import {z} from 'zod'

export type CoreSortOrder = 'ASC' | 'DESC';

export type CoreIntentType = 'v0_NotarizeData' | 'v0_ExecuteExtension' | 'v0_CreateDomain' | 'v0_UpdateDomain' | 'v0_UpdateDomainPermissions' | 'v0_UnlockDomain' | 'v0_LockDomain' | 'v0_CreateUser' | 'v0_UpdateUser' | 'v0_UnlockUser' | 'v0_LockUser' | 'v0_CreatePolicy' | 'v0_UpdatePolicy' | 'v0_UnlockPolicy' | 'v0_LockPolicy' | 'v0_CreateVault' | 'v0_UpdateVault' | 'v0_UnlockVault' | 'v0_LockVault' | 'v0_RewrapVaultKeyMaterial' | 'v0_UnlockTicker' | 'v0_LockTicker' | 'v0_CreateEndpoint' | 'v0_UpdateEndpoint' | 'v0_UnlockEndpoint' | 'v0_LockEndpoint' | 'v0_CreateAccount' | 'v0_MigrateSilo3AccountBatch' | 'v0_UpdateAccount' | 'v0_UnlockAccount' | 'v0_LockAccount' | 'v0_AddAccountLedgers' | 'v0_CreateTransactionOrder' | 'v0_ReleaseQuarantinedTransfers' | 'v0_CreateTicker' | 'v0_AttemptTransactionOrderCancellation' | 'v0_ValidateTickers' | 'v0_UpdateTicker' | 'v0_CreateTransferOrder' | 'v0_SignManifest' | 'v0_SetSystemProperty' | 'v0_CreateLedger' | 'v0_UpdateLedger' | 'v0_AddTrustedPublicKeysForMigration' | 'v0_RegisterTrustedPublicKey' | 'v0_CreateBackup' | 'v0_AcknowledgeBackup';

export type CorePolicyScope = 'Self' | 'Descendants' | 'SelfAndDescendants';

export type CoreScriptingEngine = 'Javascript_v0';

export type CoreLockStatus = 'Unlocked' | 'Locked' | 'Archived';

export type GetApiV1DomainsDomainIdPoliciesArgs = {domainId: string, limit?: number | undefined, startingAfter?: string | undefined, sortBy?: ('id' | 'alias' | 'rank' | 'scope' | 'lock' | 'metadata.createdAt' | 'metadata.lastModifiedAt') | undefined, sortOrder?: CoreSortOrder | undefined, alias?: string | undefined, intentTypes?: Array<CoreIntentType> | undefined, scope?: CorePolicyScope | undefined, scriptingEngine?: CoreScriptingEngine | undefined, 'metadata.createdBy'?: string | undefined, 'metadata.lastModifiedBy'?: string | undefined, 'metadata.description'?: string | undefined, 'metadata.customProperties'?: Array<string> | undefined, lock?: Array<CoreLockStatus> | undefined};

export type GetApiV1DomainsDomainIdPoliciesOptions = {baseUrl: string, httpAuth?: string | undefined, fetch?: typeof fetch | undefined};

export const coreIntentType = z.enum(["v0_NotarizeData", "v0_ExecuteExtension", "v0_CreateDomain", "v0_UpdateDomain", "v0_UpdateDomainPermissions", "v0_UnlockDomain", "v0_LockDomain", "v0_CreateUser", "v0_UpdateUser", "v0_UnlockUser", "v0_LockUser", "v0_CreatePolicy", "v0_UpdatePolicy", "v0_UnlockPolicy", "v0_LockPolicy", "v0_CreateVault", "v0_UpdateVault", "v0_UnlockVault", "v0_LockVault", "v0_RewrapVaultKeyMaterial", "v0_UnlockTicker", "v0_LockTicker", "v0_CreateEndpoint", "v0_UpdateEndpoint", "v0_UnlockEndpoint", "v0_LockEndpoint", "v0_CreateAccount", "v0_MigrateSilo3AccountBatch", "v0_UpdateAccount", "v0_UnlockAccount", "v0_LockAccount", "v0_AddAccountLedgers", "v0_CreateTransactionOrder", "v0_ReleaseQuarantinedTransfers", "v0_CreateTicker", "v0_AttemptTransactionOrderCancellation", "v0_ValidateTickers", "v0_UpdateTicker", "v0_CreateTransferOrder", "v0_SignManifest", "v0_SetSystemProperty", "v0_CreateLedger", "v0_UpdateLedger", "v0_AddTrustedPublicKeysForMigration", "v0_RegisterTrustedPublicKey", "v0_CreateBackup", "v0_AcknowledgeBackup"]);

export const corePolicyScope = z.enum(["Self", "Descendants", "SelfAndDescendants"]);

export const coreScriptingEngine = z.literal("Javascript_v0");

export const corePolicyConditionAnd = z.object({left: z.lazy(() => corePolicyCondition), right: z.lazy(() => corePolicyCondition), type: z.literal("And")});

export const corePolicyConditionExpression = z.object({expression: z.string().min(1).max(10000), type: z.literal("Expression")});

export const corePolicyConditionOr = z.object({left: z.lazy(() => corePolicyCondition), right: z.lazy(() => corePolicyCondition), type: z.literal("Or")});

export const corePolicyCondition: z.ZodType<CorePolicyCondition> = z.discriminatedUnion("type", [corePolicyConditionAnd, corePolicyConditionExpression, corePolicyConditionOr]);

export const coreWorkflowConditionAnd = z.object({left: z.lazy(() => coreWorkflowCondition), right: z.lazy(() => coreWorkflowCondition), type: z.literal("And")});

export const coreWorkflowConditionOr = z.object({left: z.lazy(() => coreWorkflowCondition), right: z.lazy(() => coreWorkflowCondition), type: z.literal("Or")});

export const coreWorkflowConditionRoleQuorum = z.object({role: z.string().min(1).max(50), quorum: z.number().int().gte(1), type: z.literal("RoleQuorum")});

export const coreWorkflowCondition: z.ZodType<CoreWorkflowCondition> = z.discriminatedUnion("type", [coreWorkflowConditionAnd, coreWorkflowConditionOr, coreWorkflowConditionRoleQuorum]);

export const coreLockStatus = z.enum(["Unlocked", "Locked", "Archived"]);

export const coreUserReference = z.object({id: z.string(), domainId: z.string()});

export const coreStringsMap = z.record(z.string(), z.string());

export const coreEntityMetadata = z.object({description: z.string().max(250).optional(), revision: z.number().int().gte(1), createdAt: z.string(), createdBy: coreUserReference.optional(), lastModifiedAt: z.string(), lastModifiedBy: coreUserReference.optional(), customProperties: coreStringsMap});

export const coreIntentOrigin = z.enum(["UserSigned", "SystemSigned"]);

export const corePolicy = z.object({id: z.string(), domainId: z.string(), alias: z.string().min(1).max(75), rank: z.number().int().gte(0).lte(1000), intentTypes: z.array(coreIntentType).optional(), scope: corePolicyScope, scriptingEngine: coreScriptingEngine, condition: corePolicyCondition.optional(), workflow: z.array(coreWorkflowCondition).optional(), lock: coreLockStatus, metadata: coreEntityMetadata, intentOrigin: coreIntentOrigin.optional()});

export const coreTrustedPolicy = z.object({data: corePolicy, signature: z.string(), signingKey: z.string()});

export const coreTrustedPoliciesCollection = z.object({items: z.array(coreTrustedPolicy), count: z.number().int(), currentStartingAfter: z.string().optional(), nextStartingAfter: z.string().optional()});

export const validateResponse = async <Output>(
  schema: {
    readonly '~standard': {
      readonly validate: (value: unknown) => ({ readonly value: Output; readonly issues?: undefined } | { readonly issues: ReadonlyArray<{ readonly message: string; readonly path?: ReadonlyArray<PropertyKey | { readonly key: PropertyKey }> | undefined }> }) | Promise<{ readonly value: Output; readonly issues?: undefined } | { readonly issues: ReadonlyArray<{ readonly message: string; readonly path?: ReadonlyArray<PropertyKey | { readonly key: PropertyKey }> | undefined }> }>
    }
  },
  value: unknown
): Promise<Output> => {
  const result = await schema['~standard'].validate(value)

  if (result.issues !== undefined) {
    const detail = result.issues
      .map(({ message, path }) =>
        path?.length
          ? `${path.map((segment) => String(typeof segment === 'object' ? segment.key : segment)).join('.')}: ${message}`
          : message
      )
      .join('; ')

    throw new Error(`Response does not match the schema: ${detail}`, { cause: { issues: result.issues } })
  }

  return result.value
};

/**
 * List policies
 * 
 * GET /v1/domains/{domainId}/policies
 */
export const getApiV1DomainsDomainIdPolicies = async (args: GetApiV1DomainsDomainIdPoliciesArgs, options: GetApiV1DomainsDomainIdPoliciesOptions) => {
const {baseUrl, fetch: fetchFn = fetch, httpAuth} = options ?? {}

const query = new URLSearchParams()
const headers = new Headers()
headers.set('accept', "application/json")

if (args.limit != null) query.append("limit", String(args.limit))
if (args.startingAfter != null) query.append("startingAfter", String(args.startingAfter))
if (args.sortBy != null) query.append("sortBy", String(args.sortBy))
if (args.sortOrder != null) query.append("sortOrder", String(args.sortOrder))
if (args.alias != null) query.append("alias", String(args.alias))
for (const item of args.intentTypes ?? []) query.append("intentTypes", String(item))
if (args.scope != null) query.append("scope", String(args.scope))
if (args.scriptingEngine != null) query.append("scriptingEngine", String(args.scriptingEngine))
if (args['metadata.createdBy'] != null) query.append("metadata.createdBy", String(args['metadata.createdBy']))
if (args['metadata.lastModifiedBy'] != null) query.append("metadata.lastModifiedBy", String(args['metadata.lastModifiedBy']))
if (args['metadata.description'] != null) query.append("metadata.description", String(args['metadata.description']))
for (const item of args['metadata.customProperties'] ?? []) query.append("metadata.customProperties", String(item))
for (const item of args.lock ?? []) query.append("lock", String(item))
if (httpAuth !== undefined) headers.set('authorization', `Bearer ${httpAuth}`)

const url = `${baseUrl.replace(/\/+$/, '')}/v1/domains/${encodeURIComponent(String(args.domainId))}/policies${query.size > 0 ? `?${query}` : ''}`

const res = await fetchFn(url, {method: "GET", headers})

if (!res.ok) throw new Error(`Request failed with status ${res.status}`, {cause: {status: res.status, body: await res.text()}})

return validateResponse(coreTrustedPoliciesCollection, await res.json())
};