codebase-onboarder 0.5.0 → 0.7.0

package/server/daemon.js

@@ -18,178 +18,188 @@
 //   2. Detach properly, or "background" is a lie. `detached: true` puts the
 //      child in its own process group, and `unref()` drops our handle on it, so
 //      a Ctrl-C in the parent terminal does not take the server down with it.
-
 import { spawn } from 'node:child_process';
 import fs from 'node:fs';
 import fsp from 'node:fs/promises';
 import http from 'node:http';
 import path from 'node:path';
 import { fileURLToPath } from 'node:url';
-
 import { configPath } from './config.js';
 import { readPidFile } from './pidfile.js';
-
 const HERE = path.dirname(fileURLToPath(import.meta.url));
-
 // The installed entry point, not `process.argv[1]`: a globally installed
 // `onboarder` is a symlink into node_modules, and the child has to run the real
 // file to find its siblings.
 export const CLI_ENTRY = path.resolve(HERE, '..', 'bin', 'onboarder.js');
-
 // One file per config, beside the config, so `--config` isolation (tests,
 // containers, several profiles) carries the log with it.
 export function logPath(configFile = configPath()) {
-  return path.join(path.dirname(path.resolve(configFile)), 'onboarder.log');
+    return path.join(path.dirname(path.resolve(configFile)), 'onboarder.log');
 }
-
 // Rotated history. One generation is deliberate: a log that grows without bound
 // is a bug report waiting to happen, and one previous file is enough to see what
 // happened just before a crash.
 export const MAX_LOG_BYTES = 2 * 1024 * 1024;
-
 export async function rotateLogIfNeeded(file = logPath(), maxBytes = MAX_LOG_BYTES) {
-  try {
-    const { size } = await fsp.stat(file);
-    if (size <= maxBytes) return false;
-    await fsp.rename(file, file + '.1');
-    return true;
-  } catch {
-    return false; // no log yet, or not ours to move
-  }
+    try {
+        const { size } = await fsp.stat(file);
+        if (size <= maxBytes)
+            return false;
+        await fsp.rename(file, file + '.1');
+        return true;
+    }
+    catch {
+        return false; // no log yet, or not ours to move
+    }
 }
-
 export async function readLog(file = logPath(), bytes = 64 * 1024) {
-  try {
-    const handle = await fsp.open(file, 'r');
     try {
-      const { size } = await handle.stat();
-      const start = Math.max(0, size - bytes);
-      const buffer = Buffer.alloc(size - start);
-      await handle.read(buffer, 0, buffer.length, start);
-      return buffer.toString('utf8');
-    } finally {
-      await handle.close();
+        const handle = await fsp.open(file, 'r');
+        try {
+            const { size } = await handle.stat();
+            const start = Math.max(0, size - bytes);
+            const buffer = Buffer.alloc(size - start);
+            await handle.read(buffer, 0, buffer.length, start);
+            return buffer.toString('utf8');
+        }
+        finally {
+            await handle.close();
+        }
+    }
+    catch {
+        return '';
     }
-  } catch {
-    return '';
-  }
 }
-
 // The last `count` lines, oldest first — the shape `onboarder logs` prints and
 // the shape an error report wants pasted into it.
 export async function tailLog(file = logPath(), count = 40) {
-  const text = await readLog(file);
-  const lines = text.split('\n').filter((line) => line.trim());
-  return lines.slice(-Math.max(1, count));
+    const text = await readLog(file);
+    const lines = text.split('\n').filter((line) => line.trim());
+    return lines.slice(-Math.max(1, count));
 }
-
 export async function logExists(file = logPath()) {
-  try { await fsp.access(file); return true; } catch { return false; }
+    try {
+        await fsp.access(file);
+        return true;
+    }
+    catch {
+        return false;
+    }
 }
-
 // Ask the server whether it is up. A 2xx–4xx from /api/health means the socket
 // is bound and the router is serving; the body is not interesting, the answer is.
 export function probe(url, timeoutMs = 1000) {
-  return new Promise((resolve) => {
-    const request = http.get(url, { timeout: timeoutMs }, (res) => {
-      res.resume();
-      resolve(res.statusCode >= 200 && res.statusCode < 500);
+    return new Promise((resolve) => {
+        const request = http.get(url, { timeout: timeoutMs }, (res) => {
+            res.resume();
+            resolve(res.statusCode >= 200 && res.statusCode < 500);
+        });
+        request.on('timeout', () => { request.destroy(); resolve(false); });
+        request.on('error', () => resolve(false));
     });
-    request.on('timeout', () => { request.destroy(); resolve(false); });
-    request.on('error', () => resolve(false));
-  });
 }
-
 export async function waitForReady(url, { timeoutMs = 20000, intervalMs = 200, check = probe } = {}) {
-  const deadline = Date.now() + timeoutMs;
-  for (;;) {
-    if (await check(url)) return true;
-    if (Date.now() >= deadline) return false;
-    await new Promise((resolve) => setTimeout(resolve, intervalMs));
-  }
+    const deadline = Date.now() + timeoutMs;
+    for (;;) {
+        if (await check(url))
+            return true;
+        if (Date.now() >= deadline)
+            return false;
+        await new Promise((resolve) => setTimeout(resolve, intervalMs));
+    }
 }
-
 // Re-run this same CLI, detached. The child is a plain foreground `start` — it
 // writes the pid file, prints its own banner, and handles signals exactly as it
 // always has. Nothing about the server changes; only who is holding the terminal
 // does.
 export function spawnDetached({ configFile = configPath(), entry = CLI_ENTRY, env = process.env, log = logPath(configFile) } = {}) {
-  const fd = fs.openSync(log, 'a');
-  try {
-    const child = spawn(process.execPath, [entry, 'start', '--config', configFile], {
-      detached: true,
-      stdio: ['ignore', fd, fd],
-      env: { ...env, ONBOARDER_BACKGROUND: '1' },
-    });
-    child.on('error', () => {});
-    child.unref();
-    return child.pid;
-  } finally {
-    fs.closeSync(fd);
-  }
+    const fd = fs.openSync(log, 'a');
+    try {
+        const child = spawn(process.execPath, [entry, 'start', '--config', configFile], {
+            detached: true,
+            stdio: ['ignore', fd, fd],
+            env: { ...env, ONBOARDER_BACKGROUND: '1' },
+        });
+        child.on('error', (..._args) => { });
+        child.unref();
+        return child.pid;
+    }
+    finally {
+        fs.closeSync(fd);
+    }
 }
-
 // Does the OS still have this process? Signal 0 asks without delivering.
 function alive(pid) {
-  try { process.kill(pid, 0); return true; } catch (e) { return e.code === 'EPERM'; }
+    try {
+        process.kill(pid, 0);
+        return true;
+    }
+    catch (e) {
+        return e.code === 'EPERM';
+    }
 }
-
 // Wait for the detached child to become the *recorded* server. The pid file is
 // the authority here, not the spawn pid: it is what `status` and `stop` read,
 // so waiting on it means the process we report is the one the user can control.
 export async function waitForPidFile(configFile, { timeoutMs = 20000, intervalMs = 150, readPid = readPidFile, isAlive = alive } = {}) {
-  const deadline = Date.now() + timeoutMs;
-  for (;;) {
-    const pid = readPid(configFile);
-    if (pid && isAlive(pid)) return pid;
-    if (Date.now() >= deadline) return null;
-    await new Promise((resolve) => setTimeout(resolve, intervalMs));
-  }
+    const deadline = Date.now() + timeoutMs;
+    for (;;) {
+        const pid = readPid(configFile);
+        if (pid && isAlive(pid))
+            return pid;
+        if (Date.now() >= deadline)
+            return null;
+        await new Promise((resolve) => setTimeout(resolve, intervalMs));
+    }
 }
-
 // Follow a growing file. Polling rather than fs.watch: the log is appended by a
 // *different* process, and watchers on a file another process holds open are
 // unreliable across platforms (and absent on some network mounts). Half a second
 // of latency on a human-facing log tail is invisible.
 export function followLog(file, onLine, { intervalMs = 500, from = 'end' } = {}) {
-  let position = 0;
-  let partial = '';
-  let stopped = false;
-  const stop = () => { stopped = true; };
-
-  if (from === 'start') {
-    fsp.readFile(file, 'utf8').then(
-      (text) => { for (const line of text.split('\n')) if (line) onLine(line); },
-      () => {},
-    );
-  }
-
-  const tick = async () => {
-    if (stopped) return;
-    try {
-      const { size } = await fsp.stat(file);
-      if (size < position) { position = 0; partial = ''; } // rotated under us
-      if (size > position) {
-        const handle = await fsp.open(file, 'r');
+    let position = 0;
+    let partial = '';
+    let stopped = false;
+    const stop = () => { stopped = true; };
+    if (from === 'start') {
+        fsp.readFile(file, 'utf8').then((text) => { for (const line of text.split('\n'))
+            if (line)
+                onLine(line); }, (..._args) => { });
+    }
+    const tick = async () => {
+        if (stopped)
+            return;
         try {
-          const length = size - position;
-          const buffer = Buffer.alloc(length);
-          await handle.read(buffer, 0, length, position);
-          position = size;
-          // A read can land mid-line; hold the remainder until its newline shows.
-          const lines = (partial + buffer.toString('utf8')).split('\n');
-          partial = lines.pop() ?? '';
-          for (const line of lines) onLine(line);
-        } finally {
-          await handle.close();
+            const { size } = await fsp.stat(file);
+            if (size < position) {
+                position = 0;
+                partial = '';
+            } // rotated under us
+            if (size > position) {
+                const handle = await fsp.open(file, 'r');
+                try {
+                    const length = size - position;
+                    const buffer = Buffer.alloc(length);
+                    await handle.read(buffer, 0, length, position);
+                    position = size;
+                    // A read can land mid-line; hold the remainder until its newline shows.
+                    const lines = (partial + buffer.toString('utf8')).split('\n');
+                    partial = lines.pop() ?? '';
+                    for (const line of lines)
+                        onLine(line);
+                }
+                finally {
+                    await handle.close();
+                }
+            }
         }
-      }
-    } catch {
-      // The file may not exist yet (first run) — try again on the next tick.
-    }
-    if (!stopped) setTimeout(tick, intervalMs).unref();
-  };
-
-  setTimeout(tick, intervalMs).unref();
-  return stop;
-}
+        catch {
+            // The file may not exist yet (first run) — try again on the next tick.
+        }
+        if (!stopped)
+            setTimeout(tick, intervalMs).unref();
+    };
+    setTimeout(tick, intervalMs).unref();
+    return stop;
+}
+//# sourceMappingURL=daemon.js.map

package/server/daemon.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"daemon.js","sourceRoot":"","sources":["../src/server/daemon.ts"],"names":[],"mappings":"AAAA,6DAA6D;AAC7D,EAAE;AACF,gFAAgF;AAChF,wEAAwE;AACxE,+EAA+E;AAC/E,6EAA6E;AAC7E,8EAA8E;AAC9E,4EAA4E;AAC5E,kBAAkB;AAClB,EAAE;AACF,8BAA8B;AAC9B,EAAE;AACF,0EAA0E;AAC1E,gFAAgF;AAChF,yEAAyE;AACzE,6EAA6E;AAC7E,wDAAwD;AACxD,4EAA4E;AAC5E,gFAAgF;AAChF,8EAA8E;AAE9E,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,GAAG,MAAM,kBAAkB,CAAC;AACnC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAE3C,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AAE1D,yEAAyE;AACzE,gFAAgF;AAChF,6BAA6B;AAC7B,MAAM,CAAC,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,cAAc,CAAC,CAAC;AAEzE,0EAA0E;AAC1E,yDAAyD;AACzD,MAAM,UAAU,OAAO,CAAC,UAAU,GAAG,UAAU,EAAE;IAC/C,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,EAAE,eAAe,CAAC,CAAC;AAC5E,CAAC;AAED,gFAAgF;AAChF,iFAAiF;AACjF,gCAAgC;AAChC,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;AAE7C,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,IAAI,GAAG,OAAO,EAAE,EAAE,QAAQ,GAAG,aAAa;IAChF,IAAI,CAAC;QACH,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACtC,IAAI,IAAI,IAAI,QAAQ;YAAE,OAAO,KAAK,CAAC;QACnC,MAAM,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,GAAG,IAAI,CAAC,CAAC;QACpC,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC,CAAC,kCAAkC;IAClD,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,IAAI,GAAG,OAAO,EAAE,EAAE,KAAK,GAAG,EAAE,GAAG,IAAI;IAC/D,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QACzC,IAAI,CAAC;YACH,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;YACrC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,GAAG,KAAK,CAAC,CAAC;YACxC,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,GAAG,KAAK,CAAC,CAAC;YAC1C,MAAM,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;YACnD,OAAO,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACjC,CAAC;gBAAS,CAAC;YACT,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;QACvB,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,+EAA+E;AAC/E,kDAAkD;AAClD,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,IAAI,GAAG,OAAO,EAAE,EAAE,KAAK,GAAG,EAAE;IACxD,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IACjC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;IAC7D,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC;AAC1C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,IAAI,GAAG,OAAO,EAAE;IAC9C,IAAI,CAAC;QAAC,MAAM,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAAC,OAAO,IAAI,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,KAAK,CAAC;IAAC,CAAC;AACtE,CAAC;AAED,+EAA+E;AAC/E,kFAAkF;AAClF,MAAM,UAAU,KAAK,CAAC,GAAG,EAAE,SAAS,GAAG,IAAI;IACzC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,CAAC,GAAG,EAAE,EAAE;YAC5D,GAAG,CAAC,MAAM,EAAE,CAAC;YACb,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,GAAG,IAAI,GAAG,CAAC,UAAU,GAAG,GAAG,CAAC,CAAC;QACzD,CAAC,CAAC,CAAC;QACH,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACpE,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,GAAG,EAAE,EAAE,SAAS,GAAG,KAAK,EAAE,UAAU,GAAG,GAAG,EAAE,KAAK,GAAG,KAAK,EAAE,GAAwB,EAAE;IACtH,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;IACxC,SAAS,CAAC;QACR,IAAI,MAAM,KAAK,CAAC,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;QAClC,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,QAAQ;YAAE,OAAO,KAAK,CAAC;QACzC,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC,CAAC;IAClE,CAAC;AACH,CAAC;AAED,+EAA+E;AAC/E,gFAAgF;AAChF,iFAAiF;AACjF,QAAQ;AACR,MAAM,UAAU,aAAa,CAAC,EAAE,UAAU,GAAG,UAAU,EAAE,EAAE,KAAK,GAAG,SAAS,EAAE,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,GAAG,GAAG,OAAO,CAAC,UAAU,CAAC,EAAE,GAAwB,EAAE;IACpJ,MAAM,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IACjC,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,UAAU,EAAE,UAAU,CAAC,EAAE;YAC9E,QAAQ,EAAE,IAAI;YACd,KAAK,EAAE,CAAC,QAAQ,EAAE,EAAE,EAAE,EAAE,CAAC;YACzB,GAAG,EAAE,EAAE,GAAG,GAAG,EAAE,oBAAoB,EAAE,GAAG,EAAE;SAC3C,CAAC,CAAC;QACH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,KAAgB,EAAE,EAAE,GAAE,CAAC,CAAC,CAAC;QAC/C,KAAK,CAAC,KAAK,EAAE,CAAC;QACd,OAAO,KAAK,CAAC,GAAG,CAAC;IACnB,CAAC;YAAS,CAAC;QACT,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IACnB,CAAC;AACH,CAAC;AAED,yEAAyE;AACzE,SAAS,KAAK,CAAC,GAAG;IAChB,IAAI,CAAC;QAAC,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QAAC,OAAO,IAAI,CAAC;IAAC,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QAAC,OAAO,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC;IAAC,CAAC;AACrF,CAAC;AAED,+EAA+E;AAC/E,8EAA8E;AAC9E,gFAAgF;AAChF,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,UAAU,EAAE,EAAE,SAAS,GAAG,KAAK,EAAE,UAAU,GAAG,GAAG,EAAE,OAAO,GAAG,WAAW,EAAE,OAAO,GAAG,KAAK,EAAE,GAAwB,EAAE;IACxJ,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;IACxC,SAAS,CAAC;QACR,MAAM,GAAG,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;QAChC,IAAI,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;YAAE,OAAO,GAAG,CAAC;QACpC,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,QAAQ;YAAE,OAAO,IAAI,CAAC;QACxC,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC,CAAC;IAClE,CAAC;AACH,CAAC;AAED,gFAAgF;AAChF,6EAA6E;AAC7E,iFAAiF;AACjF,sDAAsD;AACtD,MAAM,UAAU,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,UAAU,GAAG,GAAG,EAAE,IAAI,GAAG,KAAK,EAAE,GAAwB,EAAE;IAClG,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,IAAI,OAAO,GAAG,EAAE,CAAC;IACjB,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,MAAM,IAAI,GAAG,GAAG,EAAE,GAAG,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IAEvC,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;QACrB,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,IAAI,CAC7B,CAAC,IAAI,EAAE,EAAE,GAAG,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;YAAE,IAAI,IAAI;gBAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAC1E,CAAC,GAAG,KAAgB,EAAE,EAAE,GAAE,CAAC,CAC5B,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,GAAG,KAAK,IAAI,EAAE;QACtB,IAAI,OAAO;YAAE,OAAO;QACpB,IAAI,CAAC;YACH,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACtC,IAAI,IAAI,GAAG,QAAQ,EAAE,CAAC;gBAAC,QAAQ,GAAG,CAAC,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;YAAC,CAAC,CAAC,mBAAmB;YACxE,IAAI,IAAI,GAAG,QAAQ,EAAE,CAAC;gBACpB,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;gBACzC,IAAI,CAAC;oBACH,MAAM,MAAM,GAAG,IAAI,GAAG,QAAQ,CAAC;oBAC/B,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;oBACpC,MAAM,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;oBAC/C,QAAQ,GAAG,IAAI,CAAC;oBAChB,wEAAwE;oBACxE,MAAM,KAAK,GAAG,CAAC,OAAO,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;oBAC9D,OAAO,GAAG,KAAK,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC;oBAC5B,KAAK,MAAM,IAAI,IAAI,KAAK;wBAAE,MAAM,CAAC,IAAI,CAAC,CAAC;gBACzC,CAAC;wBAAS,CAAC;oBACT,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;gBACvB,CAAC;YACH,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,uEAAuE;QACzE,CAAC;QACD,IAAI,CAAC,OAAO;YAAE,UAAU,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC,KAAK,EAAE,CAAC;IACrD,CAAC,CAAC;IAEF,UAAU,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC,KAAK,EAAE,CAAC;IACrC,OAAO,IAAI,CAAC;AACd,CAAC","sourcesContent":["// Running the server without the terminal that asked for it.\n//\n// `onboarder start` keeps the process attached: closing the shell kills it, and\n// that is the right behavior for a foreground command. `onboarder start\n// background` wants the opposite — the whole point is that the terminal can go\n// away — so this module does what a shell job control cannot do portably: it\n// re-launches the CLI as a **detached** child with its stdio pointed at a log\n// file, unrefs it, and then waits for the port to actually answer before it\n// claims success.\n//\n// Two rules keep this honest:\n//\n//   1. Never report \"running\" on the strength of the spawn alone. `spawn`\n//      returning a pid proves a process was created, not that it bound the port\n//      or survived settings validation. Readiness is an HTTP answer from\n//      `/api/health`, polled with a deadline; on timeout the caller gets the\n//      child's last log lines, not a false green light.\n//   2. Detach properly, or \"background\" is a lie. `detached: true` puts the\n//      child in its own process group, and `unref()` drops our handle on it, so\n//      a Ctrl-C in the parent terminal does not take the server down with it.\n\nimport { spawn } from 'node:child_process';\nimport fs from 'node:fs';\nimport fsp from 'node:fs/promises';\nimport http from 'node:http';\nimport path from 'node:path';\nimport { fileURLToPath } from 'node:url';\n\nimport { configPath } from './config.js';\nimport { readPidFile } from './pidfile.js';\n\nconst HERE = path.dirname(fileURLToPath(import.meta.url));\n\n// The installed entry point, not `process.argv[1]`: a globally installed\n// `onboarder` is a symlink into node_modules, and the child has to run the real\n// file to find its siblings.\nexport const CLI_ENTRY = path.resolve(HERE, '..', 'bin', 'onboarder.js');\n\n// One file per config, beside the config, so `--config` isolation (tests,\n// containers, several profiles) carries the log with it.\nexport function logPath(configFile = configPath()) {\n  return path.join(path.dirname(path.resolve(configFile)), 'onboarder.log');\n}\n\n// Rotated history. One generation is deliberate: a log that grows without bound\n// is a bug report waiting to happen, and one previous file is enough to see what\n// happened just before a crash.\nexport const MAX_LOG_BYTES = 2 * 1024 * 1024;\n\nexport async function rotateLogIfNeeded(file = logPath(), maxBytes = MAX_LOG_BYTES) {\n  try {\n    const { size } = await fsp.stat(file);\n    if (size <= maxBytes) return false;\n    await fsp.rename(file, file + '.1');\n    return true;\n  } catch {\n    return false; // no log yet, or not ours to move\n  }\n}\n\nexport async function readLog(file = logPath(), bytes = 64 * 1024) {\n  try {\n    const handle = await fsp.open(file, 'r');\n    try {\n      const { size } = await handle.stat();\n      const start = Math.max(0, size - bytes);\n      const buffer = Buffer.alloc(size - start);\n      await handle.read(buffer, 0, buffer.length, start);\n      return buffer.toString('utf8');\n    } finally {\n      await handle.close();\n    }\n  } catch {\n    return '';\n  }\n}\n\n// The last `count` lines, oldest first — the shape `onboarder logs` prints and\n// the shape an error report wants pasted into it.\nexport async function tailLog(file = logPath(), count = 40) {\n  const text = await readLog(file);\n  const lines = text.split('\\n').filter((line) => line.trim());\n  return lines.slice(-Math.max(1, count));\n}\n\nexport async function logExists(file = logPath()) {\n  try { await fsp.access(file); return true; } catch { return false; }\n}\n\n// Ask the server whether it is up. A 2xx–4xx from /api/health means the socket\n// is bound and the router is serving; the body is not interesting, the answer is.\nexport function probe(url, timeoutMs = 1000) {\n  return new Promise((resolve) => {\n    const request = http.get(url, { timeout: timeoutMs }, (res) => {\n      res.resume();\n      resolve(res.statusCode >= 200 && res.statusCode < 500);\n    });\n    request.on('timeout', () => { request.destroy(); resolve(false); });\n    request.on('error', () => resolve(false));\n  });\n}\n\nexport async function waitForReady(url, { timeoutMs = 20000, intervalMs = 200, check = probe }: Record<string, any> = {}) {\n  const deadline = Date.now() + timeoutMs;\n  for (;;) {\n    if (await check(url)) return true;\n    if (Date.now() >= deadline) return false;\n    await new Promise((resolve) => setTimeout(resolve, intervalMs));\n  }\n}\n\n// Re-run this same CLI, detached. The child is a plain foreground `start` — it\n// writes the pid file, prints its own banner, and handles signals exactly as it\n// always has. Nothing about the server changes; only who is holding the terminal\n// does.\nexport function spawnDetached({ configFile = configPath(), entry = CLI_ENTRY, env = process.env, log = logPath(configFile) }: Record<string, any> = {}) {\n  const fd = fs.openSync(log, 'a');\n  try {\n    const child = spawn(process.execPath, [entry, 'start', '--config', configFile], {\n      detached: true,\n      stdio: ['ignore', fd, fd],\n      env: { ...env, ONBOARDER_BACKGROUND: '1' },\n    });\n    child.on('error', (..._args: unknown[]) => {});\n    child.unref();\n    return child.pid;\n  } finally {\n    fs.closeSync(fd);\n  }\n}\n\n// Does the OS still have this process? Signal 0 asks without delivering.\nfunction alive(pid) {\n  try { process.kill(pid, 0); return true; } catch (e) { return e.code === 'EPERM'; }\n}\n\n// Wait for the detached child to become the *recorded* server. The pid file is\n// the authority here, not the spawn pid: it is what `status` and `stop` read,\n// so waiting on it means the process we report is the one the user can control.\nexport async function waitForPidFile(configFile, { timeoutMs = 20000, intervalMs = 150, readPid = readPidFile, isAlive = alive }: Record<string, any> = {}) {\n  const deadline = Date.now() + timeoutMs;\n  for (;;) {\n    const pid = readPid(configFile);\n    if (pid && isAlive(pid)) return pid;\n    if (Date.now() >= deadline) return null;\n    await new Promise((resolve) => setTimeout(resolve, intervalMs));\n  }\n}\n\n// Follow a growing file. Polling rather than fs.watch: the log is appended by a\n// *different* process, and watchers on a file another process holds open are\n// unreliable across platforms (and absent on some network mounts). Half a second\n// of latency on a human-facing log tail is invisible.\nexport function followLog(file, onLine, { intervalMs = 500, from = 'end' }: Record<string, any> = {}) {\n  let position = 0;\n  let partial = '';\n  let stopped = false;\n  const stop = () => { stopped = true; };\n\n  if (from === 'start') {\n    fsp.readFile(file, 'utf8').then(\n      (text) => { for (const line of text.split('\\n')) if (line) onLine(line); },\n      (..._args: unknown[]) => {},\n    );\n  }\n\n  const tick = async () => {\n    if (stopped) return;\n    try {\n      const { size } = await fsp.stat(file);\n      if (size < position) { position = 0; partial = ''; } // rotated under us\n      if (size > position) {\n        const handle = await fsp.open(file, 'r');\n        try {\n          const length = size - position;\n          const buffer = Buffer.alloc(length);\n          await handle.read(buffer, 0, length, position);\n          position = size;\n          // A read can land mid-line; hold the remainder until its newline shows.\n          const lines = (partial + buffer.toString('utf8')).split('\\n');\n          partial = lines.pop() ?? '';\n          for (const line of lines) onLine(line);\n        } finally {\n          await handle.close();\n        }\n      }\n    } catch {\n      // The file may not exist yet (first run) — try again on the next tick.\n    }\n    if (!stopped) setTimeout(tick, intervalMs).unref();\n  };\n\n  setTimeout(tick, intervalMs).unref();\n  return stop;\n}"]}

package/server/fileSourceNode.d.ts

@@ -0,0 +1,2 @@
+import type { FileSource } from '../shared/contracts.js';
+export declare function nodeFileSource(rootAbs: string): FileSource;

package/server/fileSourceNode.js

@@ -1,44 +1,42 @@
 // FileSource over node:fs. Paths crossing the boundary are repo-relative
 // POSIX style; this adapter is the only place that knows about the real
 // filesystem layout.
-
 import { promises as fs } from 'node:fs';
 import path from 'node:path';
-
 import { resolveInside } from './paths.js';
-
 export function nodeFileSource(rootAbs) {
-  const toAbs = (rel) => {
-    // `list('')` is how the scanner asks for the top of the repo. Everywhere
-    // else an empty path is a caller mistake, which is why resolveInside
-    // refuses it rather than quietly meaning "the root".
-    if (rel === '' || rel == null) return rootAbs;
-    // The scanner only ever produces paths from directory listings, so this
-    // should never fire — but it's the same check the HTTP routes use, and a
-    // free one.
-    const abs = resolveInside(rootAbs, String(rel));
-    if (!abs) throw new Error('Path escapes the repository root');
-    return abs;
-  };
-
-  return {
-    kind: 'node',
-    root: rootAbs,
-    name: path.basename(rootAbs),
-
-    async list(dir) {
-      const entries = await fs.readdir(toAbs(dir), { withFileTypes: true });
-      const out = [];
-      for (const e of entries) {
-        if (e.isSymbolicLink()) continue; // no loops, no surprises
-        const rel = dir ? dir + '/' + e.name : e.name;
-        out.push({ name: e.name, path: rel, type: e.isDirectory() ? 'dir' : 'file' });
-      }
-      return out;
-    },
-
-    async read(rel) {
-      return fs.readFile(toAbs(rel), 'utf8');
-    },
-  };
+    const toAbs = (rel) => {
+        // `list('')` is how the scanner asks for the top of the repo. Everywhere
+        // else an empty path is a caller mistake, which is why resolveInside
+        // refuses it rather than quietly meaning "the root".
+        if (rel === '' || rel == null)
+            return rootAbs;
+        // The scanner only ever produces paths from directory listings, so this
+        // should never fire — but it's the same check the HTTP routes use, and a
+        // free one.
+        const abs = resolveInside(rootAbs, String(rel));
+        if (!abs)
+            throw new Error('Path escapes the repository root');
+        return abs;
+    };
+    return {
+        kind: 'node',
+        root: rootAbs,
+        name: path.basename(rootAbs),
+        async list(dir) {
+            const entries = await fs.readdir(toAbs(dir), { withFileTypes: true });
+            const out = [];
+            for (const e of entries) {
+                if (e.isSymbolicLink())
+                    continue; // no loops, no surprises
+                const rel = dir ? dir + '/' + e.name : e.name;
+                out.push({ name: e.name, path: rel, type: e.isDirectory() ? 'dir' : 'file' });
+            }
+            return out;
+        },
+        async read(rel) {
+            return fs.readFile(toAbs(rel), 'utf8');
+        },
+    };
 }
+//# sourceMappingURL=fileSourceNode.js.map

package/server/fileSourceNode.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fileSourceNode.js","sourceRoot":"","sources":["../src/server/fileSourceNode.ts"],"names":[],"mappings":"AACA,yEAAyE;AACzE,wEAAwE;AACxE,qBAAqB;AAErB,OAAO,EAAE,QAAQ,IAAI,EAAE,EAAE,MAAM,SAAS,CAAC;AACzC,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAE3C,MAAM,UAAU,cAAc,CAAC,OAAe;IAC5C,MAAM,KAAK,GAAG,CAAC,GAAW,EAAU,EAAE;QACpC,yEAAyE;QACzE,qEAAqE;QACrE,qDAAqD;QACrD,IAAI,GAAG,KAAK,EAAE,IAAI,GAAG,IAAI,IAAI;YAAE,OAAO,OAAO,CAAC;QAC9C,wEAAwE;QACxE,yEAAyE;QACzE,YAAY;QACZ,MAAM,GAAG,GAAG,aAAa,CAAC,OAAO,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;QAChD,IAAI,CAAC,GAAG;YAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;QAC9D,OAAO,GAAG,CAAC;IACb,CAAC,CAAC;IAEF,OAAO;QACL,IAAI,EAAE,MAAM;QACZ,IAAI,EAAE,OAAO;QACb,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC;QAE5B,KAAK,CAAC,IAAI,CAAC,GAAW;YACpB,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;YACtE,MAAM,GAAG,GAAgB,EAAE,CAAC;YAC5B,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;gBACxB,IAAI,CAAC,CAAC,cAAc,EAAE;oBAAE,SAAS,CAAC,yBAAyB;gBAC3D,MAAM,GAAG,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG,GAAG,GAAG,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;gBAC9C,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;YAChF,CAAC;YACD,OAAO,GAAG,CAAC;QACb,CAAC;QAED,KAAK,CAAC,IAAI,CAAC,GAAW;YACpB,OAAO,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,CAAC;QACzC,CAAC;KACF,CAAC;AACJ,CAAC","sourcesContent":["import type { FileSource, FileEntry } from '../shared/contracts.js';\n// FileSource over node:fs. Paths crossing the boundary are repo-relative\n// POSIX style; this adapter is the only place that knows about the real\n// filesystem layout.\n\nimport { promises as fs } from 'node:fs';\nimport path from 'node:path';\n\nimport { resolveInside } from './paths.js';\n\nexport function nodeFileSource(rootAbs: string): FileSource {\n  const toAbs = (rel: string): string => {\n    // `list('')` is how the scanner asks for the top of the repo. Everywhere\n    // else an empty path is a caller mistake, which is why resolveInside\n    // refuses it rather than quietly meaning \"the root\".\n    if (rel === '' || rel == null) return rootAbs;\n    // The scanner only ever produces paths from directory listings, so this\n    // should never fire — but it's the same check the HTTP routes use, and a\n    // free one.\n    const abs = resolveInside(rootAbs, String(rel));\n    if (!abs) throw new Error('Path escapes the repository root');\n    return abs;\n  };\n\n  return {\n    kind: 'node',\n    root: rootAbs,\n    name: path.basename(rootAbs),\n\n    async list(dir: string): Promise<FileEntry[]> {\n      const entries = await fs.readdir(toAbs(dir), { withFileTypes: true });\n      const out: FileEntry[] = [];\n      for (const e of entries) {\n        if (e.isSymbolicLink()) continue; // no loops, no surprises\n        const rel = dir ? dir + '/' + e.name : e.name;\n        out.push({ name: e.name, path: rel, type: e.isDirectory() ? 'dir' : 'file' });\n      }\n      return out;\n    },\n\n    async read(rel: string): Promise<string> {\n      return fs.readFile(toAbs(rel), 'utf8');\n    },\n  };\n}\n"]}

package/server/gitClone.d.ts

@@ -0,0 +1,9 @@
+export declare function isCloneDir(dir: any): boolean;
+export declare function assertGitUrl(url: any): string;
+export declare function repoNameFromUrl(url: any): string;
+export declare function cloneRepo(url: any): Promise<{
+    id: string;
+    dir: string;
+}>;
+export declare function removeClone(dir: any): Promise<void>;
+export declare function removeCloneSync(dir: any): void;

package/server/gitClone.js

@@ -1,95 +1,93 @@
 // Shallow-cloning for the git-URL flow. The URL is validated, then passed to
 // git as an argument array — never through a shell — so nothing in it gets
 // executed. Clones land in the OS temp dir and are removed on request.
-
 import { spawn } from 'node:child_process';
 import { promises as fs, rmSync } from 'node:fs';
 import os from 'node:os';
 import path from 'node:path';
 import crypto from 'node:crypto';
-
 const GIT_URL_RE = /^(https?:\/\/[^\s]+|git@[^\s:]+:[^\s]+|ssh:\/\/[^\s]+)$/;
 const CLONE_TIMEOUT_MS = 180_000;
-
 // Where clones go, and the only shape of path the removals below will touch.
 // One definition: a delete that walks a directory tree should not be guarded by
 // a condition restated at each call site.
 const CLONE_PREFIX = path.join(os.tmpdir(), 'onboarder-');
-
 export function isCloneDir(dir) {
-  return typeof dir === 'string' && dir.startsWith(CLONE_PREFIX) && dir !== CLONE_PREFIX;
+    return typeof dir === 'string' && dir.startsWith(CLONE_PREFIX) && dir !== CLONE_PREFIX;
 }
-
 export function assertGitUrl(url) {
-  if (typeof url !== 'string' || !GIT_URL_RE.test(url.trim())) {
-    throw new Error('That doesn’t look like a git URL. https://, ssh:// or git@ forms work.');
-  }
-  return url.trim();
+    if (typeof url !== 'string' || !GIT_URL_RE.test(url.trim())) {
+        throw new Error('That doesn’t look like a git URL. https://, ssh:// or git@ forms work.');
+    }
+    return url.trim();
 }
-
 // The name people recognize, from any URL shape we accept:
 // https://github.com/org/repo.git, ssh://host/org/repo, git@host:org/repo
 export function repoNameFromUrl(url) {
-  const clean = String(url).trim().replace(/\.git$/, '').replace(/\/+$/, '');
-  const tail = !clean.includes('://') && clean.includes(':') ? clean.split(':').pop() : clean;
-  return tail.split('/').pop() || 'repo';
+    const clean = String(url).trim().replace(/\.git$/, '').replace(/\/+$/, '');
+    const tail = !clean.includes('://') && clean.includes(':') ? clean.split(':').pop() : clean;
+    return tail.split('/').pop() || 'repo';
 }
-
 export async function cloneRepo(url) {
-  const id = crypto.randomBytes(6).toString('hex');
-  const dir = CLONE_PREFIX + id;
-  try {
-    // Blobless rather than shallow: `--depth 1` threw the history away, and
-    // history is half of what this tool has to say (churn × complexity).
-    // `--filter=blob:none` fetches every commit and tree but no file versions —
-    // full history at a fraction of a full clone's weight; blobs arrive on
-    // demand if anything ever checks one out. `--single-branch` keeps it to the
-    // default branch: the newcomer cares about main, not every fork line.
-    await run('git', ['clone', '--filter=blob:none', '--single-branch', '--quiet', url, dir]);
-  } catch (err) {
-    await fs.rm(dir, { recursive: true, force: true }).catch(() => {});
-    throw err;
-  }
-  return { id, dir };
+    const id = crypto.randomBytes(6).toString('hex');
+    const dir = CLONE_PREFIX + id;
+    try {
+        // Blobless rather than shallow: `--depth 1` threw the history away, and
+        // history is half of what this tool has to say (churn × complexity).
+        // `--filter=blob:none` fetches every commit and tree but no file versions —
+        // full history at a fraction of a full clone's weight; blobs arrive on
+        // demand if anything ever checks one out. `--single-branch` keeps it to the
+        // default branch: the newcomer cares about main, not every fork line.
+        await run('git', ['clone', '--filter=blob:none', '--single-branch', '--quiet', url, dir]);
+    }
+    catch (err) {
+        await fs.rm(dir, { recursive: true, force: true }).catch((..._args) => { });
+        throw err;
+    }
+    return { id, dir };
 }
-
 export async function removeClone(dir) {
-  if (!isCloneDir(dir)) return;
-  await fs.rm(dir, { recursive: true, force: true }).catch(() => {});
+    if (!isCloneDir(dir))
+        return;
+    await fs.rm(dir, { recursive: true, force: true }).catch((..._args) => { });
 }
-
 // The version an exit handler can actually finish. A process on its way out will
 // not come back to resolve a promise, so the sweep on shutdown has to be
 // synchronous or it does not happen at all.
 export function removeCloneSync(dir) {
-  if (!isCloneDir(dir)) return;
-  try {
-    rmSync(dir, { recursive: true, force: true });
-  } catch {
-    /* going down anyway; a leftover temp dir is not worth a crash on exit */
-  }
+    if (!isCloneDir(dir))
+        return;
+    try {
+        rmSync(dir, { recursive: true, force: true });
+    }
+    catch {
+        /* going down anyway; a leftover temp dir is not worth a crash on exit */
+    }
 }
-
 function run(cmd, args) {
-  return new Promise((resolve, reject) => {
-    const child = spawn(cmd, args, { stdio: ['ignore', 'ignore', 'pipe'] });
-    let stderr = '';
-    child.stderr.on('data', (chunk) => {
-      stderr += chunk;
-      if (stderr.length > 4000) stderr = stderr.slice(-4000);
+    return new Promise((resolve, reject) => {
+        const child = spawn(cmd, args, { stdio: ['ignore', 'ignore', 'pipe'] });
+        let stderr = '';
+        child.stderr.on('data', (chunk) => {
+            stderr += chunk;
+            if (stderr.length > 4000)
+                stderr = stderr.slice(-4000);
+        });
+        const timer = setTimeout(() => {
+            child.kill('SIGKILL');
+            reject(new Error('git clone took too long and was stopped.'));
+        }, CLONE_TIMEOUT_MS);
+        child.on('error', (err) => {
+            clearTimeout(timer);
+            reject(new Error('Could not run git: ' + err.message));
+        });
+        child.on('close', (code) => {
+            clearTimeout(timer);
+            if (code === 0)
+                resolve();
+            else
+                reject(new Error('git clone failed. ' + (stderr.trim().split('\n').pop() || '')));
+        });
     });
-    const timer = setTimeout(() => {
-      child.kill('SIGKILL');
-      reject(new Error('git clone took too long and was stopped.'));
-    }, CLONE_TIMEOUT_MS);
-    child.on('error', (err) => {
-      clearTimeout(timer);
-      reject(new Error('Could not run git: ' + err.message));
-    });
-    child.on('close', (code) => {
-      clearTimeout(timer);
-      if (code === 0) resolve();
-      else reject(new Error('git clone failed. ' + (stderr.trim().split('\n').pop() || '')));
-    });
-  });
 }
+//# sourceMappingURL=gitClone.js.map

package/server/gitClone.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gitClone.js","sourceRoot":"","sources":["../src/server/gitClone.ts"],"names":[],"mappings":"AAAA,6EAA6E;AAC7E,2EAA2E;AAC3E,uEAAuE;AAEvE,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,QAAQ,IAAI,EAAE,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjD,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,MAAM,MAAM,aAAa,CAAC;AAEjC,MAAM,UAAU,GAAG,yDAAyD,CAAC;AAC7E,MAAM,gBAAgB,GAAG,OAAO,CAAC;AAEjC,6EAA6E;AAC7E,gFAAgF;AAChF,0CAA0C;AAC1C,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,YAAY,CAAC,CAAC;AAE1D,MAAM,UAAU,UAAU,CAAC,GAAG;IAC5B,OAAO,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,UAAU,CAAC,YAAY,CAAC,IAAI,GAAG,KAAK,YAAY,CAAC;AACzF,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,GAAG;IAC9B,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;QAC5D,MAAM,IAAI,KAAK,CAAC,wEAAwE,CAAC,CAAC;IAC5F,CAAC;IACD,OAAO,GAAG,CAAC,IAAI,EAAE,CAAC;AACpB,CAAC;AAED,2DAA2D;AAC3D,0EAA0E;AAC1E,MAAM,UAAU,eAAe,CAAC,GAAG;IACjC,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAC3E,MAAM,IAAI,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC;IAC5F,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,IAAI,MAAM,CAAC;AACzC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,GAAG;IACjC,MAAM,EAAE,GAAG,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IACjD,MAAM,GAAG,GAAG,YAAY,GAAG,EAAE,CAAC;IAC9B,IAAI,CAAC;QACH,wEAAwE;QACxE,qEAAqE;QACrE,4EAA4E;QAC5E,uEAAuE;QACvE,4EAA4E;QAC5E,sEAAsE;QACtE,MAAM,GAAG,CAAC,KAAK,EAAE,CAAC,OAAO,EAAE,oBAAoB,EAAE,iBAAiB,EAAE,SAAS,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;IAC5F,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,KAAgB,EAAE,EAAE,GAAE,CAAC,CAAC,CAAC;QACtF,MAAM,GAAG,CAAC;IACZ,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC;AACrB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,GAAG;IACnC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO;IAC7B,MAAM,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,KAAgB,EAAE,EAAE,GAAE,CAAC,CAAC,CAAC;AACxF,CAAC;AAED,iFAAiF;AACjF,yEAAyE;AACzE,4CAA4C;AAC5C,MAAM,UAAU,eAAe,CAAC,GAAG;IACjC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO;IAC7B,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAChD,CAAC;IAAC,MAAM,CAAC;QACP,yEAAyE;IAC3E,CAAC;AACH,CAAC;AAED,SAAS,GAAG,CAAC,GAAG,EAAE,IAAI;IACpB,OAAO,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC3C,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;QACxE,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE;YAChC,MAAM,IAAI,KAAK,CAAC;YAChB,IAAI,MAAM,CAAC,MAAM,GAAG,IAAI;gBAAE,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC;QACzD,CAAC,CAAC,CAAC;QACH,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC5B,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACtB,MAAM,CAAC,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC,CAAC;QAChE,CAAC,EAAE,gBAAgB,CAAC,CAAC;QACrB,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;YACxB,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,MAAM,CAAC,IAAI,KAAK,CAAC,qBAAqB,GAAG,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC;QACzD,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;YACzB,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,IAAI,IAAI,KAAK,CAAC;gBAAE,OAAO,EAAE,CAAC;;gBACrB,MAAM,CAAC,IAAI,KAAK,CAAC,oBAAoB,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QACzF,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC","sourcesContent":["// Shallow-cloning for the git-URL flow. The URL is validated, then passed to\n// git as an argument array — never through a shell — so nothing in it gets\n// executed. Clones land in the OS temp dir and are removed on request.\n\nimport { spawn } from 'node:child_process';\nimport { promises as fs, rmSync } from 'node:fs';\nimport os from 'node:os';\nimport path from 'node:path';\nimport crypto from 'node:crypto';\n\nconst GIT_URL_RE = /^(https?:\\/\\/[^\\s]+|git@[^\\s:]+:[^\\s]+|ssh:\\/\\/[^\\s]+)$/;\nconst CLONE_TIMEOUT_MS = 180_000;\n\n// Where clones go, and the only shape of path the removals below will touch.\n// One definition: a delete that walks a directory tree should not be guarded by\n// a condition restated at each call site.\nconst CLONE_PREFIX = path.join(os.tmpdir(), 'onboarder-');\n\nexport function isCloneDir(dir) {\n  return typeof dir === 'string' && dir.startsWith(CLONE_PREFIX) && dir !== CLONE_PREFIX;\n}\n\nexport function assertGitUrl(url) {\n  if (typeof url !== 'string' || !GIT_URL_RE.test(url.trim())) {\n    throw new Error('That doesn’t look like a git URL. https://, ssh:// or git@ forms work.');\n  }\n  return url.trim();\n}\n\n// The name people recognize, from any URL shape we accept:\n// https://github.com/org/repo.git, ssh://host/org/repo, git@host:org/repo\nexport function repoNameFromUrl(url) {\n  const clean = String(url).trim().replace(/\\.git$/, '').replace(/\\/+$/, '');\n  const tail = !clean.includes('://') && clean.includes(':') ? clean.split(':').pop() : clean;\n  return tail.split('/').pop() || 'repo';\n}\n\nexport async function cloneRepo(url) {\n  const id = crypto.randomBytes(6).toString('hex');\n  const dir = CLONE_PREFIX + id;\n  try {\n    // Blobless rather than shallow: `--depth 1` threw the history away, and\n    // history is half of what this tool has to say (churn × complexity).\n    // `--filter=blob:none` fetches every commit and tree but no file versions —\n    // full history at a fraction of a full clone's weight; blobs arrive on\n    // demand if anything ever checks one out. `--single-branch` keeps it to the\n    // default branch: the newcomer cares about main, not every fork line.\n    await run('git', ['clone', '--filter=blob:none', '--single-branch', '--quiet', url, dir]);\n  } catch (err) {\n    await fs.rm(dir, { recursive: true, force: true }).catch((..._args: unknown[]) => {});\n    throw err;\n  }\n  return { id, dir };\n}\n\nexport async function removeClone(dir) {\n  if (!isCloneDir(dir)) return;\n  await fs.rm(dir, { recursive: true, force: true }).catch((..._args: unknown[]) => {});\n}\n\n// The version an exit handler can actually finish. A process on its way out will\n// not come back to resolve a promise, so the sweep on shutdown has to be\n// synchronous or it does not happen at all.\nexport function removeCloneSync(dir) {\n  if (!isCloneDir(dir)) return;\n  try {\n    rmSync(dir, { recursive: true, force: true });\n  } catch {\n    /* going down anyway; a leftover temp dir is not worth a crash on exit */\n  }\n}\n\nfunction run(cmd, args) {\n  return new Promise<void>((resolve, reject) => {\n    const child = spawn(cmd, args, { stdio: ['ignore', 'ignore', 'pipe'] });\n    let stderr = '';\n    child.stderr.on('data', (chunk) => {\n      stderr += chunk;\n      if (stderr.length > 4000) stderr = stderr.slice(-4000);\n    });\n    const timer = setTimeout(() => {\n      child.kill('SIGKILL');\n      reject(new Error('git clone took too long and was stopped.'));\n    }, CLONE_TIMEOUT_MS);\n    child.on('error', (err) => {\n      clearTimeout(timer);\n      reject(new Error('Could not run git: ' + err.message));\n    });\n    child.on('close', (code) => {\n      clearTimeout(timer);\n      if (code === 0) resolve();\n      else reject(new Error('git clone failed. ' + (stderr.trim().split('\\n').pop() || '')));\n    });\n  });\n}\n"]}