@mitre-attack/attack-data-model/dist/chunk-E6AAF2HD.js

A TypeScript API for the MITRE ATT&CK data model

// src/schemas/common/stix-type.ts
import { z } from "zod";
var stixTypeToTypeName = {
  "attack-pattern": "Technique",
  bundle: "StixBundle",
  campaign: "Campaign",
  "course-of-action": "Mitigation",
  identity: "Identity",
  "intrusion-set": "Group",
  malware: "Malware",
  tool: "Tool",
  "marking-definition": "MarkingDefinition",
  "x-mitre-data-component": "DataComponent",
  "x-mitre-data-source": "DataSource",
  "x-mitre-tactic": "Tactic",
  "x-mitre-asset": "Asset",
  "x-mitre-matrix": "Matrix",
  "x-mitre-collection": "Collection",
  relationship: "Relationship",
  file: "",
  // not used in ATT&CK but used in sample_refs for Malware
  artifact: ""
  // not used in ATT&CK but used in sample_refs for Malware
  // 'observed-data': 'ObservedData',     // not used in ATT&CK
  // 'report': 'Report',                  // not used in ATT&CK
  // 'threat-actor': 'ThreatActor',       // not used in ATT&CK
  // 'vulnerability': 'Vulnerability',    // not used in ATT&CK
};
var supportedStixTypes = [
  "attack-pattern",
  "bundle",
  "campaign",
  "course-of-action",
  "identity",
  "intrusion-set",
  "malware",
  "tool",
  "marking-definition",
  "x-mitre-data-component",
  "x-mitre-data-source",
  "x-mitre-tactic",
  "x-mitre-asset",
  "x-mitre-matrix",
  "x-mitre-collection",
  "relationship",
  "file",
  // not used in ATT&CK but used in sample_refs for Malware
  "artifact"
  // not used in ATT&CK but used in sample_refs for Malware
  // "indicator",         // not used in ATT&CK
  // "observed-data",     // not used in ATT&CK
  // "report",            // not used in ATT&CK
  // "threat-actor",      // not used in ATT&CK
  // "vulnerability",     // not used in ATT&CK
];
var stixTypeSchema = z.enum(supportedStixTypes, {
  errorMap: (issue, ctx) => {
    if (issue.code === "invalid_enum_value") {
      const received = typeof ctx.data === "string" ? ctx.data : String(ctx.data);
      return {
        message: `Invalid STIX type '${received}'. Expected one of the supported STIX types.`
      };
    }
    return { message: ctx.defaultError };
  }
}).describe(
  "The type property identifies the type of STIX Object (SDO, Relationship Object, etc). The value of the type field MUST be one of the types defined by a STIX Object (e.g., indicator)."
);
function createStixTypeValidator(stixType) {
  const objectName = stixTypeToTypeName[stixType];
  return z.string().superRefine((val, ctx) => {
    if (val !== stixType) {
      ctx.addIssue({
        code: z.ZodIssueCode.custom,
        message: `Invalid 'type' property. Expected '${stixType}' for ${objectName} object, but received '${val}'.`
      });
      return z.NEVER;
    }
  });
}
function createMultiStixTypeValidator(stixTypes) {
  const objectNames = stixTypes.map((type) => stixTypeToTypeName[type]).join(" or ");
  const typeList = stixTypes.map((t) => `'${t}'`).join(" or ");
  return z.string().superRefine((val, ctx) => {
    if (!stixTypes.includes(val)) {
      ctx.addIssue({
        code: z.ZodIssueCode.custom,
        message: `Invalid 'type' property. Expected ${typeList} for ${objectNames} object, but received '${val}'.`
      });
      return z.NEVER;
    }
  });
}

export {
  stixTypeToTypeName,
  stixTypeSchema,
  createStixTypeValidator,
  createMultiStixTypeValidator
};