@_linked/server 3.13.0 → 3.14.0

package/CHANGELOG.md

@@ -1,5 +1,38 @@
 # @\_linked/server
 
+## 3.14.0
+
+### Minor Changes
+
+- [#223](https://github.com/linked-fw/server/pull/223) [`47f7d72`](https://github.com/linked-fw/server/commit/47f7d7294ef433e46c1098576286a5311ad55fb5) Thanks [@flyon](https://github.com/flyon)! - `POST /admin/sync-shapes` is removed from the admin channel. A host that changed an app's shape
+  code asks `POST /admin/graph-content {reload: [packages]}`: it reloads those packages (in dev),
+  registers the ontologies again, runs the shape check and answers the content of the app's graphs,
+  writing nothing; the host writes them (`LINKED_GRAPH_WRITER=host`). The route answers 404, and
+  `ShapeSyncResult`, `parseSyncShapesBody`, the `syncShapes` admin handler and
+  `syncOntologiesThenShapes` are gone.
+
+  The env boot flags `LINKED_SYNC_SHAPES_ON_BOOT` and `LINKED_SYNC_ONTOLOGIES_ON_BOOT` are removed.
+  The boot syncs the shapes and the ontologies when the app writes its own graphs
+  (`LINKED_GRAPH_WRITER` unset or `app`) and `linked.config` does not set `syncShapesOnBoot: false`,
+  the one switch for both. `shapeSyncOn(configFlag)` takes the config switch only;
+  `bootSyncsOntologies` is gone.
+
+- [#223](https://github.com/linked-fw/server/pull/223) [`c7e09cc`](https://github.com/linked-fw/server/commit/c7e09cc4e8c1d04d418e5d730890e517f1406c62) Thanks [@flyon](https://github.com/flyon)! - The boot's ontology and shape syncs follow the app's storage
+  routing through core's routed syncs: each package's graphs go into every dataset the routing needs
+  them in, a graph routing no longer sends to the default dataset is dropped there, and one left in
+  another dataset is reported. With pins the boot logs one line naming the target datasets; the
+  earlier warning that the syncs write into the default dataset only is gone.
+
+  New `LINKED_GRAPH_WRITER=app|host`: under `host` the app writes no shape or ontology graph, and
+  `GET /admin/routes` reports `graphWriter`. New `POST /admin/graph-content {packages?, reload?}` on
+  the admin channel answers, writing nothing, each package's shape and ontology graph and the app's
+  own shape graph as `{graph, mediaType, text, hash, sources}`: the exact bytes and hash the
+  `'package'`-mode sync writes.
+
+- [#223](https://github.com/linked-fw/server/pull/223) [`34ac38d`](https://github.com/linked-fw/server/commit/34ac38d7f5f7a8c695504598bd4b7b82dca77485) Thanks [@flyon](https://github.com/flyon)! - One read method, for `@_linked/core`'s `IDataset.readQuery` (core 2.46, DSL-JSON 1.10; the `@_linked/core` range is raised to `^2.46.0`). The generic provider's `selectQuery` and `askQuery` endpoints are replaced by one, `POST /call/@_linked/server/readQuery` (`@callable('public')`), which answers a select, a count or an ask: the body's kind is read before it is decoded (`readKindOfJSON`) and picks the access rule (`select` for a select or a count, `ask` for an ask), and the decoded query must be of that kind. A triples or terms read, a graph query and a write posted to it answer 400 (and roll back the caller's transaction they name). `/api/select` checks its read by kind the same way (an ask posted there is now answered, under the ask rule, where it was refused with 400; a body naming a transaction that does not decode now rolls it back). A store's function `read` rule sees `operation: 'ask'` for an ask, as it did from `askQuery`. `RemoteDataset` implements `readQuery` (select, count and ask go to the `readQuery` endpoint; triples and terms reads are refused without being sent) and declares `supports: ['ask']`, plus `'transactions'` after a ping that lists them. `graphQuery` and the write endpoints are unchanged. A client on an older `@_linked/server` gets `501 No provider` for its reads from this server.
+
+- [#223](https://github.com/linked-fw/server/pull/223) [`6538642`](https://github.com/linked-fw/server/commit/653864235823695adbc1a1a21739226bace334bc) Thanks [@flyon](https://github.com/flyon)! - Store transactions over `/call`: `beginTransaction`, `commit(txId)` and `rollback(txId)` on the generic provider, and queries that carry a `txId` run in the caller's transaction (checked against the store rules as if sent alone; a refusal rolls it back). The server holds transactions only when every dataset `LinkedStorage` routes to declares `'transactions'`, and its `ping` then answers `supports: ['transactions']`. A txId is bound to the session's user; another caller's is refused. `RemoteDataset` declares `'transactions'` after such a ping (the no-url form now pings its backend for this), and gains `beginTransaction`, `commit` and `rollback`. A query with a txId on `/api/*`, and a graph query with one, are refused; any refusal of a request naming the caller's own transaction rolls it back.
+
 ## 3.13.0
 
 ### Minor Changes

package/lib/esm/backend.d.ts

@@ -4,15 +4,33 @@ export default class LincdServerBackendProvider extends BackendProvider {
     /**
      * Reachability check for a `RemoteDataset` pointed at this server: reads nothing, changes
      * nothing. A plain linked server has no token concept, so it always answers `{ok: true}`;
-     * a host that serves the wire with tokens answers 401 for a refused one.
+     * a host that serves the wire with tokens answers 401 for a refused one. `supports` lists
+     * `'transactions'` when this server holds store transactions (every store it routes to does);
+     * `RemoteDataset` declares them only then.
      */
     ping(): Promise<{
         ok: true;
+        supports: string[];
     }>;
-    selectQuery(json: any): Promise<unknown>;
-    askQuery(json: any): Promise<boolean>;
-    updateQuery(json: any): Promise<unknown>;
-    createQuery(json: any): Promise<unknown>;
+    beginTransaction(): Promise<string>;
+    commit(txId: unknown): Promise<void>;
+    rollback(txId: unknown): Promise<void>;
+    /**
+     * Decode, check and run one generic query. `decode` turns the body into the builder the store
+     * runs and the access rule it is checked under (a write's rule is its endpoint's; a read's
+     * follows its kind, see `toReadQuery`). One that carries a txId runs in its transaction: the
+     * caller's own, checked against the store rules as if it were sent alone. Any refusal or
+     * failure of it (a body that does not decode included) rolls the transaction back.
+     */
+    private genericQuery;
+    /**
+     * Every read: a select, a count or an ask (DSL-JSON, told apart by `op`). The body's kind picks
+     * the access rule (`select` for a select or a count, `ask` for an ask; see `toReadQuery`).
+     * Triples and terms reads, graph queries and writes are refused with 400.
+     */
+    readQuery(json: any): Promise<number | boolean | string[] | import("@_linked/core/queries/IntermediateRepresentation.js").SelectResult | import("@_linked/core").Triple[]>;
+    updateQuery(json: any): Promise<import("@_linked/core/queries/IntermediateRepresentation.js").UpdateResult>;
+    createQuery(json: any): Promise<import("@_linked/core/queries/IntermediateRepresentation.js").ResultRow>;
     deleteQuery(json: any): Promise<import("@_linked/core/queries/DeleteQuery.js").DeleteResponse>;
     /**
      * A whole-graph operation (`graph_create`, `graph_replace`, `graph_patch`, `graph_drop`), as

package/lib/esm/backend.js

@@ -12,10 +12,25 @@ import { callable } from '@_linked/server-utils/utils/callable';
 import { LinkedFileStorage } from '@_linked/core/utils/LinkedFileStorage';
 import { LinkedStorage } from '@_linked/core/utils/LinkedStorage';
 import { LocalFileStore } from './shapes/filestores/LocalFileStore.js';
-import { authorizeGenericQuery, authorizeGraphQuery, graphQueryCallError, resolveQueryCatalog, toGraphQuery, toQueryBuilder, } from './utils/queryPlane.js';
+import { authorizeGenericQuery, authorizeGraphQuery, graphQueryCallError, resolveQueryCatalog, toGraphQuery, toQueryBuilder, toReadQuery, } from './utils/queryPlane.js';
 import { ServerCallError } from '@_linked/server-utils/utils/ServerCallError';
+import { txIdOf } from '@_linked/core/queries/transactionQuery';
+import { UnresolvedContextError } from '@_linked/core/queries/QueryContext';
+import { isLinkedError } from '@_linked/core/utils/linkedError';
+import { abandonTransactionOf, assertStoresHoldTransactions, storesHoldTransactions, transactionCallError, transactionCaller, transactions, } from './utils/serverTransactions.js';
 import path from 'path';
 import fs from 'fs/promises';
+/** A write's decoder for `genericQuery`: the body as its builder, checked under the endpoint's own rule. */
+function writeOf(operation) {
+    return (json, catalog) => ({
+        query: toQueryBuilder(json, catalog),
+        operation,
+    });
+}
+function assertTxId(txId) {
+    if (typeof txId !== 'string' || !txId)
+        throw new ServerCallError(400, 'Expected a transaction id');
+}
 export default class LincdServerBackendProvider extends BackendProvider {
     async setupBeforeControllers() {
         if (!LinkedFileStorage.getDefaultStore()) {
@@ -34,10 +49,76 @@ export default class LincdServerBackendProvider extends BackendProvider {
     /**
      * Reachability check for a `RemoteDataset` pointed at this server: reads nothing, changes
      * nothing. A plain linked server has no token concept, so it always answers `{ok: true}`;
-     * a host that serves the wire with tokens answers 401 for a refused one.
+     * a host that serves the wire with tokens answers 401 for a refused one. `supports` lists
+     * `'transactions'` when this server holds store transactions (every store it routes to does);
+     * `RemoteDataset` declares them only then.
      */
     async ping() {
-        return { ok: true };
+        return { ok: true, supports: storesHoldTransactions() ? ['transactions'] : [] };
+    }
+    // ── Store transactions ───────────────────────────────────────────────────
+    //
+    // `RemoteDataset.beginTransaction()` / `commit(txId)` / `rollback(txId)` (core report 103). The
+    // server answers its own txId and holds a core `Transaction` for it, which opens a transaction
+    // in each store a query of it routes to. The txId is bound to the caller that began it.
+    // A server whose stores do not all hold transactions answers 501 `transactions-unsupported`;
+    // an unknown or expired txId 409 `transaction-unknown` (a rollback of one resolves); another
+    // caller's txId 403 `transaction-not-yours`.
+    async beginTransaction() {
+        try {
+            const caller = transactionCaller();
+            assertStoresHoldTransactions();
+            return transactions.begin(caller, LinkedStorage.begin());
+        }
+        catch (err) {
+            throw transactionCallError(err);
+        }
+    }
+    async commit(txId) {
+        assertTxId(txId);
+        try {
+            await transactions.commit(txId, transactionCaller());
+        }
+        catch (err) {
+            throw transactionCallError(err);
+        }
+    }
+    async rollback(txId) {
+        assertTxId(txId);
+        try {
+            await transactions.rollback(txId, transactionCaller());
+        }
+        catch (err) {
+            throw transactionCallError(err);
+        }
+    }
+    /**
+     * Decode, check and run one generic query. `decode` turns the body into the builder the store
+     * runs and the access rule it is checked under (a write's rule is its endpoint's; a read's
+     * follows its kind, see `toReadQuery`). One that carries a txId runs in its transaction: the
+     * caller's own, checked against the store rules as if it were sent alone. Any refusal or
+     * failure of it (a body that does not decode included) rolls the transaction back.
+     */
+    async genericQuery(json, decode, endpoint, inTransaction, direct) {
+        try {
+            const { query, operation } = decode(json, await resolveQueryCatalog(json));
+            const authorize = () => authorizeGenericQuery(operation, json, query, endpoint);
+            if (!txIdOf(query)) {
+                await authorize();
+                return await direct(query);
+            }
+            assertStoresHoldTransactions();
+            return await transactions.query(query, transactionCaller(), async () => {
+                assertStoresHoldTransactions();
+                await authorize();
+            }, inTransaction);
+        }
+        catch (err) {
+            // A select whose query context is not ready did not run: it fails nothing (as in core).
+            if (!isLinkedError(err, UnresolvedContextError))
+                await abandonTransactionOf(json);
+            throw transactionCallError(err);
+        }
     }
     // ── Generic query execution ──────────────────────────────────────────────
     //
@@ -49,8 +130,10 @@ export default class LincdServerBackendProvider extends BackendProvider {
     // A query cannot cross the wire live, so the client ships `toJSON()` and `fromJSON()`
     // rehydrates it here into a live, closed query. `LinkedStorage` then routes it by the
     // QUERY's shape, which is what decides the target dataset; the store instance never
-    // participates. The host's catalog resolver (`setQueryCatalogResolver`) picks the shape
-    // catalog the JSON is decoded in; the builder keeps it for both lowerings.
+    // participates. A query that carries a txId (DSL-JSON 1.5) runs in the caller's
+    // transaction instead (see "Store transactions" above). The host's catalog resolver
+    // (`setQueryCatalogResolver`) picks the shape catalog the JSON is decoded in; the builder
+    // keeps it for both lowerings.
     //
     // Every query is checked first against the access rules of the stores it
     // maps to, declared in the app's storage config (`withAccess`; a store with
@@ -58,30 +141,22 @@ export default class LincdServerBackendProvider extends BackendProvider {
     // rethought. The store runs the builder that was checked. They are declared
     // 'public' because that check, not the RPC layer, decides whether a session
     // is required.
-    async selectQuery(json) {
-        const query = toQueryBuilder(json, await resolveQueryCatalog(json));
-        await authorizeGenericQuery('select', json, query, 'selectQuery');
-        return LinkedStorage.selectQuery(query);
-    }
-    async askQuery(json) {
-        const query = toQueryBuilder(json, await resolveQueryCatalog(json));
-        await authorizeGenericQuery('ask', json, query, 'askQuery');
-        return LinkedStorage.askQuery(query);
+    /**
+     * Every read: a select, a count or an ask (DSL-JSON, told apart by `op`). The body's kind picks
+     * the access rule (`select` for a select or a count, `ask` for an ask; see `toReadQuery`).
+     * Triples and terms reads, graph queries and writes are refused with 400.
+     */
+    async readQuery(json) {
+        return this.genericQuery(json, toReadQuery, 'readQuery', (tx, q) => tx.readQuery(q), (q) => LinkedStorage.readQuery(q));
     }
     async updateQuery(json) {
-        const query = toQueryBuilder(json, await resolveQueryCatalog(json));
-        await authorizeGenericQuery('update', json, query, 'updateQuery');
-        return LinkedStorage.updateQuery(query);
+        return this.genericQuery(json, writeOf('update'), 'updateQuery', (tx, q) => tx.updateQuery(q), (q) => LinkedStorage.updateQuery(q));
     }
     async createQuery(json) {
-        const query = toQueryBuilder(json, await resolveQueryCatalog(json));
-        await authorizeGenericQuery('create', json, query, 'createQuery');
-        return LinkedStorage.createQuery(query);
+        return this.genericQuery(json, writeOf('create'), 'createQuery', (tx, q) => tx.createQuery(q), (q) => LinkedStorage.createQuery(q));
     }
     async deleteQuery(json) {
-        const query = toQueryBuilder(json, await resolveQueryCatalog(json));
-        await authorizeGenericQuery('delete', json, query, 'deleteQuery');
-        return LinkedStorage.deleteQuery(query);
+        return this.genericQuery(json, writeOf('delete'), 'deleteQuery', (tx, q) => tx.deleteQuery(q), (q) => LinkedStorage.deleteQuery(q));
     }
     /**
      * A whole-graph operation (`graph_create`, `graph_replace`, `graph_patch`, `graph_drop`), as
@@ -92,6 +167,10 @@ export default class LincdServerBackendProvider extends BackendProvider {
      * `graphQueryCallError`).
      */
     async graphQuery(json) {
+        if (json && typeof json === 'object' && 'txId' in json) {
+            await abandonTransactionOf(json);
+            throw new ServerCallError(400, 'A graph query does not run in a transaction');
+        }
         const query = toGraphQuery(json);
         await authorizeGraphQuery(json, query, 'graphQuery');
         if (!query)
@@ -110,18 +189,30 @@ __decorate([
     __metadata("design:paramtypes", []),
     __metadata("design:returntype", Promise)
 ], LincdServerBackendProvider.prototype, "ping", null);
+__decorate([
+    callable('public'),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", []),
+    __metadata("design:returntype", Promise)
+], LincdServerBackendProvider.prototype, "beginTransaction", null);
+__decorate([
+    callable('public'),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object]),
+    __metadata("design:returntype", Promise)
+], LincdServerBackendProvider.prototype, "commit", null);
 __decorate([
     callable('public'),
     __metadata("design:type", Function),
     __metadata("design:paramtypes", [Object]),
     __metadata("design:returntype", Promise)
-], LincdServerBackendProvider.prototype, "selectQuery", null);
+], LincdServerBackendProvider.prototype, "rollback", null);
 __decorate([
     callable('public'),
     __metadata("design:type", Function),
     __metadata("design:paramtypes", [Object]),
     __metadata("design:returntype", Promise)
-], LincdServerBackendProvider.prototype, "askQuery", null);
+], LincdServerBackendProvider.prototype, "readQuery", null);
 __decorate([
     callable('public'),
     __metadata("design:type", Function),

package/lib/esm/backend.js.map

@@ -1 +1 @@
-{"version":3,"file":"backend.js","sourceRoot":"","sources":["../../src/backend.ts"],"names":[],"mappings":";;;;;;;;;AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,6CAA6C,CAAC;AAC9E,OAAO,EAAE,QAAQ,EAAE,MAAM,sCAAsC,CAAC;AAChE,OAAO,EAAE,iBAAiB,EAAE,MAAM,uCAAuC,CAAC;AAC1E,OAAO,EAAE,aAAa,EAAE,MAAM,mCAAmC,CAAC;AAClE,OAAO,EAAE,cAAc,EAAE,MAAM,uCAAuC,CAAC;AACvE,OAAO,EACL,qBAAqB,EACrB,mBAAmB,EACnB,mBAAmB,EACnB,mBAAmB,EACnB,YAAY,EACZ,cAAc,GACf,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,eAAe,EAAE,MAAM,6CAA6C,CAAC;AAC9E,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,EAAE,MAAM,aAAa,CAAC;AAE7B,MAAM,CAAC,OAAO,OAAO,0BAA2B,SAAQ,eAAe;IACrE,KAAK,CAAC,sBAAsB;QAC1B,IAAI,CAAC,iBAAiB,CAAC,eAAe,EAAE,EAAE,CAAC;YACzC,iBAAiB,CAAC,eAAe,CAC/B,IAAI,cAAc,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,GAAG,YAAY,CAAC,CACxD,CAAC;QACJ,CAAC;QACD,IAAI,oBAAoB,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;QAC3D,IAAI,CAAC;YACH,MAAM,EAAE,CAAC,MAAM,CAAC,oBAAoB,CAAC,CAAC;QACxC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,oBAAoB,EAAE,YAAY,CAAC,EAAE;gBAC5D,SAAS,EAAE,IAAI;aAChB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED;;;;OAIG;IAEG,AAAN,KAAK,CAAC,IAAI;QACR,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IACtB,CAAC;IAED,4EAA4E;IAC5E,EAAE;IACF,wDAAwD;IACxD,0FAA0F;IAC1F,wFAAwF;IACxF,qFAAqF;IACrF,EAAE;IACF,sFAAsF;IACtF,sFAAsF;IACtF,oFAAoF;IACpF,wFAAwF;IACxF,2EAA2E;IAC3E,EAAE;IACF,yEAAyE;IACzE,4EAA4E;IAC5E,0EAA0E;IAC1E,4EAA4E;IAC5E,4EAA4E;IAC5E,eAAe;IAGT,AAAN,KAAK,CAAC,WAAW,CAAC,IAAS;QACzB,MAAM,KAAK,GAAG,cAAc,CAAC,IAAI,EAAE,MAAM,mBAAmB,CAAC,IAAI,CAAC,CAAC,CAAC;QACpE,MAAM,qBAAqB,CAAC,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,aAAa,CAAC,CAAC;QAClE,OAAO,aAAa,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;IAC1C,CAAC;IAGK,AAAN,KAAK,CAAC,QAAQ,CAAC,IAAS;QACtB,MAAM,KAAK,GAAG,cAAc,CAAC,IAAI,EAAE,MAAM,mBAAmB,CAAC,IAAI,CAAC,CAAC,CAAC;QACpE,MAAM,qBAAqB,CAAC,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC;QAC5D,OAAO,aAAa,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IACvC,CAAC;IAGK,AAAN,KAAK,CAAC,WAAW,CAAC,IAAS;QACzB,MAAM,KAAK,GAAG,cAAc,CAAC,IAAI,EAAE,MAAM,mBAAmB,CAAC,IAAI,CAAC,CAAC,CAAC;QACpE,MAAM,qBAAqB,CAAC,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,aAAa,CAAC,CAAC;QAClE,OAAO,aAAa,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;IAC1C,CAAC;IAGK,AAAN,KAAK,CAAC,WAAW,CAAC,IAAS;QACzB,MAAM,KAAK,GAAG,cAAc,CAAC,IAAI,EAAE,MAAM,mBAAmB,CAAC,IAAI,CAAC,CAAC,CAAC;QACpE,MAAM,qBAAqB,CAAC,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,aAAa,CAAC,CAAC;QAClE,OAAO,aAAa,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;IAC1C,CAAC;IAGK,AAAN,KAAK,CAAC,WAAW,CAAC,IAAS;QACzB,MAAM,KAAK,GAAG,cAAc,CAAC,IAAI,EAAE,MAAM,mBAAmB,CAAC,IAAI,CAAC,CAAC,CAAC;QACpE,MAAM,qBAAqB,CAAC,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,aAAa,CAAC,CAAC;QAClE,OAAO,aAAa,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;IAC1C,CAAC;IAED;;;;;;;OAOG;IAEG,AAAN,KAAK,CAAC,UAAU,CAAC,IAAS;QACxB,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;QACjC,MAAM,mBAAmB,CAAC,IAAI,EAAE,KAAK,EAAE,YAAY,CAAC,CAAC;QACrD,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,eAAe,CAAC,GAAG,EAAE,qBAAqB,CAAC,CAAC;QAClE,IAAI,CAAC;YACH,OAAO,MAAM,aAAa,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QAC/C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,mBAAmB,CAAC,GAAG,CAAC,CAAC;QACjC,CAAC;IACH,CAAC;CACF;AA9EO;IADL,QAAQ,CAAC,QAAQ,CAAC;;;;sDAGlB;AAuBK;IADL,QAAQ,CAAC,QAAQ,CAAC;;;;6DAKlB;AAGK;IADL,QAAQ,CAAC,QAAQ,CAAC;;;;0DAKlB;AAGK;IADL,QAAQ,CAAC,QAAQ,CAAC;;;;6DAKlB;AAGK;IADL,QAAQ,CAAC,QAAQ,CAAC;;;;6DAKlB;AAGK;IADL,QAAQ,CAAC,QAAQ,CAAC;;;;6DAKlB;AAWK;IADL,QAAQ,CAAC,QAAQ,CAAC;;;;4DAUlB","sourcesContent":["import { BackendProvider } from '@_linked/server-utils/utils/BackendProvider';\nimport { callable } from '@_linked/server-utils/utils/callable';\nimport { LinkedFileStorage } from '@_linked/core/utils/LinkedFileStorage';\nimport { LinkedStorage } from '@_linked/core/utils/LinkedStorage';\nimport { LocalFileStore } from './shapes/filestores/LocalFileStore.js';\nimport {\n  authorizeGenericQuery,\n  authorizeGraphQuery,\n  graphQueryCallError,\n  resolveQueryCatalog,\n  toGraphQuery,\n  toQueryBuilder,\n} from './utils/queryPlane.js';\nimport { ServerCallError } from '@_linked/server-utils/utils/ServerCallError';\nimport path from 'path';\nimport fs from 'fs/promises';\n\nexport default class LincdServerBackendProvider extends BackendProvider {\n  async setupBeforeControllers() {\n    if (!LinkedFileStorage.getDefaultStore()) {\n      LinkedFileStorage.setDefaultStore(\n        new LocalFileStore(process.env.NODE_ENV + '-filestore')\n      );\n    }\n    let fileSystemUploadPath = path.join('data', 'filestores');\n    try {\n      await fs.access(fileSystemUploadPath);\n    } catch (err) {\n      await fs.mkdir(path.join(fileSystemUploadPath, 'filestores'), {\n        recursive: true,\n      });\n    }\n  }\n\n  /**\n   * Reachability check for a `RemoteDataset` pointed at this server: reads nothing, changes\n   * nothing. A plain linked server has no token concept, so it always answers `{ok: true}`;\n   * a host that serves the wire with tokens answers 401 for a refused one.\n   */\n  @callable('public')\n  async ping(): Promise<{ ok: true }> {\n    return { ok: true };\n  }\n\n  // ── Generic query execution ──────────────────────────────────────────────\n  //\n  // These answer `RemoteDataset`: a browser's store calls\n  // `Server.call(packageName, {method}, json)` (the PACKAGE form), and a remote app's store\n  // posts the same `{args}` body to `{url}/call/@_linked/server/<method>`. Either way the\n  // request arrives here on the generic provider rather than through Shape resolution.\n  //\n  // A query cannot cross the wire live, so the client ships `toJSON()` and `fromJSON()`\n  // rehydrates it here into a live, closed query. `LinkedStorage` then routes it by the\n  // QUERY's shape, which is what decides the target dataset; the store instance never\n  // participates. The host's catalog resolver (`setQueryCatalogResolver`) picks the shape\n  // catalog the JSON is decoded in; the builder keeps it for both lowerings.\n  //\n  // Every query is checked first against the access rules of the stores it\n  // maps to, declared in the app's storage config (`withAccess`; a store with\n  // no rule requires a session): see utils/queryPlane. INTERIM model, to be\n  // rethought. The store runs the builder that was checked. They are declared\n  // 'public' because that check, not the RPC layer, decides whether a session\n  // is required.\n\n  @callable('public')\n  async selectQuery(json: any) {\n    const query = toQueryBuilder(json, await resolveQueryCatalog(json));\n    await authorizeGenericQuery('select', json, query, 'selectQuery');\n    return LinkedStorage.selectQuery(query);\n  }\n\n  @callable('public')\n  async askQuery(json: any) {\n    const query = toQueryBuilder(json, await resolveQueryCatalog(json));\n    await authorizeGenericQuery('ask', json, query, 'askQuery');\n    return LinkedStorage.askQuery(query);\n  }\n\n  @callable('public')\n  async updateQuery(json: any) {\n    const query = toQueryBuilder(json, await resolveQueryCatalog(json));\n    await authorizeGenericQuery('update', json, query, 'updateQuery');\n    return LinkedStorage.updateQuery(query);\n  }\n\n  @callable('public')\n  async createQuery(json: any) {\n    const query = toQueryBuilder(json, await resolveQueryCatalog(json));\n    await authorizeGenericQuery('create', json, query, 'createQuery');\n    return LinkedStorage.createQuery(query);\n  }\n\n  @callable('public')\n  async deleteQuery(json: any) {\n    const query = toQueryBuilder(json, await resolveQueryCatalog(json));\n    await authorizeGenericQuery('delete', json, query, 'deleteQuery');\n    return LinkedStorage.deleteQuery(query);\n  }\n\n  /**\n   * A whole-graph operation (`graph_create`, `graph_replace`, `graph_patch`, `graph_drop`), as\n   * `RemoteDataset.graphQuery` sends it. The query is plain data: core's `parseGraphQuery` checks\n   * it, the `graph` rule of the store its record class routes to decides (no rule refuses), and\n   * `LinkedStorage.graphQuery` runs it outside any shape catalog; no catalog is resolved for it,\n   * so the check resolves the same store. A store's refusal answers with its code (see\n   * `graphQueryCallError`).\n   */\n  @callable('public')\n  async graphQuery(json: any) {\n    const query = toGraphQuery(json);\n    await authorizeGraphQuery(json, query, 'graphQuery');\n    if (!query) throw new ServerCallError(400, 'Invalid graph query');\n    try {\n      return await LinkedStorage.graphQuery(query);\n    } catch (err) {\n      throw graphQueryCallError(err);\n    }\n  }\n}\n"]}
+{"version":3,"file":"backend.js","sourceRoot":"","sources":["../../src/backend.ts"],"names":[],"mappings":";;;;;;;;;AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,6CAA6C,CAAC;AAC9E,OAAO,EAAE,QAAQ,EAAE,MAAM,sCAAsC,CAAC;AAChE,OAAO,EAAE,iBAAiB,EAAE,MAAM,uCAAuC,CAAC;AAC1E,OAAO,EAAE,aAAa,EAAE,MAAM,mCAAmC,CAAC;AAClE,OAAO,EAAE,cAAc,EAAE,MAAM,uCAAuC,CAAC;AAEvE,OAAO,EACL,qBAAqB,EACrB,mBAAmB,EACnB,mBAAmB,EACnB,mBAAmB,EACnB,YAAY,EACZ,cAAc,EACd,WAAW,GACZ,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,eAAe,EAAE,MAAM,6CAA6C,CAAC;AAC9E,OAAO,EAAE,MAAM,EAAE,MAAM,wCAAwC,CAAC;AAChE,OAAO,EAAE,sBAAsB,EAAE,MAAM,oCAAoC,CAAC;AAC5E,OAAO,EAAE,aAAa,EAAE,MAAM,iCAAiC,CAAC;AAGhE,OAAO,EACL,oBAAoB,EACpB,4BAA4B,EAC5B,sBAAsB,EACtB,oBAAoB,EACpB,iBAAiB,EACjB,YAAY,GACb,MAAM,+BAA+B,CAAC;AACvC,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,EAAE,MAAM,aAAa,CAAC;AAE7B,4GAA4G;AAC5G,SAAS,OAAO,CAAC,SAAkE;IACjF,OAAO,CAAC,IAAa,EAAE,OAAiC,EAAE,EAAE,CAAC,CAAC;QAC5D,KAAK,EAAE,cAAc,CAAC,IAAI,EAAE,OAAO,CAAC;QACpC,SAAS;KACV,CAAC,CAAC;AACL,CAAC;AAED,SAAS,UAAU,CAAC,IAAa;IAC/B,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,IAAI;QAAE,MAAM,IAAI,eAAe,CAAC,GAAG,EAAE,2BAA2B,CAAC,CAAC;AACrG,CAAC;AAED,MAAM,CAAC,OAAO,OAAO,0BAA2B,SAAQ,eAAe;IACrE,KAAK,CAAC,sBAAsB;QAC1B,IAAI,CAAC,iBAAiB,CAAC,eAAe,EAAE,EAAE,CAAC;YACzC,iBAAiB,CAAC,eAAe,CAC/B,IAAI,cAAc,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,GAAG,YAAY,CAAC,CACxD,CAAC;QACJ,CAAC;QACD,IAAI,oBAAoB,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;QAC3D,IAAI,CAAC;YACH,MAAM,EAAE,CAAC,MAAM,CAAC,oBAAoB,CAAC,CAAC;QACxC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,oBAAoB,EAAE,YAAY,CAAC,EAAE;gBAC5D,SAAS,EAAE,IAAI;aAChB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED;;;;;;OAMG;IAEG,AAAN,KAAK,CAAC,IAAI;QACR,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,sBAAsB,EAAE,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;IAClF,CAAC;IAED,4EAA4E;IAC5E,EAAE;IACF,gGAAgG;IAChG,+FAA+F;IAC/F,wFAAwF;IACxF,6FAA6F;IAC7F,6FAA6F;IAC7F,6CAA6C;IAGvC,AAAN,KAAK,CAAC,gBAAgB;QACpB,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,iBAAiB,EAAE,CAAC;YACnC,4BAA4B,EAAE,CAAC;YAC/B,OAAO,YAAY,CAAC,KAAK,CAAC,MAAM,EAAE,aAAa,CAAC,KAAK,EAAE,CAAC,CAAC;QAC3D,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,oBAAoB,CAAC,GAAG,CAAC,CAAC;QAClC,CAAC;IACH,CAAC;IAGK,AAAN,KAAK,CAAC,MAAM,CAAC,IAAa;QACxB,UAAU,CAAC,IAAI,CAAC,CAAC;QACjB,IAAI,CAAC;YACH,MAAM,YAAY,CAAC,MAAM,CAAC,IAAI,EAAE,iBAAiB,EAAE,CAAC,CAAC;QACvD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,oBAAoB,CAAC,GAAG,CAAC,CAAC;QAClC,CAAC;IACH,CAAC;IAGK,AAAN,KAAK,CAAC,QAAQ,CAAC,IAAa;QAC1B,UAAU,CAAC,IAAI,CAAC,CAAC;QACjB,IAAI,CAAC;YACH,MAAM,YAAY,CAAC,QAAQ,CAAC,IAAI,EAAE,iBAAiB,EAAE,CAAC,CAAC;QACzD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,oBAAoB,CAAC,GAAG,CAAC,CAAC;QAClC,CAAC;IACH,CAAC;IAED;;;;;;OAMG;IACK,KAAK,CAAC,YAAY,CACxB,IAAS,EACT,MAAuG,EACvG,QAAgB,EAChB,aAA0D,EAC1D,MAAkC;QAElC,IAAI,CAAC;YACH,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,MAAM,CAAC,IAAI,EAAE,MAAM,mBAAmB,CAAC,IAAI,CAAC,CAAC,CAAC;YAC3E,MAAM,SAAS,GAAG,GAAG,EAAE,CAAC,qBAAqB,CAAC,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;YAChF,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;gBACnB,MAAM,SAAS,EAAE,CAAC;gBAClB,OAAO,MAAM,MAAM,CAAC,KAAK,CAAC,CAAC;YAC7B,CAAC;YACD,4BAA4B,EAAE,CAAC;YAC/B,OAAO,MAAM,YAAY,CAAC,KAAK,CAC7B,KAAK,EACL,iBAAiB,EAAE,EACnB,KAAK,IAAI,EAAE;gBACT,4BAA4B,EAAE,CAAC;gBAC/B,MAAM,SAAS,EAAE,CAAC;YACpB,CAAC,EACD,aAAa,CACd,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,wFAAwF;YACxF,IAAI,CAAC,aAAa,CAAC,GAAG,EAAE,sBAAsB,CAAC;gBAAE,MAAM,oBAAoB,CAAC,IAAI,CAAC,CAAC;YAClF,MAAM,oBAAoB,CAAC,GAAG,CAAC,CAAC;QAClC,CAAC;IACH,CAAC;IAED,4EAA4E;IAC5E,EAAE;IACF,wDAAwD;IACxD,0FAA0F;IAC1F,wFAAwF;IACxF,qFAAqF;IACrF,EAAE;IACF,sFAAsF;IACtF,sFAAsF;IACtF,oFAAoF;IACpF,gFAAgF;IAChF,oFAAoF;IACpF,0FAA0F;IAC1F,+BAA+B;IAC/B,EAAE;IACF,yEAAyE;IACzE,4EAA4E;IAC5E,0EAA0E;IAC1E,4EAA4E;IAC5E,4EAA4E;IAC5E,eAAe;IAEf;;;;OAIG;IAEG,AAAN,KAAK,CAAC,SAAS,CAAC,IAAS;QACvB,OAAO,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,WAAW,EAAE,WAAW,EAAE,CAAC,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1H,CAAC;IAGK,AAAN,KAAK,CAAC,WAAW,CAAC,IAAS;QACzB,OAAO,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,QAAQ,CAAC,EAAE,aAAa,EAAE,CAAC,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,aAAa,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC;IACtI,CAAC;IAGK,AAAN,KAAK,CAAC,WAAW,CAAC,IAAS;QACzB,OAAO,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,QAAQ,CAAC,EAAE,aAAa,EAAE,CAAC,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,aAAa,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC;IACtI,CAAC;IAGK,AAAN,KAAK,CAAC,WAAW,CAAC,IAAS;QACzB,OAAO,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,QAAQ,CAAC,EAAE,aAAa,EAAE,CAAC,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,aAAa,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC;IACtI,CAAC;IAED;;;;;;;OAOG;IAEG,AAAN,KAAK,CAAC,UAAU,CAAC,IAAS;QACxB,IAAI,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,MAAM,IAAI,IAAI,EAAE,CAAC;YACvD,MAAM,oBAAoB,CAAC,IAAI,CAAC,CAAC;YACjC,MAAM,IAAI,eAAe,CAAC,GAAG,EAAE,6CAA6C,CAAC,CAAC;QAChF,CAAC;QACD,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;QACjC,MAAM,mBAAmB,CAAC,IAAI,EAAE,KAAK,EAAE,YAAY,CAAC,CAAC;QACrD,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,eAAe,CAAC,GAAG,EAAE,qBAAqB,CAAC,CAAC;QAClE,IAAI,CAAC;YACH,OAAO,MAAM,aAAa,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QAC/C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,mBAAmB,CAAC,GAAG,CAAC,CAAC;QACjC,CAAC;IACH,CAAC;CACF;AAxJO;IADL,QAAQ,CAAC,QAAQ,CAAC;;;;sDAGlB;AAYK;IADL,QAAQ,CAAC,QAAQ,CAAC;;;;kEASlB;AAGK;IADL,QAAQ,CAAC,QAAQ,CAAC;;;;wDAQlB;AAGK;IADL,QAAQ,CAAC,QAAQ,CAAC;;;;0DAQlB;AAoEK;IADL,QAAQ,CAAC,QAAQ,CAAC;;;;2DAGlB;AAGK;IADL,QAAQ,CAAC,QAAQ,CAAC;;;;6DAGlB;AAGK;IADL,QAAQ,CAAC,QAAQ,CAAC;;;;6DAGlB;AAGK;IADL,QAAQ,CAAC,QAAQ,CAAC;;;;6DAGlB;AAWK;IADL,QAAQ,CAAC,QAAQ,CAAC;;;;4DAclB","sourcesContent":["import { BackendProvider } from '@_linked/server-utils/utils/BackendProvider';\nimport { callable } from '@_linked/server-utils/utils/callable';\nimport { LinkedFileStorage } from '@_linked/core/utils/LinkedFileStorage';\nimport { LinkedStorage } from '@_linked/core/utils/LinkedStorage';\nimport { LocalFileStore } from './shapes/filestores/LocalFileStore.js';\nimport type { QueryOperation } from '@_linked/server-utils/utils/QueryAccess';\nimport {\n  authorizeGenericQuery,\n  authorizeGraphQuery,\n  graphQueryCallError,\n  resolveQueryCatalog,\n  toGraphQuery,\n  toQueryBuilder,\n  toReadQuery,\n} from './utils/queryPlane.js';\nimport { ServerCallError } from '@_linked/server-utils/utils/ServerCallError';\nimport { txIdOf } from '@_linked/core/queries/transactionQuery';\nimport { UnresolvedContextError } from '@_linked/core/queries/QueryContext';\nimport { isLinkedError } from '@_linked/core/utils/linkedError';\nimport type { Transaction } from '@_linked/core/utils/Transaction';\nimport type { ShapeCatalog } from '@_linked/core/utils/ShapeCatalog';\nimport {\n  abandonTransactionOf,\n  assertStoresHoldTransactions,\n  storesHoldTransactions,\n  transactionCallError,\n  transactionCaller,\n  transactions,\n} from './utils/serverTransactions.js';\nimport path from 'path';\nimport fs from 'fs/promises';\n\n/** A write's decoder for `genericQuery`: the body as its builder, checked under the endpoint's own rule. */\nfunction writeOf(operation: Extract<QueryOperation, 'create' | 'update' | 'delete'>) {\n  return (json: unknown, catalog: ShapeCatalog | undefined) => ({\n    query: toQueryBuilder(json, catalog),\n    operation,\n  });\n}\n\nfunction assertTxId(txId: unknown): asserts txId is string {\n  if (typeof txId !== 'string' || !txId) throw new ServerCallError(400, 'Expected a transaction id');\n}\n\nexport default class LincdServerBackendProvider extends BackendProvider {\n  async setupBeforeControllers() {\n    if (!LinkedFileStorage.getDefaultStore()) {\n      LinkedFileStorage.setDefaultStore(\n        new LocalFileStore(process.env.NODE_ENV + '-filestore')\n      );\n    }\n    let fileSystemUploadPath = path.join('data', 'filestores');\n    try {\n      await fs.access(fileSystemUploadPath);\n    } catch (err) {\n      await fs.mkdir(path.join(fileSystemUploadPath, 'filestores'), {\n        recursive: true,\n      });\n    }\n  }\n\n  /**\n   * Reachability check for a `RemoteDataset` pointed at this server: reads nothing, changes\n   * nothing. A plain linked server has no token concept, so it always answers `{ok: true}`;\n   * a host that serves the wire with tokens answers 401 for a refused one. `supports` lists\n   * `'transactions'` when this server holds store transactions (every store it routes to does);\n   * `RemoteDataset` declares them only then.\n   */\n  @callable('public')\n  async ping(): Promise<{ ok: true; supports: string[] }> {\n    return { ok: true, supports: storesHoldTransactions() ? ['transactions'] : [] };\n  }\n\n  // ── Store transactions ───────────────────────────────────────────────────\n  //\n  // `RemoteDataset.beginTransaction()` / `commit(txId)` / `rollback(txId)` (core report 103). The\n  // server answers its own txId and holds a core `Transaction` for it, which opens a transaction\n  // in each store a query of it routes to. The txId is bound to the caller that began it.\n  // A server whose stores do not all hold transactions answers 501 `transactions-unsupported`;\n  // an unknown or expired txId 409 `transaction-unknown` (a rollback of one resolves); another\n  // caller's txId 403 `transaction-not-yours`.\n\n  @callable('public')\n  async beginTransaction(): Promise<string> {\n    try {\n      const caller = transactionCaller();\n      assertStoresHoldTransactions();\n      return transactions.begin(caller, LinkedStorage.begin());\n    } catch (err) {\n      throw transactionCallError(err);\n    }\n  }\n\n  @callable('public')\n  async commit(txId: unknown): Promise<void> {\n    assertTxId(txId);\n    try {\n      await transactions.commit(txId, transactionCaller());\n    } catch (err) {\n      throw transactionCallError(err);\n    }\n  }\n\n  @callable('public')\n  async rollback(txId: unknown): Promise<void> {\n    assertTxId(txId);\n    try {\n      await transactions.rollback(txId, transactionCaller());\n    } catch (err) {\n      throw transactionCallError(err);\n    }\n  }\n\n  /**\n   * Decode, check and run one generic query. `decode` turns the body into the builder the store\n   * runs and the access rule it is checked under (a write's rule is its endpoint's; a read's\n   * follows its kind, see `toReadQuery`). One that carries a txId runs in its transaction: the\n   * caller's own, checked against the store rules as if it were sent alone. Any refusal or\n   * failure of it (a body that does not decode included) rolls the transaction back.\n   */\n  private async genericQuery<R>(\n    json: any,\n    decode: (json: unknown, catalog: ShapeCatalog | undefined) => { query: any; operation: QueryOperation },\n    endpoint: string,\n    inTransaction: (tx: Transaction, query: any) => Promise<R>,\n    direct: (query: any) => Promise<R>\n  ): Promise<R> {\n    try {\n      const { query, operation } = decode(json, await resolveQueryCatalog(json));\n      const authorize = () => authorizeGenericQuery(operation, json, query, endpoint);\n      if (!txIdOf(query)) {\n        await authorize();\n        return await direct(query);\n      }\n      assertStoresHoldTransactions();\n      return await transactions.query(\n        query,\n        transactionCaller(),\n        async () => {\n          assertStoresHoldTransactions();\n          await authorize();\n        },\n        inTransaction\n      );\n    } catch (err) {\n      // A select whose query context is not ready did not run: it fails nothing (as in core).\n      if (!isLinkedError(err, UnresolvedContextError)) await abandonTransactionOf(json);\n      throw transactionCallError(err);\n    }\n  }\n\n  // ── Generic query execution ──────────────────────────────────────────────\n  //\n  // These answer `RemoteDataset`: a browser's store calls\n  // `Server.call(packageName, {method}, json)` (the PACKAGE form), and a remote app's store\n  // posts the same `{args}` body to `{url}/call/@_linked/server/<method>`. Either way the\n  // request arrives here on the generic provider rather than through Shape resolution.\n  //\n  // A query cannot cross the wire live, so the client ships `toJSON()` and `fromJSON()`\n  // rehydrates it here into a live, closed query. `LinkedStorage` then routes it by the\n  // QUERY's shape, which is what decides the target dataset; the store instance never\n  // participates. A query that carries a txId (DSL-JSON 1.5) runs in the caller's\n  // transaction instead (see \"Store transactions\" above). The host's catalog resolver\n  // (`setQueryCatalogResolver`) picks the shape catalog the JSON is decoded in; the builder\n  // keeps it for both lowerings.\n  //\n  // Every query is checked first against the access rules of the stores it\n  // maps to, declared in the app's storage config (`withAccess`; a store with\n  // no rule requires a session): see utils/queryPlane. INTERIM model, to be\n  // rethought. The store runs the builder that was checked. They are declared\n  // 'public' because that check, not the RPC layer, decides whether a session\n  // is required.\n\n  /**\n   * Every read: a select, a count or an ask (DSL-JSON, told apart by `op`). The body's kind picks\n   * the access rule (`select` for a select or a count, `ask` for an ask; see `toReadQuery`).\n   * Triples and terms reads, graph queries and writes are refused with 400.\n   */\n  @callable('public')\n  async readQuery(json: any) {\n    return this.genericQuery(json, toReadQuery, 'readQuery', (tx, q) => tx.readQuery(q), (q) => LinkedStorage.readQuery(q));\n  }\n\n  @callable('public')\n  async updateQuery(json: any) {\n    return this.genericQuery(json, writeOf('update'), 'updateQuery', (tx, q) => tx.updateQuery(q), (q) => LinkedStorage.updateQuery(q));\n  }\n\n  @callable('public')\n  async createQuery(json: any) {\n    return this.genericQuery(json, writeOf('create'), 'createQuery', (tx, q) => tx.createQuery(q), (q) => LinkedStorage.createQuery(q));\n  }\n\n  @callable('public')\n  async deleteQuery(json: any) {\n    return this.genericQuery(json, writeOf('delete'), 'deleteQuery', (tx, q) => tx.deleteQuery(q), (q) => LinkedStorage.deleteQuery(q));\n  }\n\n  /**\n   * A whole-graph operation (`graph_create`, `graph_replace`, `graph_patch`, `graph_drop`), as\n   * `RemoteDataset.graphQuery` sends it. The query is plain data: core's `parseGraphQuery` checks\n   * it, the `graph` rule of the store its record class routes to decides (no rule refuses), and\n   * `LinkedStorage.graphQuery` runs it outside any shape catalog; no catalog is resolved for it,\n   * so the check resolves the same store. A store's refusal answers with its code (see\n   * `graphQueryCallError`).\n   */\n  @callable('public')\n  async graphQuery(json: any) {\n    if (json && typeof json === 'object' && 'txId' in json) {\n      await abandonTransactionOf(json);\n      throw new ServerCallError(400, 'A graph query does not run in a transaction');\n    }\n    const query = toGraphQuery(json);\n    await authorizeGraphQuery(json, query, 'graphQuery');\n    if (!query) throw new ServerCallError(400, 'Invalid graph query');\n    try {\n      return await LinkedStorage.graphQuery(query);\n    } catch (err) {\n      throw graphQueryCallError(err);\n    }\n  }\n}\n"]}

package/lib/esm/shapes/LincdAPI.d.ts

@@ -4,7 +4,7 @@ export declare class LincdAPI extends Shape {
     process(request: any, response: any, httpMethod: 'get' | 'post' | 'put' | 'delete'): Promise<void>;
     post_select({ query }: {
         query: any;
-    }): Promise<unknown>;
+    }): Promise<number | boolean | string[] | import("@_linked/core/queries/IntermediateRepresentation.js").SelectResult | import("@_linked/core").Triple[]>;
     post_create({ query }: {
         query: any;
     }): Promise<unknown>;

package/lib/esm/shapes/LincdAPI.js

@@ -10,8 +10,44 @@ import { server } from '../ontologies/server.js';
 import { JSONParser } from '@_linked/server-utils/utils/JSONParser';
 import { LinkedStorage } from '@_linked/core/utils/LinkedStorage';
 import { JSONWriter } from '@_linked/server-utils/utils/JSONWriter';
-import { authorizeGenericQuery, authorizeRawQuery, resolveQueryCatalog, toQueryBuilder, } from '../utils/queryPlane.js';
+import { authorizeGenericQuery, authorizeRawQuery, resolveQueryCatalog, toQueryBuilder, toReadQuery, } from '../utils/queryPlane.js';
 import { getRpcExposureMode } from '../utils/rpcExposure.js';
+import { txIdOf } from '@_linked/core/queries/transactionQuery';
+import { ServerCallError } from '@_linked/server-utils/utils/ServerCallError';
+import { abandonTransactionOf } from '../utils/serverTransactions.js';
+/**
+ * The builder of an `/api/*` query, wrapped (a query builder is a thenable: resolving an async
+ * function with one would run it). A query of a store transaction (a `txId`) is refused (400):
+ * transactions run over `/call/@_linked/server`, which holds them; here it would run outside.
+ * The caller's transaction it names is rolled back, as for any refused query of it.
+ */
+async function apiBuilder(query) {
+    const builder = toQueryBuilder(query, await resolveQueryCatalog(query));
+    await refuseTransactionQuery(query, builder);
+    return { builder };
+}
+/**
+ * The read of an `/api/select` query (a select, a count or an ask) with the access rule its kind
+ * is checked under (see `toReadQuery`); a query of a transaction is refused as in {@link apiBuilder}.
+ */
+async function apiRead(query) {
+    let read;
+    try {
+        read = toReadQuery(query, await resolveQueryCatalog(query));
+    }
+    catch (error) {
+        await abandonTransactionOf(query);
+        throw error;
+    }
+    await refuseTransactionQuery(query, read.query);
+    return { builder: read.query, operation: read.operation };
+}
+async function refuseTransactionQuery(query, builder) {
+    if (txIdOf(builder)) {
+        await abandonTransactionOf(query);
+        throw new ServerCallError(400, 'A query of a transaction is sent to /call/@_linked/server, not /api');
+    }
+}
 /** An error carrying an HTTP status, such as a `ServerCallError` (401/403). */
 function isStatusError(error) {
     return (!!error &&
@@ -56,22 +92,22 @@ let LincdAPI = class LincdAPI extends Shape {
         }
     }
     async post_select({ query }) {
-        const builder = toQueryBuilder(query, await resolveQueryCatalog(query));
-        await authorizeGenericQuery('select', query, builder, 'api/select');
-        return LinkedStorage.selectQuery(builder);
+        const { builder, operation } = await apiRead(query);
+        await authorizeGenericQuery(operation, query, builder, 'api/select');
+        return LinkedStorage.readQuery(builder);
     }
     async post_create({ query }) {
-        const builder = toQueryBuilder(query, await resolveQueryCatalog(query));
+        const { builder } = await apiBuilder(query);
         await authorizeGenericQuery('create', query, builder, 'api/create');
         return LinkedStorage.createQuery(builder);
     }
     async post_update({ query }) {
-        const builder = toQueryBuilder(query, await resolveQueryCatalog(query));
+        const { builder } = await apiBuilder(query);
         await authorizeGenericQuery('update', query, builder, 'api/update');
         return LinkedStorage.updateQuery(builder);
     }
     async post_delete({ query }) {
-        const builder = toQueryBuilder(query, await resolveQueryCatalog(query));
+        const { builder } = await apiBuilder(query);
         await authorizeGenericQuery('delete', query, builder, 'api/delete');
         return LinkedStorage.deleteQuery(builder);
     }

package/lib/esm/shapes/LincdAPI.js.map

@@ -1 +1 @@
-{"version":3,"file":"LincdAPI.js","sourceRoot":"","sources":["../../../src/shapes/LincdAPI.ts"],"names":[],"mappings":";;;;;;AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,4BAA4B,CAAC;AACnD,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAC5C,OAAO,EAAE,MAAM,EAAE,MAAM,yBAAyB,CAAC;AACjD,OAAO,EAAE,UAAU,EAAE,MAAM,wCAAwC,CAAC;AACpE,OAAO,EAAE,aAAa,EAAE,MAAM,mCAAmC,CAAC;AAClE,OAAO,EAAE,UAAU,EAAE,MAAM,wCAAwC,CAAC;AAEpE,OAAO,EACL,qBAAqB,EACrB,iBAAiB,EACjB,mBAAmB,EACnB,cAAc,GACf,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAE7D,+EAA+E;AAC/E,SAAS,aAAa,CAAC,KAAU;IAC/B,OAAO,CACL,CAAC,CAAC,KAAK;QACP,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ;QAChC,KAAK,CAAC,MAAM,IAAI,GAAG;QACnB,KAAK,CAAC,MAAM,GAAG,GAAG;QAClB,KAAK,CAAC,IAAI,KAAK,iBAAiB,CACjC,CAAC;AACJ,CAAC;AAED,iGAAiG;AACjG,gGAAgG;AAChG,4EAA4E;AAErE,IAAM,QAAQ,GAAd,MAAM,QAAS,SAAQ,KAAK;IAGjC,KAAK,CAAC,OAAO,CACX,OAAO,EACP,QAAQ,EACR,UAA6C;QAE7C,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC;QACxC,MAAM,IAAI,GAAG,UAAU,CAAC,WAAW,CAAM,OAAO,CAAC,IAAI,EAAE;YACrD,YAAY,EAAE,kBAAkB,EAAE,KAAK,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM;SACrE,CAAC,CAAC;QAEH,kCAAkC;QAClC,IAAI,WAAW,GAAG,UAAU,GAAG,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QAC/D,IAAI,OAAO,IAAI,CAAC,WAAW,CAAC,KAAK,UAAU,EAAE,CAAC;YAC5C,MAAM,IAAI,KAAK,CAAC,kBAAkB,GAAG,WAAW,CAAC,CAAC;QACpD,CAAC;QAED,+DAA+D;QAC/D,oBAAoB;QACpB,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;YAChE,IAAI,OAAO,MAAM,KAAK,WAAW,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;gBAC3D,MAAM,UAAU,GAAG,UAAU,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;gBACjD,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YAC5B,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,QAAQ,CAAC,WAAW,IAAI,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC;gBAClD,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;gBAC7D,OAAO;YACT,CAAC;YACD,OAAO,CAAC,KAAK,CAAC,0BAA0B,WAAW,GAAG,EAAE,KAAK,CAAC,CAAC;YAC/D,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;gBAC1B,MAAM,OAAO,GACX,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,sBAAsB,CAAC;gBAClE,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;YAChD,CAAC;QACH,CAAC;IACH,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,EAAE,KAAK,EAAE;QACzB,MAAM,OAAO,GAAG,cAAc,CAAC,KAAK,EAAE,MAAM,mBAAmB,CAAC,KAAK,CAAC,CAAC,CAAC;QACxE,MAAM,qBAAqB,CAAC,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,YAAY,CAAC,CAAC;QACpE,OAAO,aAAa,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;IAC5C,CAAC;IACD,KAAK,CAAC,WAAW,CAAC,EAAE,KAAK,EAAE;QACzB,MAAM,OAAO,GAAG,cAAc,CAAC,KAAK,EAAE,MAAM,mBAAmB,CAAC,KAAK,CAAC,CAAC,CAAC;QACxE,MAAM,qBAAqB,CAAC,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,YAAY,CAAC,CAAC;QACpE,OAAO,aAAa,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;IAC5C,CAAC;IACD,KAAK,CAAC,WAAW,CAAC,EAAE,KAAK,EAAE;QACzB,MAAM,OAAO,GAAG,cAAc,CAAC,KAAK,EAAE,MAAM,mBAAmB,CAAC,KAAK,CAAC,CAAC,CAAC;QACxE,MAAM,qBAAqB,CAAC,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,YAAY,CAAC,CAAC;QACpE,OAAO,aAAa,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;IAC5C,CAAC;IACD,KAAK,CAAC,WAAW,CAAC,EAAE,KAAK,EAAE;QACzB,MAAM,OAAO,GAAG,cAAc,CAAC,KAAK,EAAE,MAAM,mBAAmB,CAAC,KAAK,CAAC,CAAC,CAAC;QACxE,MAAM,qBAAqB,CAAC,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,YAAY,CAAC,CAAC;QACpE,OAAO,aAAa,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;IAC5C,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,EAAE,KAAK,EAAE;QAC7B,wEAAwE;QACxE,+DAA+D;QAC/D,MAAM,iBAAiB,CAAC,KAAK,EAAE,gBAAgB,CAAC,CAAC;QACjD,IAAI,CAAC,oBAAoB,EAAE,CAAC;QAC5B,OAAQ,aAAa,CAAC,iBAAiB,EAA6B,CAAC,QAAQ,CAC3E,KAAK,CACN,CAAC;IACJ,CAAC;IAEO,oBAAoB;QAC1B,IAAI,CAAE,aAAa,CAAC,iBAAiB,EAA6B,CAAC,QAAQ,EAAE,CAAC;YAC5E,MAAM,IAAI,KAAK,CACb,kBACE,MAAM,CAAC,cAAc,CAAC,aAAa,CAAC,iBAAiB,EAAE,CAAC,CAAC,WAAW;iBACjE,IACL,uCAAuC,CACxC,CAAC;QACJ,CAAC;IACH,CAAC;;AAhFM,oBAAW,GAAG,MAAM,CAAC,QAAQ,AAAlB,CAAmB;AAD1B,QAAQ;IADpB,WAAW,CAAC,EAAC,IAAI,EAAE,UAAU,EAAC,CAAC;GACnB,QAAQ,CAkFpB","sourcesContent":["import { Shape } from '@_linked/core/shapes/Shape';\nimport { linkedShape } from '../package.js';\nimport { server } from '../ontologies/server.js';\nimport { JSONParser } from '@_linked/server-utils/utils/JSONParser';\nimport { LinkedStorage } from '@_linked/core/utils/LinkedStorage';\nimport { JSONWriter } from '@_linked/server-utils/utils/JSONWriter';\nimport { SparqlDataset as SPARQLStore } from '@_linked/core/sparql/SparqlDataset';\nimport {\n  authorizeGenericQuery,\n  authorizeRawQuery,\n  resolveQueryCatalog,\n  toQueryBuilder,\n} from '../utils/queryPlane.js';\nimport { getRpcExposureMode } from '../utils/rpcExposure.js';\n\n/** An error carrying an HTTP status, such as a `ServerCallError` (401/403). */\nfunction isStatusError(error: any): error is { status: number; message: string } {\n  return (\n    !!error &&\n    typeof error.status === 'number' &&\n    error.status >= 400 &&\n    error.status < 600 &&\n    error.name === 'ServerCallError'\n  );\n}\n\n// Named explicitly: tsc emits `let X = class X`, and any later esbuild pass over that JS (Vite's\n// SSR `define` replacement runs one on every file mentioning a defined `process.env.*`) renames\n// the inner binding to `X2`, which would otherwise become this shape's IRI.\n@linkedShape({name: 'LincdAPI'})\nexport class LincdAPI extends Shape {\n  static targetClass = server.LincdAPI;\n\n  async process(\n    request,\n    response,\n    httpMethod: 'get' | 'post' | 'put' | 'delete'\n  ) {\n    let { method, action } = request.params;\n    const body = JSONParser.parseObject<any>(request.body, {\n      shapeClasses: getRpcExposureMode() === 'enforce' ? 'reject' : 'warn',\n    });\n\n    //replace - with _ in action names\n    let localMethod = httpMethod + '_' + method.replace(/-/g, '_');\n    if (typeof this[localMethod] !== 'function') {\n      throw new Error('Unknown method: ' + localMethod);\n    }\n\n    // The query routes (`post_*`) check access themselves, through\n    // utils/queryPlane.\n    try {\n      const result = await this[localMethod](body, request, response);\n      if (typeof result !== 'undefined' || !response.headersSent) {\n        const jsonObject = JSONWriter.toJsObject(result);\n        response.json(jsonObject);\n      }\n    } catch (error) {\n      if (!response.headersSent && isStatusError(error)) {\n        response.status(error.status).json({ error: error.message });\n        return;\n      }\n      console.error(`Error while processing ${localMethod}:`, error);\n      if (!response.headersSent) {\n        const message =\n          error instanceof Error ? error.message : 'Unknown server error';\n        response.status(500).json({ error: message });\n      }\n    }\n  }\n\n  async post_select({ query }) {\n    const builder = toQueryBuilder(query, await resolveQueryCatalog(query));\n    await authorizeGenericQuery('select', query, builder, 'api/select');\n    return LinkedStorage.selectQuery(builder);\n  }\n  async post_create({ query }) {\n    const builder = toQueryBuilder(query, await resolveQueryCatalog(query));\n    await authorizeGenericQuery('create', query, builder, 'api/create');\n    return LinkedStorage.createQuery(builder);\n  }\n  async post_update({ query }) {\n    const builder = toQueryBuilder(query, await resolveQueryCatalog(query));\n    await authorizeGenericQuery('update', query, builder, 'api/update');\n    return LinkedStorage.updateQuery(builder);\n  }\n  async post_delete({ query }) {\n    const builder = toQueryBuilder(query, await resolveQueryCatalog(query));\n    await authorizeGenericQuery('delete', query, builder, 'api/delete');\n    return LinkedStorage.deleteQuery(builder);\n  }\n\n  async post_select_raw({ query }) {\n    // A raw SPARQL string cannot be analysed for the shapes it touches: the\n    // `rawQueries` setting decides (a session by default, or off).\n    await authorizeRawQuery(query, 'api/select-raw');\n    this.checkRawQuerySupport();\n    return (LinkedStorage.getDefaultDataset() as unknown as SPARQLStore).rawQuery(\n      query\n    );\n  }\n\n  private checkRawQuerySupport() {\n    if (!(LinkedStorage.getDefaultDataset() as unknown as SPARQLStore).rawQuery) {\n      throw new Error(\n        `Default store (${\n          Object.getPrototypeOf(LinkedStorage.getDefaultDataset()).constructor\n            .name\n        }) does not support raw SPARQL queries`\n      );\n    }\n  }\n}\n"]}
+{"version":3,"file":"LincdAPI.js","sourceRoot":"","sources":["../../../src/shapes/LincdAPI.ts"],"names":[],"mappings":";;;;;;AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,4BAA4B,CAAC;AACnD,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAC5C,OAAO,EAAE,MAAM,EAAE,MAAM,yBAAyB,CAAC;AACjD,OAAO,EAAE,UAAU,EAAE,MAAM,wCAAwC,CAAC;AACpE,OAAO,EAAE,aAAa,EAAE,MAAM,mCAAmC,CAAC;AAClE,OAAO,EAAE,UAAU,EAAE,MAAM,wCAAwC,CAAC;AAEpE,OAAO,EACL,qBAAqB,EACrB,iBAAiB,EACjB,mBAAmB,EACnB,cAAc,EACd,WAAW,GAEZ,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAC7D,OAAO,EAAE,MAAM,EAAE,MAAM,wCAAwC,CAAC;AAChE,OAAO,EAAE,eAAe,EAAE,MAAM,6CAA6C,CAAC;AAC9E,OAAO,EAAE,oBAAoB,EAAE,MAAM,gCAAgC,CAAC;AAEtE;;;;;GAKG;AACH,KAAK,UAAU,UAAU,CAAC,KAAc;IACtC,MAAM,OAAO,GAAG,cAAc,CAAC,KAAK,EAAE,MAAM,mBAAmB,CAAC,KAAK,CAAC,CAAC,CAAC;IACxE,MAAM,sBAAsB,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IAC7C,OAAO,EAAE,OAAO,EAAE,CAAC;AACrB,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,OAAO,CAAC,KAAc;IACnC,IAAI,IAA8C,CAAC;IACnD,IAAI,CAAC;QACH,IAAI,GAAG,WAAW,CAAC,KAAK,EAAE,MAAM,mBAAmB,CAAC,KAAK,CAAC,CAAC,CAAC;IAC9D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,oBAAoB,CAAC,KAAK,CAAC,CAAC;QAClC,MAAM,KAAK,CAAC;IACd,CAAC;IACD,MAAM,sBAAsB,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;IAChD,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,KAAK,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC;AAC5D,CAAC;AAED,KAAK,UAAU,sBAAsB,CAAC,KAAc,EAAE,OAAY;IAChE,IAAI,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;QACpB,MAAM,oBAAoB,CAAC,KAAK,CAAC,CAAC;QAClC,MAAM,IAAI,eAAe,CAAC,GAAG,EAAE,qEAAqE,CAAC,CAAC;IACxG,CAAC;AACH,CAAC;AAED,+EAA+E;AAC/E,SAAS,aAAa,CAAC,KAAU;IAC/B,OAAO,CACL,CAAC,CAAC,KAAK;QACP,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ;QAChC,KAAK,CAAC,MAAM,IAAI,GAAG;QACnB,KAAK,CAAC,MAAM,GAAG,GAAG;QAClB,KAAK,CAAC,IAAI,KAAK,iBAAiB,CACjC,CAAC;AACJ,CAAC;AAED,iGAAiG;AACjG,gGAAgG;AAChG,4EAA4E;AAErE,IAAM,QAAQ,GAAd,MAAM,QAAS,SAAQ,KAAK;IAGjC,KAAK,CAAC,OAAO,CACX,OAAO,EACP,QAAQ,EACR,UAA6C;QAE7C,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC;QACxC,MAAM,IAAI,GAAG,UAAU,CAAC,WAAW,CAAM,OAAO,CAAC,IAAI,EAAE;YACrD,YAAY,EAAE,kBAAkB,EAAE,KAAK,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM;SACrE,CAAC,CAAC;QAEH,kCAAkC;QAClC,IAAI,WAAW,GAAG,UAAU,GAAG,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QAC/D,IAAI,OAAO,IAAI,CAAC,WAAW,CAAC,KAAK,UAAU,EAAE,CAAC;YAC5C,MAAM,IAAI,KAAK,CAAC,kBAAkB,GAAG,WAAW,CAAC,CAAC;QACpD,CAAC;QAED,+DAA+D;QAC/D,oBAAoB;QACpB,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;YAChE,IAAI,OAAO,MAAM,KAAK,WAAW,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;gBAC3D,MAAM,UAAU,GAAG,UAAU,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;gBACjD,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YAC5B,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,QAAQ,CAAC,WAAW,IAAI,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC;gBAClD,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;gBAC7D,OAAO;YACT,CAAC;YACD,OAAO,CAAC,KAAK,CAAC,0BAA0B,WAAW,GAAG,EAAE,KAAK,CAAC,CAAC;YAC/D,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;gBAC1B,MAAM,OAAO,GACX,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,sBAAsB,CAAC;gBAClE,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;YAChD,CAAC;QACH,CAAC;IACH,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,EAAE,KAAK,EAAE;QACzB,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,CAAC;QACpD,MAAM,qBAAqB,CAAC,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,YAAY,CAAC,CAAC;QACrE,OAAO,aAAa,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;IAC1C,CAAC;IACD,KAAK,CAAC,WAAW,CAAC,EAAE,KAAK,EAAE;QACzB,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,UAAU,CAAC,KAAK,CAAC,CAAC;QAC5C,MAAM,qBAAqB,CAAC,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,YAAY,CAAC,CAAC;QACpE,OAAO,aAAa,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;IAC5C,CAAC;IACD,KAAK,CAAC,WAAW,CAAC,EAAE,KAAK,EAAE;QACzB,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,UAAU,CAAC,KAAK,CAAC,CAAC;QAC5C,MAAM,qBAAqB,CAAC,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,YAAY,CAAC,CAAC;QACpE,OAAO,aAAa,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;IAC5C,CAAC;IACD,KAAK,CAAC,WAAW,CAAC,EAAE,KAAK,EAAE;QACzB,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,UAAU,CAAC,KAAK,CAAC,CAAC;QAC5C,MAAM,qBAAqB,CAAC,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,YAAY,CAAC,CAAC;QACpE,OAAO,aAAa,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;IAC5C,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,EAAE,KAAK,EAAE;QAC7B,wEAAwE;QACxE,+DAA+D;QAC/D,MAAM,iBAAiB,CAAC,KAAK,EAAE,gBAAgB,CAAC,CAAC;QACjD,IAAI,CAAC,oBAAoB,EAAE,CAAC;QAC5B,OAAQ,aAAa,CAAC,iBAAiB,EAA6B,CAAC,QAAQ,CAC3E,KAAK,CACN,CAAC;IACJ,CAAC;IAEO,oBAAoB;QAC1B,IAAI,CAAE,aAAa,CAAC,iBAAiB,EAA6B,CAAC,QAAQ,EAAE,CAAC;YAC5E,MAAM,IAAI,KAAK,CACb,kBACE,MAAM,CAAC,cAAc,CAAC,aAAa,CAAC,iBAAiB,EAAE,CAAC,CAAC,WAAW;iBACjE,IACL,uCAAuC,CACxC,CAAC;QACJ,CAAC;IACH,CAAC;;AAhFM,oBAAW,GAAG,MAAM,CAAC,QAAQ,AAAlB,CAAmB;AAD1B,QAAQ;IADpB,WAAW,CAAC,EAAC,IAAI,EAAE,UAAU,EAAC,CAAC;GACnB,QAAQ,CAkFpB","sourcesContent":["import { Shape } from '@_linked/core/shapes/Shape';\nimport { linkedShape } from '../package.js';\nimport { server } from '../ontologies/server.js';\nimport { JSONParser } from '@_linked/server-utils/utils/JSONParser';\nimport { LinkedStorage } from '@_linked/core/utils/LinkedStorage';\nimport { JSONWriter } from '@_linked/server-utils/utils/JSONWriter';\nimport { SparqlDataset as SPARQLStore } from '@_linked/core/sparql/SparqlDataset';\nimport {\n  authorizeGenericQuery,\n  authorizeRawQuery,\n  resolveQueryCatalog,\n  toQueryBuilder,\n  toReadQuery,\n  type ReadOperation,\n} from '../utils/queryPlane.js';\nimport { getRpcExposureMode } from '../utils/rpcExposure.js';\nimport { txIdOf } from '@_linked/core/queries/transactionQuery';\nimport { ServerCallError } from '@_linked/server-utils/utils/ServerCallError';\nimport { abandonTransactionOf } from '../utils/serverTransactions.js';\n\n/**\n * The builder of an `/api/*` query, wrapped (a query builder is a thenable: resolving an async\n * function with one would run it). A query of a store transaction (a `txId`) is refused (400):\n * transactions run over `/call/@_linked/server`, which holds them; here it would run outside.\n * The caller's transaction it names is rolled back, as for any refused query of it.\n */\nasync function apiBuilder(query: unknown): Promise<{ builder: any }> {\n  const builder = toQueryBuilder(query, await resolveQueryCatalog(query));\n  await refuseTransactionQuery(query, builder);\n  return { builder };\n}\n\n/**\n * The read of an `/api/select` query (a select, a count or an ask) with the access rule its kind\n * is checked under (see `toReadQuery`); a query of a transaction is refused as in {@link apiBuilder}.\n */\nasync function apiRead(query: unknown): Promise<{ builder: any; operation: ReadOperation }> {\n  let read: { query: any; operation: ReadOperation };\n  try {\n    read = toReadQuery(query, await resolveQueryCatalog(query));\n  } catch (error) {\n    await abandonTransactionOf(query);\n    throw error;\n  }\n  await refuseTransactionQuery(query, read.query);\n  return { builder: read.query, operation: read.operation };\n}\n\nasync function refuseTransactionQuery(query: unknown, builder: any): Promise<void> {\n  if (txIdOf(builder)) {\n    await abandonTransactionOf(query);\n    throw new ServerCallError(400, 'A query of a transaction is sent to /call/@_linked/server, not /api');\n  }\n}\n\n/** An error carrying an HTTP status, such as a `ServerCallError` (401/403). */\nfunction isStatusError(error: any): error is { status: number; message: string } {\n  return (\n    !!error &&\n    typeof error.status === 'number' &&\n    error.status >= 400 &&\n    error.status < 600 &&\n    error.name === 'ServerCallError'\n  );\n}\n\n// Named explicitly: tsc emits `let X = class X`, and any later esbuild pass over that JS (Vite's\n// SSR `define` replacement runs one on every file mentioning a defined `process.env.*`) renames\n// the inner binding to `X2`, which would otherwise become this shape's IRI.\n@linkedShape({name: 'LincdAPI'})\nexport class LincdAPI extends Shape {\n  static targetClass = server.LincdAPI;\n\n  async process(\n    request,\n    response,\n    httpMethod: 'get' | 'post' | 'put' | 'delete'\n  ) {\n    let { method, action } = request.params;\n    const body = JSONParser.parseObject<any>(request.body, {\n      shapeClasses: getRpcExposureMode() === 'enforce' ? 'reject' : 'warn',\n    });\n\n    //replace - with _ in action names\n    let localMethod = httpMethod + '_' + method.replace(/-/g, '_');\n    if (typeof this[localMethod] !== 'function') {\n      throw new Error('Unknown method: ' + localMethod);\n    }\n\n    // The query routes (`post_*`) check access themselves, through\n    // utils/queryPlane.\n    try {\n      const result = await this[localMethod](body, request, response);\n      if (typeof result !== 'undefined' || !response.headersSent) {\n        const jsonObject = JSONWriter.toJsObject(result);\n        response.json(jsonObject);\n      }\n    } catch (error) {\n      if (!response.headersSent && isStatusError(error)) {\n        response.status(error.status).json({ error: error.message });\n        return;\n      }\n      console.error(`Error while processing ${localMethod}:`, error);\n      if (!response.headersSent) {\n        const message =\n          error instanceof Error ? error.message : 'Unknown server error';\n        response.status(500).json({ error: message });\n      }\n    }\n  }\n\n  async post_select({ query }) {\n    const { builder, operation } = await apiRead(query);\n    await authorizeGenericQuery(operation, query, builder, 'api/select');\n    return LinkedStorage.readQuery(builder);\n  }\n  async post_create({ query }) {\n    const { builder } = await apiBuilder(query);\n    await authorizeGenericQuery('create', query, builder, 'api/create');\n    return LinkedStorage.createQuery(builder);\n  }\n  async post_update({ query }) {\n    const { builder } = await apiBuilder(query);\n    await authorizeGenericQuery('update', query, builder, 'api/update');\n    return LinkedStorage.updateQuery(builder);\n  }\n  async post_delete({ query }) {\n    const { builder } = await apiBuilder(query);\n    await authorizeGenericQuery('delete', query, builder, 'api/delete');\n    return LinkedStorage.deleteQuery(builder);\n  }\n\n  async post_select_raw({ query }) {\n    // A raw SPARQL string cannot be analysed for the shapes it touches: the\n    // `rawQueries` setting decides (a session by default, or off).\n    await authorizeRawQuery(query, 'api/select-raw');\n    this.checkRawQuerySupport();\n    return (LinkedStorage.getDefaultDataset() as unknown as SPARQLStore).rawQuery(\n      query\n    );\n  }\n\n  private checkRawQuerySupport() {\n    if (!(LinkedStorage.getDefaultDataset() as unknown as SPARQLStore).rawQuery) {\n      throw new Error(\n        `Default store (${\n          Object.getPrototypeOf(LinkedStorage.getDefaultDataset()).constructor\n            .name\n        }) does not support raw SPARQL queries`\n      );\n    }\n  }\n}\n"]}