@lepid-labs/weft-core 0.1.0

package/dist/fetch/auth.js

@@ -0,0 +1,38 @@
+import { execFile } from "node:child_process";
+import { promisify } from "node:util";
+const run = promisify(execFile);
+/**
+ * Resolve a GitHub token: `GH_TOKEN`, then `GITHUB_TOKEN`, then `gh auth token`
+ * when the GitHub CLI is on PATH. No credential store of our own — anyone with
+ * a private repo to fetch already has one of these.
+ */
+export async function resolveToken(env = process.env) {
+    const fromEnv = env.GH_TOKEN?.trim() || env.GITHUB_TOKEN?.trim();
+    if (fromEnv)
+        return fromEnv;
+    try {
+        const { stdout } = await run("gh", ["auth", "token"], { windowsHide: true });
+        return stdout.trim() || undefined;
+    }
+    catch {
+        return undefined;
+    }
+}
+/**
+ * Environment that hands git an Authorization header for github.com.
+ *
+ * Passed as `GIT_CONFIG_*` variables rather than `-c` arguments or a rewritten
+ * remote URL, so the token never lands in a process listing or in the cached
+ * clone's `.git/config`.
+ */
+export function gitAuthEnv(token) {
+    if (!token)
+        return {};
+    const basic = Buffer.from(`x-access-token:${token}`).toString("base64");
+    return {
+        GIT_CONFIG_COUNT: "1",
+        GIT_CONFIG_KEY_0: "http.https://github.com/.extraheader",
+        GIT_CONFIG_VALUE_0: `Authorization: Basic ${basic}`,
+    };
+}
+//# sourceMappingURL=auth.js.map

package/dist/fetch/auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../src/fetch/auth.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAEtC,MAAM,GAAG,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;AAEhC;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CACjC,MAAyB,OAAO,CAAC,GAAG;IAEpC,MAAM,OAAO,GAAG,GAAG,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,GAAG,CAAC,YAAY,EAAE,IAAI,EAAE,CAAC;IACjE,IAAI,OAAO;QAAE,OAAO,OAAO,CAAC;IAC5B,IAAI,CAAC;QACJ,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC;QAC7E,OAAO,MAAM,CAAC,IAAI,EAAE,IAAI,SAAS,CAAC;IACnC,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,SAAS,CAAC;IAClB,CAAC;AACF,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,UAAU,CAAC,KAAyB;IACnD,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,CAAC;IACtB,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,kBAAkB,KAAK,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACxE,OAAO;QACN,gBAAgB,EAAE,GAAG;QACrB,gBAAgB,EAAE,sCAAsC;QACxD,kBAAkB,EAAE,wBAAwB,KAAK,EAAE;KACnD,CAAC;AACH,CAAC"}

package/dist/fetch/cache.d.ts

@@ -0,0 +1,25 @@
+/**
+ * How long a branch's ref→sha resolution is trusted before `ls-remote` runs
+ * again. A sha or tag record never expires — the clone it names cannot change.
+ */
+export declare const REF_TTL_MS: number;
+/**
+ * Root of the fetch cache: `WEFT_CACHE_DIR`, else `$XDG_CACHE_HOME/weft`,
+ * else `~/.cache/weft`.
+ */
+export declare function cacheRoot(env?: NodeJS.ProcessEnv): string;
+/**
+ * Where a fetched repo lands, keyed by resolved commit sha so a moved branch
+ * invalidates cleanly: `<cache>/github.com/<org>/<repo>/<sha>`.
+ */
+export declare function repoCacheDir(identity: string, sha: string, env?: NodeJS.ProcessEnv): string;
+/**
+ * True when a path lies inside the fetch cache — a fetched checkout, which is
+ * read-only by construction and never worth watching for edits.
+ */
+export declare function isCachePath(absPath: string, env?: NodeJS.ProcessEnv): boolean;
+/** The remembered sha for a ref, or undefined when there is none or it has aged out. */
+export declare function readCachedSha(identity: string, ref: string, env?: NodeJS.ProcessEnv): string | undefined;
+/** Remember a ref resolution for {@link readCachedSha}. */
+export declare function writeCachedSha(identity: string, ref: string, sha: string, movable: boolean, env?: NodeJS.ProcessEnv): void;
+//# sourceMappingURL=cache.d.ts.map

package/dist/fetch/cache.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cache.d.ts","sourceRoot":"","sources":["../../src/fetch/cache.ts"],"names":[],"mappings":"AAIA;;;GAGG;AACH,eAAO,MAAM,UAAU,QAAiB,CAAC;AAEzC;;;GAGG;AACH,wBAAgB,SAAS,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,MAAM,CAItE;AAED;;;GAGG;AACH,wBAAgB,YAAY,CAC3B,QAAQ,EAAE,MAAM,EAChB,GAAG,EAAE,MAAM,EACX,GAAG,GAAE,MAAM,CAAC,UAAwB,GAClC,MAAM,CAER;AAED;;;GAGG;AACH,wBAAgB,WAAW,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,OAAO,CAG1F;AAyBD,wFAAwF;AACxF,wBAAgB,aAAa,CAC5B,QAAQ,EAAE,MAAM,EAChB,GAAG,EAAE,MAAM,EACX,GAAG,GAAE,MAAM,CAAC,UAAwB,GAClC,MAAM,GAAG,SAAS,CAKpB;AAED,2DAA2D;AAC3D,wBAAgB,cAAc,CAC7B,QAAQ,EAAE,MAAM,EAChB,GAAG,EAAE,MAAM,EACX,GAAG,EAAE,MAAM,EACX,OAAO,EAAE,OAAO,EAChB,GAAG,GAAE,MAAM,CAAC,UAAwB,GAClC,IAAI,CAMN"}

package/dist/fetch/cache.js

@@ -0,0 +1,68 @@
+import { existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
+import { homedir } from "node:os";
+import { dirname, isAbsolute, join, relative, resolve } from "node:path";
+/**
+ * How long a branch's ref→sha resolution is trusted before `ls-remote` runs
+ * again. A sha or tag record never expires — the clone it names cannot change.
+ */
+export const REF_TTL_MS = 15 * 60 * 1000;
+/**
+ * Root of the fetch cache: `WEFT_CACHE_DIR`, else `$XDG_CACHE_HOME/weft`,
+ * else `~/.cache/weft`.
+ */
+export function cacheRoot(env = process.env) {
+    if (env.WEFT_CACHE_DIR)
+        return resolve(env.WEFT_CACHE_DIR);
+    const base = env.XDG_CACHE_HOME ? resolve(env.XDG_CACHE_HOME) : join(homedir(), ".cache");
+    return join(base, "weft");
+}
+/**
+ * Where a fetched repo lands, keyed by resolved commit sha so a moved branch
+ * invalidates cleanly: `<cache>/github.com/<org>/<repo>/<sha>`.
+ */
+export function repoCacheDir(identity, sha, env = process.env) {
+    return join(cacheRoot(env), "github.com", identity, sha);
+}
+/**
+ * True when a path lies inside the fetch cache — a fetched checkout, which is
+ * read-only by construction and never worth watching for edits.
+ */
+export function isCachePath(absPath, env = process.env) {
+    const rel = relative(cacheRoot(env), resolve(absPath));
+    return rel !== "" && !rel.startsWith("..") && !isAbsolute(rel);
+}
+function refRecordPath(identity, env) {
+    return join(cacheRoot(env), "github.com", identity, "refs.json");
+}
+function readRecords(path) {
+    if (!existsSync(path))
+        return {};
+    try {
+        const parsed = JSON.parse(readFileSync(path, "utf8"));
+        if (typeof parsed !== "object" || parsed === null || Array.isArray(parsed))
+            return {};
+        return parsed;
+    }
+    catch {
+        // An unreadable record only costs one ls-remote.
+        return {};
+    }
+}
+/** The remembered sha for a ref, or undefined when there is none or it has aged out. */
+export function readCachedSha(identity, ref, env = process.env) {
+    const record = readRecords(refRecordPath(identity, env))[ref];
+    if (!record?.sha)
+        return undefined;
+    if (record.movable && Date.now() - Date.parse(record.resolvedAt) > REF_TTL_MS)
+        return undefined;
+    return record.sha;
+}
+/** Remember a ref resolution for {@link readCachedSha}. */
+export function writeCachedSha(identity, ref, sha, movable, env = process.env) {
+    const path = refRecordPath(identity, env);
+    const records = readRecords(path);
+    records[ref] = { sha, resolvedAt: new Date().toISOString(), movable };
+    mkdirSync(dirname(path), { recursive: true });
+    writeFileSync(path, JSON.stringify(records, null, 2));
+}
+//# sourceMappingURL=cache.js.map

package/dist/fetch/cache.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cache.js","sourceRoot":"","sources":["../../src/fetch/cache.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC7E,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEzE;;;GAGG;AACH,MAAM,CAAC,MAAM,UAAU,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAEzC;;;GAGG;AACH,MAAM,UAAU,SAAS,CAAC,MAAyB,OAAO,CAAC,GAAG;IAC7D,IAAI,GAAG,CAAC,cAAc;QAAE,OAAO,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;IAC3D,MAAM,IAAI,GAAG,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,QAAQ,CAAC,CAAC;IAC1F,OAAO,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;AAC3B,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,YAAY,CAC3B,QAAgB,EAChB,GAAW,EACX,MAAyB,OAAO,CAAC,GAAG;IAEpC,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,YAAY,EAAE,QAAQ,EAAE,GAAG,CAAC,CAAC;AAC1D,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,WAAW,CAAC,OAAe,EAAE,MAAyB,OAAO,CAAC,GAAG;IAChF,MAAM,GAAG,GAAG,QAAQ,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;IACvD,OAAO,GAAG,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;AAChE,CAAC;AASD,SAAS,aAAa,CAAC,QAAgB,EAAE,GAAsB;IAC9D,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,YAAY,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC;AAClE,CAAC;AAED,SAAS,WAAW,CAAC,IAAY;IAChC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,CAAC;IACjC,IAAI,CAAC;QACJ,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;QAC/D,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;YAAE,OAAO,EAAE,CAAC;QACtF,OAAO,MAAmC,CAAC;IAC5C,CAAC;IAAC,MAAM,CAAC;QACR,iDAAiD;QACjD,OAAO,EAAE,CAAC;IACX,CAAC;AACF,CAAC;AAED,wFAAwF;AACxF,MAAM,UAAU,aAAa,CAC5B,QAAgB,EAChB,GAAW,EACX,MAAyB,OAAO,CAAC,GAAG;IAEpC,MAAM,MAAM,GAAG,WAAW,CAAC,aAAa,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IAC9D,IAAI,CAAC,MAAM,EAAE,GAAG;QAAE,OAAO,SAAS,CAAC;IACnC,IAAI,MAAM,CAAC,OAAO,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,UAAU;QAAE,OAAO,SAAS,CAAC;IAChG,OAAO,MAAM,CAAC,GAAG,CAAC;AACnB,CAAC;AAED,2DAA2D;AAC3D,MAAM,UAAU,cAAc,CAC7B,QAAgB,EAChB,GAAW,EACX,GAAW,EACX,OAAgB,EAChB,MAAyB,OAAO,CAAC,GAAG;IAEpC,MAAM,IAAI,GAAG,aAAa,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;IAC1C,MAAM,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;IAClC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,OAAO,EAAE,CAAC;IACtE,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9C,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;AACvD,CAAC"}

package/dist/fetch/cache.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=cache.test.d.ts.map

package/dist/fetch/cache.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cache.test.d.ts","sourceRoot":"","sources":["../../src/fetch/cache.test.ts"],"names":[],"mappings":""}

package/dist/fetch/cache.test.js

@@ -0,0 +1,73 @@
+import { mkdirSync, mkdtempSync, rmSync, writeFileSync } from "node:fs";
+import { tmpdir } from "node:os";
+import { join, resolve } from "node:path";
+import { afterAll, beforeAll, describe, expect, it } from "vitest";
+import { gitAuthEnv, resolveToken } from "./auth.js";
+import { REF_TTL_MS, cacheRoot, isCachePath, readCachedSha, repoCacheDir, writeCachedSha, } from "./cache.js";
+const SHA = "a".repeat(40);
+let tmp;
+let env;
+beforeAll(() => {
+    tmp = mkdtempSync(join(tmpdir(), "weft-fetch-cache-"));
+    env = { WEFT_CACHE_DIR: tmp };
+});
+afterAll(() => rmSync(tmp, { recursive: true, force: true }));
+describe("resolveToken", () => {
+    it("prefers GH_TOKEN over GITHUB_TOKEN", async () => {
+        await expect(resolveToken({ GH_TOKEN: "gh", GITHUB_TOKEN: "hub" })).resolves.toBe("gh");
+        await expect(resolveToken({ GITHUB_TOKEN: "hub" })).resolves.toBe("hub");
+    });
+    it("ignores a blank variable", async () => {
+        await expect(resolveToken({ GH_TOKEN: "  ", GITHUB_TOKEN: "hub" })).resolves.toBe("hub");
+    });
+});
+describe("gitAuthEnv", () => {
+    it("scopes a basic Authorization header to github.com via GIT_CONFIG variables", () => {
+        const authEnv = gitAuthEnv("t0ken");
+        expect(authEnv.GIT_CONFIG_KEY_0).toBe("http.https://github.com/.extraheader");
+        expect(authEnv.GIT_CONFIG_VALUE_0).toBe(`Authorization: Basic ${Buffer.from("x-access-token:t0ken").toString("base64")}`);
+    });
+    it("is empty without a token", () => {
+        expect(gitAuthEnv(undefined)).toEqual({});
+        expect(gitAuthEnv("")).toEqual({});
+    });
+});
+describe("cache layout", () => {
+    it("honors WEFT_CACHE_DIR, then XDG_CACHE_HOME", () => {
+        expect(cacheRoot({ WEFT_CACHE_DIR: tmp })).toBe(resolve(tmp));
+        expect(cacheRoot({ XDG_CACHE_HOME: tmp })).toBe(join(resolve(tmp), "weft"));
+    });
+    it("keys a checkout by host, identity and sha", () => {
+        expect(repoCacheDir("acme/alpha", SHA, env)).toBe(join(tmp, "github.com", "acme/alpha", SHA));
+    });
+    it("recognizes paths inside the cache and only those", () => {
+        expect(isCachePath(join(tmp, "github.com", "acme", "alpha", SHA), env)).toBe(true);
+        expect(isCachePath(tmp, env)).toBe(false);
+        expect(isCachePath(join(tmpdir(), "elsewhere"), env)).toBe(false);
+    });
+});
+describe("ref records", () => {
+    it("round-trips a resolution", () => {
+        writeCachedSha("acme/alpha", "v1", SHA, false, env);
+        expect(readCachedSha("acme/alpha", "v1", env)).toBe(SHA);
+    });
+    it("expires a branch resolution after the TTL, but never a tag's", () => {
+        const stale = new Date(Date.now() - REF_TTL_MS - 1000).toISOString();
+        const path = join(tmp, "github.com", "acme/beta", "refs.json");
+        mkdirSync(join(tmp, "github.com", "acme/beta"), { recursive: true });
+        writeFileSync(path, JSON.stringify({
+            main: { sha: SHA, resolvedAt: stale, movable: true },
+            v1: { sha: SHA, resolvedAt: stale, movable: false },
+        }));
+        expect(readCachedSha("acme/beta", "main", env)).toBeUndefined();
+        expect(readCachedSha("acme/beta", "v1", env)).toBe(SHA);
+    });
+    it("returns undefined for an unknown ref or unreadable record", () => {
+        expect(readCachedSha("acme/alpha", "nope", env)).toBeUndefined();
+        const path = join(tmp, "github.com", "acme/gamma", "refs.json");
+        mkdirSync(join(tmp, "github.com", "acme/gamma"), { recursive: true });
+        writeFileSync(path, "not json");
+        expect(readCachedSha("acme/gamma", "main", env)).toBeUndefined();
+    });
+});
+//# sourceMappingURL=cache.test.js.map

package/dist/fetch/cache.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cache.test.js","sourceRoot":"","sources":["../../src/fetch/cache.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACxE,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AACnE,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AACrD,OAAO,EACN,UAAU,EACV,SAAS,EACT,WAAW,EACX,aAAa,EACb,YAAY,EACZ,cAAc,GACd,MAAM,YAAY,CAAC;AAEpB,MAAM,GAAG,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;AAE3B,IAAI,GAAW,CAAC;AAChB,IAAI,GAAsB,CAAC;AAE3B,SAAS,CAAC,GAAG,EAAE;IACd,GAAG,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,mBAAmB,CAAC,CAAC,CAAC;IACvD,GAAG,GAAG,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC;AAC/B,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;AAE9D,QAAQ,CAAC,cAAc,EAAE,GAAG,EAAE;IAC7B,EAAE,CAAC,oCAAoC,EAAE,KAAK,IAAI,EAAE;QACnD,MAAM,MAAM,CAAC,YAAY,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACxF,MAAM,MAAM,CAAC,YAAY,CAAC,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC1E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0BAA0B,EAAE,KAAK,IAAI,EAAE;QACzC,MAAM,MAAM,CAAC,YAAY,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC1F,CAAC,CAAC,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,YAAY,EAAE,GAAG,EAAE;IAC3B,EAAE,CAAC,4EAA4E,EAAE,GAAG,EAAE;QACrF,MAAM,OAAO,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC;QACpC,MAAM,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC,IAAI,CAAC,sCAAsC,CAAC,CAAC;QAC9E,MAAM,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC,IAAI,CACtC,wBAAwB,MAAM,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAChF,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0BAA0B,EAAE,GAAG,EAAE;QACnC,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAC1C,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACpC,CAAC,CAAC,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,cAAc,EAAE,GAAG,EAAE;IAC7B,EAAE,CAAC,4CAA4C,EAAE,GAAG,EAAE;QACrD,MAAM,CAAC,SAAS,CAAC,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;QAC9D,MAAM,CAAC,SAAS,CAAC,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;IAC7E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2CAA2C,EAAE,GAAG,EAAE;QACpD,MAAM,CAAC,YAAY,CAAC,YAAY,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,YAAY,EAAE,YAAY,EAAE,GAAG,CAAC,CAAC,CAAC;IAC/F,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kDAAkD,EAAE,GAAG,EAAE;QAC3D,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,EAAE,YAAY,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACnF,MAAM,CAAC,WAAW,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC1C,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,WAAW,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACnE,CAAC,CAAC,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,aAAa,EAAE,GAAG,EAAE;IAC5B,EAAE,CAAC,0BAA0B,EAAE,GAAG,EAAE;QACnC,cAAc,CAAC,YAAY,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;QACpD,MAAM,CAAC,aAAa,CAAC,YAAY,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC1D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8DAA8D,EAAE,GAAG,EAAE;QACvE,MAAM,KAAK,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,UAAU,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;QACrE,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,YAAY,EAAE,WAAW,EAAE,WAAW,CAAC,CAAC;QAC/D,SAAS,CAAC,IAAI,CAAC,GAAG,EAAE,YAAY,EAAE,WAAW,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACrE,aAAa,CACZ,IAAI,EACJ,IAAI,CAAC,SAAS,CAAC;YACd,IAAI,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,UAAU,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE;YACpD,EAAE,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,UAAU,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE;SACnD,CAAC,CACF,CAAC;QAEF,MAAM,CAAC,aAAa,CAAC,WAAW,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;QAChE,MAAM,CAAC,aAAa,CAAC,WAAW,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACzD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2DAA2D,EAAE,GAAG,EAAE;QACpE,MAAM,CAAC,aAAa,CAAC,YAAY,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;QACjE,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,YAAY,EAAE,YAAY,EAAE,WAAW,CAAC,CAAC;QAChE,SAAS,CAAC,IAAI,CAAC,GAAG,EAAE,YAAY,EAAE,YAAY,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACtE,aAAa,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;QAChC,MAAM,CAAC,aAAa,CAAC,YAAY,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;IAClE,CAAC,CAAC,CAAC;AACJ,CAAC,CAAC,CAAC"}

package/dist/fetch/clone.d.ts

@@ -0,0 +1,26 @@
+/** The HTTPS clone URL for a repo identity. */
+export declare function githubUrl(identity: string): string;
+/** A resolved remote ref. `movable` is true when it named a branch (or HEAD). */
+export interface ResolvedRef {
+    sha: string;
+    movable: boolean;
+}
+/**
+ * Resolve a ref to a commit sha with `ls-remote`. No ref means the remote HEAD.
+ * A full sha resolves to itself without touching the network.
+ */
+export declare function resolveRemoteRef(url: string, ref: string | undefined, token?: string): Promise<ResolvedRef>;
+/**
+ * Materialize a repo at a commit into `dir` as a blobless partial clone.
+ *
+ * `--filter=blob:none` keeps every commit and tree, so `git log` — and with it
+ * every `modified` date and history-reading rule — answers exactly as it would
+ * over a full checkout; only file content is fetched on demand at checkout.
+ * A tarball would be smaller and silently date-less, the failure mode the
+ * issue tracker calls out.
+ *
+ * Idempotent per directory: a completed clone is reused, an interrupted one
+ * is discarded and redone.
+ */
+export declare function cloneAtSha(url: string, sha: string, dir: string, token?: string): Promise<void>;
+//# sourceMappingURL=clone.d.ts.map

package/dist/fetch/clone.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"clone.d.ts","sourceRoot":"","sources":["../../src/fetch/clone.ts"],"names":[],"mappings":"AAiBA,+CAA+C;AAC/C,wBAAgB,SAAS,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAElD;AA6BD,iFAAiF;AACjF,MAAM,WAAW,WAAW;IAC3B,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE,OAAO,CAAC;CACjB;AAED;;;GAGG;AACH,wBAAsB,gBAAgB,CACrC,GAAG,EAAE,MAAM,EACX,GAAG,EAAE,MAAM,GAAG,SAAS,EACvB,KAAK,CAAC,EAAE,MAAM,GACZ,OAAO,CAAC,WAAW,CAAC,CA6BtB;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,UAAU,CAC/B,GAAG,EAAE,MAAM,EACX,GAAG,EAAE,MAAM,EACX,GAAG,EAAE,MAAM,EACX,KAAK,CAAC,EAAE,MAAM,GACZ,OAAO,CAAC,IAAI,CAAC,CAkBf"}

package/dist/fetch/clone.js

@@ -0,0 +1,105 @@
+import { execFile } from "node:child_process";
+import { existsSync, mkdirSync, rmSync, writeFileSync } from "node:fs";
+import { dirname, join } from "node:path";
+import { promisify } from "node:util";
+import { gitAuthEnv } from "./auth.js";
+const exec = promisify(execFile);
+/** A full object id, which needs no ls-remote to resolve. */
+const FULL_SHA = /^[0-9a-f]{40}$/;
+/**
+ * Marks a cache entry whose clone ran to completion. Written last, so an
+ * interrupted clone leaves a directory that reads as absent and is redone.
+ */
+const COMPLETE_MARKER = "weft-complete";
+/** The HTTPS clone URL for a repo identity. */
+export function githubUrl(identity) {
+    return `https://github.com/${identity}.git`;
+}
+async function git(args, token) {
+    const { stdout } = await exec("git", args, {
+        windowsHide: true,
+        // Never prompt for credentials — fail instead, so the error below can say
+        // what to set.
+        env: { ...process.env, GIT_TERMINAL_PROMPT: "0", ...gitAuthEnv(token) },
+    });
+    return stdout;
+}
+/**
+ * GitHub reports a private repo it will not serve exactly as it reports a repo
+ * that does not exist, so the error has to say both.
+ */
+function fetchError(what, token, cause) {
+    const stderr = cause?.stderr?.trim();
+    return new Error([
+        `weft fetch: could not fetch ${what} — the repository was not found, or you do not have access.`,
+        token
+            ? "A token was supplied; check that it can read this repository."
+            : "For a private repository, set GH_TOKEN or GITHUB_TOKEN, or run `gh auth login`.",
+        ...(stderr ? [stderr] : []),
+    ].join("\n"));
+}
+/**
+ * Resolve a ref to a commit sha with `ls-remote`. No ref means the remote HEAD.
+ * A full sha resolves to itself without touching the network.
+ */
+export async function resolveRemoteRef(url, ref, token) {
+    if (ref && FULL_SHA.test(ref))
+        return { sha: ref, movable: false };
+    const patterns = ref ? [ref, `${ref}^{}`] : ["HEAD"];
+    let stdout;
+    try {
+        stdout = await git(["ls-remote", url, ...patterns], token);
+    }
+    catch (err) {
+        throw fetchError(ref ? `${url} at "${ref}"` : url, token, err);
+    }
+    const lines = stdout
+        .split("\n")
+        .filter(Boolean)
+        .map((line) => line.split("\t"));
+    if (lines.length === 0) {
+        throw fetchError(`${url} at "${ref ?? "HEAD"}" (no such ref)`, token, undefined);
+    }
+    const byName = new Map(lines.map(([sha, name]) => [name, sha]));
+    const branch = ref ? byName.get(`refs/heads/${ref}`) : byName.get("HEAD");
+    // The peeled entry first: an annotated tag's own sha is not a commit.
+    const sha = branch ??
+        byName.get(`refs/tags/${ref}^{}`) ??
+        byName.get(`refs/tags/${ref}`) ??
+        byName.get(ref) ??
+        lines[0][0];
+    return { sha, movable: branch !== undefined };
+}
+/**
+ * Materialize a repo at a commit into `dir` as a blobless partial clone.
+ *
+ * `--filter=blob:none` keeps every commit and tree, so `git log` — and with it
+ * every `modified` date and history-reading rule — answers exactly as it would
+ * over a full checkout; only file content is fetched on demand at checkout.
+ * A tarball would be smaller and silently date-less, the failure mode the
+ * issue tracker calls out.
+ *
+ * Idempotent per directory: a completed clone is reused, an interrupted one
+ * is discarded and redone.
+ */
+export async function cloneAtSha(url, sha, dir, token) {
+    if (existsSync(join(dir, ".git", COMPLETE_MARKER)))
+        return;
+    rmSync(dir, { recursive: true, force: true });
+    mkdirSync(dirname(dir), { recursive: true });
+    try {
+        await git(["init", "-q", dir], token);
+        await git(["-C", dir, "remote", "add", "origin", url], token);
+        // Fetching the sha itself (GitHub allows reachable-sha-in-want) rather
+        // than a ref name, so the checkout is exactly what ls-remote resolved
+        // even if the branch has moved since.
+        await git(["-C", dir, "fetch", "-q", "--filter=blob:none", "origin", sha], token);
+        await git(["-C", dir, "-c", "advice.detachedHead=false", "checkout", "-q", sha], token);
+    }
+    catch (err) {
+        rmSync(dir, { recursive: true, force: true });
+        throw fetchError(`${url} at ${sha}`, token, err);
+    }
+    writeFileSync(join(dir, ".git", COMPLETE_MARKER), "");
+}
+//# sourceMappingURL=clone.js.map

package/dist/fetch/clone.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"clone.js","sourceRoot":"","sources":["../../src/fetch/clone.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACvE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAEvC,MAAM,IAAI,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;AAEjC,6DAA6D;AAC7D,MAAM,QAAQ,GAAG,gBAAgB,CAAC;AAElC;;;GAGG;AACH,MAAM,eAAe,GAAG,eAAe,CAAC;AAExC,+CAA+C;AAC/C,MAAM,UAAU,SAAS,CAAC,QAAgB;IACzC,OAAO,sBAAsB,QAAQ,MAAM,CAAC;AAC7C,CAAC;AAED,KAAK,UAAU,GAAG,CAAC,IAAc,EAAE,KAAyB;IAC3D,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE;QAC1C,WAAW,EAAE,IAAI;QACjB,0EAA0E;QAC1E,eAAe;QACf,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,mBAAmB,EAAE,GAAG,EAAE,GAAG,UAAU,CAAC,KAAK,CAAC,EAAE;KACvE,CAAC,CAAC;IACH,OAAO,MAAM,CAAC;AACf,CAAC;AAED;;;GAGG;AACH,SAAS,UAAU,CAAC,IAAY,EAAE,KAAyB,EAAE,KAAc;IAC1E,MAAM,MAAM,GAAI,KAA6B,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IAC9D,OAAO,IAAI,KAAK,CACf;QACC,+BAA+B,IAAI,6DAA6D;QAChG,KAAK;YACJ,CAAC,CAAC,+DAA+D;YACjE,CAAC,CAAC,iFAAiF;QACpF,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;KAC3B,CAAC,IAAI,CAAC,IAAI,CAAC,CACZ,CAAC;AACH,CAAC;AAQD;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACrC,GAAW,EACX,GAAuB,EACvB,KAAc;IAEd,IAAI,GAAG,IAAI,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAEnE,MAAM,QAAQ,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IACrD,IAAI,MAAc,CAAC;IACnB,IAAI,CAAC;QACJ,MAAM,GAAG,MAAM,GAAG,CAAC,CAAC,WAAW,EAAE,GAAG,EAAE,GAAG,QAAQ,CAAC,EAAE,KAAK,CAAC,CAAC;IAC5D,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACd,MAAM,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,GAAG,QAAQ,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;IAChE,CAAC;IAED,MAAM,KAAK,GAAG,MAAM;SAClB,KAAK,CAAC,IAAI,CAAC;SACX,MAAM,CAAC,OAAO,CAAC;SACf,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAqB,CAAC,CAAC;IACtD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,MAAM,UAAU,CAAC,GAAG,GAAG,QAAQ,GAAG,IAAI,MAAM,iBAAiB,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC;IAClF,CAAC;IAED,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;IAChE,MAAM,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,cAAc,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAC1E,sEAAsE;IACtE,MAAM,GAAG,GACR,MAAM;QACN,MAAM,CAAC,GAAG,CAAC,aAAa,GAAG,KAAK,CAAC;QACjC,MAAM,CAAC,GAAG,CAAC,aAAa,GAAG,EAAE,CAAC;QAC9B,MAAM,CAAC,GAAG,CAAC,GAAa,CAAC;QACzB,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACb,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,KAAK,SAAS,EAAE,CAAC;AAC/C,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAC/B,GAAW,EACX,GAAW,EACX,GAAW,EACX,KAAc;IAEd,IAAI,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,eAAe,CAAC,CAAC;QAAE,OAAO;IAE3D,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9C,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7C,IAAI,CAAC;QACJ,MAAM,GAAG,CAAC,CAAC,MAAM,EAAE,IAAI,EAAE,GAAG,CAAC,EAAE,KAAK,CAAC,CAAC;QACtC,MAAM,GAAG,CAAC,CAAC,IAAI,EAAE,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,CAAC,EAAE,KAAK,CAAC,CAAC;QAC9D,uEAAuE;QACvE,sEAAsE;QACtE,sCAAsC;QACtC,MAAM,GAAG,CAAC,CAAC,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,oBAAoB,EAAE,QAAQ,EAAE,GAAG,CAAC,EAAE,KAAK,CAAC,CAAC;QAClF,MAAM,GAAG,CAAC,CAAC,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,2BAA2B,EAAE,UAAU,EAAE,IAAI,EAAE,GAAG,CAAC,EAAE,KAAK,CAAC,CAAC;IACzF,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACd,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9C,MAAM,UAAU,CAAC,GAAG,GAAG,OAAO,GAAG,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;IAClD,CAAC;IACD,aAAa,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,eAAe,CAAC,EAAE,EAAE,CAAC,CAAC;AACvD,CAAC"}

package/dist/fetch/fetch.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=fetch.test.d.ts.map

package/dist/fetch/fetch.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fetch.test.d.ts","sourceRoot":"","sources":["../../src/fetch/fetch.test.ts"],"names":[],"mappings":""}

package/dist/fetch/fetch.test.js

@@ -0,0 +1,167 @@
+import { execFileSync } from "node:child_process";
+import { existsSync, mkdirSync, mkdtempSync, rmSync, writeFileSync } from "node:fs";
+import { tmpdir } from "node:os";
+import { join } from "node:path";
+import { pathToFileURL } from "node:url";
+import { afterAll, beforeAll, describe, expect, it } from "vitest";
+import { lastCommitDates } from "../git.js";
+import { buildManifest } from "../manifest.js";
+import { repoCacheDir } from "./cache.js";
+import { cloneAtSha, resolveRemoteRef } from "./clone.js";
+import { fetchRepo, resolveFetchedRepos } from "./resolve.js";
+/**
+ * The whole fetch path against a local `file://` remote: ref resolution,
+ * blobless cloning with history intact, cache reuse, and filling a config's
+ * `repos` gaps by fetching — with a real local checkout still winning.
+ */
+const COMMIT_DATE = "2026-03-04T00:00:00+00:00";
+let workspace;
+let remote;
+let remoteUrl;
+let cacheDir;
+let env;
+let headSha;
+/** file:// transport, no token, cache under the workspace. */
+const opts = () => ({ token: "", urlFor: () => remoteUrl, env });
+function git(cwd, ...args) {
+    return execFileSync("git", args, { cwd, encoding: "utf8" }).trim();
+}
+beforeAll(() => {
+    workspace = mkdtempSync(join(tmpdir(), "weft-fetch-"));
+    cacheDir = join(workspace, "cache");
+    env = { WEFT_CACHE_DIR: cacheDir };
+    remote = join(workspace, "remote");
+    mkdirSync(join(remote, "docs"), { recursive: true });
+    writeFileSync(join(remote, "docs", "README.md"), "# Fetched\n\n[Guide](guide.md)\n");
+    writeFileSync(join(remote, "docs", "guide.md"), "# Guide\n");
+    writeFileSync(join(remote, "weft.config.yaml"), "docsDir: docs\n");
+    git(remote, "init", "-q");
+    git(remote, "config", "user.email", "test@example.com");
+    git(remote, "config", "user.name", "Test");
+    git(remote, "config", "commit.gpgsign", "false");
+    // What GitHub's servers allow: partial clones, and fetching by sha.
+    git(remote, "config", "uploadpack.allowFilter", "true");
+    git(remote, "config", "uploadpack.allowReachableSHA1InWant", "true");
+    git(remote, "add", "-A");
+    git(remote, "commit", "-q", "-m", "init", "--date", COMMIT_DATE);
+    git(remote, "tag", "-a", "v1", "-m", "v1");
+    headSha = git(remote, "rev-parse", "HEAD");
+    remoteUrl = pathToFileURL(remote).href;
+});
+afterAll(() => rmSync(workspace, { recursive: true, force: true }));
+describe("resolveRemoteRef", () => {
+    it("resolves HEAD when no ref is given, as movable", async () => {
+        await expect(resolveRemoteRef(remoteUrl, undefined)).resolves.toEqual({
+            sha: headSha,
+            movable: true,
+        });
+    });
+    it("resolves a branch as movable and an annotated tag to its commit, immovable", async () => {
+        const branch = git(remote, "branch", "--show-current");
+        await expect(resolveRemoteRef(remoteUrl, branch)).resolves.toEqual({
+            sha: headSha,
+            movable: true,
+        });
+        await expect(resolveRemoteRef(remoteUrl, "v1")).resolves.toEqual({
+            sha: headSha,
+            movable: false,
+        });
+    });
+    it("passes a full sha through without touching the network", async () => {
+        await expect(resolveRemoteRef("https://invalid.invalid/none.git", headSha)).resolves.toEqual({
+            sha: headSha,
+            movable: false,
+        });
+    });
+    it("says not-found and no-access are indistinguishable, and how to authenticate", async () => {
+        const missing = pathToFileURL(join(workspace, "no-such-repo")).href;
+        await expect(resolveRemoteRef(missing, undefined)).rejects.toThrow(/not found.*access/s);
+        await expect(resolveRemoteRef(missing, undefined)).rejects.toThrow(/GH_TOKEN/);
+    });
+    it("reports a ref the remote does not have", async () => {
+        await expect(resolveRemoteRef(remoteUrl, "no-such-ref")).rejects.toThrow(/no such ref/);
+    });
+});
+describe("cloneAtSha", () => {
+    it("materializes the tree with its git history intact", async () => {
+        const dir = join(workspace, "clone");
+        await cloneAtSha(remoteUrl, headSha, dir);
+        expect(existsSync(join(dir, "docs", "README.md"))).toBe(true);
+        // The blobless clone still answers `git log`, so `modified` dates survive
+        // — the property that ruled out tarballs.
+        const dates = await lastCommitDates(join(dir, "docs"));
+        expect(Date.parse(dates.get("README.md"))).toBe(Date.parse(COMMIT_DATE));
+    });
+    it("reuses a completed clone without re-fetching", async () => {
+        const dir = join(workspace, "clone");
+        const sentinel = join(dir, "sentinel");
+        writeFileSync(sentinel, "");
+        await cloneAtSha("https://invalid.invalid/none.git", headSha, dir);
+        expect(existsSync(sentinel)).toBe(true);
+    });
+});
+describe("fetchRepo and resolveFetchedRepos", () => {
+    it("fetches into the sha-keyed cache and remembers the resolution", async () => {
+        const dir = await fetchRepo("acme/fetched", opts());
+        expect(dir).toBe(repoCacheDir("acme/fetched", headSha, env));
+        expect(existsSync(join(dir, "docs", "guide.md"))).toBe(true);
+        // A second fetch resolves from the record and reuses the clone.
+        await expect(fetchRepo("acme/fetched", { ...opts(), urlFor: () => "file:///nope" })).resolves.toBe(dir);
+    });
+    it("fills repos gaps by fetching, and indexes the fetched root with dates", async () => {
+        const meta = join(workspace, "meta");
+        mkdirSync(join(meta, "docs"), { recursive: true });
+        writeFileSync(join(meta, "docs", "README.md"), "# Meta\n");
+        const config = {
+            rootDir: meta,
+            docsDir: "docs",
+            entryPoint: "docs/README.md",
+            ignore: [],
+            projects: [
+                { name: "Meta", docsDir: "docs" },
+                { name: "Fetched", docsDir: "docs", repo: "acme/fetched" },
+            ],
+        };
+        const resolved = await resolveFetchedRepos(config, opts());
+        expect(resolved.repos?.["acme/fetched"]).toBe(repoCacheDir("acme/fetched", headSha, env));
+        const manifest = await buildManifest(resolved);
+        const node = manifest.nodes.find((n) => n.id === "fetched/guide.md");
+        expect(node).toBeDefined();
+        expect(Date.parse(node?.modified)).toBe(Date.parse(COMMIT_DATE));
+    });
+    it("keeps a real local checkout over fetching", async () => {
+        const local = join(workspace, "local-alpha");
+        mkdirSync(join(local, "docs"), { recursive: true });
+        const config = {
+            rootDir: workspace,
+            docsDir: "docs",
+            entryPoint: "docs/README.md",
+            ignore: [],
+            repos: { "acme/alpha": local },
+            projects: [{ name: "Alpha", docsDir: "docs", repo: "acme/alpha" }],
+        };
+        // urlFor throws, proving no fetch is attempted for the mapped repo.
+        const resolved = await resolveFetchedRepos(config, {
+            ...opts(),
+            urlFor: () => {
+                throw new Error("should not fetch");
+            },
+        });
+        expect(resolved).toBe(config);
+    });
+    it("fetches a mapped repo whose local path does not exist", async () => {
+        const config = {
+            rootDir: workspace,
+            docsDir: "docs",
+            entryPoint: "docs/README.md",
+            ignore: [],
+            repos: { "acme/fetched": join(workspace, "missing-checkout") },
+        };
+        const resolved = await resolveFetchedRepos(config, opts());
+        expect(resolved.repos?.["acme/fetched"]).toBe(repoCacheDir("acme/fetched", headSha, env));
+    });
+    it("rejects a malformed identity", async () => {
+        await expect(fetchRepo("not-an-identity", opts())).rejects.toThrow(/org\/repo/);
+    });
+});
+//# sourceMappingURL=fetch.test.js.map

package/dist/fetch/fetch.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fetch.test.js","sourceRoot":"","sources":["../../src/fetch/fetch.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACpF,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AACnE,OAAO,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAC5C,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAE/C,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAC1C,OAAO,EAAE,UAAU,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAC1D,OAAO,EAAE,SAAS,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AAE9D;;;;GAIG;AAEH,MAAM,WAAW,GAAG,2BAA2B,CAAC;AAEhD,IAAI,SAAiB,CAAC;AACtB,IAAI,MAAc,CAAC;AACnB,IAAI,SAAiB,CAAC;AACtB,IAAI,QAAgB,CAAC;AACrB,IAAI,GAAsB,CAAC;AAC3B,IAAI,OAAe,CAAC;AAEpB,8DAA8D;AAC9D,MAAM,IAAI,GAAG,GAAG,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC;AAEjE,SAAS,GAAG,CAAC,GAAW,EAAE,GAAG,IAAc;IAC1C,OAAO,YAAY,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;AACpE,CAAC;AAED,SAAS,CAAC,GAAG,EAAE;IACd,SAAS,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,aAAa,CAAC,CAAC,CAAC;IACvD,QAAQ,GAAG,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;IACpC,GAAG,GAAG,EAAE,cAAc,EAAE,QAAQ,EAAE,CAAC;IAEnC,MAAM,GAAG,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IACnC,SAAS,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACrD,aAAa,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,kCAAkC,CAAC,CAAC;IACrF,aAAa,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,WAAW,CAAC,CAAC;IAC7D,aAAa,CAAC,IAAI,CAAC,MAAM,EAAE,kBAAkB,CAAC,EAAE,iBAAiB,CAAC,CAAC;IAEnE,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;IAC1B,GAAG,CAAC,MAAM,EAAE,QAAQ,EAAE,YAAY,EAAE,kBAAkB,CAAC,CAAC;IACxD,GAAG,CAAC,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,CAAC,CAAC;IAC3C,GAAG,CAAC,MAAM,EAAE,QAAQ,EAAE,gBAAgB,EAAE,OAAO,CAAC,CAAC;IACjD,oEAAoE;IACpE,GAAG,CAAC,MAAM,EAAE,QAAQ,EAAE,wBAAwB,EAAE,MAAM,CAAC,CAAC;IACxD,GAAG,CAAC,MAAM,EAAE,QAAQ,EAAE,qCAAqC,EAAE,MAAM,CAAC,CAAC;IACrE,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;IACzB,GAAG,CAAC,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC;IACjE,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;IAC3C,OAAO,GAAG,GAAG,CAAC,MAAM,EAAE,WAAW,EAAE,MAAM,CAAC,CAAC;IAC3C,SAAS,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC;AACxC,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;AAEpE,QAAQ,CAAC,kBAAkB,EAAE,GAAG,EAAE;IACjC,EAAE,CAAC,gDAAgD,EAAE,KAAK,IAAI,EAAE;QAC/D,MAAM,MAAM,CAAC,gBAAgB,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC;YACrE,GAAG,EAAE,OAAO;YACZ,OAAO,EAAE,IAAI;SACb,CAAC,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4EAA4E,EAAE,KAAK,IAAI,EAAE;QAC3F,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,EAAE,QAAQ,EAAE,gBAAgB,CAAC,CAAC;QACvD,MAAM,MAAM,CAAC,gBAAgB,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC;YAClE,GAAG,EAAE,OAAO;YACZ,OAAO,EAAE,IAAI;SACb,CAAC,CAAC;QACH,MAAM,MAAM,CAAC,gBAAgB,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC;YAChE,GAAG,EAAE,OAAO;YACZ,OAAO,EAAE,KAAK;SACd,CAAC,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wDAAwD,EAAE,KAAK,IAAI,EAAE;QACvE,MAAM,MAAM,CAAC,gBAAgB,CAAC,kCAAkC,EAAE,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC;YAC5F,GAAG,EAAE,OAAO;YACZ,OAAO,EAAE,KAAK;SACd,CAAC,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6EAA6E,EAAE,KAAK,IAAI,EAAE;QAC5F,MAAM,OAAO,GAAG,aAAa,CAAC,IAAI,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC;QACpE,MAAM,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC;QACzF,MAAM,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAChF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wCAAwC,EAAE,KAAK,IAAI,EAAE;QACvD,MAAM,MAAM,CAAC,gBAAgB,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;IACzF,CAAC,CAAC,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,YAAY,EAAE,GAAG,EAAE;IAC3B,EAAE,CAAC,mDAAmD,EAAE,KAAK,IAAI,EAAE;QAClE,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QACrC,MAAM,UAAU,CAAC,SAAS,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;QAE1C,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC9D,0EAA0E;QAC1E,0CAA0C;QAC1C,MAAM,KAAK,GAAG,MAAM,eAAe,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC;QACvD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,WAAW,CAAW,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC;IACpF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8CAA8C,EAAE,KAAK,IAAI,EAAE;QAC7D,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QACrC,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;QACvC,aAAa,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;QAC5B,MAAM,UAAU,CAAC,kCAAkC,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;QACnE,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,mCAAmC,EAAE,GAAG,EAAE;IAClD,EAAE,CAAC,+DAA+D,EAAE,KAAK,IAAI,EAAE;QAC9E,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,cAAc,EAAE,IAAI,EAAE,CAAC,CAAC;QACpD,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,cAAc,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC;QAC7D,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAE7D,gEAAgE;QAChE,MAAM,MAAM,CACX,SAAS,CAAC,cAAc,EAAE,EAAE,GAAG,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,cAAc,EAAE,CAAC,CACtE,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACtB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uEAAuE,EAAE,KAAK,IAAI,EAAE;QACtF,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QACrC,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACnD,aAAa,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,UAAU,CAAC,CAAC;QAE3D,MAAM,MAAM,GAAe;YAC1B,OAAO,EAAE,IAAI;YACb,OAAO,EAAE,MAAM;YACf,UAAU,EAAE,gBAAgB;YAC5B,MAAM,EAAE,EAAE;YACV,QAAQ,EAAE;gBACT,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE;gBACjC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,cAAc,EAAE;aAC1D;SACD,CAAC;QAEF,MAAM,QAAQ,GAAG,MAAM,mBAAmB,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3D,MAAM,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,cAAc,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC;QAE1F,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC,QAAQ,CAAC,CAAC;QAC/C,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,kBAAkB,CAAC,CAAC;QACrE,MAAM,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;QAC3B,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,QAAkB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC;IAC5E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2CAA2C,EAAE,KAAK,IAAI,EAAE;QAC1D,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;QAC7C,SAAS,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACpD,MAAM,MAAM,GAAe;YAC1B,OAAO,EAAE,SAAS;YAClB,OAAO,EAAE,MAAM;YACf,UAAU,EAAE,gBAAgB;YAC5B,MAAM,EAAE,EAAE;YACV,KAAK,EAAE,EAAE,YAAY,EAAE,KAAK,EAAE;YAC9B,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC;SAClE,CAAC;QAEF,oEAAoE;QACpE,MAAM,QAAQ,GAAG,MAAM,mBAAmB,CAAC,MAAM,EAAE;YAClD,GAAG,IAAI,EAAE;YACT,MAAM,EAAE,GAAG,EAAE;gBACZ,MAAM,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAC;YACrC,CAAC;SACD,CAAC,CAAC;QACH,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC/B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uDAAuD,EAAE,KAAK,IAAI,EAAE;QACtE,MAAM,MAAM,GAAe;YAC1B,OAAO,EAAE,SAAS;YAClB,OAAO,EAAE,MAAM;YACf,UAAU,EAAE,gBAAgB;YAC5B,MAAM,EAAE,EAAE;YACV,KAAK,EAAE,EAAE,cAAc,EAAE,IAAI,CAAC,SAAS,EAAE,kBAAkB,CAAC,EAAE;SAC9D,CAAC;QAEF,MAAM,QAAQ,GAAG,MAAM,mBAAmB,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3D,MAAM,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,cAAc,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC;IAC3F,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8BAA8B,EAAE,KAAK,IAAI,EAAE;QAC7C,MAAM,MAAM,CAAC,SAAS,CAAC,iBAAiB,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IACjF,CAAC,CAAC,CAAC;AACJ,CAAC,CAAC,CAAC"}

package/dist/fetch/resolve.d.ts

@@ -0,0 +1,34 @@
+import type { WeftConfig } from "../types.js";
+/** How a fetch run resolves refs, credentials and cache placement. */
+export interface FetchOptions {
+    /** Ref to fetch — branch, tag or full sha. Defaults to the remote HEAD. */
+    ref?: string;
+    /** Re-resolve refs even when a cached resolution is still fresh. */
+    refresh?: boolean;
+    /** Token to authenticate with. Undefined means resolve one; "" means none. */
+    token?: string;
+    /** Clone URL per identity. A test seam; defaults to github.com HTTPS. */
+    urlFor?: (identity: string) => string;
+    /** Environment for cache placement and token lookup. Defaults to process.env. */
+    env?: NodeJS.ProcessEnv;
+}
+/**
+ * Fetch a repo into the cache and return the checkout's absolute path.
+ *
+ * Resolution is remembered per ref (with a TTL for branches) and the clone is
+ * keyed by commit sha, so repeated serves of an unmoved ref cost one
+ * `ls-remote` at most and no clone.
+ */
+export declare function fetchRepo(identity: string, opts?: FetchOptions): Promise<string>;
+/**
+ * Fill the gaps in `config.repos` by fetching, and return the config with the
+ * fetched checkout paths in place.
+ *
+ * A repo mapped to a real local path keeps winning — fetching is the fallback,
+ * not the override — so someone with three of five repos checked out reads
+ * their local working trees for those three and fetched copies of the rest.
+ * Referenced repos are fetched at their remote HEAD; a ref in `opts` names a
+ * ref of the primary repo, not of everything it references.
+ */
+export declare function resolveFetchedRepos(config: WeftConfig, opts?: FetchOptions): Promise<WeftConfig>;
+//# sourceMappingURL=resolve.d.ts.map

package/dist/fetch/resolve.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolve.d.ts","sourceRoot":"","sources":["../../src/fetch/resolve.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAK9C,sEAAsE;AACtE,MAAM,WAAW,YAAY;IAC5B,2EAA2E;IAC3E,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,oEAAoE;IACpE,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,8EAA8E;IAC9E,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,yEAAyE;IACzE,MAAM,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,MAAM,CAAC;IACtC,iFAAiF;IACjF,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;CACxB;AAED;;;;;;GAMG;AACH,wBAAsB,SAAS,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,GAAE,YAAiB,GAAG,OAAO,CAAC,MAAM,CAAC,CAmB1F;AAED;;;;;;;;;GASG;AACH,wBAAsB,mBAAmB,CACxC,MAAM,EAAE,UAAU,EAClB,IAAI,GAAE,YAAiB,GACrB,OAAO,CAAC,UAAU,CAAC,CAgBrB"}