repopilot 0.16.0

use super::blast_radius::compute_blast_radius;
use super::content_signals::{ContentToggles, detect_content_signals};
use crate::baseline::diff::{
    BaselineScanReport, BaselineStatus, all_findings_new, diff_summary_against_baseline,
};
use crate::baseline::key::{normalized_relative_path, stable_finding_key};
use crate::baseline::model::Baseline;
use crate::config::model::RepoPilotConfig;
use crate::findings::feedback::{ReviewSuppression, validate_local_feedback};
use crate::findings::types::{Evidence, Finding, FindingCategory};
use crate::review::diff::{ChangedFile, OwnedDiffTarget, load_changed_files, resolve_git_root};
use crate::review::model::{ReviewFindingStatus, ReviewReport};
use crate::review::paths::normalized_review_path;
use crate::review::signals::{BoundarySignal, composites, detect_boundary_signals, tiered};
use crate::risk::{apply_blast_radius_overlay, apply_review_overlay};
use crate::scan::types::ScanSummary;
use std::path::{Path, PathBuf};

#[derive(Debug, Clone)]
pub struct ReviewInput {
    pub repo_root: PathBuf,
    pub target: OwnedDiffTarget,
    pub changed_files: Vec<ChangedFile>,
}

pub fn load_review_input(
    scan_path: &Path,
    base: Option<&str>,
    head: Option<&str>,
) -> Result<ReviewInput, crate::review::diff::GitDiffError> {
    load_review_input_with_target(scan_path, OwnedDiffTarget::from_refs(base, head))
}

pub fn load_review_input_since(
    scan_path: &Path,
    base: &str,
) -> Result<ReviewInput, crate::review::diff::GitDiffError> {
    load_review_input_with_target(
        scan_path,
        OwnedDiffTarget::SinceRef {
            base: base.to_string(),
        },
    )
}

fn load_review_input_with_target(
    scan_path: &Path,
    target: OwnedDiffTarget,
) -> Result<ReviewInput, crate::review::diff::GitDiffError> {
    let repo_root = resolve_git_root(scan_path)?;
    let pathspec = pathspec_for_scan_path(scan_path, &repo_root);
    let changed_files = load_changed_files(&repo_root, target.as_borrowed(), pathspec.as_deref())?;
    Ok(ReviewInput {
        repo_root,
        target,
        changed_files,
    })
}

pub fn build_review_report(
    summary: ScanSummary,
    scan_path: &Path,
    base: Option<&str>,
    head: Option<&str>,
    baseline: Option<(&Baseline, PathBuf)>,
    config: &RepoPilotConfig,
) -> Result<ReviewReport, crate::review::diff::GitDiffError> {
    let input = load_review_input(scan_path, base, head)?;
    build_review_report_from_input(summary, input, baseline, config)
}

/// Build a review report for everything changed since `base` — commits on top of
/// it *and* uncommitted working-tree edits (`git diff <base>`). This is the
/// `review --since-snapshot` path: `base` is the `HEAD` sha recorded by
/// `repopilot snapshot` before an agent run.
pub fn build_review_report_since(
    summary: ScanSummary,
    scan_path: &Path,
    base: &str,
    baseline: Option<(&Baseline, PathBuf)>,
    config: &RepoPilotConfig,
) -> Result<ReviewReport, crate::review::diff::GitDiffError> {
    let input = load_review_input_since(scan_path, base)?;
    build_review_report_from_input(summary, input, baseline, config)
}

pub fn build_review_report_from_input(
    summary: ScanSummary,
    input: ReviewInput,
    baseline: Option<(&Baseline, PathBuf)>,
    config: &RepoPilotConfig,
) -> Result<ReviewReport, crate::review::diff::GitDiffError> {
    let ReviewInput {
        repo_root,
        target,
        changed_files,
    } = input;
    let target = target.as_borrowed();
    let boundary_signals = detect_boundary_signals(
        &repo_root,
        target,
        &changed_files,
        &config.security_boundary,
    );
    let content_signals = detect_content_signals(
        &repo_root,
        target,
        &changed_files,
        ContentToggles {
            behavioral: config.behavioral.enabled,
            algorithmic: config.algorithmic.enabled,
            taint: config.taint.enabled,
        },
    );

    let baseline_report = match baseline {
        Some((baseline, baseline_path)) => {
            diff_summary_against_baseline(summary, baseline, baseline_path)
        }
        None => all_findings_new(summary),
    };

    Ok(classify_findings(
        baseline_report,
        repo_root,
        changed_files,
        boundary_signals,
        content_signals,
    ))
}

fn classify_findings(
    baseline_report: BaselineScanReport,
    repo_root: PathBuf,
    changed_files: Vec<ChangedFile>,
    mut boundary_signals: Vec<BoundarySignal>,
    content_signals: super::content_signals::ContentSignals,
) -> ReviewReport {
    let mut summary = baseline_report.summary;
    let blast_radius = compute_blast_radius(&summary, &repo_root, &changed_files);
    composites::enrich_blast_radius(
        &mut boundary_signals,
        summary.artifacts.coupling_graph.as_ref(),
        &repo_root,
    );
    let boundary_missing_test =
        composites::missing_test_for_code_boundary(&boundary_signals, &changed_files);

    let mut tiered_signals = tiered::build_tiered(
        &boundary_signals,
        &content_signals.behavioral,
        &content_signals.algorithmic,
        &content_signals.taint,
        &changed_files,
    );
    tiered::enrich_blast_radius(
        &mut tiered_signals,
        summary.artifacts.coupling_graph.as_ref(),
        &repo_root,
    );
    apply_review_feedback(&mut tiered_signals, &mut summary, &repo_root);

    let mut findings: Vec<ReviewFindingStatus> = summary
        .artifacts
        .findings
        .iter()
        .enumerate()
        .map(|(index, finding)| ReviewFindingStatus {
            key: stable_finding_key(finding, &summary.root_path),
            in_diff: finding_is_in_diff(finding, &repo_root, &changed_files),
            baseline_status: Some(
                baseline_report
                    .findings
                    .get(index)
                    .map(|finding| finding.status)
                    .unwrap_or(BaselineStatus::New),
            ),
        })
        .collect();
    let in_diff = findings
        .iter()
        .map(|status| status.in_diff)
        .collect::<Vec<_>>();
    apply_review_overlay(&mut summary.artifacts.findings, &in_diff);
    apply_blast_radius_overlay(&mut summary.artifacts.findings, &repo_root, &blast_radius);
    sort_findings_with_review_status(&mut summary.artifacts.findings, &mut findings);

    ReviewReport {
        summary,
        repo_root,
        baseline_path: baseline_report.baseline_path,
        changed_files,
        blast_radius,
        boundary_signals,
        boundary_missing_test,
        tiered_signals,
        timings: Default::default(),
        findings,
    }
}

fn apply_review_feedback(
    tiered: &mut crate::review::signals::tiered::TieredSignals,
    summary: &mut ScanSummary,
    repo_root: &Path,
) {
    if summary.local_feedback.is_none() {
        return;
    }
    let Ok(validation) = validate_local_feedback(repo_root) else {
        return;
    };
    let mut suppressed = 0;
    for signal in tiered.iter_mut() {
        let Some(suppression) = validation
            .review_suppressions
            .iter()
            .find(|suppression| review_suppression_matches(suppression, signal))
        else {
            continue;
        };
        signal.suppressed = true;
        signal.gate_eligible = false;
        signal.suppression_reason = suppression.reason.clone();
        suppressed += 1;
    }
    if let Some(report) = summary.local_feedback.as_mut() {
        report.suppressed_review_signals_count = suppressed;
    }
}

fn review_suppression_matches(
    suppression: &ReviewSuppression,
    signal: &crate::review::signals::tiered::ReviewSignal,
) -> bool {
    if suppression.kind != signal.kind || review_suppression_expired(suppression) {
        return false;
    }
    globset::Glob::new(&suppression.path)
        .map(|glob| glob.compile_matcher().is_match(&signal.path))
        .unwrap_or(false)
}

fn review_suppression_expired(suppression: &ReviewSuppression) -> bool {
    suppression
        .expires
        .as_deref()
        .and_then(|value| chrono::NaiveDate::parse_from_str(value, "%Y-%m-%d").ok())
        .is_some_and(|date| date < chrono::Utc::now().date_naive())
}

fn sort_findings_with_review_status(
    findings: &mut Vec<Finding>,
    statuses: &mut Vec<ReviewFindingStatus>,
) {
    let mut paired = findings
        .drain(..)
        .zip(statuses.drain(..))
        .collect::<Vec<_>>();
    paired.sort_by(|(left, _), (right, _)| crate::risk::compare_findings(left, right));
    for (finding, status) in paired {
        findings.push(finding);
        statuses.push(status);
    }
}

fn finding_is_in_diff(finding: &Finding, repo_root: &Path, changed_files: &[ChangedFile]) -> bool {
    finding.evidence.iter().any(|evidence| {
        let evidence_path = normalized_relative_path(&evidence.path, repo_root);
        changed_files.iter().any(|changed_file| {
            if changed_file.path_string() != evidence_path {
                return false;
            }

            changed_file.contains_line(evidence.line_start)
                || is_file_level_architecture_evidence(finding, evidence)
        })
    })
}

fn is_file_level_architecture_evidence(finding: &Finding, evidence: &Evidence) -> bool {
    finding.category == FindingCategory::Architecture
        && evidence.line_start == 1
        && evidence.line_end.is_none()
}

fn pathspec_for_scan_path(scan_path: &Path, repo_root: &Path) -> Option<String> {
    let relative = normalized_review_path(scan_path, repo_root)
        .to_string_lossy()
        .to_string();

    if relative == "." || relative.is_empty() {
        None
    } else {
        Some(relative)
    }
}