// Code generated by sidekick. DO NOT EDIT.
//
// Copyright 2026 Google LLC
//
// Licensed under the Apache License, Version 2.0 (the "License");
// you may not use this file except in compliance with the License.
// You may obtain a copy of the License at
//
//     https://www.apache.org/licenses/LICENSE-2.0
//
// Unless required by applicable law or agreed to in writing, software
// distributed under the License is distributed on an "AS IS" BASIS,
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
// See the License for the specific language governing permissions and
// limitations under the License.

#if OrganizationSecurityPolicies || RegionSecurityPolicies || SecurityPolicies
  import Foundation
  import GoogleCloudWkt

  /// Represents a match condition that incoming traffic is evaluated against.
  /// Exactly one field must be specified.
  public struct SecurityPolicyRuleMatcher: Codable, Equatable, GoogleCloudWkt._AnyPackable,
    Sendable
  {
    /// The configuration options available when specifying versioned_expr.
    /// This field must be specified if versioned_expr is specified and cannot
    /// be specified if versioned_expr is not specified.
    public var config: SecurityPolicyRuleMatcherConfig? = nil

    /// User defined CEVAL expression.
    /// A CEVAL expression is used to specify match criteria such as origin.ip,
    /// source.region_code and contents in the request header.
    /// Expressions containing `evaluateThreatIntelligence` require a Cloud
    /// Armor Enterprise subscription and are not supported in Edge Policies
    /// nor in Regional Policies. Expressions containing
    /// `evaluatePreconfiguredExpr('sourceiplist-*')` require a Cloud Armor
    /// Enterprise subscription and are only supported in Global Security
    /// Policies.
    public var expr: Expr? = nil

    /// The configuration options available when specifying a user defined
    /// CEVAL expression (i.e., 'expr').
    public var exprOptions: SecurityPolicyRuleMatcherExprOptions? = nil

    /// Preconfigured versioned expression.
    /// If this field is specified, config must also be specified.
    /// Available preconfigured expressions along with their requirements are:
    /// SRC_IPS_V1 - must specify the corresponding src_ip_range field in
    /// config.
    public var versionedExpr: SecurityPolicyRuleMatcher.VersionedExpr? = nil

    /// Initialize a new instance of `SecurityPolicyRuleMatcher`.
    public init() {}

    /// Use `config` to return a new instance of this object, with some fields updated.
    ///
    /// Commonly used to initialize the value, for example:
    ///
    /// ```
    /// let value = SecurityPolicyRuleMatcher().with { $0.config = ... }
    /// ```
    public func with(_ config: (inout Self) throws -> Swift.Void) rethrows -> Self {
      var copy = self
      try config(&copy)
      return copy
    }

    /// The enumerated type for the [versionedExpr][google.cloud.compute.v1.SecurityPolicyRuleMatcher.versionedExpr] field.
    ///
    /// [google.cloud.compute.v1.SecurityPolicyRuleMatcher.versionedExpr]: <doc:SecurityPolicyRuleMatcher/VersionedExpr>
    public enum VersionedExpr: Codable, Equatable, Sendable {
      /// Matches the source IP address of a request to the IP ranges supplied
      /// in config.
      case srcIpsV1
      /// Encodes an unknown integer value.
      ///
      /// The most common cause for an unknown values is for the service to send
      /// a value unknown to the library. We recommend you update your library to
      /// the latest version.
      case unknownIntValue(Int)
      /// Encodes an unknown string value.
      ///
      /// The most common cause for an unknown values is for the service to send
      /// a value unknown to the library. We recommend you update your library to
      /// the latest version.
      case unknownStringValue(String)

      public init() {
        self = .srcIpsV1
      }

      /// Returns the integer value associated with the enumeration.
      ///
      /// If the enumeration was initialized with an unknown string value, this returns `nil`.
      public var intValue: Int? {
        switch self {
        case .srcIpsV1: return 0
        case .unknownIntValue(let v): return v
        case .unknownStringValue: return nil
        }
      }

      /// Returns the string value (or name) associated with the enumeration.
      ///
      /// If the enumeration was initialized with an unknown integer value, this returns `nil`.
      public var stringValue: Swift.String? {
        switch self {
        case .srcIpsV1: return "SRC_IPS_V1"
        case .unknownIntValue: return nil
        case .unknownStringValue(let v): return v
        }
      }

      /// Initialize from a string value.
      ///
      /// If the value is unknown, this initializes to [`unknownStringValue`](doc:VersionedExpr/unknownStringValue(_:)).
      public init(stringValue: Swift.String) {
        switch stringValue {
        case "SRC_IPS_V1": self = .srcIpsV1
        default: self = .unknownStringValue(stringValue)
        }
      }

      /// Initialize from an integer value.
      ///
      /// If the value is unknown, this initializes to [`unknownIntValue`](doc:VersionedExpr/unknownIntValue(_:)).
      public init(intValue: Int) {
        switch intValue {
        case 0: self = .srcIpsV1
        default: self = .unknownIntValue(intValue)
        }
      }

      public init(from decoder: Decoder) throws {
        let container = try decoder.singleValueContainer()
        if let v = try? container.decode(Int.self) {
          self.init(intValue: v)
          return
        }
        if let s = try? container.decode(String.self) {
          if let v = Int(s) {
            self.init(intValue: v)
          } else {
            self.init(stringValue: s)
          }
          return
        }
        throw DecodingError.dataCorruptedError(
          in: container, debugDescription: "Expected enum value, must be integer or string.")
      }

      public func encode(to encoder: Encoder) throws {
        var container = encoder.singleValueContainer()
        switch self {
        case .srcIpsV1: return try container.encode(0)
        case .unknownIntValue(let v): return try container.encode(v)
        case .unknownStringValue(let v): return try container.encode(v)
        }
      }
    }

    public static var _anyTypeUrl: Swift.String {
      return "type.googleapis.com/google.cloud.compute.v1.SecurityPolicyRuleMatcher"
    }
    public init(fromAny any: GoogleCloudWkt.`Any`) throws {
      self = try GoogleCloudWkt._slowAnyDeserialize(Self.self, from: any)
    }
    public func _pack() throws -> GoogleCloudWkt.Struct {
      return try GoogleCloudWkt._slowAnySerialize(message: self)
    }
  }
#endif
