@_linked/server 2.19.0 → 2.21.0

package/CHANGELOG.md

@@ -1,5 +1,45 @@
 # @\_linked/server
 
+## 2.21.0
+
+### Minor Changes
+
+- [#134](https://github.com/linked-fw/server/pull/134) [`6944752`](https://github.com/linked-fw/server/commit/6944752608eafa3ee1112da42ecafb6281684912) Thanks [@flyon](https://github.com/flyon)! - `LocalFileStore` path containment resolves symlinks: the base folder and the target (or its nearest existing ancestor, following a dangling link) go through `fs.realpath` before the comparison, so a key that reaches outside the store through a symlink is refused on every method.
+
+  `getShapes` on the default provider is not declared callable (it answers 501 in `enforce` mode); clients read the shape index through `/api/all-shapes`. `dispose` is a reserved name: the server calls it when it reloads providers, and no RPC reaches it in either `rpcExposure` mode.
+
+- [#134](https://github.com/linked-fw/server/pull/134) [`6944752`](https://github.com/linked-fw/server/commit/6944752608eafa3ee1112da42ecafb6281684912) Thanks [@flyon](https://github.com/flyon)! - RPC exposure rules, per-call request context and generic query plane authorization. Requires `@_linked/server-utils` `^1.9.0`.
+
+  - `/call/...` dispatches provider methods by declaration. Reserved names always answer 501, also for backend-to-backend calls: `Object.prototype` members, every `BackendProvider`/`ShapeProvider` method (including subclass overrides of lifecycle hooks such as `initRequest`), `dispose`, `constructor`, `__proto__`, accessors and fields.
+  - Methods declared with `@callable('public' | 'user')` (from `@_linked/server-utils/utils/callable`) are dispatched; `'user'` answers 401 without a session. An override that does not redeclare a method keeps the strictest level declared for it up the class chain. Methods no class declares run and are logged once per method in `warn` mode, and answer 501 in `enforce` mode. Set the mode with the `server.rpcExposure` option or `LINKED_RPC_EXPOSURE`; the default is `warn`.
+  - Methods declared with `@internal()` or `declareInternal(cls, methods)` by the provider's class or a super class answer 501 over HTTP in both modes, even when also declared callable. Backend-to-backend calls still reach them.
+  - A provider class with its own `static rpc = false` is not reachable over the generic `/call/<pkg>/<method>` route.
+  - Every request runs in one http call context from the first middleware on (routers, provider middleware and error handlers included); backend-to-backend calls outside a request run as system, and lazy provider loading always does. A `{__sc}` Shape-class argument is logged in `warn` and refused (400) in `enforce`.
+  - The query endpoints (`selectQuery`/`askQuery`/`createQuery`/`updateQuery`/`deleteQuery` and `/api/select|create|update|delete|select-raw`) apply the `QueryAccess` rules and hand the store the query builder they checked. Before a mutation, one SPARQL `ASK` on the dataset it routes to looks up whether it would write or delete a node typed with a protected class; `setProtectedNodeProbe(fn)` (`utils/queryPlane`) replaces that lookup.
+  - `/uploads` and resized images are served with `X-Content-Type-Options: nosniff` and `Content-Security-Policy: sandbox`.
+  - `LocalFileStore` refuses keys that resolve outside its base folder.
+  - `registerCallRoutes(app, linkedServer)` registers the `/call` and `/api` routes; `mountUploads(app, folder)` and `enterRequestContext` are exported for the same purpose.
+  - Client-supplied names in log lines are escaped.
+
+  Behaviour changes:
+
+  - Generic-plane mutations require a signed-in user in every mode (401), and a create may not choose the ids of its new nodes (403).
+  - With protected shapes registered, a mutation on a dataset that cannot run SPARQL (`rawQuery`) is refused (403), unless the app sets its own probe.
+  - `/api/select-raw` is refused (403) in every mode unless the app registers `registerRawQueryAuthorizer`. Its JSON body is also kept as received on `request.rawBody`, which the raw authorizers get as `rawBody` to verify a signature over the exact bytes; with every raw authorizer accepting, the query runs without a session.
+  - A query body that is not a query answers 400, as does an operation that does not match the query kind (a delete sent to `selectQuery`).
+  - A query that contains a query-context reference (`{"@ctx": name}`, e.g. built with `.for(getQueryContext('user'))`) answers 400 on the query endpoints. A server-side context map is process-wide and does not identify the caller; send the node id instead.
+  - `/uploads` files are sandboxed: an HTML file opened from there runs without scripts.
+
+## 2.20.0
+
+### Minor Changes
+
+- [#132](https://github.com/linked-fw/server/pull/132) [`6db7feb`](https://github.com/linked-fw/server/commit/6db7feb0d3520f2e91732b094bc8d004056a78a9) Thanks [@flyon](https://github.com/flyon)! - The server ontology's prefix label is now `server`, matching its namespace slug (`https://linked.cm/ont/server/`), so compaction emits `server:LincdAPI` where it used to emit `lincd-server:LincdAPI`. The ontology moves to `ontologies/server` (export `server`) and `ontologies/server.register`, and its data file to `data/server.json`, whose `@context` key and prefixed names now use `server:`. The IRIs themselves are unchanged.
+
+  Deprecated, still working: the `lincd-server` prefix stays registered as an alias, so `lincd-server:X` names still expand to the same IRIs; `ontologies/lincd-server` re-exports `ontologies/server`, `ontologies/lincd-server.register` registers the ontology, and `lincdServer` is the same object as `server`. Only the published `data/lincd-server.json` path is gone, renamed to `data/server.json`.
+
+  No IRI changes, so stored data is unaffected; any data written under the older `http://lincd.org/ont/lincd-server/` IRIs is still not migrated (clear dev datasets).
+
 ## 2.19.0
 
 ### Minor Changes

package/lib/esm/backend.js

@@ -1,9 +1,19 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
 import { BackendProvider } from '@_linked/server-utils/utils/BackendProvider';
+import { callable } from '@_linked/server-utils/utils/callable';
 import { LinkedFileStorage } from '@_linked/core/utils/LinkedFileStorage';
 import { LinkedStorage } from '@_linked/core/utils/LinkedStorage';
-import { fromJSON } from '@_linked/core';
 import { LocalFileStore } from './shapes/filestores/LocalFileStore.js';
 import { getShapeIndex } from './utils/Shapes.js';
+import { authorizeGenericQuery, toQueryBuilder } from './utils/queryPlane.js';
 import path from 'path';
 import fs from 'fs/promises';
 export default class LincdServerBackendProvider extends BackendProvider {
@@ -21,6 +31,9 @@ export default class LincdServerBackendProvider extends BackendProvider {
             });
         }
     }
+    // Not callable over RPC: no client calls it. Clients read the same index
+    // through LincdAPI's `/api/all-shapes` and `/api/shape-details`; backend code
+    // can still reach it with a local `Server.call`.
     getShapes() {
         return getShapeIndex();
     }
@@ -40,20 +53,66 @@ export default class LincdServerBackendProvider extends BackendProvider {
     // `toJSON()` and `fromJSON()` rehydrates it here into a live, closed query.
     // `LinkedStorage` then routes it by the QUERY's shape — which is, and always was, what
     // decides the target dataset. The store instance never participated.
-    selectQuery(json) {
-        return LinkedStorage.selectQuery(fromJSON(json));
+    //
+    // Every query is checked against the generic-plane rules first (session,
+    // protected shapes and nodes, registered authorizers): see utils/queryPlane.
+    // The store runs the builder that was checked. They are declared 'public'
+    // because that check, not the RPC layer, decides whether a session is
+    // required (always for mutations; for reads it follows `rpcExposure`).
+    async selectQuery(json) {
+        const query = toQueryBuilder(json);
+        await authorizeGenericQuery('select', json, query, 'selectQuery');
+        return LinkedStorage.selectQuery(query);
     }
-    askQuery(json) {
-        return LinkedStorage.askQuery(fromJSON(json));
+    async askQuery(json) {
+        const query = toQueryBuilder(json);
+        await authorizeGenericQuery('ask', json, query, 'askQuery');
+        return LinkedStorage.askQuery(query);
     }
-    updateQuery(json) {
-        return LinkedStorage.updateQuery(fromJSON(json));
+    async updateQuery(json) {
+        const query = toQueryBuilder(json);
+        await authorizeGenericQuery('update', json, query, 'updateQuery');
+        return LinkedStorage.updateQuery(query);
     }
-    createQuery(json) {
-        return LinkedStorage.createQuery(fromJSON(json));
+    async createQuery(json) {
+        const query = toQueryBuilder(json);
+        await authorizeGenericQuery('create', json, query, 'createQuery');
+        return LinkedStorage.createQuery(query);
     }
-    deleteQuery(json) {
-        return LinkedStorage.deleteQuery(fromJSON(json));
+    async deleteQuery(json) {
+        const query = toQueryBuilder(json);
+        await authorizeGenericQuery('delete', json, query, 'deleteQuery');
+        return LinkedStorage.deleteQuery(query);
     }
 }
+__decorate([
+    callable('public'),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object]),
+    __metadata("design:returntype", Promise)
+], LincdServerBackendProvider.prototype, "selectQuery", null);
+__decorate([
+    callable('public'),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object]),
+    __metadata("design:returntype", Promise)
+], LincdServerBackendProvider.prototype, "askQuery", null);
+__decorate([
+    callable('public'),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object]),
+    __metadata("design:returntype", Promise)
+], LincdServerBackendProvider.prototype, "updateQuery", null);
+__decorate([
+    callable('public'),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object]),
+    __metadata("design:returntype", Promise)
+], LincdServerBackendProvider.prototype, "createQuery", null);
+__decorate([
+    callable('public'),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object]),
+    __metadata("design:returntype", Promise)
+], LincdServerBackendProvider.prototype, "deleteQuery", null);
 //# sourceMappingURL=backend.js.map

package/lib/esm/backend.js.map

@@ -1 +1 @@
-{"version":3,"file":"backend.js","sourceRoot":"","sources":["../../src/backend.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,6CAA6C,CAAC;AAC9E,OAAO,EAAE,iBAAiB,EAAE,MAAM,uCAAuC,CAAC;AAC1E,OAAO,EAAE,aAAa,EAAE,MAAM,mCAAmC,CAAC;AAClE,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AACzC,OAAO,EAAE,cAAc,EAAE,MAAM,uCAAuC,CAAC;AACvE,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAClD,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,EAAE,MAAM,aAAa,CAAC;AAE7B,MAAM,CAAC,OAAO,OAAO,0BAA2B,SAAQ,eAAe;IACrE,KAAK,CAAC,sBAAsB;QAC1B,IAAI,CAAC,iBAAiB,CAAC,eAAe,EAAE,EAAE,CAAC;YACzC,iBAAiB,CAAC,eAAe,CAC/B,IAAI,cAAc,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,GAAG,YAAY,CAAC,CACxD,CAAC;QACJ,CAAC;QACD,IAAI,oBAAoB,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;QAC3D,IAAI,CAAC;YACH,MAAM,EAAE,CAAC,MAAM,CAAC,oBAAoB,CAAC,CAAC;QACxC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,oBAAoB,EAAE,YAAY,CAAC,EAAE;gBAC5D,SAAS,EAAE,IAAI;aAChB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,SAAS;QACP,OAAO,aAAa,EAAE,CAAC;IACzB,CAAC;IAED,4EAA4E;IAC5E,EAAE;IACF,2DAA2D;IAC3D,gFAAgF;IAChF,6EAA6E;IAC7E,EAAE;IACF,mFAAmF;IACnF,qFAAqF;IACrF,uFAAuF;IACvF,uFAAuF;IACvF,4DAA4D;IAC5D,EAAE;IACF,sFAAsF;IACtF,4EAA4E;IAC5E,uFAAuF;IACvF,qEAAqE;IAErE,WAAW,CAAC,IAAS;QACnB,OAAO,aAAa,CAAC,WAAW,CAAC,QAAQ,CAAC,IAAI,CAAQ,CAAC,CAAC;IAC1D,CAAC;IAED,QAAQ,CAAC,IAAS;QAChB,OAAO,aAAa,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAQ,CAAC,CAAC;IACvD,CAAC;IAED,WAAW,CAAC,IAAS;QACnB,OAAO,aAAa,CAAC,WAAW,CAAC,QAAQ,CAAC,IAAI,CAAQ,CAAC,CAAC;IAC1D,CAAC;IAED,WAAW,CAAC,IAAS;QACnB,OAAO,aAAa,CAAC,WAAW,CAAC,QAAQ,CAAC,IAAI,CAAQ,CAAC,CAAC;IAC1D,CAAC;IAED,WAAW,CAAC,IAAS;QACnB,OAAO,aAAa,CAAC,WAAW,CAAC,QAAQ,CAAC,IAAI,CAAQ,CAAC,CAAC;IAC1D,CAAC;CACF","sourcesContent":["import { BackendProvider } from '@_linked/server-utils/utils/BackendProvider';\nimport { LinkedFileStorage } from '@_linked/core/utils/LinkedFileStorage';\nimport { LinkedStorage } from '@_linked/core/utils/LinkedStorage';\nimport { fromJSON } from '@_linked/core';\nimport { LocalFileStore } from './shapes/filestores/LocalFileStore.js';\nimport { getShapeIndex } from './utils/Shapes.js';\nimport path from 'path';\nimport fs from 'fs/promises';\n\nexport default class LincdServerBackendProvider extends BackendProvider {\n  async setupBeforeControllers() {\n    if (!LinkedFileStorage.getDefaultStore()) {\n      LinkedFileStorage.setDefaultStore(\n        new LocalFileStore(process.env.NODE_ENV + '-filestore')\n      );\n    }\n    let fileSystemUploadPath = path.join('data', 'filestores');\n    try {\n      await fs.access(fileSystemUploadPath);\n    } catch (err) {\n      await fs.mkdir(path.join(fileSystemUploadPath, 'filestores'), {\n        recursive: true,\n      });\n    }\n  }\n\n  getShapes() {\n    return getShapeIndex();\n  }\n\n  // ── BackendAPIStore query execution ──────────────────────────────────────\n  //\n  // These answer the frontend `BackendAPIStore`, which calls\n  // `Server.call(packageName, {method}, json)` — the PACKAGE form, so the request\n  // arrives here on the generic provider rather than through Shape resolution.\n  //\n  // They used to live on `BackendAPIStoreProvider`, a `ShapeProvider`, whose methods\n  // took the store as a first argument and never read it. Reaching that provider meant\n  // the transport had to carry a `shapeURI` and an `instanceNode`, and the server had to\n  // rebuild the store with `new (providerShapeClass)({id})` — instantiating a Shape only\n  // to discard it. Addressing by package removes all of that.\n  //\n  // A query cannot cross the wire live (core 2.10.0 contract flip), so the client ships\n  // `toJSON()` and `fromJSON()` rehydrates it here into a live, closed query.\n  // `LinkedStorage` then routes it by the QUERY's shape — which is, and always was, what\n  // decides the target dataset. The store instance never participated.\n\n  selectQuery(json: any) {\n    return LinkedStorage.selectQuery(fromJSON(json) as any);\n  }\n\n  askQuery(json: any) {\n    return LinkedStorage.askQuery(fromJSON(json) as any);\n  }\n\n  updateQuery(json: any) {\n    return LinkedStorage.updateQuery(fromJSON(json) as any);\n  }\n\n  createQuery(json: any) {\n    return LinkedStorage.createQuery(fromJSON(json) as any);\n  }\n\n  deleteQuery(json: any) {\n    return LinkedStorage.deleteQuery(fromJSON(json) as any);\n  }\n}\n"]}
+{"version":3,"file":"backend.js","sourceRoot":"","sources":["../../src/backend.ts"],"names":[],"mappings":";;;;;;;;;AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,6CAA6C,CAAC;AAC9E,OAAO,EAAE,QAAQ,EAAE,MAAM,sCAAsC,CAAC;AAChE,OAAO,EAAE,iBAAiB,EAAE,MAAM,uCAAuC,CAAC;AAC1E,OAAO,EAAE,aAAa,EAAE,MAAM,mCAAmC,CAAC;AAClE,OAAO,EAAE,cAAc,EAAE,MAAM,uCAAuC,CAAC;AACvE,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAClD,OAAO,EAAE,qBAAqB,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAC9E,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,EAAE,MAAM,aAAa,CAAC;AAE7B,MAAM,CAAC,OAAO,OAAO,0BAA2B,SAAQ,eAAe;IACrE,KAAK,CAAC,sBAAsB;QAC1B,IAAI,CAAC,iBAAiB,CAAC,eAAe,EAAE,EAAE,CAAC;YACzC,iBAAiB,CAAC,eAAe,CAC/B,IAAI,cAAc,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,GAAG,YAAY,CAAC,CACxD,CAAC;QACJ,CAAC;QACD,IAAI,oBAAoB,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;QAC3D,IAAI,CAAC;YACH,MAAM,EAAE,CAAC,MAAM,CAAC,oBAAoB,CAAC,CAAC;QACxC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,oBAAoB,EAAE,YAAY,CAAC,EAAE;gBAC5D,SAAS,EAAE,IAAI;aAChB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,yEAAyE;IACzE,8EAA8E;IAC9E,iDAAiD;IACjD,SAAS;QACP,OAAO,aAAa,EAAE,CAAC;IACzB,CAAC;IAED,4EAA4E;IAC5E,EAAE;IACF,2DAA2D;IAC3D,gFAAgF;IAChF,6EAA6E;IAC7E,EAAE;IACF,mFAAmF;IACnF,qFAAqF;IACrF,uFAAuF;IACvF,uFAAuF;IACvF,4DAA4D;IAC5D,EAAE;IACF,sFAAsF;IACtF,4EAA4E;IAC5E,uFAAuF;IACvF,qEAAqE;IAErE,EAAE;IACF,yEAAyE;IACzE,6EAA6E;IAC7E,0EAA0E;IAC1E,sEAAsE;IACtE,uEAAuE;IAGjE,AAAN,KAAK,CAAC,WAAW,CAAC,IAAS;QACzB,MAAM,KAAK,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC;QACnC,MAAM,qBAAqB,CAAC,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,aAAa,CAAC,CAAC;QAClE,OAAO,aAAa,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;IAC1C,CAAC;IAGK,AAAN,KAAK,CAAC,QAAQ,CAAC,IAAS;QACtB,MAAM,KAAK,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC;QACnC,MAAM,qBAAqB,CAAC,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC;QAC5D,OAAO,aAAa,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IACvC,CAAC;IAGK,AAAN,KAAK,CAAC,WAAW,CAAC,IAAS;QACzB,MAAM,KAAK,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC;QACnC,MAAM,qBAAqB,CAAC,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,aAAa,CAAC,CAAC;QAClE,OAAO,aAAa,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;IAC1C,CAAC;IAGK,AAAN,KAAK,CAAC,WAAW,CAAC,IAAS;QACzB,MAAM,KAAK,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC;QACnC,MAAM,qBAAqB,CAAC,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,aAAa,CAAC,CAAC;QAClE,OAAO,aAAa,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;IAC1C,CAAC;IAGK,AAAN,KAAK,CAAC,WAAW,CAAC,IAAS;QACzB,MAAM,KAAK,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC;QACnC,MAAM,qBAAqB,CAAC,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,aAAa,CAAC,CAAC;QAClE,OAAO,aAAa,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;IAC1C,CAAC;CACF;AAjCO;IADL,QAAQ,CAAC,QAAQ,CAAC;;;;6DAKlB;AAGK;IADL,QAAQ,CAAC,QAAQ,CAAC;;;;0DAKlB;AAGK;IADL,QAAQ,CAAC,QAAQ,CAAC;;;;6DAKlB;AAGK;IADL,QAAQ,CAAC,QAAQ,CAAC;;;;6DAKlB;AAGK;IADL,QAAQ,CAAC,QAAQ,CAAC;;;;6DAKlB","sourcesContent":["import { BackendProvider } from '@_linked/server-utils/utils/BackendProvider';\nimport { callable } from '@_linked/server-utils/utils/callable';\nimport { LinkedFileStorage } from '@_linked/core/utils/LinkedFileStorage';\nimport { LinkedStorage } from '@_linked/core/utils/LinkedStorage';\nimport { LocalFileStore } from './shapes/filestores/LocalFileStore.js';\nimport { getShapeIndex } from './utils/Shapes.js';\nimport { authorizeGenericQuery, toQueryBuilder } from './utils/queryPlane.js';\nimport path from 'path';\nimport fs from 'fs/promises';\n\nexport default class LincdServerBackendProvider extends BackendProvider {\n  async setupBeforeControllers() {\n    if (!LinkedFileStorage.getDefaultStore()) {\n      LinkedFileStorage.setDefaultStore(\n        new LocalFileStore(process.env.NODE_ENV + '-filestore')\n      );\n    }\n    let fileSystemUploadPath = path.join('data', 'filestores');\n    try {\n      await fs.access(fileSystemUploadPath);\n    } catch (err) {\n      await fs.mkdir(path.join(fileSystemUploadPath, 'filestores'), {\n        recursive: true,\n      });\n    }\n  }\n\n  // Not callable over RPC: no client calls it. Clients read the same index\n  // through LincdAPI's `/api/all-shapes` and `/api/shape-details`; backend code\n  // can still reach it with a local `Server.call`.\n  getShapes() {\n    return getShapeIndex();\n  }\n\n  // ── BackendAPIStore query execution ──────────────────────────────────────\n  //\n  // These answer the frontend `BackendAPIStore`, which calls\n  // `Server.call(packageName, {method}, json)` — the PACKAGE form, so the request\n  // arrives here on the generic provider rather than through Shape resolution.\n  //\n  // They used to live on `BackendAPIStoreProvider`, a `ShapeProvider`, whose methods\n  // took the store as a first argument and never read it. Reaching that provider meant\n  // the transport had to carry a `shapeURI` and an `instanceNode`, and the server had to\n  // rebuild the store with `new (providerShapeClass)({id})` — instantiating a Shape only\n  // to discard it. Addressing by package removes all of that.\n  //\n  // A query cannot cross the wire live (core 2.10.0 contract flip), so the client ships\n  // `toJSON()` and `fromJSON()` rehydrates it here into a live, closed query.\n  // `LinkedStorage` then routes it by the QUERY's shape — which is, and always was, what\n  // decides the target dataset. The store instance never participated.\n\n  //\n  // Every query is checked against the generic-plane rules first (session,\n  // protected shapes and nodes, registered authorizers): see utils/queryPlane.\n  // The store runs the builder that was checked. They are declared 'public'\n  // because that check, not the RPC layer, decides whether a session is\n  // required (always for mutations; for reads it follows `rpcExposure`).\n\n  @callable('public')\n  async selectQuery(json: any) {\n    const query = toQueryBuilder(json);\n    await authorizeGenericQuery('select', json, query, 'selectQuery');\n    return LinkedStorage.selectQuery(query);\n  }\n\n  @callable('public')\n  async askQuery(json: any) {\n    const query = toQueryBuilder(json);\n    await authorizeGenericQuery('ask', json, query, 'askQuery');\n    return LinkedStorage.askQuery(query);\n  }\n\n  @callable('public')\n  async updateQuery(json: any) {\n    const query = toQueryBuilder(json);\n    await authorizeGenericQuery('update', json, query, 'updateQuery');\n    return LinkedStorage.updateQuery(query);\n  }\n\n  @callable('public')\n  async createQuery(json: any) {\n    const query = toQueryBuilder(json);\n    await authorizeGenericQuery('create', json, query, 'createQuery');\n    return LinkedStorage.createQuery(query);\n  }\n\n  @callable('public')\n  async deleteQuery(json: any) {\n    const query = toQueryBuilder(json);\n    await authorizeGenericQuery('delete', json, query, 'deleteQuery');\n    return LinkedStorage.deleteQuery(query);\n  }\n}\n"]}

package/lib/esm/data/{lincd-server.json → server.json}

@@ -4,42 +4,42 @@
     "owl": "http://www.w3.org/2002/07/owl#",
     "rdf": "http://www.w3.org/1999/02/22-rdf-syntax-ns#",
     "rdfs": "http://www.w3.org/2000/01/rdf-schema#",
-    "lincd-server": "https://linked.cm/ont/server/"
+    "server": "https://linked.cm/ont/server/"
   },
   "@graph": [
     {
-      "@id": "lincd-server:LincdServer",
+      "@id": "server:LincdServer",
       "@type": "rdfs:Class",
       "rdfs:comment": "A HTTP server for LINCD applications, running on node.js.",
       "rdfs:isDefinedBy": {
-        "@id": "lincd-server:"
+        "@id": "server:"
       },
       "rdfs:label": "LINCD Server"
     },
     {
-      "@id": "lincd-server:NodeFileStore",
+      "@id": "server:NodeFileStore",
       "@type": "rdfs:Class",
       "rdfs:comment": "Stores quads in a file in JSONLD format. Made for node.js environments.",
       "rdfs:isDefinedBy": {
-        "@id": "lincd-server:"
+        "@id": "server:"
       },
       "rdfs:label": "Node file store"
     },
     {
-      "@id": "lincd-server:BackendFileStore",
+      "@id": "server:BackendFileStore",
       "@type": "rdfs:Class",
       "rdfs:comment": "A simple quad store for frontends that are served by a LINCD Nodejs Server. Quads get loaded and updated through API calls to the backend. All quads are loaded into local memory in the frontend upon initiation of the app.",
       "rdfs:isDefinedBy": {
-        "@id": "lincd-server:"
+        "@id": "server:"
       },
       "rdfs:label": "Backend file store"
     },
     {
-      "@id": "lincd-server:BackendStore",
+      "@id": "server:BackendStore",
       "@type": "rdfs:Class",
       "rdfs:comment": "A base class for backend quad stores. These are quad stores for frontends that are served by a LINCD Nodejs Server. Quads get loaded and updated through API calls to the backend. All quads are loaded into local memory in the frontend upon initiation of the app.",
       "rdfs:isDefinedBy": {
-        "@id": "lincd-server:"
+        "@id": "server:"
       },
       "rdfs:label": "Backend store"
     }

package/lib/esm/index.d.ts

@@ -1,5 +1,5 @@
 import './types.js';
-import './ontologies/lincd-server.register.js';
+import './ontologies/server.register.js';
 import './shapes/index.js';
 import './shapes/quadstores/BackendAPIStore.js';
 import './shapes/filestores/LocalFileStore.js';

package/lib/esm/index.js

@@ -1,5 +1,5 @@
 import './types.js';
-import './ontologies/lincd-server.register.js';
+import './ontologies/server.register.js';
 //SHAPES FIRST
 import './shapes/index.js';
 // Not shapes (plain store classes); kept so the entry's module graph is unchanged.

package/lib/esm/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,YAAY,CAAC;AACpB,OAAO,uCAAuC,CAAC;AAE/C,cAAc;AACd,OAAO,mBAAmB,CAAC;AAC3B,mFAAmF;AACnF,OAAO,wCAAwC,CAAC;AAChD,OAAO,uCAAuC,CAAC;AAE/C,iBAAiB;AACjB,OAAO,sBAAsB,CAAC;AAE9B,8EAA8E;AAC9E,OAAO,EAAE,iBAAiB,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC","sourcesContent":["import './types.js';\nimport './ontologies/lincd-server.register.js';\n\n//SHAPES FIRST\nimport './shapes/index.js';\n// Not shapes (plain store classes); kept so the entry's module graph is unchanged.\nimport './shapes/quadstores/BackendAPIStore.js';\nimport './shapes/filestores/LocalFileStore.js';\n\n//THEN COMPONENTS\nimport './utils/accessUrl.js';\n\n// The fatal-error contract a provider uses to refuse to let the server start.\nexport { FatalStartupError, isFatalError } from './utils/fatalError.js';\nexport type { FatalError } from './utils/fatalError.js';\n\n//TYPES — re-exported from @_linked/server-utils (canonical location)\nexport type {\n  RouteConfig,\n  RoutesConfig,\n  RoutesModule,\n} from '@_linked/server-utils/types/RouteConfig';\n"]}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,YAAY,CAAC;AACpB,OAAO,iCAAiC,CAAC;AAEzC,cAAc;AACd,OAAO,mBAAmB,CAAC;AAC3B,mFAAmF;AACnF,OAAO,wCAAwC,CAAC;AAChD,OAAO,uCAAuC,CAAC;AAE/C,iBAAiB;AACjB,OAAO,sBAAsB,CAAC;AAE9B,8EAA8E;AAC9E,OAAO,EAAE,iBAAiB,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC","sourcesContent":["import './types.js';\nimport './ontologies/server.register.js';\n\n//SHAPES FIRST\nimport './shapes/index.js';\n// Not shapes (plain store classes); kept so the entry's module graph is unchanged.\nimport './shapes/quadstores/BackendAPIStore.js';\nimport './shapes/filestores/LocalFileStore.js';\n\n//THEN COMPONENTS\nimport './utils/accessUrl.js';\n\n// The fatal-error contract a provider uses to refuse to let the server start.\nexport { FatalStartupError, isFatalError } from './utils/fatalError.js';\nexport type { FatalError } from './utils/fatalError.js';\n\n//TYPES — re-exported from @_linked/server-utils (canonical location)\nexport type {\n  RouteConfig,\n  RoutesConfig,\n  RoutesModule,\n} from '@_linked/server-utils/types/RouteConfig';\n"]}

package/lib/esm/ontologies/lincd-server.d.ts

@@ -1,49 +1,6 @@
 /**
- * Load the data of this ontology.
- * In @_linked/core, loadData returns the raw JSON import — no JSONLD.parse() needed.
+ * @deprecated import from `./server.js` instead. This module path is kept so existing
+ * `@_linked/server/ontologies/lincd-server` imports keep working; `lincdServer` is
+ * re-exported as a deprecated alias of `server`.
  */
-export declare var loadData: () => Promise<{
-    "@context": {
-        dc: string;
-        owl: string;
-        rdf: string;
-        rdfs: string;
-        "lincd-server": string;
-    };
-    "@graph": {
-        "@id": string;
-        "@type": string;
-        "rdfs:comment": string;
-        "rdfs:isDefinedBy": {
-            "@id": string;
-        };
-        "rdfs:label": string;
-    }[];
-}>;
-/**
- * The namespace of this ontology.
- *
- * First-party ontologies live on linked.cm: `https://linked.cm/ont/{ontologySlug}/`, and a
- * package's own ontology takes the package's publicSlug (`@_linked/server` → `server`), the same
- * slug its shapes use under `https://linked.cm/shape/server/`.
- *
- * Until this release it was `http://lincd.org/ont/lincd-server/`. No stored data is typed with
- * these terms; the only store triples that carried them were the synced shape descriptions of
- * `LinkedServer`, `LincdAPI` and `LincdWebApp` (`sh:targetClass`, `sh:path`), which boot sync
- * rewrites (delete, then recreate) the next time the server starts.
- */
-export declare var ns: (term: string) => import("@_linked/core/utils/NodeReference").NodeReferenceValue;
-export declare var _self: import("@_linked/core/utils/NodeReference").NodeReferenceValue;
-export declare const lincdServer: {
-    LincdServer: import("@_linked/core/utils/NodeReference").NodeReferenceValue;
-    BackendFileStore: import("@_linked/core/utils/NodeReference").NodeReferenceValue;
-    NodeFileStore: import("@_linked/core/utils/NodeReference").NodeReferenceValue;
-    BackendStore: import("@_linked/core/utils/NodeReference").NodeReferenceValue;
-    N3FileStore: import("@_linked/core/utils/NodeReference").NodeReferenceValue;
-    BackendAPIStore: import("@_linked/core/utils/NodeReference").NodeReferenceValue;
-    LincdWebApp: import("@_linked/core/utils/NodeReference").NodeReferenceValue;
-    ownPackage: import("@_linked/core/utils/NodeReference").NodeReferenceValue;
-    maintainsPackage: import("@_linked/core/utils/NodeReference").NodeReferenceValue;
-    LincdAPI: import("@_linked/core/utils/NodeReference").NodeReferenceValue;
-    hasAPI: import("@_linked/core/utils/NodeReference").NodeReferenceValue;
-};
+export * from './server.js';

package/lib/esm/ontologies/lincd-server.js

@@ -1,58 +1,7 @@
-import { createNameSpace } from '@_linked/core/utils/NameSpace';
 /**
- * Load the data of this ontology.
- * In @_linked/core, loadData returns the raw JSON import — no JSONLD.parse() needed.
+ * @deprecated import from `./server.js` instead. This module path is kept so existing
+ * `@_linked/server/ontologies/lincd-server` imports keep working; `lincdServer` is
+ * re-exported as a deprecated alias of `server`.
  */
-export var loadData = async () => {
-    //@ts-ignore
-    const data = await import('../data/lincd-server.json', {
-        with: { type: 'json' },
-    });
-    return data.default || data;
-};
-/**
- * The namespace of this ontology.
- *
- * First-party ontologies live on linked.cm: `https://linked.cm/ont/{ontologySlug}/`, and a
- * package's own ontology takes the package's publicSlug (`@_linked/server` → `server`), the same
- * slug its shapes use under `https://linked.cm/shape/server/`.
- *
- * Until this release it was `http://lincd.org/ont/lincd-server/`. No stored data is typed with
- * these terms; the only store triples that carried them were the synced shape descriptions of
- * `LinkedServer`, `LincdAPI` and `LincdWebApp` (`sh:targetClass`, `sh:path`), which boot sync
- * rewrites (delete, then recreate) the next time the server starts.
- */
-export var ns = createNameSpace('https://linked.cm/ont/server/');
-export var _self = ns('');
-// Terms are properties of the namespace object below, not module-scope
-// exports. Most of these names are also SHAPE CLASS names in this package
-// (BackendAPIStore, LincdWebApp, LincdAPI, ...). Two bindings of the same name
-// in one bundle scope make the bundler rename one of them, and when the loser
-// is the class, `constructor.name` becomes `BackendAPIStore2` -- which is the
-// shape's IRI and the name `Server.call` routes on. The client then asks a
-// backend that has no such shape, and every store round-trip answers 501.
-const LincdServer = ns('LincdServer');
-const BackendFileStore = ns('BackendFileStore');
-const NodeFileStore = ns('NodeFileStore');
-const BackendStore = ns('BackendStore');
-const BackendAPIStore = ns('BackendAPIStore');
-const LincdWebApp = ns('LincdWebApp');
-const ownPackage = ns('ownPackage');
-const maintainsPackage = ns('maintainsPackage');
-const N3FileStore = ns('N3FileStore');
-const LincdAPI = ns('LincdAPI');
-const hasAPI = ns('hasAPI');
-export const lincdServer = {
-    LincdServer,
-    BackendFileStore,
-    NodeFileStore,
-    BackendStore,
-    N3FileStore,
-    BackendAPIStore,
-    LincdWebApp,
-    ownPackage,
-    maintainsPackage,
-    LincdAPI,
-    hasAPI,
-};
+export * from './server.js';
 //# sourceMappingURL=lincd-server.js.map

package/lib/esm/ontologies/lincd-server.js.map

@@ -1 +1 @@
-{"version":3,"file":"lincd-server.js","sourceRoot":"","sources":["../../../src/ontologies/lincd-server.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AAEhE;;;GAGG;AACH,MAAM,CAAC,IAAI,QAAQ,GAAG,KAAK,IAAI,EAAE;IAC/B,YAAY;IACZ,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,2BAA2B,EAAE;QACrD,IAAI,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE;KACvB,CAAC,CAAC;IACH,OAAO,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC;AAC9B,CAAC,CAAC;AAEF;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,IAAI,EAAE,GAAG,eAAe,CAAC,+BAA+B,CAAC,CAAC;AAEjE,MAAM,CAAC,IAAI,KAAK,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;AAE1B,uEAAuE;AACvE,0EAA0E;AAC1E,+EAA+E;AAC/E,8EAA8E;AAC9E,8EAA8E;AAC9E,2EAA2E;AAC3E,0EAA0E;AAC1E,MAAM,WAAW,GAAG,EAAE,CAAC,aAAa,CAAC,CAAC;AACtC,MAAM,gBAAgB,GAAG,EAAE,CAAC,kBAAkB,CAAC,CAAC;AAChD,MAAM,aAAa,GAAG,EAAE,CAAC,eAAe,CAAC,CAAC;AAC1C,MAAM,YAAY,GAAG,EAAE,CAAC,cAAc,CAAC,CAAC;AACxC,MAAM,eAAe,GAAG,EAAE,CAAC,iBAAiB,CAAC,CAAC;AAC9C,MAAM,WAAW,GAAG,EAAE,CAAC,aAAa,CAAC,CAAC;AACtC,MAAM,UAAU,GAAG,EAAE,CAAC,YAAY,CAAC,CAAC;AACpC,MAAM,gBAAgB,GAAG,EAAE,CAAC,kBAAkB,CAAC,CAAC;AAChD,MAAM,WAAW,GAAG,EAAE,CAAC,aAAa,CAAC,CAAC;AACtC,MAAM,QAAQ,GAAG,EAAE,CAAC,UAAU,CAAC,CAAC;AAChC,MAAM,MAAM,GAAG,EAAE,CAAC,QAAQ,CAAC,CAAC;AAE5B,MAAM,CAAC,MAAM,WAAW,GAAG;IACzB,WAAW;IACX,gBAAgB;IAChB,aAAa;IACb,YAAY;IACZ,WAAW;IACX,eAAe;IACf,WAAW;IACX,UAAU;IACV,gBAAgB;IAChB,QAAQ;IACR,MAAM;CACP,CAAC","sourcesContent":["import { createNameSpace } from '@_linked/core/utils/NameSpace';\n\n/**\n * Load the data of this ontology.\n * In @_linked/core, loadData returns the raw JSON import — no JSONLD.parse() needed.\n */\nexport var loadData = async () => {\n  //@ts-ignore\n  const data = await import('../data/lincd-server.json', {\n    with: { type: 'json' },\n  });\n  return data.default || data;\n};\n\n/**\n * The namespace of this ontology.\n *\n * First-party ontologies live on linked.cm: `https://linked.cm/ont/{ontologySlug}/`, and a\n * package's own ontology takes the package's publicSlug (`@_linked/server` → `server`), the same\n * slug its shapes use under `https://linked.cm/shape/server/`.\n *\n * Until this release it was `http://lincd.org/ont/lincd-server/`. No stored data is typed with\n * these terms; the only store triples that carried them were the synced shape descriptions of\n * `LinkedServer`, `LincdAPI` and `LincdWebApp` (`sh:targetClass`, `sh:path`), which boot sync\n * rewrites (delete, then recreate) the next time the server starts.\n */\nexport var ns = createNameSpace('https://linked.cm/ont/server/');\n\nexport var _self = ns('');\n\n// Terms are properties of the namespace object below, not module-scope\n// exports. Most of these names are also SHAPE CLASS names in this package\n// (BackendAPIStore, LincdWebApp, LincdAPI, ...). Two bindings of the same name\n// in one bundle scope make the bundler rename one of them, and when the loser\n// is the class, `constructor.name` becomes `BackendAPIStore2` -- which is the\n// shape's IRI and the name `Server.call` routes on. The client then asks a\n// backend that has no such shape, and every store round-trip answers 501.\nconst LincdServer = ns('LincdServer');\nconst BackendFileStore = ns('BackendFileStore');\nconst NodeFileStore = ns('NodeFileStore');\nconst BackendStore = ns('BackendStore');\nconst BackendAPIStore = ns('BackendAPIStore');\nconst LincdWebApp = ns('LincdWebApp');\nconst ownPackage = ns('ownPackage');\nconst maintainsPackage = ns('maintainsPackage');\nconst N3FileStore = ns('N3FileStore');\nconst LincdAPI = ns('LincdAPI');\nconst hasAPI = ns('hasAPI');\n\nexport const lincdServer = {\n  LincdServer,\n  BackendFileStore,\n  NodeFileStore,\n  BackendStore,\n  N3FileStore,\n  BackendAPIStore,\n  LincdWebApp,\n  ownPackage,\n  maintainsPackage,\n  LincdAPI,\n  hasAPI,\n};\n\n"]}
+{"version":3,"file":"lincd-server.js","sourceRoot":"","sources":["../../../src/ontologies/lincd-server.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,cAAc,aAAa,CAAC","sourcesContent":["/**\n * @deprecated import from `./server.js` instead. This module path is kept so existing\n * `@_linked/server/ontologies/lincd-server` imports keep working; `lincdServer` is\n * re-exported as a deprecated alias of `server`.\n */\nexport * from './server.js';\n"]}

package/lib/esm/ontologies/lincd-server.register.d.ts

@@ -1 +1,5 @@
-export {};
+/**
+ * @deprecated import `./server.register.js` instead. This module path is kept so existing
+ * `@_linked/server/ontologies/lincd-server.register` imports keep registering the ontology.
+ */
+import './server.register.js';

package/lib/esm/ontologies/lincd-server.register.js

@@ -1,17 +1,6 @@
 /**
- * Registers this ontology.
- *
- * Kept out of `lincd-server.ts` because registration needs that module's whole export
- * namespace, and a module cannot import itself once a bundler is involved: Rollup
- * treats a static self-reference as a circular import and elides it, so the binding is
- * undefined at runtime and the consuming app dies at boot with `_this is not
- * defined`. `tsc` preserves it, which is why the pattern survived for as long as
- * packages were built with `tsc` alone.
- *
- * From a sibling module the same import is ordinary and survives.
+ * @deprecated import `./server.register.js` instead. This module path is kept so existing
+ * `@_linked/server/ontologies/lincd-server.register` imports keep registering the ontology.
  */
-import * as terms from './lincd-server.js';
-import { loadData, ns } from './lincd-server.js';
-import { linkedOntology } from '../package.js';
-linkedOntology(terms, ns, 'lincd-server', loadData, '../data/lincd-server.json');
+import './server.register.js';
 //# sourceMappingURL=lincd-server.register.js.map

package/lib/esm/ontologies/lincd-server.register.js.map

@@ -1 +1 @@
-{"version":3,"file":"lincd-server.register.js","sourceRoot":"","sources":["../../../src/ontologies/lincd-server.register.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,OAAO,KAAK,KAAK,MAAM,mBAAmB,CAAC;AAC3C,OAAO,EAAC,QAAQ,EAAE,EAAE,EAAC,MAAM,mBAAmB,CAAC;AAC/C,OAAO,EAAC,cAAc,EAAC,MAAM,eAAe,CAAC;AAE7C,cAAc,CACZ,KAAK,EACL,EAAE,EACF,cAAc,EACd,QAAQ,EACR,2BAA2B,CAC5B,CAAC","sourcesContent":["/**\n * Registers this ontology.\n *\n * Kept out of `lincd-server.ts` because registration needs that module's whole export\n * namespace, and a module cannot import itself once a bundler is involved: Rollup\n * treats a static self-reference as a circular import and elides it, so the binding is\n * undefined at runtime and the consuming app dies at boot with `_this is not\n * defined`. `tsc` preserves it, which is why the pattern survived for as long as\n * packages were built with `tsc` alone.\n *\n * From a sibling module the same import is ordinary and survives.\n */\nimport * as terms from './lincd-server.js';\nimport {loadData, ns} from './lincd-server.js';\nimport {linkedOntology} from '../package.js';\n\nlinkedOntology(\n  terms,\n  ns,\n  'lincd-server',\n  loadData,\n  '../data/lincd-server.json'\n);\n"]}
+{"version":3,"file":"lincd-server.register.js","sourceRoot":"","sources":["../../../src/ontologies/lincd-server.register.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,sBAAsB,CAAC","sourcesContent":["/**\n * @deprecated import `./server.register.js` instead. This module path is kept so existing\n * `@_linked/server/ontologies/lincd-server.register` imports keep registering the ontology.\n */\nimport './server.register.js';\n"]}

package/lib/esm/ontologies/server.d.ts

@@ -0,0 +1,66 @@
+/**
+ * Load the data of this ontology.
+ * In @_linked/core, loadData returns the raw JSON import — no JSONLD.parse() needed.
+ */
+export declare var loadData: () => Promise<{
+    "@context": {
+        dc: string;
+        owl: string;
+        rdf: string;
+        rdfs: string;
+        server: string;
+    };
+    "@graph": {
+        "@id": string;
+        "@type": string;
+        "rdfs:comment": string;
+        "rdfs:isDefinedBy": {
+            "@id": string;
+        };
+        "rdfs:label": string;
+    }[];
+}>;
+/**
+ * The namespace of this ontology.
+ *
+ * First-party ontologies live on linked.cm: `https://linked.cm/ont/{ontologySlug}/`, and a
+ * package's own ontology takes the package's publicSlug (`@_linked/server` → `server`), the same
+ * slug its shapes use under `https://linked.cm/shape/server/`.
+ *
+ * Its prefix label is the same slug, `server` (`server:LincdAPI`). It used to be `lincd-server`,
+ * which is still registered as a deprecated alias so `lincd-server:` names keep expanding.
+ *
+ * Until an earlier release the namespace was `http://lincd.org/ont/lincd-server/`. No stored
+ * data is typed with these terms; the only store triples that carried them were the synced shape descriptions of
+ * `LinkedServer`, `LincdAPI` and `LincdWebApp` (`sh:targetClass`, `sh:path`), which boot sync
+ * rewrites (delete, then recreate) the next time the server starts.
+ */
+export declare var ns: (term: string) => import("@_linked/core/utils/NodeReference").NodeReferenceValue;
+export declare var _self: import("@_linked/core/utils/NodeReference").NodeReferenceValue;
+export declare const server: {
+    LincdServer: import("@_linked/core/utils/NodeReference").NodeReferenceValue;
+    BackendFileStore: import("@_linked/core/utils/NodeReference").NodeReferenceValue;
+    NodeFileStore: import("@_linked/core/utils/NodeReference").NodeReferenceValue;
+    BackendStore: import("@_linked/core/utils/NodeReference").NodeReferenceValue;
+    N3FileStore: import("@_linked/core/utils/NodeReference").NodeReferenceValue;
+    BackendAPIStore: import("@_linked/core/utils/NodeReference").NodeReferenceValue;
+    LincdWebApp: import("@_linked/core/utils/NodeReference").NodeReferenceValue;
+    ownPackage: import("@_linked/core/utils/NodeReference").NodeReferenceValue;
+    maintainsPackage: import("@_linked/core/utils/NodeReference").NodeReferenceValue;
+    LincdAPI: import("@_linked/core/utils/NodeReference").NodeReferenceValue;
+    hasAPI: import("@_linked/core/utils/NodeReference").NodeReferenceValue;
+};
+/** @deprecated use `server` — same object, kept under its old name. */
+export declare const lincdServer: {
+    LincdServer: import("@_linked/core/utils/NodeReference").NodeReferenceValue;
+    BackendFileStore: import("@_linked/core/utils/NodeReference").NodeReferenceValue;
+    NodeFileStore: import("@_linked/core/utils/NodeReference").NodeReferenceValue;
+    BackendStore: import("@_linked/core/utils/NodeReference").NodeReferenceValue;
+    N3FileStore: import("@_linked/core/utils/NodeReference").NodeReferenceValue;
+    BackendAPIStore: import("@_linked/core/utils/NodeReference").NodeReferenceValue;
+    LincdWebApp: import("@_linked/core/utils/NodeReference").NodeReferenceValue;
+    ownPackage: import("@_linked/core/utils/NodeReference").NodeReferenceValue;
+    maintainsPackage: import("@_linked/core/utils/NodeReference").NodeReferenceValue;
+    LincdAPI: import("@_linked/core/utils/NodeReference").NodeReferenceValue;
+    hasAPI: import("@_linked/core/utils/NodeReference").NodeReferenceValue;
+};

package/lib/esm/ontologies/server.js

@@ -0,0 +1,63 @@
+import { createNameSpace } from '@_linked/core/utils/NameSpace';
+/**
+ * Load the data of this ontology.
+ * In @_linked/core, loadData returns the raw JSON import — no JSONLD.parse() needed.
+ */
+export var loadData = async () => {
+    //@ts-ignore
+    const data = await import('../data/server.json', {
+        with: { type: 'json' },
+    });
+    return data.default || data;
+};
+/**
+ * The namespace of this ontology.
+ *
+ * First-party ontologies live on linked.cm: `https://linked.cm/ont/{ontologySlug}/`, and a
+ * package's own ontology takes the package's publicSlug (`@_linked/server` → `server`), the same
+ * slug its shapes use under `https://linked.cm/shape/server/`.
+ *
+ * Its prefix label is the same slug, `server` (`server:LincdAPI`). It used to be `lincd-server`,
+ * which is still registered as a deprecated alias so `lincd-server:` names keep expanding.
+ *
+ * Until an earlier release the namespace was `http://lincd.org/ont/lincd-server/`. No stored
+ * data is typed with these terms; the only store triples that carried them were the synced shape descriptions of
+ * `LinkedServer`, `LincdAPI` and `LincdWebApp` (`sh:targetClass`, `sh:path`), which boot sync
+ * rewrites (delete, then recreate) the next time the server starts.
+ */
+export var ns = createNameSpace('https://linked.cm/ont/server/');
+export var _self = ns('');
+// Terms are properties of the namespace object below, not module-scope
+// exports. Most of these names are also SHAPE CLASS names in this package
+// (BackendAPIStore, LincdWebApp, LincdAPI, ...). Two bindings of the same name
+// in one bundle scope make the bundler rename one of them, and when the loser
+// is the class, `constructor.name` becomes `BackendAPIStore2` -- which is the
+// shape's IRI and the name `Server.call` routes on. The client then asks a
+// backend that has no such shape, and every store round-trip answers 501.
+const LincdServer = ns('LincdServer');
+const BackendFileStore = ns('BackendFileStore');
+const NodeFileStore = ns('NodeFileStore');
+const BackendStore = ns('BackendStore');
+const BackendAPIStore = ns('BackendAPIStore');
+const LincdWebApp = ns('LincdWebApp');
+const ownPackage = ns('ownPackage');
+const maintainsPackage = ns('maintainsPackage');
+const N3FileStore = ns('N3FileStore');
+const LincdAPI = ns('LincdAPI');
+const hasAPI = ns('hasAPI');
+export const server = {
+    LincdServer,
+    BackendFileStore,
+    NodeFileStore,
+    BackendStore,
+    N3FileStore,
+    BackendAPIStore,
+    LincdWebApp,
+    ownPackage,
+    maintainsPackage,
+    LincdAPI,
+    hasAPI,
+};
+/** @deprecated use `server` — same object, kept under its old name. */
+export const lincdServer = server;
+//# sourceMappingURL=server.js.map

package/lib/esm/ontologies/server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.js","sourceRoot":"","sources":["../../../src/ontologies/server.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AAEhE;;;GAGG;AACH,MAAM,CAAC,IAAI,QAAQ,GAAG,KAAK,IAAI,EAAE;IAC/B,YAAY;IACZ,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,qBAAqB,EAAE;QAC/C,IAAI,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE;KACvB,CAAC,CAAC;IACH,OAAO,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC;AAC9B,CAAC,CAAC;AAEF;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,IAAI,EAAE,GAAG,eAAe,CAAC,+BAA+B,CAAC,CAAC;AAEjE,MAAM,CAAC,IAAI,KAAK,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;AAE1B,uEAAuE;AACvE,0EAA0E;AAC1E,+EAA+E;AAC/E,8EAA8E;AAC9E,8EAA8E;AAC9E,2EAA2E;AAC3E,0EAA0E;AAC1E,MAAM,WAAW,GAAG,EAAE,CAAC,aAAa,CAAC,CAAC;AACtC,MAAM,gBAAgB,GAAG,EAAE,CAAC,kBAAkB,CAAC,CAAC;AAChD,MAAM,aAAa,GAAG,EAAE,CAAC,eAAe,CAAC,CAAC;AAC1C,MAAM,YAAY,GAAG,EAAE,CAAC,cAAc,CAAC,CAAC;AACxC,MAAM,eAAe,GAAG,EAAE,CAAC,iBAAiB,CAAC,CAAC;AAC9C,MAAM,WAAW,GAAG,EAAE,CAAC,aAAa,CAAC,CAAC;AACtC,MAAM,UAAU,GAAG,EAAE,CAAC,YAAY,CAAC,CAAC;AACpC,MAAM,gBAAgB,GAAG,EAAE,CAAC,kBAAkB,CAAC,CAAC;AAChD,MAAM,WAAW,GAAG,EAAE,CAAC,aAAa,CAAC,CAAC;AACtC,MAAM,QAAQ,GAAG,EAAE,CAAC,UAAU,CAAC,CAAC;AAChC,MAAM,MAAM,GAAG,EAAE,CAAC,QAAQ,CAAC,CAAC;AAE5B,MAAM,CAAC,MAAM,MAAM,GAAG;IACpB,WAAW;IACX,gBAAgB;IAChB,aAAa;IACb,YAAY;IACZ,WAAW;IACX,eAAe;IACf,WAAW;IACX,UAAU;IACV,gBAAgB;IAChB,QAAQ;IACR,MAAM;CACP,CAAC;AAEF,uEAAuE;AACvE,MAAM,CAAC,MAAM,WAAW,GAAG,MAAM,CAAC","sourcesContent":["import { createNameSpace } from '@_linked/core/utils/NameSpace';\n\n/**\n * Load the data of this ontology.\n * In @_linked/core, loadData returns the raw JSON import — no JSONLD.parse() needed.\n */\nexport var loadData = async () => {\n  //@ts-ignore\n  const data = await import('../data/server.json', {\n    with: { type: 'json' },\n  });\n  return data.default || data;\n};\n\n/**\n * The namespace of this ontology.\n *\n * First-party ontologies live on linked.cm: `https://linked.cm/ont/{ontologySlug}/`, and a\n * package's own ontology takes the package's publicSlug (`@_linked/server` → `server`), the same\n * slug its shapes use under `https://linked.cm/shape/server/`.\n *\n * Its prefix label is the same slug, `server` (`server:LincdAPI`). It used to be `lincd-server`,\n * which is still registered as a deprecated alias so `lincd-server:` names keep expanding.\n *\n * Until an earlier release the namespace was `http://lincd.org/ont/lincd-server/`. No stored\n * data is typed with these terms; the only store triples that carried them were the synced shape descriptions of\n * `LinkedServer`, `LincdAPI` and `LincdWebApp` (`sh:targetClass`, `sh:path`), which boot sync\n * rewrites (delete, then recreate) the next time the server starts.\n */\nexport var ns = createNameSpace('https://linked.cm/ont/server/');\n\nexport var _self = ns('');\n\n// Terms are properties of the namespace object below, not module-scope\n// exports. Most of these names are also SHAPE CLASS names in this package\n// (BackendAPIStore, LincdWebApp, LincdAPI, ...). Two bindings of the same name\n// in one bundle scope make the bundler rename one of them, and when the loser\n// is the class, `constructor.name` becomes `BackendAPIStore2` -- which is the\n// shape's IRI and the name `Server.call` routes on. The client then asks a\n// backend that has no such shape, and every store round-trip answers 501.\nconst LincdServer = ns('LincdServer');\nconst BackendFileStore = ns('BackendFileStore');\nconst NodeFileStore = ns('NodeFileStore');\nconst BackendStore = ns('BackendStore');\nconst BackendAPIStore = ns('BackendAPIStore');\nconst LincdWebApp = ns('LincdWebApp');\nconst ownPackage = ns('ownPackage');\nconst maintainsPackage = ns('maintainsPackage');\nconst N3FileStore = ns('N3FileStore');\nconst LincdAPI = ns('LincdAPI');\nconst hasAPI = ns('hasAPI');\n\nexport const server = {\n  LincdServer,\n  BackendFileStore,\n  NodeFileStore,\n  BackendStore,\n  N3FileStore,\n  BackendAPIStore,\n  LincdWebApp,\n  ownPackage,\n  maintainsPackage,\n  LincdAPI,\n  hasAPI,\n};\n\n/** @deprecated use `server` — same object, kept under its old name. */\nexport const lincdServer = server;\n"]}

package/lib/esm/ontologies/server.register.d.ts

@@ -0,0 +1 @@
+export {};

package/lib/esm/ontologies/server.register.js

@@ -0,0 +1,24 @@
+/**
+ * Registers this ontology.
+ *
+ * Kept out of `server.ts` because registration needs that module's whole export
+ * namespace, and a module cannot import itself once a bundler is involved: Rollup
+ * treats a static self-reference as a circular import and elides it, so the binding is
+ * undefined at runtime and the consuming app dies at boot with `_this is not
+ * defined`. `tsc` preserves it, which is why the pattern survived for as long as
+ * packages were built with `tsc` alone.
+ *
+ * From a sibling module the same import is ordinary and survives.
+ */
+import * as terms from './server.js';
+import { loadData, ns } from './server.js';
+import { linkedOntology } from '../package.js';
+import { Prefix } from '@_linked/core/utils/Prefix';
+// Deprecated prefix label, kept so `lincd-server:X` names still expand. It is added
+// BEFORE the registration below because Prefix keeps one prefix per namespace and the
+// last add wins: registering `server` second makes compaction emit `server:X`.
+Prefix.add('lincd-server', ns('').id);
+// The prefix is also the key this ontology is registered under in the package tree,
+// and the name of its data file: `server` → `../data/server.json`.
+linkedOntology(terms, ns, 'server', loadData, '../data/server.json');
+//# sourceMappingURL=server.register.js.map

package/lib/esm/ontologies/server.register.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.register.js","sourceRoot":"","sources":["../../../src/ontologies/server.register.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,OAAO,KAAK,KAAK,MAAM,aAAa,CAAC;AACrC,OAAO,EAAC,QAAQ,EAAE,EAAE,EAAC,MAAM,aAAa,CAAC;AACzC,OAAO,EAAC,cAAc,EAAC,MAAM,eAAe,CAAC;AAC7C,OAAO,EAAC,MAAM,EAAC,MAAM,4BAA4B,CAAC;AAElD,oFAAoF;AACpF,sFAAsF;AACtF,+EAA+E;AAC/E,MAAM,CAAC,GAAG,CAAC,cAAc,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;AAEtC,oFAAoF;AACpF,mEAAmE;AACnE,cAAc,CAAC,KAAK,EAAE,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,qBAAqB,CAAC,CAAC","sourcesContent":["/**\n * Registers this ontology.\n *\n * Kept out of `server.ts` because registration needs that module's whole export\n * namespace, and a module cannot import itself once a bundler is involved: Rollup\n * treats a static self-reference as a circular import and elides it, so the binding is\n * undefined at runtime and the consuming app dies at boot with `_this is not\n * defined`. `tsc` preserves it, which is why the pattern survived for as long as\n * packages were built with `tsc` alone.\n *\n * From a sibling module the same import is ordinary and survives.\n */\nimport * as terms from './server.js';\nimport {loadData, ns} from './server.js';\nimport {linkedOntology} from '../package.js';\nimport {Prefix} from '@_linked/core/utils/Prefix';\n\n// Deprecated prefix label, kept so `lincd-server:X` names still expand. It is added\n// BEFORE the registration below because Prefix keeps one prefix per namespace and the\n// last add wins: registering `server` second makes compaction emit `server:X`.\nPrefix.add('lincd-server', ns('').id);\n\n// The prefix is also the key this ontology is registered under in the package tree,\n// and the name of its data file: `server` → `../data/server.json`.\nlinkedOntology(terms, ns, 'server', loadData, '../data/server.json');\n"]}