@greensecurity/javascript-sdk 0.45.0-beta.9 → 0.46.0-beta.1

package/src/admin-funcs/kioskUpdateKioskDevice.ts

@@ -0,0 +1,23 @@
+import { APIPromise } from "../types/async.js";
+import { $doPut, internalApiResult } from "./doAdmin.js";
+
+export type KioskUpdateKioskDeviceRequest = {
+  apns_token?: string;
+  kiosk_id?: number;
+  user_id?: number;
+  sandbox?: boolean;
+} & Record<string, unknown>;
+
+// Updates kiosk device fields (e.g. the APNS push token after registration).
+export function kioskUpdateKioskDevice(
+  kioskDeviceId: number,
+  securityToken: string,
+  request: KioskUpdateKioskDeviceRequest,
+): internalApiResult {
+  return new APIPromise(
+    $doPut(
+      `/kiosk-api/${kioskDeviceId}/${encodeURIComponent(securityToken)}/kiosk-devices/${kioskDeviceId}`,
+      request,
+    )
+  );
+}

package/src/admin-funcs/listCommunications.ts

@@ -0,0 +1,29 @@
+import { APIPromise } from "../types/async.js";
+import { $doGetSingle, hashToQueryString, internalApiResult } from "./doAdmin.js";
+
+// The banners, pop-ups and in-app notifications aimed at the signed-in user (GSSD-7336).
+//
+// Internal rather than part of the public spec: "the adverts for whoever is holding this token"
+// is only meaningful to our own portal, and a third-party SDK consumer has no use for it. See
+// the public/app-only split in AGENTS.md.
+//
+// The response is already filtered and ordered by the server — audience matched per caller,
+// page matched, anything still suppressed by a dismissal removed, and sorted by priority — so a
+// caller renders the list as it arrives.
+//
+// pageKey narrows to the communications configured for one page. Omitting it returns every
+// communication for the user, which is what a caller that does its own page matching wants.
+export function listCommunications(
+  pageKey?: string | null,
+  itemsPerPage: number = 100,
+): internalApiResult {
+  const query: Record<string, string | number> = { items_per_page: itemsPerPage };
+  if (pageKey) {
+    query["page_key"] = pageKey;
+  }
+
+  return new APIPromise($doGetSingle(
+    `/communications?${hashToQueryString(query)}`,
+    {},
+  ));
+}

package/src/admin-funcs/networksCreate.ts

@@ -0,0 +1,101 @@
+import { APIPromise } from "../types/async.js";
+import { $doPost, $doPostForm, internalApiResult } from "./doAdmin.js";
+
+export type networkIpConfig = "DHCP" | "Static";
+export type networkEncryptionType = "WPA2-PSK" | "WPA2-EAP";
+export type networkAuthMethod = "EAP-TLS" | "PEAP" | "EAP-TTLS" | "EAP-GTC";
+
+export type networkEthernetSettings = {
+  ip_config?: networkIpConfig;
+  ip_address?: string;
+  netmask?: string;
+  gateway_address?: string;
+};
+
+export type networkWifiSettings = {
+  ssid?: string;
+  identity?: string;
+  password?: string;
+  encryption_type?: networkEncryptionType;
+  pre_shared_key?: string;
+  auth_method?: networkAuthMethod;
+  ip_config?: networkIpConfig;
+  ip_address?: string;
+  netmask?: string;
+  gateway_address?: string;
+};
+
+// A file to send with the create. React Native's FormData takes this shape rather than a Blob.
+export type networksCreateCertificate = {
+  uri: string;
+  name: string;
+  type: string;
+};
+
+// Keys are the wire names rather than camelCase because the object is posted verbatim, the same
+// way subscriptionUpdateFacilitiesRequest is.
+export type networksCreateRequest = {
+  name: string;
+  facility_ids: number[];
+  setup_complete?: boolean;
+  ethernet?: networkEthernetSettings;
+  wifi?: networkWifiSettings;
+};
+
+// Creates a network and links it to the facilities that will use it.
+//
+// Internal for the same reason as networksList: provisioning our own hardware, and this one also
+// carries Wi-Fi credentials. See the public/app-only split in AGENTS.md.
+//
+// The enum-shaped fields are spelled out as unions because the server rejects anything outside
+// them, and a rejected network is worth catching at the call site rather than as a 422. The
+// response is still untyped Json, so this only buys safety on the way in.
+//
+// facility_ids is authorized before anything persists: naming a facility the caller cannot reach
+// fails the whole create rather than silently dropping that link.
+// A certificate turns the request multipart. Without one the JSON path is unchanged, which
+// matters because every existing caller goes through it.
+export function networksCreate(
+  request: networksCreateRequest,
+  certificate?: networksCreateCertificate,
+): internalApiResult {
+  if (!certificate) {
+    return new APIPromise($doPost("/networks", request));
+  }
+
+  const form = new FormData();
+  appendField(form, "name", request.name);
+  request.facility_ids.forEach((id) => form.append("facility_ids[]", String(id)));
+  if (request.setup_complete !== undefined) {
+    appendField(form, "setup_complete", request.setup_complete);
+  }
+  appendSection(form, "ethernet", request.ethernet);
+  appendSection(form, "wifi", request.wifi);
+  // RN's FormData accepts {uri,name,type} where the DOM expects a Blob, hence the cast.
+  form.append("certificate", certificate as unknown as Blob);
+
+  return new APIPromise($doPostForm("/networks", form));
+}
+
+function appendField(form: FormData, key: string, value: string | number | boolean): void {
+  form.append(key, String(value));
+}
+
+// Nested as `wifi[ssid]`, which is the shape Rails parses back into a nested hash — so the
+// handler's payload contract is identical either way. Undefined and empty values are left out:
+// the handler drops empty form values anyway, and omitting a section means "not configured".
+function appendSection(
+  form: FormData,
+  name: string,
+  section: Record<string, string | undefined> | undefined,
+): void {
+  if (!section) {
+    return;
+  }
+
+  Object.entries(section).forEach(([key, value]) => {
+    if (value !== undefined && value !== "") {
+      appendField(form, `${name}[${key}]`, value);
+    }
+  });
+}

package/src/admin-funcs/networksGet.ts

@@ -0,0 +1,13 @@
+import { APIPromise } from "../types/async.js";
+import { $doGetSingle, internalApiResult } from "./doAdmin.js";
+
+// One network, for the screen that edits it after networksList picked it out.
+//
+// Internal for the same reason as networksList: provisioning our own hardware. See the
+// public/app-only split in AGENTS.md.
+//
+// A network outside the caller's scope answers 404 rather than 403, so a caller cannot use the
+// response to learn that an id it may not reach exists.
+export function networksGet(networkId: number): internalApiResult {
+  return new APIPromise($doGetSingle(`/networks/${networkId}`, {}));
+}

package/src/admin-funcs/networksList.ts

@@ -0,0 +1,56 @@
+import { APIPromise } from "../types/async.js";
+import { $doGetSingle, internalApiResult } from "./doAdmin.js";
+
+export type networksListSortField =
+  | "id"
+  | "name"
+  | "setup_complete"
+  | "created_at"
+  | "updated_at";
+
+export type networksListRequest = {
+  facilityId?: number;
+  setupComplete?: boolean;
+  page?: number;
+  itemsPerPage?: number;
+  sort?: networksListSortField;
+  desc?: boolean;
+};
+
+// The Wi-Fi/Ethernet configurations a facility hands to its Gatekeeper devices.
+//
+// Internal rather than part of the public spec: a network only means anything to the admin
+// surfaces that provision our own hardware, and it carries the shape of credentials we hold on
+// the operator's behalf — not something a third-party SDK consumer has any use for. See the
+// public/app-only split in AGENTS.md.
+//
+// Every filter is optional and the server answers with the caller's own scope when none is
+// given, so the no-argument call is the safe default rather than a request for everything.
+//
+// setupComplete is checked against undefined rather than for truthiness: `false` is a filter a
+// caller genuinely wants (the networks still being provisioned), not an absent one.
+export function networksList(
+  request: networksListRequest = {},
+): internalApiResult {
+  const query: Record<string, string | number | boolean> = {};
+  if (request.facilityId !== undefined) {
+    query["facility_id"] = request.facilityId;
+  }
+  if (request.setupComplete !== undefined) {
+    query["setup_complete"] = request.setupComplete;
+  }
+  if (request.page !== undefined) {
+    query["page"] = request.page;
+  }
+  if (request.itemsPerPage !== undefined) {
+    query["items_per_page"] = request.itemsPerPage;
+  }
+  if (request.sort !== undefined) {
+    query["sort"] = request.sort;
+  }
+  if (request.desc !== undefined) {
+    query["desc"] = request.desc;
+  }
+
+  return new APIPromise($doGetSingle("/networks", query));
+}

package/src/admin-funcs/zoneDevicesGet.ts

@@ -0,0 +1,13 @@
+import { APIPromise } from "../types/async.js";
+import { $doGetSingle, internalApiResult } from "./doAdmin.js";
+
+// One zone device (a gateway), for the detail screen zoneDevicesList leads to.
+//
+// Internal for the same reason as zoneDevicesList: our own device inventory. See the
+// public/app-only split in AGENTS.md.
+//
+// Gateways only. The kiosks that zoneDevicesList folds into the same list live in a different
+// table and are not addressable here, so their ids do not belong in this call.
+export function zoneDevicesGet(zoneDeviceId: number): internalApiResult {
+  return new APIPromise($doGetSingle(`/zone-devices/${zoneDeviceId}`, {}));
+}

package/src/admin-funcs/zoneDevicesList.ts

@@ -0,0 +1,47 @@
+import { APIPromise } from "../types/async.js";
+import { $doGetSingle, internalApiResult } from "./doAdmin.js";
+
+export type zoneDevicesListSortField = "id" | "name";
+
+export type zoneDevicesListRequest = {
+  facilityId?: number;
+  page?: number;
+  itemsPerPage?: number;
+  sort?: zoneDevicesListSortField;
+  desc?: boolean;
+};
+
+// The caller's devices — kiosks and zone gateways alike — grouped by facility.
+//
+// Internal rather than part of the public spec: this is the device inventory behind our own
+// admin surfaces, and it merges two unrelated tables into a shape only those screens read. See
+// the public/app-only split in AGENTS.md.
+//
+// The page is a page of FACILITIES, not of devices: paging the devices would cut a facility in
+// half, so `itemsPerPage` counts facilities and the nested device arrays come back whole. A
+// facility holds a handful of devices, so those arrays stay bounded.
+//
+// Facilities holding no device at all are left out, so an empty response means the caller
+// reaches no device rather than that the filter matched nothing.
+export function zoneDevicesList(
+  request: zoneDevicesListRequest = {},
+): internalApiResult {
+  const query: Record<string, string | number | boolean> = {};
+  if (request.facilityId !== undefined) {
+    query["facility_id"] = request.facilityId;
+  }
+  if (request.page !== undefined) {
+    query["page"] = request.page;
+  }
+  if (request.itemsPerPage !== undefined) {
+    query["items_per_page"] = request.itemsPerPage;
+  }
+  if (request.sort !== undefined) {
+    query["sort"] = request.sort;
+  }
+  if (request.desc !== undefined) {
+    query["desc"] = request.desc;
+  }
+
+  return new APIPromise($doGetSingle("/zone-devices", query));
+}

package/src/funcs/alertsListAlerts.ts

@@ -38,6 +38,8 @@ import {
  * @remarks
  * List alerts for user.
  *
+ * **Permissions.** Requires the `alerts.view` permission.
+ *
  * If set, this operation will use {@link Security.bearerJwt} from the global security.
  */
 export function alertsListAlerts(

package/src/funcs/alertsUpdateUserAlerts.ts

@@ -32,6 +32,8 @@ import { Result } from "../types/fp.js";
  * @remarks
  * Update user alerts
  *
+ * **Permissions.** Requires the `alerts.edit` permission.
+ *
  * If set, this operation will use {@link Security.bearerJwt} from the global security.
  */
 export function alertsUpdateUserAlerts(

package/src/funcs/companiesAddCompanyManager.ts

@@ -35,6 +35,8 @@ import { Result } from "../types/fp.js";
  * Requires `company_managers` add permission. Company managers can add to their
  * own company; API users can add to companies in their marketplace app scope.
  *
+ * **Permissions.** Requires the `company_managers.add` permission.
+ *
  * If set, this operation will use {@link Security.bearerJwt} from the global security.
  */
 export function companiesAddCompanyManager(

package/src/funcs/companiesGetCompany.ts

@@ -33,10 +33,14 @@ import { Result } from "../types/fp.js";
  * @remarks
  * Get company details.
  *
+ * **Permissions.** Requires the `companies.view` permission.
+ *
  * Available `expand` scopes are:
  *
- * company.location
- * company.vendor_type_restrictions
+ * - `company.location`
+ * - `company.vendor_type_restrictions`
+ *
+ * Any other value is rejected with `422 Unprocessable Entity`.
  *
  * If set, this operation will use {@link Security.bearerJwt} from the global security.
  */

package/src/funcs/companiesListCompanyCredentials.ts

@@ -38,6 +38,14 @@ import {
  * @remarks
  * Lists credentials required for the specified company, based on CompanyRequiredCredentials.
  *
+ * **Permissions.** Requires the `vendor_credentials.view` permission. Callers who also hold `vendor_credentials.add` and can update the company trigger a recalculation of the required-credential set; everyone else reads the last computed set.
+ *
+ * Available `expand` scopes are:
+ *
+ * - `vendor_credential.systems`
+ *
+ * Any other value is rejected with `422 Unprocessable Entity`.
+ *
  * If set, this operation will use {@link Security.bearerJwt} from the global security.
  */
 export function companiesListCompanyCredentials(

package/src/funcs/companiesListCompanyCredits.ts

@@ -38,6 +38,16 @@ import {
  * @remarks
  * Returns a paginated list of credits associated with the specified company, including incoming and outgoing transactions.
  *
+ * **Permissions.** Requires the `company_credits.view` permission.
+ *
+ * Available `expand` scopes are:
+ *
+ * - `entity`
+ * - `from_entity`
+ * - `to_entity`
+ *
+ * Any other value is rejected with `422 Unprocessable Entity`.
+ *
  * If set, this operation will use {@link Security.bearerJwt} from the global security.
  */
 export function companiesListCompanyCredits(

package/src/funcs/companiesListCompanyManagerContacts.ts

@@ -0,0 +1,185 @@
+/*
+ * Code generated by Speakeasy (https://speakeasy.com). DO NOT EDIT.
+ */
+
+import { GreenSecurityCore } from "../core.js";
+import { encodeSimple } from "../lib/encodings.js";
+import { matchStatusCode } from "../lib/http.js";
+import * as M from "../lib/matchers.js";
+import { compactMap } from "../lib/primitives.js";
+import { safeParse } from "../lib/schemas.js";
+import { RequestOptions } from "../lib/sdks.js";
+import { extractSecurity, resolveGlobalSecurity } from "../lib/security.js";
+import { pathToFunc } from "../lib/url.js";
+import { GreenSecurityError } from "../models/errors/greensecurityerror.js";
+import {
+  ConnectionError,
+  InvalidRequestError,
+  RequestAbortedError,
+  RequestTimeoutError,
+  UnexpectedClientError,
+} from "../models/errors/httpclienterrors.js";
+import * as errors from "../models/errors/index.js";
+import { ResponseValidationError } from "../models/errors/responsevalidationerror.js";
+import { SDKValidationError } from "../models/errors/sdkvalidationerror.js";
+import * as operations from "../models/operations/index.js";
+import { APICall, APIPromise } from "../types/async.js";
+import { Result } from "../types/fp.js";
+
+/**
+ * List the contact details of a company's managers
+ *
+ * @remarks
+ * Deprecated in favor of `/lookups/company_managers`, which returns the same list. Kept so app builds released before the move keep working.
+ * **Permissions.** Requires a valid token. This endpoint is not gated on a named permission - the caller's role and their relationship to the record decide what is returned.
+ *
+ * @deprecated method: This will be removed in a future release, please migrate away from it as soon as possible.
+ */
+export function companiesListCompanyManagerContacts(
+  client: GreenSecurityCore,
+  request: operations.ListCompanyManagerContactsRequest,
+  options?: RequestOptions,
+): APIPromise<
+  Result<
+    operations.ListCompanyManagerContactsListCompanyManagerContactsOk,
+    | errors.ApiErrorResponse
+    | GreenSecurityError
+    | ResponseValidationError
+    | ConnectionError
+    | RequestAbortedError
+    | RequestTimeoutError
+    | InvalidRequestError
+    | UnexpectedClientError
+    | SDKValidationError
+  >
+> {
+  return new APIPromise($do(
+    client,
+    request,
+    options,
+  ));
+}
+
+async function $do(
+  client: GreenSecurityCore,
+  request: operations.ListCompanyManagerContactsRequest,
+  options?: RequestOptions,
+): Promise<
+  [
+    Result<
+      operations.ListCompanyManagerContactsListCompanyManagerContactsOk,
+      | errors.ApiErrorResponse
+      | GreenSecurityError
+      | ResponseValidationError
+      | ConnectionError
+      | RequestAbortedError
+      | RequestTimeoutError
+      | InvalidRequestError
+      | UnexpectedClientError
+      | SDKValidationError
+    >,
+    APICall,
+  ]
+> {
+  const parsed = safeParse(
+    request,
+    (value) =>
+      operations.ListCompanyManagerContactsRequest$outboundSchema.parse(value),
+    "Input validation failed",
+  );
+  if (!parsed.ok) {
+    return [parsed, { status: "invalid" }];
+  }
+  const payload = parsed.value;
+  const body = null;
+
+  const pathParams = {
+    company_id: encodeSimple("company_id", payload.company_id, {
+      explode: false,
+      charEncoding: "percent",
+    }),
+  };
+  const path = pathToFunc("/companies/{company_id}/manager-contacts")(
+    pathParams,
+  );
+
+  const headers = new Headers(compactMap({
+    Accept: "application/json",
+  }));
+
+  const securityInput = await extractSecurity(client._options.security);
+  const requestSecurity = resolveGlobalSecurity(securityInput);
+
+  const context = {
+    options: client._options,
+    baseURL: options?.serverURL ?? client._baseURL ?? "",
+    operationID: "listCompanyManagerContacts",
+    oAuth2Scopes: null,
+
+    resolvedSecurity: requestSecurity,
+
+    securitySource: client._options.security,
+    retryConfig: options?.retries
+      || client._options.retryConfig
+      || { strategy: "none" },
+    retryCodes: options?.retryCodes || ["429", "500", "502", "503", "504"],
+  };
+
+  const requestRes = client._createRequest(context, {
+    security: requestSecurity,
+    method: "GET",
+    baseURL: options?.serverURL,
+    path: path,
+    headers: headers,
+    body: body,
+    userAgent: client._options.userAgent,
+    timeoutMs: options?.timeoutMs || client._options.timeoutMs || -1,
+  }, options);
+  if (!requestRes.ok) {
+    return [requestRes, { status: "invalid" }];
+  }
+  const req = requestRes.value;
+
+  const doResult = await client._do(req, {
+    context,
+    isErrorStatusCode: (statusCode: number) =>
+      matchStatusCode({ status: statusCode } as Response, ["4XX", "5XX"]),
+    retryConfig: context.retryConfig,
+    retryCodes: context.retryCodes,
+  });
+  if (!doResult.ok) {
+    return [doResult, { status: "request-error", request: req }];
+  }
+  const response = doResult.value;
+
+  const responseFields = {
+    HttpMeta: { Response: response, Request: req },
+  };
+
+  const [result] = await M.match<
+    operations.ListCompanyManagerContactsListCompanyManagerContactsOk,
+    | errors.ApiErrorResponse
+    | GreenSecurityError
+    | ResponseValidationError
+    | ConnectionError
+    | RequestAbortedError
+    | RequestTimeoutError
+    | InvalidRequestError
+    | UnexpectedClientError
+    | SDKValidationError
+  >(
+    M.json(
+      200,
+      operations
+        .ListCompanyManagerContactsListCompanyManagerContactsOk$inboundSchema,
+    ),
+    M.jsonErr([400, 401, 403, 404], errors.ApiErrorResponse$inboundSchema),
+    M.fail("4XX"),
+    M.fail([500, "5XX"]),
+  )(response, req, { extraFields: responseFields });
+  if (!result.ok) {
+    return [result, { status: "complete", request: req, response }];
+  }
+
+  return [result, { status: "complete", request: req, response }];
+}

package/src/funcs/companiesListCompanyManagers.ts

@@ -38,6 +38,8 @@ import {
  * @remarks
  * List or search company managers.
  *
+ * **Permissions.** Requires the `company_managers.view` permission.
+ *
  * If set, this operation will use {@link Security.bearerJwt} from the global security.
  */
 export function companiesListCompanyManagers(

package/src/funcs/companiesListOrSearchCompanies.ts

@@ -38,6 +38,15 @@ import {
  * @remarks
  * List or search companies.
  *
+ * **Permissions.** Requires the `companies.view` permission.
+ *
+ * Available `expand` scopes are:
+ *
+ * - `company.location`
+ * - `company.vendor_type_restrictions`
+ *
+ * Any other value is rejected with `422 Unprocessable Entity`.
+ *
  * If set, this operation will use {@link Security.bearerJwt} from the global security.
  */
 export function companiesListOrSearchCompanies(

package/src/funcs/companiesLookupCompanies.ts

@@ -38,6 +38,8 @@ import {
  * @remarks
  * List companies available to the caller as minimal lookup summaries for dropdown and typeahead UIs.
  *
+ * **Permissions.** Requires the `companies.view` permission.
+ *
  * If set, this operation will use {@link Security.bearerJwt} from the global security.
  */
 export function companiesLookupCompanies(

package/src/funcs/dataRequestsAddDataRequestFile.ts

@@ -33,6 +33,8 @@ import * as types$ from "../types/primitives.js";
  * @remarks
  * It will set the vendor credential data request file attributes
  *
+ * **Permissions.** Requires the `vendor-credential-data-requests.view` permission.
+ *
  * If set, this operation will use {@link Security.bearerJwt} from the global security.
  */
 export function dataRequestsAddDataRequestFile(

package/src/funcs/dataRequestsDeleteDataRequestFile.ts

@@ -33,6 +33,8 @@ import * as types$ from "../types/primitives.js";
  * @remarks
  * It will delete the vendor credential data request file
  *
+ * **Permissions.** Requires the `vendor-credential-data-requests.delete` permission.
+ *
  * If set, this operation will use {@link Security.bearerJwt} from the global security.
  */
 export function dataRequestsDeleteDataRequestFile(

package/src/funcs/dataRequestsUpdateDataRequest.ts

@@ -33,6 +33,8 @@ import * as types$ from "../types/primitives.js";
  * @remarks
  * It will update the vendor credential data request attributes
  *
+ * **Permissions.** Requires the `vendor-credential-data-requests.view` permission.
+ *
  * If set, this operation will use {@link Security.bearerJwt} from the global security.
  */
 export function dataRequestsUpdateDataRequest(

package/src/funcs/eventsAcceptInvitation.ts

@@ -32,6 +32,8 @@ import { Result } from "../types/fp.js";
  * @remarks
  * Accept event invitation
  *
+ * **Permissions.** Requires the `events.edit` permission.
+ *
  * If set, this operation will use {@link Security.bearerJwt} from the global security.
  */
 export function eventsAcceptInvitation(

package/src/funcs/eventsCreateEvent.ts

@@ -32,6 +32,8 @@ import { Result } from "../types/fp.js";
  * @remarks
  * Create a new event for calendar
  *
+ * **Permissions.** Requires the `events.add` permission.
+ *
  * If set, this operation will use {@link Security.bearerJwt} from the global security.
  */
 export function eventsCreateEvent(
@@ -42,6 +44,7 @@ export function eventsCreateEvent(
   Result<
     operations.CreateEventCreateEventOk,
     | errors.ApiErrorResponse
+    | errors.ApiValidationErrorResponse
     | GreenSecurityError
     | ResponseValidationError
     | ConnectionError
@@ -68,6 +71,7 @@ async function $do(
     Result<
       operations.CreateEventCreateEventOk,
       | errors.ApiErrorResponse
+      | errors.ApiValidationErrorResponse
       | GreenSecurityError
       | ResponseValidationError
       | ConnectionError
@@ -150,6 +154,7 @@ async function $do(
   const [result] = await M.match<
     operations.CreateEventCreateEventOk,
     | errors.ApiErrorResponse
+    | errors.ApiValidationErrorResponse
     | GreenSecurityError
     | ResponseValidationError
     | ConnectionError
@@ -161,6 +166,7 @@ async function $do(
   >(
     M.json(200, operations.CreateEventCreateEventOk$inboundSchema),
     M.jsonErr([400, 401, 403, 404], errors.ApiErrorResponse$inboundSchema),
+    M.jsonErr(422, errors.ApiValidationErrorResponse$inboundSchema),
     M.fail("4XX"),
     M.fail([500, "5XX"]),
   )(response, req, { extraFields: responseFields });