import {z} from 'zod'

export type LegacyPolicySrcOrDestType = 'EXCHANGE' | 'UNMANAGED' | 'VAULT' | 'NETWORK_CONNECTION' | 'COMPOUND' | 'FIAT_ACCOUNT' | 'ONE_TIME_ADDRESS' | '*';

export type LegacyPolicySrcOrDestSubType = 'EXTERNAL' | 'INTERNAL' | 'CONTRACT' | 'EXCHANGETEST' | '*';

export type LegacyPolicySrcOrDestId = string;

export type LegacySrcOrDestAttributes = Array<LegacyPolicySrcOrDestId | LegacyPolicySrcOrDestType | LegacyPolicySrcOrDestSubType>;

export type LegacyAmountAggregationTimePeriodMethod = 'PER_SINGLE_MATCH' | 'ACROSS_ALL_MATCHES';

export type LegacyPolicyRule = {operator?: string | undefined, operators?: ({wildcard?: '*' | undefined, users?: Array<string> | undefined, usersGroups?: Array<string> | undefined, services?: Array<string> | undefined}) | undefined, transactionType?: ('TRANSFER' | 'CONTRACT_CALL' | 'APPROVE' | 'MINT' | 'BURN' | 'SUPPLY' | 'REDEEM' | 'STAKE' | 'RAW' | 'TYPED_MESSAGE' | 'PROGRAM_CALL') | undefined, designatedSigner?: string | undefined, designatedSigners?: ({users?: Array<string> | undefined, usersGroups?: Array<string> | undefined}) | undefined, type: 'TRANSFER', action: 'ALLOW' | 'BLOCK' | '2-TIER', asset: string, srcType?: LegacyPolicySrcOrDestType | undefined, srcSubType?: LegacyPolicySrcOrDestSubType | undefined, srcId?: LegacyPolicySrcOrDestId | undefined, src?: ({ids?: Array<LegacySrcOrDestAttributes> | undefined}) | undefined, dstType?: LegacyPolicySrcOrDestType | undefined, dstSubType?: LegacyPolicySrcOrDestSubType | undefined, dstId?: LegacyPolicySrcOrDestId | undefined, dst?: ({ids?: Array<LegacySrcOrDestAttributes> | undefined}) | undefined, dstAddressType?: ('WHITELISTED' | 'ONE_TIME' | '*') | undefined, amountCurrency: 'USD' | 'EUR' | 'NATIVE', amountScope: 'SINGLE_TX' | 'TIMEFRAME', amount: string | number, periodSec: number, authorizers?: Array<string> | undefined, authorizersCount?: number | undefined, authorizationGroups?: ({logic?: ('AND' | 'OR') | undefined, allowOperatorAsAuthorizer?: boolean | undefined, groups?: (Array<{users?: Array<string> | undefined, usersGroups?: Array<string> | undefined, th?: number | undefined}>) | undefined}) | undefined, amountAggregation?: ({operators?: LegacyAmountAggregationTimePeriodMethod | undefined, srcTransferPeers?: LegacyAmountAggregationTimePeriodMethod | undefined, dstTransferPeers?: LegacyAmountAggregationTimePeriodMethod | undefined}) | undefined, rawMessageSigning?: ({algorithm?: string | undefined, derivationPath?: ({path?: Array<number> | undefined}) | undefined}) | undefined, applyForApprove?: boolean | undefined, applyForTypedMessage?: boolean | undefined, externalDescriptor?: string | undefined};

export type LegacyPolicyRules = {rules?: Array<LegacyPolicyRule> | undefined};

export type CreateApiTapPublishArgs = {'Idempotency-Key'?: string | undefined, body: LegacyPolicyRules};

export type CreateApiTapPublishOptions = {baseUrl?: string | undefined, fetch?: typeof fetch | undefined};

export const legacyPolicyStatus = z.enum(["SUCCESS", "UNVALIDATED", "INVALID_CONFIGURATION", "PENDING", "PENDING_CONSOLE_APPROVAL", "AWAITING_QUORUM", "UNHANDLED_ERROR"]);

export const legacyPolicySrcOrDestType = z.enum(["EXCHANGE", "UNMANAGED", "VAULT", "NETWORK_CONNECTION", "COMPOUND", "FIAT_ACCOUNT", "ONE_TIME_ADDRESS", "*"]);

export const legacyPolicySrcOrDestSubType = z.enum(["EXTERNAL", "INTERNAL", "CONTRACT", "EXCHANGETEST", "*"]);

export const legacyPolicySrcOrDestId = z.string();

export const legacySrcOrDestAttributes = z.array(z.union([legacyPolicySrcOrDestId, legacyPolicySrcOrDestType, legacyPolicySrcOrDestSubType]));

export const legacyAmountAggregationTimePeriodMethod = z.enum(["PER_SINGLE_MATCH", "ACROSS_ALL_MATCHES"]);

export const legacyPolicyRule = z.object({operator: z.string().optional(), operators: z.object({wildcard: z.literal("*").optional(), users: z.array(z.string()).optional(), usersGroups: z.array(z.string()).optional(), services: z.array(z.string()).optional()}).optional(), transactionType: z.enum(["TRANSFER", "CONTRACT_CALL", "APPROVE", "MINT", "BURN", "SUPPLY", "REDEEM", "STAKE", "RAW", "TYPED_MESSAGE", "PROGRAM_CALL"]).optional(), designatedSigner: z.string().optional(), designatedSigners: z.object({users: z.array(z.string()).optional(), usersGroups: z.array(z.string()).optional()}).optional(), type: z.literal("TRANSFER"), action: z.enum(["ALLOW", "BLOCK", "2-TIER"]), asset: z.string(), srcType: legacyPolicySrcOrDestType.optional(), srcSubType: legacyPolicySrcOrDestSubType.optional(), srcId: legacyPolicySrcOrDestId.optional(), src: z.object({ids: z.array(legacySrcOrDestAttributes).optional()}).optional(), dstType: legacyPolicySrcOrDestType.optional(), dstSubType: legacyPolicySrcOrDestSubType.optional(), dstId: legacyPolicySrcOrDestId.optional(), dst: z.object({ids: z.array(legacySrcOrDestAttributes).optional()}).optional(), dstAddressType: z.enum(["WHITELISTED", "ONE_TIME", "*"]).optional(), amountCurrency: z.enum(["USD", "EUR", "NATIVE"]), amountScope: z.enum(["SINGLE_TX", "TIMEFRAME"]), amount: z.union([z.string(), z.number()]), periodSec: z.number(), authorizers: z.array(z.string()).optional(), authorizersCount: z.number().optional(), authorizationGroups: z.object({logic: z.enum(["AND", "OR"]).optional(), allowOperatorAsAuthorizer: z.boolean().optional(), groups: z.array(z.object({users: z.array(z.string()).optional(), usersGroups: z.array(z.string()).optional(), th: z.number().optional()})).optional()}).optional(), amountAggregation: z.object({operators: legacyAmountAggregationTimePeriodMethod.optional(), srcTransferPeers: legacyAmountAggregationTimePeriodMethod.optional(), dstTransferPeers: legacyAmountAggregationTimePeriodMethod.optional()}).optional(), rawMessageSigning: z.object({algorithm: z.string().optional(), derivationPath: z.object({path: z.array(z.number()).optional()}).optional()}).optional(), applyForApprove: z.boolean().optional(), applyForTypedMessage: z.boolean().optional(), externalDescriptor: z.string().optional()});

export const legacyPolicyRuleError = z.object({errorMessage: z.string(), errorCode: z.number(), errorCodeName: z.string(), errorField: z.enum(["operator", "operators", "authorizationGroups", "designatedSigner", "designatedSigners", "contractMethods", "amountAggregation", "src", "dst"])});

export const legacyPolicyRuleCheckResult = z.object({index: z.number(), status: z.enum(["ok", "failure"]), errors: z.array(legacyPolicyRuleError)});

export const legacyPolicyCheckResult = z.object({errors: z.number(), results: z.array(legacyPolicyRuleCheckResult)});

export const legacyPolicyMetadata = z.object({editedBy: z.string().optional(), editedAt: z.string().optional(), publishedBy: z.string().optional(), publishedAt: z.string().optional()});

export const legacyPublishResult = z.object({status: legacyPolicyStatus, rules: z.array(legacyPolicyRule), checkResult: legacyPolicyCheckResult, metadata: legacyPolicyMetadata});

export const validateResponse = async <Output>(
  schema: {
    readonly '~standard': {
      readonly validate: (value: unknown) => ({ readonly value: Output; readonly issues?: undefined } | { readonly issues: ReadonlyArray<{ readonly message: string; readonly path?: ReadonlyArray<PropertyKey | { readonly key: PropertyKey }> | undefined }> }) | Promise<{ readonly value: Output; readonly issues?: undefined } | { readonly issues: ReadonlyArray<{ readonly message: string; readonly path?: ReadonlyArray<PropertyKey | { readonly key: PropertyKey }> | undefined }> }>
    }
  },
  value: unknown
): Promise<Output> => {
  const result = await schema['~standard'].validate(value)

  if (result.issues !== undefined) {
    const detail = result.issues
      .map(({ message, path }) =>
        path?.length
          ? `${path.map((segment) => String(typeof segment === 'object' ? segment.key : segment)).join('.')}: ${message}`
          : message
      )
      .join('; ')

    throw new Error(`Response does not match the schema: ${detail}`, { cause: { issues: result.issues } })
  }

  return result.value
};

/**
 * Send publish request for a set of policy rules
 * 
 * POST /tap/publish
 */
export const createApiTapPublish = async (args: CreateApiTapPublishArgs, options?: CreateApiTapPublishOptions) => {
const {baseUrl = "https://api.fireblocks.io/v1", fetch: fetchFn = fetch} = options ?? {}

const query = new URLSearchParams()
const headers = new Headers()
headers.set('content-type', "application/json")
headers.set('accept', "application/json")

if (args['Idempotency-Key'] != null) headers.set("Idempotency-Key", String(args['Idempotency-Key']))

const url = `${baseUrl.replace(/\/+$/, '')}/tap/publish${query.size > 0 ? `?${query}` : ''}`

const res = await fetchFn(url, {method: "POST", headers, body: JSON.stringify(args.body)})

if (!res.ok) throw new Error(`Request failed with status ${res.status}`, {cause: {status: res.status, body: await res.text()}})

return validateResponse(legacyPublishResult, await res.json())
};