import {z} from 'zod'

export type GetApiOrgsOrgActionsPoliciesPolicyIdArgs = {org: string, policy_id: number};

export type GetApiOrgsOrgActionsPoliciesPolicyIdOptions = {baseUrl?: string | undefined, fetch?: typeof fetch | undefined};

export const repositoryRuleEnforcement = z.enum(["disabled", "active", "evaluate"]);

export const actionsPolicyRepoConditions = z.union([z.object({}), z.object({workflow_path: z.object({include: z.array(z.string()), exclude: z.array(z.string())})})]);

export const repositoryRulesetConditionsRepositoryPropertySpec = z.object({name: z.string(), property_values: z.array(z.string()), source: z.enum(["custom", "system"]).optional()});

export const actionsPolicyOrgConditions = z.union([z.object({repository_name: z.object({include: z.array(z.string()).optional(), exclude: z.array(z.string()).optional(), protected: z.boolean().optional()}), workflow_path: z.object({include: z.array(z.string()), exclude: z.array(z.string())}).optional()}), z.object({repository_id: z.object({repository_ids: z.array(z.number().int()).optional()}), workflow_path: z.object({include: z.array(z.string()), exclude: z.array(z.string())}).optional()}), z.object({repository_property: z.object({include: z.array(repositoryRulesetConditionsRepositoryPropertySpec).optional(), exclude: z.array(repositoryRulesetConditionsRepositoryPropertySpec).optional()}), workflow_path: z.object({include: z.array(z.string()), exclude: z.array(z.string())}).optional()})]);

export const enterpriseRulesetConditionsOrganizationPropertySpec = z.object({name: z.string(), property_values: z.array(z.string())});

export const actionsPolicyEnterpriseConditions = z.union([z.object({organization_name: z.object({include: z.array(z.string()).optional(), exclude: z.array(z.string()).optional()}), repository_name: z.object({include: z.array(z.string()).optional(), exclude: z.array(z.string()).optional(), protected: z.boolean().optional()}), workflow_path: z.object({include: z.array(z.string()), exclude: z.array(z.string())}).optional()}), z.object({organization_name: z.object({include: z.array(z.string()).optional(), exclude: z.array(z.string()).optional()}), repository_property: z.object({include: z.array(repositoryRulesetConditionsRepositoryPropertySpec).optional(), exclude: z.array(repositoryRulesetConditionsRepositoryPropertySpec).optional()}), workflow_path: z.object({include: z.array(z.string()), exclude: z.array(z.string())}).optional()}), z.object({organization_id: z.object({organization_ids: z.array(z.number().int()).optional()}), repository_name: z.object({include: z.array(z.string()).optional(), exclude: z.array(z.string()).optional(), protected: z.boolean().optional()}), workflow_path: z.object({include: z.array(z.string()), exclude: z.array(z.string())}).optional()}), z.object({organization_id: z.object({organization_ids: z.array(z.number().int()).optional()}), repository_property: z.object({include: z.array(repositoryRulesetConditionsRepositoryPropertySpec).optional(), exclude: z.array(repositoryRulesetConditionsRepositoryPropertySpec).optional()}), workflow_path: z.object({include: z.array(z.string()), exclude: z.array(z.string())}).optional()}), z.object({organization_property: z.object({include: z.array(enterpriseRulesetConditionsOrganizationPropertySpec).optional(), exclude: z.array(enterpriseRulesetConditionsOrganizationPropertySpec).optional()}), repository_name: z.object({include: z.array(z.string()).optional(), exclude: z.array(z.string()).optional(), protected: z.boolean().optional()}), workflow_path: z.object({include: z.array(z.string()), exclude: z.array(z.string())}).optional()}), z.object({organization_property: z.object({include: z.array(enterpriseRulesetConditionsOrganizationPropertySpec).optional(), exclude: z.array(enterpriseRulesetConditionsOrganizationPropertySpec).optional()}), repository_property: z.object({include: z.array(repositoryRulesetConditionsRepositoryPropertySpec).optional(), exclude: z.array(repositoryRulesetConditionsRepositoryPropertySpec).optional()}), workflow_path: z.object({include: z.array(z.string()), exclude: z.array(z.string())}).optional()})]);

export const actionsRuleParamsActor = z.object({id: z.number().int(), type: z.enum(["User", "Bot", "Team", "BusinessTeam", "EnterpriseTeam", "IntegrationInstallation", "App", "RepositoryRole"])});

export const actionsRule = z.union([z.object({type: z.literal("restrict_actions_actors"), parameters: z.object({allowed_actors: z.array(actionsRuleParamsActor)}).optional()}), z.object({type: z.literal("restrict_action_events"), parameters: z.object({allowed_events: z.array(z.enum(["branch_protection_rule", "check_run", "check_suite", "create", "delete", "deployment", "deployment_status", "discussion", "discussion_comment", "fork", "gollum", "image_version", "issue_comment", "issues", "label", "merge_group", "milestone", "page_build", "project", "project_card", "project_column", "public", "pull_request", "pull_request_review", "pull_request_review_comment", "pull_request_target", "push", "registry_package", "release", "repository_dispatch", "schedule", "status", "watch", "workflow_call", "workflow_dispatch", "workflow_run"]))}).optional()})]);

export const actionsPolicy = z.object({id: z.number().int(), name: z.string(), target: z.literal("actions"), source_type: z.enum(["Repository", "Organization", "Enterprise"]), source: z.string(), enforcement: repositoryRuleEnforcement, conditions: z.union([actionsPolicyRepoConditions, actionsPolicyOrgConditions, actionsPolicyEnterpriseConditions]).nullable().optional(), rules: z.array(actionsRule).optional(), node_id: z.string().optional(), _links: z.object({self: z.object({href: z.string().optional()}).optional(), html: z.object({href: z.string().optional()}).optional()}).optional(), created_at: z.string().optional(), updated_at: z.string().optional()});

export const validateResponse = async <Output>(
  schema: {
    readonly '~standard': {
      readonly validate: (value: unknown) => ({ readonly value: Output; readonly issues?: undefined } | { readonly issues: ReadonlyArray<{ readonly message: string; readonly path?: ReadonlyArray<PropertyKey | { readonly key: PropertyKey }> | undefined }> }) | Promise<{ readonly value: Output; readonly issues?: undefined } | { readonly issues: ReadonlyArray<{ readonly message: string; readonly path?: ReadonlyArray<PropertyKey | { readonly key: PropertyKey }> | undefined }> }>
    }
  },
  value: unknown
): Promise<Output> => {
  const result = await schema['~standard'].validate(value)

  if (result.issues !== undefined) {
    const detail = result.issues
      .map(({ message, path }) =>
        path?.length
          ? `${path.map((segment) => String(typeof segment === 'object' ? segment.key : segment)).join('.')}: ${message}`
          : message
      )
      .join('; ')

    throw new Error(`Response does not match the schema: ${detail}`, { cause: { issues: result.issues } })
  }

  return result.value
};

/**
 * Get an organization Actions policy
 * 
 * GET /orgs/{org}/actions/policies/{policy_id}
 */
export const getApiOrgsOrgActionsPoliciesPolicyId = async (args: GetApiOrgsOrgActionsPoliciesPolicyIdArgs, options?: GetApiOrgsOrgActionsPoliciesPolicyIdOptions) => {
const {baseUrl = "https://api.github.com", fetch: fetchFn = fetch} = options ?? {}

const query = new URLSearchParams()
const headers = new Headers()
headers.set('accept', "application/json")

const url = `${baseUrl.replace(/\/+$/, '')}/orgs/${encodeURIComponent(String(args.org))}/actions/policies/${encodeURIComponent(String(args.policy_id))}${query.size > 0 ? `?${query}` : ''}`

const res = await fetchFn(url, {method: "GET", headers})

if (!res.ok) throw new Error(`Request failed with status ${res.status}`, {cause: {status: res.status, body: await res.text()}})

return validateResponse(actionsPolicy, await res.json())
};