@mrclrchtr/supi-code-intelligence 6.1.0 → 6.3.0

package/node_modules/@mrclrchtr/supi-lsp/node_modules/ignore/index.js

@@ -9,7 +9,14 @@ const UNDEFINED = undefined
 const EMPTY = ''
 const SPACE = ' '
 const ESCAPE = '\\'
-const REGEX_TEST_BLANK_LINE = /^\s+$/
+
+// The characters that carry a meaning of their own inside a regular
+//   expression, so a literal one has to be escaped before it is emitted.
+const REGEX_LITERAL_SPECIAL = /[.*+?()[\]{}^$|\\/]/
+// A line of only spaces is blank -- the trailing-space trimming empties it --
+//   but a line holding a tab is a pattern for a tab-named path, since git
+//   never trims a tab.
+const REGEX_TEST_BLANK_LINE = /^ +$/
 const REGEX_INVALID_TRAILING_BACKSLASH = /(?:[^\\]|^)\\$/
 const REGEX_REPLACE_LEADING_EXCAPED_EXCLAMATION = /^\\!/
 const REGEX_REPLACE_LEADING_EXCAPED_HASH = /^\\#/
@@ -23,9 +30,10 @@ const REGEX_SPLITALL_CRLF = /\r?\n/g
 // - ..
 // Valid:
 // - .foo
-const REGEX_TEST_INVALID_PATH = /^\.{0,2}\/|^\.{1,2}$/
+const DOUBLE_SLASH = '//'
+const SLASH_CODE = 47
+const DOT_CODE = 46
 
-const REGEX_TEST_TRAILING_SLASH = /\/$/
 
 const SLASH = '/'
 
@@ -42,36 +50,302 @@ const define = (object, key, value) => {
   return value
 }
 
-const REGEX_REGEXP_RANGE = /([0-z])-([0-z])/g
-
 const RETURN_FALSE = () => false
 
-// Sanitize the range of a regular expression
-// The cases are complicated, see test cases for details
-const sanitizeRange = range => range.replace(
-  REGEX_REGEXP_RANGE,
-  (match, from, to) => from.charCodeAt(0) <= to.charCodeAt(0)
-    ? match
-    // Invalid range (out of order) which is ok for gitignore rules but
-    //   fatal for JavaScript regular expression, so eliminate it.
-    : EMPTY
-)
-
-// > An optional `!` or `^` at the start of a class negates it, so that it
-// >   matches any character not in the set. (gitignore(5), fnmatch(3))
-// The leading `^` has already been escaped to `\^` by the metacharacter
-//   escaper, so we strip the literal `!` or escaped `^` and emit a single
-//   regex `^` which is the JavaScript negation token.
-const negateRange = range => range.startsWith('!') || range.startsWith('\\^')
-  ? `^${range.slice(range[0] === '!' ? 1 : 2)}`
-  : range
-
 // See fixtures #59
 const cleanRangeBackSlash = slashes => {
   const {length} = slashes
   return slashes.slice(0, length - length % 2)
 }
 
+// > The range notation, e.g. [a-zA-Z],
+// > can be used to match one of the characters in a range.
+//
+// gitignore(5) defers to fnmatch(3) for this, and git implements it in
+//   `wildmatch.c`.  A bracket expression has a sub-grammar of its own, which
+//   is neither the surrounding pattern grammar nor the JavaScript one:
+//
+//   - a `]` right after `[` or `[!` is a literal member, not the terminator
+//   - `[:alpha:]` names one of twelve POSIX classes
+//   - `\` escapes the next member, `]` included
+//   - `*`, `?` and `.` are plain literal members
+//   - an unterminated expression makes the whole pattern match nothing
+//
+// which means the expression can not be located -- let alone translated -- by
+//   a regular expression.  It is scanned out of the pattern before the
+//   replacers below run, and put back once they are done, so that neither the
+//   metacharacter escaper nor the `?` / `*` replacers ever see its body.
+
+// git classifies with its own ASCII-only ctype macros (`wildmatch.c`), never
+//   with the C library ones, so these must not be mapped onto `\d` / `\w` /
+//   `\s`, which are wider.  `/` is left out of every expansion, because a
+//   bracket expression never matches a path separator.
+const POSIX_CLASSES = {
+  alnum: '0-9A-Za-z',
+  alpha: 'A-Za-z',
+  blank: ' \\t',
+  cntrl: '\\x00-\\x1f\\x7f',
+  digit: '0-9',
+  graph: '!-.0-~',
+  lower: 'a-z',
+  print: ' -.0-~',
+  punct: '!-.:-@\\[-`{-~',
+  // git's `sane-ctype.h` classifies \v and \f as control, not space,
+  //   unlike C's `isspace`
+  space: ' \\t\\n\\r',
+  upper: 'A-Z',
+  xdigit: '0-9A-Fa-f'
+}
+
+const CLASS_MEMBERS_TO_ESCAPE = '\\]^-['
+
+const escapeMember = char => CLASS_MEMBERS_TO_ESCAPE.indexOf(char) < 0
+  ? char
+  : ESCAPE + char
+
+// > if (matched == negated || ((flags & WM_PATHNAME) && text_ch == '/'))
+// >   return WM_ABORT_TO_STARSTAR;                     (git, `wildmatch.c`)
+// A bracket expression never matches a path separator, whatever its members
+//   say, so a negated class gets `/` as one more excluded character, while a
+//   plain one -- where a literal member or a range could still let `/` in --
+//   is guarded with a lookahead, `/` being impossible to subtract from a
+//   JavaScript character class.
+const NON_SLASH = '(?!\\/)'
+
+const classSource = (negated, body) => {
+  if (negated) {
+    return `[^\\/${body}]`
+  }
+
+  const source = `[${body}]`
+
+  return new RegExp(source).test('/')
+    ? NON_SLASH + source
+    : source
+}
+
+// Scan the bracket expression that starts at `pattern[start] === '['`,
+//   mirroring the member loop of git's `wildmatch.c`.
+// @returns {{end: number, source: string} | null} `null` if the expression is
+//   never terminated, which makes the whole pattern match nothing.
+const scanBracket = (pattern, start) => {
+  const {length} = pattern
+  let index = start + 1
+  let negated = EMPTY
+
+  const lead = pattern[index]
+  if (lead === '!' || lead === '^') {
+    negated = '^'
+    index ++
+  }
+
+  let body = EMPTY
+
+  // The member a `-` could start a range from, or EMPTY when the previous
+  //   member can not open one (start of the body, or a range / POSIX class
+  //   that has just closed)
+  let prev = EMPTY
+
+  // git scans the members with a do-while, so the first one is consumed
+  //   unconditionally.  That is the whole reason a leading `]` is a member
+  //   and not the terminator.
+  for (;;) {
+    const char = pattern[index]
+
+    if (char === UNDEFINED) {
+      return null
+    }
+
+    if (char === ESCAPE) {
+      const escaped = pattern[index + 1]
+      if (escaped === UNDEFINED) {
+        return null
+      }
+      body += escapeMember(escaped)
+      prev = escaped
+      index ++
+    } else if (
+      char === '-'
+      && prev
+      && index + 1 < length
+      && pattern[index + 1] !== ']'
+    ) {
+      index ++
+      let to = pattern[index]
+      if (to === ESCAPE) {
+        // A pattern can not end on a lone backslash -- `checkPattern` has
+        //   already thrown it away -- so there is an upper bound to read.
+        to = pattern[index += 1]
+      }
+      // An out-of-order range matches nothing in git but is a syntax error in
+      //   JavaScript, so it is dropped.  Its lower bound stays: git tests it
+      //   as a plain member before it ever looks at the `-`, so `[c-a]` does
+      //   match `c`.
+      if (prev <= to) {
+        body += `-${escapeMember(to)}`
+      }
+      prev = EMPTY
+    } else if (char === '[' && pattern[index + 1] === ':') {
+      const nameStart = index + 2
+      let end = nameStart
+      while (end < length && pattern[end] !== ']') {
+        end ++
+      }
+
+      if (end === length) {
+        return null
+      }
+
+      if (end > nameStart && pattern[end - 1] === ':') {
+        const expanded = POSIX_CLASSES[pattern.slice(nameStart, end - 1)]
+
+        // An unknown class name makes the whole pattern match nothing
+        if (expanded === UNDEFINED) {
+          return null
+        }
+
+        body += expanded
+        prev = EMPTY
+        index = end
+      } else {
+        // No `:]` to close it, so the `[` is a plain member and scanning
+        //   resumes right after it.
+        body += escapeMember('[')
+        prev = '['
+        index = nameStart - 2
+      }
+    } else {
+      body += escapeMember(char)
+      prev = char
+    }
+
+    index ++
+
+    if (pattern[index] === ']') {
+      return {
+        end: index,
+        source: classSource(negated, body)
+      }
+    }
+  }
+}
+
+// An empty JavaScript class can never match, which is how a pattern that git
+//   gives up on (`WM_ABORT_ALL`) is expressed here.
+const NEVER_MATCH = '[]'
+
+// A NUL can appear in neither a `.gitignore` line nor a path, which makes it
+//   the one safe placeholder character.  A literal one in the pattern is
+//   held aside all the same, so a collision is impossible by construction.
+const PLACEHOLDER = '\u0000'
+const REGEX_RESTORE_PLACEHOLDER = new RegExp(
+  `${PLACEHOLDER}(\\d+)${PLACEHOLDER}`, 'g'
+)
+
+// The one wildcard the chain does not expand for itself is a trailing `*`. How
+//   it expands depends on the mode (`regex` vs `checkRegex`), so `_make` is
+//   left to do it, and until then the pending wildcard travels as this marker.
+//   That is what keeps it apart from a user-escaped literal `\*`: the unescape
+//   steps collapse the escaped one to the exact `\*` a wildcard would leave
+//   behind, so by the time `_make` runs the two are otherwise the same string
+//   and a literal star gets wrongly rewritten into a wildcard. This marker is a
+//   private-use character no compiled pattern carries, and it never survives
+//   into a `RegExp` -- `_make` always turns it back into a real wildcard first.
+const TRAILING_WILDCARD = '\uE000'
+
+// Replace every bracket expression with a placeholder the replacers below
+//   leave alone, and translate it separately.
+const extractBrackets = pattern => {
+  const sources = []
+  const hold = source =>
+    `${PLACEHOLDER}${sources.push(source) - 1}${PLACEHOLDER}`
+
+  const {length} = pattern
+  let out = EMPTY
+  let index = 0
+
+  while (index < length) {
+    const char = pattern[index]
+
+    if (char === ESCAPE) {
+      // > Put a backslash ("\") in front of ... a character to make it literal.
+      //                                            (gitignore(5) -> fnmatch(3))
+      // A backslash quotes the next character, whatever it is, so `\d` is a
+      //   literal `d`, not the regex digit class, and `\?` is a literal `?`,
+      //   not a wildcard. Held aside as its literal here, the escape never
+      //   reaches the replacers below, which would otherwise let `\d`, `\b`,
+      //   `\1`, `\/` keep their regular-expression meaning, and would turn a
+      //   `\?` into `[^\/]`.
+      //
+      // Four escapes are left for the chain, each with dedicated handling it
+      //   would be wrong to bypass: `\*` (a literal star, told apart from a
+      //   wildcard by `TRAILING_WILDCARD` and the wildcard replacers), `\[`
+      //   (a literal bracket, the one `[` the bracket replacer still expects),
+      //   `\ ` (a quoted trailing space), and `\\` (a literal backslash). A
+      //   lone trailing backslash never reaches here -- `checkPattern` throws
+      //   it out first.
+      const escaped = pattern[index + 1]
+
+      if (
+        escaped === '*'
+        || escaped === '['
+        || escaped === SPACE
+        || escaped === ESCAPE
+      ) {
+        out += pattern.slice(index, index + 2)
+      } else {
+        out += hold(
+          REGEX_LITERAL_SPECIAL.test(escaped)
+            ? ESCAPE + escaped
+            : escaped
+        )
+      }
+
+      index += 2
+    } else if (char === PLACEHOLDER) {
+      // Hold a literal placeholder character aside as well, so that pattern
+      //   text can never be mistaken for a placeholder we emitted.
+      out += hold(`[${PLACEHOLDER}]`)
+      index ++
+    } else if (char === '[') {
+      const scanned = scanBracket(pattern, index)
+
+      if (scanned === null) {
+        // git gives up on the whole pattern (`WM_ABORT_ALL`), so whatever
+        //   follows can not make it match either.
+        out += hold(NEVER_MATCH)
+        index = length
+      } else {
+        out += hold(scanned.source)
+        index = scanned.end + 1
+      }
+    } else {
+      out += char
+      index ++
+    }
+  }
+
+  return {
+    source: out,
+    sources
+  }
+}
+
+// A step of the chain below is normally a `[matcher, replacer]` pair handed
+//   to `String.replace`. `DIRECT` marks the ones that are plain string work
+//   instead, and take `(source, pattern)`.
+//
+// Anchoring the two ends is exactly that -- a test of one character and a
+//   concatenation -- and putting it through the regular expression engine
+//   cost a third of this chain for nothing: 167ns where 10ns does the same
+//   job. The two are still steps in the same list, in the same places,
+//   because their position in the order is part of what they mean.
+const DIRECT = null
+
+// A separator at the beginning or in the middle of a pattern, as opposed to
+//   one at the very end.
+const REGEX_INNER_SLASH = /\/(?!$)/
+
 // > If the pattern ends with a slash,
 // > it is removed for the purpose of the following description,
 // > but it would only find a match with a directory.
@@ -83,6 +357,21 @@ const cleanRangeBackSlash = slashes => {
 //      you could use option `mark: true` with `glob`
 
 // '`foo/`' should not continue with the '`..`'
+// The chain that turns one gitignore pattern into a regular expression
+//   source, in order. A step is either
+//
+//   [matcher, replacer]            handed to `String.replace`
+//   [matcher, replacer, required]  the same, but skipped outright unless
+//                                    `required` appears in the string, which
+//                                    the matcher cannot match without
+//   [DIRECT, transform]            plain string work, taking (source, pattern)
+//
+// The `required` character is only ever a shortcut: finding it does not mean
+//   the matcher will match, and not finding it means it cannot. It is there
+//   because scanning for one character costs a fraction of running a matcher
+//   that then finds nothing -- for the wildcard step, whose `[^\\]+`
+//   backtracks its way through the whole string before giving up, 11ns
+//   against 400ns.
 const REPLACERS = [
 
   [
@@ -90,16 +379,30 @@ const REPLACERS = [
     // TODO:
     // Other similar zero-width characters?
     /^\uFEFF/,
+    () => EMPTY,
+    '\uFEFF'
+  ],
+
+  [
+    // A trailing line terminator, left on when a whole file's contents are
+    //   added as one pattern rather than split into lines. git never sees one
+    //   -- it reads a `.gitignore` line by line -- so it is not part of the
+    //   pattern and is dropped here, apart from the trailing-space trimming,
+    //   which follows git in touching spaces and nothing else.
+    /[\r\n]+$/,
     () => EMPTY
   ],
 
   // > Trailing spaces are ignored unless they are quoted with backslash ("\")
   [
+    // Only spaces, never tabs or other whitespace: git trims a trailing run
+    //   of `' '` and nothing else (dir.c, `trim_trailing_spaces`, a single
+    //   `case ' '`), so a pattern ending in a tab keeps it as a literal.
     // (a\ ) -> (a )
     // (a  ) -> (a)
     // (a ) -> (a)
     // (a \ ) -> (a  )
-    /((?:\\\\)*?)(\\?\s+)$/,
+    /((?:\\\\)*?)(\\? +)$/,
     (_, m1, m2) => m1 + (
       m2.indexOf('\\') === 0
         ? SPACE
@@ -108,11 +411,14 @@ const REPLACERS = [
   ],
 
   // Replace (\ ) with ' '
+  // Only a space: an escaped tab or other whitespace is already a literal by
+  //   the time it reaches here, and a bare tab must be left as one, not turned
+  //   into a space.
   // (\ ) -> ' '
   // (\\ ) -> '\\ '
   // (\\\ ) -> '\\ '
   [
-    /(\\+?)\s/g,
+    /(\\+?) /g,
     (_, m1) => {
       const {length} = m1
       return m1.slice(0, length - length % 2) + SPACE
@@ -144,7 +450,8 @@ const REPLACERS = [
   [
     // > a question mark (?) matches a single character
     /(?!\\)\?/g,
-    () => '[^/]'
+    () => '[^/]',
+    '?'
   ],
 
   // leading slash
@@ -154,13 +461,15 @@ const REPLACERS = [
     // > For example, "/*.c" matches "cat-file.c" but not "mozilla-sha1/sha1.c".
     // A leading slash matches the beginning of the pathname
     /^\//,
-    () => '^'
+    () => '^',
+    SLASH
   ],
 
   // replace special metacharacter slash after the leading slash
   [
     /\//g,
-    () => '\\/'
+    () => '\\/',
+    SLASH
   ],
 
   [
@@ -173,7 +482,8 @@ const REPLACERS = [
     /^\^*(?:\\\*\\\*\\\/)+/,
 
     // '**/foo' <-> 'foo'
-    () => '^(?:.*\\/)?'
+    () => '^(?:.*\\/)?',
+    '*'
   ],
 
   // starting
@@ -181,10 +491,15 @@ const REPLACERS = [
     // there will be no leading '/'
     //   (which has been replaced by section "leading slash")
     // If starts with '**', adding a '^' to the regular expression also works
-    /^(?=[^^])/,
-    function startingReplacer () {
+    DIRECT,
+    (source, pattern) => {
+      // Nothing to anchor to, or already anchored
+      if (!source || source[0] === '^') {
+        return source
+      }
+
       // If has a slash `/` at the beginning or middle
-      return !/\/(?!$)/.test(this)
+      const anchor = !REGEX_INNER_SLASH.test(pattern)
         // > Prior to 2.22.1
         // > If the pattern does not contain a slash /,
         // >   Git treats it as a shell glob pattern
@@ -202,6 +517,8 @@ const REPLACERS = [
         // > Otherwise, Git treats the pattern as a shell glob suitable for
         // >   consumption by fnmatch(3)
         : '^'
+
+      return anchor + source
     }
   ],
 
@@ -216,18 +533,27 @@ const REPLACERS = [
     // Check if it is not the last `'/**'`
     (_, index, str) => index + 6 < str.length
 
-      // case: /**/
-      // > A slash followed by two consecutive asterisks then a slash matches
-      // >   zero or more directories.
-      // > For example, "a/**/b" matches "a/b", "a/x/b", "a/x/y/b" and so on.
-      // '/**/'
-      ? '(?:\\/[^\\/]+)*'
+      // case: /**/ at the end of the pattern, i.e. a trailing `'/**/'`
+      // > A trailing `"/**/"` (a trailing `"/**"` restricted to directories)
+      // >   matches everything inside, but it should not match the current
+      // >   folder itself, so it requires at least one directory segment.
+      // 'a/**/' matches 'a/b/', 'a/x/y/' but not 'a/'
+      ? str.slice(index + 6) === '\\/'
+        ? '(?:\\/[^\\/]+)+'
+
+        // case: /**/
+        // > A slash followed by two consecutive asterisks then a slash matches
+        // >   zero or more directories.
+        // > For example, "a/**/b" matches "a/b", "a/x/b", "a/x/y/b" and so on.
+        // '/**/'
+        : '(?:\\/[^\\/]+)*'
 
       // case: /**
       // > A trailing `"/**"` matches everything inside.
 
       // #21: everything inside but it should not include the current folder
-      : '\\/.+'
+      : '\\/.+',
+    '*'
   ],
 
   // normal intermediate wildcards
@@ -250,7 +576,33 @@ const REPLACERS = [
       // > and will match according to the previous rules.
       const unescaped = p2.replace(/\\\*/g, '[^\\/]*')
       return p1 + unescaped
-    }
+    },
+    '*'
+  ],
+
+  // trailing wildcard, held apart from a literal star
+  [
+    // The step above leaves a trailing `*` alone, so a single `\*` is all that
+    //   can be left at the end here. Whether it is a wildcard or a literal
+    //   turns on the backslashes the user put in front of it: the escaper has
+    //   since doubled every one, so what stands here is those `2N` doubled
+    //   backslashes and then the star's own escape. An even number of the
+    //   original `N` leaves the star unescaped -- a wildcard -- and an odd
+    //   number escapes it -- a literal. This runs while the two are still
+    //   distinct, before the unescape steps below collapse the literal onto
+    //   the very `\*` a wildcard leaves behind.
+    /(^|[^\\])((?:\\\\)*)\\\*$/,
+
+    (match, p1, p2) =>
+      // `p2` holds the doubled user backslashes; half of them is `N`.
+      (p2.length / 2) % 2 === 0
+        // A real wildcard: carry it to `_make` as the marker, so the unescape
+        //   steps and the trailing-wildcard rewrite can never mistake it for a
+        //   literal `\*` (nor the reverse).
+        ? p1 + p2 + TRAILING_WILDCARD
+        // A literal star: leave it exactly as it stands for the unescape steps.
+        : match,
+    '*'
   ],
 
   [
@@ -258,41 +610,36 @@ const REPLACERS = [
     // For example, if a user escape a '\\*',
     // after step 3, the result will be '\\\\\\*'
     /\\\\\\(?=[$.|*+(){^])/g,
-    () => ESCAPE
+    () => ESCAPE,
+    ESCAPE + ESCAPE
   ],
 
   [
     // '\\\\' -> '\\'
     /\\\\/g,
-    () => ESCAPE
+    () => ESCAPE,
+    ESCAPE + ESCAPE
   ],
 
   [
-    // > The range notation, e.g. [a-zA-Z],
-    // > can be used to match one of the characters in a range.
+    // Every real bracket expression -- POSIX classes included -- has already
+    //   been held aside by `extractBrackets`, so the only `[` left in the
+    //   pattern is an escaped, literal one.
 
     // `\` is escaped by step 3
-    /(\\)?\[([^\]/]*?)(\\*)($|\])/g,
-    (match, leadEscape, range, endEscape, close) => leadEscape === ESCAPE
-      // '\\[bar]' -> '\\\\[bar\\]'
-      ? `\\[${range}${cleanRangeBackSlash(endEscape)}${close}`
-      : close === ']'
-        ? endEscape.length % 2 === 0
-          // A normal case, and it is a range notation
-          // '[bar]'
-          // '[bar\\\\]'
-          ? `[${negateRange(sanitizeRange(range))}${endEscape}]`
-          // Invalid range notaton
-          // '[bar\\]' -> '[bar\\\\]'
-          : '[]'
-        : '[]'
+    /\\\[([^\]/]*?)(\\*)($|\])/g,
+
+    // '\\[bar]' -> '\\\\[bar\\]'
+    (match, range, endEscape, close) =>
+      `\\[${range}${cleanRangeBackSlash(endEscape)}${close}`,
+    '['
   ],
 
   // ending
   [
     // 'js' will not match 'js.'
     // 'ab' will not match 'abc'
-    /(?:[^*])$/,
+    DIRECT,
 
     // WTF!
     // https://git-scm.com/docs/gitignore
@@ -306,15 +653,26 @@ const REPLACERS = [
     // 'js*' will not match 'a.js'
     // 'js/' will not match 'a.js'
     // 'js' will match 'a.js' and 'a.js/'
-    match => /\/$/.test(match)
-      // foo/ will not match 'foo'
-      ? `${match}$`
-      // foo matches 'foo' and 'foo/'
-      : `${match}(?=$|\\/$)`
+    source => {
+      const last = source[source.length - 1]
+
+      // The pattern is empty, or ends in the pending trailing wildcard the next
+      //   step owns. A trailing `*` that is not the marker is a literal star,
+      //   which anchors like any other final character.
+      if (!last || last === TRAILING_WILDCARD) {
+        return source
+      }
+
+      return last === SLASH
+        // foo/ will not match 'foo'
+        ? `${source}$`
+        // foo matches 'foo' and 'foo/'
+        : `${source}(?=$|\\/$)`
+    }
   ]
 ]
 
-const REGEX_REPLACE_TRAILING_WILDCARD = /(^|\\\/)?\\\*$/
+const REGEX_REPLACE_TRAILING_WILDCARD = /(^|\\\/)?\uE000$/
 const MODE_IGNORE = 'regex'
 const MODE_CHECK_IGNORE = 'checkRegex'
 const UNDERSCORE = '_'
@@ -352,12 +710,250 @@ const TRAILING_WILD_CARD_REPLACERS = {
   }
 }
 
+const WILDCARD = '[^\\/]*'
+
+// Where a run of non-slash wildcards is split by single fixed characters --
+//   `[^/]*x[^/]*y...` -- the engine has many equivalent ways to lay the
+//   input across the wildcards, and on input that does not match it works
+//   through all of them, so the time grows with the number of wildcards
+//   rather than the length of the path. Every wildcard but the last in such a
+//   run can be pinned to stop at the character that follows it, which leaves
+//   one way to lay out the input and no rewinding, without changing which
+//   paths match: the fixed characters still bound the count, and the last
+//   wildcard still absorbs the rest.
+//
+// The source is read one token at a time -- a wildcard, a single-character
+//   piece (a literal, an escape, a class), or a parenthesised group or anchor
+//   that ends the run -- so only a genuine wildcard is touched.
+const pinWildcards = source => {
+  if (source.indexOf(WILDCARD) < 0) {
+    return source
+  }
+
+  const tokens = []
+  const {length} = source
+  let index = 0
+
+  while (index < length) {
+    const char = source[index]
+
+    if (source.startsWith(WILDCARD, index)) {
+      tokens.push({wildcard: true})
+      index += WILDCARD.length
+    } else if (char === '[') {
+      let end = index + 1
+
+      if (source[end] === '^') {
+        end ++
+      }
+
+      if (source[end] === ']') {
+        end ++
+      }
+
+      while (end < length && source[end] !== ']') {
+        end += source[end] === ESCAPE
+          ? 2
+          : 1
+      }
+
+      end ++
+      tokens.push({single: source.slice(index, end)})
+      index = end
+    } else if (char === ESCAPE) {
+      tokens.push({single: source.slice(index, index + 2)})
+      index += 2
+    } else if (char === '(') {
+      let depth = 0
+      let end = index
+
+      do {
+        if (source[end] === ESCAPE) {
+          end ++
+        } else if (source[end] === '(') {
+          depth ++
+        } else if (source[end] === ')') {
+          depth --
+        }
+
+        end ++
+      } while (end < length && depth > 0)
+
+      if ('*+?'.indexOf(source[end]) >= 0) {
+        end ++
+      }
+
+      tokens.push({boundary: source.slice(index, end)})
+      index = end
+    } else if (char === '^' || char === '$') {
+      tokens.push({boundary: char})
+      index ++
+    } else {
+      tokens.push({single: char})
+      index ++
+    }
+  }
+
+  let out = EMPTY
+  let run = []
+
+  const flush = () => {
+    let lastWildcard
+
+    run.forEach((token, at) => {
+      if (token.wildcard) {
+        lastWildcard = at
+      }
+    })
+
+    run.forEach((token, at) => {
+      if (!token.wildcard) {
+        out += token.single
+        return
+      }
+
+      // A wildcard that is not the last in the run is always immediately
+      //   followed by the single character that separates it from the next
+      //   one, because a run never holds two wildcards in a row, so it can be
+      //   pinned to stop there. The last wildcard stays as it is and takes up
+      //   the rest.
+      out += at === lastWildcard
+        ? WILDCARD
+        : `(?:(?!${run[at + 1].single})[^\\/])*`
+    })
+
+    run = []
+  }
+
+  tokens.forEach(token => {
+    if (token.boundary === undefined) {
+      run.push(token)
+      return
+    }
+
+    flush()
+    out += token.boundary
+  })
+
+  flush()
+
+  return out
+}
+
 // @param {pattern}
-const makeRegexPrefix = pattern => REPLACERS.reduce(
-  (prev, [matcher, replacer]) =>
-    prev.replace(matcher, replacer.bind(pattern)),
-  pattern
-)
+const makeRegexPrefix = pattern => {
+  const {source, sources} = extractBrackets(pattern)
+
+  const replaced = REPLACERS.reduce(
+    // A pass whose matcher finds nothing hands back the very string it was
+    //   given, so asking first costs a search and saves a rewrite. Ten of the
+    //   fifteen passes never fire for a typical .gitignore line, and between
+    //   them they were 45% of this chain.
+    (prev, [matcher, replacer, required]) => {
+      if (matcher === DIRECT) {
+        return replacer(prev, pattern)
+      }
+
+      if (required !== UNDEFINED && prev.indexOf(required) < 0) {
+        return prev
+      }
+
+      // A pass whose matcher finds nothing hands back the very string it was
+      //   given, so asking first costs a search and saves a rewrite.
+      return matcher.test(prev)
+        ? prev.replace(matcher, replacer.bind(pattern))
+        : prev
+    },
+    source
+  )
+
+  // Most patterns hold no bracket expression at all, and then there is
+  //   nothing to put back.
+  return sources.length
+    ? replaced.replace(
+      REGEX_RESTORE_PLACEHOLDER,
+      (match, index) => sources[index]
+    )
+    : replaced
+}
+
+// A trailing slash does not stop a pattern being basename-only: it restricts
+//   the match to a directory, it does not let the pattern reach across one.
+//   Everything else a pattern can hold -- a wildcard, a character class, an
+//   escape -- stays inside a single path segment too, so a pattern with no
+//   separator in it can only ever describe the last one.
+const matchesBasename = body => {
+  const index = body.indexOf(SLASH)
+
+  return index < 0 || index === body.length - 1
+}
+
+// The last segment of a path, keeping a trailing slash, because a pattern that
+//   ends in one matches only a directory.
+// 'a/b/c.js' -> 'c.js';  'a/b/' -> 'b/';  'c.js' -> 'c.js' (no copy made)
+const basenameOf = path => {
+  const end = path.length - 1
+
+  const index = path.lastIndexOf(
+    SLASH,
+    path[end] === SLASH
+      ? end - 1
+      : end
+  )
+
+  return index < 0
+    ? path
+    : path.slice(index + 1)
+}
+
+// The parent directory of a path, with its trailing separator, or EMPTY when
+//   the path has none.
+// 'a/b/c' -> 'a/b/';  'a/b/' -> 'a/';  'a' -> EMPTY;  'a/' -> EMPTY
+//
+// A path holding an empty segment has to be taken apart, because its
+//   ancestors are not prefixes of it: the parent of 'a//b' is 'a/', not
+//   'a//', and the parent of '/a/' is nothing at all. Both shapes reach here
+//   -- 'a//b' is accepted outright, and `checkIgnore` does not put the path
+//   it is given through the relative-path check.
+//
+// Every other path is a prefix of itself, and cutting one costs a fraction of
+//   splitting it into an array and joining that back at every level: 73ns
+//   against 207ns.
+const parentOf = path => {
+  if (
+    path.charCodeAt(0) === SLASH_CODE
+    || path.indexOf(DOUBLE_SLASH) >= 0
+  ) {
+    const slices = path.split(SLASH).filter(Boolean)
+
+    slices.pop()
+
+    return slices.length
+      ? slices.join(SLASH) + SLASH
+      : EMPTY
+  }
+
+  const end = path.length - 1
+
+  // Look back from before a trailing separator, since that one belongs to the
+  //   path itself.
+  //
+  // A negative place to start would be a trap here: `lastIndexOf` clamps one
+  //   to 0 and searches there rather than reporting no match, so '/' would
+  //   come back as its own parent and the walk would never end. It cannot
+  //   happen -- that is the only path short enough to produce one, and the
+  //   test above has already sent it the other way.
+  const cut = path.lastIndexOf(
+    SLASH,
+    path.charCodeAt(end) === SLASH_CODE
+      ? end - 1
+      : end
+  )
+
+  return cut < 0
+    ? EMPTY
+    : path.slice(0, cut + 1)
+}
 
 const isString = subject => typeof subject === 'string'
 
@@ -392,6 +988,15 @@ class IgnoreRule {
     define(this, 'regexPrefix', prefix)
   }
 
+  // Worked out on first use and kept behind an own property, the way `regex`
+  //   caches itself in `_regex`. Deciding it in the constructor instead would
+  //   add a fourth `defineProperty` to every rule ever built, which cost 4% of
+  //   every compile -- including the compiles of rules that are never matched
+  //   against anything.
+  get _basenameOnly () {
+    return define(this, '_basenameOnly', matchesBasename(this.body))
+  }
+
   get regex () {
     const key = UNDERSCORE + MODE_IGNORE
 
@@ -413,12 +1018,12 @@ class IgnoreRule {
   }
 
   _make (mode, key) {
-    const str = this.regexPrefix.replace(
+    const str = pinWildcards(this.regexPrefix.replace(
       REGEX_REPLACE_TRAILING_WILDCARD,
 
       // It does not need to bind pattern
       TRAILING_WILD_CARD_REPLACERS[mode]
-    )
+    ))
 
     const regex = this.ignoreCase
       ? new RegExp(str, 'i')
@@ -465,12 +1070,28 @@ class RuleManager {
   constructor (ignoreCase) {
     this._ignoreCase = ignoreCase
     this._rules = []
+
+    // How many of the rules git would tag `EXC_FLAG_NODIR`.
+    //
+    // The scan uses it to decide, once for the whole set, whether handing
+    //   those rules the basename is worth what it costs the others. The
+    //   shortcut saves a full-path scan on every rule it applies to and costs
+    //   a check on every rule it does not, so a set where almost nothing is
+    //   basename-only comes out behind -- a 955 pattern set with 44 of them
+    //   measured 19% slower with the shortcut always on.
+    //
+    // Deciding this by measurement rather than by meaning is safe: a
+    //   basename-only pattern gives the very same answer against the whole
+    //   path, it just takes longer to say so. The choice can only change how
+    //   fast the scan runs, never what it returns.
+    this._basenameCount = 0
   }
 
   _add (pattern) {
     // #32
     if (pattern && pattern[KEY_IGNORE]) {
       this._rules = this._rules.concat(pattern._rules._rules)
+      this._basenameCount += pattern._rules._basenameCount
       this._added = true
       return
     }
@@ -485,6 +1106,13 @@ class RuleManager {
       const rule = createRule(pattern, this._ignoreCase)
       this._added = true
       this._rules.push(rule)
+
+      // Deliberately not `rule._basenameOnly`: reading that would materialise
+      //   the rule's own copy, and the whole point of leaving it lazy is that
+      //   a rule which is compiled and never matched never pays for it.
+      if (matchesBasename(rule.body)) {
+        this._basenameCount ++
+      }
     }
   }
 
@@ -514,7 +1142,26 @@ class RuleManager {
     let unignored = false
     let matchedRule
 
-    this._rules.forEach(rule => {
+    // Most of a .gitignore is patterns with no slash in them, and running
+    //   those against the whole path makes the regular expression engine walk
+    //   every directory name on the way to the only segment that could match.
+    //   Handing them the basename instead is what git does, and it is where
+    //   the time in a directory walk goes: the rule scan was two thirds of it.
+    const rules = this._rules
+    const {length} = rules
+
+    const shortcut = this._basenameCount * 2 >= length
+
+    const basename = shortcut
+      ? basenameOf(path)
+      : path
+
+    // A plain loop rather than `forEach`, so that `path`, `basename` and
+    //   `shortcut` are locals. As a callback they became closure variables,
+    //   and reaching for one of those once per rule cost 10% of a scan over a
+    //   large rule set -- more than the shortcut they were there to serve.
+    for (let index = 0; index < length; index ++) {
+      const rule = rules[index]
       const {negative} = rule
 
       //          |           ignored : unignored
@@ -528,26 +1175,22 @@ class RuleManager {
       // - TEST: always test
       // - TESTIF: only test if checkUnignored
       // - X: that never happen
-      if (
-        unignored === negative && ignored !== unignored
+      const skip = unignored === negative && ignored !== unignored
         || negative && !ignored && !unignored && !checkUnignored
-      ) {
-        return
-      }
-
-      const matched = rule[mode].test(path)
 
-      if (!matched) {
-        return
+      if (!skip && rule[mode].test(
+        shortcut && rule._basenameOnly
+          ? basename
+          : path
+      )) {
+        ignored = !negative
+        unignored = negative
+
+        matchedRule = negative
+          ? UNDEFINED
+          : rule
       }
-
-      ignored = !negative
-      unignored = negative
-
-      matchedRule = negative
-        ? UNDEFINED
-        : rule
-    })
+    }
 
     const ret = {
       ignored,
@@ -591,7 +1234,43 @@ const checkPath = (path, originalPath, doThrow) => {
   return true
 }
 
-const isNotRelative = path => REGEX_TEST_INVALID_PATH.test(path)
+// > pathname should be a `path.relative()`d one
+//
+// The same thing `REGEX_TEST_INVALID_PATH` says, spelled out: a path is not
+//   relative if it begins with a separator, or with `./` or `../`, or is
+//   nothing but `.` or `..`. Every match is decided by the first three
+//   characters, and this runs on every path handed to the library -- where it
+//   was 55% of a cached lookup, more than the cache lookup itself.
+const isNotRelative = path => {
+  const first = path.charCodeAt(0)
+
+  if (first === SLASH_CODE) {
+    return true
+  }
+
+  if (first !== DOT_CODE) {
+    return false
+  }
+
+  // '.'
+  if (path.length === 1) {
+    return true
+  }
+
+  const second = path.charCodeAt(1)
+
+  // './'
+  if (second === SLASH_CODE) {
+    return true
+  }
+
+  if (second !== DOT_CODE) {
+    return false
+  }
+
+  // '..' or '../'
+  return path.length === 2 || path.charCodeAt(2) === SLASH_CODE
+}
 
 checkPath.isNotRelative = isNotRelative
 
@@ -638,7 +1317,7 @@ class Ignore {
   }
 
   // @returns {TestResult}
-  _test (originalPath, cache, checkUnignored, slices) {
+  _test (originalPath, cache, checkUnignored) {
     const path = originalPath
       // Supports nullable path
       && checkPath.convert(originalPath)
@@ -651,26 +1330,20 @@ class Ignore {
         : RETURN_FALSE
     )
 
-    return this._t(path, cache, checkUnignored, slices)
+    return this._t(path, cache, checkUnignored)
   }
 
   checkIgnore (path) {
     // If the path doest not end with a slash, `.ignores()` is much equivalent
     //   to `git check-ignore`
-    if (!REGEX_TEST_TRAILING_SLASH.test(path)) {
+    if (path.charCodeAt(path.length - 1) !== SLASH_CODE) {
       return this.test(path)
     }
 
-    const slices = path.split(SLASH).filter(Boolean)
-    slices.pop()
+    const parentPath = parentOf(path)
 
-    if (slices.length) {
-      const parent = this._t(
-        slices.join(SLASH) + SLASH,
-        this._testCache,
-        true,
-        slices
-      )
+    if (parentPath) {
+      const parent = this._t(parentPath, this._testCache, true)
 
       if (parent.ignored) {
         return parent
@@ -688,37 +1361,20 @@ class Ignore {
     cache,
 
     // Whether should check if the path is unignored
-    checkUnignored,
-
-    // The path slices
-    slices
+    checkUnignored
   ) {
     if (path in cache) {
       return cache[path]
     }
 
-    if (!slices) {
-      // path/to/a.js
-      // ['path', 'to', 'a.js']
-      slices = path.split(SLASH).filter(Boolean)
-    }
-
-    slices.pop()
-
-    // If the path has no parent directory, just test it
-    if (!slices.length) {
-      return cache[path] = this._rules.test(path, checkUnignored, MODE_IGNORE)
-    }
-
-    const parent = this._t(
-      slices.join(SLASH) + SLASH,
-      cache,
-      checkUnignored,
-      slices
-    )
+    const parentPath = parentOf(path)
 
     // If the path contains a parent directory, check the parent first
-    return cache[path] = parent.ignored
+    const parent = parentPath
+      ? this._t(parentPath, cache, checkUnignored)
+      : UNDEFINED
+
+    return cache[path] = parent && parent.ignored
       // > It is not possible to re-include a file if a parent directory of
       // >   that file is excluded.
       ? parent