@procedures/git 0.9.0 → 0.9.1

package/CHANGELOG.md

@@ -1,5 +1,26 @@
 # @procedures/git
 
+## 0.9.1
+
+### Patch Changes
+
+- b5db4d8: Under the root of the files of a host, the `git.*` procedures are confined, not refused (roadmap R33, tracker item O35). Without a root, nothing changes. PATCH: a procedure that the root refused now works in the root.
+  
+  - The core: `ProcedureContext.fsRoot` is the root of a confined call. `confineToRoot()` of `@procedures/fs` gives it to the handler of each confined procedure and of each program procedure.
+  - The working folder `cwd` of each `git.*` procedure must be in the root, and its default is the root. The pathspecs, the `path` of `git.blame` and of the worktree procedures, and the `dest` of `git.clone` must be in the root too.
+  - Under a root, git runs with `GIT_CEILING_DIRECTORIES` at the parent of the root, so it finds no repository above the root. The configuration of the system does not apply. The global configuration has only `user.name`, `user.email` and `init.defaultBranch` of the host.
+  - The `-c` options turn off the hooks (an empty `core.hooksPath`) and `core.fsmonitor`. Only the transports https, http, ssh and git are permitted. Git does not go into a submodule.
+  - Before the first command in a folder, git examines the repository. A repository outside the root (through a `.git` file or an alternate object folder), a repository with submodules, and a configuration key that starts a program are refused: `filter.*`, `diff.external`, `core.sshCommand`, `credential.helper`, `include.path` and the others. The error names each key.
+  - `git.clone` and `git.remote.set` refuse a URL with `::` under a root.
+  - `@procedures/git` now depends on `@procedures/fs` (for the rules of `@procedures/fs/root`).
+- Updated dependencies [61d60c6]
+- Updated dependencies [79f750a]
+- Updated dependencies [d0c9856]
+- Updated dependencies [b5db4d8]
+  - @procedures/client@0.9.1
+  - @procedures/fs@0.9.1
+  - @procedures/shell@0.9.1
+
 ## 0.9.0
 
 ### Patch Changes

package/README.md

@@ -1179,6 +1179,19 @@ const customStatusProcedure = createProcedure()
 registerProcedures([customStatusProcedure]);
 ```
 
+## The root of the files
+
+A host with a root (`mark --fs-root`, `procedure-server --fs-root`, `MCP_FS_ROOT`) confines each `git.*` procedure to the root (roadmap R33, tracker item O35). Without a root, nothing changes.
+
+- The working folder `cwd` must be in the root, and its default is the root. The pathspecs `paths`, the `path` of `git.blame` and of the worktree procedures, and the `dest` of `git.clone` start at `cwd`. They must be in the root too.
+- `GIT_CEILING_DIRECTORIES` is the parent of the root, so git does not find a repository above the root.
+- The configuration of the system does not apply. The global configuration has only `user.name`, `user.email` and `init.defaultBranch` of the host, so a credential helper of the host does not apply.
+- Git starts no hook and no `core.fsmonitor` program. Only the transports https, http, ssh and git are permitted, and git does not go into a submodule.
+- Before the first command in a folder, the procedure examines the repository. It refuses a repository outside the root, a repository with submodules, and a configuration key that starts a program. Examples are `filter.*.clean`, `core.sshCommand`, `credential.helper` and `include.path`.
+- A refusal is `FORBIDDEN` with the reason `outside-root`. The error names each refused key.
+
+The list of the keys is in [CAPABILITIES-2026-10.md](../documentation/CAPABILITIES-2026-10.md#git-under-a-root).
+
 ## Error Handling
 
 All git procedures may throw errors for invalid operations: