timebomb-cli 0.9.0

use crate::annotation::Fuse;
use crate::config::Config;
use crate::error::{Error, Result};
use chrono::NaiveDate;
use rayon::prelude::*;
use regex::Regex;
use std::path::{Path, PathBuf};
use std::sync::atomic::{AtomicUsize, Ordering};
use walkdir::WalkDir;

/// Result of a full scan run.
#[derive(Debug)]
pub struct ScanResult {
    pub fuses: Vec<Fuse>,
    pub swept_files: usize,
    pub skipped_files: usize,
}

impl ScanResult {
    pub fn detonated(&self) -> Vec<&Fuse> {
        self.fuses.iter().filter(|a| a.is_detonated()).collect()
    }

    pub fn ticking(&self) -> Vec<&Fuse> {
        self.fuses.iter().filter(|a| a.is_ticking()).collect()
    }

    pub fn inert(&self) -> Vec<&Fuse> {
        self.fuses.iter().filter(|a| a.is_inert()).collect()
    }

    pub fn has_detonated(&self) -> bool {
        self.fuses.iter().any(|a| a.is_detonated())
    }

    pub fn is_ticking(&self) -> bool {
        self.fuses.iter().any(|a| a.is_ticking())
    }

    pub fn total(&self) -> usize {
        self.fuses.len()
    }
}

/// Maximum file size that the scanner will read into memory (100 MiB).
///
/// Files larger than this are skipped with a warning. This prevents memory
/// exhaustion from accidentally (or maliciously) large files in the scan tree.
const MAX_FILE_BYTES: u64 = 100 * 1_024 * 1_024;

/// Core scanner: walks `root`, respects config, and returns all found fuses.
///
/// `today` is injected rather than derived internally so that tests can use a
/// fixed date without depending on the current wall-clock time.
pub fn scan(root: &Path, config: &Config, today: NaiveDate) -> Result<ScanResult> {
    let globset = config.build_exclude_globset()?;
    let regex = build_regex(config)?;

    // ----------------------------------------------------------------
    // Phase 1 (serial): Walk the directory tree and collect the set of
    // candidate files that pass the cheap exclude/extension/binary
    // filters.  WalkDir is inherently serial (lazy recursion), so we
    // keep this phase single-threaded and use it purely to decide *what*
    // to process.
    // ----------------------------------------------------------------
    struct Candidate {
        abs_path: PathBuf,
        rel_path: PathBuf,
    }

    let mut candidates: Vec<Candidate> = Vec::new();
    let mut skipped_files: usize = 0;

    for entry in WalkDir::new(root)
        // SECURITY: must remain false to prevent symlink traversal outside the scan root.
        .follow_links(false)
        .into_iter()
        .filter_map(|e| match e {
            Ok(entry) => Some(entry),
            Err(err) => {
                eprintln!("warning: skipping inaccessible path: {}", err);
                None
            }
        })
    {
        if !entry.file_type().is_file() {
            continue;
        }

        let abs_path = entry.path().to_path_buf();

        // Compute a path relative to root for glob matching and display.
        let rel_path = abs_path
            .strip_prefix(root)
            .unwrap_or(&abs_path)
            .to_path_buf();

        // Skip excluded paths.
        if config.is_excluded(&rel_path, &globset) {
            skipped_files += 1;
            continue;
        }

        // Skip files whose extension is not in the allowed list.
        if !config.extension_allowed(&rel_path) {
            continue;
        }

        // If --since was given, skip files not in the git-diff set.
        if let Some(ref diff_files) = config.diff_files {
            if !diff_files.contains(&rel_path) {
                continue;
            }
        }

        candidates.push(Candidate { abs_path, rel_path });
    }

    // ----------------------------------------------------------------
    // Phase 2 (parallel): Scan each candidate file on a rayon thread-
    // pool worker.  Each worker reads the file once as raw bytes,
    // performs binary detection inline (no second open), then decodes
    // and scans.  Binary skips are counted via an atomic so Phase 1
    // stays free of file I/O.
    // ----------------------------------------------------------------
    let binary_count = AtomicUsize::new(0);
    let results: Result<Vec<Vec<Fuse>>> = candidates
        .par_iter()
        .map(|c| {
            let bytes = std::fs::read(&c.abs_path).map_err(|e| Error::Io {
                source: e,
                path: Some(c.abs_path.to_path_buf()),
            })?;
            // Reject oversized files to avoid processing giant blobs; check after
            // read so we only make one syscall instead of stat + read.
            if bytes.len() as u64 > MAX_FILE_BYTES {
                eprintln!(
                    "warning: skipping '{}': file size ({} MiB) exceeds {} MiB limit",
                    c.rel_path.display(),
                    bytes.len() / 1_024 / 1_024,
                    MAX_FILE_BYTES as usize / 1_024 / 1_024,
                );
                binary_count.fetch_add(1, Ordering::Relaxed);
                return Ok(vec![]);
            }
            // Binary detection: a null byte means this is not a text file.
            if bytes.contains(&0u8) {
                binary_count.fetch_add(1, Ordering::Relaxed);
                return Ok(vec![]);
            }
            // Non-UTF-8 bytes are replaced with U+FFFD — intentional; binary
            // files are already rejected above by the null-byte check.
            let content = String::from_utf8_lossy(&bytes);
            scan_content(&content, &c.rel_path, &regex, config, today)
        })
        .collect();

    let binary_skipped = binary_count.load(Ordering::Relaxed);
    skipped_files += binary_skipped;
    // swept_files = candidates that passed Phase 1 minus those found binary in Phase 2.
    let swept_files = candidates.len() - binary_skipped;

    // ----------------------------------------------------------------
    // Phase 3 (serial): Flatten the per-file fuse lists, then
    // sort the combined result by date ascending so the most urgent
    // items appear first.
    // ----------------------------------------------------------------
    let mut fuses: Vec<Fuse> = results?.into_iter().flatten().collect();
    // Unstable sort is faster — NaiveDate is Copy and there is no meaningful
    // tiebreaker for equal dates, so stability adds cost for free.
    fuses.sort_unstable_by_key(|a| a.date);

    Ok(ScanResult {
        fuses,
        swept_files,
        skipped_files,
    })
}

/// Scan a single file and return all fuses found.
///
/// `abs_path` is used for reading; `rel_path` is stored in the `Fuse` for display.
/// Binary files (detected via null-byte check) return an empty vec.
/// Non-UTF-8 bytes in text files are replaced with U+FFFD; because binary
/// files are rejected first, this replacement is a deliberate convenience for
/// mixed-encoding text rather than a lossy fallback.
pub fn scan_file(
    abs_path: &Path,
    rel_path: &Path,
    regex: &Regex,
    config: &Config,
    today: NaiveDate,
) -> Result<Vec<Fuse>> {
    let bytes = std::fs::read(abs_path).map_err(|e| Error::Io {
        source: e,
        path: Some(abs_path.to_path_buf()),
    })?;
    // Check size after read — one syscall instead of stat + read.
    if bytes.len() as u64 > MAX_FILE_BYTES {
        return Err(Error::InvalidArgument(format!(
            "file '{}' ({} MiB) exceeds the {} MiB scan limit",
            rel_path.display(),
            bytes.len() / 1_024 / 1_024,
            MAX_FILE_BYTES as usize / 1_024 / 1_024,
        )));
    }
    if bytes.contains(&0u8) {
        return Ok(vec![]);
    }
    let content = String::from_utf8_lossy(&bytes);
    scan_content(&content, rel_path, regex, config, today)
}

/// Scan a string (file content) for fuses. Exposed separately for unit testing.
pub fn scan_content(
    content: &str,
    rel_path: &Path,
    regex: &Regex,
    config: &Config,
    today: NaiveDate,
) -> Result<Vec<Fuse>> {
    let mut fuses = Vec::new();

    for (line_idx, line) in content.lines().enumerate() {
        // Fast byte pre-filter: every valid fuse contains '['.
        // Skips the regex engine entirely for the vast majority of lines.
        if !line.contains('[') {
            continue;
        }

        // Language-agnostic inline ignore directive. Works inside any comment
        // syntax (// # -- /* */). Case-insensitive so TIMEBOMB: IGNORE works too.
        if line.to_ascii_lowercase().contains("timebomb: ignore") {
            continue;
        }

        let line_number = line_idx + 1; // 1-based

        for caps in regex.captures_iter(line) {
            let date_str = &caps[2];

            // Parse the date before any heap allocation — on an invalid date
            // the three allocations below are avoided entirely.
            let date = match NaiveDate::parse_from_str(date_str, "%Y-%m-%d") {
                Ok(d) => d,
                Err(_) => {
                    eprintln!(
                        "warning: invalid date '{}' at {}:{} — skipping",
                        date_str,
                        rel_path.display(),
                        line_number
                    );
                    continue;
                }
            };

            let tag = caps[1].to_uppercase();
            let owner = caps.get(4).map(|m| m.as_str().trim().to_string());
            let message = caps[5].trim().to_string();

            let status = Fuse::compute_status(date, today, config.fuse_days);

            fuses.push(Fuse {
                file: rel_path.to_path_buf(),
                line: line_number,
                tag,
                date,
                owner,
                message,
                status,
                blamed_owner: None,
            });
        }
    }

    Ok(fuses)
}

/// Build the fuse-matching regex from the config's trigger list.
pub fn build_regex(config: &Config) -> Result<Regex> {
    let pattern = config.fuse_regex_pattern();
    Regex::new(&pattern).map_err(Error::RegexCompile)
}

/// Detect binary files by looking for null bytes in the first 8 KB.
///
/// Exposed for benchmarking and testing. Not called in the scan pipeline —
/// Phase 2 of `scan()` performs inline binary detection as part of the single
/// `fs::read` call, avoiding a double file open.
pub fn is_binary(path: &Path) -> Result<bool> {
    use std::io::Read;
    let mut f = std::fs::File::open(path).map_err(|e| Error::Io {
        source: e,
        path: Some(path.to_path_buf()),
    })?;
    let mut buf = [0u8; 8192];
    // BufReader adds overhead for a single fixed-size read; use File directly.
    let n = f.read(&mut buf).map_err(|e| Error::Io {
        source: e,
        path: Some(path.to_path_buf()),
    })?;
    Ok(buf[..n].contains(&0u8))
}

/// Convenience: scan a string with a freshly built regex.
/// Useful for testing, benchmarking, and one-off scanning without a filesystem walk.
pub fn scan_str(
    content: &str,
    rel_path: &Path,
    config: &Config,
    today: NaiveDate,
) -> Result<Vec<Fuse>> {
    let regex = build_regex(config)?;
    scan_content(content, rel_path, &regex, config, today)
}

#[cfg(test)]
mod tests {
    use super::*;
    use crate::annotation::Status;
    use crate::config::Config;
    use std::path::{Path, PathBuf};

    fn today() -> NaiveDate {
        NaiveDate::parse_from_str("2025-06-01", "%Y-%m-%d").unwrap()
    }

    fn default_config() -> Config {
        Config::default()
    }

    // -----------------------------------------------------------------------
    // scan_str helpers
    // -----------------------------------------------------------------------

    #[test]
    fn test_scan_finds_detonated_fuse() {
        let src = "// TODO[2020-01-01]: remove this old code\n";
        let fuses = scan_str(src, Path::new("foo.rs"), &default_config(), today()).unwrap();
        assert_eq!(fuses.len(), 1);
        assert_eq!(fuses[0].tag, "TODO");
        assert_eq!(fuses[0].status, Status::Detonated);
        assert_eq!(fuses[0].line, 1);
        assert_eq!(fuses[0].message, "remove this old code");
    }

    #[test]
    fn test_scan_finds_future_fixme() {
        let src = "# FIXME[2099-01-01]: will still be relevant\n";
        let fuses = scan_str(src, Path::new("foo.py"), &default_config(), today()).unwrap();
        assert_eq!(fuses.len(), 1);
        assert_eq!(fuses[0].tag, "FIXME");
        assert_eq!(fuses[0].status, Status::Inert);
    }

    #[test]
    fn test_scan_ignores_plain_todo() {
        // Plain TODO without brackets must be ignored
        let src = "// TODO: fix this someday\n// FIXME: also this\n";
        let fuses = scan_str(src, Path::new("foo.rs"), &default_config(), today()).unwrap();
        assert!(fuses.is_empty(), "plain TODOs must not be matched");
    }

    #[test]
    fn test_scan_case_insensitive_tag() {
        let src = "// todo[2020-01-01]: lowercase tag should match\n";
        let fuses = scan_str(src, Path::new("foo.rs"), &default_config(), today()).unwrap();
        assert_eq!(fuses.len(), 1);
        assert_eq!(fuses[0].tag, "TODO"); // normalised to upper
    }

    #[test]
    fn test_scan_with_owner() {
        let src = "// TODO[2020-01-01][alice]: remove after migration\n";
        let fuses = scan_str(src, Path::new("foo.rs"), &default_config(), today()).unwrap();
        assert_eq!(fuses.len(), 1);
        assert_eq!(fuses[0].owner, Some("alice".to_string()));
        assert_eq!(fuses[0].message, "remove after migration");
    }

    #[test]
    fn test_scan_without_owner() {
        let src = "// TODO[2020-01-01]: no owner here\n";
        let fuses = scan_str(src, Path::new("foo.rs"), &default_config(), today()).unwrap();
        assert_eq!(fuses[0].owner, None);
    }

    #[test]
    fn test_scan_ticking() {
        // 2025-06-10 is 9 days from today (2025-06-01), within the 14-day window
        let src = "// TODO[2025-06-10]: ticking fuse\n";
        let cfg = Config {
            fuse_days: 14,
            ..Config::default()
        };
        let fuses = scan_str(src, Path::new("foo.rs"), &cfg, today()).unwrap();
        assert_eq!(fuses[0].status, Status::Ticking);
    }

    #[test]
    fn test_scan_multiple_fuses() {
        let src = "\
line 1
// TODO[2020-01-01]: detonated item
line 3
# FIXME[2099-12-31]: future item
// HACK[2025-06-08]: ticking fuse
line 6
";
        let cfg = Config {
            fuse_days: 14,
            ..Config::default()
        };
        let fuses = scan_str(src, Path::new("multi.rs"), &cfg, today()).unwrap();
        assert_eq!(fuses.len(), 3);
        // Find each by tag
        let detonated = fuses.iter().find(|a| a.tag == "TODO").unwrap();
        assert_eq!(detonated.status, Status::Detonated);
        assert_eq!(detonated.line, 2);

        let future = fuses.iter().find(|a| a.tag == "FIXME").unwrap();
        assert_eq!(future.status, Status::Inert);
        assert_eq!(future.line, 4);

        let soon = fuses.iter().find(|a| a.tag == "HACK").unwrap();
        assert_eq!(soon.status, Status::Ticking);
        assert_eq!(soon.line, 5);
    }

    #[test]
    fn test_scan_invalid_date_skipped_with_warning() {
        // Invalid date — should not produce a fuse (warning printed to stderr)
        let src = "// TODO[2026-13-45]: invalid date month\n";
        let fuses = scan_str(src, Path::new("foo.rs"), &default_config(), today()).unwrap();
        assert!(fuses.is_empty());
    }

    #[test]
    fn test_scan_sql_comment() {
        let src = "-- TODO[2020-01-01]: drop this column\n";
        let fuses = scan_str(src, Path::new("schema.sql"), &default_config(), today()).unwrap();
        assert_eq!(fuses.len(), 1);
        assert_eq!(fuses[0].message, "drop this column");
    }

    #[test]
    fn test_scan_hash_comment() {
        let src = "# REMOVEME[2020-01-01]: remove this block\n";
        let fuses = scan_str(src, Path::new("script.py"), &default_config(), today()).unwrap();
        assert_eq!(fuses.len(), 1);
        assert_eq!(fuses[0].tag, "REMOVEME");
    }

    #[test]
    fn test_scan_temp_tag() {
        let src = "// TEMP[2020-01-01]: temporary workaround\n";
        let fuses = scan_str(src, Path::new("foo.rs"), &default_config(), today()).unwrap();
        assert_eq!(fuses.len(), 1);
        assert_eq!(fuses[0].tag, "TEMP");
    }

    #[test]
    fn test_scan_custom_triggers_only() {
        let src = "\
// TODO[2020-01-01]: this should not match
// CUSTOM[2020-01-01]: this should match
";
        let cfg = Config {
            triggers: vec!["CUSTOM".to_string()],
            ..Config::default()
        };
        // Rebuild is implicit via scan_str which calls build_regex
        let fuses = scan_str(src, Path::new("foo.rs"), &cfg, today()).unwrap();
        assert_eq!(fuses.len(), 1);
        assert_eq!(fuses[0].tag, "CUSTOM");
    }

    #[test]
    fn test_scan_empty_file() {
        let fuses = scan_str("", Path::new("empty.rs"), &default_config(), today()).unwrap();
        assert!(fuses.is_empty());
    }

    #[test]
    fn test_scan_fuse_exactly_at_zero_days_remaining() {
        // Same day as today, no fuse window → Ticking (0 <= 0)
        let src = "// TODO[2025-06-01]: due today\n";
        let cfg = Config {
            fuse_days: 0,
            ..Config::default()
        };
        let fuses = scan_str(src, Path::new("foo.rs"), &cfg, today()).unwrap();
        assert_eq!(fuses[0].status, Status::Ticking);
    }

    // -----------------------------------------------------------------------
    // is_binary
    // -----------------------------------------------------------------------

    #[test]
    fn test_is_binary_text_file() {
        use std::io::Write;
        let mut f = tempfile::NamedTempFile::new().unwrap();
        writeln!(f, "// TODO[2020-01-01]: normal text file").unwrap();
        assert!(!is_binary(f.path()).unwrap());
    }

    #[test]
    fn test_is_binary_binary_file() {
        use std::io::Write;
        let mut f = tempfile::NamedTempFile::new().unwrap();
        f.write_all(&[0x50, 0x4b, 0x00, 0x04, 0xFF, 0xFE]).unwrap(); // contains null
        assert!(is_binary(f.path()).unwrap());
    }

    // -----------------------------------------------------------------------
    // ScanResult helpers
    // -----------------------------------------------------------------------

    #[test]
    fn test_scan_result_categorisation() {
        let today_date = today();
        let detonated = Fuse {
            file: PathBuf::from("a.rs"),
            line: 1,
            tag: "TODO".to_string(),
            date: NaiveDate::parse_from_str("2020-01-01", "%Y-%m-%d").unwrap(),
            owner: None,
            message: "detonated".to_string(),
            status: Status::Detonated,
            blamed_owner: None,
        };
        let soon = Fuse {
            file: PathBuf::from("b.rs"),
            line: 2,
            tag: "FIXME".to_string(),
            date: NaiveDate::parse_from_str("2025-06-08", "%Y-%m-%d").unwrap(),
            owner: None,
            message: "ticking".to_string(),
            status: Status::Ticking,
            blamed_owner: None,
        };
        let inert = Fuse {
            file: PathBuf::from("c.rs"),
            line: 3,
            tag: "HACK".to_string(),
            date: NaiveDate::parse_from_str("2099-01-01", "%Y-%m-%d").unwrap(),
            owner: None,
            message: "fine".to_string(),
            status: Status::Inert,
            blamed_owner: None,
        };
        let _ = today_date; // used in test context, suppress warning
        let result = ScanResult {
            fuses: vec![detonated, soon, inert],
            swept_files: 3,
            skipped_files: 0,
        };
        assert_eq!(result.detonated().len(), 1);
        assert_eq!(result.ticking().len(), 1);
        assert_eq!(result.inert().len(), 1);
        assert!(result.has_detonated());
        assert!(result.is_ticking());
        assert_eq!(result.total(), 3);
    }

    // -----------------------------------------------------------------------
    // Full filesystem scan (integration-style)
    // -----------------------------------------------------------------------

    #[test]
    fn test_scan_directory() {
        use std::io::Write;
        let dir = tempfile::tempdir().unwrap();

        let mut f1 = std::fs::File::create(dir.path().join("main.rs")).unwrap();
        writeln!(f1, "// TODO[2020-01-01]: detonated").unwrap();
        writeln!(f1, "// FIXME[2099-01-01]: future").unwrap();

        let result = scan(dir.path(), &default_config(), today()).unwrap();
        assert_eq!(result.swept_files, 1);
        assert_eq!(result.fuses.len(), 2);
        assert!(result.has_detonated());
    }

    #[test]
    fn test_scan_directory_skips_excluded() {
        use std::io::Write;
        let dir = tempfile::tempdir().unwrap();

        // Create a .git subdirectory with a Rust-ish file
        std::fs::create_dir(dir.path().join(".git")).unwrap();
        let mut f = std::fs::File::create(dir.path().join(".git/hooks.rs")).unwrap();
        writeln!(f, "// TODO[2020-01-01]: should be excluded").unwrap();

        // And a normal file
        let mut f2 = std::fs::File::create(dir.path().join("lib.rs")).unwrap();
        writeln!(f2, "// FIXME[2099-01-01]: inert").unwrap();

        let result = scan(dir.path(), &default_config(), today()).unwrap();
        // Only lib.rs should be scanned; the .git file should be excluded
        assert_eq!(result.swept_files, 1);
        let tags: Vec<_> = result.fuses.iter().map(|a| a.tag.as_str()).collect();
        assert!(!tags.contains(&"TODO"));
        assert!(tags.contains(&"FIXME"));
    }

    #[test]
    fn test_scan_directory_respects_extensions() {
        use std::io::Write;
        let dir = tempfile::tempdir().unwrap();

        // .xyz extension — not in default list
        let mut f = std::fs::File::create(dir.path().join("data.xyz")).unwrap();
        writeln!(f, "// TODO[2020-01-01]: should be skipped").unwrap();

        let result = scan(dir.path(), &default_config(), today()).unwrap();
        assert_eq!(result.swept_files, 0);
        assert!(result.fuses.is_empty());
    }

    #[test]
    fn test_scan_str_returns_fuses_in_line_order() {
        // scan_str() preserves source order; date-ascending sort is done by scan() only.
        let src = "\
// TODO[2099-12-31]: far future
// FIXME[2020-01-01]: detonated
// HACK[2050-06-15]: mid future
";
        let fuses = scan_str(src, Path::new("foo.rs"), &default_config(), today()).unwrap();
        assert_eq!(fuses[0].tag, "TODO");
        assert_eq!(fuses[1].tag, "FIXME");
        assert_eq!(fuses[2].tag, "HACK");
    }

    // -----------------------------------------------------------------------
    // timebomb: ignore directive
    // -----------------------------------------------------------------------

    #[test]
    fn test_scan_ignore_directive_skips_line() {
        let src = "// TODO[2020-01-01]: remove this  timebomb: ignore\n";
        let fuses = scan_str(src, Path::new("foo.rs"), &default_config(), today()).unwrap();
        assert!(fuses.is_empty(), "annotated-ignore line must be skipped");
    }

    #[test]
    fn test_scan_ignore_directive_case_insensitive() {
        let src = "# TODO[2020-01-01]: remove  TIMEBOMB: IGNORE\n";
        let fuses = scan_str(src, Path::new("foo.rs"), &default_config(), today()).unwrap();
        assert!(fuses.is_empty());
    }

    #[test]
    fn test_scan_ignore_directive_sql_style() {
        let src = "-- TODO[2020-01-01]: drop col  timebomb: ignore\n";
        let fuses = scan_str(src, Path::new("schema.sql"), &default_config(), today()).unwrap();
        assert!(fuses.is_empty());
    }

    #[test]
    fn test_scan_ignore_only_affects_its_own_line() {
        let src = "// TODO[2020-01-01]: active\n\
                   // FIXME[2021-01-01]: ignored  timebomb: ignore\n\
                   // HACK[2019-01-01]: also active\n";
        let fuses = scan_str(src, Path::new("foo.rs"), &default_config(), today()).unwrap();
        assert_eq!(fuses.len(), 2);
        assert!(fuses.iter().all(|f| f.tag != "FIXME"));
    }

    #[test]
    fn test_scan_directory_sorted() {
        use std::io::Write;
        let dir = tempfile::tempdir().unwrap();
        let mut f = std::fs::File::create(dir.path().join("sort.rs")).unwrap();
        writeln!(f, "// TODO[2099-12-31]: far future").unwrap();
        writeln!(f, "// FIXME[2020-01-01]: detonated").unwrap();
        writeln!(f, "// HACK[2050-06-15]: mid future").unwrap();

        let result = scan(dir.path(), &default_config(), today()).unwrap();
        let dates: Vec<_> = result.fuses.iter().map(|a| a.date).collect();
        let mut sorted = dates.clone();
        sorted.sort();
        assert_eq!(
            dates, sorted,
            "scan results should be sorted by date ascending"
        );
    }
}