import {z} from 'zod' export type ObjectIDFilter = string | {_type: 'EqualTo', value: string} | {_type: 'NotEqual', value: string} | {_type: 'IsNull'} | {_type: 'NotNull'} | {_type: 'EqualToOrNull', value: string} | {_type: 'Includes', value: Array}; export type DateFilter = string | {_type: 'EqualTo', value: string} | {_type: 'NotEqual', value: string} | {_type: 'IsNull'} | {_type: 'NotNull'} | {_type: 'EqualToOrNull', value: string} | {_type: 'GreaterThan', value: string} | {_type: 'LessThan', value: string} | {_type: 'GreaterThanOrEqual', value: string} | {_type: 'LessThanOrEqual', value: string} | {_type: 'InBetween', startValue: string, endValue: string}; export type ShortTextFilter = string | {_type: 'EqualTo', value: string} | {_type: 'NotEqual', value: string} | {_type: 'IsNull'} | {_type: 'NotNull'} | {_type: 'EqualToOrNull', value: string} | {_type: 'Search', value: string} | {_type: 'Includes', value: Array}; export type LongTextFilter = string | {_type: 'EqualTo', value: string} | {_type: 'NotEqual', value: string} | {_type: 'IsNull'} | {_type: 'NotNull'} | {_type: 'EqualToOrNull', value: string} | {_type: 'Search', value: string} | {_type: 'Includes', value: Array}; export type NumberFilter = number | {_type: 'EqualTo', value: number} | {_type: 'NotEqual', value: number} | {_type: 'IsNull'} | {_type: 'NotNull'} | {_type: 'EqualToOrNull', value: number} | {_type: 'GreaterThan', value: number} | {_type: 'LessThan', value: number} | {_type: 'GreaterThanOrEqual', value: number} | {_type: 'LessThanOrEqual', value: number} | {_type: 'InBetween', startValue: number, endValue: number}; export type BooleanFilter = boolean | {_type: 'EqualTo', value: boolean} | {_type: 'NotEqual', value: boolean} | {_type: 'IsNull'} | {_type: 'NotNull'} | {_type: 'EqualToOrNull', value: boolean}; export type VeryLongTextFilter = string | {_type: 'EqualTo', value: string} | {_type: 'NotEqual', value: string} | {_type: 'IsNull'} | {_type: 'NotNull'} | {_type: 'EqualToOrNull', value: string} | {_type: 'Search', value: string} | {_type: 'Includes', value: Array}; export type ThreatIntelFeedQuerySchema = {_id?: ObjectIDFilter | undefined, createdAt?: DateFilter | undefined, updatedAt?: DateFilter | undefined, deletedAt?: DateFilter | undefined, projectId?: ObjectIDFilter | undefined, name?: ShortTextFilter | undefined, description?: LongTextFilter | undefined, feedType?: ShortTextFilter | undefined, apiRootUrl?: LongTextFilter | undefined, listUrl?: LongTextFilter | undefined, indicatorConfidence?: NumberFilter | undefined, securityEventConnectionId?: ObjectIDFilter | undefined, collectionId?: ShortTextFilter | undefined, basicAuthUsername?: ShortTextFilter | undefined, isEnabled?: BooleanFilter | undefined, pollIntervalInMinutes?: NumberFilter | undefined, minimumConfidence?: NumberFilter | undefined, shouldCreateAlert?: BooleanFilter | undefined, shouldWriteDetectionFinding?: BooleanFilter | undefined, shouldCreateIncident?: BooleanFilter | undefined, shouldCreateCase?: BooleanFilter | undefined, alertSeverityId?: ObjectIDFilter | undefined, incidentSeverityId?: ObjectIDFilter | undefined, lastPolledAt?: DateFilter | undefined, cursor?: LongTextFilter | undefined, nextPageToken?: VeryLongTextFilter | undefined, lastPollSummary?: LongTextFilter | undefined, lastError?: VeryLongTextFilter | undefined, lastEvaluatedAt?: DateFilter | undefined, lastMatchAt?: DateFilter | undefined, lastMatchError?: VeryLongTextFilter | undefined, createdByUserId?: ObjectIDFilter | undefined, deletedByUserId?: ObjectIDFilter | undefined}; export type ThreatIntelFeedSelectSchema = {_id?: boolean | undefined, createdAt?: boolean | undefined, updatedAt?: boolean | undefined, deletedAt?: boolean | undefined, projectId?: boolean | undefined, name?: boolean | undefined, description?: boolean | undefined, feedType?: boolean | undefined, apiRootUrl?: boolean | undefined, listUrl?: boolean | undefined, indicatorConfidence?: boolean | undefined, securityEventConnectionId?: boolean | undefined, collectionId?: boolean | undefined, basicAuthUsername?: boolean | undefined, isEnabled?: boolean | undefined, pollIntervalInMinutes?: boolean | undefined, minimumConfidence?: boolean | undefined, shouldCreateAlert?: boolean | undefined, shouldWriteDetectionFinding?: boolean | undefined, shouldCreateIncident?: boolean | undefined, shouldCreateCase?: boolean | undefined, alertSeverityId?: boolean | undefined, incidentSeverityId?: boolean | undefined, lastPolledAt?: boolean | undefined, cursor?: boolean | undefined, nextPageToken?: boolean | undefined, lastPollSummary?: boolean | undefined, lastError?: boolean | undefined, lastEvaluatedAt?: boolean | undefined, lastMatchAt?: boolean | undefined, lastMatchError?: boolean | undefined, createdByUserId?: boolean | undefined, deletedByUserId?: boolean | undefined}; export type SortOrder = 'ASC' | 'DESC'; export type ThreatIntelFeedSortSchema = {_id?: SortOrder | undefined, createdAt?: SortOrder | undefined, updatedAt?: SortOrder | undefined, deletedAt?: SortOrder | undefined, projectId?: SortOrder | undefined, name?: SortOrder | undefined, description?: SortOrder | undefined, feedType?: SortOrder | undefined, apiRootUrl?: SortOrder | undefined, listUrl?: SortOrder | undefined, indicatorConfidence?: SortOrder | undefined, securityEventConnectionId?: SortOrder | undefined, collectionId?: SortOrder | undefined, basicAuthUsername?: SortOrder | undefined, isEnabled?: SortOrder | undefined, pollIntervalInMinutes?: SortOrder | undefined, minimumConfidence?: SortOrder | undefined, shouldCreateAlert?: SortOrder | undefined, shouldWriteDetectionFinding?: SortOrder | undefined, shouldCreateIncident?: SortOrder | undefined, shouldCreateCase?: SortOrder | undefined, alertSeverityId?: SortOrder | undefined, incidentSeverityId?: SortOrder | undefined, lastPolledAt?: SortOrder | undefined, cursor?: SortOrder | undefined, nextPageToken?: SortOrder | undefined, lastPollSummary?: SortOrder | undefined, lastError?: SortOrder | undefined, lastEvaluatedAt?: SortOrder | undefined, lastMatchAt?: SortOrder | undefined, lastMatchError?: SortOrder | undefined, createdByUserId?: SortOrder | undefined, deletedByUserId?: SortOrder | undefined}; export type CreateApiThreatIntelFeedGetListArgs = {body: {query?: ThreatIntelFeedQuerySchema | undefined, select?: ThreatIntelFeedSelectSchema | undefined, sort?: ThreatIntelFeedSortSchema | undefined, limit?: number | undefined, skip?: number | undefined}}; export type CreateApiThreatIntelFeedGetListOptions = {baseUrl?: string | undefined, ApiKey?: string | undefined, fetch?: typeof fetch | undefined}; export const threatIntelFeed = z.object({_id: z.string().optional(), createdAt: z.object({}).optional(), updatedAt: z.object({}).optional(), deletedAt: z.object({}).optional(), version: z.number().optional(), projectId: z.string(), name: z.string(), description: z.string().optional(), feedType: z.enum(["taxii", "list", "google-secops"]), apiRootUrl: z.string().optional(), listUrl: z.string().optional(), indicatorConfidence: z.number().optional(), securityEventConnectionId: z.string().optional(), collectionId: z.string().optional(), basicAuthUsername: z.string().optional(), isEnabled: z.boolean(), pollIntervalInMinutes: z.number(), minimumConfidence: z.number(), shouldCreateAlert: z.boolean(), shouldWriteDetectionFinding: z.boolean(), shouldCreateIncident: z.boolean(), shouldCreateCase: z.boolean(), alertSeverityId: z.string().optional(), incidentSeverityId: z.string().optional(), lastPolledAt: z.object({}).optional(), cursor: z.string().optional(), nextPageToken: z.string().optional(), lastPollSummary: z.string().optional(), lastError: z.string().optional(), lastEvaluatedAt: z.object({}).optional(), lastMatchAt: z.object({}).optional(), lastMatchError: z.string().optional(), createdByUserId: z.string().optional(), deletedByUserId: z.string().optional()}); export const createApiThreatIntelFeedGetListResponse = z.object({data: z.array(threatIntelFeed).optional(), count: z.number().optional()}); export const validateResponse = async ( schema: { readonly '~standard': { readonly validate: (value: unknown) => ({ readonly value: Output; readonly issues?: undefined } | { readonly issues: ReadonlyArray<{ readonly message: string; readonly path?: ReadonlyArray | undefined }> }) | Promise<{ readonly value: Output; readonly issues?: undefined } | { readonly issues: ReadonlyArray<{ readonly message: string; readonly path?: ReadonlyArray | undefined }> }> } }, value: unknown ): Promise => { const result = await schema['~standard'].validate(value) if (result.issues !== undefined) { const detail = result.issues .map(({ message, path }) => path?.length ? `${path.map((segment) => String(typeof segment === 'object' ? segment.key : segment)).join('.')}: ${message}` : message ) .join('; ') throw new Error(`Response does not match the schema: ${detail}`, { cause: { issues: result.issues } }) } return result.value }; /** * List Threat Intel Feed * * POST /threat-intel-feed/get-list */ export const createApiThreatIntelFeedGetList = async (args: CreateApiThreatIntelFeedGetListArgs, options?: CreateApiThreatIntelFeedGetListOptions) => { const {baseUrl = "https://oneuptime.com/api", fetch: fetchFn = fetch, ApiKey} = options ?? {} const query = new URLSearchParams() const headers = new Headers() headers.set('content-type', "application/json") headers.set('accept', "application/json") if (ApiKey !== undefined) headers.set("APIKey", ApiKey) const url = `${baseUrl.replace(/\/+$/, '')}/threat-intel-feed/get-list${query.size > 0 ? `?${query}` : ''}` const res = await fetchFn(url, {method: "POST", headers, body: JSON.stringify(args.body)}) if (!res.ok) throw new Error(`Request failed with status ${res.status}`, {cause: {status: res.status, body: await res.text()}}) return validateResponse(createApiThreatIntelFeedGetListResponse, await res.json()) };