import CodexBarCore
import Foundation

extension CodexBarCLI {
    static func pluginsHelp(version: String) -> String {
        """
        CodexBar \(version)

        Usage:
          codexbar plugins list
          codexbar plugins fetch <id> [--json] [--pretty]

        Description:
          Discover local .js and .ts provider plugins. Fetch requires a recorded approval binding.
          An interactive terminal can create the approval after showing exact origins, capabilities,
          secret names, and cookie domains. Headless use fails closed. Browser-cookie plugins are
          app-only and fail closed in the CLI.
        """
    }

    static func cardsHelp(version: String) -> String {
        """
        CodexBar \(version)

        Usage:
          codexbar cards [--json-output] [--log-level <trace|verbose|debug|info|warning|error|critical>] [-v|--verbose]
                        [--provider \(ProviderHelp.list)]
                        [--account <label>] [--account-index <index>] [--all-accounts]
                        [--no-credits] [--no-color] [--status] [--source <auto|web|cli|oauth|api>]
                        [--web-timeout <seconds>] [--web-debug-dump-html] [--antigravity-plan-debug] [--augment-debug]
                        [--brief]

        Description:
          Print a one-shot usage snapshot as a responsive card grid in the terminal.
          Honors enabled providers from config and reuses the same fetch flags as codexbar usage.
          Failed providers are summarized in a footer instead of error cards.
          Enabled claude-swap lists with 2+ accounts—or one account when `claudeSwapShowSingleAccount`
          is enabled—replace Claude cards unless an account or explicit non-auto `--source` CLI flag is selected.
          Sentinel accounts remain visible without metrics; claude-swap adapter failures use a separate footer entry.
          Use --brief for a compact table layout (Provider / Usage / Reset).
          Stdout is always the rendered card/table text; --json-output only affects stderr logs.

        Global flags:
          -h, --help      Show help
          -V, --version   Show version
          -v, --verbose   Enable verbose logging
          --no-color      Disable ANSI colors in text output
          --log-level <trace|verbose|debug|info|warning|error|critical>
          --json-output   Emit machine-readable logs (JSONL) to stderr

        Examples:
          codexbar cards
          codexbar cards --provider codex
          codexbar cards --provider all --status
          codexbar cards --brief
          codexbar cards --no-color
        """
    }

    static func usageHelp(version: String) -> String {
        """
        CodexBar \(version)

        Usage:
          codexbar usage [--format text|json]
                       [--json]
                       [--json-only]
                       [--json-output] [--log-level <trace|verbose|debug|info|warning|error|critical>] [-v|--verbose]
                       [--provider \(ProviderHelp.list)]
                       [--account <label>] [--account-index <index>] [--all-accounts]
                       [--no-credits] [--no-color] [--pretty] [--status] [--source <auto|web|cli|oauth|api>]
                       [--web-timeout <seconds>] [--web-debug-dump-html] [--antigravity-plan-debug] [--augment-debug]

        Description:
          Print usage from enabled providers as text (default) or JSON. Honors your in-app toggles.
          Output format: use --json (or --format json) for JSON on stdout; use --json-output for JSON logs on stderr.
          Source behavior is provider-specific:
          - Codex: OpenAI web dashboard (usage limits, credits remaining, code review remaining, usage breakdown).
            Auto falls back to Codex CLI only when cookies are missing.
          - Claude: claude.ai API.
            Auto falls back to Claude CLI only when cookies are missing.
          - Kilo: app.kilo.ai API.
            Auto falls back to Kilo CLI when API credentials are missing or unauthorized.
          Token accounts are loaded from the resolved CodexBar config file.
          Use --account or --account-index to select a specific token account.
          Use --all-accounts to fetch every token account, or every visible Codex account for Codex.
          Account selection requires a single provider.

        Global flags:
          -h, --help      Show help
          -V, --version   Show version
          -v, --verbose   Enable verbose logging
          --no-color      Disable ANSI colors in text output
          --log-level <trace|verbose|debug|info|warning|error|critical>
          --json-output   Emit machine-readable logs (JSONL) to stderr

        Examples:
          codexbar usage
          codexbar usage --provider claude
          codexbar usage --provider gemini
          codexbar usage --format json --provider all --pretty
          codexbar usage --provider all --json
          codexbar usage --status
          codexbar usage --provider codex --source web --format json --pretty
        """
    }

    static func costHelp(version: String) -> String {
        """
        CodexBar \(version)

        Usage:
          codexbar cost [--format text|json]
                       [--json]
                       [--json-only]
                       [--json-output] [--log-level <trace|verbose|debug|info|warning|error|critical>] [-v|--verbose]
                       [--provider \(ProviderHelp.list)]
                       [--no-color] [--pretty] [--refresh] [--provider-native-only]
                       [--days <days>] [--group-by project|session]

        Description:
          Print local token cost usage from Claude/Codex native logs plus supported pi and OMP sessions.
          This does not require web or CLI access and uses cached scan results unless --refresh is provided.
          Experimental: use --provider-native-only to exclude pi and OMP session mirrors.

        Examples:
          codexbar cost
          codexbar cost --provider codex --group-by project
          codexbar cost --provider codex --group-by session
          codexbar cost --provider claude --format json --pretty
        """
    }

    static func sessionsHelp(version: String) -> String {
        """
        CodexBar \(version)

        Usage:
          codexbar sessions [--json|--json-v2] [--pretty]
          codexbar sessions focus <id>

        Description:
          List live local Codex, Claude Code, pi, and OMP agent sessions.
          --json emits the legacy v1 array with only Codex and Claude providers.
          --json-v2 emits the complete current array, including Pi-family sessions.
          JSON uses stable AgentSession field names and ISO-8601 dates.
          Focus activates the owning terminal or desktop app on macOS.

        Examples:
          codexbar sessions
          codexbar sessions --json
          codexbar sessions --json-v2
          codexbar sessions focus 019f3497-73bf-7df3-a173-4f67d968914a
        """
    }

    static func dashboardHelp(version: String) -> String {
        """
        CodexBar \(version)

        Usage:
          codexbar dashboard [--pretty] [--timeout <seconds>] [--output <path>]
                             [--identity <redacted|full>]
                             [--json-output] [--log-level <trace|verbose|debug|info|warning|error|critical>]
                             [-v|--verbose]

        Description:
          Print one dashboard-v1 snapshot as JSON, then exit. Honors enabled providers
          in stable order and keeps provider failures as row-level errors without
          dropping healthy rows. Account identity defaults to full emails;
          --identity redacted hides email local parts.
          Stdout contains only the JSON document; diagnostics are written to stderr.
          --timeout accepts 0...86400 seconds and defaults to 30; 0 disables the deadline.
          --output atomically writes the snapshot to a file (0644) instead of stdout;
          the parent directory must already exist (it is not created), and nothing is
          printed to stdout on success.

        Global flags:
          -h, --help      Show help
          -V, --version   Show version
          -v, --verbose   Enable verbose logging
          --log-level <trace|verbose|debug|info|warning|error|critical>
          --json-output   Emit machine-readable logs (JSONL) to stderr

        Examples:
          codexbar dashboard
          codexbar dashboard --pretty
          codexbar dashboard --timeout 60
          codexbar dashboard --output /var/www/dashboard/snapshot.json
        """
    }

    static func serveHelp(version: String) -> String {
        """
        CodexBar \(version)

        Usage:
          codexbar serve [--host <host>] [--port <port>] [--refresh-interval <seconds>]
                         [--request-timeout <seconds>]
                         [--dashboard-token <token>] [--allow-plain-http]
                         [--identity <redacted|full>]
                         [--json-output] [--log-level <trace|verbose|debug|info|warning|error|critical>]
                         [-v|--verbose]

        Description:
          Start a foreground HTTP server that exposes existing CLI JSON payloads and a
          token-gated dashboard snapshot, with a built-in web UI at /. The static web UI
          is always open; it sends a browser-entered token only when fetching snapshot data.
          The server binds to 127.0.0.1 by default; `localhost` is normalized to 127.0.0.1.
          GET /dashboard/v1/snapshot requires "Authorization: Bearer YOUR_TOKEN" and fails
          closed (401) when no token is configured. Set the token with --dashboard-token or,
          preferably, the CODEXBAR_DASHBOARD_TOKEN environment variable (argv leaks via ps).
          Transport is plain HTTP: the token crosses the network in cleartext on every
          request. A non-loopback --host therefore requires both a dashboard token and
          --allow-plain-http, which records that you accept that trade-off. On a
          non-loopback host the token also gates /usage and /cost (account data);
          / and /health are always open. Use a TLS-terminating reverse proxy for anything
          beyond a trusted network segment.
          Snapshot identity defaults to full account emails. --identity redacted hides
          email local parts and is recommended whenever responses cross a network.

        Endpoints:
          GET /                    Built-in web dashboard
          GET /health
          GET /usage
          GET /usage?provider=claude
          GET /usage?provider=all
          GET /cost
          GET /cost?provider=codex
          GET /dashboard/v1/snapshot

        Examples:
          codexbar serve
          codexbar serve --port 8080 --refresh-interval 60 --request-timeout 30
          CODEXBAR_DASHBOARD_TOKEN=YOUR_TOKEN codexbar serve
          CODEXBAR_DASHBOARD_TOKEN=... codexbar serve --host 0.0.0.0 --allow-plain-http
          curl http://127.0.0.1:8080/usage?provider=all
          curl -H "Authorization: Bearer $CODEXBAR_DASHBOARD_TOKEN" \\
            http://127.0.0.1:8080/dashboard/v1/snapshot
        """
    }

    static func configHelp(version: String) -> String {
        """
        CodexBar \(version)

        Usage:
          codexbar config validate [--format text|json]
                                 [--json]
                                 [--json-only]
                                 [--json-output] [--log-level <trace|verbose|debug|info|warning|error|critical>]
                                 [-v|--verbose]
                                 [--pretty]
          codexbar config dump [--show-secrets] [--format text|json]
                             [--json]
                             [--json-only]
                             [--json-output] [--log-level <trace|verbose|debug|info|warning|error|critical>]
                             [-v|--verbose]
                             [--pretty]
          codexbar config providers [--format text|json] [--json] [--json-only] [--pretty]
          codexbar config enable --provider <name> [--format text|json] [--json] [--json-only] [--pretty]
          codexbar config disable --provider <name> [--format text|json] [--json] [--json-only] [--pretty]
          codexbar config set-api-key --provider <name> (--api-key <key>|--stdin)
                                    [--label <label>] [--usage-scope team]
                                    [--organization-id <org>] [--workspace-id <project>]
                                    [--no-enable]
                                    [--format text|json] [--json] [--json-only] [--pretty]

        Description:
          Validate or print the CodexBar config file (default: validate).
          dump prints normalized config JSON with stored credentials redacted by default
          (use --show-secrets to reveal raw values).
          providers lists persistent provider enablement.
          enable/disable updates the same provider toggle used by Settings.
          set-api-key stores a provider API key in the resolved config file and enables that provider by default.
          For z.ai team usage, add --usage-scope team with BigModel organization and project IDs; this stores
          the key as a token account instead of a provider-level personal key.

        Examples:
          codexbar config validate --format json --pretty
          codexbar config dump --pretty
          codexbar config providers
          codexbar config enable --provider grok
          codexbar config disable --provider cursor
          printf '%s' "$ELEVENLABS_API_KEY" | codexbar config set-api-key --provider elevenlabs --stdin
          printf '%s' "$Z_AI_API_KEY" | codexbar config set-api-key --provider zai --stdin \\
            --label Team --usage-scope team --organization-id org_... --workspace-id proj_...
        """
    }

    static func cacheHelp(version: String) -> String {
        """
        CodexBar \(version)

        Usage:
          codexbar cache clear <--cookies|--cost|--all>
                              [--provider <name>]
                              [--format text|json]
                              [--json]
                              [--json-only]
                              [--json-output] [--log-level <trace|verbose|debug|info|warning|error|critical>]
                              [-v|--verbose]
                              [--pretty]

        Description:
          Clear cached data. Use --cookies to clear browser cookie caches (stored in Keychain),
          --cost to clear cost usage scan caches, or --all for both.
          Optionally specify --provider with --cookies to clear cookies for a single provider only.

        Examples:
          codexbar cache clear --cookies
          codexbar cache clear --cookies --provider claude
          codexbar cache clear --cost
          codexbar cache clear --all
          codexbar cache clear --all --format json --pretty
        """
    }

    static func hooksHelp(version: String) -> String {
        """
        CodexBar \(version)

        Usage:
          codexbar hooks list [--format text|json] [--pretty]
          codexbar hooks enable
          codexbar hooks disable
          codexbar hooks test <event> --provider <name>
          codexbar hooks watch [--interval <seconds>] [--provider <name>]

        Description:
          Run external commands when quota/provider events occur. Rules are stored in the
          shared config file and are disabled by default. Events:
          quota_low, quota_reached, quota_reset, provider_unavailable, provider_recovered,
          refresh_failed.

          Commands run directly (no shell), receive event metadata via CODEXBAR_* environment
          variables and a JSON payload on stdin, and are timed out. Only configure commands you trust.

          `watch` polls the selected providers and fires rules on real transitions, so hooks
          work without the macOS app. Events are edge-triggered against the previous poll, so a
          persisting condition does not re-fire. Baselines are in-memory: the first poll of a
          lane establishes state without firing. Keep one continuous process running so transition
          baselines and event rate limits survive between polls. Default interval 300s, minimum 60s.

        Examples:
          codexbar hooks list
          codexbar hooks enable
          codexbar hooks test quota_reached --provider codex
          codexbar hooks test quota_low --provider claude
          codexbar hooks watch --interval 600
          codexbar hooks watch --provider codex
        """
    }

    static func diagnoseHelp(version: String) -> String {
        """
        CodexBar \(version)

        Usage:
          codexbar diagnose --provider <name|all> --format json
                           [--json-output] [--log-level <trace|verbose|debug|info|warning|error|critical>]
                           [-v|--verbose]
                           [--redact] [--output <path>]
                           [--pretty]

        Description:
          Run provider diagnostic fetches and print a safe JSON export for issue reporting.
          The export is redacted and omits raw API tokens, cookies, auth headers, emails,
          account IDs, org IDs, raw responses, and billing-history records.

        Examples:
          codexbar diagnose --provider minimax --format json --redact --output diagnostic.json
          codexbar diagnose --provider minimax --format json --pretty
          codexbar diagnose --provider claude --format json --pretty
          codexbar diagnose --provider all --format json
        """
    }

    static func cookieHelp(version: String) -> String {
        """
        CodexBar \(version)

        Usage:
          codexbar cookie refresh <--provider <name>|--all>
                                 [--allow-keychain-prompt]
                                 [--format text|json]
                                 [--json]
                                 [--json-only]
                                 [--pretty]

        Description:
          Re-import browser cookies using each provider's configured browser order.
          Providers that may decrypt Chromium cookies fail before clearing the cache
          unless --allow-keychain-prompt explicitly acknowledges a possible macOS
          Keychain prompt. A prior denial keeps its six-hour cooldown unless that
          explicit interactive retry flag is supplied. Cookie values are never shown.

        Examples:
          codexbar cookie refresh --provider opencodego --allow-keychain-prompt
          codexbar cookie refresh --all --allow-keychain-prompt
          codexbar cookie refresh --provider opencodego --allow-keychain-prompt --format json --pretty
        """
    }

    static func guardHelp(version: String) -> String {
        """
        CodexBar \(version)

        Usage:
          codexbar guard --provider \(ProviderHelp.list)
                        [--min-remaining <percent>] [--window session|weekly]
                        [--timeout <seconds>] [--json] [--pretty] [--fail-open]
                        [--json-output] [--log-level <trace|verbose|debug|info|warning|error|critical>] [-v|--verbose]

        Description:
          Exit non-zero when a provider lacks quota headroom, for use in gating scripts.
          Stable guard exit codes: 0 = safe (relevant window has at least --min-remaining% remaining),
                                   1 = insufficient quota, 64 = invalid arguments,
                                   69 = quota unavailable or fetch timed out.
          --min-remaining defaults to 10 (percent). --window defaults to session (the primary window);
          weekly checks the secondary window. --timeout accepts 0...86400 and defaults to 60 seconds;
          0 disables the guard-level deadline, but provider-specific timeouts still apply.
          --fail-open exits 0 instead of 69 when quota is unavailable.
          Human output is a single line to stdout; --json emits a machine-readable decision object.

        Global flags:
          -h, --help      Show help
          -V, --version   Show version
          -v, --verbose   Enable verbose logging
          --log-level <trace|verbose|debug|info|warning|error|critical>
          --json-output   Emit machine-readable logs (JSONL) to stderr

        Examples:
          codexbar guard --provider claude
          codexbar guard --provider codex --min-remaining 20
          codexbar guard --provider claude --window weekly --min-remaining 5
          codexbar guard --provider claude --json
          codexbar guard --provider codex --fail-open
        """
    }

    static func rootHelp(version: String) -> String {
        """
        CodexBar \(version)

        Usage:
          codexbar [--format text|json]
                  [--json]
                  [--json-only]
                  [--json-output] [--log-level <trace|verbose|debug|info|warning|error|critical>] [-v|--verbose]
                  [--provider \(ProviderHelp.list)]
                  [--account <label>] [--account-index <index>] [--all-accounts]
                  [--no-credits] [--no-color] [--pretty] [--status] [--source <auto|web|cli|oauth|api>]
                  [--web-timeout <seconds>] [--web-debug-dump-html] [--antigravity-plan-debug] [--augment-debug]
          codexbar cards [--provider \(ProviderHelp.list)] [--brief] [--no-color] [--status]
          codexbar cost [--format text|json]
                       [--json]
                       [--json-only]
                       [--json-output] [--log-level <trace|verbose|debug|info|warning|error|critical>] [-v|--verbose]
                       [--provider \(ProviderHelp.list)] [--no-color] [--pretty] [--refresh]
                       [--provider-native-only]
                       [--days <days>] [--group-by project|session]
          codexbar sessions [--json|--json-v2] [--pretty]
          codexbar sessions focus <id>
          codexbar dashboard [--pretty] [--timeout <seconds>] [--output <path>]
          codexbar serve [--host <host>] [--port <port>] [--refresh-interval <seconds>]
                       [--request-timeout <seconds>]
                       [--dashboard-token <token>] [--allow-plain-http]
                       [--json-output] [--log-level <trace|verbose|debug|info|warning|error|critical>] [-v|--verbose]
          codexbar config <validate|dump|providers> [--format text|json]
                                        [--json]
                                        [--json-only]
                                        [--json-output] [--log-level <trace|verbose|debug|info|warning|error|critical>]
                                        [-v|--verbose]
                                        [--pretty]
          codexbar config enable --provider <name>
          codexbar config disable --provider <name>
          codexbar config set-api-key --provider <name> (--api-key <key>|--stdin)
          codexbar config set-api-key --provider zai --stdin --usage-scope team
                                   --organization-id <org> --workspace-id <project>
          codexbar hooks <list|enable|disable> [--format text|json] [--pretty]
          codexbar hooks test <event> --provider <name>
          codexbar plugins <list|fetch <id>> [--json] [--pretty]
          codexbar cache clear <--cookies|--cost|--all> [--provider <name>]
          codexbar cookie refresh <--provider <name>|--all> [--allow-keychain-prompt]
          codexbar diagnose --provider <name|all> --format json [--redact] [--output <path>] [--pretty]
          codexbar guard --provider <name> [--min-remaining <percent>] [--window session|weekly] [--json]

        Global flags:
          -h, --help      Show help
          -V, --version   Show version
          -v, --verbose   Enable verbose logging
          --no-color      Disable ANSI colors in text output
          --log-level <trace|verbose|debug|info|warning|error|critical>
          --json-output   Emit machine-readable logs (JSONL) to stderr

        Examples:
          codexbar
          codexbar --format json --provider all --pretty
          codexbar --provider all --json
          codexbar --provider gemini
          codexbar cards --provider all --status
          codexbar cards --brief
          codexbar cost --provider claude --format json --pretty
          codexbar sessions --json
          codexbar dashboard --pretty
          codexbar serve --port 8080
          codexbar config validate --format json --pretty
          codexbar config enable --provider grok
          codexbar config set-api-key --provider elevenlabs --stdin
          codexbar hooks test quota_reached --provider codex
          codexbar plugins list
          codexbar cache clear --cookies
          codexbar cookie refresh --provider opencodego --allow-keychain-prompt
          codexbar diagnose --provider minimax --format json --redact --output diagnostic.json
          codexbar diagnose --provider minimax --format json --pretty
          codexbar diagnose --provider all --format json
          codexbar guard --provider claude --min-remaining 20
        """
    }
}
