summaryrefslogtreecommitdiff
path: root/bin/gitano-update-hook.in
blob: 15da2a91326469f41f7a2ceb562e7964c0b05a57 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
-- @@SHEBANG
-- -*- Lua -*-
-- gitano-update-hook
--
-- Git (with) Augmented network operations -- Update hook handler
--
-- Copyright 2012 Daniel Silverstone <dsilvers@digital-scurf.org>
--
--

-- @@GITANO_LUA_PATH

local gitano = require "gitano"
local gall = require "gall"
local luxio = require "luxio"
local sio = require "luxio.simple"
local sp = require "luxio.subprocess"

-- @@GITANO_BIN_PATH
-- @@GITANO_SHARE_PATH
-- @@GITANO_PLUGIN_PATH

local refname, oldsha, newsha = ...

local start_log_level = gitano.log.get_level()
-- Clamp level at info until we have checked if the caller
-- is an admin or not
gitano.log.cap_level(gitano.log.level.INFO)
gitano.log.syslog.open()

local nullsha = ("0"):rep(40)

local repo_root = luxio.getenv("GITANO_ROOT")
local username  = luxio.getenv("GITANO_USER") or "gitano/anonymous"
local keytag    = luxio.getenv("GITANO_KEYTAG") or "unknown"
local project   = luxio.getenv("GITANO_PROJECT") or ""
local source    = luxio.getenv("GITANO_SOURCE") or "ssh"
local running   = luxio.getenv("GITANO_RUNNING")

-- Check whether we are called through gitano-auth
if not running then
   return 0
end

-- Now load the administration data
gitano.config.repo_path(repo_root)
local admin_repo = gall.repository.new((repo_root or "") .. "/gitano-admin.git")

if not admin_repo then
   gitano.log.fatal("Unable to locate administration repository.  Cannot continue");
end

local admin_head = admin_repo:get(admin_repo.HEAD)

if not admin_head then
   gitano.log.fatal("Unable to find the HEAD of the administration repository.  Cannot continue");
end

local config, msg = gitano.config.parse(admin_head)

if not config then
   gitano.log.critical("Unable to parse administration repository.")
   gitano.log.critical("  * " .. (msg or "No error?"))
   gitano.log.fatal("Cannot continue")
end

-- Now, are we an admin?
if config.groups["gitano-admin"].filtered_members[username] then
   -- Yep, so blithely reset logging level
   gitano.log.set_level(start_log_level)
end

if not config.global.silent then
   -- Not silent, bump to chatty level automatically
   gitano.log.bump_level(gitano.log.level.CHAT)
end

local repo, msg = gitano.repository.find(config, project)
if not repo then
   gitano.log.critical("Unable to locate repository.")
   gitano.log.critical("  * " .. (tostring(msg)))
   gitano.log.fatal("Cannot continue")
end
   
if repo.is_nascent then
   gitano.log.fatal("Repository " .. repo.name .. " is nascent")
end


-- Prepare an update operation

local context = {
   ["source"] = source,
   ["ref"] = refname,
   ["oldsha"] = oldsha,
   ["newsha"] = newsha,
   ["user"] = username,
}

-- Attempt to work out what's going on regarding the update.

local action = "**UNKNOWN**"

if oldsha == nullsha and newsha ~= nullsha then
   context["operation"] = "createref"
   action = "creation"
elseif oldsha ~= nullsha and newsha == nullsha then
   context["operation"] = "deleteref"
   action = "deletion"
else
   local base, msg = repo.git:merge_base(oldsha, newsha)
   if not base then
      gitano.log.fatal(msg)
   elseif (base == true) or ((base) and (base == newsha)) then
      context["operation"] = "updaterefnonff"
      action = "non-ff update"
   else
      context["operation"] = "updaterefff"
      action = "update"
   end
end

-- Populate the trees

local function do_expensive_populate_context(context)

   local oldtree, newtree
   if oldsha == nullsha or newsha == nullsha then
      repo.git:force_empty_tree()
   end

   if oldsha == nullsha then
      oldtree = repo.git:get(gall.tree.empty_sha).content
   else
      local thing = repo.git:get(oldsha)
      if thing.type == "tag" then
	 thing = thing.content.object
      end
      if thing.type == "commit" then
	 oldtree = thing.content.tree.content
      else
	 oldtree = repo.git:get(gall.tree.empty_sha).content
	 gitano.log.warn("Odd, old object", oldsha, "is not a commit or tag")
      end
   end

   if newsha == nullsha then
      newtree = repo.git:get(gall.tree.empty_sha).content
   else
      local thing = repo.git:get(newsha)
      if thing.type == "tag" then
	 thing = thing.content.object
      end
      if thing.type == "commit" then
	 newtree = thing.content.tree.content
      else
	 newtree = repo.git:get(gall.tree.empty_sha).content
	 gitano.log.warn("Odd, new object", oldsha, "is not a commit or tag")
      end
   end

   -- First, populate gitano/starttree and gitano/targettree

   local function set_list(tag, entries)
      -- Make the set for direct string tests
      for i = 1, #entries do
	 entries[entries[i]] = true
      end
      context[tag] = entries
   end

   local function populate_tree(tag, tree)
      local flat_tree = gall.tree.flatten(tree)
      local names = {}
      for fn in pairs(flat_tree) do
	 names[#names+1] = fn
      end
      set_list(tag, names)
   end

   populate_tree("start_tree", oldtree)
   populate_tree("target_tree", newtree)

   -- Now gitano/treedelta
   local delta = oldtree:diff_to(newtree)
   local targets, added, deleted, modified, renamed, renamedto =
      {}, {}, {}, {}, {}, {}

   for i = 1, #delta do
      local details = delta[i]
      local fname = details.filename
      targets[#targets+1] = fname
      if details.action == "A" then
	 added[#added+1] = fname
      end
      if details.action == "C" and details.score == "100" then
	 added[#added+1] = fname
      end
      if details.action == "D" then
	 deleted[#deleted+1] = fname
      end
      if details.action == "M" or
	 ((details.action == "R" or details.action == "C") and
	  (tonumber(details.score) < 100)) then
	 modified[#modified+1] = fname
      end
      if details.action == "R" then
	 renamed[#renamed+1] = details.src_name
	 renamedto[#renamedto+1] = fname
      end

      context["treediff/kind/" .. fname] = details.endkind
      context["treediff/oldkind/" .. fname] = details.startkind
   end

   set_list("treediff/targets", targets)
   set_list("treediff/added", added)
   set_list("treediff/deleted", deleted)
   set_list("treediff/modified", modified)
   set_list("treediff/renamed", renamed)
   set_list("treediff/renamedto", renamedto)
end

local function defer_generation(key)
   context[key] = function(ctx)
		     -- This populates quite a bit, so we do this
		     -- test in case someone else got hold of this
		     -- beforehand and manages to cross the streams
		     if type(ctx[key]) == "function" then
			gitano.log.chat("Treedeltas generating because of:",
					key, " Please hold.")
			do_expensive_populate_context(ctx)
			gitano.log.chat("Treedeltas built, continuing")
		     end
		     -- And return what we were meant to be
		     return ctx[key]
		  end
end

defer_generation "start_tree"
defer_generation "target_tree"
defer_generation "treediff/targets"
defer_generation "treediff/added"
defer_generation "treediff/deleted"
defer_generation "treediff/modified"
defer_generation "treediff/renamed"
defer_generation "treediff/renamedto"

-- Run the ruleset given the contextet

local action, reason = repo:run_lace(context)

if not action then
   gitano.log.crit(reason)
   gitano.log.fatal("Ruleset did not complete cleanly")
end

if action ~= "allow" then
   gitano.log.critical("Rules refused update:", reason)
   gitano.log.fatal("Ruleset denied action.  Sorry")
end

-- Now perform any special hook checks (e.g. for the admin hook)
gitano.log.ddebug("Ruleset allowed the action, let's run builtin action")

local allow, msg = gitano.actions.update_actions(conf, repo, context)
if not allow then
   gitano.log.critical("Builtin actions said:", msg)
   gitano.log.fatal("Actions denied action.  Sorry")
end

if repo:uses_hook("update") then
   gitano.log.debug("Configuring for update hook")
   gitano.actions.set_supple_globals("update")

   local msg = "Running repository update hook"
   gitano.log.info(msg)
   gitano.syslog.info(msg)

   local info = {
      username = username,
      keytag = keytag,
      source = source,
      realname = (config.users[username] or {}).real_name or "",
      email = (config.users[username] or {}).email_address or "",
   }
   local ok, msg = gitano.supple.run_hook("update", repo, info,
					  refname, oldsha, newsha)
   if not ok then
      gitano.log.fatal(msg or "No reason given to refuse action.")
   end
   gitano.log.info("Finished")
end

gitano.log.info("Allowing ref update of", 
		refname, "from", oldsha, "to", newsha)

gitano.log.syslog.info("Allowing ref", action, "of", refname,
		       "( was", oldsha, "is now", newsha, ")")

gitano.log.syslog.close()

return 0