@skydiveai/git-cache 0.1.0-beta.3048 → 0.1.0-beta.3102

package/dist/cli.mjs

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { f as startServer } from "./server-Cu_B_yai.mjs";
+import { f as startServer } from "./server-DjJs3KcN.mjs";
 //#region src/cli.ts
 /**
 * `git-cache` CLI — the published binary for @skydiveai/git-cache.

package/dist/index.mjs

@@ -1,2 +1,2 @@
-import { a as isProtocolV2Request, c as parseAdvertisement, d as shouldBackfillAfterPassthrough, f as startServer, i as explainRejection, l as parseUpstream, n as classifyUploadRequest, o as metricsSnapshot, r as copyRequestHeaders, s as mirrorHasObjects, t as SidebandPackExtractor, u as recordColdBuildOutcome } from "./server-Cu_B_yai.mjs";
+import { a as isProtocolV2Request, c as parseAdvertisement, d as shouldBackfillAfterPassthrough, f as startServer, i as explainRejection, l as parseUpstream, n as classifyUploadRequest, o as metricsSnapshot, r as copyRequestHeaders, s as mirrorHasObjects, t as SidebandPackExtractor, u as recordColdBuildOutcome } from "./server-DjJs3KcN.mjs";
 export { SidebandPackExtractor, classifyUploadRequest, copyRequestHeaders, explainRejection, isProtocolV2Request, metricsSnapshot, mirrorHasObjects, parseAdvertisement, parseUpstream, recordColdBuildOutcome, shouldBackfillAfterPassthrough, startServer };

package/dist/{server-Cu_B_yai.mjs → server-DjJs3KcN.mjs}

@@ -78,6 +78,7 @@ const config = {
 	maxPackBytes: Number(process.env.GIT_CACHE_MAX_PACK_BYTES || 8 * 1024 * 1024 * 1024),
 	maxImporterQueueBytes: Number(process.env.GIT_CACHE_MAX_IMPORTER_QUEUE_BYTES || 256 * 1024 * 1024),
 	maxCacheBytes: Number(process.env.GIT_CACHE_MAX_CACHE_BYTES || 0),
+	upstreamTimeoutMs: Number(process.env.GIT_CACHE_UPSTREAM_TIMEOUT_MS || 3e4),
 	hostAllowlist: (process.env.GIT_CACHE_HOST_ALLOWLIST || "").split(",").map((h) => h.trim().toLowerCase()).filter(Boolean),
 	logLevel: process.env.GIT_CACHE_LOG_LEVEL || "info",
 	testOriginBase: (process.env.GIT_CACHE_TEST_ORIGIN_BASE || "").replace(/\/+$/, "")
@@ -94,7 +95,9 @@ const GIT_ENV = {
 	GIT_ASKPASS: "/bin/true",
 	SSH_ASKPASS: "/bin/true",
 	GCM_INTERACTIVE: "never",
-	GIT_CONFIG_NOSYSTEM: process.env.GIT_CONFIG_NOSYSTEM || "1"
+	GIT_CONFIG_NOSYSTEM: process.env.GIT_CONFIG_NOSYSTEM || "1",
+	GIT_HTTP_LOW_SPEED_LIMIT: "1024",
+	GIT_HTTP_LOW_SPEED_TIME: "60"
 };
 const activeLevel = LOG_LEVELS[config.logLevel] ?? LOG_LEVELS.info;
 function log(level, event, fields = {}) {
@@ -676,12 +679,35 @@ function withCredential(headers, credHeader) {
 function requestUpstream(target, options, callback) {
 	return (target.protocol === "http:" ? http : https).request(target, options, callback);
 }
+/**
+* Arm the idle-socket ceiling on an upstream request. Fires only when the
+* socket is SILENT for config.upstreamTimeoutMs (any activity resets it), so a
+* healthy transfer — even a slow one — is never interrupted. Must be armed on
+* EVERY upstream request: a hung upstream surfaces as a fast error to the
+* caller instead of a client `git fetch` that never returns.
+*/
+function armUpstreamIdleTimeout(up, onTimeout) {
+	up.setTimeout(config.upstreamTimeoutMs, () => {
+		log("error", "upstream_idle_timeout", { ms: config.upstreamTimeoutMs });
+		onTimeout();
+	});
+}
 function openUpstream(req, upstreamUrl, operation, callback, credHeader) {
-	const up = requestUpstream(new URL(upstreamUrl + (operation === "info/refs" ? "/info/refs?service=git-upload-pack" : "/git-upload-pack")), {
+	const target = new URL(upstreamUrl + (operation === "info/refs" ? "/info/refs?service=git-upload-pack" : "/git-upload-pack"));
+	let settled = false;
+	const settle = (resOrNull, error) => {
+		if (settled) return;
+		settled = true;
+		callback(resOrNull, error);
+	};
+	const up = requestUpstream(target, {
 		method: req.method,
 		headers: withCredential(copyRequestHeaders(req.headers), credHeader)
-	}, (res) => callback(res, null));
-	up.on("error", (error) => callback(null, error));
+	}, (res) => settle(res, null));
+	up.on("error", (error) => settle(null, error));
+	armUpstreamIdleTimeout(up, () => {
+		up.destroy(/* @__PURE__ */ new Error(`upstream idle for ${config.upstreamTimeoutMs}ms`));
+	});
 	if (req.method === "POST") req.pipe(up);
 	else up.end();
 	return up;
@@ -1269,6 +1295,13 @@ function startColdStream(req, res, upstreamUrl, repo, requestBody, credHeader) {
 			});
 		});
 		up.on("error", (error) => settle.reject(error));
+		armUpstreamIdleTimeout(up, () => {
+			if (!res.headersSent) {
+				res.writeHead(502, { "Content-Type": "text/plain" });
+				res.end("unable to serve repository\n");
+			}
+			up.destroy(/* @__PURE__ */ new Error(`upstream idle for ${config.upstreamTimeoutMs}ms`));
+		});
 		up.end(requestBody);
 	})().catch(settle.reject);
 	done.catch(async (error) => {
@@ -1488,6 +1521,9 @@ function proxyUploadPackWithBody(res, upstreamUrl, reqHeaders, body, credHeader)
 		if (!res.headersSent) res.writeHead(502);
 		res.end();
 	});
+	armUpstreamIdleTimeout(up, () => {
+		up.destroy(/* @__PURE__ */ new Error(`upstream idle for ${config.upstreamTimeoutMs}ms`));
+	});
 	up.end(body);
 }
 function serveUploadPack(req, res, local, advertise, cacheState, body = null) {
@@ -1816,7 +1852,7 @@ async function handle(req, res) {
 					op: up.operation,
 					state: warm.cacheState
 				});
-				return proxyInfoRefs(req, res, up.repo, up.upstreamUrl, host, clientCred);
+				return await proxyInfoRefs(req, res, up.repo, up.upstreamUrl, host, clientCred);
 			}
 			if (up.operation === "git-upload-pack" && !await mirrorHasObjects(warm.local, uploadWants)) {
 				await refreshMirror(up.repo, warm.local, clientCred).catch((error) => {
@@ -1840,7 +1876,7 @@ async function handle(req, res) {
 			});
 			return serveUploadPack(req, res, warm.local, up.operation === "info/refs", warm.cacheState, uploadBody);
 		}
-		if (up.operation === "info/refs") return proxyInfoRefs(req, res, up.repo, up.upstreamUrl, host, clientCred);
+		if (up.operation === "info/refs") return await proxyInfoRefs(req, res, up.repo, up.upstreamUrl, host, clientCred);
 		const body = uploadBody ?? Buffer.alloc(0);
 		const credHeader = clientCred ?? await fetchCredentialHeader(host);
 		if (coldLeaders.has(up.repo)) return proxyColdFollowerWithBody(res, up.upstreamUrl, req.headers, body, up.repo, credHeader);
@@ -1868,6 +1904,9 @@ function proxyColdFollowerWithBody(res, upstreamUrl, reqHeaders, body, repo, cre
 		if (!res.headersSent) res.writeHead(502);
 		res.end();
 	});
+	armUpstreamIdleTimeout(up, () => {
+		up.destroy(/* @__PURE__ */ new Error(`upstream idle for ${config.upstreamTimeoutMs}ms`));
+	});
 	up.end(body);
 }
 async function startServer(options = {}) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@skydiveai/git-cache",
-  "version": "0.1.0-beta.3048",
+  "version": "0.1.0-beta.3102",
   "description": "Sandbox-local Git smart-HTTP clone/fetch cache: a loopback daemon that transparently mirrors HTTPS git reads so repeated clone/fetch/ls-remote skip the origin round-trip. Runs inside an agent sandbox; pushes stay direct.",
   "homepage": "https://skydive.com",
   "license": "MIT",