var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
    return c > 3 && r && Object.defineProperty(target, key, r), r;
};
var __metadata = (this && this.__metadata) || function (k, v) {
    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
};
import DockerHost from "../../Models/DatabaseModels/DockerHost";
import DockerHostOwnerUser from "../../Models/DatabaseModels/DockerHostOwnerUser";
import DockerHostOwnerTeam from "../../Models/DatabaseModels/DockerHostOwnerTeam";
import DockerHostOwnerRuleService from "./DockerHostOwnerRuleService";
import DockerHostOwnerUserService from "./DockerHostOwnerUserService";
import DockerHostOwnerTeamService from "./DockerHostOwnerTeamService";
import DockerHostService from "./DockerHostService";
import ObjectID from "../../Types/ObjectID";
import CaptureSpan from "../Utils/Telemetry/CaptureSpan";
import logger from "../Utils/Logger";
class DockerHostOwnerRuleEngineServiceClass {
    /**
     * Evaluates DockerHostOwnerRule rows for the given Docker host and adds matched
     * owner users / teams via DockerHostOwnerUserService / DockerHostOwnerTeamService. Rules
     * with notifyOwners set notify the added owners; rules with notifyOwners off
     * add silently.
     */
    async applyRulesToDockerHost(dockerHost) {
        var _a, _b;
        if (!dockerHost.id || !dockerHost.projectId) {
            return;
        }
        try {
            const rules = await DockerHostOwnerRuleService.findBy({
                query: {
                    projectId: dockerHost.projectId,
                    isEnabled: true,
                },
                props: { isRoot: true },
                select: {
                    _id: true,
                    name: true,
                    notifyOwners: true,
                    dockerHostLabels: { _id: true },
                    dockerHostNamePattern: true,
                    dockerHostDescriptionPattern: true,
                    ownerUsers: { _id: true },
                    ownerTeams: { _id: true },
                },
                limit: 100,
                skip: 0,
            });
            if (rules.length === 0) {
                return;
            }
            const dockerHostWithDetails = await DockerHostService.findOneById({
                id: dockerHost.id,
                select: {
                    name: true,
                    description: true,
                    labels: { _id: true },
                },
                props: { isRoot: true },
            });
            if (!dockerHostWithDetails) {
                return;
            }
            const usersByNotify = new Map([
                [true, new Set()],
                [false, new Set()],
            ]);
            const teamsByNotify = new Map([
                [true, new Set()],
                [false, new Set()],
            ]);
            const matchedRules = [];
            for (const rule of rules) {
                const matches = this.doesDockerHostMatchRule(dockerHostWithDetails, rule);
                if (!matches) {
                    continue;
                }
                let ruleAddedAny = false;
                const notify = rule.notifyOwners !== false;
                for (const user of rule.ownerUsers || []) {
                    if (user.id) {
                        usersByNotify.get(notify).add(user.id.toString());
                        ruleAddedAny = true;
                    }
                }
                for (const team of rule.ownerTeams || []) {
                    if (team.id) {
                        teamsByNotify.get(notify).add(team.id.toString());
                        ruleAddedAny = true;
                    }
                }
                if (ruleAddedAny) {
                    matchedRules.push(rule);
                }
            }
            if (matchedRules.length === 0) {
                return;
            }
            for (const notify of [true, false]) {
                const userIds = usersByNotify.get(notify);
                const teamIds = teamsByNotify.get(notify);
                for (const userId of userIds) {
                    const owner = new DockerHostOwnerUser();
                    owner.dockerHostId = dockerHost.id;
                    owner.projectId = dockerHost.projectId;
                    owner.userId = new ObjectID(userId);
                    owner.isOwnerNotified = !notify;
                    await DockerHostOwnerUserService.create({
                        data: owner,
                        props: { isRoot: true },
                    });
                }
                for (const teamId of teamIds) {
                    const owner = new DockerHostOwnerTeam();
                    owner.dockerHostId = dockerHost.id;
                    owner.projectId = dockerHost.projectId;
                    owner.teamId = new ObjectID(teamId);
                    owner.isOwnerNotified = !notify;
                    await DockerHostOwnerTeamService.create({
                        data: owner,
                        props: { isRoot: true },
                    });
                }
            }
            logger.debug(`DockerHostOwnerRuleEngine added owners to Docker host ${dockerHost.id}`, { projectId: dockerHost.projectId.toString() });
        }
        catch (error) {
            logger.error(`Error applying Docker host owner rules: ${error}`, {
                projectId: (_a = dockerHost.projectId) === null || _a === void 0 ? void 0 : _a.toString(),
                dockerHostId: (_b = dockerHost.id) === null || _b === void 0 ? void 0 : _b.toString(),
            });
        }
    }
    doesDockerHostMatchRule(dockerHost, rule) {
        if (rule.dockerHostLabels && rule.dockerHostLabels.length > 0) {
            if (!dockerHost.labels || dockerHost.labels.length === 0) {
                return false;
            }
            const ruleLabelIds = rule.dockerHostLabels.map((l) => {
                var _a;
                return ((_a = l.id) === null || _a === void 0 ? void 0 : _a.toString()) || "";
            });
            const labelIds = dockerHost.labels.map((l) => {
                var _a;
                return ((_a = l.id) === null || _a === void 0 ? void 0 : _a.toString()) || "";
            });
            if (!ruleLabelIds.some((id) => {
                return labelIds.includes(id);
            })) {
                return false;
            }
        }
        if (rule.dockerHostNamePattern &&
            (!dockerHost.name ||
                !this.testRegex(rule.dockerHostNamePattern, dockerHost.name, rule))) {
            return false;
        }
        if (rule.dockerHostDescriptionPattern &&
            (!dockerHost.description ||
                !this.testRegex(rule.dockerHostDescriptionPattern, dockerHost.description, rule))) {
            return false;
        }
        return true;
    }
    testRegex(pattern, value, rule) {
        try {
            const regex = new RegExp(pattern, "i");
            return regex.test(value);
        }
        catch (_a) {
            logger.warn(`Invalid regex in Docker host owner rule ${rule.id}: ${pattern}`);
            return false;
        }
    }
}
__decorate([
    CaptureSpan(),
    __metadata("design:type", Function),
    __metadata("design:paramtypes", [DockerHost]),
    __metadata("design:returntype", Promise)
], DockerHostOwnerRuleEngineServiceClass.prototype, "applyRulesToDockerHost", null);
export default new DockerHostOwnerRuleEngineServiceClass();
//# sourceMappingURL=DockerHostOwnerRuleEngineService.js.map