Pin a source to a concrete, immutable version

Records what was fetched, from where, and when, into sources/<source>/<version>/PIN.dcf. The pin carries the upstream ETag, Last-Modified and byte count, plus the md5 of the local copy and the npmatch normalizer signature current at pin time.

Usage

md_source_pin(source, file, version = NULL)

md_source_read_pin(source, version)

md_source_read_files(source, version)

Arguments

source

A source value from md_sources().

file

Path to the already-downloaded local copy.

version

Version directory name, e.g. "v2026-08-11". Defaults to the upstream Last-Modified date, which is the honest choice for a pointer.

Value

The pin, invisibly, as a named list.

Details

The point is not ceremony. md_ingest_*() refuses to read a source directory with no pin, so no row can enter the database whose origin cannot be named.

Every pin also writes FILES.csv beside PIN.dcf: one row per file with its name, size and md5. A set pin's own local_md5 is a digest of these, so it says that a year changed; FILES.csv says which, which is what lets a re-release skip the year files that did not change (dev/IDENTITY.md section 5). md_source_read_files() returns it, or NULL for a pin written before FILES.csv existed.