#!/usr/bin/env python3
"""Holt crs326-core intended config aus Nautobot, setzt WG-Privkey,
fügt ap1 static leases hinzu, speichert als tp15-core-cutover-intended.rsc.
"""
import json
import pathlib
import re
import urllib.request

NAUTOBOT_URL = "http://10.40.20.154:8080"
TOKEN_PATH = pathlib.Path(__file__).parent.parent / "docs" / "nas-vlan20" / "stacks" / "210-nautobot.yml"
OUT = pathlib.Path(__file__).with_name("tp15-core-cutover-intended.rsc")
LEASES_RSC = pathlib.Path(__file__).with_name("ap1-leases-to-core.rsc")
PRIVKEY_PATH = pathlib.Path(__file__).with_name("ap1-wg-hub.privkey")


def get_token():
    text = TOKEN_PATH.read_text()
    m = re.search(r"^NAUTOBOT_SUPERUSER_API_TOKEN=(.+)$", text, re.MULTILINE)
    if not m:
        raise SystemExit("NAUTOBOT_SUPERUSER_API_TOKEN not found")
    return m.group(1).strip()


def main():
    token = get_token()
    req = urllib.request.Request(
        f"{NAUTOBOT_URL}/api/plugins/golden-config/golden-config/?device=crs326-core",
        headers={"Authorization": f"Token {token}", "Accept": "application/json"},
    )
    with urllib.request.urlopen(req) as resp:
        data = json.loads(resp.read().decode())
    config = data["results"][0]["intended_config"]

    privkey = PRIVKEY_PATH.read_text().strip()
    if "<<< AP1_WG_HUB_PRIVKEY >>>" not in config:
        raise SystemExit("placeholder missing in intended config")
    config = config.replace("<<< AP1_WG_HUB_PRIVKEY >>>", privkey)

    leases = LEASES_RSC.read_text()
    # Entferne Kommentarblock-Lease-Datei, damit nur Befehle bleiben
    lease_lines = [line for line in leases.splitlines() if line and not line.startswith("#")]
    # Füge Leases vor dem WG-HUB-Block ein? Oder ans Ende. Ans Ende ist einfacher.
    out = config.rstrip() + "\n\n# [9] ap1 static leases -> core (STAGING)" + "\n" + "\n".join(lease_lines) + "\n"

    OUT.write_text(out)
    print(f"{OUT} written ({len(out)} bytes)")


if __name__ == "__main__":
    main()