anodizer-core 0.15.3

use anyhow::{Result, bail};
use std::path::Path;
use std::process::Command;

mod commits;
mod conventional;
mod detect;
mod github_api;
mod github_probe;
mod mailmap;
mod remote;
mod semver;
mod slug;
mod snapshot_sde;
mod status;
mod tags;
pub mod worktree;

#[cfg(test)]
mod tests;

pub use commits::{
    Commit, CommitWithFiles, CommitterIdentity, RELEASE_COMMIT_PREFIX, SHORT_COMMIT_LEN,
    add_path_in, branches_containing_sha_in, commit_in, commit_subject_in, commits_between_in,
    commits_with_subjects_in, count_commits_since_last_tag_in, get_all_commits, get_all_commits_in,
    get_all_commits_paths, get_all_commits_paths_in, get_all_commits_paths_with_files_in,
    get_commit_messages_between, get_commit_messages_between_in, get_commit_messages_between_path,
    get_commit_messages_between_path_in, get_commits_between, get_commits_between_in,
    get_commits_between_paths, get_commits_between_paths_in,
    get_commits_between_paths_with_files_in, get_commits_reachable_paths_in,
    get_commits_reachable_paths_with_files_in, get_current_branch, get_current_branch_in,
    get_current_branch_in_with_env, get_head_commit, get_head_commit_in, get_last_commit_messages,
    get_last_commit_messages_in, get_last_commit_messages_path, get_last_commit_messages_path_in,
    get_short_commit, get_short_commit_in, has_changes_since, has_changes_since_in,
    has_commits_since_tag, has_commits_since_tag_in, head_commit_hash_in, head_commit_timestamp_in,
    is_branchlike, log_subjects_for_range, parse_commit_output, parse_commit_output_with_files,
    paths_changed_since_tag, paths_changed_since_tag_in, push_branch_in, release_bump_subject,
    release_bump_subject_prefix, reset_hard_in, resolve_rollback_identity, rev_parse_in,
    rev_verify_commit_in, revert_commit_in, short_commit_str, stage_and_commit,
    stage_and_commit_in,
};
pub use conventional::{ConventionalLevel, classify_commit};
pub use detect::{GitInfo, detect_git_info, detect_git_info_in};
pub use github_api::{
    GITHUB_TOKEN_ENV_LADDER, commit_author_login, commit_author_login_with_binary,
    create_tag_via_github_api, create_tag_via_github_api_in, gh_api_get, gh_api_get_paginated,
    gh_api_get_paginated_with_binary, gh_api_get_with_binary, github_token_env_hint,
    github_token_hint, resolve_github_token, resolve_github_token_with_env,
};
pub use github_probe::{
    RepoAccessOutcomes, RepoProbe, github_repo_probe, github_repo_push_check,
    is_rate_limit_signature, is_secondary_rate_limit_signature, probe_to_push_check,
    response_is_rate_limited,
};
pub use mailmap::canonical_author_email_in;
// The owner/repo detectors are intentionally NOT re-exported publicly: the
// only public path to a repository identity is a `slug::resolve_*` function,
// which applies the config-override -> remote precedence in one place. See
// `slug.rs`. `detect_remote_web_base_in` stays public — it is the dedicated
// host-preserving web-base resolver (changelog compare footers) and has no
// owner/name duplication to funnel.
pub use remote::{detect_remote_web_base_in, has_remote_in, parse_remote_web_base};
pub use semver::{SemVer, parse_semver, parse_semver_tag};
pub use slug::{
    RepoSlug, resolve_github_slug, resolve_github_slug_in, resolve_repo_slug, resolve_repo_slug_in,
};
pub use snapshot_sde::resolve_snapshot_sde;
pub use status::{
    check_git_available, git_status_porcelain, git_status_porcelain_in,
    git_status_porcelain_result_in, is_git_dirty, is_git_dirty_in, is_git_repo, is_git_repo_in,
    is_shallow_clone, is_shallow_clone_in, list_tracked_files_in, local_git_user_email,
    local_git_user_email_in, local_git_user_name, local_git_user_name_in,
};
pub use tags::{
    AtomicPushSpec, create_and_push_tag, create_and_push_tag_in, create_tag_local_only,
    delete_local_tag_in, delete_remote_tag_in, extract_tag_prefix, find_latest_tag_matching,
    find_latest_tag_matching_in, find_latest_tag_matching_with_prefix,
    find_latest_tag_matching_with_prefix_in, find_previous_tag, find_previous_tag_in,
    find_previous_tag_with_prefix, find_previous_tag_with_prefix_in, get_all_semver_tags,
    get_all_semver_tags_in, get_branch_semver_tags, get_branch_semver_tags_in, get_first_commit,
    get_first_commit_in, get_tags_at_head, get_tags_at_head_in, get_tags_at_sha_in,
    has_version_placeholder, head_is_at_tag, list_tags_with_prefix, per_crate_tag_prefix,
    push_branch_and_tags_atomic_in, render_ignore_patterns, strip_monorepo_prefix,
    tag_points_at_head, tag_points_at_head_in,
};
pub use worktree::Worktree;

/// Run `git` in `cwd` and return stdout, trimmed.
///
/// Shared low-level git invocation wrapper. Path-taking so callers
/// that don't own the process cwd — notably tests against a `tempfile::tempdir()`
/// fixture repo — can drive git without mutating the process-wide cwd
/// (which would race every other parallel test). The no-arg public wrappers
/// in sibling submodules delegate here with `std::env::current_dir()`.
///
/// On non-zero exit the stderr is passed through
/// [`crate::redact::redact_process_env`] before interpolation, so any
/// token-bearing remote URL git might echo (e.g.
/// `https://ghp_xxx@github.com/...` produced by an `extraHeader` config
/// leak) is scrubbed in the bail message.
pub(crate) fn git_output_in(cwd: &Path, args: &[&str]) -> Result<String> {
    // `GIT_TERMINAL_PROMPT=0` + `LC_ALL=C` pinned on every spawn so:
    //   - a credential helper / nested config can't hang the wrapper
    //     waiting for interactive input (unattended CI hosts),
    //   - locale-sensitive stderr / stdout messages (e.g. "not found",
    //     "remote ref does not exist") stay in English so substring
    //     matching in caller code is stable.
    let output = Command::new("git")
        .current_dir(cwd)
        .args(args)
        .env("GIT_TERMINAL_PROMPT", "0")
        .env("LC_ALL", "C")
        .output()?;
    if !output.status.success() {
        let stderr_raw = String::from_utf8_lossy(&output.stderr);
        let stderr_trim = stderr_raw.trim();
        // Some git failure paths print only on stdout (notably `git commit`
        // with "nothing to commit, working tree clean"). When stderr is
        // empty, fall back to stdout so the bail message is diagnostic
        // instead of `failed: ` with no further detail.
        let detail = if stderr_trim.is_empty() {
            String::from_utf8_lossy(&output.stdout).trim().to_string()
        } else {
            stderr_trim.to_string()
        };
        let raw = format!("git {} failed: {}", args.join(" "), detail);
        bail!("{}", crate::redact::redact_process_env(&raw));
    }
    Ok(String::from_utf8_lossy(&output.stdout).trim().to_string())
}