<?php

return [
    /*
    |--------------------------------------------------------------------------
    | Graph Contract Registry
    |--------------------------------------------------------------------------
    |
    | Central place to describe Graph endpoints, allowed selects/expands, and
    | type families for supported policy types. Used for capability fallbacks
    | and drift checks.
    |
    */
    'types' => [
        'deviceConfiguration' => [
            'resource' => 'deviceManagement/deviceConfigurations',
            'allowed_select' => ['id', 'displayName', 'description', '@odata.type', 'version', 'lastModifiedDateTime'],
            'allowed_expand' => [
                'scheduledActionsForRule',
                'scheduledActionsForRule($expand=scheduledActionConfigurations)',
            ],
            'type_family' => [
                '#microsoft.graph.deviceConfiguration',
                '#microsoft.graph.windows10CustomConfiguration',
                '#microsoft.graph.iosGeneralDeviceConfiguration',
                '#microsoft.graph.androidGeneralDeviceConfiguration',
                '#microsoft.graph.macOSGeneralDeviceConfiguration',
            ],
            'create_method' => 'POST',
            'update_method' => 'PATCH',
            'id_field' => 'id',
            'hydration' => 'properties',
            'assignments_list_path' => '/deviceManagement/deviceConfigurations/{id}/assignments',
            'assignments_create_path' => '/deviceManagement/deviceConfigurations/{id}/assign',
            'assignments_create_method' => 'POST',
            'assignments_update_path' => '/deviceManagement/deviceConfigurations/{id}/assignments/{assignmentId}',
            'assignments_update_method' => 'PATCH',
            'assignments_delete_path' => '/deviceManagement/deviceConfigurations/{id}/assignments/{assignmentId}',
            'assignments_delete_method' => 'DELETE',
            'supports_scope_tags' => true,
            'scope_tag_field' => 'roleScopeTagIds',
        ],
        'groupPolicyConfiguration' => [
            'resource' => 'deviceManagement/groupPolicyConfigurations',
            'allowed_select' => ['id', 'displayName', 'description', '@odata.type', 'createdDateTime', 'lastModifiedDateTime'],
            'allowed_expand' => [],
            'type_family' => [
                '#microsoft.graph.groupPolicyConfiguration',
            ],
            'create_method' => 'POST',
            'update_method' => 'PATCH',
            'id_field' => 'id',
            'hydration' => 'properties',
            'assignments_list_path' => '/deviceManagement/groupPolicyConfigurations/{id}/assignments',
            'assignments_create_path' => '/deviceManagement/groupPolicyConfigurations/{id}/assign',
            'assignments_create_method' => 'POST',
            'assignments_update_path' => '/deviceManagement/groupPolicyConfigurations/{id}/assignments/{assignmentId}',
            'assignments_update_method' => 'PATCH',
            'assignments_delete_path' => '/deviceManagement/groupPolicyConfigurations/{id}/assignments/{assignmentId}',
            'assignments_delete_method' => 'DELETE',
        ],
        'settingsCatalogPolicy' => [
            'resource' => 'deviceManagement/configurationPolicies',
            'allowed_select' => ['id', 'name', 'displayName', 'description', '@odata.type', 'version', 'platforms', 'technologies', 'roleScopeTagIds', 'lastModifiedDateTime'],
            'allowed_expand' => ['settings'],
            'type_family' => [
                '#microsoft.graph.deviceManagementConfigurationPolicy',
            ],
            'create_method' => 'POST',
            'update_method' => 'PATCH',
            'id_field' => 'id',
            'hydration' => 'properties',
            'update_whitelist' => [
                'name',
                'description',
            ],
            'update_map' => [
                'displayName' => 'name',
            ],
            'update_strip_keys' => [
                'platforms',
                'technologies',
                'templateReference',
                'assignments',
            ],
            'member_hydration_strategy' => 'subresource_settings',
            'subresources' => [
                'settings' => [
                    'path' => 'deviceManagement/configurationPolicies/{id}/settings',
                    'collection' => true,
                    'paging' => true,
                    'allowed_select' => [],
                    'allowed_expand' => [],
                ],
            ],
            'settings_write' => [
                'path_template' => 'deviceManagement/configurationPolicies/{id}/settings',
                'method' => 'POST',
                'bulk' => true,
                'body_shape' => 'collection',
                'fallback_body_shape' => 'wrapped',
            ],
            'update_strategy' => 'settings_catalog_policy_with_settings',

            // Assignments CRUD (standard Graph pattern)
            'assignments_list_path' => '/deviceManagement/configurationPolicies/{id}/assignments',
            'assignments_create_path' => '/deviceManagement/configurationPolicies/{id}/assign',
            'assignments_create_method' => 'POST',
            'assignments_update_path' => '/deviceManagement/configurationPolicies/{id}/assignments/{assignmentId}',
            'assignments_update_method' => 'PATCH',
            'assignments_delete_path' => '/deviceManagement/configurationPolicies/{id}/assignments/{assignmentId}',
            'assignments_delete_method' => 'DELETE',

            // Scope Tags
            'supports_scope_tags' => true,
            'scope_tag_field' => 'roleScopeTagIds',
        ],
        'windowsUpdateRing' => [
            'resource' => 'deviceManagement/deviceConfigurations',
            'allowed_select' => ['id', 'displayName', 'description', '@odata.type', 'version', 'lastModifiedDateTime'],
            'allowed_expand' => [],
            'type_family' => [
                '#microsoft.graph.windowsUpdateForBusinessConfiguration',
            ],
            'create_method' => 'POST',
            'update_method' => 'PATCH',
            'id_field' => 'id',
            'hydration' => 'properties',
            'assignments_list_path' => '/deviceManagement/deviceConfigurations/{id}/assignments',
            'assignments_create_path' => '/deviceManagement/deviceConfigurations/{id}/assign',
            'assignments_create_method' => 'POST',
            'assignments_update_path' => '/deviceManagement/deviceConfigurations/{id}/assignments/{assignmentId}',
            'assignments_update_method' => 'PATCH',
            'assignments_delete_path' => '/deviceManagement/deviceConfigurations/{id}/assignments/{assignmentId}',
            'assignments_delete_method' => 'DELETE',
            'supports_scope_tags' => true,
            'scope_tag_field' => 'roleScopeTagIds',
        ],
        'deviceCompliancePolicy' => [
            'resource' => 'deviceManagement/deviceCompliancePolicies',
            'allowed_select' => ['id', 'displayName', 'description', '@odata.type', 'version', 'lastModifiedDateTime'],
            'allowed_expand' => [],
            'type_family' => [
                '#microsoft.graph.deviceCompliancePolicy',
                '#microsoft.graph.windows10CompliancePolicy',
                '#microsoft.graph.iosCompliancePolicy',
                '#microsoft.graph.androidCompliancePolicy',
                '#microsoft.graph.macOSCompliancePolicy',
            ],
            'create_method' => 'POST',
            'update_method' => 'PATCH',
            'id_field' => 'id',
            'hydration' => 'properties',
            'assignments_list_path' => '/deviceManagement/deviceCompliancePolicies/{id}/assignments',
            'assignments_create_path' => '/deviceManagement/deviceCompliancePolicies/{id}/assign',
            'assignments_create_method' => 'POST',
            'assignments_update_path' => '/deviceManagement/deviceCompliancePolicies/{id}/assignments/{assignmentId}',
            'assignments_update_method' => 'PATCH',
            'assignments_delete_path' => '/deviceManagement/deviceCompliancePolicies/{id}/assignments/{assignmentId}',
            'assignments_delete_method' => 'DELETE',
            'supports_scope_tags' => true,
            'scope_tag_field' => 'roleScopeTagIds',
        ],
        'appProtectionPolicy' => [
            'resource' => 'deviceAppManagement/managedAppPolicies',
            'allowed_select' => ['id', 'displayName', 'description', '@odata.type', 'version'],
            'allowed_expand' => [],
            'type_family' => [
                '#microsoft.graph.targetedManagedAppProtection',
            ],
            'create_method' => 'POST',
            'update_method' => 'PATCH',
            'id_field' => 'id',
            'hydration' => 'properties',
        ],
        'conditionalAccessPolicy' => [
            'resource' => 'identity/conditionalAccess/policies',
            'allowed_select' => ['id', 'displayName', 'state', 'createdDateTime', 'modifiedDateTime', '@odata.type'],
            'allowed_expand' => [],
            'type_family' => [
                '#microsoft.graph.conditionalAccessPolicy',
            ],
            'create_method' => 'POST',
            'update_method' => 'PATCH',
            'id_field' => 'id',
            'hydration' => 'properties',
        ],
        'deviceManagementScript' => [
            'resource' => 'deviceManagement/deviceManagementScripts',
            'allowed_select' => ['id', 'displayName', 'description', '@odata.type', 'lastModifiedDateTime'],
            'allowed_expand' => [],
            'type_family' => [
                '#microsoft.graph.deviceManagementScript',
            ],
            'create_method' => 'POST',
            'update_method' => 'PATCH',
            'id_field' => 'id',
            'hydration' => 'properties',
            'assignments_list_path' => '/deviceManagement/deviceManagementScripts/{id}/assignments',
            'assignments_create_path' => '/deviceManagement/deviceManagementScripts/{id}/assign',
            'assignments_create_method' => 'POST',
            'assignments_payload_key' => 'deviceManagementScriptAssignments',
            'assignments_update_path' => '/deviceManagement/deviceManagementScripts/{id}/assignments/{assignmentId}',
            'assignments_update_method' => 'PATCH',
            'assignments_delete_path' => '/deviceManagement/deviceManagementScripts/{id}/assignments/{assignmentId}',
            'assignments_delete_method' => 'DELETE',
        ],
        'deviceShellScript' => [
            'resource' => 'deviceManagement/deviceShellScripts',
            'allowed_select' => ['id', 'displayName', 'description', '@odata.type', 'lastModifiedDateTime'],
            'allowed_expand' => [],
            'type_family' => [
                '#microsoft.graph.deviceShellScript',
            ],
            'create_method' => 'POST',
            'update_method' => 'PATCH',
            'id_field' => 'id',
            'hydration' => 'properties',
            'assignments_list_path' => '/deviceManagement/deviceShellScripts/{id}/assignments',
            'assignments_create_path' => '/deviceManagement/deviceShellScripts/{id}/assign',
            'assignments_create_method' => 'POST',
            'assignments_payload_key' => 'deviceManagementScriptAssignments',
            'assignments_update_path' => '/deviceManagement/deviceShellScripts/{id}/assignments/{assignmentId}',
            'assignments_update_method' => 'PATCH',
            'assignments_delete_path' => '/deviceManagement/deviceShellScripts/{id}/assignments/{assignmentId}',
            'assignments_delete_method' => 'DELETE',
        ],
        'deviceHealthScript' => [
            'resource' => 'deviceManagement/deviceHealthScripts',
            'allowed_select' => ['id', 'displayName', 'description', '@odata.type', 'lastModifiedDateTime'],
            'allowed_expand' => [],
            'type_family' => [
                '#microsoft.graph.deviceHealthScript',
            ],
            'create_method' => 'POST',
            'update_method' => 'PATCH',
            'id_field' => 'id',
            'hydration' => 'properties',
            'assignments_list_path' => '/deviceManagement/deviceHealthScripts/{id}/assignments',
            'assignments_create_path' => '/deviceManagement/deviceHealthScripts/{id}/assign',
            'assignments_create_method' => 'POST',
            'assignments_payload_key' => 'deviceHealthScriptAssignments',
            'assignments_update_path' => '/deviceManagement/deviceHealthScripts/{id}/assignments/{assignmentId}',
            'assignments_update_method' => 'PATCH',
            'assignments_delete_path' => '/deviceManagement/deviceHealthScripts/{id}/assignments/{assignmentId}',
            'assignments_delete_method' => 'DELETE',
        ],
        'enrollmentRestriction' => [
            'resource' => 'deviceManagement/deviceEnrollmentConfigurations',
            'allowed_select' => ['id', 'displayName', 'description', '@odata.type', 'version'],
            'allowed_expand' => [],
            'type_family' => [
                '#microsoft.graph.deviceEnrollmentConfiguration',
                '#microsoft.graph.windows10EnrollmentCompletionPageConfiguration',
            ],
            'create_method' => 'POST',
            'update_method' => 'PATCH',
            'id_field' => 'id',
            'hydration' => 'properties',
            'assignments_list_path' => '/deviceManagement/deviceEnrollmentConfigurations/{id}/assignments',
            'assignments_create_path' => '/deviceManagement/deviceEnrollmentConfigurations/{id}/assign',
            'assignments_create_method' => 'POST',
            'assignments_payload_key' => 'enrollmentConfigurationAssignments',
        ],
        'windowsAutopilotDeploymentProfile' => [
            'resource' => 'deviceManagement/windowsAutopilotDeploymentProfiles',
            'allowed_select' => ['id', 'displayName', 'description', '@odata.type', 'lastModifiedDateTime'],
            'allowed_expand' => [],
            'type_family' => [
                '#microsoft.graph.windowsAutopilotDeploymentProfile',
                '#microsoft.graph.azureADWindowsAutopilotDeploymentProfile',
                '#microsoft.graph.activeDirectoryWindowsAutopilotDeploymentProfile',
            ],
            'create_method' => 'POST',
            'update_method' => 'PATCH',
            'id_field' => 'id',
            'hydration' => 'properties',
            'strip_odata' => false,
            'update_strip_keys' => [
                'assignments',
                'managementServiceAppId',
                'outOfBoxExperienceSetting',
                'hardwareHashExtractionEnabled',
                'locale',
            ],
            'assignments_list_path' => '/deviceManagement/windowsAutopilotDeploymentProfiles/{id}/assignments',
            'assignments_create_path' => '/deviceManagement/windowsAutopilotDeploymentProfiles/{id}/assignments',
            'assignments_create_method' => 'POST',
            'assignments_delete_path' => '/deviceManagement/windowsAutopilotDeploymentProfiles/{id}/assignments/{assignmentId}',
            'assignments_delete_method' => 'DELETE',
        ],
        'windowsEnrollmentStatusPage' => [
            'resource' => 'deviceManagement/deviceEnrollmentConfigurations',
            'allowed_select' => ['id', 'displayName', 'description', '@odata.type', 'version'],
            'allowed_expand' => [],
            'type_family' => [
                '#microsoft.graph.windows10EnrollmentCompletionPageConfiguration',
            ],
            'create_method' => 'POST',
            'update_method' => 'PATCH',
            'id_field' => 'id',
            'hydration' => 'properties',
            'assignments_list_path' => '/deviceManagement/deviceEnrollmentConfigurations/{id}/assignments',
            'assignments_create_path' => '/deviceManagement/deviceEnrollmentConfigurations/{id}/assign',
            'assignments_create_method' => 'POST',
            'assignments_payload_key' => 'enrollmentConfigurationAssignments',
        ],
        'endpointSecurityIntent' => [
            'resource' => 'deviceManagement/intents',
            'allowed_select' => ['id', 'displayName', 'description', '@odata.type', 'lastModifiedDateTime'],
            'allowed_expand' => [],
            'type_family' => [
                '#microsoft.graph.deviceManagementIntent',
            ],
            'create_method' => 'POST',
            'update_method' => 'PATCH',
            'id_field' => 'id',
            'hydration' => 'properties',
        ],
        'mobileApp' => [
            'resource' => 'deviceAppManagement/mobileApps',
            'allowed_select' => ['id', 'displayName', 'publisher', 'description', '@odata.type', 'createdDateTime', 'lastModifiedDateTime'],
            'allowed_expand' => [],
            'type_family' => [
                '#microsoft.graph.mobileApp',
            ],
            'create_method' => 'POST',
            'update_method' => 'PATCH',
            'id_field' => 'id',
            'hydration' => 'properties',
        ],
        'assignmentFilter' => [
            'resource' => 'deviceManagement/assignmentFilters',
            'allowed_select' => ['id', 'displayName', 'description', 'platform', 'rule', 'roleScopeTagIds'],
            'allowed_expand' => [],
            'type_family' => [
                '#microsoft.graph.deviceAndAppManagementAssignmentFilter',
            ],
            'create_method' => 'POST',
            'update_method' => 'PATCH',
            'id_field' => 'id',
            'hydration' => 'properties',
            'update_strip_keys' => [
                'isBuiltIn',
                'createdDateTime',
                'lastModifiedDateTime',
            ],
        ],
        'roleScopeTag' => [
            'resource' => 'deviceManagement/roleScopeTags',
            'allowed_select' => ['id', 'displayName', 'description', 'isBuiltIn'],
            'allowed_expand' => [],
            'type_family' => [
                '#microsoft.graph.roleScopeTag',
            ],
            'create_method' => 'POST',
            'update_method' => 'PATCH',
            'id_field' => 'id',
            'hydration' => 'properties',
            'update_strip_keys' => [
                'isBuiltIn',
                'createdDateTime',
                'lastModifiedDateTime',
            ],
        ],
        'notificationMessageTemplate' => [
            'resource' => 'deviceManagement/notificationMessageTemplates',
            'allowed_select' => ['id', 'displayName', 'description', 'brandingOptions', 'lastModifiedDateTime'],
            'allowed_expand' => [],
            'type_family' => [
                '#microsoft.graph.notificationMessageTemplate',
            ],
            'create_method' => 'POST',
            'update_method' => 'PATCH',
            'id_field' => 'id',
            'hydration' => 'properties',
            'update_strip_keys' => [
                'localizedNotificationMessages',
                'createdDateTime',
                'lastModifiedDateTime',
            ],
        ],
    ],
];