#!/usr/bin/env xonsh

import hashlib
import pathlib
import re
import shlex
import sys

HOSTS = [
    'kankali.darkhelm.lan',
    'zhokq.darkhelm.lan',
    'urtzul.darkhelm.lan',
    'pi-desktop.darkhelm.lan',
]

FILES = [
    'frontend/src/main.test.ts',
    'frontend/src/main.ts',
    'frontend/src/test-setup.ts',
    'frontend/src/validation.test.ts',
    'frontend/src/validation.ts',
]

REGISTRY_IMAGE = 'kankali.darkhelm.lan:3001/darkhelm.org/plex-playlist-cicd'

def local_hashes(root: pathlib.Path):
    out = {}
    for rel in FILES:
        p = root / rel
        out[rel] = hashlib.sha256(p.read_bytes()).hexdigest()
    return out

def remote_hashes(host: str, image_tag: str):
    files = ' '.join(FILES)
    cmd = (
        f"docker pull {image_tag} >/dev/null && "
        f"docker run --rm --entrypoint /bin/sh {image_tag} "
        f"-c {shlex.quote('cd /workspace && sha256sum ' + files)}"
    )
    run = !(ssh -T @(host) sh -lc @(cmd))
    if run.returncode != 0:
        return None, str(run.out).strip()

    hashes = {}
    for line in str(run.out).splitlines():
        m = re.match(r'^([0-9a-f]{64})\s+(.+)$', line.strip())
        if m:
            hashes[m.group(2)] = m.group(1)
    return hashes, ''

arg = sys.argv[1] if len(sys.argv) > 1 else 'latest'
image = f'{REGISTRY_IMAGE}:{arg}'

root = pathlib.Path.cwd()
local = local_hashes(root)

print(f'image={image}')
print('local hashes:')
for f in FILES:
    print(f'  {f} {local[f]}')

for host in HOSTS:
    print(f'\n=== {host} ===')
    rh, err = remote_hashes(host, image)
    if rh is None:
        print('REMOTE_CHECK_FAILED')
        if err:
            print(err)
        continue

    mismatches = 0
    for f in FILES:
        lv = local.get(f, '<missing>')
        rv = rh.get(f, '<missing>')
        status = 'MATCH' if lv == rv else 'MISMATCH'
        if status == 'MISMATCH':
            mismatches += 1
        print(f'{status} {f} local={lv} remote={rv}')

    if mismatches == 0:
        print('RESULT:ALL_MATCH')
    else:
        print(f'RESULT:MISMATCHES={mismatches}')