convergio-mesh 0.1.13

//! INI parser and serialiser for ~/.claude/config/peers.conf.
//!
//! Format: `[section_name]` + `key=value` lines.
//! `[mesh]` for global config, `[peer_name]` for each peer.

use std::collections::BTreeMap;

use crate::peers_types::{canonical_peer_name, PeerConfig, PeersError};

fn require(map: &BTreeMap<String, String>, key: &str, peer: &str) -> Result<String, PeersError> {
    map.get(key)
        .cloned()
        .ok_or_else(|| PeersError::MissingField {
            peer: peer.to_owned(),
            field: key.to_owned(),
        })
}

fn parse_capabilities(raw: &str) -> Vec<String> {
    raw.split(',')
        .map(|s| s.trim().to_owned())
        .filter(|s| !s.is_empty())
        .collect()
}

fn build_peer(name: &str, kv: &BTreeMap<String, String>) -> Result<PeerConfig, PeersError> {
    Ok(PeerConfig {
        ssh_alias: require(kv, "ssh_alias", name)?,
        user: require(kv, "user", name)?,
        os: require(kv, "os", name)?,
        tailscale_ip: require(kv, "tailscale_ip", name)?,
        dns_name: require(kv, "dns_name", name)?,
        capabilities: parse_capabilities(&require(kv, "capabilities", name)?),
        role: require(kv, "role", name)?,
        status: kv
            .get("status")
            .cloned()
            .unwrap_or_else(|| "active".to_owned()),
        thunderbolt_ip: kv.get("thunderbolt_ip").cloned(),
        lan_ip: kv.get("lan_ip").cloned(),
        mac_address: kv.get("mac_address").cloned(),
        gh_account: kv.get("gh_account").cloned(),
        runners: kv.get("runners").and_then(|v| v.parse::<u32>().ok()),
        runner_paths: kv.get("runner_paths").cloned(),
        repo_path: kv.get("repo_path").cloned(),
        aliases: kv
            .get("aliases")
            .map(|v| parse_capabilities(v))
            .unwrap_or_default(),
    })
}

fn flush_section(
    section: &Option<String>,
    kv: &BTreeMap<String, String>,
    secret: &mut String,
    peers: &mut BTreeMap<String, PeerConfig>,
) -> Result<(), PeersError> {
    if let Some(name) = section {
        if name == "mesh" {
            if let Some(s) = kv.get("shared_secret") {
                *secret = s.clone();
            }
        } else {
            // Canonicalize identity so `M5Max.local` and `M5Max` collapse to one entry.
            let canon = canonical_peer_name(name);
            let mut cfg = build_peer(name, kv)?;
            // Preserve the raw section name as an alias if it differs from the canonical
            // form, so observability/back-references survive the normalization.
            if name != &canon && !cfg.aliases.iter().any(|a| a == name) {
                cfg.aliases.push(name.clone());
            }
            if let Some(existing) = peers.get_mut(&canon) {
                // Duplicate identity → merge aliases, keep first definition's fields.
                for alias in cfg.aliases.into_iter().chain(std::iter::once(name.clone())) {
                    if alias != canon && !existing.aliases.iter().any(|a| a == &alias) {
                        existing.aliases.push(alias);
                    }
                }
            } else {
                peers.insert(canon, cfg);
            }
        }
    }
    Ok(())
}

pub fn parse_ini(text: &str) -> Result<(String, BTreeMap<String, PeerConfig>), PeersError> {
    let mut shared_secret = String::new();
    let mut peers: BTreeMap<String, PeerConfig> = BTreeMap::new();
    let mut current_section: Option<String> = None;
    let mut current_kv: BTreeMap<String, String> = BTreeMap::new();

    for (lineno, raw) in text.lines().enumerate() {
        let line = raw.trim();
        if line.is_empty() || line.starts_with('#') {
            continue;
        }
        if line.starts_with('[') && line.ends_with(']') {
            flush_section(
                &current_section,
                &current_kv,
                &mut shared_secret,
                &mut peers,
            )?;
            current_section = Some(line[1..line.len() - 1].to_owned());
            current_kv = BTreeMap::new();
        } else if let Some(eq) = line.find('=') {
            let key = line[..eq].trim().to_owned();
            let val = line[eq + 1..].trim().to_owned();
            current_kv.insert(key, val);
        } else {
            return Err(PeersError::Parse {
                line: lineno + 1,
                msg: format!("unexpected content: {line}"),
            });
        }
    }
    flush_section(
        &current_section,
        &current_kv,
        &mut shared_secret,
        &mut peers,
    )?;
    Ok((shared_secret, peers))
}

fn caps_str(caps: &[String]) -> String {
    caps.join(",")
}

/// Sanitize a value for INI output: strip newlines and leading `[` to prevent
/// section injection and key=value injection.
fn sanitize_ini_value(s: &str) -> String {
    s.chars()
        .filter(|c| *c != '\n' && *c != '\r')
        .collect::<String>()
        .trim()
        .to_string()
}

pub fn peer_to_ini(name: &str, p: &PeerConfig) -> String {
    let name = sanitize_ini_value(name);
    let mut out = format!(
        "[{name}]\nssh_alias={}\nuser={}\nos={}\n\
         tailscale_ip={}\ndns_name={}\ncapabilities={}\n\
         role={}\nstatus={}\n",
        sanitize_ini_value(&p.ssh_alias),
        sanitize_ini_value(&p.user),
        sanitize_ini_value(&p.os),
        sanitize_ini_value(&p.tailscale_ip),
        sanitize_ini_value(&p.dns_name),
        sanitize_ini_value(&caps_str(&p.capabilities)),
        sanitize_ini_value(&p.role),
        sanitize_ini_value(&p.status),
    );
    if let Some(ref tb) = p.thunderbolt_ip {
        out.push_str(&format!("thunderbolt_ip={}\n", sanitize_ini_value(tb)));
    }
    if let Some(ref lan) = p.lan_ip {
        out.push_str(&format!("lan_ip={}\n", sanitize_ini_value(lan)));
    }
    if let Some(ref mac) = p.mac_address {
        out.push_str(&format!("mac_address={}\n", sanitize_ini_value(mac)));
    }
    if let Some(ref gh) = p.gh_account {
        out.push_str(&format!("gh_account={}\n", sanitize_ini_value(gh)));
    }
    if let Some(r) = p.runners {
        out.push_str(&format!("runners={r}\n"));
    }
    if let Some(ref rp) = p.runner_paths {
        out.push_str(&format!("runner_paths={}\n", sanitize_ini_value(rp)));
    }
    if let Some(ref rp) = p.repo_path {
        out.push_str(&format!("repo_path={}\n", sanitize_ini_value(rp)));
    }
    if !p.aliases.is_empty() {
        out.push_str(&format!(
            "aliases={}\n",
            sanitize_ini_value(&p.aliases.join(","))
        ));
    }
    out
}

#[cfg(test)]
mod tests {
    use super::*;

    #[test]
    fn parse_basic_ini() {
        let ini = "[mesh]\nshared_secret=s3cr3t\n\n\
                   [node1]\nssh_alias=n1\nuser=bob\nos=linux\n\
                   tailscale_ip=100.1.2.3\ndns_name=n1.ts.net\n\
                   capabilities=claude\nrole=worker\nstatus=active\n";
        let (secret, peers) = parse_ini(ini).unwrap();
        assert_eq!(secret, "s3cr3t");
        assert_eq!(peers.len(), 1);
        assert_eq!(peers["node1"].user, "bob");
    }

    #[test]
    fn roundtrip_peer_to_ini() {
        let peer = PeerConfig {
            ssh_alias: "a".into(),
            user: "u".into(),
            os: "macos".into(),
            tailscale_ip: "100.0.0.1".into(),
            dns_name: "d.ts.net".into(),
            capabilities: vec!["claude".into(), "copilot".into()],
            role: "worker".into(),
            status: "active".into(),
            thunderbolt_ip: None,
            lan_ip: None,
            mac_address: None,
            gh_account: None,
            runners: None,
            runner_paths: None,
            repo_path: None,
            aliases: vec![],
        };
        let ini = peer_to_ini("test", &peer);
        assert!(ini.contains("[test]"));
        assert!(ini.contains("capabilities=claude,copilot"));
    }

    #[test]
    fn sanitize_ini_strips_newlines() {
        assert_eq!(sanitize_ini_value("val\nue"), "value");
        assert_eq!(sanitize_ini_value("val\r\nue"), "value");
        assert_eq!(sanitize_ini_value("clean"), "clean");
    }

    #[test]
    fn duplicate_dot_local_collapses_to_canonical_entry() {
        // Two sections: `M5Max.local` and `M5Max` must collapse into one
        // canonical entry keyed by `m5max`, with both raw names preserved
        // as aliases.
        let ini = "[mesh]\nshared_secret=s\n\n\
                   [M5Max.local]\nssh_alias=m5\nuser=rob\nos=macos\n\
                   tailscale_ip=100.0.0.5\ndns_name=m5.ts.net\n\
                   capabilities=claude\nrole=worker\nstatus=active\n\n\
                   [M5Max]\nssh_alias=m5\nuser=rob\nos=macos\n\
                   tailscale_ip=100.0.0.5\ndns_name=m5.ts.net\n\
                   capabilities=claude\nrole=worker\nstatus=active\n";
        let (_, peers) = parse_ini(ini).unwrap();
        assert_eq!(peers.len(), 1, "duplicates must collapse to one entry");
        assert!(peers.contains_key("m5max"));
        let entry = &peers["m5max"];
        assert!(entry.aliases.iter().any(|a| a == "M5Max.local"));
        assert!(entry.aliases.iter().any(|a| a == "M5Max"));
    }

    #[test]
    fn case_variants_collapse_to_canonical_entry() {
        // `m5max.LOCAL` and `M5Max` must also collapse.
        let ini = "[mesh]\nshared_secret=s\n\n\
                   [m5max.LOCAL]\nssh_alias=m5\nuser=rob\nos=macos\n\
                   tailscale_ip=100.0.0.5\ndns_name=m5.ts.net\n\
                   capabilities=claude\nrole=worker\nstatus=active\n\n\
                   [M5Max]\nssh_alias=m5\nuser=rob\nos=macos\n\
                   tailscale_ip=100.0.0.5\ndns_name=m5.ts.net\n\
                   capabilities=claude\nrole=worker\nstatus=active\n";
        let (_, peers) = parse_ini(ini).unwrap();
        assert_eq!(peers.len(), 1);
        assert!(peers.contains_key("m5max"));
    }

    #[test]
    fn ini_injection_prevented() {
        let peer = PeerConfig {
            ssh_alias: "a\n[injected]\nmalicious=true".into(),
            user: "u".into(),
            os: "macos".into(),
            tailscale_ip: "100.0.0.1".into(),
            dns_name: "d.ts.net".into(),
            capabilities: vec![],
            role: "worker".into(),
            status: "active".into(),
            thunderbolt_ip: None,
            lan_ip: None,
            mac_address: None,
            gh_account: None,
            runners: None,
            runner_paths: None,
            repo_path: None,
            aliases: vec![],
        };
        let ini = peer_to_ini("test", &peer);
        // After sanitization, newlines are stripped so no new section is created.
        // The value becomes "a[injected]malicious=true" — harmless as a value.
        // Re-parse and verify no extra section was injected.
        let (_, peers) = parse_ini(&ini).unwrap();
        assert_eq!(peers.len(), 1, "only one peer section should exist");
        assert!(peers.contains_key("test"));
        // The malicious key=value pair must not appear as a standalone line
        assert!(!ini.contains("\nmalicious=true\n"));
    }
}