@undefineds.co/xpod 0.1.7 → 0.2.0

package/dist/cli/commands/doctor.js

@@ -0,0 +1,94 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.doctorCommand = void 0;
+const child_process_1 = require("child_process");
+const fs_1 = require("fs");
+const path_1 = require("path");
+function check(ok, label) {
+    const icon = ok ? '✓' : '✗';
+    console.log(`${icon} ${label}`);
+    return { ok, label };
+}
+async function checkNodeVersion() {
+    const major = parseInt(process.versions.node.split('.')[0], 10);
+    return check(major >= 18, `Node.js v${process.versions.node} (≥ 18)`);
+}
+async function checkServerReachable(url) {
+    if (!url)
+        return check(true, 'Server check skipped (no --url)');
+    const base = url.endsWith('/') ? url : `${url}/`;
+    try {
+        const res = await fetch(`${base}.account/`, {
+            headers: { Accept: 'application/json' },
+            signal: AbortSignal.timeout(5000),
+        });
+        return check(res.ok, `Server reachable at ${base}`);
+    }
+    catch {
+        return check(false, `Server unreachable at ${base}`);
+    }
+}
+function checkFileExists(filePath, label) {
+    return check((0, fs_1.existsSync)((0, path_1.resolve)(filePath)), label);
+}
+function checkBuildFreshness() {
+    const distPath = (0, path_1.resolve)('dist');
+    const srcPath = (0, path_1.resolve)('src');
+    if (!(0, fs_1.existsSync)(distPath)) {
+        return check(false, 'dist/ exists');
+    }
+    try {
+        const distStat = (0, fs_1.statSync)(distPath);
+        const srcStat = (0, fs_1.statSync)(srcPath);
+        const fresh = distStat.mtimeMs >= srcStat.mtimeMs;
+        return check(fresh, fresh ? 'dist/ up to date' : 'dist/ outdated (run yarn build)');
+    }
+    catch {
+        return check(true, 'dist/ exists');
+    }
+}
+function checkPortAvailable(port) {
+    try {
+        const output = (0, child_process_1.execSync)(`lsof -i :${port} -t 2>/dev/null`, { encoding: 'utf-8' }).trim();
+        if (output) {
+            return check(false, `Port ${port} in use (PID: ${output.split('\n')[0]})`);
+        }
+        return check(true, `Port ${port} available`);
+    }
+    catch {
+        // lsof returns non-zero when no process found — port is free
+        return check(true, `Port ${port} available`);
+    }
+}
+exports.doctorCommand = {
+    command: 'doctor',
+    describe: 'Check environment and diagnose issues',
+    builder: (yargs) => yargs
+        .option('url', {
+        alias: 'u',
+        type: 'string',
+        description: 'Server URL to check connectivity',
+    }),
+    handler: async (argv) => {
+        console.log('Running diagnostics...\n');
+        const results = [];
+        results.push(await checkNodeVersion());
+        results.push(checkPortAvailable(3000));
+        results.push(await checkServerReachable(argv.url));
+        results.push(checkFileExists('.env.local', '.env.local found'));
+        results.push(checkFileExists('.env.server', '.env.server found'));
+        results.push(checkFileExists('config/local.json', 'config/local.json found'));
+        results.push(checkFileExists('config/cloud.json', 'config/cloud.json found'));
+        results.push(checkFileExists('node_modules', 'node_modules/ exists'));
+        results.push(checkBuildFreshness());
+        const failed = results.filter((r) => !r.ok);
+        console.log('');
+        if (failed.length === 0) {
+            console.log('All checks passed.');
+        }
+        else {
+            console.log(`${failed.length} issue(s) found.`);
+        }
+    },
+};
+//# sourceMappingURL=doctor.js.map

package/dist/cli/commands/doctor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"doctor.js","sourceRoot":"","sources":["../../../src/cli/commands/doctor.ts"],"names":[],"mappings":";;;AACA,iDAAyC;AACzC,2BAA0C;AAC1C,+BAA+B;AAW/B,SAAS,KAAK,CAAC,EAAW,EAAE,KAAa;IACvC,MAAM,IAAI,GAAG,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;IAC5B,OAAO,CAAC,GAAG,CAAC,GAAG,IAAI,IAAI,KAAK,EAAE,CAAC,CAAC;IAChC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC;AACvB,CAAC;AAED,KAAK,UAAU,gBAAgB;IAC7B,MAAM,KAAK,GAAG,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAChE,OAAO,KAAK,CAAC,KAAK,IAAI,EAAE,EAAE,YAAY,OAAO,CAAC,QAAQ,CAAC,IAAI,SAAS,CAAC,CAAC;AACxE,CAAC;AAED,KAAK,UAAU,oBAAoB,CAAC,GAAY;IAC9C,IAAI,CAAC,GAAG;QAAE,OAAO,KAAK,CAAC,IAAI,EAAE,iCAAiC,CAAC,CAAC;IAChE,MAAM,IAAI,GAAG,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,GAAG,GAAG,CAAC;IACjD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,WAAW,EAAE;YAC1C,OAAO,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE;YACvC,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC;SAClC,CAAC,CAAC;QACH,OAAO,KAAK,CAAC,GAAG,CAAC,EAAE,EAAE,uBAAuB,IAAI,EAAE,CAAC,CAAC;IACtD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC,KAAK,EAAE,yBAAyB,IAAI,EAAE,CAAC,CAAC;IACvD,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CAAC,QAAgB,EAAE,KAAa;IACtD,OAAO,KAAK,CAAC,IAAA,eAAU,EAAC,IAAA,cAAO,EAAC,QAAQ,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;AACrD,CAAC;AAED,SAAS,mBAAmB;IAC1B,MAAM,QAAQ,GAAG,IAAA,cAAO,EAAC,MAAM,CAAC,CAAC;IACjC,MAAM,OAAO,GAAG,IAAA,cAAO,EAAC,KAAK,CAAC,CAAC;IAC/B,IAAI,CAAC,IAAA,eAAU,EAAC,QAAQ,CAAC,EAAE,CAAC;QAC1B,OAAO,KAAK,CAAC,KAAK,EAAE,cAAc,CAAC,CAAC;IACtC,CAAC;IACD,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,IAAA,aAAQ,EAAC,QAAQ,CAAC,CAAC;QACpC,MAAM,OAAO,GAAG,IAAA,aAAQ,EAAC,OAAO,CAAC,CAAC;QAClC,MAAM,KAAK,GAAG,QAAQ,CAAC,OAAO,IAAI,OAAO,CAAC,OAAO,CAAC;QAClD,OAAO,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,iCAAiC,CAAC,CAAC;IACtF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;IACrC,CAAC;AACH,CAAC;AAED,SAAS,kBAAkB,CAAC,IAAY;IACtC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAA,wBAAQ,EAAC,YAAY,IAAI,iBAAiB,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACzF,IAAI,MAAM,EAAE,CAAC;YACX,OAAO,KAAK,CAAC,KAAK,EAAE,QAAQ,IAAI,iBAAiB,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QAC7E,CAAC;QACD,OAAO,KAAK,CAAC,IAAI,EAAE,QAAQ,IAAI,YAAY,CAAC,CAAC;IAC/C,CAAC;IAAC,MAAM,CAAC;QACP,6DAA6D;QAC7D,OAAO,KAAK,CAAC,IAAI,EAAE,QAAQ,IAAI,YAAY,CAAC,CAAC;IAC/C,CAAC;AACH,CAAC;AAEY,QAAA,aAAa,GAAsC;IAC9D,OAAO,EAAE,QAAQ;IACjB,QAAQ,EAAE,uCAAuC;IACjD,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,CACjB,KAAK;SACF,MAAM,CAAC,KAAK,EAAE;QACb,KAAK,EAAE,GAAG;QACV,IAAI,EAAE,QAAQ;QACd,WAAW,EAAE,kCAAkC;KAChD,CAAC;IACN,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;QACtB,OAAO,CAAC,GAAG,CAAC,0BAA0B,CAAC,CAAC;QAExC,MAAM,OAAO,GAAkB,EAAE,CAAC;QAElC,OAAO,CAAC,IAAI,CAAC,MAAM,gBAAgB,EAAE,CAAC,CAAC;QACvC,OAAO,CAAC,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC;QACvC,OAAO,CAAC,IAAI,CAAC,MAAM,oBAAoB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QACnD,OAAO,CAAC,IAAI,CAAC,eAAe,CAAC,YAAY,EAAE,kBAAkB,CAAC,CAAC,CAAC;QAChE,OAAO,CAAC,IAAI,CAAC,eAAe,CAAC,aAAa,EAAE,mBAAmB,CAAC,CAAC,CAAC;QAClE,OAAO,CAAC,IAAI,CAAC,eAAe,CAAC,mBAAmB,EAAE,yBAAyB,CAAC,CAAC,CAAC;QAC9E,OAAO,CAAC,IAAI,CAAC,eAAe,CAAC,mBAAmB,EAAE,yBAAyB,CAAC,CAAC,CAAC;QAC9E,OAAO,CAAC,IAAI,CAAC,eAAe,CAAC,cAAc,EAAE,sBAAsB,CAAC,CAAC,CAAC;QACtE,OAAO,CAAC,IAAI,CAAC,mBAAmB,EAAE,CAAC,CAAC;QAEpC,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAC5C,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACxB,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC;QACpC,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,MAAM,kBAAkB,CAAC,CAAC;QAClD,CAAC;IACH,CAAC;CACF,CAAC","sourcesContent":["import type { CommandModule } from 'yargs';\nimport { execSync } from 'child_process';\nimport { existsSync, statSync } from 'fs';\nimport { resolve } from 'path';\n\ninterface DoctorArgs {\n  url?: string;\n}\n\ninterface CheckResult {\n  ok: boolean;\n  label: string;\n}\n\nfunction check(ok: boolean, label: string): CheckResult {\n  const icon = ok ? '✓' : '✗';\n  console.log(`${icon} ${label}`);\n  return { ok, label };\n}\n\nasync function checkNodeVersion(): Promise<CheckResult> {\n  const major = parseInt(process.versions.node.split('.')[0], 10);\n  return check(major >= 18, `Node.js v${process.versions.node} (≥ 18)`);\n}\n\nasync function checkServerReachable(url?: string): Promise<CheckResult> {\n  if (!url) return check(true, 'Server check skipped (no --url)');\n  const base = url.endsWith('/') ? url : `${url}/`;\n  try {\n    const res = await fetch(`${base}.account/`, {\n      headers: { Accept: 'application/json' },\n      signal: AbortSignal.timeout(5000),\n    });\n    return check(res.ok, `Server reachable at ${base}`);\n  } catch {\n    return check(false, `Server unreachable at ${base}`);\n  }\n}\n\nfunction checkFileExists(filePath: string, label: string): CheckResult {\n  return check(existsSync(resolve(filePath)), label);\n}\n\nfunction checkBuildFreshness(): CheckResult {\n  const distPath = resolve('dist');\n  const srcPath = resolve('src');\n  if (!existsSync(distPath)) {\n    return check(false, 'dist/ exists');\n  }\n  try {\n    const distStat = statSync(distPath);\n    const srcStat = statSync(srcPath);\n    const fresh = distStat.mtimeMs >= srcStat.mtimeMs;\n    return check(fresh, fresh ? 'dist/ up to date' : 'dist/ outdated (run yarn build)');\n  } catch {\n    return check(true, 'dist/ exists');\n  }\n}\n\nfunction checkPortAvailable(port: number): CheckResult {\n  try {\n    const output = execSync(`lsof -i :${port} -t 2>/dev/null`, { encoding: 'utf-8' }).trim();\n    if (output) {\n      return check(false, `Port ${port} in use (PID: ${output.split('\\n')[0]})`);\n    }\n    return check(true, `Port ${port} available`);\n  } catch {\n    // lsof returns non-zero when no process found — port is free\n    return check(true, `Port ${port} available`);\n  }\n}\n\nexport const doctorCommand: CommandModule<object, DoctorArgs> = {\n  command: 'doctor',\n  describe: 'Check environment and diagnose issues',\n  builder: (yargs) =>\n    yargs\n      .option('url', {\n        alias: 'u',\n        type: 'string',\n        description: 'Server URL to check connectivity',\n      }),\n  handler: async (argv) => {\n    console.log('Running diagnostics...\\n');\n\n    const results: CheckResult[] = [];\n\n    results.push(await checkNodeVersion());\n    results.push(checkPortAvailable(3000));\n    results.push(await checkServerReachable(argv.url));\n    results.push(checkFileExists('.env.local', '.env.local found'));\n    results.push(checkFileExists('.env.server', '.env.server found'));\n    results.push(checkFileExists('config/local.json', 'config/local.json found'));\n    results.push(checkFileExists('config/cloud.json', 'config/cloud.json found'));\n    results.push(checkFileExists('node_modules', 'node_modules/ exists'));\n    results.push(checkBuildFreshness());\n\n    const failed = results.filter((r) => !r.ok);\n    console.log('');\n    if (failed.length === 0) {\n      console.log('All checks passed.');\n    } else {\n      console.log(`${failed.length} issue(s) found.`);\n    }\n  },\n};\n"]}

package/dist/cli/commands/pod.d.ts

@@ -0,0 +1,6 @@
+import type { CommandModule } from 'yargs';
+interface PodArgs {
+    url?: string;
+}
+export declare const podCommand: CommandModule<object, PodArgs>;
+export {};

package/dist/cli/commands/pod.js

@@ -0,0 +1,124 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.podCommand = void 0;
+const css_account_1 = require("../lib/css-account");
+const credentials_store_1 = require("../lib/credentials-store");
+function resolveUrl(url, credUrl) {
+    const raw = url || credUrl || process.env.CSS_BASE_URL || 'http://localhost:3000';
+    return raw.endsWith('/') ? raw : `${raw}/`;
+}
+/**
+ * Try to login via email/password (CSS Account Token) or fall back to
+ * client credentials from ~/.xpod/credentials.json.
+ *
+ * Returns { token, mode } where mode indicates which auth was used.
+ */
+async function resolveLogin(email, password, baseUrl) {
+    if (email && password) {
+        if (!(await (0, css_account_1.checkServer)(baseUrl))) {
+            console.error(`Cannot reach server at ${baseUrl}`);
+            process.exit(1);
+        }
+        const token = await (0, css_account_1.login)(email, password, baseUrl);
+        if (!token) {
+            console.error('Login failed. Check email/password.');
+            process.exit(1);
+        }
+        return { token, mode: 'account' };
+    }
+    // Fall back to credentials store — get CSS Account Token via OIDC isn't possible,
+    // but pod/account commands need CSS Account Token. For now, require email/password
+    // for commands that use .account/ API.
+    console.error('This command requires --email and --password (or run `xpod auth create-credentials` for other commands).');
+    console.error('Pod management commands use the CSS Account API which requires email/password authentication.');
+    process.exit(1);
+}
+const podCreateCommand = {
+    command: 'create <name>',
+    describe: 'Create a new pod',
+    builder: (yargs) => yargs
+        .positional('name', { type: 'string', demandOption: true, description: 'Pod name' })
+        .option('email', { type: 'string', description: 'Account email' })
+        .option('password', { type: 'string', description: 'Account password' }),
+    handler: async (argv) => {
+        const creds = (0, credentials_store_1.loadCredentials)();
+        const baseUrl = resolveUrl(argv.url, creds?.url);
+        const { token } = await resolveLogin(argv.email, argv.password, baseUrl);
+        const data = await (0, css_account_1.getAccountData)(token, baseUrl);
+        if (!data?.controls.pod) {
+            console.error('Cannot find pod creation endpoint.');
+            process.exit(1);
+        }
+        const result = await (0, css_account_1.createPod)(token, data.controls.pod, argv.name);
+        if (!result) {
+            console.error(`Failed to create pod "${argv.name}".`);
+            process.exit(1);
+        }
+        console.log(`Pod created:`);
+        console.log(`  URL:   ${result.podUrl}`);
+        console.log(`  WebID: ${result.webId}`);
+    },
+};
+const podListCommand = {
+    command: 'list',
+    describe: 'List all pods for the account',
+    builder: (yargs) => yargs
+        .option('email', { type: 'string', description: 'Account email' })
+        .option('password', { type: 'string', description: 'Account password' }),
+    handler: async (argv) => {
+        const creds = (0, credentials_store_1.loadCredentials)();
+        const baseUrl = resolveUrl(argv.url, creds?.url);
+        const { token } = await resolveLogin(argv.email, argv.password, baseUrl);
+        const data = await (0, css_account_1.getAccountData)(token, baseUrl);
+        if (!data) {
+            console.error('Failed to get account info.');
+            process.exit(1);
+        }
+        const podEntries = Object.entries(data.pods);
+        if (podEntries.length === 0) {
+            console.log('No pods found.');
+            return;
+        }
+        console.log(`Found ${podEntries.length} pod(s):\n`);
+        for (const [url, name] of podEntries) {
+            console.log(`  ${name}`);
+            console.log(`    URL: ${url}`);
+        }
+        const webIdEntries = Object.entries(data.webIds);
+        if (webIdEntries.length > 0) {
+            console.log(`\nWebIDs:`);
+            for (const [url] of webIdEntries) {
+                console.log(`  ${url}`);
+            }
+        }
+    },
+};
+const podDeleteCommand = {
+    command: 'delete <name>',
+    describe: 'Delete a pod (not yet supported)',
+    builder: (yargs) => yargs
+        .positional('name', { type: 'string', demandOption: true, description: 'Pod name' })
+        .option('email', { type: 'string', description: 'Account email' })
+        .option('password', { type: 'string', description: 'Account password' }),
+    handler: async () => {
+        console.error('Pod deletion is not yet supported by CSS.');
+        console.error('Please delete the pod manually through the server admin interface.');
+        process.exit(1);
+    },
+};
+exports.podCommand = {
+    command: 'pod',
+    describe: 'Pod management',
+    builder: (yargs) => yargs
+        .option('url', {
+        alias: 'u',
+        type: 'string',
+        description: 'Server base URL',
+    })
+        .command(podCreateCommand)
+        .command(podListCommand)
+        .command(podDeleteCommand)
+        .demandCommand(1, 'Please specify a pod subcommand'),
+    handler: () => { },
+};
+//# sourceMappingURL=pod.js.map

package/dist/cli/commands/pod.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pod.js","sourceRoot":"","sources":["../../../src/cli/commands/pod.ts"],"names":[],"mappings":";;;AACA,oDAK4B;AAC5B,gEAA2D;AAe3D,SAAS,UAAU,CAAC,GAAY,EAAE,OAAgB;IAChD,MAAM,GAAG,GAAG,GAAG,IAAI,OAAO,IAAI,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,uBAAuB,CAAC;IAClF,OAAO,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,GAAG,GAAG,CAAC;AAC7C,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,YAAY,CACzB,KAAyB,EACzB,QAA4B,EAC5B,OAAe;IAEf,IAAI,KAAK,IAAI,QAAQ,EAAE,CAAC;QACtB,IAAI,CAAC,CAAC,MAAM,IAAA,yBAAW,EAAC,OAAO,CAAC,CAAC,EAAE,CAAC;YAClC,OAAO,CAAC,KAAK,CAAC,0BAA0B,OAAO,EAAE,CAAC,CAAC;YACnD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,IAAA,mBAAK,EAAC,KAAK,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;QACpD,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,CAAC,KAAK,CAAC,qCAAqC,CAAC,CAAC;YACrD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QACD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;IACpC,CAAC;IAED,kFAAkF;IAClF,mFAAmF;IACnF,uCAAuC;IACvC,OAAO,CAAC,KAAK,CAAC,0GAA0G,CAAC,CAAC;IAC1H,OAAO,CAAC,KAAK,CAAC,+FAA+F,CAAC,CAAC;IAC/G,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED,MAAM,gBAAgB,GAA0C;IAC9D,OAAO,EAAE,eAAe;IACxB,QAAQ,EAAE,kBAAkB;IAC5B,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,CACjB,KAAK;SACF,UAAU,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,YAAY,EAAE,IAAI,EAAE,WAAW,EAAE,UAAU,EAAE,CAAC;SACnF,MAAM,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,eAAe,EAAE,CAAC;SACjE,MAAM,CAAC,UAAU,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,kBAAkB,EAAE,CAAC;IAC5E,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;QACtB,MAAM,KAAK,GAAG,IAAA,mCAAe,GAAE,CAAC;QAChC,MAAM,OAAO,GAAG,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;QACjD,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAEzE,MAAM,IAAI,GAAG,MAAM,IAAA,4BAAc,EAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QAClD,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,GAAG,EAAE,CAAC;YACxB,OAAO,CAAC,KAAK,CAAC,oCAAoC,CAAC,CAAC;YACpD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,IAAA,uBAAS,EAAC,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QACpE,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,CAAC,KAAK,CAAC,yBAAyB,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC;YACtD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QAED,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;QAC5B,OAAO,CAAC,GAAG,CAAC,YAAY,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;QACzC,OAAO,CAAC,GAAG,CAAC,YAAY,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;IAC1C,CAAC;CACF,CAAC;AAEF,MAAM,cAAc,GAAwC;IAC1D,OAAO,EAAE,MAAM;IACf,QAAQ,EAAE,+BAA+B;IACzC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,CACjB,KAAK;SACF,MAAM,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,eAAe,EAAE,CAAC;SACjE,MAAM,CAAC,UAAU,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,kBAAkB,EAAE,CAAC;IAC5E,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;QACtB,MAAM,KAAK,GAAG,IAAA,mCAAe,GAAE,CAAC;QAChC,MAAM,OAAO,GAAG,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;QACjD,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAEzE,MAAM,IAAI,GAAG,MAAM,IAAA,4BAAc,EAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QAClD,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,OAAO,CAAC,KAAK,CAAC,6BAA6B,CAAC,CAAC;YAC7C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QAED,MAAM,UAAU,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7C,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC5B,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;YAC9B,OAAO;QACT,CAAC;QAED,OAAO,CAAC,GAAG,CAAC,SAAS,UAAU,CAAC,MAAM,YAAY,CAAC,CAAC;QACpD,KAAK,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,UAAU,EAAE,CAAC;YACrC,OAAO,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;YACzB,OAAO,CAAC,GAAG,CAAC,YAAY,GAAG,EAAE,CAAC,CAAC;QACjC,CAAC;QAED,MAAM,YAAY,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACjD,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC5B,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;YACzB,KAAK,MAAM,CAAC,GAAG,CAAC,IAAI,YAAY,EAAE,CAAC;gBACjC,OAAO,CAAC,GAAG,CAAC,KAAK,GAAG,EAAE,CAAC,CAAC;YAC1B,CAAC;QACH,CAAC;IACH,CAAC;CACF,CAAC;AAEF,MAAM,gBAAgB,GAA2D;IAC/E,OAAO,EAAE,eAAe;IACxB,QAAQ,EAAE,kCAAkC;IAC5C,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,CACjB,KAAK;SACF,UAAU,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,YAAY,EAAE,IAAI,EAAE,WAAW,EAAE,UAAU,EAAE,CAAC;SACnF,MAAM,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,eAAe,EAAE,CAAC;SACjE,MAAM,CAAC,UAAU,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,kBAAkB,EAAE,CAAC;IAC5E,OAAO,EAAE,KAAK,IAAI,EAAE;QAClB,OAAO,CAAC,KAAK,CAAC,2CAA2C,CAAC,CAAC;QAC3D,OAAO,CAAC,KAAK,CAAC,oEAAoE,CAAC,CAAC;QACpF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;CACF,CAAC;AAEW,QAAA,UAAU,GAAmC;IACxD,OAAO,EAAE,KAAK;IACd,QAAQ,EAAE,gBAAgB;IAC1B,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,CACjB,KAAK;SACF,MAAM,CAAC,KAAK,EAAE;QACb,KAAK,EAAE,GAAG;QACV,IAAI,EAAE,QAAQ;QACd,WAAW,EAAE,iBAAiB;KAC/B,CAAC;SACD,OAAO,CAAC,gBAAgB,CAAC;SACzB,OAAO,CAAC,cAAc,CAAC;SACvB,OAAO,CAAC,gBAAgB,CAAC;SACzB,aAAa,CAAC,CAAC,EAAE,iCAAiC,CAAC;IACxD,OAAO,EAAE,GAAG,EAAE,GAAE,CAAC;CAClB,CAAC","sourcesContent":["import type { CommandModule } from 'yargs';\nimport {\n  checkServer,\n  login,\n  getAccountData,\n  createPod,\n} from '../lib/css-account';\nimport { loadCredentials } from '../lib/credentials-store';\n\ninterface PodArgs {\n  url?: string;\n}\n\ninterface PodAuthArgs extends PodArgs {\n  email?: string;\n  password?: string;\n}\n\ninterface PodCreateArgs extends PodAuthArgs {\n  name: string;\n}\n\nfunction resolveUrl(url?: string, credUrl?: string): string {\n  const raw = url || credUrl || process.env.CSS_BASE_URL || 'http://localhost:3000';\n  return raw.endsWith('/') ? raw : `${raw}/`;\n}\n\n/**\n * Try to login via email/password (CSS Account Token) or fall back to\n * client credentials from ~/.xpod/credentials.json.\n *\n * Returns { token, mode } where mode indicates which auth was used.\n */\nasync function resolveLogin(\n  email: string | undefined,\n  password: string | undefined,\n  baseUrl: string,\n): Promise<{ token: string; mode: 'account' }> {\n  if (email && password) {\n    if (!(await checkServer(baseUrl))) {\n      console.error(`Cannot reach server at ${baseUrl}`);\n      process.exit(1);\n    }\n    const token = await login(email, password, baseUrl);\n    if (!token) {\n      console.error('Login failed. Check email/password.');\n      process.exit(1);\n    }\n    return { token, mode: 'account' };\n  }\n\n  // Fall back to credentials store — get CSS Account Token via OIDC isn't possible,\n  // but pod/account commands need CSS Account Token. For now, require email/password\n  // for commands that use .account/ API.\n  console.error('This command requires --email and --password (or run `xpod auth create-credentials` for other commands).');\n  console.error('Pod management commands use the CSS Account API which requires email/password authentication.');\n  process.exit(1);\n}\n\nconst podCreateCommand: CommandModule<PodArgs, PodCreateArgs> = {\n  command: 'create <name>',\n  describe: 'Create a new pod',\n  builder: (yargs) =>\n    yargs\n      .positional('name', { type: 'string', demandOption: true, description: 'Pod name' })\n      .option('email', { type: 'string', description: 'Account email' })\n      .option('password', { type: 'string', description: 'Account password' }),\n  handler: async (argv) => {\n    const creds = loadCredentials();\n    const baseUrl = resolveUrl(argv.url, creds?.url);\n    const { token } = await resolveLogin(argv.email, argv.password, baseUrl);\n\n    const data = await getAccountData(token, baseUrl);\n    if (!data?.controls.pod) {\n      console.error('Cannot find pod creation endpoint.');\n      process.exit(1);\n    }\n\n    const result = await createPod(token, data.controls.pod, argv.name);\n    if (!result) {\n      console.error(`Failed to create pod \"${argv.name}\".`);\n      process.exit(1);\n    }\n\n    console.log(`Pod created:`);\n    console.log(`  URL:   ${result.podUrl}`);\n    console.log(`  WebID: ${result.webId}`);\n  },\n};\n\nconst podListCommand: CommandModule<PodArgs, PodAuthArgs> = {\n  command: 'list',\n  describe: 'List all pods for the account',\n  builder: (yargs) =>\n    yargs\n      .option('email', { type: 'string', description: 'Account email' })\n      .option('password', { type: 'string', description: 'Account password' }),\n  handler: async (argv) => {\n    const creds = loadCredentials();\n    const baseUrl = resolveUrl(argv.url, creds?.url);\n    const { token } = await resolveLogin(argv.email, argv.password, baseUrl);\n\n    const data = await getAccountData(token, baseUrl);\n    if (!data) {\n      console.error('Failed to get account info.');\n      process.exit(1);\n    }\n\n    const podEntries = Object.entries(data.pods);\n    if (podEntries.length === 0) {\n      console.log('No pods found.');\n      return;\n    }\n\n    console.log(`Found ${podEntries.length} pod(s):\\n`);\n    for (const [url, name] of podEntries) {\n      console.log(`  ${name}`);\n      console.log(`    URL: ${url}`);\n    }\n\n    const webIdEntries = Object.entries(data.webIds);\n    if (webIdEntries.length > 0) {\n      console.log(`\\nWebIDs:`);\n      for (const [url] of webIdEntries) {\n        console.log(`  ${url}`);\n      }\n    }\n  },\n};\n\nconst podDeleteCommand: CommandModule<PodArgs, PodAuthArgs & { name: string }> = {\n  command: 'delete <name>',\n  describe: 'Delete a pod (not yet supported)',\n  builder: (yargs) =>\n    yargs\n      .positional('name', { type: 'string', demandOption: true, description: 'Pod name' })\n      .option('email', { type: 'string', description: 'Account email' })\n      .option('password', { type: 'string', description: 'Account password' }),\n  handler: async () => {\n    console.error('Pod deletion is not yet supported by CSS.');\n    console.error('Please delete the pod manually through the server admin interface.');\n    process.exit(1);\n  },\n};\n\nexport const podCommand: CommandModule<object, PodArgs> = {\n  command: 'pod',\n  describe: 'Pod management',\n  builder: (yargs) =>\n    yargs\n      .option('url', {\n        alias: 'u',\n        type: 'string',\n        description: 'Server base URL',\n      })\n      .command(podCreateCommand)\n      .command(podListCommand)\n      .command(podDeleteCommand)\n      .demandCommand(1, 'Please specify a pod subcommand'),\n  handler: () => {},\n};\n"]}

package/dist/cli/commands/start.js

@@ -83,43 +83,66 @@ exports.startCommand = {
         const cssPort = await (0, runtime_1.getFreePort)(mainPort + 1);
         const apiPort = await (0, runtime_1.getFreePort)(cssPort + 1);
         const baseUrl = process.env.CSS_BASE_URL || `http://${argv.host}:${mainPort}/`;
+        // SP 模式：全部通过环境变量配置（.env.local 或 --env 参数）
+        // XPOD_SERVICE_TOKEN, XPOD_NODE_ID, XPOD_NODE_TOKEN, XPOD_CLOUD_API_ENDPOINT, CSS_IDP_URL
+        const idpUrl = process.env.CSS_IDP_URL || process.env.XPOD_CLOUD_API_ENDPOINT;
         console.log('Starting xpod...');
         console.log(`  Gateway: ${baseUrl} (${argv.host}:${mainPort})`);
         console.log(`  CSS (internal): http://localhost:${cssPort}`);
         console.log(`  API (internal): http://localhost:${apiPort}`);
+        if (idpUrl) {
+            console.log(`  SP mode: Cloud IdP = ${idpUrl}`);
+        }
         const supervisor = new supervisor_1.Supervisor();
         const cssBinary = require.resolve('@solid/community-server/bin/server.js');
         const cssModuleRoot = path_1.default.dirname(require.resolve('@solid/community-server/package.json'));
+        const cssArgs = [cssBinary, '-c', configPath, '-m', cssModuleRoot, '-p', cssPort.toString(), '-b', baseUrl];
+        if (idpUrl) {
+            cssArgs.push('--idpUrl', idpUrl);
+        }
         supervisor.register({
             name: 'css',
             command: process.execPath,
-            args: [cssBinary, '-c', configPath, '-m', cssModuleRoot, '-p', cssPort.toString(), '-b', baseUrl],
+            args: cssArgs,
             env: {
                 ...process.env,
                 CSS_PORT: cssPort.toString(),
                 CSS_BASE_URL: baseUrl,
             },
         });
+        const isDevMode = __filename.endsWith('.ts');
+        const apiArgs = isDevMode
+            ? [
+                '-r',
+                require.resolve('ts-node/register/transpile-only'),
+                path_1.default.resolve(__dirname, '..', '..', 'api', 'main.ts'),
+            ]
+            : [path_1.default.resolve(__dirname, '..', '..', 'api', 'main.js')];
         supervisor.register({
             name: 'api',
             command: process.execPath,
-            args: [path_1.default.resolve(__dirname, '..', '..', 'api', 'main.js')],
+            args: apiArgs,
             env: {
                 ...process.env,
                 API_PORT: apiPort.toString(),
                 XPOD_MAIN_PORT: mainPort.toString(),
                 CSS_INTERNAL_URL: `http://localhost:${cssPort}`,
                 CSS_BASE_URL: baseUrl,
-                CSS_TOKEN_ENDPOINT: `${baseUrl}.oidc/token`,
+                CSS_TOKEN_ENDPOINT: idpUrl
+                    ? `${idpUrl.replace(/\/$/, '')}/.oidc/token`
+                    : `${baseUrl}.oidc/token`,
             },
         });
-        const proxy = new runtime_1.GatewayProxy(mainPort, supervisor);
+        const proxy = new runtime_1.GatewayProxy(mainPort, supervisor, '0.0.0.0', {
+            exitOnStop: true,
+            baseUrl,
+        });
         proxy.setTargets({
             css: `http://localhost:${cssPort}`,
             api: `http://localhost:${apiPort}`,
         });
         await supervisor.startAll();
-        proxy.start();
+        await proxy.start();
         const shutdown = async (signal) => {
             console.log(`\nReceived ${signal}, shutting down...`);
             await supervisor.stopAll();

package/dist/cli/commands/start.js.map

@@ -1 +1 @@
-{"version":3,"file":"start.js","sourceRoot":"","sources":["../../../src/cli/commands/start.ts"],"names":[],"mappings":";;;;;;AACA,gDAAwB;AACxB,4CAAoB;AACpB,iDAA8C;AAC9C,2CAAwE;AAUxE,SAAS,WAAW,CAAC,OAAe;IAClC,IAAI,CAAC,YAAE,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QAC5B,OAAO,CAAC,IAAI,CAAC,uBAAuB,OAAO,EAAE,CAAC,CAAC;QAC/C,OAAO;IACT,CAAC;IACD,MAAM,OAAO,GAAG,YAAE,CAAC,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAClD,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACvC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAC5B,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAS;QAClD,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACrC,IAAI,OAAO,KAAK,CAAC,CAAC;YAAE,SAAS;QAC7B,MAAM,GAAG,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;QAC7C,IAAI,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAC9C,IACE,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;YAC9C,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,EAC9C,CAAC;YACD,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAC7B,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YACtB,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QAC3B,CAAC;IACH,CAAC;AACH,CAAC;AAEY,QAAA,YAAY,GAAqC;IAC5D,OAAO,EAAE,OAAO;IAChB,QAAQ,EAAE,qBAAqB;IAC/B,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,CACjB,KAAK;SACF,MAAM,CAAC,MAAM,EAAE;QACd,KAAK,EAAE,GAAG;QACV,IAAI,EAAE,QAAQ;QACd,OAAO,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC;QAC3B,WAAW,EAAE,UAAU;KACxB,CAAC;SACD,MAAM,CAAC,QAAQ,EAAE;QAChB,KAAK,EAAE,GAAG;QACV,IAAI,EAAE,QAAQ;QACd,WAAW,EAAE,wCAAwC;KACtD,CAAC;SACD,MAAM,CAAC,KAAK,EAAE;QACb,KAAK,EAAE,GAAG;QACV,IAAI,EAAE,QAAQ;QACd,WAAW,EAAE,mBAAmB;KACjC,CAAC;SACD,MAAM,CAAC,MAAM,EAAE;QACd,KAAK,EAAE,GAAG;QACV,IAAI,EAAE,QAAQ;QACd,WAAW,EAAE,cAAc;QAC3B,OAAO,EAAE,IAAI;KACd,CAAC;SACD,MAAM,CAAC,MAAM,EAAE;QACd,IAAI,EAAE,QAAQ;QACd,WAAW,EAAE,cAAc;QAC3B,OAAO,EAAE,WAAW;KACrB,CAAC;IACN,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;QACtB,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;YACb,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACxB,CAAC;QAED,MAAM,QAAQ,GACZ,IAAI,CAAC,IAAI,KAAK,IAAI;YAChB,CAAC,CAAC,IAAI,CAAC,IAAI;YACX,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,MAAM,EAAE,EAAE,CAAC,CAAC;QAExE,IAAI,UAAkB,CAAC;QACvB,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChB,UAAU,GAAG,IAAI,CAAC,MAAM,CAAC;QAC3B,CAAC;aAAM,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YACrB,UAAU,GAAG,cAAI,CAAC,IAAI,CAAC,sBAAY,EAAE,UAAU,IAAI,CAAC,IAAI,OAAO,CAAC,CAAC;QACnE,CAAC;aAAM,CAAC;YACN,UAAU,GAAG,cAAI,CAAC,IAAI,CAAC,sBAAY,EAAE,mBAAmB,CAAC,CAAC;QAC5D,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,IAAA,qBAAW,EAAC,QAAQ,GAAG,CAAC,CAAC,CAAC;QAChD,MAAM,OAAO,GAAG,MAAM,IAAA,qBAAW,EAAC,OAAO,GAAG,CAAC,CAAC,CAAC;QAE/C,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,UAAU,IAAI,CAAC,IAAI,IAAI,QAAQ,GAAG,CAAC;QAE/E,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;QAChC,OAAO,CAAC,GAAG,CAAC,cAAc,OAAO,KAAK,IAAI,CAAC,IAAI,IAAI,QAAQ,GAAG,CAAC,CAAC;QAChE,OAAO,CAAC,GAAG,CAAC,sCAAsC,OAAO,EAAE,CAAC,CAAC;QAC7D,OAAO,CAAC,GAAG,CAAC,sCAAsC,OAAO,EAAE,CAAC,CAAC;QAE7D,MAAM,UAAU,GAAG,IAAI,uBAAU,EAAE,CAAC;QACpC,MAAM,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC,uCAAuC,CAAC,CAAC;QAC3E,MAAM,aAAa,GAAG,cAAI,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,sCAAsC,CAAC,CAAC,CAAC;QAE5F,UAAU,CAAC,QAAQ,CAAC;YAClB,IAAI,EAAE,KAAK;YACX,OAAO,EAAE,OAAO,CAAC,QAAQ;YACzB,IAAI,EAAE,CAAC,SAAS,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,OAAO,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC;YACjG,GAAG,EAAE;gBACH,GAAG,OAAO,CAAC,GAA6B;gBACxC,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE;gBAC5B,YAAY,EAAE,OAAO;aACtB;SACF,CAAC,CAAC;QAEH,UAAU,CAAC,QAAQ,CAAC;YAClB,IAAI,EAAE,KAAK;YACX,OAAO,EAAE,OAAO,CAAC,QAAQ;YACzB,IAAI,EAAE,CAAC,cAAI,CAAC,OAAO,CAAC,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC;YAC7D,GAAG,EAAE;gBACH,GAAG,OAAO,CAAC,GAA6B;gBACxC,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE;gBAC5B,cAAc,EAAE,QAAQ,CAAC,QAAQ,EAAE;gBACnC,gBAAgB,EAAE,oBAAoB,OAAO,EAAE;gBAC/C,YAAY,EAAE,OAAO;gBACrB,kBAAkB,EAAE,GAAG,OAAO,aAAa;aAC5C;SACF,CAAC,CAAC;QAEH,MAAM,KAAK,GAAG,IAAI,sBAAY,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;QACrD,KAAK,CAAC,UAAU,CAAC;YACf,GAAG,EAAE,oBAAoB,OAAO,EAAE;YAClC,GAAG,EAAE,oBAAoB,OAAO,EAAE;SACnC,CAAC,CAAC;QAEH,MAAM,UAAU,CAAC,QAAQ,EAAE,CAAC;QAC5B,KAAK,CAAC,KAAK,EAAE,CAAC;QAEd,MAAM,QAAQ,GAAG,KAAK,EAAE,MAAc,EAAiB,EAAE;YACvD,OAAO,CAAC,GAAG,CAAC,cAAc,MAAM,oBAAoB,CAAC,CAAC;YACtD,MAAM,UAAU,CAAC,OAAO,EAAE,CAAC;YAC3B,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC,CAAC;QAEF,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC;QACjD,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;IACjD,CAAC;CACF,CAAC","sourcesContent":["import type { CommandModule } from 'yargs';\nimport path from 'path';\nimport fs from 'fs';\nimport { Supervisor } from '../../supervisor';\nimport { GatewayProxy, getFreePort, PACKAGE_ROOT } from '../../runtime';\n\ninterface StartArgs {\n  mode?: string;\n  config?: string;\n  env?: string;\n  port: number;\n  host: string;\n}\n\nfunction loadEnvFile(envPath: string): void {\n  if (!fs.existsSync(envPath)) {\n    console.warn(`Env file not found: ${envPath}`);\n    return;\n  }\n  const content = fs.readFileSync(envPath, 'utf-8');\n  for (const line of content.split('\\n')) {\n    const trimmed = line.trim();\n    if (!trimmed || trimmed.startsWith('#')) continue;\n    const eqIndex = trimmed.indexOf('=');\n    if (eqIndex === -1) continue;\n    const key = trimmed.slice(0, eqIndex).trim();\n    let value = trimmed.slice(eqIndex + 1).trim();\n    if (\n      (value.startsWith('\"') && value.endsWith('\"')) ||\n      (value.startsWith(\"'\") && value.endsWith(\"'\"))\n    ) {\n      value = value.slice(1, -1);\n    }\n    if (!process.env[key]) {\n      process.env[key] = value;\n    }\n  }\n}\n\nexport const startCommand: CommandModule<object, StartArgs> = {\n  command: 'start',\n  describe: 'Start xpod services',\n  builder: (yargs) =>\n    yargs\n      .option('mode', {\n        alias: 'm',\n        type: 'string',\n        choices: ['local', 'cloud'],\n        description: 'Run mode',\n      })\n      .option('config', {\n        alias: 'c',\n        type: 'string',\n        description: 'Path to config file (overrides --mode)',\n      })\n      .option('env', {\n        alias: 'e',\n        type: 'string',\n        description: 'Path to .env file',\n      })\n      .option('port', {\n        alias: 'p',\n        type: 'number',\n        description: 'Gateway port',\n        default: 3000,\n      })\n      .option('host', {\n        type: 'string',\n        description: 'Gateway host',\n        default: 'localhost',\n      }),\n  handler: async (argv) => {\n    if (argv.env) {\n      loadEnvFile(argv.env);\n    }\n\n    const mainPort =\n      argv.port !== 3000\n        ? argv.port\n        : parseInt(process.env.XPOD_PORT ?? process.env.PORT ?? '3000', 10);\n\n    let configPath: string;\n    if (argv.config) {\n      configPath = argv.config;\n    } else if (argv.mode) {\n      configPath = path.join(PACKAGE_ROOT, `config/${argv.mode}.json`);\n    } else {\n      configPath = path.join(PACKAGE_ROOT, 'config/local.json');\n    }\n\n    const cssPort = await getFreePort(mainPort + 1);\n    const apiPort = await getFreePort(cssPort + 1);\n\n    const baseUrl = process.env.CSS_BASE_URL || `http://${argv.host}:${mainPort}/`;\n\n    console.log('Starting xpod...');\n    console.log(`  Gateway: ${baseUrl} (${argv.host}:${mainPort})`);\n    console.log(`  CSS (internal): http://localhost:${cssPort}`);\n    console.log(`  API (internal): http://localhost:${apiPort}`);\n\n    const supervisor = new Supervisor();\n    const cssBinary = require.resolve('@solid/community-server/bin/server.js');\n    const cssModuleRoot = path.dirname(require.resolve('@solid/community-server/package.json'));\n\n    supervisor.register({\n      name: 'css',\n      command: process.execPath,\n      args: [cssBinary, '-c', configPath, '-m', cssModuleRoot, '-p', cssPort.toString(), '-b', baseUrl],\n      env: {\n        ...process.env as Record<string, string>,\n        CSS_PORT: cssPort.toString(),\n        CSS_BASE_URL: baseUrl,\n      },\n    });\n\n    supervisor.register({\n      name: 'api',\n      command: process.execPath,\n      args: [path.resolve(__dirname, '..', '..', 'api', 'main.js')],\n      env: {\n        ...process.env as Record<string, string>,\n        API_PORT: apiPort.toString(),\n        XPOD_MAIN_PORT: mainPort.toString(),\n        CSS_INTERNAL_URL: `http://localhost:${cssPort}`,\n        CSS_BASE_URL: baseUrl,\n        CSS_TOKEN_ENDPOINT: `${baseUrl}.oidc/token`,\n      },\n    });\n\n    const proxy = new GatewayProxy(mainPort, supervisor);\n    proxy.setTargets({\n      css: `http://localhost:${cssPort}`,\n      api: `http://localhost:${apiPort}`,\n    });\n\n    await supervisor.startAll();\n    proxy.start();\n\n    const shutdown = async (signal: string): Promise<void> => {\n      console.log(`\\nReceived ${signal}, shutting down...`);\n      await supervisor.stopAll();\n      process.exit(0);\n    };\n\n    process.on('SIGTERM', () => shutdown('SIGTERM'));\n    process.on('SIGINT', () => shutdown('SIGINT'));\n  },\n};\n"]}
+{"version":3,"file":"start.js","sourceRoot":"","sources":["../../../src/cli/commands/start.ts"],"names":[],"mappings":";;;;;;AACA,gDAAwB;AACxB,4CAAoB;AACpB,iDAA8C;AAC9C,2CAAwE;AAUxE,SAAS,WAAW,CAAC,OAAe;IAClC,IAAI,CAAC,YAAE,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QAC5B,OAAO,CAAC,IAAI,CAAC,uBAAuB,OAAO,EAAE,CAAC,CAAC;QAC/C,OAAO;IACT,CAAC;IACD,MAAM,OAAO,GAAG,YAAE,CAAC,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAClD,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACvC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAC5B,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAS;QAClD,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACrC,IAAI,OAAO,KAAK,CAAC,CAAC;YAAE,SAAS;QAC7B,MAAM,GAAG,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;QAC7C,IAAI,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAC9C,IACE,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;YAC9C,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,EAC9C,CAAC;YACD,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAC7B,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YACtB,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QAC3B,CAAC;IACH,CAAC;AACH,CAAC;AAEY,QAAA,YAAY,GAAqC;IAC5D,OAAO,EAAE,OAAO;IAChB,QAAQ,EAAE,qBAAqB;IAC/B,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,CACjB,KAAK;SACF,MAAM,CAAC,MAAM,EAAE;QACd,KAAK,EAAE,GAAG;QACV,IAAI,EAAE,QAAQ;QACd,OAAO,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC;QAC3B,WAAW,EAAE,UAAU;KACxB,CAAC;SACD,MAAM,CAAC,QAAQ,EAAE;QAChB,KAAK,EAAE,GAAG;QACV,IAAI,EAAE,QAAQ;QACd,WAAW,EAAE,wCAAwC;KACtD,CAAC;SACD,MAAM,CAAC,KAAK,EAAE;QACb,KAAK,EAAE,GAAG;QACV,IAAI,EAAE,QAAQ;QACd,WAAW,EAAE,mBAAmB;KACjC,CAAC;SACD,MAAM,CAAC,MAAM,EAAE;QACd,KAAK,EAAE,GAAG;QACV,IAAI,EAAE,QAAQ;QACd,WAAW,EAAE,cAAc;QAC3B,OAAO,EAAE,IAAI;KACd,CAAC;SACD,MAAM,CAAC,MAAM,EAAE;QACd,IAAI,EAAE,QAAQ;QACd,WAAW,EAAE,cAAc;QAC3B,OAAO,EAAE,WAAW;KACrB,CAAC;IACN,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;QACtB,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;YACb,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACxB,CAAC;QAED,MAAM,QAAQ,GACZ,IAAI,CAAC,IAAI,KAAK,IAAI;YAChB,CAAC,CAAC,IAAI,CAAC,IAAI;YACX,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,MAAM,EAAE,EAAE,CAAC,CAAC;QAExE,IAAI,UAAkB,CAAC;QACvB,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChB,UAAU,GAAG,IAAI,CAAC,MAAM,CAAC;QAC3B,CAAC;aAAM,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YACrB,UAAU,GAAG,cAAI,CAAC,IAAI,CAAC,sBAAY,EAAE,UAAU,IAAI,CAAC,IAAI,OAAO,CAAC,CAAC;QACnE,CAAC;aAAM,CAAC;YACN,UAAU,GAAG,cAAI,CAAC,IAAI,CAAC,sBAAY,EAAE,mBAAmB,CAAC,CAAC;QAC5D,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,IAAA,qBAAW,EAAC,QAAQ,GAAG,CAAC,CAAC,CAAC;QAChD,MAAM,OAAO,GAAG,MAAM,IAAA,qBAAW,EAAC,OAAO,GAAG,CAAC,CAAC,CAAC;QAE/C,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,UAAU,IAAI,CAAC,IAAI,IAAI,QAAQ,GAAG,CAAC;QAE/E,0CAA0C;QAC1C,0FAA0F;QAC1F,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC;QAE9E,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;QAChC,OAAO,CAAC,GAAG,CAAC,cAAc,OAAO,KAAK,IAAI,CAAC,IAAI,IAAI,QAAQ,GAAG,CAAC,CAAC;QAChE,OAAO,CAAC,GAAG,CAAC,sCAAsC,OAAO,EAAE,CAAC,CAAC;QAC7D,OAAO,CAAC,GAAG,CAAC,sCAAsC,OAAO,EAAE,CAAC,CAAC;QAC7D,IAAI,MAAM,EAAE,CAAC;YACX,OAAO,CAAC,GAAG,CAAC,0BAA0B,MAAM,EAAE,CAAC,CAAC;QAClD,CAAC;QAED,MAAM,UAAU,GAAG,IAAI,uBAAU,EAAE,CAAC;QACpC,MAAM,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC,uCAAuC,CAAC,CAAC;QAC3E,MAAM,aAAa,GAAG,cAAI,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,sCAAsC,CAAC,CAAC,CAAC;QAE5F,MAAM,OAAO,GAAG,CAAC,SAAS,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,OAAO,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;QAC5G,IAAI,MAAM,EAAE,CAAC;YACX,OAAO,CAAC,IAAI,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;QACnC,CAAC;QAED,UAAU,CAAC,QAAQ,CAAC;YAClB,IAAI,EAAE,KAAK;YACX,OAAO,EAAE,OAAO,CAAC,QAAQ;YACzB,IAAI,EAAE,OAAO;YACb,GAAG,EAAE;gBACH,GAAG,OAAO,CAAC,GAA6B;gBACxC,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE;gBAC5B,YAAY,EAAE,OAAO;aACtB;SACF,CAAC,CAAC;QAEH,MAAM,SAAS,GAAG,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC7C,MAAM,OAAO,GAAG,SAAS;YACvB,CAAC,CAAC;gBACE,IAAI;gBACJ,OAAO,CAAC,OAAO,CAAC,iCAAiC,CAAC;gBAClD,cAAI,CAAC,OAAO,CAAC,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,CAAC;aACtD;YACH,CAAC,CAAC,CAAC,cAAI,CAAC,OAAO,CAAC,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC;QAE5D,UAAU,CAAC,QAAQ,CAAC;YAClB,IAAI,EAAE,KAAK;YACX,OAAO,EAAE,OAAO,CAAC,QAAQ;YACzB,IAAI,EAAE,OAAO;YACb,GAAG,EAAE;gBACH,GAAG,OAAO,CAAC,GAA6B;gBACxC,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE;gBAC5B,cAAc,EAAE,QAAQ,CAAC,QAAQ,EAAE;gBACnC,gBAAgB,EAAE,oBAAoB,OAAO,EAAE;gBAC/C,YAAY,EAAE,OAAO;gBACrB,kBAAkB,EAAE,MAAM;oBACxB,CAAC,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,cAAc;oBAC5C,CAAC,CAAC,GAAG,OAAO,aAAa;aAC5B;SACF,CAAC,CAAC;QAEH,MAAM,KAAK,GAAG,IAAI,sBAAY,CAAC,QAAQ,EAAE,UAAU,EAAE,SAAS,EAAE;YAC9D,UAAU,EAAE,IAAI;YAChB,OAAO;SACR,CAAC,CAAC;QACH,KAAK,CAAC,UAAU,CAAC;YACf,GAAG,EAAE,oBAAoB,OAAO,EAAE;YAClC,GAAG,EAAE,oBAAoB,OAAO,EAAE;SACnC,CAAC,CAAC;QAEH,MAAM,UAAU,CAAC,QAAQ,EAAE,CAAC;QAC5B,MAAM,KAAK,CAAC,KAAK,EAAE,CAAC;QAEpB,MAAM,QAAQ,GAAG,KAAK,EAAE,MAAc,EAAiB,EAAE;YACvD,OAAO,CAAC,GAAG,CAAC,cAAc,MAAM,oBAAoB,CAAC,CAAC;YACtD,MAAM,UAAU,CAAC,OAAO,EAAE,CAAC;YAC3B,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC,CAAC;QAEF,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC;QACjD,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;IACjD,CAAC;CACF,CAAC","sourcesContent":["import type { CommandModule } from 'yargs';\nimport path from 'path';\nimport fs from 'fs';\nimport { Supervisor } from '../../supervisor';\nimport { GatewayProxy, getFreePort, PACKAGE_ROOT } from '../../runtime';\n\ninterface StartArgs {\n  mode?: string;\n  config?: string;\n  env?: string;\n  port: number;\n  host: string;\n}\n\nfunction loadEnvFile(envPath: string): void {\n  if (!fs.existsSync(envPath)) {\n    console.warn(`Env file not found: ${envPath}`);\n    return;\n  }\n  const content = fs.readFileSync(envPath, 'utf-8');\n  for (const line of content.split('\\n')) {\n    const trimmed = line.trim();\n    if (!trimmed || trimmed.startsWith('#')) continue;\n    const eqIndex = trimmed.indexOf('=');\n    if (eqIndex === -1) continue;\n    const key = trimmed.slice(0, eqIndex).trim();\n    let value = trimmed.slice(eqIndex + 1).trim();\n    if (\n      (value.startsWith('\"') && value.endsWith('\"')) ||\n      (value.startsWith(\"'\") && value.endsWith(\"'\"))\n    ) {\n      value = value.slice(1, -1);\n    }\n    if (!process.env[key]) {\n      process.env[key] = value;\n    }\n  }\n}\n\nexport const startCommand: CommandModule<object, StartArgs> = {\n  command: 'start',\n  describe: 'Start xpod services',\n  builder: (yargs) =>\n    yargs\n      .option('mode', {\n        alias: 'm',\n        type: 'string',\n        choices: ['local', 'cloud'],\n        description: 'Run mode',\n      })\n      .option('config', {\n        alias: 'c',\n        type: 'string',\n        description: 'Path to config file (overrides --mode)',\n      })\n      .option('env', {\n        alias: 'e',\n        type: 'string',\n        description: 'Path to .env file',\n      })\n      .option('port', {\n        alias: 'p',\n        type: 'number',\n        description: 'Gateway port',\n        default: 3000,\n      })\n      .option('host', {\n        type: 'string',\n        description: 'Gateway host',\n        default: 'localhost',\n      }),\n  handler: async (argv) => {\n    if (argv.env) {\n      loadEnvFile(argv.env);\n    }\n\n    const mainPort =\n      argv.port !== 3000\n        ? argv.port\n        : parseInt(process.env.XPOD_PORT ?? process.env.PORT ?? '3000', 10);\n\n    let configPath: string;\n    if (argv.config) {\n      configPath = argv.config;\n    } else if (argv.mode) {\n      configPath = path.join(PACKAGE_ROOT, `config/${argv.mode}.json`);\n    } else {\n      configPath = path.join(PACKAGE_ROOT, 'config/local.json');\n    }\n\n    const cssPort = await getFreePort(mainPort + 1);\n    const apiPort = await getFreePort(cssPort + 1);\n\n    const baseUrl = process.env.CSS_BASE_URL || `http://${argv.host}:${mainPort}/`;\n\n    // SP 模式：全部通过环境变量配置（.env.local 或 --env 参数）\n    // XPOD_SERVICE_TOKEN, XPOD_NODE_ID, XPOD_NODE_TOKEN, XPOD_CLOUD_API_ENDPOINT, CSS_IDP_URL\n    const idpUrl = process.env.CSS_IDP_URL || process.env.XPOD_CLOUD_API_ENDPOINT;\n\n    console.log('Starting xpod...');\n    console.log(`  Gateway: ${baseUrl} (${argv.host}:${mainPort})`);\n    console.log(`  CSS (internal): http://localhost:${cssPort}`);\n    console.log(`  API (internal): http://localhost:${apiPort}`);\n    if (idpUrl) {\n      console.log(`  SP mode: Cloud IdP = ${idpUrl}`);\n    }\n\n    const supervisor = new Supervisor();\n    const cssBinary = require.resolve('@solid/community-server/bin/server.js');\n    const cssModuleRoot = path.dirname(require.resolve('@solid/community-server/package.json'));\n\n    const cssArgs = [cssBinary, '-c', configPath, '-m', cssModuleRoot, '-p', cssPort.toString(), '-b', baseUrl];\n    if (idpUrl) {\n      cssArgs.push('--idpUrl', idpUrl);\n    }\n\n    supervisor.register({\n      name: 'css',\n      command: process.execPath,\n      args: cssArgs,\n      env: {\n        ...process.env as Record<string, string>,\n        CSS_PORT: cssPort.toString(),\n        CSS_BASE_URL: baseUrl,\n      },\n    });\n\n    const isDevMode = __filename.endsWith('.ts');\n    const apiArgs = isDevMode\n      ? [\n          '-r',\n          require.resolve('ts-node/register/transpile-only'),\n          path.resolve(__dirname, '..', '..', 'api', 'main.ts'),\n        ]\n      : [path.resolve(__dirname, '..', '..', 'api', 'main.js')];\n\n    supervisor.register({\n      name: 'api',\n      command: process.execPath,\n      args: apiArgs,\n      env: {\n        ...process.env as Record<string, string>,\n        API_PORT: apiPort.toString(),\n        XPOD_MAIN_PORT: mainPort.toString(),\n        CSS_INTERNAL_URL: `http://localhost:${cssPort}`,\n        CSS_BASE_URL: baseUrl,\n        CSS_TOKEN_ENDPOINT: idpUrl\n          ? `${idpUrl.replace(/\\/$/, '')}/.oidc/token`\n          : `${baseUrl}.oidc/token`,\n      },\n    });\n\n    const proxy = new GatewayProxy(mainPort, supervisor, '0.0.0.0', {\n      exitOnStop: true,\n      baseUrl,\n    });\n    proxy.setTargets({\n      css: `http://localhost:${cssPort}`,\n      api: `http://localhost:${apiPort}`,\n    });\n\n    await supervisor.startAll();\n    await proxy.start();\n\n    const shutdown = async (signal: string): Promise<void> => {\n      console.log(`\\nReceived ${signal}, shutting down...`);\n      await supervisor.stopAll();\n      process.exit(0);\n    };\n\n    process.on('SIGTERM', () => shutdown('SIGTERM'));\n    process.on('SIGINT', () => shutdown('SIGINT'));\n  },\n};\n"]}

package/dist/cli/index.js

@@ -13,6 +13,10 @@ const logs_1 = require("./commands/logs");
 const auth_1 = require("./commands/auth");
 const config_1 = require("./commands/config");
 const import_1 = require("./commands/import");
+const pod_1 = require("./commands/pod");
+const account_1 = require("./commands/account");
+const backup_1 = require("./commands/backup");
+const doctor_1 = require("./commands/doctor");
 (0, yargs_1.default)((0, helpers_1.hideBin)(process.argv))
     .scriptName('xpod')
     .usage('$0 <command> [options]')
@@ -23,6 +27,11 @@ const import_1 = require("./commands/import");
     .command(auth_1.authCommand)
     .command(config_1.configCommand)
     .command(import_1.importCommand)
+    .command(pod_1.podCommand)
+    .command(account_1.accountCommand)
+    .command(backup_1.backupCommand)
+    .command(backup_1.restoreCommand)
+    .command(doctor_1.doctorCommand)
     .demandCommand(1, 'Please specify a command')
     .strict()
     .help()

package/dist/cli/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/cli/index.ts"],"names":[],"mappings":";;;;;;AACA,kDAA0B;AAC1B,2CAAwC;AACxC,4CAAgD;AAChD,0CAA8C;AAC9C,8CAAkD;AAClD,0CAA8C;AAC9C,0CAA8C;AAC9C,8CAAkD;AAClD,8CAAkD;AAElD,IAAA,eAAK,EAAC,IAAA,iBAAO,EAAC,OAAO,CAAC,IAAI,CAAC,CAAC;KACzB,UAAU,CAAC,MAAM,CAAC;KAClB,KAAK,CAAC,wBAAwB,CAAC;KAC/B,OAAO,CAAC,oBAAY,CAAC;KACrB,OAAO,CAAC,kBAAW,CAAC;KACpB,OAAO,CAAC,sBAAa,CAAC;KACtB,OAAO,CAAC,kBAAW,CAAC;KACpB,OAAO,CAAC,kBAAW,CAAC;KACpB,OAAO,CAAC,sBAAa,CAAC;KACtB,OAAO,CAAC,sBAAa,CAAC;KACtB,aAAa,CAAC,CAAC,EAAE,0BAA0B,CAAC;KAC5C,MAAM,EAAE;KACR,IAAI,EAAE;KACN,KAAK,EAAE,CAAC","sourcesContent":["#!/usr/bin/env node\nimport yargs from 'yargs';\nimport { hideBin } from 'yargs/helpers';\nimport { startCommand } from './commands/start';\nimport { stopCommand } from './commands/stop';\nimport { statusCommand } from './commands/status';\nimport { logsCommand } from './commands/logs';\nimport { authCommand } from './commands/auth';\nimport { configCommand } from './commands/config';\nimport { importCommand } from './commands/import';\n\nyargs(hideBin(process.argv))\n  .scriptName('xpod')\n  .usage('$0 <command> [options]')\n  .command(startCommand)\n  .command(stopCommand)\n  .command(statusCommand)\n  .command(logsCommand)\n  .command(authCommand)\n  .command(configCommand)\n  .command(importCommand)\n  .demandCommand(1, 'Please specify a command')\n  .strict()\n  .help()\n  .parse();\n"]}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/cli/index.ts"],"names":[],"mappings":";;;;;;AACA,kDAA0B;AAC1B,2CAAwC;AACxC,4CAAgD;AAChD,0CAA8C;AAC9C,8CAAkD;AAClD,0CAA8C;AAC9C,0CAA8C;AAC9C,8CAAkD;AAClD,8CAAkD;AAClD,wCAA4C;AAC5C,gDAAoD;AACpD,8CAAkE;AAClE,8CAAkD;AAElD,IAAA,eAAK,EAAC,IAAA,iBAAO,EAAC,OAAO,CAAC,IAAI,CAAC,CAAC;KACzB,UAAU,CAAC,MAAM,CAAC;KAClB,KAAK,CAAC,wBAAwB,CAAC;KAC/B,OAAO,CAAC,oBAAY,CAAC;KACrB,OAAO,CAAC,kBAAW,CAAC;KACpB,OAAO,CAAC,sBAAa,CAAC;KACtB,OAAO,CAAC,kBAAW,CAAC;KACpB,OAAO,CAAC,kBAAW,CAAC;KACpB,OAAO,CAAC,sBAAa,CAAC;KACtB,OAAO,CAAC,sBAAa,CAAC;KACtB,OAAO,CAAC,gBAAU,CAAC;KACnB,OAAO,CAAC,wBAAc,CAAC;KACvB,OAAO,CAAC,sBAAa,CAAC;KACtB,OAAO,CAAC,uBAAc,CAAC;KACvB,OAAO,CAAC,sBAAa,CAAC;KACtB,aAAa,CAAC,CAAC,EAAE,0BAA0B,CAAC;KAC5C,MAAM,EAAE;KACR,IAAI,EAAE;KACN,KAAK,EAAE,CAAC","sourcesContent":["#!/usr/bin/env node\nimport yargs from 'yargs';\nimport { hideBin } from 'yargs/helpers';\nimport { startCommand } from './commands/start';\nimport { stopCommand } from './commands/stop';\nimport { statusCommand } from './commands/status';\nimport { logsCommand } from './commands/logs';\nimport { authCommand } from './commands/auth';\nimport { configCommand } from './commands/config';\nimport { importCommand } from './commands/import';\nimport { podCommand } from './commands/pod';\nimport { accountCommand } from './commands/account';\nimport { backupCommand, restoreCommand } from './commands/backup';\nimport { doctorCommand } from './commands/doctor';\n\nyargs(hideBin(process.argv))\n  .scriptName('xpod')\n  .usage('$0 <command> [options]')\n  .command(startCommand)\n  .command(stopCommand)\n  .command(statusCommand)\n  .command(logsCommand)\n  .command(authCommand)\n  .command(configCommand)\n  .command(importCommand)\n  .command(podCommand)\n  .command(accountCommand)\n  .command(backupCommand)\n  .command(restoreCommand)\n  .command(doctorCommand)\n  .demandCommand(1, 'Please specify a command')\n  .strict()\n  .help()\n  .parse();\n"]}

package/dist/cli/lib/credentials-store.d.ts

@@ -0,0 +1,17 @@
+export interface StoredConfig {
+    url: string;
+    webId: string;
+}
+export interface StoredSecrets {
+    clientId: string;
+    clientSecret: string;
+}
+export interface StoredCredentials extends StoredConfig, StoredSecrets {
+}
+export declare function getConfigPath(): string;
+export declare function getSecretsPath(): string;
+export declare function saveCredentials(creds: StoredCredentials): void;
+export declare function loadConfig(): StoredConfig | null;
+export declare function loadSecrets(): StoredSecrets | null;
+export declare function loadCredentials(): StoredCredentials | null;
+export declare function clearCredentials(): void;

package/dist/cli/lib/credentials-store.js

@@ -0,0 +1,73 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getConfigPath = getConfigPath;
+exports.getSecretsPath = getSecretsPath;
+exports.saveCredentials = saveCredentials;
+exports.loadConfig = loadConfig;
+exports.loadSecrets = loadSecrets;
+exports.loadCredentials = loadCredentials;
+exports.clearCredentials = clearCredentials;
+/**
+ * CLI credential storage split into two files:
+ *
+ *   ~/.xpod/config.json   — base config (url, webId), chmod 644
+ *   ~/.xpod/secrets.json  — secrets (clientId, clientSecret), chmod 600
+ */
+const fs_1 = require("fs");
+const path_1 = require("path");
+const os_1 = require("os");
+function xpodDir() {
+    return (0, path_1.join)((0, os_1.homedir)(), '.xpod');
+}
+function getConfigPath() {
+    return (0, path_1.join)(xpodDir(), 'config.json');
+}
+function getSecretsPath() {
+    return (0, path_1.join)(xpodDir(), 'secrets.json');
+}
+function saveCredentials(creds) {
+    const dir = xpodDir();
+    (0, fs_1.mkdirSync)(dir, { recursive: true });
+    const configPath = getConfigPath();
+    (0, fs_1.writeFileSync)(configPath, JSON.stringify({ url: creds.url, webId: creds.webId }, null, 2) + '\n', 'utf-8');
+    (0, fs_1.chmodSync)(configPath, 0o644);
+    const secretsPath = getSecretsPath();
+    (0, fs_1.writeFileSync)(secretsPath, JSON.stringify({ clientId: creds.clientId, clientSecret: creds.clientSecret }, null, 2) + '\n', 'utf-8');
+    (0, fs_1.chmodSync)(secretsPath, 0o600);
+}
+function readJson(filePath) {
+    try {
+        return JSON.parse((0, fs_1.readFileSync)(filePath, 'utf-8'));
+    }
+    catch {
+        return null;
+    }
+}
+function loadConfig() {
+    const data = readJson(getConfigPath());
+    if (data && typeof data.url === 'string' && typeof data.webId === 'string') {
+        return { url: data.url, webId: data.webId };
+    }
+    return null;
+}
+function loadSecrets() {
+    const data = readJson(getSecretsPath());
+    if (data && typeof data.clientId === 'string' && typeof data.clientSecret === 'string') {
+        return { clientId: data.clientId, clientSecret: data.clientSecret };
+    }
+    return null;
+}
+function loadCredentials() {
+    const config = loadConfig();
+    const secrets = loadSecrets();
+    if (!config || !secrets)
+        return null;
+    return { ...config, ...secrets };
+}
+function clearCredentials() {
+    for (const p of [getConfigPath(), getSecretsPath()]) {
+        if ((0, fs_1.existsSync)(p))
+            (0, fs_1.unlinkSync)(p);
+    }
+}
+//# sourceMappingURL=credentials-store.js.map

package/dist/cli/lib/credentials-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"credentials-store.js","sourceRoot":"","sources":["../../../src/cli/lib/credentials-store.ts"],"names":[],"mappings":";;AA0BA,sCAEC;AAED,wCAEC;AAED,0CAWC;AAUD,gCAMC;AAED,kCAMC;AAED,0CAKC;AAED,4CAIC;AAlFD;;;;;GAKG;AACH,2BAA+F;AAC/F,+BAA4B;AAC5B,2BAA6B;AAc7B,SAAS,OAAO;IACd,OAAO,IAAA,WAAI,EAAC,IAAA,YAAO,GAAE,EAAE,OAAO,CAAC,CAAC;AAClC,CAAC;AAED,SAAgB,aAAa;IAC3B,OAAO,IAAA,WAAI,EAAC,OAAO,EAAE,EAAE,aAAa,CAAC,CAAC;AACxC,CAAC;AAED,SAAgB,cAAc;IAC5B,OAAO,IAAA,WAAI,EAAC,OAAO,EAAE,EAAE,cAAc,CAAC,CAAC;AACzC,CAAC;AAED,SAAgB,eAAe,CAAC,KAAwB;IACtD,MAAM,GAAG,GAAG,OAAO,EAAE,CAAC;IACtB,IAAA,cAAS,EAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAEpC,MAAM,UAAU,GAAG,aAAa,EAAE,CAAC;IACnC,IAAA,kBAAa,EAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,OAAO,CAAC,CAAC;IAC3G,IAAA,cAAS,EAAC,UAAU,EAAE,KAAK,CAAC,CAAC;IAE7B,MAAM,WAAW,GAAG,cAAc,EAAE,CAAC;IACrC,IAAA,kBAAa,EAAC,WAAW,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,OAAO,CAAC,CAAC;IACpI,IAAA,cAAS,EAAC,WAAW,EAAE,KAAK,CAAC,CAAC;AAChC,CAAC;AAED,SAAS,QAAQ,CAAI,QAAgB;IACnC,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,IAAA,iBAAY,EAAC,QAAQ,EAAE,OAAO,CAAC,CAAM,CAAC;IAC1D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAgB,UAAU;IACxB,MAAM,IAAI,GAAG,QAAQ,CAA0B,aAAa,EAAE,CAAC,CAAC;IAChE,IAAI,IAAI,IAAI,OAAO,IAAI,CAAC,GAAG,KAAK,QAAQ,IAAI,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC3E,OAAO,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC;IAC9C,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAgB,WAAW;IACzB,MAAM,IAAI,GAAG,QAAQ,CAA0B,cAAc,EAAE,CAAC,CAAC;IACjE,IAAI,IAAI,IAAI,OAAO,IAAI,CAAC,QAAQ,KAAK,QAAQ,IAAI,OAAO,IAAI,CAAC,YAAY,KAAK,QAAQ,EAAE,CAAC;QACvF,OAAO,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,CAAC;IACtE,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAgB,eAAe;IAC7B,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;IAC5B,MAAM,OAAO,GAAG,WAAW,EAAE,CAAC;IAC9B,IAAI,CAAC,MAAM,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IACrC,OAAO,EAAE,GAAG,MAAM,EAAE,GAAG,OAAO,EAAE,CAAC;AACnC,CAAC;AAED,SAAgB,gBAAgB;IAC9B,KAAK,MAAM,CAAC,IAAI,CAAC,aAAa,EAAE,EAAE,cAAc,EAAE,CAAC,EAAE,CAAC;QACpD,IAAI,IAAA,eAAU,EAAC,CAAC,CAAC;YAAE,IAAA,eAAU,EAAC,CAAC,CAAC,CAAC;IACnC,CAAC;AACH,CAAC","sourcesContent":["/**\n * CLI credential storage split into two files:\n *\n *   ~/.xpod/config.json   — base config (url, webId), chmod 644\n *   ~/.xpod/secrets.json  — secrets (clientId, clientSecret), chmod 600\n */\nimport { mkdirSync, writeFileSync, readFileSync, unlinkSync, chmodSync, existsSync } from 'fs';\nimport { join } from 'path';\nimport { homedir } from 'os';\n\nexport interface StoredConfig {\n  url: string;\n  webId: string;\n}\n\nexport interface StoredSecrets {\n  clientId: string;\n  clientSecret: string;\n}\n\nexport interface StoredCredentials extends StoredConfig, StoredSecrets {}\n\nfunction xpodDir(): string {\n  return join(homedir(), '.xpod');\n}\n\nexport function getConfigPath(): string {\n  return join(xpodDir(), 'config.json');\n}\n\nexport function getSecretsPath(): string {\n  return join(xpodDir(), 'secrets.json');\n}\n\nexport function saveCredentials(creds: StoredCredentials): void {\n  const dir = xpodDir();\n  mkdirSync(dir, { recursive: true });\n\n  const configPath = getConfigPath();\n  writeFileSync(configPath, JSON.stringify({ url: creds.url, webId: creds.webId }, null, 2) + '\\n', 'utf-8');\n  chmodSync(configPath, 0o644);\n\n  const secretsPath = getSecretsPath();\n  writeFileSync(secretsPath, JSON.stringify({ clientId: creds.clientId, clientSecret: creds.clientSecret }, null, 2) + '\\n', 'utf-8');\n  chmodSync(secretsPath, 0o600);\n}\n\nfunction readJson<T>(filePath: string): T | null {\n  try {\n    return JSON.parse(readFileSync(filePath, 'utf-8')) as T;\n  } catch {\n    return null;\n  }\n}\n\nexport function loadConfig(): StoredConfig | null {\n  const data = readJson<Record<string, unknown>>(getConfigPath());\n  if (data && typeof data.url === 'string' && typeof data.webId === 'string') {\n    return { url: data.url, webId: data.webId };\n  }\n  return null;\n}\n\nexport function loadSecrets(): StoredSecrets | null {\n  const data = readJson<Record<string, unknown>>(getSecretsPath());\n  if (data && typeof data.clientId === 'string' && typeof data.clientSecret === 'string') {\n    return { clientId: data.clientId, clientSecret: data.clientSecret };\n  }\n  return null;\n}\n\nexport function loadCredentials(): StoredCredentials | null {\n  const config = loadConfig();\n  const secrets = loadSecrets();\n  if (!config || !secrets) return null;\n  return { ...config, ...secrets };\n}\n\nexport function clearCredentials(): void {\n  for (const p of [getConfigPath(), getSecretsPath()]) {\n    if (existsSync(p)) unlinkSync(p);\n  }\n}\n"]}

package/dist/cli/lib/css-account.d.ts

@@ -8,6 +8,12 @@ export interface AccountControls {
     clientCredentials?: string;
     webId?: string[];
 }
+export interface AccountData {
+    controls: AccountControls;
+    pods: Record<string, string>;
+    webIds: Record<string, string>;
+    clientCredentials: Record<string, string>;
+}
 export interface ClientCredential {
     id: string;
     secret?: string;
@@ -26,6 +32,17 @@ export declare function login(email: string, password: string, baseUrl?: string)
  * Fetch account controls (endpoints for pod/credential management).
  */
 export declare function getAccountControls(token: string, baseUrl?: string): Promise<AccountControls | null>;
+/**
+ * Fetch full account data including pods, webIds, and credentials.
+ */
+export declare function getAccountData(token: string, baseUrl?: string): Promise<AccountData | null>;
+/**
+ * Create a new pod for the account.
+ */
+export declare function createPod(token: string, podEndpoint: string, podName: string): Promise<{
+    podUrl: string;
+    webId: string;
+} | null>;
 /**
  * Create a new client credential bound to a WebID.
  */

package/dist/cli/lib/css-account.js

@@ -8,6 +8,8 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.checkServer = checkServer;
 exports.login = login;
 exports.getAccountControls = getAccountControls;
+exports.getAccountData = getAccountData;
+exports.createPod = createPod;
 exports.createClientCredentials = createClientCredentials;
 exports.listClientCredentials = listClientCredentials;
 exports.revokeClientCredential = revokeClientCredential;
@@ -76,6 +78,60 @@ async function getAccountControls(token, baseUrl) {
         return null;
     }
 }
+/**
+ * Fetch full account data including pods, webIds, and credentials.
+ */
+async function getAccountData(token, baseUrl) {
+    const base = resolveBaseUrl(baseUrl);
+    try {
+        const res = await fetch(`${base}.account/`, {
+            headers: {
+                Accept: 'application/json',
+                Authorization: `CSS-Account-Token ${token}`,
+            },
+        });
+        if (!res.ok)
+            return null;
+        const data = (await res.json());
+        return {
+            controls: {
+                pod: data.controls?.account?.pod,
+                clientCredentials: data.controls?.account?.clientCredentials,
+            },
+            pods: data.pods ?? {},
+            webIds: data.webIds ?? {},
+            clientCredentials: data.clientCredentials ?? {},
+        };
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * Create a new pod for the account.
+ */
+async function createPod(token, podEndpoint, podName) {
+    try {
+        const res = await fetch(podEndpoint, {
+            method: 'POST',
+            headers: {
+                'Content-Type': 'application/json',
+                Accept: 'application/json',
+                Authorization: `CSS-Account-Token ${token}`,
+            },
+            body: JSON.stringify({ name: podName }),
+        });
+        if (!res.ok)
+            return null;
+        const data = (await res.json());
+        if (!data.pod || !data.webId)
+            return null;
+        return { podUrl: data.pod, webId: data.webId };
+    }
+    catch {
+        return null;
+    }
+}
 /**
  * Create a new client credential bound to a WebID.
  */