alba-engine 0.2.1

//! The session loop: run the target, then keep answering whatever asks for
//! the next run.
//!
//! ## Shape
//!
//! [`session`] owns the long-lived state a run does not: the loaded
//! project, the watched set, the watcher, and what the next run is for. It
//! builds the `WatchSet`, runs the target through the ordinary scheduler
//! (the cache does the incremental work), then waits for the [`Watcher`]'s
//! debounced batches. A relevant batch during the wait starts the next run;
//! one during a run cancels that run first — latest code wins — and the
//! trigger event is emitted after the cancelled run's summary, which is
//! what marks it as interrupted by the watch. The caller's token ends the
//! session; each run gets a child token so a restart never looks like a
//! user interrupt.
//!
//! ## The two things that ask for a run
//!
//! A file change is one; a [`SessionCommand`] from a driver — the TUI — is
//! the other, and the loop is built so the two converge. Both cancel a run
//! in flight, both decide what the next iteration builds, and neither is a
//! special case of the other: a `RunBeam` *retargets* the session, so the
//! watch triggers that follow re-run the beam the driver last asked for.
//! Where they meet, the command wins on what to run — it is the later,
//! more explicit request — while a batch that landed too is still honoured
//! for what only it can say: which files changed, and whether a Beamfile is
//! among them.
//!
//! A session with no command channel is a headless `alba run --watch`: the
//! command arm is a future that is never ready, and the loop is exactly
//! what it was before drivers existed. A channel whose sender was dropped
//! is the opposite — a driver that left — and reads as `Shutdown`.
//!
//! Watching is a toggle rather than a mode. Batches are *always* drained,
//! because a watcher whose channel nobody reads buffers for the life of the
//! process; `watch_enabled` decides only whether a drained batch is
//! classified into a trigger. `WatchWaiting` follows the same rule: a
//! session that is not watching has finished a run, not started waiting on
//! files, and says so by saying nothing.
//!
//! A trigger that names a loaded Beamfile reloads the project first, so
//! the next run schedules the beams as they are now written. A project
//! the session cannot work from — one that no longer parses, one whose
//! target beam is gone — parks the loop in
//! [`park_until_the_project_changes`]: reported, announced as a wait,
//! executing nothing, until a save makes it loadable again.
//!
//! ## Why the loop renders errors through a callback
//!
//! A mid-session failure (a run that cannot be scheduled, a broken
//! Beamfile) must be *rendered* — spans, carets, suggestions — and
//! rendering lives in the CLI, above this crate, which is the only place
//! that knows how. The callback renders and hands back the string; the
//! loop is what wraps that answer in a [`crate::RunEvent::ProjectBroken`]
//! and sends it down the same channel every other event travels on, so a
//! stream consumer sees it too. Embedding the raw [`SessionError`] itself
//! in the event would still be wrong — it would force `Clone` and a wire
//! format on types ([`SourceMap`], [`alba_core::LoadError`]) that exist to
//! be pretty-printed once — but the rendered text has no such cost, which
//! is why it, and not the error, is what crosses into the stream.

use std::path::{Path, PathBuf};

use alba_core::{BeamId, Project, SourceMap};
use tokio::sync::mpsc::{UnboundedReceiver, UnboundedSender};
use tokio_util::sync::CancellationToken;

use crate::EngineError;
use crate::affected::{Selection, select};
use crate::event::RunEvent;
use crate::scheduler::{Executors, RunOptions, run};
use crate::watch::set::{Relevance, WatchSet};
use crate::watch::{SessionError, WatchBatch, WatchExit, Watcher, beamfile_dir, display_paths};

/// What a session can be told to do, by the TUI or any future driver.
#[derive(Debug)]
pub enum SessionCommand {
    /// Run `id` and its subgraph now. Retargets the session: subsequent
    /// watch triggers re-run `id` too. `force` empties the cache's read
    /// side for that one run. A run already in flight is cancelled first —
    /// same rule as a watch trigger, latest request wins.
    RunBeam { id: BeamId, force: bool },
    /// Cancel the run in flight; the session stays alive, waiting.
    CancelRun,
    /// Turn filesystem watching on or off. Does not touch a run in flight;
    /// only decides whether future batches trigger anything.
    SetWatch(bool),
    /// Cancel any run and end the session.
    Shutdown,
}

/// Runs `selection` and keeps re-running it — for a relevant change while
/// `watch_enabled`, for a [`SessionCommand`] from `commands` — until
/// `cancel` fires, a `Shutdown` arrives, or the watcher dies.
///
/// `project` and `sources` are taken owned: the session outlives the
/// caller's own copy, and both are cheap to clone.
///
/// A `selection` this project cannot resolve — an unknown beam, or a git
/// reference that does not exist — is *not* an error here: it
/// parks the session like any other project it cannot work from, because
/// mid-session the fix is one Beamfile save away and a session that quit
/// on a renamed beam would be a session that quits while the user is
/// typing. A caller that wants the other answer — the exit code 2 an
/// unknown target earns on the command line — asks
/// [`alba_core::execution_subgraph`] before starting the session, which is
/// exactly what the CLI does: it is only at startup that "no such beam"
/// means the invocation was wrong rather than the edit unfinished.
#[allow(clippy::too_many_arguments)]
pub async fn session(
    beamfile: &Path,
    mut project: Project,
    mut sources: SourceMap,
    mut selection: Selection,
    options: RunOptions,
    executors: Executors,
    events: UnboundedSender<RunEvent>,
    mut commands: Option<UnboundedReceiver<SessionCommand>>,
    mut watch_enabled: bool,
    cancel: CancellationToken,
    mut watcher: Box<dyn Watcher>,
    render_error: &mut (dyn FnMut(&SessionError) -> String + Send),
) -> WatchExit {
    let root = beamfile_dir(beamfile);
    // `--force` empties the cache's read side for the initial run only:
    // applying it to every triggered run would re-run the whole subgraph
    // on every keystroke, which is exactly what the cache is here to
    // prevent.
    let mut force_next = options.cache.as_ref().is_some_and(|cache| cache.force);

    loop {
        // Rebuilt for each run: the set caches the files its patterns
        // resolved to, and the run just before may have created or
        // deleted some of them.
        let mut set = match WatchSet::new(&project, selection.watched_target(), &sources) {
            Ok(set) => set,
            Err(error) => {
                // The target is not in this project — a beam renamed by
                // the save that got us here, most often. Nothing but a
                // different Beamfile can change that answer, so park on
                // one instead of re-running the same failure.
                let session_error = SessionError::Run {
                    error: EngineError::Core(error),
                    sources: sources.clone(),
                };
                let _ = events.send(RunEvent::ProjectBroken {
                    diagnostic: render_error(&session_error),
                });
                match park_until_the_project_changes(
                    beamfile,
                    sources.clone(),
                    &events,
                    &mut *watcher,
                    &cancel,
                    &mut commands,
                    &mut watch_enabled,
                    render_error,
                )
                .await
                {
                    Reloaded::Project {
                        project: fresh_project,
                        sources: fresh_sources,
                        commanded,
                    } => {
                        (project, sources) = (fresh_project, fresh_sources);
                        match commanded {
                            Some((id, force)) => {
                                (selection, force_next) = (Selection::Beam(id), force);
                            }
                            None => announce_recovery(&events),
                        }
                        continue;
                    }
                    Reloaded::Exit(exit) => return exit,
                }
            }
        };

        let targets = match select(&project, &sources, &root, &selection) {
            Ok(targets) => targets,
            Err(error) => {
                // Same parking as an unknown target above: nothing but a
                // change to the project can move this answer (a git
                // failure included: the reference is fixed for the
                // session, and a repository that appears or a reference
                // that gets created will not announce itself).
                let session_error = SessionError::Run {
                    error,
                    sources: sources.clone(),
                };
                let _ = events.send(RunEvent::ProjectBroken {
                    diagnostic: render_error(&session_error),
                });
                match park_until_the_project_changes(
                    beamfile,
                    sources.clone(),
                    &events,
                    &mut *watcher,
                    &cancel,
                    &mut commands,
                    &mut watch_enabled,
                    render_error,
                )
                .await
                {
                    Reloaded::Project {
                        project: fresh_project,
                        sources: fresh_sources,
                        commanded,
                    } => {
                        (project, sources) = (fresh_project, fresh_sources);
                        match commanded {
                            Some((id, force)) => {
                                (selection, force_next) = (Selection::Beam(id), force);
                            }
                            None => announce_recovery(&events),
                        }
                        continue;
                    }
                    Reloaded::Exit(exit) => return exit,
                }
            }
        };

        // ---- run phase -------------------------------------------------
        let run_cancel = cancel.child_token();
        let mut run_options = options.clone();
        if let Some(cache) = run_options.cache.as_mut() {
            cache.force = force_next;
        }
        force_next = false;

        // A batch that lands while the run is in flight cancels it and is
        // held here, so the wait phase below starts the next run at once
        // instead of announcing a wait nobody is waiting for.
        let mut pending: Option<Trigger> = None;
        // A `RunBeam` that lands while the run is in flight cancels it the
        // same way and is held here; unlike a trigger it also says what to
        // run next, which is why the wait phase gets skipped when it is set.
        let mut commanded: Option<(BeamId, bool)> = None;
        let result = {
            let run_future = run(
                &project,
                &targets,
                run_options,
                executors.clone(),
                events.clone(),
                run_cancel.clone(),
            );
            tokio::pin!(run_future);
            loop {
                tokio::select! {
                    result = &mut run_future => break result,
                    command = next_command(&mut commands) => match command {
                        SessionCommand::RunBeam { id, force } => {
                            commanded = Some((id, force));
                            run_cancel.cancel();
                        }
                        SessionCommand::CancelRun => run_cancel.cancel(),
                        // Only what future batches mean; the run in flight
                        // is none of this command's business.
                        SessionCommand::SetWatch(enabled) => watch_enabled = enabled,
                        SessionCommand::Shutdown => {
                            // The same courtesy a closing watcher gets: the
                            // run winds down before the session leaves.
                            run_cancel.cancel();
                            let _ = (&mut run_future).await;
                            return WatchExit::Interrupted;
                        }
                    },
                    batch = watcher.next_batch() => match batch {
                        Some(batch) => {
                            if watch_enabled && let Some(trigger) = relevant(&mut set, batch) {
                                merge(&mut pending, trigger);
                                run_cancel.cancel();
                            }
                        }
                        None => {
                            // Let the run wind down before leaving, so the
                            // session never abandons running commands.
                            run_cancel.cancel();
                            let _ = (&mut run_future).await;
                            return WatchExit::WatcherClosed;
                        }
                    },
                }
            }
        };
        if let Err(error) = result {
            let session_error = SessionError::Run {
                error,
                sources: sources.clone(),
            };
            let _ = events.send(RunEvent::ProjectBroken {
                diagnostic: render_error(&session_error),
            });
        }
        if cancel.is_cancelled() {
            return WatchExit::Interrupted;
        }

        // ---- wait phase ------------------------------------------------
        // A command that arrived during the run has already decided the
        // next one, so there is nothing left to wait for: retarget and go.
        let commanded_run = commanded.is_some();
        if let Some((id, force)) = commanded {
            (selection, force_next) = (Selection::Beam(id), force);
        }

        let trigger = match pending.take() {
            Some(trigger) => Some(trigger),
            None if commanded_run => None,
            None => {
                if watch_enabled {
                    let _ = events.send(RunEvent::WatchWaiting {
                        files: set.file_count(),
                    });
                }
                loop {
                    tokio::select! {
                        () = cancel.cancelled() => return WatchExit::Interrupted,
                        command = next_command(&mut commands) => match command {
                            SessionCommand::RunBeam { id, force } => {
                                (selection, force_next) = (Selection::Beam(id), force);
                                break None;
                            }
                            // Nothing is in flight to cancel.
                            SessionCommand::CancelRun => {}
                            SessionCommand::SetWatch(enabled) => {
                                watch_enabled = enabled;
                                // Re-announce the wait so a consumer sees
                                // the toggle land, with the file count it
                                // now means something for. Turning watching
                                // off adds nothing a wait has not said.
                                if enabled {
                                    let _ = events.send(RunEvent::WatchWaiting {
                                        files: set.file_count(),
                                    });
                                }
                            }
                            SessionCommand::Shutdown => return WatchExit::Interrupted,
                        },
                        batch = watcher.next_batch() => match batch {
                            Some(batch) => {
                                if watch_enabled && let Some(trigger) = relevant(&mut set, batch) {
                                    break Some(trigger);
                                }
                            }
                            None => return WatchExit::WatcherClosed,
                        },
                    }
                }
            }
        };
        // A run the driver asked for announces itself through `RunStarted`
        // like any other; there is no file change to name.
        let Some(trigger) = trigger else { continue };
        let _ = events.send(RunEvent::WatchTriggered {
            paths: display_paths(&root, &trigger.paths),
        });

        // ---- reload phase ----------------------------------------------
        // The next iteration schedules the beams as they are now written,
        // not as they were when the session started. Whichever way the
        // project comes back, it is the loop's next iteration that rebuilds
        // the watched set and runs.
        if trigger.beamfile {
            match alba_core::load_project(beamfile) {
                Ok((fresh_project, fresh_sources)) => {
                    (project, sources) = (fresh_project, fresh_sources);
                }
                Err(error) => {
                    let rejected = error.sources.clone();
                    let session_error = SessionError::Load(error);
                    let _ = events.send(RunEvent::ProjectBroken {
                        diagnostic: render_error(&session_error),
                    });
                    match park_until_the_project_changes(
                        beamfile,
                        rejected,
                        &events,
                        &mut *watcher,
                        &cancel,
                        &mut commands,
                        &mut watch_enabled,
                        render_error,
                    )
                    .await
                    {
                        Reloaded::Project {
                            project: fresh_project,
                            sources: fresh_sources,
                            commanded,
                        } => {
                            (project, sources) = (fresh_project, fresh_sources);
                            match commanded {
                                Some((id, force)) => {
                                    (selection, force_next) = (Selection::Beam(id), force);
                                }
                                None => announce_recovery(&events),
                            }
                        }
                        Reloaded::Exit(exit) => return exit,
                    }
                }
            }
        }
    }
}

/// The driver's next command, or a future that never completes when there
/// is no driver: `None` is how a headless `alba run --watch` opts out of
/// the whole mechanism, as one `select!` arm that is never ready.
///
/// A closed channel answers `Shutdown` rather than pending forever. A
/// driver that dropped its sender is a driver that left, and a session
/// nobody can talk to any more — not to retarget it, not to stop it — has
/// nothing left to answer.
///
/// Cancel-safe, as every arm of the loop's `select!`s must be: `recv` loses
/// no message when its future is dropped, and a pending future has none.
async fn next_command(commands: &mut Option<UnboundedReceiver<SessionCommand>>) -> SessionCommand {
    match commands {
        Some(receiver) => receiver.recv().await.unwrap_or(SessionCommand::Shutdown),
        None => std::future::pending().await,
    }
}

/// A batch the session acts on.
struct Trigger {
    /// The changed paths that concern the session. Empty is a trigger
    /// too — that is what a rescan looks like, a change the watcher
    /// cannot name.
    paths: Vec<PathBuf>,
    /// Whether one of them is a loaded Beamfile, in which case the
    /// project is reloaded before the next run.
    beamfile: bool,
}

/// What a batch amounts to once classified, `None` when none of its paths
/// concern the session.
fn relevant(set: &mut WatchSet, batch: WatchBatch) -> Option<Trigger> {
    match batch {
        // The watcher cannot say what changed, so the Beamfile is among
        // the candidates; a reload is one file read and a parse, far
        // cheaper than running a stale project until the next save.
        WatchBatch::Rescan => Some(Trigger {
            paths: Vec::new(),
            beamfile: true,
        }),
        WatchBatch::Paths(paths) => {
            let mut trigger = Trigger {
                paths: Vec::new(),
                beamfile: false,
            };
            for path in paths {
                match set.classify(&path) {
                    Relevance::Beamfile => {
                        trigger.beamfile = true;
                        trigger.paths.push(path);
                    }
                    Relevance::Input => trigger.paths.push(path),
                    Relevance::Irrelevant => {}
                }
            }
            (!trigger.paths.is_empty()).then_some(trigger)
        }
    }
}

/// Folds a fresh trigger into the one already held, so a burst of batches
/// during a single run announces one run over their union.
fn merge(pending: &mut Option<Trigger>, fresh: Trigger) {
    match pending {
        Some(existing) => {
            existing.beamfile |= fresh.beamfile;
            for path in fresh.paths {
                if !existing.paths.contains(&path) {
                    existing.paths.push(path);
                }
            }
        }
        None => *pending = Some(fresh),
    }
}

/// Announces the run that a recovered project is about to get.
///
/// The asymmetry with the reload that succeeds outright, which stays
/// silent: there, the trigger just emitted announced the Beamfile change,
/// and the run is that change being answered — one trigger, one cycle. A
/// recovery has no such trigger to lean on. The one it could point at
/// announced the *breaking* edit, and that cycle was closed by an error
/// report; without this, the fixing save would produce a full run of
/// output out of nowhere, leaving the user unable to tell whether what
/// they are reading is the answer to their fix.
///
/// No paths are named: the session parked on batches it deliberately
/// never classified, so it does not know which of them was the fix.
fn announce_recovery(events: &UnboundedSender<RunEvent>) {
    let _ = events.send(RunEvent::WatchTriggered { paths: Vec::new() });
}

/// How the broken-project idle state ended.
enum Reloaded {
    /// A project the session can work from again, and the sources it came
    /// from. `commanded` is set when a `RunBeam` is what ended the park:
    /// the beam to run, and whether to force it.
    Project {
        project: Project,
        sources: SourceMap,
        commanded: Option<(BeamId, bool)>,
    },
    /// The session ended before one arrived.
    Exit(WatchExit),
}

/// One retry of the load while parked: the project when it comes back, and
/// a fresh report on its way out when the failure is a *different* one.
fn retry_load(
    beamfile: &Path,
    rejected: &mut SourceMap,
    events: &UnboundedSender<RunEvent>,
    render_error: &mut (dyn FnMut(&SessionError) -> String + Send),
) -> Option<(Project, SourceMap)> {
    match alba_core::load_project(beamfile) {
        Ok(loaded) => Some(loaded),
        Err(error) => {
            if error.sources != *rejected {
                *rejected = error.sources.clone();
                let session_error = SessionError::Load(error);
                let _ = events.send(RunEvent::ProjectBroken {
                    diagnostic: render_error(&session_error),
                });
            }
            None
        }
    }
}

/// The broken-project idle state: the last load — or the watched set built
/// from it — failed and was reported; nothing may execute until a project
/// the session can work from exists again. `rejected` is the project text
/// that report was about.
///
/// Every subsequent batch retries the load rather than being classified
/// first: the stale `WatchSet` could still name the Beamfiles it knew
/// about, but not one that a fixed `import` line has only just added, and
/// a retry is one file read plus a parse. What is *not* repeated is the
/// answer: a load whose sources come back byte-for-byte what was already
/// reported on says nothing new, and reprinting it would bury the
/// diagnostic under one copy per write anywhere in the watched tree — an
/// editor's temporary files, an LSP, a build writing its own artifacts.
/// Loading is deterministic, so equal sources mean the same outcome and
/// the same rendering; anything that could change the answer, including
/// the appearance of a file no load ever managed to read, changes them.
///
/// A park answers commands like any other phase — a driver must be able to
/// quit, or retarget, a session that is executing nothing.
#[allow(clippy::too_many_arguments)]
async fn park_until_the_project_changes(
    beamfile: &Path,
    mut rejected: SourceMap,
    events: &UnboundedSender<RunEvent>,
    watcher: &mut dyn Watcher,
    cancel: &CancellationToken,
    commands: &mut Option<UnboundedReceiver<SessionCommand>>,
    watch_enabled: &mut bool,
    render_error: &mut (dyn FnMut(&SessionError) -> String + Send),
) -> Reloaded {
    // Without this the stream's last word is the trigger that means
    // "running", and a consumer would read a stopped session as a busy
    // one for as long as the project stays broken. Zero files is the
    // honest count: nothing is resolved while nothing loads. Announced
    // whether or not watching is on, because a park is not a wait on files:
    // it is the session saying it can do nothing at all.
    let _ = events.send(RunEvent::WatchWaiting { files: 0 });

    loop {
        tokio::select! {
            () = cancel.cancelled() => return Reloaded::Exit(WatchExit::Interrupted),
            command = next_command(commands) => match command {
                // The park's own answer to `RunBeam`: retry the load on the
                // spot and hand the beam back with it, without the "nothing
                // changed" guard the batches below get. A different target
                // can make the very same project text work again — a park
                // on a renamed beam is waiting for exactly that — so a load
                // that comes back byte-for-byte what was rejected is still
                // news here. One that fails again simply re-parks.
                SessionCommand::RunBeam { id, force } => {
                    if let Some((project, sources)) =
                        retry_load(beamfile, &mut rejected, events, render_error)
                    {
                        return Reloaded::Project {
                            project,
                            sources,
                            commanded: Some((id, force)),
                        };
                    }
                }
                // Nothing is in flight to cancel; a park executes nothing.
                SessionCommand::CancelRun => {}
                // Recorded for the session that resumes: a park classifies
                // no batch, so the toggle changes nothing while it lasts.
                SessionCommand::SetWatch(enabled) => *watch_enabled = enabled,
                SessionCommand::Shutdown => return Reloaded::Exit(WatchExit::Interrupted),
            },
            batch = watcher.next_batch() => match batch {
                Some(_) => {
                    if let Some((project, sources)) =
                        retry_load(beamfile, &mut rejected, events, render_error)
                        && sources != rejected
                    {
                        return Reloaded::Project {
                            project,
                            sources,
                            commanded: None,
                        };
                    }
                }
                None => return Reloaded::Exit(WatchExit::WatcherClosed),
            },
        }
    }
}