/* BARE_OS_BIN_API 1.0.0 — bump when staged /bin script semantics change (see developer guide). */
/** Shared helpers for drive-resident /bin scripts (prepended before each command). */
function bareStdin(ctx) {
  return typeof ctx.shellStdin === 'string' ? ctx.shellStdin : ''
}

/** @param {number} mode @param {'file' | 'directory' | 'symlink'} type */
function bareFormatModeString(mode, type) {
  const typeChar = type === 'directory' ? 'd' : type === 'symlink' ? 'l' : '-'
  const perm = mode & 0o777
  const r = (bit) => (perm & bit ? 'r' : '-')
  const w = (bit) => (perm & bit ? 'w' : '-')
  const x = (bit) => (perm & bit ? 'x' : '-')
  return (
    typeChar +
    r(0o400) +
    w(0o200) +
    x(0o100) +
    r(0o040) +
    w(0o020) +
    x(0o010) +
    r(0o004) +
    w(0o002) +
    x(0o001)
  )
}

/** @param {number} mtimeMs @param {number} [nowMs] */
function bareFormatLsMtime(mtimeMs, nowMs) {
  const now = nowMs != null ? nowMs : Date.now()
  const d = new Date(mtimeMs)
  const months = [
    'Jan',
    'Feb',
    'Mar',
    'Apr',
    'May',
    'Jun',
    'Jul',
    'Aug',
    'Sep',
    'Oct',
    'Nov',
    'Dec'
  ]
  const mon = months[d.getMonth()]
  const day = String(d.getDate()).padStart(2, ' ')
  const sixMo = 180 * 24 * 3600 * 1000
  if (Math.abs(now - mtimeMs) > sixMo) {
    const yr = String(d.getFullYear()).padStart(4, ' ')
    return mon + ' ' + day + '  ' + yr
  }
  const hh = String(d.getHours()).padStart(2, '0')
  const mm = String(d.getMinutes()).padStart(2, '0')
  return mon + ' ' + day + ' ' + hh + ':' + mm
}

/** @param {number} size */
function barePosixBlocks(size) {
  return Math.ceil(Number(size) / 512) || 0
}

/**
 * Raw stdout for NUL/binary when **`process.stdout.write`** is missing.
 * If **`ctx.bareOsBinWrite(Uint8Array|string)`** is set (tests / host), use it.
 * @param {Record<string, unknown>} ctx
 * @param {string | Uint8Array} chunk
 * @returns {boolean}
 */
function bareOsEmitRaw(ctx, chunk) {
  if (typeof ctx.bareOsBinWrite === 'function') {
    const b4 = ctx.b4a
    const u8 =
      typeof chunk === 'string'
        ? b4 && typeof b4.from === 'function'
          ? b4.from(chunk)
          : new TextEncoder().encode(chunk)
        : chunk
    ctx.bareOsBinWrite(u8 instanceof Uint8Array ? u8 : new Uint8Array(u8))
    return true
  }
  const w = globalThis.process?.stdout?.write
  if (typeof w === 'function') {
    w.call(globalThis.process.stdout, chunk)
    return true
  }
  return false
}

/** Session env map (`vfs.env`, then `ctx.env`). Never throws. */
function bareOsEnv(ctx) {
  const v = ctx && ctx.vfs && ctx.vfs.env
  if (v && typeof v === 'object') return v
  const e = ctx && ctx.env
  if (e && typeof e === 'object') return e
  return {}
}

/**
 * Strict POSIX-ish decimal integer (no octal, no exponent, no empty).
 * @param {unknown} s
 * @returns {number}
 */
function bareOsParseDecInt(s) {
  const t = String(s == null ? '' : s).trim()
  if (!/^[+-]?(?:0|[1-9][0-9]*)$/.test(t)) return NaN
  const n = Number.parseInt(t, 10)
  return Number.isSafeInteger(n) ? n : NaN
}

/** @param {unknown} s */
function bareOsParseNonNegInt(s) {
  const n = bareOsParseDecInt(s)
  return n >= 0 ? n : NaN
}

/**
 * @param {Record<string, unknown>} ctx
 * @param {string} name
 * @param {number} fallback
 * @param {number} [min]
 * @param {number} [max]
 */
function bareOsEnvInt(ctx, name, fallback, min, max) {
  const raw = bareOsEnv(ctx)[name]
  if (raw == null || raw === '') return fallback
  const n = Number.parseInt(String(raw), 10)
  if (!Number.isFinite(n)) return fallback
  let v = n
  if (min != null && v < min) v = min
  if (max != null && v > max) v = max
  return v
}

/**
 * @param {Record<string, unknown>} ctx
 * @param {string} msg
 * @param {number} [code]
 */
function bareOsFail(ctx, msg, code) {
  if (msg) ctx.console.error(msg)
  ctx.exitCode = code == null ? 1 : code
}

/** @param {unknown} e */
function bareOsIsNotFoundErr(e) {
  const code = e && typeof e === 'object' ? e.code : ''
  if (code === 'ENOENT') return true
  const msg = String((e && e.message) || e || '')
  return /ENOENT|No such file|not found/i.test(msg)
}

/**
 * @param {Record<string, unknown>} ctx
 * @param {unknown} buf
 * @returns {Uint8Array}
 */
function bareOsToU8(ctx, buf) {
  if (!buf) return new Uint8Array(0)
  if (buf instanceof Uint8Array) return buf
  if (ctx && ctx.b4a && typeof ctx.b4a.from === 'function') return ctx.b4a.from(buf)
  return new Uint8Array(buf)
}

/** @param {string} dir @param {string} name */
function bareOsJoinPath(dir, name) {
  const d = String(dir || '').replace(/\/+$/, '')
  const n = String(name || '').replace(/^\/+/, '')
  if (!d || d === '/') return '/' + n
  return d + '/' + n
}

/** @param {string} p */
function bareOsBaseName(p) {
  const t = String(p || '').replace(/\/+$/, '')
  if (!t || t === '/') return t === '/' ? '/' : ''
  const i = t.lastIndexOf('/')
  return i < 0 ? t : t.slice(i + 1) || t
}

/** @param {string} p */
function bareOsParentDir(p) {
  const t = String(p || '').replace(/\/+$/, '') || '/'
  if (t === '/') return '/'
  const i = t.lastIndexOf('/')
  return i <= 0 ? '/' : t.slice(0, i) || '/'
}

/** @param {string} p */
function bareOsNormPath(p) {
  return String(p || '').replace(/\/+$/, '') || '/'
}

/**
 * @param {Record<string, unknown>} ctx
 * @param {string} p
 */
function bareOsResolvePath(ctx, p) {
  if (ctx && ctx.vfs && typeof ctx.vfs.resolveLogical === 'function') {
    try {
      return String(ctx.vfs.resolveLogical(p) || p)
    } catch {
      /* fall through */
    }
  }
  return String(p || '')
}

/**
 * True when dest is src or lives under src (self-copy / self-move).
 * @param {Record<string, unknown>} ctx
 * @param {string} src
 * @param {string} dest
 */
function bareOsDestInsideSrc(ctx, src, dest) {
  const s = bareOsNormPath(bareOsResolvePath(ctx, src))
  const d = bareOsNormPath(bareOsResolvePath(ctx, dest))
  if (s === d) return true
  if (s === '/') return d !== '/'
  return d === s || d.startsWith(s + '/')
}

const BARE_OS_B64_ALPH =
  'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/'

/** @param {Uint8Array} u8 */
function bareOsB64Encode(u8) {
  let out = ''
  let i = 0
  for (; i + 2 < u8.length; i += 3) {
    const n = (u8[i] << 16) | (u8[i + 1] << 8) | u8[i + 2]
    out +=
      BARE_OS_B64_ALPH[(n >> 18) & 63] +
      BARE_OS_B64_ALPH[(n >> 12) & 63] +
      BARE_OS_B64_ALPH[(n >> 6) & 63] +
      BARE_OS_B64_ALPH[n & 63]
  }
  const rest = u8.length - i
  if (rest === 1) {
    const n = u8[i] << 16
    out += BARE_OS_B64_ALPH[(n >> 18) & 63] + BARE_OS_B64_ALPH[(n >> 12) & 63] + '=='
  } else if (rest === 2) {
    const n = (u8[i] << 16) | (u8[i + 1] << 8)
    out +=
      BARE_OS_B64_ALPH[(n >> 18) & 63] +
      BARE_OS_B64_ALPH[(n >> 12) & 63] +
      BARE_OS_B64_ALPH[(n >> 6) & 63] +
      '='
  }
  return out
}

/**
 * RFC 4648 Base64 decode (also accepts URL-safe alphabet). Rejects junk.
 * @param {string} s
 * @returns {Uint8Array}
 */
function bareOsB64Decode(s) {
  const t = String(s).replace(/\s+/g, '')
  if (!t) return new Uint8Array(0)
  if (t.length % 4 === 1) throw new Error('invalid base64 length')
  let pad = 0
  if (t.endsWith('==')) pad = 2
  else if (t.endsWith('=')) pad = 1
  const body = pad ? t.slice(0, t.length - pad) : t
  const bytes = []
  let buf = 0
  let bits = 0
  for (let i = 0; i < body.length; i++) {
    const c = body[i]
    let v = BARE_OS_B64_ALPH.indexOf(c)
    if (v < 0) {
      if (c === '-') v = 62
      else if (c === '_') v = 63
      else throw new Error('invalid base64 character')
    }
    buf = (buf << 6) | v
    bits += 6
    if (bits >= 8) {
      bits -= 8
      bytes.push((buf >> bits) & 255)
    }
  }
  if (pad) {
    const want = Math.floor((body.length * 6) / 8)
    if (bytes.length > want) bytes.length = want
  }
  return new Uint8Array(bytes)
}

/**
 * @param {string} s
 * @returns {Uint8Array}
 */
function bareOsHexDecode(s) {
  const t = String(s).replace(/\s+/g, '')
  if (t.length % 2 !== 0) throw new Error('odd hex length')
  const out = new Uint8Array(t.length / 2)
  for (let i = 0; i < out.length; i++) {
    const pair = t.slice(i * 2, i * 2 + 2)
    if (!/^[0-9a-fA-F]{2}$/.test(pair)) throw new Error('invalid hex')
    out[i] = Number.parseInt(pair, 16)
  }
  return out
}

/** @param {Uint8Array} u8 */
function bareOsHexEncode(u8) {
  let s = ''
  for (let i = 0; i < u8.length; i++) s += u8[i].toString(16).padStart(2, '0')
  return s
}

const BARE_P2P_SUITE_PREFIX = '[bare-p2p-v1]'
const BARE_P2P_SUITE_MAX_HISTORY = 2000

function bareP2pNowMs() {
  return Date.now()
}

function bareP2pId(prefix) {
  const rnd = Math.floor(Math.random() * 0x7fffffff)
  return prefix + '-' + bareP2pNowMs().toString(36) + '-' + rnd.toString(36)
}

function bareP2pCommonExamples(argv0, rows) {
  const out = []
  for (const r of rows || []) out.push('  ' + argv0 + ' ' + r)
  return out.join('\n')
}

function bareP2pHelpText(argv0, summary, usage, examples, seeAlso) {
  const lines = []
  lines.push('usage: ' + usage)
  lines.push(summary)
  lines.push('')
  lines.push('common options: --help --json --quiet --summary --timeout MS --no-color')
  if (examples && examples.length) {
    lines.push('')
    lines.push('examples:')
    lines.push(bareP2pCommonExamples(argv0, examples))
  }
  if (seeAlso && seeAlso.length) {
    lines.push('')
    lines.push('see also: ' + seeAlso.join(', '))
  }
  lines.push('')
  lines.push('troubleshooting: if peer data is empty, run `swarmtop` then `swarmdoctor`.')
  return lines.join('\n')
}

function bareP2pParseCommonFlags(args) {
  const rest = []
  const opt = {
    help: false,
    json: false,
    quiet: false,
    summary: false,
    timeoutMs: 4000,
    noColor: false,
    dryRun: false,
    yes: false
  }
  for (let i = 0; i < args.length; i++) {
    const a = String(args[i] || '')
    if (a === '-h' || a === '--help') opt.help = true
    else if (a === '--json') opt.json = true
    else if (a === '--quiet') opt.quiet = true
    else if (a === '--summary') opt.summary = true
    else if (a === '--dry-run') opt.dryRun = true
    else if (a === '--yes' || a === '-y') opt.yes = true
    else if (a === '--no-color') opt.noColor = true
    else if (a === '--timeout') {
      const n = parseInt(args[i + 1] || '4000', 10)
      if (Number.isFinite(n)) opt.timeoutMs = Math.max(250, Math.min(120000, n))
      i++
    } else rest.push(a)
  }
  return { opt, rest }
}

function bareP2pPrint(ctx, data, opt) {
  if (opt && opt.quiet) return
  if (opt && (opt.json || typeof data !== 'string')) {
    ctx.console.log(typeof data === 'string' ? JSON.stringify({ message: data }) : JSON.stringify(data, null, 2))
    return
  }
  ctx.console.log(String(data))
}

function bareP2pError(ctx, argv0, msg, next, opt) {
  if (opt && opt.quiet) {
    ctx.exitCode = 1
    return
  }
  ctx.console.error(argv0 + ': ' + msg + (next ? ' · try: ' + next : ''))
  ctx.exitCode = 1
}

function bareP2pSuggestSubcommand(sub, known) {
  const s = String(sub || '')
  if (!s) return ''
  let best = ''
  let bestScore = 1e9
  for (const k of known || []) {
    const kk = String(k || '')
    const d = Math.abs(kk.length - s.length) + (kk[0] === s[0] ? 0 : 2)
    if (d < bestScore) {
      bestScore = d
      best = kk
    }
  }
  return bestScore <= 4 ? best : ''
}

function bareP2pFirstRunHint(ctx, app, hint) {
  const env = ctx.env && typeof ctx.env === 'object' ? ctx.env : {}
  if (env.BARE_P2P_NO_HINTS === '1' || env.BARE_P2P_NO_HINTS === 'true') return
  const key = '__bare_p2p_hint_' + app
  if (ctx[key]) return
  ctx[key] = true
  try {
    ctx.console.log('hint: ' + hint)
  } catch {
    /* ignore */
  }
}

function bareP2pMaybeNext(ctx, opt, next) {
  if (opt && opt.quiet) return
  if (next) ctx.console.log('next: ' + next)
}

function bareP2pHome(ctx) {
  const env = ctx.env && typeof ctx.env === 'object' ? ctx.env : {}
  const home = typeof env.HOME === 'string' && env.HOME ? env.HOME : '/home/guest'
  return home
}

function bareP2pJoinPath(a, b) {
  if (!a.endsWith('/')) return a + '/' + b
  return a + b
}

function bareP2pDataDir(ctx) {
  return bareP2pJoinPath(bareP2pHome(ctx), '.bare/p2p-suite')
}

function bareP2pDataFile(ctx, app) {
  return bareP2pJoinPath(bareP2pDataDir(ctx), app + '.json')
}

async function bareP2pReadJson(ctx, path) {
  try {
    if (!ctx.vfs || typeof ctx.vfs.readFile !== 'function') return null
    const b = await ctx.vfs.readFile(path)
    if (!b) return null
    const t = ctx.b4a.toString(b).trim()
    if (!t) return null
    return JSON.parse(t)
  } catch {
    return null
  }
}

async function bareP2pWriteJson(ctx, path, obj) {
  if (!ctx.vfs || typeof ctx.vfs.writeFile !== 'function') return false
  const body = JSON.stringify(obj, null, 2) + '\n'
  const b4 = ctx.b4a
  const buf =
    b4 && typeof b4.from === 'function'
      ? b4.from(body)
      : new TextEncoder().encode(body)
  try {
    await ctx.vfs.writeFile(path, buf)
    return true
  } catch {
    return false
  }
}

function bareP2pDecodeEnvelope(line) {
  const s = String(line || '')
  if (!s.startsWith(BARE_P2P_SUITE_PREFIX)) return null
  const payload = s.slice(BARE_P2P_SUITE_PREFIX.length).trim()
  if (!payload) return null
  try {
    const obj = JSON.parse(payload)
    if (!obj || typeof obj !== 'object') return null
    return obj
  } catch {
    return null
  }
}

function bareP2pEncodeEnvelope(app, kind, payload) {
  return (
    BARE_P2P_SUITE_PREFIX +
    ' ' +
    JSON.stringify({
      schema: 1,
      suite: 'bare-p2p',
      version: '1',
      app,
      kind,
      tsMs: bareP2pNowMs(),
      payload: payload || {}
    })
  )
}

function bareP2pSend(ctx, app, kind, payload) {
  if (app === 'meshdrop' && typeof ctx.bareOsMeshdropSend === 'function') {
    return ctx.bareOsMeshdropSend({
      app,
      kind,
      payload: payload || {},
      tsMs: bareP2pNowMs()
    })
  }
  if (typeof ctx.bareOsChatSend !== 'function') {
    return { ok: false, reason: 'bareOsChatSend unavailable' }
  }
  return ctx.bareOsChatSend(bareP2pEncodeEnvelope(app, kind, payload))
}

function bareP2pCollectFromHistory(ctx, app, limit) {
  if (app === 'meshdrop' && typeof ctx.bareOsMeshdropHistory === 'function') {
    let hist = []
    try {
      hist = ctx.bareOsMeshdropHistory(
        Math.max(1, Math.min(BARE_P2P_SUITE_MAX_HISTORY, limit || 512))
      )
    } catch {
      hist = []
    }
    if (!Array.isArray(hist)) return []
    const out = []
    for (const ev of hist) {
      if (!ev || typeof ev !== 'object') continue
      if (ev.app !== app) continue
      out.push({
        fromPeerKey: typeof ev.fromPeerKey === 'string' ? ev.fromPeerKey : '',
        displayName: typeof ev.sender === 'string' ? ev.sender : '',
        local: Boolean(ev.local),
        receivedAtMs:
          typeof ev.receivedAtMs === 'number' ? ev.receivedAtMs : bareP2pNowMs(),
        packet: {
          app,
          kind: typeof ev.kind === 'string' ? ev.kind : 'unknown',
          payload: ev.payload && typeof ev.payload === 'object' ? ev.payload : {}
        }
      })
    }
    return out
  }
  if (typeof ctx.bareOsChatHistory !== 'function') return []
  let hist = []
  try {
    hist = ctx.bareOsChatHistory(
      Math.max(1, Math.min(BARE_P2P_SUITE_MAX_HISTORY, limit || 512))
    )
  } catch {
    hist = []
  }
  if (!Array.isArray(hist)) return []
  const out = []
  for (const ev of hist) {
    if (!ev || typeof ev !== 'object') continue
    const body = String(ev.body || '')
    const decoded = bareP2pDecodeEnvelope(body)
    if (!decoded || decoded.app !== app) continue
    out.push({
      fromPeerKey: typeof ev.fromPeerKey === 'string' ? ev.fromPeerKey : '',
      displayName: typeof ev.displayName === 'string' ? ev.displayName : '',
      local: Boolean(ev.local),
      receivedAtMs:
        typeof ev.receivedAtMs === 'number' ? ev.receivedAtMs : bareP2pNowMs(),
      packet: decoded
    })
  }
  return out
}

function bareP2pSubscribe(ctx, app, fn) {
  if (app === 'meshdrop' && typeof ctx.bareOsMeshdropSubscribe === 'function') {
    return ctx.bareOsMeshdropSubscribe((ev) => {
      if (!ev || typeof ev !== 'object' || ev.app !== app) return
      fn({
        fromPeerKey: typeof ev.fromPeerKey === 'string' ? ev.fromPeerKey : '',
        displayName: typeof ev.sender === 'string' ? ev.sender : '',
        local: Boolean(ev.local),
        receivedAtMs:
          typeof ev.receivedAtMs === 'number' ? ev.receivedAtMs : bareP2pNowMs(),
        packet: {
          app,
          kind: typeof ev.kind === 'string' ? ev.kind : 'unknown',
          payload: ev.payload && typeof ev.payload === 'object' ? ev.payload : {}
        }
      })
    })
  }
  if (typeof ctx.bareOsChatSubscribe !== 'function') return () => {}
  return ctx.bareOsChatSubscribe((ev) => {
    if (!ev || typeof ev !== 'object') return
    const body = String(ev.body || '')
    const decoded = bareP2pDecodeEnvelope(body)
    if (!decoded || decoded.app !== app) return
    fn({
      fromPeerKey: typeof ev.fromPeerKey === 'string' ? ev.fromPeerKey : '',
      displayName: typeof ev.displayName === 'string' ? ev.displayName : '',
      local: Boolean(ev.local),
      receivedAtMs:
        typeof ev.receivedAtMs === 'number' ? ev.receivedAtMs : bareP2pNowMs(),
      packet: decoded
    })
  })
}

async function bareP2pReadSwarmSnapshot(ctx) {
  const out = {
    atMs: bareP2pNowMs(),
    peerCount: null,
    topicCount: null,
    peers: []
  }
  const snap = await bareP2pReadJson(ctx, '/proc/bare_os/swarm')
  if (!snap || typeof snap !== 'object') return out
  if (typeof snap.peerCount === 'number') out.peerCount = snap.peerCount
  if (typeof snap.topicCount === 'number') out.topicCount = snap.topicCount
  const peers = Array.isArray(snap.peers) ? snap.peers : []
  const detailsRaw = await bareP2pReadJson(ctx, '/proc/bare_os/peer_details.json')
  const details =
    detailsRaw && typeof detailsRaw === 'object' && Array.isArray(detailsRaw.peers)
      ? detailsRaw.peers
      : []
  /** @type {Map<string, Record<string, unknown>>} */
  const byKey = new Map()
  for (const d of details) {
    if (!d || typeof d !== 'object') continue
    const rk = typeof d.remotePublicKey === 'string' ? d.remotePublicKey : ''
    const pid = typeof d.peerId === 'string' ? d.peerId : ''
    if (rk) byKey.set('k:' + rk, d)
    if (pid) byKey.set('p:' + pid, d)
  }
  const merged = []
  for (const p of peers) {
    if (!p || typeof p !== 'object') continue
    const rk = typeof p.remotePublicKey === 'string' ? p.remotePublicKey : ''
    const pid = typeof p.peerId === 'string' ? p.peerId : ''
    const d = (rk && byKey.get('k:' + rk)) || (pid && byKey.get('p:' + pid)) || null
    merged.push(d && typeof d === 'object' ? { ...p, ...d } : p)
  }
  out.peers = merged.slice(0, 128)
  return out
}

async function bareP2pReadProcJson(ctx, path) {
  const v = await bareP2pReadJson(ctx, path)
  return v && typeof v === 'object' ? v : {}
}

/**
 * App Store ↔ Pear link resolution, VFS materialization, and in-guest launch.
 */

function appstorePearJoinPath(...parts) {
  const raw = parts
    .filter((p) => p != null && String(p) !== '')
    .map((p) => String(p).replace(/\\/g, '/'))
    .join('/')
    .replace(/\/+/g, '/')
  const absolute = raw.startsWith('/')
  const segs = []
  for (const seg of raw.split('/')) {
    if (!seg || seg === '.') continue
    if (seg === '..') {
      if (segs.length) segs.pop()
      continue
    }
    segs.push(seg)
  }
  const out = segs.join('/')
  return absolute ? '/' + out.replace(/^\//, '') : out
}

function appstorePearDirname(p) {
  const s = String(p || '').replace(/\\/g, '/')
  const i = s.lastIndexOf('/')
  if (i <= 0) return s.startsWith('/') ? '/' : '.'
  return s.slice(0, i) || '/'
}

function appstoreParsePearLink(link) {
  const raw = String(link || '').trim()
  if (!raw.startsWith('pear://')) {
    throw new Error('invalid pear:// link')
  }
  let rest = raw.slice('pear://'.length).split('/')[0]
  let length = null
  if (rest.startsWith('0.')) {
    const dot = rest.indexOf('.', 2)
    if (dot > 2) {
      const n = Number(rest.slice(2, dot))
      if (Number.isFinite(n) && n >= 0) length = Math.floor(n)
      rest = rest.slice(dot + 1)
    }
  }
  const keyZ32 = rest.trim()
  if (!keyZ32) throw new Error('invalid pear:// link (missing key)')
  return { keyZ32, length, pearLink: raw }
}

function appstoreFindHdmsMountByKey(ctx, keyZ32) {
  const hdms = ctx.disk && ctx.disk.hdmsController
  if (!hdms || !hdms.active || !keyZ32) return null

  for (const [label, slot] of hdms.byLabel) {
    const k = slot?.entry?.key
    if (k && String(k) === String(keyZ32)) {
      return { label, mountRoot: appstorePearJoinPath('/mnt', label), drive: slot.drive, local: true }
    }
  }

  for (const entry of hdms.registry?.drives || []) {
    if (!entry || String(entry.key || '') !== String(keyZ32)) continue
    const slot = hdms.byLabel.get(entry.label)
    if (slot?.drive) {
      return {
        label: entry.label,
        mountRoot: appstorePearJoinPath('/mnt', entry.label),
        drive: slot.drive,
        local: true
      }
    }
  }

  return null
}

function appstoreEphemeralFetchLabel(keyZ32) {
  const slug = String(keyZ32 || 'fetch')
    .replace(/[^a-zA-Z0-9]/g, '')
    .slice(0, 48)
  let label = 'as-ro-' + (slug || 'fetch')
  if (label.length > 63) label = label.slice(0, 63)
  if (!/^[a-zA-Z0-9]/.test(label)) label = 'as-ro-' + label.replace(/^[^a-zA-Z0-9]+/, '')
  if (label.length > 63) label = label.slice(0, 63)
  return label
}

async function appstoreSleep(ms) {
  await new Promise((resolve) => setTimeout(resolve, ms))
}

async function appstoreVfsExists(vfs, path) {
  try {
    if (typeof vfs.stat === 'function') {
      await vfs.stat(path)
      return true
    }
    await vfs.readFile(path)
    return true
  } catch {
    return false
  }
}

async function appstoreCollectFiles(vfs, root) {
  /** @type {string[]} */
  const out = []
  /** @type {string[]} */
  const queue = [root]
  while (queue.length) {
    const dir = queue.shift()
    if (!vfs || typeof vfs.readdir !== 'function') continue
    let names
    try {
      names = await vfs.readdir(dir)
    } catch {
      continue
    }
    if (!Array.isArray(names)) continue
    for (const name of names) {
      if (!name || name === '.' || name === '..') continue
      if (name === '.bareos_empty') continue
      const abs = appstorePearJoinPath(dir, name)
      let st
      try {
        st = typeof vfs.stat === 'function' ? await vfs.stat(abs) : null
      } catch {
        st = null
      }
      const isDir = st && (st.isDirectory === true || st.type === 'directory')
      if (isDir) queue.push(abs)
      else out.push(abs)
    }
  }
  return out
}

async function appstoreMirrorVfsDir(vfs, srcDir, dstDir) {
  const files = await appstoreCollectFiles(vfs, srcDir)
  let copied = 0
  for (const src of files) {
    const rel = src.slice(srcDir.length).replace(/^\//, '')
    const dst = appstorePearJoinPath(dstDir, rel)
    if (typeof vfs.mkdir === 'function') {
      await vfs.mkdir(appstorePearDirname(dst), { recursive: true }).catch(() => {})
    }
    const buf = await vfs.readFile(src)
    await vfs.writeFile(dst, buf)
    copied++
  }
  return copied
}

async function appstoreWaitForTree(vfs, root, timeoutMs = 12000) {
  const deadline = Date.now() + timeoutMs
  while (Date.now() < deadline) {
    if (await appstoreVfsExists(vfs, appstorePearJoinPath(root, 'package.json'))) return true
    if (await appstoreVfsExists(vfs, appstorePearJoinPath(root, 'sources/index.js'))) return true
    if (await appstoreVfsExists(vfs, appstorePearJoinPath(root, 'app.bundle.js'))) return true
    await appstoreSleep(300)
  }
  return false
}

/**
 * Open a readonly HDMS mount for a pear key (ephemeral) when not already local.
 * @param {Record<string, unknown>} ctx
 * @param {string} keyZ32
 */
async function appstoreOpenPearMount(ctx, keyZ32) {
  const local = appstoreFindHdmsMountByKey(ctx, keyZ32)
  if (local) return local

  const hdms = ctx.disk && ctx.disk.hdmsController
  if (!hdms || !hdms.active) {
    throw new Error(
      'appstore fetch: log in (unlock identity) so HDMS can mount the pear:// drive'
    )
  }
  if (ctx.identity?.state !== 'unlocked') {
    throw new Error('appstore fetch: identity must be unlocked (use login)')
  }

  let label = appstoreEphemeralFetchLabel(keyZ32)
  if (hdms.byLabel.has(label)) {
    for (let n = 2; n <= 99; n++) {
      const candidate = (label.slice(0, 58) + '-' + n).slice(0, 63)
      if (!hdms.byLabel.has(candidate)) {
        label = candidate
        break
      }
    }
  }

  await hdms.addReadonly(ctx, label, keyZ32, { persist: false })
  const mountRoot = appstorePearJoinPath('/mnt', label)
  const swarm = hdms.swarm
  if (swarm && typeof swarm.flush === 'function') {
    await Promise.race([swarm.flush().catch(() => {}), appstoreSleep(8000)])
  }
  const ready = await appstoreWaitForTree(ctx.vfs, mountRoot)
  if (!ready) {
    throw new Error(
      `appstore fetch: timed out waiting for content on ${mountRoot} (is pear seed replicating?)`
    )
  }
  return { label, mountRoot, ephemeral: true, local: false }
}

/**
 * Copy pear release tree into an appstore package directory.
 * @param {Record<string, unknown>} ctx
 * @param {string} pearLink
 * @param {string} pkgDir
 */
async function appstoreFetchPearTree(ctx, pearLink, pkgDir) {
  const vfs = ctx.vfs
  if (!vfs || typeof vfs.readFile !== 'function' || typeof vfs.writeFile !== 'function') {
    throw new Error('appstore fetch: ctx.vfs unavailable')
  }

  const parsed = appstoreParsePearLink(pearLink)
  const mount = await appstoreOpenPearMount(ctx, parsed.keyZ32)

  if (typeof vfs.mkdir === 'function') {
    await vfs.mkdir(pkgDir, { recursive: true }).catch(() => {})
  }

  const fileCount = await appstoreMirrorVfsDir(vfs, mount.mountRoot, pkgDir)
  if (fileCount <= 0) {
    throw new Error(`appstore fetch: no files copied from ${mount.mountRoot}`)
  }

  /** @type {Record<string, unknown>} */
  let pkgJson = null
  try {
    const buf = await vfs.readFile(appstorePearJoinPath(pkgDir, 'package.json'))
    if (buf && buf.byteLength) {
      pkgJson = JSON.parse(ctx.b4a.toString(buf, 'utf8'))
    }
  } catch {
    /* ignore */
  }

  return {
    ok: true,
    fileCount,
    method: mount.local ? 'hdms-local-mount' : 'hdms-readonly-fetch',
    mountLabel: mount.label,
    mountRoot: mount.mountRoot,
    keyZ32: parsed.keyZ32,
    length: parsed.length,
    packageJson: pkgJson
  }
}

async function appstoreReadUtf8(vfs, b4a, path) {
  const buf = await vfs.readFile(path)
  if (!buf || !buf.byteLength) return null
  if (b4a && typeof b4a.toString === 'function') return b4a.toString(buf, 'utf8')
  return new TextDecoder().decode(buf instanceof Uint8Array ? buf : new Uint8Array(buf))
}

/**
 * Resolve runnable entry script under a materialized package dir.
 * @param {Record<string, unknown>} ctx
 * @param {string} pkgDir
 */
async function appstoreResolvePackageEntry(ctx, pkgDir) {
  const vfs = ctx.vfs
  const b4a = ctx.b4a
  let main = 'index.js'
  try {
    const raw = await appstoreReadUtf8(vfs, b4a, appstorePearJoinPath(pkgDir, 'package.json'))
    if (raw) {
      const pkg = JSON.parse(raw)
      if (pkg && pkg.main) main = String(pkg.main).replace(/^\.\//, '')
    }
  } catch {
    /* ignore */
  }

  const candidates = [
    appstorePearJoinPath(pkgDir, 'sources', main),
    appstorePearJoinPath(pkgDir, main),
    appstorePearJoinPath(pkgDir, 'sources/index.js'),
    appstorePearJoinPath(pkgDir, 'index.js')
  ]

  for (const p of candidates) {
    if (await appstoreVfsExists(vfs, p)) return p
  }
  return null
}

/**
 * Execute a plain JS entry (console.log apps) inside the guest shell.
 * @param {Record<string, unknown>} ctx
 * @param {string} scriptPath
 */
async function appstoreExecGuestScript(ctx, scriptPath) {
  const vfs = ctx.vfs
  const b4a = ctx.b4a
  const consoleRef = ctx.console
  if (!consoleRef || typeof consoleRef.log !== 'function') {
    throw new Error('appstore launch: ctx.console unavailable')
  }

  let src = await appstoreReadUtf8(vfs, b4a, scriptPath)
  if (!src) throw new Error('appstore launch: empty script: ' + scriptPath)
  src = src.replace(/^\uFEFF/, '').replace(/^#![^\n]*\n/, '')

  const AsyncFunction = Object.getPrototypeOf(async function () {}).constructor
  const fn = new AsyncFunction('console', src)
  await fn(consoleRef)
}

/**
 * Launch a materialized Pear app package in-guest.
 * @param {Record<string, unknown>} ctx
 * @param {string} pkgDir
 * @param {{ refetch?: boolean, pearLink?: string }} [opts]
 */
async function appstoreLaunchPackage(ctx, pkgDir, opts = {}) {
  const vfs = ctx.vfs
  if (!vfs) throw new Error('appstore launch: ctx.vfs unavailable')

  let entry = await appstoreResolvePackageEntry(ctx, pkgDir)
  if ((!entry || opts.refetch) && opts.pearLink) {
    await appstoreFetchPearTree(ctx, opts.pearLink, pkgDir)
    entry = await appstoreResolvePackageEntry(ctx, pkgDir)
  }
  if (!entry) {
    throw new Error(
      `appstore launch: no entry script under ${pkgDir} (expected sources/index.js or package.json main)`
    )
  }

  await appstoreExecGuestScript(ctx, entry)
  return { ok: true, entry, pkgDir }
}

/**
 * appstore — P2P App Store client for Bare OS.
 * Manages discovery and installation of packages into a dedicated HDMS App Store drive.
 *
 * See docs/design/p2p-app-store.md for the full design.
 */

/**
 * Check if the App Store HDMS drive label is currently mounted according to /proc.
 */
async function isAppstoreHdmsMounted(ctx, label) {
  try {
    const buf = await ctx.vfs.readFile('/proc/bare_os/hdms_health.json')
    if (!buf || !buf.byteLength) return false
    const health = JSON.parse(ctx.b4a.toString(buf))
    if (!health || !Array.isArray(health.labels)) return false
    return health.labels.some((l) => l && l.label === label)
  } catch {
    return false
  }
}

/**
 * Resolve the best path for the App Store registry.
 * Priority (Phase 3+):
 *   1. HDMS-mounted drive at /mnt/<label>/registry.json (if proc says the label is active)
 *   2. Personal fallback ~/.appstore/registry.json
 *   3. System example (last resort)
 */
async function resolveAppstoreRegistryPath(ctx) {
  const envLabel = (ctx.env && ctx.env.BARE_OS_APPSTORE_DRIVE_LABEL) || 'appstore'
  const hdmsPath = `/mnt/${envLabel}/registry.json`
  const home = (ctx.env && ctx.env.HOME) || '/home/guest'
  const personalPath = `${home}/.appstore/registry.json`
  const fallbackPath = '/etc/bare-os/appstore.registry.json'

  const mounted = await isAppstoreHdmsMounted(ctx, envLabel)

  return {
    hdmsPath,
    personalPath,
    fallbackPath,
    label: envLabel,
    usingHdms: mounted,
    preferredPath: mounted ? hdmsPath : personalPath
  }
}

async function readAppstoreRegistry(ctx) {
  const resolved = await resolveAppstoreRegistryPath(ctx)

  let merged = {
    schema: 1,
    appstoreDriveLabel: resolved.label,
    packages: [],
    _sources: [],
    usingHdms: resolved.usingHdms
  }

  // Priority order: HDMS (if mounted) → personal → fallback
  const candidates = []
  if (resolved.usingHdms) candidates.push({ path: resolved.hdmsPath, source: 'hdms' })
  candidates.push({ path: resolved.personalPath, source: 'personal' })
  candidates.push({ path: resolved.fallbackPath, source: 'fallback' })

  for (const cand of candidates) {
    try {
      const buf = await ctx.vfs.readFile(cand.path)
      if (buf && buf.byteLength) {
        const doc = JSON.parse(ctx.b4a.toString(buf))
        if (doc && typeof doc === 'object' && Array.isArray(doc.packages)) {
          merged._sources.push(cand.source)
          const pkgMap = new Map(merged.packages.map(p => [p.name, p]))
          for (const p of doc.packages) {
            if (p && p.name) pkgMap.set(p.name, { ...p })
          }
          merged.packages = Array.from(pkgMap.values())
          if (doc.appstoreDriveLabel) merged.appstoreDriveLabel = doc.appstoreDriveLabel
        }
      }
    } catch (_) {}
  }

  if (merged.packages.length === 0) {
    merged._source = 'fallback'
  } else {
    merged._source = merged._sources.join('+') || 'mixed'
  }

  return merged
}

async function writeAppstoreRegistry(ctx, doc) {
  const resolved = await resolveAppstoreRegistryPath(ctx)

  // Prefer HDMS if mounted, otherwise personal
  const candidates = []
  if (resolved.usingHdms) {
    candidates.push({ path: resolved.hdmsPath, source: 'hdms' })
  }
  candidates.push({ path: resolved.personalPath, source: 'personal' })

  for (const cand of candidates) {
    try {
      if (!doc.schema) doc.schema = 1
      doc.appstoreDriveLabel = doc.appstoreDriveLabel || resolved.label
      doc.lastUpdatedMs = Date.now()
      doc._source = cand.source

      const json = JSON.stringify(doc, null, 2)
      const buf = ctx.b4a.from(json, 'utf8')
      await ctx.vfs.writeFile(cand.path, buf)
      return { ok: true, path: cand.path }
    } catch (err) {
      // try next
    }
  }

  if (ctx.console && ctx.console.error) {
    ctx.console.error(`[debug] write failed to all candidate paths`)
  }
  return { ok: false }
}

/**
 * Materialize package tree by fetching from pear:// into the store packages dir.
 */
async function materializePackage(ctx, pkg, registryPath) {
  try {
    const baseDir = registryPath.replace(/\/registry\.json$/, '')
    const pkgDir = `${baseDir}/packages/${pkg.name}`

    if (typeof ctx.vfs.mkdir === 'function') {
      await ctx.vfs.mkdir(pkgDir, { recursive: true }).catch(() => {})
    }

    const pearLink = String(pkg.pearLink || pkg.link || '').trim()
    if (!pearLink.startsWith('pear://')) {
      return { ok: false, error: 'package has no pear:// link' }
    }

    const fetchResult = await appstoreFetchPearTree(ctx, pearLink, pkgDir)

    const manifest = {
      name: pkg.name,
      type: pkg.type || 'app',
      pearLink,
      version:
        (fetchResult.packageJson && fetchResult.packageJson.version) ||
        pkg.version ||
        '0.0.1',
      installedAtMs: pkg.installedAtMs || Date.now(),
      source: 'appstore',
      description:
        (fetchResult.packageJson && fetchResult.packageJson.description) ||
        pkg.description ||
        '',
      materialization: {
        schema: 1,
        method: fetchResult.method,
        fileCount: fetchResult.fileCount,
        mountLabel: fetchResult.mountLabel,
        keyZ32: fetchResult.keyZ32,
        fetchedAtMs: Date.now()
      }
    }

    await ctx.vfs.writeFile(
      `${pkgDir}/manifest.json`,
      ctx.b4a.from(JSON.stringify(manifest, null, 2) + '\n', 'utf8')
    )

    const meta = {
      installedFrom: pearLink,
      materializationVersion: 3,
      fetch: fetchResult
    }
    await ctx.vfs.writeFile(
      `${pkgDir}/appstore-meta.json`,
      ctx.b4a.from(JSON.stringify(meta, null, 2) + '\n', 'utf8')
    )

    const launcher = `// ${pkg.name} — run with: appstore launch ${pkg.name}
// Materialized Pear tree; entry is resolved from package.json main under sources/.
`
    await ctx.vfs.writeFile(`${pkgDir}/launch.js`, ctx.b4a.from(launcher, 'utf8'))

    return { ok: true, packageDir: pkgDir, fetch: fetchResult }
  } catch (err) {
    return { ok: false, error: err?.message || String(err) }
  }
}

function appstorePackageDir(registryPath, name) {
  const baseDir = registryPath.replace(/\/registry\.json$/, '')
  return `${baseDir}/packages/${name}`
}

async function run(ctx, argv) {
  const argv0 = argv[0] || 'appstore'
  const args = argv.slice(1)

  if (args.length === 0 || args[0] === '--help' || args[0] === '-h') {
    ctx.console.log(
      `appstore — P2P App Store for Bare OS

Usage:
  ${argv0} list                              # List installed packages
  ${argv0} info <name>                       # Show package details
  ${argv0} search [query]                    # Search P2P indexes (stub)
  ${argv0} install <name> [pear://link] --yes   # Install (with optional link)
  ${argv0} uninstall <name>                  # Remove a package
  ${argv0} launch <name> [--checkout mode]   # Launch an installed package
  ${argv0} setup                             # Help set up the App Store HDMS drive
  ${argv0} --help

The App Store uses an HDMS-mounted Hyperdrive (default label: appstore).
Registry is read from /mnt/<label>/registry.json when available.

The App Store is production-ready.
See: docs/design/p2p-app-store.md for architecture and future evolution.`
    )
    if (args.length === 0) ctx.exitCode = 1
    return
  }

  const sub = String(args[0] || '').trim()
  const reg = await readAppstoreRegistry(ctx)

  if (sub === 'list') {
    const usingHdms = !!reg.usingHdms
    const sourceLabel = usingHdms ? 'HDMS drive (real)' : 'personal fallback (~/.appstore)'
    if (reg.packages.length === 0) {
      ctx.console.log('No packages installed in the App Store yet.')
      ctx.console.log(`Using: ${sourceLabel} (label: ${reg.appstoreDriveLabel || 'appstore'})`)
      ctx.console.log('Run "appstore setup" for instructions on creating the real HDMS store.')
      return
    }
    ctx.console.log(`App Store (${reg.appstoreDriveLabel || 'appstore'}) — ${reg.packages.length} package(s)`)
    ctx.console.log(`Source: ${sourceLabel}\n`)
    for (const pkg of reg.packages) {
      const type = pkg.type || 'app'
      ctx.console.log(`  ${pkg.name} [${type}]  ${pkg.version || ''}  ${pkg.description || ''}`)
    }
    if (!usingHdms) {
      ctx.console.log('\nTip: Run "appstore setup" to move to a real HDMS-mounted App Store drive.')
    }
    return
  }

  if (sub === 'info') {
    const name = String(args[1] || '').trim()
    const pkg = reg.packages.find((p) => p && p.name === name)
    if (!pkg) {
      ctx.console.error(`${argv0}: package not found: ${name}`)
      ctx.exitCode = 1
      return
    }
    ctx.console.log(JSON.stringify(pkg, null, 2))
    return
  }

  if (sub === 'search') {
    const query = args.slice(1).join(' ').trim()
    ctx.console.log('App Store search (Phase 1 integration): delegating to pkg-swarm-index...\n')

    // Best effort: run the existing pkg-swarm-index tool
    if (typeof ctx.runBinCommand === 'function') {
      try {
        const result = await ctx.runBinCommand(['pkg-swarm-index', 'list'], { timeoutMs: 8000 })
        ctx.console.log(result || '(no output)')
        if (query) {
          ctx.console.log(`\n(Note: filtering by "${query}" not yet implemented in this integration.)`)
        }
        return
      } catch (e) {
        ctx.console.log('Could not run pkg-swarm-index directly. Falling back to guidance.')
      }
    }

    ctx.console.log('Use `pkg-swarm-index list` or `pkg-swarm-index get <key>` for P2P package discovery.')
    ctx.console.log('Future versions of `appstore search` will provide a curated App Store view over these indexes.')
    return
  }

  if (sub === 'install') {
    const filteredArgs = args.slice(1).filter(a => !a.startsWith('--'))
    const name = String(filteredArgs[0] || '').trim()
    const providedLink = filteredArgs[1] || ''
    const hasYes = args.some(a => a === '--yes' || a === '-y')

    if (!name) {
      ctx.console.error(`${argv0}: install requires a package name`)
      ctx.exitCode = 1
      return
    }

    if (!hasYes) {
      ctx.console.error(`${argv0}: confirmation required. Use --yes to proceed.`)
      ctx.exitCode = 1
      return
    }

    // Support manifest-style install: appstore install <name> pear://...
    const pearLink = providedLink.startsWith('pear://') ? providedLink : `pear://placeholder-${name}`

    const newPkg = {
      name,
      type: 'app',
      pearLink,
      channel: 'stable',
      version: '0.0.1',
      description: providedLink ? 'Installed from P2P link' : 'Installed via appstore',
      trustPins: [],
      installPolicy: 'default',
      installedAtMs: Date.now()
    }

    // Remove existing with same name
    reg.packages = reg.packages.filter(p => !p || p.name !== name)
    reg.packages.push(newPkg)
    reg.lastUpdatedMs = Date.now()

    const writeResult = await writeAppstoreRegistry(ctx, reg)

    if (writeResult && writeResult.ok) {
      const mat = await materializePackage(ctx, newPkg, writeResult.path)

      if (!mat || !mat.ok) {
        ctx.console.error(`${argv0}: install registry updated but fetch failed: ${mat?.error || 'unknown'}`)
        ctx.exitCode = 1
        return
      }

      ctx.console.log(`Successfully installed "${name}".`)
      ctx.console.log(`Registry: ${writeResult.path}`)
      ctx.console.log(`Materialized to: ${mat.packageDir}`)
      ctx.console.log(
        `  fetched: ${mat.fetch.fileCount} file(s) via ${mat.fetch.method} (${mat.fetch.mountRoot})`
      )
      ctx.console.log(`Run: appstore launch ${name}`)
    } else {
      ctx.console.error(`${argv0}: Failed to write registry.`)
      ctx.exitCode = 1
    }
    return
  }

  if (sub === 'uninstall' || sub === 'remove') {
    const name = String(args[1] || '').trim()
    if (!name) {
      ctx.console.error(`${argv0}: ${sub} requires a package name`)
      ctx.exitCode = 1
      return
    }

    const before = reg.packages.length
    reg.packages = reg.packages.filter(p => !p || p.name !== name)
    const after = reg.packages.length

    if (before === after) {
      ctx.console.log(`Package "${name}" not found in registry.`)
      return
    }

    reg.lastUpdatedMs = Date.now()
    const writeResult = await writeAppstoreRegistry(ctx, reg)

    if (writeResult && writeResult.ok) {
      ctx.console.log(`Successfully uninstalled "${name}".`)
    } else {
      ctx.console.error(`${argv0}: Failed to update registry after removal.`)
      ctx.exitCode = 1
    }
    return
  }

  if (sub === 'setup') {
    const label = reg.appstoreDriveLabel || 'appstore'
    ctx.console.log(`App Store Setup (HDMS recommended)

Current status:
  Drive label: ${label}
  Preferred mount: /mnt/${label}
  Registry search order: HDMS → personal (~/.appstore) → system example

To get the full experience:

1. Create or obtain a Hyperdrive to use as your App Store.
2. Mount it via HDMS with label "${label}":
   hdms mount <key> --label ${label} --writable

3. (Optional) Make it auto-mount on login by adding an entry to your personal
   HDMS registry (~/.bare/hdms/registry.json).

Example HDMS drive entry (see kernel/etc/bare-os/hdms-appstore.example.json):

{
  "label": "${label}",
  "key": "<your-appstore-hyperdrive-key>",
  "writable": true,
  "autoMount": true,
  "mountPoint": "/mnt/${label}"
}

Once mounted, 'appstore list/install' will prefer the real HDMS drive.

For now the command works with your personal ~/.appstore/ directory as a fallback.

See: docs/design/p2p-app-store.md for the full vision.`)
    return
  }

  if (sub === 'launch') {
    const name = String(args[1] || '').trim()

    if (!name) {
      ctx.console.error(`${argv0}: launch requires a package name`)
      ctx.exitCode = 1
      return
    }

    const pkg = reg.packages.find((p) => p && p.name === name)
    if (!pkg) {
      ctx.console.error(`${argv0}: package not found in registry: ${name}`)
      ctx.exitCode = 1
      return
    }

    const pearLink = pkg.pearLink || pkg.link
    if (!pearLink || !pearLink.startsWith('pear://')) {
      ctx.console.error(`${argv0}: package "${name}" does not have a valid pear:// link`)
      ctx.exitCode = 1
      return
    }

    const resolved = await resolveAppstoreRegistryPath(ctx)
    const pkgDir = appstorePackageDir(resolved.preferredPath, name)

    try {
      const result = await appstoreLaunchPackage(ctx, pkgDir, { pearLink })
      ctx.console.log(`Launched "${name}" (${result.entry})`)
    } catch (err) {
      ctx.console.error(`${argv0}: launch failed: ${err?.message || String(err)}`)
      ctx.exitCode = 1
    }
    return
  }

  if (sub === 'services') {
    const name = String(args[1] || '').trim()
    if (name) {
      const pkg = reg.packages.find((p) => p && p.name === name)
      if (pkg && pkg.service) {
        const unitName = `${pkg.name}.service`
        const unitContent = `[Unit]
Description=${pkg.description || pkg.name}
After=network.target

[Service]
Type=simple
ExecStart=/usr/bin/env node /mnt/appstore/packages/${pkg.name}/launch.js
Restart=on-failure

[Install]
WantedBy=multi-user.target
`
        const unitPath = `/etc/bare-os/initd/${unitName}`
        try {
          if (typeof ctx.vfs.mkdir === 'function') {
            await ctx.vfs.mkdir('/etc/bare-os/initd', { recursive: true }).catch(() => {})
          }
          await ctx.vfs.writeFile(unitPath, ctx.b4a.from(unitContent, 'utf8'))
          ctx.console.log(`Generated initd unit for ${name}: ${unitPath}`)
          ctx.console.log('Run "systemctl enable ' + unitName + '" to enable on boot.')
        } catch (e) {
          ctx.console.error(`Failed to write unit for ${name}: ${e.message || e}`)
        }
      } else {
        ctx.console.log(`${name} does not declare a service or is not installed.`)
      }
    } else {
      ctx.console.log('Scanning installed packages for services...')
      let count = 0
      for (const pkg of reg.packages) {
        if (pkg && pkg.service) {
          ctx.console.log(`- ${pkg.name}: ${pkg.service.description || 'service'}`)
          count++
        }
      }
      if (count === 0) ctx.console.log('No packages with declared services found.')
    }
    return
  }

  if (sub === 'update' || sub === 'refresh') {
    const name = String(args[1] || '').trim()
    const packagesToUpdate = name ? [name] : reg.packages.map(p => p.name)

    for (const pkgName of packagesToUpdate) {
      const pkg = reg.packages.find((p) => p && p.name === pkgName)
      if (!pkg) {
        ctx.console.error(`Package not found: ${pkgName}`)
        continue
      }
      ctx.console.log(`Refreshing ${pkgName}...`)
      try {
        const regPath =
          reg.usingHdms || reg._source === 'hdms'
            ? `/mnt/${reg.appstoreDriveLabel || 'appstore'}/registry.json`
            : `${(ctx.env.HOME || '/home/guest')}/.appstore/registry.json`
        const mat = await materializePackage(ctx, pkg, regPath)
        if (mat && mat.ok) {
          ctx.console.log(`  → Updated ${mat.packageDir} (${mat.fetch.fileCount} files)`)
        } else {
          ctx.console.error(`  → Refresh failed: ${mat?.error || 'unknown'}`)
        }
      } catch (e) {
        ctx.console.error(`  Failed to refresh ${pkgName}: ${e.message || e}`)
      }
    }
    return
  }

  ctx.console.error(`${argv0}: unknown subcommand '${sub}'`)
  ctx.exitCode = 1
}