terraphim_update 1.16.33

//! Shared auto-update functionality for Terraphim AI binaries
//!
//! This crate provides a unified interface for self-updating Terraphim AI CLI tools
//! using GitHub Releases as a distribution channel.

pub mod config;
pub mod downloader;
pub mod notification;
pub mod platform;
pub mod rollback;
pub mod scheduler;
pub mod signature;
pub mod state;

use anyhow::{Context, Result, anyhow};
use base64::Engine;
use self_update::cargo_crate_version;
use self_update::version::bump_is_greater;
use std::fmt;
use std::fs;
use std::path::{Path, PathBuf};
use tempfile::NamedTempFile;
use tracing::{error, info, warn};

/// Represents the status of an update operation
#[derive(Debug, Clone)]
pub enum UpdateStatus {
    /// No update available - already running latest version
    UpToDate(String),
    /// Update available and successfully installed
    Updated {
        from_version: String,
        to_version: String,
    },
    /// Update available but not installed
    Available {
        current_version: String,
        latest_version: String,
    },
    /// Update failed with error
    Failed(String),
}

/// Compare two version strings to determine if the first is newer than the second
/// Static version that can be called from blocking contexts
/// Uses semver crate for proper semantic versioning comparison
fn is_newer_version_static(version1: &str, version2: &str) -> Result<bool, anyhow::Error> {
    use semver::Version;

    let v1 = Version::parse(version1.trim_start_matches('v'))
        .map_err(|e| anyhow::anyhow!("Invalid version '{}': {}", version1, e))?;

    let v2 = Version::parse(version2.trim_start_matches('v'))
        .map_err(|e| anyhow::anyhow!("Invalid version '{}': {}", version2, e))?;

    Ok(v1 > v2)
}

impl fmt::Display for UpdateStatus {
    fn fmt(&self, f: &mut fmt::Formatter<'_>) -> fmt::Result {
        match self {
            UpdateStatus::UpToDate(version) => {
                write!(f, "[OK] Already running latest version: {}", version)
            }
            UpdateStatus::Updated {
                from_version,
                to_version,
            } => {
                write!(f, "Updated: from {} to {}", from_version, to_version)
            }
            UpdateStatus::Available {
                current_version,
                latest_version,
            } => {
                write!(
                    f,
                    "Update available: {} → {}",
                    current_version, latest_version
                )
            }
            UpdateStatus::Failed(error) => {
                write!(f, "[ERROR] Update failed: {}", error)
            }
        }
    }
}

/// Configuration for the updater
#[derive(Debug, Clone)]
pub struct UpdaterConfig {
    /// Name of the binary (e.g., "terraphim_server")
    pub bin_name: String,
    /// GitHub repository owner (e.g., "terraphim")
    pub repo_owner: String,
    /// GitHub repository name (e.g., "terraphim-ai")
    pub repo_name: String,
    /// Current version of the binary
    pub current_version: String,
    /// Whether to show download progress
    pub show_progress: bool,
}

impl UpdaterConfig {
    /// Create a new updater config for Terraphim AI binaries
    pub fn new(bin_name: impl Into<String>) -> Self {
        Self {
            bin_name: bin_name.into(),
            repo_owner: "terraphim".to_string(),
            repo_name: "terraphim-ai".to_string(),
            current_version: cargo_crate_version!().to_string(),
            show_progress: true,
        }
    }

    /// Set a custom current version (useful for testing)
    pub fn with_version(mut self, version: impl Into<String>) -> Self {
        self.current_version = version.into();
        self
    }

    /// Enable or disable progress display
    pub fn with_progress(mut self, show: bool) -> Self {
        self.show_progress = show;
        self
    }
}

/// Updater client for Terraphim AI binaries
pub struct TerraphimUpdater {
    config: UpdaterConfig,
}

impl TerraphimUpdater {
    /// Create a new updater instance
    pub fn new(config: UpdaterConfig) -> Self {
        Self { config }
    }

    /// Check if an update is available without installing
    pub async fn check_update(&self) -> Result<UpdateStatus> {
        info!(
            "Checking for updates: {} v{}",
            self.config.bin_name, self.config.current_version
        );

        // Clone data for the blocking task
        let repo_owner = self.config.repo_owner.clone();
        let repo_name = self.config.repo_name.clone();
        let bin_name = self.config.bin_name.clone();
        let current_version = self.config.current_version.clone();
        let show_progress = self.config.show_progress;

        // Move self_update operations to a blocking task to avoid runtime conflicts
        let result = tokio::task::spawn_blocking(move || {
            // Normalize binary name for asset lookup (underscores to hyphens)
            let bin_name_for_asset = bin_name.replace('_', "-");

            // Check if update is available
            let mut builder = self_update::backends::github::Update::configure();
            builder.repo_owner(&repo_owner);
            builder.repo_name(&repo_name);
            builder.bin_name(&bin_name_for_asset); // Use hyphenated name for asset lookup
            builder.current_version(&current_version);
            builder.show_download_progress(show_progress);

            // Set custom install path to preserve underscore naming
            builder.bin_install_path(format!("/usr/local/bin/{}", bin_name));

            match builder.build() {
                Ok(updater) => {
                    // This will check without updating
                    match updater.get_latest_release() {
                        Ok(release) => {
                            let latest_version = release.version.clone();

                            // Compare versions using semver
                            match is_newer_version_static(&latest_version, &current_version) {
                                Ok(true) => {
                                    Ok::<UpdateStatus, anyhow::Error>(UpdateStatus::Available {
                                        current_version,
                                        latest_version,
                                    })
                                }
                                Ok(false) => Ok::<UpdateStatus, anyhow::Error>(
                                    UpdateStatus::UpToDate(current_version),
                                ),
                                Err(e) => Err(e),
                            }
                        }
                        Err(e) => Ok(UpdateStatus::Failed(format!("Check failed: {}", e))),
                    }
                }
                Err(e) => Ok(UpdateStatus::Failed(format!("Configuration error: {}", e))),
            }
        })
        .await;

        match result {
            Ok(update_result) => {
                match update_result {
                    Ok(status) => {
                        // Log the result for debugging
                        match &status {
                            UpdateStatus::Available {
                                current_version,
                                latest_version,
                            } => {
                                info!(
                                    "Update available: {} -> {}",
                                    current_version, latest_version
                                );
                            }
                            UpdateStatus::UpToDate(version) => {
                                info!("Already up to date: {}", version);
                            }
                            UpdateStatus::Updated {
                                from_version,
                                to_version,
                            } => {
                                info!(
                                    "Successfully updated from {} to {}",
                                    from_version, to_version
                                );
                            }
                            UpdateStatus::Failed(error) => {
                                error!("Update check failed: {}", error);
                            }
                        }
                        Ok(status)
                    }
                    Err(e) => {
                        error!("Blocking task failed: {}", e);
                        Ok(UpdateStatus::Failed(format!("Blocking task error: {}", e)))
                    }
                }
            }
            Err(e) => {
                error!("Failed to spawn blocking task: {}", e);
                Ok(UpdateStatus::Failed(format!("Task spawn error: {}", e)))
            }
        }
    }

    /// Update the binary to the latest version
    pub async fn update(&self) -> Result<UpdateStatus> {
        info!(
            "Updating {} from version {}",
            self.config.bin_name, self.config.current_version
        );

        // Clone data for the blocking task
        let repo_owner = self.config.repo_owner.clone();
        let repo_name = self.config.repo_name.clone();
        let bin_name = self.config.bin_name.clone();
        let current_version = self.config.current_version.clone();
        let show_progress = self.config.show_progress;

        // Decode the embedded public key for signature verification
        let key_bytes = base64::engine::general_purpose::STANDARD
            .decode(signature::get_embedded_public_key())
            .context("Failed to decode public key")?;

        // Convert to array (must be exactly 32 bytes for Ed25519)
        if key_bytes.len() != 32 {
            return Err(anyhow!(
                "Invalid public key length: {} bytes (expected 32)",
                key_bytes.len()
            ));
        }
        let mut key_array = [0u8; 32];
        key_array.copy_from_slice(&key_bytes);

        // Move self_update operations to a blocking task to avoid runtime conflicts
        let result = tokio::task::spawn_blocking(move || {
            // Normalize binary name for asset lookup (underscores to hyphens)
            let bin_name_for_asset = bin_name.replace('_', "-");

            // Build the updater with signature verification enabled
            let mut builder = self_update::backends::github::Update::configure();
            builder.repo_owner(&repo_owner);
            builder.repo_name(&repo_name);
            builder.bin_name(&bin_name_for_asset); // Use hyphenated name for asset lookup
            builder.current_version(&current_version);
            builder.show_download_progress(show_progress);
            builder.verifying_keys(vec![key_array]); // Enable signature verification

            // Set custom install path to preserve underscore naming
            builder.bin_install_path(format!("/usr/local/bin/{}", bin_name));

            match builder.build() {
                Ok(updater) => match updater.update() {
                    Ok(status) => match status {
                        self_update::Status::UpToDate(version) => {
                            Ok::<UpdateStatus, anyhow::Error>(UpdateStatus::UpToDate(version))
                        }
                        self_update::Status::Updated(version) => {
                            Ok::<UpdateStatus, anyhow::Error>(UpdateStatus::Updated {
                                from_version: current_version,
                                to_version: version,
                            })
                        }
                    },
                    Err(e) => Ok(UpdateStatus::Failed(format!("Update failed: {}", e))),
                },
                Err(e) => Ok(UpdateStatus::Failed(format!("Configuration error: {}", e))),
            }
        })
        .await;

        match result {
            Ok(update_result) => {
                match update_result {
                    Ok(status) => {
                        // Log the result for debugging
                        match &status {
                            UpdateStatus::Updated {
                                from_version,
                                to_version,
                            } => {
                                info!(
                                    "Successfully updated from {} to {}",
                                    from_version, to_version
                                );
                            }
                            UpdateStatus::UpToDate(version) => {
                                info!("Already up to date: {}", version);
                            }
                            UpdateStatus::Available {
                                current_version,
                                latest_version,
                            } => {
                                info!(
                                    "Update available: {} -> {}",
                                    current_version, latest_version
                                );
                            }
                            UpdateStatus::Failed(error) => {
                                error!("Update failed: {}", error);
                            }
                        }
                        Ok(status)
                    }
                    Err(e) => {
                        error!("Blocking task failed: {}", e);
                        Ok(UpdateStatus::Failed(format!("Blocking task error: {}", e)))
                    }
                }
            }
            Err(e) => {
                error!("Failed to spawn blocking task: {}", e);
                Ok(UpdateStatus::Failed(format!("Task spawn error: {}", e)))
            }
        }
    }

    /// Update the binary with signature verification
    ///
    /// This method implements a manual download, verify, and install flow
    /// to ensure that only signed and verified binaries are installed.
    ///
    /// # Returns
    /// * `Ok(UpdateStatus)` - Status of the update operation
    /// * `Err(anyhow::Error)` - Error if update fails
    ///
    /// # Process
    /// 1. Get latest release info from GitHub
    /// 2. Download the release archive to a temp location
    /// 3. Verify the Ed25519 signature using zipsign-api
    /// 4. Install if valid, reject if invalid/missing signature
    ///
    /// # Security
    /// - Rejects updates with invalid signatures
    /// - Rejects updates with missing signatures
    /// - Only installs verified binaries
    pub async fn update_with_verification(&self) -> Result<UpdateStatus> {
        info!(
            "Updating {} from version {} with signature verification",
            self.config.bin_name, self.config.current_version
        );

        // Clone data for the blocking task
        let repo_owner = self.config.repo_owner.clone();
        let repo_name = self.config.repo_name.clone();
        let bin_name = self.config.bin_name.clone();
        let current_version = self.config.current_version.clone();
        let show_progress = self.config.show_progress;

        // Move self_update operations to a blocking task
        let result = tokio::task::spawn_blocking(move || {
            Self::update_with_verification_blocking(
                &repo_owner,
                &repo_name,
                &bin_name,
                &current_version,
                show_progress,
            )
        })
        .await;

        match result {
            Ok(Ok(update_status)) => {
                match &update_status {
                    UpdateStatus::Updated {
                        from_version,
                        to_version,
                    } => {
                        info!(
                            "Successfully updated from {} to {} with verified signature",
                            from_version, to_version
                        );
                    }
                    UpdateStatus::UpToDate(version) => {
                        info!("Already up to date: {}", version);
                    }
                    UpdateStatus::Failed(error) => {
                        error!("Update with verification failed: {}", error);
                    }
                    _ => {}
                }
                Ok(update_status)
            }
            Ok(Err(e)) => {
                error!("Blocking task returned error: {}", e);
                Ok(UpdateStatus::Failed(format!("Update error: {}", e)))
            }
            Err(e) => {
                error!("Blocking task failed: {}", e);
                Ok(UpdateStatus::Failed(format!("Task spawn error: {}", e)))
            }
        }
    }

    /// Blocking version of update_with_verification for use in spawn_blocking
    fn update_with_verification_blocking(
        repo_owner: &str,
        repo_name: &str,
        bin_name: &str,
        current_version: &str,
        show_progress: bool,
    ) -> Result<UpdateStatus> {
        info!(
            "Starting verified update flow for {} v{}",
            bin_name, current_version
        );

        // Step 1: Get latest release info from GitHub
        let release =
            match Self::get_latest_release_info(repo_owner, repo_name, bin_name, current_version) {
                Ok(release) => release,
                Err(e) => {
                    return Ok(UpdateStatus::Failed(format!(
                        "Failed to get release info: {}",
                        e
                    )));
                }
            };

        let latest_version = &release.version;

        // Step 2: Download archive to temp location
        let temp_archive = match Self::download_release_archive(
            repo_owner,
            repo_name,
            bin_name,
            latest_version,
            show_progress,
        ) {
            Ok(archive) => archive,
            Err(e) => {
                return Ok(UpdateStatus::Failed(format!(
                    "Failed to download archive: {}",
                    e
                )));
            }
        };

        let archive_path = temp_archive.path().to_path_buf();

        // Step 3: Verify signature BEFORE installation
        info!("Verifying signature for archive {:?}", archive_path);
        let verification_result =
            match crate::signature::verify_archive_signature(&archive_path, None) {
                Ok(result) => result,
                Err(e) => return Ok(UpdateStatus::Failed(format!("Verification error: {}", e))),
            };

        match verification_result {
            crate::signature::VerificationResult::Valid => {
                info!("Signature verification passed - proceeding with installation");
            }
            crate::signature::VerificationResult::Invalid { reason } => {
                let error_msg = format!("Signature verification failed: {}", reason);
                error!("{}", error_msg);
                return Ok(UpdateStatus::Failed(error_msg));
            }
            crate::signature::VerificationResult::MissingSignature => {
                warn!(
                    "No signature found in archive - proceeding without verification. \
                       Archives will be signed in a future release."
                );
            }
            crate::signature::VerificationResult::Error(msg) => {
                let error_msg = format!("Verification error: {}", msg);
                error!("{}", error_msg);
                return Ok(UpdateStatus::Failed(error_msg));
            }
        }

        // Step 4: Install the verified archive
        match Self::install_verified_archive(&archive_path, bin_name) {
            Ok(_) => {
                info!("Successfully installed verified update");
                Ok(UpdateStatus::Updated {
                    from_version: current_version.to_string(),
                    to_version: latest_version.clone(),
                })
            }
            Err(e) => Ok(UpdateStatus::Failed(format!("Installation failed: {}", e))),
        }
    }

    /// Get latest release info from GitHub
    fn get_latest_release_info(
        repo_owner: &str,
        repo_name: &str,
        bin_name: &str,
        current_version: &str,
    ) -> Result<self_update::update::Release> {
        info!(
            "Fetching latest release info for {}/{}",
            repo_owner, repo_name
        );

        // Normalize binary name for asset lookup (underscores to hyphens)
        let bin_name_for_asset = bin_name.replace('_', "-");

        let mut builder = self_update::backends::github::Update::configure();
        builder.repo_owner(repo_owner);
        builder.repo_name(repo_name);
        builder.bin_name(&bin_name_for_asset); // Use hyphenated name for asset lookup
        builder.current_version(current_version);

        // Set custom install path to preserve underscore naming
        builder.bin_install_path(format!("/usr/local/bin/{}", bin_name));

        let updater = builder.build()?;

        let release = updater.get_latest_release()?;

        // Check if the latest version is actually newer
        #[allow(clippy::needless_borrow)]
        if !bump_is_greater(&current_version, &release.version)? {
            return Err(anyhow!(
                "Current version {} is up to date with {}",
                current_version,
                release.version
            ));
        }

        info!("Latest version: {}", release.version);
        Ok(release)
    }

    /// Download release archive to a temporary file with fallback support
    ///
    /// For Linux x86_64, tries GNU first, then falls back to MUSL if GNU is not available
    fn download_release_archive(
        repo_owner: &str,
        repo_name: &str,
        bin_name: &str,
        version: &str,
        show_progress: bool,
    ) -> Result<NamedTempFile> {
        // Normalize binary name (replace underscores with hyphens for GitHub releases)
        let bin_name_in_asset = bin_name.replace('_', "-");

        // Determine current platform and get list of targets to try (for fallback)
        let targets = Self::get_target_triples_with_fallback()?;

        // Try each target in order
        let mut last_error = None;

        for target in targets {
            // Try both raw binary and archive formats
            let asset_names = Self::get_asset_names(&bin_name_in_asset, &target, version);

            for asset_name in asset_names {
                // Construct download URL
                let version_tag = if version.starts_with('v') {
                    version.to_string()
                } else {
                    format!("v{}", version)
                };
                let download_url = format!(
                    "https://github.com/{}/{}/releases/download/{}/{}",
                    repo_owner, repo_name, version_tag, asset_name
                );

                info!("Trying to download from: {}", download_url);

                // Create temp file for download
                let temp_file = NamedTempFile::new()?;
                let download_config = crate::downloader::DownloadConfig {
                    show_progress,
                    ..Default::default()
                };

                match crate::downloader::download_with_retry(
                    &download_url,
                    temp_file.path(),
                    Some(download_config),
                ) {
                    Ok(_) => {
                        info!(
                            "Successfully downloaded {} to: {:?}",
                            asset_name,
                            temp_file.path()
                        );
                        return Ok(temp_file);
                    }
                    Err(e) => {
                        info!("Failed to download {}: {}", asset_name, e);
                        last_error = Some((asset_name, e));
                        // Continue to next asset/target
                    }
                }
            }
        }

        // All attempts failed
        let error_msg = if let Some((asset_name, e)) = last_error {
            format!(
                "Failed to download any asset. Last attempt '{}'. Error: {}. Available assets can be listed at: https://github.com/{}/{}/releases/tag/{}",
                asset_name, e, repo_owner, repo_name, version
            )
        } else {
            format!(
                "Failed to determine assets to download. Available assets can be listed at: https://github.com/{}/{}/releases/tag/{}",
                repo_owner, repo_name, version
            )
        };

        Err(anyhow!("{}", error_msg))
    }

    /// Get asset names to try for a given target
    /// Returns asset names in order of preference (archives with signatures first, then raw binaries)
    fn get_asset_names(bin_name: &str, target: &str, version: &str) -> Vec<String> {
        let mut assets = Vec::new();

        // Archive name with version comes FIRST (terraphim-agent-1.16.31-x86_64-unknown-linux-gnu.tar.gz)
        // Archives are signed and preferred for security verification
        let version_clean = version.trim_start_matches('v');
        let archive_name = format!("{}-{}-{}.tar.gz", bin_name, version_clean, target);
        assets.push(archive_name);

        // Raw binary name second (terraphim-agent-x86_64-unknown-linux-gnu)
        // Raw binaries may not have embedded signatures
        let raw_name = if cfg!(windows) {
            format!("{}.exe", target)
        } else {
            target.to_string()
        };
        assets.push(raw_name);

        // Also try zip for Windows
        if cfg!(windows) {
            let zip_name = format!("{}-{}-{}.zip", bin_name, version_clean, target);
            assets.push(zip_name);
        }

        assets
    }

    /// Get the target triples to try for the current platform
    ///
    /// For Linux x86_64, returns both GNU and MUSL variants (GNU first, MUSL fallback)
    fn get_target_triples_with_fallback() -> Result<Vec<String>> {
        use std::env::consts::{ARCH, OS};

        let target = format!("{}-{}", ARCH, OS);

        // Map Rust targets to common release naming conventions
        // For Linux x86_64, try GNU first, then MUSL as fallback
        let targets = match target.as_str() {
            "x86_64-linux" => vec![
                "x86_64-unknown-linux-gnu".to_string(),
                "x86_64-unknown-linux-musl".to_string(),
            ],
            "aarch64-linux" => vec![
                "aarch64-unknown-linux-gnu".to_string(),
                "aarch64-unknown-linux-musl".to_string(),
            ],
            "x86_64-windows" => vec!["x86_64-pc-windows-msvc".to_string()],
            "x86_64-macos" => vec!["x86_64-apple-darwin".to_string()],
            "aarch64-macos" => vec!["aarch64-apple-darwin".to_string()],
            _ => vec![target],
        };

        Ok(targets)
    }

    /// Install a verified archive to the current binary location
    fn install_verified_archive(archive_path: &Path, bin_name: &str) -> Result<()> {
        info!("Installing verified archive {:?}", archive_path);

        // Get current executable path
        let current_exe = std::env::current_exe()?;
        let install_dir = current_exe
            .parent()
            .ok_or_else(|| anyhow!("Cannot determine install directory"))?;

        info!("Installing to directory: {:?}", install_dir);

        // Check if the downloaded file is an archive or a raw binary
        let file_magic = std::fs::File::open(archive_path)?;
        let first_bytes = Self::read_file_magic(&file_magic)?;

        // Check file magic to determine if it's an archive or raw binary
        if Self::is_archive(&first_bytes) {
            info!("Detected archive format, extracting...");
            // Extract and install using self_update's extract functionality
            if cfg!(windows) {
                // Windows: extract ZIP
                Self::extract_zip(archive_path, install_dir)?;
            } else {
                // Unix: extract tar.gz
                Self::extract_tarball(archive_path, install_dir, bin_name)?;
            }
        } else {
            info!("Detected raw binary, copying directly...");
            // It's a raw binary, just copy it to the install location
            let normalized_bin_name = bin_name.replace('_', "-");
            let target_path = install_dir.join(&normalized_bin_name);

            info!("Copying binary to {:?}", target_path);
            std::fs::copy(archive_path, &target_path)?;

            // Also try the original bin_name in case the release uses underscores
            if normalized_bin_name != bin_name {
                let alt_path = install_dir.join(bin_name);
                if !alt_path.exists() {
                    std::fs::copy(archive_path, &alt_path)?;
                    info!("Also copied to {:?}", alt_path);
                }
            }
        }

        // Make executable on Unix
        #[cfg(unix)]
        {
            use std::os::unix::fs::PermissionsExt;
            for name in &[bin_name, &bin_name.replace('_', "-")] {
                let bin_path = install_dir.join(name);
                if bin_path.exists() {
                    let mut perms = fs::metadata(&bin_path)?.permissions();
                    perms.set_mode(0o755);
                    fs::set_permissions(&bin_path, perms)?;
                    info!("Made executable: {:?}", bin_path);
                }
            }
        }

        Ok(())
    }

    /// Read first few bytes of a file to detect format
    fn read_file_magic(file: &std::fs::File) -> Result<Vec<u8>> {
        use std::io::Read;
        let mut buffer = [0u8; 16];
        let mut handle = file.try_clone()?;
        handle.read_exact(&mut buffer)?;
        Ok(buffer.to_vec())
    }

    /// Check if bytes indicate an archive format
    fn is_archive(bytes: &[u8]) -> bool {
        // ZIP magic number: PK\x03\x04
        if bytes.starts_with(&[0x50, 0x4B, 0x03, 0x04]) {
            return true;
        }

        // gzip magic number: \x1f\x8b
        if bytes.starts_with(&[0x1F, 0x8B]) {
            return true;
        }

        false
    }

    /// Extract a ZIP archive to the target directory
    fn extract_zip(archive_path: &Path, target_dir: &Path) -> Result<()> {
        use zip::ZipArchive;

        let file = fs::File::open(archive_path)?;
        let mut archive = ZipArchive::new(file)?;

        for i in 0..archive.len() {
            let mut file = archive.by_index(i)?;
            #[allow(clippy::needless_borrows_for_generic_args)]
            let outpath = target_dir.join(file.mangled_name());

            if file.name().ends_with('/') {
                fs::create_dir_all(&outpath)?;
            } else {
                if let Some(parent) = outpath.parent() {
                    fs::create_dir_all(parent)?;
                }
                let mut outfile = fs::File::create(&outpath)?;
                std::io::copy(&mut file, &mut outfile)?;
            }
        }

        Ok(())
    }

    /// Extract a tar.gz archive to the target directory
    fn extract_tarball(archive_path: &Path, target_dir: &Path, bin_name: &str) -> Result<()> {
        use flate2::read::GzDecoder;
        use tar::Archive;

        let file = fs::File::open(archive_path)?;
        let decoder = GzDecoder::new(file);
        let mut archive = Archive::new(decoder);

        // Extract the binary from the archive
        // The binary should be at the root of the archive
        for entry in archive.entries()? {
            let mut entry = entry?;
            let path = entry.path()?;

            // Only extract the main binary, not directory structure
            if let Some(file_name) = path.file_name() {
                if file_name.to_str() == Some(bin_name) {
                    let outpath = target_dir.join(bin_name);
                    let mut outfile = fs::File::create(&outpath)?;
                    std::io::copy(&mut entry, &mut outfile)?;
                    info!("Extracted binary to {:?}", outpath);
                    break;
                }
            }
        }

        Ok(())
    }

    /// Check for update and install if available with signature verification
    pub async fn check_and_update(&self) -> Result<UpdateStatus> {
        match self.check_update().await? {
            UpdateStatus::Available {
                current_version,
                latest_version,
            } => {
                info!(
                    "Update available: {} → {}, installing...",
                    current_version, latest_version
                );
                self.update_with_verification().await
            }
            status => Ok(status),
        }
    }

    /// Compare two version strings to determine if the first is newer than the second
    #[allow(dead_code)]
    fn is_newer_version(&self, version1: &str, version2: &str) -> Result<bool> {
        // Simple version comparison - in production you might want to use semver crate
        let v1_parts: Vec<u32> = version1
            .trim_start_matches('v')
            .split('.')
            .take(3)
            .map(|s| s.parse().unwrap_or(0))
            .collect();

        let v2_parts: Vec<u32> = version2
            .trim_start_matches('v')
            .split('.')
            .take(3)
            .map(|s| s.parse().unwrap_or(0))
            .collect();

        // Pad with zeros if needed
        let v1 = [
            v1_parts.first().copied().unwrap_or(0),
            v1_parts.get(1).copied().unwrap_or(0),
            v1_parts.get(2).copied().unwrap_or(0),
        ];

        let v2 = [
            v2_parts.first().copied().unwrap_or(0),
            v2_parts.get(1).copied().unwrap_or(0),
            v2_parts.get(2).copied().unwrap_or(0),
        ];

        Ok(v1 > v2)
    }
}

/// Convenience function to create an updater and check for updates
pub async fn check_for_updates(bin_name: impl Into<String>) -> Result<UpdateStatus> {
    let config = UpdaterConfig::new(bin_name);
    let updater = TerraphimUpdater::new(config);
    updater.check_update().await
}

/// Convenience function to create an updater and install updates
pub async fn update_binary(bin_name: impl Into<String>) -> Result<UpdateStatus> {
    let config = UpdaterConfig::new(bin_name);
    let updater = TerraphimUpdater::new(config);
    updater.check_and_update().await
}

/// Convenience function with progress disabled (useful for automated environments)
pub async fn update_binary_silent(bin_name: impl Into<String>) -> Result<UpdateStatus> {
    let config = UpdaterConfig::new(bin_name).with_progress(false);
    let updater = TerraphimUpdater::new(config);
    updater.check_and_update().await
}

/// Check for updates automatically using self_update backend
///
/// This is a simplified function that leverages self_update's GitHub backend
/// to check for available updates without installing them.
///
/// # Arguments
/// * `bin_name` - Name of the binary (e.g., "terraphim")
/// * `current_version` - Current version of the binary (e.g., "1.0.0")
///
/// # Returns
/// * `Ok(UpdateStatus)` - Status indicating if an update is available
/// * `Err(anyhow::Error)` - Error if the check fails
///
/// # Example
/// ```no_run
/// use terraphim_update::check_for_updates_auto;
///
/// async {
///     let status = check_for_updates_auto("terraphim", "1.0.0").await?;
///     println!("Update status: {}", status);
///     Ok::<(), anyhow::Error>(())
/// };
/// ```
pub async fn check_for_updates_auto(bin_name: &str, current_version: &str) -> Result<UpdateStatus> {
    info!("Checking for updates: {} v{}", bin_name, current_version);

    let bin_name = bin_name.to_string();
    let current_version = current_version.to_string();

    let result = tokio::task::spawn_blocking(move || {
        // Normalize binary name for asset lookup (underscores to hyphens)
        let bin_name_for_asset = bin_name.replace('_', "-");

        let mut builder = self_update::backends::github::Update::configure();
        builder.repo_owner("terraphim");
        builder.repo_name("terraphim-ai");
        builder.bin_name(&bin_name_for_asset); // Use hyphenated name for asset lookup
        builder.current_version(&current_version);

        // Set custom install path to preserve underscore naming
        builder.bin_install_path(format!("/usr/local/bin/{}", bin_name));

        match builder.build() {
            Ok(updater) => match updater.get_latest_release() {
                Ok(release) => {
                    let latest_version = release.version.clone();

                    match is_newer_version_static(&latest_version, &current_version) {
                        Ok(true) => Ok::<UpdateStatus, anyhow::Error>(UpdateStatus::Available {
                            current_version,
                            latest_version,
                        }),
                        Ok(false) => Ok::<UpdateStatus, anyhow::Error>(UpdateStatus::UpToDate(
                            current_version,
                        )),
                        Err(e) => Err(e),
                    }
                }
                Err(e) => Ok(UpdateStatus::Failed(format!("Check failed: {}", e))),
            },
            Err(e) => Ok(UpdateStatus::Failed(format!("Configuration error: {}", e))),
        }
    })
    .await;

    match result {
        Ok(update_result) => update_result,
        Err(e) => {
            error!("Failed to spawn blocking task: {}", e);
            Ok(UpdateStatus::Failed(format!("Task spawn error: {}", e)))
        }
    }
}

/// Check for updates on application startup
///
/// This function performs a non-blocking update check on startup
/// and logs a warning if the check fails (doesn't interrupt startup).
///
/// # Arguments
/// * `bin_name` - Name of the binary (e.g., "terraphim-agent")
///
/// # Returns
/// * `Ok(UpdateStatus)` - Status of update check
/// * `Err(anyhow::Error)` - Error if check fails
///
/// # Example
/// ```no_run
/// use terraphim_update::check_for_updates_startup;
///
/// async {
///     if let Err(e) = check_for_updates_startup("terraphim-agent").await {
///         eprintln!("Update check failed: {}", e);
///     }
///     Ok::<(), anyhow::Error>(())
/// };
/// ```
pub async fn check_for_updates_startup(bin_name: &str) -> Result<UpdateStatus> {
    let current_version = env!("CARGO_PKG_VERSION");
    check_for_updates_auto(bin_name, current_version).await
}

/// Start the update scheduler
///
/// This function starts a background task that periodically checks for updates
/// and sends notifications through a callback when updates are available.
///
/// # Arguments
/// * `bin_name` - Name of the binary (e.g., "terraphim-agent")
/// * `current_version` - Current version of the binary
/// * `callback` - Function to call when an update is available
///
/// # Returns
/// * `Ok(JoinHandle<()>)` - Handle to the scheduler task (can be used to abort)
/// * `Err(anyhow::Error)` - Error if scheduler fails to start
///
/// # Example
/// ```no_run
/// use terraphim_update::start_update_scheduler;
///
/// async {
///     let handle = start_update_scheduler(
///         "terraphim-agent",
///         "1.0.0",
///         Box::new(|update_info| {
///             println!("Update available: {}", update_info.latest_version);
///         })
///     ).await?;
///     # Ok::<(), anyhow::Error>(())
/// };
/// ```
pub async fn start_update_scheduler(
    bin_name: &str,
    current_version: &str,
    callback: Box<dyn Fn(UpdateAvailableInfo) + Send + Sync>,
) -> Result<tokio::task::JoinHandle<()>> {
    use crate::config::UpdateConfig;
    use crate::scheduler::{UpdateCheckResult, UpdateScheduler};
    use std::sync::Arc;

    let config = UpdateConfig::default();

    let bin_name_clone = bin_name.to_string();
    let current_version_clone = current_version.to_string();

    let check_fn = Arc::new(move || -> anyhow::Result<UpdateCheckResult> {
        let status = {
            let bin_name = bin_name_clone.clone();
            let current_version = current_version_clone.clone();

            tokio::task::block_in_place(|| {
                let rt = tokio::runtime::Runtime::new()?;
                rt.block_on(async { check_for_updates_auto(&bin_name, &current_version).await })
            })
        }?;

        match status {
            UpdateStatus::Available {
                current_version,
                latest_version,
            } => Ok(UpdateCheckResult::UpdateAvailable {
                current_version,
                latest_version,
            }),
            UpdateStatus::UpToDate(_) => Ok(UpdateCheckResult::UpToDate),
            UpdateStatus::Failed(error) => Ok(UpdateCheckResult::Failed { error }),
            _ => Ok(UpdateCheckResult::UpToDate),
        }
    });

    let mut scheduler = UpdateScheduler::new(Arc::new(config), check_fn);
    let mut receiver = scheduler.create_notification_channel()?;

    scheduler.start().await?;

    let callback = Arc::new(callback);

    let handle = tokio::spawn(async move {
        while let Some(notification) = receiver.recv().await {
            match notification {
                crate::scheduler::UpdateNotification::UpdateAvailable {
                    current_version,
                    latest_version,
                } => {
                    callback(UpdateAvailableInfo {
                        current_version: current_version.clone(),
                        latest_version: latest_version.clone(),
                    });
                }
                crate::scheduler::UpdateNotification::CheckFailed { error } => {
                    tracing::warn!("Update check failed: {}", error);
                }
                crate::scheduler::UpdateNotification::Stopped => {
                    break;
                }
            }
        }
    });

    Ok(handle)
}

/// Information about an available update (for callback)
#[derive(Debug, Clone)]
pub struct UpdateAvailableInfo {
    pub current_version: String,
    pub latest_version: String,
}

/// Backup the current binary with a version suffix
///
/// Creates a backup of the binary before updating, allowing rollback
/// if the update fails.
///
/// # Arguments
/// * `binary_path` - Path to the binary to backup
/// * `version` - Version string to use in backup filename
///
/// # Returns
/// * `Ok(PathBuf)` - Path to the backup file
/// * `Err(anyhow::Error)` - Error if backup fails
///
/// # Example
/// ```no_run
/// use terraphim_update::backup_binary;
/// use std::path::Path;
///
/// let backup = backup_binary(Path::new("/usr/local/bin/terraphim"), "1.0.0")?;
/// println!("Backup created at: {:?}", backup);
/// # Ok::<(), anyhow::Error>(())
/// ```
pub fn backup_binary(binary_path: &Path, version: &str) -> Result<PathBuf> {
    info!(
        "Backing up binary at {:?} with version {}",
        binary_path, version
    );

    if !binary_path.exists() {
        anyhow::bail!("Binary not found at {:?}", binary_path);
    }

    let backup_path = binary_path.with_extension(format!("bak-{}", version));

    fs::copy(binary_path, &backup_path)?;

    info!("Backup created at {:?}", backup_path);
    Ok(backup_path)
}

/// Rollback to a previous version from backup
///
/// Restores a backed-up binary to the original location.
///
/// # Arguments
/// * `backup_path` - Path to the backup file
/// * `target_path` - Path where to restore the binary
///
/// # Returns
/// * `Ok(())` - Success
/// * `Err(anyhow::Error)` - Error if rollback fails
///
/// # Example
/// ```no_run
/// use terraphim_update::rollback;
/// use std::path::Path;
///
/// rollback(
///     Path::new("/usr/local/bin/terraphim.bak-1.0.0"),
///     Path::new("/usr/local/bin/terraphim")
/// )?;
/// # Ok::<(), anyhow::Error>(())
/// ```
pub fn rollback(backup_path: &Path, target_path: &Path) -> Result<()> {
    info!("Rolling back from {:?} to {:?}", backup_path, target_path);

    if !backup_path.exists() {
        anyhow::bail!("Backup not found at {:?}", backup_path);
    }

    fs::copy(backup_path, target_path)?;

    info!("Rollback completed successfully");
    Ok(())
}

#[cfg(test)]
mod tests {
    use super::*;
    use std::io::Write;
    use tempfile::NamedTempFile;

    #[test]
    fn test_version_comparison() {
        let config = UpdaterConfig::new("test");
        let updater = TerraphimUpdater::new(config);

        // Test basic version comparisons
        assert!(updater.is_newer_version("1.1.0", "1.0.0").unwrap());
        assert!(updater.is_newer_version("2.0.0", "1.9.9").unwrap());
        assert!(updater.is_newer_version("1.0.1", "1.0.0").unwrap());

        // Test equal versions
        assert!(!updater.is_newer_version("1.0.0", "1.0.0").unwrap());

        // Test older versions
        assert!(!updater.is_newer_version("1.0.0", "1.1.0").unwrap());
        assert!(!updater.is_newer_version("1.9.9", "2.0.0").unwrap());

        // Test with v prefix
        assert!(updater.is_newer_version("v1.1.0", "v1.0.0").unwrap());
        assert!(updater.is_newer_version("1.1.0", "v1.0.0").unwrap());
        assert!(updater.is_newer_version("v1.1.0", "1.0.0").unwrap());
    }

    #[tokio::test]
    async fn test_updater_config() {
        let config = UpdaterConfig::new("test-binary")
            .with_version("1.0.0")
            .with_progress(false);

        assert_eq!(config.bin_name, "test-binary");
        assert_eq!(config.current_version, "1.0.0");
        assert!(!config.show_progress);
        assert_eq!(config.repo_owner, "terraphim");
        assert_eq!(config.repo_name, "terraphim-ai");
    }

    #[test]
    fn test_backup_binary() {
        // Create a temporary file to simulate a binary
        let mut temp_file = NamedTempFile::new().unwrap();
        writeln!(temp_file, "test binary content").unwrap();

        let binary_path = temp_file.path();
        let version = "1.0.0";

        let backup_path = backup_binary(binary_path, version).unwrap();

        // Verify backup was created
        assert!(backup_path.exists());
        assert!(backup_path.to_string_lossy().contains("bak-1.0.0"));

        // Verify backup has same content
        let original_content = fs::read_to_string(binary_path).unwrap();
        let backup_content = fs::read_to_string(&backup_path).unwrap();
        assert_eq!(original_content, backup_content);

        // Clean up backup
        fs::remove_file(&backup_path).unwrap();
    }

    #[test]
    fn test_backup_binary_nonexistent() {
        let nonexistent_path = Path::new("/nonexistent/path/to/binary");

        let result = backup_binary(nonexistent_path, "1.0.0");
        assert!(result.is_err());
    }

    #[test]
    fn test_rollback() {
        // Create a temporary file to simulate a backup
        let mut backup_file = NamedTempFile::new().unwrap();
        writeln!(backup_file, "backup content").unwrap();

        let backup_path = backup_file.path();

        // Create target path
        let mut target_file = NamedTempFile::new().unwrap();
        writeln!(target_file, "original content").unwrap();
        let target_path = target_file.path();

        // Perform rollback
        rollback(backup_path, target_path).unwrap();

        // Verify target now has backup content
        let target_content = fs::read_to_string(target_path).unwrap();
        assert_eq!(target_content, "backup content\n");
    }

    #[test]
    fn test_rollback_nonexistent() {
        let nonexistent_backup = Path::new("/nonexistent/backup.bak");
        let temp_file = NamedTempFile::new().unwrap();
        let target_path = temp_file.path();

        let result = rollback(nonexistent_backup, target_path);
        assert!(result.is_err());
    }

    #[test]
    fn test_backup_and_rollback_roundtrip() {
        // Create original binary
        let mut original_file = NamedTempFile::new().unwrap();
        writeln!(original_file, "original binary v1.0.0").unwrap();
        let original_path = original_file.path();

        // Create backup
        let backup_path = backup_binary(original_path, "1.0.0").unwrap();

        // Modify original (simulate update)
        fs::write(original_path, "updated binary v1.1.0").unwrap();

        // Verify original changed
        assert_eq!(
            fs::read_to_string(original_path).unwrap(),
            "updated binary v1.1.0"
        );

        // Rollback
        rollback(&backup_path, original_path).unwrap();

        // Verify original restored
        assert_eq!(
            fs::read_to_string(original_path).unwrap(),
            "original binary v1.0.0\n"
        );

        // Clean up backup
        fs::remove_file(&backup_path).unwrap();
    }

    #[tokio::test]
    async fn test_check_for_updates_auto() {
        // This test will make actual API calls to GitHub
        // It's useful for manual testing but may be flaky in CI
        let status = check_for_updates_auto("terraphim", "0.0.1").await;

        match status {
            Ok(UpdateStatus::Available {
                current_version,
                latest_version,
            }) => {
                assert_eq!(current_version, "0.0.1");
                assert_ne!(current_version, latest_version);
            }
            Ok(UpdateStatus::UpToDate(version)) => {
                assert_eq!(version, "0.0.1");
            }
            Ok(UpdateStatus::Failed(_)) => {
                // This is acceptable if GitHub API is unavailable
            }
            _ => {}
        }
    }

    #[test]
    fn test_is_newer_version_static() {
        // Test basic comparisons
        assert!(is_newer_version_static("2.0.0", "1.0.0").unwrap());
        assert!(is_newer_version_static("1.1.0", "1.0.0").unwrap());
        assert!(is_newer_version_static("1.0.1", "1.0.0").unwrap());

        // Test equal versions
        assert!(!is_newer_version_static("1.0.0", "1.0.0").unwrap());

        // Test older versions
        assert!(!is_newer_version_static("1.0.0", "2.0.0").unwrap());
        assert!(!is_newer_version_static("1.0.0", "1.1.0").unwrap());

        // Test with v prefix
        assert!(is_newer_version_static("v2.0.0", "v1.0.0").unwrap());
        assert!(!is_newer_version_static("v1.0.0", "v2.0.0").unwrap());
    }

    #[test]
    fn test_update_status_display() {
        let up_to_date = UpdateStatus::UpToDate("1.0.0".to_string());
        assert!(up_to_date.to_string().contains("1.0.0"));

        let updated = UpdateStatus::Updated {
            from_version: "1.0.0".to_string(),
            to_version: "2.0.0".to_string(),
        };
        assert!(updated.to_string().contains("1.0.0"));
        assert!(updated.to_string().contains("2.0.0"));

        let available = UpdateStatus::Available {
            current_version: "1.0.0".to_string(),
            latest_version: "2.0.0".to_string(),
        };
        assert!(available.to_string().contains("1.0.0"));
        assert!(available.to_string().contains("2.0.0"));

        let failed = UpdateStatus::Failed("test error".to_string());
        assert!(failed.to_string().contains("test error"));
    }

    #[test]
    fn test_version_prefix_for_github_releases() {
        // GitHub release tags use "v" prefix but self_update strips it
        // This test verifies our version tag construction logic
        let version_without_v = "1.5.2";
        let version_with_v = "v1.5.2";

        // Version without v should get v prepended
        let version_tag_1 = if version_without_v.starts_with('v') {
            version_without_v.to_string()
        } else {
            format!("v{}", version_without_v)
        };
        assert_eq!(version_tag_1, "v1.5.2");

        // Version with v should remain unchanged
        let version_tag_2 = if version_with_v.starts_with('v') {
            version_with_v.to_string()
        } else {
            format!("v{}", version_with_v)
        };
        assert_eq!(version_tag_2, "v1.5.2");
    }
}