@covro/covro 0.2.1-dev.4 → 0.2.1-dev.6

package/dist/server/project-clones.js

@@ -0,0 +1,332 @@
+import { spawn } from "node:child_process";
+import { createHash } from "node:crypto";
+import { accessSync, constants, lstatSync, readdirSync, realpathSync } from "node:fs";
+import { basename, dirname, isAbsolute, join, resolve } from "node:path";
+import { AppError } from "../shared/errors.js";
+import { cloneProjectSchema } from "../shared/validation.js";
+import { containsPath } from "./projects.js";
+const active = (job) => ["cloning", "cancelling"].includes(job.view.status);
+const hasControl = (value) => [...value].some((character) => character.charCodeAt(0) < 32 || character.charCodeAt(0) === 127);
+function validateRepository(repository) {
+  let valid = false;
+  if (!hasControl(repository) && !/[\s\\]/.test(repository)) {
+    if (/^(https|ssh):\/\//.test(repository)) {
+      try {
+        const url = new URL(repository);
+        valid = Boolean(
+          url.hostname && !url.hostname.startsWith("-") && url.pathname.length > 1 && !url.password && !url.search && !url.hash && (url.protocol === "ssh:" ? /^(?:[a-zA-Z0-9_][\w.-]*)?$/.test(url.username) : !url.username)
+        );
+      } catch {
+      }
+    } else {
+      valid = /^(?:[a-zA-Z0-9_][\w.-]*@)?[a-zA-Z0-9][\w.-]*:[^/:\s][^\s]*$/.test(repository);
+    }
+  }
+  if (!valid)
+    throw new AppError(
+      "INVALID_REPOSITORY",
+      "\u8BF7\u8F93\u5165 HTTPS \u6216 SSH Git \u4ED3\u5E93\u5730\u5740\uFF1B\u8BF7\u4F7F\u7528\u4E3B\u673A\u5DF2\u6709\u7684\u8BA4\u8BC1\uFF0C\u4E0D\u8981\u5728\u5730\u5740\u4E2D\u586B\u5199\u5BC6\u7801\u3001\u4EE4\u724C\u6216\u67E5\u8BE2\u53C2\u6570",
+      400
+    );
+}
+function targetPath(path) {
+  if (!isAbsolute(path) || hasControl(path) || resolve(path) === dirname(resolve(path)))
+    throw new AppError("INVALID_PROJECT_PATH", "\u8BF7\u586B\u5199\u670D\u52A1\u5668\u4E0A\u7684\u7EDD\u5BF9\u76EE\u6807\u76EE\u5F55", 400);
+  try {
+    const target = join(realpathSync(dirname(resolve(path))), basename(resolve(path)));
+    accessSync(dirname(target), constants.W_OK | constants.X_OK);
+    return target;
+  } catch {
+    throw new AppError(
+      "CLONE_PARENT_UNAVAILABLE",
+      "\u76EE\u6807\u76EE\u5F55\u7684\u7236\u76EE\u5F55\u5FC5\u987B\u5DF2\u5B58\u5728\uFF0C\u4E14\u670D\u52A1\u9700\u8981\u5199\u5165\u548C\u8FDB\u5165\u6743\u9650",
+      409
+    );
+  }
+}
+function checkEmpty(path) {
+  try {
+    const stat = lstatSync(path);
+    if (!stat.isDirectory() || stat.isSymbolicLink() || readdirSync(path).length)
+      throw new AppError(
+        "CLONE_TARGET_EXISTS",
+        "\u76EE\u6807\u76EE\u5F55\u5DF2\u5B58\u5728\u4E14\u975E\u7A7A\uFF0C\u6216\u4E0D\u662F\u666E\u901A\u76EE\u5F55\uFF1B\u8BF7\u9009\u62E9\u65B0\u7684\u7A7A\u76EE\u5F55\uFF0C\u4E0D\u4F1A\u8986\u76D6\u5DF2\u6709\u6587\u4EF6",
+        409
+      );
+  } catch (error) {
+    if (error.code === "ENOENT") return;
+    if (error instanceof AppError) throw error;
+    throw new AppError(
+      "CLONE_TARGET_UNAVAILABLE",
+      "\u65E0\u6CD5\u68C0\u67E5\u76EE\u6807\u76EE\u5F55\uFF0C\u8BF7\u68C0\u67E5\u670D\u52A1\u5668\u8DEF\u5F84\u548C\u8BBF\u95EE\u6743\u9650",
+      409
+    );
+  }
+}
+function failure(output, missingGit) {
+  if (missingGit)
+    return {
+      code: "CLONE_GIT_MISSING",
+      message: "\u670D\u52A1\u5668\u672A\u5B89\u88C5 Git\uFF0C\u6216\u670D\u52A1\u7684 PATH \u4E2D\u627E\u4E0D\u5230 Git\u3002\u5B89\u88C5\u5E76\u914D\u7F6E\u540E\u91CD\u8BD5\u3002"
+    };
+  if (/authentication failed|could not read username|permission denied|publickey|terminal prompts disabled|credential|access denied|401|403/i.test(
+    output
+  ))
+    return {
+      code: "CLONE_AUTH_FAILED",
+      message: "Git \u8BA4\u8BC1\u5931\u8D25\u6216\u6CA1\u6709\u4ED3\u5E93\u8BBF\u95EE\u6743\u9650\u3002\u8BF7\u5728\u8FD0\u884C\u670D\u52A1\u7684\u4E3B\u673A\u4E0A\u914D\u7F6E Git \u51ED\u636E\u6216 SSH \u5BC6\u94A5\u540E\u91CD\u8BD5\u3002"
+    };
+  if (/host key verification failed/i.test(output))
+    return {
+      code: "CLONE_HOST_KEY_FAILED",
+      message: "SSH \u4E3B\u673A\u9A8C\u8BC1\u5931\u8D25\u3002\u8BF7\u5728\u8FD0\u884C\u670D\u52A1\u7684\u4E3B\u673A\u4E0A\u786E\u8BA4\u5E76\u914D\u7F6E\u4ED3\u5E93\u4E3B\u673A\u7684 SSH \u4FE1\u4EFB\u540E\u91CD\u8BD5\u3002"
+    };
+  if (/repository .*not found|does not appear to be a git repository|not a repository|404/i.test(
+    output
+  ))
+    return {
+      code: "CLONE_REPOSITORY_UNAVAILABLE",
+      message: "\u4ED3\u5E93\u4E0D\u5B58\u5728\u6216\u4E0D\u53EF\u8BBF\u95EE\u3002\u8BF7\u68C0\u67E5\u4ED3\u5E93\u5730\u5740\u548C\u4E3B\u673A\u4E0A\u7684 Git \u8BBF\u95EE\u6743\u9650\u3002"
+    };
+  if (/could not resolve|failed to connect|unable to access|connection|timed out|certificate/i.test(
+    output
+  ))
+    return {
+      code: "CLONE_NETWORK_FAILED",
+      message: "\u65E0\u6CD5\u8FDE\u63A5 Git \u4ED3\u5E93\u3002\u8BF7\u68C0\u67E5\u670D\u52A1\u5668\u7F51\u7EDC\u3001\u4EE3\u7406\u548C\u8BC1\u4E66\u914D\u7F6E\u540E\u91CD\u8BD5\u3002"
+    };
+  if (/already exists and is not an empty directory/i.test(output))
+    return {
+      code: "CLONE_TARGET_NOT_EMPTY",
+      message: "\u76EE\u6807\u76EE\u5F55\u5DF2\u5305\u542B\u6587\u4EF6\uFF0CGit \u5DF2\u505C\u6B62\u514B\u9686\uFF1B\u4E0D\u4F1A\u8986\u76D6\u6216\u5220\u9664\u5DF2\u6709\u6587\u4EF6\u3002"
+    };
+  if (/no space left|disk quota/i.test(output))
+    return {
+      code: "CLONE_DISK_FULL",
+      message: "\u670D\u52A1\u5668\u78C1\u76D8\u7A7A\u95F4\u4E0D\u8DB3\uFF0C\u8BF7\u91CA\u653E\u7A7A\u95F4\u540E\u4F7F\u7528\u65B0\u7684\u7A7A\u76EE\u5F55\u91CD\u8BD5\u3002"
+    };
+  return {
+    code: "CLONE_FAILED",
+    message: "Git \u514B\u9686\u5931\u8D25\u3002\u8BF7\u68C0\u67E5\u4ED3\u5E93\u5730\u5740\u3001\u4E3B\u673A\u4E0A\u7684 Git \u8BA4\u8BC1\u3001\u76EE\u5F55\u6743\u9650\u548C\u78C1\u76D8\u7A7A\u95F4\u540E\u91CD\u8BD5\u3002"
+  };
+}
+class ProjectClones {
+  constructor(register, registered) {
+    this.register = register;
+    this.registered = registered;
+  }
+  register;
+  registered;
+  jobs = /* @__PURE__ */ new Map();
+  closing = false;
+  get hasActive() {
+    return [...this.jobs.values()].some(active);
+  }
+  assertIdlePath(path) {
+    if (!this.hasActive) return;
+    let canonical = resolve(path);
+    try {
+      canonical = realpathSync(path);
+    } catch {
+      try {
+        canonical = join(realpathSync(dirname(canonical)), basename(canonical));
+      } catch {
+      }
+    }
+    if ([...this.jobs.values()].some(
+      (job) => active(job) && (containsPath(job.view.path, canonical) || containsPath(canonical, job.view.path))
+    ))
+      throw new AppError("CLONE_IN_PROGRESS", "\u8BE5\u76EE\u5F55\u6B63\u5728\u514B\u9686\uFF0C\u8BF7\u7B49\u5F85\u5B8C\u6210\u6216\u53D6\u6D88\u540E\u518D\u64CD\u4F5C", 409);
+  }
+  start(input) {
+    const parsed = cloneProjectSchema.parse(input);
+    validateRepository(parsed.repository);
+    const fingerprint = createHash("sha256").update(JSON.stringify(parsed)).digest("hex");
+    const previous = this.jobs.get(parsed.clientOperationId);
+    if (previous) {
+      if (previous.fingerprint !== fingerprint)
+        throw new AppError("CLONE_ID_CONFLICT", "\u8BE5\u64CD\u4F5C ID \u5DF2\u7528\u4E8E\u5176\u4ED6\u514B\u9686\u8BF7\u6C42", 409);
+      return this.get(previous.view.id);
+    }
+    if (this.closing) throw new AppError("GATEWAY_STOPPING", "\u670D\u52A1\u6B63\u5728\u505C\u6B62\uFF0C\u8BF7\u7A0D\u540E\u91CD\u8BD5", 503);
+    const path = targetPath(parsed.path);
+    this.assertIdlePath(path);
+    if (this.registered(path))
+      throw new AppError("PROJECT_EXISTS", "\u8BE5\u76EE\u5F55\u5DF2\u6DFB\u52A0\u4E3A\u9879\u76EE\uFF0C\u8BF7\u4F7F\u7528\u5DF2\u6709\u9879\u76EE\u6216\u9009\u62E9\u5176\u4ED6\u76EE\u5F55", 409);
+    checkEmpty(path);
+    if ([...this.jobs.values()].filter(active).length >= 4)
+      throw new AppError("CLONE_LIMIT", "\u5DF2\u6709\u591A\u4E2A\u4ED3\u5E93\u6B63\u5728\u514B\u9686\uFF0C\u8BF7\u7B49\u5F85\u5B8C\u6210\u540E\u91CD\u8BD5", 409);
+    if (this.jobs.size >= 100) {
+      const oldest = [...this.jobs].find(([, job2]) => !active(job2));
+      if (oldest) this.jobs.delete(oldest[0]);
+    }
+    const job = {
+      view: {
+        id: parsed.clientOperationId,
+        path,
+        name: parsed.name,
+        status: "cloning",
+        progress: "\u6B63\u5728\u8FDE\u63A5\u4ED3\u5E93\u2026",
+        progressStage: "connecting"
+      },
+      fingerprint,
+      done: Promise.resolve()
+    };
+    this.jobs.set(job.view.id, job);
+    job.done = this.run(job, parsed.repository);
+    return this.get(job.view.id);
+  }
+  get(id) {
+    const job = this.jobs.get(id);
+    if (!job)
+      throw new AppError(
+        "CLONE_NOT_FOUND",
+        "\u672A\u627E\u5230\u514B\u9686\u8BB0\u5F55\uFF1B\u670D\u52A1\u91CD\u542F\u540E\u8BF7\u68C0\u67E5\u76EE\u6807\u76EE\u5F55\uFF0C\u518D\u6DFB\u52A0\u5DF2\u6709\u76EE\u5F55\u6216\u4F7F\u7528\u65B0\u7684\u7A7A\u76EE\u5F55\u91CD\u8BD5",
+        404
+      );
+    return structuredClone(job.view);
+  }
+  cancel(id) {
+    const job = this.jobs.get(id);
+    this.get(id);
+    if (job && active(job) && job.view.status !== "cancelling") {
+      job.view.status = "cancelling";
+      job.view.progress = "\u6B63\u5728\u53D6\u6D88\uFF0C\u7B49\u5F85 Git \u9000\u51FA\u2026";
+      job.view.progressStage = "cancelling";
+      this.signal(job, "SIGTERM");
+    }
+    return this.get(id);
+  }
+  retryRegistration(id) {
+    const job = this.jobs.get(id);
+    this.get(id);
+    if (job?.view.status === "registration-failed") this.finishRegistration(job);
+    return this.get(id);
+  }
+  finishRegistration(job) {
+    try {
+      job.view.project = this.register({ path: job.view.path, name: job.view.name });
+      job.view.status = "completed";
+      job.view.progress = "\u514B\u9686\u5B8C\u6210\uFF0C\u9879\u76EE\u5DF2\u6DFB\u52A0";
+      job.view.progressStage = "completed";
+      delete job.view.errorCode;
+      delete job.view.error;
+    } catch {
+      job.view.status = "registration-failed";
+      job.view.progress = "\u514B\u9686\u5DF2\u5B8C\u6210\uFF0C\u9879\u76EE\u5C1A\u672A\u6DFB\u52A0";
+      job.view.progressStage = "registration_failed";
+      job.view.errorCode = "CLONE_REGISTRATION_FAILED";
+      job.view.error = "\u9879\u76EE\u6CE8\u518C\u5931\u8D25\u3002\u5DF2\u514B\u9686\u7684\u6587\u4EF6\u4FDD\u7559\u5728\u76EE\u6807\u76EE\u5F55\uFF1B\u53EF\u91CD\u8BD5\u6DFB\u52A0\u9879\u76EE\uFF0C\u65E0\u9700\u518D\u6B21\u514B\u9686\uFF0C\u4E5F\u53EF\u901A\u8FC7\u201C\u5DF2\u6709\u76EE\u5F55\u201D\u6DFB\u52A0\u3002";
+    }
+  }
+  signal(job, signal) {
+    if (!job.child?.pid) return;
+    try {
+      if (process.platform === "win32") job.child.kill(signal);
+      else process.kill(-job.child.pid, signal);
+    } catch {
+    }
+  }
+  async run(job, repository) {
+    let output = "";
+    let pending = "";
+    let missingGit = false;
+    let timedOut = false;
+    const sshCommand = process.env.GIT_SSH_COMMAND ?? (process.env.GIT_SSH ? `'${process.env.GIT_SSH.replaceAll("'", "'\\''")}'` : "ssh");
+    const child = spawn(
+      "git",
+      [
+        "-c",
+        "protocol.allow=never",
+        "-c",
+        "protocol.https.allow=always",
+        "-c",
+        "protocol.ssh.allow=always",
+        "clone",
+        "--progress",
+        "--",
+        repository,
+        job.view.path
+      ],
+      {
+        detached: process.platform !== "win32",
+        stdio: ["ignore", "pipe", "pipe"],
+        env: {
+          ...process.env,
+          GIT_TERMINAL_PROMPT: "0",
+          GCM_INTERACTIVE: "never",
+          GIT_SSH_COMMAND: `${sshCommand} -oBatchMode=yes -oStrictHostKeyChecking=yes`,
+          LC_ALL: "C"
+        }
+      }
+    );
+    job.child = child;
+    const read = (chunk) => {
+      output = (output + chunk.toString()).slice(-16384);
+      pending = (pending + chunk.toString()).slice(-4096);
+      const lines = pending.split(/[\r\n]/);
+      pending = lines.pop() ?? "";
+      for (const line of lines) {
+        const match = /^(?:remote: )?(Receiving objects|Resolving deltas|Updating files|Checking out files|Counting objects|Compressing objects):\s+(\d{1,3})%/.exec(
+          line
+        );
+        if (!match || job.view.status !== "cloning") continue;
+        const labels = {
+          "Receiving objects": ["receiving", "\u6B63\u5728\u63A5\u6536\u5BF9\u8C61"],
+          "Resolving deltas": ["resolving", "\u6B63\u5728\u89E3\u6790\u5DEE\u5F02"],
+          "Updating files": ["checking_out", "\u6B63\u5728\u68C0\u51FA\u6587\u4EF6"],
+          "Checking out files": ["checking_out", "\u6B63\u5728\u68C0\u51FA\u6587\u4EF6"],
+          "Counting objects": ["counting", "\u6B63\u5728\u7EDF\u8BA1\u5BF9\u8C61"],
+          "Compressing objects": ["compressing", "\u6B63\u5728\u538B\u7F29\u5BF9\u8C61"]
+        };
+        [job.view.progressStage, job.view.progress] = labels[match[1]];
+        job.view.percent = Math.min(100, Number(match[2]));
+      }
+    };
+    child.stdout?.on("data", read);
+    child.stderr?.on("data", read);
+    const timeout = setTimeout(() => {
+      timedOut = true;
+      this.cancel(job.view.id);
+    }, 30 * 6e4);
+    timeout.unref();
+    const escalation = setInterval(() => {
+      if (job.view.status === "cancelling") this.signal(job, "SIGKILL");
+    }, 3e3);
+    escalation.unref();
+    const code = await new Promise((done) => {
+      child.once("error", (error) => {
+        missingGit = error.code === "ENOENT";
+      });
+      child.once("close", done);
+    });
+    clearTimeout(timeout);
+    clearInterval(escalation);
+    job.child = void 0;
+    delete job.view.percent;
+    if (job.view.status === "cancelling") {
+      job.view.status = timedOut ? "failed" : "cancelled";
+      job.view.progress = timedOut ? "\u514B\u9686\u8D85\u65F6\uFF0C\u5DF2\u505C\u6B62" : "\u5DF2\u53D6\u6D88\u514B\u9686";
+      job.view.progressStage = timedOut ? "timed_out" : "cancelled";
+      job.view.errorCode = timedOut ? "CLONE_TIMED_OUT" : "CLONE_CANCELLED";
+      job.view.error = `${timedOut ? "\u514B\u9686\u8D85\u8FC7 30 \u5206\u949F\uFF0C\u5DF2\u505C\u6B62\u3002" : ""}\u672A\u6DFB\u52A0\u9879\u76EE\uFF0C\u4E5F\u672A\u5220\u9664\u4EFB\u4F55\u6587\u4EF6\u3002\u76EE\u6807\u76EE\u5F55\u53EF\u80FD\u6B8B\u7559\u6587\u4EF6\uFF0C\u8BF7\u68C0\u67E5\u540E\u4F7F\u7528\u65B0\u7684\u7A7A\u76EE\u5F55\u91CD\u8BD5\u3002`;
+    } else if (code !== 0) {
+      job.view.status = "failed";
+      job.view.progress = "\u514B\u9686\u5931\u8D25";
+      job.view.progressStage = "failed";
+      const problem = failure(output, missingGit);
+      job.view.errorCode = problem.code;
+      job.view.error = `${problem.message} \u672A\u6DFB\u52A0\u9879\u76EE\uFF1B\u76EE\u6807\u76EE\u5F55\u53EF\u80FD\u6B8B\u7559\u6587\u4EF6\uFF0C\u8BF7\u68C0\u67E5\u540E\u4F7F\u7528\u65B0\u7684\u7A7A\u76EE\u5F55\u91CD\u8BD5\u3002`;
+    } else this.finishRegistration(job);
+  }
+  async close() {
+    this.closing = true;
+    for (const job of this.jobs.values()) if (active(job)) this.cancel(job.view.id);
+    await Promise.all([...this.jobs.values()].map((job) => job.done));
+  }
+}
+export {
+  ProjectClones,
+  validateRepository
+};
+//# sourceMappingURL=project-clones.js.map

package/dist/server/project-clones.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../src/server/project-clones.ts"],
+  "sourcesContent": ["import { spawn, type ChildProcess } from 'node:child_process';\nimport { createHash } from 'node:crypto';\nimport { accessSync, constants, lstatSync, readdirSync, realpathSync } from 'node:fs';\nimport { basename, dirname, isAbsolute, join, resolve } from 'node:path';\nimport { AppError } from '../shared/errors.js';\nimport type {\n  CloneProjectInput,\n  CreateProjectInput,\n  Project,\n  ProjectClone,\n} from '../shared/types.js';\nimport { cloneProjectSchema } from '../shared/validation.js';\nimport { containsPath } from './projects.js';\n\ninterface Job {\n  view: ProjectClone;\n  fingerprint: string;\n  child?: ChildProcess;\n  done: Promise<void>;\n}\nconst active = (job: Job) => ['cloning', 'cancelling'].includes(job.view.status);\nconst hasControl = (value: string) =>\n  [...value].some((character) => character.charCodeAt(0) < 32 || character.charCodeAt(0) === 127);\n\n/** Only remote Git transports; never pass a local path, option, or remote helper to Git. */\nexport function validateRepository(repository: string): void {\n  let valid = false;\n  if (!hasControl(repository) && !/[\\s\\\\]/.test(repository)) {\n    if (/^(https|ssh):\\/\\//.test(repository)) {\n      try {\n        const url = new URL(repository);\n        valid = Boolean(\n          url.hostname &&\n          !url.hostname.startsWith('-') &&\n          url.pathname.length > 1 &&\n          !url.password &&\n          !url.search &&\n          !url.hash &&\n          (url.protocol === 'ssh:'\n            ? /^(?:[a-zA-Z0-9_][\\w.-]*)?$/.test(url.username)\n            : !url.username),\n        );\n      } catch {\n        /* Report a fixed message, never the supplied URL. */\n      }\n    } else {\n      valid = /^(?:[a-zA-Z0-9_][\\w.-]*@)?[a-zA-Z0-9][\\w.-]*:[^/:\\s][^\\s]*$/.test(repository);\n    }\n  }\n  if (!valid)\n    throw new AppError(\n      'INVALID_REPOSITORY',\n      '\u8BF7\u8F93\u5165 HTTPS \u6216 SSH Git \u4ED3\u5E93\u5730\u5740\uFF1B\u8BF7\u4F7F\u7528\u4E3B\u673A\u5DF2\u6709\u7684\u8BA4\u8BC1\uFF0C\u4E0D\u8981\u5728\u5730\u5740\u4E2D\u586B\u5199\u5BC6\u7801\u3001\u4EE4\u724C\u6216\u67E5\u8BE2\u53C2\u6570',\n      400,\n    );\n}\n\nfunction targetPath(path: string): string {\n  if (!isAbsolute(path) || hasControl(path) || resolve(path) === dirname(resolve(path)))\n    throw new AppError('INVALID_PROJECT_PATH', '\u8BF7\u586B\u5199\u670D\u52A1\u5668\u4E0A\u7684\u7EDD\u5BF9\u76EE\u6807\u76EE\u5F55', 400);\n  try {\n    const target = join(realpathSync(dirname(resolve(path))), basename(resolve(path)));\n    accessSync(dirname(target), constants.W_OK | constants.X_OK);\n    return target;\n  } catch {\n    throw new AppError(\n      'CLONE_PARENT_UNAVAILABLE',\n      '\u76EE\u6807\u76EE\u5F55\u7684\u7236\u76EE\u5F55\u5FC5\u987B\u5DF2\u5B58\u5728\uFF0C\u4E14\u670D\u52A1\u9700\u8981\u5199\u5165\u548C\u8FDB\u5165\u6743\u9650',\n      409,\n    );\n  }\n}\n\nfunction checkEmpty(path: string): void {\n  try {\n    const stat = lstatSync(path);\n    if (!stat.isDirectory() || stat.isSymbolicLink() || readdirSync(path).length)\n      throw new AppError(\n        'CLONE_TARGET_EXISTS',\n        '\u76EE\u6807\u76EE\u5F55\u5DF2\u5B58\u5728\u4E14\u975E\u7A7A\uFF0C\u6216\u4E0D\u662F\u666E\u901A\u76EE\u5F55\uFF1B\u8BF7\u9009\u62E9\u65B0\u7684\u7A7A\u76EE\u5F55\uFF0C\u4E0D\u4F1A\u8986\u76D6\u5DF2\u6709\u6587\u4EF6',\n        409,\n      );\n  } catch (error) {\n    if ((error as NodeJS.ErrnoException).code === 'ENOENT') return;\n    if (error instanceof AppError) throw error;\n    throw new AppError(\n      'CLONE_TARGET_UNAVAILABLE',\n      '\u65E0\u6CD5\u68C0\u67E5\u76EE\u6807\u76EE\u5F55\uFF0C\u8BF7\u68C0\u67E5\u670D\u52A1\u5668\u8DEF\u5F84\u548C\u8BBF\u95EE\u6743\u9650',\n      409,\n    );\n  }\n}\n\nfunction failure(\n  output: string,\n  missingGit: boolean,\n): { code: NonNullable<ProjectClone['errorCode']>; message: string } {\n  if (missingGit)\n    return {\n      code: 'CLONE_GIT_MISSING',\n      message: '\u670D\u52A1\u5668\u672A\u5B89\u88C5 Git\uFF0C\u6216\u670D\u52A1\u7684 PATH \u4E2D\u627E\u4E0D\u5230 Git\u3002\u5B89\u88C5\u5E76\u914D\u7F6E\u540E\u91CD\u8BD5\u3002',\n    };\n  if (\n    /authentication failed|could not read username|permission denied|publickey|terminal prompts disabled|credential|access denied|401|403/i.test(\n      output,\n    )\n  )\n    return {\n      code: 'CLONE_AUTH_FAILED',\n      message:\n        'Git \u8BA4\u8BC1\u5931\u8D25\u6216\u6CA1\u6709\u4ED3\u5E93\u8BBF\u95EE\u6743\u9650\u3002\u8BF7\u5728\u8FD0\u884C\u670D\u52A1\u7684\u4E3B\u673A\u4E0A\u914D\u7F6E Git \u51ED\u636E\u6216 SSH \u5BC6\u94A5\u540E\u91CD\u8BD5\u3002',\n    };\n  if (/host key verification failed/i.test(output))\n    return {\n      code: 'CLONE_HOST_KEY_FAILED',\n      message: 'SSH \u4E3B\u673A\u9A8C\u8BC1\u5931\u8D25\u3002\u8BF7\u5728\u8FD0\u884C\u670D\u52A1\u7684\u4E3B\u673A\u4E0A\u786E\u8BA4\u5E76\u914D\u7F6E\u4ED3\u5E93\u4E3B\u673A\u7684 SSH \u4FE1\u4EFB\u540E\u91CD\u8BD5\u3002',\n    };\n  if (\n    /repository .*not found|does not appear to be a git repository|not a repository|404/i.test(\n      output,\n    )\n  )\n    return {\n      code: 'CLONE_REPOSITORY_UNAVAILABLE',\n      message: '\u4ED3\u5E93\u4E0D\u5B58\u5728\u6216\u4E0D\u53EF\u8BBF\u95EE\u3002\u8BF7\u68C0\u67E5\u4ED3\u5E93\u5730\u5740\u548C\u4E3B\u673A\u4E0A\u7684 Git \u8BBF\u95EE\u6743\u9650\u3002',\n    };\n  if (\n    /could not resolve|failed to connect|unable to access|connection|timed out|certificate/i.test(\n      output,\n    )\n  )\n    return {\n      code: 'CLONE_NETWORK_FAILED',\n      message: '\u65E0\u6CD5\u8FDE\u63A5 Git \u4ED3\u5E93\u3002\u8BF7\u68C0\u67E5\u670D\u52A1\u5668\u7F51\u7EDC\u3001\u4EE3\u7406\u548C\u8BC1\u4E66\u914D\u7F6E\u540E\u91CD\u8BD5\u3002',\n    };\n  if (/already exists and is not an empty directory/i.test(output))\n    return {\n      code: 'CLONE_TARGET_NOT_EMPTY',\n      message: '\u76EE\u6807\u76EE\u5F55\u5DF2\u5305\u542B\u6587\u4EF6\uFF0CGit \u5DF2\u505C\u6B62\u514B\u9686\uFF1B\u4E0D\u4F1A\u8986\u76D6\u6216\u5220\u9664\u5DF2\u6709\u6587\u4EF6\u3002',\n    };\n  if (/no space left|disk quota/i.test(output))\n    return {\n      code: 'CLONE_DISK_FULL',\n      message: '\u670D\u52A1\u5668\u78C1\u76D8\u7A7A\u95F4\u4E0D\u8DB3\uFF0C\u8BF7\u91CA\u653E\u7A7A\u95F4\u540E\u4F7F\u7528\u65B0\u7684\u7A7A\u76EE\u5F55\u91CD\u8BD5\u3002',\n    };\n  return {\n    code: 'CLONE_FAILED',\n    message: 'Git \u514B\u9686\u5931\u8D25\u3002\u8BF7\u68C0\u67E5\u4ED3\u5E93\u5730\u5740\u3001\u4E3B\u673A\u4E0A\u7684 Git \u8BA4\u8BC1\u3001\u76EE\u5F55\u6743\u9650\u548C\u78C1\u76D8\u7A7A\u95F4\u540E\u91CD\u8BD5\u3002',\n  };\n}\n\n/** Transient jobs never persist repository URLs, credentials, or raw Git output. */\nexport class ProjectClones {\n  private readonly jobs = new Map<string, Job>();\n  private closing = false;\n  constructor(\n    private readonly register: (input: CreateProjectInput) => Project,\n    private readonly registered: (path: string) => boolean,\n  ) {}\n\n  get hasActive(): boolean {\n    return [...this.jobs.values()].some(active);\n  }\n\n  assertIdlePath(path: string): void {\n    if (!this.hasActive) return;\n    let canonical = resolve(path);\n    try {\n      canonical = realpathSync(path);\n    } catch {\n      try {\n        canonical = join(realpathSync(dirname(canonical)), basename(canonical));\n      } catch {\n        /* Normal registration validation reports unavailable paths. */\n      }\n    }\n    if (\n      [...this.jobs.values()].some(\n        (job) =>\n          active(job) &&\n          (containsPath(job.view.path, canonical) || containsPath(canonical, job.view.path)),\n      )\n    )\n      throw new AppError('CLONE_IN_PROGRESS', '\u8BE5\u76EE\u5F55\u6B63\u5728\u514B\u9686\uFF0C\u8BF7\u7B49\u5F85\u5B8C\u6210\u6216\u53D6\u6D88\u540E\u518D\u64CD\u4F5C', 409);\n  }\n\n  start(input: CloneProjectInput): ProjectClone {\n    const parsed = cloneProjectSchema.parse(input);\n    validateRepository(parsed.repository);\n    const fingerprint = createHash('sha256').update(JSON.stringify(parsed)).digest('hex');\n    const previous = this.jobs.get(parsed.clientOperationId);\n    if (previous) {\n      if (previous.fingerprint !== fingerprint)\n        throw new AppError('CLONE_ID_CONFLICT', '\u8BE5\u64CD\u4F5C ID \u5DF2\u7528\u4E8E\u5176\u4ED6\u514B\u9686\u8BF7\u6C42', 409);\n      return this.get(previous.view.id);\n    }\n    if (this.closing) throw new AppError('GATEWAY_STOPPING', '\u670D\u52A1\u6B63\u5728\u505C\u6B62\uFF0C\u8BF7\u7A0D\u540E\u91CD\u8BD5', 503);\n    const path = targetPath(parsed.path);\n    this.assertIdlePath(path);\n    if (this.registered(path))\n      throw new AppError('PROJECT_EXISTS', '\u8BE5\u76EE\u5F55\u5DF2\u6DFB\u52A0\u4E3A\u9879\u76EE\uFF0C\u8BF7\u4F7F\u7528\u5DF2\u6709\u9879\u76EE\u6216\u9009\u62E9\u5176\u4ED6\u76EE\u5F55', 409);\n    checkEmpty(path);\n    if ([...this.jobs.values()].filter(active).length >= 4)\n      throw new AppError('CLONE_LIMIT', '\u5DF2\u6709\u591A\u4E2A\u4ED3\u5E93\u6B63\u5728\u514B\u9686\uFF0C\u8BF7\u7B49\u5F85\u5B8C\u6210\u540E\u91CD\u8BD5', 409);\n    // Bound transient history without evicting a running process.\n    if (this.jobs.size >= 100) {\n      const oldest = [...this.jobs].find(([, job]) => !active(job));\n      if (oldest) this.jobs.delete(oldest[0]);\n    }\n    const job: Job = {\n      view: {\n        id: parsed.clientOperationId,\n        path,\n        name: parsed.name,\n        status: 'cloning',\n        progress: '\u6B63\u5728\u8FDE\u63A5\u4ED3\u5E93\u2026',\n        progressStage: 'connecting',\n      },\n      fingerprint,\n      done: Promise.resolve(),\n    };\n    this.jobs.set(job.view.id, job);\n    job.done = this.run(job, parsed.repository);\n    return this.get(job.view.id);\n  }\n\n  get(id: string): ProjectClone {\n    const job = this.jobs.get(id);\n    if (!job)\n      throw new AppError(\n        'CLONE_NOT_FOUND',\n        '\u672A\u627E\u5230\u514B\u9686\u8BB0\u5F55\uFF1B\u670D\u52A1\u91CD\u542F\u540E\u8BF7\u68C0\u67E5\u76EE\u6807\u76EE\u5F55\uFF0C\u518D\u6DFB\u52A0\u5DF2\u6709\u76EE\u5F55\u6216\u4F7F\u7528\u65B0\u7684\u7A7A\u76EE\u5F55\u91CD\u8BD5',\n        404,\n      );\n    return structuredClone(job.view);\n  }\n\n  cancel(id: string): ProjectClone {\n    const job = this.jobs.get(id);\n    this.get(id);\n    if (job && active(job) && job.view.status !== 'cancelling') {\n      job.view.status = 'cancelling';\n      job.view.progress = '\u6B63\u5728\u53D6\u6D88\uFF0C\u7B49\u5F85 Git \u9000\u51FA\u2026';\n      job.view.progressStage = 'cancelling';\n      this.signal(job, 'SIGTERM');\n    }\n    return this.get(id);\n  }\n\n  retryRegistration(id: string): ProjectClone {\n    const job = this.jobs.get(id);\n    this.get(id);\n    if (job?.view.status === 'registration-failed') this.finishRegistration(job);\n    return this.get(id);\n  }\n\n  private finishRegistration(job: Job): void {\n    try {\n      job.view.project = this.register({ path: job.view.path, name: job.view.name });\n      job.view.status = 'completed';\n      job.view.progress = '\u514B\u9686\u5B8C\u6210\uFF0C\u9879\u76EE\u5DF2\u6DFB\u52A0';\n      job.view.progressStage = 'completed';\n      delete job.view.errorCode;\n      delete job.view.error;\n    } catch {\n      job.view.status = 'registration-failed';\n      job.view.progress = '\u514B\u9686\u5DF2\u5B8C\u6210\uFF0C\u9879\u76EE\u5C1A\u672A\u6DFB\u52A0';\n      job.view.progressStage = 'registration_failed';\n      job.view.errorCode = 'CLONE_REGISTRATION_FAILED';\n      job.view.error =\n        '\u9879\u76EE\u6CE8\u518C\u5931\u8D25\u3002\u5DF2\u514B\u9686\u7684\u6587\u4EF6\u4FDD\u7559\u5728\u76EE\u6807\u76EE\u5F55\uFF1B\u53EF\u91CD\u8BD5\u6DFB\u52A0\u9879\u76EE\uFF0C\u65E0\u9700\u518D\u6B21\u514B\u9686\uFF0C\u4E5F\u53EF\u901A\u8FC7\u201C\u5DF2\u6709\u76EE\u5F55\u201D\u6DFB\u52A0\u3002';\n    }\n  }\n\n  private signal(job: Job, signal: NodeJS.Signals): void {\n    if (!job.child?.pid) return;\n    try {\n      if (process.platform === 'win32') job.child.kill(signal);\n      else process.kill(-job.child.pid, signal);\n    } catch {\n      /* Process may have already exited. */\n    }\n  }\n\n  private async run(job: Job, repository: string): Promise<void> {\n    let output = '';\n    let pending = '';\n    let missingGit = false;\n    let timedOut = false;\n    const sshCommand =\n      process.env.GIT_SSH_COMMAND ??\n      (process.env.GIT_SSH ? `'${process.env.GIT_SSH.replaceAll(\"'\", \"'\\\\''\")}'` : 'ssh');\n    const child = spawn(\n      'git',\n      [\n        '-c',\n        'protocol.allow=never',\n        '-c',\n        'protocol.https.allow=always',\n        '-c',\n        'protocol.ssh.allow=always',\n        'clone',\n        '--progress',\n        '--',\n        repository,\n        job.view.path,\n      ],\n      {\n        detached: process.platform !== 'win32',\n        stdio: ['ignore', 'pipe', 'pipe'],\n        env: {\n          ...process.env,\n          GIT_TERMINAL_PROMPT: '0',\n          GCM_INTERACTIVE: 'never',\n          GIT_SSH_COMMAND: `${sshCommand} -oBatchMode=yes -oStrictHostKeyChecking=yes`,\n          LC_ALL: 'C',\n        },\n      },\n    );\n    job.child = child;\n    const read = (chunk: Buffer) => {\n      output = (output + chunk.toString()).slice(-16_384);\n      pending = (pending + chunk.toString()).slice(-4096);\n      const lines = pending.split(/[\\r\\n]/);\n      pending = lines.pop() ?? '';\n      for (const line of lines) {\n        const match =\n          /^(?:remote: )?(Receiving objects|Resolving deltas|Updating files|Checking out files|Counting objects|Compressing objects):\\s+(\\d{1,3})%/.exec(\n            line,\n          );\n        if (!match || job.view.status !== 'cloning') continue;\n        const labels: Record<string, [NonNullable<ProjectClone['progressStage']>, string]> = {\n          'Receiving objects': ['receiving', '\u6B63\u5728\u63A5\u6536\u5BF9\u8C61'],\n          'Resolving deltas': ['resolving', '\u6B63\u5728\u89E3\u6790\u5DEE\u5F02'],\n          'Updating files': ['checking_out', '\u6B63\u5728\u68C0\u51FA\u6587\u4EF6'],\n          'Checking out files': ['checking_out', '\u6B63\u5728\u68C0\u51FA\u6587\u4EF6'],\n          'Counting objects': ['counting', '\u6B63\u5728\u7EDF\u8BA1\u5BF9\u8C61'],\n          'Compressing objects': ['compressing', '\u6B63\u5728\u538B\u7F29\u5BF9\u8C61'],\n        };\n        [job.view.progressStage, job.view.progress] = labels[match[1]!]!;\n        job.view.percent = Math.min(100, Number(match[2]));\n      }\n    };\n    child.stdout?.on('data', read);\n    child.stderr?.on('data', read);\n    const timeout = setTimeout(() => {\n      timedOut = true;\n      this.cancel(job.view.id);\n    }, 30 * 60_000);\n    timeout.unref();\n    const escalation = setInterval(() => {\n      if (job.view.status === 'cancelling') this.signal(job, 'SIGKILL');\n    }, 3000);\n    escalation.unref();\n    const code = await new Promise<number | null>((done) => {\n      child.once('error', (error: NodeJS.ErrnoException) => {\n        missingGit = error.code === 'ENOENT';\n      });\n      child.once('close', done);\n    });\n    clearTimeout(timeout);\n    clearInterval(escalation);\n    job.child = undefined;\n    delete job.view.percent;\n    if (job.view.status === 'cancelling') {\n      job.view.status = timedOut ? 'failed' : 'cancelled';\n      job.view.progress = timedOut ? '\u514B\u9686\u8D85\u65F6\uFF0C\u5DF2\u505C\u6B62' : '\u5DF2\u53D6\u6D88\u514B\u9686';\n      job.view.progressStage = timedOut ? 'timed_out' : 'cancelled';\n      job.view.errorCode = timedOut ? 'CLONE_TIMED_OUT' : 'CLONE_CANCELLED';\n      job.view.error = `${timedOut ? '\u514B\u9686\u8D85\u8FC7 30 \u5206\u949F\uFF0C\u5DF2\u505C\u6B62\u3002' : ''}\u672A\u6DFB\u52A0\u9879\u76EE\uFF0C\u4E5F\u672A\u5220\u9664\u4EFB\u4F55\u6587\u4EF6\u3002\u76EE\u6807\u76EE\u5F55\u53EF\u80FD\u6B8B\u7559\u6587\u4EF6\uFF0C\u8BF7\u68C0\u67E5\u540E\u4F7F\u7528\u65B0\u7684\u7A7A\u76EE\u5F55\u91CD\u8BD5\u3002`;\n    } else if (code !== 0) {\n      job.view.status = 'failed';\n      job.view.progress = '\u514B\u9686\u5931\u8D25';\n      job.view.progressStage = 'failed';\n      const problem = failure(output, missingGit);\n      job.view.errorCode = problem.code;\n      job.view.error = `${problem.message} \u672A\u6DFB\u52A0\u9879\u76EE\uFF1B\u76EE\u6807\u76EE\u5F55\u53EF\u80FD\u6B8B\u7559\u6587\u4EF6\uFF0C\u8BF7\u68C0\u67E5\u540E\u4F7F\u7528\u65B0\u7684\u7A7A\u76EE\u5F55\u91CD\u8BD5\u3002`;\n    } else this.finishRegistration(job);\n  }\n\n  async close(): Promise<void> {\n    this.closing = true;\n    for (const job of this.jobs.values()) if (active(job)) this.cancel(job.view.id);\n    await Promise.all([...this.jobs.values()].map((job) => job.done));\n  }\n}\n"],
+  "mappings": "AAAA,SAAS,aAAgC;AACzC,SAAS,kBAAkB;AAC3B,SAAS,YAAY,WAAW,WAAW,aAAa,oBAAoB;AAC5E,SAAS,UAAU,SAAS,YAAY,MAAM,eAAe;AAC7D,SAAS,gBAAgB;AAOzB,SAAS,0BAA0B;AACnC,SAAS,oBAAoB;AAQ7B,MAAM,SAAS,CAAC,QAAa,CAAC,WAAW,YAAY,EAAE,SAAS,IAAI,KAAK,MAAM;AAC/E,MAAM,aAAa,CAAC,UAClB,CAAC,GAAG,KAAK,EAAE,KAAK,CAAC,cAAc,UAAU,WAAW,CAAC,IAAI,MAAM,UAAU,WAAW,CAAC,MAAM,GAAG;AAGzF,SAAS,mBAAmB,YAA0B;AAC3D,MAAI,QAAQ;AACZ,MAAI,CAAC,WAAW,UAAU,KAAK,CAAC,SAAS,KAAK,UAAU,GAAG;AACzD,QAAI,oBAAoB,KAAK,UAAU,GAAG;AACxC,UAAI;AACF,cAAM,MAAM,IAAI,IAAI,UAAU;AAC9B,gBAAQ;AAAA,UACN,IAAI,YACJ,CAAC,IAAI,SAAS,WAAW,GAAG,KAC5B,IAAI,SAAS,SAAS,KACtB,CAAC,IAAI,YACL,CAAC,IAAI,UACL,CAAC,IAAI,SACJ,IAAI,aAAa,SACd,6BAA6B,KAAK,IAAI,QAAQ,IAC9C,CAAC,IAAI;AAAA,QACX;AAAA,MACF,QAAQ;AAAA,MAER;AAAA,IACF,OAAO;AACL,cAAQ,8DAA8D,KAAK,UAAU;AAAA,IACvF;AAAA,EACF;AACA,MAAI,CAAC;AACH,UAAM,IAAI;AAAA,MACR;AAAA,MACA;AAAA,MACA;AAAA,IACF;AACJ;AAEA,SAAS,WAAW,MAAsB;AACxC,MAAI,CAAC,WAAW,IAAI,KAAK,WAAW,IAAI,KAAK,QAAQ,IAAI,MAAM,QAAQ,QAAQ,IAAI,CAAC;AAClF,UAAM,IAAI,SAAS,wBAAwB,wFAAkB,GAAG;AAClE,MAAI;AACF,UAAM,SAAS,KAAK,aAAa,QAAQ,QAAQ,IAAI,CAAC,CAAC,GAAG,SAAS,QAAQ,IAAI,CAAC,CAAC;AACjF,eAAW,QAAQ,MAAM,GAAG,UAAU,OAAO,UAAU,IAAI;AAC3D,WAAO;AAAA,EACT,QAAQ;AACN,UAAM,IAAI;AAAA,MACR;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,EACF;AACF;AAEA,SAAS,WAAW,MAAoB;AACtC,MAAI;AACF,UAAM,OAAO,UAAU,IAAI;AAC3B,QAAI,CAAC,KAAK,YAAY,KAAK,KAAK,eAAe,KAAK,YAAY,IAAI,EAAE;AACpE,YAAM,IAAI;AAAA,QACR;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,EACJ,SAAS,OAAO;AACd,QAAK,MAAgC,SAAS,SAAU;AACxD,QAAI,iBAAiB,SAAU,OAAM;AACrC,UAAM,IAAI;AAAA,MACR;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,EACF;AACF;AAEA,SAAS,QACP,QACA,YACmE;AACnE,MAAI;AACF,WAAO;AAAA,MACL,MAAM;AAAA,MACN,SAAS;AAAA,IACX;AACF,MACE,wIAAwI;AAAA,IACtI;AAAA,EACF;AAEA,WAAO;AAAA,MACL,MAAM;AAAA,MACN,SACE;AAAA,IACJ;AACF,MAAI,gCAAgC,KAAK,MAAM;AAC7C,WAAO;AAAA,MACL,MAAM;AAAA,MACN,SAAS;AAAA,IACX;AACF,MACE,sFAAsF;AAAA,IACpF;AAAA,EACF;AAEA,WAAO;AAAA,MACL,MAAM;AAAA,MACN,SAAS;AAAA,IACX;AACF,MACE,yFAAyF;AAAA,IACvF;AAAA,EACF;AAEA,WAAO;AAAA,MACL,MAAM;AAAA,MACN,SAAS;AAAA,IACX;AACF,MAAI,gDAAgD,KAAK,MAAM;AAC7D,WAAO;AAAA,MACL,MAAM;AAAA,MACN,SAAS;AAAA,IACX;AACF,MAAI,4BAA4B,KAAK,MAAM;AACzC,WAAO;AAAA,MACL,MAAM;AAAA,MACN,SAAS;AAAA,IACX;AACF,SAAO;AAAA,IACL,MAAM;AAAA,IACN,SAAS;AAAA,EACX;AACF;AAGO,MAAM,cAAc;AAAA,EAGzB,YACmB,UACA,YACjB;AAFiB;AACA;AAAA,EAChB;AAAA,EAFgB;AAAA,EACA;AAAA,EAJF,OAAO,oBAAI,IAAiB;AAAA,EACrC,UAAU;AAAA,EAMlB,IAAI,YAAqB;AACvB,WAAO,CAAC,GAAG,KAAK,KAAK,OAAO,CAAC,EAAE,KAAK,MAAM;AAAA,EAC5C;AAAA,EAEA,eAAe,MAAoB;AACjC,QAAI,CAAC,KAAK,UAAW;AACrB,QAAI,YAAY,QAAQ,IAAI;AAC5B,QAAI;AACF,kBAAY,aAAa,IAAI;AAAA,IAC/B,QAAQ;AACN,UAAI;AACF,oBAAY,KAAK,aAAa,QAAQ,SAAS,CAAC,GAAG,SAAS,SAAS,CAAC;AAAA,MACxE,QAAQ;AAAA,MAER;AAAA,IACF;AACA,QACE,CAAC,GAAG,KAAK,KAAK,OAAO,CAAC,EAAE;AAAA,MACtB,CAAC,QACC,OAAO,GAAG,MACT,aAAa,IAAI,KAAK,MAAM,SAAS,KAAK,aAAa,WAAW,IAAI,KAAK,IAAI;AAAA,IACpF;AAEA,YAAM,IAAI,SAAS,qBAAqB,4HAAwB,GAAG;AAAA,EACvE;AAAA,EAEA,MAAM,OAAwC;AAC5C,UAAM,SAAS,mBAAmB,MAAM,KAAK;AAC7C,uBAAmB,OAAO,UAAU;AACpC,UAAM,cAAc,WAAW,QAAQ,EAAE,OAAO,KAAK,UAAU,MAAM,CAAC,EAAE,OAAO,KAAK;AACpF,UAAM,WAAW,KAAK,KAAK,IAAI,OAAO,iBAAiB;AACvD,QAAI,UAAU;AACZ,UAAI,SAAS,gBAAgB;AAC3B,cAAM,IAAI,SAAS,qBAAqB,gFAAoB,GAAG;AACjE,aAAO,KAAK,IAAI,SAAS,KAAK,EAAE;AAAA,IAClC;AACA,QAAI,KAAK,QAAS,OAAM,IAAI,SAAS,oBAAoB,4EAAgB,GAAG;AAC5E,UAAM,OAAO,WAAW,OAAO,IAAI;AACnC,SAAK,eAAe,IAAI;AACxB,QAAI,KAAK,WAAW,IAAI;AACtB,YAAM,IAAI,SAAS,kBAAkB,oJAA4B,GAAG;AACtE,eAAW,IAAI;AACf,QAAI,CAAC,GAAG,KAAK,KAAK,OAAO,CAAC,EAAE,OAAO,MAAM,EAAE,UAAU;AACnD,YAAM,IAAI,SAAS,eAAe,sHAAuB,GAAG;AAE9D,QAAI,KAAK,KAAK,QAAQ,KAAK;AACzB,YAAM,SAAS,CAAC,GAAG,KAAK,IAAI,EAAE,KAAK,CAAC,CAAC,EAAEA,IAAG,MAAM,CAAC,OAAOA,IAAG,CAAC;AAC5D,UAAI,OAAQ,MAAK,KAAK,OAAO,OAAO,CAAC,CAAC;AAAA,IACxC;AACA,UAAM,MAAW;AAAA,MACf,MAAM;AAAA,QACJ,IAAI,OAAO;AAAA,QACX;AAAA,QACA,MAAM,OAAO;AAAA,QACb,QAAQ;AAAA,QACR,UAAU;AAAA,QACV,eAAe;AAAA,MACjB;AAAA,MACA;AAAA,MACA,MAAM,QAAQ,QAAQ;AAAA,IACxB;AACA,SAAK,KAAK,IAAI,IAAI,KAAK,IAAI,GAAG;AAC9B,QAAI,OAAO,KAAK,IAAI,KAAK,OAAO,UAAU;AAC1C,WAAO,KAAK,IAAI,IAAI,KAAK,EAAE;AAAA,EAC7B;AAAA,EAEA,IAAI,IAA0B;AAC5B,UAAM,MAAM,KAAK,KAAK,IAAI,EAAE;AAC5B,QAAI,CAAC;AACH,YAAM,IAAI;AAAA,QACR;AAAA,QACA;AAAA,QACA;AAAA,MACF;AACF,WAAO,gBAAgB,IAAI,IAAI;AAAA,EACjC;AAAA,EAEA,OAAO,IAA0B;AAC/B,UAAM,MAAM,KAAK,KAAK,IAAI,EAAE;AAC5B,SAAK,IAAI,EAAE;AACX,QAAI,OAAO,OAAO,GAAG,KAAK,IAAI,KAAK,WAAW,cAAc;AAC1D,UAAI,KAAK,SAAS;AAClB,UAAI,KAAK,WAAW;AACpB,UAAI,KAAK,gBAAgB;AACzB,WAAK,OAAO,KAAK,SAAS;AAAA,IAC5B;AACA,WAAO,KAAK,IAAI,EAAE;AAAA,EACpB;AAAA,EAEA,kBAAkB,IAA0B;AAC1C,UAAM,MAAM,KAAK,KAAK,IAAI,EAAE;AAC5B,SAAK,IAAI,EAAE;AACX,QAAI,KAAK,KAAK,WAAW,sBAAuB,MAAK,mBAAmB,GAAG;AAC3E,WAAO,KAAK,IAAI,EAAE;AAAA,EACpB;AAAA,EAEQ,mBAAmB,KAAgB;AACzC,QAAI;AACF,UAAI,KAAK,UAAU,KAAK,SAAS,EAAE,MAAM,IAAI,KAAK,MAAM,MAAM,IAAI,KAAK,KAAK,CAAC;AAC7E,UAAI,KAAK,SAAS;AAClB,UAAI,KAAK,WAAW;AACpB,UAAI,KAAK,gBAAgB;AACzB,aAAO,IAAI,KAAK;AAChB,aAAO,IAAI,KAAK;AAAA,IAClB,QAAQ;AACN,UAAI,KAAK,SAAS;AAClB,UAAI,KAAK,WAAW;AACpB,UAAI,KAAK,gBAAgB;AACzB,UAAI,KAAK,YAAY;AACrB,UAAI,KAAK,QACP;AAAA,IACJ;AAAA,EACF;AAAA,EAEQ,OAAO,KAAU,QAA8B;AACrD,QAAI,CAAC,IAAI,OAAO,IAAK;AACrB,QAAI;AACF,UAAI,QAAQ,aAAa,QAAS,KAAI,MAAM,KAAK,MAAM;AAAA,UAClD,SAAQ,KAAK,CAAC,IAAI,MAAM,KAAK,MAAM;AAAA,IAC1C,QAAQ;AAAA,IAER;AAAA,EACF;AAAA,EAEA,MAAc,IAAI,KAAU,YAAmC;AAC7D,QAAI,SAAS;AACb,QAAI,UAAU;AACd,QAAI,aAAa;AACjB,QAAI,WAAW;AACf,UAAM,aACJ,QAAQ,IAAI,oBACX,QAAQ,IAAI,UAAU,IAAI,QAAQ,IAAI,QAAQ,WAAW,KAAK,OAAO,CAAC,MAAM;AAC/E,UAAM,QAAQ;AAAA,MACZ;AAAA,MACA;AAAA,QACE;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA,IAAI,KAAK;AAAA,MACX;AAAA,MACA;AAAA,QACE,UAAU,QAAQ,aAAa;AAAA,QAC/B,OAAO,CAAC,UAAU,QAAQ,MAAM;AAAA,QAChC,KAAK;AAAA,UACH,GAAG,QAAQ;AAAA,UACX,qBAAqB;AAAA,UACrB,iBAAiB;AAAA,UACjB,iBAAiB,GAAG,UAAU;AAAA,UAC9B,QAAQ;AAAA,QACV;AAAA,MACF;AAAA,IACF;AACA,QAAI,QAAQ;AACZ,UAAM,OAAO,CAAC,UAAkB;AAC9B,gBAAU,SAAS,MAAM,SAAS,GAAG,MAAM,MAAO;AAClD,iBAAW,UAAU,MAAM,SAAS,GAAG,MAAM,KAAK;AAClD,YAAM,QAAQ,QAAQ,MAAM,QAAQ;AACpC,gBAAU,MAAM,IAAI,KAAK;AACzB,iBAAW,QAAQ,OAAO;AACxB,cAAM,QACJ,0IAA0I;AAAA,UACxI;AAAA,QACF;AACF,YAAI,CAAC,SAAS,IAAI,KAAK,WAAW,UAAW;AAC7C,cAAM,SAA+E;AAAA,UACnF,qBAAqB,CAAC,aAAa,sCAAQ;AAAA,UAC3C,oBAAoB,CAAC,aAAa,sCAAQ;AAAA,UAC1C,kBAAkB,CAAC,gBAAgB,sCAAQ;AAAA,UAC3C,sBAAsB,CAAC,gBAAgB,sCAAQ;AAAA,UAC/C,oBAAoB,CAAC,YAAY,sCAAQ;AAAA,UACzC,uBAAuB,CAAC,eAAe,sCAAQ;AAAA,QACjD;AACA,SAAC,IAAI,KAAK,eAAe,IAAI,KAAK,QAAQ,IAAI,OAAO,MAAM,CAAC,CAAE;AAC9D,YAAI,KAAK,UAAU,KAAK,IAAI,KAAK,OAAO,MAAM,CAAC,CAAC,CAAC;AAAA,MACnD;AAAA,IACF;AACA,UAAM,QAAQ,GAAG,QAAQ,IAAI;AAC7B,UAAM,QAAQ,GAAG,QAAQ,IAAI;AAC7B,UAAM,UAAU,WAAW,MAAM;AAC/B,iBAAW;AACX,WAAK,OAAO,IAAI,KAAK,EAAE;AAAA,IACzB,GAAG,KAAK,GAAM;AACd,YAAQ,MAAM;AACd,UAAM,aAAa,YAAY,MAAM;AACnC,UAAI,IAAI,KAAK,WAAW,aAAc,MAAK,OAAO,KAAK,SAAS;AAAA,IAClE,GAAG,GAAI;AACP,eAAW,MAAM;AACjB,UAAM,OAAO,MAAM,IAAI,QAAuB,CAAC,SAAS;AACtD,YAAM,KAAK,SAAS,CAAC,UAAiC;AACpD,qBAAa,MAAM,SAAS;AAAA,MAC9B,CAAC;AACD,YAAM,KAAK,SAAS,IAAI;AAAA,IAC1B,CAAC;AACD,iBAAa,OAAO;AACpB,kBAAc,UAAU;AACxB,QAAI,QAAQ;AACZ,WAAO,IAAI,KAAK;AAChB,QAAI,IAAI,KAAK,WAAW,cAAc;AACpC,UAAI,KAAK,SAAS,WAAW,WAAW;AACxC,UAAI,KAAK,WAAW,WAAW,qDAAa;AAC5C,UAAI,KAAK,gBAAgB,WAAW,cAAc;AAClD,UAAI,KAAK,YAAY,WAAW,oBAAoB;AACpD,UAAI,KAAK,QAAQ,GAAG,WAAW,2EAAoB,EAAE;AAAA,IACvD,WAAW,SAAS,GAAG;AACrB,UAAI,KAAK,SAAS;AAClB,UAAI,KAAK,WAAW;AACpB,UAAI,KAAK,gBAAgB;AACzB,YAAM,UAAU,QAAQ,QAAQ,UAAU;AAC1C,UAAI,KAAK,YAAY,QAAQ;AAC7B,UAAI,KAAK,QAAQ,GAAG,QAAQ,OAAO;AAAA,IACrC,MAAO,MAAK,mBAAmB,GAAG;AAAA,EACpC;AAAA,EAEA,MAAM,QAAuB;AAC3B,SAAK,UAAU;AACf,eAAW,OAAO,KAAK,KAAK,OAAO,EAAG,KAAI,OAAO,GAAG,EAAG,MAAK,OAAO,IAAI,KAAK,EAAE;AAC9E,UAAM,QAAQ,IAAI,CAAC,GAAG,KAAK,KAAK,OAAO,CAAC,EAAE,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC;AAAA,EAClE;AACF;",
+  "names": ["job"]
+}

package/dist/server/service.js

@@ -16,6 +16,7 @@ import {
 import { EventHub } from "./events.js";
 import { TurnUsageStore } from "./db/turn-usage.js";
 import { Projection, isActive, isTerminal } from "./projection.js";
+import { ProjectClones } from "./project-clones.js";
 import { renderThreadExport } from "./thread-export.js";
 import { readLocalImage } from "./images.js";
 import { temporaryFileRoots } from "./local-files.js";
@@ -32,6 +33,15 @@ class GatewayService {
       this.projects,
       options.workspacesRoot
     );
+    this.projectClones = new ProjectClones(
+      (input) => {
+        this.workspaces.assertProjectDirectory(input.path);
+        const project = this.projects.add(input);
+        this.events.publishProjects(this.projects.list());
+        return project;
+      },
+      (path) => this.projects.list().some((project) => project.canonicalRoot === path)
+    );
     this.codex = options.codex;
     this.shell = new ShellService(this.codex);
     this.events = new EventHub(options.limits?.eventBytes);
@@ -41,6 +51,7 @@ class GatewayService {
     this.removeListener = this.codex.onEvent((event) => this.consume(event));
   }
   options;
+  projectClones;
   shell;
   events;
   projection;
@@ -96,6 +107,7 @@ class GatewayService {
     this.maintenance = value;
   }
   prepareUpdate() {
+    if (this.projectClones.hasActive) return { ready: false, reason: "\u7B49\u5F85\u9879\u76EE\u514B\u9686\u5B8C\u6210\u6216\u53D6\u6D88" };
     if (this.shell.active()) return { ready: false, reason: "\u7B49\u5F85 Shell \u547D\u4EE4\u7ED3\u675F" };
     if (this.inFlightOperations.size || this.resumes.size || this.pendingThreadCreations.size)
       return { ready: false, reason: "\u7B49\u5F85\u6B63\u5728\u63D0\u4EA4\u6216\u6062\u590D\u7684\u64CD\u4F5C\u5B8C\u6210" };
@@ -110,10 +122,17 @@ class GatewayService {
   }
   addProject(input) {
     this.workspaces.assertProjectDirectory(input.path);
+    this.projectClones.assertIdlePath(input.path);
     const project = this.projects.add(input);
     this.events.publishProjects(this.projects.list());
     return project;
   }
+  cloneProject(input) {
+    if (this.maintenance || !this.accepting)
+      throw new AppError("GATEWAY_STOPPING", "\u670D\u52A1\u6B63\u5728\u5347\u7EA7\u6216\u505C\u6B62\uFF0C\u8BF7\u7A0D\u540E\u91CD\u8BD5", 503);
+    this.workspaces.assertProjectDirectory(input.path);
+    return this.projectClones.start(input);
+  }
   renameProject(projectId, input) {
     const project = this.projects.rename(projectId, input);
     this.events.publishProjects(this.projects.list());
@@ -855,6 +874,7 @@ class GatewayService {
   }
   async shutdown() {
     this.accepting = false;
+    await this.projectClones.close();
     this.store.recover();
     this.projection.runtimeReset();
     this.removeListener();