"""OpenBSD: hw.* sysctls for the hardware, uname for release and kernel."""

from __future__ import annotations

from napalm_device_types import FingerprintRule

from napalm_bsd import parse
from napalm_bsd.base import BASE_SYSTEM, BsdDriver


class OpenBSDDriver(BsdDriver):
    """NAPALM driver for OpenBSD hosts, over SSH."""

    TYPE_LABEL = "OpenBSD"
    VENDOR = "OpenBSD"
    DRIVER_NAME = "openbsd"
    # OpenBSD's SSH banner names no OS; its sysDescr does ("OpenBSD host 7.9 GENERIC.MP#449").
    SNMP_FINGERPRINT = [FingerprintRule("openbsd", weight=5.0)]

    OS_VERSION_COMMAND = "uname -sr"
    # The kernel's build, e.g. GENERIC.MP#449; the release is in uname -r.
    KERNEL_COMMAND = "uname -v"
    # A sysctl node the machine lacks fails on its own and prints nothing.
    PLATFORM_COMMAND = (
        "for k in vendor product serialno; do "
        'printf "%s=%s\\n" "$k" "$(sysctl -n hw.$k 2>/dev/null)"; done'
    )

    # fstat shows a user only their own processes; netstat shows every socket, unnamed.
    LISTENING_COMMAND = "fstat -n"
    LISTENING_FALLBACK_COMMAND = "netstat -an -f inet; netstat -an -f inet6"

    def _parse_listening(self, output: str, *, attributed: bool) -> list[dict]:
        return parse.fstat_sockets(output) if attributed else parse.netstat_listening(output)

    INSTALL_COMMAND = "pkg_add -I {name}"
    UNINSTALL_COMMAND = "pkg_delete {name}"
    # rcctl check needs no root; "rcctl ls started" does.
    SERVICE_STATUS_COMMAND = (
        "for s in $(rcctl ls on); do "
        "if rcctl check $s >/dev/null 2>&1; then r=1; else r=0; fi; "
        'printf "%s\\t%s\\n" "$s" "$r"; done'
    )
    SERVICE_ACTION_COMMAND = "rcctl {action} {name}"
    SNMPD_CONF = "/etc/snmp/snmpd.conf"
    # net-snmp's rc script; "snmpd" is OpenBSD's own daemon.
    SNMPD_START = "rcctl enable netsnmpd && rcctl restart netsnmpd"

    def _parse_services(self, output: str) -> list[dict]:
        return parse.rcctl_check(output)

    def get_services(self) -> list[dict]:
        return self._parse_services(self._out(self.SERVICE_STATUS_COMMAND, timeout=120))

    def get_packages(self) -> list[dict]:
        return parse.pkg_info(self._out("pkg_info"))

    def get_available_updates(self) -> list[dict]:
        """Package updates from ``pkg_add -u -n -v``, and the base system's syspatches.

        syspatch applies its patches together and in order, so they are one
        entry (#799). Neither tool says which update is a security fix.
        """
        updates: list[dict] = [
            {**candidate, "origin": None, "security": None}
            for candidate in parse.pkg_add_candidates(
                self._out("pkg_add -u -n -v", privileged=True, timeout=300)
            )
        ]
        patches = parse.syspatch(self._out("syspatch -c", privileged=True, timeout=120))
        if patches:
            installed = parse.syspatch(self._out("syspatch -l", privileged=True))
            summary = (
                ", ".join(patches)
                if len(patches) <= 3
                else f"{len(patches)} patches: {patches[0]} … {patches[-1]}"
            )
            updates.append(
                {
                    "name": BASE_SYSTEM,
                    "current_version": installed[-1] if installed else self._out("uname -r"),
                    "new_version": summary,
                    "origin": "syspatch",
                    "security": None,
                }
            )
        return updates

    def _hardware(self) -> tuple[str, str, str]:
        hw = self._platform()
        return hw.get("vendor", ""), hw.get("product", ""), hw.get("serialno", "")