bitrouter 0.27.3

#![recursion_limit = "256"]

#[cfg(not(any(feature = "tempo", feature = "solana")))]
compile_error!(
    "bitrouter requires at least one payment chain feature: enable `tempo` and/or `solana`"
);

mod auth;
#[cfg(feature = "cli")]
mod cli;
#[cfg(feature = "cli")]
mod init;
mod runtime;

use std::path::PathBuf;
use std::sync::Arc;

use crate::runtime::{AppRuntime, PathOverrides, RuntimePaths, resolve_home};
use clap::{Parser, Subcommand};

type DefaultRuntime = AppRuntime<
    bitrouter_core::routers::dynamic::DynamicRoutingTable<bitrouter_config::ConfigRoutingTable>,
>;

#[derive(Debug, Parser)]
#[command(name = "bitrouter", version, about = "BitRouter CLI")]
struct Cli {
    /// BitRouter home directory (overrides automatic resolution)
    #[arg(long, global = true)]
    home_dir: Option<PathBuf>,

    /// Path to config file (overrides <home>/bitrouter.yaml)
    #[arg(long, global = true)]
    config_file: Option<PathBuf>,

    /// Path to .env file (overrides <home>/.env)
    #[arg(long, global = true)]
    env_file: Option<PathBuf>,

    /// Path to runtime directory (overrides <home>/run)
    #[arg(long, global = true)]
    run_dir: Option<PathBuf>,

    /// Path to logs directory (overrides <home>/logs)
    #[arg(long, global = true)]
    logs_dir: Option<PathBuf>,

    /// Database connection URL (overrides env vars and config file)
    #[arg(long = "db", global = true)]
    database_url: Option<String>,

    /// Skip TUI auto-launch after setup
    #[arg(long, global = true)]
    no_tui: bool,

    #[command(subcommand)]
    command: Option<Command>,
}

#[derive(Debug, Subcommand)]
enum Command {
    /// Start the API server (foreground)
    Serve,
    /// Start as background daemon
    #[cfg(feature = "cli")]
    Start,
    /// Stop the daemon
    #[cfg(feature = "cli")]
    Stop,
    /// Show runtime status
    #[cfg(feature = "cli")]
    Status,
    /// Restart the daemon
    #[cfg(feature = "cli")]
    Restart,
    /// Hot-reload the configuration file
    #[cfg(feature = "cli")]
    Reload,

    /// Manage runtime routes (requires a running daemon)
    #[cfg(feature = "cli")]
    Route {
        #[command(subcommand)]
        action: RouteAction,
    },

    /// Manage OWS wallets
    #[cfg(feature = "cli")]
    Wallet {
        #[command(subcommand)]
        action: WalletAction,
    },

    /// Manage OWS API keys for agent access
    #[cfg(feature = "cli")]
    Key {
        #[command(subcommand)]
        action: KeyAction,
    },

    /// Inspect MCP tools on a running daemon
    #[cfg(feature = "cli")]
    Tools {
        #[command(subcommand)]
        action: ToolsAction,
    },

    /// List routable models
    #[cfg(feature = "cli")]
    Models {
        #[command(subcommand)]
        action: ModelsAction,
    },

    /// List available ACP agents
    #[cfg(feature = "cli")]
    Agents {
        #[command(subcommand)]
        action: AgentsAction,
    },

    /// Manage configured LLM providers
    #[cfg(feature = "cli")]
    Providers {
        #[command(subcommand)]
        action: ProvidersAction,
    },

    /// Run as ACP stdio proxy for a configured agent
    #[cfg(feature = "cli")]
    #[command(name = "agent-proxy")]
    AgentProxy {
        /// Agent name to proxy (must be configured and enabled)
        agent_name: String,

        /// Pre-authenticated JWT token (skips ACP authenticate step)
        #[arg(long)]
        token: Option<String>,
    },

    /// Manage spend-limit policies for OWS wallet signing
    #[cfg(feature = "cli")]
    Policy {
        #[command(subcommand)]
        action: PolicyAction,
    },

    /// Manage provider authentication
    #[cfg(feature = "cli")]
    Auth {
        #[command(subcommand)]
        action: AuthAction,
    },

    /// Sign in to BitRouter Cloud and persist a `brk_*` API key
    Login {
        /// Cloud base URL (overrides `BITROUTER_CLOUD_URL`)
        #[arg(long)]
        url: Option<String>,
    },

    /// Remove stored BitRouter Cloud credentials
    Logout,

    /// Show the currently stored BitRouter Cloud identity
    Whoami,

    /// Reset configuration and re-run setup
    #[cfg(feature = "cli")]
    Reset,
}

#[cfg(feature = "cli")]
#[derive(Debug, Subcommand)]
enum RouteAction {
    /// List all routes (config-defined + dynamic)
    List,
    /// Add or update a dynamic route
    Add {
        /// Virtual model name (e.g., "research", "fast")
        model: String,

        /// Endpoints in "provider:service_id" format (at least one required)
        #[arg(required = true, num_args = 1..)]
        endpoints: Vec<String>,

        /// Routing strategy: "priority" or "load_balance"
        #[arg(long, default_value = "priority")]
        strategy: String,
    },
    /// Remove a dynamic route
    Rm {
        /// Model name to remove
        model: String,
    },
}

#[derive(Debug, Subcommand)]
enum ToolsAction {
    /// List all tools from the running daemon
    List,
    /// Show upstream MCP server health
    Status,
    /// Discover tools from an MCP upstream and output config YAML
    Discover {
        /// Provider name (must exist in config with api_protocol: mcp)
        provider: String,
    },
}

#[derive(Debug, Subcommand)]
enum WalletAction {
    /// Create a new wallet with a fresh BIP-39 mnemonic
    Create {
        /// Wallet name
        #[arg(long)]
        name: String,

        /// Mnemonic word count (12 or 24)
        #[arg(long, default_value = "12")]
        words: u32,

        /// Display the mnemonic phrase after creation
        #[arg(long)]
        show_mnemonic: bool,
    },
    /// Import a wallet from a mnemonic phrase
    Import {
        /// Wallet name
        #[arg(long)]
        name: String,

        /// Import from mnemonic phrase (prompted interactively)
        #[arg(long)]
        mnemonic: bool,

        /// Import from a hex private key (prompted interactively)
        #[arg(long)]
        private_key: bool,

        /// Chain hint for private-key import (e.g. "evm", "solana")
        #[arg(long)]
        chain: Option<String>,

        /// HD derivation index (mnemonic import only)
        #[arg(long)]
        index: Option<u32>,
    },
    /// List all wallets
    List,
    /// Show detailed wallet info
    Info {
        /// Wallet name or ID
        #[arg(long)]
        wallet: String,
    },
    /// Export a wallet's mnemonic phrase
    Export {
        /// Wallet name or ID
        #[arg(long)]
        wallet: String,
    },
    /// Delete a wallet
    Delete {
        /// Wallet name or ID
        #[arg(long)]
        wallet: String,
    },
    /// Rename a wallet
    Rename {
        /// Current wallet name or ID
        #[arg(long)]
        wallet: String,

        /// New wallet name
        #[arg(long)]
        new_name: String,
    },
}

#[derive(Debug, Subcommand)]
enum ModelsAction {
    /// List all routable models
    List,
}

#[derive(Debug, Subcommand)]
enum AgentsAction {
    /// List all available agents
    List {
        /// Bypass the registry cache and fetch fresh data
        #[arg(long)]
        refresh: bool,
    },
    /// Check that agent routing through BitRouter is working
    Check,
    /// Install an agent from the ACP registry
    Install {
        /// Agent id (e.g. `claude-acp`, `codex-acp`)
        id: String,
    },
    /// Uninstall a previously installed agent
    Uninstall {
        /// Agent id
        id: String,
    },
    /// Update one or all installed agents to the current registry version
    Update {
        /// Agent id (omit to update every installed agent)
        id: Option<String>,
    },
}

#[derive(Debug, Subcommand)]
enum ProvidersAction {
    /// List configured providers
    List,
    /// Switch between bundled BitRouter Cloud defaults and BYOK
    Use {
        /// `default` (BitRouter Cloud) or `byok` (Bring Your Own Keys)
        mode: String,
    },
}

#[derive(Debug, Subcommand)]
enum PolicyAction {
    /// Evaluate a policy (OWS executable policy entry point — reads JSON from stdin)
    Eval,
    /// Create a new spend-limit policy
    Create {
        /// Policy name
        #[arg(long)]
        name: Option<String>,

        /// Daily spend limit in micro-USD
        #[arg(long)]
        daily_limit: Option<u64>,

        /// Monthly spend limit in micro-USD
        #[arg(long)]
        monthly_limit: Option<u64>,

        /// Per-transaction maximum in micro-USD
        #[arg(long)]
        per_tx_max: Option<u64>,

        /// Allowed chains (CAIP-2, comma-separated)
        #[arg(long, value_delimiter = ',')]
        chains: Option<Vec<String>>,

        /// Expiration timestamp (ISO 8601)
        #[arg(long)]
        expires: Option<String>,

        /// Import from a custom policy JSON file
        #[arg(long)]
        file: Option<std::path::PathBuf>,

        /// Allow only specific tools for a provider (format: "provider:tool", repeatable)
        #[arg(long = "tool-allow")]
        tool_allow: Vec<String>,
    },
    /// List all policies
    List,
    /// Show policy details
    Show {
        /// Policy ID
        #[arg(long)]
        id: String,
    },
    /// Delete a policy
    Delete {
        /// Policy ID
        #[arg(long)]
        id: String,
    },
}

#[derive(Debug, Subcommand)]
enum AuthAction {
    /// Authenticate with providers (interactive or single-provider)
    Login {
        /// Provider name (optional — omit for interactive multi-provider flow)
        provider: Option<String>,
    },
    /// Re-authenticate an existing provider
    Refresh {
        /// Provider name (optional — omit for interactive picker)
        provider: Option<String>,
    },
    /// Show authentication status for all providers
    Status,
}

#[derive(Debug, Subcommand)]
enum KeyAction {
    /// Create a new API key for agent access
    Create {
        /// Key name (e.g. "claude-agent")
        #[arg(long)]
        name: String,

        /// Wallet name(s) this key can access
        #[arg(long, required = true, num_args = 1..)]
        wallet: Vec<String>,

        /// Policy ID(s) to attach
        #[arg(long)]
        policy: Vec<String>,

        /// Expiration timestamp (ISO 8601)
        #[arg(long)]
        expires_at: Option<String>,
    },
    /// List all API keys
    List,
    /// Revoke an API key
    Revoke {
        /// Key ID to revoke
        #[arg(long)]
        id: String,
    },
    /// Generate an agent access key (virtual by default)
    Sign {
        /// OWS wallet name to sign with (operator wallet)
        #[arg(long)]
        wallet: String,

        /// Model name patterns the agent may access (comma-separated)
        #[arg(long, value_delimiter = ',')]
        models: Option<Vec<String>>,

        /// Budget limit in micro USD (1 USD = 1,000,000 μUSD)
        #[arg(long)]
        budget: Option<u64>,

        /// Budget scope: "session" or "account"
        #[arg(long)]
        budget_scope: Option<String>,

        /// Expiration duration (e.g. "30d", "12h", "3600s", or raw seconds)
        #[arg(long)]
        exp: Option<String>,

        /// OWS agent key ID to bind to this token
        #[arg(long)]
        ows_key: Option<String>,

        /// Policy ID to embed in the token (evaluated at request time)
        #[arg(long)]
        policy: Option<String>,

        /// Print the raw JWT instead of storing it and returning a virtual key
        #[arg(long)]
        raw: bool,
    },
}

#[tokio::main]
async fn main() -> Result<(), Box<dyn std::error::Error>> {
    if has_removed_headless_flag(std::env::args_os()) {
        return Err(
            "`bitrouter --headless` has been removed; use `bitrouter serve` to run the server in the foreground."
                .into(),
        );
    }

    let cli = Cli::parse();

    #[cfg(feature = "cli")]
    let update_check = tokio::spawn(cli::update_check::check_for_update());

    let result = run_cli(cli).await;

    // Print update notice (if available) after the command finishes.
    #[cfg(feature = "cli")]
    if let Ok(Ok(Some(msg))) =
        tokio::time::timeout(std::time::Duration::from_secs(2), update_check).await
    {
        eprintln!("{msg}");
    }

    result
}

async fn run_cli(cli: Cli) -> Result<(), Box<dyn std::error::Error>> {
    // Resolve paths early — init needs them but not a loaded runtime
    let paths = resolve_home(cli.home_dir.as_deref());
    let overrides = PathOverrides {
        config_file: cli.config_file.clone(),
        env_file: cli.env_file.clone(),
        runtime_dir: cli.run_dir.clone(),
        log_dir: cli.logs_dir.clone(),
    };
    let paths = overrides.apply(paths);

    // Handle reset: confirm, wipe config, re-run onboarding, auto-launch TUI.
    #[cfg(feature = "cli")]
    if matches!(cli.command, Some(Command::Reset)) {
        return run_reset(&paths, cli.no_tui).await;
    }

    // Bare `bitrouter` (no subcommand): with `cli`, run onboarding/help.
    // Without `cli`, the only valid invocation is `bitrouter serve`.
    if cli.command.is_none() {
        #[cfg(feature = "cli")]
        {
            let config_exists = paths.config_file.exists()
                && std::fs::read_to_string(&paths.config_file)
                    .map(|s| !s.trim_start().starts_with('#'))
                    .unwrap_or(false);

            if !config_exists {
                let outcome = init::run_init(&paths)?;
                if outcome == init::InitOutcome::Configured {
                    return launch_after_init(&paths, cli.no_tui).await;
                }
                return Ok(());
            }

            return run_help_status(&paths);
        }
        #[cfg(not(feature = "cli"))]
        {
            return Err("no subcommand given; use `bitrouter serve` to start the server".into());
        }
    }

    // Handle wallet and key management — these only need the OWS vault, not a runtime.
    #[cfg(feature = "cli")]
    match cli.command {
        Some(Command::Wallet { action }) => {
            match action {
                WalletAction::Create {
                    name,
                    words,
                    show_mnemonic,
                } => cli::wallet::create(&name, Some(words), show_mnemonic)?,
                WalletAction::Import {
                    name,
                    mnemonic,
                    private_key,
                    chain,
                    index,
                } => {
                    if mnemonic {
                        cli::wallet::import_mnemonic(&name, index)?;
                    } else if private_key {
                        cli::wallet::import_private_key(&name, chain.as_deref())?;
                    } else {
                        return Err("specify --mnemonic or --private-key for wallet import".into());
                    }
                }
                WalletAction::List => cli::wallet::list(None)?,
                WalletAction::Info { wallet } => cli::wallet::info(&wallet, None)?,
                WalletAction::Export { wallet } => cli::wallet::export(&wallet)?,
                WalletAction::Delete { wallet } => cli::wallet::delete(&wallet)?,
                WalletAction::Rename { wallet, new_name } => {
                    cli::wallet::rename(&wallet, &new_name)?
                }
            }
            return Ok(());
        }
        Some(Command::Key { action }) => {
            match action {
                KeyAction::Create {
                    name,
                    wallet,
                    policy,
                    expires_at,
                } => cli::key::create(&name, &wallet, &policy, expires_at.as_deref())?,
                KeyAction::List => cli::key::list()?,
                KeyAction::Revoke { id } => {
                    // Load config for server communication.
                    let runtime: DefaultRuntime = load_or_warn_scaffold(&paths);
                    cli::key::revoke_on_server(&runtime.config, runtime.config.server.listen, &id)?;
                }
                KeyAction::Sign {
                    wallet,
                    models,
                    budget,
                    budget_scope,
                    exp,
                    ows_key,
                    policy,
                    raw,
                } => {
                    let runtime = (!raw).then(|| load_or_warn_scaffold(&paths));
                    let virtual_key_target = runtime.as_ref().map(|runtime: &DefaultRuntime| {
                        (&runtime.config, runtime.config.server.listen)
                    });
                    cli::key::sign(cli::key::SignOptions {
                        wallet_name: &wallet,
                        models: models.as_deref(),
                        budget,
                        budget_scope: budget_scope.as_deref(),
                        exp: exp.as_deref(),
                        ows_key: ows_key.as_deref(),
                        policy: policy.as_deref(),
                        virtual_key_target,
                    })?;
                }
            }
            return Ok(());
        }
        Some(Command::Policy { action }) => {
            let pd = cli::policy::policy_dir(&paths.home_dir);
            match action {
                PolicyAction::Eval => cli::policy::eval(&pd)?,
                PolicyAction::Create {
                    name,
                    daily_limit,
                    monthly_limit,
                    per_tx_max,
                    chains,
                    expires,
                    file,
                    tool_allow,
                } => cli::policy::create(
                    &pd,
                    cli::policy::CreateOpts {
                        name: name.as_deref().unwrap_or("default"),
                        daily_limit,
                        monthly_limit,
                        per_tx_max,
                        chains: chains.as_deref().unwrap_or(&[]),
                        expires_at: expires.as_deref(),
                        file: file.as_deref(),
                        tool_allow: &tool_allow,
                    },
                )?,
                PolicyAction::List => cli::policy::list(&pd)?,
                PolicyAction::Show { id } => cli::policy::show(&pd, &id)?,
                PolicyAction::Delete { id } => cli::policy::delete(&pd, &id)?,
            }
            return Ok(());
        }
        Some(Command::Auth { action }) => {
            let runtime: DefaultRuntime = load_or_warn_scaffold(&paths);
            // Auth commands use blocking I/O (reqwest::blocking for OAuth,
            // dialoguer for interactive prompts). `block_in_place` lets them
            // run on the current Tokio worker thread without conflicting with
            // the outer async runtime.
            tokio::task::block_in_place(|| match action {
                AuthAction::Login { provider } => {
                    cli::auth::run_login(&runtime.config, &paths, provider.as_deref())
                }
                AuthAction::Refresh { provider } => {
                    cli::auth::run_refresh(&runtime.config, &paths, provider.as_deref())
                }
                AuthAction::Status => cli::auth::run_status(&runtime.config, &paths),
            })?;
            return Ok(());
        }
        Some(Command::Login { url }) => {
            // `reqwest::blocking` inside a Tokio worker — bracket with
            // `block_in_place` to match the Auth branch above.
            let base = cli::cloud_auth::resolve_cloud_url(url.as_deref());
            tokio::task::block_in_place(|| cli::cloud_auth::run_login(&paths.home_dir, &base))?;
            return Ok(());
        }
        Some(Command::Logout) => {
            cli::cloud_auth::run_logout(&paths.home_dir)?;
            return Ok(());
        }
        Some(Command::Whoami) => {
            cli::cloud_auth::run_whoami(&paths.home_dir)?;
            return Ok(());
        }
        Some(Command::Tools { action }) => {
            let runtime: DefaultRuntime = load_or_warn_scaffold(&paths);
            let addr = runtime.config.server.listen;
            match action {
                ToolsAction::List => cli::tools::run_list(&runtime.config, addr)?,
                ToolsAction::Status => cli::tools::run_status(&runtime.config, addr)?,
                ToolsAction::Discover { provider } => {
                    cli::tools::run_discover(&runtime.config, &provider).await?
                }
            }
            return Ok(());
        }
        Some(Command::Models { action }) => {
            let runtime: DefaultRuntime = load_or_warn_scaffold(&paths);
            match action {
                ModelsAction::List => cli::models::run_list(&runtime.config)?,
            }
            return Ok(());
        }
        #[cfg(feature = "tui")]
        Some(Command::AgentProxy { agent_name, token }) => {
            let runtime: DefaultRuntime = load_or_warn_scaffold(&paths);
            cli::agent_proxy::run(&runtime.config, &agent_name, token.as_deref())?;
            return Ok(());
        }
        #[cfg(not(feature = "tui"))]
        Some(Command::AgentProxy { .. }) => {
            return Err("agent-proxy requires the `tui` feature".into());
        }
        #[cfg(feature = "tui")]
        Some(Command::Agents { action }) => {
            let runtime: DefaultRuntime = load_or_warn_scaffold(&paths);
            match action {
                AgentsAction::List { refresh } => {
                    cli::agents::run_list(&runtime.config, &paths, refresh).await?
                }
                AgentsAction::Check => cli::agents::run_check(&runtime.config)?,
                AgentsAction::Install { id } => {
                    cli::agents::run_install(&id, &runtime.config, &paths).await?
                }
                AgentsAction::Uninstall { id } => cli::agents::run_uninstall(&id, &paths).await?,
                AgentsAction::Update { id } => {
                    cli::agents::run_update(id.as_deref(), &runtime.config, &paths).await?
                }
            }
            return Ok(());
        }
        #[cfg(not(feature = "tui"))]
        Some(Command::Agents { .. }) => {
            return Err("agent management requires the `tui` feature".into());
        }
        #[cfg(feature = "cli")]
        Some(Command::Providers { action }) => {
            let runtime: DefaultRuntime = load_or_warn_scaffold(&paths);
            match action {
                ProvidersAction::List => cli::providers::run_list(&runtime.config)?,
                ProvidersAction::Use { mode } => cli::providers::run_use(&mode, &runtime.config)?,
            }
            return Ok(());
        }
        Some(Command::Route { action }) => {
            let runtime: DefaultRuntime = load_or_warn_scaffold(&paths);
            let addr = runtime.config.server.listen;
            match action {
                RouteAction::List => cli::route::run_list(&runtime.config, addr)?,
                RouteAction::Add {
                    model,
                    endpoints,
                    strategy,
                } => cli::route::run_add(
                    &runtime.config,
                    addr,
                    cli::route::RouteAddOpts {
                        model,
                        endpoints,
                        strategy: Some(strategy),
                    },
                )?,
                RouteAction::Rm { model } => cli::route::run_remove(&runtime.config, addr, &model)?,
            }
            return Ok(());
        }
        _ => {}
    }

    // All remaining commands need tracing and a loaded runtime.
    init_tracing();

    let runtime: DefaultRuntime = load_or_warn_scaffold(&paths);

    // When an OWS wallet is configured and OWS_PASSPHRASE is not already set,
    // prompt interactively (if a TTY is attached) or warn the user.
    if is_server_command(&cli.command)
        && let Err(e) = ensure_ows_passphrase(&runtime.config)
    {
        eprintln!("wallet passphrase error: {e}");
        std::process::exit(1);
    }

    match cli.command {
        Some(Command::Serve) => {
            // Connect to database. Accounts, sessions, JWT auth, and persistent
            // spend tracking are baked in unconditionally — startup fails fast
            // if the database is unreachable or migrations cannot apply.
            let env_file = paths.env_file.exists().then_some(paths.env_file.as_path());
            let db_url = crate::runtime::resolve_database_url(
                cli.database_url.as_deref(),
                &runtime.config,
                &paths.home_dir,
                env_file,
            );
            let mut db_opts = sea_orm::ConnectOptions::new(&db_url);
            db_opts.sqlx_logging_level(tracing::log::LevelFilter::Debug);
            let db = sea_orm::Database::connect(db_opts).await.map_err(|e| {
                crate::runtime::error::RuntimeError::Other(format!(
                    "database connection failed: {e}. Check `database.url` in {} or BITROUTER_DATABASE_URL.",
                    paths.config_file.display()
                ))
            })?;
            crate::runtime::migrate(&db).await.map_err(|e| {
                crate::runtime::error::RuntimeError::Other(format!(
                    "database migration failed: {e}"
                ))
            })?;
            let db = Arc::new(db);

            print_first_run_guidance(&runtime);
            let base_client = crate::runtime::http_client::build_upstream_client();
            let client_builder = reqwest_middleware::ClientBuilder::new(base_client);
            let client_builder =
                match crate::runtime::payment::build_payment_middleware(&runtime.config) {
                    Ok(Some(mw)) => client_builder.with(mw),
                    Ok(None) => client_builder,
                    Err(e) => {
                        tracing::warn!("payment middleware disabled: {e}");
                        client_builder
                    }
                };
            let model_router = crate::runtime::Router::new(
                client_builder.build(),
                runtime.config.providers.clone(),
            )
            .with_token_store(paths.token_store_file.clone());
            runtime.serve_with_reload(db, model_router).await?
        }
        #[cfg(feature = "cli")]
        Some(Command::Start) => runtime.start().await?,
        #[cfg(feature = "cli")]
        Some(Command::Stop) => runtime.stop().await?,
        #[cfg(feature = "cli")]
        Some(Command::Status) => {
            let status = runtime.status();
            match status.daemon_pid {
                Some(pid) => println!("daemon:    running (pid {pid})"),
                None => println!("daemon:    stopped"),
            }
            println!("home:      {}", status.home_dir.display());
            println!("config:    {}", status.config_file.display());
            println!("runtime:   {}", status.runtime_dir.display());
            println!("listen:    {}", status.listen_addr);
            println!("providers: {}", status.providers.join(", "));
            if !status.models.is_empty() {
                println!("models:    {}", status.models.join(", "));
            }
        }
        #[cfg(feature = "cli")]
        Some(Command::Restart) => runtime.restart().await?,
        #[cfg(feature = "cli")]
        Some(Command::Reload) => runtime.reload()?,
        _ => {
            // All other commands are handled above and return early.
            unreachable!()
        }
    }

    Ok(())
}

/// Returns true for commands that start (or restart) the server and therefore
/// need the OWS wallet passphrase resolved up front.
fn is_server_command(cmd: &Option<Command>) -> bool {
    #[cfg(feature = "cli")]
    {
        matches!(cmd, Some(Command::Serve | Command::Start))
    }
    #[cfg(not(feature = "cli"))]
    {
        matches!(cmd, Some(Command::Serve))
    }
}

/// Load config from disk, warning on stderr if the file exists but fails to
/// parse (and falling back to scaffold defaults).
fn load_or_warn_scaffold(paths: &RuntimePaths) -> DefaultRuntime {
    match DefaultRuntime::load(paths.clone()) {
        Ok(rt) => rt,
        Err(e) => {
            if paths.config_file.exists() {
                eprintln!(
                    "warning: failed to parse {}: {e}",
                    paths.config_file.display()
                );
                eprintln!("         falling back to default configuration");
                eprintln!();
            }
            DefaultRuntime::scaffold(paths.clone())
        }
    }
}

fn print_first_run_guidance(runtime: &DefaultRuntime) {
    if runtime.config.has_configured_providers() {
        return;
    }

    let detected = bitrouter_config::detect_providers_from_env();
    if detected.is_empty() {
        eprintln!("No providers configured and no API keys found in environment.");
        eprintln!("Run `bitrouter` to set up providers interactively.");
        eprintln!();
    } else {
        let names: Vec<&str> = detected.iter().map(|d| d.name.as_str()).collect();
        eprintln!(
            "Auto-detected providers from environment: {}",
            names.join(", ")
        );
        eprintln!("Direct routing is available (e.g., \"openai:gpt-4o\").");
        eprintln!("Run `bitrouter` to save a permanent configuration.");
        eprintln!();
    }
}

/// Show help/status when config exists and no subcommand is given.
#[cfg(feature = "cli")]
fn run_help_status(paths: &RuntimePaths) -> Result<(), Box<dyn std::error::Error>> {
    let runtime: DefaultRuntime = load_or_warn_scaffold(paths);
    let status = runtime.status();

    let version = env!("CARGO_PKG_VERSION");
    println!();
    println!("  BitRouter v{version}");
    println!("  ─────────────────");
    println!();

    match status.daemon_pid {
        Some(pid) => println!("  daemon:    running (pid {pid})"),
        None => println!("  daemon:    stopped"),
    }
    println!("  home:      {}", status.home_dir.display());
    println!("  config:    {}", status.config_file.display());
    println!("  listen:    {}", status.listen_addr);

    if !status.providers.is_empty() {
        println!("  providers: {}", status.providers.join(", "));
    }
    if !status.models.is_empty() {
        println!("  models:    {}", status.models.join(", "));
    }

    println!();
    println!("  Commands:");
    println!("    bitrouter serve     Start the API server (foreground)");
    println!("    bitrouter start     Start as background daemon");
    println!("    bitrouter stop      Stop the daemon");
    println!("    bitrouter status    Show runtime status");
    println!("    bitrouter models    List routable models");
    println!("    bitrouter agents    List available ACP agents");
    println!("    bitrouter reset     Wipe config and re-run setup");
    println!();

    Ok(())
}

/// Reset configuration and re-run the setup wizard.
#[cfg(feature = "cli")]
async fn run_reset(paths: &RuntimePaths, no_tui: bool) -> Result<(), Box<dyn std::error::Error>> {
    if !std::io::IsTerminal::is_terminal(&std::io::stdin()) {
        return Err("`bitrouter reset` requires an interactive terminal.".into());
    }

    let theme = dialoguer::theme::ColorfulTheme::default();

    let confirm = dialoguer::Confirm::with_theme(&theme)
        .with_prompt("This will delete your configuration and re-run setup. Continue?")
        .default(false)
        .interact()?;

    if !confirm {
        println!("Reset cancelled.");
        return Ok(());
    }

    // Remove config and env files.
    if paths.config_file.exists() {
        std::fs::remove_file(&paths.config_file)?;
    }
    if paths.env_file.exists() {
        std::fs::remove_file(&paths.env_file)?;
    }

    println!("  Configuration removed.");
    println!();

    let outcome = init::run_init(paths)?;
    if outcome == init::InitOutcome::Configured {
        return launch_after_init(paths, no_tui).await;
    }

    Ok(())
}

/// After successful onboarding, launch the TUI (if enabled and not skipped).
#[cfg(feature = "cli")]
async fn launch_after_init(
    paths: &RuntimePaths,
    no_tui: bool,
) -> Result<(), Box<dyn std::error::Error>> {
    #[cfg(feature = "tui")]
    {
        if !no_tui {
            println!("  Launching TUI...");
            println!();

            let runtime: DefaultRuntime = load_or_warn_scaffold(paths);
            let status = runtime.status();

            let tui_config = bitrouter_tui::TuiConfig {
                listen_addr: status.listen_addr,
                providers: vec![],
                route_count: 0,
                daemon_pid: status.daemon_pid,
                agents_dir: paths.agents_dir.clone(),
                agent_state_file: paths.agent_state_file.clone(),
                cache_dir: paths.cache_dir.clone(),
            };
            let mut bitrouter_config = runtime.config.clone();

            // Merge the ACP registry into the agent set so first-render
            // discovery sees the full catalog.  A failed fetch falls
            // through silently — the stale cache, then built-in agent
            // defs, then user config remain as the backstop.
            let cache_file = paths.cache_dir.join("acp-registry.json");
            let registry_url = bitrouter_providers::acp::registry::resolve_registry_url(
                bitrouter_config.acp_registry_url.as_deref(),
            );
            match bitrouter_providers::acp::registry::fetch_registry(
                &cache_file,
                bitrouter_providers::acp::registry::DEFAULT_TTL_SECS,
                &registry_url,
            )
            .await
            {
                Ok(index) => {
                    bitrouter_providers::acp::registry::merge_registry_into_agents(
                        &index,
                        &mut bitrouter_config.agents,
                    );
                }
                Err(e) => {
                    eprintln!("  note: ACP registry unavailable ({e}); using built-ins only");
                }
            }

            bitrouter_providers::acp::state::overlay_install_state_sync(
                &mut bitrouter_config.agents,
                &paths.agent_state_file,
            );
            let launch_cwd = std::env::current_dir()?;
            bitrouter_tui::run(tui_config, &bitrouter_config, launch_cwd).await?;
            return Ok(());
        }
    }

    let _ = (paths, no_tui);
    println!("  Start the server:");
    println!("    bitrouter serve     foreground");
    println!("    bitrouter start     background daemon");
    println!();

    Ok(())
}

/// Ensure `OWS_PASSPHRASE` is available when the config includes an OWS wallet.
///
/// Resolution order:
/// 1. `OWS_PASSPHRASE` env var already set → use as-is (non-interactive).
/// 2. Interactive TTY available → prompt with `dialoguer::Password`.
/// 3. Neither → return an error so the caller can exit gracefully.
fn ensure_ows_passphrase(
    config: &bitrouter_config::BitrouterConfig,
) -> std::result::Result<(), Box<dyn std::error::Error>> {
    let wallet = match config.wallet.as_ref() {
        Some(w) => w,
        None => return Ok(()),
    };

    if std::env::var("OWS_PASSPHRASE").is_ok() {
        return Ok(());
    }

    if !std::io::IsTerminal::is_terminal(&std::io::stdin()) {
        return Err(format!(
            "wallet '{}' configured but OWS_PASSPHRASE is not set and stdin is not a terminal",
            wallet.name,
        )
        .into());
    }

    #[cfg(feature = "cli")]
    {
        let passphrase =
            dialoguer::Password::with_theme(&dialoguer::theme::ColorfulTheme::default())
                .with_prompt(format!("OWS passphrase for wallet '{}'", wallet.name))
                .allow_empty_password(true)
                .interact()?;

        // SAFETY: single-threaded at this point (before tokio runtime enters serve).
        unsafe { std::env::set_var("OWS_PASSPHRASE", passphrase) };

        Ok(())
    }
    #[cfg(not(feature = "cli"))]
    {
        Err(format!(
            "wallet '{}' configured but OWS_PASSPHRASE is not set; this binary was built without `cli`, so interactive prompting is unavailable",
            wallet.name,
        )
        .into())
    }
}

fn has_removed_headless_flag<I, S>(args: I) -> bool
where
    I: IntoIterator<Item = S>,
    S: AsRef<std::ffi::OsStr>,
{
    args.into_iter().any(|arg| arg.as_ref() == "--headless")
}

fn init_tracing() {
    let _ = tracing_subscriber::fmt()
        .with_env_filter(
            tracing_subscriber::EnvFilter::try_from_default_env()
                .unwrap_or_else(|_| tracing_subscriber::EnvFilter::new("info")),
        )
        .try_init();
}

#[cfg(test)]
mod tests {
    use super::*;
    use clap::CommandFactory;
    use clap::error::ErrorKind;

    #[test]
    fn serve_subcommand_parses_correctly() {
        let cli = Cli::try_parse_from(["bitrouter", "serve"]).ok();
        assert!(cli.is_some());
        assert!(matches!(
            cli,
            Some(Cli {
                command: Some(Command::Serve),
                ..
            })
        ));
    }

    #[test]
    fn headless_flag_is_rejected() {
        let err = Cli::try_parse_from(["bitrouter", "--headless"]).err();
        assert!(matches!(
            err.as_ref().map(clap::Error::kind),
            Some(ErrorKind::UnknownArgument)
        ));
    }

    #[test]
    fn help_mentions_serve_but_not_headless() {
        let mut command = Cli::command();
        let mut help = Vec::new();
        assert!(command.write_long_help(&mut help).is_ok());

        let help_text = String::from_utf8(help).ok();
        assert!(help_text.is_some());
        assert!(matches!(help_text.as_deref(), Some(text) if text.contains("serve")));
        assert!(matches!(help_text.as_deref(), Some(text) if !text.contains("--headless")));
    }

    #[test]
    fn removed_headless_flag_is_detected_before_parse() {
        assert!(has_removed_headless_flag(["bitrouter", "--headless"]));
        assert!(!has_removed_headless_flag(["bitrouter", "serve"]));
    }
}