class LittleGhost::Sandbox::NetworkPolicy

# File lib/little_ghost/sandbox/network_policy.rb, line 12
def self.coerce(value)
  return nil if value.nil?
  return value if value.is_a?(self)
  return new(mode: value) if value.is_a?(Symbol) || value.is_a?(String)
  raise PolicyError, "network policy must be a mode, Hash, or Sandbox::NetworkPolicy" unless value.is_a?(Hash)

  new(**value.transform_keys(&:to_sym))
end

# File lib/little_ghost/sandbox/network_policy.rb, line 23
def initialize(mode:, allow: [], inspection: :connect, gateway: nil, authorizer: nil, forward_headers: [], mutation_headers: [])
  mode = mode.to_sym
  inspection = inspection.to_sym
  raise PolicyError, "network mode must be :inherit, :none, or :allowlist" unless MODES.include?(mode)
  unless INSPECTION_MODES.include?(inspection)
    raise PolicyError, "network inspection must be :connect or :http"
  end
  if mode != :allowlist && (!Array(allow).empty? || gateway || authorizer || !Array(forward_headers).empty? || !Array(mutation_headers).empty?)
    raise PolicyError, "network allow, gateway, authorizer, and header policy require mode :allowlist"
  end
  if inspection == :http && mode != :allowlist
    raise PolicyError, "HTTP inspection requires mode :allowlist"
  end
  if inspection == :http && !authorizer
    raise PolicyError, "HTTP inspection requires an authorizer"
  end
  if mode == :allowlist && Array(allow).empty?
    raise PolicyError, "network mode :allowlist requires at least one exact destination"
  end

  @mode = mode
  @allow = Array(allow).map { |endpoint| normalize_endpoint(endpoint) }.uniq.freeze
  @inspection = inspection
  @gateway = gateway
  @authorizer = authorizer
  @forward_headers = Array(forward_headers).map { |name| normalize_header_name(name) }.uniq.freeze
  @mutation_headers = Array(mutation_headers).map { |name| normalize_header_name(name) }.uniq.freeze
  freeze
end

# File lib/little_ghost/sandbox/network_policy.rb, line 76
def ==(other)
  other.is_a?(self.class) &&
    [mode, allow, inspection, gateway, authorizer, forward_headers, mutation_headers] ==
      [other.mode, other.allow, other.inspection, other.gateway, other.authorizer,
        other.forward_headers, other.mutation_headers]
end

# File lib/little_ghost/sandbox/network_policy.rb, line 73
def allowlist? = mode == :allowlist

# File lib/little_ghost/sandbox/network_policy.rb, line 86
def hash = [mode, allow, inspection, gateway, authorizer, forward_headers, mutation_headers].hash

# File lib/little_ghost/sandbox/network_policy.rb, line 69
def inherit? = mode == :inherit

# File lib/little_ghost/sandbox/network_policy.rb, line 71
def none? = mode == :none