@undefineds.co/xpod 0.3.18 → 0.3.23

package/dist/storage/sparql/CompatibilitySparqlEngineImpl.js

@@ -0,0 +1,112 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.QuintstoreSparqlEngine = exports.QuadstoreSparqlEngine = void 0;
+const ComunicaQuintEngine_1 = require("./ComunicaQuintEngine");
+const QuintEngine_1 = require("./QuintEngine");
+/**
+ * @deprecated Compatibility wrapper preserved for older call sites.
+ * Mainline xpod uses SolidRdfEngine for server-owned Pod queries.
+ */
+class QuadstoreSparqlEngine {
+    constructor(endpoint) {
+        const store = new QuintEngine_1.QuintEngine({ endpoint }).getStore();
+        this.delegate = new QuintstoreSparqlEngine(store);
+    }
+    async queryBindings(query, basePath) {
+        return this.delegate.queryBindings(query, basePath);
+    }
+    async queryQuads(query, basePath) {
+        return this.delegate.queryQuads(query, basePath);
+    }
+    async queryBoolean(query, basePath) {
+        return this.delegate.queryBoolean(query, basePath);
+    }
+    async queryVoid(query, basePath) {
+        await this.delegate.queryVoid(query, basePath);
+    }
+    async constructGraph(graph, basePath) {
+        return this.delegate.constructGraph(graph, basePath);
+    }
+    async listGraphs(basePath) {
+        return this.delegate.listGraphs(basePath);
+    }
+    async close() {
+        await this.delegate.close();
+    }
+}
+exports.QuadstoreSparqlEngine = QuadstoreSparqlEngine;
+/**
+ * Comunica-backed compatibility engine.
+ */
+class QuintstoreSparqlEngine {
+    constructor(store) {
+        this.store = store;
+        this.engine = new ComunicaQuintEngine_1.ComunicaQuintEngine(this.store);
+        this.ready = this.store.open();
+    }
+    async queryBindings(query, basePath) {
+        await this.ready;
+        return this.engine.queryBindings(query, {
+            baseIRI: basePath,
+            filters: { graph: { $startsWith: basePath } },
+        });
+    }
+    async queryQuads(query, basePath) {
+        await this.ready;
+        return this.engine.queryQuads(query, {
+            baseIRI: basePath,
+            filters: { graph: { $startsWith: basePath } },
+        });
+    }
+    async queryBoolean(query, basePath) {
+        await this.ready;
+        return this.engine.queryBoolean(query, {
+            baseIRI: basePath,
+            filters: { graph: { $startsWith: basePath } },
+        });
+    }
+    async queryVoid(query, basePath) {
+        await this.ready;
+        return this.engine.queryVoid(query, {
+            baseIRI: basePath,
+            filters: { graph: { $startsWith: basePath } },
+        });
+    }
+    async constructGraph(graph, basePath) {
+        await this.ready;
+        const constructQuery = `CONSTRUCT { ?s ?p ?o } WHERE { GRAPH <${graph}> { ?s ?p ?o } }`;
+        return this.engine.queryQuads(constructQuery, {
+            baseIRI: basePath,
+            filters: { graph: { $startsWith: basePath } },
+        });
+    }
+    async listGraphs(basePath) {
+        await this.ready;
+        const graphs = new Set();
+        const query = 'SELECT DISTINCT ?g WHERE { GRAPH ?g { ?s ?p ?o } }';
+        const stream = await this.engine.queryBindings(query, {
+            baseIRI: basePath,
+            filters: { graph: { $startsWith: basePath } },
+        });
+        try {
+            for await (const binding of stream) {
+                const value = binding.get('g');
+                if (value?.termType === 'NamedNode') {
+                    graphs.add(value.value);
+                }
+            }
+        }
+        finally {
+            const close = stream.close;
+            if (typeof close === 'function') {
+                close();
+            }
+        }
+        return graphs;
+    }
+    async close() {
+        await this.store.close();
+    }
+}
+exports.QuintstoreSparqlEngine = QuintstoreSparqlEngine;
+//# sourceMappingURL=CompatibilitySparqlEngineImpl.js.map

package/dist/storage/sparql/CompatibilitySparqlEngineImpl.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"CompatibilitySparqlEngineImpl.js","sourceRoot":"","sources":["../../../src/storage/sparql/CompatibilitySparqlEngineImpl.ts"],"names":[],"mappings":";;;AAEA,+DAA4D;AAC5D,+CAA4C;AAI5C;;;GAGG;AACH,MAAa,qBAAqB;IAGhC,YAAmB,QAAgB;QACjC,MAAM,KAAK,GAAG,IAAI,yBAAW,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC;QACvD,IAAI,CAAC,QAAQ,GAAG,IAAI,sBAAsB,CAAC,KAAK,CAAC,CAAC;IACpD,CAAC;IAEM,KAAK,CAAC,aAAa,CAAC,KAAa,EAAE,QAAgB;QACxD,OAAO,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;IACtD,CAAC;IAEM,KAAK,CAAC,UAAU,CAAC,KAAa,EAAE,QAAgB;QACrD,OAAO,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;IACnD,CAAC;IAEM,KAAK,CAAC,YAAY,CAAC,KAAa,EAAE,QAAgB;QACvD,OAAO,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;IACrD,CAAC;IAEM,KAAK,CAAC,SAAS,CAAC,KAAa,EAAE,QAAgB;QACpD,MAAM,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;IACjD,CAAC;IAEM,KAAK,CAAC,cAAc,CAAC,KAAa,EAAE,QAAgB;QACzD,OAAO,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;IACvD,CAAC;IAEM,KAAK,CAAC,UAAU,CAAC,QAAgB;QACtC,OAAO,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;IAC5C,CAAC;IAEM,KAAK,CAAC,KAAK;QAChB,MAAM,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;IAC9B,CAAC;CACF;AAnCD,sDAmCC;AAED;;GAEG;AACH,MAAa,sBAAsB;IAKjC,YAAmB,KAAiB;QAClC,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QACnB,IAAI,CAAC,MAAM,GAAG,IAAI,yCAAmB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAClD,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;IACjC,CAAC;IAEM,KAAK,CAAC,aAAa,CAAC,KAAa,EAAE,QAAgB;QACxD,MAAM,IAAI,CAAC,KAAK,CAAC;QACjB,OAAO,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,EAAE;YACtC,OAAO,EAAE,QAAQ;YACjB,OAAO,EAAE,EAAE,KAAK,EAAE,EAAE,WAAW,EAAE,QAAQ,EAAE,EAAE;SAC9C,CAAC,CAAC;IACL,CAAC;IAEM,KAAK,CAAC,UAAU,CAAC,KAAa,EAAE,QAAgB;QACrD,MAAM,IAAI,CAAC,KAAK,CAAC;QACjB,OAAO,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,KAAK,EAAE;YACnC,OAAO,EAAE,QAAQ;YACjB,OAAO,EAAE,EAAE,KAAK,EAAE,EAAE,WAAW,EAAE,QAAQ,EAAE,EAAE;SAC9C,CAAC,CAAC;IACL,CAAC;IAEM,KAAK,CAAC,YAAY,CAAC,KAAa,EAAE,QAAgB;QACvD,MAAM,IAAI,CAAC,KAAK,CAAC;QACjB,OAAO,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,KAAK,EAAE;YACrC,OAAO,EAAE,QAAQ;YACjB,OAAO,EAAE,EAAE,KAAK,EAAE,EAAE,WAAW,EAAE,QAAQ,EAAE,EAAE;SAC9C,CAAC,CAAC;IACL,CAAC;IAEM,KAAK,CAAC,SAAS,CAAC,KAAa,EAAE,QAAgB;QACpD,MAAM,IAAI,CAAC,KAAK,CAAC;QACjB,OAAO,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE;YAClC,OAAO,EAAE,QAAQ;YACjB,OAAO,EAAE,EAAE,KAAK,EAAE,EAAE,WAAW,EAAE,QAAQ,EAAE,EAAE;SAC9C,CAAC,CAAC;IACL,CAAC;IAEM,KAAK,CAAC,cAAc,CAAC,KAAa,EAAE,QAAgB;QACzD,MAAM,IAAI,CAAC,KAAK,CAAC;QACjB,MAAM,cAAc,GAAG,yCAAyC,KAAK,kBAAkB,CAAC;QACxF,OAAO,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,cAAc,EAAE;YAC5C,OAAO,EAAE,QAAQ;YACjB,OAAO,EAAE,EAAE,KAAK,EAAE,EAAE,WAAW,EAAE,QAAQ,EAAE,EAAE;SAC9C,CAAmC,CAAC;IACvC,CAAC;IAEM,KAAK,CAAC,UAAU,CAAC,QAAgB;QACtC,MAAM,IAAI,CAAC,KAAK,CAAC;QACjB,MAAM,MAAM,GAAG,IAAI,GAAG,EAAU,CAAC;QACjC,MAAM,KAAK,GAAG,oDAAoD,CAAC;QACnE,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,EAAE;YACpD,OAAO,EAAE,QAAQ;YACjB,OAAO,EAAE,EAAE,KAAK,EAAE,EAAE,WAAW,EAAE,QAAQ,EAAE,EAAE;SAC9C,CAAC,CAAC;QAEH,IAAI,CAAC;YACH,IAAI,KAAK,EAAE,MAAM,OAAO,IAAI,MAAgG,EAAE,CAAC;gBAC7H,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;gBAC/B,IAAI,KAAK,EAAE,QAAQ,KAAK,WAAW,EAAE,CAAC;oBACpC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;gBAC1B,CAAC;YACH,CAAC;QACH,CAAC;gBAAS,CAAC;YACT,MAAM,KAAK,GAAI,MAA4C,CAAC,KAAK,CAAC;YAClE,IAAI,OAAO,KAAK,KAAK,UAAU,EAAE,CAAC;gBAChC,KAAK,EAAE,CAAC;YACV,CAAC;QACH,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;IAEM,KAAK,CAAC,KAAK;QAChB,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;IAC3B,CAAC;CACF;AAjFD,wDAiFC","sourcesContent":["import type { Quad, Variable } from '@rdfjs/types';\nimport type { AsyncIterator } from 'asynciterator';\nimport { ComunicaQuintEngine } from './ComunicaQuintEngine';\nimport { QuintEngine } from './QuintEngine';\nimport type { SparqlEngine } from './SubgraphQueryEngine';\nimport type { QuintStore } from '../quint/types';\n\n/**\n * @deprecated Compatibility wrapper preserved for older call sites.\n * Mainline xpod uses SolidRdfEngine for server-owned Pod queries.\n */\nexport class QuadstoreSparqlEngine implements SparqlEngine {\n  private readonly delegate: QuintstoreSparqlEngine;\n\n  public constructor(endpoint: string) {\n    const store = new QuintEngine({ endpoint }).getStore();\n    this.delegate = new QuintstoreSparqlEngine(store);\n  }\n\n  public async queryBindings(query: string, basePath: string): Promise<any> {\n    return this.delegate.queryBindings(query, basePath);\n  }\n\n  public async queryQuads(query: string, basePath: string): Promise<any> {\n    return this.delegate.queryQuads(query, basePath);\n  }\n\n  public async queryBoolean(query: string, basePath: string): Promise<boolean> {\n    return this.delegate.queryBoolean(query, basePath);\n  }\n\n  public async queryVoid(query: string, basePath: string): Promise<void> {\n    await this.delegate.queryVoid(query, basePath);\n  }\n\n  public async constructGraph(graph: string, basePath: string): Promise<AsyncIterator<Quad>> {\n    return this.delegate.constructGraph(graph, basePath);\n  }\n\n  public async listGraphs(basePath: string): Promise<Set<string>> {\n    return this.delegate.listGraphs(basePath);\n  }\n\n  public async close(): Promise<void> {\n    await this.delegate.close();\n  }\n}\n\n/**\n * Comunica-backed compatibility engine.\n */\nexport class QuintstoreSparqlEngine implements SparqlEngine {\n  private readonly store: QuintStore;\n  private readonly engine: ComunicaQuintEngine;\n  private readonly ready: Promise<void>;\n\n  public constructor(store: QuintStore) {\n    this.store = store;\n    this.engine = new ComunicaQuintEngine(this.store);\n    this.ready = this.store.open();\n  }\n\n  public async queryBindings(query: string, basePath: string): Promise<any> {\n    await this.ready;\n    return this.engine.queryBindings(query, {\n      baseIRI: basePath,\n      filters: { graph: { $startsWith: basePath } },\n    });\n  }\n\n  public async queryQuads(query: string, basePath: string): Promise<any> {\n    await this.ready;\n    return this.engine.queryQuads(query, {\n      baseIRI: basePath,\n      filters: { graph: { $startsWith: basePath } },\n    });\n  }\n\n  public async queryBoolean(query: string, basePath: string): Promise<boolean> {\n    await this.ready;\n    return this.engine.queryBoolean(query, {\n      baseIRI: basePath,\n      filters: { graph: { $startsWith: basePath } },\n    });\n  }\n\n  public async queryVoid(query: string, basePath: string): Promise<void> {\n    await this.ready;\n    return this.engine.queryVoid(query, {\n      baseIRI: basePath,\n      filters: { graph: { $startsWith: basePath } },\n    });\n  }\n\n  public async constructGraph(graph: string, basePath: string): Promise<AsyncIterator<Quad>> {\n    await this.ready;\n    const constructQuery = `CONSTRUCT { ?s ?p ?o } WHERE { GRAPH <${graph}> { ?s ?p ?o } }`;\n    return this.engine.queryQuads(constructQuery, {\n      baseIRI: basePath,\n      filters: { graph: { $startsWith: basePath } },\n    }) as unknown as AsyncIterator<Quad>;\n  }\n\n  public async listGraphs(basePath: string): Promise<Set<string>> {\n    await this.ready;\n    const graphs = new Set<string>();\n    const query = 'SELECT DISTINCT ?g WHERE { GRAPH ?g { ?s ?p ?o } }';\n    const stream = await this.engine.queryBindings(query, {\n      baseIRI: basePath,\n      filters: { graph: { $startsWith: basePath } },\n    });\n\n    try {\n      for await (const binding of stream as unknown as AsyncIterator<Map<string | Variable, { termType?: string; value: string }>>) {\n        const value = binding.get('g');\n        if (value?.termType === 'NamedNode') {\n          graphs.add(value.value);\n        }\n      }\n    } finally {\n      const close = (stream as unknown as { close?: () => void }).close;\n      if (typeof close === 'function') {\n        close();\n      }\n    }\n\n    return graphs;\n  }\n\n  public async close(): Promise<void> {\n    await this.store.close();\n  }\n}\n"]}

package/dist/storage/sparql/SubgraphQueryEngine.d.ts

@@ -1,6 +1,5 @@
 import type { Quad } from '@rdfjs/types';
 import type { AsyncIterator } from 'asynciterator';
-import type { QuintStore } from '../quint/types';
 /**
  * SPARQL Engine interface - common abstraction for SPARQL query engines
  */
@@ -13,40 +12,6 @@ export interface SparqlEngine {
     listGraphs(basePath: string): Promise<Set<string>>;
     close(): Promise<void>;
 }
-/**
- * @deprecated Compatibility wrapper preserved for older call sites.
- * Mainline xpod now executes subgraph queries through QuintStore.
- */
-export declare class QuadstoreSparqlEngine implements SparqlEngine {
-    private readonly delegate;
-    constructor(endpoint: string);
-    queryBindings(query: string, basePath: string): Promise<any>;
-    queryQuads(query: string, basePath: string): Promise<any>;
-    queryBoolean(query: string, basePath: string): Promise<boolean>;
-    queryVoid(query: string, basePath: string): Promise<void>;
-    constructGraph(graph: string, basePath: string): Promise<AsyncIterator<Quad>>;
-    listGraphs(basePath: string): Promise<Set<string>>;
-    close(): Promise<void>;
-}
-/**
- * QuintStore-based SPARQL engine implementation
- *
- * Uses security filters to enforce access boundaries,
- * which are pushed down to the storage layer.
- */
-export declare class QuintstoreSparqlEngine implements SparqlEngine {
-    private readonly store;
-    private readonly engine;
-    private readonly ready;
-    constructor(store: QuintStore);
-    queryBindings(query: string, basePath: string): Promise<any>;
-    queryQuads(query: string, basePath: string): Promise<any>;
-    queryBoolean(query: string, basePath: string): Promise<boolean>;
-    queryVoid(query: string, basePath: string): Promise<void>;
-    constructGraph(graph: string, basePath: string): Promise<AsyncIterator<Quad>>;
-    listGraphs(basePath: string): Promise<Set<string>>;
-    close(): Promise<void>;
-}
 /**
  * SubgraphQueryEngine - SPARQL engine with subgraph (tenant) isolation
  *
@@ -57,7 +22,7 @@ export declare class SubgraphQueryEngine {
     private readonly impl;
     /**
      * Create a SubgraphQueryEngine
-     * @param engine - A SparqlEngine implementation (QuadstoreSparqlEngine or QuintstoreSparqlEngine)
+     * @param engine - A SparqlEngine implementation
      */
     constructor(engine: SparqlEngine);
     queryBindings(query: string, basePath: string): Promise<any>;

package/dist/storage/sparql/SubgraphQueryEngine.js

@@ -1,120 +1,7 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.SubgraphQueryEngine = exports.QuintstoreSparqlEngine = exports.QuadstoreSparqlEngine = void 0;
+exports.SubgraphQueryEngine = void 0;
 const global_logger_factory_1 = require("global-logger-factory");
-const ComunicaQuintEngine_1 = require("./ComunicaQuintEngine");
-const QuintEngine_1 = require("./QuintEngine");
-/**
- * @deprecated Compatibility wrapper preserved for older call sites.
- * Mainline xpod now executes subgraph queries through QuintStore.
- */
-class QuadstoreSparqlEngine {
-    constructor(endpoint) {
-        const store = new QuintEngine_1.QuintEngine({ endpoint }).getStore();
-        this.delegate = new QuintstoreSparqlEngine(store);
-    }
-    async queryBindings(query, basePath) {
-        return this.delegate.queryBindings(query, basePath);
-    }
-    async queryQuads(query, basePath) {
-        return this.delegate.queryQuads(query, basePath);
-    }
-    async queryBoolean(query, basePath) {
-        return this.delegate.queryBoolean(query, basePath);
-    }
-    async queryVoid(query, basePath) {
-        await this.delegate.queryVoid(query, basePath);
-    }
-    async constructGraph(graph, basePath) {
-        return this.delegate.constructGraph(graph, basePath);
-    }
-    async listGraphs(basePath) {
-        return this.delegate.listGraphs(basePath);
-    }
-    async close() {
-        await this.delegate.close();
-    }
-}
-exports.QuadstoreSparqlEngine = QuadstoreSparqlEngine;
-/**
- * QuintStore-based SPARQL engine implementation
- *
- * Uses security filters to enforce access boundaries,
- * which are pushed down to the storage layer.
- */
-class QuintstoreSparqlEngine {
-    constructor(store) {
-        this.store = store;
-        this.engine = new ComunicaQuintEngine_1.ComunicaQuintEngine(this.store);
-        this.ready = this.store.open();
-    }
-    async queryBindings(query, basePath) {
-        await this.ready;
-        return this.engine.queryBindings(query, {
-            baseIRI: basePath,
-            filters: { graph: { $startsWith: basePath } },
-        });
-    }
-    async queryQuads(query, basePath) {
-        await this.ready;
-        return this.engine.queryQuads(query, {
-            baseIRI: basePath,
-            filters: { graph: { $startsWith: basePath } },
-        });
-    }
-    async queryBoolean(query, basePath) {
-        await this.ready;
-        return this.engine.queryBoolean(query, {
-            baseIRI: basePath,
-            filters: { graph: { $startsWith: basePath } },
-        });
-    }
-    async queryVoid(query, basePath) {
-        await this.ready;
-        // UPDATE queries have their own graph validation in SubgraphSparqlHttpHandler
-        return this.engine.queryVoid(query, {
-            baseIRI: basePath,
-            filters: { graph: { $startsWith: basePath } },
-        });
-    }
-    async constructGraph(graph, basePath) {
-        await this.ready;
-        // CONSTRUCT with explicit graph IRI - security filter still applies
-        const constructQuery = `CONSTRUCT { ?s ?p ?o } WHERE { GRAPH <${graph}> { ?s ?p ?o } }`;
-        return this.engine.queryQuads(constructQuery, {
-            baseIRI: basePath,
-            filters: { graph: { $startsWith: basePath } },
-        });
-    }
-    async listGraphs(basePath) {
-        await this.ready;
-        const graphs = new Set();
-        const query = `SELECT DISTINCT ?g WHERE { GRAPH ?g { ?s ?p ?o } }`;
-        const stream = await this.engine.queryBindings(query, {
-            baseIRI: basePath,
-            filters: { graph: { $startsWith: basePath } },
-        });
-        try {
-            for await (const binding of stream) {
-                const value = binding.get('g');
-                if (value && typeof value === 'object' && 'termType' in value && value.termType === 'NamedNode') {
-                    graphs.add(value.value);
-                }
-            }
-        }
-        finally {
-            const close = stream.close;
-            if (typeof close === 'function') {
-                close();
-            }
-        }
-        return graphs;
-    }
-    async close() {
-        await this.store.close();
-    }
-}
-exports.QuintstoreSparqlEngine = QuintstoreSparqlEngine;
 /**
  * SubgraphQueryEngine - SPARQL engine with subgraph (tenant) isolation
  *
@@ -123,7 +10,7 @@ exports.QuintstoreSparqlEngine = QuintstoreSparqlEngine;
 class SubgraphQueryEngine {
     /**
      * Create a SubgraphQueryEngine
-     * @param engine - A SparqlEngine implementation (QuadstoreSparqlEngine or QuintstoreSparqlEngine)
+     * @param engine - A SparqlEngine implementation
      */
     constructor(engine) {
         this.logger = (0, global_logger_factory_1.getLoggerFor)(this);

package/dist/storage/sparql/SubgraphQueryEngine.js.map

@@ -1 +1 @@
-{"version":3,"file":"SubgraphQueryEngine.js","sourceRoot":"","sources":["../../../src/storage/sparql/SubgraphQueryEngine.ts"],"names":[],"mappings":";;;AAGA,iEAAqD;AACrD,+DAA4D;AAC5D,+CAA4C;AAgB5C;;;GAGG;AACH,MAAa,qBAAqB;IAGhC,YAAmB,QAAgB;QACjC,MAAM,KAAK,GAAG,IAAI,yBAAW,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC;QACvD,IAAI,CAAC,QAAQ,GAAG,IAAI,sBAAsB,CAAC,KAAK,CAAC,CAAC;IACpD,CAAC;IAEM,KAAK,CAAC,aAAa,CAAC,KAAa,EAAE,QAAgB;QACxD,OAAO,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;IACtD,CAAC;IAEM,KAAK,CAAC,UAAU,CAAC,KAAa,EAAE,QAAgB;QACrD,OAAO,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;IACnD,CAAC;IAEM,KAAK,CAAC,YAAY,CAAC,KAAa,EAAE,QAAgB;QACvD,OAAO,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;IACrD,CAAC;IAEM,KAAK,CAAC,SAAS,CAAC,KAAa,EAAE,QAAgB;QACpD,MAAM,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;IACjD,CAAC;IAEM,KAAK,CAAC,cAAc,CAAC,KAAa,EAAE,QAAgB;QACzD,OAAO,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;IACvD,CAAC;IAEM,KAAK,CAAC,UAAU,CAAC,QAAgB;QACtC,OAAO,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;IAC5C,CAAC;IAEM,KAAK,CAAC,KAAK;QAChB,MAAM,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;IAC9B,CAAC;CACF;AAnCD,sDAmCC;AAED;;;;;GAKG;AACH,MAAa,sBAAsB;IAKjC,YAAmB,KAAiB;QAClC,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QACnB,IAAI,CAAC,MAAM,GAAG,IAAI,yCAAmB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAClD,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;IACjC,CAAC;IAEM,KAAK,CAAC,aAAa,CAAC,KAAa,EAAE,QAAgB;QACxD,MAAM,IAAI,CAAC,KAAK,CAAC;QACjB,OAAO,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,EAAE;YACtC,OAAO,EAAE,QAAQ;YACjB,OAAO,EAAE,EAAE,KAAK,EAAE,EAAE,WAAW,EAAE,QAAQ,EAAE,EAAE;SAC9C,CAAC,CAAC;IACL,CAAC;IAEM,KAAK,CAAC,UAAU,CAAC,KAAa,EAAE,QAAgB;QACrD,MAAM,IAAI,CAAC,KAAK,CAAC;QACjB,OAAO,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,KAAK,EAAE;YACnC,OAAO,EAAE,QAAQ;YACjB,OAAO,EAAE,EAAE,KAAK,EAAE,EAAE,WAAW,EAAE,QAAQ,EAAE,EAAE;SAC9C,CAAC,CAAC;IACL,CAAC;IAEM,KAAK,CAAC,YAAY,CAAC,KAAa,EAAE,QAAgB;QACvD,MAAM,IAAI,CAAC,KAAK,CAAC;QACjB,OAAO,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,KAAK,EAAE;YACrC,OAAO,EAAE,QAAQ;YACjB,OAAO,EAAE,EAAE,KAAK,EAAE,EAAE,WAAW,EAAE,QAAQ,EAAE,EAAE;SAC9C,CAAC,CAAC;IACL,CAAC;IAEM,KAAK,CAAC,SAAS,CAAC,KAAa,EAAE,QAAgB;QACpD,MAAM,IAAI,CAAC,KAAK,CAAC;QACjB,8EAA8E;QAC9E,OAAO,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE;YAClC,OAAO,EAAE,QAAQ;YACjB,OAAO,EAAE,EAAE,KAAK,EAAE,EAAE,WAAW,EAAE,QAAQ,EAAE,EAAE;SAC9C,CAAC,CAAC;IACL,CAAC;IAEM,KAAK,CAAC,cAAc,CAAC,KAAa,EAAE,QAAgB;QACzD,MAAM,IAAI,CAAC,KAAK,CAAC;QACjB,oEAAoE;QACpE,MAAM,cAAc,GAAG,yCAAyC,KAAK,kBAAkB,CAAC;QACxF,OAAO,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,cAAc,EAAE;YAC5C,OAAO,EAAE,QAAQ;YACjB,OAAO,EAAE,EAAE,KAAK,EAAE,EAAE,WAAW,EAAE,QAAQ,EAAE,EAAE;SAC9C,CAAmC,CAAC;IACvC,CAAC;IAEM,KAAK,CAAC,UAAU,CAAC,QAAgB;QACtC,MAAM,IAAI,CAAC,KAAK,CAAC;QACjB,MAAM,MAAM,GAAG,IAAI,GAAG,EAAU,CAAC;QAEjC,MAAM,KAAK,GAAG,oDAAoD,CAAC;QAEnE,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,EAAE;YACpD,OAAO,EAAE,QAAQ;YACjB,OAAO,EAAE,EAAE,KAAK,EAAE,EAAE,WAAW,EAAE,QAAQ,EAAE,EAAE;SAC9C,CAAC,CAAC;QAEH,IAAI,CAAC;YACH,IAAI,KAAK,EAAE,MAAM,OAAO,IAAI,MAA4C,EAAE,CAAC;gBACzE,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;gBAC/B,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,UAAU,IAAI,KAAK,IAAI,KAAK,CAAC,QAAQ,KAAK,WAAW,EAAE,CAAC;oBAChG,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;gBAC1B,CAAC;YACH,CAAC;QACH,CAAC;gBAAS,CAAC;YACT,MAAM,KAAK,GAAI,MAA4C,CAAC,KAAK,CAAC;YAClE,IAAI,OAAO,KAAK,KAAK,UAAU,EAAE,CAAC;gBAChC,KAAK,EAAE,CAAC;YACV,CAAC;QACH,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;IAEM,KAAK,CAAC,KAAK;QAChB,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;IAC3B,CAAC;CACF;AArFD,wDAqFC;AAED;;;;GAIG;AACH,MAAa,mBAAmB;IAI9B;;;OAGG;IACH,YAAmB,MAAoB;QAPtB,WAAM,GAAG,IAAA,oCAAY,EAAC,IAAI,CAAC,CAAC;QAQ3C,IAAI,CAAC,IAAI,GAAG,MAAM,CAAC;IACrB,CAAC;IAEM,KAAK,CAAC,aAAa,CAAC,KAAa,EAAE,QAAgB;QACxD,OAAO,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;IAClD,CAAC;IAEM,KAAK,CAAC,UAAU,CAAC,KAAa,EAAE,QAAgB;QACrD,OAAO,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;IAC/C,CAAC;IAEM,KAAK,CAAC,YAAY,CAAC,KAAa,EAAE,QAAgB;QACvD,OAAO,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;IACjD,CAAC;IAEM,KAAK,CAAC,SAAS,CAAC,KAAa,EAAE,QAAgB;QACpD,OAAO,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;IAC9C,CAAC;IAEM,KAAK,CAAC,cAAc,CAAC,KAAa,EAAE,QAAgB;QACzD,OAAO,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;IACnD,CAAC;IAEM,KAAK,CAAC,UAAU,CAAC,QAAgB;QACtC,OAAO,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;IACxC,CAAC;IAEM,KAAK,CAAC,KAAK;QAChB,OAAO,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;IAC3B,CAAC;CACF;AAvCD,kDAuCC","sourcesContent":["import type { Quad } from '@rdfjs/types';\nimport type { Bindings } from '@comunica/types';\nimport type { AsyncIterator } from 'asynciterator';\nimport { getLoggerFor } from 'global-logger-factory';\nimport { ComunicaQuintEngine } from './ComunicaQuintEngine';\nimport { QuintEngine } from './QuintEngine';\nimport type { QuintStore } from '../quint/types';\n\n/**\n * SPARQL Engine interface - common abstraction for SPARQL query engines\n */\nexport interface SparqlEngine {\n  queryBindings(query: string, basePath: string): Promise<any>;\n  queryQuads(query: string, basePath: string): Promise<any>;\n  queryBoolean(query: string, basePath: string): Promise<boolean>;\n  queryVoid(query: string, basePath: string): Promise<void>;\n  constructGraph(graph: string, basePath: string): Promise<AsyncIterator<Quad>>;\n  listGraphs(basePath: string): Promise<Set<string>>;\n  close(): Promise<void>;\n}\n\n/**\n * @deprecated Compatibility wrapper preserved for older call sites.\n * Mainline xpod now executes subgraph queries through QuintStore.\n */\nexport class QuadstoreSparqlEngine implements SparqlEngine {\n  private readonly delegate: QuintstoreSparqlEngine;\n\n  public constructor(endpoint: string) {\n    const store = new QuintEngine({ endpoint }).getStore();\n    this.delegate = new QuintstoreSparqlEngine(store);\n  }\n\n  public async queryBindings(query: string, basePath: string): Promise<any> {\n    return this.delegate.queryBindings(query, basePath);\n  }\n\n  public async queryQuads(query: string, basePath: string): Promise<any> {\n    return this.delegate.queryQuads(query, basePath);\n  }\n\n  public async queryBoolean(query: string, basePath: string): Promise<boolean> {\n    return this.delegate.queryBoolean(query, basePath);\n  }\n\n  public async queryVoid(query: string, basePath: string): Promise<void> {\n    await this.delegate.queryVoid(query, basePath);\n  }\n\n  public async constructGraph(graph: string, basePath: string): Promise<AsyncIterator<Quad>> {\n    return this.delegate.constructGraph(graph, basePath);\n  }\n\n  public async listGraphs(basePath: string): Promise<Set<string>> {\n    return this.delegate.listGraphs(basePath);\n  }\n\n  public async close(): Promise<void> {\n    await this.delegate.close();\n  }\n}\n\n/**\n * QuintStore-based SPARQL engine implementation\n * \n * Uses security filters to enforce access boundaries,\n * which are pushed down to the storage layer.\n */\nexport class QuintstoreSparqlEngine implements SparqlEngine {\n  private readonly store: QuintStore;\n  private readonly engine: ComunicaQuintEngine;\n  private readonly ready: Promise<void>;\n\n  public constructor(store: QuintStore) {\n    this.store = store;\n    this.engine = new ComunicaQuintEngine(this.store);\n    this.ready = this.store.open();\n  }\n\n  public async queryBindings(query: string, basePath: string): Promise<any> {\n    await this.ready;\n    return this.engine.queryBindings(query, {\n      baseIRI: basePath,\n      filters: { graph: { $startsWith: basePath } },\n    });\n  }\n\n  public async queryQuads(query: string, basePath: string): Promise<any> {\n    await this.ready;\n    return this.engine.queryQuads(query, {\n      baseIRI: basePath,\n      filters: { graph: { $startsWith: basePath } },\n    });\n  }\n\n  public async queryBoolean(query: string, basePath: string): Promise<boolean> {\n    await this.ready;\n    return this.engine.queryBoolean(query, {\n      baseIRI: basePath,\n      filters: { graph: { $startsWith: basePath } },\n    });\n  }\n\n  public async queryVoid(query: string, basePath: string): Promise<void> {\n    await this.ready;\n    // UPDATE queries have their own graph validation in SubgraphSparqlHttpHandler\n    return this.engine.queryVoid(query, {\n      baseIRI: basePath,\n      filters: { graph: { $startsWith: basePath } },\n    });\n  }\n\n  public async constructGraph(graph: string, basePath: string): Promise<AsyncIterator<Quad>> {\n    await this.ready;\n    // CONSTRUCT with explicit graph IRI - security filter still applies\n    const constructQuery = `CONSTRUCT { ?s ?p ?o } WHERE { GRAPH <${graph}> { ?s ?p ?o } }`;\n    return this.engine.queryQuads(constructQuery, {\n      baseIRI: basePath,\n      filters: { graph: { $startsWith: basePath } },\n    }) as unknown as AsyncIterator<Quad>;\n  }\n\n  public async listGraphs(basePath: string): Promise<Set<string>> {\n    await this.ready;\n    const graphs = new Set<string>();\n    \n    const query = `SELECT DISTINCT ?g WHERE { GRAPH ?g { ?s ?p ?o } }`;\n    \n    const stream = await this.engine.queryBindings(query, {\n      baseIRI: basePath,\n      filters: { graph: { $startsWith: basePath } },\n    });\n    \n    try {\n      for await (const binding of stream as unknown as AsyncIterator<Bindings>) {\n        const value = binding.get('g');\n        if (value && typeof value === 'object' && 'termType' in value && value.termType === 'NamedNode') {\n          graphs.add(value.value);\n        }\n      }\n    } finally {\n      const close = (stream as unknown as { close?: () => void }).close;\n      if (typeof close === 'function') {\n        close();\n      }\n    }\n    \n    return graphs;\n  }\n\n  public async close(): Promise<void> {\n    await this.store.close();\n  }\n}\n\n/**\n * SubgraphQueryEngine - SPARQL engine with subgraph (tenant) isolation\n * \n * Wraps a SparqlEngine implementation for use in the system.\n */\nexport class SubgraphQueryEngine {\n  private readonly logger = getLoggerFor(this);\n  private readonly impl: SparqlEngine;\n\n  /**\n   * Create a SubgraphQueryEngine\n   * @param engine - A SparqlEngine implementation (QuadstoreSparqlEngine or QuintstoreSparqlEngine)\n   */\n  public constructor(engine: SparqlEngine) {\n    this.impl = engine;\n  }\n\n  public async queryBindings(query: string, basePath: string): Promise<any> {\n    return this.impl.queryBindings(query, basePath);\n  }\n\n  public async queryQuads(query: string, basePath: string): Promise<any> {\n    return this.impl.queryQuads(query, basePath);\n  }\n\n  public async queryBoolean(query: string, basePath: string): Promise<boolean> {\n    return this.impl.queryBoolean(query, basePath);\n  }\n\n  public async queryVoid(query: string, basePath: string): Promise<void> {\n    return this.impl.queryVoid(query, basePath);\n  }\n\n  public async constructGraph(graph: string, basePath: string): Promise<AsyncIterator<Quad>> {\n    return this.impl.constructGraph(graph, basePath);\n  }\n\n  public async listGraphs(basePath: string): Promise<Set<string>> {\n    return this.impl.listGraphs(basePath);\n  }\n\n  public async close(): Promise<void> {\n    return this.impl.close();\n  }\n}\n"]}
+{"version":3,"file":"SubgraphQueryEngine.js","sourceRoot":"","sources":["../../../src/storage/sparql/SubgraphQueryEngine.ts"],"names":[],"mappings":";;;AAEA,iEAAqD;AAerD;;;;GAIG;AACH,MAAa,mBAAmB;IAI9B;;;OAGG;IACH,YAAmB,MAAoB;QAPtB,WAAM,GAAG,IAAA,oCAAY,EAAC,IAAI,CAAC,CAAC;QAQ3C,IAAI,CAAC,IAAI,GAAG,MAAM,CAAC;IACrB,CAAC;IAEM,KAAK,CAAC,aAAa,CAAC,KAAa,EAAE,QAAgB;QACxD,OAAO,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;IAClD,CAAC;IAEM,KAAK,CAAC,UAAU,CAAC,KAAa,EAAE,QAAgB;QACrD,OAAO,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;IAC/C,CAAC;IAEM,KAAK,CAAC,YAAY,CAAC,KAAa,EAAE,QAAgB;QACvD,OAAO,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;IACjD,CAAC;IAEM,KAAK,CAAC,SAAS,CAAC,KAAa,EAAE,QAAgB;QACpD,OAAO,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;IAC9C,CAAC;IAEM,KAAK,CAAC,cAAc,CAAC,KAAa,EAAE,QAAgB;QACzD,OAAO,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;IACnD,CAAC;IAEM,KAAK,CAAC,UAAU,CAAC,QAAgB;QACtC,OAAO,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;IACxC,CAAC;IAEM,KAAK,CAAC,KAAK;QAChB,OAAO,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;IAC3B,CAAC;CACF;AAvCD,kDAuCC","sourcesContent":["import type { Quad } from '@rdfjs/types';\nimport type { AsyncIterator } from 'asynciterator';\nimport { getLoggerFor } from 'global-logger-factory';\n\n/**\n * SPARQL Engine interface - common abstraction for SPARQL query engines\n */\nexport interface SparqlEngine {\n  queryBindings(query: string, basePath: string): Promise<any>;\n  queryQuads(query: string, basePath: string): Promise<any>;\n  queryBoolean(query: string, basePath: string): Promise<boolean>;\n  queryVoid(query: string, basePath: string): Promise<void>;\n  constructGraph(graph: string, basePath: string): Promise<AsyncIterator<Quad>>;\n  listGraphs(basePath: string): Promise<Set<string>>;\n  close(): Promise<void>;\n}\n\n/**\n * SubgraphQueryEngine - SPARQL engine with subgraph (tenant) isolation\n * \n * Wraps a SparqlEngine implementation for use in the system.\n */\nexport class SubgraphQueryEngine {\n  private readonly logger = getLoggerFor(this);\n  private readonly impl: SparqlEngine;\n\n  /**\n   * Create a SubgraphQueryEngine\n   * @param engine - A SparqlEngine implementation\n   */\n  public constructor(engine: SparqlEngine) {\n    this.impl = engine;\n  }\n\n  public async queryBindings(query: string, basePath: string): Promise<any> {\n    return this.impl.queryBindings(query, basePath);\n  }\n\n  public async queryQuads(query: string, basePath: string): Promise<any> {\n    return this.impl.queryQuads(query, basePath);\n  }\n\n  public async queryBoolean(query: string, basePath: string): Promise<boolean> {\n    return this.impl.queryBoolean(query, basePath);\n  }\n\n  public async queryVoid(query: string, basePath: string): Promise<void> {\n    return this.impl.queryVoid(query, basePath);\n  }\n\n  public async constructGraph(graph: string, basePath: string): Promise<AsyncIterator<Quad>> {\n    return this.impl.constructGraph(graph, basePath);\n  }\n\n  public async listGraphs(basePath: string): Promise<Set<string>> {\n    return this.impl.listGraphs(basePath);\n  }\n\n  public async close(): Promise<void> {\n    return this.impl.close();\n  }\n}\n"]}

package/dist/storage/sparql/SubgraphQueryEngine.jsonld

@@ -51,7 +51,7 @@
         {
           "@id": "undefineds:dist/storage/sparql/SubgraphQueryEngine.jsonld#SubgraphQueryEngine_engine",
           "range": "undefineds:dist/storage/sparql/SubgraphQueryEngine.jsonld#SparqlEngine",
-          "comment": "A SparqlEngine implementation (QuadstoreSparqlEngine or QuintstoreSparqlEngine)"
+          "comment": "A SparqlEngine implementation"
         }
       ],
       "memberFields": [
@@ -101,129 +101,6 @@
           "@id": "undefineds:dist/storage/sparql/SubgraphQueryEngine.jsonld#SubgraphQueryEngine_engine"
         }
       ]
-    },
-    {
-      "@id": "undefineds:dist/storage/sparql/SubgraphQueryEngine.jsonld#QuadstoreSparqlEngine",
-      "@type": "Class",
-      "requireElement": "QuadstoreSparqlEngine",
-      "extends": [
-        "undefineds:dist/storage/sparql/SubgraphQueryEngine.jsonld#SparqlEngine"
-      ],
-      "parameters": [
-        {
-          "@id": "undefineds:dist/storage/sparql/SubgraphQueryEngine.jsonld#QuadstoreSparqlEngine_endpoint",
-          "range": "xsd:string"
-        }
-      ],
-      "memberFields": [
-        {
-          "@id": "undefineds:dist/storage/sparql/SubgraphQueryEngine.jsonld#QuadstoreSparqlEngine__member_delegate",
-          "memberFieldName": "delegate"
-        },
-        {
-          "@id": "undefineds:dist/storage/sparql/SubgraphQueryEngine.jsonld#QuadstoreSparqlEngine__member_constructor",
-          "memberFieldName": "constructor"
-        },
-        {
-          "@id": "undefineds:dist/storage/sparql/SubgraphQueryEngine.jsonld#QuadstoreSparqlEngine__member_queryBindings",
-          "memberFieldName": "queryBindings"
-        },
-        {
-          "@id": "undefineds:dist/storage/sparql/SubgraphQueryEngine.jsonld#QuadstoreSparqlEngine__member_queryQuads",
-          "memberFieldName": "queryQuads"
-        },
-        {
-          "@id": "undefineds:dist/storage/sparql/SubgraphQueryEngine.jsonld#QuadstoreSparqlEngine__member_queryBoolean",
-          "memberFieldName": "queryBoolean"
-        },
-        {
-          "@id": "undefineds:dist/storage/sparql/SubgraphQueryEngine.jsonld#QuadstoreSparqlEngine__member_queryVoid",
-          "memberFieldName": "queryVoid"
-        },
-        {
-          "@id": "undefineds:dist/storage/sparql/SubgraphQueryEngine.jsonld#QuadstoreSparqlEngine__member_constructGraph",
-          "memberFieldName": "constructGraph"
-        },
-        {
-          "@id": "undefineds:dist/storage/sparql/SubgraphQueryEngine.jsonld#QuadstoreSparqlEngine__member_listGraphs",
-          "memberFieldName": "listGraphs"
-        },
-        {
-          "@id": "undefineds:dist/storage/sparql/SubgraphQueryEngine.jsonld#QuadstoreSparqlEngine__member_close",
-          "memberFieldName": "close"
-        }
-      ],
-      "constructorArguments": [
-        {
-          "@id": "undefineds:dist/storage/sparql/SubgraphQueryEngine.jsonld#QuadstoreSparqlEngine_endpoint"
-        }
-      ]
-    },
-    {
-      "@id": "undefineds:dist/storage/sparql/SubgraphQueryEngine.jsonld#QuintstoreSparqlEngine",
-      "@type": "Class",
-      "requireElement": "QuintstoreSparqlEngine",
-      "extends": [
-        "undefineds:dist/storage/sparql/SubgraphQueryEngine.jsonld#SparqlEngine"
-      ],
-      "comment": "QuintStore-based SPARQL engine implementation  Uses security filters to enforce access boundaries, which are pushed down to the storage layer.",
-      "parameters": [
-        {
-          "@id": "undefineds:dist/storage/sparql/SubgraphQueryEngine.jsonld#QuintstoreSparqlEngine_store",
-          "range": "undefineds:dist/storage/quint/types.jsonld#QuintStore"
-        }
-      ],
-      "memberFields": [
-        {
-          "@id": "undefineds:dist/storage/sparql/SubgraphQueryEngine.jsonld#QuintstoreSparqlEngine__member_store",
-          "memberFieldName": "store"
-        },
-        {
-          "@id": "undefineds:dist/storage/sparql/SubgraphQueryEngine.jsonld#QuintstoreSparqlEngine__member_engine",
-          "memberFieldName": "engine"
-        },
-        {
-          "@id": "undefineds:dist/storage/sparql/SubgraphQueryEngine.jsonld#QuintstoreSparqlEngine__member_ready",
-          "memberFieldName": "ready"
-        },
-        {
-          "@id": "undefineds:dist/storage/sparql/SubgraphQueryEngine.jsonld#QuintstoreSparqlEngine__member_constructor",
-          "memberFieldName": "constructor"
-        },
-        {
-          "@id": "undefineds:dist/storage/sparql/SubgraphQueryEngine.jsonld#QuintstoreSparqlEngine__member_queryBindings",
-          "memberFieldName": "queryBindings"
-        },
-        {
-          "@id": "undefineds:dist/storage/sparql/SubgraphQueryEngine.jsonld#QuintstoreSparqlEngine__member_queryQuads",
-          "memberFieldName": "queryQuads"
-        },
-        {
-          "@id": "undefineds:dist/storage/sparql/SubgraphQueryEngine.jsonld#QuintstoreSparqlEngine__member_queryBoolean",
-          "memberFieldName": "queryBoolean"
-        },
-        {
-          "@id": "undefineds:dist/storage/sparql/SubgraphQueryEngine.jsonld#QuintstoreSparqlEngine__member_queryVoid",
-          "memberFieldName": "queryVoid"
-        },
-        {
-          "@id": "undefineds:dist/storage/sparql/SubgraphQueryEngine.jsonld#QuintstoreSparqlEngine__member_constructGraph",
-          "memberFieldName": "constructGraph"
-        },
-        {
-          "@id": "undefineds:dist/storage/sparql/SubgraphQueryEngine.jsonld#QuintstoreSparqlEngine__member_listGraphs",
-          "memberFieldName": "listGraphs"
-        },
-        {
-          "@id": "undefineds:dist/storage/sparql/SubgraphQueryEngine.jsonld#QuintstoreSparqlEngine__member_close",
-          "memberFieldName": "close"
-        }
-      ],
-      "constructorArguments": [
-        {
-          "@id": "undefineds:dist/storage/sparql/SubgraphQueryEngine.jsonld#QuintstoreSparqlEngine_store"
-        }
-      ]
     }
   ]
 }

package/dist/terminal/AclPermissionService.d.ts

@@ -1,9 +1,10 @@
+import { SubgraphQueryEngine } from '../storage/sparql/SubgraphQueryEngine';
 export declare class AclPermissionService {
     protected readonly logger: import("global-logger-factory").Logger<unknown>;
     private engine?;
     private readonly sparqlEndpoint?;
     constructor(sparqlEndpoint?: string);
-    private getEngine;
+    protected getEngine(): Promise<SubgraphQueryEngine>;
     /**
      * Check if a user has acl:Control permission on a resource.
      *

package/dist/terminal/AclPermissionService.js

@@ -1,4 +1,27 @@
 "use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || function (mod) {
+    if (mod && mod.__esModule) return mod;
+    var result = {};
+    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+    __setModuleDefault(result, mod);
+    return result;
+};
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.AclPermissionService = void 0;
 /**
@@ -19,7 +42,7 @@ class AclPermissionService {
             if (!this.sparqlEndpoint) {
                 throw new Error('SPARQL endpoint not configured');
             }
-            this.engine = new SubgraphQueryEngine_1.SubgraphQueryEngine(new SubgraphQueryEngine_1.QuadstoreSparqlEngine(this.sparqlEndpoint));
+            this.engine = Promise.resolve().then(() => __importStar(require('../storage/sparql/CompatibilitySparqlEngine'))).then(({ QuadstoreSparqlEngine }) => new SubgraphQueryEngine_1.SubgraphQueryEngine(new QuadstoreSparqlEngine(this.sparqlEndpoint)));
         }
         return this.engine;
     }
@@ -36,7 +59,7 @@ class AclPermissionService {
      * @returns true if user has Control permission
      */
     async hasControlPermission(userId, resourceUrl) {
-        const engine = this.getEngine();
+        const engine = await this.getEngine();
         // Normalize resource URL (remove trailing slash for consistency)
         const normalizedResource = resourceUrl.endsWith('/')
             ? resourceUrl.slice(0, -1)
@@ -90,7 +113,7 @@ class AclPermissionService {
      * @returns Array of resource URLs with Control permission
      */
     async getControlledResources(userId, basePath) {
-        const engine = this.getEngine();
+        const engine = await this.getEngine();
         const query = `
       PREFIX acl: <http://www.w3.org/ns/auth/acl#>
       PREFIX foaf: <http://xmlns.com/foaf/0.1/>

package/dist/terminal/AclPermissionService.js.map

@@ -1 +1 @@
-{"version":3,"file":"AclPermissionService.js","sourceRoot":"","sources":["../../src/terminal/AclPermissionService.ts"],"names":[],"mappings":";;;AAAA;;;;;GAKG;AACH,iEAAqD;AACrD,+EAAmG;AAEnG,MAAa,oBAAoB;IAK/B,YAAmB,cAAuB;QAJvB,WAAM,GAAG,IAAA,oCAAY,EAAC,IAAI,CAAC,CAAC;QAK7C,IAAI,CAAC,cAAc,GAAG,cAAc,CAAC;IACvC,CAAC;IAEO,SAAS;QACf,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YACjB,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC;gBACzB,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;YACpD,CAAC;YACD,IAAI,CAAC,MAAM,GAAG,IAAI,yCAAmB,CAAC,IAAI,2CAAqB,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC;QACxF,CAAC;QACD,OAAO,IAAI,CAAC,MAAM,CAAC;IACrB,CAAC;IAED;;;;;;;;;;;OAWG;IACI,KAAK,CAAC,oBAAoB,CAAC,MAAc,EAAE,WAAmB;QACnE,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QAEhC,iEAAiE;QACjE,MAAM,kBAAkB,GAAG,WAAW,CAAC,QAAQ,CAAC,GAAG,CAAC;YAClD,CAAC,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YAC1B,CAAC,CAAC,WAAW,CAAC;QAEhB,yDAAyD;QACzD,MAAM,iBAAiB,GAAG,kBAAkB,GAAG,GAAG,CAAC;QAEnD,MAAM,KAAK,GAAG;;;;;;;;;;gCAUc,kBAAkB;;gCAElB,iBAAiB;;+BAElB,kBAAkB;;+BAElB,iBAAiB;;;;;6BAKnB,MAAM;;;;;;;KAO9B,CAAC;QAEF,IAAI,CAAC;YACH,MAAM,aAAa,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;YACpE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,mBAAmB,MAAM,cAAc,WAAW,gBAAgB,aAAa,EAAE,CAAC,CAAC;YACrG,OAAO,aAAa,CAAC;QACvB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,qBAAqB,KAAK,EAAE,CAAC,CAAC;YAChD,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED;;;;;;OAMG;IACI,KAAK,CAAC,sBAAsB,CAAC,MAAc,EAAE,QAAgB;QAClE,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QAEhC,MAAM,KAAK,GAAG;;;;;;;;;;;;;;;;4CAgB0B,QAAQ;;;;6BAIvB,MAAM;;;;;;;KAO9B,CAAC;QAEF,IAAI,CAAC;YACH,MAAM,SAAS,GAAa,EAAE,CAAC;YAC/B,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;YAE3D,IAAI,KAAK,EAAE,MAAM,OAAO,IAAI,MAAM,EAAE,CAAC;gBACnC,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;gBACtC,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,IAAI,KAAK,EAAE,CAAC;oBAC3D,SAAS,CAAC,IAAI,CAAE,KAA2B,CAAC,KAAK,CAAC,CAAC;gBACrD,CAAC;YACH,CAAC;YAED,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,SAAS,CAAC,MAAM,kCAAkC,MAAM,UAAU,QAAQ,EAAE,CAAC,CAAC;YACzG,OAAO,SAAS,CAAC;QACnB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,qBAAqB,KAAK,EAAE,CAAC,CAAC;YAChD,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;CACF;AA3ID,oDA2IC","sourcesContent":["/**\n * ACL Permission Service for Terminal Sidecar\n *\n * Queries Quadstore to check if a user has acl:Control permission\n * on a resource, which is required for Terminal access.\n */\nimport { getLoggerFor } from 'global-logger-factory';\nimport { SubgraphQueryEngine, QuadstoreSparqlEngine } from '../storage/sparql/SubgraphQueryEngine';\n\nexport class AclPermissionService {\n  protected readonly logger = getLoggerFor(this);\n  private engine?: SubgraphQueryEngine;\n  private readonly sparqlEndpoint?: string;\n\n  public constructor(sparqlEndpoint?: string) {\n    this.sparqlEndpoint = sparqlEndpoint;\n  }\n\n  private getEngine(): SubgraphQueryEngine {\n    if (!this.engine) {\n      if (!this.sparqlEndpoint) {\n        throw new Error('SPARQL endpoint not configured');\n      }\n      this.engine = new SubgraphQueryEngine(new QuadstoreSparqlEngine(this.sparqlEndpoint));\n    }\n    return this.engine;\n  }\n\n  /**\n   * Check if a user has acl:Control permission on a resource.\n   *\n   * Checks for:\n   * - Direct agent match: acl:agent <userId>\n   * - Public access: acl:agentClass foaf:Agent\n   * - Authenticated access: acl:agentClass acl:AuthenticatedAgent\n   *\n   * @param userId - The WebID of the user\n   * @param resourceUrl - The URL of the resource to check\n   * @returns true if user has Control permission\n   */\n  public async hasControlPermission(userId: string, resourceUrl: string): Promise<boolean> {\n    const engine = this.getEngine();\n\n    // Normalize resource URL (remove trailing slash for consistency)\n    const normalizedResource = resourceUrl.endsWith('/')\n      ? resourceUrl.slice(0, -1)\n      : resourceUrl;\n\n    // Also check the container version (with trailing slash)\n    const containerResource = normalizedResource + '/';\n\n    const query = `\n      PREFIX acl: <http://www.w3.org/ns/auth/acl#>\n      PREFIX foaf: <http://xmlns.com/foaf/0.1/>\n\n      ASK {\n        ?auth a acl:Authorization ;\n              acl:mode acl:Control .\n\n        # Match either the exact resource or container\n        {\n          ?auth acl:accessTo <${normalizedResource}> .\n        } UNION {\n          ?auth acl:accessTo <${containerResource}> .\n        } UNION {\n          ?auth acl:default <${normalizedResource}> .\n        } UNION {\n          ?auth acl:default <${containerResource}> .\n        }\n\n        # Match user by agent, agentClass, or agentGroup\n        {\n          ?auth acl:agent <${userId}> .\n        } UNION {\n          ?auth acl:agentClass foaf:Agent .\n        } UNION {\n          ?auth acl:agentClass acl:AuthenticatedAgent .\n        }\n      }\n    `;\n\n    try {\n      const hasPermission = await engine.queryBoolean(query, resourceUrl);\n      this.logger.debug(`ACL check: user=${userId}, resource=${resourceUrl}, hasControl=${hasPermission}`);\n      return hasPermission;\n    } catch (error) {\n      this.logger.error(`ACL query failed: ${error}`);\n      return false;\n    }\n  }\n\n  /**\n   * Get all resources where user has Control permission under a base path.\n   *\n   * @param userId - The WebID of the user\n   * @param basePath - The base path to search under\n   * @returns Array of resource URLs with Control permission\n   */\n  public async getControlledResources(userId: string, basePath: string): Promise<string[]> {\n    const engine = this.getEngine();\n\n    const query = `\n      PREFIX acl: <http://www.w3.org/ns/auth/acl#>\n      PREFIX foaf: <http://xmlns.com/foaf/0.1/>\n\n      SELECT DISTINCT ?resource WHERE {\n        ?auth a acl:Authorization ;\n              acl:mode acl:Control .\n\n        # Get the resource\n        {\n          ?auth acl:accessTo ?resource .\n        } UNION {\n          ?auth acl:default ?resource .\n        }\n\n        # Filter by base path\n        FILTER(STRSTARTS(STR(?resource), \"${basePath}\"))\n\n        # Match user\n        {\n          ?auth acl:agent <${userId}> .\n        } UNION {\n          ?auth acl:agentClass foaf:Agent .\n        } UNION {\n          ?auth acl:agentClass acl:AuthenticatedAgent .\n        }\n      }\n    `;\n\n    try {\n      const resources: string[] = [];\n      const stream = await engine.queryBindings(query, basePath);\n\n      for await (const binding of stream) {\n        const value = binding.get('resource');\n        if (value && typeof value === 'object' && 'value' in value) {\n          resources.push((value as { value: string }).value);\n        }\n      }\n\n      this.logger.debug(`Found ${resources.length} controlled resources for user=${userId} under ${basePath}`);\n      return resources;\n    } catch (error) {\n      this.logger.error(`ACL query failed: ${error}`);\n      return [];\n    }\n  }\n}\n"]}
+{"version":3,"file":"AclPermissionService.js","sourceRoot":"","sources":["../../src/terminal/AclPermissionService.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;;;;;GAKG;AACH,iEAAqD;AACrD,+EAA4E;AAE5E,MAAa,oBAAoB;IAK/B,YAAmB,cAAuB;QAJvB,WAAM,GAAG,IAAA,oCAAY,EAAC,IAAI,CAAC,CAAC;QAK7C,IAAI,CAAC,cAAc,GAAG,cAAc,CAAC;IACvC,CAAC;IAES,SAAS;QACjB,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YACjB,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC;gBACzB,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;YACpD,CAAC;YACD,IAAI,CAAC,MAAM,GAAG,kDAAO,6CAA6C,IAC/D,IAAI,CAAC,CAAC,EAAE,qBAAqB,EAAE,EAAE,EAAE,CAAC,IAAI,yCAAmB,CAAC,IAAI,qBAAqB,CAAC,IAAI,CAAC,cAAe,CAAC,CAAC,CAAC,CAAC;QACnH,CAAC;QACD,OAAO,IAAI,CAAC,MAAM,CAAC;IACrB,CAAC;IAED;;;;;;;;;;;OAWG;IACI,KAAK,CAAC,oBAAoB,CAAC,MAAc,EAAE,WAAmB;QACnE,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC;QAEtC,iEAAiE;QACjE,MAAM,kBAAkB,GAAG,WAAW,CAAC,QAAQ,CAAC,GAAG,CAAC;YAClD,CAAC,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YAC1B,CAAC,CAAC,WAAW,CAAC;QAEhB,yDAAyD;QACzD,MAAM,iBAAiB,GAAG,kBAAkB,GAAG,GAAG,CAAC;QAEnD,MAAM,KAAK,GAAG;;;;;;;;;;gCAUc,kBAAkB;;gCAElB,iBAAiB;;+BAElB,kBAAkB;;+BAElB,iBAAiB;;;;;6BAKnB,MAAM;;;;;;;KAO9B,CAAC;QAEF,IAAI,CAAC;YACH,MAAM,aAAa,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;YACpE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,mBAAmB,MAAM,cAAc,WAAW,gBAAgB,aAAa,EAAE,CAAC,CAAC;YACrG,OAAO,aAAa,CAAC;QACvB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,qBAAqB,KAAK,EAAE,CAAC,CAAC;YAChD,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED;;;;;;OAMG;IACI,KAAK,CAAC,sBAAsB,CAAC,MAAc,EAAE,QAAgB;QAClE,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC;QAEtC,MAAM,KAAK,GAAG;;;;;;;;;;;;;;;;4CAgB0B,QAAQ;;;;6BAIvB,MAAM;;;;;;;KAO9B,CAAC;QAEF,IAAI,CAAC;YACH,MAAM,SAAS,GAAa,EAAE,CAAC;YAC/B,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;YAE3D,IAAI,KAAK,EAAE,MAAM,OAAO,IAAI,MAAM,EAAE,CAAC;gBACnC,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;gBACtC,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,IAAI,KAAK,EAAE,CAAC;oBAC3D,SAAS,CAAC,IAAI,CAAE,KAA2B,CAAC,KAAK,CAAC,CAAC;gBACrD,CAAC;YACH,CAAC;YAED,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,SAAS,CAAC,MAAM,kCAAkC,MAAM,UAAU,QAAQ,EAAE,CAAC,CAAC;YACzG,OAAO,SAAS,CAAC;QACnB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,qBAAqB,KAAK,EAAE,CAAC,CAAC;YAChD,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;CACF;AA5ID,oDA4IC","sourcesContent":["/**\n * ACL Permission Service for Terminal Sidecar\n *\n * Queries Quadstore to check if a user has acl:Control permission\n * on a resource, which is required for Terminal access.\n */\nimport { getLoggerFor } from 'global-logger-factory';\nimport { SubgraphQueryEngine } from '../storage/sparql/SubgraphQueryEngine';\n\nexport class AclPermissionService {\n  protected readonly logger = getLoggerFor(this);\n  private engine?: Promise<SubgraphQueryEngine>;\n  private readonly sparqlEndpoint?: string;\n\n  public constructor(sparqlEndpoint?: string) {\n    this.sparqlEndpoint = sparqlEndpoint;\n  }\n\n  protected getEngine(): Promise<SubgraphQueryEngine> {\n    if (!this.engine) {\n      if (!this.sparqlEndpoint) {\n        throw new Error('SPARQL endpoint not configured');\n      }\n      this.engine = import('../storage/sparql/CompatibilitySparqlEngine')\n        .then(({ QuadstoreSparqlEngine }) => new SubgraphQueryEngine(new QuadstoreSparqlEngine(this.sparqlEndpoint!)));\n    }\n    return this.engine;\n  }\n\n  /**\n   * Check if a user has acl:Control permission on a resource.\n   *\n   * Checks for:\n   * - Direct agent match: acl:agent <userId>\n   * - Public access: acl:agentClass foaf:Agent\n   * - Authenticated access: acl:agentClass acl:AuthenticatedAgent\n   *\n   * @param userId - The WebID of the user\n   * @param resourceUrl - The URL of the resource to check\n   * @returns true if user has Control permission\n   */\n  public async hasControlPermission(userId: string, resourceUrl: string): Promise<boolean> {\n    const engine = await this.getEngine();\n\n    // Normalize resource URL (remove trailing slash for consistency)\n    const normalizedResource = resourceUrl.endsWith('/')\n      ? resourceUrl.slice(0, -1)\n      : resourceUrl;\n\n    // Also check the container version (with trailing slash)\n    const containerResource = normalizedResource + '/';\n\n    const query = `\n      PREFIX acl: <http://www.w3.org/ns/auth/acl#>\n      PREFIX foaf: <http://xmlns.com/foaf/0.1/>\n\n      ASK {\n        ?auth a acl:Authorization ;\n              acl:mode acl:Control .\n\n        # Match either the exact resource or container\n        {\n          ?auth acl:accessTo <${normalizedResource}> .\n        } UNION {\n          ?auth acl:accessTo <${containerResource}> .\n        } UNION {\n          ?auth acl:default <${normalizedResource}> .\n        } UNION {\n          ?auth acl:default <${containerResource}> .\n        }\n\n        # Match user by agent, agentClass, or agentGroup\n        {\n          ?auth acl:agent <${userId}> .\n        } UNION {\n          ?auth acl:agentClass foaf:Agent .\n        } UNION {\n          ?auth acl:agentClass acl:AuthenticatedAgent .\n        }\n      }\n    `;\n\n    try {\n      const hasPermission = await engine.queryBoolean(query, resourceUrl);\n      this.logger.debug(`ACL check: user=${userId}, resource=${resourceUrl}, hasControl=${hasPermission}`);\n      return hasPermission;\n    } catch (error) {\n      this.logger.error(`ACL query failed: ${error}`);\n      return false;\n    }\n  }\n\n  /**\n   * Get all resources where user has Control permission under a base path.\n   *\n   * @param userId - The WebID of the user\n   * @param basePath - The base path to search under\n   * @returns Array of resource URLs with Control permission\n   */\n  public async getControlledResources(userId: string, basePath: string): Promise<string[]> {\n    const engine = await this.getEngine();\n\n    const query = `\n      PREFIX acl: <http://www.w3.org/ns/auth/acl#>\n      PREFIX foaf: <http://xmlns.com/foaf/0.1/>\n\n      SELECT DISTINCT ?resource WHERE {\n        ?auth a acl:Authorization ;\n              acl:mode acl:Control .\n\n        # Get the resource\n        {\n          ?auth acl:accessTo ?resource .\n        } UNION {\n          ?auth acl:default ?resource .\n        }\n\n        # Filter by base path\n        FILTER(STRSTARTS(STR(?resource), \"${basePath}\"))\n\n        # Match user\n        {\n          ?auth acl:agent <${userId}> .\n        } UNION {\n          ?auth acl:agentClass foaf:Agent .\n        } UNION {\n          ?auth acl:agentClass acl:AuthenticatedAgent .\n        }\n      }\n    `;\n\n    try {\n      const resources: string[] = [];\n      const stream = await engine.queryBindings(query, basePath);\n\n      for await (const binding of stream) {\n        const value = binding.get('resource');\n        if (value && typeof value === 'object' && 'value' in value) {\n          resources.push((value as { value: string }).value);\n        }\n      }\n\n      this.logger.debug(`Found ${resources.length} controlled resources for user=${userId} under ${basePath}`);\n      return resources;\n    } catch (error) {\n      this.logger.error(`ACL query failed: ${error}`);\n      return [];\n    }\n  }\n}\n"]}

package/dist/terminal/TerminalSessionManager.js

@@ -1,10 +1,32 @@
 "use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || function (mod) {
+    if (mod && mod.__esModule) return mod;
+    var result = {};
+    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+    __setModuleDefault(result, mod);
+    return result;
+};
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.TerminalSessionManager = void 0;
 const crypto_1 = require("crypto");
 const global_logger_factory_1 = require("global-logger-factory");
 const TerminalSession_1 = require("./TerminalSession");
-const AclPermissionService_1 = require("./AclPermissionService");
 const types_1 = require("./types");
 const DEFAULT_OPTIONS = {
     maxSessionsPerUser: 5,
@@ -22,7 +44,7 @@ class TerminalSessionManager {
         this.options = { ...DEFAULT_OPTIONS, ...options };
         // Initialize ACL service if SPARQL endpoint is provided
         if (this.options.sparqlEndpoint) {
-            this.aclService = new AclPermissionService_1.AclPermissionService(this.options.sparqlEndpoint);
+            this.aclService = Promise.resolve().then(() => __importStar(require('./AclPermissionService'))).then(({ AclPermissionService }) => new AclPermissionService(this.options.sparqlEndpoint));
         }
     }
     /**
@@ -60,7 +82,7 @@ class TerminalSessionManager {
             this.logger.warn(`Cannot map workdir to URL: ${workdir}`);
             return false;
         }
-        return this.aclService.hasControlPermission(userId, resourceUrl);
+        return (await this.aclService).hasControlPermission(userId, resourceUrl);
     }
     /**
      * Create a new terminal session