@manta-eu/codegen 0.1.9 → 0.1.10

package/README.md

@@ -68,9 +68,9 @@ Two traps:
 
 - The API grants a datastore to a person, or to a service account holding the `operator` realm role.
   `manta-codegen` holds it; a service account without it is refused the datastore.
-- The API can compare the token's `azp` against its own `VITE_KEYCLOAK_CLIENT_ID` and answer 401 for
-  any other client. That check is off today (`authorizedPartyCheckEnabled`). Turning it on 401s
-  both `<realm>-cli` and `manta-codegen` unless it learns to accept them.
+- The API can answer 401 for a client the realm never admitted to it. That check is off today
+  (`authorizedPartyCheckEnabled`). `<realm>-cli` and `manta-codegen` are admitted: both carry the
+  realm's `manta-api` client scope. A client of your own needs that scope too.
 
 ## What the datastore does not hold
 

package/dist/cli.js

@@ -62,3 +62,4 @@ program
 });
 registerAuthCommands(program, { label: "manta-codegen" });
 await program.parseAsync();
+//# sourceMappingURL=cli.js.map

package/dist/cli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.js","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AACA,OAAO,EACL,WAAW,EACX,UAAU,EACV,YAAY,EACZ,iBAAiB,EACjB,aAAa,EACb,yBAAyB,EACzB,gBAAgB,EAChB,oBAAoB,EAEpB,eAAe,GAChB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC;AAC5C,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,gBAAgB,EAAE,cAAc,EAAoB,MAAM,mBAAmB,CAAC;AACvF,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAahD,mGAAmG;AACnG,SAAS,cAAc,CAAC,OAAqB;IAC3C,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC;IAE/C,IAAI,MAAM,EAAE,CAAC;QACX,MAAM,MAAM,GAAG,gBAAgB,CAAC,EAAE,GAAG,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,IAAI,UAAU,EAAE,CAAC,CAAC;QAE1F,OAAO,WAAW,CAAC,GAAG,EAAE,CAAC,yBAAyB,CAAC,EAAE,GAAG,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IACjH,CAAC;IAED,OAAO,eAAe,CAAC,gBAAgB,CAAC,OAAO,CAAC,EAAE,EAAE,KAAK,EAAE,eAAe,EAAE,aAAa,EAAE,OAAO,CAAC,aAAa,EAAE,CAAC,CAAC;AACtH,CAAC;AAED,SAAS,mBAAmB,CAAC,aAAqC;IAChE,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC,GAAG,GAAG,KAAK,EAAE,CAAC,CAAC,CAAC;IAElF,OAAO,CAAC,KAAK,CAAC,0CAA0C,KAAK,aAAa,CAAC,CAAC;IAC5E,KAAK,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC;QAAE,OAAO,CAAC,KAAK,CAAC,KAAK,MAAM,KAAK,KAAK,EAAE,CAAC,CAAC;IAEpG,IAAI,KAAK,KAAK,CAAC;QAAE,OAAO,CAAC,KAAK,CAAC,0EAA0E,CAAC,CAAC;AAC7G,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,OAAqB;IAC7C,MAAM,KAAK,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC;IACtC,MAAM,QAAQ,GAAG,cAAc,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;IACnE,OAAO,CAAC,KAAK,CAAC,0CAA0C,QAAQ,EAAE,CAAC,CAAC;IAEpE,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IAEvD,OAAO,CAAC,KAAK,CAAC,+CAA+C,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC;IACjF,mBAAmB,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;IAE1C,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,8FAA8F;AAC9F,KAAK,UAAU,QAAQ,CAAC,OAAqB;IAC3C,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,OAAO,CAAC,CAAC;IACzC,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAEpC,MAAM,eAAe,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAEtC,OAAO,CAAC,KAAK,CAAC,6CAA6C,MAAM,EAAE,CAAC,CAAC;AACvE,CAAC;AAED,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE;KAC1B,IAAI,CAAC,eAAe,CAAC;KACrB,WAAW,CAAC,8EAA8E,CAAC,CAAC;AAE/F,OAAO;KACJ,OAAO,CAAC,UAAU,CAAC;KACnB,WAAW,CAAC,gFAAgF,CAAC;KAC7F,MAAM,CAAC,iBAAiB,EAAE,oBAAoB,EAAE,iBAAiB,CAAC,MAAM,CAAC;KACzE,cAAc,CAAC,kBAAkB,EAAE,mBAAmB,CAAC;KACvD,MAAM,CAAC,sBAAsB,EAAE,mBAAmB,EAAE,iBAAiB,CAAC,WAAW,CAAC;KAClF,MAAM,CAAC,0BAA0B,EAAE,gBAAgB,EAAE,iBAAiB,CAAC,aAAa,CAAC;KACrF,MAAM,CAAC,kBAAkB,EAAE,YAAY,CAAC;KACxC,MAAM,CAAC,iBAAiB,EAAE,gDAAgD,CAAC;KAC3E,MAAM,CAAC,mBAAmB,EAAE,yEAAyE,CAAC;KACtG,SAAS,CAAC,IAAI,MAAM,CAAC,aAAa,EAAE,yBAAyB,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;KACnF,MAAM,CAAC,KAAK,EAAE,OAAqB,EAAE,EAAE;IACtC,IAAI,CAAC;QACH,MAAM,QAAQ,CAAC,OAAO,CAAC,CAAC;IAC1B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,kBAAkB,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACxD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC,CAAC,CAAC;AAEL,oBAAoB,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,eAAe,EAAE,CAAC,CAAC;AAE1D,MAAM,OAAO,CAAC,UAAU,EAAE,CAAC"}

package/dist/fetch-shapes.js

@@ -16,3 +16,4 @@ export async function fetchRealmShapes(endpoint, token, fetchImpl = fetch) {
         targetClasses: countTargetClasses(`${shacl}\n${ontology}`),
     };
 }
+//# sourceMappingURL=fetch-shapes.js.map

package/dist/fetch-shapes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fetch-shapes.js","sourceRoot":"","sources":["../src/fetch-shapes.ts"],"names":[],"mappings":"AAAA,OAAO,EAAoC,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAC/E,OAAO,EACL,kBAAkB,EAClB,cAAc,EACd,gBAAgB,EAChB,iBAAiB,EACjB,aAAa,EACb,0BAA0B,GAC3B,MAAM,aAAa,CAAC;AAUrB,MAAM,UAAU,cAAc,CAAC,MAAc,EAAE,WAAmB;IAChE,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,kBAAkB,CAAC,WAAW,CAAC,SAAS,CAAC;AACpF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,QAAgB,EAChB,KAAkB,EAClB,YAAuB,KAAK;IAE5B,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,KAAK,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,cAAc,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,SAAS,CAAC,CAAC,CAAC;IACtH,MAAM,gBAAgB,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;IAEnD,MAAM,KAAK,GAAG,MAAM,WAAW,CAAC,KAAK,EAAE,CAAC,WAAW,EAAE,EAAE,CACrD,gBAAgB,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,aAAa,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,SAAS,CAAC,CACvF,CAAC;IACF,MAAM,QAAQ,GAAG,MAAM,WAAW,CAAC,KAAK,EAAE,CAAC,WAAW,EAAE,EAAE,CACxD,gBAAgB,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,gBAAgB,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,SAAS,CAAC,CAC1F,CAAC;IAEF,OAAO;QACL,SAAS,EAAE,0BAA0B,CAAC,gBAAgB,CAAC;QACvD,gBAAgB;QAChB,KAAK;QACL,QAAQ;QACR,aAAa,EAAE,kBAAkB,CAAC,GAAG,KAAK,KAAK,QAAQ,EAAE,CAAC;KAC3D,CAAC;AACJ,CAAC"}

package/dist/generate.js

@@ -75,3 +75,4 @@ export async function generatePackage({ shacl, ontology, vocabBase }, outDir) {
         rmSync(stageDir, { recursive: true, force: true });
     }
 }
+//# sourceMappingURL=generate.js.map

package/dist/generate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"generate.js","sourceRoot":"","sources":["../src/generate.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,WAAW,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC/G,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACjD,OAAO,EAAE,WAAW,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AACnE,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAEvD,MAAM,UAAU,GAAG,GAAG,EAAE,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;AAEzE,kGAAkG;AAClG,MAAM,UAAU,YAAY,CAAC,QAAgB,UAAU,EAAE;IACvD,KAAK,IAAI,GAAG,GAAG,OAAO,CAAC,KAAK,CAAC,EAAE,GAAG,KAAK,OAAO,CAAC,GAAG,CAAC,EAAE,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QACxE,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;QAC7C,IAAI,UAAU,CAAC,SAAS,CAAC;YAAE,OAAO,SAAS,CAAC;IAC9C,CAAC;IAED,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC,CAAC;AAClF,CAAC;AAED,6FAA6F;AAC7F,MAAM,SAAS,GAAG,6BAA6B,CAAC;AAEhD,MAAM,SAAS,GAAG,4BAA4B,CAAC;AAE/C,MAAM,UAAU,gBAAgB,CAAC,MAAc;IAC7C,OAAO,MAAM,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC;AACtF,CAAC;AAED,8FAA8F;AAC9F,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,MAAc,EAAE,IAAY;IACjE,OAAO,MAAM,CAAC,MAAM,EAAE,EAAE,GAAG,CAAC,MAAM,aAAa,CAAC,IAAI,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;AAC5E,CAAC;AAED,SAAS,cAAc,CAAC,MAAc;IACpC,OAAO,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AAC9F,CAAC;AAED,2FAA2F;AAC3F,MAAM,UAAU,oBAAoB,CAAC,MAAc;IACjD,KAAK,MAAM,IAAI,IAAI,cAAc,CAAC,MAAM,CAAC;QAAE,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC;AACxE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,MAAc;IAC1D,KAAK,MAAM,IAAI,IAAI,cAAc,CAAC,MAAM,CAAC,EAAE,CAAC;QAC1C,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QAChC,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAC1C,MAAM,UAAU,GAAG,MAAM,gBAAgB,CAAC,WAAW,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;QAEvF,IAAI,UAAU,KAAK,MAAM;YAAE,aAAa,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;IAC7D,CAAC;AACH,CAAC;AAED,MAAM,WAAW,GAAG,aAAa,CAAC;AAElC,6FAA6F;AAC7F,oFAAoF;AACpF,MAAM,UAAU,sBAAsB,CAAC,MAAc;IACnD,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IAEvC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO;IAE9B,MAAM,KAAK,GAAG,iBAAiB,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAElG,MAAM,IAAI,KAAK,CAAC,+DAA+D,WAAW,KAAK,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACtH,CAAC;AAED,oGAAoG;AACpG,MAAM,UAAU,QAAQ,CAAC,SAAiB,EAAE,MAAc;IACxD,oBAAoB,CAAC,MAAM,CAAC,CAAC;IAC7B,SAAS,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACvC,YAAY,CACV,OAAO,CAAC,QAAQ,EAChB,CAAC,YAAY,EAAE,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,GAAG,WAAW,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,CAAC,EACzG,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,aAAa,EAAE,EAAE,CACrE,CAAC;IAEF,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC,EAAE,CAAC;QAC1C,MAAM,IAAI,KAAK,CAAC,8BAA8B,MAAM,yBAAyB,CAAC,CAAC;IACjF,CAAC;IAED,sBAAsB,CAAC,MAAM,CAAC,CAAC;AACjC,CAAC;AAID,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAgB,EAAE,MAAc;IAChG,MAAM,QAAQ,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,gBAAgB,CAAC,CAAC,CAAC;IAE/D,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;QAC5C,aAAa,CAAC,MAAM,EAAE,MAAM,WAAW,CAAC,KAAK,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAC;QACrE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACzB,MAAM,uBAAuB,CAAC,MAAM,CAAC,CAAC;IACxC,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACrD,CAAC;AACH,CAAC"}

package/dist/index.js

@@ -3,3 +3,4 @@ export { failOnUnknownNamespace, generatePackage, removeGeneratedFiles } from ".
 export { sortSchemas } from "./sort-schemas.js";
 export { countTargetClasses } from "./shapes.js";
 export { mergeShapes, realmPrefix, sortQuads } from "./turtle.js";
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,cAAc,EAAoB,MAAM,mBAAmB,CAAC;AACvF,OAAO,EAAE,sBAAsB,EAAE,eAAe,EAAE,oBAAoB,EAAqB,MAAM,eAAe,CAAC;AACjH,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AACjD,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC"}

package/dist/shapes.js

@@ -76,3 +76,4 @@ export function countTargetClasses(turtle) {
     }
     return Object.fromEntries([...seen].map(([group, classes]) => [group, classes.size]).sort());
 }
+//# sourceMappingURL=shapes.js.map

package/dist/shapes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"shapes.js","sourceRoot":"","sources":["../src/shapes.ts"],"names":[],"mappings":"AAAA,OAAO,EAAkB,MAAM,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AAE7E,2FAA2F;AAC3F,MAAM,CAAC,MAAM,aAAa,GAAG,0CAA0C,CAAC;AAExE,MAAM,mBAAmB,GAAG,qCAAqC,CAAC;AAElE,MAAM,mBAAmB,GAAG,UAAU,CAAC;AAEvC,MAAM,UAAU,mBAAmB,CAAC,QAAgB;IAClD,IAAI,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QAC3B,MAAM,IAAI,KAAK,CAAC,iBAAiB,QAAQ,+CAA+C,CAAC,CAAC;IAC5F,CAAC;IAED,OAAO,yCAAyC,QAAQ,kBAAkB,CAAC;AAC7E,CAAC;AAED,MAAM,UAAU,cAAc;IAC5B,OAAO,oDAAoD,CAAC;AAC9D,CAAC;AAID,MAAM,UAAU,aAAa,CAAC,OAAgB;IAC5C,MAAM,QAAQ,GAAI,OAAwD,CAAC,OAAO,EAAE,QAAQ,IAAI,EAAE,CAAC;IAEnG,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAmB,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC;AACnH,CAAC;AAED,oGAAoG;AACpG,6DAA6D;AAC7D,MAAM,UAAU,iBAAiB,CAAC,SAA4B;IAC5D,MAAM,UAAU,GAAG,SAAS,CAAC,MAAM,CACjC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,mBAAmB,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,mBAAmB,CAAC,CACnF,CAAC;IAEF,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CACb,0EAA0E;YACxE,IAAI,mBAAmB,YAAY,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAC7D,CAAC;IACJ,CAAC;IAED,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1B,MAAM,IAAI,KAAK,CAAC,qDAAqD,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACjG,CAAC;IAED,OAAO,UAAU,CAAC,CAAC,CAAW,CAAC;AACjC,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,gBAAwB;IACjE,OAAO,gBAAgB,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC;AAChE,CAAC;AAQD,KAAK,UAAU,SAAS,CACtB,EAAE,QAAQ,EAAE,KAAK,EAAmB,EACpC,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAc,EACrC,SAAoB;IAEpB,MAAM,QAAQ,GAAG,MAAM,MAAM,CAC3B,QAAQ,EACR;QACE,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,KAAK,EAAE,EAAE,cAAc,EAAE,0BAA0B,EAAE,MAAM,EAAE,MAAM,EAAE;QACzG,IAAI,EAAE,KAAK;KACZ,EACD,SAAS,CACV,CAAC;IAEF,IAAI,CAAC,QAAQ,CAAC,EAAE;QAAE,MAAM,OAAO,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;IAEvF,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,OAAO,CAAC,IAA0C,EAAE,QAAkB,EAAE,IAAY;IAC3F,MAAM,YAAY,GAAG,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,CAAC;IACxE,MAAM,IAAI,GAAG,YAAY,CAAC,CAAC,CAAC,yDAAyD,CAAC,CAAC,CAAC,EAAE,CAAC;IAE3F,OAAO,IAAI,mBAAmB,CAC5B,GAAG,IAAI,CAAC,QAAQ,YAAY,IAAI,CAAC,MAAM,gBAAgB,QAAQ,CAAC,MAAM,IAAI,IAAI,IAAI,IAAI,CAAC,IAAI,EAAE,EAAE,EAC/F,QAAQ,CAAC,MAAM,CAChB,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,OAAqB,EAAE,YAAuB,KAAK;IACxF,MAAM,IAAI,GAAG;QACX,KAAK,EAAE,mBAAmB,CAAC,OAAO,CAAC,QAAQ,CAAC;QAC5C,MAAM,EAAE,aAAa;QACrB,MAAM,EAAE,gBAAgB,OAAO,CAAC,QAAQ,GAAG;KAC5C,CAAC;IAEF,OAAO,CAAC,MAAM,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;AAC5D,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,MAAuB,EAAE,YAAuB,KAAK;IACxF,MAAM,IAAI,GAAG,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,MAAM,EAAE,iCAAiC,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC;IAE9G,OAAO,aAAa,CAAC,MAAM,CAAC,MAAM,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;AAChF,CAAC;AAED,qGAAqG;AACrG,MAAM,WAAW,GAAG,sDAAsD,CAAC;AAE3E,6FAA6F;AAC7F,MAAM,CAAC,MAAM,UAAU,GAAG,SAAS,CAAC;AAEpC,gFAAgF;AAChF,MAAM,UAAU,kBAAkB,CAAC,MAAc;IAC/C,MAAM,IAAI,GAAG,IAAI,GAAG,EAAuB,CAAC;IAE5C,KAAK,MAAM,CAAC,EAAE,MAAM,EAAE,SAAS,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;QACjE,IAAI,CAAC,SAAS;YAAE,SAAS;QAEzB,MAAM,KAAK,GAAG,MAAM,IAAI,UAAU,CAAC;QACnC,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,IAAI,GAAG,EAAU,CAAC;QACrD,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACvB,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IAC3B,CAAC;IAED,OAAO,MAAM,CAAC,WAAW,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;AAC/F,CAAC"}

package/dist/sort-schemas.js

@@ -31,3 +31,4 @@ export function sortSchemas(source) {
     const sorted = [...declarations].sort(byName).map((each) => each.text);
     return `${[...header, sorted.join("\n\n")].join("\n")}\n`;
 }
+//# sourceMappingURL=sort-schemas.js.map

package/dist/sort-schemas.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sort-schemas.js","sourceRoot":"","sources":["../src/sort-schemas.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,GAAG,qBAAqB,CAAC;AAM1C,SAAS,kBAAkB,CAAC,KAAe;IACzC,MAAM,MAAM,GAAe,EAAE,CAAC;IAE9B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC5C,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;IACxC,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,aAAa,CAAC,KAAe;IACpC,OAAO,EAAE,IAAI,EAAE,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC;AACjG,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,MAAc;IAC9C,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACjC,MAAM,KAAK,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IAEhE,IAAI,KAAK,GAAG,CAAC;QAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC;IAE1D,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,YAAY,EAAE,kBAAkB,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,aAAa,CAAC,EAAE,CAAC;AACpH,CAAC;AAED,qGAAqG;AACrG,SAAS,MAAM,CAAC,IAAiB,EAAE,KAAkB;IACnD,OAAO,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACtE,CAAC;AAED,gGAAgG;AAChG,yFAAyF;AACzF,MAAM,UAAU,WAAW,CAAC,MAAc;IACxC,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;IAE3D,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,MAAM,CAAC;IAE7C,MAAM,MAAM,GAAG,CAAC,GAAG,YAAY,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAEvE,OAAO,GAAG,CAAC,GAAG,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;AAC5D,CAAC"}

package/dist/turtle.js

@@ -52,3 +52,4 @@ export function mergeShapes(shacl, ontology, vocabBase) {
         prefixes: namePrefixes({ ...shapes.prefixes, ...subclasses.prefixes }, vocabBase),
     });
 }
+//# sourceMappingURL=turtle.js.map

package/dist/turtle.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"turtle.js","sourceRoot":"","sources":["../src/turtle.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,IAAI,CAAC;AAGpC,8FAA8F;AAC9F,+FAA+F;AAC/F,MAAM,CAAC,MAAM,WAAW,GAAG,GAAG,CAAC;AAI/B,MAAM,UAAU,WAAW,CAAC,MAAc;IACxC,MAAM,QAAQ,GAA2B,EAAE,CAAC;IAC5C,MAAM,KAAK,GAAG,IAAI,MAAM,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE,EAAE;QAC7D,QAAQ,CAAC,MAAM,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC;IAC/B,CAAC,CAAC,CAAC;IAEH,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;AAC7B,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAgB;IAC3D,MAAM,MAAM,GAAG,IAAI,MAAM,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC;IACxC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAEvB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IAC3E,CAAC,CAAC,CAAC;AACL,CAAC;AAED,qGAAqG;AACrG,MAAM,UAAU,YAAY,CAAC,QAAgC,EAAE,SAAiB;IAC9E,MAAM,KAAK,GAA2B,EAAE,CAAC,WAAW,CAAC,EAAE,SAAS,EAAE,CAAC;IAEnE,KAAK,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QACrD,IAAI,MAAM,KAAK,EAAE,IAAI,GAAG,KAAK,SAAS;YAAE,KAAK,CAAC,MAAM,CAAC,GAAG,GAAG,CAAC;IAC9D,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,SAAS,CAAC,IAAU;IAC3B,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS;QAAE,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC9F,IAAI,IAAI,CAAC,QAAQ,KAAK,WAAW;QAAE,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;IAE5D,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;AAC3B,CAAC;AAED,gGAAgG;AAChG,MAAM,UAAU,OAAO,CAAC,IAAU;IAChC,OAAO,IAAI,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC;AAChG,CAAC;AAED,gGAAgG;AAChG,6FAA6F;AAC7F,MAAM,UAAU,SAAS,CAAC,KAAsB;IAC9C,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IAClE,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAExF,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACxC,CAAC;AAED,4BAA4B;AAC5B,MAAM,UAAU,WAAW,CAAC,KAAa,EAAE,QAAgB,EAAE,SAAiB;IAC5E,MAAM,MAAM,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;IAClC,MAAM,UAAU,GAAG,WAAW,CAAC,QAAQ,CAAC,CAAC;IAEzC,OAAO,WAAW,CAAC;QACjB,KAAK,EAAE,SAAS,CAAC,CAAC,GAAG,MAAM,CAAC,KAAK,EAAE,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;QACxD,QAAQ,EAAE,YAAY,CAAC,EAAE,GAAG,MAAM,CAAC,QAAQ,EAAE,GAAG,UAAU,CAAC,QAAQ,EAAE,EAAE,SAAS,CAAC;KAClF,CAAC,CAAC;AACL,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@manta-eu/codegen",
-  "version": "0.1.9",
+  "version": "0.1.10",
   "description": "CLI that generates LDkit schemas from a realm's SHACL shapes, read from its datastore",
   "homepage": "https://developers.manta.eu",
   "keywords": [
@@ -29,7 +29,7 @@
     "ldkit": "^2.9.0",
     "n3": "^2.7.12",
     "prettier": "^3.8.1",
-    "@manta-eu/auth": "0.1.9"
+    "@manta-eu/auth": "0.1.10"
   },
   "devDependencies": {
     "@types/node": "^24.13.3",
@@ -42,7 +42,12 @@
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",
   "files": [
-    "dist"
+    "dist",
+    "src",
+    "!src/**/*.test.*",
+    "!src/**/*.stories.*",
+    "!src/**/__fixtures__",
+    "!src/coverage"
   ],
   "publishConfig": {
     "access": "public"

package/src/cli.ts

@@ -0,0 +1,101 @@
+#!/usr/bin/env node
+import {
+  cachedToken,
+  ciClientId,
+  clientIdHelp,
+  defaultDeployment,
+  describeError,
+  mintWithClientCredentials,
+  publicClientFrom,
+  registerAuthCommands,
+  type TokenSource,
+  userTokenSource,
+} from "@manta-eu/auth";
+import { Command, Option } from "commander";
+import { resolve } from "node:path";
+import { fetchRealmShapes, sparqlEndpoint, type RealmShapes } from "./fetch-shapes.js";
+import { generatePackage } from "./generate.js";
+
+type FetchOptions = {
+  apiUrl: string;
+  datastore: string;
+  keycloakUrl: string;
+  keycloakRealm: string;
+  clientId?: string;
+  scope?: string;
+  useDeviceCode?: boolean;
+  out: string;
+};
+
+// The secret stays out of the flags: an argument list is readable to every process on the machine.
+function tokenSourceFor(options: FetchOptions): TokenSource {
+  const secret = process.env.MANTA_CLIENT_SECRET;
+
+  if (secret) {
+    const client = publicClientFrom({ ...options, clientId: options.clientId ?? ciClientId });
+
+    return cachedToken(() => mintWithClientCredentials({ ...client, clientSecret: secret, scope: options.scope }));
+  }
+
+  return userTokenSource(publicClientFrom(options), { label: "manta-codegen", useDeviceCode: options.useDeviceCode });
+}
+
+function reportTargetClasses(targetClasses: Record<string, number>): void {
+  const total = Object.values(targetClasses).reduce((sum, count) => sum + count, 0);
+
+  console.error(`manta-codegen: the datastore describes ${total} class(es):`);
+  for (const [prefix, count] of Object.entries(targetClasses)) console.error(`  ${prefix}: ${count}`);
+
+  if (total === 0) console.error("manta-codegen: the datastore describes no class. Check the datastore id.");
+}
+
+async function readShapes(options: FetchOptions): Promise<RealmShapes> {
+  const token = tokenSourceFor(options);
+  const endpoint = sparqlEndpoint(options.apiUrl, options.datastore);
+  console.error(`manta-codegen: reading the shapes from ${endpoint}`);
+
+  const shapes = await fetchRealmShapes(endpoint, token);
+
+  console.error(`manta-codegen: the realm vocabulary base is ${shapes.vocabBase}`);
+  reportTargetClasses(shapes.targetClasses);
+
+  return shapes;
+}
+
+// The CLI keeps no copy of either graph: the directory holds generated code and nothing else.
+async function generate(options: FetchOptions): Promise<void> {
+  const shapes = await readShapes(options);
+  const outDir = resolve(options.out);
+
+  await generatePackage(shapes, outDir);
+
+  console.error(`manta-codegen: wrote the LDkit schemas to ${outDir}`);
+}
+
+const program = new Command()
+  .name("manta-codegen")
+  .description("Generate LDkit schemas from a realm's SHACL shapes, read from its datastore.");
+
+program
+  .command("generate")
+  .description("read the realm's shapes and generate the LDkit schemas, one file per namespace")
+  .option("--api-url <url>", "Manta API base URL", defaultDeployment.apiUrl)
+  .requiredOption("--datastore <id>", "datastore to read")
+  .option("--keycloak-url <url>", "Keycloak base URL", defaultDeployment.keycloakUrl)
+  .option("--keycloak-realm <realm>", "Keycloak realm", defaultDeployment.keycloakRealm)
+  .option("--client-id <id>", clientIdHelp)
+  .option("--scope <scope>", "OAuth scope to ask a service account token for")
+  .option("--use-device-code", "if a login is needed, use a one-time code instead of a browser redirect")
+  .addOption(new Option("--out <dir>", "directory to write into").default("./.ldkit"))
+  .action(async (options: FetchOptions) => {
+    try {
+      await generate(options);
+    } catch (error) {
+      console.error(`manta-codegen: ${describeError(error)}`);
+      process.exit(1);
+    }
+  });
+
+registerAuthCommands(program, { label: "manta-codegen" });
+
+await program.parseAsync();

package/src/fetch-shapes.ts

@@ -0,0 +1,45 @@
+import { type FetchLike, type TokenSource, withRenewal } from "@manta-eu/auth";
+import {
+  countTargetClasses,
+  fetchGraphList,
+  fetchGraphTurtle,
+  findOntologyGraph,
+  shaclGraphIri,
+  vocabBaseFromOntologyGraph,
+} from "./shapes.js";
+
+export type RealmShapes = {
+  vocabBase: string;
+  ontologyGraphIri: string;
+  shacl: string;
+  ontology: string;
+  targetClasses: Record<string, number>;
+};
+
+export function sparqlEndpoint(apiUrl: string, datastoreId: string): string {
+  return `${apiUrl.replace(/\/$/, "")}/d/${encodeURIComponent(datastoreId)}/sparql`;
+}
+
+export async function fetchRealmShapes(
+  endpoint: string,
+  token: TokenSource,
+  fetchImpl: FetchLike = fetch,
+): Promise<RealmShapes> {
+  const graphs = await withRenewal(token, (accessToken) => fetchGraphList({ endpoint, token: accessToken }, fetchImpl));
+  const ontologyGraphIri = findOntologyGraph(graphs);
+
+  const shacl = await withRenewal(token, (accessToken) =>
+    fetchGraphTurtle({ endpoint, graphIri: shaclGraphIri, token: accessToken }, fetchImpl),
+  );
+  const ontology = await withRenewal(token, (accessToken) =>
+    fetchGraphTurtle({ endpoint, graphIri: ontologyGraphIri, token: accessToken }, fetchImpl),
+  );
+
+  return {
+    vocabBase: vocabBaseFromOntologyGraph(ontologyGraphIri),
+    ontologyGraphIri,
+    shacl,
+    ontology,
+    targetClasses: countTargetClasses(`${shacl}\n${ontology}`),
+  };
+}

package/src/generate.ts

@@ -0,0 +1,99 @@
+import { execFileSync } from "node:child_process";
+import { existsSync, mkdirSync, mkdtempSync, readdirSync, readFileSync, rmSync, writeFileSync } from "node:fs";
+import { createRequire } from "node:module";
+import { tmpdir } from "node:os";
+import { dirname, join } from "node:path";
+import { format, resolveConfig } from "prettier";
+import { sortSchemas, splitDeclarations } from "./sort-schemas.js";
+import { mergeShapes, realmPrefix } from "./turtle.js";
+
+const ldkitEntry = () => createRequire(import.meta.url).resolve("ldkit");
+
+// LDkit exports no entry for its own CLI, so the run addresses the file beside the package entry.
+export function ldkitCliPath(entry: string = ldkitEntry()): string {
+  for (let dir = dirname(entry); dir !== dirname(dir); dir = dirname(dir)) {
+    const candidate = join(dir, "esm", "cli.js");
+    if (existsSync(candidate)) return candidate;
+  }
+
+  throw new Error("cannot find the LDkit CLI beside the resolved ldkit package.");
+}
+
+// LDkit writes a property name as a bare object key, and Meta sends terms such as `1dClick`.
+const objectKey = /(?<=^\s+)[^\s"':]+(?=:\s)/gm;
+
+const validName = /^[A-Za-z_$][A-Za-z0-9_$]*$/;
+
+export function quoteInvalidKeys(source: string): string {
+  return source.replace(objectKey, (key) => (validName.test(key) ? key : `"${key}"`));
+}
+
+// The settings come from the repository the file lands in, so the code matches its neighbors.
+export async function formatTypeScript(source: string, path: string): Promise<string> {
+  return format(source, { ...(await resolveConfig(path)), filepath: path });
+}
+
+function generatedFiles(outDir: string): string[] {
+  return existsSync(outDir) ? readdirSync(outDir).filter((name) => name.endsWith(".ts")) : [];
+}
+
+// A schema the shapes no longer describe would keep its file, and its re-export, for ever.
+export function removeGeneratedFiles(outDir: string): void {
+  for (const file of generatedFiles(outDir)) rmSync(join(outDir, file));
+}
+
+export async function normalizeGeneratedFiles(outDir: string): Promise<void> {
+  for (const file of generatedFiles(outDir)) {
+    const path = join(outDir, file);
+    const source = readFileSync(path, "utf8");
+    const normalized = await formatTypeScript(sortSchemas(quoteInvalidKeys(source)), path);
+
+    if (normalized !== source) writeFileSync(path, normalized);
+  }
+}
+
+const unknownFile = "_unknown.ts";
+
+// LDkit cannot name a term whose prefix the endpoint left out, so it writes the IRI in full.
+// That schema then addresses one realm for ever, whatever realm the next run reads.
+export function failOnUnknownNamespace(outDir: string): void {
+  const path = join(outDir, unknownFile);
+
+  if (!existsSync(path)) return;
+
+  const names = splitDeclarations(readFileSync(path, "utf8")).declarations.map((each) => each.name);
+
+  throw new Error(`the endpoint named no prefix for some terms, so LDkit wrote ${unknownFile}: ${names.join(", ")}.`);
+}
+
+// The LDkit CLI reports a failure on stderr and still exits 0, so an empty directory is the signal.
+export function runLdkit(shaclPath: string, outDir: string): void {
+  removeGeneratedFiles(outDir);
+  mkdirSync(outDir, { recursive: true });
+  execFileSync(
+    process.execPath,
+    [ldkitCliPath(), "shacl-to-package", "--prefix-alias", `${realmPrefix}=Manta`, "file", shaclPath, outDir],
+    { stdio: "inherit", env: { ...process.env, LC_ALL: "en_US.UTF-8" } },
+  );
+
+  if (!existsSync(join(outDir, "index.ts"))) {
+    throw new Error(`LDkit wrote no schema into ${outDir}. Read the error above.`);
+  }
+
+  failOnUnknownNamespace(outDir);
+}
+
+export type ShapeSources = { shacl: string; ontology: string; vocabBase: string };
+
+export async function generatePackage({ shacl, ontology, vocabBase }: ShapeSources, outDir: string): Promise<void> {
+  const stageDir = mkdtempSync(join(tmpdir(), "manta-codegen-"));
+
+  try {
+    const merged = join(stageDir, "shapes.ttl");
+    writeFileSync(merged, await mergeShapes(shacl, ontology, vocabBase));
+    runLdkit(merged, outDir);
+    await normalizeGeneratedFiles(outDir);
+  } finally {
+    rmSync(stageDir, { recursive: true, force: true });
+  }
+}

package/src/index.ts

@@ -0,0 +1,5 @@
+export { fetchRealmShapes, sparqlEndpoint, type RealmShapes } from "./fetch-shapes.js";
+export { failOnUnknownNamespace, generatePackage, removeGeneratedFiles, type ShapeSources } from "./generate.js";
+export { sortSchemas } from "./sort-schemas.js";
+export { countTargetClasses } from "./shapes.js";
+export { mergeShapes, realmPrefix, sortQuads } from "./turtle.js";

package/src/shapes.ts

@@ -0,0 +1,127 @@
+import { type FetchLike, postTo, RefusedRequestError } from "@manta-eu/auth";
+
+// The store puts the shapes here for every realm, so this one carries no realm identifier.
+export const shaclGraphIri = "https://rdfox.com/default-base-iri/shacl";
+
+const storeDefaultBaseIri = "https://rdfox.com/default-base-iri/";
+
+const ontologyGraphSuffix = "ontology";
+
+export function constructGraphQuery(graphIri: string): string {
+  if (graphIri.includes(">")) {
+    throw new Error(`the graph IRI ${graphIri} carries a ">", which cannot go into a query.`);
+  }
+
+  return `CONSTRUCT { ?s ?p ?o } WHERE { GRAPH <${graphIri}> { ?s ?p ?o } }`;
+}
+
+export function graphListQuery(): string {
+  return "SELECT DISTINCT ?g WHERE { GRAPH ?g { ?s ?p ?o } }";
+}
+
+type SparqlBinding = { g?: { value?: unknown } };
+
+export function readGraphList(results: unknown): string[] {
+  const bindings = (results as { results?: { bindings?: SparqlBinding[] } }).results?.bindings ?? [];
+
+  return bindings.map((binding) => binding.g?.value).filter((value): value is string => typeof value === "string");
+}
+
+// The realm ontology graph is `<vocab base>ontology`, so finding it also yields the vocab base. The
+// CLI therefore needs no realm name and ships no realm list.
+export function findOntologyGraph(graphIris: readonly string[]): string {
+  const candidates = graphIris.filter(
+    (iri) => iri.endsWith(ontologyGraphSuffix) && !iri.startsWith(storeDefaultBaseIri),
+  );
+
+  if (candidates.length === 0) {
+    throw new Error(
+      `the datastore holds no ontology graph. Looked for an IRI that ends with ` +
+        `"${ontologyGraphSuffix}" among: ${graphIris.join(", ")}.`,
+    );
+  }
+
+  if (candidates.length > 1) {
+    throw new Error(`the datastore holds more than one ontology graph: ${candidates.join(", ")}.`);
+  }
+
+  return candidates[0] as string;
+}
+
+export function vocabBaseFromOntologyGraph(ontologyGraphIri: string): string {
+  return ontologyGraphIri.slice(0, -ontologyGraphSuffix.length);
+}
+
+export type DatastoreAccess = { endpoint: string; token: string };
+
+export type GraphRequest = DatastoreAccess & { graphIri: string };
+
+type SparqlCall = { query: string; accept: string; action: string };
+
+async function runSparql(
+  { endpoint, token }: DatastoreAccess,
+  { query, accept, action }: SparqlCall,
+  fetchImpl: FetchLike,
+): Promise<Response> {
+  const response = await postTo(
+    endpoint,
+    {
+      method: "POST",
+      headers: { Authorization: `Bearer ${token}`, "Content-Type": "application/sparql-query", Accept: accept },
+      body: query,
+    },
+    fetchImpl,
+  );
+
+  if (!response.ok) throw refusal({ endpoint, action }, response, await response.text());
+
+  return response;
+}
+
+function refusal(call: { endpoint: string; action: string }, response: Response, body: string): Error {
+  const rejectsToken = response.status === 401 || response.status === 403;
+  const hint = rejectsToken ? " Check that the token carries access to this datastore." : "";
+
+  return new RefusedRequestError(
+    `${call.endpoint} refused ${call.action} with status ${response.status}.${hint} ${body.trim()}`,
+    response.status,
+  );
+}
+
+export async function fetchGraphTurtle(request: GraphRequest, fetchImpl: FetchLike = fetch): Promise<string> {
+  const call = {
+    query: constructGraphQuery(request.graphIri),
+    accept: "text/turtle",
+    action: `the read of <${request.graphIri}>`,
+  };
+
+  return (await runSparql(request, call, fetchImpl)).text();
+}
+
+export async function fetchGraphList(access: DatastoreAccess, fetchImpl: FetchLike = fetch): Promise<string[]> {
+  const call = { query: graphListQuery(), accept: "application/sparql-results+json", action: "the graph list" };
+
+  return readGraphList(await (await runSparql(access, call, fetchImpl)).json());
+}
+
+// The datastore serves the realm's own classes on the empty prefix, so the prefix group is optional.
+const targetClass = /sh:targetClass\s+([A-Za-z][\w-]*)?:([A-Za-z][\w-]*)/g;
+
+// The empty prefix reads as nothing in a report, and the reader needs a name for that group.
+export const realmGroup = "(realm)";
+
+// A thin result must be visible at once, rather than found later at query time.
+export function countTargetClasses(turtle: string): Record<string, number> {
+  const seen = new Map<string, Set<string>>();
+
+  for (const [, prefix, localName] of turtle.matchAll(targetClass)) {
+    if (!localName) continue;
+
+    const group = prefix ?? realmGroup;
+    const classes = seen.get(group) ?? new Set<string>();
+    classes.add(localName);
+    seen.set(group, classes);
+  }
+
+  return Object.fromEntries([...seen].map(([group, classes]) => [group, classes.size]).sort());
+}

package/src/sort-schemas.ts

@@ -0,0 +1,46 @@
+const declaration = /^export const (\w+)/;
+
+export type Declaration = { name: string; text: string };
+
+export type SplitSource = { header: string[]; declarations: Declaration[] };
+
+function groupByDeclaration(lines: string[]): string[][] {
+  const blocks: string[][] = [];
+
+  for (const line of lines) {
+    if (declaration.test(line)) blocks.push([]);
+    blocks[blocks.length - 1]?.push(line);
+  }
+
+  return blocks;
+}
+
+function toDeclaration(block: string[]): Declaration {
+  return { name: declaration.exec(block[0] ?? "")?.[1] ?? "", text: block.join("\n").trimEnd() };
+}
+
+export function splitDeclarations(source: string): SplitSource {
+  const lines = source.split("\n");
+  const start = lines.findIndex((line) => declaration.test(line));
+
+  if (start < 0) return { header: lines, declarations: [] };
+
+  return { header: lines.slice(0, start), declarations: groupByDeclaration(lines.slice(start)).map(toDeclaration) };
+}
+
+// A code point order, never localeCompare: the order must not follow the machine that ran the build.
+function byName(left: Declaration, right: Declaration): number {
+  return left.name < right.name ? -1 : left.name > right.name ? 1 : 0;
+}
+
+// LDkit writes each schema in the order its shape arrives, so one new shape moves whole blocks.
+// packages/ldo/scripts/sort-schemas.mjs holds the same rule, so the two outputs compare.
+export function sortSchemas(source: string): string {
+  const { header, declarations } = splitDeclarations(source);
+
+  if (declarations.length === 0) return source;
+
+  const sorted = [...declarations].sort(byName).map((each) => each.text);
+
+  return `${[...header, sorted.join("\n\n")].join("\n")}\n`;
+}

package/src/turtle.ts

@@ -0,0 +1,69 @@
+import { Parser, Writer } from "n3";
+import type { Quad, Term } from "n3";
+
+// LDkit names each generated file after the prefix of the term it holds. The realm vocabulary
+// reaches us on the empty prefix, which LDkit sends to `_unknown.ts`, so it needs a name here.
+export const realmPrefix = "m";
+
+export type ParsedTurtle = { quads: Quad[]; prefixes: Record<string, string> };
+
+export function parseTurtle(turtle: string): ParsedTurtle {
+  const prefixes: Record<string, string> = {};
+  const quads = new Parser().parse(turtle, null, (prefix, iri) => {
+    prefixes[prefix] = iri.value;
+  });
+
+  return { quads, prefixes };
+}
+
+export function writeTurtle({ quads, prefixes }: ParsedTurtle): Promise<string> {
+  const writer = new Writer({ prefixes });
+  writer.addQuads(quads);
+
+  return new Promise((resolve, reject) => {
+    writer.end((error, result) => (error ? reject(error) : resolve(result)));
+  });
+}
+
+// A second prefix on the same IRI would let the writer pick either one, so the realm keeps only `m`.
+export function namePrefixes(prefixes: Record<string, string>, vocabBase: string): Record<string, string> {
+  const named: Record<string, string> = { [realmPrefix]: vocabBase };
+
+  for (const [prefix, iri] of Object.entries(prefixes)) {
+    if (prefix !== "" && iri !== vocabBase) named[prefix] = iri;
+  }
+
+  return named;
+}
+
+function termParts(term: Term): string[] {
+  if (term.termType === "Literal") return ["2", term.value, term.language, term.datatype.value];
+  if (term.termType === "BlankNode") return ["1", term.value];
+
+  return ["0", term.value];
+}
+
+// A literal holds any text, so a separator character could give one key to two different quads.
+export function quadKey(quad: Quad): string {
+  return JSON.stringify([quad.subject, quad.predicate, quad.object, quad.graph].map(termParts));
+}
+
+// A SPARQL CONSTRUCT promises no order, and LDkit reads the shapes in the order they arrive: it
+// resolves an ambiguous term to whichever namespace it met last. One order gives one answer.
+export function sortQuads(quads: readonly Quad[]): Quad[] {
+  const keyed = quads.map((quad) => ({ key: quadKey(quad), quad }));
+  keyed.sort((left, right) => (left.key < right.key ? -1 : left.key > right.key ? 1 : 0));
+
+  return keyed.map((each) => each.quad);
+}
+
+// LDkit reads one document.
+export function mergeShapes(shacl: string, ontology: string, vocabBase: string): Promise<string> {
+  const shapes = parseTurtle(shacl);
+  const subclasses = parseTurtle(ontology);
+
+  return writeTurtle({
+    quads: sortQuads([...shapes.quads, ...subclasses.quads]),
+    prefixes: namePrefixes({ ...shapes.prefixes, ...subclasses.prefixes }, vocabBase),
+  });
+}