poi-tracker 0.15.0

// SPDX-License-Identifier: Apache-2.0 OR MIT

//! Detect inventory packages no longer carried on any active
//! branch (`prune-retired`).
//!
//! A package is a prune candidate when none of its branches is
//! an active release branch, or when it is retired
//! (`dead.package`) on every active branch it has. A package
//! retired on only *some* branches stays, and a name with no
//! `rpms/` project at all (404) is reported as an invalid entry
//! — in practice a non-RPM repo (module, container image, tests)
//! imported under its bare name, or a binary subpackage name.
//! The default action is to mark candidates
//! `unshipped` in the inventory rather than delete them: a fresh
//! `sync-distgit` would re-add retired packages (their ACLs
//! remain), and keeping the tombstone lets `triage-retired`
//! keep closing their remaining bugs. `--remove` deletes
//! entries outright for those who want that.

use sandogasa_distgit::DistGitClient;
use sandogasa_inventory::Inventory;

use crate::triage_retired::{RETRY_ATTEMPTS, retry};

/// Why a package is no longer carried anywhere.
#[derive(Debug, Clone, PartialEq)]
pub enum PruneReason {
    /// `rpms/<name>` no longer exists in dist-git.
    ProjectGone,
    /// The project exists but has no branch in the active set
    /// (only EOL branches remain).
    NoActiveBranch,
    /// `dead.package` is present on every active branch the
    /// project has.
    RetiredEverywhere(Vec<String>),
}

impl PruneReason {
    /// One-line human description for the plan listing.
    pub fn describe(&self) -> String {
        match self {
            PruneReason::ProjectGone => "dist-git project gone (404)".to_string(),
            PruneReason::NoActiveBranch => "no branch on any active release".to_string(),
            PruneReason::RetiredEverywhere(branches) => {
                format!("retired on every active branch ({})", branches.join(", "))
            }
        }
    }
}

/// A package that is no longer carried on any supported branch.
#[derive(Debug, Clone)]
pub struct PruneCandidate {
    pub package: String,
    pub reason: PruneReason,
}

/// Result of a `prune-retired` scan.
pub struct RunReport {
    pub packages_checked: usize,
    /// Names of every package the scan checked (scoped by the
    /// walk filter), for bidirectional marker updates.
    pub checked: Vec<String>,
    /// Packages retired or absent on every active branch —
    /// candidates for marking `unshipped` (or removal).
    pub candidates: Vec<PruneCandidate>,
    /// Entries with no `rpms/` dist-git project (404): the entry
    /// itself is invalid — a non-RPM repo (module, container,
    /// tests) imported under its bare name by an older group
    /// sync, a binary subpackage name recorded instead of the
    /// source package, or a typo. A human should fix or remove
    /// the entry, so these are reported and never marked
    /// `unshipped`.
    pub invalid: Vec<String>,
}

/// Separate project-gone hits from the real prune candidates: a
/// 404 means there is no such source package — in practice a bad
/// inventory entry (non-RPM repo or binary subpackage name).
pub fn split_invalid(findings: Vec<PruneCandidate>) -> (Vec<PruneCandidate>, Vec<String>) {
    let mut candidates = Vec::new();
    let mut invalid = Vec::new();
    for f in findings {
        if f.reason == PruneReason::ProjectGone {
            invalid.push(f.package);
        } else {
            candidates.push(f);
        }
    }
    (candidates, invalid)
}

/// Apply scan results to the inventory's `unshipped` markers:
/// set (or refresh) the reason on candidates, clear it on checked
/// packages that no longer qualify (revived or unretired).
/// Packages outside the scan scope are left alone. Returns the
/// number of packages whose marker changed.
pub fn apply_unshipped_marks(
    inventory: &mut Inventory,
    checked: &[String],
    candidates: &[PruneCandidate],
) -> usize {
    let reasons: std::collections::BTreeMap<&str, String> = candidates
        .iter()
        .map(|c| (c.package.as_str(), c.reason.describe()))
        .collect();
    apply_unshipped_reasons(inventory, checked, &reasons)
}

/// Set or clear `unshipped` markers across `checked` packages from
/// a name→reason map: a checked package present in `reasons` gets
/// that reason, one absent from it has any marker cleared, and a
/// package outside `checked` is left untouched. Returns the count
/// of packages whose marker changed. Shared by `prune-retired` and
/// `sync-* --mark-unshipped`.
pub fn apply_unshipped_reasons(
    inventory: &mut Inventory,
    checked: &[String],
    reasons: &std::collections::BTreeMap<&str, String>,
) -> usize {
    apply_marker(inventory, checked, reasons, |pkg| &mut pkg.unshipped)
}

/// Bidirectionally set/clear an `Option<String>` marker field
/// (selected by `field`) across `checked` packages from a
/// name→reason map. Generic over the field so the same logic
/// drives `unshipped` and `archived_builds`. Returns how many
/// packages changed.
pub fn apply_marker<F>(
    inventory: &mut Inventory,
    checked: &[String],
    reasons: &std::collections::BTreeMap<&str, String>,
    mut field: F,
) -> usize
where
    F: FnMut(&mut sandogasa_inventory::Package) -> &mut Option<String>,
{
    let mut changed = 0usize;
    for name in checked {
        if let Some(pkg) = inventory.find_package_mut(name) {
            let slot = field(pkg);
            let new = reasons.get(name.as_str()).cloned();
            if new != *slot {
                *slot = new;
                changed += 1;
            }
        }
    }
    changed
}

/// Order active branches for checking: rawhide first (the most
/// likely live branch, so the per-package scan short-circuits
/// early), then Fedora releases newest-first, then EPEL
/// newest-first — where the minor-less branch (`epel10`) is the
/// *latest* minor from EPEL 10 onwards and sorts before its
/// versioned siblings (`epel10.2`). Unrecognized names keep
/// their relative order at the end.
pub fn order_active_branches(mut branches: Vec<String>) -> Vec<String> {
    fn key(branch: &str) -> (u8, i64, i64) {
        if branch == "rawhide" {
            return (0, 0, 0);
        }
        if let Some(n) = branch.strip_prefix('f')
            && let Ok(n) = n.parse::<i64>()
        {
            return (1, -n, 0);
        }
        if let Some(rest) = branch.strip_prefix("epel") {
            let (major, minor) = match rest.split_once('.') {
                Some((maj, min)) => (maj.parse::<i64>(), min.parse::<i64>().ok()),
                None => (rest.parse::<i64>(), None),
            };
            if let Ok(major) = major {
                // No minor = the latest minor: sort it first.
                let minor_rank = match minor {
                    None => i64::MIN,
                    Some(m) => -m,
                };
                return (2, -major, minor_rank);
            }
        }
        (3, 0, 0)
    }
    branches.sort_by_key(|b| key(b));
    branches
}

/// Intersect a project's branches with the active branch set,
/// preserving the active-set order.
pub fn relevant_branches(project: &[String], active: &[String]) -> Vec<String> {
    active
        .iter()
        .filter(|b| project.iter().any(|p| p == *b))
        .cloned()
        .collect()
}

/// Scan the inventory for packages that are no longer carried on
/// any branch in `active`. Read-only — the caller decides what to
/// do with the candidates.
///
/// Packages are checked concurrently, bounded by `jobs` in-flight
/// dist-git requests (a 4500-package inventory is ~1-2 requests
/// per package, so this is the difference between minutes and an
/// hour). Candidate order follows the inventory; the first
/// persistent (post-retry) failure aborts the scan.
pub async fn run(
    inventory: &Inventory,
    dg: &DistGitClient,
    active: &[String],
    filter: &crate::WalkFilterArgs,
    jobs: usize,
    verbose: bool,
) -> Result<RunReport, String> {
    let checked: Vec<String> = inventory
        .package
        .iter()
        .filter(|p| filter.matches(&p.name))
        .map(|p| p.name.clone())
        .collect();
    let findings = scan_packages(dg, checked.clone(), active, jobs, verbose).await?;
    let (candidates, invalid) = split_invalid(findings);
    Ok(RunReport {
        packages_checked: checked.len(),
        checked,
        candidates,
        invalid,
    })
}

/// Resolve the active branch set from Bodhi's active releases
/// (plus rawhide), ordered newest-first for early short-circuits.
pub async fn active_branches_from_bodhi() -> Result<Vec<String>, String> {
    let bodhi = sandogasa_bodhi::BodhiClient::new();
    let releases = bodhi
        .active_releases()
        .await
        .map_err(|e| format!("fetching active releases from Bodhi: {e}"))?;
    let mut branches: Vec<String> = releases.into_iter().map(|r| r.branch).collect();
    if !branches.iter().any(|b| b == "rawhide") {
        branches.push("rawhide".to_string());
    }
    Ok(order_active_branches(branches))
}

/// Check `names` against the active branch set with at most
/// `jobs` in-flight dist-git requests, returning the packages no
/// longer carried anywhere (in input order).
pub async fn scan_packages(
    dg: &DistGitClient,
    names: Vec<String>,
    active: &[String],
    jobs: usize,
    verbose: bool,
) -> Result<Vec<PruneCandidate>, String> {
    // The dist-git client's error type isn't Send, so the tasks
    // run on a LocalSet: single-threaded, but the work is purely
    // network-bound, so concurrent in-flight requests are all the
    // parallelism that matters.
    let semaphore = std::sync::Arc::new(tokio::sync::Semaphore::new(jobs.max(1)));
    let active: std::sync::Arc<Vec<String>> = std::sync::Arc::new(active.to_vec());
    let local = tokio::task::LocalSet::new();
    let checked_for_tasks = names;
    let dg = dg.clone();
    local
        .run_until(async move {
            let handles: Vec<_> = checked_for_tasks
                .into_iter()
                .map(|name| {
                    let dg = dg.clone();
                    let semaphore = semaphore.clone();
                    let active = active.clone();
                    tokio::task::spawn_local(async move {
                        let _permit = semaphore
                            .acquire_owned()
                            .await
                            .expect("semaphore never closed");
                        check_package(&dg, &name, &active, verbose).await
                    })
                })
                .collect();

            // Await in spawn order: the report stays in inventory
            // order regardless of completion order. On the first
            // persistent failure, cancel the rest.
            let mut candidates = Vec::new();
            let mut first_err: Option<String> = None;
            for handle in handles {
                if first_err.is_some() {
                    handle.abort();
                    continue;
                }
                match handle.await {
                    Ok(Ok(candidate)) => candidates.extend(candidate),
                    Ok(Err(e)) => first_err = Some(e),
                    Err(e) => first_err = Some(format!("prune-retired worker failed: {e}")),
                }
            }
            match first_err {
                Some(e) => Err(e),
                None => Ok(candidates),
            }
        })
        .await
}

/// Check one package against the active branch set. `Ok(None)`
/// means it is still carried somewhere.
async fn check_package(
    dg: &DistGitClient,
    name: &str,
    active: &[String],
    verbose: bool,
) -> Result<Option<PruneCandidate>, String> {
    let branches = retry(
        &format!("project_branches({name})"),
        RETRY_ATTEMPTS,
        || dg.project_branches(name),
        verbose,
    )
    .await
    .map_err(|e| format!("dist-git branches for {name}: {e}"))?;

    let Some(branches) = branches else {
        if verbose {
            eprintln!("[poi-tracker] {name}: project gone");
        }
        return Ok(Some(PruneCandidate {
            package: name.to_string(),
            reason: PruneReason::ProjectGone,
        }));
    };

    let relevant = relevant_branches(&branches, active);
    if relevant.is_empty() {
        if verbose {
            eprintln!(
                "[poi-tracker] {name}: no active branch (has: {})",
                branches.join(", ")
            );
        }
        return Ok(Some(PruneCandidate {
            package: name.to_string(),
            reason: PruneReason::NoActiveBranch,
        }));
    }

    for branch in &relevant {
        if verbose {
            eprintln!("[poi-tracker] {name}: checking retirement on {branch}");
        }
        let retired = retry(
            &format!("is_retired({name}, {branch})"),
            RETRY_ATTEMPTS,
            || dg.is_retired(name, branch),
            verbose,
        )
        .await
        .map_err(|e| format!("dist-git is_retired for {name} on {branch}: {e}"))?;
        if !retired {
            return Ok(None);
        }
    }
    Ok(Some(PruneCandidate {
        package: name.to_string(),
        reason: PruneReason::RetiredEverywhere(relevant),
    }))
}

#[cfg(test)]
mod tests {
    use super::*;

    fn s(items: &[&str]) -> Vec<String> {
        items.iter().map(|i| i.to_string()).collect()
    }

    #[test]
    fn order_active_branches_rawhide_fedora_then_epel() {
        // Bodhi's listing order is alphabetical-ish; checking
        // order wants newest/most-likely-live first.
        let bodhi = s(&[
            "epel10.2", "epel10", "epel8", "epel9", "f43", "f44", "rawhide",
        ]);
        assert_eq!(
            order_active_branches(bodhi),
            s(&[
                "rawhide", "f44", "f43", "epel10", "epel10.2", "epel9", "epel8",
            ])
        );
    }

    #[test]
    fn order_active_branches_minors_descend_after_latest() {
        let branches = s(&["epel10.1", "epel10", "epel10.2"]);
        assert_eq!(
            order_active_branches(branches),
            s(&["epel10", "epel10.2", "epel10.1"])
        );
    }

    #[test]
    fn relevant_branches_intersects_in_active_order() {
        let project = s(&["epel8", "epel9", "f38", "main", "rawhide"]);
        let active = s(&["rawhide", "f44", "f43", "epel9", "epel8"]);
        assert_eq!(
            relevant_branches(&project, &active),
            s(&["rawhide", "epel9", "epel8"])
        );
    }

    #[test]
    fn relevant_branches_empty_for_eol_only_project() {
        // Only EOL branches: nothing active carries it.
        let project = s(&["el6", "f20", "f25"]);
        let active = s(&["rawhide", "f44", "epel9"]);
        assert!(relevant_branches(&project, &active).is_empty());
    }

    #[test]
    fn relevant_branches_epel_minor_versions_match_exactly() {
        // Bodhi reports both epel10 (latest minor) and epel10.N
        // (older minors still current); dist-git has matching
        // branch names, so plain string equality is correct.
        let project = s(&["epel10", "rawhide"]);
        let active = s(&["rawhide", "epel10.2", "epel10"]);
        assert_eq!(
            relevant_branches(&project, &active),
            s(&["rawhide", "epel10"])
        );
    }

    fn inv(packages: &[(&str, Option<&str>)]) -> sandogasa_inventory::Inventory {
        let mut toml =
            String::from("[inventory]\nname = \"t\"\ndescription = \"t\"\nmaintainer = \"t\"\n");
        for (name, unshipped) in packages {
            toml.push_str(&format!("\n[[package]]\nname = \"{name}\"\n"));
            if let Some(reason) = unshipped {
                toml.push_str(&format!("unshipped = \"{reason}\"\n"));
            }
        }
        sandogasa_inventory::parse(&toml).unwrap()
    }

    #[test]
    fn apply_marks_sets_clears_and_skips_unchecked() {
        let mut inventory = inv(&[
            ("gone-pkg", None),
            ("revived-pkg", Some("stale reason")),
            ("unchecked-pkg", Some("kept")),
            ("live-pkg", None),
        ]);
        let checked = s(&["gone-pkg", "revived-pkg", "live-pkg"]);
        let candidates = vec![PruneCandidate {
            package: "gone-pkg".to_string(),
            reason: PruneReason::ProjectGone,
        }];
        let changed = apply_unshipped_marks(&mut inventory, &checked, &candidates);
        assert_eq!(changed, 2); // gone-pkg set, revived-pkg cleared
        assert!(inventory.find_package("gone-pkg").unwrap().is_unshipped());
        assert!(
            !inventory
                .find_package("revived-pkg")
                .unwrap()
                .is_unshipped()
        );
        // Outside the scan scope: untouched.
        assert_eq!(
            inventory.find_package("unchecked-pkg").unwrap().unshipped,
            Some("kept".to_string())
        );
        assert!(!inventory.find_package("live-pkg").unwrap().is_unshipped());
    }

    #[test]
    fn apply_marks_idempotent() {
        let mut inventory = inv(&[("gone-pkg", Some("dist-git project gone (404)"))]);
        let checked = s(&["gone-pkg"]);
        let candidates = vec![PruneCandidate {
            package: "gone-pkg".to_string(),
            reason: PruneReason::ProjectGone,
        }];
        assert_eq!(
            apply_unshipped_marks(&mut inventory, &checked, &candidates),
            0
        );
    }

    #[tokio::test]
    async fn run_classifies_packages_concurrently_in_inventory_order() {
        use wiremock::matchers::{method, path};
        use wiremock::{Mock, MockServer, ResponseTemplate};

        let server = MockServer::start().await;
        let branches = |list: &[&str]| {
            ResponseTemplate::new(200).set_body_json(serde_json::json!({"branches": list}))
        };

        // gone-pkg: project 404s.
        Mock::given(method("GET"))
            .and(path("/api/0/rpms/gone-pkg/git/branches"))
            .respond_with(ResponseTemplate::new(404))
            .mount(&server)
            .await;
        // live-pkg: live on rawhide.
        Mock::given(method("GET"))
            .and(path("/api/0/rpms/live-pkg/git/branches"))
            .respond_with(branches(&["rawhide"]))
            .mount(&server)
            .await;
        Mock::given(method("GET"))
            .and(path("/rpms/live-pkg/raw/rawhide/f/dead.package"))
            .respond_with(ResponseTemplate::new(404))
            .mount(&server)
            .await;
        // dead-pkg: retired on both active branches it has.
        Mock::given(method("GET"))
            .and(path("/api/0/rpms/dead-pkg/git/branches"))
            .respond_with(branches(&["rawhide", "epel9"]))
            .mount(&server)
            .await;
        for branch in ["rawhide", "epel9"] {
            Mock::given(method("GET"))
                .and(path(format!("/rpms/dead-pkg/raw/{branch}/f/dead.package")))
                .respond_with(ResponseTemplate::new(200))
                .mount(&server)
                .await;
        }
        // eol-pkg: only an EOL branch left.
        Mock::given(method("GET"))
            .and(path("/api/0/rpms/eol-pkg/git/branches"))
            .respond_with(branches(&["f20"]))
            .mount(&server)
            .await;

        let inventory = inv(&[
            ("gone-pkg", None),
            ("live-pkg", None),
            ("dead-pkg", None),
            ("eol-pkg", None),
        ]);
        let dg = DistGitClient::with_base_url(&server.uri());
        let active = s(&["rawhide", "epel9"]);
        let filter = crate::WalkFilterArgs::default();

        let report = run(&inventory, &dg, &active, &filter, 4, false)
            .await
            .unwrap();
        assert_eq!(report.packages_checked, 4);
        assert_eq!(report.checked.len(), 4);
        // A 404 is an invalid entry, not a prune candidate.
        assert_eq!(report.invalid, s(&["gone-pkg"]));
        // Inventory order, live-pkg absent.
        let got: Vec<(&str, &PruneReason)> = report
            .candidates
            .iter()
            .map(|c| (c.package.as_str(), &c.reason))
            .collect();
        assert_eq!(got.len(), 2);
        assert_eq!(
            got[0],
            (
                "dead-pkg",
                &PruneReason::RetiredEverywhere(s(&["rawhide", "epel9"]))
            )
        );
        assert_eq!(got[1], ("eol-pkg", &PruneReason::NoActiveBranch));
    }

    #[test]
    fn split_invalid_separates_project_gone() {
        let findings = vec![
            PruneCandidate {
                package: "askalono-cli".to_string(),
                reason: PruneReason::ProjectGone,
            },
            PruneCandidate {
                package: "dead-pkg".to_string(),
                reason: PruneReason::RetiredEverywhere(s(&["rawhide"])),
            },
            PruneCandidate {
                package: "eol-pkg".to_string(),
                reason: PruneReason::NoActiveBranch,
            },
        ];
        let (candidates, invalid) = split_invalid(findings);
        assert_eq!(invalid, s(&["askalono-cli"]));
        assert_eq!(candidates.len(), 2);
        assert!(
            candidates
                .iter()
                .all(|c| c.reason != PruneReason::ProjectGone)
        );
    }

    #[test]
    fn describe_reasons() {
        assert!(PruneReason::ProjectGone.describe().contains("404"));
        assert!(
            PruneReason::NoActiveBranch
                .describe()
                .contains("active release")
        );
        let r = PruneReason::RetiredEverywhere(s(&["rawhide", "epel9"]));
        assert!(r.describe().contains("rawhide, epel9"), "{}", r.describe());
    }
}