@undefineds.co/xpod 0.1.0-local.202602081751

package/dist/api/store/DrizzleClientCredentialsStore.js

@@ -0,0 +1,145 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DrizzleClientCredentialsStore = void 0;
+const node_crypto_1 = require("node:crypto");
+const drizzle_orm_1 = require("drizzle-orm");
+const global_logger_factory_1 = require("global-logger-factory");
+const schema_pg_1 = require("../../identity/drizzle/schema.pg");
+const schema_sqlite_1 = require("../../identity/drizzle/schema.sqlite");
+/**
+ * Storage for API Keys (client credentials) using Drizzle ORM
+ */
+class DrizzleClientCredentialsStore {
+    constructor(options) {
+        this.logger = (0, global_logger_factory_1.getLoggerFor)(this);
+        this.db = options.db;
+        this.encryptionKey = (0, node_crypto_1.scryptSync)(options.encryptionKey, 'xpod-api-salt', 32);
+        // Select appropriate schema based on database type
+        this.apiClientCredentials = options.isSqlite ? schema_sqlite_1.apiClientCredentials : schema_pg_1.apiClientCredentials;
+    }
+    /**
+     * Store client credentials (called when user creates API Key via frontend)
+     */
+    async store(options) {
+        const encryptedSecret = this.encrypt(options.clientSecret);
+        await this.db
+            .insert(this.apiClientCredentials)
+            .values({
+            clientId: options.clientId,
+            clientSecretEncrypted: encryptedSecret,
+            webId: options.webId,
+            accountId: options.accountId,
+            displayName: options.displayName ?? null,
+        })
+            .onConflictDoUpdate({
+            target: this.apiClientCredentials.clientId,
+            set: {
+                clientSecretEncrypted: encryptedSecret,
+                displayName: options.displayName ?? null,
+            },
+        });
+        this.logger.info(`Stored API Key: ${options.clientId}`);
+    }
+    /**
+     * Find by client_id (the "API Key")
+     */
+    async findByClientId(clientId) {
+        const rows = await this.db
+            .select()
+            .from(this.apiClientCredentials)
+            .where((0, drizzle_orm_1.eq)(this.apiClientCredentials.clientId, clientId))
+            .limit(1);
+        if (rows.length === 0) {
+            return undefined;
+        }
+        const row = rows[0];
+        return {
+            clientId: row.clientId,
+            clientSecret: this.decrypt(row.clientSecretEncrypted),
+            webId: row.webId,
+            accountId: row.accountId,
+            displayName: row.displayName ?? undefined,
+            createdAt: row.createdAt,
+        };
+    }
+    /**
+     * List API Keys for an account (without secrets)
+     */
+    async listByAccount(accountId) {
+        const rows = await this.db
+            .select({
+            clientId: this.apiClientCredentials.clientId,
+            webId: this.apiClientCredentials.webId,
+            displayName: this.apiClientCredentials.displayName,
+            createdAt: this.apiClientCredentials.createdAt,
+        })
+            .from(this.apiClientCredentials)
+            .where((0, drizzle_orm_1.eq)(this.apiClientCredentials.accountId, accountId))
+            .orderBy((0, drizzle_orm_1.sql) `${this.apiClientCredentials.createdAt} DESC`);
+        return rows.map((row) => ({
+            clientId: row.clientId,
+            webId: row.webId,
+            displayName: row.displayName ?? undefined,
+            createdAt: row.createdAt,
+        }));
+    }
+    /**
+     * Find the most recently created API Key for an account (including secret).
+     */
+    async findByAccountId(accountId) {
+        const rows = await this.db
+            .select()
+            .from(this.apiClientCredentials)
+            .where((0, drizzle_orm_1.eq)(this.apiClientCredentials.accountId, accountId))
+            .orderBy((0, drizzle_orm_1.sql) `${this.apiClientCredentials.createdAt} DESC`)
+            .limit(1);
+        if (rows.length === 0) {
+            return undefined;
+        }
+        const row = rows[0];
+        return {
+            clientId: row.clientId,
+            clientSecret: this.decrypt(row.clientSecretEncrypted),
+            webId: row.webId,
+            accountId: row.accountId,
+            displayName: row.displayName ?? undefined,
+            createdAt: row.createdAt,
+        };
+    }
+    /**
+     * Delete an API Key
+     */
+    async delete(clientId, accountId) {
+        if (accountId) {
+            const result = await this.db
+                .delete(this.apiClientCredentials)
+                .where((0, drizzle_orm_1.eq)(this.apiClientCredentials.clientId, clientId));
+            // Check if the deleted row belonged to the account
+            // For safety, we could add an AND condition, but Drizzle doesn't support multiple where easily
+            // So we trust the caller to verify ownership before calling delete
+        }
+        else {
+            await this.db
+                .delete(this.apiClientCredentials)
+                .where((0, drizzle_orm_1.eq)(this.apiClientCredentials.clientId, clientId));
+        }
+        return true;
+    }
+    encrypt(plaintext) {
+        const iv = (0, node_crypto_1.randomBytes)(16);
+        const cipher = (0, node_crypto_1.createCipheriv)('aes-256-cbc', this.encryptionKey, iv);
+        let encrypted = cipher.update(plaintext, 'utf8', 'hex');
+        encrypted += cipher.final('hex');
+        return iv.toString('hex') + ':' + encrypted;
+    }
+    decrypt(ciphertext) {
+        const [ivHex, encrypted] = ciphertext.split(':');
+        const iv = Buffer.from(ivHex, 'hex');
+        const decipher = (0, node_crypto_1.createDecipheriv)('aes-256-cbc', this.encryptionKey, iv);
+        let decrypted = decipher.update(encrypted, 'hex', 'utf8');
+        decrypted += decipher.final('utf8');
+        return decrypted;
+    }
+}
+exports.DrizzleClientCredentialsStore = DrizzleClientCredentialsStore;
+//# sourceMappingURL=DrizzleClientCredentialsStore.js.map

package/dist/api/store/DrizzleClientCredentialsStore.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"DrizzleClientCredentialsStore.js","sourceRoot":"","sources":["../../../src/api/store/DrizzleClientCredentialsStore.ts"],"names":[],"mappings":";;;AAAA,6CAAwF;AACxF,6CAAsC;AACtC,iEAAqD;AAErD,gEAAkG;AAClG,wEAA0G;AAe1G;;GAEG;AACH,MAAa,6BAA6B;IAMxC,YAAmB,OAA6C;QAL/C,WAAM,GAAG,IAAA,oCAAY,EAAC,IAAI,CAAC,CAAC;QAM3C,IAAI,CAAC,EAAE,GAAG,OAAO,CAAC,EAAE,CAAC;QACrB,IAAI,CAAC,aAAa,GAAG,IAAA,wBAAU,EAAC,OAAO,CAAC,aAAa,EAAE,eAAe,EAAE,EAAE,CAAC,CAAC;QAC5E,mDAAmD;QACnD,IAAI,CAAC,oBAAoB,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,oCAA0B,CAAC,CAAC,CAAC,gCAAsB,CAAC;IACrG,CAAC;IAED;;OAEG;IACI,KAAK,CAAC,KAAK,CAAC,OAMlB;QACC,MAAM,eAAe,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;QAE3D,MAAM,IAAI,CAAC,EAAE;aACV,MAAM,CAAC,IAAI,CAAC,oBAAoB,CAAC;aACjC,MAAM,CAAC;YACN,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,qBAAqB,EAAE,eAAe;YACtC,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,WAAW,EAAE,OAAO,CAAC,WAAW,IAAI,IAAI;SACzC,CAAC;aACD,kBAAkB,CAAC;YAClB,MAAM,EAAE,IAAI,CAAC,oBAAoB,CAAC,QAAQ;YAC1C,GAAG,EAAE;gBACH,qBAAqB,EAAE,eAAe;gBACtC,WAAW,EAAE,OAAO,CAAC,WAAW,IAAI,IAAI;aACzC;SACF,CAAC,CAAC;QAEL,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,mBAAmB,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC;IAC1D,CAAC;IAED;;OAEG;IACI,KAAK,CAAC,cAAc,CAAC,QAAgB;QAC1C,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,EAAE;aACvB,MAAM,EAAE;aACR,IAAI,CAAC,IAAI,CAAC,oBAAoB,CAAC;aAC/B,KAAK,CAAC,IAAA,gBAAE,EAAC,IAAI,CAAC,oBAAoB,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;aACvD,KAAK,CAAC,CAAC,CAAC,CAAC;QAEZ,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACtB,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QACpB,OAAO;YACL,QAAQ,EAAE,GAAG,CAAC,QAAQ;YACtB,YAAY,EAAE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC;YACrD,KAAK,EAAE,GAAG,CAAC,KAAK;YAChB,SAAS,EAAE,GAAG,CAAC,SAAS;YACxB,WAAW,EAAE,GAAG,CAAC,WAAW,IAAI,SAAS;YACzC,SAAS,EAAE,GAAG,CAAC,SAAS;SACzB,CAAC;IACJ,CAAC;IAED;;OAEG;IACI,KAAK,CAAC,aAAa,CAAC,SAAiB;QAM1C,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,EAAE;aACvB,MAAM,CAAC;YACN,QAAQ,EAAE,IAAI,CAAC,oBAAoB,CAAC,QAAQ;YAC5C,KAAK,EAAE,IAAI,CAAC,oBAAoB,CAAC,KAAK;YACtC,WAAW,EAAE,IAAI,CAAC,oBAAoB,CAAC,WAAW;YAClD,SAAS,EAAE,IAAI,CAAC,oBAAoB,CAAC,SAAS;SAC/C,CAAC;aACD,IAAI,CAAC,IAAI,CAAC,oBAAoB,CAAC;aAC/B,KAAK,CAAC,IAAA,gBAAE,EAAC,IAAI,CAAC,oBAAoB,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;aACzD,OAAO,CAAC,IAAA,iBAAG,EAAA,GAAG,IAAI,CAAC,oBAAoB,CAAC,SAAS,OAAO,CAAC,CAAC;QAE7D,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,GAAwB,EAAE,EAAE,CAAC,CAAC;YAC7C,QAAQ,EAAE,GAAG,CAAC,QAAQ;YACtB,KAAK,EAAE,GAAG,CAAC,KAAK;YAChB,WAAW,EAAE,GAAG,CAAC,WAAW,IAAI,SAAS;YACzC,SAAS,EAAE,GAAG,CAAC,SAAS;SACzB,CAAC,CAAC,CAAC;IACN,CAAC;IAED;;OAEG;IACI,KAAK,CAAC,eAAe,CAAC,SAAiB;QAC5C,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,EAAE;aACvB,MAAM,EAAE;aACR,IAAI,CAAC,IAAI,CAAC,oBAAoB,CAAC;aAC/B,KAAK,CAAC,IAAA,gBAAE,EAAC,IAAI,CAAC,oBAAoB,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;aACzD,OAAO,CAAC,IAAA,iBAAG,EAAA,GAAG,IAAI,CAAC,oBAAoB,CAAC,SAAS,OAAO,CAAC;aACzD,KAAK,CAAC,CAAC,CAAC,CAAC;QAEZ,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACtB,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QACpB,OAAO;YACL,QAAQ,EAAE,GAAG,CAAC,QAAQ;YACtB,YAAY,EAAE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC;YACrD,KAAK,EAAE,GAAG,CAAC,KAAK;YAChB,SAAS,EAAE,GAAG,CAAC,SAAS;YACxB,WAAW,EAAE,GAAG,CAAC,WAAW,IAAI,SAAS;YACzC,SAAS,EAAE,GAAG,CAAC,SAAS;SACzB,CAAC;IACJ,CAAC;IAED;;OAEG;IACI,KAAK,CAAC,MAAM,CAAC,QAAgB,EAAE,SAAkB;QACtD,IAAI,SAAS,EAAE,CAAC;YACd,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,EAAE;iBACzB,MAAM,CAAC,IAAI,CAAC,oBAAoB,CAAC;iBACjC,KAAK,CAAC,IAAA,gBAAE,EAAC,IAAI,CAAC,oBAAoB,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC;YAC3D,mDAAmD;YACnD,+FAA+F;YAC/F,mEAAmE;QACrE,CAAC;aAAM,CAAC;YACN,MAAM,IAAI,CAAC,EAAE;iBACV,MAAM,CAAC,IAAI,CAAC,oBAAoB,CAAC;iBACjC,KAAK,CAAC,IAAA,gBAAE,EAAC,IAAI,CAAC,oBAAoB,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC;QAC7D,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAEO,OAAO,CAAC,SAAiB;QAC/B,MAAM,EAAE,GAAG,IAAA,yBAAW,EAAC,EAAE,CAAC,CAAC;QAC3B,MAAM,MAAM,GAAG,IAAA,4BAAc,EAAC,aAAa,EAAE,IAAI,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC;QACrE,IAAI,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;QACxD,SAAS,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACjC,OAAO,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,GAAG,GAAG,SAAS,CAAC;IAC9C,CAAC;IAEO,OAAO,CAAC,UAAkB;QAChC,MAAM,CAAC,KAAK,EAAE,SAAS,CAAC,GAAG,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACjD,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QACrC,MAAM,QAAQ,GAAG,IAAA,8BAAgB,EAAC,aAAa,EAAE,IAAI,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC;QACzE,IAAI,SAAS,GAAG,QAAQ,CAAC,MAAM,CAAC,SAAS,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;QAC1D,SAAS,IAAI,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACpC,OAAO,SAAS,CAAC;IACnB,CAAC;CACF;AA/JD,sEA+JC","sourcesContent":["import { randomBytes, createCipheriv, createDecipheriv, scryptSync } from 'node:crypto';\nimport { eq, sql } from 'drizzle-orm';\nimport { getLoggerFor } from 'global-logger-factory';\nimport type { IdentityDatabase } from '../../identity/drizzle/db';\nimport { apiClientCredentials as pgApiClientCredentials } from '../../identity/drizzle/schema.pg';\nimport { apiClientCredentials as sqliteApiClientCredentials } from '../../identity/drizzle/schema.sqlite';\nimport type { ClientCredentialsRecord, ClientCredentialsStore } from '../auth/ClientCredentialsAuthenticator';\n\nexport interface DrizzleClientCredentialsStoreOptions {\n  db: IdentityDatabase;\n  /**\n   * Encryption key for storing client secrets\n   */\n  encryptionKey: string;\n  /**\n   * Whether using SQLite (default: false for PostgreSQL)\n   */\n  isSqlite?: boolean;\n}\n\n/**\n * Storage for API Keys (client credentials) using Drizzle ORM\n */\nexport class DrizzleClientCredentialsStore implements ClientCredentialsStore {\n  private readonly logger = getLoggerFor(this);\n  private readonly db: IdentityDatabase;\n  private readonly encryptionKey: Buffer;\n  private readonly apiClientCredentials: typeof pgApiClientCredentials | typeof sqliteApiClientCredentials;\n\n  public constructor(options: DrizzleClientCredentialsStoreOptions) {\n    this.db = options.db;\n    this.encryptionKey = scryptSync(options.encryptionKey, 'xpod-api-salt', 32);\n    // Select appropriate schema based on database type\n    this.apiClientCredentials = options.isSqlite ? sqliteApiClientCredentials : pgApiClientCredentials;\n  }\n\n  /**\n   * Store client credentials (called when user creates API Key via frontend)\n   */\n  public async store(options: {\n    clientId: string;\n    clientSecret: string;\n    webId: string;\n    accountId: string;\n    displayName?: string;\n  }): Promise<void> {\n    const encryptedSecret = this.encrypt(options.clientSecret);\n\n    await this.db\n      .insert(this.apiClientCredentials)\n      .values({\n        clientId: options.clientId,\n        clientSecretEncrypted: encryptedSecret,\n        webId: options.webId,\n        accountId: options.accountId,\n        displayName: options.displayName ?? null,\n      })\n      .onConflictDoUpdate({\n        target: this.apiClientCredentials.clientId,\n        set: {\n          clientSecretEncrypted: encryptedSecret,\n          displayName: options.displayName ?? null,\n        },\n      });\n\n    this.logger.info(`Stored API Key: ${options.clientId}`);\n  }\n\n  /**\n   * Find by client_id (the \"API Key\")\n   */\n  public async findByClientId(clientId: string): Promise<ClientCredentialsRecord | undefined> {\n    const rows = await this.db\n      .select()\n      .from(this.apiClientCredentials)\n      .where(eq(this.apiClientCredentials.clientId, clientId))\n      .limit(1);\n\n    if (rows.length === 0) {\n      return undefined;\n    }\n\n    const row = rows[0];\n    return {\n      clientId: row.clientId,\n      clientSecret: this.decrypt(row.clientSecretEncrypted),\n      webId: row.webId,\n      accountId: row.accountId,\n      displayName: row.displayName ?? undefined,\n      createdAt: row.createdAt,\n    };\n  }\n\n  /**\n   * List API Keys for an account (without secrets)\n   */\n  public async listByAccount(accountId: string): Promise<Array<{\n    clientId: string;\n    webId: string;\n    displayName?: string;\n    createdAt: Date;\n  }>> {\n    const rows = await this.db\n      .select({\n        clientId: this.apiClientCredentials.clientId,\n        webId: this.apiClientCredentials.webId,\n        displayName: this.apiClientCredentials.displayName,\n        createdAt: this.apiClientCredentials.createdAt,\n      })\n      .from(this.apiClientCredentials)\n      .where(eq(this.apiClientCredentials.accountId, accountId))\n      .orderBy(sql`${this.apiClientCredentials.createdAt} DESC`);\n\n    return rows.map((row: typeof rows[number]) => ({\n      clientId: row.clientId,\n      webId: row.webId,\n      displayName: row.displayName ?? undefined,\n      createdAt: row.createdAt,\n    }));\n  }\n\n  /**\n   * Find the most recently created API Key for an account (including secret).\n   */\n  public async findByAccountId(accountId: string): Promise<ClientCredentialsRecord | undefined> {\n    const rows = await this.db\n      .select()\n      .from(this.apiClientCredentials)\n      .where(eq(this.apiClientCredentials.accountId, accountId))\n      .orderBy(sql`${this.apiClientCredentials.createdAt} DESC`)\n      .limit(1);\n\n    if (rows.length === 0) {\n      return undefined;\n    }\n\n    const row = rows[0];\n    return {\n      clientId: row.clientId,\n      clientSecret: this.decrypt(row.clientSecretEncrypted),\n      webId: row.webId,\n      accountId: row.accountId,\n      displayName: row.displayName ?? undefined,\n      createdAt: row.createdAt,\n    };\n  }\n\n  /**\n   * Delete an API Key\n   */\n  public async delete(clientId: string, accountId?: string): Promise<boolean> {\n    if (accountId) {\n      const result = await this.db\n        .delete(this.apiClientCredentials)\n        .where(eq(this.apiClientCredentials.clientId, clientId));\n      // Check if the deleted row belonged to the account\n      // For safety, we could add an AND condition, but Drizzle doesn't support multiple where easily\n      // So we trust the caller to verify ownership before calling delete\n    } else {\n      await this.db\n        .delete(this.apiClientCredentials)\n        .where(eq(this.apiClientCredentials.clientId, clientId));\n    }\n    return true;\n  }\n\n  private encrypt(plaintext: string): string {\n    const iv = randomBytes(16);\n    const cipher = createCipheriv('aes-256-cbc', this.encryptionKey, iv);\n    let encrypted = cipher.update(plaintext, 'utf8', 'hex');\n    encrypted += cipher.final('hex');\n    return iv.toString('hex') + ':' + encrypted;\n  }\n\n  private decrypt(ciphertext: string): string {\n    const [ivHex, encrypted] = ciphertext.split(':');\n    const iv = Buffer.from(ivHex, 'hex');\n    const decipher = createDecipheriv('aes-256-cbc', this.encryptionKey, iv);\n    let decrypted = decipher.update(encrypted, 'hex', 'utf8');\n    decrypted += decipher.final('utf8');\n    return decrypted;\n  }\n}\n"]}

package/dist/api/store/index.d.ts

@@ -0,0 +1 @@
+export * from './DrizzleClientCredentialsStore';

package/dist/api/store/index.js

@@ -0,0 +1,18 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./DrizzleClientCredentialsStore"), exports);
+//# sourceMappingURL=index.js.map

package/dist/api/store/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/api/store/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,kEAAgD","sourcesContent":["export * from './DrizzleClientCredentialsStore';\n"]}

package/dist/components/components.jsonld

@@ -0,0 +1,88 @@
+{
+  "@context": [
+    "https://linkedsoftwaredependencies.org/bundles/npm/@undefineds.co/xpod/^0.0.0/components/context.jsonld"
+  ],
+  "@id": "npmd:@undefineds.co/xpod",
+  "@type": "Module",
+  "requireName": "@undefineds.co/xpod",
+  "import": [
+    "undefineds:dist/storage/sparql/SubgraphQueryEngine.jsonld",
+    "undefineds:dist/storage/MigratableDataAccessor.jsonld",
+    "undefineds:dist/dns/DnsProvider.jsonld",
+    "undefineds:dist/edge/EdgeNodeCertificateProvisioner.jsonld",
+    "undefineds:dist/edge/interfaces/EdgeNodeTunnelManager.jsonld",
+    "undefineds:dist/quota/QuotaService.jsonld",
+    "undefineds:dist/tunnel/TunnelProvider.jsonld",
+    "undefineds:dist/subdomain/SubdomainService.jsonld",
+    "undefineds:dist/http/AppStaticAssetHandler.jsonld",
+    "undefineds:dist/storage/RepresentationPartialConvertingStore.jsonld",
+    "undefineds:dist/storage/accessors/MinioDataAccessor.jsonld",
+    "undefineds:dist/storage/accessors/QuadstoreSparqlDataAccessor.jsonld",
+    "undefineds:dist/storage/accessors/QuintStoreSparqlDataAccessor.jsonld",
+    "undefineds:dist/storage/accessors/MixDataAccessor.jsonld",
+    "undefineds:dist/logging/ConfigurableLoggerFactory.jsonld",
+    "undefineds:dist/storage/SparqlUpdateResourceStore.jsonld",
+    "undefineds:dist/http/SubgraphSparqlHttpHandler.jsonld",
+    "undefineds:dist/http/quota/QuotaAdminHttpHandler.jsonld",
+    "undefineds:dist/http/admin/EdgeNodeSignalHttpHandler.jsonld",
+    "undefineds:dist/http/ClusterIngressRouter.jsonld",
+    "undefineds:dist/http/ClusterWebSocketConfigurator.jsonld",
+    "undefineds:dist/http/EdgeNodeDirectDebugHttpHandler.jsonld",
+    "undefineds:dist/http/EdgeNodeProxyHttpHandler.jsonld",
+    "undefineds:dist/http/SignalInterceptHttpHandler.jsonld",
+    "undefineds:dist/http/RouterHttpHandler.jsonld",
+    "undefineds:dist/http/RouterHttpRoute.jsonld",
+    "undefineds:dist/http/TracingHandler.jsonld",
+    "undefineds:dist/http/admin/EdgeNodeCertificateHttpHandler.jsonld",
+    "undefineds:dist/http/terminal/TerminalHttpHandler.jsonld",
+    "undefineds:dist/pods/ReservedSuffixIdentifierGenerator.jsonld",
+    "undefineds:dist/identity/drizzle/DrizzleIndexedStorage.jsonld",
+    "undefineds:dist/storage/keyvalue/PostgresKeyValueStorage.jsonld",
+    "undefineds:dist/storage/keyvalue/RedisKeyValueStorage.jsonld",
+    "undefineds:dist/storage/keyvalue/SqliteKeyValueStorage.jsonld",
+    "undefineds:dist/quota/DefaultQuotaService.jsonld",
+    "undefineds:dist/quota/DrizzleQuotaService.jsonld",
+    "undefineds:dist/quota/NoopQuotaService.jsonld",
+    "undefineds:dist/storage/quota/PerAccountQuotaStrategy.jsonld",
+    "undefineds:dist/dns/tencent/TencentDnsProvider.jsonld",
+    "undefineds:dist/edge/EdgeNodeDnsCoordinator.jsonld",
+    "undefineds:dist/edge/Dns01CertificateProvisioner.jsonld",
+    "undefineds:dist/edge/EdgeNodeTunnelManager.jsonld",
+    "undefineds:dist/edge/FrpTunnelManager.jsonld",
+    "undefineds:dist/edge/EdgeNodeHealthProbeService.jsonld",
+    "undefineds:dist/edge/EdgeNodeAgent.jsonld",
+    "undefineds:dist/service/EdgeNodeCertificateService.jsonld",
+    "undefineds:dist/edge/acme/AcmeCertificateManager.jsonld",
+    "undefineds:dist/edge/EdgeNodeModeDetector.jsonld",
+    "undefineds:dist/util/identifiers/ClusterIdentifierStrategy.jsonld",
+    "undefineds:dist/storage/quota/UsageTrackingStore.jsonld",
+    "undefineds:dist/identity/CenterNodeRegistrationService.jsonld",
+    "undefineds:dist/http/PodRoutingHttpHandler.jsonld",
+    "undefineds:dist/storage/accessors/TieredMinioDataAccessor.jsonld",
+    "undefineds:dist/http/cluster/PodMigrationHttpHandler.jsonld",
+    "undefineds:dist/service/PodMigrationService.jsonld",
+    "undefineds:dist/identity/ReactAppViewHandler.jsonld",
+    "undefineds:dist/storage/quint/types.jsonld",
+    "undefineds:dist/storage/quint/SqliteQuintStore.jsonld",
+    "undefineds:dist/storage/quint/PgQuintStore.jsonld",
+    "undefineds:dist/storage/quint/BaseQuintStore.jsonld",
+    "undefineds:dist/storage/vector/VectorStore.jsonld",
+    "undefineds:dist/storage/vector/SqliteVectorStore.jsonld",
+    "undefineds:dist/storage/vector/PostgresVectorStore.jsonld",
+    "undefineds:dist/http/vector/VectorHttpHandler.jsonld",
+    "undefineds:dist/embedding/ProviderRegistry.jsonld",
+    "undefineds:dist/embedding/ProviderRegistryImpl.jsonld",
+    "undefineds:dist/embedding/EmbeddingService.jsonld",
+    "undefineds:dist/embedding/EmbeddingServiceImpl.jsonld",
+    "undefineds:dist/embedding/CredentialReader.jsonld",
+    "undefineds:dist/embedding/CredentialReaderImpl.jsonld",
+    "undefineds:dist/tunnel/CloudflareTunnelProvider.jsonld",
+    "undefineds:dist/tunnel/LocalTunnelProvider.jsonld",
+    "undefineds:dist/util/identifiers/MultiDomainIdentifierStrategy.jsonld",
+    "undefineds:dist/util/identifiers/SubdomainPodIdentifierStrategy.jsonld",
+    "undefineds:dist/identity/oidc/DisabledOidcHandler.jsonld",
+    "undefineds:dist/identity/oidc/DisabledIdentityProviderHandler.jsonld",
+    "undefineds:dist/identity/oidc/AutoDetectOidcHandler.jsonld",
+    "undefineds:dist/identity/oidc/AutoDetectIdentityProviderHandler.jsonld"
+  ]
+}