"""CI/local check (EP-00-T03): every YAML file under config/ must validate
against its Pydantic model -- this is the thing that actually matters
(RI-PLANNING.md's "todo YAML de config tem ... validação em CI"), not just
that a JSON Schema file exists somewhere.
"""

from __future__ import annotations

import sys
from pathlib import Path

from pydantic import BaseModel

from emcp_bus.agent_runtime.identity_resolver import IdentityResolverConfig
from emcp_bus.common.config import ConfigError, load_yaml_model, load_yaml_models
from emcp_bus.downstream.models import BackendConfig
from emcp_bus.entitlement.models import ClientProfile
from emcp_bus.identity.models import ClientRegistration
from emcp_bus.identity.shared_client_lint import find_shared_client_violations
from emcp_bus.registry.models import CapabilityManifest

REPO_ROOT = Path(__file__).resolve().parents[1]
CONFIG_DIR = REPO_ROOT / "config"

CHECKS: list[tuple[str, type[BaseModel]]] = [
    ("clients/profiles", ClientProfile),
    ("clients", ClientRegistration),  # non-recursive glob: skips clients/profiles/
    ("backends", BackendConfig),
    ("capabilities/sales", CapabilityManifest),
    ("capabilities/finance", CapabilityManifest),
]


def main() -> int:
    had_errors = False
    client_registrations: list[ClientRegistration] = []
    for relative_dir, model in CHECKS:
        directory = CONFIG_DIR / relative_dir
        try:
            items = load_yaml_models(directory, model)
        except ConfigError as exc:
            print(f"FAIL  {relative_dir}: {exc}")
            had_errors = True
            continue
        print(f"OK    {relative_dir}: {len(items)} file(s) validated against {model.__name__}")
        if model is ClientRegistration:
            client_registrations = items  # type: ignore[assignment]

    # EP-12-T04: a single named file, not a directory of many.
    identity_yaml = CONFIG_DIR / "orchestrator" / "identity.yaml"
    try:
        load_yaml_model(identity_yaml, IdentityResolverConfig)
    except ConfigError as exc:
        print(f"FAIL  orchestrator/identity.yaml: {exc}")
        had_errors = True
    else:
        print("OK    orchestrator/identity.yaml: validated against IdentityResolverConfig")

    # EP-01-T05: two agents sharing an MCP Client identity must resolve to
    # the same profile (README.md §18/§35) -- a config-shape check schema
    # validation alone cannot express, since it spans multiple files.
    violations = find_shared_client_violations(client_registrations)
    if violations:
        for violation in violations:
            print(f"FAIL  clients (shared-client lint): {violation}")
        had_errors = True
    else:
        print("OK    clients (shared-client lint): no violations")

    if had_errors:
        print("\nConfig validation failed.")
        return 1
    print("\nAll config files validate against their schema.")
    return 0


if __name__ == "__main__":
    sys.exit(main())