import {z} from 'zod'

export type AnthropicBeta = string | 'message-batches-2024-09-24' | 'prompt-caching-2024-07-31' | 'computer-use-2024-10-22' | 'computer-use-2025-01-24' | 'pdfs-2024-09-25' | 'token-counting-2024-11-01' | 'token-efficient-tools-2025-02-19' | 'output-128k-2025-02-19' | 'files-api-2025-04-14' | 'mcp-client-2025-04-04' | 'mcp-client-2025-11-20' | 'dev-full-thinking-2025-05-14' | 'interleaved-thinking-2025-05-14' | 'code-execution-2025-05-22' | 'extended-cache-ttl-2025-04-11' | 'context-1m-2025-08-07' | 'context-management-2025-06-27' | 'model-context-window-exceeded-2025-08-26' | 'skills-2025-10-02' | 'fast-mode-2026-02-01' | 'output-300k-2026-03-24' | 'user-profiles-2026-03-24' | 'user-profiles-2026-08-18' | 'user-profiles-2026-09-04' | 'advisor-tool-2026-03-01' | 'managed-agents-2026-04-01' | 'cache-diagnosis-2026-04-07' | 'dreaming-2026-04-21' | 'thinking-token-count-2026-05-13' | 'server-side-fallback-2026-06-01' | 'server-side-fallback-2026-07-01' | 'fallback-credit-2026-06-01' | 'fallback-credit-2026-07-01' | 'agent-memory-2026-07-22' | 'mid-conversation-tool-changes-2026-07-01' | 'compact-2026-01-12' | 'computer-use-2025-11-24' | 'mcp-tunnels-2026-06-22' | 'structured-outputs-2025-11-13' | 'task-budgets-2026-03-13' | 'thinking-display-updates-2026-08-18' | 'ce-user-management-2026-07-13' | 'mid-conversation-output-config-2026-07-01' | 'thinking-binding-controls-2026-08-01' | 'mid-conversation-system-clear-at-2026-08-21' | 'compact-2026-09-04' | 'inline-tools-2026-09-15' | 'mcp-client-2026-09-15' | 'ce-plugins-2026-09-01' | 'spend-limit-reads-2026-09-26' | 'telemetry-destinations-2026-08-11' | 'webhooks-2026-10-07' | 'admin-user-sign-out-2026-10-08' | 'message-threads-2026-08-12' | 'analytics-usage-cost-2026-08-24' | 'experimental-claude-tag-2026-10-21';

export type BetaTimestamp = string;

export type BetaManagedAgentsMcpOauthRefreshUpdateParams = {refresh_token?: (string | null) | undefined, scope?: (string | null) | undefined, token_endpoint_auth?: ({type: 'client_secret_basic', client_secret?: (string | null) | undefined} | {type: 'client_secret_post', client_secret?: (string | null) | undefined}) | undefined};

export type BetaManagedAgentsCredentialNetworkingParams = {type: 'unrestricted'} | {type: 'limited', allowed_hosts: Array<string>};

export type BetaManagedAgentsInjectionLocationUpdateParams = {header?: boolean | undefined, body?: boolean | undefined};

export type BetaManagedAgentsCredentialUpdateAuth = {type: 'mcp_oauth', access_token?: (string | null) | undefined, expires_at?: (BetaTimestamp | null) | undefined, refresh?: (BetaManagedAgentsMcpOauthRefreshUpdateParams | null) | undefined} | {type: 'static_bearer', token?: (string | null) | undefined} | {type: 'environment_variable', secret_value?: (string | null) | undefined, networking?: (BetaManagedAgentsCredentialNetworkingParams | null) | undefined, injection_location?: BetaManagedAgentsInjectionLocationUpdateParams | undefined};

export type BetaManagedAgentsUpdateCredentialRequestBody = {display_name?: (string | null) | undefined, metadata?: ({[key: string]: string | null} | null) | undefined, auth?: BetaManagedAgentsCredentialUpdateAuth | undefined};

export type CreateApiV1VaultsVaultIdCredentialsCredentialIdBetaTrueArgs = {'anthropic-version'?: string | undefined, 'anthropic-beta'?: Array<AnthropicBeta> | undefined, vault_id: string, credential_id: string, 'anthropic-workspace-id'?: string | undefined, body: BetaManagedAgentsUpdateCredentialRequestBody};

export type CreateApiV1VaultsVaultIdCredentialsCredentialIdBetaTrueOptions = {baseUrl?: string | undefined, fetch?: typeof fetch | undefined};

export const betaTimestamp = z.string();

export const betaManagedAgentsMcpOauthRefreshResponse = z.object({token_endpoint: z.string(), client_id: z.string(), resource: z.string().nullable().optional(), scope: z.string().nullable().optional(), token_endpoint_auth: z.discriminatedUnion("type", [z.object({type: z.literal("none")}), z.object({type: z.literal("client_secret_basic")}), z.object({type: z.literal("client_secret_post")})])});

export const betaManagedAgentsCredentialNetworkingResponse = z.discriminatedUnion("type", [z.object({type: z.literal("unrestricted")}), z.object({type: z.literal("limited"), allowed_hosts: z.array(z.string())})]);

export const betaManagedAgentsInjectionLocationResponse = z.object({header: z.boolean(), body: z.boolean()});

export const betaManagedAgentsCredentialAuth = z.discriminatedUnion("type", [z.object({type: z.literal("mcp_oauth"), mcp_server_url: z.string(), expires_at: betaTimestamp.nullable().optional(), refresh: betaManagedAgentsMcpOauthRefreshResponse.nullable().optional()}), z.object({type: z.literal("static_bearer"), mcp_server_url: z.string()}), z.object({type: z.literal("environment_variable"), secret_name: z.string(), networking: betaManagedAgentsCredentialNetworkingResponse, injection_location: betaManagedAgentsInjectionLocationResponse})]);

export const betaManagedAgentsCredential = z.object({type: z.literal("vault_credential"), id: z.string(), vault_id: z.string(), display_name: z.string().nullable().optional(), metadata: z.record(z.string(), z.string()), created_at: betaTimestamp, updated_at: betaTimestamp, archived_at: betaTimestamp.nullable(), auth: betaManagedAgentsCredentialAuth});

export const validateResponse = async <Output>(
  schema: {
    readonly '~standard': {
      readonly validate: (value: unknown) => ({ readonly value: Output; readonly issues?: undefined } | { readonly issues: ReadonlyArray<{ readonly message: string; readonly path?: ReadonlyArray<PropertyKey | { readonly key: PropertyKey }> | undefined }> }) | Promise<{ readonly value: Output; readonly issues?: undefined } | { readonly issues: ReadonlyArray<{ readonly message: string; readonly path?: ReadonlyArray<PropertyKey | { readonly key: PropertyKey }> | undefined }> }>
    }
  },
  value: unknown
): Promise<Output> => {
  const result = await schema['~standard'].validate(value)

  if (result.issues !== undefined) {
    const detail = result.issues
      .map(({ message, path }) =>
        path?.length
          ? `${path.map((segment) => String(typeof segment === 'object' ? segment.key : segment)).join('.')}: ${message}`
          : message
      )
      .join('; ')

    throw new Error(`Response does not match the schema: ${detail}`, { cause: { issues: result.issues } })
  }

  return result.value
};

/**
 * Update a Credential
 * 
 * POST /v1/vaults/{vault_id}/credentials/{credential_id}?beta=true
 */
export const createApiV1VaultsVaultIdCredentialsCredentialIdBetaTrue = async (args: CreateApiV1VaultsVaultIdCredentialsCredentialIdBetaTrueArgs, options?: CreateApiV1VaultsVaultIdCredentialsCredentialIdBetaTrueOptions) => {
const {baseUrl = "https://api.anthropic.com", fetch: fetchFn = fetch} = options ?? {}

const query = new URLSearchParams()
const headers = new Headers()
headers.set('content-type', "application/json")
headers.set('accept', "application/json")

if (args['anthropic-version'] != null) headers.set("anthropic-version", String(args['anthropic-version']))
if (args['anthropic-beta'] != null) headers.set("anthropic-beta", args['anthropic-beta'].join(','))
if (args['anthropic-workspace-id'] != null) headers.set("anthropic-workspace-id", String(args['anthropic-workspace-id']))

const url = `${baseUrl.replace(/\/+$/, '')}/v1/vaults/${encodeURIComponent(String(args.vault_id))}/credentials/${encodeURIComponent(String(args.credential_id))}?beta=true${query.size > 0 ? `?${query}` : ''}`

const res = await fetchFn(url, {method: "POST", headers, body: JSON.stringify(args.body)})

if (!res.ok) throw new Error(`Request failed with status ${res.status}`, {cause: {status: res.status, body: await res.text()}})

return validateResponse(betaManagedAgentsCredential, await res.json())
};