@_linked/server 3.9.0 → 3.11.0

package/lib/esm/utils/adminChannel.d.ts

@@ -3,17 +3,10 @@ import type { ShapeGraphsReport } from './syncShapes.js';
 import { type EffectiveRoutes } from './effectiveRoutes.js';
 /** The environment variable that holds the control channel's secret. */
 export declare const ADMIN_SECRET_ENV = "APP_ADMIN_SECRET";
-/** Its former name, read when {@link ADMIN_SECRET_ENV} is unset. @deprecated */
-export declare const LEGACY_ADMIN_SECRET_ENV = "CN_APP_ADMIN_SECRET";
 /** The request header that carries the secret. */
 export declare const ADMIN_SECRET_HEADER = "x-app-admin-secret";
-/** Its former name, read when {@link ADMIN_SECRET_HEADER} is absent. @deprecated */
-export declare const LEGACY_ADMIN_SECRET_HEADER = "x-cn-admin-secret";
-/**
- * The control channel's secret: `APP_ADMIN_SECRET`, else the deprecated `CN_APP_ADMIN_SECRET`
- * (logged once per process), else `undefined` (no control channel).
- */
-export declare function resolveAdminSecret(env?: Record<string, string | undefined>, warn?: (message: string) => void): string | undefined;
+/** The control channel's secret: `APP_ADMIN_SECRET`, else `undefined` (no control channel). */
+export declare function resolveAdminSecret(env?: Record<string, string | undefined>): string | undefined;
 /** What one shape sync did. */
 export interface ShapeSyncResult {
     /**
@@ -80,8 +73,6 @@ export interface AdminChannelHandlers {
     graphRegistryChanged?: (dataset: string) => void;
     /** The effective graph routes (see `GET /admin/routes`). Default: {@link effectiveGraphRoutes}. */
     routes?: () => EffectiveRoutes;
-    /** Where deprecation warnings go. Default: `console.warn`. */
-    warn?: (message: string) => void;
 }
 /**
  * Drop the process's cached graph registry after the host changed the graphs of `dataset`.

package/lib/esm/utils/adminChannel.js

@@ -1,5 +1,3 @@
-var _a;
-var _b, _c;
 /**
  * The host→app control channel: `/admin/*` routes a host uses on an app process it
  * started. Present only when the process was started with a shared secret in
@@ -30,56 +28,17 @@ var _b, _c;
  *   router knows (shape IRI → graph IRI) and the shapes each one writes to its default graph,
  *   as core's routing holds them once the app's storage file has run. The routes are written
  *   only in the app's storage file; this route lets a host check what actually runs.
- *
- * Deprecated names, still read: `CN_APP_ADMIN_SECRET` when `APP_ADMIN_SECRET` is unset, and the
- * `x-cn-admin-secret` header when `x-app-admin-secret` is absent; each logs one warning.
  */
 import { createHash, timingSafeEqual } from 'crypto';
 import { invalidateGraphRegistry } from '@_linked/core/utils/graphRegistryCache';
 import { effectiveGraphRoutes } from './effectiveRoutes.js';
 /** The environment variable that holds the control channel's secret. */
 export const ADMIN_SECRET_ENV = 'APP_ADMIN_SECRET';
-/** Its former name, read when {@link ADMIN_SECRET_ENV} is unset. @deprecated */
-export const LEGACY_ADMIN_SECRET_ENV = 'CN_APP_ADMIN_SECRET';
 /** The request header that carries the secret. */
 export const ADMIN_SECRET_HEADER = 'x-app-admin-secret';
-/** Its former name, read when {@link ADMIN_SECRET_HEADER} is absent. @deprecated */
-export const LEGACY_ADMIN_SECRET_HEADER = 'x-cn-admin-secret';
-/**
- * Which deprecation warnings this process has logged. On the shared global, so a module that
- * evaluates twice still warns once.
- */
-const warned = ((_a = (_b = globalThis)[_c = Symbol.for('@_linked/server:adminChannelDeprecationsWarned')]) !== null && _a !== void 0 ? _a : (_b[_c] = new Set()));
-function warnOnce(key, message, warn) {
-    if (warned.has(key))
-        return;
-    warned.add(key);
-    warn(message);
-}
-/**
- * The control channel's secret: `APP_ADMIN_SECRET`, else the deprecated `CN_APP_ADMIN_SECRET`
- * (logged once per process), else `undefined` (no control channel).
- */
-export function resolveAdminSecret(env = process.env, warn = console.warn) {
-    const secret = env[ADMIN_SECRET_ENV];
-    if (secret)
-        return secret;
-    const legacy = env[LEGACY_ADMIN_SECRET_ENV];
-    if (!legacy)
-        return undefined;
-    warnOnce('env', `[linked] ${LEGACY_ADMIN_SECRET_ENV} is deprecated; set ${ADMIN_SECRET_ENV} instead (read as a fallback for now).`, warn);
-    return legacy;
-}
-/** The secret a request carries: the `x-app-admin-secret` header, else the deprecated one. */
-function providedSecret(req, warn) {
-    const current = req.get(ADMIN_SECRET_HEADER);
-    if (current)
-        return current;
-    const legacy = req.get(LEGACY_ADMIN_SECRET_HEADER);
-    if (legacy) {
-        warnOnce('header', `[linked] the ${LEGACY_ADMIN_SECRET_HEADER} header is deprecated; send ${ADMIN_SECRET_HEADER} instead.`, warn);
-    }
-    return legacy;
+/** The control channel's secret: `APP_ADMIN_SECRET`, else `undefined` (no control channel). */
+export function resolveAdminSecret(env = process.env) {
+    return env[ADMIN_SECRET_ENV] || undefined;
 }
 /** npm's package-name rule: optional `@scope/`, lower case, URL-safe, no leading `.` or `_` (a scope may start with `_`, as `@_linked` does). */
 const NPM_NAME = /^(?:@[a-z0-9-~_][a-z0-9-._~]*\/)?[a-z0-9-~][a-z0-9-._~]*$/;
@@ -158,12 +117,11 @@ export function parseSyncShapesBody(body) {
 /** Mount the control channel's routes on `app`. */
 export function registerAdminRoutes(app, secret, handlers) {
     const requireAdmin = (req, res) => {
-        var _a;
         if (!secret) {
             res.sendStatus(404); // no control channel in this mode
             return false;
         }
-        if (!adminSecretMatches(secret, providedSecret(req, (_a = handlers.warn) !== null && _a !== void 0 ? _a : console.warn))) {
+        if (!adminSecretMatches(secret, req.get(ADMIN_SECRET_HEADER))) {
             res.sendStatus(401);
             return false;
         }

package/lib/esm/utils/adminChannel.js.map

@@ -1 +1 @@
-{"version":3,"file":"adminChannel.js","sourceRoot":"","sources":["../../../src/utils/adminChannel.ts"],"names":[],"mappings":";;AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AACH,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,QAAQ,CAAC;AAErD,OAAO,EAAE,uBAAuB,EAAE,MAAM,wCAAwC,CAAC;AAEjF,OAAO,EAAE,oBAAoB,EAAwB,MAAM,sBAAsB,CAAC;AAElF,wEAAwE;AACxE,MAAM,CAAC,MAAM,gBAAgB,GAAG,kBAAkB,CAAC;AACnD,gFAAgF;AAChF,MAAM,CAAC,MAAM,uBAAuB,GAAG,qBAAqB,CAAC;AAC7D,kDAAkD;AAClD,MAAM,CAAC,MAAM,mBAAmB,GAAG,oBAAoB,CAAC;AACxD,oFAAoF;AACpF,MAAM,CAAC,MAAM,0BAA0B,GAAG,mBAAmB,CAAC;AAE9D;;;GAGG;AACH,MAAM,MAAM,GAAgB,aAAE,UAAsC,OAClE,MAAM,CAAC,GAAG,CAAC,gDAAgD,CAAC,8CACxD,IAAI,GAAG,EAAU,EAAgB,CAAC;AAExC,SAAS,QAAQ,CAAC,GAAW,EAAE,OAAe,EAAE,IAA+B;IAC7E,IAAI,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC;QAAE,OAAO;IAC5B,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAChB,IAAI,CAAC,OAAO,CAAC,CAAC;AAChB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAChC,MAA0C,OAAO,CAAC,GAAG,EACrD,OAAkC,OAAO,CAAC,IAAI;IAE9C,MAAM,MAAM,GAAG,GAAG,CAAC,gBAAgB,CAAC,CAAC;IACrC,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC;IAC1B,MAAM,MAAM,GAAG,GAAG,CAAC,uBAAuB,CAAC,CAAC;IAC5C,IAAI,CAAC,MAAM;QAAE,OAAO,SAAS,CAAC;IAC9B,QAAQ,CACN,KAAK,EACL,YAAY,uBAAuB,uBAAuB,gBAAgB,wCAAwC,EAClH,IAAI,CACL,CAAC;IACF,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,8FAA8F;AAC9F,SAAS,cAAc,CAAC,GAAoB,EAAE,IAA+B;IAC3E,MAAM,OAAO,GAAG,GAAG,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;IAC7C,IAAI,OAAO;QAAE,OAAO,OAAO,CAAC;IAC5B,MAAM,MAAM,GAAG,GAAG,CAAC,GAAG,CAAC,0BAA0B,CAAC,CAAC;IACnD,IAAI,MAAM,EAAE,CAAC;QACX,QAAQ,CACN,QAAQ,EACR,gBAAgB,0BAA0B,+BAA+B,mBAAmB,WAAW,EACvG,IAAI,CACL,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAoCD,iJAAiJ;AACjJ,MAAM,QAAQ,GAAG,2DAA2D,CAAC;AAE7E,yFAAyF;AACzF,MAAM,UAAU,kBAAkB,CAAC,IAAY;IAC7C,OAAO,IAAI,CAAC,MAAM,IAAI,GAAG,IAAI,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,IAAI,CAAC,CAAC;AACrH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,wBAAwB,CAAC,QAAkB,EAAE,OAA4B;IACvF,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;QAC3B,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC;YAAE,MAAM,IAAI,iBAAiB,CAAC,uBAAuB,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACxG,IAAI,GAAG,CAAC,UAAU,CAAC,WAAW,CAAC;YAAE,MAAM,IAAI,iBAAiB,CAAC,wCAAwC,GAAG,EAAE,CAAC,CAAC;QAC5G,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YACtB,MAAM,IAAI,iBAAiB,CAAC,oBAAoB,GAAG,wDAAwD,CAAC,CAAC;QAC/G,CAAC;IACH,CAAC;AACH,CAAC;AAED,sEAAsE;AACtE,MAAM,OAAO,iBAAkB,SAAQ,KAAK;CAAG;AAkB/C;;;;;;;;GAQG;AACH,MAAM,UAAU,sBAAsB,CAAC,QAAgB;IACrD,uBAAuB,EAAE,CAAC;AAC5B,CAAC;AAED,wEAAwE;AACxE,MAAM,UAAU,6BAA6B,CAAC,IAAa;IACzD,MAAM,OAAO,GAAG,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAE,IAA8B,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;IACvG,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,EAAE,CAAC;QAC5E,MAAM,IAAI,iBAAiB,CAAC,8DAA8D,CAAC,CAAC;IAC9F,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC;AACrC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAChC,MAA0B,EAC1B,QAA4B;IAE5B,IAAI,CAAC,MAAM,IAAI,CAAC,QAAQ;QAAE,OAAO,KAAK,CAAC;IACvC,MAAM,MAAM,GAAG,CAAC,KAAa,EAAE,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,CAAC;IAC9E,OAAO,eAAe,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;AAC3D,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,mBAAmB,CAAC,IAAa;IAC/C,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,EAAE;QAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;IAChF,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC7B,MAAM,IAAI,iBAAiB,CAAC,gCAAgC,CAAC,CAAC;IAChE,CAAC;IACD,MAAM,QAAQ,GAAI,IAA+B,CAAC,QAAQ,CAAC;IAC3D,IAAI,QAAQ,KAAK,SAAS;QAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;IACpD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;QAClF,MAAM,IAAI,iBAAiB,CAAC,0CAA0C,CAAC,CAAC;IAC1E,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,QAAoB,EAAE,CAAC;QACrC,IAAI,CAAC,kBAAkB,CAAC,CAAC,CAAC;YAAE,MAAM,IAAI,iBAAiB,CAAC,uBAAuB,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IACtG,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,QAAoB,CAAC,CAAC,EAAE,CAAC;AAC1D,CAAC;AAED,mDAAmD;AACnD,MAAM,UAAU,mBAAmB,CACjC,GAAoB,EACpB,MAA0B,EAC1B,QAA8B;IAE9B,MAAM,YAAY,GAAG,CAAC,GAAoB,EAAE,GAAqB,EAAW,EAAE;;QAC5E,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,kCAAkC;YACvD,OAAO,KAAK,CAAC;QACf,CAAC;QACD,IAAI,CAAC,kBAAkB,CAAC,MAAM,EAAE,cAAc,CAAC,GAAG,EAAE,MAAA,QAAQ,CAAC,IAAI,mCAAI,OAAO,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;YACpF,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;YACpB,OAAO,KAAK,CAAC;QACf,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC,CAAC;IAEF,GAAG,CAAC,GAAG,CAAC,eAAe,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QACpC,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,GAAG,CAAC;YAAE,OAAO;QACpC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,IAAI,CAAC,gBAAgB,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QACtC,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,GAAG,CAAC;YAAE,OAAO;QACpC,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;QACpB,UAAU,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IAChC,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CAAC,eAAe,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;;QACpC,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,GAAG,CAAC;YAAE,OAAO;QACpC,IAAI,CAAC;YACH,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,MAAA,QAAQ,CAAC,MAAM,mCAAI,oBAAoB,CAAC,EAAE,CAAC,CAAC;QACpE,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACpF,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,IAAI,CAAC,+BAA+B,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;;QACrD,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,GAAG,CAAC;YAAE,OAAO;QACpC,IAAI,OAAe,CAAC;QACpB,IAAI,CAAC;YACH,CAAC,EAAE,OAAO,EAAE,GAAG,6BAA6B,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;QAC1D,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAG,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;YACxD,OAAO;QACT,CAAC;QACD,CAAC,MAAA,QAAQ,CAAC,oBAAoB,mCAAI,sBAAsB,CAAC,CAAC,OAAO,CAAC,CAAC;QACnE,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC,CAAC;IACjD,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,IAAI,CAAC,oBAAoB,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QAChD,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,GAAG,CAAC;YAAE,OAAO;QACpC,IAAI,OAA+B,CAAC;QACpC,IAAI,CAAC;YACH,OAAO,GAAG,mBAAmB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC1C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAG,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;YACxD,OAAO;QACT,CAAC;QACD,IAAI,CAAC;YACH,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC;QAC3D,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,MAAM,GAAG,GAAG,YAAY,iBAAiB,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;YAC5D,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACvF,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC","sourcesContent":["/**\n * The host→app control channel: `/admin/*` routes a host uses on an app process it\n * started. Present only when the process was started with a shared secret in\n * `APP_ADMIN_SECRET` (see {@link resolveAdminSecret}); without it every route answers\n * 404, so a standalone app has no control channel. Every request carries the secret in\n * the `x-app-admin-secret` header (401 otherwise).\n *\n * - `GET /admin/health` → 200 `{status: 'ok'}` once the server listens (the boot\n *   shape sync has finished by then).\n * - `POST /admin/restart` → 202, then the process exits; the host starts it again.\n * - `POST /admin/sync-shapes` → re-syncs the app's ontologies (each registered package's\n *   ontology graph, skipped when unchanged), runs the shape check and\n *   re-syncs its shapes into its app data (each package's shape graph and the app's own,\n *   skipped when unchanged), as the boot does, and answers 200 with\n *   {@link ShapeSyncResult}, whose `shapeGraphs` reports the shape graphs. Body (optional):\n *   `{packages: string[]}`, packages whose source changed on disk: in dev they are\n *   reloaded first, so the sync sees shapes added or changed since the boot. Each\n *   name must be a valid npm package name and the app itself or one of its direct\n *   dependencies, never an `@_linked/*` framework package; anything else answers\n *   400 `{error}`. The list never filters the syncs. A failed or timed-out sync\n *   answers 500 `{error}` (a failed ontology sync too, after the shape sync ran).\n * - `POST /admin/graph-registry-changed` `{dataset}` → the host changed the named graphs of that\n *   dataset (a graph query through its gateway): the process drops its cached graph registry, so\n *   its next `.from(graphs.allOntologies)` read re-reads it, and answers 200\n *   `{invalidated: dataset}`. A body without a dataset name answers 400. Without the push the\n *   cache's 30-second expiry applies.\n * - `GET /admin/routes` → 200 {@link EffectiveRoutes}: the graph routes of every dataset the\n *   router knows (shape IRI → graph IRI) and the shapes each one writes to its default graph,\n *   as core's routing holds them once the app's storage file has run. The routes are written\n *   only in the app's storage file; this route lets a host check what actually runs.\n *\n * Deprecated names, still read: `CN_APP_ADMIN_SECRET` when `APP_ADMIN_SECRET` is unset, and the\n * `x-cn-admin-secret` header when `x-app-admin-secret` is absent; each logs one warning.\n */\nimport { createHash, timingSafeEqual } from 'crypto';\nimport type express from 'express';\nimport { invalidateGraphRegistry } from '@_linked/core/utils/graphRegistryCache';\nimport type { ShapeGraphsReport } from './syncShapes.js';\nimport { effectiveGraphRoutes, type EffectiveRoutes } from './effectiveRoutes.js';\n\n/** The environment variable that holds the control channel's secret. */\nexport const ADMIN_SECRET_ENV = 'APP_ADMIN_SECRET';\n/** Its former name, read when {@link ADMIN_SECRET_ENV} is unset. @deprecated */\nexport const LEGACY_ADMIN_SECRET_ENV = 'CN_APP_ADMIN_SECRET';\n/** The request header that carries the secret. */\nexport const ADMIN_SECRET_HEADER = 'x-app-admin-secret';\n/** Its former name, read when {@link ADMIN_SECRET_HEADER} is absent. @deprecated */\nexport const LEGACY_ADMIN_SECRET_HEADER = 'x-cn-admin-secret';\n\n/**\n * Which deprecation warnings this process has logged. On the shared global, so a module that\n * evaluates twice still warns once.\n */\nconst warned: Set<string> = ((globalThis as Record<symbol, unknown>)[\n  Symbol.for('@_linked/server:adminChannelDeprecationsWarned')\n] ??= new Set<string>()) as Set<string>;\n\nfunction warnOnce(key: string, message: string, warn: (message: string) => void): void {\n  if (warned.has(key)) return;\n  warned.add(key);\n  warn(message);\n}\n\n/**\n * The control channel's secret: `APP_ADMIN_SECRET`, else the deprecated `CN_APP_ADMIN_SECRET`\n * (logged once per process), else `undefined` (no control channel).\n */\nexport function resolveAdminSecret(\n  env: Record<string, string | undefined> = process.env,\n  warn: (message: string) => void = console.warn\n): string | undefined {\n  const secret = env[ADMIN_SECRET_ENV];\n  if (secret) return secret;\n  const legacy = env[LEGACY_ADMIN_SECRET_ENV];\n  if (!legacy) return undefined;\n  warnOnce(\n    'env',\n    `[linked] ${LEGACY_ADMIN_SECRET_ENV} is deprecated; set ${ADMIN_SECRET_ENV} instead (read as a fallback for now).`,\n    warn\n  );\n  return legacy;\n}\n\n/** The secret a request carries: the `x-app-admin-secret` header, else the deprecated one. */\nfunction providedSecret(req: express.Request, warn: (message: string) => void): string | undefined {\n  const current = req.get(ADMIN_SECRET_HEADER);\n  if (current) return current;\n  const legacy = req.get(LEGACY_ADMIN_SECRET_HEADER);\n  if (legacy) {\n    warnOnce(\n      'header',\n      `[linked] the ${LEGACY_ADMIN_SECRET_HEADER} header is deprecated; send ${ADMIN_SECRET_HEADER} instead.`,\n      warn\n    );\n  }\n  return legacy;\n}\n\n/** What one shape sync did. */\nexport interface ShapeSyncResult {\n  /**\n   * Shape graphs written (package graphs and the app's own graph) because their stored hash\n   * differed; on a store without graph queries, the default-graph sync's writes.\n   */\n  written: number;\n  /** The orphan policy the sync ran with (see utils/syncShapes). */\n  orphanScope?: 'all' | 'none';\n  /** Set when no sync ran: shape sync is turned off, or there is no default dataset. */\n  skipped?: 'disabled' | 'no-default-dataset';\n  /**\n   * The shape graph sync: packages written and skipped, the graphs written, the app's own shape\n   * graph, the registered packages without `shapes.ttl` (so without a shape graph) and the\n   * default-graph shapes removed. Absent when no sync ran.\n   */\n  shapeGraphs?: ShapeGraphsReport;\n  /**\n   * The requested packages whose source was reloaded before the sync (dev only: a built\n   * app reloads nothing). Set by `POST /admin/sync-shapes`.\n   */\n  reloaded?: string[];\n  /** The node shape IRIs registered in the process after the reload. Set by `POST /admin/sync-shapes`. */\n  shapes?: string[];\n  /**\n   * The ontology sync: packages whose ontology graph (or, on a store without graph queries,\n   * class hierarchy) was written, packages left as they were (unchanged, or their data could not\n   * be read), and the graphs written and dropped. Set by `POST /admin/sync-shapes`.\n   */\n  ontologies?: { written: string[]; skipped: string[]; graphs?: string[]; droppedGraphs?: string[] };\n  /** The shape check's findings, counted by severity (each is logged). Set by `POST /admin/sync-shapes`. */\n  shapeCheck?: { errors: number; warnings: number };\n}\n\n/** npm's package-name rule: optional `@scope/`, lower case, URL-safe, no leading `.` or `_` (a scope may start with `_`, as `@_linked` does). */\nconst NPM_NAME = /^(?:@[a-z0-9-~_][a-z0-9-._~]*\\/)?[a-z0-9-~][a-z0-9-._~]*$/;\n\n/** Whether `name` is a valid npm package name (and so can never be a path like `..`). */\nexport function isValidPackageName(name: string): boolean {\n  return name.length <= 214 && NPM_NAME.test(name) && !name.split('/').some((part) => part === '.' || part === '..');\n}\n\n/**\n * Refuse a package a host may not ask to reload: not a valid npm name, a framework\n * (`@_linked/*`) package, or not in `allowed` (the app's own name and its direct\n * dependencies). Throws {@link AdminRequestError}.\n */\nexport function assertReloadablePackages(packages: string[], allowed: ReadonlySet<string>): void {\n  for (const pkg of packages) {\n    if (!isValidPackageName(pkg)) throw new AdminRequestError(`not a package name: ${JSON.stringify(pkg)}`);\n    if (pkg.startsWith('@_linked/')) throw new AdminRequestError(`framework packages are not reloaded: ${pkg}`);\n    if (!allowed.has(pkg)) {\n      throw new AdminRequestError(`unknown package: ${pkg} is neither the app nor one of its direct dependencies`);\n    }\n  }\n}\n\n/** Thrown by a handler for a request the channel refuses with 400. */\nexport class AdminRequestError extends Error {}\n\nexport interface AdminChannelHandlers {\n  /** Exit the process (the host restarts it). Called after the 202 is sent. */\n  exit: () => void;\n  /** Reload `packages` (when given) and sync the registered shapes into app data. */\n  syncShapes: (request: { packages: string[] }) => Promise<ShapeSyncResult>;\n  /**\n   * Drop the cached graph registry for `dataset` (see `POST /admin/graph-registry-changed`).\n   * Default: {@link dropGraphRegistryCache}.\n   */\n  graphRegistryChanged?: (dataset: string) => void;\n  /** The effective graph routes (see `GET /admin/routes`). Default: {@link effectiveGraphRoutes}. */\n  routes?: () => EffectiveRoutes;\n  /** Where deprecation warnings go. Default: `console.warn`. */\n  warn?: (message: string) => void;\n}\n\n/**\n * Drop the process's cached graph registry after the host changed the graphs of `dataset`.\n *\n * Every entry is dropped, not only that dataset's: an entry's key is each store's own\n * (`graphRegistryKey()`: a `FusekiStore` keys by its dataset URL, a `RemoteDataset` by the\n * dataset its server names), no store tells which key it uses, and the stores are built by the\n * app's storage config, whose aliases the server does not see. The registry is small, so the cost\n * is one registry read per dataset on its next expanding read.\n */\nexport function dropGraphRegistryCache(_dataset: string): void {\n  invalidateGraphRegistry();\n}\n\n/** The `dataset` of a graph-registry-changed body: a non-empty name. */\nexport function parseGraphRegistryChangedBody(body: unknown): { dataset: string } {\n  const dataset = body && typeof body === 'object' ? (body as { dataset?: unknown }).dataset : undefined;\n  if (typeof dataset !== 'string' || !dataset.trim() || dataset.length > 1024) {\n    throw new AdminRequestError('dataset must be the name of the dataset whose graphs changed');\n  }\n  return { dataset: dataset.trim() };\n}\n\n/**\n * Compare the provided secret with the configured one in constant time. Both sides are hashed\n * first, so the comparison does not reveal the secret's length either.\n */\nexport function adminSecretMatches(\n  secret: string | undefined,\n  provided: string | undefined\n): boolean {\n  if (!secret || !provided) return false;\n  const digest = (value: string) => createHash('sha256').update(value).digest();\n  return timingSafeEqual(digest(provided), digest(secret));\n}\n\n/** The `packages` of a sync-shapes body: a list of package names, or none. */\nexport function parseSyncShapesBody(body: unknown): { packages: string[] } {\n  if (body === undefined || body === null || body === '') return { packages: [] };\n  if (typeof body !== 'object') {\n    throw new AdminRequestError('the body must be a JSON object');\n  }\n  const packages = (body as { packages?: unknown }).packages;\n  if (packages === undefined) return { packages: [] };\n  if (!Array.isArray(packages) || packages.some((p) => typeof p !== 'string' || !p)) {\n    throw new AdminRequestError('packages must be a list of package names');\n  }\n  for (const p of packages as string[]) {\n    if (!isValidPackageName(p)) throw new AdminRequestError(`not a package name: ${JSON.stringify(p)}`);\n  }\n  return { packages: [...new Set(packages as string[])] };\n}\n\n/** Mount the control channel's routes on `app`. */\nexport function registerAdminRoutes(\n  app: express.Express,\n  secret: string | undefined,\n  handlers: AdminChannelHandlers\n): void {\n  const requireAdmin = (req: express.Request, res: express.Response): boolean => {\n    if (!secret) {\n      res.sendStatus(404); // no control channel in this mode\n      return false;\n    }\n    if (!adminSecretMatches(secret, providedSecret(req, handlers.warn ?? console.warn))) {\n      res.sendStatus(401);\n      return false;\n    }\n    return true;\n  };\n\n  app.get('/admin/health', (req, res) => {\n    if (!requireAdmin(req, res)) return;\n    res.status(200).json({ status: 'ok' });\n  });\n\n  app.post('/admin/restart', (req, res) => {\n    if (!requireAdmin(req, res)) return;\n    res.sendStatus(202);\n    setTimeout(handlers.exit, 50);\n  });\n\n  app.get('/admin/routes', (req, res) => {\n    if (!requireAdmin(req, res)) return;\n    try {\n      res.status(200).json((handlers.routes ?? effectiveGraphRoutes)());\n    } catch (err) {\n      res.status(500).json({ error: err instanceof Error ? err.message : String(err) });\n    }\n  });\n\n  app.post('/admin/graph-registry-changed', (req, res) => {\n    if (!requireAdmin(req, res)) return;\n    let dataset: string;\n    try {\n      ({ dataset } = parseGraphRegistryChangedBody(req.body));\n    } catch (err) {\n      res.status(400).json({ error: (err as Error).message });\n      return;\n    }\n    (handlers.graphRegistryChanged ?? dropGraphRegistryCache)(dataset);\n    res.status(200).json({ invalidated: dataset });\n  });\n\n  app.post('/admin/sync-shapes', async (req, res) => {\n    if (!requireAdmin(req, res)) return;\n    let request: { packages: string[] };\n    try {\n      request = parseSyncShapesBody(req.body);\n    } catch (err) {\n      res.status(400).json({ error: (err as Error).message });\n      return;\n    }\n    try {\n      res.status(200).json(await handlers.syncShapes(request));\n    } catch (err) {\n      const status = err instanceof AdminRequestError ? 400 : 500;\n      res.status(status).json({ error: err instanceof Error ? err.message : String(err) });\n    }\n  });\n}\n"]}
+{"version":3,"file":"adminChannel.js","sourceRoot":"","sources":["../../../src/utils/adminChannel.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,QAAQ,CAAC;AAErD,OAAO,EAAE,uBAAuB,EAAE,MAAM,wCAAwC,CAAC;AAEjF,OAAO,EAAE,oBAAoB,EAAwB,MAAM,sBAAsB,CAAC;AAElF,wEAAwE;AACxE,MAAM,CAAC,MAAM,gBAAgB,GAAG,kBAAkB,CAAC;AACnD,kDAAkD;AAClD,MAAM,CAAC,MAAM,mBAAmB,GAAG,oBAAoB,CAAC;AAExD,+FAA+F;AAC/F,MAAM,UAAU,kBAAkB,CAChC,MAA0C,OAAO,CAAC,GAAG;IAErD,OAAO,GAAG,CAAC,gBAAgB,CAAC,IAAI,SAAS,CAAC;AAC5C,CAAC;AAoCD,iJAAiJ;AACjJ,MAAM,QAAQ,GAAG,2DAA2D,CAAC;AAE7E,yFAAyF;AACzF,MAAM,UAAU,kBAAkB,CAAC,IAAY;IAC7C,OAAO,IAAI,CAAC,MAAM,IAAI,GAAG,IAAI,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,IAAI,CAAC,CAAC;AACrH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,wBAAwB,CAAC,QAAkB,EAAE,OAA4B;IACvF,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;QAC3B,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC;YAAE,MAAM,IAAI,iBAAiB,CAAC,uBAAuB,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACxG,IAAI,GAAG,CAAC,UAAU,CAAC,WAAW,CAAC;YAAE,MAAM,IAAI,iBAAiB,CAAC,wCAAwC,GAAG,EAAE,CAAC,CAAC;QAC5G,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YACtB,MAAM,IAAI,iBAAiB,CAAC,oBAAoB,GAAG,wDAAwD,CAAC,CAAC;QAC/G,CAAC;IACH,CAAC;AACH,CAAC;AAED,sEAAsE;AACtE,MAAM,OAAO,iBAAkB,SAAQ,KAAK;CAAG;AAgB/C;;;;;;;;GAQG;AACH,MAAM,UAAU,sBAAsB,CAAC,QAAgB;IACrD,uBAAuB,EAAE,CAAC;AAC5B,CAAC;AAED,wEAAwE;AACxE,MAAM,UAAU,6BAA6B,CAAC,IAAa;IACzD,MAAM,OAAO,GAAG,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAE,IAA8B,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;IACvG,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,EAAE,CAAC;QAC5E,MAAM,IAAI,iBAAiB,CAAC,8DAA8D,CAAC,CAAC;IAC9F,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC;AACrC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAChC,MAA0B,EAC1B,QAA4B;IAE5B,IAAI,CAAC,MAAM,IAAI,CAAC,QAAQ;QAAE,OAAO,KAAK,CAAC;IACvC,MAAM,MAAM,GAAG,CAAC,KAAa,EAAE,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,CAAC;IAC9E,OAAO,eAAe,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;AAC3D,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,mBAAmB,CAAC,IAAa;IAC/C,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,EAAE;QAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;IAChF,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC7B,MAAM,IAAI,iBAAiB,CAAC,gCAAgC,CAAC,CAAC;IAChE,CAAC;IACD,MAAM,QAAQ,GAAI,IAA+B,CAAC,QAAQ,CAAC;IAC3D,IAAI,QAAQ,KAAK,SAAS;QAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;IACpD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;QAClF,MAAM,IAAI,iBAAiB,CAAC,0CAA0C,CAAC,CAAC;IAC1E,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,QAAoB,EAAE,CAAC;QACrC,IAAI,CAAC,kBAAkB,CAAC,CAAC,CAAC;YAAE,MAAM,IAAI,iBAAiB,CAAC,uBAAuB,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IACtG,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,QAAoB,CAAC,CAAC,EAAE,CAAC;AAC1D,CAAC;AAED,mDAAmD;AACnD,MAAM,UAAU,mBAAmB,CACjC,GAAoB,EACpB,MAA0B,EAC1B,QAA8B;IAE9B,MAAM,YAAY,GAAG,CAAC,GAAoB,EAAE,GAAqB,EAAW,EAAE;QAC5E,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,kCAAkC;YACvD,OAAO,KAAK,CAAC;QACf,CAAC;QACD,IAAI,CAAC,kBAAkB,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC,EAAE,CAAC;YAC9D,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;YACpB,OAAO,KAAK,CAAC;QACf,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC,CAAC;IAEF,GAAG,CAAC,GAAG,CAAC,eAAe,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QACpC,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,GAAG,CAAC;YAAE,OAAO;QACpC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,IAAI,CAAC,gBAAgB,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QACtC,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,GAAG,CAAC;YAAE,OAAO;QACpC,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;QACpB,UAAU,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IAChC,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CAAC,eAAe,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;;QACpC,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,GAAG,CAAC;YAAE,OAAO;QACpC,IAAI,CAAC;YACH,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,MAAA,QAAQ,CAAC,MAAM,mCAAI,oBAAoB,CAAC,EAAE,CAAC,CAAC;QACpE,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACpF,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,IAAI,CAAC,+BAA+B,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;;QACrD,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,GAAG,CAAC;YAAE,OAAO;QACpC,IAAI,OAAe,CAAC;QACpB,IAAI,CAAC;YACH,CAAC,EAAE,OAAO,EAAE,GAAG,6BAA6B,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;QAC1D,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAG,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;YACxD,OAAO;QACT,CAAC;QACD,CAAC,MAAA,QAAQ,CAAC,oBAAoB,mCAAI,sBAAsB,CAAC,CAAC,OAAO,CAAC,CAAC;QACnE,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC,CAAC;IACjD,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,IAAI,CAAC,oBAAoB,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QAChD,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,GAAG,CAAC;YAAE,OAAO;QACpC,IAAI,OAA+B,CAAC;QACpC,IAAI,CAAC;YACH,OAAO,GAAG,mBAAmB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC1C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAG,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;YACxD,OAAO;QACT,CAAC;QACD,IAAI,CAAC;YACH,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC;QAC3D,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,MAAM,GAAG,GAAG,YAAY,iBAAiB,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;YAC5D,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACvF,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC","sourcesContent":["/**\n * The host→app control channel: `/admin/*` routes a host uses on an app process it\n * started. Present only when the process was started with a shared secret in\n * `APP_ADMIN_SECRET` (see {@link resolveAdminSecret}); without it every route answers\n * 404, so a standalone app has no control channel. Every request carries the secret in\n * the `x-app-admin-secret` header (401 otherwise).\n *\n * - `GET /admin/health` → 200 `{status: 'ok'}` once the server listens (the boot\n *   shape sync has finished by then).\n * - `POST /admin/restart` → 202, then the process exits; the host starts it again.\n * - `POST /admin/sync-shapes` → re-syncs the app's ontologies (each registered package's\n *   ontology graph, skipped when unchanged), runs the shape check and\n *   re-syncs its shapes into its app data (each package's shape graph and the app's own,\n *   skipped when unchanged), as the boot does, and answers 200 with\n *   {@link ShapeSyncResult}, whose `shapeGraphs` reports the shape graphs. Body (optional):\n *   `{packages: string[]}`, packages whose source changed on disk: in dev they are\n *   reloaded first, so the sync sees shapes added or changed since the boot. Each\n *   name must be a valid npm package name and the app itself or one of its direct\n *   dependencies, never an `@_linked/*` framework package; anything else answers\n *   400 `{error}`. The list never filters the syncs. A failed or timed-out sync\n *   answers 500 `{error}` (a failed ontology sync too, after the shape sync ran).\n * - `POST /admin/graph-registry-changed` `{dataset}` → the host changed the named graphs of that\n *   dataset (a graph query through its gateway): the process drops its cached graph registry, so\n *   its next `.from(graphs.allOntologies)` read re-reads it, and answers 200\n *   `{invalidated: dataset}`. A body without a dataset name answers 400. Without the push the\n *   cache's 30-second expiry applies.\n * - `GET /admin/routes` → 200 {@link EffectiveRoutes}: the graph routes of every dataset the\n *   router knows (shape IRI → graph IRI) and the shapes each one writes to its default graph,\n *   as core's routing holds them once the app's storage file has run. The routes are written\n *   only in the app's storage file; this route lets a host check what actually runs.\n */\nimport { createHash, timingSafeEqual } from 'crypto';\nimport type express from 'express';\nimport { invalidateGraphRegistry } from '@_linked/core/utils/graphRegistryCache';\nimport type { ShapeGraphsReport } from './syncShapes.js';\nimport { effectiveGraphRoutes, type EffectiveRoutes } from './effectiveRoutes.js';\n\n/** The environment variable that holds the control channel's secret. */\nexport const ADMIN_SECRET_ENV = 'APP_ADMIN_SECRET';\n/** The request header that carries the secret. */\nexport const ADMIN_SECRET_HEADER = 'x-app-admin-secret';\n\n/** The control channel's secret: `APP_ADMIN_SECRET`, else `undefined` (no control channel). */\nexport function resolveAdminSecret(\n  env: Record<string, string | undefined> = process.env\n): string | undefined {\n  return env[ADMIN_SECRET_ENV] || undefined;\n}\n\n/** What one shape sync did. */\nexport interface ShapeSyncResult {\n  /**\n   * Shape graphs written (package graphs and the app's own graph) because their stored hash\n   * differed; on a store without graph queries, the default-graph sync's writes.\n   */\n  written: number;\n  /** The orphan policy the sync ran with (see utils/syncShapes). */\n  orphanScope?: 'all' | 'none';\n  /** Set when no sync ran: shape sync is turned off, or there is no default dataset. */\n  skipped?: 'disabled' | 'no-default-dataset';\n  /**\n   * The shape graph sync: packages written and skipped, the graphs written, the app's own shape\n   * graph, the registered packages without `shapes.ttl` (so without a shape graph) and the\n   * default-graph shapes removed. Absent when no sync ran.\n   */\n  shapeGraphs?: ShapeGraphsReport;\n  /**\n   * The requested packages whose source was reloaded before the sync (dev only: a built\n   * app reloads nothing). Set by `POST /admin/sync-shapes`.\n   */\n  reloaded?: string[];\n  /** The node shape IRIs registered in the process after the reload. Set by `POST /admin/sync-shapes`. */\n  shapes?: string[];\n  /**\n   * The ontology sync: packages whose ontology graph (or, on a store without graph queries,\n   * class hierarchy) was written, packages left as they were (unchanged, or their data could not\n   * be read), and the graphs written and dropped. Set by `POST /admin/sync-shapes`.\n   */\n  ontologies?: { written: string[]; skipped: string[]; graphs?: string[]; droppedGraphs?: string[] };\n  /** The shape check's findings, counted by severity (each is logged). Set by `POST /admin/sync-shapes`. */\n  shapeCheck?: { errors: number; warnings: number };\n}\n\n/** npm's package-name rule: optional `@scope/`, lower case, URL-safe, no leading `.` or `_` (a scope may start with `_`, as `@_linked` does). */\nconst NPM_NAME = /^(?:@[a-z0-9-~_][a-z0-9-._~]*\\/)?[a-z0-9-~][a-z0-9-._~]*$/;\n\n/** Whether `name` is a valid npm package name (and so can never be a path like `..`). */\nexport function isValidPackageName(name: string): boolean {\n  return name.length <= 214 && NPM_NAME.test(name) && !name.split('/').some((part) => part === '.' || part === '..');\n}\n\n/**\n * Refuse a package a host may not ask to reload: not a valid npm name, a framework\n * (`@_linked/*`) package, or not in `allowed` (the app's own name and its direct\n * dependencies). Throws {@link AdminRequestError}.\n */\nexport function assertReloadablePackages(packages: string[], allowed: ReadonlySet<string>): void {\n  for (const pkg of packages) {\n    if (!isValidPackageName(pkg)) throw new AdminRequestError(`not a package name: ${JSON.stringify(pkg)}`);\n    if (pkg.startsWith('@_linked/')) throw new AdminRequestError(`framework packages are not reloaded: ${pkg}`);\n    if (!allowed.has(pkg)) {\n      throw new AdminRequestError(`unknown package: ${pkg} is neither the app nor one of its direct dependencies`);\n    }\n  }\n}\n\n/** Thrown by a handler for a request the channel refuses with 400. */\nexport class AdminRequestError extends Error {}\n\nexport interface AdminChannelHandlers {\n  /** Exit the process (the host restarts it). Called after the 202 is sent. */\n  exit: () => void;\n  /** Reload `packages` (when given) and sync the registered shapes into app data. */\n  syncShapes: (request: { packages: string[] }) => Promise<ShapeSyncResult>;\n  /**\n   * Drop the cached graph registry for `dataset` (see `POST /admin/graph-registry-changed`).\n   * Default: {@link dropGraphRegistryCache}.\n   */\n  graphRegistryChanged?: (dataset: string) => void;\n  /** The effective graph routes (see `GET /admin/routes`). Default: {@link effectiveGraphRoutes}. */\n  routes?: () => EffectiveRoutes;\n}\n\n/**\n * Drop the process's cached graph registry after the host changed the graphs of `dataset`.\n *\n * Every entry is dropped, not only that dataset's: an entry's key is each store's own\n * (`graphRegistryKey()`: a `FusekiStore` keys by its dataset URL, a `RemoteDataset` by the\n * dataset its server names), no store tells which key it uses, and the stores are built by the\n * app's storage config, whose aliases the server does not see. The registry is small, so the cost\n * is one registry read per dataset on its next expanding read.\n */\nexport function dropGraphRegistryCache(_dataset: string): void {\n  invalidateGraphRegistry();\n}\n\n/** The `dataset` of a graph-registry-changed body: a non-empty name. */\nexport function parseGraphRegistryChangedBody(body: unknown): { dataset: string } {\n  const dataset = body && typeof body === 'object' ? (body as { dataset?: unknown }).dataset : undefined;\n  if (typeof dataset !== 'string' || !dataset.trim() || dataset.length > 1024) {\n    throw new AdminRequestError('dataset must be the name of the dataset whose graphs changed');\n  }\n  return { dataset: dataset.trim() };\n}\n\n/**\n * Compare the provided secret with the configured one in constant time. Both sides are hashed\n * first, so the comparison does not reveal the secret's length either.\n */\nexport function adminSecretMatches(\n  secret: string | undefined,\n  provided: string | undefined\n): boolean {\n  if (!secret || !provided) return false;\n  const digest = (value: string) => createHash('sha256').update(value).digest();\n  return timingSafeEqual(digest(provided), digest(secret));\n}\n\n/** The `packages` of a sync-shapes body: a list of package names, or none. */\nexport function parseSyncShapesBody(body: unknown): { packages: string[] } {\n  if (body === undefined || body === null || body === '') return { packages: [] };\n  if (typeof body !== 'object') {\n    throw new AdminRequestError('the body must be a JSON object');\n  }\n  const packages = (body as { packages?: unknown }).packages;\n  if (packages === undefined) return { packages: [] };\n  if (!Array.isArray(packages) || packages.some((p) => typeof p !== 'string' || !p)) {\n    throw new AdminRequestError('packages must be a list of package names');\n  }\n  for (const p of packages as string[]) {\n    if (!isValidPackageName(p)) throw new AdminRequestError(`not a package name: ${JSON.stringify(p)}`);\n  }\n  return { packages: [...new Set(packages as string[])] };\n}\n\n/** Mount the control channel's routes on `app`. */\nexport function registerAdminRoutes(\n  app: express.Express,\n  secret: string | undefined,\n  handlers: AdminChannelHandlers\n): void {\n  const requireAdmin = (req: express.Request, res: express.Response): boolean => {\n    if (!secret) {\n      res.sendStatus(404); // no control channel in this mode\n      return false;\n    }\n    if (!adminSecretMatches(secret, req.get(ADMIN_SECRET_HEADER))) {\n      res.sendStatus(401);\n      return false;\n    }\n    return true;\n  };\n\n  app.get('/admin/health', (req, res) => {\n    if (!requireAdmin(req, res)) return;\n    res.status(200).json({ status: 'ok' });\n  });\n\n  app.post('/admin/restart', (req, res) => {\n    if (!requireAdmin(req, res)) return;\n    res.sendStatus(202);\n    setTimeout(handlers.exit, 50);\n  });\n\n  app.get('/admin/routes', (req, res) => {\n    if (!requireAdmin(req, res)) return;\n    try {\n      res.status(200).json((handlers.routes ?? effectiveGraphRoutes)());\n    } catch (err) {\n      res.status(500).json({ error: err instanceof Error ? err.message : String(err) });\n    }\n  });\n\n  app.post('/admin/graph-registry-changed', (req, res) => {\n    if (!requireAdmin(req, res)) return;\n    let dataset: string;\n    try {\n      ({ dataset } = parseGraphRegistryChangedBody(req.body));\n    } catch (err) {\n      res.status(400).json({ error: (err as Error).message });\n      return;\n    }\n    (handlers.graphRegistryChanged ?? dropGraphRegistryCache)(dataset);\n    res.status(200).json({ invalidated: dataset });\n  });\n\n  app.post('/admin/sync-shapes', async (req, res) => {\n    if (!requireAdmin(req, res)) return;\n    let request: { packages: string[] };\n    try {\n      request = parseSyncShapesBody(req.body);\n    } catch (err) {\n      res.status(400).json({ error: (err as Error).message });\n      return;\n    }\n    try {\n      res.status(200).json(await handlers.syncShapes(request));\n    } catch (err) {\n      const status = err instanceof AdminRequestError ? 400 : 500;\n      res.status(status).json({ error: err instanceof Error ? err.message : String(err) });\n    }\n  });\n}\n"]}

package/lib/esm/utils/effectiveRoutes.d.ts

@@ -16,11 +16,22 @@ export interface DatasetRoutes {
      * default graph: no route of their own and no routed super-shape. Sorted.
      */
     defaultGraphShapes: string[];
+    /**
+     * Where the dataset keeps the packages' ontology data and shapes (core's graph targets:
+     * `'package'`, `'default'` or a shared graph IRI), when its store has them.
+     */
+    ontologyGraph?: string;
+    shapeGraph?: string;
 }
 /** The body of `GET /admin/routes`. */
 export interface EffectiveRoutes {
     /** Every dataset the router knows, the default one first, then in the order they were pinned. */
     datasets: DatasetRoutes[];
+    /**
+     * `LINKED_ONTOLOGY_GRAPH` / `LINKED_SHAPE_GRAPH` as the process has them (unset ones left out),
+     * so a host sees them also for stores that take no graph targets.
+     */
+    graphTargetEnv: Record<string, string>;
 }
 /** The routes of every dataset the router knows (see {@link EffectiveRoutes}). */
-export declare function effectiveGraphRoutes(): EffectiveRoutes;
+export declare function effectiveGraphRoutes(env?: Record<string, string | undefined>): EffectiveRoutes;

package/lib/esm/utils/effectiveRoutes.js

@@ -8,8 +8,9 @@ import { LinkedStorage } from '@_linked/core/utils/LinkedStorage';
 import { getShapeGraphs, graphRoutingFor } from '@_linked/core/utils/graphRouting';
 import { getAllShapeClasses } from '@_linked/core/utils/ShapeClass';
 import { graphs } from '@_linked/core/ontologies/graphs';
+import { graphTargetEnv } from './graphTargets.js';
 /** The routes of every dataset the router knows (see {@link EffectiveRoutes}). */
-export function effectiveGraphRoutes() {
+export function effectiveGraphRoutes(env = process.env) {
     var _a, _b;
     const datasets = [...LinkedStorage.getDatasets()];
     const defaultDataset = LinkedStorage.getDefaultDataset();
@@ -27,14 +28,17 @@ export function effectiveGraphRoutes() {
         datasets: datasets.map((dataset) => {
             var _a, _b;
             const id = dataset.id;
+            const targets = typeof (dataset === null || dataset === void 0 ? void 0 : dataset.graphTargets) === 'function' ? dataset.graphTargets() : undefined;
             return {
                 store: ((_a = dataset === null || dataset === void 0 ? void 0 : dataset.constructor) === null || _a === void 0 ? void 0 : _a.name) || 'unknown',
                 ...(typeof id === 'string' && id ? { id } : {}),
                 default: dataset === defaultDataset,
                 routes: getShapeGraphs(dataset),
                 defaultGraphShapes: ((_b = defaultGraphShapes.get(dataset)) !== null && _b !== void 0 ? _b : []).sort(),
+                ...(targets ? { ontologyGraph: targets.ontologyGraph, shapeGraph: targets.shapeGraph } : {}),
             };
         }),
+        graphTargetEnv: graphTargetEnv(env),
     };
 }
 //# sourceMappingURL=effectiveRoutes.js.map

package/lib/esm/utils/effectiveRoutes.js.map

@@ -1 +1 @@
-{"version":3,"file":"effectiveRoutes.js","sourceRoot":"","sources":["../../../src/utils/effectiveRoutes.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EAAE,aAAa,EAAE,MAAM,mCAAmC,CAAC;AAClE,OAAO,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,kCAAkC,CAAC;AACnF,OAAO,EAAE,kBAAkB,EAAE,MAAM,gCAAgC,CAAC;AACpE,OAAO,EAAE,MAAM,EAAE,MAAM,iCAAiC,CAAC;AA6BzD,kFAAkF;AAClF,MAAM,UAAU,oBAAoB;;IAClC,MAAM,QAAQ,GAAG,CAAC,GAAG,aAAa,CAAC,WAAW,EAAE,CAAC,CAAC;IAClD,MAAM,cAAc,GAAG,aAAa,CAAC,iBAAiB,EAAE,CAAC;IACzD,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAqB,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;IACvF,KAAK,MAAM,CAAC,GAAG,EAAE,UAAU,CAAC,IAAI,kBAAkB,EAAE,EAAE,CAAC;QACrD,MAAM,OAAO,GAAG,aAAa,CAAC,uBAAuB,CAAC,UAAU,CAAC,CAAC;QAClE,MAAM,IAAI,GAAG,OAAO,IAAI,kBAAkB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACxD,IAAI,CAAC,IAAI;YAAE,SAAS;QACpB,MAAM,KAAK,GAAG,MAAA,MAAA,eAAe,CAAC,OAAO,CAAC,0CAAE,aAAa,CAAC,GAAG,CAAC,mCAAI,MAAM,CAAC,OAAO,CAAC;QAC7E,IAAI,KAAK,KAAK,MAAM,CAAC,OAAO;YAAE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC/C,CAAC;IACD,OAAO;QACL,QAAQ,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE;;YACjC,MAAM,EAAE,GAAI,OAA4B,CAAC,EAAE,CAAC;YAC5C,OAAO;gBACL,KAAK,EAAE,CAAA,MAAA,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,WAAW,0CAAE,IAAI,KAAI,SAAS;gBAC9C,GAAG,CAAC,OAAO,EAAE,KAAK,QAAQ,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC/C,OAAO,EAAE,OAAO,KAAK,cAAc;gBACnC,MAAM,EAAE,cAAc,CAAC,OAAO,CAAC;gBAC/B,kBAAkB,EAAE,CAAC,MAAA,kBAAkB,CAAC,GAAG,CAAC,OAAO,CAAC,mCAAI,EAAE,CAAC,CAAC,IAAI,EAAE;aACnE,CAAC;QACJ,CAAC,CAAC;KACH,CAAC;AACJ,CAAC","sourcesContent":["/**\n * The graph routes the process runs with, as core's routing holds them once the app's storage\n * file has run (`LinkedStorage.setDatasetForShapes(dataset, shapes, {graph})`, or `loadStores`\n * for a datasets config that still carries routes). Answered by `GET /admin/routes`, so a host\n * can compare what it wrote into the storage file with what actually runs.\n */\nimport { LinkedStorage } from '@_linked/core/utils/LinkedStorage';\nimport { getShapeGraphs, graphRoutingFor } from '@_linked/core/utils/graphRouting';\nimport { getAllShapeClasses } from '@_linked/core/utils/ShapeClass';\nimport { graphs } from '@_linked/core/ontologies/graphs';\nimport type { IDataset } from '@_linked/core/interfaces/IDataset';\n\n/** One dataset the router knows, and its graph routes. */\nexport interface DatasetRoutes {\n  /**\n   * The store's class name (`FusekiStore`, `RemoteDataset`, …). The server never sees the\n   * aliases of the storage config, so a dataset is told apart by this, `default` and `id`.\n   */\n  store: string;\n  /** The store's `id`, when it has one (a named `RemoteDataset` does). */\n  id?: string;\n  /** Whether this is the default dataset (the one for every shape without a pin). */\n  default: boolean;\n  /** The dataset's routes as registered: shape IRI → graph IRI. */\n  routes: Record<string, string>;\n  /**\n   * The registered shapes that resolve to this dataset and whose instances are written to its\n   * default graph: no route of their own and no routed super-shape. Sorted.\n   */\n  defaultGraphShapes: string[];\n}\n\n/** The body of `GET /admin/routes`. */\nexport interface EffectiveRoutes {\n  /** Every dataset the router knows, the default one first, then in the order they were pinned. */\n  datasets: DatasetRoutes[];\n}\n\n/** The routes of every dataset the router knows (see {@link EffectiveRoutes}). */\nexport function effectiveGraphRoutes(): EffectiveRoutes {\n  const datasets = [...LinkedStorage.getDatasets()];\n  const defaultDataset = LinkedStorage.getDefaultDataset();\n  const defaultGraphShapes = new Map<IDataset, string[]>(datasets.map((ds) => [ds, []]));\n  for (const [iri, shapeClass] of getAllShapeClasses()) {\n    const dataset = LinkedStorage.getDatasetForShapeClass(shapeClass);\n    const list = dataset && defaultGraphShapes.get(dataset);\n    if (!list) continue;\n    const graph = graphRoutingFor(dataset)?.graphForShape(iri) ?? graphs.default;\n    if (graph === graphs.default) list.push(iri);\n  }\n  return {\n    datasets: datasets.map((dataset) => {\n      const id = (dataset as { id?: unknown }).id;\n      return {\n        store: dataset?.constructor?.name || 'unknown',\n        ...(typeof id === 'string' && id ? { id } : {}),\n        default: dataset === defaultDataset,\n        routes: getShapeGraphs(dataset),\n        defaultGraphShapes: (defaultGraphShapes.get(dataset) ?? []).sort(),\n      };\n    }),\n  };\n}\n"]}
+{"version":3,"file":"effectiveRoutes.js","sourceRoot":"","sources":["../../../src/utils/effectiveRoutes.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EAAE,aAAa,EAAE,MAAM,mCAAmC,CAAC;AAClE,OAAO,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,kCAAkC,CAAC;AACnF,OAAO,EAAE,kBAAkB,EAAE,MAAM,gCAAgC,CAAC;AACpE,OAAO,EAAE,MAAM,EAAE,MAAM,iCAAiC,CAAC;AAEzD,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAuCnD,kFAAkF;AAClF,MAAM,UAAU,oBAAoB,CAAC,MAA0C,OAAO,CAAC,GAAG;;IACxF,MAAM,QAAQ,GAAG,CAAC,GAAG,aAAa,CAAC,WAAW,EAAE,CAAC,CAAC;IAClD,MAAM,cAAc,GAAG,aAAa,CAAC,iBAAiB,EAAE,CAAC;IACzD,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAqB,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;IACvF,KAAK,MAAM,CAAC,GAAG,EAAE,UAAU,CAAC,IAAI,kBAAkB,EAAE,EAAE,CAAC;QACrD,MAAM,OAAO,GAAG,aAAa,CAAC,uBAAuB,CAAC,UAAU,CAAC,CAAC;QAClE,MAAM,IAAI,GAAG,OAAO,IAAI,kBAAkB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACxD,IAAI,CAAC,IAAI;YAAE,SAAS;QACpB,MAAM,KAAK,GAAG,MAAA,MAAA,eAAe,CAAC,OAAO,CAAC,0CAAE,aAAa,CAAC,GAAG,CAAC,mCAAI,MAAM,CAAC,OAAO,CAAC;QAC7E,IAAI,KAAK,KAAK,MAAM,CAAC,OAAO;YAAE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC/C,CAAC;IACD,OAAO;QACL,QAAQ,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE;;YACjC,MAAM,EAAE,GAAI,OAA4B,CAAC,EAAE,CAAC;YAC5C,MAAM,OAAO,GAAG,OAAO,CAAA,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,YAAY,CAAA,KAAK,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;YACjG,OAAO;gBACL,KAAK,EAAE,CAAA,MAAA,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,WAAW,0CAAE,IAAI,KAAI,SAAS;gBAC9C,GAAG,CAAC,OAAO,EAAE,KAAK,QAAQ,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC/C,OAAO,EAAE,OAAO,KAAK,cAAc;gBACnC,MAAM,EAAE,cAAc,CAAC,OAAO,CAAC;gBAC/B,kBAAkB,EAAE,CAAC,MAAA,kBAAkB,CAAC,GAAG,CAAC,OAAO,CAAC,mCAAI,EAAE,CAAC,CAAC,IAAI,EAAE;gBAClE,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,OAAO,CAAC,aAAa,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC7F,CAAC;QACJ,CAAC,CAAC;QACF,cAAc,EAAE,cAAc,CAAC,GAAG,CAAC;KACpC,CAAC;AACJ,CAAC","sourcesContent":["/**\n * The graph routes the process runs with, as core's routing holds them once the app's storage\n * file has run (`LinkedStorage.setDatasetForShapes(dataset, shapes, {graph})`, or `loadStores`\n * for a datasets config that still carries routes). Answered by `GET /admin/routes`, so a host\n * can compare what it wrote into the storage file with what actually runs.\n */\nimport { LinkedStorage } from '@_linked/core/utils/LinkedStorage';\nimport { getShapeGraphs, graphRoutingFor } from '@_linked/core/utils/graphRouting';\nimport { getAllShapeClasses } from '@_linked/core/utils/ShapeClass';\nimport { graphs } from '@_linked/core/ontologies/graphs';\nimport type { IDataset } from '@_linked/core/interfaces/IDataset';\nimport { graphTargetEnv } from './graphTargets.js';\n\n/** One dataset the router knows, and its graph routes. */\nexport interface DatasetRoutes {\n  /**\n   * The store's class name (`FusekiStore`, `RemoteDataset`, …). The server never sees the\n   * aliases of the storage config, so a dataset is told apart by this, `default` and `id`.\n   */\n  store: string;\n  /** The store's `id`, when it has one (a named `RemoteDataset` does). */\n  id?: string;\n  /** Whether this is the default dataset (the one for every shape without a pin). */\n  default: boolean;\n  /** The dataset's routes as registered: shape IRI → graph IRI. */\n  routes: Record<string, string>;\n  /**\n   * The registered shapes that resolve to this dataset and whose instances are written to its\n   * default graph: no route of their own and no routed super-shape. Sorted.\n   */\n  defaultGraphShapes: string[];\n  /**\n   * Where the dataset keeps the packages' ontology data and shapes (core's graph targets:\n   * `'package'`, `'default'` or a shared graph IRI), when its store has them.\n   */\n  ontologyGraph?: string;\n  shapeGraph?: string;\n}\n\n/** The body of `GET /admin/routes`. */\nexport interface EffectiveRoutes {\n  /** Every dataset the router knows, the default one first, then in the order they were pinned. */\n  datasets: DatasetRoutes[];\n  /**\n   * `LINKED_ONTOLOGY_GRAPH` / `LINKED_SHAPE_GRAPH` as the process has them (unset ones left out),\n   * so a host sees them also for stores that take no graph targets.\n   */\n  graphTargetEnv: Record<string, string>;\n}\n\n/** The routes of every dataset the router knows (see {@link EffectiveRoutes}). */\nexport function effectiveGraphRoutes(env: Record<string, string | undefined> = process.env): EffectiveRoutes {\n  const datasets = [...LinkedStorage.getDatasets()];\n  const defaultDataset = LinkedStorage.getDefaultDataset();\n  const defaultGraphShapes = new Map<IDataset, string[]>(datasets.map((ds) => [ds, []]));\n  for (const [iri, shapeClass] of getAllShapeClasses()) {\n    const dataset = LinkedStorage.getDatasetForShapeClass(shapeClass);\n    const list = dataset && defaultGraphShapes.get(dataset);\n    if (!list) continue;\n    const graph = graphRoutingFor(dataset)?.graphForShape(iri) ?? graphs.default;\n    if (graph === graphs.default) list.push(iri);\n  }\n  return {\n    datasets: datasets.map((dataset) => {\n      const id = (dataset as { id?: unknown }).id;\n      const targets = typeof dataset?.graphTargets === 'function' ? dataset.graphTargets() : undefined;\n      return {\n        store: dataset?.constructor?.name || 'unknown',\n        ...(typeof id === 'string' && id ? { id } : {}),\n        default: dataset === defaultDataset,\n        routes: getShapeGraphs(dataset),\n        defaultGraphShapes: (defaultGraphShapes.get(dataset) ?? []).sort(),\n        ...(targets ? { ontologyGraph: targets.ontologyGraph, shapeGraph: targets.shapeGraph } : {}),\n      };\n    }),\n    graphTargetEnv: graphTargetEnv(env),\n  };\n}\n"]}

package/lib/esm/utils/graphTargets.d.ts

@@ -0,0 +1,20 @@
+/**
+ * Where the stores keep the registered packages' ontology data and shapes: core's graph targets
+ * (`ontologyGraph`, `shapeGraph`; `@_linked/core/utils/graphTargets`), filled from the environment
+ * at boot. `LINKED_ONTOLOGY_GRAPH` and `LINKED_SHAPE_GRAPH` each take `'package'` (the default, one
+ * graph per package), `'default'` (the default graph) or the absolute IRI of one shared graph.
+ *
+ * The server reads them, checks them (an invalid value stops the boot, naming the variable), and
+ * sets them on every store registered in `LinkedStorage` at boot that takes graph targets, for
+ * what the store's own options leave unset. A store that takes none (`RemoteDataset`) runs `'package'`.
+ */
+import { type GraphTargets } from '@_linked/core/utils/graphTargets';
+/**
+ * Read `LINKED_ONTOLOGY_GRAPH` / `LINKED_SHAPE_GRAPH` from `env` (checked: an invalid value throws,
+ * naming the variable) and fill every store in `stores` that takes graph targets with them, where
+ * its own options leave a setting unset. A store that takes none gets one warning when the env sets
+ * a mode other than `'package'` (it runs `'package'`). Returns the settings the env gave.
+ */
+export declare function applyGraphTargetsFromEnv(env: Record<string, string | undefined>, stores: Iterable<unknown>, warn?: (message: string) => void): Partial<GraphTargets>;
+/** The env variables as set (unset and empty ones left out), for `GET /admin/routes`. */
+export declare function graphTargetEnv(env: Record<string, string | undefined>): Record<string, string>;

package/lib/esm/utils/graphTargets.js

@@ -0,0 +1,53 @@
+/**
+ * Where the stores keep the registered packages' ontology data and shapes: core's graph targets
+ * (`ontologyGraph`, `shapeGraph`; `@_linked/core/utils/graphTargets`), filled from the environment
+ * at boot. `LINKED_ONTOLOGY_GRAPH` and `LINKED_SHAPE_GRAPH` each take `'package'` (the default, one
+ * graph per package), `'default'` (the default graph) or the absolute IRI of one shared graph.
+ *
+ * The server reads them, checks them (an invalid value stops the boot, naming the variable), and
+ * sets them on every store registered in `LinkedStorage` at boot that takes graph targets, for
+ * what the store's own options leave unset. A store that takes none (`RemoteDataset`) runs `'package'`.
+ */
+import { GRAPH_TARGET_ENV, graphTargetOptionsFromEnv, } from '@_linked/core/utils/graphTargets';
+/**
+ * Read `LINKED_ONTOLOGY_GRAPH` / `LINKED_SHAPE_GRAPH` from `env` (checked: an invalid value throws,
+ * naming the variable) and fill every store in `stores` that takes graph targets with them, where
+ * its own options leave a setting unset. A store that takes none gets one warning when the env sets
+ * a mode other than `'package'` (it runs `'package'`). Returns the settings the env gave.
+ */
+export function applyGraphTargetsFromEnv(env, stores, warn = console.warn) {
+    var _a, _b, _c, _d, _e;
+    const fromEnv = graphTargetOptionsFromEnv(env);
+    if (Object.keys(fromEnv).length === 0)
+        return fromEnv;
+    const nonDefault = Object.values(fromEnv).some((value) => value !== 'package');
+    for (const store of stores) {
+        const target = store;
+        if (typeof (target === null || target === void 0 ? void 0 : target.setGraphTargets) === 'function') {
+            try {
+                target.setGraphTargets(fromEnv, { onlyUnset: true });
+            }
+            catch (error) {
+                throw new Error(`${GRAPH_TARGET_ENV.ontologyGraph} / ${GRAPH_TARGET_ENV.shapeGraph} do not fit ` +
+                    `${(_b = (_a = target.constructor) === null || _a === void 0 ? void 0 : _a.name) !== null && _b !== void 0 ? _b : 'a store'}'s own graph targets: ${(_c = error === null || error === void 0 ? void 0 : error.message) !== null && _c !== void 0 ? _c : error}`);
+            }
+        }
+        else if (nonDefault) {
+            warn(`[LinkedServer] ${(_e = (_d = target === null || target === void 0 ? void 0 : target.constructor) === null || _d === void 0 ? void 0 : _d.name) !== null && _e !== void 0 ? _e : 'a store'} takes no graph targets, so it runs ` +
+                `'package' for the ontology and shape graphs whatever ${GRAPH_TARGET_ENV.ontologyGraph} / ` +
+                `${GRAPH_TARGET_ENV.shapeGraph} set.`);
+        }
+    }
+    return fromEnv;
+}
+/** The env variables as set (unset and empty ones left out), for `GET /admin/routes`. */
+export function graphTargetEnv(env) {
+    const out = {};
+    for (const name of [GRAPH_TARGET_ENV.ontologyGraph, GRAPH_TARGET_ENV.shapeGraph]) {
+        const value = env[name];
+        if (value)
+            out[name] = value;
+    }
+    return out;
+}
+//# sourceMappingURL=graphTargets.js.map

package/lib/esm/utils/graphTargets.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"graphTargets.js","sourceRoot":"","sources":["../../../src/utils/graphTargets.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,EACL,gBAAgB,EAChB,yBAAyB,GAE1B,MAAM,kCAAkC,CAAC;AAQ1C;;;;;GAKG;AACH,MAAM,UAAU,wBAAwB,CACtC,GAAuC,EACvC,MAAyB,EACzB,OAAkC,OAAO,CAAC,IAAI;;IAE9C,MAAM,OAAO,GAAG,yBAAyB,CAAC,GAAG,CAAC,CAAC;IAC/C,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,OAAO,CAAC;IACtD,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC;IAC/E,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,MAAM,MAAM,GAAG,KAAuC,CAAC;QACvD,IAAI,OAAO,CAAA,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,eAAe,CAAA,KAAK,UAAU,EAAE,CAAC;YAClD,IAAI,CAAC;gBACH,MAAM,CAAC,eAAe,CAAC,OAAO,EAAE,EAAC,SAAS,EAAE,IAAI,EAAC,CAAC,CAAC;YACrD,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,IAAI,KAAK,CACb,GAAG,gBAAgB,CAAC,aAAa,MAAM,gBAAgB,CAAC,UAAU,cAAc;oBAC9E,GAAG,MAAA,MAAA,MAAM,CAAC,WAAW,0CAAE,IAAI,mCAAI,SAAS,yBAAyB,MAAC,KAAe,aAAf,KAAK,uBAAL,KAAK,CAAY,OAAO,mCAAI,KAAK,EAAE,CACxG,CAAC;YACJ,CAAC;QACH,CAAC;aAAM,IAAI,UAAU,EAAE,CAAC;YACtB,IAAI,CACF,kBAAkB,MAAA,MAAA,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,WAAW,0CAAE,IAAI,mCAAI,SAAS,sCAAsC;gBAC5F,wDAAwD,gBAAgB,CAAC,aAAa,KAAK;gBAC3F,GAAG,gBAAgB,CAAC,UAAU,OAAO,CACxC,CAAC;QACJ,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,yFAAyF;AACzF,MAAM,UAAU,cAAc,CAAC,GAAuC;IACpE,MAAM,GAAG,GAA2B,EAAE,CAAC;IACvC,KAAK,MAAM,IAAI,IAAI,CAAC,gBAAgB,CAAC,aAAa,EAAE,gBAAgB,CAAC,UAAU,CAAC,EAAE,CAAC;QACjF,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC;QACxB,IAAI,KAAK;YAAE,GAAG,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC;IAC/B,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC","sourcesContent":["/**\n * Where the stores keep the registered packages' ontology data and shapes: core's graph targets\n * (`ontologyGraph`, `shapeGraph`; `@_linked/core/utils/graphTargets`), filled from the environment\n * at boot. `LINKED_ONTOLOGY_GRAPH` and `LINKED_SHAPE_GRAPH` each take `'package'` (the default, one\n * graph per package), `'default'` (the default graph) or the absolute IRI of one shared graph.\n *\n * The server reads them, checks them (an invalid value stops the boot, naming the variable), and\n * sets them on every store registered in `LinkedStorage` at boot that takes graph targets, for\n * what the store's own options leave unset. A store that takes none (`RemoteDataset`) runs `'package'`.\n */\nimport {\n  GRAPH_TARGET_ENV,\n  graphTargetOptionsFromEnv,\n  type GraphTargets,\n} from '@_linked/core/utils/graphTargets';\n\n/** A store as this module sees it: one that may take graph targets. */\ntype TargetStore = {\n  setGraphTargets?: (options: Partial<GraphTargets>, how?: {onlyUnset?: boolean}) => void;\n  constructor?: {name?: string};\n};\n\n/**\n * Read `LINKED_ONTOLOGY_GRAPH` / `LINKED_SHAPE_GRAPH` from `env` (checked: an invalid value throws,\n * naming the variable) and fill every store in `stores` that takes graph targets with them, where\n * its own options leave a setting unset. A store that takes none gets one warning when the env sets\n * a mode other than `'package'` (it runs `'package'`). Returns the settings the env gave.\n */\nexport function applyGraphTargetsFromEnv(\n  env: Record<string, string | undefined>,\n  stores: Iterable<unknown>,\n  warn: (message: string) => void = console.warn,\n): Partial<GraphTargets> {\n  const fromEnv = graphTargetOptionsFromEnv(env);\n  if (Object.keys(fromEnv).length === 0) return fromEnv;\n  const nonDefault = Object.values(fromEnv).some((value) => value !== 'package');\n  for (const store of stores) {\n    const target = store as TargetStore | null | undefined;\n    if (typeof target?.setGraphTargets === 'function') {\n      try {\n        target.setGraphTargets(fromEnv, {onlyUnset: true});\n      } catch (error) {\n        throw new Error(\n          `${GRAPH_TARGET_ENV.ontologyGraph} / ${GRAPH_TARGET_ENV.shapeGraph} do not fit ` +\n            `${target.constructor?.name ?? 'a store'}'s own graph targets: ${(error as Error)?.message ?? error}`,\n        );\n      }\n    } else if (nonDefault) {\n      warn(\n        `[LinkedServer] ${target?.constructor?.name ?? 'a store'} takes no graph targets, so it runs ` +\n          `'package' for the ontology and shape graphs whatever ${GRAPH_TARGET_ENV.ontologyGraph} / ` +\n          `${GRAPH_TARGET_ENV.shapeGraph} set.`,\n      );\n    }\n  }\n  return fromEnv;\n}\n\n/** The env variables as set (unset and empty ones left out), for `GET /admin/routes`. */\nexport function graphTargetEnv(env: Record<string, string | undefined>): Record<string, string> {\n  const out: Record<string, string> = {};\n  for (const name of [GRAPH_TARGET_ENV.ontologyGraph, GRAPH_TARGET_ENV.shapeGraph]) {\n    const value = env[name];\n    if (value) out[name] = value;\n  }\n  return out;\n}\n"]}

package/lib/esm/utils/ontologySync.d.ts

@@ -34,6 +34,8 @@ export interface OntologyCore {
         written: string[];
         skipped: string[];
         pruned: string[];
+        target?: string;
+        fallback?: true;
     }>;
     checkShapeHierarchy(options: {
         dependencies?: Record<string, string[]>;
@@ -136,6 +138,18 @@ export declare function runOntologyPhase(ds: unknown, { core, sync, orphanScope,
     log?: (message: string) => void;
     warn?: (message: string, err?: unknown) => void;
 }): Promise<OntologyPhaseResult>;
+/**
+ * The graphs a sync left written and those it left dropped, from its successful graph queries in
+ * order. A graph the run created and then dropped (the inference probe's temporary graphs) is in
+ * neither list.
+ */
+export declare function graphsWrittenAndDropped(ops: Array<{
+    kind: string;
+    graph: string;
+}>): {
+    graphs: string[];
+    droppedGraphs: string[];
+};
 /**
  * The host's re-sync: the ontology phase, then the shape sync, which runs also when the ontology
  * phase failed. The ontology phase's failure is then thrown, so the route answers with it, as

package/lib/esm/utils/ontologySync.js

@@ -80,21 +80,30 @@ export async function runOntologyPhase(ds, { core, sync, orphanScope, dependenci
     }
     let hierarchyLoaded = false;
     if (sync && ds) {
-        const written = new Set();
-        const dropped = new Set();
+        // Every graph query that succeeded, in the order the sync sent them.
+        const ops = [];
         const pending = [];
         const stop = (_a = core.observeGraphQueries) === null || _a === void 0 ? void 0 : _a.call(core, ds, (query, settled) => {
-            pending.push(settled.then(() => (query.kind === 'graph_drop' ? dropped : written).add(query.graph), () => undefined));
+            const op = { kind: query.kind, graph: query.graph };
+            ops.push(op);
+            pending.push(settled.then(() => (op.ok = true), () => undefined));
         });
         try {
             const sync = await core.syncOntologies(ds, { orphanScope });
             await Promise.all(pending);
-            const graphs = [...written].sort();
-            const droppedGraphs = [...dropped].sort();
+            const { graphs, droppedGraphs } = graphsWrittenAndDropped(ops.filter((op) => op.ok));
             result.ontologies = { written: sync.written, skipped: sync.skipped, graphs, droppedGraphs };
             hierarchyLoaded = true;
-            const defaultGraph = !!stop && sync.written.length > 0 && graphs.length === 0;
-            log(`[LinkedServer] ontology sync${defaultGraph ? ' (default graph: the store has no graph queries)' : ''}: ` +
+            // Core ≥ 2.41 says where it wrote (the store's `ontologyGraph`); an older core is told
+            // apart by a write that sent no graph query.
+            const where = sync.target === 'default'
+                ? " (default graph: ontologyGraph is 'default')"
+                : sync.fallback || (sync.target === undefined && !!stop && sync.written.length > 0 && graphs.length === 0)
+                    ? ' (default graph: the store has no graph queries)'
+                    : sync.target && sync.target !== 'package'
+                        ? ` (one shared graph <${sync.target}>)`
+                        : '';
+            log(`[LinkedServer] ontology sync${where}: ` +
                 `written ${list(sync.written)}; skipped ${list(sync.skipped)}` +
                 (orphanScope === 'all' ? `; pruned ${list(sync.pruned)}` : '') +
                 (graphs.length ? `; graphs written ${list(graphs)}` : '') +
@@ -130,6 +139,30 @@ export async function runOntologyPhase(ds, { core, sync, orphanScope, dependenci
     }
     return result;
 }
+/**
+ * The graphs a sync left written and those it left dropped, from its successful graph queries in
+ * order. A graph the run created and then dropped (the inference probe's temporary graphs) is in
+ * neither list.
+ */
+export function graphsWrittenAndDropped(ops) {
+    var _a;
+    const byGraph = new Map();
+    for (const { kind, graph } of ops) {
+        const kinds = (_a = byGraph.get(graph)) !== null && _a !== void 0 ? _a : [];
+        kinds.push(kind);
+        byGraph.set(graph, kinds);
+    }
+    const graphs = [];
+    const droppedGraphs = [];
+    for (const [graph, kinds] of byGraph) {
+        const last = kinds[kinds.length - 1];
+        if (last !== 'graph_drop')
+            graphs.push(graph);
+        else if (kinds[0] !== 'graph_create')
+            droppedGraphs.push(graph);
+    }
+    return { graphs: graphs.sort(), droppedGraphs: droppedGraphs.sort() };
+}
 /**
  * The host's re-sync: the ontology phase, then the shape sync, which runs also when the ontology
  * phase failed. The ontology phase's failure is then thrown, so the route answers with it, as

package/lib/esm/utils/ontologySync.js.map

@@ -1 +1 @@
-{"version":3,"file":"ontologySync.js","sourceRoot":"","sources":["../../../src/utils/ontologySync.ts"],"names":[],"mappings":"AAwEA;;;;GAIG;AACH,MAAM,UAAU,WAAW,CACzB,GAAuC,EACvC,UAAmB;IAEnB,OAAO,UAAU,KAAK,KAAK,IAAI,GAAG,CAAC,0BAA0B,KAAK,OAAO,CAAC;AAC5E,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CACjC,GAAuC,EACvC,UAAoB;IAEpB,OAAO,WAAW,CAAC,GAAG,EAAE,UAAU,CAAC,IAAI,GAAG,CAAC,8BAA8B,KAAK,OAAO,CAAC;AACxF,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB;IACpC,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,uCAAuC,CAAC,CAAC;IACnE,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,0CAA0C,CAAC,CAAC;IACvE,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,kCAAkC,CAAC,CAAC;IACnE,MAAM,iBAAiB,GAAG,MAAM,MAAM,CAAC,0CAA0C,CAAC,CAAC;IACnF,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,qCAAqC,CAAC,CAAC;IACrE,OAAO;QACL,cAAc,EAAE,CAAC,EAAE,EAAE,OAAO,EAAE,EAAE,CAC9B,IAAI,CAAC,cAAc,CAAC,EAA+C,EAAE,OAAO,CAAC;QAC/E,mBAAmB,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,KAAK,CAAC,mBAAmB,CAAC,OAAO,CAAC;QACpE,qBAAqB,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,qBAAqB,EAAE;QAC9D,2BAA2B,EAAE,CAAC,WAAW,EAAE,OAAO,EAAE,EAAE,CACpD,iBAAiB,CAAC,2BAA2B,CAAC,WAAW,EAAE,OAAO,CAAC;QACrE,mBAAmB,EAAE,CAAC,EAAE,EAAE,OAAO,EAAE,EAAE,CACnC,QAAQ,CAAC,sBAAsB,CAAC,CAAC,KAAK,EAAE,EAAE;YACxC,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO,IAAI,KAAK,CAAC,MAAM,KAAK,EAAE;gBAAE,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;QACxF,CAAC,CAAC;KACL,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CACjC,iBAAmC,EACnC,oBAAsC;IAEtC,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,iBAAiB,EAAE,GAAG,oBAAoB,CAAC,CAAC,CAAC,CAAC;AACvE,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAClC,IAA4E;IAE5E,MAAM,aAAa,GAAG,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,aAAa,CAAC;IAC1C,OAAO,OAAO,aAAa,KAAK,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AACpG,CAAC;AAED,MAAM,OAAO,GAAG,CAAC,GAAY,EAAS,EAAE,CAAC,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;AAC/F,MAAM,IAAI,GAAG,CAAC,KAAe,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;AAE7E;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,EAAW,EACX,EACE,IAAI,EACJ,IAAI,EACJ,WAAW,EACX,YAAY,EACZ,WAAW,GAAG,EAAE,EAChB,YAAY,EACZ,GAAG,GAAG,OAAO,CAAC,GAAG,EACjB,IAAI,GAAG,OAAO,CAAC,IAAI,GAepB;;IAED,MAAM,MAAM,GAAwB;QAClC,UAAU,EAAE,EAAC,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,aAAa,EAAE,EAAE,EAAC;QACrE,UAAU,EAAE,EAAC,MAAM,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAC;KACrC,CAAC;IAEF,IAAI,IAAI,CAAC,2BAA2B,IAAI,WAAW,CAAC,MAAM,EAAE,CAAC;QAC3D,IAAI,CAAC;YACH,IAAI,YAAY;gBAAE,MAAM,IAAI,CAAC,2BAA2B,CAAC,WAAW,EAAE,EAAC,YAAY,EAAC,CAAC,CAAC;;gBACjF,MAAM,IAAI,CAAC,2BAA2B,CAAC,WAAW,CAAC,CAAC;QAC3D,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,uEAAuE,EAAE,GAAG,CAAC,CAAC;QACrF,CAAC;IACH,CAAC;IAED,IAAI,eAAe,GAAG,KAAK,CAAC;IAC5B,IAAI,IAAI,IAAI,EAAE,EAAE,CAAC;QACf,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;QAClC,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;QAClC,MAAM,OAAO,GAAuB,EAAE,CAAC;QACvC,MAAM,IAAI,GAAG,MAAA,IAAI,CAAC,mBAAmB,qDAAG,EAAE,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;YAC7D,OAAO,CAAC,IAAI,CACV,OAAO,CAAC,IAAI,CACV,GAAG,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,KAAK,YAAY,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,EACxE,GAAG,EAAE,CAAC,SAAS,CAChB,CACF,CAAC;QACJ,CAAC,CAAC,CAAC;QACH,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,EAAE,EAAE,EAAC,WAAW,EAAC,CAAC,CAAC;YAC1D,MAAM,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YAC3B,MAAM,MAAM,GAAG,CAAC,GAAG,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;YACnC,MAAM,aAAa,GAAG,CAAC,GAAG,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;YAC1C,MAAM,CAAC,UAAU,GAAG,EAAC,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,aAAa,EAAC,CAAC;YAC1F,eAAe,GAAG,IAAI,CAAC;YACvB,MAAM,YAAY,GAAG,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC;YAC9E,GAAG,CACD,+BAA+B,YAAY,CAAC,CAAC,CAAC,kDAAkD,CAAC,CAAC,CAAC,EAAE,IAAI;gBACvG,WAAW,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,aAAa,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE;gBAC9D,CAAC,WAAW,KAAK,KAAK,CAAC,CAAC,CAAC,YAAY,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC9D,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,oBAAoB,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACzD,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,oBAAoB,IAAI,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAC1E,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;YAC9B,IAAI,CAAC,sCAAsC,EAAE,GAAG,CAAC,CAAC;QACpD,CAAC;gBAAS,CAAC;YACT,IAAI,aAAJ,IAAI,uBAAJ,IAAI,EAAI,CAAC;QACX,CAAC;IACH,CAAC;IACD,IAAI,CAAC,eAAe,IAAI,IAAI,CAAC,qBAAqB,EAAE,CAAC;QACnD,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,qBAAqB,EAAE,CAAC;QACrC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,oDAAoD,EAAE,GAAG,CAAC,CAAC;QAClE,CAAC;IACH,CAAC;IAED,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,EAAC,YAAY,EAAC,CAAC,CAAC;QAChE,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,MAAM,CAAC;QACrE,MAAM,CAAC,UAAU,GAAG,EAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ,CAAC,MAAM,GAAG,MAAM,EAAC,CAAC;QACjE,GAAG,CAAC,+BAA+B,MAAM,cAAc,QAAQ,CAAC,MAAM,GAAG,MAAM,aAAa,CAAC,CAAC;QAC9F,KAAK,MAAM,CAAC,IAAI,QAAQ;YAAE,IAAI,CAAC,8BAA8B,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC,IAAI,MAAM,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;IACvG,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAA,MAAM,CAAC,OAAO,oCAAd,MAAM,CAAC,OAAO,GAAK,OAAO,CAAC,GAAG,CAAC,EAAC;QAChC,IAAI,CAAC,oCAAoC,EAAE,GAAG,CAAC,CAAC;IAClD,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,aAAiD,EACjD,SAA2B;IAE3B,MAAM,EAAC,UAAU,EAAE,UAAU,EAAE,OAAO,EAAC,GAAG,MAAM,aAAa,EAAE,CAAC;IAChE,MAAM,MAAM,GAAG,MAAM,SAAS,EAAE,CAAC;IACjC,IAAI,OAAO;QAAE,MAAM,OAAO,CAAC;IAC3B,OAAO,EAAC,GAAG,MAAM,EAAE,UAAU,EAAE,UAAU,EAAC,CAAC;AAC7C,CAAC","sourcesContent":["/**\n * Ontology sync and the shape check, as the server runs them before its shape sync: at boot and\n * when the host asks for a re-sync (`POST /admin/sync-shapes`).\n *\n * - The ontology sync (core `syncOntologies`) writes each registered package's ontology data into\n *   its own named graph of the app's default dataset (`{package IRI}/graph/ontology`, with a\n *   record in the graph registry that marks it as a hierarchy source), skipping a package whose\n *   stored hash matches, so the store's RDFS view infers the class hierarchy. A store without\n *   graph queries (it answers `unsupported-query-kind`, or has no `graphQuery`) gets core's\n *   earlier sync of the `rdfs:subClassOf` triples into the default graph instead. The graphs the\n *   sync wrote or dropped are observed on core's query dispatch and reported by name.\n * - The shape check (core `checkShapeHierarchy`) compares the registered shapes with that\n *   hierarchy. A running app is never stopped by it: its findings are logged and counted.\n * - The in-memory class hierarchy (core `loadOntologyHierarchy`) is loaded also when the sync\n *   is off; the sync loads it itself when it runs.\n * - Before either, every linked package directory the server discovered registers its ontologies\n *   (core `registerInstalledOntologies`): a package the app only deep-imports shape files from\n *   never evaluates its register modules, so its data would be missing from both. A source\n *   package without built register modules (a workspace package in dev) registers through\n *   `importModule` (Vite's `ssrLoadModule`), when the caller passes one.\n *\n * The four core modules (`ontology/syncOntologies`, `shapes/checkShapeHierarchy`,\n * `ontology/hierarchy`, `ontology/registerInstalled`) are server only and not in core's index, so\n * {@link loadOntologyCore} imports them by their fixed subpaths when the phase runs; the core\n * this server depends on has all of them. Kept apart from `LinkedServer` so the order and the failure handling can be tested without\n * booting a server.\n */\nimport type {BootOrphanScope} from './syncShapes.js';\n\n/** The subset of core's ontology and shape-check API this module calls. */\nexport interface OntologyCore {\n  syncOntologies(\n    ds: unknown,\n    options: {orphanScope: BootOrphanScope},\n  ): Promise<{written: string[]; skipped: string[]; pruned: string[]}>;\n  checkShapeHierarchy(options: {dependencies?: Record<string, string[]>}): Promise<\n    Array<{kind: string; severity: 'error' | 'warning'; shape?: string; iri?: string; message: string}>\n  >;\n  /** Loads the in-memory class hierarchy. Optional so a test double can leave it out. */\n  loadOntologyHierarchy?: () => Promise<unknown>;\n  /**\n   * Calls `onGraph` for every graph query on `ds` that succeeds until the returned function is\n   * called (core's `subscribeQueryDispatch`). Optional so a test double can leave it out.\n   */\n  observeGraphQueries?: (\n    ds: unknown,\n    onGraph: (query: {kind: string; graph: string}, settled: Promise<unknown>) => void,\n  ) => () => void;\n  /**\n   * Registers the ontologies of the installed packages in the given directories. Optional so a\n   * test double can leave it out.\n   */\n  registerInstalledOntologies?: (\n    packageDirs: string[],\n    options?: {importModule?: (file: string) => Promise<unknown>},\n  ) => Promise<string[]>;\n}\n\n/** What the ontology sync and the shape check did, as `POST /admin/sync-shapes` reports it. */\nexport interface OntologyPhaseResult {\n  /**\n   * Packages whose ontology graph (or, on a store without graph queries, hierarchy) was written,\n   * packages left as they were (unchanged or unreadable), and the graphs the sync wrote and\n   * dropped (empty on a store without graph queries).\n   */\n  ontologies: {written: string[]; skipped: string[]; graphs?: string[]; droppedGraphs?: string[]};\n  /** The shape check's findings, counted by severity. */\n  shapeCheck: {errors: number; warnings: number};\n  /** The first error the sync or the check threw; the phase went on without it. */\n  failure?: Error;\n}\n\n/**\n * Whether the server syncs shapes (and so ontologies) into its app data: off when `linked.config`\n * sets `syncShapesOnBoot: false` or the environment sets `LINKED_SYNC_SHAPES_ON_BOOT=false`. One\n * switch for both syncs, at boot and on the host's request.\n */\nexport function shapeSyncOn(\n  env: Record<string, string | undefined>,\n  configFlag: unknown,\n): boolean {\n  return configFlag !== false && env.LINKED_SYNC_SHAPES_ON_BOOT !== 'false';\n}\n\n/**\n * Whether the boot syncs ontologies: when shape sync is on ({@link shapeSyncOn}) and the\n * environment does not opt out with `LINKED_SYNC_ONTOLOGIES_ON_BOOT=false`.\n */\nexport function bootSyncsOntologies(\n  env: Record<string, string | undefined>,\n  configFlag?: unknown,\n): boolean {\n  return shapeSyncOn(env, configFlag) && env.LINKED_SYNC_ONTOLOGIES_ON_BOOT !== 'false';\n}\n\n/**\n * Import core's ontology sync, shape check, hierarchy loader and installed packages'\n * registration.\n */\nexport async function loadOntologyCore(): Promise<OntologyCore> {\n  const sync = await import('@_linked/core/ontology/syncOntologies');\n  const check = await import('@_linked/core/shapes/checkShapeHierarchy');\n  const hierarchy = await import('@_linked/core/ontology/hierarchy');\n  const registerInstalled = await import('@_linked/core/ontology/registerInstalled');\n  const dispatch = await import('@_linked/core/queries/queryDispatch');\n  return {\n    syncOntologies: (ds, options) =>\n      sync.syncOntologies(ds as Parameters<typeof sync.syncOntologies>[0], options),\n    checkShapeHierarchy: (options) => check.checkShapeHierarchy(options),\n    loadOntologyHierarchy: () => hierarchy.loadOntologyHierarchy(),\n    registerInstalledOntologies: (packageDirs, options) =>\n      registerInstalled.registerInstalledOntologies(packageDirs, options),\n    observeGraphQueries: (ds, onGraph) =>\n      dispatch.subscribeQueryDispatch((event) => {\n        if (event.kind === 'graph' && event.target === ds) onGraph(event.query, event.result);\n      }),\n  };\n}\n\n/**\n * The package directories whose ontologies register before the sync: every linked package\n * discovered in the app's dependency tree, then the app's own workspace packages (an ontology\n * package in `packages/` that no package imports is one, so the dependency walk never reaches it).\n * Order kept, duplicates dropped.\n */\nexport function ontologyPackageDirs(\n  linkedPackageDirs: Iterable<string>,\n  workspacePackageDirs: Iterable<string>,\n): string[] {\n  return [...new Set([...linkedPackageDirs, ...workspacePackageDirs])];\n}\n\n/**\n * In dev, the loader for source register modules: Vite's `ssrLoadModule`, so a workspace package\n * that was never built registers on the core the SSR graph uses. Undefined without Vite (a built\n * app), where source packages are skipped.\n */\nexport function sourceModuleImporter(\n  vite: {ssrLoadModule?: (url: string) => Promise<unknown>} | undefined | null,\n): ((file: string) => Promise<unknown>) | undefined {\n  const ssrLoadModule = vite?.ssrLoadModule;\n  return typeof ssrLoadModule === 'function' ? (file) => ssrLoadModule.call(vite, file) : undefined;\n}\n\nconst asError = (err: unknown): Error => (err instanceof Error ? err : new Error(String(err)));\nconst list = (names: string[]) => (names.length ? names.join(', ') : 'none');\n\n/**\n * Register the ontologies of the installed linked packages in `packageDirs` (package roots), sync\n * the registered ontologies into `ds` (when `sync` is set and there is a dataset), then run the\n * shape check. Never throws: a failed registration is logged and the phase goes on; a failed sync is logged and returned as `failure`, and the\n * check still runs; a failed check likewise. Logs one line for the sync, one summary line for\n * the check and one line per finding.\n */\nexport async function runOntologyPhase(\n  ds: unknown,\n  {\n    core,\n    sync,\n    orphanScope,\n    dependencies,\n    packageDirs = [],\n    importModule,\n    log = console.log,\n    warn = console.warn,\n  }: {\n    core: OntologyCore;\n    sync: boolean;\n    orphanScope: BootOrphanScope;\n    dependencies?: Record<string, string[]>;\n    /** Every linked package directory the server discovered (transitively). */\n    packageDirs?: string[];\n    /**\n     * Imports a source register module (`src/ontologies/*.register.ts`) of a package directory\n     * without built ones; in dev, Vite's `ssrLoadModule`.\n     */\n    importModule?: (file: string) => Promise<unknown>;\n    log?: (message: string) => void;\n    warn?: (message: string, err?: unknown) => void;\n  },\n): Promise<OntologyPhaseResult> {\n  const result: OntologyPhaseResult = {\n    ontologies: {written: [], skipped: [], graphs: [], droppedGraphs: []},\n    shapeCheck: {errors: 0, warnings: 0},\n  };\n\n  if (core.registerInstalledOntologies && packageDirs.length) {\n    try {\n      if (importModule) await core.registerInstalledOntologies(packageDirs, {importModule});\n      else await core.registerInstalledOntologies(packageDirs);\n    } catch (err) {\n      warn(\"[LinkedServer] registering the installed packages' ontologies failed:\", err);\n    }\n  }\n\n  let hierarchyLoaded = false;\n  if (sync && ds) {\n    const written = new Set<string>();\n    const dropped = new Set<string>();\n    const pending: Promise<unknown>[] = [];\n    const stop = core.observeGraphQueries?.(ds, (query, settled) => {\n      pending.push(\n        settled.then(\n          () => (query.kind === 'graph_drop' ? dropped : written).add(query.graph),\n          () => undefined,\n        ),\n      );\n    });\n    try {\n      const sync = await core.syncOntologies(ds, {orphanScope});\n      await Promise.all(pending);\n      const graphs = [...written].sort();\n      const droppedGraphs = [...dropped].sort();\n      result.ontologies = {written: sync.written, skipped: sync.skipped, graphs, droppedGraphs};\n      hierarchyLoaded = true;\n      const defaultGraph = !!stop && sync.written.length > 0 && graphs.length === 0;\n      log(\n        `[LinkedServer] ontology sync${defaultGraph ? ' (default graph: the store has no graph queries)' : ''}: ` +\n          `written ${list(sync.written)}; skipped ${list(sync.skipped)}` +\n          (orphanScope === 'all' ? `; pruned ${list(sync.pruned)}` : '') +\n          (graphs.length ? `; graphs written ${list(graphs)}` : '') +\n          (droppedGraphs.length ? `; graphs dropped ${list(droppedGraphs)}` : ''),\n      );\n    } catch (err) {\n      result.failure = asError(err);\n      warn('[LinkedServer] ontology sync failed:', err);\n    } finally {\n      stop?.();\n    }\n  }\n  if (!hierarchyLoaded && core.loadOntologyHierarchy) {\n    try {\n      await core.loadOntologyHierarchy();\n    } catch (err) {\n      warn('[LinkedServer] loading the class hierarchy failed:', err);\n    }\n  }\n\n  try {\n    const findings = await core.checkShapeHierarchy({dependencies});\n    const errors = findings.filter((f) => f.severity === 'error').length;\n    result.shapeCheck = {errors, warnings: findings.length - errors};\n    log(`[LinkedServer] shape check: ${errors} error(s), ${findings.length - errors} warning(s)`);\n    for (const f of findings) warn(`[LinkedServer] shape check ${f.severity} (${f.kind}): ${f.message}`);\n  } catch (err) {\n    result.failure ??= asError(err);\n    warn('[LinkedServer] shape check failed:', err);\n  }\n  return result;\n}\n\n/**\n * The host's re-sync: the ontology phase, then the shape sync, which runs also when the ontology\n * phase failed. The ontology phase's failure is then thrown, so the route answers with it, as\n * it does for a failed shape sync.\n */\nexport async function syncOntologiesThenShapes<T extends object>(\n  ontologyPhase: () => Promise<OntologyPhaseResult>,\n  shapeSync: () => Promise<T>,\n): Promise<T & Pick<OntologyPhaseResult, 'ontologies' | 'shapeCheck'>> {\n  const {ontologies, shapeCheck, failure} = await ontologyPhase();\n  const shapes = await shapeSync();\n  if (failure) throw failure;\n  return {...shapes, ontologies, shapeCheck};\n}\n"]}
+{"version":3,"file":"ontologySync.js","sourceRoot":"","sources":["../../../src/utils/ontologySync.ts"],"names":[],"mappings":"AAwEA;;;;GAIG;AACH,MAAM,UAAU,WAAW,CACzB,GAAuC,EACvC,UAAmB;IAEnB,OAAO,UAAU,KAAK,KAAK,IAAI,GAAG,CAAC,0BAA0B,KAAK,OAAO,CAAC;AAC5E,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CACjC,GAAuC,EACvC,UAAoB;IAEpB,OAAO,WAAW,CAAC,GAAG,EAAE,UAAU,CAAC,IAAI,GAAG,CAAC,8BAA8B,KAAK,OAAO,CAAC;AACxF,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB;IACpC,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,uCAAuC,CAAC,CAAC;IACnE,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,0CAA0C,CAAC,CAAC;IACvE,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,kCAAkC,CAAC,CAAC;IACnE,MAAM,iBAAiB,GAAG,MAAM,MAAM,CAAC,0CAA0C,CAAC,CAAC;IACnF,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,qCAAqC,CAAC,CAAC;IACrE,OAAO;QACL,cAAc,EAAE,CAAC,EAAE,EAAE,OAAO,EAAE,EAAE,CAC9B,IAAI,CAAC,cAAc,CAAC,EAA+C,EAAE,OAAO,CAAC;QAC/E,mBAAmB,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,KAAK,CAAC,mBAAmB,CAAC,OAAO,CAAC;QACpE,qBAAqB,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,qBAAqB,EAAE;QAC9D,2BAA2B,EAAE,CAAC,WAAW,EAAE,OAAO,EAAE,EAAE,CACpD,iBAAiB,CAAC,2BAA2B,CAAC,WAAW,EAAE,OAAO,CAAC;QACrE,mBAAmB,EAAE,CAAC,EAAE,EAAE,OAAO,EAAE,EAAE,CACnC,QAAQ,CAAC,sBAAsB,CAAC,CAAC,KAAK,EAAE,EAAE;YACxC,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO,IAAI,KAAK,CAAC,MAAM,KAAK,EAAE;gBAAE,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;QACxF,CAAC,CAAC;KACL,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CACjC,iBAAmC,EACnC,oBAAsC;IAEtC,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,iBAAiB,EAAE,GAAG,oBAAoB,CAAC,CAAC,CAAC,CAAC;AACvE,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAClC,IAA4E;IAE5E,MAAM,aAAa,GAAG,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,aAAa,CAAC;IAC1C,OAAO,OAAO,aAAa,KAAK,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AACpG,CAAC;AAED,MAAM,OAAO,GAAG,CAAC,GAAY,EAAS,EAAE,CAAC,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;AAC/F,MAAM,IAAI,GAAG,CAAC,KAAe,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;AAE7E;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,EAAW,EACX,EACE,IAAI,EACJ,IAAI,EACJ,WAAW,EACX,YAAY,EACZ,WAAW,GAAG,EAAE,EAChB,YAAY,EACZ,GAAG,GAAG,OAAO,CAAC,GAAG,EACjB,IAAI,GAAG,OAAO,CAAC,IAAI,GAepB;;IAED,MAAM,MAAM,GAAwB;QAClC,UAAU,EAAE,EAAC,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,aAAa,EAAE,EAAE,EAAC;QACrE,UAAU,EAAE,EAAC,MAAM,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAC;KACrC,CAAC;IAEF,IAAI,IAAI,CAAC,2BAA2B,IAAI,WAAW,CAAC,MAAM,EAAE,CAAC;QAC3D,IAAI,CAAC;YACH,IAAI,YAAY;gBAAE,MAAM,IAAI,CAAC,2BAA2B,CAAC,WAAW,EAAE,EAAC,YAAY,EAAC,CAAC,CAAC;;gBACjF,MAAM,IAAI,CAAC,2BAA2B,CAAC,WAAW,CAAC,CAAC;QAC3D,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,uEAAuE,EAAE,GAAG,CAAC,CAAC;QACrF,CAAC;IACH,CAAC;IAED,IAAI,eAAe,GAAG,KAAK,CAAC;IAC5B,IAAI,IAAI,IAAI,EAAE,EAAE,CAAC;QACf,qEAAqE;QACrE,MAAM,GAAG,GAAuD,EAAE,CAAC;QACnE,MAAM,OAAO,GAAuB,EAAE,CAAC;QACvC,MAAM,IAAI,GAAG,MAAA,IAAI,CAAC,mBAAmB,qDAAG,EAAE,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;YAC7D,MAAM,EAAE,GAAgD,EAAC,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAC,CAAC;YAC/F,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACb,OAAO,CAAC,IAAI,CACV,OAAO,CAAC,IAAI,CACV,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,IAAI,CAAC,EACpB,GAAG,EAAE,CAAC,SAAS,CAChB,CACF,CAAC;QACJ,CAAC,CAAC,CAAC;QACH,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,EAAE,EAAE,EAAC,WAAW,EAAC,CAAC,CAAC;YAC1D,MAAM,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YAC3B,MAAM,EAAC,MAAM,EAAE,aAAa,EAAC,GAAG,uBAAuB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;YACnF,MAAM,CAAC,UAAU,GAAG,EAAC,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,aAAa,EAAC,CAAC;YAC1F,eAAe,GAAG,IAAI,CAAC;YACvB,uFAAuF;YACvF,6CAA6C;YAC7C,MAAM,KAAK,GACT,IAAI,CAAC,MAAM,KAAK,SAAS;gBACvB,CAAC,CAAC,8CAA8C;gBAChD,CAAC,CAAC,IAAI,CAAC,QAAQ,IAAI,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC;oBACxG,CAAC,CAAC,kDAAkD;oBACpD,CAAC,CAAC,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS;wBACxC,CAAC,CAAC,uBAAuB,IAAI,CAAC,MAAM,IAAI;wBACxC,CAAC,CAAC,EAAE,CAAC;YACb,GAAG,CACD,+BAA+B,KAAK,IAAI;gBACtC,WAAW,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,aAAa,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE;gBAC9D,CAAC,WAAW,KAAK,KAAK,CAAC,CAAC,CAAC,YAAY,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC9D,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,oBAAoB,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACzD,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,oBAAoB,IAAI,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAC1E,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;YAC9B,IAAI,CAAC,sCAAsC,EAAE,GAAG,CAAC,CAAC;QACpD,CAAC;gBAAS,CAAC;YACT,IAAI,aAAJ,IAAI,uBAAJ,IAAI,EAAI,CAAC;QACX,CAAC;IACH,CAAC;IACD,IAAI,CAAC,eAAe,IAAI,IAAI,CAAC,qBAAqB,EAAE,CAAC;QACnD,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,qBAAqB,EAAE,CAAC;QACrC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,oDAAoD,EAAE,GAAG,CAAC,CAAC;QAClE,CAAC;IACH,CAAC;IAED,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,EAAC,YAAY,EAAC,CAAC,CAAC;QAChE,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,MAAM,CAAC;QACrE,MAAM,CAAC,UAAU,GAAG,EAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ,CAAC,MAAM,GAAG,MAAM,EAAC,CAAC;QACjE,GAAG,CAAC,+BAA+B,MAAM,cAAc,QAAQ,CAAC,MAAM,GAAG,MAAM,aAAa,CAAC,CAAC;QAC9F,KAAK,MAAM,CAAC,IAAI,QAAQ;YAAE,IAAI,CAAC,8BAA8B,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC,IAAI,MAAM,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;IACvG,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAA,MAAM,CAAC,OAAO,oCAAd,MAAM,CAAC,OAAO,GAAK,OAAO,CAAC,GAAG,CAAC,EAAC;QAChC,IAAI,CAAC,oCAAoC,EAAE,GAAG,CAAC,CAAC;IAClD,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,uBAAuB,CAAC,GAAyC;;IAI/E,MAAM,OAAO,GAAG,IAAI,GAAG,EAAoB,CAAC;IAC5C,KAAK,MAAM,EAAC,IAAI,EAAE,KAAK,EAAC,IAAI,GAAG,EAAE,CAAC;QAChC,MAAM,KAAK,GAAG,MAAA,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,mCAAI,EAAE,CAAC;QACvC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACjB,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IAC5B,CAAC;IACD,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,MAAM,aAAa,GAAa,EAAE,CAAC;IACnC,KAAK,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,OAAO,EAAE,CAAC;QACrC,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QACrC,IAAI,IAAI,KAAK,YAAY;YAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;aACzC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,cAAc;YAAE,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAClE,CAAC;IACD,OAAO,EAAC,MAAM,EAAE,MAAM,CAAC,IAAI,EAAE,EAAE,aAAa,EAAE,aAAa,CAAC,IAAI,EAAE,EAAC,CAAC;AACtE,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,aAAiD,EACjD,SAA2B;IAE3B,MAAM,EAAC,UAAU,EAAE,UAAU,EAAE,OAAO,EAAC,GAAG,MAAM,aAAa,EAAE,CAAC;IAChE,MAAM,MAAM,GAAG,MAAM,SAAS,EAAE,CAAC;IACjC,IAAI,OAAO;QAAE,MAAM,OAAO,CAAC;IAC3B,OAAO,EAAC,GAAG,MAAM,EAAE,UAAU,EAAE,UAAU,EAAC,CAAC;AAC7C,CAAC","sourcesContent":["/**\n * Ontology sync and the shape check, as the server runs them before its shape sync: at boot and\n * when the host asks for a re-sync (`POST /admin/sync-shapes`).\n *\n * - The ontology sync (core `syncOntologies`) writes each registered package's ontology data into\n *   its own named graph of the app's default dataset (`{package IRI}/graph/ontology`, with a\n *   record in the graph registry that marks it as a hierarchy source), skipping a package whose\n *   stored hash matches, so the store's RDFS view infers the class hierarchy. A store without\n *   graph queries (it answers `unsupported-query-kind`, or has no `graphQuery`) gets core's\n *   earlier sync of the `rdfs:subClassOf` triples into the default graph instead. The graphs the\n *   sync wrote or dropped are observed on core's query dispatch and reported by name.\n * - The shape check (core `checkShapeHierarchy`) compares the registered shapes with that\n *   hierarchy. A running app is never stopped by it: its findings are logged and counted.\n * - The in-memory class hierarchy (core `loadOntologyHierarchy`) is loaded also when the sync\n *   is off; the sync loads it itself when it runs.\n * - Before either, every linked package directory the server discovered registers its ontologies\n *   (core `registerInstalledOntologies`): a package the app only deep-imports shape files from\n *   never evaluates its register modules, so its data would be missing from both. A source\n *   package without built register modules (a workspace package in dev) registers through\n *   `importModule` (Vite's `ssrLoadModule`), when the caller passes one.\n *\n * The four core modules (`ontology/syncOntologies`, `shapes/checkShapeHierarchy`,\n * `ontology/hierarchy`, `ontology/registerInstalled`) are server only and not in core's index, so\n * {@link loadOntologyCore} imports them by their fixed subpaths when the phase runs; the core\n * this server depends on has all of them. Kept apart from `LinkedServer` so the order and the failure handling can be tested without\n * booting a server.\n */\nimport type {BootOrphanScope} from './syncShapes.js';\n\n/** The subset of core's ontology and shape-check API this module calls. */\nexport interface OntologyCore {\n  syncOntologies(\n    ds: unknown,\n    options: {orphanScope: BootOrphanScope},\n  ): Promise<{written: string[]; skipped: string[]; pruned: string[]; target?: string; fallback?: true}>;\n  checkShapeHierarchy(options: {dependencies?: Record<string, string[]>}): Promise<\n    Array<{kind: string; severity: 'error' | 'warning'; shape?: string; iri?: string; message: string}>\n  >;\n  /** Loads the in-memory class hierarchy. Optional so a test double can leave it out. */\n  loadOntologyHierarchy?: () => Promise<unknown>;\n  /**\n   * Calls `onGraph` for every graph query on `ds` that succeeds until the returned function is\n   * called (core's `subscribeQueryDispatch`). Optional so a test double can leave it out.\n   */\n  observeGraphQueries?: (\n    ds: unknown,\n    onGraph: (query: {kind: string; graph: string}, settled: Promise<unknown>) => void,\n  ) => () => void;\n  /**\n   * Registers the ontologies of the installed packages in the given directories. Optional so a\n   * test double can leave it out.\n   */\n  registerInstalledOntologies?: (\n    packageDirs: string[],\n    options?: {importModule?: (file: string) => Promise<unknown>},\n  ) => Promise<string[]>;\n}\n\n/** What the ontology sync and the shape check did, as `POST /admin/sync-shapes` reports it. */\nexport interface OntologyPhaseResult {\n  /**\n   * Packages whose ontology graph (or, on a store without graph queries, hierarchy) was written,\n   * packages left as they were (unchanged or unreadable), and the graphs the sync wrote and\n   * dropped (empty on a store without graph queries).\n   */\n  ontologies: {written: string[]; skipped: string[]; graphs?: string[]; droppedGraphs?: string[]};\n  /** The shape check's findings, counted by severity. */\n  shapeCheck: {errors: number; warnings: number};\n  /** The first error the sync or the check threw; the phase went on without it. */\n  failure?: Error;\n}\n\n/**\n * Whether the server syncs shapes (and so ontologies) into its app data: off when `linked.config`\n * sets `syncShapesOnBoot: false` or the environment sets `LINKED_SYNC_SHAPES_ON_BOOT=false`. One\n * switch for both syncs, at boot and on the host's request.\n */\nexport function shapeSyncOn(\n  env: Record<string, string | undefined>,\n  configFlag: unknown,\n): boolean {\n  return configFlag !== false && env.LINKED_SYNC_SHAPES_ON_BOOT !== 'false';\n}\n\n/**\n * Whether the boot syncs ontologies: when shape sync is on ({@link shapeSyncOn}) and the\n * environment does not opt out with `LINKED_SYNC_ONTOLOGIES_ON_BOOT=false`.\n */\nexport function bootSyncsOntologies(\n  env: Record<string, string | undefined>,\n  configFlag?: unknown,\n): boolean {\n  return shapeSyncOn(env, configFlag) && env.LINKED_SYNC_ONTOLOGIES_ON_BOOT !== 'false';\n}\n\n/**\n * Import core's ontology sync, shape check, hierarchy loader and installed packages'\n * registration.\n */\nexport async function loadOntologyCore(): Promise<OntologyCore> {\n  const sync = await import('@_linked/core/ontology/syncOntologies');\n  const check = await import('@_linked/core/shapes/checkShapeHierarchy');\n  const hierarchy = await import('@_linked/core/ontology/hierarchy');\n  const registerInstalled = await import('@_linked/core/ontology/registerInstalled');\n  const dispatch = await import('@_linked/core/queries/queryDispatch');\n  return {\n    syncOntologies: (ds, options) =>\n      sync.syncOntologies(ds as Parameters<typeof sync.syncOntologies>[0], options),\n    checkShapeHierarchy: (options) => check.checkShapeHierarchy(options),\n    loadOntologyHierarchy: () => hierarchy.loadOntologyHierarchy(),\n    registerInstalledOntologies: (packageDirs, options) =>\n      registerInstalled.registerInstalledOntologies(packageDirs, options),\n    observeGraphQueries: (ds, onGraph) =>\n      dispatch.subscribeQueryDispatch((event) => {\n        if (event.kind === 'graph' && event.target === ds) onGraph(event.query, event.result);\n      }),\n  };\n}\n\n/**\n * The package directories whose ontologies register before the sync: every linked package\n * discovered in the app's dependency tree, then the app's own workspace packages (an ontology\n * package in `packages/` that no package imports is one, so the dependency walk never reaches it).\n * Order kept, duplicates dropped.\n */\nexport function ontologyPackageDirs(\n  linkedPackageDirs: Iterable<string>,\n  workspacePackageDirs: Iterable<string>,\n): string[] {\n  return [...new Set([...linkedPackageDirs, ...workspacePackageDirs])];\n}\n\n/**\n * In dev, the loader for source register modules: Vite's `ssrLoadModule`, so a workspace package\n * that was never built registers on the core the SSR graph uses. Undefined without Vite (a built\n * app), where source packages are skipped.\n */\nexport function sourceModuleImporter(\n  vite: {ssrLoadModule?: (url: string) => Promise<unknown>} | undefined | null,\n): ((file: string) => Promise<unknown>) | undefined {\n  const ssrLoadModule = vite?.ssrLoadModule;\n  return typeof ssrLoadModule === 'function' ? (file) => ssrLoadModule.call(vite, file) : undefined;\n}\n\nconst asError = (err: unknown): Error => (err instanceof Error ? err : new Error(String(err)));\nconst list = (names: string[]) => (names.length ? names.join(', ') : 'none');\n\n/**\n * Register the ontologies of the installed linked packages in `packageDirs` (package roots), sync\n * the registered ontologies into `ds` (when `sync` is set and there is a dataset), then run the\n * shape check. Never throws: a failed registration is logged and the phase goes on; a failed sync is logged and returned as `failure`, and the\n * check still runs; a failed check likewise. Logs one line for the sync, one summary line for\n * the check and one line per finding.\n */\nexport async function runOntologyPhase(\n  ds: unknown,\n  {\n    core,\n    sync,\n    orphanScope,\n    dependencies,\n    packageDirs = [],\n    importModule,\n    log = console.log,\n    warn = console.warn,\n  }: {\n    core: OntologyCore;\n    sync: boolean;\n    orphanScope: BootOrphanScope;\n    dependencies?: Record<string, string[]>;\n    /** Every linked package directory the server discovered (transitively). */\n    packageDirs?: string[];\n    /**\n     * Imports a source register module (`src/ontologies/*.register.ts`) of a package directory\n     * without built ones; in dev, Vite's `ssrLoadModule`.\n     */\n    importModule?: (file: string) => Promise<unknown>;\n    log?: (message: string) => void;\n    warn?: (message: string, err?: unknown) => void;\n  },\n): Promise<OntologyPhaseResult> {\n  const result: OntologyPhaseResult = {\n    ontologies: {written: [], skipped: [], graphs: [], droppedGraphs: []},\n    shapeCheck: {errors: 0, warnings: 0},\n  };\n\n  if (core.registerInstalledOntologies && packageDirs.length) {\n    try {\n      if (importModule) await core.registerInstalledOntologies(packageDirs, {importModule});\n      else await core.registerInstalledOntologies(packageDirs);\n    } catch (err) {\n      warn(\"[LinkedServer] registering the installed packages' ontologies failed:\", err);\n    }\n  }\n\n  let hierarchyLoaded = false;\n  if (sync && ds) {\n    // Every graph query that succeeded, in the order the sync sent them.\n    const ops: Array<{kind: string; graph: string; ok?: boolean}> = [];\n    const pending: Promise<unknown>[] = [];\n    const stop = core.observeGraphQueries?.(ds, (query, settled) => {\n      const op: {kind: string; graph: string; ok?: boolean} = {kind: query.kind, graph: query.graph};\n      ops.push(op);\n      pending.push(\n        settled.then(\n          () => (op.ok = true),\n          () => undefined,\n        ),\n      );\n    });\n    try {\n      const sync = await core.syncOntologies(ds, {orphanScope});\n      await Promise.all(pending);\n      const {graphs, droppedGraphs} = graphsWrittenAndDropped(ops.filter((op) => op.ok));\n      result.ontologies = {written: sync.written, skipped: sync.skipped, graphs, droppedGraphs};\n      hierarchyLoaded = true;\n      // Core ≥ 2.41 says where it wrote (the store's `ontologyGraph`); an older core is told\n      // apart by a write that sent no graph query.\n      const where =\n        sync.target === 'default'\n          ? \" (default graph: ontologyGraph is 'default')\"\n          : sync.fallback || (sync.target === undefined && !!stop && sync.written.length > 0 && graphs.length === 0)\n            ? ' (default graph: the store has no graph queries)'\n            : sync.target && sync.target !== 'package'\n              ? ` (one shared graph <${sync.target}>)`\n              : '';\n      log(\n        `[LinkedServer] ontology sync${where}: ` +\n          `written ${list(sync.written)}; skipped ${list(sync.skipped)}` +\n          (orphanScope === 'all' ? `; pruned ${list(sync.pruned)}` : '') +\n          (graphs.length ? `; graphs written ${list(graphs)}` : '') +\n          (droppedGraphs.length ? `; graphs dropped ${list(droppedGraphs)}` : ''),\n      );\n    } catch (err) {\n      result.failure = asError(err);\n      warn('[LinkedServer] ontology sync failed:', err);\n    } finally {\n      stop?.();\n    }\n  }\n  if (!hierarchyLoaded && core.loadOntologyHierarchy) {\n    try {\n      await core.loadOntologyHierarchy();\n    } catch (err) {\n      warn('[LinkedServer] loading the class hierarchy failed:', err);\n    }\n  }\n\n  try {\n    const findings = await core.checkShapeHierarchy({dependencies});\n    const errors = findings.filter((f) => f.severity === 'error').length;\n    result.shapeCheck = {errors, warnings: findings.length - errors};\n    log(`[LinkedServer] shape check: ${errors} error(s), ${findings.length - errors} warning(s)`);\n    for (const f of findings) warn(`[LinkedServer] shape check ${f.severity} (${f.kind}): ${f.message}`);\n  } catch (err) {\n    result.failure ??= asError(err);\n    warn('[LinkedServer] shape check failed:', err);\n  }\n  return result;\n}\n\n/**\n * The graphs a sync left written and those it left dropped, from its successful graph queries in\n * order. A graph the run created and then dropped (the inference probe's temporary graphs) is in\n * neither list.\n */\nexport function graphsWrittenAndDropped(ops: Array<{kind: string; graph: string}>): {\n  graphs: string[];\n  droppedGraphs: string[];\n} {\n  const byGraph = new Map<string, string[]>();\n  for (const {kind, graph} of ops) {\n    const kinds = byGraph.get(graph) ?? [];\n    kinds.push(kind);\n    byGraph.set(graph, kinds);\n  }\n  const graphs: string[] = [];\n  const droppedGraphs: string[] = [];\n  for (const [graph, kinds] of byGraph) {\n    const last = kinds[kinds.length - 1];\n    if (last !== 'graph_drop') graphs.push(graph);\n    else if (kinds[0] !== 'graph_create') droppedGraphs.push(graph);\n  }\n  return {graphs: graphs.sort(), droppedGraphs: droppedGraphs.sort()};\n}\n\n/**\n * The host's re-sync: the ontology phase, then the shape sync, which runs also when the ontology\n * phase failed. The ontology phase's failure is then thrown, so the route answers with it, as\n * it does for a failed shape sync.\n */\nexport async function syncOntologiesThenShapes<T extends object>(\n  ontologyPhase: () => Promise<OntologyPhaseResult>,\n  shapeSync: () => Promise<T>,\n): Promise<T & Pick<OntologyPhaseResult, 'ontologies' | 'shapeCheck'>> {\n  const {ontologies, shapeCheck, failure} = await ontologyPhase();\n  const shapes = await shapeSync();\n  if (failure) throw failure;\n  return {...shapes, ontologies, shapeCheck};\n}\n"]}

package/lib/esm/utils/syncShapes.d.ts

@@ -20,6 +20,10 @@ export interface ShapeGraphSyncResult {
     cleaned: number;
     appGraph?: 'written' | 'skipped' | 'dropped';
     defaultGraph?: number;
+    /** The store's `shapeGraph` target the run wrote in (core ≥ 2.41): `'package'`, `'default'` or an IRI. */
+    target?: string;
+    /** Set when a store without graph queries took the default-graph sync instead of `target`. */
+    fallback?: true;
 }
 /** The subset of core's shape graph API this module calls. */
 export interface ShapeGraphCore {
@@ -100,8 +104,15 @@ export interface ShapeGraphsReport {
     withoutTurtle: string[];
     /** Shapes an earlier sync had written into the default graph, removed now. */
     cleaned: number;
-    /** Set when the store has no graph queries: the default-graph sync's writes. */
+    /**
+     * Set when the shapes went into the default graph (the store's `shapeGraph` is `'default'`, or
+     * it has no graph queries): the default-graph sync's writes.
+     */
     defaultGraph?: number;
+    /** The store's `shapeGraph` target (`'package'`, `'default'` or a shared graph IRI), when core reports it. */
+    target?: string;
+    /** Set when the store has no graph queries, so the shapes went into the default graph instead of `target`. */
+    fallback?: true;
 }
 /**
  * Sync the registered shapes into `ds`, one shape graph per package (see the module doc), and log