all-smi 0.26.2

// Copyright 2025 Lablup Inc. and Jeongkyu Shin
//
// Licensed under the Apache License, Version 2.0 (the "License");
// you may not use this file except in compliance with the License.
// You may obtain a copy of the License at
//
//     http://www.apache.org/licenses/LICENSE-2.0
//
// Unless required by applicable law or agreed to in writing, software
// distributed under the License is distributed on an "AS IS" BASIS,
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
// See the License for the specific language governing permissions and
// limitations under the License.

mod api;
mod app_state;
mod cli;
mod cli_config;
mod cli_service;
mod common;
mod config_cmd;
mod device;
mod doctor;
mod service_cmd;
#[macro_use]
mod parsing;
mod metrics;
mod network;
mod record;
mod snapshot;
mod storage;
mod ui;
mod utils;
mod view;

use api::run_api_mode;
use clap::FromArgMatches;
use cli::{Cli, Commands, LocalArgs};
use common::config_file::{self, Settings};
// Only read inside the `#[cfg(unix)]` block that resolves the socket
// setting, so importing it unconditionally leaves it unused on Windows.
#[cfg(unix)]
use common::config_file::SocketSetting;
use tokio::signal;
use utils::{RuntimeEnvironment, ensure_sudo_permissions_for_api};

// Sudo permission functions only needed on non-macOS platforms
#[cfg(not(target_os = "macos"))]
use utils::{ensure_sudo_permissions, ensure_sudo_permissions_with_fallback};

#[cfg(target_os = "macos")]
use device::is_apple_silicon;

// Use native macOS APIs (no sudo required)
#[cfg(target_os = "macos")]
use device::macos_native::{initialize_native_metrics_manager, shutdown_native_metrics_manager};

#[cfg(target_os = "linux")]
use device::hlsmi::{initialize_hlsmi_manager, shutdown_hlsmi_manager};
#[cfg(target_os = "linux")]
use device::platform_detection::has_gaudi;

#[cfg(any(target_os = "macos", target_os = "linux"))]
use std::sync::atomic::AtomicBool;

#[cfg(target_os = "macos")]
static NATIVE_METRICS_INITIALIZED: AtomicBool = AtomicBool::new(false);

#[cfg(target_os = "linux")]
static HLSMI_INITIALIZED: AtomicBool = AtomicBool::new(false);

fn main() {
    // Set up panic handler for cleanup (cross-platform)
    setup_panic_handlers();

    // Level Zero Sysman can be initialised with `zesInit` on modern
    // runtimes, but older Intel loaders still require
    // ZES_ENABLE_SYSMAN=1 before the first `zeInit`. Do that while the
    // process is still single-threaded so Rust 2024's environment
    // mutation safety contract is upheld.
    //
    // `all_smi_level_zero` rather than `feature = "level_zero"`: the
    // backend is compiled into every Linux and Windows build regardless of
    // the feature, and this is the only point at which the process is
    // still single-threaded. See `build.rs`.
    #[cfg(all_smi_level_zero)]
    unsafe {
        // SAFETY: `main` has not created the Tokio runtime or spawned
        // signal-handler/background threads yet, and this runs before
        // any Level Zero loader call.
        device::readers::intel_gpu_level_zero::prepare_sysman_env_for_legacy_runtime();
    }

    // Best-effort one-time migration of legacy `~/.cache/all-smi/...`
    // data to the platform-correct cache dir (issue #229). Runs before
    // any subcommand touches the cache so the new root is the one each
    // consumer sees. Linux without `$XDG_CACHE_HOME` is a no-op (old ==
    // new); macOS, Windows, and Linux with `$XDG_CACHE_HOME` set will
    // see one-time relocation messages on stderr.
    common::cache_migration::migrate_legacy_cache_paths();

    // Build the top-level command with the runtime-composed help
    // blocks injected (issue #213). The "Configuration file" block has
    // to resolve `$HOME` / `$XDG_CONFIG_HOME` / `%APPDATA%` at process
    // start, which a static `#[command(after_help = ...)]` cannot do.
    let matches = cli::build_command_with_runtime_help().get_matches();
    let cli = match Cli::from_arg_matches(&matches) {
        Ok(c) => c,
        Err(e) => {
            e.exit();
        }
    };

    // Handle the `config` subcommand synchronously — it never starts a
    // Tokio runtime and its I/O is purely local filesystem work.
    if let Some(Commands::Config(ref cfg_args)) = cli.command {
        let code = config_cmd::run(cli.config.as_deref(), &cfg_args.action);
        std::process::exit(code);
    }

    // `service` is likewise synchronous: it writes a service definition
    // and shells out to the platform supervisor. It must run before the
    // config load below, because installing a service on a host whose
    // config file is malformed is exactly when an operator needs the
    // subcommand to work. (Issue #309.)
    if let Some(Commands::Service(ref svc_args)) = cli.command {
        let code = service_cmd::run(&svc_args.action);
        std::process::exit(code);
    }

    // Load the merged TOML + env settings now so every downstream mode
    // entry point can consume them. A malformed or missing explicit
    // `--config` file is a hard error and short-circuits startup.
    let settings = match config_file::load(cli.config.as_deref()) {
        Ok(outcome) => {
            for w in &outcome.warnings {
                eprintln!("warning: {w}");
            }
            // Surface unknown-key warnings at boot so operators learn
            // about typos (`[alarts]` instead of `[alerts]`) without
            // having to run `config print` separately. The keys are
            // already escape-sanitised at parse time, so printing them
            // cannot inject control sequences into the terminal.
            for k in &outcome.settings.unknown_keys {
                eprintln!("warning: unknown config key `{k}` (forward-compat — preserved)");
            }
            outcome.settings
        }
        Err(e) => {
            eprintln!("error: {e}");
            // `2` matches `config validate` semantics for consistency
            // with the issue spec: malformed config is an actionable
            // user error, not a crash.
            std::process::exit(2);
        }
    };

    // The snapshot subcommand is one-shot, scriptable, and may call into
    // potentially-hung hardware readers via `spawn_blocking`. Because
    // `spawn_blocking` cannot cancel the underlying OS thread on a
    // `tokio::time::timeout` firing, a hung NVML/TPU driver call would
    // permanently leak a Tokio blocking-pool worker if we reused the
    // long-running default runtime. We therefore build a dedicated
    // runtime with a conservative `max_blocking_threads(32)` specifically
    // for the snapshot invocation — the runtime drops when the function
    // returns and any still-running blocking threads exit with the
    // process. This bounds the per-invocation leak to at most 32
    // threads.
    if let Some(Commands::Snapshot(_)) = &cli.command {
        let runtime = match tokio::runtime::Builder::new_multi_thread()
            .enable_all()
            .worker_threads(4)
            .max_blocking_threads(32)
            .build()
        {
            Ok(rt) => rt,
            Err(e) => {
                eprintln!("error: failed to build snapshot tokio runtime: {e}");
                std::process::exit(1);
            }
        };
        runtime.block_on(async move {
            run_command(cli, settings).await;
        });
        return;
    }

    // Default runtime for `api`, `local`, `view`, and no-subcommand paths.
    let runtime = match tokio::runtime::Builder::new_multi_thread()
        .enable_all()
        .worker_threads(4)
        .build()
    {
        Ok(rt) => rt,
        Err(e) => {
            eprintln!("error: failed to build tokio runtime: {e}");
            std::process::exit(1);
        }
    };
    runtime.block_on(async move {
        run_command(cli, settings).await;
    });
}

async fn run_command(cli: Cli, settings: Settings) {
    // Signal-handling policy by subcommand:
    //
    // * `Record` installs its own SIGINT/SIGTERM handlers (see
    //   `record::install_signal_handlers`) that set a cooperative stop
    //   flag. The record loop polls that flag, finishes the in-flight
    //   frame, and calls `RotatingWriter::finish()` to flush the zstd /
    //   gzip trailer before returning. The unconditional
    //   `std::process::exit(0)` handlers below would race with that
    //   shutdown path and truncate the output file to zero bytes
    //   (issue #187 acceptance: "SIGTERM during recording closes
    //   cleanly with a complete final JSON line"). Skip them for
    //   `Record` so the cooperative path wins.
    //
    // * `Api` owns its shutdown for the same reason. `run_api_mode`
    //   waits for axum's graceful shutdown, then performs the final
    //   energy-WAL flush and fsync and removes the Unix socket file.
    //   The unconditional exit below won that race, so every SIGTERM
    //   dropped the last batch of accumulated Joules and left a stale
    //   socket behind. That is not an edge case for a service: SIGTERM
    //   is exactly how `launchctl bootout` and `systemctl stop` end it,
    //   so it happened on every restart (issues #191, #309, #310).
    //
    // * Every other subcommand keeps the original behaviour — no device
    //   manager does partial-state flushing, so an immediate exit on
    //   signal is the desired shutdown semantics.
    let owns_shutdown = match &cli.command {
        Some(Commands::Record(_) | Commands::Api(_)) => true,
        // `None` redispatches through `[general].default_mode` further
        // down, and the recursive call cannot uninstall a handler this
        // call already spawned. Resolve the effective mode here.
        None => settings.general.default_mode == "api",
        _ => false,
    };
    if !owns_shutdown {
        // Set up signal handler for clean shutdown
        tokio::spawn(async {
            signal::ctrl_c().await.expect("Failed to listen for Ctrl+C");
            // Restore terminal state before exit so the parent shell is usable
            // (issue #235). No-op when no TUI was running.
            view::terminal_manager::restore_terminal();
            #[cfg(target_os = "macos")]
            {
                // Cleanup native metrics manager on signal
                shutdown_native_metrics_manager();
            }
            #[cfg(target_os = "linux")]
            {
                // Always cleanup hlsmi on signal
                shutdown_hlsmi_manager();
            }
            std::process::exit(0);
        });

        // Also handle SIGTERM on Unix systems
        #[cfg(unix)]
        tokio::spawn(async {
            let mut sigterm = signal::unix::signal(signal::unix::SignalKind::terminate())
                .expect("Failed to listen for SIGTERM");
            sigterm.recv().await;
            // Restore terminal state before exit so the parent shell is usable
            // (issue #235). No-op when no TUI was running.
            view::terminal_manager::restore_terminal();
            #[cfg(target_os = "macos")]
            {
                // Cleanup native metrics manager on signal
                shutdown_native_metrics_manager();
            }
            #[cfg(target_os = "linux")]
            {
                // Always cleanup hlsmi on signal
                shutdown_hlsmi_manager();
            }
            std::process::exit(0);
        });
    }

    match cli.command {
        Some(Commands::Config(_)) => {
            // Already handled synchronously in `main` before the runtime
            // was built. This branch is unreachable in practice; keep it
            // so the match is exhaustive.
            unreachable!("config subcommand is dispatched before runtime");
        }
        Some(Commands::Service(_)) => {
            // Same as `config`: dispatched synchronously in `main`.
            unreachable!("service subcommand is dispatched before runtime");
        }
        Some(Commands::Api(mut args)) => {
            // When using native macOS APIs, no sudo is needed
            #[cfg(target_os = "macos")]
            let _ = ensure_sudo_permissions_for_api(); // Just for any other checks

            #[cfg(not(target_os = "macos"))]
            let _has_sudo = ensure_sudo_permissions_for_api();

            // Resolve every CLI field via the precedence chain (CLI >
            // env > file > default). Fields that were `None` on the CLI
            // take their value from the merged `Settings`.
            if args.port.is_none() {
                args.port = Some(settings.api.port);
            }
            if args.interval.is_none() {
                args.interval = Some(settings.api.interval_secs);
            }
            // `Option<bool>` encodes three states: explicit true /
            // explicit false / not provided. Only fall back to the
            // merged settings when the CLI left it as `None`; once
            // resolved, downstream consumers always see a bare `bool`.
            if args.processes.is_none() {
                args.processes = Some(settings.api.processes);
            }
            #[cfg(unix)]
            {
                if args.socket.is_none() {
                    args.socket = match &settings.api.socket {
                        SocketSetting::Unset | SocketSetting::Bool(false) => None,
                        SocketSetting::Bool(true) => Some(String::new()),
                        SocketSetting::Path(p) => Some(p.clone()),
                    };
                }
            }

            // Consumed only by the macOS and Linux initialisers below, both
            // cfg-gated, so on Windows this binding had no reader. Gating the
            // binding rather than allowing the warning means a future consumer
            // on another target fails to compile instead of silently
            // reintroducing the dead binding.
            #[cfg(any(target_os = "macos", target_os = "linux"))]
            let interval = args.interval.unwrap_or(3);

            // Initialize native metrics manager (no sudo required)
            #[cfg(target_os = "macos")]
            if is_apple_silicon() {
                if let Err(e) = initialize_native_metrics_manager(interval * 1000) {
                    eprintln!("Warning: Failed to initialize native metrics manager: {e}");
                } else {
                    use std::sync::atomic::Ordering;
                    NATIVE_METRICS_INITIALIZED.store(true, Ordering::Relaxed);
                }
            }

            // Initialize hlsmi manager for Intel Gaudi on Linux
            #[cfg(target_os = "linux")]
            if has_gaudi() {
                match initialize_hlsmi_manager(interval) {
                    Err(e) => {
                        eprintln!("Warning: Failed to initialize hlsmi manager: {e}");
                    }
                    _ => {
                        use std::sync::atomic::Ordering;
                        HLSMI_INITIALIZED.store(true, Ordering::Relaxed);
                    }
                }
            }

            run_api_mode(&args, &settings).await;

            // Reached once the graceful shutdown above has finished, so
            // the collectors are torn down in the same deterministic
            // order `view` uses. Previously the signal handler exited
            // the process before this point could be reached at all.
            #[cfg(target_os = "macos")]
            {
                shutdown_native_metrics_manager();
            }
            #[cfg(target_os = "linux")]
            {
                shutdown_hlsmi_manager();
            }
        }
        Some(Commands::Local(mut args)) => {
            // On non-macOS platforms, require sudo
            #[cfg(not(target_os = "macos"))]
            ensure_sudo_permissions();

            // Precedence: CLI > settings (env > file) > default.
            if args.interval.is_none() {
                args.interval = settings.local.interval_secs;
            }

            // Initialize native metrics manager (no sudo required)
            #[cfg(target_os = "macos")]
            if is_apple_silicon() {
                let interval = args
                    .interval
                    .unwrap_or_else(common::config::EnvConfig::local_interval);
                if let Err(e) = initialize_native_metrics_manager(interval * 1000) {
                    eprintln!("Warning: Failed to initialize native metrics manager: {e}");
                } else {
                    use std::sync::atomic::Ordering;
                    NATIVE_METRICS_INITIALIZED.store(true, Ordering::Relaxed);
                }
            }

            // Initialize hlsmi manager for Intel Gaudi on Linux
            #[cfg(target_os = "linux")]
            if has_gaudi() {
                let interval = args
                    .interval
                    .unwrap_or_else(common::config::EnvConfig::local_interval);
                std::thread::spawn(move || match initialize_hlsmi_manager(interval) {
                    Err(e) => {
                        eprintln!("Warning: Failed to initialize hlsmi manager: {e}");
                    }
                    _ => {
                        use std::sync::atomic::Ordering;
                        HLSMI_INITIALIZED.store(true, Ordering::Relaxed);
                    }
                });
            }

            view::run_local_mode(&args, &settings).await;
        }
        Some(Commands::Snapshot(args)) => {
            // Snapshot mode is one-shot and scriptable: DO NOT request sudo,
            // do not initialize long-lived managers (macOS native / hlsmi).
            // Readers that require sudo or specialised managers will gracefully
            // degrade — their failures surface as `errors` entries rather than
            // aborting the snapshot, per the issue spec.
            //
            // Merge `[snapshot]` config defaults on top of the CLI args
            // so `default_format` / `default_pretty` from `config.toml`
            // take effect when the operator does not pass `--format` /
            // `--pretty` explicitly.
            let options = match snapshot::SnapshotOptions::from_args_with_settings(
                &args,
                Some(&settings.snapshot),
            ) {
                Ok(o) => o,
                Err(e) => {
                    eprintln!("error: {e}");
                    std::process::exit(2);
                }
            };
            match snapshot::run(options).await {
                Ok(()) => std::process::exit(0),
                Err(e) => {
                    if e.downcast_ref::<snapshot::SnapshotHardFailure>().is_some() {
                        eprintln!("error: {e}");
                        std::process::exit(1);
                    }
                    eprintln!("error: {e:#}");
                    std::process::exit(1);
                }
            }
        }
        Some(Commands::Doctor(args)) => {
            // Doctor is a read-only diagnostic subcommand: no sudo, no
            // long-lived manager init. Every check is bounded by a hard
            // 3-second timeout enforced in the orchestrator.
            match doctor::run_cli(&args).await {
                Ok(code) => std::process::exit(code),
                Err(e) => {
                    eprintln!("error: {e:#}");
                    std::process::exit(1);
                }
            }
        }
        Some(Commands::Record(args)) => {
            // Record mode shares the snapshot collector stack, so like
            // `snapshot` it runs without sudo and without initializing the
            // macOS native metrics manager — hardware readers that need
            // those privileges degrade gracefully into the error list.
            //
            // Merge `[record]` config defaults on top of CLI args so
            // `output_dir` / `compress` from `config.toml` take effect
            // when the operator does not pass `-o` / `--compress`.
            let opts = match record::RecorderOptions::from_args_with_settings(
                &args,
                Some(&settings.record),
            ) {
                Ok(o) => o,
                Err(e) => {
                    eprintln!("error: {e}");
                    std::process::exit(2);
                }
            };
            match record::run(opts).await {
                Ok(()) => std::process::exit(0),
                Err(e) => {
                    eprintln!("error: {e:#}");
                    std::process::exit(1);
                }
            }
        }
        Some(Commands::View(mut args)) => {
            // Precedence: CLI > settings (env > file) > default.
            // `hosts`/`hostfile` fill from config only when CLI omitted
            // them; the Backend.AI detection later relies on this
            // ordering too.
            if args.hosts.is_none() && !settings.view.hosts.is_empty() {
                args.hosts = Some(settings.view.hosts.clone());
            }
            if args.hostfile.is_none() {
                args.hostfile = settings.view.hostfile.clone();
            }
            if args.interval.is_none() {
                args.interval = settings.view.interval_secs;
            }

            // SSH-transport config-file overrides (issue #194). CLI
            // flags always win; the config file fills in unset values.
            if args.ssh.is_none() && !settings.view.ssh.is_empty() {
                args.ssh = Some(settings.view.ssh.join(","));
            }
            if args.ssh_hostfile.is_none() {
                args.ssh_hostfile = settings
                    .view
                    .ssh_hostfile
                    .as_ref()
                    .map(std::path::PathBuf::from);
            }
            if args.ssh_key.is_none() {
                args.ssh_key = settings.view.ssh_key.as_ref().map(std::path::PathBuf::from);
            }
            if args.ssh_config.is_none() {
                args.ssh_config = settings
                    .view
                    .ssh_config
                    .as_ref()
                    .map(std::path::PathBuf::from);
            }
            if args.ssh_known_hosts.is_none() {
                args.ssh_known_hosts = settings
                    .view
                    .ssh_known_hosts
                    .as_ref()
                    .map(std::path::PathBuf::from);
            }
            // `ssh_strict_host_key` carries a clap default of "yes".
            // Override only when the config file explicitly set it AND
            // the CLI value is still the compiled default.
            if args.ssh_strict_host_key == "yes"
                && let Some(v) = settings.view.ssh_strict_host_key.as_ref()
            {
                args.ssh_strict_host_key = v.clone();
            }
            // `ssh_timeout_secs` defaults to 10 from clap; apply config
            // only when operator did not change it on the CLI.
            if args.ssh_timeout_secs == 10
                && let Some(v) = settings.view.ssh_timeout_secs
            {
                args.ssh_timeout_secs = v;
            }
            if args.ssh_fallback.is_none() {
                args.ssh_fallback = settings.view.ssh_fallback.clone();
            }
            if args.ssh_concurrency == 32
                && let Some(v) = settings.view.ssh_concurrency
            {
                args.ssh_concurrency = v;
            }

            // Replay mode bypasses the remote scrape path entirely — it
            // reads frames from disk and pushes them into the same
            // AppState the live view renders. Hardware, sudo, and host
            // discovery are all irrelevant in this branch.
            if args.replay.is_some() {
                view::run_replay_mode(&args, &settings).await;
                return;
            }

            // SSH mode (issue #194): if any --ssh* flag is set we
            // dispatch to the agentless transport instead of the HTTP
            // remote scraper. --ssh and --ssh-hostfile are merged
            // inside run_ssh_mode.
            if args.ssh.is_some() || args.ssh_hostfile.is_some() {
                view::run_ssh_mode(&args, &settings).await;
                return;
            }

            // Remote mode - no sudo required

            // Check if we're in Backend.AI environment and no hosts/hostfile provided
            if args.hosts.is_none() && args.hostfile.is_none() {
                let runtime_env = RuntimeEnvironment::detect();

                if let Some(backend_ai_hosts) = runtime_env.get_backend_ai_hosts() {
                    eprintln!("Detected Backend.AI environment");
                    eprintln!("Auto-discovered cluster hosts from BACKENDAI_CLUSTER_HOSTS:");
                    for host in &backend_ai_hosts {
                        eprintln!("  - {host}");
                    }
                    args.hosts = Some(backend_ai_hosts);
                } else {
                    eprintln!("Error: Remote view mode requires --hosts or --hostfile");
                    eprintln!(
                        "Usage: all-smi view --hosts <URL>... or all-smi view --hostfile <FILE>"
                    );
                    if runtime_env.is_backend_ai() {
                        eprintln!(
                            "\nBackend.AI environment detected but BACKENDAI_CLUSTER_HOSTS is not set."
                        );
                        eprintln!("Set the environment variable with comma-separated host names:");
                        eprintln!("  export BACKENDAI_CLUSTER_HOSTS=\"host1,host2\"");
                    }
                    eprintln!("\nFor local monitoring, use: all-smi local");
                    std::process::exit(1);
                }
            }
            view::run_view_mode(&args, &settings).await;

            // Cleanup after view mode exits
            #[cfg(target_os = "macos")]
            {
                // Cleanup native metrics manager
                shutdown_native_metrics_manager();
            }
            #[cfg(target_os = "linux")]
            {
                // Always try to shutdown hlsmi, even if not fully initialized
                shutdown_hlsmi_manager();
            }
        }
        None => {
            // Honour `[general].default_mode` from the config file:
            // when set to "view" or "api", redispatch through the
            // matching branch instead of defaulting to local. This
            // wires the documented-but-previously-orphaned option so
            // operators can declare their preferred entry point once
            // in `config.toml` and stop typing the subcommand.
            match settings.general.default_mode.as_str() {
                "view" => {
                    let view_args = cli::ViewArgs::empty();
                    // Re-enter the View arm with synthetic args. A
                    // cleaner factoring is a shared helper, but the
                    // existing handler is only reachable through this
                    // match; splitting it out is a larger change than
                    // this PR wants.
                    return Box::pin(run_command(
                        Cli {
                            config: cli.config,
                            command: Some(Commands::View(view_args)),
                        },
                        settings,
                    ))
                    .await;
                }
                "api" => {
                    let api_args = cli::ApiArgs {
                        port: None,
                        interval: None,
                        processes: None,
                        #[cfg(unix)]
                        socket: None,
                    };
                    return Box::pin(run_command(
                        Cli {
                            config: cli.config,
                            command: Some(Commands::Api(api_args)),
                        },
                        settings,
                    ))
                    .await;
                }
                _ => {
                    // "local" — fall through to the original local
                    // default behaviour below.
                }
            }

            // Default to local mode when no command is specified
            // On macOS, no sudo is needed
            #[cfg(target_os = "macos")]
            let has_sudo = true; // Always proceed, no sudo needed

            #[cfg(not(target_os = "macos"))]
            let has_sudo = ensure_sudo_permissions_with_fallback();

            if has_sudo {
                // Initialize native metrics manager (no sudo required)
                #[cfg(target_os = "macos")]
                if is_apple_silicon() {
                    if let Err(e) = initialize_native_metrics_manager(2000) {
                        eprintln!("Warning: Failed to initialize native metrics manager: {e}");
                    } else {
                        use std::sync::atomic::Ordering;
                        NATIVE_METRICS_INITIALIZED.store(true, Ordering::Relaxed);
                    }
                }

                // Initialize hlsmi manager for Intel Gaudi on Linux
                #[cfg(target_os = "linux")]
                if has_gaudi() {
                    std::thread::spawn(|| match initialize_hlsmi_manager(2) {
                        Err(e) => {
                            eprintln!("Warning: Failed to initialize hlsmi manager: {e}");
                        }
                        _ => {
                            use std::sync::atomic::Ordering;
                            HLSMI_INITIALIZED.store(true, Ordering::Relaxed);
                        }
                    });
                }

                let local_args = LocalArgs {
                    interval: settings.local.interval_secs,
                    alert_temp: None,
                    alert_util_low_mins: None,
                };
                view::run_local_mode(&local_args, &settings).await;

                // Cleanup after local mode exits
                #[cfg(target_os = "macos")]
                {
                    // Cleanup native metrics manager
                    shutdown_native_metrics_manager();
                }
                #[cfg(target_os = "linux")]
                {
                    // Always try to shutdown hlsmi, even if not fully initialized
                    shutdown_hlsmi_manager();
                }
            }
            // If user declined sudo and chose remote monitoring,
            // they were given instructions and the function exits
        }
    }

    // Final cleanup - ensure all managers are terminated
    #[cfg(target_os = "macos")]
    {
        shutdown_native_metrics_manager();
    }
    #[cfg(target_os = "linux")]
    {
        shutdown_hlsmi_manager();
    }
}

// Set up a panic handler to ensure cleanup.
// Cross-platform: the macOS native-metrics shutdown is gated behind
// `#[cfg(target_os = "macos")]`. The terminal-restoration hook is installed
// separately inside `TerminalManager::new()` via `PANIC_HOOK_INSTALLED` —
// it layers on top of whatever hook this function installs, so the terminal
// is always restored before this hook's body runs.
fn setup_panic_handlers() {
    let default_panic = std::panic::take_hook();
    std::panic::set_hook(Box::new(move |panic_info| {
        // Cleanup native metrics manager before panicking (macOS only)
        #[cfg(target_os = "macos")]
        device::macos_native::shutdown_native_metrics_manager();
        default_panic(panic_info);
    }));
}