@skydiveai/git-cache 0.1.0-beta.2618 → 0.1.0-beta.2647

package/dist/cli.mjs

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { f as startServer } from "./server-DDcKo4yG.mjs";
+import { f as startServer } from "./server-BrGhh8-W.mjs";
 //#region src/cli.ts
 /**
 * `git-cache` CLI — the published binary for @skydiveai/git-cache.

package/dist/index.d.mts

@@ -151,6 +151,32 @@ declare function shouldBackfillAfterPassthrough({
   cacheable: any;
   sha256: any;
 }): boolean;
+/**
+ * Decide how to serve a warm mirror for one request.
+ *
+ * `revalidateRefs` is set for the `info/refs` half of a fetch — the ref
+ * advertisement, where the client learns the remote's HEAD and branch tips.
+ * That answer must never be stale: serving a pre-merge advertisement is how a
+ * `git fetch` right after an upstream squash-merge silently returns the old
+ * `origin/<branch>` (the object-reuse win of the cache is not worth lying about
+ * where HEAD is). So for `info/refs` a stale mirror BLOCKS on a synchronous
+ * refresh before it answers, exactly as an explicit push invalidation does.
+ * The `git-upload-pack` half keeps stale-while-revalidate: its wants come from
+ * the just-served fresh advertisement, so the client only asks for objects the
+ * fresh refs named, and the caller's `mirrorHasObjects` gate already falls back
+ * to origin for any the mirror is missing (the new objects a merge introduced).
+ *
+ * A blocked refresh that FAILS (network blip, expired token, upstream 5xx)
+ * returns `cacheState: 'STALE_REVALIDATE_FAILED'` rather than throwing, so the
+ * caller can proxy `info/refs` straight to origin — fresh refs from upstream,
+ * never a 502 and never the stale advertisement.
+ */
+/**
+ * Whether a mirror stamped `lastFetchMs` is fresh: past the invalidation fence
+ * AND within the TTL window. `lastFetchMs` is a fetch-START time (see
+ * writeMeta), so a fetch that began before the fence is stale no matter when
+ * it completed — the data it holds predates the invalidation by construction.
+ */
 /**
  * True when every OID is already present in the mirror.
  *

package/dist/index.mjs

@@ -1,2 +1,2 @@
-import { a as isProtocolV2Request, c as parseAdvertisement, d as shouldBackfillAfterPassthrough, f as startServer, i as explainRejection, l as parseUpstream, n as classifyUploadRequest, o as metricsSnapshot, r as copyRequestHeaders, s as mirrorHasObjects, t as SidebandPackExtractor, u as recordColdBuildOutcome } from "./server-DDcKo4yG.mjs";
+import { a as isProtocolV2Request, c as parseAdvertisement, d as shouldBackfillAfterPassthrough, f as startServer, i as explainRejection, l as parseUpstream, n as classifyUploadRequest, o as metricsSnapshot, r as copyRequestHeaders, s as mirrorHasObjects, t as SidebandPackExtractor, u as recordColdBuildOutcome } from "./server-BrGhh8-W.mjs";
 export { SidebandPackExtractor, classifyUploadRequest, copyRequestHeaders, explainRejection, isProtocolV2Request, metricsSnapshot, mirrorHasObjects, parseAdvertisement, parseUpstream, recordColdBuildOutcome, shouldBackfillAfterPassthrough, startServer };

package/dist/{server-DDcKo4yG.mjs → server-BrGhh8-W.mjs}

@@ -821,10 +821,10 @@ var SidebandPackExtractor = class {
 		if (!this.errored) this.writable.end();
 	}
 };
-async function writeMeta(local, extra = {}) {
+async function writeMeta(local, fetchStartMs, extra = {}) {
 	const tmp = `${metaPath(local)}.tmp.${INSTANCE_ID}`;
 	await writeFile(tmp, JSON.stringify({
-		lastFetchMs: Date.now(),
+		lastFetchMs: fetchStartMs,
 		...extra
 	}), "utf8");
 	await rename(tmp, metaPath(local));
@@ -1019,7 +1019,7 @@ async function backfillMirror(repo, upstreamUrl, credHeader = null) {
 		const published = await withRepoLock(repo, "write", async () => {
 			if (await pathExists(local)) return false;
 			await rename(temp, local);
-			await writeMeta(local, { publishedMs: Date.now() });
+			await writeMeta(local, startedMs, { publishedMs: Date.now() });
 			return true;
 		});
 		if (published !== true) {
@@ -1056,6 +1056,7 @@ async function backfillMirror(repo, upstreamUrl, credHeader = null) {
 }
 function startColdStream(req, res, upstreamUrl, repo, requestBody, credHeader) {
 	const local = localPath(repo);
+	const captureStartedMs = Date.now();
 	const temp = `${config.cacheDir}/quarantine/${repo.replace(/\//g, "__")}.stream-${INSTANCE_ID}-${Date.now()}`;
 	metrics.cold_requests++;
 	coldLeaders.add(repo);
@@ -1230,7 +1231,7 @@ function startColdStream(req, res, upstreamUrl, repo, requestBody, credHeader) {
 					const published = await withRepoLock(repo, "write", async () => {
 						if (await pathExists(local)) return false;
 						await rename(temp, local);
-						await writeMeta(local, { publishedMs: Date.now() });
+						await writeMeta(local, captureStartedMs, { publishedMs: Date.now() });
 						return true;
 					});
 					if (published === true) {
@@ -1294,6 +1295,7 @@ async function refreshMirror(repo, local, credHeader = null) {
 		"true"
 	]);
 	await disableAutoMaintenance(local);
+	const fetchStartMs = Date.now();
 	await runGit(upstreamGitArgs([
 		"--git-dir",
 		local,
@@ -1306,7 +1308,7 @@ async function refreshMirror(repo, local, credHeader = null) {
 		...GIT_ENV,
 		...upstreamGitCredentialEnv(credHeader)
 	} });
-	await writeMeta(local);
+	await writeMeta(local, fetchStartMs);
 	metrics.refreshes++;
 	log("info", "refresh", { repo });
 	return local;
@@ -1331,10 +1333,21 @@ async function refreshMirror(repo, local, credHeader = null) {
 * caller can proxy `info/refs` straight to origin — fresh refs from upstream,
 * never a 502 and never the stale advertisement.
 */
+/**
+* Whether a mirror stamped `lastFetchMs` is fresh: past the invalidation fence
+* AND within the TTL window. `lastFetchMs` is a fetch-START time (see
+* writeMeta), so a fetch that began before the fence is stale no matter when
+* it completed — the data it holds predates the invalidation by construction.
+*/
+function isMetaFresh(lastFetchMs, fenceMs, ttlSeconds, nowMs) {
+	if (lastFetchMs <= 0) return false;
+	if (lastFetchMs > nowMs) return false;
+	return lastFetchMs >= fenceMs && (nowMs - lastFetchMs) / 1e3 < ttlSeconds;
+}
 async function ensureWarm(repo, credHeader = null, revalidateRefs = false) {
 	const local = localPath(repo);
 	const lastFetchMs = (await readMeta(local))?.lastFetchMs ?? 0;
-	if (!((Date.now() - lastFetchMs) / 1e3 >= config.ttlSeconds || lastFetchMs < invalidateBeforeMs)) {
+	if (!!isMetaFresh(lastFetchMs, invalidateBeforeMs, config.ttlSeconds, Date.now())) {
 		metrics.warm_hits++;
 		return {
 			local,
@@ -1357,8 +1370,7 @@ async function ensureWarm(repo, credHeader = null, revalidateRefs = false) {
 	}).finally(() => inflightRefresh.delete(repo)));
 	if (mustBlock) {
 		await inflightRefresh.get(repo);
-		const refreshedMs = (await readMeta(local))?.lastFetchMs ?? 0;
-		if (!(refreshedMs >= invalidateBeforeMs && (Date.now() - refreshedMs) / 1e3 < config.ttlSeconds)) {
+		if (!isMetaFresh((await readMeta(local))?.lastFetchMs ?? 0, invalidateBeforeMs, config.ttlSeconds, Date.now())) {
 			if (revalidateRefs && !fencedByPush) {
 				metrics.revalidate_failures++;
 				log("warn", "revalidate_failed", { repo });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@skydiveai/git-cache",
-  "version": "0.1.0-beta.2618",
+  "version": "0.1.0-beta.2647",
   "description": "Sandbox-local Git smart-HTTP clone/fetch cache: a loopback daemon that transparently mirrors HTTPS git reads so repeated clone/fetch/ls-remote skip the origin round-trip. Runs inside an agent sandbox; pushes stay direct.",
   "homepage": "https://skydive.com",
   "license": "MIT",