okf-catalog 0.1.0

package/dist/source/git.js

@@ -0,0 +1,457 @@
+import { existsSync, lstatSync, mkdirSync, readdirSync, readFileSync, renameSync, rmSync, writeFileSync, } from "node:fs";
+import { dirname, join } from "node:path";
+import { createBatchReader } from "../bundle/cat-file.js";
+import { parseLsTree, validateTree } from "../bundle/git-tree.js";
+import { walkBundle } from "../fs/walk.js";
+import { GitError, redactCredentials } from "./git-runner.js";
+/** An error whose message names the source as configured; the detail (git's words) is for the log. */
+export class SourceError extends Error {
+    detail;
+    constructor(message, detail) {
+        super(message);
+        this.name = "SourceError";
+        if (detail !== undefined)
+            this.detail = detail;
+    }
+}
+const REPO = "repo.git";
+const STATE = "state.json";
+const TREE_NAME = /^tree-[0-9a-f]{40,64}$/;
+const COMMIT = /^[0-9a-f]{40,64}$/;
+const BATCH_MODE = "core.sshCommand=ssh -o BatchMode=yes";
+/** Git's own words for a lock file left behind by a killed process; nothing else triggers a fresh clone. */
+export const isStaleLockMessage = (stderr) => /Unable to create '[^']*\.lock': File exists/.test(stderr);
+/**
+ * The ssh setting a transport command carries: BatchMode, so a passphrase prompt cannot hang a stdio server,
+ * unless the person's own `GIT_SSH_COMMAND`, `GIT_SSH` or configured `core.sshCommand` is in charge.
+ */
+export function sshBatchSetting(env, configured) {
+    if (env.GIT_SSH_COMMAND !== undefined || env.GIT_SSH !== undefined)
+        return [];
+    if (configured !== undefined && configured.length > 0)
+        return [];
+    return [BATCH_MODE];
+}
+const TIMEOUT_MS = {
+    clone: 300_000,
+    fetch: 300_000,
+    lsRemote: 30_000,
+    list: 300_000,
+    extract: 300_000,
+};
+const emptyWalk = (fatal) => ({
+    files: [],
+    hidden: [],
+    hiddenFolders: [],
+    refusals: [],
+    fatal,
+});
+/**
+ * A published branch as the server's own derived copy (D47): a bare shallow clone for transport, each fetched commit
+ * listed and validated before anything is written, then extracted blob by blob into a fresh folder named by the
+ * commit, which the walker reads. Git never writes a working tree here, so no attribute, filter, hook or
+ * line-ending rule can touch the bytes.
+ */
+export function createGitSource(options) {
+    const { repository, branch, bundlePath, workDir, caps, runner, clock, log } = options;
+    const repoDir = join(workDir, REPO);
+    const statePath = join(workDir, STATE);
+    const described = redactCredentials(repository);
+    let firstLoad = true;
+    let fromDisk = false;
+    /**
+     * The commit last refused or served, what `changed()` compares with: kept in memory only and seeded from the
+     * served commit, so a restart tries a commit again that an older configuration refused (bite 5 review BR2).
+     */
+    let attempted;
+    let attemptedSeeded = false;
+    const seedAttempted = (state) => {
+        if (attemptedSeeded)
+            return;
+        attemptedSeeded = true;
+        attempted = state?.served;
+    };
+    /** A file-system failure as the model may see it: a fixed sentence; the path travels as detail for the log. */
+    const fsFailure = (verb, error) => new SourceError(`the source folder under the cache could not be ${verb}; the log has the detail`, error.message);
+    const treeDir = (commit) => join(workDir, `tree-${commit}`);
+    function readState() {
+        try {
+            const parsed = JSON.parse(readFileSync(statePath, "utf8"));
+            if (typeof parsed.repository !== "string" || typeof parsed.branch !== "string")
+                return undefined;
+            // A commit field that is not a hash is dropped: a name could point outside the work folder.
+            const hex = (value) => typeof value === "string" && COMMIT.test(value) ? value : undefined;
+            const state = { repository: parsed.repository, branch: parsed.branch };
+            const extracted = hex(parsed.extracted);
+            const served = hex(parsed.served);
+            if (extracted !== undefined)
+                state.extracted = extracted;
+            if (served !== undefined)
+                state.served = served;
+            for (const key of ["fetchedAt", "extractedAt", "servedFetchedAt"]) {
+                const value = parsed[key];
+                if (typeof value === "string")
+                    state[key] = value;
+            }
+            return state;
+        }
+        catch {
+            // no state, or not ours to read
+        }
+        return undefined;
+    }
+    /** An extracted tree is a real folder of the work folder, never a link. */
+    function treeExists(commit) {
+        try {
+            const stat = lstatSync(treeDir(commit));
+            return stat.isDirectory() && !stat.isSymbolicLink();
+        }
+        catch {
+            return false;
+        }
+    }
+    const writeState = (state) => {
+        try {
+            const tmp = `${statePath}.${process.pid}.tmp`;
+            writeFileSync(tmp, `${JSON.stringify(state, null, 2)}\n`, { mode: 0o600 });
+            renameSync(tmp, statePath);
+        }
+        catch (error) {
+            throw fsFailure("written", error);
+        }
+    };
+    function ensureWorkDir() {
+        try {
+            mkdirSync(workDir, { recursive: true, mode: 0o700 });
+        }
+        catch (error) {
+            throw fsFailure("created", error);
+        }
+        if (lstatSync(workDir).isSymbolicLink())
+            throw new SourceError("the source folder under the cache is a symbolic link; remove it so the server can create its own");
+    }
+    /** Everything here is derived: when the repository or branch changed, start over. */
+    function resetWorkDir(reason) {
+        log?.warn("source.recloned", { reason });
+        for (const name of readdirSync(workDir))
+            rmSync(join(workDir, name), { recursive: true, force: true });
+    }
+    function recloneRepo(reason) {
+        log?.warn("source.recloned", { reason });
+        rmSync(repoDir, { recursive: true, force: true });
+    }
+    /** Whether git can still read the clone: its configuration must name the remote (a clone with it gone cannot be fetched into). */
+    async function cloneReadable() {
+        try {
+            const result = await runner.run(["config", "--get", "remote.origin.url"], {
+                cwd: workDir,
+                gitDir: repoDir,
+                timeoutMs: TIMEOUT_MS.lsRemote,
+            });
+            return result.stdout.toString("utf8").trim() === repository;
+        }
+        catch {
+            return false;
+        }
+    }
+    const failure = (verb, error) => {
+        const detail = error instanceof GitError
+            ? error.stderr || error.message
+            : redactCredentials(error.message);
+        return new SourceError(`the repository ${described} could not be ${verb}; the log has git's message`, detail);
+    };
+    const staleLock = (error) => error instanceof GitError && isStaleLockMessage(error.stderr);
+    /** The person's configured `core.sshCommand`, read where git would read it (includes count); nothing when unset. */
+    async function configuredSshCommand() {
+        try {
+            const result = await runner.run(["config", "--get", "core.sshCommand"], {
+                cwd: workDir,
+                ...(existsSync(join(repoDir, "HEAD")) ? { gitDir: repoDir } : {}),
+                timeoutMs: TIMEOUT_MS.lsRemote,
+            });
+            const value = result.stdout.toString("utf8").trim();
+            return value.length > 0 ? value : undefined;
+        }
+        catch {
+            return undefined;
+        }
+    }
+    let transportConfig = [];
+    const clone = () => runner.run([
+        "clone",
+        "--bare",
+        "--depth=1",
+        "--single-branch",
+        `--branch=${branch}`,
+        "--no-tags",
+        "--template=",
+        "--",
+        repository,
+        REPO,
+    ], { cwd: workDir, timeoutMs: TIMEOUT_MS.clone, extraConfig: transportConfig });
+    const fetch = () => runner.run(["fetch", "--depth=1", "--", "origin", `+refs/heads/${branch}:refs/remotes/origin/${branch}`], { cwd: workDir, gitDir: repoDir, timeoutMs: TIMEOUT_MS.fetch, extraConfig: transportConfig });
+    const resolveCommit = async () => {
+        const result = await runner.run(["rev-parse", "--verify", "--end-of-options", `refs/remotes/origin/${branch}^{commit}`], { cwd: workDir, gitDir: repoDir, timeoutMs: TIMEOUT_MS.lsRemote });
+        const commit = result.stdout.toString("utf8").trim();
+        if (!/^[0-9a-f]{40,64}$/.test(commit))
+            throw new SourceError(`the repository ${described} has no commit on branch ${branch}`);
+        return commit;
+    };
+    /** The tree listing, stopped one entry past the file cap. */
+    async function list(commit) {
+        const chunks = [];
+        let entries = 0;
+        const result = await runner.run(["ls-tree", "-r", "-t", "-l", "-z", "--full-tree", commit], {
+            cwd: workDir,
+            gitDir: repoDir,
+            timeoutMs: TIMEOUT_MS.list,
+            onStdout: (chunk) => {
+                chunks.push(chunk);
+                for (const byte of chunk)
+                    if (byte === 0)
+                        entries += 1;
+                return entries > caps.files ? "stop" : "continue";
+            },
+        });
+        if (result.stopped)
+            return {
+                refusal: {
+                    path: "",
+                    rule: "too-many-files",
+                    detail: `more than ${caps.files} tree entries`,
+                },
+            };
+        try {
+            return { entries: parseLsTree(Buffer.concat(chunks)) };
+        }
+        catch (error) {
+            return { refusal: { path: "", rule: "path-escape", detail: error.message } };
+        }
+    }
+    /** Writes every blob of the listing, in order, into a fresh folder; raw bytes through `cat-file --batch`. */
+    async function extract(commit, entries) {
+        const blobs = entries
+            .filter((e) => e.type === "blob")
+            .map((e) => ({ sha: e.sha, size: e.size ?? 0, path: e.path }));
+        const partial = join(workDir, `tree-${commit}.partial-${process.pid}`);
+        rmSync(partial, { recursive: true, force: true });
+        mkdirSync(partial, { recursive: true, mode: 0o700 });
+        let problem;
+        const reader = createBatchReader(blobs, (entry, bytes) => {
+            const target = join(partial, entry.path);
+            try {
+                mkdirSync(dirname(target), { recursive: true, mode: 0o700 });
+                writeFileSync(target, bytes, { mode: 0o600 });
+            }
+            catch (error) {
+                throw fsFailure("written", error);
+            }
+        });
+        try {
+            if (blobs.length > 0) {
+                await runner.run(["cat-file", "--batch"], {
+                    cwd: workDir,
+                    gitDir: repoDir,
+                    timeoutMs: TIMEOUT_MS.extract,
+                    input: `${blobs.map((b) => b.sha).join("\n")}\n`,
+                    onStdout: (chunk) => {
+                        try {
+                            reader.feed(chunk);
+                            return "continue";
+                        }
+                        catch (error) {
+                            problem = error;
+                            return "stop";
+                        }
+                    },
+                });
+            }
+            if (problem !== undefined)
+                throw problem;
+            reader.finish();
+            rmSync(treeDir(commit), { recursive: true, force: true });
+            renameSync(partial, treeDir(commit));
+        }
+        catch (error) {
+            rmSync(partial, { recursive: true, force: true });
+            if (error instanceof SourceError)
+                throw error;
+            throw error instanceof GitError
+                ? failure("read", error)
+                : new SourceError(`the repository ${described} could not be extracted; the log has the detail`, error.message);
+        }
+    }
+    function walkTree(commit, fetchedAt, fresh) {
+        const tree = treeDir(commit);
+        const root = bundlePath === "." ? tree : join(tree, bundlePath);
+        try {
+            return { walk: walkBundle(root, caps), published: { commit, fetchedAt }, fresh };
+        }
+        catch (error) {
+            const original = error.message;
+            throw new SourceError(original.split(root).join(`${described}:${bundlePath}`).split(tree).join(described), original);
+        }
+    }
+    function servedOnDisk(state) {
+        if (state?.served === undefined || !treeExists(state.served))
+            return undefined;
+        const when = state.servedFetchedAt ?? state.fetchedAt;
+        const fetchedAt = when === undefined ? clock() : new Date(when);
+        return walkTree(state.served, Number.isNaN(fetchedAt.getTime()) ? clock() : fetchedAt, false);
+    }
+    /** Removes extracted trees that are neither served nor the newest, and any partial folder. */
+    function prune(state) {
+        for (const name of readdirSync(workDir)) {
+            const isTree = TREE_NAME.test(name);
+            const isPartial = name.startsWith("tree-") && name.includes(".partial-");
+            if (!isTree && !isPartial)
+                continue;
+            if (isTree && (name === `tree-${state.served}` || name === `tree-${state.extracted}`))
+                continue;
+            const full = join(workDir, name);
+            const stat = lstatSync(full);
+            if (stat.isDirectory() && !stat.isSymbolicLink())
+                rmSync(full, { recursive: true, force: true });
+        }
+    }
+    async function load() {
+        ensureWorkDir();
+        let state = readState();
+        if (state !== undefined && (state.repository !== repository || state.branch !== branch)) {
+            resetWorkDir("the configuration names another repository or branch");
+            state = undefined;
+        }
+        seedAttempted(state);
+        if (firstLoad) {
+            firstLoad = false;
+            const onDisk = servedOnDisk(state);
+            if (onDisk !== undefined) {
+                fromDisk = true;
+                return onDisk;
+            }
+        }
+        transportConfig = sshBatchSetting(runner.env, await configuredSshCommand());
+        if (!existsSync(join(repoDir, "HEAD"))) {
+            rmSync(repoDir, { recursive: true, force: true });
+            try {
+                await clone();
+            }
+            catch (error) {
+                throw failure("cloned", error);
+            }
+        }
+        try {
+            await fetch();
+        }
+        catch (error) {
+            // A lock file a killed git left behind, or a clone git itself can no longer read: both are derived, so a
+            // fresh clone replaces them; any other failure (the network, the credential) is reported as it is.
+            if (staleLock(error))
+                recloneRepo("a lock file was left behind by a killed git");
+            else if (!(await cloneReadable()))
+                recloneRepo("the clone could not be read");
+            else
+                throw failure("fetched", error);
+            try {
+                await clone();
+                await fetch();
+            }
+            catch (again) {
+                throw failure("fetched", again);
+            }
+        }
+        let commit;
+        try {
+            commit = await resolveCommit();
+        }
+        catch (error) {
+            throw error instanceof SourceError ? error : failure("read", error);
+        }
+        const fetchedAt = clock();
+        const base = { repository, branch, ...(state ?? {}) };
+        // What was attempted is recorded when a commit is refused or served, never here (bite 5 review M1): a
+        // commit the runtime fails to index must look moved to the poller until it is served.
+        if (state?.extracted === commit && treeExists(commit)) {
+            writeState({ ...base, fetchedAt: fetchedAt.toISOString() });
+            return walkTree(commit, fetchedAt, false);
+        }
+        const listing = await list(commit).catch((error) => {
+            throw failure("read", error);
+        });
+        const refused = (refusal) => {
+            attempted = commit;
+            writeState({ ...base, fetchedAt: fetchedAt.toISOString() });
+            return { walk: emptyWalk(refusal), published: { commit, fetchedAt }, fresh: false };
+        };
+        if ("refusal" in listing)
+            return refused(listing.refusal);
+        const refusal = validateTree(listing.entries, caps, bundlePath);
+        if (refusal !== undefined)
+            return refused(refusal);
+        await extract(commit, listing.entries);
+        const next = {
+            ...base,
+            extracted: commit,
+            extractedAt: fetchedAt.toISOString(),
+            fetchedAt: fetchedAt.toISOString(),
+        };
+        writeState(next);
+        // Trees the loader refused would pile up otherwise: keep the served one and this one (bite 5 review BR16).
+        prune(next);
+        return walkTree(commit, fetchedAt, true);
+    }
+    return {
+        kind: "git",
+        workDir,
+        load,
+        loadServed: async () => servedOnDisk(readState()),
+        served: (commit) => {
+            attempted = commit;
+            const current = readState();
+            const state = { repository, branch, ...(current ?? {}), served: commit };
+            if (current?.extracted === commit && current.extractedAt !== undefined)
+                state.servedFetchedAt = current.extractedAt;
+            writeState(state);
+            prune(state);
+        },
+        discard: (commit) => {
+            if (!COMMIT.test(commit) || !treeExists(commit))
+                return;
+            rmSync(treeDir(commit), { recursive: true, force: true });
+            const current = readState();
+            if (current?.extracted === commit) {
+                const { extracted: _e, extractedAt: _a, ...rest } = current;
+                writeState(rest);
+            }
+        },
+        changed: async () => {
+            if (!existsSync(join(repoDir, "HEAD")))
+                return "moved";
+            let result;
+            try {
+                result = await runner.run(["ls-remote", "--", "origin", `refs/heads/${branch}`], {
+                    cwd: workDir,
+                    gitDir: repoDir,
+                    timeoutMs: TIMEOUT_MS.lsRemote,
+                    extraConfig: transportConfig,
+                });
+            }
+            catch (error) {
+                throw failure("asked", error);
+            }
+            const line = result.stdout
+                .toString("utf8")
+                .split("\n")
+                .find((l) => l.endsWith(`\trefs/heads/${branch}`));
+            if (line === undefined)
+                return "gone";
+            const remote = line.split("\t")[0] ?? "";
+            seedAttempted(readState());
+            return remote === attempted ? "same" : "moved";
+        },
+        describe: () => described,
+        abort: () => runner.abort(),
+        startedFromDisk: () => fromDisk,
+    };
+}
+//# sourceMappingURL=git.js.map

package/dist/source/git.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"git.js","sourceRoot":"","sources":["../../src/source/git.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,UAAU,EACV,SAAS,EACT,SAAS,EACT,WAAW,EACX,YAAY,EACZ,UAAU,EACV,MAAM,EACN,aAAa,GACd,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAC1D,OAAO,EAAE,WAAW,EAAkB,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAElF,OAAO,EAAmB,UAAU,EAAE,MAAM,eAAe,CAAC;AAE5D,OAAO,EAAE,QAAQ,EAAkB,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AA4B9E,sGAAsG;AACtG,MAAM,OAAO,WAAY,SAAQ,KAAK;IACpC,MAAM,CAAU;IAChB,YAAY,OAAe,EAAE,MAAe;QAC1C,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,aAAa,CAAC;QAC1B,IAAI,MAAM,KAAK,SAAS;YAAE,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACjD,CAAC;CACF;AAeD,MAAM,IAAI,GAAG,UAAU,CAAC;AACxB,MAAM,KAAK,GAAG,YAAY,CAAC;AAC3B,MAAM,SAAS,GAAG,wBAAwB,CAAC;AAC3C,MAAM,MAAM,GAAG,mBAAmB,CAAC;AACnC,MAAM,UAAU,GAAG,sCAAsC,CAAC;AAE1D,4GAA4G;AAC5G,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,MAAc,EAAW,EAAE,CAC5D,6CAA6C,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;AAE7D;;;GAGG;AACH,MAAM,UAAU,eAAe,CAAC,GAAsB,EAAE,UAA8B;IACpF,IAAI,GAAG,CAAC,eAAe,KAAK,SAAS,IAAI,GAAG,CAAC,OAAO,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC;IAC9E,IAAI,UAAU,KAAK,SAAS,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,EAAE,CAAC;IACjE,OAAO,CAAC,UAAU,CAAC,CAAC;AACtB,CAAC;AACD,MAAM,UAAU,GAAG;IACjB,KAAK,EAAE,OAAO;IACd,KAAK,EAAE,OAAO;IACd,QAAQ,EAAE,MAAM;IAChB,IAAI,EAAE,OAAO;IACb,OAAO,EAAE,OAAO;CACjB,CAAC;AACF,MAAM,SAAS,GAAG,CAAC,KAAc,EAAc,EAAE,CAAC,CAAC;IACjD,KAAK,EAAE,EAAE;IACT,MAAM,EAAE,EAAE;IACV,aAAa,EAAE,EAAE;IACjB,QAAQ,EAAE,EAAE;IACZ,KAAK;CACN,CAAC,CAAC;AAEH;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAAC,OAAyB;IACvD,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,OAAO,CAAC;IACtF,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IACpC,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IACvC,MAAM,SAAS,GAAG,iBAAiB,CAAC,UAAU,CAAC,CAAC;IAChD,IAAI,SAAS,GAAG,IAAI,CAAC;IACrB,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB;;;OAGG;IACH,IAAI,SAA6B,CAAC;IAClC,IAAI,eAAe,GAAG,KAAK,CAAC;IAC5B,MAAM,aAAa,GAAG,CAAC,KAAwB,EAAQ,EAAE;QACvD,IAAI,eAAe;YAAE,OAAO;QAC5B,eAAe,GAAG,IAAI,CAAC;QACvB,SAAS,GAAG,KAAK,EAAE,MAAM,CAAC;IAC5B,CAAC,CAAC;IACF,+GAA+G;IAC/G,MAAM,SAAS,GAAG,CAAC,IAAY,EAAE,KAAc,EAAe,EAAE,CAC9D,IAAI,WAAW,CACb,kDAAkD,IAAI,0BAA0B,EAC/E,KAAe,CAAC,OAAO,CACzB,CAAC;IAEJ,MAAM,OAAO,GAAG,CAAC,MAAc,EAAU,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,MAAM,EAAE,CAAC,CAAC;IAE5E,SAAS,SAAS;QAChB,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,SAAS,EAAE,MAAM,CAAC,CAAU,CAAC;YACpE,IAAI,OAAO,MAAM,CAAC,UAAU,KAAK,QAAQ,IAAI,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ;gBAC5E,OAAO,SAAS,CAAC;YACnB,4FAA4F;YAC5F,MAAM,GAAG,GAAG,CAAC,KAAc,EAAsB,EAAE,CACjD,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,MAAM,KAAK,GAAU,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;YAC9E,MAAM,SAAS,GAAG,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YACxC,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YAClC,IAAI,SAAS,KAAK,SAAS;gBAAE,KAAK,CAAC,SAAS,GAAG,SAAS,CAAC;YACzD,IAAI,MAAM,KAAK,SAAS;gBAAE,KAAK,CAAC,MAAM,GAAG,MAAM,CAAC;YAChD,KAAK,MAAM,GAAG,IAAI,CAAC,WAAW,EAAE,aAAa,EAAE,iBAAiB,CAAU,EAAE,CAAC;gBAC3E,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;gBAC1B,IAAI,OAAO,KAAK,KAAK,QAAQ;oBAAE,KAAK,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;YACpD,CAAC;YACD,OAAO,KAAK,CAAC;QACf,CAAC;QAAC,MAAM,CAAC;YACP,gCAAgC;QAClC,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,2EAA2E;IAC3E,SAAS,UAAU,CAAC,MAAc;QAChC,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;YACxC,OAAO,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC;QACtD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IACD,MAAM,UAAU,GAAG,CAAC,KAAY,EAAQ,EAAE;QACxC,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,GAAG,SAAS,IAAI,OAAO,CAAC,GAAG,MAAM,CAAC;YAC9C,aAAa,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YAC3E,UAAU,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;QAC7B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,SAAS,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;QACpC,CAAC;IACH,CAAC,CAAC;IAEF,SAAS,aAAa;QACpB,IAAI,CAAC;YACH,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACvD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,SAAS,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;QACpC,CAAC;QACD,IAAI,SAAS,CAAC,OAAO,CAAC,CAAC,cAAc,EAAE;YACrC,MAAM,IAAI,WAAW,CACnB,kGAAkG,CACnG,CAAC;IACN,CAAC;IACD,qFAAqF;IACrF,SAAS,YAAY,CAAC,MAAc;QAClC,GAAG,EAAE,IAAI,CAAC,iBAAiB,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;QACzC,KAAK,MAAM,IAAI,IAAI,WAAW,CAAC,OAAO,CAAC;YACrC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAClE,CAAC;IACD,SAAS,WAAW,CAAC,MAAc;QACjC,GAAG,EAAE,IAAI,CAAC,iBAAiB,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;QACzC,MAAM,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACpD,CAAC;IACD,kIAAkI;IAClI,KAAK,UAAU,aAAa;QAC1B,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,OAAO,EAAE,mBAAmB,CAAC,EAAE;gBACxE,GAAG,EAAE,OAAO;gBACZ,MAAM,EAAE,OAAO;gBACf,SAAS,EAAE,UAAU,CAAC,QAAQ;aAC/B,CAAC,CAAC;YACH,OAAO,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,KAAK,UAAU,CAAC;QAC9D,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED,MAAM,OAAO,GAAG,CAAC,IAAY,EAAE,KAAc,EAAe,EAAE;QAC5D,MAAM,MAAM,GACV,KAAK,YAAY,QAAQ;YACvB,CAAC,CAAC,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,OAAO;YAC/B,CAAC,CAAC,iBAAiB,CAAE,KAAe,CAAC,OAAO,CAAC,CAAC;QAClD,OAAO,IAAI,WAAW,CACpB,kBAAkB,SAAS,iBAAiB,IAAI,6BAA6B,EAC7E,MAAM,CACP,CAAC;IACJ,CAAC,CAAC;IACF,MAAM,SAAS,GAAG,CAAC,KAAc,EAAW,EAAE,CAC5C,KAAK,YAAY,QAAQ,IAAI,kBAAkB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAEhE,oHAAoH;IACpH,KAAK,UAAU,oBAAoB;QACjC,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,OAAO,EAAE,iBAAiB,CAAC,EAAE;gBACtE,GAAG,EAAE,OAAO;gBACZ,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACjE,SAAS,EAAE,UAAU,CAAC,QAAQ;aAC/B,CAAC,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;YACpD,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;QAC9C,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,SAAS,CAAC;QACnB,CAAC;IACH,CAAC;IACD,IAAI,eAAe,GAAa,EAAE,CAAC;IAEnC,MAAM,KAAK,GAAG,GAAqB,EAAE,CACnC,MAAM,CAAC,GAAG,CACR;QACE,OAAO;QACP,QAAQ;QACR,WAAW;QACX,iBAAiB;QACjB,YAAY,MAAM,EAAE;QACpB,WAAW;QACX,aAAa;QACb,IAAI;QACJ,UAAU;QACV,IAAI;KACL,EACD,EAAE,GAAG,EAAE,OAAO,EAAE,SAAS,EAAE,UAAU,CAAC,KAAK,EAAE,WAAW,EAAE,eAAe,EAAE,CAC5E,CAAC;IACJ,MAAM,KAAK,GAAG,GAAqB,EAAE,CACnC,MAAM,CAAC,GAAG,CACR,CAAC,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,QAAQ,EAAE,eAAe,MAAM,wBAAwB,MAAM,EAAE,CAAC,EAC7F,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,UAAU,CAAC,KAAK,EAAE,WAAW,EAAE,eAAe,EAAE,CAC7F,CAAC;IACJ,MAAM,aAAa,GAAG,KAAK,IAAqB,EAAE;QAChD,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,GAAG,CAC7B,CAAC,WAAW,EAAE,UAAU,EAAE,kBAAkB,EAAE,uBAAuB,MAAM,WAAW,CAAC,EACvF,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,UAAU,CAAC,QAAQ,EAAE,CAClE,CAAC;QACF,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;QACrD,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,MAAM,CAAC;YACnC,MAAM,IAAI,WAAW,CAAC,kBAAkB,SAAS,4BAA4B,MAAM,EAAE,CAAC,CAAC;QACzF,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC;IAEF,6DAA6D;IAC7D,KAAK,UAAU,IAAI,CAAC,MAAc;QAChC,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,IAAI,OAAO,GAAG,CAAC,CAAC;QAChB,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,CAAC,EAAE;YAC1F,GAAG,EAAE,OAAO;YACZ,MAAM,EAAE,OAAO;YACf,SAAS,EAAE,UAAU,CAAC,IAAI;YAC1B,QAAQ,EAAE,CAAC,KAAK,EAAE,EAAE;gBAClB,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBACnB,KAAK,MAAM,IAAI,IAAI,KAAK;oBAAE,IAAI,IAAI,KAAK,CAAC;wBAAE,OAAO,IAAI,CAAC,CAAC;gBACvD,OAAO,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC;YACpD,CAAC;SACF,CAAC,CAAC;QACH,IAAI,MAAM,CAAC,OAAO;YAChB,OAAO;gBACL,OAAO,EAAE;oBACP,IAAI,EAAE,EAAE;oBACR,IAAI,EAAE,gBAAgB;oBACtB,MAAM,EAAE,aAAa,IAAI,CAAC,KAAK,eAAe;iBAC/C;aACF,CAAC;QACJ,IAAI,CAAC;YACH,OAAO,EAAE,OAAO,EAAE,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;QACzD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,EAAG,KAAe,CAAC,OAAO,EAAE,EAAE,CAAC;QAC1F,CAAC;IACH,CAAC;IAED,6GAA6G;IAC7G,KAAK,UAAU,OAAO,CAAC,MAAc,EAAE,OAA6B;QAClE,MAAM,KAAK,GAAG,OAAO;aAClB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC;aAChC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QACjE,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,EAAE,QAAQ,MAAM,YAAY,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;QACvE,MAAM,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAClD,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACrD,IAAI,OAA0B,CAAC;QAC/B,MAAM,MAAM,GAAG,iBAAiB,CAAC,KAAK,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;YACvD,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YACzC,IAAI,CAAC;gBACH,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;gBAC7D,aAAa,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YAChD,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,SAAS,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;YACpC,CAAC;QACH,CAAC,CAAC,CAAC;QACH,IAAI,CAAC;YACH,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACrB,MAAM,MAAM,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,SAAS,CAAC,EAAE;oBACxC,GAAG,EAAE,OAAO;oBACZ,MAAM,EAAE,OAAO;oBACf,SAAS,EAAE,UAAU,CAAC,OAAO;oBAC7B,KAAK,EAAE,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI;oBAChD,QAAQ,EAAE,CAAC,KAAK,EAAE,EAAE;wBAClB,IAAI,CAAC;4BACH,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;4BACnB,OAAO,UAAU,CAAC;wBACpB,CAAC;wBAAC,OAAO,KAAK,EAAE,CAAC;4BACf,OAAO,GAAG,KAAc,CAAC;4BACzB,OAAO,MAAM,CAAC;wBAChB,CAAC;oBACH,CAAC;iBACF,CAAC,CAAC;YACL,CAAC;YACD,IAAI,OAAO,KAAK,SAAS;gBAAE,MAAM,OAAO,CAAC;YACzC,MAAM,CAAC,MAAM,EAAE,CAAC;YAChB,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YAC1D,UAAU,CAAC,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;QACvC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YAClD,IAAI,KAAK,YAAY,WAAW;gBAAE,MAAM,KAAK,CAAC;YAC9C,MAAM,KAAK,YAAY,QAAQ;gBAC7B,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,KAAK,CAAC;gBACxB,CAAC,CAAC,IAAI,WAAW,CACb,kBAAkB,SAAS,iDAAiD,EAC3E,KAAe,CAAC,OAAO,CACzB,CAAC;QACR,CAAC;IACH,CAAC;IAED,SAAS,QAAQ,CAAC,MAAc,EAAE,SAAe,EAAE,KAAc;QAC/D,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;QAC7B,MAAM,IAAI,GAAG,UAAU,KAAK,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;QAChE,IAAI,CAAC;YACH,OAAO,EAAE,IAAI,EAAE,UAAU,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,SAAS,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE,KAAK,EAAE,CAAC;QACnF,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,QAAQ,GAAI,KAAe,CAAC,OAAO,CAAC;YAC1C,MAAM,IAAI,WAAW,CACnB,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,SAAS,IAAI,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,EACnF,QAAQ,CACT,CAAC;QACJ,CAAC;IACH,CAAC;IAED,SAAS,YAAY,CAAC,KAAwB;QAC5C,IAAI,KAAK,EAAE,MAAM,KAAK,SAAS,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC;YAAE,OAAO,SAAS,CAAC;QAC/E,MAAM,IAAI,GAAG,KAAK,CAAC,eAAe,IAAI,KAAK,CAAC,SAAS,CAAC;QACtD,MAAM,SAAS,GAAG,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC;QAChE,OAAO,QAAQ,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;IAChG,CAAC;IAED,8FAA8F;IAC9F,SAAS,KAAK,CAAC,KAAY;QACzB,KAAK,MAAM,IAAI,IAAI,WAAW,CAAC,OAAO,CAAC,EAAE,CAAC;YACxC,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACpC,MAAM,SAAS,GAAG,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;YACzE,IAAI,CAAC,MAAM,IAAI,CAAC,SAAS;gBAAE,SAAS;YACpC,IAAI,MAAM,IAAI,CAAC,IAAI,KAAK,QAAQ,KAAK,CAAC,MAAM,EAAE,IAAI,IAAI,KAAK,QAAQ,KAAK,CAAC,SAAS,EAAE,CAAC;gBACnF,SAAS;YACX,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;YACjC,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;YAC7B,IAAI,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE;gBAC9C,MAAM,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACnD,CAAC;IACH,CAAC;IAED,KAAK,UAAU,IAAI;QACjB,aAAa,EAAE,CAAC;QAChB,IAAI,KAAK,GAAG,SAAS,EAAE,CAAC;QACxB,IAAI,KAAK,KAAK,SAAS,IAAI,CAAC,KAAK,CAAC,UAAU,KAAK,UAAU,IAAI,KAAK,CAAC,MAAM,KAAK,MAAM,CAAC,EAAE,CAAC;YACxF,YAAY,CAAC,sDAAsD,CAAC,CAAC;YACrE,KAAK,GAAG,SAAS,CAAC;QACpB,CAAC;QACD,aAAa,CAAC,KAAK,CAAC,CAAC;QACrB,IAAI,SAAS,EAAE,CAAC;YACd,SAAS,GAAG,KAAK,CAAC;YAClB,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;YACnC,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;gBACzB,QAAQ,GAAG,IAAI,CAAC;gBAChB,OAAO,MAAM,CAAC;YAChB,CAAC;QACH,CAAC;QACD,eAAe,GAAG,eAAe,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,oBAAoB,EAAE,CAAC,CAAC;QAC5E,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,EAAE,CAAC;YACvC,MAAM,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YAClD,IAAI,CAAC;gBACH,MAAM,KAAK,EAAE,CAAC;YAChB,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,OAAO,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;YACjC,CAAC;QACH,CAAC;QACD,IAAI,CAAC;YACH,MAAM,KAAK,EAAE,CAAC;QAChB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,yGAAyG;YACzG,mGAAmG;YACnG,IAAI,SAAS,CAAC,KAAK,CAAC;gBAAE,WAAW,CAAC,6CAA6C,CAAC,CAAC;iBAC5E,IAAI,CAAC,CAAC,MAAM,aAAa,EAAE,CAAC;gBAAE,WAAW,CAAC,6BAA6B,CAAC,CAAC;;gBACzE,MAAM,OAAO,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;YACrC,IAAI,CAAC;gBACH,MAAM,KAAK,EAAE,CAAC;gBACd,MAAM,KAAK,EAAE,CAAC;YAChB,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,OAAO,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;YAClC,CAAC;QACH,CAAC;QACD,IAAI,MAAc,CAAC;QACnB,IAAI,CAAC;YACH,MAAM,GAAG,MAAM,aAAa,EAAE,CAAC;QACjC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,KAAK,YAAY,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QACtE,CAAC;QACD,MAAM,SAAS,GAAG,KAAK,EAAE,CAAC;QAC1B,MAAM,IAAI,GAAU,EAAE,UAAU,EAAE,MAAM,EAAE,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC,EAAE,CAAC;QAC7D,sGAAsG;QACtG,sFAAsF;QACtF,IAAI,KAAK,EAAE,SAAS,KAAK,MAAM,IAAI,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;YACtD,UAAU,CAAC,EAAE,GAAG,IAAI,EAAE,SAAS,EAAE,SAAS,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;YAC5D,OAAO,QAAQ,CAAC,MAAM,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;QAC5C,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;YAC1D,MAAM,OAAO,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QAC/B,CAAC,CAAC,CAAC;QACH,MAAM,OAAO,GAAG,CAAC,OAAgB,EAAU,EAAE;YAC3C,SAAS,GAAG,MAAM,CAAC;YACnB,UAAU,CAAC,EAAE,GAAG,IAAI,EAAE,SAAS,EAAE,SAAS,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;YAC5D,OAAO,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,CAAC,EAAE,SAAS,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;QACtF,CAAC,CAAC;QACF,IAAI,SAAS,IAAI,OAAO;YAAE,OAAO,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAC1D,MAAM,OAAO,GAAG,YAAY,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC;QAChE,IAAI,OAAO,KAAK,SAAS;YAAE,OAAO,OAAO,CAAC,OAAO,CAAC,CAAC;QACnD,MAAM,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;QACvC,MAAM,IAAI,GAAU;YAClB,GAAG,IAAI;YACP,SAAS,EAAE,MAAM;YACjB,WAAW,EAAE,SAAS,CAAC,WAAW,EAAE;YACpC,SAAS,EAAE,SAAS,CAAC,WAAW,EAAE;SACnC,CAAC;QACF,UAAU,CAAC,IAAI,CAAC,CAAC;QACjB,2GAA2G;QAC3G,KAAK,CAAC,IAAI,CAAC,CAAC;QACZ,OAAO,QAAQ,CAAC,MAAM,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC;IAC3C,CAAC;IAED,OAAO;QACL,IAAI,EAAE,KAAK;QACX,OAAO;QACP,IAAI;QACJ,UAAU,EAAE,KAAK,IAAI,EAAE,CAAC,YAAY,CAAC,SAAS,EAAE,CAAC;QACjD,MAAM,EAAE,CAAC,MAAM,EAAE,EAAE;YACjB,SAAS,GAAG,MAAM,CAAC;YACnB,MAAM,OAAO,GAAG,SAAS,EAAE,CAAC;YAC5B,MAAM,KAAK,GAAU,EAAE,UAAU,EAAE,MAAM,EAAE,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;YAChF,IAAI,OAAO,EAAE,SAAS,KAAK,MAAM,IAAI,OAAO,CAAC,WAAW,KAAK,SAAS;gBACpE,KAAK,CAAC,eAAe,GAAG,OAAO,CAAC,WAAW,CAAC;YAC9C,UAAU,CAAC,KAAK,CAAC,CAAC;YAClB,KAAK,CAAC,KAAK,CAAC,CAAC;QACf,CAAC;QACD,OAAO,EAAE,CAAC,MAAM,EAAE,EAAE;YAClB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC;gBAAE,OAAO;YACxD,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YAC1D,MAAM,OAAO,GAAG,SAAS,EAAE,CAAC;YAC5B,IAAI,OAAO,EAAE,SAAS,KAAK,MAAM,EAAE,CAAC;gBAClC,MAAM,EAAE,SAAS,EAAE,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE,GAAG,IAAI,EAAE,GAAG,OAAO,CAAC;gBAC5D,UAAU,CAAC,IAAI,CAAC,CAAC;YACnB,CAAC;QACH,CAAC;QACD,OAAO,EAAE,KAAK,IAA2B,EAAE;YACzC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;gBAAE,OAAO,OAAO,CAAC;YACvD,IAAI,MAA6C,CAAC;YAClD,IAAI,CAAC;gBACH,MAAM,GAAG,MAAM,MAAM,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,IAAI,EAAE,QAAQ,EAAE,cAAc,MAAM,EAAE,CAAC,EAAE;oBAC/E,GAAG,EAAE,OAAO;oBACZ,MAAM,EAAE,OAAO;oBACf,SAAS,EAAE,UAAU,CAAC,QAAQ;oBAC9B,WAAW,EAAE,eAAe;iBAC7B,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,OAAO,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;YAChC,CAAC;YACD,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM;iBACvB,QAAQ,CAAC,MAAM,CAAC;iBAChB,KAAK,CAAC,IAAI,CAAC;iBACX,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,gBAAgB,MAAM,EAAE,CAAC,CAAC,CAAC;YACrD,IAAI,IAAI,KAAK,SAAS;gBAAE,OAAO,MAAM,CAAC;YACtC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YACzC,aAAa,CAAC,SAAS,EAAE,CAAC,CAAC;YAC3B,OAAO,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC;QACjD,CAAC;QACD,QAAQ,EAAE,GAAG,EAAE,CAAC,SAAS;QACzB,KAAK,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,EAAE;QAC3B,eAAe,EAAE,GAAG,EAAE,CAAC,QAAQ;KAChC,CAAC;AACJ,CAAC","sourcesContent":["import {\n  existsSync,\n  lstatSync,\n  mkdirSync,\n  readdirSync,\n  readFileSync,\n  renameSync,\n  rmSync,\n  writeFileSync,\n} from \"node:fs\";\nimport { dirname, join } from \"node:path\";\nimport { createBatchReader } from \"../bundle/cat-file.js\";\nimport { parseLsTree, type TreeEntry, validateTree } from \"../bundle/git-tree.js\";\nimport type { Caps, Refusal } from \"../bundle/model.js\";\nimport { type WalkResult, walkBundle } from \"../fs/walk.js\";\nimport type { Log } from \"../log.js\";\nimport { GitError, type GitRunner, redactCredentials } from \"./git-runner.js\";\nimport type { Loaded, RemoteChange, Source } from \"./source.js\";\n\nexport interface GitSourceOptions {\n  repository: string;\n  branch: string;\n  /** `.` or a relative path inside the published tree. */\n  bundlePath: string;\n  /** The folder this source owns, under the process's work folder: `<work>/source`. */\n  workDir: string;\n  caps: Caps;\n  runner: GitRunner;\n  clock: () => Date;\n  log?: Log;\n}\n\nexport interface GitSource extends Source {\n  readonly kind: \"git\";\n  readonly workDir: string;\n  loadServed(): Promise<Loaded | undefined>;\n  served(commit: string): void;\n  discard(commit: string): void;\n  changed(): Promise<RemoteChange>;\n  abort(): void;\n  /** Whether the first load answered from the tree on disk, so the poller should fetch at once. */\n  startedFromDisk(): boolean;\n}\n\n/** An error whose message names the source as configured; the detail (git's words) is for the log. */\nexport class SourceError extends Error {\n  detail?: string;\n  constructor(message: string, detail?: string) {\n    super(message);\n    this.name = \"SourceError\";\n    if (detail !== undefined) this.detail = detail;\n  }\n}\n\ninterface State {\n  repository: string;\n  branch: string;\n  /** The commit whose tree is extracted and complete, and when it was fetched. */\n  extracted?: string;\n  extractedAt?: string;\n  /** The commit the runtime last swapped in, and when that one was fetched. */\n  served?: string;\n  servedFetchedAt?: string;\n  /** When the last fetch succeeded. */\n  fetchedAt?: string;\n}\n\nconst REPO = \"repo.git\";\nconst STATE = \"state.json\";\nconst TREE_NAME = /^tree-[0-9a-f]{40,64}$/;\nconst COMMIT = /^[0-9a-f]{40,64}$/;\nconst BATCH_MODE = \"core.sshCommand=ssh -o BatchMode=yes\";\n\n/** Git's own words for a lock file left behind by a killed process; nothing else triggers a fresh clone. */\nexport const isStaleLockMessage = (stderr: string): boolean =>\n  /Unable to create '[^']*\\.lock': File exists/.test(stderr);\n\n/**\n * The ssh setting a transport command carries: BatchMode, so a passphrase prompt cannot hang a stdio server,\n * unless the person's own `GIT_SSH_COMMAND`, `GIT_SSH` or configured `core.sshCommand` is in charge.\n */\nexport function sshBatchSetting(env: NodeJS.ProcessEnv, configured: string | undefined): string[] {\n  if (env.GIT_SSH_COMMAND !== undefined || env.GIT_SSH !== undefined) return [];\n  if (configured !== undefined && configured.length > 0) return [];\n  return [BATCH_MODE];\n}\nconst TIMEOUT_MS = {\n  clone: 300_000,\n  fetch: 300_000,\n  lsRemote: 30_000,\n  list: 300_000,\n  extract: 300_000,\n};\nconst emptyWalk = (fatal: Refusal): WalkResult => ({\n  files: [],\n  hidden: [],\n  hiddenFolders: [],\n  refusals: [],\n  fatal,\n});\n\n/**\n * A published branch as the server's own derived copy (D47): a bare shallow clone for transport, each fetched commit\n * listed and validated before anything is written, then extracted blob by blob into a fresh folder named by the\n * commit, which the walker reads. Git never writes a working tree here, so no attribute, filter, hook or\n * line-ending rule can touch the bytes.\n */\nexport function createGitSource(options: GitSourceOptions): GitSource {\n  const { repository, branch, bundlePath, workDir, caps, runner, clock, log } = options;\n  const repoDir = join(workDir, REPO);\n  const statePath = join(workDir, STATE);\n  const described = redactCredentials(repository);\n  let firstLoad = true;\n  let fromDisk = false;\n  /**\n   * The commit last refused or served, what `changed()` compares with: kept in memory only and seeded from the\n   * served commit, so a restart tries a commit again that an older configuration refused (bite 5 review BR2).\n   */\n  let attempted: string | undefined;\n  let attemptedSeeded = false;\n  const seedAttempted = (state: State | undefined): void => {\n    if (attemptedSeeded) return;\n    attemptedSeeded = true;\n    attempted = state?.served;\n  };\n  /** A file-system failure as the model may see it: a fixed sentence; the path travels as detail for the log. */\n  const fsFailure = (verb: string, error: unknown): SourceError =>\n    new SourceError(\n      `the source folder under the cache could not be ${verb}; the log has the detail`,\n      (error as Error).message,\n    );\n\n  const treeDir = (commit: string): string => join(workDir, `tree-${commit}`);\n\n  function readState(): State | undefined {\n    try {\n      const parsed = JSON.parse(readFileSync(statePath, \"utf8\")) as State;\n      if (typeof parsed.repository !== \"string\" || typeof parsed.branch !== \"string\")\n        return undefined;\n      // A commit field that is not a hash is dropped: a name could point outside the work folder.\n      const hex = (value: unknown): string | undefined =>\n        typeof value === \"string\" && COMMIT.test(value) ? value : undefined;\n      const state: State = { repository: parsed.repository, branch: parsed.branch };\n      const extracted = hex(parsed.extracted);\n      const served = hex(parsed.served);\n      if (extracted !== undefined) state.extracted = extracted;\n      if (served !== undefined) state.served = served;\n      for (const key of [\"fetchedAt\", \"extractedAt\", \"servedFetchedAt\"] as const) {\n        const value = parsed[key];\n        if (typeof value === \"string\") state[key] = value;\n      }\n      return state;\n    } catch {\n      // no state, or not ours to read\n    }\n    return undefined;\n  }\n\n  /** An extracted tree is a real folder of the work folder, never a link. */\n  function treeExists(commit: string): boolean {\n    try {\n      const stat = lstatSync(treeDir(commit));\n      return stat.isDirectory() && !stat.isSymbolicLink();\n    } catch {\n      return false;\n    }\n  }\n  const writeState = (state: State): void => {\n    try {\n      const tmp = `${statePath}.${process.pid}.tmp`;\n      writeFileSync(tmp, `${JSON.stringify(state, null, 2)}\\n`, { mode: 0o600 });\n      renameSync(tmp, statePath);\n    } catch (error) {\n      throw fsFailure(\"written\", error);\n    }\n  };\n\n  function ensureWorkDir(): void {\n    try {\n      mkdirSync(workDir, { recursive: true, mode: 0o700 });\n    } catch (error) {\n      throw fsFailure(\"created\", error);\n    }\n    if (lstatSync(workDir).isSymbolicLink())\n      throw new SourceError(\n        \"the source folder under the cache is a symbolic link; remove it so the server can create its own\",\n      );\n  }\n  /** Everything here is derived: when the repository or branch changed, start over. */\n  function resetWorkDir(reason: string): void {\n    log?.warn(\"source.recloned\", { reason });\n    for (const name of readdirSync(workDir))\n      rmSync(join(workDir, name), { recursive: true, force: true });\n  }\n  function recloneRepo(reason: string): void {\n    log?.warn(\"source.recloned\", { reason });\n    rmSync(repoDir, { recursive: true, force: true });\n  }\n  /** Whether git can still read the clone: its configuration must name the remote (a clone with it gone cannot be fetched into). */\n  async function cloneReadable(): Promise<boolean> {\n    try {\n      const result = await runner.run([\"config\", \"--get\", \"remote.origin.url\"], {\n        cwd: workDir,\n        gitDir: repoDir,\n        timeoutMs: TIMEOUT_MS.lsRemote,\n      });\n      return result.stdout.toString(\"utf8\").trim() === repository;\n    } catch {\n      return false;\n    }\n  }\n\n  const failure = (verb: string, error: unknown): SourceError => {\n    const detail =\n      error instanceof GitError\n        ? error.stderr || error.message\n        : redactCredentials((error as Error).message);\n    return new SourceError(\n      `the repository ${described} could not be ${verb}; the log has git's message`,\n      detail,\n    );\n  };\n  const staleLock = (error: unknown): boolean =>\n    error instanceof GitError && isStaleLockMessage(error.stderr);\n\n  /** The person's configured `core.sshCommand`, read where git would read it (includes count); nothing when unset. */\n  async function configuredSshCommand(): Promise<string | undefined> {\n    try {\n      const result = await runner.run([\"config\", \"--get\", \"core.sshCommand\"], {\n        cwd: workDir,\n        ...(existsSync(join(repoDir, \"HEAD\")) ? { gitDir: repoDir } : {}),\n        timeoutMs: TIMEOUT_MS.lsRemote,\n      });\n      const value = result.stdout.toString(\"utf8\").trim();\n      return value.length > 0 ? value : undefined;\n    } catch {\n      return undefined;\n    }\n  }\n  let transportConfig: string[] = [];\n\n  const clone = (): Promise<unknown> =>\n    runner.run(\n      [\n        \"clone\",\n        \"--bare\",\n        \"--depth=1\",\n        \"--single-branch\",\n        `--branch=${branch}`,\n        \"--no-tags\",\n        \"--template=\",\n        \"--\",\n        repository,\n        REPO,\n      ],\n      { cwd: workDir, timeoutMs: TIMEOUT_MS.clone, extraConfig: transportConfig },\n    );\n  const fetch = (): Promise<unknown> =>\n    runner.run(\n      [\"fetch\", \"--depth=1\", \"--\", \"origin\", `+refs/heads/${branch}:refs/remotes/origin/${branch}`],\n      { cwd: workDir, gitDir: repoDir, timeoutMs: TIMEOUT_MS.fetch, extraConfig: transportConfig },\n    );\n  const resolveCommit = async (): Promise<string> => {\n    const result = await runner.run(\n      [\"rev-parse\", \"--verify\", \"--end-of-options\", `refs/remotes/origin/${branch}^{commit}`],\n      { cwd: workDir, gitDir: repoDir, timeoutMs: TIMEOUT_MS.lsRemote },\n    );\n    const commit = result.stdout.toString(\"utf8\").trim();\n    if (!/^[0-9a-f]{40,64}$/.test(commit))\n      throw new SourceError(`the repository ${described} has no commit on branch ${branch}`);\n    return commit;\n  };\n\n  /** The tree listing, stopped one entry past the file cap. */\n  async function list(commit: string): Promise<{ entries: TreeEntry[] } | { refusal: Refusal }> {\n    const chunks: Buffer[] = [];\n    let entries = 0;\n    const result = await runner.run([\"ls-tree\", \"-r\", \"-t\", \"-l\", \"-z\", \"--full-tree\", commit], {\n      cwd: workDir,\n      gitDir: repoDir,\n      timeoutMs: TIMEOUT_MS.list,\n      onStdout: (chunk) => {\n        chunks.push(chunk);\n        for (const byte of chunk) if (byte === 0) entries += 1;\n        return entries > caps.files ? \"stop\" : \"continue\";\n      },\n    });\n    if (result.stopped)\n      return {\n        refusal: {\n          path: \"\",\n          rule: \"too-many-files\",\n          detail: `more than ${caps.files} tree entries`,\n        },\n      };\n    try {\n      return { entries: parseLsTree(Buffer.concat(chunks)) };\n    } catch (error) {\n      return { refusal: { path: \"\", rule: \"path-escape\", detail: (error as Error).message } };\n    }\n  }\n\n  /** Writes every blob of the listing, in order, into a fresh folder; raw bytes through `cat-file --batch`. */\n  async function extract(commit: string, entries: readonly TreeEntry[]): Promise<void> {\n    const blobs = entries\n      .filter((e) => e.type === \"blob\")\n      .map((e) => ({ sha: e.sha, size: e.size ?? 0, path: e.path }));\n    const partial = join(workDir, `tree-${commit}.partial-${process.pid}`);\n    rmSync(partial, { recursive: true, force: true });\n    mkdirSync(partial, { recursive: true, mode: 0o700 });\n    let problem: Error | undefined;\n    const reader = createBatchReader(blobs, (entry, bytes) => {\n      const target = join(partial, entry.path);\n      try {\n        mkdirSync(dirname(target), { recursive: true, mode: 0o700 });\n        writeFileSync(target, bytes, { mode: 0o600 });\n      } catch (error) {\n        throw fsFailure(\"written\", error);\n      }\n    });\n    try {\n      if (blobs.length > 0) {\n        await runner.run([\"cat-file\", \"--batch\"], {\n          cwd: workDir,\n          gitDir: repoDir,\n          timeoutMs: TIMEOUT_MS.extract,\n          input: `${blobs.map((b) => b.sha).join(\"\\n\")}\\n`,\n          onStdout: (chunk) => {\n            try {\n              reader.feed(chunk);\n              return \"continue\";\n            } catch (error) {\n              problem = error as Error;\n              return \"stop\";\n            }\n          },\n        });\n      }\n      if (problem !== undefined) throw problem;\n      reader.finish();\n      rmSync(treeDir(commit), { recursive: true, force: true });\n      renameSync(partial, treeDir(commit));\n    } catch (error) {\n      rmSync(partial, { recursive: true, force: true });\n      if (error instanceof SourceError) throw error;\n      throw error instanceof GitError\n        ? failure(\"read\", error)\n        : new SourceError(\n            `the repository ${described} could not be extracted; the log has the detail`,\n            (error as Error).message,\n          );\n    }\n  }\n\n  function walkTree(commit: string, fetchedAt: Date, fresh: boolean): Loaded {\n    const tree = treeDir(commit);\n    const root = bundlePath === \".\" ? tree : join(tree, bundlePath);\n    try {\n      return { walk: walkBundle(root, caps), published: { commit, fetchedAt }, fresh };\n    } catch (error) {\n      const original = (error as Error).message;\n      throw new SourceError(\n        original.split(root).join(`${described}:${bundlePath}`).split(tree).join(described),\n        original,\n      );\n    }\n  }\n\n  function servedOnDisk(state: State | undefined): Loaded | undefined {\n    if (state?.served === undefined || !treeExists(state.served)) return undefined;\n    const when = state.servedFetchedAt ?? state.fetchedAt;\n    const fetchedAt = when === undefined ? clock() : new Date(when);\n    return walkTree(state.served, Number.isNaN(fetchedAt.getTime()) ? clock() : fetchedAt, false);\n  }\n\n  /** Removes extracted trees that are neither served nor the newest, and any partial folder. */\n  function prune(state: State): void {\n    for (const name of readdirSync(workDir)) {\n      const isTree = TREE_NAME.test(name);\n      const isPartial = name.startsWith(\"tree-\") && name.includes(\".partial-\");\n      if (!isTree && !isPartial) continue;\n      if (isTree && (name === `tree-${state.served}` || name === `tree-${state.extracted}`))\n        continue;\n      const full = join(workDir, name);\n      const stat = lstatSync(full);\n      if (stat.isDirectory() && !stat.isSymbolicLink())\n        rmSync(full, { recursive: true, force: true });\n    }\n  }\n\n  async function load(): Promise<Loaded> {\n    ensureWorkDir();\n    let state = readState();\n    if (state !== undefined && (state.repository !== repository || state.branch !== branch)) {\n      resetWorkDir(\"the configuration names another repository or branch\");\n      state = undefined;\n    }\n    seedAttempted(state);\n    if (firstLoad) {\n      firstLoad = false;\n      const onDisk = servedOnDisk(state);\n      if (onDisk !== undefined) {\n        fromDisk = true;\n        return onDisk;\n      }\n    }\n    transportConfig = sshBatchSetting(runner.env, await configuredSshCommand());\n    if (!existsSync(join(repoDir, \"HEAD\"))) {\n      rmSync(repoDir, { recursive: true, force: true });\n      try {\n        await clone();\n      } catch (error) {\n        throw failure(\"cloned\", error);\n      }\n    }\n    try {\n      await fetch();\n    } catch (error) {\n      // A lock file a killed git left behind, or a clone git itself can no longer read: both are derived, so a\n      // fresh clone replaces them; any other failure (the network, the credential) is reported as it is.\n      if (staleLock(error)) recloneRepo(\"a lock file was left behind by a killed git\");\n      else if (!(await cloneReadable())) recloneRepo(\"the clone could not be read\");\n      else throw failure(\"fetched\", error);\n      try {\n        await clone();\n        await fetch();\n      } catch (again) {\n        throw failure(\"fetched\", again);\n      }\n    }\n    let commit: string;\n    try {\n      commit = await resolveCommit();\n    } catch (error) {\n      throw error instanceof SourceError ? error : failure(\"read\", error);\n    }\n    const fetchedAt = clock();\n    const base: State = { repository, branch, ...(state ?? {}) };\n    // What was attempted is recorded when a commit is refused or served, never here (bite 5 review M1): a\n    // commit the runtime fails to index must look moved to the poller until it is served.\n    if (state?.extracted === commit && treeExists(commit)) {\n      writeState({ ...base, fetchedAt: fetchedAt.toISOString() });\n      return walkTree(commit, fetchedAt, false);\n    }\n    const listing = await list(commit).catch((error: unknown) => {\n      throw failure(\"read\", error);\n    });\n    const refused = (refusal: Refusal): Loaded => {\n      attempted = commit;\n      writeState({ ...base, fetchedAt: fetchedAt.toISOString() });\n      return { walk: emptyWalk(refusal), published: { commit, fetchedAt }, fresh: false };\n    };\n    if (\"refusal\" in listing) return refused(listing.refusal);\n    const refusal = validateTree(listing.entries, caps, bundlePath);\n    if (refusal !== undefined) return refused(refusal);\n    await extract(commit, listing.entries);\n    const next: State = {\n      ...base,\n      extracted: commit,\n      extractedAt: fetchedAt.toISOString(),\n      fetchedAt: fetchedAt.toISOString(),\n    };\n    writeState(next);\n    // Trees the loader refused would pile up otherwise: keep the served one and this one (bite 5 review BR16).\n    prune(next);\n    return walkTree(commit, fetchedAt, true);\n  }\n\n  return {\n    kind: \"git\",\n    workDir,\n    load,\n    loadServed: async () => servedOnDisk(readState()),\n    served: (commit) => {\n      attempted = commit;\n      const current = readState();\n      const state: State = { repository, branch, ...(current ?? {}), served: commit };\n      if (current?.extracted === commit && current.extractedAt !== undefined)\n        state.servedFetchedAt = current.extractedAt;\n      writeState(state);\n      prune(state);\n    },\n    discard: (commit) => {\n      if (!COMMIT.test(commit) || !treeExists(commit)) return;\n      rmSync(treeDir(commit), { recursive: true, force: true });\n      const current = readState();\n      if (current?.extracted === commit) {\n        const { extracted: _e, extractedAt: _a, ...rest } = current;\n        writeState(rest);\n      }\n    },\n    changed: async (): Promise<RemoteChange> => {\n      if (!existsSync(join(repoDir, \"HEAD\"))) return \"moved\";\n      let result: Awaited<ReturnType<GitRunner[\"run\"]>>;\n      try {\n        result = await runner.run([\"ls-remote\", \"--\", \"origin\", `refs/heads/${branch}`], {\n          cwd: workDir,\n          gitDir: repoDir,\n          timeoutMs: TIMEOUT_MS.lsRemote,\n          extraConfig: transportConfig,\n        });\n      } catch (error) {\n        throw failure(\"asked\", error);\n      }\n      const line = result.stdout\n        .toString(\"utf8\")\n        .split(\"\\n\")\n        .find((l) => l.endsWith(`\\trefs/heads/${branch}`));\n      if (line === undefined) return \"gone\";\n      const remote = line.split(\"\\t\")[0] ?? \"\";\n      seedAttempted(readState());\n      return remote === attempted ? \"same\" : \"moved\";\n    },\n    describe: () => described,\n    abort: () => runner.abort(),\n    startedFromDisk: () => fromDisk,\n  };\n}\n"]}

package/dist/source/local.js

@@ -0,0 +1,20 @@
+import { walkBundle } from "../fs/walk.js";
+export function createLocalSource(source, caps) {
+    return {
+        kind: "local",
+        load: async () => {
+            try {
+                return { walk: walkBundle(source.path, caps) };
+            }
+            catch (error) {
+                // The model is told the source as configured; the resolved path travels as detail, for the log only.
+                const original = error.message;
+                const described = new Error(original.split(source.path).join(source.configured));
+                described.detail = original;
+                throw described;
+            }
+        },
+        describe: () => source.configured,
+    };
+}
+//# sourceMappingURL=local.js.map

package/dist/source/local.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"local.js","sourceRoot":"","sources":["../../src/source/local.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAQ3C,MAAM,UAAU,iBAAiB,CAC/B,MAA4C,EAC5C,IAAU;IAEV,OAAO;QACL,IAAI,EAAE,OAAO;QACb,IAAI,EAAE,KAAK,IAAqB,EAAE;YAChC,IAAI,CAAC;gBACH,OAAO,EAAE,IAAI,EAAE,UAAU,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC;YACjD,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,qGAAqG;gBACrG,MAAM,QAAQ,GAAI,KAAe,CAAC,OAAO,CAAC;gBAC1C,MAAM,SAAS,GAAG,IAAI,KAAK,CACzB,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,CAGpD,CAAC;gBACF,SAAS,CAAC,MAAM,GAAG,QAAQ,CAAC;gBAC5B,MAAM,SAAS,CAAC;YAClB,CAAC;QACH,CAAC;QACD,QAAQ,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,UAAU;KAClC,CAAC;AACJ,CAAC","sourcesContent":["import type { Caps } from \"../bundle/model.js\";\nimport { walkBundle } from \"../fs/walk.js\";\nimport type { Loaded, Source } from \"./source.js\";\n\n/** A bundle folder on disk, walked afresh on every load. */\nexport interface LocalSource extends Source {\n  kind: \"local\";\n}\n\nexport function createLocalSource(\n  source: { path: string; configured: string },\n  caps: Caps,\n): LocalSource {\n  return {\n    kind: \"local\",\n    load: async (): Promise<Loaded> => {\n      try {\n        return { walk: walkBundle(source.path, caps) };\n      } catch (error) {\n        // The model is told the source as configured; the resolved path travels as detail, for the log only.\n        const original = (error as Error).message;\n        const described = new Error(\n          original.split(source.path).join(source.configured),\n        ) as Error & {\n          detail?: string;\n        };\n        described.detail = original;\n        throw described;\n      }\n    },\n    describe: () => source.configured,\n  };\n}\n"]}

package/dist/source/source.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=source.js.map

package/dist/source/source.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"source.js","sourceRoot":"","sources":["../../src/source/source.ts"],"names":[],"mappings":"","sourcesContent":["import type { WalkResult } from \"../fs/walk.js\";\n\n/** What a load produced: the walked files, and for a repository source the fetched commit and when. */\nexport interface Loaded {\n  walk: WalkResult;\n  published?: { commit: string; fetchedAt: Date };\n  /** Whether the tree was extracted by this load, or reused from disk (a reused tree the loader refuses is discarded). */\n  fresh?: boolean;\n}\n\nexport type RemoteChange = \"same\" | \"moved\" | \"gone\";\n\n/**\n * Where a bundle comes from. `load()` is the whole fetch-and-walk; a repository source also remembers which tree\n * is served, can hand it back when a fresh load fails, can say whether the remote moved, and can be aborted.\n */\nexport interface Source {\n  readonly kind: \"local\" | \"git\";\n  load(): Promise<Loaded>;\n  /** The tree last served, from disk; undefined when there is none. */\n  loadServed?(): Promise<Loaded | undefined>;\n  /** Told after each swap which commit is served, so older trees can go. */\n  served?(commit: string): void;\n  /** Removes an extracted tree the loader refused, so the next load extracts it again. */\n  discard?(commit: string): void;\n  /** Whether the remote moved since the last attempted commit; throws when it cannot be asked. */\n  changed?(): Promise<RemoteChange>;\n  /** The source as configured, never a resolved or cache path, never a credential. */\n  describe(): string;\n  /** Ends any transport command in flight. */\n  abort?(): void;\n}\n"]}