import {z} from 'zod'

export type CoreSortOrder = 'ASC' | 'DESC';

export type CoreLockStatus = 'Unlocked' | 'Locked' | 'Archived';

export type CoreVaultProcessingStatus = 'Pending' | 'Preparing' | 'Completed';

export type GetApiV1VaultsArgs = {limit?: number | undefined, startingAfter?: string | undefined, sortBy?: ('id' | 'alias' | 'lock' | 'metadata.createdAt' | 'metadata.lastModifiedAt') | undefined, sortOrder?: CoreSortOrder | undefined, alias?: string | undefined, publicKey?: string | undefined, lock?: Array<CoreLockStatus> | undefined, 'metadata.createdBy'?: string | undefined, 'metadata.lastModifiedBy'?: string | undefined, 'metadata.description'?: string | undefined, 'metadata.customProperties'?: Array<string> | undefined, 'additionalDetails.processingStatus'?: CoreVaultProcessingStatus | undefined};

export type GetApiV1VaultsOptions = {baseUrl: string, httpAuth?: string | undefined, fetch?: typeof fetch | undefined};

export const coreVaultParametersHSM = z.object({type: z.literal("HSM")});

export const coreVaultParametersMPC = z.object({backupEncryptionKey: z.string().optional(), type: z.literal("MPC")});

export const coreVaultParameters = z.discriminatedUnion("type", [coreVaultParametersHSM, coreVaultParametersMPC]);

export const coreVaultDerivation = z.enum(["Slip10", "SoftBip32", "None", "Bip32"]);

export const coreVaultKeyStrategy = z.enum(["VaultHard", "VaultSoft", "Random"]);

export const coreLockStatus = z.enum(["Unlocked", "Locked", "Archived"]);

export const coreUserReference = z.object({id: z.string(), domainId: z.string()});

export const coreStringsMap = z.record(z.string(), z.string());

export const coreEntityMetadata = z.object({description: z.string().max(250).optional(), revision: z.number().int().gte(1), createdAt: z.string(), createdBy: coreUserReference.optional(), lastModifiedAt: z.string(), lastModifiedBy: coreUserReference.optional(), customProperties: coreStringsMap});

export const coreVault = z.object({id: z.string(), publicKey: z.string(), parameters: coreVaultParameters.optional(), supportedDerivations: z.array(coreVaultDerivation).optional(), enabledKeyStrategies: z.array(coreVaultKeyStrategy).optional(), alias: z.string().min(1).max(75), lock: coreLockStatus, metadata: coreEntityMetadata});

export const coreVaultProcessingDetailsCompleted = z.object({status: z.literal("Completed")});

export const coreVaultProcessingDetailsPending = z.object({status: z.literal("Pending")});

export const coreVaultProcessingDetailsPreparing = z.object({status: z.literal("Preparing")});

export const coreVaultProcessingDetails = z.discriminatedUnion("status", [coreVaultProcessingDetailsCompleted, coreVaultProcessingDetailsPending, coreVaultProcessingDetailsPreparing]);

export const coreVaultAdditionalDetails = z.object({processing: coreVaultProcessingDetails});

export const coreApiVault = z.object({data: coreVault, signature: z.string(), signingKey: z.string(), additionalDetails: coreVaultAdditionalDetails.optional()});

export const coreVaultsCollection = z.object({items: z.array(coreApiVault), count: z.number().int(), currentStartingAfter: z.string().optional(), nextStartingAfter: z.string().optional()});

export const validateResponse = async <Output>(
  schema: {
    readonly '~standard': {
      readonly validate: (value: unknown) => ({ readonly value: Output; readonly issues?: undefined } | { readonly issues: ReadonlyArray<{ readonly message: string; readonly path?: ReadonlyArray<PropertyKey | { readonly key: PropertyKey }> | undefined }> }) | Promise<{ readonly value: Output; readonly issues?: undefined } | { readonly issues: ReadonlyArray<{ readonly message: string; readonly path?: ReadonlyArray<PropertyKey | { readonly key: PropertyKey }> | undefined }> }>
    }
  },
  value: unknown
): Promise<Output> => {
  const result = await schema['~standard'].validate(value)

  if (result.issues !== undefined) {
    const detail = result.issues
      .map(({ message, path }) =>
        path?.length
          ? `${path.map((segment) => String(typeof segment === 'object' ? segment.key : segment)).join('.')}: ${message}`
          : message
      )
      .join('; ')

    throw new Error(`Response does not match the schema: ${detail}`, { cause: { issues: result.issues } })
  }

  return result.value
};

/**
 * List vaults
 * 
 * GET /v1/vaults
 */
export const getApiV1Vaults = async (args: GetApiV1VaultsArgs, options: GetApiV1VaultsOptions) => {
const {baseUrl, fetch: fetchFn = fetch, httpAuth} = options ?? {}

const query = new URLSearchParams()
const headers = new Headers()
headers.set('accept', "application/json")

if (args.limit != null) query.append("limit", String(args.limit))
if (args.startingAfter != null) query.append("startingAfter", String(args.startingAfter))
if (args.sortBy != null) query.append("sortBy", String(args.sortBy))
if (args.sortOrder != null) query.append("sortOrder", String(args.sortOrder))
if (args.alias != null) query.append("alias", String(args.alias))
if (args.publicKey != null) query.append("publicKey", String(args.publicKey))
for (const item of args.lock ?? []) query.append("lock", String(item))
if (args['metadata.createdBy'] != null) query.append("metadata.createdBy", String(args['metadata.createdBy']))
if (args['metadata.lastModifiedBy'] != null) query.append("metadata.lastModifiedBy", String(args['metadata.lastModifiedBy']))
if (args['metadata.description'] != null) query.append("metadata.description", String(args['metadata.description']))
for (const item of args['metadata.customProperties'] ?? []) query.append("metadata.customProperties", String(item))
if (args['additionalDetails.processingStatus'] != null) query.append("additionalDetails.processingStatus", String(args['additionalDetails.processingStatus']))
if (httpAuth !== undefined) headers.set('authorization', `Bearer ${httpAuth}`)

const url = `${baseUrl.replace(/\/+$/, '')}/v1/vaults${query.size > 0 ? `?${query}` : ''}`

const res = await fetchFn(url, {method: "GET", headers})

if (!res.ok) throw new Error(`Request failed with status ${res.status}`, {cause: {status: res.status, body: await res.text()}})

return validateResponse(coreVaultsCollection, await res.json())
};