import {z} from 'zod' export type ObjectIDFilter = string | {_type: 'EqualTo', value: string} | {_type: 'NotEqual', value: string} | {_type: 'IsNull'} | {_type: 'NotNull'} | {_type: 'EqualToOrNull', value: string} | {_type: 'Includes', value: Array}; export type DateFilter = string | {_type: 'EqualTo', value: string} | {_type: 'NotEqual', value: string} | {_type: 'IsNull'} | {_type: 'NotNull'} | {_type: 'EqualToOrNull', value: string} | {_type: 'GreaterThan', value: string} | {_type: 'LessThan', value: string} | {_type: 'GreaterThanOrEqual', value: string} | {_type: 'LessThanOrEqual', value: string} | {_type: 'InBetween', startValue: string, endValue: string}; export type ShortTextFilter = string | {_type: 'EqualTo', value: string} | {_type: 'NotEqual', value: string} | {_type: 'IsNull'} | {_type: 'NotNull'} | {_type: 'EqualToOrNull', value: string} | {_type: 'Search', value: string} | {_type: 'Includes', value: Array}; export type LongTextFilter = string | {_type: 'EqualTo', value: string} | {_type: 'NotEqual', value: string} | {_type: 'IsNull'} | {_type: 'NotNull'} | {_type: 'EqualToOrNull', value: string} | {_type: 'Search', value: string} | {_type: 'Includes', value: Array}; export type VeryLongTextFilter = string | {_type: 'EqualTo', value: string} | {_type: 'NotEqual', value: string} | {_type: 'IsNull'} | {_type: 'NotNull'} | {_type: 'EqualToOrNull', value: string} | {_type: 'Search', value: string} | {_type: 'Includes', value: Array}; export type BooleanFilter = boolean | {_type: 'EqualTo', value: boolean} | {_type: 'NotEqual', value: boolean} | {_type: 'IsNull'} | {_type: 'NotNull'} | {_type: 'EqualToOrNull', value: boolean}; export type NumberFilter = number | {_type: 'EqualTo', value: number} | {_type: 'NotEqual', value: number} | {_type: 'IsNull'} | {_type: 'NotNull'} | {_type: 'EqualToOrNull', value: number} | {_type: 'GreaterThan', value: number} | {_type: 'LessThan', value: number} | {_type: 'GreaterThanOrEqual', value: number} | {_type: 'LessThanOrEqual', value: number} | {_type: 'InBetween', startValue: number, endValue: number}; export type DetectionRuleQuerySchema = {_id?: ObjectIDFilter | undefined, createdAt?: DateFilter | undefined, updatedAt?: DateFilter | undefined, deletedAt?: DateFilter | undefined, projectId?: ObjectIDFilter | undefined, name?: ShortTextFilter | undefined, description?: LongTextFilter | undefined, sigmaRuleYaml?: VeryLongTextFilter | undefined, isEnabled?: BooleanFilter | undefined, evaluationIntervalInMinutes?: NumberFilter | undefined, isRealTime?: BooleanFilter | undefined, groupByField?: ShortTextFilter | undefined, distinctCountField?: ShortTextFilter | undefined, matchCountThreshold?: NumberFilter | undefined, shouldCreateAlert?: BooleanFilter | undefined, shouldWriteDetectionFinding?: BooleanFilter | undefined, shouldCreateIncident?: BooleanFilter | undefined, shouldCreateCase?: BooleanFilter | undefined, riskScore?: NumberFilter | undefined, alertSeverityId?: ObjectIDFilter | undefined, incidentSeverityId?: ObjectIDFilter | undefined, lastEvaluatedAt?: DateFilter | undefined, lastMatchAt?: DateFilter | undefined, lastError?: VeryLongTextFilter | undefined, createdByUserId?: ObjectIDFilter | undefined, deletedByUserId?: ObjectIDFilter | undefined}; export type DetectionRuleSelectSchema = {_id?: boolean | undefined, createdAt?: boolean | undefined, updatedAt?: boolean | undefined, deletedAt?: boolean | undefined, projectId?: boolean | undefined, name?: boolean | undefined, description?: boolean | undefined, sigmaRuleYaml?: boolean | undefined, isEnabled?: boolean | undefined, evaluationIntervalInMinutes?: boolean | undefined, isRealTime?: boolean | undefined, groupByField?: boolean | undefined, distinctCountField?: boolean | undefined, matchCountThreshold?: boolean | undefined, shouldCreateAlert?: boolean | undefined, shouldWriteDetectionFinding?: boolean | undefined, shouldCreateIncident?: boolean | undefined, shouldCreateCase?: boolean | undefined, riskScore?: boolean | undefined, alertSeverityId?: boolean | undefined, incidentSeverityId?: boolean | undefined, lastEvaluatedAt?: boolean | undefined, lastMatchAt?: boolean | undefined, lastError?: boolean | undefined, createdByUserId?: boolean | undefined, deletedByUserId?: boolean | undefined}; export type SortOrder = 'ASC' | 'DESC'; export type DetectionRuleSortSchema = {_id?: SortOrder | undefined, createdAt?: SortOrder | undefined, updatedAt?: SortOrder | undefined, deletedAt?: SortOrder | undefined, projectId?: SortOrder | undefined, name?: SortOrder | undefined, description?: SortOrder | undefined, sigmaRuleYaml?: SortOrder | undefined, isEnabled?: SortOrder | undefined, evaluationIntervalInMinutes?: SortOrder | undefined, isRealTime?: SortOrder | undefined, groupByField?: SortOrder | undefined, distinctCountField?: SortOrder | undefined, matchCountThreshold?: SortOrder | undefined, shouldCreateAlert?: SortOrder | undefined, shouldWriteDetectionFinding?: SortOrder | undefined, shouldCreateIncident?: SortOrder | undefined, shouldCreateCase?: SortOrder | undefined, riskScore?: SortOrder | undefined, alertSeverityId?: SortOrder | undefined, incidentSeverityId?: SortOrder | undefined, lastEvaluatedAt?: SortOrder | undefined, lastMatchAt?: SortOrder | undefined, lastError?: SortOrder | undefined, createdByUserId?: SortOrder | undefined, deletedByUserId?: SortOrder | undefined}; export type CreateApiDetectionRuleGetListArgs = {body: {query?: DetectionRuleQuerySchema | undefined, select?: DetectionRuleSelectSchema | undefined, sort?: DetectionRuleSortSchema | undefined, limit?: number | undefined, skip?: number | undefined}}; export type CreateApiDetectionRuleGetListOptions = {baseUrl?: string | undefined, ApiKey?: string | undefined, fetch?: typeof fetch | undefined}; export const detectionRule = z.object({_id: z.string().optional(), createdAt: z.object({}).optional(), updatedAt: z.object({}).optional(), deletedAt: z.object({}).optional(), version: z.number().optional(), projectId: z.string(), name: z.string(), description: z.string().optional(), sigmaRuleYaml: z.string(), isEnabled: z.boolean(), evaluationIntervalInMinutes: z.number(), isRealTime: z.boolean(), groupByField: z.string().optional(), distinctCountField: z.string().optional(), matchCountThreshold: z.number(), shouldCreateAlert: z.boolean(), shouldWriteDetectionFinding: z.boolean(), shouldCreateIncident: z.boolean(), shouldCreateCase: z.boolean(), riskScore: z.number().optional(), alertSeverityId: z.string().optional(), incidentSeverityId: z.string().optional(), lastEvaluatedAt: z.object({}).optional(), lastMatchAt: z.object({}).optional(), lastError: z.string().optional(), createdByUserId: z.string().optional(), deletedByUserId: z.string().optional()}); export const createApiDetectionRuleGetListResponse = z.object({data: z.array(detectionRule).optional(), count: z.number().optional()}); export const validateResponse = async ( schema: { readonly '~standard': { readonly validate: (value: unknown) => ({ readonly value: Output; readonly issues?: undefined } | { readonly issues: ReadonlyArray<{ readonly message: string; readonly path?: ReadonlyArray | undefined }> }) | Promise<{ readonly value: Output; readonly issues?: undefined } | { readonly issues: ReadonlyArray<{ readonly message: string; readonly path?: ReadonlyArray | undefined }> }> } }, value: unknown ): Promise => { const result = await schema['~standard'].validate(value) if (result.issues !== undefined) { const detail = result.issues .map(({ message, path }) => path?.length ? `${path.map((segment) => String(typeof segment === 'object' ? segment.key : segment)).join('.')}: ${message}` : message ) .join('; ') throw new Error(`Response does not match the schema: ${detail}`, { cause: { issues: result.issues } }) } return result.value }; /** * List Detection Rule * * POST /detection-rule/get-list */ export const createApiDetectionRuleGetList = async (args: CreateApiDetectionRuleGetListArgs, options?: CreateApiDetectionRuleGetListOptions) => { const {baseUrl = "https://oneuptime.com/api", fetch: fetchFn = fetch, ApiKey} = options ?? {} const query = new URLSearchParams() const headers = new Headers() headers.set('content-type', "application/json") headers.set('accept', "application/json") if (ApiKey !== undefined) headers.set("APIKey", ApiKey) const url = `${baseUrl.replace(/\/+$/, '')}/detection-rule/get-list${query.size > 0 ? `?${query}` : ''}` const res = await fetchFn(url, {method: "POST", headers, body: JSON.stringify(args.body)}) if (!res.ok) throw new Error(`Request failed with status ${res.status}`, {cause: {status: res.status, body: await res.text()}}) return validateResponse(createApiDetectionRuleGetListResponse, await res.json()) };