vorteil/direktiv

import { z } from "zod";

// Regex for input validation. This isn't perfect but should be good enough for
// a start. Matches git@hostname:path, where path isn't very restrictive.
export const gitUrlSchema = z
  .string()
  .regex(/^([a-zA-Z0-9.\-_]+@[a-zA-Z0-9.\-_]+:[a-zA-Z0-9.\-_/]+)*$/, {
    message: "format must be git@host:path when using SSH",
  });

const PublicValidationSchema = z.object({
  formType: z.literal("public"),
  url: z
    .string()
    .url()
    .nonempty({ message: "invalid url, must be http(s):// format" }),
  gitRef: z.string().nonempty(),
  insecure: z.boolean(),
});

const TokenValidationSchema = z.object({
  formType: z.literal("token"),
  url: z
    .string()
    .url()
    .nonempty({ message: "invalid url, must be http(s):// format" }),
  gitRef: z.string().nonempty(),
  authToken: z.string().nonempty("token must not be empty"),
  insecure: z.boolean(),
});

const SshValidationSchema = z.object({
  formType: z.literal("ssh"),
  url: gitUrlSchema.nonempty({
    message: "format must be git@host:path when using SSH",
  }),
  gitRef: z.string().nonempty(),
  publicKey: z.string().nonempty(),
  privateKey: z.string().nonempty(),
  privateKeyPassphrase: z.string().optional(),
  insecure: z.boolean(),
});

const KeepTokenValidationSchema = z.object({
  formType: z.literal("keep-token"),
  url: z
    .string()
    .url()
    .nonempty({ message: "invalid url, must be http(s):// format" }),
  gitRef: z.string().nonempty(),
  insecure: z.boolean(),
});

const KeepSshValidationSchema = z.object({
  formType: z.literal("keep-ssh"),
  url: gitUrlSchema.nonempty({
    message: "format must be git@host:path when using SSH",
  }),
  gitRef: z.string().nonempty(),
  insecure: z.boolean(),
});

export const MirrorValidationSchema = z.discriminatedUnion("formType", [
  PublicValidationSchema,
  SshValidationSchema,
  TokenValidationSchema,
  KeepSshValidationSchema,
  KeepTokenValidationSchema,
]);