@procedures/git 0.8.1 → 0.9.1

package/dist/procedures/git/root.js

@@ -0,0 +1,443 @@
+/**
+ * Git under the root of the files of a host (roadmap R33, tracker item O35).
+ *
+ * A host with a root (`confineToRoot()` of `@procedures/fs`) examines the path inputs of each
+ * `git.*` procedure, and it gives the handler the root in `ctx.fsRoot`. The handler then runs in
+ * `underGitRoot()`, and each `git()` call of the handler gets these changes:
+ *
+ * - The working folder must be in the root. `GIT_CEILING_DIRECTORIES` is the parent of the root, so
+ *   git does not look for a repository above the root.
+ * - The configuration of the system does not apply (`GIT_CONFIG_NOSYSTEM`). The global
+ *   configuration is a file of this process with only the identity of the user of the host
+ *   (`GIT_CONFIG_GLOBAL`). The variables that move the repository (`GIT_DIR`, `GIT_WORK_TREE` and
+ *   the others) do not apply.
+ * - The options of `SAFE_CONFIG` turn off the hooks, `core.fsmonitor`, the transports `file` and
+ *   `ext` (and each transport other than https, http, ssh and git), and the recursion into
+ *   submodules.
+ * - Before the first git command in a folder, `examineRepository()` examines the repository: its
+ *   folders must be in the root, and its configuration must not start a program
+ *   (`refusedConfigKeys()`). A repository with submodules is refused.
+ *
+ * A refusal is `FORBIDDEN` with the reason `outside-root`. Without a root, nothing changes.
+ */
+import { AsyncLocalStorage } from "node:async_hooks";
+import { rmSync } from "node:fs";
+import { access, mkdir, mkdtemp, readFile, writeFile } from "node:fs/promises";
+import { tmpdir } from "node:os";
+import { delimiter, dirname, join, resolve } from "node:path";
+import { inRoot, isInside, outsideRoot, realPathOf, resolveRoot } from "@procedures/fs/root";
+import { runCommand } from "@procedures/shell/command";
+const roots = new AsyncLocalStorage();
+/**
+ * This function runs the handler of a git procedure. With a root, each `git()` call of the handler
+ * stays in the root. Without a root, it only runs the handler.
+ */
+export async function underGitRoot(folder, procedure, handler) {
+    if (folder === undefined)
+        return handler();
+    const root = await resolveRoot(folder, "the git procedures");
+    return roots.run({ root, procedure, examined: new Map() }, handler);
+}
+/** This function gives the root of the current call, or undefined without a root. */
+export function currentGitRoot() {
+    return roots.getStore();
+}
+/**
+ * This function gives the absolute path of a path that a git procedure makes from its input, for
+ * example the folder of a clone. Under a root, a path outside the root is refused.
+ */
+export async function pathInGitRoot(path) {
+    const current = currentGitRoot();
+    if (current === undefined)
+        return resolve(path);
+    return inRoot(current.root, path, current.procedure);
+}
+/**
+ * This function refuses, under a root, the URL of a remote that starts a program: the form
+ * `<transport>::<address>` starts the remote helper `git-remote-<transport>`, and `ext::` starts
+ * a command.
+ */
+export function remoteUrlInGitRoot(url) {
+    const current = currentGitRoot();
+    if (current !== undefined && url.includes("::")) {
+        throw outsideRoot(current.procedure, `under the root ${current.root.folder}, a remote URL with "::" is refused, because it starts a program: ${url}`);
+    }
+    return url;
+}
+// =============================================================================
+// The command line and the environment of git under a root
+// =============================================================================
+/**
+ * The configuration of each git command under a root, as `-c` options. A `-c` option overrides each
+ * configuration file. Git gives these options to the git commands that it starts.
+ */
+export function safeConfig(hooks) {
+    return [
+        // No hook runs: the folder is empty
+        `core.hooksPath=${hooks}`,
+        "core.fsmonitor=false",
+        // Only the network transports: no local path, no file://, no ext:: and no remote helper. The
+        // rule of a transport overrides protocol.allow, so file and ext get their own rule.
+        "protocol.allow=never",
+        "protocol.file.allow=never",
+        "protocol.ext.allow=never",
+        "protocol.https.allow=always",
+        "protocol.http.allow=always",
+        "protocol.ssh.allow=always",
+        "protocol.git.allow=always",
+        // Git does not start git in a submodule
+        "diff.ignoreSubmodules=all",
+        "submodule.recurse=false",
+        "fetch.recurseSubmodules=false",
+        "push.recurseSubmodules=no",
+        "status.submoduleSummary=false",
+    ].flatMap((option) => ["-c", option]);
+}
+/**
+ * The variables of the environment that move the repository, add configuration or allow a
+ * transport. Under a root, git does not get them.
+ */
+const REMOVED_VARIABLES = [
+    "GIT_DIR",
+    "GIT_WORK_TREE",
+    "GIT_COMMON_DIR",
+    "GIT_INDEX_FILE",
+    "GIT_OBJECT_DIRECTORY",
+    "GIT_ALTERNATE_OBJECT_DIRECTORIES",
+    "GIT_NAMESPACE",
+    "GIT_IMPLICIT_WORK_TREE",
+    "GIT_PREFIX",
+    "GIT_GRAFT_FILE",
+    "GIT_SHALLOW_FILE",
+    "GIT_CONFIG",
+    "GIT_CONFIG_SYSTEM",
+    "GIT_CONFIG_PARAMETERS",
+    "GIT_CONFIG_COUNT",
+    "GIT_EXTERNAL_DIFF",
+    "GIT_TEMPLATE_DIR",
+    "GIT_ATTR_SOURCE",
+    "GIT_ALLOW_PROTOCOL",
+];
+/** The folders of `GIT_CEILING_DIRECTORIES` for a root: the parent of the root, as given and as its real path. */
+export function ceilingOf(root) {
+    const parents = new Set();
+    for (const folder of [root.folder, root.real]) {
+        const parent = dirname(folder);
+        // A root at the top of a drive has no parent
+        if (parent !== folder)
+            parents.add(parent);
+    }
+    return [...parents].join(delimiter);
+}
+/** This function gives the environment of git under a root. */
+export function rootEnvironment(root, setup) {
+    const env = {};
+    for (const name of REMOVED_VARIABLES)
+        env[name] = undefined;
+    env["GIT_CEILING_DIRECTORIES"] = ceilingOf(root);
+    env["GIT_CONFIG_NOSYSTEM"] = "1";
+    env["GIT_CONFIG_GLOBAL"] = setup.globalConfig;
+    // No prompt for a password: the call has no terminal
+    env["GIT_TERMINAL_PROMPT"] = "0";
+    return env;
+}
+/** The keys of the global configuration that git under a root keeps. They start no program. */
+const KEPT_GLOBAL_KEYS = ["user.name", "user.email", "init.defaultBranch"];
+let setup;
+/** The folder of the files of git under a root, when they exist. */
+let setupFolder;
+/**
+ * This function makes the files of git under a root one time for each process: a new folder in
+ * the temporary folder, with an empty hooks folder and a global configuration. The configuration
+ * has only the identity of the user from the global configuration of the host, so a commit works.
+ * The process deletes the folder at its end (`removeGitRootSetup()`).
+ */
+export function gitRootSetup() {
+    setup ??= makeSetup();
+    return setup;
+}
+/**
+ * This function deletes the files of git under a root. The process starts it at its end. The next
+ * git command under a root makes the files again.
+ */
+export function removeGitRootSetup() {
+    if (setupFolder !== undefined)
+        rmSync(setupFolder, { recursive: true, force: true });
+    setupFolder = undefined;
+    setup = undefined;
+}
+async function makeSetup() {
+    try {
+        const folder = await mkdtemp(join(tmpdir(), "procedures-git-root-"));
+        setupFolder = folder;
+        process.once("exit", removeGitRootSetup);
+        const hooks = join(folder, "hooks");
+        await mkdir(hooks);
+        const globalConfig = join(folder, "global.gitconfig");
+        await writeFile(globalConfig, "");
+        for (const key of KEPT_GLOBAL_KEYS) {
+            const value = await runCommand("git", { args: ["config", "--global", "--get", key], cwd: folder });
+            if (!value.success)
+                continue;
+            // Git writes the value, so a special character of the value stays correct
+            await runCommand("git", { args: ["config", "--file", globalConfig, key, value.stdout.replace(/\r?\n$/, "")], cwd: folder });
+        }
+        return { hooks, globalConfig };
+    }
+    catch (error) {
+        // The next call tries again
+        setup = undefined;
+        throw error;
+    }
+}
+// =============================================================================
+// The configuration of a repository
+// =============================================================================
+/** The keys (section.name, or section.subsection.name as section.*.name) that start a program or name a file outside the repository. */
+const REFUSED_KEYS = new Set([
+    // Programs
+    "core.sshcommand",
+    "core.gitproxy",
+    "core.askpass",
+    "core.editor",
+    "core.pager",
+    "core.alternaterefscommand",
+    "sequence.editor",
+    "diff.external",
+    "diff.tool",
+    "diff.guitool",
+    "merge.tool",
+    "merge.guitool",
+    "credential.helper",
+    "credential.*.helper",
+    "gpg.program",
+    "gpg.*.program",
+    "gpg.ssh.defaultkeycommand",
+    "filter.*.clean",
+    "filter.*.smudge",
+    "filter.*.process",
+    "diff.*.command",
+    "diff.*.textconv",
+    "merge.*.driver",
+    "difftool.*.cmd",
+    "difftool.*.path",
+    "mergetool.*.cmd",
+    "mergetool.*.path",
+    "remote.*.uploadpack",
+    "remote.*.receivepack",
+    "remote.*.vcs",
+    "uploadpack.packobjectshook",
+    "trailer.*.command",
+    "trailer.*.cmd",
+    // Files outside the repository
+    "core.worktree",
+    "core.excludesfile",
+    "core.attributesfile",
+    "commit.template",
+    "include.path",
+    "includeif.*.path",
+    "init.templatedir",
+    "mailmap.file",
+    "blame.ignorerevsfile",
+    "diff.orderfile",
+    "gpg.ssh.allowedsignersfile",
+    // A bundle URI can be a local file
+    "fetch.bundleuri",
+    "transfer.bundleuri",
+    ...["sslcert", "sslkey", "sslcainfo", "sslcapath", "cookiefile", "proxysslcert", "proxysslkey", "proxysslcainfo"].flatMap((name) => [
+        `http.${name}`,
+        `http.*.${name}`,
+    ]),
+]);
+/**
+ * The sections that a root refuses as a whole: `pager.<command>` and the hooks of the
+ * configuration start a program, `protocol.*` allows a transport again, and a bundle URI can be
+ * a local file.
+ */
+const REFUSED_SECTIONS = new Set(["pager", "hook", "protocol", "bundle"]);
+/** The keys that start the signing program when they are not false. */
+const SIGNING_KEYS = new Set(["commit.gpgsign", "tag.gpgsign", "tag.forcesignannotated", "push.gpgsign"]);
+/** The values that turn off a boolean key. */
+const FALSE_VALUES = new Set(["false", "no", "off", "0"]);
+/** The parts of a configuration key: the section and the name in lower case, and the subsection. */
+function partsOf(key) {
+    const first = key.indexOf(".");
+    const last = key.lastIndexOf(".");
+    if (first === -1)
+        return { section: key.toLowerCase(), subsection: undefined, name: "" };
+    return {
+        section: key.slice(0, first).toLowerCase(),
+        subsection: first === last ? undefined : key.slice(first + 1, last),
+        name: key.slice(last + 1).toLowerCase(),
+    };
+}
+/** True when a key of the configuration of a repository starts a program or names a file outside it. */
+export function isRefusedConfigKey(key, value) {
+    const { section, subsection, name } = partsOf(key);
+    if (REFUSED_SECTIONS.has(section))
+        return true;
+    const pattern = subsection === undefined ? `${section}.${name}` : `${section}.*.${name}`;
+    if (REFUSED_KEYS.has(pattern))
+        return true;
+    // gpg.ssh.defaultKeyCommand and gpg.ssh.allowedSignersFile have a fixed subsection
+    if (subsection !== undefined && REFUSED_KEYS.has(`${section}.${subsection.toLowerCase()}.${name}`))
+        return true;
+    if (SIGNING_KEYS.has(pattern))
+        return !FALSE_VALUES.has((value ?? "true").trim().toLowerCase());
+    // A remote helper: `<transport>::<address>`, also as the base of url.<base>.insteadOf
+    if (section === "remote" && (name === "url" || name === "pushurl"))
+        return (value ?? "").includes("::");
+    if (section === "url" && (subsection ?? "").includes("::"))
+        return true;
+    // `!command` as the update of a submodule
+    if (section === "submodule" && name === "update")
+        return (value ?? "").trim().startsWith("!");
+    return false;
+}
+/** This function reads the output of `git config --list --show-scope -z`: the scope, then the key and the value. */
+export function parseConfigList(output) {
+    const fields = output.split("\0");
+    const entries = [];
+    for (let i = 0; i + 1 < fields.length; i += 2) {
+        const scope = fields[i];
+        const entry = fields[i + 1];
+        const newline = entry.indexOf("\n");
+        entries.push(newline === -1 ? { scope, key: entry, value: undefined } : { scope, key: entry.slice(0, newline), value: entry.slice(newline + 1) });
+    }
+    return entries;
+}
+/**
+ * This function gives the keys of the configuration of a repository that a root refuses. It
+ * examines the files of the repository (the scopes `local` and `worktree`), not the global
+ * configuration of this process and not the `-c` options.
+ */
+export function refusedConfigKeys(entries) {
+    const refused = new Set();
+    for (const entry of entries) {
+        if (entry.scope === "global" || entry.scope === "command")
+            continue;
+        if (isRefusedConfigKey(entry.key, entry.value))
+            refused.add(entry.key);
+    }
+    return [...refused];
+}
+// =============================================================================
+// The examination of a repository
+// =============================================================================
+/** This function runs git for an examination, with the environment of the root. */
+async function examine(args, cwd, env, hooks, input) {
+    return runCommand("git", { args: [...safeConfig(hooks), ...args], cwd, env, input });
+}
+/** True when the real path of a path is in the root. */
+async function isInRoot(root, path) {
+    return isInside(root.real, await realPathOf(path));
+}
+/** True when a file or a folder exists. */
+async function exists(path) {
+    return access(path).then(() => true, () => false);
+}
+/** True when a folder has the files of a git folder: `HEAD`, `objects` and `refs`, as a bare repository has. */
+async function isGitFolder(folder) {
+    for (const name of ["HEAD", "objects", "refs"])
+        if (!(await exists(join(folder, name))))
+            return false;
+    return true;
+}
+/**
+ * True when a folder from the working folder up to the root has `.git`, or is a git folder. Git
+ * then found a repository that it could not examine.
+ */
+async function looksLikeRepository(cwd, root) {
+    let folder = cwd;
+    for (;;) {
+        if ((await exists(join(folder, ".git"))) || (await isGitFolder(folder)))
+            return true;
+        const parent = dirname(folder);
+        if (!isInside(root, parent) || parent === folder)
+            return false;
+        folder = parent;
+    }
+}
+/**
+ * This function examines the repository of a working folder under a root. It refuses:
+ * - a repository whose folders are outside the root (a `.git` file can name another folder);
+ * - an alternate object folder outside the root;
+ * - a configuration with a key that starts a program or names a file outside the repository;
+ * - a repository with submodules: git starts git in each submodule, with its configuration.
+ *
+ * A folder that is not in a repository passes: the command makes one (`git init`, `git clone`),
+ * or it fails.
+ */
+export async function examineRepository(current, cwd, env, hooks) {
+    const { root, procedure } = current;
+    const refuse = (message) => outsideRoot(procedure, `under the root ${root.folder}, ${message}`);
+    const located = await examine(["rev-parse", "--path-format=absolute", "--git-dir", "--git-common-dir", "--is-bare-repository"], cwd, env, hooks);
+    const [gitDir, commonDir, bare] = located.success ? located.stdout.split(/\r?\n/) : [];
+    if (!gitDir || !commonDir) {
+        // The text of the error of git depends on the language, so the folders decide
+        if (await looksLikeRepository(cwd, root.folder)) {
+            throw refuse(`git cannot examine the repository of ${cwd}: ${located.stderr.trim()}`);
+        }
+        return;
+    }
+    for (const path of [gitDir, commonDir, join(commonDir, "objects"), join(commonDir, "refs"), join(commonDir, "config"), join(gitDir, "index")]) {
+        if (!(await isInRoot(root, path)))
+            throw refuse(`the repository of ${cwd} is outside the root: ${path}`);
+    }
+    const alternates = await readFile(join(commonDir, "objects", "info", "alternates"), "utf8").catch(() => "");
+    for (const line of alternates.split(/\r?\n/)) {
+        const entry = line.trim();
+        if (entry === "" || entry.startsWith("#"))
+            continue;
+        if (!(await isInRoot(root, resolve(commonDir, "objects", entry))))
+            throw refuse(`the repository ${gitDir} reads objects outside the root: ${entry}`);
+    }
+    const config = await examine(["config", "--list", "--no-includes", "--show-scope", "-z"], cwd, env, hooks);
+    if (!config.success)
+        throw refuse(`git cannot read the configuration of the repository ${gitDir}: ${config.stderr.trim()}`);
+    const keys = refusedConfigKeys(parseConfigList(config.stdout));
+    if (keys.length > 0) {
+        throw refuse(`the configuration of the repository ${gitDir} can start a program or read a file outside the root: ${keys.join(", ")}`);
+    }
+    // A submodule: .gitmodules in the working tree, in the index or at HEAD
+    let modules = false;
+    if (bare !== "true") {
+        const top = await examine(["rev-parse", "--show-toplevel"], cwd, env, hooks);
+        if (top.success && (await exists(join(top.stdout.trim(), ".gitmodules"))))
+            modules = true;
+    }
+    if (!modules) {
+        const objects = await examine(["cat-file", "--batch-check"], cwd, env, hooks, ":.gitmodules\nHEAD:.gitmodules\n");
+        if (!objects.success)
+            throw refuse(`git cannot examine the repository ${gitDir}: ${objects.stderr.trim()}`);
+        modules = objects.stdout.split(/\r?\n/).some((line) => line !== "" && !line.endsWith(" missing"));
+    }
+    if (modules) {
+        throw refuse(`the repository ${gitDir} has submodules (.gitmodules), and git starts git in each submodule with the configuration of the submodule`);
+    }
+}
+/** The subcommands that recurse into submodules without `--no-recurse-submodules`. */
+const RECURSING = new Set(["fetch", "pull"]);
+/**
+ * This function gives the arguments, the working folder and the environment of one git command
+ * under a root. It examines the repository of the working folder before the first command there.
+ */
+export async function confinedGitCommand(current, args, cwd, env) {
+    const folder = await inRoot(current.root, cwd ?? current.root.folder, current.procedure);
+    const files = await gitRootSetup();
+    const rootEnv = rootEnvironment(current.root, files);
+    let examined = current.examined.get(folder);
+    if (examined === undefined) {
+        examined = examineRepository(current, folder, rootEnv, files.hooks);
+        current.examined.set(folder, examined);
+    }
+    await examined;
+    const command = [...args];
+    // The checkout shows the changes of the working tree, also of a submodule that it brings: quiet, it does not
+    if (command[0] === "checkout")
+        command.splice(1, 0, "--quiet");
+    if (RECURSING.has(command[0] ?? ""))
+        command.splice(1, 0, "--no-recurse-submodules");
+    return { args: [...safeConfig(files.hooks), ...command], cwd: folder, env: { ...rootEnv, ...env } };
+}
+//# sourceMappingURL=root.js.map

package/dist/procedures/git/root.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"root.js","sourceRoot":"","sources":["../../../src/procedures/git/root.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC/E,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAE9D,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,UAAU,EAAE,WAAW,EAAqB,MAAM,qBAAqB,CAAC;AAChH,OAAO,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAC;AAYvD,MAAM,KAAK,GAAG,IAAI,iBAAiB,EAAW,CAAC;AAE/C;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAI,MAA0B,EAAE,SAAwB,EAAE,OAAyB;IACnH,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,OAAO,EAAE,CAAC;IAC3C,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,MAAM,EAAE,oBAAoB,CAAC,CAAC;IAC7D,OAAO,KAAK,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,GAAG,EAAE,EAAE,EAAE,OAAO,CAAC,CAAC;AACtE,CAAC;AAED,qFAAqF;AACrF,MAAM,UAAU,cAAc;IAC5B,OAAO,KAAK,CAAC,QAAQ,EAAE,CAAC;AAC1B,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,IAAY;IAC9C,MAAM,OAAO,GAAG,cAAc,EAAE,CAAC;IACjC,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC;IAChD,OAAO,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;AACvD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAAC,GAAW;IAC5C,MAAM,OAAO,GAAG,cAAc,EAAE,CAAC;IACjC,IAAI,OAAO,KAAK,SAAS,IAAI,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAChD,MAAM,WAAW,CAAC,OAAO,CAAC,SAAS,EAAE,kBAAkB,OAAO,CAAC,IAAI,CAAC,MAAM,qEAAqE,GAAG,EAAE,CAAC,CAAC;IACxJ,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,gFAAgF;AAChF,2DAA2D;AAC3D,gFAAgF;AAEhF;;;GAGG;AACH,MAAM,UAAU,UAAU,CAAC,KAAa;IACtC,OAAO;QACL,oCAAoC;QACpC,kBAAkB,KAAK,EAAE;QACzB,sBAAsB;QACtB,6FAA6F;QAC7F,oFAAoF;QACpF,sBAAsB;QACtB,2BAA2B;QAC3B,0BAA0B;QAC1B,6BAA6B;QAC7B,4BAA4B;QAC5B,2BAA2B;QAC3B,2BAA2B;QAC3B,wCAAwC;QACxC,2BAA2B;QAC3B,yBAAyB;QACzB,+BAA+B;QAC/B,2BAA2B;QAC3B,+BAA+B;KAChC,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;AACxC,CAAC;AAED;;;GAGG;AACH,MAAM,iBAAiB,GAAG;IACxB,SAAS;IACT,eAAe;IACf,gBAAgB;IAChB,gBAAgB;IAChB,sBAAsB;IACtB,kCAAkC;IAClC,eAAe;IACf,wBAAwB;IACxB,YAAY;IACZ,gBAAgB;IAChB,kBAAkB;IAClB,YAAY;IACZ,mBAAmB;IACnB,uBAAuB;IACvB,kBAAkB;IAClB,mBAAmB;IACnB,kBAAkB;IAClB,iBAAiB;IACjB,oBAAoB;CACZ,CAAC;AAEX,kHAAkH;AAClH,MAAM,UAAU,SAAS,CAAC,IAAkB;IAC1C,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAClC,KAAK,MAAM,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAC9C,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;QAC/B,6CAA6C;QAC7C,IAAI,MAAM,KAAK,MAAM;YAAE,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAC7C,CAAC;IACD,OAAO,CAAC,GAAG,OAAO,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;AACtC,CAAC;AAED,+DAA+D;AAC/D,MAAM,UAAU,eAAe,CAAC,IAAkB,EAAE,KAAmB;IACrE,MAAM,GAAG,GAAuC,EAAE,CAAC;IACnD,KAAK,MAAM,IAAI,IAAI,iBAAiB;QAAE,GAAG,CAAC,IAAI,CAAC,GAAG,SAAS,CAAC;IAC5D,GAAG,CAAC,yBAAyB,CAAC,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IACjD,GAAG,CAAC,qBAAqB,CAAC,GAAG,GAAG,CAAC;IACjC,GAAG,CAAC,mBAAmB,CAAC,GAAG,KAAK,CAAC,YAAY,CAAC;IAC9C,qDAAqD;IACrD,GAAG,CAAC,qBAAqB,CAAC,GAAG,GAAG,CAAC;IACjC,OAAO,GAAG,CAAC;AACb,CAAC;AAUD,+FAA+F;AAC/F,MAAM,gBAAgB,GAAG,CAAC,WAAW,EAAE,YAAY,EAAE,oBAAoB,CAAU,CAAC;AAEpF,IAAI,KAAwC,CAAC;AAE7C,oEAAoE;AACpE,IAAI,WAA+B,CAAC;AAEpC;;;;;GAKG;AACH,MAAM,UAAU,YAAY;IAC1B,KAAK,KAAK,SAAS,EAAE,CAAC;IACtB,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,kBAAkB;IAChC,IAAI,WAAW,KAAK,SAAS;QAAE,MAAM,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACrF,WAAW,GAAG,SAAS,CAAC;IACxB,KAAK,GAAG,SAAS,CAAC;AACpB,CAAC;AAED,KAAK,UAAU,SAAS;IACtB,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,sBAAsB,CAAC,CAAC,CAAC;QACrE,WAAW,GAAG,MAAM,CAAC;QACrB,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC;QACzC,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QACpC,MAAM,KAAK,CAAC,KAAK,CAAC,CAAC;QACnB,MAAM,YAAY,GAAG,IAAI,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC;QACtD,MAAM,SAAS,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;QAClC,KAAK,MAAM,GAAG,IAAI,gBAAgB,EAAE,CAAC;YACnC,MAAM,KAAK,GAAG,MAAM,UAAU,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC,QAAQ,EAAE,UAAU,EAAE,OAAO,EAAE,GAAG,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,CAAC;YACnG,IAAI,CAAC,KAAK,CAAC,OAAO;gBAAE,SAAS;YAC7B,0EAA0E;YAC1E,MAAM,UAAU,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,YAAY,EAAE,GAAG,EAAE,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,CAAC;QAC9H,CAAC;QACD,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC;IACjC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,4BAA4B;QAC5B,KAAK,GAAG,SAAS,CAAC;QAClB,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,gFAAgF;AAChF,oCAAoC;AACpC,gFAAgF;AAEhF,wIAAwI;AACxI,MAAM,YAAY,GAAwB,IAAI,GAAG,CAAC;IAChD,WAAW;IACX,iBAAiB;IACjB,eAAe;IACf,cAAc;IACd,aAAa;IACb,YAAY;IACZ,2BAA2B;IAC3B,iBAAiB;IACjB,eAAe;IACf,WAAW;IACX,cAAc;IACd,YAAY;IACZ,eAAe;IACf,mBAAmB;IACnB,qBAAqB;IACrB,aAAa;IACb,eAAe;IACf,2BAA2B;IAC3B,gBAAgB;IAChB,iBAAiB;IACjB,kBAAkB;IAClB,gBAAgB;IAChB,iBAAiB;IACjB,gBAAgB;IAChB,gBAAgB;IAChB,iBAAiB;IACjB,iBAAiB;IACjB,kBAAkB;IAClB,qBAAqB;IACrB,sBAAsB;IACtB,cAAc;IACd,4BAA4B;IAC5B,mBAAmB;IACnB,eAAe;IACf,+BAA+B;IAC/B,eAAe;IACf,mBAAmB;IACnB,qBAAqB;IACrB,iBAAiB;IACjB,cAAc;IACd,kBAAkB;IAClB,kBAAkB;IAClB,cAAc;IACd,sBAAsB;IACtB,gBAAgB;IAChB,4BAA4B;IAC5B,mCAAmC;IACnC,iBAAiB;IACjB,oBAAoB;IACpB,GAAG,CAAC,SAAS,EAAE,QAAQ,EAAE,WAAW,EAAE,WAAW,EAAE,YAAY,EAAE,cAAc,EAAE,aAAa,EAAE,gBAAgB,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;QAClI,QAAQ,IAAI,EAAE;QACd,UAAU,IAAI,EAAE;KACjB,CAAC;CACH,CAAC,CAAC;AAEH;;;;GAIG;AACH,MAAM,gBAAgB,GAAwB,IAAI,GAAG,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAC,CAAC;AAE/F,uEAAuE;AACvE,MAAM,YAAY,GAAwB,IAAI,GAAG,CAAC,CAAC,gBAAgB,EAAE,aAAa,EAAE,wBAAwB,EAAE,cAAc,CAAC,CAAC,CAAC;AAE/H,8CAA8C;AAC9C,MAAM,YAAY,GAAwB,IAAI,GAAG,CAAC,CAAC,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC;AAE/E,oGAAoG;AACpG,SAAS,OAAO,CAAC,GAAW;IAC1B,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC/B,MAAM,IAAI,GAAG,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IAClC,IAAI,KAAK,KAAK,CAAC,CAAC;QAAE,OAAO,EAAE,OAAO,EAAE,GAAG,CAAC,WAAW,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;IACzF,OAAO;QACL,OAAO,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,WAAW,EAAE;QAC1C,UAAU,EAAE,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,EAAE,IAAI,CAAC;QACnE,IAAI,EAAE,GAAG,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,WAAW,EAAE;KACxC,CAAC;AACJ,CAAC;AAED,wGAAwG;AACxG,MAAM,UAAU,kBAAkB,CAAC,GAAW,EAAE,KAAyB;IACvE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;IACnD,IAAI,gBAAgB,CAAC,GAAG,CAAC,OAAO,CAAC;QAAE,OAAO,IAAI,CAAC;IAC/C,MAAM,OAAO,GAAG,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,GAAG,OAAO,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,GAAG,OAAO,MAAM,IAAI,EAAE,CAAC;IACzF,IAAI,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC;QAAE,OAAO,IAAI,CAAC;IAC3C,mFAAmF;IACnF,IAAI,UAAU,KAAK,SAAS,IAAI,YAAY,CAAC,GAAG,CAAC,GAAG,OAAO,IAAI,UAAU,CAAC,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC;QAAE,OAAO,IAAI,CAAC;IAChH,IAAI,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC;QAAE,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,KAAK,IAAI,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;IAChG,sFAAsF;IACtF,IAAI,OAAO,KAAK,QAAQ,IAAI,CAAC,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,SAAS,CAAC;QAAE,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IACxG,IAAI,OAAO,KAAK,KAAK,IAAI,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACxE,0CAA0C;IAC1C,IAAI,OAAO,KAAK,WAAW,IAAI,IAAI,KAAK,QAAQ;QAAE,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;IAC9F,OAAO,KAAK,CAAC;AACf,CAAC;AASD,oHAAoH;AACpH,MAAM,UAAU,eAAe,CAAC,MAAc;IAC5C,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAClC,MAAM,OAAO,GAAkB,EAAE,CAAC;IAClC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QAC9C,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,CAAE,CAAC;QACzB,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,CAAE,CAAC;QAC7B,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACpC,OAAO,CAAC,IAAI,CAAC,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,OAAO,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,OAAO,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC;IACpJ,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAAC,OAA+B;IAC/D,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAClC,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,IAAI,KAAK,CAAC,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS;YAAE,SAAS;QACpE,IAAI,kBAAkB,CAAC,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,KAAK,CAAC;YAAE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACzE,CAAC;IACD,OAAO,CAAC,GAAG,OAAO,CAAC,CAAC;AACtB,CAAC;AAED,gFAAgF;AAChF,kCAAkC;AAClC,gFAAgF;AAEhF,mFAAmF;AACnF,KAAK,UAAU,OAAO,CAAC,IAAc,EAAE,GAAW,EAAE,GAAuC,EAAE,KAAa,EAAE,KAAc;IACxH,OAAO,UAAU,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC,GAAG,UAAU,CAAC,KAAK,CAAC,EAAE,GAAG,IAAI,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC;AACvF,CAAC;AAED,wDAAwD;AACxD,KAAK,UAAU,QAAQ,CAAC,IAAkB,EAAE,IAAY;IACtD,OAAO,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;AACrD,CAAC;AAED,2CAA2C;AAC3C,KAAK,UAAU,MAAM,CAAC,IAAY;IAChC,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CACtB,GAAG,EAAE,CAAC,IAAI,EACV,GAAG,EAAE,CAAC,KAAK,CACZ,CAAC;AACJ,CAAC;AAED,gHAAgH;AAChH,KAAK,UAAU,WAAW,CAAC,MAAc;IACvC,KAAK,MAAM,IAAI,IAAI,CAAC,MAAM,EAAE,SAAS,EAAE,MAAM,CAAC;QAAE,IAAI,CAAC,CAAC,MAAM,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC;YAAE,OAAO,KAAK,CAAC;IACtG,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,mBAAmB,CAAC,GAAW,EAAE,IAAY;IAC1D,IAAI,MAAM,GAAG,GAAG,CAAC;IACjB,SAAS,CAAC;QACR,IAAI,CAAC,MAAM,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,WAAW,CAAC,MAAM,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC;QACrF,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;QAC/B,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,MAAM,KAAK,MAAM;YAAE,OAAO,KAAK,CAAC;QAC/D,MAAM,GAAG,MAAM,CAAC;IAClB,CAAC;AACH,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,OAAgB,EAAE,GAAW,EAAE,GAAuC,EAAE,KAAa;IAC3H,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,OAAO,CAAC;IACpC,MAAM,MAAM,GAAG,CAAC,OAAe,EAAE,EAAE,CAAC,WAAW,CAAC,SAAS,EAAE,kBAAkB,IAAI,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC,CAAC;IAExG,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,CAAC,WAAW,EAAE,wBAAwB,EAAE,WAAW,EAAE,kBAAkB,EAAE,sBAAsB,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;IACjJ,MAAM,CAAC,MAAM,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACvF,IAAI,CAAC,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC;QAC1B,8EAA8E;QAC9E,IAAI,MAAM,mBAAmB,CAAC,GAAG,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YAChD,MAAM,MAAM,CAAC,wCAAwC,GAAG,KAAK,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QACxF,CAAC;QACD,OAAO;IACT,CAAC;IAED,KAAK,MAAM,IAAI,IAAI,CAAC,MAAM,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,SAAS,CAAC,EAAE,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,EAAE,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,EAAE,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,EAAE,CAAC;QAC9I,IAAI,CAAC,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YAAE,MAAM,MAAM,CAAC,qBAAqB,GAAG,yBAAyB,IAAI,EAAE,CAAC,CAAC;IAC3G,CAAC;IAED,MAAM,UAAU,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,SAAS,EAAE,MAAM,EAAE,YAAY,CAAC,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;IAC5G,KAAK,MAAM,IAAI,IAAI,UAAU,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QAC7C,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAC1B,IAAI,KAAK,KAAK,EAAE,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAS;QACpD,IAAI,CAAC,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,SAAS,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC,CAAC;YAAE,MAAM,MAAM,CAAC,kBAAkB,MAAM,oCAAoC,KAAK,EAAE,CAAC,CAAC;IACvJ,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,CAAC,QAAQ,EAAE,QAAQ,EAAE,eAAe,EAAE,cAAc,EAAE,IAAI,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;IAC3G,IAAI,CAAC,MAAM,CAAC,OAAO;QAAE,MAAM,MAAM,CAAC,uDAAuD,MAAM,KAAK,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IAC5H,MAAM,IAAI,GAAG,iBAAiB,CAAC,eAAe,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;IAC/D,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACpB,MAAM,MAAM,CAAC,uCAAuC,MAAM,yDAAyD,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACxI,CAAC;IAED,wEAAwE;IACxE,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;QACpB,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,CAAC,WAAW,EAAE,iBAAiB,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;QAC7E,IAAI,GAAG,CAAC,OAAO,IAAI,CAAC,MAAM,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,aAAa,CAAC,CAAC,CAAC;YAAE,OAAO,GAAG,IAAI,CAAC;IAC5F,CAAC;IACD,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,CAAC,UAAU,EAAE,eAAe,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,KAAK,EAAE,kCAAkC,CAAC,CAAC;QAClH,IAAI,CAAC,OAAO,CAAC,OAAO;YAAE,MAAM,MAAM,CAAC,qCAAqC,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QAC5G,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC;IACpG,CAAC;IACD,IAAI,OAAO,EAAE,CAAC;QACZ,MAAM,MAAM,CAAC,kBAAkB,MAAM,6GAA6G,CAAC,CAAC;IACtJ,CAAC;AACH,CAAC;AAED,sFAAsF;AACtF,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC;AAE7C;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,OAAgB,EAChB,IAAuB,EACvB,GAAuB,EACvB,GAAmD;IAEnD,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;IACzF,MAAM,KAAK,GAAG,MAAM,YAAY,EAAE,CAAC;IACnC,MAAM,OAAO,GAAG,eAAe,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACrD,IAAI,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAC5C,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,QAAQ,GAAG,iBAAiB,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;QACpE,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IACzC,CAAC;IACD,MAAM,QAAQ,CAAC;IAEf,MAAM,OAAO,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC;IAC1B,6GAA6G;IAC7G,IAAI,OAAO,CAAC,CAAC,CAAC,KAAK,UAAU;QAAE,OAAO,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,EAAE,SAAS,CAAC,CAAC;IAC/D,IAAI,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAAE,OAAO,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,EAAE,yBAAyB,CAAC,CAAC;IACrF,OAAO,EAAE,IAAI,EAAE,CAAC,GAAG,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,GAAG,OAAO,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,GAAG,OAAO,EAAE,GAAG,GAAG,EAAE,EAAE,CAAC;AACtG,CAAC"}

package/dist/procedures/git/run.d.ts

@@ -26,7 +26,8 @@ export declare class GitError extends Error {
 }
 /**
  * This function runs `git <args>` and gives its stdout. It throws a `GitError` when git fails,
- * and an `AbortError` when the signal aborts.
+ * and an `AbortError` when the signal aborts. In the handler of a git procedure under a root
+ * (`underGitRoot()`), git stays in the root: `confinedGitCommand()` of `root.ts`.
  */
 export declare function git(args: string[], options?: GitRunOptions): Promise<string>;
 /** This function splits output that git wrote with `-z` into its fields. */

package/dist/procedures/git/run.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"run.d.ts","sourceRoot":"","sources":["../../../src/procedures/git/run.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAKH,sEAAsE;AACtE,MAAM,WAAW,UAAU;IACzB,MAAM,CAAC,EAAE,WAAW,GAAG,SAAS,CAAC;CAClC;AAED,MAAM,WAAW,aAAc,SAAQ,UAAU;IAC/C,GAAG,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACzB,+EAA+E;IAC/E,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3B,uEAAuE;IACvE,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,SAAS,CAAC;CAC1C;AAED,+DAA+D;AAC/D,qBAAa,QAAS,SAAQ,KAAK;IAE/B,QAAQ,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE;IAChC,QAAQ,CAAC,QAAQ,EAAE,MAAM;IACzB,QAAQ,CAAC,MAAM,EAAE,MAAM;IACvB,QAAQ,CAAC,MAAM,EAAE,MAAM;IAJzB,YACW,IAAI,EAAE,SAAS,MAAM,EAAE,EACvB,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,MAAM,EAIxB;CACF;AAED;;;GAGG;AACH,wBAAsB,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,OAAO,GAAE,aAAkB,GAAG,OAAO,CAAC,MAAM,CAAC,CAwBtF;AAED,4EAA4E;AAC5E,wBAAgB,OAAO,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,CAIhD"}
+{"version":3,"file":"run.d.ts","sourceRoot":"","sources":["../../../src/procedures/git/run.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAMH,sEAAsE;AACtE,MAAM,WAAW,UAAU;IACzB,MAAM,CAAC,EAAE,WAAW,GAAG,SAAS,CAAC;CAClC;AAED,MAAM,WAAW,aAAc,SAAQ,UAAU;IAC/C,GAAG,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACzB,+EAA+E;IAC/E,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3B,uEAAuE;IACvE,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,SAAS,CAAC;CAC1C;AAED,+DAA+D;AAC/D,qBAAa,QAAS,SAAQ,KAAK;IAE/B,QAAQ,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE;IAChC,QAAQ,CAAC,QAAQ,EAAE,MAAM;IACzB,QAAQ,CAAC,MAAM,EAAE,MAAM;IACvB,QAAQ,CAAC,MAAM,EAAE,MAAM;IAJzB,YACW,IAAI,EAAE,SAAS,MAAM,EAAE,EACvB,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,MAAM,EAIxB;CACF;AAED;;;;GAIG;AACH,wBAAsB,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,OAAO,GAAE,aAAkB,GAAG,OAAO,CAAC,MAAM,CAAC,CA0BtF;AAED,4EAA4E;AAC5E,wBAAgB,OAAO,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,CAIhD"}

package/dist/procedures/git/run.js

@@ -7,6 +7,7 @@
  */
 import { runCommand } from "@procedures/shell/command";
 import { GIT_MAX_BUFFER } from "./args.js";
+import { confinedGitCommand, currentGitRoot } from "./root.js";
 /** A git command that ended with an exit code other than 0. */
 export class GitError extends Error {
     args;
@@ -24,15 +25,18 @@ export class GitError extends Error {
 }
 /**
  * This function runs `git <args>` and gives its stdout. It throws a `GitError` when git fails,
- * and an `AbortError` when the signal aborts.
+ * and an `AbortError` when the signal aborts. In the handler of a git procedure under a root
+ * (`underGitRoot()`), git stays in the root: `confinedGitCommand()` of `root.ts`.
  */
 export async function git(args, options = {}) {
+    const root = currentGitRoot();
+    const command = root === undefined ? { args, cwd: options.cwd, env: options.env } : await confinedGitCommand(root, args, options.cwd, options.env);
     const result = await runCommand("git", {
-        args,
-        cwd: options.cwd,
+        args: command.args,
+        cwd: command.cwd,
         signal: options.signal,
         input: options.input,
-        env: options.env,
+        env: command.env,
         maxOutputBytes: GIT_MAX_BUFFER,
     });
     if (result.aborted) {

package/dist/procedures/git/run.js.map

@@ -1 +1 @@
-{"version":3,"file":"run.js","sourceRoot":"","sources":["../../../src/procedures/git/run.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAC;AACvD,OAAO,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAe3C,+DAA+D;AAC/D,MAAM,OAAO,QAAS,SAAQ,KAAK;IAEtB,IAAI;IACJ,QAAQ;IACR,MAAM;IACN,MAAM;IAJjB,YACW,IAAuB,EACvB,QAAgB,EAChB,MAAc,EACd,MAAc;QAEvB,KAAK,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,iBAAiB,QAAQ,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;oBAL9E,IAAI;wBACJ,QAAQ;sBACR,MAAM;sBACN,MAAM;QAGf,IAAI,CAAC,IAAI,GAAG,UAAU,CAAC;IACzB,CAAC;CACF;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,GAAG,CAAC,IAAc,EAAE,OAAO,GAAkB,EAAE;IACnE,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,KAAK,EAAE;QACrC,IAAI;QACJ,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,cAAc,EAAE,cAAc;KAC/B,CAAC,CAAC;IACH,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QACnB,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC,OAAO,IAAI,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC;QACtD,KAAK,CAAC,IAAI,GAAG,YAAY,CAAC;QAC1B,MAAM,KAAK,CAAC;IACd,CAAC;IACD,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CAAC,sBAAsB,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;IACxD,CAAC;IACD,IAAI,MAAM,CAAC,SAAS,EAAE,MAAM,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CAAC,qBAAqB,IAAI,CAAC,CAAC,CAAC,mBAAmB,cAAc,QAAQ,CAAC,CAAC;IACzF,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,IAAI,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;IAC1E,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC;AACvB,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,OAAO,CAAC,MAAc;IACpC,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAClC,IAAI,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE;QAAE,MAAM,CAAC,GAAG,EAAE,CAAC;IACvC,OAAO,MAAM,CAAC;AAChB,CAAC"}
+{"version":3,"file":"run.js","sourceRoot":"","sources":["../../../src/procedures/git/run.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAC;AACvD,OAAO,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAC3C,OAAO,EAAE,kBAAkB,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAe/D,+DAA+D;AAC/D,MAAM,OAAO,QAAS,SAAQ,KAAK;IAEtB,IAAI;IACJ,QAAQ;IACR,MAAM;IACN,MAAM;IAJjB,YACW,IAAuB,EACvB,QAAgB,EAChB,MAAc,EACd,MAAc;QAEvB,KAAK,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,iBAAiB,QAAQ,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;oBAL9E,IAAI;wBACJ,QAAQ;sBACR,MAAM;sBACN,MAAM;QAGf,IAAI,CAAC,IAAI,GAAG,UAAU,CAAC;IACzB,CAAC;CACF;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,GAAG,CAAC,IAAc,EAAE,OAAO,GAAkB,EAAE;IACnE,MAAM,IAAI,GAAG,cAAc,EAAE,CAAC;IAC9B,MAAM,OAAO,GAAG,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,MAAM,kBAAkB,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;IACnJ,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,KAAK,EAAE;QACrC,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,cAAc,EAAE,cAAc;KAC/B,CAAC,CAAC;IACH,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QACnB,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC,OAAO,IAAI,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC;QACtD,KAAK,CAAC,IAAI,GAAG,YAAY,CAAC;QAC1B,MAAM,KAAK,CAAC;IACd,CAAC;IACD,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CAAC,sBAAsB,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;IACxD,CAAC;IACD,IAAI,MAAM,CAAC,SAAS,EAAE,MAAM,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CAAC,qBAAqB,IAAI,CAAC,CAAC,CAAC,mBAAmB,cAAc,QAAQ,CAAC,CAAC;IACzF,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,IAAI,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;IAC1E,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC;AACvB,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,OAAO,CAAC,MAAc;IACpC,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAClC,IAAI,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE;QAAE,MAAM,CAAC,GAAG,EAAE,CAAC;IACvC,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/package.json

@@ -1,7 +1,7 @@
 {
   "$schema": "https://json.schemastore.org/package",
   "name": "@procedures/git",
-  "version": "0.8.1",
+  "version": "0.9.1",
   "description": "Git as 45 typed procedures: status, diff, log, show, blame, commit, push, pull, branch, tag, merge, rebase, worktree, stash and more, run with argv, async and abortable.",
   "keywords": [
     "git",
@@ -60,13 +60,13 @@
     "procedures": "./dist/register.js"
   },
   "dependencies": {
-    "@procedures/client": "0.8.1",
-    "@procedures/shell": "0.8.1",
+    "@procedures/client": "0.9.1",
+    "@procedures/fs": "0.9.1",
+    "@procedures/shell": "0.9.1",
     "zod": "^4.6.5"
   },
   "devDependencies": {
     "@mark1russell7/cue": "^1.0.0",
-    "@procedures/fs": "0.8.1",
     "@types/node": "^22.0.0",
     "typescript": "^7.0.2",
     "vitest": "^5.0.3"

package/src/module.ts

@@ -7,7 +7,8 @@
  * This file is referenced by package.json's client.procedures field.
  */
 
-import { createProcedure, zodAdapter, defineModule, type AnyProcedure, type Effects, type FsRootRules, type ProcedureModule, PROCEDURE_REGISTRY, registerModules, type ProcedureRegistry } from "@procedures/client";
+import { createProcedure, zodAdapter, defineModule, type AnyProcedure, type Effects, type FsRootRules, type ProcedureContext, type ProcedureModule, PROCEDURE_REGISTRY, registerModules, type ProcedureRegistry } from "@procedures/client";
+import { underGitRoot } from "./procedures/git/root.js";
 import { gitStatus } from "./procedures/git/status.js";
 import { gitAdd } from "./procedures/git/add.js";
 import { gitCommit } from "./procedures/git/commit.js";
@@ -245,20 +246,51 @@ const CHANGES_REPOSITORY: Effects = { reads: ["fs"], writes: ["fs"] };
 const RUNS_HOOKS: Effects = { reads: ["fs"], writes: ["fs", "process"] };
 
 /**
- * The rule of each git procedure under a root of the files (roadmap R33): a host with a root
- * refuses it. A root cannot keep git in its folder for two reasons:
- * - Git looks for the repository in the folders above the working folder, so a working folder in
- *   the root can open a repository outside it.
- * - The configuration of a repository can start a program: a hook, `core.fsmonitor` or a filter.
- *   A client with `fs.write` in the root can write that configuration.
+ * The rules of the git procedures under a root of the files (roadmap R33, tracker item O35). Each
+ * git procedure is confined: the working folder `cwd` is in the root, and its default is the root.
+ * The handler runs in `underGitRoot()`, so git stays in the root (`procedures/git/root.ts`):
+ * - `GIT_CEILING_DIRECTORIES` stops git at the root, so git finds no repository above the root.
+ * - The `-c` options turn off the hooks, `core.fsmonitor`, the local transports and the
+ *   submodules. The configuration of the system and the global configuration do not apply.
+ * - Before the first command in a folder, git examines the repository: a configuration key that
+ *   starts a program, a folder outside the root or a submodule is refused.
  */
-const REFUSED_UNDER_A_ROOT: FsRootRules = {
-  refuse: "the configuration of a repository can start a program (a hook, core.fsmonitor, a filter), and git looks for the repository in the folders above the working folder",
+const IN_A_ROOT: FsRootRules = { cwd: "cwd" };
+
+/** A procedure whose `paths` are pathspecs from the working folder. */
+const WITH_PATHSPECS: FsRootRules = { cwd: "cwd", names: ["paths"] };
+
+/** The rules of the procedures that name more than the working folder. The others get `IN_A_ROOT`. */
+const ROOT_RULES: Readonly<Record<string, FsRootRules>> = {
+  "git.status": WITH_PATHSPECS,
+  "git.add": WITH_PATHSPECS,
+  "git.commit": WITH_PATHSPECS,
+  "git.checkout": WITH_PATHSPECS,
+  "git.diff": WITH_PATHSPECS,
+  "git.stash.push": WITH_PATHSPECS,
+  "git.reset": WITH_PATHSPECS,
+  "git.restore": WITH_PATHSPECS,
+  "git.blame": { cwd: "cwd", names: ["path"] },
+  // The URL goes to the network only: the transports file and ext are off under a root
+  "git.clone": { cwd: "cwd", names: ["dest"] },
+  "git.worktree.add": { cwd: "cwd", names: ["path"] },
+  "git.worktree.remove": { cwd: "cwd", names: ["path"] },
 };
 
-/** The procedure with the rule of a root. */
+/**
+ * The procedure with its rules under a root. Its handler runs in `underGitRoot()` with the root of
+ * the call (`ctx.fsRoot`). Without a root, the handler runs as before.
+ */
 function underARoot(procedure: AnyProcedure): AnyProcedure {
-  return { ...procedure, metadata: { ...procedure.metadata, fsRoot: REFUSED_UNDER_A_ROOT } };
+  const handler = procedure.handler as ((input: unknown, ctx: ProcedureContext) => Promise<unknown>) | undefined;
+  const fsRoot = ROOT_RULES[procedure.path.join(".")] ?? IN_A_ROOT;
+  return {
+    ...procedure,
+    metadata: { ...procedure.metadata, fsRoot },
+    ...(handler === undefined
+      ? {}
+      : { handler: ((input: unknown, ctx: ProcedureContext) => underGitRoot(ctx?.fsRoot, procedure.path, () => handler(input, ctx))) as AnyProcedure["handler"] }),
+  };
 }
 
 // =============================================================================

package/src/procedures/git/clone.ts

@@ -7,6 +7,7 @@
 import { join, basename } from "node:path";
 import { gitArg } from "./args.js";
 import { git, type GitContext } from "./run.js";
+import { pathInGitRoot, remoteUrlInGitRoot } from "./root.js";
 import type { GitCloneInput, GitCloneOutput } from "../../types.js";
 
 /**
@@ -18,6 +19,9 @@ export async function gitClone(input: GitCloneInput, ctx: GitContext = {}): Prom
   // Determine destination directory
   const destDir = dest || basename(url, ".git").replace(/\.git$/, "");
   const fullPath = cwd ? join(cwd, destDir) : destDir;
+  // Under a root, the folder of the clone is in the root, also when it comes from the URL ("..")
+  await pathInGitRoot(fullPath);
+  remoteUrlInGitRoot(url);
 
   const args: string[] = ["clone"];
   if (branch) args.push("-b", branch);