looply-cli 0.3.0 → 0.5.0

package/dist/packet-for-goal.js

@@ -15,7 +15,9 @@ const core_1 = require("@looply/core");
  */
 async function packetForGoal(goal, read, 
 /** The programme's other goals, so the packet can name what they own (F19). Absent: nothing named. */
-siblings = []) {
+siblings = [], 
+/** The other REPOSITORIES this goal's change spans, as this machine resolved them. Absent: none. */
+repositories) {
     const ids = [...new Set((goal.requirements ?? []).map((l) => l.sourceId))].sort();
     const sources = new Map();
     const unreadable = [];
@@ -27,6 +29,6 @@ siblings = []) {
             unreadable.push(id);
         }
     }
-    return { packet: (0, core_1.taskPacketFor)(goal, sources, siblings), unreadable };
+    return { packet: (0, core_1.taskPacketFor)(goal, sources, siblings, repositories), unreadable };
 }
 //# sourceMappingURL=packet-for-goal.js.map

package/dist/packet-for-goal.js.map

@@ -1 +1 @@
-{"version":3,"file":"packet-for-goal.js","sourceRoot":"","sources":["../src/packet-for-goal.ts"],"names":[],"mappings":";;AAaA,sCAiBC;AA9BD,uCAA4F;AAE5F;;;;;;;;;;GAUG;AACI,KAAK,UAAU,aAAa,CACjC,IAA4D,EAC5D,IAAiD;AACjD,sGAAsG;AACtG,WAAmE,EAAE;IAErE,MAAM,GAAG,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAClF,MAAM,OAAO,GAAG,IAAI,GAAG,EAAwB,CAAC;IAChD,MAAM,UAAU,GAAa,EAAE,CAAC;IAChC,KAAK,MAAM,EAAE,IAAI,GAAG,EAAE,CAAC;QACrB,IAAI,CAAC;YACH,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,MAAM,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;QAClC,CAAC;QAAC,MAAM,CAAC;YACP,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACtB,CAAC;IACH,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,IAAA,oBAAa,EAAC,IAAI,EAAE,OAAO,EAAE,QAAQ,CAAC,EAAE,UAAU,EAAE,CAAC;AACxE,CAAC"}
+{"version":3,"file":"packet-for-goal.js","sourceRoot":"","sources":["../src/packet-for-goal.ts"],"names":[],"mappings":";;AAaA,sCAmBC;AAhCD,uCAAiH;AAEjH;;;;;;;;;;GAUG;AACI,KAAK,UAAU,aAAa,CACjC,IAA4D,EAC5D,IAAiD;AACjD,sGAAsG;AACtG,WAAmE,EAAE;AACrE,oGAAoG;AACpG,YAA6B;IAE7B,MAAM,GAAG,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAClF,MAAM,OAAO,GAAG,IAAI,GAAG,EAAwB,CAAC;IAChD,MAAM,UAAU,GAAa,EAAE,CAAC;IAChC,KAAK,MAAM,EAAE,IAAI,GAAG,EAAE,CAAC;QACrB,IAAI,CAAC;YACH,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,MAAM,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;QAClC,CAAC;QAAC,MAAM,CAAC;YACP,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACtB,CAAC;IACH,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,IAAA,oBAAa,EAAC,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,YAAY,CAAC,EAAE,UAAU,EAAE,CAAC;AACtF,CAAC"}

package/dist/repo-init.d.ts

@@ -0,0 +1,36 @@
+import { type RepoProfile } from './init-detect';
+/**
+ * `looply init`, with every question answered by its default — for a folder
+ * nobody is sitting in.
+ *
+ * ⚠️ THE SAME PATH `init --yes` TAKES, NOT A SECOND DRAFT. `init` with no
+ * terminal runs `runSetup({ useDefaults: true })`, which is `DEFAULT_ANSWERS`,
+ * and renders with `renderConfig`. `connect`, the supervisor's rescan and the
+ * clone worker all go through here, so a repository set up by any of them is
+ * byte-for-byte what `looply init` would have drafted in it.
+ *
+ * 🔴 NEVER OVERWRITES. By the time a config exists it is the person's, full of
+ * hand-tuned rails a fresh draft would throw away — the rule `init` keeps.
+ */
+export interface QuietInitFs {
+    exists(path: string): boolean;
+    /** `null` when it cannot be read; detection treats that as absent. */
+    readText(path: string): string | null;
+    mkdirp(path: string): void;
+    writeText(path: string, text: string): void;
+}
+export declare const nodeQuietInitFs: QuietInitFs;
+export type InitOutcome = {
+    readonly kind: 'initialised';
+} | {
+    readonly kind: 'already';
+} | {
+    readonly kind: 'failed';
+    readonly reason: string;
+};
+/** What `init` shows before it asks anything; shared so the two read a repository the same way. */
+export declare function profileOf(dir: string, readText: (path: string) => string | null): RepoProfile;
+/** Why `<dir>/.looply/config.yaml` would not load, or null when it would — the daemon's own parser. */
+export declare function configProblemOf(dir: string, readText?: (path: string) => string | null): string | null;
+export declare function initRepoQuietly(dir: string, fs?: QuietInitFs): InitOutcome;
+//# sourceMappingURL=repo-init.d.ts.map

package/dist/repo-init.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"repo-init.d.ts","sourceRoot":"","sources":["../src/repo-init.ts"],"names":[],"mappings":"AAGA,OAAO,EAAc,KAAK,WAAW,EAAE,MAAM,eAAe,CAAC;AAG7D;;;;;;;;;;;;GAYG;AAEH,MAAM,WAAW,WAAW;IAC1B,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;IAC9B,sEAAsE;IACtE,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC;IACtC,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;CAC7C;AAED,eAAO,MAAM,eAAe,EAAE,WAc7B,CAAC;AAEF,MAAM,MAAM,WAAW,GACnB;IAAE,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAA;CAAE,GAChC;IAAE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAA;CAAE,GAC5B;IAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAEzD,mGAAmG;AACnG,wBAAgB,SAAS,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,MAAM,GAAG,IAAI,GAAG,WAAW,CAE7F;AAED,uGAAuG;AACvG,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,GAAE,CAAC,IAAI,EAAE,MAAM,KAAK,MAAM,GAAG,IAA+B,GAAG,MAAM,GAAG,IAAI,CAShI;AAED,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE,GAAE,WAA6B,GAAG,WAAW,CAY3F"}

package/dist/repo-init.js

@@ -0,0 +1,61 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.nodeQuietInitFs = void 0;
+exports.profileOf = profileOf;
+exports.configProblemOf = configProblemOf;
+exports.initRepoQuietly = initRepoQuietly;
+const node_fs_1 = require("node:fs");
+const node_path_1 = require("node:path");
+const config_1 = require("./config");
+const init_detect_1 = require("./init-detect");
+const setup_1 = require("./setup");
+exports.nodeQuietInitFs = {
+    exists: (p) => (0, node_fs_1.existsSync)(p),
+    readText: (p) => {
+        try {
+            return (0, node_fs_1.readFileSync)(p, 'utf8');
+        }
+        catch {
+            return null;
+        }
+    },
+    mkdirp: (p) => {
+        (0, node_fs_1.mkdirSync)(p, { recursive: true });
+    },
+    // `wx`: a config that appeared between the check and the write is kept.
+    writeText: (p, text) => (0, node_fs_1.writeFileSync)(p, text, { flag: 'wx' }),
+};
+/** What `init` shows before it asks anything; shared so the two read a repository the same way. */
+function profileOf(dir, readText) {
+    return (0, init_detect_1.detectRepo)({ readFile: (p) => readText((0, node_path_1.join)(dir, p)) }, (0, node_path_1.basename)(dir));
+}
+/** Why `<dir>/.looply/config.yaml` would not load, or null when it would — the daemon's own parser. */
+function configProblemOf(dir, readText = exports.nodeQuietInitFs.readText) {
+    const text = readText((0, node_path_1.join)(dir, '.looply', 'config.yaml'));
+    if (text === null)
+        return 'it cannot be read';
+    try {
+        (0, config_1.parseConfig)(text);
+        return null;
+    }
+    catch (e) {
+        return e.message;
+    }
+}
+function initRepoQuietly(dir, fs = exports.nodeQuietInitFs) {
+    const target = (0, node_path_1.join)(dir, '.looply', 'config.yaml');
+    try {
+        if (fs.exists(target))
+            return { kind: 'already' };
+        const profile = profileOf(dir, (p) => fs.readText(p));
+        fs.mkdirp((0, node_path_1.join)(dir, '.looply'));
+        fs.writeText(target, (0, setup_1.renderConfig)(profile, { ...setup_1.DEFAULT_ANSWERS }));
+        return { kind: 'initialised' };
+    }
+    catch (e) {
+        if (e.code === 'EEXIST')
+            return { kind: 'already' };
+        return { kind: 'failed', reason: e.message };
+    }
+}
+//# sourceMappingURL=repo-init.js.map

package/dist/repo-init.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"repo-init.js","sourceRoot":"","sources":["../src/repo-init.ts"],"names":[],"mappings":";;;AAkDA,8BAEC;AAGD,0CASC;AAED,0CAYC;AA9ED,qCAA6E;AAC7E,yCAA2C;AAC3C,qCAAuC;AACvC,+CAA6D;AAC7D,mCAAwD;AAwB3C,QAAA,eAAe,GAAgB;IAC1C,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,IAAA,oBAAU,EAAC,CAAC,CAAC;IAC5B,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE;QACd,IAAI,CAAC;YACH,OAAO,IAAA,sBAAY,EAAC,CAAC,EAAE,MAAM,CAAC,CAAC;QACjC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IACD,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE;QACZ,IAAA,mBAAS,EAAC,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACpC,CAAC;IACD,wEAAwE;IACxE,SAAS,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,CAAC,IAAA,uBAAa,EAAC,CAAC,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;CAC/D,CAAC;AAOF,mGAAmG;AACnG,SAAgB,SAAS,CAAC,GAAW,EAAE,QAAyC;IAC9E,OAAO,IAAA,wBAAU,EAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAA,gBAAI,EAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,IAAA,oBAAQ,EAAC,GAAG,CAAC,CAAC,CAAC;AAChF,CAAC;AAED,uGAAuG;AACvG,SAAgB,eAAe,CAAC,GAAW,EAAE,WAA4C,uBAAe,CAAC,QAAQ;IAC/G,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAA,gBAAI,EAAC,GAAG,EAAE,SAAS,EAAE,aAAa,CAAC,CAAC,CAAC;IAC3D,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,mBAAmB,CAAC;IAC9C,IAAI,CAAC;QACH,IAAA,oBAAW,EAAC,IAAI,CAAC,CAAC;QAClB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAQ,CAAW,CAAC,OAAO,CAAC;IAC9B,CAAC;AACH,CAAC;AAED,SAAgB,eAAe,CAAC,GAAW,EAAE,KAAkB,uBAAe;IAC5E,MAAM,MAAM,GAAG,IAAA,gBAAI,EAAC,GAAG,EAAE,SAAS,EAAE,aAAa,CAAC,CAAC;IACnD,IAAI,CAAC;QACH,IAAI,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC;YAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;QAClD,MAAM,OAAO,GAAG,SAAS,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;QACtD,EAAE,CAAC,MAAM,CAAC,IAAA,gBAAI,EAAC,GAAG,EAAE,SAAS,CAAC,CAAC,CAAC;QAChC,EAAE,CAAC,SAAS,CAAC,MAAM,EAAE,IAAA,oBAAY,EAAC,OAAO,EAAE,EAAE,GAAG,uBAAe,EAAE,CAAC,CAAC,CAAC;QACpE,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC;IACjC,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,IAAK,CAA2B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;QAC/E,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAG,CAAW,CAAC,OAAO,EAAE,CAAC;IAC1D,CAAC;AACH,CAAC"}

package/dist/repo-origin.d.ts

@@ -0,0 +1,15 @@
+import type { GitExec } from './git-driver';
+/**
+ * Where this checkout came from, as the server spells it — or `null`.
+ *
+ * Asked through the CLI's own git exec (`nodeGitExec`): absolute git binary,
+ * hooks off, the `GIT_` namespace rebuilt, and refused outright on a
+ * repository whose config names a filter. Reading a remote is still running
+ * git in somebody's tree.
+ *
+ * ⚠️ NULL ON ANY FAILURE, AND NULL IS ORDINARY. No `origin`, a local-path
+ * remote, a refused repository: all of them mean "send no URL", never "do not
+ * register" — the URL is a convenience for matching, not an identity.
+ */
+export declare function readOriginUrl(exec: GitExec): Promise<string | null>;
+//# sourceMappingURL=repo-origin.d.ts.map

package/dist/repo-origin.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"repo-origin.d.ts","sourceRoot":"","sources":["../src/repo-origin.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAG5C;;;;;;;;;;;GAWG;AACH,wBAAsB,aAAa,CAAC,IAAI,EAAE,OAAO,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAQzE"}

package/dist/repo-origin.js

@@ -0,0 +1,28 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.readOriginUrl = readOriginUrl;
+const core_1 = require("@looply/core");
+/**
+ * Where this checkout came from, as the server spells it — or `null`.
+ *
+ * Asked through the CLI's own git exec (`nodeGitExec`): absolute git binary,
+ * hooks off, the `GIT_` namespace rebuilt, and refused outright on a
+ * repository whose config names a filter. Reading a remote is still running
+ * git in somebody's tree.
+ *
+ * ⚠️ NULL ON ANY FAILURE, AND NULL IS ORDINARY. No `origin`, a local-path
+ * remote, a refused repository: all of them mean "send no URL", never "do not
+ * register" — the URL is a convenience for matching, not an identity.
+ */
+async function readOriginUrl(exec) {
+    try {
+        const r = await exec(['remote', 'get-url', 'origin']);
+        if (r.code !== 0)
+            return null;
+        return (0, core_1.normaliseRepoUrl)(r.stdout.trim().split(/\r?\n/)[0] ?? '');
+    }
+    catch {
+        return null;
+    }
+}
+//# sourceMappingURL=repo-origin.js.map

package/dist/repo-origin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"repo-origin.js","sourceRoot":"","sources":["../src/repo-origin.ts"],"names":[],"mappings":";;AAeA,sCAQC;AAtBD,uCAAgD;AAEhD;;;;;;;;;;;GAWG;AACI,KAAK,UAAU,aAAa,CAAC,IAAa;IAC/C,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,CAAC,QAAQ,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC,CAAC;QACtD,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QAC9B,OAAO,IAAA,uBAAgB,EAAC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IACnE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC"}

package/dist/repo-requests.d.ts

@@ -0,0 +1,79 @@
+import type { ProvisionRow } from './connect';
+import type { RepoRequest } from './server-client';
+import type { Platform } from './serve';
+/**
+ * CLONE WHAT SOMEBODY ASKED THIS MACHINE FOR.
+ *
+ * A person in AutoRyn (or the app) names a repository by URL and a machine to
+ * hold it; the server keeps that as a request until the machine answers. The
+ * supervisor asks once a minute, and for each one: clones it under the clone
+ * root, sets it up and serves it exactly as `connect` would, and says how it
+ * went — `cloned` with the path, or `failed` with a short reason.
+ *
+ * ⚠️ ONE CLONE AT A TIME, AND NEVER THE SAME REQUEST TWICE AT ONCE. A clone is
+ * the one slow, bandwidth-heavy thing the supervisor does; two at once would
+ * be two half-finished folders when the network drops. The supervisor never
+ * overlaps two runs of this worker, and `inFlight` holds the line inside one.
+ *
+ * ⚠️ IDEMPOTENT BY LOOKING, NOT BY REMEMBERING. If the answer to the server
+ * is lost, the request is still `requested` next minute; the folder is then
+ * already a clone of that URL, which is read as "cloned" and answered again.
+ * Nothing on disk records what was asked.
+ *
+ * 🔴 NO CREDENTIALS LEAVE THIS FILE. The URL cloned is the normalised one —
+ * userinfo stripped — and a failure is reported as git's first line of
+ * complaint with any `user:secret@` cut out, never the whole stderr.
+ *
+ * ⚠️ AN OLDER SERVER IS NOT A FAULT. A 404 on the route means the feature is
+ * not there yet: said once, and asked again quietly every minute in case the
+ * server is upgraded under a running supervisor.
+ */
+export declare const REPO_REQUEST_POLL_MS = 60000;
+/** `<name>`, `<name>-2` … `<name>-50`, then give up rather than walk for ever. */
+export declare const MAX_NAME_SUFFIX = 50;
+export interface RepoRequestDeps {
+    readonly platform: Platform;
+    /** `null` when this machine is not paired — nothing to ask with. */
+    list(): Promise<readonly RepoRequest[] | null>;
+    report(id: string, result: {
+        state: 'cloned' | 'failed';
+        error?: string;
+        path?: string;
+    }): Promise<void>;
+    cloneRoot(): string;
+    exists(path: string): boolean;
+    mkdirp(path: string): void;
+    /** The raw `origin` URL of a checkout, or null when it is not one (or has none). */
+    originOf(dir: string): Promise<string | null>;
+    clone(url: string, target: string): Promise<{
+        ok: true;
+    } | {
+        ok: false;
+        error: string;
+    }>;
+    /** `init` (if needed) + `serve add`, as `connect` does it. */
+    provision(dir: string): ProvisionRow;
+    log(line: string): void;
+}
+export declare class RepoRequestWorker {
+    private readonly deps;
+    private readonly inFlight;
+    private unavailableSaid;
+    private lastComplaint;
+    private unpairedSaid;
+    constructor(deps: RepoRequestDeps);
+    run(): Promise<void>;
+    private handle;
+    private cloneOne;
+}
+/**
+ * A folder name from what the server called the repository, or from the URL.
+ *
+ * 🔴 THE NAME IS INPUT, NOT A PATH. `..\..\Startup` must not become one — so
+ * separators, drive colons and the characters Windows refuses are replaced,
+ * and leading dots trimmed.
+ */
+export declare function folderNameFor(name: string, url: string): string;
+/** First line, credentials cut out, at most 200 characters. */
+export declare function shortError(text: string): string;
+//# sourceMappingURL=repo-requests.d.ts.map

package/dist/repo-requests.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"repo-requests.d.ts","sourceRoot":"","sources":["../src/repo-requests.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AAE9C,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AACnD,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAExC;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAEH,eAAO,MAAM,oBAAoB,QAAS,CAAC;AAC3C,kFAAkF;AAClF,eAAO,MAAM,eAAe,KAAK,CAAC;AAElC,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC;IAC5B,oEAAoE;IACpE,IAAI,IAAI,OAAO,CAAC,SAAS,WAAW,EAAE,GAAG,IAAI,CAAC,CAAC;IAC/C,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE;QAAE,KAAK,EAAE,QAAQ,GAAG,QAAQ,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACzG,SAAS,IAAI,MAAM,CAAC;IACpB,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;IAC9B,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,oFAAoF;IACpF,QAAQ,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IAC9C,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,EAAE,EAAE,IAAI,CAAA;KAAE,GAAG;QAAE,EAAE,EAAE,KAAK,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACzF,8DAA8D;IAC9D,SAAS,CAAC,GAAG,EAAE,MAAM,GAAG,YAAY,CAAC;IACrC,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;CACzB;AAMD,qBAAa,iBAAiB;IAMhB,OAAO,CAAC,QAAQ,CAAC,IAAI;IALjC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAqB;IAC9C,OAAO,CAAC,eAAe,CAAS;IAChC,OAAO,CAAC,aAAa,CAAuB;IAC5C,OAAO,CAAC,YAAY,CAAS;gBAEA,IAAI,EAAE,eAAe;IAE5C,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC;YAsCZ,MAAM;YAkBN,QAAQ;CAwCvB;AAID;;;;;;GAMG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,CAU/D;AAED,+DAA+D;AAC/D,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAO/C"}

package/dist/repo-requests.js

@@ -0,0 +1,180 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.RepoRequestWorker = exports.MAX_NAME_SUFFIX = exports.REPO_REQUEST_POLL_MS = void 0;
+exports.folderNameFor = folderNameFor;
+exports.shortError = shortError;
+const node_path_1 = require("node:path");
+const core_1 = require("@looply/core");
+/**
+ * CLONE WHAT SOMEBODY ASKED THIS MACHINE FOR.
+ *
+ * A person in AutoRyn (or the app) names a repository by URL and a machine to
+ * hold it; the server keeps that as a request until the machine answers. The
+ * supervisor asks once a minute, and for each one: clones it under the clone
+ * root, sets it up and serves it exactly as `connect` would, and says how it
+ * went — `cloned` with the path, or `failed` with a short reason.
+ *
+ * ⚠️ ONE CLONE AT A TIME, AND NEVER THE SAME REQUEST TWICE AT ONCE. A clone is
+ * the one slow, bandwidth-heavy thing the supervisor does; two at once would
+ * be two half-finished folders when the network drops. The supervisor never
+ * overlaps two runs of this worker, and `inFlight` holds the line inside one.
+ *
+ * ⚠️ IDEMPOTENT BY LOOKING, NOT BY REMEMBERING. If the answer to the server
+ * is lost, the request is still `requested` next minute; the folder is then
+ * already a clone of that URL, which is read as "cloned" and answered again.
+ * Nothing on disk records what was asked.
+ *
+ * 🔴 NO CREDENTIALS LEAVE THIS FILE. The URL cloned is the normalised one —
+ * userinfo stripped — and a failure is reported as git's first line of
+ * complaint with any `user:secret@` cut out, never the whole stderr.
+ *
+ * ⚠️ AN OLDER SERVER IS NOT A FAULT. A 404 on the route means the feature is
+ * not there yet: said once, and asked again quietly every minute in case the
+ * server is upgraded under a running supervisor.
+ */
+exports.REPO_REQUEST_POLL_MS = 60_000;
+/** `<name>`, `<name>-2` … `<name>-50`, then give up rather than walk for ever. */
+exports.MAX_NAME_SUFFIX = 50;
+/** The parts of a `ServerError` this worker reads, without importing the class into tests. */
+const statusOf = (e) => typeof e?.status === 'number' ? e.status : null;
+class RepoRequestWorker {
+    deps;
+    inFlight = new Set();
+    unavailableSaid = false;
+    lastComplaint = null;
+    unpairedSaid = false;
+    constructor(deps) {
+        this.deps = deps;
+    }
+    async run() {
+        let requests;
+        try {
+            requests = await this.deps.list();
+        }
+        catch (e) {
+            if (statusOf(e) === 404) {
+                if (!this.unavailableSaid) {
+                    this.deps.log('[serve] clone requests: this server does not offer them yet; still serving, asking again later');
+                }
+                this.unavailableSaid = true;
+                return;
+            }
+            const msg = `[serve] clone requests: could not ask the server — ${e.message}`;
+            // Said once per distinct reason: offline for an hour is one line, not sixty.
+            if (msg !== this.lastComplaint)
+                this.deps.log(msg);
+            this.lastComplaint = msg;
+            return;
+        }
+        if (requests === null) {
+            if (!this.unpairedSaid)
+                this.deps.log('[serve] clone requests: this machine is not paired; none are asked for');
+            this.unpairedSaid = true;
+            return;
+        }
+        this.unavailableSaid = false;
+        this.lastComplaint = null;
+        this.unpairedSaid = false;
+        for (const req of requests) {
+            if (req.state !== 'requested' || this.inFlight.has(req.id))
+                continue;
+            this.inFlight.add(req.id);
+            try {
+                await this.handle(req);
+            }
+            finally {
+                this.inFlight.delete(req.id);
+            }
+        }
+    }
+    async handle(req) {
+        let outcome;
+        try {
+            outcome = await this.cloneOne(req);
+        }
+        catch (e) {
+            outcome = { state: 'failed', error: shortError(e.message) };
+        }
+        if (outcome.state === 'cloned')
+            this.deps.log(`[serve] clone ${req.id}: ready at ${outcome.path}`);
+        else
+            this.deps.log(`[serve] clone ${req.id}: failed — ${outcome.error}`);
+        try {
+            await this.deps.report(req.id, outcome);
+        }
+        catch (e) {
+            // The request stays `requested`; next minute the folder is found already
+            // cloned and this answer is sent again.
+            this.deps.log(`[serve] clone ${req.id}: could not tell the server (${e.message}); will retry`);
+        }
+    }
+    async cloneOne(req) {
+        const url = (0, core_1.normaliseRepoUrl)(req.url);
+        if (url === null)
+            return { state: 'failed', error: 'not an http(s) repository address' };
+        const p = pathFor(this.deps.platform);
+        const root = this.deps.cloneRoot();
+        const name = folderNameFor(req.name, url);
+        this.deps.mkdirp(root);
+        let target = null;
+        for (let n = 1; n <= exports.MAX_NAME_SUFFIX && target === null; n += 1) {
+            const candidate = p.join(root, n === 1 ? name : `${name}-${n}`);
+            if (!this.deps.exists(candidate)) {
+                this.deps.log(`[serve] clone ${req.id}: cloning ${url} into ${candidate}`);
+                const cloned = await this.deps.clone(url, candidate);
+                if (!cloned.ok)
+                    return { state: 'failed', error: shortError(cloned.error) };
+                target = candidate;
+                break;
+            }
+            // Already there: the same repository (a lost answer, or a person who
+            // cloned it by hand) is the clone; anything else is in the way.
+            const origin = await this.deps.originOf(candidate);
+            if (origin !== null && (0, core_1.normaliseRepoUrl)(origin) === url)
+                target = candidate;
+        }
+        if (target === null) {
+            return { state: 'failed', error: `${p.join(root, name)} and ${exports.MAX_NAME_SUFFIX - 1} numbered alternatives are taken` };
+        }
+        const row = this.deps.provision(target);
+        if (row.init === 'failed') {
+            return { state: 'failed', error: shortError(`cloned, but could not set it up: ${row.reason ?? 'unknown'}`), path: target };
+        }
+        // ⚠️ A DRAFT THAT NEEDS A PERSON IS STILL A CLONE. A repository with no
+        // detected gate gets a config the daemon refuses until somebody adds one;
+        // the clone itself succeeded, and saying `failed` would send them looking
+        // in the wrong place.
+        if (row.served === 'not')
+            this.deps.log(`[serve] clone ${req.id}: not served yet — ${row.reason ?? 'unknown'}`);
+        return { state: 'cloned', path: target };
+    }
+}
+exports.RepoRequestWorker = RepoRequestWorker;
+const pathFor = (platform) => (platform === 'win32' ? node_path_1.win32 : node_path_1.posix);
+/**
+ * A folder name from what the server called the repository, or from the URL.
+ *
+ * 🔴 THE NAME IS INPUT, NOT A PATH. `..\..\Startup` must not become one — so
+ * separators, drive colons and the characters Windows refuses are replaced,
+ * and leading dots trimmed.
+ */
+function folderNameFor(name, url) {
+    const clean = (s) => s
+        .replace(/[\\/:*?"<>|\u0000-\u001f]/g, '-')
+        .replace(/^[.\s-]+|[.\s]+$/g, '')
+        .slice(0, 100);
+    const fromName = clean(name ?? '');
+    if (fromName !== '')
+        return fromName;
+    const last = url.split('/').filter(Boolean).pop() ?? '';
+    return clean(last) || 'repository';
+}
+/** First line, credentials cut out, at most 200 characters. */
+function shortError(text) {
+    const line = text
+        .split(/\r?\n/)
+        .map((l) => l.trim())
+        .find((l) => l !== '') ?? 'unknown error';
+    return line.replace(/([a-z][a-z0-9+.-]*:\/\/)[^/\s@]*@/gi, '$1').slice(0, 200);
+}
+//# sourceMappingURL=repo-requests.js.map

package/dist/repo-requests.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"repo-requests.js","sourceRoot":"","sources":["../src/repo-requests.ts"],"names":[],"mappings":";;;AA6KA,sCAUC;AAGD,gCAOC;AAjMD,yCAAyC;AAEzC,uCAAgD;AAIhD;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAEU,QAAA,oBAAoB,GAAG,MAAM,CAAC;AAC3C,kFAAkF;AACrE,QAAA,eAAe,GAAG,EAAE,CAAC;AAkBlC,8FAA8F;AAC9F,MAAM,QAAQ,GAAG,CAAC,CAAU,EAAiB,EAAE,CAC7C,OAAQ,CAA0B,EAAE,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAE,CAAwB,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;AAEpG,MAAa,iBAAiB;IAMC;IALZ,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAC;IACtC,eAAe,GAAG,KAAK,CAAC;IACxB,aAAa,GAAkB,IAAI,CAAC;IACpC,YAAY,GAAG,KAAK,CAAC;IAE7B,YAA6B,IAAqB;QAArB,SAAI,GAAJ,IAAI,CAAiB;IAAG,CAAC;IAEtD,KAAK,CAAC,GAAG;QACP,IAAI,QAAuC,CAAC;QAC5C,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QACpC,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,IAAI,QAAQ,CAAC,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;gBACxB,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC;oBAC1B,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,gGAAgG,CAAC,CAAC;gBAClH,CAAC;gBACD,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC;gBAC5B,OAAO;YACT,CAAC;YACD,MAAM,GAAG,GAAG,sDAAuD,CAAW,CAAC,OAAO,EAAE,CAAC;YACzF,6EAA6E;YAC7E,IAAI,GAAG,KAAK,IAAI,CAAC,aAAa;gBAAE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACnD,IAAI,CAAC,aAAa,GAAG,GAAG,CAAC;YACzB,OAAO;QACT,CAAC;QACD,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;YACtB,IAAI,CAAC,IAAI,CAAC,YAAY;gBAAE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,wEAAwE,CAAC,CAAC;YAChH,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC;YACzB,OAAO;QACT,CAAC;QACD,IAAI,CAAC,eAAe,GAAG,KAAK,CAAC;QAC7B,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC;QAC1B,IAAI,CAAC,YAAY,GAAG,KAAK,CAAC;QAE1B,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;YAC3B,IAAI,GAAG,CAAC,KAAK,KAAK,WAAW,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;gBAAE,SAAS;YACrE,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAC1B,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACzB,CAAC;oBAAS,CAAC;gBACT,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAC/B,CAAC;QACH,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,MAAM,CAAC,GAAgB;QACnC,IAAI,OAA8F,CAAC;QACnG,IAAI,CAAC;YACH,OAAO,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QACrC,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,OAAO,GAAG,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,UAAU,CAAE,CAAW,CAAC,OAAO,CAAC,EAAE,CAAC;QACzE,CAAC;QACD,IAAI,OAAO,CAAC,KAAK,KAAK,QAAQ;YAAE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,iBAAiB,GAAG,CAAC,EAAE,cAAc,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;;YAC9F,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,iBAAiB,GAAG,CAAC,EAAE,cAAc,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC;QACzE,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;QAC1C,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,yEAAyE;YACzE,wCAAwC;YACxC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,iBAAiB,GAAG,CAAC,EAAE,gCAAiC,CAAW,CAAC,OAAO,eAAe,CAAC,CAAC;QAC5G,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,QAAQ,CACpB,GAAgB;QAEhB,MAAM,GAAG,GAAG,IAAA,uBAAgB,EAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACtC,IAAI,GAAG,KAAK,IAAI;YAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,mCAAmC,EAAE,CAAC;QACzF,MAAM,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACtC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;QACnC,MAAM,IAAI,GAAG,aAAa,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QAC1C,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAEvB,IAAI,MAAM,GAAkB,IAAI,CAAC;QACjC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,uBAAe,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;YAChE,MAAM,SAAS,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,IAAI,CAAC,EAAE,CAAC,CAAC;YAChE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC;gBACjC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,iBAAiB,GAAG,CAAC,EAAE,aAAa,GAAG,SAAS,SAAS,EAAE,CAAC,CAAC;gBAC3E,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;gBACrD,IAAI,CAAC,MAAM,CAAC,EAAE;oBAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC5E,MAAM,GAAG,SAAS,CAAC;gBACnB,MAAM;YACR,CAAC;YACD,qEAAqE;YACrE,gEAAgE;YAChE,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;YACnD,IAAI,MAAM,KAAK,IAAI,IAAI,IAAA,uBAAgB,EAAC,MAAM,CAAC,KAAK,GAAG;gBAAE,MAAM,GAAG,SAAS,CAAC;QAC9E,CAAC;QACD,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;YACpB,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,QAAQ,uBAAe,GAAG,CAAC,kCAAkC,EAAE,CAAC;QACxH,CAAC;QAED,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QACxC,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC1B,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,UAAU,CAAC,oCAAoC,GAAG,CAAC,MAAM,IAAI,SAAS,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;QAC7H,CAAC;QACD,wEAAwE;QACxE,0EAA0E;QAC1E,0EAA0E;QAC1E,sBAAsB;QACtB,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK;YAAE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,iBAAiB,GAAG,CAAC,EAAE,sBAAsB,GAAG,CAAC,MAAM,IAAI,SAAS,EAAE,CAAC,CAAC;QAChH,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IAC3C,CAAC;CACF;AAxGD,8CAwGC;AAED,MAAM,OAAO,GAAG,CAAC,QAAkB,EAAgB,EAAE,CAAC,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,iBAAK,CAAC,CAAC,CAAC,iBAAK,CAAC,CAAC;AAE7F;;;;;;GAMG;AACH,SAAgB,aAAa,CAAC,IAAY,EAAE,GAAW;IACrD,MAAM,KAAK,GAAG,CAAC,CAAS,EAAU,EAAE,CAClC,CAAC;SACE,OAAO,CAAC,4BAA4B,EAAE,GAAG,CAAC;SAC1C,OAAO,CAAC,mBAAmB,EAAE,EAAE,CAAC;SAChC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IACnB,MAAM,QAAQ,GAAG,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IACnC,IAAI,QAAQ,KAAK,EAAE;QAAE,OAAO,QAAQ,CAAC;IACrC,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC;IACxD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,YAAY,CAAC;AACrC,CAAC;AAED,+DAA+D;AAC/D,SAAgB,UAAU,CAAC,IAAY;IACrC,MAAM,IAAI,GACR,IAAI;SACD,KAAK,CAAC,OAAO,CAAC;SACd,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;SACpB,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,IAAI,eAAe,CAAC;IAC9C,OAAO,IAAI,CAAC,OAAO,CAAC,qCAAqC,EAAE,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;AACjF,CAAC"}

package/dist/repo-scan.d.ts

@@ -0,0 +1,47 @@
+/**
+ * Find the git repositories under a folder a person said holds their code.
+ *
+ * ⚠️ BOUNDED THREE WAYS, because the folder is whatever they typed and that is
+ * sometimes their whole home directory:
+ *
+ *   depth      three levels below the root, no further — `~/code/client/app`
+ *              is found, `~/code/a/b/c/d` is not;
+ *   pruning    `node_modules`, `dist`, `build`, `.next`, `vendor` and every
+ *              hidden folder are never entered: they are where the walk would
+ *              spend its time and they hold nobody's project;
+ *   a cap      two hundred repositories, and the caller says it stopped.
+ *
+ * 🔴 A REPOSITORY IS A LEAF. Once a folder has `.git` (a directory, or the
+ * file a linked worktree or submodule has) the walk does not go inside it: a
+ * vendored checkout or a submodule is part of the project around it, not a
+ * second project to serve.
+ *
+ * Symlinks are not followed — a link back up the tree is a walk that never ends.
+ */
+export declare const SCAN_MAX_DEPTH = 3;
+export declare const SCAN_MAX_REPOS = 200;
+export declare const SCAN_SKIP: Set<string>;
+export interface ScanEntry {
+    readonly name: string;
+    /** A real directory — not a symlink to one. */
+    readonly dir: boolean;
+}
+export interface ScanFs {
+    /** The entries of a folder, or `null` when it cannot be read. */
+    entries(dir: string): readonly ScanEntry[] | null;
+}
+export declare const nodeScanFs: ScanFs;
+export interface ScanResult {
+    /** Repository roots, in walk order (sorted by name at each level). */
+    readonly repos: readonly string[];
+    /** True when the cap was reached and the walk stopped early. */
+    readonly capped: boolean;
+    /** Folders that could not be listed — said, not silently skipped. */
+    readonly unreadable: readonly string[];
+}
+export declare function scanForRepos(roots: readonly string[], fs: ScanFs, opts?: {
+    maxDepth?: number;
+    cap?: number;
+    join?: (a: string, b: string) => string;
+}): ScanResult;
+//# sourceMappingURL=repo-scan.d.ts.map

package/dist/repo-scan.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"repo-scan.d.ts","sourceRoot":"","sources":["../src/repo-scan.ts"],"names":[],"mappings":"AAGA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,eAAO,MAAM,cAAc,IAAI,CAAC;AAChC,eAAO,MAAM,cAAc,MAAM,CAAC;AAClC,eAAO,MAAM,SAAS,aAAgE,CAAC;AAEvF,MAAM,WAAW,SAAS;IACxB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,+CAA+C;IAC/C,QAAQ,CAAC,GAAG,EAAE,OAAO,CAAC;CACvB;AAED,MAAM,WAAW,MAAM;IACrB,iEAAiE;IACjE,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,SAAS,EAAE,GAAG,IAAI,CAAC;CACnD;AAED,eAAO,MAAM,UAAU,EAAE,MAQxB,CAAC;AAEF,MAAM,WAAW,UAAU;IACzB,sEAAsE;IACtE,QAAQ,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAC;IAClC,gEAAgE;IAChE,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IACzB,qEAAqE;IACrE,QAAQ,CAAC,UAAU,EAAE,SAAS,MAAM,EAAE,CAAC;CACxC;AAED,wBAAgB,YAAY,CAC1B,KAAK,EAAE,SAAS,MAAM,EAAE,EACxB,EAAE,EAAE,MAAM,EACV,IAAI,GAAE;IAAE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,KAAK,MAAM,CAAA;CAAO,GACtF,UAAU,CAwCZ"}

package/dist/repo-scan.js

@@ -0,0 +1,84 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.nodeScanFs = exports.SCAN_SKIP = exports.SCAN_MAX_REPOS = exports.SCAN_MAX_DEPTH = void 0;
+exports.scanForRepos = scanForRepos;
+const node_fs_1 = require("node:fs");
+const node_path_1 = require("node:path");
+/**
+ * Find the git repositories under a folder a person said holds their code.
+ *
+ * ⚠️ BOUNDED THREE WAYS, because the folder is whatever they typed and that is
+ * sometimes their whole home directory:
+ *
+ *   depth      three levels below the root, no further — `~/code/client/app`
+ *              is found, `~/code/a/b/c/d` is not;
+ *   pruning    `node_modules`, `dist`, `build`, `.next`, `vendor` and every
+ *              hidden folder are never entered: they are where the walk would
+ *              spend its time and they hold nobody's project;
+ *   a cap      two hundred repositories, and the caller says it stopped.
+ *
+ * 🔴 A REPOSITORY IS A LEAF. Once a folder has `.git` (a directory, or the
+ * file a linked worktree or submodule has) the walk does not go inside it: a
+ * vendored checkout or a submodule is part of the project around it, not a
+ * second project to serve.
+ *
+ * Symlinks are not followed — a link back up the tree is a walk that never ends.
+ */
+exports.SCAN_MAX_DEPTH = 3;
+exports.SCAN_MAX_REPOS = 200;
+exports.SCAN_SKIP = new Set(['node_modules', 'dist', 'build', '.next', 'vendor']);
+exports.nodeScanFs = {
+    entries: (dir) => {
+        try {
+            return (0, node_fs_1.readdirSync)(dir, { withFileTypes: true }).map((d) => ({ name: d.name, dir: d.isDirectory() }));
+        }
+        catch {
+            return null;
+        }
+    },
+};
+function scanForRepos(roots, fs, opts = {}) {
+    const maxDepth = opts.maxDepth ?? exports.SCAN_MAX_DEPTH;
+    const cap = opts.cap ?? exports.SCAN_MAX_REPOS;
+    const joinPath = opts.join ?? node_path_1.join;
+    const repos = [];
+    const unreadable = [];
+    const seen = new Set();
+    let capped = false;
+    const walk = (dir, depth) => {
+        if (capped)
+            return;
+        const entries = fs.entries(dir);
+        if (entries === null) {
+            unreadable.push(dir);
+            return;
+        }
+        // `.git` as a folder OR a file: a linked worktree's is a file.
+        if (entries.some((e) => e.name === '.git')) {
+            if (seen.has(dir))
+                return;
+            if (repos.length >= cap) {
+                capped = true;
+                return;
+            }
+            seen.add(dir);
+            repos.push(dir);
+            return;
+        }
+        if (depth >= maxDepth)
+            return;
+        const children = entries
+            .filter((e) => e.dir && !e.name.startsWith('.') && !exports.SCAN_SKIP.has(e.name.toLowerCase()))
+            .map((e) => e.name)
+            .sort((a, b) => a.localeCompare(b));
+        for (const name of children) {
+            if (capped)
+                return;
+            walk(joinPath(dir, name), depth + 1);
+        }
+    };
+    for (const root of roots)
+        walk(root, 0);
+    return { repos, capped, unreadable };
+}
+//# sourceMappingURL=repo-scan.js.map

package/dist/repo-scan.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"repo-scan.js","sourceRoot":"","sources":["../src/repo-scan.ts"],"names":[],"mappings":";;;AA0DA,oCA4CC;AAtGD,qCAAsC;AACtC,yCAAiC;AAEjC;;;;;;;;;;;;;;;;;;;GAmBG;AAEU,QAAA,cAAc,GAAG,CAAC,CAAC;AACnB,QAAA,cAAc,GAAG,GAAG,CAAC;AACrB,QAAA,SAAS,GAAG,IAAI,GAAG,CAAC,CAAC,cAAc,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC;AAa1E,QAAA,UAAU,GAAW;IAChC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;QACf,IAAI,CAAC;YACH,OAAO,IAAA,qBAAW,EAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,CAAC;QACxG,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;CACF,CAAC;AAWF,SAAgB,YAAY,CAC1B,KAAwB,EACxB,EAAU,EACV,OAAqF,EAAE;IAEvF,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,sBAAc,CAAC;IACjD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,sBAAc,CAAC;IACvC,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,IAAI,gBAAI,CAAC;IACnC,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,UAAU,GAAa,EAAE,CAAC;IAChC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,IAAI,MAAM,GAAG,KAAK,CAAC;IAEnB,MAAM,IAAI,GAAG,CAAC,GAAW,EAAE,KAAa,EAAQ,EAAE;QAChD,IAAI,MAAM;YAAE,OAAO;QACnB,MAAM,OAAO,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAChC,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;YACrB,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACrB,OAAO;QACT,CAAC;QACD,+DAA+D;QAC/D,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,EAAE,CAAC;YAC3C,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;gBAAE,OAAO;YAC1B,IAAI,KAAK,CAAC,MAAM,IAAI,GAAG,EAAE,CAAC;gBACxB,MAAM,GAAG,IAAI,CAAC;gBACd,OAAO;YACT,CAAC;YACD,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACd,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAChB,OAAO;QACT,CAAC;QACD,IAAI,KAAK,IAAI,QAAQ;YAAE,OAAO;QAC9B,MAAM,QAAQ,GAAG,OAAO;aACrB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,iBAAS,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;aACvF,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;aAClB,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC;QACtC,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;YAC5B,IAAI,MAAM;gBAAE,OAAO;YACnB,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;QACvC,CAAC;IACH,CAAC,CAAC;IAEF,KAAK,MAAM,IAAI,IAAI,KAAK;QAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IACxC,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;AACvC,CAAC"}

package/dist/run-cmd.d.ts

@@ -5,6 +5,7 @@ import { type AnyEventInput } from './ledger-store';
 import { type RepairContext, type RunSummary } from './round-runner';
 import type { AnsweredQuestionView, PartialQuestionBody } from '@looply/core';
 import { type ApprovalResolutionContext } from './approval-resolution';
+import { type RepositorySpan } from '@looply/core';
 import { type GovernedActionResultContext } from './governed-run';
 /**
  * The composition root for `looply run`.
@@ -323,7 +324,21 @@ repair?: RepairContext,
  * trim here would be a second place the budget lives — the same reason
  * `memory` is neither ranked nor trimmed by this function.
  */
-goal?: string | null): string;
+goal?: string | null, 
+/**
+ * 🔴 WHICH PART OF A MULTI-REPOSITORY CHANGE THIS REPOSITORY IS.
+ *
+ * The goal's words are the same in every repository the change spans — an
+ * external system sets one goal per repository with one outcome text — so
+ * without this a round reads "add delivery tips" as the whole job, and an app
+ * round invents the backend route it was meant to call. The span names this
+ * repository's part, the others' labels, and where each can be READ.
+ *
+ * Rendered by core's `renderRepositorySpan`, the same lines the planner's
+ * packet carries, so the round and the plan are told one thing. Absent for a
+ * goal naming no sibling: the prompt is then byte for byte what it was.
+ */
+span?: RepositorySpan): string;
 /**
  * A way to re-read the goal mirror from the server, if this machine has one.
  *