ebman 0.5.0

mod app;
mod aws;
mod commands;
mod config;
mod control;
mod cost_cache;
mod font_probe;
mod form;
mod keys;
mod mode_action;
mod mode_detail;
mod mode_dlq;
mod plugins;
mod profiles;
mod report_bug;
mod shell;
mod sso;
mod state;
mod theme;
mod ui;
mod update_check;
mod util;

use std::{
    io::{self, Stdout},
    panic,
};

use color_eyre::eyre::Result;
use crossterm::{
    event::{DisableMouseCapture, EnableMouseCapture},
    execute,
    terminal::{disable_raw_mode, enable_raw_mode, EnterAlternateScreen, LeaveAlternateScreen},
};
use ratatui::{backend::CrosstermBackend, Terminal};
use tracing_subscriber::{layer::SubscriberExt, reload, util::SubscriberInitExt, EnvFilter};

/// Handle for live-reloading the log filter from the running app.
pub type LogReloadHandle = reload::Handle<EnvFilter, tracing_subscriber::Registry>;

use crate::app::App;

type Tui = Terminal<CrosstermBackend<Stdout>>;

#[tokio::main]
async fn main() -> Result<()> {
    // Handle CLI flags before any TUI / logging setup so they print cleanly.
    let mut read_only = false;
    let mut control_socket: Option<std::path::PathBuf> = None;
    let args: Vec<String> = std::env::args().skip(1).collect();
    // Subcommand support: `ebman envs [--json]`, `ebman action ACTION --env NAME --yes`,
    // `ebman ctl <op> …`. Falls through to the TUI when no subcommand is present.
    if let Some(first) = args.first() {
        match first.as_str() {
            "envs" => return run_envs_cli(&args).await,
            "action" => return run_action_cli(&args).await,
            "ctl" => return run_ctl_cli(&args).await,
            _ => {}
        }
    }
    let mut iter = args.iter();
    while let Some(arg) = iter.next() {
        match arg.as_str() {
            "--version" | "-V" => {
                println!(
                    "ebman {}\nby Tom Baldwin · Polymorphism Ltd · https://polymorphism.co.uk",
                    env!("CARGO_PKG_VERSION")
                );
                return Ok(());
            }
            "--help" | "-h" => {
                print_help();
                return Ok(());
            }
            "--read-only" => read_only = true,
            "--control-socket" => {
                control_socket = iter.next().map(std::path::PathBuf::from);
                if control_socket.is_none() {
                    eprintln!("ebman: --control-socket requires a path argument");
                    std::process::exit(2);
                }
            }
            other if other.starts_with('-') => {
                eprintln!("ebman: unknown flag {other}\n");
                print_help();
                std::process::exit(2);
            }
            _ => {}
        }
    }

    color_eyre::install()?;
    let log_handle = init_logging()?;
    install_panic_hook();

    let mut cfg = config::load();
    // Resolve `icons = "auto"` *before* we enter the alt-screen so the probe
    // glyph never reaches the user's scrollback. Any non-auto value is
    // passed through untouched.
    cfg.icons = font_probe::resolve_icons_setting(&cfg.icons);
    // Capture the resolved icons setting before `cfg` is consumed by
    // `App::new` — `draw_splash` needs it to pick between the plain-text
    // tagline and the Powerline rounded-cap pill variant.
    let splash_icons = cfg.icons.clone();
    let mut terminal = enter_tui()?;

    // Animate the splash while App::new resolves (config load + STS + first
    // SDK setup). Keep the splash visible for at least SPLASH_MIN_DURATION even
    // if App::new returns sooner — gives the user a chance to actually see it.
    const SPLASH_MIN_DURATION: std::time::Duration = std::time::Duration::from_secs(3);

    let splash_started = std::time::Instant::now();
    let mut splash_frame: u64 = 0;
    let mut interval = tokio::time::interval(std::time::Duration::from_millis(30));
    let mut new_app_fut = Box::pin(App::new(cfg));
    let mut app_ready: Option<App> = None;
    let mut app_inst = loop {
        tokio::select! {
            biased;
            res = &mut new_app_fut, if app_ready.is_none() => {
                app_ready = Some(res?);
            }
            _ = interval.tick() => {
                draw_splash(&mut terminal, splash_frame, &splash_icons)?;
                splash_frame = splash_frame.wrapping_add(1);
                if app_ready.is_some() && splash_started.elapsed() >= SPLASH_MIN_DURATION {
                    break app_ready
                        .take()
                        .expect("app_ready was Some, just checked above");
                }
            }
        }
    };
    app_inst.read_only = read_only;
    app_inst.log_reload = Some(log_handle);

    // Optional control socket. Spawn the listener *after* the splash so the
    // socket is guaranteed to exist by the time the user can issue commands.
    let control_rx = control_socket.map(|path| {
        let (tx, rx) = tokio::sync::mpsc::unbounded_channel();
        control::spawn_listener(path, tx);
        rx
    });

    let result = app_inst.run(&mut terminal, control_rx).await;
    // Belt-and-braces: persist state regardless of how `run()` exited.
    // The internal call at the end of `run()` only fires on the Ok path,
    // so a `terminal.draw()?` error mid-shutdown (which can happen when
    // cargo-watch SIGTERM's the process and the TTY is flaky) would
    // otherwise drop the latest persistence. This second call is cheap
    // and idempotent; if run() succeeded it just over-writes its own
    // earlier write with the same values.
    app_inst.persist_state();
    leave_tui(&mut terminal)?;
    // Honour a reload request from the control socket: re-exec the same
    // binary with the original argv so the parent shell's terminal is
    // reused by the new process. Done AFTER `leave_tui` so the old TUI
    // state (raw mode, alt-screen, mouse capture) is fully torn down
    // before the new process sets it back up.
    if result.is_ok() && app_inst.reload_requested {
        #[cfg(unix)]
        {
            use std::os::unix::process::CommandExt;
            let exe = std::env::current_exe()?;
            let argv: Vec<String> = std::env::args().skip(1).collect();
            let err = std::process::Command::new(exe).args(argv).exec();
            // `exec` only returns on failure.
            return Err(color_eyre::eyre::eyre!("reload exec failed: {err}"));
        }
        #[cfg(not(unix))]
        {
            eprintln!("ebman: reload is unix-only");
        }
    }
    result
}

fn print_help() {
    let version = env!("CARGO_PKG_VERSION");
    println!(
        "\
ebman {version}
k9s-style TUI for AWS Elastic Beanstalk.

USAGE:
    ebman [FLAGS]

FLAGS:
    -V, --version           Print version and exit.
    -h, --help              Print this help and exit.
        --read-only         Start with destructive actions disabled (also toggleable with :readonly).
        --control-socket P  Open a Unix socket at P for remote control (off by default).
                            Pair with `ebman ctl <op>` to drive the running session.

SUBCOMMANDS:
    envs [--json]                                List environments in current profile / region.
    action ACTION --env NAME [--yes]             Run an action (rebuild|restart|terminate) on an env.
                                                  Terminate requires --yes to confirm.
    ctl <screen|key|cmd|state|reload> [args]     Talk to a running ebman via --control-socket.
                                                  `reload` re-execs the binary (rebuild first via
                                                  `cargo build --release`). Use --socket PATH to
                                                  override the default location.

CONFIG:
    ~/.config/ebman/config.toml   user configuration (see README)
    ~/.config/ebman/state.toml    persisted session state (managed by the app)
    ~/.cache/ebman/ebman.log      log output (filter with RUST_LOG)

KEYS:
    Once running, press '?' for the in-app help screen."
    );
}

async fn run_envs_cli(args: &[String]) -> Result<()> {
    let json = args.iter().any(|a| a == "--json");
    let aws = aws::AwsClient::with(None, None).await?;
    let envs = aws
        .list_environments()
        .await
        .map_err(|e| color_eyre::eyre::eyre!("list_environments: {e}"))?;
    if json {
        // Hand-rolled JSON to avoid pulling serde_json. Schema is flat and stable.
        let entries: Vec<String> = envs
            .iter()
            .map(|e| {
                format!(
                    "{{\"name\":\"{}\",\"application\":\"{}\",\"status\":\"{}\",\"health\":\"{}\",\"platform\":\"{}\",\"cname\":\"{}\",\"version_label\":\"{}\"}}",
                    cli_esc(&e.name),
                    cli_esc(&e.application),
                    cli_esc(&e.status),
                    cli_esc(&e.health),
                    cli_esc(&e.platform),
                    cli_esc(&e.cname),
                    cli_esc(&e.version_label),
                )
            })
            .collect();
        println!("[{}]", entries.join(","));
    } else {
        println!("NAME\tAPPLICATION\tSTATUS\tHEALTH\tPLATFORM\tCNAME\tVERSION");
        for e in &envs {
            println!(
                "{}\t{}\t{}\t{}\t{}\t{}\t{}",
                e.name, e.application, e.status, e.health, e.platform, e.cname, e.version_label
            );
        }
    }
    Ok(())
}

async fn run_action_cli(args: &[String]) -> Result<()> {
    // Expected shape: ebman action ACTION --env NAME [--yes]
    let action_name = args.get(1).map(|s| s.as_str()).unwrap_or("");
    if action_name.is_empty() || action_name.starts_with('-') {
        eprintln!("usage: ebman action <rebuild|restart|terminate> --env NAME [--yes]");
        std::process::exit(2);
    }
    let mut env_name: Option<String> = None;
    let mut yes = false;
    let mut iter = args.iter().skip(2);
    while let Some(arg) = iter.next() {
        match arg.as_str() {
            "--env" => env_name = iter.next().cloned(),
            "--yes" => yes = true,
            other => {
                eprintln!("ebman action: unknown flag '{other}'");
                std::process::exit(2);
            }
        }
    }
    let Some(env) = env_name else {
        eprintln!("ebman action: --env NAME is required");
        std::process::exit(2);
    };
    let destructive = matches!(action_name, "terminate");
    if destructive && !yes {
        eprintln!("ebman action: '{action_name}' is destructive; re-run with --yes to confirm");
        std::process::exit(3);
    }
    let aws = aws::AwsClient::with(None, None).await?;
    let result = match action_name {
        "rebuild" => aws.rebuild_env(&env).await,
        "restart" => aws.restart_app_server(&env).await,
        "terminate" => aws.terminate_env(&env).await,
        other => {
            eprintln!("ebman action: unknown action '{other}'");
            std::process::exit(2);
        }
    };
    match result {
        Ok(()) => {
            println!("ok: {action_name} on {env} dispatched");
            Ok(())
        }
        Err(e) => {
            eprintln!("err: {e}");
            std::process::exit(1);
        }
    }
}

/// Subcommand: `ebman ctl <op> [args] [--socket PATH]`. Opens a one-shot Unix
/// socket connection to a running ebman process and prints the response.
async fn run_ctl_cli(args: &[String]) -> Result<()> {
    use tokio::io::{AsyncReadExt, AsyncWriteExt};
    use tokio::net::UnixStream;
    let mut socket_path = control::default_socket_path();
    let mut rest: Vec<&str> = Vec::new();
    let mut iter = args.iter().skip(1);
    while let Some(arg) = iter.next() {
        if arg == "--socket" {
            if let Some(p) = iter.next() {
                socket_path = std::path::PathBuf::from(p);
            } else {
                eprintln!("ebman ctl: --socket requires a path");
                std::process::exit(2);
            }
        } else {
            rest.push(arg.as_str());
        }
    }
    if rest.is_empty() {
        eprintln!(
            "usage: ebman ctl <screen|key|cmd|state> [args]  [--socket PATH]\n\
             examples:\n  ebman ctl screen\n  ebman ctl key Down\n  ebman ctl key Ctrl+R\n  \
             ebman ctl cmd region eu-west-2\n  ebman ctl state"
        );
        std::process::exit(2);
    }
    let head = rest[0].to_ascii_uppercase();
    let body = rest[1..].join(" ");
    let request = if body.is_empty() {
        head
    } else {
        format!("{head} {body}")
    };
    let mut stream = UnixStream::connect(&socket_path).await.map_err(|e| {
        color_eyre::eyre::eyre!(
            "ebman ctl: connect to {} failed: {e}\n  hint: start ebman with `--control-socket {}`",
            socket_path.display(),
            socket_path.display()
        )
    })?;
    stream.write_all(request.as_bytes()).await?;
    stream.write_all(b"\n").await?;
    let mut response = String::new();
    stream.read_to_string(&mut response).await?;
    print!("{response}");
    if !response.ends_with('\n') {
        println!();
    }
    if response.starts_with("ERR ") {
        std::process::exit(1);
    }
    Ok(())
}

/// Minimal JSON-string escape for CLI output. Mirrors the webhook payload
/// escape — quotes and backslashes only; EB names don't contain control chars.
fn cli_esc(s: &str) -> String {
    s.replace('\\', "\\\\").replace('"', "\\\"")
}

const SPLASH_SPINNER: &[&str] = &["⠋", "⠙", "⠹", "⠸", "⠼", "⠴", "⠦", "⠧", "⠇", "⠏"];

// 8-bit pixel-art splash scene — an angry giant chomping a
// beanstalk (the `ebman` = Elastic *Beanstalk* gag: a giant
// devouring the thing).
//
// Each glyph in a frame is a palette key, not a literal. The
// renderer ([`splash_giant_lines`]) paints every non-space key as a
// **two-cell** `██` block coloured via [`splash_pixel`] — two cells
// wide so each logical pixel is roughly square (terminal cells are
// ~1:2). Transparent keys render as two blank cells.
//
// Four frames cycle a chomp: jaws-wide → closing → CHOMP → opening.
// Only the forehead wrinkles (rows 3-4), the eyes (rows 7-9) and
// the mouth (rows 12-13) animate — the furrow deepens toward the
// bite. Everything else, the head outline and the whole leafy
// beanstalk (rows 14-23), is identical across every frame, so the
// beanstalk stays rooted and still while the giant glares, furrows
// and chomps.
//
// Palette keys: G/g/h giant skin + shadow + highlight · B brow ·
// W eye-white · P pupil (angry red) · M mouth · K tusk ·
// T/t beanstalk stem · L/l leaf · D/d ground. Rows need not be
// equal length — the renderer pads to the widest row.

/// Frame 1 — JAWS WIDE. Eyes glaring, mouth gaping over the leafy
/// crown of the (static) beanstalk.
const GIANT_FRAME_1: &[&str] = &[
    "          hGGGGGGGGGGg        ",
    "        hGGGGGGGGGGGGGGGg      ",
    "       hGGGGGGGGGGGGGGGGGg     ",
    "      hGGggggGGGGGGggggGGGg    ",
    "      GGGGGGGggggggGGGGGGGg    ",
    "      GGBBBBGGGGGGGGBBBBGGg    ",
    "      GGGGBBBBGGGGBBBBGGGGGg   ",
    "      GGGWWWWWGGGGWWWWWGGGGg   ",
    "      GgGWWPPWGGggGWWPPWGGgg   ",
    "      GgGWWWWWGgggGWWWWWGGGg   ",
    "      GggGGGGGGGgggGGGGGGGgg   ",
    "      GggGKKGGGGGGGGKKGGGGgg   ",
    "      GgGKMMMMLLMMMMMMKGGGGg   ",
    "      GgGKMMMMTTMMMMMMKGGGGg   ",
    "       GgGGGGGTTGGGGGGGGGgg    ",
    "        GgggGGtTtGGGGGGGgg     ",
    "         GggGGtTtGGGGGGgg      ",
    "        lLLltttTTtttlLLl       ",
    "          GGgtTTtgGG          ",
    "           GgtTTtgG           ",
    "         lLLltTTt             ",
    "             tTTtlLLl         ",
    "             tTTt             ",
    "  DDDDDDDDDDDDtTTtDDDDDDDDDD  ",
];

/// Frame 2 — CLOSING. Eyes flick to the food, mouth half-shut, a
/// forehead furrow forming as the strain begins.
const GIANT_FRAME_2: &[&str] = &[
    "          hGGGGGGGGGGg        ",
    "        hGGGGGGGGGGGGGGGg      ",
    "       hGGGGGGGGGGGGGGGGGg     ",
    "      hGGggggGGGGGGggggGGGg    ",
    "      GGGGGGGggggggGGGGGGGg    ",
    "      GGBBBBGGGGGGGGBBBBGGg    ",
    "      GGGGBBBBGGGGBBBBGGGGGg   ",
    "      GGGWWWWWGGGGWWWWWGGGGg   ",
    "      GgGWWWPWGGggGWPWWWGGgg   ",
    "      GgGWWWWWGgggGWWWWWGGGg   ",
    "      GggGGGGGGGgggGGGGGGGgg   ",
    "      GggGKKGGGGGGGGKKGGGGgg   ",
    "      GgGKGMMMLLMMMMMGKGGGGg   ",
    "      GgGKGMMMTTMMMMMGKGGGGg   ",
    "       GgGGGGGTTGGGGGGGGGgg    ",
    "        GgggGGtTtGGGGGGGgg     ",
    "         GggGGtTtGGGGGGgg      ",
    "        lLLltttTTtttlLLl       ",
    "          GGgtTTtgGG          ",
    "           GgtTTtgG           ",
    "         lLLltTTt             ",
    "             tTTtlLLl         ",
    "             tTTt             ",
    "  DDDDDDDDDDDDtTTtDDDDDDDDDD  ",
];

/// Frame 3 — CHOMP. Eyes screwed to angry slits, mouth clamped shut
/// on the vine, forehead furrowed deep with the effort. The bite.
const GIANT_FRAME_3: &[&str] = &[
    "          hGGGGGGGGGGg        ",
    "        hGGGGGGGGGGGGGGGg      ",
    "       hGggggGGGGGGggggGGg     ",
    "      hGGGGgggGGGGgggGGGGGg    ",
    "      GGGGGGGggggggGGGGGGGg    ",
    "      GGBBBBGGGGGGGGBBBBGGg    ",
    "      GGGGBBBBGGGGBBBBGGGGGg   ",
    "      GGGBBBBBGGGGBBBBBGGGGg   ",
    "      GgGWPPWWGGggGWWPPWGGgg   ",
    "      GgGGWWWGGgggGGWWWGGGGg   ",
    "      GggGGGGGGGgggGGGGGGGgg   ",
    "      GggGKKGGGGGGGGKKGGGGgg   ",
    "      GgGKGGGGGGGGGGGGKGGGGg   ",
    "      GgGKMMMMMMMMMMMMKGGGGg   ",
    "       GgGGGGGTTGGGGGGGGGgg    ",
    "        GgggGGtTtGGGGGGGgg     ",
    "         GggGGtTtGGGGGGgg      ",
    "        lLLltttTTtttlLLl       ",
    "          GGgtTTtgGG          ",
    "           GgtTTtgG           ",
    "         lLLltTTt             ",
    "             tTTtlLLl         ",
    "             tTTt             ",
    "  DDDDDDDDDDDDtTTtDDDDDDDDDD  ",
];

/// Frame 4 — OPENING. Eyes widen back to a glare, mouth parting for
/// the next mouthful, the forehead furrow easing off.
const GIANT_FRAME_4: &[&str] = &[
    "          hGGGGGGGGGGg        ",
    "        hGGGGGGGGGGGGGGGg      ",
    "       hGGGGGGGGGGGGGGGGGg     ",
    "      hGGggggGGGGGGggggGGGg    ",
    "      GGGGGGGggggggGGGGGGGg    ",
    "      GGBBBBGGGGGGGGBBBBGGg    ",
    "      GGGGBBBBGGGGBBBBGGGGGg   ",
    "      GGGWWWWWGGGGWWWWWGGGGg   ",
    "      GgGWWPPWGGggGWWPPWGGgg   ",
    "      GgGWWWWWGgggGWWWWWGGGg   ",
    "      GggGGGGGGGgggGGGGGGGgg   ",
    "      GggGKKGGGGGGGGKKGGGGgg   ",
    "      GgGKGMMMLLMMMMMGKGGGGg   ",
    "      GgGKGMMMTTMMMMMGKGGGGg   ",
    "       GgGGGGGTTGGGGGGGGGgg    ",
    "        GgggGGtTtGGGGGGGgg     ",
    "         GggGGtTtGGGGGGgg      ",
    "        lLLltttTTtttlLLl       ",
    "          GGgtTTtgGG          ",
    "           GgtTTtgG           ",
    "         lLLltTTt             ",
    "             tTTtlLLl         ",
    "             tTTt             ",
    "  DDDDDDDDDDDDtTTtDDDDDDDDDD  ",
];

/// Map a pixel-art palette key to an RGB colour. `None` = a
/// transparent cell (rendered as two blank cells).
///
/// The giant's skin is a cool stone-grey — deliberately *not*
/// green, so the green beanstalk it's chomping stays visible as it
/// passes over the face / neck instead of disappearing into it.
fn splash_pixel(key: char) -> Option<(u8, u8, u8)> {
    Some(match key {
        'G' => (138, 142, 150), // giant skin — cool stone grey
        'g' => (92, 96, 106),   // giant skin shadow
        'h' => (176, 180, 188), // giant skin highlight
        'B' => (30, 34, 40),    // heavy brow
        'W' => (246, 246, 232), // eye white
        'P' => (222, 54, 46),   // pupil — angry red
        'M' => (52, 16, 22),    // mouth interior
        'K' => (240, 238, 216), // tusk
        'T' => (96, 188, 66),   // beanstalk stem — bright, pops on grey
        't' => (52, 124, 46),   // beanstalk stem shadow
        'L' => (146, 220, 96),  // leaf
        'l' => (78, 158, 60),   // leaf shadow
        'D' => (122, 88, 58),   // ground / dirt
        'd' => (82, 60, 40),    // dirt shadow
        _ => return None,
    })
}

/// Number of art rows in the giant scene (every frame is the same
/// height). Used by callers to size the splash card / about popup.
pub(crate) const GIANT_SCENE_ROWS: usize = GIANT_FRAME_1.len();

/// Build the coloured lines for the giant scene at `frame`. Each
/// non-transparent pixel is a **two-cell** `██` block in its palette
/// colour, so the logical pixels are roughly square. Used by the
/// boot splash and the `:about` overlay.
pub(crate) fn splash_giant_lines(frame: u64) -> Vec<ratatui::text::Line<'static>> {
    use ratatui::layout::Alignment;
    use ratatui::style::{Color, Style};
    use ratatui::text::{Line, Span};
    let frames = [GIANT_FRAME_1, GIANT_FRAME_2, GIANT_FRAME_3, GIANT_FRAME_4];
    // ~0.3 s per frame at 30 ms ticks — a brisk four-step tug cycle.
    let scene = frames[(frame as usize / 10) % frames.len()];
    // Pad every row to the widest row across ALL frames (not just the
    // current one) — a per-frame width would re-centre each frame and
    // make the whole sprite jitter sideways between frames.
    let width = frames
        .iter()
        .flat_map(|f| f.iter())
        .map(|r| r.chars().count())
        .max()
        .unwrap_or(0);
    scene
        .iter()
        .map(|row| {
            let chars: Vec<char> = row.chars().collect();
            let spans: Vec<Span> = (0..width)
                .map(|col| {
                    let key = chars.get(col).copied().unwrap_or(' ');
                    match splash_pixel(key) {
                        // Two cells per pixel → square logical pixels.
                        Some((r, g, b)) => {
                            Span::styled("██", Style::default().fg(Color::Rgb(r, g, b)))
                        }
                        None => Span::raw("  "),
                    }
                })
                .collect();
            Line::from(spans).alignment(Alignment::Center)
        })
        .collect()
}

/// Pure: whether the boot splash has room for the pixel-art giant
/// scene. Below this it falls back to the compact text-only card.
/// The thresholds match the scene-mode card (64×34).
pub(crate) fn splash_shows_scene(w: u16, h: u16) -> bool {
    w >= 68 && h >= 34
}

fn draw_splash(terminal: &mut Tui, frame: u64, icons: &str) -> Result<()> {
    use ratatui::layout::{Alignment, Constraint, Direction, Layout};
    use ratatui::style::{Color, Modifier, Style};
    use ratatui::text::{Line, Span};
    use ratatui::widgets::{Block, BorderType, Borders, Paragraph};

    terminal.draw(|f| {
        let area = f.area();
        let powerline = icons == "powerline";
        // Two tiers: a roomy terminal gets the pixel-art giant scene
        // above the text; a smaller one falls back to a compact
        // text-only card so the splash never overflows. The card is
        // sized to its content and centred.
        let show_scene = splash_shows_scene(area.width, area.height);
        // Card carries 2 rows of slack over its content so a future
        // text tweak can't silently clip.
        let (card_w, card_h): (u16, u16) = if show_scene { (64, 34) } else { (52, 9) };
        let v = Layout::default()
            .direction(Direction::Vertical)
            .constraints([
                Constraint::Min(0),
                Constraint::Length(card_h),
                Constraint::Min(0),
            ])
            .split(area);
        let h = Layout::default()
            .direction(Direction::Horizontal)
            .constraints([
                Constraint::Min(0),
                Constraint::Length(card_w),
                Constraint::Min(0),
            ])
            .split(v[1]);

        let mut lines: Vec<Line> = Vec::new();
        lines.push(Line::from(""));
        // 8-bit angry-giant-eats-the-beanstalk scene above the text.
        if show_scene {
            lines.extend(splash_giant_lines(frame));
            lines.push(Line::from(""));
        }
        // In Powerline mode (resolved by `font_probe` before this runs, so
        // the PUA glyphs are guaranteed to render here), wrap the tagline +
        // byline in rounded-cap pills and lead the tagline with a Nerd Font
        // cloud icon so the bottom half of the splash card carries the
        // same Powerline aesthetic as the rest of the app. Falls back to
        // plain text in Unicode / ASCII so users without a Nerd Font don't
        // get tofu on first launch.
        if powerline {
            let tag_bg = Color::Rgb(35, 45, 60);
            let tag_fg = Color::Rgb(170, 180, 200);
            let cloud = "\u{f0c2}"; // fa-cloud, stable across Nerd Font releases
            lines.push(
                Line::from(vec![
                    Span::styled("\u{e0b6}", Style::default().fg(tag_bg)),
                    Span::styled(
                        format!(" {cloud}  k9s-style TUI for AWS Elastic Beanstalk "),
                        Style::default().fg(tag_fg).bg(tag_bg),
                    ),
                    Span::styled("\u{e0b4}", Style::default().fg(tag_bg)),
                ])
                .alignment(Alignment::Center),
            );
            let by_bg = Color::Rgb(50, 40, 75);
            let by_fg = Color::Rgb(220, 195, 245);
            lines.push(
                Line::from(vec![
                    Span::styled("\u{e0b6}", Style::default().fg(by_bg)),
                    Span::styled(
                        " by Tom Baldwin · Polymorphism Ltd ",
                        Style::default().fg(by_fg).bg(by_bg),
                    ),
                    Span::styled("\u{e0b4}", Style::default().fg(by_bg)),
                ])
                .alignment(Alignment::Center),
            );
        } else {
            lines.push(
                Line::from(Span::styled(
                    "k9s-style TUI for AWS Elastic Beanstalk",
                    Style::default().fg(Color::Rgb(150, 155, 170)),
                ))
                .alignment(Alignment::Center),
            );
            lines.push(
                Line::from(Span::styled(
                    "by Tom Baldwin · Polymorphism Ltd",
                    Style::default().fg(Color::Rgb(180, 140, 230)),
                ))
                .alignment(Alignment::Center),
            );
        }
        lines.push(Line::from(""));
        // Spinner + dot-cycle so "connecting" feels alive even when the SDK is
        // taking its time.
        // Spinner: advance every 3 frames → ~10 fps spin at 30 ms ticks.
        // Dots: advance every 8 frames → ~240 ms per dot.
        let spinner = SPLASH_SPINNER[(frame as usize / 3) % SPLASH_SPINNER.len()];
        let dots = ".".repeat((frame as usize / 8) % 4);
        lines.push(
            Line::from(Span::styled(
                format!("{spinner} connecting to AWS{dots}"),
                Style::default()
                    .fg(Color::Rgb(255, 200, 120))
                    .add_modifier(Modifier::BOLD),
            ))
            .alignment(Alignment::Center),
        );

        // One-shot border glow: warms cyan → magenta → cyan over the
        // first ~1 s of the splash, then settles to cyan.
        const BORDER_SPOTLIGHT_FRAMES: f64 = 33.0;
        let border_phase = (frame as f64 / BORDER_SPOTLIGHT_FRAMES).clamp(0.0, 1.0);
        // Triangle: 0 → 1 → 0 across the pass.
        let border_glow = if border_phase < 0.5 {
            border_phase * 2.0
        } else {
            (1.0 - border_phase) * 2.0
        };
        let border_hue = 180.0 + border_glow * 120.0;
        let (br, bg, bb) = hsl_to_rgb(border_hue, 0.60, 0.65);
        let mut block = Block::default()
            .borders(Borders::ALL)
            .border_type(BorderType::Rounded)
            .border_style(Style::default().fg(Color::Rgb(br, bg, bb)));
        // In Powerline mode, embed a `v{VERSION}` pill on the top border so
        // the card reads as a labelled tab. Pill bg sits on top of the
        // border line; rounded caps complete the tab shape. Falls back to
        // no title in Unicode / ASCII to avoid PUA glyph tofu.
        if powerline {
            let tab_bg = Color::Rgb(60, 50, 80);
            let tab_fg = Color::Rgb(220, 200, 250);
            let version = format!(" v{} ", env!("CARGO_PKG_VERSION"));
            let title = Line::from(vec![
                Span::styled("\u{e0b6}", Style::default().fg(tab_bg)),
                Span::styled(
                    version,
                    Style::default()
                        .fg(tab_fg)
                        .bg(tab_bg)
                        .add_modifier(Modifier::BOLD),
                ),
                Span::styled("\u{e0b4}", Style::default().fg(tab_bg)),
            ]);
            block = block.title(title).title_alignment(Alignment::Center);
        }
        f.render_widget(Paragraph::new(lines).block(block), h[1]);
    })?;
    Ok(())
}

/// Standard HSL → RGB. `h` in degrees 0-360, `s` and `l` in 0.0-1.0.
fn hsl_to_rgb(h: f64, s: f64, l: f64) -> (u8, u8, u8) {
    let h = h.rem_euclid(360.0);
    let c = (1.0 - (2.0 * l - 1.0).abs()) * s;
    let h_prime = h / 60.0;
    let x = c * (1.0 - (h_prime.rem_euclid(2.0) - 1.0).abs());
    let (r1, g1, b1) = if h_prime < 1.0 {
        (c, x, 0.0)
    } else if h_prime < 2.0 {
        (x, c, 0.0)
    } else if h_prime < 3.0 {
        (0.0, c, x)
    } else if h_prime < 4.0 {
        (0.0, x, c)
    } else if h_prime < 5.0 {
        (x, 0.0, c)
    } else {
        (c, 0.0, x)
    };
    let m = l - c / 2.0;
    let to_u8 = |v: f64| ((v + m) * 255.0).round().clamp(0.0, 255.0) as u8;
    (to_u8(r1), to_u8(g1), to_u8(b1))
}

fn enter_tui() -> Result<Tui> {
    enable_raw_mode()?;
    let mut stdout = io::stdout();
    execute!(stdout, EnterAlternateScreen, EnableMouseCapture)?;
    Ok(Terminal::new(CrosstermBackend::new(stdout))?)
}

fn leave_tui(terminal: &mut Tui) -> Result<()> {
    disable_raw_mode()?;
    execute!(
        terminal.backend_mut(),
        LeaveAlternateScreen,
        DisableMouseCapture
    )?;
    terminal.show_cursor()?;
    Ok(())
}

fn install_panic_hook() {
    let original = panic::take_hook();
    panic::set_hook(Box::new(move |info| {
        let _ = disable_raw_mode();
        let _ = execute!(io::stdout(), LeaveAlternateScreen, DisableMouseCapture);
        write_crash_report(info);
        original(info);
    }));
}

fn write_crash_report(info: &panic::PanicHookInfo<'_>) {
    let dir = util::cache_dir();
    if std::fs::create_dir_all(&dir).is_err() {
        return;
    }
    prune_old_crash_reports(&dir, MAX_CRASH_REPORTS);
    let ts = chrono::Utc::now().format("%Y%m%dT%H%M%SZ");
    let path = dir.join(format!("crash-{ts}.log"));
    let location = info
        .location()
        .map(|l| format!("{}:{}:{}", l.file(), l.line(), l.column()))
        .unwrap_or_else(|| "unknown".into());
    let payload = info
        .payload()
        .downcast_ref::<&str>()
        .map(|s| (*s).to_string())
        .or_else(|| info.payload().downcast_ref::<String>().cloned())
        .unwrap_or_else(|| "<non-string panic payload>".into());
    let backtrace = std::backtrace::Backtrace::force_capture();
    let report = format!(
        "ebman {} crashed at {ts}\n\
         location: {location}\n\
         payload:  {payload}\n\
         \n--- backtrace ---\n{backtrace}\n",
        env!("CARGO_PKG_VERSION")
    );
    let _ = std::fs::write(&path, report);
    eprintln!("ebman: crash report written to {}", path.display());
}

/// Keep at most `keep` of the oldest `crash-*.log` files in `dir`. Anything
/// older is deleted. Best-effort; any I/O error is silently ignored so the
/// crash hook stays minimal.
const MAX_CRASH_REPORTS: usize = 10;
/// Crash reports older than this are deleted regardless of the count cap.
/// Old crash logs become unactionable quickly — keep a month's window so we
/// catch repeat-offender bugs but don't accumulate forever.
const CRASH_REPORT_MAX_AGE_DAYS: u64 = 30;

fn prune_old_crash_reports(dir: &std::path::Path, keep: usize) {
    let Ok(entries) = std::fs::read_dir(dir) else {
        return;
    };
    let mut crashes: Vec<std::path::PathBuf> = entries
        .filter_map(|e| e.ok())
        .map(|e| e.path())
        .filter(|p| {
            p.file_name()
                .and_then(|n| n.to_str())
                .map(|n| n.starts_with("crash-") && n.ends_with(".log"))
                .unwrap_or(false)
        })
        .collect();
    // Age-based purge: drop anything older than CRASH_REPORT_MAX_AGE_DAYS
    // even if we're under the count cap. Old crashes are seldom useful.
    let age_cutoff = std::time::SystemTime::now()
        .checked_sub(std::time::Duration::from_secs(
            CRASH_REPORT_MAX_AGE_DAYS * 24 * 3600,
        ))
        .unwrap_or(std::time::UNIX_EPOCH);
    crashes.retain(|p| {
        let too_old = std::fs::metadata(p)
            .and_then(|m| m.modified())
            .map(|t| t < age_cutoff)
            .unwrap_or(false);
        if too_old {
            let _ = std::fs::remove_file(p);
        }
        !too_old
    });
    if crashes.len() < keep {
        return;
    }
    // Sort by filename — the timestamp is part of the name, so lexicographic
    // order matches chronological order. Drop everything before the tail.
    crashes.sort();
    let drop_count = crashes.len().saturating_sub(keep - 1);
    for p in crashes.into_iter().take(drop_count) {
        let _ = std::fs::remove_file(p);
    }
}

fn init_logging() -> Result<LogReloadHandle> {
    let log_dir = dirs_log_dir();
    std::fs::create_dir_all(&log_dir).ok();
    let file_appender = tracing_appender::rolling::never(log_dir, "ebman.log");

    let env_filter = EnvFilter::try_from_default_env()
        .unwrap_or_else(|_| EnvFilter::new("info,aws=warn,hyper=warn"));
    let (filter_layer, handle) = reload::Layer::new(env_filter);

    let fmt_layer = tracing_subscriber::fmt::layer()
        .with_writer(file_appender)
        .with_ansi(false);

    tracing_subscriber::registry()
        .with(filter_layer)
        .with(fmt_layer)
        .init();

    Ok(handle)
}

fn dirs_log_dir() -> std::path::PathBuf {
    util::cache_dir()
}

#[cfg(test)]
mod tests {
    use super::{
        cli_esc, hsl_to_rgb, prune_old_crash_reports, splash_giant_lines, splash_pixel,
        splash_shows_scene, GIANT_FRAME_1, GIANT_FRAME_2, GIANT_FRAME_3, GIANT_FRAME_4,
    };

    #[test]
    fn splash_shows_scene_gates_on_terminal_size() {
        // Roomy → scene.
        assert!(splash_shows_scene(120, 50));
        assert!(splash_shows_scene(68, 34)); // exact threshold
                                             // Too narrow / too short → text-only fallback.
        assert!(!splash_shows_scene(67, 50));
        assert!(!splash_shows_scene(120, 33));
        assert!(!splash_shows_scene(40, 20));
    }

    #[test]
    fn cli_esc_escapes_quotes_and_backslashes() {
        assert_eq!(cli_esc("hello"), "hello");
        assert_eq!(cli_esc("a\"b"), "a\\\"b");
        assert_eq!(cli_esc("a\\b"), "a\\\\b");
    }

    #[test]
    fn splash_pixel_maps_keys_and_treats_space_as_transparent() {
        // Every key used in the art frames must resolve to a colour.
        for frame in [GIANT_FRAME_1, GIANT_FRAME_2, GIANT_FRAME_3, GIANT_FRAME_4] {
            for row in frame {
                for ch in row.chars() {
                    if ch != ' ' {
                        assert!(
                            splash_pixel(ch).is_some(),
                            "art key '{ch}' has no palette entry"
                        );
                    }
                }
            }
        }
        assert_eq!(splash_pixel(' '), None);
    }

    #[test]
    fn all_giant_frames_are_the_same_height() {
        // Frames must agree on row count — the head silhouette is
        // meant to stay fixed while only the expressive rows change.
        let h = GIANT_FRAME_1.len();
        for f in [GIANT_FRAME_2, GIANT_FRAME_3, GIANT_FRAME_4] {
            assert_eq!(f.len(), h, "frame height mismatch");
        }
    }

    #[test]
    fn splash_giant_frames_render_identical_width() {
        // Every frame must render to the same total cell width, or
        // centre-alignment shifts the sprite sideways between frames
        // (a visible jitter). Guards the global-width padding.
        let line_w = |l: &ratatui::text::Line| -> usize {
            l.spans.iter().map(|s| s.content.chars().count()).sum()
        };
        let widths: Vec<usize> = [0_u64, 10, 20, 30]
            .iter()
            .map(|&f| {
                let ls = splash_giant_lines(f);
                // Every row within a frame is already the same width;
                // sample the first.
                line_w(&ls[0])
            })
            .collect();
        assert!(
            widths.iter().all(|&w| w == widths[0]),
            "frames render at differing widths: {widths:?}"
        );
    }

    #[test]
    fn splash_giant_lines_renders_full_scene_and_animates() {
        // Include the foreground colour, not just the glyph — the
        // frames animate by recolouring cells (eyes glare↔slits,
        // mouth open↔shut), so a glyph-only compare would miss it.
        let render = |ls: &[ratatui::text::Line]| {
            ls.iter()
                .map(|l| {
                    l.spans
                        .iter()
                        .map(|s| format!("{:?}{}", s.style.fg, s.content))
                        .collect::<String>()
                })
                .collect::<Vec<_>>()
        };
        // Every frame renders every art row.
        let f1 = splash_giant_lines(0);
        assert_eq!(f1.len(), GIANT_FRAME_1.len());
        // The four cycle slots are not all identical — it animates.
        let f2 = render(&splash_giant_lines(10));
        let f3 = render(&splash_giant_lines(20));
        let f4 = render(&splash_giant_lines(30));
        let f1r = render(&f1);
        assert!(
            f1r != f2 || f1r != f3 || f1r != f4,
            "frames should differ — scene is not animating"
        );
        // The 4-frame cycle wraps back to frame 1.
        assert_eq!(render(&splash_giant_lines(40)), f1r);
        // Square pixels: a painted cell is the two-block "██".
        assert!(f1
            .iter()
            .flat_map(|l| l.spans.iter())
            .any(|s| s.content.as_ref() == "██"));
    }

    #[test]
    fn hsl_to_rgb_red() {
        let (r, g, b) = hsl_to_rgb(0.0, 1.0, 0.5);
        assert_eq!((r, g, b), (255, 0, 0));
    }

    #[test]
    fn hsl_to_rgb_cyan_and_magenta() {
        let (r, g, b) = hsl_to_rgb(180.0, 1.0, 0.5);
        assert_eq!((r, g, b), (0, 255, 255));
        let (r, g, b) = hsl_to_rgb(300.0, 1.0, 0.5);
        assert_eq!((r, g, b), (255, 0, 255));
    }

    #[test]
    fn prune_old_crash_reports_keeps_newest() {
        let dir = std::env::temp_dir().join(format!("ebman-prune-{}", std::process::id()));
        let _ = std::fs::remove_dir_all(&dir);
        std::fs::create_dir_all(&dir).unwrap();
        // Names sort lexicographically the same as chronologically.
        let names = [
            "crash-20260101T000000Z.log",
            "crash-20260102T000000Z.log",
            "crash-20260103T000000Z.log",
            "crash-20260104T000000Z.log",
            "crash-20260105T000000Z.log",
        ];
        for n in names {
            std::fs::write(dir.join(n), b"x").unwrap();
        }
        // Also drop in an unrelated file — must not be touched.
        std::fs::write(dir.join("not-a-crash.log"), b"y").unwrap();
        // keep=3 means "after the about-to-be-written report, total ≤ 3".
        // So with 5 existing files, the 3 oldest are dropped to make room.
        prune_old_crash_reports(&dir, 3);
        assert!(!dir.join(names[0]).exists());
        assert!(!dir.join(names[1]).exists());
        assert!(!dir.join(names[2]).exists());
        assert!(dir.join(names[3]).exists());
        assert!(dir.join(names[4]).exists());
        assert!(dir.join("not-a-crash.log").exists());
        let _ = std::fs::remove_dir_all(&dir);
    }

    #[test]
    fn prune_old_crash_reports_under_limit_is_noop() {
        let dir = std::env::temp_dir().join(format!("ebman-prune-under-{}", std::process::id()));
        let _ = std::fs::remove_dir_all(&dir);
        std::fs::create_dir_all(&dir).unwrap();
        std::fs::write(dir.join("crash-2026.log"), b"x").unwrap();
        prune_old_crash_reports(&dir, 5);
        assert!(dir.join("crash-2026.log").exists());
        let _ = std::fs::remove_dir_all(&dir);
    }

    #[test]
    fn prune_old_crash_reports_drops_files_past_ttl() {
        let dir = std::env::temp_dir().join(format!("ebman-prune-ttl-{}", std::process::id()));
        let _ = std::fs::remove_dir_all(&dir);
        std::fs::create_dir_all(&dir).unwrap();
        let fresh = dir.join("crash-fresh.log");
        let stale = dir.join("crash-stale.log");
        std::fs::write(&fresh, b"x").unwrap();
        std::fs::write(&stale, b"x").unwrap();
        // Backdate the "stale" file's mtime to 60 days ago — past the
        // 30-day TTL the pruner enforces.
        let past = std::time::SystemTime::now() - std::time::Duration::from_secs(60 * 24 * 3600);
        let file = std::fs::File::open(&stale).unwrap();
        file.set_modified(past).unwrap();
        drop(file);
        // Under count cap (10) so age is the only reason to prune.
        prune_old_crash_reports(&dir, 10);
        assert!(fresh.exists(), "fresh file should survive");
        assert!(!stale.exists(), "stale file should be deleted by TTL");
        let _ = std::fs::remove_dir_all(&dir);
    }

    #[test]
    fn hsl_to_rgb_clamps_to_valid_range() {
        // u8 enforces 0..=255 by type, so additionally assert that moderate-saturation
        // mid-lightness inputs produce visible (non-collapsed) outputs across the wheel,
        // and that hue is wrapped modulo 360 (h=-30 should equal h=330).
        for h in [-30.0, 0.0, 90.0, 180.0, 270.0, 360.0, 720.0] {
            let (r, g, b) = hsl_to_rgb(h, 0.7, 0.65);
            let max = r.max(g).max(b);
            let min = r.min(g).min(b);
            assert!(max > min, "hue {h} collapsed to greyscale");
        }
        assert_eq!(hsl_to_rgb(-30.0, 0.7, 0.65), hsl_to_rgb(330.0, 0.7, 0.65));
        assert_eq!(hsl_to_rgb(0.0, 0.7, 0.65), hsl_to_rgb(360.0, 0.7, 0.65));
        // Zero saturation collapses to greyscale at lightness * 255.
        let (r, g, b) = hsl_to_rgb(123.0, 0.0, 0.5);
        assert_eq!(r, g);
        assert_eq!(g, b);
    }
}