heddle_object_model/
error.rs

1// SPDX-License-Identifier: Apache-2.0
2//! Shared error types across Heddle crates.
3
4use std::{error::Error, fmt, io, path::Path};
5
6use crate::object::{ContentHash, StateId, TreeError};
7
8/// Structured recovery details that can cross the embeddable facade boundary.
9#[derive(Debug, Clone, PartialEq)]
10pub struct RecoveryDetails {
11    pub kind: &'static str,
12    pub error: String,
13    pub hint: String,
14    pub unsafe_condition: String,
15    pub would_change: String,
16    pub preserved: String,
17    /// Explicit, path-specific recovery commands. When present these override
18    /// the `kind`-keyed fallback the CLI envelope would otherwise reconstruct
19    /// (the first entry is the primary command). `None` = use the generic
20    /// per-`kind` recovery mapping.
21    pub recovery_commands: Option<Vec<String>>,
22}
23
24impl RecoveryDetails {
25    pub fn safety_refusal(
26        kind: &'static str,
27        error: impl Into<String>,
28        hint: impl Into<String>,
29        unsafe_condition: impl Into<String>,
30        would_change: impl Into<String>,
31        already_preserved: impl Into<String>,
32    ) -> Self {
33        Self {
34            kind,
35            error: error.into(),
36            hint: hint.into(),
37            unsafe_condition: unsafe_condition.into(),
38            would_change: would_change.into(),
39            preserved: already_preserved.into(),
40            recovery_commands: None,
41        }
42    }
43
44    /// Attach explicit, path-specific recovery commands (the first entry is the
45    /// primary command). Used where the callsite has context — e.g. a source
46    /// checkout path — that the `kind`-keyed CLI fallback cannot reconstruct.
47    #[must_use]
48    pub fn with_recovery_commands(mut self, commands: Vec<String>) -> Self {
49        self.recovery_commands = Some(commands);
50        self
51    }
52
53    pub fn invalid_usage(
54        kind: &'static str,
55        error: impl Into<String>,
56        hint: impl Into<String>,
57    ) -> Self {
58        Self::safety_refusal(
59            kind,
60            error,
61            hint,
62            "the command arguments do not describe a valid operation",
63            "running with ambiguous or invalid arguments could target the wrong repository state or metadata",
64            "no repository objects, refs, metadata, or worktree files were changed",
65        )
66    }
67
68    pub fn feature_unavailable(command: &str, feature: &str) -> Self {
69        Self::safety_refusal(
70            "feature_unavailable",
71            format!("{command} requires building heddle with --features {feature}"),
72            format!(
73                "Use a binary built with the `{feature}` feature, or rerun without the feature-specific flag."
74            ),
75            format!("this heddle binary was built without the `{feature}` feature"),
76            format!("{command} cannot run because the requested analysis engine is unavailable"),
77            "repository state, refs, and worktree files were left unchanged",
78        )
79    }
80
81    pub fn serialization_error(detail: impl fmt::Display) -> Self {
82        Self::safety_refusal(
83            "state_corrupted",
84            "Repository state is corrupted or unreadable",
85            "Inspect repository integrity before attempting repair.",
86            format!("a stored repository object failed to decode: {detail}"),
87            "continuing would read or write through repository state Heddle cannot decode",
88            "the command stopped before mutating repository state; intact objects were left unchanged",
89        )
90    }
91
92    pub fn repository_integrity_error(error: impl Into<String>) -> Self {
93        Self::safety_refusal(
94            "repository_integrity_error",
95            error,
96            "Inspect repository integrity, then restore or repair the reported object/ref.",
97            "repository object or ref integrity did not pass validation",
98            "continuing could compound corruption or hide the missing object",
99            "the command stopped before applying the requested mutation",
100        )
101    }
102
103    pub fn repository_not_found(path: &Path) -> Self {
104        Self::safety_refusal(
105            "repository_not_found",
106            format!("repository not found at {}", path.display()),
107            "Initialize the requested repository before running repository commands.",
108            format!("no Heddle repository was found at '{}'", path.display()),
109            "the command cannot inspect or change repository state until initialization",
110            "no repository objects, refs, metadata, or worktree files were changed",
111        )
112    }
113
114    pub fn state_not_found(state_id: impl fmt::Display) -> Self {
115        Self::safety_refusal(
116            "state_not_found",
117            format!("State not found: {state_id}"),
118            "List recent states with `heddle log`, then choose an existing state id.",
119            "the requested state id does not exist in this repository",
120            "continuing with a guessed state could target the wrong history point",
121            "repository state, refs, metadata, and worktree files were left unchanged",
122        )
123    }
124}
125
126impl fmt::Display for RecoveryDetails {
127    fn fmt(&self, f: &mut fmt::Formatter<'_>) -> fmt::Result {
128        write!(
129            f,
130            "{}. Unsafe: {}. Would change: {}. Preserved: {}.",
131            self.error, self.unsafe_condition, self.would_change, self.preserved
132        )?;
133        Ok(())
134    }
135}
136
137impl Error for RecoveryDetails {}
138
139/// Failure to acquire or access a repository lock.
140///
141/// The lock implementation lives in `heddle-objects`; this pure error value
142/// lives with [`HeddleError`] so the object-model crate does not depend on a
143/// storage backend.
144#[derive(Debug, thiserror::Error)]
145pub enum LockError {
146    #[error("failed to acquire lock: {0}")]
147    Acquire(#[source] io::Error),
148    #[error("lock file not accessible: {0}")]
149    Io(#[source] io::Error),
150}
151
152/// Error type for repository/storage-adjacent operations.
153#[derive(Debug, thiserror::Error)]
154pub enum HeddleError {
155    #[error("{0}")]
156    Recovery(Box<RecoveryDetails>),
157    #[error("object not found: {0}")]
158    NotFound(String),
159    #[error("No merge in progress")]
160    NoMergeInProgress,
161    #[error("state not found: {0}")]
162    StateNotFound(StateId),
163    #[error("invalid object: {0}")]
164    InvalidObject(String),
165    #[error("repository not found at {0}")]
166    RepositoryNotFound(std::path::PathBuf),
167    #[error("repository already exists at {0}")]
168    RepositoryExists(std::path::PathBuf),
169    #[error(
170        "repository config at {path} uses repository format {found} but this binary supports {supported}; upgrade heddle or run `heddle migrate`"
171    )]
172    RepositoryFormatTooNew {
173        path: std::path::PathBuf,
174        found: u32,
175        supported: u32,
176    },
177    #[error(
178        "repository at {path} predates format v{required} (found v{found}); recreate it or re-adopt its Git history with this Heddle version"
179    )]
180    RepositoryFormatMigrationRequired {
181        path: std::path::PathBuf,
182        found: u32,
183        required: u32,
184    },
185    #[error(
186        "{storage} uses format {found}, but this binary supports {supported}; upgrade Heddle before opening it"
187    )]
188    StorageFormatTooNew {
189        storage: String,
190        found: u32,
191        supported: u32,
192    },
193    #[error(
194        "{storage} predates required format {required} (found {found}); recreate the repository or re-adopt its Git history with this Heddle version"
195    )]
196    StorageFormatMigrationRequired {
197        storage: String,
198        found: u32,
199        required: u32,
200    },
201    #[error("io error: {0}")]
202    Io(#[from] std::io::Error),
203    #[error("repository lock unavailable: {0}")]
204    Lock(#[from] LockError),
205    #[error("serialization error: {0}")]
206    Serialization(String),
207    #[error("configuration error: {0}")]
208    Config(String),
209    #[error("configuration parse error at {path}: {source}")]
210    ConfigParse {
211        path: std::path::PathBuf,
212        // Keep the original `toml::de::Error` as the error source — not a
213        // flattened string — so `HeddleExitCode::from_error` can still
214        // downcast through the chain and classify config-parse failures as
215        // EX_DATAERR (65) rather than falling through to EX_IOERR (74).
216        #[source]
217        source: toml::de::Error,
218    },
219    #[error(
220        "invalid {key}: '{value}' — valid values are {} (in {path})",
221        valid_values.join(" or ")
222    )]
223    ConfigInvalidValue {
224        path: std::path::PathBuf,
225        key: String,
226        value: String,
227        valid_values: Vec<String>,
228    },
229    #[error("conflict: {0}")]
230    Conflict(String),
231    #[error("compression error: {0}")]
232    Compression(String),
233    #[error("invalid ref name: {0}")]
234    InvalidRefName(String),
235    #[error("file too large: {0} bytes")]
236    InvalidFileSize(u64),
237    #[error("symlink target escapes repository: {0}")]
238    InvalidSymlinkTarget(std::path::PathBuf),
239    #[error("object corruption: expected {expected}, found {found}")]
240    Corruption {
241        expected: ContentHash,
242        found: ContentHash,
243    },
244    #[error(
245        "missing {object_type} object: {id} (run `heddle fsck --full` to inspect store integrity)"
246    )]
247    MissingObject { object_type: String, id: String },
248    #[error("invalid tree entry: {0}")]
249    InvalidTreeEntry(#[from] TreeError),
250}
251
252impl HeddleError {
253    pub fn recovery(details: RecoveryDetails) -> Self {
254        HeddleError::Recovery(Box::new(details))
255    }
256}
257
258impl From<rmp_serde::encode::Error> for HeddleError {
259    fn from(e: rmp_serde::encode::Error) -> Self {
260        HeddleError::Serialization(e.to_string())
261    }
262}
263
264impl From<rmp_serde::decode::Error> for HeddleError {
265    fn from(e: rmp_serde::decode::Error) -> Self {
266        HeddleError::Serialization(e.to_string())
267    }
268}
269
270impl From<crate::object::SemanticIndexError> for HeddleError {
271    fn from(e: crate::object::SemanticIndexError) -> Self {
272        HeddleError::InvalidObject(e.to_string())
273    }
274}
275
276impl From<toml::de::Error> for HeddleError {
277    fn from(e: toml::de::Error) -> Self {
278        HeddleError::Config(e.to_string())
279    }
280}
281
282impl From<toml::ser::Error> for HeddleError {
283    fn from(e: toml::ser::Error) -> Self {
284        HeddleError::Config(e.to_string())
285    }
286}
287
288impl From<serde_json::Error> for HeddleError {
289    fn from(e: serde_json::Error) -> Self {
290        HeddleError::Serialization(e.to_string())
291    }
292}
293
294impl From<heddle_format::compression::CompressionError> for HeddleError {
295    fn from(e: heddle_format::compression::CompressionError) -> Self {
296        HeddleError::Compression(e.to_string())
297    }
298}
299
300/// Result type for repository/storage-adjacent operations.
301pub type Result<T> = std::result::Result<T, HeddleError>;
302
303#[cfg(test)]
304mod tests {
305    use super::{HeddleError, RecoveryDetails};
306
307    #[test]
308    fn safety_refusal_formats_domain_details() {
309        let details = RecoveryDetails::safety_refusal(
310            "example",
311            "error",
312            "hint",
313            "unsafe",
314            "would change",
315            "preserved",
316        );
317
318        assert_eq!(
319            details.to_string(),
320            "error. Unsafe: unsafe. Would change: would change. Preserved: preserved."
321        );
322    }
323
324    #[test]
325    fn recovery_error_displays_structured_error_copy() {
326        let err = HeddleError::recovery(RecoveryDetails::serialization_error("bad marker"));
327
328        assert!(err.to_string().contains("Repository state is corrupted"));
329        assert!(!err.to_string().contains("heddle fsck --full"));
330    }
331}
heddle_object_model/error.rs

heddle_object_model/
error.rs
