twc-rs 4.0.4

// SPDX-FileCopyrightText: 2026 RAprogramm <andrey.rozanov.vl@gmail.com>
// SPDX-License-Identifier: MIT

use std::{fmt, fs, io::Read as _};

use rust_i18n::t;
use tabled::Tabled;
use timeweb_rs::{
    apis::{configuration::Configuration, ssh_api},
    models::{AddKeyToServerRequest, CreateKeyRequest, UpdateKeyRequest}
};

use crate::{error::TwcError, output::OutputFormat};

/// Formats a float identifier for display.
fn fmt_id<T: std::fmt::Display>(v: T) -> String {
    v.to_string()
}

/// Compact row for the SSH key list table.
#[derive(Tabled)]
struct SshKeyRow {
    #[tabled(rename = "ID")]
    id:          String,
    #[tabled(rename = "Name")]
    name:        String,
    #[tabled(rename = "Fingerprint")]
    fingerprint: String,
    #[tabled(rename = "Default")]
    is_default:  String
}

impl fmt::Display for SshKeyRow {
    fn fmt(&self, f: &mut fmt::Formatter<'_>) -> fmt::Result {
        write!(
            f,
            "{} {} {} {}",
            self.id, self.name, self.fingerprint, self.is_default
        )
    }
}

/// Computes a human-readable fingerprint from an SSH public key body.
fn fingerprint(body: &str) -> String {
    let fp = body.split_whitespace().nth(1);
    fp.map_or_else(
        || "-".to_string(),
        |f| {
            let bytes: Vec<u8> = f
                .as_bytes()
                .chunks(2)
                .filter_map(|c| u8::from_str_radix(std::str::from_utf8(c).unwrap_or(""), 16).ok())
                .collect();
            if bytes.len() >= 16 {
                let hex: Vec<String> = bytes[..16].iter().map(|b| format!("{b:02x}")).collect();
                hex.join(":")
            } else {
                f.to_string()
            }
        }
    )
}

/// Lists all SSH keys.
///
/// # Overview
///
/// Fetches all SSH keys from the Timeweb Cloud API and displays
/// them in the requested output format.
///
/// # Errors
///
/// Returns [`TwcError::Api`] on network or API failures.
pub async fn list(config: &Configuration, format: OutputFormat) -> Result<(), TwcError> {
    let resp = ssh_api::get_keys(config).await?;

    let rows: Vec<SshKeyRow> = resp
        .ssh_keys
        .iter()
        .map(|k| SshKeyRow {
            id:          fmt_id(k.id),
            name:        k.name.clone(),
            fingerprint: fingerprint(&k.body),
            is_default:  k
                .is_default
                .map_or_else(|| "-".to_string(), |d| d.to_string())
        })
        .collect();

    match format {
        OutputFormat::Table => {
            if rows.is_empty() {
                println!("{}", t!("cli.no_ssh_keys_found"));
            } else {
                let table = crate::output::render_table(&rows);
                println!("{table}");
            }
        }
        OutputFormat::Json | OutputFormat::Yaml => {
            let out = crate::output::serialized(format, &resp.ssh_keys)
                .transpose()?
                .unwrap_or_default();
            println!("{out}");
        }
        OutputFormat::Quiet => {
            for k in &resp.ssh_keys {
                println!("{}\t{}", fmt_id(k.id), k.name);
            }
        }
    }
    Ok(())
}

/// Adds an SSH key.
///
/// # Overview
///
/// Reads a public key from a file or stdin and uploads it
/// to the Timeweb Cloud API.
///
/// # Errors
///
/// Returns [`TwcError::Io`] on file read failure or
/// [`TwcError::Api`] on API failure.
pub async fn add(
    config: &Configuration,
    name: &str,
    file_path: Option<&str>,
    is_default: bool
) -> Result<(), TwcError> {
    let body = read_key_body(file_path)?;
    add_key(config, name, body, is_default).await
}

/// Reads the public key body from a file, or from stdin when no path is
/// given.
///
/// # Errors
///
/// Returns [`TwcError::Io`] when the file or stdin cannot be read.
fn read_key_body(file_path: Option<&str>) -> Result<String, TwcError> {
    if let Some(path) = file_path {
        fs::read_to_string(path).map_err(|e| TwcError::Io(format!("failed to read {path}: {e}")))
    } else {
        let mut buf = String::new();
        std::io::stdin()
            .read_to_string(&mut buf)
            .map_err(|e| TwcError::Io(format!("failed to read stdin: {e}")))?;
        Ok(buf)
    }
}

/// Uploads an already-read public key body to the Timeweb Cloud API.
///
/// # Errors
///
/// Returns [`TwcError::Io`] when the body is empty or
/// [`TwcError::Api`] on API failure.
pub async fn add_key(
    config: &Configuration,
    name: &str,
    body: String,
    is_default: bool
) -> Result<(), TwcError> {
    let body = body.trim().to_string();
    if body.is_empty() {
        return Err(TwcError::Io("SSH key body is empty".to_string()));
    }

    let req = CreateKeyRequest::new(body, is_default, name.to_string());
    let resp = ssh_api::create_key(config, req).await?;
    println!(
        "{}",
        t!("cli.ssh_key_created", name => resp.ssh_key.name, id => fmt_id(resp.ssh_key.id))
    );
    Ok(())
}

/// Deletes an SSH key by ID.
///
/// # Overview
///
/// Sends a delete request for the specified SSH key.
///
/// # Errors
///
/// Returns [`TwcError::Api`] on network or API failures.
pub async fn delete(config: &Configuration, id: i32) -> Result<(), TwcError> {
    ssh_api::delete_key(config, id).await?;
    println!("{}", t!("cli.ssh_key_deleted", id => id));
    Ok(())
}

/// Shows detailed information about a single SSH key.
///
/// # Overview
///
/// Fetches one SSH key by ID and renders it in the requested format.
///
/// # Errors
///
/// Returns [`TwcError::Api`] on network or API failures.
pub async fn info(config: &Configuration, id: i32, format: OutputFormat) -> Result<(), TwcError> {
    let resp = ssh_api::get_key(config, id).await?;
    let key = &resp.ssh_key;

    match format {
        OutputFormat::Table => {
            println!("ID:            {}", fmt_id(key.id));
            println!("Name:          {}", key.name);
            println!(
                "Default:       {}",
                key.is_default
                    .map_or_else(|| "-".to_string(), |d| d.to_string())
            );
            println!("Fingerprint:   {}", fingerprint(&key.body));
            println!("Created:       {}", key.created_at.to_rfc3339());
            println!("Used by:       {}", fmt_id(key.used_by.len()));
            println!("Body:          {}", key.body);
        }
        OutputFormat::Json | OutputFormat::Yaml => {
            if let Some(out) = crate::output::serialized(format, key.as_ref()) {
                println!("{}", out?);
            }
        }
        OutputFormat::Quiet => {
            println!("{}\t{}", fmt_id(key.id), key.name);
        }
    }
    Ok(())
}

/// Edits an SSH key's name and/or default flag.
///
/// # Overview
///
/// Sends a partial update for the specified SSH key. Only the provided
/// fields are changed; omitted fields are left untouched.
///
/// # Errors
///
/// Returns [`TwcError::Api`] on network or API failures.
pub async fn edit(
    config: &Configuration,
    id: i32,
    name: Option<&str>,
    is_default: Option<bool>
) -> Result<(), TwcError> {
    let mut req = UpdateKeyRequest::new();
    req.name = name.map(ToString::to_string);
    req.is_default = is_default;

    let resp = ssh_api::update_key(config, id, req).await?;
    println!(
        "{}",
        t!("cli.ssh_key_updated", name => resp.ssh_key.name, id => fmt_id(resp.ssh_key.id))
    );
    Ok(())
}

/// Attaches one or more existing SSH keys to a cloud server.
///
/// # Overview
///
/// Copies the given SSH keys onto the server so they are authorized for
/// root login, mirroring the official CLI's `ssh-key add` operation.
///
/// # Errors
///
/// Returns [`TwcError::Api`] on network or API failures.
pub async fn attach(
    config: &Configuration,
    server_id: i32,
    key_ids: &[i32]
) -> Result<(), TwcError> {
    let ids: Vec<f64> = key_ids.iter().map(|id| f64::from(*id)).collect();
    let req = AddKeyToServerRequest::new(ids);
    ssh_api::add_key_to_server(config, server_id, req).await?;

    let keys = key_ids
        .iter()
        .map(ToString::to_string)
        .collect::<Vec<_>>()
        .join(", ");
    println!(
        "{}",
        t!("cli.ssh_key_attached", keys => keys, server => server_id)
    );
    Ok(())
}

/// Detaches an SSH key from a cloud server.
///
/// # Overview
///
/// Removes a previously attached SSH key from the server's authorized keys.
///
/// # Errors
///
/// Returns [`TwcError::Api`] on network or API failures.
pub async fn detach(config: &Configuration, server_id: i32, key_id: i32) -> Result<(), TwcError> {
    ssh_api::delete_key_from_server(config, server_id, key_id).await?;
    println!(
        "{}",
        t!("cli.ssh_key_detached", key => key_id, server => server_id)
    );
    Ok(())
}

#[cfg(test)]
mod tests;