package agent

import (
	"github.com/moby/swarmkit/v2/agent/configs"
	"github.com/moby/swarmkit/v2/agent/csi"
	"github.com/moby/swarmkit/v2/agent/exec"
	"github.com/moby/swarmkit/v2/agent/secrets"
	"github.com/moby/swarmkit/v2/api"
	"github.com/moby/swarmkit/v2/node/plugin"
)

type dependencyManager struct {
	secrets exec.SecretsManager
	configs exec.ConfigsManager
	volumes exec.VolumesManager
}

// NewDependencyManager creates a dependency manager object that wraps
// objects which provide access to various dependency types.
func NewDependencyManager(pg plugin.Getter) exec.DependencyManager {
	d := &dependencyManager{
		secrets: secrets.NewManager(),
		configs: configs.NewManager(),
	}
	d.volumes = csi.NewManager(pg, d.secrets)
	return d
}

func (d *dependencyManager) Secrets() exec.SecretsManager {
	return d.secrets
}

func (d *dependencyManager) Configs() exec.ConfigsManager {
	return d.configs
}

func (d *dependencyManager) Volumes() exec.VolumesManager {
	return d.volumes
}

type dependencyGetter struct {
	secrets exec.SecretGetter
	configs exec.ConfigGetter
	volumes exec.VolumeGetter
}

func (d *dependencyGetter) Secrets() exec.SecretGetter {
	return d.secrets
}

func (d *dependencyGetter) Configs() exec.ConfigGetter {
	return d.configs
}

func (d *dependencyGetter) Volumes() exec.VolumeGetter {
	return d.volumes
}

// Restrict provides getters that only allows access to the dependencies
// referenced by the task.
func Restrict(dependencies exec.DependencyManager, t *api.Task) exec.DependencyGetter {
	return &dependencyGetter{
		secrets: secrets.Restrict(dependencies.Secrets(), t),
		configs: configs.Restrict(dependencies.Configs(), t),
		volumes: csi.Restrict(dependencies.Volumes(), t),
	}
}