#!/usr/bin/perl

=pod

=head1 NAME

git-client - Git Client Wrapper

=head1 DESCRIPTION

Wrapper around the real git for augmented functionality.

=head2 .gitconfig Override

Allows for .gitconfig descent override files up until the $HOME directory.
All descent .gitconfig files will be honored, although files closest
to the git working directory will take precedence. All these descent
.gitconfig files take precedence over --global config files,
which take precedence over --system files in case of duplicate settings.
And --local config files take precedence over all these descent files
and all other --global and --system files.

=head2 -O <OPTION>

Populates GIT_OPTION_* environment variables on server side.
These ENV settings will be available to all the server side
hooks, including the pre-* hooks.
Note that for this to work, the git ssh server must have
"AcceptEnv XMODIFIERS" enabled in its sshd_config.

=head2 -v | --version | version

Shows both git-client version and git version and exits.

=head2 DEBUG

Sets DEBUG environment on server side to match the same numeric value
as set on the client invoker.

=head1 INSTALL

Just make sure this program comes BEFORE the
real "git" program in the PATH.

For example, as super user, you could do this:

  [root@deploy-host ~]# wget -N -P /usr/local/bin https://raw.githubusercontent.com/hookbot/git-server/master/git-client
  [root@deploy-host ~]# chmod 755 /usr/local/bin/git-client
  [root@deploy-host ~]# ln -s -v git-client /usr/local/bin/git
  [root@deploy-host ~]#

Or as normal user, you could do this:

  [user@deploy-host ~]$ mkdir -p ~/bin
  [user@deploy-host ~]$ wget -N -P ~/bin https://raw.githubusercontent.com/hookbot/git-server/master/git-client
  [user@deploy-host ~]$ chmod 755 ~/bin/git-client
  [user@deploy-host ~]$ ln -s -v git-client ~/bin/git
  [user@deploy-host ~]$ grep 'PATH=$HOME/bin' ~/.bash_profile || echo 'export PATH=$HOME/bin:$PATH' | tee -a ~/.bash_profile
  [user@deploy-host ~]$

=head1 SYNOPSIS

  cd ~/src/github/project
  git config --file ../.gitconfig user.email 'hookbot@github.com'
  git config --list

=head1 PURPOSE

Allows you to use many different .gitconfig files
within each folder of git repos. If there is no
.gitconfig within the directory descent structure,
then it will behave exactly like the normal git.

=head1 AUTHOR

Rob Brown <bbb@cpan.org>

=head1 COPYRIGHT AND LICENSE

Copyright 2016-2026 by Rob Brown <bbb@cpan.org>

This library is free software; you can redistribute it and/or modify it under the same terms as Perl itself.

=cut

use strict;
use Cwd qw(abs_path);

our $VERSION = "0.041";

# Locate the real "git" later in the $PATH (after myself)
our $real_git = find_real_git();

# By default, silence any error spewages for internal git usage.
our $HANDLE_STDERR = sub { open STDERR, ">", "/dev/null" };

if ("@ARGV" =~ /^(-v|(?:--|)version)$/ and $real_git =~ m{^(.*/)}) {
    my $nextpath = $1;
    print "[git-client v$VERSION] $0 => ";
    my $g;
    print $nextpath if open $g, "<", $real_git and $g = getc $g and $g ne "#";
    print git("--version");
    exit;
}

# Handle [ -C <dir> ] first
if (eval { require Getopt::Long; 1; } and
    Getopt::Long::Configure(qw[pass_through no_ignore_case bundling]) and
    Getopt::Long::GetOptions( "chdir|C=s" => (my $chdir=[]) ),
    ) {
    foreach (@$chdir) { chdir $_ or die "fatal: cannot change to '$_': $!\n"; }
}

# Grab special options for XMODIFIERS transport
pass_options();

# Scan for .gitconfig files in descent directories
scan_descent_override();

# Having a "git-deploy" command in the path works fine to pretend like "git deploy" is a command,
# but "git-config" will be ignored since /usr/libexec/git-core/git-config will always come first in the PATH.
# So we must handle all "git config" overrides within this "git" wrapper.
handle_config(@ARGV);

exec $real_git, @ARGV;

# Provide special options through "SendEnv XMODIFIERS" to make available in pre-hooks prior to running the real git command on the server
sub pass_options {
    my ($op) = grep { /^(clone|fetch|pull|ls-remote|push)$/ } @ARGV;
    return if !$op or ($ENV{XMODIFIERS}||"") =~ /\bclient=/;
    # Need to search for special "-o" options for XMODIFERS transport
    my @options = ();
    my $pull_branch = "";
    push @options, "DEBUG=$ENV{DEBUG}" if defined $ENV{DEBUG};
    if (eval { require Getopt::Long; 1; } and
        Getopt::Long::GetOptions( "O=s" => \@options )) { # Strip stealth -O args from ARGV so the real git doesn't choke on it
        if (my $rest_opt = ($op ne "clone" && "o|")."server-option|push-option=s") { # Ignore -o<origin> for "git clone"
            local @ARGV = @ARGV; # Don't monkey anything. Just peek.
            Getopt::Long::GetOptions( $rest_opt => \@options, "branch|b=s" => \$pull_branch ); # Handle "git clone -b <ref> <repo>"
        }
    }
    $pull_branch = $1 if $op eq "pull" and git(qw[branch -a]) =~ m{^\* ([\w/\-.@]+)\s*$}m;
    push @options, "pull_branch=$pull_branch" if $pull_branch;
    push @options, "client=".abs_path($0)."\@v$VERSION";
    push @options, $ENV{XMODIFIERS} if $ENV{XMODIFIERS};
    $ENV{XMODIFIERS} = join "\n", @options;
    $ENV{GIT_SSH_COMMAND} ||= git(qw[config core.sshCommand]) =~ /^(.+)/ ? $1 : "ssh";
    $ENV{GIT_SSH_COMMAND} = "$ENV{GIT_SSH_COMMAND} -o SendEnv=XMODIFIERS";
}

sub find_real_git {
    my $myself = (stat $0)[1] or die "$0: Can't find my inode?\n";
    my $found_git = "";
    $ENV{GIT_CLIENT_TRIED} ||= $0;
    require File::Spec;
    foreach my $path (File::Spec->path) {
        my $try = "$path/git";
        if (my @stat = stat $try) {
            if ($stat[1] == $myself) {
                # Ignore myself
            }
            elsif ($ENV{GIT_CLIENT_TRIED} =~ /^\Q$try\E$/m) {
                # Already tried
            }
            else {
                # First executable one in the path that isn't me is the winner
                $found_git = $try;
                $ENV{GIT_CLIENT_TRIED} = join "\n", $found_git, split /\n/, $ENV{GIT_CLIENT_TRIED};
                last;
            }
        }
    }

    $found_git ||= "/usr/bin/git";
    -x $found_git or die "$found_git: Unable to execute\n";
    return $found_git;
}

# Capture "git" command output
sub git {
    return eval {
        if (my $pid = open my $fh_out, "-|") {
            # Parent: Read answer and wait for the child zombie to clear.
            return [join("",<$fh_out>), waitpid($pid,0), close($fh_out)]->[0];
        }
        # Child runs the git command
        $HANDLE_STDERR->();
        # Secure exec @array method to avoid having to shell escape arguments containing spaces or other dangerous chars
        exec $real_git, @_ or exit 1;
    };
}

# Jam equivalent "-c" config settings into @ARGV for any descent .gitconfig files and set GIT_CLIENT_OVERRIDE* env.
sub scan_descent_override {
    return if exists $ENV{GIT_CLIENT_OVERRIDE};
    $ENV{GIT_CLIENT_OVERRIDE} = "";
    my $descent_config_files = [];
    my $last = ".";
    $ENV{HOME} ||= (getpwnam $<)[7];
    while (1) {
        my $scan = abs_path( $last eq "." && !-d "$last/.git" ? $last : "$last/.." );
        last if $scan eq $last or $scan eq $ENV{HOME};
        $last = $scan;
        my $try = "$scan/.gitconfig";
        if (-r $try) {
            warn "DEBUG: $try: Override\n" if $ENV{DEBUG};
            unshift @$descent_config_files, $try;
        }
    }
    if (@$descent_config_files) {
        $ENV{GIT_CLIENT_OVERRIDE} = join "\n", @$descent_config_files;
        my $cmd_settings = [];
        my $descent_names = {};
        my $descent_counter = 0;
        foreach my $config_file (@$descent_config_files) {
            my $settings = git(qw[ config --list --file ], $config_file);
            $descent_counter++;
            while ($settings =~ s/^([^=\r\n]+)=(.*?)\r?\n?$//m) {
                my $name = $1;
                my $value = $2;
                push @$cmd_settings, "$name=$value";
                $descent_names->{$name} = $value;
                $ENV{"GIT_CLIENT_OVERRIDE_$descent_counter"}++;
            }
        }
        if (my $local_settings = git(qw[ config --list --local ])) {
            while ($local_settings =~ s/^([^=\r\n]+)=(.*?)\r?\n?$//m) {
                my $name = $1;
                my $value = $2;
                if (defined $descent_names->{$name}) {
                    # It seems better to double override than to completely leave out the duplicate descent setting
                    push @$cmd_settings, "$name=$value";
                    $ENV{GIT_CLIENT_OVERRIDE_0}++;
                }
            }
        }
        while (my $setting = pop @$cmd_settings) {
            unshift @ARGV, -c => $setting;
        }
    }
    else {
        # No effective .gitconfig files found in descent, so nothing to do
    }
}

# Special "config" handler to honor new --descent option
sub handle_config {
    my @args = @_;
    local @ARGV = @args;
    # Don't try to handle the "--help"-first case.
    return if join(" ", @ARGV) =~ /config --help\b/;
    if (grep {$_ eq "config"} @ARGV and
        # Smells like special "git config" command
        eval { require Getopt::Long; 1; } and
        Getopt::Long::Configure(qw[pass_through no_ignore_case require_order]) and
        Getopt::Long::GetOptions( "c=s" => (my $c=[]) ) and # XXX: Is is safe to ignore -c <name>=<value> args?
        $ARGV[0] eq "config" and
        do {
            # Handle naked "git config" case to make sure the usage can be updated before sending it
            push @_,"--usage" and push @ARGV,"--usage" if 1 == @ARGV;
            # Also handle new-fangled git >= 2.46.x "git config <command_without_dashes>" syntax:
            $ARGV[1]=~/^([a-z][a-z\-]+)$/ && ($ARGV[1]="--$1");
            1;
        } and
        Getopt::Long::Configure(qw[no_bundling no_require_order]) and
        Getopt::Long::GetOptions(
            # Scope
            "descent"      => \(my $descent),
            "global"       => \(my $global),
            "system"       => \(my $system),
            "local"        => \(my $local),
            "worktree"     => \(my $work),
            "f|file=s"     => \(my $file),

            # Action
            "l|list"       => \(my $list),
            "e|edit"       => \(my $edit),
            "get|get-all|get-regexp=s{1,2}" => \(my $get),
            "remove-section=s{1}" => \(my $action_1_arg),
            "set|get-urlmatch|rename-section=s{2}" => \(my $action_2_arg),
            "get-color|get-colorbool=s{1,2}" => \(my $action_1_2_arg),
            "replace-all=s{2,3}" => \(my $action_2_3_arg),

            # Other
            "all"          => \(my $all),
            "fixed-value"  => \(my $fixed),
            "z|null"       => \(my $null),
            "name-only"    => \(my $nameonly),
            "show-origin"  => \(my $origin),
            "show-scope"   => \(my $scope),
            "h|help|usage" => \(my $help),
        )
    ) {
        # Looks like this "config" command may need special attention
        my $descent_config_files = [ split /\n/, $ENV{GIT_CLIENT_OVERRIDE} ];
        if ($descent) {
            # Swap "--descent" for "--file <DESCENT_CONFIG_FILE>"
            # If more than one descent file, then just use the closest one
            @_ = map { $_ =~ /^--des/ ? ("--file" => ($descent_config_files->[-1] || "/dev/null")) : ($_) } @_;
        }
        # error: only one action at a time:
        map { ($_ eq "config" and ++$help) ? ($_,"--list","--edit") : ($_) } @_ if 1 < !!$list + !!$edit + !!$get + !!$action_1_arg + !!$action_2_arg + !!$action_1_2_arg + !!$action_2_3_arg;
        # error: only one config file at a time:
        map { ($_ eq "config" and ++$help) ? ($_,"--system","--global") : ($_) } @_ if 1 < !!$file + !!$descent + !!$global + !!$system + !!$local;
        # If it's not an implemented action or unrecognized args, then just let the regular git handle it:
        return @ARGV = @_ if !$help && !$list && !$get;
        # Keep STDERR in case the usage spewage needs to be tweaked to mention the --descent option.
        require File::Temp;
        my $tmp = File::Temp->new( UNLINK => 1, SUFFIX => '.err' );;
        local $HANDLE_STDERR = sub { open STDERR, ">", "$tmp" };
        my $out = git @_;
        my $exit_status = $? >> 8;
        eval { $tmp->seek(0, 0);1 } or open $tmp, "<", "$tmp";
        my $err = join "", <$tmp>;
        exit $exit_status if !length $out and !length $err;

        if ($help or !length $out or $err =~ /usage: git config/) {
            # Looks like the USAGE Spewage:
            $err =~ s/^error: unknown option .usage.\s*//m;
            $err =~ s/(Config file location\n)(( +)(\-.*global)(  +)\S.*global)/"$1"."$3--descent".(" "x(length("$4$5")-9))."use descent .gitconfig files\n$2"/e;
            $err =~ s/\n?$/\n/;
            warn $err;
            print $out;
            exit $exit_status;
        }
        # No more munging STDERR so just spit it out, if any
        warn $err if $err;
        # XXX - Do we also need to more-gracefully handle --show-scope or --show-origin with --get or --get-all or --get-regexp?
        if (!$list) {
            print $out;
            exit $exit_status;
        }

        # Delim chars for --list output
        my $top = $null ? "\x00" : "\n"; # Beginning char of the entry
        my $end = $null ? "\x00" : "\t"; # Ending char for each field
        if ($descent) {
            # Special --descent --list means to list ALL descent config file settings (not just the closest one)
            # But skip all other --system and --global and --local and commandline config settings
            my $descent_left = [ @$descent_config_files ];
            my $d = pop @$descent_left; # Already did the last one
            while (my $config_file = pop @$descent_left) {
                my @run = map { $_ eq $d ? $config_file : $_ } @_;
                $out = git(@run) . $out;
            }
            $out = $top.$out;
            if ($scope) {
                my $this_scope = "descent";
                $out =~ s/($top)\w+($end)/$top$this_scope$end/g;
            }
            # Remove the first $top char
            $out =~ s/^$top//;
            print $out;
            exit $exit_status;
        }

        my $local_dir = git(qw[config --list --local --show-origin --null]) =~ /^([^\x00]*)\x00/ ? $1 : ".git/config";
        $out = $top.$out;
        my $descent_counter = 0;
        my $descent_origins = [ map {"file:$_"} split /\n/, $ENV{GIT_CLIENT_OVERRIDE} ];
        foreach my $this_origin (@$descent_origins, $local_dir) {
            # Wrap around back to ZERO if hit the end
            $descent_counter = 0 if ++$descent_counter > @$descent_origins;
            my $s = "command";        # Old Scope
            my $o = "command line:";  # Old Origin
            my $this_scope = $descent_counter ? "descent" : "local";
            for (1..$ENV{"GIT_CLIENT_OVERRIDE_$descent_counter"}) {
                if ($scope && $origin) {
                    $out =~ s/$top$s$end$o$end/$top$this_scope$end$this_origin$end/;
                }
                elsif ($scope) {
                    $out =~ s/$top$s$end/$top$this_scope$end/;
                }
                elsif ($origin) {
                    $out =~ s/$top$o$end/$top$this_origin$end/;
                }
                else {
                    # Nothing "--show"ing in order to unmunge back to its true "descent" reference
                }
            }
        }
        # Remove the first $top char
        $out =~ s/^$top//;
        print $out;
        exit $exit_status;
    }
}
