tga 2.7.0

//! `tga aliases` — list, merge, and manage developer identities.
//!
//! Backed by the `authors` table (one row per canonical identity) and the
//! `commits.author_id` foreign key. Merging two identities reassigns all
//! commits from the source identity to the destination and deletes the
//! source row, so subsequent runs of any pipeline stage will see a single
//! consolidated identity.

use std::io::{self, BufRead, Write};

use clap::{Args, Subcommand};
use rusqlite::params;
use tga::core::config::Config;
use tga::core::db::Database;

mod crud;
mod suggest;

/// Arguments for `tga aliases`.
#[derive(Args, Debug)]
#[command(
    about = "List, merge, or manage developer identity aliases.",
    long_about = "Manage the identity resolution table that maps commit author metadata\n\
(name + email combinations) to a single canonical identity per engineer.\n\n\
Merging two identities reassigns all commits from the source to the destination\n\
and deletes the source row. Subsequent pipeline stages and reports will see only\n\
the consolidated identity.\n\n\
tga automatically resolves identity during collection using fuzzy matching.\n\
Use these subcommands for manual corrections and audits.",
    after_help = "EXAMPLES:\n\
  # List all canonical identities in the database\n\
  tga aliases list\n\n\
  # Show the full profile (canonical email, name, aliases, stats) for an identity\n\
  tga aliases show alice@company.com\n\n\
  # Merge a work email into the canonical personal-account identity\n\
  tga aliases merge old@contractor.com alice@company.com\n\n\
  # Auto-detect probable alias pairs from commit history\n\
  tga aliases suggest\n\n\
  # Detach a previously-merged alias back to its own identity\n\
  tga aliases unmerge old@contractor.com\n\n\
TIPS:\n\
  - Run `tga report --author alice@company.com` to verify the merge result.\n\
  - Use the canonical email from `tga aliases list` as the --author value."
)]
pub struct AliasesArgs {
    /// Aliases subcommand.
    #[command(subcommand)]
    pub subcommand: AliasesSubcommand,
}

/// Valid provider identifiers for `tga aliases add-login`.
pub(crate) const VALID_PROVIDERS: &[&str] = &["github", "gitlab", "ado", "bitbucket"];

/// `tga aliases` subcommands.
#[derive(Subcommand, Debug)]
pub enum AliasesSubcommand {
    /// Print every canonical identity known to the database.
    List,
    /// Merge two canonical identities by email.
    Merge {
        /// Source identity email (will be removed after merge).
        src: String,
        /// Destination identity email (commits will be reassigned to this).
        dst: String,
        /// Skip the confirmation prompt.
        #[arg(long, default_value_t = false)]
        yes: bool,
    },
    /// Append a provider login to an author's alias list for PR canonicalization.
    AddLogin {
        /// Canonical email of the author to update.
        email: String,
        /// Provider the login belongs to (github, gitlab, ado, bitbucket).
        provider: String,
        /// Provider login / username to append.
        login: String,
    },
    /// Create a new canonical identity from scratch.
    Add {
        /// Canonical email to register.
        email: String,
        /// Display name for the new identity (defaults to the email local-part).
        #[arg(long)]
        name: Option<String>,
        /// Optional alias email(s) to associate with this identity.
        #[arg(long = "alias")]
        aliases: Vec<String>,
    },
    /// Remove a single alias from an identity without deleting the canonical row.
    RemoveAlias {
        /// Alias email or login to detach from the canonical identity.
        alias: String,
        /// Canonical email whose alias list will be modified.
        canonical: String,
    },
    /// Show full profile for one canonical identity.
    Show {
        /// Canonical email to look up.
        email: String,
    },
    /// Undo a prior merge — detach an alias back to its own identity row.
    Unmerge {
        /// Alias email to detach into its own identity row.
        alias: String,
    },
    /// Update the display name of an identity without touching email/aliases.
    Rename {
        /// Canonical email of the identity to rename.
        email: String,
        /// New display name.
        #[arg(long)]
        name: String,
    },
    /// Auto-detect probable alias pairs from commit history.
    Suggest {
        /// Minimum confidence (0.0–1.0) below which suggestions are omitted.
        #[arg(long, default_value_t = 0.85)]
        confidence: f64,
        /// Automatically merge HIGH-confidence pairs above `--confidence`.
        #[arg(long, default_value_t = false)]
        auto_accept: bool,
    },
}

/// Dispatch entry point for the `tga aliases` subcommand.
///
/// Why: each subcommand has its own handler; this is the thin wiring layer
/// the binary calls after CLI parsing.
/// What: matches on the parsed [`AliasesSubcommand`] and forwards to the
/// per-operation function with the live database handle.
/// Test: covered by per-handler tests in this module and its submodules.
///
/// # Errors
///
/// Returns any database or I/O error raised by the underlying operation.
pub fn run(config: Config, db: &mut Database, args: AliasesArgs) -> anyhow::Result<()> {
    match args.subcommand {
        AliasesSubcommand::List => list(db),
        AliasesSubcommand::Merge { src, dst, yes } => {
            merge(db, &src, &dst, yes, &mut io::stdin().lock())
        }
        AliasesSubcommand::AddLogin {
            email,
            provider,
            login,
        } => add_login(db, &email, &provider, &login),
        AliasesSubcommand::Add {
            email,
            name,
            aliases,
        } => crud::add(db, &email, name.as_deref(), &aliases),
        AliasesSubcommand::RemoveAlias { alias, canonical } => {
            crud::remove_alias(db, &alias, &canonical)
        }
        AliasesSubcommand::Show { email } => crud::show(db, &email),
        AliasesSubcommand::Unmerge { alias } => crud::unmerge(db, &alias),
        AliasesSubcommand::Rename { email, name } => crud::rename(db, &email, &name),
        AliasesSubcommand::Suggest {
            confidence,
            auto_accept,
        } => suggest::run(&config, db, confidence, auto_accept),
    }
}

/// List all canonical identities and any stored aliases for each.
fn list(db: &Database) -> anyhow::Result<()> {
    let conn = db.connection();
    let mut stmt = conn.prepare(
        "SELECT canonical_name, canonical_email, aliases FROM authors \
         ORDER BY canonical_email",
    )?;
    let rows = stmt.query_map([], |row| {
        Ok((
            row.get::<_, String>(0)?,
            row.get::<_, String>(1)?,
            row.get::<_, String>(2)?,
        ))
    })?;

    let mut count = 0usize;
    println!(
        "{:<32}  {:<48}  aliases",
        "canonical_name", "canonical_email"
    );
    println!("{}", "-".repeat(96));
    for r in rows {
        let (name, email, aliases) = r?;
        let parsed: Vec<String> = serde_json::from_str(&aliases).unwrap_or_default();
        let alias_str = if parsed.is_empty() {
            "-".to_string()
        } else {
            parsed.join(", ")
        };
        println!("{:<32}  {:<48}  {}", name, email, alias_str);
        count += 1;
    }
    if count == 0 {
        println!("(no authors found — run `tga collect` first)");
    }
    Ok(())
}

/// Merge `src_email` into `dst_email`.
///
/// Both identities must already exist in the `authors` table. After
/// confirmation, all commits pointing at the source author are reassigned
/// to the destination, the source's email is appended to the destination's
/// alias list, and the source row is deleted.
fn merge<R: BufRead>(
    db: &mut Database,
    src_email: &str,
    dst_email: &str,
    skip_confirm: bool,
    reader: &mut R,
) -> anyhow::Result<()> {
    if src_email == dst_email {
        anyhow::bail!("source and destination emails are identical: {src_email}");
    }

    let (src_id, src_name, src_aliases_json) = lookup_author(db, src_email)?
        .ok_or_else(|| anyhow::anyhow!("source identity not found: {src_email}"))?;
    let (dst_id, _dst_name, dst_aliases_json) = lookup_author(db, dst_email)?
        .ok_or_else(|| anyhow::anyhow!("destination identity not found: {dst_email}"))?;

    if !skip_confirm {
        print!(
            "Merge {src_name} <{src_email}> (id={src_id}) into <{dst_email}> (id={dst_id})? [y/N] "
        );
        io::stdout().flush()?;
        let mut line = String::new();
        reader.read_line(&mut line)?;
        if !matches!(line.trim().to_lowercase().as_str(), "y" | "yes") {
            println!("Aborted.");
            return Ok(());
        }
    }

    // Merge alias arrays (best-effort JSON merge).
    let mut src_aliases: Vec<String> = serde_json::from_str(&src_aliases_json).unwrap_or_default();
    let mut dst_aliases: Vec<String> = serde_json::from_str(&dst_aliases_json).unwrap_or_default();
    dst_aliases.append(&mut src_aliases);
    dst_aliases.push(src_email.to_string());
    dst_aliases.sort();
    dst_aliases.dedup();
    let merged_aliases = serde_json::to_string(&dst_aliases)?;

    let conn = db.connection_mut();
    let tx = conn.transaction()?;
    let n_commits = tx.execute(
        "UPDATE commits SET author_id = ?1 WHERE author_id = ?2",
        params![dst_id, src_id],
    )?;
    tx.execute(
        "UPDATE authors SET aliases = ?1 WHERE id = ?2",
        params![merged_aliases, dst_id],
    )?;
    tx.execute("DELETE FROM authors WHERE id = ?1", params![src_id])?;
    tx.commit()?;

    println!(
        "Merged {src_email} → {dst_email} (reassigned {n_commits} commits, source author row deleted)"
    );
    Ok(())
}

/// Append a provider login to `authors.aliases` for the named identity.
///
/// Why: `tga author <email>` resolves PR authorship by looking up provider
/// logins stored in `authors.aliases`; this subcommand is the one-time setup
/// operation that populates those mappings without requiring a schema migration.
/// What: parses the existing `aliases` JSON array, appends `login` (if not
/// already present), writes back. Validates provider against the allow-list.
/// Test: see `add_login_round_trips` and `add_login_deduplicates` below.
fn add_login(db: &mut Database, email: &str, provider: &str, login: &str) -> anyhow::Result<()> {
    if !VALID_PROVIDERS.contains(&provider) {
        anyhow::bail!(
            "invalid provider '{provider}'; must be one of: {}",
            VALID_PROVIDERS.join(", ")
        );
    }
    if login.is_empty() {
        anyhow::bail!("login must not be empty");
    }
    if login.contains('@') {
        anyhow::bail!(
            "login '{login}' looks like an email address; provider logins must not contain '@'"
        );
    }

    let (id, _name, aliases_json) = lookup_author(db, email)?
        .ok_or_else(|| anyhow::anyhow!("identity not found: {email}. Run `tga aliases list`."))?;

    let mut aliases: Vec<String> = serde_json::from_str(&aliases_json).unwrap_or_default();
    if aliases.contains(&login.to_string()) {
        println!("Login '{login}' already present in aliases for {email}. No change.");
        return Ok(());
    }
    aliases.push(login.to_string());
    aliases.sort();
    let updated_json = serde_json::to_string(&aliases)?;

    let conn = db.connection_mut();
    conn.execute(
        "UPDATE authors SET aliases = ?1 WHERE id = ?2",
        params![updated_json, id],
    )?;
    println!("Added login '{login}' ({provider}) to {email}");
    Ok(())
}

/// Fetch `(id, canonical_name, aliases_json)` for the row whose email matches.
pub(crate) fn lookup_author(
    db: &Database,
    email: &str,
) -> anyhow::Result<Option<(i64, String, String)>> {
    let conn = db.connection();
    let mut stmt =
        conn.prepare("SELECT id, canonical_name, aliases FROM authors WHERE canonical_email = ?1")?;
    let mut rows = stmt.query(params![email])?;
    if let Some(row) = rows.next()? {
        Ok(Some((row.get(0)?, row.get(1)?, row.get(2)?)))
    } else {
        Ok(None)
    }
}

#[cfg(test)]
mod tests {
    use super::*;

    pub(crate) fn insert_author(db: &Database, name: &str, email: &str) -> i64 {
        db.connection()
            .execute(
                "INSERT INTO authors (canonical_name, canonical_email, aliases) VALUES (?1, ?2, '[]')",
                params![name, email],
            )
            .expect("insert");
        db.connection().last_insert_rowid()
    }

    pub(crate) fn insert_commit(db: &Database, sha: &str, author_id: i64) {
        db.connection()
            .execute(
                "INSERT INTO commits (sha, author_id, author_name, author_email, timestamp, \
                 message, repository) VALUES (?1, ?2, 'n', 'e', '2024-01-01T00:00:00Z', 'm', 'r')",
                params![sha, author_id],
            )
            .expect("insert commit");
    }

    #[test]
    fn merge_moves_commits_and_deletes_source() {
        let mut db = Database::open_in_memory().expect("open");
        let src = insert_author(&db, "Alice", "old@example.com");
        let dst = insert_author(&db, "Alice", "new@example.com");
        insert_commit(&db, "sha1", src);
        insert_commit(&db, "sha2", src);
        insert_commit(&db, "sha3", dst);

        let mut input: &[u8] = b"y\n";
        merge(
            &mut db,
            "old@example.com",
            "new@example.com",
            false,
            &mut input,
        )
        .expect("merge ok");

        // Source row should be gone.
        let src_exists: i64 = db
            .connection()
            .query_row(
                "SELECT COUNT(*) FROM authors WHERE canonical_email = 'old@example.com'",
                [],
                |r| r.get(0),
            )
            .expect("count");
        assert_eq!(src_exists, 0);

        // All three commits should now belong to dst.
        let n: i64 = db
            .connection()
            .query_row(
                "SELECT COUNT(*) FROM commits WHERE author_id = ?1",
                params![dst],
                |r| r.get(0),
            )
            .expect("count");
        assert_eq!(n, 3);
    }

    #[test]
    fn merge_rejects_identical_emails() {
        let mut db = Database::open_in_memory().expect("open");
        insert_author(&db, "A", "a@example.com");
        let mut input: &[u8] = b"y\n";
        let err = merge(&mut db, "a@example.com", "a@example.com", true, &mut input).unwrap_err();
        assert!(err.to_string().contains("identical"));
    }

    #[test]
    fn add_login_round_trips() {
        let mut db = Database::open_in_memory().expect("open");
        insert_author(&db, "Alice", "alice@example.com");
        add_login(&mut db, "alice@example.com", "github", "alice-dev").expect("add login");

        let aliases_json: String = db
            .connection()
            .query_row(
                "SELECT aliases FROM authors WHERE canonical_email = 'alice@example.com'",
                [],
                |r| r.get(0),
            )
            .expect("fetch");
        let aliases: Vec<String> = serde_json::from_str(&aliases_json).unwrap();
        assert!(aliases.contains(&"alice-dev".to_string()));
    }

    #[test]
    fn add_login_deduplicates() {
        let mut db = Database::open_in_memory().expect("open");
        insert_author(&db, "Alice", "alice@example.com");
        add_login(&mut db, "alice@example.com", "github", "alice-dev").expect("first");
        add_login(&mut db, "alice@example.com", "github", "alice-dev").expect("second");

        let aliases_json: String = db
            .connection()
            .query_row(
                "SELECT aliases FROM authors WHERE canonical_email = 'alice@example.com'",
                [],
                |r| r.get(0),
            )
            .expect("fetch");
        let aliases: Vec<String> = serde_json::from_str(&aliases_json).unwrap();
        let count = aliases.iter().filter(|a| a.as_str() == "alice-dev").count();
        assert_eq!(count, 1, "duplicate login must not be stored");
    }

    #[test]
    fn add_login_rejects_invalid_provider() {
        let mut db = Database::open_in_memory().expect("open");
        insert_author(&db, "Alice", "alice@example.com");
        let err = add_login(&mut db, "alice@example.com", "slack", "alice-dev").unwrap_err();
        assert!(err.to_string().contains("invalid provider"));
    }

    #[test]
    fn add_login_rejects_email_as_login() {
        let mut db = Database::open_in_memory().expect("open");
        insert_author(&db, "Alice", "alice@example.com");
        let err =
            add_login(&mut db, "alice@example.com", "github", "alice@example.com").unwrap_err();
        assert!(err.to_string().contains("looks like an email"));
    }

    #[test]
    fn merge_errors_when_source_missing() {
        let mut db = Database::open_in_memory().expect("open");
        insert_author(&db, "B", "b@example.com");
        let mut input: &[u8] = b"y\n";
        let err = merge(
            &mut db,
            "missing@example.com",
            "b@example.com",
            true,
            &mut input,
        )
        .unwrap_err();
        assert!(err.to_string().contains("source identity not found"));
    }
}