import {z} from 'zod' export type GetApiV1NamespacesTenantMetaNamespacePoliciesArgs = {'tenant_meta.namespace': string, 'list_parameters.filter'?: string | undefined, 'list_parameters.page_token'?: number | undefined, 'list_parameters.page_size'?: number | undefined, 'list_parameters.action'?: string | undefined, 'list_parameters.mask'?: string | undefined, 'list_parameters.traverse'?: boolean | undefined, 'list_parameters.sort.path'?: string | undefined, 'list_parameters.sort.order'?: ('SORT_ENTRY_ORDER_UNSPECIFIED' | 'SORT_ENTRY_ORDER_ASC' | 'SORT_ENTRY_ORDER_DESC') | undefined, 'list_parameters.count'?: boolean | undefined, 'list_parameters.group.aggregation_paths'?: string | undefined, 'list_parameters.group.show_aggregation_uuids'?: boolean | undefined, 'list_parameters.group.unique_count_paths'?: string | undefined, 'list_parameters.group.unique_value_paths'?: string | undefined, 'list_parameters.ci_run_uuid'?: string | undefined, 'list_parameters.page_id'?: string | undefined, 'list_parameters.group_by_time.aggregation_paths'?: string | undefined, 'list_parameters.group_by_time.show_aggregation_uuids'?: boolean | undefined, 'list_parameters.group_by_time.interval'?: ('GROUP_BY_TIME_INTERVAL_UNSPECIFIED' | 'GROUP_BY_TIME_INTERVAL_YEAR' | 'GROUP_BY_TIME_INTERVAL_QUARTER' | 'GROUP_BY_TIME_INTERVAL_MONTH' | 'GROUP_BY_TIME_INTERVAL_WEEK' | 'GROUP_BY_TIME_INTERVAL_DAY' | 'GROUP_BY_TIME_INTERVAL_HOUR' | 'GROUP_BY_TIME_INTERVAL_MINUTE' | 'GROUP_BY_TIME_INTERVAL_SECOND') | undefined, 'list_parameters.group_by_time.group_size'?: number | undefined, 'list_parameters.group_by_time.start_time'?: string | undefined, 'list_parameters.group_by_time.end_time'?: string | undefined, 'list_parameters.group_by_time.mode'?: string | undefined, 'list_parameters.group_by_time.aggregation_value_field'?: string | undefined, 'list_parameters.group_by_time.aggregation_operator'?: string | undefined, 'list_parameters.disable_pagination'?: boolean | undefined}; export type GetApiV1NamespacesTenantMetaNamespacePoliciesOptions = {baseUrl?: string | undefined, fetch?: typeof fetch | undefined}; export const v1CountResponse = z.object({count: z.number().int().optional()}); export const v1GroupAggregationValueResponse = z.object({value: z.number().optional()}); export const groupResponseGroupData = z.object({aggregation_count: v1CountResponse.optional(), aggregation_uuids: z.array(z.string()).optional(), aggregation_value: v1GroupAggregationValueResponse.optional(), unique_counts: z.record(z.string(), v1CountResponse).optional(), unique_values: z.record(z.string(), z.array(z.object({}))).optional()}); export const v1GroupResponse = z.object({groups: z.record(z.string(), groupResponseGroupData).optional()}); export const v1IndexData = z.object({data: z.array(z.string()).optional(), search_score: z.number().optional(), tenant: z.string().optional(), will_be_deleted_at: z.string().optional()}); export const googleprotobufAny = z.object({"@type": z.string().optional()}).and(z.record(z.string(), z.unknown())); export const v1Meta = z.object({annotations: z.record(z.string(), z.string()).optional(), create_time: z.string().optional(), created_by: z.string().optional(), description: z.string().optional(), index_data: v1IndexData.optional(), kind: z.string().optional(), name: z.string(), parent_kind: z.string().optional(), parent_uuid: z.string().optional(), references: z.record(z.string(), googleprotobufAny).optional(), tags: z.array(z.string()).optional(), update_time: z.string().optional(), updated_by: z.string().optional(), upsert_time: z.string().optional(), version: z.string().optional()}); export const policyAdmissionAction = z.object({bypass_exceptions: z.boolean().optional(), disable_enforcement: z.boolean().optional()}); export const v1ExceptionReason = z.enum(["EXCEPTION_REASON_UNSPECIFIED", "EXCEPTION_REASON_FALSE_POSITIVE", "EXCEPTION_REASON_RISK_ACCEPTED", "EXCEPTION_REASON_IN_TRIAGE", "EXCEPTION_REASON_OTHER", "EXCEPTION_REASON_RESOLVED", "EXCEPTION_REASON_PRESENT_IN_BASELINE"]); export const policyExceptionAction = z.object({expiration_time: z.string().optional(), reason: v1ExceptionReason, tags: z.array(z.string()).optional()}); export const v1FindingCategory = z.enum(["FINDING_CATEGORY_UNSPECIFIED", "FINDING_CATEGORY_VULNERABILITY", "FINDING_CATEGORY_SUPPLY_CHAIN", "FINDING_CATEGORY_LICENSE_RISK", "FINDING_CATEGORY_SCPM", "FINDING_CATEGORY_SECURITY", "FINDING_CATEGORY_OPERATIONAL", "FINDING_CATEGORY_SECRETS", "FINDING_CATEGORY_MALWARE", "FINDING_CATEGORY_CICD", "FINDING_CATEGORY_TOOLS", "FINDING_CATEGORY_GHACTIONS", "FINDING_CATEGORY_CONTAINER", "FINDING_CATEGORY_SAST", "FINDING_CATEGORY_AI_MODELS", "FINDING_CATEGORY_SECURITY_REVIEW", "FINDING_CATEGORY_SCA"]); export const specFindingLevel = z.enum(["FINDING_LEVEL_UNSPECIFIED", "FINDING_LEVEL_CRITICAL", "FINDING_LEVEL_HIGH", "FINDING_LEVEL_MEDIUM", "FINDING_LEVEL_LOW"]); export const v1FindingTags = z.enum(["FINDING_TAGS_UNSPECIFIED", "FINDING_TAGS_DIRECT", "FINDING_TAGS_TRANSITIVE", "FINDING_TAGS_PROJECT_INTERNAL", "FINDING_TAGS_NAMESPACE_INTERNAL", "FINDING_TAGS_REACHABLE_DEPENDENCY", "FINDING_TAGS_UNREACHABLE_DEPENDENCY", "FINDING_TAGS_POTENTIALLY_REACHABLE_DEPENDENCY", "FINDING_TAGS_REACHABLE_FUNCTION", "FINDING_TAGS_UNREACHABLE_FUNCTION", "FINDING_TAGS_POTENTIALLY_REACHABLE_FUNCTION", "FINDING_TAGS_FIXABLE", "FINDING_TAGS_UNFIXABLE", "FINDING_TAGS_PRODUCTION", "FINDING_TAGS_TEST", "FINDING_TAGS_NORMAL", "FINDING_TAGS_FIX_AVAILABLE", "FINDING_TAGS_SELF", "FINDING_TAGS_POLICY", "FINDING_TAGS_CI_BLOCKER", "FINDING_TAGS_VALID_SECRET", "FINDING_TAGS_INVALID_SECRET", "FINDING_TAGS_PATH_EXTERNAL", "FINDING_TAGS_MALWARE", "FINDING_TAGS_UNDER_REVIEW", "FINDING_TAGS_PHANTOM", "FINDING_TAGS_EXCEPTION", "FINDING_TAGS_CI_WARNING", "FINDING_TAGS_NOTIFICATION", "FINDING_TAGS_EXPLOITED", "FINDING_TAGS_DISPUTED", "FINDING_TAGS_WITHDRAWN", "FINDING_TAGS_FALSE_POSITIVE", "FINDING_TAGS_TRUE_POSITIVE", "FINDING_TAGS_SNOOZED", "FINDING_TAGS_AI", "FINDING_TAGS_IGNORED", "FINDING_TAGS_SEGMENT_MATCH", "FINDING_TAGS_REACHABLE_BY_INCLUSION", "FINDING_TAGS_POTENTIALLY_VALID_SECRET", "FINDING_TAGS_INFERRED"]); export const policyFindingAction = z.object({categories: z.array(v1FindingCategory).optional(), explanation: z.string(), external_name: z.string().optional(), level: specFindingLevel, meta_tags: z.array(z.string()).optional(), remediation: z.string(), summary: z.string(), tags: z.array(v1FindingTags).optional(), target_kind: z.string().optional()}); export const notificationActionAggregationType = z.enum(["AGGREGATION_TYPE_UNSPECIFIED", "AGGREGATION_TYPE_PROJECT", "AGGREGATION_TYPE_DEPENDENCY", "AGGREGATION_TYPE_DEPENDENCY_ACROSS_PKG_VERSIONS", "AGGREGATION_TYPE_NONE", "AGGREGATION_TYPE_MANUAL"]); export const v1PolicyNotificationAction = z.object({aggregation_type: notificationActionAggregationType.optional(), bypass_exceptions: z.boolean().optional(), notification_target_uuids: z.array(z.string()).optional(), standalone_tickets: z.boolean().optional()}); export const policyPolicyType = z.enum(["POLICY_TYPE_UNSPECIFIED", "POLICY_TYPE_ADMISSION", "POLICY_TYPE_NOTIFICATION", "POLICY_TYPE_FINDING", "POLICY_TYPE_FINDING_CFG", "POLICY_TYPE_ML_FINDING", "POLICY_TYPE_SYSTEM_FINDING", "POLICY_TYPE_USER_FINDING", "POLICY_TYPE_EXCEPTION", "POLICY_TYPE_REMEDIATION"]); export const templateParameterQueryApiData = z.object({filter: z.string().optional(), input_field: z.string(), namespace: z.string().optional(), resource_kind: z.string()}); export const policyTemplateParameter = z.object({default_values: z.array(z.string()).optional(), description: z.string(), multiple_ok: z.boolean().optional(), name: z.string(), possible_values: z.array(z.string()).optional(), possible_values_from_db: templateParameterQueryApiData.optional(), required: z.boolean().optional(), value: z.string()}); export const policyTemplateParameterValues = z.object({values: z.array(z.string()).optional()}); export const v1PolicySpec = z.object({admission: policyAdmissionAction.optional(), disable: z.boolean().optional(), exception: policyExceptionAction.optional(), finding: policyFindingAction.optional(), finding_categories: z.array(v1FindingCategory).optional(), finding_level: specFindingLevel.optional(), group_by_fields: z.array(z.string()).optional(), notification: v1PolicyNotificationAction.optional(), policy_type: policyPolicyType, project_exceptions: z.array(z.string()).optional(), project_selector: z.array(z.string()).optional(), query_statements: z.array(z.string()).optional(), resource_kinds: z.array(z.string()).optional(), rule: z.string().optional(), template_parameters: z.array(policyTemplateParameter).optional(), template_uuid: z.string().optional(), template_values: z.record(z.string(), policyTemplateParameterValues).optional(), template_version: z.string().optional()}); export const v1TenantMeta = z.object({namespace: z.string()}); export const v1Policy = z.object({meta: v1Meta, propagate: z.boolean().optional(), spec: v1PolicySpec, tenant_meta: v1TenantMeta.optional(), uuid: z.string().optional()}); export const v1ListResponse = z.object({next_page_id: z.string().optional(), next_page_token: z.number().int().optional()}); export const v1ListPoliciesResponseList = z.object({objects: z.array(v1Policy).optional(), response: v1ListResponse.optional()}); export const v1ListPoliciesResponse = z.object({count_response: v1CountResponse.optional(), group_response: v1GroupResponse.optional(), list: v1ListPoliciesResponseList.optional()}); export const validateResponse = async ( schema: { readonly '~standard': { readonly validate: (value: unknown) => ({ readonly value: Output; readonly issues?: undefined } | { readonly issues: ReadonlyArray<{ readonly message: string; readonly path?: ReadonlyArray | undefined }> }) | Promise<{ readonly value: Output; readonly issues?: undefined } | { readonly issues: ReadonlyArray<{ readonly message: string; readonly path?: ReadonlyArray | undefined }> }> } }, value: unknown ): Promise => { const result = await schema['~standard'].validate(value) if (result.issues !== undefined) { const detail = result.issues .map(({ message, path }) => path?.length ? `${path.map((segment) => String(typeof segment === 'object' ? segment.key : segment)).join('.')}: ${message}` : message ) .join('; ') throw new Error(`Response does not match the schema: ${detail}`, { cause: { issues: result.issues } }) } return result.value }; /** * ListPolicies * * GET /v1/namespaces/{tenant_meta.namespace}/policies */ export const getApiV1NamespacesTenantMetaNamespacePolicies = async (args: GetApiV1NamespacesTenantMetaNamespacePoliciesArgs, options?: GetApiV1NamespacesTenantMetaNamespacePoliciesOptions) => { const {baseUrl = "https://api.endorlabs.com", fetch: fetchFn = fetch} = options ?? {} const query = new URLSearchParams() const headers = new Headers() headers.set('accept', "application/json") if (args['list_parameters.filter'] != null) query.append("list_parameters.filter", String(args['list_parameters.filter'])) if (args['list_parameters.page_token'] != null) query.append("list_parameters.page_token", String(args['list_parameters.page_token'])) if (args['list_parameters.page_size'] != null) query.append("list_parameters.page_size", String(args['list_parameters.page_size'])) if (args['list_parameters.action'] != null) query.append("list_parameters.action", String(args['list_parameters.action'])) if (args['list_parameters.mask'] != null) query.append("list_parameters.mask", String(args['list_parameters.mask'])) if (args['list_parameters.traverse'] != null) query.append("list_parameters.traverse", String(args['list_parameters.traverse'])) if (args['list_parameters.sort.path'] != null) query.append("list_parameters.sort.path", String(args['list_parameters.sort.path'])) if (args['list_parameters.sort.order'] != null) query.append("list_parameters.sort.order", String(args['list_parameters.sort.order'])) if (args['list_parameters.count'] != null) query.append("list_parameters.count", String(args['list_parameters.count'])) if (args['list_parameters.group.aggregation_paths'] != null) query.append("list_parameters.group.aggregation_paths", String(args['list_parameters.group.aggregation_paths'])) if (args['list_parameters.group.show_aggregation_uuids'] != null) query.append("list_parameters.group.show_aggregation_uuids", String(args['list_parameters.group.show_aggregation_uuids'])) if (args['list_parameters.group.unique_count_paths'] != null) query.append("list_parameters.group.unique_count_paths", String(args['list_parameters.group.unique_count_paths'])) if (args['list_parameters.group.unique_value_paths'] != null) query.append("list_parameters.group.unique_value_paths", String(args['list_parameters.group.unique_value_paths'])) if (args['list_parameters.ci_run_uuid'] != null) query.append("list_parameters.ci_run_uuid", String(args['list_parameters.ci_run_uuid'])) if (args['list_parameters.page_id'] != null) query.append("list_parameters.page_id", String(args['list_parameters.page_id'])) if (args['list_parameters.group_by_time.aggregation_paths'] != null) query.append("list_parameters.group_by_time.aggregation_paths", String(args['list_parameters.group_by_time.aggregation_paths'])) if (args['list_parameters.group_by_time.show_aggregation_uuids'] != null) query.append("list_parameters.group_by_time.show_aggregation_uuids", String(args['list_parameters.group_by_time.show_aggregation_uuids'])) if (args['list_parameters.group_by_time.interval'] != null) query.append("list_parameters.group_by_time.interval", String(args['list_parameters.group_by_time.interval'])) if (args['list_parameters.group_by_time.group_size'] != null) query.append("list_parameters.group_by_time.group_size", String(args['list_parameters.group_by_time.group_size'])) if (args['list_parameters.group_by_time.start_time'] != null) query.append("list_parameters.group_by_time.start_time", String(args['list_parameters.group_by_time.start_time'])) if (args['list_parameters.group_by_time.end_time'] != null) query.append("list_parameters.group_by_time.end_time", String(args['list_parameters.group_by_time.end_time'])) if (args['list_parameters.group_by_time.mode'] != null) query.append("list_parameters.group_by_time.mode", String(args['list_parameters.group_by_time.mode'])) if (args['list_parameters.group_by_time.aggregation_value_field'] != null) query.append("list_parameters.group_by_time.aggregation_value_field", String(args['list_parameters.group_by_time.aggregation_value_field'])) if (args['list_parameters.group_by_time.aggregation_operator'] != null) query.append("list_parameters.group_by_time.aggregation_operator", String(args['list_parameters.group_by_time.aggregation_operator'])) if (args['list_parameters.disable_pagination'] != null) query.append("list_parameters.disable_pagination", String(args['list_parameters.disable_pagination'])) const url = `${baseUrl.replace(/\/+$/, '')}/v1/namespaces/${encodeURIComponent(String(args['tenant_meta.namespace']))}/policies${query.size > 0 ? `?${query}` : ''}` const res = await fetchFn(url, {method: "GET", headers}) if (!res.ok) throw new Error(`Request failed with status ${res.status}`, {cause: {status: res.status, body: await res.text()}}) return validateResponse(v1ListPoliciesResponse, await res.json()) };