field

var (
	ListTicketSchemasField = BoolField("list-ticket-schemas", WithHidden(true), WithDescription("List ticket schemas"), WithPersistent(true), WithExportTarget(ExportTargetNone))

	TicketingField = BoolField("ticketing",
		WithDisplayName("Enable external ticket provisioning"),
		WithDescription("This must be set to enable ticketing support"),
		WithPersistent(true),
		WithExportTarget(ExportTargetNone))

	LambdaServerClientIDField = StringField("lambda-client-id", WithRequired(true), WithDescription("The oauth client id to use with the configuration endpoint"),
		WithExportTarget(ExportTargetNone))
	LambdaServerClientSecretField = StringField("lambda-client-secret", WithRequired(true), WithDescription("The oauth client secret to use with the configuration endpoint"),
		WithExportTarget(ExportTargetNone))

	// JWT Authentication Fields.
	LambdaServerAuthJWTSigner = StringField("lambda-auth-jwt-signer",
		WithRequired(false),
		WithDescription("The JWK format public key used to verify JWT signatures (mutually exclusive with lambda-auth-jwt-jwks-url)"),
		WithExportTarget(ExportTargetNone))

	LambdaServerAuthJWTJWKSUrl = StringField("lambda-auth-jwt-jwks-url",
		WithRequired(false),
		WithDescription("The URL to the JWKS endpoint for JWT verification (mutually exclusive with lambda-auth-jwt-signer)"),
		WithExportTarget(ExportTargetNone))

	LambdaServerAuthJWTExpectedIssuerField = StringField("lambda-auth-jwt-expected-issuer",
		WithRequired(true),
		WithDescription("The expected issuer claim in the JWT"),
		WithExportTarget(ExportTargetNone))

	LambdaServerAuthJWTExpectedSubjectField = StringField("lambda-auth-jwt-expected-subject",
		WithRequired(true),
		WithDescription("The expected subject claim in the JWT (optional)"),
		WithExportTarget(ExportTargetNone))

	LambdaServerAuthJWTExpectedAudienceField = StringField("lambda-auth-jwt-expected-audience",
		WithRequired(true),
		WithDescription("The expected audience claim in the JWT (optional)"),
		WithExportTarget(ExportTargetNone))

	ServerSessionStoreMaximumSizeField = IntField("session-store-maximum-size",
		WithDescription("The maximum size of the local in-memory session store cache in bytes."),
		WithDefaultValue(1024*1024*15),
		WithExportTarget(ExportTargetOps),
		WithHidden(true),
		WithPersistent(true))
)

var DefaultFields = []SchemaField{
	createTicketField,
	bulkCreateTicketField,
	bulkTicketTemplatePathField,
	getTicketField,
	ListTicketSchemasField,
	provisioningField,
	TicketingField,
	c1zTmpDirField,
	clientIDField,
	clientSecretField,
	createAccountEmailField,
	createAccountLoginField,
	createAccountProfileField,
	createAccountResourceTypeField,
	deleteResourceField,
	deleteResourceTypeField,
	eventFeedField,
	eventFeedIdField,
	eventFeedStartAtField,
	eventFeedCursorField,
	fileField,
	grantEntitlementField,
	grantPrincipalField,
	grantPrincipalTypeField,
	logFormatField,
	revokeGrantField,
	rotateCredentialsField,
	rotateCredentialsTypeField,
	ticketIDField,
	ticketTemplatePathField,
	logLevelField,
	logLevelDebugExpiresAtField,
	skipFullSync,
	targetedSyncResourceIDs,
	syncResourceTypeIDs,
	skipEntitlementsAndGrants,
	skipGrants,
	externalResourceC1ZField,
	externalResourceEntitlementIdFilter,
	diffSyncsField,
	diffSyncsBaseSyncField,
	diffSyncsAppliedSyncField,
	compactSyncIDsField,
	compactFilePathsField,
	compactOutputDirectoryField,
	compactSyncsField,
	invokeActionField,
	invokeActionArgsField,
	invokeActionResourceTypeField,
	listActionSchemasField,
	listActionSchemasResourceTypeField,
	listResourceActionsField,
	invokeResourceActionField,
	invokeResourceActionTypeField,
	invokeResourceActionArgsField,
	ServerSessionStoreMaximumSizeField,

	otelCollectorEndpoint,
	otelCollectorEndpointTLSCertPath,
	otelCollectorEndpointTlSCert,
	otelCollectorEndpointTlSInsecure,
	otelTracingDisabled,
	otelLoggingDisabled,

	authMethod,
}

var DefaultRelationships = []SchemaFieldRelationship{
	FieldsRequiredTogether(grantEntitlementField, grantPrincipalField),
	FieldsRequiredTogether(clientIDField, clientSecretField),
	FieldsRequiredTogether(createTicketField, ticketTemplatePathField),
	FieldsRequiredTogether(bulkCreateTicketField, bulkTicketTemplatePathField),
	FieldsRequiredTogether(getTicketField, ticketIDField),
	FieldsRequiredTogether(diffSyncsField, diffSyncsBaseSyncField, diffSyncsAppliedSyncField),
	FieldsRequiredTogether(compactSyncsField, compactSyncIDsField, compactFilePathsField, compactOutputDirectoryField),
	FieldsMutuallyExclusive(
		grantEntitlementField,
		revokeGrantField,
		createAccountLoginField,
		deleteResourceField,
		rotateCredentialsField,
		eventFeedField,
		createTicketField,
		getTicketField,
		ListTicketSchemasField,
		bulkCreateTicketField,
	),
	FieldsMutuallyExclusive(
		grantEntitlementField,
		revokeGrantField,
		createAccountEmailField,
		deleteResourceTypeField,
		rotateCredentialsTypeField,
		eventFeedField,
		diffSyncsField,
		compactSyncsField,
		ListTicketSchemasField,
	),
	FieldsDependentOn(
		[]SchemaField{externalResourceEntitlementIdFilter},
		[]SchemaField{externalResourceC1ZField},
	),
	FieldsDependentOn(
		[]SchemaField{skipGrants},
		[]SchemaField{targetedSyncResourceIDs},
	),
}

var ErrWrongValueType = errors.New("unable to cast any to concrete type")

var LambdaServerRelationships = make([]SchemaFieldRelationship, 0)

var RelationshipToConstraintKind = map[Relationship]v1_conf.ConstraintKind{
	RequiredTogether:  v1_conf.ConstraintKind_CONSTRAINT_KIND_REQUIRED_TOGETHER,
	MutuallyExclusive: v1_conf.ConstraintKind_CONSTRAINT_KIND_MUTUALLY_EXCLUSIVE,
	AtLeastOne:        v1_conf.ConstraintKind_CONSTRAINT_KIND_AT_LEAST_ONE,
	Dependents:        v1_conf.ConstraintKind_CONSTRAINT_KIND_DEPENDENT_ON,
}