"""
Silique (https://www.silique.fr)
Copyright (C) 2025

distribued with GPL-2 or later license

This program is free software; you can redistribute it and/or modify
it under the terms of the GNU General Public License as published by
the Free Software Foundation; either version 2 of the License, or
(at your option) any later version.

This program is distributed in the hope that it will be useful,
but WITHOUT ANY WARRANTY; without even the implied warranty of
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
GNU General Public License for more details.

You should have received a copy of the GNU General Public License
along with this program; if not, write to the Free Software
Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307  USA
"""

from subprocess import run
from json import loads
from os import environ
from shutil import which


from tiramisu.error import ConfigError, display_list
from rougail.error import ExtensionError
from .i18n import _


class FakeBW:
    def get_key(
            self,
            key_bitwarden: str,
            leader: bool,
        ):
        return [{'name': key_bitwarden, 'login': {'username': "example_login", 'password': "Ex4mpL3_P4ssw0rD"}}]


class RBW:
    def unlocked(self):
        try:
            cpe = run(["rbw", "unlocked"], capture_output=True)
        except Exception as exc:
            return False
        return cpe.returncode == 0

    def get_key(
            self,
            key_bitwarden: str,
            leader: bool,
        ):
        keys = []
        items = run_commandline(["rbw", "search", key_bitwarden]).strip()
        if items:
            items = items.split("\n")
        else:
            items = []
        for item in items:
            if "@" in item:
                keys.append(item.split("@", 1)[-1])
            else:
                keys.append(item.rsplit("/", 1)[-1])
        if not leader:
            if not items:
                return []
            if len(items) > 1:
                return [{"name": key} for key in keys]
            keys = [key_bitwarden]
        datas = []
        for key in sorted(keys):
            data = loads(
                run_commandline(
                    ["rbw", "get", key, "--raw", "--ignorecase"]
                ).strip()
            )
            datas.append({"name": key, "login": data["data"]})
        return datas


class BW:
    def unlocked(self):
        try:
            cpe = run(["bw", "status"], capture_output=True)
        except Exception as exc:
            return False
        if cpe.returncode != 0:
            return False
        try:
            data = loads(cpe.stdout.decode("utf8"))
            if data["status"] == "unlocked":
                return True
        except:
            pass
        return False

    def get_key(
            self,
            key_bitwarden: str,
            *args,
        ):
        return loads(
            run_commandline(
                ["bw", "list", "items", "--search", key_bitwarden, "--nointeraction"]
            )
        )


def run_commandline(cmd) -> str:
    cpe = run(cmd, capture_output=True)
    returncode = cpe.returncode
    err = cpe.stderr.decode("utf8")
    if returncode != 0 or err:
        raise ExtensionError("{0} ({1})".format(err, returncode))
    return cpe.stdout.decode("utf8")


class RougailUserDataBitwarden:
    def __init__(
        self,
        config: "Config",
        *,
        rougailconfig: "RougailConfig" = None,
    ):
        # this is the tiramisu config object
        self.config = config
        if rougailconfig is None:
            from rougail.config import RougailConfig

            rougailconfig = RougailConfig
            user_data = rougailconfig["step.user_data"]
            if "bitwarden" not in user_data:
                user_data.append("bitwarden")
                rougailconfig["step.user_data"] = user_data
        else:
            user_data = rougailconfig["step.user_data"]
        self.rougailconfig = rougailconfig
        if "bitwarden" not in user_data:
            raise ExtensionError(_('"bitwarden" is not set in step.user_data'))
        self.errors = []
        self.warnings = []
        self.cache = {}
        self.commands = {'rbw': RBW(),
                         'bw': BW(),
                         }

    def run(self):
        values = {}
        self.command = self.get_command()
        self.set_passwords(self.config.unrestraint, values)
        return [
            {
                "source": 'Bitwarden',
                "errors": self.errors,
                "warnings": self.warnings,
                "values": values,
                "options": {
                    "secret_manager": True,
                }
            }
        ]

    def get_command(self):
        if self.rougailconfig["bitwarden.mock_enable"]:
            return FakeBW()
        one_is_find = False
        for command_name in self.rougailconfig["bitwarden.command"]:
            if not which(command_name):
                continue
            command = self.commands[command_name]
            if not command.unlocked():
                one_is_find = True
                continue
            return command
        if one_is_find:
            msg = _("please unlock Bitwarden password database with {0} command line")
        else:
            msg = _("cannot find Bitwarden command line {0} please install it")
        raise ExtensionError(msg.format(display_list(list(self.commands))))

    def set_passwords(self, optiondescription, values):
        for option in optiondescription.list(uncalculated=True):
            if option.isoptiondescription():
                self.set_passwords(option, values)
            elif option.information.get("bitwarden", False):
                values[option.path(uncalculated=True)] = (set_password, self.cache, self.command)


def set_password(cache, command, *, option):
    key = option.value.default()
    leader = option.isleader()
    if leader:
        key = key[0]
    if not isinstance(key, str):
        raise ConfigError(
            _('the default value must be the Bitwarden item name')
        )
    if key in cache:
        data = cache[key]
        if option.isfollower():
            data = [data[option.index()]]
            key = data[0]["name"]
    else:
        try:
            data = command.get_key(key, leader)
        except Exception as exc:
            raise ConfigError(
                _(
                    'cannot execute the "{0}" commandline from Bitwarden: {1}'
                ).format(command, exc)
            )
        cache[key] = data.copy()
    if not data:
        raise ConfigError(
            _('item "{0}" in Bitwarden is not found"').format(
                key
            )
        )
    type_ = option.information.get("type")
    if leader:
        return [
            get_value(key, type_, d) for d in data
        ]
    elif len(data) != 1:
        raise ConfigError(
            _(
                'several items found with name "{0}" in Bitwarden: "{1}"'
            ).format(key, '", "'.join([d["name"] for d in data]))
        )
    return get_value(key, type_, data[0])


def get_value(key_bitwarden: str, type_: str, data: dict) -> str:
    try:
        if type_ == "secret":
            value = data["login"]["password"]
        else:
            value = data["login"]["username"]
    except Exception as exc:
        raise ConfigError(
            _('unexpected datas "{0}" from Bitwarden: {1}').format(
                key_bitwarden, exc
            )
        )
    if value is None:
        if type_ == "secret":
            bw_type = _("password")
        else:
            bw_type = _("username")
        raise ConfigError(
            _('item "{0}" in Bitwarden has no {1}').format(
                key_bitwarden, bw_type
            )
        )
    return value