@undefineds.co/xpod 0.2.16 → 0.2.20

package/dist/identity/drizzle/WebIdProfileRepository.js

@@ -7,11 +7,15 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.WebIdProfileRepository = void 0;
 const drizzle_orm_1 = require("drizzle-orm");
+const db_1 = require("./db");
 const global_logger_factory_1 = require("global-logger-factory");
 const logger = (0, global_logger_factory_1.getLoggerFor)('WebIdProfileRepository');
 class WebIdProfileRepository {
-    constructor(db, options) {
-        this.db = db;
+    constructor(options) {
+        this.db = options.db ?? getIdentityDatabaseFromOptions(options);
+        if (!options.baseUrl) {
+            throw new Error('WebIdProfileRepository requires baseUrl.');
+        }
         this.baseUrl = options.baseUrl.replace(/\/$/, '');
     }
     /**
@@ -154,4 +158,10 @@ class WebIdProfileRepository {
     }
 }
 exports.WebIdProfileRepository = WebIdProfileRepository;
+function getIdentityDatabaseFromOptions(options) {
+    if (options.identityDbUrl) {
+        return (0, db_1.getIdentityDatabase)(options.identityDbUrl);
+    }
+    throw new Error('WebIdProfileRepository requires db or identityDbUrl.');
+}
 //# sourceMappingURL=WebIdProfileRepository.js.map

package/dist/identity/drizzle/WebIdProfileRepository.js.map

@@ -1 +1 @@
-{"version":3,"file":"WebIdProfileRepository.js","sourceRoot":"","sources":["../../../src/identity/drizzle/WebIdProfileRepository.ts"],"names":[],"mappings":";AAAA;;;;GAIG;;;AAEH,6CAAiC;AAEjC,iEAAqD;AAErD,MAAM,MAAM,GAAG,IAAA,oCAAY,EAAC,wBAAwB,CAAC,CAAC;AA0BtD,MAAa,sBAAsB;IAGjC,YACmB,EAAoB,EACrC,OAA4B;QADX,OAAE,GAAF,EAAE,CAAkB;QAGrC,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACpD,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM,CAAC,KAA8B;QACzC,MAAM,EAAE,QAAQ,EAAE,WAAW,GAAG,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,GAAG,KAAK,CAAC;QAEzE,eAAe;QACf,MAAM,QAAQ,GAAG,GAAG,IAAI,CAAC,OAAO,IAAI,QAAQ,kBAAkB,CAAC;QAE/D,iBAAiB;QACjB,MAAM,iBAAiB,GAAG,WAAW,KAAK,OAAO;YAC/C,CAAC,CAAC,GAAG,IAAI,CAAC,OAAO,IAAI,QAAQ,GAAG;YAChC,CAAC,CAAC,UAAU,CAAC;QAEf,mBAAmB;QACnB,MAAM,WAAW,GAAG,IAAI,CAAC,sBAAsB,CAAC,QAAQ,EAAE,QAAQ,EAAE,iBAAiB,CAAC,CAAC;QAEvF,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;QAEvB,MAAM,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,MAAM,CAAC;YACxD,QAAQ;YACR,QAAQ;YACR,UAAU,EAAE,iBAAiB;YAC7B,WAAW;YACX,UAAU,EAAE,IAAI,CAAC,OAAO;YACxB,WAAW;YACX,SAAS;YACT,SAAS,EAAE,GAAG;YACd,SAAS,EAAE,GAAG;SACf,CAAC,CAAC;QAEH,MAAM,CAAC,IAAI,CAAC,6BAA6B,QAAQ,KAAK,QAAQ,EAAE,CAAC,CAAC;QAElE,OAAO;YACL,QAAQ;YACR,QAAQ;YACR,UAAU,EAAE,iBAAiB;YAC7B,WAAW;YACX,UAAU,EAAE,IAAI,CAAC,OAAO;YACxB,WAAW;YACX,SAAS;YACT,SAAS,EAAE,GAAG;YACd,SAAS,EAAE,GAAG;SACf,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,GAAG,CAAC,QAAgB;QACxB,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,EAAE;aAC1B,MAAM,EAAE;aACR,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC;aAClC,KAAK,CAAC,IAAA,gBAAE,EAAC,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;aAC1D,KAAK,CAAC,CAAC,CAAC,CAAC;QAEZ,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzB,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,GAAG,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;QACvB,OAAO;YACL,QAAQ,EAAE,GAAG,CAAC,QAAQ;YACtB,QAAQ,EAAE,GAAG,CAAC,QAAQ;YACtB,UAAU,EAAE,GAAG,CAAC,UAAU,IAAI,SAAS;YACvC,WAAW,EAAG,GAAG,CAAC,WAA4C,IAAI,OAAO;YACzE,UAAU,EAAE,GAAG,CAAC,UAAU,IAAI,SAAS;YACvC,WAAW,EAAE,GAAG,CAAC,WAAkD;YACnE,SAAS,EAAE,GAAG,CAAC,SAAS,IAAI,SAAS;YACrC,SAAS,EAAE,GAAG,CAAC,SAAS;YACxB,SAAS,EAAE,GAAG,CAAC,SAAS;SACzB,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,aAAa,CAAC,QAAgB,EAAE,KAAyB;QAC7D,MAAM,EAAE,UAAU,EAAE,WAAW,EAAE,GAAG,KAAK,CAAC;QAE1C,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC1C,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO,IAAI,CAAC;QACd,CAAC;QAED,0BAA0B;QAC1B,MAAM,WAAW,GAAG;YAClB,GAAG,CAAC,QAAQ,CAAC,WAAW,IAAI,EAAE,CAAC;YAC/B,eAAe,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE;SACvC,CAAC;QAEF,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;QAEvB,MAAM,IAAI,CAAC,EAAE;aACV,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC;aACpC,GAAG,CAAC;YACH,UAAU;YACV,WAAW,EAAE,WAAW,IAAI,QAAQ,CAAC,WAAW;YAChD,WAAW;YACX,SAAS,EAAE,GAAG;SACf,CAAC;aACD,KAAK,CAAC,IAAA,gBAAE,EAAC,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC;QAE9D,MAAM,CAAC,IAAI,CAAC,uBAAuB,QAAQ,KAAK,UAAU,EAAE,CAAC,CAAC;QAE9D,OAAO;YACL,GAAG,QAAQ;YACX,UAAU;YACV,WAAW,EAAE,WAAW,IAAI,QAAQ,CAAC,WAAW;YAChD,WAAW;YACX,SAAS,EAAE,GAAG;SACf,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM,CAAC,QAAgB;QAC3B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,EAAE;aACzB,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC;aACpC,KAAK,CAAC,IAAA,gBAAE,EAAC,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC;QAE9D,wBAAwB;QACxB,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;OAEG;IACH,qBAAqB,CAAC,OAAqB;QACzC,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,UAAU,EAAE,GAAG,OAAO,CAAC;QAErD,OAAO;;;GAGR,QAAQ;;wBAEa,UAAU,IAAI,UAAU,CAAC,CAAC,CAAC;qBAC9B,UAAU,GAAG,CAAC,CAAC,CAAC,EAAE;CACtC,CAAC;IACA,CAAC;IAED;;OAEG;IACK,sBAAsB,CAC5B,QAAgB,EAChB,QAAgB,EAChB,UAAmB;QAEnB,MAAM,OAAO,GAA4B;YACvC,UAAU,EAAE;gBACV,IAAI,EAAE,4BAA4B;gBAClC,KAAK,EAAE,mCAAmC;aAC3C;YACD,KAAK,EAAE,QAAQ;YACf,OAAO,EAAE,aAAa;YACtB,kBAAkB,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,OAAO,EAAE;SAC5C,CAAC;QAEF,IAAI,UAAU,EAAE,CAAC;YACf,OAAO,CAAC,eAAe,CAAC,GAAG,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC;QACnD,CAAC;QAED,OAAO,OAAO,CAAC;IACjB,CAAC;CACF;AAhLD,wDAgLC","sourcesContent":["/**\n * WebID Profile Repository\n *\n * 管理 WebID Profile 的托管，支持身份与存储分离架构\n */\n\nimport { eq } from 'drizzle-orm';\nimport type { IdentityDatabase } from './db';\nimport { getLoggerFor } from 'global-logger-factory';\n\nconst logger = getLoggerFor('WebIdProfileRepository');\n\nexport interface WebIdProfile {\n  username: string;\n  webidUrl: string;\n  storageUrl?: string;\n  storageMode: 'cloud' | 'local' | 'custom';\n  oidcIssuer?: string;\n  profileData?: Record<string, unknown>;\n  accountId?: string;\n  createdAt: Date;\n  updatedAt: Date;\n}\n\nexport interface CreateWebIdProfileInput {\n  username: string;\n  storageMode?: 'cloud' | 'local' | 'custom';\n  storageUrl?: string;\n  accountId?: string;\n}\n\nexport interface UpdateStorageInput {\n  storageUrl: string;\n  storageMode?: 'cloud' | 'local' | 'custom';\n}\n\nexport class WebIdProfileRepository {\n  private readonly baseUrl: string;\n\n  constructor(\n    private readonly db: IdentityDatabase,\n    options: { baseUrl: string },\n  ) {\n    this.baseUrl = options.baseUrl.replace(/\\/$/, '');\n  }\n\n  /**\n   * 创建 WebID Profile\n   */\n  async create(input: CreateWebIdProfileInput): Promise<WebIdProfile> {\n    const { username, storageMode = 'cloud', storageUrl, accountId } = input;\n\n    // 生成 WebID URL\n    const webidUrl = `${this.baseUrl}/${username}/profile/card#me`;\n\n    // 默认 storage URL\n    const defaultStorageUrl = storageMode === 'cloud'\n      ? `${this.baseUrl}/${username}/`\n      : storageUrl;\n\n    // 生成默认的 Profile 数据\n    const profileData = this.generateDefaultProfile(username, webidUrl, defaultStorageUrl);\n\n    const now = new Date();\n\n    await this.db.insert(this.db.schema.webidProfiles).values({\n      username,\n      webidUrl,\n      storageUrl: defaultStorageUrl,\n      storageMode,\n      oidcIssuer: this.baseUrl,\n      profileData,\n      accountId,\n      createdAt: now,\n      updatedAt: now,\n    });\n\n    logger.info(`Created WebID profile for ${username}: ${webidUrl}`);\n\n    return {\n      username,\n      webidUrl,\n      storageUrl: defaultStorageUrl,\n      storageMode,\n      oidcIssuer: this.baseUrl,\n      profileData,\n      accountId,\n      createdAt: now,\n      updatedAt: now,\n    };\n  }\n\n  /**\n   * 获取 WebID Profile\n   */\n  async get(username: string): Promise<WebIdProfile | null> {\n    const results = await this.db\n      .select()\n      .from(this.db.schema.webidProfiles)\n      .where(eq(this.db.schema.webidProfiles.username, username))\n      .limit(1);\n\n    if (results.length === 0) {\n      return null;\n    }\n\n    const row = results[0];\n    return {\n      username: row.username,\n      webidUrl: row.webidUrl,\n      storageUrl: row.storageUrl ?? undefined,\n      storageMode: (row.storageMode as 'cloud' | 'local' | 'custom') ?? 'cloud',\n      oidcIssuer: row.oidcIssuer ?? undefined,\n      profileData: row.profileData as Record<string, unknown> | undefined,\n      accountId: row.accountId ?? undefined,\n      createdAt: row.createdAt,\n      updatedAt: row.updatedAt,\n    };\n  }\n\n  /**\n   * 更新 Storage URL（用于 Local 节点更新指针）\n   */\n  async updateStorage(username: string, input: UpdateStorageInput): Promise<WebIdProfile | null> {\n    const { storageUrl, storageMode } = input;\n\n    const existing = await this.get(username);\n    if (!existing) {\n      return null;\n    }\n\n    // 更新 Profile 数据中的 storage\n    const profileData = {\n      ...(existing.profileData ?? {}),\n      'solid:storage': { '@id': storageUrl },\n    };\n\n    const now = new Date();\n\n    await this.db\n      .update(this.db.schema.webidProfiles)\n      .set({\n        storageUrl,\n        storageMode: storageMode ?? existing.storageMode,\n        profileData,\n        updatedAt: now,\n      })\n      .where(eq(this.db.schema.webidProfiles.username, username));\n\n    logger.info(`Updated storage for ${username}: ${storageUrl}`);\n\n    return {\n      ...existing,\n      storageUrl,\n      storageMode: storageMode ?? existing.storageMode,\n      profileData,\n      updatedAt: now,\n    };\n  }\n\n  /**\n   * 删除 WebID Profile\n   */\n  async delete(username: string): Promise<boolean> {\n    const result = await this.db\n      .delete(this.db.schema.webidProfiles)\n      .where(eq(this.db.schema.webidProfiles.username, username));\n\n    // drizzle 返回的结果格式因数据库而异\n    return true;\n  }\n\n  /**\n   * 生成 WebID Profile 的 Turtle 格式\n   */\n  generateProfileTurtle(profile: WebIdProfile): string {\n    const { webidUrl, storageUrl, oidcIssuer } = profile;\n\n    return `@prefix foaf: <http://xmlns.com/foaf/0.1/>.\n@prefix solid: <http://www.w3.org/ns/solid/terms#>.\n\n<${webidUrl}>\n    a foaf:Person;\n    solid:oidcIssuer <${oidcIssuer}>${storageUrl ? `;\n    solid:storage <${storageUrl}>` : ''}.\n`;\n  }\n\n  /**\n   * 生成默认的 Profile 数据（JSON-LD 格式）\n   */\n  private generateDefaultProfile(\n    username: string,\n    webidUrl: string,\n    storageUrl?: string,\n  ): Record<string, unknown> {\n    const profile: Record<string, unknown> = {\n      '@context': {\n        foaf: 'http://xmlns.com/foaf/0.1/',\n        solid: 'http://www.w3.org/ns/solid/terms#',\n      },\n      '@id': webidUrl,\n      '@type': 'foaf:Person',\n      'solid:oidcIssuer': { '@id': this.baseUrl },\n    };\n\n    if (storageUrl) {\n      profile['solid:storage'] = { '@id': storageUrl };\n    }\n\n    return profile;\n  }\n}\n"]}
+{"version":3,"file":"WebIdProfileRepository.js","sourceRoot":"","sources":["../../../src/identity/drizzle/WebIdProfileRepository.ts"],"names":[],"mappings":";AAAA;;;;GAIG;;;AAEH,6CAAiC;AACjC,6BAAkE;AAClE,iEAAqD;AAErD,MAAM,MAAM,GAAG,IAAA,oCAAY,EAAC,wBAAwB,CAAC,CAAC;AAgCtD,MAAa,sBAAsB;IAIjC,YAAmB,OAAsC;QACvD,IAAI,CAAC,EAAE,GAAG,OAAO,CAAC,EAAE,IAAI,8BAA8B,CAAC,OAAO,CAAC,CAAC;QAChE,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;YACrB,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;QAC9D,CAAC;QACD,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACpD,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM,CAAC,KAA8B;QACzC,MAAM,EAAE,QAAQ,EAAE,WAAW,GAAG,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,GAAG,KAAK,CAAC;QAEzE,eAAe;QACf,MAAM,QAAQ,GAAG,GAAG,IAAI,CAAC,OAAO,IAAI,QAAQ,kBAAkB,CAAC;QAE/D,iBAAiB;QACjB,MAAM,iBAAiB,GAAG,WAAW,KAAK,OAAO;YAC/C,CAAC,CAAC,GAAG,IAAI,CAAC,OAAO,IAAI,QAAQ,GAAG;YAChC,CAAC,CAAC,UAAU,CAAC;QAEf,mBAAmB;QACnB,MAAM,WAAW,GAAG,IAAI,CAAC,sBAAsB,CAAC,QAAQ,EAAE,QAAQ,EAAE,iBAAiB,CAAC,CAAC;QAEvF,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;QAEvB,MAAM,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,MAAM,CAAC;YACxD,QAAQ;YACR,QAAQ;YACR,UAAU,EAAE,iBAAiB;YAC7B,WAAW;YACX,UAAU,EAAE,IAAI,CAAC,OAAO;YACxB,WAAW;YACX,SAAS;YACT,SAAS,EAAE,GAAG;YACd,SAAS,EAAE,GAAG;SACf,CAAC,CAAC;QAEH,MAAM,CAAC,IAAI,CAAC,6BAA6B,QAAQ,KAAK,QAAQ,EAAE,CAAC,CAAC;QAElE,OAAO;YACL,QAAQ;YACR,QAAQ;YACR,UAAU,EAAE,iBAAiB;YAC7B,WAAW;YACX,UAAU,EAAE,IAAI,CAAC,OAAO;YACxB,WAAW;YACX,SAAS;YACT,SAAS,EAAE,GAAG;YACd,SAAS,EAAE,GAAG;SACf,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,GAAG,CAAC,QAAgB;QACxB,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,EAAE;aAC1B,MAAM,EAAE;aACR,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC;aAClC,KAAK,CAAC,IAAA,gBAAE,EAAC,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;aAC1D,KAAK,CAAC,CAAC,CAAC,CAAC;QAEZ,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzB,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,GAAG,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;QACvB,OAAO;YACL,QAAQ,EAAE,GAAG,CAAC,QAAQ;YACtB,QAAQ,EAAE,GAAG,CAAC,QAAQ;YACtB,UAAU,EAAE,GAAG,CAAC,UAAU,IAAI,SAAS;YACvC,WAAW,EAAG,GAAG,CAAC,WAA4C,IAAI,OAAO;YACzE,UAAU,EAAE,GAAG,CAAC,UAAU,IAAI,SAAS;YACvC,WAAW,EAAE,GAAG,CAAC,WAAkD;YACnE,SAAS,EAAE,GAAG,CAAC,SAAS,IAAI,SAAS;YACrC,SAAS,EAAE,GAAG,CAAC,SAAS;YACxB,SAAS,EAAE,GAAG,CAAC,SAAS;SACzB,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,aAAa,CAAC,QAAgB,EAAE,KAAyB;QAC7D,MAAM,EAAE,UAAU,EAAE,WAAW,EAAE,GAAG,KAAK,CAAC;QAE1C,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC1C,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO,IAAI,CAAC;QACd,CAAC;QAED,0BAA0B;QAC1B,MAAM,WAAW,GAAG;YAClB,GAAG,CAAC,QAAQ,CAAC,WAAW,IAAI,EAAE,CAAC;YAC/B,eAAe,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE;SACvC,CAAC;QAEF,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;QAEvB,MAAM,IAAI,CAAC,EAAE;aACV,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC;aACpC,GAAG,CAAC;YACH,UAAU;YACV,WAAW,EAAE,WAAW,IAAI,QAAQ,CAAC,WAAW;YAChD,WAAW;YACX,SAAS,EAAE,GAAG;SACf,CAAC;aACD,KAAK,CAAC,IAAA,gBAAE,EAAC,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC;QAE9D,MAAM,CAAC,IAAI,CAAC,uBAAuB,QAAQ,KAAK,UAAU,EAAE,CAAC,CAAC;QAE9D,OAAO;YACL,GAAG,QAAQ;YACX,UAAU;YACV,WAAW,EAAE,WAAW,IAAI,QAAQ,CAAC,WAAW;YAChD,WAAW;YACX,SAAS,EAAE,GAAG;SACf,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM,CAAC,QAAgB;QAC3B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,EAAE;aACzB,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC;aACpC,KAAK,CAAC,IAAA,gBAAE,EAAC,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC;QAE9D,wBAAwB;QACxB,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;OAEG;IACH,qBAAqB,CAAC,OAAqB;QACzC,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,UAAU,EAAE,GAAG,OAAO,CAAC;QAErD,OAAO;;;GAGR,QAAQ;;wBAEa,UAAU,IAAI,UAAU,CAAC,CAAC,CAAC;qBAC9B,UAAU,GAAG,CAAC,CAAC,CAAC,EAAE;CACtC,CAAC;IACA,CAAC;IAED;;OAEG;IACK,sBAAsB,CAC5B,QAAgB,EAChB,QAAgB,EAChB,UAAmB;QAEnB,MAAM,OAAO,GAA4B;YACvC,UAAU,EAAE;gBACV,IAAI,EAAE,4BAA4B;gBAClC,KAAK,EAAE,mCAAmC;aAC3C;YACD,KAAK,EAAE,QAAQ;YACf,OAAO,EAAE,aAAa;YACtB,kBAAkB,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,OAAO,EAAE;SAC5C,CAAC;QAEF,IAAI,UAAU,EAAE,CAAC;YACf,OAAO,CAAC,eAAe,CAAC,GAAG,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC;QACnD,CAAC;QAED,OAAO,OAAO,CAAC;IACjB,CAAC;CACF;AAlLD,wDAkLC;AAED,SAAS,8BAA8B,CAAC,OAAsC;IAC5E,IAAI,OAAO,CAAC,aAAa,EAAE,CAAC;QAC1B,OAAO,IAAA,wBAAmB,EAAC,OAAO,CAAC,aAAa,CAAC,CAAC;IACpD,CAAC;IAED,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;AAC1E,CAAC","sourcesContent":["/**\n * WebID Profile Repository\n *\n * 管理 WebID Profile 的托管，支持身份与存储分离架构\n */\n\nimport { eq } from 'drizzle-orm';\nimport { getIdentityDatabase, type IdentityDatabase } from './db';\nimport { getLoggerFor } from 'global-logger-factory';\n\nconst logger = getLoggerFor('WebIdProfileRepository');\n\nexport interface WebIdProfile {\n  username: string;\n  webidUrl: string;\n  storageUrl?: string;\n  storageMode: 'cloud' | 'local' | 'custom';\n  oidcIssuer?: string;\n  profileData?: Record<string, unknown>;\n  accountId?: string;\n  createdAt: Date;\n  updatedAt: Date;\n}\n\nexport interface CreateWebIdProfileInput {\n  username: string;\n  storageMode?: 'cloud' | 'local' | 'custom';\n  storageUrl?: string;\n  accountId?: string;\n}\n\nexport interface UpdateStorageInput {\n  storageUrl: string;\n  storageMode?: 'cloud' | 'local' | 'custom';\n}\n\nexport interface WebIdProfileRepositoryOptions {\n  baseUrl: string;\n  db?: IdentityDatabase;\n  identityDbUrl?: string;\n}\n\nexport class WebIdProfileRepository {\n  private readonly baseUrl: string;\n  private readonly db: IdentityDatabase;\n\n  public constructor(options: WebIdProfileRepositoryOptions) {\n    this.db = options.db ?? getIdentityDatabaseFromOptions(options);\n    if (!options.baseUrl) {\n      throw new Error('WebIdProfileRepository requires baseUrl.');\n    }\n    this.baseUrl = options.baseUrl.replace(/\\/$/, '');\n  }\n\n  /**\n   * 创建 WebID Profile\n   */\n  async create(input: CreateWebIdProfileInput): Promise<WebIdProfile> {\n    const { username, storageMode = 'cloud', storageUrl, accountId } = input;\n\n    // 生成 WebID URL\n    const webidUrl = `${this.baseUrl}/${username}/profile/card#me`;\n\n    // 默认 storage URL\n    const defaultStorageUrl = storageMode === 'cloud'\n      ? `${this.baseUrl}/${username}/`\n      : storageUrl;\n\n    // 生成默认的 Profile 数据\n    const profileData = this.generateDefaultProfile(username, webidUrl, defaultStorageUrl);\n\n    const now = new Date();\n\n    await this.db.insert(this.db.schema.webidProfiles).values({\n      username,\n      webidUrl,\n      storageUrl: defaultStorageUrl,\n      storageMode,\n      oidcIssuer: this.baseUrl,\n      profileData,\n      accountId,\n      createdAt: now,\n      updatedAt: now,\n    });\n\n    logger.info(`Created WebID profile for ${username}: ${webidUrl}`);\n\n    return {\n      username,\n      webidUrl,\n      storageUrl: defaultStorageUrl,\n      storageMode,\n      oidcIssuer: this.baseUrl,\n      profileData,\n      accountId,\n      createdAt: now,\n      updatedAt: now,\n    };\n  }\n\n  /**\n   * 获取 WebID Profile\n   */\n  async get(username: string): Promise<WebIdProfile | null> {\n    const results = await this.db\n      .select()\n      .from(this.db.schema.webidProfiles)\n      .where(eq(this.db.schema.webidProfiles.username, username))\n      .limit(1);\n\n    if (results.length === 0) {\n      return null;\n    }\n\n    const row = results[0];\n    return {\n      username: row.username,\n      webidUrl: row.webidUrl,\n      storageUrl: row.storageUrl ?? undefined,\n      storageMode: (row.storageMode as 'cloud' | 'local' | 'custom') ?? 'cloud',\n      oidcIssuer: row.oidcIssuer ?? undefined,\n      profileData: row.profileData as Record<string, unknown> | undefined,\n      accountId: row.accountId ?? undefined,\n      createdAt: row.createdAt,\n      updatedAt: row.updatedAt,\n    };\n  }\n\n  /**\n   * 更新 Storage URL（用于 Local 节点更新指针）\n   */\n  async updateStorage(username: string, input: UpdateStorageInput): Promise<WebIdProfile | null> {\n    const { storageUrl, storageMode } = input;\n\n    const existing = await this.get(username);\n    if (!existing) {\n      return null;\n    }\n\n    // 更新 Profile 数据中的 storage\n    const profileData = {\n      ...(existing.profileData ?? {}),\n      'solid:storage': { '@id': storageUrl },\n    };\n\n    const now = new Date();\n\n    await this.db\n      .update(this.db.schema.webidProfiles)\n      .set({\n        storageUrl,\n        storageMode: storageMode ?? existing.storageMode,\n        profileData,\n        updatedAt: now,\n      })\n      .where(eq(this.db.schema.webidProfiles.username, username));\n\n    logger.info(`Updated storage for ${username}: ${storageUrl}`);\n\n    return {\n      ...existing,\n      storageUrl,\n      storageMode: storageMode ?? existing.storageMode,\n      profileData,\n      updatedAt: now,\n    };\n  }\n\n  /**\n   * 删除 WebID Profile\n   */\n  async delete(username: string): Promise<boolean> {\n    const result = await this.db\n      .delete(this.db.schema.webidProfiles)\n      .where(eq(this.db.schema.webidProfiles.username, username));\n\n    // drizzle 返回的结果格式因数据库而异\n    return true;\n  }\n\n  /**\n   * 生成 WebID Profile 的 Turtle 格式\n   */\n  generateProfileTurtle(profile: WebIdProfile): string {\n    const { webidUrl, storageUrl, oidcIssuer } = profile;\n\n    return `@prefix foaf: <http://xmlns.com/foaf/0.1/>.\n@prefix solid: <http://www.w3.org/ns/solid/terms#>.\n\n<${webidUrl}>\n    a foaf:Person;\n    solid:oidcIssuer <${oidcIssuer}>${storageUrl ? `;\n    solid:storage <${storageUrl}>` : ''}.\n`;\n  }\n\n  /**\n   * 生成默认的 Profile 数据（JSON-LD 格式）\n   */\n  private generateDefaultProfile(\n    username: string,\n    webidUrl: string,\n    storageUrl?: string,\n  ): Record<string, unknown> {\n    const profile: Record<string, unknown> = {\n      '@context': {\n        foaf: 'http://xmlns.com/foaf/0.1/',\n        solid: 'http://www.w3.org/ns/solid/terms#',\n      },\n      '@id': webidUrl,\n      '@type': 'foaf:Person',\n      'solid:oidcIssuer': { '@id': this.baseUrl },\n    };\n\n    if (storageUrl) {\n      profile['solid:storage'] = { '@id': storageUrl };\n    }\n\n    return profile;\n  }\n}\n\nfunction getIdentityDatabaseFromOptions(options: WebIdProfileRepositoryOptions): IdentityDatabase {\n  if (options.identityDbUrl) {\n    return getIdentityDatabase(options.identityDbUrl);\n  }\n\n  throw new Error('WebIdProfileRepository requires db or identityDbUrl.');\n}\n"]}

package/dist/identity/drizzle/WebIdProfileRepository.jsonld

@@ -0,0 +1,108 @@
+{
+  "@context": [
+    "https://linkedsoftwaredependencies.org/bundles/npm/@undefineds.co/xpod/^0.0.0/components/context.jsonld"
+  ],
+  "@id": "npmd:@undefineds.co/xpod",
+  "components": [
+    {
+      "@id": "undefineds:dist/identity/drizzle/WebIdProfileRepository.jsonld#WebIdProfileRepository",
+      "@type": "Class",
+      "requireElement": "WebIdProfileRepository",
+      "parameters": [
+        {
+          "@id": "undefineds:dist/identity/drizzle/WebIdProfileRepository.jsonld#WebIdProfileRepository_options_baseUrl",
+          "range": "xsd:string"
+        },
+        {
+          "@id": "undefineds:dist/identity/drizzle/WebIdProfileRepository.jsonld#WebIdProfileRepository_options_db",
+          "range": {
+            "@type": "ParameterRangeUnion",
+            "parameterRangeElements": [
+              {
+                "@type": "ParameterRangeWildcard"
+              },
+              {
+                "@type": "ParameterRangeUndefined"
+              }
+            ]
+          }
+        },
+        {
+          "@id": "undefineds:dist/identity/drizzle/WebIdProfileRepository.jsonld#WebIdProfileRepository_options_identityDbUrl",
+          "range": {
+            "@type": "ParameterRangeUnion",
+            "parameterRangeElements": [
+              "xsd:string",
+              {
+                "@type": "ParameterRangeUndefined"
+              }
+            ]
+          }
+        }
+      ],
+      "memberFields": [
+        {
+          "@id": "undefineds:dist/identity/drizzle/WebIdProfileRepository.jsonld#WebIdProfileRepository__member_baseUrl",
+          "memberFieldName": "baseUrl"
+        },
+        {
+          "@id": "undefineds:dist/identity/drizzle/WebIdProfileRepository.jsonld#WebIdProfileRepository__member_db",
+          "memberFieldName": "db"
+        },
+        {
+          "@id": "undefineds:dist/identity/drizzle/WebIdProfileRepository.jsonld#WebIdProfileRepository__member_constructor",
+          "memberFieldName": "constructor"
+        },
+        {
+          "@id": "undefineds:dist/identity/drizzle/WebIdProfileRepository.jsonld#WebIdProfileRepository__member_create",
+          "memberFieldName": "create"
+        },
+        {
+          "@id": "undefineds:dist/identity/drizzle/WebIdProfileRepository.jsonld#WebIdProfileRepository__member_get",
+          "memberFieldName": "get"
+        },
+        {
+          "@id": "undefineds:dist/identity/drizzle/WebIdProfileRepository.jsonld#WebIdProfileRepository__member_updateStorage",
+          "memberFieldName": "updateStorage"
+        },
+        {
+          "@id": "undefineds:dist/identity/drizzle/WebIdProfileRepository.jsonld#WebIdProfileRepository__member_delete",
+          "memberFieldName": "delete"
+        },
+        {
+          "@id": "undefineds:dist/identity/drizzle/WebIdProfileRepository.jsonld#WebIdProfileRepository__member_generateProfileTurtle",
+          "memberFieldName": "generateProfileTurtle"
+        },
+        {
+          "@id": "undefineds:dist/identity/drizzle/WebIdProfileRepository.jsonld#WebIdProfileRepository__member_generateDefaultProfile",
+          "memberFieldName": "generateDefaultProfile"
+        }
+      ],
+      "constructorArguments": [
+        {
+          "@id": "undefineds:dist/identity/drizzle/WebIdProfileRepository.jsonld#WebIdProfileRepository_options__constructorArgument",
+          "fields": [
+            {
+              "keyRaw": "baseUrl",
+              "value": {
+                "@id": "undefineds:dist/identity/drizzle/WebIdProfileRepository.jsonld#WebIdProfileRepository_options_baseUrl"
+              }
+            },
+            {
+              "keyRaw": "db",
+              "value": {
+                "@id": "undefineds:dist/identity/drizzle/WebIdProfileRepository.jsonld#WebIdProfileRepository_options_db"
+              }
+            },
+            {
+              "keyRaw": "identityDbUrl",
+              "value": {
+                "@id": "undefineds:dist/identity/drizzle/WebIdProfileRepository.jsonld#WebIdProfileRepository_options_identityDbUrl"
+              }
+            }
+          ]
+        }
+      ]
+    }
+  ]
+}

package/dist/identity/oidc/LoopbackClientIdAdapterFactory.d.ts

@@ -0,0 +1,7 @@
+import type { Adapter } from 'oidc-provider';
+import { ClientIdAdapterFactory, type AdapterFactory, type RepresentationConverter } from '@solid/community-server';
+export declare class LoopbackClientIdAdapterFactory extends ClientIdAdapterFactory {
+    private readonly loopbackConverter;
+    constructor(source: AdapterFactory, converter: RepresentationConverter);
+    createStorageAdapter(name: string): Adapter;
+}

package/dist/identity/oidc/LoopbackClientIdAdapterFactory.js

@@ -0,0 +1,48 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.LoopbackClientIdAdapterFactory = void 0;
+const community_server_1 = require("@solid/community-server");
+function isLoopbackRedirectUri(value) {
+    try {
+        const url = new URL(value);
+        return url.protocol === 'http:' &&
+            (url.hostname === '127.0.0.1' || url.hostname === 'localhost' || url.hostname === '[::1]');
+    }
+    catch {
+        return false;
+    }
+}
+function isNativeClientPayload(payload) {
+    if (payload.application_type === 'native') {
+        return true;
+    }
+    const redirectUris = Array.isArray(payload.redirect_uris) ? payload.redirect_uris : [];
+    return redirectUris.some((uri) => typeof uri === 'string' && isLoopbackRedirectUri(uri));
+}
+class LoopbackClientIdAdapter extends community_server_1.ClientIdAdapter {
+    async find(id) {
+        const payload = await super.find(id);
+        if (!payload) {
+            return payload;
+        }
+        if (isNativeClientPayload(payload)) {
+            return {
+                ...payload,
+                application_type: 'native',
+            };
+        }
+        return payload;
+    }
+}
+class LoopbackClientIdAdapterFactory extends community_server_1.ClientIdAdapterFactory {
+    constructor(source, converter) {
+        super(source, converter);
+        this.loopbackConverter = converter;
+    }
+    createStorageAdapter(name) {
+        const adapter = this.source.createStorageAdapter(name);
+        return new LoopbackClientIdAdapter(name, adapter, this.loopbackConverter);
+    }
+}
+exports.LoopbackClientIdAdapterFactory = LoopbackClientIdAdapterFactory;
+//# sourceMappingURL=LoopbackClientIdAdapterFactory.js.map

package/dist/identity/oidc/LoopbackClientIdAdapterFactory.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"LoopbackClientIdAdapterFactory.js","sourceRoot":"","sources":["../../../src/identity/oidc/LoopbackClientIdAdapterFactory.ts"],"names":[],"mappings":";;;AACA,8DAKiC;AAEjC,SAAS,qBAAqB,CAAC,KAAa;IAC1C,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;QAC3B,OAAO,GAAG,CAAC,QAAQ,KAAK,OAAO;YAC7B,CAAC,GAAG,CAAC,QAAQ,KAAK,WAAW,IAAI,GAAG,CAAC,QAAQ,KAAK,WAAW,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC;IAC/F,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,SAAS,qBAAqB,CAAC,OAAuB;IACpD,IAAI,OAAO,CAAC,gBAAgB,KAAK,QAAQ,EAAE,CAAC;QAC1C,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,YAAY,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC;IACvF,OAAO,YAAY,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,OAAO,GAAG,KAAK,QAAQ,IAAI,qBAAqB,CAAC,GAAG,CAAC,CAAC,CAAC;AAC3F,CAAC;AAED,MAAM,uBAAwB,SAAQ,kCAAe;IACnC,KAAK,CAAC,IAAI,CAAC,EAAU;QACnC,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACrC,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,OAAO,CAAC;QACjB,CAAC;QAED,IAAI,qBAAqB,CAAC,OAAO,CAAC,EAAE,CAAC;YACnC,OAAO;gBACL,GAAG,OAAO;gBACV,gBAAgB,EAAE,QAAQ;aAC3B,CAAC;QACJ,CAAC;QAED,OAAO,OAAO,CAAC;IACjB,CAAC;CACF;AAED,MAAa,8BAA+B,SAAQ,yCAAsB;IAGxE,YAAmB,MAAsB,EAAE,SAAkC;QAC3E,KAAK,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;QACzB,IAAI,CAAC,iBAAiB,GAAG,SAAS,CAAC;IACrC,CAAC;IAEe,oBAAoB,CAAC,IAAY;QAC/C,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,oBAAoB,CAAC,IAAI,CAAC,CAAC;QACvD,OAAO,IAAI,uBAAuB,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,iBAAiB,CAAC,CAAC;IAC5E,CAAC;CACF;AAZD,wEAYC","sourcesContent":["import type { Adapter, AdapterPayload } from 'oidc-provider';\nimport {\n  ClientIdAdapter,\n  ClientIdAdapterFactory,\n  type AdapterFactory,\n  type RepresentationConverter,\n} from '@solid/community-server';\n\nfunction isLoopbackRedirectUri(value: string): boolean {\n  try {\n    const url = new URL(value);\n    return url.protocol === 'http:' &&\n      (url.hostname === '127.0.0.1' || url.hostname === 'localhost' || url.hostname === '[::1]');\n  } catch {\n    return false;\n  }\n}\n\nfunction isNativeClientPayload(payload: AdapterPayload): boolean {\n  if (payload.application_type === 'native') {\n    return true;\n  }\n\n  const redirectUris = Array.isArray(payload.redirect_uris) ? payload.redirect_uris : [];\n  return redirectUris.some((uri) => typeof uri === 'string' && isLoopbackRedirectUri(uri));\n}\n\nclass LoopbackClientIdAdapter extends ClientIdAdapter {\n  public override async find(id: string): Promise<AdapterPayload | void> {\n    const payload = await super.find(id);\n    if (!payload) {\n      return payload;\n    }\n\n    if (isNativeClientPayload(payload)) {\n      return {\n        ...payload,\n        application_type: 'native',\n      };\n    }\n\n    return payload;\n  }\n}\n\nexport class LoopbackClientIdAdapterFactory extends ClientIdAdapterFactory {\n  private readonly loopbackConverter: RepresentationConverter;\n\n  public constructor(source: AdapterFactory, converter: RepresentationConverter) {\n    super(source, converter);\n    this.loopbackConverter = converter;\n  }\n\n  public override createStorageAdapter(name: string): Adapter {\n    const adapter = this.source.createStorageAdapter(name);\n    return new LoopbackClientIdAdapter(name, adapter, this.loopbackConverter);\n  }\n}\n"]}

package/dist/identity/oidc/LoopbackClientIdAdapterFactory.jsonld

@@ -0,0 +1,49 @@
+{
+  "@context": [
+    "https://linkedsoftwaredependencies.org/bundles/npm/@undefineds.co/xpod/^0.0.0/components/context.jsonld",
+    "https://linkedsoftwaredependencies.org/bundles/npm/@solid/community-server/^8.0.0/components/context.jsonld"
+  ],
+  "@id": "npmd:@undefineds.co/xpod",
+  "components": [
+    {
+      "@id": "undefineds:dist/identity/oidc/LoopbackClientIdAdapterFactory.jsonld#LoopbackClientIdAdapterFactory",
+      "@type": "Class",
+      "requireElement": "LoopbackClientIdAdapterFactory",
+      "extends": [
+        "ClientIdAdapter:Factory"
+      ],
+      "parameters": [
+        {
+          "@id": "undefineds:dist/identity/oidc/LoopbackClientIdAdapterFactory.jsonld#LoopbackClientIdAdapterFactory_source",
+          "range": "css:dist/identity/storage/AdapterFactory.jsonld#AdapterFactory"
+        },
+        {
+          "@id": "undefineds:dist/identity/oidc/LoopbackClientIdAdapterFactory.jsonld#LoopbackClientIdAdapterFactory_converter",
+          "range": "css:dist/storage/conversion/RepresentationConverter.jsonld#RepresentationConverter"
+        }
+      ],
+      "memberFields": [
+        {
+          "@id": "undefineds:dist/identity/oidc/LoopbackClientIdAdapterFactory.jsonld#LoopbackClientIdAdapterFactory__member_loopbackConverter",
+          "memberFieldName": "loopbackConverter"
+        },
+        {
+          "@id": "undefineds:dist/identity/oidc/LoopbackClientIdAdapterFactory.jsonld#LoopbackClientIdAdapterFactory__member_constructor",
+          "memberFieldName": "constructor"
+        },
+        {
+          "@id": "undefineds:dist/identity/oidc/LoopbackClientIdAdapterFactory.jsonld#LoopbackClientIdAdapterFactory__member_createStorageAdapter",
+          "memberFieldName": "createStorageAdapter"
+        }
+      ],
+      "constructorArguments": [
+        {
+          "@id": "undefineds:dist/identity/oidc/LoopbackClientIdAdapterFactory.jsonld#LoopbackClientIdAdapterFactory_source"
+        },
+        {
+          "@id": "undefineds:dist/identity/oidc/LoopbackClientIdAdapterFactory.jsonld#LoopbackClientIdAdapterFactory_converter"
+        }
+      ]
+    }
+  ]
+}

package/dist/index.d.ts

@@ -21,6 +21,7 @@ import { TerminalHttpHandler } from './http/terminal/TerminalHttpHandler';
 import { EdgeNodeCertificateHttpHandler } from './http/admin/EdgeNodeCertificateHttpHandler';
 import { ReservedSuffixIdentifierGenerator } from './pods/ReservedSuffixIdentifierGenerator';
 import { DrizzleIndexedStorage } from './identity/drizzle/DrizzleIndexedStorage';
+import { WebIdProfileRepository } from './identity/drizzle/WebIdProfileRepository';
 import { PostgresKeyValueStorage } from './storage/keyvalue/PostgresKeyValueStorage';
 import { RedisKeyValueStorage } from './storage/keyvalue/RedisKeyValueStorage';
 import { SqliteKeyValueStorage } from './storage/keyvalue/SqliteKeyValueStorage';
@@ -66,6 +67,7 @@ import { DisabledOidcHandler } from './identity/oidc/DisabledOidcHandler';
 import { DisabledIdentityProviderHandler } from './identity/oidc/DisabledIdentityProviderHandler';
 import { AutoDetectOidcHandler } from './identity/oidc/AutoDetectOidcHandler';
 import { AutoDetectIdentityProviderHandler } from './identity/oidc/AutoDetectIdentityProviderHandler';
+import { LoopbackClientIdAdapterFactory } from './identity/oidc/LoopbackClientIdAdapterFactory';
 import { ProvisionPodCreator } from './provision/ProvisionPodCreator';
 import { ProvisionCodeCodec } from './provision/ProvisionCodeCodec';
 import { AuthModeSelector } from './authorization/AuthModeSelector';
@@ -77,4 +79,4 @@ export type { EntitlementProvider, AccountEntitlement } from './quota/Entitlemen
 export type { TunnelProvider, TunnelConfig, TunnelSetupOptions, TunnelStatus, } from './tunnel/TunnelProvider';
 export type { SubdomainRegistration, ConnectivityResult, SubdomainServiceOptions, } from './subdomain/SubdomainService';
 export { AppStaticAssetHandler } from './http/AppStaticAssetHandler';
-export { RepresentationPartialConvertingStore, MinioDataAccessor, QuadstoreSparqlDataAccessor, QuintStoreSparqlDataAccessor, MixDataAccessor, ConfigurableLoggerFactory, SparqlUpdateResourceStore, SubgraphQueryEngine, QuadstoreSparqlEngine, QuintstoreSparqlEngine, SubgraphSparqlHttpHandler, QuotaAdminHttpHandler, ClusterIngressRouter, ClusterWebSocketConfigurator, EdgeNodeDirectDebugHttpHandler, EdgeNodeProxyHttpHandler, RouterHttpHandler, RouterHttpRoute, TracingHandler, EdgeNodeCertificateHttpHandler, TerminalHttpHandler, ReservedSuffixIdentifierGenerator, DrizzleIndexedStorage, PostgresKeyValueStorage, RedisKeyValueStorage, SqliteKeyValueStorage, DrizzleQuotaService, NoopQuotaService, HttpEntitlementProvider, NoopEntitlementProvider, PerAccountQuotaStrategy, TencentDnsProvider, EdgeNodeDnsCoordinator, Dns01CertificateProvisioner, SimpleEdgeNodeTunnelManager, NoopEdgeNodeTunnelManager, FrpTunnelManager, EdgeNodeHealthProbeService, EdgeNodeAgent, EdgeNodeCertificateService, AcmeCertificateManager, EdgeNodeModeDetector, ClusterIdentifierStrategy, UsageTrackingStore, CenterNodeRegistrationService, PodRoutingHttpHandler, ReactAppViewHandler, QuintStore, SqliteQuintStore, PgQuintStore, BaseQuintStore, VectorStore, SqliteVectorStore, PostgresVectorStore, VectorHttpHandler, ProviderRegistry, ProviderRegistryImpl, EmbeddingService, EmbeddingServiceImpl, CredentialReader, CredentialReaderImpl, CloudflareTunnelProvider, LocalTunnelProvider, SubdomainService, MultiDomainIdentifierStrategy, SubdomainPodIdentifierStrategy, DisabledOidcHandler, DisabledIdentityProviderHandler, AutoDetectOidcHandler, AutoDetectIdentityProviderHandler, UrlAwareRedisLocker, ProvisionPodCreator, ProvisionCodeCodec, AuthModeSelector, };
+export { RepresentationPartialConvertingStore, MinioDataAccessor, QuadstoreSparqlDataAccessor, QuintStoreSparqlDataAccessor, MixDataAccessor, ConfigurableLoggerFactory, SparqlUpdateResourceStore, SubgraphQueryEngine, QuadstoreSparqlEngine, QuintstoreSparqlEngine, SubgraphSparqlHttpHandler, QuotaAdminHttpHandler, ClusterIngressRouter, ClusterWebSocketConfigurator, EdgeNodeDirectDebugHttpHandler, EdgeNodeProxyHttpHandler, RouterHttpHandler, RouterHttpRoute, TracingHandler, EdgeNodeCertificateHttpHandler, TerminalHttpHandler, ReservedSuffixIdentifierGenerator, DrizzleIndexedStorage, WebIdProfileRepository, PostgresKeyValueStorage, RedisKeyValueStorage, SqliteKeyValueStorage, DrizzleQuotaService, NoopQuotaService, HttpEntitlementProvider, NoopEntitlementProvider, PerAccountQuotaStrategy, TencentDnsProvider, EdgeNodeDnsCoordinator, Dns01CertificateProvisioner, SimpleEdgeNodeTunnelManager, NoopEdgeNodeTunnelManager, FrpTunnelManager, EdgeNodeHealthProbeService, EdgeNodeAgent, EdgeNodeCertificateService, AcmeCertificateManager, EdgeNodeModeDetector, ClusterIdentifierStrategy, UsageTrackingStore, CenterNodeRegistrationService, PodRoutingHttpHandler, ReactAppViewHandler, QuintStore, SqliteQuintStore, PgQuintStore, BaseQuintStore, VectorStore, SqliteVectorStore, PostgresVectorStore, VectorHttpHandler, ProviderRegistry, ProviderRegistryImpl, EmbeddingService, EmbeddingServiceImpl, CredentialReader, CredentialReaderImpl, CloudflareTunnelProvider, LocalTunnelProvider, SubdomainService, MultiDomainIdentifierStrategy, SubdomainPodIdentifierStrategy, DisabledOidcHandler, DisabledIdentityProviderHandler, AutoDetectOidcHandler, AutoDetectIdentityProviderHandler, LoopbackClientIdAdapterFactory, UrlAwareRedisLocker, ProvisionPodCreator, ProvisionCodeCodec, AuthModeSelector, };

package/dist/index.js

@@ -1,7 +1,7 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.SqliteQuintStore = exports.QuintStore = exports.ReactAppViewHandler = exports.PodRoutingHttpHandler = exports.CenterNodeRegistrationService = exports.UsageTrackingStore = exports.ClusterIdentifierStrategy = exports.EdgeNodeModeDetector = exports.AcmeCertificateManager = exports.EdgeNodeCertificateService = exports.EdgeNodeAgent = exports.EdgeNodeHealthProbeService = exports.FrpTunnelManager = exports.NoopEdgeNodeTunnelManager = exports.SimpleEdgeNodeTunnelManager = exports.Dns01CertificateProvisioner = exports.EdgeNodeDnsCoordinator = exports.TencentDnsProvider = exports.PerAccountQuotaStrategy = exports.NoopEntitlementProvider = exports.HttpEntitlementProvider = exports.NoopQuotaService = exports.DrizzleQuotaService = exports.SqliteKeyValueStorage = exports.RedisKeyValueStorage = exports.PostgresKeyValueStorage = exports.DrizzleIndexedStorage = exports.ReservedSuffixIdentifierGenerator = exports.TerminalHttpHandler = exports.EdgeNodeCertificateHttpHandler = exports.TracingHandler = exports.RouterHttpRoute = exports.RouterHttpHandler = exports.EdgeNodeProxyHttpHandler = exports.EdgeNodeDirectDebugHttpHandler = exports.ClusterWebSocketConfigurator = exports.ClusterIngressRouter = exports.QuotaAdminHttpHandler = exports.SubgraphSparqlHttpHandler = exports.QuintstoreSparqlEngine = exports.QuadstoreSparqlEngine = exports.SubgraphQueryEngine = exports.SparqlUpdateResourceStore = exports.ConfigurableLoggerFactory = exports.MixDataAccessor = exports.QuintStoreSparqlDataAccessor = exports.QuadstoreSparqlDataAccessor = exports.MinioDataAccessor = exports.RepresentationPartialConvertingStore = exports.AppStaticAssetHandler = void 0;
-exports.AuthModeSelector = exports.ProvisionCodeCodec = exports.ProvisionPodCreator = exports.UrlAwareRedisLocker = exports.AutoDetectIdentityProviderHandler = exports.AutoDetectOidcHandler = exports.DisabledIdentityProviderHandler = exports.DisabledOidcHandler = exports.SubdomainPodIdentifierStrategy = exports.MultiDomainIdentifierStrategy = exports.SubdomainService = exports.LocalTunnelProvider = exports.CloudflareTunnelProvider = exports.CredentialReaderImpl = exports.CredentialReader = exports.EmbeddingServiceImpl = exports.EmbeddingService = exports.ProviderRegistryImpl = exports.ProviderRegistry = exports.VectorHttpHandler = exports.PostgresVectorStore = exports.SqliteVectorStore = exports.VectorStore = exports.BaseQuintStore = exports.PgQuintStore = void 0;
+exports.QuintStore = exports.ReactAppViewHandler = exports.PodRoutingHttpHandler = exports.CenterNodeRegistrationService = exports.UsageTrackingStore = exports.ClusterIdentifierStrategy = exports.EdgeNodeModeDetector = exports.AcmeCertificateManager = exports.EdgeNodeCertificateService = exports.EdgeNodeAgent = exports.EdgeNodeHealthProbeService = exports.FrpTunnelManager = exports.NoopEdgeNodeTunnelManager = exports.SimpleEdgeNodeTunnelManager = exports.Dns01CertificateProvisioner = exports.EdgeNodeDnsCoordinator = exports.TencentDnsProvider = exports.PerAccountQuotaStrategy = exports.NoopEntitlementProvider = exports.HttpEntitlementProvider = exports.NoopQuotaService = exports.DrizzleQuotaService = exports.SqliteKeyValueStorage = exports.RedisKeyValueStorage = exports.PostgresKeyValueStorage = exports.WebIdProfileRepository = exports.DrizzleIndexedStorage = exports.ReservedSuffixIdentifierGenerator = exports.TerminalHttpHandler = exports.EdgeNodeCertificateHttpHandler = exports.TracingHandler = exports.RouterHttpRoute = exports.RouterHttpHandler = exports.EdgeNodeProxyHttpHandler = exports.EdgeNodeDirectDebugHttpHandler = exports.ClusterWebSocketConfigurator = exports.ClusterIngressRouter = exports.QuotaAdminHttpHandler = exports.SubgraphSparqlHttpHandler = exports.QuintstoreSparqlEngine = exports.QuadstoreSparqlEngine = exports.SubgraphQueryEngine = exports.SparqlUpdateResourceStore = exports.ConfigurableLoggerFactory = exports.MixDataAccessor = exports.QuintStoreSparqlDataAccessor = exports.QuadstoreSparqlDataAccessor = exports.MinioDataAccessor = exports.RepresentationPartialConvertingStore = exports.AppStaticAssetHandler = void 0;
+exports.AuthModeSelector = exports.ProvisionCodeCodec = exports.ProvisionPodCreator = exports.UrlAwareRedisLocker = exports.LoopbackClientIdAdapterFactory = exports.AutoDetectIdentityProviderHandler = exports.AutoDetectOidcHandler = exports.DisabledIdentityProviderHandler = exports.DisabledOidcHandler = exports.SubdomainPodIdentifierStrategy = exports.MultiDomainIdentifierStrategy = exports.SubdomainService = exports.LocalTunnelProvider = exports.CloudflareTunnelProvider = exports.CredentialReaderImpl = exports.CredentialReader = exports.EmbeddingServiceImpl = exports.EmbeddingService = exports.ProviderRegistryImpl = exports.ProviderRegistry = exports.VectorHttpHandler = exports.PostgresVectorStore = exports.SqliteVectorStore = exports.VectorStore = exports.BaseQuintStore = exports.PgQuintStore = exports.SqliteQuintStore = void 0;
 require("./runtime/configure-drizzle-solid");
 const RepresentationPartialConvertingStore_1 = require("./storage/RepresentationPartialConvertingStore");
 Object.defineProperty(exports, "RepresentationPartialConvertingStore", { enumerable: true, get: function () { return RepresentationPartialConvertingStore_1.RepresentationPartialConvertingStore; } });
@@ -47,6 +47,8 @@ const ReservedSuffixIdentifierGenerator_1 = require("./pods/ReservedSuffixIdenti
 Object.defineProperty(exports, "ReservedSuffixIdentifierGenerator", { enumerable: true, get: function () { return ReservedSuffixIdentifierGenerator_1.ReservedSuffixIdentifierGenerator; } });
 const DrizzleIndexedStorage_1 = require("./identity/drizzle/DrizzleIndexedStorage");
 Object.defineProperty(exports, "DrizzleIndexedStorage", { enumerable: true, get: function () { return DrizzleIndexedStorage_1.DrizzleIndexedStorage; } });
+const WebIdProfileRepository_1 = require("./identity/drizzle/WebIdProfileRepository");
+Object.defineProperty(exports, "WebIdProfileRepository", { enumerable: true, get: function () { return WebIdProfileRepository_1.WebIdProfileRepository; } });
 const PostgresKeyValueStorage_1 = require("./storage/keyvalue/PostgresKeyValueStorage");
 Object.defineProperty(exports, "PostgresKeyValueStorage", { enumerable: true, get: function () { return PostgresKeyValueStorage_1.PostgresKeyValueStorage; } });
 const RedisKeyValueStorage_1 = require("./storage/keyvalue/RedisKeyValueStorage");
@@ -143,6 +145,8 @@ const AutoDetectOidcHandler_1 = require("./identity/oidc/AutoDetectOidcHandler")
 Object.defineProperty(exports, "AutoDetectOidcHandler", { enumerable: true, get: function () { return AutoDetectOidcHandler_1.AutoDetectOidcHandler; } });
 const AutoDetectIdentityProviderHandler_1 = require("./identity/oidc/AutoDetectIdentityProviderHandler");
 Object.defineProperty(exports, "AutoDetectIdentityProviderHandler", { enumerable: true, get: function () { return AutoDetectIdentityProviderHandler_1.AutoDetectIdentityProviderHandler; } });
+const LoopbackClientIdAdapterFactory_1 = require("./identity/oidc/LoopbackClientIdAdapterFactory");
+Object.defineProperty(exports, "LoopbackClientIdAdapterFactory", { enumerable: true, get: function () { return LoopbackClientIdAdapterFactory_1.LoopbackClientIdAdapterFactory; } });
 // Provision components
 const ProvisionPodCreator_1 = require("./provision/ProvisionPodCreator");
 Object.defineProperty(exports, "ProvisionPodCreator", { enumerable: true, get: function () { return ProvisionPodCreator_1.ProvisionPodCreator; } });

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;;AAAA,6CAA2C;AAC3C,yGAAsG;AAyGlG,qHAzGK,2EAAoC,OAyGL;AAxGxC,6EAA0E;AAyGtE,kGAzGK,qCAAiB,OAyGL;AAxGrB,iGAA8F;AAyG1F,4GAzGK,yDAA2B,OAyGL;AAxG/B,mGAAgG;AAyG5F,6GAzGK,2DAA4B,OAyGL;AAxGhC,yEAAsE;AAyGlE,gGAzGK,iCAAe,OAyGL;AAxGnB,mFAAgF;AAyG5E,0GAzGK,qDAAyB,OAyGL;AAxG7B,8EAA0H;AA0GtH,oGA1GK,yCAAmB,OA0GL;AACnB,sGA3G0B,2CAAqB,OA2G1B;AACrB,uGA5GiD,4CAAsB,OA4GjD;AA1G1B,gFAA6E;AA2GzE,0GA3GK,qDAAyB,OA2GL;AA1G7B,8EAA2E;AA2GvE,sGA3GK,6CAAqB,OA2GL;AA1GzB,mFAAgF;AAqG5E,0GArGK,qDAAyB,OAqGL;AApG7B,sEAAmE;AA0G/D,qGA1GK,2CAAoB,OA0GL;AAzGxB,sFAAmF;AA0G/E,6GA1GK,2DAA4B,OA0GL;AAzGhC,0FAAuF;AA0GnF,+GA1GK,+DAA8B,OA0GL;AAzGlC,8EAA2E;AA0GvE,yGA1GK,mDAAwB,OA0GL;AAzG5B,gEAA6D;AA0GzD,kGA1GK,qCAAiB,OA0GL;AAzGrB,4DAAyD;AA0GrD,gGA1GK,iCAAe,OA0GL;AAzGnB,0DAAuD;AA0GnD,+FA1GK,+BAAc,OA0GL;AAzGlB,6EAA0E;AA2GtE,oGA3GK,yCAAmB,OA2GL;AA1GvB,gGAA6F;AAyGzF,+GAzGK,+DAA8B,OAyGL;AAxGlC,gGAA6F;AA0GzF,kHA1GK,qEAAiC,OA0GL;AAzGrC,oFAAiF;AA0G7E,sGA1GK,6CAAqB,OA0GL;AAzGzB,wFAAqF;AA0GjF,wGA1GK,iDAAuB,OA0GL;AAzG3B,kFAA+E;AA0G3E,qGA1GK,2CAAoB,OA0GL;AAzGxB,oFAAiF;AA0G7E,sGA1GK,6CAAqB,OA0GL;AAzGzB,qEAAkE;AA0GhE,oGA1GO,yCAAmB,OA0GP;AAzGrB,+DAA4D;AA0G1D,iGA1GO,mCAAgB,OA0GP;AAzGlB,qEAA+F;AA0G7F,wGA1GO,6CAAuB,OA0GP;AACvB,wGA3GgC,6CAAuB,OA2GhC;AA1GzB,qFAAkF;AA2GhF,wGA3GO,iDAAuB,OA2GP;AA1GzB,yEAAsE;AA2GlE,mGA3GK,uCAAkB,OA2GL;AA1GtB,0EAAuE;AA2GnE,uGA3GK,+CAAsB,OA2GL;AA1G1B,oFAAiF;AA2G7E,4GA3GK,yDAA2B,OA2GL;AA1G/B,wEAAsG;AA2GlG,4GA3GK,mDAA2B,OA2GL;AAC3B,0GA5GkC,iDAAyB,OA4GlC;AA3G7B,8DAA2D;AA4GvD,iGA5GK,mCAAgB,OA4GL;AA3GpB,+EAA4E;AA+GxE,uGA/GK,+CAAsB,OA+GL;AA9G1B,kFAA+E;AA2G3E,2GA3GK,uDAA0B,OA2GL;AA1G9B,wDAAqD;AA2GjD,8FA3GK,6BAAa,OA2GL;AA1GjB,qFAAkF;AA2G9E,2GA3GK,uDAA0B,OA2GL;AAzG9B,2EAAwE;AA6GtE,mGA7GO,uCAAkB,OA6GP;AA5GpB,sEAAmE;AA0G/D,qGA1GK,2CAAoB,OA0GL;AAzGxB,4FAAyF;AA0GrF,0GA1GK,qDAAyB,OA0GL;AAzG7B,4FAAyF;AA2GvF,8GA3GO,6DAA6B,OA2GP;AA1G/B,wEAAqE;AA2GnE,sGA3GO,6CAAqB,OA2GP;AA1GvB,wEAAqE;AA2GnE,oGA3GO,yCAAmB,OA2GP;AA1GrB,uEAAoE;AA6GlE,iGA7GO,mCAAgB,OA6GP;AA5GlB,+DAA4D;AA6G1D,6FA7GO,2BAAY,OA6GP;AA5Gd,mEAAgE;AA6G9D,+FA7GO,+BAAc,OA6GP;AA5GhB,iDAAmD;AAyGjD,2FAzGO,kBAAU,OAyGP;AAvGZ,oBAAoB;AACpB,kDAAgF;AA4G9E,kGA5GO,yBAAiB,OA4GP;AACjB,oGA7G0B,2BAAmB,OA6G1B;AA5GrB,uEAAoE;AA6GlE,kGA7GO,qCAAiB,OA6GP;AA5GnB,oEAAiE;AA8G/D,iGA9GO,mCAAgB,OA8GP;AA7GlB,4EAAyE;AA8GvE,qGA9GO,2CAAoB,OA8GP;AA7GtB,oEAAiE;AA8G/D,iGA9GO,mCAAgB,OA8GP;AA7GlB,4EAAyE;AA8GvE,qGA9GO,2CAAoB,OA8GP;AA7GtB,oEAAiE;AA8G/D,iGA9GO,mCAAgB,OA8GP;AA7GlB,4EAAyE;AA8GvE,qGA9GO,2CAAoB,OA8GP;AA7GtB,8DAA2D;AAmGzD,4FAnGO,yBAAW,OAmGP;AAlGb,kCAAkC;AAClC,gFAA6E;AA6G3E,yGA7GO,mDAAwB,OA6GP;AA5G1B,sEAAmE;AA6GjE,oGA7GO,yCAAmB,OA6GP;AA5GrB,mEAAgE;AA6G9D,iGA7GO,mCAAgB,OA6GP;AA5GlB,+EAA4E;AAoH1E,oGApHO,yCAAmB,OAoHP;AAnHrB,+BAA+B;AAC/B,oGAAiG;AA4G/F,8GA5GO,6DAA6B,OA4GP;AA3G/B,sGAAmG;AA4GjG,+GA5GO,+DAA8B,OA4GP;AA3GhC,6EAA0E;AA4GxE,oGA5GO,yCAAmB,OA4GP;AA3GrB,qGAAkG;AA4GhG,gHA5GO,iEAA+B,OA4GP;AA3GjC,iFAA8E;AA4G5E,sGA5GO,6CAAqB,OA4GP;AA3GvB,yGAAsG;AA4GpG,kHA5GO,qEAAiC,OA4GP;AA3GnC,uBAAuB;AACvB,yEAAsE;AA6GpE,oGA7GO,yCAAmB,OA6GP;AA5GrB,uEAAoE;AA6GlE,mGA7GO,uCAAkB,OA6GP;AA5GpB,2BAA2B;AAC3B,uEAAoE;AA6GlE,iGA7GO,mCAAgB,OA6GP;AApFlB,uCAAuC;AACvC,sEAAqE;AAA5D,8HAAA,qBAAqB,OAAA","sourcesContent":["import './runtime/configure-drizzle-solid';\nimport { RepresentationPartialConvertingStore } from './storage/RepresentationPartialConvertingStore';\nimport { MinioDataAccessor } from './storage/accessors/MinioDataAccessor';\nimport { QuadstoreSparqlDataAccessor } from './storage/accessors/QuadstoreSparqlDataAccessor';\nimport { QuintStoreSparqlDataAccessor } from './storage/accessors/QuintStoreSparqlDataAccessor';\nimport { MixDataAccessor } from './storage/accessors/MixDataAccessor';\nimport { ConfigurableLoggerFactory } from './logging/ConfigurableLoggerFactory';\nimport { SubgraphQueryEngine, QuadstoreSparqlEngine, QuintstoreSparqlEngine } from './storage/sparql/SubgraphQueryEngine';\nexport type { SparqlEngine } from './storage/sparql/SubgraphQueryEngine';\nimport { SubgraphSparqlHttpHandler } from './http/SubgraphSparqlHttpHandler';\nimport { QuotaAdminHttpHandler } from './http/quota/QuotaAdminHttpHandler';\nimport { SparqlUpdateResourceStore } from './storage/SparqlUpdateResourceStore';\nimport { ClusterIngressRouter } from './http/ClusterIngressRouter';\nimport { ClusterWebSocketConfigurator } from './http/ClusterWebSocketConfigurator';\nimport { EdgeNodeDirectDebugHttpHandler } from './http/EdgeNodeDirectDebugHttpHandler';\nimport { EdgeNodeProxyHttpHandler } from './http/EdgeNodeProxyHttpHandler';\nimport { RouterHttpHandler } from './http/RouterHttpHandler';\nimport { RouterHttpRoute } from './http/RouterHttpRoute';\nimport { TracingHandler } from './http/TracingHandler';\nimport { TerminalHttpHandler } from './http/terminal/TerminalHttpHandler';\nimport { EdgeNodeCertificateHttpHandler } from './http/admin/EdgeNodeCertificateHttpHandler';\nimport { ReservedSuffixIdentifierGenerator } from './pods/ReservedSuffixIdentifierGenerator';\nimport { DrizzleIndexedStorage } from './identity/drizzle/DrizzleIndexedStorage';\nimport { PostgresKeyValueStorage } from './storage/keyvalue/PostgresKeyValueStorage';\nimport { RedisKeyValueStorage } from './storage/keyvalue/RedisKeyValueStorage';\nimport { SqliteKeyValueStorage } from './storage/keyvalue/SqliteKeyValueStorage';\nimport { DrizzleQuotaService } from './quota/DrizzleQuotaService';\nimport { NoopQuotaService } from './quota/NoopQuotaService';\nimport { HttpEntitlementProvider, NoopEntitlementProvider } from './quota/EntitlementProvider';\nimport { PerAccountQuotaStrategy } from './storage/quota/PerAccountQuotaStrategy';\nimport { TencentDnsProvider } from './dns/tencent/TencentDnsProvider';\nimport { EdgeNodeDnsCoordinator } from './edge/EdgeNodeDnsCoordinator';\nimport { Dns01CertificateProvisioner } from './edge/Dns01CertificateProvisioner';\nimport { SimpleEdgeNodeTunnelManager, NoopEdgeNodeTunnelManager } from './edge/EdgeNodeTunnelManager';\nimport { FrpTunnelManager } from './edge/FrpTunnelManager';\nimport { AcmeCertificateManager } from './edge/acme/AcmeCertificateManager';\nimport { EdgeNodeHealthProbeService } from './edge/EdgeNodeHealthProbeService';\nimport { EdgeNodeAgent } from './edge/EdgeNodeAgent';\nimport { EdgeNodeCertificateService } from './service/EdgeNodeCertificateService';\nimport { createBandwidthThrottleTransform } from './util/stream/BandwidthThrottleTransform';\nimport { UsageTrackingStore } from './storage/quota/UsageTrackingStore';\nimport { EdgeNodeModeDetector } from './edge/EdgeNodeModeDetector';\nimport { ClusterIdentifierStrategy } from './util/identifiers/ClusterIdentifierStrategy';\nimport { CenterNodeRegistrationService } from './identity/CenterNodeRegistrationService';\nimport { PodRoutingHttpHandler } from './http/PodRoutingHttpHandler';\nimport { ReactAppViewHandler } from './identity/ReactAppViewHandler';\nimport { SqliteQuintStore } from './storage/quint/SqliteQuintStore';\nimport { PgQuintStore } from './storage/quint/PgQuintStore';\nimport { BaseQuintStore } from './storage/quint/BaseQuintStore';\nimport { QuintStore } from './storage/quint/types';\nimport type { EdgeNodeCertificateProvisioner } from './edge/EdgeNodeCertificateProvisioner';\n// Vector components\nimport { SqliteVectorStore, PostgresVectorStore } from './storage/vector/index';\nimport { VectorHttpHandler } from './http/vector/VectorHttpHandler';\nimport { ProviderRegistry } from './ai/service/ProviderRegistry';\nimport { ProviderRegistryImpl } from './ai/service/ProviderRegistryImpl';\nimport { EmbeddingService } from './ai/service/EmbeddingService';\nimport { EmbeddingServiceImpl } from './ai/service/EmbeddingServiceImpl';\nimport { CredentialReader } from './ai/service/CredentialReader';\nimport { CredentialReaderImpl } from './ai/service/CredentialReaderImpl';\nimport { VectorStore } from './storage/vector/VectorStore';\n// Tunnel and Subdomain components\nimport { CloudflareTunnelProvider } from './tunnel/CloudflareTunnelProvider';\nimport { LocalTunnelProvider } from './tunnel/LocalTunnelProvider';\nimport { SubdomainService } from './subdomain/SubdomainService';\nimport { UrlAwareRedisLocker } from './storage/locking/UrlAwareRedisLocker';\n// IdP/SP separation components\nimport { MultiDomainIdentifierStrategy } from './util/identifiers/MultiDomainIdentifierStrategy';\nimport { SubdomainPodIdentifierStrategy } from './util/identifiers/SubdomainPodIdentifierStrategy';\nimport { DisabledOidcHandler } from './identity/oidc/DisabledOidcHandler';\nimport { DisabledIdentityProviderHandler } from './identity/oidc/DisabledIdentityProviderHandler';\nimport { AutoDetectOidcHandler } from './identity/oidc/AutoDetectOidcHandler';\nimport { AutoDetectIdentityProviderHandler } from './identity/oidc/AutoDetectIdentityProviderHandler';\n// Provision components\nimport { ProvisionPodCreator } from './provision/ProvisionPodCreator';\nimport { ProvisionCodeCodec } from './provision/ProvisionCodeCodec';\n// Authorization components\nimport { AuthModeSelector } from './authorization/AuthModeSelector';\nexport type {\n  DnsProvider,\n  ListDnsRecordsInput,\n  ListableDnsProvider,\n  DeleteDnsRecordInput,\n  DnsRecordSummary,\n  UpsertDnsRecordInput,\n} from './dns/DnsProvider';\nexport type { EdgeNodeCertificateProvisioner } from './edge/EdgeNodeCertificateProvisioner';\nexport type { EdgeNodeTunnelManager } from './edge/interfaces/EdgeNodeTunnelManager';\nexport type { QuotaService, AccountQuota } from './quota/QuotaService';\nexport type { EntitlementProvider, AccountEntitlement } from './quota/EntitlementProvider';\n// Tunnel and Subdomain types\nexport type {\n  TunnelProvider,\n  TunnelConfig,\n  TunnelSetupOptions,\n  TunnelStatus,\n} from './tunnel/TunnelProvider';\nexport type {\n  SubdomainRegistration,\n  ConnectivityResult,\n  SubdomainServiceOptions,\n} from './subdomain/SubdomainService';\n// Export the new AppStaticAssetHandler\nexport { AppStaticAssetHandler } from './http/AppStaticAssetHandler';\n\nexport { \n    RepresentationPartialConvertingStore,\n    MinioDataAccessor, \n    QuadstoreSparqlDataAccessor,\n    QuintStoreSparqlDataAccessor,\n    MixDataAccessor,\n    ConfigurableLoggerFactory,\n    SparqlUpdateResourceStore,\n    SubgraphQueryEngine,\n    QuadstoreSparqlEngine,\n    QuintstoreSparqlEngine,\n    SubgraphSparqlHttpHandler,\n    QuotaAdminHttpHandler,\n    ClusterIngressRouter,\n    ClusterWebSocketConfigurator,\n    EdgeNodeDirectDebugHttpHandler,\n    EdgeNodeProxyHttpHandler,\n    RouterHttpHandler,\n    RouterHttpRoute,\n    TracingHandler,\n    EdgeNodeCertificateHttpHandler,\n    TerminalHttpHandler,\n    ReservedSuffixIdentifierGenerator,\n    DrizzleIndexedStorage,\n    PostgresKeyValueStorage,\n    RedisKeyValueStorage,\n    SqliteKeyValueStorage,\n  DrizzleQuotaService,\n  NoopQuotaService,\n  HttpEntitlementProvider,\n  NoopEntitlementProvider,\n  PerAccountQuotaStrategy,\n    TencentDnsProvider,\n    EdgeNodeDnsCoordinator,\n    Dns01CertificateProvisioner,\n    SimpleEdgeNodeTunnelManager,\n    NoopEdgeNodeTunnelManager,\n    FrpTunnelManager,\n    EdgeNodeHealthProbeService,\n    EdgeNodeAgent,\n    EdgeNodeCertificateService,\n    AcmeCertificateManager,\n    EdgeNodeModeDetector,\n    ClusterIdentifierStrategy,\n  UsageTrackingStore,\n  CenterNodeRegistrationService,\n  PodRoutingHttpHandler,\n  ReactAppViewHandler,\n  // Quint exports\n  QuintStore,\n  SqliteQuintStore,\n  PgQuintStore,\n  BaseQuintStore,\n  // Vector exports\n  VectorStore,\n  SqliteVectorStore,\n  PostgresVectorStore,\n  VectorHttpHandler,\n  // Embedding exports\n  ProviderRegistry,\n  ProviderRegistryImpl,\n  EmbeddingService,\n  EmbeddingServiceImpl,\n  CredentialReader,\n  CredentialReaderImpl,\n  // Tunnel and Subdomain exports\n  CloudflareTunnelProvider,\n  LocalTunnelProvider,\n  SubdomainService,\n  // IdP/SP separation exports\n  MultiDomainIdentifierStrategy,\n  SubdomainPodIdentifierStrategy,\n  DisabledOidcHandler,\n  DisabledIdentityProviderHandler,\n  AutoDetectOidcHandler,\n  AutoDetectIdentityProviderHandler,\n  UrlAwareRedisLocker,\n  // Provision exports\n  ProvisionPodCreator,\n  ProvisionCodeCodec,\n  // Authorization exports\n  AuthModeSelector,\n};\n"]}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;;AAAA,6CAA2C;AAC3C,yGAAsG;AA2GlG,qHA3GK,2EAAoC,OA2GL;AA1GxC,6EAA0E;AA2GtE,kGA3GK,qCAAiB,OA2GL;AA1GrB,iGAA8F;AA2G1F,4GA3GK,yDAA2B,OA2GL;AA1G/B,mGAAgG;AA2G5F,6GA3GK,2DAA4B,OA2GL;AA1GhC,yEAAsE;AA2GlE,gGA3GK,iCAAe,OA2GL;AA1GnB,mFAAgF;AA2G5E,0GA3GK,qDAAyB,OA2GL;AA1G7B,8EAA0H;AA4GtH,oGA5GK,yCAAmB,OA4GL;AACnB,sGA7G0B,2CAAqB,OA6G1B;AACrB,uGA9GiD,4CAAsB,OA8GjD;AA5G1B,gFAA6E;AA6GzE,0GA7GK,qDAAyB,OA6GL;AA5G7B,8EAA2E;AA6GvE,sGA7GK,6CAAqB,OA6GL;AA5GzB,mFAAgF;AAuG5E,0GAvGK,qDAAyB,OAuGL;AAtG7B,sEAAmE;AA4G/D,qGA5GK,2CAAoB,OA4GL;AA3GxB,sFAAmF;AA4G/E,6GA5GK,2DAA4B,OA4GL;AA3GhC,0FAAuF;AA4GnF,+GA5GK,+DAA8B,OA4GL;AA3GlC,8EAA2E;AA4GvE,yGA5GK,mDAAwB,OA4GL;AA3G5B,gEAA6D;AA4GzD,kGA5GK,qCAAiB,OA4GL;AA3GrB,4DAAyD;AA4GrD,gGA5GK,iCAAe,OA4GL;AA3GnB,0DAAuD;AA4GnD,+FA5GK,+BAAc,OA4GL;AA3GlB,6EAA0E;AA6GtE,oGA7GK,yCAAmB,OA6GL;AA5GvB,gGAA6F;AA2GzF,+GA3GK,+DAA8B,OA2GL;AA1GlC,gGAA6F;AA4GzF,kHA5GK,qEAAiC,OA4GL;AA3GrC,oFAAiF;AA4G7E,sGA5GK,6CAAqB,OA4GL;AA3GzB,sFAAmF;AA4G/E,uGA5GK,+CAAsB,OA4GL;AA3G1B,wFAAqF;AA4GjF,wGA5GK,iDAAuB,OA4GL;AA3G3B,kFAA+E;AA4G3E,qGA5GK,2CAAoB,OA4GL;AA3GxB,oFAAiF;AA4G7E,sGA5GK,6CAAqB,OA4GL;AA3GzB,qEAAkE;AA4GhE,oGA5GO,yCAAmB,OA4GP;AA3GrB,+DAA4D;AA4G1D,iGA5GO,mCAAgB,OA4GP;AA3GlB,qEAA+F;AA4G7F,wGA5GO,6CAAuB,OA4GP;AACvB,wGA7GgC,6CAAuB,OA6GhC;AA5GzB,qFAAkF;AA6GhF,wGA7GO,iDAAuB,OA6GP;AA5GzB,yEAAsE;AA6GlE,mGA7GK,uCAAkB,OA6GL;AA5GtB,0EAAuE;AA6GnE,uGA7GK,+CAAsB,OA6GL;AA5G1B,oFAAiF;AA6G7E,4GA7GK,yDAA2B,OA6GL;AA5G/B,wEAAsG;AA6GlG,4GA7GK,mDAA2B,OA6GL;AAC3B,0GA9GkC,iDAAyB,OA8GlC;AA7G7B,8DAA2D;AA8GvD,iGA9GK,mCAAgB,OA8GL;AA7GpB,+EAA4E;AAiHxE,uGAjHK,+CAAsB,OAiHL;AAhH1B,kFAA+E;AA6G3E,2GA7GK,uDAA0B,OA6GL;AA5G9B,wDAAqD;AA6GjD,8FA7GK,6BAAa,OA6GL;AA5GjB,qFAAkF;AA6G9E,2GA7GK,uDAA0B,OA6GL;AA3G9B,2EAAwE;AA+GtE,mGA/GO,uCAAkB,OA+GP;AA9GpB,sEAAmE;AA4G/D,qGA5GK,2CAAoB,OA4GL;AA3GxB,4FAAyF;AA4GrF,0GA5GK,qDAAyB,OA4GL;AA3G7B,4FAAyF;AA6GvF,8GA7GO,6DAA6B,OA6GP;AA5G/B,wEAAqE;AA6GnE,sGA7GO,6CAAqB,OA6GP;AA5GvB,wEAAqE;AA6GnE,oGA7GO,yCAAmB,OA6GP;AA5GrB,uEAAoE;AA+GlE,iGA/GO,mCAAgB,OA+GP;AA9GlB,+DAA4D;AA+G1D,6FA/GO,2BAAY,OA+GP;AA9Gd,mEAAgE;AA+G9D,+FA/GO,+BAAc,OA+GP;AA9GhB,iDAAmD;AA2GjD,2FA3GO,kBAAU,OA2GP;AAzGZ,oBAAoB;AACpB,kDAAgF;AA8G9E,kGA9GO,yBAAiB,OA8GP;AACjB,oGA/G0B,2BAAmB,OA+G1B;AA9GrB,uEAAoE;AA+GlE,kGA/GO,qCAAiB,OA+GP;AA9GnB,oEAAiE;AAgH/D,iGAhHO,mCAAgB,OAgHP;AA/GlB,4EAAyE;AAgHvE,qGAhHO,2CAAoB,OAgHP;AA/GtB,oEAAiE;AAgH/D,iGAhHO,mCAAgB,OAgHP;AA/GlB,4EAAyE;AAgHvE,qGAhHO,2CAAoB,OAgHP;AA/GtB,oEAAiE;AAgH/D,iGAhHO,mCAAgB,OAgHP;AA/GlB,4EAAyE;AAgHvE,qGAhHO,2CAAoB,OAgHP;AA/GtB,8DAA2D;AAqGzD,4FArGO,yBAAW,OAqGP;AApGb,kCAAkC;AAClC,gFAA6E;AA+G3E,yGA/GO,mDAAwB,OA+GP;AA9G1B,sEAAmE;AA+GjE,oGA/GO,yCAAmB,OA+GP;AA9GrB,mEAAgE;AA+G9D,iGA/GO,mCAAgB,OA+GP;AA9GlB,+EAA4E;AAuH1E,oGAvHO,yCAAmB,OAuHP;AAtHrB,+BAA+B;AAC/B,oGAAiG;AA8G/F,8GA9GO,6DAA6B,OA8GP;AA7G/B,sGAAmG;AA8GjG,+GA9GO,+DAA8B,OA8GP;AA7GhC,6EAA0E;AA8GxE,oGA9GO,yCAAmB,OA8GP;AA7GrB,qGAAkG;AA8GhG,gHA9GO,iEAA+B,OA8GP;AA7GjC,iFAA8E;AA8G5E,sGA9GO,6CAAqB,OA8GP;AA7GvB,yGAAsG;AA8GpG,kHA9GO,qEAAiC,OA8GP;AA7GnC,mGAAgG;AA8G9F,+GA9GO,+DAA8B,OA8GP;AA7GhC,uBAAuB;AACvB,yEAAsE;AA+GpE,oGA/GO,yCAAmB,OA+GP;AA9GrB,uEAAoE;AA+GlE,mGA/GO,uCAAkB,OA+GP;AA9GpB,2BAA2B;AAC3B,uEAAoE;AA+GlE,iGA/GO,mCAAgB,OA+GP;AAtFlB,uCAAuC;AACvC,sEAAqE;AAA5D,8HAAA,qBAAqB,OAAA","sourcesContent":["import './runtime/configure-drizzle-solid';\nimport { RepresentationPartialConvertingStore } from './storage/RepresentationPartialConvertingStore';\nimport { MinioDataAccessor } from './storage/accessors/MinioDataAccessor';\nimport { QuadstoreSparqlDataAccessor } from './storage/accessors/QuadstoreSparqlDataAccessor';\nimport { QuintStoreSparqlDataAccessor } from './storage/accessors/QuintStoreSparqlDataAccessor';\nimport { MixDataAccessor } from './storage/accessors/MixDataAccessor';\nimport { ConfigurableLoggerFactory } from './logging/ConfigurableLoggerFactory';\nimport { SubgraphQueryEngine, QuadstoreSparqlEngine, QuintstoreSparqlEngine } from './storage/sparql/SubgraphQueryEngine';\nexport type { SparqlEngine } from './storage/sparql/SubgraphQueryEngine';\nimport { SubgraphSparqlHttpHandler } from './http/SubgraphSparqlHttpHandler';\nimport { QuotaAdminHttpHandler } from './http/quota/QuotaAdminHttpHandler';\nimport { SparqlUpdateResourceStore } from './storage/SparqlUpdateResourceStore';\nimport { ClusterIngressRouter } from './http/ClusterIngressRouter';\nimport { ClusterWebSocketConfigurator } from './http/ClusterWebSocketConfigurator';\nimport { EdgeNodeDirectDebugHttpHandler } from './http/EdgeNodeDirectDebugHttpHandler';\nimport { EdgeNodeProxyHttpHandler } from './http/EdgeNodeProxyHttpHandler';\nimport { RouterHttpHandler } from './http/RouterHttpHandler';\nimport { RouterHttpRoute } from './http/RouterHttpRoute';\nimport { TracingHandler } from './http/TracingHandler';\nimport { TerminalHttpHandler } from './http/terminal/TerminalHttpHandler';\nimport { EdgeNodeCertificateHttpHandler } from './http/admin/EdgeNodeCertificateHttpHandler';\nimport { ReservedSuffixIdentifierGenerator } from './pods/ReservedSuffixIdentifierGenerator';\nimport { DrizzleIndexedStorage } from './identity/drizzle/DrizzleIndexedStorage';\nimport { WebIdProfileRepository } from './identity/drizzle/WebIdProfileRepository';\nimport { PostgresKeyValueStorage } from './storage/keyvalue/PostgresKeyValueStorage';\nimport { RedisKeyValueStorage } from './storage/keyvalue/RedisKeyValueStorage';\nimport { SqliteKeyValueStorage } from './storage/keyvalue/SqliteKeyValueStorage';\nimport { DrizzleQuotaService } from './quota/DrizzleQuotaService';\nimport { NoopQuotaService } from './quota/NoopQuotaService';\nimport { HttpEntitlementProvider, NoopEntitlementProvider } from './quota/EntitlementProvider';\nimport { PerAccountQuotaStrategy } from './storage/quota/PerAccountQuotaStrategy';\nimport { TencentDnsProvider } from './dns/tencent/TencentDnsProvider';\nimport { EdgeNodeDnsCoordinator } from './edge/EdgeNodeDnsCoordinator';\nimport { Dns01CertificateProvisioner } from './edge/Dns01CertificateProvisioner';\nimport { SimpleEdgeNodeTunnelManager, NoopEdgeNodeTunnelManager } from './edge/EdgeNodeTunnelManager';\nimport { FrpTunnelManager } from './edge/FrpTunnelManager';\nimport { AcmeCertificateManager } from './edge/acme/AcmeCertificateManager';\nimport { EdgeNodeHealthProbeService } from './edge/EdgeNodeHealthProbeService';\nimport { EdgeNodeAgent } from './edge/EdgeNodeAgent';\nimport { EdgeNodeCertificateService } from './service/EdgeNodeCertificateService';\nimport { createBandwidthThrottleTransform } from './util/stream/BandwidthThrottleTransform';\nimport { UsageTrackingStore } from './storage/quota/UsageTrackingStore';\nimport { EdgeNodeModeDetector } from './edge/EdgeNodeModeDetector';\nimport { ClusterIdentifierStrategy } from './util/identifiers/ClusterIdentifierStrategy';\nimport { CenterNodeRegistrationService } from './identity/CenterNodeRegistrationService';\nimport { PodRoutingHttpHandler } from './http/PodRoutingHttpHandler';\nimport { ReactAppViewHandler } from './identity/ReactAppViewHandler';\nimport { SqliteQuintStore } from './storage/quint/SqliteQuintStore';\nimport { PgQuintStore } from './storage/quint/PgQuintStore';\nimport { BaseQuintStore } from './storage/quint/BaseQuintStore';\nimport { QuintStore } from './storage/quint/types';\nimport type { EdgeNodeCertificateProvisioner } from './edge/EdgeNodeCertificateProvisioner';\n// Vector components\nimport { SqliteVectorStore, PostgresVectorStore } from './storage/vector/index';\nimport { VectorHttpHandler } from './http/vector/VectorHttpHandler';\nimport { ProviderRegistry } from './ai/service/ProviderRegistry';\nimport { ProviderRegistryImpl } from './ai/service/ProviderRegistryImpl';\nimport { EmbeddingService } from './ai/service/EmbeddingService';\nimport { EmbeddingServiceImpl } from './ai/service/EmbeddingServiceImpl';\nimport { CredentialReader } from './ai/service/CredentialReader';\nimport { CredentialReaderImpl } from './ai/service/CredentialReaderImpl';\nimport { VectorStore } from './storage/vector/VectorStore';\n// Tunnel and Subdomain components\nimport { CloudflareTunnelProvider } from './tunnel/CloudflareTunnelProvider';\nimport { LocalTunnelProvider } from './tunnel/LocalTunnelProvider';\nimport { SubdomainService } from './subdomain/SubdomainService';\nimport { UrlAwareRedisLocker } from './storage/locking/UrlAwareRedisLocker';\n// IdP/SP separation components\nimport { MultiDomainIdentifierStrategy } from './util/identifiers/MultiDomainIdentifierStrategy';\nimport { SubdomainPodIdentifierStrategy } from './util/identifiers/SubdomainPodIdentifierStrategy';\nimport { DisabledOidcHandler } from './identity/oidc/DisabledOidcHandler';\nimport { DisabledIdentityProviderHandler } from './identity/oidc/DisabledIdentityProviderHandler';\nimport { AutoDetectOidcHandler } from './identity/oidc/AutoDetectOidcHandler';\nimport { AutoDetectIdentityProviderHandler } from './identity/oidc/AutoDetectIdentityProviderHandler';\nimport { LoopbackClientIdAdapterFactory } from './identity/oidc/LoopbackClientIdAdapterFactory';\n// Provision components\nimport { ProvisionPodCreator } from './provision/ProvisionPodCreator';\nimport { ProvisionCodeCodec } from './provision/ProvisionCodeCodec';\n// Authorization components\nimport { AuthModeSelector } from './authorization/AuthModeSelector';\nexport type {\n  DnsProvider,\n  ListDnsRecordsInput,\n  ListableDnsProvider,\n  DeleteDnsRecordInput,\n  DnsRecordSummary,\n  UpsertDnsRecordInput,\n} from './dns/DnsProvider';\nexport type { EdgeNodeCertificateProvisioner } from './edge/EdgeNodeCertificateProvisioner';\nexport type { EdgeNodeTunnelManager } from './edge/interfaces/EdgeNodeTunnelManager';\nexport type { QuotaService, AccountQuota } from './quota/QuotaService';\nexport type { EntitlementProvider, AccountEntitlement } from './quota/EntitlementProvider';\n// Tunnel and Subdomain types\nexport type {\n  TunnelProvider,\n  TunnelConfig,\n  TunnelSetupOptions,\n  TunnelStatus,\n} from './tunnel/TunnelProvider';\nexport type {\n  SubdomainRegistration,\n  ConnectivityResult,\n  SubdomainServiceOptions,\n} from './subdomain/SubdomainService';\n// Export the new AppStaticAssetHandler\nexport { AppStaticAssetHandler } from './http/AppStaticAssetHandler';\n\nexport { \n    RepresentationPartialConvertingStore,\n    MinioDataAccessor, \n    QuadstoreSparqlDataAccessor,\n    QuintStoreSparqlDataAccessor,\n    MixDataAccessor,\n    ConfigurableLoggerFactory,\n    SparqlUpdateResourceStore,\n    SubgraphQueryEngine,\n    QuadstoreSparqlEngine,\n    QuintstoreSparqlEngine,\n    SubgraphSparqlHttpHandler,\n    QuotaAdminHttpHandler,\n    ClusterIngressRouter,\n    ClusterWebSocketConfigurator,\n    EdgeNodeDirectDebugHttpHandler,\n    EdgeNodeProxyHttpHandler,\n    RouterHttpHandler,\n    RouterHttpRoute,\n    TracingHandler,\n    EdgeNodeCertificateHttpHandler,\n    TerminalHttpHandler,\n    ReservedSuffixIdentifierGenerator,\n    DrizzleIndexedStorage,\n    WebIdProfileRepository,\n    PostgresKeyValueStorage,\n    RedisKeyValueStorage,\n    SqliteKeyValueStorage,\n  DrizzleQuotaService,\n  NoopQuotaService,\n  HttpEntitlementProvider,\n  NoopEntitlementProvider,\n  PerAccountQuotaStrategy,\n    TencentDnsProvider,\n    EdgeNodeDnsCoordinator,\n    Dns01CertificateProvisioner,\n    SimpleEdgeNodeTunnelManager,\n    NoopEdgeNodeTunnelManager,\n    FrpTunnelManager,\n    EdgeNodeHealthProbeService,\n    EdgeNodeAgent,\n    EdgeNodeCertificateService,\n    AcmeCertificateManager,\n    EdgeNodeModeDetector,\n    ClusterIdentifierStrategy,\n  UsageTrackingStore,\n  CenterNodeRegistrationService,\n  PodRoutingHttpHandler,\n  ReactAppViewHandler,\n  // Quint exports\n  QuintStore,\n  SqliteQuintStore,\n  PgQuintStore,\n  BaseQuintStore,\n  // Vector exports\n  VectorStore,\n  SqliteVectorStore,\n  PostgresVectorStore,\n  VectorHttpHandler,\n  // Embedding exports\n  ProviderRegistry,\n  ProviderRegistryImpl,\n  EmbeddingService,\n  EmbeddingServiceImpl,\n  CredentialReader,\n  CredentialReaderImpl,\n  // Tunnel and Subdomain exports\n  CloudflareTunnelProvider,\n  LocalTunnelProvider,\n  SubdomainService,\n  // IdP/SP separation exports\n  MultiDomainIdentifierStrategy,\n  SubdomainPodIdentifierStrategy,\n  DisabledOidcHandler,\n  DisabledIdentityProviderHandler,\n  AutoDetectOidcHandler,\n  AutoDetectIdentityProviderHandler,\n  LoopbackClientIdAdapterFactory,\n  UrlAwareRedisLocker,\n  // Provision exports\n  ProvisionPodCreator,\n  ProvisionCodeCodec,\n  // Authorization exports\n  AuthModeSelector,\n};\n"]}

package/dist/provision/ProvisionPodCreator.d.ts

@@ -8,13 +8,17 @@
  * - 没有 → 委托给原始 BasePodCreator（标准本地创建）
  */
 import { BasePodCreator, type PodCreatorInput, type PodCreatorOutput, type BasePodCreatorArgs } from '@solid/community-server';
+import type { WebIdProfileRepository } from '../identity/drizzle/WebIdProfileRepository';
 export interface ProvisionPodCreatorArgs extends BasePodCreatorArgs {
     /** 与 ProvisionHandler 使用相同的 baseUrl 派生签名密钥 */
     provisionBaseUrl?: string;
+    /** Optional Cloud profile repository used to reconcile solid:storage after remote provisioning */
+    webIdProfileRepo?: WebIdProfileRepository;
 }
 export declare class ProvisionPodCreator extends BasePodCreator {
     private readonly provisionLogger;
     private readonly codec;
+    private readonly webIdProfileRepo?;
     constructor(args: ProvisionPodCreatorArgs);
     handle(input: PodCreatorInput): Promise<PodCreatorOutput>;
     private handleStandardPodCreate;

package/dist/provision/ProvisionPodCreator.js

@@ -18,11 +18,21 @@ function joinUrlPath(baseUrl, relativePath) {
     const normalizedRelativePath = relativePath.replace(/^\/+/u, '');
     return `${normalizedBaseUrl}/${normalizedRelativePath}`;
 }
+function remapPodConflict(error, podName) {
+    const message = error instanceof Error ? error.message : String(error);
+    if (/There already is a resource at/i.test(message)) {
+        throw new community_server_1.ConflictHttpError(`Pod name "${podName}" is already taken for this storage target.`, {
+            cause: error instanceof Error ? error : undefined,
+        });
+    }
+    throw error;
+}
 class ProvisionPodCreator extends community_server_1.BasePodCreator {
     constructor(args) {
         super(args);
         this.provisionLogger = (0, global_logger_factory_1.getLoggerFor)(this);
         this.codec = new ProvisionCodeCodec_1.ProvisionCodeCodec(args.provisionBaseUrl ?? args.baseUrl);
+        this.webIdProfileRepo = args.webIdProfileRepo;
     }
     async handle(input) {
         const provisionCode = input.settings?.provisionCode;
@@ -60,7 +70,8 @@ class ProvisionPodCreator extends community_server_1.BasePodCreator {
         const storageBase = payload.spDomain
             ? `https://${payload.spDomain}`
             : payload.spUrl.replace(/\/$/, '');
-        const podUrl = spResult.podUrl || `${storageBase}/${podName}/`;
+        const canonicalStorageUrl = `${storageBase}/${podName}/`;
+        const podUrl = spResult.podUrl || canonicalStorageUrl;
         // 3. 生成 WebID（指向 Cloud，storage 指向 SP）
         const webId = input.webId ?? `${this.baseUrl}${podName}/profile/card#me`;
         // 4. 链接 WebID 到账户 + 在本地 PodStore 记录
@@ -75,6 +86,17 @@ class ProvisionPodCreator extends community_server_1.BasePodCreator {
         };
         const webIdLink = await this.handleWebId(!input.webId, webId, input.accountId, podSettings);
         const podId = await this.createPod(input.accountId, podSettings, !input.name, webIdLink);
+        if (!input.webId && this.webIdProfileRepo) {
+            try {
+                await this.webIdProfileRepo.updateStorage(podName, {
+                    storageUrl: canonicalStorageUrl,
+                    storageMode: 'local',
+                });
+            }
+            catch (error) {
+                this.provisionLogger.warn(`Failed to reconcile storage pointer for ${podName}: ${error.message}`);
+            }
+        }
         this.provisionLogger.info(`Provisioned pod ${podName} on SP ${payload.spUrl}, podUrl: ${podUrl}`);
         return {
             podUrl,
@@ -99,7 +121,16 @@ class ProvisionPodCreator extends community_server_1.BasePodCreator {
         const webIdLink = await this.handleWebId(!input.webId, webId, input.accountId, podSettings);
         const webIdElapsed = Date.now() - webIdStarted;
         const podStarted = Date.now();
-        const podId = await this.createPod(input.accountId, podSettings, !input.name, webIdLink);
+        let podId;
+        try {
+            podId = await this.createPod(input.accountId, podSettings, !input.name, webIdLink);
+        }
+        catch (error) {
+            if (input.name) {
+                remapPodConflict(error, input.name);
+            }
+            throw error;
+        }
         const podElapsed = Date.now() - podStarted;
         const totalElapsed = Date.now() - totalStarted;
         this.provisionLogger.info(`[timing] ProvisionPodCreator.standard account=${input.accountId} pod=${baseIdentifier.path} handleWebId=${webIdElapsed}ms createPod=${podElapsed}ms total=${totalElapsed}ms`);

package/dist/provision/ProvisionPodCreator.js.map

@@ -1 +1 @@
-{"version":3,"file":"ProvisionPodCreator.js","sourceRoot":"","sources":["../../src/provision/ProvisionPodCreator.ts"],"names":[],"mappings":";AAAA;;;;;;;;GAQG;;;AAEH,iEAAqD;AACrD,8DAKiC;AACjC,6DAA0D;AAE1D,SAAS,WAAW,CAAC,OAAe,EAAE,YAAoB;IACxD,MAAM,iBAAiB,GAAG,OAAO,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IACvD,MAAM,sBAAsB,GAAG,YAAY,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IACjE,OAAO,GAAG,iBAAiB,IAAI,sBAAsB,EAAE,CAAC;AAC1D,CAAC;AAOD,MAAa,mBAAoB,SAAQ,iCAAc;IAIrD,YAAmB,IAA6B;QAC9C,KAAK,CAAC,IAAI,CAAC,CAAC;QAJG,oBAAe,GAAG,IAAA,oCAAY,EAAC,IAAI,CAAC,CAAC;QAKpD,IAAI,CAAC,KAAK,GAAG,IAAI,uCAAkB,CAAC,IAAI,CAAC,gBAAgB,IAAI,IAAI,CAAC,OAAO,CAAC,CAAC;IAC7E,CAAC;IAEe,KAAK,CAAC,MAAM,CAAC,KAAsB;QACjD,MAAM,aAAa,GAAG,KAAK,CAAC,QAAQ,EAAE,aAAmC,CAAC;QAE1E,IAAI,CAAC,aAAa,EAAE,CAAC;YACnB,OAAO,IAAI,CAAC,uBAAuB,CAAC,KAAK,CAAC,CAAC;QAC7C,CAAC;QAED,iCAAiC;QACjC,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;QACjD,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;QACtD,CAAC;QAED,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,kCAAkC,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC;QAE7E,gBAAgB;QAChB,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC;QAC3B,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;QAClE,CAAC;QAED,kBAAkB;QAClB,MAAM,WAAW,GAAG,GAAG,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,iBAAiB,CAAC;QACzE,MAAM,UAAU,GAAG,MAAM,KAAK,CAAC,WAAW,EAAE;YAC1C,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,kBAAkB;gBAClC,eAAe,EAAE,UAAU,OAAO,CAAC,YAAY,EAAE;aAClD;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,CAAC;SAClC,CAAC,CAAC;QAEH,IAAI,CAAC,UAAU,CAAC,EAAE,EAAE,CAAC;YACnB,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,IAAI,EAAE,CAAC;YACxC,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,uBAAuB,UAAU,CAAC,MAAM,IAAI,OAAO,EAAE,CAAC,CAAC;YAClF,MAAM,IAAI,KAAK,CAAC,+BAA+B,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC;QACtE,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,IAAI,EAAyB,CAAC;QAEhE,uCAAuC;QACvC,MAAM,WAAW,GAAG,OAAO,CAAC,QAAQ;YAClC,CAAC,CAAC,WAAW,OAAO,CAAC,QAAQ,EAAE;YAC/B,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QACrC,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,IAAI,GAAG,WAAW,IAAI,OAAO,GAAG,CAAC;QAE/D,sCAAsC;QACtC,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,IAAI,GAAG,IAAI,CAAC,OAAO,GAAG,OAAO,kBAAkB,CAAC;QAEzE,oCAAoC;QACpC,8DAA8D;QAC9D,kDAAkD;QAClD,MAAM,SAAS,GAAG,IAAI,CAAC,mBAAmB,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QAC7D,MAAM,WAAW,GAAG;YAClB,GAAG,KAAK,CAAC,QAAQ;YACjB,IAAI,EAAE,SAAS;YACf,KAAK;YACL,UAAU,EAAE,IAAI,CAAC,OAAO;SACzB,CAAC;QAEF,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;QAC5F,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,SAAS,EAAE,WAAW,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;QAEzF,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,mBAAmB,OAAO,UAAU,OAAO,CAAC,KAAK,aAAa,MAAM,EAAE,CAAC,CAAC;QAElG,OAAO;YACL,MAAM;YACN,KAAK;YACL,KAAK;YACL,SAAS;SACV,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,uBAAuB,CAAC,KAAsB;QAC1D,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAChC,MAAM,cAAc,GAAG,IAAI,CAAC,sBAAsB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC/D,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,IAAI,WAAW,CAAC,cAAc,CAAC,IAAI,EAAE,IAAI,CAAC,iBAAiB,CAAC,CAAC;QACtF,MAAM,aAAa,GAAG,KAAK,CAAC,QAA+C,CAAC;QAC5E,MAAM,UAAU,GAAG,OAAO,aAAa,EAAE,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,aAAa,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC;QAC3G,MAAM,WAAW,GAAG;YAClB,GAAG,aAAa;YAChB,IAAI,EAAE,cAAc;YACpB,KAAK;YACL,UAAU;SACX,CAAC;QAEF,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAChC,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;QAC5F,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,YAAY,CAAC;QAE/C,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC9B,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,SAAS,EAAE,WAAW,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;QACzF,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,UAAU,CAAC;QAC3C,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,YAAY,CAAC;QAE/C,IAAI,CAAC,eAAe,CAAC,IAAI,CACvB,iDAAiD,KAAK,CAAC,SAAS,QAAQ,cAAc,CAAC,IAAI,gBAAgB,YAAY,gBAAgB,UAAU,YAAY,YAAY,IAAI,CAC9K,CAAC;QAEF,OAAO;YACL,MAAM,EAAE,cAAc,CAAC,IAAI;YAC3B,KAAK;YACL,KAAK;YACL,SAAS;SACV,CAAC;IACJ,CAAC;CACF;AAnHD,kDAmHC","sourcesContent":["/**\n * ProvisionPodCreator\n *\n * 等位替换 CSS 的 BasePodCreator。\n *\n * 检查 settings 里有没有 provisionCode：\n * - 有 → 解码 JWT，回调远端 SP 的 /provision/pods 创建 Pod\n * - 没有 → 委托给原始 BasePodCreator（标准本地创建）\n */\n\nimport { getLoggerFor } from 'global-logger-factory';\nimport {\n  BasePodCreator,\n  type PodCreatorInput,\n  type PodCreatorOutput,\n  type BasePodCreatorArgs,\n} from '@solid/community-server';\nimport { ProvisionCodeCodec } from './ProvisionCodeCodec';\n\nfunction joinUrlPath(baseUrl: string, relativePath: string): string {\n  const normalizedBaseUrl = baseUrl.replace(/\\/+$/u, '');\n  const normalizedRelativePath = relativePath.replace(/^\\/+/u, '');\n  return `${normalizedBaseUrl}/${normalizedRelativePath}`;\n}\n\nexport interface ProvisionPodCreatorArgs extends BasePodCreatorArgs {\n  /** 与 ProvisionHandler 使用相同的 baseUrl 派生签名密钥 */\n  provisionBaseUrl?: string;\n}\n\nexport class ProvisionPodCreator extends BasePodCreator {\n  private readonly provisionLogger = getLoggerFor(this);\n  private readonly codec: ProvisionCodeCodec;\n\n  public constructor(args: ProvisionPodCreatorArgs) {\n    super(args);\n    this.codec = new ProvisionCodeCodec(args.provisionBaseUrl ?? args.baseUrl);\n  }\n\n  public override async handle(input: PodCreatorInput): Promise<PodCreatorOutput> {\n    const provisionCode = input.settings?.provisionCode as string | undefined;\n\n    if (!provisionCode) {\n      return this.handleStandardPodCreate(input);\n    }\n\n    // SP 模式：解码 provisionCode，回调远端 SP\n    const payload = this.codec.decode(provisionCode);\n    if (!payload) {\n      throw new Error('Invalid or expired provisionCode');\n    }\n\n    this.provisionLogger.info(`Provisioning pod on remote SP: ${payload.spUrl}`);\n\n    // 1. 确定 podName\n    const podName = input.name;\n    if (!podName) {\n      throw new Error('Pod name is required for remote provisioning');\n    }\n\n    // 2. 回调 SP 创建 Pod\n    const callbackUrl = `${payload.spUrl.replace(/\\/$/, '')}/provision/pods`;\n    const spResponse = await fetch(callbackUrl, {\n      method: 'POST',\n      headers: {\n        'Content-Type': 'application/json',\n        'Authorization': `Bearer ${payload.serviceToken}`,\n      },\n      body: JSON.stringify({ podName }),\n    });\n\n    if (!spResponse.ok) {\n      const errBody = await spResponse.text();\n      this.provisionLogger.error(`SP callback failed: ${spResponse.status} ${errBody}`);\n      throw new Error(`Failed to create pod on SP: ${spResponse.status}`);\n    }\n\n    const spResult = await spResponse.json() as { podUrl?: string };\n\n    // storage URL 优先用 Cloud 分配的子域名，回调用实际地址\n    const storageBase = payload.spDomain\n      ? `https://${payload.spDomain}`\n      : payload.spUrl.replace(/\\/$/, '');\n    const podUrl = spResult.podUrl || `${storageBase}/${podName}/`;\n\n    // 3. 生成 WebID（指向 Cloud，storage 指向 SP）\n    const webId = input.webId ?? `${this.baseUrl}${podName}/profile/card#me`;\n\n    // 4. 链接 WebID 到账户 + 在本地 PodStore 记录\n    // base.path 必须在 Cloud 的 identifier space 内（CSS PodStore 会检查），\n    // 所以用 Cloud 本地路径；真实的 SP storage URL 通过 podUrl 返回。\n    const localBase = this.identifierGenerator.generate(podName);\n    const podSettings = {\n      ...input.settings,\n      base: localBase,\n      webId,\n      oidcIssuer: this.baseUrl,\n    };\n\n    const webIdLink = await this.handleWebId(!input.webId, webId, input.accountId, podSettings);\n    const podId = await this.createPod(input.accountId, podSettings, !input.name, webIdLink);\n\n    this.provisionLogger.info(`Provisioned pod ${podName} on SP ${payload.spUrl}, podUrl: ${podUrl}`);\n\n    return {\n      podUrl,\n      webId,\n      podId,\n      webIdLink,\n    };\n  }\n\n  private async handleStandardPodCreate(input: PodCreatorInput): Promise<PodCreatorOutput> {\n    const totalStarted = Date.now();\n    const baseIdentifier = this.generateBaseIdentifier(input.name);\n    const webId = input.webId ?? joinUrlPath(baseIdentifier.path, this.relativeWebIdPath);\n    const inputSettings = input.settings as Record<string, unknown> | undefined;\n    const oidcIssuer = typeof inputSettings?.oidcIssuer === 'string' ? inputSettings.oidcIssuer : this.baseUrl;\n    const podSettings = {\n      ...inputSettings,\n      base: baseIdentifier,\n      webId,\n      oidcIssuer,\n    };\n\n    const webIdStarted = Date.now();\n    const webIdLink = await this.handleWebId(!input.webId, webId, input.accountId, podSettings);\n    const webIdElapsed = Date.now() - webIdStarted;\n\n    const podStarted = Date.now();\n    const podId = await this.createPod(input.accountId, podSettings, !input.name, webIdLink);\n    const podElapsed = Date.now() - podStarted;\n    const totalElapsed = Date.now() - totalStarted;\n\n    this.provisionLogger.info(\n      `[timing] ProvisionPodCreator.standard account=${input.accountId} pod=${baseIdentifier.path} handleWebId=${webIdElapsed}ms createPod=${podElapsed}ms total=${totalElapsed}ms`,\n    );\n\n    return {\n      podUrl: baseIdentifier.path,\n      webId,\n      podId,\n      webIdLink,\n    };\n  }\n}\n"]}
+{"version":3,"file":"ProvisionPodCreator.js","sourceRoot":"","sources":["../../src/provision/ProvisionPodCreator.ts"],"names":[],"mappings":";AAAA;;;;;;;;GAQG;;;AAEH,iEAAqD;AACrD,8DAMiC;AACjC,6DAA0D;AAG1D,SAAS,WAAW,CAAC,OAAe,EAAE,YAAoB;IACxD,MAAM,iBAAiB,GAAG,OAAO,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IACvD,MAAM,sBAAsB,GAAG,YAAY,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IACjE,OAAO,GAAG,iBAAiB,IAAI,sBAAsB,EAAE,CAAC;AAC1D,CAAC;AASD,SAAS,gBAAgB,CAAC,KAAc,EAAE,OAAe;IACvD,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACvE,IAAI,iCAAiC,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QACpD,MAAM,IAAI,oCAAiB,CAAC,aAAa,OAAO,6CAA6C,EAAE;YAC7F,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS;SAClD,CAAC,CAAC;IACL,CAAC;IAED,MAAM,KAAK,CAAC;AACd,CAAC;AAED,MAAa,mBAAoB,SAAQ,iCAAc;IAKrD,YAAmB,IAA6B;QAC9C,KAAK,CAAC,IAAI,CAAC,CAAC;QALG,oBAAe,GAAG,IAAA,oCAAY,EAAC,IAAI,CAAC,CAAC;QAMpD,IAAI,CAAC,KAAK,GAAG,IAAI,uCAAkB,CAAC,IAAI,CAAC,gBAAgB,IAAI,IAAI,CAAC,OAAO,CAAC,CAAC;QAC3E,IAAI,CAAC,gBAAgB,GAAG,IAAI,CAAC,gBAAgB,CAAC;IAChD,CAAC;IAEe,KAAK,CAAC,MAAM,CAAC,KAAsB;QACjD,MAAM,aAAa,GAAG,KAAK,CAAC,QAAQ,EAAE,aAAmC,CAAC;QAE1E,IAAI,CAAC,aAAa,EAAE,CAAC;YACnB,OAAO,IAAI,CAAC,uBAAuB,CAAC,KAAK,CAAC,CAAC;QAC7C,CAAC;QAED,iCAAiC;QACjC,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;QACjD,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;QACtD,CAAC;QAED,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,kCAAkC,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC;QAE7E,gBAAgB;QAChB,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC;QAC3B,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;QAClE,CAAC;QAED,kBAAkB;QAClB,MAAM,WAAW,GAAG,GAAG,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,iBAAiB,CAAC;QACzE,MAAM,UAAU,GAAG,MAAM,KAAK,CAAC,WAAW,EAAE;YAC1C,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,kBAAkB;gBAClC,eAAe,EAAE,UAAU,OAAO,CAAC,YAAY,EAAE;aAClD;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,CAAC;SAClC,CAAC,CAAC;QAEH,IAAI,CAAC,UAAU,CAAC,EAAE,EAAE,CAAC;YACnB,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,IAAI,EAAE,CAAC;YACxC,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,uBAAuB,UAAU,CAAC,MAAM,IAAI,OAAO,EAAE,CAAC,CAAC;YAClF,MAAM,IAAI,KAAK,CAAC,+BAA+B,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC;QACtE,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,IAAI,EAAyB,CAAC;QAEhE,uCAAuC;QACvC,MAAM,WAAW,GAAG,OAAO,CAAC,QAAQ;YAClC,CAAC,CAAC,WAAW,OAAO,CAAC,QAAQ,EAAE;YAC/B,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QACrC,MAAM,mBAAmB,GAAG,GAAG,WAAW,IAAI,OAAO,GAAG,CAAC;QACzD,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,IAAI,mBAAmB,CAAC;QAEtD,sCAAsC;QACtC,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,IAAI,GAAG,IAAI,CAAC,OAAO,GAAG,OAAO,kBAAkB,CAAC;QAEzE,oCAAoC;QACpC,8DAA8D;QAC9D,kDAAkD;QAClD,MAAM,SAAS,GAAG,IAAI,CAAC,mBAAmB,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QAC7D,MAAM,WAAW,GAAG;YAClB,GAAG,KAAK,CAAC,QAAQ;YACjB,IAAI,EAAE,SAAS;YACf,KAAK;YACL,UAAU,EAAE,IAAI,CAAC,OAAO;SACzB,CAAC;QAEF,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;QAC5F,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,SAAS,EAAE,WAAW,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;QAEzF,IAAI,CAAC,KAAK,CAAC,KAAK,IAAI,IAAI,CAAC,gBAAgB,EAAE,CAAC;YAC1C,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,gBAAgB,CAAC,aAAa,CAAC,OAAO,EAAE;oBACjD,UAAU,EAAE,mBAAmB;oBAC/B,WAAW,EAAE,OAAO;iBACrB,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,2CAA2C,OAAO,KAAM,KAAe,CAAC,OAAO,EAAE,CAAC,CAAC;YAC/G,CAAC;QACH,CAAC;QAED,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,mBAAmB,OAAO,UAAU,OAAO,CAAC,KAAK,aAAa,MAAM,EAAE,CAAC,CAAC;QAElG,OAAO;YACL,MAAM;YACN,KAAK;YACL,KAAK;YACL,SAAS;SACV,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,uBAAuB,CAAC,KAAsB;QAC1D,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAChC,MAAM,cAAc,GAAG,IAAI,CAAC,sBAAsB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC/D,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,IAAI,WAAW,CAAC,cAAc,CAAC,IAAI,EAAE,IAAI,CAAC,iBAAiB,CAAC,CAAC;QACtF,MAAM,aAAa,GAAG,KAAK,CAAC,QAA+C,CAAC;QAC5E,MAAM,UAAU,GAAG,OAAO,aAAa,EAAE,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,aAAa,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC;QAC3G,MAAM,WAAW,GAAG;YAClB,GAAG,aAAa;YAChB,IAAI,EAAE,cAAc;YACpB,KAAK;YACL,UAAU;SACX,CAAC;QAEF,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAChC,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;QAC5F,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,YAAY,CAAC;QAE/C,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC9B,IAAI,KAAa,CAAC;QAClB,IAAI,CAAC;YACH,KAAK,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,SAAS,EAAE,WAAW,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;QACrF,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC;gBACf,gBAAgB,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YACtC,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;QACD,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,UAAU,CAAC;QAC3C,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,YAAY,CAAC;QAE/C,IAAI,CAAC,eAAe,CAAC,IAAI,CACvB,iDAAiD,KAAK,CAAC,SAAS,QAAQ,cAAc,CAAC,IAAI,gBAAgB,YAAY,gBAAgB,UAAU,YAAY,YAAY,IAAI,CAC9K,CAAC;QAEF,OAAO;YACL,MAAM,EAAE,cAAc,CAAC,IAAI;YAC3B,KAAK;YACL,KAAK;YACL,SAAS;SACV,CAAC;IACJ,CAAC;CACF;AAzID,kDAyIC","sourcesContent":["/**\n * ProvisionPodCreator\n *\n * 等位替换 CSS 的 BasePodCreator。\n *\n * 检查 settings 里有没有 provisionCode：\n * - 有 → 解码 JWT，回调远端 SP 的 /provision/pods 创建 Pod\n * - 没有 → 委托给原始 BasePodCreator（标准本地创建）\n */\n\nimport { getLoggerFor } from 'global-logger-factory';\nimport {\n  BasePodCreator,\n  type PodCreatorInput,\n  type PodCreatorOutput,\n  type BasePodCreatorArgs,\n  ConflictHttpError,\n} from '@solid/community-server';\nimport { ProvisionCodeCodec } from './ProvisionCodeCodec';\nimport type { WebIdProfileRepository } from '../identity/drizzle/WebIdProfileRepository';\n\nfunction joinUrlPath(baseUrl: string, relativePath: string): string {\n  const normalizedBaseUrl = baseUrl.replace(/\\/+$/u, '');\n  const normalizedRelativePath = relativePath.replace(/^\\/+/u, '');\n  return `${normalizedBaseUrl}/${normalizedRelativePath}`;\n}\n\nexport interface ProvisionPodCreatorArgs extends BasePodCreatorArgs {\n  /** 与 ProvisionHandler 使用相同的 baseUrl 派生签名密钥 */\n  provisionBaseUrl?: string;\n  /** Optional Cloud profile repository used to reconcile solid:storage after remote provisioning */\n  webIdProfileRepo?: WebIdProfileRepository;\n}\n\nfunction remapPodConflict(error: unknown, podName: string): never {\n  const message = error instanceof Error ? error.message : String(error);\n  if (/There already is a resource at/i.test(message)) {\n    throw new ConflictHttpError(`Pod name \"${podName}\" is already taken for this storage target.`, {\n      cause: error instanceof Error ? error : undefined,\n    });\n  }\n\n  throw error;\n}\n\nexport class ProvisionPodCreator extends BasePodCreator {\n  private readonly provisionLogger = getLoggerFor(this);\n  private readonly codec: ProvisionCodeCodec;\n  private readonly webIdProfileRepo?: WebIdProfileRepository;\n\n  public constructor(args: ProvisionPodCreatorArgs) {\n    super(args);\n    this.codec = new ProvisionCodeCodec(args.provisionBaseUrl ?? args.baseUrl);\n    this.webIdProfileRepo = args.webIdProfileRepo;\n  }\n\n  public override async handle(input: PodCreatorInput): Promise<PodCreatorOutput> {\n    const provisionCode = input.settings?.provisionCode as string | undefined;\n\n    if (!provisionCode) {\n      return this.handleStandardPodCreate(input);\n    }\n\n    // SP 模式：解码 provisionCode，回调远端 SP\n    const payload = this.codec.decode(provisionCode);\n    if (!payload) {\n      throw new Error('Invalid or expired provisionCode');\n    }\n\n    this.provisionLogger.info(`Provisioning pod on remote SP: ${payload.spUrl}`);\n\n    // 1. 确定 podName\n    const podName = input.name;\n    if (!podName) {\n      throw new Error('Pod name is required for remote provisioning');\n    }\n\n    // 2. 回调 SP 创建 Pod\n    const callbackUrl = `${payload.spUrl.replace(/\\/$/, '')}/provision/pods`;\n    const spResponse = await fetch(callbackUrl, {\n      method: 'POST',\n      headers: {\n        'Content-Type': 'application/json',\n        'Authorization': `Bearer ${payload.serviceToken}`,\n      },\n      body: JSON.stringify({ podName }),\n    });\n\n    if (!spResponse.ok) {\n      const errBody = await spResponse.text();\n      this.provisionLogger.error(`SP callback failed: ${spResponse.status} ${errBody}`);\n      throw new Error(`Failed to create pod on SP: ${spResponse.status}`);\n    }\n\n    const spResult = await spResponse.json() as { podUrl?: string };\n\n    // storage URL 优先用 Cloud 分配的子域名，回调用实际地址\n    const storageBase = payload.spDomain\n      ? `https://${payload.spDomain}`\n      : payload.spUrl.replace(/\\/$/, '');\n    const canonicalStorageUrl = `${storageBase}/${podName}/`;\n    const podUrl = spResult.podUrl || canonicalStorageUrl;\n\n    // 3. 生成 WebID（指向 Cloud，storage 指向 SP）\n    const webId = input.webId ?? `${this.baseUrl}${podName}/profile/card#me`;\n\n    // 4. 链接 WebID 到账户 + 在本地 PodStore 记录\n    // base.path 必须在 Cloud 的 identifier space 内（CSS PodStore 会检查），\n    // 所以用 Cloud 本地路径；真实的 SP storage URL 通过 podUrl 返回。\n    const localBase = this.identifierGenerator.generate(podName);\n    const podSettings = {\n      ...input.settings,\n      base: localBase,\n      webId,\n      oidcIssuer: this.baseUrl,\n    };\n\n    const webIdLink = await this.handleWebId(!input.webId, webId, input.accountId, podSettings);\n    const podId = await this.createPod(input.accountId, podSettings, !input.name, webIdLink);\n\n    if (!input.webId && this.webIdProfileRepo) {\n      try {\n        await this.webIdProfileRepo.updateStorage(podName, {\n          storageUrl: canonicalStorageUrl,\n          storageMode: 'local',\n        });\n      } catch (error) {\n        this.provisionLogger.warn(`Failed to reconcile storage pointer for ${podName}: ${(error as Error).message}`);\n      }\n    }\n\n    this.provisionLogger.info(`Provisioned pod ${podName} on SP ${payload.spUrl}, podUrl: ${podUrl}`);\n\n    return {\n      podUrl,\n      webId,\n      podId,\n      webIdLink,\n    };\n  }\n\n  private async handleStandardPodCreate(input: PodCreatorInput): Promise<PodCreatorOutput> {\n    const totalStarted = Date.now();\n    const baseIdentifier = this.generateBaseIdentifier(input.name);\n    const webId = input.webId ?? joinUrlPath(baseIdentifier.path, this.relativeWebIdPath);\n    const inputSettings = input.settings as Record<string, unknown> | undefined;\n    const oidcIssuer = typeof inputSettings?.oidcIssuer === 'string' ? inputSettings.oidcIssuer : this.baseUrl;\n    const podSettings = {\n      ...inputSettings,\n      base: baseIdentifier,\n      webId,\n      oidcIssuer,\n    };\n\n    const webIdStarted = Date.now();\n    const webIdLink = await this.handleWebId(!input.webId, webId, input.accountId, podSettings);\n    const webIdElapsed = Date.now() - webIdStarted;\n\n    const podStarted = Date.now();\n    let podId: string;\n    try {\n      podId = await this.createPod(input.accountId, podSettings, !input.name, webIdLink);\n    } catch (error) {\n      if (input.name) {\n        remapPodConflict(error, input.name);\n      }\n      throw error;\n    }\n    const podElapsed = Date.now() - podStarted;\n    const totalElapsed = Date.now() - totalStarted;\n\n    this.provisionLogger.info(\n      `[timing] ProvisionPodCreator.standard account=${input.accountId} pod=${baseIdentifier.path} handleWebId=${webIdElapsed}ms createPod=${podElapsed}ms total=${totalElapsed}ms`,\n    );\n\n    return {\n      podUrl: baseIdentifier.path,\n      webId,\n      podId,\n      webIdLink,\n    };\n  }\n}\n"]}