[Security Solution] Replace PrebuiltRuleAsset schema construction with Zod transform

[jpdjere]

Summary

Pending work from: #186615

• The previous implementation to create PrebuiltRuleAsset with some RuleResponse fields ommited from it had the disadvantage of being built with a discriminated union where all rule types had to be re-listed. If a new type was added, then it would have required manually adding the type to that union as well, which would have been surely forgotten.
• This replaces that schema construction to use a Zod transform which simply eliminates the omitted fields using a Zod transform.

For maintainers

• This was checked for breaking API changes and was labeled appropriately

[jpdjere]

/ci

[elasticmachine]

⏳ Build in-progress, with failures

• Buildkite Build
• Commit: 3cb95cc

Failed CI Steps

• Jest Tests #15
• Jest Tests #15
• Check Types

Test Failures

• [job] [logs] Jest Tests #15 / Prebuilt rule asset schema [rule_id, description, from, to, index, name, severity, interval, type, filter, risk_score, output_index, threat] does validate
• [job] [logs] Jest Tests #15 / Prebuilt rule asset schema [rule_id, description, from, to, index, name, severity, interval, type, filter, risk_score, output_index, threat] does validate
• [job] [logs] Jest Tests #15 / Prebuilt rule asset schema [rule_id, description, from, to, index, name, severity, interval, type, filter, risk_score, version] does validate
• [job] [logs] Jest Tests #15 / Prebuilt rule asset schema [rule_id, description, from, to, index, name, severity, interval, type, filter, risk_score, version] does validate
• [job] [logs] Jest Tests #15 / Prebuilt rule asset schema exception_list [rule_id, description, from, to, index, name, severity, interval, type, filter, risk_score, note, version, and empty exceptions_list] does validate
• [job] [logs] Jest Tests #15 / Prebuilt rule asset schema exception_list [rule_id, description, from, to, index, name, severity, interval, type, filter, risk_score, note, version, and empty exceptions_list] does validate
• [job] [logs] Jest Tests #15 / Prebuilt rule asset schema exception_list [rule_id, description, from, to, index, name, severity, interval, type, filters, risk_score, note, version, and exceptions_list] does validate
• [job] [logs] Jest Tests #15 / Prebuilt rule asset schema exception_list [rule_id, description, from, to, index, name, severity, interval, type, filters, risk_score, note, version, and exceptions_list] does validate
• [job] [logs] Jest Tests #15 / Prebuilt rule asset schema exception_list [rule_id, description, from, to, index, name, severity, interval, type, filters, risk_score, note, version, and non-existent exceptions_list] does validate with empty exceptions_list
• [job] [logs] Jest Tests #15 / Prebuilt rule asset schema exception_list [rule_id, description, from, to, index, name, severity, interval, type, filters, risk_score, note, version, and non-existent exceptions_list] does validate with empty exceptions_list
• [job] [logs] Jest Tests #15 / Prebuilt rule asset schema exception_list rule_id, description, from, to, index, name, severity, interval, type, filters, risk_score, note, version, and invalid exceptions_list] does NOT validate
• [job] [logs] Jest Tests #15 / Prebuilt rule asset schema exception_list rule_id, description, from, to, index, name, severity, interval, type, filters, risk_score, note, version, and invalid exceptions_list] does NOT validate
• [job] [logs] Jest Tests #15 / Prebuilt rule asset schema note [rule_id, description, from, to, index, name, severity, interval, type, filter, risk_score, note] does validate
• [job] [logs] Jest Tests #15 / Prebuilt rule asset schema note [rule_id, description, from, to, index, name, severity, interval, type, filter, risk_score, note] does validate

History

cc @jpdjere

[elasticmachine]

Pinging @elastic/security-detections-response (Team:Detections and Resp)

[elasticmachine]

Pinging @elastic/security-solution (Team: SecuritySolution)

[elasticmachine]

Pinging @elastic/security-detection-rule-management (Team:Detection Rule Management)

[jpdjere]

/ci

[banderror]

🎉

[banderror]

Very cool, this is much simpler than reconstructing type specific props from scratch. And it even creates a correct type for TypeSpecificFields which I didn't expect! Also it's extensible: this way we could omit any other fields from other rule types. Very-very cool!