@_linked/server 2.24.10 → 2.25.0

package/lib/esm/shapes/quadstores/GatewayStore.d.ts

@@ -0,0 +1,85 @@
+import type { IDataset } from '@_linked/core/interfaces/IDataset';
+import type { SelectQuery } from '@_linked/core/queries/SelectQuery';
+import type { CountQuery } from '@_linked/core/queries/CountQuery';
+import type { AskQuery } from '@_linked/core/queries/AskQuery';
+import type { UpdateQuery } from '@_linked/core/queries/UpdateQuery';
+import type { CreateQuery } from '@_linked/core/queries/CreateQuery';
+import type { DeleteQuery, DeleteResponse } from '@_linked/core/queries/DeleteQuery';
+import type { SelectResult, UpdateResult, CreateResult } from '@_linked/core/queries/IntermediateRepresentation';
+/**
+ * Constructor argument for `new GatewayStore(config)` — the `config` object of a
+ * `linked.backend.datasets.json` entry, passed verbatim by `loadStores`.
+ */
+export interface GatewayStoreConfig {
+    /** Base URL of the gateway, e.g. `http://localhost:4040/gateway`. Routes are appended to it. */
+    endpoint: string;
+    /** The bearer credential the gateway issued to this process. */
+    credential: string;
+    /** Transport override; defaults to `globalThis.fetch`. */
+    fetch?: typeof fetch;
+}
+/** The op names on the wire; each is the `IDataset` method the store was called on. */
+export type GatewayOp = 'select' | 'ask' | 'update' | 'create' | 'delete';
+/** The wire version this store speaks. The gateway refuses any other with `code: "wire-version"`. */
+export declare const GATEWAY_WIRE_VERSION = 1;
+/**
+ * A non-2xx answer from the gateway. `code` is the body's `code` when the gateway sent one
+ * (`bad-request`, `wire-version`, `unknown-shape`, `refused`, `fork-failed`, `query-failed`),
+ * else a generic one; `body` is the parsed response when it was JSON.
+ */
+export declare class GatewayStoreError extends Error {
+    readonly status: number;
+    readonly code: string;
+    readonly body?: unknown;
+    constructor(message: string, status: number, code: string, body?: unknown);
+}
+/**
+ * The gateway could not be used at all: the request never got an HTTP answer (network error,
+ * `status` 0), or the gateway refused the credential (401). Thrown by `init()` and by every
+ * query method; a process that gets this at boot should stop rather than carry on without data.
+ */
+export declare class GatewayUnreachableError extends GatewayStoreError {
+}
+/** What `GET {endpoint}/health` answers with a valid credential. */
+export interface GatewayHealth {
+    projectId: string;
+    branchName: string;
+    dataset: string;
+}
+/**
+ * An {@link IDataset} that forwards every Linked Query to a gateway over HTTP and returns
+ * the gateway's result as is.
+ *
+ * Each query method posts `{v, op, query: query.toJSON()}` to `POST {endpoint}/query` with
+ * `Authorization: Bearer <credential>` and resolves with the body's `result` — the same plain
+ * JSON rows `BackendAPIStore` returns. The gateway decides which dataset the query runs on
+ * from the credential; the store carries no project, branch or actor.
+ *
+ * Unlike `BackendAPIStore` it does not go through `Server.call` and has no dependency on
+ * the process's own HTTP server: it is meant for a backend whose data lives behind another
+ * service, selected from `linked.backend.datasets.json` by the host that started it.
+ *
+ * The store offers no raw SPARQL (`rawQuery`), no dataset administration and no change feed.
+ */
+export declare class GatewayStore implements IDataset {
+    readonly endpoint: string;
+    private readonly credential;
+    private readonly fetchImpl;
+    constructor(config: GatewayStoreConfig);
+    /**
+     * Checks the gateway answers for this credential: `GET {endpoint}/health`. Resolves with the
+     * gateway's answer; throws {@link GatewayUnreachableError} when the gateway cannot be reached
+     * or refuses the credential. Safe to call more than once; it changes nothing on either side.
+     *
+     * `LinkedStorage.setDefaultDataset` calls `init()` without awaiting it, so a boot that must
+     * fail loudly awaits `init()` itself before registering the store.
+     */
+    init(): Promise<GatewayHealth>;
+    selectQuery(query: SelectQuery | CountQuery): Promise<SelectResult | number>;
+    askQuery(query: AskQuery): Promise<boolean>;
+    updateQuery(query: UpdateQuery): Promise<UpdateResult>;
+    createQuery(query: CreateQuery): Promise<CreateResult>;
+    deleteQuery(query: DeleteQuery): Promise<DeleteResponse>;
+    private send;
+    private request;
+}

package/lib/esm/shapes/quadstores/GatewayStore.js

@@ -0,0 +1,143 @@
+/** The wire version this store speaks. The gateway refuses any other with `code: "wire-version"`. */
+export const GATEWAY_WIRE_VERSION = 1;
+/**
+ * A non-2xx answer from the gateway. `code` is the body's `code` when the gateway sent one
+ * (`bad-request`, `wire-version`, `unknown-shape`, `refused`, `fork-failed`, `query-failed`),
+ * else a generic one; `body` is the parsed response when it was JSON.
+ */
+export class GatewayStoreError extends Error {
+    constructor(message, status, code, body) {
+        super(message);
+        this.name = new.target.name;
+        this.status = status;
+        this.code = code;
+        this.body = body;
+    }
+}
+/**
+ * The gateway could not be used at all: the request never got an HTTP answer (network error,
+ * `status` 0), or the gateway refused the credential (401). Thrown by `init()` and by every
+ * query method; a process that gets this at boot should stop rather than carry on without data.
+ */
+export class GatewayUnreachableError extends GatewayStoreError {
+}
+/**
+ * An {@link IDataset} that forwards every Linked Query to a gateway over HTTP and returns
+ * the gateway's result as is.
+ *
+ * Each query method posts `{v, op, query: query.toJSON()}` to `POST {endpoint}/query` with
+ * `Authorization: Bearer <credential>` and resolves with the body's `result` — the same plain
+ * JSON rows `BackendAPIStore` returns. The gateway decides which dataset the query runs on
+ * from the credential; the store carries no project, branch or actor.
+ *
+ * Unlike `BackendAPIStore` it does not go through `Server.call` and has no dependency on
+ * the process's own HTTP server: it is meant for a backend whose data lives behind another
+ * service, selected from `linked.backend.datasets.json` by the host that started it.
+ *
+ * The store offers no raw SPARQL (`rawQuery`), no dataset administration and no change feed.
+ */
+export class GatewayStore {
+    constructor(config) {
+        var _a;
+        const endpoint = typeof (config === null || config === void 0 ? void 0 : config.endpoint) === 'string' ? config.endpoint.trim() : '';
+        const credential = typeof (config === null || config === void 0 ? void 0 : config.credential) === 'string' ? config.credential.trim() : '';
+        if (!endpoint) {
+            throw new Error('GatewayStore: `endpoint` is empty. A gateway store needs the URL of the gateway ' +
+                '(the host that started this process sets it, e.g. through CN_EG_GATEWAY).');
+        }
+        if (!credential) {
+            throw new Error('GatewayStore: `credential` is empty. A gateway store needs the bearer credential ' +
+                'the gateway issued to this process (e.g. CN_APP_SERVICE_SECRET).');
+        }
+        const fetchImpl = (_a = config.fetch) !== null && _a !== void 0 ? _a : globalThis.fetch;
+        if (typeof fetchImpl !== 'function') {
+            throw new Error('GatewayStore: no `fetch` available; pass one in the config.');
+        }
+        this.endpoint = endpoint.replace(/\/+$/, '');
+        this.credential = credential;
+        this.fetchImpl = fetchImpl;
+    }
+    /**
+     * Checks the gateway answers for this credential: `GET {endpoint}/health`. Resolves with the
+     * gateway's answer; throws {@link GatewayUnreachableError} when the gateway cannot be reached
+     * or refuses the credential. Safe to call more than once; it changes nothing on either side.
+     *
+     * `LinkedStorage.setDefaultDataset` calls `init()` without awaiting it, so a boot that must
+     * fail loudly awaits `init()` itself before registering the store.
+     */
+    async init() {
+        return (await this.request('GET', '/health'));
+    }
+    selectQuery(query) {
+        return this.send('select', query.toJSON());
+    }
+    askQuery(query) {
+        return this.send('ask', query.toJSON());
+    }
+    updateQuery(query) {
+        return this.send('update', query.toJSON());
+    }
+    createQuery(query) {
+        return this.send('create', query.toJSON());
+    }
+    deleteQuery(query) {
+        return this.send('delete', query.toJSON());
+    }
+    async send(op, query) {
+        const body = (await this.request('POST', '/query', {
+            v: GATEWAY_WIRE_VERSION,
+            op,
+            query,
+        }));
+        if (!body || typeof body !== 'object' || !('result' in body)) {
+            throw new GatewayStoreError(`GatewayStore: the gateway answered ${op} without a result`, 200, 'bad-response', body);
+        }
+        return body.result;
+    }
+    async request(method, route, json) {
+        const url = this.endpoint + route;
+        const headers = {
+            Authorization: `Bearer ${this.credential}`,
+            Accept: 'application/json',
+        };
+        const init = { method, headers };
+        if (json !== undefined) {
+            headers['Content-Type'] = 'application/json';
+            init.body = JSON.stringify(json);
+        }
+        let response;
+        try {
+            response = await this.fetchImpl(url, init);
+        }
+        catch (err) {
+            const cause = err instanceof Error ? err.message : String(err);
+            throw new GatewayUnreachableError(`GatewayStore: cannot reach the gateway at ${url}: ${cause}`, 0, 'unreachable');
+        }
+        const text = await response.text();
+        let body = undefined;
+        if (text) {
+            try {
+                body = JSON.parse(text);
+            }
+            catch (_a) {
+                body = text;
+            }
+        }
+        if (response.ok)
+            return body;
+        const code = body && typeof body === 'object' && typeof body.code === 'string'
+            ? body.code
+            : `http-${response.status}`;
+        const detail = body && typeof body === 'object' && typeof body.error === 'string'
+            ? body.error
+            : typeof body === 'string' && body
+                ? body
+                : response.statusText;
+        const message = `GatewayStore: ${method} ${url} answered ${response.status} (${code})${detail ? `: ${detail}` : ''}`;
+        if (response.status === 401) {
+            throw new GatewayUnreachableError(message, 401, code, body);
+        }
+        throw new GatewayStoreError(message, response.status, code, body);
+    }
+}
+//# sourceMappingURL=GatewayStore.js.map

package/lib/esm/shapes/quadstores/GatewayStore.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"GatewayStore.js","sourceRoot":"","sources":["../../../../src/shapes/quadstores/GatewayStore.ts"],"names":[],"mappings":"AAgCA,qGAAqG;AACrG,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC;AAEtC;;;;GAIG;AACH,MAAM,OAAO,iBAAkB,SAAQ,KAAK;IAK1C,YAAY,OAAe,EAAE,MAAc,EAAE,IAAY,EAAE,IAAc;QACvE,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC;QAC5B,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;CACF;AAED;;;;GAIG;AACH,MAAM,OAAO,uBAAwB,SAAQ,iBAAiB;CAAG;AASjE;;;;;;;;;;;;;;GAcG;AACH,MAAM,OAAO,YAAY;IAKvB,YAAY,MAA0B;;QACpC,MAAM,QAAQ,GAAG,OAAO,CAAA,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,QAAQ,CAAA,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACpF,MAAM,UAAU,GAAG,OAAO,CAAA,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,UAAU,CAAA,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1F,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,IAAI,KAAK,CACb,kFAAkF;gBAChF,2EAA2E,CAC9E,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,MAAM,IAAI,KAAK,CACb,mFAAmF;gBACjF,kEAAkE,CACrE,CAAC;QACJ,CAAC;QACD,MAAM,SAAS,GAAG,MAAA,MAAM,CAAC,KAAK,mCAAI,UAAU,CAAC,KAAK,CAAC;QACnD,IAAI,OAAO,SAAS,KAAK,UAAU,EAAE,CAAC;YACpC,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAC;QACjF,CAAC;QACD,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QAC7C,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAC7B,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;IAC7B,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,IAAI;QACR,OAAO,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,SAAS,CAAC,CAAkB,CAAC;IACjE,CAAC;IAED,WAAW,CAAC,KAA+B;QACzC,OAAO,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;IAC7C,CAAC;IAED,QAAQ,CAAC,KAAe;QACtB,OAAO,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;IAC1C,CAAC;IAED,WAAW,CAAC,KAAkB;QAC5B,OAAO,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;IAC7C,CAAC;IAED,WAAW,CAAC,KAAkB;QAC5B,OAAO,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;IAC7C,CAAC;IAED,WAAW,CAAC,KAAkB;QAC5B,OAAO,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;IAC7C,CAAC;IAEO,KAAK,CAAC,IAAI,CAAI,EAAa,EAAE,KAAc;QACjD,MAAM,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,QAAQ,EAAE;YACjD,CAAC,EAAE,oBAAoB;YACvB,EAAE;YACF,KAAK;SACN,CAAC,CAA0B,CAAC;QAC7B,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,CAAC,QAAQ,IAAI,IAAI,CAAC,EAAE,CAAC;YAC7D,MAAM,IAAI,iBAAiB,CACzB,sCAAsC,EAAE,mBAAmB,EAC3D,GAAG,EACH,cAAc,EACd,IAAI,CACL,CAAC;QACJ,CAAC;QACD,OAAO,IAAI,CAAC,MAAW,CAAC;IAC1B,CAAC;IAEO,KAAK,CAAC,OAAO,CAAC,MAAsB,EAAE,KAAa,EAAE,IAAc;QACzE,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,GAAG,KAAK,CAAC;QAClC,MAAM,OAAO,GAA2B;YACtC,aAAa,EAAE,UAAU,IAAI,CAAC,UAAU,EAAE;YAC1C,MAAM,EAAE,kBAAkB;SAC3B,CAAC;QACF,MAAM,IAAI,GAAgB,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;QAC9C,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACvB,OAAO,CAAC,cAAc,CAAC,GAAG,kBAAkB,CAAC;YAC7C,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QACnC,CAAC;QAED,IAAI,QAAkB,CAAC;QACvB,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAC7C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,KAAK,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC/D,MAAM,IAAI,uBAAuB,CAC/B,6CAA6C,GAAG,KAAK,KAAK,EAAE,EAC5D,CAAC,EACD,aAAa,CACd,CAAC;QACJ,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QACnC,IAAI,IAAI,GAAY,SAAS,CAAC;QAC9B,IAAI,IAAI,EAAE,CAAC;YACT,IAAI,CAAC;gBACH,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAC1B,CAAC;YAAC,WAAM,CAAC;gBACP,IAAI,GAAG,IAAI,CAAC;YACd,CAAC;QACH,CAAC;QAED,IAAI,QAAQ,CAAC,EAAE;YAAE,OAAO,IAAI,CAAC;QAE7B,MAAM,IAAI,GACR,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,OAAQ,IAAY,CAAC,IAAI,KAAK,QAAQ;YACxE,CAAC,CAAG,IAAY,CAAC,IAAe;YAChC,CAAC,CAAC,QAAQ,QAAQ,CAAC,MAAM,EAAE,CAAC;QAChC,MAAM,MAAM,GACV,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,OAAQ,IAAY,CAAC,KAAK,KAAK,QAAQ;YACzE,CAAC,CAAE,IAAY,CAAC,KAAK;YACrB,CAAC,CAAC,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI;gBAChC,CAAC,CAAC,IAAI;gBACN,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC;QAC5B,MAAM,OAAO,GAAG,iBAAiB,MAAM,IAAI,GAAG,aAAa,QAAQ,CAAC,MAAM,KAAK,IAAI,IACjF,MAAM,CAAC,CAAC,CAAC,KAAK,MAAM,EAAE,CAAC,CAAC,CAAC,EAC3B,EAAE,CAAC;QAEH,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YAC5B,MAAM,IAAI,uBAAuB,CAAC,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;QAC9D,CAAC;QACD,MAAM,IAAI,iBAAiB,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;IACpE,CAAC;CACF","sourcesContent":["import type { IDataset } from '@_linked/core/interfaces/IDataset';\nimport type { SelectQuery } from '@_linked/core/queries/SelectQuery';\nimport type { CountQuery } from '@_linked/core/queries/CountQuery';\nimport type { AskQuery } from '@_linked/core/queries/AskQuery';\nimport type { UpdateQuery } from '@_linked/core/queries/UpdateQuery';\nimport type { CreateQuery } from '@_linked/core/queries/CreateQuery';\nimport type {\n  DeleteQuery,\n  DeleteResponse,\n} from '@_linked/core/queries/DeleteQuery';\nimport type {\n  SelectResult,\n  UpdateResult,\n  CreateResult,\n} from '@_linked/core/queries/IntermediateRepresentation';\n\n/**\n * Constructor argument for `new GatewayStore(config)` — the `config` object of a\n * `linked.backend.datasets.json` entry, passed verbatim by `loadStores`.\n */\nexport interface GatewayStoreConfig {\n  /** Base URL of the gateway, e.g. `http://localhost:4040/gateway`. Routes are appended to it. */\n  endpoint: string;\n  /** The bearer credential the gateway issued to this process. */\n  credential: string;\n  /** Transport override; defaults to `globalThis.fetch`. */\n  fetch?: typeof fetch;\n}\n\n/** The op names on the wire; each is the `IDataset` method the store was called on. */\nexport type GatewayOp = 'select' | 'ask' | 'update' | 'create' | 'delete';\n\n/** The wire version this store speaks. The gateway refuses any other with `code: \"wire-version\"`. */\nexport const GATEWAY_WIRE_VERSION = 1;\n\n/**\n * A non-2xx answer from the gateway. `code` is the body's `code` when the gateway sent one\n * (`bad-request`, `wire-version`, `unknown-shape`, `refused`, `fork-failed`, `query-failed`),\n * else a generic one; `body` is the parsed response when it was JSON.\n */\nexport class GatewayStoreError extends Error {\n  readonly status: number;\n  readonly code: string;\n  readonly body?: unknown;\n\n  constructor(message: string, status: number, code: string, body?: unknown) {\n    super(message);\n    this.name = new.target.name;\n    this.status = status;\n    this.code = code;\n    this.body = body;\n  }\n}\n\n/**\n * The gateway could not be used at all: the request never got an HTTP answer (network error,\n * `status` 0), or the gateway refused the credential (401). Thrown by `init()` and by every\n * query method; a process that gets this at boot should stop rather than carry on without data.\n */\nexport class GatewayUnreachableError extends GatewayStoreError {}\n\n/** What `GET {endpoint}/health` answers with a valid credential. */\nexport interface GatewayHealth {\n  projectId: string;\n  branchName: string;\n  dataset: string;\n}\n\n/**\n * An {@link IDataset} that forwards every Linked Query to a gateway over HTTP and returns\n * the gateway's result as is.\n *\n * Each query method posts `{v, op, query: query.toJSON()}` to `POST {endpoint}/query` with\n * `Authorization: Bearer <credential>` and resolves with the body's `result` — the same plain\n * JSON rows `BackendAPIStore` returns. The gateway decides which dataset the query runs on\n * from the credential; the store carries no project, branch or actor.\n *\n * Unlike `BackendAPIStore` it does not go through `Server.call` and has no dependency on\n * the process's own HTTP server: it is meant for a backend whose data lives behind another\n * service, selected from `linked.backend.datasets.json` by the host that started it.\n *\n * The store offers no raw SPARQL (`rawQuery`), no dataset administration and no change feed.\n */\nexport class GatewayStore implements IDataset {\n  readonly endpoint: string;\n  private readonly credential: string;\n  private readonly fetchImpl: typeof fetch;\n\n  constructor(config: GatewayStoreConfig) {\n    const endpoint = typeof config?.endpoint === 'string' ? config.endpoint.trim() : '';\n    const credential = typeof config?.credential === 'string' ? config.credential.trim() : '';\n    if (!endpoint) {\n      throw new Error(\n        'GatewayStore: `endpoint` is empty. A gateway store needs the URL of the gateway ' +\n          '(the host that started this process sets it, e.g. through CN_EG_GATEWAY).',\n      );\n    }\n    if (!credential) {\n      throw new Error(\n        'GatewayStore: `credential` is empty. A gateway store needs the bearer credential ' +\n          'the gateway issued to this process (e.g. CN_APP_SERVICE_SECRET).',\n      );\n    }\n    const fetchImpl = config.fetch ?? globalThis.fetch;\n    if (typeof fetchImpl !== 'function') {\n      throw new Error('GatewayStore: no `fetch` available; pass one in the config.');\n    }\n    this.endpoint = endpoint.replace(/\\/+$/, '');\n    this.credential = credential;\n    this.fetchImpl = fetchImpl;\n  }\n\n  /**\n   * Checks the gateway answers for this credential: `GET {endpoint}/health`. Resolves with the\n   * gateway's answer; throws {@link GatewayUnreachableError} when the gateway cannot be reached\n   * or refuses the credential. Safe to call more than once; it changes nothing on either side.\n   *\n   * `LinkedStorage.setDefaultDataset` calls `init()` without awaiting it, so a boot that must\n   * fail loudly awaits `init()` itself before registering the store.\n   */\n  async init(): Promise<GatewayHealth> {\n    return (await this.request('GET', '/health')) as GatewayHealth;\n  }\n\n  selectQuery(query: SelectQuery | CountQuery): Promise<SelectResult | number> {\n    return this.send('select', query.toJSON());\n  }\n\n  askQuery(query: AskQuery): Promise<boolean> {\n    return this.send('ask', query.toJSON());\n  }\n\n  updateQuery(query: UpdateQuery): Promise<UpdateResult> {\n    return this.send('update', query.toJSON());\n  }\n\n  createQuery(query: CreateQuery): Promise<CreateResult> {\n    return this.send('create', query.toJSON());\n  }\n\n  deleteQuery(query: DeleteQuery): Promise<DeleteResponse> {\n    return this.send('delete', query.toJSON());\n  }\n\n  private async send<T>(op: GatewayOp, query: unknown): Promise<T> {\n    const body = (await this.request('POST', '/query', {\n      v: GATEWAY_WIRE_VERSION,\n      op,\n      query,\n    })) as { result?: T } | null;\n    if (!body || typeof body !== 'object' || !('result' in body)) {\n      throw new GatewayStoreError(\n        `GatewayStore: the gateway answered ${op} without a result`,\n        200,\n        'bad-response',\n        body,\n      );\n    }\n    return body.result as T;\n  }\n\n  private async request(method: 'GET' | 'POST', route: string, json?: unknown): Promise<unknown> {\n    const url = this.endpoint + route;\n    const headers: Record<string, string> = {\n      Authorization: `Bearer ${this.credential}`,\n      Accept: 'application/json',\n    };\n    const init: RequestInit = { method, headers };\n    if (json !== undefined) {\n      headers['Content-Type'] = 'application/json';\n      init.body = JSON.stringify(json);\n    }\n\n    let response: Response;\n    try {\n      response = await this.fetchImpl(url, init);\n    } catch (err) {\n      const cause = err instanceof Error ? err.message : String(err);\n      throw new GatewayUnreachableError(\n        `GatewayStore: cannot reach the gateway at ${url}: ${cause}`,\n        0,\n        'unreachable',\n      );\n    }\n\n    const text = await response.text();\n    let body: unknown = undefined;\n    if (text) {\n      try {\n        body = JSON.parse(text);\n      } catch {\n        body = text;\n      }\n    }\n\n    if (response.ok) return body;\n\n    const code =\n      body && typeof body === 'object' && typeof (body as any).code === 'string'\n        ? ((body as any).code as string)\n        : `http-${response.status}`;\n    const detail =\n      body && typeof body === 'object' && typeof (body as any).error === 'string'\n        ? (body as any).error\n        : typeof body === 'string' && body\n          ? body\n          : response.statusText;\n    const message = `GatewayStore: ${method} ${url} answered ${response.status} (${code})${\n      detail ? `: ${detail}` : ''\n    }`;\n\n    if (response.status === 401) {\n      throw new GatewayUnreachableError(message, 401, code, body);\n    }\n    throw new GatewayStoreError(message, response.status, code, body);\n  }\n}\n"]}

package/lib/esm/utils/linkedDependencies.d.ts

@@ -100,6 +100,26 @@ export declare const NODE_IMPORT_CONDITIONS: readonly ["import", "node", "defaul
  * ~50 lines, and the server keeps one less dependency in every app's install.
  */
 export declare function resolveBackendEntry(pkgRoot: string, pkgJson: any, conditions?: readonly string[]): string | null;
+/**
+ * The SOURCE file a dev Vite runner loads for `<pkg>/backend` when the
+ * package is a source package — its real root has a `src/` directory, which is
+ * what makes `linked`'s Vite config register it as a workspace (cli
+ * `discoverWorkspaces` / `readSourcePackage`). Null when the package has no
+ * `src/` or no source backend; the caller then falls back to
+ * resolveBackendEntry (a built `lib/` copy, or nothing).
+ *
+ * Mirrors the cli's `resolveWorkspaceSpecifier` for the `./backend` subpath,
+ * which runs BEFORE `exports`: `src/backend.tsx`, `src/backend.ts`, then the
+ * package's own `exports` under `import`/`default` with a `./lib/esm/X.js`
+ * target mapped to `src/X.tsx` / `src/X.ts` (any other `./lib/esm/` target to
+ * the same path under src). So an unbuilt workspace, whose `exports` name only
+ * `lib/esm`, still has its backend found, and a built one reports the src file
+ * Vite actually evaluates rather than its stale `lib/`.
+ *
+ * Only meaningful when the dev Vite runner owns the package; Node (production,
+ * external packages) loads `lib/` and never sees src.
+ */
+export declare function resolveSourceBackendEntry(pkgRoot: string, pkgJson: any): string | null;
 /**
  * Whether the dev SSR runner BUNDLES `pkgName` (it is in Vite's
  * `ssr.noExternal`) rather than handing it to Node.
@@ -121,3 +141,11 @@ export declare function resolveBackendEntry(pkgRoot: string, pkgJson: any, condi
 export declare function isBundledBySsr(pkgName: string, noExternal: unknown): boolean;
 /** The dev SSR runner's resolved `noExternal`, wherever this Vite keeps it. */
 export declare function ssrNoExternalOf(vite: any): unknown;
+/**
+ * The backend entry of a package the dev Vite runner owns (see isBundledBySsr):
+ * its source backend when it is a source package (resolveSourceBackendEntry),
+ * otherwise what `exports` names under the `development` condition and Node's
+ * import conditions. A registry install has no src/, so it resolves exactly
+ * as before.
+ */
+export declare function resolveDevBackendEntry(pkgRoot: string, pkgJson: any): string | null;

package/lib/esm/utils/linkedDependencies.js

@@ -169,18 +169,7 @@ export const NODE_IMPORT_CONDITIONS = ['import', 'node', 'default'];
  * ~50 lines, and the server keeps one less dependency in every app's install.
  */
 export function resolveBackendEntry(pkgRoot, pkgJson, conditions = NODE_IMPORT_CONDITIONS) {
-    const exists = (rel) => {
-        const file = path.resolve(pkgRoot, rel);
-        // Never let an export target escape the package.
-        if (!file.startsWith(path.resolve(pkgRoot) + path.sep))
-            return null;
-        try {
-            return fs.statSync(file).isFile() ? file : null;
-        }
-        catch (_a) {
-            return null;
-        }
-    };
+    const exists = (rel) => packageFile(pkgRoot, rel);
     const exportsField = pkgJson === null || pkgJson === void 0 ? void 0 : pkgJson.exports;
     if (exportsField === undefined || exportsField === null) {
         const candidates = ['backend.js', 'backend/index.js'];
@@ -195,6 +184,27 @@ export function resolveBackendEntry(pkgRoot, pkgJson, conditions = NODE_IMPORT_C
         }
         return null;
     }
+    return resolveBackendExport(exportsField, conditions, exists);
+}
+/** `<pkgRoot>/<rel>` when it is a file inside the package, else null. */
+function packageFile(pkgRoot, rel) {
+    const file = path.resolve(pkgRoot, rel);
+    // Never let an export target escape the package.
+    if (!file.startsWith(path.resolve(pkgRoot) + path.sep))
+        return null;
+    try {
+        return fs.statSync(file).isFile() ? file : null;
+    }
+    catch (_a) {
+        return null;
+    }
+}
+/**
+ * The `./backend` subpath of an `exports` map, resolved per Node's
+ * PACKAGE_EXPORTS_RESOLVE (see resolveBackendEntry). `probe` turns a matched
+ * `./`-relative target into a file, or null when it does not resolve.
+ */
+function resolveBackendExport(exportsField, conditions, probe) {
     // `"exports": "./x.js"`, an array, or a condition object at the top level
     // are all sugar for the "." subpath only.
     if (typeof exportsField !== 'object' ||
@@ -234,7 +244,7 @@ export function resolveBackendEntry(pkgRoot, pkgJson, conditions = NODE_IMPORT_C
             if (!t.startsWith('./'))
                 return null;
             const rel = patternMatch === null ? t : t.split('*').join(patternMatch);
-            return exists(rel);
+            return probe(rel);
         }
         if (Array.isArray(t)) {
             for (const item of t) {
@@ -257,6 +267,54 @@ export function resolveBackendEntry(pkgRoot, pkgJson, conditions = NODE_IMPORT_C
     };
     return resolveTarget(target);
 }
+/**
+ * The SOURCE file a dev Vite runner loads for `<pkg>/backend` when the
+ * package is a source package — its real root has a `src/` directory, which is
+ * what makes `linked`'s Vite config register it as a workspace (cli
+ * `discoverWorkspaces` / `readSourcePackage`). Null when the package has no
+ * `src/` or no source backend; the caller then falls back to
+ * resolveBackendEntry (a built `lib/` copy, or nothing).
+ *
+ * Mirrors the cli's `resolveWorkspaceSpecifier` for the `./backend` subpath,
+ * which runs BEFORE `exports`: `src/backend.tsx`, `src/backend.ts`, then the
+ * package's own `exports` under `import`/`default` with a `./lib/esm/X.js`
+ * target mapped to `src/X.tsx` / `src/X.ts` (any other `./lib/esm/` target to
+ * the same path under src). So an unbuilt workspace, whose `exports` name only
+ * `lib/esm`, still has its backend found, and a built one reports the src file
+ * Vite actually evaluates rather than its stale `lib/`.
+ *
+ * Only meaningful when the dev Vite runner owns the package; Node (production,
+ * external packages) loads `lib/` and never sees src.
+ */
+export function resolveSourceBackendEntry(pkgRoot, pkgJson) {
+    try {
+        if (!fs.statSync(path.join(pkgRoot, 'src')).isDirectory())
+            return null;
+    }
+    catch (_a) {
+        return null;
+    }
+    for (const rel of ['src/backend.tsx', 'src/backend.ts']) {
+        const file = packageFile(pkgRoot, rel);
+        if (file)
+            return file;
+    }
+    const exportsField = pkgJson === null || pkgJson === void 0 ? void 0 : pkgJson.exports;
+    if (exportsField === undefined || exportsField === null)
+        return null;
+    const libPrefix = './lib/esm/';
+    return resolveBackendExport(exportsField, ['import'], (rel) => {
+        var _a;
+        if (!rel.startsWith(libPrefix))
+            return null;
+        const sub = rel.slice(libPrefix.length);
+        if (/\.jsx?$/.test(sub)) {
+            const base = 'src/' + sub.replace(/\.jsx?$/, '');
+            return (_a = packageFile(pkgRoot, base + '.tsx')) !== null && _a !== void 0 ? _a : packageFile(pkgRoot, base + '.ts');
+        }
+        return packageFile(pkgRoot, 'src/' + sub);
+    });
+}
 /** Node's PATTERN_KEY_COMPARE: < 0 means `a` is the more specific pattern. */
 function patternKeyCompare(a, b) {
     const aBase = a.indexOf('*');
@@ -314,4 +372,18 @@ export function ssrNoExternalOf(vite) {
     var _a, _b, _c, _d, _e, _f, _g;
     return ((_c = (_b = (_a = vite === null || vite === void 0 ? void 0 : vite.config) === null || _a === void 0 ? void 0 : _a.ssr) === null || _b === void 0 ? void 0 : _b.noExternal) !== null && _c !== void 0 ? _c : (_g = (_f = (_e = (_d = vite === null || vite === void 0 ? void 0 : vite.config) === null || _d === void 0 ? void 0 : _d.environments) === null || _e === void 0 ? void 0 : _e.ssr) === null || _f === void 0 ? void 0 : _f.resolve) === null || _g === void 0 ? void 0 : _g.noExternal);
 }
+/**
+ * The backend entry of a package the dev Vite runner owns (see isBundledBySsr):
+ * its source backend when it is a source package (resolveSourceBackendEntry),
+ * otherwise what `exports` names under the `development` condition and Node's
+ * import conditions. A registry install has no src/, so it resolves exactly
+ * as before.
+ */
+export function resolveDevBackendEntry(pkgRoot, pkgJson) {
+    var _a;
+    return ((_a = resolveSourceBackendEntry(pkgRoot, pkgJson)) !== null && _a !== void 0 ? _a : resolveBackendEntry(pkgRoot, pkgJson, [
+        'development',
+        ...NODE_IMPORT_CONDITIONS,
+    ]));
+}
 //# sourceMappingURL=linkedDependencies.js.map

package/lib/esm/utils/linkedDependencies.js.map

@@ -1 +1 @@
-{"version":3,"file":"linkedDependencies.js","sourceRoot":"","sources":["../../../src/utils/linkedDependencies.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAsB7B;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,mBAAmB,CAAC,IAAS;IAC3C,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IACzD,OAAO,IAAI,CAAC,aAAa,KAAK,IAAI,CAAC;AACrC,CAAC;AAED;;;;GAIG;AACH;;;;;GAKG;AACH,MAAM,UAAU,cAAc,CAAC,IAAS;IACtC,IAAI,CAAC,IAAI;QAAE,OAAO,KAAK,CAAC;IACxB,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,IAAI,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QACrE,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC;IACzB,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACzC,IAAI,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;QACnC,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC9B,oEAAoE;QACpE,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC;QAC1E,OAAO,GAAG,IAAI,GAAG,CAAC;IACpB,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,oBAAoB,CAClC,IAAY,EACZ,OAAe;IAEf,IAAI,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAChC,OAAO,IAAI,EAAE,CAAC;QACZ,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;QAClD,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;QACpD,IAAI,EAAE,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;YAC/B,IAAI,CAAC;gBACH,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC,EAAE,CAAC;YAC3E,CAAC;YAAC,WAAM,CAAC;gBACP,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACjC,IAAI,MAAM,KAAK,GAAG;YAAE,OAAO,IAAI,CAAC;QAChC,GAAG,GAAG,MAAM,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,UAAU,0BAA0B,CACxC,MAAc,EACd,cAAmB;;IAEnB,MAAM,GAAG,GAAuB,EAAE,CAAC;IACnC,MAAM,MAAM,GAAG,IAAI,GAAG,EAA4B,CAAC;IACnD,MAAM,YAAY,GAAG,IAAI,GAAG,EAAU,CAAC;IACvC,MAAM,OAAO,GAAG,cAAc,aAAd,cAAc,uBAAd,cAAc,CAAE,IAAI,CAAC;IAErC,MAAM,KAAK,GAAG,CAAC,IAAY,EAAE,OAAe,EAAE,EAAE;;QAC9C,IAAI,IAAI,KAAK,OAAO;YAAE,OAAO;QAC7B,MAAM,SAAS,GAAG,oBAAoB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACtD,IAAI,CAAC,SAAS,IAAI,CAAC,mBAAmB,CAAC,SAAS,CAAC,IAAI,CAAC;YAAE,OAAO;QAC/D,MAAM,QAAQ,GAAG,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QAC5C,IAAI,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC;YAAE,OAAO;QACvC,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC3B,IAAI,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC7B,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,KAAK,GAAG,EAAE,WAAW,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;YAC1D,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QAC1B,CAAC;QACD,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;QACvE,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,MAAA,SAAS,CAAC,IAAI,CAAC,YAAY,mCAAI,EAAE,CAAC,EAAE,CAAC;YACjE,KAAK,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;QACvB,CAAC;QACD,qEAAqE;QACrE,0CAA0C;QAC1C,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC;YAAE,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC5C,CAAC,CAAC;IAEF,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,MAAA,cAAc,aAAd,cAAc,uBAAd,cAAc,CAAE,YAAY,mCAAI,EAAE,CAAC,EAAE,CAAC;QACnE,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACtB,CAAC;IAED,KAAK,MAAM,KAAK,IAAI,GAAG,EAAE,CAAC;QACxB,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC;YAAE,SAAS;QACtC,MAAM,OAAO,GAAG,oBAAoB,CAAC,KAAK,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;QAChE,IAAI,OAAO,IAAI,mBAAmB,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YACjD,MAAM,OAAO,GAAG,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YACzC,IAAI,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC;gBAAE,KAAK,CAAC,IAAI,GAAG,OAAO,CAAC;QACzE,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,UAAU,CAAC,CAAS;IAC3B,IAAI,CAAC;QACH,OAAO,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IAC5B,CAAC;IAAC,WAAM,CAAC;QACP,OAAO,CAAC,CAAC;IACX,CAAC;AACH,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,CAAU,CAAC;AAE7E;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,UAAU,mBAAmB,CACjC,OAAe,EACf,OAAY,EACZ,aAAgC,sBAAsB;IAEtD,MAAM,MAAM,GAAG,CAAC,GAAW,EAAE,EAAE;QAC7B,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QACxC,iDAAiD;QACjD,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;QACpE,IAAI,CAAC;YACH,OAAO,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;QAClD,CAAC;QAAC,WAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC,CAAC;IAEF,MAAM,YAAY,GAAG,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,OAAO,CAAC;IACtC,IAAI,YAAY,KAAK,SAAS,IAAI,YAAY,KAAK,IAAI,EAAE,CAAC;QACxD,MAAM,UAAU,GAAG,CAAC,YAAY,EAAE,kBAAkB,CAAC,CAAC;QACtD,IAAI,OAAO,CAAA,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,IAAI,CAAA,KAAK,QAAQ,EAAE,CAAC;YACtC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,YAAY,CAAC,CAAC,CAAC;QACvE,CAAC;QACD,UAAU,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;QACtC,KAAK,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;YAC7B,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;YACzB,IAAI,IAAI;gBAAE,OAAO,IAAI,CAAC;QACxB,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,0EAA0E;IAC1E,0CAA0C;IAC1C,IACE,OAAO,YAAY,KAAK,QAAQ;QAChC,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC;QAC3B,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,EACzD,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,OAAO,GAAG,WAAW,CAAC;IAC5B,IAAI,MAAW,CAAC;IAChB,IAAI,YAAY,GAAkB,IAAI,CAAC;IACvC,IAAI,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,YAAY,EAAE,OAAO,CAAC,EAAE,CAAC;QAChE,MAAM,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;IACjC,CAAC;SAAM,CAAC;QACN,IAAI,OAAO,GAAkB,IAAI,CAAC;QAClC,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC;YAC5C,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YAC9B,IAAI,IAAI,KAAK,CAAC,CAAC,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC;gBAAE,SAAS;YAC/D,MAAM,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;YAClC,MAAM,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC;YACnC,IACE,OAAO,KAAK,MAAM;gBAClB,OAAO,CAAC,MAAM,IAAI,GAAG,CAAC,MAAM;gBAC5B,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC;gBAC1B,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC;gBACxB,CAAC,OAAO,KAAK,IAAI,IAAI,iBAAiB,CAAC,OAAO,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC,EACzD,CAAC;gBACD,OAAO,GAAG,GAAG,CAAC;gBACd,YAAY,GAAG,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;YAC9E,CAAC;QACH,CAAC;QACD,IAAI,OAAO,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC;QAClC,MAAM,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;IACjC,CAAC;IAED,MAAM,aAAa,GAAG,CAAC,CAAM,EAAiB,EAAE;QAC9C,IAAI,OAAO,CAAC,KAAK,QAAQ,EAAE,CAAC;YAC1B,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC;gBAAE,OAAO,IAAI,CAAC;YACrC,MAAM,GAAG,GAAG,YAAY,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;YACxE,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC;QACrB,CAAC;QACD,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;YACrB,KAAK,MAAM,IAAI,IAAI,CAAC,EAAE,CAAC;gBACrB,MAAM,IAAI,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;gBACjC,IAAI,IAAI;oBAAE,OAAO,IAAI,CAAC;YACxB,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,EAAE,CAAC;YAC/B,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;gBACjC,IAAI,GAAG,KAAK,SAAS,IAAI,UAAU,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;oBAClD,mEAAmE;oBACnE,sDAAsD;oBACtD,OAAO,aAAa,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;gBAC/B,CAAC;YACH,CAAC;QACH,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC,CAAC;IACF,OAAO,aAAa,CAAC,MAAM,CAAC,CAAC;AAC/B,CAAC;AAED,8EAA8E;AAC9E,SAAS,iBAAiB,CAAC,CAAS,EAAE,CAAS;IAC7C,MAAM,KAAK,GAAG,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC7B,MAAM,KAAK,GAAG,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC7B,MAAM,KAAK,GAAG,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC;IAClD,MAAM,KAAK,GAAG,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC;IAClD,IAAI,KAAK,GAAG,KAAK;QAAE,OAAO,CAAC,CAAC,CAAC;IAC7B,IAAI,KAAK,GAAG,KAAK;QAAE,OAAO,CAAC,CAAC;IAC5B,IAAI,KAAK,KAAK,CAAC,CAAC;QAAE,OAAO,CAAC,CAAC;IAC3B,IAAI,KAAK,KAAK,CAAC,CAAC;QAAE,OAAO,CAAC,CAAC,CAAC;IAC5B,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM;QAAE,OAAO,CAAC,CAAC,CAAC;IACnC,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM;QAAE,OAAO,CAAC,CAAC;IAClC,OAAO,CAAC,CAAC;AACX,CAAC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,UAAU,cAAc,CAAC,OAAe,EAAE,UAAmB;IACjE,IAAI,UAAU,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IACrC,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC;QACvC,CAAC,CAAC,UAAU;QACZ,CAAC,CAAC,UAAU;YACV,CAAC,CAAC,CAAC,UAAU,CAAC;YACd,CAAC,CAAC,EAAE,CAAC;IACT,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAC5B,OAAO,KAAK,KAAK,QAAQ;QACvB,CAAC,CAAC,KAAK,KAAK,OAAO;QACnB,CAAC,CAAC,KAAK,YAAY,MAAM;YACvB,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC;YACrB,CAAC,CAAC,KAAK,CACZ,CAAC;AACJ,CAAC;AAED,+EAA+E;AAC/E,MAAM,UAAU,eAAe,CAAC,IAAS;;IACvC,OAAO,CACL,MAAA,MAAA,MAAA,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,MAAM,0CAAE,GAAG,0CAAE,UAAU,mCAC7B,MAAA,MAAA,MAAA,MAAA,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,MAAM,0CAAE,YAAY,0CAAE,GAAG,0CAAE,OAAO,0CAAE,UAAU,CACrD,CAAC;AACJ,CAAC","sourcesContent":["import * as fs from 'fs';\nimport * as path from 'path';\n\n/**\n * A linked package found in the app's dependency tree, wherever it is\n * installed: a workspace member, a localized checkout, or a registry install.\n */\nexport interface LinkedDependency {\n  packageName: string;\n  /**\n   * Realpath of the package root whose backend the server loads: the copy the\n   * app itself resolves when that copy is a linked package, otherwise the\n   * first copy the walk found.\n   */\n  path: string;\n  /**\n   * Every distinct installed copy of this package in the tree (realpaths),\n   * in the order the walk found them. More than one means the install is not\n   * deduplicated; only `path`'s backend is ever loaded.\n   */\n  copies: { path: string; version?: string }[];\n}\n\n/**\n * A package whose backend providers the server loads at boot: one whose\n * package.json declares `\"linkedPackage\": true`. That flag is the only test —\n * not the package's scope. `@_linked/localize` is in the `@_linked` scope and\n * is a CLI tool, not a linked package; a custom-scope package with the flag is\n * a linked package. The CLI's workspace discovery uses the same flag.\n *\n * The legacy `\"lincd\": true` flag is deliberately NOT enough. Those packages\n * import the old `lincd` core, and loading them at boot is what produced\n * \"Multiple versions of LINCD are loaded\" before boot loading was narrowed to\n * workspace members.\n */\nexport function isLinkedPackageJson(json: any): boolean {\n  if (!json || typeof json.name !== 'string') return false;\n  return json.linkedPackage === true;\n}\n\n/**\n * Find an installed package the way Node does: `<dir>/node_modules/<name>`,\n * then each parent directory's `node_modules`. Returns null when it is not\n * installed (an optional dependency, say) rather than throwing.\n */\n/**\n * Whether a package has a JavaScript entry the server can import: `main`,\n * `module`, or an `exports` map with a root (`.`) entry or a single string.\n * A linked package can be pure CSS (`@_linked/css`); importing that whole\n * fails with \"Failed to resolve entry\", so the server skips it.\n */\nexport function hasModuleEntry(json: any): boolean {\n  if (!json) return false;\n  if (typeof json.main === 'string' || typeof json.module === 'string') {\n    return true;\n  }\n  const exp = json.exports;\n  if (typeof exp === 'string') return true;\n  if (exp && typeof exp === 'object') {\n    const keys = Object.keys(exp);\n    // Conditions only ({import, require, ...}) describe the root entry.\n    if (keys.length > 0 && keys.every((k) => !k.startsWith('.'))) return true;\n    return '.' in exp;\n  }\n  return false;\n}\n\nexport function readInstalledPackage(\n  name: string,\n  fromDir: string\n): { root: string; json: any } | null {\n  let dir = path.resolve(fromDir);\n  while (true) {\n    const root = path.join(dir, 'node_modules', name);\n    const pkgJsonPath = path.join(root, 'package.json');\n    if (fs.existsSync(pkgJsonPath)) {\n      try {\n        return { root, json: JSON.parse(fs.readFileSync(pkgJsonPath, 'utf-8')) };\n      } catch {\n        return null;\n      }\n    }\n    const parent = path.dirname(dir);\n    if (parent === dir) return null;\n    dir = parent;\n  }\n}\n\n/**\n * Every linked package reachable from the app's `dependencies`, each one AFTER\n * the linked packages it depends on. Providers register middleware in the\n * order they are indexed, so a package's middleware must not run before that\n * of a package it builds on (e.g. anything reading `request.linkedAuth` after\n * @_linked/auth's JWT middleware).\n *\n * Only linked packages are recursed into — the same rule the workspace-only\n * filter used — so the walk reads a few dozen package.json files, not the\n * whole of node_modules. Each package's dependencies are resolved from its\n * REAL location, so a symlinked workspace or localized checkout resolves its\n * own dependencies the way Node will when it loads it — which is how a\n * package installed only nested (`owl/node_modules/@_linked/rdfs`) is found.\n *\n * The walk is keyed by real path, not name, so every installed copy of a\n * package is recorded (`copies`). The copy whose backend is loaded (`path`)\n * is the one the app itself resolves, so it is the same module instance the\n * app's own imports reach; when the app cannot resolve the package at all\n * (it is only installed nested) it is the first copy found.\n */\nexport function discoverLinkedDependencies(\n  appDir: string,\n  appPackageJson: any\n): LinkedDependency[] {\n  const out: LinkedDependency[] = [];\n  const byName = new Map<string, LinkedDependency>();\n  const visitedRoots = new Set<string>();\n  const appName = appPackageJson?.name;\n\n  const visit = (name: string, fromDir: string) => {\n    if (name === appName) return;\n    const installed = readInstalledPackage(name, fromDir);\n    if (!installed || !isLinkedPackageJson(installed.json)) return;\n    const realRoot = realpathOr(installed.root);\n    if (visitedRoots.has(realRoot)) return;\n    visitedRoots.add(realRoot);\n    let entry = byName.get(name);\n    if (!entry) {\n      entry = { packageName: name, path: realRoot, copies: [] };\n      byName.set(name, entry);\n    }\n    entry.copies.push({ path: realRoot, version: installed.json.version });\n    for (const dep of Object.keys(installed.json.dependencies ?? {})) {\n      visit(dep, realRoot);\n    }\n    // Pushed after its dependencies, once per name: the first copy found\n    // fixes the package's place in the order.\n    if (!out.includes(entry)) out.push(entry);\n  };\n\n  for (const name of Object.keys(appPackageJson?.dependencies ?? {})) {\n    visit(name, appDir);\n  }\n\n  for (const entry of out) {\n    if (entry.copies.length < 2) continue;\n    const fromApp = readInstalledPackage(entry.packageName, appDir);\n    if (fromApp && isLinkedPackageJson(fromApp.json)) {\n      const appCopy = realpathOr(fromApp.root);\n      if (entry.copies.some((c) => c.path === appCopy)) entry.path = appCopy;\n    }\n  }\n  return out;\n}\n\nfunction realpathOr(p: string): string {\n  try {\n    return fs.realpathSync(p);\n  } catch {\n    return p;\n  }\n}\n\n/**\n * The conditions a backend entry is resolved with on the Node path. These are\n * the ones Node's ESM loader applies to `import()` — so the file found is the\n * file a bare `import('<pkg>/backend')` from the app would load, and Node's\n * module cache (keyed by real file URL) hands both the same instance.\n * `development` is deliberately absent: it is a Vite/bundler condition, and a\n * production Node runtime never applies it.\n */\nexport const NODE_IMPORT_CONDITIONS = ['import', 'node', 'default'] as const;\n\n/**\n * The absolute path of a package's backend entry file, or null when the\n * package has no backend entry or the file it names does not exist.\n *\n * With `exports`, this follows Node's PACKAGE_EXPORTS_RESOLVE for the\n * `./backend` subpath: an exact `./backend` key wins; otherwise the `./*`-style\n * pattern with the longest matching prefix; condition objects (nested or not)\n * pick the first key that is one of `conditions` or `default`; arrays take the\n * first target that resolves. A package that has `exports` but nothing\n * matching `./backend` has no backend — exactly as Node would refuse to\n * import it.\n *\n * Without `exports`, the legacy layout: `<root>/backend.js`,\n * `<root>/backend/index.js`, and the layout linked packages build to — a\n * `backend.js` next to `main` (`lib/esm/backend.js`).\n *\n * Hand-written rather than via `resolve.exports`: that package also stops at\n * a path and leaves the existence check to the caller, the subset needed is\n * ~50 lines, and the server keeps one less dependency in every app's install.\n */\nexport function resolveBackendEntry(\n  pkgRoot: string,\n  pkgJson: any,\n  conditions: readonly string[] = NODE_IMPORT_CONDITIONS\n): string | null {\n  const exists = (rel: string) => {\n    const file = path.resolve(pkgRoot, rel);\n    // Never let an export target escape the package.\n    if (!file.startsWith(path.resolve(pkgRoot) + path.sep)) return null;\n    try {\n      return fs.statSync(file).isFile() ? file : null;\n    } catch {\n      return null;\n    }\n  };\n\n  const exportsField = pkgJson?.exports;\n  if (exportsField === undefined || exportsField === null) {\n    const candidates = ['backend.js', 'backend/index.js'];\n    if (typeof pkgJson?.main === 'string') {\n      candidates.push(path.join(path.dirname(pkgJson.main), 'backend.js'));\n    }\n    candidates.push('lib/esm/backend.js');\n    for (const rel of candidates) {\n      const file = exists(rel);\n      if (file) return file;\n    }\n    return null;\n  }\n\n  // `\"exports\": \"./x.js\"`, an array, or a condition object at the top level\n  // are all sugar for the \".\" subpath only.\n  if (\n    typeof exportsField !== 'object' ||\n    Array.isArray(exportsField) ||\n    !Object.keys(exportsField).some((k) => k.startsWith('.'))\n  ) {\n    return null;\n  }\n\n  const subpath = './backend';\n  let target: any;\n  let patternMatch: string | null = null;\n  if (Object.prototype.hasOwnProperty.call(exportsField, subpath)) {\n    target = exportsField[subpath];\n  } else {\n    let bestKey: string | null = null;\n    for (const key of Object.keys(exportsField)) {\n      const star = key.indexOf('*');\n      if (star === -1 || key.indexOf('*', star + 1) !== -1) continue;\n      const prefix = key.slice(0, star);\n      const suffix = key.slice(star + 1);\n      if (\n        subpath !== prefix &&\n        subpath.length >= key.length &&\n        subpath.startsWith(prefix) &&\n        subpath.endsWith(suffix) &&\n        (bestKey === null || patternKeyCompare(bestKey, key) > 0)\n      ) {\n        bestKey = key;\n        patternMatch = subpath.slice(prefix.length, subpath.length - suffix.length);\n      }\n    }\n    if (bestKey === null) return null;\n    target = exportsField[bestKey];\n  }\n\n  const resolveTarget = (t: any): string | null => {\n    if (typeof t === 'string') {\n      if (!t.startsWith('./')) return null;\n      const rel = patternMatch === null ? t : t.split('*').join(patternMatch);\n      return exists(rel);\n    }\n    if (Array.isArray(t)) {\n      for (const item of t) {\n        const file = resolveTarget(item);\n        if (file) return file;\n      }\n      return null;\n    }\n    if (t && typeof t === 'object') {\n      for (const key of Object.keys(t)) {\n        if (key === 'default' || conditions.includes(key)) {\n          // Node takes the first matching condition even if its target fails\n          // to resolve; it does not fall through to later keys.\n          return resolveTarget(t[key]);\n        }\n      }\n    }\n    return null;\n  };\n  return resolveTarget(target);\n}\n\n/** Node's PATTERN_KEY_COMPARE: < 0 means `a` is the more specific pattern. */\nfunction patternKeyCompare(a: string, b: string): number {\n  const aBase = a.indexOf('*');\n  const bBase = b.indexOf('*');\n  const baseA = aBase === -1 ? a.length : aBase + 1;\n  const baseB = bBase === -1 ? b.length : bBase + 1;\n  if (baseA > baseB) return -1;\n  if (baseB > baseA) return 1;\n  if (aBase === -1) return 1;\n  if (bBase === -1) return -1;\n  if (a.length > b.length) return -1;\n  if (b.length > a.length) return 1;\n  return 0;\n}\n\n/**\n * Whether the dev SSR runner BUNDLES `pkgName` (it is in Vite's\n * `ssr.noExternal`) rather than handing it to Node.\n *\n * This decides which loader a package's backend must be loaded with. A module\n * has to be evaluated by the same loader that evaluates the package everywhere\n * else in the SSR graph, or it runs twice:\n *\n *  - `vite.ssrLoadModule('<external pkg>/backend')` transforms that entry and\n *    its relative imports even though the package is external, while the app's\n *    bare imports of the same package are evaluated by Node — two copies of the\n *    package's module state.\n *  - a plain `import()` of a BUNDLED package goes to Node, while the app's\n *    imports of it are evaluated by Vite — the same split the other way round.\n *\n * Vite matches `noExternal` entries against the bare package name, so a\n * subpath (`pkg/backend`) is covered by an entry for `pkg`.\n */\nexport function isBundledBySsr(pkgName: string, noExternal: unknown): boolean {\n  if (noExternal === true) return true;\n  const entries = Array.isArray(noExternal)\n    ? noExternal\n    : noExternal\n      ? [noExternal]\n      : [];\n  return entries.some((entry) =>\n    typeof entry === 'string'\n      ? entry === pkgName\n      : entry instanceof RegExp\n        ? entry.test(pkgName)\n        : false\n  );\n}\n\n/** The dev SSR runner's resolved `noExternal`, wherever this Vite keeps it. */\nexport function ssrNoExternalOf(vite: any): unknown {\n  return (\n    vite?.config?.ssr?.noExternal ??\n    vite?.config?.environments?.ssr?.resolve?.noExternal\n  );\n}\n"]}
+{"version":3,"file":"linkedDependencies.js","sourceRoot":"","sources":["../../../src/utils/linkedDependencies.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAsB7B;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,mBAAmB,CAAC,IAAS;IAC3C,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IACzD,OAAO,IAAI,CAAC,aAAa,KAAK,IAAI,CAAC;AACrC,CAAC;AAED;;;;GAIG;AACH;;;;;GAKG;AACH,MAAM,UAAU,cAAc,CAAC,IAAS;IACtC,IAAI,CAAC,IAAI;QAAE,OAAO,KAAK,CAAC;IACxB,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,IAAI,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QACrE,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC;IACzB,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACzC,IAAI,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;QACnC,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC9B,oEAAoE;QACpE,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC;QAC1E,OAAO,GAAG,IAAI,GAAG,CAAC;IACpB,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,oBAAoB,CAClC,IAAY,EACZ,OAAe;IAEf,IAAI,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAChC,OAAO,IAAI,EAAE,CAAC;QACZ,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;QAClD,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;QACpD,IAAI,EAAE,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;YAC/B,IAAI,CAAC;gBACH,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC,EAAE,CAAC;YAC3E,CAAC;YAAC,WAAM,CAAC;gBACP,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACjC,IAAI,MAAM,KAAK,GAAG;YAAE,OAAO,IAAI,CAAC;QAChC,GAAG,GAAG,MAAM,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,UAAU,0BAA0B,CACxC,MAAc,EACd,cAAmB;;IAEnB,MAAM,GAAG,GAAuB,EAAE,CAAC;IACnC,MAAM,MAAM,GAAG,IAAI,GAAG,EAA4B,CAAC;IACnD,MAAM,YAAY,GAAG,IAAI,GAAG,EAAU,CAAC;IACvC,MAAM,OAAO,GAAG,cAAc,aAAd,cAAc,uBAAd,cAAc,CAAE,IAAI,CAAC;IAErC,MAAM,KAAK,GAAG,CAAC,IAAY,EAAE,OAAe,EAAE,EAAE;;QAC9C,IAAI,IAAI,KAAK,OAAO;YAAE,OAAO;QAC7B,MAAM,SAAS,GAAG,oBAAoB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACtD,IAAI,CAAC,SAAS,IAAI,CAAC,mBAAmB,CAAC,SAAS,CAAC,IAAI,CAAC;YAAE,OAAO;QAC/D,MAAM,QAAQ,GAAG,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QAC5C,IAAI,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC;YAAE,OAAO;QACvC,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC3B,IAAI,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC7B,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,KAAK,GAAG,EAAE,WAAW,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;YAC1D,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QAC1B,CAAC;QACD,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;QACvE,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,MAAA,SAAS,CAAC,IAAI,CAAC,YAAY,mCAAI,EAAE,CAAC,EAAE,CAAC;YACjE,KAAK,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;QACvB,CAAC;QACD,qEAAqE;QACrE,0CAA0C;QAC1C,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC;YAAE,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC5C,CAAC,CAAC;IAEF,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,MAAA,cAAc,aAAd,cAAc,uBAAd,cAAc,CAAE,YAAY,mCAAI,EAAE,CAAC,EAAE,CAAC;QACnE,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACtB,CAAC;IAED,KAAK,MAAM,KAAK,IAAI,GAAG,EAAE,CAAC;QACxB,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC;YAAE,SAAS;QACtC,MAAM,OAAO,GAAG,oBAAoB,CAAC,KAAK,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;QAChE,IAAI,OAAO,IAAI,mBAAmB,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YACjD,MAAM,OAAO,GAAG,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YACzC,IAAI,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC;gBAAE,KAAK,CAAC,IAAI,GAAG,OAAO,CAAC;QACzE,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,UAAU,CAAC,CAAS;IAC3B,IAAI,CAAC;QACH,OAAO,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IAC5B,CAAC;IAAC,WAAM,CAAC;QACP,OAAO,CAAC,CAAC;IACX,CAAC;AACH,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,CAAU,CAAC;AAE7E;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,UAAU,mBAAmB,CACjC,OAAe,EACf,OAAY,EACZ,aAAgC,sBAAsB;IAEtD,MAAM,MAAM,GAAG,CAAC,GAAW,EAAE,EAAE,CAAC,WAAW,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;IAC1D,MAAM,YAAY,GAAG,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,OAAO,CAAC;IACtC,IAAI,YAAY,KAAK,SAAS,IAAI,YAAY,KAAK,IAAI,EAAE,CAAC;QACxD,MAAM,UAAU,GAAG,CAAC,YAAY,EAAE,kBAAkB,CAAC,CAAC;QACtD,IAAI,OAAO,CAAA,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,IAAI,CAAA,KAAK,QAAQ,EAAE,CAAC;YACtC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,YAAY,CAAC,CAAC,CAAC;QACvE,CAAC;QACD,UAAU,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;QACtC,KAAK,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;YAC7B,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;YACzB,IAAI,IAAI;gBAAE,OAAO,IAAI,CAAC;QACxB,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,oBAAoB,CAAC,YAAY,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC;AAChE,CAAC;AAED,yEAAyE;AACzE,SAAS,WAAW,CAAC,OAAe,EAAE,GAAW;IAC/C,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;IACxC,iDAAiD;IACjD,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IACpE,IAAI,CAAC;QACH,OAAO,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;IAClD,CAAC;IAAC,WAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,SAAS,oBAAoB,CAC3B,YAAiB,EACjB,UAA6B,EAC7B,KAAqC;IAErC,0EAA0E;IAC1E,0CAA0C;IAC1C,IACE,OAAO,YAAY,KAAK,QAAQ;QAChC,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC;QAC3B,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,EACzD,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,OAAO,GAAG,WAAW,CAAC;IAC5B,IAAI,MAAW,CAAC;IAChB,IAAI,YAAY,GAAkB,IAAI,CAAC;IACvC,IAAI,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,YAAY,EAAE,OAAO,CAAC,EAAE,CAAC;QAChE,MAAM,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;IACjC,CAAC;SAAM,CAAC;QACN,IAAI,OAAO,GAAkB,IAAI,CAAC;QAClC,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC;YAC5C,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YAC9B,IAAI,IAAI,KAAK,CAAC,CAAC,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC;gBAAE,SAAS;YAC/D,MAAM,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;YAClC,MAAM,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC;YACnC,IACE,OAAO,KAAK,MAAM;gBAClB,OAAO,CAAC,MAAM,IAAI,GAAG,CAAC,MAAM;gBAC5B,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC;gBAC1B,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC;gBACxB,CAAC,OAAO,KAAK,IAAI,IAAI,iBAAiB,CAAC,OAAO,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC,EACzD,CAAC;gBACD,OAAO,GAAG,GAAG,CAAC;gBACd,YAAY,GAAG,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;YAC9E,CAAC;QACH,CAAC;QACD,IAAI,OAAO,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC;QAClC,MAAM,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;IACjC,CAAC;IAED,MAAM,aAAa,GAAG,CAAC,CAAM,EAAiB,EAAE;QAC9C,IAAI,OAAO,CAAC,KAAK,QAAQ,EAAE,CAAC;YAC1B,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC;gBAAE,OAAO,IAAI,CAAC;YACrC,MAAM,GAAG,GAAG,YAAY,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;YACxE,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC;QACpB,CAAC;QACD,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;YACrB,KAAK,MAAM,IAAI,IAAI,CAAC,EAAE,CAAC;gBACrB,MAAM,IAAI,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;gBACjC,IAAI,IAAI;oBAAE,OAAO,IAAI,CAAC;YACxB,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,EAAE,CAAC;YAC/B,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;gBACjC,IAAI,GAAG,KAAK,SAAS,IAAI,UAAU,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;oBAClD,mEAAmE;oBACnE,sDAAsD;oBACtD,OAAO,aAAa,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;gBAC/B,CAAC;YACH,CAAC;QACH,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC,CAAC;IACF,OAAO,aAAa,CAAC,MAAM,CAAC,CAAC;AAC/B,CAAC;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,UAAU,yBAAyB,CACvC,OAAe,EACf,OAAY;IAEZ,IAAI,CAAC;QACH,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,WAAW,EAAE;YAAE,OAAO,IAAI,CAAC;IACzE,CAAC;IAAC,WAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IACD,KAAK,MAAM,GAAG,IAAI,CAAC,iBAAiB,EAAE,gBAAgB,CAAC,EAAE,CAAC;QACxD,MAAM,IAAI,GAAG,WAAW,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QACvC,IAAI,IAAI;YAAE,OAAO,IAAI,CAAC;IACxB,CAAC;IACD,MAAM,YAAY,GAAG,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,OAAO,CAAC;IACtC,IAAI,YAAY,KAAK,SAAS,IAAI,YAAY,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IACrE,MAAM,SAAS,GAAG,YAAY,CAAC;IAC/B,OAAO,oBAAoB,CAAC,YAAY,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE;;QAC5D,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,SAAS,CAAC;YAAE,OAAO,IAAI,CAAC;QAC5C,MAAM,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QACxC,IAAI,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YACxB,MAAM,IAAI,GAAG,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;YACjD,OAAO,MAAA,WAAW,CAAC,OAAO,EAAE,IAAI,GAAG,MAAM,CAAC,mCAAI,WAAW,CAAC,OAAO,EAAE,IAAI,GAAG,KAAK,CAAC,CAAC;QACnF,CAAC;QACD,OAAO,WAAW,CAAC,OAAO,EAAE,MAAM,GAAG,GAAG,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;AACL,CAAC;AAED,8EAA8E;AAC9E,SAAS,iBAAiB,CAAC,CAAS,EAAE,CAAS;IAC7C,MAAM,KAAK,GAAG,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC7B,MAAM,KAAK,GAAG,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC7B,MAAM,KAAK,GAAG,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC;IAClD,MAAM,KAAK,GAAG,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC;IAClD,IAAI,KAAK,GAAG,KAAK;QAAE,OAAO,CAAC,CAAC,CAAC;IAC7B,IAAI,KAAK,GAAG,KAAK;QAAE,OAAO,CAAC,CAAC;IAC5B,IAAI,KAAK,KAAK,CAAC,CAAC;QAAE,OAAO,CAAC,CAAC;IAC3B,IAAI,KAAK,KAAK,CAAC,CAAC;QAAE,OAAO,CAAC,CAAC,CAAC;IAC5B,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM;QAAE,OAAO,CAAC,CAAC,CAAC;IACnC,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM;QAAE,OAAO,CAAC,CAAC;IAClC,OAAO,CAAC,CAAC;AACX,CAAC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,UAAU,cAAc,CAAC,OAAe,EAAE,UAAmB;IACjE,IAAI,UAAU,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IACrC,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC;QACvC,CAAC,CAAC,UAAU;QACZ,CAAC,CAAC,UAAU;YACV,CAAC,CAAC,CAAC,UAAU,CAAC;YACd,CAAC,CAAC,EAAE,CAAC;IACT,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAC5B,OAAO,KAAK,KAAK,QAAQ;QACvB,CAAC,CAAC,KAAK,KAAK,OAAO;QACnB,CAAC,CAAC,KAAK,YAAY,MAAM;YACvB,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC;YACrB,CAAC,CAAC,KAAK,CACZ,CAAC;AACJ,CAAC;AAED,+EAA+E;AAC/E,MAAM,UAAU,eAAe,CAAC,IAAS;;IACvC,OAAO,CACL,MAAA,MAAA,MAAA,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,MAAM,0CAAE,GAAG,0CAAE,UAAU,mCAC7B,MAAA,MAAA,MAAA,MAAA,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,MAAM,0CAAE,YAAY,0CAAE,GAAG,0CAAE,OAAO,0CAAE,UAAU,CACrD,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,sBAAsB,CACpC,OAAe,EACf,OAAY;;IAEZ,OAAO,CACL,MAAA,yBAAyB,CAAC,OAAO,EAAE,OAAO,CAAC,mCAC3C,mBAAmB,CAAC,OAAO,EAAE,OAAO,EAAE;QACpC,aAAa;QACb,GAAG,sBAAsB;KAC1B,CAAC,CACH,CAAC;AACJ,CAAC","sourcesContent":["import * as fs from 'fs';\nimport * as path from 'path';\n\n/**\n * A linked package found in the app's dependency tree, wherever it is\n * installed: a workspace member, a localized checkout, or a registry install.\n */\nexport interface LinkedDependency {\n  packageName: string;\n  /**\n   * Realpath of the package root whose backend the server loads: the copy the\n   * app itself resolves when that copy is a linked package, otherwise the\n   * first copy the walk found.\n   */\n  path: string;\n  /**\n   * Every distinct installed copy of this package in the tree (realpaths),\n   * in the order the walk found them. More than one means the install is not\n   * deduplicated; only `path`'s backend is ever loaded.\n   */\n  copies: { path: string; version?: string }[];\n}\n\n/**\n * A package whose backend providers the server loads at boot: one whose\n * package.json declares `\"linkedPackage\": true`. That flag is the only test —\n * not the package's scope. `@_linked/localize` is in the `@_linked` scope and\n * is a CLI tool, not a linked package; a custom-scope package with the flag is\n * a linked package. The CLI's workspace discovery uses the same flag.\n *\n * The legacy `\"lincd\": true` flag is deliberately NOT enough. Those packages\n * import the old `lincd` core, and loading them at boot is what produced\n * \"Multiple versions of LINCD are loaded\" before boot loading was narrowed to\n * workspace members.\n */\nexport function isLinkedPackageJson(json: any): boolean {\n  if (!json || typeof json.name !== 'string') return false;\n  return json.linkedPackage === true;\n}\n\n/**\n * Find an installed package the way Node does: `<dir>/node_modules/<name>`,\n * then each parent directory's `node_modules`. Returns null when it is not\n * installed (an optional dependency, say) rather than throwing.\n */\n/**\n * Whether a package has a JavaScript entry the server can import: `main`,\n * `module`, or an `exports` map with a root (`.`) entry or a single string.\n * A linked package can be pure CSS (`@_linked/css`); importing that whole\n * fails with \"Failed to resolve entry\", so the server skips it.\n */\nexport function hasModuleEntry(json: any): boolean {\n  if (!json) return false;\n  if (typeof json.main === 'string' || typeof json.module === 'string') {\n    return true;\n  }\n  const exp = json.exports;\n  if (typeof exp === 'string') return true;\n  if (exp && typeof exp === 'object') {\n    const keys = Object.keys(exp);\n    // Conditions only ({import, require, ...}) describe the root entry.\n    if (keys.length > 0 && keys.every((k) => !k.startsWith('.'))) return true;\n    return '.' in exp;\n  }\n  return false;\n}\n\nexport function readInstalledPackage(\n  name: string,\n  fromDir: string\n): { root: string; json: any } | null {\n  let dir = path.resolve(fromDir);\n  while (true) {\n    const root = path.join(dir, 'node_modules', name);\n    const pkgJsonPath = path.join(root, 'package.json');\n    if (fs.existsSync(pkgJsonPath)) {\n      try {\n        return { root, json: JSON.parse(fs.readFileSync(pkgJsonPath, 'utf-8')) };\n      } catch {\n        return null;\n      }\n    }\n    const parent = path.dirname(dir);\n    if (parent === dir) return null;\n    dir = parent;\n  }\n}\n\n/**\n * Every linked package reachable from the app's `dependencies`, each one AFTER\n * the linked packages it depends on. Providers register middleware in the\n * order they are indexed, so a package's middleware must not run before that\n * of a package it builds on (e.g. anything reading `request.linkedAuth` after\n * @_linked/auth's JWT middleware).\n *\n * Only linked packages are recursed into — the same rule the workspace-only\n * filter used — so the walk reads a few dozen package.json files, not the\n * whole of node_modules. Each package's dependencies are resolved from its\n * REAL location, so a symlinked workspace or localized checkout resolves its\n * own dependencies the way Node will when it loads it — which is how a\n * package installed only nested (`owl/node_modules/@_linked/rdfs`) is found.\n *\n * The walk is keyed by real path, not name, so every installed copy of a\n * package is recorded (`copies`). The copy whose backend is loaded (`path`)\n * is the one the app itself resolves, so it is the same module instance the\n * app's own imports reach; when the app cannot resolve the package at all\n * (it is only installed nested) it is the first copy found.\n */\nexport function discoverLinkedDependencies(\n  appDir: string,\n  appPackageJson: any\n): LinkedDependency[] {\n  const out: LinkedDependency[] = [];\n  const byName = new Map<string, LinkedDependency>();\n  const visitedRoots = new Set<string>();\n  const appName = appPackageJson?.name;\n\n  const visit = (name: string, fromDir: string) => {\n    if (name === appName) return;\n    const installed = readInstalledPackage(name, fromDir);\n    if (!installed || !isLinkedPackageJson(installed.json)) return;\n    const realRoot = realpathOr(installed.root);\n    if (visitedRoots.has(realRoot)) return;\n    visitedRoots.add(realRoot);\n    let entry = byName.get(name);\n    if (!entry) {\n      entry = { packageName: name, path: realRoot, copies: [] };\n      byName.set(name, entry);\n    }\n    entry.copies.push({ path: realRoot, version: installed.json.version });\n    for (const dep of Object.keys(installed.json.dependencies ?? {})) {\n      visit(dep, realRoot);\n    }\n    // Pushed after its dependencies, once per name: the first copy found\n    // fixes the package's place in the order.\n    if (!out.includes(entry)) out.push(entry);\n  };\n\n  for (const name of Object.keys(appPackageJson?.dependencies ?? {})) {\n    visit(name, appDir);\n  }\n\n  for (const entry of out) {\n    if (entry.copies.length < 2) continue;\n    const fromApp = readInstalledPackage(entry.packageName, appDir);\n    if (fromApp && isLinkedPackageJson(fromApp.json)) {\n      const appCopy = realpathOr(fromApp.root);\n      if (entry.copies.some((c) => c.path === appCopy)) entry.path = appCopy;\n    }\n  }\n  return out;\n}\n\nfunction realpathOr(p: string): string {\n  try {\n    return fs.realpathSync(p);\n  } catch {\n    return p;\n  }\n}\n\n/**\n * The conditions a backend entry is resolved with on the Node path. These are\n * the ones Node's ESM loader applies to `import()` — so the file found is the\n * file a bare `import('<pkg>/backend')` from the app would load, and Node's\n * module cache (keyed by real file URL) hands both the same instance.\n * `development` is deliberately absent: it is a Vite/bundler condition, and a\n * production Node runtime never applies it.\n */\nexport const NODE_IMPORT_CONDITIONS = ['import', 'node', 'default'] as const;\n\n/**\n * The absolute path of a package's backend entry file, or null when the\n * package has no backend entry or the file it names does not exist.\n *\n * With `exports`, this follows Node's PACKAGE_EXPORTS_RESOLVE for the\n * `./backend` subpath: an exact `./backend` key wins; otherwise the `./*`-style\n * pattern with the longest matching prefix; condition objects (nested or not)\n * pick the first key that is one of `conditions` or `default`; arrays take the\n * first target that resolves. A package that has `exports` but nothing\n * matching `./backend` has no backend — exactly as Node would refuse to\n * import it.\n *\n * Without `exports`, the legacy layout: `<root>/backend.js`,\n * `<root>/backend/index.js`, and the layout linked packages build to — a\n * `backend.js` next to `main` (`lib/esm/backend.js`).\n *\n * Hand-written rather than via `resolve.exports`: that package also stops at\n * a path and leaves the existence check to the caller, the subset needed is\n * ~50 lines, and the server keeps one less dependency in every app's install.\n */\nexport function resolveBackendEntry(\n  pkgRoot: string,\n  pkgJson: any,\n  conditions: readonly string[] = NODE_IMPORT_CONDITIONS\n): string | null {\n  const exists = (rel: string) => packageFile(pkgRoot, rel);\n  const exportsField = pkgJson?.exports;\n  if (exportsField === undefined || exportsField === null) {\n    const candidates = ['backend.js', 'backend/index.js'];\n    if (typeof pkgJson?.main === 'string') {\n      candidates.push(path.join(path.dirname(pkgJson.main), 'backend.js'));\n    }\n    candidates.push('lib/esm/backend.js');\n    for (const rel of candidates) {\n      const file = exists(rel);\n      if (file) return file;\n    }\n    return null;\n  }\n  return resolveBackendExport(exportsField, conditions, exists);\n}\n\n/** `<pkgRoot>/<rel>` when it is a file inside the package, else null. */\nfunction packageFile(pkgRoot: string, rel: string): string | null {\n  const file = path.resolve(pkgRoot, rel);\n  // Never let an export target escape the package.\n  if (!file.startsWith(path.resolve(pkgRoot) + path.sep)) return null;\n  try {\n    return fs.statSync(file).isFile() ? file : null;\n  } catch {\n    return null;\n  }\n}\n\n/**\n * The `./backend` subpath of an `exports` map, resolved per Node's\n * PACKAGE_EXPORTS_RESOLVE (see resolveBackendEntry). `probe` turns a matched\n * `./`-relative target into a file, or null when it does not resolve.\n */\nfunction resolveBackendExport(\n  exportsField: any,\n  conditions: readonly string[],\n  probe: (rel: string) => string | null\n): string | null {\n  // `\"exports\": \"./x.js\"`, an array, or a condition object at the top level\n  // are all sugar for the \".\" subpath only.\n  if (\n    typeof exportsField !== 'object' ||\n    Array.isArray(exportsField) ||\n    !Object.keys(exportsField).some((k) => k.startsWith('.'))\n  ) {\n    return null;\n  }\n\n  const subpath = './backend';\n  let target: any;\n  let patternMatch: string | null = null;\n  if (Object.prototype.hasOwnProperty.call(exportsField, subpath)) {\n    target = exportsField[subpath];\n  } else {\n    let bestKey: string | null = null;\n    for (const key of Object.keys(exportsField)) {\n      const star = key.indexOf('*');\n      if (star === -1 || key.indexOf('*', star + 1) !== -1) continue;\n      const prefix = key.slice(0, star);\n      const suffix = key.slice(star + 1);\n      if (\n        subpath !== prefix &&\n        subpath.length >= key.length &&\n        subpath.startsWith(prefix) &&\n        subpath.endsWith(suffix) &&\n        (bestKey === null || patternKeyCompare(bestKey, key) > 0)\n      ) {\n        bestKey = key;\n        patternMatch = subpath.slice(prefix.length, subpath.length - suffix.length);\n      }\n    }\n    if (bestKey === null) return null;\n    target = exportsField[bestKey];\n  }\n\n  const resolveTarget = (t: any): string | null => {\n    if (typeof t === 'string') {\n      if (!t.startsWith('./')) return null;\n      const rel = patternMatch === null ? t : t.split('*').join(patternMatch);\n      return probe(rel);\n    }\n    if (Array.isArray(t)) {\n      for (const item of t) {\n        const file = resolveTarget(item);\n        if (file) return file;\n      }\n      return null;\n    }\n    if (t && typeof t === 'object') {\n      for (const key of Object.keys(t)) {\n        if (key === 'default' || conditions.includes(key)) {\n          // Node takes the first matching condition even if its target fails\n          // to resolve; it does not fall through to later keys.\n          return resolveTarget(t[key]);\n        }\n      }\n    }\n    return null;\n  };\n  return resolveTarget(target);\n}\n\n/**\n * The SOURCE file a dev Vite runner loads for `<pkg>/backend` when the\n * package is a source package — its real root has a `src/` directory, which is\n * what makes `linked`'s Vite config register it as a workspace (cli\n * `discoverWorkspaces` / `readSourcePackage`). Null when the package has no\n * `src/` or no source backend; the caller then falls back to\n * resolveBackendEntry (a built `lib/` copy, or nothing).\n *\n * Mirrors the cli's `resolveWorkspaceSpecifier` for the `./backend` subpath,\n * which runs BEFORE `exports`: `src/backend.tsx`, `src/backend.ts`, then the\n * package's own `exports` under `import`/`default` with a `./lib/esm/X.js`\n * target mapped to `src/X.tsx` / `src/X.ts` (any other `./lib/esm/` target to\n * the same path under src). So an unbuilt workspace, whose `exports` name only\n * `lib/esm`, still has its backend found, and a built one reports the src file\n * Vite actually evaluates rather than its stale `lib/`.\n *\n * Only meaningful when the dev Vite runner owns the package; Node (production,\n * external packages) loads `lib/` and never sees src.\n */\nexport function resolveSourceBackendEntry(\n  pkgRoot: string,\n  pkgJson: any\n): string | null {\n  try {\n    if (!fs.statSync(path.join(pkgRoot, 'src')).isDirectory()) return null;\n  } catch {\n    return null;\n  }\n  for (const rel of ['src/backend.tsx', 'src/backend.ts']) {\n    const file = packageFile(pkgRoot, rel);\n    if (file) return file;\n  }\n  const exportsField = pkgJson?.exports;\n  if (exportsField === undefined || exportsField === null) return null;\n  const libPrefix = './lib/esm/';\n  return resolveBackendExport(exportsField, ['import'], (rel) => {\n    if (!rel.startsWith(libPrefix)) return null;\n    const sub = rel.slice(libPrefix.length);\n    if (/\\.jsx?$/.test(sub)) {\n      const base = 'src/' + sub.replace(/\\.jsx?$/, '');\n      return packageFile(pkgRoot, base + '.tsx') ?? packageFile(pkgRoot, base + '.ts');\n    }\n    return packageFile(pkgRoot, 'src/' + sub);\n  });\n}\n\n/** Node's PATTERN_KEY_COMPARE: < 0 means `a` is the more specific pattern. */\nfunction patternKeyCompare(a: string, b: string): number {\n  const aBase = a.indexOf('*');\n  const bBase = b.indexOf('*');\n  const baseA = aBase === -1 ? a.length : aBase + 1;\n  const baseB = bBase === -1 ? b.length : bBase + 1;\n  if (baseA > baseB) return -1;\n  if (baseB > baseA) return 1;\n  if (aBase === -1) return 1;\n  if (bBase === -1) return -1;\n  if (a.length > b.length) return -1;\n  if (b.length > a.length) return 1;\n  return 0;\n}\n\n/**\n * Whether the dev SSR runner BUNDLES `pkgName` (it is in Vite's\n * `ssr.noExternal`) rather than handing it to Node.\n *\n * This decides which loader a package's backend must be loaded with. A module\n * has to be evaluated by the same loader that evaluates the package everywhere\n * else in the SSR graph, or it runs twice:\n *\n *  - `vite.ssrLoadModule('<external pkg>/backend')` transforms that entry and\n *    its relative imports even though the package is external, while the app's\n *    bare imports of the same package are evaluated by Node — two copies of the\n *    package's module state.\n *  - a plain `import()` of a BUNDLED package goes to Node, while the app's\n *    imports of it are evaluated by Vite — the same split the other way round.\n *\n * Vite matches `noExternal` entries against the bare package name, so a\n * subpath (`pkg/backend`) is covered by an entry for `pkg`.\n */\nexport function isBundledBySsr(pkgName: string, noExternal: unknown): boolean {\n  if (noExternal === true) return true;\n  const entries = Array.isArray(noExternal)\n    ? noExternal\n    : noExternal\n      ? [noExternal]\n      : [];\n  return entries.some((entry) =>\n    typeof entry === 'string'\n      ? entry === pkgName\n      : entry instanceof RegExp\n        ? entry.test(pkgName)\n        : false\n  );\n}\n\n/** The dev SSR runner's resolved `noExternal`, wherever this Vite keeps it. */\nexport function ssrNoExternalOf(vite: any): unknown {\n  return (\n    vite?.config?.ssr?.noExternal ??\n    vite?.config?.environments?.ssr?.resolve?.noExternal\n  );\n}\n\n/**\n * The backend entry of a package the dev Vite runner owns (see isBundledBySsr):\n * its source backend when it is a source package (resolveSourceBackendEntry),\n * otherwise what `exports` names under the `development` condition and Node's\n * import conditions. A registry install has no src/, so it resolves exactly\n * as before.\n */\nexport function resolveDevBackendEntry(\n  pkgRoot: string,\n  pkgJson: any\n): string | null {\n  return (\n    resolveSourceBackendEntry(pkgRoot, pkgJson) ??\n    resolveBackendEntry(pkgRoot, pkgJson, [\n      'development',\n      ...NODE_IMPORT_CONDITIONS,\n    ])\n  );\n}\n"]}

package/package.json

@@ -10,7 +10,7 @@
     "type": "git",
     "url": "git+https://github.com/linked-fw/server.git"
   },
-  "version": "2.24.10",
+  "version": "2.25.0",
   "packageManager": "npm@12.2.0",
   "linkedPackage": true,
   "type": "module",

package/readme.md

@@ -19,6 +19,9 @@ If you want to further adjust the functionality of LincdServer yourself, either
   - [Generic backend providers](#generic-backend-providers)
   - [Gotchas](#gotchas)
   - [Error semantics](#error-semantics)
+- [Query stores](#query-stores)
+  - [BackendAPIStore](#backendapistore)
+  - [GatewayStore](#gatewaystore)
 - [API-only servers (`server.apiOnly`)](#api-only-servers-serverapionly)
 - [Provider lifecycle and HMR](#provider-lifecycle-and-hmr)
   - [When a provider throws, and refusing to start](#when-a-provider-throws-and-refusing-to-start)
@@ -232,6 +235,72 @@ What the caller sees depends on how it calls:
   - An unmatched call resolves `undefined` by default and rejects with a 501 `ServerCallError` when `rejectOnError` is set.
 - **`BackendAPIStore`.** It always uses `rejectOnError`, so a failed query rejects with the status and message. A successful call resolves with whatever the provider returned, `undefined` included.
 
+## Query stores
+
+Two `IDataset` implementations in this package forward Linked Queries over HTTP instead of
+answering them. Both ship `query.toJSON()` and resolve with the plain JSON rows the other side
+returns; neither offers raw SPARQL (`rawQuery`), dataset administration or a change feed.
+
+| | `BackendAPIStore` | `GatewayStore` |
+| --- | --- | --- |
+| Runs in | the browser (or any client of this package's `/call` routes) | a backend process |
+| Sends to | this app's own backend, through `Server.call` (`/call/<package>/<method>`) | a gateway of another service: `POST {endpoint}/query` |
+| Authenticated by | the user's session | a bearer credential the gateway issued to this process |
+| Who picks the dataset | the backend's `LinkedStorage` | the gateway, from the credential |
+
+### BackendAPIStore
+
+Export path `@_linked/server/shapes/quadstores/BackendAPIStore`. Selected in
+`linked.frontend.datasets.json`; `config` may carry a `name` or `id`, neither of which affects
+routing. Its error semantics are under [Error semantics](#error-semantics).
+
+### GatewayStore
+
+Export path `@_linked/server/shapes/quadstores/GatewayStore` (named export `GatewayStore`, so
+`loadStores` resolves it by the last path segment). It is for a backend whose data lives behind
+a gateway run by the host that started it — for example an app process started by Create Now,
+whose queries go to CN's gateway so that branch forks, authorization and audit apply to app
+traffic.
+
+```json
+{
+  "datasets": {
+    "gateway": {
+      "store": "@_linked/server/shapes/quadstores/GatewayStore",
+      "config": { "endpoint": "${CN_EG_GATEWAY:-}", "credential": "${CN_APP_SERVICE_SECRET:-}" }
+    }
+  }
+}
+```
+
+```typescript
+export interface GatewayStoreConfig {
+  endpoint: string;   // base URL of the gateway, routes are appended: `${endpoint}/query`, `${endpoint}/health`
+  credential: string; // sent as `Authorization: Bearer <credential>`
+  fetch?: typeof fetch; // transport override, default `globalThis.fetch`
+}
+```
+
+- The constructor throws at once when `endpoint` or `credential` is empty. The `:-` defaults in
+  the JSON keep `parseDatasetsConfig` from throwing when the variables are unset; a storage file
+  instantiates the alias only when the host set them (the presence of `CN_EG_GATEWAY` is the
+  mode switch; `CN_APP_SERVICE_SECRET` is injected into the process environment, never written
+  to `.env`).
+- `init()` is `GET {endpoint}/health` and resolves with the gateway's answer
+  (`{projectId, branchName, dataset}`). It throws `GatewayUnreachableError` when the gateway
+  cannot be reached or refuses the credential. `LinkedStorage.setDefaultDataset` does not await
+  `init()`, so a boot that must fail loudly awaits `init()` itself before registering the store.
+  Calling it again is harmless.
+- Every query method posts `{ "v": 1, "op": "select" | "ask" | "update" | "create" | "delete", "query": <query.toJSON()> }`
+  and resolves with the body's `result`. A count arrives through `selectQuery` with `op: "select"`
+  (the gateway dispatches on the query's own `op`). Nothing about the project, branch or actor is
+  in the body: the credential decides all three.
+- Errors: a network failure and a `401` reject with `GatewayUnreachableError` (`status` 0 or 401);
+  any other non-2xx answer rejects with `GatewayStoreError`, whose `code` is the body's `code`
+  (`bad-request`, `wire-version`, `unknown-shape`, `refused`, `fork-failed`, `query-failed`),
+  else `http-<status>`, with the parsed body on `body`. `GatewayUnreachableError extends
+  GatewayStoreError`.
+
 ## API-only servers (`server.apiOnly`)
 
 A backend that serves no frontend app (e.g. started with `linked start --api-only`) can set `apiOnly` in its server config: