@undefineds.co/linx 0.3.5 → 0.3.8

package/dist/lib/pi-adapter/auth.js

@@ -1,68 +0,0 @@
-import { getClientCredentialId, getClientCredentialKey, getClientCredentials, loadCredentials, } from '../credentials-store.js';
-import { getOidcAccessToken, isOidcLoginExpiredError } from '../oidc-auth.js';
-import { getAccessToken } from '../solid-auth.js';
-function isRuntimeOverride(value) {
-    return typeof value === 'object'
-        && value !== null
-        && ('loadCredentials' in value
-            || 'getClientCredentials' in value
-            || 'getAccessToken' in value
-            || 'getOidcAccessToken' in value);
-}
-function resolveOidcExpiresAt(credentials) {
-    const expiresAt = 'oidcExpiresAt' in credentials.secrets
-        ? new Date(credentials.secrets.oidcExpiresAt).getTime()
-        : NaN;
-    return Number.isFinite(expiresAt) ? expiresAt : Date.now();
-}
-export async function resolveLinxPiCloudOAuthCredential(issuerUrl, optionsOrRuntime = {}, runtimeArg) {
-    const defaultRuntime = {
-        loadCredentials,
-        getClientCredentials,
-        getAccessToken,
-        getOidcAccessToken,
-    };
-    const options = isRuntimeOverride(optionsOrRuntime)
-        ? {}
-        : optionsOrRuntime;
-    const runtime = {
-        ...defaultRuntime,
-        ...(isRuntimeOverride(optionsOrRuntime) ? optionsOrRuntime : runtimeArg),
-    };
-    const stored = runtime.loadCredentials();
-    if (!stored) {
-        return null;
-    }
-    const clientCredentials = runtime.getClientCredentials(stored);
-    if (!clientCredentials) {
-        const oidcAccessToken = await runtime.getOidcAccessToken(stored, { forceRefresh: options.forceRefresh }).catch((error) => {
-            if (isOidcLoginExpiredError(error)) {
-                throw error;
-            }
-            return null;
-        });
-        if (!oidcAccessToken) {
-            return null;
-        }
-        return {
-            type: 'oauth',
-            refresh: 'linx-oidc-refresh',
-            access: oidcAccessToken,
-            expires: resolveOidcExpiresAt(stored),
-        };
-    }
-    const resolvedIssuerUrl = issuerUrl?.trim() || stored.url;
-    const clientId = getClientCredentialId(clientCredentials);
-    const clientSecret = getClientCredentialKey(clientCredentials);
-    const token = await runtime.getAccessToken(clientId, clientSecret, resolvedIssuerUrl);
-    if (!token) {
-        return null;
-    }
-    return {
-        type: 'oauth',
-        refresh: clientSecret,
-        access: token.accessToken,
-        expires: token.expiresAt.getTime(),
-    };
-}
-//# sourceMappingURL=auth.js.map

package/dist/lib/pi-adapter/auth.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../../src/lib/pi-adapter/auth.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,qBAAqB,EACrB,sBAAsB,EACtB,oBAAoB,EACpB,eAAe,GAEhB,MAAM,yBAAyB,CAAA;AAChC,OAAO,EAAE,kBAAkB,EAAE,uBAAuB,EAAE,MAAM,iBAAiB,CAAA;AAC7E,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAA;AAkBjD,SAAS,iBAAiB,CAAC,KAAc;IACvC,OAAO,OAAO,KAAK,KAAK,QAAQ;WAC3B,KAAK,KAAK,IAAI;WACd,CACD,iBAAiB,IAAI,KAAK;eACvB,sBAAsB,IAAI,KAAK;eAC/B,gBAAgB,IAAI,KAAK;eACzB,oBAAoB,IAAI,KAAK,CACjC,CAAA;AACL,CAAC;AAED,SAAS,oBAAoB,CAAC,WAA+C;IAC3E,MAAM,SAAS,GAAG,eAAe,IAAI,WAAW,CAAC,OAAO;QACtD,CAAC,CAAC,IAAI,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,OAAO,EAAE;QACvD,CAAC,CAAC,GAAG,CAAA;IACP,OAAO,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAA;AAC5D,CAAC;AAWD,MAAM,CAAC,KAAK,UAAU,iCAAiC,CACrD,SAAkB,EAClB,mBAAkF,EAAE,EACpF,UAAyC;IAEzC,MAAM,cAAc,GAAwB;QAC1C,eAAe;QACf,oBAAoB;QACpB,cAAc;QACd,kBAAkB;KACnB,CAAA;IACD,MAAM,OAAO,GAAG,iBAAiB,CAAC,gBAAgB,CAAC;QACjD,CAAC,CAAC,EAAE;QACJ,CAAC,CAAC,gBAAgB,CAAA;IACpB,MAAM,OAAO,GAAwB;QACnC,GAAG,cAAc;QACjB,GAAG,CAAC,iBAAiB,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,UAAU,CAAC;KACzE,CAAA;IAED,MAAM,MAAM,GAAG,OAAO,CAAC,eAAe,EAAE,CAAA;IACxC,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,IAAI,CAAA;IACb,CAAC;IAED,MAAM,iBAAiB,GAAG,OAAO,CAAC,oBAAoB,CAAC,MAAM,CAAC,CAAA;IAC9D,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACvB,MAAM,eAAe,GAAG,MAAM,OAAO,CAAC,kBAAkB,CAAC,MAAM,EAAE,EAAE,YAAY,EAAE,OAAO,CAAC,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;YACvH,IAAI,uBAAuB,CAAC,KAAK,CAAC,EAAE,CAAC;gBACnC,MAAM,KAAK,CAAA;YACb,CAAC;YACD,OAAO,IAAI,CAAA;QACb,CAAC,CAAC,CAAA;QACF,IAAI,CAAC,eAAe,EAAE,CAAC;YACrB,OAAO,IAAI,CAAA;QACb,CAAC;QAED,OAAO;YACL,IAAI,EAAE,OAAO;YACb,OAAO,EAAE,mBAAmB;YAC5B,MAAM,EAAE,eAAe;YACvB,OAAO,EAAE,oBAAoB,CAAC,MAAM,CAAC;SACtC,CAAA;IACH,CAAC;IAED,MAAM,iBAAiB,GAAG,SAAS,EAAE,IAAI,EAAE,IAAI,MAAM,CAAC,GAAG,CAAA;IACzD,MAAM,QAAQ,GAAG,qBAAqB,CAAC,iBAAiB,CAAC,CAAA;IACzD,MAAM,YAAY,GAAG,sBAAsB,CAAC,iBAAiB,CAAC,CAAA;IAC9D,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,cAAc,CAAC,QAAQ,EAAE,YAAY,EAAE,iBAAiB,CAAC,CAAA;IACrF,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,IAAI,CAAA;IACb,CAAC;IAED,OAAO;QACL,IAAI,EAAE,OAAO;QACb,OAAO,EAAE,YAAY;QACrB,MAAM,EAAE,KAAK,CAAC,WAAW;QACzB,OAAO,EAAE,KAAK,CAAC,SAAS,CAAC,OAAO,EAAE;KACnC,CAAA;AACH,CAAC"}

package/dist/lib/pi-adapter/pod-tools.js

@@ -1,140 +0,0 @@
-/**
- * Pod Read/Write tools — LLM-facing tools for Pod filesystem access.
- *
- * These tools provide the LLM with the same familiar read/write interface
- * as local files, but routed through the authenticated Pod HTTP API.
- *
- * The LLM should prefer these over local read/write when the path starts
- * with a Pod root (e.g., /alice/). For local files, use read/write.
- */
-import { Type } from '@sinclair/typebox';
-import { resolveLinxPodBaseUrl } from '@undefineds.co/models/client';
-import { getDefaultPodDataSession } from '../pod-data-session.js';
-// ── Parameter Schemas ──────────────────────────────────────────────────────
-const PodReadParams = Type.Object({
-    path: Type.String({ description: 'Pod resource path (e.g., /alice/settings/credentials.ttl)' }),
-});
-const PodWriteParams = Type.Object({
-    path: Type.String({ description: 'Pod resource path (e.g., /alice/settings/credentials.ttl)' }),
-    content: Type.String({ description: 'Content to write' }),
-    contentType: Type.Optional(Type.String({ description: 'Content-Type header. Default: text/turtle for .ttl, text/markdown for .md, application/json for .json' })),
-});
-// ── Content-Type inference ──────────────────────────────────────────────────
-function inferContentType(path) {
-    if (path.endsWith('.ttl'))
-        return 'text/turtle';
-    if (path.endsWith('.md'))
-        return 'text/markdown';
-    if (path.endsWith('.json'))
-        return 'application/json';
-    if (path.endsWith('.html'))
-        return 'text/html';
-    return 'text/plain';
-}
-export function resolvePodToolUrl(path, pod) {
-    if (/^https?:\/\//i.test(path)) {
-        return path;
-    }
-    const webId = pod.webId?.trim() ?? '';
-    const origin = resolveUrlOrigin(webId) || resolveUrlOrigin(pod.credentials?.url);
-    if (path.startsWith('/')) {
-        if (!origin) {
-            throw new Error('Cannot resolve absolute Pod path without a WebID or issuer URL.');
-        }
-        return new URL(path, `${origin}/`).toString();
-    }
-    const podBase = webId ? resolveLinxPodBaseUrl(webId) : '';
-    const baseUrl = podBase || origin;
-    if (!baseUrl) {
-        throw new Error('Cannot resolve relative Pod path without a WebID or issuer URL.');
-    }
-    return new URL(path, `${baseUrl.replace(/\/+$/, '')}/`).toString();
-}
-function resolveUrlOrigin(url) {
-    try {
-        return typeof url === 'string' && url.trim() ? new URL(url).origin : '';
-    }
-    catch {
-        return '';
-    }
-}
-// ── Tool Definitions ────────────────────────────────────────────────────────
-// eslint-disable-next-line @typescript-eslint/no-explicit-any
-export const podReadTool = {
-    name: 'pod_read',
-    label: 'Pod Read',
-    description: [
-        'Read a file from the user\'s Pod. Use this for any path under the Pod root (e.g., /alice/...).',
-        'For local files, use the regular read tool instead.',
-    ].join('\n'),
-    parameters: PodReadParams,
-    async execute(_callId, params) {
-        return executePodRead(params);
-    },
-};
-export async function executePodRead(params, getPodDataSession = getDefaultPodDataSession) {
-    const path = params.path.trim();
-    if (!path)
-        return { content: [{ type: 'text', text: 'Error: path is required' }], isError: true };
-    const pod = await getPodDataSession();
-    if (!pod)
-        return { content: [{ type: 'text', text: 'Error: not connected to Pod' }], isError: true };
-    try {
-        const fullUrl = resolvePodToolUrl(path, pod);
-        const res = await pod.fetch(fullUrl);
-        if (!res.ok) {
-            const body = await res.text().catch(() => '');
-            return { content: [{ type: 'text', text: `Pod read failed: HTTP ${res.status} — ${body.slice(0, 500)}` }], isError: true };
-        }
-        const text = await res.text();
-        return { content: [{ type: 'text', text }] };
-    }
-    catch (e) {
-        return { content: [{ type: 'text', text: `Pod read error: ${e instanceof Error ? e.message : String(e)}` }], isError: true };
-    }
-}
-// eslint-disable-next-line @typescript-eslint/no-explicit-any
-export const podWriteTool = {
-    name: 'pod_write',
-    label: 'Pod Write',
-    description: [
-        'Write content to a file in the user\'s Pod. Use this for any path under the Pod root (e.g., /alice/...).',
-        'Content-Type is inferred from the file extension (.ttl → text/turtle, .md → text/markdown, .json → application/json).',
-        'For local files, use the regular write tool instead.',
-    ].join('\n'),
-    parameters: PodWriteParams,
-    async execute(_callId, params) {
-        return executePodWrite(params);
-    },
-};
-export async function executePodWrite(params, getPodDataSession = getDefaultPodDataSession) {
-    const path = params.path.trim();
-    if (!path)
-        return { content: [{ type: 'text', text: 'Error: path is required' }], isError: true };
-    const pod = await getPodDataSession();
-    if (!pod)
-        return { content: [{ type: 'text', text: 'Error: not connected to Pod' }], isError: true };
-    const ct = params.contentType?.trim() || inferContentType(path);
-    try {
-        const fullUrl = resolvePodToolUrl(path, pod);
-        const res = await pod.fetch(fullUrl, {
-            method: 'PUT',
-            headers: { 'Content-Type': ct },
-            body: params.content,
-        });
-        if (!res.ok) {
-            const body = await res.text().catch(() => '');
-            return { content: [{ type: 'text', text: `Pod write failed: HTTP ${res.status} — ${body.slice(0, 500)}` }], isError: true };
-        }
-        return { content: [{ type: 'text', text: `Written: ${path}` }] };
-    }
-    catch (e) {
-        return { content: [{ type: 'text', text: `Pod write error: ${e instanceof Error ? e.message : String(e)}` }], isError: true };
-    }
-}
-// ── Pi Extension ────────────────────────────────────────────────────────────
-export default function (pi) {
-    pi.registerTool(podReadTool);
-    pi.registerTool(podWriteTool);
-}
-//# sourceMappingURL=pod-tools.js.map

package/dist/lib/pi-adapter/pod-tools.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"pod-tools.js","sourceRoot":"","sources":["../../../src/lib/pi-adapter/pod-tools.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAGH,OAAO,EAAE,IAAI,EAAE,MAAM,mBAAmB,CAAC;AACzC,OAAO,EAAE,qBAAqB,EAAE,MAAM,8BAA8B,CAAC;AACrE,OAAO,EAAE,wBAAwB,EAAuB,MAAM,wBAAwB,CAAC;AAEvF,8EAA8E;AAE9E,MAAM,aAAa,GAAG,IAAI,CAAC,MAAM,CAAC;IAChC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,2DAA2D,EAAE,CAAC;CAChG,CAAC,CAAC;AAEH,MAAM,cAAc,GAAG,IAAI,CAAC,MAAM,CAAC;IACjC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,2DAA2D,EAAE,CAAC;IAC/F,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,kBAAkB,EAAE,CAAC;IACzD,WAAW,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,uGAAuG,EAAE,CAAC,CAAC;CAClK,CAAC,CAAC;AAKH,+EAA+E;AAE/E,SAAS,gBAAgB,CAAC,IAAY;IACpC,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,OAAO,aAAa,CAAC;IAChD,IAAI,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,eAAe,CAAC;IACjD,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC;QAAE,OAAO,kBAAkB,CAAC;IACtD,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC;QAAE,OAAO,WAAW,CAAC;IAC/C,OAAO,YAAY,CAAC;AACtB,CAAC;AAED,MAAM,UAAU,iBAAiB,CAC/B,IAAY,EACZ,GAAqE;IAErE,IAAI,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAC/B,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IACtC,MAAM,MAAM,GAAG,gBAAgB,CAAC,KAAK,CAAC,IAAI,gBAAgB,CAAC,GAAG,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;IACjF,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACzB,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,KAAK,CAAC,iEAAiE,CAAC,CAAC;QACrF,CAAC;QACD,OAAO,IAAI,GAAG,CAAC,IAAI,EAAE,GAAG,MAAM,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC;IAChD,CAAC;IAED,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,qBAAqB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC1D,MAAM,OAAO,GAAG,OAAO,IAAI,MAAM,CAAC;IAClC,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CAAC,iEAAiE,CAAC,CAAC;IACrF,CAAC;IACD,OAAO,IAAI,GAAG,CAAC,IAAI,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC;AACrE,CAAC;AAED,SAAS,gBAAgB,CAAC,GAAmB;IAC3C,IAAI,CAAC;QACH,OAAO,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;IAC1E,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,+EAA+E;AAE/E,8DAA8D;AAC9D,MAAM,CAAC,MAAM,WAAW,GAAQ;IAC9B,IAAI,EAAE,UAAU;IAChB,KAAK,EAAE,UAAU;IACjB,WAAW,EAAE;QACX,gGAAgG;QAChG,qDAAqD;KACtD,CAAC,IAAI,CAAC,IAAI,CAAC;IACZ,UAAU,EAAE,aAAa;IACzB,KAAK,CAAC,OAAO,CAAC,OAAe,EAAE,MAAqB;QAClD,OAAO,cAAc,CAAC,MAAM,CAAC,CAAC;IAChC,CAAC;CACF,CAAC;AAEF,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,MAAqB,EACrB,oBAA0D,wBAAwB;IAElF,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;IAChC,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,yBAAyB,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAE3G,MAAM,GAAG,GAAG,MAAM,iBAAiB,EAAE,CAAC;IACtC,IAAI,CAAC,GAAG;QAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,6BAA6B,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAE9G,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,iBAAiB,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QAC7C,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACrC,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;YAC9C,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,yBAAyB,GAAG,CAAC,MAAM,MAAM,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QACtI,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;QAC9B,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;IACxD,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,mBAAmB,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IACxI,CAAC;AACH,CAAC;AAED,8DAA8D;AAC9D,MAAM,CAAC,MAAM,YAAY,GAAQ;IAC/B,IAAI,EAAE,WAAW;IACjB,KAAK,EAAE,WAAW;IAClB,WAAW,EAAE;QACX,0GAA0G;QAC1G,uHAAuH;QACvH,sDAAsD;KACvD,CAAC,IAAI,CAAC,IAAI,CAAC;IACZ,UAAU,EAAE,cAAc;IAC1B,KAAK,CAAC,OAAO,CAAC,OAAe,EAAE,MAAsB;QACnD,OAAO,eAAe,CAAC,MAAM,CAAC,CAAC;IACjC,CAAC;CACF,CAAC;AAEF,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,MAAsB,EACtB,oBAA0D,wBAAwB;IAElF,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;IAChC,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,yBAAyB,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAE3G,MAAM,GAAG,GAAG,MAAM,iBAAiB,EAAE,CAAC;IACtC,IAAI,CAAC,GAAG;QAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,6BAA6B,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAE9G,MAAM,EAAE,GAAG,MAAM,CAAC,WAAW,EAAE,IAAI,EAAE,IAAI,gBAAgB,CAAC,IAAI,CAAC,CAAC;IAEhE,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,iBAAiB,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QAC7C,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,KAAK,CAAC,OAAO,EAAE;YACnC,MAAM,EAAE,KAAK;YACb,OAAO,EAAE,EAAE,cAAc,EAAE,EAAE,EAAE;YAC/B,IAAI,EAAE,MAAM,CAAC,OAAO;SACrB,CAAC,CAAC;QACH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;YAC9C,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,0BAA0B,GAAG,CAAC,MAAM,MAAM,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QACvI,CAAC;QACD,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,YAAY,IAAI,EAAE,EAAE,CAAC,EAAE,CAAC;IAC5E,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,oBAAoB,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IACzI,CAAC;AACH,CAAC;AAED,+EAA+E;AAE/E,MAAM,CAAC,OAAO,WAAW,EAAgB;IACvC,EAAE,CAAC,YAAY,CAAC,WAAW,CAAC,CAAC;IAC7B,EAAE,CAAC,YAAY,CAAC,YAAY,CAAC,CAAC;AAChC,CAAC"}

package/dist/skills/drizzle-solid/SKILL.md

@@ -1,340 +0,0 @@
----
-name: drizzle-solid
-description: Drizzle Solid ORM 专家，处理 Pod 数据 CRUD、Schema 定义、查询优化、SPARQL 端点配置等问题
-allowed-tools: Read, Write, Edit, Grep, Glob
----
-
-# Drizzle Solid ORM 专家
-
-你是 XPod 项目的 Drizzle Solid ORM 专家。帮助设计和实现基于 drizzle-solid 的 Pod 数据访问层。
-
-## 核心概念
-
-### drizzle-solid 是什么
-
-drizzle-solid 是一个为 Solid Pod 设计的类型安全 ORM，基于 Drizzle ORM 构建，让你能够像操作传统数据库一样操作 Solid Pod 中的 RDF 数据。
-
-### 服务器支持
-
-| 能力 | 原生 CSS | xpod |
-|------|----------|------|
-| **基础 CRUD** | ✅ LDP 模式 | ✅ LDP 模式 |
-| **SPARQL SELECT** | ❌ 不支持（Comunica 客户端执行） | ✅ 服务端索引下推 |
-| **SPARQL UPDATE** | ⚠️ 仅 BGP 写入 | ✅ 完整支持 |
-| **条件查询** (where) | Comunica 读文件到内存 | 索引下推（单 Pod） |
-| **聚合函数** (count/sum/avg) | Comunica 读文件到内存 | 索引下推（单 Pod） |
-| **SPARQL 端点** | ❌ 不支持 | ✅ `/-/sparql` Sidecar |
-
-## Schema 定义
-
-### podTable 配置
-
-```typescript
-import { podTable, string, int, datetime, uri } from '@undefineds.co/drizzle-solid';
-
-const userTable = podTable('users', {
-  id: string('id').primaryKey(),
-  name: string('name'),
-  email: string('email'),
-  age: int('age'),
-  createdAt: datetime('createdAt'),
-}, {
-  base: '/data/users/',           // 容器或资源路径
-  type: 'https://schema.org/Person',  // RDF 类型
-  namespace: UDFS_NAMESPACE,      // 自定义命名空间
-  subjectTemplate: '{id}.ttl#this',   // subject URI 模板
-  sparqlEndpoint: '/data/users/-/sparql',  // xpod SPARQL 端点
-  typeIndex: 'private',           // TypeIndex 注册
-  autoRegister: true,             // 自动注册到 TypeIndex
-});
-```
-
-### subjectTemplate 模式
-
-#### Document 模式（每条记录独立文件）
-
-```typescript
-// 每个用户一个文件: /users/alice.ttl, /users/bob.ttl
-const userTable = podTable('users', { ... }, {
-  base: '/users/',
-  subjectTemplate: '{id}.ttl',  // 或 '{id}.ttl#this'
-});
-
-// 按日期分片: /logs/2026/01/17/log-001.ttl
-const logTable = podTable('logs', { ... }, {
-  base: '/logs/',
-  subjectTemplate: '{yyyy}/{MM}/{dd}/{id}.ttl',
-});
-```
-
-#### Fragment 模式（多条记录共享文件）
-
-```typescript
-// 所有消息在同一文件: /chat/room.ttl#msg-1, /chat/room.ttl#msg-2
-const messageTable = podTable('messages', { ... }, {
-  base: '/chat/room.ttl',
-  subjectTemplate: '#{id}',  // 强制 fragment 模式
-});
-```
-
-### 关联表设计（同文件存储）
-
-当需要将关联数据存储在同一文件时：
-
-```typescript
-// Thread 和 Message 存储在同一文件
-const ChatThread = podTable('ChatThread', {
-  id: string('id').primaryKey(),
-  title: string('title'),
-}, {
-  base: '/chat/',
-  subjectTemplate: '{id}.ttl#this',  // /chat/thread-1.ttl#this
-});
-
-const ChatMessage = podTable('ChatMessage', {
-  id: string('id').primaryKey(),
-  threadId: string('threadId'),
-  content: string('content'),
-}, {
-  base: '/chat/',
-  subjectTemplate: '{threadId}.ttl#{id}',  // /chat/thread-1.ttl#msg-1
-});
-```
-
-**注意**：使用 `{threadId}` 等外键变量时，查询需要配合 `sparqlEndpoint` 才能跨文件查询。
-
-## SPARQL 端点配置（xpod 专用）
-
-### Fragment Mode（推荐）
-
-LDP 和 SPARQL 完全兼容：
-
-```typescript
-const postsTable = podTable('posts', { ... }, {
-  base: '/data/posts.ttl',
-  subjectTemplate: '#{id}',
-  sparqlEndpoint: '/data/posts.ttl/-/sparql',
-});
-```
-
-### Document Mode + 容器端点
-
-用于跨文件查询：
-
-```typescript
-const usersTable = podTable('users', { ... }, {
-  base: '/data/users/',
-  subjectTemplate: '{id}.ttl#this',
-  sparqlEndpoint: '/data/users/-/sparql',  // 容器级 SPARQL 端点
-});
-```
-
-**重要**：Document Mode 下，SPARQL 写操作与 LDP 文件视图不兼容！
-- SPARQL INSERT 不会创建 LDP 文件
-- SPARQL UPDATE 不会更新 LDP 文件
-- 建议：写操作用 LDP，读操作可用 SPARQL 聚合查询
-
-## 查询操作
-
-### 基础 CRUD
-
-```typescript
-import { drizzle, eq, and, gte } from '@undefineds.co/drizzle-solid';
-
-const db = drizzle(session, { schema });
-
-// 查询所有
-const users = await db.select().from(userTable);
-
-// 条件查询
-const adults = await db.select()
-  .from(userTable)
-  .where(gte(userTable.age, 18));
-
-// 复合条件
-const result = await db.select()
-  .from(userTable)
-  .where(and(
-    eq(userTable.status, 'active'),
-    gte(userTable.age, 18)
-  ));
-
-// 插入
-await db.insert(userTable).values({
-  id: 'user-1',
-  name: 'Alice',
-  email: 'alice@example.com',
-});
-
-// 更新
-await db.update(userTable)
-  .set({ name: 'Alice Smith' })
-  .where(eq(userTable.id, 'user-1'));
-
-// 删除
-await db.delete(userTable)
-  .where(eq(userTable.id, 'user-1'));
-```
-
-### Drizzle 风格查询
-
-```typescript
-const db = drizzle(session, { schema });
-
-// findMany
-const users = await db.query.users.findMany({
-  where: { verified: true },
-  orderBy: [{ column: schema.users.name, direction: 'asc' }],
-  with: { posts: true },  // 关联查询
-});
-
-// findFirst
-const user = await db.query.users.findFirst({
-  where: eq(schema.users.id, 'user-1'),
-});
-
-// findByIri
-const alice = await db.findByIri(schema.users, 'https://pod.example/data/users.ttl#alice');
-```
-
-### 聚合查询
-
-```typescript
-import { count, max, sum, avg } from '@undefineds.co/drizzle-solid';
-
-const stats = await db
-  .select({
-    totalUsers: count(),
-    oldestAge: max(userTable.age),
-  })
-  .from(userTable);
-```
-
-## 初始化与容器创建
-
-```typescript
-// 初始化表（创建容器、资源，注册 TypeIndex）
-await db.init([userTable, postTable]);
-
-// 手动确保容器存在
-// drizzle-solid 会自动处理，但如果需要手动控制：
-// 1. 先 HEAD 检查容器是否存在
-// 2. 不存在则 PUT 创建
-```
-
-## 常见问题
-
-### 1. 查询返回空数组
-
-**可能原因**：
-- Document Mode 下没有配置 `sparqlEndpoint`
-- 容器不存在
-- 数据存储在不同文件，但没有使用容器级 SPARQL 端点
-
-**解决方案**：
-```typescript
-// 配置容器级 SPARQL 端点
-const table = podTable('items', { ... }, {
-  base: '/data/items/',
-  sparqlEndpoint: '/data/items/-/sparql',
-});
-```
-
-### 2. 写入后查询不到数据
-
-**可能原因**：Document Mode 下混用了 SPARQL 写入和 LDP 读取
-
-**解决方案**：
-- 使用 Fragment Mode（推荐）
-- 或者统一使用 LDP 操作
-
-### 3. subjectTemplate 中的变量不生效
-
-**正确用法**：
-```typescript
-// 使用 {id} 引用主键
-subjectTemplate: '{id}.ttl#this'
-
-// 使用其他字段（如 threadId）
-subjectTemplate: '{threadId}.ttl#{id}'
-```
-
-**注意**：变量必须是 schema 中定义的字段名。
-
-### 4. TypeIndex 注册失败
-
-**检查**：
-- 确保 `typeIndex: 'private'` 或 `'public'` 已设置
-- 确保 `autoRegister: true`（默认）
-- 确保用户有权限写入 TypeIndex
-
-## 最佳实践
-
-### 1. 优先使用 Fragment Mode
-
-```typescript
-// 推荐：所有数据在一个文件
-const table = podTable('items', { ... }, {
-  base: '/data/items.ttl',
-  subjectTemplate: '#{id}',
-  sparqlEndpoint: '/data/items.ttl/-/sparql',
-});
-```
-
-### 2. 需要文件隔离时使用 Document Mode + SPARQL 端点
-
-```typescript
-// 每条记录独立文件，但通过 SPARQL 端点聚合查询
-const table = podTable('items', { ... }, {
-  base: '/data/items/',
-  subjectTemplate: '{id}.ttl#this',
-  sparqlEndpoint: '/data/items/-/sparql',
-});
-```
-
-### 3. 关联数据存储在同一文件
-
-```typescript
-// Thread 和 Message 在同一文件，便于原子操作
-const ChatThread = podTable('ChatThread', { ... }, {
-  base: '/chat/',
-  subjectTemplate: '{id}.ttl#this',
-});
-
-const ChatMessage = podTable('ChatMessage', { ... }, {
-  base: '/chat/',
-  subjectTemplate: '{threadId}.ttl#{id}',
-});
-```
-
-### 4. 使用 namespace 统一管理自定义谓词
-
-```typescript
-import { UDFS_NAMESPACE } from '@/vocab';
-
-const table = podTable('items', {
-  status: string('status'),  // 映射到 udfs:status
-}, {
-  namespace: UDFS_NAMESPACE,
-});
-```
-
-## 参考资料
-
-- drizzle-solid README: `node_modules/@undefineds.co/drizzle-solid/README.md`
-- 项目 vocab 定义: `src/vocab/`
-- 现有 schema 示例: `src/api/chatkit/schema.ts`, `src/credential/schema/tables.ts`
-
-## 问题反馈
-
-如果发现 drizzle-solid 设计不合理或存在 bug，通过 git MCP 向 drizzle-solid 仓库提 issue：
-
-```
-仓库: undefinedsco/drizzle-solid
-```
-
-提 issue 时请包含：
-1. 问题描述
-2. 复现步骤
-3. 期望行为 vs 实际行为
-4. 相关代码片段

package/dist/skills/pod-storage/SKILL.md

@@ -1,100 +0,0 @@
----
-name: pod-storage
-description: Resolve durable Pod writes through shared descriptors, Consensus, pod_schema, and pod_storage instead of inventing paths or Turtle.
-allowed-tools: Read, Write, Edit, Bash, Grep, Glob, pod_read, pod_write
----
-
-# Pod Storage
-
-Use this skill when the user asks AI Secretary or another agent to save
-credentials, configuration, grants, preferences, or other durable Pod-backed
-data.
-
-## Core Rule
-
-Do not invent Pod paths, RDF predicates, subject templates, or Turtle.
-
-Durable storage semantics belong to `@undefineds.co/models`:
-
-- descriptors,
-- resource base paths,
-- subject templates,
-- field predicates,
-- validation,
-- repository-backed commits.
-
-## Workflow
-
-1. Restate the storage request in structured fields when possible.
-2. Use the injected `udfs` tool for schema lookup and semantic consensus.
-   LinX/linx-lite should provide runtime context for remote Consensus; without
-   that context, `udfs` can still run local deterministic schema commands.
-3. For direct schema lookup, call `udfs schema classes`,
-   `udfs schema predicates`, or `udfs schema describe`.
-4. For ambiguous natural-language storage requests, call `udfs consensus` with a
-   JSON input payload.
-   The future service-backed path should use the Responses protocol
-   (`/v1/conversations` + `/v1/responses`).
-5. Ask the user any returned clarification questions.
-6. Continue the same Responses conversation through the `conversation_id`
-   request field.
-7. Build a domain-shaped DTO from the returned `schemaUri` and field mapping.
-8. Optionally call `udfs storage validate --input <json>` before committing.
-9. Persist through the shared models ORM/repository, not through hand-written
-   Turtle or a resource-specific `udfs` shortcut.
-10. Report the schema URI, resource summary, and follow-up status.
-
-## Current MVP Check
-
-The local verification path is the injected `udfs` tool. Do not call back into
-`linx`; `udfs` must also work when injected into non-LinX coding agents:
-
-```bash
-udfs consensus --input '{"session_id":"sess_123","request":"我要保存这个 Cloudflare token","answers":{"token_type":"tunnel-token"}}' --json
-udfs schema classes --uri 'https://vocab.xpod.dev/credential#Credential'
-udfs schema predicates --uri 'https://vocab.xpod.dev/credential#Credential'
-udfs schema predicates --uri 'https://vocab.xpod.dev/credential#Credential' --field apiKey
-```
-
-Inside LinX or another coding-agent shell, AI should use the injected `udfs`
-tool:
-
-```bash
-udfs consensus --input '{"session_id":"sess_123","request":"我要保存这个 Cloudflare token","answers":{"token_type":"tunnel-token"}}' --json
-udfs schema describe 'https://vocab.xpod.dev/credential#Credential'
-udfs schema predicates --uri 'https://vocab.xpod.dev/credential#Credential'
-udfs storage validate --input '{"schemaUri":"https://vocab.xpod.dev/credential#Credential","operation":"upsert","match":{"service":"infra","providerId":"cloudflare","secretType":"tunnel-token"},"set":{"label":"Cloudflare Tunnel Token","status":"active"}}'
-```
-
-Expected outcome:
-
-- clarification question: API token or tunnel token,
-- schema URI: `https://vocab.xpod.dev/credential#Credential`,
-- predicate mapping includes `apiKey -> https://vocab.xpod.dev/credential#apiKey`,
-- descriptor storage: `/settings/credentials.ttl#{id}`,
-- validation plan: `/settings/credentials.ttl#infra-cloudflare-tunnel-token`,
-- no commit in `udfs`; actual writes go through shared ORM/repository code.
-- remote Consensus, when available, is reached through injected
-  `UDFS_CONSENSUS_BASE_URL` and `UDFS_CONSENSUS_TOKEN`; do not ask the user for a
-  command-line API key.
-
-## Secretary Rules
-
-- Never store secrets in free-form notes.
-- Never log full secret values.
-- Use validation before risky writes, but persist through model-owned
-  repositories/ORM.
-- Treat unmodeled durable data as a model proposal flow, not a permanent
-  catch-all note.
-- User/developer-created descriptors must be validated before activation.
-
-## Low-Level Pod Tools
-
-`pod_read` and `pod_write` are protocol tools, not modeling tools. Use them only
-when:
-
-- no shared business model exists yet,
-- the operation is explicitly protocol-level,
-- or you are inspecting raw Pod state for debugging.
-
-If a shared model exists, use model-owned helpers instead of hand-editing Turtle.