using Microsoft.AspNetCore.Authorization;
using StellaOps.Auth.Abstractions;
using System;

namespace StellaOps.Auth.ServerIntegration;

/// <summary>
/// Named authorization policies for StellaOps observability and evidence resource servers.
/// </summary>
public static class StellaOpsResourceServerPolicies
{
    /// <summary>
    /// Observability dashboards/read-only access policy name.
    /// </summary>
    public const string ObservabilityRead = StellaOpsScopes.ObservabilityRead;

    /// <summary>
    /// Observability incident activation policy name.
    /// </summary>
    public const string ObservabilityIncident = StellaOpsScopes.ObservabilityIncident;

    /// <summary>
    /// Timeline read policy name.
    /// </summary>
    public const string TimelineRead = StellaOpsScopes.TimelineRead;

    /// <summary>
    /// Timeline write policy name.
    /// </summary>
    public const string TimelineWrite = StellaOpsScopes.TimelineWrite;

    /// <summary>
    /// Evidence create policy name.
    /// </summary>
    public const string EvidenceCreate = StellaOpsScopes.EvidenceCreate;

    /// <summary>
    /// Evidence read policy name.
    /// </summary>
    public const string EvidenceRead = StellaOpsScopes.EvidenceRead;

    /// <summary>
    /// Evidence hold policy name.
    /// </summary>
    public const string EvidenceHold = StellaOpsScopes.EvidenceHold;

    /// <summary>
    /// Attestation read policy name.
    /// </summary>
    public const string AttestRead = StellaOpsScopes.AttestRead;

    /// <summary>
    /// Export viewer policy name.
    /// </summary>
    public const string ExportViewer = StellaOpsScopes.ExportViewer;

    /// <summary>
    /// Export operator policy name.
    /// </summary>
    public const string ExportOperator = StellaOpsScopes.ExportOperator;

    /// <summary>
    /// Export admin policy name.
    /// </summary>
    public const string ExportAdmin = StellaOpsScopes.ExportAdmin;

    /// <summary>
    /// Pack read policy name.
    /// </summary>
    public const string PacksRead = StellaOpsScopes.PacksRead;

    /// <summary>
    /// Pack write policy name.
    /// </summary>
    public const string PacksWrite = StellaOpsScopes.PacksWrite;

    /// <summary>
    /// Pack run policy name.
    /// </summary>
    public const string PacksRun = StellaOpsScopes.PacksRun;

    /// <summary>
    /// Pack approval policy name.
    /// </summary>
    public const string PacksApprove = StellaOpsScopes.PacksApprove;

    /// <summary>
    /// Registers all observability, timeline, evidence, attestation, and export authorization policies.
    /// </summary>
    public static void AddObservabilityResourcePolicies(this AuthorizationOptions options)
    {
        ArgumentNullException.ThrowIfNull(options);

        options.AddStellaOpsScopePolicy(ObservabilityRead, StellaOpsScopes.ObservabilityRead);
        options.AddStellaOpsScopePolicy(ObservabilityIncident, StellaOpsScopes.ObservabilityIncident);
        options.AddStellaOpsScopePolicy(TimelineRead, StellaOpsScopes.TimelineRead);
        options.AddStellaOpsScopePolicy(TimelineWrite, StellaOpsScopes.TimelineWrite);
        options.AddStellaOpsScopePolicy(EvidenceCreate, StellaOpsScopes.EvidenceCreate);
        options.AddStellaOpsScopePolicy(EvidenceRead, StellaOpsScopes.EvidenceRead);
        options.AddStellaOpsScopePolicy(EvidenceHold, StellaOpsScopes.EvidenceHold);
        options.AddStellaOpsScopePolicy(AttestRead, StellaOpsScopes.AttestRead);
        options.AddStellaOpsScopePolicy(ExportViewer, StellaOpsScopes.ExportViewer);
        options.AddStellaOpsScopePolicy(ExportOperator, StellaOpsScopes.ExportOperator);
        options.AddStellaOpsScopePolicy(ExportAdmin, StellaOpsScopes.ExportAdmin);
    }

    /// <summary>
    /// Registers Task Pack registry, execution, and approval authorization policies.
    /// </summary>
    /// <param name="options">The authorization options to update.</param>
    public static void AddPacksResourcePolicies(this AuthorizationOptions options)
    {
        ArgumentNullException.ThrowIfNull(options);

        options.AddStellaOpsScopePolicy(PacksRead, StellaOpsScopes.PacksRead);
        options.AddStellaOpsScopePolicy(PacksWrite, StellaOpsScopes.PacksWrite);
        options.AddStellaOpsScopePolicy(PacksRun, StellaOpsScopes.PacksRun);
        options.AddStellaOpsScopePolicy(PacksApprove, StellaOpsScopes.PacksApprove);
    }
}