import {z} from 'zod'

export type GetApiAdminGlobalTenantListOptions = {baseUrl: string, AdminKey?: string | undefined, fetch?: typeof fetch | undefined};

export const owner = z.object({namespace: z.string(), owner_id: z.string(), display_name: z.string().nullable().optional()});

export const node = z.object({name: z.string(), connection_id: z.string().nullable().optional(), key: z.string(), id: z.string(), create_date_time: z.string(), last_known_version: z.string().nullable().optional(), last_known_features: z.string().nullable().optional(), destroy_date_time: z.string().nullable().optional(), infra_id: z.string().nullable().optional(), demo: z.boolean(), ephemeral: z.boolean().optional()});

export const userAuthFunction = z.object({auth_fn: z.literal("auth_user").optional(), user_id: z.string()});

export const emailDomainFunction = z.object({auth_fn: z.literal("auth_email_suffix").optional(), connection: z.string().nullable().optional(), email_domain: z.string()});

export const organizationRoleFunction = z.object({auth_fn: z.literal("auth_organization_role").optional(), connection: z.string().nullable().optional(), roles_claim: z.string(), role: z.string(), organization_claim: z.string(), organization: z.string()});

export const organizationMembershipFunction = z.object({auth_fn: z.literal("auth_organization").optional(), connection: z.string().nullable().optional(), organization_claim: z.string(), organization: z.string()});

export const allowAllAuthFunction = z.object({auth_fn: z.literal("auth_allow_all").optional()});

export const nodeOfflineAlert = z.object({type: z.literal("node_offline").optional(), id: z.string(), node_id: z.string(), duration: z.number().int(), webhook_url: z.string(), webhook_body: z.string()});

export const secretStoreType = z.enum(["aws", "tenzir"]);

export const awsAccessKey = z.object({access_key_id: z.string(), secret_access_key: z.string()});

export const awsWorkspaceSecretOptions = z.object({region: z.string(), assumed_role_arn: z.string(), access_key: awsAccessKey.nullable().optional()});

export const derivedKey = z.object({public_key: z.string(), keypath: z.string()});

export const builtinWorkspaceSecretOptions = z.object({derived_key: derivedKey.nullable().optional()});

export const secretStoreDetails = z.object({type: secretStoreType, id: z.string(), name: z.string(), is_writable: z.boolean(), is_deletable: z.boolean(), options: z.union([awsWorkspaceSecretOptions, builtinWorkspaceSecretOptions])});

export const tenant = z.object({id: z.string(), owner: owner, create_date_time: z.string(), nodes: z.array(node), auth_functions: z.array(z.union([userAuthFunction, emailDomainFunction, organizationRoleFunction, organizationMembershipFunction, allowAllAuthFunction])).optional(), name: z.string().optional(), icon_url: z.string().optional(), alerts: z.record(z.string(), nodeOfflineAlert).nullable().optional(), metrics_opt_out: z.boolean().optional(), secret_stores: z.array(secretStoreDetails).optional(), current_default_secret_store: z.string().optional(), node_registration_key: z.string().nullable().optional()});

export const getApiAdminGlobalTenantListResponse = z.array(tenant);

export const validateResponse = async <Output>(
  schema: {
    readonly '~standard': {
      readonly validate: (value: unknown) => ({ readonly value: Output; readonly issues?: undefined } | { readonly issues: ReadonlyArray<{ readonly message: string; readonly path?: ReadonlyArray<PropertyKey | { readonly key: PropertyKey }> | undefined }> }) | Promise<{ readonly value: Output; readonly issues?: undefined } | { readonly issues: ReadonlyArray<{ readonly message: string; readonly path?: ReadonlyArray<PropertyKey | { readonly key: PropertyKey }> | undefined }> }>
    }
  },
  value: unknown
): Promise<Output> => {
  const result = await schema['~standard'].validate(value)

  if (result.issues !== undefined) {
    const detail = result.issues
      .map(({ message, path }) =>
        path?.length
          ? `${path.map((segment) => String(typeof segment === 'object' ? segment.key : segment)).join('.')}: ${message}`
          : message
      )
      .join('; ')

    throw new Error(`Response does not match the schema: ${detail}`, { cause: { issues: result.issues } })
  }

  return result.value
};

/**
 * List Tenants Endpoint
 * 
 * GET /admin/global-tenant-list
 */
export const getApiAdminGlobalTenantList = async (options: GetApiAdminGlobalTenantListOptions) => {
const {baseUrl, fetch: fetchFn = fetch, AdminKey} = options ?? {}

const query = new URLSearchParams()
const headers = new Headers()
headers.set('accept', "application/json")

if (AdminKey !== undefined) headers.set("X-Tenzir-AdminKey", AdminKey)

const url = `${baseUrl.replace(/\/+$/, '')}/admin/global-tenant-list${query.size > 0 ? `?${query}` : ''}`

const res = await fetchFn(url, {method: "GET", headers})

if (!res.ok) throw new Error(`Request failed with status ${res.status}`, {cause: {status: res.status, body: await res.text()}})

return validateResponse(getApiAdminGlobalTenantListResponse, await res.json())
};