"""hf-cli entry point. Dispatches to subject-specific modules."""
import sys


USAGE = """Usage:
  hf-cli admin create-user --email <e> [--username <u>] [--full-name <n>]
                           [--password <p>] [--oidc-issuer <url> --oidc-subject <sub>]
  hf-cli admin list
  hf-cli admin set-role  --username <u> --role <admin|mgr|dev|guest|account-manager>
  hf-cli admin reset-password --username <u> --password <p>
  hf-cli admin bind-oidc      --username <u> --oidc-issuer <url> --oidc-subject <sub>

  hf-cli config oidc [--issuer <url>] [--client-id <id>] [--client-secret <s>]
                     [--redirect-uri <url>] [--post-login-redirect <url>]
                     [--scopes "openid email profile"] [--admin-role <role>]
                     [--enabled true|false] [--show-secret]

Reads DATABASE_URL + SECRET_KEY from the same env as the backend. Run
inside the backend container: `docker exec hf-backend hf-cli ...`.
"""


def main() -> int:
    args = sys.argv[1:]
    if len(args) < 1:
        sys.stderr.write(USAGE)
        return 1

    subject = args[0]
    rest = args[1:]

    if subject == "admin":
        from app.cli import admin
        return admin.dispatch(rest)
    if subject == "config":
        from app.cli import config
        return config.dispatch(rest)
    if subject in ("-h", "--help", "help"):
        sys.stdout.write(USAGE)
        return 0

    sys.stderr.write(f"unknown subject: {subject}\n\n")
    sys.stderr.write(USAGE)
    return 1


if __name__ == "__main__":
    sys.exit(main())