@rad-security/mcp-server 0.0.2

package/dist/index.js

@@ -0,0 +1,480 @@
+#!/usr/bin/env node
+import { Server } from "@modelcontextprotocol/sdk/server/index.js";
+import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
+import cors from 'cors';
+import { SSEServerTransport } from "@modelcontextprotocol/sdk/server/sse.js";
+import { zodToJsonSchema } from 'zod-to-json-schema';
+import { z } from "zod";
+import { CallToolRequestSchema, ListToolsRequestSchema, } from "@modelcontextprotocol/sdk/types.js";
+import express from "express";
+import { RadSecurityClient } from "./client.js";
+import * as containers from "./operations/containers.js";
+import * as audit from "./operations/audit.js";
+import * as cloudInventory from "./operations/cloud-inventory.js";
+import * as clusters from "./operations/clusters.js";
+import * as identities from "./operations/identities.js";
+import * as images from "./operations/images.js";
+import * as kubeobject from "./operations/kubeobject.js";
+import * as misconfigs from "./operations/misconfigs.js";
+import * as runtime from "./operations/runtime.js";
+import * as runtimeNetwork from "./operations/runtime_network.js";
+import * as threats from "./operations/threats.js";
+import * as findings from "./operations/findings.js";
+import { VERSION } from "./version.js";
+async function newServer() {
+    // Initialize authentication
+    const client = RadSecurityClient.fromEnv();
+    // Initialize MCP server
+    const server = new Server({
+        name: "RAD Security MCP Server",
+        version: VERSION,
+    }, {
+        capabilities: {
+            prompts: {},
+            resources: {},
+            tools: {},
+            logging: {},
+        },
+    });
+    server.setRequestHandler(ListToolsRequestSchema, async () => {
+        return {
+            tools: [
+                // Container tools
+                {
+                    name: "list_containers",
+                    description: "List containers secured by RAD Security with optional filtering by image name, image digest, namespace, cluster_id, or free text search",
+                    inputSchema: zodToJsonSchema(containers.ListContainersSchema),
+                },
+                {
+                    name: "get_container_details",
+                    description: "Get detailed information about a container secured by RAD Security",
+                    inputSchema: zodToJsonSchema(containers.GetContainerDetailsSchema),
+                },
+                // Cluster tools
+                {
+                    name: "list_clusters",
+                    description: "List Kubernetes clusters managed by RAD Security",
+                    inputSchema: zodToJsonSchema(clusters.ListClustersSchema),
+                },
+                {
+                    name: "get_cluster_details",
+                    description: "Get detailed information about a specific Kubernetes cluster managed by RAD Security",
+                    inputSchema: zodToJsonSchema(clusters.GetClusterDetailsSchema),
+                },
+                // Identity tools
+                {
+                    name: "list_identities",
+                    description: "Get list of identities for a specific Kubernetes cluster",
+                    inputSchema: zodToJsonSchema(identities.ListIdentitiesSchema),
+                },
+                {
+                    name: "get_identity_details",
+                    description: "Get detailed information about a specific identity in a Kubernetes cluster",
+                    inputSchema: zodToJsonSchema(identities.GetIdentityDetailsSchema),
+                },
+                // Audit tools
+                {
+                    name: "who_shelled_into_pod",
+                    description: "Get users who shelled into a pod with the given name and namespace around the given time",
+                    inputSchema: zodToJsonSchema(audit.WhoShelledIntoPodSchema),
+                },
+                // Cloud Inventory tools
+                {
+                    name: "list_cloud_resources",
+                    description: "List cloud resources for a specific provider with optional filtering",
+                    inputSchema: zodToJsonSchema(cloudInventory.ListCloudResourcesSchema),
+                },
+                {
+                    name: "get_cloud_resource_details",
+                    description: "Get detailed information about a specific cloud resource",
+                    inputSchema: zodToJsonSchema(cloudInventory.GetCloudResourceDetailsSchema),
+                },
+                {
+                    name: "get_cloud_resource_facets",
+                    description: "Get available facets for filtering cloud resources from a provider",
+                    inputSchema: zodToJsonSchema(cloudInventory.GetCloudResourceFacetsSchema),
+                },
+                {
+                    name: "get_cloud_resource_facet_values",
+                    description: "Get values for a specific facet from a cloud provider",
+                    inputSchema: zodToJsonSchema(cloudInventory.GetCloudResourceFacetValuesSchema),
+                },
+                // Image tools
+                {
+                    name: "list_images",
+                    description: "List container images with optional filtering by page, page size, sort, and search query",
+                    inputSchema: zodToJsonSchema(images.ListImagesSchema),
+                },
+                {
+                    name: "list_image_vulnerabilities",
+                    description: "List vulnerabilities in a container image with optional filtering by severity",
+                    inputSchema: zodToJsonSchema(images.ListImageVulnerabilitiesSchema),
+                },
+                {
+                    name: "get_top_vulnerable_images",
+                    description: "Get the most vulnerable images from your account",
+                    inputSchema: zodToJsonSchema(z.object({})),
+                },
+                {
+                    name: "get_image_sbom",
+                    description: "Get the SBOM of a container image",
+                    inputSchema: zodToJsonSchema(images.GetImageSBOMSchema),
+                },
+                // Kubernetes Object tools
+                {
+                    name: "get_kubernetes_resource_details",
+                    description: "Get the latest manifest of a Kubernetes resource",
+                    inputSchema: zodToJsonSchema(kubeobject.GetKubernetesResourceDetailsSchema),
+                },
+                {
+                    name: "list_kubernetes_resources",
+                    description: "List Kubernetes resources with optional filtering by namespace, resource types, and cluster",
+                    inputSchema: zodToJsonSchema(kubeobject.ListKubernetesResourcesSchema),
+                },
+                // Manifest Misconfigurations tools
+                {
+                    name: "list_kubernetes_resource_misconfigurations",
+                    description: "Get manifest misconfigurations for a Kubernetes resource",
+                    inputSchema: zodToJsonSchema(misconfigs.ListKubernetesResourceMisconfigurationsSchema),
+                },
+                {
+                    name: "get_kubernetes_resource_misconfiguration_details",
+                    description: "Get detailed information about a specific Kubernetes resource misconfiguration",
+                    inputSchema: zodToJsonSchema(misconfigs.GetKubernetesResourceMisconfigurationDetailsSchema),
+                },
+                // Runtime tools
+                {
+                    name: "get_containers_process_trees",
+                    description: "Get process trees for multiple containers",
+                    inputSchema: zodToJsonSchema(runtime.GetContainersProcessTreesSchema),
+                },
+                {
+                    name: "get_containers_baselines",
+                    description: "Get runtime baselines for multiple containers",
+                    inputSchema: zodToJsonSchema(runtime.GetContainersBaselinesSchema),
+                },
+                {
+                    name: "get_container_llm_analysis",
+                    description: "Get LLM analysis of a container's process tree",
+                    inputSchema: zodToJsonSchema(runtime.GetContainerLLMAnalysisSchema),
+                },
+                // Runtime Network tools
+                {
+                    name: "list_http_requests",
+                    description: "List HTTP requests insights with optional filtering by method, path, source and destination workloads, and PII detection",
+                    inputSchema: zodToJsonSchema(runtimeNetwork.listHttpRequestsSchema),
+                },
+                {
+                    name: "list_network_connections",
+                    description: "List network connections with optional filtering",
+                    inputSchema: zodToJsonSchema(runtimeNetwork.listNetworkConnectionsSchema),
+                },
+                {
+                    name: "list_network_connection_sources",
+                    description: "List network connection sources with optional filtering by source and destination workloads",
+                    inputSchema: zodToJsonSchema(runtimeNetwork.listNetworkConnectionSourcesSchema),
+                },
+                // Threat Vectors tools
+                {
+                    name: "list_threat_vectors",
+                    description: "List threat vectors",
+                    inputSchema: zodToJsonSchema(threats.listThreatVectorsSchema),
+                },
+                // Findings tools
+                {
+                    name: "list_security_findings",
+                    description: "List security findings with optional filtering by types, severities, sources, and status",
+                    inputSchema: zodToJsonSchema(findings.listFindingsSchema),
+                },
+                {
+                    name: "update_security_finding_status",
+                    description: "Update the status of a security finding",
+                    inputSchema: zodToJsonSchema(findings.updateFindingStatusSchema),
+                },
+            ],
+        };
+    });
+    server.setRequestHandler(CallToolRequestSchema, async (request) => {
+        try {
+            if (!request.params.arguments) {
+                throw new Error("Arguments are required");
+            }
+            const toolName = request.params.name;
+            switch (toolName) {
+                // Container tools
+                case "list_containers": {
+                    const args = containers.ListContainersSchema.parse(request.params.arguments);
+                    const response = await containers.listContainers(client, args.offset, args.limit, args.filters, args.q);
+                    return {
+                        content: [{ type: "text", text: JSON.stringify(response, null, 2) }],
+                    };
+                }
+                case "get_container_details": {
+                    const args = containers.GetContainerDetailsSchema.parse(request.params.arguments);
+                    const response = await containers.getContainerDetails(client, args.container_id);
+                    return {
+                        content: [{ type: "text", text: JSON.stringify(response, null, 2) }],
+                    };
+                }
+                // Cluster tools
+                case "list_clusters": {
+                    const args = clusters.ListClustersSchema.parse(request.params.arguments);
+                    const response = await clusters.listClusters(client, args.page_size, args.page);
+                    return {
+                        content: [{ type: "text", text: JSON.stringify(response, null, 2) }],
+                    };
+                }
+                case "get_cluster_details": {
+                    const args = clusters.GetClusterDetailsSchema.parse(request.params.arguments);
+                    const response = await clusters.getClusterDetails(client, args.cluster_id);
+                    return {
+                        content: [{ type: "text", text: JSON.stringify(response, null, 2) }],
+                    };
+                }
+                // Identity tools
+                case "list_identities": {
+                    const args = identities.ListIdentitiesSchema.parse(request.params.arguments);
+                    const response = await identities.listIdentities(client, args.identity_types, args.cluster_ids, args.page, args.page_size, args.q);
+                    return {
+                        content: [{ type: "text", text: JSON.stringify(response, null, 2) }],
+                    };
+                }
+                case "get_identity_details": {
+                    const args = identities.GetIdentityDetailsSchema.parse(request.params.arguments);
+                    const response = await identities.getIdentityDetails(client, args.identity_id);
+                    return {
+                        content: [{ type: "text", text: JSON.stringify(response, null, 2) }],
+                    };
+                }
+                // Audit tools
+                case "who_shelled_into_pod": {
+                    const args = audit.WhoShelledIntoPodSchema.parse(request.params.arguments);
+                    const response = await audit.whoShelledIntoPod(client, args.name, args.namespace, args.cluster_id, args.from_time, args.to_time, args.limit, args.page);
+                    return {
+                        content: [{ type: "text", text: JSON.stringify(response, null, 2) }],
+                    };
+                }
+                // Cloud Inventory tools
+                case "list_cloud_resources": {
+                    const args = cloudInventory.ListCloudResourcesSchema.parse(request.params.arguments);
+                    const response = await cloudInventory.listCloudResources(client, args.provider, args.filters, args.offset, args.limit, args.q);
+                    return {
+                        content: [{ type: "text", text: JSON.stringify(response, null, 2) }],
+                    };
+                }
+                case "get_cloud_resource_details": {
+                    const args = cloudInventory.GetCloudResourceDetailsSchema.parse(request.params.arguments);
+                    const response = await cloudInventory.getCloudResourceDetails(client, args.provider, args.resource_type, args.resource_id);
+                    return {
+                        content: [{ type: "text", text: JSON.stringify(response, null, 2) }],
+                    };
+                }
+                case "get_cloud_resource_facets": {
+                    const args = cloudInventory.GetCloudResourceFacetsSchema.parse(request.params.arguments);
+                    const response = await cloudInventory.getCloudResourceFacets(client, args.provider);
+                    return {
+                        content: [{ type: "text", text: JSON.stringify(response, null, 2) }],
+                    };
+                }
+                case "get_cloud_resource_facet_values": {
+                    const args = cloudInventory.GetCloudResourceFacetValuesSchema.parse(request.params.arguments);
+                    const response = await cloudInventory.getCloudResourceFacetValues(client, args.provider, args.facet_id);
+                    return {
+                        content: [{ type: "text", text: JSON.stringify(response, null, 2) }],
+                    };
+                }
+                // Image tools
+                case "list_images": {
+                    const args = images.ListImagesSchema.parse(request.params.arguments);
+                    const response = await images.listImages(client, args.page, args.page_size, args.sort, args.search);
+                    return {
+                        content: [{ type: "text", text: JSON.stringify(response, null, 2) }],
+                    };
+                }
+                case "list_image_vulnerabilities": {
+                    const args = images.ListImageVulnerabilitiesSchema.parse(request.params.arguments);
+                    const response = await images.listImageVulnerabilities(client, args.digest, args.severities, args.page, args.page_size);
+                    return {
+                        content: [{ type: "text", text: JSON.stringify(response, null, 2) }],
+                    };
+                }
+                case "get_top_vulnerable_images": {
+                    const response = await images.getTopVulnerableImages(client);
+                    return {
+                        content: [{ type: "text", text: JSON.stringify(response, null, 2) }],
+                    };
+                }
+                case "get_image_sbom": {
+                    const args = images.GetImageSBOMSchema.parse(request.params.arguments);
+                    const response = await images.getImageSBOM(client, args.digest);
+                    return {
+                        content: [{ type: "text", text: JSON.stringify(response, null, 2) }],
+                    };
+                }
+                // Kubernetes Objects tools
+                case "get_kubernetes_resource_details": {
+                    const args = kubeobject.GetKubernetesResourceDetailsSchema.parse(request.params.arguments);
+                    const response = await kubeobject.getKubernetesResourceDetails(client, args.cluster_id, args.resource_uid);
+                    return {
+                        content: [{ type: "text", text: JSON.stringify(response, null, 2) }],
+                    };
+                }
+                case "list_kubernetes_resources": {
+                    const args = kubeobject.ListKubernetesResourcesSchema.parse(request.params.arguments);
+                    const response = await kubeobject.listKubernetesResources(client, args.kinds, args.namespace, args.cluster_id, args.page, args.page_size);
+                    return {
+                        content: [{ type: "text", text: JSON.stringify(response, null, 2) }],
+                    };
+                }
+                // Kubernetes Resource Misconfigurations tools
+                case "list_kubernetes_resource_misconfigurations": {
+                    const args = misconfigs.ListKubernetesResourceMisconfigurationsSchema.parse(request.params.arguments);
+                    const response = await misconfigs.listKubernetesResourceMisconfigurations(client, args.resource_uid);
+                    return {
+                        content: [{ type: "text", text: JSON.stringify(response, null, 2) }],
+                    };
+                }
+                case "get_kubernetes_resource_misconfiguration_details": {
+                    const args = misconfigs.GetKubernetesResourceMisconfigurationDetailsSchema.parse(request.params.arguments);
+                    const response = await misconfigs.getKubernetesResourceMisconfigurationDetails(client, args.cluster_id, args.misconfig_id);
+                    return {
+                        content: [{ type: "text", text: JSON.stringify(response, null, 2) }],
+                    };
+                }
+                // Runtime tools
+                case "get_containers_process_trees": {
+                    const args = runtime.GetContainersProcessTreesSchema.parse(request.params.arguments);
+                    const response = await runtime.getContainersProcessTrees(client, args.container_ids);
+                    return {
+                        content: [{ type: "text", text: JSON.stringify(response, null, 2) }],
+                    };
+                }
+                case "get_containers_baselines": {
+                    const args = runtime.GetContainersBaselinesSchema.parse(request.params.arguments);
+                    const response = await runtime.getContainersBaselines(client, args.container_ids);
+                    return {
+                        content: [{ type: "text", text: JSON.stringify(response, null, 2) }],
+                    };
+                }
+                case "get_container_llm_analysis": {
+                    const args = runtime.GetContainerLLMAnalysisSchema.parse(request.params.arguments);
+                    const response = await runtime.getContainerLLMAnalysis(client, args.container_id);
+                    return {
+                        content: [{ type: "text", text: JSON.stringify(response, null, 2) }],
+                    };
+                }
+                // Runtime Network tools
+                case "list_http_requests": {
+                    const args = runtimeNetwork.listHttpRequestsSchema.parse(request.params.arguments);
+                    const response = await runtimeNetwork.listHttpRequests(client, args);
+                    return {
+                        content: [{ type: "text", text: JSON.stringify(response, null, 2) }],
+                    };
+                }
+                case "list_network_connections": {
+                    const args = runtimeNetwork.listNetworkConnectionsSchema.parse(request.params.arguments);
+                    const response = await runtimeNetwork.listNetworkConnections(client, args);
+                    return {
+                        content: [{ type: "text", text: JSON.stringify(response, null, 2) }],
+                    };
+                }
+                case "list_network_connection_sources": {
+                    const args = runtimeNetwork.listNetworkConnectionSourcesSchema.parse(request.params.arguments);
+                    const response = await runtimeNetwork.listNetworkConnectionSources(client, args);
+                    return {
+                        content: [{ type: "text", text: JSON.stringify(response, null, 2) }],
+                    };
+                }
+                // Threat Vectors tools
+                case "list_threat_vectors": {
+                    const args = threats.listThreatVectorsSchema.parse(request.params.arguments);
+                    const response = await threats.listThreatVectors(client, args.clustersIds, args.namespaces, args.resource_uid, args.page, args.page_size);
+                    return {
+                        content: [{ type: "text", text: JSON.stringify(response, null, 2) }],
+                    };
+                }
+                // Findings tools
+                case "list_security_findings": {
+                    const args = findings.listFindingsSchema.parse(request.params.arguments);
+                    const response = await findings.listFindings(client, args.limit, args.types, args.severities, args.source_types, args.source_kinds, args.source_names, args.source_namespaces, args.status, args.from_time, args.to_time);
+                    return {
+                        content: [{ type: "text", text: JSON.stringify(response, null, 2) }],
+                    };
+                }
+                case "update_security_finding_status": {
+                    const args = findings.updateFindingStatusSchema.parse(request.params.arguments);
+                    await findings.updateFindingGroupStatus(client, args.id, args.status);
+                    return {
+                        content: [{ type: "text", text: JSON.stringify({ success: true, message: `Finding ${args.id} status updated to ${args.status}` }, null, 2) }],
+                    };
+                }
+                default:
+                    throw new Error(`Unknown tool: ${toolName}`);
+            }
+        }
+        catch (error) {
+            console.error("Error calling tool:", error);
+            return {
+                content: [
+                    {
+                        type: "text",
+                        text: JSON.stringify({
+                            error: error instanceof Error ? error.message : String(error),
+                        }),
+                    },
+                ],
+            };
+        }
+    });
+    return server;
+}
+async function main() {
+    try {
+        const transportType = process.env.TRANSPORT_TYPE || 'stdio';
+        if (!['stdio', 'sse'].includes(transportType)) {
+            throw new Error("Transport type must be either 'stdio' or 'sse'");
+        }
+        if (transportType === 'stdio') {
+            const transport = new StdioServerTransport();
+            const server = await newServer();
+            await server.connect(transport);
+            console.info("RAD Security MCP server started with stdio transport");
+        }
+        else {
+            const app = express();
+            app.use(cors({
+                origin: '*',
+                methods: ['GET', 'POST', 'OPTIONS', 'HEAD'],
+                allowedHeaders: ['Content-Type'],
+            }));
+            const server = await newServer();
+            let transport;
+            app.head("/sse", async (req, res) => {
+                res.sendStatus(200);
+            });
+            app.head("/messages", async (req, res) => {
+                res.sendStatus(200);
+            });
+            app.get("/sse", async (req, res) => {
+                transport = new SSEServerTransport("/messages", res);
+                await server.connect(transport);
+            });
+            app.post("/messages", async (req, res) => {
+                await transport.handlePostMessage(req, res);
+            });
+            const port = process.env.PORT || 3000;
+            app.listen(port, () => {
+                console.info(`Server running on http://localhost:${port}/sse`);
+            });
+        }
+    }
+    catch (error) {
+        console.error("Error starting server:", error);
+        process.exit(1);
+    }
+}
+main().catch((error) => {
+    console.error("Unhandled error:", error);
+    process.exit(1);
+});
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,MAAM,EAAE,MAAM,2CAA2C,CAAC;AACnE,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACjF,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,EAAE,kBAAkB,EAAE,MAAM,yCAAyC,CAAC;AAC7E,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAEL,qBAAqB,EACrB,sBAAsB,GACvB,MAAM,oCAAoC,CAAC;AAC5C,OAAO,OAAO,MAAM,SAAS,CAAC;AAE9B,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,KAAK,UAAU,MAAM,4BAA4B,CAAC;AACzD,OAAO,KAAK,KAAK,MAAM,uBAAuB,CAAC;AAC/C,OAAO,KAAK,cAAc,MAAM,iCAAiC,CAAC;AAClE,OAAO,KAAK,QAAQ,MAAM,0BAA0B,CAAC;AACrD,OAAO,KAAK,UAAU,MAAM,4BAA4B,CAAC;AACzD,OAAO,KAAK,MAAM,MAAM,wBAAwB,CAAC;AACjD,OAAO,KAAK,UAAU,MAAM,4BAA4B,CAAC;AACzD,OAAO,KAAK,UAAU,MAAM,4BAA4B,CAAC;AACzD,OAAO,KAAK,OAAO,MAAM,yBAAyB,CAAC;AACnD,OAAO,KAAK,cAAc,MAAM,iCAAiC,CAAC;AAClE,OAAO,KAAK,OAAO,MAAM,yBAAyB,CAAC;AACnD,OAAO,KAAK,QAAQ,MAAM,0BAA0B,CAAC;AACrD,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAEvC,KAAK,UAAU,SAAS;IACtB,4BAA4B;IAC5B,MAAM,MAAM,GAAG,iBAAiB,CAAC,OAAO,EAAE,CAAC;IAE3C,wBAAwB;IACxB,MAAM,MAAM,GAAG,IAAI,MAAM,CACvB;QACE,IAAI,EAAE,yBAAyB;QAC/B,OAAO,EAAE,OAAO;KACjB,EACD;QACE,YAAY,EAAE;YACZ,OAAO,EAAE,EAAE;YACX,SAAS,EAAE,EAAE;YACb,KAAK,EAAE,EAAE;YACT,OAAO,EAAE,EAAE;SACZ;KACF,CACF,CAAC;IAEF,MAAM,CAAC,iBAAiB,CACtB,sBAAsB,EACtB,KAAK,IAAI,EAAE;QACT,OAAO;YACL,KAAK,EAAE;gBACL,kBAAkB;gBAClB;oBACE,IAAI,EAAE,iBAAiB;oBACvB,WAAW,EAAE,yIAAyI;oBACtJ,WAAW,EAAE,eAAe,CAAC,UAAU,CAAC,oBAAoB,CAAC;iBAC9D;gBACD;oBACE,IAAI,EAAE,uBAAuB;oBAC7B,WAAW,EAAE,oEAAoE;oBACjF,WAAW,EAAE,eAAe,CAAC,UAAU,CAAC,yBAAyB,CAAC;iBACnE;gBACD,gBAAgB;gBAChB;oBACE,IAAI,EAAE,eAAe;oBACrB,WAAW,EAAE,kDAAkD;oBAC/D,WAAW,EAAE,eAAe,CAAC,QAAQ,CAAC,kBAAkB,CAAC;iBAC1D;gBACD;oBACE,IAAI,EAAE,qBAAqB;oBAC3B,WAAW,EAAE,sFAAsF;oBACnG,WAAW,EAAE,eAAe,CAAC,QAAQ,CAAC,uBAAuB,CAAC;iBAC/D;gBACD,iBAAiB;gBACjB;oBACE,IAAI,EAAE,iBAAiB;oBACvB,WAAW,EAAE,0DAA0D;oBACvE,WAAW,EAAE,eAAe,CAAC,UAAU,CAAC,oBAAoB,CAAC;iBAC9D;gBACD;oBACE,IAAI,EAAE,sBAAsB;oBAC5B,WAAW,EAAE,4EAA4E;oBACzF,WAAW,EAAE,eAAe,CAAC,UAAU,CAAC,wBAAwB,CAAC;iBAClE;gBACD,cAAc;gBACd;oBACE,IAAI,EAAE,sBAAsB;oBAC5B,WAAW,EAAE,0FAA0F;oBACvG,WAAW,EAAE,eAAe,CAAC,KAAK,CAAC,uBAAuB,CAAC;iBAC5D;gBACD,wBAAwB;gBACxB;oBACE,IAAI,EAAE,sBAAsB;oBAC5B,WAAW,EAAE,sEAAsE;oBACnF,WAAW,EAAE,eAAe,CAAC,cAAc,CAAC,wBAAwB,CAAC;iBACtE;gBACD;oBACE,IAAI,EAAE,4BAA4B;oBAClC,WAAW,EAAE,0DAA0D;oBACvE,WAAW,EAAE,eAAe,CAAC,cAAc,CAAC,6BAA6B,CAAC;iBAC3E;gBACD;oBACE,IAAI,EAAE,2BAA2B;oBACjC,WAAW,EAAE,oEAAoE;oBACjF,WAAW,EAAE,eAAe,CAAC,cAAc,CAAC,4BAA4B,CAAC;iBAC1E;gBACD;oBACE,IAAI,EAAE,iCAAiC;oBACvC,WAAW,EAAE,uDAAuD;oBACpE,WAAW,EAAE,eAAe,CAAC,cAAc,CAAC,iCAAiC,CAAC;iBAC/E;gBACD,cAAc;gBACd;oBACE,IAAI,EAAE,aAAa;oBACnB,WAAW,EAAE,0FAA0F;oBACvG,WAAW,EAAE,eAAe,CAAC,MAAM,CAAC,gBAAgB,CAAC;iBACtD;gBACD;oBACE,IAAI,EAAE,4BAA4B;oBAClC,WAAW,EAAE,+EAA+E;oBAC5F,WAAW,EAAE,eAAe,CAAC,MAAM,CAAC,8BAA8B,CAAC;iBACpE;gBACD;oBACE,IAAI,EAAE,2BAA2B;oBACjC,WAAW,EAAE,kDAAkD;oBAC/D,WAAW,EAAE,eAAe,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;iBAC3C;gBACD;oBACE,IAAI,EAAE,gBAAgB;oBACtB,WAAW,EAAE,mCAAmC;oBAChD,WAAW,EAAE,eAAe,CAAC,MAAM,CAAC,kBAAkB,CAAC;iBACxD;gBACD,0BAA0B;gBAC1B;oBACE,IAAI,EAAE,iCAAiC;oBACvC,WAAW,EAAE,kDAAkD;oBAC/D,WAAW,EAAE,eAAe,CAAC,UAAU,CAAC,kCAAkC,CAAC;iBAC5E;gBACD;oBACE,IAAI,EAAE,2BAA2B;oBACjC,WAAW,EAAE,6FAA6F;oBAC1G,WAAW,EAAE,eAAe,CAAC,UAAU,CAAC,6BAA6B,CAAC;iBACvE;gBACD,mCAAmC;gBACnC;oBACE,IAAI,EAAE,4CAA4C;oBAClD,WAAW,EAAE,0DAA0D;oBACvE,WAAW,EAAE,eAAe,CAAC,UAAU,CAAC,6CAA6C,CAAC;iBACvF;gBACD;oBACE,IAAI,EAAE,kDAAkD;oBACxD,WAAW,EAAE,gFAAgF;oBAC7F,WAAW,EAAE,eAAe,CAAC,UAAU,CAAC,kDAAkD,CAAC;iBAC5F;gBACD,gBAAgB;gBAChB;oBACE,IAAI,EAAE,8BAA8B;oBACpC,WAAW,EAAE,2CAA2C;oBACxD,WAAW,EAAE,eAAe,CAAC,OAAO,CAAC,+BAA+B,CAAC;iBACtE;gBACD;oBACE,IAAI,EAAE,0BAA0B;oBAChC,WAAW,EAAE,+CAA+C;oBAC5D,WAAW,EAAE,eAAe,CAAC,OAAO,CAAC,4BAA4B,CAAC;iBACnE;gBACD;oBACE,IAAI,EAAE,4BAA4B;oBAClC,WAAW,EAAE,gDAAgD;oBAC7D,WAAW,EAAE,eAAe,CAAC,OAAO,CAAC,6BAA6B,CAAC;iBACpE;gBACD,wBAAwB;gBACxB;oBACE,IAAI,EAAE,oBAAoB;oBAC1B,WAAW,EAAE,0HAA0H;oBACvI,WAAW,EAAE,eAAe,CAAC,cAAc,CAAC,sBAAsB,CAAC;iBACpE;gBACD;oBACE,IAAI,EAAE,0BAA0B;oBAChC,WAAW,EAAE,kDAAkD;oBAC/D,WAAW,EAAE,eAAe,CAAC,cAAc,CAAC,4BAA4B,CAAC;iBAC1E;gBACD;oBACE,IAAI,EAAE,iCAAiC;oBACvC,WAAW,EAAE,6FAA6F;oBAC1G,WAAW,EAAE,eAAe,CAAC,cAAc,CAAC,kCAAkC,CAAC;iBAChF;gBACD,uBAAuB;gBACvB;oBACE,IAAI,EAAE,qBAAqB;oBAC3B,WAAW,EAAE,qBAAqB;oBAClC,WAAW,EAAE,eAAe,CAAC,OAAO,CAAC,uBAAuB,CAAC;iBAC9D;gBACD,iBAAiB;gBACjB;oBACE,IAAI,EAAE,wBAAwB;oBAC9B,WAAW,EAAE,0FAA0F;oBACvG,WAAW,EAAE,eAAe,CAAC,QAAQ,CAAC,kBAAkB,CAAC;iBAC1D;gBACD;oBACE,IAAI,EAAE,gCAAgC;oBACtC,WAAW,EAAE,yCAAyC;oBACtD,WAAW,EAAE,eAAe,CAAC,QAAQ,CAAC,yBAAyB,CAAC;iBACjE;aACF;SACF,CAAC;IACJ,CAAC,CACF,CAAC;IAEF,MAAM,CAAC,iBAAiB,CACtB,qBAAqB,EACrB,KAAK,EAAE,OAAwB,EAAE,EAAE;QACjC,IAAI,CAAC;YACH,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;gBAC9B,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;YAC5C,CAAC;YAED,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC;YACrC,QAAQ,QAAQ,EAAE,CAAC;gBACjB,kBAAkB;gBAClB,KAAK,iBAAiB,CAAC,CAAC,CAAC;oBACvB,MAAM,IAAI,GAAG,UAAU,CAAC,oBAAoB,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;oBAC7E,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,cAAc,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;oBACxG,OAAO;wBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;qBACrE,CAAC;gBACJ,CAAC;gBACD,KAAK,uBAAuB,CAAC,CAAC,CAAC;oBAC7B,MAAM,IAAI,GAAG,UAAU,CAAC,yBAAyB,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;oBAClF,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,mBAAmB,CAAC,MAAM,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC;oBACjF,OAAO;wBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;qBACrE,CAAC;gBACJ,CAAC;gBACD,gBAAgB;gBAChB,KAAK,eAAe,CAAC,CAAC,CAAC;oBACrB,MAAM,IAAI,GAAG,QAAQ,CAAC,kBAAkB,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;oBACzE,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,YAAY,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;oBAChF,OAAO;wBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;qBACrE,CAAC;gBACJ,CAAC;gBACD,KAAK,qBAAqB,CAAC,CAAC,CAAC;oBAC3B,MAAM,IAAI,GAAG,QAAQ,CAAC,uBAAuB,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;oBAC9E,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,iBAAiB,CAAC,MAAM,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;oBAC3E,OAAO;wBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;qBACrE,CAAC;gBACJ,CAAC;gBACD,iBAAiB;gBACjB,KAAK,iBAAiB,CAAC,CAAC,CAAC;oBACvB,MAAM,IAAI,GAAG,UAAU,CAAC,oBAAoB,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;oBAC7E,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,cAAc,CAAC,MAAM,EAAE,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;oBACnI,OAAO;wBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;qBACrE,CAAC;gBACJ,CAAC;gBACD,KAAK,sBAAsB,CAAC,CAAC,CAAC;oBAC5B,MAAM,IAAI,GAAG,UAAU,CAAC,wBAAwB,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;oBACjF,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,kBAAkB,CAAC,MAAM,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;oBAC/E,OAAO;wBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;qBACrE,CAAC;gBACJ,CAAC;gBACD,cAAc;gBACd,KAAK,sBAAsB,CAAC,CAAC,CAAC;oBAC5B,MAAM,IAAI,GAAG,KAAK,CAAC,uBAAuB,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;oBAC3E,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,iBAAiB,CAC5C,MAAM,EACN,IAAI,CAAC,IAAI,EACT,IAAI,CAAC,SAAS,EACd,IAAI,CAAC,UAAU,EACf,IAAI,CAAC,SAAS,EACd,IAAI,CAAC,OAAO,EACZ,IAAI,CAAC,KAAK,EACV,IAAI,CAAC,IAAI,CACV,CAAC;oBACF,OAAO;wBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;qBACrE,CAAC;gBACJ,CAAC;gBACD,wBAAwB;gBACxB,KAAK,sBAAsB,CAAC,CAAC,CAAC;oBAC5B,MAAM,IAAI,GAAG,cAAc,CAAC,wBAAwB,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;oBACrF,MAAM,QAAQ,GAAG,MAAM,cAAc,CAAC,kBAAkB,CACtD,MAAM,EACN,IAAI,CAAC,QAAQ,EACb,IAAI,CAAC,OAAO,EACZ,IAAI,CAAC,MAAM,EACX,IAAI,CAAC,KAAK,EACV,IAAI,CAAC,CAAC,CACP,CAAC;oBACF,OAAO;wBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;qBACrE,CAAC;gBACJ,CAAC;gBACD,KAAK,4BAA4B,CAAC,CAAC,CAAC;oBAClC,MAAM,IAAI,GAAG,cAAc,CAAC,6BAA6B,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;oBAC1F,MAAM,QAAQ,GAAG,MAAM,cAAc,CAAC,uBAAuB,CAC3D,MAAM,EACN,IAAI,CAAC,QAAQ,EACb,IAAI,CAAC,aAAa,EAClB,IAAI,CAAC,WAAW,CACjB,CAAC;oBACF,OAAO;wBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;qBACrE,CAAC;gBACJ,CAAC;gBACD,KAAK,2BAA2B,CAAC,CAAC,CAAC;oBACjC,MAAM,IAAI,GAAG,cAAc,CAAC,4BAA4B,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;oBACzF,MAAM,QAAQ,GAAG,MAAM,cAAc,CAAC,sBAAsB,CAC1D,MAAM,EACN,IAAI,CAAC,QAAQ,CACd,CAAC;oBACF,OAAO;wBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;qBACrE,CAAC;gBACJ,CAAC;gBACD,KAAK,iCAAiC,CAAC,CAAC,CAAC;oBACvC,MAAM,IAAI,GAAG,cAAc,CAAC,iCAAiC,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;oBAC9F,MAAM,QAAQ,GAAG,MAAM,cAAc,CAAC,2BAA2B,CAC/D,MAAM,EACN,IAAI,CAAC,QAAQ,EACb,IAAI,CAAC,QAAQ,CACd,CAAC;oBACF,OAAO;wBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;qBACrE,CAAC;gBACJ,CAAC;gBACD,cAAc;gBACd,KAAK,aAAa,CAAC,CAAC,CAAC;oBACnB,MAAM,IAAI,GAAG,MAAM,CAAC,gBAAgB,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;oBACrE,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,UAAU,CACtC,MAAM,EACN,IAAI,CAAC,IAAI,EACT,IAAI,CAAC,SAAS,EACd,IAAI,CAAC,IAAI,EACT,IAAI,CAAC,MAAM,CACZ,CAAC;oBACF,OAAO;wBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;qBACrE,CAAC;gBACJ,CAAC;gBACD,KAAK,4BAA4B,CAAC,CAAC,CAAC;oBAClC,MAAM,IAAI,GAAG,MAAM,CAAC,8BAA8B,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;oBACnF,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,wBAAwB,CACpD,MAAM,EACN,IAAI,CAAC,MAAM,EACX,IAAI,CAAC,UAAU,EACf,IAAI,CAAC,IAAI,EACT,IAAI,CAAC,SAAS,CACf,CAAC;oBACF,OAAO;wBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;qBACrE,CAAC;gBACJ,CAAC;gBACD,KAAK,2BAA2B,CAAC,CAAC,CAAC;oBACjC,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,sBAAsB,CAAC,MAAM,CAAC,CAAC;oBAC7D,OAAO;wBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;qBACrE,CAAC;gBACJ,CAAC;gBACD,KAAK,gBAAgB,CAAC,CAAC,CAAC;oBACtB,MAAM,IAAI,GAAG,MAAM,CAAC,kBAAkB,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;oBACvE,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;oBAChE,OAAO;wBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;qBACrE,CAAC;gBACJ,CAAC;gBACD,2BAA2B;gBAC3B,KAAK,iCAAiC,CAAC,CAAC,CAAC;oBACvC,MAAM,IAAI,GAAG,UAAU,CAAC,kCAAkC,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;oBAC3F,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,4BAA4B,CAC5D,MAAM,EACN,IAAI,CAAC,UAAU,EACf,IAAI,CAAC,YAAY,CAClB,CAAC;oBACF,OAAO;wBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;qBACrE,CAAC;gBACJ,CAAC;gBACD,KAAK,2BAA2B,CAAC,CAAC,CAAC;oBACjC,MAAM,IAAI,GAAG,UAAU,CAAC,6BAA6B,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;oBACtF,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,uBAAuB,CACvD,MAAM,EACN,IAAI,CAAC,KAAK,EACV,IAAI,CAAC,SAAS,EACd,IAAI,CAAC,UAAU,EACf,IAAI,CAAC,IAAI,EACT,IAAI,CAAC,SAAS,CACf,CAAC;oBACF,OAAO;wBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;qBACrE,CAAC;gBACJ,CAAC;gBACD,8CAA8C;gBAC9C,KAAK,4CAA4C,CAAC,CAAC,CAAC;oBAClD,MAAM,IAAI,GAAG,UAAU,CAAC,6CAA6C,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;oBACtG,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,uCAAuC,CACvE,MAAM,EACN,IAAI,CAAC,YAAY,CAClB,CAAC;oBACF,OAAO;wBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;qBACrE,CAAC;gBACJ,CAAC;gBACD,KAAK,kDAAkD,CAAC,CAAC,CAAC;oBACxD,MAAM,IAAI,GAAG,UAAU,CAAC,kDAAkD,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;oBAC3G,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,4CAA4C,CAC5E,MAAM,EACN,IAAI,CAAC,UAAU,EACf,IAAI,CAAC,YAAY,CAClB,CAAC;oBACF,OAAO;wBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;qBACrE,CAAC;gBACJ,CAAC;gBACD,gBAAgB;gBAChB,KAAK,8BAA8B,CAAC,CAAC,CAAC;oBACpC,MAAM,IAAI,GAAG,OAAO,CAAC,+BAA+B,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;oBACrF,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,yBAAyB,CACtD,MAAM,EACN,IAAI,CAAC,aAAa,CACnB,CAAC;oBACF,OAAO;wBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;qBACrE,CAAC;gBACJ,CAAC;gBACD,KAAK,0BAA0B,CAAC,CAAC,CAAC;oBAChC,MAAM,IAAI,GAAG,OAAO,CAAC,4BAA4B,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;oBAClF,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,sBAAsB,CACnD,MAAM,EACN,IAAI,CAAC,aAAa,CACnB,CAAC;oBACF,OAAO;wBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;qBACrE,CAAC;gBACJ,CAAC;gBACD,KAAK,4BAA4B,CAAC,CAAC,CAAC;oBAClC,MAAM,IAAI,GAAG,OAAO,CAAC,6BAA6B,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;oBACnF,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,uBAAuB,CACpD,MAAM,EACN,IAAI,CAAC,YAAY,CAClB,CAAC;oBACF,OAAO;wBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;qBACrE,CAAC;gBACJ,CAAC;gBACD,wBAAwB;gBACxB,KAAK,oBAAoB,CAAC,CAAC,CAAC;oBAC1B,MAAM,IAAI,GAAG,cAAc,CAAC,sBAAsB,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;oBACnF,MAAM,QAAQ,GAAG,MAAM,cAAc,CAAC,gBAAgB,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;oBACrE,OAAO;wBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;qBACrE,CAAC;gBACJ,CAAC;gBACD,KAAK,0BAA0B,CAAC,CAAC,CAAC;oBAChC,MAAM,IAAI,GAAG,cAAc,CAAC,4BAA4B,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;oBACzF,MAAM,QAAQ,GAAG,MAAM,cAAc,CAAC,sBAAsB,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;oBAC3E,OAAO;wBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;qBACrE,CAAC;gBACJ,CAAC;gBACD,KAAK,iCAAiC,CAAC,CAAC,CAAC;oBACvC,MAAM,IAAI,GAAG,cAAc,CAAC,kCAAkC,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;oBAC/F,MAAM,QAAQ,GAAG,MAAM,cAAc,CAAC,4BAA4B,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;oBACjF,OAAO;wBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;qBACrE,CAAC;gBACJ,CAAC;gBACD,uBAAuB;gBACvB,KAAK,qBAAqB,CAAC,CAAC,CAAC;oBAC3B,MAAM,IAAI,GAAG,OAAO,CAAC,uBAAuB,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;oBAC7E,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,iBAAiB,CAAC,MAAM,EAAE,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;oBAC1I,OAAO;wBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;qBACrE,CAAC;gBACJ,CAAC;gBACD,iBAAiB;gBACjB,KAAK,wBAAwB,CAAC,CAAC,CAAC;oBAC9B,MAAM,IAAI,GAAG,QAAQ,CAAC,kBAAkB,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;oBACzE,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,YAAY,CAC1C,MAAM,EACN,IAAI,CAAC,KAAK,EACV,IAAI,CAAC,KAAK,EACV,IAAI,CAAC,UAAU,EACf,IAAI,CAAC,YAAY,EACjB,IAAI,CAAC,YAAY,EACjB,IAAI,CAAC,YAAY,EACjB,IAAI,CAAC,iBAAiB,EACtB,IAAI,CAAC,MAAM,EACX,IAAI,CAAC,SAAS,EACd,IAAI,CAAC,OAAO,CACb,CAAC;oBACF,OAAO;wBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;qBACrE,CAAC;gBACJ,CAAC;gBACD,KAAK,gCAAgC,CAAC,CAAC,CAAC;oBACtC,MAAM,IAAI,GAAG,QAAQ,CAAC,yBAAyB,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;oBAChF,MAAM,QAAQ,CAAC,wBAAwB,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;oBACtE,OAAO;wBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,WAAW,IAAI,CAAC,EAAE,sBAAsB,IAAI,CAAC,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;qBAC9I,CAAC;gBACJ,CAAC;gBACD;oBACE,MAAM,IAAI,KAAK,CAAC,iBAAiB,QAAQ,EAAE,CAAC,CAAC;YACjD,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CAAC,qBAAqB,EAAE,KAAK,CAAC,CAAC;YAC5C,OAAO;gBACL,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,MAAM;wBACZ,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;4BACnB,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;yBAC9D,CAAC;qBACH;iBACF;aACF,CAAC;QACJ,CAAC;IACH,CAAC,CACF,CAAC;IAEF,OAAO,MAAM,CAAC;AAChB,CAAC;AAGD,KAAK,UAAU,IAAI;IACjB,IAAI,CAAC;QACH,MAAM,aAAa,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,OAAO,CAAC;QAC5D,IAAI,CAAC,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC;YAC9C,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;QACpE,CAAC;QAED,IAAI,aAAa,KAAK,OAAO,EAAE,CAAC;YAC9B,MAAM,SAAS,GAAG,IAAI,oBAAoB,EAAE,CAAC;YAC7C,MAAM,MAAM,GAAG,MAAM,SAAS,EAAE,CAAC;YACjC,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YAChC,OAAO,CAAC,IAAI,CAAC,sDAAsD,CAAC,CAAC;QACvE,CAAC;aAAM,CAAC;YACN,MAAM,GAAG,GAAG,OAAO,EAAE,CAAC;YACtB,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC;gBACX,MAAM,EAAE,GAAG;gBACX,OAAO,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,CAAC;gBAC3C,cAAc,EAAE,CAAC,cAAc,CAAC;aACjC,CAAC,CAAC,CAAC;YAEJ,MAAM,MAAM,GAAG,MAAM,SAAS,EAAE,CAAC;YACjC,IAAI,SAA6B,CAAC;YAClC,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;gBAClC,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;YACtB,CAAC,CAAC,CAAC;YACH,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;gBACvC,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;YACtB,CAAC,CAAC,CAAC;YAEH,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;gBACjC,SAAS,GAAG,IAAI,kBAAkB,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;gBAErD,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YAClC,CAAC,CAAC,CAAC;YAEH,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;gBACvC,MAAM,SAAS,CAAC,iBAAiB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;YAC9C,CAAC,CAAC,CAAC;YAEH,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,IAAI,CAAC;YACtC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,EAAE;gBACpB,OAAO,CAAC,IAAI,CAAC,sCAAsC,IAAI,MAAM,CAAC,CAAC;YACjE,CAAC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,wBAAwB,EAAE,KAAK,CAAC,CAAC;QAC/C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;IACrB,OAAO,CAAC,KAAK,CAAC,kBAAkB,EAAE,KAAK,CAAC,CAAC;IACzC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}

package/dist/operations/audit.d.ts

@@ -0,0 +1,31 @@
+import { z } from "zod";
+import { RadSecurityClient } from "../client.js";
+export declare const WhoShelledIntoPodSchema: z.ZodObject<{
+    name: z.ZodOptional<z.ZodString>;
+    namespace: z.ZodOptional<z.ZodString>;
+    cluster_id: z.ZodOptional<z.ZodString>;
+    from_time: z.ZodOptional<z.ZodString>;
+    to_time: z.ZodOptional<z.ZodString>;
+    limit: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+    page: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+}, "strip", z.ZodTypeAny, {
+    limit: number;
+    page: number;
+    name?: string | undefined;
+    namespace?: string | undefined;
+    cluster_id?: string | undefined;
+    from_time?: string | undefined;
+    to_time?: string | undefined;
+}, {
+    limit?: number | undefined;
+    name?: string | undefined;
+    namespace?: string | undefined;
+    cluster_id?: string | undefined;
+    from_time?: string | undefined;
+    to_time?: string | undefined;
+    page?: number | undefined;
+}>;
+/**
+ * Get users who shelled into a pod with the given name and namespace around the given time.
+ */
+export declare function whoShelledIntoPod(client: RadSecurityClient, name?: string, namespace?: string, cluster_id?: string, from_time?: string, to_time?: string, limit?: number, page?: number): Promise<any>;

package/dist/operations/audit.js

@@ -0,0 +1,55 @@
+import { z } from "zod";
+export const WhoShelledIntoPodSchema = z.object({
+    name: z.string().optional().describe("Optional Pod name"),
+    namespace: z.string().optional().describe("Optional Pod namespace"),
+    cluster_id: z.string().optional().describe("Optional Cluster ID"),
+    from_time: z.string().optional().describe("Start time of the time range to search for audit events. Example: 2024-01-01T00:00:00Z. Default: 7 days ago"),
+    to_time: z.string().optional().describe("End time of the time range to search for audit events. Example: 2024-01-03T00:00:00Z"),
+    limit: z.number().optional().default(20).describe("Maximum number of results to return"),
+    page: z.number().optional().default(1).describe("Page number to return"),
+});
+/**
+ * Get users who shelled into a pod with the given name and namespace around the given time.
+ */
+export async function whoShelledIntoPod(client, name, namespace, cluster_id, from_time = "now-7d", to_time = "", limit = 20, page = 1) {
+    const params = {
+        types: "k8s_audit_logs_anomaly",
+        rule_ids: "A001",
+        from: from_time,
+        to: to_time,
+        page: page,
+        page_size: limit,
+    };
+    if (cluster_id) {
+        params.cluster_ids = cluster_id;
+    }
+    const violations = await client.makeRequest(`/accounts/${client.getAccountId()}/findings`, params);
+    const toReturn = [];
+    for (const violation of violations.entries) {
+        const auditLog = violation.source;
+        if (!auditLog) {
+            continue;
+        }
+        let match = true;
+        if (name) {
+            if (auditLog.objectRef && auditLog.objectRef.name !== name) {
+                match = false;
+            }
+        }
+        if (namespace) {
+            if (auditLog.objectRef && auditLog.objectRef.namespace !== namespace) {
+                match = false;
+            }
+        }
+        if (match) {
+            toReturn.push({
+                who: auditLog.user,
+                time: auditLog.stageTimestamp,
+                where: auditLog.objectRef,
+            });
+        }
+    }
+    violations.entries = toReturn;
+    return violations;
+}
+//# sourceMappingURL=audit.js.map

package/dist/operations/audit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit.js","sourceRoot":"","sources":["../../src/operations/audit.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9C,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,mBAAmB,CAAC;IACzD,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,wBAAwB,CAAC;IACnE,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,qBAAqB,CAAC;IACjE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,6GAA6G,CAAC;IACxJ,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,sFAAsF,CAAC;IAC/H,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,qCAAqC,CAAC;IACxF,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,uBAAuB,CAAC;CACzE,CAAC,CAAC;AAEH;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,MAAyB,EACzB,IAAa,EACb,SAAkB,EAClB,UAAmB,EACnB,YAAoB,QAAQ,EAC5B,UAAkB,EAAE,EACpB,QAAgB,EAAE,EAClB,OAAe,CAAC;IAEhB,MAAM,MAAM,GAAwB;QAClC,KAAK,EAAE,wBAAwB;QAC/B,QAAQ,EAAE,MAAM;QAChB,IAAI,EAAE,SAAS;QACf,EAAE,EAAE,OAAO;QACX,IAAI,EAAE,IAAI;QACV,SAAS,EAAE,KAAK;KACjB,CAAC;IAEF,IAAI,UAAU,EAAE,CAAC;QACf,MAAM,CAAC,WAAW,GAAG,UAAU,CAAC;IAClC,CAAC;IAED,MAAM,UAAU,GAAG,MAAM,MAAM,CAAC,WAAW,CACzC,aAAa,MAAM,CAAC,YAAY,EAAE,WAAW,EAC7C,MAAM,CACP,CAAC;IAEF,MAAM,QAAQ,GAAG,EAAE,CAAC;IACpB,KAAK,MAAM,SAAS,IAAI,UAAU,CAAC,OAAO,EAAE,CAAC;QAC3C,MAAM,QAAQ,GAAG,SAAS,CAAC,MAAM,CAAC;QAClC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,SAAS;QACX,CAAC;QAED,IAAI,KAAK,GAAG,IAAI,CAAC;QACjB,IAAI,IAAI,EAAE,CAAC;YACT,IAAI,QAAQ,CAAC,SAAS,IAAI,QAAQ,CAAC,SAAS,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;gBAC3D,KAAK,GAAG,KAAK,CAAC;YAChB,CAAC;QACH,CAAC;QACD,IAAI,SAAS,EAAE,CAAC;YACd,IAAI,QAAQ,CAAC,SAAS,IAAI,QAAQ,CAAC,SAAS,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;gBACrE,KAAK,GAAG,KAAK,CAAC;YAChB,CAAC;QACH,CAAC;QACD,IAAI,KAAK,EAAE,CAAC;YACV,QAAQ,CAAC,IAAI,CAAC;gBACZ,GAAG,EAAE,QAAQ,CAAC,IAAI;gBAClB,IAAI,EAAE,QAAQ,CAAC,cAAc;gBAC7B,KAAK,EAAE,QAAQ,CAAC,SAAS;aAC1B,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,UAAU,CAAC,OAAO,GAAG,QAAQ,CAAC;IAC9B,OAAO,UAAU,CAAC;AACpB,CAAC"}