rugged 1.3.1 → 1.9.0

data/vendor/libgit2/src/{path.h → util/fs_path.h}

@@ -4,16 +4,15 @@
  * This file is part of libgit2, distributed under the GNU GPL v2 with
  * a Linking Exception. For full terms see the included COPYING file.
  */
-#ifndef INCLUDE_path_h__
-#define INCLUDE_path_h__
+#ifndef INCLUDE_fs_path_h__
+#define INCLUDE_fs_path_h__
 
-#include "common.h"
+#include "git2_util.h"
 
 #include "posix.h"
-#include "buffer.h"
+#include "str.h"
 #include "vector.h"
-
-#include "git2/sys/path.h"
+#include "utf8.h"
 
 /**
  * Path manipulation utils
@@ -32,16 +31,16 @@
  * the string ".". If path is a null pointer or points to an empty string,
  * dirname() shall return a pointer to the string "." .
  *
- * The `git_path_dirname` implementation is thread safe. The returned
+ * The `git_fs_path_dirname` implementation is thread safe. The returned
  * string must be manually free'd.
  *
- * The `git_path_dirname_r` implementation writes the dirname to a `git_buf`
+ * The `git_fs_path_dirname_r` implementation writes the dirname to a `git_str`
  * if the buffer pointer is not NULL.
  * It returns an error code < 0 if there is an allocation error, otherwise
  * the length of the dirname (which will be > 0).
  */
-extern char *git_path_dirname(const char *path);
-extern int git_path_dirname_r(git_buf *buffer, const char *path);
+extern char *git_fs_path_dirname(const char *path);
+extern int git_fs_path_dirname_r(git_str *buffer, const char *path);
 
 /*
  * This function returns the basename of the file, which is the last
@@ -52,20 +51,20 @@ extern int git_path_dirname_r(git_buf *buffer, const char *path);
  * Trailing slashes and backslashes are significant: the basename of
  * c:/foo/bar/ is an empty string after the rightmost slash.
  *
- * The `git_path_basename` implementation is thread safe. The returned
+ * The `git_fs_path_basename` implementation is thread safe. The returned
  * string must be manually free'd.
  *
- * The `git_path_basename_r` implementation writes the basename to a `git_buf`.
+ * The `git_fs_path_basename_r` implementation writes the basename to a `git_str`.
  * It returns an error code < 0 if there is an allocation error, otherwise
  * the length of the basename (which will be >= 0).
  */
-extern char *git_path_basename(const char *path);
-extern int git_path_basename_r(git_buf *buffer, const char *path);
+extern char *git_fs_path_basename(const char *path);
+extern int git_fs_path_basename_r(git_str *buffer, const char *path);
 
 /* Return the offset of the start of the basename.  Unlike the other
  * basename functions, this returns 0 if the path is empty.
  */
-extern size_t git_path_basename_offset(git_buf *buffer);
+extern size_t git_fs_path_basename_offset(git_str *buffer);
 
 /**
  * Find offset to root of path if path has one.
@@ -75,22 +74,45 @@ extern size_t git_path_basename_offset(git_buf *buffer);
  * "c:/windows/rooted/path" returns 2).  If the path is not rooted, this
  * returns -1.
  */
-extern int git_path_root(const char *path);
+extern int git_fs_path_root(const char *path);
 
 /**
  * Ensure path has a trailing '/'.
  */
-extern int git_path_to_dir(git_buf *path);
+extern int git_fs_path_to_dir(git_str *path);
 
 /**
  * Ensure string has a trailing '/' if there is space for it.
  */
-extern void git_path_string_to_dir(char *path, size_t size);
+extern void git_fs_path_string_to_dir(char *path, size_t size);
+
+/**
+ * Provides the length of the given path string with no trailing
+ * slashes.
+ */
+size_t git_fs_path_dirlen(const char *path);
+
+/**
+ * Returns nonzero if the given path is a filesystem root; on Windows, this
+ * means a drive letter (eg `A:/`, `C:\`). On POSIX this is `/`.
+ */
+GIT_INLINE(int) git_fs_path_is_root(const char *name)
+{
+#ifdef GIT_WIN32
+	if (((name[0] >= 'A' && name[0] <= 'Z') || (name[0] >= 'a' && name[0] <= 'z')) &&
+	      name[1] == ':' &&
+	     (name[2] == '/' || name[2] == '\\') &&
+	      name[3] == '\0')
+		return 1;
+#endif
+
+	return (name[0] == '/' && name[1] == '\0');
+}
 
 /**
  * Taken from git.git; returns nonzero if the given path is "." or "..".
  */
-GIT_INLINE(int) git_path_is_dot_or_dotdot(const char *name)
+GIT_INLINE(int) git_fs_path_is_dot_or_dotdot(const char *name)
 {
 	return (name[0] == '.' &&
 			  (name[1] == '\0' ||
@@ -98,23 +120,23 @@ GIT_INLINE(int) git_path_is_dot_or_dotdot(const char *name)
 }
 
 #ifdef GIT_WIN32
-GIT_INLINE(int) git_path_is_dot_or_dotdotW(const wchar_t *name)
+GIT_INLINE(int) git_fs_path_is_dot_or_dotdotW(const wchar_t *name)
 {
 	return (name[0] == L'.' &&
 			  (name[1] == L'\0' ||
 				(name[1] == L'.' && name[2] == L'\0')));
 }
 
-#define git_path_is_absolute(p) \
+#define git_fs_path_is_absolute(p) \
 	(git__isalpha((p)[0]) && (p)[1] == ':' && ((p)[2] == '\\' || (p)[2] == '/'))
 
-#define git_path_is_dirsep(p) \
+#define git_fs_path_is_dirsep(p) \
 	((p) == '/' || (p) == '\\')
 
 /**
  * Convert backslashes in path to forward slashes.
  */
-GIT_INLINE(void) git_path_mkposix(char *path)
+GIT_INLINE(void) git_fs_path_mkposix(char *path)
 {
 	while (*path) {
 		if (*path == '\\')
@@ -124,12 +146,12 @@ GIT_INLINE(void) git_path_mkposix(char *path)
 	}
 }
 #else
-#	define git_path_mkposix(p) /* blank */
+#	define git_fs_path_mkposix(p) /* blank */
 
-#define git_path_is_absolute(p) \
+#define git_fs_path_is_absolute(p) \
 	((p)[0] == '/')
 
-#define git_path_is_dirsep(p) \
+#define git_fs_path_is_dirsep(p) \
 	((p) == '/')
 
 #endif
@@ -137,7 +159,7 @@ GIT_INLINE(void) git_path_mkposix(char *path)
 /**
  * Check if string is a relative path (i.e. starts with "./" or "../")
  */
-GIT_INLINE(int) git_path_is_relative(const char *p)
+GIT_INLINE(int) git_fs_path_is_relative(const char *p)
 {
 	return (p[0] == '.' && (p[1] == '/' || (p[1] == '.' && p[2] == '/')));
 }
@@ -145,17 +167,17 @@ GIT_INLINE(int) git_path_is_relative(const char *p)
 /**
  * Check if string is at end of path segment (i.e. looking at '/' or '\0')
  */
-GIT_INLINE(int) git_path_at_end_of_segment(const char *p)
+GIT_INLINE(int) git_fs_path_at_end_of_segment(const char *p)
 {
 	return !*p || *p == '/';
 }
 
-extern int git__percent_decode(git_buf *decoded_out, const char *input);
+extern int git__percent_decode(git_str *decoded_out, const char *input);
 
 /**
  * Extract path from file:// URL.
  */
-extern int git_path_fromurl(git_buf *local_path_out, const char *file_url);
+extern int git_fs_path_fromurl(git_str *local_path_out, const char *file_url);
 
 
 /**
@@ -168,35 +190,35 @@ extern int git_path_fromurl(git_buf *local_path_out, const char *file_url);
  * Check if a file exists and can be accessed.
  * @return true or false
  */
-extern bool git_path_exists(const char *path);
+extern bool git_fs_path_exists(const char *path);
 
 /**
  * Check if the given path points to a directory.
  * @return true or false
  */
-extern bool git_path_isdir(const char *path);
+extern bool git_fs_path_isdir(const char *path);
 
 /**
  * Check if the given path points to a regular file.
  * @return true or false
  */
-extern bool git_path_isfile(const char *path);
+extern bool git_fs_path_isfile(const char *path);
 
 /**
  * Check if the given path points to a symbolic link.
  * @return true or false
  */
-extern bool git_path_islink(const char *path);
+extern bool git_fs_path_islink(const char *path);
 
 /**
  * Check if the given path is a directory, and is empty.
  */
-extern bool git_path_is_empty_dir(const char *path);
+extern bool git_fs_path_is_empty_dir(const char *path);
 
 /**
  * Stat a file and/or link and set error if needed.
  */
-extern int git_path_lstat(const char *path, struct stat *st);
+extern int git_fs_path_lstat(const char *path, struct stat *st);
 
 /**
  * Check if the parent directory contains the item.
@@ -205,7 +227,7 @@ extern int git_path_lstat(const char *path, struct stat *st);
  * @param item Item that might be in the directory.
  * @return 0 if item exists in directory, <0 otherwise.
  */
-extern bool git_path_contains(git_buf *dir, const char *item);
+extern bool git_fs_path_contains(git_str *dir, const char *item);
 
 /**
  * Check if the given path contains the given subdirectory.
@@ -214,7 +236,7 @@ extern bool git_path_contains(git_buf *dir, const char *item);
  * @param subdir Subdirectory name to look for in parent
  * @return true if subdirectory exists, false otherwise.
  */
-extern bool git_path_contains_dir(git_buf *parent, const char *subdir);
+extern bool git_fs_path_contains_dir(git_str *parent, const char *subdir);
 
 /**
  * Determine the common directory length between two paths, including
@@ -226,7 +248,7 @@ extern bool git_path_contains_dir(git_buf *parent, const char *subdir);
  * @param two The second path
  * @return The length of the common directory
  */
-extern size_t git_path_common_dirlen(const char *one, const char *two);
+extern size_t git_fs_path_common_dirlen(const char *one, const char *two);
 
 /**
  * Make the path relative to the given parent path.
@@ -237,7 +259,7 @@ extern size_t git_path_common_dirlen(const char *one, const char *two);
  *         if there was not common root between the paths,
  *         or <0.
  */
-extern int git_path_make_relative(git_buf *path, const char *parent);
+extern int git_fs_path_make_relative(git_str *path, const char *parent);
 
 /**
  * Check if the given path contains the given file.
@@ -246,7 +268,7 @@ extern int git_path_make_relative(git_buf *path, const char *parent);
  * @param file File name to look for in parent
  * @return true if file exists, false otherwise.
  */
-extern bool git_path_contains_file(git_buf *dir, const char *file);
+extern bool git_fs_path_contains_file(git_str *dir, const char *file);
 
 /**
  * Prepend base to unrooted path or just copy path over.
@@ -254,36 +276,36 @@ extern bool git_path_contains_file(git_buf *dir, const char *file);
  * This will optionally return the index into the path where the "root"
  * is, either the end of the base directory prefix or the path root.
  */
-extern int git_path_join_unrooted(
-	git_buf *path_out, const char *path, const char *base, ssize_t *root_at);
+extern int git_fs_path_join_unrooted(
+	git_str *path_out, const char *path, const char *base, ssize_t *root_at);
 
 /**
  * Removes multiple occurrences of '/' in a row, squashing them into a
  * single '/'.
  */
-extern void git_path_squash_slashes(git_buf *path);
+extern void git_fs_path_squash_slashes(git_str *path);
 
 /**
  * Clean up path, prepending base if it is not already rooted.
  */
-extern int git_path_prettify(git_buf *path_out, const char *path, const char *base);
+extern int git_fs_path_prettify(git_str *path_out, const char *path, const char *base);
 
 /**
  * Clean up path, prepending base if it is not already rooted and
  * appending a slash.
  */
-extern int git_path_prettify_dir(git_buf *path_out, const char *path, const char *base);
+extern int git_fs_path_prettify_dir(git_str *path_out, const char *path, const char *base);
 
 /**
  * Get a directory from a path.
  *
- * If path is a directory, this acts like `git_path_prettify_dir`
+ * If path is a directory, this acts like `git_fs_path_prettify_dir`
  * (cleaning up path and appending a '/').  If path is a normal file,
  * this prettifies it, then removed the filename a la dirname and
  * appends the trailing '/'.  If the path does not exist, it is
  * treated like a regular filename.
  */
-extern int git_path_find_dir(git_buf *dir);
+extern int git_fs_path_find_dir(git_str *dir);
 
 /**
  * Resolve relative references within a path.
@@ -295,7 +317,7 @@ extern int git_path_find_dir(git_buf *dir);
  * Additionally, this will recognize an "c:/" drive prefix or a "xyz://" URL
  * prefix and not touch that part of the path.
  */
-extern int git_path_resolve_relative(git_buf *path, size_t ceiling);
+extern int git_fs_path_resolve_relative(git_str *path, size_t ceiling);
 
 /**
  * Apply a relative path to base path.
@@ -306,12 +328,12 @@ extern int git_path_resolve_relative(git_buf *path, size_t ceiling);
  * slash, "." will be eaten with no change, and ".." will remove a
  * segment from the base path.
  */
-extern int git_path_apply_relative(git_buf *target, const char *relpath);
+extern int git_fs_path_apply_relative(git_str *target, const char *relpath);
 
 enum {
-	GIT_PATH_DIR_IGNORE_CASE = (1u << 0),
-	GIT_PATH_DIR_PRECOMPOSE_UNICODE = (1u << 1),
-	GIT_PATH_DIR_INCLUDE_DOT_AND_DOTDOT = (1u << 2),
+	GIT_FS_PATH_DIR_IGNORE_CASE = (1u << 0),
+	GIT_FS_PATH_DIR_PRECOMPOSE_UNICODE = (1u << 1),
+	GIT_FS_PATH_DIR_INCLUDE_DOT_AND_DOTDOT = (1u << 2),
 };
 
 /**
@@ -319,7 +341,7 @@ enum {
  *
  * @param pathbuf Buffer the function reads the initial directory
  * 		path from, and updates with each successive entry's name.
- * @param flags Combination of GIT_PATH_DIR flags.
+ * @param flags Combination of GIT_FS_PATH_DIR flags.
  * @param callback Callback for each entry. Passed the `payload` and each
  *		successive path inside the directory as a full path.  This may
  *		safely append text to the pathbuf if needed.  Return non-zero to
@@ -327,16 +349,16 @@ enum {
  * @param payload Passed to callback as first argument.
  * @return 0 on success or error code from OS error or from callback
  */
-extern int git_path_direach(
-	git_buf *pathbuf,
+extern int git_fs_path_direach(
+	git_str *pathbuf,
 	uint32_t flags,
-	int (*callback)(void *payload, git_buf *path),
+	int (*callback)(void *payload, git_str *path),
 	void *payload);
 
 /**
  * Sort function to order two paths
  */
-extern int git_path_cmp(
+extern int git_fs_path_cmp(
 	const char *name1, size_t len1, int isdir1,
 	const char *name2, size_t len2, int isdir2,
 	int (*compare)(const char *, const char *, size_t));
@@ -359,21 +381,25 @@ extern int git_path_cmp(
  *		be modified in any way. Return non-zero to stop iteration.
  * @param payload Passed to fn as the first ath.
  */
-extern int git_path_walk_up(
-	git_buf *pathbuf,
+extern int git_fs_path_walk_up(
+	git_str *pathbuf,
 	const char *ceiling,
 	int (*callback)(void *payload, const char *path),
 	void *payload);
 
 
-enum { GIT_PATH_NOTEQUAL = 0, GIT_PATH_EQUAL = 1, GIT_PATH_PREFIX = 2 };
+enum {
+	GIT_FS_PATH_NOTEQUAL = 0,
+	GIT_FS_PATH_EQUAL = 1,
+	GIT_FS_PATH_PREFIX = 2
+};
 
 /*
  * Determines if a path is equal to or potentially a child of another.
  * @param parent The possible parent
  * @param child The possible child
  */
-GIT_INLINE(int) git_path_equal_or_prefixed(
+GIT_INLINE(int) git_fs_path_equal_or_prefixed(
 	const char *parent,
 	const char *child,
 	ssize_t *prefixlen)
@@ -385,35 +411,35 @@ GIT_INLINE(int) git_path_equal_or_prefixed(
 		lastslash = (*p == '/');
 
 		if (*p++ != *c++)
-			return GIT_PATH_NOTEQUAL;
+			return GIT_FS_PATH_NOTEQUAL;
 	}
 
 	if (*p != '\0')
-		return GIT_PATH_NOTEQUAL;
+		return GIT_FS_PATH_NOTEQUAL;
 
 	if (*c == '\0') {
 		if (prefixlen)
 			*prefixlen = p - parent;
 
-		return GIT_PATH_EQUAL;
+		return GIT_FS_PATH_EQUAL;
 	}
 
 	if (*c == '/' || lastslash) {
 		if (prefixlen)
 			*prefixlen = (p - parent) - lastslash;
 
-		return GIT_PATH_PREFIX;
+		return GIT_FS_PATH_PREFIX;
 	}
 
-	return GIT_PATH_NOTEQUAL;
+	return GIT_FS_PATH_NOTEQUAL;
 }
 
 /* translate errno to libgit2 error code and set error message */
-extern int git_path_set_error(
+extern int git_fs_path_set_error(
 	int errno_value, const char *path, const char *action);
 
 /* check if non-ascii characters are present in filename */
-extern bool git_path_has_non_ascii(const char *path, size_t pathlen);
+extern bool git_fs_path_has_non_ascii(const char *path, size_t pathlen);
 
 #define GIT_PATH_REPO_ENCODING "UTF-8"
 
@@ -429,39 +455,39 @@ extern bool git_path_has_non_ascii(const char *path, size_t pathlen);
 
 typedef struct {
 	iconv_t map;
-	git_buf buf;
-} git_path_iconv_t;
+	git_str buf;
+} git_fs_path_iconv_t;
 
-#define GIT_PATH_ICONV_INIT { (iconv_t)-1, GIT_BUF_INIT }
+#define GIT_PATH_ICONV_INIT { (iconv_t)-1, GIT_STR_INIT }
 
 /* Init iconv data for converting decomposed UTF-8 to precomposed */
-extern int git_path_iconv_init_precompose(git_path_iconv_t *ic);
+extern int git_fs_path_iconv_init_precompose(git_fs_path_iconv_t *ic);
 
 /* Clear allocated iconv data */
-extern void git_path_iconv_clear(git_path_iconv_t *ic);
+extern void git_fs_path_iconv_clear(git_fs_path_iconv_t *ic);
 
 /*
  * Rewrite `in` buffer using iconv map if necessary, replacing `in`
  * pointer internal iconv buffer if rewrite happened.  The `in` pointer
  * will be left unchanged if no rewrite was needed.
  */
-extern int git_path_iconv(git_path_iconv_t *ic, const char **in, size_t *inlen);
+extern int git_fs_path_iconv(git_fs_path_iconv_t *ic, const char **in, size_t *inlen);
 
 #endif /* GIT_USE_ICONV */
 
-extern bool git_path_does_fs_decompose_unicode(const char *root);
+extern bool git_fs_path_does_decompose_unicode(const char *root);
 
 
-typedef struct git_path_diriter git_path_diriter;
+typedef struct git_fs_path_diriter git_fs_path_diriter;
 
 #if defined(GIT_WIN32) && !defined(__MINGW32__)
 
-struct git_path_diriter
+struct git_fs_path_diriter
 {
 	git_win32_path path;
 	size_t parent_len;
 
-	git_buf path_utf8;
+	git_str path_utf8;
 	size_t parent_utf8_len;
 
 	HANDLE handle;
@@ -472,13 +498,13 @@ struct git_path_diriter
 	unsigned int needs_next;
 };
 
-#define GIT_PATH_DIRITER_INIT { {0}, 0, GIT_BUF_INIT, 0, INVALID_HANDLE_VALUE }
+#define GIT_FS_PATH_DIRITER_INIT { {0}, 0, GIT_STR_INIT, 0, INVALID_HANDLE_VALUE }
 
 #else
 
-struct git_path_diriter
+struct git_fs_path_diriter
 {
-	git_buf path;
+	git_str path;
 	size_t parent_len;
 
 	unsigned int flags;
@@ -486,11 +512,11 @@ struct git_path_diriter
 	DIR *dir;
 
 #ifdef GIT_USE_ICONV
-	git_path_iconv_t ic;
+	git_fs_path_iconv_t ic;
 #endif
 };
 
-#define GIT_PATH_DIRITER_INIT { GIT_BUF_INIT }
+#define GIT_FS_PATH_DIRITER_INIT { GIT_STR_INIT }
 
 #endif
 
@@ -502,8 +528,8 @@ struct git_path_diriter
  * @param flags Directory reader flags
  * @return 0 or an error code
  */
-extern int git_path_diriter_init(
-	git_path_diriter *diriter,
+extern int git_fs_path_diriter_init(
+	git_fs_path_diriter *diriter,
 	const char *path,
 	unsigned int flags);
 
@@ -514,7 +540,7 @@ extern int git_path_diriter_init(
  * @param diriter The directory iterator
  * @return 0, GIT_ITEROVER, or an error code
  */
-extern int git_path_diriter_next(git_path_diriter *diriter);
+extern int git_fs_path_diriter_next(git_fs_path_diriter *diriter);
 
 /**
  * Returns the file name of the current item in the iterator.
@@ -524,10 +550,10 @@ extern int git_path_diriter_next(git_path_diriter *diriter);
  * @param diriter The directory iterator
  * @return 0 or an error code
  */
-extern int git_path_diriter_filename(
+extern int git_fs_path_diriter_filename(
 	const char **out,
 	size_t *out_len,
-	git_path_diriter *diriter);
+	git_fs_path_diriter *diriter);
 
 /**
  * Returns the full path of the current item in the iterator; that
@@ -539,10 +565,10 @@ extern int git_path_diriter_filename(
  * @param diriter The directory iterator
  * @return 0 or an error code
  */
-extern int git_path_diriter_fullpath(
+extern int git_fs_path_diriter_fullpath(
 	const char **out,
 	size_t *out_len,
-	git_path_diriter *diriter);
+	git_fs_path_diriter *diriter);
 
 /**
  * Performs an `lstat` on the current item in the iterator.
@@ -551,19 +577,19 @@ extern int git_path_diriter_fullpath(
  * @param diriter The directory iterator
  * @return 0 or an error code
  */
-extern int git_path_diriter_stat(struct stat *out, git_path_diriter *diriter);
+extern int git_fs_path_diriter_stat(struct stat *out, git_fs_path_diriter *diriter);
 
 /**
  * Closes the directory iterator.
  *
  * @param diriter The directory iterator
  */
-extern void git_path_diriter_free(git_path_diriter *diriter);
+extern void git_fs_path_diriter_free(git_fs_path_diriter *diriter);
 
 /**
  * Load all directory entries (except '.' and '..') into a vector.
  *
- * For cases where `git_path_direach()` is not appropriate, this
+ * For cases where `git_fs_path_direach()` is not appropriate, this
  * allows you to load the filenames in a directory into a vector
  * of strings. That vector can then be sorted, iterated, or whatever.
  * Remember to free alloc of the allocated strings when you are done.
@@ -573,9 +599,9 @@ extern void git_path_diriter_free(git_path_diriter *diriter);
  * @param prefix_len When inserting entries, the trailing part of path
  * 		will be prefixed after this length.  I.e. given path "/a/b" and
  * 		prefix_len 3, the entries will look like "b/e1", "b/e2", etc.
- * @param flags Combination of GIT_PATH_DIR flags.
+ * @param flags Combination of GIT_FS_PATH_DIR flags.
  */
-extern int git_path_dirload(
+extern int git_fs_path_dirload(
 	git_vector *contents,
 	const char *path,
 	size_t prefix_len,
@@ -583,77 +609,105 @@ extern int git_path_dirload(
 
 
 /* Used for paths to repositories on the filesystem */
-extern bool git_path_is_local_file_url(const char *file_url);
-extern int git_path_from_url_or_path(git_buf *local_path_out, const char *url_or_path);
-
-/* Flags to determine path validity in `git_path_isvalid` */
-#define GIT_PATH_REJECT_TRAVERSAL          (1 << 0)
-#define GIT_PATH_REJECT_DOT_GIT            (1 << 1)
-#define GIT_PATH_REJECT_SLASH              (1 << 2)
-#define GIT_PATH_REJECT_BACKSLASH          (1 << 3)
-#define GIT_PATH_REJECT_TRAILING_DOT       (1 << 4)
-#define GIT_PATH_REJECT_TRAILING_SPACE     (1 << 5)
-#define GIT_PATH_REJECT_TRAILING_COLON     (1 << 6)
-#define GIT_PATH_REJECT_DOS_PATHS          (1 << 7)
-#define GIT_PATH_REJECT_NT_CHARS           (1 << 8)
-#define GIT_PATH_REJECT_DOT_GIT_LITERAL    (1 << 9)
-#define GIT_PATH_REJECT_DOT_GIT_HFS        (1 << 10)
-#define GIT_PATH_REJECT_DOT_GIT_NTFS       (1 << 11)
+extern bool git_fs_path_is_local_file_url(const char *file_url);
+extern int git_fs_path_from_url_or_path(git_str *local_path_out, const char *url_or_path);
+
+/* Flags to determine path validity in `git_fs_path_isvalid` */
+#define GIT_FS_PATH_REJECT_EMPTY_COMPONENT    (1 << 0)
+#define GIT_FS_PATH_REJECT_TRAVERSAL          (1 << 1)
+#define GIT_FS_PATH_REJECT_SLASH              (1 << 2)
+#define GIT_FS_PATH_REJECT_BACKSLASH          (1 << 3)
+#define GIT_FS_PATH_REJECT_TRAILING_DOT       (1 << 4)
+#define GIT_FS_PATH_REJECT_TRAILING_SPACE     (1 << 5)
+#define GIT_FS_PATH_REJECT_TRAILING_COLON     (1 << 6)
+#define GIT_FS_PATH_REJECT_DOS_PATHS          (1 << 7)
+#define GIT_FS_PATH_REJECT_NT_CHARS           (1 << 8)
+#define GIT_FS_PATH_REJECT_LONG_PATHS         (1 << 9)
+
+#define GIT_FS_PATH_REJECT_MAX                (1 << 9)
 
 /* Default path safety for writing files to disk: since we use the
  * Win32 "File Namespace" APIs ("\\?\") we need to protect from
  * paths that the normal Win32 APIs would not write.
  */
 #ifdef GIT_WIN32
-# define GIT_PATH_REJECT_FILESYSTEM_DEFAULTS \
-	GIT_PATH_REJECT_TRAVERSAL | \
-	GIT_PATH_REJECT_BACKSLASH | \
-	GIT_PATH_REJECT_TRAILING_DOT | \
-	GIT_PATH_REJECT_TRAILING_SPACE | \
-	GIT_PATH_REJECT_TRAILING_COLON | \
-	GIT_PATH_REJECT_DOS_PATHS | \
-	GIT_PATH_REJECT_NT_CHARS
+# define GIT_FS_PATH_REJECT_FILESYSTEM_DEFAULTS \
+	GIT_FS_PATH_REJECT_EMPTY_COMPONENT | \
+	GIT_FS_PATH_REJECT_TRAVERSAL | \
+	GIT_FS_PATH_REJECT_BACKSLASH | \
+	GIT_FS_PATH_REJECT_TRAILING_DOT | \
+	GIT_FS_PATH_REJECT_TRAILING_SPACE | \
+	GIT_FS_PATH_REJECT_TRAILING_COLON | \
+	GIT_FS_PATH_REJECT_DOS_PATHS | \
+	GIT_FS_PATH_REJECT_NT_CHARS
 #else
-# define GIT_PATH_REJECT_FILESYSTEM_DEFAULTS \
-	GIT_PATH_REJECT_TRAVERSAL
+# define GIT_FS_PATH_REJECT_FILESYSTEM_DEFAULTS \
+	GIT_FS_PATH_REJECT_EMPTY_COMPONENT | \
+	GIT_FS_PATH_REJECT_TRAVERSAL
 #endif
 
- /* Paths that should never be written into the working directory. */
-#define GIT_PATH_REJECT_WORKDIR_DEFAULTS \
-	GIT_PATH_REJECT_FILESYSTEM_DEFAULTS | GIT_PATH_REJECT_DOT_GIT
+/**
+ * Validate a filesystem path; with custom callbacks per-character and
+ * per-path component.
+ */
+extern bool git_fs_path_str_is_valid_ext(
+	const git_str *path,
+	unsigned int flags,
+	bool (*validate_char_cb)(char ch, void *payload),
+	bool (*validate_component_cb)(const char *component, size_t len, void *payload),
+	bool (*validate_length_cb)(const char *component, size_t len, size_t utf8_char_len),
+	void *payload);
 
-/* Paths that should never be written to the index. */
-#define GIT_PATH_REJECT_INDEX_DEFAULTS \
-	GIT_PATH_REJECT_TRAVERSAL | GIT_PATH_REJECT_DOT_GIT
+GIT_INLINE(bool) git_fs_path_is_valid_ext(
+	const char *path,
+	unsigned int flags,
+	bool (*validate_char_cb)(char ch, void *payload),
+	bool (*validate_component_cb)(const char *component, size_t len, void *payload),
+	bool (*validate_length_cb)(const char *component, size_t len, size_t utf8_char_len),
+	void *payload)
+{
+	const git_str str = GIT_STR_INIT_CONST(path, SIZE_MAX);
+	return git_fs_path_str_is_valid_ext(
+		&str,
+		flags,
+		validate_char_cb,
+		validate_component_cb,
+		validate_length_cb,
+		payload);
+}
 
 /**
- * Validate a "bare" git path.  This ensures that the given path is legal
- * to place in the index or a tree.  This should be checked by mechanisms
- * like `git_index_add` and `git_treebuilder_insert` when taking user
- * data, and by `git_checkout` before constructing on-disk paths.
- *
- * This will ensure that a git path does not contain any "unsafe" components,
- * a '.' or '..' component, or a component that is ".git" (in any case).
- *
- * (Note: if you take or construct an on-disk path -- a workdir path,
- * a path to a git repository or a reference name that could be a loose
- * ref -- you should _also_ validate that with `git_path_validate_workdir`.)
- *
- * `repo` is optional.  If specified, it will be used to determine the short
- * path name to reject (if `GIT_PATH_REJECT_DOS_SHORTNAME` is specified),
- * in addition to the default of "git~1".
+ * Validate a filesystem path.  This ensures that the given path is legal
+ * and does not contain any "unsafe" components like path traversal ('.'
+ * or '..'), characters that are inappropriate for lesser filesystems
+ * (trailing ' ' or ':' characters), or filenames ("component names")
+ * that are not supported ('AUX', 'COM1").
  */
-extern bool git_path_validate(
-	git_repository *repo,
+GIT_INLINE(bool) git_fs_path_is_valid(
 	const char *path,
-	uint16_t mode,
-	unsigned int flags);
+	unsigned int flags)
+{
+	const git_str str = GIT_STR_INIT_CONST(path, SIZE_MAX);
+	return git_fs_path_str_is_valid_ext(&str, flags, NULL, NULL, NULL, NULL);
+}
+
+/** Validate a filesystem path in a `git_str`. */
+GIT_INLINE(bool) git_fs_path_str_is_valid(
+	const git_str *path,
+	unsigned int flags)
+{
+	return git_fs_path_str_is_valid_ext(path, flags, NULL, NULL, NULL, NULL);
+}
+
+extern int git_fs_path_validate_str_length_with_suffix(
+	git_str *path,
+	size_t suffix_len);
 
 /**
  * Validate an on-disk path, taking into account that it will have a
  * suffix appended (eg, `.lock`).
  */
-GIT_INLINE(int) git_path_validate_filesystem_with_suffix(
+GIT_INLINE(int) git_fs_path_validate_filesystem_with_suffix(
 	const char *path,
 	size_t path_len,
 	size_t suffix_len)
@@ -684,54 +738,76 @@ GIT_INLINE(int) git_path_validate_filesystem_with_suffix(
  * Windows.
  *
  * For paths within the working directory, you should use ensure that
- * `core.longpaths` is obeyed.  Use `git_path_validate_workdir`.
+ * `core.longpaths` is obeyed.  Use `git_fs_path_validate_workdir`.
  */
-GIT_INLINE(int) git_path_validate_filesystem(
+GIT_INLINE(int) git_fs_path_validate_filesystem(
 	const char *path,
 	size_t path_len)
 {
-	return git_path_validate_filesystem_with_suffix(path, path_len, 0);
+	return git_fs_path_validate_filesystem_with_suffix(path, path_len, 0);
 }
 
 /**
- * Validate a path relative to the repo's worktree.  This ensures that
- * the given working tree path is valid for the operating system/platform.
- * This will ensure that an absolute path is smaller than MAX_PATH on
- * Windows, while keeping `core.longpaths` configuration settings in mind.
- *
- * This should be checked by mechamisms like `git_checkout` after
- * contructing on-disk paths and before trying to write them.
- *
- * If the repository is null, no repository configuration is applied.
+ * Convert any backslashes into slashes
  */
-extern int git_path_validate_workdir(
-	git_repository *repo,
-	const char *path);
-extern int git_path_validate_workdir_with_len(
-	git_repository *repo,
-	const char *path,
-	size_t path_len);
-extern int git_path_validate_workdir_buf(
-	git_repository *repo,
-	git_buf *buf);
+int git_fs_path_normalize_slashes(git_str *out, const char *path);
+
+bool git_fs_path_supports_symlinks(const char *dir);
+
+typedef enum {
+	GIT_FS_PATH_OWNER_NONE = 0,
+
+	/** The file must be owned by the current user. */
+	GIT_FS_PATH_OWNER_CURRENT_USER = (1 << 0),
+
+	/** The file must be owned by the system account. */
+	GIT_FS_PATH_OWNER_ADMINISTRATOR = (1 << 1),
+
+	/**
+	 * The file may be owned by a system account if the current
+	 * user is in an administrator group. Windows only; this is
+	 * a noop on non-Windows systems.
+	 */
+	GIT_FS_PATH_USER_IS_ADMINISTRATOR = (1 << 2),
+
+	/**
+	 * The file is owned by the current user, who is running `sudo`.
+	 */
+	GIT_FS_PATH_OWNER_RUNNING_SUDO = (1 << 3),
+
+	/** The file may be owned by another user. */
+	GIT_FS_PATH_OWNER_OTHER = (1 << 4)
+} git_fs_path_owner_t;
 
 /**
- * Convert any backslashes into slashes
+ * Sets the mock ownership for files; subsequent calls to
+ * `git_fs_path_owner_is_*` functions will return this data until
+ * cleared with `GIT_FS_PATH_OWNER_NONE`.
  */
-int git_path_normalize_slashes(git_buf *out, const char *path);
+void git_fs_path__set_owner(git_fs_path_owner_t owner);
 
-bool git_path_supports_symlinks(const char *dir);
+/** Verify that the file in question is owned by the given owner. */
+int git_fs_path_owner_is(
+	bool *out,
+	const char *path,
+	git_fs_path_owner_t owner_type);
 
 /**
- * Validate a system file's ownership
- *
  * Verify that the file in question is owned by an administrator or system
- * account, or at least by the current user.
- *
- * This function returns 0 if successful. If the file is not owned by any of
- * these, or any other if there have been problems determining the file
- * ownership, it returns -1.
+ * account.
+ */
+int git_fs_path_owner_is_system(bool *out, const char *path);
+
+/**
+ * Verify that the file in question is owned by the current user;
+ */
+
+int git_fs_path_owner_is_current_user(bool *out, const char *path);
+
+/**
+ * Search the current PATH for the given executable, returning the full
+ * path if it is found.
  */
-int git_path_validate_system_file_ownership(const char *path);
+int git_fs_path_find_executable(git_str *fullpath, const char *executable);
 
 #endif