import { z } from "zod";
import { sanitizeHtml } from "./sanitize";

/**
 * Validation Schemas for OpenCodeHub APIs
 * These schemas prevent injection attacks and ensure data integrity
 */

// Branch Protection
export const BranchProtectionSchema = z.object({
  pattern: z
    .string()
    .min(1)
    .max(255)
    .regex(/^[a-zA-Z0-9\/*_-]+$/, "Invalid branch pattern"),
  active: z.boolean().optional().default(true),
  requiresPr: z.boolean().optional().default(false),
  requiredApprovals: z.number().int().min(0).max(10).optional().default(1),
  dismissStaleReviews: z.boolean().optional().default(false),
  requireCodeOwnerReviews: z.boolean().optional().default(false),
  allowForcePushes: z.boolean().optional().default(false),
});

// Repository Creation
export const CreateRepositorySchema = z.object({
  name: z
    .string()
    .min(1)
    .max(100)
    .regex(/^[a-zA-Z0-9_-]+$/, "Invalid repository name"),
  description: z.string().max(500).optional(),
  visibility: z.enum(["public", "private", "internal"]).default("public"),
  defaultBranch: z.string().min(1).max(255).default("main"),
  hasIssues: z.boolean().optional().default(true),
  hasWiki: z.boolean().optional().default(true),
  hasActions: z.boolean().optional().default(true),
  allowForking: z.boolean().optional().default(true),
});

// User Registration
export const RegisterUserSchema = z.object({
  username: z
    .string()
    .min(3)
    .max(39)
    .regex(/^[a-zA-Z0-9_-]+$/, "Invalid username"),
  email: z.string().email("Invalid email address"),
  password: z.string().min(8).max(100),
  displayName: z.string().max(100).optional(),
});

// Issue Creation
export const CreateIssueSchema = z.object({
  title: z.string().min(1).max(500),
  body: z.string().max(65535).transform(sanitizeHtml).optional(),
});

// Pull Request Creation
export const CreatePullRequestSchema = z.object({
  title: z.string().min(1).max(500),
  body: z.string().max(65535).transform(sanitizeHtml).optional(),
  head: z.string().min(1).max(255),
  base: z.string().min(1).max(255),
});

// Storage Configuration
export const StorageConfigSchema = z.object({
  type: z.enum(["local", "s3"]),
  basePath: z.string().min(1).max(1000).optional(),
  bucket: z.string().max(255).optional(),
  region: z.string().max(100).optional(),
  endpoint: z.string().url().optional().or(z.literal("")),
  accessKeyId: z.string().max(255).optional(),
  secretAccessKey: z.string().max(255).optional(),
});

// General Config
export const GeneralConfigSchema = z.object({
  siteName: z.string().min(1).max(100).optional(),
  siteDescription: z.string().max(500).optional(),
  allowSignups: z.boolean().optional(),
  smtpHost: z.string().max(255).optional(),
  smtpPort: z.number().int().min(1).max(65535).optional(),
  smtpUser: z.string().max(255).optional(),
  smtpPass: z.string().max(255).optional(),
  smtpFrom: z.string().email().optional(),
});

// Webhook Configuration
export const WebhookConfigSchema = z.object({
  url: z
    .string()
    .url()
    .refine(
      (url) => {
        try {
          const parsed = new URL(url);
          if (!["http:", "https:"].includes(parsed.protocol)) return false;
          const h = parsed.hostname.toLowerCase();
          const blocked = [
            "localhost",
            "127.0.0.1",
            "::1",
            "0.0.0.0",
            "169.254.169.254",
            "metadata.google.internal",
          ];
          if (blocked.includes(h)) return false;
          return true;
        } catch {
          return false;
        }
      },
      {
        message:
          "Webhook URL must use HTTP/HTTPS and must not target private/reserved addresses",
      },
    ),
  events: z.array(z.string()).min(1),
  secret: z.string().max(255).optional(),
  active: z.boolean().optional().default(true),
});