import {z} from 'zod'

export type PolicyType = 'content' | 'user' | 'risk' | 'cost' | 'context_aware' | 'media' | 'rate-limit' | 'budget' | 'time-access' | 'role-access' | 'mcp' | 'connector';

export type ConditionOperator = 'equals' | 'not_equals' | 'contains' | 'not_contains' | 'contains_any' | 'regex' | 'greater_than' | 'less_than' | 'in' | 'not_in';

export type PolicyCondition = {field: 'query' | 'response' | 'user.email' | 'user.role' | 'user.department' | 'user.tenant_id' | 'risk_score' | 'request_type' | 'connector' | 'cost_estimate' | 'media.has_faces' | 'media.face_count' | 'media.has_biometric_data' | 'media.nsfw_score' | 'media.violence_score' | 'media.content_safe' | 'media.document_type' | 'media.is_sensitive_document' | 'media.has_pii' | 'media.pii_types' | 'media.has_extracted_text' | 'media.extracted_text_length' | 'step.gate_count' | 'step.completion_count' | 'step.prior_completion_status' | 'step.prior_output_available' | 'step.last_decision' | 'step.first_attempt_age_seconds' | 'step.idempotency_key', operator: ConditionOperator, value: string | number | boolean | Array<string>};

export type ActionType = 'block' | 'require_approval' | 'redact' | 'warn' | 'alert' | 'log' | 'route' | 'modify_risk';

export type PolicyAction = {type: ActionType, config?: {[key: string]: unknown} | undefined};

export type UpdatePolicyRequest = {name?: string | undefined, description?: string | undefined, type?: PolicyType | undefined, category?: string | undefined, conditions?: Array<PolicyCondition> | undefined, actions?: Array<PolicyAction> | undefined, priority?: number | undefined, enabled?: boolean | undefined, tags?: Array<string> | undefined};

export type UpdateApiApiV1DynamicPoliciesIdArgs = {'X-User-ID'?: string | undefined, body: UpdatePolicyRequest};

export type UpdateApiApiV1DynamicPoliciesIdOptions = {baseUrl?: string | undefined, fetch?: typeof fetch | undefined};

export const policyType = z.enum(["content", "user", "risk", "cost", "context_aware", "media", "rate-limit", "budget", "time-access", "role-access", "mcp", "connector"]);

export const conditionOperator = z.enum(["equals", "not_equals", "contains", "not_contains", "contains_any", "regex", "greater_than", "less_than", "in", "not_in"]);

export const policyCondition = z.object({field: z.enum(["query", "response", "user.email", "user.role", "user.department", "user.tenant_id", "risk_score", "request_type", "connector", "cost_estimate", "media.has_faces", "media.face_count", "media.has_biometric_data", "media.nsfw_score", "media.violence_score", "media.content_safe", "media.document_type", "media.is_sensitive_document", "media.has_pii", "media.pii_types", "media.has_extracted_text", "media.extracted_text_length", "step.gate_count", "step.completion_count", "step.prior_completion_status", "step.prior_output_available", "step.last_decision", "step.first_attempt_age_seconds", "step.idempotency_key"]), operator: conditionOperator, value: z.union([z.string(), z.number(), z.boolean(), z.array(z.string())])});

export const actionType = z.enum(["block", "require_approval", "redact", "warn", "alert", "log", "route", "modify_risk"]);

export const policyAction = z.object({type: actionType, config: z.record(z.string(), z.unknown()).optional()});

export const policyResource = z.object({id: z.string().optional(), name: z.string().min(3).max(100).optional(), description: z.string().max(500).optional(), type: policyType.optional(), category: z.string().optional(), tier: z.enum(["system", "organization", "tenant"]).optional(), conditions: z.array(policyCondition).optional(), actions: z.array(policyAction).optional(), priority: z.number().int().gte(0).lte(1000).optional(), enabled: z.boolean().optional(), version: z.number().int().gte(1).optional(), tenant_id: z.string().optional(), organization_id: z.string().optional(), tags: z.array(z.string()).optional(), created_at: z.string().optional(), updated_at: z.string().optional(), created_by: z.string().optional(), updated_by: z.string().optional(), deleted_at: z.string().optional()});

export const policyResponse = z.object({policy: policyResource.optional()});

export const validateResponse = async <Output>(
  schema: {
    readonly '~standard': {
      readonly validate: (value: unknown) => ({ readonly value: Output; readonly issues?: undefined } | { readonly issues: ReadonlyArray<{ readonly message: string; readonly path?: ReadonlyArray<PropertyKey | { readonly key: PropertyKey }> | undefined }> }) | Promise<{ readonly value: Output; readonly issues?: undefined } | { readonly issues: ReadonlyArray<{ readonly message: string; readonly path?: ReadonlyArray<PropertyKey | { readonly key: PropertyKey }> | undefined }> }>
    }
  },
  value: unknown
): Promise<Output> => {
  const result = await schema['~standard'].validate(value)

  if (result.issues !== undefined) {
    const detail = result.issues
      .map(({ message, path }) =>
        path?.length
          ? `${path.map((segment) => String(typeof segment === 'object' ? segment.key : segment)).join('.')}: ${message}`
          : message
      )
      .join('; ')

    throw new Error(`Response does not match the schema: ${detail}`, { cause: { issues: result.issues } })
  }

  return result.value
};

/**
 * Update a dynamic policy
 * 
 * PUT /api/v1/dynamic-policies/{id}
 */
export const updateApiApiV1DynamicPoliciesId = async (args: UpdateApiApiV1DynamicPoliciesIdArgs, options?: UpdateApiApiV1DynamicPoliciesIdOptions) => {
const {baseUrl = "https://agent.getaxonflow.com", fetch: fetchFn = fetch} = options ?? {}

const query = new URLSearchParams()
const headers = new Headers()
headers.set('content-type', "application/json")
headers.set('accept', "application/json")

if (args['X-User-ID'] != null) headers.set("X-User-ID", String(args['X-User-ID']))

const url = `${baseUrl.replace(/\/+$/, '')}/api/v1/dynamic-policies/${encodeURIComponent(String(args.id))}${query.size > 0 ? `?${query}` : ''}`

const res = await fetchFn(url, {method: "PUT", headers, body: JSON.stringify(args.body)})

if (!res.ok) throw new Error(`Request failed with status ${res.status}`, {cause: {status: res.status, body: await res.text()}})

return validateResponse(policyResponse, await res.json())
};