1<#
2.SYNOPSIS
3    Resolves a Foundry project ARM resource ID from a Foundry project endpoint.
4.DESCRIPTION
5    Uses the endpoint only to obtain lookup keys for Azure CLI queries. The
6    resource ID printed by this script is always the `id` returned by Azure,
7    never a locally constructed ARM resource ID.
8.EXAMPLE
9    ./resolve-project-id.ps1 -Endpoint "https://my-account.services.ai.azure.com/api/projects/my-project"
10.EXAMPLE
11    ./resolve-project-id.ps1 -Endpoint "https://my-account.services.ai.azure.com/api/projects/my-project" -Output json
12#>
13 
14[CmdletBinding()]
15param(
16    [Parameter(Mandatory = $true)]
17    [string]$Endpoint,
18 
19    [string]$Subscription,
20 
21    [string]$ResourceGroup,
22 
23    [string]$AccountName,
24 
25    [string]$ProjectName,
26 
27    [ValidateSet("id", "json")]
28    [string]$Output = "id"
29)
30 
31$ErrorActionPreference = "Stop"
32 
33function Stop-Fatal {
34    param([string]$Message)
35    [Console]::Error.WriteLine("[ERROR] $Message")
36    exit 1
37}
38 
39function Normalize-Endpoint {
40    param([string]$Value)
41    if (-not $Value) { return "" }
42    return $Value.Trim().TrimEnd("/")
43}
44 
45function Add-SubscriptionArg {
46    param([string[]]$CommandArgs)
47    if ($Subscription) {
48        return $CommandArgs + @("--subscription", $Subscription)
49    }
50    return $CommandArgs
51}
52 
53function Invoke-AzJson {
54    param([string[]]$CommandArgs)
55    $raw = & az @CommandArgs 2>&1
56    if ($LASTEXITCODE -ne 0) {
57        throw "az $($CommandArgs -join ' ') failed: $($raw -join "`n")"
58    }
59    if (-not $raw) { return $null }
60    return (($raw -join "`n") | ConvertFrom-Json -ErrorAction Stop)
61}
62 
63function Get-ProjectEndpoints {
64    param($Project)
65    $values = @()
66    if ($Project -and $Project.properties -and $Project.properties.endpoints) {
67        foreach ($property in $Project.properties.endpoints.PSObject.Properties) {
68            if ($property.Value -is [string] -and $property.Value) {
69                $values += (Normalize-Endpoint $property.Value)
70            }
71        }
72    }
73    return $values
74}
75 
76function Endpoint-MatchesProject {
77    param($Project, [string]$ExpectedEndpoint)
78    foreach ($candidate in (Get-ProjectEndpoints $Project)) {
79        if ($candidate -eq $ExpectedEndpoint) {
80            return $true
81        }
82    }
83    return $false
84}
85 
86if (-not (Get-Command az -ErrorAction SilentlyContinue)) {
87    Stop-Fatal "Azure CLI 'az' was not found on PATH."
88}
89 
90$normalizedEndpoint = Normalize-Endpoint $Endpoint
91try {
92    $endpointUri = [System.Uri]$normalizedEndpoint
93} catch {
94    Stop-Fatal "Endpoint is not a valid URI: $Endpoint"
95}
96 
97if (-not $endpointUri.Scheme.StartsWith("http")) {
98    Stop-Fatal "Endpoint must be an http or https URI."
99}
100 
101if (-not $ProjectName) {
102    $segments = @($endpointUri.AbsolutePath.Trim("/").Split("/", [System.StringSplitOptions]::RemoveEmptyEntries))
103    for ($i = 0; $i -lt $segments.Count; $i++) {
104        if ($segments[$i] -ieq "projects" -and ($i + 1) -lt $segments.Count) {
105            $ProjectName = [System.Uri]::UnescapeDataString($segments[$i + 1])
106            break
107        }
108    }
109}
110 
111if (-not $ProjectName) {
112    Stop-Fatal "Could not read the project name from the endpoint path. Re-run with -ProjectName."
113}
114 
115if (-not $AccountName) {
116    $hostParts = @($endpointUri.Host.Split("."))
117    if ($hostParts.Count -gt 0 -and $endpointUri.Host.EndsWith(".services.ai.azure.com", [System.StringComparison]::OrdinalIgnoreCase)) {
118        $AccountName = $hostParts[0]
119    }
120}
121 
122if (-not $AccountName) {
123    Stop-Fatal "Could not read the account name from the endpoint host. Re-run with -AccountName."
124}
125 
126if (-not $ResourceGroup) {
127    try {
128        $accounts = Invoke-AzJson (Add-SubscriptionArg @("cognitiveservices", "account", "list", "-o", "json"))
129    } catch {
130        Stop-Fatal $_.Exception.Message
131    }
132 
133    $matches = @($accounts | Where-Object {
134        ($_.name -ieq $AccountName) -or
135        ($_.properties.customSubDomainName -ieq $AccountName)
136    })
137 
138    if ($matches.Count -eq 0) {
139        Stop-Fatal "Could not find a Cognitive Services account matching '$AccountName'. Re-run with -ResourceGroup and -AccountName if the endpoint uses a custom host."
140    }
141 
142    if ($matches.Count -gt 1) {
143        $choices = ($matches | ForEach-Object { "$($_.resourceGroup)/$($_.name)" }) -join ", "
144        Stop-Fatal "Multiple accounts matched '$AccountName': $choices. Re-run with -ResourceGroup."
145    }
146 
147    $ResourceGroup = $matches[0].resourceGroup
148    $AccountName = $matches[0].name
149}
150 
151$project = $null
152try {
153    $project = Invoke-AzJson (Add-SubscriptionArg @(
154        "cognitiveservices", "account", "project", "show",
155        "-g", $ResourceGroup,
156        "-n", $AccountName,
157        "--project-name", $ProjectName,
158        "-o", "json"
159    ))
160} catch {
161    try {
162        $projects = Invoke-AzJson (Add-SubscriptionArg @(
163            "cognitiveservices", "account", "project", "list",
164            "-g", $ResourceGroup,
165            "-n", $AccountName,
166            "-o", "json"
167        ))
168        $project = @($projects | Where-Object { Endpoint-MatchesProject $_ $normalizedEndpoint }) | Select-Object -First 1
169    } catch {
170        Stop-Fatal $_.Exception.Message
171    }
172}
173 
174if (-not $project) {
175    Stop-Fatal "Could not resolve a Foundry project for endpoint '$normalizedEndpoint'."
176}
177 
178$projectEndpoints = @(Get-ProjectEndpoints $project)
179if ($projectEndpoints.Count -gt 0 -and -not (Endpoint-MatchesProject $project $normalizedEndpoint)) {
180    Stop-Fatal "Resolved project endpoint metadata did not match '$normalizedEndpoint'."
181}
182 
183if (-not $project.id) {
184    Stop-Fatal "Azure returned a project object without an id."
185}
186 
187if ($Output -eq "json") {
188    [ordered]@{
189        id = $project.id
190        endpoint = if ($projectEndpoints.Count -gt 0) { $projectEndpoints[0] } else { $normalizedEndpoint }
191        resourceGroup = $ResourceGroup
192        accountName = $AccountName
193        projectName = $ProjectName
194    } | ConvertTo-Json -Depth 5
195} else {
196    Write-Output $project.id
197}
198