crewly 1.20.313 → 1.20.315

package/dist/backend/backend/src/services/team-move/team-move-exporter.d.ts

@@ -27,6 +27,7 @@ import type { Project, Team } from '../../types/index.js';
 import { type SecretEnvValue } from '../../utils/secret-env.js';
 import { StagingArea } from './team-move-fs.js';
 import { type CarryLimits } from './team-move-carry.js';
+import { type BundleLimits, type BundleMode } from './team-move-bundle.js';
 import { inspectRepo as defaultInspectRepo } from './team-move-git.js';
 import { type SecretFinding } from './team-move-secret-scan.js';
 import type { CloudManifestSummary, PackageFileEntry, PackageRepo, SourcePreflightReport, TeamMoveManifest } from './team-move.types.js';
@@ -52,9 +53,28 @@ export interface ExportDeps {
     now?: () => string;
     /** Caps for the working files of non-git projects; default from constants / env. */
     workLimits?: WorkFileLimits;
-    /** Caps for carried uncommitted changes; default from constants. */
+    /** Caps for carried uncommitted changes; default from constants / env. */
     carryLimits?: CarryLimits;
+    /** Caps for repositories carried as git bundles; default from constants / env. */
+    bundleLimits?: BundleLimits;
+    /** Caps for project-local `.crewly` files; default from constants / env. */
+    projectLimits?: ProjectFileLimits;
 }
+/** Size caps for project-local `.crewly` files. */
+export interface ProjectFileLimits {
+    /** All projects together. */
+    totalBytes: number;
+    /** One file. */
+    fileBytes: number;
+}
+/**
+ * The caps for project `.crewly` files: constants, overridable in megabytes by
+ * `CREWLY_TEAM_MOVE_PROJECT_FILES_MAX_MB` and `CREWLY_TEAM_MOVE_PROJECT_FILE_MAX_MB`.
+ *
+ * @param env - Environment to read overrides from
+ * @returns The caps in bytes
+ */
+export declare function resolveProjectFileLimits(env?: NodeJS.ProcessEnv): ProjectFileLimits;
 /** Size caps for the working files of projects that are not git repositories. */
 export interface WorkFileLimits {
     /** All such projects together. */
@@ -86,6 +106,8 @@ export interface ExportOptions {
     carryChanges?: boolean;
     /** Build and scan the package but never throw for secrets; report every finding (preflight). */
     dryRun?: boolean;
+    /** Remotes the target machine cannot read (its `git ls-remote` failed): those repositories travel whole as a git bundle. */
+    unreachableRemotes?: readonly string[];
 }
 /** A secret-scan finding with its owner-facing name. */
 export interface LabelledFinding extends SecretFinding {
@@ -111,6 +133,18 @@ export interface ExportResult {
  * @returns Copy with runtime state cleared
  */
 export declare function sanitizeTeamForMove(raw: Record<string, unknown>): Record<string, unknown>;
+/**
+ * What the owner reads about a repository that travels in the package.
+ *
+ * @param repo - The repository record
+ * @param bundle - Its bundle plan
+ * @returns One line, e.g. `no remote — will be carried in the package (0.8 GB)`
+ */
+export declare function bundleMessage(repo: Pick<PackageRepo, 'remoteUrl' | 'unpushed'>, bundle: {
+    mode: BundleMode;
+    estimate: number | null;
+    unreachable?: boolean;
+}, targetName?: string): string;
 /** The exporter. */
 export declare class TeamMoveExporter {
     private readonly deps;
@@ -118,10 +152,37 @@ export declare class TeamMoveExporter {
     private readonly now;
     private readonly inspect;
     constructor(deps: ExportDeps);
+    /** Whether a repo record is a git repository with at least one commit. */
+    private hasCommits;
+    /** Whether a repository holds work the remote (if any) lacks. */
+    private needsWork;
+    private planBundle;
+    /**
+     * Decide how each repository travels.
+     *
+     * - No remote: the repository is carried as a full git bundle plus its
+     *   working-tree changes (always; there is nothing to clone).
+     * - Remote, nothing local: cloned on the target.
+     * - Remote, local work and `assess`: uncommitted work and local commits are
+     *   flattened into patches when that fits; otherwise the unpushed commits
+     *   travel as a git bundle and the working-tree changes as patches on top.
+     *
+     * @param repos - Inspected repositories
+     * @param assess - Also assess carrying for repositories that have a remote
+     * @returns Plan by project id
+     */
+    private planRepos;
+    /** Record the size of each repository that will be cloned on the target, so it can scale the clone's time limit. */
+    private recordSizes;
+    /** Put a plan's outcome on the repo record (what `check` and the manifest show). */
+    private annotate;
     /**
      * Check, before anything is built, that no repository holds work only this
      * machine has. Used by the REST entry point so the owner learns what to
-     * push before a move is even requested.
+     * push before a move is even requested. A repository without a remote does
+     * not block: it is carried in the package as a git bundle (its record says
+     * "no remote — will be carried in the package (x GB)"), unless it is over
+     * the size caps.
      *
      * @param teamId - Team to move
      * @returns The repos and the lines that block the move
@@ -150,6 +211,8 @@ export declare class TeamMoveExporter {
         force?: boolean;
         ttlMs?: number;
         quick?: boolean;
+        unreachableRemotes?: readonly string[];
+        targetName?: string;
     }): Promise<SourcePreflightReport>;
     private requireTeam;
     private teamProjects;
@@ -161,6 +224,14 @@ export declare class TeamMoveExporter {
      * @throws TeamMoveBlockedError for unpushed work; TeamMoveSecretScanError for secrets
      */
     export(options: ExportOptions): Promise<ExportResult>;
+    /**
+     * Create the git bundle of each repository that travels as one, straight
+     * into the staging directory (streamed by git; never held in memory). A dry
+     * run (preflight) builds none.
+     *
+     * @throws TeamMoveBlockedError when a bundle cannot be made (over the caps, ...) and the move is not forced
+     */
+    private writeBundles;
     /**
      * Write the patches and untracked files of carried repositories into the
      * package.

package/dist/backend/backend/src/services/team-move/team-move-exporter.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"team-move-exporter.d.ts","sourceRoot":"","sources":["../../../../../../backend/src/services/team-move/team-move-exporter.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAQH,OAAO,KAAK,EAAE,OAAO,EAAoB,IAAI,EAAE,MAAM,sBAAsB,CAAC;AAI5E,OAAO,EAA0B,KAAK,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAIxF,OAAO,EAAE,WAAW,EAAa,MAAM,mBAAmB,CAAC;AAC3D,OAAO,EAAoD,KAAK,WAAW,EAAuB,MAAM,sBAAsB,CAAC;AAC/H,OAAO,EAAwC,WAAW,IAAI,kBAAkB,EAAmB,MAAM,oBAAoB,CAAC;AAC9H,OAAO,EAA4D,KAAK,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAU1H,OAAO,KAAK,EAEV,oBAAoB,EACpB,gBAAgB,EAGhB,WAAW,EAIX,qBAAqB,EACrB,gBAAgB,EACjB,MAAM,sBAAsB,CAAC;AAiC9B,0EAA0E;AAC1E,qBAAa,oBAAqB,SAAQ,KAAK;IACjC,QAAQ,CAAC,KAAK,EAAE,MAAM,EAAE;gBAAf,KAAK,EAAE,MAAM,EAAE;CAIrC;AAED,qCAAqC;AACrC,MAAM,WAAW,UAAU;IACzB,mCAAmC;IACnC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;IAChC,WAAW,EAAE,MAAM,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;IACtC,aAAa,EAAE,MAAM,CAAC;IACtB,MAAM,EAAE;QAAE,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC;IACjE,8DAA8D;IAC9D,YAAY,CAAC,EAAE,MAAM,OAAO,CAAC,cAAc,EAAE,CAAC,CAAC;IAC/C,WAAW,CAAC,EAAE,OAAO,kBAAkB,CAAC;IACxC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IACnB,oFAAoF;IACpF,UAAU,CAAC,EAAE,cAAc,CAAC;IAC5B,oEAAoE;IACpE,WAAW,CAAC,EAAE,WAAW,CAAC;CAC3B;AAED,iFAAiF;AACjF,MAAM,WAAW,cAAc;IAC7B,kCAAkC;IAClC,UAAU,EAAE,MAAM,CAAC;IACnB,gBAAgB;IAChB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED;;;;;;GAMG;AACH,wBAAgB,qBAAqB,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,cAAc,CAM1F;AAED,gHAAgH;AAChH,wBAAgB,aAAa,CAAC,IAAI,EAAE,WAAW,GAAG,OAAO,CAExD;AAED,6BAA6B;AAC7B,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,uDAAuD;IACvD,UAAU,EAAE,MAAM,CAAC;IACnB,mEAAmE;IACnE,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,gHAAgH;IAChH,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,yGAAyG;IACzG,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,gGAAgG;IAChG,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAED,wDAAwD;AACxD,MAAM,WAAW,eAAgB,SAAQ,aAAa;IACpD,KAAK,EAAE,MAAM,CAAC;IACd,gDAAgD;IAChD,SAAS,EAAE,OAAO,CAAC;CACpB;AAED,+BAA+B;AAC/B,MAAM,WAAW,YAAY;IAC3B,QAAQ,EAAE,gBAAgB,CAAC;IAC3B,OAAO,EAAE,WAAW,CAAC;IACrB,+CAA+C;IAC/C,OAAO,EAAE,oBAAoB,CAAC;IAC9B,2EAA2E;IAC3E,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,gFAAgF;IAChF,YAAY,EAAE,eAAe,EAAE,CAAC;CACjC;AAED;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAYzF;AAOD,oBAAoB;AACpB,qBAAa,gBAAgB;IAKf,OAAO,CAAC,QAAQ,CAAC,IAAI;IAJjC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAS;IAC9B,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAe;IACnC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA4B;gBAEvB,IAAI,EAAE,UAAU;IAM7C;;;;;;;OAOG;IACG,UAAU,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,KAAK,EAAE,WAAW,EAAE,CAAC;QAAC,QAAQ,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC;IAOvF,yGAAyG;IACzG,OAAO,CAAC,KAAK,CAAoM;IAEjN;;;;;;;;;;OAUG;IACG,SAAS,CAAC,KAAK,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,YAAY,CAAC,EAAE,OAAO,CAAC;QAAC,UAAU,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,OAAO,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,OAAO,CAAC,qBAAqB,CAAC;YA8E1J,WAAW;YAOX,YAAY;IAK1B;;;;;;OAMG;IACG,MAAM,CAAC,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC,YAAY,CAAC;IAiK3D;;;;;OAKG;YACW,UAAU;IAiBxB,mGAAmG;YACrF,iBAAiB;IAkC/B,+FAA+F;IAC/F,OAAO,CAAC,aAAa;IAmBrB,qEAAqE;IACrE,OAAO,CAAC,YAAY;IAWpB,wCAAwC;YAC1B,cAAc;IAkC5B;;;;OAIG;YACW,eAAe;IAuE7B;;;;;OAKG;YACW,gBAAgB;IAqC9B,4FAA4F;YAC9E,WAAW;CAe1B;AAED;;;;;GAKG;AACH,wBAAgB,SAAS,CAAC,QAAQ,EAAE,gBAAgB,GAAG,oBAAoB,CAe1E;AAED,+CAA+C;AAC/C,MAAM,WAAW,gBAAgB;IAC/B,4CAA4C;IAC5C,IAAI,EAAE,MAAM,CAAC;IACb,gCAAgC;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,qCAAqC;IACrC,MAAM,EAAE,MAAM,CAAC;IACf,oDAAoD;IACpD,MAAM,EAAE,MAAM,CAAC;CAChB;AAED;;;;;;;;GAQG;AACH,wBAAsB,qBAAqB,CAAC,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,kBAAkB,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAWtJ;AAED;;;;;GAKG;AACH,wBAAgB,YAAY,CAAC,KAAK,EAAE,SAAS,gBAAgB,EAAE,GAAG,MAAM,EAAE,CAEzE"}
+{"version":3,"file":"team-move-exporter.d.ts","sourceRoot":"","sources":["../../../../../../backend/src/services/team-move/team-move-exporter.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAQH,OAAO,KAAK,EAAE,OAAO,EAAoB,IAAI,EAAE,MAAM,sBAAsB,CAAC;AAI5E,OAAO,EAA0B,KAAK,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAIxF,OAAO,EAAE,WAAW,EAAa,MAAM,mBAAmB,CAAC;AAC3D,OAAO,EAAkD,KAAK,WAAW,EAAgD,MAAM,sBAAsB,CAAC;AACtJ,OAAO,EAAqE,KAAK,YAAY,EAAE,KAAK,UAAU,EAAE,MAAM,uBAAuB,CAAC;AAC9I,OAAO,EAAwC,WAAW,IAAI,kBAAkB,EAAmC,MAAM,oBAAoB,CAAC;AAC9I,OAAO,EAA4D,KAAK,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAU1H,OAAO,KAAK,EAEV,oBAAoB,EACpB,gBAAgB,EAGhB,WAAW,EAIX,qBAAqB,EACrB,gBAAgB,EACjB,MAAM,sBAAsB,CAAC;AAiC9B,0EAA0E;AAC1E,qBAAa,oBAAqB,SAAQ,KAAK;IACjC,QAAQ,CAAC,KAAK,EAAE,MAAM,EAAE;gBAAf,KAAK,EAAE,MAAM,EAAE;CAIrC;AAED,qCAAqC;AACrC,MAAM,WAAW,UAAU;IACzB,mCAAmC;IACnC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;IAChC,WAAW,EAAE,MAAM,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;IACtC,aAAa,EAAE,MAAM,CAAC;IACtB,MAAM,EAAE;QAAE,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC;IACjE,8DAA8D;IAC9D,YAAY,CAAC,EAAE,MAAM,OAAO,CAAC,cAAc,EAAE,CAAC,CAAC;IAC/C,WAAW,CAAC,EAAE,OAAO,kBAAkB,CAAC;IACxC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IACnB,oFAAoF;IACpF,UAAU,CAAC,EAAE,cAAc,CAAC;IAC5B,0EAA0E;IAC1E,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B,kFAAkF;IAClF,YAAY,CAAC,EAAE,YAAY,CAAC;IAC5B,4EAA4E;IAC5E,aAAa,CAAC,EAAE,iBAAiB,CAAC;CACnC;AAED,mDAAmD;AACnD,MAAM,WAAW,iBAAiB;IAChC,6BAA6B;IAC7B,UAAU,EAAE,MAAM,CAAC;IACnB,gBAAgB;IAChB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED;;;;;;GAMG;AACH,wBAAgB,wBAAwB,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,iBAAiB,CAMhG;AAgBD,iFAAiF;AACjF,MAAM,WAAW,cAAc;IAC7B,kCAAkC;IAClC,UAAU,EAAE,MAAM,CAAC;IACnB,gBAAgB;IAChB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED;;;;;;GAMG;AACH,wBAAgB,qBAAqB,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,cAAc,CAM1F;AAED,gHAAgH;AAChH,wBAAgB,aAAa,CAAC,IAAI,EAAE,WAAW,GAAG,OAAO,CAExD;AAED,6BAA6B;AAC7B,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,uDAAuD;IACvD,UAAU,EAAE,MAAM,CAAC;IACnB,mEAAmE;IACnE,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,gHAAgH;IAChH,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,yGAAyG;IACzG,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,gGAAgG;IAChG,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,4HAA4H;IAC5H,kBAAkB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CACxC;AAED,wDAAwD;AACxD,MAAM,WAAW,eAAgB,SAAQ,aAAa;IACpD,KAAK,EAAE,MAAM,CAAC;IACd,gDAAgD;IAChD,SAAS,EAAE,OAAO,CAAC;CACpB;AAED,+BAA+B;AAC/B,MAAM,WAAW,YAAY;IAC3B,QAAQ,EAAE,gBAAgB,CAAC;IAC3B,OAAO,EAAE,WAAW,CAAC;IACrB,+CAA+C;IAC/C,OAAO,EAAE,oBAAoB,CAAC;IAC9B,2EAA2E;IAC3E,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,gFAAgF;IAChF,YAAY,EAAE,eAAe,EAAE,CAAC;CACjC;AAED;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAYzF;AAED;;;;;;GAMG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,WAAW,EAAE,WAAW,GAAG,UAAU,CAAC,EAAE,MAAM,EAAE;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,WAAW,CAAC,EAAE,OAAO,CAAA;CAAE,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,MAAM,CAO1L;AAOD,oBAAoB;AACpB,qBAAa,gBAAgB;IAKf,OAAO,CAAC,QAAQ,CAAC,IAAI;IAJjC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAS;IAC9B,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAe;IACnC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA4B;gBAEvB,IAAI,EAAE,UAAU;IAM7C,0EAA0E;IAC1E,OAAO,CAAC,UAAU;IAIlB,iEAAiE;IACjE,OAAO,CAAC,SAAS;YAIH,UAAU;IAUxB;;;;;;;;;;;;;OAaG;YACW,SAAS;IAkDvB,oHAAoH;YACtG,WAAW;IAQzB,oFAAoF;IACpF,OAAO,CAAC,QAAQ;IAQhB;;;;;;;;;;OAUG;IACG,UAAU,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,KAAK,EAAE,WAAW,EAAE,CAAC;QAAC,QAAQ,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC;IAUvF,yGAAyG;IACzG,OAAO,CAAC,KAAK,CAAoM;IAEjN;;;;;;;;;;OAUG;IACG,SAAS,CAAC,KAAK,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,YAAY,CAAC,EAAE,OAAO,CAAC;QAAC,UAAU,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,OAAO,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,OAAO,CAAC;QAAC,kBAAkB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,qBAAqB,CAAC;YA2FvN,WAAW;YAOX,YAAY;IAK1B;;;;;;OAMG;IACG,MAAM,CAAC,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC,YAAY,CAAC;IAuK3D;;;;;;OAMG;YACW,YAAY;IAyB1B;;;;;OAKG;YACW,UAAU;IAiBxB,mGAAmG;YACrF,iBAAiB;IAkC/B,+FAA+F;IAC/F,OAAO,CAAC,aAAa;IAmBrB,qEAAqE;IACrE,OAAO,CAAC,YAAY;IAWpB,wCAAwC;YAC1B,cAAc;IAkC5B;;;;OAIG;YACW,eAAe;IAwE7B;;;;;OAKG;YACW,gBAAgB;IAqC9B,4FAA4F;YAC9E,WAAW;CAe1B;AAED;;;;;GAKG;AACH,wBAAgB,SAAS,CAAC,QAAQ,EAAE,gBAAgB,GAAG,oBAAoB,CAe1E;AAED,+CAA+C;AAC/C,MAAM,WAAW,gBAAgB;IAC/B,4CAA4C;IAC5C,IAAI,EAAE,MAAM,CAAC;IACb,gCAAgC;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,qCAAqC;IACrC,MAAM,EAAE,MAAM,CAAC;IACf,oDAAoD;IACpD,MAAM,EAAE,MAAM,CAAC;CAChB;AAED;;;;;;;;GAQG;AACH,wBAAsB,qBAAqB,CAAC,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,kBAAkB,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAWtJ;AAED;;;;;GAKG;AACH,wBAAgB,YAAY,CAAC,KAAK,EAAE,SAAS,gBAAgB,EAAE,GAAG,MAAM,EAAE,CAEzE"}

package/dist/backend/backend/src/services/team-move/team-move-exporter.js

@@ -35,8 +35,9 @@ import { PACKAGE_TREE_STORES, getCrewlyHomePath, isInsidePackageTree, resolvePro
 import { readTeamChat } from './team-move-chat.js';
 import { createEncryptStream, createHashTap } from './team-move-crypto.js';
 import { StagingArea, walkFiles } from './team-move-fs.js';
-import { DEFAULT_CARRY_LIMITS, collectCarry, describeLeft } from './team-move-carry.js';
-import { describeBlockingRepos, displayRemote, inspectRepo as defaultInspectRepo, readRepoChanges } from './team-move-git.js';
+import { collectCarry, describeLeft, resolveCarryLimits } from './team-move-carry.js';
+import { createBundle, estimateRepoBytes, formatBytes, resolveBundleLimits } from './team-move-bundle.js';
+import { describeBlockingRepos, displayRemote, inspectRepo as defaultInspectRepo, readRepoChanges, sanitizeRemote } from './team-move-git.js';
 import { TeamMoveSecretScanError, isSkippableFinding, scanStaging } from './team-move-secret-scan.js';
 import { identityOf, resetWorkItemForTarget, selectDecisions, selectPoolItems, selectScheduledMessages, } from './team-move-select.js';
 const C = TEAM_MOVE_CONSTANTS;
@@ -75,6 +76,20 @@ export class TeamMoveBlockedError extends Error {
         this.name = 'TeamMoveBlockedError';
     }
 }
+/**
+ * The caps for project `.crewly` files: constants, overridable in megabytes by
+ * `CREWLY_TEAM_MOVE_PROJECT_FILES_MAX_MB` and `CREWLY_TEAM_MOVE_PROJECT_FILE_MAX_MB`.
+ *
+ * @param env - Environment to read overrides from
+ * @returns The caps in bytes
+ */
+export function resolveProjectFileLimits(env = process.env) {
+    const mb = (name, fallback) => {
+        const n = Number(env[name]);
+        return Number.isFinite(n) && n > 0 ? Math.floor(n * 1024 * 1024) : fallback;
+    };
+    return { totalBytes: mb(C.PROJECT_FILES_MAX_MB_ENV, C.PROJECT_FILES_MAX_BYTES), fileBytes: mb(C.PROJECT_FILE_MAX_MB_ENV, C.PROJECT_FILE_MAX_BYTES) };
+}
 /**
  * The caps for non-git project files: constants, overridable in megabytes by
  * `CREWLY_TEAM_MOVE_WORK_MAX_MB` and `CREWLY_TEAM_MOVE_WORK_FILE_MAX_MB`.
@@ -113,6 +128,22 @@ export function sanitizeTeamForMove(raw) {
     });
     return team;
 }
+/**
+ * What the owner reads about a repository that travels in the package.
+ *
+ * @param repo - The repository record
+ * @param bundle - Its bundle plan
+ * @returns One line, e.g. `no remote — will be carried in the package (0.8 GB)`
+ */
+export function bundleMessage(repo, bundle, targetName) {
+    const size = bundle.estimate !== null ? ` (${formatBytes(bundle.estimate)})` : '';
+    if (bundle.mode === 'full' && bundle.unreachable) {
+        return `${targetName ?? 'the target machine'} can't reach this private repo; it will be carried in the package${size}. Log in to GitHub on ${targetName ?? 'that machine'} later to push/pull.`;
+    }
+    if (bundle.mode === 'full')
+        return `no remote — will be carried in the package${size}`;
+    return `${repo.unpushed} commit${repo.unpushed === 1 ? '' : 's'} not pushed — will be carried in the package as a git bundle${size}`;
+}
 /** Escape a string for use in a RegExp. */
 function escapeRegExp(text) {
     return text.replace(/[.*+?^${}()|[\]\\]/g, '\\$&');
@@ -129,10 +160,117 @@ export class TeamMoveExporter {
         this.now = deps.now ?? (() => new Date().toISOString());
         this.inspect = deps.inspectRepo ?? defaultInspectRepo;
     }
+    /** Whether a repo record is a git repository with at least one commit. */
+    hasCommits(r) {
+        return !!r.headSha && !r.note?.startsWith('not a git repository') && !r.note?.startsWith('project folder does not exist');
+    }
+    /** Whether a repository holds work the remote (if any) lacks. */
+    needsWork(r) {
+        return r.dirty || r.unpushed > 0;
+    }
+    async planBundle(mode, repoPath, limits) {
+        // A full bundle is about the size of the object store; the size of an
+        // unpushed-commits bundle cannot be known cheaply and is checked once built.
+        const estimate = mode === 'full' ? await estimateRepoBytes(repoPath) : null;
+        if (estimate !== null && estimate > limits.repoBytes) {
+            return { mode, estimate, possible: false, reason: `the repository is about ${formatBytes(estimate)}, over the ${formatBytes(limits.repoBytes)} limit for carrying it (raise ${C.BUNDLE_REPO_MAX_MB_ENV} to allow it)` };
+        }
+        return { mode, estimate, possible: true };
+    }
+    /**
+     * Decide how each repository travels.
+     *
+     * - No remote: the repository is carried as a full git bundle plus its
+     *   working-tree changes (always; there is nothing to clone).
+     * - Remote, nothing local: cloned on the target.
+     * - Remote, local work and `assess`: uncommitted work and local commits are
+     *   flattened into patches when that fits; otherwise the unpushed commits
+     *   travel as a git bundle and the working-tree changes as patches on top.
+     *
+     * @param repos - Inspected repositories
+     * @param assess - Also assess carrying for repositories that have a remote
+     * @returns Plan by project id
+     */
+    async planRepos(repos, assess, unreachableRemotes = []) {
+        const unreachable = new Set(unreachableRemotes.map(sanitizeRemote));
+        const carryLimits = this.deps.carryLimits ?? resolveCarryLimits();
+        const bundleLimits = this.deps.bundleLimits ?? resolveBundleLimits();
+        const plans = new Map();
+        let bundleTotal = 0;
+        for (const r of repos) {
+            if (!this.hasCommits(r)) {
+                plans.set(r.projectId, { resolved: false });
+                continue;
+            }
+            const cannotClone = !!r.remoteUrl && unreachable.has(sanitizeRemote(r.remoteUrl));
+            if (!r.remoteUrl || cannotClone || (assess && this.needsWork(r))) {
+                let plan = null;
+                if (r.remoteUrl && !cannotClone) {
+                    const flat = await collectCarry(r.path, carryLimits);
+                    if (flat.ok && flat.carry.left.length === 0)
+                        plan = { carry: flat.carry, carryRes: flat, resolved: true };
+                    else if (r.unpushed === 0)
+                        plan = { carryRes: flat, carryError: flat.ok ? describeLeft(flat.carry.left) : flat.reason, resolved: false };
+                }
+                if (!plan) {
+                    const mode = r.remoteUrl && !cannotClone ? 'unpushed' : 'full';
+                    const bundle = await this.planBundle(mode, r.path, bundleLimits);
+                    if (cannotClone)
+                        bundle.unreachable = true;
+                    if (bundle.possible && bundle.estimate !== null && bundleTotal + bundle.estimate > bundleLimits.totalBytes) {
+                        bundle.possible = false;
+                        bundle.reason = `the repositories to carry total about ${formatBytes(bundleTotal + bundle.estimate)}, over the ${formatBytes(bundleLimits.totalBytes)} limit (raise ${C.BUNDLES_MAX_MB_ENV} to allow it)`;
+                    }
+                    if (!bundle.possible) {
+                        plan = { bundle, carryError: bundle.reason, resolved: false };
+                    }
+                    else {
+                        bundleTotal += bundle.estimate ?? 0;
+                        const res = await collectCarry(r.path, carryLimits, { atHead: true });
+                        const ok = res.ok && res.carry.left.length === 0;
+                        plan = {
+                            bundle,
+                            carryRes: res,
+                            ...(res.ok && ok ? { carry: res.carry } : {}),
+                            ...(ok ? {} : { carryError: res.ok ? describeLeft(res.carry.left) : res.reason }),
+                            resolved: ok,
+                        };
+                    }
+                }
+                plans.set(r.projectId, plan);
+            }
+            else {
+                plans.set(r.projectId, { resolved: false });
+            }
+        }
+        return plans;
+    }
+    /** Record the size of each repository that will be cloned on the target, so it can scale the clone's time limit. */
+    async recordSizes(repos) {
+        for (const r of repos) {
+            if (!r.remoteUrl || r.bundle || !r.headSha)
+                continue;
+            const bytes = await estimateRepoBytes(r.path);
+            if (bytes !== null && bytes > 0)
+                r.sizeBytes = bytes;
+        }
+    }
+    /** Put a plan's outcome on the repo record (what `check` and the manifest show). */
+    annotate(repo, plan) {
+        if (plan.bundle && plan.resolved) {
+            repo.bundle = { mode: plan.bundle.mode, bytes: plan.bundle.estimate ?? 0, ...(plan.bundle.unreachable ? { why: 'remote_unreachable' } : {}) };
+            repo.note = bundleMessage(repo, plan.bundle);
+        }
+        if (plan.carryError)
+            repo.carryError = plan.carryError;
+    }
     /**
      * Check, before anything is built, that no repository holds work only this
      * machine has. Used by the REST entry point so the owner learns what to
-     * push before a move is even requested.
+     * push before a move is even requested. A repository without a remote does
+     * not block: it is carried in the package as a git bundle (its record says
+     * "no remote — will be carried in the package (x GB)"), unless it is over
+     * the size caps.
      *
      * @param teamId - Team to move
      * @returns The repos and the lines that block the move
@@ -141,7 +279,11 @@ export class TeamMoveExporter {
         const team = await this.requireTeam(teamId);
         const projects = await this.teamProjects(team);
         const repos = await Promise.all(projects.map((p) => this.inspect({ id: p.id, name: p.name, path: p.path })));
-        return { repos, blocking: describeBlockingRepos(repos) };
+        // A repository without a remote travels in the package, so it does not block.
+        const plans = await this.planRepos(repos, false);
+        for (const r of repos)
+            this.annotate(r, plans.get(r.projectId));
+        return { repos, blocking: describeBlockingRepos(repos.filter((r) => !plans.get(r.projectId).resolved)) };
     }
     /** The heavy part of the last preflight (package dry run, secret scan), reused while nothing changed. */
     heavy = null;
@@ -160,22 +302,32 @@ export class TeamMoveExporter {
         const team = await this.requireTeam(input.teamId);
         const projects = await this.teamProjects(team);
         const inspected = await Promise.all(projects.map((p) => this.inspect({ id: p.id, name: p.name, path: p.path })));
-        const limits = this.deps.carryLimits ?? DEFAULT_CARRY_LIMITS;
+        const plans = await this.planRepos(inspected, true, input.unreachableRemotes);
         const repos = [];
         for (const r of inspected) {
             const isRepo = !r.note?.startsWith('not a git repository') && !r.note?.startsWith('project folder does not exist');
             const changes = isRepo && (r.dirty || r.unpushed > 0) ? await readRepoChanges(r.path) : { modified: 0, untracked: 0, files: [] };
+            const plan = plans.get(r.projectId);
             let carry = null;
             if (isRepo && (r.dirty || r.unpushed > 0)) {
-                if (!r.remoteUrl)
-                    carry = { possible: false, files: 0, bytes: 0, flattenedCommits: 0, reason: 'this repository has no remote' };
+                const res = plan.carryRes;
+                if (!res)
+                    carry = { possible: false, files: 0, bytes: 0, flattenedCommits: 0, reason: plan.carryError ?? 'this repository cannot be carried' };
                 else {
-                    const res = await collectCarry(r.path, limits);
                     carry = res.ok
                         ? { possible: res.carry.left.length === 0, files: res.carry.patches.length + res.carry.untracked.length, bytes: res.carry.bytes, flattenedCommits: res.carry.flattenedCommits, ...(res.carry.left.length ? { reason: describeLeft(res.carry.left) } : {}) }
                         : { possible: false, files: 0, bytes: 0, flattenedCommits: 0, reason: res.reason };
                 }
             }
+            const bundle = plan.bundle
+                ? {
+                    mode: plan.bundle.mode,
+                    bytes: plan.bundle.estimate,
+                    possible: plan.bundle.possible,
+                    ...(plan.bundle.reason ? { reason: plan.bundle.reason } : {}),
+                    message: plan.bundle.possible ? bundleMessage(r, plan.bundle, input.targetName) : `${plan.bundle.unreachable ? 'the target cannot reach the remote' : r.remoteUrl ? 'commits not pushed' : 'no remote'} — cannot be carried: ${plan.bundle.reason}`,
+                }
+                : null;
             const top = changes.files.slice(0, C.PREFLIGHT_TOP_FILES);
             repos.push({
                 projectId: r.projectId,
@@ -184,6 +336,8 @@ export class TeamMoveExporter {
                 isRepo,
                 branch: r.branch,
                 remote: displayRemote(r.remoteUrl),
+                ...(r.remoteUrl ? { remoteUrl: sanitizeRemote(r.remoteUrl) } : {}),
+                ...(plan.bundle?.unreachable ? { remoteUnreachable: true } : {}),
                 noRemote: isRepo && !r.remoteUrl,
                 modified: changes.modified,
                 untracked: changes.untracked,
@@ -193,15 +347,16 @@ export class TeamMoveExporter {
                 topFiles: top,
                 filesTruncated: changes.files.length > top.length,
                 carry,
+                bundle,
             });
         }
-        const key = JSON.stringify([team.id, !!input.carryChanges, inspected.map((r, i) => [r.path, r.headSha, r.dirty, r.unpushed, repos[i].modified, repos[i].untracked, repos[i].topFiles.map((f) => f.path)])]);
+        const key = JSON.stringify([team.id, !!input.carryChanges, [...(input.unreachableRemotes ?? [])].sort(), inspected.map((r, i) => [r.path, r.headSha, r.dirty, r.unpushed, repos[i].modified, repos[i].untracked, repos[i].topFiles.map((f) => f.path)])]);
         const ttl = input.ttlMs ?? C.PREFLIGHT_SCAN_TTL_MS;
         let heavy = !input.force && this.heavy && this.heavy.key === key && Date.now() - this.heavy.at < ttl ? this.heavy : null;
         if (!heavy && !input.quick) {
             const staging = path.resolve(input.stagingDir);
             try {
-                const result = await this.export({ teamId: team.id, moveId: `preflight-${Date.now()}`, stagingDir: staging, allowDirty: true, carryChanges: !!input.carryChanges, dryRun: true });
+                const result = await this.export({ teamId: team.id, moveId: `preflight-${Date.now()}`, stagingDir: staging, allowDirty: true, carryChanges: !!input.carryChanges, dryRun: true, unreachableRemotes: input.unreachableRemotes });
                 const findings = result.scanFindings.slice(0, C.PREFLIGHT_MAX_FINDINGS).map((f) => ({ file: f.label, matches: f.matches, removable: f.removable }));
                 heavy = {
                     key,
@@ -257,20 +412,19 @@ export class TeamMoveExporter {
         const projects = await this.teamProjects(team);
         const id = identityOf(team);
         const repos = await Promise.all(projects.map((p) => this.inspect({ id: p.id, name: p.name, path: p.path })));
-        // Uncommitted work that can travel in the package no longer blocks the move.
+        // Work that can travel in the package no longer blocks the move: uncommitted
+        // changes, and whole repositories that have no remote (git bundle).
+        const plans = await this.planRepos(repos, !!options.carryChanges, options.unreachableRemotes);
         const carried = new Map();
-        if (options.carryChanges) {
-            for (const repo of repos) {
-                if (!repo.remoteUrl || !(repo.dirty || repo.unpushed > 0))
-                    continue;
-                const res = await collectCarry(repo.path, this.deps.carryLimits ?? DEFAULT_CARRY_LIMITS);
-                if (res.ok && res.carry.left.length === 0)
-                    carried.set(repo.projectId, res.carry);
-                else
-                    repo.carryError = res.ok ? describeLeft(res.carry.left) : res.reason;
-            }
+        for (const repo of repos) {
+            const plan = plans.get(repo.projectId);
+            this.annotate(repo, plan);
+            // A bundled repository with a clean working tree has nothing to patch.
+            if (plan.carry && (!plan.bundle || plan.carry.patches.length + plan.carry.untracked.length > 0))
+                carried.set(repo.projectId, plan.carry);
         }
-        const blocking = describeBlockingRepos(repos.filter((r) => !carried.has(r.projectId)));
+        await this.recordSizes(repos);
+        const blocking = describeBlockingRepos(repos.filter((r) => !plans.get(r.projectId).resolved));
         if (blocking.length > 0 && !options.allowDirty)
             throw new TeamMoveBlockedError(blocking);
         const staging = new StagingArea(path.resolve(options.stagingDir));
@@ -345,7 +499,8 @@ export class TeamMoveExporter {
         const requiredRuntimes = [...new Set(team.members.map((m) => m.runtimeType).filter(Boolean))].sort();
         // 7. Secret scan: nothing leaves the machine with a credential in it.
         const known = this.deps.knownSecrets ? await this.deps.knownSecrets() : collectSecretEnvValues(process.env);
-        const scan = await scanStaging(staging, staging.files(), known);
+        // Bundles are not text-scanned: they are binary packs (history that already lives in git), encrypted for the target.
+        const scan = await scanStaging(staging, staging.files(), known, (p) => p.endsWith(`/${C.BUNDLE_FILE}`));
         const scanFindings = this.labelFindings(scan.findings, projects, carried);
         let excludedFiles = 0;
         if (scan.findings.length > 0 && !options.dryRun) {
@@ -374,6 +529,8 @@ export class TeamMoveExporter {
                 }
             }
         }
+        // 7a. Repositories carried as git bundles (written by git straight into the package).
+        await this.writeBundles(staging, repos, plans, options);
         // 7b. Carried changes: the index lists what is really in the package.
         await this.writeCarryIndexes(staging, repos, carried, carriedLost);
         // 8. Manifest.
@@ -402,7 +559,8 @@ export class TeamMoveExporter {
             requiredRuntimes,
             requiredConnectors,
             files,
-            totalBytes: files.reduce((n, f) => n + f.bytes, 0),
+            // A dry run builds no bundle; its estimate keeps the preflight size honest.
+            totalBytes: files.reduce((n, f) => n + f.bytes, 0) + (options.dryRun ? repos.reduce((n, r) => n + (r.bundle && !r.bundle.file ? r.bundle.bytes : 0), 0) : 0),
             noSecrets: true,
             secretScan: { filesScanned: scan.filesScanned, knownValuesChecked: known.length, findings: 0, excludedFiles },
             notMoved: this.notMovedList(),
@@ -416,6 +574,42 @@ export class TeamMoveExporter {
             scanFindings,
         };
     }
+    /**
+     * Create the git bundle of each repository that travels as one, straight
+     * into the staging directory (streamed by git; never held in memory). A dry
+     * run (preflight) builds none.
+     *
+     * @throws TeamMoveBlockedError when a bundle cannot be made (over the caps, ...) and the move is not forced
+     */
+    async writeBundles(staging, repos, plans, options) {
+        if (options.dryRun)
+            return;
+        const limits = this.deps.bundleLimits ?? resolveBundleLimits();
+        let remaining = limits.totalBytes;
+        const failures = [];
+        for (const repo of repos) {
+            const plan = plans.get(repo.projectId);
+            if (!plan.bundle || !plan.resolved)
+                continue;
+            const rel = `projects/${repo.projectId}/${C.BUNDLE_FILE}`;
+            const res = await createBundle(repo.path, staging.abs(rel), plan.bundle.mode, Math.min(limits.repoBytes, remaining));
+            if (!res.ok) {
+                delete repo.bundle;
+                repo.carryError = res.reason;
+                failures.push(`${repo.projectName} (${repo.path}): ${res.reason}`);
+                continue;
+            }
+            const entry = await staging.adopt(rel);
+            remaining -= entry.bytes;
+            repo.bundle = { mode: plan.bundle.mode, file: rel, bytes: entry.bytes, sha256: entry.sha256, refs: res.refs };
+            if (plan.bundle.mode === 'full')
+                repo.note = bundleMessage(repo, { ...plan.bundle, estimate: entry.bytes });
+            if (plan.bundle.unreachable)
+                repo.bundle.why = 'remote_unreachable';
+        }
+        if (failures.length > 0 && !options.allowDirty)
+            throw new TeamMoveBlockedError(failures);
+    }
     /**
      * Write the patches and untracked files of carried repositories into the
      * package.
@@ -504,7 +698,7 @@ export class TeamMoveExporter {
         return [
             'Credentials, API keys, OAuth/connector grants and runtime logins (Claude, Codex, ...)',
             'Slack bot tokens (Crewly Cloud re-points the agents\' Slack apps to the target)',
-            'Source code of git projects (cloned from each repository on the target; projects that are not git repositories travel in the package)',
+            'Source code of git projects that have a remote (cloned from it on the target; projects that are not git repositories, and repositories without a remote or with unpushed commits, travel in the package)',
             'Chat message history (channels and rooms move, messages stay on the source)',
             'Running sessions, logs, transcripts, build output and node_modules',
             'Short-lived agent reminders (they are set again by the agents)',
@@ -545,7 +739,8 @@ export class TeamMoveExporter {
      */
     async collectProjects(staging, projects, allTeams, teamId, counts) {
         const out = [];
-        let remaining = C.PROJECT_FILES_MAX_BYTES;
+        const projectLimits = this.deps.projectLimits ?? resolveProjectFileLimits();
+        let remaining = projectLimits.totalBytes;
         for (const project of projects) {
             const dataDir = resolveProjectDataDir(project.path);
             const inHome = isInsidePackageTree(project.path);
@@ -581,7 +776,7 @@ export class TeamMoveExporter {
                 const skip = (reason) => {
                     entry.skipped.push({ path: c.rel, bytes: c.size, reason });
                 };
-                if (c.size > C.PROJECT_FILE_MAX_BYTES)
+                if (c.size > projectLimits.fileBytes)
                     skip('too_large');
                 else if (c.size > remaining)
                     skip('size_cap');