import { existsSync } from "node:fs";
import { stdin, stdout } from "node:process";
import { createInterface } from "node:readline/promises";
import { detectSnapConfinement, snapConfinementMessage } from "./snapGuard.ts";
import { getWorkspaceRoot, setWorkspaceRoot } from "./workspaceConfig.ts";

// `ay setup` — guided onboarding. Two steps:
//   1. choose the workspace root (the default cwd new agents spawn into when the
//      console doesn't pass one — see workspaceConfig), and
//   2. share this machine to the agent-yes.com console over WebRTC, installed as a
//      restart-on-boot daemon (delegates to `ay serve install --share`).
//
// Designed to degrade gracefully: with a TTY it prompts (defaulting to the
// current/home workspace); piped or in a script it takes the first positional as
// the workspace and otherwise keeps the current one — never blocking on input.
export async function cmdSetup(rest: string[]): Promise<number> {
  if (rest.includes("-h") || rest.includes("--help")) {
    process.stdout.write(
      `Usage: ay setup [workspace-dir] [--no-share] [--port N]\n\n` +
        `Guided setup:\n` +
        `  1. pick the workspace root new agents spawn into (default: your home dir)\n` +
        `  2. share this machine to the agent-yes.com console (a restart-on-boot daemon)\n\n` +
        `Options:\n` +
        `  workspace-dir   default directory for new agents (skips the prompt)\n` +
        `  --no-share      set the workspace only; don't install the share daemon\n` +
        `  --port N        HTTP API port for the share daemon (default: 7432)\n` +
        `  --allow-snap    proceed even when running inside a snap sandbox\n`,
    );
    return 0;
  }

  // 0. Snap sandbox check. A strictly confined snap runtime remaps $HOME into a
  //    per-revision sandbox dir and confines every agent we spawn — see
  //    snapGuard for why no path rewrite can fix it. Warn before we write any
  //    state; in a TTY make continuing the deliberate choice.
  if (!rest.includes("--allow-snap")) {
    const snap = detectSnapConfinement();
    if (snap) {
      process.stderr.write(snapConfinementMessage(snap));
      if (stdin.isTTY && stdout.isTTY) {
        const rl = createInterface({ input: stdin, output: stdout });
        try {
          const ans = (await rl.question("continue anyway? [y/N]: ")).trim();
          if (!/^y(es)?$/i.test(ans)) return 1;
        } finally {
          rl.close();
        }
      }
      // Non-interactive: the warning stands, but setup never blocks on input.
    }
  }

  const noShare = rest.includes("--no-share");
  const portIdx = rest.indexOf("--port");
  const port = portIdx >= 0 ? rest[portIdx + 1] : undefined;
  // The workspace is the first non-flag token (and not the value of --port).
  // Guard on portIdx >= 0: without --port, indexOf returns -1 and a bare
  // `portIdx + 1` is 0, which would silently drop the dir in `ay setup <dir>`.
  const portValueIdx = portIdx >= 0 ? portIdx + 1 : -1;
  const positional = rest.filter((a, i) => !a.startsWith("-") && i !== portValueIdx);

  // 1. Workspace root.
  let ws = positional[0];
  if (!ws) {
    const current = getWorkspaceRoot();
    if (stdin.isTTY && stdout.isTTY) {
      const rl = createInterface({ input: stdin, output: stdout });
      try {
        const ans = (await rl.question(`Workspace root for new agents [${current}]: `)).trim();
        ws = ans || current;
      } finally {
        rl.close();
      }
    } else {
      ws = current; // non-interactive: keep whatever's configured (home by default)
    }
  }
  const abs = setWorkspaceRoot(ws);
  process.stdout.write(`workspace root: ${abs}\n`);
  if (!existsSync(abs)) {
    process.stderr.write(
      `  note: that directory doesn't exist yet — create it, or agents spawned there will fail\n`,
    );
  }

  // 1b. Make the bun-global CLIs resolvable in EVERY shell — including the
  //     non-interactive non-login shells Claude Code's Bash tool runs, whose
  //     PATH snapshot may lack ~/.bun/bin. Symlinks them into /usr/local/bin
  //     (on PATH in every context). Best-effort; never blocks setup.
  try {
    const { linkBunBinsToSystemPath } = await import("./systemPathLink.ts");
    const r = linkBunBinsToSystemPath();
    if (r && (r.linked.length || r.refreshed.length)) {
      const n = r.linked.length + r.refreshed.length;
      process.stdout.write(
        `linked ${n} CLI${n === 1 ? "" : "s"} into ${r.target} (resolvable in non-login shells)\n`,
      );
    }
  } catch {
    /* non-fatal */
  }

  if (noShare) return 0;

  // 2. Share to agent-yes.com as a boot-persistent daemon. `ay serve install`
  //    handles oxmgr registration, version roll-forward, and printing the link.
  process.stdout.write(`\nsharing this machine to agent-yes.com…\n`);
  const { cmdServe } = await import("./serve.ts");
  return cmdServe(["install", "--share", ...(port ? ["--port", port] : [])]);
}