@undefineds.co/linx 0.2.12 → 0.2.13

package/dist/lib/profile-identity.js

@@ -1,17 +1,12 @@
-import { getClientCredentialId, getClientCredentialKey, getClientCredentials, loadCredentials, } from './credentials-store.js';
 import { extractProfileUsernameFromWebId } from '@undefineds.co/models/client';
 import { resolveSolidProfileIdentityFromWebIdDocument } from '@undefineds.co/models/profile';
-import { getOidcAccessToken } from './oidc-auth.js';
-import { authenticate } from './solid-auth.js';
+import { getDefaultPodDataSession } from './pod-data-session.js';
 const resourceCache = new Map();
 const defaultResolveProfileIdentity = (session, webId) => {
     return resolveSolidProfileIdentityFromWebIdDocument(session, { webId });
 };
 const defaultRuntime = {
-    loadCredentials,
-    getClientCredentials,
-    getOidcAccessToken,
-    authenticate,
+    getPodDataSession: getDefaultPodDataSession,
     resolveProfileIdentity: defaultResolveProfileIdentity,
     getCachedResource(key) {
         return resourceCache.get(key) ?? null;
@@ -22,11 +17,11 @@ const defaultRuntime = {
 };
 export async function resolveProfileDisplayName(options = {}) {
     const runtime = options.runtime ?? defaultRuntime;
-    const credentials = runtime.loadCredentials();
-    if (!credentials) {
+    const session = await runtime.getPodDataSession();
+    if (!session) {
         return null;
     }
-    return await withTimeout(readProfileDisplayName(credentials, runtime).catch(() => null), options.timeoutMs ?? 5_000);
+    return await withTimeout(readProfileDisplayName(session, runtime).catch(() => null), options.timeoutMs ?? 5_000);
 }
 export function extractUsernameFromWebId(webId) {
     return extractProfileUsernameFromWebId(webId);
@@ -34,70 +29,31 @@ export function extractUsernameFromWebId(webId) {
 export function clearProfileIdentityResourceCache() {
     resourceCache.clear();
 }
-async function readProfileDisplayName(credentials, runtime) {
-    const resource = await getOrCreateProfileResource(credentials, runtime);
+async function readProfileDisplayName(session, runtime) {
+    const resource = await getOrCreateProfileResource(session, runtime);
     return resource.identity?.displayName ?? null;
 }
-async function getOrCreateProfileResource(credentials, runtime) {
-    const cacheKey = buildProfileResourceCacheKey(credentials);
+async function getOrCreateProfileResource(session, runtime) {
+    const cacheKey = buildProfileResourceCacheKey(session);
     const cached = runtime.getCachedResource?.(cacheKey);
     if (cached) {
         return cached;
     }
-    const session = await createProfileSession(credentials, runtime);
     const resolveIdentity = runtime.resolveProfileIdentity ?? defaultResolveProfileIdentity;
     const resource = {
         session,
-        identity: await resolveIdentity(session, credentials.webId),
+        identity: await resolveIdentity(session.solidSession ?? session, session.webId),
     };
     runtime.setCachedResource?.(cacheKey, resource);
     return resource;
 }
-async function createProfileSession(credentials, runtime) {
-    const clientCredentials = runtime.getClientCredentials(credentials);
-    if (clientCredentials) {
-        const { session } = await runtime.authenticate(getClientCredentialId(clientCredentials), getClientCredentialKey(clientCredentials), credentials.url);
-        return session;
-    }
-    if (credentials.authType === 'oidc_oauth') {
-        const accessToken = await runtime.getOidcAccessToken(credentials);
-        if (!accessToken) {
-            throw new Error('Failed to restore OIDC access token for profile lookup');
-        }
-        return createOidcSessionLike(credentials, accessToken);
-    }
-    throw new Error('Unsupported credential type for profile lookup');
-}
-function buildProfileResourceCacheKey(credentials) {
-    const clientCredentials = getClientCredentials(credentials);
-    const secretVersion = clientCredentials
-        ? getClientCredentialId(clientCredentials)
-        : 'oidcRefreshToken' in credentials.secrets
-            ? credentials.secrets.oidcRefreshToken
-            : '';
+function buildProfileResourceCacheKey(session) {
     return [
-        credentials.authType,
-        credentials.url,
-        credentials.webId,
-        secretVersion,
+        session.credentials.authType,
+        session.credentials.url,
+        session.webId,
     ].join('\n');
 }
-function createOidcSessionLike(credentials, accessToken) {
-    const podUrl = credentials.webId.replace('/card#me', '').replace(/\/?$/, '/');
-    return {
-        info: {
-            isLoggedIn: true,
-            webId: credentials.webId,
-            podUrl,
-        },
-        async logout() { },
-        fetch(url, init) {
-            const headers = new Headers(init?.headers);
-            headers.set('Authorization', `Bearer ${accessToken}`);
-            return fetch(url, { ...init, headers });
-        },
-    };
-}
 async function withTimeout(promise, timeoutMs) {
     let timer;
     const timeout = new Promise((resolve) => {

package/dist/lib/profile-identity.js.map

@@ -1 +1 @@
-{"version":3,"file":"profile-identity.js","sourceRoot":"","sources":["../../src/lib/profile-identity.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,qBAAqB,EACrB,sBAAsB,EACtB,oBAAoB,EACpB,eAAe,GAEhB,MAAM,wBAAwB,CAAA;AAC/B,OAAO,EAAE,+BAA+B,EAAE,MAAM,8BAA8B,CAAA;AAC9E,OAAO,EAAE,4CAA4C,EAA6B,MAAM,+BAA+B,CAAA;AACvH,OAAO,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAA;AACnD,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAA;AAiB9C,MAAM,aAAa,GAAG,IAAI,GAAG,EAAmC,CAAA;AAEhE,MAAM,6BAA6B,GAAG,CAAC,OAAgB,EAAE,KAAa,EAAwC,EAAE;IAC9G,OAAO,4CAA4C,CAAC,OAAgB,EAAE,EAAE,KAAK,EAAE,CAAC,CAAA;AAClF,CAAC,CAAA;AAED,MAAM,cAAc,GAA2B;IAC7C,eAAe;IACf,oBAAoB;IACpB,kBAAkB;IAClB,YAAY;IACZ,sBAAsB,EAAE,6BAA6B;IACrD,iBAAiB,CAAC,GAAG;QACnB,OAAO,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,IAAI,CAAA;IACvC,CAAC;IACD,iBAAiB,CAAC,GAAG,EAAE,QAAQ;QAC7B,aAAa,CAAC,GAAG,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAA;IAClC,CAAC;CACF,CAAA;AAED,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAAC,UAG5C,EAAE;IACJ,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,cAAc,CAAA;IACjD,MAAM,WAAW,GAAG,OAAO,CAAC,eAAe,EAAE,CAAA;IAC7C,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,OAAO,IAAI,CAAA;IACb,CAAC;IAED,OAAO,MAAM,WAAW,CACtB,sBAAsB,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,EAC9D,OAAO,CAAC,SAAS,IAAI,KAAK,CAC3B,CAAA;AACH,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,KAAa;IACpD,OAAO,+BAA+B,CAAC,KAAK,CAAC,CAAA;AAC/C,CAAC;AAED,MAAM,UAAU,iCAAiC;IAC/C,aAAa,CAAC,KAAK,EAAE,CAAA;AACvB,CAAC;AAED,KAAK,UAAU,sBAAsB,CACnC,WAA8B,EAC9B,OAA+B;IAE/B,MAAM,QAAQ,GAAG,MAAM,0BAA0B,CAAC,WAAW,EAAE,OAAO,CAAC,CAAA;IACvE,OAAO,QAAQ,CAAC,QAAQ,EAAE,WAAW,IAAI,IAAI,CAAA;AAC/C,CAAC;AAED,KAAK,UAAU,0BAA0B,CACvC,WAA8B,EAC9B,OAA+B;IAE/B,MAAM,QAAQ,GAAG,4BAA4B,CAAC,WAAW,CAAC,CAAA;IAC1D,MAAM,MAAM,GAAG,OAAO,CAAC,iBAAiB,EAAE,CAAC,QAAQ,CAAC,CAAA;IACpD,IAAI,MAAM,EAAE,CAAC;QACX,OAAO,MAAM,CAAA;IACf,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,oBAAoB,CAAC,WAAW,EAAE,OAAO,CAAC,CAAA;IAChE,MAAM,eAAe,GAAG,OAAO,CAAC,sBAAsB,IAAI,6BAA6B,CAAA;IACvF,MAAM,QAAQ,GAAG;QACf,OAAO;QACP,QAAQ,EAAE,MAAM,eAAe,CAAC,OAAO,EAAE,WAAW,CAAC,KAAK,CAAC;KAC5D,CAAA;IACD,OAAO,CAAC,iBAAiB,EAAE,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAA;IAC/C,OAAO,QAAQ,CAAA;AACjB,CAAC;AAED,KAAK,UAAU,oBAAoB,CACjC,WAA8B,EAC9B,OAA+B;IAE/B,MAAM,iBAAiB,GAAG,OAAO,CAAC,oBAAoB,CAAC,WAAW,CAAC,CAAA;IACnE,IAAI,iBAAiB,EAAE,CAAC;QACtB,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,OAAO,CAAC,YAAY,CAC5C,qBAAqB,CAAC,iBAAiB,CAAC,EACxC,sBAAsB,CAAC,iBAAiB,CAAC,EACzC,WAAW,CAAC,GAAG,CAChB,CAAA;QACD,OAAO,OAAO,CAAA;IAChB,CAAC;IAED,IAAI,WAAW,CAAC,QAAQ,KAAK,YAAY,EAAE,CAAC;QAC1C,MAAM,WAAW,GAAG,MAAM,OAAO,CAAC,kBAAkB,CAAC,WAAW,CAAC,CAAA;QACjE,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAA;QAC3E,CAAC;QACD,OAAO,qBAAqB,CAAC,WAAW,EAAE,WAAW,CAAC,CAAA;IACxD,CAAC;IAED,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAA;AACnE,CAAC;AAED,SAAS,4BAA4B,CAAC,WAA8B;IAClE,MAAM,iBAAiB,GAAG,oBAAoB,CAAC,WAAW,CAAC,CAAA;IAC3D,MAAM,aAAa,GAAG,iBAAiB;QACrC,CAAC,CAAC,qBAAqB,CAAC,iBAAiB,CAAC;QAC1C,CAAC,CAAC,kBAAkB,IAAI,WAAW,CAAC,OAAO;YACzC,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC,gBAAgB;YACtC,CAAC,CAAC,EAAE,CAAA;IACR,OAAO;QACL,WAAW,CAAC,QAAQ;QACpB,WAAW,CAAC,GAAG;QACf,WAAW,CAAC,KAAK;QACjB,aAAa;KACd,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;AACd,CAAC;AAED,SAAS,qBAAqB,CAAC,WAA8B,EAAE,WAAmB;IAChF,MAAM,MAAM,GAAG,WAAW,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IAC7E,OAAO;QACL,IAAI,EAAE;YACJ,UAAU,EAAE,IAAI;YAChB,KAAK,EAAE,WAAW,CAAC,KAAK;YACxB,MAAM;SACP;QACD,KAAK,CAAC,MAAM,KAAmB,CAAC;QAChC,KAAK,CAAC,GAAW,EAAE,IAAkB;YACnC,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAA;YAC1C,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,UAAU,WAAW,EAAE,CAAC,CAAA;YACrD,OAAO,KAAK,CAAC,GAAG,EAAE,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,CAAC,CAAA;QACzC,CAAC;KACF,CAAA;AACH,CAAC;AAED,KAAK,UAAU,WAAW,CAAI,OAAmB,EAAE,SAAiB;IAClE,IAAI,KAAgD,CAAA;IACpD,MAAM,OAAO,GAAG,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;QAC5C,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,SAAS,CAAC,CAAA;QAClD,KAAK,CAAC,KAAK,EAAE,EAAE,CAAA;IACjB,CAAC,CAAC,CAAA;IAEF,IAAI,CAAC;QACH,OAAO,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAA;IAC/C,CAAC;YAAS,CAAC;QACT,IAAI,KAAK,EAAE,CAAC;YACV,YAAY,CAAC,KAAK,CAAC,CAAA;QACrB,CAAC;IACH,CAAC;AACH,CAAC"}
+{"version":3,"file":"profile-identity.js","sourceRoot":"","sources":["../../src/lib/profile-identity.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,+BAA+B,EAAE,MAAM,8BAA8B,CAAA;AAC9E,OAAO,EAAE,4CAA4C,EAA6B,MAAM,+BAA+B,CAAA;AACvH,OAAO,EAAE,wBAAwB,EAAuB,MAAM,uBAAuB,CAAA;AAcrF,MAAM,aAAa,GAAG,IAAI,GAAG,EAAmC,CAAA;AAEhE,MAAM,6BAA6B,GAAG,CAAC,OAAgB,EAAE,KAAa,EAAwC,EAAE;IAC9G,OAAO,4CAA4C,CAAC,OAAgB,EAAE,EAAE,KAAK,EAAE,CAAC,CAAA;AAClF,CAAC,CAAA;AAED,MAAM,cAAc,GAA2B;IAC7C,iBAAiB,EAAE,wBAAwB;IAC3C,sBAAsB,EAAE,6BAA6B;IACrD,iBAAiB,CAAC,GAAG;QACnB,OAAO,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,IAAI,CAAA;IACvC,CAAC;IACD,iBAAiB,CAAC,GAAG,EAAE,QAAQ;QAC7B,aAAa,CAAC,GAAG,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAA;IAClC,CAAC;CACF,CAAA;AAED,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAAC,UAG5C,EAAE;IACJ,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,cAAc,CAAA;IACjD,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,iBAAiB,EAAE,CAAA;IACjD,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,IAAI,CAAA;IACb,CAAC;IAED,OAAO,MAAM,WAAW,CACtB,sBAAsB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,EAC1D,OAAO,CAAC,SAAS,IAAI,KAAK,CAC3B,CAAA;AACH,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,KAAa;IACpD,OAAO,+BAA+B,CAAC,KAAK,CAAC,CAAA;AAC/C,CAAC;AAED,MAAM,UAAU,iCAAiC;IAC/C,aAAa,CAAC,KAAK,EAAE,CAAA;AACvB,CAAC;AAED,KAAK,UAAU,sBAAsB,CACnC,OAAuB,EACvB,OAA+B;IAE/B,MAAM,QAAQ,GAAG,MAAM,0BAA0B,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;IACnE,OAAO,QAAQ,CAAC,QAAQ,EAAE,WAAW,IAAI,IAAI,CAAA;AAC/C,CAAC;AAED,KAAK,UAAU,0BAA0B,CACvC,OAAuB,EACvB,OAA+B;IAE/B,MAAM,QAAQ,GAAG,4BAA4B,CAAC,OAAO,CAAC,CAAA;IACtD,MAAM,MAAM,GAAG,OAAO,CAAC,iBAAiB,EAAE,CAAC,QAAQ,CAAC,CAAA;IACpD,IAAI,MAAM,EAAE,CAAC;QACX,OAAO,MAAM,CAAA;IACf,CAAC;IAED,MAAM,eAAe,GAAG,OAAO,CAAC,sBAAsB,IAAI,6BAA6B,CAAA;IACvF,MAAM,QAAQ,GAAG;QACf,OAAO;QACP,QAAQ,EAAE,MAAM,eAAe,CAAC,OAAO,CAAC,YAAY,IAAI,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC;KAChF,CAAA;IACD,OAAO,CAAC,iBAAiB,EAAE,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAA;IAC/C,OAAO,QAAQ,CAAA;AACjB,CAAC;AAED,SAAS,4BAA4B,CAAC,OAAuB;IAC3D,OAAO;QACL,OAAO,CAAC,WAAW,CAAC,QAAQ;QAC5B,OAAO,CAAC,WAAW,CAAC,GAAG;QACvB,OAAO,CAAC,KAAK;KACd,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;AACd,CAAC;AAED,KAAK,UAAU,WAAW,CAAI,OAAmB,EAAE,SAAiB;IAClE,IAAI,KAAgD,CAAA;IACpD,MAAM,OAAO,GAAG,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;QAC5C,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,SAAS,CAAC,CAAA;QAClD,KAAK,CAAC,KAAK,EAAE,EAAE,CAAA;IACjB,CAAC,CAAC,CAAA;IAEF,IAAI,CAAC;QACH,OAAO,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAA;IAC/C,CAAC;YAAS,CAAC;QACT,IAAI,KAAK,EAAE,CAAC;YACV,YAAY,CAAC,KAAK,CAAC,CAAA;QACrB,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/lib/watch/pod-ai.js

@@ -1,4 +1,4 @@
-import { getClientCredentialId, getClientCredentialKey } from '../credentials-store.js';
+import { getDefaultPodDataSession } from '../pod-data-session.js';
 async function dynamicImport(specifier) {
     const loader = new Function('modulePath', 'return import(modulePath)');
     return loader(specifier);
@@ -97,9 +97,6 @@ function buildBackendEnv(match, backend) {
 function missingPodClientCredentialsMessage() {
     return 'LinX cloud credential source is not connected yet. Run `linx login` first.';
 }
-function unsupportedStoredAuthMessage() {
-    return 'LinX watch cloud credential source requires client credentials auth in `~/.linx`.';
-}
 export function podCredentialMissingMessage(backend) {
     if (backend === 'claude') {
         return 'No active Anthropic AI credential was found in LinX cloud credential config. Configure one in `/settings/credentials.ttl` and try again.';
@@ -113,17 +110,13 @@ export function podCredentialMissingMessage(backend) {
     return 'No matching Pod AI credential was found.';
 }
 async function createDefaultRuntime() {
-    const [credentialsStore, solidAuth, models] = await Promise.all([
-        dynamicImport('../credentials-store.js'),
-        dynamicImport('../solid-auth.js'),
+    const [models] = await Promise.all([
         dynamicImport('../models.js'),
     ]);
     return {
-        loadCredentials: credentialsStore.loadCredentials,
-        getClientCredentials: credentialsStore.getClientCredentials,
-        authenticate: solidAuth.authenticate,
-        createDb(session) {
-            return models.drizzle(session, {
+        getPodDataSession: getDefaultPodDataSession,
+        createDb(podSession) {
+            return models.drizzle(podSession.solidSession ?? podSession, {
                 logger: false,
                 disableInteropDiscovery: true,
                 schema: models.solidSchema,
@@ -135,30 +128,20 @@ async function createDefaultRuntime() {
 }
 export async function loadPodBackendCredential(backend, runtime) {
     const activeRuntime = runtime ?? await createDefaultRuntime();
-    const stored = activeRuntime.loadCredentials();
-    if (!stored) {
+    const podSession = await activeRuntime.getPodDataSession();
+    if (!podSession) {
         throw new Error(missingPodClientCredentialsMessage());
     }
-    const clientCredentials = activeRuntime.getClientCredentials(stored);
-    if (!clientCredentials) {
-        throw new Error(unsupportedStoredAuthMessage());
-    }
-    const { session } = await activeRuntime.authenticate(getClientCredentialId(clientCredentials), getClientCredentialKey(clientCredentials), stored.url);
-    try {
-        const db = activeRuntime.createDb(session);
-        const [credentials, providers] = await Promise.all([
-            db.select().from(activeRuntime.credentialTable).execute(),
-            db.select().from(activeRuntime.aiProviderTable).execute(),
-        ]);
-        const match = selectPodCredentialForBackend(backend, credentials, providers);
-        if (!match) {
-            return null;
-        }
-        return buildBackendEnv(match, backend);
-    }
-    finally {
-        await session.logout().catch(() => undefined);
+    const db = activeRuntime.createDb(podSession);
+    const [credentials, providers] = await Promise.all([
+        db.select().from(activeRuntime.credentialTable).execute(),
+        db.select().from(activeRuntime.aiProviderTable).execute(),
+    ]);
+    const match = selectPodCredentialForBackend(backend, credentials, providers);
+    if (!match) {
+        return null;
     }
+    return buildBackendEnv(match, backend);
 }
 export const __podInternal = {
     POD_PROVIDER_IDS,

package/dist/lib/watch/pod-ai.js.map

@@ -1 +1 @@
-{"version":3,"file":"pod-ai.js","sourceRoot":"","sources":["../../../src/lib/watch/pod-ai.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,qBAAqB,EAAE,sBAAsB,EAAE,MAAM,yBAAyB,CAAA;AA0DvF,KAAK,UAAU,aAAa,CAAC,SAAiB;IAC5C,MAAM,MAAM,GAAG,IAAI,QAAQ,CAAC,YAAY,EAAE,2BAA2B,CAAyD,CAAA;IAC9H,OAAO,MAAM,CAAC,SAAS,CAAC,CAAA;AAC1B,CAAC;AAED,MAAM,gBAAgB,GAAwD;IAC5E,MAAM,EAAE,CAAC,WAAW,EAAE,QAAQ,CAAC;IAC/B,KAAK,EAAE,CAAC,QAAQ,EAAE,OAAO,CAAC;IAC1B,SAAS,EAAE,CAAC,WAAW,CAAC;CACzB,CAAA;AAED,SAAS,eAAe,CAAC,KAAc;IACrC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAA;AAC7E,CAAC;AAED,SAAS,WAAW,CAAC,MAA+B,EAAE,GAAW;IAC/D,OAAO,eAAe,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAA;AACrC,CAAC;AAED,SAAS,oBAAoB,CAAC,GAAqB;IACjD,OAAO,eAAe,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,WAAW,EAAE,KAAK,IAAI;WACtD,eAAe,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,KAAK,QAAQ;WACvD,OAAO,GAAG,CAAC,MAAM,KAAK,QAAQ;WAC9B,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAA;AACnC,CAAC;AAED,SAAS,wBAAwB,CAAC,SAAiB,EAAE,WAA8B,EAAE,SAA2B;IAC9G,MAAM,mBAAmB,GAAG,SAAS,CAAC,IAAI,EAAE,CAAA;IAE5C,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;QACjC,MAAM,cAAc,GAAG,QAAmC,CAAA;QAC1D,MAAM,UAAU,GAAG,eAAe,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAA;QAC/C,IAAI,CAAC,UAAU,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;YACrD,SAAQ;QACV,CAAC;QAED,MAAM,eAAe,GAAG,WAAW,CAAC,cAAc,EAAE,KAAK,CAAC,CAAA;QAC1D,IACE,mBAAmB,KAAK,UAAU;eAC/B,mBAAmB,KAAK,eAAe;eACvC,mBAAmB,CAAC,QAAQ,CAAC,IAAI,UAAU,EAAE,CAAC,EACjD,CAAC;YACD,OAAO,UAAU,CAAA;QACnB,CAAC;IACH,CAAC;IAED,KAAK,MAAM,UAAU,IAAI,WAAW,EAAE,CAAC;QACrC,IAAI,mBAAmB,KAAK,UAAU,IAAI,mBAAmB,CAAC,QAAQ,CAAC,IAAI,UAAU,EAAE,CAAC,EAAE,CAAC;YACzF,OAAO,UAAU,CAAA;QACnB,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAA;AACb,CAAC;AAED,SAAS,6BAA6B,CACpC,OAAiC,EACjC,WAA+B,EAC/B,SAA2B;IAE3B,MAAM,WAAW,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAA;IAE7C,KAAK,MAAM,UAAU,IAAI,WAAW,EAAE,CAAC;QACrC,IAAI,CAAC,oBAAoB,CAAC,UAAU,CAAC,EAAE,CAAC;YACtC,SAAQ;QACV,CAAC;QAED,MAAM,iBAAiB,GAAG,eAAe,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAA;QAC9D,IAAI,CAAC,iBAAiB,EAAE,CAAC;YACvB,SAAQ;QACV,CAAC;QAED,MAAM,UAAU,GAAG,wBAAwB,CAAC,iBAAiB,EAAE,WAAW,EAAE,SAAS,CAAC,CAAA;QACtF,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,SAAQ;QACV,CAAC;QAED,MAAM,WAAW,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,eAAe,CAAC,QAAQ,CAAC,EAAE,CAAC,KAAK,UAAU,CAAC,CAAA;QAC7F,MAAM,OAAO,GAAG,eAAe,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,eAAe,CAAC,WAAW,EAAE,OAAO,CAAC,CAAA;QAE5F,OAAO;YACL,UAAU;YACV,MAAM,EAAE,UAAU,CAAC,MAAO,CAAC,IAAI,EAAE;YACjC,OAAO;SACR,CAAA;IACH,CAAC;IAED,OAAO,IAAI,CAAA;AACb,CAAC;AAED,SAAS,eAAe,CAAC,KAAuB,EAAE,OAAiC;IACjF,IAAI,OAAO,KAAK,QAAQ,EAAE,CAAC;QACzB,OAAO;YACL,OAAO;YACP,QAAQ,EAAE,WAAW;YACrB,GAAG,EAAE;gBACH,iBAAiB,EAAE,KAAK,CAAC,MAAM;aAChC;SACF,CAAA;IACH,CAAC;IAED,IAAI,OAAO,KAAK,OAAO,EAAE,CAAC;QACxB,OAAO;YACL,OAAO;YACP,QAAQ,EAAE,QAAQ;YAClB,GAAG,EAAE;gBACH,cAAc,EAAE,KAAK,CAAC,MAAM;aAC7B;SACF,CAAA;IACH,CAAC;IAED,OAAO;QACL,OAAO;QACP,QAAQ,EAAE,WAAW;QACrB,GAAG,EAAE;YACH,iBAAiB,EAAE,KAAK,CAAC,MAAM;YAC/B,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,kBAAkB,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAChE;KACF,CAAA;AACH,CAAC;AAED,SAAS,kCAAkC;IACzC,OAAO,4EAA4E,CAAA;AACrF,CAAC;AAED,SAAS,4BAA4B;IACnC,OAAO,mFAAmF,CAAA;AAC5F,CAAC;AAED,MAAM,UAAU,2BAA2B,CAAC,OAAiC;IAC3E,IAAI,OAAO,KAAK,QAAQ,EAAE,CAAC;QACzB,OAAO,0IAA0I,CAAA;IACnJ,CAAC;IAED,IAAI,OAAO,KAAK,OAAO,EAAE,CAAC;QACxB,OAAO,0IAA0I,CAAA;IACnJ,CAAC;IAED,IAAI,OAAO,KAAK,WAAW,EAAE,CAAC;QAC5B,OAAO,uIAAuI,CAAA;IAChJ,CAAC;IAED,OAAO,0CAA0C,CAAA;AACnD,CAAC;AAED,KAAK,UAAU,oBAAoB;IACjC,MAAM,CAAC,gBAAgB,EAAE,SAAS,EAAE,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QAC9D,aAAa,CAAC,yBAAyB,CAAC;QACxC,aAAa,CAAC,kBAAkB,CAAC;QACjC,aAAa,CAAC,cAAc,CAAC;KAC9B,CAAC,CAAA;IAEF,OAAO;QACL,eAAe,EAAE,gBAAgB,CAAC,eAAe;QACjD,oBAAoB,EAAE,gBAAgB,CAAC,oBAAoB;QAC3D,YAAY,EAAE,SAAS,CAAC,YAAY;QACpC,QAAQ,CAAC,OAAO;YACd,OAAO,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE;gBAC7B,MAAM,EAAE,KAAK;gBACb,uBAAuB,EAAE,IAAI;gBAC7B,MAAM,EAAE,MAAM,CAAC,WAAW;aAC3B,CAA0B,CAAA;QAC7B,CAAC;QACD,eAAe,EAAE,MAAM,CAAC,eAAe;QACvC,eAAe,EAAE,MAAM,CAAC,eAAe;KACxC,CAAA;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,OAAqB,EACrB,OAAsB;IAEtB,MAAM,aAAa,GAAG,OAAO,IAAI,MAAM,oBAAoB,EAAE,CAAA;IAC7D,MAAM,MAAM,GAAG,aAAa,CAAC,eAAe,EAAE,CAAA;IAC9C,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CAAC,kCAAkC,EAAE,CAAC,CAAA;IACvD,CAAC;IAED,MAAM,iBAAiB,GAAG,aAAa,CAAC,oBAAoB,CAAC,MAAM,CAAC,CAAA;IACpE,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CAAC,4BAA4B,EAAE,CAAC,CAAA;IACjD,CAAC;IAED,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,aAAa,CAAC,YAAY,CAAC,qBAAqB,CAAC,iBAAiB,CAAC,EAAE,sBAAsB,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAC,GAAG,CAAC,CAAA;IAErJ,IAAI,CAAC;QACH,MAAM,EAAE,GAAG,aAAa,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAA;QAC1C,MAAM,CAAC,WAAW,EAAE,SAAS,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YACjD,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,eAAe,CAAC,CAAC,OAAO,EAAiC;YACxF,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,eAAe,CAAC,CAAC,OAAO,EAA+B;SACvF,CAAC,CAAA;QAEF,MAAM,KAAK,GAAG,6BAA6B,CAAC,OAAO,EAAE,WAAW,EAAE,SAAS,CAAC,CAAA;QAC5E,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,IAAI,CAAA;QACb,CAAC;QAED,OAAO,eAAe,CAAC,KAAK,EAAE,OAAO,CAAC,CAAA;IACxC,CAAC;YAAS,CAAC;QACT,MAAM,OAAO,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;IAC/C,CAAC;AACH,CAAC;AAED,MAAM,CAAC,MAAM,aAAa,GAAG;IAC3B,gBAAgB;IAChB,oBAAoB;IACpB,wBAAwB;IACxB,6BAA6B;CAC9B,CAAA"}
+{"version":3,"file":"pod-ai.js","sourceRoot":"","sources":["../../../src/lib/watch/pod-ai.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,wBAAwB,EAAuB,MAAM,wBAAwB,CAAA;AA8CtF,KAAK,UAAU,aAAa,CAAC,SAAiB;IAC5C,MAAM,MAAM,GAAG,IAAI,QAAQ,CAAC,YAAY,EAAE,2BAA2B,CAAyD,CAAA;IAC9H,OAAO,MAAM,CAAC,SAAS,CAAC,CAAA;AAC1B,CAAC;AAED,MAAM,gBAAgB,GAAwD;IAC5E,MAAM,EAAE,CAAC,WAAW,EAAE,QAAQ,CAAC;IAC/B,KAAK,EAAE,CAAC,QAAQ,EAAE,OAAO,CAAC;IAC1B,SAAS,EAAE,CAAC,WAAW,CAAC;CACzB,CAAA;AAED,SAAS,eAAe,CAAC,KAAc;IACrC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAA;AAC7E,CAAC;AAED,SAAS,WAAW,CAAC,MAA+B,EAAE,GAAW;IAC/D,OAAO,eAAe,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAA;AACrC,CAAC;AAED,SAAS,oBAAoB,CAAC,GAAqB;IACjD,OAAO,eAAe,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,WAAW,EAAE,KAAK,IAAI;WACtD,eAAe,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,KAAK,QAAQ;WACvD,OAAO,GAAG,CAAC,MAAM,KAAK,QAAQ;WAC9B,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAA;AACnC,CAAC;AAED,SAAS,wBAAwB,CAAC,SAAiB,EAAE,WAA8B,EAAE,SAA2B;IAC9G,MAAM,mBAAmB,GAAG,SAAS,CAAC,IAAI,EAAE,CAAA;IAE5C,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;QACjC,MAAM,cAAc,GAAG,QAAmC,CAAA;QAC1D,MAAM,UAAU,GAAG,eAAe,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAA;QAC/C,IAAI,CAAC,UAAU,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;YACrD,SAAQ;QACV,CAAC;QAED,MAAM,eAAe,GAAG,WAAW,CAAC,cAAc,EAAE,KAAK,CAAC,CAAA;QAC1D,IACE,mBAAmB,KAAK,UAAU;eAC/B,mBAAmB,KAAK,eAAe;eACvC,mBAAmB,CAAC,QAAQ,CAAC,IAAI,UAAU,EAAE,CAAC,EACjD,CAAC;YACD,OAAO,UAAU,CAAA;QACnB,CAAC;IACH,CAAC;IAED,KAAK,MAAM,UAAU,IAAI,WAAW,EAAE,CAAC;QACrC,IAAI,mBAAmB,KAAK,UAAU,IAAI,mBAAmB,CAAC,QAAQ,CAAC,IAAI,UAAU,EAAE,CAAC,EAAE,CAAC;YACzF,OAAO,UAAU,CAAA;QACnB,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAA;AACb,CAAC;AAED,SAAS,6BAA6B,CACpC,OAAiC,EACjC,WAA+B,EAC/B,SAA2B;IAE3B,MAAM,WAAW,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAA;IAE7C,KAAK,MAAM,UAAU,IAAI,WAAW,EAAE,CAAC;QACrC,IAAI,CAAC,oBAAoB,CAAC,UAAU,CAAC,EAAE,CAAC;YACtC,SAAQ;QACV,CAAC;QAED,MAAM,iBAAiB,GAAG,eAAe,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAA;QAC9D,IAAI,CAAC,iBAAiB,EAAE,CAAC;YACvB,SAAQ;QACV,CAAC;QAED,MAAM,UAAU,GAAG,wBAAwB,CAAC,iBAAiB,EAAE,WAAW,EAAE,SAAS,CAAC,CAAA;QACtF,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,SAAQ;QACV,CAAC;QAED,MAAM,WAAW,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,eAAe,CAAC,QAAQ,CAAC,EAAE,CAAC,KAAK,UAAU,CAAC,CAAA;QAC7F,MAAM,OAAO,GAAG,eAAe,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,eAAe,CAAC,WAAW,EAAE,OAAO,CAAC,CAAA;QAE5F,OAAO;YACL,UAAU;YACV,MAAM,EAAE,UAAU,CAAC,MAAO,CAAC,IAAI,EAAE;YACjC,OAAO;SACR,CAAA;IACH,CAAC;IAED,OAAO,IAAI,CAAA;AACb,CAAC;AAED,SAAS,eAAe,CAAC,KAAuB,EAAE,OAAiC;IACjF,IAAI,OAAO,KAAK,QAAQ,EAAE,CAAC;QACzB,OAAO;YACL,OAAO;YACP,QAAQ,EAAE,WAAW;YACrB,GAAG,EAAE;gBACH,iBAAiB,EAAE,KAAK,CAAC,MAAM;aAChC;SACF,CAAA;IACH,CAAC;IAED,IAAI,OAAO,KAAK,OAAO,EAAE,CAAC;QACxB,OAAO;YACL,OAAO;YACP,QAAQ,EAAE,QAAQ;YAClB,GAAG,EAAE;gBACH,cAAc,EAAE,KAAK,CAAC,MAAM;aAC7B;SACF,CAAA;IACH,CAAC;IAED,OAAO;QACL,OAAO;QACP,QAAQ,EAAE,WAAW;QACrB,GAAG,EAAE;YACH,iBAAiB,EAAE,KAAK,CAAC,MAAM;YAC/B,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,kBAAkB,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAChE;KACF,CAAA;AACH,CAAC;AAED,SAAS,kCAAkC;IACzC,OAAO,4EAA4E,CAAA;AACrF,CAAC;AAED,MAAM,UAAU,2BAA2B,CAAC,OAAiC;IAC3E,IAAI,OAAO,KAAK,QAAQ,EAAE,CAAC;QACzB,OAAO,0IAA0I,CAAA;IACnJ,CAAC;IAED,IAAI,OAAO,KAAK,OAAO,EAAE,CAAC;QACxB,OAAO,0IAA0I,CAAA;IACnJ,CAAC;IAED,IAAI,OAAO,KAAK,WAAW,EAAE,CAAC;QAC5B,OAAO,uIAAuI,CAAA;IAChJ,CAAC;IAED,OAAO,0CAA0C,CAAA;AACnD,CAAC;AAED,KAAK,UAAU,oBAAoB;IACjC,MAAM,CAAC,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QACjC,aAAa,CAAC,cAAc,CAAC;KAC9B,CAAC,CAAA;IAEF,OAAO;QACL,iBAAiB,EAAE,wBAAwB;QAC3C,QAAQ,CAAC,UAAU;YACjB,OAAO,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,YAAY,IAAI,UAAU,EAAE;gBAC3D,MAAM,EAAE,KAAK;gBACb,uBAAuB,EAAE,IAAI;gBAC7B,MAAM,EAAE,MAAM,CAAC,WAAW;aAC3B,CAA0B,CAAA;QAC7B,CAAC;QACD,eAAe,EAAE,MAAM,CAAC,eAAe;QACvC,eAAe,EAAE,MAAM,CAAC,eAAe;KACxC,CAAA;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,OAAqB,EACrB,OAAsB;IAEtB,MAAM,aAAa,GAAG,OAAO,IAAI,MAAM,oBAAoB,EAAE,CAAA;IAC7D,MAAM,UAAU,GAAG,MAAM,aAAa,CAAC,iBAAiB,EAAE,CAAA;IAC1D,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,MAAM,IAAI,KAAK,CAAC,kCAAkC,EAAE,CAAC,CAAA;IACvD,CAAC;IAED,MAAM,EAAE,GAAG,aAAa,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAA;IAC7C,MAAM,CAAC,WAAW,EAAE,SAAS,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QACjD,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,eAAe,CAAC,CAAC,OAAO,EAAiC;QACxF,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,eAAe,CAAC,CAAC,OAAO,EAA+B;KACvF,CAAC,CAAA;IAEF,MAAM,KAAK,GAAG,6BAA6B,CAAC,OAAO,EAAE,WAAW,EAAE,SAAS,CAAC,CAAA;IAC5E,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,IAAI,CAAA;IACb,CAAC;IAED,OAAO,eAAe,CAAC,KAAK,EAAE,OAAO,CAAC,CAAA;AACxC,CAAC;AAED,MAAM,CAAC,MAAM,aAAa,GAAG;IAC3B,gBAAgB;IAChB,oBAAoB;IACpB,wBAAwB;IACxB,6BAA6B;CAC9B,CAAA"}

package/dist/lib/watch/pod-approval.js

@@ -1,19 +1,16 @@
 import { setTimeout as delay } from 'node:timers/promises';
-import { getClientCredentialId, getClientCredentialKey } from '../credentials-store.js';
-import { AS_ACTOR, AS_ANNOUNCE, AS_OBJECT, DCT_CREATED, ODRL_ACTION, ODRL_POLICY, ODRL_TARGET, RDF_TYPE, UDFS_ACTION, UDFS_ACTOR, UDFS_ACTOR_ROLE, UDFS_APPROVAL_REQUEST, UDFS_ASSIGNED_TO, UDFS_AUDIT_ENTRY, UDFS_AUTONOMY_GRANT, UDFS_CONTEXT, UDFS_DECISION_BY, UDFS_DECISION_ROLE, UDFS_EFFECT, UDFS_ON_BEHALF_OF, UDFS_POLICY_VERSION, UDFS_REASON, UDFS_RESOLVED_AT, UDFS_REVOKED_AT, UDFS_RISK, UDFS_RISK_CEILING, UDFS_SESSION, UDFS_STATUS, UDFS_TOOL_CALL_ID, UDFS_TOOL_NAME, buildApprovalResourceUrl, buildAuditResourceUrl, buildGrantResourceUrl, buildInboxResourceUrl, firstIri, firstLiteral, iri, listTurtleResources, literal, parseManagedTurtleBlocks, readTurtleResource, subjectIdFromResourceUrl, upsertManagedTurtleBlock, } from '../pi-adapter/pod-native.js';
+import { getDefaultPodDataSession } from '../pod-data-session.js';
+import { AS_ACTOR, AS_ANNOUNCE, AS_OBJECT, buildApprovalDocumentUrl, DCT_CREATED, ODRL_ACTION, ODRL_POLICY, ODRL_TARGET, RDF_TYPE, UDFS_ACTION, UDFS_ACTOR, UDFS_ACTOR_ROLE, UDFS_APPROVAL_REQUEST, UDFS_ASSIGNED_TO, UDFS_AUDIT_ENTRY, UDFS_AUTONOMY_GRANT, UDFS_CONTEXT, UDFS_DECISION_BY, UDFS_DECISION_ROLE, UDFS_EFFECT, UDFS_ON_BEHALF_OF, UDFS_POLICY_VERSION, UDFS_REASON, UDFS_RESOLVED_AT, UDFS_REVOKED_AT, UDFS_RISK, UDFS_RISK_CEILING, UDFS_SESSION, UDFS_STATUS, UDFS_TOOL_CALL_ID, UDFS_TOOL_NAME, buildApprovalResourceUrl, buildAuditDocumentUrl, buildAuditResourceUrl, buildGrantResourceUrl, buildInboxResourceUrl, firstIri, firstLiteral, iri, listTurtleResources, listTurtleResourcesRecursive, literal, parseManagedTurtleBlocks, readTurtleResource, subjectIdFromResourceUrl, upsertManagedTurtleBlock, } from '../pi-adapter/pod-native.js';
 const WATCH_CHAT_ID = 'linx-watch';
 const WATCH_AGENT_ID = 'linx-watch-assistant';
 const REMOTE_APPROVAL_POLICY_VERSION = 'linx-watch-remote-approval/v1';
 const DEFAULT_REMOTE_APPROVAL_POLL_MS = 1000;
+const remoteApprovalClientCache = new WeakMap();
 function createAbortError() {
     const error = new Error('The operation was aborted.');
     error.name = 'AbortError';
     return error;
 }
-async function dynamicImport(specifier) {
-    const loader = new Function('modulePath', 'return import(modulePath)');
-    return loader(specifier);
-}
 function normalizeString(value) {
     return typeof value === 'string' && value.trim() ? value.trim() : undefined;
 }
@@ -43,10 +40,16 @@ function buildThreadUri(webId, threadId) {
     return `${getPodBaseUrl(webId)}/.data/chat/${WATCH_CHAT_ID}/index.ttl#${threadId}`;
 }
 function buildApprovalUri(webIdOrUri, approvalId) {
-    return `${getPodBaseUrl(webIdOrUri)}/.data/approvals/${approvalId}.ttl`;
+    return buildApprovalResourceUrl(webIdOrUri, approvalId);
+}
+function buildApprovalUriForDate(webIdOrUri, approvalId, createdAt) {
+    return buildApprovalResourceUrl(webIdOrUri, approvalId, createdAt);
 }
 function buildGrantUri(webIdOrUri, grantId) {
-    return `${getPodBaseUrl(webIdOrUri)}/settings/autonomy/grants/${grantId}.ttl`;
+    return buildGrantResourceUrl(webIdOrUri, grantId);
+}
+function buildGrantDocumentUrl(webIdOrUri) {
+    return `${getPodBaseUrl(webIdOrUri)}/settings/autonomy/grants.ttl`;
 }
 function buildAgentUri(webId) {
     return `${getPodBaseUrl(webId)}/.data/agents/${WATCH_AGENT_ID}.ttl`;
@@ -203,16 +206,22 @@ function decisionFromApprovalRow(row) {
     }
     return 'accept';
 }
-function requestAuditForApproval(approvalUri, audits) {
-    const matches = audits.filter((audit) => audit.approval === approvalUri && audit.action === 'approval_requested');
+function requestAuditForApproval(row, approvalUris, audits) {
+    const uriSet = new Set(approvalUris);
+    const matches = audits.filter((audit) => (audit.action === 'approval_requested'
+        && ((audit.approval && uriSet.has(audit.approval))
+            || (audit.session === row.session && audit.toolCallId === row.toolCallId))));
     matches.sort((left, right) => toIsoString(right.createdAt, '').localeCompare(toIsoString(left.createdAt, '')));
     return matches[0];
 }
 function normalizeApprovalSummary(row, audits) {
-    const approvalUri = buildApprovalUri(row.session, row.id);
-    const requestAudit = requestAuditForApproval(approvalUri, audits);
-    const requestContext = parseRequestAuditContext(requestAudit?.context);
     const createdAt = toIsoString(row.createdAt, new Date(0).toISOString());
+    const approvalUris = [
+        buildApprovalUriForDate(row.session, row.id, new Date(createdAt)),
+        buildApprovalUri(row.session, row.id),
+    ];
+    const requestAudit = requestAuditForApproval(row, approvalUris, audits);
+    const requestContext = parseRequestAuditContext(requestAudit?.context);
     const sessionUri = row.session;
     const decision = decisionFromApprovalRow(row);
     return {
@@ -251,37 +260,11 @@ export function isRemoteApprovalAbortError(error) {
 function missingRemoteApprovalCredentialsMessage() {
     return 'LinX remote approval requires `linx login` first.';
 }
-function unsupportedRemoteApprovalAuthMessage() {
-    return 'LinX remote approval requires a valid LinX login in `~/.linx`.';
-}
 async function createDefaultRuntime() {
-    const [credentialsStore, solidAuth, oidcAuth] = await Promise.all([
-        dynamicImport(new URL('../credentials-store.js', import.meta.url).href),
-        dynamicImport(new URL('../solid-auth.js', import.meta.url).href),
-        dynamicImport(new URL('../oidc-auth.js', import.meta.url).href),
-    ]);
     return {
-        loadCredentials: credentialsStore.loadCredentials,
-        getClientCredentials: credentialsStore.getClientCredentials,
-        getOidcAccessToken: oidcAuth.getOidcAccessToken,
-        authenticate: solidAuth.authenticate,
-        authenticatedFetch(url, token, init) {
-            const headers = new Headers(init?.headers);
-            headers.set('Authorization', `Bearer ${token}`);
-            return fetch(url, { ...init, headers });
-        },
-        createStore(sessionOrWebId, fetcher) {
-            const webId = typeof sessionOrWebId === 'string' ? sessionOrWebId : sessionOrWebId.info.webId;
-            if (!webId) {
-                throw new Error('Remote approval authentication succeeded without a WebID.');
-            }
-            const activeFetcher = fetcher ?? (typeof sessionOrWebId === 'string'
-                ? undefined
-                : ((url, init) => sessionOrWebId.fetch(url, init)));
-            if (!activeFetcher) {
-                throw new Error('Remote approval authentication succeeded without a Pod fetcher.');
-            }
-            return createNativeRemoteApprovalStore(webId, activeFetcher);
+        getPodDataSession: getDefaultPodDataSession,
+        createStore(webId, fetcher) {
+            return createNativeRemoteApprovalStore(webId, fetcher);
         },
         sleep(ms) {
             return delay(ms);
@@ -292,39 +275,43 @@ async function createDefaultRuntime() {
     };
 }
 async function withRemoteApprovalStore(runtime, fn) {
-    const stored = runtime.loadCredentials();
-    if (!stored) {
+    const client = await getRemoteApprovalClient(runtime);
+    if (!client) {
         throw new Error(missingRemoteApprovalCredentialsMessage());
     }
-    const clientCredentials = runtime.getClientCredentials(stored);
-    if (clientCredentials) {
-        const { session } = await runtime.authenticate(getClientCredentialId(clientCredentials), getClientCredentialKey(clientCredentials), stored.url);
-        const webId = session.info.webId ?? stored.webId;
-        if (!webId) {
-            await session.logout().catch(() => undefined);
-            throw new Error('Remote approval authentication succeeded without a WebID.');
-        }
-        try {
-            return await fn({
-                store: runtime.createStore(session),
-                webId,
-                stored,
-            });
-        }
-        finally {
-            await session.logout().catch(() => undefined);
-        }
-    }
-    const accessToken = await runtime.getOidcAccessToken?.(stored);
-    if (accessToken && stored.webId && runtime.authenticatedFetch) {
-        const fetcher = (url, init) => runtime.authenticatedFetch(url, accessToken, init);
-        return await fn({
-            store: runtime.createStore(stored.webId, fetcher),
-            webId: stored.webId,
-            stored,
+    return await fn({
+        store: client.store,
+        webId: client.session.webId,
+        stored: client.session.credentials,
+    });
+}
+async function getRemoteApprovalClient(runtime) {
+    let promise = remoteApprovalClientCache.get(runtime);
+    if (!promise) {
+        promise = createRemoteApprovalClient(runtime)
+            .then((client) => {
+            if (!client) {
+                remoteApprovalClientCache.delete(runtime);
+            }
+            return client;
+        })
+            .catch((error) => {
+            remoteApprovalClientCache.delete(runtime);
+            throw error;
         });
+        remoteApprovalClientCache.set(runtime, promise);
     }
-    throw new Error(unsupportedRemoteApprovalAuthMessage());
+    return promise;
+}
+async function createRemoteApprovalClient(runtime) {
+    const session = await runtime.getPodDataSession();
+    if (!session) {
+        return null;
+    }
+    return {
+        session,
+        store: runtime.createStore(session.webId, session.fetch),
+    };
 }
 function createNativeRemoteApprovalStore(webId, fetcher) {
     return {
@@ -345,25 +332,30 @@ function createNativeRemoteApprovalStore(webId, fetcher) {
     };
 }
 async function listApprovalRows(webId, fetcher) {
-    const urls = await listTurtleResources(fetcher, `${getPodBaseUrl(webId)}/.data/approvals/`);
+    const [currentUrls, legacyUrls] = await Promise.all([
+        listTurtleResourcesRecursive(fetcher, `${getPodBaseUrl(webId)}/.data/approvals/`).catch(() => []),
+        listTurtleResources(fetcher, `${getPodBaseUrl(webId)}/.data/approvals/`).catch(() => []),
+    ]);
+    const urls = [...new Set([...currentUrls, ...legacyUrls])];
     const rows = [];
     for (const url of urls.filter((entry) => entry.endsWith('.ttl'))) {
         const turtle = await readTurtleResource(fetcher, url).catch(() => null);
         if (!turtle)
             continue;
-        const predicates = parseManagedTurtleBlocks(turtle, url).get(url);
-        if (!predicates)
-            continue;
-        const row = approvalRowFromPredicates(url, predicates);
-        if (row)
-            rows.push(row);
+        for (const [subject, predicates] of parseManagedTurtleBlocks(turtle, url)) {
+            const row = approvalRowFromPredicates(subject, predicates);
+            if (row)
+                rows.push(row);
+        }
     }
     return rows;
 }
 async function writeApprovalRow(webId, fetcher, row) {
-    const url = buildApprovalResourceUrl(webId, row.id);
-    await upsertManagedTurtleBlock(fetcher, url, {
-        subject: url,
+    const createdAt = new Date(toIsoString(row.createdAt, new Date().toISOString()));
+    const documentUrl = buildApprovalDocumentUrl(webId, createdAt);
+    const subjectUrl = buildApprovalResourceUrl(webId, row.id, createdAt);
+    await upsertManagedTurtleBlock(fetcher, documentUrl, {
+        subject: subjectUrl,
         triples: [
             { predicate: RDF_TYPE, object: iri(UDFS_APPROVAL_REQUEST) },
             { predicate: UDFS_SESSION, object: iri(row.session) },
@@ -385,25 +377,26 @@ async function writeApprovalRow(webId, fetcher, row) {
     });
 }
 async function listAuditRows(webId, fetcher) {
-    const urls = await listTurtleResources(fetcher, `${getPodBaseUrl(webId)}/.data/audit/`);
+    const urls = await listTurtleResourcesRecursive(fetcher, `${getPodBaseUrl(webId)}/.data/audits/`);
     const rows = [];
     for (const url of urls.filter((entry) => entry.endsWith('.ttl'))) {
         const turtle = await readTurtleResource(fetcher, url).catch(() => null);
         if (!turtle)
             continue;
-        const predicates = parseManagedTurtleBlocks(turtle, url).get(url);
-        if (!predicates)
-            continue;
-        const row = auditRowFromPredicates(url, predicates);
-        if (row)
-            rows.push(row);
+        for (const [subject, predicates] of parseManagedTurtleBlocks(turtle, url)) {
+            const row = auditRowFromPredicates(subject, predicates);
+            if (row)
+                rows.push(row);
+        }
     }
     return rows;
 }
 async function writeAuditRow(webId, fetcher, row) {
-    const url = buildAuditResourceUrl(webId, row.id);
-    await upsertManagedTurtleBlock(fetcher, url, {
-        subject: url,
+    const createdAt = new Date(toIsoString(row.createdAt, new Date().toISOString()));
+    const documentUrl = buildAuditDocumentUrl(webId, createdAt);
+    const subjectUrl = buildAuditResourceUrl(webId, row.id, createdAt);
+    await upsertManagedTurtleBlock(fetcher, documentUrl, {
+        subject: subjectUrl,
         triples: [
             { predicate: RDF_TYPE, object: iri(UDFS_AUDIT_ENTRY) },
             { predicate: UDFS_ACTION, object: literal(row.action) },
@@ -420,24 +413,27 @@ async function writeAuditRow(webId, fetcher, row) {
     });
 }
 async function listGrantRows(webId, fetcher) {
-    const urls = await listTurtleResources(fetcher, `${getPodBaseUrl(webId)}/settings/autonomy/grants/`);
+    const urls = [
+        `${getPodBaseUrl(webId)}/settings/autonomy/grants.ttl`,
+        ...await listTurtleResources(fetcher, `${getPodBaseUrl(webId)}/settings/autonomy/grants/`).catch(() => []),
+    ];
     const rows = [];
     for (const url of urls.filter((entry) => entry.endsWith('.ttl'))) {
         const turtle = await readTurtleResource(fetcher, url).catch(() => null);
         if (!turtle)
             continue;
-        const predicates = parseManagedTurtleBlocks(turtle, url).get(url);
-        if (!predicates)
-            continue;
-        const row = grantRowFromPredicates(url, predicates);
-        if (row)
-            rows.push(row);
+        for (const [subject, predicates] of parseManagedTurtleBlocks(turtle, url)) {
+            const row = grantRowFromPredicates(subject, predicates);
+            if (row)
+                rows.push(row);
+        }
     }
     return rows;
 }
 async function writeGrantRow(webId, fetcher, row) {
     const id = normalizeString(row.id) ?? crypto.randomUUID();
-    const url = buildGrantResourceUrl(webId, id);
+    const documentUrl = buildGrantDocumentUrl(webId);
+    const subjectUrl = buildGrantResourceUrl(webId, id);
     const target = normalizeString(row.target);
     const action = normalizeString(row.action);
     const effect = normalizeString(row.effect);
@@ -446,8 +442,8 @@ async function writeGrantRow(webId, fetcher, row) {
     if (!target || !action || !effect || !decisionBy || !decisionRole) {
         throw new Error(`Invalid remote approval grant row: ${id}`);
     }
-    await upsertManagedTurtleBlock(fetcher, url, {
-        subject: url,
+    await upsertManagedTurtleBlock(fetcher, documentUrl, {
+        subject: subjectUrl,
         triples: [
             { predicate: RDF_TYPE, object: iri(ODRL_POLICY) },
             { predicate: RDF_TYPE, object: iri(UDFS_AUTONOMY_GRANT) },
@@ -585,7 +581,7 @@ export async function createRemoteApproval(options) {
         const approvalId = crypto.randomUUID();
         const now = activeRuntime.now();
         const sessionUri = subject.sessionUri;
-        const approvalUri = buildApprovalUri(webId, approvalId);
+        const approvalUri = buildApprovalUriForDate(webId, approvalId, now);
         const targetUri = subject.targetUri ?? sessionUri;
         const assignedTo = subject.assignedTo ?? webId;
         const onBehalfOf = subject.onBehalfOf ?? webId;
@@ -765,7 +761,8 @@ export async function resolveRemoteWatchApproval(options) {
             return normalizeApprovalSummary(row, audits);
         }
         const now = activeRuntime.now();
-        const approvalUri = buildApprovalUri(row.session, row.id);
+        const approvalCreatedAt = new Date(toIsoString(row.createdAt, now.toISOString()));
+        const approvalUri = buildApprovalUriForDate(row.session, row.id, approvalCreatedAt);
         const nextStatus = options.decision === 'accept' || options.decision === 'accept_for_session'
             ? 'approved'
             : 'rejected';