC,MAAM,CAAC,CAAC;oBAClD,MAAM,MAAM,GACV,IAAI,CAAC,QAAQ,CAAC,KAAK,SAAS;wBAC1B,CAAC,CAAC,kCAAkC,CAAC,eAAe,CAChD,IAAI,CAAC,QAAQ,CAAC,EACd,eAAe,CAChB;wBACH,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC;oBACpB,MAAM,OAAO,GACX,IAAI,CAAC,SAAS,CAAC,KAAK,SAAS;wBAC3B,CAAC,CAAC,kCAAkC,CAAC,eAAe,CAChD,IAAI,CAAC,SAAS,CAAC,EACf,aAAa,CACd;wBACH,CAAC,CAAC,EAAE,CAAC;oBACT;;;;;uBAKG;oBACH,MAAM,OAAO,GACX,kCAAkC,CAAC,YAAY,CAAC;wBAC9C,UAAU,EACR,kCAAkC,CAAC,oBAAoB,CACrD,MAAM,CAAC,QAAQ,CAChB;wBACH,MAAM,EAAE,MAAM,CAAC,OAAO;wBACtB,QAAQ,EAAE,OAAO;qBAClB,CAAC,CAAC;oBAEL,QAAQ;wBACN,MAAM,kCAAkC,CAAC,gBAAgB,CAAC;4BACxD,QAAQ,EAAE,MAAM,CAAC,QAAQ;4BACzB,MAAM;4BACN,OAAO;4BACP,YAAY,EACV,OAAO,IAAI,CAAC,cAAc,CAAC,KAAK,SAAS;gCACvC,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC;gCACtB,CAAC,CAAC,MAAM,CAAC,YAAY;4BACzB,sBAAsB,EAAE,IAAI;yBAC7B,CAAC,CAAC;gBACP,CAAC;qBAAM,CAAC;oBACN,QAAQ;wBACN,MAAM,kCAAkC,CAAC,gBAAgB,CAAC;4BACxD,QAAQ,EAAE,IAAI,CAAC,UAAU,CAAC;4BAC1B,MAAM,EAAE,kCAAkC,CAAC,eAAe,CACxD,IAAI,CAAC,QAAQ,CAAC,EACd,eAAe,CAChB;4BACD,OAAO,EAAE,kCAAkC,CAAC,eAAe,CACzD,IAAI,CAAC,SAAS,CAAC,EACf,aAAa,CACd;4BACD,YAAY,EAAE,IAAI,CAAC,cAAc,CAAC,KAAK,KAAK;4BAC5C,sBAAsB,EAAE,IAAI;yBAC7B,CAAC,CAAC;gBACP,CAAC;gBAED,MAAM,MAAM,GACV,MAAM,6BAA6B,CAAC,IAAI,CAAC;oBACvC,QAAQ;oBACR,UAAU;iBACX,CAAC,CAAC;gBAEL,OAAO,QAAQ,CAAC,sBAAsB,CACpC,GAAG,EACH,GAAG,EACH,MAA+B,CAChC,CAAC;YACJ,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,CAAC,KAAK,CAAC,CAAC;YACd,CAAC;QACH,CAAC,CACF,CAAC;IACJ,CAAC;IAEO,gBAAgB,CAAC,KAAqC;QAC5D,SAAS,CAAC,wBAAwB,CAAC;YACjC,aAAa,EAAE,KAAK;YACpB,kBAAkB,EAAE,IAAI,uBAAuB,EAAE,CAAC,oBAAoB,EAAE;YACxE,YAAY,EACV,qGAAqG;SACxG,CAAC,CAAC;IACL,CAAC;CACF"}