@undefineds.co/xpod 0.2.15 → 0.2.20

package/dist/api/handlers/WebIdProfileHandler.js

@@ -22,7 +22,7 @@ function registerWebIdProfileRoutes(server, options) {
     server.get('/:username/profile/card', async (_request, response, params) => {
         const username = decodeURIComponent(params.username);
         try {
-            const profile = await profileRepo.get(username);
+            const profile = await resolveProfileWithStorageBackfill(username, options);
             if (!profile) {
                 sendError(response, 404, 'Profile not found');
                 return;
@@ -97,7 +97,7 @@ function registerWebIdProfileRoutes(server, options) {
     server.get('/api/v1/identity/:username', async (_request, response, params) => {
         const username = decodeURIComponent(params.username);
         try {
-            const profile = await profileRepo.get(username);
+            const profile = await resolveProfileWithStorageBackfill(username, options);
             if (!profile) {
                 sendError(response, 404, 'Profile not found');
                 return;
@@ -171,6 +171,65 @@ function registerWebIdProfileRoutes(server, options) {
     });
     logger.info('WebID Profile routes registered');
 }
+async function resolveProfileWithStorageBackfill(username, options) {
+    const { profileRepo, podLookupRepo } = options;
+    const profile = await profileRepo.get(username);
+    if (!profile) {
+        return null;
+    }
+    if (profile.storageUrl || !profile.accountId || !podLookupRepo) {
+        return profile;
+    }
+    const pods = await podLookupRepo.listByAccountId(profile.accountId);
+    const storageUrl = selectStorageBackfillCandidate(username, pods);
+    if (!storageUrl) {
+        logger.warn(`Skipped storage backfill for ${username}: no unambiguous pod found for account ${profile.accountId}`);
+        return profile;
+    }
+    try {
+        const updated = await profileRepo.updateStorage(username, {
+            storageUrl,
+            storageMode: profile.storageMode,
+        });
+        if (updated) {
+            logger.info(`Backfilled storage for ${username}: ${storageUrl}`);
+            return updated;
+        }
+    }
+    catch (error) {
+        logger.warn(`Failed to backfill storage for ${username}: ${error}`);
+    }
+    return profile;
+}
+function selectStorageBackfillCandidate(username, pods) {
+    if (pods.length === 0) {
+        return null;
+    }
+    const exactMatches = pods.filter((pod) => derivePodSlug(pod.baseUrl) === username);
+    if (exactMatches.length === 1) {
+        return ensureTrailingSlash(exactMatches[0].baseUrl);
+    }
+    if (exactMatches.length > 1) {
+        return null;
+    }
+    if (pods.length === 1) {
+        return ensureTrailingSlash(pods[0].baseUrl);
+    }
+    return null;
+}
+function derivePodSlug(baseUrl) {
+    try {
+        const parsed = new URL(baseUrl);
+        const [slug] = parsed.pathname.split('/').filter(Boolean);
+        return slug || null;
+    }
+    catch {
+        return null;
+    }
+}
+function ensureTrailingSlash(url) {
+    return url.replace(/\/+$/, '') + '/';
+}
 async function readJsonBody(request) {
     return new Promise((resolve, reject) => {
         let data = '';

package/dist/api/handlers/WebIdProfileHandler.js.map

@@ -1 +1 @@
-{"version":3,"file":"WebIdProfileHandler.js","sourceRoot":"","sources":["../../../src/api/handlers/WebIdProfileHandler.ts"],"names":[],"mappings":";AAAA;;;;;;;GAOG;;AAaH,gEA2LC;AArMD,iEAAqD;AAIrD,MAAM,MAAM,GAAG,IAAA,oCAAY,EAAC,qBAAqB,CAAC,CAAC;AAMnD,SAAgB,0BAA0B,CACxC,MAAiB,EACjB,OAAmC;IAEnC,MAAM,EAAE,WAAW,EAAE,GAAG,OAAO,CAAC;IAEhC;;;;;OAKG;IACH,MAAM,CAAC,GAAG,CAAC,yBAAyB,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE;QACzE,MAAM,QAAQ,GAAG,kBAAkB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAErD,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YAEhD,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,SAAS,CAAC,QAAQ,EAAE,GAAG,EAAE,mBAAmB,CAAC,CAAC;gBAC9C,OAAO;YACT,CAAC;YAED,eAAe;YACf,MAAM,MAAM,GAAG,WAAW,CAAC,qBAAqB,CAAC,OAAO,CAAC,CAAC;YAE1D,QAAQ,CAAC,UAAU,GAAG,GAAG,CAAC;YAC1B,QAAQ,CAAC,SAAS,CAAC,cAAc,EAAE,aAAa,CAAC,CAAC;YAClD,QAAQ,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,OAAO,CAAC,QAAQ,sBAAsB,CAAC,CAAC;YACvE,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACvB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,6BAA6B,QAAQ,KAAK,KAAK,EAAE,CAAC,CAAC;YAChE,SAAS,CAAC,QAAQ,EAAE,GAAG,EAAE,uBAAuB,CAAC,CAAC;QACpD,CAAC;IACH,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IAErB;;;;;;;;;;OAUG;IACH,MAAM,CAAC,IAAI,CAAC,oCAAoC,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE;QACpF,MAAM,QAAQ,GAAG,kBAAkB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAErD,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,OAAO,CAAC,CAAC;YACzC,MAAM,OAAO,GAAG,IAAiE,CAAC;YAElF,IAAI,CAAC,OAAO,EAAE,UAAU,EAAE,CAAC;gBACzB,SAAS,CAAC,QAAQ,EAAE,GAAG,EAAE,wBAAwB,CAAC,CAAC;gBACnD,OAAO;YACT,CAAC;YAED,YAAY;YACZ,IAAI,CAAC;gBACH,IAAI,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;YAC9B,CAAC;YAAC,MAAM,CAAC;gBACP,SAAS,CAAC,QAAQ,EAAE,GAAG,EAAE,2BAA2B,CAAC,CAAC;gBACtD,OAAO;YACT,CAAC;YAED,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,aAAa,CAAC,QAAQ,EAAE;gBACxD,UAAU,EAAE,OAAO,CAAC,UAAU;gBAC9B,WAAW,EAAE,OAAO,CAAC,WAAuD;aAC7E,CAAC,CAAC;YAEH,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,SAAS,CAAC,QAAQ,EAAE,GAAG,EAAE,mBAAmB,CAAC,CAAC;gBAC9C,OAAO;YACT,CAAC;YAED,MAAM,CAAC,IAAI,CAAC,uBAAuB,QAAQ,KAAK,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC;YAEtE,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE;gBACtB,OAAO,EAAE,IAAI;gBACb,QAAQ;gBACR,UAAU,EAAE,OAAO,CAAC,UAAU;gBAC9B,WAAW,EAAE,OAAO,CAAC,WAAW;gBAChC,SAAS,EAAE,OAAO,CAAC,SAAS,CAAC,WAAW,EAAE;aAC3C,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,gCAAgC,QAAQ,KAAK,KAAK,EAAE,CAAC,CAAC;YACnE,SAAS,CAAC,QAAQ,EAAE,GAAG,EAAE,uBAAuB,CAAC,CAAC;QACpD,CAAC;IACH,CAAC,CAAC,CAAC;IAEH;;;;OAIG;IACH,MAAM,CAAC,GAAG,CAAC,4BAA4B,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE;QAC5E,MAAM,QAAQ,GAAG,kBAAkB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAErD,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YAEhD,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,SAAS,CAAC,QAAQ,EAAE,GAAG,EAAE,mBAAmB,CAAC,CAAC;gBAC9C,OAAO;YACT,CAAC;YAED,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE;gBACtB,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBAC1B,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBAC1B,UAAU,EAAE,OAAO,CAAC,UAAU;gBAC9B,WAAW,EAAE,OAAO,CAAC,WAAW;gBAChC,UAAU,EAAE,OAAO,CAAC,UAAU;gBAC9B,SAAS,EAAE,OAAO,CAAC,SAAS,CAAC,WAAW,EAAE;gBAC1C,SAAS,EAAE,OAAO,CAAC,SAAS,CAAC,WAAW,EAAE;aAC3C,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,6BAA6B,QAAQ,KAAK,KAAK,EAAE,CAAC,CAAC;YAChE,SAAS,CAAC,QAAQ,EAAE,GAAG,EAAE,uBAAuB,CAAC,CAAC;QACpD,CAAC;IACH,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IAErB;;;;;;;;;;;OAWG;IACH,MAAM,CAAC,IAAI,CAAC,kBAAkB,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE;QACnE,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,OAAO,CAAC,CAAC;YACzC,MAAM,OAAO,GAAG,IAKH,CAAC;YAEd,IAAI,CAAC,OAAO,EAAE,QAAQ,EAAE,CAAC;gBACvB,SAAS,CAAC,QAAQ,EAAE,GAAG,EAAE,sBAAsB,CAAC,CAAC;gBACjD,OAAO;YACT,CAAC;YAED,UAAU;YACV,IAAI,CAAC,mCAAmC,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAChE,SAAS,CAAC,QAAQ,EAAE,GAAG,EAAE,yBAAyB,CAAC,CAAC;gBACpD,OAAO;YACT,CAAC;YAED,UAAU;YACV,MAAM,QAAQ,GAAG,MAAM,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;YACzD,IAAI,QAAQ,EAAE,CAAC;gBACb,SAAS,CAAC,QAAQ,EAAE,GAAG,EAAE,wBAAwB,CAAC,CAAC;gBACnD,OAAO;YACT,CAAC;YAED,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,MAAM,CAAC;gBACvC,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBAC1B,WAAW,EAAE,OAAO,CAAC,WAAuD;gBAC5E,UAAU,EAAE,OAAO,CAAC,UAAU;gBAC9B,SAAS,EAAE,OAAO,CAAC,SAAS;aAC7B,CAAC,CAAC;YAEH,MAAM,CAAC,IAAI,CAAC,uBAAuB,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC;YAEvD,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE;gBACtB,OAAO,EAAE,IAAI;gBACb,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBAC1B,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBAC1B,UAAU,EAAE,OAAO,CAAC,UAAU;gBAC9B,WAAW,EAAE,OAAO,CAAC,WAAW;gBAChC,SAAS,EAAE,OAAO,CAAC,SAAS,CAAC,WAAW,EAAE;aAC3C,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,6BAA6B,KAAK,EAAE,CAAC,CAAC;YACnD,SAAS,CAAC,QAAQ,EAAE,GAAG,EAAE,uBAAuB,CAAC,CAAC;QACpD,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAC;AACjD,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,OAAwB;IAClD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,IAAI,IAAI,GAAG,EAAE,CAAC;QACd,OAAO,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QAC5B,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YACnC,IAAI,IAAI,KAAK,CAAC;QAChB,CAAC,CAAC,CAAC;QACH,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;YACrB,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,OAAO,CAAC,SAAS,CAAC,CAAC;gBACnB,OAAO;YACT,CAAC;YACD,IAAI,CAAC;gBACH,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;YAC5B,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,CAAC,SAAS,CAAC,CAAC;YACrB,CAAC;QACH,CAAC,CAAC,CAAC;QACH,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC9B,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,QAAQ,CAAC,QAAwB,EAAE,MAAc,EAAE,IAAa;IACvE,QAAQ,CAAC,UAAU,GAAG,MAAM,CAAC;IAC7B,QAAQ,CAAC,SAAS,CAAC,cAAc,EAAE,kBAAkB,CAAC,CAAC;IACvD,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;AACrC,CAAC;AAED,SAAS,SAAS,CAAC,QAAwB,EAAE,MAAc,EAAE,OAAe;IAC1E,QAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;AACjD,CAAC","sourcesContent":["/**\n * WebID Profile API Handler\n *\n * 提供 WebID Profile 托管服务的 HTTP API\n *\n * GET  /{username}/profile/card     - 获取 WebID Profile (Turtle 格式)\n * POST /api/v1/identity/{username}/storage - 更新 storage 指针 (需认证)\n */\n\nimport type { ServerResponse, IncomingMessage } from 'node:http';\nimport { getLoggerFor } from 'global-logger-factory';\nimport type { ApiServer } from '../ApiServer';\nimport type { WebIdProfileRepository } from '../../identity/drizzle/WebIdProfileRepository';\n\nconst logger = getLoggerFor('WebIdProfileHandler');\n\nexport interface WebIdProfileHandlerOptions {\n  profileRepo: WebIdProfileRepository;\n}\n\nexport function registerWebIdProfileRoutes(\n  server: ApiServer,\n  options: WebIdProfileHandlerOptions,\n): void {\n  const { profileRepo } = options;\n\n  /**\n   * GET /{username}/profile/card\n   *\n   * 获取 WebID Profile (Turtle 格式)\n   * 这是 Solid 标准的 WebID 端点\n   */\n  server.get('/:username/profile/card', async (_request, response, params) => {\n    const username = decodeURIComponent(params.username);\n\n    try {\n      const profile = await profileRepo.get(username);\n\n      if (!profile) {\n        sendError(response, 404, 'Profile not found');\n        return;\n      }\n\n      // 返回 Turtle 格式\n      const turtle = profileRepo.generateProfileTurtle(profile);\n\n      response.statusCode = 200;\n      response.setHeader('Content-Type', 'text/turtle');\n      response.setHeader('Link', `<${profile.webidUrl}>; rel=\"describedby\"`);\n      response.end(turtle);\n    } catch (error) {\n      logger.error(`Failed to get profile for ${username}: ${error}`);\n      sendError(response, 500, 'Internal server error');\n    }\n  }, { public: true });\n\n  /**\n   * POST /api/v1/identity/{username}/storage\n   *\n   * 更新 storage 指针\n   * 用于 Local 节点更新其 storage URL\n   *\n   * Request body:\n   * {\n   *   \"storageUrl\": \"https://alice.undefineds.xyz/\"\n   * }\n   */\n  server.post('/api/v1/identity/:username/storage', async (request, response, params) => {\n    const username = decodeURIComponent(params.username);\n\n    try {\n      const body = await readJsonBody(request);\n      const payload = body as { storageUrl?: string; storageMode?: string } | undefined;\n\n      if (!payload?.storageUrl) {\n        sendError(response, 400, 'storageUrl is required');\n        return;\n      }\n\n      // 验证 URL 格式\n      try {\n        new URL(payload.storageUrl);\n      } catch {\n        sendError(response, 400, 'Invalid storageUrl format');\n        return;\n      }\n\n      const profile = await profileRepo.updateStorage(username, {\n        storageUrl: payload.storageUrl,\n        storageMode: payload.storageMode as 'cloud' | 'local' | 'custom' | undefined,\n      });\n\n      if (!profile) {\n        sendError(response, 404, 'Profile not found');\n        return;\n      }\n\n      logger.info(`Updated storage for ${username}: ${payload.storageUrl}`);\n\n      sendJson(response, 200, {\n        success: true,\n        username,\n        storageUrl: profile.storageUrl,\n        storageMode: profile.storageMode,\n        updatedAt: profile.updatedAt.toISOString(),\n      });\n    } catch (error) {\n      logger.error(`Failed to update storage for ${username}: ${error}`);\n      sendError(response, 500, 'Internal server error');\n    }\n  });\n\n  /**\n   * GET /api/v1/identity/{username}\n   *\n   * 获取 WebID Profile 信息 (JSON 格式)\n   */\n  server.get('/api/v1/identity/:username', async (_request, response, params) => {\n    const username = decodeURIComponent(params.username);\n\n    try {\n      const profile = await profileRepo.get(username);\n\n      if (!profile) {\n        sendError(response, 404, 'Profile not found');\n        return;\n      }\n\n      sendJson(response, 200, {\n        username: profile.username,\n        webidUrl: profile.webidUrl,\n        storageUrl: profile.storageUrl,\n        storageMode: profile.storageMode,\n        oidcIssuer: profile.oidcIssuer,\n        createdAt: profile.createdAt.toISOString(),\n        updatedAt: profile.updatedAt.toISOString(),\n      });\n    } catch (error) {\n      logger.error(`Failed to get profile for ${username}: ${error}`);\n      sendError(response, 500, 'Internal server error');\n    }\n  }, { public: true });\n\n  /**\n   * POST /api/v1/identity\n   *\n   * 创建 WebID Profile\n   *\n   * Request body:\n   * {\n   *   \"username\": \"alice\",\n   *   \"storageMode\": \"local\",  // optional, default: \"cloud\"\n   *   \"storageUrl\": \"https://alice.undefineds.xyz/\"  // optional\n   * }\n   */\n  server.post('/api/v1/identity', async (request, response, _params) => {\n    try {\n      const body = await readJsonBody(request);\n      const payload = body as {\n        username?: string;\n        storageMode?: string;\n        storageUrl?: string;\n        accountId?: string;\n      } | undefined;\n\n      if (!payload?.username) {\n        sendError(response, 400, 'username is required');\n        return;\n      }\n\n      // 验证用户名格式\n      if (!/^[a-z0-9][a-z0-9-]{1,61}[a-z0-9]$/.test(payload.username)) {\n        sendError(response, 400, 'Invalid username format');\n        return;\n      }\n\n      // 检查是否已存在\n      const existing = await profileRepo.get(payload.username);\n      if (existing) {\n        sendError(response, 409, 'Username already taken');\n        return;\n      }\n\n      const profile = await profileRepo.create({\n        username: payload.username,\n        storageMode: payload.storageMode as 'cloud' | 'local' | 'custom' | undefined,\n        storageUrl: payload.storageUrl,\n        accountId: payload.accountId,\n      });\n\n      logger.info(`Created profile for ${payload.username}`);\n\n      sendJson(response, 201, {\n        success: true,\n        username: profile.username,\n        webidUrl: profile.webidUrl,\n        storageUrl: profile.storageUrl,\n        storageMode: profile.storageMode,\n        createdAt: profile.createdAt.toISOString(),\n      });\n    } catch (error) {\n      logger.error(`Failed to create profile: ${error}`);\n      sendError(response, 500, 'Internal server error');\n    }\n  });\n\n  logger.info('WebID Profile routes registered');\n}\n\nasync function readJsonBody(request: IncomingMessage): Promise<unknown> {\n  return new Promise((resolve, reject) => {\n    let data = '';\n    request.setEncoding('utf8');\n    request.on('data', (chunk: string) => {\n      data += chunk;\n    });\n    request.on('end', () => {\n      if (!data) {\n        resolve(undefined);\n        return;\n      }\n      try {\n        resolve(JSON.parse(data));\n      } catch {\n        resolve(undefined);\n      }\n    });\n    request.on('error', reject);\n  });\n}\n\nfunction sendJson(response: ServerResponse, status: number, data: unknown): void {\n  response.statusCode = status;\n  response.setHeader('Content-Type', 'application/json');\n  response.end(JSON.stringify(data));\n}\n\nfunction sendError(response: ServerResponse, status: number, message: string): void {\n  sendJson(response, status, { error: message });\n}\n"]}
+{"version":3,"file":"WebIdProfileHandler.js","sourceRoot":"","sources":["../../../src/api/handlers/WebIdProfileHandler.ts"],"names":[],"mappings":";AAAA;;;;;;;GAOG;;AAeH,gEA2LC;AAvMD,iEAAqD;AAKrD,MAAM,MAAM,GAAG,IAAA,oCAAY,EAAC,qBAAqB,CAAC,CAAC;AAOnD,SAAgB,0BAA0B,CACxC,MAAiB,EACjB,OAAmC;IAEnC,MAAM,EAAE,WAAW,EAAE,GAAG,OAAO,CAAC;IAEhC;;;;;OAKG;IACH,MAAM,CAAC,GAAG,CAAC,yBAAyB,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE;QACzE,MAAM,QAAQ,GAAG,kBAAkB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAErD,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,iCAAiC,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YAE3E,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,SAAS,CAAC,QAAQ,EAAE,GAAG,EAAE,mBAAmB,CAAC,CAAC;gBAC9C,OAAO;YACT,CAAC;YAED,eAAe;YACf,MAAM,MAAM,GAAG,WAAW,CAAC,qBAAqB,CAAC,OAAO,CAAC,CAAC;YAE1D,QAAQ,CAAC,UAAU,GAAG,GAAG,CAAC;YAC1B,QAAQ,CAAC,SAAS,CAAC,cAAc,EAAE,aAAa,CAAC,CAAC;YAClD,QAAQ,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,OAAO,CAAC,QAAQ,sBAAsB,CAAC,CAAC;YACvE,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACvB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,6BAA6B,QAAQ,KAAK,KAAK,EAAE,CAAC,CAAC;YAChE,SAAS,CAAC,QAAQ,EAAE,GAAG,EAAE,uBAAuB,CAAC,CAAC;QACpD,CAAC;IACH,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IAErB;;;;;;;;;;OAUG;IACH,MAAM,CAAC,IAAI,CAAC,oCAAoC,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE;QACpF,MAAM,QAAQ,GAAG,kBAAkB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAErD,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,OAAO,CAAC,CAAC;YACzC,MAAM,OAAO,GAAG,IAAiE,CAAC;YAElF,IAAI,CAAC,OAAO,EAAE,UAAU,EAAE,CAAC;gBACzB,SAAS,CAAC,QAAQ,EAAE,GAAG,EAAE,wBAAwB,CAAC,CAAC;gBACnD,OAAO;YACT,CAAC;YAED,YAAY;YACZ,IAAI,CAAC;gBACH,IAAI,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;YAC9B,CAAC;YAAC,MAAM,CAAC;gBACP,SAAS,CAAC,QAAQ,EAAE,GAAG,EAAE,2BAA2B,CAAC,CAAC;gBACtD,OAAO;YACT,CAAC;YAED,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,aAAa,CAAC,QAAQ,EAAE;gBACxD,UAAU,EAAE,OAAO,CAAC,UAAU;gBAC9B,WAAW,EAAE,OAAO,CAAC,WAAuD;aAC7E,CAAC,CAAC;YAEH,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,SAAS,CAAC,QAAQ,EAAE,GAAG,EAAE,mBAAmB,CAAC,CAAC;gBAC9C,OAAO;YACT,CAAC;YAED,MAAM,CAAC,IAAI,CAAC,uBAAuB,QAAQ,KAAK,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC;YAEtE,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE;gBACtB,OAAO,EAAE,IAAI;gBACb,QAAQ;gBACR,UAAU,EAAE,OAAO,CAAC,UAAU;gBAC9B,WAAW,EAAE,OAAO,CAAC,WAAW;gBAChC,SAAS,EAAE,OAAO,CAAC,SAAS,CAAC,WAAW,EAAE;aAC3C,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,gCAAgC,QAAQ,KAAK,KAAK,EAAE,CAAC,CAAC;YACnE,SAAS,CAAC,QAAQ,EAAE,GAAG,EAAE,uBAAuB,CAAC,CAAC;QACpD,CAAC;IACH,CAAC,CAAC,CAAC;IAEH;;;;OAIG;IACH,MAAM,CAAC,GAAG,CAAC,4BAA4B,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE;QAC5E,MAAM,QAAQ,GAAG,kBAAkB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAErD,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,iCAAiC,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YAE3E,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,SAAS,CAAC,QAAQ,EAAE,GAAG,EAAE,mBAAmB,CAAC,CAAC;gBAC9C,OAAO;YACT,CAAC;YAED,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE;gBACtB,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBAC1B,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBAC1B,UAAU,EAAE,OAAO,CAAC,UAAU;gBAC9B,WAAW,EAAE,OAAO,CAAC,WAAW;gBAChC,UAAU,EAAE,OAAO,CAAC,UAAU;gBAC9B,SAAS,EAAE,OAAO,CAAC,SAAS,CAAC,WAAW,EAAE;gBAC1C,SAAS,EAAE,OAAO,CAAC,SAAS,CAAC,WAAW,EAAE;aAC3C,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,6BAA6B,QAAQ,KAAK,KAAK,EAAE,CAAC,CAAC;YAChE,SAAS,CAAC,QAAQ,EAAE,GAAG,EAAE,uBAAuB,CAAC,CAAC;QACpD,CAAC;IACH,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IAErB;;;;;;;;;;;OAWG;IACH,MAAM,CAAC,IAAI,CAAC,kBAAkB,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE;QACnE,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,OAAO,CAAC,CAAC;YACzC,MAAM,OAAO,GAAG,IAKH,CAAC;YAEd,IAAI,CAAC,OAAO,EAAE,QAAQ,EAAE,CAAC;gBACvB,SAAS,CAAC,QAAQ,EAAE,GAAG,EAAE,sBAAsB,CAAC,CAAC;gBACjD,OAAO;YACT,CAAC;YAED,UAAU;YACV,IAAI,CAAC,mCAAmC,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAChE,SAAS,CAAC,QAAQ,EAAE,GAAG,EAAE,yBAAyB,CAAC,CAAC;gBACpD,OAAO;YACT,CAAC;YAED,UAAU;YACV,MAAM,QAAQ,GAAG,MAAM,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;YACzD,IAAI,QAAQ,EAAE,CAAC;gBACb,SAAS,CAAC,QAAQ,EAAE,GAAG,EAAE,wBAAwB,CAAC,CAAC;gBACnD,OAAO;YACT,CAAC;YAED,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,MAAM,CAAC;gBACvC,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBAC1B,WAAW,EAAE,OAAO,CAAC,WAAuD;gBAC5E,UAAU,EAAE,OAAO,CAAC,UAAU;gBAC9B,SAAS,EAAE,OAAO,CAAC,SAAS;aAC7B,CAAC,CAAC;YAEH,MAAM,CAAC,IAAI,CAAC,uBAAuB,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC;YAEvD,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE;gBACtB,OAAO,EAAE,IAAI;gBACb,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBAC1B,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBAC1B,UAAU,EAAE,OAAO,CAAC,UAAU;gBAC9B,WAAW,EAAE,OAAO,CAAC,WAAW;gBAChC,SAAS,EAAE,OAAO,CAAC,SAAS,CAAC,WAAW,EAAE;aAC3C,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,6BAA6B,KAAK,EAAE,CAAC,CAAC;YACnD,SAAS,CAAC,QAAQ,EAAE,GAAG,EAAE,uBAAuB,CAAC,CAAC;QACpD,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAC;AACjD,CAAC;AAED,KAAK,UAAU,iCAAiC,CAC9C,QAAgB,EAChB,OAAmC;IAEnC,MAAM,EAAE,WAAW,EAAE,aAAa,EAAE,GAAG,OAAO,CAAC;IAC/C,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAChD,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,OAAO,CAAC,UAAU,IAAI,CAAC,OAAO,CAAC,SAAS,IAAI,CAAC,aAAa,EAAE,CAAC;QAC/D,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,aAAa,CAAC,eAAe,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IACpE,MAAM,UAAU,GAAG,8BAA8B,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IAClE,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,MAAM,CAAC,IAAI,CAAC,gCAAgC,QAAQ,0CAA0C,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC;QACnH,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,aAAa,CAAC,QAAQ,EAAE;YACxD,UAAU;YACV,WAAW,EAAE,OAAO,CAAC,WAAW;SACjC,CAAC,CAAC;QACH,IAAI,OAAO,EAAE,CAAC;YACZ,MAAM,CAAC,IAAI,CAAC,0BAA0B,QAAQ,KAAK,UAAU,EAAE,CAAC,CAAC;YACjE,OAAO,OAAO,CAAC;QACjB,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,IAAI,CAAC,kCAAkC,QAAQ,KAAK,KAAK,EAAE,CAAC,CAAC;IACtE,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,8BAA8B,CACrC,QAAgB,EAChB,IAAuB;IAEvB,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,YAAY,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,aAAa,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC;IACnF,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC9B,OAAO,mBAAmB,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;IACtD,CAAC;IAED,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC5B,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtB,OAAO,mBAAmB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;IAC9C,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,aAAa,CAAC,OAAe;IACpC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC;QAChC,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAC1D,OAAO,IAAI,IAAI,IAAI,CAAC;IACtB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,mBAAmB,CAAC,GAAW;IACtC,OAAO,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC;AACvC,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,OAAwB;IAClD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,IAAI,IAAI,GAAG,EAAE,CAAC;QACd,OAAO,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QAC5B,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YACnC,IAAI,IAAI,KAAK,CAAC;QAChB,CAAC,CAAC,CAAC;QACH,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;YACrB,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,OAAO,CAAC,SAAS,CAAC,CAAC;gBACnB,OAAO;YACT,CAAC;YACD,IAAI,CAAC;gBACH,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;YAC5B,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,CAAC,SAAS,CAAC,CAAC;YACrB,CAAC;QACH,CAAC,CAAC,CAAC;QACH,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC9B,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,QAAQ,CAAC,QAAwB,EAAE,MAAc,EAAE,IAAa;IACvE,QAAQ,CAAC,UAAU,GAAG,MAAM,CAAC;IAC7B,QAAQ,CAAC,SAAS,CAAC,cAAc,EAAE,kBAAkB,CAAC,CAAC;IACvD,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;AACrC,CAAC;AAED,SAAS,SAAS,CAAC,QAAwB,EAAE,MAAc,EAAE,OAAe;IAC1E,QAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;AACjD,CAAC","sourcesContent":["/**\n * WebID Profile API Handler\n *\n * 提供 WebID Profile 托管服务的 HTTP API\n *\n * GET  /{username}/profile/card     - 获取 WebID Profile (Turtle 格式)\n * POST /api/v1/identity/{username}/storage - 更新 storage 指针 (需认证)\n */\n\nimport type { ServerResponse, IncomingMessage } from 'node:http';\nimport { getLoggerFor } from 'global-logger-factory';\nimport type { ApiServer } from '../ApiServer';\nimport type { WebIdProfileRepository } from '../../identity/drizzle/WebIdProfileRepository';\nimport type { PodLookupRepository, PodLookupResult } from '../../identity/drizzle/PodLookupRepository';\n\nconst logger = getLoggerFor('WebIdProfileHandler');\n\nexport interface WebIdProfileHandlerOptions {\n  profileRepo: WebIdProfileRepository;\n  podLookupRepo?: PodLookupRepository;\n}\n\nexport function registerWebIdProfileRoutes(\n  server: ApiServer,\n  options: WebIdProfileHandlerOptions,\n): void {\n  const { profileRepo } = options;\n\n  /**\n   * GET /{username}/profile/card\n   *\n   * 获取 WebID Profile (Turtle 格式)\n   * 这是 Solid 标准的 WebID 端点\n   */\n  server.get('/:username/profile/card', async (_request, response, params) => {\n    const username = decodeURIComponent(params.username);\n\n    try {\n      const profile = await resolveProfileWithStorageBackfill(username, options);\n\n      if (!profile) {\n        sendError(response, 404, 'Profile not found');\n        return;\n      }\n\n      // 返回 Turtle 格式\n      const turtle = profileRepo.generateProfileTurtle(profile);\n\n      response.statusCode = 200;\n      response.setHeader('Content-Type', 'text/turtle');\n      response.setHeader('Link', `<${profile.webidUrl}>; rel=\"describedby\"`);\n      response.end(turtle);\n    } catch (error) {\n      logger.error(`Failed to get profile for ${username}: ${error}`);\n      sendError(response, 500, 'Internal server error');\n    }\n  }, { public: true });\n\n  /**\n   * POST /api/v1/identity/{username}/storage\n   *\n   * 更新 storage 指针\n   * 用于 Local 节点更新其 storage URL\n   *\n   * Request body:\n   * {\n   *   \"storageUrl\": \"https://alice.undefineds.xyz/\"\n   * }\n   */\n  server.post('/api/v1/identity/:username/storage', async (request, response, params) => {\n    const username = decodeURIComponent(params.username);\n\n    try {\n      const body = await readJsonBody(request);\n      const payload = body as { storageUrl?: string; storageMode?: string } | undefined;\n\n      if (!payload?.storageUrl) {\n        sendError(response, 400, 'storageUrl is required');\n        return;\n      }\n\n      // 验证 URL 格式\n      try {\n        new URL(payload.storageUrl);\n      } catch {\n        sendError(response, 400, 'Invalid storageUrl format');\n        return;\n      }\n\n      const profile = await profileRepo.updateStorage(username, {\n        storageUrl: payload.storageUrl,\n        storageMode: payload.storageMode as 'cloud' | 'local' | 'custom' | undefined,\n      });\n\n      if (!profile) {\n        sendError(response, 404, 'Profile not found');\n        return;\n      }\n\n      logger.info(`Updated storage for ${username}: ${payload.storageUrl}`);\n\n      sendJson(response, 200, {\n        success: true,\n        username,\n        storageUrl: profile.storageUrl,\n        storageMode: profile.storageMode,\n        updatedAt: profile.updatedAt.toISOString(),\n      });\n    } catch (error) {\n      logger.error(`Failed to update storage for ${username}: ${error}`);\n      sendError(response, 500, 'Internal server error');\n    }\n  });\n\n  /**\n   * GET /api/v1/identity/{username}\n   *\n   * 获取 WebID Profile 信息 (JSON 格式)\n   */\n  server.get('/api/v1/identity/:username', async (_request, response, params) => {\n    const username = decodeURIComponent(params.username);\n\n    try {\n      const profile = await resolveProfileWithStorageBackfill(username, options);\n\n      if (!profile) {\n        sendError(response, 404, 'Profile not found');\n        return;\n      }\n\n      sendJson(response, 200, {\n        username: profile.username,\n        webidUrl: profile.webidUrl,\n        storageUrl: profile.storageUrl,\n        storageMode: profile.storageMode,\n        oidcIssuer: profile.oidcIssuer,\n        createdAt: profile.createdAt.toISOString(),\n        updatedAt: profile.updatedAt.toISOString(),\n      });\n    } catch (error) {\n      logger.error(`Failed to get profile for ${username}: ${error}`);\n      sendError(response, 500, 'Internal server error');\n    }\n  }, { public: true });\n\n  /**\n   * POST /api/v1/identity\n   *\n   * 创建 WebID Profile\n   *\n   * Request body:\n   * {\n   *   \"username\": \"alice\",\n   *   \"storageMode\": \"local\",  // optional, default: \"cloud\"\n   *   \"storageUrl\": \"https://alice.undefineds.xyz/\"  // optional\n   * }\n   */\n  server.post('/api/v1/identity', async (request, response, _params) => {\n    try {\n      const body = await readJsonBody(request);\n      const payload = body as {\n        username?: string;\n        storageMode?: string;\n        storageUrl?: string;\n        accountId?: string;\n      } | undefined;\n\n      if (!payload?.username) {\n        sendError(response, 400, 'username is required');\n        return;\n      }\n\n      // 验证用户名格式\n      if (!/^[a-z0-9][a-z0-9-]{1,61}[a-z0-9]$/.test(payload.username)) {\n        sendError(response, 400, 'Invalid username format');\n        return;\n      }\n\n      // 检查是否已存在\n      const existing = await profileRepo.get(payload.username);\n      if (existing) {\n        sendError(response, 409, 'Username already taken');\n        return;\n      }\n\n      const profile = await profileRepo.create({\n        username: payload.username,\n        storageMode: payload.storageMode as 'cloud' | 'local' | 'custom' | undefined,\n        storageUrl: payload.storageUrl,\n        accountId: payload.accountId,\n      });\n\n      logger.info(`Created profile for ${payload.username}`);\n\n      sendJson(response, 201, {\n        success: true,\n        username: profile.username,\n        webidUrl: profile.webidUrl,\n        storageUrl: profile.storageUrl,\n        storageMode: profile.storageMode,\n        createdAt: profile.createdAt.toISOString(),\n      });\n    } catch (error) {\n      logger.error(`Failed to create profile: ${error}`);\n      sendError(response, 500, 'Internal server error');\n    }\n  });\n\n  logger.info('WebID Profile routes registered');\n}\n\nasync function resolveProfileWithStorageBackfill(\n  username: string,\n  options: WebIdProfileHandlerOptions,\n) {\n  const { profileRepo, podLookupRepo } = options;\n  const profile = await profileRepo.get(username);\n  if (!profile) {\n    return null;\n  }\n\n  if (profile.storageUrl || !profile.accountId || !podLookupRepo) {\n    return profile;\n  }\n\n  const pods = await podLookupRepo.listByAccountId(profile.accountId);\n  const storageUrl = selectStorageBackfillCandidate(username, pods);\n  if (!storageUrl) {\n    logger.warn(`Skipped storage backfill for ${username}: no unambiguous pod found for account ${profile.accountId}`);\n    return profile;\n  }\n\n  try {\n    const updated = await profileRepo.updateStorage(username, {\n      storageUrl,\n      storageMode: profile.storageMode,\n    });\n    if (updated) {\n      logger.info(`Backfilled storage for ${username}: ${storageUrl}`);\n      return updated;\n    }\n  } catch (error) {\n    logger.warn(`Failed to backfill storage for ${username}: ${error}`);\n  }\n\n  return profile;\n}\n\nfunction selectStorageBackfillCandidate(\n  username: string,\n  pods: PodLookupResult[],\n): string | null {\n  if (pods.length === 0) {\n    return null;\n  }\n\n  const exactMatches = pods.filter((pod) => derivePodSlug(pod.baseUrl) === username);\n  if (exactMatches.length === 1) {\n    return ensureTrailingSlash(exactMatches[0].baseUrl);\n  }\n\n  if (exactMatches.length > 1) {\n    return null;\n  }\n\n  if (pods.length === 1) {\n    return ensureTrailingSlash(pods[0].baseUrl);\n  }\n\n  return null;\n}\n\nfunction derivePodSlug(baseUrl: string): string | null {\n  try {\n    const parsed = new URL(baseUrl);\n    const [slug] = parsed.pathname.split('/').filter(Boolean);\n    return slug || null;\n  } catch {\n    return null;\n  }\n}\n\nfunction ensureTrailingSlash(url: string): string {\n  return url.replace(/\\/+$/, '') + '/';\n}\n\nasync function readJsonBody(request: IncomingMessage): Promise<unknown> {\n  return new Promise((resolve, reject) => {\n    let data = '';\n    request.setEncoding('utf8');\n    request.on('data', (chunk: string) => {\n      data += chunk;\n    });\n    request.on('end', () => {\n      if (!data) {\n        resolve(undefined);\n        return;\n      }\n      try {\n        resolve(JSON.parse(data));\n      } catch {\n        resolve(undefined);\n      }\n    });\n    request.on('error', reject);\n  });\n}\n\nfunction sendJson(response: ServerResponse, status: number, data: unknown): void {\n  response.statusCode = status;\n  response.setHeader('Content-Type', 'application/json');\n  response.end(JSON.stringify(data));\n}\n\nfunction sendError(response: ServerResponse, status: number, message: string): void {\n  sendJson(response, status, { error: message });\n}\n"]}

package/dist/components/components.jsonld

@@ -35,6 +35,7 @@
     "undefineds:dist/http/terminal/TerminalHttpHandler.jsonld",
     "undefineds:dist/pods/ReservedSuffixIdentifierGenerator.jsonld",
     "undefineds:dist/identity/drizzle/DrizzleIndexedStorage.jsonld",
+    "undefineds:dist/identity/drizzle/WebIdProfileRepository.jsonld",
     "undefineds:dist/storage/keyvalue/PostgresKeyValueStorage.jsonld",
     "undefineds:dist/storage/keyvalue/RedisKeyValueStorage.jsonld",
     "undefineds:dist/storage/keyvalue/SqliteKeyValueStorage.jsonld",
@@ -78,6 +79,7 @@
     "undefineds:dist/identity/oidc/DisabledIdentityProviderHandler.jsonld",
     "undefineds:dist/identity/oidc/AutoDetectOidcHandler.jsonld",
     "undefineds:dist/identity/oidc/AutoDetectIdentityProviderHandler.jsonld",
+    "undefineds:dist/identity/oidc/LoopbackClientIdAdapterFactory.jsonld",
     "undefineds:dist/storage/locking/UrlAwareRedisLocker.jsonld",
     "undefineds:dist/provision/ProvisionPodCreator.jsonld",
     "undefineds:dist/provision/ProvisionCodeCodec.jsonld",

package/dist/components/context.jsonld

@@ -775,6 +775,30 @@
           }
         }
       },
+      "WebIdProfileRepository": {
+        "@id": "undefineds:dist/identity/drizzle/WebIdProfileRepository.jsonld#WebIdProfileRepository",
+        "@prefix": true,
+        "@context": {
+          "options_baseUrl": {
+            "@id": "undefineds:dist/identity/drizzle/WebIdProfileRepository.jsonld#WebIdProfileRepository_options_baseUrl"
+          },
+          "options_db": {
+            "@id": "undefineds:dist/identity/drizzle/WebIdProfileRepository.jsonld#WebIdProfileRepository_options_db"
+          },
+          "options_identityDbUrl": {
+            "@id": "undefineds:dist/identity/drizzle/WebIdProfileRepository.jsonld#WebIdProfileRepository_options_identityDbUrl"
+          },
+          "baseUrl": {
+            "@id": "undefineds:dist/identity/drizzle/WebIdProfileRepository.jsonld#WebIdProfileRepository_options_baseUrl"
+          },
+          "db": {
+            "@id": "undefineds:dist/identity/drizzle/WebIdProfileRepository.jsonld#WebIdProfileRepository_options_db"
+          },
+          "identityDbUrl": {
+            "@id": "undefineds:dist/identity/drizzle/WebIdProfileRepository.jsonld#WebIdProfileRepository_options_identityDbUrl"
+          }
+        }
+      },
       "PostgresKeyValueStorage": {
         "@id": "undefineds:dist/storage/keyvalue/PostgresKeyValueStorage.jsonld#PostgresKeyValueStorage",
         "@prefix": true,
@@ -1782,6 +1806,18 @@
           }
         }
       },
+      "LoopbackClientIdAdapterFactory": {
+        "@id": "undefineds:dist/identity/oidc/LoopbackClientIdAdapterFactory.jsonld#LoopbackClientIdAdapterFactory",
+        "@prefix": true,
+        "@context": {
+          "source": {
+            "@id": "undefineds:dist/identity/oidc/LoopbackClientIdAdapterFactory.jsonld#LoopbackClientIdAdapterFactory_source"
+          },
+          "converter": {
+            "@id": "undefineds:dist/identity/oidc/LoopbackClientIdAdapterFactory.jsonld#LoopbackClientIdAdapterFactory_converter"
+          }
+        }
+      },
       "UrlAwareRedisLocker": {
         "@id": "undefineds:dist/storage/locking/UrlAwareRedisLocker.jsonld#UrlAwareRedisLocker",
         "@prefix": true,
@@ -1825,6 +1861,9 @@
           "args_provisionBaseUrl": {
             "@id": "undefineds:dist/provision/ProvisionPodCreator.jsonld#ProvisionPodCreator_args_provisionBaseUrl"
           },
+          "args_webIdProfileRepo": {
+            "@id": "undefineds:dist/provision/ProvisionPodCreator.jsonld#ProvisionPodCreator_args_webIdProfileRepo"
+          },
           "args_baseUrl": {
             "@id": "undefineds:dist/provision/ProvisionPodCreator.jsonld#ProvisionPodCreator_args_baseUrl"
           },
@@ -1843,6 +1882,9 @@
           "provisionBaseUrl": {
             "@id": "undefineds:dist/provision/ProvisionPodCreator.jsonld#ProvisionPodCreator_args_provisionBaseUrl"
           },
+          "webIdProfileRepo": {
+            "@id": "undefineds:dist/provision/ProvisionPodCreator.jsonld#ProvisionPodCreator_args_webIdProfileRepo"
+          },
           "baseUrl": {
             "@id": "undefineds:dist/provision/ProvisionPodCreator.jsonld#ProvisionPodCreator_args_baseUrl"
           },

package/dist/identity/drizzle/PodLookupRepository.d.ts

@@ -33,6 +33,10 @@ export declare class PodLookupRepository {
      * Get Pod by ID.
      */
     findById(podId: string): Promise<PodLookupResult | undefined>;
+    /**
+     * List Pods for a specific account.
+     */
+    listByAccountId(accountId: string): Promise<PodLookupResult[]>;
     /**
      * Get migration status for a Pod from identity_pod_usage table.
      */

package/dist/identity/drizzle/PodLookupRepository.js

@@ -38,6 +38,13 @@ class PodLookupRepository {
         const pods = await this.getAllPods();
         return pods.find((p) => p.podId === podId);
     }
+    /**
+     * List Pods for a specific account.
+     */
+    async listByAccountId(accountId) {
+        const pods = await this.getAllPods();
+        return pods.filter((pod) => pod.accountId === accountId);
+    }
     /**
      * Get migration status for a Pod from identity_pod_usage table.
      */

package/dist/identity/drizzle/PodLookupRepository.js.map

@@ -1 +1 @@
-{"version":3,"file":"PodLookupRepository.js","sourceRoot":"","sources":["../../../src/identity/drizzle/PodLookupRepository.ts"],"names":[],"mappings":";;;AAAA,6CAAkC;AAClC,6BAA6E;AA4B7E;;;;;;GAMG;AACH,MAAa,mBAAmB;IAI9B,YACmB,EAAoB,EACrC,WAAoB;QADH,OAAE,GAAF,EAAE,CAAkB;QAGrC,IAAI,CAAC,WAAW,GAAG,WAAW,IAAI,aAAa,CAAC;QAChD,IAAI,CAAC,cAAc,GAAG,oBAAoB,CAAC;IAC7C,CAAC;IAED;;OAEG;IACI,KAAK,CAAC,wBAAwB,CAAC,YAAoB;QACxD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC;QAErC,IAAI,SAAsC,CAAC;QAC3C,IAAI,UAAU,GAAG,CAAC,CAAC;QAEnB,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,IAAI,YAAY,CAAC,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,GAAG,CAAC,OAAO,CAAC,MAAM,GAAG,UAAU,EAAE,CAAC;gBAC5E,SAAS,GAAG,GAAG,CAAC;gBAChB,UAAU,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC;YAClC,CAAC;QACH,CAAC;QAED,OAAO,SAAS,CAAC;IACnB,CAAC;IAED;;OAEG;IACI,KAAK,CAAC,QAAQ,CAAC,KAAa;QACjC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC;QACrC,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,KAAK,CAAC,CAAC;IAC7C,CAAC;IAED;;OAEG;IACI,KAAK,CAAC,kBAAkB,CAAC,KAAa;QAC3C,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,iBAAG,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC;YACtD,MAAM,MAAM,GAAG,MAAM,IAAA,iBAAY,EAO9B,IAAI,CAAC,EAAE,EAAE,IAAA,iBAAG,EAAA;;eAEN,OAAO;yBACG,KAAK;;OAEvB,CAAC,CAAC;YAEH,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC7B,OAAO,SAAS,CAAC;YACnB,CAAC;YACD,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAC3B,OAAO;gBACL,KAAK,EAAE,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,EAAE,IAAI,KAAK;gBACpC,MAAM,EAAE,GAAG,CAAC,OAAO,IAAI,SAAS;gBAChC,eAAe,EAAE,GAAG,CAAC,gBAAyD;gBAC9E,mBAAmB,EAAE,GAAG,CAAC,qBAAqB,IAAI,SAAS;gBAC3D,iBAAiB,EAAE,GAAG,CAAC,kBAAkB,IAAI,SAAS;aACvD,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,yBAAyB;YACzB,OAAO,SAAS,CAAC;QACnB,CAAC;IACH,CAAC;IAED;;OAEG;IACI,KAAK,CAAC,SAAS,CAAC,KAAa,EAAE,MAAc;QAClD,MAAM,OAAO,GAAG,iBAAG,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC;QACtD,MAAM,IAAA,qBAAgB,EAAC,IAAI,CAAC,EAAE,EAAE,IAAA,iBAAG,EAAA;oBACnB,OAAO;gBACX,KAAK,SAAS,MAAM;qDACiB,MAAM;KACtD,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACI,KAAK,CAAC,kBAAkB,CAC7B,KAAa,EACb,MAAiC,EACjC,UAA0B,EAC1B,QAAwB;QAExB,MAAM,OAAO,GAAG,iBAAG,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC;QACtD,MAAM,IAAA,qBAAgB,EAAC,IAAI,CAAC,EAAE,EAAE,IAAA,iBAAG,EAAA;oBACnB,OAAO;gBACX,KAAK,SAAS,MAAM,KAAK,UAAU,IAAI,IAAI,KAAK,QAAQ,IAAI,CAAC;;6BAEhD,MAAM;kCACD,UAAU,IAAI,IAAI;+BACrB,QAAQ,IAAI,CAAC;KACvC,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACI,KAAK,CAAC,WAAW;QACtB,OAAO,IAAI,CAAC,UAAU,EAAE,CAAC;IAC3B,CAAC;IAED;;;;;OAKG;IACK,KAAK,CAAC,UAAU;QACtB,MAAM,SAAS,GAAG,iBAAG,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC;QAErD,MAAM,MAAM,GAAG,MAAM,IAAA,iBAAY,EAAgB,IAAI,CAAC,EAAE,EAAE,IAAA,iBAAG,EAAA;+BAClC,SAAS;;KAEnC,CAAC,CAAC;QAEH,MAAM,IAAI,GAAsB,EAAE,CAAC;QAEnC,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;YAC9B,IAAI,GAAG,CAAC,EAAE,IAAI,GAAG,CAAC,UAAU,IAAI,GAAG,CAAC,QAAQ,EAAE,CAAC;gBAC7C,IAAI,CAAC,IAAI,CAAC;oBACR,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;oBACrB,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC;oBACjC,OAAO,EAAE,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;oBAC7B,MAAM,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS;oBACrD,UAAU,EAAE,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,SAAS;iBACpE,CAAC,CAAC;gBACH,SAAS;YACX,CAAC;YAED,IAAI,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;gBACxC,SAAS;YACX,CAAC;YAED,IAAI,CAAC;gBACH,MAAM,SAAS,GAAG,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,gBAAgB,EAAE,EAAE,CAAC,CAAC;gBACxD,MAAM,IAAI,GAAG,OAAO,GAAG,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC;gBAE/E,MAAM,MAAM,GAAI,IAAY,CAAC,SAAS,CAAC,IAAK,IAAY,CAAC,GAAG,IAAI,EAAE,CAAC;gBAEnE,KAAK,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;oBACtD,MAAM,GAAG,GAAG,OAAkC,CAAC;oBAC/C,IAAI,GAAG,CAAC,OAAO,IAAI,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;wBACnD,IAAI,CAAC,IAAI,CAAC;4BACR,KAAK;4BACL,SAAS;4BACT,OAAO,EAAE,GAAG,CAAC,OAAO;4BACpB,MAAM,EAAE,OAAO,GAAG,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS;4BAC/D,UAAU,EAAE,OAAO,GAAG,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS;yBAC5E,CAAC,CAAC;oBACL,CAAC;gBACH,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,0BAA0B;YAC5B,CAAC;QACH,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;CACF;AA5KD,kDA4KC","sourcesContent":["import { sql } from 'drizzle-orm';\nimport { type IdentityDatabase, executeQuery, executeStatement } from './db';\n\nexport interface PodLookupResult {\n  podId: string;\n  accountId: string;\n  baseUrl: string;\n  nodeId?: string;\n  edgeNodeId?: string;\n}\n\nexport interface PodMigrationStatus {\n  podId: string;\n  nodeId?: string;\n  migrationStatus?: 'syncing' | 'done' | null;\n  migrationTargetNode?: string;\n  migrationProgress?: number;\n}\n\ninterface InternalKvRow {\n  key?: string;\n  value?: string;\n  id?: string;\n  account_id?: string;\n  base_url?: string;\n  node_id?: string;\n  edge_node_id?: string;\n}\n\n/**\n * Repository for Pod lookup operations.\n *\n * Reads Pod data from CSS's internal_kv table where account data is stored.\n * CSS stores account data at key \"accounts/data/{accountId}\" with Pod info\n * nested in the \"**pod**\" field.\n */\nexport class PodLookupRepository {\n  private readonly kvTableName: string;\n  private readonly usageTableName: string;\n\n  public constructor(\n    private readonly db: IdentityDatabase,\n    kvTableName?: string,\n  ) {\n    this.kvTableName = kvTableName ?? 'internal_kv';\n    this.usageTableName = 'identity_pod_usage';\n  }\n\n  /**\n   * Find Pod by resource path (matches longest baseUrl prefix).\n   */\n  public async findByResourceIdentifier(resourcePath: string): Promise<PodLookupResult | undefined> {\n    const pods = await this.getAllPods();\n\n    let bestMatch: PodLookupResult | undefined;\n    let bestLength = 0;\n\n    for (const pod of pods) {\n      if (resourcePath.startsWith(pod.baseUrl) && pod.baseUrl.length > bestLength) {\n        bestMatch = pod;\n        bestLength = pod.baseUrl.length;\n      }\n    }\n\n    return bestMatch;\n  }\n\n  /**\n   * Get Pod by ID.\n   */\n  public async findById(podId: string): Promise<PodLookupResult | undefined> {\n    const pods = await this.getAllPods();\n    return pods.find((p) => p.podId === podId);\n  }\n\n  /**\n   * Get migration status for a Pod from identity_pod_usage table.\n   */\n  public async getMigrationStatus(podId: string): Promise<PodMigrationStatus | undefined> {\n    try {\n      const tableId = sql.identifier([this.usageTableName]);\n      const result = await executeQuery<{\n        pod_id?: string;\n        id?: string;\n        node_id?: string | null;\n        migration_status?: string | null;\n        migration_target_node?: string | null;\n        migration_progress?: number | null;\n      }>(this.db, sql`\n        SELECT pod_id, node_id, migration_status, migration_target_node, migration_progress\n        FROM ${tableId}\n        WHERE pod_id = ${podId}\n        LIMIT 1\n      `);\n\n      if (result.rows.length === 0) {\n        return undefined;\n      }\n      const row = result.rows[0];\n      return {\n        podId: row.pod_id ?? row.id ?? podId,\n        nodeId: row.node_id ?? undefined,\n        migrationStatus: row.migration_status as 'syncing' | 'done' | null | undefined,\n        migrationTargetNode: row.migration_target_node ?? undefined,\n        migrationProgress: row.migration_progress ?? undefined,\n      };\n    } catch {\n      // Table might not exist.\n      return undefined;\n    }\n  }\n\n  /**\n   * Set the nodeId for a Pod in identity_pod_usage table.\n   */\n  public async setNodeId(podId: string, nodeId: string): Promise<void> {\n    const tableId = sql.identifier([this.usageTableName]);\n    await executeStatement(this.db, sql`\n      INSERT INTO ${tableId} (pod_id, account_id, node_id)\n      VALUES (${podId}, '', ${nodeId})\n      ON CONFLICT (pod_id) DO UPDATE SET node_id = ${nodeId}\n    `);\n  }\n\n  /**\n   * Update migration status for a Pod in identity_pod_usage table.\n   */\n  public async setMigrationStatus(\n    podId: string,\n    status: 'syncing' | 'done' | null,\n    targetNode?: string | null,\n    progress?: number | null,\n  ): Promise<void> {\n    const tableId = sql.identifier([this.usageTableName]);\n    await executeStatement(this.db, sql`\n      INSERT INTO ${tableId} (pod_id, account_id, migration_status, migration_target_node, migration_progress)\n      VALUES (${podId}, '', ${status}, ${targetNode ?? null}, ${progress ?? 0})\n      ON CONFLICT (pod_id) DO UPDATE SET\n        migration_status = ${status},\n        migration_target_node = ${targetNode ?? null},\n        migration_progress = ${progress ?? 0}\n    `);\n  }\n\n  /**\n   * List all pods.\n   */\n  public async listAllPods(): Promise<PodLookupResult[]> {\n    return this.getAllPods();\n  }\n\n  /**\n   * Extract all pods from CSS's internal_kv storage.\n   *\n   * It keeps backward compatibility with legacy rows that already expose\n   * id/account_id/base_url columns (used by some unit tests and older schemas).\n   */\n  private async getAllPods(): Promise<PodLookupResult[]> {\n    const kvTableId = sql.identifier([this.kvTableName]);\n\n    const result = await executeQuery<InternalKvRow>(this.db, sql`\n      SELECT key, value FROM ${kvTableId}\n      WHERE key LIKE 'accounts/data/%'\n    `);\n\n    const pods: PodLookupResult[] = [];\n\n    for (const row of result.rows) {\n      if (row.id && row.account_id && row.base_url) {\n        pods.push({\n          podId: String(row.id),\n          accountId: String(row.account_id),\n          baseUrl: String(row.base_url),\n          nodeId: row.node_id ? String(row.node_id) : undefined,\n          edgeNodeId: row.edge_node_id ? String(row.edge_node_id) : undefined,\n        });\n        continue;\n      }\n\n      if (!row.key || row.value === undefined) {\n        continue;\n      }\n\n      try {\n        const accountId = row.key.replace('accounts/data/', '');\n        const data = typeof row.value === 'string' ? JSON.parse(row.value) : row.value;\n\n        const podMap = (data as any)['**pod**'] || (data as any).pod || {};\n\n        for (const [podId, podData] of Object.entries(podMap)) {\n          const pod = podData as Record<string, unknown>;\n          if (pod.baseUrl && typeof pod.baseUrl === 'string') {\n            pods.push({\n              podId,\n              accountId,\n              baseUrl: pod.baseUrl,\n              nodeId: typeof pod.nodeId === 'string' ? pod.nodeId : undefined,\n              edgeNodeId: typeof pod.edgeNodeId === 'string' ? pod.edgeNodeId : undefined,\n            });\n          }\n        }\n      } catch {\n        // Skip malformed entries.\n      }\n    }\n\n    return pods;\n  }\n}\n"]}
+{"version":3,"file":"PodLookupRepository.js","sourceRoot":"","sources":["../../../src/identity/drizzle/PodLookupRepository.ts"],"names":[],"mappings":";;;AAAA,6CAAkC;AAClC,6BAA6E;AA4B7E;;;;;;GAMG;AACH,MAAa,mBAAmB;IAI9B,YACmB,EAAoB,EACrC,WAAoB;QADH,OAAE,GAAF,EAAE,CAAkB;QAGrC,IAAI,CAAC,WAAW,GAAG,WAAW,IAAI,aAAa,CAAC;QAChD,IAAI,CAAC,cAAc,GAAG,oBAAoB,CAAC;IAC7C,CAAC;IAED;;OAEG;IACI,KAAK,CAAC,wBAAwB,CAAC,YAAoB;QACxD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC;QAErC,IAAI,SAAsC,CAAC;QAC3C,IAAI,UAAU,GAAG,CAAC,CAAC;QAEnB,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,IAAI,YAAY,CAAC,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,GAAG,CAAC,OAAO,CAAC,MAAM,GAAG,UAAU,EAAE,CAAC;gBAC5E,SAAS,GAAG,GAAG,CAAC;gBAChB,UAAU,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC;YAClC,CAAC;QACH,CAAC;QAED,OAAO,SAAS,CAAC;IACnB,CAAC;IAED;;OAEG;IACI,KAAK,CAAC,QAAQ,CAAC,KAAa;QACjC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC;QACrC,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,KAAK,CAAC,CAAC;IAC7C,CAAC;IAED;;OAEG;IACI,KAAK,CAAC,eAAe,CAAC,SAAiB;QAC5C,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC;QACrC,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC;IAC3D,CAAC;IAED;;OAEG;IACI,KAAK,CAAC,kBAAkB,CAAC,KAAa;QAC3C,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,iBAAG,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC;YACtD,MAAM,MAAM,GAAG,MAAM,IAAA,iBAAY,EAO9B,IAAI,CAAC,EAAE,EAAE,IAAA,iBAAG,EAAA;;eAEN,OAAO;yBACG,KAAK;;OAEvB,CAAC,CAAC;YAEH,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC7B,OAAO,SAAS,CAAC;YACnB,CAAC;YACD,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAC3B,OAAO;gBACL,KAAK,EAAE,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,EAAE,IAAI,KAAK;gBACpC,MAAM,EAAE,GAAG,CAAC,OAAO,IAAI,SAAS;gBAChC,eAAe,EAAE,GAAG,CAAC,gBAAyD;gBAC9E,mBAAmB,EAAE,GAAG,CAAC,qBAAqB,IAAI,SAAS;gBAC3D,iBAAiB,EAAE,GAAG,CAAC,kBAAkB,IAAI,SAAS;aACvD,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,yBAAyB;YACzB,OAAO,SAAS,CAAC;QACnB,CAAC;IACH,CAAC;IAED;;OAEG;IACI,KAAK,CAAC,SAAS,CAAC,KAAa,EAAE,MAAc;QAClD,MAAM,OAAO,GAAG,iBAAG,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC;QACtD,MAAM,IAAA,qBAAgB,EAAC,IAAI,CAAC,EAAE,EAAE,IAAA,iBAAG,EAAA;oBACnB,OAAO;gBACX,KAAK,SAAS,MAAM;qDACiB,MAAM;KACtD,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACI,KAAK,CAAC,kBAAkB,CAC7B,KAAa,EACb,MAAiC,EACjC,UAA0B,EAC1B,QAAwB;QAExB,MAAM,OAAO,GAAG,iBAAG,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC;QACtD,MAAM,IAAA,qBAAgB,EAAC,IAAI,CAAC,EAAE,EAAE,IAAA,iBAAG,EAAA;oBACnB,OAAO;gBACX,KAAK,SAAS,MAAM,KAAK,UAAU,IAAI,IAAI,KAAK,QAAQ,IAAI,CAAC;;6BAEhD,MAAM;kCACD,UAAU,IAAI,IAAI;+BACrB,QAAQ,IAAI,CAAC;KACvC,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACI,KAAK,CAAC,WAAW;QACtB,OAAO,IAAI,CAAC,UAAU,EAAE,CAAC;IAC3B,CAAC;IAED;;;;;OAKG;IACK,KAAK,CAAC,UAAU;QACtB,MAAM,SAAS,GAAG,iBAAG,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC;QAErD,MAAM,MAAM,GAAG,MAAM,IAAA,iBAAY,EAAgB,IAAI,CAAC,EAAE,EAAE,IAAA,iBAAG,EAAA;+BAClC,SAAS;;KAEnC,CAAC,CAAC;QAEH,MAAM,IAAI,GAAsB,EAAE,CAAC;QAEnC,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;YAC9B,IAAI,GAAG,CAAC,EAAE,IAAI,GAAG,CAAC,UAAU,IAAI,GAAG,CAAC,QAAQ,EAAE,CAAC;gBAC7C,IAAI,CAAC,IAAI,CAAC;oBACR,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;oBACrB,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC;oBACjC,OAAO,EAAE,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;oBAC7B,MAAM,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS;oBACrD,UAAU,EAAE,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,SAAS;iBACpE,CAAC,CAAC;gBACH,SAAS;YACX,CAAC;YAED,IAAI,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;gBACxC,SAAS;YACX,CAAC;YAED,IAAI,CAAC;gBACH,MAAM,SAAS,GAAG,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,gBAAgB,EAAE,EAAE,CAAC,CAAC;gBACxD,MAAM,IAAI,GAAG,OAAO,GAAG,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC;gBAE/E,MAAM,MAAM,GAAI,IAAY,CAAC,SAAS,CAAC,IAAK,IAAY,CAAC,GAAG,IAAI,EAAE,CAAC;gBAEnE,KAAK,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;oBACtD,MAAM,GAAG,GAAG,OAAkC,CAAC;oBAC/C,IAAI,GAAG,CAAC,OAAO,IAAI,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;wBACnD,IAAI,CAAC,IAAI,CAAC;4BACR,KAAK;4BACL,SAAS;4BACT,OAAO,EAAE,GAAG,CAAC,OAAO;4BACpB,MAAM,EAAE,OAAO,GAAG,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS;4BAC/D,UAAU,EAAE,OAAO,GAAG,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS;yBAC5E,CAAC,CAAC;oBACL,CAAC;gBACH,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,0BAA0B;YAC5B,CAAC;QACH,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;CACF;AApLD,kDAoLC","sourcesContent":["import { sql } from 'drizzle-orm';\nimport { type IdentityDatabase, executeQuery, executeStatement } from './db';\n\nexport interface PodLookupResult {\n  podId: string;\n  accountId: string;\n  baseUrl: string;\n  nodeId?: string;\n  edgeNodeId?: string;\n}\n\nexport interface PodMigrationStatus {\n  podId: string;\n  nodeId?: string;\n  migrationStatus?: 'syncing' | 'done' | null;\n  migrationTargetNode?: string;\n  migrationProgress?: number;\n}\n\ninterface InternalKvRow {\n  key?: string;\n  value?: string;\n  id?: string;\n  account_id?: string;\n  base_url?: string;\n  node_id?: string;\n  edge_node_id?: string;\n}\n\n/**\n * Repository for Pod lookup operations.\n *\n * Reads Pod data from CSS's internal_kv table where account data is stored.\n * CSS stores account data at key \"accounts/data/{accountId}\" with Pod info\n * nested in the \"**pod**\" field.\n */\nexport class PodLookupRepository {\n  private readonly kvTableName: string;\n  private readonly usageTableName: string;\n\n  public constructor(\n    private readonly db: IdentityDatabase,\n    kvTableName?: string,\n  ) {\n    this.kvTableName = kvTableName ?? 'internal_kv';\n    this.usageTableName = 'identity_pod_usage';\n  }\n\n  /**\n   * Find Pod by resource path (matches longest baseUrl prefix).\n   */\n  public async findByResourceIdentifier(resourcePath: string): Promise<PodLookupResult | undefined> {\n    const pods = await this.getAllPods();\n\n    let bestMatch: PodLookupResult | undefined;\n    let bestLength = 0;\n\n    for (const pod of pods) {\n      if (resourcePath.startsWith(pod.baseUrl) && pod.baseUrl.length > bestLength) {\n        bestMatch = pod;\n        bestLength = pod.baseUrl.length;\n      }\n    }\n\n    return bestMatch;\n  }\n\n  /**\n   * Get Pod by ID.\n   */\n  public async findById(podId: string): Promise<PodLookupResult | undefined> {\n    const pods = await this.getAllPods();\n    return pods.find((p) => p.podId === podId);\n  }\n\n  /**\n   * List Pods for a specific account.\n   */\n  public async listByAccountId(accountId: string): Promise<PodLookupResult[]> {\n    const pods = await this.getAllPods();\n    return pods.filter((pod) => pod.accountId === accountId);\n  }\n\n  /**\n   * Get migration status for a Pod from identity_pod_usage table.\n   */\n  public async getMigrationStatus(podId: string): Promise<PodMigrationStatus | undefined> {\n    try {\n      const tableId = sql.identifier([this.usageTableName]);\n      const result = await executeQuery<{\n        pod_id?: string;\n        id?: string;\n        node_id?: string | null;\n        migration_status?: string | null;\n        migration_target_node?: string | null;\n        migration_progress?: number | null;\n      }>(this.db, sql`\n        SELECT pod_id, node_id, migration_status, migration_target_node, migration_progress\n        FROM ${tableId}\n        WHERE pod_id = ${podId}\n        LIMIT 1\n      `);\n\n      if (result.rows.length === 0) {\n        return undefined;\n      }\n      const row = result.rows[0];\n      return {\n        podId: row.pod_id ?? row.id ?? podId,\n        nodeId: row.node_id ?? undefined,\n        migrationStatus: row.migration_status as 'syncing' | 'done' | null | undefined,\n        migrationTargetNode: row.migration_target_node ?? undefined,\n        migrationProgress: row.migration_progress ?? undefined,\n      };\n    } catch {\n      // Table might not exist.\n      return undefined;\n    }\n  }\n\n  /**\n   * Set the nodeId for a Pod in identity_pod_usage table.\n   */\n  public async setNodeId(podId: string, nodeId: string): Promise<void> {\n    const tableId = sql.identifier([this.usageTableName]);\n    await executeStatement(this.db, sql`\n      INSERT INTO ${tableId} (pod_id, account_id, node_id)\n      VALUES (${podId}, '', ${nodeId})\n      ON CONFLICT (pod_id) DO UPDATE SET node_id = ${nodeId}\n    `);\n  }\n\n  /**\n   * Update migration status for a Pod in identity_pod_usage table.\n   */\n  public async setMigrationStatus(\n    podId: string,\n    status: 'syncing' | 'done' | null,\n    targetNode?: string | null,\n    progress?: number | null,\n  ): Promise<void> {\n    const tableId = sql.identifier([this.usageTableName]);\n    await executeStatement(this.db, sql`\n      INSERT INTO ${tableId} (pod_id, account_id, migration_status, migration_target_node, migration_progress)\n      VALUES (${podId}, '', ${status}, ${targetNode ?? null}, ${progress ?? 0})\n      ON CONFLICT (pod_id) DO UPDATE SET\n        migration_status = ${status},\n        migration_target_node = ${targetNode ?? null},\n        migration_progress = ${progress ?? 0}\n    `);\n  }\n\n  /**\n   * List all pods.\n   */\n  public async listAllPods(): Promise<PodLookupResult[]> {\n    return this.getAllPods();\n  }\n\n  /**\n   * Extract all pods from CSS's internal_kv storage.\n   *\n   * It keeps backward compatibility with legacy rows that already expose\n   * id/account_id/base_url columns (used by some unit tests and older schemas).\n   */\n  private async getAllPods(): Promise<PodLookupResult[]> {\n    const kvTableId = sql.identifier([this.kvTableName]);\n\n    const result = await executeQuery<InternalKvRow>(this.db, sql`\n      SELECT key, value FROM ${kvTableId}\n      WHERE key LIKE 'accounts/data/%'\n    `);\n\n    const pods: PodLookupResult[] = [];\n\n    for (const row of result.rows) {\n      if (row.id && row.account_id && row.base_url) {\n        pods.push({\n          podId: String(row.id),\n          accountId: String(row.account_id),\n          baseUrl: String(row.base_url),\n          nodeId: row.node_id ? String(row.node_id) : undefined,\n          edgeNodeId: row.edge_node_id ? String(row.edge_node_id) : undefined,\n        });\n        continue;\n      }\n\n      if (!row.key || row.value === undefined) {\n        continue;\n      }\n\n      try {\n        const accountId = row.key.replace('accounts/data/', '');\n        const data = typeof row.value === 'string' ? JSON.parse(row.value) : row.value;\n\n        const podMap = (data as any)['**pod**'] || (data as any).pod || {};\n\n        for (const [podId, podData] of Object.entries(podMap)) {\n          const pod = podData as Record<string, unknown>;\n          if (pod.baseUrl && typeof pod.baseUrl === 'string') {\n            pods.push({\n              podId,\n              accountId,\n              baseUrl: pod.baseUrl,\n              nodeId: typeof pod.nodeId === 'string' ? pod.nodeId : undefined,\n              edgeNodeId: typeof pod.edgeNodeId === 'string' ? pod.edgeNodeId : undefined,\n            });\n          }\n        }\n      } catch {\n        // Skip malformed entries.\n      }\n    }\n\n    return pods;\n  }\n}\n"]}

package/dist/identity/drizzle/WebIdProfileRepository.d.ts

@@ -3,7 +3,7 @@
  *
  * 管理 WebID Profile 的托管，支持身份与存储分离架构
  */
-import type { IdentityDatabase } from './db';
+import { type IdentityDatabase } from './db';
 export interface WebIdProfile {
     username: string;
     webidUrl: string;
@@ -25,12 +25,15 @@ export interface UpdateStorageInput {
     storageUrl: string;
     storageMode?: 'cloud' | 'local' | 'custom';
 }
+export interface WebIdProfileRepositoryOptions {
+    baseUrl: string;
+    db?: IdentityDatabase;
+    identityDbUrl?: string;
+}
 export declare class WebIdProfileRepository {
-    private readonly db;
     private readonly baseUrl;
-    constructor(db: IdentityDatabase, options: {
-        baseUrl: string;
-    });
+    private readonly db;
+    constructor(options: WebIdProfileRepositoryOptions);
     /**
      * 创建 WebID Profile
      */

package/dist/identity/drizzle/WebIdProfileRepository.js

@@ -7,11 +7,15 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.WebIdProfileRepository = void 0;
 const drizzle_orm_1 = require("drizzle-orm");
+const db_1 = require("./db");
 const global_logger_factory_1 = require("global-logger-factory");
 const logger = (0, global_logger_factory_1.getLoggerFor)('WebIdProfileRepository');
 class WebIdProfileRepository {
-    constructor(db, options) {
-        this.db = db;
+    constructor(options) {
+        this.db = options.db ?? getIdentityDatabaseFromOptions(options);
+        if (!options.baseUrl) {
+            throw new Error('WebIdProfileRepository requires baseUrl.');
+        }
         this.baseUrl = options.baseUrl.replace(/\/$/, '');
     }
     /**
@@ -154,4 +158,10 @@ class WebIdProfileRepository {
     }
 }
 exports.WebIdProfileRepository = WebIdProfileRepository;
+function getIdentityDatabaseFromOptions(options) {
+    if (options.identityDbUrl) {
+        return (0, db_1.getIdentityDatabase)(options.identityDbUrl);
+    }
+    throw new Error('WebIdProfileRepository requires db or identityDbUrl.');
+}
 //# sourceMappingURL=WebIdProfileRepository.js.map

package/dist/identity/drizzle/WebIdProfileRepository.js.map

@@ -1 +1 @@
-{"version":3,"file":"WebIdProfileRepository.js","sourceRoot":"","sources":["../../../src/identity/drizzle/WebIdProfileRepository.ts"],"names":[],"mappings":";AAAA;;;;GAIG;;;AAEH,6CAAiC;AAEjC,iEAAqD;AAErD,MAAM,MAAM,GAAG,IAAA,oCAAY,EAAC,wBAAwB,CAAC,CAAC;AA0BtD,MAAa,sBAAsB;IAGjC,YACmB,EAAoB,EACrC,OAA4B;QADX,OAAE,GAAF,EAAE,CAAkB;QAGrC,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACpD,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM,CAAC,KAA8B;QACzC,MAAM,EAAE,QAAQ,EAAE,WAAW,GAAG,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,GAAG,KAAK,CAAC;QAEzE,eAAe;QACf,MAAM,QAAQ,GAAG,GAAG,IAAI,CAAC,OAAO,IAAI,QAAQ,kBAAkB,CAAC;QAE/D,iBAAiB;QACjB,MAAM,iBAAiB,GAAG,WAAW,KAAK,OAAO;YAC/C,CAAC,CAAC,GAAG,IAAI,CAAC,OAAO,IAAI,QAAQ,GAAG;YAChC,CAAC,CAAC,UAAU,CAAC;QAEf,mBAAmB;QACnB,MAAM,WAAW,GAAG,IAAI,CAAC,sBAAsB,CAAC,QAAQ,EAAE,QAAQ,EAAE,iBAAiB,CAAC,CAAC;QAEvF,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;QAEvB,MAAM,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,MAAM,CAAC;YACxD,QAAQ;YACR,QAAQ;YACR,UAAU,EAAE,iBAAiB;YAC7B,WAAW;YACX,UAAU,EAAE,IAAI,CAAC,OAAO;YACxB,WAAW;YACX,SAAS;YACT,SAAS,EAAE,GAAG;YACd,SAAS,EAAE,GAAG;SACf,CAAC,CAAC;QAEH,MAAM,CAAC,IAAI,CAAC,6BAA6B,QAAQ,KAAK,QAAQ,EAAE,CAAC,CAAC;QAElE,OAAO;YACL,QAAQ;YACR,QAAQ;YACR,UAAU,EAAE,iBAAiB;YAC7B,WAAW;YACX,UAAU,EAAE,IAAI,CAAC,OAAO;YACxB,WAAW;YACX,SAAS;YACT,SAAS,EAAE,GAAG;YACd,SAAS,EAAE,GAAG;SACf,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,GAAG,CAAC,QAAgB;QACxB,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,EAAE;aAC1B,MAAM,EAAE;aACR,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC;aAClC,KAAK,CAAC,IAAA,gBAAE,EAAC,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;aAC1D,KAAK,CAAC,CAAC,CAAC,CAAC;QAEZ,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzB,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,GAAG,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;QACvB,OAAO;YACL,QAAQ,EAAE,GAAG,CAAC,QAAQ;YACtB,QAAQ,EAAE,GAAG,CAAC,QAAQ;YACtB,UAAU,EAAE,GAAG,CAAC,UAAU,IAAI,SAAS;YACvC,WAAW,EAAG,GAAG,CAAC,WAA4C,IAAI,OAAO;YACzE,UAAU,EAAE,GAAG,CAAC,UAAU,IAAI,SAAS;YACvC,WAAW,EAAE,GAAG,CAAC,WAAkD;YACnE,SAAS,EAAE,GAAG,CAAC,SAAS,IAAI,SAAS;YACrC,SAAS,EAAE,GAAG,CAAC,SAAS;YACxB,SAAS,EAAE,GAAG,CAAC,SAAS;SACzB,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,aAAa,CAAC,QAAgB,EAAE,KAAyB;QAC7D,MAAM,EAAE,UAAU,EAAE,WAAW,EAAE,GAAG,KAAK,CAAC;QAE1C,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC1C,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO,IAAI,CAAC;QACd,CAAC;QAED,0BAA0B;QAC1B,MAAM,WAAW,GAAG;YAClB,GAAG,CAAC,QAAQ,CAAC,WAAW,IAAI,EAAE,CAAC;YAC/B,eAAe,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE;SACvC,CAAC;QAEF,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;QAEvB,MAAM,IAAI,CAAC,EAAE;aACV,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC;aACpC,GAAG,CAAC;YACH,UAAU;YACV,WAAW,EAAE,WAAW,IAAI,QAAQ,CAAC,WAAW;YAChD,WAAW;YACX,SAAS,EAAE,GAAG;SACf,CAAC;aACD,KAAK,CAAC,IAAA,gBAAE,EAAC,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC;QAE9D,MAAM,CAAC,IAAI,CAAC,uBAAuB,QAAQ,KAAK,UAAU,EAAE,CAAC,CAAC;QAE9D,OAAO;YACL,GAAG,QAAQ;YACX,UAAU;YACV,WAAW,EAAE,WAAW,IAAI,QAAQ,CAAC,WAAW;YAChD,WAAW;YACX,SAAS,EAAE,GAAG;SACf,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM,CAAC,QAAgB;QAC3B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,EAAE;aACzB,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC;aACpC,KAAK,CAAC,IAAA,gBAAE,EAAC,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC;QAE9D,wBAAwB;QACxB,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;OAEG;IACH,qBAAqB,CAAC,OAAqB;QACzC,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,UAAU,EAAE,GAAG,OAAO,CAAC;QAErD,OAAO;;;GAGR,QAAQ;;wBAEa,UAAU,IAAI,UAAU,CAAC,CAAC,CAAC;qBAC9B,UAAU,GAAG,CAAC,CAAC,CAAC,EAAE;CACtC,CAAC;IACA,CAAC;IAED;;OAEG;IACK,sBAAsB,CAC5B,QAAgB,EAChB,QAAgB,EAChB,UAAmB;QAEnB,MAAM,OAAO,GAA4B;YACvC,UAAU,EAAE;gBACV,IAAI,EAAE,4BAA4B;gBAClC,KAAK,EAAE,mCAAmC;aAC3C;YACD,KAAK,EAAE,QAAQ;YACf,OAAO,EAAE,aAAa;YACtB,kBAAkB,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,OAAO,EAAE;SAC5C,CAAC;QAEF,IAAI,UAAU,EAAE,CAAC;YACf,OAAO,CAAC,eAAe,CAAC,GAAG,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC;QACnD,CAAC;QAED,OAAO,OAAO,CAAC;IACjB,CAAC;CACF;AAhLD,wDAgLC","sourcesContent":["/**\n * WebID Profile Repository\n *\n * 管理 WebID Profile 的托管，支持身份与存储分离架构\n */\n\nimport { eq } from 'drizzle-orm';\nimport type { IdentityDatabase } from './db';\nimport { getLoggerFor } from 'global-logger-factory';\n\nconst logger = getLoggerFor('WebIdProfileRepository');\n\nexport interface WebIdProfile {\n  username: string;\n  webidUrl: string;\n  storageUrl?: string;\n  storageMode: 'cloud' | 'local' | 'custom';\n  oidcIssuer?: string;\n  profileData?: Record<string, unknown>;\n  accountId?: string;\n  createdAt: Date;\n  updatedAt: Date;\n}\n\nexport interface CreateWebIdProfileInput {\n  username: string;\n  storageMode?: 'cloud' | 'local' | 'custom';\n  storageUrl?: string;\n  accountId?: string;\n}\n\nexport interface UpdateStorageInput {\n  storageUrl: string;\n  storageMode?: 'cloud' | 'local' | 'custom';\n}\n\nexport class WebIdProfileRepository {\n  private readonly baseUrl: string;\n\n  constructor(\n    private readonly db: IdentityDatabase,\n    options: { baseUrl: string },\n  ) {\n    this.baseUrl = options.baseUrl.replace(/\\/$/, '');\n  }\n\n  /**\n   * 创建 WebID Profile\n   */\n  async create(input: CreateWebIdProfileInput): Promise<WebIdProfile> {\n    const { username, storageMode = 'cloud', storageUrl, accountId } = input;\n\n    // 生成 WebID URL\n    const webidUrl = `${this.baseUrl}/${username}/profile/card#me`;\n\n    // 默认 storage URL\n    const defaultStorageUrl = storageMode === 'cloud'\n      ? `${this.baseUrl}/${username}/`\n      : storageUrl;\n\n    // 生成默认的 Profile 数据\n    const profileData = this.generateDefaultProfile(username, webidUrl, defaultStorageUrl);\n\n    const now = new Date();\n\n    await this.db.insert(this.db.schema.webidProfiles).values({\n      username,\n      webidUrl,\n      storageUrl: defaultStorageUrl,\n      storageMode,\n      oidcIssuer: this.baseUrl,\n      profileData,\n      accountId,\n      createdAt: now,\n      updatedAt: now,\n    });\n\n    logger.info(`Created WebID profile for ${username}: ${webidUrl}`);\n\n    return {\n      username,\n      webidUrl,\n      storageUrl: defaultStorageUrl,\n      storageMode,\n      oidcIssuer: this.baseUrl,\n      profileData,\n      accountId,\n      createdAt: now,\n      updatedAt: now,\n    };\n  }\n\n  /**\n   * 获取 WebID Profile\n   */\n  async get(username: string): Promise<WebIdProfile | null> {\n    const results = await this.db\n      .select()\n      .from(this.db.schema.webidProfiles)\n      .where(eq(this.db.schema.webidProfiles.username, username))\n      .limit(1);\n\n    if (results.length === 0) {\n      return null;\n    }\n\n    const row = results[0];\n    return {\n      username: row.username,\n      webidUrl: row.webidUrl,\n      storageUrl: row.storageUrl ?? undefined,\n      storageMode: (row.storageMode as 'cloud' | 'local' | 'custom') ?? 'cloud',\n      oidcIssuer: row.oidcIssuer ?? undefined,\n      profileData: row.profileData as Record<string, unknown> | undefined,\n      accountId: row.accountId ?? undefined,\n      createdAt: row.createdAt,\n      updatedAt: row.updatedAt,\n    };\n  }\n\n  /**\n   * 更新 Storage URL（用于 Local 节点更新指针）\n   */\n  async updateStorage(username: string, input: UpdateStorageInput): Promise<WebIdProfile | null> {\n    const { storageUrl, storageMode } = input;\n\n    const existing = await this.get(username);\n    if (!existing) {\n      return null;\n    }\n\n    // 更新 Profile 数据中的 storage\n    const profileData = {\n      ...(existing.profileData ?? {}),\n      'solid:storage': { '@id': storageUrl },\n    };\n\n    const now = new Date();\n\n    await this.db\n      .update(this.db.schema.webidProfiles)\n      .set({\n        storageUrl,\n        storageMode: storageMode ?? existing.storageMode,\n        profileData,\n        updatedAt: now,\n      })\n      .where(eq(this.db.schema.webidProfiles.username, username));\n\n    logger.info(`Updated storage for ${username}: ${storageUrl}`);\n\n    return {\n      ...existing,\n      storageUrl,\n      storageMode: storageMode ?? existing.storageMode,\n      profileData,\n      updatedAt: now,\n    };\n  }\n\n  /**\n   * 删除 WebID Profile\n   */\n  async delete(username: string): Promise<boolean> {\n    const result = await this.db\n      .delete(this.db.schema.webidProfiles)\n      .where(eq(this.db.schema.webidProfiles.username, username));\n\n    // drizzle 返回的结果格式因数据库而异\n    return true;\n  }\n\n  /**\n   * 生成 WebID Profile 的 Turtle 格式\n   */\n  generateProfileTurtle(profile: WebIdProfile): string {\n    const { webidUrl, storageUrl, oidcIssuer } = profile;\n\n    return `@prefix foaf: <http://xmlns.com/foaf/0.1/>.\n@prefix solid: <http://www.w3.org/ns/solid/terms#>.\n\n<${webidUrl}>\n    a foaf:Person;\n    solid:oidcIssuer <${oidcIssuer}>${storageUrl ? `;\n    solid:storage <${storageUrl}>` : ''}.\n`;\n  }\n\n  /**\n   * 生成默认的 Profile 数据（JSON-LD 格式）\n   */\n  private generateDefaultProfile(\n    username: string,\n    webidUrl: string,\n    storageUrl?: string,\n  ): Record<string, unknown> {\n    const profile: Record<string, unknown> = {\n      '@context': {\n        foaf: 'http://xmlns.com/foaf/0.1/',\n        solid: 'http://www.w3.org/ns/solid/terms#',\n      },\n      '@id': webidUrl,\n      '@type': 'foaf:Person',\n      'solid:oidcIssuer': { '@id': this.baseUrl },\n    };\n\n    if (storageUrl) {\n      profile['solid:storage'] = { '@id': storageUrl };\n    }\n\n    return profile;\n  }\n}\n"]}
+{"version":3,"file":"WebIdProfileRepository.js","sourceRoot":"","sources":["../../../src/identity/drizzle/WebIdProfileRepository.ts"],"names":[],"mappings":";AAAA;;;;GAIG;;;AAEH,6CAAiC;AACjC,6BAAkE;AAClE,iEAAqD;AAErD,MAAM,MAAM,GAAG,IAAA,oCAAY,EAAC,wBAAwB,CAAC,CAAC;AAgCtD,MAAa,sBAAsB;IAIjC,YAAmB,OAAsC;QACvD,IAAI,CAAC,EAAE,GAAG,OAAO,CAAC,EAAE,IAAI,8BAA8B,CAAC,OAAO,CAAC,CAAC;QAChE,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;YACrB,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;QAC9D,CAAC;QACD,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACpD,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM,CAAC,KAA8B;QACzC,MAAM,EAAE,QAAQ,EAAE,WAAW,GAAG,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,GAAG,KAAK,CAAC;QAEzE,eAAe;QACf,MAAM,QAAQ,GAAG,GAAG,IAAI,CAAC,OAAO,IAAI,QAAQ,kBAAkB,CAAC;QAE/D,iBAAiB;QACjB,MAAM,iBAAiB,GAAG,WAAW,KAAK,OAAO;YAC/C,CAAC,CAAC,GAAG,IAAI,CAAC,OAAO,IAAI,QAAQ,GAAG;YAChC,CAAC,CAAC,UAAU,CAAC;QAEf,mBAAmB;QACnB,MAAM,WAAW,GAAG,IAAI,CAAC,sBAAsB,CAAC,QAAQ,EAAE,QAAQ,EAAE,iBAAiB,CAAC,CAAC;QAEvF,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;QAEvB,MAAM,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,MAAM,CAAC;YACxD,QAAQ;YACR,QAAQ;YACR,UAAU,EAAE,iBAAiB;YAC7B,WAAW;YACX,UAAU,EAAE,IAAI,CAAC,OAAO;YACxB,WAAW;YACX,SAAS;YACT,SAAS,EAAE,GAAG;YACd,SAAS,EAAE,GAAG;SACf,CAAC,CAAC;QAEH,MAAM,CAAC,IAAI,CAAC,6BAA6B,QAAQ,KAAK,QAAQ,EAAE,CAAC,CAAC;QAElE,OAAO;YACL,QAAQ;YACR,QAAQ;YACR,UAAU,EAAE,iBAAiB;YAC7B,WAAW;YACX,UAAU,EAAE,IAAI,CAAC,OAAO;YACxB,WAAW;YACX,SAAS;YACT,SAAS,EAAE,GAAG;YACd,SAAS,EAAE,GAAG;SACf,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,GAAG,CAAC,QAAgB;QACxB,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,EAAE;aAC1B,MAAM,EAAE;aACR,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC;aAClC,KAAK,CAAC,IAAA,gBAAE,EAAC,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;aAC1D,KAAK,CAAC,CAAC,CAAC,CAAC;QAEZ,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzB,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,GAAG,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;QACvB,OAAO;YACL,QAAQ,EAAE,GAAG,CAAC,QAAQ;YACtB,QAAQ,EAAE,GAAG,CAAC,QAAQ;YACtB,UAAU,EAAE,GAAG,CAAC,UAAU,IAAI,SAAS;YACvC,WAAW,EAAG,GAAG,CAAC,WAA4C,IAAI,OAAO;YACzE,UAAU,EAAE,GAAG,CAAC,UAAU,IAAI,SAAS;YACvC,WAAW,EAAE,GAAG,CAAC,WAAkD;YACnE,SAAS,EAAE,GAAG,CAAC,SAAS,IAAI,SAAS;YACrC,SAAS,EAAE,GAAG,CAAC,SAAS;YACxB,SAAS,EAAE,GAAG,CAAC,SAAS;SACzB,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,aAAa,CAAC,QAAgB,EAAE,KAAyB;QAC7D,MAAM,EAAE,UAAU,EAAE,WAAW,EAAE,GAAG,KAAK,CAAC;QAE1C,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC1C,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO,IAAI,CAAC;QACd,CAAC;QAED,0BAA0B;QAC1B,MAAM,WAAW,GAAG;YAClB,GAAG,CAAC,QAAQ,CAAC,WAAW,IAAI,EAAE,CAAC;YAC/B,eAAe,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE;SACvC,CAAC;QAEF,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;QAEvB,MAAM,IAAI,CAAC,EAAE;aACV,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC;aACpC,GAAG,CAAC;YACH,UAAU;YACV,WAAW,EAAE,WAAW,IAAI,QAAQ,CAAC,WAAW;YAChD,WAAW;YACX,SAAS,EAAE,GAAG;SACf,CAAC;aACD,KAAK,CAAC,IAAA,gBAAE,EAAC,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC;QAE9D,MAAM,CAAC,IAAI,CAAC,uBAAuB,QAAQ,KAAK,UAAU,EAAE,CAAC,CAAC;QAE9D,OAAO;YACL,GAAG,QAAQ;YACX,UAAU;YACV,WAAW,EAAE,WAAW,IAAI,QAAQ,CAAC,WAAW;YAChD,WAAW;YACX,SAAS,EAAE,GAAG;SACf,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM,CAAC,QAAgB;QAC3B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,EAAE;aACzB,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC;aACpC,KAAK,CAAC,IAAA,gBAAE,EAAC,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC;QAE9D,wBAAwB;QACxB,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;OAEG;IACH,qBAAqB,CAAC,OAAqB;QACzC,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,UAAU,EAAE,GAAG,OAAO,CAAC;QAErD,OAAO;;;GAGR,QAAQ;;wBAEa,UAAU,IAAI,UAAU,CAAC,CAAC,CAAC;qBAC9B,UAAU,GAAG,CAAC,CAAC,CAAC,EAAE;CACtC,CAAC;IACA,CAAC;IAED;;OAEG;IACK,sBAAsB,CAC5B,QAAgB,EAChB,QAAgB,EAChB,UAAmB;QAEnB,MAAM,OAAO,GAA4B;YACvC,UAAU,EAAE;gBACV,IAAI,EAAE,4BAA4B;gBAClC,KAAK,EAAE,mCAAmC;aAC3C;YACD,KAAK,EAAE,QAAQ;YACf,OAAO,EAAE,aAAa;YACtB,kBAAkB,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,OAAO,EAAE;SAC5C,CAAC;QAEF,IAAI,UAAU,EAAE,CAAC;YACf,OAAO,CAAC,eAAe,CAAC,GAAG,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC;QACnD,CAAC;QAED,OAAO,OAAO,CAAC;IACjB,CAAC;CACF;AAlLD,wDAkLC;AAED,SAAS,8BAA8B,CAAC,OAAsC;IAC5E,IAAI,OAAO,CAAC,aAAa,EAAE,CAAC;QAC1B,OAAO,IAAA,wBAAmB,EAAC,OAAO,CAAC,aAAa,CAAC,CAAC;IACpD,CAAC;IAED,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;AAC1E,CAAC","sourcesContent":["/**\n * WebID Profile Repository\n *\n * 管理 WebID Profile 的托管，支持身份与存储分离架构\n */\n\nimport { eq } from 'drizzle-orm';\nimport { getIdentityDatabase, type IdentityDatabase } from './db';\nimport { getLoggerFor } from 'global-logger-factory';\n\nconst logger = getLoggerFor('WebIdProfileRepository');\n\nexport interface WebIdProfile {\n  username: string;\n  webidUrl: string;\n  storageUrl?: string;\n  storageMode: 'cloud' | 'local' | 'custom';\n  oidcIssuer?: string;\n  profileData?: Record<string, unknown>;\n  accountId?: string;\n  createdAt: Date;\n  updatedAt: Date;\n}\n\nexport interface CreateWebIdProfileInput {\n  username: string;\n  storageMode?: 'cloud' | 'local' | 'custom';\n  storageUrl?: string;\n  accountId?: string;\n}\n\nexport interface UpdateStorageInput {\n  storageUrl: string;\n  storageMode?: 'cloud' | 'local' | 'custom';\n}\n\nexport interface WebIdProfileRepositoryOptions {\n  baseUrl: string;\n  db?: IdentityDatabase;\n  identityDbUrl?: string;\n}\n\nexport class WebIdProfileRepository {\n  private readonly baseUrl: string;\n  private readonly db: IdentityDatabase;\n\n  public constructor(options: WebIdProfileRepositoryOptions) {\n    this.db = options.db ?? getIdentityDatabaseFromOptions(options);\n    if (!options.baseUrl) {\n      throw new Error('WebIdProfileRepository requires baseUrl.');\n    }\n    this.baseUrl = options.baseUrl.replace(/\\/$/, '');\n  }\n\n  /**\n   * 创建 WebID Profile\n   */\n  async create(input: CreateWebIdProfileInput): Promise<WebIdProfile> {\n    const { username, storageMode = 'cloud', storageUrl, accountId } = input;\n\n    // 生成 WebID URL\n    const webidUrl = `${this.baseUrl}/${username}/profile/card#me`;\n\n    // 默认 storage URL\n    const defaultStorageUrl = storageMode === 'cloud'\n      ? `${this.baseUrl}/${username}/`\n      : storageUrl;\n\n    // 生成默认的 Profile 数据\n    const profileData = this.generateDefaultProfile(username, webidUrl, defaultStorageUrl);\n\n    const now = new Date();\n\n    await this.db.insert(this.db.schema.webidProfiles).values({\n      username,\n      webidUrl,\n      storageUrl: defaultStorageUrl,\n      storageMode,\n      oidcIssuer: this.baseUrl,\n      profileData,\n      accountId,\n      createdAt: now,\n      updatedAt: now,\n    });\n\n    logger.info(`Created WebID profile for ${username}: ${webidUrl}`);\n\n    return {\n      username,\n      webidUrl,\n      storageUrl: defaultStorageUrl,\n      storageMode,\n      oidcIssuer: this.baseUrl,\n      profileData,\n      accountId,\n      createdAt: now,\n      updatedAt: now,\n    };\n  }\n\n  /**\n   * 获取 WebID Profile\n   */\n  async get(username: string): Promise<WebIdProfile | null> {\n    const results = await this.db\n      .select()\n      .from(this.db.schema.webidProfiles)\n      .where(eq(this.db.schema.webidProfiles.username, username))\n      .limit(1);\n\n    if (results.length === 0) {\n      return null;\n    }\n\n    const row = results[0];\n    return {\n      username: row.username,\n      webidUrl: row.webidUrl,\n      storageUrl: row.storageUrl ?? undefined,\n      storageMode: (row.storageMode as 'cloud' | 'local' | 'custom') ?? 'cloud',\n      oidcIssuer: row.oidcIssuer ?? undefined,\n      profileData: row.profileData as Record<string, unknown> | undefined,\n      accountId: row.accountId ?? undefined,\n      createdAt: row.createdAt,\n      updatedAt: row.updatedAt,\n    };\n  }\n\n  /**\n   * 更新 Storage URL（用于 Local 节点更新指针）\n   */\n  async updateStorage(username: string, input: UpdateStorageInput): Promise<WebIdProfile | null> {\n    const { storageUrl, storageMode } = input;\n\n    const existing = await this.get(username);\n    if (!existing) {\n      return null;\n    }\n\n    // 更新 Profile 数据中的 storage\n    const profileData = {\n      ...(existing.profileData ?? {}),\n      'solid:storage': { '@id': storageUrl },\n    };\n\n    const now = new Date();\n\n    await this.db\n      .update(this.db.schema.webidProfiles)\n      .set({\n        storageUrl,\n        storageMode: storageMode ?? existing.storageMode,\n        profileData,\n        updatedAt: now,\n      })\n      .where(eq(this.db.schema.webidProfiles.username, username));\n\n    logger.info(`Updated storage for ${username}: ${storageUrl}`);\n\n    return {\n      ...existing,\n      storageUrl,\n      storageMode: storageMode ?? existing.storageMode,\n      profileData,\n      updatedAt: now,\n    };\n  }\n\n  /**\n   * 删除 WebID Profile\n   */\n  async delete(username: string): Promise<boolean> {\n    const result = await this.db\n      .delete(this.db.schema.webidProfiles)\n      .where(eq(this.db.schema.webidProfiles.username, username));\n\n    // drizzle 返回的结果格式因数据库而异\n    return true;\n  }\n\n  /**\n   * 生成 WebID Profile 的 Turtle 格式\n   */\n  generateProfileTurtle(profile: WebIdProfile): string {\n    const { webidUrl, storageUrl, oidcIssuer } = profile;\n\n    return `@prefix foaf: <http://xmlns.com/foaf/0.1/>.\n@prefix solid: <http://www.w3.org/ns/solid/terms#>.\n\n<${webidUrl}>\n    a foaf:Person;\n    solid:oidcIssuer <${oidcIssuer}>${storageUrl ? `;\n    solid:storage <${storageUrl}>` : ''}.\n`;\n  }\n\n  /**\n   * 生成默认的 Profile 数据（JSON-LD 格式）\n   */\n  private generateDefaultProfile(\n    username: string,\n    webidUrl: string,\n    storageUrl?: string,\n  ): Record<string, unknown> {\n    const profile: Record<string, unknown> = {\n      '@context': {\n        foaf: 'http://xmlns.com/foaf/0.1/',\n        solid: 'http://www.w3.org/ns/solid/terms#',\n      },\n      '@id': webidUrl,\n      '@type': 'foaf:Person',\n      'solid:oidcIssuer': { '@id': this.baseUrl },\n    };\n\n    if (storageUrl) {\n      profile['solid:storage'] = { '@id': storageUrl };\n    }\n\n    return profile;\n  }\n}\n\nfunction getIdentityDatabaseFromOptions(options: WebIdProfileRepositoryOptions): IdentityDatabase {\n  if (options.identityDbUrl) {\n    return getIdentityDatabase(options.identityDbUrl);\n  }\n\n  throw new Error('WebIdProfileRepository requires db or identityDbUrl.');\n}\n"]}

package/dist/identity/drizzle/WebIdProfileRepository.jsonld

@@ -0,0 +1,108 @@
+{
+  "@context": [
+    "https://linkedsoftwaredependencies.org/bundles/npm/@undefineds.co/xpod/^0.0.0/components/context.jsonld"
+  ],
+  "@id": "npmd:@undefineds.co/xpod",
+  "components": [
+    {
+      "@id": "undefineds:dist/identity/drizzle/WebIdProfileRepository.jsonld#WebIdProfileRepository",
+      "@type": "Class",
+      "requireElement": "WebIdProfileRepository",
+      "parameters": [
+        {
+          "@id": "undefineds:dist/identity/drizzle/WebIdProfileRepository.jsonld#WebIdProfileRepository_options_baseUrl",
+          "range": "xsd:string"
+        },
+        {
+          "@id": "undefineds:dist/identity/drizzle/WebIdProfileRepository.jsonld#WebIdProfileRepository_options_db",
+          "range": {
+            "@type": "ParameterRangeUnion",
+            "parameterRangeElements": [
+              {
+                "@type": "ParameterRangeWildcard"
+              },
+              {
+                "@type": "ParameterRangeUndefined"
+              }
+            ]
+          }
+        },
+        {
+          "@id": "undefineds:dist/identity/drizzle/WebIdProfileRepository.jsonld#WebIdProfileRepository_options_identityDbUrl",
+          "range": {
+            "@type": "ParameterRangeUnion",
+            "parameterRangeElements": [
+              "xsd:string",
+              {
+                "@type": "ParameterRangeUndefined"
+              }
+            ]
+          }
+        }
+      ],
+      "memberFields": [
+        {
+          "@id": "undefineds:dist/identity/drizzle/WebIdProfileRepository.jsonld#WebIdProfileRepository__member_baseUrl",
+          "memberFieldName": "baseUrl"
+        },
+        {
+          "@id": "undefineds:dist/identity/drizzle/WebIdProfileRepository.jsonld#WebIdProfileRepository__member_db",
+          "memberFieldName": "db"
+        },
+        {
+          "@id": "undefineds:dist/identity/drizzle/WebIdProfileRepository.jsonld#WebIdProfileRepository__member_constructor",
+          "memberFieldName": "constructor"
+        },
+        {
+          "@id": "undefineds:dist/identity/drizzle/WebIdProfileRepository.jsonld#WebIdProfileRepository__member_create",
+          "memberFieldName": "create"
+        },
+        {
+          "@id": "undefineds:dist/identity/drizzle/WebIdProfileRepository.jsonld#WebIdProfileRepository__member_get",
+          "memberFieldName": "get"
+        },
+        {
+          "@id": "undefineds:dist/identity/drizzle/WebIdProfileRepository.jsonld#WebIdProfileRepository__member_updateStorage",
+          "memberFieldName": "updateStorage"
+        },
+        {
+          "@id": "undefineds:dist/identity/drizzle/WebIdProfileRepository.jsonld#WebIdProfileRepository__member_delete",
+          "memberFieldName": "delete"
+        },
+        {
+          "@id": "undefineds:dist/identity/drizzle/WebIdProfileRepository.jsonld#WebIdProfileRepository__member_generateProfileTurtle",
+          "memberFieldName": "generateProfileTurtle"
+        },
+        {
+          "@id": "undefineds:dist/identity/drizzle/WebIdProfileRepository.jsonld#WebIdProfileRepository__member_generateDefaultProfile",
+          "memberFieldName": "generateDefaultProfile"
+        }
+      ],
+      "constructorArguments": [
+        {
+          "@id": "undefineds:dist/identity/drizzle/WebIdProfileRepository.jsonld#WebIdProfileRepository_options__constructorArgument",
+          "fields": [
+            {
+              "keyRaw": "baseUrl",
+              "value": {
+                "@id": "undefineds:dist/identity/drizzle/WebIdProfileRepository.jsonld#WebIdProfileRepository_options_baseUrl"
+              }
+            },
+            {
+              "keyRaw": "db",
+              "value": {
+                "@id": "undefineds:dist/identity/drizzle/WebIdProfileRepository.jsonld#WebIdProfileRepository_options_db"
+              }
+            },
+            {
+              "keyRaw": "identityDbUrl",
+              "value": {
+                "@id": "undefineds:dist/identity/drizzle/WebIdProfileRepository.jsonld#WebIdProfileRepository_options_identityDbUrl"
+              }
+            }
+          ]
+        }
+      ]
+    }
+  ]
+}

package/dist/identity/oidc/LoopbackClientIdAdapterFactory.d.ts

@@ -0,0 +1,7 @@
+import type { Adapter } from 'oidc-provider';
+import { ClientIdAdapterFactory, type AdapterFactory, type RepresentationConverter } from '@solid/community-server';
+export declare class LoopbackClientIdAdapterFactory extends ClientIdAdapterFactory {
+    private readonly loopbackConverter;
+    constructor(source: AdapterFactory, converter: RepresentationConverter);
+    createStorageAdapter(name: string): Adapter;
+}

package/dist/identity/oidc/LoopbackClientIdAdapterFactory.js

@@ -0,0 +1,48 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.LoopbackClientIdAdapterFactory = void 0;
+const community_server_1 = require("@solid/community-server");
+function isLoopbackRedirectUri(value) {
+    try {
+        const url = new URL(value);
+        return url.protocol === 'http:' &&
+            (url.hostname === '127.0.0.1' || url.hostname === 'localhost' || url.hostname === '[::1]');
+    }
+    catch {
+        return false;
+    }
+}
+function isNativeClientPayload(payload) {
+    if (payload.application_type === 'native') {
+        return true;
+    }
+    const redirectUris = Array.isArray(payload.redirect_uris) ? payload.redirect_uris : [];
+    return redirectUris.some((uri) => typeof uri === 'string' && isLoopbackRedirectUri(uri));
+}
+class LoopbackClientIdAdapter extends community_server_1.ClientIdAdapter {
+    async find(id) {
+        const payload = await super.find(id);
+        if (!payload) {
+            return payload;
+        }
+        if (isNativeClientPayload(payload)) {
+            return {
+                ...payload,
+                application_type: 'native',
+            };
+        }
+        return payload;
+    }
+}
+class LoopbackClientIdAdapterFactory extends community_server_1.ClientIdAdapterFactory {
+    constructor(source, converter) {
+        super(source, converter);
+        this.loopbackConverter = converter;
+    }
+    createStorageAdapter(name) {
+        const adapter = this.source.createStorageAdapter(name);
+        return new LoopbackClientIdAdapter(name, adapter, this.loopbackConverter);
+    }
+}
+exports.LoopbackClientIdAdapterFactory = LoopbackClientIdAdapterFactory;
+//# sourceMappingURL=LoopbackClientIdAdapterFactory.js.map

package/dist/identity/oidc/LoopbackClientIdAdapterFactory.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"LoopbackClientIdAdapterFactory.js","sourceRoot":"","sources":["../../../src/identity/oidc/LoopbackClientIdAdapterFactory.ts"],"names":[],"mappings":";;;AACA,8DAKiC;AAEjC,SAAS,qBAAqB,CAAC,KAAa;IAC1C,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;QAC3B,OAAO,GAAG,CAAC,QAAQ,KAAK,OAAO;YAC7B,CAAC,GAAG,CAAC,QAAQ,KAAK,WAAW,IAAI,GAAG,CAAC,QAAQ,KAAK,WAAW,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC;IAC/F,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,SAAS,qBAAqB,CAAC,OAAuB;IACpD,IAAI,OAAO,CAAC,gBAAgB,KAAK,QAAQ,EAAE,CAAC;QAC1C,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,YAAY,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC;IACvF,OAAO,YAAY,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,OAAO,GAAG,KAAK,QAAQ,IAAI,qBAAqB,CAAC,GAAG,CAAC,CAAC,CAAC;AAC3F,CAAC;AAED,MAAM,uBAAwB,SAAQ,kCAAe;IACnC,KAAK,CAAC,IAAI,CAAC,EAAU;QACnC,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACrC,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,OAAO,CAAC;QACjB,CAAC;QAED,IAAI,qBAAqB,CAAC,OAAO,CAAC,EAAE,CAAC;YACnC,OAAO;gBACL,GAAG,OAAO;gBACV,gBAAgB,EAAE,QAAQ;aAC3B,CAAC;QACJ,CAAC;QAED,OAAO,OAAO,CAAC;IACjB,CAAC;CACF;AAED,MAAa,8BAA+B,SAAQ,yCAAsB;IAGxE,YAAmB,MAAsB,EAAE,SAAkC;QAC3E,KAAK,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;QACzB,IAAI,CAAC,iBAAiB,GAAG,SAAS,CAAC;IACrC,CAAC;IAEe,oBAAoB,CAAC,IAAY;QAC/C,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,oBAAoB,CAAC,IAAI,CAAC,CAAC;QACvD,OAAO,IAAI,uBAAuB,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,iBAAiB,CAAC,CAAC;IAC5E,CAAC;CACF;AAZD,wEAYC","sourcesContent":["import type { Adapter, AdapterPayload } from 'oidc-provider';\nimport {\n  ClientIdAdapter,\n  ClientIdAdapterFactory,\n  type AdapterFactory,\n  type RepresentationConverter,\n} from '@solid/community-server';\n\nfunction isLoopbackRedirectUri(value: string): boolean {\n  try {\n    const url = new URL(value);\n    return url.protocol === 'http:' &&\n      (url.hostname === '127.0.0.1' || url.hostname === 'localhost' || url.hostname === '[::1]');\n  } catch {\n    return false;\n  }\n}\n\nfunction isNativeClientPayload(payload: AdapterPayload): boolean {\n  if (payload.application_type === 'native') {\n    return true;\n  }\n\n  const redirectUris = Array.isArray(payload.redirect_uris) ? payload.redirect_uris : [];\n  return redirectUris.some((uri) => typeof uri === 'string' && isLoopbackRedirectUri(uri));\n}\n\nclass LoopbackClientIdAdapter extends ClientIdAdapter {\n  public override async find(id: string): Promise<AdapterPayload | void> {\n    const payload = await super.find(id);\n    if (!payload) {\n      return payload;\n    }\n\n    if (isNativeClientPayload(payload)) {\n      return {\n        ...payload,\n        application_type: 'native',\n      };\n    }\n\n    return payload;\n  }\n}\n\nexport class LoopbackClientIdAdapterFactory extends ClientIdAdapterFactory {\n  private readonly loopbackConverter: RepresentationConverter;\n\n  public constructor(source: AdapterFactory, converter: RepresentationConverter) {\n    super(source, converter);\n    this.loopbackConverter = converter;\n  }\n\n  public override createStorageAdapter(name: string): Adapter {\n    const adapter = this.source.createStorageAdapter(name);\n    return new LoopbackClientIdAdapter(name, adapter, this.loopbackConverter);\n  }\n}\n"]}