import {z} from 'zod'

export type SessionAuthenticateRequest = {account: {id: string, email?: string | undefined, phone?: string | undefined, first_name?: string | undefined, last_name?: string | undefined, username?: string | undefined, expected_countries?: Array<string> | undefined, metadata?: {[key: string]: unknown} | undefined, group?: string | undefined, lists?: Array<string> | undefined}, session_id: string};

export type CreateApiSessionAuthenticateArgs = {accounts_linked?: boolean | undefined, body: SessionAuthenticateRequest};

export type CreateApiSessionAuthenticateOptions = {baseUrl?: string | undefined, apiKeyAuth?: string | undefined, fetch?: typeof fetch | undefined};

export const riskSignalDetails = z.object({network: z.array(z.string()).optional(), device: z.array(z.string()).optional()});

export const mobile = z.object({brand: z.string().nullable().optional(), model: z.string().nullable().optional(), system_memory_gb: z.number().int().nullable().optional(), boot_count: z.number().int().nullable().optional(), system_uptime_days: z.number().nullable().optional(), battery_level: z.number().nullable().optional(), languages: z.array(z.string()).nullable().optional(), oem_app_integrity: z.string().nullable().optional(), oem_device_integrity: z.string().nullable().optional()});

export const sessionDetails = z.object({start_time: z.string().optional(), true_country_code: z.string().optional(), device_id: z.string().optional(), network: z.object({ip_address: z.string().optional(), service_provider: z.string().optional(), connection_type: z.string().optional()}).optional(), location: z.object({continent: z.string().optional(), country_code: z.string().optional(), state: z.string().optional(), city: z.string().optional(), zip_code: z.string().optional(), timezone: z.string().optional(), latitude: z.number().optional(), longitude: z.number().optional()}).optional(), browser: z.object({type: z.string().optional(), version: z.string().optional(), language: z.string().optional(), user_agent: z.string().optional(), timezone: z.string().optional()}).optional(), device: z.object({category: z.enum(["desktop", "mobile", "tablet", "console", "smarttv", "wearable", "embedded", "other"]).optional(), type: z.string().optional(), os: z.string().optional(), cpu_cores: z.number().int().optional(), memory: z.number().int().optional(), gpu: z.string().optional(), screen_height: z.number().optional(), screen_width: z.number().optional()}).optional(), bot: z.object({mouse_num_events: z.number().int().optional(), click_num_events: z.number().int().optional(), keyboard_num_events: z.number().int().optional(), touch_num_events: z.number().int().optional(), clipboard_num_events: z.number().int().optional()}).optional(), risk_signals: z.object({device_risk: z.boolean().optional(), proxy: z.boolean().optional(), vpn: z.boolean().optional(), tor: z.boolean().optional(), spoofed_ip: z.boolean().optional(), datacenter: z.boolean().optional(), recent_fraud_ip: z.boolean().optional(), impossible_travel: z.boolean().optional(), device_network_mismatch: z.boolean().optional(), location_spoofing: z.boolean().optional()}).optional(), risk_signal_scores: z.object({device_risk: z.number().optional(), proxy: z.number().optional(), vpn: z.number().optional(), tor: z.number().optional(), datacenter: z.number().optional(), recent_fraud_ip: z.number().optional(), impossible_travel: z.number().optional(), device_network_mismatch: z.number().optional(), location_spoofing: z.number().optional()}).optional(), risk_signal_details: riskSignalDetails.optional(), mobile: mobile.optional()});

export const accountDetails = z.object({account: z.object({id: z.string().optional(), email: z.string().optional(), phone: z.string().optional(), first_name: z.string().optional(), last_name: z.string().optional(), username: z.string().optional(), expected_countries: z.array(z.string()).optional(), metadata: z.record(z.string(), z.unknown()).optional(), group: z.string().optional()}).optional(), num_sessions: z.number().int().optional(), first_seen: z.string().optional(), last_seen: z.string().optional(), last_session: z.string().optional(), country: z.string().optional(), countries: z.array(z.string()).optional(), unique_devices: z.object({"1_day": z.number().int().optional(), "7_day": z.number().int().optional()}).optional(), unique_networks: z.object({"1_day": z.number().int().optional(), "7_day": z.number().int().optional()}).optional(), email: z.object({email: z.string().optional(), disposable: z.boolean().optional(), personal: z.boolean().optional(), valid: z.boolean().optional(), domain_type: z.enum(["relay", "personal", "disposable", "business", "government", "education", "invalid", "not_active"]).optional(), email_score: z.number().optional(), trust_signals: z.array(z.string()).optional(), risk_signals: z.array(z.string()).optional(), num_account_from_domain: z.number().int().optional()}).optional(), risk_signal_average: z.object({device_risk: z.number().optional(), proxy: z.number().optional(), vpn: z.number().optional(), tor: z.number().optional(), spoofed_ip: z.number().optional(), datacenter: z.number().optional(), recent_fraud_ip: z.number().optional(), impossible_travel: z.number().optional(), device_network_mismatch: z.number().optional(), location_spoofing: z.number().optional()}).optional()});

export const linkedAccount = z.object({account_id: z.string().optional(), score: z.number().optional(), email: z.string().optional(), phone: z.string().optional(), first_name: z.string().optional(), last_name: z.string().optional(), username: z.string().optional(), expected_countries: z.array(z.string()).optional(), match_type: z.array(z.string()).optional(), lists: z.array(z.string()).optional(), metadata: z.record(z.string(), z.unknown()).optional()});

export const sessionAuthenticateResponse = z.object({project_id: z.string().optional(), session_id: z.string().optional(), account_id: z.string().optional(), request_id: z.string().optional(), decision: z.string().optional(), account_score: z.number().optional(), bot: z.number().optional(), multiple_accounts: z.number().optional(), risk_signals: z.number().optional(), accounts_linked: z.number().int().optional(), lists: z.array(z.string()).optional(), session: sessionDetails.optional(), account: accountDetails.optional(), linked_accounts: z.array(linkedAccount).optional()});

export const validateResponse = async <Output>(
  schema: {
    readonly '~standard': {
      readonly validate: (value: unknown) => ({ readonly value: Output; readonly issues?: undefined } | { readonly issues: ReadonlyArray<{ readonly message: string; readonly path?: ReadonlyArray<PropertyKey | { readonly key: PropertyKey }> | undefined }> }) | Promise<{ readonly value: Output; readonly issues?: undefined } | { readonly issues: ReadonlyArray<{ readonly message: string; readonly path?: ReadonlyArray<PropertyKey | { readonly key: PropertyKey }> | undefined }> }>
    }
  },
  value: unknown
): Promise<Output> => {
  const result = await schema['~standard'].validate(value)

  if (result.issues !== undefined) {
    const detail = result.issues
      .map(({ message, path }) =>
        path?.length
          ? `${path.map((segment) => String(typeof segment === 'object' ? segment.key : segment)).join('.')}: ${message}`
          : message
      )
      .join('; ')

    throw new Error(`Response does not match the schema: ${detail}`, { cause: { issues: result.issues } })
  }

  return result.value
};

/**
 * Authenticates a session with an account
 * 
 * POST /session/authenticate
 */
export const createApiSessionAuthenticate = async (args: CreateApiSessionAuthenticateArgs, options?: CreateApiSessionAuthenticateOptions) => {
const {baseUrl = "https://api.sandbox.verisoul.ai", fetch: fetchFn = fetch, apiKeyAuth} = options ?? {}

const query = new URLSearchParams()
const headers = new Headers()
headers.set('content-type', "application/json")
headers.set('accept', "application/json")

if (args.accounts_linked != null) query.append("accounts_linked", String(args.accounts_linked))
if (apiKeyAuth !== undefined) headers.set("x-api-key", apiKeyAuth)

const url = `${baseUrl.replace(/\/+$/, '')}/session/authenticate${query.size > 0 ? `?${query}` : ''}`

const res = await fetchFn(url, {method: "POST", headers, body: JSON.stringify(args.body)})

if (!res.ok) throw new Error(`Request failed with status ${res.status}`, {cause: {status: res.status, body: await res.text()}})

return validateResponse(sessionAuthenticateResponse, await res.json())
};