import {z} from 'zod'

export type V1IndexData = {data?: Array<string> | undefined, search_score?: number | undefined, tenant?: string | undefined, will_be_deleted_at?: string | undefined};

export type GoogleprotobufAny = {'@type'?: string | undefined} | {[key: string]: unknown};

export type V1Meta = {annotations?: {[key: string]: string} | undefined, create_time?: string | undefined, created_by?: string | undefined, description?: string | undefined, index_data?: V1IndexData | undefined, kind?: string | undefined, name: string, parent_kind?: string | undefined, parent_uuid?: string | undefined, references?: {[key: string]: GoogleprotobufAny} | undefined, tags?: Array<string> | undefined, update_time?: string | undefined, updated_by?: string | undefined, upsert_time?: string | undefined, version?: string | undefined};

export type PolicyAdmissionAction = {bypass_exceptions?: boolean | undefined, disable_enforcement?: boolean | undefined};

export type V1ExceptionReason = 'EXCEPTION_REASON_UNSPECIFIED' | 'EXCEPTION_REASON_FALSE_POSITIVE' | 'EXCEPTION_REASON_RISK_ACCEPTED' | 'EXCEPTION_REASON_IN_TRIAGE' | 'EXCEPTION_REASON_OTHER' | 'EXCEPTION_REASON_RESOLVED' | 'EXCEPTION_REASON_PRESENT_IN_BASELINE';

export type PolicyExceptionAction = {expiration_time?: string | undefined, reason: V1ExceptionReason, tags?: Array<string> | undefined};

export type V1FindingCategory = 'FINDING_CATEGORY_UNSPECIFIED' | 'FINDING_CATEGORY_VULNERABILITY' | 'FINDING_CATEGORY_SUPPLY_CHAIN' | 'FINDING_CATEGORY_LICENSE_RISK' | 'FINDING_CATEGORY_SCPM' | 'FINDING_CATEGORY_SECURITY' | 'FINDING_CATEGORY_OPERATIONAL' | 'FINDING_CATEGORY_SECRETS' | 'FINDING_CATEGORY_MALWARE' | 'FINDING_CATEGORY_CICD' | 'FINDING_CATEGORY_TOOLS' | 'FINDING_CATEGORY_GHACTIONS' | 'FINDING_CATEGORY_CONTAINER' | 'FINDING_CATEGORY_SAST' | 'FINDING_CATEGORY_AI_MODELS' | 'FINDING_CATEGORY_SECURITY_REVIEW' | 'FINDING_CATEGORY_SCA';

export type SpecFindingLevel = 'FINDING_LEVEL_UNSPECIFIED' | 'FINDING_LEVEL_CRITICAL' | 'FINDING_LEVEL_HIGH' | 'FINDING_LEVEL_MEDIUM' | 'FINDING_LEVEL_LOW';

export type V1FindingTags = 'FINDING_TAGS_UNSPECIFIED' | 'FINDING_TAGS_DIRECT' | 'FINDING_TAGS_TRANSITIVE' | 'FINDING_TAGS_PROJECT_INTERNAL' | 'FINDING_TAGS_NAMESPACE_INTERNAL' | 'FINDING_TAGS_REACHABLE_DEPENDENCY' | 'FINDING_TAGS_UNREACHABLE_DEPENDENCY' | 'FINDING_TAGS_POTENTIALLY_REACHABLE_DEPENDENCY' | 'FINDING_TAGS_REACHABLE_FUNCTION' | 'FINDING_TAGS_UNREACHABLE_FUNCTION' | 'FINDING_TAGS_POTENTIALLY_REACHABLE_FUNCTION' | 'FINDING_TAGS_FIXABLE' | 'FINDING_TAGS_UNFIXABLE' | 'FINDING_TAGS_PRODUCTION' | 'FINDING_TAGS_TEST' | 'FINDING_TAGS_NORMAL' | 'FINDING_TAGS_FIX_AVAILABLE' | 'FINDING_TAGS_SELF' | 'FINDING_TAGS_POLICY' | 'FINDING_TAGS_CI_BLOCKER' | 'FINDING_TAGS_VALID_SECRET' | 'FINDING_TAGS_INVALID_SECRET' | 'FINDING_TAGS_PATH_EXTERNAL' | 'FINDING_TAGS_MALWARE' | 'FINDING_TAGS_UNDER_REVIEW' | 'FINDING_TAGS_PHANTOM' | 'FINDING_TAGS_EXCEPTION' | 'FINDING_TAGS_CI_WARNING' | 'FINDING_TAGS_NOTIFICATION' | 'FINDING_TAGS_EXPLOITED' | 'FINDING_TAGS_DISPUTED' | 'FINDING_TAGS_WITHDRAWN' | 'FINDING_TAGS_FALSE_POSITIVE' | 'FINDING_TAGS_TRUE_POSITIVE' | 'FINDING_TAGS_SNOOZED' | 'FINDING_TAGS_AI' | 'FINDING_TAGS_IGNORED' | 'FINDING_TAGS_SEGMENT_MATCH' | 'FINDING_TAGS_REACHABLE_BY_INCLUSION' | 'FINDING_TAGS_POTENTIALLY_VALID_SECRET' | 'FINDING_TAGS_INFERRED';

export type PolicyFindingAction = {categories?: Array<V1FindingCategory> | undefined, explanation: string, external_name?: string | undefined, level: SpecFindingLevel, meta_tags?: Array<string> | undefined, remediation: string, summary: string, tags?: Array<V1FindingTags> | undefined, target_kind?: string | undefined};

export type NotificationActionAggregationType = 'AGGREGATION_TYPE_UNSPECIFIED' | 'AGGREGATION_TYPE_PROJECT' | 'AGGREGATION_TYPE_DEPENDENCY' | 'AGGREGATION_TYPE_DEPENDENCY_ACROSS_PKG_VERSIONS' | 'AGGREGATION_TYPE_NONE' | 'AGGREGATION_TYPE_MANUAL';

export type V1PolicyNotificationAction = {aggregation_type?: NotificationActionAggregationType | undefined, bypass_exceptions?: boolean | undefined, notification_target_uuids?: Array<string> | undefined, standalone_tickets?: boolean | undefined};

export type PolicyPolicyType = 'POLICY_TYPE_UNSPECIFIED' | 'POLICY_TYPE_ADMISSION' | 'POLICY_TYPE_NOTIFICATION' | 'POLICY_TYPE_FINDING' | 'POLICY_TYPE_FINDING_CFG' | 'POLICY_TYPE_ML_FINDING' | 'POLICY_TYPE_SYSTEM_FINDING' | 'POLICY_TYPE_USER_FINDING' | 'POLICY_TYPE_EXCEPTION' | 'POLICY_TYPE_REMEDIATION';

export type TemplateParameterQueryApiData = {filter?: string | undefined, input_field: string, namespace?: string | undefined, resource_kind: string};

export type PolicyTemplateParameter = {default_values?: Array<string> | undefined, description: string, multiple_ok?: boolean | undefined, name: string, possible_values?: Array<string> | undefined, possible_values_from_db?: TemplateParameterQueryApiData | undefined, required?: boolean | undefined, value: string};

export type PolicyTemplateParameterValues = {values?: Array<string> | undefined};

export type V1PolicySpec = {admission?: PolicyAdmissionAction | undefined, disable?: boolean | undefined, exception?: PolicyExceptionAction | undefined, finding?: PolicyFindingAction | undefined, finding_categories?: Array<V1FindingCategory> | undefined, finding_level?: SpecFindingLevel | undefined, group_by_fields?: Array<string> | undefined, notification?: V1PolicyNotificationAction | undefined, policy_type: PolicyPolicyType, project_exceptions?: Array<string> | undefined, project_selector?: Array<string> | undefined, query_statements?: Array<string> | undefined, resource_kinds?: Array<string> | undefined, rule?: string | undefined, template_parameters?: Array<PolicyTemplateParameter> | undefined, template_uuid?: string | undefined, template_values?: {[key: string]: PolicyTemplateParameterValues} | undefined, template_version?: string | undefined};

export type PolicyServiceCreatePolicyBody = {meta: V1Meta, propagate?: boolean | undefined, spec: V1PolicySpec, tenant_meta?: Record<string, never> | undefined, uuid?: string | undefined};

export type CreateApiV1NamespacesTenantMetaNamespacePoliciesArgs = {'tenant_meta.namespace': string, body: PolicyServiceCreatePolicyBody};

export type CreateApiV1NamespacesTenantMetaNamespacePoliciesOptions = {baseUrl?: string | undefined, fetch?: typeof fetch | undefined};

export const v1IndexData = z.object({data: z.array(z.string()).optional(), search_score: z.number().optional(), tenant: z.string().optional(), will_be_deleted_at: z.string().optional()});

export const googleprotobufAny = z.object({"@type": z.string().optional()}).and(z.record(z.string(), z.unknown()));

export const v1Meta = z.object({annotations: z.record(z.string(), z.string()).optional(), create_time: z.string().optional(), created_by: z.string().optional(), description: z.string().optional(), index_data: v1IndexData.optional(), kind: z.string().optional(), name: z.string(), parent_kind: z.string().optional(), parent_uuid: z.string().optional(), references: z.record(z.string(), googleprotobufAny).optional(), tags: z.array(z.string()).optional(), update_time: z.string().optional(), updated_by: z.string().optional(), upsert_time: z.string().optional(), version: z.string().optional()});

export const policyAdmissionAction = z.object({bypass_exceptions: z.boolean().optional(), disable_enforcement: z.boolean().optional()});

export const v1ExceptionReason = z.enum(["EXCEPTION_REASON_UNSPECIFIED", "EXCEPTION_REASON_FALSE_POSITIVE", "EXCEPTION_REASON_RISK_ACCEPTED", "EXCEPTION_REASON_IN_TRIAGE", "EXCEPTION_REASON_OTHER", "EXCEPTION_REASON_RESOLVED", "EXCEPTION_REASON_PRESENT_IN_BASELINE"]);

export const policyExceptionAction = z.object({expiration_time: z.string().optional(), reason: v1ExceptionReason, tags: z.array(z.string()).optional()});

export const v1FindingCategory = z.enum(["FINDING_CATEGORY_UNSPECIFIED", "FINDING_CATEGORY_VULNERABILITY", "FINDING_CATEGORY_SUPPLY_CHAIN", "FINDING_CATEGORY_LICENSE_RISK", "FINDING_CATEGORY_SCPM", "FINDING_CATEGORY_SECURITY", "FINDING_CATEGORY_OPERATIONAL", "FINDING_CATEGORY_SECRETS", "FINDING_CATEGORY_MALWARE", "FINDING_CATEGORY_CICD", "FINDING_CATEGORY_TOOLS", "FINDING_CATEGORY_GHACTIONS", "FINDING_CATEGORY_CONTAINER", "FINDING_CATEGORY_SAST", "FINDING_CATEGORY_AI_MODELS", "FINDING_CATEGORY_SECURITY_REVIEW", "FINDING_CATEGORY_SCA"]);

export const specFindingLevel = z.enum(["FINDING_LEVEL_UNSPECIFIED", "FINDING_LEVEL_CRITICAL", "FINDING_LEVEL_HIGH", "FINDING_LEVEL_MEDIUM", "FINDING_LEVEL_LOW"]);

export const v1FindingTags = z.enum(["FINDING_TAGS_UNSPECIFIED", "FINDING_TAGS_DIRECT", "FINDING_TAGS_TRANSITIVE", "FINDING_TAGS_PROJECT_INTERNAL", "FINDING_TAGS_NAMESPACE_INTERNAL", "FINDING_TAGS_REACHABLE_DEPENDENCY", "FINDING_TAGS_UNREACHABLE_DEPENDENCY", "FINDING_TAGS_POTENTIALLY_REACHABLE_DEPENDENCY", "FINDING_TAGS_REACHABLE_FUNCTION", "FINDING_TAGS_UNREACHABLE_FUNCTION", "FINDING_TAGS_POTENTIALLY_REACHABLE_FUNCTION", "FINDING_TAGS_FIXABLE", "FINDING_TAGS_UNFIXABLE", "FINDING_TAGS_PRODUCTION", "FINDING_TAGS_TEST", "FINDING_TAGS_NORMAL", "FINDING_TAGS_FIX_AVAILABLE", "FINDING_TAGS_SELF", "FINDING_TAGS_POLICY", "FINDING_TAGS_CI_BLOCKER", "FINDING_TAGS_VALID_SECRET", "FINDING_TAGS_INVALID_SECRET", "FINDING_TAGS_PATH_EXTERNAL", "FINDING_TAGS_MALWARE", "FINDING_TAGS_UNDER_REVIEW", "FINDING_TAGS_PHANTOM", "FINDING_TAGS_EXCEPTION", "FINDING_TAGS_CI_WARNING", "FINDING_TAGS_NOTIFICATION", "FINDING_TAGS_EXPLOITED", "FINDING_TAGS_DISPUTED", "FINDING_TAGS_WITHDRAWN", "FINDING_TAGS_FALSE_POSITIVE", "FINDING_TAGS_TRUE_POSITIVE", "FINDING_TAGS_SNOOZED", "FINDING_TAGS_AI", "FINDING_TAGS_IGNORED", "FINDING_TAGS_SEGMENT_MATCH", "FINDING_TAGS_REACHABLE_BY_INCLUSION", "FINDING_TAGS_POTENTIALLY_VALID_SECRET", "FINDING_TAGS_INFERRED"]);

export const policyFindingAction = z.object({categories: z.array(v1FindingCategory).optional(), explanation: z.string(), external_name: z.string().optional(), level: specFindingLevel, meta_tags: z.array(z.string()).optional(), remediation: z.string(), summary: z.string(), tags: z.array(v1FindingTags).optional(), target_kind: z.string().optional()});

export const notificationActionAggregationType = z.enum(["AGGREGATION_TYPE_UNSPECIFIED", "AGGREGATION_TYPE_PROJECT", "AGGREGATION_TYPE_DEPENDENCY", "AGGREGATION_TYPE_DEPENDENCY_ACROSS_PKG_VERSIONS", "AGGREGATION_TYPE_NONE", "AGGREGATION_TYPE_MANUAL"]);

export const v1PolicyNotificationAction = z.object({aggregation_type: notificationActionAggregationType.optional(), bypass_exceptions: z.boolean().optional(), notification_target_uuids: z.array(z.string()).optional(), standalone_tickets: z.boolean().optional()});

export const policyPolicyType = z.enum(["POLICY_TYPE_UNSPECIFIED", "POLICY_TYPE_ADMISSION", "POLICY_TYPE_NOTIFICATION", "POLICY_TYPE_FINDING", "POLICY_TYPE_FINDING_CFG", "POLICY_TYPE_ML_FINDING", "POLICY_TYPE_SYSTEM_FINDING", "POLICY_TYPE_USER_FINDING", "POLICY_TYPE_EXCEPTION", "POLICY_TYPE_REMEDIATION"]);

export const templateParameterQueryApiData = z.object({filter: z.string().optional(), input_field: z.string(), namespace: z.string().optional(), resource_kind: z.string()});

export const policyTemplateParameter = z.object({default_values: z.array(z.string()).optional(), description: z.string(), multiple_ok: z.boolean().optional(), name: z.string(), possible_values: z.array(z.string()).optional(), possible_values_from_db: templateParameterQueryApiData.optional(), required: z.boolean().optional(), value: z.string()});

export const policyTemplateParameterValues = z.object({values: z.array(z.string()).optional()});

export const v1PolicySpec = z.object({admission: policyAdmissionAction.optional(), disable: z.boolean().optional(), exception: policyExceptionAction.optional(), finding: policyFindingAction.optional(), finding_categories: z.array(v1FindingCategory).optional(), finding_level: specFindingLevel.optional(), group_by_fields: z.array(z.string()).optional(), notification: v1PolicyNotificationAction.optional(), policy_type: policyPolicyType, project_exceptions: z.array(z.string()).optional(), project_selector: z.array(z.string()).optional(), query_statements: z.array(z.string()).optional(), resource_kinds: z.array(z.string()).optional(), rule: z.string().optional(), template_parameters: z.array(policyTemplateParameter).optional(), template_uuid: z.string().optional(), template_values: z.record(z.string(), policyTemplateParameterValues).optional(), template_version: z.string().optional()});

export const v1TenantMeta = z.object({namespace: z.string()});

export const v1Policy = z.object({meta: v1Meta, propagate: z.boolean().optional(), spec: v1PolicySpec, tenant_meta: v1TenantMeta.optional(), uuid: z.string().optional()});

export const validateResponse = async <Output>(
  schema: {
    readonly '~standard': {
      readonly validate: (value: unknown) => ({ readonly value: Output; readonly issues?: undefined } | { readonly issues: ReadonlyArray<{ readonly message: string; readonly path?: ReadonlyArray<PropertyKey | { readonly key: PropertyKey }> | undefined }> }) | Promise<{ readonly value: Output; readonly issues?: undefined } | { readonly issues: ReadonlyArray<{ readonly message: string; readonly path?: ReadonlyArray<PropertyKey | { readonly key: PropertyKey }> | undefined }> }>
    }
  },
  value: unknown
): Promise<Output> => {
  const result = await schema['~standard'].validate(value)

  if (result.issues !== undefined) {
    const detail = result.issues
      .map(({ message, path }) =>
        path?.length
          ? `${path.map((segment) => String(typeof segment === 'object' ? segment.key : segment)).join('.')}: ${message}`
          : message
      )
      .join('; ')

    throw new Error(`Response does not match the schema: ${detail}`, { cause: { issues: result.issues } })
  }

  return result.value
};

/**
 * CreatePolicy
 * 
 * POST /v1/namespaces/{tenant_meta.namespace}/policies
 */
export const createApiV1NamespacesTenantMetaNamespacePolicies = async (args: CreateApiV1NamespacesTenantMetaNamespacePoliciesArgs, options?: CreateApiV1NamespacesTenantMetaNamespacePoliciesOptions) => {
const {baseUrl = "https://api.endorlabs.com", fetch: fetchFn = fetch} = options ?? {}

const query = new URLSearchParams()
const headers = new Headers()
headers.set('content-type', "application/json")
headers.set('accept', "application/json")

const url = `${baseUrl.replace(/\/+$/, '')}/v1/namespaces/${encodeURIComponent(String(args['tenant_meta.namespace']))}/policies${query.size > 0 ? `?${query}` : ''}`

const res = await fetchFn(url, {method: "POST", headers, body: JSON.stringify(args.body)})

if (!res.ok) throw new Error(`Request failed with status ${res.status}`, {cause: {status: res.status, body: await res.text()}})

return validateResponse(v1Policy, await res.json())
};