alchemy 2.0.0-beta.76 → 2.0.0-beta.78

package/lib/Git/Jobs/Import.d.ts

@@ -0,0 +1,144 @@
+/**
+ * The import alarm job's git client (DESIGN.md §2.3 Import).
+ *
+ * A minimal **smart-HTTP protocol v0 client**: fetches and parses the
+ * `info/refs?service=git-upload-pack` advertisement, then POSTs a
+ * `git-upload-pack` request (wants + optional `deepen`, no haves,
+ * immediate `done`, **no side-band** — so the pack follows the `NAK`
+ * verbatim) and returns the raw pack bytes for the Repo DO to feed
+ * through the same `ingestPack` path as a push, with the same 50 MiB cap
+ * (documented v1 limit: small / depth-limited imports only).
+ *
+ * Network I/O goes through the Effect `HttpClient` service; callers
+ * provide `FetchHttpClient.layer` (see `RepoObject.ts`'s alarm handler).
+ */
+import * as Effect from "effect/Effect";
+import * as Schema from "effect/Schema";
+import * as HttpClient from "effect/unstable/http/HttpClient";
+declare const ImportClientError_base: Schema.Class<ImportClientError, Schema.TaggedStruct<"ImportClientError", {
+    readonly reason: Schema.String;
+}>, import("effect/Cause").YieldableError>;
+/**
+ * Raised when the source remote misbehaves: HTTP failures, non-200s,
+ * malformed advertisements, oversize packs, or an `ERR` pkt from the
+ * remote. The Repo DO maps this onto the repo's import job state.
+ */
+export declare class ImportClientError extends ImportClientError_base {
+}
+/** The import source, as accepted by `POST /api/v1/repos/import`. */
+export interface ImportSource {
+    /** Smart-HTTP base URL of the source repository (with or without `.git`). */
+    readonly url: string;
+    /** Restrict the import to a single ref (full or short name). */
+    readonly ref?: string | undefined;
+    /** Depth-limit the imported history (`deepen <n>`). */
+    readonly depth?: number | undefined;
+}
+/** One ref parsed from the remote advertisement. */
+export interface RemoteRef {
+    readonly name: string;
+    readonly oid: string;
+    /** Peeled target from a `<name>^{}` line (annotated tags). */
+    readonly peeled?: string | undefined;
+}
+/** A parsed v0 `info/refs` advertisement. */
+export interface RemoteAdvertisement {
+    readonly refs: ReadonlyArray<RemoteRef>;
+    /**
+     * The remote HEAD's symref target (e.g. `refs/heads/main`) from the
+     * `symref=HEAD:...` capability, or `null` when not advertised.
+     */
+    readonly head: string | null;
+    /** The remote's advertised capability set. */
+    readonly capabilities: ReadonlySet<string>;
+}
+/** The result of {@link runImport}: everything the Repo DO needs to ingest. */
+export interface ImportResult {
+    /** The refs to create locally (already filtered by `source.ref`). */
+    readonly refs: ReadonlyArray<RemoteRef>;
+    /** Short default-branch name derived from the remote HEAD, or `null`. */
+    readonly defaultBranch: string | null;
+    /**
+     * The raw pack bytes, or `undefined` when the remote is empty (nothing
+     * to ingest).
+     */
+    readonly pack: Uint8Array | undefined;
+    /** `shallow <oid>` boundary commits reported by the remote. */
+    readonly shallow: ReadonlyArray<string>;
+}
+/** Options of {@link runImport}. */
+export interface ImportOptions {
+    readonly source: ImportSource;
+    /**
+     * Hard cap on the fetched pack size (bytes).
+     * @default 52_428_800 (50 MiB, the same cap as push ingest)
+     */
+    readonly maxPackBytes?: number | undefined;
+}
+/**
+ * Parses a v0 `git-upload-pack` advertisement body (including the
+ * `# service=` prelude). Exposed for unit testing against fixture bytes.
+ */
+export declare const parseAdvertisement: (body: Uint8Array<ArrayBufferLike>) => Effect.Effect<{
+    refs: RemoteRef[];
+    head: string | null;
+    capabilities: ReadonlySet<string>;
+}, ImportClientError, never>;
+/**
+ * Fetches and parses the remote's `info/refs?service=git-upload-pack`
+ * advertisement.
+ */
+export declare const fetchAdvertisement: (url: string) => Effect.Effect<{
+    refs: RemoteRef[];
+    head: string | null;
+    capabilities: ReadonlySet<string>;
+}, ImportClientError, HttpClient.HttpClient>;
+/** Builds the v0 upload-pack request body: wants, optional deepen, done. */
+export declare const buildUploadPackRequest: (wants: ReadonlyArray<string>, options?: {
+    readonly depth?: number | undefined;
+}) => Uint8Array;
+/**
+ * The parsed upload-pack response: the shallow boundary lines (when a
+ * `deepen` was requested) and the raw pack bytes that follow the `NAK`.
+ */
+export interface UploadPackResponse {
+    readonly shallow: ReadonlyArray<string>;
+    readonly pack: Uint8Array;
+}
+/**
+ * Splits a (non-side-band) upload-pack response into its shallow section /
+ * NAK and the trailing raw pack. Exposed for unit testing.
+ */
+export declare const parseUploadPackResponse: (body: Uint8Array<ArrayBufferLike>) => Effect.Effect<{
+    shallow: string[];
+    pack: Uint8Array<ArrayBufferLike>;
+}, ImportClientError, never>;
+/**
+ * POSTs the upload-pack request and returns the shallow lines + raw pack.
+ */
+export declare const fetchPack: (url: string, wants: readonly string[], options?: {
+    readonly depth?: number | undefined;
+    readonly maxPackBytes?: number | undefined;
+} | undefined) => Effect.Effect<{
+    shallow: string[];
+    pack: Uint8Array<ArrayBufferLike>;
+}, ImportClientError, HttpClient.HttpClient>;
+/**
+ * Runs the full import client flow: advertisement → ref selection →
+ * upload-pack POST. Returns everything the Repo DO's alarm job needs to
+ * ingest the history and create the refs. Requires `HttpClient.HttpClient`
+ * (provide `FetchHttpClient.layer`).
+ */
+export declare const runImport: (options: ImportOptions) => Effect.Effect<{
+    refs: never[];
+    defaultBranch: string | null;
+    pack: undefined;
+    shallow: never[];
+} | {
+    refs: readonly RemoteRef[];
+    defaultBranch: string | null;
+    pack: Uint8Array<ArrayBufferLike>;
+    shallow: string[];
+}, ImportClientError, HttpClient.HttpClient>;
+export {};
+//# sourceMappingURL=Import.d.ts.map

package/lib/Git/Jobs/Import.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"Import.d.ts","sourceRoot":"","sources":["../../../src/Git/Jobs/Import.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AACH,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,UAAU,MAAM,iCAAiC,CAAC;;;;AAc9D;;;;GAIG;AACH,qBAAa,iBAAkB,SAAQ,sBAGtC;CAAG;AAEJ,qEAAqE;AACrE,MAAM,WAAW,YAAY;IAC3B,6EAA6E;IAC7E,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,gEAAgE;IAChE,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAClC,uDAAuD;IACvD,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACrC;AAED,oDAAoD;AACpD,MAAM,WAAW,SAAS;IACxB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,8DAA8D;IAC9D,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACtC;AAED,6CAA6C;AAC7C,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC,SAAS,CAAC,CAAC;IACxC;;;OAGG;IACH,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,8CAA8C;IAC9C,QAAQ,CAAC,YAAY,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;CAC5C;AAED,+EAA+E;AAC/E,MAAM,WAAW,YAAY;IAC3B,qEAAqE;IACrE,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC,SAAS,CAAC,CAAC;IACxC,yEAAyE;IACzE,QAAQ,CAAC,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IACtC;;;OAGG;IACH,QAAQ,CAAC,IAAI,EAAE,UAAU,GAAG,SAAS,CAAC;IACtC,+DAA+D;IAC/D,QAAQ,CAAC,OAAO,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;CACzC;AAED,oCAAoC;AACpC,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAC;IAC9B;;;OAGG;IACH,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC5C;AAyCD;;;GAGG;AACH,eAAO,MAAM,kBAAkB;;;;4BA8D7B,CAAC;AAEH;;;GAGG;AACH,eAAO,MAAM,kBAAkB;;;;4CAsB7B,CAAC;AAMH,4EAA4E;AAC5E,eAAO,MAAM,sBAAsB,UAC1B,aAAa,CAAC,MAAM,CAAC,YAClB;IAAE,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;CAAE,KAChD,UAeF,CAAC;AAEF;;;GAGG;AACH,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,OAAO,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;IACxC,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;CAC3B;AAED;;;GAGG;AACH,eAAO,MAAM,uBAAuB;;;4BAuClC,CAAC;AAEH;;GAEG;AACH,eAAO,MAAM,SAAS;qBAID,MAAM,GAAG,SAAS;4BACX,MAAM,GAAG,SAAS;;;;4CAiD5C,CAAC;AAsBH;;;;;GAKG;AACH,eAAO,MAAM,SAAS;;;;;;;;;;4CAwCpB,CAAC"}

package/lib/Git/Jobs/Import.js

@@ -0,0 +1,291 @@
+/**
+ * The import alarm job's git client (DESIGN.md §2.3 Import).
+ *
+ * A minimal **smart-HTTP protocol v0 client**: fetches and parses the
+ * `info/refs?service=git-upload-pack` advertisement, then POSTs a
+ * `git-upload-pack` request (wants + optional `deepen`, no haves,
+ * immediate `done`, **no side-band** — so the pack follows the `NAK`
+ * verbatim) and returns the raw pack bytes for the Repo DO to feed
+ * through the same `ingestPack` path as a push, with the same 50 MiB cap
+ * (documented v1 limit: small / depth-limited imports only).
+ *
+ * Network I/O goes through the Effect `HttpClient` service; callers
+ * provide `FetchHttpClient.layer` (see `RepoObject.ts`'s alarm handler).
+ */
+import * as Effect from "effect/Effect";
+import * as Schema from "effect/Schema";
+import * as HttpClient from "effect/unstable/http/HttpClient";
+import * as HttpClientRequest from "effect/unstable/http/HttpClientRequest";
+import { concatBytes, isOid, ZERO_OID } from "../Protocol/ObjectCodec.js";
+import { flushPkt, pktPayloadText, pktText, readPktLineAt, } from "../Protocol/Pkt.js";
+// ─────────────────────────────────────────────────────────────────────────────
+// Errors & shapes
+// ─────────────────────────────────────────────────────────────────────────────
+/**
+ * Raised when the source remote misbehaves: HTTP failures, non-200s,
+ * malformed advertisements, oversize packs, or an `ERR` pkt from the
+ * remote. The Repo DO maps this onto the repo's import job state.
+ */
+export class ImportClientError extends Schema.TaggedError()("ImportClientError", { reason: Schema.String }) {
+}
+const DEFAULT_MAX_PACK = 50 * 1024 * 1024;
+// ─────────────────────────────────────────────────────────────────────────────
+// Advertisement
+// ─────────────────────────────────────────────────────────────────────────────
+const normalizeBase = (url) => url.replace(/\/+$/, "");
+const tokenize = (buf) => Effect.suspend(() => {
+    const out = [];
+    let pos = 0;
+    while (pos < buf.length) {
+        const r = readPktLineAt(buf, pos);
+        if (r._tag === "incomplete") {
+            return Effect.fail(new ImportClientError({ reason: "truncated advertisement" }));
+        }
+        if (r._tag === "invalid") {
+            return Effect.fail(new ImportClientError({ reason: r.reason }));
+        }
+        if (r.pkt._tag === "flush") {
+            out.push({ _tag: "flush" });
+        }
+        else if (r.pkt._tag === "data") {
+            out.push({ _tag: "line", text: pktPayloadText(r.pkt.payload) });
+        }
+        pos = r.next;
+    }
+    return Effect.succeed(out);
+});
+/**
+ * Parses a v0 `git-upload-pack` advertisement body (including the
+ * `# service=` prelude). Exposed for unit testing against fixture bytes.
+ */
+export const parseAdvertisement = Effect.fn(function* (body) {
+    const tokens = yield* tokenize(body);
+    const refs = [];
+    const peeled = new Map();
+    let capabilities = new Set();
+    let head = null;
+    let sawCaps = false;
+    for (const token of tokens) {
+        if (token._tag === "flush")
+            continue;
+        const text = token.text;
+        if (text.startsWith("#"))
+            continue; // "# service=git-upload-pack"
+        if (text.startsWith("ERR ")) {
+            return yield* new ImportClientError({
+                reason: `remote error: ${text.slice(4)}`,
+            });
+        }
+        let line = text;
+        if (!sawCaps) {
+            // First ref line carries "\0cap1 cap2 ..."
+            const nul = text.indexOf("\0");
+            if (nul !== -1) {
+                const caps = new Set(text
+                    .slice(nul + 1)
+                    .split(" ")
+                    .filter(Boolean));
+                capabilities = caps;
+                for (const cap of caps) {
+                    if (cap.startsWith("symref=HEAD:")) {
+                        head = cap.slice("symref=HEAD:".length);
+                    }
+                }
+                line = text.slice(0, nul);
+                sawCaps = true;
+            }
+        }
+        const space = line.indexOf(" ");
+        if (space !== 40 || !isOid(line.slice(0, 40)))
+            continue;
+        const oid = line.slice(0, 40);
+        const name = line.slice(space + 1);
+        if (oid === ZERO_OID && name === "capabilities^{}") {
+            continue; // empty repo advertisement
+        }
+        if (name.endsWith("^{}")) {
+            peeled.set(name.slice(0, -3), oid);
+        }
+        else {
+            refs.push({ name, oid });
+        }
+    }
+    const withPeeled = refs.map((ref) => {
+        const p = peeled.get(ref.name);
+        return p === undefined ? ref : { ...ref, peeled: p };
+    });
+    return {
+        refs: withPeeled,
+        head,
+        capabilities,
+    };
+});
+/**
+ * Fetches and parses the remote's `info/refs?service=git-upload-pack`
+ * advertisement.
+ */
+export const fetchAdvertisement = Effect.fn(function* (url) {
+    const client = yield* HttpClient.HttpClient;
+    const response = yield* client
+        .get(`${normalizeBase(url)}/info/refs?service=git-upload-pack`)
+        .pipe(Effect.mapError((error) => new ImportClientError({ reason: `info/refs failed: ${error}` })));
+    if (response.status !== 200) {
+        return yield* new ImportClientError({
+            reason: `info/refs returned HTTP ${response.status}`,
+        });
+    }
+    const body = yield* response.arrayBuffer.pipe(Effect.mapError((error) => new ImportClientError({ reason: `info/refs body read: ${error}` })));
+    return yield* parseAdvertisement(new Uint8Array(body));
+});
+// ─────────────────────────────────────────────────────────────────────────────
+// upload-pack POST
+// ─────────────────────────────────────────────────────────────────────────────
+/** Builds the v0 upload-pack request body: wants, optional deepen, done. */
+export const buildUploadPackRequest = (wants, options) => {
+    const parts = [];
+    wants.forEach((oid, index) => {
+        parts.push(index === 0
+            ? pktText(`want ${oid} ofs-delta agent=alchemy-git-service/1`)
+            : pktText(`want ${oid}`));
+    });
+    if (options?.depth !== undefined) {
+        parts.push(pktText(`deepen ${options.depth}`));
+    }
+    parts.push(flushPkt);
+    parts.push(pktText("done"));
+    return concatBytes(parts);
+};
+/**
+ * Splits a (non-side-band) upload-pack response into its shallow section /
+ * NAK and the trailing raw pack. Exposed for unit testing.
+ */
+export const parseUploadPackResponse = Effect.fn(function* (body) {
+    const shallow = [];
+    let pos = 0;
+    for (;;) {
+        if (pos >= body.length) {
+            return yield* new ImportClientError({
+                reason: "upload-pack response ended before NAK/ACK",
+            });
+        }
+        const r = readPktLineAt(body, pos);
+        if (r._tag === "incomplete" || r._tag === "invalid") {
+            return yield* new ImportClientError({
+                reason: r._tag === "invalid" ? r.reason : "truncated upload-pack response",
+            });
+        }
+        pos = r.next;
+        if (r.pkt._tag !== "data")
+            continue; // flush after the shallow section
+        const text = pktPayloadText(r.pkt.payload);
+        if (text.startsWith("shallow ")) {
+            const oid = text.slice("shallow ".length);
+            if (isOid(oid))
+                shallow.push(oid);
+            continue;
+        }
+        if (text.startsWith("unshallow "))
+            continue;
+        if (text.startsWith("ERR ")) {
+            return yield* new ImportClientError({
+                reason: `remote error: ${text.slice(4)}`,
+            });
+        }
+        if (text === "NAK" || text.startsWith("ACK ")) {
+            // Pack bytes follow verbatim (no side-band was requested).
+            return {
+                shallow,
+                pack: body.subarray(pos),
+            };
+        }
+        // Ignore anything else (progress from misbehaving servers).
+    }
+});
+/**
+ * POSTs the upload-pack request and returns the shallow lines + raw pack.
+ */
+export const fetchPack = Effect.fn(function* (url, wants, options) {
+    const client = yield* HttpClient.HttpClient;
+    const maxPack = options?.maxPackBytes ?? DEFAULT_MAX_PACK;
+    const request = HttpClientRequest.post(`${normalizeBase(url)}/git-upload-pack`).pipe(HttpClientRequest.setHeaders({
+        "content-type": "application/x-git-upload-pack-request",
+        accept: "application/x-git-upload-pack-result",
+    }), HttpClientRequest.bodyUint8Array(buildUploadPackRequest(wants, { depth: options?.depth })));
+    const response = yield* client
+        .execute(request)
+        .pipe(Effect.mapError((error) => new ImportClientError({ reason: `git-upload-pack failed: ${error}` })));
+    if (response.status !== 200) {
+        return yield* new ImportClientError({
+            reason: `git-upload-pack returned HTTP ${response.status}`,
+        });
+    }
+    const body = yield* response.arrayBuffer.pipe(Effect.mapError((error) => new ImportClientError({
+        reason: `git-upload-pack body read: ${error}`,
+    })));
+    if (body.byteLength > maxPack + 65536) {
+        return yield* new ImportClientError({
+            reason: `source pack exceeds the ${maxPack} byte import cap`,
+        });
+    }
+    const parsed = yield* parseUploadPackResponse(new Uint8Array(body));
+    if (parsed.pack.byteLength > maxPack) {
+        return yield* new ImportClientError({
+            reason: `source pack exceeds the ${maxPack} byte import cap`,
+        });
+    }
+    return parsed;
+});
+// ─────────────────────────────────────────────────────────────────────────────
+// Orchestration
+// ─────────────────────────────────────────────────────────────────────────────
+/** Resolves `source.ref` (full or short name) against advertised refs. */
+const selectRefs = (advertised, ref) => {
+    if (ref === undefined) {
+        return advertised.filter((r) => r.name.startsWith("refs/heads/") || r.name.startsWith("refs/tags/"));
+    }
+    const candidates = [ref, `refs/heads/${ref}`, `refs/tags/${ref}`];
+    const match = advertised.find((r) => candidates.includes(r.name));
+    return match === undefined ? undefined : [match];
+};
+/**
+ * Runs the full import client flow: advertisement → ref selection →
+ * upload-pack POST. Returns everything the Repo DO's alarm job needs to
+ * ingest the history and create the refs. Requires `HttpClient.HttpClient`
+ * (provide `FetchHttpClient.layer`).
+ */
+export const runImport = Effect.fn(function* (options) {
+    const { source } = options;
+    const advertisement = yield* fetchAdvertisement(source.url);
+    const selected = selectRefs(advertisement.refs, source.ref);
+    if (selected === undefined) {
+        return yield* new ImportClientError({
+            reason: `ref '${source.ref}' not found on the remote`,
+        });
+    }
+    const defaultBranch = advertisement.head !== null && advertisement.head.startsWith("refs/heads/")
+        ? advertisement.head.slice("refs/heads/".length)
+        : null;
+    if (selected.length === 0) {
+        // Empty remote — nothing to fetch.
+        return {
+            refs: [],
+            defaultBranch,
+            pack: undefined,
+            shallow: [],
+        };
+    }
+    // Want the peeled targets too? No — wanting the tag object oid pulls the
+    // whole chain; peeled lines are advisory.
+    const wants = Array.from(new Set(selected.map((r) => r.oid)));
+    const { shallow, pack } = yield* fetchPack(source.url, wants, {
+        depth: source.depth,
+        maxPackBytes: options.maxPackBytes,
+    });
+    return {
+        refs: selected,
+        defaultBranch,
+        pack,
+        shallow,
+    };
+});
+//# sourceMappingURL=Import.js.map

package/lib/Git/Jobs/Import.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Import.js","sourceRoot":"","sources":["../../../src/Git/Jobs/Import.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AACH,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,UAAU,MAAM,iCAAiC,CAAC;AAC9D,OAAO,KAAK,iBAAiB,MAAM,wCAAwC,CAAC;AAC5E,OAAO,EAAE,WAAW,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,4BAA4B,CAAC;AAC1E,OAAO,EACL,QAAQ,EACR,cAAc,EACd,OAAO,EACP,aAAa,GACd,MAAM,oBAAoB,CAAC;AAE5B,gFAAgF;AAChF,kBAAkB;AAClB,gFAAgF;AAEhF;;;;GAIG;AACH,MAAM,OAAO,iBAAkB,SAAQ,MAAM,CAAC,WAAW,EAAqB,CAC5E,mBAAmB,EACnB,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAC1B;CAAG;AAyDJ,MAAM,gBAAgB,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAE1C,gFAAgF;AAChF,gBAAgB;AAChB,gFAAgF;AAEhF,MAAM,aAAa,GAAG,CAAC,GAAW,EAAU,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AAOvE,MAAM,QAAQ,GAAG,CACf,GAAe,EACyC,EAAE,CAC1D,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE;IAClB,MAAM,GAAG,GAAiB,EAAE,CAAC;IAC7B,IAAI,GAAG,GAAG,CAAC,CAAC;IACZ,OAAO,GAAG,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC;QACxB,MAAM,CAAC,GAAG,aAAa,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAClC,IAAI,CAAC,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;YAC5B,OAAO,MAAM,CAAC,IAAI,CAChB,IAAI,iBAAiB,CAAC,EAAE,MAAM,EAAE,yBAAyB,EAAE,CAAC,CAC7D,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YACzB,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QAClE,CAAC;QACD,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;YAC3B,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;QAC9B,CAAC;aAAM,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YACjC,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,cAAc,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAClE,CAAC;QACD,GAAG,GAAG,CAAC,CAAC,IAAI,CAAC;IACf,CAAC;IACD,OAAO,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;AAC7B,CAAC,CAAC,CAAC;AAEL;;;GAGG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,IAAgB;IACrE,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IACrC,MAAM,IAAI,GAAqB,EAAE,CAAC;IAClC,MAAM,MAAM,GAAG,IAAI,GAAG,EAAkB,CAAC;IACzC,IAAI,YAAY,GAAwB,IAAI,GAAG,EAAE,CAAC;IAClD,IAAI,IAAI,GAAkB,IAAI,CAAC;IAC/B,IAAI,OAAO,GAAG,KAAK,CAAC;IAEpB,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO;YAAE,SAAS;QACrC,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC;QACxB,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAS,CAAC,8BAA8B;QAClE,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;YAC5B,OAAO,KAAK,CAAC,CAAC,IAAI,iBAAiB,CAAC;gBAClC,MAAM,EAAE,iBAAiB,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE;aACzC,CAAC,CAAC;QACL,CAAC;QACD,IAAI,IAAI,GAAG,IAAI,CAAC;QAChB,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,2CAA2C;YAC3C,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YAC/B,IAAI,GAAG,KAAK,CAAC,CAAC,EAAE,CAAC;gBACf,MAAM,IAAI,GAAG,IAAI,GAAG,CAClB,IAAI;qBACD,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC;qBACd,KAAK,CAAC,GAAG,CAAC;qBACV,MAAM,CAAC,OAAO,CAAC,CACnB,CAAC;gBACF,YAAY,GAAG,IAAI,CAAC;gBACpB,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;oBACvB,IAAI,GAAG,CAAC,UAAU,CAAC,cAAc,CAAC,EAAE,CAAC;wBACnC,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;oBAC1C,CAAC;gBACH,CAAC;gBACD,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;gBAC1B,OAAO,GAAG,IAAI,CAAC;YACjB,CAAC;QACH,CAAC;QACD,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAChC,IAAI,KAAK,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAAE,SAAS;QACxD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC9B,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;QACnC,IAAI,GAAG,KAAK,QAAQ,IAAI,IAAI,KAAK,iBAAiB,EAAE,CAAC;YACnD,SAAS,CAAC,2BAA2B;QACvC,CAAC;QACD,IAAI,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YACzB,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QACrC,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC;QAC3B,CAAC;IACH,CAAC;IAED,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE;QAClC,MAAM,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC/B,OAAO,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,GAAG,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;IACvD,CAAC,CAAC,CAAC;IAEH,OAAO;QACL,IAAI,EAAE,UAAU;QAChB,IAAI;QACJ,YAAY;KACiB,CAAC;AAClC,CAAC,CAAC,CAAC;AAEH;;;GAGG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,GAAW;IAChE,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC,UAAU,CAAC;IAC5C,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,MAAM;SAC3B,GAAG,CAAC,GAAG,aAAa,CAAC,GAAG,CAAC,oCAAoC,CAAC;SAC9D,IAAI,CACH,MAAM,CAAC,QAAQ,CACb,CAAC,KAAK,EAAE,EAAE,CACR,IAAI,iBAAiB,CAAC,EAAE,MAAM,EAAE,qBAAqB,KAAK,EAAE,EAAE,CAAC,CAClE,CACF,CAAC;IACJ,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QAC5B,OAAO,KAAK,CAAC,CAAC,IAAI,iBAAiB,CAAC;YAClC,MAAM,EAAE,2BAA2B,QAAQ,CAAC,MAAM,EAAE;SACrD,CAAC,CAAC;IACL,CAAC;IACD,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,CAC3C,MAAM,CAAC,QAAQ,CACb,CAAC,KAAK,EAAE,EAAE,CACR,IAAI,iBAAiB,CAAC,EAAE,MAAM,EAAE,wBAAwB,KAAK,EAAE,EAAE,CAAC,CACrE,CACF,CAAC;IACF,OAAO,KAAK,CAAC,CAAC,kBAAkB,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;AACzD,CAAC,CAAC,CAAC;AAEH,gFAAgF;AAChF,mBAAmB;AACnB,gFAAgF;AAEhF,4EAA4E;AAC5E,MAAM,CAAC,MAAM,sBAAsB,GAAG,CACpC,KAA4B,EAC5B,OAAiD,EACrC,EAAE;IACd,MAAM,KAAK,GAAsB,EAAE,CAAC;IACpC,KAAK,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE;QAC3B,KAAK,CAAC,IAAI,CACR,KAAK,KAAK,CAAC;YACT,CAAC,CAAC,OAAO,CAAC,QAAQ,GAAG,wCAAwC,CAAC;YAC9D,CAAC,CAAC,OAAO,CAAC,QAAQ,GAAG,EAAE,CAAC,CAC3B,CAAC;IACJ,CAAC,CAAC,CAAC;IACH,IAAI,OAAO,EAAE,KAAK,KAAK,SAAS,EAAE,CAAC;QACjC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IACjD,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACrB,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;IAC5B,OAAO,WAAW,CAAC,KAAK,CAAC,CAAC;AAC5B,CAAC,CAAC;AAWF;;;GAGG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,IAAgB;IAC1E,MAAM,OAAO,GAAkB,EAAE,CAAC;IAClC,IAAI,GAAG,GAAG,CAAC,CAAC;IACZ,SAAS,CAAC;QACR,IAAI,GAAG,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YACvB,OAAO,KAAK,CAAC,CAAC,IAAI,iBAAiB,CAAC;gBAClC,MAAM,EAAE,2CAA2C;aACpD,CAAC,CAAC;QACL,CAAC;QACD,MAAM,CAAC,GAAG,aAAa,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QACnC,IAAI,CAAC,CAAC,IAAI,KAAK,YAAY,IAAI,CAAC,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YACpD,OAAO,KAAK,CAAC,CAAC,IAAI,iBAAiB,CAAC;gBAClC,MAAM,EACJ,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,gCAAgC;aACrE,CAAC,CAAC;QACL,CAAC;QACD,GAAG,GAAG,CAAC,CAAC,IAAI,CAAC;QACb,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,KAAK,MAAM;YAAE,SAAS,CAAC,kCAAkC;QACvE,MAAM,IAAI,GAAG,cAAc,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC3C,IAAI,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;YAChC,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;YAC1C,IAAI,KAAK,CAAC,GAAG,CAAC;gBAAE,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAClC,SAAS;QACX,CAAC;QACD,IAAI,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC;YAAE,SAAS;QAC5C,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;YAC5B,OAAO,KAAK,CAAC,CAAC,IAAI,iBAAiB,CAAC;gBAClC,MAAM,EAAE,iBAAiB,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE;aACzC,CAAC,CAAC;QACL,CAAC;QACD,IAAI,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;YAC9C,2DAA2D;YAC3D,OAAO;gBACL,OAAO;gBACP,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;aACI,CAAC;QACjC,CAAC;QACD,4DAA4D;IAC9D,CAAC;AACH,CAAC,CAAC,CAAC;AAEH;;GAEG;AACH,MAAM,CAAC,MAAM,SAAS,GAAG,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAC1C,GAAW,EACX,KAA4B,EAC5B,OAGC;IAED,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC,UAAU,CAAC;IAC5C,MAAM,OAAO,GAAG,OAAO,EAAE,YAAY,IAAI,gBAAgB,CAAC;IAC1D,MAAM,OAAO,GAAG,iBAAiB,CAAC,IAAI,CACpC,GAAG,aAAa,CAAC,GAAG,CAAC,kBAAkB,CACxC,CAAC,IAAI,CACJ,iBAAiB,CAAC,UAAU,CAAC;QAC3B,cAAc,EAAE,uCAAuC;QACvD,MAAM,EAAE,sCAAsC;KAC/C,CAAC,EACF,iBAAiB,CAAC,cAAc,CAC9B,sBAAsB,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CACzD,CACF,CAAC;IACF,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,MAAM;SAC3B,OAAO,CAAC,OAAO,CAAC;SAChB,IAAI,CACH,MAAM,CAAC,QAAQ,CACb,CAAC,KAAK,EAAE,EAAE,CACR,IAAI,iBAAiB,CAAC,EAAE,MAAM,EAAE,2BAA2B,KAAK,EAAE,EAAE,CAAC,CACxE,CACF,CAAC;IACJ,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QAC5B,OAAO,KAAK,CAAC,CAAC,IAAI,iBAAiB,CAAC;YAClC,MAAM,EAAE,iCAAiC,QAAQ,CAAC,MAAM,EAAE;SAC3D,CAAC,CAAC;IACL,CAAC;IACD,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,CAC3C,MAAM,CAAC,QAAQ,CACb,CAAC,KAAK,EAAE,EAAE,CACR,IAAI,iBAAiB,CAAC;QACpB,MAAM,EAAE,8BAA8B,KAAK,EAAE;KAC9C,CAAC,CACL,CACF,CAAC;IACF,IAAI,IAAI,CAAC,UAAU,GAAG,OAAO,GAAG,KAAK,EAAE,CAAC;QACtC,OAAO,KAAK,CAAC,CAAC,IAAI,iBAAiB,CAAC;YAClC,MAAM,EAAE,2BAA2B,OAAO,kBAAkB;SAC7D,CAAC,CAAC;IACL,CAAC;IACD,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,uBAAuB,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;IACpE,IAAI,MAAM,CAAC,IAAI,CAAC,UAAU,GAAG,OAAO,EAAE,CAAC;QACrC,OAAO,KAAK,CAAC,CAAC,IAAI,iBAAiB,CAAC;YAClC,MAAM,EAAE,2BAA2B,OAAO,kBAAkB;SAC7D,CAAC,CAAC;IACL,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC,CAAC,CAAC;AAEH,gFAAgF;AAChF,gBAAgB;AAChB,gFAAgF;AAEhF,0EAA0E;AAC1E,MAAM,UAAU,GAAG,CACjB,UAAoC,EACpC,GAAuB,EACe,EAAE;IACxC,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;QACtB,OAAO,UAAU,CAAC,MAAM,CACtB,CAAC,CAAC,EAAE,EAAE,CACJ,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,CACtE,CAAC;IACJ,CAAC;IACD,MAAM,UAAU,GAAG,CAAC,GAAG,EAAE,cAAc,GAAG,EAAE,EAAE,aAAa,GAAG,EAAE,CAAC,CAAC;IAClE,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IAClE,OAAO,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;AACnD,CAAC,CAAC;AAEF;;;;;GAKG;AACH,MAAM,CAAC,MAAM,SAAS,GAAG,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,OAAsB;IAClE,MAAM,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC;IAC3B,MAAM,aAAa,GAAG,KAAK,CAAC,CAAC,kBAAkB,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAE5D,MAAM,QAAQ,GAAG,UAAU,CAAC,aAAa,CAAC,IAAI,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC;IAC5D,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,OAAO,KAAK,CAAC,CAAC,IAAI,iBAAiB,CAAC;YAClC,MAAM,EAAE,QAAQ,MAAM,CAAC,GAAG,2BAA2B;SACtD,CAAC,CAAC;IACL,CAAC;IAED,MAAM,aAAa,GACjB,aAAa,CAAC,IAAI,KAAK,IAAI,IAAI,aAAa,CAAC,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC;QACzE,CAAC,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,MAAM,CAAC;QAChD,CAAC,CAAC,IAAI,CAAC;IAEX,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,mCAAmC;QACnC,OAAO;YACL,IAAI,EAAE,EAAE;YACR,aAAa;YACb,IAAI,EAAE,SAAS;YACf,OAAO,EAAE,EAAE;SACW,CAAC;IAC3B,CAAC;IAED,yEAAyE;IACzE,0CAA0C;IAC1C,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IAC9D,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,KAAK,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,EAAE,KAAK,EAAE;QAC5D,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,YAAY,EAAE,OAAO,CAAC,YAAY;KACnC,CAAC,CAAC;IAEH,OAAO;QACL,IAAI,EAAE,QAAQ;QACd,aAAa;QACb,IAAI;QACJ,OAAO;KACe,CAAC;AAC3B,CAAC,CAAC,CAAC"}

package/lib/Git/Jobs/Purge.d.ts

@@ -0,0 +1,62 @@
+/**
+ * The delete-purge alarm job (DESIGN.md §2.3 Delete).
+ *
+ * `DELETE /repos/:o/:r` responds 204 immediately; this job then runs from
+ * the Repo DO's alarm until everything is gone:
+ *
+ * 1. **Registry row** — removed FIRST, freeing the `owner/name` for reuse
+ *    right away (the fork pin below never reserves a name).
+ * 2. **R2 prefix** — a bounded list+delete loop over `{repoId}/`, but only
+ *    while no live fork rows reference this repo (`fork_of` count): forks
+ *    reference keys under the parent's prefix by full key (immutable,
+ *    shared), so a forked repo's prefix is retained until its forks are
+ *    gone.
+ * 3. **SQLite** — dropped via `deleteAll` once the pin clears and the
+ *    prefix is drained.
+ *
+ * The job is idempotent and alarm-re-armable: every step tolerates having
+ * already run. A single alarm run deletes at most
+ * {@link MAX_PAGES_PER_RUN} × 1000 R2 objects and reports `"continue"` so
+ * the caller re-arms the alarm instead of blowing the 15-minute budget.
+ */
+import type { BlobStoreShape } from "../BlobStore.ts";
+import * as Effect from "effect/Effect";
+import { StoreError } from "../Protocol/Store.ts";
+/** R2 `list` pages drained per alarm run (1000 keys per page). */
+export declare const MAX_PAGES_PER_RUN = 10;
+/** Outcome of one purge run. */
+export type PurgeOutcome = {
+    /** Everything is gone (R2 prefix, SQLite, Registry row). */
+    readonly _tag: "done";
+} | {
+    /**
+     * More R2 keys remain (or the prefix is fork-pinned); the caller
+     * must re-arm the alarm and run again.
+     */
+    readonly _tag: "continue";
+    /** True when the prefix was retained because `fork_count > 0`. */
+    readonly forkPinned: boolean;
+};
+/** Dependencies of {@link runPurgeJob}. */
+export interface PurgeJobOptions {
+    /** The repo's ULID (R2 key prefix). */
+    readonly repoId: string;
+    /** The swappable bulk-byte store. */
+    readonly blobs: BlobStoreShape;
+    /** Reads the current fork count from the Registry. */
+    readonly forkCount: Effect.Effect<number, StoreError>;
+    /** Drops the DO's entire SQLite/KV state (`storage.deleteAll`). */
+    readonly deleteAllStorage: Effect.Effect<void, StoreError>;
+    /** Removes the Registry row (FIRST step — frees the name; idempotent). */
+    readonly removeRegistryRow: Effect.Effect<void, StoreError>;
+}
+/**
+ * Runs one bounded purge round. The registry row is removed FIRST — the
+ * `owner/name` frees immediately, even while forks pin the R2 prefix.
+ * Returns `"done"` when the repo is fully gone; `"continue"` when the
+ * caller must re-arm the alarm (more R2 keys, or the prefix is pinned by
+ * live forks — the DO's SQLite survives until the pin clears so the alarm
+ * keeps re-arming with the repoId at hand).
+ */
+export declare const runPurgeJob: (options: PurgeJobOptions) => Effect.Effect<PurgeOutcome, StoreError>;
+//# sourceMappingURL=Purge.d.ts.map

package/lib/Git/Jobs/Purge.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"Purge.d.ts","sourceRoot":"","sources":["../../../src/Git/Jobs/Purge.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,OAAO,KAAK,EAAkB,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAEtE,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AAExC,OAAO,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAGlD,kEAAkE;AAClE,eAAO,MAAM,iBAAiB,KAAK,CAAC;AAEpC,gCAAgC;AAChC,MAAM,MAAM,YAAY,GACpB;IACE,4DAA4D;IAC5D,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB,GACD;IACE;;;OAGG;IACH,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAC1B,kEAAkE;IAClE,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC;CAC9B,CAAC;AAEN,2CAA2C;AAC3C,MAAM,WAAW,eAAe;IAC9B,uCAAuC;IACvC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,qCAAqC;IACrC,QAAQ,CAAC,KAAK,EAAE,cAAc,CAAC;IAC/B,sDAAsD;IACtD,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IACtD,mEAAmE;IACnE,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;IAC3D,0EAA0E;IAC1E,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;CAC7D;AAeD;;;;;;;GAOG;AACH,eAAO,MAAM,WAAW,YACb,eAAe,KACvB,MAAM,CAAC,MAAM,CAAC,YAAY,EAAE,UAAU,CAmDrC,CAAC"}

package/lib/Git/Jobs/Purge.js

@@ -0,0 +1,55 @@
+import { RuntimeContext } from "../../RuntimeContext.js";
+import * as Effect from "effect/Effect";
+import * as Stream from "effect/Stream";
+import { StoreError } from "../Protocol/Store.js";
+import { repoPrefix } from "../Store/Keys.js";
+/** R2 `list` pages drained per alarm run (1000 keys per page). */
+export const MAX_PAGES_PER_RUN = 10;
+/** Folds R2 errors into the job's typed error. */
+const r2ToStore = (what) => (effect) => effect.pipe(Effect.mapError((error) => new StoreError({ reason: `${what}: ${error.reason}` })), Effect.provide(RuntimeContext.phantom));
+/**
+ * Runs one bounded purge round. The registry row is removed FIRST — the
+ * `owner/name` frees immediately, even while forks pin the R2 prefix.
+ * Returns `"done"` when the repo is fully gone; `"continue"` when the
+ * caller must re-arm the alarm (more R2 keys, or the prefix is pinned by
+ * live forks — the DO's SQLite survives until the pin clears so the alarm
+ * keeps re-arming with the repoId at hand).
+ */
+export const runPurgeJob = (options) => Effect.gen(function* () {
+    const prefix = repoPrefix(options.repoId);
+    // 1. Free the name IMMEDIATELY — even while fork-pinned. The pin only
+    //    protects the R2 prefix (forks read shared keys under it); the
+    //    `owner/name` must never stay reserved for the lifetime of a fork.
+    //    `forkCount` derives from live `fork_of` rows, so it keeps working
+    //    after this row is gone. Idempotent across alarm retries.
+    yield* options.removeRegistryRow;
+    const forks = yield* options.forkCount;
+    if (forks > 0) {
+        // Fork-retention pin: leave the R2 prefix in place and keep the DO's
+        // SQLite (config carries the repoId; jobs row keeps re-arming) until
+        // the last fork is purged.
+        return { _tag: "continue", forkPinned: true };
+    }
+    // 2. Bounded R2 prefix drain.
+    // Bounded drain: take at most MAX_PAGES_PER_RUN pages worth of keys
+    // from the listing stream, delete in 1000-key batches, and treat a
+    // short take as fully drained.
+    const cap = MAX_PAGES_PER_RUN * 1000;
+    const keys = yield* r2ToStore(`blob list ${prefix}`)(Stream.runCollect(options.blobs.list(prefix).pipe(Stream.take(cap), Stream.map((meta) => meta.key))));
+    for (let at = 0; at < keys.length; at += 1000) {
+        yield* r2ToStore(`blob delete under ${prefix}`)(options.blobs.delete(keys.slice(at, at + 1000)));
+    }
+    const drained = keys.length < cap;
+    if (!drained) {
+        return { _tag: "continue", forkPinned: false };
+    }
+    // 3. Drop the DO's own state (the registry row is already gone — see
+    //    step 1; a crash that loses this `deleteAll` is harmless because a
+    //    re-created `owner/name` mints a fresh repoId and therefore a fresh
+    //    DO, so the stale storage is never addressed again). NOTE: this
+    //    wipes the `jobs` table — the caller must not touch SQLite after
+    //    this point.
+    yield* options.deleteAllStorage;
+    return { _tag: "done" };
+});
+//# sourceMappingURL=Purge.js.map

package/lib/Git/Jobs/Purge.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Purge.js","sourceRoot":"","sources":["../../../src/Git/Jobs/Purge.ts"],"names":[],"mappings":"AAsBA,OAAO,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AACzD,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAClD,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAE9C,kEAAkE;AAClE,MAAM,CAAC,MAAM,iBAAiB,GAAG,EAAE,CAAC;AAgCpC,kDAAkD;AAClD,MAAM,SAAS,GACb,CAAC,IAAY,EAAE,EAAE,CACjB,CACE,MAAwD,EAC1B,EAAE,CAChC,MAAM,CAAC,IAAI,CACT,MAAM,CAAC,QAAQ,CACb,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,UAAU,CAAC,EAAE,MAAM,EAAE,GAAG,IAAI,KAAK,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,CAClE,EACD,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC,OAAO,CAAC,CACvC,CAAC;AAEN;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG,CACzB,OAAwB,EACiB,EAAE,CAC3C,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,MAAM,GAAG,UAAU,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAE1C,sEAAsE;IACtE,mEAAmE;IACnE,uEAAuE;IACvE,uEAAuE;IACvE,8DAA8D;IAC9D,KAAK,CAAC,CAAC,OAAO,CAAC,iBAAiB,CAAC;IAEjC,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC;IACvC,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;QACd,qEAAqE;QACrE,qEAAqE;QACrE,2BAA2B;QAC3B,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,UAAU,EAAE,IAAI,EAAyB,CAAC;IACvE,CAAC;IAED,8BAA8B;IAC9B,oEAAoE;IACpE,mEAAmE;IACnE,+BAA+B;IAC/B,MAAM,GAAG,GAAG,iBAAiB,GAAG,IAAI,CAAC;IACrC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,SAAS,CAAC,aAAa,MAAM,EAAE,CAAC,CAClD,MAAM,CAAC,UAAU,CACf,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAC7B,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAChB,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAC/B,CACF,CACF,CAAC;IACF,KAAK,IAAI,EAAE,GAAG,CAAC,EAAE,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC;QAC9C,KAAK,CAAC,CAAC,SAAS,CAAC,qBAAqB,MAAM,EAAE,CAAC,CAC7C,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,GAAG,IAAI,CAAC,CAAC,CAChD,CAAC;IACJ,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,GAAG,GAAG,CAAC;IAClC,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,UAAU,EAAE,KAAK,EAAyB,CAAC;IACxE,CAAC;IAED,qEAAqE;IACrE,uEAAuE;IACvE,wEAAwE;IACxE,oEAAoE;IACpE,qEAAqE;IACrE,iBAAiB;IACjB,KAAK,CAAC,CAAC,OAAO,CAAC,gBAAgB,CAAC;IAEhC,OAAO,EAAE,IAAI,EAAE,MAAM,EAAyB,CAAC;AACjD,CAAC,CAAC,CAAC"}