@foss.global/gitmanager 2.0.0 → 2.2.0

package/native-notices/manifest.json

@@ -23,6 +23,7 @@
         "base64@0.22.1",
         "block-buffer@0.10.4",
         "bytes@1.12.0",
+        "cc@1.8.0",
         "cfg-if@1.0.4",
         "clap@4.6.1",
         "clap_builder@4.6.0",
@@ -34,6 +35,7 @@
         "crypto-common@0.1.7",
         "digest@0.10.7",
         "errno@0.3.14",
+        "find-msvc-tools@0.1.14",
         "flate2@1.1.9",
         "form_urlencoded@1.2.2",
         "futures-channel@0.3.33",
@@ -83,6 +85,7 @@
         "serde_urlencoded@0.7.1",
         "sha2@0.10.9",
         "sharded-slab@0.1.7",
+        "shlex@2.0.1",
         "signal-hook-registry@1.4.8",
         "simd-adler32@0.3.10",
         "slab@0.4.12",
@@ -92,6 +95,8 @@
         "syn@2.0.118",
         "sync_wrapper@1.0.2",
         "thread_local@1.1.9",
+        "tikv-jemalloc-sys@0.7.1+5.3.1-0-g81034ce1f1373e37dc865038e1bc8eeecf559ce8",
+        "tikv-jemallocator@0.7.0",
         "tokio-macros@2.7.0",
         "tokio-stream@0.1.18",
         "tokio-util@0.7.18",
@@ -133,6 +138,7 @@
         "base64@0.22.1",
         "block-buffer@0.10.4",
         "bytes@1.12.0",
+        "cc@1.8.0",
         "cfg-if@1.0.4",
         "clap@4.6.1",
         "clap_builder@4.6.0",
@@ -144,6 +150,7 @@
         "crypto-common@0.1.7",
         "digest@0.10.7",
         "errno@0.3.14",
+        "find-msvc-tools@0.1.14",
         "flate2@1.1.9",
         "form_urlencoded@1.2.2",
         "futures-channel@0.3.33",
@@ -193,6 +200,7 @@
         "serde_urlencoded@0.7.1",
         "sha2@0.10.9",
         "sharded-slab@0.1.7",
+        "shlex@2.0.1",
         "signal-hook-registry@1.4.8",
         "simd-adler32@0.3.10",
         "slab@0.4.12",
@@ -202,6 +210,8 @@
         "syn@2.0.118",
         "sync_wrapper@1.0.2",
         "thread_local@1.1.9",
+        "tikv-jemalloc-sys@0.7.1+5.3.1-0-g81034ce1f1373e37dc865038e1bc8eeecf559ce8",
+        "tikv-jemallocator@0.7.0",
         "tokio-macros@2.7.0",
         "tokio-stream@0.1.18",
         "tokio-util@0.7.18",
@@ -485,6 +495,26 @@
         }
       ]
     },
+    {
+      "name": "cc",
+      "version": "1.8.0",
+      "source": "registry+https://github.com/rust-lang/crates.io-index",
+      "license": "MIT OR Apache-2.0",
+      "files": [
+        {
+          "path": "crates/cc-1.8.0/license-apache",
+          "licenses": [
+            "Apache-2.0"
+          ]
+        },
+        {
+          "path": "crates/cc-1.8.0/license-mit",
+          "licenses": [
+            "MIT"
+          ]
+        }
+      ]
+    },
     {
       "name": "cfg-if",
       "version": "1.0.4",
@@ -705,6 +735,26 @@
         }
       ]
     },
+    {
+      "name": "find-msvc-tools",
+      "version": "0.1.14",
+      "source": "registry+https://github.com/rust-lang/crates.io-index",
+      "license": "MIT OR Apache-2.0",
+      "files": [
+        {
+          "path": "crates/find-msvc-tools-0.1.14/license-apache",
+          "licenses": [
+            "Apache-2.0"
+          ]
+        },
+        {
+          "path": "crates/find-msvc-tools-0.1.14/license-mit",
+          "licenses": [
+            "MIT"
+          ]
+        }
+      ]
+    },
     {
       "name": "flate2",
       "version": "1.1.9",
@@ -1647,6 +1697,24 @@
         }
       ]
     },
+    {
+      "name": "shlex",
+      "version": "2.0.1",
+      "source": "registry+https://github.com/rust-lang/crates.io-index",
+      "license": "MIT OR Apache-2.0",
+      "files": [
+        {
+          "path": "crates/shlex-2.0.1/license-apache",
+          "licenses": []
+        },
+        {
+          "path": "crates/shlex-2.0.1/license-mit",
+          "licenses": [
+            "MIT"
+          ]
+        }
+      ]
+    },
     {
       "name": "signal-hook-registry",
       "version": "1.4.8",
@@ -1803,6 +1871,61 @@
         }
       ]
     },
+    {
+      "name": "tikv-jemalloc-sys",
+      "version": "0.7.1+5.3.1-0-g81034ce1f1373e37dc865038e1bc8eeecf559ce8",
+      "source": "registry+https://github.com/rust-lang/crates.io-index",
+      "license": "MIT/Apache-2.0",
+      "files": [
+        {
+          "path": "crates/tikv-jemalloc-sys-0.7.1+5.3.1-0-g81034ce1f1373e37dc865038e1bc8eeecf559ce8/license-apache",
+          "licenses": [
+            "Apache-2.0"
+          ]
+        },
+        {
+          "path": "crates/tikv-jemalloc-sys-0.7.1+5.3.1-0-g81034ce1f1373e37dc865038e1bc8eeecf559ce8/license-mit",
+          "licenses": [
+            "MIT"
+          ]
+        }
+      ],
+      "native": [
+        {
+          "name": "jemalloc",
+          "version": "5.3.1",
+          "license": "BSD-2-Clause",
+          "files": [
+            {
+              "path": "native/tikv-jemalloc-sys-0.7.1+5.3.1-0-g81034ce1f1373e37dc865038e1bc8eeecf559ce8/jemalloc-5.3.1/jemalloc-copying",
+              "licenses": [
+                "BSD-2-Clause"
+              ]
+            }
+          ]
+        }
+      ]
+    },
+    {
+      "name": "tikv-jemallocator",
+      "version": "0.7.0",
+      "source": "registry+https://github.com/rust-lang/crates.io-index",
+      "license": "MIT/Apache-2.0",
+      "files": [
+        {
+          "path": "crates/tikv-jemallocator-0.7.0/license-apache",
+          "licenses": [
+            "Apache-2.0"
+          ]
+        },
+        {
+          "path": "crates/tikv-jemallocator-0.7.0/license-mit",
+          "licenses": [
+            "MIT"
+          ]
+        }
+      ]
+    },
     {
       "name": "tokio-macros",
       "version": "2.7.0",
@@ -2270,6 +2393,8 @@
     "crates/block-buffer-0.10.4/license-apache": "a9040321c3712d8fd0b09cf52b17445de04a23a10165049ae187cd39e5c86be5",
     "crates/block-buffer-0.10.4/license-mit": "d5c22aa3118d240e877ad41c5d9fa232f9c77d757d4aac0c2f943afc0a95e0ef",
     "crates/bytes-1.12.0/license": "45f522cacecb1023856e46df79ca625dfc550c94910078bd8aec6e02880b3d42",
+    "crates/cc-1.8.0/license-apache": "a60eea817514531668d7e00765731449fe14d059d3249e0bc93b36de45f759f2",
+    "crates/cc-1.8.0/license-mit": "378f5840b258e2779c39418f3f2d7b2ba96f1c7917dd6be0713f88305dbda397",
     "crates/cfg-if-1.0.4/license-apache": "a60eea817514531668d7e00765731449fe14d059d3249e0bc93b36de45f759f2",
     "crates/cfg-if-1.0.4/license-mit": "378f5840b258e2779c39418f3f2d7b2ba96f1c7917dd6be0713f88305dbda397",
     "crates/clap-4.6.1/license-apache": "c6596eb7be8581c18be736c846fb9173b69eccf6ef94c5135893ec56bd92ba08",
@@ -2292,6 +2417,8 @@
     "crates/digest-0.10.7/license-mit": "9e0dfd2dd4173a530e238cb6adb37aa78c34c6bc7444e0e10c1ab5d8881f63ba",
     "crates/errno-0.3.14/license-apache": "a60eea817514531668d7e00765731449fe14d059d3249e0bc93b36de45f759f2",
     "crates/errno-0.3.14/license-mit": "8764a597675778ddfd4e25f81b08a05dbcf089ac05662df7613fe67f150e3aa2",
+    "crates/find-msvc-tools-0.1.14/license-apache": "a60eea817514531668d7e00765731449fe14d059d3249e0bc93b36de45f759f2",
+    "crates/find-msvc-tools-0.1.14/license-mit": "378f5840b258e2779c39418f3f2d7b2ba96f1c7917dd6be0713f88305dbda397",
     "crates/flate2-1.1.9/license-apache": "a60eea817514531668d7e00765731449fe14d059d3249e0bc93b36de45f759f2",
     "crates/flate2-1.1.9/license-mit": "025436edff4cfcdde17a5811fdea78892d8482efd1abdec5a17872d07a4f2112",
     "crates/form_urlencoded-1.2.2/license-apache": "a60eea817514531668d7e00765731449fe14d059d3249e0bc93b36de45f759f2",
@@ -2384,6 +2511,8 @@
     "crates/sha2-0.10.9/license-apache": "a9040321c3712d8fd0b09cf52b17445de04a23a10165049ae187cd39e5c86be5",
     "crates/sha2-0.10.9/license-mit": "b4eb00df6e2a4d22518fcaa6a2b4646f249b3a3c9814509b22bd2091f1392ff1",
     "crates/sharded-slab-0.1.7/license": "eafbfa606bc005ed7fd2f623d65af17ffe4ef7c017221ac14405bf4140771ea9",
+    "crates/shlex-2.0.1/license-apache": "553fffcd9b1cb158bc3e9edc35da85ca5c3b3d7d2e61c883ebcfa8a65814b583",
+    "crates/shlex-2.0.1/license-mit": "4455bf75a91154108304cb283e0fea9948c14f13e20d60887cf2552449dea3b1",
     "crates/signal-hook-registry-1.4.8/license-apache": "a60eea817514531668d7e00765731449fe14d059d3249e0bc93b36de45f759f2",
     "crates/signal-hook-registry-1.4.8/license-mit": "503558bfefe66ca15e4e3f7955b3cb0ec87fd52f29bf24b336af7bd00e946d5c",
     "crates/simd-adler32-0.3.10/license.md": "42a35170233e83e18856792e748de4c1ce4a63b2afce9a370c89ef3fe23f9f2d",
@@ -2398,6 +2527,10 @@
     "crates/sync_wrapper-1.0.2/license": "0d542e0c8804e39aa7f37eb00da5a762149dc682d7829451287e11b938e94594",
     "crates/thread_local-1.1.9/license-apache": "a60eea817514531668d7e00765731449fe14d059d3249e0bc93b36de45f759f2",
     "crates/thread_local-1.1.9/license-mit": "c9a75f18b9ab2927829a208fc6aa2cf4e63b8420887ba29cdb265d6619ae82d5",
+    "crates/tikv-jemalloc-sys-0.7.1+5.3.1-0-g81034ce1f1373e37dc865038e1bc8eeecf559ce8/license-apache": "a60eea817514531668d7e00765731449fe14d059d3249e0bc93b36de45f759f2",
+    "crates/tikv-jemalloc-sys-0.7.1+5.3.1-0-g81034ce1f1373e37dc865038e1bc8eeecf559ce8/license-mit": "378f5840b258e2779c39418f3f2d7b2ba96f1c7917dd6be0713f88305dbda397",
+    "crates/tikv-jemallocator-0.7.0/license-apache": "a60eea817514531668d7e00765731449fe14d059d3249e0bc93b36de45f759f2",
+    "crates/tikv-jemallocator-0.7.0/license-mit": "378f5840b258e2779c39418f3f2d7b2ba96f1c7917dd6be0713f88305dbda397",
     "crates/tokio-1.52.3/license": "253cd04c6714889df2d32f3f64d669179a1c95c76ac43c40882c52eb06bc3552",
     "crates/tokio-macros-2.7.0/license": "0b83dc40cba89b9922bb84b0a9c7d2768ce37c1d7e138b7424fd4549915778c9",
     "crates/tokio-stream-0.1.18/license": "253cd04c6714889df2d32f3f64d669179a1c95c76ac43c40882c52eb06bc3552",
@@ -2421,7 +2554,8 @@
     "crates/version_check-0.9.5/license-apache": "a60eea817514531668d7e00765731449fe14d059d3249e0bc93b36de45f759f2",
     "crates/version_check-0.9.5/license-mit": "b7e650f3fce5c53249d1cdc608b54df156a97edd636cf9d23498d0cfe7aec63e",
     "crates/zmij-1.0.21/license-mit": "23f18e03dc49df91622fe2a76176497404e46ced8a715d9d2b67a7446571cca3",
-    "readme.md": "04809ae136a7ad00a51d3c6bf1f89d187f30b29215a331dfc303ab94ebfba0e0",
+    "native/tikv-jemalloc-sys-0.7.1+5.3.1-0-g81034ce1f1373e37dc865038e1bc8eeecf559ce8/jemalloc-5.3.1/jemalloc-copying": "94aa2caa98c25d942f58b956c71dba6a99ff98fc3a31cbc669fe2a4cd0268b53",
+    "readme.md": "81effb0ac33ff0b14d70a6d2deca504acbd941d13aa962744af7890ba6887fb5",
     "runtime/gcc/gpl-3.0.txt": "8ceb4b9ee5adedde47b31e975c1d90c73ad27b6b165a1dcd80c7c545eb65b903",
     "runtime/gcc/runtime-library-exception-3.1.txt": "9d6b43ce4d8de0c878bf16b54d8e7a10d9bd42b75178153e3af6a815bdc90f74",
     "runtime/glibc/lgpl-2.1.txt": "dc626520dcd53a22f727af3ee42c770e56c97a64fe3adb063799d8ab032fe551",

package/native-notices/native/tikv-jemalloc-sys-0.7.1+5.3.1-0-g81034ce1f1373e37dc865038e1bc8eeecf559ce8/jemalloc-5.3.1/jemalloc-copying

@@ -0,0 +1,27 @@
+Unless otherwise specified, files in the jemalloc source distribution are
+subject to the following license:
+--------------------------------------------------------------------------------
+Copyright (C) 2002-present Jason Evans <jasone@canonware.com>.
+All rights reserved.
+Copyright (C) 2007-2012 Mozilla Foundation.  All rights reserved.
+Copyright (C) 2009-present Facebook, Inc.  All rights reserved.
+
+Redistribution and use in source and binary forms, with or without
+modification, are permitted provided that the following conditions are met:
+1. Redistributions of source code must retain the above copyright notice(s),
+   this list of conditions and the following disclaimer.
+2. Redistributions in binary form must reproduce the above copyright notice(s),
+   this list of conditions and the following disclaimer in the documentation
+   and/or other materials provided with the distribution.
+
+THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDER(S) ``AS IS'' AND ANY EXPRESS
+OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
+MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED.  IN NO
+EVENT SHALL THE COPYRIGHT HOLDER(S) BE LIABLE FOR ANY DIRECT, INDIRECT,
+INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
+LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR
+PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF
+LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE
+OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF
+ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+--------------------------------------------------------------------------------

package/native-notices/readme.md

@@ -12,15 +12,17 @@ package's own code is covered by its own license.
 
 | Target | Rust target | Linkage | Cargo packages |
 | --- | --- | --- | --- |
-| linux_amd64 | x86_64-unknown-linux-gnu | dynamic glibc | 99 |
-| linux_arm64 | aarch64-unknown-linux-gnu | dynamic glibc | 99 |
+| linux_amd64 | x86_64-unknown-linux-gnu | dynamic glibc | 104 |
+| linux_arm64 | aarch64-unknown-linux-gnu | dynamic glibc | 104 |
 
 ## Contents
 
-- `crates/`: the license and notice files of the 99 third-party Cargo packages compiled
+- `crates/`: the license and notice files of the 104 third-party Cargo packages compiled
   for these targets (normal and build dependencies, including procedural macros;
   development dependencies are excluded), copied verbatim. `manifest.json` records each
   package's license expression, the texts that cover it, and the targets it is built for.
+- `native/`: the license files of C and C++ libraries that Cargo packages compile into
+  the executables.
 - `rust/`: the Rust standard library copyright inventory and license texts from the
   toolchain, and compiler-builtins' license.
   `rust/crates/` holds the license files of 5 standard-library dependencies the

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@foss.global/gitmanager",
-  "version": "2.0.0",
+  "version": "2.2.0",
   "private": false,
   "description": "Headless Git manager for the foss.global Git platform, with a TypeScript API and Rust engine.",
   "exports": {
@@ -14,13 +14,13 @@
     "@push.rocks/smartrust": "^1.7.0"
   },
   "devDependencies": {
-    "@foss.global/ci-spec": "0.2.0",
-    "@git.zone/tsbuild": "^5.0.0",
-    "@git.zone/tsdoc": "^2.2.2",
-    "@git.zone/tsrun": "^3.0.0",
-    "@git.zone/tsrust": "^1.15.0",
-    "@git.zone/tstest": "^6.2.0",
-    "@types/node": "^26.6.1"
+    "@foss.global/ci-spec": "1.1.1",
+    "@git.zone/tsbuild": "^6.0.2",
+    "@git.zone/tsdoc": "^3.0.2",
+    "@git.zone/tsrun": "^3.0.3",
+    "@git.zone/tsrust": "^4.3.0",
+    "@git.zone/tstest": "^7.2.1",
+    "@types/node": "^26.6.4"
   },
   "files": [
     "ts/**/*",
@@ -61,6 +61,7 @@
     "test": "tstest test/ --verbose --logfile --timeout 60",
     "test:rust": "(cd rust && cargo test)",
     "build": "(tsbuild tsfolders) && (tsrust)",
+    "build:release": "(tsbuild tsfolders) && (tsrust --configured-targets) && (tsrust verify)",
     "buildDocs": "tsdoc"
   }
 }

package/readme.md

@@ -283,6 +283,39 @@ if (!readiness.ready) {
 
 When Git Smart HTTP is running on a loopback bind, the probe targets the engine's own `GET /healthz` route out-of-band, so readiness stays available while the serial management channel is busy with a long-running command such as a mirror import. Repository archive creation also keeps management status and cancellation responsive while preserving serial admission for every other stateful command. Without a loopback Smart HTTP route, including a service bound to a non-loopback address with `allowUnsafeNonLoopback`, one shared bounded `getStatus` round trip per instance is used; that fallback queues behind other in-flight management commands and a Smart HTTP probe failure never falls through to it. Failure reasons are `not_running`, `starting`, `stopping`, `aborted`, `timeout`, and `unavailable`; the result matches the readiness contracts of `@push.rocks/smartdata` and `@push.rocks/smartbucket`.
 
+## Commit ancestry
+
+`isAncestor()` answers `git merge-base --is-ancestor` exactly: whether the ancestor commit is reachable from the descendant commit, where a commit is its own ancestor. Both object IDs must be full lowercase SHA-1 or SHA-256 IDs of commits in the repository; revision expressions, abbreviations, and tag objects are refused, so peel a tag before asking.
+
+```ts
+// Throws GitManagerError (error.code) unless the answer is exact.
+const reachableFromMain = await gitManager.isAncestor({
+  org: 'foss.global',
+  repo: 'gitmanager',
+  ancestorObjectId: taggedCommitId,
+  descendantObjectId: mainTipCommitId,
+  timeoutMs: 10_000,
+});
+```
+
+`timeoutMs` is the work budget for the object lookup and the history walk together: 1 to 60000 ms, 10000 by default. When it runs out, the Git process is killed and the call throws. It never returns `false` for anything but an exact answer; the typed codes are `invalidObjectId`, `objectNotFound`, `objectNotCommit`, and `ancestryBudgetExceeded`. The check runs on the serial management channel like the other read APIs.
+
+## Archive inspection
+
+`inspectArchive()` validates a `tar.gz` on the receiving side of a transfer, for example a CI artifact or cache upload. It streams the archive, given as a `Uint8Array` or any async iterable of `Uint8Array` chunks such as a Node stream or a fetch body, into a dedicated engine process. That process checks every entry against the rules GitManager applies to its own source archives and the `@foss.global/ci-spec` archive conformance vectors: safe relative paths, no duplicates or late ancestors, only regular files, directories and symlinks whose targets stay inside the root (including through chains), USTAR and supported PAX metadata only, zeroed padding, no trailing data or concatenated gzip members, and the fixed 134,217,728-byte path-metadata ceiling.
+
+```ts
+const inspection = await gitManager.inspectArchive({
+  archive: uploadStream,
+  maxCompressedBytes: 16 * 1024 ** 3,
+  maxExtractedBytes: 128 * 1024 ** 3,
+  maxEntries: 1_000_000,
+}, { signal });
+// { sizeBytes, sha256, extractedSizeBytes, entryCount, pathMetadataBytes }
+```
+
+The metadata is recomputed from the bytes, so compare it with what the sender declared rather than trusting the declaration. Every limit is inclusive and must be a non-negative safe integer; `maxPathMetadataBytes` is 1 to 134217728 and defaults to the ceiling. A refused archive throws a `GitManagerError` with code `archiveLimitExceeded` (a requested limit) or `archiveRejected` (a format, path, or link rule), and the inspector stops reading at the first violation and closes the source. Aborting the signal or calling `stop()` kills the inspector; the call rejects only after the process exited. The inspection does not use the management channel, so several can run at once.
+
 ## Public API
 
 - `GitManager`: TypeScript facade for the Rust engine lifecycle.
@@ -310,9 +343,12 @@ When Git Smart HTTP is running on a loopback bind, the probe targets the engine'
 - `GitManager.getDiff()`: returns a structured unified diff between a head ref and its first parent or an explicit base ref.
 - `GitManager.listTags()`: lists lightweight and annotated tags with target object metadata.
 - `GitManager.getTag()`: reads one tag by exact name.
+- `GitManager.isAncestor()`: answers exact commit ancestry within a work budget, with typed errors for anything else.
+- `GitManager.inspectArchive(request, { signal? })`: streams a receiver-side `tar.gz` through the engine inspector and returns its recomputed metadata or a typed refusal.
 - `GitManager.running`: local facade running state.
 - `RustGitManagerBridge`: lower-level typed bridge around `@push.rocks/smartrust`.
-- `IGitManagerOptions`, `IGitManagerStatus`, `IGitManagerReadinessOptions`, `TGitManagerReadinessResult`, `TGitManagerReadinessFailureReason`, `IRustGitManagerConfig`, `IGitManagerProtectedRefRule`, `IGitManagerSmartHttpRepositoryProtectedRefs`, `TGitManagerProtectedRefsApplyStatus`, and `IGitManagerProtectedRefsApplyResult`: exported option, status, readiness, and protected-ref contracts.
+- `GitManagerError` and `TGitManagerErrorCode`: typed failures with a stable `code`; `gitManagerArchivePathMetadataCeilingBytes` is the fixed archive path-metadata ceiling.
+- `IGitManagerAncestryRequest`, `IGitManagerArchiveInspectionRequest`, `IGitManagerArchiveInspectionOptions`, `IGitManagerArchiveInspection`, `IGitManagerOptions`, `IGitManagerStatus`, `IGitManagerReadinessOptions`, `TGitManagerReadinessResult`, `TGitManagerReadinessFailureReason`, `IRustGitManagerConfig`, `IGitManagerProtectedRefRule`, `IGitManagerSmartHttpRepositoryProtectedRefs`, `TGitManagerProtectedRefsApplyStatus`, and `IGitManagerProtectedRefsApplyResult`: exported option, status, readiness, and protected-ref contracts.
 
 Repository/read DTO contracts are re-exported from the published `@foss.global/interfaces` package.
 
@@ -339,7 +375,7 @@ pnpm run test:rust
 pnpm run build
 ```
 
-`pnpm test` runs the `pretest` hook first, which builds the Rust binaries with `tsrust`, and then runs lifecycle, bounded readiness, local mirror/read API, raw upload-pack/receive-pack preparation, clone/fetch denial, trusted receive-pack denial, explicit policy initialization, protected create/delete/non-fast-forward enforcement, inherited self-test hardening, restart replay, and real push tests through `smartrust`. `test/test.refinventory.node.ts` covers every ref namespace, peeled and nested tags, symbolic and dangling symbolic refs, unborn HEAD, prefix selection and exact lookup, ref names that are not valid UTF-8, pagination of 1,001 refs, stale and foreign cursors, 50,000 loose and packed refs, and a bundle round trip across namespaces. `test/test.pushlimits.node.ts` covers fixed-length and chunked Smart HTTP pushes over the limit, a complete pack followed by late excess bytes, an over-limit SSH-style receive-pack, an SSH-style receive-pack cut after Git already moved a ref (the update stays), and a bounded `stop()` while a service's output is never read, the rejected cases proving the refs unchanged, no Git or hook process left, no uncaught stream error, the engine serving, and a later push succeeding.
+`pnpm test` runs the `pretest` hook first, which builds the Rust binaries with `tsrust`, and then runs lifecycle, bounded readiness, local mirror/read API, raw upload-pack/receive-pack preparation, clone/fetch denial, trusted receive-pack denial, explicit policy initialization, protected create/delete/non-fast-forward enforcement, inherited self-test hardening, restart replay, and real push tests through `smartrust`. `test/test.refinventory.node.ts` covers every ref namespace, peeled and nested tags, symbolic and dangling symbolic refs, unborn HEAD, prefix selection and exact lookup, ref names that are not valid UTF-8, pagination of 1,001 refs, stale and foreign cursors, 50,000 loose and packed refs, and a bundle round trip across namespaces. `test/test.pushlimits.node.ts` covers fixed-length and chunked Smart HTTP pushes over the limit, a complete pack followed by late excess bytes, an over-limit SSH-style receive-pack, an SSH-style receive-pack cut after Git already moved a ref (the update stays), and a bounded `stop()` while a service's output is never read, the rejected cases proving the refs unchanged, no Git or hook process left, no uncaught stream error, the engine serving, and a later push succeeding. `test/test.ancestry.node.ts` covers ancestors, the reverse direction, siblings, merges, unrelated histories, the same commit, invalid, missing and non-commit objects, a budget exceeded on a 20,000-commit history next to the exact answer, and a stalled walk whose Git process is killed. `test/test.archiveinspection.node.ts` runs every ci-spec archive conformance vector through `inspectArchive()` as bytes and as a chunked stream, the compressed limit at its boundary, an 8 MiB streamed archive, an early refusal that closes the source, and abort, source failure and `stop()` during an inspection.
 
 ## License and Legal Information
 

package/thirdparty.md

@@ -2,6 +2,8 @@
 
 This package bundles Rust binaries in `dist_rust/`. Those binaries are built from the Rust crates listed below. Each dependency remains licensed by its respective authors under the stated license expression.
 
+The generated `native-notices/` directory ships the complete license texts, including jemalloc 5.3.1's BSD-2-Clause COPYING bundled by `tikv-jemalloc-sys`, the Rust runtime and platform runtime notices.
+
 | Crate | Version | License |
 | --- | --- | --- |
 | adler2 | 2.0.1 | 0BSD OR MIT OR Apache-2.0 |
@@ -19,6 +21,7 @@ This package bundles Rust binaries in `dist_rust/`. Those binaries are built fro
 | bitflags | 2.13.0 | Apache-2.0 OR MIT |
 | block-buffer | 0.10.4 | MIT OR Apache-2.0 |
 | bytes | 1.12.0 | MIT |
+| cc | 1.8.0 | MIT OR Apache-2.0 |
 | cfg-if | 1.0.4 | Apache-2.0 OR MIT |
 | clap | 4.6.1 | Apache-2.0 OR MIT |
 | clap_builder | 4.6.0 | Apache-2.0 OR MIT |
@@ -30,6 +33,7 @@ This package bundles Rust binaries in `dist_rust/`. Those binaries are built fro
 | crypto-common | 0.1.7 | MIT OR Apache-2.0 |
 | digest | 0.10.7 | MIT OR Apache-2.0 |
 | errno | 0.3.14 | Apache-2.0 OR MIT |
+| find-msvc-tools | 0.1.14 | MIT OR Apache-2.0 |
 | flate2 | 1.1.9 | MIT OR Apache-2.0 |
 | form_urlencoded | 1.2.2 | Apache-2.0 OR MIT |
 | futures-channel | 0.3.33 | Apache-2.0 OR MIT |
@@ -81,6 +85,7 @@ This package bundles Rust binaries in `dist_rust/`. Those binaries are built fro
 | serde_urlencoded | 0.7.1 | Apache-2.0 OR MIT |
 | sha2 | 0.10.9 | MIT OR Apache-2.0 |
 | sharded-slab | 0.1.7 | MIT |
+| shlex | 2.0.1 | MIT OR Apache-2.0 |
 | signal-hook-registry | 1.4.8 | Apache-2.0 OR MIT |
 | simd-adler32 | 0.3.10 | MIT |
 | slab | 0.4.12 | MIT |
@@ -90,6 +95,8 @@ This package bundles Rust binaries in `dist_rust/`. Those binaries are built fro
 | syn | 2.0.118 | Apache-2.0 OR MIT |
 | sync_wrapper | 1.0.2 | Apache-2.0 |
 | thread_local | 1.1.9 | Apache-2.0 OR MIT |
+| tikv-jemalloc-sys | 0.7.1+5.3.1-0-g81034ce1f1373e37dc865038e1bc8eeecf559ce8 | MIT OR Apache-2.0 |
+| tikv-jemallocator | 0.7.0 | MIT OR Apache-2.0 |
 | tokio | 1.52.3 | MIT |
 | tokio-macros | 2.7.0 | MIT |
 | tokio-stream | 0.1.18 | MIT |

package/ts/00_commitinfo_data.ts

@@ -3,6 +3,6 @@
  */
 export const commitinfo = {
   name: '@foss.global/gitmanager',
-  version: '2.0.0',
+  version: '2.2.0',
   description: 'Headless Git manager for the foss.global Git platform, with a TypeScript API and Rust engine.'
 }