import {z} from 'zod' export type PolicySeverity = 'CRITICAL' | 'HIGH' | 'MEDIUM' | 'LOW' | 'INFO' | 'TRACE'; export type AssetSearchFilters = {assetState?: string | undefined, assetTypes?: Array | undefined, modifiedSince?: string | undefined, freeTextSearch?: string | undefined, arns?: Array | undefined, frns?: Array | undefined, providerIds?: Array | undefined, regions?: Array | undefined, names?: Array | undefined, providerTypes?: ({providerType?: Array | undefined, providerSubType?: Array | undefined, provider?: Array | undefined, integrationId?: Array | undefined}) | undefined, tags?: Array | undefined, iacTypes?: Array | undefined, deleted?: boolean | undefined, includeConfiguration?: boolean | undefined, excludeIacTypes?: Array | undefined, excludeTags?: Array | undefined, excludeTypes?: Array | undefined, excludeRegions?: Array | undefined, severity?: Array | undefined, violatingPoliciesIds?: Array | undefined, matchingExclusionRulesIds?: Array | undefined, stackIds?: Array | undefined, owners?: Array | undefined, integrationIds?: Array | undefined, hasMutations?: boolean | undefined, hasVCSLink?: boolean | undefined, hasComments?: boolean | undefined, deletedRange?: Array | undefined, hasRelationship?: boolean | undefined, masterType?: (Array<'cloud' | 'saas' | 'kubernetes'>) | undefined, isExcluded?: boolean | undefined, query?: string | undefined}; export type CreateApiApiInventoryArgs = {includeAssetConfiguration?: boolean | undefined, body: {filters?: AssetSearchFilters | undefined, sorting?: ({field?: string | undefined, order?: ('asc' | 'desc') | undefined}) | undefined, size?: number | undefined, source?: Array | undefined, afterKey?: ({sortField?: string | undefined, id?: string | undefined}) | undefined}}; export type CreateApiApiInventoryOptions = {baseUrl?: string | undefined, JWTAuth?: string | undefined, fetch?: typeof fetch | undefined}; export const assetIacStatus = z.enum(["modified", "managed", "child", "unmanaged", "ghost", "undetermined", "unknown", "pending", "deleted", "created", "iacIgnored"]); export const userIdentity = z.object({customColor: z.string().optional(), initials: z.string().optional(), displayName: z.string().optional(), type: z.literal("IAMUser").optional()}); export const activity = z.object({ActionType: z.string().optional(), eventTime: z.string().optional(), eventName: z.string().optional(), userIdentity: userIdentity.optional(), eventId: z.string().optional()}); export const asset = z.object({integrationId: z.string().optional(), provider: z.string().optional(), providerId: z.string().optional(), assetId: z.string().optional(), resourceId: z.string().optional(), isExcluded: z.boolean().optional(), lastConfigurationChangeTime: z.string().optional(), updatedAt: z.string().optional(), matchingExclusionRuleIds: z.array(z.string()).optional(), state: assetIacStatus.optional(), isChild: z.boolean().optional(), frn: z.string().optional(), providerGroupId: z.string().optional(), firstSeen: z.string().optional(), pendingTo: z.string().optional(), lastAssetStateChange: z.string().optional(), subProvider: z.string().optional(), classificationsDetails: z.object({remediationCommands: z.array(z.string()).optional(), description: z.string().optional(), monthlyCost: z.object({currency: z.string().optional(), value: z.number().optional()}).optional()}).optional(), tags: z.object({key: z.string().optional(), value: z.string().optional()}).optional(), assetType: z.string().optional(), violationPolicyIds: z.array(z.string()).optional(), status: z.string().optional(), stateUpdatedTime: z.string().optional(), stackIds: z.array(z.unknown()).optional(), name: z.string().optional(), location: z.string().optional(), creationDate: z.number().int().optional(), deleteCommand: z.string().optional(), consoleURL: z.string().optional(), tagsList: z.array(z.string()).optional(), arn: z.string().optional(), flywheelSummary: z.object({requires_replace_items: z.string().optional(), requires_replace: z.boolean().optional(), drifts: z.string().optional(), status: z.string().optional()}).optional(), taggingStatus: z.enum(["NOT_TAGGED", "TAGGED", "IRRELEVANT"]).optional(), pendingExpiration: z.string().optional(), customColumns: z.object({key: z.string().optional(), value: z.string().optional()}).optional(), service: z.string().optional(), lastActivity: activity.optional(), providerSubType: z.string().optional(), creationTime: z.string().optional(), id: z.string().optional(), revisionCount: z.number().int().optional(), iac: z.object({type: z.string().optional(), stackName: z.string().optional(), stackIds: z.array(z.string()).optional(), activeStackId: z.string().optional(), firstSeen: z.string().optional(), moduleAddress: z.string().optional(), objectName: z.string().optional(), objectFullAddresses: z.string().optional(), stateLocation: z.string().optional()}).optional(), vcs: z.object({id: z.string().optional(), codeLink: z.string().optional(), codeFileLink: z.string().optional(), provider: z.string().optional(), repo: z.string().optional(), workingDirectory: z.string().optional()}).optional()}); export const createApiApiInventoryResponse = z.object({responseObjects: z.array(asset).optional(), totalObjects: z.number().int().optional(), afterKey: z.object({sortField: z.string().optional(), id: z.string().optional()}).optional()}); export const validateResponse = async ( schema: { readonly '~standard': { readonly validate: (value: unknown) => ({ readonly value: Output; readonly issues?: undefined } | { readonly issues: ReadonlyArray<{ readonly message: string; readonly path?: ReadonlyArray | undefined }> }) | Promise<{ readonly value: Output; readonly issues?: undefined } | { readonly issues: ReadonlyArray<{ readonly message: string; readonly path?: ReadonlyArray | undefined }> }> } }, value: unknown ): Promise => { const result = await schema['~standard'].validate(value) if (result.issues !== undefined) { const detail = result.issues .map(({ message, path }) => path?.length ? `${path.map((segment) => String(typeof segment === 'object' ? segment.key : segment)).join('.')}: ${message}` : message ) .join('; ') throw new Error(`Response does not match the schema: ${detail}`, { cause: { issues: result.issues } }) } return result.value }; /** * Retrieve inventory hits * * POST /api/inventory */ export const createApiApiInventory = async (args: CreateApiApiInventoryArgs, options?: CreateApiApiInventoryOptions) => { const {baseUrl = "https://api.firefly.ai/v2", fetch: fetchFn = fetch, JWTAuth} = options ?? {} const query = new URLSearchParams() const headers = new Headers() headers.set('content-type', "application/json") headers.set('accept', "application/json") if (args.includeAssetConfiguration != null) query.append("includeAssetConfiguration", String(args.includeAssetConfiguration)) if (JWTAuth !== undefined) headers.set('authorization', `Bearer ${JWTAuth}`) const url = `${baseUrl.replace(/\/+$/, '')}/api/inventory${query.size > 0 ? `?${query}` : ''}` const res = await fetchFn(url, {method: "POST", headers, body: JSON.stringify(args.body)}) if (!res.ok) throw new Error(`Request failed with status ${res.status}`, {cause: {status: res.status, body: await res.text()}}) return validateResponse(createApiApiInventoryResponse, await res.json()) };