@oneuptime/common 13.0.4 → 13.0.5

package/build/dist/Models/DatabaseModels/SecurityEventConnection.js

@@ -0,0 +1,490 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+import Project from "./Project";
+import User from "./User";
+import BaseModel from "./DatabaseBaseModel/DatabaseBaseModel";
+import Route from "../../Types/API/Route";
+import ColumnAccessControl from "../../Types/Database/AccessControl/ColumnAccessControl";
+import TableAccessControl from "../../Types/Database/AccessControl/TableAccessControl";
+import TableBillingAccessControl from "../../Types/Database/AccessControl/TableBillingAccessControl";
+import ColumnLength from "../../Types/Database/ColumnLength";
+import ColumnType from "../../Types/Database/ColumnType";
+import CrudApiEndpoint from "../../Types/Database/CrudApiEndpoint";
+import EnableDocumentation from "../../Types/Database/EnableDocumentation";
+import TableColumn from "../../Types/Database/TableColumn";
+import TableColumnType from "../../Types/Database/TableColumnType";
+import TableMetadata from "../../Types/Database/TableMetadata";
+import TenantColumn from "../../Types/Database/TenantColumn";
+import IconProp from "../../Types/Icon/IconProp";
+import ObjectID from "../../Types/ObjectID";
+import Permission from "../../Types/Permission";
+import { PlanType } from "../../Types/Billing/SubscriptionPlan";
+import SecurityEventConnectorProvider from "../../Types/SecurityEvent/Connectors/SecurityEventConnectorProvider";
+import { Column, Entity, Index, JoinColumn, ManyToOne } from "typeorm";
+/*
+ * Same access split as GoogleSecOpsConnection: connecting a source means
+ * holding a credential that reads someone's security product, so it stays
+ * on the Admin tiers plus SecurityAdmin; every Security tier can read the
+ * connection's health. The credential column itself is write-only.
+ */
+const adminPermissions = [
+    Permission.ProjectOwner,
+    Permission.ProjectAdmin,
+    Permission.SecurityAdmin,
+];
+const readPermissions = [
+    Permission.ProjectOwner,
+    Permission.ProjectAdmin,
+    Permission.SecurityAdmin,
+    Permission.SecurityMember,
+    Permission.SecurityViewer,
+];
+/*
+ * One managed pull connection to a security product (Microsoft Sentinel,
+ * Defender XDR, CrowdStrike Falcon, Splunk, Elastic Security, AWS
+ * Security Hub, Okta ...). The provider decides which keys `config` and
+ * `secrets` carry — see SecurityEventConnectorCatalog — and which server
+ * connector polls it. A Workers cron polls each enabled connection on its
+ * interval, by the source's record CREATION time, and ingests the records
+ * as normalized security events.
+ */
+let SecurityEventConnection = class SecurityEventConnection extends BaseModel {
+    constructor() {
+        super(...arguments);
+        this.project = undefined;
+        this.projectId = undefined;
+        this.name = undefined;
+        this.description = undefined;
+        this.provider = undefined;
+        this.config = undefined;
+        this.secrets = undefined;
+        this.isEnabled = undefined;
+        this.pollIntervalInMinutes = undefined;
+        this.alertingOnly = undefined;
+        this.lastSuccessfulPollAt = undefined;
+        this.lastEventIngestedAt = undefined;
+        this.lastPollResult = undefined;
+        this.lastPolledAt = undefined;
+        this.cursor = undefined;
+        this.lastError = undefined;
+        this.createdByUser = undefined;
+        this.createdByUserId = undefined;
+        this.deletedByUser = undefined;
+        this.deletedByUserId = undefined;
+    }
+};
+__decorate([
+    ColumnAccessControl({
+        create: adminPermissions,
+        read: readPermissions,
+        update: [],
+    }),
+    TableColumn({
+        manyToOneRelationColumn: "projectId",
+        type: TableColumnType.Entity,
+        modelType: Project,
+        title: "Project",
+        description: "Relation to the project this connection belongs to.",
+    }),
+    ManyToOne(() => {
+        return Project;
+    }, {
+        eager: false,
+        nullable: true,
+        onDelete: "CASCADE",
+        orphanedRowAction: "nullify",
+    }),
+    JoinColumn({ name: "projectId" }),
+    __metadata("design:type", Project)
+], SecurityEventConnection.prototype, "project", void 0);
+__decorate([
+    ColumnAccessControl({
+        create: adminPermissions,
+        read: readPermissions,
+        update: [],
+    }),
+    Index(),
+    TableColumn({
+        type: TableColumnType.ObjectID,
+        required: true,
+        canReadOnRelationQuery: true,
+        title: "Project ID",
+        description: "ID of the project this connection belongs to.",
+    }),
+    Column({
+        type: ColumnType.ObjectID,
+        nullable: false,
+        transformer: ObjectID.getDatabaseTransformer(),
+    }),
+    __metadata("design:type", ObjectID)
+], SecurityEventConnection.prototype, "projectId", void 0);
+__decorate([
+    ColumnAccessControl({
+        create: adminPermissions,
+        read: readPermissions,
+        update: adminPermissions,
+    }),
+    TableColumn({
+        required: true,
+        type: TableColumnType.Name,
+        canReadOnRelationQuery: true,
+        title: "Name",
+        description: "Friendly name for this connection.",
+    }),
+    Column({
+        nullable: false,
+        type: ColumnType.Name,
+        length: ColumnLength.Name,
+    }),
+    __metadata("design:type", String)
+], SecurityEventConnection.prototype, "name", void 0);
+__decorate([
+    ColumnAccessControl({
+        create: adminPermissions,
+        read: readPermissions,
+        update: adminPermissions,
+    }),
+    TableColumn({
+        required: false,
+        type: TableColumnType.LongText,
+        title: "Description",
+        description: "What this connection imports and why.",
+    }),
+    Column({
+        nullable: true,
+        type: ColumnType.LongText,
+        length: ColumnLength.LongText,
+    }),
+    __metadata("design:type", String)
+], SecurityEventConnection.prototype, "description", void 0);
+__decorate([
+    ColumnAccessControl({
+        create: adminPermissions,
+        read: readPermissions,
+        update: [],
+    }),
+    Index(),
+    TableColumn({
+        required: true,
+        type: TableColumnType.ShortText,
+        canReadOnRelationQuery: true,
+        title: "Provider",
+        description: "Which security product this connection polls, e.g. 'microsoft-sentinel' or 'crowdstrike-falcon'. Fixed once created.",
+    }),
+    Column({
+        nullable: false,
+        type: ColumnType.ShortText,
+        length: ColumnLength.ShortText,
+    }),
+    __metadata("design:type", String)
+], SecurityEventConnection.prototype, "provider", void 0);
+__decorate([
+    ColumnAccessControl({
+        create: adminPermissions,
+        read: readPermissions,
+        update: adminPermissions,
+    }),
+    TableColumn({
+        required: false,
+        type: TableColumnType.JSON,
+        title: "Configuration",
+        description: "Provider-specific, non-secret settings such as tenant, workspace, region or base URL. Keys are defined by the provider catalog.",
+    }),
+    Column({
+        type: ColumnType.JSON,
+        nullable: true,
+    }),
+    __metadata("design:type", Object)
+], SecurityEventConnection.prototype, "config", void 0);
+__decorate([
+    ColumnAccessControl({
+        create: adminPermissions,
+        read: [],
+        update: adminPermissions,
+    }),
+    TableColumn({
+        required: true,
+        type: TableColumnType.VeryLongText,
+        encrypted: true,
+        title: "Credentials",
+        description: "Provider-specific secrets (client secret, API token, secret access key) as a JSON object. Encrypted at rest and never returned by the API.",
+    }),
+    Column({
+        nullable: false,
+        type: ColumnType.VeryLongText,
+    }),
+    __metadata("design:type", String)
+], SecurityEventConnection.prototype, "secrets", void 0);
+__decorate([
+    ColumnAccessControl({
+        create: adminPermissions,
+        read: readPermissions,
+        update: adminPermissions,
+    }),
+    Index(),
+    TableColumn({
+        required: true,
+        type: TableColumnType.Boolean,
+        canReadOnRelationQuery: true,
+        title: "Enabled",
+        description: "Whether this connection is polled on its schedule.",
+        defaultValue: true,
+    }),
+    Column({
+        nullable: false,
+        type: ColumnType.Boolean,
+        default: true,
+    }),
+    __metadata("design:type", Boolean)
+], SecurityEventConnection.prototype, "isEnabled", void 0);
+__decorate([
+    ColumnAccessControl({
+        create: adminPermissions,
+        read: readPermissions,
+        update: adminPermissions,
+    }),
+    TableColumn({
+        title: "Poll Interval (Minutes)",
+        required: true,
+        type: TableColumnType.Number,
+        canReadOnRelationQuery: true,
+        description: "How often new records are polled, in minutes.",
+        defaultValue: 5,
+    }),
+    Column({
+        type: ColumnType.Number,
+        nullable: false,
+        default: 5,
+    }),
+    __metadata("design:type", Number)
+], SecurityEventConnection.prototype, "pollIntervalInMinutes", void 0);
+__decorate([
+    ColumnAccessControl({
+        create: adminPermissions,
+        read: readPermissions,
+        update: adminPermissions,
+    }),
+    TableColumn({
+        type: TableColumnType.Boolean,
+        required: true,
+        title: "Alerting Records Only",
+        description: "For providers that distinguish alerting from non-alerting records: import only the alerting ones.",
+        defaultValue: true,
+        canReadOnRelationQuery: true,
+    }),
+    Column({ type: ColumnType.Boolean, nullable: false, default: true }),
+    __metadata("design:type", Boolean)
+], SecurityEventConnection.prototype, "alertingOnly", void 0);
+__decorate([
+    ColumnAccessControl({ create: [], read: readPermissions, update: [] }),
+    TableColumn({
+        type: TableColumnType.Date,
+        required: false,
+        title: "Last Successful Poll",
+        description: "When a complete poll last finished successfully, including an empty result.",
+        canReadOnRelationQuery: true,
+    }),
+    Column({ type: ColumnType.Date, nullable: true }),
+    __metadata("design:type", Date)
+], SecurityEventConnection.prototype, "lastSuccessfulPollAt", void 0);
+__decorate([
+    ColumnAccessControl({ create: [], read: readPermissions, update: [] }),
+    TableColumn({
+        type: TableColumnType.Date,
+        required: false,
+        title: "Last Event Imported",
+        description: "When a new security event was last imported from this connection.",
+        canReadOnRelationQuery: true,
+    }),
+    Column({ type: ColumnType.Date, nullable: true }),
+    __metadata("design:type", Date)
+], SecurityEventConnection.prototype, "lastEventIngestedAt", void 0);
+__decorate([
+    ColumnAccessControl({ create: [], read: readPermissions, update: [] }),
+    TableColumn({
+        type: TableColumnType.JSON,
+        required: false,
+        title: "Last Poll Result",
+        description: "The latest scheduled or on-demand poll result with counts and warnings.",
+    }),
+    Column({ type: ColumnType.JSON, nullable: true }),
+    __metadata("design:type", Object)
+], SecurityEventConnection.prototype, "lastPollResult", void 0);
+__decorate([
+    ColumnAccessControl({
+        create: [],
+        read: readPermissions,
+        update: [],
+    }),
+    TableColumn({
+        title: "Last Polled At",
+        required: false,
+        type: TableColumnType.Date,
+        canReadOnRelationQuery: true,
+        description: "When this connection was last polled. Null means it has never run.",
+    }),
+    Column({
+        type: ColumnType.Date,
+        nullable: true,
+    }),
+    __metadata("design:type", Date)
+], SecurityEventConnection.prototype, "lastPolledAt", void 0);
+__decorate([
+    ColumnAccessControl({
+        create: [],
+        read: readPermissions,
+        update: [],
+    }),
+    TableColumn({
+        title: "Cursor",
+        required: false,
+        type: TableColumnType.LongText,
+        canReadOnRelationQuery: true,
+        description: "Poll cursor: the end of the last completely processed creation-time window, as an ISO string.",
+    }),
+    Column({
+        type: ColumnType.LongText,
+        nullable: true,
+        length: ColumnLength.LongText,
+    }),
+    __metadata("design:type", String)
+], SecurityEventConnection.prototype, "cursor", void 0);
+__decorate([
+    ColumnAccessControl({
+        create: [],
+        read: readPermissions,
+        update: [],
+    }),
+    TableColumn({
+        title: "Last Error",
+        required: false,
+        type: TableColumnType.VeryLongText,
+        canReadOnRelationQuery: true,
+        description: "The most recent poll error with credentials redacted, if any. Cleared on the next successful poll.",
+    }),
+    Column({
+        type: ColumnType.VeryLongText,
+        nullable: true,
+    }),
+    __metadata("design:type", String)
+], SecurityEventConnection.prototype, "lastError", void 0);
+__decorate([
+    ColumnAccessControl({
+        create: [],
+        read: readPermissions,
+        update: [],
+    }),
+    TableColumn({
+        manyToOneRelationColumn: "createdByUserId",
+        type: TableColumnType.Entity,
+        modelType: User,
+        title: "Created By User",
+        description: "Relation to the user who created this connection.",
+    }),
+    ManyToOne(() => {
+        return User;
+    }, {
+        eager: false,
+        nullable: true,
+        onDelete: "SET NULL",
+        orphanedRowAction: "nullify",
+    }),
+    JoinColumn({ name: "createdByUserId" }),
+    __metadata("design:type", User)
+], SecurityEventConnection.prototype, "createdByUser", void 0);
+__decorate([
+    ColumnAccessControl({
+        create: [],
+        read: readPermissions,
+        update: [],
+    }),
+    TableColumn({
+        type: TableColumnType.ObjectID,
+        title: "Created By User ID",
+        description: "ID of the user who created this connection.",
+    }),
+    Column({
+        type: ColumnType.ObjectID,
+        nullable: true,
+        transformer: ObjectID.getDatabaseTransformer(),
+    }),
+    __metadata("design:type", ObjectID)
+], SecurityEventConnection.prototype, "createdByUserId", void 0);
+__decorate([
+    ColumnAccessControl({
+        create: [],
+        read: readPermissions,
+        update: [],
+    }),
+    TableColumn({
+        manyToOneRelationColumn: "deletedByUserId",
+        type: TableColumnType.Entity,
+        modelType: User,
+        title: "Deleted By User",
+        description: "Relation to the user who deleted this connection.",
+    }),
+    ManyToOne(() => {
+        return User;
+    }, {
+        eager: false,
+        nullable: true,
+        onDelete: "SET NULL",
+        orphanedRowAction: "nullify",
+    }),
+    JoinColumn({ name: "deletedByUserId" }),
+    __metadata("design:type", User)
+], SecurityEventConnection.prototype, "deletedByUser", void 0);
+__decorate([
+    ColumnAccessControl({
+        create: [],
+        read: readPermissions,
+        update: [],
+    }),
+    TableColumn({
+        type: TableColumnType.ObjectID,
+        title: "Deleted By User ID",
+        description: "ID of the user who deleted this connection.",
+    }),
+    Column({
+        type: ColumnType.ObjectID,
+        nullable: true,
+        transformer: ObjectID.getDatabaseTransformer(),
+    }),
+    __metadata("design:type", ObjectID)
+], SecurityEventConnection.prototype, "deletedByUserId", void 0);
+SecurityEventConnection = __decorate([
+    EnableDocumentation(),
+    TableBillingAccessControl({
+        create: PlanType.Free,
+        read: PlanType.Free,
+        update: PlanType.Free,
+        delete: PlanType.Free,
+    }),
+    TenantColumn("projectId"),
+    CrudApiEndpoint(new Route("/security-event-connection")),
+    Entity({
+        name: "SecurityEventConnection",
+    }),
+    TableMetadata({
+        tableName: "SecurityEventConnection",
+        singularName: "Security Event Connection",
+        pluralName: "Security Event Connections",
+        icon: IconProp.ShieldCheck,
+        tableDescription: "Managed connections to SIEM, EDR, cloud security and identity products. Records are polled on an interval and ingested as security events.",
+    }),
+    TableAccessControl({
+        create: adminPermissions,
+        read: readPermissions,
+        delete: adminPermissions,
+        update: adminPermissions,
+    })
+], SecurityEventConnection);
+export default SecurityEventConnection;
+//# sourceMappingURL=SecurityEventConnection.js.map

package/build/dist/Models/DatabaseModels/SecurityEventConnection.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"SecurityEventConnection.js","sourceRoot":"","sources":["../../../../Models/DatabaseModels/SecurityEventConnection.ts"],"names":[],"mappings":";;;;;;;;;AAAA,OAAO,OAAO,MAAM,WAAW,CAAC;AAChC,OAAO,IAAI,MAAM,QAAQ,CAAC;AAC1B,OAAO,SAAS,MAAM,uCAAuC,CAAC;AAC9D,OAAO,KAAK,MAAM,uBAAuB,CAAC;AAC1C,OAAO,mBAAmB,MAAM,wDAAwD,CAAC;AACzF,OAAO,kBAAkB,MAAM,uDAAuD,CAAC;AACvF,OAAO,yBAAyB,MAAM,8DAA8D,CAAC;AACrG,OAAO,YAAY,MAAM,mCAAmC,CAAC;AAC7D,OAAO,UAAU,MAAM,iCAAiC,CAAC;AACzD,OAAO,eAAe,MAAM,sCAAsC,CAAC;AACnE,OAAO,mBAAmB,MAAM,0CAA0C,CAAC;AAC3E,OAAO,WAAW,MAAM,kCAAkC,CAAC;AAC3D,OAAO,eAAe,MAAM,sCAAsC,CAAC;AACnE,OAAO,aAAa,MAAM,oCAAoC,CAAC;AAC/D,OAAO,YAAY,MAAM,mCAAmC,CAAC;AAC7D,OAAO,QAAQ,MAAM,2BAA2B,CAAC;AACjD,OAAO,QAAQ,MAAM,sBAAsB,CAAC;AAC5C,OAAO,UAAU,MAAM,wBAAwB,CAAC;AAEhD,OAAO,EAAE,QAAQ,EAAE,MAAM,sCAAsC,CAAC;AAChE,OAAO,8BAA8B,MAAM,qEAAqE,CAAC;AACjH,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAEvE;;;;;GAKG;AACH,MAAM,gBAAgB,GAAsB;IAC1C,UAAU,CAAC,YAAY;IACvB,UAAU,CAAC,YAAY;IACvB,UAAU,CAAC,aAAa;CACzB,CAAC;AAEF,MAAM,eAAe,GAAsB;IACzC,UAAU,CAAC,YAAY;IACvB,UAAU,CAAC,YAAY;IACvB,UAAU,CAAC,aAAa;IACxB,UAAU,CAAC,cAAc;IACzB,UAAU,CAAC,cAAc;CAC1B,CAAC;AAEF;;;;;;;;GAQG;AA2BY,IAAM,uBAAuB,GAA7B,MAAM,uBAAwB,SAAQ,SAAS;IAA/C;;QAyBN,YAAO,GAAa,SAAS,CAAC;QAoB9B,cAAS,GAAc,SAAS,CAAC;QAmBjC,SAAI,GAAY,SAAS,CAAC;QAkB1B,gBAAW,GAAY,SAAS,CAAC;QAqBjC,aAAQ,GAAoC,SAAS,CAAC;QAkBtD,WAAM,GAAgB,SAAS,CAAC;QAmBhC,YAAO,GAAY,SAAS,CAAC;QAqB7B,cAAS,GAAa,SAAS,CAAC;QAoBhC,0BAAqB,GAAY,SAAS,CAAC;QAiB3C,iBAAY,GAAa,SAAS,CAAC;QAYnC,yBAAoB,GAAU,SAAS,CAAC;QAYxC,wBAAmB,GAAU,SAAS,CAAC;QAWvC,mBAAc,GAAgB,SAAS,CAAC;QAmBxC,iBAAY,GAAU,SAAS,CAAC;QAoBhC,WAAM,GAAY,SAAS,CAAC;QAmB5B,cAAS,GAAY,SAAS,CAAC;QA0B/B,kBAAa,GAAU,SAAS,CAAC;QAiBjC,oBAAe,GAAc,SAAS,CAAC;QA0BvC,kBAAa,GAAU,SAAS,CAAC;QAiBjC,oBAAe,GAAc,SAAS,CAAC;IAChD,CAAC;CAAA,CAAA;AAjWQ;IAxBN,mBAAmB,CAAC;QACnB,MAAM,EAAE,gBAAgB;QACxB,IAAI,EAAE,eAAe;QACrB,MAAM,EAAE,EAAE;KACX,CAAC;IACD,WAAW,CAAC;QACX,uBAAuB,EAAE,WAAW;QACpC,IAAI,EAAE,eAAe,CAAC,MAAM;QAC5B,SAAS,EAAE,OAAO;QAClB,KAAK,EAAE,SAAS;QAChB,WAAW,EAAE,qDAAqD;KACnE,CAAC;IACD,SAAS,CACR,GAAG,EAAE;QACH,OAAO,OAAO,CAAC;IACjB,CAAC,EACD;QACE,KAAK,EAAE,KAAK;QACZ,QAAQ,EAAE,IAAI;QACd,QAAQ,EAAE,SAAS;QACnB,iBAAiB,EAAE,SAAS;KAC7B,CACF;IACA,UAAU,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;8BACjB,OAAO;wDAAa;AAoB9B;IAlBN,mBAAmB,CAAC;QACnB,MAAM,EAAE,gBAAgB;QACxB,IAAI,EAAE,eAAe;QACrB,MAAM,EAAE,EAAE;KACX,CAAC;IACD,KAAK,EAAE;IACP,WAAW,CAAC;QACX,IAAI,EAAE,eAAe,CAAC,QAAQ;QAC9B,QAAQ,EAAE,IAAI;QACd,sBAAsB,EAAE,IAAI;QAC5B,KAAK,EAAE,YAAY;QACnB,WAAW,EAAE,+CAA+C;KAC7D,CAAC;IACD,MAAM,CAAC;QACN,IAAI,EAAE,UAAU,CAAC,QAAQ;QACzB,QAAQ,EAAE,KAAK;QACf,WAAW,EAAE,QAAQ,CAAC,sBAAsB,EAAE;KAC/C,CAAC;8BACiB,QAAQ;0DAAa;AAmBjC;IAjBN,mBAAmB,CAAC;QACnB,MAAM,EAAE,gBAAgB;QACxB,IAAI,EAAE,eAAe;QACrB,MAAM,EAAE,gBAAgB;KACzB,CAAC;IACD,WAAW,CAAC;QACX,QAAQ,EAAE,IAAI;QACd,IAAI,EAAE,eAAe,CAAC,IAAI;QAC1B,sBAAsB,EAAE,IAAI;QAC5B,KAAK,EAAE,MAAM;QACb,WAAW,EAAE,oCAAoC;KAClD,CAAC;IACD,MAAM,CAAC;QACN,QAAQ,EAAE,KAAK;QACf,IAAI,EAAE,UAAU,CAAC,IAAI;QACrB,MAAM,EAAE,YAAY,CAAC,IAAI;KAC1B,CAAC;;qDAC+B;AAkB1B;IAhBN,mBAAmB,CAAC;QACnB,MAAM,EAAE,gBAAgB;QACxB,IAAI,EAAE,eAAe;QACrB,MAAM,EAAE,gBAAgB;KACzB,CAAC;IACD,WAAW,CAAC;QACX,QAAQ,EAAE,KAAK;QACf,IAAI,EAAE,eAAe,CAAC,QAAQ;QAC9B,KAAK,EAAE,aAAa;QACpB,WAAW,EAAE,uCAAuC;KACrD,CAAC;IACD,MAAM,CAAC;QACN,QAAQ,EAAE,IAAI;QACd,IAAI,EAAE,UAAU,CAAC,QAAQ;QACzB,MAAM,EAAE,YAAY,CAAC,QAAQ;KAC9B,CAAC;;4DACsC;AAqBjC;IAnBN,mBAAmB,CAAC;QACnB,MAAM,EAAE,gBAAgB;QACxB,IAAI,EAAE,eAAe;QACrB,MAAM,EAAE,EAAE;KACX,CAAC;IACD,KAAK,EAAE;IACP,WAAW,CAAC;QACX,QAAQ,EAAE,IAAI;QACd,IAAI,EAAE,eAAe,CAAC,SAAS;QAC/B,sBAAsB,EAAE,IAAI;QAC5B,KAAK,EAAE,UAAU;QACjB,WAAW,EACT,sHAAsH;KACzH,CAAC;IACD,MAAM,CAAC;QACN,QAAQ,EAAE,KAAK;QACf,IAAI,EAAE,UAAU,CAAC,SAAS;QAC1B,MAAM,EAAE,YAAY,CAAC,SAAS;KAC/B,CAAC;;yDAC2D;AAkBtD;IAhBN,mBAAmB,CAAC;QACnB,MAAM,EAAE,gBAAgB;QACxB,IAAI,EAAE,eAAe;QACrB,MAAM,EAAE,gBAAgB;KACzB,CAAC;IACD,WAAW,CAAC;QACX,QAAQ,EAAE,KAAK;QACf,IAAI,EAAE,eAAe,CAAC,IAAI;QAC1B,KAAK,EAAE,eAAe;QACtB,WAAW,EACT,iIAAiI;KACpI,CAAC;IACD,MAAM,CAAC;QACN,IAAI,EAAE,UAAU,CAAC,IAAI;QACrB,QAAQ,EAAE,IAAI;KACf,CAAC;;uDACqC;AAmBhC;IAjBN,mBAAmB,CAAC;QACnB,MAAM,EAAE,gBAAgB;QACxB,IAAI,EAAE,EAAE;QACR,MAAM,EAAE,gBAAgB;KACzB,CAAC;IACD,WAAW,CAAC;QACX,QAAQ,EAAE,IAAI;QACd,IAAI,EAAE,eAAe,CAAC,YAAY;QAClC,SAAS,EAAE,IAAI;QACf,KAAK,EAAE,aAAa;QACpB,WAAW,EACT,4IAA4I;KAC/I,CAAC;IACD,MAAM,CAAC;QACN,QAAQ,EAAE,KAAK;QACf,IAAI,EAAE,UAAU,CAAC,YAAY;KAC9B,CAAC;;wDACkC;AAqB7B;IAnBN,mBAAmB,CAAC;QACnB,MAAM,EAAE,gBAAgB;QACxB,IAAI,EAAE,eAAe;QACrB,MAAM,EAAE,gBAAgB;KACzB,CAAC;IACD,KAAK,EAAE;IACP,WAAW,CAAC;QACX,QAAQ,EAAE,IAAI;QACd,IAAI,EAAE,eAAe,CAAC,OAAO;QAC7B,sBAAsB,EAAE,IAAI;QAC5B,KAAK,EAAE,SAAS;QAChB,WAAW,EAAE,oDAAoD;QACjE,YAAY,EAAE,IAAI;KACnB,CAAC;IACD,MAAM,CAAC;QACN,QAAQ,EAAE,KAAK;QACf,IAAI,EAAE,UAAU,CAAC,OAAO;QACxB,OAAO,EAAE,IAAI;KACd,CAAC;;0DACqC;AAoBhC;IAlBN,mBAAmB,CAAC;QACnB,MAAM,EAAE,gBAAgB;QACxB,IAAI,EAAE,eAAe;QACrB,MAAM,EAAE,gBAAgB;KACzB,CAAC;IACD,WAAW,CAAC;QACX,KAAK,EAAE,yBAAyB;QAChC,QAAQ,EAAE,IAAI;QACd,IAAI,EAAE,eAAe,CAAC,MAAM;QAC5B,sBAAsB,EAAE,IAAI;QAC5B,WAAW,EAAE,+CAA+C;QAC5D,YAAY,EAAE,CAAC;KAChB,CAAC;IACD,MAAM,CAAC;QACN,IAAI,EAAE,UAAU,CAAC,MAAM;QACvB,QAAQ,EAAE,KAAK;QACf,OAAO,EAAE,CAAC;KACX,CAAC;;sEACgD;AAiB3C;IAfN,mBAAmB,CAAC;QACnB,MAAM,EAAE,gBAAgB;QACxB,IAAI,EAAE,eAAe;QACrB,MAAM,EAAE,gBAAgB;KACzB,CAAC;IACD,WAAW,CAAC;QACX,IAAI,EAAE,eAAe,CAAC,OAAO;QAC7B,QAAQ,EAAE,IAAI;QACd,KAAK,EAAE,uBAAuB;QAC9B,WAAW,EACT,mGAAmG;QACrG,YAAY,EAAE,IAAI;QAClB,sBAAsB,EAAE,IAAI;KAC7B,CAAC;IACD,MAAM,CAAC,EAAE,IAAI,EAAE,UAAU,CAAC,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;;6DAC3B;AAYnC;IAVN,mBAAmB,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;IACtE,WAAW,CAAC;QACX,IAAI,EAAE,eAAe,CAAC,IAAI;QAC1B,QAAQ,EAAE,KAAK;QACf,KAAK,EAAE,sBAAsB;QAC7B,WAAW,EACT,6EAA6E;QAC/E,sBAAsB,EAAE,IAAI;KAC7B,CAAC;IACD,MAAM,CAAC,EAAE,IAAI,EAAE,UAAU,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;8BACpB,IAAI;qEAAa;AAYxC;IAVN,mBAAmB,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;IACtE,WAAW,CAAC;QACX,IAAI,EAAE,eAAe,CAAC,IAAI;QAC1B,QAAQ,EAAE,KAAK;QACf,KAAK,EAAE,qBAAqB;QAC5B,WAAW,EACT,mEAAmE;QACrE,sBAAsB,EAAE,IAAI;KAC7B,CAAC;IACD,MAAM,CAAC,EAAE,IAAI,EAAE,UAAU,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;8BACrB,IAAI;oEAAa;AAWvC;IATN,mBAAmB,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;IACtE,WAAW,CAAC;QACX,IAAI,EAAE,eAAe,CAAC,IAAI;QAC1B,QAAQ,EAAE,KAAK;QACf,KAAK,EAAE,kBAAkB;QACzB,WAAW,EACT,yEAAyE;KAC5E,CAAC;IACD,MAAM,CAAC,EAAE,IAAI,EAAE,UAAU,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;+DACH;AAmBxC;IAjBN,mBAAmB,CAAC;QACnB,MAAM,EAAE,EAAE;QACV,IAAI,EAAE,eAAe;QACrB,MAAM,EAAE,EAAE;KACX,CAAC;IACD,WAAW,CAAC;QACX,KAAK,EAAE,gBAAgB;QACvB,QAAQ,EAAE,KAAK;QACf,IAAI,EAAE,eAAe,CAAC,IAAI;QAC1B,sBAAsB,EAAE,IAAI;QAC5B,WAAW,EACT,oEAAoE;KACvE,CAAC;IACD,MAAM,CAAC;QACN,IAAI,EAAE,UAAU,CAAC,IAAI;QACrB,QAAQ,EAAE,IAAI;KACf,CAAC;8BACoB,IAAI;6DAAa;AAoBhC;IAlBN,mBAAmB,CAAC;QACnB,MAAM,EAAE,EAAE;QACV,IAAI,EAAE,eAAe;QACrB,MAAM,EAAE,EAAE;KACX,CAAC;IACD,WAAW,CAAC;QACX,KAAK,EAAE,QAAQ;QACf,QAAQ,EAAE,KAAK;QACf,IAAI,EAAE,eAAe,CAAC,QAAQ;QAC9B,sBAAsB,EAAE,IAAI;QAC5B,WAAW,EACT,+FAA+F;KAClG,CAAC;IACD,MAAM,CAAC;QACN,IAAI,EAAE,UAAU,CAAC,QAAQ;QACzB,QAAQ,EAAE,IAAI;QACd,MAAM,EAAE,YAAY,CAAC,QAAQ;KAC9B,CAAC;;uDACiC;AAmB5B;IAjBN,mBAAmB,CAAC;QACnB,MAAM,EAAE,EAAE;QACV,IAAI,EAAE,eAAe;QACrB,MAAM,EAAE,EAAE;KACX,CAAC;IACD,WAAW,CAAC;QACX,KAAK,EAAE,YAAY;QACnB,QAAQ,EAAE,KAAK;QACf,IAAI,EAAE,eAAe,CAAC,YAAY;QAClC,sBAAsB,EAAE,IAAI;QAC5B,WAAW,EACT,oGAAoG;KACvG,CAAC;IACD,MAAM,CAAC;QACN,IAAI,EAAE,UAAU,CAAC,YAAY;QAC7B,QAAQ,EAAE,IAAI;KACf,CAAC;;0DACoC;AA0B/B;IAxBN,mBAAmB,CAAC;QACnB,MAAM,EAAE,EAAE;QACV,IAAI,EAAE,eAAe;QACrB,MAAM,EAAE,EAAE;KACX,CAAC;IACD,WAAW,CAAC;QACX,uBAAuB,EAAE,iBAAiB;QAC1C,IAAI,EAAE,eAAe,CAAC,MAAM;QAC5B,SAAS,EAAE,IAAI;QACf,KAAK,EAAE,iBAAiB;QACxB,WAAW,EAAE,mDAAmD;KACjE,CAAC;IACD,SAAS,CACR,GAAG,EAAE;QACH,OAAO,IAAI,CAAC;IACd,CAAC,EACD;QACE,KAAK,EAAE,KAAK;QACZ,QAAQ,EAAE,IAAI;QACd,QAAQ,EAAE,UAAU;QACpB,iBAAiB,EAAE,SAAS;KAC7B,CACF;IACA,UAAU,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,CAAC;8BACjB,IAAI;8DAAa;AAiBjC;IAfN,mBAAmB,CAAC;QACnB,MAAM,EAAE,EAAE;QACV,IAAI,EAAE,eAAe;QACrB,MAAM,EAAE,EAAE;KACX,CAAC;IACD,WAAW,CAAC;QACX,IAAI,EAAE,eAAe,CAAC,QAAQ;QAC9B,KAAK,EAAE,oBAAoB;QAC3B,WAAW,EAAE,6CAA6C;KAC3D,CAAC;IACD,MAAM,CAAC;QACN,IAAI,EAAE,UAAU,CAAC,QAAQ;QACzB,QAAQ,EAAE,IAAI;QACd,WAAW,EAAE,QAAQ,CAAC,sBAAsB,EAAE;KAC/C,CAAC;8BACuB,QAAQ;gEAAa;AA0BvC;IAxBN,mBAAmB,CAAC;QACnB,MAAM,EAAE,EAAE;QACV,IAAI,EAAE,eAAe;QACrB,MAAM,EAAE,EAAE;KACX,CAAC;IACD,WAAW,CAAC;QACX,uBAAuB,EAAE,iBAAiB;QAC1C,IAAI,EAAE,eAAe,CAAC,MAAM;QAC5B,SAAS,EAAE,IAAI;QACf,KAAK,EAAE,iBAAiB;QACxB,WAAW,EAAE,mDAAmD;KACjE,CAAC;IACD,SAAS,CACR,GAAG,EAAE;QACH,OAAO,IAAI,CAAC;IACd,CAAC,EACD;QACE,KAAK,EAAE,KAAK;QACZ,QAAQ,EAAE,IAAI;QACd,QAAQ,EAAE,UAAU;QACpB,iBAAiB,EAAE,SAAS;KAC7B,CACF;IACA,UAAU,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,CAAC;8BACjB,IAAI;8DAAa;AAiBjC;IAfN,mBAAmB,CAAC;QACnB,MAAM,EAAE,EAAE;QACV,IAAI,EAAE,eAAe;QACrB,MAAM,EAAE,EAAE;KACX,CAAC;IACD,WAAW,CAAC;QACX,IAAI,EAAE,eAAe,CAAC,QAAQ;QAC9B,KAAK,EAAE,oBAAoB;QAC3B,WAAW,EAAE,6CAA6C;KAC3D,CAAC;IACD,MAAM,CAAC;QACN,IAAI,EAAE,UAAU,CAAC,QAAQ;QACzB,QAAQ,EAAE,IAAI;QACd,WAAW,EAAE,QAAQ,CAAC,sBAAsB,EAAE;KAC/C,CAAC;8BACuB,QAAQ;gEAAa;AAzX3B,uBAAuB;IA1B3C,mBAAmB,EAAE;IACrB,yBAAyB,CAAC;QACzB,MAAM,EAAE,QAAQ,CAAC,IAAI;QACrB,IAAI,EAAE,QAAQ,CAAC,IAAI;QACnB,MAAM,EAAE,QAAQ,CAAC,IAAI;QACrB,MAAM,EAAE,QAAQ,CAAC,IAAI;KACtB,CAAC;IACD,YAAY,CAAC,WAAW,CAAC;IACzB,eAAe,CAAC,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;IACxD,MAAM,CAAC;QACN,IAAI,EAAE,yBAAyB;KAChC,CAAC;IACD,aAAa,CAAC;QACb,SAAS,EAAE,yBAAyB;QACpC,YAAY,EAAE,2BAA2B;QACzC,UAAU,EAAE,4BAA4B;QACxC,IAAI,EAAE,QAAQ,CAAC,WAAW;QAC1B,gBAAgB,EACd,4IAA4I;KAC/I,CAAC;IACD,kBAAkB,CAAC;QAClB,MAAM,EAAE,gBAAgB;QACxB,IAAI,EAAE,eAAe;QACrB,MAAM,EAAE,gBAAgB;QACxB,MAAM,EAAE,gBAAgB;KACzB,CAAC;GACmB,uBAAuB,CA0X3C;eA1XoB,uBAAuB"}