#!/usr/bin/env python3
"""Create a Gitea issue.

Parameterized over title/body and the target Gitea instance, mirroring
create_pr.py. Two instances are known out of the box:

    dadeschools -> gitea.dadeschools.net / Contractor / Timesheet
    prgs        -> gitea.prgs.cc        / Scaled-Tech-Consulting / Timesheet

Auth is pulled from the macOS keychain via `git credential fill` for the
chosen host -- no tokens on the command line.

Examples:
    create_issue.py --title "PDF: open after creation" \\
        --body "Auto-open the generated PDF in the default viewer."

    create_issue.py --remote prgs --title "Fix X" --body-file desc.md
"""
import sys
import json
import base64
import argparse
import subprocess
import urllib.request
import urllib.error

REMOTES = {
    "dadeschools": {"host": "gitea.dadeschools.net", "org": "Contractor",
                    "repo": "Timesheet"},
    "prgs": {"host": "gitea.prgs.cc", "org": "Scaled-Tech-Consulting",
             "repo": "Timesheet"},
}


def get_credentials(host):
    """Return (user, password) for `host` via `git credential fill`."""
    p = subprocess.Popen(
        ["git", "credential", "fill"],
        stdin=subprocess.PIPE, stdout=subprocess.PIPE, text=True,
    )
    out, _ = p.communicate(f"protocol=https\nhost={host}\n\n")
    user = password = ""
    for line in out.splitlines():
        # split(maxsplit=1): tokens/passwords can themselves contain '='.
        if line.startswith("username="):
            user = line.split("=", 1)[1]
        elif line.startswith("password="):
            password = line.split("=", 1)[1]
    return user, password


def main(argv=None):
    parser = argparse.ArgumentParser(description="Create a Gitea issue.")
    parser.add_argument("--remote", choices=sorted(REMOTES), default="dadeschools",
                        help="Known Gitea instance (default: dadeschools).")
    parser.add_argument("--host", help="Override the Gitea host.")
    parser.add_argument("--org", help="Override the owner/org.")
    parser.add_argument("--repo", help="Override the repository.")
    parser.add_argument("--title", required=True, help="Issue title.")
    parser.add_argument("--body", default="", help="Issue body text.")
    parser.add_argument("--body-file", help="Read issue body from this file ('-' for stdin).")
    args = parser.parse_args(argv)

    profile = REMOTES[args.remote]
    host = args.host or profile["host"]
    org = args.org or profile["org"]
    repo = args.repo or profile["repo"]

    body = args.body
    if args.body_file:
        if args.body_file == "-":
            body = sys.stdin.read()
        else:
            with open(args.body_file, "r", encoding="utf-8") as fh:
                body = fh.read()

    user, password = get_credentials(host)
    if not user or not password:
        print(f"Could not get credentials for {host} "
              f"(no keychain entry? try a manual `git credential fill`).",
              file=sys.stderr)
        return 1

    url = f"https://{host}/api/v1/repos/{org}/{repo}/issues"
    payload = {"title": args.title, "body": body}
    req = urllib.request.Request(
        url, data=json.dumps(payload).encode("utf-8"),
        headers={"Content-Type": "application/json"},
    )
    auth_b64 = base64.b64encode(f"{user}:{password}".encode("utf-8")).decode("utf-8")
    req.add_header("Authorization", f"Basic {auth_b64}")

    try:
        with urllib.request.urlopen(req) as response:
            data = json.load(response)
        print(f"Issue #{data.get('number')}: {data.get('html_url')}")
        return 0
    except urllib.error.HTTPError as e:
        print(f"Error {e.code}: {e.read().decode()}", file=sys.stderr)
        return 1


if __name__ == "__main__":
    sys.exit(main())