import {z} from 'zod' export type PageSize = number; export type PageCursor = string; export type GetApiVendorsVendorIdSecurityReviewsArgs = {vendorId: string, pageSize?: PageSize | undefined, pageCursor?: PageCursor | undefined}; export type GetApiVendorsVendorIdSecurityReviewsOptions = {baseUrl?: string | undefined, bearerAuth?: string | undefined, fetch?: typeof fetch | undefined}; export const assessmentDecision = z.enum(["APPROVED", "NOT_APPROVED", "CONDITIONALLY_APPROVED"]); export const assessmentType = z.object({id: z.string(), name: z.string(), description: z.string().nullable()}); export const assessmentOwnerType = z.enum(["USER", "TEAM"]); export const assessmentOwner = z.object({id: z.string(), type: assessmentOwnerType, displayName: z.string().nullable(), email: z.string().nullable()}); export const securityReview = z.object({id: z.string(), vendorId: z.string(), decisionNotes: z.string().nullable(), comments: z.string().nullable(), completedByUserId: z.string().nullable(), startDate: z.string().nullable(), dueDate: z.string().nullable(), overrideDueDate: z.string().nullable(), completionDate: z.string().nullable(), decision: z.object({lastUpdatedAt: z.string(), status: assessmentDecision}).nullable(), assessmentType: assessmentType, owner: assessmentOwner.nullable()}); export const pageInfo = z.object({endCursor: z.string().nullable(), hasNextPage: z.boolean(), hasPreviousPage: z.boolean(), startCursor: z.string().nullable()}); export const paginatedResponseSecurityReview = z.object({results: z.object({data: z.array(securityReview), pageInfo: pageInfo})}); export const validateResponse = async ( schema: { readonly '~standard': { readonly validate: (value: unknown) => ({ readonly value: Output; readonly issues?: undefined } | { readonly issues: ReadonlyArray<{ readonly message: string; readonly path?: ReadonlyArray | undefined }> }) | Promise<{ readonly value: Output; readonly issues?: undefined } | { readonly issues: ReadonlyArray<{ readonly message: string; readonly path?: ReadonlyArray | undefined }> }> } }, value: unknown ): Promise => { const result = await schema['~standard'].validate(value) if (result.issues !== undefined) { const detail = result.issues .map(({ message, path }) => path?.length ? `${path.map((segment) => String(typeof segment === 'object' ? segment.key : segment)).join('.')}: ${message}` : message ) .join('; ') throw new Error(`Response does not match the schema: ${detail}`, { cause: { issues: result.issues } }) } return result.value }; /** * List security reviews by vendor ID * * GET /vendors/{vendorId}/security-reviews */ export const getApiVendorsVendorIdSecurityReviews = async (args: GetApiVendorsVendorIdSecurityReviewsArgs, options?: GetApiVendorsVendorIdSecurityReviewsOptions) => { const {baseUrl = "https://api.vanta.com", fetch: fetchFn = fetch, bearerAuth} = options ?? {} const query = new URLSearchParams() const headers = new Headers() headers.set('accept', "application/json") if (args.pageSize != null) query.append("pageSize", String(args.pageSize)) if (args.pageCursor != null) query.append("pageCursor", String(args.pageCursor)) if (bearerAuth !== undefined) headers.set('authorization', `Bearer ${bearerAuth}`) const url = `${baseUrl.replace(/\/+$/, '')}/vendors/${encodeURIComponent(String(args.vendorId))}/security-reviews${query.size > 0 ? `?${query}` : ''}` const res = await fetchFn(url, {method: "GET", headers}) if (!res.ok) throw new Error(`Request failed with status ${res.status}`, {cause: {status: res.status, body: await res.text()}}) return validateResponse(paginatedResponseSecurityReview, await res.json()) };