/* BARE_OS_BIN_API 1.0.0 — bump when staged /bin script semantics change (see developer guide). */
/** Shared helpers for drive-resident /bin scripts (prepended before each command). */
function bareStdin(ctx) {
  return typeof ctx.shellStdin === 'string' ? ctx.shellStdin : ''
}

/** @param {number} mode @param {'file' | 'directory' | 'symlink'} type */
function bareFormatModeString(mode, type) {
  const typeChar = type === 'directory' ? 'd' : type === 'symlink' ? 'l' : '-'
  const perm = mode & 0o777
  const r = (bit) => (perm & bit ? 'r' : '-')
  const w = (bit) => (perm & bit ? 'w' : '-')
  const x = (bit) => (perm & bit ? 'x' : '-')
  return (
    typeChar +
    r(0o400) +
    w(0o200) +
    x(0o100) +
    r(0o040) +
    w(0o020) +
    x(0o010) +
    r(0o004) +
    w(0o002) +
    x(0o001)
  )
}

/** @param {number} mtimeMs @param {number} [nowMs] */
function bareFormatLsMtime(mtimeMs, nowMs) {
  const now = nowMs != null ? nowMs : Date.now()
  const d = new Date(mtimeMs)
  const months = [
    'Jan',
    'Feb',
    'Mar',
    'Apr',
    'May',
    'Jun',
    'Jul',
    'Aug',
    'Sep',
    'Oct',
    'Nov',
    'Dec'
  ]
  const mon = months[d.getMonth()]
  const day = String(d.getDate()).padStart(2, ' ')
  const sixMo = 180 * 24 * 3600 * 1000
  if (Math.abs(now - mtimeMs) > sixMo) {
    const yr = String(d.getFullYear()).padStart(4, ' ')
    return mon + ' ' + day + '  ' + yr
  }
  const hh = String(d.getHours()).padStart(2, '0')
  const mm = String(d.getMinutes()).padStart(2, '0')
  return mon + ' ' + day + ' ' + hh + ':' + mm
}

/** @param {number} size */
function barePosixBlocks(size) {
  return Math.ceil(Number(size) / 512) || 0
}

/**
 * Raw stdout for NUL/binary when **`process.stdout.write`** is missing.
 * If **`ctx.bareOsBinWrite(Uint8Array|string)`** is set (tests / host), use it.
 * @param {Record<string, unknown>} ctx
 * @param {string | Uint8Array} chunk
 * @returns {boolean}
 */
function bareOsEmitRaw(ctx, chunk) {
  if (typeof ctx.bareOsBinWrite === 'function') {
    const b4 = ctx.b4a
    const u8 =
      typeof chunk === 'string'
        ? b4 && typeof b4.from === 'function'
          ? b4.from(chunk)
          : new TextEncoder().encode(chunk)
        : chunk
    ctx.bareOsBinWrite(u8 instanceof Uint8Array ? u8 : new Uint8Array(u8))
    return true
  }
  const w = globalThis.process?.stdout?.write
  if (typeof w === 'function') {
    w.call(globalThis.process.stdout, chunk)
    return true
  }
  return false
}

function loginDecodeChunk(chunk) {
  if (typeof chunk === 'string') return chunk
  if (chunk instanceof Uint8Array) return new TextDecoder().decode(chunk)
  if (
    typeof Buffer !== 'undefined' &&
    typeof Buffer.isBuffer === 'function' &&
    Buffer.isBuffer(chunk)
  ) {
    return chunk.toString('utf8')
  }
  return String(chunk)
}

async function loginReadMaskedLine(ctx, prompt) {
  const stdin = ctx.stdin
  const stdout = ctx.stdout || globalThis.process?.stdout
  if (!stdin || !stdout || typeof stdin.on !== 'function' || typeof stdout.write !== 'function') {
    if (typeof ctx.readLine === 'function') return String((await ctx.readLine(prompt)) || '')
    return ''
  }
  stdout.write(prompt)
  const ttyIn = stdin
  if (!ttyIn.isTTY || typeof ttyIn.setRawMode !== 'function') {
    return await new Promise((resolve) => {
      let acc = ''
      function onData(chunk) {
        const s = loginDecodeChunk(chunk)
        acc += s
        const nl = acc.indexOf('\n')
        if (nl >= 0) {
          cleanup()
          resolve(acc.slice(0, nl).replace(/\r$/, ''))
        }
      }
      function onEnd() {
        cleanup()
        resolve(acc.replace(/\r$/, ''))
      }
      function cleanup() {
        stdin.removeListener('data', onData)
        stdin.removeListener('end', onEnd)
        stdin.removeListener('error', onEnd)
      }
      stdin.on('data', onData)
      stdin.once('end', onEnd)
      stdin.once('error', onEnd)
      if (typeof stdin.resume === 'function') stdin.resume()
    })
  }
  return await new Promise((resolve, reject) => {
    const chars = []
    let done = false
    function finish(ok, err) {
      if (done) return
      done = true
      cleanup()
      stdout.write('\n')
      if (ok) resolve(chars.join(''))
      else reject(err || new Error('masked_input_failed'))
    }
    function cleanup() {
      stdin.removeListener('data', onData)
      stdin.removeListener('end', onEnd)
      stdin.removeListener('error', onErr)
      try {
        ttyIn.setRawMode(false)
      } catch {
        /* ignore */
      }
    }
    function onEnd() {
      finish(true)
    }
    function onErr(e) {
      finish(false, e instanceof Error ? e : new Error(String(e)))
    }
    function onData(chunk) {
      if (done) return
      const s = loginDecodeChunk(chunk)
      for (const ch of s) {
        const code = ch.charCodeAt(0)
        if (ch === '\r' || ch === '\n') {
          finish(true)
          return
        }
        if (ch === '\u0003') {
          finish(false, new Error('interrupted'))
          return
        }
        if (ch === '\u007f' || ch === '\b') {
          if (chars.length) {
            chars.pop()
            stdout.write('\b \b')
          }
          continue
        }
        if (code >= 32 && code !== 127) {
          chars.push(ch)
          stdout.write('*')
        }
      }
    }
    try {
      ttyIn.setRawMode(true)
    } catch {
      finish(true)
      return
    }
    stdin.on('data', onData)
    stdin.once('end', onEnd)
    stdin.once('error', onErr)
    if (typeof stdin.resume === 'function') stdin.resume()
  })
}

async function run(ctx, argv) {
  const rest = argv.slice(1)
  let createNew = false
  if (rest[0] === '--new') {
    createNew = true
    rest.shift()
  }
  const passphrase = rest.length
    ? rest.join(' ')
    : await loginReadMaskedLine(ctx, createNew ? 'New passphrase: ' : 'Passphrase: ')
  if (!passphrase) {
    ctx.console.error('usage: login [--new] [passphrase]')
    return
  }
  const reg = ctx.applyRegister
  const unlock = ctx.applyUnlock
  if (typeof reg !== 'function' || typeof unlock !== 'function') {
    ctx.console.error('login: not supported in this environment')
    return
  }
  try {
    if (createNew) await reg.call(ctx, passphrase)
    else await unlock.call(ctx, passphrase)
  } catch (err) {
    ctx.console.error(err?.message ?? String(err))
  }
}