/* ── Registration ── */
VLIB_CLI_COMMAND (classify_add_rule_command, static) = {
    .path = "classify add rule",
    .short_help = "classify add rule <if> src <ip> dst <ip> [proto <N>] [drop|pass]",
    .function = classify_add_rule_command_fn,
};

VLIB_CLI_COMMAND (classify_show_command, static) = {
    .path = "show classify",
    .short_help = "show classify [interface <if>]",
    .function = classify_show_command_fn,
};

/* ── Implementation ── */
static clib_error_t *
classify_add_rule_command_fn (vlib_main_t *vm,
    unformat_input_t *input, vlib_cli_command_t *cmd)
{
    classify_main_t *cm = &classify_main;
    u32 sw_if_index = ~0;
    ip4_address_t src = {0}, dst = {0};
    u8  protocol = 0;
    int drop = 0;
    clib_error_t *error = 0;

    /* Parse arguments */
    while (unformat_check_input(input) != UNFORMAT_END_OF_INPUT) {
        if (unformat(input, "%U", unformat_vnet_sw_interface,
                      vnet_get_main(), &sw_if_index))
            ;
        else if (unformat(input, "src %U", unformat_ip4_address, &src))
            ;
        else if (unformat(input, "dst %U", unformat_ip4_address, &dst))
            ;
        else if (unformat(input, "proto %d", &protocol))
            ;
        else if (unformat(input, "drop"))
            drop = 1;
        else {
            error = clib_error_return(0, "Unknown argument: '%U'",
                                      format_unformat_error, input);
            goto done;
        }
    }

    if (sw_if_index == ~0) {
        error = clib_error_return(0, "Interface required");
        goto done;
    }

    classify_add_rule_internal(cm, sw_if_index, &src, &dst, protocol, drop);
    vlib_cli_output(vm, "Rule added (sw_if_index %d)\n", sw_if_index);

done:
    return error;
}

/* ── Show command ── */
static clib_error_t *
classify_show_command_fn (vlib_main_t *vm,
    unformat_input_t *input, vlib_cli_command_t *cmd)
{
    classify_main_t *cm = &classify_main;
    classify_rule_t *rule;
    u32 sw_if_index = ~0;

    if (unformat(input, "%U", unformat_vnet_sw_interface,
                  vnet_get_main(), &sw_if_index))
        ;

    /* Print header */
    vlib_cli_output(vm, "%-5s %-16s %-16s %-6s %-6s %-10s %-10s\n",
                    "ID", "SRC", "DST", "PROTO", "ACTION", "PACKETS", "BYTES");

    pool_foreach(rule, cm->rules) {
        if (sw_if_index != ~0 && rule->sw_if_index != sw_if_index)
            continue;
        vlib_cli_output(vm, "%-5d %-16U %-16U %-6d %-6s %-10llu %-10llu\n",
                        rule - cm->rules,
                        format_ip4_address, &rule->src,
                        format_ip4_address, &rule->dst,
                        rule->protocol,
                        rule->action == CLASSIFY_ACTION_DROP ? "DROP" : "PASS",
                        rule->n_packets, rule->n_bytes);
    }
    return 0;
}