D:\a\cssh-rs\cssh-rs\xtask\src\release.rs

Source
//! Release preparation and git tag creation.
//!
//! [`prepare_release`] bumps the version, optionally creates a maintenance
//! branch, updates `Cargo.toml` and `Cargo.lock`, generates the changelog,
//! commits, and pushes.
//!
//! [`create_release_tag`] validates the current state and creates an annotated
//! git tag that triggers the GitHub Actions release workflow.

use anyhow::{bail, Context, Result};
use semver::Version;

/// Type of version increment for a release.
#[derive(Debug, PartialEq)]
pub enum ReleaseType {
    /// Increment the major component (X.0.0).
    Major,
    /// Increment the minor component (0.X.0).
    Minor,
    /// Increment the patch component (0.0.X).
    Patch,
}

impl std::fmt::Display for ReleaseType {
    fn fmt(&self, f: &mut std::fmt::Formatter<'_>) -> std::fmt::Result {
        match self {
            ReleaseType::Major => write!(f, "major"),
            ReleaseType::Minor => write!(f, "minor"),
            ReleaseType::Patch => write!(f, "patch"),
        }
    }
}

/// All side-effecting operations required by this module.
///
/// Each method maps to exactly one external operation, making every step
/// independently mockable in tests.
pub trait ReleaseSystem {
    /// Run `git status --porcelain` and return its stdout.
    ///
    /// # Errors
    ///
    /// Returns an error if the process fails.
    fn git_status_porcelain(&self) -> Result<String>;

    /// Return the current git branch name.
    ///
    /// # Errors
    ///
    /// Returns an error if the process fails.
    fn git_current_branch(&self) -> Result<String>;

    /// Create and switch to a new branch with `git checkout -b <name>`.
    ///
    /// # Arguments
    ///
    /// * `name` - Branch name to create.
    ///
    /// # Errors
    ///
    /// Returns an error if the process fails.
    fn git_checkout_new_branch(&self, name: &str) -> Result<()>;

    /// Switch to an existing branch with `git checkout <name>`.
    ///
    /// Relies on git's DWIM behaviour: when `<name>` exists only as
    /// `refs/remotes/origin/<name>`, a local tracking branch is created.
    /// The caller is responsible for fetching beforehand.
    ///
    /// # Arguments
    ///
    /// * `name` - Branch name to switch to.
    ///
    /// # Errors
    ///
    /// Returns an error if the process fails.
    fn git_checkout(&self, name: &str) -> Result<()>;

    /// Return `true` when `refs/heads/<name>` exists locally.
    ///
    /// # Arguments
    ///
    /// * `name` - Local branch name to look up.
    ///
    /// # Errors
    ///
    /// Returns an error if the process fails for a reason other than the ref
    /// not existing.
    fn git_branch_exists_local(&self, name: &str) -> Result<bool>;

    /// Return `true` when `refs/remotes/origin/<name>` exists locally.
    ///
    /// The remote ref is only present after a successful `git fetch`, so
    /// callers must fetch before relying on this answer to reflect the
    /// remote's actual state.
    ///
    /// # Arguments
    ///
    /// * `name` - Branch name to look up under `origin/`.
    ///
    /// # Errors
    ///
    /// Returns an error if the process fails for a reason other than the ref
    /// not existing.
    fn git_branch_exists_origin(&self, name: &str) -> Result<bool>;

    /// Stage the given files with `git add`.
    ///
    /// # Arguments
    ///
    /// * `files` - Paths to stage.
    ///
    /// # Errors
    ///
    /// Returns an error if the process fails.
    fn git_add(&self, files: &[String]) -> Result<()>;

    /// Commit staged changes with the given message.
    ///
    /// # Arguments
    ///
    /// * `message` - Commit message.
    /// * `no_verify` - When `true`, pass `--no-verify` to bypass git hooks.
    ///
    /// # Errors
    ///
    /// Returns an error if the process fails.
    fn git_commit(&self, message: &str, no_verify: bool) -> Result<()>;

    /// Run `git push` with the given extra arguments.
    ///
    /// # Arguments
    ///
    /// * `args` - Extra arguments appended to `git push`.
    ///
    /// # Errors
    ///
    /// Returns an error if the process fails.
    fn git_push(&self, args: &[String]) -> Result<()>;

    /// Open a GitHub pull request against `base` using `gh pr create --fill`.
    ///
    /// `--fill` derives title and body from the latest commit, so the caller
    /// must ensure that commit has the desired subject/body.
    ///
    /// # Arguments
    ///
    /// * `base` - Branch the PR targets.
    ///
    /// # Errors
    ///
    /// Returns an error if the process fails.
    fn gh_pr_create(&self, base: &str) -> Result<()>;

    /// Return `git tag -l <tag>` stdout for the given tag name.
    ///
    /// # Arguments
    ///
    /// * `tag` - Tag name to check.
    ///
    /// # Errors
    ///
    /// Returns an error if the process fails.
    fn git_tag_list(&self, tag: &str) -> Result<String>;

    /// Return the subject of the latest commit (`git log -1 --pretty=format:%s`).
    ///
    /// # Errors
    ///
    /// Returns an error if the process fails.
    fn git_log_latest_subject(&self) -> Result<String>;

    /// Run `git fetch`.
    ///
    /// # Errors
    ///
    /// Returns an error if the process fails (non-fatal; callers may continue).
    fn git_fetch(&self) -> Result<()>;

    /// Return the number of commits the local branch is behind `<branch>` on
    /// the remote.
    ///
    /// # Arguments
    ///
    /// * `branch` - Remote branch to compare against.
    ///
    /// # Errors
    ///
    /// Returns an error if the process fails.
    fn git_rev_list_count_behind(&self, branch: &str) -> Result<u32>;

    /// Return the number of commits the local branch is ahead of `<branch>`
    /// on the remote.
    ///
    /// # Arguments
    ///
    /// * `branch` - Remote branch to compare against.
    ///
    /// # Errors
    ///
    /// Returns an error if the process fails.
    fn git_rev_list_count_ahead(&self, branch: &str) -> Result<u32>;

    /// Create an annotated git tag.
    ///
    /// # Arguments
    ///
    /// * `tag` - Tag name.
    /// * `message` - Annotation message.
    ///
    /// # Errors
    ///
    /// Returns an error if the process fails.
    fn git_create_annotated_tag(&self, tag: &str, message: &str) -> Result<()>;

    /// Push a tag to `origin`.
    ///
    /// # Arguments
    ///
    /// * `tag` - Tag name to push.
    ///
    /// # Errors
    ///
    /// Returns an error if the process fails.
    fn git_push_tag(&self, tag: &str) -> Result<()>;

    /// Read the contents of `Cargo.toml`.
    ///
    /// # Errors
    ///
    /// Returns an error if the file cannot be read.
    fn read_cargo_toml(&self) -> Result<String>;

    /// Write `content` to `Cargo.toml`.
    ///
    /// # Errors
    ///
    /// Returns an error if the write fails.
    fn write_cargo_toml(&self, content: &str) -> Result<()>;

    /// Run `cargo update --workspace` to refresh `Cargo.lock`.
    ///
    /// # Errors
    ///
    /// Returns an error if the process fails.
    fn cargo_update_workspace(&self) -> Result<()>;

    /// Generate the changelog for the current version.
    ///
    /// # Errors
    ///
    /// Returns an error if changelog generation fails.
    fn generate_changelog(&self) -> Result<()>;

    /// Display `message` and read a line of user input.
    ///
    /// # Arguments
    ///
    /// * `message` - Prompt text.
    ///
    /// # Returns
    ///
    /// The trimmed response string.
    ///
    /// # Errors
    ///
    /// Returns an error if stdin cannot be read.
    fn prompt_user(&self, message: &str) -> Result<String>;
}

/// Check whether `ref_name` exists via `git show-ref --verify`.
///
/// `git show-ref` is documented to exit 0 when the ref exists, 1 when it does
/// not, and other non-zero codes for actual failures (bad arguments, broken
/// repo, etc.). Mapping every non-zero exit to "missing" would silently
/// swallow real errors, so the latter must surface as an `Err`.
#[cfg_attr(coverage_nightly, coverage(off))]
fn show_ref_exists(ref_name: &str) -> Result<bool> {
    let output = std::process::Command::new("git")
        .args(["show-ref", "--verify", "--quiet", ref_name])
        .output()
        .context("failed to run `git show-ref`")?;
    match output.status.code() {
        Some(0) => Ok(true),
        Some(1) => Ok(false),
        _ => bail!(
            "`git show-ref --verify {ref_name}` failed with status {}: {}",
            output.status,
            String::from_utf8_lossy(&output.stderr).trim(),
        ),
    }
}

/// Run `git rev-list --count <range>` and return the parsed commit count.
///
/// A non-zero exit (e.g. unknown ref) or unparseable stdout must surface as an
/// `Err` - returning `0` would silently mask "stale ref" or "git failed" as
/// "branch is up to date".
#[cfg_attr(coverage_nightly, coverage(off))]
fn rev_list_count(range: &str) -> Result<u32> {
    let output = std::process::Command::new("git")
        .args(["rev-list", "--count", range])
        .output()
        .context("failed to run `git rev-list`")?;
    if !output.status.success() {
        bail!(
            "`git rev-list --count {range}` failed with status {}: {}",
            output.status,
            String::from_utf8_lossy(&output.stderr).trim(),
        );
    }
    let stdout = String::from_utf8_lossy(&output.stdout);
    stdout.trim().parse::<u32>().with_context(|| {
        format!("failed to parse `git rev-list --count {range}` stdout: {stdout:?}")
    })
}

/// Production implementation of [`ReleaseSystem`].
pub struct RealSystem;

#[cfg_attr(coverage_nightly, coverage(off))]
impl ReleaseSystem for RealSystem {
    fn git_status_porcelain(&self) -> Result<String> {
        let output = std::process::Command::new("git")
            .args(["status", "--porcelain"])
            .output()
            .context("failed to run `git status --porcelain`")?;
        Ok(String::from_utf8_lossy(&output.stdout).into_owned())
    }

    fn git_current_branch(&self) -> Result<String> {
        let output = std::process::Command::new("git")
            .args(["branch", "--show-current"])
            .output()
            .context("failed to run `git branch --show-current`")?;
        Ok(String::from_utf8_lossy(&output.stdout).trim().to_owned())
    }

    fn git_checkout_new_branch(&self, name: &str) -> Result<()> {
        let status = std::process::Command::new("git")
            .args(["checkout", "-b", name])
            .status()
            .context("failed to run `git checkout -b`")?;
        if !status.success() {
            bail!("`git checkout -b {name}` failed with status {status}");
        }
        Ok(())
    }

    fn git_checkout(&self, name: &str) -> Result<()> {
        let status = std::process::Command::new("git")
            .args(["checkout", name])
            .status()
            .context("failed to run `git checkout`")?;
        if !status.success() {
            bail!("`git checkout {name}` failed with status {status}");
        }
        Ok(())
    }

    fn git_branch_exists_local(&self, name: &str) -> Result<bool> {
        show_ref_exists(&format!("refs/heads/{name}"))
    }

    fn git_branch_exists_origin(&self, name: &str) -> Result<bool> {
        show_ref_exists(&format!("refs/remotes/origin/{name}"))
    }

    fn git_add(&self, files: &[String]) -> Result<()> {
        let status = std::process::Command::new("git")
            .arg("add")
            .args(files)
            .status()
            .context("failed to run `git add`")?;
        if !status.success() {
            bail!("`git add` failed with status {status}");
        }
        Ok(())
    }

    fn git_commit(&self, message: &str, no_verify: bool) -> Result<()> {
        let mut cmd = std::process::Command::new("git");
        cmd.args(["commit", "-m", message]);
        if no_verify {
            cmd.arg("--no-verify");
        }
        let status = cmd.status().context("failed to run `git commit`")?;
        if !status.success() {
            bail!("`git commit` failed with status {status}");
        }
        Ok(())
    }

    fn git_push(&self, args: &[String]) -> Result<()> {
        let status = std::process::Command::new("git")
            .arg("push")
            .args(args)
            .status()
            .context("failed to run `git push`")?;
        if !status.success() {
            bail!("`git push` failed with status {status}");
        }
        Ok(())
    }

    fn gh_pr_create(&self, base: &str) -> Result<()> {
        let status = std::process::Command::new("gh")
            .args(["pr", "create", "--base", base, "--fill"])
            .status()
            .context("failed to run `gh pr create`")?;
        if !status.success() {
            bail!("`gh pr create --base {base}` failed with status {status}");
        }
        Ok(())
    }

    fn git_tag_list(&self, tag: &str) -> Result<String> {
        let output = std::process::Command::new("git")
            .args(["tag", "-l", tag])
            .output()
            .context("failed to run `git tag -l`")?;
        Ok(String::from_utf8_lossy(&output.stdout).into_owned())
    }

    fn git_log_latest_subject(&self) -> Result<String> {
        let output = std::process::Command::new("git")
            .args(["log", "-1", "--pretty=format:%s"])
            .output()
            .context("failed to run `git log`")?;
        Ok(String::from_utf8_lossy(&output.stdout).trim().to_owned())
    }

    fn git_fetch(&self) -> Result<()> {
        let status = std::process::Command::new("git")
            .arg("fetch")
            .status()
            .context("failed to run `git fetch`")?;
        if !status.success() {
            bail!("`git fetch` failed with status {status}");
        }
        Ok(())
    }

    fn git_rev_list_count_behind(&self, branch: &str) -> Result<u32> {
        rev_list_count(&format!("HEAD..origin/{branch}"))
    }

    fn git_rev_list_count_ahead(&self, branch: &str) -> Result<u32> {
        rev_list_count(&format!("origin/{branch}..HEAD"))
    }

    fn git_create_annotated_tag(&self, tag: &str, message: &str) -> Result<()> {
        let status = std::process::Command::new("git")
            .args(["tag", "-a", tag, "-m", message])
            .status()
            .context("failed to run `git tag -a`")?;
        if !status.success() {
            bail!("`git tag -a {tag}` failed with status {status}");
        }
        Ok(())
    }

    fn git_push_tag(&self, tag: &str) -> Result<()> {
        let status = std::process::Command::new("git")
            .args(["push", "origin", tag])
            .status()
            .context("failed to run `git push origin <tag>`")?;
        if !status.success() {
            bail!("`git push origin {tag}` failed with status {status}");
        }
        Ok(())
    }

    fn read_cargo_toml(&self) -> Result<String> {
        std::fs::read_to_string("Cargo.toml").context("failed to read Cargo.toml")
    }

    fn write_cargo_toml(&self, content: &str) -> Result<()> {
        std::fs::write("Cargo.toml", content).context("failed to write Cargo.toml")
    }

    fn cargo_update_workspace(&self) -> Result<()> {
        let status = std::process::Command::new("cargo")
            .args(["update", "--workspace"])
            .status()
            .context("failed to run `cargo update --workspace`")?;
        if !status.success() {
            bail!("`cargo update --workspace` failed with status {status}");
        }
        Ok(())
    }

    fn generate_changelog(&self) -> Result<()> {
        crate::changelog::generate_changelog(&crate::changelog::RealSystem)
    }

    fn prompt_user(&self, message: &str) -> Result<String> {
        use std::io::Write;
        // Interactive prompt: written directly to stdout so it lacks the
        // timestamp/level prefix the logger would add, and flushed so the
        // cursor sits next to the prompt before stdin is read.
        print!("{message}");
        std::io::stdout()
            .flush()
            .context("failed to flush stdout")?;
        let mut input = String::new();
        std::io::stdin()
            .read_line(&mut input)
            .context("failed to read user input")?;
        Ok(input.trim().to_owned())
    }
}

/// Determine the suggested next version and release type from the current branch.
///
/// `main` -> minor bump; `*-maintenance` -> patch bump.
///
/// # Arguments
///
/// * `current` - Current version from `Cargo.toml`.
/// * `branch` - Current git branch name.
///
/// # Returns
///
/// `(ReleaseType, next_version)`.
///
/// # Errors
///
/// Returns an error when `branch` is neither `main` nor ends with
/// `-maintenance`.
pub fn suggest_next_version(current: &Version, branch: &str) -> Result<(ReleaseType, Version)> {
    if branch == "main" {
        let mut next = current.clone();
        next.minor += 1;
        next.patch = 0;
        Ok((ReleaseType::Minor, next))
    } else if branch.ends_with("-maintenance") {
        let mut next = current.clone();
        next.patch += 1;
        Ok((ReleaseType::Patch, next))
    } else {
        bail!(
            "must be on 'main' or a '*-maintenance' branch to prepare a release \
             (current branch: {branch})"
        )
    }
}

/// Determine the release type by comparing two versions.
///
/// # Arguments
///
/// * `current` - The version before the release.
/// * `next` - The version after the release.
///
/// # Returns
///
/// The most significant component that changed.
pub fn determine_release_type(current: &Version, next: &Version) -> ReleaseType {
    if next.major > current.major {
        ReleaseType::Major
    } else if next.minor > current.minor {
        ReleaseType::Minor
    } else {
        ReleaseType::Patch
    }
}

/// Rewrite the `[workspace.package].version` field in a `Cargo.toml` string.
///
/// Uses `toml_edit` to preserve all existing formatting.
///
/// # Arguments
///
/// * `cargo_toml_content` - Raw TOML text of `Cargo.toml`.
/// * `new_version` - Version string to set.
///
/// # Returns
///
/// Updated TOML text.
///
/// # Errors
///
/// Returns an error if `cargo_toml_content` cannot be parsed as TOML or the
/// `[workspace.package].version` key is absent.
pub fn set_cargo_toml_version(cargo_toml_content: &str, new_version: &str) -> Result<String> {
    let mut doc: toml_edit::DocumentMut = cargo_toml_content
        .parse()
        .context("failed to parse Cargo.toml")?0;
    let version8 = doc
        .get_mut("workspace")
        .and_then(|w| w.as_table_mut())
        .and_then(|t| t.get_mut("package"))
        .and_then(|p| p8.as_table_mut8())
        .and_then(|t| t8.get_mut8("version"8))
        .context("missing [workspace.package].version in Cargo.toml")?1;
    *version = toml_edit::value(new_version);
    Ok(doc.to_string())
}

/// Ensure the maintenance branch exists and is checked out before any release
/// prepared from `main` (major/minor create + push the maintenance branch and
/// then branch off `release-X.Y.Z`; a custom patch version typed on `main`
/// switches to an existing maintenance branch and pushes the version bump
/// directly).
///
/// Fetches once, then handles the four
/// (local exists, origin exists) combinations:
///
/// - `(false, false)`: create the branch from the current HEAD (`main`) and
///   push it to `origin`.
/// - `(true, false)`: switch to the existing local branch and push it.
/// - `(false, true)`: switch to the branch - git's DWIM creates a local
///   tracking branch from `origin/<name>`.
/// - `(true, true)`: switch to the local branch and verify it is neither
///   behind nor ahead of `origin`.
///
/// A failed `git fetch` is fatal here: every subsequent decision depends on
/// `refs/remotes/origin/*` reflecting the remote's actual state, and a stale
/// view can cause the wrong branch (create / push / checkout / fail-behind)
/// to be taken.
///
/// # Arguments
///
/// * `system` - Injected I/O provider.
/// * `maintenance_branch` - Name of the maintenance branch to ready.
///
/// # Errors
///
/// Returns an error if any git step fails or the local branch is behind or
/// ahead of origin.
fn ensure_maintenance_branch_ready<S: ReleaseSystem>(
    system: &S,
    maintenance_branch: &str,
) -> Result<()> {
    log::info!("Fetching origin to check maintenance branch state");
    system
        .git_fetch()
        .context("failed to fetch from origin - cannot determine maintenance branch state")?1;

    let local_exists = system.git_branch_exists_local(maintenance_branch)?0;
    let origin_exists = system.git_branch_exists_origin(maintenance_branch)?0;

    match (local_exists, origin_exists) {
        (false, false) => {
            log::info!(
                "Maintenance branch {maintenance_branch} does not exist; \
                 creating from current HEAD and pushing to origin"
            );
            system.git_checkout_new_branch(maintenance_branch)?0;
            system.git_push(&[
                "-u".to_owned(),
                "origin".to_owned(),
                maintenance_branch.to_owned(),
            ])?0;
        }
        (true, false) => {
            log::info!(
                "Maintenance branch {maintenance_branch} exists locally only; \
                 switching to it and pushing to origin"
            );
            system.git_checkout(maintenance_branch)?0;
            system.git_push(&[
                "-u".to_owned(),
                "origin".to_owned(),
                maintenance_branch.to_owned(),
            ])?0;
        }
        (false, true) => {
            log::info!(
                "Maintenance branch {maintenance_branch} exists on origin only; \
                 creating a local tracking branch"
            );
            system.git_checkout(maintenance_branch)?0;
        }
        (true, true) => {
            log::info!(
                "Maintenance branch {maintenance_branch} exists locally and on \
                 origin; switching to local branch"
            );
            system.git_checkout(maintenance_branch)?0;
            let behind = system.git_rev_list_count_behind(maintenance_branch)?0;
            if behind > 0 {
                bail!(
                    "local maintenance branch {maintenance_branch} is {behind} commit(s) \
                     behind origin - run `git pull` first"
                );
            }
            // Unpushed local commits would otherwise leak into the release PR
            // when we branch off `release-X.Y.Z` from here.
            let ahead = system.git_rev_list_count_ahead(maintenance_branch)?0;
            if ahead > 0 {
                bail!(
                    "local maintenance branch {maintenance_branch} is {ahead} commit(s) \
                     ahead of origin - push it before preparing a release"
                );
            }
        }
    }
    Ok(())
}

/// Prepare a new release.
///
/// Full workflow:
/// 1. Verify working tree is clean.
/// 2. Detect branch and suggest release type / next version.
/// 3. Prompt user (accepts custom version input).
/// 4. When releasing from `main`: ensure the target maintenance branch is
///    ready (see [`ensure_maintenance_branch_ready`]). For a major/minor
///    release this creates the branch when missing; for a patch release
///    entered as a custom version it switches to the existing branch.
///    Then, for a major/minor release, branch off a `release-X.Y.Z` branch
///    for the version bump. For a patch release on a maintenance branch
///    (or switched to one above), stay on that branch.
/// 5. Update `Cargo.toml` version.
/// 6. Run `cargo update --workspace`.
/// 7. Generate changelog.
/// 8. Commit the version bump.
/// 9. For a major/minor release from `main`: push the `release-X.Y.Z`
///    branch and open a GH PR against the maintenance branch. For a patch
///    release: push directly to the maintenance branch.
///
/// # Arguments
///
/// * `system` - Injected I/O provider.
///
/// # Errors
///
/// Returns an error if any step fails.
pub fn prepare_release<S: ReleaseSystem>(system: &S) -> Result<()> {
    let status = system.git_status_porcelain()?0;
    if !status.trim().is_empty() {
        bail!("git working directory is not clean - commit or stash changes first:\n{status}");
    }

    let current_branch = system.git_current_branch()?0;
    let cargo_toml = system.read_cargo_toml()?0;
    let current_version: Version = crate::changelog::extract_version_from_cargo_toml(&cargo_toml)?0
        .parse()
        .context("failed to parse current version as semver")?0;

    log::info!("Current branch: {current_branch}");
    log::info!("Current version: {current_version}");

    let (suggested_type, suggested_version) =
        suggest_next_version(&current_version, &current_branch)?1;

    let prompt = format!(
        "Preparing {suggested_type} release: {current_version} -> {suggested_version}. Continue? [Y/n]: "
    );
    let answer = system.prompt_user(&prompt)?0;

    let (next_version, actual_type) =
        if answer.eq_ignore_ascii_case("n") || answer8.eq_ignore_ascii_case("no") {
            let custom_str = system.prompt_user(&format!(
                "Enter custom version (current: {current_version}): "
            ))?0;
            if custom_str.is_empty() {
                bail!("version cannot be empty");
            }
            let custom: Version = custom_str
                .parse()
                .context("invalid version format - use semantic versioning (e.g. 1.2.3)")?0;
            let release_type = determine_release_type(&current_version, &custom);
            (custom, release_type)
        } else if answer.is_empty()
            || answer.eq_ignore_ascii_case("y")
            || answer.eq_ignore_ascii_case("yes")
        {
            (suggested_version, suggested_type)
        } else {
            bail!("invalid input - please enter Y or n");
        };

    let releases_from_main = current_branch == "main";
    let opens_pr =
        releases_from_main && matches!1(actual_type8, ReleaseType::Major | ReleaseType::Minor);
    let maintenance_branch = if releases_from_main {
        format!("{}.{}-maintenance", next_version.major, next_version.minor)
    } else {
        current_branch.clone()
    };
    let pr_branch = opens_pr.then(|| format!7("release-{next_version}"));

    log::info!("Preparing {actual_type} release: {current_version} -> {next_version}");
    log::info!("Maintenance branch: {maintenance_branch}");

    if releases_from_main {
        ensure_maintenance_branch_ready(system, &maintenance_branch)?3;
    }

    if let Some(pr_branch_name4) = pr_branch.as_deref() {
        log::info!("Creating release branch: {pr_branch_name}");
        system.git_checkout_new_branch(pr_branch_name)?0;
    }

    log::info!("Updating Cargo.toml version to {next_version}");
    let updated_cargo = set_cargo_toml_version(&cargo_toml, &next_version.to_string())?0;
    system.write_cargo_toml(&updated_cargo)?0;

    log::info!("Updating Cargo.lock");
    system.cargo_update_workspace()?0;

    log::info!("Generating changelog");
    system.generate_changelog()?0;

    let commit_message = format!("Version {next_version}");
    log::info!("Committing: {commit_message}");
    system.git_add(&[
        "Cargo.toml".to_owned(),
        "Cargo.lock".to_owned(),
        "CHANGELOG.md".to_owned(),
        "changelogging.toml".to_owned(),
    ])?0;
    // Skip pre-commit hooks: the project's hook runs `cargo build --workspace
    // --all-targets`, which would try to replace the running xtask.exe and
    // fail on Windows with an access-denied error.
    system.git_commit(&commit_message, true)?0;

    if let Some(pr_branch_name4) = pr_branch.as_deref() {
        log::info!("Pushing release branch: {pr_branch_name}");
        system.git_push(&[
            "-u".to_owned(),
            "origin".to_owned(),
            pr_branch_name.to_owned(),
        ])?0;

        log::info!("Opening PR against {maintenance_branch}");
        system.gh_pr_create(&maintenance_branch)?0;

        log::info!(
            "Release {next_version} prepared on branch {pr_branch_name} \
             with PR against {maintenance_branch}"
        );
        log::info!(
            "After the PR is merged, switch to {maintenance_branch}, \
             pull, and run `cargo xtask create-release-tag` to tag the release"
        );
    } else {
        log::info!("Pushing to remote");
        system.git_push(&[])?0;

        log::info!("Release {next_version} prepared on branch {maintenance_branch}");
        log::info!("Run `cargo xtask create-release-tag` to tag the release");
    }
    Ok(())
}

/// Create and push an annotated git tag for the current release version.
///
/// Full workflow:
/// 1. Verify on a maintenance branch.
/// 2. Read version from `Cargo.toml`.
/// 3. Check the tag does not already exist.
/// 4. Verify the latest commit message is `"Version X.Y.Z"`.
/// 5. Fetch from remote and check not behind.
/// 6. Prompt user for confirmation.
/// 7. Create annotated tag and push.
///
/// # Arguments
///
/// * `system` - Injected I/O provider.
///
/// # Errors
///
/// Returns an error if any validation step fails.
pub fn create_release_tag<S: ReleaseSystem>(system: &S) -> Result<()> {
    let current_branch = system.git_current_branch()?0;
    if !current_branch.ends_with("-maintenance") {
        bail!(
            "must be on a maintenance branch to create a release tag \
             (current branch: {current_branch}) - run `cargo xtask prepare-release` first"
        );
    }

    let cargo_toml = system.read_cargo_toml()?0;
    let version_str = crate::changelog::extract_version_from_cargo_toml(&cargo_toml)?0;
    let version: Version = version_str
        .parse()
        .context("failed to parse version as semver")?0;

    log::info!("Current branch: {current_branch}");
    log::info!("Version to tag: {version}");

    let existing_tag = system.git_tag_list(&version.to_string())?0;
    if !existing_tag.trim().is_empty() {
        bail!("tag {version} already exists");
    }

    let commit_msg = system.git_log_latest_subject()?0;
    let expected_msg = format!("Version {version}");
    if commit_msg != expected_msg {
        bail!(
            "latest commit message does not match expected version commit\n\
             expected: {expected_msg}\n\
             actual:   {commit_msg}\n\
             run `cargo xtask prepare-release` first"
        );
    }

    log::info!("Fetching latest changes from remote");
    if let Err(e0) = system.git_fetch() {
        log::warn!("Failed to fetch from remote, continuing anyway: {e}");
    }

    let behind = system.git_rev_list_count_behind(&current_branch)?0;
    if behind > 0 {
        bail!("local branch is {behind} commit(s) behind remote - run `git pull` first");
    }

    let answer = system.prompt_user(&format!(
        "About to create and push tag '{version}'. Continue? [Y/n]: "
    ))?0;
    if answer.eq_ignore_ascii_case("n") || answer1.eq_ignore_ascii_case("no") {
        log::info!("Tag creation cancelled");
        return Ok(());
    }

    let tag_message = format!("Version {version}");
    log::info!("Creating annotated tag: {version}");
    system.git_create_annotated_tag(&version.to_string(), &tag_message)?0;

    log::info!("Pushing tag to remote");
    system.git_push_tag(&version.to_string())?0;

    log::info!("Tag '{version}' created and pushed");
    log::info!("Check: https://github.com/whmade/cssh-rs/actions/workflows/release.yml");
    Ok(())
}

#[cfg(test)]
#[path = "tests/test_release.rs"]
mod tests;

Coverage Report

Created: 2026-08-07 16:19