import {z} from 'zod'

export type CreateApiUserIdentitiesListAcsUsersArgs = {body: {user_identity_id: string}};

export type CreateApiUserIdentitiesListAcsUsersOptions = {baseUrl?: string | undefined, apiKey?: string | undefined, fetch?: typeof fetch | undefined};

export const acsUser = z.object({access_schedule: z.object({ends_at: z.string().nullable(), starts_at: z.string()}).optional(), acs_system_id: z.string(), acs_user_id: z.string(), connected_account_id: z.string(), created_at: z.string(), display_name: z.string(), email: z.string().optional(), email_address: z.string().optional(), errors: z.array(z.object({error_code: z.string().optional(), message: z.string().optional(), created_at: z.string().optional()})), external_type: z.enum(["pti_user", "brivo_user", "hid_credential_manager_user", "salto_site_user", "latch_user", "dormakaba_community_user", "salto_space_user", "avigilon_alta_user", "kisi_user"]).optional(), external_type_display_name: z.string().optional(), full_name: z.string().min(1).optional(), hid_acs_system_id: z.string().optional(), is_managed: z.literal(true), is_suspended: z.boolean().optional(), pending_mutations: z.array(z.discriminatedUnion("mutation_code", [z.object({created_at: z.string(), message: z.string(), mutation_code: z.literal("creating")}), z.object({created_at: z.string(), message: z.string(), mutation_code: z.literal("deleting")}), z.object({created_at: z.string(), message: z.string(), mutation_code: z.literal("deferring_creation"), scheduled_at: z.string().nullable().optional()}), z.object({created_at: z.string(), from: z.object({email_address: z.string().nullable().optional(), full_name: z.string().nullable().optional(), phone_number: z.string().nullable().optional()}), message: z.string(), mutation_code: z.literal("updating_user_information"), to: z.object({email_address: z.string().nullable().optional(), full_name: z.string().nullable().optional(), phone_number: z.string().nullable().optional()})}), z.object({created_at: z.string(), from: z.object({ends_at: z.string().nullable(), starts_at: z.string().nullable()}), message: z.string(), mutation_code: z.literal("updating_access_schedule"), to: z.object({ends_at: z.string().nullable(), starts_at: z.string().nullable()})}), z.object({created_at: z.string(), from: z.object({is_suspended: z.boolean()}), message: z.string(), mutation_code: z.literal("updating_suspension_state"), to: z.object({is_suspended: z.boolean()})}), z.object({created_at: z.string(), from: z.object({acs_access_group_id: z.string().nullable()}), message: z.string(), mutation_code: z.literal("updating_group_membership"), to: z.object({acs_access_group_id: z.string().nullable()})}), z.object({acs_access_group_id: z.string(), created_at: z.string(), message: z.string(), mutation_code: z.literal("deferring_group_membership_update"), variant: z.enum(["adding", "removing"])}), z.object({created_at: z.string(), from: z.object({acs_credential_id: z.string().nullable()}), message: z.string(), mutation_code: z.literal("updating_credential_assignment"), to: z.object({acs_credential_id: z.string().nullable()})})])).optional(), phone_number: z.string().optional(), salto_space_metadata: z.object({audit_openings: z.boolean().optional(), user_id: z.string().optional()}).optional(), user_identity_email_address: z.string().nullable().optional(), user_identity_full_name: z.string().nullable().optional(), user_identity_id: z.string().optional(), user_identity_phone_number: z.string().nullable().optional(), warnings: z.array(z.discriminatedUnion("warning_code", [z.object({created_at: z.string(), message: z.string(), warning_code: z.literal("being_deleted")}), z.object({created_at: z.string(), message: z.string(), warning_code: z.literal("salto_ks_user_not_subscribed")}), z.object({created_at: z.string(), message: z.string(), warning_code: z.literal("unknown_issue_with_acs_user")}), z.object({created_at: z.string(), message: z.string(), warning_code: z.literal("latch_resident_user")})])), workspace_id: z.string()});

export const createApiUserIdentitiesListAcsUsersResponse = z.object({acs_users: z.array(acsUser)});

export const validateResponse = async <Output>(
  schema: {
    readonly '~standard': {
      readonly validate: (value: unknown) => ({ readonly value: Output; readonly issues?: undefined } | { readonly issues: ReadonlyArray<{ readonly message: string; readonly path?: ReadonlyArray<PropertyKey | { readonly key: PropertyKey }> | undefined }> }) | Promise<{ readonly value: Output; readonly issues?: undefined } | { readonly issues: ReadonlyArray<{ readonly message: string; readonly path?: ReadonlyArray<PropertyKey | { readonly key: PropertyKey }> | undefined }> }>
    }
  },
  value: unknown
): Promise<Output> => {
  const result = await schema['~standard'].validate(value)

  if (result.issues !== undefined) {
    const detail = result.issues
      .map(({ message, path }) =>
        path?.length
          ? `${path.map((segment) => String(typeof segment === 'object' ? segment.key : segment)).join('.')}: ${message}`
          : message
      )
      .join('; ')

    throw new Error(`Response does not match the schema: ${detail}`, { cause: { issues: result.issues } })
  }

  return result.value
};

/**
 * List ACS Users Associated with a User Identity
 * 
 * POST /user_identities/list_acs_users
 * 
 * Also accepts auth: pat_with_workspace, console_session_with_workspace
 */
export const createApiUserIdentitiesListAcsUsers = async (args: CreateApiUserIdentitiesListAcsUsersArgs, options?: CreateApiUserIdentitiesListAcsUsersOptions) => {
const {baseUrl = "https://connect.getseam.com", fetch: fetchFn = fetch, apiKey} = options ?? {}

const query = new URLSearchParams()
const headers = new Headers()
headers.set('content-type', "application/json")
headers.set('accept', "application/json")

if (apiKey !== undefined) headers.set('authorization', `Bearer ${apiKey}`)

const url = `${baseUrl.replace(/\/+$/, '')}/user_identities/list_acs_users${query.size > 0 ? `?${query}` : ''}`

const res = await fetchFn(url, {method: "POST", headers, body: JSON.stringify(args.body)})

if (!res.ok) throw new Error(`Request failed with status ${res.status}`, {cause: {status: res.status, body: await res.text()}})

return validateResponse(createApiUserIdentitiesListAcsUsersResponse, await res.json())
};