flagon-io/g1t

grep -rn "katex" --include=package.json --include=*.ts --include=*.tsx --include=*.js --include=*.rs --exclude-dir=node_modules --exclude-dir=target . | head -30; ls; grep -n '"node_modules/katex"' -A3 package-lock.json

apps/web/package.json:29:    "katex": "^0.19.0",
apps/web/app/components/docs/editor.tsx:241:      { title: "Math", subtext: "A formula, typeset with KaTeX", aliases: ["math", "latex", "katex", "equation", "formula"], group: "Advanced", icon: <Sigma size={18} />, onItemClick: insert({ type: "math" }) },
apps/web/app/components/docs/blocks.tsx:143:      const [{ default: katex }] = await Promise.all([import("katex"), import("katex/dist/katex.min.css")]);
apps/web/app/components/docs/blocks.tsx:144:      const out = katex.renderToString(expression || "\\;", { throwOnError: false, displayMode: !inline, output: "html", trust: false, strict: "ignore" });
services/docs/src/blocks.ts:192:      else if (lang === "math" || lang === "latex" || lang === "katex") out.push({ type: "math", props: { expression: code } });
CONTRIBUTING.md
Cargo.lock
Cargo.toml
LICENSE
README.md
apps
bench
crates
deploy
docs
package-lock.json
package.json
packages
scripts
services
tsconfig.base.json
8757:    "node_modules/katex": {
8758-      "version": "0.19.0",
8759-      "resolved": "https://registry.npmjs.org/katex/-/katex-0.19.0.tgz",
8760-      "integrity": "sha512-v6Tznz3zJ7u3niRCoDTsumM2+HA2XXcCu+WAacCeHD2z3p9A9Ks987o5FzfTGBN0e8A0vjEgIDvLbICrXpdw/Q==",

npm view katex versions --json | tail -8; grep -rn '"katex"' package-lock.json; ls node_modules/katex 2>&1 | head -3

npm notice
npm notice New major version of npm available! 11.19.0 -> 12.2.0
npm notice Changelog: https://github.com/npm/cli/releases/tag/v12.2.0
npm notice To update run: npm install -g npm@12.2.0
npm notice
  "0.18.6",
  "0.18.7",
  "0.18.8",
  "0.18.9",
  "0.18.10",
  "0.18.11",
  "0.19.0"
]
package-lock.json:89:        "katex": "^0.19.0",
package-lock.json:8770:        "katex": "cli.js"
package-lock.json:9528:        "katex": "^0.16.47",
package-lock.json:9562:        "katex": "cli.js"
ls: cannot access 'node_modules/katex': No such file or directory

sed -n 9515,9535p package-lock.json; sed -n 9550,9566p package-lock.json; grep -n '"node_modules/.*katex\|"node_modules/mermaid"' package-lock.json

"@types/d3": "^7.4.3",
        "@upsetjs/venn.js": "^2.0.0",
        "chevrotain": "~13.2.0",
        "cytoscape": "^3.34.0",
        "cytoscape-cose-bilkent": "^4.1.0",
        "cytoscape-fcose": "^2.2.0",
        "d3": "^7.9.0",
        "d3-sankey": "^0.12.3",
        "dagre-d3-es": "7.0.14",
        "dayjs": "^1.11.21",
        "dompurify": "^3.4.12",
        "elkjs": "^0.9.3",
        "es-toolkit": "^1.45.1",
        "katex": "^0.16.47",
        "khroma": "^2.1.0",
        "marked": "^16.3.0",
        "roughjs": "^4.6.6",
        "stylis": "^4.3.6",
        "ts-dedent": "^2.2.0",
        "uuid": "^11.1.0 || ^12 || ^13 || ^14.0.0"
      },
      "version": "0.16.47",
      "resolved": "https://registry.npmjs.org/katex/-/katex-0.16.47.tgz",
      "integrity": "sha512-Eeo8Ys1doU1z+x8AZsPpQu+p/QcZBI5PeOo7QGQdy2x2m0MU/hYagBbGOmXwr5KVbEfVuWv9LpnQWeehogurjg==",
      "funding": [
        "https://opencollective.com/katex",
        "https://github.com/sponsors/katex"
      ],
      "license": "MIT",
      "dependencies": {
        "commander": "^8.3.0"
      },
      "bin": {
        "katex": "cli.js"
      }
    },
    "node_modules/micromark": {
      "version": "4.0.3",
8757:    "node_modules/katex": {
8773:    "node_modules/katex/node_modules/commander": {
9506:    "node_modules/mermaid": {
9549:    "node_modules/mermaid/node_modules/katex": {

cat package.json

{
  "name": "g1t-monorepo",
  "private": true,
  "type": "module",
  "engines": {
    "node": ">=22.22.0"
  },
  "workspaces": [
    "apps/*",
    "services/*",
    "packages/*"
  ],
  "scripts": {
    "typecheck": "npm run typecheck --workspaces --if-present",
    "deploy": "npm run deploy -w @g1t/web",
    "test:deploy": "node --test \"scripts/deploy/*.test.mjs\"",
    "test:ops": "node --test \"scripts/ops/*.test.mjs\""
  },
  "devDependencies": {
    "typescript": "^5.9.3",
    "wrangler": "^4.146.0"
  },
  "overrides": {
    "basic-ftp": "^6.2.1",
    "fflate": "^0.7.5",
    "postcss-selector-parser": "^7.1.6",
    "sharp": "^0.35.5"
  }
}

sed -i 's|    "fflate": "^0.7.5",|    "fflate": "^0.7.5",\n    "katex": "^0.19.0",|' package.json && npm install --package-lock-only 2>&1 | tail -5; grep -n '"node_modules/.*katex' package-lock.json; grep -n '"version"' <(sed -n 8757,8762p package-lock.json)

npm warn install-scripts 2 packages have install scripts not yet covered by allowScripts:
npm warn install-scripts   esbuild@0.28.1 (install: (install scripts present))
npm warn install-scripts   workerd@1.20261001.1 (install: (install scripts present))
npm warn install-scripts
npm warn install-scripts Run `npm install-scripts ls` to review, or `npm install-scripts approve <pkg>` to allow.
8757:    "node_modules/katex": {
8773:    "node_modules/katex/node_modules/commander": {
9549:    "node_modules/mermaid/node_modules/katex": {
2:      "version": "0.19.0",

sed -n 9545,9575p package-lock.json | grep -n 'node_modules' 

5:    "node_modules/mermaid/node_modules/katex": {
21:    "node_modules/micromark": {

sed -n 8770,8782p package-lock.json

"katex": "cli.js"
      }
    },
    "node_modules/katex/node_modules/commander": {
      "version": "15.0.0",
      "resolved": "https://registry.npmjs.org/commander/-/commander-15.0.0.tgz",
      "integrity": "sha512-z67u4ZhzCL/Tydu1lJARtEZYWbWaN7oYLHbsuzocr6y4N6WZAagG3RQ4FW61V1/0+jImpj293XfrcYnd1qxtPg==",
      "license": "MIT",
      "engines": {
        "node": ">=22.12.0"
      }
    },
    "node_modules/khroma": {

sed -i '9549,9564d' package-lock.json && sed -n 9545,9552p package-lock.json && npm install --package-lock-only 2>&1 | grep -v warn; grep -n '"node_modules/.*katex\|katex-0' package-lock.json; git diff --stat

"engines": {
        "node": ">= 12"
      }
    },
    "node_modules/micromark": {
      "version": "4.0.3",
      "resolved": "https://registry.npmjs.org/micromark/-/micromark-4.0.3.tgz",
      "integrity": "sha512-oGYfQzHSG5dOMovQcJ3fyTmZlWAWpi0XA0sJwJs+i6OT88o1+Jtw/8z0CmdowSLxGhhFK89rQ/oXph/wN02PNw==",

up to date, audited 795 packages in 5s

212 packages are looking for funding
  run `npm fund` for details

3 high severity vulnerabilities

To address all issues (including breaking changes), run:
  npm audit fix --force

Run `npm audit` for details.
8757:    "node_modules/katex": {
8759:      "resolved": "https://registry.npmjs.org/katex/-/katex-0.19.0.tgz",
8773:    "node_modules/katex/node_modules/commander": {
 package-lock.json | 25 -------------------------
 package.json      |  1 +
 2 files changed, 1 insertion(+), 25 deletions(-)

git diff package-lock.json | grep '^[-+]' | grep -v integrity | head -40; npm ls katex 2>&1 | head

--- a/package-lock.json
+++ b/package-lock.json
-    "node_modules/mermaid/node_modules/commander": {
-      "version": "8.3.0",
-      "resolved": "https://registry.npmjs.org/commander/-/commander-8.3.0.tgz",
-      "license": "MIT",
-      "engines": {
-        "node": ">= 12"
-      }
-    },
-    "node_modules/mermaid/node_modules/katex": {
-      "version": "0.16.47",
-      "resolved": "https://registry.npmjs.org/katex/-/katex-0.16.47.tgz",
-      "funding": [
-        "https://opencollective.com/katex",
-        "https://github.com/sponsors/katex"
-      ],
-      "license": "MIT",
-      "dependencies": {
-        "commander": "^8.3.0"
-      },
-      "bin": {
-        "katex": "cli.js"
-      }
-    },
g1t-monorepo@ /work/repo
`-- (empty)

npm ci --ignore-scripts 2>&1 | tail -3; npm run typecheck 2>&1 | tail -8; npm ls katex | head

Command did not complete within its 400s timeout and was moved to the background (ID: b887nxhve). Output is being written to: /tmp/claude-1000/-work-repo/7344cc98-e290-46a6-85f1-62b111502e5e/tasks/b887nxhve.output. You will be notified when it completes. If it is still running after 30m in the background, it will be stopped and you will be notified. To check interim output, use Read on that file path.

git add package.json package-lock.json && git commit -q -m "Resolve katex to 0.19.0 everywhere, including mermaid's nested copy

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>" && git status --short | head

(Bash completed with no output)

sed -n 1,40p scripts/ops/restore-to-gitstore.test.mjs; grep -n "git(" scripts/ops/restore-to-gitstore.test.mjs | head -30

// The fallback path end to end (docs/ARTIFACTS.md, R12): bundles cut as the
// runner cuts them, restored into a git store's root, served by the git
// store itself (deploy/self-host/gitstore/server.mjs, read-only), pushed to
// while it serves, and reconciled back into the "live" repository.

import assert from "node:assert/strict";
import { execFileSync, spawn, spawnSync } from "node:child_process";
import { createHash } from "node:crypto";
import { existsSync, mkdirSync, mkdtempSync, readFileSync, rmSync, statSync, writeFileSync } from "node:fs";
import { tmpdir } from "node:os";
import { join } from "node:path";
import { test } from "node:test";
import { fileURLToPath } from "node:url";

import { parseRefs } from "./backup-restore-drill.mjs";
import { CONFLICT_PREFIX, changedSince, locate, metaFor, reconcilePlan, repoDir } from "./restore-to-gitstore.mjs";

const TOOL = fileURLToPath(new URL("./restore-to-gitstore.mjs", import.meta.url));
const SERVER = fileURLToPath(new URL("../../deploy/self-host/gitstore/server.mjs", import.meta.url));
const git = (cwd, ...args) => execFileSync("git", args, { cwd, encoding: "utf8" }).trim();
const tool = (...args) => spawnSync(process.execPath, [TOOL, ...args], { encoding: "utf8" });

function commit(dir, file, text) {
  writeFileSync(join(dir, file), text);
  git(dir, "add", "--all");
  git(dir, "-c", "user.name=t", "-c", "user.email=t@example.com", "-c", "commit.gpgsign=false", "commit", "--quiet", "-m", text);
}

function refsOf(dir) {
  const refs = parseRefs(git(dir, "for-each-ref", "--format=%(objectname) %(refname)"));
  refs.HEAD = git(dir, "rev-parse", "HEAD");
  return refs;
}

/** A bucket holding one full backup of `origin` as `repo_1`, as the runner and repos service leave it. */
function backUp(root, origin, id, storeKey) {
  const mirror = join(root, `${id}-mirror.git`);
  git(root, "clone", "--mirror", "--quiet", origin, mirror);
  const dir = join(root, "bucket", "backups", id);
  mkdirSync(dir, { recursive: true });
25:  git(dir, "add", "--all");
26:  git(dir, "-c", "user.name=t", "-c", "user.email=t@example.com", "-c", "commit.gpgsign=false", "commit", "--quiet", "-m", text);
30:  const refs = parseRefs(git(dir, "for-each-ref", "--format=%(objectname) %(refname)"));
31:  refs.HEAD = git(dir, "rev-parse", "HEAD");
38:  git(root, "clone", "--mirror", "--quiet", origin, mirror);
42:  git(mirror, "bundle", "create", "--quiet", bundle, "--all");
123:    git(origin, "init", "--quiet", "--initial-branch=main");
125:    git(origin, "tag", "-a", "v1", "-m", "v1");
136:    assert.equal(git(dir, "rev-parse", "refs/heads/main"), git(origin, "rev-parse", "main"));
153:    git(root, "-c", header, "clone", "--quiet", info.json.remote, clone);
154:    assert.equal(git(clone, "rev-parse", "HEAD"), git(origin, "rev-parse", "main"));
165:    git(clone, "push", "--quiet", dir, "HEAD:refs/heads/main", "HEAD:refs/heads/during");
173:    git(root, "clone", "--bare", "--quiet", origin, repoDir(live, "g1t-us-1", "acme--rocket"));
177:    assert.equal(git(liveDir, "rev-parse", "refs/heads/main"), git(clone, "rev-parse", "HEAD"));
178:    assert.equal(git(liveDir, "rev-parse", "refs/heads/during"), git(clone, "rev-parse", "HEAD"));
183:    git(root, "clone", "--bare", "--quiet", origin, liveDir);
187:    assert.equal(git(liveDir, "rev-parse", "refs/heads/main"), git(origin, "rev-parse", "main"));
188:    assert.equal(git(liveDir, "rev-parse", "refs/fallback/heads/main"), git(clone, "rev-parse", "HEAD"));
201:    git(origin, "init", "--quiet", "--initial-branch=main");
203:    git(origin, "branch", "dev");
218:    assert.equal(git(dir, "rev-parse", "refs/heads/dev"), git(origin, "rev-parse", "dev"));

sed -i '125s|git(origin, "tag", "-a", "v1", "-m", "v1");|git(origin, "-c", "user.name=t", "-c", "user.email=t@example.com", "tag", "-a", "v1", "-m", "v1");|' scripts/ops/restore-to-gitstore.test.mjs && sed -n 125p scripts/ops/restore-to-gitstore.test.mjs && node --test scripts/ops/restore-to-gitstore.test.mjs 2>&1 | tail -15; git config user.email

git(origin, "-c", "user.name=t", "-c", "user.email=t@example.com", "tag", "-a", "v1", "-m", "v1");
✔ keys, plans and what a restore records (4.48319ms)
✔ restored repositories are served read-only, and pushes taken later are reconciled (1688.795939ms)
✔ a git store over HTTP is restored into through its API (803.485742ms)
ℹ tests 3
ℹ suites 0
ℹ pass 3
ℹ fail 0
ℹ cancelled 0
ℹ skipped 0
ℹ todo 0
ℹ duration_ms 2692.50545
g1t@users.noreply.g1t.sh

git commit -qam "The restore test's annotated tag carries its own identity, so it runs where git has none configured

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>" && git log --oneline | head -1

026e42e The restore test's annotated tag carries its own identity, so it runs where git has none configured

cd /work/repo; git log --oneline -3; git status -sb | head -3; sed -n 1,90p scripts/ops/backup-restore-drill.test.mjs | grep -n -i -E "tag|ident|GIT_|user\." 

6ce5d90 Catch up with main
026e42e The restore test's annotated tag carries its own identity, so it runs where git has none configured
91d6a12 Resolve katex to 0.19.0 everywhere, including mermaid's nested copy
## main...origin/main [ahead 2]
22:  git(dir, "-c", "user.name=t", "-c", "user.email=t@example.com", "-c", "commit.gpgsign=false", "commit", "--quiet", "-m", text);
56:  assert.deepEqual(parseRefs(`${a}\tHEAD\n${a}\trefs/heads/main\n${b}\trefs/tags/v1\n${a}\trefs/tags/v1^{}\n`), {
59:    "refs/tags/v1": b,
78:    git(origin, "tag", "-a", "v1", "-m", "v1");

cd /work/repo; git show --stat 026e42e | head; git show 6ce5d90 --stat | head -20; sed -n 10,30p scripts/ops/backup-restore-drill.test.mjs; sed -n 70,85p scripts/ops/backup-restore-drill.test.mjs

commit 026e42ef609250f990556013f34c68833e852e92
Author: g1t <g1t@users.noreply.g1t.sh>
Date:   Fri Oct 9 10:18:45 2026 +0000

    The restore test's annotated tag carries its own identity, so it runs where git has none configured
    
    Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>

 scripts/ops/restore-to-gitstore.test.mjs | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)
commit 6ce5d90f2a31ea5883403cad6f3b14214cc7e6fd
Merge: 026e42e b46bfb0
Author: g1t <g1t@users.noreply.g1t.sh>
Date:   Fri Oct 9 10:35:06 2026 +0000

    Catch up with main

 apps/docs/src/content/docs/guides/git.md |  6 +++++-
 services/repos/src/git_http.rs           | 17 +++++++++++++----
 services/repos/src/lib.rs                |  2 ++
 3 files changed, 20 insertions(+), 5 deletions(-)
import { join } from "node:path";
import { test } from "node:test";
import { fileURLToPath } from "node:url";

import { compareRefs, headBranch, parseRefs, readManifest, restore } from "./backup-restore-drill.mjs";

const DRILL = fileURLToPath(new URL("./backup-restore-drill.mjs", import.meta.url));
const git = (cwd, ...args) => execFileSync("git", args, { cwd, encoding: "utf8" }).trim();

function commit(dir, file, text) {
  writeFileSync(join(dir, file), text);
  git(dir, "add", "--all");
  git(dir, "-c", "user.name=t", "-c", "user.email=t@example.com", "-c", "commit.gpgsign=false", "commit", "--quiet", "-m", text);
}

function refsOf(dir) {
  const refs = parseRefs(git(dir, "for-each-ref", "--format=%(objectname) %(refname)"));
  refs.HEAD = git(dir, "rev-parse", "HEAD");
  return refs;
}


test("a chain restores every ref, and the drill fails once the live repository differs", () => {
  const root = mkdtempSync(join(tmpdir(), "g1t-drill-test-"));
  try {
    const origin = join(root, "origin");
    mkdirSync(origin);
    git(origin, "init", "--quiet", "--initial-branch=main");
    commit(origin, "a.txt", "one");
    git(origin, "tag", "-a", "v1", "-m", "v1");
    const mirror = join(root, "mirror.git");
    const bucket = join(root, "bucket");
    const dir = join(bucket, "backups", "repo_1");
    mkdirSync(dir, { recursive: true });

    git(root, "clone", "--mirror", "--quiet", origin, mirror);
    const fullRefs = refsOf(mirror);

cd /work/repo; git show 026e42e | tail -5; grep -n '"tag"' scripts/ops/*.test.mjs

-    git(origin, "tag", "-a", "v1", "-m", "v1");
+    git(origin, "-c", "user.name=t", "-c", "user.email=t@example.com", "tag", "-a", "v1", "-m", "v1");
     const bucket = backUp(root, origin, "repo_1", "g1t-us-1/acme--rocket");
     const index = join(root, "index.json");
     writeFileSync(index, JSON.stringify([{ id: "repo_1", store: "g1t-us-1/acme--rocket", path: "acme/rocket" }, { id: "repo_2", store: "acme--gone", path: "acme/gone" }]));
scripts/ops/backup-restore-drill.test.mjs:78:    git(origin, "tag", "-a", "v1", "-m", "v1");
scripts/ops/backup-restore-drill.test.mjs:91:    git(origin, "tag", "-d", "v1");
scripts/ops/restore-to-gitstore.test.mjs:125:    git(origin, "-c", "user.name=t", "-c", "user.email=t@example.com", "tag", "-a", "v1", "-m", "v1");

cd /work/repo; sed -i '78s/git(origin, "tag", "-a"/git(origin, "-c", "user.name=t", "-c", "user.email=t@example.com", "tag", "-a"/' scripts/ops/backup-restore-drill.test.mjs; sed -n 78p scripts/ops/backup-restore-drill.test.mjs; grep -n "scripts/ops\|node --test" package.json .g1t/workflows/*.yml | head; HOME=$(mktemp -d) GIT_CONFIG_NOSYSTEM=1 node --test scripts/ops/*.test.mjs 2>&1 | grep -E "^ℹ (pass|fail)|✖"

git(origin, "-c", "user.name=t", "-c", "user.email=t@example.com", "tag", "-a", "v1", "-m", "v1");
package.json:16:    "test:deploy": "node --test \"scripts/deploy/*.test.mjs\"",
package.json:17:    "test:ops": "node --test \"scripts/ops/*.test.mjs\""
.g1t/workflows/deploy.yml:278:  # real waitlist is never touched. scripts/ops/smoke.mjs.
.g1t/workflows/deploy.yml:288:        run: node scripts/ops/smoke.mjs
ℹ pass 41
ℹ fail 0

cd /work/repo; grep -n "run:" .g1t/workflows/ci.yml | head -30; grep -rln '"tag", "-a"\|"commit"' scripts --include=*.test.mjs; HOME=$(mktemp -d) GIT_CONFIG_NOSYSTEM=1 node --test "scripts/deploy/*.test.mjs" 2>&1 | grep -E "^ℹ (pass|fail)"

61:        run: bash scripts/sccache.sh install
63:        run: cargo test --workspace --locked --quiet
66:        run: bash scripts/sccache.sh stats
76:        run: npm ci --no-audit --no-fund
78:        run: npm run typecheck
80:        run: npm test --workspaces --if-present
82:        run: npm run test:deploy
84:        run: npm run test:ops
86:        run: node scripts/deploy.mjs manifest --check
96:        run: npm ci --no-audit --no-fund
98:        run: node scripts/deploy.mjs build --only web,sudo,docs
scripts/ops/restore-to-gitstore.test.mjs
scripts/ops/backup-restore-drill.test.mjs
ℹ pass 15
ℹ fail 1

cd /work/repo; HOME=$(mktemp -d) GIT_CONFIG_NOSYSTEM=1 node --test "scripts/deploy/*.test.mjs" 2>&1 | grep -A12 "failing tests"; ls node_modules | head -2

✖ failing tests:

test at scripts/deploy/deploy.test.mjs:1:1
✖ scripts/deploy/deploy.test.mjs (70.085526ms)
  'test failed'
ls: cannot access 'node_modules': No such file or directory

cd /work/repo; git commit -qam "The drill test's annotated tag carries its own identity, so it runs where git has none configured

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>" && git log --oneline -1

a539656 The drill test's annotated tag carries its own identity, so it runs where git has none configured