@origintrail-official/dkg-query 0.0.1-dev.1773506972.23bf9c0

package/LICENSE

@@ -0,0 +1,201 @@
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2018 OriginTrail
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.

package/README.md

@@ -0,0 +1,29 @@
+# @origintrail-official/dkg-query
+
+SPARQL query engine for DKG V9. Provides paranet-scoped querying, Knowledge Asset resolution by UAL, and read-only query validation.
+
+## Features
+
+- **DKGQueryEngine** — execute SPARQL SELECT, CONSTRUCT, ASK, and DESCRIBE queries against local triple stores
+- **Paranet scoping** — queries are automatically scoped to the correct named graphs for a given paranet
+- **KA resolution** — resolve a UAL to its constituent triples, metadata, and provenance
+- **QueryHandler** — P2P protocol handler for serving remote SPARQL queries from other nodes
+- **SPARQL guard** — `validateReadOnlySparql()` ensures incoming queries are read-only (no INSERT, DELETE, LOAD, etc.)
+
+## Usage
+
+```typescript
+import { DKGQueryEngine } from '@origintrail-official/dkg-query';
+
+const engine = new DKGQueryEngine(store);
+
+const results = await engine.query({
+  sparql: 'SELECT ?s ?p ?o WHERE { ?s ?p ?o } LIMIT 10',
+  paranetId: 'urn:paranet:example',
+});
+```
+
+## Internal Dependencies
+
+- `@origintrail-official/dkg-core` — configuration, logging, protocol streams
+- `@origintrail-official/dkg-storage` — triple store access for query execution

package/dist/dkg-query-engine.d.ts

@@ -0,0 +1,24 @@
+import type { TripleStore, Quad } from '@origintrail-official/dkg-storage';
+import type { QueryResult, QueryOptions, QueryEngine } from './query-engine.js';
+/**
+ * Local-only query engine that executes SPARQL against this node's own
+ * triple store. No remote query capability — by design (Spec §1.6 Store
+ * Isolation). All data must arrive via protocol messages (publish, access,
+ * sync) before it can be queried here.
+ */
+export declare class DKGQueryEngine implements QueryEngine {
+    private readonly store;
+    private readonly graphManager;
+    constructor(store: TripleStore);
+    query(sparql: string, options?: QueryOptions): Promise<QueryResult>;
+    resolveKA(ual: string): Promise<{
+        rootEntity: string;
+        paranetId: string;
+        quads: Quad[];
+    }>;
+    /**
+     * Execute a query across all locally-stored paranets.
+     */
+    queryAllParanets(sparql: string): Promise<QueryResult>;
+}
+//# sourceMappingURL=dkg-query-engine.d.ts.map

package/dist/dkg-query-engine.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dkg-query-engine.d.ts","sourceRoot":"","sources":["../src/dkg-query-engine.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,IAAI,EAAmC,MAAM,mCAAmC,CAAC;AAE5G,OAAO,KAAK,EAAE,WAAW,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAIhF;;;;;GAKG;AACH,qBAAa,cAAe,YAAW,WAAW;IAChD,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAc;IACpC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAe;gBAEhC,KAAK,EAAE,WAAW;IAKxB,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,YAAY,GAAG,OAAO,CAAC,WAAW,CAAC;IA4CnE,SAAS,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;QACpC,UAAU,EAAE,MAAM,CAAC;QACnB,SAAS,EAAE,MAAM,CAAC;QAClB,KAAK,EAAE,IAAI,EAAE,CAAC;KACf,CAAC;IA+CF;;OAEG;IACG,gBAAgB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC;CAW7D"}

package/dist/dkg-query-engine.js

@@ -0,0 +1,184 @@
+import { GraphManager } from '@origintrail-official/dkg-storage';
+import { paranetDataGraphUri, paranetWorkspaceGraphUri, assertSafeIri, escapeSparqlLiteral } from '@origintrail-official/dkg-core';
+import { validateReadOnlySparql } from './sparql-guard.js';
+/**
+ * Local-only query engine that executes SPARQL against this node's own
+ * triple store. No remote query capability — by design (Spec §1.6 Store
+ * Isolation). All data must arrive via protocol messages (publish, access,
+ * sync) before it can be queried here.
+ */
+export class DKGQueryEngine {
+    store;
+    graphManager;
+    constructor(store) {
+        this.store = store;
+        this.graphManager = new GraphManager(store);
+    }
+    async query(sparql, options) {
+        const guard = validateReadOnlySparql(sparql);
+        if (!guard.safe) {
+            throw new Error(`SPARQL rejected: ${guard.reason}`);
+        }
+        let effectiveSparql = sparql;
+        if (options?.paranetId && !sparql.toLowerCase().includes('from ')) {
+            const dataGraph = paranetDataGraphUri(options.paranetId);
+            const workspaceGraph = paranetWorkspaceGraphUri(options.paranetId);
+            if (options.includeWorkspace) {
+                const dataSparql = wrapWithGraph(sparql, dataGraph);
+                const workspaceSparql = wrapWithGraph(sparql, workspaceGraph);
+                const dataResult = await this.store.query(dataSparql);
+                const wsResult = await this.store.query(workspaceSparql);
+                return mergeWorkspaceAndDataResults(dataResult, wsResult);
+            }
+            if (options.graphSuffix === '_workspace') {
+                effectiveSparql = wrapWithGraph(sparql, workspaceGraph);
+            }
+            else {
+                effectiveSparql = wrapWithGraph(sparql, dataGraph);
+            }
+        }
+        const result = await this.store.query(effectiveSparql);
+        if (result.type === 'bindings') {
+            return { bindings: result.bindings };
+        }
+        if (result.type === 'quads') {
+            return {
+                bindings: [],
+                quads: result.quads,
+            };
+        }
+        if (result.type === 'boolean') {
+            return {
+                bindings: [{ result: String(result.value) }],
+            };
+        }
+        return { bindings: [] };
+    }
+    async resolveKA(ual) {
+        // Look up KA metadata across all meta graphs
+        const metaResult = await this.store.query(`SELECT ?rootEntity ?paranet WHERE {
+        GRAPH ?g {
+          ?ka <http://dkg.io/ontology/rootEntity> ?rootEntity .
+          ?ka <http://dkg.io/ontology/partOf> <${assertSafeIri(ual)}> .
+          <${assertSafeIri(ual)}> <http://dkg.io/ontology/paranet> ?paranet .
+        }
+      }`);
+        if (metaResult.type !== 'bindings' || metaResult.bindings.length === 0) {
+            throw new Error(`KA not found for UAL: ${ual}`);
+        }
+        const rootEntity = metaResult.bindings[0]['rootEntity'];
+        const paranetUri = metaResult.bindings[0]['paranet'];
+        const paranetId = paranetUri.replace('did:dkg:paranet:', '');
+        const dataGraph = paranetDataGraphUri(paranetId);
+        // Fetch all triples for this entity
+        const dataResult = await this.store.query(`SELECT ?s ?p ?o WHERE {
+        GRAPH <${assertSafeIri(dataGraph)}> {
+          ?s ?p ?o .
+          FILTER(
+            ?s = <${assertSafeIri(rootEntity)}>
+            || STRSTARTS(STR(?s), "${escapeSparqlLiteral(rootEntity)}/.well-known/genid/")
+          )
+        }
+      }`);
+        const quads = dataResult.type === 'bindings'
+            ? dataResult.bindings.map((row) => ({
+                subject: row['s'],
+                predicate: row['p'],
+                object: row['o'],
+                graph: dataGraph,
+            }))
+            : [];
+        return { rootEntity, paranetId, quads };
+    }
+    /**
+     * Execute a query across all locally-stored paranets.
+     */
+    async queryAllParanets(sparql) {
+        const paranets = await this.graphManager.listParanets();
+        const allBindings = [];
+        for (const paranetId of paranets) {
+            const result = await this.query(sparql, { paranetId });
+            allBindings.push(...result.bindings);
+        }
+        return { bindings: allBindings };
+    }
+}
+/**
+ * Wraps a SELECT query to scope it to a named graph.
+ * If the query already uses GRAPH patterns, returns it unchanged.
+ */
+function wrapWithGraph(sparql, graphUri) {
+    if (sparql.toLowerCase().includes('graph '))
+        return sparql;
+    const whereIdx = sparql.search(/WHERE\s*\{/i);
+    if (whereIdx === -1)
+        return sparql;
+    const braceStart = sparql.indexOf('{', whereIdx);
+    let depth = 0;
+    let braceEnd = -1;
+    for (let i = braceStart; i < sparql.length; i++) {
+        if (sparql[i] === '{')
+            depth++;
+        else if (sparql[i] === '}') {
+            depth--;
+            if (depth === 0) {
+                braceEnd = i;
+                break;
+            }
+        }
+    }
+    if (braceEnd === -1)
+        return sparql;
+    const before = sparql.slice(0, braceStart + 1);
+    const inner = sparql.slice(braceStart + 1, braceEnd);
+    const after = sparql.slice(braceEnd);
+    return `${before} GRAPH <${graphUri}> { ${inner} } ${after}`;
+}
+function mergeWorkspaceAndDataResults(dataResult, wsResult) {
+    if (dataResult.type === 'quads' || wsResult.type === 'quads') {
+        const mergedQuads = dedupeQuads([
+            ...(dataResult.type === 'quads' ? dataResult.quads : []),
+            ...(wsResult.type === 'quads' ? wsResult.quads : []),
+        ]);
+        return { bindings: [], quads: mergedQuads };
+    }
+    if (dataResult.type === 'boolean' || wsResult.type === 'boolean') {
+        const value = (dataResult.type === 'boolean' ? dataResult.value : false)
+            || (wsResult.type === 'boolean' ? wsResult.value : false);
+        return { bindings: [{ result: String(value) }] };
+    }
+    const mergedBindings = dedupeBindings([
+        ...(dataResult.type === 'bindings' ? dataResult.bindings : []),
+        ...(wsResult.type === 'bindings' ? wsResult.bindings : []),
+    ]);
+    return { bindings: mergedBindings };
+}
+function dedupeBindings(bindings) {
+    const seen = new Set();
+    const out = [];
+    for (const row of bindings) {
+        const key = bindingKey(row);
+        if (seen.has(key))
+            continue;
+        seen.add(key);
+        out.push(row);
+    }
+    return out;
+}
+function bindingKey(row) {
+    const entries = Object.entries(row).sort(([a], [b]) => a.localeCompare(b));
+    return JSON.stringify(entries);
+}
+function dedupeQuads(quads) {
+    const seen = new Set();
+    const out = [];
+    for (const q of quads) {
+        const key = `${q.subject}\u0000${q.predicate}\u0000${q.object}\u0000${q.graph}`;
+        if (seen.has(key))
+            continue;
+        seen.add(key);
+        out.push(q);
+    }
+    return out;
+}
+//# sourceMappingURL=dkg-query-engine.js.map

package/dist/dkg-query-engine.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dkg-query-engine.js","sourceRoot":"","sources":["../src/dkg-query-engine.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,YAAY,EAAE,MAAM,mCAAmC,CAAC;AAEjE,OAAO,EAAE,mBAAmB,EAAuB,wBAAwB,EAAE,aAAa,EAAE,mBAAmB,EAAE,MAAM,gCAAgC,CAAC;AACxJ,OAAO,EAAE,sBAAsB,EAAE,MAAM,mBAAmB,CAAC;AAE3D;;;;;GAKG;AACH,MAAM,OAAO,cAAc;IACR,KAAK,CAAc;IACnB,YAAY,CAAe;IAE5C,YAAY,KAAkB;QAC5B,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QACnB,IAAI,CAAC,YAAY,GAAG,IAAI,YAAY,CAAC,KAAK,CAAC,CAAC;IAC9C,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,MAAc,EAAE,OAAsB;QAChD,MAAM,KAAK,GAAG,sBAAsB,CAAC,MAAM,CAAC,CAAC;QAC7C,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;YAChB,MAAM,IAAI,KAAK,CAAC,oBAAoB,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;QACtD,CAAC;QAED,IAAI,eAAe,GAAG,MAAM,CAAC;QAE7B,IAAI,OAAO,EAAE,SAAS,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;YAClE,MAAM,SAAS,GAAG,mBAAmB,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YACzD,MAAM,cAAc,GAAG,wBAAwB,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YACnE,IAAI,OAAO,CAAC,gBAAgB,EAAE,CAAC;gBAC7B,MAAM,UAAU,GAAG,aAAa,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;gBACpD,MAAM,eAAe,GAAG,aAAa,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;gBAC9D,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;gBACtD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;gBACzD,OAAO,4BAA4B,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;YAC5D,CAAC;YACD,IAAI,OAAO,CAAC,WAAW,KAAK,YAAY,EAAE,CAAC;gBACzC,eAAe,GAAG,aAAa,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;YAC1D,CAAC;iBAAM,CAAC;gBACN,eAAe,GAAG,aAAa,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;YACrD,CAAC;QACH,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;QAEvD,IAAI,MAAM,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;YAC/B,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC;QACvC,CAAC;QACD,IAAI,MAAM,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;YAC5B,OAAO;gBACL,QAAQ,EAAE,EAAE;gBACZ,KAAK,EAAE,MAAM,CAAC,KAAK;aACpB,CAAC;QACJ,CAAC;QACD,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAC9B,OAAO;gBACL,QAAQ,EAAE,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;aAC7C,CAAC;QACJ,CAAC;QACD,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;IAC1B,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,GAAW;QAKzB,6CAA6C;QAC7C,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,CACvC;;;iDAG2C,aAAa,CAAC,GAAG,CAAC;aACtD,aAAa,CAAC,GAAG,CAAC;;QAEvB,CACH,CAAC;QAEF,IAAI,UAAU,CAAC,IAAI,KAAK,UAAU,IAAI,UAAU,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvE,MAAM,IAAI,KAAK,CAAC,yBAAyB,GAAG,EAAE,CAAC,CAAC;QAClD,CAAC;QAED,MAAM,UAAU,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC;QACxD,MAAM,UAAU,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QACrD,MAAM,SAAS,GAAG,UAAU,CAAC,OAAO,CAAC,kBAAkB,EAAE,EAAE,CAAC,CAAC;QAC7D,MAAM,SAAS,GAAG,mBAAmB,CAAC,SAAS,CAAC,CAAC;QAEjD,oCAAoC;QACpC,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,CACvC;iBACW,aAAa,CAAC,SAAS,CAAC;;;oBAGrB,aAAa,CAAC,UAAU,CAAC;qCACR,mBAAmB,CAAC,UAAU,CAAC;;;QAG5D,CACH,CAAC;QAEF,MAAM,KAAK,GACT,UAAU,CAAC,IAAI,KAAK,UAAU;YAC5B,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;gBAChC,OAAO,EAAE,GAAG,CAAC,GAAG,CAAC;gBACjB,SAAS,EAAE,GAAG,CAAC,GAAG,CAAC;gBACnB,MAAM,EAAE,GAAG,CAAC,GAAG,CAAC;gBAChB,KAAK,EAAE,SAAS;aACjB,CAAC,CAAC;YACL,CAAC,CAAC,EAAE,CAAC;QAET,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;IAC1C,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,gBAAgB,CAAC,MAAc;QACnC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,YAAY,EAAE,CAAC;QACxD,MAAM,WAAW,GAAkC,EAAE,CAAC;QAEtD,KAAK,MAAM,SAAS,IAAI,QAAQ,EAAE,CAAC;YACjC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;YACvD,WAAW,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC;QACvC,CAAC;QAED,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,CAAC;IACnC,CAAC;CACF;AAED;;;GAGG;AACH,SAAS,aAAa,CAAC,MAAc,EAAE,QAAgB;IACrD,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAAE,OAAO,MAAM,CAAC;IAE3D,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;IAC9C,IAAI,QAAQ,KAAK,CAAC,CAAC;QAAE,OAAO,MAAM,CAAC;IAEnC,MAAM,UAAU,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IACjD,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,QAAQ,GAAG,CAAC,CAAC,CAAC;IAClB,KAAK,IAAI,CAAC,GAAG,UAAU,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAChD,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,GAAG;YAAE,KAAK,EAAE,CAAC;aAC1B,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;YAC3B,KAAK,EAAE,CAAC;YACR,IAAI,KAAK,KAAK,CAAC,EAAE,CAAC;gBAAC,QAAQ,GAAG,CAAC,CAAC;gBAAC,MAAM;YAAC,CAAC;QAC3C,CAAC;IACH,CAAC;IACD,IAAI,QAAQ,KAAK,CAAC,CAAC;QAAE,OAAO,MAAM,CAAC;IAEnC,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,UAAU,GAAG,CAAC,CAAC,CAAC;IAC/C,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,UAAU,GAAG,CAAC,EAAE,QAAQ,CAAC,CAAC;IACrD,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IAErC,OAAO,GAAG,MAAM,WAAW,QAAQ,OAAO,KAAK,MAAM,KAAK,EAAE,CAAC;AAC/D,CAAC;AAED,SAAS,4BAA4B,CACnC,UAA4B,EAC5B,QAA0B;IAE1B,IAAI,UAAU,CAAC,IAAI,KAAK,OAAO,IAAI,QAAQ,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;QAC7D,MAAM,WAAW,GAAG,WAAW,CAAC;YAC9B,GAAG,CAAC,UAAU,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;YACxD,GAAG,CAAC,QAAQ,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;SACrD,CAAC,CAAC;QACH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC;IAC9C,CAAC;IAED,IAAI,UAAU,CAAC,IAAI,KAAK,SAAS,IAAI,QAAQ,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QACjE,MAAM,KAAK,GAAG,CAAC,UAAU,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC;eACnE,CAAC,QAAQ,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QAC5D,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC;IACnD,CAAC;IAED,MAAM,cAAc,GAAG,cAAc,CAAC;QACpC,GAAG,CAAC,UAAU,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9D,GAAG,CAAC,QAAQ,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;KAC3D,CAAC,CAAC;IACH,OAAO,EAAE,QAAQ,EAAE,cAAc,EAAE,CAAC;AACtC,CAAC;AAED,SAAS,cAAc,CACrB,QAAuC;IAEvC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,GAAG,GAAkC,EAAE,CAAC;IAC9C,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;QAC3B,MAAM,GAAG,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;QAC5B,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,SAAS;QAC5B,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACd,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAChB,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,UAAU,CAAC,GAA2B;IAC7C,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3E,OAAO,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;AACjC,CAAC;AAED,SAAS,WAAW,CAAC,KAAa;IAChC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,GAAG,GAAW,EAAE,CAAC;IACvB,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,MAAM,GAAG,GAAG,GAAG,CAAC,CAAC,OAAO,SAAS,CAAC,CAAC,SAAS,SAAS,CAAC,CAAC,MAAM,SAAS,CAAC,CAAC,KAAK,EAAE,CAAC;QAChF,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,SAAS;QAC5B,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACd,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACd,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,6 @@
+export * from './query-engine.js';
+export * from './query-types.js';
+export { DKGQueryEngine } from './dkg-query-engine.js';
+export { QueryHandler } from './query-handler.js';
+export { validateReadOnlySparql, type SparqlGuardResult } from './sparql-guard.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,mBAAmB,CAAC;AAClC,cAAc,kBAAkB,CAAC;AACjC,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,sBAAsB,EAAE,KAAK,iBAAiB,EAAE,MAAM,mBAAmB,CAAC"}

package/dist/index.js

@@ -0,0 +1,6 @@
+export * from './query-engine.js';
+export * from './query-types.js';
+export { DKGQueryEngine } from './dkg-query-engine.js';
+export { QueryHandler } from './query-handler.js';
+export { validateReadOnlySparql } from './sparql-guard.js';
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,mBAAmB,CAAC;AAClC,cAAc,kBAAkB,CAAC;AACjC,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,sBAAsB,EAA0B,MAAM,mBAAmB,CAAC"}

package/dist/query-engine.d.ts

@@ -0,0 +1,22 @@
+import type { Quad } from '@origintrail-official/dkg-storage';
+export interface QueryResult {
+    bindings: Array<Record<string, string>>;
+    quads?: Quad[];
+}
+export interface QueryOptions {
+    paranetId?: string;
+    timeout?: number;
+    /** When set to '_workspace', query runs over the paranet's workspace graph only. */
+    graphSuffix?: '_workspace';
+    /** When true and paranetId is set, query runs over both data and workspace graphs (union). */
+    includeWorkspace?: boolean;
+}
+export interface QueryEngine {
+    query(sparql: string, options?: QueryOptions): Promise<QueryResult>;
+    resolveKA(ual: string): Promise<{
+        rootEntity: string;
+        paranetId: string;
+        quads: Quad[];
+    }>;
+}
+//# sourceMappingURL=query-engine.d.ts.map

package/dist/query-engine.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"query-engine.d.ts","sourceRoot":"","sources":["../src/query-engine.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,mCAAmC,CAAC;AAE9D,MAAM,WAAW,WAAW;IAC1B,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IACxC,KAAK,CAAC,EAAE,IAAI,EAAE,CAAC;CAChB;AAED,MAAM,WAAW,YAAY;IAC3B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,oFAAoF;IACpF,WAAW,CAAC,EAAE,YAAY,CAAC;IAC3B,8FAA8F;IAC9F,gBAAgB,CAAC,EAAE,OAAO,CAAC;CAC5B;AAED,MAAM,WAAW,WAAW;IAC1B,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,YAAY,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IACpE,SAAS,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,IAAI,EAAE,CAAA;KAAE,CAAC,CAAC;CAC3F"}

package/dist/query-engine.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=query-engine.js.map

package/dist/query-engine.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"query-engine.js","sourceRoot":"","sources":["../src/query-engine.ts"],"names":[],"mappings":""}

package/dist/query-handler.d.ts

@@ -0,0 +1,32 @@
+import type { PeerId } from '@origintrail-official/dkg-core';
+import type { DKGQueryEngine } from './dkg-query-engine.js';
+import type { QueryRequest, QueryResponse, QueryAccessConfig } from './query-types.js';
+/**
+ * Handles incoming cross-agent query requests over the
+ * /dkg/query/2.0.0 libp2p protocol.
+ *
+ * Evaluates access policy, rate limits, dispatches to the local query
+ * engine, and enforces result size limits.
+ */
+export declare class QueryHandler {
+    private readonly queryEngine;
+    private readonly config;
+    private readonly rateBuckets;
+    private readonly defaultRatePerMinute;
+    constructor(queryEngine: DKGQueryEngine, config: QueryAccessConfig);
+    /**
+     * StreamHandler-compatible entry point.
+     * Decodes the request JSON, processes it, returns response JSON.
+     */
+    get handler(): (data: Uint8Array, peerId: PeerId) => Promise<Uint8Array>;
+    handle(request: QueryRequest, peerId: string): Promise<QueryResponse>;
+    private checkAccess;
+    private hasAnyPublicParanet;
+    private checkRateLimit;
+    private lookupByUAL;
+    private lookupByType;
+    private lookupEntityTriples;
+    private executeSparql;
+    private enforceResultSize;
+}
+//# sourceMappingURL=query-handler.d.ts.map

package/dist/query-handler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"query-handler.d.ts","sourceRoot":"","sources":["../src/query-handler.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,gCAAgC,CAAC;AAI7D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAC5D,OAAO,KAAK,EACV,YAAY,EACZ,aAAa,EACb,iBAAiB,EAIlB,MAAM,kBAAkB,CAAC;AAa1B;;;;;;GAMG;AACH,qBAAa,YAAY;IACvB,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAiB;IAC7C,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAoB;IAC3C,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAiC;IAC7D,OAAO,CAAC,QAAQ,CAAC,oBAAoB,CAAS;gBAElC,WAAW,EAAE,cAAc,EAAE,MAAM,EAAE,iBAAiB;IAMlE;;;OAGG;IACH,IAAI,OAAO,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,KAAK,OAAO,CAAC,UAAU,CAAC,CAavE;IAEK,MAAM,CAAC,OAAO,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC;IAoD3E,OAAO,CAAC,WAAW;IAiDnB,OAAO,CAAC,mBAAmB;IAM3B,OAAO,CAAC,cAAc;YAsBR,WAAW;YA6BX,YAAY;YAyBZ,mBAAmB;YA0BnB,aAAa;IA2D3B,OAAO,CAAC,iBAAiB;CAW1B"}

package/dist/query-handler.js

@@ -0,0 +1,281 @@
+import { paranetDataGraphUri, assertSafeIri } from '@origintrail-official/dkg-core';
+import { stripLiteralsAndComments } from './sparql-utils.js';
+import { validateReadOnlySparql } from './sparql-guard.js';
+const DEFAULT_LIMIT = 100;
+const MAX_LIMIT = 1000;
+const DEFAULT_TIMEOUT_MS = 5000;
+const MAX_TIMEOUT_MS = 30000;
+const MAX_RESULT_BYTES = 1_048_576; // 1 MB
+/**
+ * Handles incoming cross-agent query requests over the
+ * /dkg/query/2.0.0 libp2p protocol.
+ *
+ * Evaluates access policy, rate limits, dispatches to the local query
+ * engine, and enforces result size limits.
+ */
+export class QueryHandler {
+    queryEngine;
+    config;
+    rateBuckets = new Map();
+    defaultRatePerMinute;
+    constructor(queryEngine, config) {
+        this.queryEngine = queryEngine;
+        this.config = config;
+        this.defaultRatePerMinute = config.rateLimitPerMinute ?? 60;
+    }
+    /**
+     * StreamHandler-compatible entry point.
+     * Decodes the request JSON, processes it, returns response JSON.
+     */
+    get handler() {
+        return async (data, peerId) => {
+            let request;
+            try {
+                const text = new TextDecoder().decode(data);
+                request = JSON.parse(text);
+            }
+            catch {
+                return encode(errorResponse('', 'ERROR', 'Invalid request: malformed JSON'));
+            }
+            const response = await this.handle(request, peerId.toString());
+            return encode(response);
+        };
+    }
+    async handle(request, peerId) {
+        const opId = request.operationId ?? '';
+        // Validate request structure
+        if (request.lookupType === undefined || request.lookupType === null) {
+            return errorResponse(opId, 'ERROR', 'Invalid request: missing lookupType');
+        }
+        // Resolve paranet (ENTITY_BY_UAL doesn't need it upfront)
+        const paranetId = request.paranetId;
+        if (request.lookupType !== 'ENTITY_BY_UAL' && !paranetId) {
+            return errorResponse(opId, 'ERROR', 'Invalid request: paranetId is required for this lookup type');
+        }
+        // Access policy check
+        const accessResult = this.checkAccess(request.lookupType, paranetId, peerId);
+        if (accessResult)
+            return { ...accessResult, operationId: opId };
+        // Rate limit check
+        const rateResult = this.checkRateLimit(peerId);
+        if (rateResult)
+            return { ...rateResult, operationId: opId };
+        // Dispatch to lookup handler
+        try {
+            const limit = Math.min(request.limit ?? DEFAULT_LIMIT, MAX_LIMIT);
+            const timeout = Math.min(request.timeout ?? DEFAULT_TIMEOUT_MS, MAX_TIMEOUT_MS);
+            let response;
+            switch (request.lookupType) {
+                case 'ENTITY_BY_UAL':
+                    response = await this.lookupByUAL(opId, request.ual);
+                    break;
+                case 'ENTITIES_BY_TYPE':
+                    response = await this.lookupByType(opId, paranetId, request.rdfType, limit);
+                    break;
+                case 'ENTITY_TRIPLES':
+                    response = await this.lookupEntityTriples(opId, paranetId, request.entityUri);
+                    break;
+                case 'SPARQL_QUERY':
+                    response = await this.executeSparql(opId, paranetId, request.sparql, limit, timeout);
+                    break;
+                default:
+                    response = errorResponse(opId, 'UNSUPPORTED_LOOKUP', `Unknown lookup type: ${request.lookupType}`);
+            }
+            return this.enforceResultSize(response);
+        }
+        catch (err) {
+            return errorResponse(opId, 'ERROR', 'Internal error processing query');
+        }
+    }
+    checkAccess(lookupType, paranetId, peerId) {
+        const defaultPolicy = this.config.defaultPolicy ?? 'deny';
+        // For ENTITY_BY_UAL, we skip paranet-level check (UAL resolves internally)
+        if (lookupType === 'ENTITY_BY_UAL') {
+            if (defaultPolicy === 'deny' && !this.hasAnyPublicParanet()) {
+                return errorResponse('', 'ACCESS_DENIED', 'No paranets are queryable on this node');
+            }
+            return null;
+        }
+        const paranetConfig = this.config.paranets?.[paranetId];
+        if (!paranetConfig) {
+            if (defaultPolicy === 'deny') {
+                return errorResponse('', 'ACCESS_DENIED', `Paranet '${paranetId}' is not queryable`);
+            }
+            // defaultPolicy is 'public' — allow with default lookup types
+            return null;
+        }
+        // Check peer access
+        if (paranetConfig.policy === 'deny') {
+            return errorResponse('', 'ACCESS_DENIED', `Paranet '${paranetId}' is not queryable`);
+        }
+        if (paranetConfig.policy === 'allowList') {
+            if (!paranetConfig.allowedPeers?.includes(peerId)) {
+                return errorResponse('', 'ACCESS_DENIED', 'Your peer ID is not in the allow list');
+            }
+        }
+        // Check lookup type
+        if (paranetConfig.allowedLookupTypes?.length) {
+            if (!paranetConfig.allowedLookupTypes.includes(lookupType)) {
+                return errorResponse('', 'UNSUPPORTED_LOOKUP', `Lookup type '${lookupType}' is not allowed for paranet '${paranetId}'`);
+            }
+        }
+        // Check SPARQL specifically
+        if (lookupType === 'SPARQL_QUERY' && !paranetConfig.sparqlEnabled) {
+            return errorResponse('', 'UNSUPPORTED_LOOKUP', `SPARQL queries are not enabled for paranet '${paranetId}'`);
+        }
+        return null;
+    }
+    hasAnyPublicParanet() {
+        if (this.config.defaultPolicy === 'public')
+            return true;
+        if (!this.config.paranets)
+            return false;
+        return Object.values(this.config.paranets).some(p => p.policy === 'public');
+    }
+    checkRateLimit(peerId) {
+        const now = Date.now();
+        let bucket = this.rateBuckets.get(peerId);
+        if (!bucket || now >= bucket.resetAt) {
+            bucket = { count: 0, resetAt: now + 60_000 };
+            this.rateBuckets.set(peerId, bucket);
+        }
+        bucket.count++;
+        if (bucket.count > this.defaultRatePerMinute) {
+            const retryAfter = Math.ceil((bucket.resetAt - now) / 1000);
+            return errorResponse('', 'RATE_LIMITED', `Rate limit exceeded. Retry after ${retryAfter} seconds`);
+        }
+        return null;
+    }
+    async lookupByUAL(opId, ual) {
+        if (!ual) {
+            return errorResponse(opId, 'ERROR', 'Invalid request: missing ual');
+        }
+        try {
+            const resolved = await this.queryEngine.resolveKA(ual);
+            const ntriples = resolved.quads
+                .map(q => `<${q.subject}> <${q.predicate}> ${formatObject(q.object)} .`)
+                .join('\n');
+            return {
+                operationId: opId,
+                status: 'OK',
+                ntriples,
+                truncated: false,
+                resultCount: resolved.quads.length,
+            };
+        }
+        catch {
+            return {
+                operationId: opId,
+                status: 'OK',
+                ntriples: '',
+                truncated: false,
+                resultCount: 0,
+            };
+        }
+    }
+    async lookupByType(opId, paranetId, rdfType, limit) {
+        if (!rdfType) {
+            return errorResponse(opId, 'ERROR', 'Invalid request: missing rdfType');
+        }
+        const dataGraph = paranetDataGraphUri(paranetId);
+        const sparql = `SELECT DISTINCT ?entity WHERE { GRAPH <${assertSafeIri(dataGraph)}> { ?entity a <${assertSafeIri(rdfType)}> } } LIMIT ${limit}`;
+        const result = await this.queryEngine.query(sparql);
+        const entityUris = result.bindings.map(b => b['entity']);
+        return {
+            operationId: opId,
+            status: 'OK',
+            entityUris,
+            truncated: entityUris.length >= limit,
+            resultCount: entityUris.length,
+        };
+    }
+    async lookupEntityTriples(opId, paranetId, entityUri) {
+        if (!entityUri) {
+            return errorResponse(opId, 'ERROR', 'Invalid request: missing entityUri');
+        }
+        const dataGraph = paranetDataGraphUri(paranetId);
+        const sparql = `SELECT ?p ?o WHERE { GRAPH <${assertSafeIri(dataGraph)}> { <${assertSafeIri(entityUri)}> ?p ?o } }`;
+        const result = await this.queryEngine.query(sparql);
+        const ntriples = result.bindings
+            .map(b => `<${entityUri}> <${b['p']}> ${formatObject(b['o'])} .`)
+            .join('\n');
+        return {
+            operationId: opId,
+            status: 'OK',
+            ntriples,
+            truncated: false,
+            resultCount: result.bindings.length,
+        };
+    }
+    async executeSparql(opId, paranetId, sparql, limit, timeout) {
+        if (!sparql) {
+            return errorResponse(opId, 'ERROR', 'Invalid request: missing sparql');
+        }
+        // Strip string literals and comments so regexes don't false-positive
+        // on keywords inside quoted values or variable names like ?graph.
+        const stripped = stripLiteralsAndComments(sparql);
+        if (/\bSERVICE\b/i.test(stripped)) {
+            return errorResponse(opId, 'ERROR', 'SERVICE clauses are not allowed in remote queries');
+        }
+        if (/\bGRAPH\s+/i.test(stripped)) {
+            return errorResponse(opId, 'ERROR', 'Explicit GRAPH clauses are not allowed in remote queries — queries are automatically scoped to the target paranet');
+        }
+        if (/\bFROM\s+/i.test(stripped)) {
+            return errorResponse(opId, 'ERROR', 'FROM/FROM NAMED clauses are not allowed in remote queries — queries are automatically scoped to the target paranet');
+        }
+        const guard = validateReadOnlySparql(sparql);
+        if (!guard.safe) {
+            return errorResponse(opId, 'ERROR', `SPARQL rejected: ${guard.reason}`);
+        }
+        // Execute with timeout
+        const result = await Promise.race([
+            this.queryEngine.query(sparql, { paranetId }),
+            new Promise((_, reject) => setTimeout(() => reject(new Error('timeout')), timeout)),
+        ]).catch(err => {
+            if (err.message === 'timeout') {
+                return { _timeout: true };
+            }
+            throw err;
+        });
+        if (result._timeout) {
+            return errorResponse(opId, 'GAS_LIMIT_EXCEEDED', `Query exceeded time limit (${timeout}ms)`);
+        }
+        const bindings = result.bindings.slice(0, limit);
+        return {
+            operationId: opId,
+            status: 'OK',
+            bindings: JSON.stringify(bindings),
+            truncated: result.bindings.length > limit,
+            resultCount: result.bindings.length,
+        };
+    }
+    enforceResultSize(response) {
+        const serialized = JSON.stringify(response);
+        if (serialized.length <= MAX_RESULT_BYTES)
+            return response;
+        return {
+            ...response,
+            truncated: true,
+            ntriples: response.ntriples?.slice(0, MAX_RESULT_BYTES) ?? response.ntriples,
+            bindings: response.bindings?.slice(0, MAX_RESULT_BYTES) ?? response.bindings,
+        };
+    }
+}
+function errorResponse(opId, status, error) {
+    return {
+        operationId: opId,
+        status,
+        truncated: false,
+        resultCount: 0,
+        error,
+    };
+}
+function formatObject(value) {
+    if (value.startsWith('"') || value.startsWith("'"))
+        return value;
+    return `<${value}>`;
+}
+function encode(response) {
+    return new TextEncoder().encode(JSON.stringify(response));
+}
+//# sourceMappingURL=query-handler.js.map

package/dist/query-handler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"query-handler.js","sourceRoot":"","sources":["../src/query-handler.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,mBAAmB,EAAE,aAAa,EAAuB,MAAM,gCAAgC,CAAC;AACzG,OAAO,EAAE,wBAAwB,EAAE,MAAM,mBAAmB,CAAC;AAC7D,OAAO,EAAE,sBAAsB,EAAE,MAAM,mBAAmB,CAAC;AAW3D,MAAM,aAAa,GAAG,GAAG,CAAC;AAC1B,MAAM,SAAS,GAAG,IAAI,CAAC;AACvB,MAAM,kBAAkB,GAAG,IAAI,CAAC;AAChC,MAAM,cAAc,GAAG,KAAK,CAAC;AAC7B,MAAM,gBAAgB,GAAG,SAAS,CAAC,CAAC,OAAO;AAO3C;;;;;;GAMG;AACH,MAAM,OAAO,YAAY;IACN,WAAW,CAAiB;IAC5B,MAAM,CAAoB;IAC1B,WAAW,GAAG,IAAI,GAAG,EAAsB,CAAC;IAC5C,oBAAoB,CAAS;IAE9C,YAAY,WAA2B,EAAE,MAAyB;QAChE,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;QAC/B,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,oBAAoB,GAAG,MAAM,CAAC,kBAAkB,IAAI,EAAE,CAAC;IAC9D,CAAC;IAED;;;OAGG;IACH,IAAI,OAAO;QACT,OAAO,KAAK,EAAE,IAAgB,EAAE,MAAc,EAAuB,EAAE;YACrE,IAAI,OAAqB,CAAC;YAC1B,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;gBAC5C,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAiB,CAAC;YAC7C,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,MAAM,CAAC,aAAa,CAAC,EAAE,EAAE,OAAO,EAAE,iCAAiC,CAAC,CAAC,CAAC;YAC/E,CAAC;YAED,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;YAC/D,OAAO,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC1B,CAAC,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,OAAqB,EAAE,MAAc;QAChD,MAAM,IAAI,GAAG,OAAO,CAAC,WAAW,IAAI,EAAE,CAAC;QAEvC,6BAA6B;QAC7B,IAAI,OAAO,CAAC,UAAU,KAAK,SAAS,IAAI,OAAO,CAAC,UAAU,KAAK,IAAI,EAAE,CAAC;YACpE,OAAO,aAAa,CAAC,IAAI,EAAE,OAAO,EAAE,qCAAqC,CAAC,CAAC;QAC7E,CAAC;QAED,0DAA0D;QAC1D,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC;QACpC,IAAI,OAAO,CAAC,UAAU,KAAK,eAAe,IAAI,CAAC,SAAS,EAAE,CAAC;YACzD,OAAO,aAAa,CAAC,IAAI,EAAE,OAAO,EAAE,6DAA6D,CAAC,CAAC;QACrG,CAAC;QAED,sBAAsB;QACtB,MAAM,YAAY,GAAG,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,UAAU,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;QAC7E,IAAI,YAAY;YAAE,OAAO,EAAE,GAAG,YAAY,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;QAEhE,mBAAmB;QACnB,MAAM,UAAU,GAAG,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;QAC/C,IAAI,UAAU;YAAE,OAAO,EAAE,GAAG,UAAU,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;QAE5D,6BAA6B;QAC7B,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,IAAI,aAAa,EAAE,SAAS,CAAC,CAAC;YAClE,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,IAAI,kBAAkB,EAAE,cAAc,CAAC,CAAC;YAEhF,IAAI,QAAuB,CAAC;YAE5B,QAAQ,OAAO,CAAC,UAAU,EAAE,CAAC;gBAC3B,KAAK,eAAe;oBAClB,QAAQ,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,OAAO,CAAC,GAAI,CAAC,CAAC;oBACtD,MAAM;gBACR,KAAK,kBAAkB;oBACrB,QAAQ,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,SAAU,EAAE,OAAO,CAAC,OAAQ,EAAE,KAAK,CAAC,CAAC;oBAC9E,MAAM;gBACR,KAAK,gBAAgB;oBACnB,QAAQ,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,IAAI,EAAE,SAAU,EAAE,OAAO,CAAC,SAAU,CAAC,CAAC;oBAChF,MAAM;gBACR,KAAK,cAAc;oBACjB,QAAQ,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,IAAI,EAAE,SAAU,EAAE,OAAO,CAAC,MAAO,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;oBACvF,MAAM;gBACR;oBACE,QAAQ,GAAG,aAAa,CAAC,IAAI,EAAE,oBAAoB,EAAE,wBAAwB,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC;YACvG,CAAC;YAED,OAAO,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAC;QAC1C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,aAAa,CAAC,IAAI,EAAE,OAAO,EAAE,iCAAiC,CAAC,CAAC;QACzE,CAAC;IACH,CAAC;IAEO,WAAW,CACjB,UAAsB,EACtB,SAA6B,EAC7B,MAAc;QAEd,MAAM,aAAa,GAAG,IAAI,CAAC,MAAM,CAAC,aAAa,IAAI,MAAM,CAAC;QAE1D,2EAA2E;QAC3E,IAAI,UAAU,KAAK,eAAe,EAAE,CAAC;YACnC,IAAI,aAAa,KAAK,MAAM,IAAI,CAAC,IAAI,CAAC,mBAAmB,EAAE,EAAE,CAAC;gBAC5D,OAAO,aAAa,CAAC,EAAE,EAAE,eAAe,EAAE,wCAAwC,CAAC,CAAC;YACtF,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,aAAa,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,SAAU,CAAC,CAAC;QACzD,IAAI,CAAC,aAAa,EAAE,CAAC;YACnB,IAAI,aAAa,KAAK,MAAM,EAAE,CAAC;gBAC7B,OAAO,aAAa,CAAC,EAAE,EAAE,eAAe,EAAE,YAAY,SAAS,oBAAoB,CAAC,CAAC;YACvF,CAAC;YACD,8DAA8D;YAC9D,OAAO,IAAI,CAAC;QACd,CAAC;QAED,oBAAoB;QACpB,IAAI,aAAa,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YACpC,OAAO,aAAa,CAAC,EAAE,EAAE,eAAe,EAAE,YAAY,SAAS,oBAAoB,CAAC,CAAC;QACvF,CAAC;QACD,IAAI,aAAa,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;YACzC,IAAI,CAAC,aAAa,CAAC,YAAY,EAAE,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;gBAClD,OAAO,aAAa,CAAC,EAAE,EAAE,eAAe,EAAE,uCAAuC,CAAC,CAAC;YACrF,CAAC;QACH,CAAC;QAED,oBAAoB;QACpB,IAAI,aAAa,CAAC,kBAAkB,EAAE,MAAM,EAAE,CAAC;YAC7C,IAAI,CAAC,aAAa,CAAC,kBAAkB,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;gBAC3D,OAAO,aAAa,CAAC,EAAE,EAAE,oBAAoB,EAAE,gBAAgB,UAAU,iCAAiC,SAAS,GAAG,CAAC,CAAC;YAC1H,CAAC;QACH,CAAC;QAED,4BAA4B;QAC5B,IAAI,UAAU,KAAK,cAAc,IAAI,CAAC,aAAa,CAAC,aAAa,EAAE,CAAC;YAClE,OAAO,aAAa,CAAC,EAAE,EAAE,oBAAoB,EAAE,+CAA+C,SAAS,GAAG,CAAC,CAAC;QAC9G,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAEO,mBAAmB;QACzB,IAAI,IAAI,CAAC,MAAM,CAAC,aAAa,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QACxD,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ;YAAE,OAAO,KAAK,CAAC;QACxC,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC;IAC9E,CAAC;IAEO,cAAc,CAAC,MAAc;QACnC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,IAAI,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAE1C,IAAI,CAAC,MAAM,IAAI,GAAG,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YACrC,MAAM,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,GAAG,GAAG,MAAM,EAAE,CAAC;YAC7C,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACvC,CAAC;QAED,MAAM,CAAC,KAAK,EAAE,CAAC;QACf,IAAI,MAAM,CAAC,KAAK,GAAG,IAAI,CAAC,oBAAoB,EAAE,CAAC;YAC7C,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,GAAG,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC;YAC5D,OAAO,aAAa,CAClB,EAAE,EACF,cAAc,EACd,oCAAoC,UAAU,UAAU,CACzD,CAAC;QACJ,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAEO,KAAK,CAAC,WAAW,CAAC,IAAY,EAAE,GAAW;QACjD,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,OAAO,aAAa,CAAC,IAAI,EAAE,OAAO,EAAE,8BAA8B,CAAC,CAAC;QACtE,CAAC;QAED,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;YACvD,MAAM,QAAQ,GAAG,QAAQ,CAAC,KAAK;iBAC5B,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,OAAO,MAAM,CAAC,CAAC,SAAS,KAAK,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC;iBACvE,IAAI,CAAC,IAAI,CAAC,CAAC;YAEd,OAAO;gBACL,WAAW,EAAE,IAAI;gBACjB,MAAM,EAAE,IAAI;gBACZ,QAAQ;gBACR,SAAS,EAAE,KAAK;gBAChB,WAAW,EAAE,QAAQ,CAAC,KAAK,CAAC,MAAM;aACnC,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,OAAO;gBACL,WAAW,EAAE,IAAI;gBACjB,MAAM,EAAE,IAAI;gBACZ,QAAQ,EAAE,EAAE;gBACZ,SAAS,EAAE,KAAK;gBAChB,WAAW,EAAE,CAAC;aACf,CAAC;QACJ,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,YAAY,CACxB,IAAY,EACZ,SAAiB,EACjB,OAAe,EACf,KAAa;QAEb,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,aAAa,CAAC,IAAI,EAAE,OAAO,EAAE,kCAAkC,CAAC,CAAC;QAC1E,CAAC;QAED,MAAM,SAAS,GAAG,mBAAmB,CAAC,SAAS,CAAC,CAAC;QACjD,MAAM,MAAM,GAAG,0CAA0C,aAAa,CAAC,SAAS,CAAC,kBAAkB,aAAa,CAAC,OAAO,CAAC,eAAe,KAAK,EAAE,CAAC;QAEhJ,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACpD,MAAM,UAAU,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;QAEzD,OAAO;YACL,WAAW,EAAE,IAAI;YACjB,MAAM,EAAE,IAAI;YACZ,UAAU;YACV,SAAS,EAAE,UAAU,CAAC,MAAM,IAAI,KAAK;YACrC,WAAW,EAAE,UAAU,CAAC,MAAM;SAC/B,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,mBAAmB,CAC/B,IAAY,EACZ,SAAiB,EACjB,SAAiB;QAEjB,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,OAAO,aAAa,CAAC,IAAI,EAAE,OAAO,EAAE,oCAAoC,CAAC,CAAC;QAC5E,CAAC;QAED,MAAM,SAAS,GAAG,mBAAmB,CAAC,SAAS,CAAC,CAAC;QACjD,MAAM,MAAM,GAAG,+BAA+B,aAAa,CAAC,SAAS,CAAC,QAAQ,aAAa,CAAC,SAAS,CAAC,aAAa,CAAC;QACpH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAEpD,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ;aAC7B,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,SAAS,MAAM,CAAC,CAAC,GAAG,CAAC,KAAK,YAAY,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;aAChE,IAAI,CAAC,IAAI,CAAC,CAAC;QAEd,OAAO;YACL,WAAW,EAAE,IAAI;YACjB,MAAM,EAAE,IAAI;YACZ,QAAQ;YACR,SAAS,EAAE,KAAK;YAChB,WAAW,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM;SACpC,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,aAAa,CACzB,IAAY,EACZ,SAAiB,EACjB,MAAc,EACd,KAAa,EACb,OAAe;QAEf,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,aAAa,CAAC,IAAI,EAAE,OAAO,EAAE,iCAAiC,CAAC,CAAC;QACzE,CAAC;QAED,qEAAqE;QACrE,kEAAkE;QAClE,MAAM,QAAQ,GAAG,wBAAwB,CAAC,MAAM,CAAC,CAAC;QAElD,IAAI,cAAc,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;YAClC,OAAO,aAAa,CAAC,IAAI,EAAE,OAAO,EAAE,mDAAmD,CAAC,CAAC;QAC3F,CAAC;QAED,IAAI,aAAa,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;YACjC,OAAO,aAAa,CAAC,IAAI,EAAE,OAAO,EAAE,mHAAmH,CAAC,CAAC;QAC3J,CAAC;QAED,IAAI,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;YAChC,OAAO,aAAa,CAAC,IAAI,EAAE,OAAO,EAAE,oHAAoH,CAAC,CAAC;QAC5J,CAAC;QAED,MAAM,KAAK,GAAG,sBAAsB,CAAC,MAAM,CAAC,CAAC;QAC7C,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;YAChB,OAAO,aAAa,CAAC,IAAI,EAAE,OAAO,EAAE,oBAAoB,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;QAC1E,CAAC;QAED,uBAAuB;QACvB,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC;YAChC,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,CAAC;YAC7C,IAAI,OAAO,CAAQ,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,CAC/B,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,SAAS,CAAC,CAAC,EAAE,OAAO,CAAC,CACxD;SACF,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE;YACb,IAAI,GAAG,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;gBAC9B,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAS,CAAC;YACnC,CAAC;YACD,MAAM,GAAG,CAAC;QACZ,CAAC,CAAC,CAAC;QAEH,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;YACpB,OAAO,aAAa,CAAC,IAAI,EAAE,oBAAoB,EAAE,8BAA8B,OAAO,KAAK,CAAC,CAAC;QAC/F,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;QACjD,OAAO;YACL,WAAW,EAAE,IAAI;YACjB,MAAM,EAAE,IAAI;YACZ,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC;YAClC,SAAS,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,KAAK;YACzC,WAAW,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM;SACpC,CAAC;IACJ,CAAC;IAEO,iBAAiB,CAAC,QAAuB;QAC/C,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QAC5C,IAAI,UAAU,CAAC,MAAM,IAAI,gBAAgB;YAAE,OAAO,QAAQ,CAAC;QAE3D,OAAO;YACL,GAAG,QAAQ;YACX,SAAS,EAAE,IAAI;YACf,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC,EAAE,gBAAgB,CAAC,IAAI,QAAQ,CAAC,QAAQ;YAC5E,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC,EAAE,gBAAgB,CAAC,IAAI,QAAQ,CAAC,QAAQ;SAC7E,CAAC;IACJ,CAAC;CACF;AAED,SAAS,aAAa,CAAC,IAAY,EAAE,MAAmB,EAAE,KAAa;IACrE,OAAO;QACL,WAAW,EAAE,IAAI;QACjB,MAAM;QACN,SAAS,EAAE,KAAK;QAChB,WAAW,EAAE,CAAC;QACd,KAAK;KACN,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,KAAa;IACjC,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IACjE,OAAO,IAAI,KAAK,GAAG,CAAC;AACtB,CAAC;AAED,SAAS,MAAM,CAAC,QAAuB;IACrC,OAAO,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC;AAC5D,CAAC"}

package/dist/query-types.d.ts

@@ -0,0 +1,38 @@
+export type LookupType = 'ENTITY_BY_UAL' | 'ENTITIES_BY_TYPE' | 'ENTITY_TRIPLES' | 'SPARQL_QUERY';
+export type QueryStatus = 'OK' | 'ERROR' | 'ACCESS_DENIED' | 'RATE_LIMITED' | 'NOT_FOUND' | 'GAS_LIMIT_EXCEEDED' | 'UNSUPPORTED_LOOKUP';
+export interface QueryRequest {
+    operationId: string;
+    lookupType: LookupType;
+    paranetId?: string;
+    ual?: string;
+    entityUri?: string;
+    rdfType?: string;
+    sparql?: string;
+    limit?: number;
+    timeout?: number;
+}
+export interface QueryResponse {
+    operationId: string;
+    status: QueryStatus;
+    ntriples?: string;
+    bindings?: string;
+    entityUris?: string[];
+    truncated: boolean;
+    resultCount: number;
+    gasConsumed?: number;
+    error?: string;
+}
+export interface ParanetQueryPolicy {
+    policy: 'deny' | 'public' | 'allowList';
+    allowedPeers?: string[];
+    allowedLookupTypes?: LookupType[];
+    sparqlEnabled?: boolean;
+    sparqlTimeout?: number;
+    sparqlMaxResults?: number;
+}
+export interface QueryAccessConfig {
+    defaultPolicy: 'deny' | 'public';
+    paranets?: Record<string, ParanetQueryPolicy>;
+    rateLimitPerMinute?: number;
+}
+//# sourceMappingURL=query-types.d.ts.map

package/dist/query-types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"query-types.d.ts","sourceRoot":"","sources":["../src/query-types.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,UAAU,GAClB,eAAe,GACf,kBAAkB,GAClB,gBAAgB,GAChB,cAAc,CAAC;AAEnB,MAAM,MAAM,WAAW,GACnB,IAAI,GACJ,OAAO,GACP,eAAe,GACf,cAAc,GACd,WAAW,GACX,oBAAoB,GACpB,oBAAoB,CAAC;AAEzB,MAAM,WAAW,YAAY;IAC3B,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,UAAU,CAAC;IACvB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,aAAa;IAC5B,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,WAAW,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,SAAS,EAAE,OAAO,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,kBAAkB;IACjC,MAAM,EAAE,MAAM,GAAG,QAAQ,GAAG,WAAW,CAAC;IACxC,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,kBAAkB,CAAC,EAAE,UAAU,EAAE,CAAC;IAClC,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,iBAAiB;IAChC,aAAa,EAAE,MAAM,GAAG,QAAQ,CAAC;IACjC,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC;IAC9C,kBAAkB,CAAC,EAAE,MAAM,CAAC;CAC7B"}

package/dist/query-types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=query-types.js.map

package/dist/query-types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"query-types.js","sourceRoot":"","sources":["../src/query-types.ts"],"names":[],"mappings":""}

package/dist/sparql-guard.d.ts

@@ -0,0 +1,18 @@
+/**
+ * SPARQL query safety guard.
+ *
+ * The DKG controls writes exclusively via the publish/update protocol.
+ * All user-facing SPARQL must be read-only (SELECT, CONSTRUCT, ASK, DESCRIBE).
+ * This module rejects any SPARQL that attempts mutation operations.
+ */
+export interface SparqlGuardResult {
+    safe: boolean;
+    reason?: string;
+}
+/**
+ * Validates that a SPARQL query is read-only.
+ * Returns `{ safe: true }` for SELECT/CONSTRUCT/ASK/DESCRIBE.
+ * Returns `{ safe: false, reason }` for anything that could mutate data.
+ */
+export declare function validateReadOnlySparql(sparql: string): SparqlGuardResult;
+//# sourceMappingURL=sparql-guard.d.ts.map

package/dist/sparql-guard.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sparql-guard.d.ts","sourceRoot":"","sources":["../src/sparql-guard.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAwBH,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,OAAO,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED;;;;GAIG;AACH,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,MAAM,GAAG,iBAAiB,CAqBxE"}

package/dist/sparql-guard.js

@@ -0,0 +1,47 @@
+/**
+ * SPARQL query safety guard.
+ *
+ * The DKG controls writes exclusively via the publish/update protocol.
+ * All user-facing SPARQL must be read-only (SELECT, CONSTRUCT, ASK, DESCRIBE).
+ * This module rejects any SPARQL that attempts mutation operations.
+ */
+import { stripLiteralsAndComments } from './sparql-utils.js';
+const MUTATING_KEYWORDS = [
+    'INSERT',
+    'DELETE',
+    'LOAD',
+    'CLEAR',
+    'DROP',
+    'CREATE',
+    'COPY',
+    'MOVE',
+    'ADD',
+];
+const MUTATING_PATTERN = new RegExp(`\\b(${MUTATING_KEYWORDS.join('|')})\\b`, 'i');
+// Matches the query form keyword after optional PREFIX/BASE preamble
+const READ_ONLY_FORMS = /^\s*(?:(?:PREFIX|BASE)\s+[^\n]*\n\s*)*(SELECT|CONSTRUCT|ASK|DESCRIBE)\b/i;
+/**
+ * Validates that a SPARQL query is read-only.
+ * Returns `{ safe: true }` for SELECT/CONSTRUCT/ASK/DESCRIBE.
+ * Returns `{ safe: false, reason }` for anything that could mutate data.
+ */
+export function validateReadOnlySparql(sparql) {
+    const stripped = stripLiteralsAndComments(sparql);
+    if (!READ_ONLY_FORMS.test(stripped)) {
+        return {
+            safe: false,
+            reason: `Query must start with SELECT, CONSTRUCT, ASK, or DESCRIBE. ` +
+                `Mutations must go through the publish/update protocol.`,
+        };
+    }
+    const match = MUTATING_PATTERN.exec(stripped);
+    if (match) {
+        return {
+            safe: false,
+            reason: `Query contains mutating keyword "${match[1]}". ` +
+                `Use the publish() or update() API to modify data.`,
+        };
+    }
+    return { safe: true };
+}
+//# sourceMappingURL=sparql-guard.js.map

package/dist/sparql-guard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sparql-guard.js","sourceRoot":"","sources":["../src/sparql-guard.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,wBAAwB,EAAE,MAAM,mBAAmB,CAAC;AAE7D,MAAM,iBAAiB,GAAG;IACxB,QAAQ;IACR,QAAQ;IACR,MAAM;IACN,OAAO;IACP,MAAM;IACN,QAAQ;IACR,MAAM;IACN,MAAM;IACN,KAAK;CACG,CAAC;AAEX,MAAM,gBAAgB,GAAG,IAAI,MAAM,CACjC,OAAO,iBAAiB,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,EACxC,GAAG,CACJ,CAAC;AAEF,qEAAqE;AACrE,MAAM,eAAe,GAAG,0EAA0E,CAAC;AAOnG;;;;GAIG;AACH,MAAM,UAAU,sBAAsB,CAAC,MAAc;IACnD,MAAM,QAAQ,GAAG,wBAAwB,CAAC,MAAM,CAAC,CAAC;IAElD,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QACpC,OAAO;YACL,IAAI,EAAE,KAAK;YACX,MAAM,EAAE,6DAA6D;gBACnE,wDAAwD;SAC3D,CAAC;IACJ,CAAC;IAED,MAAM,KAAK,GAAG,gBAAgB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC9C,IAAI,KAAK,EAAE,CAAC;QACV,OAAO;YACL,IAAI,EAAE,KAAK;YACX,MAAM,EAAE,oCAAoC,KAAK,CAAC,CAAC,CAAC,KAAK;gBACvD,mDAAmD;SACtD,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;AACxB,CAAC"}

package/dist/sparql-utils.d.ts

@@ -0,0 +1,12 @@
+/**
+ * Linear-time state-machine that replaces string literals, IRIs, and
+ * line comments with spaces so keyword regexes only see "code" tokens.
+ *
+ * Handles: triple-quoted strings ("""/'''), regular strings ("/'),
+ * IRIs (<...> only when preceded by whitespace/start — not comparison
+ * operators like `< 1`), and line comments (# outside strings/IRIs).
+ *
+ * No regex backtracking — O(n) single pass, immune to ReDoS.
+ */
+export declare function stripLiteralsAndComments(sparql: string): string;
+//# sourceMappingURL=sparql-utils.d.ts.map

package/dist/sparql-utils.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sparql-utils.d.ts","sourceRoot":"","sources":["../src/sparql-utils.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAmE/D"}

package/dist/sparql-utils.js

@@ -0,0 +1,86 @@
+/**
+ * Linear-time state-machine that replaces string literals, IRIs, and
+ * line comments with spaces so keyword regexes only see "code" tokens.
+ *
+ * Handles: triple-quoted strings ("""/'''), regular strings ("/'),
+ * IRIs (<...> only when preceded by whitespace/start — not comparison
+ * operators like `< 1`), and line comments (# outside strings/IRIs).
+ *
+ * No regex backtracking — O(n) single pass, immune to ReDoS.
+ */
+export function stripLiteralsAndComments(sparql) {
+    const out = new Array(sparql.length);
+    let i = 0;
+    const n = sparql.length;
+    while (i < n) {
+        const ch = sparql[i];
+        if ((ch === '"' || ch === "'") &&
+            sparql[i + 1] === ch &&
+            sparql[i + 2] === ch) {
+            const start = i;
+            i += 3;
+            while (i < n) {
+                if (sparql[i] === '\\') {
+                    i += 2;
+                    continue;
+                }
+                if (sparql[i] === ch && sparql[i + 1] === ch && sparql[i + 2] === ch) {
+                    i += 3;
+                    break;
+                }
+                i++;
+            }
+            for (let j = start; j < i && j < n; j++)
+                out[j] = ' ';
+            continue;
+        }
+        if (ch === '"' || ch === "'") {
+            const start = i;
+            i++;
+            while (i < n) {
+                if (sparql[i] === '\\') {
+                    i += 2;
+                    continue;
+                }
+                if (sparql[i] === ch) {
+                    i++;
+                    break;
+                }
+                i++;
+            }
+            for (let j = start; j < i && j < n; j++)
+                out[j] = ' ';
+            continue;
+        }
+        if (ch === '<') {
+            const prev = i > 0 ? sparql[i - 1] : '';
+            const isComparison = prev && (/[a-zA-Z0-9?$_]/.test(prev) || prev === ')' || prev === ']');
+            if (!isComparison) {
+                const next = sparql[i + 1];
+                if (next && (/[a-zA-Z]/.test(next) || next === '#' || next === '/' || next === '.' || next === '_')) {
+                    const start = i;
+                    i++;
+                    while (i < n && sparql[i] !== '>' && sparql[i] !== '\n')
+                        i++;
+                    if (i < n && sparql[i] === '>')
+                        i++;
+                    for (let j = start; j < i; j++)
+                        out[j] = ' ';
+                    continue;
+                }
+            }
+        }
+        if (ch === '#') {
+            const start = i;
+            while (i < n && sparql[i] !== '\n')
+                i++;
+            for (let j = start; j < i; j++)
+                out[j] = ' ';
+            continue;
+        }
+        out[i] = ch;
+        i++;
+    }
+    return out.join('');
+}
+//# sourceMappingURL=sparql-utils.js.map

package/dist/sparql-utils.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sparql-utils.js","sourceRoot":"","sources":["../src/sparql-utils.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,MAAM,UAAU,wBAAwB,CAAC,MAAc;IACrD,MAAM,GAAG,GAAG,IAAI,KAAK,CAAS,MAAM,CAAC,MAAM,CAAC,CAAC;IAC7C,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,MAAM,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC;IAExB,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QACb,MAAM,EAAE,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;QAErB,IACE,CAAC,EAAE,KAAK,GAAG,IAAI,EAAE,KAAK,GAAG,CAAC;YAC1B,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE;YACpB,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EACpB,CAAC;YACD,MAAM,KAAK,GAAG,CAAC,CAAC;YAChB,CAAC,IAAI,CAAC,CAAC;YACP,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;gBACb,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;oBAAC,CAAC,IAAI,CAAC,CAAC;oBAAC,SAAS;gBAAC,CAAC;gBAC7C,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,EAAE,IAAI,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,IAAI,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC;oBACrE,CAAC,IAAI,CAAC,CAAC;oBACP,MAAM;gBACR,CAAC;gBACD,CAAC,EAAE,CAAC;YACN,CAAC;YACD,KAAK,IAAI,CAAC,GAAG,KAAK,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE;gBAAE,GAAG,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC;YACtD,SAAS;QACX,CAAC;QAED,IAAI,EAAE,KAAK,GAAG,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;YAC7B,MAAM,KAAK,GAAG,CAAC,CAAC;YAChB,CAAC,EAAE,CAAC;YACJ,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;gBACb,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;oBAAC,CAAC,IAAI,CAAC,CAAC;oBAAC,SAAS;gBAAC,CAAC;gBAC7C,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC;oBAAC,CAAC,EAAE,CAAC;oBAAC,MAAM;gBAAC,CAAC;gBACrC,CAAC,EAAE,CAAC;YACN,CAAC;YACD,KAAK,IAAI,CAAC,GAAG,KAAK,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE;gBAAE,GAAG,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC;YACtD,SAAS;QACX,CAAC;QAED,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;YACf,MAAM,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACxC,MAAM,YAAY,GAAG,IAAI,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG,CAAC,CAAC;YAC3F,IAAI,CAAC,YAAY,EAAE,CAAC;gBAClB,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;gBAC3B,IAAI,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;oBACpG,MAAM,KAAK,GAAG,CAAC,CAAC;oBAChB,CAAC,EAAE,CAAC;oBACJ,OAAO,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI;wBAAE,CAAC,EAAE,CAAC;oBAC7D,IAAI,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,GAAG;wBAAE,CAAC,EAAE,CAAC;oBACpC,KAAK,IAAI,CAAC,GAAG,KAAK,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE;wBAAE,GAAG,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC;oBAC7C,SAAS;gBACX,CAAC;YACH,CAAC;QACH,CAAC;QAED,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;YACf,MAAM,KAAK,GAAG,CAAC,CAAC;YAChB,OAAO,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI;gBAAE,CAAC,EAAE,CAAC;YACxC,KAAK,IAAI,CAAC,GAAG,KAAK,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE;gBAAE,GAAG,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC;YAC7C,SAAS;QACX,CAAC;QAED,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC;QACZ,CAAC,EAAE,CAAC;IACN,CAAC;IAED,OAAO,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AACtB,CAAC"}

package/package.json

@@ -0,0 +1,35 @@
+{
+  "name": "@origintrail-official/dkg-query",
+  "version": "0.0.1-dev.1773506972.23bf9c0",
+  "type": "module",
+  "main": "dist/index.js",
+  "types": "dist/index.d.ts",
+  "dependencies": {
+    "@origintrail-official/dkg-core": "0.0.1-dev.1773506972.23bf9c0",
+    "@origintrail-official/dkg-storage": "0.0.1-dev.1773506972.23bf9c0"
+  },
+  "devDependencies": {
+    "@vitest/coverage-v8": "^4.0.18",
+    "vitest": "^4.0.18"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "files": [
+    "dist",
+    "README.md",
+    "LICENSE"
+  ],
+  "license": "Apache-2.0",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/OriginTrail/dkg-v9.git",
+    "directory": "packages/query"
+  },
+  "scripts": {
+    "build": "tsc",
+    "test": "vitest run",
+    "test:coverage": "vitest run --coverage",
+    "clean": "rm -rf dist tsconfig.tsbuildinfo"
+  }
+}