import {z} from 'zod'

export type GetApiApiV1CertManagerCertificateProfilesSlugSlugArgs = {slug: string};

export type GetApiApiV1CertManagerCertificateProfilesSlugSlugOptions = {baseUrl?: string | undefined, fetch?: typeof fetch | undefined};

export const getApiApiV1CertManagerCertificateProfilesSlugSlugResponse = z.object({certificateProfile: z.object({id: z.string(), caId: z.string().nullable().optional(), certificatePolicyId: z.string(), slug: z.string(), description: z.string().nullable().optional(), enrollmentType: z.string(), estConfigId: z.string().nullable().optional(), apiConfigId: z.string().nullable().optional(), createdAt: z.string(), updatedAt: z.string(), acmeConfigId: z.string().nullable().optional(), issuerType: z.string().optional(), externalConfigs: z.union([z.object({template: z.string().min(1)}), z.object({template: z.string().min(1)}), z.object({}), z.object({}), z.object({}), z.object({}), z.object({}), z.object({}), z.object({})]).nullable().optional(), defaults: z.object({ttlDays: z.number().optional(), commonName: z.string().optional(), keyAlgorithm: z.enum(["RSA_2048", "RSA_3072", "RSA_4096", "EC_prime256v1", "EC_secp384r1", "EC_secp521r1", "ML-DSA-44", "ML-DSA-65", "ML-DSA-87", "SLH-DSA-SHA2-128f", "SLH-DSA-SHA2-128s", "SLH-DSA-SHA2-192f", "SLH-DSA-SHA2-192s", "SLH-DSA-SHA2-256f", "SLH-DSA-SHA2-256s", "SLH-DSA-SHAKE-128f", "SLH-DSA-SHAKE-128s", "SLH-DSA-SHAKE-192f", "SLH-DSA-SHAKE-192s", "SLH-DSA-SHAKE-256f", "SLH-DSA-SHAKE-256s"]).optional(), signatureAlgorithm: z.enum(["RSA-SHA256", "RSA-SHA384", "RSA-SHA512", "ECDSA-SHA256", "ECDSA-SHA384", "ECDSA-SHA512", "ML-DSA-44", "ML-DSA-65", "ML-DSA-87", "SLH-DSA-SHA2-128f", "SLH-DSA-SHA2-128s", "SLH-DSA-SHA2-192f", "SLH-DSA-SHA2-192s", "SLH-DSA-SHA2-256f", "SLH-DSA-SHA2-256s", "SLH-DSA-SHAKE-128f", "SLH-DSA-SHAKE-128s", "SLH-DSA-SHAKE-192f", "SLH-DSA-SHAKE-192s", "SLH-DSA-SHAKE-256f", "SLH-DSA-SHAKE-256s"]).optional(), keyUsages: z.array(z.enum(["digital_signature", "key_encipherment", "non_repudiation", "data_encipherment", "key_agreement", "key_cert_sign", "crl_sign", "encipher_only", "decipher_only"])).optional(), extendedKeyUsages: z.array(z.enum(["client_auth", "server_auth", "code_signing", "email_protection", "ocsp_signing", "smart_card_logon", "time_stamping", "any_purpose"])).optional(), basicConstraints: z.object({isCA: z.boolean(), pathLength: z.number().optional()}).optional(), organization: z.string().optional(), organizationalUnit: z.string().optional(), country: z.string().optional(), state: z.string().optional(), locality: z.string().optional(), subjectAltNames: z.array(z.object({type: z.enum(["dns_name", "ip_address", "email", "uri", "upn"]), value: z.string().min(1)})).optional(), domainComponents: z.array(z.string()).optional(), customExtensions: z.array(z.object({oid: z.string().max(64), label: z.string().min(1).max(64).optional(), critical: z.boolean().optional(), value: z.string().min(1).max(4096).optional()})).optional()}).nullable().optional(), scepConfigId: z.string().nullable().optional()})});

export const validateResponse = async <Output>(
  schema: {
    readonly '~standard': {
      readonly validate: (value: unknown) => ({ readonly value: Output; readonly issues?: undefined } | { readonly issues: ReadonlyArray<{ readonly message: string; readonly path?: ReadonlyArray<PropertyKey | { readonly key: PropertyKey }> | undefined }> }) | Promise<{ readonly value: Output; readonly issues?: undefined } | { readonly issues: ReadonlyArray<{ readonly message: string; readonly path?: ReadonlyArray<PropertyKey | { readonly key: PropertyKey }> | undefined }> }>
    }
  },
  value: unknown
): Promise<Output> => {
  const result = await schema['~standard'].validate(value)

  if (result.issues !== undefined) {
    const detail = result.issues
      .map(({ message, path }) =>
        path?.length
          ? `${path.map((segment) => String(typeof segment === 'object' ? segment.key : segment)).join('.')}: ${message}`
          : message
      )
      .join('; ')

    throw new Error(`Response does not match the schema: ${detail}`, { cause: { issues: result.issues } })
  }

  return result.value
};

/**
 * GET /api/v1/cert-manager/certificate-profiles/slug/{slug}
 */
export const getApiApiV1CertManagerCertificateProfilesSlugSlug = async (args: GetApiApiV1CertManagerCertificateProfilesSlugSlugArgs, options?: GetApiApiV1CertManagerCertificateProfilesSlugSlugOptions) => {
const {baseUrl = "https://us.infisical.com", fetch: fetchFn = fetch} = options ?? {}

const query = new URLSearchParams()
const headers = new Headers()
headers.set('accept', "application/json")

const url = `${baseUrl.replace(/\/+$/, '')}/api/v1/cert-manager/certificate-profiles/slug/${encodeURIComponent(String(args.slug))}${query.size > 0 ? `?${query}` : ''}`

const res = await fetchFn(url, {method: "GET", headers})

if (!res.ok) throw new Error(`Request failed with status ${res.status}`, {cause: {status: res.status, body: await res.text()}})

return validateResponse(getApiApiV1CertManagerCertificateProfilesSlugSlugResponse, await res.json())
};