/**
 * @openpalm/lib — shared control-plane library.
 *
 * All portable control-plane logic lives here. Both CLI and admin
 * import from this package. Admin is a thin SvelteKit UI layer;
 * the CLI calls these functions directly.
 */

// ── Provider Constants ──────────────────────────────────────────────────
export {
  LLM_PROVIDERS,
  EMBEDDING_DIMS,
  PROVIDER_KEY_MAP,
  OLLAMA_DEFAULT_MODELS,
  lookupEmbeddingDims,
} from "./provider-constants.js";

// ── Logger ──────────────────────────────────────────────────────────────
export {
  createLogger,
  isSensitiveEnvKey,
  redactValue,
  redactExtra,
} from "./logger.js";

// ── Types ───────────────────────────────────────────────────────────────
export type {
  ControlPlaneState,
  CoreServiceName,
  PortalInfo,
  CallerType,
  ArtifactMeta,
} from "./control-plane/types.js";
export {
  CORE_SERVICES,
} from "./control-plane/types.js";

// ── Backups ───────────────────────────────────────────────────────────────
export {
  backupOpenPalmHome,
  listBackupDirs,
  pruneBackupDirs,
  estimateHomeBackupBytes,
  checkBackupFreeSpace,
  describeBackupSpaceShortfall,
  summarizeBackups,
} from "./control-plane/backup.js";
export type { BackupSpaceCheck, BackupSummary, BackupEntry } from "./control-plane/backup.js";

// ── Registry Catalog ─────────────────────────────────────────────────────
export type {
  AddonMutationResult,
  AddonProfile,
  AddonProfileAvailability,
  RegistryAddonConfig,
} from "./control-plane/addons.js";
export { BUILTIN_ADDON_IDS } from "./control-plane/addon-ids.js";
export {
  getRegistryAutomation,
  getRegistryAddonConfig,
  getAddonServiceNames,
  getAddonProfiles,
  getAddonProfileAvailability,
  annotateAddonProfileAvailability,
  getAddonProfileSelection,
  setAddonProfileSelection,
  listAvailableAddonIds,
  listEnabledAddonIds,
  setAddonEnabled,
  installAutomationFromRegistry,
  uninstallAutomation,
} from "./control-plane/addons.js";

// ── Home Layout (v0.11.0) ───────────────────────────────────────────────
export {
  resolveOpenPalmHome,
  resolveConfigDir,
  resolveStashDir,
  resolveWorkspaceDir,
  resolveDataDir,
  resolveStackDir,
  resolveSystemDir,
  resolveStateDir,
  resolveLogsDir,
  ensureHomeDirs,
  stackDirFor,
  composeFilePath,
  customComposeFilePath,
  stateEnvFile,
  legacyStackEnvFile,
  userEnvFile,
  secretsDir,
  authJsonFile,
} from "./control-plane/home.js";

// ── Path Resolution ─────────────────────────────────────────────────────
export * from "./control-plane/paths.js";

// ── Env ─────────────────────────────────────────────────────────────────
export {
  parseEnvContent,
  parseEnvFile,
  expandEnvVars,
  mergeEnvContent,
  removeEnvKey,
  upsertEnvValue,
  resolveRequestedImageTag,
  RELEASE_TAG_REGEX,
} from "./control-plane/env.js";
export type {
  AssistantCliToolId,
  AssistantCliProviderMapping,
  AssistantCliToolStatus,
} from './control-plane/assistant-cli-tools.js';
export {
  listAssistantCliTools,
  useExistingProviderForAssistantCli,
} from './control-plane/assistant-cli-tools.js';

// ── OpenCode Client ─────────────────────────────────────────────────────
export { createOpenCodeClient } from "./control-plane/opencode-client.js";
export type { ProxyResult, OpenCodeProvider } from "./control-plane/opencode-client.js";

// ── Secrets ─────────────────────────────────────────────────────────────
export {
  PLAIN_CONFIG_KEYS,
  ensureSecrets,
  updateSecretsEnv,
  writeAuthJsonProviderKeys,
  readStackEnv,
  readStackSecretEnv,
  readStackRuntimeEnv,
  writeStackSecretEnv,
  patchSecretsEnvFile,
  maskSecretValue,
  ensureOpenCodeConfig,
  assertNoSecretLikeStackEnvKeys,
} from "./control-plane/secrets.js";
export {
  resolveSecretsDir,
  secretPath,
  readSecret,
  writeSecret,
  ensureSecret,
  removeSecret,
  listSecretNames,
  assertSafeSecretFilename,
  listSecretFiles,
  readSecretFile,
  writeSecretFile,
  removeSecretFile,
} from './control-plane/secrets-files.js';
export type { SecretFileInfo } from './control-plane/secrets-files.js';
export {
  assertSafeTaskFilename,
  resolveTasksDir,
  listTaskFiles,
  readTaskFile,
  writeTaskFile,
  removeTaskFile,
} from './control-plane/task-files.js';
export type { TaskFileInfo } from './control-plane/task-files.js';
export type {
  SecretAuditIssue,
  SecretAuditOptions,
  SecretAuditResult,
  SecretAuditSeverity,
} from "./control-plane/secret-audit.js";
export {
  auditComposeSecrets,
  auditFileBasedSecrets,
  auditSecretFilesystem,
  auditStackEnv,
  isSecretLikeKey,
} from "./control-plane/secret-audit.js";
// ── Setup Status ────────────────────────────────────────────────────────
export {
  isSetupComplete,
} from "./control-plane/setup-status.js";
// ── Launch Status (#440 — routing SSOT for UI + CLI) ──────────────────────
export {
  deriveLaunchStatus,
  classifyLocalInstall,
  deriveLocalStackState,
  detectRuntime,
} from "./control-plane/launch-status.js";
export type {
  LaunchStatus,
  LocalStatus,
  LocalStackState,
  ComposeServiceStatus,
  RemoteStatus,
  RemoteReachability,
  RuntimeInfo,
  ActiveAssistant,
} from "./control-plane/launch-status.js";

export {
  runDeploy,
  writeJournal,
  readDeployJournal,
  resolveDeployJournalPath,
  markSetupComplete,
  backupSetupInputs,
} from './control-plane/deploy.js';
export type {
  DeployEntry,
  DeployPhase,
  DeployJournal,
  DeployProgress,
} from './control-plane/deploy.js';

// ── Portals ─────────────────────────────────────────────────────────────
export {
  discoverPortals,
  isAllowedService,
  isValidPortal,
} from "./control-plane/portals.js";

// ── Provider Model Discovery ────────────────────────────────────────────
export type {
  ProviderModelsResult,
  ModelDiscoveryReason,
} from "./control-plane/provider-models.js";
export {
  fetchProviderModels,
} from "./control-plane/provider-models.js";
export {
  buildAkmEndpoint,
  normalizeAkmBaseUrl,
} from './control-plane/akm-endpoints.js';

// ── AKM host/assistant source wiring ──────────────────────────────────────
export {
  HOST_SOURCE_NAME,
  addHostStashToOpenpalmConfig,
  importHostProfiles,
} from "./control-plane/akm-sources.js";
export type {
  HostAkmSharingStatus,
} from "./control-plane/host-akm-sharing.js";
export {
  enableHostAkmSharing,
  disableHostAkmSharing,
  getHostAkmSharingStatus,
  hostAkmStashPath,
} from "./control-plane/host-akm-sharing.js";

// ── Atomic file write (shared by all control-plane writers) ───────────────
export { writeFileAtomic } from "./control-plane/fs-atomic.js";

// ── Core Assets ─────────────────────────────────────────────────────────
export {
  readCoreCompose,
  ensureOpenCodeSystemConfig,
  overwriteSystemTree,
} from "./control-plane/core-assets.js";

// ── Configuration Persistence ────────────────────────────────────────────
export {
  sha256,
  randomHex,
  buildEnvFiles,
  writeSystemEnv,
  discoverStackOverlays,
  resolveRuntimeFiles,
  buildRuntimeFileMeta,
  writeRuntimeFiles,
  portalSecretName,
  ensurePortalSecret,
  ensureComposeVolumeTargets,
  readSecretStripNotice,
  dismissSecretStripNotice,
  secretStripNoticePath,
} from "./control-plane/config-persistence.js";

export {
  createState,
  initializeStateSecrets,
  applyInstall,
  applyUpdate,
  applyUninstall,
  buildManagedServices,
  performUpgrade,
} from './control-plane/lifecycle.js';

// ── Rollback ─────────────────────────────────────────────────────────────
export {
  restoreSnapshot,
  hasSnapshot,
  snapshotTimestamp,
} from "./control-plane/rollback.js";

// ── Validation ───────────────────────────────────────────────────────────
export {
  validateProposedState,
} from "./control-plane/validate.js";

// ── Lifecycle ───────────────────────────────────────────────────────────
export {
  DowngradeConfirmationRequired,
  buildComposeFileList,
  normalizeCaller,
} from "./control-plane/lifecycle.js";

// ── Version variables (stack.env image tags) ─────────────────────────────
export {
  SERVICE_VERSION_KEYS,
  VERSION_DEFAULTS,
  DOCKER_IMAGE_NAMES,
  isVersionKey,
  readVersions,
  writeVersions,
  // Phase 5: pin-null semantics, channel preference, voice variant utilities
  readPinnedVersions,
  readChannelPreference,
  writeChannelPreference,
  stripVoiceVariantSuffix,
  normalizePinValue,
} from "./control-plane/versions.js";
export type { VersionKey, ChannelPreference } from "./control-plane/versions.js";

// ── Docker ──────────────────────────────────────────────────────────────
export type { DockerResult, ExistingProject, ContainerImageInfo, ApplyStackScope, ApplyStackResult } from "./control-plane/docker.js";
export {
  checkDocker,
  checkDockerCompose,
  detectExistingProject,
  resolveComposeProjectName,
  composePreflight,
  composeUp,
  composeDown,
  composeRestart,
  composeStop,
  composeStart,
  composePs,
  composeLogs,
  composePullService,
  composePull,
  composeStats,
  composeExec,
  getDockerEvents,
  inspectContainerImage,
  getRunningImages,
  waitForContainerHealthy,
  applyStack,
} from "./control-plane/docker.js";

// ── Scheduler ───────────────────────────────────────────────────────────
export type {
  AutomationConfig,
  AutomationRunResult,
} from "./control-plane/scheduler.js";
export {
  SCHEDULE_PRESETS,
  loadAutomations,
  executeAutomation,
  syncAutomations,
  readAutomationLogs,
} from "./control-plane/scheduler.js";

// ── Model Runner (local provider detection) ─────────────────────────────
export type { LocalProviderDetection } from "./control-plane/model-runner.js";
export { detectLocalProviders } from "./control-plane/model-runner.js";

// ── Hardware detection + setup recommendation ───────────────────────────
export type { GpuInfo, GpuVendor } from "./control-plane/hardware-detect.js";
export { detectGpu, parseNvidiaSmi, parseRocmSmi, parseAppleSilicon } from "./control-plane/hardware-detect.js";
export type {
  DetectedHostProvider,
  SetupRecommendation,
  SetupRecommendationInput,
} from "./control-plane/setup-recommendation.js";
export {
  recommendSetup,
  gpuToProfileVariant,
  MIN_LOCAL_GPU_VRAM_MB,
} from "./control-plane/setup-recommendation.js";

// ── Compose Arguments ────────────────────────────────────────────────────
export {
  buildComposeOptions,
  buildComposeCliArgs,
  resolveActiveProfiles,
} from "./control-plane/compose-args.js";

export {
  addonProfileId,
  canonicalAddonProfileSelection,
  resolveHardwareProfileVariant,
} from "./control-plane/profile-ids.js";

// ── Compose Error Parsing ────────────────────────────────────────────────
export type { ComposeServiceFailure } from "./control-plane/compose-errors.js";
export {
  mapDockerError,
  parseComposeStderr,
  summarizeComposeStderr,
} from "./control-plane/compose-errors.js";

// ── Voice Env ───────────────────────────────────────────────────────────
export type { VoiceVarsConfig } from "./control-plane/voice-env.js";
export {
  writeVoiceVars,
} from "./control-plane/voice-env.js";

// ── Operator UID/GID Detection ──────────────────────────────────────────
export type { OperatorIds } from "./control-plane/operator-ids.js";
export {
  resolveOperatorIds,
  hasUsableOperatorId,
} from "./control-plane/operator-ids.js";

// ── Setup ────────────────────────────────────────────────────────────────
export type {
  SetupSpec,
  SetupConnection,
  SetupResult,
} from "./control-plane/setup.js";
export {
  performSetup,
} from "./control-plane/setup.js";

// ── Install Lock (shared between performSetup and startDeploy) ───────────
export type {
  InstallLockHandle,
  InstallLockStatus,
  UnlockResult,
} from "./control-plane/install-lock.js";
export {
  acquireInstallLock,
  releaseInstallLock,
  inspectInstallLock,
  unlockInstallLock,
  INSTALL_LOCK_STALE_AFTER_MS,
} from "./control-plane/install-lock.js";

// ── Host OpenCode Import ─────────────────────────────────────────────────
export type {
  HostOpenCodeStatus,
  HostImportResult,
} from "./control-plane/host-opencode.js";
export {
  detectHostOpenCode,
  importHostOpenCode,
} from "./control-plane/host-opencode.js";

// ── AKM user env (env:user) ──────────────────────────────────────────────
export {
  AKM_USER_ENV_REF,
  AKM_ENV_KEYS,
  buildAkmEnv,
  assertAkmEnvComplete,
  ensureAkmUserEnv,
  writeUserEnvKey,
  deleteUserEnvKey,
  readUserEnvFile,
  readUserEnvSync,
  userEnvPathSync,
} from "./control-plane/akm-user-env.js";

export type { AssistantAkmCommandResult } from './control-plane/assistant-akm.js';
export { runAssistantAkmCommand } from './control-plane/assistant-akm.js';

export type { AkmStats } from './control-plane/akm-stats.js';
export { getAkmStats, parseAkmStats } from './control-plane/akm-stats.js';

// ── Bind Address Startup Warning ─────────────────────────────────────────────
export { collectBindAddressWarnings, isRemoteSetupAllowed } from "./control-plane/bind-warning.js";

// ── UI asset seeding and resolution ─────────────────────────────────────────
export type { UiBuildUpdateResult, SkeletonUpdateResult, UiUpdateChannel } from "./control-plane/ui-assets.js";
export {
  resolveLocalOpenpalmDir,
  applyHomeSeed,
  resolveLocalUiBuild,
  resolveUiBuildDir,
  readSkeletonVersion,
  seedUiBuild,
  checkAndUpdateUiBuild,
  checkAndUpdateSkeleton,
  uiUpdateChannel,
  declaredUiChannel,
} from "./control-plane/ui-assets.js";

// ── Canonical version vocabulary (Docker `v`-tag / npm version / dist-tag) ───
export {
  PLATFORM_VERSION,
  isComparableSemver,
  compareComparableVersions,
  majorVersionOf,
  isSameMajorVersion,
  normalizeVersion,
  formatForDisplay,
  isPrerelease,
  distTagForVersion,
} from "./control-plane/versioning.js";