Login
Hex Artifact Content
Login

Artifact 92def17749b7c04ee2945a7f673410d50f90e8ee9c0d2e5810cd1eafdd4c1d3b:

Attachment "scripts-for-review.tar" to tech note [bae6999eb9] added by opus-ocx2 2026-10-28 23:11:24.
0000: 73 63 72 69 70 74 73 2d 66 6f 72 2d 72 65 76 69  scripts-for-revi
0010: 65 77 2f 00 00 00 00 00 00 00 00 00 00 00 00 00  ew/.............
0020: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
0030: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
0040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
0050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
0060: 00 00 00 00 30 30 30 30 37 35 35 00 30 30 30 30  ....0000755.0000
0070: 30 30 30 00 30 30 30 30 30 30 30 00 30 30 30 30  000.0000000.0000
0080: 30 30 30 30 30 30 30 00 31 35 32 37 30 35 30 30  0000000.15270500
0090: 34 33 34 00 30 31 33 33 32 36 00 20 35 00 00 00  434.013326. 5...
00a0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00b0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00c0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00d0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00e0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00f0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
0100: 00 75 73 74 61 72 20 20 00 72 6f 6f 74 00 00 00  .ustar  .root...
0110: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
0120: 00 00 00 00 00 00 00 00 00 72 6f 6f 74 00 00 00  .........root...
0130: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
0140: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
0150: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
0160: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
0170: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
0180: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
0190: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
01a0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
01b0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
01c0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
01d0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
01e0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
01f0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
0200: 73 63 72 69 70 74 73 2d 66 6f 72 2d 72 65 76 69  scripts-for-revi
0210: 65 77 2f 73 74 61 72 74 2d 6f 63 78 2e 63 72 00  ew/start-ocx.cr.
0220: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
0230: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
0240: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
0250: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
0260: 00 00 00 00 30 30 30 30 36 34 34 00 30 30 30 30  ....0000644.0000
0270: 30 30 30 00 30 30 30 30 30 30 30 00 30 30 30 30  000.0000000.0000
0280: 30 30 32 32 34 30 33 00 31 35 32 37 30 35 30 30  0022403.15270500
0290: 34 33 34 00 30 31 35 36 30 31 00 20 30 00 00 00  434.015601. 0...
02a0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
02b0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
02c0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
02d0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
02e0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
02f0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
0300: 00 75 73 74 61 72 20 20 00 72 6f 6f 74 00 00 00  .ustar  .root...
0310: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
0320: 00 00 00 00 00 00 00 00 00 72 6f 6f 74 00 00 00  .........root...
0330: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
0340: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
0350: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
0360: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
0370: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
0380: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
0390: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
03a0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
03b0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
03c0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
03d0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
03e0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
03f0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
0400: 23 20 41 67 65 6e 74 73 3a 20 64 6f 20 6e 6f 74  # Agents: do not
0410: 20 63 68 61 6e 67 65 20 74 68 69 73 20 66 69 6c   change this fil
0420: 65 20 6f 6e 20 61 6e 79 20 62 72 61 6e 63 68 20  e on any branch 
0430: 77 69 74 68 6f 75 74 20 74 68 65 20 6d 61 69 6e  without the main
0440: 74 61 69 6e 65 72 27 73 20 65 78 70 6c 69 63 69  tainer's explici
0450: 74 20 61 70 70 72 6f 76 61 6c 20 6f 6e 20 74 68  t approval on th
0460: 65 20 72 65 63 6f 72 64 2e 0a 23 20 53 65 6c 66  e record..# Self
0470: 2d 63 6f 6e 74 61 69 6e 65 64 20 68 6f 73 74 20  -contained host 
0480: 6c 61 75 6e 63 68 65 72 3a 20 6f 6e 6c 79 20 74  launcher: only t
0490: 68 65 20 70 61 74 68 73 20 62 65 6c 6f 77 2c 20  he paths below, 
04a0: 72 65 6c 65 61 73 65 20 6c 69 6e 6b 73 2c 20 2f  release links, /
04b0: 70 72 6f 63 2f 73 65 6c 66 2f 66 64 2c 0a 23 20  proc/self/fd,.# 
04c0: 65 78 65 63 75 74 61 62 6c 65 20 6c 6f 63 61 74  executable locat
04d0: 69 6f 6e 2c 20 65 78 69 73 74 69 6e 67 20 68 6f  ion, existing ho
04e0: 6d 65 20 70 61 74 68 73 20 61 6e 64 20 46 6f 73  me paths and Fos
04f0: 73 69 6c 27 73 20 43 47 49 20 65 6e 76 69 72 6f  sil's CGI enviro
0500: 6e 6d 65 6e 74 20 61 72 65 20 72 65 61 64 2e 0a  nment are read..
0510: 23 20 42 75 69 6c 64 20 62 65 73 69 64 65 20 72  # Build beside r
0520: 65 63 65 69 70 74 73 20 77 69 74 68 20 60 73 68  eceipts with `sh
0530: 61 72 64 73 20 62 75 69 6c 64 20 73 74 61 72 74  ards build start
0540: 2d 6f 63 78 20 72 65 63 65 69 70 74 73 60 20 69  -ocx receipts` i
0550: 6e 20 61 20 63 68 65 63 6b 6f 75 74 2e 0a 72 65  n a checkout..re
0560: 71 75 69 72 65 20 22 6a 73 6f 6e 22 0a 72 65 71  quire "json".req
0570: 75 69 72 65 20 22 73 6f 63 6b 65 74 22 0a 0a 6c  uire "socket"..l
0580: 69 62 20 4c 69 62 43 0a 20 20 66 75 6e 20 65 78  ib LibC.  fun ex
0590: 65 63 76 28 70 61 74 68 20 3a 20 43 68 61 72 2a  ecv(path : Char*
05a0: 2c 20 61 72 67 76 20 3a 20 43 68 61 72 2a 2a 29  , argv : Char**)
05b0: 20 3a 20 49 6e 74 0a 65 6e 64 0a 0a 6d 6f 64 75   : Int.end..modu
05c0: 6c 65 20 53 74 61 72 74 4f 43 58 0a 20 20 4c 49  le StartOCX.  LI
05d0: 56 45 5f 48 4f 53 54 20 20 20 20 20 20 20 20 20  VE_HOST         
05e0: 3d 20 22 69 70 2d 31 37 32 2d 33 31 2d 31 37 2d  = "ip-172-31-17-
05f0: 31 37 37 2e 75 73 2d 77 65 73 74 2d 32 2e 63 6f  177.us-west-2.co
0600: 6d 70 75 74 65 2e 69 6e 74 65 72 6e 61 6c 22 0a  mpute.internal".
0610: 20 20 4c 49 56 45 5f 52 45 50 4f 53 49 54 4f 52    LIVE_REPOSITOR
0620: 49 45 53 20 3d 20 22 2f 76 61 72 2f 6c 69 62 2f  IES = "/var/lib/
0630: 66 6f 73 73 69 6c 22 0a 20 20 4c 49 56 45 5f 53  fossil".  LIVE_S
0640: 4f 43 4b 45 54 5f 44 49 52 20 20 20 3d 20 22 2f  OCKET_DIR   = "/
0650: 72 75 6e 2f 6f 63 78 22 0a 20 20 4c 49 56 45 5f  run/ocx".  LIVE_
0660: 52 45 4c 45 41 53 45 20 20 20 20 20 20 3d 20 22  RELEASE      = "
0670: 2f 76 61 72 2f 6c 69 62 2f 6f 63 78 2f 72 65 6c  /var/lib/ocx/rel
0680: 65 61 73 65 32 22 0a 20 20 4c 49 56 45 5f 44 41  ease2".  LIVE_DA
0690: 45 4d 4f 4e 20 20 20 20 20 20 20 3d 20 22 2f 76  EMON       = "/v
06a0: 61 72 2f 6c 69 62 2f 6f 63 78 2f 61 67 65 6e 74  ar/lib/ocx/agent
06b0: 73 2d 64 61 65 6d 6f 6e 22 0a 20 20 23 20 74 68  s-daemon".  # th
06c0: 65 20 64 61 65 6d 6f 6e 27 73 20 61 63 63 6f 75  e daemon's accou
06d0: 6e 74 20 6b 65 65 70 73 20 69 74 73 20 68 6f 6d  nt keeps its hom
06e0: 65 73 20 68 65 72 65 3b 20 69 6e 73 69 64 65 20  es here; inside 
06f0: 69 74 73 20 6e 61 6d 65 73 70 61 63 65 20 74 68  its namespace th
0700: 65 79 20 61 72 65 20 61 74 0a 20 20 23 20 2f 72  ey are at.  # /r
0710: 6f 6f 74 2c 20 77 68 65 72 65 20 72 75 6e 73 27  oot, where runs'
0720: 20 70 61 74 74 65 72 6e 73 20 61 6e 64 20 72 2d   patterns and r-
0730: 73 65 6e 64 65 72 73 2e 6a 73 6f 6e 20 6e 61 6d  senders.json nam
0740: 65 20 74 68 65 6d 0a 20 20 4c 49 56 45 5f 48 4f  e them.  LIVE_HO
0750: 4d 45 5f 53 4f 55 52 43 45 20 3d 20 22 2f 68 6f  ME_SOURCE = "/ho
0760: 6d 65 2f 6f 63 78 22 0a 20 20 4c 49 56 45 5f 48  me/ocx".  LIVE_H
0770: 4f 4d 45 20 20 20 20 20 20 20 20 3d 20 22 2f 72  OME        = "/r
0780: 6f 6f 74 22 0a 20 20 43 47 49 5f 46 49 45 4c 44  oot".  CGI_FIELD
0790: 53 20 20 20 20 20 20 20 3d 20 25 77 28 52 45 51  S       = %w(REQ
07a0: 55 45 53 54 5f 4d 45 54 48 4f 44 20 51 55 45 52  UEST_METHOD QUER
07b0: 59 5f 53 54 52 49 4e 47 20 50 41 54 48 5f 49 4e  Y_STRING PATH_IN
07c0: 46 4f 20 43 4f 4e 54 45 4e 54 5f 4c 45 4e 47 54  FO CONTENT_LENGT
07d0: 48 20 43 4f 4e 54 45 4e 54 5f 54 59 50 45 20 48  H CONTENT_TYPE H
07e0: 54 54 50 53 20 48 54 54 50 5f 48 4f 53 54 20 48  TTPS HTTP_HOST H
07f0: 54 54 50 5f 52 45 46 45 52 45 52 20 46 4f 53 53  TTP_REFERER FOSS
0800: 49 4c 5f 55 53 45 52 20 46 4f 53 53 49 4c 5f 43  IL_USER FOSSIL_C
0810: 41 50 41 42 49 4c 49 54 49 45 53 20 46 4f 53 53  APABILITIES FOSS
0820: 49 4c 5f 55 52 49 29 0a 20 20 4c 49 42 52 41 52  IL_URI).  LIBRAR
0830: 49 45 53 20 20 20 20 20 20 20 20 3d 20 25 77 28  IES        = %w(
0840: 2f 6c 69 62 20 2f 6c 69 62 36 34 29 0a 20 20 44  /lib /lib64).  D
0850: 41 45 4d 4f 4e 5f 53 59 53 54 45 4d 20 20 20 20  AEMON_SYSTEM    
0860: 3d 20 25 77 28 2f 6c 69 62 20 2f 6c 69 62 36 34  = %w(/lib /lib64
0870: 20 2f 62 69 6e 20 2f 73 62 69 6e 20 2f 65 74 63   /bin /sbin /etc
0880: 2f 73 73 6c 20 2f 65 74 63 2f 70 6b 69 20 2f 65  /ssl /etc/pki /e
0890: 74 63 2f 72 65 73 6f 6c 76 2e 63 6f 6e 66 20 2f  tc/resolv.conf /
08a0: 65 74 63 2f 68 6f 73 74 73 20 2f 65 74 63 2f 6e  etc/hosts /etc/n
08b0: 73 73 77 69 74 63 68 2e 63 6f 6e 66 20 2f 65 74  sswitch.conf /et
08c0: 63 2f 70 61 73 73 77 64 20 2f 65 74 63 2f 67 72  c/passwd /etc/gr
08d0: 6f 75 70 29 0a 0a 20 20 23 20 65 61 63 68 20 68  oup)..  # each h
08e0: 6f 6d 65 3a 20 77 68 65 72 65 20 74 68 65 20 61  ome: where the a
08f0: 63 63 6f 75 6e 74 20 6b 65 65 70 73 20 69 74 2c  ccount keeps it,
0900: 20 77 68 65 72 65 20 74 68 65 20 64 61 65 6d 6f   where the daemo
0910: 6e 20 73 65 65 73 20 69 74 2c 20 61 6e 64 20 77  n sees it, and w
0920: 68 65 74 68 65 72 20 69 74 20 6d 61 79 20 77 72  hether it may wr
0930: 69 74 65 20 74 68 65 72 65 0a 20 20 72 65 63 6f  ite there.  reco
0940: 72 64 20 50 61 74 68 73 2c 20 72 65 70 6f 73 69  rd Paths, reposi
0950: 74 6f 72 69 65 73 20 3a 20 53 74 72 69 6e 67 2c  tories : String,
0960: 20 73 6f 63 6b 65 74 5f 64 69 72 20 3a 20 53 74   socket_dir : St
0970: 72 69 6e 67 2c 20 72 65 6c 65 61 73 65 20 3a 20  ring, release : 
0980: 53 74 72 69 6e 67 2c 20 64 61 65 6d 6f 6e 20 3a  String, daemon :
0990: 20 53 74 72 69 6e 67 2c 20 68 6f 6d 65 20 3a 20   String, home : 
09a0: 53 74 72 69 6e 67 2c 20 68 6f 6d 65 73 20 3a 20  String, homes : 
09b0: 41 72 72 61 79 28 54 75 70 6c 65 28 53 74 72 69  Array(Tuple(Stri
09c0: 6e 67 2c 20 53 74 72 69 6e 67 2c 20 42 6f 6f 6c  ng, String, Bool
09d0: 29 29 20 64 6f 0a 20 20 20 20 64 65 66 20 73 6f  )) do.    def so
09e0: 63 6b 65 74 20 3a 20 53 74 72 69 6e 67 0a 20 20  cket : String.  
09f0: 20 20 20 20 46 69 6c 65 2e 6a 6f 69 6e 28 73 6f      File.join(so
0a00: 63 6b 65 74 5f 64 69 72 2c 20 22 72 65 63 65 69  cket_dir, "recei
0a10: 70 74 73 2e 73 6f 63 6b 22 29 0a 20 20 20 20 65  pts.sock").    e
0a20: 6e 64 0a 20 20 65 6e 64 0a 0a 20 20 64 65 66 20  nd.  end..  def 
0a30: 73 65 6c 66 2e 70 61 74 68 73 28 73 63 72 61 74  self.paths(scrat
0a40: 63 68 20 3a 20 53 74 72 69 6e 67 3f 2c 20 68 6f  ch : String?, ho
0a50: 73 74 20 3a 20 53 74 72 69 6e 67 29 20 3a 20 50  st : String) : P
0a60: 61 74 68 73 0a 20 20 20 20 69 66 20 73 63 72 61  aths.    if scra
0a70: 74 63 68 0a 20 20 20 20 20 20 72 61 69 73 65 20  tch.      raise 
0a80: 41 72 67 75 6d 65 6e 74 45 72 72 6f 72 2e 6e 65  ArgumentError.ne
0a90: 77 28 22 73 63 72 61 74 63 68 20 64 69 72 65 63  w("scratch direc
0aa0: 74 6f 72 79 20 6d 75 73 74 20 62 65 20 61 62 73  tory must be abs
0ab0: 6f 6c 75 74 65 22 29 20 75 6e 6c 65 73 73 20 73  olute") unless s
0ac0: 63 72 61 74 63 68 2e 73 74 61 72 74 73 5f 77 69  cratch.starts_wi
0ad0: 74 68 3f 28 22 2f 22 29 0a 20 20 20 20 20 20 72  th?("/").      r
0ae0: 6f 6f 74 20 3d 20 46 69 6c 65 2e 65 78 70 61 6e  oot = File.expan
0af0: 64 5f 70 61 74 68 28 73 63 72 61 74 63 68 29 0a  d_path(scratch).
0b00: 20 20 20 20 20 20 68 6f 6d 65 20 3d 20 46 69 6c        home = Fil
0b10: 65 2e 6a 6f 69 6e 28 72 6f 6f 74 2c 20 22 68 6f  e.join(root, "ho
0b20: 6d 65 22 29 0a 20 20 20 20 20 20 50 61 74 68 73  me").      Paths
0b30: 2e 6e 65 77 28 46 69 6c 65 2e 6a 6f 69 6e 28 72  .new(File.join(r
0b40: 6f 6f 74 2c 20 22 66 6f 73 73 69 6c 22 29 2c 20  oot, "fossil"), 
0b50: 46 69 6c 65 2e 6a 6f 69 6e 28 72 6f 6f 74 2c 20  File.join(root, 
0b60: 22 72 75 6e 22 29 2c 20 46 69 6c 65 2e 6a 6f 69  "run"), File.joi
0b70: 6e 28 72 6f 6f 74 2c 20 22 72 65 6c 65 61 73 65  n(root, "release
0b80: 22 29 2c 20 46 69 6c 65 2e 6a 6f 69 6e 28 72 6f  "), File.join(ro
0b90: 6f 74 2c 20 22 64 61 65 6d 6f 6e 22 29 2c 20 68  ot, "daemon"), h
0ba0: 6f 6d 65 2c 20 5b 7b 46 69 6c 65 2e 6a 6f 69 6e  ome, [{File.join
0bb0: 28 68 6f 6d 65 2c 20 22 2e 63 6f 64 65 78 22 29  (home, ".codex")
0bc0: 2c 20 46 69 6c 65 2e 6a 6f 69 6e 28 68 6f 6d 65  , File.join(home
0bd0: 2c 20 22 2e 63 6f 64 65 78 22 29 2c 20 74 72 75  , ".codex"), tru
0be0: 65 7d 5d 29 0a 20 20 20 20 65 6c 73 69 66 20 68  e}]).    elsif h
0bf0: 6f 73 74 20 3d 3d 20 4c 49 56 45 5f 48 4f 53 54  ost == LIVE_HOST
0c00: 0a 20 20 20 20 20 20 50 61 74 68 73 2e 6e 65 77  .      Paths.new
0c10: 28 4c 49 56 45 5f 52 45 50 4f 53 49 54 4f 52 49  (LIVE_REPOSITORI
0c20: 45 53 2c 20 4c 49 56 45 5f 53 4f 43 4b 45 54 5f  ES, LIVE_SOCKET_
0c30: 44 49 52 2c 20 4c 49 56 45 5f 52 45 4c 45 41 53  DIR, LIVE_RELEAS
0c40: 45 2c 20 4c 49 56 45 5f 44 41 45 4d 4f 4e 2c 20  E, LIVE_DAEMON, 
0c50: 4c 49 56 45 5f 48 4f 4d 45 2c 0a 20 20 20 20 20  LIVE_HOME,.     
0c60: 20 20 20 5b 22 2e 63 6f 64 65 78 22 2c 20 22 2e     [".codex", ".
0c70: 63 6c 61 75 64 65 22 2c 20 22 2e 63 6c 61 75 64  claude", ".claud
0c80: 65 2e 6a 73 6f 6e 22 5d 2e 6d 61 70 20 7b 20 7c  e.json"].map { |
0c90: 68 7c 20 7b 46 69 6c 65 2e 6a 6f 69 6e 28 4c 49  h| {File.join(LI
0ca0: 56 45 5f 48 4f 4d 45 5f 53 4f 55 52 43 45 2c 20  VE_HOME_SOURCE, 
0cb0: 68 29 2c 20 46 69 6c 65 2e 6a 6f 69 6e 28 4c 49  h), File.join(LI
0cc0: 56 45 5f 48 4f 4d 45 2c 20 68 29 2c 20 74 72 75  VE_HOME, h), tru
0cd0: 65 7d 20 7d 20 2b 0a 20 20 20 20 20 20 20 20 5b  e} } +.        [
0ce0: 7b 46 69 6c 65 2e 6a 6f 69 6e 28 4c 49 56 45 5f  {File.join(LIVE_
0cf0: 48 4f 4d 45 5f 53 4f 55 52 43 45 2c 20 22 2e 6c  HOME_SOURCE, ".l
0d00: 6f 63 61 6c 22 29 2c 20 46 69 6c 65 2e 6a 6f 69  ocal"), File.joi
0d10: 6e 28 4c 49 56 45 5f 48 4f 4d 45 2c 20 22 2e 6c  n(LIVE_HOME, ".l
0d20: 6f 63 61 6c 22 29 2c 20 66 61 6c 73 65 7d 5d 29  ocal"), false}])
0d30: 0a 20 20 20 20 65 6c 73 65 0a 20 20 20 20 20 20  .    else.      
0d40: 72 61 69 73 65 20 41 72 67 75 6d 65 6e 74 45 72  raise ArgumentEr
0d50: 72 6f 72 2e 6e 65 77 28 22 75 6e 6b 6e 6f 77 6e  ror.new("unknown
0d60: 20 68 6f 73 74 3b 20 75 73 65 20 2d 2d 73 63 72   host; use --scr
0d70: 61 74 63 68 20 44 49 52 22 29 0a 20 20 20 20 65  atch DIR").    e
0d80: 6e 64 0a 20 20 65 6e 64 0a 0a 20 20 23 20 54 68  nd.  end..  # Th
0d90: 65 73 65 20 74 68 72 65 65 20 62 75 69 6c 64 65  ese three builde
0da0: 72 73 20 72 65 61 64 20 6e 6f 74 68 69 6e 67 3a  rs read nothing:
0db0: 20 74 68 65 69 72 20 66 75 6c 6c 20 61 72 67 75   their full argu
0dc0: 6d 65 6e 74 20 6c 69 73 74 73 20 63 61 6e 20 62  ment lists can b
0dd0: 65 20 69 6e 73 70 65 63 74 65 64 2e 0a 20 20 64  e inspected..  d
0de0: 65 66 20 73 65 6c 66 2e 63 67 69 5f 61 72 67 73  ef self.cgi_args
0df0: 28 72 65 6c 65 61 73 65 20 3a 20 53 74 72 69 6e  (release : Strin
0e00: 67 2c 20 72 65 70 6f 73 69 74 6f 72 79 20 3a 20  g, repository : 
0e10: 53 74 72 69 6e 67 2c 20 65 6e 76 69 72 6f 6e 6d  String, environm
0e20: 65 6e 74 20 3a 20 48 61 73 68 28 53 74 72 69 6e  ent : Hash(Strin
0e30: 67 2c 20 53 74 72 69 6e 67 29 29 20 3a 20 41 72  g, String)) : Ar
0e40: 72 61 79 28 53 74 72 69 6e 67 29 0a 20 20 20 20  ray(String).    
0e50: 61 72 67 73 20 3d 20 25 77 28 2d 2d 75 6e 73 68  args = %w(--unsh
0e60: 61 72 65 2d 61 6c 6c 20 2d 2d 64 69 65 2d 77 69  are-all --die-wi
0e70: 74 68 2d 70 61 72 65 6e 74 20 2d 2d 6e 65 77 2d  th-parent --new-
0e80: 73 65 73 73 69 6f 6e 20 2d 2d 63 6c 65 61 72 65  session --cleare
0e90: 6e 76 20 2d 2d 72 6f 2d 62 69 6e 64 20 2f 75 73  nv --ro-bind /us
0ea0: 72 20 2f 75 73 72 29 0a 20 20 20 20 28 4c 49 42  r /usr).    (LIB
0eb0: 52 41 52 49 45 53 20 2b 20 5b 22 2f 62 69 6e 22  RARIES + ["/bin"
0ec0: 2c 20 22 2f 65 74 63 2f 70 61 73 73 77 64 22 5d  , "/etc/passwd"]
0ed0: 29 2e 65 61 63 68 20 7b 20 7c 70 61 74 68 7c 20  ).each { |path| 
0ee0: 61 72 67 73 2e 63 6f 6e 63 61 74 28 5b 22 2d 2d  args.concat(["--
0ef0: 72 6f 2d 62 69 6e 64 2d 74 72 79 22 2c 20 70 61  ro-bind-try", pa
0f00: 74 68 2c 20 70 61 74 68 5d 29 20 7d 0a 20 20 20  th, path]) }.   
0f10: 20 61 72 67 73 2e 63 6f 6e 63 61 74 28 5b 22 2d   args.concat(["-
0f20: 2d 70 72 6f 63 22 2c 20 22 2f 70 72 6f 63 22 2c  -proc", "/proc",
0f30: 20 22 2d 2d 64 65 76 22 2c 20 22 2f 64 65 76 22   "--dev", "/dev"
0f40: 2c 20 22 2d 2d 74 6d 70 66 73 22 2c 20 22 2f 74  , "--tmpfs", "/t
0f50: 6d 70 22 2c 20 22 2d 2d 72 6f 2d 62 69 6e 64 22  mp", "--ro-bind"
0f60: 2c 20 46 69 6c 65 2e 6a 6f 69 6e 28 72 65 6c 65  , File.join(rele
0f70: 61 73 65 2c 20 22 6f 63 78 32 22 29 2c 20 22 2f  ase, "ocx2"), "/
0f80: 72 65 6c 65 61 73 65 2f 6f 63 78 32 2d 63 67 69  release/ocx2-cgi
0f90: 22 5d 29 0a 20 20 20 20 43 47 49 5f 46 49 45 4c  "]).    CGI_FIEL
0fa0: 44 53 2e 65 61 63 68 20 64 6f 20 7c 6b 65 79 7c  DS.each do |key|
0fb0: 0a 20 20 20 20 20 20 69 66 20 76 61 6c 75 65 20  .      if value 
0fc0: 3d 20 65 6e 76 69 72 6f 6e 6d 65 6e 74 5b 6b 65  = environment[ke
0fd0: 79 5d 3f 0a 20 20 20 20 20 20 20 20 61 72 67 73  y]?.        args
0fe0: 2e 63 6f 6e 63 61 74 28 5b 22 2d 2d 73 65 74 65  .concat(["--sete
0ff0: 6e 76 22 2c 20 6b 65 79 2c 20 76 61 6c 75 65 5d  nv", key, value]
1000: 29 0a 20 20 20 20 20 20 65 6e 64 0a 20 20 20 20  ).      end.    
1010: 65 6e 64 0a 20 20 20 20 61 72 67 73 2e 63 6f 6e  end.    args.con
1020: 63 61 74 28 5b 22 2d 2d 73 65 74 65 6e 76 22 2c  cat(["--setenv",
1030: 20 22 46 4f 53 53 49 4c 5f 52 45 50 4f 53 49 54   "FOSSIL_REPOSIT
1040: 4f 52 59 22 2c 20 72 65 70 6f 73 69 74 6f 72 79  ORY", repository
1050: 2c 20 22 2d 2d 73 65 74 65 6e 76 22 2c 20 22 50  , "--setenv", "P
1060: 41 54 48 22 2c 20 22 2f 75 73 72 2f 62 69 6e 22  ATH", "/usr/bin"
1070: 2c 20 22 2f 72 65 6c 65 61 73 65 2f 6f 63 78 32  , "/release/ocx2
1080: 2d 63 67 69 22 2c 20 22 2d 2d 72 65 63 65 69 70  -cgi", "--receip
1090: 74 2d 66 64 22 2c 20 22 33 22 5d 29 0a 20 20 65  t-fd", "3"]).  e
10a0: 6e 64 0a 0a 20 20 64 65 66 20 73 65 6c 66 2e 72  nd..  def self.r
10b0: 65 63 65 69 70 74 73 5f 61 72 67 73 28 70 61 74  eceipts_args(pat
10c0: 68 73 20 3a 20 50 61 74 68 73 2c 20 65 78 65 63  hs : Paths, exec
10d0: 75 74 61 62 6c 65 5f 64 69 72 20 3a 20 53 74 72  utable_dir : Str
10e0: 69 6e 67 29 20 3a 20 41 72 72 61 79 28 53 74 72  ing) : Array(Str
10f0: 69 6e 67 29 0a 20 20 20 20 61 72 67 73 20 3d 20  ing).    args = 
1100: 25 77 28 2d 2d 75 6e 73 68 61 72 65 2d 61 6c 6c  %w(--unshare-all
1110: 20 2d 2d 64 69 65 2d 77 69 74 68 2d 70 61 72 65   --die-with-pare
1120: 6e 74 20 2d 2d 6e 65 77 2d 73 65 73 73 69 6f 6e  nt --new-session
1130: 20 2d 2d 63 61 70 2d 64 72 6f 70 20 41 4c 4c 20   --cap-drop ALL 
1140: 2d 2d 63 6c 65 61 72 65 6e 76 20 2d 2d 72 6f 2d  --clearenv --ro-
1150: 62 69 6e 64 20 2f 75 73 72 20 2f 75 73 72 29 0a  bind /usr /usr).
1160: 20 20 20 20 4c 49 42 52 41 52 49 45 53 2e 65 61      LIBRARIES.ea
1170: 63 68 20 7b 20 7c 70 61 74 68 7c 20 61 72 67 73  ch { |path| args
1180: 2e 63 6f 6e 63 61 74 28 5b 22 2d 2d 72 6f 2d 62  .concat(["--ro-b
1190: 69 6e 64 2d 74 72 79 22 2c 20 70 61 74 68 2c 20  ind-try", path, 
11a0: 70 61 74 68 5d 29 20 7d 0a 20 20 20 20 61 72 67  path]) }.    arg
11b0: 73 2e 63 6f 6e 63 61 74 28 5b 22 2d 2d 64 65 76  s.concat(["--dev
11c0: 22 2c 20 22 2f 64 65 76 22 2c 20 22 2d 2d 74 6d  ", "/dev", "--tm
11d0: 70 66 73 22 2c 20 22 2f 74 6d 70 22 2c 20 22 2d  pfs", "/tmp", "-
11e0: 2d 72 6f 2d 62 69 6e 64 22 2c 20 70 61 74 68 73  -ro-bind", paths
11f0: 2e 72 65 70 6f 73 69 74 6f 72 69 65 73 2c 20 70  .repositories, p
1200: 61 74 68 73 2e 72 65 70 6f 73 69 74 6f 72 69 65  aths.repositorie
1210: 73 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20  s,.             
1220: 20 20 20 20 22 2d 2d 62 69 6e 64 22 2c 20 70 61      "--bind", pa
1230: 74 68 73 2e 73 6f 63 6b 65 74 5f 64 69 72 2c 20  ths.socket_dir, 
1240: 70 61 74 68 73 2e 73 6f 63 6b 65 74 5f 64 69 72  paths.socket_dir
1250: 2c 20 22 2d 2d 72 6f 2d 62 69 6e 64 22 2c 20 46  , "--ro-bind", F
1260: 69 6c 65 2e 6a 6f 69 6e 28 65 78 65 63 75 74 61  ile.join(executa
1270: 62 6c 65 5f 64 69 72 2c 20 22 72 65 63 65 69 70  ble_dir, "receip
1280: 74 73 22 29 2c 20 22 2f 72 65 63 65 69 70 74 73  ts"), "/receipts
1290: 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20  ",.             
12a0: 20 20 20 20 22 2f 72 65 63 65 69 70 74 73 22 2c      "/receipts",
12b0: 20 70 61 74 68 73 2e 73 6f 63 6b 65 74 2c 20 70   paths.socket, p
12c0: 61 74 68 73 2e 72 65 70 6f 73 69 74 6f 72 69 65  aths.repositorie
12d0: 73 5d 29 0a 20 20 65 6e 64 0a 0a 20 20 64 65 66  s]).  end..  def
12e0: 20 73 65 6c 66 2e 64 61 65 6d 6f 6e 5f 61 72 67   self.daemon_arg
12f0: 73 28 70 61 74 68 73 20 3a 20 50 61 74 68 73 2c  s(paths : Paths,
1300: 20 68 6f 6d 65 73 20 3a 20 41 72 72 61 79 28 54   homes : Array(T
1310: 75 70 6c 65 28 53 74 72 69 6e 67 2c 20 53 74 72  uple(String, Str
1320: 69 6e 67 2c 20 42 6f 6f 6c 29 29 29 20 3a 20 41  ing, Bool))) : A
1330: 72 72 61 79 28 53 74 72 69 6e 67 29 0a 20 20 20  rray(String).   
1340: 20 61 72 67 73 20 3d 20 5b 22 2d 2d 75 6e 73 68   args = ["--unsh
1350: 61 72 65 2d 75 73 65 72 22 2c 20 22 2d 2d 75 6e  are-user", "--un
1360: 73 68 61 72 65 2d 69 70 63 22 2c 20 22 2d 2d 75  share-ipc", "--u
1370: 6e 73 68 61 72 65 2d 75 74 73 22 2c 20 22 2d 2d  nshare-uts", "--
1380: 63 6c 65 61 72 65 6e 76 22 2c 20 22 2d 2d 73 65  clearenv", "--se
1390: 74 65 6e 76 22 2c 20 22 48 4f 4d 45 22 2c 20 70  tenv", "HOME", p
13a0: 61 74 68 73 2e 68 6f 6d 65 2c 0a 20 20 20 20 20  aths.home,.     
13b0: 20 20 20 20 20 20 20 22 2d 2d 73 65 74 65 6e 76         "--setenv
13c0: 22 2c 20 22 50 41 54 48 22 2c 20 22 2f 75 73 72  ", "PATH", "/usr
13d0: 2f 62 69 6e 3a 2f 62 69 6e 22 2c 20 22 2d 2d 72  /bin:/bin", "--r
13e0: 6f 2d 62 69 6e 64 22 2c 20 22 2f 75 73 72 22 2c  o-bind", "/usr",
13f0: 20 22 2f 75 73 72 22 5d 0a 20 20 20 20 44 41 45   "/usr"].    DAE
1400: 4d 4f 4e 5f 53 59 53 54 45 4d 2e 65 61 63 68 20  MON_SYSTEM.each 
1410: 7b 20 7c 70 61 74 68 7c 20 61 72 67 73 2e 63 6f  { |path| args.co
1420: 6e 63 61 74 28 5b 22 2d 2d 72 6f 2d 62 69 6e 64  ncat(["--ro-bind
1430: 2d 74 72 79 22 2c 20 70 61 74 68 2c 20 70 61 74  -try", path, pat
1440: 68 5d 29 20 7d 0a 20 20 20 20 61 72 67 73 2e 63  h]) }.    args.c
1450: 6f 6e 63 61 74 28 5b 22 2d 2d 70 72 6f 63 22 2c  oncat(["--proc",
1460: 20 22 2f 70 72 6f 63 22 2c 20 22 2d 2d 64 65 76   "/proc", "--dev
1470: 22 2c 20 22 2f 64 65 76 22 2c 20 22 2d 2d 74 6d  ", "/dev", "--tm
1480: 70 66 73 22 2c 20 22 2f 74 6d 70 22 2c 20 22 2d  pfs", "/tmp", "-
1490: 2d 74 6d 70 66 73 22 2c 20 70 61 74 68 73 2e 68  -tmpfs", paths.h
14a0: 6f 6d 65 5d 29 0a 20 20 20 20 68 6f 6d 65 73 2e  ome]).    homes.
14b0: 65 61 63 68 20 7b 20 7c 73 6f 75 72 63 65 2c 20  each { |source, 
14c0: 64 65 73 74 2c 20 77 72 69 74 61 62 6c 65 7c 20  dest, writable| 
14d0: 61 72 67 73 2e 63 6f 6e 63 61 74 28 5b 77 72 69  args.concat([wri
14e0: 74 61 62 6c 65 20 3f 20 22 2d 2d 62 69 6e 64 2d  table ? "--bind-
14f0: 74 72 79 22 20 3a 20 22 2d 2d 72 6f 2d 62 69 6e  try" : "--ro-bin
1500: 64 2d 74 72 79 22 2c 20 73 6f 75 72 63 65 2c 20  d-try", source, 
1510: 64 65 73 74 5d 29 20 7d 0a 20 20 20 20 61 72 67  dest]) }.    arg
1520: 73 2e 63 6f 6e 63 61 74 28 5b 22 2d 2d 62 69 6e  s.concat(["--bin
1530: 64 22 2c 20 70 61 74 68 73 2e 64 61 65 6d 6f 6e  d", paths.daemon
1540: 2c 20 70 61 74 68 73 2e 64 61 65 6d 6f 6e 2c 20  , paths.daemon, 
1550: 46 69 6c 65 2e 6a 6f 69 6e 28 70 61 74 68 73 2e  File.join(paths.
1560: 64 61 65 6d 6f 6e 2c 20 22 63 75 72 72 65 6e 74  daemon, "current
1570: 22 2c 20 22 6f 63 78 32 22 29 2c 20 22 64 61 65  ", "ocx2"), "dae
1580: 6d 6f 6e 22 2c 20 46 69 6c 65 2e 6a 6f 69 6e 28  mon", File.join(
1590: 70 61 74 68 73 2e 64 61 65 6d 6f 6e 2c 20 22 6e  paths.daemon, "n
15a0: 6f 64 65 22 2c 20 22 6e 6f 64 65 73 2e 6a 73 6f  ode", "nodes.jso
15b0: 6e 22 29 5d 29 0a 20 20 65 6e 64 0a 0a 20 20 23  n")]).  end..  #
15c0: 20 52 65 73 6f 6c 76 65 20 65 78 69 73 74 69 6e   Resolve existin
15d0: 67 20 61 6e 63 65 73 74 6f 72 73 20 74 6f 6f 2c  g ancestors too,
15e0: 20 73 6f 20 61 6e 20 61 62 73 65 6e 74 20 6c 65   so an absent le
15f0: 61 66 20 63 61 6e 6e 6f 74 20 68 69 64 65 20 61  af cannot hide a
1600: 20 73 79 6d 6c 69 6e 6b 2e 0a 20 20 64 65 66 20   symlink..  def 
1610: 73 65 6c 66 2e 72 65 61 6c 5f 62 6f 75 6e 64 28  self.real_bound(
1620: 70 61 74 68 20 3a 20 53 74 72 69 6e 67 29 20 3a  path : String) :
1630: 20 53 74 72 69 6e 67 0a 20 20 20 20 72 65 74 75   String.    retu
1640: 72 6e 20 46 69 6c 65 2e 72 65 61 6c 70 61 74 68  rn File.realpath
1650: 28 70 61 74 68 29 20 69 66 20 46 69 6c 65 2e 65  (path) if File.e
1660: 78 69 73 74 73 3f 28 70 61 74 68 29 20 7c 7c 20  xists?(path) || 
1670: 46 69 6c 65 2e 73 79 6d 6c 69 6e 6b 3f 28 70 61  File.symlink?(pa
1680: 74 68 29 0a 20 20 20 20 65 78 70 61 6e 64 65 64  th).    expanded
1690: 20 3d 20 46 69 6c 65 2e 65 78 70 61 6e 64 5f 70   = File.expand_p
16a0: 61 74 68 28 70 61 74 68 29 0a 20 20 20 20 72 65  ath(path).    re
16b0: 74 75 72 6e 20 65 78 70 61 6e 64 65 64 20 69 66  turn expanded if
16c0: 20 65 78 70 61 6e 64 65 64 20 3d 3d 20 22 2f 22   expanded == "/"
16d0: 0a 20 20 20 20 46 69 6c 65 2e 6a 6f 69 6e 28 72  .    File.join(r
16e0: 65 61 6c 5f 62 6f 75 6e 64 28 46 69 6c 65 2e 64  eal_bound(File.d
16f0: 69 72 6e 61 6d 65 28 65 78 70 61 6e 64 65 64 29  irname(expanded)
1700: 29 2c 20 46 69 6c 65 2e 62 61 73 65 6e 61 6d 65  ), File.basename
1710: 28 65 78 70 61 6e 64 65 64 29 29 0a 20 20 65 6e  (expanded)).  en
1720: 64 0a 0a 20 20 64 65 66 20 73 65 6c 66 2e 67 75  d..  def self.gu
1730: 61 72 64 5f 64 61 65 6d 6f 6e 28 61 72 67 73 20  ard_daemon(args 
1740: 3a 20 41 72 72 61 79 28 53 74 72 69 6e 67 29 2c  : Array(String),
1750: 20 72 65 70 6f 73 69 74 6f 72 69 65 73 20 3a 20   repositories : 
1760: 53 74 72 69 6e 67 29 20 3a 20 4e 69 6c 0a 20 20  String) : Nil.  
1770: 20 20 72 65 70 6f 73 69 74 6f 72 79 20 3d 20 72    repository = r
1780: 65 61 6c 5f 62 6f 75 6e 64 28 72 65 70 6f 73 69  eal_bound(reposi
1790: 74 6f 72 69 65 73 29 2e 72 63 68 6f 70 28 27 2f  tories).rchop('/
17a0: 27 29 0a 20 20 20 20 61 72 67 73 2e 65 61 63 68  ').    args.each
17b0: 5f 77 69 74 68 5f 69 6e 64 65 78 20 64 6f 20 7c  _with_index do |
17c0: 61 72 67 2c 20 69 6e 64 65 78 7c 0a 20 20 20 20  arg, index|.    
17d0: 20 20 23 20 6f 6e 6c 79 20 61 20 62 69 6e 64 20    # only a bind 
17e0: 62 72 69 6e 67 73 20 61 20 68 6f 73 74 20 70 61  brings a host pa
17f0: 74 68 20 69 6e 3b 20 2d 2d 74 6d 70 66 73 2c 20  th in; --tmpfs, 
1800: 2d 2d 70 72 6f 63 20 61 6e 64 20 2d 2d 64 65 76  --proc and --dev
1810: 20 6d 61 6b 65 20 66 72 65 73 68 2c 20 65 6d 70   make fresh, emp
1820: 74 79 20 6f 6e 65 73 0a 20 20 20 20 20 20 6e 65  ty ones.      ne
1830: 78 74 20 75 6e 6c 65 73 73 20 7b 22 2d 2d 62 69  xt unless {"--bi
1840: 6e 64 22 2c 20 22 2d 2d 62 69 6e 64 2d 74 72 79  nd", "--bind-try
1850: 22 2c 20 22 2d 2d 72 6f 2d 62 69 6e 64 22 2c 20  ", "--ro-bind", 
1860: 22 2d 2d 72 6f 2d 62 69 6e 64 2d 74 72 79 22 7d  "--ro-bind-try"}
1870: 2e 69 6e 63 6c 75 64 65 73 3f 28 61 72 67 29 0a  .includes?(arg).
1880: 20 20 20 20 20 20 70 61 74 68 20 3d 20 72 65 61        path = rea
1890: 6c 5f 62 6f 75 6e 64 28 61 72 67 73 5b 69 6e 64  l_bound(args[ind
18a0: 65 78 20 2b 20 31 5d 29 2e 72 63 68 6f 70 28 27  ex + 1]).rchop('
18b0: 2f 27 29 0a 20 20 20 20 20 20 69 66 20 70 61 74  /').      if pat
18c0: 68 20 3d 3d 20 72 65 70 6f 73 69 74 6f 72 79 20  h == repository 
18d0: 7c 7c 20 70 61 74 68 2e 73 74 61 72 74 73 5f 77  || path.starts_w
18e0: 69 74 68 3f 28 72 65 70 6f 73 69 74 6f 72 79 20  ith?(repository 
18f0: 2b 20 22 2f 22 29 20 7c 7c 20 72 65 70 6f 73 69  + "/") || reposi
1900: 74 6f 72 79 2e 73 74 61 72 74 73 5f 77 69 74 68  tory.starts_with
1910: 3f 28 70 61 74 68 20 2b 20 22 2f 22 29 0a 20 20  ?(path + "/").  
1920: 20 20 20 20 20 20 72 61 69 73 65 20 41 72 67 75        raise Argu
1930: 6d 65 6e 74 45 72 72 6f 72 2e 6e 65 77 28 22 64  mentError.new("d
1940: 61 65 6d 6f 6e 20 62 6f 75 6e 64 20 70 61 74 68  aemon bound path
1950: 20 6f 76 65 72 6c 61 70 73 20 73 65 72 76 65 64   overlaps served
1960: 20 72 65 70 6f 73 69 74 6f 72 69 65 73 22 29 0a   repositories").
1970: 20 20 20 20 20 20 65 6e 64 0a 20 20 20 20 65 6e        end.    en
1980: 64 0a 20 20 65 6e 64 0a 0a 20 20 64 65 66 20 73  d.  end..  def s
1990: 65 6c 66 2e 63 6c 6f 73 65 5f 69 6e 68 65 72 69  elf.close_inheri
19a0: 74 65 64 20 3a 20 4e 69 6c 0a 20 20 20 20 64 69  ted : Nil.    di
19b0: 72 20 3d 20 4c 69 62 43 2e 6f 70 65 6e 64 69 72  r = LibC.opendir
19c0: 28 22 2f 70 72 6f 63 2f 73 65 6c 66 2f 66 64 22  ("/proc/self/fd"
19d0: 29 0a 20 20 20 20 72 61 69 73 65 20 49 4f 3a 3a  ).    raise IO::
19e0: 45 72 72 6f 72 2e 66 72 6f 6d 5f 65 72 72 6e 6f  Error.from_errno
19f0: 28 22 6f 70 65 6e 64 69 72 22 29 20 69 66 20 64  ("opendir") if d
1a00: 69 72 2e 6e 75 6c 6c 3f 0a 20 20 20 20 62 65 67  ir.null?.    beg
1a10: 69 6e 0a 20 20 20 20 20 20 6f 77 6e 20 3d 20 4c  in.      own = L
1a20: 69 62 43 2e 64 69 72 66 64 28 64 69 72 29 0a 20  ibC.dirfd(dir). 
1a30: 20 20 20 20 20 77 68 69 6c 65 20 65 6e 74 72 79       while entry
1a40: 20 3d 20 4c 69 62 43 2e 72 65 61 64 64 69 72 28   = LibC.readdir(
1a50: 64 69 72 29 0a 20 20 20 20 20 20 20 20 66 64 20  dir).        fd 
1a60: 3d 20 53 74 72 69 6e 67 2e 6e 65 77 28 65 6e 74  = String.new(ent
1a70: 72 79 2e 76 61 6c 75 65 2e 64 5f 6e 61 6d 65 2e  ry.value.d_name.
1a80: 74 6f 5f 75 6e 73 61 66 65 29 2e 74 6f 5f 69 3f  to_unsafe).to_i?
1a90: 0a 20 20 20 20 20 20 20 20 4c 69 62 43 2e 63 6c  .        LibC.cl
1aa0: 6f 73 65 28 66 64 29 20 69 66 20 66 64 20 26 26  ose(fd) if fd &&
1ab0: 20 66 64 20 3e 20 32 20 26 26 20 66 64 20 21 3d   fd > 2 && fd !=
1ac0: 20 6f 77 6e 0a 20 20 20 20 20 20 65 6e 64 0a 20   own.      end. 
1ad0: 20 20 20 65 6e 73 75 72 65 0a 20 20 20 20 20 20     ensure.      
1ae0: 4c 69 62 43 2e 63 6c 6f 73 65 64 69 72 28 64 69  LibC.closedir(di
1af0: 72 29 0a 20 20 20 20 65 6e 64 0a 20 20 65 6e 64  r).    end.  end
1b00: 0a 0a 20 20 64 65 66 20 73 65 6c 66 2e 63 67 69  ..  def self.cgi
1b10: 28 70 61 74 68 73 20 3a 20 50 61 74 68 73 29 20  (paths : Paths) 
1b20: 3a 20 4e 6f 52 65 74 75 72 6e 0a 20 20 20 20 72  : NoReturn.    r
1b30: 65 6c 65 61 73 65 20 3d 20 46 69 6c 65 2e 72 65  elease = File.re
1b40: 61 6c 70 61 74 68 28 46 69 6c 65 2e 6a 6f 69 6e  alpath(File.join
1b50: 28 70 61 74 68 73 2e 72 65 6c 65 61 73 65 2c 20  (paths.release, 
1b60: 22 63 75 72 72 65 6e 74 22 29 29 0a 20 20 20 20  "current")).    
1b70: 63 6c 6f 73 65 5f 69 6e 68 65 72 69 74 65 64 0a  close_inherited.
1b80: 20 20 20 20 75 6e 6c 65 73 73 20 45 4e 56 5b 22      unless ENV["
1b90: 50 41 54 48 5f 49 4e 46 4f 22 5d 3f 20 3d 3d 20  PATH_INFO"]? == 
1ba0: 22 2f 72 65 63 65 69 70 74 22 0a 20 20 20 20 20  "/receipt".     
1bb0: 20 23 20 45 36 3a 20 74 68 69 73 20 70 61 73 73   # E6: this pass
1bc0: 74 68 72 6f 75 67 68 20 67 6f 65 73 20 77 68 65  through goes whe
1bd0: 6e 20 74 68 65 20 43 47 49 20 74 61 6c 6b 73 20  n the CGI talks 
1be0: 74 6f 20 74 68 65 20 64 61 65 6d 6f 6e 2e 0a 20  to the daemon.. 
1bf0: 20 20 20 20 20 65 78 65 63 75 74 61 62 6c 65 20       executable 
1c00: 3d 20 46 69 6c 65 2e 6a 6f 69 6e 28 72 65 6c 65  = File.join(rele
1c10: 61 73 65 2c 20 22 6f 63 78 32 22 29 0a 20 20 20  ase, "ocx2").   
1c20: 20 20 20 61 72 67 76 20 3d 20 5b 46 69 6c 65 2e     argv = [File.
1c30: 6a 6f 69 6e 28 72 65 6c 65 61 73 65 2c 20 22 6f  join(release, "o
1c40: 63 78 32 2d 63 67 69 22 29 2e 74 6f 5f 75 6e 73  cx2-cgi").to_uns
1c50: 61 66 65 2c 20 50 6f 69 6e 74 65 72 28 55 49 6e  afe, Pointer(UIn
1c60: 74 38 29 2e 6e 75 6c 6c 5d 0a 20 20 20 20 20 20  t8).null].      
1c70: 4c 69 62 43 2e 65 78 65 63 76 28 65 78 65 63 75  LibC.execv(execu
1c80: 74 61 62 6c 65 2c 20 61 72 67 76 2e 74 6f 5f 75  table, argv.to_u
1c90: 6e 73 61 66 65 29 0a 20 20 20 20 20 20 72 61 69  nsafe).      rai
1ca0: 73 65 20 49 4f 3a 3a 45 72 72 6f 72 2e 66 72 6f  se IO::Error.fro
1cb0: 6d 5f 65 72 72 6e 6f 28 22 65 78 65 63 76 22 29  m_errno("execv")
1cc0: 0a 20 20 20 20 65 6e 64 0a 20 20 20 20 72 65 70  .    end.    rep
1cd0: 6f 73 69 74 6f 72 79 20 3d 20 46 69 6c 65 2e 62  ository = File.b
1ce0: 61 73 65 6e 61 6d 65 28 45 4e 56 5b 22 46 4f 53  asename(ENV["FOS
1cf0: 53 49 4c 5f 52 45 50 4f 53 49 54 4f 52 59 22 5d  SIL_REPOSITORY"]
1d00: 3f 20 7c 7c 20 22 22 2c 20 22 2e 66 6f 73 73 69  ? || "", ".fossi
1d10: 6c 22 29 0a 20 20 20 20 62 65 67 69 6e 0a 20 20  l").    begin.  
1d20: 20 20 20 20 23 20 55 73 65 20 62 6c 6f 63 6b 69      # Use blocki
1d30: 6e 67 20 73 79 73 63 61 6c 6c 73 20 61 66 74 65  ng syscalls afte
1d40: 72 20 63 6c 6f 73 69 6e 67 20 64 65 73 63 72 69  r closing descri
1d50: 70 74 6f 72 73 2c 20 69 6e 63 6c 75 64 69 6e 67  ptors, including
1d60: 20 72 75 6e 74 69 6d 65 20 65 76 65 6e 74 20 66   runtime event f
1d70: 64 73 2e 0a 20 20 20 20 20 20 61 64 64 72 65 73  ds..      addres
1d80: 73 20 3d 20 53 6f 63 6b 65 74 3a 3a 55 4e 49 58  s = Socket::UNIX
1d90: 41 64 64 72 65 73 73 2e 6e 65 77 28 70 61 74 68  Address.new(path
1da0: 73 2e 73 6f 63 6b 65 74 29 0a 20 20 20 20 20 20  s.socket).      
1db0: 66 64 20 3d 20 4c 69 62 43 2e 73 6f 63 6b 65 74  fd = LibC.socket
1dc0: 28 4c 69 62 43 3a 3a 41 46 5f 55 4e 49 58 2c 20  (LibC::AF_UNIX, 
1dd0: 4c 69 62 43 3a 3a 53 4f 43 4b 5f 53 54 52 45 41  LibC::SOCK_STREA
1de0: 4d 2c 20 30 29 0a 20 20 20 20 20 20 72 61 69 73  M, 0).      rais
1df0: 65 20 49 4f 3a 3a 45 72 72 6f 72 2e 66 72 6f 6d  e IO::Error.from
1e00: 5f 65 72 72 6e 6f 28 22 73 6f 63 6b 65 74 22 29  _errno("socket")
1e10: 20 69 66 20 66 64 20 3d 3d 20 2d 31 0a 20 20 20   if fd == -1.   
1e20: 20 20 20 72 61 69 73 65 20 49 4f 3a 3a 45 72 72     raise IO::Err
1e30: 6f 72 2e 66 72 6f 6d 5f 65 72 72 6e 6f 28 22 63  or.from_errno("c
1e40: 6f 6e 6e 65 63 74 22 29 20 69 66 20 4c 69 62 43  onnect") if LibC
1e50: 2e 63 6f 6e 6e 65 63 74 28 66 64 2c 20 61 64 64  .connect(fd, add
1e60: 72 65 73 73 2c 20 61 64 64 72 65 73 73 2e 73 69  ress, address.si
1e70: 7a 65 29 20 3d 3d 20 2d 31 0a 20 20 20 20 20 20  ze) == -1.      
1e80: 69 64 65 6e 74 69 74 79 20 3d 20 4a 53 4f 4e 2e  identity = JSON.
1e90: 62 75 69 6c 64 20 64 6f 20 7c 6a 73 6f 6e 7c 0a  build do |json|.
1ea0: 20 20 20 20 20 20 20 20 6a 73 6f 6e 2e 6f 62 6a          json.obj
1eb0: 65 63 74 20 64 6f 0a 20 20 20 20 20 20 20 20 20  ect do.         
1ec0: 20 69 66 20 75 73 65 72 20 3d 20 45 4e 56 5b 22   if user = ENV["
1ed0: 46 4f 53 53 49 4c 5f 55 53 45 52 22 5d 3f 0a 20  FOSSIL_USER"]?. 
1ee0: 20 20 20 20 20 20 20 20 20 20 20 6a 73 6f 6e 2e             json.
1ef0: 66 69 65 6c 64 20 22 75 73 65 72 22 2c 20 75 73  field "user", us
1f00: 65 72 0a 20 20 20 20 20 20 20 20 20 20 65 6e 64  er.          end
1f10: 0a 20 20 20 20 20 20 20 20 20 20 6a 73 6f 6e 2e  .          json.
1f20: 66 69 65 6c 64 20 22 63 61 70 61 62 69 6c 69 74  field "capabilit
1f30: 69 65 73 22 2c 20 45 4e 56 5b 22 46 4f 53 53 49  ies", ENV["FOSSI
1f40: 4c 5f 43 41 50 41 42 49 4c 49 54 49 45 53 22 5d  L_CAPABILITIES"]
1f50: 3f 20 7c 7c 20 22 22 0a 20 20 20 20 20 20 20 20  ? || "".        
1f60: 20 20 6a 73 6f 6e 2e 66 69 65 6c 64 20 22 72 65    json.field "re
1f70: 70 6f 73 69 74 6f 72 79 22 2c 20 72 65 70 6f 73  pository", repos
1f80: 69 74 6f 72 79 0a 20 20 20 20 20 20 20 20 65 6e  itory.        en
1f90: 64 0a 20 20 20 20 20 20 65 6e 64 0a 20 20 20 20  d.      end.    
1fa0: 20 20 62 79 74 65 73 20 3d 20 28 69 64 65 6e 74    bytes = (ident
1fb0: 69 74 79 20 2b 20 22 5c 6e 22 29 2e 74 6f 5f 73  ity + "\n").to_s
1fc0: 6c 69 63 65 0a 20 20 20 20 20 20 75 6e 74 69 6c  lice.      until
1fd0: 20 62 79 74 65 73 2e 65 6d 70 74 79 3f 0a 20 20   bytes.empty?.  
1fe0: 20 20 20 20 20 20 77 72 69 74 74 65 6e 20 3d 20        written = 
1ff0: 4c 69 62 43 2e 77 72 69 74 65 28 66 64 2c 20 62  LibC.write(fd, b
2000: 79 74 65 73 2c 20 62 79 74 65 73 2e 73 69 7a 65  ytes, bytes.size
2010: 29 0a 20 20 20 20 20 20 20 20 6e 65 78 74 20 69  ).        next i
2020: 66 20 77 72 69 74 74 65 6e 20 3d 3d 20 2d 31 20  f written == -1 
2030: 26 26 20 45 72 72 6e 6f 2e 76 61 6c 75 65 20 3d  && Errno.value =
2040: 3d 20 45 72 72 6e 6f 3a 3a 45 49 4e 54 52 0a 20  = Errno::EINTR. 
2050: 20 20 20 20 20 20 20 72 61 69 73 65 20 49 4f 3a         raise IO:
2060: 3a 45 72 72 6f 72 2e 66 72 6f 6d 5f 65 72 72 6e  :Error.from_errn
2070: 6f 28 22 77 72 69 74 65 22 29 20 69 66 20 77 72  o("write") if wr
2080: 69 74 74 65 6e 20 3c 3d 20 30 0a 20 20 20 20 20  itten <= 0.     
2090: 20 20 20 62 79 74 65 73 20 3d 20 62 79 74 65 73     bytes = bytes
20a0: 5b 77 72 69 74 74 65 6e 2e 74 6f 5f 69 2e 2e 5d  [written.to_i..]
20b0: 0a 20 20 20 20 20 20 65 6e 64 0a 20 20 20 20 72  .      end.    r
20c0: 65 73 63 75 65 20 53 6f 63 6b 65 74 3a 3a 45 72  escue Socket::Er
20d0: 72 6f 72 20 7c 20 49 4f 3a 3a 45 72 72 6f 72 0a  ror | IO::Error.
20e0: 20 20 20 20 20 20 23 20 54 68 65 20 72 75 6e 74        # The runt
20f0: 69 6d 65 27 73 20 6f 77 6e 20 64 65 73 63 72 69  ime's own descri
2100: 70 74 6f 72 73 20 61 72 65 20 63 6c 6f 73 65 64  ptors are closed
2110: 2c 20 73 6f 20 77 72 69 74 65 20 77 69 74 68 20  , so write with 
2120: 74 68 65 20 73 79 73 74 65 6d 20 63 61 6c 6c 20  the system call 
2130: 69 74 73 65 6c 66 2e 0a 20 20 20 20 20 20 61 6e  itself..      an
2140: 73 77 65 72 20 3d 20 22 53 74 61 74 75 73 3a 20  swer = "Status: 
2150: 35 30 33 5c 72 5c 6e 43 6f 6e 74 65 6e 74 2d 54  503\r\nContent-T
2160: 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e  ype: application
2170: 2f 6a 73 6f 6e 5c 72 5c 6e 5c 72 5c 6e 7b 5c 22  /json\r\n\r\n{\"
2180: 75 6e 61 76 61 69 6c 61 62 6c 65 5c 22 3a 5c 22  unavailable\":\"
2190: 72 65 63 65 69 70 74 20 73 65 72 76 69 63 65 20  receipt service 
21a0: 6e 6f 74 20 61 6e 73 77 65 72 69 6e 67 5c 22 7d  not answering\"}
21b0: 5c 6e 22 2e 74 6f 5f 73 6c 69 63 65 0a 20 20 20  \n".to_slice.   
21c0: 20 20 20 4c 69 62 43 2e 77 72 69 74 65 28 31 2c     LibC.write(1,
21d0: 20 61 6e 73 77 65 72 2c 20 61 6e 73 77 65 72 2e   answer, answer.
21e0: 73 69 7a 65 29 0a 20 20 20 20 20 20 65 78 69 74  size).      exit
21f0: 20 30 0a 20 20 20 20 65 6e 64 0a 20 20 20 20 72   0.    end.    r
2200: 61 69 73 65 20 49 4f 3a 3a 45 72 72 6f 72 2e 66  aise IO::Error.f
2210: 72 6f 6d 5f 65 72 72 6e 6f 28 22 64 75 70 32 22  rom_errno("dup2"
2220: 29 20 69 66 20 4c 69 62 43 2e 64 75 70 32 28 66  ) if LibC.dup2(f
2230: 64 2c 20 33 29 20 3d 3d 20 2d 31 0a 20 20 20 20  d, 3) == -1.    
2240: 4c 69 62 43 2e 63 6c 6f 73 65 28 66 64 29 20 75  LibC.close(fd) u
2250: 6e 6c 65 73 73 20 66 64 20 3d 3d 20 33 0a 20 20  nless fd == 3.  
2260: 20 20 72 61 69 73 65 20 49 4f 3a 3a 45 72 72 6f    raise IO::Erro
2270: 72 2e 66 72 6f 6d 5f 65 72 72 6e 6f 28 22 66 63  r.from_errno("fc
2280: 6e 74 6c 22 29 20 69 66 20 4c 69 62 43 2e 66 63  ntl") if LibC.fc
2290: 6e 74 6c 28 33 2c 20 4c 69 62 43 3a 3a 46 5f 53  ntl(3, LibC::F_S
22a0: 45 54 46 44 2c 20 30 29 20 3d 3d 20 2d 31 0a 20  ETFD, 0) == -1. 
22b0: 20 20 20 65 6e 76 69 72 6f 6e 6d 65 6e 74 20 3d     environment =
22c0: 20 7b 7d 20 6f 66 20 53 74 72 69 6e 67 20 3d 3e   {} of String =>
22d0: 20 53 74 72 69 6e 67 0a 20 20 20 20 43 47 49 5f   String.    CGI_
22e0: 46 49 45 4c 44 53 2e 65 61 63 68 20 64 6f 20 7c  FIELDS.each do |
22f0: 6b 65 79 7c 0a 20 20 20 20 20 20 69 66 20 76 61  key|.      if va
2300: 6c 75 65 20 3d 20 45 4e 56 5b 6b 65 79 5d 3f 0a  lue = ENV[key]?.
2310: 20 20 20 20 20 20 20 20 65 6e 76 69 72 6f 6e 6d          environm
2320: 65 6e 74 5b 6b 65 79 5d 20 3d 20 76 61 6c 75 65  ent[key] = value
2330: 0a 20 20 20 20 20 20 65 6e 64 0a 20 20 20 20 65  .      end.    e
2340: 6e 64 0a 20 20 20 20 65 78 65 63 5f 72 61 77 28  nd.    exec_raw(
2350: 22 2f 75 73 72 2f 62 69 6e 2f 62 77 72 61 70 22  "/usr/bin/bwrap"
2360: 2c 20 63 67 69 5f 61 72 67 73 28 72 65 6c 65 61  , cgi_args(relea
2370: 73 65 2c 20 72 65 70 6f 73 69 74 6f 72 79 2c 20  se, repository, 
2380: 65 6e 76 69 72 6f 6e 6d 65 6e 74 29 29 0a 20 20  environment)).  
2390: 65 6e 64 0a 0a 20 20 23 20 65 78 65 63 76 20 77  end..  # execv w
23a0: 69 74 68 6f 75 74 20 74 68 65 20 72 75 6e 74 69  ithout the runti
23b0: 6d 65 2c 20 77 68 6f 73 65 20 64 65 73 63 72 69  me, whose descri
23c0: 70 74 6f 72 73 20 63 6c 6f 73 65 5f 69 6e 68 65  ptors close_inhe
23d0: 72 69 74 65 64 20 68 61 73 20 63 6c 6f 73 65 64  rited has closed
23e0: 2e 0a 20 20 64 65 66 20 73 65 6c 66 2e 65 78 65  ..  def self.exe
23f0: 63 5f 72 61 77 28 70 72 6f 67 72 61 6d 20 3a 20  c_raw(program : 
2400: 53 74 72 69 6e 67 2c 20 61 72 67 73 20 3a 20 41  String, args : A
2410: 72 72 61 79 28 53 74 72 69 6e 67 29 29 20 3a 20  rray(String)) : 
2420: 4e 6f 52 65 74 75 72 6e 0a 20 20 20 20 61 72 67  NoReturn.    arg
2430: 76 20 3d 20 28 5b 70 72 6f 67 72 61 6d 5d 20 2b  v = ([program] +
2440: 20 61 72 67 73 29 2e 6d 61 70 28 26 2e 74 6f 5f   args).map(&.to_
2450: 75 6e 73 61 66 65 29 20 2b 20 5b 50 6f 69 6e 74  unsafe) + [Point
2460: 65 72 28 55 49 6e 74 38 29 2e 6e 75 6c 6c 5d 0a  er(UInt8).null].
2470: 20 20 20 20 4c 69 62 43 2e 65 78 65 63 76 28 70      LibC.execv(p
2480: 72 6f 67 72 61 6d 2c 20 61 72 67 76 2e 74 6f 5f  rogram, argv.to_
2490: 75 6e 73 61 66 65 29 0a 20 20 20 20 72 61 69 73  unsafe).    rais
24a0: 65 20 49 4f 3a 3a 45 72 72 6f 72 2e 66 72 6f 6d  e IO::Error.from
24b0: 5f 65 72 72 6e 6f 28 22 65 78 65 63 76 22 29 0a  _errno("execv").
24c0: 20 20 65 6e 64 0a 0a 20 20 64 65 66 20 73 65 6c    end..  def sel
24d0: 66 2e 72 75 6e 20 3a 20 4e 6f 52 65 74 75 72 6e  f.run : NoReturn
24e0: 0a 20 20 20 20 61 72 67 73 20 3d 20 41 52 47 56  .    args = ARGV
24f0: 2e 64 75 70 0a 20 20 20 20 73 63 72 61 74 63 68  .dup.    scratch
2500: 20 3d 20 6e 69 6c 0a 20 20 20 20 69 66 20 61 72   = nil.    if ar
2510: 67 73 2e 66 69 72 73 74 3f 20 3d 3d 20 22 2d 2d  gs.first? == "--
2520: 73 63 72 61 74 63 68 22 0a 20 20 20 20 20 20 61  scratch".      a
2530: 72 67 73 2e 73 68 69 66 74 0a 20 20 20 20 20 20  rgs.shift.      
2540: 73 63 72 61 74 63 68 20 3d 20 61 72 67 73 2e 73  scratch = args.s
2550: 68 69 66 74 3f 20 7c 7c 20 72 61 69 73 65 20 41  hift? || raise A
2560: 72 67 75 6d 65 6e 74 45 72 72 6f 72 2e 6e 65 77  rgumentError.new
2570: 28 22 6d 69 73 73 69 6e 67 20 73 63 72 61 74 63  ("missing scratc
2580: 68 20 64 69 72 65 63 74 6f 72 79 22 29 0a 20 20  h directory").  
2590: 20 20 65 6e 64 0a 20 20 20 20 63 67 69 5f 6d 6f    end.    cgi_mo
25a0: 64 65 20 3d 20 46 69 6c 65 2e 62 61 73 65 6e 61  de = File.basena
25b0: 6d 65 28 50 52 4f 47 52 41 4d 5f 4e 41 4d 45 29  me(PROGRAM_NAME)
25c0: 20 3d 3d 20 22 6f 63 78 32 2d 63 67 69 22 0a 20   == "ocx2-cgi". 
25d0: 20 20 20 75 6e 6c 65 73 73 20 28 63 67 69 5f 6d     unless (cgi_m
25e0: 6f 64 65 20 26 26 20 61 72 67 73 2e 65 6d 70 74  ode && args.empt
25f0: 79 3f 29 20 7c 7c 20 28 21 63 67 69 5f 6d 6f 64  y?) || (!cgi_mod
2600: 65 20 26 26 20 61 72 67 73 2e 73 69 7a 65 20 3d  e && args.size =
2610: 3d 20 31 20 26 26 20 7b 22 72 65 63 65 69 70 74  = 1 && {"receipt
2620: 73 22 2c 20 22 64 61 65 6d 6f 6e 22 7d 2e 69 6e  s", "daemon"}.in
2630: 63 6c 75 64 65 73 3f 28 61 72 67 73 5b 30 5d 29  cludes?(args[0])
2640: 29 0a 20 20 20 20 20 20 72 61 69 73 65 20 41 72  ).      raise Ar
2650: 67 75 6d 65 6e 74 45 72 72 6f 72 2e 6e 65 77 28  gumentError.new(
2660: 22 75 6e 72 65 63 6f 67 6e 69 73 65 64 20 6d 6f  "unrecognised mo
2670: 64 65 22 29 0a 20 20 20 20 65 6e 64 0a 20 20 20  de").    end.   
2680: 20 70 61 74 68 73 20 3d 20 70 61 74 68 73 28 73   paths = paths(s
2690: 63 72 61 74 63 68 2c 20 53 79 73 74 65 6d 2e 68  cratch, System.h
26a0: 6f 73 74 6e 61 6d 65 29 0a 20 20 20 20 63 67 69  ostname).    cgi
26b0: 28 70 61 74 68 73 29 20 69 66 20 63 67 69 5f 6d  (paths) if cgi_m
26c0: 6f 64 65 0a 20 20 20 20 65 78 65 63 75 74 61 62  ode.    executab
26d0: 6c 65 20 3d 20 50 72 6f 63 65 73 73 2e 65 78 65  le = Process.exe
26e0: 63 75 74 61 62 6c 65 5f 70 61 74 68 20 7c 7c 20  cutable_path || 
26f0: 72 61 69 73 65 20 41 72 67 75 6d 65 6e 74 45 72  raise ArgumentEr
2700: 72 6f 72 2e 6e 65 77 28 22 63 61 6e 6e 6f 74 20  ror.new("cannot 
2710: 6c 6f 63 61 74 65 20 65 78 65 63 75 74 61 62 6c  locate executabl
2720: 65 22 29 0a 20 20 20 20 69 66 20 61 72 67 73 5b  e").    if args[
2730: 30 5d 20 3d 3d 20 22 72 65 63 65 69 70 74 73 22  0] == "receipts"
2740: 0a 20 20 20 20 20 20 63 6f 6d 6d 61 6e 64 20 3d  .      command =
2750: 20 72 65 63 65 69 70 74 73 5f 61 72 67 73 28 70   receipts_args(p
2760: 61 74 68 73 2c 20 46 69 6c 65 2e 64 69 72 6e 61  aths, File.dirna
2770: 6d 65 28 65 78 65 63 75 74 61 62 6c 65 29 29 0a  me(executable)).
2780: 20 20 20 20 65 6c 73 65 0a 20 20 20 20 20 20 63      else.      c
2790: 6f 6d 6d 61 6e 64 20 3d 20 64 61 65 6d 6f 6e 5f  ommand = daemon_
27a0: 61 72 67 73 28 70 61 74 68 73 2c 20 70 61 74 68  args(paths, path
27b0: 73 2e 68 6f 6d 65 73 2e 73 65 6c 65 63 74 20 7b  s.homes.select {
27c0: 20 7c 73 6f 75 72 63 65 2c 20 5f 2c 20 5f 7c 20   |source, _, _| 
27d0: 46 69 6c 65 2e 65 78 69 73 74 73 3f 28 73 6f 75  File.exists?(sou
27e0: 72 63 65 29 20 7d 29 0a 20 20 20 20 20 20 67 75  rce) }).      gu
27f0: 61 72 64 5f 64 61 65 6d 6f 6e 28 63 6f 6d 6d 61  ard_daemon(comma
2800: 6e 64 2c 20 70 61 74 68 73 2e 72 65 70 6f 73 69  nd, paths.reposi
2810: 74 6f 72 69 65 73 29 0a 20 20 20 20 65 6e 64 0a  tories).    end.
2820: 20 20 20 20 50 72 6f 63 65 73 73 2e 65 78 65 63      Process.exec
2830: 28 22 2f 75 73 72 2f 62 69 6e 2f 62 77 72 61 70  ("/usr/bin/bwrap
2840: 22 2c 20 63 6f 6d 6d 61 6e 64 29 0a 20 20 72 65  ", command).  re
2850: 73 63 75 65 20 65 78 20 3a 20 41 72 67 75 6d 65  scue ex : Argume
2860: 6e 74 45 72 72 6f 72 20 7c 20 49 4f 3a 3a 45 72  ntError | IO::Er
2870: 72 6f 72 0a 20 20 20 20 53 54 44 45 52 52 2e 70  ror.    STDERR.p
2880: 75 74 73 20 22 23 7b 65 78 2e 6d 65 73 73 61 67  uts "#{ex.messag
2890: 65 7d 5c 6e 55 73 61 67 65 3a 20 73 74 61 72 74  e}\nUsage: start
28a0: 2d 6f 63 78 20 5b 2d 2d 73 63 72 61 74 63 68 20  -ocx [--scratch 
28b0: 44 49 52 5d 20 72 65 63 65 69 70 74 73 7c 64 61  DIR] receipts|da
28c0: 65 6d 6f 6e 3b 20 6f 63 78 32 2d 63 67 69 20 5b  emon; ocx2-cgi [
28d0: 2d 2d 73 63 72 61 74 63 68 20 44 49 52 5d 22 0a  --scratch DIR]".
28e0: 20 20 20 20 65 78 69 74 20 32 0a 20 20 65 6e 64      exit 2.  end
28f0: 0a 65 6e 64 0a 0a 53 74 61 72 74 4f 43 58 2e 72  .end..StartOCX.r
2900: 75 6e 0a 00 00 00 00 00 00 00 00 00 00 00 00 00  un..............
2910: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
2920: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
2930: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
2940: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
2950: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
2960: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
2970: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
2980: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
2990: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
29a0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
29b0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
29c0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
29d0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
29e0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
29f0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
2a00: 73 63 72 69 70 74 73 2d 66 6f 72 2d 72 65 76 69  scripts-for-revi
2a10: 65 77 2f 72 65 63 65 69 70 74 73 2e 63 72 00 00  ew/receipts.cr..
2a20: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
2a30: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
2a40: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
2a50: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
2a60: 00 00 00 00 30 30 30 30 36 34 34 00 30 30 30 30  ....0000644.0000
2a70: 30 30 30 00 30 30 30 30 30 30 30 00 30 30 30 30  000.0000000.0000
2a80: 30 30 33 30 32 34 35 00 31 35 32 37 30 35 30 30  0030245.15270500
2a90: 34 33 34 00 30 31 35 34 37 36 00 20 30 00 00 00  434.015476. 0...
2aa0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
2ab0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
2ac0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
2ad0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
2ae0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
2af0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
2b00: 00 75 73 74 61 72 20 20 00 72 6f 6f 74 00 00 00  .ustar  .root...
2b10: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
2b20: 00 00 00 00 00 00 00 00 00 72 6f 6f 74 00 00 00  .........root...
2b30: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
2b40: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
2b50: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
2b60: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
2b70: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
2b80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
2b90: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
2ba0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
2bb0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
2bc0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
2bd0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
2be0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
2bf0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
2c00: 23 20 41 67 65 6e 74 73 3a 20 64 6f 20 6e 6f 74  # Agents: do not
2c10: 20 63 68 61 6e 67 65 20 74 68 69 73 20 66 69 6c   change this fil
2c20: 65 20 6f 6e 20 61 6e 79 20 62 72 61 6e 63 68 20  e on any branch 
2c30: 77 69 74 68 6f 75 74 20 74 68 65 20 6d 61 69 6e  without the main
2c40: 74 61 69 6e 65 72 27 73 20 65 78 70 6c 69 63 69  tainer's explici
2c50: 74 20 61 70 70 72 6f 76 61 6c 20 6f 6e 20 74 68  t approval on th
2c60: 65 20 72 65 63 6f 72 64 2e 0a 23 20 53 65 6c 66  e record..# Self
2c70: 2d 63 6f 6e 74 61 69 6e 65 64 2c 20 73 74 61 6e  -contained, stan
2c80: 64 61 72 64 2d 6c 69 62 72 61 72 79 2d 6f 6e 6c  dard-library-onl
2c90: 79 20 72 65 63 65 69 70 74 20 73 65 72 76 69 63  y receipt servic
2ca0: 65 2e 20 55 73 61 67 65 3a 20 72 65 63 65 69 70  e. Usage: receip
2cb0: 74 73 20 53 4f 43 4b 45 54 20 52 45 50 4f 53 49  ts SOCKET REPOSI
2cc0: 54 4f 52 49 45 53 2e 0a 23 20 52 65 61 64 73 20  TORIES..# Reads 
2cd0: 6f 6e 6c 79 20 69 74 73 20 74 77 6f 20 4a 53 4f  only its two JSO
2ce0: 4e 20 6c 69 6e 65 73 20 61 6e 64 20 52 45 50 4f  N lines and REPO
2cf0: 53 49 54 4f 52 49 45 53 2f 4e 41 4d 45 2e 66 6f  SITORIES/NAME.fo
2d00: 73 73 69 6c 2c 20 72 65 61 64 2d 6f 6e 6c 79 20  ssil, read-only 
2d10: 74 68 72 6f 75 67 68 20 53 51 4c 69 74 65 2e 0a  through SQLite..
2d20: 72 65 71 75 69 72 65 20 22 6a 73 6f 6e 22 0a 72  require "json".r
2d30: 65 71 75 69 72 65 20 22 73 6f 63 6b 65 74 22 0a  equire "socket".
2d40: 72 65 71 75 69 72 65 20 22 75 72 69 22 0a 72 65  require "uri".re
2d50: 71 75 69 72 65 20 22 73 65 74 22 0a 0a 6c 69 62  quire "set"..lib
2d60: 20 52 65 63 65 69 70 74 50 65 65 72 0a 20 20 73   ReceiptPeer.  s
2d70: 74 72 75 63 74 20 43 72 65 64 65 6e 74 69 61 6c  truct Credential
2d80: 73 0a 20 20 20 20 70 69 64 20 3a 20 49 6e 74 33  s.    pid : Int3
2d90: 32 0a 20 20 20 20 75 69 64 20 3a 20 55 49 6e 74  2.    uid : UInt
2da0: 33 32 0a 20 20 20 20 67 69 64 20 3a 20 55 49 6e  32.    gid : UIn
2db0: 74 33 32 0a 20 20 65 6e 64 0a 0a 20 20 66 75 6e  t32.  end..  fun
2dc0: 20 67 65 74 73 6f 63 6b 6f 70 74 20 3d 20 67 65   getsockopt = ge
2dd0: 74 73 6f 63 6b 6f 70 74 28 66 64 20 3a 20 49 6e  tsockopt(fd : In
2de0: 74 33 32 2c 20 6c 65 76 65 6c 20 3a 20 49 6e 74  t32, level : Int
2df0: 33 32 2c 20 6f 70 74 69 6f 6e 20 3a 20 49 6e 74  32, option : Int
2e00: 33 32 2c 20 76 61 6c 75 65 20 3a 20 56 6f 69 64  32, value : Void
2e10: 2a 2c 20 73 69 7a 65 20 3a 20 55 49 6e 74 33 32  *, size : UInt32
2e20: 2a 29 20 3a 20 49 6e 74 33 32 0a 65 6e 64 0a 0a  *) : Int32.end..
2e30: 40 5b 4c 69 6e 6b 28 22 73 71 6c 69 74 65 33 22  @[Link("sqlite3"
2e40: 29 5d 0a 6c 69 62 20 4c 69 62 53 51 4c 69 74 65  )].lib LibSQLite
2e50: 33 0a 20 20 66 75 6e 20 6f 70 65 6e 5f 76 32 20  3.  fun open_v2 
2e60: 3d 20 73 71 6c 69 74 65 33 5f 6f 70 65 6e 5f 76  = sqlite3_open_v
2e70: 32 28 70 61 74 68 20 3a 20 55 49 6e 74 38 2a 2c  2(path : UInt8*,
2e80: 20 64 62 20 3a 20 56 6f 69 64 2a 2a 2c 20 66 6c   db : Void**, fl
2e90: 61 67 73 20 3a 20 49 6e 74 33 32 2c 20 76 66 73  ags : Int32, vfs
2ea0: 20 3a 20 55 49 6e 74 38 2a 29 20 3a 20 49 6e 74   : UInt8*) : Int
2eb0: 33 32 0a 20 20 66 75 6e 20 63 6c 6f 73 65 5f 76  32.  fun close_v
2ec0: 32 20 3d 20 73 71 6c 69 74 65 33 5f 63 6c 6f 73  2 = sqlite3_clos
2ed0: 65 5f 76 32 28 64 62 20 3a 20 56 6f 69 64 2a 29  e_v2(db : Void*)
2ee0: 20 3a 20 49 6e 74 33 32 0a 20 20 66 75 6e 20 70   : Int32.  fun p
2ef0: 72 65 70 61 72 65 5f 76 32 20 3d 20 73 71 6c 69  repare_v2 = sqli
2f00: 74 65 33 5f 70 72 65 70 61 72 65 5f 76 32 28 64  te3_prepare_v2(d
2f10: 62 20 3a 20 56 6f 69 64 2a 2c 20 73 71 6c 20 3a  b : Void*, sql :
2f20: 20 55 49 6e 74 38 2a 2c 20 73 69 7a 65 20 3a 20   UInt8*, size : 
2f30: 49 6e 74 33 32 2c 20 73 74 61 74 65 6d 65 6e 74  Int32, statement
2f40: 20 3a 20 56 6f 69 64 2a 2a 2c 20 74 61 69 6c 20   : Void**, tail 
2f50: 3a 20 55 49 6e 74 38 2a 2a 29 20 3a 20 49 6e 74  : UInt8**) : Int
2f60: 33 32 0a 20 20 66 75 6e 20 62 69 6e 64 5f 74 65  32.  fun bind_te
2f70: 78 74 20 3d 20 73 71 6c 69 74 65 33 5f 62 69 6e  xt = sqlite3_bin
2f80: 64 5f 74 65 78 74 28 73 74 61 74 65 6d 65 6e 74  d_text(statement
2f90: 20 3a 20 56 6f 69 64 2a 2c 20 69 6e 64 65 78 20   : Void*, index 
2fa0: 3a 20 49 6e 74 33 32 2c 20 74 65 78 74 20 3a 20  : Int32, text : 
2fb0: 55 49 6e 74 38 2a 2c 20 73 69 7a 65 20 3a 20 49  UInt8*, size : I
2fc0: 6e 74 33 32 2c 20 64 65 73 74 72 75 63 74 6f 72  nt32, destructor
2fd0: 20 3a 20 56 6f 69 64 2a 29 20 3a 20 49 6e 74 33   : Void*) : Int3
2fe0: 32 0a 20 20 66 75 6e 20 73 74 65 70 20 3d 20 73  2.  fun step = s
2ff0: 71 6c 69 74 65 33 5f 73 74 65 70 28 73 74 61 74  qlite3_step(stat
3000: 65 6d 65 6e 74 20 3a 20 56 6f 69 64 2a 29 20 3a  ement : Void*) :
3010: 20 49 6e 74 33 32 0a 20 20 66 75 6e 20 63 6f 6c   Int32.  fun col
3020: 75 6d 6e 5f 69 6e 74 36 34 20 3d 20 73 71 6c 69  umn_int64 = sqli
3030: 74 65 33 5f 63 6f 6c 75 6d 6e 5f 69 6e 74 36 34  te3_column_int64
3040: 28 73 74 61 74 65 6d 65 6e 74 20 3a 20 56 6f 69  (statement : Voi
3050: 64 2a 2c 20 63 6f 6c 75 6d 6e 20 3a 20 49 6e 74  d*, column : Int
3060: 33 32 29 20 3a 20 49 6e 74 36 34 0a 20 20 66 75  32) : Int64.  fu
3070: 6e 20 63 6f 6c 75 6d 6e 5f 74 65 78 74 20 3d 20  n column_text = 
3080: 73 71 6c 69 74 65 33 5f 63 6f 6c 75 6d 6e 5f 74  sqlite3_column_t
3090: 65 78 74 28 73 74 61 74 65 6d 65 6e 74 20 3a 20  ext(statement : 
30a0: 56 6f 69 64 2a 2c 20 63 6f 6c 75 6d 6e 20 3a 20  Void*, column : 
30b0: 49 6e 74 33 32 29 20 3a 20 55 49 6e 74 38 2a 0a  Int32) : UInt8*.
30c0: 20 20 66 75 6e 20 63 6f 6c 75 6d 6e 5f 74 79 70    fun column_typ
30d0: 65 20 3d 20 73 71 6c 69 74 65 33 5f 63 6f 6c 75  e = sqlite3_colu
30e0: 6d 6e 5f 74 79 70 65 28 73 74 61 74 65 6d 65 6e  mn_type(statemen
30f0: 74 20 3a 20 56 6f 69 64 2a 2c 20 63 6f 6c 75 6d  t : Void*, colum
3100: 6e 20 3a 20 49 6e 74 33 32 29 20 3a 20 49 6e 74  n : Int32) : Int
3110: 33 32 0a 20 20 66 75 6e 20 66 69 6e 61 6c 69 7a  32.  fun finaliz
3120: 65 20 3d 20 73 71 6c 69 74 65 33 5f 66 69 6e 61  e = sqlite3_fina
3130: 6c 69 7a 65 28 73 74 61 74 65 6d 65 6e 74 20 3a  lize(statement :
3140: 20 56 6f 69 64 2a 29 20 3a 20 49 6e 74 33 32 0a   Void*) : Int32.
3150: 20 20 66 75 6e 20 65 78 65 63 20 3d 20 73 71 6c    fun exec = sql
3160: 69 74 65 33 5f 65 78 65 63 28 64 62 20 3a 20 56  ite3_exec(db : V
3170: 6f 69 64 2a 2c 20 73 71 6c 20 3a 20 55 49 6e 74  oid*, sql : UInt
3180: 38 2a 2c 20 63 61 6c 6c 62 61 63 6b 20 3a 20 56  8*, callback : V
3190: 6f 69 64 2a 2c 20 63 6f 6e 74 65 78 74 20 3a 20  oid*, context : 
31a0: 56 6f 69 64 2a 2c 20 65 72 72 6f 72 20 3a 20 55  Void*, error : U
31b0: 49 6e 74 38 2a 2a 29 20 3a 20 49 6e 74 33 32 0a  Int8**) : Int32.
31c0: 20 20 66 75 6e 20 62 75 73 79 5f 74 69 6d 65 6f    fun busy_timeo
31d0: 75 74 20 3d 20 73 71 6c 69 74 65 33 5f 62 75 73  ut = sqlite3_bus
31e0: 79 5f 74 69 6d 65 6f 75 74 28 64 62 20 3a 20 56  y_timeout(db : V
31f0: 6f 69 64 2a 2c 20 6d 69 6c 6c 69 73 65 63 6f 6e  oid*, millisecon
3200: 64 73 20 3a 20 49 6e 74 33 32 29 20 3a 20 49 6e  ds : Int32) : In
3210: 74 33 32 0a 20 20 66 75 6e 20 65 78 74 65 6e 64  t32.  fun extend
3220: 65 64 5f 65 72 72 63 6f 64 65 20 3d 20 73 71 6c  ed_errcode = sql
3230: 69 74 65 33 5f 65 78 74 65 6e 64 65 64 5f 65 72  ite3_extended_er
3240: 72 63 6f 64 65 28 64 62 20 3a 20 56 6f 69 64 2a  rcode(db : Void*
3250: 29 20 3a 20 49 6e 74 33 32 0a 20 20 66 75 6e 20  ) : Int32.  fun 
3260: 65 72 72 6d 73 67 20 3d 20 73 71 6c 69 74 65 33  errmsg = sqlite3
3270: 5f 65 72 72 6d 73 67 28 64 62 20 3a 20 56 6f 69  _errmsg(db : Voi
3280: 64 2a 29 20 3a 20 55 49 6e 74 38 2a 0a 65 6e 64  d*) : UInt8*.end
3290: 0a 0a 6d 6f 64 75 6c 65 20 52 65 63 65 69 70 74  ..module Receipt
32a0: 73 0a 20 20 63 6c 61 73 73 20 52 65 66 75 73 65  s.  class Refuse
32b0: 64 20 3c 20 45 78 63 65 70 74 69 6f 6e 3b 20 65  d < Exception; e
32c0: 6e 64 0a 0a 20 20 63 6c 61 73 73 20 55 6e 61 76  nd..  class Unav
32d0: 61 69 6c 61 62 6c 65 20 3c 20 45 78 63 65 70 74  ailable < Except
32e0: 69 6f 6e 3b 20 65 6e 64 0a 0a 20 20 72 65 63 6f  ion; end..  reco
32f0: 72 64 20 49 64 65 6e 74 69 74 79 2c 20 72 65 70  rd Identity, rep
3300: 6f 73 69 74 6f 72 79 20 3a 20 53 74 72 69 6e 67  ository : String
3310: 2c 20 63 61 70 61 62 69 6c 69 74 69 65 73 20 3a  , capabilities :
3320: 20 53 74 72 69 6e 67 0a 20 20 72 65 63 6f 72 64   String.  record
3330: 20 52 65 71 75 65 73 74 2c 20 61 72 74 69 66 61   Request, artifa
3340: 63 74 73 20 3a 20 41 72 72 61 79 28 53 74 72 69  cts : Array(Stri
3350: 6e 67 29 2c 20 63 61 70 61 62 69 6c 69 74 69 65  ng), capabilitie
3360: 73 5f 6f 66 20 3a 20 53 74 72 69 6e 67 3f 0a 0a  s_of : String?..
3370: 20 20 72 65 63 6f 72 64 20 41 72 74 69 66 61 63    record Artifac
3380: 74 2c 20 61 72 74 69 66 61 63 74 20 3a 20 53 74  t, artifact : St
3390: 72 69 6e 67 2c 20 72 65 63 65 69 76 65 64 20 3a  ring, received :
33a0: 20 42 6f 6f 6c 20 3d 20 66 61 6c 73 65 2c 20 73   Bool = false, s
33b0: 65 6e 64 65 72 20 3a 20 53 74 72 69 6e 67 3f 20  ender : String? 
33c0: 3d 20 6e 69 6c 2c 0a 20 20 20 20 63 61 70 61 62  = nil,.    capab
33d0: 69 6c 69 74 69 65 73 20 3a 20 53 74 72 69 6e 67  ilities : String
33e0: 3f 20 3d 20 6e 69 6c 2c 20 72 65 63 65 69 70 74  ? = nil, receipt
33f0: 20 3a 20 49 6e 74 36 34 3f 20 3d 20 6e 69 6c 2c   : Int64? = nil,
3400: 20 72 69 64 20 3a 20 49 6e 74 36 34 3f 20 3d 20   rid : Int64? = 
3410: 6e 69 6c 20 64 6f 0a 20 20 20 20 69 6e 63 6c 75  nil do.    inclu
3420: 64 65 20 4a 53 4f 4e 3a 3a 53 65 72 69 61 6c 69  de JSON::Seriali
3430: 7a 61 62 6c 65 0a 20 20 65 6e 64 0a 0a 20 20 73  zable.  end..  s
3440: 74 72 75 63 74 20 55 73 65 72 0a 20 20 20 20 69  truct User.    i
3450: 6e 63 6c 75 64 65 20 4a 53 4f 4e 3a 3a 53 65 72  nclude JSON::Ser
3460: 69 61 6c 69 7a 61 62 6c 65 0a 20 20 20 20 67 65  ializable.    ge
3470: 74 74 65 72 20 75 73 65 72 20 3a 20 53 74 72 69  tter user : Stri
3480: 6e 67 0a 20 20 20 20 40 5b 4a 53 4f 4e 3a 3a 46  ng.    @[JSON::F
3490: 69 65 6c 64 28 65 6d 69 74 5f 6e 75 6c 6c 3a 20  ield(emit_null: 
34a0: 74 72 75 65 29 5d 0a 20 20 20 20 67 65 74 74 65  true)].    gette
34b0: 72 20 63 61 70 61 62 69 6c 69 74 69 65 73 20 3a  r capabilities :
34c0: 20 53 74 72 69 6e 67 3f 0a 20 20 20 20 67 65 74   String?.    get
34d0: 74 65 72 20 77 69 6b 69 5f 6d 6f 64 65 72 61 74  ter wiki_moderat
34e0: 65 64 20 3a 20 42 6f 6f 6c 3f 0a 20 20 20 20 67  ed : Bool?.    g
34f0: 65 74 74 65 72 20 74 69 63 6b 65 74 5f 6d 6f 64  etter ticket_mod
3500: 65 72 61 74 65 64 20 3a 20 42 6f 6f 6c 3f 0a 0a  erated : Bool?..
3510: 20 20 20 20 64 65 66 20 69 6e 69 74 69 61 6c 69      def initiali
3520: 7a 65 28 40 75 73 65 72 2c 20 40 63 61 70 61 62  ze(@user, @capab
3530: 69 6c 69 74 69 65 73 20 3d 20 6e 69 6c 2c 20 40  ilities = nil, @
3540: 77 69 6b 69 5f 6d 6f 64 65 72 61 74 65 64 20 3d  wiki_moderated =
3550: 20 6e 69 6c 2c 20 40 74 69 63 6b 65 74 5f 6d 6f   nil, @ticket_mo
3560: 64 65 72 61 74 65 64 20 3d 20 6e 69 6c 29 3b 20  derated = nil); 
3570: 65 6e 64 0a 20 20 65 6e 64 0a 0a 20 20 72 65 63  end.  end..  rec
3580: 6f 72 64 20 41 6e 73 77 65 72 2c 20 61 72 74 69  ord Answer, arti
3590: 66 61 63 74 73 20 3a 20 41 72 72 61 79 28 41 72  facts : Array(Ar
35a0: 74 69 66 61 63 74 29 2c 20 75 73 65 72 20 3a 20  tifact), user : 
35b0: 55 73 65 72 3f 20 3d 20 6e 69 6c 20 64 6f 0a 20  User? = nil do. 
35c0: 20 20 20 69 6e 63 6c 75 64 65 20 4a 53 4f 4e 3a     include JSON:
35d0: 3a 53 65 72 69 61 6c 69 7a 61 62 6c 65 0a 20 20  :Serializable.  
35e0: 65 6e 64 0a 0a 20 20 64 65 66 20 73 65 6c 66 2e  end..  def self.
35f0: 69 64 65 6e 74 69 74 79 28 6c 69 6e 65 20 3a 20  identity(line : 
3600: 53 74 72 69 6e 67 2c 20 72 65 70 6f 73 69 74 6f  String, reposito
3610: 72 69 65 73 20 3a 20 53 74 72 69 6e 67 29 20 3a  ries : String) :
3620: 20 49 64 65 6e 74 69 74 79 0a 20 20 20 20 6f 62   Identity.    ob
3630: 6a 65 63 74 20 3d 20 4a 53 4f 4e 2e 70 61 72 73  ject = JSON.pars
3640: 65 28 6c 69 6e 65 29 2e 61 73 5f 68 3f 0a 20 20  e(line).as_h?.  
3650: 20 20 72 61 69 73 65 20 52 65 66 75 73 65 64 2e    raise Refused.
3660: 6e 65 77 28 22 69 64 65 6e 74 69 74 79 20 6d 75  new("identity mu
3670: 73 74 20 62 65 20 61 6e 20 6f 62 6a 65 63 74 22  st be an object"
3680: 29 20 75 6e 6c 65 73 73 20 6f 62 6a 65 63 74 0a  ) unless object.
3690: 20 20 20 20 6e 61 6d 65 20 3d 20 6f 62 6a 65 63      name = objec
36a0: 74 5b 22 72 65 70 6f 73 69 74 6f 72 79 22 5d 3f  t["repository"]?
36b0: 2e 74 72 79 28 26 2e 61 73 5f 73 3f 29 0a 20 20  .try(&.as_s?).  
36c0: 20 20 63 61 70 73 20 3d 20 6f 62 6a 65 63 74 5b    caps = object[
36d0: 22 63 61 70 61 62 69 6c 69 74 69 65 73 22 5d 3f  "capabilities"]?
36e0: 2e 74 72 79 28 26 2e 61 73 5f 73 3f 29 0a 20 20  .try(&.as_s?).  
36f0: 20 20 69 66 20 75 73 65 72 20 3d 20 6f 62 6a 65    if user = obje
3700: 63 74 5b 22 75 73 65 72 22 5d 3f 0a 20 20 20 20  ct["user"]?.    
3710: 20 20 72 61 69 73 65 20 52 65 66 75 73 65 64 2e    raise Refused.
3720: 6e 65 77 28 22 69 6e 76 61 6c 69 64 20 75 73 65  new("invalid use
3730: 72 22 29 20 75 6e 6c 65 73 73 20 75 73 65 72 2e  r") unless user.
3740: 72 61 77 2e 6e 69 6c 3f 20 7c 7c 20 75 73 65 72  raw.nil? || user
3750: 2e 61 73 5f 73 3f 0a 20 20 20 20 65 6e 64 0a 20  .as_s?.    end. 
3760: 20 20 20 72 61 69 73 65 20 52 65 66 75 73 65 64     raise Refused
3770: 2e 6e 65 77 28 22 69 6e 76 61 6c 69 64 20 63 61  .new("invalid ca
3780: 70 61 62 69 6c 69 74 69 65 73 22 29 20 75 6e 6c  pabilities") unl
3790: 65 73 73 20 63 61 70 73 0a 20 20 20 20 72 61 69  ess caps.    rai
37a0: 73 65 20 52 65 66 75 73 65 64 2e 6e 65 77 28 22  se Refused.new("
37b0: 69 6e 76 61 6c 69 64 20 72 65 70 6f 73 69 74 6f  invalid reposito
37c0: 72 79 22 29 20 75 6e 6c 65 73 73 20 6e 61 6d 65  ry") unless name
37d0: 20 26 26 20 2f 5c 41 5b 41 2d 5a 61 2d 7a 30 2d   && /\A[A-Za-z0-
37e0: 39 5f 5d 5b 41 2d 5a 61 2d 7a 30 2d 39 2e 5f 2d  9_][A-Za-z0-9._-
37f0: 5d 7b 30 2c 39 39 7d 5c 7a 2f 2e 6d 61 74 63 68  ]{0,99}\z/.match
3800: 65 73 3f 28 6e 61 6d 65 29 20 26 26 20 21 6e 61  es?(name) && !na
3810: 6d 65 2e 65 6e 64 73 5f 77 69 74 68 3f 28 22 2e  me.ends_with?(".
3820: 66 6f 73 73 69 6c 22 29 0a 20 20 20 20 72 61 69  fossil").    rai
3830: 73 65 20 52 65 66 75 73 65 64 2e 6e 65 77 28 22  se Refused.new("
3840: 72 65 70 6f 73 69 74 6f 72 79 20 69 73 20 6e 6f  repository is no
3850: 74 20 61 20 72 65 67 75 6c 61 72 20 66 69 6c 65  t a regular file
3860: 22 29 20 75 6e 6c 65 73 73 20 46 69 6c 65 2e 66  ") unless File.f
3870: 69 6c 65 3f 28 46 69 6c 65 2e 6a 6f 69 6e 28 72  ile?(File.join(r
3880: 65 70 6f 73 69 74 6f 72 69 65 73 2c 20 6e 61 6d  epositories, nam
3890: 65 20 2b 20 22 2e 66 6f 73 73 69 6c 22 29 29 0a  e + ".fossil")).
38a0: 20 20 20 20 49 64 65 6e 74 69 74 79 2e 6e 65 77      Identity.new
38b0: 28 6e 61 6d 65 2c 20 63 61 70 73 29 0a 20 20 65  (name, caps).  e
38c0: 6e 64 0a 0a 20 20 64 65 66 20 73 65 6c 66 2e 72  nd..  def self.r
38d0: 65 71 75 65 73 74 28 6c 69 6e 65 20 3a 20 53 74  equest(line : St
38e0: 72 69 6e 67 29 20 3a 20 52 65 71 75 65 73 74 0a  ring) : Request.
38f0: 20 20 20 20 6f 62 6a 65 63 74 20 3d 20 4a 53 4f      object = JSO
3900: 4e 2e 70 61 72 73 65 28 6c 69 6e 65 29 2e 61 73  N.parse(line).as
3910: 5f 68 3f 0a 20 20 20 20 72 61 69 73 65 20 52 65  _h?.    raise Re
3920: 66 75 73 65 64 2e 6e 65 77 28 22 72 65 71 75 65  fused.new("reque
3930: 73 74 20 6d 75 73 74 20 62 65 20 61 6e 20 6f 62  st must be an ob
3940: 6a 65 63 74 22 29 20 75 6e 6c 65 73 73 20 6f 62  ject") unless ob
3950: 6a 65 63 74 0a 20 20 20 20 6f 62 6a 65 63 74 2e  ject.    object.
3960: 65 61 63 68 5f 6b 65 79 20 7b 20 7c 6b 65 79 7c  each_key { |key|
3970: 20 72 61 69 73 65 20 52 65 66 75 73 65 64 2e 6e   raise Refused.n
3980: 65 77 28 22 75 6e 6b 6e 6f 77 6e 20 6b 65 79 3a  ew("unknown key:
3990: 20 23 7b 6b 65 79 7d 22 29 20 75 6e 6c 65 73 73   #{key}") unless
39a0: 20 7b 22 6f 63 78 5f 72 65 63 65 69 70 74 22 2c   {"ocx_receipt",
39b0: 20 22 61 72 74 69 66 61 63 74 73 22 2c 20 22 63   "artifacts", "c
39c0: 61 70 61 62 69 6c 69 74 69 65 73 5f 6f 66 22 7d  apabilities_of"}
39d0: 2e 69 6e 63 6c 75 64 65 73 3f 28 6b 65 79 29 20  .includes?(key) 
39e0: 7d 0a 20 20 20 20 72 61 69 73 65 20 52 65 66 75  }.    raise Refu
39f0: 73 65 64 2e 6e 65 77 28 22 69 6e 76 61 6c 69 64  sed.new("invalid
3a00: 20 6f 63 78 5f 72 65 63 65 69 70 74 22 29 20 75   ocx_receipt") u
3a10: 6e 6c 65 73 73 20 6f 62 6a 65 63 74 5b 22 6f 63  nless object["oc
3a20: 78 5f 72 65 63 65 69 70 74 22 5d 3f 2e 74 72 79  x_receipt"]?.try
3a30: 28 26 2e 61 73 5f 69 36 34 3f 29 20 3d 3d 20 31  (&.as_i64?) == 1
3a40: 0a 20 20 20 20 68 61 73 68 65 73 20 3d 20 5b 5d  .    hashes = []
3a50: 20 6f 66 20 53 74 72 69 6e 67 0a 20 20 20 20 69   of String.    i
3a60: 66 20 76 61 6c 75 65 20 3d 20 6f 62 6a 65 63 74  f value = object
3a70: 5b 22 61 72 74 69 66 61 63 74 73 22 5d 3f 0a 20  ["artifacts"]?. 
3a80: 20 20 20 20 20 6c 69 73 74 20 3d 20 76 61 6c 75       list = valu
3a90: 65 2e 61 73 5f 61 3f 0a 20 20 20 20 20 20 72 61  e.as_a?.      ra
3aa0: 69 73 65 20 52 65 66 75 73 65 64 2e 6e 65 77 28  ise Refused.new(
3ab0: 22 69 6e 76 61 6c 69 64 20 61 72 74 69 66 61 63  "invalid artifac
3ac0: 74 73 22 29 20 75 6e 6c 65 73 73 20 6c 69 73 74  ts") unless list
3ad0: 20 26 26 20 6c 69 73 74 2e 73 69 7a 65 20 3c 3d   && list.size <=
3ae0: 20 36 34 0a 20 20 20 20 20 20 6c 69 73 74 2e 65   64.      list.e
3af0: 61 63 68 20 64 6f 20 7c 69 74 65 6d 7c 0a 20 20  ach do |item|.  
3b00: 20 20 20 20 20 20 68 61 73 68 20 3d 20 69 74 65        hash = ite
3b10: 6d 2e 61 73 5f 73 3f 0a 20 20 20 20 20 20 20 20  m.as_s?.        
3b20: 72 61 69 73 65 20 52 65 66 75 73 65 64 2e 6e 65  raise Refused.ne
3b30: 77 28 22 69 6e 76 61 6c 69 64 20 61 72 74 69 66  w("invalid artif
3b40: 61 63 74 22 29 20 75 6e 6c 65 73 73 20 68 61 73  act") unless has
3b50: 68 20 26 26 20 2f 5c 41 28 5b 30 2d 39 61 2d 66  h && /\A([0-9a-f
3b60: 5d 7b 34 30 7d 7c 5b 30 2d 39 61 2d 66 5d 7b 36  ]{40}|[0-9a-f]{6
3b70: 34 7d 29 5c 7a 2f 2e 6d 61 74 63 68 65 73 3f 28  4})\z/.matches?(
3b80: 68 61 73 68 29 0a 20 20 20 20 20 20 20 20 68 61  hash).        ha
3b90: 73 68 65 73 20 3c 3c 20 68 61 73 68 0a 20 20 20  shes << hash.   
3ba0: 20 20 20 65 6e 64 0a 20 20 20 20 65 6e 64 0a 20     end.    end. 
3bb0: 20 20 20 75 73 65 72 20 3d 20 6e 69 6c 0a 20 20     user = nil.  
3bc0: 20 20 69 66 20 76 61 6c 75 65 20 3d 20 6f 62 6a    if value = obj
3bd0: 65 63 74 5b 22 63 61 70 61 62 69 6c 69 74 69 65  ect["capabilitie
3be0: 73 5f 6f 66 22 5d 3f 0a 20 20 20 20 20 20 75 73  s_of"]?.      us
3bf0: 65 72 20 3d 20 76 61 6c 75 65 2e 61 73 5f 73 3f  er = value.as_s?
3c00: 0a 20 20 20 20 20 20 72 61 69 73 65 20 52 65 66  .      raise Ref
3c10: 75 73 65 64 2e 6e 65 77 28 22 69 6e 76 61 6c 69  used.new("invali
3c20: 64 20 63 61 70 61 62 69 6c 69 74 69 65 73 5f 6f  d capabilities_o
3c30: 66 22 29 20 75 6e 6c 65 73 73 20 75 73 65 72 20  f") unless user 
3c40: 26 26 20 75 73 65 72 2e 73 69 7a 65 20 3c 3d 20  && user.size <= 
3c50: 31 30 30 20 26 26 20 75 73 65 72 2e 65 61 63 68  100 && user.each
3c60: 5f 63 68 61 72 2e 6e 6f 6e 65 3f 28 26 2e 63 6f  _char.none?(&.co
3c70: 6e 74 72 6f 6c 3f 29 0a 20 20 20 20 65 6e 64 0a  ntrol?).    end.
3c80: 20 20 20 20 52 65 71 75 65 73 74 2e 6e 65 77 28      Request.new(
3c90: 68 61 73 68 65 73 2c 20 75 73 65 72 29 0a 20 20  hashes, user).  
3ca0: 65 6e 64 0a 0a 20 20 63 6c 61 73 73 20 44 61 74  end..  class Dat
3cb0: 61 62 61 73 65 0a 20 20 20 20 41 52 54 49 46 41  abase.    ARTIFA
3cc0: 43 54 20 20 20 20 20 20 20 20 3d 20 22 53 45 4c  CT        = "SEL
3cd0: 45 43 54 20 62 2e 72 69 64 2c 20 62 2e 72 63 76  ECT b.rid, b.rcv
3ce0: 69 64 2c 20 45 58 49 53 54 53 28 53 45 4c 45 43  id, EXISTS(SELEC
3cf0: 54 20 31 20 46 52 4f 4d 20 70 72 69 76 61 74 65  T 1 FROM private
3d00: 20 70 20 57 48 45 52 45 20 70 2e 72 69 64 3d 62   p WHERE p.rid=b
3d10: 2e 72 69 64 29 2c 20 75 2e 6c 6f 67 69 6e 2c 20  .rid), u.login, 
3d20: 75 2e 63 61 70 20 46 52 4f 4d 20 62 6c 6f 62 20  u.cap FROM blob 
3d30: 62 20 4c 45 46 54 20 4a 4f 49 4e 20 72 63 76 66  b LEFT JOIN rcvf
3d40: 72 6f 6d 20 72 20 4f 4e 20 72 2e 72 63 76 69 64  rom r ON r.rcvid
3d50: 3d 62 2e 72 63 76 69 64 20 4c 45 46 54 20 4a 4f  =b.rcvid LEFT JO
3d60: 49 4e 20 75 73 65 72 20 75 20 4f 4e 20 75 2e 75  IN user u ON u.u
3d70: 69 64 3d 72 2e 75 69 64 20 57 48 45 52 45 20 62  id=r.uid WHERE b
3d80: 2e 75 75 69 64 3d 3f 31 20 41 4e 44 20 62 2e 73  .uuid=?1 AND b.s
3d90: 69 7a 65 3e 3d 30 22 0a 20 20 20 20 55 53 45 52  ize>=0".    USER
3da0: 20 20 20 20 20 20 20 20 20 20 20 20 3d 20 22 53              = "S
3db0: 45 4c 45 43 54 20 63 61 70 20 46 52 4f 4d 20 75  ELECT cap FROM u
3dc0: 73 65 72 20 57 48 45 52 45 20 6c 6f 67 69 6e 3d  ser WHERE login=
3dd0: 3f 31 22 0a 20 20 20 20 44 45 46 41 55 4c 54 53  ?1".    DEFAULTS
3de0: 20 20 20 20 20 20 20 20 3d 20 22 53 45 4c 45 43          = "SELEC
3df0: 54 20 6c 6f 67 69 6e 2c 20 63 61 70 20 46 52 4f  T login, cap FRO
3e00: 4d 20 75 73 65 72 20 57 48 45 52 45 20 6c 6f 67  M user WHERE log
3e10: 69 6e 20 49 4e 20 28 27 6e 6f 62 6f 64 79 27 2c  in IN ('nobody',
3e20: 27 61 6e 6f 6e 79 6d 6f 75 73 27 2c 27 72 65 61  'anonymous','rea
3e30: 64 65 72 27 2c 27 64 65 76 65 6c 6f 70 65 72 27  der','developer'
3e40: 29 22 0a 20 20 20 20 43 4f 4e 46 49 47 20 20 20  )".    CONFIG   
3e50: 20 20 20 20 20 20 20 3d 20 22 53 45 4c 45 43 54         = "SELECT
3e60: 20 76 61 6c 75 65 20 46 52 4f 4d 20 63 6f 6e 66   value FROM conf
3e70: 69 67 20 57 48 45 52 45 20 6e 61 6d 65 3d 3f 31  ig WHERE name=?1
3e80: 22 0a 20 20 20 20 45 52 52 4f 52 53 20 20 20 20  ".    ERRORS    
3e90: 20 20 20 20 20 20 3d 20 25 77 28 4f 4b 20 45 52        = %w(OK ER
3ea0: 52 4f 52 20 49 4e 54 45 52 4e 41 4c 20 50 45 52  ROR INTERNAL PER
3eb0: 4d 20 41 42 4f 52 54 20 42 55 53 59 20 4c 4f 43  M ABORT BUSY LOC
3ec0: 4b 45 44 20 4e 4f 4d 45 4d 20 52 45 41 44 4f 4e  KED NOMEM READON
3ed0: 4c 59 20 49 4e 54 45 52 52 55 50 54 20 49 4f 45  LY INTERRUPT IOE
3ee0: 52 52 20 43 4f 52 52 55 50 54 20 4e 4f 54 46 4f  RR CORRUPT NOTFO
3ef0: 55 4e 44 20 46 55 4c 4c 20 43 41 4e 54 4f 50 45  UND FULL CANTOPE
3f00: 4e 20 50 52 4f 54 4f 43 4f 4c 20 45 4d 50 54 59  N PROTOCOL EMPTY
3f10: 20 53 43 48 45 4d 41 20 54 4f 4f 42 49 47 20 43   SCHEMA TOOBIG C
3f20: 4f 4e 53 54 52 41 49 4e 54 20 4d 49 53 4d 41 54  ONSTRAINT MISMAT
3f30: 43 48 20 4d 49 53 55 53 45 20 4e 4f 4c 46 53 20  CH MISUSE NOLFS 
3f40: 41 55 54 48 20 46 4f 52 4d 41 54 20 52 41 4e 47  AUTH FORMAT RANG
3f50: 45 20 4e 4f 54 41 44 42 20 4e 4f 54 49 43 45 20  E NOTADB NOTICE 
3f60: 57 41 52 4e 49 4e 47 29 0a 20 20 20 20 52 45 41  WARNING).    REA
3f70: 44 4f 4e 4c 59 5f 45 52 52 4f 52 53 20 3d 20 25  DONLY_ERRORS = %
3f80: 77 28 52 45 43 4f 56 45 52 59 20 43 41 4e 54 4c  w(RECOVERY CANTL
3f90: 4f 43 4b 20 52 4f 4c 4c 42 41 43 4b 20 44 42 4d  OCK ROLLBACK DBM
3fa0: 4f 56 45 44 20 43 41 4e 54 49 4e 49 54 20 44 49  OVED CANTINIT DI
3fb0: 52 45 43 54 4f 52 59 29 0a 20 20 20 20 40 64 62  RECTORY).    @db
3fc0: 20 3d 20 50 6f 69 6e 74 65 72 28 56 6f 69 64 29   = Pointer(Void)
3fd0: 2e 6e 75 6c 6c 0a 0a 20 20 20 20 64 65 66 20 69  .null..    def i
3fe0: 6e 69 74 69 61 6c 69 7a 65 28 70 61 74 68 20 3a  nitialize(path :
3ff0: 20 53 74 72 69 6e 67 29 0a 20 20 20 20 20 20 63   String).      c
4000: 68 65 63 6b 20 4c 69 62 53 51 4c 69 74 65 33 2e  heck LibSQLite3.
4010: 6f 70 65 6e 5f 76 32 28 22 66 69 6c 65 3a 22 20  open_v2("file:" 
4020: 2b 20 55 52 49 2e 65 6e 63 6f 64 65 5f 70 61 74  + URI.encode_pat
4030: 68 28 70 61 74 68 29 20 2b 20 22 3f 6d 6f 64 65  h(path) + "?mode
4040: 3d 72 6f 22 2c 20 70 6f 69 6e 74 65 72 6f 66 28  =ro", pointerof(
4050: 40 64 62 29 2c 20 31 20 7c 20 36 34 2c 20 6e 69  @db), 1 | 64, ni
4060: 6c 29 0a 20 20 20 20 20 20 65 78 65 63 75 74 65  l).      execute
4070: 20 22 50 52 41 47 4d 41 20 71 75 65 72 79 5f 6f   "PRAGMA query_o
4080: 6e 6c 79 3d 31 22 0a 20 20 20 20 20 20 63 68 65  nly=1".      che
4090: 63 6b 20 4c 69 62 53 51 4c 69 74 65 33 2e 62 75  ck LibSQLite3.bu
40a0: 73 79 5f 74 69 6d 65 6f 75 74 28 40 64 62 2c 20  sy_timeout(@db, 
40b0: 32 30 30 30 29 0a 20 20 20 20 20 20 65 78 65 63  2000).      exec
40c0: 75 74 65 20 22 42 45 47 49 4e 22 0a 20 20 20 20  ute "BEGIN".    
40d0: 72 65 73 63 75 65 20 65 78 0a 20 20 20 20 20 20  rescue ex.      
40e0: 63 6c 6f 73 65 0a 20 20 20 20 20 20 72 61 69 73  close.      rais
40f0: 65 20 65 78 0a 20 20 20 20 65 6e 64 0a 0a 20 20  e ex.    end..  
4100: 20 20 64 65 66 20 63 68 65 63 6b 28 63 6f 64 65    def check(code
4110: 20 3a 20 49 6e 74 33 32 29 20 3a 20 4e 69 6c 0a   : Int32) : Nil.
4120: 20 20 20 20 20 20 72 65 74 75 72 6e 20 69 66 20        return if 
4130: 63 6f 64 65 20 3d 3d 20 30 0a 20 20 20 20 20 20  code == 0.      
4140: 65 78 74 65 6e 64 65 64 20 3d 20 4c 69 62 53 51  extended = LibSQ
4150: 4c 69 74 65 33 2e 65 78 74 65 6e 64 65 64 5f 65  Lite3.extended_e
4160: 72 72 63 6f 64 65 28 40 64 62 29 0a 20 20 20 20  rrcode(@db).    
4170: 20 20 62 61 73 65 20 3d 20 65 78 74 65 6e 64 65    base = extende
4180: 64 20 26 20 32 35 35 0a 20 20 20 20 20 20 6e 61  d & 255.      na
4190: 6d 65 20 3d 20 22 53 51 4c 49 54 45 5f 22 20 2b  me = "SQLITE_" +
41a0: 20 28 45 52 52 4f 52 53 5b 62 61 73 65 5d 3f 20   (ERRORS[base]? 
41b0: 7c 7c 20 22 45 52 52 4f 52 22 29 0a 20 20 20 20  || "ERROR").    
41c0: 20 20 69 66 20 62 61 73 65 20 3d 3d 20 38 20 26    if base == 8 &
41d0: 26 20 28 73 75 66 66 69 78 20 3d 20 52 45 41 44  & (suffix = READ
41e0: 4f 4e 4c 59 5f 45 52 52 4f 52 53 5b 28 65 78 74  ONLY_ERRORS[(ext
41f0: 65 6e 64 65 64 20 3e 3e 20 38 29 20 2d 20 31 5d  ended >> 8) - 1]
4200: 3f 29 20 26 26 20 65 78 74 65 6e 64 65 64 20 3e  ?) && extended >
4210: 20 32 35 35 0a 20 20 20 20 20 20 20 20 6e 61 6d   255.        nam
4220: 65 20 2b 3d 20 22 5f 22 20 2b 20 73 75 66 66 69  e += "_" + suffi
4230: 78 0a 20 20 20 20 20 20 65 6e 64 0a 20 20 20 20  x.      end.    
4240: 20 20 72 61 69 73 65 20 55 6e 61 76 61 69 6c 61    raise Unavaila
4250: 62 6c 65 2e 6e 65 77 28 22 23 7b 6e 61 6d 65 7d  ble.new("#{name}
4260: 20 28 23 7b 65 78 74 65 6e 64 65 64 7d 29 3a 20   (#{extended}): 
4270: 23 7b 53 74 72 69 6e 67 2e 6e 65 77 28 4c 69 62  #{String.new(Lib
4280: 53 51 4c 69 74 65 33 2e 65 72 72 6d 73 67 28 40  SQLite3.errmsg(@
4290: 64 62 29 29 7d 22 29 0a 20 20 20 20 65 6e 64 0a  db))}").    end.
42a0: 0a 20 20 20 20 64 65 66 20 65 78 65 63 75 74 65  .    def execute
42b0: 28 73 71 6c 20 3a 20 53 74 72 69 6e 67 29 20 3a  (sql : String) :
42c0: 20 4e 69 6c 0a 20 20 20 20 20 20 63 68 65 63 6b   Nil.      check
42d0: 20 4c 69 62 53 51 4c 69 74 65 33 2e 65 78 65 63   LibSQLite3.exec
42e0: 28 40 64 62 2c 20 73 71 6c 2c 20 6e 69 6c 2c 20  (@db, sql, nil, 
42f0: 6e 69 6c 2c 20 6e 69 6c 29 0a 20 20 20 20 65 6e  nil, nil).    en
4300: 64 0a 0a 20 20 20 20 64 65 66 20 72 6f 77 73 28  d..    def rows(
4310: 73 71 6c 20 3a 20 53 74 72 69 6e 67 2c 20 76 61  sql : String, va
4320: 6c 75 65 20 3a 20 53 74 72 69 6e 67 3f 20 3d 20  lue : String? = 
4330: 6e 69 6c 2c 20 26 62 6c 6f 63 6b 20 3a 20 50 6f  nil, &block : Po
4340: 69 6e 74 65 72 28 56 6f 69 64 29 20 2d 3e 29 20  inter(Void) ->) 
4350: 3a 20 4e 69 6c 0a 20 20 20 20 20 20 73 74 61 74  : Nil.      stat
4360: 65 6d 65 6e 74 20 3d 20 50 6f 69 6e 74 65 72 28  ement = Pointer(
4370: 56 6f 69 64 29 2e 6e 75 6c 6c 0a 20 20 20 20 20  Void).null.     
4380: 20 62 65 67 69 6e 0a 20 20 20 20 20 20 20 20 63   begin.        c
4390: 68 65 63 6b 20 4c 69 62 53 51 4c 69 74 65 33 2e  heck LibSQLite3.
43a0: 70 72 65 70 61 72 65 5f 76 32 28 40 64 62 2c 20  prepare_v2(@db, 
43b0: 73 71 6c 2c 20 2d 31 2c 20 70 6f 69 6e 74 65 72  sql, -1, pointer
43c0: 6f 66 28 73 74 61 74 65 6d 65 6e 74 29 2c 20 6e  of(statement), n
43d0: 69 6c 29 0a 20 20 20 20 20 20 20 20 63 68 65 63  il).        chec
43e0: 6b 20 4c 69 62 53 51 4c 69 74 65 33 2e 62 69 6e  k LibSQLite3.bin
43f0: 64 5f 74 65 78 74 28 73 74 61 74 65 6d 65 6e 74  d_text(statement
4400: 2c 20 31 2c 20 76 61 6c 75 65 2c 20 76 61 6c 75  , 1, value, valu
4410: 65 2e 62 79 74 65 73 69 7a 65 2c 20 50 6f 69 6e  e.bytesize, Poin
4420: 74 65 72 28 56 6f 69 64 29 2e 6e 65 77 28 55 49  ter(Void).new(UI
4430: 6e 74 36 34 3a 3a 4d 41 58 29 29 20 69 66 20 76  nt64::MAX)) if v
4440: 61 6c 75 65 0a 20 20 20 20 20 20 20 20 6c 6f 6f  alue.        loo
4450: 70 20 64 6f 0a 20 20 20 20 20 20 20 20 20 20 63  p do.          c
4460: 6f 64 65 20 3d 20 4c 69 62 53 51 4c 69 74 65 33  ode = LibSQLite3
4470: 2e 73 74 65 70 28 73 74 61 74 65 6d 65 6e 74 29  .step(statement)
4480: 0a 20 20 20 20 20 20 20 20 20 20 62 72 65 61 6b  .          break
4490: 20 69 66 20 63 6f 64 65 20 3d 3d 20 31 30 31 0a   if code == 101.
44a0: 20 20 20 20 20 20 20 20 20 20 63 68 65 63 6b 20            check 
44b0: 63 6f 64 65 20 75 6e 6c 65 73 73 20 63 6f 64 65  code unless code
44c0: 20 3d 3d 20 31 30 30 0a 20 20 20 20 20 20 20 20   == 100.        
44d0: 20 20 79 69 65 6c 64 20 73 74 61 74 65 6d 65 6e    yield statemen
44e0: 74 0a 20 20 20 20 20 20 20 20 65 6e 64 0a 20 20  t.        end.  
44f0: 20 20 20 20 65 6e 73 75 72 65 0a 20 20 20 20 20      ensure.     
4500: 20 20 20 4c 69 62 53 51 4c 69 74 65 33 2e 66 69     LibSQLite3.fi
4510: 6e 61 6c 69 7a 65 28 73 74 61 74 65 6d 65 6e 74  nalize(statement
4520: 29 20 75 6e 6c 65 73 73 20 73 74 61 74 65 6d 65  ) unless stateme
4530: 6e 74 2e 6e 75 6c 6c 3f 0a 20 20 20 20 20 20 65  nt.null?.      e
4540: 6e 64 0a 20 20 20 20 65 6e 64 0a 0a 20 20 20 20  nd.    end..    
4550: 64 65 66 20 74 65 78 74 28 73 74 61 74 65 6d 65  def text(stateme
4560: 6e 74 20 3a 20 50 6f 69 6e 74 65 72 28 56 6f 69  nt : Pointer(Voi
4570: 64 29 2c 20 63 6f 6c 75 6d 6e 20 3a 20 49 6e 74  d), column : Int
4580: 33 32 29 20 3a 20 53 74 72 69 6e 67 3f 0a 20 20  32) : String?.  
4590: 20 20 20 20 53 74 72 69 6e 67 2e 6e 65 77 28 4c      String.new(L
45a0: 69 62 53 51 4c 69 74 65 33 2e 63 6f 6c 75 6d 6e  ibSQLite3.column
45b0: 5f 74 65 78 74 28 73 74 61 74 65 6d 65 6e 74 2c  _text(statement,
45c0: 20 63 6f 6c 75 6d 6e 29 29 20 75 6e 6c 65 73 73   column)) unless
45d0: 20 4c 69 62 53 51 4c 69 74 65 33 2e 63 6f 6c 75   LibSQLite3.colu
45e0: 6d 6e 5f 74 79 70 65 28 73 74 61 74 65 6d 65 6e  mn_type(statemen
45f0: 74 2c 20 63 6f 6c 75 6d 6e 29 20 3d 3d 20 35 0a  t, column) == 5.
4600: 20 20 20 20 65 6e 64 0a 0a 20 20 20 20 64 65 66      end..    def
4610: 20 65 78 70 61 6e 64 65 64 28 63 61 70 20 3a 20   expanded(cap : 
4620: 53 74 72 69 6e 67 2c 20 64 65 66 61 75 6c 74 73  String, defaults
4630: 20 3a 20 48 61 73 68 28 53 74 72 69 6e 67 2c 20   : Hash(String, 
4640: 53 74 72 69 6e 67 29 29 20 3a 20 53 74 72 69 6e  String)) : Strin
4650: 67 0a 20 20 20 20 20 20 63 61 70 73 20 3d 20 53  g.      caps = S
4660: 65 74 28 43 68 61 72 29 2e 6e 65 77 0a 20 20 20  et(Char).new.   
4670: 20 20 20 61 64 64 20 3d 20 2d 3e 28 76 61 6c 75     add = ->(valu
4680: 65 20 3a 20 53 74 72 69 6e 67 29 20 7b 20 76 61  e : String) { va
4690: 6c 75 65 2e 65 61 63 68 5f 63 68 61 72 20 7b 20  lue.each_char { 
46a0: 7c 63 68 61 72 7c 20 63 61 70 73 20 3c 3c 20 63  |char| caps << c
46b0: 68 61 72 20 69 66 20 27 30 27 20 3c 3d 20 63 68  har if '0' <= ch
46c0: 61 72 20 3c 3d 20 27 7a 27 20 7d 20 7d 0a 20 20  ar <= 'z' } }.  
46d0: 20 20 20 20 61 64 64 2e 63 61 6c 6c 28 63 61 70      add.call(cap
46e0: 29 0a 20 20 20 20 20 20 61 64 64 2e 63 61 6c 6c  ).      add.call
46f0: 28 64 65 66 61 75 6c 74 73 5b 22 61 6e 6f 6e 79  (defaults["anony
4700: 6d 6f 75 73 22 5d 3f 20 7c 7c 20 22 22 29 0a 20  mous"]? || ""). 
4710: 20 20 20 20 20 61 64 64 2e 63 61 6c 6c 28 64 65       add.call(de
4720: 66 61 75 6c 74 73 5b 22 6e 6f 62 6f 64 79 22 5d  faults["nobody"]
4730: 3f 20 7c 7c 20 22 22 29 0a 20 20 20 20 20 20 61  ? || "").      a
4740: 64 64 2e 63 61 6c 6c 28 22 62 63 64 65 66 67 68  dd.call("bcdefgh
4750: 69 6a 6b 6c 6d 6e 6f 70 71 72 74 77 7a 32 33 34  ijklmnopqrtwz234
4760: 35 36 37 41 44 22 29 20 69 66 20 63 61 70 73 2e  567AD") if caps.
4770: 69 6e 63 6c 75 64 65 73 3f 28 27 61 27 29 20 7c  includes?('a') |
4780: 7c 20 63 61 70 73 2e 69 6e 63 6c 75 64 65 73 3f  | caps.includes?
4790: 28 27 73 27 29 0a 20 20 20 20 20 20 64 65 76 65  ('s').      deve
47a0: 6c 6f 70 65 72 20 3d 20 63 61 70 73 2e 69 6e 63  loper = caps.inc
47b0: 6c 75 64 65 73 3f 28 27 76 27 29 0a 20 20 20 20  ludes?('v').    
47c0: 20 20 61 64 64 2e 63 61 6c 6c 28 64 65 66 61 75    add.call(defau
47d0: 6c 74 73 5b 22 64 65 76 65 6c 6f 70 65 72 22 5d  lts["developer"]
47e0: 3f 20 7c 7c 20 22 22 29 20 69 66 20 64 65 76 65  ? || "") if deve
47f0: 6c 6f 70 65 72 0a 20 20 20 20 20 20 69 66 20 63  loper.      if c
4800: 61 70 73 2e 69 6e 63 6c 75 64 65 73 3f 28 27 75  aps.includes?('u
4810: 27 29 0a 20 20 20 20 20 20 20 20 61 64 64 2e 63  ').        add.c
4820: 61 6c 6c 28 64 65 66 61 75 6c 74 73 5b 22 72 65  all(defaults["re
4830: 61 64 65 72 22 5d 3f 20 7c 7c 20 22 22 29 0a 20  ader"]? || ""). 
4840: 20 20 20 20 20 20 20 61 64 64 2e 63 61 6c 6c 28         add.call(
4850: 64 65 66 61 75 6c 74 73 5b 22 64 65 76 65 6c 6f  defaults["develo
4860: 70 65 72 22 5d 3f 20 7c 7c 20 22 22 29 20 69 66  per"]? || "") if
4870: 20 63 61 70 73 2e 69 6e 63 6c 75 64 65 73 3f 28   caps.includes?(
4880: 27 76 27 29 20 26 26 20 21 64 65 76 65 6c 6f 70  'v') && !develop
4890: 65 72 0a 20 20 20 20 20 20 65 6e 64 0a 20 20 20  er.      end.   
48a0: 20 20 20 28 28 27 61 27 2e 2e 27 7a 27 29 2e 74     (('a'..'z').t
48b0: 6f 5f 61 20 2b 20 28 27 30 27 2e 2e 27 39 27 29  o_a + ('0'..'9')
48c0: 2e 74 6f 5f 61 20 2b 20 28 27 41 27 2e 2e 27 5a  .to_a + ('A'..'Z
48d0: 27 29 2e 74 6f 5f 61 29 2e 73 65 6c 65 63 74 20  ').to_a).select 
48e0: 7b 20 7c 63 68 61 72 7c 20 63 61 70 73 2e 69 6e  { |char| caps.in
48f0: 63 6c 75 64 65 73 3f 28 63 68 61 72 29 20 7d 2e  cludes?(char) }.
4900: 6a 6f 69 6e 0a 20 20 20 20 65 6e 64 0a 0a 20 20  join.    end..  
4910: 20 20 64 65 66 20 6d 6f 64 65 72 61 74 65 64 28    def moderated(
4920: 6e 61 6d 65 20 3a 20 53 74 72 69 6e 67 2c 20 63  name : String, c
4930: 61 70 73 20 3a 20 53 74 72 69 6e 67 2c 20 70 65  aps : String, pe
4940: 72 6d 69 73 73 69 6f 6e 20 3a 20 43 68 61 72 29  rmission : Char)
4950: 20 3a 20 42 6f 6f 6c 0a 20 20 20 20 20 20 74 72   : Bool.      tr
4960: 75 74 68 20 3d 20 66 61 6c 73 65 0a 20 20 20 20  uth = false.    
4970: 20 20 72 6f 77 73 28 43 4f 4e 46 49 47 2c 20 6e    rows(CONFIG, n
4980: 61 6d 65 29 20 7b 20 7c 72 6f 77 7c 20 74 72 75  ame) { |row| tru
4990: 74 68 20 3d 20 7b 22 6f 6e 22 2c 20 22 79 65 73  th = {"on", "yes
49a0: 22 2c 20 22 74 72 75 65 22 2c 20 22 31 22 7d 2e  ", "true", "1"}.
49b0: 69 6e 63 6c 75 64 65 73 3f 28 28 74 65 78 74 28  includes?((text(
49c0: 72 6f 77 2c 20 30 29 20 7c 7c 20 22 22 29 2e 64  row, 0) || "").d
49d0: 6f 77 6e 63 61 73 65 29 20 7d 0a 20 20 20 20 20  owncase) }.     
49e0: 20 74 72 75 74 68 20 26 26 20 21 63 61 70 73 2e   truth && !caps.
49f0: 69 6e 63 6c 75 64 65 73 3f 28 70 65 72 6d 69 73  includes?(permis
4a00: 73 69 6f 6e 29 0a 20 20 20 20 65 6e 64 0a 0a 20  sion).    end.. 
4a10: 20 20 20 64 65 66 20 61 6e 73 77 65 72 28 69 64     def answer(id
4a20: 65 6e 74 69 74 79 20 3a 20 49 64 65 6e 74 69 74  entity : Identit
4a30: 79 2c 20 72 65 71 75 65 73 74 20 3a 20 52 65 71  y, request : Req
4a40: 75 65 73 74 29 20 3a 20 41 6e 73 77 65 72 0a 20  uest) : Answer. 
4a50: 20 20 20 20 20 64 65 66 61 75 6c 74 73 20 3d 20       defaults = 
4a60: 7b 7d 20 6f 66 20 53 74 72 69 6e 67 20 3d 3e 20  {} of String => 
4a70: 53 74 72 69 6e 67 0a 20 20 20 20 20 20 72 6f 77  String.      row
4a80: 73 28 44 45 46 41 55 4c 54 53 29 20 7b 20 7c 72  s(DEFAULTS) { |r
4a90: 6f 77 7c 20 64 65 66 61 75 6c 74 73 5b 74 65 78  ow| defaults[tex
4aa0: 74 28 72 6f 77 2c 20 30 29 2e 6e 6f 74 5f 6e 69  t(row, 0).not_ni
4ab0: 6c 21 5d 20 3d 20 74 65 78 74 28 72 6f 77 2c 20  l!] = text(row, 
4ac0: 31 29 20 7c 7c 20 22 22 20 7d 0a 20 20 20 20 20  1) || "" }.     
4ad0: 20 61 72 74 69 66 61 63 74 73 20 3d 20 72 65 71   artifacts = req
4ae0: 75 65 73 74 2e 61 72 74 69 66 61 63 74 73 2e 6d  uest.artifacts.m
4af0: 61 70 20 64 6f 20 7c 68 61 73 68 7c 0a 20 20 20  ap do |hash|.   
4b00: 20 20 20 20 20 61 72 74 69 66 61 63 74 20 3d 20       artifact = 
4b10: 41 72 74 69 66 61 63 74 2e 6e 65 77 28 68 61 73  Artifact.new(has
4b20: 68 29 0a 20 20 20 20 20 20 20 20 72 6f 77 73 28  h).        rows(
4b30: 41 52 54 49 46 41 43 54 2c 20 68 61 73 68 29 20  ARTIFACT, hash) 
4b40: 64 6f 20 7c 72 6f 77 7c 0a 20 20 20 20 20 20 20  do |row|.       
4b50: 20 20 20 6e 65 78 74 20 69 66 20 4c 69 62 53 51     next if LibSQ
4b60: 4c 69 74 65 33 2e 63 6f 6c 75 6d 6e 5f 69 6e 74  Lite3.column_int
4b70: 36 34 28 72 6f 77 2c 20 32 29 20 21 3d 20 30 20  64(row, 2) != 0 
4b80: 26 26 20 21 69 64 65 6e 74 69 74 79 2e 63 61 70  && !identity.cap
4b90: 61 62 69 6c 69 74 69 65 73 2e 69 6e 63 6c 75 64  abilities.includ
4ba0: 65 73 3f 28 27 78 27 29 0a 20 20 20 20 20 20 20  es?('x').       
4bb0: 20 20 20 73 65 6e 64 65 72 20 3d 20 74 65 78 74     sender = text
4bc0: 28 72 6f 77 2c 20 33 29 0a 20 20 20 20 20 20 20  (row, 3).       
4bd0: 20 20 20 61 72 74 69 66 61 63 74 20 3d 20 41 72     artifact = Ar
4be0: 74 69 66 61 63 74 2e 6e 65 77 28 61 72 74 69 66  tifact.new(artif
4bf0: 61 63 74 3a 20 68 61 73 68 2c 20 72 65 63 65 69  act: hash, recei
4c00: 76 65 64 3a 20 74 72 75 65 2c 20 73 65 6e 64 65  ved: true, sende
4c10: 72 3a 20 73 65 6e 64 65 72 2c 0a 20 20 20 20 20  r: sender,.     
4c20: 20 20 20 20 20 20 20 63 61 70 61 62 69 6c 69 74         capabilit
4c30: 69 65 73 3a 20 73 65 6e 64 65 72 20 3f 20 65 78  ies: sender ? ex
4c40: 70 61 6e 64 65 64 28 74 65 78 74 28 72 6f 77 2c  panded(text(row,
4c50: 20 34 29 20 7c 7c 20 22 22 2c 20 64 65 66 61 75   4) || "", defau
4c60: 6c 74 73 29 20 3a 20 6e 69 6c 2c 0a 20 20 20 20  lts) : nil,.    
4c70: 20 20 20 20 20 20 20 20 72 65 63 65 69 70 74 3a          receipt:
4c80: 20 4c 69 62 53 51 4c 69 74 65 33 2e 63 6f 6c 75   LibSQLite3.colu
4c90: 6d 6e 5f 69 6e 74 36 34 28 72 6f 77 2c 20 31 29  mn_int64(row, 1)
4ca0: 2c 20 72 69 64 3a 20 4c 69 62 53 51 4c 69 74 65  , rid: LibSQLite
4cb0: 33 2e 63 6f 6c 75 6d 6e 5f 69 6e 74 36 34 28 72  3.column_int64(r
4cc0: 6f 77 2c 20 30 29 29 0a 20 20 20 20 20 20 20 20  ow, 0)).        
4cd0: 65 6e 64 0a 20 20 20 20 20 20 20 20 61 72 74 69  end.        arti
4ce0: 66 61 63 74 0a 20 20 20 20 20 20 65 6e 64 0a 20  fact.      end. 
4cf0: 20 20 20 20 20 75 73 65 72 20 3d 20 6e 69 6c 0a       user = nil.
4d00: 20 20 20 20 20 20 69 66 20 6e 61 6d 65 20 3d 20        if name = 
4d10: 72 65 71 75 65 73 74 2e 63 61 70 61 62 69 6c 69  request.capabili
4d20: 74 69 65 73 5f 6f 66 0a 20 20 20 20 20 20 20 20  ties_of.        
4d30: 75 73 65 72 20 3d 20 55 73 65 72 2e 6e 65 77 28  user = User.new(
4d40: 6e 61 6d 65 29 0a 20 20 20 20 20 20 20 20 72 6f  name).        ro
4d50: 77 73 28 55 53 45 52 2c 20 6e 61 6d 65 29 20 64  ws(USER, name) d
4d60: 6f 20 7c 72 6f 77 7c 0a 20 20 20 20 20 20 20 20  o |row|.        
4d70: 20 20 63 61 70 73 20 3d 20 65 78 70 61 6e 64 65    caps = expande
4d80: 64 28 74 65 78 74 28 72 6f 77 2c 20 30 29 20 7c  d(text(row, 0) |
4d90: 7c 20 22 22 2c 20 64 65 66 61 75 6c 74 73 29 0a  | "", defaults).
4da0: 20 20 20 20 20 20 20 20 20 20 75 73 65 72 20 3d            user =
4db0: 20 55 73 65 72 2e 6e 65 77 28 6e 61 6d 65 2c 20   User.new(name, 
4dc0: 63 61 70 73 2c 20 6d 6f 64 65 72 61 74 65 64 28  caps, moderated(
4dd0: 22 6d 6f 64 72 65 71 2d 77 69 6b 69 22 2c 20 63  "modreq-wiki", c
4de0: 61 70 73 2c 20 27 6c 27 29 2c 20 6d 6f 64 65 72  aps, 'l'), moder
4df0: 61 74 65 64 28 22 6d 6f 64 72 65 71 2d 74 6b 74  ated("modreq-tkt
4e00: 22 2c 20 63 61 70 73 2c 20 27 71 27 29 29 0a 20  ", caps, 'q')). 
4e10: 20 20 20 20 20 20 20 65 6e 64 0a 20 20 20 20 20         end.     
4e20: 20 65 6e 64 0a 20 20 20 20 20 20 65 78 65 63 75   end.      execu
4e30: 74 65 20 22 43 4f 4d 4d 49 54 22 0a 20 20 20 20  te "COMMIT".    
4e40: 20 20 41 6e 73 77 65 72 2e 6e 65 77 28 61 72 74    Answer.new(art
4e50: 69 66 61 63 74 73 2c 20 75 73 65 72 29 0a 20 20  ifacts, user).  
4e60: 20 20 65 6e 64 0a 0a 20 20 20 20 64 65 66 20 63    end..    def c
4e70: 6c 6f 73 65 20 3a 20 4e 69 6c 0a 20 20 20 20 20  lose : Nil.     
4e80: 20 4c 69 62 53 51 4c 69 74 65 33 2e 63 6c 6f 73   LibSQLite3.clos
4e90: 65 5f 76 32 28 40 64 62 29 20 75 6e 6c 65 73 73  e_v2(@db) unless
4ea0: 20 40 64 62 2e 6e 75 6c 6c 3f 0a 20 20 20 20 20   @db.null?.     
4eb0: 20 40 64 62 20 3d 20 50 6f 69 6e 74 65 72 28 56   @db = Pointer(V
4ec0: 6f 69 64 29 2e 6e 75 6c 6c 0a 20 20 20 20 65 6e  oid).null.    en
4ed0: 64 0a 20 20 65 6e 64 0a 0a 20 20 64 65 66 20 73  d.  end..  def s
4ee0: 65 6c 66 2e 6c 69 6e 65 28 73 6f 63 6b 65 74 20  elf.line(socket 
4ef0: 3a 20 55 4e 49 58 53 6f 63 6b 65 74 2c 20 6c 69  : UNIXSocket, li
4f00: 6d 69 74 20 3a 20 49 6e 74 33 32 2c 20 64 65 61  mit : Int32, dea
4f10: 64 6c 69 6e 65 20 3a 20 54 69 6d 65 29 20 3a 20  dline : Time) : 
4f20: 53 74 72 69 6e 67 0a 20 20 20 20 62 79 74 65 73  String.    bytes
4f30: 20 3d 20 49 4f 3a 3a 4d 65 6d 6f 72 79 2e 6e 65   = IO::Memory.ne
4f40: 77 0a 20 20 20 20 6c 6f 6f 70 20 64 6f 0a 20 20  w.    loop do.  
4f50: 20 20 20 20 72 65 6d 61 69 6e 69 6e 67 20 3d 20      remaining = 
4f60: 64 65 61 64 6c 69 6e 65 20 2d 20 54 69 6d 65 2e  deadline - Time.
4f70: 75 74 63 0a 20 20 20 20 20 20 72 61 69 73 65 20  utc.      raise 
4f80: 49 4f 3a 3a 54 69 6d 65 6f 75 74 45 72 72 6f 72  IO::TimeoutError
4f90: 2e 6e 65 77 28 22 64 65 61 64 6c 69 6e 65 22 29  .new("deadline")
4fa0: 20 69 66 20 72 65 6d 61 69 6e 69 6e 67 20 3c 3d   if remaining <=
4fb0: 20 54 69 6d 65 3a 3a 53 70 61 6e 2e 7a 65 72 6f   Time::Span.zero
4fc0: 0a 20 20 20 20 20 20 73 6f 63 6b 65 74 2e 72 65  .      socket.re
4fd0: 61 64 5f 74 69 6d 65 6f 75 74 20 3d 20 72 65 6d  ad_timeout = rem
4fe0: 61 69 6e 69 6e 67 0a 20 20 20 20 20 20 62 79 74  aining.      byt
4ff0: 65 20 3d 20 73 6f 63 6b 65 74 2e 72 65 61 64 5f  e = socket.read_
5000: 62 79 74 65 0a 20 20 20 20 20 20 72 61 69 73 65  byte.      raise
5010: 20 52 65 66 75 73 65 64 2e 6e 65 77 28 22 65 78   Refused.new("ex
5020: 70 65 63 74 65 64 20 74 77 6f 20 4a 53 4f 4e 20  pected two JSON 
5030: 6c 69 6e 65 73 22 29 20 75 6e 6c 65 73 73 20 62  lines") unless b
5040: 79 74 65 0a 20 20 20 20 20 20 62 72 65 61 6b 20  yte.      break 
5050: 69 66 20 62 79 74 65 20 3d 3d 20 31 30 0a 20 20  if byte == 10.  
5060: 20 20 20 20 72 61 69 73 65 20 52 65 66 75 73 65      raise Refuse
5070: 64 2e 6e 65 77 28 22 6c 69 6e 65 20 74 6f 6f 20  d.new("line too 
5080: 6c 6f 6e 67 22 29 20 69 66 20 62 79 74 65 73 2e  long") if bytes.
5090: 73 69 7a 65 20 3e 3d 20 6c 69 6d 69 74 0a 20 20  size >= limit.  
50a0: 20 20 20 20 62 79 74 65 73 2e 77 72 69 74 65 5f      bytes.write_
50b0: 62 79 74 65 28 62 79 74 65 29 0a 20 20 20 20 65  byte(byte).    e
50c0: 6e 64 0a 20 20 20 20 62 79 74 65 73 2e 74 6f 5f  nd.    bytes.to_
50d0: 73 0a 20 20 72 65 73 63 75 65 20 49 4f 3a 3a 54  s.  rescue IO::T
50e0: 69 6d 65 6f 75 74 45 72 72 6f 72 0a 20 20 20 20  imeoutError.    
50f0: 72 61 69 73 65 20 52 65 66 75 73 65 64 2e 6e 65  raise Refused.ne
5100: 77 28 22 72 65 71 75 65 73 74 20 6e 6f 74 20 72  w("request not r
5110: 65 63 65 69 76 65 64 20 77 69 74 68 69 6e 20 32  eceived within 2
5120: 20 73 22 29 0a 20 20 65 6e 64 0a 0a 20 20 64 65   s").  end..  de
5130: 66 20 73 65 6c 66 2e 73 65 72 76 65 28 73 6f 63  f self.serve(soc
5140: 6b 65 74 20 3a 20 55 4e 49 58 53 6f 63 6b 65 74  ket : UNIXSocket
5150: 2c 20 72 65 70 6f 73 69 74 6f 72 69 65 73 20 3a  , repositories :
5160: 20 53 74 72 69 6e 67 2c 20 73 74 61 72 74 65 64   String, started
5170: 20 3a 20 54 69 6d 65 2c 20 62 75 73 79 20 3a 20   : Time, busy : 
5180: 42 6f 6f 6c 29 20 3a 20 4e 69 6c 0a 20 20 20 20  Bool) : Nil.    
5190: 72 65 70 6f 73 69 74 6f 72 79 20 3d 20 22 2d 22  repository = "-"
51a0: 0a 20 20 20 20 63 6f 75 6e 74 20 3d 20 30 0a 20  .    count = 0. 
51b0: 20 20 20 6f 75 74 63 6f 6d 65 20 3d 20 22 72 65     outcome = "re
51c0: 66 75 73 65 64 22 0a 20 20 20 20 73 6f 63 6b 65  fused".    socke
51d0: 74 2e 77 72 69 74 65 5f 74 69 6d 65 6f 75 74 20  t.write_timeout 
51e0: 3d 20 32 2e 73 65 63 6f 6e 64 73 0a 20 20 20 20  = 2.seconds.    
51f0: 63 72 65 64 65 6e 74 69 61 6c 73 20 3d 20 52 65  credentials = Re
5200: 63 65 69 70 74 50 65 65 72 3a 3a 43 72 65 64 65  ceiptPeer::Crede
5210: 6e 74 69 61 6c 73 2e 6e 65 77 0a 20 20 20 20 73  ntials.new.    s
5220: 69 7a 65 20 3d 20 73 69 7a 65 6f 66 28 52 65 63  ize = sizeof(Rec
5230: 65 69 70 74 50 65 65 72 3a 3a 43 72 65 64 65 6e  eiptPeer::Creden
5240: 74 69 61 6c 73 29 2e 74 6f 5f 75 33 32 0a 20 20  tials).to_u32.  
5250: 20 20 69 66 20 52 65 63 65 69 70 74 50 65 65 72    if ReceiptPeer
5260: 2e 67 65 74 73 6f 63 6b 6f 70 74 28 73 6f 63 6b  .getsockopt(sock
5270: 65 74 2e 66 64 2c 20 31 2c 20 31 37 2c 20 70 6f  et.fd, 1, 17, po
5280: 69 6e 74 65 72 6f 66 28 63 72 65 64 65 6e 74 69  interof(credenti
5290: 61 6c 73 29 2c 20 70 6f 69 6e 74 65 72 6f 66 28  als), pointerof(
52a0: 73 69 7a 65 29 29 20 21 3d 20 30 20 7c 7c 20 73  size)) != 0 || s
52b0: 69 7a 65 20 21 3d 20 73 69 7a 65 6f 66 28 52 65  ize != sizeof(Re
52c0: 63 65 69 70 74 50 65 65 72 3a 3a 43 72 65 64 65  ceiptPeer::Crede
52d0: 6e 74 69 61 6c 73 29 20 7c 7c 20 63 72 65 64 65  ntials) || crede
52e0: 6e 74 69 61 6c 73 2e 75 69 64 20 21 3d 20 4c 69  ntials.uid != Li
52f0: 62 43 2e 67 65 74 75 69 64 0a 20 20 20 20 20 20  bC.getuid.      
5300: 72 61 69 73 65 20 52 65 66 75 73 65 64 2e 6e 65  raise Refused.ne
5310: 77 28 22 70 65 65 72 20 75 69 64 20 64 69 66 66  w("peer uid diff
5320: 65 72 73 22 29 0a 20 20 20 20 65 6e 64 0a 20 20  ers").    end.  
5330: 20 20 69 66 20 62 75 73 79 0a 20 20 20 20 20 20    if busy.      
5340: 6f 75 74 63 6f 6d 65 20 3d 20 22 62 75 73 79 22  outcome = "busy"
5350: 0a 20 20 20 20 20 20 73 6f 63 6b 65 74 2e 70 75  .      socket.pu
5360: 74 73 28 7b 75 6e 61 76 61 69 6c 61 62 6c 65 3a  ts({unavailable:
5370: 20 22 62 75 73 79 22 2c 20 72 65 74 72 79 5f 61   "busy", retry_a
5380: 66 74 65 72 3a 20 31 7d 2e 74 6f 5f 6a 73 6f 6e  fter: 1}.to_json
5390: 29 0a 20 20 20 20 20 20 72 65 74 75 72 6e 0a 20  ).      return. 
53a0: 20 20 20 65 6e 64 0a 20 20 20 20 69 64 65 6e 74     end.    ident
53b0: 69 74 79 20 3d 20 69 64 65 6e 74 69 74 79 28 6c  ity = identity(l
53c0: 69 6e 65 28 73 6f 63 6b 65 74 2c 20 31 30 32 34  ine(socket, 1024
53d0: 2c 20 73 74 61 72 74 65 64 20 2b 20 32 2e 73 65  , started + 2.se
53e0: 63 6f 6e 64 73 29 2c 20 72 65 70 6f 73 69 74 6f  conds), reposito
53f0: 72 69 65 73 29 0a 20 20 20 20 72 65 70 6f 73 69  ries).    reposi
5400: 74 6f 72 79 20 3d 20 69 64 65 6e 74 69 74 79 2e  tory = identity.
5410: 72 65 70 6f 73 69 74 6f 72 79 0a 20 20 20 20 72  repository.    r
5420: 65 71 75 65 73 74 20 3d 20 72 65 71 75 65 73 74  equest = request
5430: 28 6c 69 6e 65 28 73 6f 63 6b 65 74 2c 20 38 31  (line(socket, 81
5440: 39 32 2c 20 73 74 61 72 74 65 64 20 2b 20 32 2e  92, started + 2.
5450: 73 65 63 6f 6e 64 73 29 29 0a 20 20 20 20 63 6f  seconds)).    co
5460: 75 6e 74 20 3d 20 72 65 71 75 65 73 74 2e 61 72  unt = request.ar
5470: 74 69 66 61 63 74 73 2e 73 69 7a 65 0a 20 20 20  tifacts.size.   
5480: 20 69 66 20 69 64 65 6e 74 69 74 79 2e 63 61 70   if identity.cap
5490: 61 62 69 6c 69 74 69 65 73 2e 69 6e 63 6c 75 64  abilities.includ
54a0: 65 73 3f 28 27 6f 27 29 0a 20 20 20 20 20 20 64  es?('o').      d
54b0: 62 20 3d 20 44 61 74 61 62 61 73 65 2e 6e 65 77  b = Database.new
54c0: 28 46 69 6c 65 2e 6a 6f 69 6e 28 72 65 70 6f 73  (File.join(repos
54d0: 69 74 6f 72 69 65 73 2c 20 72 65 70 6f 73 69 74  itories, reposit
54e0: 6f 72 79 20 2b 20 22 2e 66 6f 73 73 69 6c 22 29  ory + ".fossil")
54f0: 29 0a 20 20 20 20 20 20 62 65 67 69 6e 0a 20 20  ).      begin.  
5500: 20 20 20 20 20 20 61 6e 73 77 65 72 20 3d 20 64        answer = d
5510: 62 2e 61 6e 73 77 65 72 28 69 64 65 6e 74 69 74  b.answer(identit
5520: 79 2c 20 72 65 71 75 65 73 74 29 0a 20 20 20 20  y, request).    
5530: 20 20 65 6e 73 75 72 65 0a 20 20 20 20 20 20 20    ensure.       
5540: 20 64 62 2e 63 6c 6f 73 65 0a 20 20 20 20 20 20   db.close.      
5550: 65 6e 64 0a 20 20 20 20 65 6c 73 65 0a 20 20 20  end.    else.   
5560: 20 20 20 61 6e 73 77 65 72 20 3d 20 41 6e 73 77     answer = Answ
5570: 65 72 2e 6e 65 77 28 72 65 71 75 65 73 74 2e 61  er.new(request.a
5580: 72 74 69 66 61 63 74 73 2e 6d 61 70 20 7b 20 7c  rtifacts.map { |
5590: 68 61 73 68 7c 20 41 72 74 69 66 61 63 74 2e 6e  hash| Artifact.n
55a0: 65 77 28 68 61 73 68 29 20 7d 2c 20 72 65 71 75  ew(hash) }, requ
55b0: 65 73 74 2e 63 61 70 61 62 69 6c 69 74 69 65 73  est.capabilities
55c0: 5f 6f 66 2e 74 72 79 20 7b 20 7c 6e 61 6d 65 7c  _of.try { |name|
55d0: 20 55 73 65 72 2e 6e 65 77 28 6e 61 6d 65 29 20   User.new(name) 
55e0: 7d 29 0a 20 20 20 20 65 6e 64 0a 20 20 20 20 73  }).    end.    s
55f0: 6f 63 6b 65 74 2e 70 75 74 73 28 61 6e 73 77 65  ocket.puts(answe
5600: 72 2e 74 6f 5f 6a 73 6f 6e 29 0a 20 20 20 20 6f  r.to_json).    o
5610: 75 74 63 6f 6d 65 20 3d 20 22 6f 6b 22 0a 20 20  utcome = "ok".  
5620: 72 65 73 63 75 65 20 65 78 20 3a 20 52 65 66 75  rescue ex : Refu
5630: 73 65 64 20 7c 20 4a 53 4f 4e 3a 3a 50 61 72 73  sed | JSON::Pars
5640: 65 45 78 63 65 70 74 69 6f 6e 0a 20 20 20 20 73  eException.    s
5650: 6f 63 6b 65 74 2e 70 75 74 73 28 7b 72 65 66 75  ocket.puts({refu
5660: 73 65 64 3a 20 65 78 2e 69 73 5f 61 3f 28 52 65  sed: ex.is_a?(Re
5670: 66 75 73 65 64 29 20 3f 20 65 78 2e 6d 65 73 73  fused) ? ex.mess
5680: 61 67 65 20 3a 20 22 69 6e 76 61 6c 69 64 20 4a  age : "invalid J
5690: 53 4f 4e 22 7d 2e 74 6f 5f 6a 73 6f 6e 29 0a 20  SON"}.to_json). 
56a0: 20 72 65 73 63 75 65 20 65 78 20 3a 20 55 6e 61   rescue ex : Una
56b0: 76 61 69 6c 61 62 6c 65 0a 20 20 20 20 6f 75 74  vailable.    out
56c0: 63 6f 6d 65 20 3d 20 22 75 6e 61 76 61 69 6c 61  come = "unavaila
56d0: 62 6c 65 22 0a 20 20 20 20 73 6f 63 6b 65 74 2e  ble".    socket.
56e0: 70 75 74 73 28 7b 75 6e 61 76 61 69 6c 61 62 6c  puts({unavailabl
56f0: 65 3a 20 65 78 2e 6d 65 73 73 61 67 65 2c 20 72  e: ex.message, r
5700: 65 74 72 79 5f 61 66 74 65 72 3a 20 31 7d 2e 74  etry_after: 1}.t
5710: 6f 5f 6a 73 6f 6e 29 0a 20 20 72 65 73 63 75 65  o_json).  rescue
5720: 20 65 78 20 3a 20 49 4f 3a 3a 45 72 72 6f 72 0a   ex : IO::Error.
5730: 20 20 20 20 72 61 69 73 65 20 65 78 0a 20 20 72      raise ex.  r
5740: 65 73 63 75 65 20 65 78 0a 20 20 20 20 23 20 41  escue ex.    # A
5750: 6e 79 74 68 69 6e 67 20 75 6e 66 6f 72 65 73 65  nything unforese
5760: 65 6e 20 73 74 69 6c 6c 20 61 6e 73 77 65 72 73  en still answers
5770: 2c 20 73 6f 20 61 20 63 61 6c 6c 65 72 20 6e 65  , so a caller ne
5780: 76 65 72 20 77 61 69 74 73 20 6f 6e 20 61 20 73  ver waits on a s
5790: 69 6c 65 6e 74 20 63 6c 6f 73 65 2e 0a 20 20 20  ilent close..   
57a0: 20 6f 75 74 63 6f 6d 65 20 3d 20 22 75 6e 61 76   outcome = "unav
57b0: 61 69 6c 61 62 6c 65 22 0a 20 20 20 20 73 6f 63  ailable".    soc
57c0: 6b 65 74 2e 70 75 74 73 28 7b 75 6e 61 76 61 69  ket.puts({unavai
57d0: 6c 61 62 6c 65 3a 20 22 69 6e 74 65 72 6e 61 6c  lable: "internal
57e0: 20 65 72 72 6f 72 22 2c 20 72 65 74 72 79 5f 61   error", retry_a
57f0: 66 74 65 72 3a 20 31 7d 2e 74 6f 5f 6a 73 6f 6e  fter: 1}.to_json
5800: 29 0a 20 20 65 6e 73 75 72 65 0a 20 20 20 20 73  ).  ensure.    s
5810: 6f 63 6b 65 74 2e 63 6c 6f 73 65 0a 20 20 20 20  ocket.close.    
5820: 53 54 44 45 52 52 2e 70 75 74 73 20 22 23 7b 54  STDERR.puts "#{T
5830: 69 6d 65 2e 75 74 63 2e 74 6f 5f 72 66 63 33 33  ime.utc.to_rfc33
5840: 33 39 7d 20 23 7b 72 65 70 6f 73 69 74 6f 72 79  39} #{repository
5850: 7d 20 23 7b 63 6f 75 6e 74 7d 20 23 7b 6f 75 74  } #{count} #{out
5860: 63 6f 6d 65 7d 20 23 7b 28 54 69 6d 65 2e 75 74  come} #{(Time.ut
5870: 63 20 2d 20 73 74 61 72 74 65 64 29 2e 74 6f 74  c - started).tot
5880: 61 6c 5f 6d 69 6c 6c 69 73 65 63 6f 6e 64 73 2e  al_milliseconds.
5890: 74 6f 5f 69 36 34 7d 6d 73 22 0a 20 20 65 6e 64  to_i64}ms".  end
58a0: 0a 0a 20 20 23 20 50 61 73 73 69 6e 67 20 61 72  ..  # Passing ar
58b0: 67 75 6d 65 6e 74 73 20 74 68 72 6f 75 67 68 20  guments through 
58c0: 73 70 61 77 6e 20 63 6f 70 69 65 73 20 65 61 63  spawn copies eac
58d0: 68 20 61 63 63 65 70 74 65 64 20 63 6f 6e 6e 65  h accepted conne
58e0: 63 74 69 6f 6e 27 73 20 76 61 6c 75 65 73 2e 0a  ction's values..
58f0: 20 20 64 65 66 20 73 65 6c 66 2e 68 61 6e 64 6c    def self.handl
5900: 65 28 73 6f 63 6b 65 74 20 3a 20 55 4e 49 58 53  e(socket : UNIXS
5910: 6f 63 6b 65 74 2c 20 72 65 70 6f 73 69 74 6f 72  ocket, repositor
5920: 69 65 73 20 3a 20 53 74 72 69 6e 67 2c 20 73 74  ies : String, st
5930: 61 72 74 65 64 20 3a 20 54 69 6d 65 2c 20 62 75  arted : Time, bu
5940: 73 79 20 3a 20 42 6f 6f 6c 2c 20 73 6c 6f 74 73  sy : Bool, slots
5950: 20 3a 20 43 68 61 6e 6e 65 6c 28 4e 69 6c 29 29   : Channel(Nil))
5960: 20 3a 20 4e 69 6c 0a 20 20 20 20 73 65 72 76 65   : Nil.    serve
5970: 28 73 6f 63 6b 65 74 2c 20 72 65 70 6f 73 69 74  (socket, reposit
5980: 6f 72 69 65 73 2c 20 73 74 61 72 74 65 64 2c 20  ories, started, 
5990: 62 75 73 79 29 0a 20 20 72 65 73 63 75 65 20 49  busy).  rescue I
59a0: 4f 3a 3a 45 72 72 6f 72 0a 20 20 20 20 23 20 54  O::Error.    # T
59b0: 68 65 20 63 61 6c 6c 65 72 20 6c 65 66 74 20 62  he caller left b
59c0: 65 66 6f 72 65 20 69 74 73 20 61 6e 73 77 65 72  efore its answer
59d0: 3b 20 73 65 72 76 65 27 73 20 65 6e 73 75 72 65  ; serve's ensure
59e0: 20 6c 6f 67 67 65 64 20 74 68 65 20 63 6f 6e 6e   logged the conn
59f0: 65 63 74 69 6f 6e 2e 0a 20 20 65 6e 73 75 72 65  ection..  ensure
5a00: 0a 20 20 20 20 73 6c 6f 74 73 2e 72 65 63 65 69  .    slots.recei
5a10: 76 65 20 75 6e 6c 65 73 73 20 62 75 73 79 0a 20  ve unless busy. 
5a20: 20 65 6e 64 0a 0a 20 20 64 65 66 20 73 65 6c 66   end..  def self
5a30: 2e 72 75 6e 20 3a 20 4e 69 6c 0a 20 20 20 20 61  .run : Nil.    a
5a40: 62 6f 72 74 20 22 55 73 61 67 65 3a 20 72 65 63  bort "Usage: rec
5a50: 65 69 70 74 73 20 53 4f 43 4b 45 54 20 52 45 50  eipts SOCKET REP
5a60: 4f 53 49 54 4f 52 49 45 53 22 2c 20 32 20 75 6e  OSITORIES", 2 un
5a70: 6c 65 73 73 20 41 52 47 56 2e 73 69 7a 65 20 3d  less ARGV.size =
5a80: 3d 20 32 0a 20 20 20 20 73 6f 63 6b 65 74 5f 70  = 2.    socket_p
5a90: 61 74 68 2c 20 72 65 70 6f 73 69 74 6f 72 69 65  ath, repositorie
5aa0: 73 20 3d 20 41 52 47 56 0a 20 20 20 20 46 69 6c  s = ARGV.    Fil
5ab0: 65 2e 64 65 6c 65 74 65 28 73 6f 63 6b 65 74 5f  e.delete(socket_
5ac0: 70 61 74 68 29 20 69 66 20 46 69 6c 65 2e 65 78  path) if File.ex
5ad0: 69 73 74 73 3f 28 73 6f 63 6b 65 74 5f 70 61 74  ists?(socket_pat
5ae0: 68 29 0a 20 20 20 20 73 65 72 76 65 72 20 3d 20  h).    server = 
5af0: 55 4e 49 58 53 65 72 76 65 72 2e 6e 65 77 28 73  UNIXServer.new(s
5b00: 6f 63 6b 65 74 5f 70 61 74 68 29 0a 20 20 20 20  ocket_path).    
5b10: 46 69 6c 65 2e 63 68 6d 6f 64 28 73 6f 63 6b 65  File.chmod(socke
5b20: 74 5f 70 61 74 68 2c 20 30 6f 36 30 30 29 0a 20  t_path, 0o600). 
5b30: 20 20 20 73 6c 6f 74 73 20 3d 20 43 68 61 6e 6e     slots = Chann
5b40: 65 6c 28 4e 69 6c 29 2e 6e 65 77 28 38 29 0a 20  el(Nil).new(8). 
5b50: 20 20 20 77 68 69 6c 65 20 73 6f 63 6b 65 74 20     while socket 
5b60: 3d 20 73 65 72 76 65 72 2e 61 63 63 65 70 74 3f  = server.accept?
5b70: 0a 20 20 20 20 20 20 73 74 61 72 74 65 64 20 3d  .      started =
5b80: 20 54 69 6d 65 2e 75 74 63 0a 20 20 20 20 20 20   Time.utc.      
5b90: 62 75 73 79 20 3d 20 73 65 6c 65 63 74 0a 20 20  busy = select.  
5ba0: 20 20 20 20 77 68 65 6e 20 73 6c 6f 74 73 2e 73      when slots.s
5bb0: 65 6e 64 28 6e 69 6c 29 20 74 68 65 6e 20 66 61  end(nil) then fa
5bc0: 6c 73 65 0a 20 20 20 20 20 20 65 6c 73 65 0a 20  lse.      else. 
5bd0: 20 20 20 20 20 20 20 74 72 75 65 0a 20 20 20 20         true.    
5be0: 20 20 65 6e 64 0a 20 20 20 20 20 20 69 66 20 62    end.      if b
5bf0: 75 73 79 0a 20 20 20 20 20 20 20 20 68 61 6e 64  usy.        hand
5c00: 6c 65 28 73 6f 63 6b 65 74 2c 20 72 65 70 6f 73  le(socket, repos
5c10: 69 74 6f 72 69 65 73 2c 20 73 74 61 72 74 65 64  itories, started
5c20: 2c 20 62 75 73 79 2c 20 73 6c 6f 74 73 29 0a 20  , busy, slots). 
5c30: 20 20 20 20 20 65 6c 73 65 0a 20 20 20 20 20 20       else.      
5c40: 20 20 73 70 61 77 6e 20 68 61 6e 64 6c 65 28 73    spawn handle(s
5c50: 6f 63 6b 65 74 2c 20 72 65 70 6f 73 69 74 6f 72  ocket, repositor
5c60: 69 65 73 2c 20 73 74 61 72 74 65 64 2c 20 62 75  ies, started, bu
5c70: 73 79 2c 20 73 6c 6f 74 73 29 0a 20 20 20 20 20  sy, slots).     
5c80: 20 65 6e 64 0a 20 20 20 20 65 6e 64 0a 20 20 65   end.    end.  e
5c90: 6e 64 0a 65 6e 64 0a 0a 52 65 63 65 69 70 74 73  nd.end..Receipts
5ca0: 2e 72 75 6e 0a 00 00 00 00 00 00 00 00 00 00 00  .run............
5cb0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
5cc0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
5cd0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
5ce0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
5cf0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
5d00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
5d10: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
5d20: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
5d30: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
5d40: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
5d50: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
5d60: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
5d70: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
5d80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
5d90: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
5da0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
5db0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
5dc0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
5dd0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
5de0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
5df0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
5e00: 73 63 72 69 70 74 73 2d 66 6f 72 2d 72 65 76 69  scripts-for-revi
5e10: 65 77 2f 73 68 61 72 64 2e 79 6d 6c 2e 64 69 66  ew/shard.yml.dif
5e20: 66 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  f...............
5e30: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
5e40: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
5e50: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
5e60: 00 00 00 00 30 30 30 30 36 34 34 00 30 30 30 30  ....0000644.0000
5e70: 30 30 30 00 30 30 30 30 30 30 30 00 30 30 30 30  000.0000000.0000
5e80: 30 30 30 31 33 35 32 00 31 35 32 37 30 35 30 30  0001352.15270500
5e90: 34 33 34 00 30 31 36 30 36 32 00 20 30 00 00 00  434.016062. 0...
5ea0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
5eb0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
5ec0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
5ed0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
5ee0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
5ef0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
5f00: 00 75 73 74 61 72 20 20 00 72 6f 6f 74 00 00 00  .ustar  .root...
5f10: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
5f20: 00 00 00 00 00 00 00 00 00 72 6f 6f 74 00 00 00  .........root...
5f30: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
5f40: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
5f50: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
5f60: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
5f70: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
5f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
5f90: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
5fa0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
5fb0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
5fc0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
5fd0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
5fe0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
5ff0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
6000: 49 6e 64 65 78 3a 20 73 68 61 72 64 2e 79 6d 6c  Index: shard.yml
6010: 0a 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d  .===============
6020: 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d  ================
6030: 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d  ================
6040: 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d  ================
6050: 3d 3d 3d 0a 2d 2d 2d 20 73 68 61 72 64 2e 79 6d  ===.--- shard.ym
6060: 6c 0a 2b 2b 2b 20 73 68 61 72 64 2e 79 6d 6c 0a  l.+++ shard.yml.
6070: 40 40 20 2d 31 30 2c 31 34 20 2b 31 30 2c 31 38  @@ -10,14 +10,18
6080: 20 40 40 0a 20 20 20 73 71 6c 69 74 65 33 3a 0a   @@.   sqlite3:.
6090: 20 20 20 20 20 67 69 74 68 75 62 3a 20 63 72 79       github: cry
60a0: 73 74 61 6c 2d 6c 61 6e 67 2f 63 72 79 73 74 61  stal-lang/crysta
60b0: 6c 2d 73 71 6c 69 74 65 33 0a 20 20 20 20 20 76  l-sqlite3.     v
60c0: 65 72 73 69 6f 6e 3a 20 30 2e 32 33 2e 30 0a 20  ersion: 0.23.0. 
60d0: 0a 20 23 20 54 68 65 20 62 75 69 6c 64 20 73 74  . # The build st
60e0: 65 70 3a 20 60 73 68 61 72 64 73 20 62 75 69 6c  ep: `shards buil
60f0: 64 60 20 70 75 74 73 20 74 68 65 73 65 20 69 6e  d` puts these in
6100: 20 62 69 6e 2f 2e 20 53 69 6e 63 65 20 73 6c 69   bin/. Since sli
6110: 63 65 20 31 20 4f 43 58 20 69 73 0a 2d 23 20 6f  ce 1 OCX is.-# o
6120: 6e 65 20 70 72 6f 67 72 61 6d 2c 20 6f 63 78 32  ne program, ocx2
6130: 20 28 64 6f 63 73 2f 73 6c 69 63 65 73 2e 6d 64   (docs/slices.md
6140: 29 2e 20 54 68 65 20 74 77 6f 20 62 75 69 6c 74  ). The two built
6150: 20 66 72 6f 6d 20 73 63 72 69 70 74 73 2f 20 61   from scripts/ a
6160: 72 65 20 74 68 65 20 6d 61 69 6e 74 61 69 6e 65  re the maintaine
6170: 72 27 73 20 61 6e 64 20 72 75 6e 20 66 72 6f 6d  r's and run from
6180: 0a 2b 23 20 6f 6e 65 20 70 72 6f 67 72 61 6d 2c  .+# one program,
6190: 20 6f 63 78 32 20 28 64 6f 63 73 2f 73 6c 69 63   ocx2 (docs/slic
61a0: 65 73 2e 6d 64 29 2e 20 54 68 65 20 66 6f 75 72  es.md). The four
61b0: 20 62 75 69 6c 74 20 66 72 6f 6d 20 73 63 72 69   built from scri
61c0: 70 74 73 2f 20 61 72 65 20 74 68 65 20 6d 61 69  pts/ are the mai
61d0: 6e 74 61 69 6e 65 72 27 73 20 61 6e 64 20 72 75  ntainer's and ru
61e0: 6e 20 66 72 6f 6d 0a 20 23 20 61 20 63 68 65 63  n from. # a chec
61f0: 6b 6f 75 74 27 73 20 62 69 6e 2f 2e 0a 20 74 61  kout's bin/.. ta
6200: 72 67 65 74 73 3a 0a 20 20 20 6f 63 78 32 3a 0a  rgets:.   ocx2:.
6210: 20 20 20 20 20 6d 61 69 6e 3a 20 74 6f 6f 6c 73       main: tools
6220: 2f 6f 63 78 32 2e 63 72 0a 20 20 20 73 74 61 72  /ocx2.cr.   star
6230: 74 2d 66 6f 73 73 69 6c 3a 0a 20 20 20 20 20 6d  t-fossil:.     m
6240: 61 69 6e 3a 20 73 63 72 69 70 74 73 2f 73 74 61  ain: scripts/sta
6250: 72 74 2d 66 6f 73 73 69 6c 2e 63 72 0a 20 20 20  rt-fossil.cr.   
6260: 73 79 6e 63 2d 66 6f 73 73 69 6c 3a 0a 20 20 20  sync-fossil:.   
6270: 20 20 6d 61 69 6e 3a 20 73 63 72 69 70 74 73 2f    main: scripts/
6280: 73 79 6e 63 2d 66 6f 73 73 69 6c 2e 63 72 0a 2b  sync-fossil.cr.+
6290: 20 20 73 74 61 72 74 2d 6f 63 78 3a 0a 2b 20 20    start-ocx:.+  
62a0: 20 20 6d 61 69 6e 3a 20 73 63 72 69 70 74 73 2f    main: scripts/
62b0: 73 74 61 72 74 2d 6f 63 78 2e 63 72 0a 2b 20 20  start-ocx.cr.+  
62c0: 72 65 63 65 69 70 74 73 3a 0a 2b 20 20 20 20 6d  receipts:.+    m
62d0: 61 69 6e 3a 20 73 63 72 69 70 74 73 2f 72 65 63  ain: scripts/rec
62e0: 65 69 70 74 73 2e 63 72 0a 0a 00 00 00 00 00 00  eipts.cr........
62f0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
6300: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
6310: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
6320: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
6330: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
6340: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
6350: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
6360: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
6370: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
6380: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
6390: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
63a0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
63b0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
63c0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
63d0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
63e0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
63f0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
6400: 73 63 72 69 70 74 73 2d 66 6f 72 2d 72 65 76 69  scripts-for-revi
6410: 65 77 2f 52 45 41 44 4d 45 2e 74 78 74 00 00 00  ew/README.txt...
6420: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
6430: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
6440: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
6450: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
6460: 00 00 00 00 30 30 30 30 36 34 34 00 30 30 30 30  ....0000644.0000
6470: 30 30 30 00 30 30 30 30 30 30 30 00 30 30 30 30  000.0000000.0000
6480: 30 30 30 30 34 33 33 00 31 35 32 37 30 35 30 30  0000433.15270500
6490: 34 33 34 00 30 31 35 30 32 34 00 20 30 00 00 00  434.015024. 0...
64a0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
64b0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
64c0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
64d0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
64e0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
64f0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
6500: 00 75 73 74 61 72 20 20 00 72 6f 6f 74 00 00 00  .ustar  .root...
6510: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
6520: 00 00 00 00 00 00 00 00 00 72 6f 6f 74 00 00 00  .........root...
6530: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
6540: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
6550: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
6560: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
6570: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
6580: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
6590: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
65a0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
65b0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
65c0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
65d0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
65e0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
65f0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
6600: 46 6f 72 20 74 68 65 20 6d 61 69 6e 74 61 69 6e  For the maintain
6610: 65 72 27 73 20 73 74 72 69 63 74 20 72 65 76 69  er's strict revi
6620: 65 77 20 28 64 65 63 69 73 69 6f 6e 20 32 32 29  ew (decision 22)
6630: 2c 20 32 30 32 36 2d 31 30 2d 32 38 20 7e 32 33  , 2026-10-28 ~23
6640: 3a 32 30 20 55 54 43 2e 20 54 68 65 73 65 20 73  :20 UTC. These s
6650: 75 70 65 72 73 65 64 65 20 74 68 65 20 63 6f 70  upersede the cop
6660: 69 65 73 20 69 6e 20 73 74 61 67 65 41 2d 72 65  ies in stageA-re
6670: 63 6f 72 64 2e 74 61 72 3a 20 73 74 61 72 74 2d  cord.tar: start-
6680: 6f 63 78 2e 63 72 20 6e 6f 77 20 62 69 6e 64 73  ocx.cr now binds
6690: 20 74 68 65 20 64 61 65 6d 6f 6e 20 61 63 63 6f   the daemon acco
66a0: 75 6e 74 27 73 20 68 6f 6d 65 73 20 28 2f 68 6f  unt's homes (/ho
66b0: 6d 65 2f 6f 63 78 2f 58 29 20 61 74 20 2f 72 6f  me/ocx/X) at /ro
66c0: 6f 74 2f 58 20 69 6e 73 69 64 65 20 69 74 73 20  ot/X inside its 
66d0: 6e 61 6d 65 73 70 61 63 65 2c 20 73 6f 20 70 61  namespace, so pa
66e0: 74 74 65 72 6e 73 20 61 6e 64 20 72 2d 73 65 6e  tterns and r-sen
66f0: 64 65 72 73 2e 6a 73 6f 6e 20 73 74 61 79 20 61  ders.json stay a
6700: 73 20 74 68 65 79 20 61 72 65 2e 20 4e 6f 74 20  s they are. Not 
6710: 63 6f 6d 6d 69 74 74 65 64 2e 0a 00 00 00 00 00  committed.......
6720: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
6730: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
6740: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
6750: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
6760: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
6770: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
6780: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
6790: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
67a0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
67b0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
67c0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
67d0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
67e0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
67f0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
6800: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
6810: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
6820: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
6830: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
6840: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
6850: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
6860: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
6870: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
6880: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
6890: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
68a0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
68b0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
68c0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
68d0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
68e0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
68f0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
6900: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
6910: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
6920: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
6930: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
6940: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
6950: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
6960: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
6970: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
6980: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
6990: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
69a0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
69b0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
69c0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
69d0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
69e0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
69f0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
6a00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
6a10: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
6a20: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
6a30: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
6a40: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
6a50: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
6a60: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
6a70: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
6a80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
6a90: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
6aa0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
6ab0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
6ac0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
6ad0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
6ae0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
6af0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
6b00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
6b10: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
6b20: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
6b30: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
6b40: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
6b50: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
6b60: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
6b70: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
6b80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
6b90: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
6ba0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
6bb0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
6bc0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
6bd0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
6be0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
6bf0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................