@enbox/gitd 0.0.1

package/dist/esm/daemon/adapters/npm.js

@@ -0,0 +1,51 @@
+/**
+ * npm registry shim adapter for the unified daemon.
+ *
+ * Wraps `handleNpmRequest()` behind the `ShimAdapter` interface.
+ *
+ * @module
+ */
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+import { handleNpmRequest } from '../../shims/npm/registry.js';
+// ---------------------------------------------------------------------------
+// Adapter
+// ---------------------------------------------------------------------------
+export const npmAdapter = {
+    id: 'npm',
+    name: 'npm registry',
+    defaultPort: 4873,
+    portEnvVar: 'GITD_NPM_SHIM_PORT',
+    corsMethods: 'GET, OPTIONS',
+    corsHeaders: 'Authorization, Accept',
+    usageHint: 'npm install --registry=http://localhost:{port} @did:dht:<id>/<package>',
+    handle(ctx, req, res) {
+        return __awaiter(this, void 0, void 0, function* () {
+            var _a, _b, _c;
+            if (req.method !== 'GET') {
+                res.writeHead(405, { 'Content-Type': 'application/json' });
+                res.end(JSON.stringify({ error: 'Method not allowed. This is a read-only registry shim.' }));
+                return;
+            }
+            try {
+                const port = (_b = (_a = req.socket.address()) === null || _a === void 0 ? void 0 : _a.port) !== null && _b !== void 0 ? _b : 4873;
+                const url = new URL((_c = req.url) !== null && _c !== void 0 ? _c : '/', `http://localhost:${port}`);
+                const result = yield handleNpmRequest(ctx, url);
+                res.writeHead(result.status, result.headers);
+                res.end(result.body);
+            }
+            catch (_d) {
+                res.writeHead(500, { 'Content-Type': 'application/json' });
+                res.end(JSON.stringify({ error: 'Internal server error' }));
+            }
+        });
+    },
+};
+//# sourceMappingURL=npm.js.map

package/dist/esm/daemon/adapters/npm.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"npm.js","sourceRoot":"","sources":["../../../../src/daemon/adapters/npm.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;;;;;;;;;;AAOH,OAAO,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AAE/D,8EAA8E;AAC9E,UAAU;AACV,8EAA8E;AAE9E,MAAM,CAAC,MAAM,UAAU,GAAgB;IACrC,EAAE,EAAY,KAAK;IACnB,IAAI,EAAU,cAAc;IAC5B,WAAW,EAAG,IAAI;IAClB,UAAU,EAAI,oBAAoB;IAClC,WAAW,EAAG,cAAc;IAC5B,WAAW,EAAG,uBAAuB;IACrC,SAAS,EAAK,wEAAwE;IAEhF,MAAM,CAAC,GAAiB,EAAE,GAAoB,EAAE,GAAmB;;;YACvE,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;gBACzB,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;gBAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,wDAAwD,EAAE,CAAC,CAAC,CAAC;gBAC7F,OAAO;YACT,CAAC;YAED,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,MAAA,MAAC,GAAG,CAAC,MAAM,CAAC,OAAO,EAAwB,0CAAE,IAAI,mCAAI,IAAI,CAAC;gBACvE,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,MAAA,GAAG,CAAC,GAAG,mCAAI,GAAG,EAAE,oBAAoB,IAAI,EAAE,CAAC,CAAC;gBAChE,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;gBAChD,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;gBAC7C,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YACvB,CAAC;YAAC,WAAM,CAAC;gBACP,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;gBAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC,CAAC,CAAC;YAC9D,CAAC;QACH,CAAC;KAAA;CACF,CAAC"}

package/dist/esm/daemon/adapters/oci.js

@@ -0,0 +1,62 @@
+/**
+ * OCI/Docker registry shim adapter for the unified daemon.
+ *
+ * Wraps `handleOciRequest()` behind the `ShimAdapter` interface.
+ *
+ * @module
+ */
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+import { handleOciRequest } from '../../shims/oci/registry.js';
+// ---------------------------------------------------------------------------
+// Adapter
+// ---------------------------------------------------------------------------
+export const ociAdapter = {
+    id: 'oci',
+    name: 'OCI/Docker registry',
+    defaultPort: 5555,
+    portEnvVar: 'GITD_OCI_SHIM_PORT',
+    corsMethods: 'GET, HEAD, OPTIONS',
+    corsHeaders: 'Authorization, Accept, Docker-Distribution-Api-Version',
+    usageHint: 'docker pull localhost:{port}/did:dht:<id>/<image>:<tag>',
+    handle(ctx, req, res) {
+        return __awaiter(this, void 0, void 0, function* () {
+            var _a, _b, _c, _d;
+            const method = (_a = req.method) !== null && _a !== void 0 ? _a : 'GET';
+            if (method !== 'GET' && method !== 'HEAD') {
+                res.writeHead(405, {
+                    'Content-Type': 'application/json',
+                    'Docker-Distribution-Api-Version': 'registry/2.0',
+                });
+                res.end(JSON.stringify({
+                    errors: [{ code: 'UNSUPPORTED', message: 'This is a read-only registry shim.', detail: null }],
+                }));
+                return;
+            }
+            try {
+                const port = (_c = (_b = req.socket.address()) === null || _b === void 0 ? void 0 : _b.port) !== null && _c !== void 0 ? _c : 5555;
+                const url = new URL((_d = req.url) !== null && _d !== void 0 ? _d : '/', `http://localhost:${port}`);
+                const result = yield handleOciRequest(ctx, url, method);
+                res.writeHead(result.status, result.headers);
+                res.end(result.body);
+            }
+            catch (_e) {
+                res.writeHead(500, {
+                    'Content-Type': 'application/json',
+                    'Docker-Distribution-Api-Version': 'registry/2.0',
+                });
+                res.end(JSON.stringify({
+                    errors: [{ code: 'UNKNOWN', message: 'Internal server error', detail: null }],
+                }));
+            }
+        });
+    },
+};
+//# sourceMappingURL=oci.js.map

package/dist/esm/daemon/adapters/oci.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oci.js","sourceRoot":"","sources":["../../../../src/daemon/adapters/oci.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;;;;;;;;;;AAOH,OAAO,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AAE/D,8EAA8E;AAC9E,UAAU;AACV,8EAA8E;AAE9E,MAAM,CAAC,MAAM,UAAU,GAAgB;IACrC,EAAE,EAAY,KAAK;IACnB,IAAI,EAAU,qBAAqB;IACnC,WAAW,EAAG,IAAI;IAClB,UAAU,EAAI,oBAAoB;IAClC,WAAW,EAAG,oBAAoB;IAClC,WAAW,EAAG,wDAAwD;IACtE,SAAS,EAAK,yDAAyD;IAEjE,MAAM,CAAC,GAAiB,EAAE,GAAoB,EAAE,GAAmB;;;YACvE,MAAM,MAAM,GAAG,MAAA,GAAG,CAAC,MAAM,mCAAI,KAAK,CAAC;YAEnC,IAAI,MAAM,KAAK,KAAK,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;gBAC1C,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE;oBACjB,cAAc,EAAsB,kBAAkB;oBACtD,iCAAiC,EAAG,cAAc;iBACnD,CAAC,CAAC;gBACH,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC;oBACrB,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,oCAAoC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;iBAC/F,CAAC,CAAC,CAAC;gBACJ,OAAO;YACT,CAAC;YAED,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,MAAA,MAAC,GAAG,CAAC,MAAM,CAAC,OAAO,EAAwB,0CAAE,IAAI,mCAAI,IAAI,CAAC;gBACvE,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,MAAA,GAAG,CAAC,GAAG,mCAAI,GAAG,EAAE,oBAAoB,IAAI,EAAE,CAAC,CAAC;gBAChE,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;gBACxD,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;gBAC7C,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YACvB,CAAC;YAAC,WAAM,CAAC;gBACP,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE;oBACjB,cAAc,EAAsB,kBAAkB;oBACtD,iCAAiC,EAAG,cAAc;iBACnD,CAAC,CAAC;gBACH,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC;oBACrB,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,uBAAuB,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;iBAC9E,CAAC,CAAC,CAAC;YACN,CAAC;QACH,CAAC;KAAA;CACF,CAAC"}

package/dist/esm/daemon/index.js

@@ -0,0 +1,12 @@
+/**
+ * Unified daemon — barrel exports.
+ *
+ * @module
+ */
+export { createAdapterServer, resolveConfig, startDaemon } from './server.js';
+export { builtinAdapters, findAdapter } from './adapters/index.js';
+export { githubAdapter } from './adapters/github.js';
+export { goAdapter } from './adapters/go.js';
+export { npmAdapter } from './adapters/npm.js';
+export { ociAdapter } from './adapters/oci.js';
+//# sourceMappingURL=index.js.map

package/dist/esm/daemon/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/daemon/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAKH,OAAO,EAAE,mBAAmB,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC9E,OAAO,EAAE,eAAe,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAEnE,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC7C,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC"}

package/dist/esm/daemon/server.js

@@ -0,0 +1,167 @@
+/**
+ * Unified daemon server — starts one HTTP server per enabled shim adapter.
+ *
+ * The daemon manages the lifecycle of all shim servers from a single
+ * process.  It resolves configuration (JSON file, env vars, defaults),
+ * starts each enabled adapter on its assigned port, logs a status
+ * summary, and handles graceful shutdown on SIGINT/SIGTERM.
+ *
+ * Each adapter's server includes:
+ *   - CORS preflight handling (OPTIONS)
+ *   - A `/health` endpoint returning `{ status: 'ok', shim: '<id>' }`
+ *   - Delegation to the adapter's `handle()` method for all other requests
+ *   - Top-level error catching with 500 responses
+ *
+ * @module
+ */
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+import { createServer } from 'node:http';
+import { builtinAdapters } from './adapters/index.js';
+// ---------------------------------------------------------------------------
+// Config resolution
+// ---------------------------------------------------------------------------
+/**
+ * Resolve the effective configuration for every known adapter.
+ *
+ * Priority for port: config file > env var > adapter default.
+ * Priority for enabled: config file > `true` (all enabled by default).
+ */
+export function resolveConfig(config, adapters = builtinAdapters) {
+    return adapters.map((adapter) => {
+        var _a, _b, _c, _d;
+        const entry = (_a = config.shims) === null || _a === void 0 ? void 0 : _a[adapter.id];
+        const envPort = process.env[adapter.portEnvVar];
+        const envParsed = envPort ? parseInt(envPort, 10) : undefined;
+        const port = (_c = (_b = entry === null || entry === void 0 ? void 0 : entry.port) !== null && _b !== void 0 ? _b : (envParsed !== undefined && !Number.isNaN(envParsed) ? envParsed : undefined)) !== null && _c !== void 0 ? _c : adapter.defaultPort;
+        const enabled = (_d = entry === null || entry === void 0 ? void 0 : entry.enabled) !== null && _d !== void 0 ? _d : true;
+        return { adapter, enabled, port };
+    });
+}
+// ---------------------------------------------------------------------------
+// Server factory
+// ---------------------------------------------------------------------------
+/**
+ * Create an HTTP server for a single adapter.
+ *
+ * The server handles CORS preflight, `/health`, and delegates
+ * everything else to the adapter.  It does NOT call `server.listen()`
+ * — the caller is responsible for that.
+ */
+export function createAdapterServer(ctx, adapter) {
+    var _a, _b;
+    const corsMethods = (_a = adapter.corsMethods) !== null && _a !== void 0 ? _a : 'GET, OPTIONS';
+    const corsHeaders = (_b = adapter.corsHeaders) !== null && _b !== void 0 ? _b : 'Authorization, Accept, Content-Type';
+    return createServer((req, res) => __awaiter(this, void 0, void 0, function* () {
+        var _a;
+        const method = (_a = req.method) !== null && _a !== void 0 ? _a : 'GET';
+        // CORS preflight.
+        if (method === 'OPTIONS') {
+            res.writeHead(204, {
+                'Access-Control-Allow-Origin': '*',
+                'Access-Control-Allow-Methods': corsMethods,
+                'Access-Control-Allow-Headers': corsHeaders,
+                'Access-Control-Max-Age': '86400',
+            });
+            res.end();
+            return;
+        }
+        // Health endpoint.
+        if (req.url === '/health') {
+            res.writeHead(200, { 'Content-Type': 'application/json' });
+            res.end(JSON.stringify({ status: 'ok', shim: adapter.id }));
+            return;
+        }
+        // Delegate to adapter.
+        try {
+            yield adapter.handle(ctx, req, res);
+        }
+        catch (err) {
+            console.error(`[daemon:${adapter.id}] Error: ${err.message}`);
+            if (!res.headersSent) {
+                res.writeHead(500, { 'Content-Type': 'application/json' });
+                res.end(JSON.stringify({ error: 'Internal server error' }));
+            }
+        }
+    }));
+}
+// ---------------------------------------------------------------------------
+// Daemon lifecycle
+// ---------------------------------------------------------------------------
+/**
+ * Start the unified daemon.
+ *
+ * Resolves configuration, starts one HTTP server per enabled adapter,
+ * registers SIGINT/SIGTERM handlers, and returns the `DaemonInstance`
+ * for programmatic control and testing.
+ */
+export function startDaemon(options) {
+    return __awaiter(this, void 0, void 0, function* () {
+        const { ctx, config } = options;
+        const resolved = resolveConfig(config);
+        const servers = new Map();
+        const enabledAdapters = resolved.filter((r) => r.enabled);
+        if (enabledAdapters.length === 0) {
+            console.log('[daemon] No shims enabled — nothing to start.');
+            return { servers, resolved, stop: () => __awaiter(this, void 0, void 0, function* () { }) };
+        }
+        // Start each enabled adapter.
+        const startPromises = enabledAdapters.map((r) => {
+            return new Promise((resolve, reject) => {
+                const server = createAdapterServer(ctx, r.adapter);
+                server.on('error', (err) => {
+                    if (err.code === 'EADDRINUSE') {
+                        console.error(`[daemon:${r.adapter.id}] Port ${r.port} is already in use — skipping.`);
+                        resolve();
+                    }
+                    else {
+                        reject(err);
+                    }
+                });
+                server.listen(r.port, () => {
+                    servers.set(r.adapter.id, server);
+                    resolve();
+                });
+            });
+        });
+        yield Promise.all(startPromises);
+        // Print status summary.
+        console.log('[daemon] gitd daemon started');
+        console.log('');
+        for (const r of enabledAdapters) {
+            const running = servers.has(r.adapter.id);
+            const status = running ? `http://localhost:${r.port}` : 'FAILED';
+            console.log(`  ${r.adapter.name.padEnd(22)} ${status}`);
+            if (running && r.adapter.usageHint) {
+                console.log(`  ${''.padEnd(22)} ${r.adapter.usageHint.replace('{port}', String(r.port))}`);
+            }
+        }
+        console.log('');
+        console.log(`[daemon] ${servers.size}/${enabledAdapters.length} shims running. Health: GET /health on any port.`);
+        console.log('[daemon] Press Ctrl+C to stop.');
+        console.log('');
+        // Build the stop function.
+        const stop = () => __awaiter(this, void 0, void 0, function* () {
+            const closePromises = [];
+            for (const [id, server] of servers) {
+                closePromises.push(new Promise((resolve) => {
+                    server.close(() => {
+                        console.log(`[daemon:${id}] stopped`);
+                        resolve();
+                    });
+                }));
+            }
+            yield Promise.all(closePromises);
+            servers.clear();
+        });
+        return { servers, resolved, stop };
+    });
+}
+//# sourceMappingURL=server.js.map

package/dist/esm/daemon/server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.js","sourceRoot":"","sources":["../../../src/daemon/server.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;;;;;;;;;;AAIH,OAAO,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AAKzC,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAsBtD,8EAA8E;AAC9E,oBAAoB;AACpB,8EAA8E;AAE9E;;;;;GAKG;AACH,MAAM,UAAU,aAAa,CAC3B,MAAoB,EACpB,WAAmC,eAAe;IAElD,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE;;QAC9B,MAAM,KAAK,GAAG,MAAA,MAAM,CAAC,KAAK,0CAAG,OAAO,CAAC,EAAE,CAAC,CAAC;QACzC,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QAEhD,MAAM,SAAS,GAAG,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAC9D,MAAM,IAAI,GAAG,MAAA,MAAA,KAAK,aAAL,KAAK,uBAAL,KAAK,CAAE,IAAI,mCACnB,CAAC,SAAS,KAAK,SAAS,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,mCAC7E,OAAO,CAAC,WAAW,CAAC;QAEzB,MAAM,OAAO,GAAG,MAAA,KAAK,aAAL,KAAK,uBAAL,KAAK,CAAE,OAAO,mCAAI,IAAI,CAAC;QAEvC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IACpC,CAAC,CAAC,CAAC;AACL,CAAC;AAED,8EAA8E;AAC9E,iBAAiB;AACjB,8EAA8E;AAE9E;;;;;;GAMG;AACH,MAAM,UAAU,mBAAmB,CAAC,GAAiB,EAAE,OAAoB;;IACzE,MAAM,WAAW,GAAG,MAAA,OAAO,CAAC,WAAW,mCAAI,cAAc,CAAC;IAC1D,MAAM,WAAW,GAAG,MAAA,OAAO,CAAC,WAAW,mCAAI,qCAAqC,CAAC;IAEjF,OAAO,YAAY,CAAC,CAAO,GAAG,EAAE,GAAG,EAAE,EAAE;;QACrC,MAAM,MAAM,GAAG,MAAA,GAAG,CAAC,MAAM,mCAAI,KAAK,CAAC;QAEnC,kBAAkB;QAClB,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE;gBACjB,6BAA6B,EAAI,GAAG;gBACpC,8BAA8B,EAAG,WAAW;gBAC5C,8BAA8B,EAAG,WAAW;gBAC5C,wBAAwB,EAAS,OAAO;aACzC,CAAC,CAAC;YACH,GAAG,CAAC,GAAG,EAAE,CAAC;YACV,OAAO;QACT,CAAC;QAED,mBAAmB;QACnB,IAAI,GAAG,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;YAC1B,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;YAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;YAC5D,OAAO;QACT,CAAC;QAED,uBAAuB;QACvB,IAAI,CAAC;YACH,MAAM,OAAO,CAAC,MAAM,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;QACtC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,KAAK,CAAC,WAAW,OAAO,CAAC,EAAE,YAAa,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;YACzE,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;gBACrB,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;gBAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC,CAAC,CAAC;YAC9D,CAAC;QACH,CAAC;IACH,CAAC,CAAA,CAAC,CAAC;AACL,CAAC;AAED,8EAA8E;AAC9E,mBAAmB;AACnB,8EAA8E;AAE9E;;;;;;GAMG;AACH,MAAM,UAAgB,WAAW,CAAC,OAAsB;;QACtD,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC;QAChC,MAAM,QAAQ,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;QACvC,MAAM,OAAO,GAAG,IAAI,GAAG,EAAkB,CAAC;QAE1C,MAAM,eAAe,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;QAE1D,IAAI,eAAe,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACjC,OAAO,CAAC,GAAG,CAAC,+CAA+C,CAAC,CAAC;YAC7D,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAwB,EAAE,gDAAE,CAAC,CAAA,EAAE,CAAC;QACpE,CAAC;QAED,8BAA8B;QAC9B,MAAM,aAAa,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;YAC9C,OAAO,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;gBAC3C,MAAM,MAAM,GAAG,mBAAmB,CAAC,GAAG,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC;gBAEnD,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAA0B,EAAE,EAAE;oBAChD,IAAI,GAAG,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;wBAC9B,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,OAAO,CAAC,EAAE,UAAU,CAAC,CAAC,IAAI,gCAAgC,CAAC,CAAC;wBACvF,OAAO,EAAE,CAAC;oBACZ,CAAC;yBAAM,CAAC;wBACN,MAAM,CAAC,GAAG,CAAC,CAAC;oBACd,CAAC;gBACH,CAAC,CAAC,CAAC;gBAEH,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,GAAG,EAAE;oBACzB,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;oBAClC,OAAO,EAAE,CAAC;gBACZ,CAAC,CAAC,CAAC;YACL,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,MAAM,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;QAEjC,wBAAwB;QACxB,OAAO,CAAC,GAAG,CAAC,8BAA8B,CAAC,CAAC;QAC5C,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,KAAK,MAAM,CAAC,IAAI,eAAe,EAAE,CAAC;YAChC,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;YAC1C,MAAM,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC;YACjE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,MAAM,EAAE,CAAC,CAAC;YACxD,IAAI,OAAO,IAAI,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC;gBACnC,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,OAAO,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC;YAC7F,CAAC;QACH,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,OAAO,CAAC,GAAG,CAAC,YAAY,OAAO,CAAC,IAAI,IAAI,eAAe,CAAC,MAAM,kDAAkD,CAAC,CAAC;QAClH,OAAO,CAAC,GAAG,CAAC,gCAAgC,CAAC,CAAC;QAC9C,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAEhB,2BAA2B;QAC3B,MAAM,IAAI,GAAG,GAAwB,EAAE;YACrC,MAAM,aAAa,GAAoB,EAAE,CAAC;YAC1C,KAAK,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;gBACnC,aAAa,CAAC,IAAI,CAAC,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;oBAC/C,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE;wBAChB,OAAO,CAAC,GAAG,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;wBACtC,OAAO,EAAE,CAAC;oBACZ,CAAC,CAAC,CAAC;gBACL,CAAC,CAAC,CAAC,CAAC;YACN,CAAC;YACD,MAAM,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;YACjC,OAAO,CAAC,KAAK,EAAE,CAAC;QAClB,CAAC,CAAA,CAAC;QAEF,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IACrC,CAAC;CAAA"}

package/dist/esm/git-remote/credential-helper.js

@@ -0,0 +1,106 @@
+#!/usr/bin/env bun
+/**
+ * Git credential helper for DID-based push authentication.
+ *
+ * Git invokes credential helpers with a single argument: `get`, `store`, or
+ * `erase`. For `get`, the helper reads the request from stdin and writes
+ * credentials to stdout.
+ *
+ * This helper creates a DID-signed push token using the local Web5 agent's
+ * identity, formatted as HTTP Basic auth credentials:
+ *   username: did-auth
+ *   password: <base64url-signature>.<base64url-token>
+ *
+ * Usage in .gitconfig:
+ *   [credential "https://git.example.com"]
+ *     helper = /path/to/gitd-credential-helper
+ *
+ * Environment:
+ *   GITD_PASSWORD — vault password for the local agent
+ *
+ * @module
+ */
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+import { Ed25519 } from '@enbox/crypto';
+import { createPushTokenPayload, DID_AUTH_USERNAME, encodePushToken, formatAuthPassword, } from '../git-server/auth.js';
+// ---------------------------------------------------------------------------
+// Credential helper logic
+// ---------------------------------------------------------------------------
+/**
+ * Generate push credentials for a git request.
+ *
+ * @param request - The parsed credential request from git
+ * @param agentDid - The local agent's DID
+ * @param privateKeyJwk - The agent's Ed25519 private key (JWK)
+ * @returns The credential response to write to stdout, or undefined if not applicable
+ */
+export function generatePushCredentials(request, agentDid, privateKeyJwk) {
+    return __awaiter(this, void 0, void 0, function* () {
+        var _a;
+        // Extract the owner DID and repo from the URL path.
+        // Expected path format: /<did>/<repo> or /<prefix>/<did>/<repo>
+        const path = (_a = request.path) !== null && _a !== void 0 ? _a : '';
+        const segments = path.split('/').filter(Boolean);
+        // Find the DID segment (starts with "did:").
+        const didIdx = segments.findIndex((s) => s.startsWith('did:'));
+        if (didIdx === -1) {
+            return undefined;
+        }
+        const ownerDid = segments[didIdx];
+        const repo = segments[didIdx + 1];
+        if (!repo) {
+            return undefined;
+        }
+        // Create and sign the push token.
+        const payload = createPushTokenPayload(agentDid, ownerDid, repo);
+        const token = encodePushToken(payload);
+        const tokenBytes = new TextEncoder().encode(token);
+        const signature = yield Ed25519.sign({
+            key: privateKeyJwk,
+            data: tokenBytes,
+        });
+        const signatureBase64url = Buffer.from(signature).toString('base64url');
+        return {
+            username: DID_AUTH_USERNAME,
+            password: formatAuthPassword({ signature: signatureBase64url, token }),
+        };
+    });
+}
+// ---------------------------------------------------------------------------
+// stdin/stdout protocol
+// ---------------------------------------------------------------------------
+/** Parse a git credential helper request from stdin lines. */
+export function parseCredentialRequest(input) {
+    const result = {};
+    for (const line of input.split('\n')) {
+        const eqIdx = line.indexOf('=');
+        if (eqIdx === -1) {
+            continue;
+        }
+        const key = line.slice(0, eqIdx).trim();
+        const value = line.slice(eqIdx + 1).trim();
+        if (key === 'protocol') {
+            result.protocol = value;
+        }
+        if (key === 'host') {
+            result.host = value;
+        }
+        if (key === 'path') {
+            result.path = value;
+        }
+    }
+    return result;
+}
+/** Format a credential response for git. */
+export function formatCredentialResponse(creds) {
+    return `username=${creds.username}\npassword=${creds.password}\n`;
+}
+//# sourceMappingURL=credential-helper.js.map

package/dist/esm/git-remote/credential-helper.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"credential-helper.js","sourceRoot":"","sources":["../../../src/git-remote/credential-helper.ts"],"names":[],"mappings":";AACA;;;;;;;;;;;;;;;;;;;;GAoBG;;;;;;;;;;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAExC,OAAO,EACL,sBAAsB,EACtB,iBAAiB,EACjB,eAAe,EACf,kBAAkB,GACnB,MAAM,uBAAuB,CAAC;AAa/B,8EAA8E;AAC9E,0BAA0B;AAC1B,8EAA8E;AAE9E;;;;;;;GAOG;AACH,MAAM,UAAgB,uBAAuB,CAC3C,OAA0B,EAC1B,QAAgB,EAChB,aAAsC;;;QAEtC,oDAAoD;QACpD,gEAAgE;QAChE,MAAM,IAAI,GAAG,MAAA,OAAO,CAAC,IAAI,mCAAI,EAAE,CAAC;QAChC,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAEjD,6CAA6C;QAC7C,MAAM,MAAM,GAAG,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC;QAC/D,IAAI,MAAM,KAAK,CAAC,CAAC,EAAE,CAAC;YAAC,OAAO,SAAS,CAAC;QAAC,CAAC;QAExC,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC;QAClC,MAAM,IAAI,GAAG,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QAClC,IAAI,CAAC,IAAI,EAAE,CAAC;YAAC,OAAO,SAAS,CAAC;QAAC,CAAC;QAEhC,kCAAkC;QAClC,MAAM,OAAO,GAAG,sBAAsB,CAAC,QAAQ,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC;QACjE,MAAM,KAAK,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;QACvC,MAAM,UAAU,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAEnD,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC;YACnC,GAAG,EAAI,aAAoB;YAC3B,IAAI,EAAG,UAAU;SAClB,CAAC,CAAC;QAEH,MAAM,kBAAkB,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QAExE,OAAO;YACL,QAAQ,EAAG,iBAAiB;YAC5B,QAAQ,EAAG,kBAAkB,CAAC,EAAE,SAAS,EAAE,kBAAkB,EAAE,KAAK,EAAE,CAAC;SACxE,CAAC;IACJ,CAAC;CAAA;AAED,8EAA8E;AAC9E,wBAAwB;AACxB,8EAA8E;AAE9E,8DAA8D;AAC9D,MAAM,UAAU,sBAAsB,CAAC,KAAa;IAClD,MAAM,MAAM,GAAsB,EAAE,CAAC;IACrC,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACrC,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAChC,IAAI,KAAK,KAAK,CAAC,CAAC,EAAE,CAAC;YAAC,SAAS;QAAC,CAAC;QAC/B,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC;QACxC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAC3C,IAAI,GAAG,KAAK,UAAU,EAAE,CAAC;YAAC,MAAM,CAAC,QAAQ,GAAG,KAAK,CAAC;QAAC,CAAC;QACpD,IAAI,GAAG,KAAK,MAAM,EAAE,CAAC;YAAC,MAAM,CAAC,IAAI,GAAG,KAAK,CAAC;QAAC,CAAC;QAC5C,IAAI,GAAG,KAAK,MAAM,EAAE,CAAC;YAAC,MAAM,CAAC,IAAI,GAAG,KAAK,CAAC;QAAC,CAAC;IAC9C,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,4CAA4C;AAC5C,MAAM,UAAU,wBAAwB,CAAC,KAA6C;IACpF,OAAO,YAAY,KAAK,CAAC,QAAQ,cAAc,KAAK,CAAC,QAAQ,IAAI,CAAC;AACpE,CAAC"}

package/dist/esm/git-remote/credential-main.js

@@ -0,0 +1,109 @@
+#!/usr/bin/env bun
+/**
+ * Git credential helper entry point for DID-based push authentication.
+ *
+ * Git invokes this binary with a single argument: `get`, `store`, or `erase`.
+ * For `get`, the helper reads the request from stdin (key=value lines) and
+ * writes credentials to stdout.
+ *
+ * This helper creates a DID-signed push token using the local Web5 agent's
+ * identity, formatted as HTTP Basic auth credentials:
+ *   username: did-auth
+ *   password: <base64url-signature>.<base64url-token>
+ *
+ * Install in .gitconfig:
+ *   [credential]
+ *     helper = /path/to/git-remote-did-credential
+ *
+ * Environment:
+ *   GITD_PASSWORD — vault password for the local agent
+ *
+ * @module
+ */
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+import { Web5 } from '@enbox/api';
+import { createPushTokenPayload, DID_AUTH_USERNAME, encodePushToken, formatAuthPassword, } from '../git-server/auth.js';
+import { formatCredentialResponse, parseCredentialRequest, } from './credential-helper.js';
+// ---------------------------------------------------------------------------
+// Main
+// ---------------------------------------------------------------------------
+function main() {
+    return __awaiter(this, void 0, void 0, function* () {
+        var _a;
+        const action = process.argv[2];
+        // Only handle `get` requests — `store` and `erase` are no-ops.
+        if (action !== 'get') {
+            return;
+        }
+        // Read the credential request from stdin.
+        const input = yield readStdin();
+        const request = parseCredentialRequest(input);
+        // We only handle HTTP/HTTPS requests.
+        if (request.protocol && request.protocol !== 'https' && request.protocol !== 'http') {
+            return;
+        }
+        // Connect to the local agent to get the DID and signing key.
+        const password = process.env.GITD_PASSWORD;
+        if (!password) {
+            // Credential helpers must be non-interactive. If no password is set,
+            // silently exit and let git fall back to another credential helper.
+            return;
+        }
+        const { web5, did } = yield Web5.connect({
+            password,
+            sync: 'off',
+        });
+        // Extract the owner DID and repo from the URL path.
+        const path = (_a = request.path) !== null && _a !== void 0 ? _a : '';
+        const segments = path.split('/').filter(Boolean);
+        const didIdx = segments.findIndex((s) => s.startsWith('did:'));
+        if (didIdx === -1) {
+            return;
+        }
+        const ownerDid = segments[didIdx];
+        const repo = segments[didIdx + 1];
+        if (!repo) {
+            return;
+        }
+        // Create the push token.
+        const payload = createPushTokenPayload(did, ownerDid, repo);
+        const token = encodePushToken(payload);
+        // Sign the token using the agent's DID signer.
+        const signer = yield web5.agent.agentDid.getSigner();
+        const tokenBytes = new TextEncoder().encode(token);
+        const signature = yield signer.sign({ data: tokenBytes });
+        const signatureBase64url = Buffer.from(signature).toString('base64url');
+        const creds = {
+            username: DID_AUTH_USERNAME,
+            password: formatAuthPassword({ signature: signatureBase64url, token }),
+        };
+        process.stdout.write(formatCredentialResponse(creds));
+    });
+}
+// ---------------------------------------------------------------------------
+// Helpers
+// ---------------------------------------------------------------------------
+/** Read all of stdin until EOF. */
+function readStdin() {
+    return new Promise((resolve) => {
+        let buf = '';
+        process.stdin.setEncoding('utf8');
+        process.stdin.on('data', (chunk) => { buf += chunk; });
+        process.stdin.on('end', () => resolve(buf));
+        process.stdin.resume();
+    });
+}
+main().catch(() => {
+    // Credential helpers must never crash loudly — silent exit on error
+    // lets git fall back to the next configured credential helper.
+    process.exit(0);
+});
+//# sourceMappingURL=credential-main.js.map

package/dist/esm/git-remote/credential-main.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"credential-main.js","sourceRoot":"","sources":["../../../src/git-remote/credential-main.ts"],"names":[],"mappings":";AACA;;;;;;;;;;;;;;;;;;;;GAoBG;;;;;;;;;;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,YAAY,CAAC;AAElC,OAAO,EACL,sBAAsB,EACtB,iBAAiB,EACjB,eAAe,EACf,kBAAkB,GACnB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,wBAAwB,EACxB,sBAAsB,GACvB,MAAM,wBAAwB,CAAC;AAEhC,8EAA8E;AAC9E,OAAO;AACP,8EAA8E;AAE9E,SAAe,IAAI;;;QACjB,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAE/B,+DAA+D;QAC/D,IAAI,MAAM,KAAK,KAAK,EAAE,CAAC;YACrB,OAAO;QACT,CAAC;QAED,0CAA0C;QAC1C,MAAM,KAAK,GAAG,MAAM,SAAS,EAAE,CAAC;QAChC,MAAM,OAAO,GAAG,sBAAsB,CAAC,KAAK,CAAC,CAAC;QAE9C,sCAAsC;QACtC,IAAI,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,IAAI,OAAO,CAAC,QAAQ,KAAK,MAAM,EAAE,CAAC;YACpF,OAAO;QACT,CAAC;QAED,6DAA6D;QAC7D,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC;QAC3C,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,qEAAqE;YACrE,oEAAoE;YACpE,OAAO;QACT,CAAC;QAED,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC;YACvC,QAAQ;YACR,IAAI,EAAE,KAAK;SACZ,CAAC,CAAC;QAEH,oDAAoD;QACpD,MAAM,IAAI,GAAG,MAAA,OAAO,CAAC,IAAI,mCAAI,EAAE,CAAC;QAChC,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACjD,MAAM,MAAM,GAAG,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC;QAC/D,IAAI,MAAM,KAAK,CAAC,CAAC,EAAE,CAAC;YAAC,OAAO;QAAC,CAAC;QAE9B,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC;QAClC,MAAM,IAAI,GAAG,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QAClC,IAAI,CAAC,IAAI,EAAE,CAAC;YAAC,OAAO;QAAC,CAAC;QAEtB,yBAAyB;QACzB,MAAM,OAAO,GAAG,sBAAsB,CAAC,GAAG,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC;QAC5D,MAAM,KAAK,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;QAEvC,+CAA+C;QAC/C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,SAAS,EAAE,CAAC;QACrD,MAAM,UAAU,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACnD,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC;QAC1D,MAAM,kBAAkB,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QAExE,MAAM,KAAK,GAAG;YACZ,QAAQ,EAAG,iBAAiB;YAC5B,QAAQ,EAAG,kBAAkB,CAAC,EAAE,SAAS,EAAE,kBAAkB,EAAE,KAAK,EAAE,CAAC;SACxE,CAAC;QAEF,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,wBAAwB,CAAC,KAAK,CAAC,CAAC,CAAC;IACxD,CAAC;CAAA;AAED,8EAA8E;AAC9E,UAAU;AACV,8EAA8E;AAE9E,mCAAmC;AACnC,SAAS,SAAS;IAChB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,IAAI,GAAG,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QAClC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,GAAG,GAAG,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAC/D,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;QAC5C,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;IACzB,CAAC,CAAC,CAAC;AACL,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE;IAChB,oEAAoE;IACpE,+DAA+D;IAC/D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}

package/dist/esm/git-remote/index.js

@@ -0,0 +1,10 @@
+/**
+ * Git remote helper — DID-based remote transport for git.
+ *
+ * @module git-remote
+ */
+export * from './credential-helper.js';
+export * from './parse-url.js';
+export * from './resolve.js';
+export * from './service.js';
+//# sourceMappingURL=index.js.map

package/dist/esm/git-remote/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/git-remote/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,cAAc,wBAAwB,CAAC;AACvC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,cAAc,CAAC;AAC7B,cAAc,cAAc,CAAC"}

package/dist/esm/git-remote/main.js

@@ -0,0 +1,78 @@
+#!/usr/bin/env bun
+/**
+ * git-remote-did — Git remote helper for DID-addressed repositories.
+ *
+ * This helper is invoked by Git when it encounters a `did::` or `did://`
+ * remote URL.  It resolves the DID to an HTTPS endpoint and delegates all
+ * git transport to `git-remote-https`.
+ *
+ * Usage (invoked by Git, not directly):
+ *   git clone did::dht:abc123/my-repo
+ *   git remote add origin did::dht:abc123/my-repo
+ *   git push origin main
+ *
+ * The helper:
+ *   1. Parses the DID from the URL
+ *   2. Resolves the DID document
+ *   3. Extracts the GitTransport or DWN service endpoint
+ *   4. Execs `git-remote-https` with the resolved HTTPS URL
+ *
+ * @module
+ */
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+import { spawn } from 'node:child_process';
+import { parseDidUrl } from './parse-url.js';
+import { resolveGitEndpoint } from './resolve.js';
+// ---------------------------------------------------------------------------
+// Main
+// ---------------------------------------------------------------------------
+function main() {
+    return __awaiter(this, void 0, void 0, function* () {
+        var _a;
+        const remoteName = process.argv[2];
+        const url = (_a = process.argv[3]) !== null && _a !== void 0 ? _a : remoteName;
+        if (!url) {
+            console.error('git-remote-did: missing URL argument');
+            process.exit(1);
+        }
+        // Parse DID from URL.
+        let parsed;
+        try {
+            parsed = parseDidUrl(url);
+        }
+        catch (err) {
+            console.error(`git-remote-did: ${err.message}`);
+            process.exit(1);
+        }
+        // Resolve DID → HTTPS endpoint.
+        let endpoint;
+        try {
+            endpoint = yield resolveGitEndpoint(parsed.did, parsed.repo);
+        }
+        catch (err) {
+            console.error(`git-remote-did: ${err.message}`);
+            process.exit(1);
+        }
+        console.error(`git-remote-did: resolved ${parsed.did} → ${endpoint.url} (via ${endpoint.source})`);
+        // Delegate to git-remote-https — it handles all the transport complexity.
+        const child = spawn('git', ['remote-https', remoteName, endpoint.url], {
+            stdio: 'inherit',
+        });
+        child.on('exit', (code) => {
+            process.exit(code !== null && code !== void 0 ? code : 128);
+        });
+    });
+}
+main().catch((err) => {
+    console.error(`git-remote-did: fatal: ${err.message}`);
+    process.exit(128);
+});
+//# sourceMappingURL=main.js.map

package/dist/esm/git-remote/main.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"main.js","sourceRoot":"","sources":["../../../src/git-remote/main.ts"],"names":[],"mappings":";AACA;;;;;;;;;;;;;;;;;;;GAmBG;;;;;;;;;;AAEH,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAE3C,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAC7C,OAAO,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAElD,8EAA8E;AAC9E,OAAO;AACP,8EAA8E;AAE9E,SAAe,IAAI;;;QACjB,MAAM,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACnC,MAAM,GAAG,GAAG,MAAA,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,mCAAI,UAAU,CAAC;QAE1C,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,OAAO,CAAC,KAAK,CAAC,sCAAsC,CAAC,CAAC;YACtD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QAED,sBAAsB;QACtB,IAAI,MAAM,CAAC;QACX,IAAI,CAAC;YACH,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;QAC5B,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,OAAO,CAAC,KAAK,CAAC,mBAAoB,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;YAC3D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QAED,gCAAgC;QAChC,IAAI,QAAQ,CAAC;QACb,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,kBAAkB,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;QAC/D,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,OAAO,CAAC,KAAK,CAAC,mBAAoB,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;YAC3D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QAED,OAAO,CAAC,KAAK,CAAC,4BAA4B,MAAM,CAAC,GAAG,MAAM,QAAQ,CAAC,GAAG,SAAS,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC;QAEnG,0EAA0E;QAC1E,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,EAAE,CAAC,cAAc,EAAE,UAAU,EAAE,QAAQ,CAAC,GAAG,CAAC,EAAE;YACrE,KAAK,EAAE,SAAS;SACjB,CAAC,CAAC;QAEH,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;YACxB,OAAO,CAAC,IAAI,CAAC,IAAI,aAAJ,IAAI,cAAJ,IAAI,GAAI,GAAG,CAAC,CAAC;QAC5B,CAAC,CAAC,CAAC;IACL,CAAC;CAAA;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,GAAU,EAAE,EAAE;IAC1B,OAAO,CAAC,KAAK,CAAC,0BAA0B,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;IACvD,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACpB,CAAC,CAAC,CAAC"}