rippy-cli 0.1.2

use std::path::Path;

use super::{Classification, Handler, HandlerContext, has_flag, is_within_scope, normalize_path};

pub static GIT_HANDLER: GitHandler = GitHandler;

pub struct GitHandler;

const SAFE_SUBCOMMANDS: &[&str] = &[
    "status",
    "log",
    "show",
    "diff",
    "blame",
    "annotate",
    "shortlog",
    "describe",
    "rev-parse",
    "rev-list",
    "reflog",
    "whatchanged",
    "diff-tree",
    "diff-files",
    "diff-index",
    "range-diff",
    "format-patch",
    "difftool",
    "grep",
    "ls-files",
    "ls-tree",
    "ls-remote",
    "cat-file",
    "verify-commit",
    "verify-tag",
    "name-rev",
    "merge-base",
    "show-ref",
    "show-branch",
    "check-ignore",
    "cherry",
    "for-each-ref",
    "count-objects",
    "fsck",
    "var",
    "request-pull",
    "archive",
    "fetch",
    "version",
    "help",
];

const ASK_SUBCOMMANDS: &[&str] = &[
    "commit",
    "add",
    "rm",
    "mv",
    "restore",
    "reset",
    "revert",
    "push",
    "pull",
    "checkout",
    "switch",
    "merge",
    "rebase",
    "cherry-pick",
    "clean",
    "gc",
    "prune",
    "filter-branch",
    "filter-repo",
    "submodule",
    "worktree",
    "init",
    "clone",
    "am",
    "apply",
];

/// Global flags that take a value argument (skip both flag and value).
const GLOBAL_VALUE_FLAGS: &[&str] = &[
    "-C",
    "-c",
    "--git-dir",
    "--work-tree",
    "--namespace",
    "--super-prefix",
    "--config-env",
];

/// Global flags that are standalone (skip just the flag).
const GLOBAL_FLAGS: &[&str] = &[
    "--no-pager",
    "--bare",
    "--no-replace-objects",
    "--literal-pathspecs",
    "--glob-pathspecs",
    "--noglob-pathspecs",
    "--icase-pathspecs",
    "--no-optional-locks",
    "--paginate",
    "-p",
];

impl Handler for GitHandler {
    fn commands(&self) -> &[&str] {
        &["git"]
    }

    fn classify(&self, ctx: &HandlerContext) -> Classification {
        // Check if -C, --git-dir, or --work-tree points outside allowed scope
        if let Some(verdict) = check_repo_path_flags(ctx) {
            return verdict;
        }

        let (sub, sub_args) = extract_subcommand(ctx.args);
        let desc = format!("git {sub}");

        if sub.is_empty() {
            return Classification::Allow("git (no subcommand)".into());
        }

        if SAFE_SUBCOMMANDS.contains(&sub.as_str()) {
            return Classification::Allow(desc);
        }

        if ASK_SUBCOMMANDS.contains(&sub.as_str()) {
            return Classification::Ask(desc);
        }

        // Complex subcommands with sub-subcommand analysis
        match sub.as_str() {
            "branch" => classify_branch(&sub_args),
            "tag" => classify_tag(&sub_args),
            "remote" => classify_remote(&sub_args),
            "stash" => classify_stash(&sub_args),
            "config" => classify_config(&sub_args),
            "notes" => classify_notes(&sub_args),
            "bisect" => classify_bisect(&sub_args),
            "lfs" => classify_lfs(&sub_args),
            _ => Classification::Ask(desc),
        }
    }
}

/// Flags that redirect git to a different repository location.
const REPO_PATH_FLAGS: &[&str] = &["-C", "--git-dir", "--work-tree"];

/// If git is invoked with -C, --git-dir, or --work-tree pointing outside
/// the allowed scope, return Ask. Otherwise return None to continue
/// normal classification.
fn check_repo_path_flags(ctx: &HandlerContext) -> Option<Classification> {
    let normalized_cwd = normalize_path(ctx.working_directory);
    let mut i = 0;
    while i < ctx.args.len() {
        let arg = &ctx.args[i];
        if REPO_PATH_FLAGS.contains(&arg.as_str()) {
            if let Some(value) = ctx.args.get(i + 1) {
                let resolved = if Path::new(value.as_str()).is_absolute() {
                    normalize_path(Path::new(value.as_str()))
                } else {
                    normalize_path(&ctx.working_directory.join(value.as_str()))
                };
                if !is_within_scope(&resolved, &normalized_cwd, ctx.cd_allowed_dirs) {
                    return Some(Classification::Ask(format!(
                        "git {arg} targets outside allowed scope ({value})"
                    )));
                }
            }
            i += 2;
            continue;
        }
        i += 1;
    }
    None
}

fn extract_subcommand(args: &[String]) -> (String, Vec<String>) {
    let mut i = 0;
    while i < args.len() {
        let arg = &args[i];
        if GLOBAL_VALUE_FLAGS.contains(&arg.as_str()) {
            i += 2; // skip flag and its value
            continue;
        }
        if GLOBAL_FLAGS.contains(&arg.as_str()) {
            i += 1;
            continue;
        }
        if arg.starts_with('-') {
            i += 1;
            continue;
        }
        return (arg.clone(), args[i + 1..].to_vec());
    }
    (String::new(), Vec::new())
}

fn classify_branch(args: &[String]) -> Classification {
    if has_flag(
        args,
        &["-d", "-D", "-m", "-M", "-c", "-C", "--set-upstream-to"],
    ) {
        Classification::Ask("git branch (modify)".into())
    } else {
        Classification::Allow("git branch (list)".into())
    }
}

fn classify_tag(args: &[String]) -> Classification {
    if has_flag(args, &["-d", "--delete"]) {
        Classification::Ask("git tag (delete)".into())
    } else if args.iter().any(|a| !a.starts_with('-')) {
        Classification::Ask("git tag (create)".into())
    } else {
        Classification::Allow("git tag (list)".into())
    }
}

fn classify_remote(args: &[String]) -> Classification {
    let sub = args.first().map_or("", String::as_str);
    match sub {
        "show" | "" => Classification::Allow("git remote (view)".into()),
        "get-url" => Classification::Allow("git remote get-url".into()),
        _ => Classification::Ask(format!("git remote {sub}")),
    }
}

fn classify_stash(args: &[String]) -> Classification {
    let sub = args.first().map_or("", String::as_str);
    match sub {
        "list" | "show" => Classification::Allow(format!("git stash {sub}")),
        "" => Classification::Ask("git stash".into()),
        _ => Classification::Ask(format!("git stash {sub}")),
    }
}

fn classify_config(args: &[String]) -> Classification {
    if has_flag(
        args,
        &["--get", "--get-all", "--list", "-l", "--get-regexp"],
    ) {
        Classification::Allow("git config (read)".into())
    } else if has_flag(args, &["--unset", "--add", "--edit", "--replace-all"]) {
        Classification::Ask("git config (write)".into())
    } else if args.len() <= 1 {
        // Single key read
        Classification::Allow("git config (read)".into())
    } else {
        Classification::Ask("git config (write)".into())
    }
}

fn classify_notes(args: &[String]) -> Classification {
    let sub = args.first().map_or("", String::as_str);
    match sub {
        "list" | "show" | "" => Classification::Allow(format!("git notes {sub}")),
        _ => Classification::Ask(format!("git notes {sub}")),
    }
}

fn classify_bisect(args: &[String]) -> Classification {
    let sub = args.first().map_or("", String::as_str);
    match sub {
        "log" | "visualize" | "view" => Classification::Allow(format!("git bisect {sub}")),
        _ => Classification::Ask(format!("git bisect {sub}")),
    }
}

fn classify_lfs(args: &[String]) -> Classification {
    let sub = args.first().map_or("", String::as_str);
    match sub {
        "fetch" | "ls-files" | "status" | "env" | "version" => {
            Classification::Allow(format!("git lfs {sub}"))
        }
        _ => Classification::Ask(format!("git lfs {sub}")),
    }
}

#[cfg(test)]
#[allow(clippy::unwrap_used)]
mod tests {
    use std::path::Path;

    use super::*;

    fn ctx(args: &[String]) -> HandlerContext<'_> {
        HandlerContext {
            command_name: "git",
            args,
            working_directory: Path::new("/tmp"),
            remote: false,
            receives_piped_input: false,
            cd_allowed_dirs: &[],
        }
    }

    #[test]
    fn safe_commands() {
        for sub in &["status", "log", "diff", "fetch", "show", "blame"] {
            let args = vec![sub.to_string()];
            let result = GIT_HANDLER.classify(&ctx(&args));
            assert!(
                matches!(result, Classification::Allow(_)),
                "expected allow for git {sub}"
            );
        }
    }

    #[test]
    fn ask_commands() {
        for sub in &["commit", "push", "merge", "reset", "checkout"] {
            let args = vec![sub.to_string()];
            let result = GIT_HANDLER.classify(&ctx(&args));
            assert!(
                matches!(result, Classification::Ask(_)),
                "expected ask for git {sub}"
            );
        }
    }

    #[test]
    fn branch_list_is_safe() {
        let args = vec!["branch".into()];
        let result = GIT_HANDLER.classify(&ctx(&args));
        assert!(matches!(result, Classification::Allow(_)));
    }

    #[test]
    fn branch_delete_is_ask() {
        let args = vec!["branch".into(), "-D".into(), "feature".into()];
        let result = GIT_HANDLER.classify(&ctx(&args));
        assert!(matches!(result, Classification::Ask(_)));
    }

    #[test]
    fn stash_list_is_safe() {
        let args = vec!["stash".into(), "list".into()];
        let result = GIT_HANDLER.classify(&ctx(&args));
        assert!(matches!(result, Classification::Allow(_)));
    }

    #[test]
    fn global_flags_skipped() {
        let args = vec!["-C".into(), "/tmp".into(), "status".into()];
        let result = GIT_HANDLER.classify(&ctx(&args));
        assert!(matches!(result, Classification::Allow(_)));
    }

    #[test]
    fn dash_c_outside_scope_asks() {
        let args = vec!["-C".into(), "/etc".into(), "status".into()];
        let result = GIT_HANDLER.classify(&ctx(&args));
        assert!(matches!(result, Classification::Ask(_)));
    }

    #[test]
    fn git_dir_outside_scope_asks() {
        let args = vec!["--git-dir".into(), "/etc/repo/.git".into(), "log".into()];
        let result = GIT_HANDLER.classify(&ctx(&args));
        assert!(matches!(result, Classification::Ask(_)));
    }

    #[test]
    fn work_tree_outside_scope_asks() {
        let args = vec![
            "--work-tree".into(),
            "/etc/checkout".into(),
            "status".into(),
        ];
        let result = GIT_HANDLER.classify(&ctx(&args));
        assert!(matches!(result, Classification::Ask(_)));
    }

    #[test]
    fn dash_c_within_project_allows() {
        let args = vec!["-C".into(), "/tmp/subdir".into(), "status".into()];
        let result = GIT_HANDLER.classify(&ctx(&args));
        assert!(matches!(result, Classification::Allow(_)));
    }

    #[test]
    fn dash_c_relative_allows() {
        let args = vec!["-C".into(), "subdir".into(), "status".into()];
        let result = GIT_HANDLER.classify(&ctx(&args));
        assert!(matches!(result, Classification::Allow(_)));
    }

    #[test]
    fn dash_c_config_allowed() {
        let allowed = vec![std::path::PathBuf::from("/opt/repos")];
        let args = vec!["-C".into(), "/opt/repos/other".into(), "status".into()];
        let ctx = HandlerContext {
            command_name: "git",
            args: &args,
            working_directory: Path::new("/tmp"),
            remote: false,
            receives_piped_input: false,
            cd_allowed_dirs: &allowed,
        };
        assert!(matches!(
            GIT_HANDLER.classify(&ctx),
            Classification::Allow(_)
        ));
    }
}