/* BARE_OS_BIN_API 1.0.0 — bump when staged /bin script semantics change (see developer guide). */
/** Shared helpers for drive-resident /bin scripts (prepended before each command). */
function bareStdin(ctx) {
  return typeof ctx.shellStdin === 'string' ? ctx.shellStdin : ''
}

/** @param {number} mode @param {'file' | 'directory' | 'symlink'} type */
function bareFormatModeString(mode, type) {
  const typeChar = type === 'directory' ? 'd' : type === 'symlink' ? 'l' : '-'
  const perm = mode & 0o777
  const r = (bit) => (perm & bit ? 'r' : '-')
  const w = (bit) => (perm & bit ? 'w' : '-')
  const x = (bit) => (perm & bit ? 'x' : '-')
  return (
    typeChar +
    r(0o400) +
    w(0o200) +
    x(0o100) +
    r(0o040) +
    w(0o020) +
    x(0o010) +
    r(0o004) +
    w(0o002) +
    x(0o001)
  )
}

/** @param {number} mtimeMs @param {number} [nowMs] */
function bareFormatLsMtime(mtimeMs, nowMs) {
  const now = nowMs != null ? nowMs : Date.now()
  const d = new Date(mtimeMs)
  const months = [
    'Jan',
    'Feb',
    'Mar',
    'Apr',
    'May',
    'Jun',
    'Jul',
    'Aug',
    'Sep',
    'Oct',
    'Nov',
    'Dec'
  ]
  const mon = months[d.getMonth()]
  const day = String(d.getDate()).padStart(2, ' ')
  const sixMo = 180 * 24 * 3600 * 1000
  if (Math.abs(now - mtimeMs) > sixMo) {
    const yr = String(d.getFullYear()).padStart(4, ' ')
    return mon + ' ' + day + '  ' + yr
  }
  const hh = String(d.getHours()).padStart(2, '0')
  const mm = String(d.getMinutes()).padStart(2, '0')
  return mon + ' ' + day + ' ' + hh + ':' + mm
}

/** @param {number} size */
function barePosixBlocks(size) {
  return Math.ceil(Number(size) / 512) || 0
}

/**
 * Raw stdout for NUL/binary when **`process.stdout.write`** is missing.
 * If **`ctx.bareOsBinWrite(Uint8Array|string)`** is set (tests / host), use it.
 * @param {Record<string, unknown>} ctx
 * @param {string | Uint8Array} chunk
 * @returns {boolean}
 */
function bareOsEmitRaw(ctx, chunk) {
  if (typeof ctx.bareOsBinWrite === 'function') {
    const b4 = ctx.b4a
    const u8 =
      typeof chunk === 'string'
        ? b4 && typeof b4.from === 'function'
          ? b4.from(chunk)
          : new TextEncoder().encode(chunk)
        : chunk
    ctx.bareOsBinWrite(u8 instanceof Uint8Array ? u8 : new Uint8Array(u8))
    return true
  }
  const w = globalThis.process?.stdout?.write
  if (typeof w === 'function') {
    w.call(globalThis.process.stdout, chunk)
    return true
  }
  return false
}

/** Session env map (`vfs.env`, then `ctx.env`). Never throws. */
function bareOsEnv(ctx) {
  const v = ctx && ctx.vfs && ctx.vfs.env
  if (v && typeof v === 'object') return v
  const e = ctx && ctx.env
  if (e && typeof e === 'object') return e
  return {}
}

/**
 * Strict POSIX-ish decimal integer (no octal, no exponent, no empty).
 * @param {unknown} s
 * @returns {number}
 */
function bareOsParseDecInt(s) {
  const t = String(s == null ? '' : s).trim()
  if (!/^[+-]?(?:0|[1-9][0-9]*)$/.test(t)) return NaN
  const n = Number.parseInt(t, 10)
  return Number.isSafeInteger(n) ? n : NaN
}

/** @param {unknown} s */
function bareOsParseNonNegInt(s) {
  const n = bareOsParseDecInt(s)
  return n >= 0 ? n : NaN
}

/**
 * @param {Record<string, unknown>} ctx
 * @param {string} name
 * @param {number} fallback
 * @param {number} [min]
 * @param {number} [max]
 */
function bareOsEnvInt(ctx, name, fallback, min, max) {
  const raw = bareOsEnv(ctx)[name]
  if (raw == null || raw === '') return fallback
  const n = Number.parseInt(String(raw), 10)
  if (!Number.isFinite(n)) return fallback
  let v = n
  if (min != null && v < min) v = min
  if (max != null && v > max) v = max
  return v
}

/**
 * @param {Record<string, unknown>} ctx
 * @param {string} msg
 * @param {number} [code]
 */
function bareOsFail(ctx, msg, code) {
  if (msg) ctx.console.error(msg)
  ctx.exitCode = code == null ? 1 : code
}

/** @param {unknown} e */
function bareOsIsNotFoundErr(e) {
  const code = e && typeof e === 'object' ? e.code : ''
  if (code === 'ENOENT') return true
  const msg = String((e && e.message) || e || '')
  return /ENOENT|No such file|not found/i.test(msg)
}

/**
 * @param {Record<string, unknown>} ctx
 * @param {unknown} buf
 * @returns {Uint8Array}
 */
function bareOsToU8(ctx, buf) {
  if (!buf) return new Uint8Array(0)
  if (buf instanceof Uint8Array) return buf
  if (ctx && ctx.b4a && typeof ctx.b4a.from === 'function') return ctx.b4a.from(buf)
  return new Uint8Array(buf)
}

/** @param {string} dir @param {string} name */
function bareOsJoinPath(dir, name) {
  const d = String(dir || '').replace(/\/+$/, '')
  const n = String(name || '').replace(/^\/+/, '')
  if (!d || d === '/') return '/' + n
  return d + '/' + n
}

/** @param {string} p */
function bareOsBaseName(p) {
  const t = String(p || '').replace(/\/+$/, '')
  if (!t || t === '/') return t === '/' ? '/' : ''
  const i = t.lastIndexOf('/')
  return i < 0 ? t : t.slice(i + 1) || t
}

/** @param {string} p */
function bareOsParentDir(p) {
  const t = String(p || '').replace(/\/+$/, '') || '/'
  if (t === '/') return '/'
  const i = t.lastIndexOf('/')
  return i <= 0 ? '/' : t.slice(0, i) || '/'
}

/** @param {string} p */
function bareOsNormPath(p) {
  return String(p || '').replace(/\/+$/, '') || '/'
}

/**
 * @param {Record<string, unknown>} ctx
 * @param {string} p
 */
function bareOsResolvePath(ctx, p) {
  if (ctx && ctx.vfs && typeof ctx.vfs.resolveLogical === 'function') {
    try {
      return String(ctx.vfs.resolveLogical(p) || p)
    } catch {
      /* fall through */
    }
  }
  return String(p || '')
}

/**
 * True when dest is src or lives under src (self-copy / self-move).
 * @param {Record<string, unknown>} ctx
 * @param {string} src
 * @param {string} dest
 */
function bareOsDestInsideSrc(ctx, src, dest) {
  const s = bareOsNormPath(bareOsResolvePath(ctx, src))
  const d = bareOsNormPath(bareOsResolvePath(ctx, dest))
  if (s === d) return true
  if (s === '/') return d !== '/'
  return d === s || d.startsWith(s + '/')
}

const BARE_OS_B64_ALPH =
  'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/'

/** @param {Uint8Array} u8 */
function bareOsB64Encode(u8) {
  let out = ''
  let i = 0
  for (; i + 2 < u8.length; i += 3) {
    const n = (u8[i] << 16) | (u8[i + 1] << 8) | u8[i + 2]
    out +=
      BARE_OS_B64_ALPH[(n >> 18) & 63] +
      BARE_OS_B64_ALPH[(n >> 12) & 63] +
      BARE_OS_B64_ALPH[(n >> 6) & 63] +
      BARE_OS_B64_ALPH[n & 63]
  }
  const rest = u8.length - i
  if (rest === 1) {
    const n = u8[i] << 16
    out += BARE_OS_B64_ALPH[(n >> 18) & 63] + BARE_OS_B64_ALPH[(n >> 12) & 63] + '=='
  } else if (rest === 2) {
    const n = (u8[i] << 16) | (u8[i + 1] << 8)
    out +=
      BARE_OS_B64_ALPH[(n >> 18) & 63] +
      BARE_OS_B64_ALPH[(n >> 12) & 63] +
      BARE_OS_B64_ALPH[(n >> 6) & 63] +
      '='
  }
  return out
}

/**
 * RFC 4648 Base64 decode (also accepts URL-safe alphabet). Rejects junk.
 * @param {string} s
 * @returns {Uint8Array}
 */
function bareOsB64Decode(s) {
  const t = String(s).replace(/\s+/g, '')
  if (!t) return new Uint8Array(0)
  if (t.length % 4 === 1) throw new Error('invalid base64 length')
  let pad = 0
  if (t.endsWith('==')) pad = 2
  else if (t.endsWith('=')) pad = 1
  const body = pad ? t.slice(0, t.length - pad) : t
  const bytes = []
  let buf = 0
  let bits = 0
  for (let i = 0; i < body.length; i++) {
    const c = body[i]
    let v = BARE_OS_B64_ALPH.indexOf(c)
    if (v < 0) {
      if (c === '-') v = 62
      else if (c === '_') v = 63
      else throw new Error('invalid base64 character')
    }
    buf = (buf << 6) | v
    bits += 6
    if (bits >= 8) {
      bits -= 8
      bytes.push((buf >> bits) & 255)
    }
  }
  if (pad) {
    const want = Math.floor((body.length * 6) / 8)
    if (bytes.length > want) bytes.length = want
  }
  return new Uint8Array(bytes)
}

/**
 * @param {string} s
 * @returns {Uint8Array}
 */
function bareOsHexDecode(s) {
  const t = String(s).replace(/\s+/g, '')
  if (t.length % 2 !== 0) throw new Error('odd hex length')
  const out = new Uint8Array(t.length / 2)
  for (let i = 0; i < out.length; i++) {
    const pair = t.slice(i * 2, i * 2 + 2)
    if (!/^[0-9a-fA-F]{2}$/.test(pair)) throw new Error('invalid hex')
    out[i] = Number.parseInt(pair, 16)
  }
  return out
}

/** @param {Uint8Array} u8 */
function bareOsHexEncode(u8) {
  let s = ''
  for (let i = 0; i < u8.length; i++) s += u8[i].toString(16).padStart(2, '0')
  return s
}

/**
 * Shared GNU-style checksum FILE / stdin loop used by *sum commands.
 * @param {Record<string, unknown>} ctx
 * @param {string[]} argv
 * @param {{
 *   cmd: string,
 *   help?: string,
 *   digest: (u8: Uint8Array) => string | Promise<string>
 * }} opts
 */
async function bareChecksumRun(ctx, argv, opts) {
  const cmd = String(opts.cmd || 'checksum')
  const help =
    opts.help ||
    'usage: ' +
      cmd +
      ' [FILE]...\nWith no FILE, or when FILE is -, read standard input.'
  const digest = opts.digest
  const paths = []
  for (let i = 1; i < argv.length; i++) {
    const a = argv[i]
    if (a === '-h' || a === '--help') {
      ctx.console.log(help)
      ctx.exitCode = 0
      return
    }
    if (a.startsWith('-') && a !== '-') {
      ctx.console.error(cmd + ': unsupported option ' + a)
      ctx.exitCode = 1
      return
    }
    paths.push(a)
  }
  const b4 = ctx.b4a
  async function one(name, buf) {
    const u8 = buf instanceof Uint8Array ? buf : new Uint8Array(buf)
    try {
      const hex = await digest(u8)
      ctx.console.log(hex + '  ' + name)
    } catch (e) {
      ctx.console.error(cmd + ': ' + (e.message || e))
      ctx.exitCode = 1
    }
  }
  if (!paths.length || (paths.length === 1 && paths[0] === '-')) {
    await one('-', b4.from(bareStdin(ctx)))
    return
  }
  for (const p of paths) {
    if (p === '-') {
      await one('-', b4.from(bareStdin(ctx)))
      continue
    }
    const b = await ctx.vfs.readFile(p)
    if (!b) {
      ctx.console.error(cmd + ': ' + p + ': No such file')
      ctx.exitCode = 1
      continue
    }
    await one(p, b)
  }
}

/**
 * WebCrypto hex digest; throws the same missing-subtle message as the old *sum files.
 * @param {string} algo
 * @param {string} missingMsg
 * @returns {(u8: Uint8Array) => Promise<string>}
 */
function bareSubtleHexDigest(algo, missingMsg) {
  return async function (u8) {
    const subtle = globalThis.crypto?.subtle
    if (!subtle || typeof subtle.digest !== 'function') {
      throw new Error(missingMsg)
    }
    const hash = await subtle.digest(algo, u8)
    return bareOsHexEncode(new Uint8Array(hash))
  }
}

/**
 * Owner/group name → uid/gid used by chown / chgrp.
 * @param {string} spec
 * @param {Record<string, string>} env
 * @returns {number | null}
 */
function parseGroupSpec(spec, env) {
  const s = String(spec).trim()
  if (!s) return null
  if (/^\d+$/.test(s)) {
    const n = Number.parseInt(s, 10)
    return Number.isFinite(n) ? n : null
  }
  const g = (env.GROUP || env.USER || 'guest').trim()
  if (s === 'root') return 0
  if (s === 'guest' || s === 'nobody') return 65534
  if (g && s === g) {
    const gid = Number.parseInt(String(env.GID ?? '65534'), 10)
    return Number.isFinite(gid) ? gid : 65534
  }
  return null
}

/**
 * User name / numeric uid used by chown.
 * @param {string} spec
 * @param {Record<string, string>} env
 * @returns {{ uid: number | null, gid: number | null }}
 */
function parseIdSpec(spec, env) {
  const s = String(spec).trim()
  if (!s) return { uid: null, gid: null }
  if (/^\d+$/.test(s)) {
    const n = Number.parseInt(s, 10)
    return { uid: Number.isFinite(n) ? n : null, gid: null }
  }
  const u = (env.USER || env.LOGNAME || '').trim()
  if (s === 'root') return { uid: 0, gid: null }
  if (s === 'guest' || s === 'nobody') return { uid: 65534, gid: null }
  if (u && s === u) {
    const uid = Number.parseInt(String(env.UID ?? '65534'), 10)
    return { uid: Number.isFinite(uid) ? uid : 65534, gid: null }
  }
  return { uid: null, gid: null }
}

/**
 * Subset of POSIX.1-2017 getconf — fixed values for Bare OS (no host sysconf).
 * Unknown names exit with status 1 (matches common getconf for invalid var).
 * Live pathconf: **`getconf NAME /absolute/path`** delegates to **`ctx.bareOsPathconf`** when set.
 */

const CONF = {
  PATH_MAX: '4096',
  NAME_MAX: '255',
  /** POSIX minimum for ARG_MAX; Bare uses a conservative cap for runBinCommand argv. */
  _POSIX_ARG_MAX: '4096',
  ARG_MAX: '262144',
  LINE_MAX: '2048',
  /** POSIX.1-2008 */
  _POSIX_VERSION: '200809',
  _POSIX2_VERSION: '200809',
  NGROUPS_MAX: '32',
  OPEN_MAX: '256',
  STREAM_MAX: '256',
  TZNAME_MAX: '32',
  _POSIX_CHOWN_RESTRICTED: '1',
  _POSIX_NO_TRUNC: '1',
  _POSIX_VDISABLE: '0',
  _POSIX_JOB_CONTROL: '0',
  _POSIX_SAVED_IDS: '0',
  /** Named segments under `/dev/shm` (in-memory; not a host shm_open). */
  _POSIX_SHARED_MEMORY_OBJECTS: '1',
  _POSIX_MESSAGE_PASSING: '1',
  _POSIX_ASYNCHRONOUS_IO: '0',
  /** Bare shell line length (reasonable REPL limit, not a hard kernel cap). */
  BARE_OS_INPUT_LINE_MAX: '8192',
  /** Defaults for simulated pipelines (stock booter seeds larger session env when host is silent; Tier-2 live caps differ); see handbook §3. */
  BARE_OS_PIPELINE_MAX_STAGES: '32',
  BARE_OS_PIPELINE_MAX_BYTES: '536870912',
  BARE_OS_PIPELINE_MAX_LINES: '2000000',
  /** Default cap for find -exec/-ok invocations per run (override with env). */
  BARE_OS_FIND_EXEC_MAX: '64',
  /** Max lines `yes` prints before stopping (override with BARE_OS_YES_MAX_LINES). */
  BARE_OS_YES_MAX_LINES: '100000',
  /** Max input lines `shuf` will hold in memory (override with BARE_OS_SHUF_MAX_LINES). */
  BARE_OS_SHUF_MAX_LINES: '50000',
  /** Max output chunk files `split` may create (override with BARE_OS_SPLIT_MAX_FILES). */
  BARE_OS_SPLIT_MAX_FILES: '10000',
  /** Max numbers `seq` will emit (override with BARE_OS_SEQ_MAX_LINES). */
  BARE_OS_SEQ_MAX_LINES: '100000',
  _POSIX_THREAD_ATTR_STACKSIZE: '65536',
  _SC_PAGESIZE: '4096',
  _SC_PAGE_SIZE: '4096',
  PAGE_SIZE: '4096',
  PAGESIZE: '4096',
  _SC_OPEN_MAX: '256',
  _SC_STREAM_MAX: '256',
  _SC_CHILD_MAX: '0',
  CHILD_MAX: '0',
  _SC_CLK_TCK: '100',
  CLK_TCK: '100',
  _SC_PHYS_PAGES: '524288',
  _SC_AVPHYS_PAGES: '262144',
  _SC_ARG_MAX: '262144',
  _SC_NPROCESSORS_CONF: '4',
  /** Online processors (static default; live override via `ctx.bareOsGetconfSysconf` + `BARE_OS_NPROC`). */
  _SC_NPROCESSORS_ONLN: '4',
  NPROCESSORS_ONLN: '4',
  _SC_HOST_NAME_MAX: '255',
  HOST_NAME_MAX: '255',
  _POSIX_HOST_NAME_MAX: '255',
  _SC_MONOTONIC_CLOCK: '1',
  /** Dynamic when `ctx.bareOsGetconfSysconf` + native bare-hrtime; static default 0. */
  _SC_MONOTONIC_CLOCK_RES: '0',
  _SC_TRACE: '-1',
  _SC_TRACE_VERSION: '-1',
  _SC_RAW_SOCKETS: '-1',
  _SC_ADVISORY_INFO: '0',
  _SC_BARRIERS: '-1',
  _SC_SPIN_LOCKS: '1',
  _SC_TIMER_MAX: '32',
  _SC_DELAYTIMER_MAX: '0',
  _SC_ATEXIT_MAX: '32',
  _SC_LINE_MAX: '2048',
  _SC_BC_BASE_MAX: '99',
  _SC_BC_DIM_MAX: '2048',
  _SC_BC_SCALE_MAX: '99',
  _SC_SYMLOOP_MAX: '32',
  _SC_IOV_MAX: '1024',
  _SC_UIO_MAXIOV: '1024',
  _SC_THREAD_DESTRUCTOR_ITERATIONS: '4',
  _SC_TTY_NAME_MAX: '32',
  _SC_LOGIN_NAME_MAX: '256',
  /** Defaults; live session: **`ctx.bareOsGetconfSysconf`** (pipeline limits, swarm caps, …). */
  _SC_BARE_OS_PIPELINE_MAX_BYTES: '536870912',
  _SC_BARE_OS_PIPELINE_MAX_LINES: '2000000',
  _SC_BARE_OS_PIPELINE_MAX_STAGES: '32',
  _SC_BARE_OS_GLOB_MAX_MATCHES: '4096',
  _SC_BARE_OS_SHELL_LOOP_MAX: '10000',
  _SC_BARE_OS_EXEC_MAX_DEPTH: '64',
  _SC_BARE_OS_XARGS_MAX_PROCS: '8',
  _SC_BARE_OS_SWARM_MAX_PEERS: '512',
  _SC_BARE_OS_SWARM_MAX_CLIENT_CONNECTIONS: '256',
  _SC_BARE_OS_SWARM_MAX_SERVER_CONNECTIONS: '256',
  _SC_BARE_OS_SWARM_MAX_PARALLEL: '64',
  _SC_BARE_OS_DGRAM_RECVQ_MAX: '256',
  _SC_BARE_OS_ACCEPT_QUEUE_MAX: '64',
  _PC_PATH_MAX: '4096',
  _PC_NAME_MAX: '255',
  _PC_CHOWN_RESTRICTED: '1',
  _PC_NO_TRUNC: '1',
  _PC_FILESIZEBITS: '64',
  _PC_LINK_MAX: '1',
  _PC_MAX_CANON: '255',
  _PC_MAX_INPUT: '512',
  _PC_PIPE_BUF: '4096',
  _PC_2_SYMLINKS: '1',
  /** Comma-separated `ctx.bareOsSyscall` op names implemented in stock booter. */
  BARE_OS_SYSCALL_OPS:
    'accept,access,bind,chdir,chmod,clock_gettime,connect,exists,fcntl,fdatasync,fsync,ftruncate,getcwd,getsockopt,kill,link,listen,lstat,mkdir,mount,mq_open,mq_receive,mq_send,nanosleep,pathconf,posix_fadvise,posixPoll,readFile,readdir,readlink,readv,recv,recvfrom,recvmsg,rename,rmdir,select,send,sendmsg,setsockopt,shutdown,socket,stat,symlink,truncate,umask,umount,unlink,utimes,writeFile,writev',
  /** POSIX.1 XSH-style names documented in `/proc/bare_os/syscalls.json` opsDetail (socket family are syscall probes returning ENOSYS-shaped results). */
  BARE_OS_POSIX_XSH_OPS:
    'open,close,read,write,readv,writev,getsockopt,setsockopt,lseek,nanosleep,clock_gettime,posix_fadvise,pipe,dup,dup2,fcntl,poll,select,umask,fsync,fdatasync,socket,bind,listen,accept,connect,send,recv,recvfrom,sendmsg,recvmsg,shutdown',
  /** Encodings accepted by `/bin/iconv` (subset; case-insensitive names). */
  BARE_OS_ICONV_ENCODINGS: 'UTF-8,ISO-8859-1,UTF-16LE,UTF-16BE',
  /** Synthetic process table JSON path (logical VFS). */
  BARE_OS_PROC_PROCESS_TABLE: '/proc/bare_os/process_table.json',
  /** Sidecar suffix for synthetic POSIX ACL text (`getfacl` / `setfacl`). */
  BARE_OS_ACL_SIDECAR_SUFFIX: '.bare_acl',
  /** Sidecar suffix for extended-attribute JSON (`xattr`). */
  BARE_OS_XATTR_SIDECAR_SUFFIX: '.bare_xattr.json',
  /** Incremental kernel.ext.d reload after boot (`ctx.bareOsReloadKernelExtDropinsSafe`); 0/1 hint only. */
  BARE_OS_KERNEL_EXT_D_HOT_RELOAD: '0',
  /** Operator hint for hyperblob-style dedup in host pipelines; guest VFS does not enable automatically. */
  BARE_OS_VFS_HYPERBLOBS_DEDUP: '0',
  /** This binary: fixed catalog. Use `getconf NAME /path` + `ctx.bareOsPathconf` for live pathconf. */
  BARE_OS_GETCONF_SOURCE: 'static_catalog',
  /** Guest session denies read/write/unlink/chmod on sealed `/.bare/account` and `/.bare/vault/**` unless BARE_OS_GUEST_BARE_READ_ALL=1. */
  BARE_OS_GUEST_SENSITIVE_BARE_DENY: '1',
  /** Optional `/.bare-os/acct/…` segment before `home/` and `tmp/` (BARE_OS_PERSONAL_ACCT_PREFIX). */
  BARE_OS_PERSONAL_ACCT_PREFIX_FEATURE: '1',
  /** Legacy flat-root → `/.bare-os/home/<seg>/` migration state file on the personal drive. */
  BARE_OS_PERSONAL_ROOT_MIGRATION_STATE: '/.bare-os/migration/legacy-root-v1.json',
  /** Replication hook counter: vfs.replication_warm_full_invalidate (metrics / kernelCounters). */
  BARE_OS_REPLICATION_WARM_FULL_INVALIDATE_METRIC: 'vfs.replication_warm_full_invalidate'
}

async function run(ctx, argv) {
  const args = argv.slice(1).filter((a) => a !== '--')
  let dumpAll = false
  /** @type {string[]} */
  const positional = []
  for (const a of args) {
    if (a === '-a') dumpAll = true
    else if (!a.startsWith('-')) positional.push(a)
    else {
      ctx.console.error('getconf: unknown option: ' + a)
      ctx.exitCode = 1
      return
    }
  }

  if (dumpAll) {
    for (const k of Object.keys(CONF).sort()) {
      ctx.console.log(k + '\n' + CONF[k])
    }
    ctx.exitCode = 0
    return
  }

  if (positional.length === 2) {
    const varName = positional[0]
    const pathSpec = positional[1]
    if (
      typeof ctx.bareOsPathconf === 'function' &&
      pathSpec.startsWith('/')
    ) {
      try {
        const v = ctx.bareOsPathconf(pathSpec, varName)
        ctx.console.log(String(v))
        ctx.exitCode = 0
        return
      } catch (e) {
        ctx.console.error('getconf: ' + (e?.message || String(e)))
        ctx.exitCode = 1
        return
      }
    }
    if (positional.length === 2 && CONF[varName] != null) {
      ctx.console.log(CONF[varName])
      ctx.exitCode = 0
      return
    }
    if (positional.length === 2) {
      ctx.console.error('getconf: ' + varName + ': unknown variable')
      ctx.exitCode = 1
      return
    }
  }

  if (positional.length !== 1) {
    ctx.console.error('usage: getconf [-a] system_var [path_for_pathconf]')
    ctx.exitCode = 1
    return
  }

  const name = positional[0]

  if (typeof ctx.bareOsGetconfSysconf === 'function') {
    try {
      const dyn = ctx.bareOsGetconfSysconf(name)
      if (dyn != null && dyn !== '') {
        ctx.console.log(String(dyn))
        ctx.exitCode = 0
        return
      }
    } catch (e) {
      ctx.console.error('getconf: ' + (e?.message || String(e)))
      ctx.exitCode = 1
      return
    }
  }

  if (Object.prototype.hasOwnProperty.call(CONF, name)) {
    ctx.console.log(CONF[name])
    ctx.exitCode = 0
    return
  }

  ctx.console.error('getconf: ' + name + ': unknown variable')
  ctx.exitCode = 1
}