import {z} from 'zod'

export type EventTriggerTypes = 1 | 2 | 3 | 4 | 5 | 6 | 7;

export type Schedule = {hour?: string | undefined, day_of_week?: string | undefined, day_of_month?: string | undefined, month?: string | undefined};

export type ConditionPattern = {pattern?: string | undefined, inverse_match?: boolean | undefined};

export type ConditionOptions = {names?: Array<ConditionPattern> | undefined, group_names?: Array<ConditionPattern> | undefined, role_names?: Array<ConditionPattern> | undefined, fs_paths?: Array<ConditionPattern> | undefined, protocols?: (Array<'SFTP' | 'SCP' | 'SSH' | 'FTP' | 'DAV' | 'HTTP' | 'HTTPShare' | 'OIDC'>) | undefined, provider_objects?: (Array<'user' | 'group' | 'admin' | 'api_key' | 'share' | 'event_action' | 'event_rule'>) | undefined, min_size?: number | undefined, max_size?: number | undefined, concurrent_execution?: boolean | undefined};

export type EventConditions = {fs_events?: (Array<'upload' | 'download' | 'delete' | 'rename' | 'mkdir' | 'rmdir' | 'copy' | 'ssh_cmd' | 'pre-upload' | 'pre-download' | 'pre-delete' | 'first-upload' | 'first-download'>) | undefined, provider_events?: (Array<'add' | 'update' | 'delete'>) | undefined, schedules?: Array<Schedule> | undefined, idp_login_event?: (0 | 1 | 2) | undefined, options?: ConditionOptions | undefined};

export type EventActionOptions = {is_failure_action?: boolean | undefined, stop_on_failure?: boolean | undefined, execute_sync?: boolean | undefined};

export type EventActionMinimal = {name?: string | undefined, order?: number | undefined, relation_options?: EventActionOptions | undefined};

export type EventRuleMinimal = {id?: number | undefined, name?: string | undefined, status?: (0 | 1) | undefined, description?: string | undefined, created_at?: number | undefined, updated_at?: number | undefined, trigger?: EventTriggerTypes | undefined, conditions?: EventConditions | undefined, actions?: Array<EventActionMinimal> | undefined};

export type CreateApiEventrulesArgs = {confidential_data?: number | undefined, body: EventRuleMinimal};

export type CreateApiEventrulesOptions = {baseUrl: string, BearerAuth?: string | undefined, fetch?: typeof fetch | undefined};

export const eventTriggerTypes = z.union([z.literal(1), z.literal(2), z.literal(3), z.literal(4), z.literal(5), z.literal(6), z.literal(7)]);

export const schedule = z.object({hour: z.string().optional(), day_of_week: z.string().optional(), day_of_month: z.string().optional(), month: z.string().optional()});

export const conditionPattern = z.object({pattern: z.string().optional(), inverse_match: z.boolean().optional()});

export const conditionOptions = z.object({names: z.array(conditionPattern).optional(), group_names: z.array(conditionPattern).optional(), role_names: z.array(conditionPattern).optional(), fs_paths: z.array(conditionPattern).optional(), protocols: z.array(z.enum(["SFTP", "SCP", "SSH", "FTP", "DAV", "HTTP", "HTTPShare", "OIDC"])).optional(), provider_objects: z.array(z.enum(["user", "group", "admin", "api_key", "share", "event_action", "event_rule"])).optional(), min_size: z.number().int().optional(), max_size: z.number().int().optional(), concurrent_execution: z.boolean().optional()});

export const eventConditions = z.object({fs_events: z.array(z.enum(["upload", "download", "delete", "rename", "mkdir", "rmdir", "copy", "ssh_cmd", "pre-upload", "pre-download", "pre-delete", "first-upload", "first-download"])).optional(), provider_events: z.array(z.enum(["add", "update", "delete"])).optional(), schedules: z.array(schedule).optional(), idp_login_event: z.union([z.literal(0), z.literal(1), z.literal(2)]).optional(), options: conditionOptions.optional()});

export const eventActionTypes = z.union([z.literal(1), z.literal(2), z.literal(3), z.literal(4), z.literal(5), z.literal(6), z.literal(7), z.literal(8), z.literal(9), z.literal(11), z.literal(12), z.literal(13), z.literal(14), z.literal(15)]);

export const secret = z.object({status: z.enum(["Plain", "AES-256-GCM", "Secretbox", "GCP", "AWS", "VaultTransit", "AzureKeyVault", "Redacted"]).optional(), payload: z.string().optional(), key: z.string().optional(), additional_data: z.string().optional(), mode: z.number().int().optional()});

export const keyValue = z.object({key: z.string().optional(), value: z.string().optional()});

export const hTTPPart = z.object({name: z.string().optional(), headers: z.array(keyValue).optional(), filepath: z.string().optional(), body: z.string().optional()});

export const eventActionHTTPConfig = z.object({endpoint: z.string().optional(), username: z.string().optional(), password: secret.optional(), headers: z.array(keyValue).optional(), timeout: z.number().int().gte(1).lte(180).optional(), skip_tls_verify: z.boolean().optional(), method: z.enum(["GET", "POST", "PUT", "DELETE"]).optional(), query_parameters: z.array(keyValue).optional(), body: z.string().optional(), parts: z.array(hTTPPart).optional()});

export const eventActionCommandConfig = z.object({cmd: z.string().optional(), args: z.array(z.string()).optional(), timeout: z.number().int().gte(1).lte(120).optional(), env_vars: z.array(keyValue).optional()});

export const eventActionEmailConfig = z.object({recipients: z.array(z.string()).optional(), bcc: z.array(z.string()).optional(), subject: z.string().optional(), body: z.string().optional(), content_type: z.union([z.literal(0), z.literal(1)]).optional(), attachments: z.array(z.string()).optional()});

export const folderRetention = z.object({path: z.string().optional(), retention: z.number().int().optional(), delete_empty_dirs: z.boolean().optional(), ignore_user_permissions: z.boolean().optional()});

export const eventActionDataRetentionConfig = z.object({folders: z.array(folderRetention).optional()});

export const filesystemActionTypes = z.union([z.literal(1), z.literal(2), z.literal(3), z.literal(4), z.literal(5), z.literal(6)]);

export const eventActionFsCompress = z.object({name: z.string().optional(), paths: z.array(z.string()).optional()});

export const eventActionFilesystemConfig = z.object({type: filesystemActionTypes.optional(), renames: z.array(keyValue).optional(), mkdirs: z.array(z.string()).optional(), deletes: z.array(z.string()).optional(), exist: z.array(z.string()).optional(), copy: z.array(keyValue).optional(), compress: eventActionFsCompress.optional()});

export const eventActionPasswordExpiration = z.object({threshold: z.number().int().optional()});

export const eventActionUserInactivity = z.object({disable_threshold: z.number().int().optional(), delete_threshold: z.number().int().optional()});

export const eventActionIDPAccountCheck = z.object({mode: z.union([z.literal(0), z.literal(1)]).optional(), template_user: z.string().optional(), template_admin: z.string().optional()});

export const baseEventActionOptions = z.object({http_config: eventActionHTTPConfig.optional(), cmd_config: eventActionCommandConfig.optional(), email_config: eventActionEmailConfig.optional(), retention_config: eventActionDataRetentionConfig.optional(), fs_config: eventActionFilesystemConfig.optional(), pwd_expiration_config: eventActionPasswordExpiration.optional(), user_inactivity_config: eventActionUserInactivity.optional(), idp_config: eventActionIDPAccountCheck.optional()});

export const eventActionOptions = z.object({is_failure_action: z.boolean().optional(), stop_on_failure: z.boolean().optional(), execute_sync: z.boolean().optional()});

export const eventAction = z.object({id: z.number().int().gte(1).optional(), name: z.string().optional(), description: z.string().optional(), type: eventActionTypes.optional(), options: baseEventActionOptions.optional(), rules: z.array(z.string()).optional(), order: z.number().int().optional(), relation_options: eventActionOptions.optional()});

export const eventRule = z.object({id: z.number().int().gte(1).optional(), name: z.string().optional(), status: z.union([z.literal(0), z.literal(1)]).optional(), description: z.string().optional(), created_at: z.number().int().optional(), updated_at: z.number().int().optional(), trigger: eventTriggerTypes.optional(), conditions: eventConditions.optional(), actions: z.array(eventAction).optional()});

export const validateResponse = async <Output>(
  schema: {
    readonly '~standard': {
      readonly validate: (value: unknown) => ({ readonly value: Output; readonly issues?: undefined } | { readonly issues: ReadonlyArray<{ readonly message: string; readonly path?: ReadonlyArray<PropertyKey | { readonly key: PropertyKey }> | undefined }> }) | Promise<{ readonly value: Output; readonly issues?: undefined } | { readonly issues: ReadonlyArray<{ readonly message: string; readonly path?: ReadonlyArray<PropertyKey | { readonly key: PropertyKey }> | undefined }> }>
    }
  },
  value: unknown
): Promise<Output> => {
  const result = await schema['~standard'].validate(value)

  if (result.issues !== undefined) {
    const detail = result.issues
      .map(({ message, path }) =>
        path?.length
          ? `${path.map((segment) => String(typeof segment === 'object' ? segment.key : segment)).join('.')}: ${message}`
          : message
      )
      .join('; ')

    throw new Error(`Response does not match the schema: ${detail}`, { cause: { issues: result.issues } })
  }

  return result.value
};

/**
 * Add event rule
 * 
 * POST /eventrules
 * 
 * Also accepts auth: APIKeyAuth
 */
export const createApiEventrules = async (args: CreateApiEventrulesArgs, options: CreateApiEventrulesOptions) => {
const {baseUrl, fetch: fetchFn = fetch, BearerAuth} = options ?? {}

const query = new URLSearchParams()
const headers = new Headers()
headers.set('content-type', "application/json")
headers.set('accept', "application/json")

if (args.confidential_data != null) query.append("confidential_data", String(args.confidential_data))
if (BearerAuth !== undefined) headers.set('authorization', `Bearer ${BearerAuth}`)

const url = `${baseUrl.replace(/\/+$/, '')}/eventrules${query.size > 0 ? `?${query}` : ''}`

const res = await fetchFn(url, {method: "POST", headers, body: JSON.stringify(args.body)})

if (!res.ok) throw new Error(`Request failed with status ${res.status}`, {cause: {status: res.status, body: await res.text()}})

return validateResponse(eventRule, await res.json())
};