//===----------------------------------------------------------------------===//
// Copyright © 2025-2026 Apple Inc. and the container project authors.
//
// Licensed under the Apache License, Version 2.0 (the "License");
// you may not use this file except in compliance with the License.
// You may obtain a copy of the License at
//
//   https://www.apache.org/licenses/LICENSE-2.0
//
// Unless required by applicable law or agreed to in writing, software
// distributed under the License is distributed on an "AS IS" BASIS,
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
// See the License for the specific language governing permissions and
// limitations under the License.
//===----------------------------------------------------------------------===//

import ArgumentParser
import ContainerAPIClient
import ContainerizationError
import ContainerizationExtras
import DNSServer
import Foundation

extension Application {
    public struct DNSDelete: AsyncLoggableCommand {
        public static let configuration = CommandConfiguration(
            commandName: "delete",
            abstract: "Delete a local DNS domain (must run as an administrator)",
            aliases: ["rm"]
        )

        @OptionGroup
        public var logOptions: Flags.Logging

        @Argument(help: "The local domain name")
        var domainName: String

        public init() {}

        public func run() async throws {
            guard let domainName = try? DNSName(domainName) else {
                throw ContainerizationError(.invalidArgument, message: "invalid domain name: \(domainName)")
            }

            let resolver = HostDNSResolver()
            var localhostIP: IPAddress?
            do {
                localhostIP = try resolver.deleteDomain(name: domainName)
            } catch {
                throw ContainerizationError(.invalidState, message: "cannot delete domain (try sudo?)")
            }

            do {
                try HostDNSResolver.reinitialize()
            } catch {
                throw ContainerizationError(.invalidState, message: "mDNSResponder restart failed, run `sudo killall -HUP mDNSResponder` to deactivate domain")
            }

            guard let localhostIP else {
                print(domainName.pqdn)
                return
            }

            let pf = PacketFilter()
            try pf.removeRedirectRule(from: localhostIP, to: try! IPAddress("127.0.0.1"), domain: domainName)

            do {
                try pf.reinitialize()
            } catch let error as ContainerizationError {
                throw error
            } catch {
                throw ContainerizationError(.invalidState, message: "failed loading pf rules")
            }
            print(domainName.pqdn)
        }
    }
}