devchain-cli 0.23.3 → 0.24.0

package/dist/server/modules/file-sync/file-sync.service.js

@@ -0,0 +1,321 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.FileSyncService = exports.FileSyncTimeoutError = exports.FileSyncUnavailableError = exports.SCAN_TIMEOUT_MS = exports.FOLDER_WATCHER_DELAY_S = void 0;
+exports.codeFolderId = codeFolderId;
+exports.projectFolderId = projectFolderId;
+exports.projectFolderList = projectFolderList;
+exports.evaluateCompletion = evaluateCompletion;
+exports.evaluateSymmetricCompletion = evaluateSymmetricCompletion;
+const common_1 = require("@nestjs/common");
+const promises_1 = require("fs/promises");
+const path_1 = require("path");
+const zod_1 = require("zod");
+const syncthing_markers_1 = require("../../common/constants/syncthing-markers");
+const error_types_1 = require("../../common/errors/error-types");
+const storage_interface_1 = require("../storage/interfaces/storage.interface");
+const file_sync_paths_1 = require("./file-sync-paths");
+const file_sync_dto_1 = require("./file-sync.dto");
+const file_sync_ignores_store_1 = require("./file-sync-ignores.store");
+const syncthing_manager_service_1 = require("./syncthing-manager.service");
+const syncthing_rest_client_1 = require("./syncthing-rest.client");
+exports.FOLDER_WATCHER_DELAY_S = 1;
+const RESCAN_INTERVAL_S = 3600;
+const COMPLETION_POLL_MS = 500;
+exports.SCAN_TIMEOUT_MS = 10 * 60_000;
+const RawStatusSchema = file_sync_dto_1.FolderSyncStatusSchema.omit({ folderId: true, peer: true });
+const RawCompletionSchema = zod_1.z.object({
+    completion: zod_1.z.number(),
+    needItems: zod_1.z.number(),
+    needBytes: zod_1.z.number(),
+    remoteState: zod_1.z.string(),
+});
+const ConnectionsSchema = zod_1.z.object({
+    connections: zod_1.z.record(zod_1.z.object({ connected: zod_1.z.boolean() })),
+});
+class FileSyncUnavailableError extends error_types_1.AppError {
+    constructor(reason) {
+        super(`File sync is unavailable: ${reason}`, 'FILE_SYNC_UNAVAILABLE', 503);
+    }
+}
+exports.FileSyncUnavailableError = FileSyncUnavailableError;
+class FileSyncTimeoutError extends error_types_1.AppError {
+    constructor(folderId, progress, lastError) {
+        super(`Folder ${folderId} did not finish syncing in time${lastError ? `: ${lastError}` : ''}`, 'FILE_SYNC_TIMEOUT', 504, { folderId, progress, lastError });
+    }
+}
+exports.FileSyncTimeoutError = FileSyncTimeoutError;
+function codeFolderId(projectId) {
+    return projectFolderId(projectId, 'code');
+}
+function projectFolderId(projectId, kind) {
+    return `${kind}:${projectId}`;
+}
+function projectFolderList(projectId, kinds = ['code', 'git']) {
+    return kinds.map((kind) => ({ id: projectFolderId(projectId, kind), kind }));
+}
+function evaluateCompletion(sender, receiver) {
+    const peer = sender.peer;
+    const done = peer !== null &&
+        peer.completion === 100 &&
+        peer.needItems === 0 &&
+        peer.remoteState === 'valid' &&
+        sender.state === 'idle' &&
+        receiver.state === 'idle' &&
+        receiver.needTotalItems === 0 &&
+        receiver.globalFiles === sender.localFiles &&
+        receiver.localFiles === sender.localFiles &&
+        receiver.globalDirectories === sender.localDirectories;
+    return {
+        done,
+        progress: {
+            completion: peer?.completion ?? 0,
+            needItems: peer?.needItems ?? receiver.needTotalItems,
+            needBytes: peer?.needBytes ?? receiver.needBytes,
+        },
+    };
+}
+function evaluateSymmetricCompletion(home, host) {
+    const forward = evaluateCompletion(home, host);
+    const reverse = evaluateCompletion(host, home);
+    return {
+        done: forward.done && reverse.done,
+        progress: {
+            completion: Math.min(forward.progress.completion, reverse.progress.completion),
+            needItems: home.needTotalItems + host.needTotalItems,
+            needBytes: home.needBytes + host.needBytes,
+        },
+    };
+}
+let FileSyncService = class FileSyncService {
+    syncthing;
+    paths;
+    storage;
+    ignores;
+    constructor(syncthing, paths, storage, ignores) {
+        this.syncthing = syncthing;
+        this.paths = paths;
+        this.storage = storage;
+        this.ignores = ignores;
+    }
+    async ensureAvailable() {
+        await this.syncthing.ensureRunning();
+        this.connection();
+    }
+    device() {
+        const connection = this.connection();
+        return { deviceId: connection.deviceId, address: connection.listenAddress };
+    }
+    async addPeer(peer) {
+        await this.client().request('PUT', `/rest/config/devices/${enc(peer.deviceId)}`, {
+            deviceID: peer.deviceId,
+            name: 'devchain-peer',
+            addresses: [peer.address],
+            autoAcceptFolders: false,
+        });
+    }
+    async isConnected(deviceId) {
+        const body = ConnectionsSchema.parse(await this.client().request('GET', '/rest/system/connections'));
+        return body.connections[deviceId]?.connected === true;
+    }
+    getIgnores(projectId) {
+        return this.ignores.get(projectId);
+    }
+    setIgnores(projectId, ignores) {
+        return this.ignores.set(projectId, ignores);
+    }
+    async projectFolders(projectId) {
+        const configured = zod_1.z
+            .array(zod_1.z.object({ id: zod_1.z.string() }))
+            .parse(await this.client().request('GET', '/rest/config/folders'));
+        const ids = new Set(configured.map((folder) => folder.id));
+        return projectFolderList(projectId).filter((folder) => ids.has(folder.id));
+    }
+    async initialFolders(projectId) {
+        const root = await this.folderPath(projectId);
+        const gitDirectory = await (0, promises_1.lstat)((0, path_1.join)(root, '.git')).then((info) => info.isDirectory(), (error) => {
+            if (error.code === 'ENOENT')
+                return false;
+            throw error;
+        });
+        return projectFolderList(projectId, gitDirectory ? ['code', 'git'] : ['code']);
+    }
+    async projectNeed(projectId) {
+        const needs = [];
+        try {
+            for (const folder of await this.projectFolders(projectId)) {
+                try {
+                    const status = await this.status(folder.id);
+                    needs.push({
+                        id: folder.id,
+                        needItems: status.needTotalItems,
+                        needBytes: status.needBytes,
+                    });
+                }
+                catch (error) {
+                    if (!(error instanceof syncthing_rest_client_1.SyncthingRestError && error.status === 404))
+                        throw error;
+                }
+            }
+        }
+        catch {
+            return null;
+        }
+        return needs;
+    }
+    async folderPath(projectId, kind = 'code') {
+        const project = await this.storage.getProject(projectId);
+        const path = this.paths.codeFolder(project);
+        (0, file_sync_paths_1.assertShareableFolder)(path);
+        return kind === 'git' ? (0, path_1.join)(path, '.git') : path;
+    }
+    async ensureFolder(request) {
+        const path = await this.folderPath(request.projectId, request.kind);
+        const id = projectFolderId(request.projectId, request.kind);
+        await (0, promises_1.mkdir)(path, { recursive: true });
+        if (request.kind === 'code')
+            await excludeMarkersFromGit(path);
+        const client = this.client();
+        await client.request('PUT', `/rest/config/folders/${enc(id)}`, {
+            id,
+            label: id,
+            path,
+            type: request.type,
+            devices: [{ deviceID: request.peerDeviceId }],
+            paused: true,
+            fsWatcherEnabled: true,
+            fsWatcherDelayS: exports.FOLDER_WATCHER_DELAY_S,
+            rescanIntervalS: RESCAN_INTERVAL_S,
+            ...(request.kind === 'git' ? { maxConflicts: 0 } : {}),
+        });
+        await client.request('POST', `/rest/db/ignores?folder=${enc(id)}`, {
+            ignore: request.ignores,
+        });
+        const paused = request.paused ?? false;
+        if (!paused)
+            await this.updateFolder(id, { paused: false });
+        return { id, path, type: request.type, paused };
+    }
+    async updateFolder(folderId, patch) {
+        const { ignores, ...configuration } = patch;
+        if (ignores) {
+            await this.client().request('POST', `/rest/db/ignores?folder=${enc(folderId)}`, {
+                ignore: ignores,
+            });
+        }
+        await this.client().request('PATCH', `/rest/config/folders/${enc(folderId)}`, {
+            ...configuration,
+            fsWatcherDelayS: exports.FOLDER_WATCHER_DELAY_S,
+        });
+    }
+    async folderConfiguration(folderId) {
+        return zod_1.z
+            .object({
+            type: file_sync_dto_1.FolderTypeSchema,
+            paused: zod_1.z.boolean(),
+            devices: zod_1.z.array(zod_1.z.object({ deviceID: zod_1.z.string() })),
+        })
+            .parse(await this.client().request('GET', `/rest/config/folders/${enc(folderId)}`));
+    }
+    async setFolderType(folderId, type) {
+        await this.updateFolder(folderId, { type });
+    }
+    async status(folderId, peerDeviceId) {
+        const client = this.client();
+        const raw = RawStatusSchema.parse(await client.request('GET', `/rest/db/status?folder=${enc(folderId)}`));
+        const peer = peerDeviceId
+            ? RawCompletionSchema.parse(await client.request('GET', `/rest/db/completion?folder=${enc(folderId)}&device=${enc(peerDeviceId)}`))
+            : null;
+        return { folderId, ...raw, peer: peer && { deviceId: peerDeviceId ?? '', ...peer } };
+    }
+    async removeFolder(folderId) {
+        try {
+            await this.client().request('DELETE', `/rest/config/folders/${enc(folderId)}`);
+        }
+        catch (error) {
+            if (!(error instanceof syncthing_rest_client_1.SyncthingRestError && error.status === 404))
+                throw error;
+        }
+    }
+    async rescan(folderId) {
+        await this.client().request('POST', `/rest/db/scan?folder=${enc(folderId)}`, undefined, exports.SCAN_TIMEOUT_MS);
+    }
+    async revertLocalChanges(folderId) {
+        await this.client().request('POST', `/rest/db/revert?folder=${enc(folderId)}`);
+    }
+    async waitForComplete(folderId, options) {
+        const deadline = Date.now() + options.timeoutMs;
+        let progress = null;
+        let lastError = null;
+        for (;;) {
+            try {
+                const [sender, receiver] = await Promise.all([options.sender(), options.receiver()]);
+                const result = options.symmetric
+                    ? evaluateSymmetricCompletion(sender, receiver)
+                    : evaluateCompletion(sender, receiver);
+                progress = result.progress;
+                lastError = null;
+                options.onProgress?.(progress);
+                if (result.done)
+                    return progress;
+            }
+            catch (error) {
+                lastError = error instanceof Error ? error.message : String(error);
+            }
+            if (Date.now() >= deadline)
+                throw new FileSyncTimeoutError(folderId, progress, lastError);
+            await new Promise((resolve) => setTimeout(resolve, options.pollIntervalMs ?? COMPLETION_POLL_MS));
+        }
+    }
+    connection() {
+        const connection = this.syncthing.getConnection();
+        if (!connection) {
+            throw new FileSyncUnavailableError(this.syncthing.getState().error ?? 'Syncthing is not running');
+        }
+        return connection;
+    }
+    client() {
+        return this.connection().client;
+    }
+};
+exports.FileSyncService = FileSyncService;
+exports.FileSyncService = FileSyncService = __decorate([
+    (0, common_1.Injectable)(),
+    __param(1, (0, common_1.Inject)(file_sync_paths_1.FILE_SYNC_PATHS)),
+    __param(2, (0, common_1.Inject)(storage_interface_1.STORAGE_SERVICE)),
+    __metadata("design:paramtypes", [syncthing_manager_service_1.SyncthingManager, Object, Object, file_sync_ignores_store_1.FileSyncIgnoresStore])
+], FileSyncService);
+async function excludeMarkersFromGit(root) {
+    const gitDir = (0, path_1.join)(root, '.git');
+    const isRepository = await (0, promises_1.stat)(gitDir).then((info) => info.isDirectory(), () => false);
+    if (!isRepository)
+        return;
+    const excludePath = (0, path_1.join)(gitDir, 'info', 'exclude');
+    const current = await (0, promises_1.readFile)(excludePath, 'utf8').catch(() => '');
+    const lines = new Set(current.split(/\r?\n/).map((line) => line.trim()));
+    const missing = [
+        ...syncthing_markers_1.SYNCTHING_MARKERS.map((marker) => `/${marker}`),
+        '*.sync-conflict-*',
+        ...syncthing_markers_1.SYNCTHING_TEMP_PATTERNS,
+    ].filter((line) => !lines.has(line));
+    if (missing.length === 0)
+        return;
+    await (0, promises_1.mkdir)((0, path_1.join)(gitDir, 'info'), { recursive: true });
+    const prefix = current.length > 0 && !current.endsWith('\n') ? '\n' : '';
+    await (0, promises_1.writeFile)(excludePath, `${current}${prefix}${missing.join('\n')}\n`);
+}
+function enc(value) {
+    return encodeURIComponent(value);
+}
+//# sourceMappingURL=file-sync.service.js.map

package/dist/server/modules/file-sync/file-sync.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-sync.service.js","sourceRoot":"","sources":["../../../src/modules/file-sync/file-sync.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAsFA,oCAEC;AAED,0CAEC;AAGD,8CAKC;AAQD,gDAwBC;AAGD,kEAWC;AAlJD,2CAAoD;AACpD,0CAAsE;AACtE,+BAA4B;AAC5B,6BAAwB;AACxB,gFAGkD;AAClD,iEAA2D;AAC3D,+EAA+F;AAC/F,uDAA+F;AAC/F,mDASyB;AACzB,uEAAiE;AACjE,2EAA+D;AAC/D,mEAAuF;AAM1E,QAAA,sBAAsB,GAAG,CAAC,CAAC;AACxC,MAAM,iBAAiB,GAAG,IAAI,CAAC;AAC/B,MAAM,kBAAkB,GAAG,GAAG,CAAC;AAKlB,QAAA,eAAe,GAAG,EAAE,GAAG,MAAM,CAAC;AAE3C,MAAM,eAAe,GAAG,sCAAsB,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;AAEpF,MAAM,mBAAmB,GAAG,OAAC,CAAC,MAAM,CAAC;IACnC,UAAU,EAAE,OAAC,CAAC,MAAM,EAAE;IACtB,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE;IACrB,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE;IACrB,WAAW,EAAE,OAAC,CAAC,MAAM,EAAE;CACxB,CAAC,CAAC;AAEH,MAAM,iBAAiB,GAAG,OAAC,CAAC,MAAM,CAAC;IACjC,WAAW,EAAE,OAAC,CAAC,MAAM,CAAC,OAAC,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,OAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;CAC5D,CAAC,CAAC;AAoBH,MAAa,wBAAyB,SAAQ,sBAAQ;IACpD,YAAY,MAAc;QACxB,KAAK,CAAC,6BAA6B,MAAM,EAAE,EAAE,uBAAuB,EAAE,GAAG,CAAC,CAAC;IAC7E,CAAC;CACF;AAJD,4DAIC;AAED,MAAa,oBAAqB,SAAQ,sBAAQ;IAChD,YAAY,QAAgB,EAAE,QAA6B,EAAE,SAAwB;QACnF,KAAK,CACH,UAAU,QAAQ,kCAAkC,SAAS,CAAC,CAAC,CAAC,KAAK,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EACvF,mBAAmB,EACnB,GAAG,EACH,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,CAClC,CAAC;IACJ,CAAC;CACF;AATD,oDASC;AAED,SAAgB,YAAY,CAAC,SAAiB;IAC5C,OAAO,eAAe,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;AAC5C,CAAC;AAED,SAAgB,eAAe,CAAC,SAAiB,EAAE,IAA2B;IAC5E,OAAO,GAAG,IAAI,IAAI,SAAS,EAAE,CAAC;AAChC,CAAC;AAGD,SAAgB,iBAAiB,CAC/B,SAAiB,EACjB,QAA0C,CAAC,MAAM,EAAE,KAAK,CAAC;IAEzD,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,eAAe,CAAC,SAAS,EAAE,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;AAC/E,CAAC;AAQD,SAAgB,kBAAkB,CAChC,MAAwB,EACxB,QAA0B;IAE1B,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC;IACzB,MAAM,IAAI,GACR,IAAI,KAAK,IAAI;QACb,IAAI,CAAC,UAAU,KAAK,GAAG;QACvB,IAAI,CAAC,SAAS,KAAK,CAAC;QACpB,IAAI,CAAC,WAAW,KAAK,OAAO;QAC5B,MAAM,CAAC,KAAK,KAAK,MAAM;QACvB,QAAQ,CAAC,KAAK,KAAK,MAAM;QACzB,QAAQ,CAAC,cAAc,KAAK,CAAC;QAC7B,QAAQ,CAAC,WAAW,KAAK,MAAM,CAAC,UAAU;QAC1C,QAAQ,CAAC,UAAU,KAAK,MAAM,CAAC,UAAU;QACzC,QAAQ,CAAC,iBAAiB,KAAK,MAAM,CAAC,gBAAgB,CAAC;IACzD,OAAO;QACL,IAAI;QACJ,QAAQ,EAAE;YACR,UAAU,EAAE,IAAI,EAAE,UAAU,IAAI,CAAC;YACjC,SAAS,EAAE,IAAI,EAAE,SAAS,IAAI,QAAQ,CAAC,cAAc;YACrD,SAAS,EAAE,IAAI,EAAE,SAAS,IAAI,QAAQ,CAAC,SAAS;SACjD;KACF,CAAC;AACJ,CAAC;AAGD,SAAgB,2BAA2B,CAAC,IAAsB,EAAE,IAAsB;IACxF,MAAM,OAAO,GAAG,kBAAkB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAC/C,MAAM,OAAO,GAAG,kBAAkB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAC/C,OAAO;QACL,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,IAAI;QAClC,QAAQ,EAAE;YACR,UAAU,EAAE,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC;YAC9E,SAAS,EAAE,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC,cAAc;YACpD,SAAS,EAAE,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS;SAC3C;KACF,CAAC;AACJ,CAAC;AAkBM,IAAM,eAAe,GAArB,MAAM,eAAe;IAEP;IACyB;IACA;IACzB;IAJnB,YACmB,SAA2B,EACF,KAAoB,EACpB,OAAuB,EAChD,OAA6B;QAH7B,cAAS,GAAT,SAAS,CAAkB;QACF,UAAK,GAAL,KAAK,CAAe;QACpB,YAAO,GAAP,OAAO,CAAgB;QAChD,YAAO,GAAP,OAAO,CAAsB;IAC7C,CAAC;IAOJ,KAAK,CAAC,eAAe;QACnB,MAAM,IAAI,CAAC,SAAS,CAAC,aAAa,EAAE,CAAC;QACrC,IAAI,CAAC,UAAU,EAAE,CAAC;IACpB,CAAC;IAED,MAAM;QACJ,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC;QACrC,OAAO,EAAE,QAAQ,EAAE,UAAU,CAAC,QAAQ,EAAE,OAAO,EAAE,UAAU,CAAC,aAAa,EAAE,CAAC;IAC9E,CAAC;IAGD,KAAK,CAAC,OAAO,CAAC,IAAgB;QAC5B,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,wBAAwB,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE;YAC/E,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,IAAI,EAAE,eAAe;YACrB,SAAS,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC;YACzB,iBAAiB,EAAE,KAAK;SACzB,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,QAAgB;QAChC,MAAM,IAAI,GAAG,iBAAiB,CAAC,KAAK,CAClC,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,0BAA0B,CAAC,CAC/D,CAAC;QACF,OAAO,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,EAAE,SAAS,KAAK,IAAI,CAAC;IACxD,CAAC;IAED,UAAU,CAAC,SAAiB;QAC1B,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IACrC,CAAC;IAED,UAAU,CAAC,SAAiB,EAAE,OAAwB;QACpD,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;IAC9C,CAAC;IAGD,KAAK,CAAC,cAAc,CAAC,SAAiB;QACpC,MAAM,UAAU,GAAG,OAAC;aACjB,KAAK,CAAC,OAAC,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,OAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;aACnC,KAAK,CAAC,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,sBAAsB,CAAC,CAAC,CAAC;QACrE,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;QAC3D,OAAO,iBAAiB,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;IAC7E,CAAC;IAGD,KAAK,CAAC,cAAc,CAAC,SAAiB;QACpC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;QAC9C,MAAM,YAAY,GAAG,MAAM,IAAA,gBAAK,EAAC,IAAA,WAAI,EAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CACvD,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,EAC5B,CAAC,KAA4B,EAAE,EAAE;YAC/B,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ;gBAAE,OAAO,KAAK,CAAC;YAC1C,MAAM,KAAK,CAAC;QACd,CAAC,CACF,CAAC;QACF,OAAO,iBAAiB,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;IACjF,CAAC;IAOD,KAAK,CAAC,WAAW,CAAC,SAAiB;QACjC,MAAM,KAAK,GAAiB,EAAE,CAAC;QAC/B,IAAI,CAAC;YACH,KAAK,MAAM,MAAM,IAAI,MAAM,IAAI,CAAC,cAAc,CAAC,SAAS,CAAC,EAAE,CAAC;gBAC1D,IAAI,CAAC;oBACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;oBAC5C,KAAK,CAAC,IAAI,CAAC;wBACT,EAAE,EAAE,MAAM,CAAC,EAAE;wBACb,SAAS,EAAE,MAAM,CAAC,cAAc;wBAChC,SAAS,EAAE,MAAM,CAAC,SAAS;qBAC5B,CAAC,CAAC;gBACL,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,IAAI,CAAC,CAAC,KAAK,YAAY,0CAAkB,IAAI,KAAK,CAAC,MAAM,KAAK,GAAG,CAAC;wBAAE,MAAM,KAAK,CAAC;gBAClF,CAAC;YACH,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAGD,KAAK,CAAC,UAAU,CAAC,SAAiB,EAAE,OAA8B,MAAM;QACtE,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;QACzD,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;QAC5C,IAAA,uCAAqB,EAAC,IAAI,CAAC,CAAC;QAC5B,OAAO,IAAI,KAAK,KAAK,CAAC,CAAC,CAAC,IAAA,WAAI,EAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACpD,CAAC;IAMD,KAAK,CAAC,YAAY,CAAC,OAA0B;QAC3C,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;QACpE,MAAM,EAAE,GAAG,eAAe,CAAC,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;QAC5D,MAAM,IAAA,gBAAK,EAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACvC,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM;YAAE,MAAM,qBAAqB,CAAC,IAAI,CAAC,CAAC;QAC/D,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;QAC7B,MAAM,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,wBAAwB,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE;YAC7D,EAAE;YACF,KAAK,EAAE,EAAE;YACT,IAAI;YACJ,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,OAAO,EAAE,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,YAAY,EAAE,CAAC;YAC7C,MAAM,EAAE,IAAI;YACZ,gBAAgB,EAAE,IAAI;YACtB,eAAe,EAAE,8BAAsB;YACvC,eAAe,EAAE,iBAAiB;YAClC,GAAG,CAAC,OAAO,CAAC,IAAI,KAAK,KAAK,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACvD,CAAC,CAAC;QACH,MAAM,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,2BAA2B,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE;YACjE,MAAM,EAAE,OAAO,CAAC,OAAO;SACxB,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,KAAK,CAAC;QACvC,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,CAAC,YAAY,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;QAC5D,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC;IAClD,CAAC;IAOD,KAAK,CAAC,YAAY,CAAC,QAAgB,EAAE,KAAsB;QACzD,MAAM,EAAE,OAAO,EAAE,GAAG,aAAa,EAAE,GAAG,KAAK,CAAC;QAC5C,IAAI,OAAO,EAAE,CAAC;YACZ,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,2BAA2B,GAAG,CAAC,QAAQ,CAAC,EAAE,EAAE;gBAC9E,MAAM,EAAE,OAAO;aAChB,CAAC,CAAC;QACL,CAAC;QACD,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,wBAAwB,GAAG,CAAC,QAAQ,CAAC,EAAE,EAAE;YAC5E,GAAG,aAAa;YAChB,eAAe,EAAE,8BAAsB;SACxC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,mBAAmB,CAAC,QAAgB;QACxC,OAAO,OAAC;aACL,MAAM,CAAC;YACN,IAAI,EAAE,gCAAgB;YACtB,MAAM,EAAE,OAAC,CAAC,OAAO,EAAE;YACnB,OAAO,EAAE,OAAC,CAAC,KAAK,CAAC,OAAC,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,OAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;SACrD,CAAC;aACD,KAAK,CAAC,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,wBAAwB,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC;IACxF,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,QAAgB,EAAE,IAAgB;QACpD,MAAM,IAAI,CAAC,YAAY,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9C,CAAC;IAGD,KAAK,CAAC,MAAM,CAAC,QAAgB,EAAE,YAAqB;QAClD,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;QAC7B,MAAM,GAAG,GAAG,eAAe,CAAC,KAAK,CAC/B,MAAM,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,0BAA0B,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,CACvE,CAAC;QACF,MAAM,IAAI,GAAG,YAAY;YACvB,CAAC,CAAC,mBAAmB,CAAC,KAAK,CACvB,MAAM,MAAM,CAAC,OAAO,CAClB,KAAK,EACL,8BAA8B,GAAG,CAAC,QAAQ,CAAC,WAAW,GAAG,CAAC,YAAY,CAAC,EAAE,CAC1E,CACF;YACH,CAAC,CAAC,IAAI,CAAC;QACT,OAAO,EAAE,QAAQ,EAAE,GAAG,GAAG,EAAE,IAAI,EAAE,IAAI,IAAI,EAAE,QAAQ,EAAE,YAAY,IAAI,EAAE,EAAE,GAAG,IAAI,EAAE,EAAE,CAAC;IACvF,CAAC;IAGD,KAAK,CAAC,YAAY,CAAC,QAAgB;QACjC,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,QAAQ,EAAE,wBAAwB,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QACjF,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,CAAC,KAAK,YAAY,0CAAkB,IAAI,KAAK,CAAC,MAAM,KAAK,GAAG,CAAC;gBAAE,MAAM,KAAK,CAAC;QAClF,CAAC;IACH,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,QAAgB;QAC3B,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC,OAAO,CACzB,MAAM,EACN,wBAAwB,GAAG,CAAC,QAAQ,CAAC,EAAE,EACvC,SAAS,EACT,uBAAe,CAChB,CAAC;IACJ,CAAC;IAGD,KAAK,CAAC,kBAAkB,CAAC,QAAgB;QACvC,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,0BAA0B,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;IACjF,CAAC;IAMD,KAAK,CAAC,eAAe,CAAC,QAAgB,EAAE,OAA+B;QACrE,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,SAAS,CAAC;QAChD,IAAI,QAAQ,GAAwB,IAAI,CAAC;QACzC,IAAI,SAAS,GAAkB,IAAI,CAAC;QACpC,SAAS,CAAC;YACR,IAAI,CAAC;gBACH,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;gBACrF,MAAM,MAAM,GAAG,OAAO,CAAC,SAAS;oBAC9B,CAAC,CAAC,2BAA2B,CAAC,MAAM,EAAE,QAAQ,CAAC;oBAC/C,CAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;gBACzC,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;gBAC3B,SAAS,GAAG,IAAI,CAAC;gBACjB,OAAO,CAAC,UAAU,EAAE,CAAC,QAAQ,CAAC,CAAC;gBAC/B,IAAI,MAAM,CAAC,IAAI;oBAAE,OAAO,QAAQ,CAAC;YACnC,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,SAAS,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACrE,CAAC;YACD,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,QAAQ;gBAAE,MAAM,IAAI,oBAAoB,CAAC,QAAQ,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC;YAC1F,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAC5B,UAAU,CAAC,OAAO,EAAE,OAAO,CAAC,cAAc,IAAI,kBAAkB,CAAC,CAClE,CAAC;QACJ,CAAC;IACH,CAAC;IAEO,UAAU;QAChB,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,aAAa,EAAE,CAAC;QAClD,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,MAAM,IAAI,wBAAwB,CAChC,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,CAAC,KAAK,IAAI,0BAA0B,CAC9D,CAAC;QACJ,CAAC;QACD,OAAO,UAAU,CAAC;IACpB,CAAC;IAEO,MAAM;QACZ,OAAO,IAAI,CAAC,UAAU,EAAE,CAAC,MAAM,CAAC;IAClC,CAAC;CACF,CAAA;AAvPY,0CAAe;0BAAf,eAAe;IAD3B,IAAA,mBAAU,GAAE;IAIR,WAAA,IAAA,eAAM,EAAC,iCAAe,CAAC,CAAA;IACvB,WAAA,IAAA,eAAM,EAAC,mCAAe,CAAC,CAAA;qCAFI,4CAAgB,kBAGlB,8CAAoB;GALrC,eAAe,CAuP3B;AAOD,KAAK,UAAU,qBAAqB,CAAC,IAAY;IAC/C,MAAM,MAAM,GAAG,IAAA,WAAI,EAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAClC,MAAM,YAAY,GAAG,MAAM,IAAA,eAAI,EAAC,MAAM,CAAC,CAAC,IAAI,CAC1C,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,EAC5B,GAAG,EAAE,CAAC,KAAK,CACZ,CAAC;IACF,IAAI,CAAC,YAAY;QAAE,OAAO;IAC1B,MAAM,WAAW,GAAG,IAAA,WAAI,EAAC,MAAM,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;IACpD,MAAM,OAAO,GAAG,MAAM,IAAA,mBAAQ,EAAC,WAAW,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;IACpE,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IACzE,MAAM,OAAO,GAAG;QACd,GAAG,qCAAiB,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,MAAM,EAAE,CAAC;QAClD,mBAAmB;QACnB,GAAG,2CAAuB;KAC3B,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;IACrC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IACjC,MAAM,IAAA,gBAAK,EAAC,IAAA,WAAI,EAAC,MAAM,EAAE,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACvD,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;IACzE,MAAM,IAAA,oBAAS,EAAC,WAAW,EAAE,GAAG,OAAO,GAAG,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC7E,CAAC;AAED,SAAS,GAAG,CAAC,KAAa;IACxB,OAAO,kBAAkB,CAAC,KAAK,CAAC,CAAC;AACnC,CAAC"}

package/dist/server/modules/file-sync/home-git-guard.service.d.ts

@@ -0,0 +1,20 @@
+import { GitService } from '../git/services/git.service';
+import { type StorageService } from '../storage/interfaces/storage.interface';
+import { FileSyncService } from './file-sync.service';
+export declare class HomeGitGuardService {
+    private readonly fileSync;
+    private readonly git;
+    private readonly storage;
+    constructor(fileSync: FileSyncService, git: GitService, storage: StorageService);
+    install(projectId: string, remoteId: string): Promise<string | null>;
+    remove(projectId: string, options: {
+        refreshIndex: boolean;
+    }): Promise<void>;
+    reinstall(projectId: string, remoteId: string): Promise<string | null>;
+    private skipWarning;
+    private remoteName;
+    private installHooks;
+    private stripHooks;
+    private isOwnHook;
+    private isDirectory;
+}

package/dist/server/modules/file-sync/home-git-guard.service.js

@@ -0,0 +1,246 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.HomeGitGuardService = void 0;
+const common_1 = require("@nestjs/common");
+const promises_1 = require("fs/promises");
+const fs_1 = require("fs");
+const path_1 = require("path");
+const semver = __importStar(require("semver"));
+const logger_1 = require("../../common/logging/logger");
+const error_types_1 = require("../../common/errors/error-types");
+const git_service_1 = require("../git/services/git.service");
+const storage_interface_1 = require("../storage/interfaces/storage.interface");
+const quote_shell_arg_1 = require("../terminal/services/terminal-io/quote-shell-arg");
+const file_sync_service_1 = require("./file-sync.service");
+const logger = (0, logger_1.createLogger)('HomeGitGuard');
+const REFERENCE_TRANSACTION_HOOK = 'reference-transaction';
+const POST_CHECKOUT_HOOK = 'post-checkout';
+const GUARD_HOOKS = [REFERENCE_TRANSACTION_HOOK, POST_CHECKOUT_HOOK];
+const SAVED_SUFFIX = '.devchain-saved';
+const OWNED_HEADER = '#!/bin/sh\n# devchain remote-guard\n';
+const SWITCHBACK_MARKER = '.devchain-guard-switchback';
+const MINIMUM_GIT_VERSION = '2.28.0';
+function isSupportedGit(version) {
+    return semver.gte(`${version.major}.${version.minor}.${version.patch}`, MINIMUM_GIT_VERSION);
+}
+function safeRemoteName(name, fallback) {
+    const cleaned = name.replace(/[^\w ./-]/g, '').trim();
+    return cleaned === '' ? fallback : cleaned;
+}
+const STASH_COMMAND = ['st', 'ash'].join('');
+function guardMessage(remoteName) {
+    return `This project runs on the remote VM "${remoteName}". Normal file editing is allowed: your changes sync to the VM. Git changes (commit, branch, tag, ${STASH_COMMAND}, merge, rebase, switch) are blocked here until you disconnect. Run them on the VM, or ask an agent.`;
+}
+function referenceTransactionScript(message) {
+    return `${OWNED_HEADER}# Installed while a remote DevChain VM owns this project; removed on disconnect.
+# Git passes the transaction state ("prepared", "committed" or "aborted") as $1.
+case "$1" in
+  prepared)
+    echo ${(0, quote_shell_arg_1.quoteShellArg)(message)} >&2
+    exit 1
+    ;;
+esac
+exit 0
+`;
+}
+function postCheckoutScript(message) {
+    return `${OWNED_HEADER}# Installed while a remote DevChain VM owns this project; removed on disconnect.
+marker="$(dirname "$0")/${SWITCHBACK_MARKER}"
+
+# Only branch checkouts concern the guard, never file checkouts.
+[ "$3" = "1" ] || exit 0
+
+# This checkout logged "moving from <previous> to <current>" in HEAD's reflog,
+# so @{-1} is the branch the VM owned right before it, also after the VM
+# switched branches. A no-op checkout logs the same branch on both sides.
+previous=$(git rev-parse --symbolic-full-name '@{-1}' 2>/dev/null)
+current=$(git symbolic-ref -q HEAD) || exit 0
+case "$previous" in refs/heads/*) ;; *) exit 0 ;; esac
+[ "$previous" != "$current" ] || exit 0
+
+# The switch-back below re-enters this hook once; the marker stops the loop.
+if [ -e "$marker" ]; then
+  rm -f "$marker"
+  exit 0
+fi
+
+echo ${(0, quote_shell_arg_1.quoteShellArg)(message)} >&2
+touch "$marker"
+branch="\${previous#refs/heads/}"
+git checkout "$branch" >/dev/null 2>&1 || git switch "$branch" >/dev/null 2>&1 || true
+rm -f "$marker"
+exit 0
+`;
+}
+let HomeGitGuardService = class HomeGitGuardService {
+    fileSync;
+    git;
+    storage;
+    constructor(fileSync, git, storage) {
+        this.fileSync = fileSync;
+        this.git = git;
+        this.storage = storage;
+    }
+    async install(projectId, remoteId) {
+        const root = await this.fileSync.folderPath(projectId);
+        if (!(await this.isDirectory((0, path_1.join)(root, '.git')))) {
+            return this.skipWarning(projectId, 'the project root has no .git directory (worktrees are unsupported)');
+        }
+        let hooksPath = null;
+        let version = null;
+        try {
+            hooksPath = await this.git.getConfigValue(projectId, 'core.hooksPath', root);
+            if (hooksPath) {
+                return this.skipWarning(projectId, `core.hooksPath is set (${hooksPath}); the guard cannot install into .git/hooks`);
+            }
+            version = await this.git.getVersion(projectId, root);
+        }
+        catch (error) {
+            const reason = error instanceof Error ? error.message : String(error);
+            return this.skipWarning(projectId, `git could not be consulted (${reason})`);
+        }
+        if (!isSupportedGit(version)) {
+            return this.skipWarning(projectId, `git ${version.major}.${version.minor}.${version.patch} is older than 2.28; the reference-transaction hook is unavailable`);
+        }
+        const remoteName = safeRemoteName(await this.remoteName(projectId, remoteId), remoteId);
+        await this.installHooks(root, remoteName);
+        logger.info({ projectId, remoteId }, 'Remote git guard installed');
+        return null;
+    }
+    async remove(projectId, options) {
+        const root = await this.fileSync.folderPath(projectId);
+        await this.stripHooks(root);
+        if (!options.refreshIndex)
+            return;
+        try {
+            await this.git.refreshIndexFromHead(projectId, root);
+        }
+        catch (error) {
+            logger.warn({ error, projectId }, 'Guard index refresh failed (non-fatal)');
+        }
+    }
+    async reinstall(projectId, remoteId) {
+        const root = await this.fileSync.folderPath(projectId);
+        await this.stripHooks(root);
+        return this.install(projectId, remoteId);
+    }
+    skipWarning(projectId, reason) {
+        const warning = `Git guard skipped: ${reason}. Git changes at home are not blocked while the project runs on the VM.`;
+        logger.warn({ projectId }, warning);
+        return warning;
+    }
+    async remoteName(projectId, remoteId) {
+        try {
+            return (await this.storage.getRemote(remoteId)).name;
+        }
+        catch (error) {
+            if (error instanceof error_types_1.NotFoundError) {
+                logger.warn({ projectId, remoteId }, 'Guard remote row missing; using id as name');
+                return '';
+            }
+            throw error;
+        }
+    }
+    async installHooks(root, remoteName) {
+        const hooksDir = (0, path_1.join)(root, '.git', 'hooks');
+        await (0, promises_1.mkdir)(hooksDir, { recursive: true });
+        const message = guardMessage(remoteName);
+        for (const name of GUARD_HOOKS) {
+            const hookPath = (0, path_1.join)(hooksDir, name);
+            if ((0, fs_1.existsSync)(hookPath) && !(await this.isOwnHook(hookPath))) {
+                const savedPath = `${hookPath}${SAVED_SUFFIX}`;
+                await (0, promises_1.rm)(savedPath, { force: true });
+                await (0, promises_1.rename)(hookPath, savedPath);
+            }
+            const script = name === REFERENCE_TRANSACTION_HOOK
+                ? referenceTransactionScript(message)
+                : postCheckoutScript(message);
+            await (0, promises_1.writeFile)(hookPath, script, 'utf8');
+            await (0, promises_1.chmod)(hookPath, 0o755);
+        }
+    }
+    async stripHooks(root) {
+        const hooksDir = (0, path_1.join)(root, '.git', 'hooks');
+        if (!(0, fs_1.existsSync)(hooksDir))
+            return;
+        for (const name of GUARD_HOOKS) {
+            const hookPath = (0, path_1.join)(hooksDir, name);
+            if (await this.isOwnHook(hookPath))
+                await (0, promises_1.rm)(hookPath, { force: true });
+            const savedPath = `${hookPath}${SAVED_SUFFIX}`;
+            if ((0, fs_1.existsSync)(savedPath) && !(0, fs_1.existsSync)(hookPath))
+                await (0, promises_1.rename)(savedPath, hookPath);
+        }
+        await (0, promises_1.rm)((0, path_1.join)(hooksDir, SWITCHBACK_MARKER), { force: true });
+    }
+    async isOwnHook(hookPath) {
+        try {
+            const content = await (0, promises_1.readFile)(hookPath, 'utf8');
+            return content.startsWith(OWNED_HEADER);
+        }
+        catch {
+            return false;
+        }
+    }
+    async isDirectory(path) {
+        try {
+            return (await (0, promises_1.stat)(path)).isDirectory();
+        }
+        catch {
+            return false;
+        }
+    }
+};
+exports.HomeGitGuardService = HomeGitGuardService;
+exports.HomeGitGuardService = HomeGitGuardService = __decorate([
+    (0, common_1.Injectable)(),
+    __param(2, (0, common_1.Inject)(storage_interface_1.STORAGE_SERVICE)),
+    __metadata("design:paramtypes", [file_sync_service_1.FileSyncService,
+        git_service_1.GitService, Object])
+], HomeGitGuardService);
+//# sourceMappingURL=home-git-guard.service.js.map

package/dist/server/modules/file-sync/home-git-guard.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"home-git-guard.service.js","sourceRoot":"","sources":["../../../src/modules/file-sync/home-git-guard.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,2CAAoD;AACpD,0CAAkF;AAClF,2BAAgC;AAChC,+BAA4B;AAC5B,+CAAiC;AACjC,wDAA2D;AAC3D,iEAAgE;AAChE,6DAA0E;AAC1E,+EAA+F;AAC/F,sFAAiF;AACjF,2DAAsD;AAEtD,MAAM,MAAM,GAAG,IAAA,qBAAY,EAAC,cAAc,CAAC,CAAC;AAE5C,MAAM,0BAA0B,GAAG,uBAAuB,CAAC;AAC3D,MAAM,kBAAkB,GAAG,eAAe,CAAC;AAC3C,MAAM,WAAW,GAAG,CAAC,0BAA0B,EAAE,kBAAkB,CAAU,CAAC;AAC9E,MAAM,YAAY,GAAG,iBAAiB,CAAC;AAEvC,MAAM,YAAY,GAAG,sCAAsC,CAAC;AAE5D,MAAM,iBAAiB,GAAG,4BAA4B,CAAC;AAEvD,MAAM,mBAAmB,GAAG,QAAQ,CAAC;AAErC,SAAS,cAAc,CAAC,OAAmB;IACzC,OAAO,MAAM,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,KAAK,IAAI,OAAO,CAAC,KAAK,IAAI,OAAO,CAAC,KAAK,EAAE,EAAE,mBAAmB,CAAC,CAAC;AAC/F,CAAC;AAGD,SAAS,cAAc,CAAC,IAAY,EAAE,QAAgB;IACpD,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACtD,OAAO,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC;AAC7C,CAAC;AAID,MAAM,aAAa,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AAE7C,SAAS,YAAY,CAAC,UAAkB;IACtC,OAAO,uCAAuC,UAAU,qGAAqG,aAAa,sGAAsG,CAAC;AACnR,CAAC;AAED,SAAS,0BAA0B,CAAC,OAAe;IACjD,OAAO,GAAG,YAAY;;;;WAIb,IAAA,+BAAa,EAAC,OAAO,CAAC;;;;;CAKhC,CAAC;AACF,CAAC;AAED,SAAS,kBAAkB,CAAC,OAAe;IACzC,OAAO,GAAG,YAAY;0BACE,iBAAiB;;;;;;;;;;;;;;;;;;;OAmBpC,IAAA,+BAAa,EAAC,OAAO,CAAC;;;;;;CAM5B,CAAC;AACF,CAAC;AAQM,IAAM,mBAAmB,GAAzB,MAAM,mBAAmB;IAEX;IACA;IACyB;IAH5C,YACmB,QAAyB,EACzB,GAAe,EACU,OAAuB;QAFhD,aAAQ,GAAR,QAAQ,CAAiB;QACzB,QAAG,GAAH,GAAG,CAAY;QACU,YAAO,GAAP,OAAO,CAAgB;IAChE,CAAC;IAEJ,KAAK,CAAC,OAAO,CAAC,SAAiB,EAAE,QAAgB;QAC/C,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;QACvD,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,WAAW,CAAC,IAAA,WAAI,EAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;YAClD,OAAO,IAAI,CAAC,WAAW,CACrB,SAAS,EACT,oEAAoE,CACrE,CAAC;QACJ,CAAC;QAGD,IAAI,SAAS,GAAkB,IAAI,CAAC;QACpC,IAAI,OAAO,GAAsB,IAAI,CAAC;QACtC,IAAI,CAAC;YACH,SAAS,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,cAAc,CAAC,SAAS,EAAE,gBAAgB,EAAE,IAAI,CAAC,CAAC;YAC7E,IAAI,SAAS,EAAE,CAAC;gBACd,OAAO,IAAI,CAAC,WAAW,CACrB,SAAS,EACT,0BAA0B,SAAS,6CAA6C,CACjF,CAAC;YACJ,CAAC;YACD,OAAO,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QACvD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,MAAM,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACtE,OAAO,IAAI,CAAC,WAAW,CAAC,SAAS,EAAE,+BAA+B,MAAM,GAAG,CAAC,CAAC;QAC/E,CAAC;QACD,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,EAAE,CAAC;YAC7B,OAAO,IAAI,CAAC,WAAW,CACrB,SAAS,EACT,OAAO,OAAO,CAAC,KAAK,IAAI,OAAO,CAAC,KAAK,IAAI,OAAO,CAAC,KAAK,oEAAoE,CAC3H,CAAC;QACJ,CAAC;QACD,MAAM,UAAU,GAAG,cAAc,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC,SAAS,EAAE,QAAQ,CAAC,EAAE,QAAQ,CAAC,CAAC;QACxF,MAAM,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;QAC1C,MAAM,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,QAAQ,EAAE,EAAE,4BAA4B,CAAC,CAAC;QACnE,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,SAAiB,EAAE,OAAkC;QAChE,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;QACvD,MAAM,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QAC5B,IAAI,CAAC,OAAO,CAAC,YAAY;YAAE,OAAO;QAGlC,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,GAAG,CAAC,oBAAoB,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QACvD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE,wCAAwC,CAAC,CAAC;QAC9E,CAAC;IACH,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,SAAiB,EAAE,QAAgB;QACjD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;QACvD,MAAM,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QAC5B,OAAO,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IAC3C,CAAC;IAEO,WAAW,CAAC,SAAiB,EAAE,MAAc;QACnD,MAAM,OAAO,GAAG,sBAAsB,MAAM,yEAAyE,CAAC;QACtH,MAAM,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,EAAE,OAAO,CAAC,CAAC;QACpC,OAAO,OAAO,CAAC;IACjB,CAAC;IAOO,KAAK,CAAC,UAAU,CAAC,SAAiB,EAAE,QAAgB;QAC1D,IAAI,CAAC;YACH,OAAO,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC;QACvD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,2BAAa,EAAE,CAAC;gBACnC,MAAM,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,QAAQ,EAAE,EAAE,4CAA4C,CAAC,CAAC;gBACnF,OAAO,EAAE,CAAC;YACZ,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,YAAY,CAAC,IAAY,EAAE,UAAkB;QACzD,MAAM,QAAQ,GAAG,IAAA,WAAI,EAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;QAC7C,MAAM,IAAA,gBAAK,EAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3C,MAAM,OAAO,GAAG,YAAY,CAAC,UAAU,CAAC,CAAC;QACzC,KAAK,MAAM,IAAI,IAAI,WAAW,EAAE,CAAC;YAC/B,MAAM,QAAQ,GAAG,IAAA,WAAI,EAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;YAEtC,IAAI,IAAA,eAAU,EAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC;gBAC9D,MAAM,SAAS,GAAG,GAAG,QAAQ,GAAG,YAAY,EAAE,CAAC;gBAC/C,MAAM,IAAA,aAAE,EAAC,SAAS,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;gBACrC,MAAM,IAAA,iBAAM,EAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;YACpC,CAAC;YACD,MAAM,MAAM,GACV,IAAI,KAAK,0BAA0B;gBACjC,CAAC,CAAC,0BAA0B,CAAC,OAAO,CAAC;gBACrC,CAAC,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC;YAClC,MAAM,IAAA,oBAAS,EAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;YAC1C,MAAM,IAAA,gBAAK,EAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QAC/B,CAAC;IACH,CAAC;IAMO,KAAK,CAAC,UAAU,CAAC,IAAY;QACnC,MAAM,QAAQ,GAAG,IAAA,WAAI,EAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;QAC7C,IAAI,CAAC,IAAA,eAAU,EAAC,QAAQ,CAAC;YAAE,OAAO;QAClC,KAAK,MAAM,IAAI,IAAI,WAAW,EAAE,CAAC;YAC/B,MAAM,QAAQ,GAAG,IAAA,WAAI,EAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;YACtC,IAAI,MAAM,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC;gBAAE,MAAM,IAAA,aAAE,EAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YAExE,MAAM,SAAS,GAAG,GAAG,QAAQ,GAAG,YAAY,EAAE,CAAC;YAC/C,IAAI,IAAA,eAAU,EAAC,SAAS,CAAC,IAAI,CAAC,IAAA,eAAU,EAAC,QAAQ,CAAC;gBAAE,MAAM,IAAA,iBAAM,EAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;QACxF,CAAC;QACD,MAAM,IAAA,aAAE,EAAC,IAAA,WAAI,EAAC,QAAQ,EAAE,iBAAiB,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAC/D,CAAC;IAEO,KAAK,CAAC,SAAS,CAAC,QAAgB;QACtC,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,IAAA,mBAAQ,EAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;YACjD,OAAO,OAAO,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;QAC1C,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,WAAW,CAAC,IAAY;QACpC,IAAI,CAAC;YACH,OAAO,CAAC,MAAM,IAAA,eAAI,EAAC,IAAI,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;QAC1C,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;CACF,CAAA;AA5IY,kDAAmB;8BAAnB,mBAAmB;IAD/B,IAAA,mBAAU,GAAE;IAKR,WAAA,IAAA,eAAM,EAAC,mCAAe,CAAC,CAAA;qCAFG,mCAAe;QACpB,wBAAU;GAHvB,mBAAmB,CA4I/B"}

package/dist/server/modules/file-sync/host-sync.controller.d.ts

@@ -0,0 +1,14 @@
+import { type FolderSyncStatus, type SyncDevice, type SyncFolder } from './file-sync.dto';
+import { FileSyncService } from './file-sync.service';
+export declare class HostSyncController {
+    private readonly fileSync;
+    constructor(fileSync: FileSyncService);
+    device(): SyncDevice;
+    peer(body: unknown): Promise<void>;
+    folders(body: unknown): Promise<SyncFolder>;
+    updateFolder(id: string, body: unknown): Promise<void>;
+    removeFolder(id: string): Promise<void>;
+    scan(id: string): Promise<void>;
+    revert(id: string): Promise<void>;
+    status(query: unknown): Promise<FolderSyncStatus>;
+}