import { z } from 'zod'
import type {
  ContractBody,
  ContractBodyInput,
  ContractJsonResponse,
} from '@/lib/api/contracts/types'
import { defineRouteContract } from '@/lib/api/contracts/types'
import { validateAwsRegion } from '@/lib/core/security/input-validation'

const UpdateStackSchema = z
  .object({
    region: z
      .string()
      .min(1, 'AWS region is required')
      .refine((v) => validateAwsRegion(v).isValid, {
        message: 'Invalid AWS region format (e.g., us-east-1, eu-west-2)',
      }),
    accessKeyId: z.string().min(1, 'AWS access key ID is required'),
    secretAccessKey: z.string().min(1, 'AWS secret access key is required'),
    stackName: z.string().min(1, 'Stack name is required'),
    templateBody: z.string().optional(),
    usePreviousTemplate: z.boolean().optional(),
    parameters: z
      .array(
        z.object({
          parameterKey: z.string().min(1, 'Parameter key is required'),
          parameterValue: z.string().optional(),
          usePreviousValue: z.boolean().optional(),
        })
      )
      .optional(),
    capabilities: z
      .string()
      .optional()
      .refine(
        (v) =>
          !v ||
          v
            .split(',')
            .map((c) => c.trim())
            .filter(Boolean)
            .every((c) =>
              ['CAPABILITY_IAM', 'CAPABILITY_NAMED_IAM', 'CAPABILITY_AUTO_EXPAND'].includes(c)
            ),
        {
          message:
            'capabilities must be a comma-separated list of CAPABILITY_IAM, CAPABILITY_NAMED_IAM, CAPABILITY_AUTO_EXPAND',
        }
      ),
    tags: z
      .array(
        z.object({
          key: z
            .string()
            .min(1, 'Tag key is required')
            .max(128, 'Tag key must be at most 128 characters'),
          value: z.string().max(256, 'Tag value must be at most 256 characters'),
        })
      )
      .optional(),
  })
  .superRefine((data, ctx) => {
    if (!data.templateBody && !data.usePreviousTemplate) {
      ctx.addIssue({
        code: z.ZodIssueCode.custom,
        message: 'Either templateBody must be provided or usePreviousTemplate must be true',
        path: ['templateBody'],
      })
    }
  })

const UpdateStackResponseSchema = z.object({
  success: z.literal(true),
  output: z.object({
    stackId: z.string(),
  }),
})

export const awsCloudformationUpdateStackContract = defineRouteContract({
  method: 'POST',
  path: '/api/tools/cloudformation/update-stack',
  body: UpdateStackSchema,
  response: { mode: 'json', schema: UpdateStackResponseSchema },
})
export type AwsCloudformationUpdateStackRequest = ContractBodyInput<
  typeof awsCloudformationUpdateStackContract
>
export type AwsCloudformationUpdateStackBody = ContractBody<
  typeof awsCloudformationUpdateStackContract
>
export type AwsCloudformationUpdateStackResponse = ContractJsonResponse<
  typeof awsCloudformationUpdateStackContract
>