use std::fs;
use std::io::Write;
use std::path::PathBuf;
use serde::{Deserialize, Serialize};
use crate::archive::{self, ArchiveOptions, MergedPullRequest};
use crate::config::{Config, require_supported_cli_at};
use crate::error::{Error, IoContext, Result};
use crate::git::GitRepo;
use crate::lock::RepositoryLock;
use crate::manifest::{TaskKind, TaskManifest, build_task_branch, parse_task_identity};
use crate::path::{allowed, reject_symlink_traversal, repo_path};
use crate::policy::TASK_MANIFEST_NAME;
use crate::process;
pub(crate) const LEGACY_RECORD: &str = ".workspace-mgr-legacy.json";
pub struct ArchiveAdoptionOptions {
pub start: PathBuf,
pub manifest: Option<PathBuf>,
pub path: String,
pub pull_request: u64,
pub title: String,
pub purpose: String,
pub dry_run: bool,
}
#[derive(Debug, Serialize)]
pub struct AdoptionReport {
pub status: &'static str,
pub operation: &'static str,
pub task_id: String,
pub path: String,
pub branch: String,
pub legacy_branch: String,
pub pull_request: MergedPullRequest,
pub required_scopes: Vec<String>,
pub review_required_before_archive: bool,
pub remote_writes: bool,
}
#[derive(Debug, Serialize, Deserialize, PartialEq, Eq)]
pub(crate) struct LegacyRecord {
pub schema_version: u32,
pub task_id: String,
pub path: String,
pub branch: String,
pub pull_request: MergedPullRequest,
}
#[derive(Deserialize)]
#[serde(rename_all = "camelCase")]
struct Review {
number: u64,
url: String,
state: String,
merged_at: Option<String>,
merge_commit: Option<Commit>,
head_ref_name: String,
head_ref_oid: String,
base_ref_name: String,
is_cross_repository: bool,
}
#[derive(Deserialize)]
struct Commit {
oid: String,
}
pub fn adopt(options: &ArchiveAdoptionOptions) -> Result<AdoptionReport> {
let repo = match &options.manifest {
Some(path) => GitRepo::discover_for_manifest(path)?,
None => GitRepo::discover(&options.start)?,
};
let _lock = RepositoryLock::acquire(&repo)?;
let config = Config::load_compatible(&repo)?;
let path = repo_path(&options.path, "legacy task path")?;
reject_symlink_traversal(&repo.root, &path, "legacy task adoption")?;
let directory = repo.root.join(&path);
if !directory.is_dir() {
return Err(Error::message(
"legacy adoption requires an existing task directory",
));
}
let basename = path.rsplit('/').next().expect("nonempty task path");
let identity = parse_task_identity(TaskKind::Deliverable, basename)?;
let task_id = basename.to_owned();
let owner = archive::infrastructure_task(
&repo,
&config,
&ArchiveOptions {
start: options.start.clone(),
manifest: options.manifest.clone(),
paths: vec![path.clone()],
layout: "{year}/{month}".to_owned(),
dry_run: options.dry_run,
},
)?;
if let Some(owner) = &owner
&& !allowed(&path, &owner.scopes())
{
return Err(Error::message(
"legacy adoption path escapes the infrastructure task's declared scopes",
));
}
let base = repo.fetch_branch(&config.git.remote, &config.git.branch)?;
require_supported_cli_at(
&repo,
&base,
&format!("{}/{}", config.git.remote, config.git.branch),
)?;
let host = archive::hosting_repository(&repo, &config.git.remote)?;
let (review, legacy_branch) =
legacy_review(&repo, &config, &host, options.pull_request, &base)?;
let next = TaskManifest {
schema_version: 2,
kind: TaskKind::Deliverable,
id: task_id.clone(),
slug: identity.original_slug.clone(),
path: Some(path.clone()),
branch: build_task_branch(TaskKind::Deliverable, &identity.original_slug)?,
title: one_line(&options.title, "adoption title")?,
purpose: one_line(&options.purpose, "adoption purpose")?,
additional_scopes: Vec::new(),
cloud_usage_approval: None,
archive_completion: None,
};
let record = LegacyRecord {
schema_version: 1,
task_id: task_id.clone(),
path: path.clone(),
branch: legacy_branch.clone(),
pull_request: review.clone(),
};
let manifest_path = directory.join(TASK_MANIFEST_NAME);
let record_path = directory.join(LEGACY_RECORD);
for metadata in [TASK_MANIFEST_NAME, LEGACY_RECORD] {
reject_symlink_traversal(
&repo.root,
&format!("{path}/{metadata}"),
"legacy adoption metadata",
)?;
}
let next_raw = next.render()?;
let record_raw = serde_json::to_string_pretty(&record).map_err(|error| {
Error::message(format!("failed to render legacy adoption record: {error}"))
})? + "\n";
let already = manifest_path.exists() || record_path.exists();
if already {
let existing: LegacyRecord = serde_json::from_str(
&fs::read_to_string(&record_path).at(&record_path)?,
)
.map_err(|error| {
Error::message(format!("invalid current legacy adoption metadata: {error}"))
})?;
if fs::read_to_string(&manifest_path).at(&manifest_path)? != next_raw || existing != record
{
return Err(Error::message(
"legacy adoption metadata already exists with different evidence; preserve it before retrying",
));
}
} else if !options.dry_run {
create_new(&manifest_path, &next_raw)?;
if let Err(error) = create_new(&record_path, &record_raw) {
let _ = fs::remove_file(&manifest_path);
return Err(error);
}
}
Ok(AdoptionReport {
status: if already {
"no_changes"
} else if options.dry_run {
"dry_run"
} else {
"adopted"
},
operation: "task-adopt",
task_id,
path: path.clone(),
branch: next.branch,
legacy_branch,
pull_request: review,
required_scopes: vec![path],
review_required_before_archive: false,
remote_writes: false,
})
}
fn legacy_review(
repo: &GitRepo,
config: &Config,
host: &str,
number: u64,
base: &str,
) -> Result<(MergedPullRequest, String)> {
#[cfg(feature = "test-storage")]
let command = std::env::var("WORKSPACE_MGR_TEST_GH").unwrap_or_else(|_| "gh".to_owned());
#[cfg(not(feature = "test-storage"))]
let command = "gh".to_owned();
let output = process::run(
&command,
[
"pr",
"view",
&number.to_string(),
"--repo",
host,
"--json",
"number,url,state,mergedAt,mergeCommit,headRefName,headRefOid,baseRefName,isCrossRepository",
],
&repo.root,
)?;
let pr: Review = serde_json::from_str(&output.stdout).map_err(|error| {
Error::message(format!(
"legacy adoption review returned invalid JSON: {error}"
))
})?;
let (Some(merged_at), Some(merge)) = (pr.merged_at, pr.merge_commit) else {
return Err(Error::message(
"legacy adoption requires a verified merged same-repository pull request",
));
};
if pr.number != number
|| pr.state != "MERGED"
|| pr.is_cross_repository
|| pr.base_ref_name != config.git.branch
|| chrono::DateTime::parse_from_rfc3339(&merged_at).is_err()
|| !valid_oid(&merge.oid)
|| !valid_oid(&pr.head_ref_oid)
|| !archive::ancestor(repo, &merge.oid, base)?
{
return Err(Error::message(
"legacy adoption requires a verified merged same-repository pull request on the configured base",
));
}
repo.validate_branch(&pr.head_ref_name)?;
let output = process::run(
&command,
[
"pr",
"list",
"--repo",
host,
"--head",
&pr.head_ref_name,
"--state",
"all",
"--limit",
"100",
"--json",
"number,url,state,mergedAt,mergeCommit,headRefName,headRefOid,baseRefName,isCrossRepository",
],
&repo.root,
)?;
let rows: Vec<Review> = serde_json::from_str(&output.stdout).map_err(|error| {
Error::message(format!(
"legacy adoption branch reviews returned invalid JSON: {error}"
))
})?;
if rows.len() >= 100
|| rows.iter().any(|row| {
row.head_ref_name == pr.head_ref_name && !row.is_cross_repository && row.state == "OPEN"
})
{
return Err(Error::message(
"legacy adoption refuses an open or ambiguous review history",
));
}
let local = repo.optional_oid(&format!("refs/heads/{}", pr.head_ref_name))?;
let remote = repo.remote_branch_oid(&config.git.remote, &pr.head_ref_name)?;
if let Some(oid) = &remote {
repo.fetch_branch_objects(&config.git.remote, &pr.head_ref_name, oid)?;
}
for oid in local.iter().chain(remote.iter()) {
archive::ensure_review_head(
repo,
&config.git.remote,
&MergedPullRequest {
number: pr.number,
url: pr.url.clone(),
merged_at: merged_at.clone(),
merge_commit: merge.oid.clone(),
head_commit: pr.head_ref_oid.clone(),
},
)?;
if !archive::ancestor(repo, oid, &pr.head_ref_oid)? {
return Err(Error::message(
"legacy adoption branch contains unmerged or divergent commits",
));
}
}
Ok((
MergedPullRequest {
number: pr.number,
url: pr.url,
merged_at,
merge_commit: merge.oid,
head_commit: pr.head_ref_oid,
},
pr.head_ref_name,
))
}
fn valid_oid(oid: &str) -> bool {
oid.len() == 40 && oid.bytes().all(|c| c.is_ascii_hexdigit())
}
fn one_line(raw: &str, label: &str) -> Result<String> {
if raw.trim().is_empty() || raw.contains(['\n', '\r', '\0']) {
return Err(Error::message(format!("{label} must be one nonempty line")));
}
Ok(raw.to_owned())
}
fn create_new(path: &std::path::Path, raw: &str) -> Result<()> {
let mut file = fs::OpenOptions::new()
.write(true)
.create_new(true)
.open(path)
.at(path)?;
let result = (|| {
file.write_all(raw.as_bytes()).at(path)?;
file.sync_all().at(path)
})();
if result.is_err() {
let _ = fs::remove_file(path);
}
result
}