import {z} from 'zod'

export type Type = 'policy' | 'cost' | 'resource' | 'tag';

export type ListGuardrailsFilters = {createdBy?: Array<string> | undefined, type?: Array<Type> | undefined, labels?: Array<string> | undefined, repositories?: Array<string> | undefined, workspaces?: Array<string> | undefined, branches?: Array<string> | undefined};

export type SortConfig = {order?: (-1 | 1) | undefined};

export type GuardrailSortField = {createdAt?: SortConfig | undefined, accountId?: SortConfig | undefined, createdBy?: SortConfig | undefined, name?: SortConfig | undefined, severity?: SortConfig | undefined};

export type ListGuardrailsRequest = {projection?: Array<string> | undefined, searchValue?: string | undefined, filters?: ({createdBy?: Array<string> | undefined, type?: Array<Type> | undefined, labels?: Array<string> | undefined, repositories?: Array<string> | undefined, workspaces?: Array<string> | undefined, branches?: Array<string> | undefined, $or?: ListGuardrailsFilters | undefined}) | undefined, sort?: Array<GuardrailSortField> | undefined};

export type CreateApiGuardrailsSearchArgs = {page?: number | undefined, pageSize?: number | undefined, body: ListGuardrailsRequest};

export type CreateApiGuardrailsSearchOptions = {baseUrl?: string | undefined, JWTAuth?: string | undefined, fetch?: typeof fetch | undefined};

export const costCriteria = z.union([z.object({thresholdAmount: z.number(), thresholdPercentage: z.number().optional()}), z.object({thresholdAmount: z.number().optional(), thresholdPercentage: z.number()})]);

export const policies = z.object({include: z.array(z.string()).optional(), exclude: z.array(z.string()).optional()});

export const policyCriteria = z.object({severity: z.string().optional(), policies: policies.optional()});

export const resourceActionEnum = z.enum(["no-op", "create", "read", "update", "delete"]);

export const resourceCriteria = z.object({actions: z.array(resourceActionEnum), regions: z.object({include: z.array(z.string()), exclude: z.array(z.string()).optional()}), assetTypes: z.object({include: z.array(z.string()), exclude: z.array(z.string()).optional()}), specificResources: z.array(z.string()).optional()});

export const anyTagsCriteria = z.object({tagEnforcementMode: z.literal("anyTags")});

export const requiredTagsCriteria = z.object({tagEnforcementMode: z.literal("requiredTags"), requiredTags: z.array(z.string())});

export const requiredValuesCriteria = z.object({tagEnforcementMode: z.literal("requiredValues"), requiredValues: z.record(z.string(), z.array(z.string()))});

export const tagCriteria = z.union([anyTagsCriteria, requiredTagsCriteria, requiredValuesCriteria]);

export const criteria = z.object({cost: costCriteria.optional(), policy: policyCriteria.optional(), resource: resourceCriteria.optional(), tag: tagCriteria.optional()});

export const guardrailRule = z.object({id: z.string().optional(), accountId: z.string().optional(), createdBy: z.string().min(1).optional(), name: z.string().min(1).optional(), type: z.enum(["policy", "cost", "resource", "tag"]).optional(), scope: z.object({workspaces: z.object({include: z.array(z.string()), exclude: z.array(z.string()).optional()}), repositories: z.object({include: z.array(z.string()), exclude: z.array(z.string()).optional()}), branches: z.object({include: z.array(z.string()), exclude: z.array(z.string()).optional()}), labels: z.object({include: z.array(z.string()), exclude: z.array(z.string()).optional()})}).optional(), criteria: criteria.optional(), isEnabled: z.boolean().optional(), createdAt: z.string().optional(), updatedAt: z.string().optional(), notificationId: z.string().optional(), severity: z.union([z.literal(0), z.literal(1), z.literal(2), z.literal(3), z.literal(4)]).optional(), enforceOnNoOp: z.boolean().optional()});

export const createApiGuardrailsSearchResponse = z.array(guardrailRule);

export const validateResponse = async <Output>(
  schema: {
    readonly '~standard': {
      readonly validate: (value: unknown) => ({ readonly value: Output; readonly issues?: undefined } | { readonly issues: ReadonlyArray<{ readonly message: string; readonly path?: ReadonlyArray<PropertyKey | { readonly key: PropertyKey }> | undefined }> }) | Promise<{ readonly value: Output; readonly issues?: undefined } | { readonly issues: ReadonlyArray<{ readonly message: string; readonly path?: ReadonlyArray<PropertyKey | { readonly key: PropertyKey }> | undefined }> }>
    }
  },
  value: unknown
): Promise<Output> => {
  const result = await schema['~standard'].validate(value)

  if (result.issues !== undefined) {
    const detail = result.issues
      .map(({ message, path }) =>
        path?.length
          ? `${path.map((segment) => String(typeof segment === 'object' ? segment.key : segment)).join('.')}: ${message}`
          : message
      )
      .join('; ')

    throw new Error(`Response does not match the schema: ${detail}`, { cause: { issues: result.issues } })
  }

  return result.value
};

/**
 * List Guardrail Rules
 * 
 * POST /guardrails/search
 */
export const createApiGuardrailsSearch = async (args: CreateApiGuardrailsSearchArgs, options?: CreateApiGuardrailsSearchOptions) => {
const {baseUrl = "https://api.firefly.ai/v2", fetch: fetchFn = fetch, JWTAuth} = options ?? {}

const query = new URLSearchParams()
const headers = new Headers()
headers.set('content-type', "application/json")
headers.set('accept', "application/json")

if (args.page != null) query.append("page", String(args.page))
if (args.pageSize != null) query.append("pageSize", String(args.pageSize))
if (JWTAuth !== undefined) headers.set('authorization', `Bearer ${JWTAuth}`)

const url = `${baseUrl.replace(/\/+$/, '')}/guardrails/search${query.size > 0 ? `?${query}` : ''}`

const res = await fetchFn(url, {method: "POST", headers, body: JSON.stringify(args.body)})

if (!res.ok) throw new Error(`Request failed with status ${res.status}`, {cause: {status: res.status, body: await res.text()}})

return validateResponse(createApiGuardrailsSearchResponse, await res.json())
};