refactor(server): replace custom remote clients with macro-based implementation

- Replaced manual remote client functions with remote_client! macro for archive, blame, branch, commit, and diff services
- Simplified remote client creation logic using declarative macro approach
- Maintained same functionality while reducing code duplication across services

security(bare): enhance path traversal protection with comprehensive validation

- Added early relative_path validation to prevent path traversal attacks
- Implemented unified path validation to avoid TOCTOU race conditions
- Enhanced canonicalization checks for both existing and non-existent paths
- Added detailed logging for path traversal detection attempts

feat(cache): migrate from CLruCache to Moka with TTL and invalidation support

- Replaced clru dependency with moka for improved caching capabilities
- Added 300-second time-to-live for cache entries
- Implemented repository-specific cache invalidation mechanism
- Enhanced cache operations with thread-safe async support

refactor(commit): improve security validation for commit operations

- Added ref name validation to prevent command injection in cherry_pick_commit
- Implemented revision validation for commit selectors
- Added comprehensive input validation for create_commit parameters
- Enhanced file path validation to prevent traversal

diff/get_commit_diff.rs

@@ -1,14 +1,11 @@
 use crate::bare::GitBare;
 use crate::error::{GitError, GitResult};
 use crate::pb::{GetCommitDiffRequest, GetDiffRequest, GetDiffResponse};
+use crate::resolve_revision;
 
 impl GitBare {
     pub fn get_commit_diff(&self, request: GetCommitDiffRequest) -> GitResult<GetDiffResponse> {
-        let commit = match request.commit.and_then(|s| s.selector) {
-            Some(crate::pb::object_selector::Selector::Oid(oid)) => oid.hex,
-            Some(crate::pb::object_selector::Selector::Revision(name)) => name.revision,
-            None => "HEAD".into(),
-        };
+        let commit = resolve_revision!(request.commit);
         let base = self.first_parent_or_empty_tree(&commit)?;
         self.get_diff(GetDiffRequest {
             repository: request.repository,

diff/get_diff.rs

@@ -19,16 +19,25 @@ struct RawDiffEntry {
     similarity: f64,
 }
 
+/// Type alias for diff raw output: (entries, numstat_map)
+type DiffRawOutput = (Vec<RawDiffEntry>, HashMap<String, (u32, u32, bool)>);
+
 impl GitBare {
     pub fn get_diff(&self, request: GetDiffRequest) -> GitResult<GetDiffResponse> {
         let base = match request.base.and_then(|s| s.selector) {
             Some(crate::pb::object_selector::Selector::Oid(oid)) => oid.hex.clone(),
-            Some(crate::pb::object_selector::Selector::Revision(name)) => name.revision.clone(),
+            Some(crate::pb::object_selector::Selector::Revision(name)) => {
+                crate::sanitize::validate_revision(&name.revision)?;
+                name.revision.clone()
+            }
             None => "HEAD".into(),
         };
         let head = match request.head.and_then(|s| s.selector) {
             Some(crate::pb::object_selector::Selector::Oid(oid)) => oid.hex.clone(),
-            Some(crate::pb::object_selector::Selector::Revision(name)) => name.revision.clone(),
+            Some(crate::pb::object_selector::Selector::Revision(name)) => {
+                crate::sanitize::validate_revision(&name.revision)?;
+                name.revision.clone()
+            }
             None => "HEAD".into(),
         };
         tracing::debug!(
@@ -142,7 +151,7 @@ impl GitBare {
         base: &str,
         head: &str,
         options: Option<&crate::pb::DiffOptions>,
-    ) -> GitResult<(Vec<RawDiffEntry>, HashMap<String, (u32, u32, bool)>)> {
+    ) -> GitResult<DiffRawOutput> {
         let mut args = vec![
             "--git-dir".to_string(),
             self.bare_dir.to_string_lossy().into_owned(),

diff/get_diff_stats.rs

@@ -1,19 +1,12 @@
 use crate::bare::GitBare;
 use crate::error::{GitError, GitResult};
 use crate::pb::GetDiffStatsRequest;
+use crate::resolve_revision;
 
 impl GitBare {
     pub fn get_diff_stats(&self, request: GetDiffStatsRequest) -> GitResult<crate::pb::DiffStats> {
-        let base = match request.base.and_then(|s| s.selector) {
-            Some(crate::pb::object_selector::Selector::Oid(oid)) => oid.hex,
-            Some(crate::pb::object_selector::Selector::Revision(name)) => name.revision,
-            None => "HEAD".into(),
-        };
-        let head = match request.head.and_then(|s| s.selector) {
-            Some(crate::pb::object_selector::Selector::Oid(oid)) => oid.hex,
-            Some(crate::pb::object_selector::Selector::Revision(name)) => name.revision,
-            None => "HEAD".into(),
-        };
+        let base = resolve_revision!(request.base);
+        let head = resolve_revision!(request.head);
         diff_stats_for_range(self, &base, &head, request.options.as_ref())
     }
 }

diff/get_patch.rs

@@ -1,19 +1,12 @@
 use crate::bare::GitBare;
 use crate::error::{GitError, GitResult};
 use crate::pb::{GetPatchRequest, GetPatchResponse};
+use crate::resolve_revision;
 
 impl GitBare {
     pub fn get_patch(&self, request: GetPatchRequest) -> GitResult<Vec<GetPatchResponse>> {
-        let base = match request.base.and_then(|s| s.selector) {
-            Some(crate::pb::object_selector::Selector::Oid(oid)) => oid.hex,
-            Some(crate::pb::object_selector::Selector::Revision(name)) => name.revision,
-            None => "HEAD".into(),
-        };
-        let head = match request.head.and_then(|s| s.selector) {
-            Some(crate::pb::object_selector::Selector::Oid(oid)) => oid.hex,
-            Some(crate::pb::object_selector::Selector::Revision(name)) => name.revision,
-            None => "HEAD".into(),
-        };
+        let base = resolve_revision!(request.base);
+        let head = resolve_revision!(request.head);
         let result = duct::cmd(
             "git",
             [