shine-cli 1.8.0

use std::collections::HashSet;
use std::path::{Path, PathBuf};
use std::process::Stdio;

use anyhow::{Context, Result, bail};
use tokio::process::Command;

use crate::colors;
use crate::config::Config;

#[derive(Debug, Eq, PartialEq)]
struct PullTarget {
    label: &'static str,
    path: PathBuf,
}

/// Pull each Git repository that contributes to the effective preset namespace.
pub async fn handle_pull(config: &Config, verbose: bool) -> Result<()> {
    let overlay_git = config.overlay_git_source();

    let targets = configured_targets(config);
    let mut repositories = Vec::new();
    let mut seen = HashSet::new();

    for target in targets {
        match repository_root(&target.path).await? {
            Some(root) if seen.insert(root.clone()) => repositories.push((target.label, root)),
            Some(root) if verbose => println!(
                "  {} {} ({})",
                colors::dim("skipped"),
                target.label,
                colors::dim(&format!("same repository: {}", root.display()))
            ),
            Some(_) => {}
            None if verbose => println!(
                "  {} {} ({})",
                colors::dim("skipped"),
                target.label,
                colors::dim(&format!("not a Git repository: {}", target.path.display()))
            ),
            None => {}
        }
    }

    if overlay_git.is_none() && repositories.is_empty() {
        println!("{}", colors::dim("Nothing to pull."));
        return Ok(());
    }

    // Validate every fast-forward repository before changing any of them.
    for (label, root) in &repositories {
        ensure_clean(label, root).await?;
        ensure_tracking_branch(label, root).await?;
    }

    println!("{}", colors::bold("Preset Sources"));

    // The shine-managed Git overlay syncs first: cloned on first use, then
    // force-mirrored to the remote tip on every subsequent pull.
    if let Some((url, branch, dir)) = overlay_git {
        sync_managed_overlay(url, branch, dir, verbose).await?;
    }

    for (label, root) in repositories {
        if verbose {
            println!("Pulling {label} from {} ...", root.display());
        }
        let summary = pull_ff_only(&root, verbose).await?;
        print_pull_summary(label, &summary);
    }

    Ok(())
}

fn configured_targets(config: &Config) -> Vec<PullTarget> {
    let mut targets = vec![PullTarget {
        label: "preset source",
        path: config.presets_dir().to_path_buf(),
    }];
    // Only a *manually linked* overlay is fast-forward-pulled here. A
    // shine-managed Git overlay (`presets_overlay_git`) is force-mirrored
    // separately by `sync_managed_overlay` and must never go through the
    // clean-worktree / fast-forward path.
    if let Some(path) = config.presets_overlay_dir_override.as_deref() {
        targets.push(PullTarget {
            label: "overlay source",
            path: path.to_path_buf(),
        });
    }
    targets
}

async fn repository_root(path: &Path) -> Result<Option<PathBuf>> {
    let output = Command::new("git")
        .args(["rev-parse", "--show-toplevel"])
        .current_dir(path)
        .output()
        .await
        .with_context(|| "failed to run git; install Git and ensure it is available in PATH")?;

    if !output.status.success() {
        let detail = String::from_utf8_lossy(&output.stderr);
        if detail.contains("not a git repository") {
            return Ok(None);
        }
        bail!(
            "failed to inspect Git repository at {}: {}",
            path.display(),
            detail.trim()
        );
    }

    let root =
        String::from_utf8(output.stdout).context("git returned a non-UTF-8 repository path")?;
    let root = root.trim();
    if root.is_empty() {
        bail!(
            "git returned an empty repository root for {}",
            path.display()
        );
    }
    Ok(Some(PathBuf::from(root)))
}

async fn ensure_clean(label: &str, root: &Path) -> Result<()> {
    let output = git_output(root, &["status", "--porcelain=v1", "--untracked-files=all"]).await?;
    if !output.status.success() {
        let detail = String::from_utf8_lossy(&output.stderr);
        bail!(
            "failed to inspect {label} repository {}: {}",
            root.display(),
            detail.trim()
        );
    }
    if !output.stdout.is_empty() {
        bail!(
            "refusing to pull {label}: Git worktree has uncommitted changes: {}\nCommit, stash, or discard the changes, then run 'shine preset pull' again.",
            root.display()
        );
    }
    Ok(())
}

async fn ensure_tracking_branch(label: &str, root: &Path) -> Result<()> {
    let branch = git_output(root, &["symbolic-ref", "--quiet", "--short", "HEAD"]).await?;
    if !branch.status.success() {
        bail!(
            "refusing to pull {label}: repository is in detached HEAD state: {}",
            root.display()
        );
    }

    let upstream = git_output(
        root,
        &[
            "rev-parse",
            "--abbrev-ref",
            "--symbolic-full-name",
            "@{upstream}",
        ],
    )
    .await?;
    if !upstream.status.success() {
        let branch = String::from_utf8_lossy(&branch.stdout);
        bail!(
            "refusing to pull {label}: branch '{}' has no upstream: {}",
            branch.trim(),
            root.display()
        );
    }
    Ok(())
}

#[derive(Debug, PartialEq, Eq)]
struct PullSummary {
    before: String,
    after: String,
    shortstat: Option<String>,
}

impl PullSummary {
    fn updated(&self) -> bool {
        self.before != self.after
    }
}

async fn pull_ff_only(root: &Path, verbose: bool) -> Result<PullSummary> {
    let before = head_short(root).await?;
    let mut command = Command::new("git");
    command
        .args(["pull", "--ff-only"])
        .current_dir(root)
        .stdin(Stdio::inherit());
    let failure_detail = if verbose {
        let status = command
            .stdout(Stdio::inherit())
            .stderr(Stdio::inherit())
            .status()
            .await
            .with_context(|| "failed to run git; install Git and ensure it is available in PATH")?;
        if status.success() {
            None
        } else {
            Some(format!("status {status}"))
        }
    } else {
        let output = command
            .output()
            .await
            .with_context(|| "failed to run git; install Git and ensure it is available in PATH")?;
        if output.status.success() {
            None
        } else {
            let stdout = String::from_utf8_lossy(&output.stdout);
            let stderr = String::from_utf8_lossy(&output.stderr);
            Some(
                [stdout.trim(), stderr.trim()]
                    .into_iter()
                    .filter(|part| !part.is_empty())
                    .collect::<Vec<_>>()
                    .join("\n"),
            )
        }
    };
    if let Some(detail) = failure_detail {
        bail!(
            "Git pull failed in {}: {}\nResolve the Git error, then run 'shine preset pull' again.",
            root.display(),
            detail
        );
    }

    let after = head_short(root).await?;
    let shortstat = if before == after {
        None
    } else {
        let output = git_output(root, &["diff", "--shortstat", &before, &after]).await?;
        output
            .status
            .success()
            .then(|| String::from_utf8_lossy(&output.stdout).trim().to_string())
    }
    .filter(|stat| !stat.is_empty());
    Ok(PullSummary {
        before,
        after,
        shortstat,
    })
}

async fn head_short(root: &Path) -> Result<String> {
    let output = git_output(root, &["rev-parse", "--short=7", "HEAD"]).await?;
    if !output.status.success() {
        bail!("failed to resolve Git HEAD in {}", root.display());
    }
    Ok(String::from_utf8_lossy(&output.stdout).trim().to_string())
}

fn print_pull_summary(label: &str, summary: &PullSummary) {
    if summary.updated() {
        let stat = summary
            .shortstat
            .as_deref()
            .map(|value| format!("  {}", colors::dim(value)))
            .unwrap_or_default();
        println!(
            "  {}  {} updated  {} → {}{}",
            colors::symbol("✓"),
            label,
            summary.before,
            summary.after,
            stat
        );
    } else {
        println!(
            "  {}  {} {}",
            colors::symbol("✓"),
            label,
            colors::dim("up-to-date")
        );
    }
}

async fn git_output(root: &Path, args: &[&str]) -> Result<std::process::Output> {
    Command::new("git")
        .args(args)
        .current_dir(root)
        .output()
        .await
        .with_context(|| "failed to run git; install Git and ensure it is available in PATH")
}

/// Sync the shine-managed Git overlay. Cloned `--depth 1` on first use, then
/// force-mirrored to the remote tip on every subsequent call.
///
/// The managed overlay is a read-only mirror, so this deliberately discards any
/// local edits. Two invariants keep the *previous* checkout usable when a sync
/// fails: the fetch runs before any local reset (a network failure never touches
/// the working tree), and a first-time clone lands via a temp dir + atomic
/// rename (a failed clone never leaves a half-populated overlay dir).
pub(crate) async fn sync_managed_overlay(
    url: &str,
    branch: Option<&str>,
    dir: &Path,
    verbose: bool,
) -> Result<()> {
    if dir.exists() {
        mirror_managed_overlay(url, branch, dir, verbose).await
    } else {
        clone_managed_overlay(url, branch, dir, verbose).await
    }
}

async fn clone_managed_overlay(
    url: &str,
    branch: Option<&str>,
    dir: &Path,
    verbose: bool,
) -> Result<()> {
    let parent = dir
        .parent()
        .context("managed overlay path has no parent directory")?;
    tokio::fs::create_dir_all(parent)
        .await
        .with_context(|| format!("failed to create {}", parent.display()))?;

    let temp = temp_clone_path(dir)?;
    if temp.exists() {
        tokio::fs::remove_dir_all(&temp)
            .await
            .with_context(|| format!("failed to remove stale clone dir {}", temp.display()))?;
    }

    let temp_arg = temp.to_string_lossy().into_owned();
    let mut args: Vec<&str> = vec!["clone", "--depth", "1"];
    if let Some(branch) = branch {
        args.push("--branch");
        args.push(branch);
    }
    args.push(url);
    args.push(&temp_arg);

    if let Err(err) = run_git(parent, &args, verbose, "clone").await {
        let _ = tokio::fs::remove_dir_all(&temp).await;
        return Err(err);
    }

    tokio::fs::rename(&temp, dir).await.with_context(|| {
        format!(
            "failed to move cloned overlay into place at {}",
            dir.display()
        )
    })?;

    let after = head_short(dir).await?;
    println!("  {}  overlay source cloned  {after}", colors::symbol("✓"));
    Ok(())
}

async fn mirror_managed_overlay(
    url: &str,
    branch: Option<&str>,
    dir: &Path,
    verbose: bool,
) -> Result<()> {
    let branch = match branch {
        Some(branch) => branch.to_string(),
        None => current_branch(dir).await?,
    };
    let before = head_short(dir).await?;

    // Fetch first, reset only on success: an unreachable remote leaves the
    // existing checkout intact and usable.
    run_git(
        dir,
        &["fetch", "--depth", "1", "origin", &branch],
        verbose,
        "fetch",
    )
    .await
    .with_context(|| format!("failed to fetch managed overlay from {url}"))?;
    run_git(dir, &["reset", "--hard", "FETCH_HEAD"], verbose, "reset").await?;

    let after = head_short(dir).await?;
    let shortstat = if before == after {
        None
    } else {
        let output = git_output(dir, &["diff", "--shortstat", &before, &after]).await?;
        output
            .status
            .success()
            .then(|| String::from_utf8_lossy(&output.stdout).trim().to_string())
    }
    .filter(|stat| !stat.is_empty());
    print_pull_summary(
        "overlay source",
        &PullSummary {
            before,
            after,
            shortstat,
        },
    );
    Ok(())
}

/// Sibling temp path used to stage a fresh clone before atomically renaming it
/// into place, so a failed clone never clobbers an existing good checkout.
fn temp_clone_path(dir: &Path) -> Result<PathBuf> {
    let name = dir
        .file_name()
        .context("managed overlay path has no final component")?;
    let mut tmp = name.to_os_string();
    tmp.push(".shine-clone-tmp");
    Ok(dir.with_file_name(tmp))
}

async fn current_branch(dir: &Path) -> Result<String> {
    let output = git_output(dir, &["rev-parse", "--abbrev-ref", "HEAD"]).await?;
    if !output.status.success() {
        bail!("failed to resolve current branch in {}", dir.display());
    }
    Ok(String::from_utf8_lossy(&output.stdout).trim().to_string())
}

/// Run a git command, inheriting stdin and (when verbose) stdout/stderr, and
/// bail with captured output on a non-zero exit.
async fn run_git(cwd: &Path, args: &[&str], verbose: bool, action: &str) -> Result<()> {
    let mut command = Command::new("git");
    command.args(args).current_dir(cwd).stdin(Stdio::inherit());
    let failure_detail = if verbose {
        let status = command
            .stdout(Stdio::inherit())
            .stderr(Stdio::inherit())
            .status()
            .await
            .with_context(|| "failed to run git; install Git and ensure it is available in PATH")?;
        if status.success() {
            None
        } else {
            Some(format!("status {status}"))
        }
    } else {
        let output = command
            .output()
            .await
            .with_context(|| "failed to run git; install Git and ensure it is available in PATH")?;
        if output.status.success() {
            None
        } else {
            let stdout = String::from_utf8_lossy(&output.stdout);
            let stderr = String::from_utf8_lossy(&output.stderr);
            Some(
                [stdout.trim(), stderr.trim()]
                    .into_iter()
                    .filter(|part| !part.is_empty())
                    .collect::<Vec<_>>()
                    .join("\n"),
            )
        }
    };
    if let Some(detail) = failure_detail {
        bail!("git {action} failed: {detail}");
    }
    Ok(())
}

#[cfg(test)]
mod tests {
    use super::*;
    use std::process::Command as StdCommand;

    fn temp_dir(name: &str) -> PathBuf {
        std::env::temp_dir().join(format!("shine-git-pull-{name}-{}", uuid::Uuid::new_v4()))
    }

    fn read_text(path: impl AsRef<Path>) -> String {
        std::fs::read_to_string(path).unwrap().replace("\r\n", "\n")
    }

    fn git(dir: &Path, args: &[&str]) {
        let output = StdCommand::new("git")
            .args(args)
            .current_dir(dir)
            .output()
            .unwrap();
        assert!(
            output.status.success(),
            "git {args:?} failed: {}",
            String::from_utf8_lossy(&output.stderr)
        );
    }

    fn init_repo(dir: &Path) {
        std::fs::create_dir_all(dir).unwrap();
        git(dir, &["init"]);
        git(dir, &["config", "user.name", "Shine Tests"]);
        git(dir, &["config", "user.email", "shine@example.invalid"]);
        std::fs::write(dir.join("preset.txt"), "one\n").unwrap();
        git(dir, &["add", "preset.txt"]);
        git(dir, &["commit", "-m", "initial"]);
    }

    #[test]
    fn configured_targets_are_ordered_preset_then_overlay() {
        let dir = std::env::temp_dir().join("shine-pull-targets");
        let config =
            Config::new_for_test(&dir).with_presets_overlay_dir_override(Some(dir.join("overlay")));
        assert_eq!(
            configured_targets(&config),
            vec![
                PullTarget {
                    label: "preset source",
                    path: dir.join("presets"),
                },
                PullTarget {
                    label: "overlay source",
                    path: dir.join("overlay"),
                },
            ]
        );
    }

    #[tokio::test]
    async fn non_git_directory_has_nothing_to_pull() {
        let root = temp_dir("non-git");
        std::fs::create_dir_all(root.join("presets")).unwrap();
        let config = Config::new_for_test(&root);

        handle_pull(&config, false).await.unwrap();

        std::fs::remove_dir_all(root).unwrap();
    }

    #[tokio::test]
    async fn dirty_worktree_is_rejected_before_pull() {
        let root = temp_dir("dirty");
        let presets = root.join("presets");
        init_repo(&presets);
        std::fs::write(presets.join("local.txt"), "dirty\n").unwrap();
        let config = Config::new_for_test(&root);

        let error = handle_pull(&config, false).await.unwrap_err();

        assert!(error.to_string().contains("uncommitted changes"));
        std::fs::remove_dir_all(root).unwrap();
    }

    #[tokio::test]
    async fn branch_without_upstream_is_rejected() {
        let root = temp_dir("no-upstream");
        let presets = root.join("presets");
        init_repo(&presets);
        let config = Config::new_for_test(&root);

        let error = handle_pull(&config, false).await.unwrap_err();

        assert!(error.to_string().contains("has no upstream"));
        std::fs::remove_dir_all(root).unwrap();
    }

    #[tokio::test]
    async fn pulls_fast_forward_from_local_remote() {
        let root = temp_dir("fast-forward");
        let remote = root.join("remote.git");
        let seed = root.join("seed");
        let presets = root.join("presets");
        std::fs::create_dir_all(&root).unwrap();
        git(&root, &["init", "--bare", remote.to_str().unwrap()]);
        git(
            &root,
            &["clone", remote.to_str().unwrap(), seed.to_str().unwrap()],
        );
        git(&seed, &["config", "user.name", "Shine Tests"]);
        git(&seed, &["config", "user.email", "shine@example.invalid"]);
        std::fs::write(seed.join("preset.txt"), "one\n").unwrap();
        git(&seed, &["add", "preset.txt"]);
        git(&seed, &["commit", "-m", "initial"]);
        git(&seed, &["push", "-u", "origin", "HEAD"]);
        git(
            &root,
            &["clone", remote.to_str().unwrap(), presets.to_str().unwrap()],
        );
        std::fs::write(seed.join("preset.txt"), "two\n").unwrap();
        git(&seed, &["add", "preset.txt"]);
        git(&seed, &["commit", "-m", "update"]);
        git(&seed, &["push"]);
        let config = Config::new_for_test(&root);

        handle_pull(&config, false).await.unwrap();

        assert_eq!(read_text(presets.join("preset.txt")), "two\n");
        std::fs::remove_dir_all(root).unwrap();
    }

    #[tokio::test]
    async fn detached_head_is_rejected() {
        let root = temp_dir("detached");
        let presets = root.join("presets");
        init_repo(&presets);
        git(&presets, &["checkout", "--detach"]);
        let config = Config::new_for_test(&root);

        let error = handle_pull(&config, false).await.unwrap_err();

        assert!(error.to_string().contains("detached HEAD"));
        std::fs::remove_dir_all(root).unwrap();
    }

    /// Create a bare remote with a single `overlay.txt` commit and return
    /// `(remote_path, seed_worktree, url)` for driving further commits.
    fn seed_remote(root: &Path) -> (PathBuf, PathBuf, String) {
        let remote = root.join("remote.git");
        let seed = root.join("seed");
        std::fs::create_dir_all(root).unwrap();
        git(root, &["init", "--bare", remote.to_str().unwrap()]);
        git(
            root,
            &["clone", remote.to_str().unwrap(), seed.to_str().unwrap()],
        );
        git(&seed, &["config", "user.name", "Shine Tests"]);
        git(&seed, &["config", "user.email", "shine@example.invalid"]);
        std::fs::write(seed.join("overlay.txt"), "one\n").unwrap();
        git(&seed, &["add", "overlay.txt"]);
        git(&seed, &["commit", "-m", "initial"]);
        git(&seed, &["push", "-u", "origin", "HEAD"]);
        let url = remote.to_string_lossy().into_owned();
        (remote, seed, url)
    }

    fn commit_count(dir: &Path) -> String {
        let output = StdCommand::new("git")
            .args(["rev-list", "--count", "HEAD"])
            .current_dir(dir)
            .output()
            .unwrap();
        String::from_utf8_lossy(&output.stdout).trim().to_string()
    }

    #[tokio::test]
    async fn managed_overlay_clones_shallow_then_force_mirrors() {
        let root = temp_dir("managed-overlay");
        let (_remote, seed, url) = seed_remote(&root);
        let dir = root.join("overlay");

        // First sync clones --depth 1: content present, history is a single commit.
        sync_managed_overlay(&url, None, &dir, false).await.unwrap();
        assert_eq!(read_text(dir.join("overlay.txt")), "one\n");
        assert_eq!(commit_count(&dir), "1");

        // Fast-forward update on the remote is mirrored.
        std::fs::write(seed.join("overlay.txt"), "two\n").unwrap();
        git(&seed, &["add", "overlay.txt"]);
        git(&seed, &["commit", "-m", "update"]);
        git(&seed, &["push"]);
        sync_managed_overlay(&url, None, &dir, false).await.unwrap();
        assert_eq!(read_text(dir.join("overlay.txt")), "two\n");

        // Rewritten history (amend + force-push) still mirrors where a
        // fast-forward pull would fail.
        std::fs::write(seed.join("overlay.txt"), "three\n").unwrap();
        git(&seed, &["add", "overlay.txt"]);
        git(&seed, &["commit", "--amend", "-m", "rewritten"]);
        git(&seed, &["push", "--force"]);
        sync_managed_overlay(&url, None, &dir, false).await.unwrap();
        assert_eq!(read_text(dir.join("overlay.txt")), "three\n");

        std::fs::remove_dir_all(root).unwrap();
    }

    #[tokio::test]
    async fn managed_overlay_fetch_failure_keeps_existing_checkout() {
        let root = temp_dir("managed-overlay-offline");
        let (remote, _seed, url) = seed_remote(&root);
        let dir = root.join("overlay");
        sync_managed_overlay(&url, None, &dir, false).await.unwrap();

        // Remote disappears → the next sync's fetch fails, but the existing
        // checkout is left untouched and still usable.
        std::fs::remove_dir_all(&remote).unwrap();
        let error = sync_managed_overlay(&url, None, &dir, false)
            .await
            .unwrap_err();
        assert!(error.to_string().contains("fetch"));
        assert_eq!(read_text(dir.join("overlay.txt")), "one\n");

        std::fs::remove_dir_all(root).unwrap();
    }

    #[tokio::test]
    async fn managed_overlay_failed_clone_leaves_no_dir() {
        let root = temp_dir("managed-overlay-badurl");
        std::fs::create_dir_all(&root).unwrap();
        let dir = root.join("overlay");
        let bogus = root.join("does-not-exist.git");

        let error = sync_managed_overlay(&bogus.to_string_lossy(), None, &dir, false)
            .await
            .unwrap_err();
        assert!(error.to_string().contains("clone"));
        assert!(
            !dir.exists(),
            "a failed first clone must not leave a managed overlay dir"
        );
        assert!(
            !temp_clone_path(&dir).unwrap().exists(),
            "the staging temp dir must be cleaned up on clone failure"
        );

        std::fs::remove_dir_all(root).unwrap();
    }
}