import {z} from 'zod' export type GetApiV1AccountIdIncidentsArgs = {accountId: string, query?: string | undefined, sortBy?: string | undefined, sortOrder?: string | undefined, groupBy?: string | undefined, fields?: string | undefined, countOnly?: boolean | undefined, limit?: number | undefined, startAfter?: string | undefined, duration?: string | undefined, tenants?: boolean | undefined, includeActions?: boolean | undefined, includeComments?: boolean | undefined}; export type GetApiV1AccountIdIncidentsOptions = {baseUrl?: string | undefined, ApiKeyAuth?: string | undefined, BearerAuth?: string | undefined, fetch?: typeof fetch | undefined}; export const incident = z.object({id: z.string().optional(), account: z.string().optional(), category: z.string().optional(), type: z.string().optional(), timestamp: z.string().optional(), threatScore: z.number().int().optional(), severity: z.string().optional(), description: z.string().optional(), remediated: z.boolean().optional(), entities: z.object({"8ed6cbce746d4597A6469bbc0c4edce9": z.object({type: z.string().optional(), recommendedActions: z.array(z.object({command: z.string().optional(), parameters: z.object({md5: z.string().optional()}).optional()})).optional(), actionPerformed: z.object({command: z.string().optional(), parameters: z.object({md5: z.string().optional()}).optional()}).optional(), threatDetails: z.object({malware: z.string().optional(), file: z.string().optional(), md5: z.string().optional()}).optional()}).optional()}).optional(), entityIds: z.array(z.string()).optional(), status: z.string().optional(), lastUpdateTime: z.string().optional(), updatedBy: z.string().optional()}); export const incidentWithActions = z.object({id: z.string().optional(), account: z.string().optional(), category: z.string().optional(), type: z.string().optional(), timestamp: z.string().optional(), threatScore: z.number().int().optional(), severity: z.string().optional(), description: z.string().optional(), remediated: z.boolean().optional(), entities: z.object({"8ed6cbce746d4597A6469bbc0c4edce9": z.object({type: z.string().optional(), recommendedActions: z.array(z.object({command: z.string().optional(), parameters: z.object({md5: z.string().optional()}).optional()})).optional(), actionPerformed: z.object({command: z.string().optional(), parameters: z.object({md5: z.string().optional()}).optional()}).optional(), threatDetails: z.object({malware: z.string().optional(), file: z.string().optional(), md5: z.string().optional()}).optional()}).optional()}).optional(), entityIds: z.array(z.string()).optional(), status: z.string().optional(), lastUpdateTime: z.string().optional(), updatedBy: z.string().optional(), entityId: z.string().optional(), entityType: z.string().optional(), parameters: z.object({address: z.string().optional()}).optional(), irreversible: z.boolean().optional(), responder: z.string().optional(), creationTime: z.string().optional(), command: z.string().optional(), initiatedBy: z.string().optional()}); export const comment = z.object({id: z.string().optional(), incidentId: z.string().optional(), account: z.string().optional(), user: z.string().optional(), comment: z.string().optional(), creationTime: z.string().optional()}); export const commentWithActionTransition = z.object({id: z.string().optional(), incidentId: z.string().optional(), account: z.string().optional(), user: z.string().optional(), comment: z.string().optional(), creationTime: z.string().optional(), command: z.string().optional(), actionId: z.string().optional(), context: z.string().optional()}); export const commentWithIncidentTransition = z.object({id: z.string().optional(), incidentId: z.string().optional(), account: z.string().optional(), user: z.string().optional(), comment: z.string().optional(), creationTime: z.string().optional(), newStatus: z.string().optional(), context: z.string().optional()}); export const updatedComment = z.union([comment, commentWithActionTransition, commentWithIncidentTransition, z.object({lastUpdateTime: z.string().optional()})]); export const incidentWithComments = z.object({id: z.string().optional(), account: z.string().optional(), category: z.string().optional(), type: z.string().optional(), timestamp: z.string().optional(), threatScore: z.number().int().optional(), severity: z.string().optional(), description: z.string().optional(), remediated: z.boolean().optional(), entities: z.object({"8ed6cbce746d4597A6469bbc0c4edce9": z.object({type: z.string().optional(), recommendedActions: z.array(z.object({command: z.string().optional(), parameters: z.object({md5: z.string().optional()}).optional()})).optional(), actionPerformed: z.object({command: z.string().optional(), parameters: z.object({md5: z.string().optional()}).optional()}).optional(), threatDetails: z.object({malware: z.string().optional(), file: z.string().optional(), md5: z.string().optional()}).optional()}).optional()}).optional(), entityIds: z.array(z.string()).optional(), status: z.string().optional(), lastUpdateTime: z.string().optional(), updatedBy: z.string().optional(), comments: z.array(z.union([comment, updatedComment, commentWithIncidentTransition, commentWithActionTransition])).optional()}); export const fetchIncidents = z.object({items: z.array(z.union([incident, incidentWithActions, incidentWithComments])).optional(), count: z.number().int().optional()}); export const validateResponse = async ( schema: { readonly '~standard': { readonly validate: (value: unknown) => ({ readonly value: Output; readonly issues?: undefined } | { readonly issues: ReadonlyArray<{ readonly message: string; readonly path?: ReadonlyArray | undefined }> }) | Promise<{ readonly value: Output; readonly issues?: undefined } | { readonly issues: ReadonlyArray<{ readonly message: string; readonly path?: ReadonlyArray | undefined }> }> } }, value: unknown ): Promise => { const result = await schema['~standard'].validate(value) if (result.issues !== undefined) { const detail = result.issues .map(({ message, path }) => path?.length ? `${path.map((segment) => String(typeof segment === 'object' ? segment.key : segment)).join('.')}: ${message}` : message ) .join('; ') throw new Error(`Response does not match the schema: ${detail}`, { cause: { issues: result.issues } }) } return result.value }; /** * Retrieves a list of incidents. * * GET /v1/{accountId}/incidents */ export const getApiV1AccountIdIncidents = async (args: GetApiV1AccountIdIncidentsArgs, options?: GetApiV1AccountIdIncidentsOptions) => { const {baseUrl = "https://api.usa.cloud.watchguard.com/rest/threatsync/management", fetch: fetchFn = fetch, ApiKeyAuth, BearerAuth} = options ?? {} const query = new URLSearchParams() const headers = new Headers() headers.set('accept', "application/json") if (args.query != null) query.append("query", String(args.query)) if (args.sortBy != null) query.append("sortBy", String(args.sortBy)) if (args.sortOrder != null) query.append("sortOrder", String(args.sortOrder)) if (args.groupBy != null) query.append("groupBy", String(args.groupBy)) if (args.fields != null) query.append("fields", String(args.fields)) if (args.countOnly != null) query.append("countOnly", String(args.countOnly)) if (args.limit != null) query.append("limit", String(args.limit)) if (args.startAfter != null) query.append("startAfter", String(args.startAfter)) if (args.duration != null) query.append("duration", String(args.duration)) if (args.tenants != null) query.append("tenants", String(args.tenants)) if (args.includeActions != null) query.append("includeActions", String(args.includeActions)) if (args.includeComments != null) query.append("includeComments", String(args.includeComments)) if (ApiKeyAuth !== undefined) headers.set("WatchGuard-API-Key", ApiKeyAuth) if (BearerAuth !== undefined) headers.set('authorization', `Bearer ${BearerAuth}`) const url = `${baseUrl.replace(/\/+$/, '')}/v1/${encodeURIComponent(String(args.accountId))}/incidents${query.size > 0 ? `?${query}` : ''}` const res = await fetchFn(url, {method: "GET", headers}) if (!res.ok) throw new Error(`Request failed with status ${res.status}`, {cause: {status: res.status, body: await res.text()}}) return validateResponse(fetchIncidents, await res.json()) };