1 /*
2  * Copyright (c) 2017 Martin Pieuchot <mpi@openbsd.org>
3  * Copyright (c) 2018, 2019 Stefan Sperling <stsp@openbsd.org>
4  *
5  * Permission to use, copy, modify, and distribute this software for any
6  * purpose with or without fee is hereby granted, provided that the above
7  * copyright notice and this permission notice appear in all copies.
8  *
9  * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
10  * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
11  * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
12  * ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
13  * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
14  * ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
15  * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
16  */
17 
18 #include <sys/queue.h>
19 #include <sys/types.h>
20 #include <sys/stat.h>
21 #include <sys/param.h>
22 #include <sys/wait.h>
23 
24 #include <err.h>
25 #include <errno.h>
26 #include <limits.h>
27 #include <locale.h>
28 #include <ctype.h>
29 #include <signal.h>
30 #include <stdio.h>
31 #include <stdlib.h>
32 #include <string.h>
33 #include <unistd.h>
34 #include <libgen.h>
35 #include <time.h>
36 #include <paths.h>
37 
38 #include "got_version.h"
39 #include "got_error.h"
40 #include "got_object.h"
41 #include "got_reference.h"
42 #include "got_repository.h"
43 #include "got_path.h"
44 #include "got_cancel.h"
45 #include "got_worktree.h"
46 #include "got_diff.h"
47 #include "got_commit_graph.h"
48 #include "got_blame.h"
49 #include "got_privsep.h"
50 #include "got_opentemp.h"
51 
52 #ifndef nitems
53 #define nitems(_a)	(sizeof((_a)) / sizeof((_a)[0]))
54 #endif
55 
56 static volatile sig_atomic_t sigint_received;
57 static volatile sig_atomic_t sigpipe_received;
58 
59 static void
60 catch_sigint(int signo)
61 {
62 	sigint_received = 1;
63 }
64 
65 static void
66 catch_sigpipe(int signo)
67 {
68 	sigpipe_received = 1;
69 }
70 
71 
72 struct got_cmd {
73 	const char	 *cmd_name;
74 	const struct got_error *(*cmd_main)(int, char *[]);
75 	void		(*cmd_usage)(void);
76 	const char	*cmd_alias;
77 };
78 
79 __dead static void	usage(int);
80 __dead static void	usage_init(void);
81 __dead static void	usage_import(void);
82 __dead static void	usage_checkout(void);
83 __dead static void	usage_update(void);
84 __dead static void	usage_log(void);
85 __dead static void	usage_diff(void);
86 __dead static void	usage_blame(void);
87 __dead static void	usage_tree(void);
88 __dead static void	usage_status(void);
89 __dead static void	usage_ref(void);
90 __dead static void	usage_branch(void);
91 __dead static void	usage_tag(void);
92 __dead static void	usage_add(void);
93 __dead static void	usage_remove(void);
94 __dead static void	usage_revert(void);
95 __dead static void	usage_commit(void);
96 __dead static void	usage_cherrypick(void);
97 __dead static void	usage_backout(void);
98 __dead static void	usage_rebase(void);
99 __dead static void	usage_histedit(void);
100 __dead static void	usage_stage(void);
101 __dead static void	usage_unstage(void);
102 __dead static void	usage_cat(void);
103 
104 static const struct got_error*		cmd_init(int, char *[]);
105 static const struct got_error*		cmd_import(int, char *[]);
106 static const struct got_error*		cmd_checkout(int, char *[]);
107 static const struct got_error*		cmd_update(int, char *[]);
108 static const struct got_error*		cmd_log(int, char *[]);
109 static const struct got_error*		cmd_diff(int, char *[]);
110 static const struct got_error*		cmd_blame(int, char *[]);
111 static const struct got_error*		cmd_tree(int, char *[]);
112 static const struct got_error*		cmd_status(int, char *[]);
113 static const struct got_error*		cmd_ref(int, char *[]);
114 static const struct got_error*		cmd_branch(int, char *[]);
115 static const struct got_error*		cmd_tag(int, char *[]);
116 static const struct got_error*		cmd_add(int, char *[]);
117 static const struct got_error*		cmd_remove(int, char *[]);
118 static const struct got_error*		cmd_revert(int, char *[]);
119 static const struct got_error*		cmd_commit(int, char *[]);
120 static const struct got_error*		cmd_cherrypick(int, char *[]);
121 static const struct got_error*		cmd_backout(int, char *[]);
122 static const struct got_error*		cmd_rebase(int, char *[]);
123 static const struct got_error*		cmd_histedit(int, char *[]);
124 static const struct got_error*		cmd_stage(int, char *[]);
125 static const struct got_error*		cmd_unstage(int, char *[]);
126 static const struct got_error*		cmd_cat(int, char *[]);
127 
128 static struct got_cmd got_commands[] = {
129 	{ "init",	cmd_init,	usage_init,	"in" },
130 	{ "import",	cmd_import,	usage_import,	"im" },
131 	{ "checkout",	cmd_checkout,	usage_checkout,	"co" },
132 	{ "update",	cmd_update,	usage_update,	"up" },
133 	{ "log",	cmd_log,	usage_log,	"" },
134 	{ "diff",	cmd_diff,	usage_diff,	"di" },
135 	{ "blame",	cmd_blame,	usage_blame,	"bl" },
136 	{ "tree",	cmd_tree,	usage_tree,	"tr" },
137 	{ "status",	cmd_status,	usage_status,	"st" },
138 	{ "ref",	cmd_ref,	usage_ref,	"" },
139 	{ "branch",	cmd_branch,	usage_branch,	"br" },
140 	{ "tag",	cmd_tag,	usage_tag,	"" },
141 	{ "add",	cmd_add,	usage_add,	"" },
142 	{ "remove",	cmd_remove,	usage_remove,	"rm" },
143 	{ "revert",	cmd_revert,	usage_revert,	"rv" },
144 	{ "commit",	cmd_commit,	usage_commit,	"ci" },
145 	{ "cherrypick",	cmd_cherrypick,	usage_cherrypick, "cy" },
146 	{ "backout",	cmd_backout,	usage_backout,	"bo" },
147 	{ "rebase",	cmd_rebase,	usage_rebase,	"rb" },
148 	{ "histedit",	cmd_histedit,	usage_histedit,	"he" },
149 	{ "stage",	cmd_stage,	usage_stage,	"sg" },
150 	{ "unstage",	cmd_unstage,	usage_unstage,	"ug" },
151 	{ "cat",	cmd_cat,	usage_cat,	"" },
152 };
153 
154 static void
155 list_commands(void)
156 {
157 	int i;
158 
159 	fprintf(stderr, "commands:");
160 	for (i = 0; i < nitems(got_commands); i++) {
161 		struct got_cmd *cmd = &got_commands[i];
162 		fprintf(stderr, " %s", cmd->cmd_name);
163 	}
164 	fputc('\n', stderr);
165 }
166 
167 int
168 main(int argc, char *argv[])
169 {
170 	struct got_cmd *cmd;
171 	unsigned int i;
172 	int ch;
173 	int hflag = 0, Vflag = 0;
174 
175 	setlocale(LC_CTYPE, "");
176 
177 	while ((ch = getopt(argc, argv, "hV")) != -1) {
178 		switch (ch) {
179 		case 'h':
180 			hflag = 1;
181 			break;
182 		case 'V':
183 			Vflag = 1;
184 			break;
185 		default:
186 			usage(hflag);
187 			/* NOTREACHED */
188 		}
189 	}
190 
191 	argc -= optind;
192 	argv += optind;
193 	optind = 0;
194 
195 	if (Vflag) {
196 		got_version_print_str();
197 		return 1;
198 	}
199 
200 	if (argc <= 0)
201 		usage(hflag);
202 
203 	signal(SIGINT, catch_sigint);
204 	signal(SIGPIPE, catch_sigpipe);
205 
206 	for (i = 0; i < nitems(got_commands); i++) {
207 		const struct got_error *error;
208 
209 		cmd = &got_commands[i];
210 
211 		if (strcmp(cmd->cmd_name, argv[0]) != 0 &&
212 		    strcmp(cmd->cmd_alias, argv[0]) != 0)
213 			continue;
214 
215 		if (hflag)
216 			got_commands[i].cmd_usage();
217 
218 		error = got_commands[i].cmd_main(argc, argv);
219 		if (error && !(sigint_received || sigpipe_received)) {
220 			fprintf(stderr, "%s: %s\n", getprogname(), error->msg);
221 			return 1;
222 		}
223 
224 		return 0;
225 	}
226 
227 	fprintf(stderr, "%s: unknown command '%s'\n", getprogname(), argv[0]);
228 	list_commands();
229 	return 1;
230 }
231 
232 __dead static void
233 usage(int hflag)
234 {
235 	fprintf(stderr, "usage: %s [-h] [-V] command [arg ...]\n",
236 	    getprogname());
237 	if (hflag)
238 		list_commands();
239 	exit(1);
240 }
241 
242 static const struct got_error *
243 get_editor(char **abspath)
244 {
245 	const struct got_error *err = NULL;
246 	const char *editor;
247 
248 	*abspath = NULL;
249 
250 	editor = getenv("VISUAL");
251 	if (editor == NULL)
252 		editor = getenv("EDITOR");
253 
254 	if (editor) {
255 		err = got_path_find_prog(abspath, editor);
256 		if (err)
257 			return err;
258 	}
259 
260 	if (*abspath == NULL) {
261 		*abspath = strdup("/bin/ed");
262 		if (*abspath == NULL)
263 			return got_error_from_errno("strdup");
264 	}
265 
266 	return NULL;
267 }
268 
269 static const struct got_error *
270 apply_unveil(const char *repo_path, int repo_read_only,
271     const char *worktree_path)
272 {
273 	const struct got_error *err;
274 
275 #ifdef PROFILE
276 	if (unveil("gmon.out", "rwc") != 0)
277 		return got_error_from_errno2("unveil", "gmon.out");
278 #endif
279 	if (repo_path && unveil(repo_path, repo_read_only ? "r" : "rwc") != 0)
280 		return got_error_from_errno2("unveil", repo_path);
281 
282 	if (worktree_path && unveil(worktree_path, "rwc") != 0)
283 		return got_error_from_errno2("unveil", worktree_path);
284 
285 	if (unveil("/tmp", "rwc") != 0)
286 		return got_error_from_errno2("unveil", "/tmp");
287 
288 	err = got_privsep_unveil_exec_helpers();
289 	if (err != NULL)
290 		return err;
291 
292 	if (unveil(NULL, NULL) != 0)
293 		return got_error_from_errno("unveil");
294 
295 	return NULL;
296 }
297 
298 __dead static void
299 usage_init(void)
300 {
301 	fprintf(stderr, "usage: %s init repository-path\n", getprogname());
302 	exit(1);
303 }
304 
305 static const struct got_error *
306 cmd_init(int argc, char *argv[])
307 {
308 	const struct got_error *error = NULL;
309 	char *repo_path = NULL;
310 	int ch;
311 
312 	while ((ch = getopt(argc, argv, "")) != -1) {
313 		switch (ch) {
314 		default:
315 			usage_init();
316 			/* NOTREACHED */
317 		}
318 	}
319 
320 	argc -= optind;
321 	argv += optind;
322 
323 #ifndef PROFILE
324 	if (pledge("stdio rpath wpath cpath unveil", NULL) == -1)
325 		err(1, "pledge");
326 #endif
327 	if (argc != 1)
328 		usage_init();
329 
330 	repo_path = strdup(argv[0]);
331 	if (repo_path == NULL)
332 		return got_error_from_errno("strdup");
333 
334 	got_path_strip_trailing_slashes(repo_path);
335 
336 	error = got_path_mkdir(repo_path);
337 	if (error &&
338 	    !(error->code == GOT_ERR_ERRNO && errno == EEXIST))
339 		goto done;
340 
341 	error = apply_unveil(repo_path, 0, NULL);
342 	if (error)
343 		goto done;
344 
345 	error = got_repo_init(repo_path);
346 	if (error != NULL)
347 		goto done;
348 
349 done:
350 	free(repo_path);
351 	return error;
352 }
353 
354 __dead static void
355 usage_import(void)
356 {
357 	fprintf(stderr, "usage: %s import [-b branch] [-m message] "
358 	    "[-r repository-path] [-I pattern] path\n", getprogname());
359 	exit(1);
360 }
361 
362 int
363 spawn_editor(const char *editor, const char *file)
364 {
365 	pid_t pid;
366 	sig_t sighup, sigint, sigquit;
367 	int st = -1;
368 
369 	sighup = signal(SIGHUP, SIG_IGN);
370 	sigint = signal(SIGINT, SIG_IGN);
371 	sigquit = signal(SIGQUIT, SIG_IGN);
372 
373 	switch (pid = fork()) {
374 	case -1:
375 		goto doneediting;
376 	case 0:
377 		execl(editor, editor, file, (char *)NULL);
378 		_exit(127);
379 	}
380 
381 	while (waitpid(pid, &st, 0) == -1)
382 		if (errno != EINTR)
383 			break;
384 
385 doneediting:
386 	(void)signal(SIGHUP, sighup);
387 	(void)signal(SIGINT, sigint);
388 	(void)signal(SIGQUIT, sigquit);
389 
390 	if (!WIFEXITED(st)) {
391 		errno = EINTR;
392 		return -1;
393 	}
394 
395 	return WEXITSTATUS(st);
396 }
397 
398 static const struct got_error *
399 edit_logmsg(char **logmsg, const char *editor, const char *logmsg_path,
400     const char *initial_content)
401 {
402 	const struct got_error *err = NULL;
403 	char buf[1024];
404 	struct stat st, st2;
405 	FILE *fp;
406 	int content_changed = 0;
407 	size_t len;
408 
409 	*logmsg = NULL;
410 
411 	if (stat(logmsg_path, &st) == -1)
412 		return got_error_from_errno2("stat", logmsg_path);
413 
414 	if (spawn_editor(editor, logmsg_path) == -1)
415 		return got_error_from_errno("failed spawning editor");
416 
417 	if (stat(logmsg_path, &st2) == -1)
418 		return got_error_from_errno("stat");
419 
420 	if (st.st_mtime == st2.st_mtime && st.st_size == st2.st_size)
421 		return got_error_msg(GOT_ERR_COMMIT_MSG_EMPTY,
422 		    "no changes made to commit message, aborting");
423 
424 	*logmsg = malloc(st2.st_size + 1);
425 	if (*logmsg == NULL)
426 		return got_error_from_errno("malloc");
427 	(*logmsg)[0] = '\0';
428 	len = 0;
429 
430 	fp = fopen(logmsg_path, "r");
431 	if (fp == NULL) {
432 		err = got_error_from_errno("fopen");
433 		goto done;
434 	}
435 	while (fgets(buf, sizeof(buf), fp) != NULL) {
436 		if (!content_changed && strcmp(buf, initial_content) != 0)
437 			content_changed = 1;
438 		if (buf[0] == '#' || (len == 0 && buf[0] == '\n'))
439 			continue; /* remove comments and leading empty lines */
440 		len = strlcat(*logmsg, buf, st2.st_size);
441 	}
442 	fclose(fp);
443 
444 	while (len > 0 && (*logmsg)[len - 1] == '\n') {
445 		(*logmsg)[len - 1] = '\0';
446 		len--;
447 	}
448 
449 	if (len == 0 || !content_changed)
450 		err = got_error_msg(GOT_ERR_COMMIT_MSG_EMPTY,
451 		    "commit message cannot be empty, aborting");
452 done:
453 	if (err) {
454 		free(*logmsg);
455 		*logmsg = NULL;
456 	}
457 	return err;
458 }
459 
460 static const struct got_error *
461 collect_import_msg(char **logmsg, const char *editor, const char *path_dir,
462     const char *branch_name)
463 {
464 	char *initial_content = NULL, *logmsg_path = NULL;
465 	const struct got_error *err = NULL;
466 	int fd;
467 
468 	if (asprintf(&initial_content,
469 	    "\n# %s to be imported to branch %s\n", path_dir,
470 	    branch_name) == -1)
471 		return got_error_from_errno("asprintf");
472 
473 	err = got_opentemp_named_fd(&logmsg_path, &fd, "/tmp/got-importmsg");
474 	if (err)
475 		goto done;
476 
477 	dprintf(fd, initial_content);
478 	close(fd);
479 
480 	err = edit_logmsg(logmsg, editor, logmsg_path, initial_content);
481 done:
482 	free(initial_content);
483 	free(logmsg_path);
484 	return err;
485 }
486 
487 static const struct got_error *
488 import_progress(void *arg, const char *path)
489 {
490 	printf("A  %s\n", path);
491 	return NULL;
492 }
493 
494 static const struct got_error *
495 get_author(char **author, struct got_repository *repo)
496 {
497 	const struct got_error *err = NULL;
498 	const char *got_author, *name, *email;
499 
500 	*author = NULL;
501 
502 	name = got_repo_get_gitconfig_author_name(repo);
503 	email = got_repo_get_gitconfig_author_email(repo);
504 	if (name && email) {
505 		if (asprintf(author, "%s <%s>", name, email) == -1)
506 			return got_error_from_errno("asprintf");
507 		return NULL;
508 	}
509 
510 	got_author = getenv("GOT_AUTHOR");
511 	if (got_author == NULL) {
512 		name = got_repo_get_global_gitconfig_author_name(repo);
513 		email = got_repo_get_global_gitconfig_author_email(repo);
514 		if (name && email) {
515 			if (asprintf(author, "%s <%s>", name, email) == -1)
516 				return got_error_from_errno("asprintf");
517 			return NULL;
518 		}
519 		/* TODO: Look up user in password database? */
520 		return got_error(GOT_ERR_COMMIT_NO_AUTHOR);
521 	}
522 
523 	*author = strdup(got_author);
524 	if (*author == NULL)
525 		return got_error_from_errno("strdup");
526 
527 	/*
528 	 * Really dumb email address check; we're only doing this to
529 	 * avoid git's object parser breaking on commits we create.
530 	 */
531 	while (*got_author && *got_author != '<')
532 		got_author++;
533 	if (*got_author != '<') {
534 		err = got_error(GOT_ERR_COMMIT_NO_EMAIL);
535 		goto done;
536 	}
537 	while (*got_author && *got_author != '@')
538 		got_author++;
539 	if (*got_author != '@') {
540 		err = got_error(GOT_ERR_COMMIT_NO_EMAIL);
541 		goto done;
542 	}
543 	while (*got_author && *got_author != '>')
544 		got_author++;
545 	if (*got_author != '>')
546 		err = got_error(GOT_ERR_COMMIT_NO_EMAIL);
547 done:
548 	if (err) {
549 		free(*author);
550 		*author = NULL;
551 	}
552 	return err;
553 }
554 
555 static const struct got_error *
556 get_gitconfig_path(char **gitconfig_path)
557 {
558 	const char *homedir = getenv("HOME");
559 
560 	*gitconfig_path = NULL;
561 	if (homedir) {
562 		if (asprintf(gitconfig_path, "%s/.gitconfig", homedir) == -1)
563 			return got_error_from_errno("asprintf");
564 
565 	}
566 	return NULL;
567 }
568 
569 static const struct got_error *
570 cmd_import(int argc, char *argv[])
571 {
572 	const struct got_error *error = NULL;
573 	char *path_dir = NULL, *repo_path = NULL, *logmsg = NULL;
574 	char *gitconfig_path = NULL, *editor = NULL, *author = NULL;
575 	const char *branch_name = "master";
576 	char *refname = NULL, *id_str = NULL;
577 	struct got_repository *repo = NULL;
578 	struct got_reference *branch_ref = NULL, *head_ref = NULL;
579 	struct got_object_id *new_commit_id = NULL;
580 	int ch;
581 	struct got_pathlist_head ignores;
582 	struct got_pathlist_entry *pe;
583 
584 	TAILQ_INIT(&ignores);
585 
586 	while ((ch = getopt(argc, argv, "b:m:r:I:")) != -1) {
587 		switch (ch) {
588 		case 'b':
589 			branch_name = optarg;
590 			break;
591 		case 'm':
592 			logmsg = strdup(optarg);
593 			if (logmsg == NULL) {
594 				error = got_error_from_errno("strdup");
595 				goto done;
596 			}
597 			break;
598 		case 'r':
599 			repo_path = realpath(optarg, NULL);
600 			if (repo_path == NULL) {
601 				error = got_error_from_errno("realpath");
602 				goto done;
603 			}
604 			break;
605 		case 'I':
606 			if (optarg[0] == '\0')
607 				break;
608 			error = got_pathlist_insert(&pe, &ignores, optarg,
609 			    NULL);
610 			if (error)
611 				goto done;
612 			break;
613 		default:
614 			usage_import();
615 			/* NOTREACHED */
616 		}
617 	}
618 
619 	argc -= optind;
620 	argv += optind;
621 
622 #ifndef PROFILE
623 	if (pledge("stdio rpath wpath cpath fattr flock proc exec sendfd "
624 	    "unveil",
625 	    NULL) == -1)
626 		err(1, "pledge");
627 #endif
628 	if (argc != 1)
629 		usage_import();
630 
631 	if (repo_path == NULL) {
632 		repo_path = getcwd(NULL, 0);
633 		if (repo_path == NULL)
634 			return got_error_from_errno("getcwd");
635 	}
636 	got_path_strip_trailing_slashes(repo_path);
637 	error = get_gitconfig_path(&gitconfig_path);
638 	if (error)
639 		goto done;
640 	error = got_repo_open(&repo, repo_path, gitconfig_path);
641 	if (error)
642 		goto done;
643 
644 	error = get_author(&author, repo);
645 	if (error)
646 		return error;
647 
648 	if (asprintf(&refname, "refs/heads/%s", branch_name) == -1) {
649 		error = got_error_from_errno("asprintf");
650 		goto done;
651 	}
652 
653 	error = got_ref_open(&branch_ref, repo, refname, 0);
654 	if (error) {
655 		if (error->code != GOT_ERR_NOT_REF)
656 			goto done;
657 	} else {
658 		error = got_error_msg(GOT_ERR_BRANCH_EXISTS,
659 		    "import target branch already exists");
660 		goto done;
661 	}
662 
663 	path_dir = realpath(argv[0], NULL);
664 	if (path_dir == NULL) {
665 		error = got_error_from_errno("realpath");
666 		goto done;
667 	}
668 	got_path_strip_trailing_slashes(path_dir);
669 
670 	/*
671 	 * unveil(2) traverses exec(2); if an editor is used we have
672 	 * to apply unveil after the log message has been written.
673 	 */
674 	if (logmsg == NULL || strlen(logmsg) == 0) {
675 		error = get_editor(&editor);
676 		if (error)
677 			goto done;
678 		free(logmsg);
679 		error = collect_import_msg(&logmsg, editor, path_dir, refname);
680 		if (error)
681 			goto done;
682 	}
683 
684 	if (unveil(path_dir, "r") != 0)
685 		return got_error_from_errno2("unveil", path_dir);
686 
687 	error = apply_unveil(got_repo_get_path(repo), 0, NULL);
688 	if (error)
689 		goto done;
690 
691 	error = got_repo_import(&new_commit_id, path_dir, logmsg,
692 	    author, &ignores, repo, import_progress, NULL);
693 	if (error)
694 		goto done;
695 
696 	error = got_ref_alloc(&branch_ref, refname, new_commit_id);
697 	if (error)
698 		goto done;
699 
700 	error = got_ref_write(branch_ref, repo);
701 	if (error)
702 		goto done;
703 
704 	error = got_object_id_str(&id_str, new_commit_id);
705 	if (error)
706 		goto done;
707 
708 	error = got_ref_open(&head_ref, repo, GOT_REF_HEAD, 0);
709 	if (error) {
710 		if (error->code != GOT_ERR_NOT_REF)
711 			goto done;
712 
713 		error = got_ref_alloc_symref(&head_ref, GOT_REF_HEAD,
714 		    branch_ref);
715 		if (error)
716 			goto done;
717 
718 		error = got_ref_write(head_ref, repo);
719 		if (error)
720 			goto done;
721 	}
722 
723 	printf("Created branch %s with commit %s\n",
724 	    got_ref_get_name(branch_ref), id_str);
725 done:
726 	free(logmsg);
727 	free(repo_path);
728 	free(editor);
729 	free(refname);
730 	free(new_commit_id);
731 	free(id_str);
732 	free(author);
733 	free(gitconfig_path);
734 	if (branch_ref)
735 		got_ref_close(branch_ref);
736 	if (head_ref)
737 		got_ref_close(head_ref);
738 	return error;
739 }
740 
741 __dead static void
742 usage_checkout(void)
743 {
744 	fprintf(stderr, "usage: %s checkout [-b branch] [-c commit] "
745 	    "[-p prefix] repository-path [worktree-path]\n", getprogname());
746 	exit(1);
747 }
748 
749 static const struct got_error *
750 checkout_progress(void *arg, unsigned char status, const char *path)
751 {
752 	char *worktree_path = arg;
753 
754 	/* Base commit bump happens silently. */
755 	if (status == GOT_STATUS_BUMP_BASE)
756 		return NULL;
757 
758 	while (path[0] == '/')
759 		path++;
760 
761 	printf("%c  %s/%s\n", status, worktree_path, path);
762 	return NULL;
763 }
764 
765 static const struct got_error *
766 check_cancelled(void *arg)
767 {
768 	if (sigint_received || sigpipe_received)
769 		return got_error(GOT_ERR_CANCELLED);
770 	return NULL;
771 }
772 
773 static const struct got_error *
774 check_linear_ancestry(struct got_object_id *commit_id,
775     struct got_object_id *base_commit_id, struct got_repository *repo)
776 {
777 	const struct got_error *err = NULL;
778 	struct got_object_id *yca_id;
779 
780 	err = got_commit_graph_find_youngest_common_ancestor(&yca_id,
781 	    commit_id, base_commit_id, repo, check_cancelled, NULL);
782 	if (err)
783 		return err;
784 
785 	if (yca_id == NULL)
786 		return got_error(GOT_ERR_ANCESTRY);
787 
788 	/*
789 	 * Require a straight line of history between the target commit
790 	 * and the work tree's base commit.
791 	 *
792 	 * Non-linear situations such as this require a rebase:
793 	 *
794 	 * (commit) D       F (base_commit)
795 	 *           \     /
796 	 *            C   E
797 	 *             \ /
798 	 *              B (yca)
799 	 *              |
800 	 *              A
801 	 *
802 	 * 'got update' only handles linear cases:
803 	 * Update forwards in time:  A (base/yca) - B - C - D (commit)
804 	 * Update backwards in time: D (base) - C - B - A (commit/yca)
805 	 */
806 	if (got_object_id_cmp(commit_id, yca_id) != 0 &&
807 	    got_object_id_cmp(base_commit_id, yca_id) != 0)
808 		return got_error(GOT_ERR_ANCESTRY);
809 
810 	free(yca_id);
811 	return NULL;
812 }
813 
814 static const struct got_error *
815 check_same_branch(struct got_object_id *commit_id,
816     struct got_reference *head_ref, struct got_object_id *yca_id,
817     struct got_repository *repo)
818 {
819 	const struct got_error *err = NULL;
820 	struct got_commit_graph *graph = NULL;
821 	struct got_object_id *head_commit_id = NULL;
822 	int is_same_branch = 0;
823 
824 	err = got_ref_resolve(&head_commit_id, repo, head_ref);
825 	if (err)
826 		goto done;
827 
828 	if (got_object_id_cmp(head_commit_id, commit_id) == 0) {
829 		is_same_branch = 1;
830 		goto done;
831 	}
832 	if (yca_id && got_object_id_cmp(commit_id, yca_id) == 0) {
833 		is_same_branch = 1;
834 		goto done;
835 	}
836 
837 	err = got_commit_graph_open(&graph, head_commit_id, "/", 1, repo);
838 	if (err)
839 		goto done;
840 
841 	err = got_commit_graph_iter_start(graph, head_commit_id, repo,
842 	    check_cancelled, NULL);
843 	if (err)
844 		goto done;
845 
846 	for (;;) {
847 		struct got_object_id *id;
848 		err = got_commit_graph_iter_next(&id, graph);
849 		if (err) {
850 			if (err->code == GOT_ERR_ITER_COMPLETED) {
851 				err = NULL;
852 				break;
853 			} else if (err->code != GOT_ERR_ITER_NEED_MORE)
854 				break;
855 			err = got_commit_graph_fetch_commits(graph, 1,
856 			    repo, check_cancelled, NULL);
857 			if (err)
858 				break;
859 		}
860 
861 		if (id) {
862 			if (yca_id && got_object_id_cmp(id, yca_id) == 0)
863 				break;
864 			if (got_object_id_cmp(id, commit_id) == 0) {
865 				is_same_branch = 1;
866 				break;
867 			}
868 		}
869 	}
870 done:
871 	if (graph)
872 		got_commit_graph_close(graph);
873 	free(head_commit_id);
874 	if (!err && !is_same_branch)
875 		err = got_error(GOT_ERR_ANCESTRY);
876 	return err;
877 }
878 
879 static const struct got_error *
880 resolve_commit_arg(struct got_object_id **commit_id,
881     const char *commit_id_arg, struct got_repository *repo)
882 {
883 	const struct got_error *err;
884 	struct got_reference *ref;
885 	struct got_tag_object *tag;
886 
887 	err = got_repo_object_match_tag(&tag, commit_id_arg,
888 	    GOT_OBJ_TYPE_COMMIT, repo);
889 	if (err == NULL) {
890 		*commit_id = got_object_id_dup(
891 		    got_object_tag_get_object_id(tag));
892 		if (*commit_id == NULL)
893 			err = got_error_from_errno("got_object_id_dup");
894 		got_object_tag_close(tag);
895 		return err;
896 	} else if (err->code != GOT_ERR_NO_OBJ)
897 		return err;
898 
899 	err = got_ref_open(&ref, repo, commit_id_arg, 0);
900 	if (err == NULL) {
901 		err = got_ref_resolve(commit_id, repo, ref);
902 		got_ref_close(ref);
903 	} else {
904 		if (err->code != GOT_ERR_NOT_REF)
905 			return err;
906 		err = got_repo_match_object_id_prefix(commit_id,
907 		    commit_id_arg, GOT_OBJ_TYPE_COMMIT, repo);
908 	}
909 	return err;
910 }
911 
912 static const struct got_error *
913 cmd_checkout(int argc, char *argv[])
914 {
915 	const struct got_error *error = NULL;
916 	struct got_repository *repo = NULL;
917 	struct got_reference *head_ref = NULL;
918 	struct got_worktree *worktree = NULL;
919 	char *repo_path = NULL;
920 	char *worktree_path = NULL;
921 	const char *path_prefix = "";
922 	const char *branch_name = GOT_REF_HEAD;
923 	char *commit_id_str = NULL;
924 	int ch, same_path_prefix;
925 	struct got_pathlist_head paths;
926 
927 	TAILQ_INIT(&paths);
928 
929 	while ((ch = getopt(argc, argv, "b:c:p:")) != -1) {
930 		switch (ch) {
931 		case 'b':
932 			branch_name = optarg;
933 			break;
934 		case 'c':
935 			commit_id_str = strdup(optarg);
936 			if (commit_id_str == NULL)
937 				return got_error_from_errno("strdup");
938 			break;
939 		case 'p':
940 			path_prefix = optarg;
941 			break;
942 		default:
943 			usage_checkout();
944 			/* NOTREACHED */
945 		}
946 	}
947 
948 	argc -= optind;
949 	argv += optind;
950 
951 #ifndef PROFILE
952 	if (pledge("stdio rpath wpath cpath fattr flock proc exec sendfd "
953 	    "unveil", NULL) == -1)
954 		err(1, "pledge");
955 #endif
956 	if (argc == 1) {
957 		char *cwd, *base, *dotgit;
958 		repo_path = realpath(argv[0], NULL);
959 		if (repo_path == NULL)
960 			return got_error_from_errno2("realpath", argv[0]);
961 		cwd = getcwd(NULL, 0);
962 		if (cwd == NULL) {
963 			error = got_error_from_errno("getcwd");
964 			goto done;
965 		}
966 		if (path_prefix[0]) {
967 			base = basename(path_prefix);
968 			if (base == NULL) {
969 				error = got_error_from_errno2("basename",
970 				    path_prefix);
971 				goto done;
972 			}
973 		} else {
974 			base = basename(repo_path);
975 			if (base == NULL) {
976 				error = got_error_from_errno2("basename",
977 				    repo_path);
978 				goto done;
979 			}
980 		}
981 		dotgit = strstr(base, ".git");
982 		if (dotgit)
983 			*dotgit = '\0';
984 		if (asprintf(&worktree_path, "%s/%s", cwd, base) == -1) {
985 			error = got_error_from_errno("asprintf");
986 			free(cwd);
987 			goto done;
988 		}
989 		free(cwd);
990 	} else if (argc == 2) {
991 		repo_path = realpath(argv[0], NULL);
992 		if (repo_path == NULL) {
993 			error = got_error_from_errno2("realpath", argv[0]);
994 			goto done;
995 		}
996 		worktree_path = realpath(argv[1], NULL);
997 		if (worktree_path == NULL) {
998 			if (errno != ENOENT) {
999 				error = got_error_from_errno2("realpath",
1000 				    argv[1]);
1001 				goto done;
1002 			}
1003 			worktree_path = strdup(argv[1]);
1004 			if (worktree_path == NULL) {
1005 				error = got_error_from_errno("strdup");
1006 				goto done;
1007 			}
1008 		}
1009 	} else
1010 		usage_checkout();
1011 
1012 	got_path_strip_trailing_slashes(repo_path);
1013 	got_path_strip_trailing_slashes(worktree_path);
1014 
1015 	error = got_repo_open(&repo, repo_path, NULL);
1016 	if (error != NULL)
1017 		goto done;
1018 
1019 	/* Pre-create work tree path for unveil(2) */
1020 	error = got_path_mkdir(worktree_path);
1021 	if (error) {
1022 		if (!(error->code == GOT_ERR_ERRNO && errno == EISDIR) &&
1023 		    !(error->code == GOT_ERR_ERRNO && errno == EEXIST))
1024 			goto done;
1025 		if (!got_path_dir_is_empty(worktree_path)) {
1026 			error = got_error_path(worktree_path,
1027 			    GOT_ERR_DIR_NOT_EMPTY);
1028 			goto done;
1029 		}
1030 	}
1031 
1032 	error = apply_unveil(got_repo_get_path(repo), 0, worktree_path);
1033 	if (error)
1034 		goto done;
1035 
1036 	error = got_ref_open(&head_ref, repo, branch_name, 0);
1037 	if (error != NULL)
1038 		goto done;
1039 
1040 	error = got_worktree_init(worktree_path, head_ref, path_prefix, repo);
1041 	if (error != NULL && !(error->code == GOT_ERR_ERRNO && errno == EEXIST))
1042 		goto done;
1043 
1044 	error = got_worktree_open(&worktree, worktree_path);
1045 	if (error != NULL)
1046 		goto done;
1047 
1048 	error = got_worktree_match_path_prefix(&same_path_prefix, worktree,
1049 	    path_prefix);
1050 	if (error != NULL)
1051 		goto done;
1052 	if (!same_path_prefix) {
1053 		error = got_error(GOT_ERR_PATH_PREFIX);
1054 		goto done;
1055 	}
1056 
1057 	if (commit_id_str) {
1058 		struct got_object_id *commit_id;
1059 		error = resolve_commit_arg(&commit_id, commit_id_str, repo);
1060 		if (error)
1061 			goto done;
1062 		error = check_linear_ancestry(commit_id,
1063 		    got_worktree_get_base_commit_id(worktree), repo);
1064 		if (error != NULL) {
1065 			free(commit_id);
1066 			goto done;
1067 		}
1068 		error = check_same_branch(commit_id, head_ref, NULL, repo);
1069 		if (error)
1070 			goto done;
1071 		error = got_worktree_set_base_commit_id(worktree, repo,
1072 		    commit_id);
1073 		free(commit_id);
1074 		if (error)
1075 			goto done;
1076 	}
1077 
1078 	error = got_pathlist_append(&paths, "", NULL);
1079 	if (error)
1080 		goto done;
1081 	error = got_worktree_checkout_files(worktree, &paths, repo,
1082 	    checkout_progress, worktree_path, check_cancelled, NULL);
1083 	if (error != NULL)
1084 		goto done;
1085 
1086 	printf("Now shut up and hack\n");
1087 
1088 done:
1089 	got_pathlist_free(&paths);
1090 	free(commit_id_str);
1091 	free(repo_path);
1092 	free(worktree_path);
1093 	return error;
1094 }
1095 
1096 __dead static void
1097 usage_update(void)
1098 {
1099 	fprintf(stderr, "usage: %s update [-b branch] [-c commit] [path ...]\n",
1100 	    getprogname());
1101 	exit(1);
1102 }
1103 
1104 static const struct got_error *
1105 update_progress(void *arg, unsigned char status, const char *path)
1106 {
1107 	int *did_something = arg;
1108 
1109 	if (status == GOT_STATUS_EXISTS)
1110 		return NULL;
1111 
1112 	*did_something = 1;
1113 
1114 	/* Base commit bump happens silently. */
1115 	if (status == GOT_STATUS_BUMP_BASE)
1116 		return NULL;
1117 
1118 	while (path[0] == '/')
1119 		path++;
1120 	printf("%c  %s\n", status, path);
1121 	return NULL;
1122 }
1123 
1124 static const struct got_error *
1125 switch_head_ref(struct got_reference *head_ref,
1126     struct got_object_id *commit_id, struct got_worktree *worktree,
1127     struct got_repository *repo)
1128 {
1129 	const struct got_error *err = NULL;
1130 	char *base_id_str;
1131 	int ref_has_moved = 0;
1132 
1133 	/* Trivial case: switching between two different references. */
1134 	if (strcmp(got_ref_get_name(head_ref),
1135 	    got_worktree_get_head_ref_name(worktree)) != 0) {
1136 		printf("Switching work tree from %s to %s\n",
1137 		    got_worktree_get_head_ref_name(worktree),
1138 		    got_ref_get_name(head_ref));
1139 		return got_worktree_set_head_ref(worktree, head_ref);
1140 	}
1141 
1142 	err = check_linear_ancestry(commit_id,
1143 	    got_worktree_get_base_commit_id(worktree), repo);
1144 	if (err) {
1145 		if (err->code != GOT_ERR_ANCESTRY)
1146 			return err;
1147 		ref_has_moved = 1;
1148 	}
1149 	if (!ref_has_moved)
1150 		return NULL;
1151 
1152 	/* Switching to a rebased branch with the same reference name. */
1153 	err = got_object_id_str(&base_id_str,
1154 	    got_worktree_get_base_commit_id(worktree));
1155 	if (err)
1156 		return err;
1157 	printf("Reference %s now points at a different branch\n",
1158 	    got_worktree_get_head_ref_name(worktree));
1159 	printf("Switching work tree from %s to %s\n", base_id_str,
1160 	    got_worktree_get_head_ref_name(worktree));
1161 	return NULL;
1162 }
1163 
1164 static const struct got_error *
1165 check_rebase_or_histedit_in_progress(struct got_worktree *worktree)
1166 {
1167 	const struct got_error *err;
1168 	int in_progress;
1169 
1170 	err = got_worktree_rebase_in_progress(&in_progress, worktree);
1171 	if (err)
1172 		return err;
1173 	if (in_progress)
1174 		return got_error(GOT_ERR_REBASING);
1175 
1176 	err = got_worktree_histedit_in_progress(&in_progress, worktree);
1177 	if (err)
1178 		return err;
1179 	if (in_progress)
1180 		return got_error(GOT_ERR_HISTEDIT_BUSY);
1181 
1182 	return NULL;
1183 }
1184 
1185 static const struct got_error *
1186 get_worktree_paths_from_argv(struct got_pathlist_head *paths, int argc,
1187     char *argv[], struct got_worktree *worktree)
1188 {
1189 	const struct got_error *err = NULL;
1190 	char *path;
1191 	int i;
1192 
1193 	if (argc == 0) {
1194 		path = strdup("");
1195 		if (path == NULL)
1196 			return got_error_from_errno("strdup");
1197 		return got_pathlist_append(paths, path, NULL);
1198 	}
1199 
1200 	for (i = 0; i < argc; i++) {
1201 		err = got_worktree_resolve_path(&path, worktree, argv[i]);
1202 		if (err)
1203 			break;
1204 		err = got_pathlist_append(paths, path, NULL);
1205 		if (err) {
1206 			free(path);
1207 			break;
1208 		}
1209 	}
1210 
1211 	return err;
1212 }
1213 
1214 static const struct got_error *
1215 cmd_update(int argc, char *argv[])
1216 {
1217 	const struct got_error *error = NULL;
1218 	struct got_repository *repo = NULL;
1219 	struct got_worktree *worktree = NULL;
1220 	char *worktree_path = NULL;
1221 	struct got_object_id *commit_id = NULL;
1222 	char *commit_id_str = NULL;
1223 	const char *branch_name = NULL;
1224 	struct got_reference *head_ref = NULL;
1225 	struct got_pathlist_head paths;
1226 	struct got_pathlist_entry *pe;
1227 	int ch, did_something = 0;
1228 
1229 	TAILQ_INIT(&paths);
1230 
1231 	while ((ch = getopt(argc, argv, "b:c:")) != -1) {
1232 		switch (ch) {
1233 		case 'b':
1234 			branch_name = optarg;
1235 			break;
1236 		case 'c':
1237 			commit_id_str = strdup(optarg);
1238 			if (commit_id_str == NULL)
1239 				return got_error_from_errno("strdup");
1240 			break;
1241 		default:
1242 			usage_update();
1243 			/* NOTREACHED */
1244 		}
1245 	}
1246 
1247 	argc -= optind;
1248 	argv += optind;
1249 
1250 #ifndef PROFILE
1251 	if (pledge("stdio rpath wpath cpath fattr flock proc exec sendfd "
1252 	    "unveil", NULL) == -1)
1253 		err(1, "pledge");
1254 #endif
1255 	worktree_path = getcwd(NULL, 0);
1256 	if (worktree_path == NULL) {
1257 		error = got_error_from_errno("getcwd");
1258 		goto done;
1259 	}
1260 	error = got_worktree_open(&worktree, worktree_path);
1261 	if (error)
1262 		goto done;
1263 
1264 	error = check_rebase_or_histedit_in_progress(worktree);
1265 	if (error)
1266 		goto done;
1267 
1268 	error = got_repo_open(&repo, got_worktree_get_repo_path(worktree),
1269 	    NULL);
1270 	if (error != NULL)
1271 		goto done;
1272 
1273 	error = apply_unveil(got_repo_get_path(repo), 0,
1274 	    got_worktree_get_root_path(worktree));
1275 	if (error)
1276 		goto done;
1277 
1278 	error = get_worktree_paths_from_argv(&paths, argc, argv, worktree);
1279 	if (error)
1280 		goto done;
1281 
1282 	error = got_ref_open(&head_ref, repo, branch_name ? branch_name :
1283 	    got_worktree_get_head_ref_name(worktree), 0);
1284 	if (error != NULL)
1285 		goto done;
1286 	if (commit_id_str == NULL) {
1287 		error = got_ref_resolve(&commit_id, repo, head_ref);
1288 		if (error != NULL)
1289 			goto done;
1290 		error = got_object_id_str(&commit_id_str, commit_id);
1291 		if (error != NULL)
1292 			goto done;
1293 	} else {
1294 		error = resolve_commit_arg(&commit_id, commit_id_str, repo);
1295 		free(commit_id_str);
1296 		commit_id_str = NULL;
1297 		if (error)
1298 			goto done;
1299 		error = got_object_id_str(&commit_id_str, commit_id);
1300 		if (error)
1301 			goto done;
1302 	}
1303 
1304 	if (branch_name) {
1305 		struct got_object_id *head_commit_id;
1306 		TAILQ_FOREACH(pe, &paths, entry) {
1307 			if (pe->path_len == 0)
1308 				continue;
1309 			error = got_error_msg(GOT_ERR_BAD_PATH,
1310 			    "switching between branches requires that "
1311 			    "the entire work tree gets updated");
1312 			goto done;
1313 		}
1314 		error = got_ref_resolve(&head_commit_id, repo, head_ref);
1315 		if (error)
1316 			goto done;
1317 		error = check_linear_ancestry(commit_id, head_commit_id, repo);
1318 		free(head_commit_id);
1319 		if (error != NULL)
1320 			goto done;
1321 		error = check_same_branch(commit_id, head_ref, NULL, repo);
1322 		if (error)
1323 			goto done;
1324 		error = switch_head_ref(head_ref, commit_id, worktree, repo);
1325 		if (error)
1326 			goto done;
1327 	} else {
1328 		error = check_linear_ancestry(commit_id,
1329 		    got_worktree_get_base_commit_id(worktree), repo);
1330 		if (error != NULL) {
1331 			if (error->code == GOT_ERR_ANCESTRY)
1332 				error = got_error(GOT_ERR_BRANCH_MOVED);
1333 			goto done;
1334 		}
1335 		error = check_same_branch(commit_id, head_ref, NULL, repo);
1336 		if (error)
1337 			goto done;
1338 	}
1339 
1340 	if (got_object_id_cmp(got_worktree_get_base_commit_id(worktree),
1341 	    commit_id) != 0) {
1342 		error = got_worktree_set_base_commit_id(worktree, repo,
1343 		    commit_id);
1344 		if (error)
1345 			goto done;
1346 	}
1347 
1348 	error = got_worktree_checkout_files(worktree, &paths, repo,
1349 	    update_progress, &did_something, check_cancelled, NULL);
1350 	if (error != NULL)
1351 		goto done;
1352 
1353 	if (did_something)
1354 		printf("Updated to commit %s\n", commit_id_str);
1355 	else
1356 		printf("Already up-to-date\n");
1357 done:
1358 	free(worktree_path);
1359 	TAILQ_FOREACH(pe, &paths, entry)
1360 		free((char *)pe->path);
1361 	got_pathlist_free(&paths);
1362 	free(commit_id);
1363 	free(commit_id_str);
1364 	return error;
1365 }
1366 
1367 static const struct got_error *
1368 diff_blobs(struct got_object_id *blob_id1, struct got_object_id *blob_id2,
1369     const char *path, int diff_context, struct got_repository *repo)
1370 {
1371 	const struct got_error *err = NULL;
1372 	struct got_blob_object *blob1 = NULL, *blob2 = NULL;
1373 
1374 	if (blob_id1) {
1375 		err = got_object_open_as_blob(&blob1, repo, blob_id1, 8192);
1376 		if (err)
1377 			goto done;
1378 	}
1379 
1380 	err = got_object_open_as_blob(&blob2, repo, blob_id2, 8192);
1381 	if (err)
1382 		goto done;
1383 
1384 	while (path[0] == '/')
1385 		path++;
1386 	err = got_diff_blob(blob1, blob2, path, path, diff_context,
1387 	    stdout);
1388 done:
1389 	if (blob1)
1390 		got_object_blob_close(blob1);
1391 	got_object_blob_close(blob2);
1392 	return err;
1393 }
1394 
1395 static const struct got_error *
1396 diff_trees(struct got_object_id *tree_id1, struct got_object_id *tree_id2,
1397     const char *path, int diff_context, struct got_repository *repo)
1398 {
1399 	const struct got_error *err = NULL;
1400 	struct got_tree_object *tree1 = NULL, *tree2 = NULL;
1401 	struct got_diff_blob_output_unidiff_arg arg;
1402 
1403 	if (tree_id1) {
1404 		err = got_object_open_as_tree(&tree1, repo, tree_id1);
1405 		if (err)
1406 			goto done;
1407 	}
1408 
1409 	err = got_object_open_as_tree(&tree2, repo, tree_id2);
1410 	if (err)
1411 		goto done;
1412 
1413 	arg.diff_context = diff_context;
1414 	arg.outfile = stdout;
1415 	while (path[0] == '/')
1416 		path++;
1417 	err = got_diff_tree(tree1, tree2, path, path, repo,
1418 	    got_diff_blob_output_unidiff, &arg, 1);
1419 done:
1420 	if (tree1)
1421 		got_object_tree_close(tree1);
1422 	got_object_tree_close(tree2);
1423 	return err;
1424 }
1425 
1426 static const struct got_error *
1427 print_patch(struct got_commit_object *commit, struct got_object_id *id,
1428     const char *path, int diff_context, struct got_repository *repo)
1429 {
1430 	const struct got_error *err = NULL;
1431 	struct got_commit_object *pcommit = NULL;
1432 	char *id_str1 = NULL, *id_str2 = NULL;
1433 	struct got_object_id *obj_id1 = NULL, *obj_id2 = NULL;
1434 	struct got_object_qid *qid;
1435 
1436 	qid = SIMPLEQ_FIRST(got_object_commit_get_parent_ids(commit));
1437 	if (qid != NULL) {
1438 		err = got_object_open_as_commit(&pcommit, repo,
1439 		    qid->id);
1440 		if (err)
1441 			return err;
1442 	}
1443 
1444 	if (path && path[0] != '\0') {
1445 		int obj_type;
1446 		err = got_object_id_by_path(&obj_id2, repo, id, path);
1447 		if (err)
1448 			goto done;
1449 		err = got_object_id_str(&id_str2, obj_id2);
1450 		if (err) {
1451 			free(obj_id2);
1452 			goto done;
1453 		}
1454 		if (pcommit) {
1455 			err = got_object_id_by_path(&obj_id1, repo,
1456 			    qid->id, path);
1457 			if (err) {
1458 				free(obj_id2);
1459 				goto done;
1460 			}
1461 			err = got_object_id_str(&id_str1, obj_id1);
1462 			if (err) {
1463 				free(obj_id2);
1464 				goto done;
1465 			}
1466 		}
1467 		err = got_object_get_type(&obj_type, repo, obj_id2);
1468 		if (err) {
1469 			free(obj_id2);
1470 			goto done;
1471 		}
1472 		printf("diff %s %s\n", id_str1 ? id_str1 : "/dev/null", id_str2);
1473 		switch (obj_type) {
1474 		case GOT_OBJ_TYPE_BLOB:
1475 			err = diff_blobs(obj_id1, obj_id2, path, diff_context,
1476 			    repo);
1477 			break;
1478 		case GOT_OBJ_TYPE_TREE:
1479 			err = diff_trees(obj_id1, obj_id2, path, diff_context,
1480 			    repo);
1481 			break;
1482 		default:
1483 			err = got_error(GOT_ERR_OBJ_TYPE);
1484 			break;
1485 		}
1486 		free(obj_id1);
1487 		free(obj_id2);
1488 	} else {
1489 		obj_id2 = got_object_commit_get_tree_id(commit);
1490 		err = got_object_id_str(&id_str2, obj_id2);
1491 		if (err)
1492 			goto done;
1493 		obj_id1 = got_object_commit_get_tree_id(pcommit);
1494 		err = got_object_id_str(&id_str1, obj_id1);
1495 		if (err)
1496 			goto done;
1497 		printf("diff %s %s\n", id_str1 ? id_str1 : "/dev/null", id_str2);
1498 		err = diff_trees(obj_id1, obj_id2, "", diff_context, repo);
1499 	}
1500 
1501 done:
1502 	free(id_str1);
1503 	free(id_str2);
1504 	if (pcommit)
1505 		got_object_commit_close(pcommit);
1506 	return err;
1507 }
1508 
1509 static char *
1510 get_datestr(time_t *time, char *datebuf)
1511 {
1512 	struct tm mytm, *tm;
1513 	char *p, *s;
1514 
1515 	tm = gmtime_r(time, &mytm);
1516 	if (tm == NULL)
1517 		return NULL;
1518 	s = asctime_r(tm, datebuf);
1519 	if (s == NULL)
1520 		return NULL;
1521 	p = strchr(s, '\n');
1522 	if (p)
1523 		*p = '\0';
1524 	return s;
1525 }
1526 
1527 #define GOT_COMMIT_SEP_STR "-----------------------------------------------\n"
1528 
1529 static const struct got_error *
1530 print_commit(struct got_commit_object *commit, struct got_object_id *id,
1531     struct got_repository *repo, const char *path, int show_patch,
1532     int diff_context, struct got_reflist_head *refs)
1533 {
1534 	const struct got_error *err = NULL;
1535 	char *id_str, *datestr, *logmsg0, *logmsg, *line;
1536 	char datebuf[26];
1537 	time_t committer_time;
1538 	const char *author, *committer;
1539 	char *refs_str = NULL;
1540 	struct got_reflist_entry *re;
1541 
1542 	SIMPLEQ_FOREACH(re, refs, entry) {
1543 		char *s;
1544 		const char *name;
1545 		struct got_tag_object *tag = NULL;
1546 		int cmp;
1547 
1548 		name = got_ref_get_name(re->ref);
1549 		if (strcmp(name, GOT_REF_HEAD) == 0)
1550 			continue;
1551 		if (strncmp(name, "refs/", 5) == 0)
1552 			name += 5;
1553 		if (strncmp(name, "got/", 4) == 0)
1554 			continue;
1555 		if (strncmp(name, "heads/", 6) == 0)
1556 			name += 6;
1557 		if (strncmp(name, "remotes/", 8) == 0)
1558 			name += 8;
1559 		if (strncmp(name, "tags/", 5) == 0) {
1560 			err = got_object_open_as_tag(&tag, repo, re->id);
1561 			if (err) {
1562 				if (err->code != GOT_ERR_OBJ_TYPE)
1563 					return err;
1564 				/* Ref points at something other than a tag. */
1565 				err = NULL;
1566 				tag = NULL;
1567 			}
1568 		}
1569 		cmp = got_object_id_cmp(tag ?
1570 		    got_object_tag_get_object_id(tag) : re->id, id);
1571 		if (tag)
1572 			got_object_tag_close(tag);
1573 		if (cmp != 0)
1574 			continue;
1575 		s = refs_str;
1576 		if (asprintf(&refs_str, "%s%s%s", s ? s : "", s ? ", " : "",
1577 		    name) == -1) {
1578 			err = got_error_from_errno("asprintf");
1579 			free(s);
1580 			return err;
1581 		}
1582 		free(s);
1583 	}
1584 	err = got_object_id_str(&id_str, id);
1585 	if (err)
1586 		return err;
1587 
1588 	printf(GOT_COMMIT_SEP_STR);
1589 	printf("commit %s%s%s%s\n", id_str, refs_str ? " (" : "",
1590 	    refs_str ? refs_str : "", refs_str ? ")" : "");
1591 	free(id_str);
1592 	id_str = NULL;
1593 	free(refs_str);
1594 	refs_str = NULL;
1595 	printf("from: %s\n", got_object_commit_get_author(commit));
1596 	committer_time = got_object_commit_get_committer_time(commit);
1597 	datestr = get_datestr(&committer_time, datebuf);
1598 	if (datestr)
1599 		printf("date: %s UTC\n", datestr);
1600 	author = got_object_commit_get_author(commit);
1601 	committer = got_object_commit_get_committer(commit);
1602 	if (strcmp(author, committer) != 0)
1603 		printf("via: %s\n", committer);
1604 	if (got_object_commit_get_nparents(commit) > 1) {
1605 		const struct got_object_id_queue *parent_ids;
1606 		struct got_object_qid *qid;
1607 		int n = 1;
1608 		parent_ids = got_object_commit_get_parent_ids(commit);
1609 		SIMPLEQ_FOREACH(qid, parent_ids, entry) {
1610 			err = got_object_id_str(&id_str, qid->id);
1611 			if (err)
1612 				return err;
1613 			printf("parent %d: %s\n", n++, id_str);
1614 			free(id_str);
1615 		}
1616 	}
1617 
1618 	err = got_object_commit_get_logmsg(&logmsg0, commit);
1619 	if (err)
1620 		return err;
1621 
1622 	logmsg = logmsg0;
1623 	do {
1624 		line = strsep(&logmsg, "\n");
1625 		if (line)
1626 			printf(" %s\n", line);
1627 	} while (line);
1628 	free(logmsg0);
1629 
1630 	if (show_patch) {
1631 		err = print_patch(commit, id, path, diff_context, repo);
1632 		if (err == 0)
1633 			printf("\n");
1634 	}
1635 
1636 	if (fflush(stdout) != 0 && err == NULL)
1637 		err = got_error_from_errno("fflush");
1638 	return err;
1639 }
1640 
1641 static const struct got_error *
1642 print_commits(struct got_object_id *root_id, struct got_repository *repo,
1643     char *path, int show_patch, int diff_context, int limit,
1644     int first_parent_traversal, struct got_reflist_head *refs)
1645 {
1646 	const struct got_error *err;
1647 	struct got_commit_graph *graph;
1648 
1649 	err = got_commit_graph_open(&graph, root_id, path,
1650 	    first_parent_traversal, repo);
1651 	if (err)
1652 		return err;
1653 	err = got_commit_graph_iter_start(graph, root_id, repo,
1654 	    check_cancelled, NULL);
1655 	if (err)
1656 		goto done;
1657 	for (;;) {
1658 		struct got_commit_object *commit;
1659 		struct got_object_id *id;
1660 
1661 		if (sigint_received || sigpipe_received)
1662 			break;
1663 
1664 		err = got_commit_graph_iter_next(&id, graph);
1665 		if (err) {
1666 			if (err->code == GOT_ERR_ITER_COMPLETED) {
1667 				err = NULL;
1668 				break;
1669 			}
1670 			if (err->code != GOT_ERR_ITER_NEED_MORE)
1671 				break;
1672 			err = got_commit_graph_fetch_commits(graph, 1, repo,
1673 			    check_cancelled, NULL);
1674 			if (err)
1675 				break;
1676 			else
1677 				continue;
1678 		}
1679 		if (id == NULL)
1680 			break;
1681 
1682 		err = got_object_open_as_commit(&commit, repo, id);
1683 		if (err)
1684 			break;
1685 		err = print_commit(commit, id, repo, path, show_patch,
1686 		    diff_context, refs);
1687 		got_object_commit_close(commit);
1688 		if (err || (limit && --limit == 0))
1689 			break;
1690 	}
1691 done:
1692 	got_commit_graph_close(graph);
1693 	return err;
1694 }
1695 
1696 __dead static void
1697 usage_log(void)
1698 {
1699 	fprintf(stderr, "usage: %s log [-c commit] [-C number] [-f] [ -l N ] [-p] "
1700 	    "[-r repository-path] [path]\n", getprogname());
1701 	exit(1);
1702 }
1703 
1704 static int
1705 get_default_log_limit(void)
1706 {
1707 	const char *got_default_log_limit;
1708 	long long n;
1709 	const char *errstr;
1710 
1711 	got_default_log_limit = getenv("GOT_LOG_DEFAULT_LIMIT");
1712 	if (got_default_log_limit == NULL)
1713 		return 0;
1714 	n = strtonum(got_default_log_limit, 0, INT_MAX, &errstr);
1715 	if (errstr != NULL)
1716 		return 0;
1717 	return n;
1718 }
1719 
1720 static const struct got_error *
1721 cmd_log(int argc, char *argv[])
1722 {
1723 	const struct got_error *error;
1724 	struct got_repository *repo = NULL;
1725 	struct got_worktree *worktree = NULL;
1726 	struct got_commit_object *commit = NULL;
1727 	struct got_object_id *id = NULL;
1728 	char *repo_path = NULL, *path = NULL, *cwd = NULL, *in_repo_path = NULL;
1729 	char *start_commit = NULL;
1730 	int diff_context = 3, ch;
1731 	int show_patch = 0, limit = 0, first_parent_traversal = 0;
1732 	const char *errstr;
1733 	struct got_reflist_head refs;
1734 
1735 	SIMPLEQ_INIT(&refs);
1736 
1737 #ifndef PROFILE
1738 	if (pledge("stdio rpath wpath cpath flock proc exec sendfd unveil",
1739 	    NULL)
1740 	    == -1)
1741 		err(1, "pledge");
1742 #endif
1743 
1744 	limit = get_default_log_limit();
1745 
1746 	while ((ch = getopt(argc, argv, "b:pc:C:l:fr:")) != -1) {
1747 		switch (ch) {
1748 		case 'p':
1749 			show_patch = 1;
1750 			break;
1751 		case 'c':
1752 			start_commit = optarg;
1753 			break;
1754 		case 'C':
1755 			diff_context = strtonum(optarg, 0, GOT_DIFF_MAX_CONTEXT,
1756 			    &errstr);
1757 			if (errstr != NULL)
1758 				err(1, "-C option %s", errstr);
1759 			break;
1760 		case 'l':
1761 			limit = strtonum(optarg, 0, INT_MAX, &errstr);
1762 			if (errstr != NULL)
1763 				err(1, "-l option %s", errstr);
1764 			break;
1765 		case 'f':
1766 			first_parent_traversal = 1;
1767 			break;
1768 		case 'r':
1769 			repo_path = realpath(optarg, NULL);
1770 			if (repo_path == NULL)
1771 				err(1, "-r option");
1772 			got_path_strip_trailing_slashes(repo_path);
1773 			break;
1774 		default:
1775 			usage_log();
1776 			/* NOTREACHED */
1777 		}
1778 	}
1779 
1780 	argc -= optind;
1781 	argv += optind;
1782 
1783 	cwd = getcwd(NULL, 0);
1784 	if (cwd == NULL) {
1785 		error = got_error_from_errno("getcwd");
1786 		goto done;
1787 	}
1788 
1789 	error = got_worktree_open(&worktree, cwd);
1790 	if (error && error->code != GOT_ERR_NOT_WORKTREE)
1791 		goto done;
1792 	error = NULL;
1793 
1794 	if (argc == 0) {
1795 		path = strdup("");
1796 		if (path == NULL) {
1797 			error = got_error_from_errno("strdup");
1798 			goto done;
1799 		}
1800 	} else if (argc == 1) {
1801 		if (worktree) {
1802 			error = got_worktree_resolve_path(&path, worktree,
1803 			    argv[0]);
1804 			if (error)
1805 				goto done;
1806 		} else {
1807 			path = strdup(argv[0]);
1808 			if (path == NULL) {
1809 				error = got_error_from_errno("strdup");
1810 				goto done;
1811 			}
1812 		}
1813 	} else
1814 		usage_log();
1815 
1816 	if (repo_path == NULL) {
1817 		repo_path = worktree ?
1818 		    strdup(got_worktree_get_repo_path(worktree)) : strdup(cwd);
1819 	}
1820 	if (repo_path == NULL) {
1821 		error = got_error_from_errno("strdup");
1822 		goto done;
1823 	}
1824 
1825 	error = got_repo_open(&repo, repo_path, NULL);
1826 	if (error != NULL)
1827 		goto done;
1828 
1829 	error = apply_unveil(got_repo_get_path(repo), 1,
1830 	    worktree ? got_worktree_get_root_path(worktree) : NULL);
1831 	if (error)
1832 		goto done;
1833 
1834 	if (start_commit == NULL) {
1835 		struct got_reference *head_ref;
1836 		error = got_ref_open(&head_ref, repo,
1837 		    worktree ? got_worktree_get_head_ref_name(worktree)
1838 		    : GOT_REF_HEAD, 0);
1839 		if (error != NULL)
1840 			return error;
1841 		error = got_ref_resolve(&id, repo, head_ref);
1842 		got_ref_close(head_ref);
1843 		if (error != NULL)
1844 			return error;
1845 		error = got_object_open_as_commit(&commit, repo, id);
1846 	} else {
1847 		struct got_reference *ref;
1848 		error = got_ref_open(&ref, repo, start_commit, 0);
1849 		if (error == NULL) {
1850 			int obj_type;
1851 			error = got_ref_resolve(&id, repo, ref);
1852 			got_ref_close(ref);
1853 			if (error != NULL)
1854 				goto done;
1855 			error = got_object_get_type(&obj_type, repo, id);
1856 			if (error != NULL)
1857 				goto done;
1858 			if (obj_type == GOT_OBJ_TYPE_TAG) {
1859 				struct got_tag_object *tag;
1860 				error = got_object_open_as_tag(&tag, repo, id);
1861 				if (error != NULL)
1862 					goto done;
1863 				if (got_object_tag_get_object_type(tag) !=
1864 				    GOT_OBJ_TYPE_COMMIT) {
1865 					got_object_tag_close(tag);
1866 					error = got_error(GOT_ERR_OBJ_TYPE);
1867 					goto done;
1868 				}
1869 				free(id);
1870 				id = got_object_id_dup(
1871 				    got_object_tag_get_object_id(tag));
1872 				if (id == NULL)
1873 					error = got_error_from_errno(
1874 					    "got_object_id_dup");
1875 				got_object_tag_close(tag);
1876 				if (error)
1877 					goto done;
1878 			} else if (obj_type != GOT_OBJ_TYPE_COMMIT) {
1879 				error = got_error(GOT_ERR_OBJ_TYPE);
1880 				goto done;
1881 			}
1882 			error = got_object_open_as_commit(&commit, repo, id);
1883 			if (error != NULL)
1884 				goto done;
1885 		}
1886 		if (commit == NULL) {
1887 			error = got_repo_match_object_id_prefix(&id,
1888 			    start_commit, GOT_OBJ_TYPE_COMMIT, repo);
1889 			if (error != NULL)
1890 				return error;
1891 		}
1892 	}
1893 	if (error != NULL)
1894 		goto done;
1895 
1896 	if (worktree) {
1897 		const char *prefix = got_worktree_get_path_prefix(worktree);
1898 		char *p;
1899 		if (asprintf(&p, "%s%s%s", prefix,
1900 		    (strcmp(prefix, "/") != 0) ? "/" : "", path) == -1) {
1901 			error = got_error_from_errno("asprintf");
1902 			goto done;
1903 		}
1904 		error = got_repo_map_path(&in_repo_path, repo, p, 1);
1905 		free(p);
1906 	} else
1907 		error = got_repo_map_path(&in_repo_path, repo, path, 1);
1908 	if (error != NULL)
1909 		goto done;
1910 	if (in_repo_path) {
1911 		free(path);
1912 		path = in_repo_path;
1913 	}
1914 
1915 	error = got_ref_list(&refs, repo, NULL, got_ref_cmp_by_name, NULL);
1916 	if (error)
1917 		goto done;
1918 
1919 	error = print_commits(id, repo, path, show_patch,
1920 	    diff_context, limit, first_parent_traversal, &refs);
1921 done:
1922 	free(path);
1923 	free(repo_path);
1924 	free(cwd);
1925 	free(id);
1926 	if (worktree)
1927 		got_worktree_close(worktree);
1928 	if (repo) {
1929 		const struct got_error *repo_error;
1930 		repo_error = got_repo_close(repo);
1931 		if (error == NULL)
1932 			error = repo_error;
1933 	}
1934 	got_ref_list_free(&refs);
1935 	return error;
1936 }
1937 
1938 __dead static void
1939 usage_diff(void)
1940 {
1941 	fprintf(stderr, "usage: %s diff [-C number] [-r repository-path] [-s] "
1942 	    "[object1 object2 | path]\n", getprogname());
1943 	exit(1);
1944 }
1945 
1946 struct print_diff_arg {
1947 	struct got_repository *repo;
1948 	struct got_worktree *worktree;
1949 	int diff_context;
1950 	const char *id_str;
1951 	int header_shown;
1952 	int diff_staged;
1953 };
1954 
1955 static const struct got_error *
1956 print_diff(void *arg, unsigned char status, unsigned char staged_status,
1957     const char *path, struct got_object_id *blob_id,
1958     struct got_object_id *staged_blob_id, struct got_object_id *commit_id)
1959 {
1960 	struct print_diff_arg *a = arg;
1961 	const struct got_error *err = NULL;
1962 	struct got_blob_object *blob1 = NULL;
1963 	FILE *f2 = NULL;
1964 	char *abspath = NULL, *label1 = NULL;
1965 	struct stat sb;
1966 
1967 	if (a->diff_staged) {
1968 		if (staged_status != GOT_STATUS_MODIFY &&
1969 		    staged_status != GOT_STATUS_ADD &&
1970 		    staged_status != GOT_STATUS_DELETE)
1971 			return NULL;
1972 	} else {
1973 		if (staged_status == GOT_STATUS_DELETE)
1974 			return NULL;
1975 		if (status == GOT_STATUS_NONEXISTENT)
1976 			return got_error_set_errno(ENOENT, path);
1977 		if (status != GOT_STATUS_MODIFY &&
1978 		    status != GOT_STATUS_ADD &&
1979 		    status != GOT_STATUS_DELETE &&
1980 		    status != GOT_STATUS_CONFLICT)
1981 			return NULL;
1982 	}
1983 
1984 	if (!a->header_shown) {
1985 		printf("diff %s %s%s\n", a->id_str,
1986 		    got_worktree_get_root_path(a->worktree),
1987 		    a->diff_staged ? " (staged changes)" : "");
1988 		a->header_shown = 1;
1989 	}
1990 
1991 	if (a->diff_staged) {
1992 		const char *label1 = NULL, *label2 = NULL;
1993 		switch (staged_status) {
1994 		case GOT_STATUS_MODIFY:
1995 			label1 = path;
1996 			label2 = path;
1997 			break;
1998 		case GOT_STATUS_ADD:
1999 			label2 = path;
2000 			break;
2001 		case GOT_STATUS_DELETE:
2002 			label1 = path;
2003 			break;
2004 		default:
2005 			return got_error(GOT_ERR_FILE_STATUS);
2006 		}
2007 		return got_diff_objects_as_blobs(blob_id, staged_blob_id,
2008 		    label1, label2, a->diff_context, a->repo, stdout);
2009 	}
2010 
2011 	if (staged_status == GOT_STATUS_ADD ||
2012 	    staged_status == GOT_STATUS_MODIFY) {
2013 		char *id_str;
2014 		err = got_object_open_as_blob(&blob1, a->repo, staged_blob_id,
2015 		    8192);
2016 		if (err)
2017 			goto done;
2018 		err = got_object_id_str(&id_str, staged_blob_id);
2019 		if (err)
2020 			goto done;
2021 		if (asprintf(&label1, "%s (staged)", id_str) == -1) {
2022 			err = got_error_from_errno("asprintf");
2023 			free(id_str);
2024 			goto done;
2025 		}
2026 		free(id_str);
2027 	} else if (status != GOT_STATUS_ADD) {
2028 		err = got_object_open_as_blob(&blob1, a->repo, blob_id, 8192);
2029 		if (err)
2030 			goto done;
2031 	}
2032 
2033 	if (status != GOT_STATUS_DELETE) {
2034 		if (asprintf(&abspath, "%s/%s",
2035 		    got_worktree_get_root_path(a->worktree), path) == -1) {
2036 			err = got_error_from_errno("asprintf");
2037 			goto done;
2038 		}
2039 
2040 		f2 = fopen(abspath, "r");
2041 		if (f2 == NULL) {
2042 			err = got_error_from_errno2("fopen", abspath);
2043 			goto done;
2044 		}
2045 		if (lstat(abspath, &sb) == -1) {
2046 			err = got_error_from_errno2("lstat", abspath);
2047 			goto done;
2048 		}
2049 	} else
2050 		sb.st_size = 0;
2051 
2052 	err = got_diff_blob_file(blob1, label1, f2, sb.st_size, path,
2053 	    a->diff_context, stdout);
2054 done:
2055 	if (blob1)
2056 		got_object_blob_close(blob1);
2057 	if (f2 && fclose(f2) != 0 && err == NULL)
2058 		err = got_error_from_errno("fclose");
2059 	free(abspath);
2060 	return err;
2061 }
2062 
2063 static const struct got_error *
2064 match_object_id(struct got_object_id **id, char **label,
2065     const char *id_str, int obj_type, int resolve_tags,
2066     struct got_repository *repo)
2067 {
2068 	const struct got_error *err;
2069 	struct got_tag_object *tag;
2070 	struct got_reference *ref = NULL;
2071 
2072 	*id = NULL;
2073 	*label = NULL;
2074 
2075 	if (resolve_tags) {
2076 		err = got_repo_object_match_tag(&tag, id_str, GOT_OBJ_TYPE_ANY,
2077 		    repo);
2078 		if (err == NULL) {
2079 			*id = got_object_id_dup(
2080 			    got_object_tag_get_object_id(tag));
2081 			if (*id == NULL)
2082 				err = got_error_from_errno("got_object_id_dup");
2083 			else if (asprintf(label, "refs/tags/%s",
2084 			    got_object_tag_get_name(tag)) == -1) {
2085 				err = got_error_from_errno("asprintf");
2086 				free(*id);
2087 				*id = NULL;
2088 			}
2089 			got_object_tag_close(tag);
2090 			return err;
2091 		} else if (err->code != GOT_ERR_NO_OBJ)
2092 			return err;
2093 	}
2094 
2095 	err = got_repo_match_object_id_prefix(id, id_str, obj_type, repo);
2096 	if (err) {
2097 		if (err->code != GOT_ERR_BAD_OBJ_ID_STR)
2098 			return err;
2099 		err = got_ref_open(&ref, repo, id_str, 0);
2100 		if (err != NULL)
2101 			goto done;
2102 		*label = strdup(got_ref_get_name(ref));
2103 		if (*label == NULL) {
2104 			err = got_error_from_errno("strdup");
2105 			goto done;
2106 		}
2107 		err = got_ref_resolve(id, repo, ref);
2108 	} else {
2109 		err = got_object_id_str(label, *id);
2110 		if (*label == NULL) {
2111 			err = got_error_from_errno("strdup");
2112 			goto done;
2113 		}
2114 	}
2115 done:
2116 	if (ref)
2117 		got_ref_close(ref);
2118 	return err;
2119 }
2120 
2121 
2122 static const struct got_error *
2123 cmd_diff(int argc, char *argv[])
2124 {
2125 	const struct got_error *error;
2126 	struct got_repository *repo = NULL;
2127 	struct got_worktree *worktree = NULL;
2128 	char *cwd = NULL, *repo_path = NULL;
2129 	struct got_object_id *id1 = NULL, *id2 = NULL;
2130 	const char *id_str1 = NULL, *id_str2 = NULL;
2131 	char *label1 = NULL, *label2 = NULL;
2132 	int type1, type2;
2133 	int diff_context = 3, diff_staged = 0, ch;
2134 	const char *errstr;
2135 	char *path = NULL;
2136 
2137 #ifndef PROFILE
2138 	if (pledge("stdio rpath wpath cpath flock proc exec sendfd unveil",
2139 	    NULL) == -1)
2140 		err(1, "pledge");
2141 #endif
2142 
2143 	while ((ch = getopt(argc, argv, "C:r:s")) != -1) {
2144 		switch (ch) {
2145 		case 'C':
2146 			diff_context = strtonum(optarg, 1, INT_MAX, &errstr);
2147 			if (errstr != NULL)
2148 				err(1, "-C option %s", errstr);
2149 			break;
2150 		case 'r':
2151 			repo_path = realpath(optarg, NULL);
2152 			if (repo_path == NULL)
2153 				err(1, "-r option");
2154 			got_path_strip_trailing_slashes(repo_path);
2155 			break;
2156 		case 's':
2157 			diff_staged = 1;
2158 			break;
2159 		default:
2160 			usage_diff();
2161 			/* NOTREACHED */
2162 		}
2163 	}
2164 
2165 	argc -= optind;
2166 	argv += optind;
2167 
2168 	cwd = getcwd(NULL, 0);
2169 	if (cwd == NULL) {
2170 		error = got_error_from_errno("getcwd");
2171 		goto done;
2172 	}
2173 	error = got_worktree_open(&worktree, cwd);
2174 	if (error && error->code != GOT_ERR_NOT_WORKTREE)
2175 		goto done;
2176 	if (argc <= 1) {
2177 		if (worktree == NULL) {
2178 			error = got_error(GOT_ERR_NOT_WORKTREE);
2179 			goto done;
2180 		}
2181 		if (repo_path)
2182 			errx(1,
2183 			    "-r option can't be used when diffing a work tree");
2184 		repo_path = strdup(got_worktree_get_repo_path(worktree));
2185 		if (repo_path == NULL) {
2186 			error = got_error_from_errno("strdup");
2187 			goto done;
2188 		}
2189 		if (argc == 1) {
2190 			error = got_worktree_resolve_path(&path, worktree,
2191 			    argv[0]);
2192 			if (error)
2193 				goto done;
2194 		} else {
2195 			path = strdup("");
2196 			if (path == NULL) {
2197 				error = got_error_from_errno("strdup");
2198 				goto done;
2199 			}
2200 		}
2201 	} else if (argc == 2) {
2202 		if (diff_staged)
2203 			errx(1, "-s option can't be used when diffing "
2204 			    "objects in repository");
2205 		id_str1 = argv[0];
2206 		id_str2 = argv[1];
2207 		if (worktree && repo_path == NULL) {
2208 			repo_path =
2209 			    strdup(got_worktree_get_repo_path(worktree));
2210 			if (repo_path == NULL) {
2211 				error = got_error_from_errno("strdup");
2212 				goto done;
2213 			}
2214 		}
2215 	} else
2216 		usage_diff();
2217 
2218 	if (repo_path == NULL) {
2219 		repo_path = getcwd(NULL, 0);
2220 		if (repo_path == NULL)
2221 			return got_error_from_errno("getcwd");
2222 	}
2223 
2224 	error = got_repo_open(&repo, repo_path, NULL);
2225 	free(repo_path);
2226 	if (error != NULL)
2227 		goto done;
2228 
2229 	error = apply_unveil(got_repo_get_path(repo), 1,
2230 	    worktree ? got_worktree_get_root_path(worktree) : NULL);
2231 	if (error)
2232 		goto done;
2233 
2234 	if (argc <= 1) {
2235 		struct print_diff_arg arg;
2236 		struct got_pathlist_head paths;
2237 		char *id_str;
2238 
2239 		TAILQ_INIT(&paths);
2240 
2241 		error = got_object_id_str(&id_str,
2242 		    got_worktree_get_base_commit_id(worktree));
2243 		if (error)
2244 			goto done;
2245 		arg.repo = repo;
2246 		arg.worktree = worktree;
2247 		arg.diff_context = diff_context;
2248 		arg.id_str = id_str;
2249 		arg.header_shown = 0;
2250 		arg.diff_staged = diff_staged;
2251 
2252 		error = got_pathlist_append(&paths, path, NULL);
2253 		if (error)
2254 			goto done;
2255 
2256 		error = got_worktree_status(worktree, &paths, repo, print_diff,
2257 		    &arg, check_cancelled, NULL);
2258 		free(id_str);
2259 		got_pathlist_free(&paths);
2260 		goto done;
2261 	}
2262 
2263 	error = match_object_id(&id1, &label1, id_str1, GOT_OBJ_TYPE_ANY, 1,
2264 	    repo);
2265 	if (error)
2266 		goto done;
2267 
2268 	error = match_object_id(&id2, &label2, id_str2, GOT_OBJ_TYPE_ANY, 1,
2269 	    repo);
2270 	if (error)
2271 		goto done;
2272 
2273 	error = got_object_get_type(&type1, repo, id1);
2274 	if (error)
2275 		goto done;
2276 
2277 	error = got_object_get_type(&type2, repo, id2);
2278 	if (error)
2279 		goto done;
2280 
2281 	if (type1 != type2) {
2282 		error = got_error(GOT_ERR_OBJ_TYPE);
2283 		goto done;
2284 	}
2285 
2286 	switch (type1) {
2287 	case GOT_OBJ_TYPE_BLOB:
2288 		error = got_diff_objects_as_blobs(id1, id2, NULL, NULL,
2289 		    diff_context, repo, stdout);
2290 		break;
2291 	case GOT_OBJ_TYPE_TREE:
2292 		error = got_diff_objects_as_trees(id1, id2, "", "",
2293 		    diff_context, repo, stdout);
2294 		break;
2295 	case GOT_OBJ_TYPE_COMMIT:
2296 		printf("diff %s %s\n", label1, label2);
2297 		error = got_diff_objects_as_commits(id1, id2, diff_context,
2298 		    repo, stdout);
2299 		break;
2300 	default:
2301 		error = got_error(GOT_ERR_OBJ_TYPE);
2302 	}
2303 
2304 done:
2305 	free(label1);
2306 	free(label2);
2307 	free(id1);
2308 	free(id2);
2309 	free(path);
2310 	if (worktree)
2311 		got_worktree_close(worktree);
2312 	if (repo) {
2313 		const struct got_error *repo_error;
2314 		repo_error = got_repo_close(repo);
2315 		if (error == NULL)
2316 			error = repo_error;
2317 	}
2318 	return error;
2319 }
2320 
2321 __dead static void
2322 usage_blame(void)
2323 {
2324 	fprintf(stderr,
2325 	    "usage: %s blame [-c commit] [-r repository-path] path\n",
2326 	    getprogname());
2327 	exit(1);
2328 }
2329 
2330 struct blame_line {
2331 	int annotated;
2332 	char *id_str;
2333 	char *committer;
2334 	char datebuf[9]; /* YY-MM-DD + NUL */
2335 };
2336 
2337 struct blame_cb_args {
2338 	struct blame_line *lines;
2339 	int nlines;
2340 	int nlines_prec;
2341 	int lineno_cur;
2342 	off_t *line_offsets;
2343 	FILE *f;
2344 	struct got_repository *repo;
2345 };
2346 
2347 static const struct got_error *
2348 blame_cb(void *arg, int nlines, int lineno, struct got_object_id *id)
2349 {
2350 	const struct got_error *err = NULL;
2351 	struct blame_cb_args *a = arg;
2352 	struct blame_line *bline;
2353 	char *line = NULL;
2354 	size_t linesize = 0;
2355 	struct got_commit_object *commit = NULL;
2356 	off_t offset;
2357 	struct tm tm;
2358 	time_t committer_time;
2359 
2360 	if (nlines != a->nlines ||
2361 	    (lineno != -1 && lineno < 1) || lineno > a->nlines)
2362 		return got_error(GOT_ERR_RANGE);
2363 
2364 	if (sigint_received)
2365 		return got_error(GOT_ERR_ITER_COMPLETED);
2366 
2367 	if (lineno == -1)
2368 		return NULL; /* no change in this commit */
2369 
2370 	/* Annotate this line. */
2371 	bline = &a->lines[lineno - 1];
2372 	if (bline->annotated)
2373 		return NULL;
2374 	err = got_object_id_str(&bline->id_str, id);
2375 	if (err)
2376 		return err;
2377 
2378 	err = got_object_open_as_commit(&commit, a->repo, id);
2379 	if (err)
2380 		goto done;
2381 
2382 	bline->committer = strdup(got_object_commit_get_committer(commit));
2383 	if (bline->committer == NULL) {
2384 		err = got_error_from_errno("strdup");
2385 		goto done;
2386 	}
2387 
2388 	committer_time = got_object_commit_get_committer_time(commit);
2389 	if (localtime_r(&committer_time, &tm) == NULL)
2390 		return got_error_from_errno("localtime_r");
2391 	if (strftime(bline->datebuf, sizeof(bline->datebuf), "%g/%m/%d",
2392 	    &tm) >= sizeof(bline->datebuf)) {
2393 		err = got_error(GOT_ERR_NO_SPACE);
2394 		goto done;
2395 	}
2396 	bline->annotated = 1;
2397 
2398 	/* Print lines annotated so far. */
2399 	bline = &a->lines[a->lineno_cur - 1];
2400 	if (!bline->annotated)
2401 		goto done;
2402 
2403 	offset = a->line_offsets[a->lineno_cur - 1];
2404 	if (fseeko(a->f, offset, SEEK_SET) == -1) {
2405 		err = got_error_from_errno("fseeko");
2406 		goto done;
2407 	}
2408 
2409 	while (bline->annotated) {
2410 		char *smallerthan, *at, *nl, *committer;
2411 		size_t len;
2412 
2413 		if (getline(&line, &linesize, a->f) == (ssize_t)-1) {
2414 			if (ferror(a->f))
2415 				err = got_error_from_errno("getline");
2416 			break;
2417 		}
2418 
2419 		committer = bline->committer;
2420 		smallerthan = strchr(committer, '<');
2421 		if (smallerthan && smallerthan[1] != '\0')
2422 			committer = smallerthan + 1;
2423 		at = strchr(committer, '@');
2424 		if (at)
2425 			*at = '\0';
2426 		len = strlen(committer);
2427 		if (len >= 9)
2428 			committer[8] = '\0';
2429 
2430 		nl = strchr(line, '\n');
2431 		if (nl)
2432 			*nl = '\0';
2433 		printf("%.*d) %.8s %s %-8s %s\n", a->nlines_prec, a->lineno_cur,
2434 		    bline->id_str, bline->datebuf, committer, line);
2435 
2436 		a->lineno_cur++;
2437 		bline = &a->lines[a->lineno_cur - 1];
2438 	}
2439 done:
2440 	if (commit)
2441 		got_object_commit_close(commit);
2442 	free(line);
2443 	return err;
2444 }
2445 
2446 static const struct got_error *
2447 cmd_blame(int argc, char *argv[])
2448 {
2449 	const struct got_error *error;
2450 	struct got_repository *repo = NULL;
2451 	struct got_worktree *worktree = NULL;
2452 	char *path, *cwd = NULL, *repo_path = NULL, *in_repo_path = NULL;
2453 	struct got_object_id *obj_id = NULL;
2454 	struct got_object_id *commit_id = NULL;
2455 	struct got_blob_object *blob = NULL;
2456 	char *commit_id_str = NULL;
2457 	struct blame_cb_args bca;
2458 	int ch, obj_type, i;
2459 	size_t filesize;
2460 
2461 	memset(&bca, 0, sizeof(bca));
2462 
2463 #ifndef PROFILE
2464 	if (pledge("stdio rpath wpath cpath flock proc exec sendfd unveil",
2465 	    NULL) == -1)
2466 		err(1, "pledge");
2467 #endif
2468 
2469 	while ((ch = getopt(argc, argv, "c:r:")) != -1) {
2470 		switch (ch) {
2471 		case 'c':
2472 			commit_id_str = optarg;
2473 			break;
2474 		case 'r':
2475 			repo_path = realpath(optarg, NULL);
2476 			if (repo_path == NULL)
2477 				err(1, "-r option");
2478 			got_path_strip_trailing_slashes(repo_path);
2479 			break;
2480 		default:
2481 			usage_blame();
2482 			/* NOTREACHED */
2483 		}
2484 	}
2485 
2486 	argc -= optind;
2487 	argv += optind;
2488 
2489 	if (argc == 1)
2490 		path = argv[0];
2491 	else
2492 		usage_blame();
2493 
2494 	cwd = getcwd(NULL, 0);
2495 	if (cwd == NULL) {
2496 		error = got_error_from_errno("getcwd");
2497 		goto done;
2498 	}
2499 	if (repo_path == NULL) {
2500 		error = got_worktree_open(&worktree, cwd);
2501 		if (error && error->code != GOT_ERR_NOT_WORKTREE)
2502 			goto done;
2503 		else
2504 			error = NULL;
2505 		if (worktree) {
2506 			repo_path =
2507 			    strdup(got_worktree_get_repo_path(worktree));
2508 			if (repo_path == NULL)
2509 				error = got_error_from_errno("strdup");
2510 			if (error)
2511 				goto done;
2512 		} else {
2513 			repo_path = strdup(cwd);
2514 			if (repo_path == NULL) {
2515 				error = got_error_from_errno("strdup");
2516 				goto done;
2517 			}
2518 		}
2519 	}
2520 
2521 	error = got_repo_open(&repo, repo_path, NULL);
2522 	if (error != NULL)
2523 		goto done;
2524 
2525 	error = apply_unveil(got_repo_get_path(repo), 1, NULL);
2526 	if (error)
2527 		goto done;
2528 
2529 	if (worktree) {
2530 		const char *prefix = got_worktree_get_path_prefix(worktree);
2531 		char *p, *worktree_subdir = cwd +
2532 		    strlen(got_worktree_get_root_path(worktree));
2533 		if (asprintf(&p, "%s%s%s%s%s",
2534 		    prefix, (strcmp(prefix, "/") != 0) ? "/" : "",
2535 		    worktree_subdir, worktree_subdir[0] ? "/" : "",
2536 		    path) == -1) {
2537 			error = got_error_from_errno("asprintf");
2538 			goto done;
2539 		}
2540 		error = got_repo_map_path(&in_repo_path, repo, p, 0);
2541 		free(p);
2542 	} else {
2543 		error = got_repo_map_path(&in_repo_path, repo, path, 1);
2544 	}
2545 	if (error)
2546 		goto done;
2547 
2548 	if (commit_id_str == NULL) {
2549 		struct got_reference *head_ref;
2550 		error = got_ref_open(&head_ref, repo, GOT_REF_HEAD, 0);
2551 		if (error != NULL)
2552 			goto done;
2553 		error = got_ref_resolve(&commit_id, repo, head_ref);
2554 		got_ref_close(head_ref);
2555 		if (error != NULL)
2556 			goto done;
2557 	} else {
2558 		error = resolve_commit_arg(&commit_id, commit_id_str, repo);
2559 		if (error)
2560 			goto done;
2561 	}
2562 
2563 	error = got_object_id_by_path(&obj_id, repo, commit_id, in_repo_path);
2564 	if (error)
2565 		goto done;
2566 	if (obj_id == NULL) {
2567 		error = got_error(GOT_ERR_NO_OBJ);
2568 		goto done;
2569 	}
2570 
2571 	error = got_object_get_type(&obj_type, repo, obj_id);
2572 	if (error)
2573 		goto done;
2574 
2575 	if (obj_type != GOT_OBJ_TYPE_BLOB) {
2576 		error = got_error(GOT_ERR_OBJ_TYPE);
2577 		goto done;
2578 	}
2579 
2580 	error = got_object_open_as_blob(&blob, repo, obj_id, 8192);
2581 	if (error)
2582 		goto done;
2583 	bca.f = got_opentemp();
2584 	if (bca.f == NULL) {
2585 		error = got_error_from_errno("got_opentemp");
2586 		goto done;
2587 	}
2588 	error = got_object_blob_dump_to_file(&filesize, &bca.nlines,
2589 	    &bca.line_offsets, bca.f, blob);
2590 	if (error || bca.nlines == 0)
2591 		goto done;
2592 
2593 	/* Don't include \n at EOF in the blame line count. */
2594 	if (bca.line_offsets[bca.nlines - 1] == filesize)
2595 		bca.nlines--;
2596 
2597 	bca.lines = calloc(bca.nlines, sizeof(*bca.lines));
2598 	if (bca.lines == NULL) {
2599 		error = got_error_from_errno("calloc");
2600 		goto done;
2601 	}
2602 	bca.lineno_cur = 1;
2603 	bca.nlines_prec = 0;
2604 	i = bca.nlines;
2605 	while (i > 0) {
2606 		i /= 10;
2607 		bca.nlines_prec++;
2608 	}
2609 	bca.repo = repo;
2610 
2611 	error = got_blame(in_repo_path, commit_id, repo, blame_cb, &bca,
2612 	    check_cancelled, NULL);
2613 	if (error)
2614 		goto done;
2615 done:
2616 	free(in_repo_path);
2617 	free(repo_path);
2618 	free(cwd);
2619 	free(commit_id);
2620 	free(obj_id);
2621 	if (blob)
2622 		got_object_blob_close(blob);
2623 	if (worktree)
2624 		got_worktree_close(worktree);
2625 	if (repo) {
2626 		const struct got_error *repo_error;
2627 		repo_error = got_repo_close(repo);
2628 		if (error == NULL)
2629 			error = repo_error;
2630 	}
2631 	if (bca.lines) {
2632 		for (i = 0; i < bca.nlines; i++) {
2633 			struct blame_line *bline = &bca.lines[i];
2634 			free(bline->id_str);
2635 			free(bline->committer);
2636 		}
2637 		free(bca.lines);
2638 	}
2639 	free(bca.line_offsets);
2640 	if (bca.f && fclose(bca.f) == EOF && error == NULL)
2641 		error = got_error_from_errno("fclose");
2642 	return error;
2643 }
2644 
2645 __dead static void
2646 usage_tree(void)
2647 {
2648 	fprintf(stderr,
2649 	    "usage: %s tree [-c commit] [-r repository-path] [-iR] path\n",
2650 	    getprogname());
2651 	exit(1);
2652 }
2653 
2654 static void
2655 print_entry(struct got_tree_entry *te, const char *id, const char *path,
2656     const char *root_path)
2657 {
2658 	int is_root_path = (strcmp(path, root_path) == 0);
2659 	const char *modestr = "";
2660 
2661 	path += strlen(root_path);
2662 	while (path[0] == '/')
2663 		path++;
2664 
2665 	if (got_object_tree_entry_is_submodule(te))
2666 		modestr = "$";
2667 	else if (S_ISLNK(te->mode))
2668 		modestr = "@";
2669 	else if (S_ISDIR(te->mode))
2670 		modestr = "/";
2671 	else if (te->mode & S_IXUSR)
2672 		modestr = "*";
2673 
2674 	printf("%s%s%s%s%s\n", id ? id : "", path,
2675 	    is_root_path ? "" : "/", te->name, modestr);
2676 }
2677 
2678 static const struct got_error *
2679 print_tree(const char *path, struct got_object_id *commit_id,
2680     int show_ids, int recurse, const char *root_path,
2681     struct got_repository *repo)
2682 {
2683 	const struct got_error *err = NULL;
2684 	struct got_object_id *tree_id = NULL;
2685 	struct got_tree_object *tree = NULL;
2686 	const struct got_tree_entries *entries;
2687 	struct got_tree_entry *te;
2688 
2689 	err = got_object_id_by_path(&tree_id, repo, commit_id, path);
2690 	if (err)
2691 		goto done;
2692 
2693 	err = got_object_open_as_tree(&tree, repo, tree_id);
2694 	if (err)
2695 		goto done;
2696 	entries = got_object_tree_get_entries(tree);
2697 	te = SIMPLEQ_FIRST(&entries->head);
2698 	while (te) {
2699 		char *id = NULL;
2700 
2701 		if (sigint_received || sigpipe_received)
2702 			break;
2703 
2704 		if (show_ids) {
2705 			char *id_str;
2706 			err = got_object_id_str(&id_str, te->id);
2707 			if (err)
2708 				goto done;
2709 			if (asprintf(&id, "%s ", id_str) == -1) {
2710 				err = got_error_from_errno("asprintf");
2711 				free(id_str);
2712 				goto done;
2713 			}
2714 			free(id_str);
2715 		}
2716 		print_entry(te, id, path, root_path);
2717 		free(id);
2718 
2719 		if (recurse && S_ISDIR(te->mode)) {
2720 			char *child_path;
2721 			if (asprintf(&child_path, "%s%s%s", path,
2722 			    path[0] == '/' && path[1] == '\0' ? "" : "/",
2723 			    te->name) == -1) {
2724 				err = got_error_from_errno("asprintf");
2725 				goto done;
2726 			}
2727 			err = print_tree(child_path, commit_id, show_ids, 1,
2728 			    root_path, repo);
2729 			free(child_path);
2730 			if (err)
2731 				goto done;
2732 		}
2733 
2734 		te = SIMPLEQ_NEXT(te, entry);
2735 	}
2736 done:
2737 	if (tree)
2738 		got_object_tree_close(tree);
2739 	free(tree_id);
2740 	return err;
2741 }
2742 
2743 static const struct got_error *
2744 cmd_tree(int argc, char *argv[])
2745 {
2746 	const struct got_error *error;
2747 	struct got_repository *repo = NULL;
2748 	struct got_worktree *worktree = NULL;
2749 	const char *path;
2750 	char *cwd = NULL, *repo_path = NULL, *in_repo_path = NULL;
2751 	struct got_object_id *commit_id = NULL;
2752 	char *commit_id_str = NULL;
2753 	int show_ids = 0, recurse = 0;
2754 	int ch;
2755 
2756 #ifndef PROFILE
2757 	if (pledge("stdio rpath wpath cpath flock proc exec sendfd unveil",
2758 	    NULL) == -1)
2759 		err(1, "pledge");
2760 #endif
2761 
2762 	while ((ch = getopt(argc, argv, "c:r:iR")) != -1) {
2763 		switch (ch) {
2764 		case 'c':
2765 			commit_id_str = optarg;
2766 			break;
2767 		case 'r':
2768 			repo_path = realpath(optarg, NULL);
2769 			if (repo_path == NULL)
2770 				err(1, "-r option");
2771 			got_path_strip_trailing_slashes(repo_path);
2772 			break;
2773 		case 'i':
2774 			show_ids = 1;
2775 			break;
2776 		case 'R':
2777 			recurse = 1;
2778 			break;
2779 		default:
2780 			usage_tree();
2781 			/* NOTREACHED */
2782 		}
2783 	}
2784 
2785 	argc -= optind;
2786 	argv += optind;
2787 
2788 	if (argc == 1)
2789 		path = argv[0];
2790 	else if (argc > 1)
2791 		usage_tree();
2792 	else
2793 		path = NULL;
2794 
2795 	cwd = getcwd(NULL, 0);
2796 	if (cwd == NULL) {
2797 		error = got_error_from_errno("getcwd");
2798 		goto done;
2799 	}
2800 	if (repo_path == NULL) {
2801 		error = got_worktree_open(&worktree, cwd);
2802 		if (error && error->code != GOT_ERR_NOT_WORKTREE)
2803 			goto done;
2804 		else
2805 			error = NULL;
2806 		if (worktree) {
2807 			repo_path =
2808 			    strdup(got_worktree_get_repo_path(worktree));
2809 			if (repo_path == NULL)
2810 				error = got_error_from_errno("strdup");
2811 			if (error)
2812 				goto done;
2813 		} else {
2814 			repo_path = strdup(cwd);
2815 			if (repo_path == NULL) {
2816 				error = got_error_from_errno("strdup");
2817 				goto done;
2818 			}
2819 		}
2820 	}
2821 
2822 	error = got_repo_open(&repo, repo_path, NULL);
2823 	if (error != NULL)
2824 		goto done;
2825 
2826 	error = apply_unveil(got_repo_get_path(repo), 1, NULL);
2827 	if (error)
2828 		goto done;
2829 
2830 	if (path == NULL) {
2831 		if (worktree) {
2832 			char *p, *worktree_subdir = cwd +
2833 			    strlen(got_worktree_get_root_path(worktree));
2834 			if (asprintf(&p, "%s/%s",
2835 			    got_worktree_get_path_prefix(worktree),
2836 			    worktree_subdir) == -1) {
2837 				error = got_error_from_errno("asprintf");
2838 				goto done;
2839 			}
2840 			error = got_repo_map_path(&in_repo_path, repo, p, 1);
2841 			free(p);
2842 			if (error)
2843 				goto done;
2844 		} else
2845 			path = "/";
2846 	}
2847 	if (in_repo_path == NULL) {
2848 		error = got_repo_map_path(&in_repo_path, repo, path, 1);
2849 		if (error != NULL)
2850 			goto done;
2851 	}
2852 
2853 	if (commit_id_str == NULL) {
2854 		struct got_reference *head_ref;
2855 		error = got_ref_open(&head_ref, repo, GOT_REF_HEAD, 0);
2856 		if (error != NULL)
2857 			goto done;
2858 		error = got_ref_resolve(&commit_id, repo, head_ref);
2859 		got_ref_close(head_ref);
2860 		if (error != NULL)
2861 			goto done;
2862 	} else {
2863 		error = resolve_commit_arg(&commit_id, commit_id_str, repo);
2864 		if (error)
2865 			goto done;
2866 	}
2867 
2868 	error = print_tree(in_repo_path, commit_id, show_ids, recurse,
2869 	    in_repo_path, repo);
2870 done:
2871 	free(in_repo_path);
2872 	free(repo_path);
2873 	free(cwd);
2874 	free(commit_id);
2875 	if (worktree)
2876 		got_worktree_close(worktree);
2877 	if (repo) {
2878 		const struct got_error *repo_error;
2879 		repo_error = got_repo_close(repo);
2880 		if (error == NULL)
2881 			error = repo_error;
2882 	}
2883 	return error;
2884 }
2885 
2886 __dead static void
2887 usage_status(void)
2888 {
2889 	fprintf(stderr, "usage: %s status [path ...]\n", getprogname());
2890 	exit(1);
2891 }
2892 
2893 static const struct got_error *
2894 print_status(void *arg, unsigned char status, unsigned char staged_status,
2895     const char *path, struct got_object_id *blob_id,
2896     struct got_object_id *staged_blob_id, struct got_object_id *commit_id)
2897 {
2898 	if (status == staged_status && (status == GOT_STATUS_DELETE))
2899 		status = GOT_STATUS_NO_CHANGE;
2900 	printf("%c%c %s\n", status, staged_status, path);
2901 	return NULL;
2902 }
2903 
2904 static const struct got_error *
2905 cmd_status(int argc, char *argv[])
2906 {
2907 	const struct got_error *error = NULL;
2908 	struct got_repository *repo = NULL;
2909 	struct got_worktree *worktree = NULL;
2910 	char *cwd = NULL;
2911 	struct got_pathlist_head paths;
2912 	struct got_pathlist_entry *pe;
2913 	int ch;
2914 
2915 	TAILQ_INIT(&paths);
2916 
2917 	while ((ch = getopt(argc, argv, "")) != -1) {
2918 		switch (ch) {
2919 		default:
2920 			usage_status();
2921 			/* NOTREACHED */
2922 		}
2923 	}
2924 
2925 	argc -= optind;
2926 	argv += optind;
2927 
2928 #ifndef PROFILE
2929 	if (pledge("stdio rpath wpath cpath flock proc exec sendfd unveil",
2930 	    NULL) == -1)
2931 		err(1, "pledge");
2932 #endif
2933 	cwd = getcwd(NULL, 0);
2934 	if (cwd == NULL) {
2935 		error = got_error_from_errno("getcwd");
2936 		goto done;
2937 	}
2938 
2939 	error = got_worktree_open(&worktree, cwd);
2940 	if (error != NULL)
2941 		goto done;
2942 
2943 	error = got_repo_open(&repo, got_worktree_get_repo_path(worktree),
2944 	    NULL);
2945 	if (error != NULL)
2946 		goto done;
2947 
2948 	error = apply_unveil(got_repo_get_path(repo), 1,
2949 	    got_worktree_get_root_path(worktree));
2950 	if (error)
2951 		goto done;
2952 
2953 	error = get_worktree_paths_from_argv(&paths, argc, argv, worktree);
2954 	if (error)
2955 		goto done;
2956 
2957 	error = got_worktree_status(worktree, &paths, repo, print_status, NULL,
2958 	    check_cancelled, NULL);
2959 done:
2960 	TAILQ_FOREACH(pe, &paths, entry)
2961 		free((char *)pe->path);
2962 	got_pathlist_free(&paths);
2963 	free(cwd);
2964 	return error;
2965 }
2966 
2967 __dead static void
2968 usage_ref(void)
2969 {
2970 	fprintf(stderr,
2971 	    "usage: %s ref [-r repository] -l | -d name | [-s] name target\n",
2972 	    getprogname());
2973 	exit(1);
2974 }
2975 
2976 static const struct got_error *
2977 list_refs(struct got_repository *repo)
2978 {
2979 	static const struct got_error *err = NULL;
2980 	struct got_reflist_head refs;
2981 	struct got_reflist_entry *re;
2982 
2983 	SIMPLEQ_INIT(&refs);
2984 	err = got_ref_list(&refs, repo, NULL, got_ref_cmp_by_name, NULL);
2985 	if (err)
2986 		return err;
2987 
2988 	SIMPLEQ_FOREACH(re, &refs, entry) {
2989 		char *refstr;
2990 		refstr = got_ref_to_str(re->ref);
2991 		if (refstr == NULL)
2992 			return got_error_from_errno("got_ref_to_str");
2993 		printf("%s: %s\n", got_ref_get_name(re->ref), refstr);
2994 		free(refstr);
2995 	}
2996 
2997 	got_ref_list_free(&refs);
2998 	return NULL;
2999 }
3000 
3001 static const struct got_error *
3002 delete_ref(struct got_repository *repo, const char *refname)
3003 {
3004 	const struct got_error *err = NULL;
3005 	struct got_reference *ref;
3006 
3007 	err = got_ref_open(&ref, repo, refname, 0);
3008 	if (err)
3009 		return err;
3010 
3011 	err = got_ref_delete(ref, repo);
3012 	got_ref_close(ref);
3013 	return err;
3014 }
3015 
3016 static const struct got_error *
3017 add_ref(struct got_repository *repo, const char *refname, const char *target)
3018 {
3019 	const struct got_error *err = NULL;
3020 	struct got_object_id *id;
3021 	struct got_reference *ref = NULL;
3022 
3023 	/*
3024 	 * Don't let the user create a reference named '-'.
3025 	 * While technically a valid reference name, this case is usually
3026 	 * an unintended typo.
3027 	 */
3028 	if (refname[0] == '-' && refname[1] == '\0')
3029 		return got_error(GOT_ERR_BAD_REF_NAME);
3030 
3031 	err = got_repo_match_object_id_prefix(&id, target, GOT_OBJ_TYPE_ANY,
3032 	    repo);
3033 	if (err) {
3034 		struct got_reference *target_ref;
3035 
3036 		if (err->code != GOT_ERR_BAD_OBJ_ID_STR)
3037 			return err;
3038 		err = got_ref_open(&target_ref, repo, target, 0);
3039 		if (err)
3040 			return err;
3041 		err = got_ref_resolve(&id, repo, target_ref);
3042 		got_ref_close(target_ref);
3043 		if (err)
3044 			return err;
3045 	}
3046 
3047 	err = got_ref_alloc(&ref, refname, id);
3048 	if (err)
3049 		goto done;
3050 
3051 	err = got_ref_write(ref, repo);
3052 done:
3053 	if (ref)
3054 		got_ref_close(ref);
3055 	free(id);
3056 	return err;
3057 }
3058 
3059 static const struct got_error *
3060 add_symref(struct got_repository *repo, const char *refname, const char *target)
3061 {
3062 	const struct got_error *err = NULL;
3063 	struct got_reference *ref = NULL;
3064 	struct got_reference *target_ref = NULL;
3065 
3066 	/*
3067 	 * Don't let the user create a reference named '-'.
3068 	 * While technically a valid reference name, this case is usually
3069 	 * an unintended typo.
3070 	 */
3071 	if (refname[0] == '-' && refname[1] == '\0')
3072 		return got_error(GOT_ERR_BAD_REF_NAME);
3073 
3074 	err = got_ref_open(&target_ref, repo, target, 0);
3075 	if (err)
3076 		return err;
3077 
3078 	err = got_ref_alloc_symref(&ref, refname, target_ref);
3079 	if (err)
3080 		goto done;
3081 
3082 	err = got_ref_write(ref, repo);
3083 done:
3084 	if (target_ref)
3085 		got_ref_close(target_ref);
3086 	if (ref)
3087 		got_ref_close(ref);
3088 	return err;
3089 }
3090 
3091 static const struct got_error *
3092 cmd_ref(int argc, char *argv[])
3093 {
3094 	const struct got_error *error = NULL;
3095 	struct got_repository *repo = NULL;
3096 	struct got_worktree *worktree = NULL;
3097 	char *cwd = NULL, *repo_path = NULL;
3098 	int ch, do_list = 0, create_symref = 0;
3099 	const char *delref = NULL;
3100 
3101 	/* TODO: Add -s option for adding symbolic references. */
3102 	while ((ch = getopt(argc, argv, "d:r:ls")) != -1) {
3103 		switch (ch) {
3104 		case 'd':
3105 			delref = optarg;
3106 			break;
3107 		case 'r':
3108 			repo_path = realpath(optarg, NULL);
3109 			if (repo_path == NULL)
3110 				err(1, "-r option");
3111 			got_path_strip_trailing_slashes(repo_path);
3112 			break;
3113 		case 'l':
3114 			do_list = 1;
3115 			break;
3116 		case 's':
3117 			create_symref = 1;
3118 			break;
3119 		default:
3120 			usage_ref();
3121 			/* NOTREACHED */
3122 		}
3123 	}
3124 
3125 	if (do_list && delref)
3126 		errx(1, "-l and -d options are mutually exclusive\n");
3127 
3128 	argc -= optind;
3129 	argv += optind;
3130 
3131 	if (do_list || delref) {
3132 		if (create_symref)
3133 			errx(1, "-s option cannot be used together with the "
3134 			    "-l or -d options");
3135 		if (argc > 0)
3136 			usage_ref();
3137 	} else if (argc != 2)
3138 		usage_ref();
3139 
3140 #ifndef PROFILE
3141 	if (do_list) {
3142 		if (pledge("stdio rpath wpath flock proc exec sendfd unveil",
3143 		    NULL) == -1)
3144 			err(1, "pledge");
3145 	} else {
3146 		if (pledge("stdio rpath wpath cpath fattr flock proc exec "
3147 		    "sendfd unveil", NULL) == -1)
3148 			err(1, "pledge");
3149 	}
3150 #endif
3151 	cwd = getcwd(NULL, 0);
3152 	if (cwd == NULL) {
3153 		error = got_error_from_errno("getcwd");
3154 		goto done;
3155 	}
3156 
3157 	if (repo_path == NULL) {
3158 		error = got_worktree_open(&worktree, cwd);
3159 		if (error && error->code != GOT_ERR_NOT_WORKTREE)
3160 			goto done;
3161 		else
3162 			error = NULL;
3163 		if (worktree) {
3164 			repo_path =
3165 			    strdup(got_worktree_get_repo_path(worktree));
3166 			if (repo_path == NULL)
3167 				error = got_error_from_errno("strdup");
3168 			if (error)
3169 				goto done;
3170 		} else {
3171 			repo_path = strdup(cwd);
3172 			if (repo_path == NULL) {
3173 				error = got_error_from_errno("strdup");
3174 				goto done;
3175 			}
3176 		}
3177 	}
3178 
3179 	error = got_repo_open(&repo, repo_path, NULL);
3180 	if (error != NULL)
3181 		goto done;
3182 
3183 	error = apply_unveil(got_repo_get_path(repo), do_list,
3184 	    worktree ? got_worktree_get_root_path(worktree) : NULL);
3185 	if (error)
3186 		goto done;
3187 
3188 	if (do_list)
3189 		error = list_refs(repo);
3190 	else if (delref)
3191 		error = delete_ref(repo, delref);
3192 	else if (create_symref)
3193 		error = add_symref(repo, argv[0], argv[1]);
3194 	else
3195 		error = add_ref(repo, argv[0], argv[1]);
3196 done:
3197 	if (repo)
3198 		got_repo_close(repo);
3199 	if (worktree)
3200 		got_worktree_close(worktree);
3201 	free(cwd);
3202 	free(repo_path);
3203 	return error;
3204 }
3205 
3206 __dead static void
3207 usage_branch(void)
3208 {
3209 	fprintf(stderr,
3210 	    "usage: %s branch [-r repository] -l | -d name | "
3211 	    "name [commit]\n", getprogname());
3212 	exit(1);
3213 }
3214 
3215 static const struct got_error *
3216 list_branches(struct got_repository *repo, struct got_worktree *worktree)
3217 {
3218 	static const struct got_error *err = NULL;
3219 	struct got_reflist_head refs;
3220 	struct got_reflist_entry *re;
3221 
3222 	SIMPLEQ_INIT(&refs);
3223 
3224 	err = got_ref_list(&refs, repo, "refs/heads",
3225 	    got_ref_cmp_by_name, NULL);
3226 	if (err)
3227 		return err;
3228 
3229 	SIMPLEQ_FOREACH(re, &refs, entry) {
3230 		const char *refname, *marker = "  ";
3231 		char *refstr;
3232 		refname = got_ref_get_name(re->ref);
3233 		if (worktree && strcmp(refname,
3234 		    got_worktree_get_head_ref_name(worktree)) == 0) {
3235 			struct got_object_id *id = NULL;
3236 			err = got_ref_resolve(&id, repo, re->ref);
3237 			if (err)
3238 				return err;
3239 			if (got_object_id_cmp(id,
3240 			    got_worktree_get_base_commit_id(worktree)) == 0)
3241 				marker = "* ";
3242 			else
3243 				marker = "~ ";
3244 			free(id);
3245 		}
3246 		refname += strlen("refs/heads/");
3247 		refstr = got_ref_to_str(re->ref);
3248 		if (refstr == NULL)
3249 			return got_error_from_errno("got_ref_to_str");
3250 		printf("%s%s: %s\n", marker, refname, refstr);
3251 		free(refstr);
3252 	}
3253 
3254 	got_ref_list_free(&refs);
3255 	return NULL;
3256 }
3257 
3258 static const struct got_error *
3259 delete_branch(struct got_repository *repo, struct got_worktree *worktree,
3260     const char *branch_name)
3261 {
3262 	const struct got_error *err = NULL;
3263 	struct got_reference *ref = NULL;
3264 	char *refname;
3265 
3266 	if (asprintf(&refname, "refs/heads/%s", branch_name) == -1)
3267 		return got_error_from_errno("asprintf");
3268 
3269 	err = got_ref_open(&ref, repo, refname, 0);
3270 	if (err)
3271 		goto done;
3272 
3273 	if (worktree &&
3274 	    strcmp(got_worktree_get_head_ref_name(worktree),
3275 	    got_ref_get_name(ref)) == 0) {
3276 		err = got_error_msg(GOT_ERR_SAME_BRANCH,
3277 		    "will not delete this work tree's current branch");
3278 		goto done;
3279 	}
3280 
3281 	err = got_ref_delete(ref, repo);
3282 done:
3283 	if (ref)
3284 		got_ref_close(ref);
3285 	free(refname);
3286 	return err;
3287 }
3288 
3289 static const struct got_error *
3290 add_branch(struct got_repository *repo, const char *branch_name,
3291     const char *base_branch)
3292 {
3293 	const struct got_error *err = NULL;
3294 	struct got_object_id *id = NULL;
3295 	char *label;
3296 	struct got_reference *ref = NULL;
3297 	char *base_refname = NULL, *refname = NULL;
3298 
3299 	/*
3300 	 * Don't let the user create a branch named '-'.
3301 	 * While technically a valid reference name, this case is usually
3302 	 * an unintended typo.
3303 	 */
3304 	if (branch_name[0] == '-' && branch_name[1] == '\0')
3305 		return got_error(GOT_ERR_BAD_REF_NAME);
3306 
3307 	err = match_object_id(&id, &label, base_branch,
3308 	    GOT_OBJ_TYPE_COMMIT, 1, repo);
3309 	if (err)
3310 		return err;
3311 
3312 	if (asprintf(&refname, "refs/heads/%s", branch_name) == -1) {
3313 		 err = got_error_from_errno("asprintf");
3314 		 goto done;
3315 	}
3316 
3317 	err = got_ref_open(&ref, repo, refname, 0);
3318 	if (err == NULL) {
3319 		err = got_error(GOT_ERR_BRANCH_EXISTS);
3320 		goto done;
3321 	} else if (err->code != GOT_ERR_NOT_REF)
3322 		goto done;
3323 
3324 	err = got_ref_alloc(&ref, refname, id);
3325 	if (err)
3326 		goto done;
3327 
3328 	err = got_ref_write(ref, repo);
3329 done:
3330 	if (ref)
3331 		got_ref_close(ref);
3332 	free(id);
3333 	free(base_refname);
3334 	free(refname);
3335 	return err;
3336 }
3337 
3338 static const struct got_error *
3339 cmd_branch(int argc, char *argv[])
3340 {
3341 	const struct got_error *error = NULL;
3342 	struct got_repository *repo = NULL;
3343 	struct got_worktree *worktree = NULL;
3344 	char *cwd = NULL, *repo_path = NULL;
3345 	int ch, do_list = 0;
3346 	const char *delref = NULL;
3347 
3348 	while ((ch = getopt(argc, argv, "d:r:l")) != -1) {
3349 		switch (ch) {
3350 		case 'd':
3351 			delref = optarg;
3352 			break;
3353 		case 'r':
3354 			repo_path = realpath(optarg, NULL);
3355 			if (repo_path == NULL)
3356 				err(1, "-r option");
3357 			got_path_strip_trailing_slashes(repo_path);
3358 			break;
3359 		case 'l':
3360 			do_list = 1;
3361 			break;
3362 		default:
3363 			usage_branch();
3364 			/* NOTREACHED */
3365 		}
3366 	}
3367 
3368 	if (do_list && delref)
3369 		errx(1, "-l and -d options are mutually exclusive\n");
3370 
3371 	argc -= optind;
3372 	argv += optind;
3373 
3374 	if (do_list || delref) {
3375 		if (argc > 0)
3376 			usage_branch();
3377 	} else if (argc < 1 || argc > 2)
3378 		usage_branch();
3379 
3380 #ifndef PROFILE
3381 	if (do_list) {
3382 		if (pledge("stdio rpath wpath flock proc exec sendfd unveil",
3383 		    NULL) == -1)
3384 			err(1, "pledge");
3385 	} else {
3386 		if (pledge("stdio rpath wpath cpath fattr flock proc exec "
3387 		    "sendfd unveil", NULL) == -1)
3388 			err(1, "pledge");
3389 	}
3390 #endif
3391 	cwd = getcwd(NULL, 0);
3392 	if (cwd == NULL) {
3393 		error = got_error_from_errno("getcwd");
3394 		goto done;
3395 	}
3396 
3397 	if (repo_path == NULL) {
3398 		error = got_worktree_open(&worktree, cwd);
3399 		if (error && error->code != GOT_ERR_NOT_WORKTREE)
3400 			goto done;
3401 		else
3402 			error = NULL;
3403 		if (worktree) {
3404 			repo_path =
3405 			    strdup(got_worktree_get_repo_path(worktree));
3406 			if (repo_path == NULL)
3407 				error = got_error_from_errno("strdup");
3408 			if (error)
3409 				goto done;
3410 		} else {
3411 			repo_path = strdup(cwd);
3412 			if (repo_path == NULL) {
3413 				error = got_error_from_errno("strdup");
3414 				goto done;
3415 			}
3416 		}
3417 	}
3418 
3419 	error = got_repo_open(&repo, repo_path, NULL);
3420 	if (error != NULL)
3421 		goto done;
3422 
3423 	error = apply_unveil(got_repo_get_path(repo), do_list,
3424 	    worktree ? got_worktree_get_root_path(worktree) : NULL);
3425 	if (error)
3426 		goto done;
3427 
3428 	if (do_list)
3429 		error = list_branches(repo, worktree);
3430 	else if (delref)
3431 		error = delete_branch(repo, worktree, delref);
3432 	else {
3433 		const char *base_branch;
3434 		if (argc == 1) {
3435 			base_branch = worktree ?
3436 			    got_worktree_get_head_ref_name(worktree) :
3437 			    GOT_REF_HEAD;
3438 			if (strncmp(base_branch, "refs/heads/", 11) == 0)
3439 				base_branch += 11;
3440 		} else
3441 			base_branch = argv[1];
3442 		error = add_branch(repo, argv[0], base_branch);
3443 	}
3444 done:
3445 	if (repo)
3446 		got_repo_close(repo);
3447 	if (worktree)
3448 		got_worktree_close(worktree);
3449 	free(cwd);
3450 	free(repo_path);
3451 	return error;
3452 }
3453 
3454 
3455 __dead static void
3456 usage_tag(void)
3457 {
3458 	fprintf(stderr,
3459 	    "usage: %s tag [-r repository] | -l | "
3460 	        "[-m message] name [commit]\n", getprogname());
3461 	exit(1);
3462 }
3463 
3464 #if 0
3465 static const struct got_error *
3466 sort_tags(struct got_reflist_head *sorted, struct got_reflist_head *tags)
3467 {
3468 	const struct got_error *err = NULL;
3469 	struct got_reflist_entry *re, *se, *new;
3470 	struct got_object_id *re_id, *se_id;
3471 	struct got_tag_object *re_tag, *se_tag;
3472 	time_t re_time, se_time;
3473 
3474 	SIMPLEQ_FOREACH(re, tags, entry) {
3475 		se = SIMPLEQ_FIRST(sorted);
3476 		if (se == NULL) {
3477 			err = got_reflist_entry_dup(&new, re);
3478 			if (err)
3479 				return err;
3480 			SIMPLEQ_INSERT_HEAD(sorted, new, entry);
3481 			continue;
3482 		} else {
3483 			err = got_ref_resolve(&re_id, repo, re->ref);
3484 			if (err)
3485 				break;
3486 			err = got_object_open_as_tag(&re_tag, repo, re_id);
3487 			free(re_id);
3488 			if (err)
3489 				break;
3490 			re_time = got_object_tag_get_tagger_time(re_tag);
3491 			got_object_tag_close(re_tag);
3492 		}
3493 
3494 		while (se) {
3495 			err = got_ref_resolve(&se_id, repo, re->ref);
3496 			if (err)
3497 				break;
3498 			err = got_object_open_as_tag(&se_tag, repo, se_id);
3499 			free(se_id);
3500 			if (err)
3501 				break;
3502 			se_time = got_object_tag_get_tagger_time(se_tag);
3503 			got_object_tag_close(se_tag);
3504 
3505 			if (se_time > re_time) {
3506 				err = got_reflist_entry_dup(&new, re);
3507 				if (err)
3508 					return err;
3509 				SIMPLEQ_INSERT_AFTER(sorted, se, new, entry);
3510 				break;
3511 			}
3512 			se = SIMPLEQ_NEXT(se, entry);
3513 			continue;
3514 		}
3515 	}
3516 done:
3517 	return err;
3518 }
3519 #endif
3520 
3521 static const struct got_error *
3522 cmp_tags(void *arg, int *cmp, struct got_reference *ref1,
3523     struct got_reference *ref2)
3524 {
3525 	const struct got_error *err = NULL;
3526 	struct got_repository *repo = arg;
3527 	struct got_object_id *id1, *id2 = NULL;
3528 	struct got_tag_object *tag1 = NULL, *tag2 = NULL;
3529 	time_t time1, time2;
3530 
3531 	*cmp = 0;
3532 
3533 	err = got_ref_resolve(&id1, repo, ref1);
3534 	if (err)
3535 		return err;
3536 	err = got_object_open_as_tag(&tag1, repo, id1);
3537 	if (err)
3538 		goto done;
3539 
3540 	err = got_ref_resolve(&id2, repo, ref2);
3541 	if (err)
3542 		goto done;
3543 	err = got_object_open_as_tag(&tag2, repo, id2);
3544 	if (err)
3545 		goto done;
3546 
3547 	time1 = got_object_tag_get_tagger_time(tag1);
3548 	time2 = got_object_tag_get_tagger_time(tag2);
3549 
3550 	/* Put latest tags first. */
3551 	if (time1 < time2)
3552 		*cmp = 1;
3553 	else if (time1 > time2)
3554 		*cmp = -1;
3555 	else
3556 		err = got_ref_cmp_by_name(NULL, cmp, ref2, ref1);
3557 done:
3558 	free(id1);
3559 	free(id2);
3560 	if (tag1)
3561 		got_object_tag_close(tag1);
3562 	if (tag2)
3563 		got_object_tag_close(tag2);
3564 	return err;
3565 }
3566 
3567 static const struct got_error *
3568 list_tags(struct got_repository *repo, struct got_worktree *worktree)
3569 {
3570 	static const struct got_error *err = NULL;
3571 	struct got_reflist_head refs;
3572 	struct got_reflist_entry *re;
3573 
3574 	SIMPLEQ_INIT(&refs);
3575 
3576 	err = got_ref_list(&refs, repo, "refs/tags", cmp_tags, repo);
3577 	if (err)
3578 		return err;
3579 
3580 	SIMPLEQ_FOREACH(re, &refs, entry) {
3581 		const char *refname;
3582 		char *refstr, *tagmsg0, *tagmsg, *line, *id_str, *datestr;
3583 		char datebuf[26];
3584 		time_t tagger_time;
3585 		struct got_object_id *id;
3586 		struct got_tag_object *tag;
3587 
3588 		refname = got_ref_get_name(re->ref);
3589 		if (strncmp(refname, "refs/tags/", 10) != 0)
3590 			continue;
3591 		refname += 10;
3592 		refstr = got_ref_to_str(re->ref);
3593 		if (refstr == NULL) {
3594 			err = got_error_from_errno("got_ref_to_str");
3595 			break;
3596 		}
3597 		printf("%stag %s %s\n", GOT_COMMIT_SEP_STR, refname, refstr);
3598 		free(refstr);
3599 
3600 		err = got_ref_resolve(&id, repo, re->ref);
3601 		if (err)
3602 			break;
3603 		err = got_object_open_as_tag(&tag, repo, id);
3604 		free(id);
3605 		if (err)
3606 			break;
3607 		printf("from: %s\n", got_object_tag_get_tagger(tag));
3608 		tagger_time = got_object_tag_get_tagger_time(tag);
3609 		datestr = get_datestr(&tagger_time, datebuf);
3610 		if (datestr)
3611 			printf("date: %s UTC\n", datestr);
3612 		err = got_object_id_str(&id_str,
3613 		    got_object_tag_get_object_id(tag));
3614 		if (err)
3615 			break;
3616 		switch (got_object_tag_get_object_type(tag)) {
3617 		case GOT_OBJ_TYPE_BLOB:
3618 			printf("object: %s %s\n", GOT_OBJ_LABEL_BLOB, id_str);
3619 			break;
3620 		case GOT_OBJ_TYPE_TREE:
3621 			printf("object: %s %s\n", GOT_OBJ_LABEL_TREE, id_str);
3622 			break;
3623 		case GOT_OBJ_TYPE_COMMIT:
3624 			printf("object: %s %s\n", GOT_OBJ_LABEL_COMMIT, id_str);
3625 			break;
3626 		case GOT_OBJ_TYPE_TAG:
3627 			printf("object: %s %s\n", GOT_OBJ_LABEL_TAG, id_str);
3628 			break;
3629 		default:
3630 			break;
3631 		}
3632 		free(id_str);
3633 		tagmsg0 = strdup(got_object_tag_get_message(tag));
3634 		got_object_tag_close(tag);
3635 		if (tagmsg0 == NULL) {
3636 			err = got_error_from_errno("strdup");
3637 			break;
3638 		}
3639 
3640 		tagmsg = tagmsg0;
3641 		do {
3642 			line = strsep(&tagmsg, "\n");
3643 			if (line)
3644 				printf(" %s\n", line);
3645 		} while (line);
3646 		free(tagmsg0);
3647 	}
3648 
3649 	got_ref_list_free(&refs);
3650 	return NULL;
3651 }
3652 
3653 static const struct got_error *
3654 get_tag_message(char **tagmsg, const char *commit_id_str,
3655     const char *tag_name, const char *repo_path)
3656 {
3657 	const struct got_error *err = NULL;
3658 	char *template = NULL, *initial_content = NULL;
3659 	char *tagmsg_path = NULL, *editor = NULL;
3660 	int fd = -1;
3661 
3662 	if (asprintf(&template, "/tmp/got-tagmsg") == -1) {
3663 		err = got_error_from_errno("asprintf");
3664 		goto done;
3665 	}
3666 
3667 	if (asprintf(&initial_content, "\n# tagging commit %s as %s\n",
3668 	    commit_id_str, tag_name) == -1) {
3669 		err = got_error_from_errno("asprintf");
3670 		goto done;
3671 	}
3672 
3673 	err = got_opentemp_named_fd(&tagmsg_path, &fd, template);
3674 	if (err)
3675 		goto done;
3676 
3677 	dprintf(fd, initial_content);
3678 	close(fd);
3679 
3680 	err = get_editor(&editor);
3681 	if (err)
3682 		goto done;
3683 	err = edit_logmsg(tagmsg, editor, tagmsg_path, initial_content);
3684 done:
3685 	if (err == NULL || err->code == GOT_ERR_COMMIT_MSG_EMPTY) {
3686 		unlink(tagmsg_path);
3687 		free(tagmsg_path);
3688 		tagmsg_path = NULL;
3689 	}
3690 	free(initial_content);
3691 	free(template);
3692 	free(editor);
3693 
3694 	/* Editor is done; we can now apply unveil(2) */
3695 	if (err == NULL) {
3696 		err = apply_unveil(repo_path, 0, NULL);
3697 		if (err) {
3698 			free(*tagmsg);
3699 			*tagmsg = NULL;
3700 		}
3701 	}
3702 	return err;
3703 }
3704 
3705 static const struct got_error *
3706 add_tag(struct got_repository *repo, const char *tag_name,
3707     const char *commit_arg, const char *tagmsg_arg)
3708 {
3709 	const struct got_error *err = NULL;
3710 	struct got_object_id *commit_id = NULL, *tag_id = NULL;
3711 	char *label = NULL, *commit_id_str = NULL;
3712 	struct got_reference *ref = NULL;
3713 	char *refname = NULL, *tagmsg = NULL, *tagger = NULL;
3714 
3715 	/*
3716 	 * Don't let the user create a tag named '-'.
3717 	 * While technically a valid reference name, this case is usually
3718 	 * an unintended typo.
3719 	 */
3720 	if (tag_name[0] == '-' && tag_name[1] == '\0')
3721 		return got_error(GOT_ERR_BAD_REF_NAME);
3722 
3723 	err = get_author(&tagger, repo);
3724 	if (err)
3725 		return err;
3726 
3727 	err = match_object_id(&commit_id, &label, commit_arg,
3728 	    GOT_OBJ_TYPE_COMMIT, 1, repo);
3729 	if (err)
3730 		goto done;
3731 
3732 	err = got_object_id_str(&commit_id_str, commit_id);
3733 	if (err)
3734 		goto done;
3735 
3736 	if (strncmp("refs/tags/", tag_name, 10) == 0) {
3737 		refname = strdup(tag_name);
3738 		if (refname == NULL) {
3739 			 err = got_error_from_errno("strdup");
3740 			 goto done;
3741 		}
3742 		tag_name += 10;
3743 	} else if (asprintf(&refname, "refs/tags/%s", tag_name) == -1) {
3744 		 err = got_error_from_errno("asprintf");
3745 		 goto done;
3746 	}
3747 
3748 	err = got_ref_open(&ref, repo, refname, 0);
3749 	if (err == NULL) {
3750 		err = got_error(GOT_ERR_TAG_EXISTS);
3751 		goto done;
3752 	} else if (err->code != GOT_ERR_NOT_REF)
3753 		goto done;
3754 
3755 	if (tagmsg_arg == NULL) {
3756 		err = get_tag_message(&tagmsg, commit_id_str,
3757 		    tag_name, got_repo_get_path(repo));
3758 		if (err)
3759 			goto done;
3760 	}
3761 
3762 	err = got_object_tag_create(&tag_id, tag_name, commit_id,
3763 	    tagger, time(NULL), tagmsg ? tagmsg : tagmsg_arg, repo);
3764 	if (err)
3765 		goto done;
3766 
3767 	err = got_ref_alloc(&ref, refname, tag_id);
3768 	if (err)
3769 		goto done;
3770 
3771 	err = got_ref_write(ref, repo);
3772 
3773 	if (err == NULL) {
3774 		char *tag_id_str;
3775 		err = got_object_id_str(&tag_id_str, tag_id);
3776 		printf("Created tag %s\n", tag_id_str);
3777 		free(tag_id_str);
3778 	}
3779 done:
3780 	if (ref)
3781 		got_ref_close(ref);
3782 	free(commit_id);
3783 	free(commit_id_str);
3784 	free(refname);
3785 	free(tagmsg);
3786 	free(tagger);
3787 	return err;
3788 }
3789 
3790 static const struct got_error *
3791 cmd_tag(int argc, char *argv[])
3792 {
3793 	const struct got_error *error = NULL;
3794 	struct got_repository *repo = NULL;
3795 	struct got_worktree *worktree = NULL;
3796 	char *cwd = NULL, *repo_path = NULL, *commit_id_str = NULL;
3797 	char *gitconfig_path = NULL;
3798 	const char *tag_name, *commit_id_arg = NULL, *tagmsg = NULL;
3799 	int ch, do_list = 0;
3800 
3801 	while ((ch = getopt(argc, argv, "m:r:l")) != -1) {
3802 		switch (ch) {
3803 		case 'm':
3804 			tagmsg = optarg;
3805 			break;
3806 		case 'r':
3807 			repo_path = realpath(optarg, NULL);
3808 			if (repo_path == NULL)
3809 				err(1, "-r option");
3810 			got_path_strip_trailing_slashes(repo_path);
3811 			break;
3812 		case 'l':
3813 			do_list = 1;
3814 			break;
3815 		default:
3816 			usage_tag();
3817 			/* NOTREACHED */
3818 		}
3819 	}
3820 
3821 	argc -= optind;
3822 	argv += optind;
3823 
3824 	if (do_list) {
3825 		if (tagmsg)
3826 			errx(1, "-l and -m options are mutually exclusive\n");
3827 		if (argc > 0)
3828 			usage_tag();
3829 	} else if (argc < 1 || argc > 2)
3830 		usage_tag();
3831 	else if (argc > 1)
3832 		commit_id_arg = argv[1];
3833 	tag_name = argv[0];
3834 
3835 #ifndef PROFILE
3836 	if (do_list) {
3837 		if (pledge("stdio rpath wpath flock proc exec sendfd unveil",
3838 		    NULL) == -1)
3839 			err(1, "pledge");
3840 	} else {
3841 		if (pledge("stdio rpath wpath cpath fattr flock proc exec "
3842 		    "sendfd unveil", NULL) == -1)
3843 			err(1, "pledge");
3844 	}
3845 #endif
3846 	cwd = getcwd(NULL, 0);
3847 	if (cwd == NULL) {
3848 		error = got_error_from_errno("getcwd");
3849 		goto done;
3850 	}
3851 
3852 	if (repo_path == NULL) {
3853 		error = got_worktree_open(&worktree, cwd);
3854 		if (error && error->code != GOT_ERR_NOT_WORKTREE)
3855 			goto done;
3856 		else
3857 			error = NULL;
3858 		if (worktree) {
3859 			repo_path =
3860 			    strdup(got_worktree_get_repo_path(worktree));
3861 			if (repo_path == NULL)
3862 				error = got_error_from_errno("strdup");
3863 			if (error)
3864 				goto done;
3865 		} else {
3866 			repo_path = strdup(cwd);
3867 			if (repo_path == NULL) {
3868 				error = got_error_from_errno("strdup");
3869 				goto done;
3870 			}
3871 		}
3872 	}
3873 
3874 	if (do_list) {
3875 		error = got_repo_open(&repo, repo_path, NULL);
3876 		if (error != NULL)
3877 			goto done;
3878 		error = apply_unveil(got_repo_get_path(repo), 1, NULL);
3879 		if (error)
3880 			goto done;
3881 		error = list_tags(repo, worktree);
3882 	} else {
3883 		error = get_gitconfig_path(&gitconfig_path);
3884 		if (error)
3885 			goto done;
3886 		error = got_repo_open(&repo, repo_path, gitconfig_path);
3887 		if (error != NULL)
3888 			goto done;
3889 
3890 		if (tagmsg) {
3891 			error = apply_unveil(got_repo_get_path(repo), 1, NULL);
3892 			if (error)
3893 				goto done;
3894 		}
3895 
3896 		if (commit_id_arg == NULL) {
3897 			struct got_reference *head_ref;
3898 			struct got_object_id *commit_id;
3899 			error = got_ref_open(&head_ref, repo,
3900 			    worktree ? got_worktree_get_head_ref_name(worktree)
3901 			    : GOT_REF_HEAD, 0);
3902 			if (error)
3903 				goto done;
3904 			error = got_ref_resolve(&commit_id, repo, head_ref);
3905 			got_ref_close(head_ref);
3906 			if (error)
3907 				goto done;
3908 			error = got_object_id_str(&commit_id_str, commit_id);
3909 			free(commit_id);
3910 			if (error)
3911 				goto done;
3912 		}
3913 
3914 		error = add_tag(repo, tag_name,
3915 		    commit_id_str ? commit_id_str : commit_id_arg, tagmsg);
3916 	}
3917 done:
3918 	if (repo)
3919 		got_repo_close(repo);
3920 	if (worktree)
3921 		got_worktree_close(worktree);
3922 	free(cwd);
3923 	free(repo_path);
3924 	free(gitconfig_path);
3925 	free(commit_id_str);
3926 	return error;
3927 }
3928 
3929 __dead static void
3930 usage_add(void)
3931 {
3932 	fprintf(stderr, "usage: %s add file-path ...\n", getprogname());
3933 	exit(1);
3934 }
3935 
3936 static const struct got_error *
3937 cmd_add(int argc, char *argv[])
3938 {
3939 	const struct got_error *error = NULL;
3940 	struct got_repository *repo = NULL;
3941 	struct got_worktree *worktree = NULL;
3942 	char *cwd = NULL;
3943 	struct got_pathlist_head paths;
3944 	struct got_pathlist_entry *pe;
3945 	int ch;
3946 
3947 	TAILQ_INIT(&paths);
3948 
3949 	while ((ch = getopt(argc, argv, "")) != -1) {
3950 		switch (ch) {
3951 		default:
3952 			usage_add();
3953 			/* NOTREACHED */
3954 		}
3955 	}
3956 
3957 	argc -= optind;
3958 	argv += optind;
3959 
3960 #ifndef PROFILE
3961 	if (pledge("stdio rpath wpath cpath flock proc exec sendfd unveil",
3962 	    NULL) == -1)
3963 		err(1, "pledge");
3964 #endif
3965 	if (argc < 1)
3966 		usage_add();
3967 
3968 	cwd = getcwd(NULL, 0);
3969 	if (cwd == NULL) {
3970 		error = got_error_from_errno("getcwd");
3971 		goto done;
3972 	}
3973 
3974 	error = got_worktree_open(&worktree, cwd);
3975 	if (error)
3976 		goto done;
3977 
3978 	error = got_repo_open(&repo, got_worktree_get_repo_path(worktree),
3979 	    NULL);
3980 	if (error != NULL)
3981 		goto done;
3982 
3983 	error = apply_unveil(got_repo_get_path(repo), 1,
3984 	    got_worktree_get_root_path(worktree));
3985 	if (error)
3986 		goto done;
3987 
3988 	error = get_worktree_paths_from_argv(&paths, argc, argv, worktree);
3989 	if (error)
3990 		goto done;
3991 
3992 	error = got_worktree_schedule_add(worktree, &paths, print_status,
3993 	    NULL, repo);
3994 done:
3995 	if (repo)
3996 		got_repo_close(repo);
3997 	if (worktree)
3998 		got_worktree_close(worktree);
3999 	TAILQ_FOREACH(pe, &paths, entry)
4000 		free((char *)pe->path);
4001 	got_pathlist_free(&paths);
4002 	free(cwd);
4003 	return error;
4004 }
4005 
4006 __dead static void
4007 usage_remove(void)
4008 {
4009 	fprintf(stderr, "usage: %s remove [-f] file-path ...\n", getprogname());
4010 	exit(1);
4011 }
4012 
4013 static const struct got_error *
4014 print_remove_status(void *arg, unsigned char status,
4015     unsigned char staged_status, const char *path,
4016     struct got_object_id *blob_id, struct got_object_id *staged_blob_id,
4017     struct got_object_id *commit_id)
4018 {
4019 	if (status == GOT_STATUS_NONEXISTENT)
4020 		return NULL;
4021 	if (status == staged_status && (status == GOT_STATUS_DELETE))
4022 		status = GOT_STATUS_NO_CHANGE;
4023 	printf("%c%c %s\n", status, staged_status, path);
4024 	return NULL;
4025 }
4026 
4027 static const struct got_error *
4028 cmd_remove(int argc, char *argv[])
4029 {
4030 	const struct got_error *error = NULL;
4031 	struct got_worktree *worktree = NULL;
4032 	struct got_repository *repo = NULL;
4033 	char *cwd = NULL;
4034 	struct got_pathlist_head paths;
4035 	struct got_pathlist_entry *pe;
4036 	int ch, delete_local_mods = 0;
4037 
4038 	TAILQ_INIT(&paths);
4039 
4040 	while ((ch = getopt(argc, argv, "f")) != -1) {
4041 		switch (ch) {
4042 		case 'f':
4043 			delete_local_mods = 1;
4044 			break;
4045 		default:
4046 			usage_add();
4047 			/* NOTREACHED */
4048 		}
4049 	}
4050 
4051 	argc -= optind;
4052 	argv += optind;
4053 
4054 #ifndef PROFILE
4055 	if (pledge("stdio rpath wpath cpath flock proc exec sendfd unveil",
4056 	    NULL) == -1)
4057 		err(1, "pledge");
4058 #endif
4059 	if (argc < 1)
4060 		usage_remove();
4061 
4062 	cwd = getcwd(NULL, 0);
4063 	if (cwd == NULL) {
4064 		error = got_error_from_errno("getcwd");
4065 		goto done;
4066 	}
4067 	error = got_worktree_open(&worktree, cwd);
4068 	if (error)
4069 		goto done;
4070 
4071 	error = got_repo_open(&repo, got_worktree_get_repo_path(worktree),
4072 	    NULL);
4073 	if (error)
4074 		goto done;
4075 
4076 	error = apply_unveil(got_repo_get_path(repo), 1,
4077 	    got_worktree_get_root_path(worktree));
4078 	if (error)
4079 		goto done;
4080 
4081 	error = get_worktree_paths_from_argv(&paths, argc, argv, worktree);
4082 	if (error)
4083 		goto done;
4084 
4085 	error = got_worktree_schedule_delete(worktree, &paths,
4086 	    delete_local_mods, print_remove_status, NULL, repo);
4087 	if (error)
4088 		goto done;
4089 done:
4090 	if (repo)
4091 		got_repo_close(repo);
4092 	if (worktree)
4093 		got_worktree_close(worktree);
4094 	TAILQ_FOREACH(pe, &paths, entry)
4095 		free((char *)pe->path);
4096 	got_pathlist_free(&paths);
4097 	free(cwd);
4098 	return error;
4099 }
4100 
4101 __dead static void
4102 usage_revert(void)
4103 {
4104 	fprintf(stderr, "usage: %s revert [-p] [-F response-script] [-R] "
4105 	    "path ...\n", getprogname());
4106 	exit(1);
4107 }
4108 
4109 static const struct got_error *
4110 revert_progress(void *arg, unsigned char status, const char *path)
4111 {
4112 	while (path[0] == '/')
4113 		path++;
4114 	printf("%c  %s\n", status, path);
4115 	return NULL;
4116 }
4117 
4118 struct choose_patch_arg {
4119 	FILE *patch_script_file;
4120 	const char *action;
4121 };
4122 
4123 static const struct got_error *
4124 show_change(unsigned char status, const char *path, FILE *patch_file, int n,
4125     int nchanges, const char *action)
4126 {
4127 	char *line = NULL;
4128 	size_t linesize = 0;
4129 	ssize_t linelen;
4130 
4131 	switch (status) {
4132 	case GOT_STATUS_ADD:
4133 		printf("A  %s\n%s this addition? [y/n] ", path, action);
4134 		break;
4135 	case GOT_STATUS_DELETE:
4136 		printf("D  %s\n%s this deletion? [y/n] ", path, action);
4137 		break;
4138 	case GOT_STATUS_MODIFY:
4139 		if (fseek(patch_file, 0L, SEEK_SET) == -1)
4140 			return got_error_from_errno("fseek");
4141 		printf(GOT_COMMIT_SEP_STR);
4142 		while ((linelen = getline(&line, &linesize, patch_file)) != -1)
4143 			printf("%s", line);
4144 		if (ferror(patch_file))
4145 			return got_error_from_errno("getline");
4146 		printf(GOT_COMMIT_SEP_STR);
4147 		printf("M  %s (change %d of %d)\n%s this change? [y/n/q] ",
4148 		    path, n, nchanges, action);
4149 		break;
4150 	default:
4151 		return got_error_path(path, GOT_ERR_FILE_STATUS);
4152 	}
4153 
4154 	return NULL;
4155 }
4156 
4157 static const struct got_error *
4158 choose_patch(int *choice, void *arg, unsigned char status, const char *path,
4159     FILE *patch_file, int n, int nchanges)
4160 {
4161 	const struct got_error *err = NULL;
4162 	char *line = NULL;
4163 	size_t linesize = 0;
4164 	ssize_t linelen;
4165 	int resp = ' ';
4166 	struct choose_patch_arg *a = arg;
4167 
4168 	*choice = GOT_PATCH_CHOICE_NONE;
4169 
4170 	if (a->patch_script_file) {
4171 		char *nl;
4172 		err = show_change(status, path, patch_file, n, nchanges,
4173 		    a->action);
4174 		if (err)
4175 			return err;
4176 		linelen = getline(&line, &linesize, a->patch_script_file);
4177 		if (linelen == -1) {
4178 			if (ferror(a->patch_script_file))
4179 				return got_error_from_errno("getline");
4180 			return NULL;
4181 		}
4182 		nl = strchr(line, '\n');
4183 		if (nl)
4184 			*nl = '\0';
4185 		if (strcmp(line, "y") == 0) {
4186 			*choice = GOT_PATCH_CHOICE_YES;
4187 			printf("y\n");
4188 		} else if (strcmp(line, "n") == 0) {
4189 			*choice = GOT_PATCH_CHOICE_NO;
4190 			printf("n\n");
4191 		} else if (strcmp(line, "q") == 0 &&
4192 		    status == GOT_STATUS_MODIFY) {
4193 			*choice = GOT_PATCH_CHOICE_QUIT;
4194 			printf("q\n");
4195 		} else
4196 			printf("invalid response '%s'\n", line);
4197 		free(line);
4198 		return NULL;
4199 	}
4200 
4201 	while (resp != 'y' && resp != 'n' && resp != 'q') {
4202 		err = show_change(status, path, patch_file, n, nchanges,
4203 		    a->action);
4204 		if (err)
4205 			return err;
4206 		resp = getchar();
4207 		if (resp == '\n')
4208 			resp = getchar();
4209 		if (status == GOT_STATUS_MODIFY) {
4210 			if (resp != 'y' && resp != 'n' && resp != 'q') {
4211 				printf("invalid response '%c'\n", resp);
4212 				resp = ' ';
4213 			}
4214 		} else if (resp != 'y' && resp != 'n') {
4215 				printf("invalid response '%c'\n", resp);
4216 				resp = ' ';
4217 		}
4218 	}
4219 
4220 	if (resp == 'y')
4221 		*choice = GOT_PATCH_CHOICE_YES;
4222 	else if (resp == 'n')
4223 		*choice = GOT_PATCH_CHOICE_NO;
4224 	else if (resp == 'q' && status == GOT_STATUS_MODIFY)
4225 		*choice = GOT_PATCH_CHOICE_QUIT;
4226 
4227 	return NULL;
4228 }
4229 
4230 
4231 static const struct got_error *
4232 cmd_revert(int argc, char *argv[])
4233 {
4234 	const struct got_error *error = NULL;
4235 	struct got_worktree *worktree = NULL;
4236 	struct got_repository *repo = NULL;
4237 	char *cwd = NULL, *path = NULL;
4238 	struct got_pathlist_head paths;
4239 	struct got_pathlist_entry *pe;
4240 	int ch, can_recurse = 0, pflag = 0;
4241 	FILE *patch_script_file = NULL;
4242 	const char *patch_script_path = NULL;
4243 	struct choose_patch_arg cpa;
4244 
4245 	TAILQ_INIT(&paths);
4246 
4247 	while ((ch = getopt(argc, argv, "pF:R")) != -1) {
4248 		switch (ch) {
4249 		case 'p':
4250 			pflag = 1;
4251 			break;
4252 		case 'F':
4253 			patch_script_path = optarg;
4254 			break;
4255 		case 'R':
4256 			can_recurse = 1;
4257 			break;
4258 		default:
4259 			usage_revert();
4260 			/* NOTREACHED */
4261 		}
4262 	}
4263 
4264 	argc -= optind;
4265 	argv += optind;
4266 
4267 #ifndef PROFILE
4268 	if (pledge("stdio rpath wpath cpath fattr flock proc exec sendfd "
4269 	    "unveil", NULL) == -1)
4270 		err(1, "pledge");
4271 #endif
4272 	if (argc < 1)
4273 		usage_revert();
4274 	if (patch_script_path && !pflag)
4275 		errx(1, "-F option can only be used together with -p option");
4276 
4277 	cwd = getcwd(NULL, 0);
4278 	if (cwd == NULL) {
4279 		error = got_error_from_errno("getcwd");
4280 		goto done;
4281 	}
4282 	error = got_worktree_open(&worktree, cwd);
4283 	if (error)
4284 		goto done;
4285 
4286 	error = got_repo_open(&repo, got_worktree_get_repo_path(worktree),
4287 	    NULL);
4288 	if (error != NULL)
4289 		goto done;
4290 
4291 	if (patch_script_path) {
4292 		patch_script_file = fopen(patch_script_path, "r");
4293 		if (patch_script_file == NULL) {
4294 			error = got_error_from_errno2("fopen",
4295 			    patch_script_path);
4296 			goto done;
4297 		}
4298 	}
4299 	error = apply_unveil(got_repo_get_path(repo), 1,
4300 	    got_worktree_get_root_path(worktree));
4301 	if (error)
4302 		goto done;
4303 
4304 	error = get_worktree_paths_from_argv(&paths, argc, argv, worktree);
4305 	if (error)
4306 		goto done;
4307 
4308 	if (!can_recurse) {
4309 		char *ondisk_path;
4310 		struct stat sb;
4311 		TAILQ_FOREACH(pe, &paths, entry) {
4312 			if (asprintf(&ondisk_path, "%s/%s",
4313 			    got_worktree_get_root_path(worktree),
4314 			       pe->path) == -1) {
4315 				error = got_error_from_errno("asprintf");
4316 				goto done;
4317 			}
4318 			if (lstat(ondisk_path, &sb) == -1) {
4319 				if (errno == ENOENT) {
4320 					free(ondisk_path);
4321 					continue;
4322 				}
4323 				error = got_error_from_errno2("lstat",
4324 				    ondisk_path);
4325 				free(ondisk_path);
4326 				goto done;
4327 			}
4328 			free(ondisk_path);
4329 			if (S_ISDIR(sb.st_mode)) {
4330 				error = got_error_msg(GOT_ERR_BAD_PATH,
4331 				    "reverting directories requires -R option");
4332 				goto done;
4333 			}
4334 		}
4335 	}
4336 
4337 	cpa.patch_script_file = patch_script_file;
4338 	cpa.action = "revert";
4339 	error = got_worktree_revert(worktree, &paths, revert_progress, NULL,
4340 	    pflag ? choose_patch : NULL, &cpa, repo);
4341 	if (error)
4342 		goto done;
4343 done:
4344 	if (patch_script_file && fclose(patch_script_file) == EOF &&
4345 	    error == NULL)
4346 		error = got_error_from_errno2("fclose", patch_script_path);
4347 	if (repo)
4348 		got_repo_close(repo);
4349 	if (worktree)
4350 		got_worktree_close(worktree);
4351 	free(path);
4352 	free(cwd);
4353 	return error;
4354 }
4355 
4356 __dead static void
4357 usage_commit(void)
4358 {
4359 	fprintf(stderr, "usage: %s commit [-m msg] [path ...]\n",
4360 	    getprogname());
4361 	exit(1);
4362 }
4363 
4364 struct collect_commit_logmsg_arg {
4365 	const char *cmdline_log;
4366 	const char *editor;
4367 	const char *worktree_path;
4368 	const char *branch_name;
4369 	const char *repo_path;
4370 	char *logmsg_path;
4371 
4372 };
4373 
4374 static const struct got_error *
4375 collect_commit_logmsg(struct got_pathlist_head *commitable_paths, char **logmsg,
4376     void *arg)
4377 {
4378 	char *initial_content = NULL;
4379 	struct got_pathlist_entry *pe;
4380 	const struct got_error *err = NULL;
4381 	char *template = NULL;
4382 	struct collect_commit_logmsg_arg *a = arg;
4383 	int fd;
4384 	size_t len;
4385 
4386 	/* if a message was specified on the command line, just use it */
4387 	if (a->cmdline_log != NULL && strlen(a->cmdline_log) != 0) {
4388 		len = strlen(a->cmdline_log) + 1;
4389 		*logmsg = malloc(len + 1);
4390 		if (*logmsg == NULL)
4391 			return got_error_from_errno("malloc");
4392 		strlcpy(*logmsg, a->cmdline_log, len);
4393 		return NULL;
4394 	}
4395 
4396 	if (asprintf(&template, "%s/logmsg", a->worktree_path) == -1)
4397 		return got_error_from_errno("asprintf");
4398 
4399 	if (asprintf(&initial_content,
4400 	    "\n# changes to be committed on branch %s:\n",
4401 	    a->branch_name) == -1)
4402 		return got_error_from_errno("asprintf");
4403 
4404 	err = got_opentemp_named_fd(&a->logmsg_path, &fd, template);
4405 	if (err)
4406 		goto done;
4407 
4408 	dprintf(fd, initial_content);
4409 
4410 	TAILQ_FOREACH(pe, commitable_paths, entry) {
4411 		struct got_commitable *ct = pe->data;
4412 		dprintf(fd, "#  %c  %s\n",
4413 		    got_commitable_get_status(ct),
4414 		    got_commitable_get_path(ct));
4415 	}
4416 	close(fd);
4417 
4418 	err = edit_logmsg(logmsg, a->editor, a->logmsg_path, initial_content);
4419 done:
4420 	if (err == NULL || err->code == GOT_ERR_COMMIT_MSG_EMPTY) {
4421 		unlink(a->logmsg_path);
4422 		free(a->logmsg_path);
4423 		a->logmsg_path = NULL;
4424 	}
4425 	free(initial_content);
4426 	free(template);
4427 
4428 	/* Editor is done; we can now apply unveil(2) */
4429 	if (err == NULL) {
4430 		err = apply_unveil(a->repo_path, 0, a->worktree_path);
4431 		if (err) {
4432 			free(*logmsg);
4433 			*logmsg = NULL;
4434 		}
4435 	}
4436 	return err;
4437 }
4438 
4439 static const struct got_error *
4440 cmd_commit(int argc, char *argv[])
4441 {
4442 	const struct got_error *error = NULL;
4443 	struct got_worktree *worktree = NULL;
4444 	struct got_repository *repo = NULL;
4445 	char *cwd = NULL, *id_str = NULL;
4446 	struct got_object_id *id = NULL;
4447 	const char *logmsg = NULL;
4448 	struct collect_commit_logmsg_arg cl_arg;
4449 	char *gitconfig_path = NULL, *editor = NULL, *author = NULL;
4450 	int ch, rebase_in_progress, histedit_in_progress;
4451 	struct got_pathlist_head paths;
4452 
4453 	TAILQ_INIT(&paths);
4454 	cl_arg.logmsg_path = NULL;
4455 
4456 	while ((ch = getopt(argc, argv, "m:")) != -1) {
4457 		switch (ch) {
4458 		case 'm':
4459 			logmsg = optarg;
4460 			break;
4461 		default:
4462 			usage_commit();
4463 			/* NOTREACHED */
4464 		}
4465 	}
4466 
4467 	argc -= optind;
4468 	argv += optind;
4469 
4470 #ifndef PROFILE
4471 	if (pledge("stdio rpath wpath cpath fattr flock proc exec sendfd "
4472 	    "unveil", NULL) == -1)
4473 		err(1, "pledge");
4474 #endif
4475 	cwd = getcwd(NULL, 0);
4476 	if (cwd == NULL) {
4477 		error = got_error_from_errno("getcwd");
4478 		goto done;
4479 	}
4480 	error = got_worktree_open(&worktree, cwd);
4481 	if (error)
4482 		goto done;
4483 
4484 	error = got_worktree_rebase_in_progress(&rebase_in_progress, worktree);
4485 	if (error)
4486 		goto done;
4487 	if (rebase_in_progress) {
4488 		error = got_error(GOT_ERR_REBASING);
4489 		goto done;
4490 	}
4491 
4492 	error = got_worktree_histedit_in_progress(&histedit_in_progress,
4493 	    worktree);
4494 	if (error)
4495 		goto done;
4496 
4497 	error = get_gitconfig_path(&gitconfig_path);
4498 	if (error)
4499 		goto done;
4500 	error = got_repo_open(&repo, got_worktree_get_repo_path(worktree),
4501 	    gitconfig_path);
4502 	if (error != NULL)
4503 		goto done;
4504 
4505 	error = get_author(&author, repo);
4506 	if (error)
4507 		return error;
4508 
4509 	/*
4510 	 * unveil(2) traverses exec(2); if an editor is used we have
4511 	 * to apply unveil after the log message has been written.
4512 	 */
4513 	if (logmsg == NULL || strlen(logmsg) == 0)
4514 		error = get_editor(&editor);
4515 	else
4516 		error = apply_unveil(got_repo_get_path(repo), 0,
4517 		    got_worktree_get_root_path(worktree));
4518 	if (error)
4519 		goto done;
4520 
4521 	error = get_worktree_paths_from_argv(&paths, argc, argv, worktree);
4522 	if (error)
4523 		goto done;
4524 
4525 	cl_arg.editor = editor;
4526 	cl_arg.cmdline_log = logmsg;
4527 	cl_arg.worktree_path = got_worktree_get_root_path(worktree);
4528 	cl_arg.branch_name = got_worktree_get_head_ref_name(worktree);
4529 	if (!histedit_in_progress) {
4530 		if (strncmp(cl_arg.branch_name, "refs/heads/", 11) != 0) {
4531 			error = got_error(GOT_ERR_COMMIT_BRANCH);
4532 			goto done;
4533 		}
4534 		cl_arg.branch_name += 11;
4535 	}
4536 	cl_arg.repo_path = got_repo_get_path(repo);
4537 	error = got_worktree_commit(&id, worktree, &paths, author, NULL,
4538 	    collect_commit_logmsg, &cl_arg, print_status, NULL, repo);
4539 	if (error) {
4540 		if (cl_arg.logmsg_path)
4541 			fprintf(stderr, "%s: log message preserved in %s\n",
4542 			    getprogname(), cl_arg.logmsg_path);
4543 		goto done;
4544 	}
4545 
4546 	if (cl_arg.logmsg_path)
4547 		unlink(cl_arg.logmsg_path);
4548 
4549 	error = got_object_id_str(&id_str, id);
4550 	if (error)
4551 		goto done;
4552 	printf("Created commit %s\n", id_str);
4553 done:
4554 	free(cl_arg.logmsg_path);
4555 	if (repo)
4556 		got_repo_close(repo);
4557 	if (worktree)
4558 		got_worktree_close(worktree);
4559 	free(cwd);
4560 	free(id_str);
4561 	free(gitconfig_path);
4562 	free(editor);
4563 	free(author);
4564 	return error;
4565 }
4566 
4567 __dead static void
4568 usage_cherrypick(void)
4569 {
4570 	fprintf(stderr, "usage: %s cherrypick commit-id\n", getprogname());
4571 	exit(1);
4572 }
4573 
4574 static const struct got_error *
4575 cmd_cherrypick(int argc, char *argv[])
4576 {
4577 	const struct got_error *error = NULL;
4578 	struct got_worktree *worktree = NULL;
4579 	struct got_repository *repo = NULL;
4580 	char *cwd = NULL, *commit_id_str = NULL;
4581 	struct got_object_id *commit_id = NULL;
4582 	struct got_commit_object *commit = NULL;
4583 	struct got_object_qid *pid;
4584 	struct got_reference *head_ref = NULL;
4585 	int ch, did_something = 0;
4586 
4587 	while ((ch = getopt(argc, argv, "")) != -1) {
4588 		switch (ch) {
4589 		default:
4590 			usage_cherrypick();
4591 			/* NOTREACHED */
4592 		}
4593 	}
4594 
4595 	argc -= optind;
4596 	argv += optind;
4597 
4598 #ifndef PROFILE
4599 	if (pledge("stdio rpath wpath cpath fattr flock proc exec sendfd "
4600 	    "unveil", NULL) == -1)
4601 		err(1, "pledge");
4602 #endif
4603 	if (argc != 1)
4604 		usage_cherrypick();
4605 
4606 	cwd = getcwd(NULL, 0);
4607 	if (cwd == NULL) {
4608 		error = got_error_from_errno("getcwd");
4609 		goto done;
4610 	}
4611 	error = got_worktree_open(&worktree, cwd);
4612 	if (error)
4613 		goto done;
4614 
4615 	error = got_repo_open(&repo, got_worktree_get_repo_path(worktree),
4616 	    NULL);
4617 	if (error != NULL)
4618 		goto done;
4619 
4620 	error = apply_unveil(got_repo_get_path(repo), 0,
4621 	    got_worktree_get_root_path(worktree));
4622 	if (error)
4623 		goto done;
4624 
4625 	error = got_repo_match_object_id_prefix(&commit_id, argv[0],
4626 	    GOT_OBJ_TYPE_COMMIT, repo);
4627 	if (error != NULL) {
4628 		struct got_reference *ref;
4629 		if (error->code != GOT_ERR_BAD_OBJ_ID_STR)
4630 			goto done;
4631 		error = got_ref_open(&ref, repo, argv[0], 0);
4632 		if (error != NULL)
4633 			goto done;
4634 		error = got_ref_resolve(&commit_id, repo, ref);
4635 		got_ref_close(ref);
4636 		if (error != NULL)
4637 			goto done;
4638 	}
4639 	error = got_object_id_str(&commit_id_str, commit_id);
4640 	if (error)
4641 		goto done;
4642 
4643 	error = got_ref_open(&head_ref, repo,
4644 	    got_worktree_get_head_ref_name(worktree), 0);
4645 	if (error != NULL)
4646 		goto done;
4647 
4648 	error = check_same_branch(commit_id, head_ref, NULL, repo);
4649 	if (error) {
4650 		if (error->code != GOT_ERR_ANCESTRY)
4651 			goto done;
4652 		error = NULL;
4653 	} else {
4654 		error = got_error(GOT_ERR_SAME_BRANCH);
4655 		goto done;
4656 	}
4657 
4658 	error = got_object_open_as_commit(&commit, repo, commit_id);
4659 	if (error)
4660 		goto done;
4661 	pid = SIMPLEQ_FIRST(got_object_commit_get_parent_ids(commit));
4662 	error = got_worktree_merge_files(worktree, pid ? pid->id : NULL,
4663 	    commit_id, repo, update_progress, &did_something, check_cancelled,
4664 	    NULL);
4665 	if (error != NULL)
4666 		goto done;
4667 
4668 	if (did_something)
4669 		printf("Merged commit %s\n", commit_id_str);
4670 done:
4671 	if (commit)
4672 		got_object_commit_close(commit);
4673 	free(commit_id_str);
4674 	if (head_ref)
4675 		got_ref_close(head_ref);
4676 	if (worktree)
4677 		got_worktree_close(worktree);
4678 	if (repo)
4679 		got_repo_close(repo);
4680 	return error;
4681 }
4682 
4683 __dead static void
4684 usage_backout(void)
4685 {
4686 	fprintf(stderr, "usage: %s backout commit-id\n", getprogname());
4687 	exit(1);
4688 }
4689 
4690 static const struct got_error *
4691 cmd_backout(int argc, char *argv[])
4692 {
4693 	const struct got_error *error = NULL;
4694 	struct got_worktree *worktree = NULL;
4695 	struct got_repository *repo = NULL;
4696 	char *cwd = NULL, *commit_id_str = NULL;
4697 	struct got_object_id *commit_id = NULL;
4698 	struct got_commit_object *commit = NULL;
4699 	struct got_object_qid *pid;
4700 	struct got_reference *head_ref = NULL;
4701 	int ch, did_something = 0;
4702 
4703 	while ((ch = getopt(argc, argv, "")) != -1) {
4704 		switch (ch) {
4705 		default:
4706 			usage_backout();
4707 			/* NOTREACHED */
4708 		}
4709 	}
4710 
4711 	argc -= optind;
4712 	argv += optind;
4713 
4714 #ifndef PROFILE
4715 	if (pledge("stdio rpath wpath cpath fattr flock proc exec sendfd "
4716 	    "unveil", NULL) == -1)
4717 		err(1, "pledge");
4718 #endif
4719 	if (argc != 1)
4720 		usage_backout();
4721 
4722 	cwd = getcwd(NULL, 0);
4723 	if (cwd == NULL) {
4724 		error = got_error_from_errno("getcwd");
4725 		goto done;
4726 	}
4727 	error = got_worktree_open(&worktree, cwd);
4728 	if (error)
4729 		goto done;
4730 
4731 	error = got_repo_open(&repo, got_worktree_get_repo_path(worktree),
4732 	    NULL);
4733 	if (error != NULL)
4734 		goto done;
4735 
4736 	error = apply_unveil(got_repo_get_path(repo), 0,
4737 	    got_worktree_get_root_path(worktree));
4738 	if (error)
4739 		goto done;
4740 
4741 	error = got_repo_match_object_id_prefix(&commit_id, argv[0],
4742 	    GOT_OBJ_TYPE_COMMIT, repo);
4743 	if (error != NULL) {
4744 		struct got_reference *ref;
4745 		if (error->code != GOT_ERR_BAD_OBJ_ID_STR)
4746 			goto done;
4747 		error = got_ref_open(&ref, repo, argv[0], 0);
4748 		if (error != NULL)
4749 			goto done;
4750 		error = got_ref_resolve(&commit_id, repo, ref);
4751 		got_ref_close(ref);
4752 		if (error != NULL)
4753 			goto done;
4754 	}
4755 	error = got_object_id_str(&commit_id_str, commit_id);
4756 	if (error)
4757 		goto done;
4758 
4759 	error = got_ref_open(&head_ref, repo,
4760 	    got_worktree_get_head_ref_name(worktree), 0);
4761 	if (error != NULL)
4762 		goto done;
4763 
4764 	error = check_same_branch(commit_id, head_ref, NULL, repo);
4765 	if (error)
4766 		goto done;
4767 
4768 	error = got_object_open_as_commit(&commit, repo, commit_id);
4769 	if (error)
4770 		goto done;
4771 	pid = SIMPLEQ_FIRST(got_object_commit_get_parent_ids(commit));
4772 	if (pid == NULL) {
4773 		error = got_error(GOT_ERR_ROOT_COMMIT);
4774 		goto done;
4775 	}
4776 
4777 	error = got_worktree_merge_files(worktree, commit_id, pid->id, repo,
4778 	    update_progress, &did_something, check_cancelled, NULL);
4779 	if (error != NULL)
4780 		goto done;
4781 
4782 	if (did_something)
4783 		printf("Backed out commit %s\n", commit_id_str);
4784 done:
4785 	if (commit)
4786 		got_object_commit_close(commit);
4787 	free(commit_id_str);
4788 	if (head_ref)
4789 		got_ref_close(head_ref);
4790 	if (worktree)
4791 		got_worktree_close(worktree);
4792 	if (repo)
4793 		got_repo_close(repo);
4794 	return error;
4795 }
4796 
4797 __dead static void
4798 usage_rebase(void)
4799 {
4800 	fprintf(stderr, "usage: %s rebase [-a] | [-c] | branch\n",
4801 	    getprogname());
4802 	exit(1);
4803 }
4804 
4805 void
4806 trim_logmsg(char *logmsg, int limit)
4807 {
4808 	char *nl;
4809 	size_t len;
4810 
4811 	len = strlen(logmsg);
4812 	if (len > limit)
4813 		len = limit;
4814 	logmsg[len] = '\0';
4815 	nl = strchr(logmsg, '\n');
4816 	if (nl)
4817 		*nl = '\0';
4818 }
4819 
4820 static const struct got_error *
4821 get_short_logmsg(char **logmsg, int limit, struct got_commit_object *commit)
4822 {
4823 	const struct got_error *err;
4824 	char *logmsg0 = NULL;
4825 	const char *s;
4826 
4827 	err = got_object_commit_get_logmsg(&logmsg0, commit);
4828 	if (err)
4829 		return err;
4830 
4831 	s = logmsg0;
4832 	while (isspace((unsigned char)s[0]))
4833 		s++;
4834 
4835 	*logmsg = strdup(s);
4836 	if (*logmsg == NULL) {
4837 		err = got_error_from_errno("strdup");
4838 		goto done;
4839 	}
4840 
4841 	trim_logmsg(*logmsg, limit);
4842 done:
4843 	free(logmsg0);
4844 	return err;
4845 }
4846 
4847 static const struct got_error *
4848 show_rebase_progress(struct got_commit_object *commit,
4849     struct got_object_id *old_id, struct got_object_id *new_id)
4850 {
4851 	const struct got_error *err;
4852 	char *old_id_str = NULL, *new_id_str = NULL, *logmsg = NULL;
4853 
4854 	err = got_object_id_str(&old_id_str, old_id);
4855 	if (err)
4856 		goto done;
4857 
4858 	if (new_id) {
4859 		err = got_object_id_str(&new_id_str, new_id);
4860 		if (err)
4861 			goto done;
4862 	}
4863 
4864 	old_id_str[12] = '\0';
4865 	if (new_id_str)
4866 		new_id_str[12] = '\0';
4867 
4868 	err = get_short_logmsg(&logmsg, 42, commit);
4869 	if (err)
4870 		goto done;
4871 
4872 	printf("%s -> %s: %s\n", old_id_str,
4873 	    new_id_str ? new_id_str : "no-op change", logmsg);
4874 done:
4875 	free(old_id_str);
4876 	free(new_id_str);
4877 	return err;
4878 }
4879 
4880 static const struct got_error *
4881 rebase_progress(void *arg, unsigned char status, const char *path)
4882 {
4883 	unsigned char *rebase_status = arg;
4884 
4885 	while (path[0] == '/')
4886 		path++;
4887 	printf("%c  %s\n", status, path);
4888 
4889 	if (*rebase_status == GOT_STATUS_CONFLICT)
4890 		return NULL;
4891 	if (status == GOT_STATUS_CONFLICT || status == GOT_STATUS_MERGE)
4892 		*rebase_status = status;
4893 	return NULL;
4894 }
4895 
4896 static const struct got_error *
4897 rebase_complete(struct got_worktree *worktree, struct got_fileindex *fileindex,
4898     struct got_reference *branch, struct got_reference *new_base_branch,
4899     struct got_reference *tmp_branch, struct got_repository *repo)
4900 {
4901 	printf("Switching work tree to %s\n", got_ref_get_name(branch));
4902 	return got_worktree_rebase_complete(worktree, fileindex,
4903 	    new_base_branch, tmp_branch, branch, repo);
4904 }
4905 
4906 static const struct got_error *
4907 rebase_commit(struct got_pathlist_head *merged_paths,
4908     struct got_worktree *worktree, struct got_fileindex *fileindex,
4909     struct got_reference *tmp_branch,
4910     struct got_object_id *commit_id, struct got_repository *repo)
4911 {
4912 	const struct got_error *error;
4913 	struct got_commit_object *commit;
4914 	struct got_object_id *new_commit_id;
4915 
4916 	error = got_object_open_as_commit(&commit, repo, commit_id);
4917 	if (error)
4918 		return error;
4919 
4920 	error = got_worktree_rebase_commit(&new_commit_id, merged_paths,
4921 	    worktree, fileindex, tmp_branch, commit, commit_id, repo);
4922 	if (error) {
4923 		if (error->code != GOT_ERR_COMMIT_NO_CHANGES)
4924 			goto done;
4925 		error = show_rebase_progress(commit, commit_id, NULL);
4926 	} else {
4927 		error = show_rebase_progress(commit, commit_id, new_commit_id);
4928 		free(new_commit_id);
4929 	}
4930 done:
4931 	got_object_commit_close(commit);
4932 	return error;
4933 }
4934 
4935 struct check_path_prefix_arg {
4936 	const char *path_prefix;
4937 	size_t len;
4938 	int errcode;
4939 };
4940 
4941 static const struct got_error *
4942 check_path_prefix_in_diff(void *arg, struct got_blob_object *blob1,
4943     struct got_blob_object *blob2, struct got_object_id *id1,
4944     struct got_object_id *id2, const char *path1, const char *path2,
4945     struct got_repository *repo)
4946 {
4947 	struct check_path_prefix_arg *a = arg;
4948 
4949 	if ((path1 && !got_path_is_child(path1, a->path_prefix, a->len)) ||
4950 	    (path2 && !got_path_is_child(path2, a->path_prefix, a->len)))
4951 		return got_error(a->errcode);
4952 
4953 	return NULL;
4954 }
4955 
4956 static const struct got_error *
4957 check_path_prefix(struct got_object_id *parent_id,
4958     struct got_object_id *commit_id, const char *path_prefix,
4959     int errcode, struct got_repository *repo)
4960 {
4961 	const struct got_error *err;
4962 	struct got_tree_object *tree1 = NULL, *tree2 = NULL;
4963 	struct got_commit_object *commit = NULL, *parent_commit = NULL;
4964 	struct check_path_prefix_arg cpp_arg;
4965 
4966 	if (got_path_is_root_dir(path_prefix))
4967 		return NULL;
4968 
4969 	err = got_object_open_as_commit(&commit, repo, commit_id);
4970 	if (err)
4971 		goto done;
4972 
4973 	err = got_object_open_as_commit(&parent_commit, repo, parent_id);
4974 	if (err)
4975 		goto done;
4976 
4977 	err = got_object_open_as_tree(&tree1, repo,
4978 	    got_object_commit_get_tree_id(parent_commit));
4979 	if (err)
4980 		goto done;
4981 
4982 	err = got_object_open_as_tree(&tree2, repo,
4983 	    got_object_commit_get_tree_id(commit));
4984 	if (err)
4985 		goto done;
4986 
4987 	cpp_arg.path_prefix = path_prefix;
4988 	while (cpp_arg.path_prefix[0] == '/')
4989 		cpp_arg.path_prefix++;
4990 	cpp_arg.len = strlen(cpp_arg.path_prefix);
4991 	cpp_arg.errcode = errcode;
4992 	err = got_diff_tree(tree1, tree2, "", "", repo,
4993 	    check_path_prefix_in_diff, &cpp_arg, 0);
4994 done:
4995 	if (tree1)
4996 		got_object_tree_close(tree1);
4997 	if (tree2)
4998 		got_object_tree_close(tree2);
4999 	if (commit)
5000 		got_object_commit_close(commit);
5001 	if (parent_commit)
5002 		got_object_commit_close(parent_commit);
5003 	return err;
5004 }
5005 
5006 static const struct got_error *
5007 collect_commits(struct got_object_id_queue *commits,
5008     struct got_object_id *initial_commit_id,
5009     struct got_object_id *iter_start_id, struct got_object_id *iter_stop_id,
5010     const char *path_prefix, int path_prefix_errcode,
5011     struct got_repository *repo)
5012 {
5013 	const struct got_error *err = NULL;
5014 	struct got_commit_graph *graph = NULL;
5015 	struct got_object_id *parent_id = NULL;
5016 	struct got_object_qid *qid;
5017         struct got_object_id *commit_id = initial_commit_id;
5018 
5019 	err = got_commit_graph_open(&graph, initial_commit_id, "/", 1, repo);
5020 	if (err)
5021 		return err;
5022 
5023 	err = got_commit_graph_iter_start(graph, iter_start_id, repo,
5024 	    check_cancelled, NULL);
5025 	if (err)
5026 		goto done;
5027 	while (got_object_id_cmp(commit_id, iter_stop_id) != 0) {
5028 		err = got_commit_graph_iter_next(&parent_id, graph);
5029 		if (err) {
5030 			if (err->code == GOT_ERR_ITER_COMPLETED) {
5031 				err = got_error_msg(GOT_ERR_ANCESTRY,
5032 				    "ran out of commits to rebase before "
5033 				    "youngest common ancestor commit has "
5034 				    "been reached?!?");
5035 				goto done;
5036 			} else if (err->code != GOT_ERR_ITER_NEED_MORE)
5037 				goto done;
5038 			err = got_commit_graph_fetch_commits(graph, 1, repo,
5039 			    check_cancelled, NULL);
5040 			if (err)
5041 				goto done;
5042 		} else {
5043 			err = check_path_prefix(parent_id, commit_id,
5044 			    path_prefix, path_prefix_errcode, repo);
5045 			if (err)
5046 				goto done;
5047 
5048 			err = got_object_qid_alloc(&qid, commit_id);
5049 			if (err)
5050 				goto done;
5051 			SIMPLEQ_INSERT_HEAD(commits, qid, entry);
5052 			commit_id = parent_id;
5053 		}
5054 	}
5055 done:
5056 	got_commit_graph_close(graph);
5057 	return err;
5058 }
5059 
5060 static const struct got_error *
5061 cmd_rebase(int argc, char *argv[])
5062 {
5063 	const struct got_error *error = NULL;
5064 	struct got_worktree *worktree = NULL;
5065 	struct got_repository *repo = NULL;
5066 	struct got_fileindex *fileindex = NULL;
5067 	char *cwd = NULL;
5068 	struct got_reference *branch = NULL;
5069 	struct got_reference *new_base_branch = NULL, *tmp_branch = NULL;
5070 	struct got_object_id *commit_id = NULL, *parent_id = NULL;
5071 	struct got_object_id *resume_commit_id = NULL;
5072 	struct got_object_id *branch_head_commit_id = NULL, *yca_id = NULL;
5073 	struct got_commit_object *commit = NULL;
5074 	int ch, rebase_in_progress = 0, abort_rebase = 0, continue_rebase = 0;
5075 	unsigned char rebase_status = GOT_STATUS_NO_CHANGE;
5076 	struct got_object_id_queue commits;
5077 	struct got_pathlist_head merged_paths;
5078 	const struct got_object_id_queue *parent_ids;
5079 	struct got_object_qid *qid, *pid;
5080 
5081 	SIMPLEQ_INIT(&commits);
5082 	TAILQ_INIT(&merged_paths);
5083 
5084 	while ((ch = getopt(argc, argv, "ac")) != -1) {
5085 		switch (ch) {
5086 		case 'a':
5087 			abort_rebase = 1;
5088 			break;
5089 		case 'c':
5090 			continue_rebase = 1;
5091 			break;
5092 		default:
5093 			usage_rebase();
5094 			/* NOTREACHED */
5095 		}
5096 	}
5097 
5098 	argc -= optind;
5099 	argv += optind;
5100 
5101 #ifndef PROFILE
5102 	if (pledge("stdio rpath wpath cpath fattr flock proc exec sendfd "
5103 	    "unveil", NULL) == -1)
5104 		err(1, "pledge");
5105 #endif
5106 	if (abort_rebase && continue_rebase)
5107 		usage_rebase();
5108 	else if (abort_rebase || continue_rebase) {
5109 		if (argc != 0)
5110 			usage_rebase();
5111 	} else if (argc != 1)
5112 		usage_rebase();
5113 
5114 	cwd = getcwd(NULL, 0);
5115 	if (cwd == NULL) {
5116 		error = got_error_from_errno("getcwd");
5117 		goto done;
5118 	}
5119 	error = got_worktree_open(&worktree, cwd);
5120 	if (error)
5121 		goto done;
5122 
5123 	error = got_repo_open(&repo, got_worktree_get_repo_path(worktree),
5124 	    NULL);
5125 	if (error != NULL)
5126 		goto done;
5127 
5128 	error = apply_unveil(got_repo_get_path(repo), 0,
5129 	    got_worktree_get_root_path(worktree));
5130 	if (error)
5131 		goto done;
5132 
5133 	error = got_worktree_rebase_in_progress(&rebase_in_progress, worktree);
5134 	if (error)
5135 		goto done;
5136 
5137 	if (abort_rebase) {
5138 		int did_something;
5139 		if (!rebase_in_progress) {
5140 			error = got_error(GOT_ERR_NOT_REBASING);
5141 			goto done;
5142 		}
5143 		error = got_worktree_rebase_continue(&resume_commit_id,
5144 		    &new_base_branch, &tmp_branch, &branch, &fileindex,
5145 		    worktree, repo);
5146 		if (error)
5147 			goto done;
5148 		printf("Switching work tree to %s\n",
5149 		    got_ref_get_symref_target(new_base_branch));
5150 		error = got_worktree_rebase_abort(worktree, fileindex, repo,
5151 		    new_base_branch, update_progress, &did_something);
5152 		if (error)
5153 			goto done;
5154 		printf("Rebase of %s aborted\n", got_ref_get_name(branch));
5155 		goto done; /* nothing else to do */
5156 	}
5157 
5158 	if (continue_rebase) {
5159 		if (!rebase_in_progress) {
5160 			error = got_error(GOT_ERR_NOT_REBASING);
5161 			goto done;
5162 		}
5163 		error = got_worktree_rebase_continue(&resume_commit_id,
5164 		    &new_base_branch, &tmp_branch, &branch, &fileindex,
5165 		    worktree, repo);
5166 		if (error)
5167 			goto done;
5168 
5169 		error = rebase_commit(NULL, worktree, fileindex, tmp_branch,
5170 		    resume_commit_id, repo);
5171 		if (error)
5172 			goto done;
5173 
5174 		yca_id = got_object_id_dup(resume_commit_id);
5175 		if (yca_id == NULL) {
5176 			error = got_error_from_errno("got_object_id_dup");
5177 			goto done;
5178 		}
5179 	} else {
5180 		error = got_ref_open(&branch, repo, argv[0], 0);
5181 		if (error != NULL)
5182 			goto done;
5183 	}
5184 
5185 	error = got_ref_resolve(&branch_head_commit_id, repo, branch);
5186 	if (error)
5187 		goto done;
5188 
5189 	if (!continue_rebase) {
5190 		struct got_object_id *base_commit_id;
5191 
5192 		base_commit_id = got_worktree_get_base_commit_id(worktree);
5193 		error = got_commit_graph_find_youngest_common_ancestor(&yca_id,
5194 		    base_commit_id, branch_head_commit_id, repo,
5195 		    check_cancelled, NULL);
5196 		if (error)
5197 			goto done;
5198 		if (yca_id == NULL) {
5199 			error = got_error_msg(GOT_ERR_ANCESTRY,
5200 			    "specified branch shares no common ancestry "
5201 			    "with work tree's branch");
5202 			goto done;
5203 		}
5204 
5205 		error = check_same_branch(base_commit_id, branch, yca_id, repo);
5206 		if (error) {
5207 			if (error->code != GOT_ERR_ANCESTRY)
5208 				goto done;
5209 			error = NULL;
5210 		} else {
5211 			error = got_error_msg(GOT_ERR_SAME_BRANCH,
5212 			    "specified branch resolves to a commit which "
5213 			    "is already contained in work tree's branch");
5214 			goto done;
5215 		}
5216 		error = got_worktree_rebase_prepare(&new_base_branch,
5217 		    &tmp_branch, &fileindex, worktree, branch, repo);
5218 		if (error)
5219 			goto done;
5220 	}
5221 
5222 	commit_id = branch_head_commit_id;
5223 	error = got_object_open_as_commit(&commit, repo, commit_id);
5224 	if (error)
5225 		goto done;
5226 
5227 	parent_ids = got_object_commit_get_parent_ids(commit);
5228 	pid = SIMPLEQ_FIRST(parent_ids);
5229 	if (pid == NULL) {
5230 		if (!continue_rebase) {
5231 			int did_something;
5232 			error = got_worktree_rebase_abort(worktree, fileindex,
5233 			    repo, new_base_branch, update_progress,
5234 			    &did_something);
5235 			if (error)
5236 				goto done;
5237 			printf("Rebase of %s aborted\n",
5238 			    got_ref_get_name(branch));
5239 		}
5240 		error = got_error(GOT_ERR_EMPTY_REBASE);
5241 		goto done;
5242 	}
5243 	error = collect_commits(&commits, commit_id, pid->id,
5244 	    yca_id, got_worktree_get_path_prefix(worktree),
5245 	    GOT_ERR_REBASE_PATH, repo);
5246 	got_object_commit_close(commit);
5247 	commit = NULL;
5248 	if (error)
5249 		goto done;
5250 
5251 	if (SIMPLEQ_EMPTY(&commits)) {
5252 		if (continue_rebase)
5253 			error = rebase_complete(worktree, fileindex,
5254 			    branch, new_base_branch, tmp_branch, repo);
5255 		else
5256 			error = got_error(GOT_ERR_EMPTY_REBASE);
5257 		goto done;
5258 	}
5259 
5260 	pid = NULL;
5261 	SIMPLEQ_FOREACH(qid, &commits, entry) {
5262 		commit_id = qid->id;
5263 		parent_id = pid ? pid->id : yca_id;
5264 		pid = qid;
5265 
5266 		error = got_worktree_rebase_merge_files(&merged_paths,
5267 		    worktree, fileindex, parent_id, commit_id, repo,
5268 		    rebase_progress, &rebase_status, check_cancelled, NULL);
5269 		if (error)
5270 			goto done;
5271 
5272 		if (rebase_status == GOT_STATUS_CONFLICT) {
5273 			got_worktree_rebase_pathlist_free(&merged_paths);
5274 			break;
5275 		}
5276 
5277 		error = rebase_commit(&merged_paths, worktree, fileindex,
5278 		    tmp_branch, commit_id, repo);
5279 		got_worktree_rebase_pathlist_free(&merged_paths);
5280 		if (error)
5281 			goto done;
5282 	}
5283 
5284 	if (rebase_status == GOT_STATUS_CONFLICT) {
5285 		error = got_worktree_rebase_postpone(worktree, fileindex);
5286 		if (error)
5287 			goto done;
5288 		error = got_error_msg(GOT_ERR_CONFLICTS,
5289 		    "conflicts must be resolved before rebasing can continue");
5290 	} else
5291 		error = rebase_complete(worktree, fileindex, branch,
5292 		    new_base_branch, tmp_branch, repo);
5293 done:
5294 	got_object_id_queue_free(&commits);
5295 	free(branch_head_commit_id);
5296 	free(resume_commit_id);
5297 	free(yca_id);
5298 	if (commit)
5299 		got_object_commit_close(commit);
5300 	if (branch)
5301 		got_ref_close(branch);
5302 	if (new_base_branch)
5303 		got_ref_close(new_base_branch);
5304 	if (tmp_branch)
5305 		got_ref_close(tmp_branch);
5306 	if (worktree)
5307 		got_worktree_close(worktree);
5308 	if (repo)
5309 		got_repo_close(repo);
5310 	return error;
5311 }
5312 
5313 __dead static void
5314 usage_histedit(void)
5315 {
5316 	fprintf(stderr, "usage: %s histedit [-a] [-c] [-F histedit-script]\n",
5317 	    getprogname());
5318 	exit(1);
5319 }
5320 
5321 #define GOT_HISTEDIT_PICK 'p'
5322 #define GOT_HISTEDIT_EDIT 'e'
5323 #define GOT_HISTEDIT_FOLD 'f'
5324 #define GOT_HISTEDIT_DROP 'd'
5325 #define GOT_HISTEDIT_MESG 'm'
5326 
5327 static struct got_histedit_cmd {
5328 	unsigned char code;
5329 	const char *name;
5330 	const char *desc;
5331 } got_histedit_cmds[] = {
5332 	{ GOT_HISTEDIT_PICK, "pick", "use commit" },
5333 	{ GOT_HISTEDIT_EDIT, "edit", "use commit but stop for amending" },
5334 	{ GOT_HISTEDIT_FOLD, "fold", "combine with commit below" },
5335 	{ GOT_HISTEDIT_DROP, "drop", "remove commit from history" },
5336 	{ GOT_HISTEDIT_MESG, "mesg",
5337 	    "single-line log message for commit above (open editor if empty)" },
5338 };
5339 
5340 struct got_histedit_list_entry {
5341 	TAILQ_ENTRY(got_histedit_list_entry) entry;
5342 	struct got_object_id *commit_id;
5343 	const struct got_histedit_cmd *cmd;
5344 	char *logmsg;
5345 };
5346 TAILQ_HEAD(got_histedit_list, got_histedit_list_entry);
5347 
5348 static const struct got_error *
5349 histedit_write_commit(struct got_object_id *commit_id, const char *cmdname,
5350     FILE *f, struct got_repository *repo)
5351 {
5352 	const struct got_error *err = NULL;
5353 	char *logmsg = NULL, *id_str = NULL;
5354 	struct got_commit_object *commit = NULL;
5355 	int n;
5356 
5357 	err = got_object_open_as_commit(&commit, repo, commit_id);
5358 	if (err)
5359 		goto done;
5360 
5361 	err = get_short_logmsg(&logmsg, 34, commit);
5362 	if (err)
5363 		goto done;
5364 
5365 	err = got_object_id_str(&id_str, commit_id);
5366 	if (err)
5367 		goto done;
5368 
5369 	n = fprintf(f, "%s %s %s\n", cmdname, id_str, logmsg);
5370 	if (n < 0)
5371 		err = got_ferror(f, GOT_ERR_IO);
5372 done:
5373 	if (commit)
5374 		got_object_commit_close(commit);
5375 	free(id_str);
5376 	free(logmsg);
5377 	return err;
5378 }
5379 
5380 static const struct got_error *
5381 histedit_write_commit_list(struct got_object_id_queue *commits, FILE *f,
5382     struct got_repository *repo)
5383 {
5384 	const struct got_error *err = NULL;
5385 	struct got_object_qid *qid;
5386 
5387 	if (SIMPLEQ_EMPTY(commits))
5388 		return got_error(GOT_ERR_EMPTY_HISTEDIT);
5389 
5390 	SIMPLEQ_FOREACH(qid, commits, entry) {
5391 		err = histedit_write_commit(qid->id, got_histedit_cmds[0].name,
5392 		    f, repo);
5393 		if (err)
5394 			break;
5395 	}
5396 
5397 	return err;
5398 }
5399 
5400 static const struct got_error *
5401 write_cmd_list(FILE *f)
5402 {
5403 	const struct got_error *err = NULL;
5404 	int n, i;
5405 
5406 	n = fprintf(f, "# Available histedit commands:\n");
5407 	if (n < 0)
5408 		return got_ferror(f, GOT_ERR_IO);
5409 
5410 	for (i = 0; i < nitems(got_histedit_cmds); i++) {
5411 		struct got_histedit_cmd *cmd = &got_histedit_cmds[i];
5412 		n = fprintf(f, "#   %s (%c): %s\n", cmd->name, cmd->code,
5413 		    cmd->desc);
5414 		if (n < 0) {
5415 			err = got_ferror(f, GOT_ERR_IO);
5416 			break;
5417 		}
5418 	}
5419 	n = fprintf(f, "# Commits will be processed in order from top to "
5420 	    "bottom of this file.\n");
5421 	if (n < 0)
5422 		return got_ferror(f, GOT_ERR_IO);
5423 	return err;
5424 }
5425 
5426 static const struct got_error *
5427 histedit_syntax_error(int lineno)
5428 {
5429 	static char msg[42];
5430 	int ret;
5431 
5432 	ret = snprintf(msg, sizeof(msg), "histedit syntax error on line %d",
5433 	    lineno);
5434 	if (ret == -1 || ret >= sizeof(msg))
5435 		return got_error(GOT_ERR_HISTEDIT_SYNTAX);
5436 
5437 	return got_error_msg(GOT_ERR_HISTEDIT_SYNTAX, msg);
5438 }
5439 
5440 static const struct got_error *
5441 append_folded_commit_msg(char **new_msg, struct got_histedit_list_entry *hle,
5442     char *logmsg, struct got_repository *repo)
5443 {
5444 	const struct got_error *err;
5445 	struct got_commit_object *folded_commit = NULL;
5446 	char *id_str, *folded_logmsg = NULL;
5447 
5448 	err = got_object_id_str(&id_str, hle->commit_id);
5449 	if (err)
5450 		return err;
5451 
5452 	err = got_object_open_as_commit(&folded_commit, repo, hle->commit_id);
5453 	if (err)
5454 		goto done;
5455 
5456 	err = got_object_commit_get_logmsg(&folded_logmsg, folded_commit);
5457 	if (err)
5458 		goto done;
5459 	if (asprintf(new_msg, "%s%s# log message of folded commit %s: %s",
5460 	    logmsg ? logmsg : "", logmsg ? "\n" : "", id_str,
5461 	    folded_logmsg) == -1) {
5462 		err = got_error_from_errno("asprintf");
5463 		goto done;
5464 	}
5465 done:
5466 	if (folded_commit)
5467 		got_object_commit_close(folded_commit);
5468 	free(id_str);
5469 	free(folded_logmsg);
5470 	return err;
5471 }
5472 
5473 static struct got_histedit_list_entry *
5474 get_folded_commits(struct got_histedit_list_entry *hle)
5475 {
5476 	struct got_histedit_list_entry *prev, *folded = NULL;
5477 
5478 	prev = TAILQ_PREV(hle, got_histedit_list, entry);
5479 	while (prev && (prev->cmd->code == GOT_HISTEDIT_FOLD ||
5480 	    prev->cmd->code == GOT_HISTEDIT_DROP)) {
5481 		if (prev->cmd->code == GOT_HISTEDIT_FOLD)
5482 			folded = prev;
5483 		prev = TAILQ_PREV(prev, got_histedit_list, entry);
5484 	}
5485 
5486 	return folded;
5487 }
5488 
5489 static const struct got_error *
5490 histedit_edit_logmsg(struct got_histedit_list_entry *hle,
5491     struct got_repository *repo)
5492 {
5493 	char *logmsg_path = NULL, *id_str = NULL, *orig_logmsg = NULL;
5494 	char *logmsg = NULL, *new_msg = NULL, *editor = NULL;
5495 	const struct got_error *err = NULL;
5496 	struct got_commit_object *commit = NULL;
5497 	int fd;
5498 	struct got_histedit_list_entry *folded = NULL;
5499 
5500 	err = got_object_open_as_commit(&commit, repo, hle->commit_id);
5501 	if (err)
5502 		return err;
5503 
5504 	folded = get_folded_commits(hle);
5505 	if (folded) {
5506 		while (folded != hle) {
5507 			if (folded->cmd->code == GOT_HISTEDIT_DROP) {
5508 				folded = TAILQ_NEXT(folded, entry);
5509 				continue;
5510 			}
5511 			err = append_folded_commit_msg(&new_msg, folded,
5512 			    logmsg, repo);
5513 			if (err)
5514 				goto done;
5515 			free(logmsg);
5516 			logmsg = new_msg;
5517 			folded = TAILQ_NEXT(folded, entry);
5518 		}
5519 	}
5520 
5521 	err = got_object_id_str(&id_str, hle->commit_id);
5522 	if (err)
5523 		goto done;
5524 	err = got_object_commit_get_logmsg(&orig_logmsg, commit);
5525 	if (err)
5526 		goto done;
5527 	if (asprintf(&new_msg,
5528 	    "%s\n# original log message of commit %s: %s",
5529 	    logmsg ? logmsg : "", id_str, orig_logmsg) == -1) {
5530 		err = got_error_from_errno("asprintf");
5531 		goto done;
5532 	}
5533 	free(logmsg);
5534 	logmsg = new_msg;
5535 
5536 	err = got_object_id_str(&id_str, hle->commit_id);
5537 	if (err)
5538 		goto done;
5539 
5540 	err = got_opentemp_named_fd(&logmsg_path, &fd, "/tmp/got-logmsg");
5541 	if (err)
5542 		goto done;
5543 
5544 	dprintf(fd, logmsg);
5545 	close(fd);
5546 
5547 	err = get_editor(&editor);
5548 	if (err)
5549 		goto done;
5550 
5551 	err = edit_logmsg(&hle->logmsg, editor, logmsg_path, logmsg);
5552 	if (err) {
5553 		if (err->code != GOT_ERR_COMMIT_MSG_EMPTY)
5554 			goto done;
5555 		err = got_object_commit_get_logmsg(&hle->logmsg, commit);
5556 	}
5557 done:
5558 	if (logmsg_path && unlink(logmsg_path) != 0 && err == NULL)
5559 		err = got_error_from_errno2("unlink", logmsg_path);
5560 	free(logmsg_path);
5561 	free(logmsg);
5562 	free(orig_logmsg);
5563 	free(editor);
5564 	if (commit)
5565 		got_object_commit_close(commit);
5566 	return err;
5567 }
5568 
5569 static const struct got_error *
5570 histedit_parse_list(struct got_histedit_list *histedit_cmds,
5571     FILE *f, struct got_repository *repo)
5572 {
5573 	const struct got_error *err = NULL;
5574 	char *line = NULL, *p, *end;
5575 	size_t size;
5576 	ssize_t len;
5577 	int lineno = 0, i;
5578 	const struct got_histedit_cmd *cmd;
5579 	struct got_object_id *commit_id = NULL;
5580 	struct got_histedit_list_entry *hle = NULL;
5581 
5582 	for (;;) {
5583 		len = getline(&line, &size, f);
5584 		if (len == -1) {
5585 			const struct got_error *getline_err;
5586 			if (feof(f))
5587 				break;
5588 			getline_err = got_error_from_errno("getline");
5589 			err = got_ferror(f, getline_err->code);
5590 			break;
5591 		}
5592 		lineno++;
5593 		p = line;
5594 		while (isspace((unsigned char)p[0]))
5595 			p++;
5596 		if (p[0] == '#' || p[0] == '\0') {
5597 			free(line);
5598 			line = NULL;
5599 			continue;
5600 		}
5601 		cmd = NULL;
5602 		for (i = 0; i < nitems(got_histedit_cmds); i++) {
5603 			cmd = &got_histedit_cmds[i];
5604 			if (strncmp(cmd->name, p, strlen(cmd->name)) == 0 &&
5605 			    isspace((unsigned char)p[strlen(cmd->name)])) {
5606 				p += strlen(cmd->name);
5607 				break;
5608 			}
5609 			if (p[0] == cmd->code && isspace((unsigned char)p[1])) {
5610 				p++;
5611 				break;
5612 			}
5613 		}
5614 		if (i == nitems(got_histedit_cmds)) {
5615 			err = histedit_syntax_error(lineno);
5616 			break;
5617 		}
5618 		while (isspace((unsigned char)p[0]))
5619 			p++;
5620 		if (cmd->code == GOT_HISTEDIT_MESG) {
5621 			if (hle == NULL || hle->logmsg != NULL) {
5622 				err = got_error(GOT_ERR_HISTEDIT_CMD);
5623 				break;
5624 			}
5625 			if (p[0] == '\0') {
5626 				err = histedit_edit_logmsg(hle, repo);
5627 				if (err)
5628 					break;
5629 			} else {
5630 				hle->logmsg = strdup(p);
5631 				if (hle->logmsg == NULL) {
5632 					err = got_error_from_errno("strdup");
5633 					break;
5634 				}
5635 			}
5636 			free(line);
5637 			line = NULL;
5638 			continue;
5639 		} else {
5640 			end = p;
5641 			while (end[0] && !isspace((unsigned char)end[0]))
5642 				end++;
5643 			*end = '\0';
5644 
5645 			err = got_object_resolve_id_str(&commit_id, repo, p);
5646 			if (err) {
5647 				/* override error code */
5648 				err = histedit_syntax_error(lineno);
5649 				break;
5650 			}
5651 		}
5652 		hle = malloc(sizeof(*hle));
5653 		if (hle == NULL) {
5654 			err = got_error_from_errno("malloc");
5655 			break;
5656 		}
5657 		hle->cmd = cmd;
5658 		hle->commit_id = commit_id;
5659 		hle->logmsg = NULL;
5660 		commit_id = NULL;
5661 		free(line);
5662 		line = NULL;
5663 		TAILQ_INSERT_TAIL(histedit_cmds, hle, entry);
5664 	}
5665 
5666 	free(line);
5667 	free(commit_id);
5668 	return err;
5669 }
5670 
5671 static const struct got_error *
5672 histedit_check_script(struct got_histedit_list *histedit_cmds,
5673     struct got_object_id_queue *commits, struct got_repository *repo)
5674 {
5675 	const struct got_error *err = NULL;
5676 	struct got_object_qid *qid;
5677 	struct got_histedit_list_entry *hle;
5678 	static char msg[80];
5679 	char *id_str;
5680 
5681 	if (TAILQ_EMPTY(histedit_cmds))
5682 		return got_error_msg(GOT_ERR_EMPTY_HISTEDIT,
5683 		    "histedit script contains no commands");
5684 	if (SIMPLEQ_EMPTY(commits))
5685 		return got_error(GOT_ERR_EMPTY_HISTEDIT);
5686 
5687 	SIMPLEQ_FOREACH(qid, commits, entry) {
5688 		TAILQ_FOREACH(hle, histedit_cmds, entry) {
5689 			if (got_object_id_cmp(qid->id, hle->commit_id) == 0)
5690 				break;
5691 		}
5692 		if (hle == NULL) {
5693 			err = got_object_id_str(&id_str, qid->id);
5694 			if (err)
5695 				return err;
5696 			snprintf(msg, sizeof(msg),
5697 			    "commit %s missing from histedit script", id_str);
5698 			free(id_str);
5699 			return got_error_msg(GOT_ERR_HISTEDIT_CMD, msg);
5700 		}
5701 	}
5702 
5703 	hle = TAILQ_LAST(histedit_cmds, got_histedit_list);
5704 	if (hle && hle->cmd->code == GOT_HISTEDIT_FOLD)
5705 		return got_error_msg(GOT_ERR_HISTEDIT_CMD,
5706 		    "last commit in histedit script cannot be folded");
5707 
5708 	return NULL;
5709 }
5710 
5711 static const struct got_error *
5712 histedit_run_editor(struct got_histedit_list *histedit_cmds,
5713     const char *path, struct got_object_id_queue *commits,
5714     struct got_repository *repo)
5715 {
5716 	const struct got_error *err = NULL;
5717 	char *editor;
5718 	FILE *f = NULL;
5719 
5720 	err = get_editor(&editor);
5721 	if (err)
5722 		return err;
5723 
5724 	if (spawn_editor(editor, path) == -1) {
5725 		err = got_error_from_errno("failed spawning editor");
5726 		goto done;
5727 	}
5728 
5729 	f = fopen(path, "r");
5730 	if (f == NULL) {
5731 		err = got_error_from_errno("fopen");
5732 		goto done;
5733 	}
5734 	err = histedit_parse_list(histedit_cmds, f, repo);
5735 	if (err)
5736 		goto done;
5737 
5738 	err = histedit_check_script(histedit_cmds, commits, repo);
5739 done:
5740 	if (f && fclose(f) != 0 && err == NULL)
5741 		err = got_error_from_errno("fclose");
5742 	free(editor);
5743 	return err;
5744 }
5745 
5746 static const struct got_error *
5747 histedit_edit_list_retry(struct got_histedit_list *, const struct got_error *,
5748     struct got_object_id_queue *, const char *, struct got_repository *);
5749 
5750 static const struct got_error *
5751 histedit_edit_script(struct got_histedit_list *histedit_cmds,
5752     struct got_object_id_queue *commits, struct got_repository *repo)
5753 {
5754 	const struct got_error *err;
5755 	FILE *f = NULL;
5756 	char *path = NULL;
5757 
5758 	err = got_opentemp_named(&path, &f, "got-histedit");
5759 	if (err)
5760 		return err;
5761 
5762 	err = write_cmd_list(f);
5763 	if (err)
5764 		goto done;
5765 
5766 	err = histedit_write_commit_list(commits, f, repo);
5767 	if (err)
5768 		goto done;
5769 
5770 	if (fclose(f) != 0) {
5771 		err = got_error_from_errno("fclose");
5772 		goto done;
5773 	}
5774 	f = NULL;
5775 
5776 	err = histedit_run_editor(histedit_cmds, path, commits, repo);
5777 	if (err) {
5778 		if (err->code != GOT_ERR_HISTEDIT_SYNTAX &&
5779 		    err->code != GOT_ERR_HISTEDIT_CMD)
5780 			goto done;
5781 		err = histedit_edit_list_retry(histedit_cmds, err,
5782 		    commits, path, repo);
5783 	}
5784 done:
5785 	if (f && fclose(f) != 0 && err == NULL)
5786 		err = got_error_from_errno("fclose");
5787 	if (path && unlink(path) != 0 && err == NULL)
5788 		err = got_error_from_errno2("unlink", path);
5789 	free(path);
5790 	return err;
5791 }
5792 
5793 static const struct got_error *
5794 histedit_save_list(struct got_histedit_list *histedit_cmds,
5795     struct got_worktree *worktree, struct got_repository *repo)
5796 {
5797 	const struct got_error *err = NULL;
5798 	char *path = NULL;
5799 	FILE *f = NULL;
5800 	struct got_histedit_list_entry *hle;
5801 	struct got_commit_object *commit = NULL;
5802 
5803 	err = got_worktree_get_histedit_script_path(&path, worktree);
5804 	if (err)
5805 		return err;
5806 
5807 	f = fopen(path, "w");
5808 	if (f == NULL) {
5809 		err = got_error_from_errno2("fopen", path);
5810 		goto done;
5811 	}
5812 	TAILQ_FOREACH(hle, histedit_cmds, entry) {
5813 		err = histedit_write_commit(hle->commit_id, hle->cmd->name, f,
5814 		    repo);
5815 		if (err)
5816 			break;
5817 
5818 		if (hle->logmsg) {
5819 			int n = fprintf(f, "%c %s\n",
5820 			    GOT_HISTEDIT_MESG, hle->logmsg);
5821 			if (n < 0) {
5822 				err = got_ferror(f, GOT_ERR_IO);
5823 				break;
5824 			}
5825 		}
5826 	}
5827 done:
5828 	if (f && fclose(f) != 0 && err == NULL)
5829 		err = got_error_from_errno("fclose");
5830 	free(path);
5831 	if (commit)
5832 		got_object_commit_close(commit);
5833 	return err;
5834 }
5835 
5836 void
5837 histedit_free_list(struct got_histedit_list *histedit_cmds)
5838 {
5839 	struct got_histedit_list_entry *hle;
5840 
5841 	while ((hle = TAILQ_FIRST(histedit_cmds))) {
5842 		TAILQ_REMOVE(histedit_cmds, hle, entry);
5843 		free(hle);
5844 	}
5845 }
5846 
5847 static const struct got_error *
5848 histedit_load_list(struct got_histedit_list *histedit_cmds,
5849     const char *path, struct got_repository *repo)
5850 {
5851 	const struct got_error *err = NULL;
5852 	FILE *f = NULL;
5853 
5854 	f = fopen(path, "r");
5855 	if (f == NULL) {
5856 		err = got_error_from_errno2("fopen", path);
5857 		goto done;
5858 	}
5859 
5860 	err = histedit_parse_list(histedit_cmds, f, repo);
5861 done:
5862 	if (f && fclose(f) != 0 && err == NULL)
5863 		err = got_error_from_errno("fclose");
5864 	return err;
5865 }
5866 
5867 static const struct got_error *
5868 histedit_edit_list_retry(struct got_histedit_list *histedit_cmds,
5869     const struct got_error *edit_err, struct got_object_id_queue *commits,
5870     const char *path, struct got_repository *repo)
5871 {
5872 	const struct got_error *err = NULL, *prev_err = edit_err;
5873 	int resp = ' ';
5874 
5875 	while (resp != 'c' && resp != 'r' && resp != 'a') {
5876 		printf("%s: %s\n(c)ontinue editing, (r)estart editing, "
5877 		    "or (a)bort: ", getprogname(), prev_err->msg);
5878 		resp = getchar();
5879 		if (resp == '\n')
5880 			resp = getchar();
5881 		if (resp == 'c') {
5882 			histedit_free_list(histedit_cmds);
5883 			err = histedit_run_editor(histedit_cmds, path, commits,
5884 			    repo);
5885 			if (err) {
5886 				if (err->code != GOT_ERR_HISTEDIT_SYNTAX &&
5887 				    err->code != GOT_ERR_HISTEDIT_CMD)
5888 					break;
5889 				prev_err = err;
5890 				resp = ' ';
5891 				continue;
5892 			}
5893 			break;
5894 		} else if (resp == 'r') {
5895 			histedit_free_list(histedit_cmds);
5896 			err = histedit_edit_script(histedit_cmds,
5897 			    commits, repo);
5898 			if (err) {
5899 				if (err->code != GOT_ERR_HISTEDIT_SYNTAX &&
5900 				    err->code != GOT_ERR_HISTEDIT_CMD)
5901 					break;
5902 				prev_err = err;
5903 				resp = ' ';
5904 				continue;
5905 			}
5906 			break;
5907 		} else if (resp == 'a') {
5908 			err = got_error(GOT_ERR_HISTEDIT_CANCEL);
5909 			break;
5910 		} else
5911 			printf("invalid response '%c'\n", resp);
5912 	}
5913 
5914 	return err;
5915 }
5916 
5917 static const struct got_error *
5918 histedit_complete(struct got_worktree *worktree,
5919     struct got_fileindex *fileindex, struct got_reference *tmp_branch,
5920     struct got_reference *branch, struct got_repository *repo)
5921 {
5922 	printf("Switching work tree to %s\n",
5923 	    got_ref_get_symref_target(branch));
5924 	return got_worktree_histedit_complete(worktree, fileindex, tmp_branch,
5925 	    branch, repo);
5926 }
5927 
5928 static const struct got_error *
5929 show_histedit_progress(struct got_commit_object *commit,
5930     struct got_histedit_list_entry *hle, struct got_object_id *new_id)
5931 {
5932 	const struct got_error *err;
5933 	char *old_id_str = NULL, *new_id_str = NULL, *logmsg = NULL;
5934 
5935 	err = got_object_id_str(&old_id_str, hle->commit_id);
5936 	if (err)
5937 		goto done;
5938 
5939 	if (new_id) {
5940 		err = got_object_id_str(&new_id_str, new_id);
5941 		if (err)
5942 			goto done;
5943 	}
5944 
5945 	old_id_str[12] = '\0';
5946 	if (new_id_str)
5947 		new_id_str[12] = '\0';
5948 
5949 	if (hle->logmsg) {
5950 		logmsg = strdup(hle->logmsg);
5951 		if (logmsg == NULL) {
5952 			err = got_error_from_errno("strdup");
5953 			goto done;
5954 		}
5955 		trim_logmsg(logmsg, 42);
5956 	} else {
5957 		err = get_short_logmsg(&logmsg, 42, commit);
5958 		if (err)
5959 			goto done;
5960 	}
5961 
5962 	switch (hle->cmd->code) {
5963 	case GOT_HISTEDIT_PICK:
5964 	case GOT_HISTEDIT_EDIT:
5965 		printf("%s -> %s: %s\n", old_id_str,
5966 		    new_id_str ? new_id_str : "no-op change", logmsg);
5967 		break;
5968 	case GOT_HISTEDIT_DROP:
5969 	case GOT_HISTEDIT_FOLD:
5970 		printf("%s ->  %s commit: %s\n", old_id_str, hle->cmd->name,
5971 		    logmsg);
5972 		break;
5973 	default:
5974 		break;
5975 	}
5976 
5977 done:
5978 	free(old_id_str);
5979 	free(new_id_str);
5980 	return err;
5981 }
5982 
5983 static const struct got_error *
5984 histedit_commit(struct got_pathlist_head *merged_paths,
5985     struct got_worktree *worktree, struct got_fileindex *fileindex,
5986     struct got_reference *tmp_branch, struct got_histedit_list_entry *hle,
5987     struct got_repository *repo)
5988 {
5989 	const struct got_error *err;
5990 	struct got_commit_object *commit;
5991 	struct got_object_id *new_commit_id;
5992 
5993 	if ((hle->cmd->code == GOT_HISTEDIT_EDIT || get_folded_commits(hle))
5994 	    && hle->logmsg == NULL) {
5995 		err = histedit_edit_logmsg(hle, repo);
5996 		if (err)
5997 			return err;
5998 	}
5999 
6000 	err = got_object_open_as_commit(&commit, repo, hle->commit_id);
6001 	if (err)
6002 		return err;
6003 
6004 	err = got_worktree_histedit_commit(&new_commit_id, merged_paths,
6005 	    worktree, fileindex, tmp_branch, commit, hle->commit_id,
6006 	    hle->logmsg, repo);
6007 	if (err) {
6008 		if (err->code != GOT_ERR_COMMIT_NO_CHANGES)
6009 			goto done;
6010 		err = show_histedit_progress(commit, hle, NULL);
6011 	} else {
6012 		err = show_histedit_progress(commit, hle, new_commit_id);
6013 		free(new_commit_id);
6014 	}
6015 done:
6016 	got_object_commit_close(commit);
6017 	return err;
6018 }
6019 
6020 static const struct got_error *
6021 histedit_skip_commit(struct got_histedit_list_entry *hle,
6022     struct got_worktree *worktree, struct got_repository *repo)
6023 {
6024 	const struct got_error *error;
6025 	struct got_commit_object *commit;
6026 
6027 	error = got_worktree_histedit_skip_commit(worktree, hle->commit_id,
6028 	    repo);
6029 	if (error)
6030 		return error;
6031 
6032 	error = got_object_open_as_commit(&commit, repo, hle->commit_id);
6033 	if (error)
6034 		return error;
6035 
6036 	error = show_histedit_progress(commit, hle, NULL);
6037 	got_object_commit_close(commit);
6038 	return error;
6039 }
6040 
6041 static const struct got_error *
6042 cmd_histedit(int argc, char *argv[])
6043 {
6044 	const struct got_error *error = NULL;
6045 	struct got_worktree *worktree = NULL;
6046 	struct got_fileindex *fileindex = NULL;
6047 	struct got_repository *repo = NULL;
6048 	char *cwd = NULL;
6049 	struct got_reference *branch = NULL;
6050 	struct got_reference *tmp_branch = NULL;
6051 	struct got_object_id *resume_commit_id = NULL;
6052 	struct got_object_id *base_commit_id = NULL;
6053 	struct got_object_id *head_commit_id = NULL;
6054 	struct got_commit_object *commit = NULL;
6055 	int ch, rebase_in_progress = 0, did_something;
6056 	int edit_in_progress = 0, abort_edit = 0, continue_edit = 0;
6057 	const char *edit_script_path = NULL;
6058 	unsigned char rebase_status = GOT_STATUS_NO_CHANGE;
6059 	struct got_object_id_queue commits;
6060 	struct got_pathlist_head merged_paths;
6061 	const struct got_object_id_queue *parent_ids;
6062 	struct got_object_qid *pid;
6063 	struct got_histedit_list histedit_cmds;
6064 	struct got_histedit_list_entry *hle;
6065 
6066 	SIMPLEQ_INIT(&commits);
6067 	TAILQ_INIT(&histedit_cmds);
6068 	TAILQ_INIT(&merged_paths);
6069 
6070 	while ((ch = getopt(argc, argv, "acF:")) != -1) {
6071 		switch (ch) {
6072 		case 'a':
6073 			abort_edit = 1;
6074 			break;
6075 		case 'c':
6076 			continue_edit = 1;
6077 			break;
6078 		case 'F':
6079 			edit_script_path = optarg;
6080 			break;
6081 		default:
6082 			usage_histedit();
6083 			/* NOTREACHED */
6084 		}
6085 	}
6086 
6087 	argc -= optind;
6088 	argv += optind;
6089 
6090 #ifndef PROFILE
6091 	if (pledge("stdio rpath wpath cpath fattr flock proc exec sendfd "
6092 	    "unveil", NULL) == -1)
6093 		err(1, "pledge");
6094 #endif
6095 	if (abort_edit && continue_edit)
6096 		usage_histedit();
6097 	if (argc != 0)
6098 		usage_histedit();
6099 
6100 	/*
6101 	 * This command cannot apply unveil(2) in all cases because the
6102 	 * user may choose to run an editor to edit the histedit script
6103 	 * and to edit individual commit log messages.
6104 	 * unveil(2) traverses exec(2); if an editor is used we have to
6105 	 * apply unveil after edit script and log messages have been written.
6106 	 * XXX TODO: Make use of unveil(2) where possible.
6107 	 */
6108 
6109 	cwd = getcwd(NULL, 0);
6110 	if (cwd == NULL) {
6111 		error = got_error_from_errno("getcwd");
6112 		goto done;
6113 	}
6114 	error = got_worktree_open(&worktree, cwd);
6115 	if (error)
6116 		goto done;
6117 
6118 	error = got_repo_open(&repo, got_worktree_get_repo_path(worktree),
6119 	    NULL);
6120 	if (error != NULL)
6121 		goto done;
6122 
6123 	error = got_worktree_rebase_in_progress(&rebase_in_progress, worktree);
6124 	if (error)
6125 		goto done;
6126 	if (rebase_in_progress) {
6127 		error = got_error(GOT_ERR_REBASING);
6128 		goto done;
6129 	}
6130 
6131 	error = got_worktree_histedit_in_progress(&edit_in_progress, worktree);
6132 	if (error)
6133 		goto done;
6134 
6135 	if (edit_in_progress && abort_edit) {
6136 		error = got_worktree_histedit_continue(&resume_commit_id,
6137 		    &tmp_branch, &branch, &base_commit_id, &fileindex,
6138 		    worktree, repo);
6139 		if (error)
6140 			goto done;
6141 		printf("Switching work tree to %s\n",
6142 		    got_ref_get_symref_target(branch));
6143 		error = got_worktree_histedit_abort(worktree, fileindex, repo,
6144 		    branch, base_commit_id, update_progress, &did_something);
6145 		if (error)
6146 			goto done;
6147 		printf("Histedit of %s aborted\n",
6148 		    got_ref_get_symref_target(branch));
6149 		goto done; /* nothing else to do */
6150 	} else if (abort_edit) {
6151 		error = got_error(GOT_ERR_NOT_HISTEDIT);
6152 		goto done;
6153 	}
6154 
6155 	if (continue_edit) {
6156 		char *path;
6157 
6158 		if (!edit_in_progress) {
6159 			error = got_error(GOT_ERR_NOT_HISTEDIT);
6160 			goto done;
6161 		}
6162 
6163 		error = got_worktree_get_histedit_script_path(&path, worktree);
6164 		if (error)
6165 			goto done;
6166 
6167 		error = histedit_load_list(&histedit_cmds, path, repo);
6168 		free(path);
6169 		if (error)
6170 			goto done;
6171 
6172 		error = got_worktree_histedit_continue(&resume_commit_id,
6173 		    &tmp_branch, &branch, &base_commit_id, &fileindex,
6174 		    worktree, repo);
6175 		if (error)
6176 			goto done;
6177 
6178 		error = got_ref_resolve(&head_commit_id, repo, branch);
6179 		if (error)
6180 			goto done;
6181 
6182 		error = got_object_open_as_commit(&commit, repo,
6183 		    head_commit_id);
6184 		if (error)
6185 			goto done;
6186 		parent_ids = got_object_commit_get_parent_ids(commit);
6187 		pid = SIMPLEQ_FIRST(parent_ids);
6188 		if (pid == NULL) {
6189 			error = got_error(GOT_ERR_EMPTY_HISTEDIT);
6190 			goto done;
6191 		}
6192 		error = collect_commits(&commits, head_commit_id, pid->id,
6193 		    base_commit_id, got_worktree_get_path_prefix(worktree),
6194 		    GOT_ERR_HISTEDIT_PATH, repo);
6195 		got_object_commit_close(commit);
6196 		commit = NULL;
6197 		if (error)
6198 			goto done;
6199 	} else {
6200 		if (edit_in_progress) {
6201 			error = got_error(GOT_ERR_HISTEDIT_BUSY);
6202 			goto done;
6203 		}
6204 
6205 		error = got_ref_open(&branch, repo,
6206 		    got_worktree_get_head_ref_name(worktree), 0);
6207 		if (error != NULL)
6208 			goto done;
6209 
6210 		if (strncmp(got_ref_get_name(branch), "refs/heads/", 11) != 0) {
6211 			error = got_error_msg(GOT_ERR_COMMIT_BRANCH,
6212 			    "will not edit commit history of a branch outside "
6213 			    "the \"refs/heads/\" reference namespace");
6214 			goto done;
6215 		}
6216 
6217 		error = got_ref_resolve(&head_commit_id, repo, branch);
6218 		got_ref_close(branch);
6219 		branch = NULL;
6220 		if (error)
6221 			goto done;
6222 
6223 		error = got_object_open_as_commit(&commit, repo,
6224 		    head_commit_id);
6225 		if (error)
6226 			goto done;
6227 		parent_ids = got_object_commit_get_parent_ids(commit);
6228 		pid = SIMPLEQ_FIRST(parent_ids);
6229 		if (pid == NULL) {
6230 			error = got_error(GOT_ERR_EMPTY_HISTEDIT);
6231 			goto done;
6232 		}
6233 		error = collect_commits(&commits, head_commit_id, pid->id,
6234 		    got_worktree_get_base_commit_id(worktree),
6235 		    got_worktree_get_path_prefix(worktree),
6236 		    GOT_ERR_HISTEDIT_PATH, repo);
6237 		got_object_commit_close(commit);
6238 		commit = NULL;
6239 		if (error)
6240 			goto done;
6241 
6242 		error = got_worktree_histedit_prepare(&tmp_branch, &branch,
6243 		    &base_commit_id, &fileindex, worktree, repo);
6244 		if (error)
6245 			goto done;
6246 
6247 		if (edit_script_path) {
6248 			error = histedit_load_list(&histedit_cmds,
6249 			    edit_script_path, repo);
6250 			if (error) {
6251 				got_worktree_histedit_abort(worktree, fileindex,
6252 				    repo, branch, base_commit_id,
6253 				    update_progress, &did_something);
6254 				goto done;
6255 			}
6256 		} else {
6257 			error = histedit_edit_script(&histedit_cmds, &commits,
6258 			    repo);
6259 			if (error) {
6260 				got_worktree_histedit_abort(worktree, fileindex,
6261 				    repo, branch, base_commit_id,
6262 				    update_progress, &did_something);
6263 				goto done;
6264 			}
6265 
6266 		}
6267 
6268 		error = histedit_save_list(&histedit_cmds, worktree,
6269 		    repo);
6270 		if (error) {
6271 			got_worktree_histedit_abort(worktree, fileindex,
6272 			    repo, branch, base_commit_id,
6273 			    update_progress, &did_something);
6274 			goto done;
6275 		}
6276 
6277 	}
6278 
6279 	error = histedit_check_script(&histedit_cmds, &commits, repo);
6280 	if (error)
6281 		goto done;
6282 
6283 	TAILQ_FOREACH(hle, &histedit_cmds, entry) {
6284 		if (resume_commit_id) {
6285 			if (got_object_id_cmp(hle->commit_id,
6286 			    resume_commit_id) != 0)
6287 				continue;
6288 
6289 			resume_commit_id = NULL;
6290 			if (hle->cmd->code == GOT_HISTEDIT_DROP ||
6291 			    hle->cmd->code == GOT_HISTEDIT_FOLD) {
6292 				error = histedit_skip_commit(hle, worktree,
6293 				   repo);
6294 			} else {
6295 				error = histedit_commit(NULL, worktree,
6296 				    fileindex, tmp_branch, hle, repo);
6297 			}
6298 			if (error)
6299 				goto done;
6300 			continue;
6301 		}
6302 
6303 		if (hle->cmd->code == GOT_HISTEDIT_DROP) {
6304 			error = histedit_skip_commit(hle, worktree, repo);
6305 			if (error)
6306 				goto done;
6307 			continue;
6308 		}
6309 
6310 		error = got_object_open_as_commit(&commit, repo,
6311 		    hle->commit_id);
6312 		if (error)
6313 			goto done;
6314 		parent_ids = got_object_commit_get_parent_ids(commit);
6315 		pid = SIMPLEQ_FIRST(parent_ids);
6316 
6317 		error = got_worktree_histedit_merge_files(&merged_paths,
6318 		    worktree, fileindex, pid->id, hle->commit_id, repo,
6319 		    rebase_progress, &rebase_status, check_cancelled, NULL);
6320 		if (error)
6321 			goto done;
6322 		got_object_commit_close(commit);
6323 		commit = NULL;
6324 
6325 		if (rebase_status == GOT_STATUS_CONFLICT) {
6326 			got_worktree_rebase_pathlist_free(&merged_paths);
6327 			break;
6328 		}
6329 
6330 		if (hle->cmd->code == GOT_HISTEDIT_EDIT) {
6331 			char *id_str;
6332 			error = got_object_id_str(&id_str, hle->commit_id);
6333 			if (error)
6334 				goto done;
6335 			printf("Stopping histedit for amending commit %s\n",
6336 			    id_str);
6337 			free(id_str);
6338 			got_worktree_rebase_pathlist_free(&merged_paths);
6339 			error = got_worktree_histedit_postpone(worktree,
6340 			    fileindex);
6341 			goto done;
6342 		}
6343 
6344 		if (hle->cmd->code == GOT_HISTEDIT_FOLD) {
6345 			error = histedit_skip_commit(hle, worktree, repo);
6346 			if (error)
6347 				goto done;
6348 			continue;
6349 		}
6350 
6351 		error = histedit_commit(&merged_paths, worktree, fileindex,
6352 		    tmp_branch, hle, repo);
6353 		got_worktree_rebase_pathlist_free(&merged_paths);
6354 		if (error)
6355 			goto done;
6356 	}
6357 
6358 	if (rebase_status == GOT_STATUS_CONFLICT) {
6359 		error = got_worktree_histedit_postpone(worktree, fileindex);
6360 		if (error)
6361 			goto done;
6362 		error = got_error_msg(GOT_ERR_CONFLICTS,
6363 		    "conflicts must be resolved before rebasing can continue");
6364 	} else
6365 		error = histedit_complete(worktree, fileindex, tmp_branch,
6366 		    branch, repo);
6367 done:
6368 	got_object_id_queue_free(&commits);
6369 	histedit_free_list(&histedit_cmds);
6370 	free(head_commit_id);
6371 	free(base_commit_id);
6372 	free(resume_commit_id);
6373 	if (commit)
6374 		got_object_commit_close(commit);
6375 	if (branch)
6376 		got_ref_close(branch);
6377 	if (tmp_branch)
6378 		got_ref_close(tmp_branch);
6379 	if (worktree)
6380 		got_worktree_close(worktree);
6381 	if (repo)
6382 		got_repo_close(repo);
6383 	return error;
6384 }
6385 
6386 __dead static void
6387 usage_stage(void)
6388 {
6389 	fprintf(stderr, "usage: %s stage [-l] | [-p] [-F response-script] "
6390 	    "[file-path ...]\n",
6391 	    getprogname());
6392 	exit(1);
6393 }
6394 
6395 static const struct got_error *
6396 print_stage(void *arg, unsigned char status, unsigned char staged_status,
6397     const char *path, struct got_object_id *blob_id,
6398     struct got_object_id *staged_blob_id, struct got_object_id *commit_id)
6399 {
6400 	const struct got_error *err = NULL;
6401 	char *id_str = NULL;
6402 
6403 	if (staged_status != GOT_STATUS_ADD &&
6404 	    staged_status != GOT_STATUS_MODIFY &&
6405 	    staged_status != GOT_STATUS_DELETE)
6406 		return NULL;
6407 
6408 	if (staged_status == GOT_STATUS_ADD ||
6409 	    staged_status == GOT_STATUS_MODIFY)
6410 		err = got_object_id_str(&id_str, staged_blob_id);
6411 	else
6412 		err = got_object_id_str(&id_str, blob_id);
6413 	if (err)
6414 		return err;
6415 
6416 	printf("%s %c %s\n", id_str, staged_status, path);
6417 	free(id_str);
6418 	return NULL;
6419 }
6420 
6421 static const struct got_error *
6422 cmd_stage(int argc, char *argv[])
6423 {
6424 	const struct got_error *error = NULL;
6425 	struct got_repository *repo = NULL;
6426 	struct got_worktree *worktree = NULL;
6427 	char *cwd = NULL;
6428 	struct got_pathlist_head paths;
6429 	struct got_pathlist_entry *pe;
6430 	int ch, list_stage = 0, pflag = 0;
6431 	FILE *patch_script_file = NULL;
6432 	const char *patch_script_path = NULL;
6433 	struct choose_patch_arg cpa;
6434 
6435 	TAILQ_INIT(&paths);
6436 
6437 	while ((ch = getopt(argc, argv, "lpF:")) != -1) {
6438 		switch (ch) {
6439 		case 'l':
6440 			list_stage = 1;
6441 			break;
6442 		case 'p':
6443 			pflag = 1;
6444 			break;
6445 		case 'F':
6446 			patch_script_path = optarg;
6447 			break;
6448 		default:
6449 			usage_stage();
6450 			/* NOTREACHED */
6451 		}
6452 	}
6453 
6454 	argc -= optind;
6455 	argv += optind;
6456 
6457 #ifndef PROFILE
6458 	if (pledge("stdio rpath wpath cpath fattr flock proc exec sendfd "
6459 	    "unveil", NULL) == -1)
6460 		err(1, "pledge");
6461 #endif
6462 	if (list_stage && (pflag || patch_script_path))
6463 		errx(1, "-l option cannot be used with other options");
6464 	if (patch_script_path && !pflag)
6465 		errx(1, "-F option can only be used together with -p option");
6466 
6467 	cwd = getcwd(NULL, 0);
6468 	if (cwd == NULL) {
6469 		error = got_error_from_errno("getcwd");
6470 		goto done;
6471 	}
6472 
6473 	error = got_worktree_open(&worktree, cwd);
6474 	if (error)
6475 		goto done;
6476 
6477 	error = got_repo_open(&repo, got_worktree_get_repo_path(worktree),
6478 	    NULL);
6479 	if (error != NULL)
6480 		goto done;
6481 
6482 	if (patch_script_path) {
6483 		patch_script_file = fopen(patch_script_path, "r");
6484 		if (patch_script_file == NULL) {
6485 			error = got_error_from_errno2("fopen",
6486 			    patch_script_path);
6487 			goto done;
6488 		}
6489 	}
6490 	error = apply_unveil(got_repo_get_path(repo), 0,
6491 	    got_worktree_get_root_path(worktree));
6492 	if (error)
6493 		goto done;
6494 
6495 	error = get_worktree_paths_from_argv(&paths, argc, argv, worktree);
6496 	if (error)
6497 		goto done;
6498 
6499 	if (list_stage)
6500 		error = got_worktree_status(worktree, &paths, repo,
6501 		    print_stage, NULL, check_cancelled, NULL);
6502 	else {
6503 		cpa.patch_script_file = patch_script_file;
6504 		cpa.action = "stage";
6505 		error = got_worktree_stage(worktree, &paths,
6506 		    pflag ? NULL : print_status, NULL,
6507 		    pflag ? choose_patch : NULL, &cpa, repo);
6508 	}
6509 done:
6510 	if (patch_script_file && fclose(patch_script_file) == EOF &&
6511 	    error == NULL)
6512 		error = got_error_from_errno2("fclose", patch_script_path);
6513 	if (repo)
6514 		got_repo_close(repo);
6515 	if (worktree)
6516 		got_worktree_close(worktree);
6517 	TAILQ_FOREACH(pe, &paths, entry)
6518 		free((char *)pe->path);
6519 	got_pathlist_free(&paths);
6520 	free(cwd);
6521 	return error;
6522 }
6523 
6524 __dead static void
6525 usage_unstage(void)
6526 {
6527 	fprintf(stderr, "usage: %s unstage [-p] [-F response-script] "
6528 	    "[file-path ...]\n",
6529 	    getprogname());
6530 	exit(1);
6531 }
6532 
6533 
6534 static const struct got_error *
6535 cmd_unstage(int argc, char *argv[])
6536 {
6537 	const struct got_error *error = NULL;
6538 	struct got_repository *repo = NULL;
6539 	struct got_worktree *worktree = NULL;
6540 	char *cwd = NULL;
6541 	struct got_pathlist_head paths;
6542 	struct got_pathlist_entry *pe;
6543 	int ch, did_something = 0, pflag = 0;
6544 	FILE *patch_script_file = NULL;
6545 	const char *patch_script_path = NULL;
6546 	struct choose_patch_arg cpa;
6547 
6548 	TAILQ_INIT(&paths);
6549 
6550 	while ((ch = getopt(argc, argv, "pF:")) != -1) {
6551 		switch (ch) {
6552 		case 'p':
6553 			pflag = 1;
6554 			break;
6555 		case 'F':
6556 			patch_script_path = optarg;
6557 			break;
6558 		default:
6559 			usage_unstage();
6560 			/* NOTREACHED */
6561 		}
6562 	}
6563 
6564 	argc -= optind;
6565 	argv += optind;
6566 
6567 #ifndef PROFILE
6568 	if (pledge("stdio rpath wpath cpath fattr flock proc exec sendfd "
6569 	    "unveil", NULL) == -1)
6570 		err(1, "pledge");
6571 #endif
6572 	if (patch_script_path && !pflag)
6573 		errx(1, "-F option can only be used together with -p option");
6574 
6575 	cwd = getcwd(NULL, 0);
6576 	if (cwd == NULL) {
6577 		error = got_error_from_errno("getcwd");
6578 		goto done;
6579 	}
6580 
6581 	error = got_worktree_open(&worktree, cwd);
6582 	if (error)
6583 		goto done;
6584 
6585 	error = got_repo_open(&repo, got_worktree_get_repo_path(worktree),
6586 	    NULL);
6587 	if (error != NULL)
6588 		goto done;
6589 
6590 	if (patch_script_path) {
6591 		patch_script_file = fopen(patch_script_path, "r");
6592 		if (patch_script_file == NULL) {
6593 			error = got_error_from_errno2("fopen",
6594 			    patch_script_path);
6595 			goto done;
6596 		}
6597 	}
6598 
6599 	error = apply_unveil(got_repo_get_path(repo), 0,
6600 	    got_worktree_get_root_path(worktree));
6601 	if (error)
6602 		goto done;
6603 
6604 	error = get_worktree_paths_from_argv(&paths, argc, argv, worktree);
6605 	if (error)
6606 		goto done;
6607 
6608 	cpa.patch_script_file = patch_script_file;
6609 	cpa.action = "unstage";
6610 	error = got_worktree_unstage(worktree, &paths, update_progress,
6611 	    &did_something, pflag ? choose_patch : NULL, &cpa, repo);
6612 done:
6613 	if (patch_script_file && fclose(patch_script_file) == EOF &&
6614 	    error == NULL)
6615 		error = got_error_from_errno2("fclose", patch_script_path);
6616 	if (repo)
6617 		got_repo_close(repo);
6618 	if (worktree)
6619 		got_worktree_close(worktree);
6620 	TAILQ_FOREACH(pe, &paths, entry)
6621 		free((char *)pe->path);
6622 	got_pathlist_free(&paths);
6623 	free(cwd);
6624 	return error;
6625 }
6626 
6627 __dead static void
6628 usage_cat(void)
6629 {
6630 	fprintf(stderr, "usage: %s cat [-r repository ] [ -c commit ] [ -P ] "
6631 	    "arg1 [arg2 ...]\n", getprogname());
6632 	exit(1);
6633 }
6634 
6635 static const struct got_error *
6636 cat_blob(struct got_object_id *id, struct got_repository *repo, FILE *outfile)
6637 {
6638 	const struct got_error *err;
6639 	struct got_blob_object *blob;
6640 
6641 	err = got_object_open_as_blob(&blob, repo, id, 8192);
6642 	if (err)
6643 		return err;
6644 
6645 	err = got_object_blob_dump_to_file(NULL, NULL, NULL, outfile, blob);
6646 	got_object_blob_close(blob);
6647 	return err;
6648 }
6649 
6650 static const struct got_error *
6651 cat_tree(struct got_object_id *id, struct got_repository *repo, FILE *outfile)
6652 {
6653 	const struct got_error *err;
6654 	struct got_tree_object *tree;
6655 	const struct got_tree_entries *entries;
6656 	struct got_tree_entry *te;
6657 
6658 	err = got_object_open_as_tree(&tree, repo, id);
6659 	if (err)
6660 		return err;
6661 
6662 	entries = got_object_tree_get_entries(tree);
6663 	te = SIMPLEQ_FIRST(&entries->head);
6664 	while (te) {
6665 		char *id_str;
6666 		if (sigint_received || sigpipe_received)
6667 			break;
6668 		err = got_object_id_str(&id_str, te->id);
6669 		if (err)
6670 			break;
6671 		fprintf(outfile, "%s %.7o %s\n", id_str, te->mode, te->name);
6672 		free(id_str);
6673 		te = SIMPLEQ_NEXT(te, entry);
6674 	}
6675 
6676 	got_object_tree_close(tree);
6677 	return err;
6678 }
6679 
6680 static const struct got_error *
6681 cat_commit(struct got_object_id *id, struct got_repository *repo, FILE *outfile)
6682 {
6683 	const struct got_error *err;
6684 	struct got_commit_object *commit;
6685 	const struct got_object_id_queue *parent_ids;
6686 	struct got_object_qid *pid;
6687 	char *id_str = NULL;
6688 	const char *logmsg = NULL;
6689 
6690 	err = got_object_open_as_commit(&commit, repo, id);
6691 	if (err)
6692 		return err;
6693 
6694 	err = got_object_id_str(&id_str, got_object_commit_get_tree_id(commit));
6695 	if (err)
6696 		goto done;
6697 
6698 	fprintf(outfile, "%s%s\n", GOT_COMMIT_LABEL_TREE, id_str);
6699 	parent_ids = got_object_commit_get_parent_ids(commit);
6700 	fprintf(outfile, "numparents %d\n",
6701 	    got_object_commit_get_nparents(commit));
6702 	SIMPLEQ_FOREACH(pid, parent_ids, entry) {
6703 		char *pid_str;
6704 		err = got_object_id_str(&pid_str, pid->id);
6705 		if (err)
6706 			goto done;
6707 		fprintf(outfile, "%s%s\n", GOT_COMMIT_LABEL_PARENT, pid_str);
6708 		free(pid_str);
6709 	}
6710 	fprintf(outfile, "%s%s %lld +0000\n", GOT_COMMIT_LABEL_AUTHOR,
6711 	    got_object_commit_get_author(commit),
6712 	    got_object_commit_get_author_time(commit));
6713 
6714 	fprintf(outfile, "%s%s %lld +0000\n", GOT_COMMIT_LABEL_COMMITTER,
6715 	    got_object_commit_get_author(commit),
6716 	    got_object_commit_get_committer_time(commit));
6717 
6718 	logmsg = got_object_commit_get_logmsg_raw(commit);
6719 	fprintf(outfile, "messagelen %zd\n", strlen(logmsg));
6720 	fprintf(outfile, "%s", logmsg);
6721 done:
6722 	free(id_str);
6723 	got_object_commit_close(commit);
6724 	return err;
6725 }
6726 
6727 static const struct got_error *
6728 cat_tag(struct got_object_id *id, struct got_repository *repo, FILE *outfile)
6729 {
6730 	const struct got_error *err;
6731 	struct got_tag_object *tag;
6732 	char *id_str = NULL;
6733 	const char *tagmsg = NULL;
6734 
6735 	err = got_object_open_as_tag(&tag, repo, id);
6736 	if (err)
6737 		return err;
6738 
6739 	err = got_object_id_str(&id_str, got_object_tag_get_object_id(tag));
6740 	if (err)
6741 		goto done;
6742 
6743 	fprintf(outfile, "%s%s\n", GOT_TAG_LABEL_OBJECT, id_str);
6744 
6745 	switch (got_object_tag_get_object_type(tag)) {
6746 	case GOT_OBJ_TYPE_BLOB:
6747 		fprintf(outfile, "%s%s\n", GOT_TAG_LABEL_TYPE,
6748 		    GOT_OBJ_LABEL_BLOB);
6749 		break;
6750 	case GOT_OBJ_TYPE_TREE:
6751 		fprintf(outfile, "%s%s\n", GOT_TAG_LABEL_TYPE,
6752 		    GOT_OBJ_LABEL_TREE);
6753 		break;
6754 	case GOT_OBJ_TYPE_COMMIT:
6755 		fprintf(outfile, "%s%s\n", GOT_TAG_LABEL_TYPE,
6756 		    GOT_OBJ_LABEL_COMMIT);
6757 		break;
6758 	case GOT_OBJ_TYPE_TAG:
6759 		fprintf(outfile, "%s%s\n", GOT_TAG_LABEL_TYPE,
6760 		    GOT_OBJ_LABEL_TAG);
6761 		break;
6762 	default:
6763 		break;
6764 	}
6765 
6766 	fprintf(outfile, "%s%s\n", GOT_TAG_LABEL_TAG,
6767 	    got_object_tag_get_name(tag));
6768 
6769 	fprintf(outfile, "%s%s %lld +0000\n", GOT_TAG_LABEL_TAGGER,
6770 	    got_object_tag_get_tagger(tag),
6771 	    got_object_tag_get_tagger_time(tag));
6772 
6773 	tagmsg = got_object_tag_get_message(tag);
6774 	fprintf(outfile, "messagelen %zd\n", strlen(tagmsg));
6775 	fprintf(outfile, "%s", tagmsg);
6776 done:
6777 	free(id_str);
6778 	got_object_tag_close(tag);
6779 	return err;
6780 }
6781 
6782 static const struct got_error *
6783 cmd_cat(int argc, char *argv[])
6784 {
6785 	const struct got_error *error;
6786 	struct got_repository *repo = NULL;
6787 	struct got_worktree *worktree = NULL;
6788 	char *cwd = NULL, *repo_path = NULL, *label = NULL;
6789 	const char *commit_id_str = NULL;
6790 	struct got_object_id *id = NULL, *commit_id = NULL;
6791 	int ch, obj_type, i, force_path = 0;
6792 
6793 #ifndef PROFILE
6794 	if (pledge("stdio rpath wpath cpath flock proc exec sendfd unveil",
6795 	    NULL) == -1)
6796 		err(1, "pledge");
6797 #endif
6798 
6799 	while ((ch = getopt(argc, argv, "c:r:P")) != -1) {
6800 		switch (ch) {
6801 		case 'c':
6802 			commit_id_str = optarg;
6803 			break;
6804 		case 'r':
6805 			repo_path = realpath(optarg, NULL);
6806 			if (repo_path == NULL)
6807 				err(1, "-r option");
6808 			got_path_strip_trailing_slashes(repo_path);
6809 			break;
6810 		case 'P':
6811 			force_path = 1;
6812 			break;
6813 		default:
6814 			usage_cat();
6815 			/* NOTREACHED */
6816 		}
6817 	}
6818 
6819 	argc -= optind;
6820 	argv += optind;
6821 
6822 	cwd = getcwd(NULL, 0);
6823 	if (cwd == NULL) {
6824 		error = got_error_from_errno("getcwd");
6825 		goto done;
6826 	}
6827 	error = got_worktree_open(&worktree, cwd);
6828 	if (error && error->code != GOT_ERR_NOT_WORKTREE)
6829 		goto done;
6830 	if (worktree) {
6831 		if (repo_path == NULL) {
6832 			repo_path = strdup(
6833 			    got_worktree_get_repo_path(worktree));
6834 			if (repo_path == NULL) {
6835 				error = got_error_from_errno("strdup");
6836 				goto done;
6837 			}
6838 		}
6839 	}
6840 
6841 	if (repo_path == NULL) {
6842 		repo_path = getcwd(NULL, 0);
6843 		if (repo_path == NULL)
6844 			return got_error_from_errno("getcwd");
6845 	}
6846 
6847 	error = got_repo_open(&repo, repo_path, NULL);
6848 	free(repo_path);
6849 	if (error != NULL)
6850 		goto done;
6851 
6852 	error = apply_unveil(got_repo_get_path(repo), 1, NULL);
6853 	if (error)
6854 		goto done;
6855 
6856 	if (commit_id_str == NULL)
6857 		commit_id_str = GOT_REF_HEAD;
6858 	error = resolve_commit_arg(&commit_id, commit_id_str, repo);
6859 	if (error)
6860 		goto done;
6861 
6862 	for (i = 0; i < argc; i++) {
6863 		if (force_path) {
6864 			error = got_object_id_by_path(&id, repo, commit_id,
6865 			    argv[i]);
6866 			if (error)
6867 				break;
6868 		} else {
6869 			error = match_object_id(&id, &label, argv[i],
6870 			    GOT_OBJ_TYPE_ANY, 0, repo);
6871 			if (error) {
6872 				if (error->code != GOT_ERR_BAD_OBJ_ID_STR &&
6873 				    error->code != GOT_ERR_NOT_REF)
6874 					break;
6875 				error = got_object_id_by_path(&id, repo,
6876 				    commit_id, argv[i]);
6877 				if (error)
6878 					break;
6879 			}
6880 		}
6881 
6882 		error = got_object_get_type(&obj_type, repo, id);
6883 		if (error)
6884 			break;
6885 
6886 		switch (obj_type) {
6887 		case GOT_OBJ_TYPE_BLOB:
6888 			error = cat_blob(id, repo, stdout);
6889 			break;
6890 		case GOT_OBJ_TYPE_TREE:
6891 			error = cat_tree(id, repo, stdout);
6892 			break;
6893 		case GOT_OBJ_TYPE_COMMIT:
6894 			error = cat_commit(id, repo, stdout);
6895 			break;
6896 		case GOT_OBJ_TYPE_TAG:
6897 			error = cat_tag(id, repo, stdout);
6898 			break;
6899 		default:
6900 			error = got_error(GOT_ERR_OBJ_TYPE);
6901 			break;
6902 		}
6903 		if (error)
6904 			break;
6905 		free(label);
6906 		label = NULL;
6907 		free(id);
6908 		id = NULL;
6909 	}
6910 
6911 done:
6912 	free(label);
6913 	free(id);
6914 	free(commit_id);
6915 	if (worktree)
6916 		got_worktree_close(worktree);
6917 	if (repo) {
6918 		const struct got_error *repo_error;
6919 		repo_error = got_repo_close(repo);
6920 		if (error == NULL)
6921 			error = repo_error;
6922 	}
6923 	return error;
6924 }