import type {
  InfisicalCreateSecretParams,
  InfisicalCreateSecretResponse,
} from '@/tools/infisical/types'
import type { ToolConfig } from '@/tools/types'

export const createSecretTool: ToolConfig<
  InfisicalCreateSecretParams,
  InfisicalCreateSecretResponse
> = {
  id: 'infisical_create_secret',
  name: 'Infisical Create Secret',
  description: 'Create a new secret in a project environment.',
  version: '1.0.0',

  params: {
    apiKey: {
      type: 'string',
      required: true,
      visibility: 'user-only',
      description: 'Infisical API token',
    },
    baseUrl: {
      type: 'string',
      required: false,
      visibility: 'user-or-llm',
      description:
        'Infisical instance URL (default: "https://us.infisical.com"). Use "https://eu.infisical.com" for EU Cloud or your self-hosted URL.',
    },
    projectId: {
      type: 'string',
      required: true,
      visibility: 'user-or-llm',
      description: 'The ID of the project',
    },
    environment: {
      type: 'string',
      required: true,
      visibility: 'user-or-llm',
      description: 'The environment slug (e.g., "dev", "staging", "prod")',
    },
    secretName: {
      type: 'string',
      required: true,
      visibility: 'user-or-llm',
      description: 'The name of the secret to create',
    },
    secretValue: {
      type: 'string',
      required: true,
      visibility: 'user-or-llm',
      description: 'The value of the secret',
    },
    secretPath: {
      type: 'string',
      required: false,
      visibility: 'user-or-llm',
      description: 'The path for the secret (default: "/")',
    },
    secretComment: {
      type: 'string',
      required: false,
      visibility: 'user-or-llm',
      description: 'A comment for the secret',
    },
    type: {
      type: 'string',
      required: false,
      visibility: 'user-or-llm',
      description: 'Secret type: "shared" or "personal" (default: "shared")',
    },
    tagIds: {
      type: 'string',
      required: false,
      visibility: 'user-or-llm',
      description: 'Comma-separated tag IDs to attach to the secret',
    },
  },

  request: {
    method: 'POST',
    url: (params) =>
      `${params.baseUrl?.replace(/\/+$/, '') ?? 'https://us.infisical.com'}/api/v4/secrets/${encodeURIComponent(params.secretName.trim())}`,
    headers: (params) => ({
      'Content-Type': 'application/json',
      Authorization: `Bearer ${params.apiKey}`,
    }),
    body: (params) => {
      const body: Record<string, unknown> = {
        projectId: params.projectId,
        environment: params.environment,
        secretValue: params.secretValue,
      }
      if (params.secretPath) body.secretPath = params.secretPath
      if (params.secretComment) body.secretComment = params.secretComment
      if (params.type) body.type = params.type
      if (params.tagIds) {
        body.tagIds = params.tagIds.split(',').map((id) => id.trim())
      }
      return body
    },
  },

  transformResponse: async (response) => {
    const data = await response.json()
    if (!response.ok) {
      return {
        success: false,
        output: { secret: {} as InfisicalCreateSecretResponse['output']['secret'] },
        error: data.message ?? `Request failed with status ${response.status}`,
      }
    }
    const s = data.secret ?? data
    return {
      success: true,
      output: {
        secret: {
          id: s.id ?? null,
          workspace: s.workspace ?? null,
          secretKey: s.secretKey ?? null,
          secretValue: s.secretValue ?? null,
          secretComment: s.secretComment ?? null,
          secretPath: s.secretPath ?? null,
          version: s.version ?? null,
          type: s.type ?? null,
          environment: s.environment ?? null,
          secretValueHidden: s.secretValueHidden ?? null,
          isRotatedSecret: s.isRotatedSecret ?? null,
          rotationId: s.rotationId ?? null,
          secretReminderNote: s.secretReminderNote ?? null,
          secretReminderRepeatDays: s.secretReminderRepeatDays ?? null,
          skipMultilineEncoding: s.skipMultilineEncoding ?? null,
          actor: s.actor
            ? {
                actorId: s.actor.actorId ?? null,
                actorType: s.actor.actorType ?? null,
                name: s.actor.name ?? null,
                membershipId: s.actor.membershipId ?? null,
                groupId: s.actor.groupId ?? null,
              }
            : null,
          tags:
            (s.tags as Array<Record<string, unknown>> | undefined)?.map(
              (t: Record<string, unknown>) => ({
                id: (t.id as string) ?? null,
                slug: (t.slug as string) ?? null,
                color: (t.color as string) ?? null,
                name: (t.name as string) ?? null,
              })
            ) ?? [],
          secretMetadata:
            (s.secretMetadata as Array<Record<string, unknown>> | undefined)?.map(
              (m: Record<string, unknown>) => ({
                key: (m.key as string) ?? null,
                value: (m.value as string) ?? null,
                isEncrypted: (m.isEncrypted as boolean) ?? null,
              })
            ) ?? [],
          createdAt: s.createdAt ?? null,
          updatedAt: s.updatedAt ?? null,
        },
      },
    }
  },

  outputs: {
    secret: {
      type: 'object',
      description: 'The created secret',
      properties: {
        id: { type: 'string', description: 'Secret ID' },
        workspace: { type: 'string', description: 'Workspace/project ID', optional: true },
        secretKey: { type: 'string', description: 'Secret name/key' },
        secretValue: { type: 'string', description: 'Secret value', optional: true },
        secretComment: { type: 'string', description: 'Secret comment', optional: true },
        secretPath: { type: 'string', description: 'Secret path', optional: true },
        version: { type: 'number', description: 'Secret version' },
        type: { type: 'string', description: 'Secret type (shared or personal)' },
        environment: { type: 'string', description: 'Environment slug' },
        secretValueHidden: {
          type: 'boolean',
          description: 'Whether the secret value was hidden in the response',
          optional: true,
        },
        isRotatedSecret: {
          type: 'boolean',
          description: 'Whether the secret is managed by secret rotation',
          optional: true,
        },
        rotationId: { type: 'string', description: 'Secret rotation ID', optional: true },
        secretReminderNote: {
          type: 'string',
          description: 'Rotation reminder note',
          optional: true,
        },
        secretReminderRepeatDays: {
          type: 'number',
          description: 'Rotation reminder interval in days',
          optional: true,
        },
        skipMultilineEncoding: {
          type: 'boolean',
          description: 'Whether multiline encoding is skipped for this secret',
          optional: true,
        },
        tags: {
          type: 'array',
          description: 'Tags attached to the secret',
          optional: true,
          items: {
            type: 'object',
            properties: {
              id: { type: 'string', description: 'Tag ID' },
              slug: { type: 'string', description: 'Tag slug' },
              color: { type: 'string', description: 'Tag color', optional: true },
              name: { type: 'string', description: 'Tag name' },
            },
          },
        },
        secretMetadata: {
          type: 'array',
          description: 'Custom metadata key-value pairs',
          optional: true,
          items: {
            type: 'object',
            properties: {
              key: { type: 'string', description: 'Metadata key' },
              value: { type: 'string', description: 'Metadata value' },
              isEncrypted: {
                type: 'boolean',
                description: 'Whether the metadata value is encrypted',
                optional: true,
              },
            },
          },
        },
        actor: {
          type: 'object',
          description: 'Identity that last modified the secret',
          optional: true,
          properties: {
            actorId: { type: 'string', description: 'Actor ID', optional: true },
            actorType: { type: 'string', description: 'Actor type', optional: true },
            name: { type: 'string', description: 'Actor name', optional: true },
            membershipId: { type: 'string', description: 'Membership ID', optional: true },
            groupId: { type: 'string', description: 'Group ID', optional: true },
          },
        },
        createdAt: { type: 'string', description: 'Creation timestamp' },
        updatedAt: { type: 'string', description: 'Last update timestamp' },
      },
    },
  },
}