#!/usr/bin/env python3
import glob
import json
import os
import pwd

# Shells that indicate a user cannot log in
INVALID_SHELLS = {
    "/sbin/nologin",
    "/usr/sbin/nologin",
    "/usr/bin/nologin",
    "/bin/false",
    "/usr/bin/false",
    "/bin/true",
    "/usr/bin/true",
    "",
}

# Minimum UID for regular users (typically 1000 on most Linux distributions)
MIN_UID = 1000
GREETER_IMAGES_DIR = "/etc/zshell-greeter/images"


def get_face_path(home: str, username: str) -> str:
    """Get the path to the user's face/avatar image if it exists."""
    greeter_candidates = [
        os.path.join(GREETER_IMAGES_DIR, f"{username}.face"),
        os.path.join(GREETER_IMAGES_DIR, f"{username}.face.icon"),
    ]

    for path in greeter_candidates:
        if os.path.isfile(path):
            return path

    for path in sorted(glob.glob(os.path.join(GREETER_IMAGES_DIR, f"{username}.*"))):
        if os.path.isfile(path):
            return path

    direct_path = os.path.join(GREETER_IMAGES_DIR, username)
    if os.path.isfile(direct_path):
        return direct_path

    accountsservice_user = f"/var/lib/AccountsService/users/{username}"
    if os.path.isfile(accountsservice_user):
        try:
            with open(accountsservice_user, "r", encoding="utf-8") as handle:
                for line in handle:
                    if line.startswith("Icon="):
                        icon_path = line.split("=", 1)[1].strip()
                        if icon_path:
                            if not os.path.isabs(icon_path):
                                icon_path = os.path.join("/var/lib/AccountsService/icons", icon_path)
                            if os.path.isfile(icon_path):
                                return icon_path
        except OSError:
            pass

    # Check common locations for user avatars
    candidates = [
        os.path.join(home, ".face"),
        os.path.join(home, ".face.icon"),
        f"/var/lib/AccountsService/icons/{username}",
        f"/usr/share/pixmaps/faces/{username}",
    ]

    for path in candidates:
        if os.path.isfile(path):
            return path

    for path in sorted(glob.glob(f"/var/lib/AccountsService/icons/{username}.*")):
        if os.path.isfile(path):
            return path

    return ""


def is_graphical_user(pw: pwd.struct_passwd) -> bool:
    """Check if a user is allowed to log in graphically."""
    # Must be a regular user (UID >= 1000)
    if pw.pw_uid < MIN_UID:
        return False

    # Must have a valid login shell
    if pw.pw_shell in INVALID_SHELLS:
        return False

    # Home directory should exist
    if not os.path.isdir(pw.pw_dir):
        return False

    return True


def main():
    users = []

    for pw in pwd.getpwall():
        if not is_graphical_user(pw):
            continue

        users.append({
            "username": pw.pw_name,
            "uid": pw.pw_uid,
            "home": pw.pw_dir,
            "shell": pw.pw_shell,
            "gecos": pw.pw_gecos.split(",")[0] if pw.pw_gecos else "",
            "face": get_face_path(pw.pw_dir, pw.pw_name),
        })

    # Sort by username for consistent ordering
    users.sort(key=lambda u: u["username"])

    print(json.dumps(users))


if __name__ == "__main__":
    main()