using ZB.MOM.WW.Configuration;
using ZB.MOM.WW.GalaxyRepository;

namespace ZB.MOM.WW.MxGateway.Server.Configuration;

/// <summary>
/// Gateway-side startup validation for the shared <see cref="GalaxyRepositoryOptions"/>. The
/// <c>ZB.MOM.WW.GalaxyRepository</c> package binds the options but deliberately ships no validator
/// (see <c>A2-galaxyrepository-adoption-handoff.md</c>); the gateway owns the rule because it is the
/// process that writes the snapshot. When persistence is on, the snapshot path must be a valid,
/// rooted path on the running host for the same reason the auth DB path must be (SEC-33): a
/// non-rooted value silently resolves against the launch working directory.
/// </summary>
public sealed class GalaxyRepositoryOptionsValidator : OptionsValidatorBase<GalaxyRepositoryOptions>
{
    /// <inheritdoc />
    protected override void Validate(ValidationBuilder builder, GalaxyRepositoryOptions options)
    {
        if (!options.PersistSnapshot)
        {
            // Persistence disabled: the snapshot path is never used, so nothing to validate.
            return;
        }

        if (string.IsNullOrWhiteSpace(options.SnapshotCachePath))
        {
            builder.Add(
                "MxGateway:Galaxy:SnapshotCachePath is required when MxGateway:Galaxy:PersistSnapshot is true.");
            return;
        }

        GatewayConfigPathRules.AddIfInvalidPath(
            options.SnapshotCachePath,
            "MxGateway:Galaxy:SnapshotCachePath must be a valid filesystem path.",
            builder);
        GatewayConfigPathRules.AddIfNotRooted(
            options.SnapshotCachePath,
            "MxGateway:Galaxy:SnapshotCachePath must be an absolute (rooted) path so the Galaxy snapshot never lands in the launch working directory.",
            builder);
    }
}