import {z} from 'zod'

export type RepositoryRuleEnforcement = 'disabled' | 'active' | 'evaluate';

export type RepositoryRulesetConditionsRepositoryPropertySpec = {name: string, property_values: Array<string>, source?: ('custom' | 'system') | undefined};

export type ActionsPolicyOrgConditions = {repository_name: {include?: Array<string> | undefined, exclude?: Array<string> | undefined, protected?: boolean | undefined}, workflow_path?: {include: Array<string>, exclude: Array<string>} | undefined} | {repository_id: {repository_ids?: Array<number> | undefined}, workflow_path?: {include: Array<string>, exclude: Array<string>} | undefined} | {repository_property: {include?: Array<RepositoryRulesetConditionsRepositoryPropertySpec> | undefined, exclude?: Array<RepositoryRulesetConditionsRepositoryPropertySpec> | undefined}, workflow_path?: {include: Array<string>, exclude: Array<string>} | undefined};

export type ActionsRuleParamsActor = {id: number, type: 'User' | 'Bot' | 'Team' | 'BusinessTeam' | 'EnterpriseTeam' | 'IntegrationInstallation' | 'App' | 'RepositoryRole'};

export type ActionsRule = {type: 'restrict_actions_actors', parameters?: {allowed_actors: Array<ActionsRuleParamsActor>} | undefined} | {type: 'restrict_action_events', parameters?: ({allowed_events: Array<'branch_protection_rule' | 'check_run' | 'check_suite' | 'create' | 'delete' | 'deployment' | 'deployment_status' | 'discussion' | 'discussion_comment' | 'fork' | 'gollum' | 'image_version' | 'issue_comment' | 'issues' | 'label' | 'merge_group' | 'milestone' | 'page_build' | 'project' | 'project_card' | 'project_column' | 'public' | 'pull_request' | 'pull_request_review' | 'pull_request_review_comment' | 'pull_request_target' | 'push' | 'registry_package' | 'release' | 'repository_dispatch' | 'schedule' | 'status' | 'watch' | 'workflow_call' | 'workflow_dispatch' | 'workflow_run'>}) | undefined};

export type CreateApiOrgsOrgActionsPoliciesArgs = {org: string, body: {name: string, enforcement: RepositoryRuleEnforcement, conditions?: ActionsPolicyOrgConditions | undefined, rules?: Array<ActionsRule> | undefined}};

export type CreateApiOrgsOrgActionsPoliciesOptions = {baseUrl?: string | undefined, fetch?: typeof fetch | undefined};

export const repositoryRuleEnforcement = z.enum(["disabled", "active", "evaluate"]);

export const actionsPolicyRepoConditions = z.union([z.object({}), z.object({workflow_path: z.object({include: z.array(z.string()), exclude: z.array(z.string())})})]);

export const repositoryRulesetConditionsRepositoryPropertySpec = z.object({name: z.string(), property_values: z.array(z.string()), source: z.enum(["custom", "system"]).optional()});

export const actionsPolicyOrgConditions = z.union([z.object({repository_name: z.object({include: z.array(z.string()).optional(), exclude: z.array(z.string()).optional(), protected: z.boolean().optional()}), workflow_path: z.object({include: z.array(z.string()), exclude: z.array(z.string())}).optional()}), z.object({repository_id: z.object({repository_ids: z.array(z.number().int()).optional()}), workflow_path: z.object({include: z.array(z.string()), exclude: z.array(z.string())}).optional()}), z.object({repository_property: z.object({include: z.array(repositoryRulesetConditionsRepositoryPropertySpec).optional(), exclude: z.array(repositoryRulesetConditionsRepositoryPropertySpec).optional()}), workflow_path: z.object({include: z.array(z.string()), exclude: z.array(z.string())}).optional()})]);

export const enterpriseRulesetConditionsOrganizationPropertySpec = z.object({name: z.string(), property_values: z.array(z.string())});

export const actionsPolicyEnterpriseConditions = z.union([z.object({organization_name: z.object({include: z.array(z.string()).optional(), exclude: z.array(z.string()).optional()}), repository_name: z.object({include: z.array(z.string()).optional(), exclude: z.array(z.string()).optional(), protected: z.boolean().optional()}), workflow_path: z.object({include: z.array(z.string()), exclude: z.array(z.string())}).optional()}), z.object({organization_name: z.object({include: z.array(z.string()).optional(), exclude: z.array(z.string()).optional()}), repository_property: z.object({include: z.array(repositoryRulesetConditionsRepositoryPropertySpec).optional(), exclude: z.array(repositoryRulesetConditionsRepositoryPropertySpec).optional()}), workflow_path: z.object({include: z.array(z.string()), exclude: z.array(z.string())}).optional()}), z.object({organization_id: z.object({organization_ids: z.array(z.number().int()).optional()}), repository_name: z.object({include: z.array(z.string()).optional(), exclude: z.array(z.string()).optional(), protected: z.boolean().optional()}), workflow_path: z.object({include: z.array(z.string()), exclude: z.array(z.string())}).optional()}), z.object({organization_id: z.object({organization_ids: z.array(z.number().int()).optional()}), repository_property: z.object({include: z.array(repositoryRulesetConditionsRepositoryPropertySpec).optional(), exclude: z.array(repositoryRulesetConditionsRepositoryPropertySpec).optional()}), workflow_path: z.object({include: z.array(z.string()), exclude: z.array(z.string())}).optional()}), z.object({organization_property: z.object({include: z.array(enterpriseRulesetConditionsOrganizationPropertySpec).optional(), exclude: z.array(enterpriseRulesetConditionsOrganizationPropertySpec).optional()}), repository_name: z.object({include: z.array(z.string()).optional(), exclude: z.array(z.string()).optional(), protected: z.boolean().optional()}), workflow_path: z.object({include: z.array(z.string()), exclude: z.array(z.string())}).optional()}), z.object({organization_property: z.object({include: z.array(enterpriseRulesetConditionsOrganizationPropertySpec).optional(), exclude: z.array(enterpriseRulesetConditionsOrganizationPropertySpec).optional()}), repository_property: z.object({include: z.array(repositoryRulesetConditionsRepositoryPropertySpec).optional(), exclude: z.array(repositoryRulesetConditionsRepositoryPropertySpec).optional()}), workflow_path: z.object({include: z.array(z.string()), exclude: z.array(z.string())}).optional()})]);

export const actionsRuleParamsActor = z.object({id: z.number().int(), type: z.enum(["User", "Bot", "Team", "BusinessTeam", "EnterpriseTeam", "IntegrationInstallation", "App", "RepositoryRole"])});

export const actionsRule = z.union([z.object({type: z.literal("restrict_actions_actors"), parameters: z.object({allowed_actors: z.array(actionsRuleParamsActor)}).optional()}), z.object({type: z.literal("restrict_action_events"), parameters: z.object({allowed_events: z.array(z.enum(["branch_protection_rule", "check_run", "check_suite", "create", "delete", "deployment", "deployment_status", "discussion", "discussion_comment", "fork", "gollum", "image_version", "issue_comment", "issues", "label", "merge_group", "milestone", "page_build", "project", "project_card", "project_column", "public", "pull_request", "pull_request_review", "pull_request_review_comment", "pull_request_target", "push", "registry_package", "release", "repository_dispatch", "schedule", "status", "watch", "workflow_call", "workflow_dispatch", "workflow_run"]))}).optional()})]);

export const actionsPolicy = z.object({id: z.number().int(), name: z.string(), target: z.literal("actions"), source_type: z.enum(["Repository", "Organization", "Enterprise"]), source: z.string(), enforcement: repositoryRuleEnforcement, conditions: z.union([actionsPolicyRepoConditions, actionsPolicyOrgConditions, actionsPolicyEnterpriseConditions]).nullable().optional(), rules: z.array(actionsRule).optional(), node_id: z.string().optional(), _links: z.object({self: z.object({href: z.string().optional()}).optional(), html: z.object({href: z.string().optional()}).optional()}).optional(), created_at: z.string().optional(), updated_at: z.string().optional()});

export const validateResponse = async <Output>(
  schema: {
    readonly '~standard': {
      readonly validate: (value: unknown) => ({ readonly value: Output; readonly issues?: undefined } | { readonly issues: ReadonlyArray<{ readonly message: string; readonly path?: ReadonlyArray<PropertyKey | { readonly key: PropertyKey }> | undefined }> }) | Promise<{ readonly value: Output; readonly issues?: undefined } | { readonly issues: ReadonlyArray<{ readonly message: string; readonly path?: ReadonlyArray<PropertyKey | { readonly key: PropertyKey }> | undefined }> }>
    }
  },
  value: unknown
): Promise<Output> => {
  const result = await schema['~standard'].validate(value)

  if (result.issues !== undefined) {
    const detail = result.issues
      .map(({ message, path }) =>
        path?.length
          ? `${path.map((segment) => String(typeof segment === 'object' ? segment.key : segment)).join('.')}: ${message}`
          : message
      )
      .join('; ')

    throw new Error(`Response does not match the schema: ${detail}`, { cause: { issues: result.issues } })
  }

  return result.value
};

/**
 * Create an organization Actions policy
 * 
 * POST /orgs/{org}/actions/policies
 */
export const createApiOrgsOrgActionsPolicies = async (args: CreateApiOrgsOrgActionsPoliciesArgs, options?: CreateApiOrgsOrgActionsPoliciesOptions) => {
const {baseUrl = "https://api.github.com", fetch: fetchFn = fetch} = options ?? {}

const query = new URLSearchParams()
const headers = new Headers()
headers.set('content-type', "application/json")
headers.set('accept', "application/json")

const url = `${baseUrl.replace(/\/+$/, '')}/orgs/${encodeURIComponent(String(args.org))}/actions/policies${query.size > 0 ? `?${query}` : ''}`

const res = await fetchFn(url, {method: "POST", headers, body: JSON.stringify(args.body)})

if (!res.ok) throw new Error(`Request failed with status ${res.status}`, {cause: {status: res.status, body: await res.text()}})

return validateResponse(actionsPolicy, await res.json())
};