@undefineds.co/linx 0.3.26 → 0.3.28

package/dist/lib/auto-mode/pod-ai.js

@@ -1,15 +1,5 @@
 import { getDefaultPodDataSession } from '../pod-data-session.js';
-import { aiConfigRepository, selectAIConfigCredentialForBackend, } from '../models.js';
-function selectPodCredentialForBackend(backend, credentials, providers) {
-    const selected = selectAIConfigCredentialForBackend(backend, credentials, providers);
-    if (!selected)
-        return null;
-    return {
-        providerId: selected.providerId,
-        apiKey: selected.apiKey,
-        baseUrl: selected.baseUrl,
-    };
-}
+import { aiConfigRepository, } from '../models.js';
 function buildBackendEnv(match, backend) {
     if (backend === 'claude') {
         return {
@@ -100,7 +90,4 @@ export async function loadPodBackendCredential(backend, runtime) {
     await aiConfigRepository.markCredentialUsed(rows.db, rows.match);
     return buildBackendEnv(rows.match, backend);
 }
-export const __podInternal = {
-    selectPodCredentialForBackend,
-};
 //# sourceMappingURL=pod-ai.js.map

package/dist/lib/auto-mode/pod-ai.js.map

@@ -1 +1 @@
-{"version":3,"file":"pod-ai.js","sourceRoot":"","sources":["../../../src/lib/auto-mode/pod-ai.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,wBAAwB,EAAuB,MAAM,wBAAwB,CAAA;AACtF,OAAO,EACL,kBAAkB,EAClB,kCAAkC,GAGnC,MAAM,cAAc,CAAA;AAqBrB,SAAS,6BAA6B,CACpC,OAAoC,EACpC,WAA2C,EAC3C,SAAyC;IAEzC,MAAM,QAAQ,GAAG,kCAAkC,CAAC,OAAO,EAAE,WAAW,EAAE,SAAS,CAAC,CAAA;IACpF,IAAI,CAAC,QAAQ;QAAE,OAAO,IAAI,CAAA;IAC1B,OAAO;QACL,UAAU,EAAE,QAAQ,CAAC,UAAU;QAC/B,MAAM,EAAE,QAAQ,CAAC,MAAM;QACvB,OAAO,EAAE,QAAQ,CAAC,OAAO;KAC1B,CAAA;AACH,CAAC;AAED,SAAS,eAAe,CACtB,KAAyC,EACzC,OAAoC;IAEpC,IAAI,OAAO,KAAK,QAAQ,EAAE,CAAC;QACzB,OAAO;YACL,OAAO;YACP,QAAQ,EAAE,KAAK,CAAC,UAAU;YAC1B,GAAG,EAAE;gBACH,iBAAiB,EAAE,KAAK,CAAC,MAAM;gBAC/B,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,kBAAkB,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAChE;SACF,CAAA;IACH,CAAC;IAED,IAAI,OAAO,KAAK,OAAO,EAAE,CAAC;QACxB,OAAO;YACL,OAAO;YACP,QAAQ,EAAE,KAAK,CAAC,UAAU;YAC1B,GAAG,EAAE;gBACH,aAAa,EAAE,KAAK,CAAC,MAAM;gBAC3B,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC5D;SACF,CAAA;IACH,CAAC;IAED,OAAO;QACL,OAAO;QACP,QAAQ,EAAE,KAAK,CAAC,UAAU;QAC1B,GAAG,EAAE;YACH,iBAAiB,EAAE,KAAK,CAAC,MAAM;YAC/B,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,kBAAkB,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAChE;KACF,CAAA;AACH,CAAC;AAED,SAAS,kCAAkC;IACzC,OAAO,4EAA4E,CAAA;AACrF,CAAC;AAED,MAAM,UAAU,2BAA2B,CAAC,OAAoC;IAC9E,IAAI,OAAO,KAAK,QAAQ,EAAE,CAAC;QACzB,OAAO,iIAAiI,CAAA;IAC1I,CAAC;IAED,IAAI,OAAO,KAAK,OAAO,EAAE,CAAC;QACxB,OAAO,sIAAsI,CAAA;IAC/I,CAAC;IAED,IAAI,OAAO,KAAK,WAAW,EAAE,CAAC;QAC5B,OAAO,6HAA6H,CAAA;IACtI,CAAC;IAED,OAAO,0CAA0C,CAAA;AACnD,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,SAAiB;IAC5C,MAAM,MAAM,GAAG,IAAI,QAAQ,CAAC,YAAY,EAAE,2BAA2B,CAAyD,CAAA;IAC9H,OAAO,MAAM,CAAC,SAAS,CAAC,CAAA;AAC1B,CAAC;AAED,KAAK,UAAU,oBAAoB;IACjC,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,IAAI,GAAG,CAAC,cAAc,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAA;IAEjF,OAAO;QACL,iBAAiB,EAAE,wBAAwB;QAC3C,QAAQ,CAAC,UAAU;YACjB,OAAO,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,YAAY,EAAE;gBAC7C,MAAM,EAAE,KAAK;gBACb,uBAAuB,EAAE,IAAI;gBAC7B,MAAM,EAAE,UAAU,CAAC,MAAM;gBACzB,mBAAmB,EAAE,KAAc;gBACnC,MAAM,EAAE,MAAM,CAAC,cAAc;aAC9B,CAAkB,CAAA;QACrB,CAAC;KACF,CAAA;AACH,CAAC;AAED,KAAK,UAAU,mBAAmB,CAChC,OAAoC,EACpC,OAAqB,EACrB,UAA0B;IAE1B,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;QACtB,OAAO,IAAI,CAAA;IACb,CAAC;IAED,MAAM,EAAE,GAAG,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAA;IACvC,OAAO;QACL,EAAE;QACF,KAAK,EAAE,MAAM,kBAAkB,CAAC,wBAAwB,CAAC,EAAE,EAAE,OAAO,CAAC;KACtE,CAAA;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,OAAoC,EACpC,OAAsB;IAEtB,MAAM,aAAa,GAAG,OAAO,IAAI,MAAM,oBAAoB,EAAE,CAAA;IAC7D,MAAM,UAAU,GAAG,MAAM,aAAa,CAAC,iBAAiB,EAAE,CAAA;IAC1D,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,MAAM,IAAI,KAAK,CAAC,kCAAkC,EAAE,CAAC,CAAA;IACvD,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,mBAAmB,CAAC,OAAO,EAAE,aAAa,EAAE,UAAU,CAAC,CAAA;IAC1E,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,IAAI,KAAK,CAAC,2EAA2E,CAAC,CAAA;IAC9F,CAAC;IAED,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;QAChB,OAAO,IAAI,CAAA;IACb,CAAC;IAED,MAAM,kBAAkB,CAAC,kBAAkB,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,KAAK,CAAC,CAAA;IAEhE,OAAO,eAAe,CAAC,IAAI,CAAC,KAAK,EAAE,OAAO,CAAC,CAAA;AAC7C,CAAC;AAED,MAAM,CAAC,MAAM,aAAa,GAAG;IAC3B,6BAA6B;CAC9B,CAAA"}
+{"version":3,"file":"pod-ai.js","sourceRoot":"","sources":["../../../src/lib/auto-mode/pod-ai.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,wBAAwB,EAAuB,MAAM,wBAAwB,CAAA;AACtF,OAAO,EACL,kBAAkB,GAGnB,MAAM,cAAc,CAAA;AAerB,SAAS,eAAe,CACtB,KAAyC,EACzC,OAAoC;IAEpC,IAAI,OAAO,KAAK,QAAQ,EAAE,CAAC;QACzB,OAAO;YACL,OAAO;YACP,QAAQ,EAAE,KAAK,CAAC,UAAU;YAC1B,GAAG,EAAE;gBACH,iBAAiB,EAAE,KAAK,CAAC,MAAM;gBAC/B,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,kBAAkB,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAChE;SACF,CAAA;IACH,CAAC;IAED,IAAI,OAAO,KAAK,OAAO,EAAE,CAAC;QACxB,OAAO;YACL,OAAO;YACP,QAAQ,EAAE,KAAK,CAAC,UAAU;YAC1B,GAAG,EAAE;gBACH,aAAa,EAAE,KAAK,CAAC,MAAM;gBAC3B,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC5D;SACF,CAAA;IACH,CAAC;IAED,OAAO;QACL,OAAO;QACP,QAAQ,EAAE,KAAK,CAAC,UAAU;QAC1B,GAAG,EAAE;YACH,iBAAiB,EAAE,KAAK,CAAC,MAAM;YAC/B,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,kBAAkB,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAChE;KACF,CAAA;AACH,CAAC;AAED,SAAS,kCAAkC;IACzC,OAAO,4EAA4E,CAAA;AACrF,CAAC;AAED,MAAM,UAAU,2BAA2B,CAAC,OAAoC;IAC9E,IAAI,OAAO,KAAK,QAAQ,EAAE,CAAC;QACzB,OAAO,iIAAiI,CAAA;IAC1I,CAAC;IAED,IAAI,OAAO,KAAK,OAAO,EAAE,CAAC;QACxB,OAAO,sIAAsI,CAAA;IAC/I,CAAC;IAED,IAAI,OAAO,KAAK,WAAW,EAAE,CAAC;QAC5B,OAAO,6HAA6H,CAAA;IACtI,CAAC;IAED,OAAO,0CAA0C,CAAA;AACnD,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,SAAiB;IAC5C,MAAM,MAAM,GAAG,IAAI,QAAQ,CAAC,YAAY,EAAE,2BAA2B,CAAyD,CAAA;IAC9H,OAAO,MAAM,CAAC,SAAS,CAAC,CAAA;AAC1B,CAAC;AAED,KAAK,UAAU,oBAAoB;IACjC,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,IAAI,GAAG,CAAC,cAAc,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAA;IAEjF,OAAO;QACL,iBAAiB,EAAE,wBAAwB;QAC3C,QAAQ,CAAC,UAAU;YACjB,OAAO,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,YAAY,EAAE;gBAC7C,MAAM,EAAE,KAAK;gBACb,uBAAuB,EAAE,IAAI;gBAC7B,MAAM,EAAE,UAAU,CAAC,MAAM;gBACzB,mBAAmB,EAAE,KAAc;gBACnC,MAAM,EAAE,MAAM,CAAC,cAAc;aAC9B,CAAkB,CAAA;QACrB,CAAC;KACF,CAAA;AACH,CAAC;AAED,KAAK,UAAU,mBAAmB,CAChC,OAAoC,EACpC,OAAqB,EACrB,UAA0B;IAE1B,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;QACtB,OAAO,IAAI,CAAA;IACb,CAAC;IAED,MAAM,EAAE,GAAG,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAA;IACvC,OAAO;QACL,EAAE;QACF,KAAK,EAAE,MAAM,kBAAkB,CAAC,wBAAwB,CAAC,EAAE,EAAE,OAAO,CAAC;KACtE,CAAA;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,OAAoC,EACpC,OAAsB;IAEtB,MAAM,aAAa,GAAG,OAAO,IAAI,MAAM,oBAAoB,EAAE,CAAA;IAC7D,MAAM,UAAU,GAAG,MAAM,aAAa,CAAC,iBAAiB,EAAE,CAAA;IAC1D,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,MAAM,IAAI,KAAK,CAAC,kCAAkC,EAAE,CAAC,CAAA;IACvD,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,mBAAmB,CAAC,OAAO,EAAE,aAAa,EAAE,UAAU,CAAC,CAAA;IAC1E,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,IAAI,KAAK,CAAC,2EAA2E,CAAC,CAAA;IAC9F,CAAC;IAED,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;QAChB,OAAO,IAAI,CAAA;IACb,CAAC;IAED,MAAM,kBAAkB,CAAC,kBAAkB,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,KAAK,CAAC,CAAA;IAEhE,OAAO,eAAe,CAAC,IAAI,CAAC,KAAK,EAAE,OAAO,CAAC,CAAA;AAC7C,CAAC"}

package/dist/lib/auto-mode/pod-approval-store.js

@@ -0,0 +1,596 @@
+import { resolvePodBaseUrl } from '@undefineds.co/drizzle-solid';
+import { AS, ODRL, UDFS } from '@undefineds.co/models/namespaces';
+import { ApprovalVocab, AuditVocab, GrantReadVocab, GrantVocab, InboxNotificationVocab } from '@undefineds.co/models/vocab/sidecar';
+import { approvalResource, auditResource, claimApprovalRequest, grantResource, inboxNotificationResource, } from '../models.js';
+import { buildApprovalDocumentUrl, RDF_TYPE, buildApprovalResourceUrl, buildAuditDocumentUrl, buildAuditResourceUrl, buildGrantResourceUrl, buildInboxResourceUrl, firstIri, firstLiteral, iri, listTurtleResources, listTurtleResourcesRecursive, literal, parseManagedTurtleBlocks, readTurtleResource, subjectIdFromResourceUrl, upsertManagedTurtleBlock, } from '../pod-native.js';
+export const DEFAULT_APPROVAL_LIST_DAYS = 7;
+export const MAX_GRANT_POLICY_LENGTH = 1200;
+export const MAX_APPROVAL_CONTEXT_LENGTH = 1400;
+export function normalizeString(value) {
+    return typeof value === 'string' && value.trim() ? value.trim() : undefined;
+}
+function isRecord(value) {
+    return typeof value === 'object' && value !== null && !Array.isArray(value);
+}
+export function toIsoString(value, fallback) {
+    if (value instanceof Date) {
+        return value.toISOString();
+    }
+    if (typeof value === 'string' && value.trim()) {
+        return value;
+    }
+    return fallback;
+}
+export function approvalIriForCreatedAt(webIdOrUri, approvalId, createdAt) {
+    return approvalResource.buildIri(webIdOrUri, {
+        id: approvalId,
+        createdAt,
+    });
+}
+function documentUrlFromResourceUri(resourceUri) {
+    return resourceUri.split('#', 1)[0] ?? resourceUri;
+}
+function truncatePodLiteral(value, maxLength) {
+    if (value.length <= maxLength) {
+        return value;
+    }
+    return `${value.slice(0, Math.max(0, maxLength - 15))}...[truncated]`;
+}
+function literalValues(predicates, predicate) {
+    return (predicates.get(predicate) ?? [])
+        .map((object) => isRecord(object) && object.type === 'literal' && typeof object.value === 'string' ? object.value : '')
+        .filter(Boolean);
+}
+function firstLiteralValue(predicates, predicatesToTry) {
+    for (const predicate of predicatesToTry) {
+        const [value] = literalValues(predicates, predicate);
+        if (value) {
+            return value;
+        }
+    }
+    return undefined;
+}
+function iriValues(predicates, predicate) {
+    return (predicates.get(predicate) ?? [])
+        .map((object) => isRecord(object) && object.type === 'iri' && typeof object.value === 'string' ? object.value : '')
+        .filter(Boolean);
+}
+function iriValuesFrom(predicates, predicatesToTry) {
+    const values = predicatesToTry.flatMap((predicate) => iriValues(predicates, predicate));
+    return [...new Set(values)];
+}
+export function createSharedModelRemoteApprovalStore(webId, getDb) {
+    const listApprovals = async () => {
+        const rows = await modelList(getDb, approvalResource);
+        return rows.map((row) => enrichApprovalRow(webId, row));
+    };
+    return {
+        listApprovals,
+        findApproval: async (id, options = {}) => {
+            if (options.resourceUri) {
+                const row = await modelFindByIri(getDb, approvalResource, options.resourceUri);
+                return row ? enrichApprovalRow(webId, row, options.resourceUri) : null;
+            }
+            if (options.createdAt) {
+                const createdAt = new Date(toIsoString(options.createdAt, new Date().toISOString()));
+                const iri = approvalIriForCreatedAt(webId, id, createdAt);
+                const row = await modelFindByIri(getDb, approvalResource, iri);
+                return row ? enrichApprovalRow(webId, row, iri) : null;
+            }
+            const row = await modelFindById(getDb, approvalResource, id);
+            return row ? enrichApprovalRow(webId, row) : null;
+        },
+        insertApproval: async (row) => {
+            await modelInsert(getDb, approvalResource, omitInternalFields(row));
+        },
+        updateApproval: async (id, patch, options = {}) => {
+            const explicitIri = options.resourceUri
+                ?? normalizeString(patch.approvalUri)
+                ?? (options.createdAt ? approvalIriForCreatedAt(webId, id, new Date(toIsoString(options.createdAt, new Date().toISOString()))) : undefined);
+            if (explicitIri) {
+                await modelUpdateByIri(getDb, approvalResource, explicitIri, omitInternalFields(patch));
+                return;
+            }
+            const updated = await modelUpdateById(getDb, approvalResource, id, omitInternalFields(patch));
+            if (!updated) {
+                throw new Error(`Remote approval not found: ${id}`);
+            }
+        },
+        claimApproval: async (input) => {
+            const db = await getDb();
+            return claimApprovalRequest(db, {
+                approval: input.approvalUri,
+                leaseOwner: input.leaseOwner,
+                leaseDurationMs: input.leaseDurationMs,
+                now: input.now,
+            });
+        },
+        listAudits: () => modelList(getDb, auditResource),
+        insertAudit: async (row) => {
+            await modelInsert(getDb, auditResource, omitInternalFields(row));
+        },
+        listGrants: () => modelList(getDb, grantResource),
+        insertGrant: async (row) => {
+            await modelInsert(getDb, grantResource, omitInternalFields(row));
+        },
+        insertInboxNotification: async (row) => {
+            await modelInsert(getDb, inboxNotificationResource, omitInternalFields(row));
+        },
+    };
+}
+async function modelList(getDb, resource) {
+    const db = await getDb();
+    return await db.select().from(resource).execute();
+}
+async function modelFindByIri(getDb, resource, iri) {
+    const db = await getDb();
+    return await db.findByIri(resource, iri);
+}
+async function modelFindById(getDb, resource, id) {
+    const db = await getDb();
+    return await db.findById(resource, id);
+}
+async function modelInsert(getDb, resource, row) {
+    const db = await getDb();
+    await db.insert(resource).values(stripUndefined(row)).execute();
+}
+async function modelUpdateByIri(getDb, resource, iri, patch) {
+    const db = await getDb();
+    const update = stripUndefined(patch);
+    delete update.id;
+    delete update.approvalUri;
+    await db.updateByIri(resource, iri, update);
+}
+async function modelUpdateById(getDb, resource, id, patch) {
+    const db = await getDb();
+    const update = stripUndefined(patch);
+    delete update.id;
+    delete update.approvalUri;
+    return await db.updateById(resource, id, update);
+}
+function stripUndefined(row) {
+    const next = {};
+    for (const [key, value] of Object.entries(row)) {
+        if (value !== undefined) {
+            next[key] = value;
+        }
+    }
+    return next;
+}
+function omitInternalFields(row) {
+    const next = stripUndefined(row);
+    delete next.approvalUri;
+    delete next['@id'];
+    delete next.subject;
+    delete next.uri;
+    return next;
+}
+function rowSubject(row) {
+    return normalizeString(row['@id'])
+        ?? normalizeString(row.subject)
+        ?? normalizeString(row.uri);
+}
+function enrichApprovalRow(webId, row, explicitIri) {
+    const createdAt = new Date(toIsoString(row.createdAt, new Date().toISOString()));
+    return {
+        ...row,
+        approvalUri: explicitIri
+            ?? normalizeString(row.approvalUri)
+            ?? rowSubject(row)
+            ?? approvalIriForCreatedAt(webId, row.id, createdAt),
+    };
+}
+export function createNativeRemoteApprovalStore(webId, fetcher) {
+    return {
+        listApprovals: () => listApprovalRows(webId, fetcher),
+        findApproval: (id, options) => findApprovalRow(webId, fetcher, id, options),
+        insertApproval: (row) => writeApprovalRow(webId, fetcher, row),
+        async updateApproval(id, patch, options = {}) {
+            const explicitIri = options.resourceUri
+                ?? normalizeString(patch.approvalUri)
+                ?? (options.createdAt ? buildApprovalResourceUrl(webId, id, new Date(toIsoString(options.createdAt, new Date().toISOString()))) : undefined);
+            const existing = explicitIri
+                ? await readApprovalRowFromResource(fetcher, explicitIri)
+                : (await listApprovalRows(webId, fetcher)).find((row) => row.id === id);
+            if (!existing) {
+                throw new Error(`Remote approval not found: ${id}`);
+            }
+            await writeApprovalRow(webId, fetcher, { ...existing, ...patch });
+        },
+        claimApproval: async (input) => claimNativeApproval(webId, fetcher, input),
+        listAudits: () => listAuditRows(webId, fetcher),
+        insertAudit: (row) => writeAuditRow(webId, fetcher, row),
+        listGrants: () => listGrantRows(webId, fetcher),
+        insertGrant: (row) => writeGrantRow(webId, fetcher, row),
+        insertInboxNotification: (row) => writeInboxNotificationRow(webId, fetcher, row),
+    };
+}
+async function claimNativeApproval(webId, fetcher, input) {
+    const now = normalizeClaimDate(input.now);
+    const leaseDurationMs = input.leaseDurationMs ?? 60_000;
+    if (!Number.isFinite(leaseDurationMs) || leaseDurationMs <= 0) {
+        throw new Error('Approval claim leaseDurationMs must be a positive finite number.');
+    }
+    const leaseExpiresAt = new Date(now.getTime() + leaseDurationMs);
+    const missingResult = {
+        status: 'not_found',
+        approval: null,
+        leaseOwner: input.leaseOwner,
+        leaseExpiresAt: leaseExpiresAt.toISOString(),
+        reason: 'Approval request was not found.',
+    };
+    const existing = await readApprovalRowFromResource(fetcher, input.approvalUri);
+    if (!existing) {
+        return missingResult;
+    }
+    if (!isClaimableControlStatus(existing.status)) {
+        return {
+            status: 'not_actionable',
+            approval: existing,
+            leaseOwner: input.leaseOwner,
+            leaseExpiresAt: leaseExpiresAt.toISOString(),
+            reason: `Approval request status is ${String(existing.status || 'empty')}.`,
+        };
+    }
+    if (isPastDate(existing.expiresAt, now)) {
+        return {
+            status: 'not_actionable',
+            approval: existing,
+            leaseOwner: input.leaseOwner,
+            leaseExpiresAt: leaseExpiresAt.toISOString(),
+            reason: 'Approval request is past expiresAt.',
+        };
+    }
+    if (hasActiveForeignLease(existing, input.leaseOwner, now)) {
+        return {
+            status: 'lost',
+            approval: existing,
+            leaseOwner: input.leaseOwner,
+            leaseExpiresAt: leaseExpiresAt.toISOString(),
+            reason: 'Approval request is leased by another client.',
+        };
+    }
+    await writeApprovalRow(webId, fetcher, {
+        ...existing,
+        status: 'handling',
+        leaseOwner: input.leaseOwner,
+        leaseExpiresAt,
+    });
+    const claimed = await readApprovalRowFromResource(fetcher, input.approvalUri);
+    if (claimed?.leaseOwner === input.leaseOwner && !isPastDate(claimed.leaseExpiresAt, now)) {
+        return {
+            status: 'claimed',
+            approval: claimed,
+            leaseOwner: input.leaseOwner,
+            leaseExpiresAt: leaseExpiresAt.toISOString(),
+        };
+    }
+    return {
+        status: 'lost',
+        approval: (claimed ?? existing),
+        leaseOwner: input.leaseOwner,
+        leaseExpiresAt: leaseExpiresAt.toISOString(),
+        reason: 'Approval request lease was not retained after update.',
+    };
+}
+function normalizeClaimDate(value) {
+    const date = value instanceof Date ? value : new Date(value ?? Date.now());
+    if (Number.isNaN(date.getTime())) {
+        throw new Error('Invalid approval claim timestamp.');
+    }
+    return date;
+}
+function isClaimableControlStatus(status) {
+    if (typeof status !== 'string' || !status.trim()) {
+        return true;
+    }
+    const normalized = status.trim();
+    return normalized === 'pending' || normalized === 'handling';
+}
+function hasActiveForeignLease(row, leaseOwner, now) {
+    if (row.leaseOwner === leaseOwner) {
+        return false;
+    }
+    const currentOwner = normalizeString(row.leaseOwner);
+    if (!currentOwner) {
+        return false;
+    }
+    return !isPastDate(row.leaseExpiresAt, now);
+}
+function isPastDate(value, now) {
+    if (!value) {
+        return false;
+    }
+    const date = value instanceof Date ? value : new Date(value);
+    return !Number.isNaN(date.getTime()) && date.getTime() <= now.getTime();
+}
+async function findApprovalRow(webId, fetcher, id, options = {}) {
+    if (options.resourceUri) {
+        return readApprovalRowFromResource(fetcher, options.resourceUri);
+    }
+    if (options.createdAt) {
+        const createdAt = new Date(toIsoString(options.createdAt, new Date().toISOString()));
+        return readApprovalRowFromResource(fetcher, buildApprovalResourceUrl(webId, id, createdAt));
+    }
+    return (await listApprovalRows(webId, fetcher)).find((row) => row.id === id) ?? null;
+}
+async function readApprovalRowFromResource(fetcher, resourceUri) {
+    const turtle = await readTurtleResource(fetcher, documentUrlFromResourceUri(resourceUri));
+    if (!turtle) {
+        return null;
+    }
+    for (const [subject, predicates] of parseManagedTurtleBlocks(turtle, documentUrlFromResourceUri(resourceUri))) {
+        if (subject !== resourceUri) {
+            continue;
+        }
+        const row = approvalRowFromPredicates(subject, predicates);
+        if (row) {
+            return row;
+        }
+    }
+    return null;
+}
+async function listApprovalRows(webId, fetcher) {
+    const urls = [
+        ...recentApprovalDocumentUrls(webId),
+        ...await listTurtleResources(fetcher, `${resolvePodBaseUrl(webId)}/.data/approvals/`).catch(() => []),
+    ];
+    const rows = [];
+    for (const url of [...new Set(urls)].filter((entry) => entry.endsWith('.ttl'))) {
+        const turtle = await readTurtleResource(fetcher, url).catch(() => null);
+        if (!turtle)
+            continue;
+        for (const [subject, predicates] of parseManagedTurtleBlocks(turtle, url)) {
+            const row = approvalRowFromPredicates(subject, predicates);
+            if (row)
+                rows.push(row);
+        }
+    }
+    return rows;
+}
+function recentApprovalDocumentUrls(webId, days = DEFAULT_APPROVAL_LIST_DAYS) {
+    const urls = [];
+    const base = Date.now();
+    for (let offset = 0; offset < days; offset += 1) {
+        const date = new Date(base - offset * 24 * 60 * 60 * 1000);
+        urls.push(buildApprovalDocumentUrl(webId, date));
+    }
+    return urls;
+}
+async function writeApprovalRow(webId, fetcher, row) {
+    const createdAt = new Date(toIsoString(row.createdAt, new Date().toISOString()));
+    const documentUrl = buildApprovalDocumentUrl(webId, createdAt);
+    const subjectUrl = buildApprovalResourceUrl(webId, row.id, createdAt);
+    await upsertManagedTurtleBlock(fetcher, documentUrl, {
+        subject: subjectUrl,
+        triples: [
+            { predicate: RDF_TYPE, object: iri(UDFS.ApprovalRequest) },
+            { predicate: ApprovalVocab.session, object: iri(row.session) },
+            { predicate: ApprovalVocab.toolCallId, object: literal(row.toolCallId) },
+            { predicate: ApprovalVocab.toolName, object: literal(row.toolName) },
+            { predicate: ApprovalVocab.target, object: iri(row.target) },
+            { predicate: ApprovalVocab.action, object: iri(row.action) },
+            { predicate: ApprovalVocab.risk, object: literal(row.risk) },
+            { predicate: ApprovalVocab.status, object: literal(row.status) },
+            ...(row.leaseOwner ? [{ predicate: ApprovalVocab.leaseOwner, object: literal(row.leaseOwner) }] : []),
+            ...(row.leaseExpiresAt ? [{ predicate: ApprovalVocab.leaseExpiresAt, object: literal(toIsoString(row.leaseExpiresAt, new Date().toISOString())) }] : []),
+            ...(row.assignedTo ? [{ predicate: ApprovalVocab.assignedTo, object: iri(row.assignedTo) }] : []),
+            ...(row.decisionBy ? [{ predicate: ApprovalVocab.decisionBy, object: iri(row.decisionBy) }] : []),
+            ...(row.decisionRole ? [{ predicate: ApprovalVocab.decisionRole, object: literal(row.decisionRole) }] : []),
+            ...(row.onBehalfOf ? [{ predicate: ApprovalVocab.onBehalfOf, object: iri(row.onBehalfOf) }] : []),
+            ...(row.reason ? [{ predicate: ApprovalVocab.reason, object: literal(row.reason) }] : []),
+            ...(row.context ? [{ predicate: ApprovalVocab.context, object: literal(row.context) }] : []),
+            ...(row.approvalOptions ? [{ predicate: ApprovalVocab.approvalOptions, object: literal(row.approvalOptions) }] : []),
+            ...(row.policyVersion ? [{ predicate: ApprovalVocab.policyVersion, object: literal(row.policyVersion) }] : []),
+            { predicate: ApprovalVocab.createdAt, object: literal(toIsoString(row.createdAt, new Date().toISOString())) },
+            ...(row.expiresAt ? [{ predicate: ApprovalVocab.expiresAt, object: literal(toIsoString(row.expiresAt, new Date().toISOString())) }] : []),
+            ...(row.resolvedAt ? [{ predicate: ApprovalVocab.resolvedAt, object: literal(toIsoString(row.resolvedAt, new Date().toISOString())) }] : []),
+        ],
+    });
+}
+async function listAuditRows(webId, fetcher) {
+    const urls = await listTurtleResourcesRecursive(fetcher, `${resolvePodBaseUrl(webId)}/.data/audits/`);
+    const rows = [];
+    for (const url of urls.filter((entry) => entry.endsWith('.ttl'))) {
+        const turtle = await readTurtleResource(fetcher, url).catch(() => null);
+        if (!turtle)
+            continue;
+        for (const [subject, predicates] of parseManagedTurtleBlocks(turtle, url)) {
+            const row = auditRowFromPredicates(subject, predicates);
+            if (row)
+                rows.push(row);
+        }
+    }
+    return rows;
+}
+async function writeAuditRow(webId, fetcher, row) {
+    const createdAt = new Date(toIsoString(row.createdAt, new Date().toISOString()));
+    const documentUrl = buildAuditDocumentUrl(webId, createdAt);
+    const subjectUrl = buildAuditResourceUrl(webId, row.id, createdAt);
+    await upsertManagedTurtleBlock(fetcher, documentUrl, {
+        subject: subjectUrl,
+        triples: [
+            { predicate: RDF_TYPE, object: iri(UDFS.AuditEntry) },
+            { predicate: AuditVocab.action, object: literal(row.action) },
+            { predicate: AuditVocab.actor, object: iri(row.actor) },
+            { predicate: AuditVocab.actorRole, object: literal(row.actorRole) },
+            ...(row.onBehalfOf ? [{ predicate: AuditVocab.onBehalfOf, object: iri(row.onBehalfOf) }] : []),
+            ...(row.session ? [{ predicate: AuditVocab.session, object: iri(row.session) }] : []),
+            ...(row.entry ? [{ predicate: AuditVocab.entry, object: iri(row.entry) }] : []),
+            ...(row.toolCallId ? [{ predicate: AuditVocab.toolCallId, object: literal(row.toolCallId) }] : []),
+            ...(row.toolName ? [{ predicate: AuditVocab.toolName, object: literal(row.toolName) }] : []),
+            ...(row.approval ? [{ predicate: AuditVocab.approval, object: iri(row.approval) }] : []),
+            ...(row.policyVersion ? [{ predicate: AuditVocab.policyVersion, object: literal(row.policyVersion) }] : []),
+            { predicate: AuditVocab.createdAt, object: literal(toIsoString(row.createdAt, new Date().toISOString())) },
+        ],
+    });
+}
+async function listGrantRows(webId, fetcher) {
+    const urls = [
+        ...await listTurtleResources(fetcher, `${resolvePodBaseUrl(webId)}/settings/autonomy/grants/`).catch(() => []),
+    ];
+    const rows = [];
+    for (const url of urls.filter((entry) => entry.endsWith('.ttl'))) {
+        const turtle = await readTurtleResource(fetcher, url).catch(() => null);
+        if (!turtle)
+            continue;
+        for (const [subject, predicates] of parseManagedTurtleBlocks(turtle, url)) {
+            const row = grantRowFromPredicates(subject, predicates);
+            if (row)
+                rows.push(row);
+        }
+    }
+    return rows;
+}
+async function writeGrantRow(webId, fetcher, row) {
+    const id = normalizeString(row.id) ?? crypto.randomUUID();
+    const subjectUrl = buildGrantResourceUrl(webId, id);
+    const documentUrl = subjectUrl;
+    const target = normalizeString(row.target);
+    const action = normalizeString(row.action);
+    const effect = normalizeString(row.effect);
+    const decisionBy = normalizeString(row.decisionBy);
+    const decisionRole = normalizeString(row.decisionRole);
+    if (!target || !action || !effect || !decisionBy || !decisionRole) {
+        throw new Error(`Invalid remote approval grant row: ${id}`);
+    }
+    await upsertManagedTurtleBlock(fetcher, documentUrl, {
+        subject: subjectUrl,
+        triples: [
+            { predicate: RDF_TYPE, object: iri(ODRL.Policy) },
+            { predicate: RDF_TYPE, object: iri(UDFS.AutonomyGrant) },
+            { predicate: GrantVocab.target, object: iri(target) },
+            { predicate: GrantVocab.action, object: iri(action) },
+            ...(normalizeString(row.title) ? [{ predicate: GrantVocab.title, object: literal(truncatePodLiteral(normalizeString(row.title), 160)) }] : []),
+            ...(normalizeString(row.summary) ? [{ predicate: GrantVocab.summary, object: literal(truncatePodLiteral(normalizeString(row.summary), 500)) }] : []),
+            ...(normalizeString(row.body) ? [{ predicate: GrantVocab.description, object: literal(truncatePodLiteral(normalizeString(row.body), MAX_GRANT_POLICY_LENGTH)) }] : []),
+            ...(normalizeString(row.schema) ? [{ predicate: GrantVocab.schema, object: iri(normalizeString(row.schema)) }] : []),
+            ...(normalizeString(row.pageKind) ? [{ predicate: GrantVocab.pageKind, object: literal(normalizeString(row.pageKind)) }] : []),
+            ...(normalizeString(row.wikiStatus) ? [{ predicate: GrantVocab.wikiStatus, object: literal(normalizeString(row.wikiStatus)) }] : []),
+            ...(normalizeString(row.tags) ? [{ predicate: GrantVocab.tags, object: literal(truncatePodLiteral(normalizeString(row.tags), 500)) }] : []),
+            ...(normalizeString(row.source) ? [{ predicate: GrantVocab.source, object: literal(normalizeString(row.source)) }] : []),
+            ...(normalizeString(row.sourceHash) ? [{ predicate: GrantVocab.sourceHash, object: literal(normalizeString(row.sourceHash)) }] : []),
+            ...(row.compiledAt ? [{ predicate: GrantVocab.compiledAt, object: literal(toIsoString(row.compiledAt, new Date().toISOString())) }] : []),
+            ...(row.compiledFrom ?? []).map((value) => ({ predicate: GrantVocab.compiledFrom, object: iri(value) })),
+            ...(row.related ?? []).map((value) => ({ predicate: GrantVocab.related, object: iri(value) })),
+            { predicate: GrantVocab.effect, object: literal(effect) },
+            ...(normalizeString(row.riskCeiling) ? [{ predicate: GrantVocab.riskCeiling, object: literal(normalizeString(row.riskCeiling)) }] : []),
+            ...(normalizeString(row.policy) ? [{ predicate: GrantVocab.policy, object: literal(truncatePodLiteral(normalizeString(row.policy), MAX_GRANT_POLICY_LENGTH)) }] : []),
+            ...(normalizeString(row.context) ? [{ predicate: GrantVocab.context, object: literal(truncatePodLiteral(normalizeString(row.context), MAX_APPROVAL_CONTEXT_LENGTH)) }] : []),
+            { predicate: GrantVocab.decisionBy, object: iri(decisionBy) },
+            { predicate: GrantVocab.decisionRole, object: literal(decisionRole) },
+            ...(normalizeString(row.onBehalfOf) ? [{ predicate: GrantVocab.onBehalfOf, object: iri(normalizeString(row.onBehalfOf)) }] : []),
+            { predicate: GrantVocab.createdAt, object: literal(toIsoString(row.createdAt, new Date().toISOString())) },
+            ...(normalizeString(row.revokedAt) ? [{ predicate: GrantVocab.revokedAt, object: literal(normalizeString(row.revokedAt)) }] : []),
+        ],
+    });
+}
+async function writeInboxNotificationRow(webId, fetcher, row) {
+    const url = buildInboxResourceUrl(webId, row.id);
+    await upsertManagedTurtleBlock(fetcher, url, {
+        subject: url,
+        triples: [
+            { predicate: RDF_TYPE, object: iri(AS.Announce) },
+            ...(row.actor ? [{ predicate: InboxNotificationVocab.actor, object: iri(row.actor) }] : []),
+            { predicate: InboxNotificationVocab.object, object: iri(row.object) },
+            { predicate: InboxNotificationVocab.createdAt, object: literal(toIsoString(row.createdAt, new Date().toISOString())) },
+        ],
+    });
+}
+function approvalRowFromPredicates(url, predicates) {
+    const session = firstIri(predicates, ApprovalVocab.session);
+    const toolCallId = firstLiteral(predicates, ApprovalVocab.toolCallId);
+    const toolName = firstLiteral(predicates, ApprovalVocab.toolName);
+    const target = firstIri(predicates, ApprovalVocab.target);
+    const action = firstIri(predicates, ApprovalVocab.action);
+    const risk = firstLiteral(predicates, ApprovalVocab.risk);
+    const status = firstLiteral(predicates, ApprovalVocab.status);
+    const createdAt = firstLiteral(predicates, ApprovalVocab.createdAt);
+    if (!session || !toolCallId || !toolName || !target || !action || !risk || !status || !createdAt) {
+        return null;
+    }
+    return {
+        id: subjectIdFromResourceUrl(url),
+        session,
+        toolCallId,
+        toolName,
+        target,
+        action,
+        risk,
+        status,
+        leaseOwner: firstLiteral(predicates, ApprovalVocab.leaseOwner),
+        leaseExpiresAt: firstLiteral(predicates, ApprovalVocab.leaseExpiresAt),
+        assignedTo: firstIri(predicates, ApprovalVocab.assignedTo),
+        decisionBy: firstIri(predicates, ApprovalVocab.decisionBy),
+        decisionRole: firstLiteral(predicates, ApprovalVocab.decisionRole),
+        onBehalfOf: firstIri(predicates, ApprovalVocab.onBehalfOf),
+        reason: firstLiteral(predicates, ApprovalVocab.reason),
+        context: firstLiteral(predicates, ApprovalVocab.context),
+        approvalOptions: firstLiteral(predicates, ApprovalVocab.approvalOptions),
+        policyVersion: firstLiteral(predicates, ApprovalVocab.policyVersion),
+        createdAt,
+        expiresAt: firstLiteral(predicates, ApprovalVocab.expiresAt),
+        resolvedAt: firstLiteral(predicates, ApprovalVocab.resolvedAt),
+    };
+}
+function auditRowFromPredicates(url, predicates) {
+    const action = firstLiteral(predicates, AuditVocab.action);
+    const actor = firstIri(predicates, AuditVocab.actor);
+    const actorRole = firstLiteral(predicates, AuditVocab.actorRole);
+    const createdAt = firstLiteral(predicates, AuditVocab.createdAt);
+    if (!action || !actor || !actorRole || !createdAt) {
+        return null;
+    }
+    return {
+        id: subjectIdFromResourceUrl(url),
+        action,
+        actor,
+        actorRole,
+        onBehalfOf: firstIri(predicates, AuditVocab.onBehalfOf),
+        session: firstIri(predicates, AuditVocab.session),
+        entry: firstIri(predicates, AuditVocab.entry),
+        toolCallId: firstLiteral(predicates, AuditVocab.toolCallId),
+        toolName: firstLiteral(predicates, AuditVocab.toolName),
+        approval: firstIri(predicates, AuditVocab.approval),
+        policyVersion: firstLiteral(predicates, AuditVocab.policyVersion),
+        createdAt,
+    };
+}
+function grantRowFromPredicates(url, predicates) {
+    const target = firstIri(predicates, GrantVocab.target);
+    const action = firstIri(predicates, GrantVocab.action);
+    const effect = firstLiteral(predicates, GrantVocab.effect);
+    const decisionBy = firstIri(predicates, GrantVocab.decisionBy);
+    const decisionRole = firstLiteral(predicates, GrantVocab.decisionRole);
+    const createdAt = firstLiteral(predicates, GrantVocab.createdAt);
+    if (!target || !action || !effect || !decisionBy || !decisionRole || !createdAt) {
+        return null;
+    }
+    return {
+        id: subjectIdFromResourceUrl(url),
+        target,
+        action,
+        title: firstLiteral(predicates, GrantVocab.title),
+        summary: firstLiteralValue(predicates, GrantReadVocab.summary),
+        body: firstLiteralValue(predicates, GrantReadVocab.description),
+        schema: firstIri(predicates, GrantVocab.schema),
+        pageKind: firstLiteral(predicates, GrantVocab.pageKind),
+        wikiStatus: firstLiteral(predicates, GrantVocab.wikiStatus),
+        tags: firstLiteral(predicates, GrantVocab.tags),
+        source: firstLiteralValue(predicates, GrantReadVocab.source),
+        sourceHash: firstLiteral(predicates, GrantVocab.sourceHash),
+        compiledAt: firstLiteral(predicates, GrantVocab.compiledAt),
+        compiledFrom: iriValues(predicates, GrantVocab.compiledFrom),
+        related: iriValuesFrom(predicates, GrantReadVocab.related),
+        effect,
+        riskCeiling: firstLiteral(predicates, GrantVocab.riskCeiling),
+        policy: firstLiteral(predicates, GrantVocab.policy),
+        context: firstLiteral(predicates, GrantVocab.context),
+        decisionBy,
+        decisionRole,
+        onBehalfOf: firstIri(predicates, GrantVocab.onBehalfOf),
+        createdAt,
+        revokedAt: firstLiteral(predicates, GrantVocab.revokedAt),
+    };
+}
+//# sourceMappingURL=pod-approval-store.js.map