@undefineds.co/xpod 0.3.23 → 0.3.25

package/dist/identity/drizzle/PodLookupRepository.d.ts

@@ -45,6 +45,14 @@ export declare class PodLookupRepository {
      * not have to match the storage base URL.
      */
     findByWebId(webId: string): Promise<PodLookupResult | undefined>;
+    /**
+     * Find all Pods linked to a WebID.
+     *
+     * A Cloud WebID can legitimately back both a Cloud Pod and a Local SP Pod.
+     * Callers that are scoped to a storage provider must inspect all candidates
+     * instead of accepting the first account record returned by CSS storage.
+     */
+    findAllByWebId(webId: string): Promise<PodLookupResult[]>;
     /**
      * Find Pods by linked WebID URLs in one scan.
      */

package/dist/identity/drizzle/PodLookupRepository.js

@@ -48,29 +48,43 @@ class PodLookupRepository {
      * not have to match the storage base URL.
      */
     async findByWebId(webId) {
+        return (await this.findAllByWebId(webId))[0];
+    }
+    /**
+     * Find all Pods linked to a WebID.
+     *
+     * A Cloud WebID can legitimately back both a Cloud Pod and a Local SP Pod.
+     * Callers that are scoped to a storage provider must inspect all candidates
+     * instead of accepting the first account record returned by CSS storage.
+     */
+    async findAllByWebId(webId) {
         const normalized = normalizeWebId(webId);
         if (!normalized) {
-            return undefined;
+            return [];
         }
+        const results = [];
         const pods = await this.getAllPods();
         for (const pod of pods) {
             const matchedWebId = getPodWebIds(pod).find((candidate) => normalizeWebId(candidate) === normalized);
             if (matchedWebId) {
-                return {
+                results.push({
                     ...pod,
                     webId: matchedWebId,
-                };
+                });
             }
         }
+        if (results.length > 0) {
+            return results;
+        }
         const indexed = await this.findByWebIdIndex(normalized);
         if (!indexed) {
-            return undefined;
+            return [];
         }
         const usage = await this.getUsageByPodId();
-        return {
-            ...indexed,
-            storageUrl: indexed.storageUrl ?? usage.get(indexed.podId)?.storageUrl,
-        };
+        return [{
+                ...indexed,
+                storageUrl: indexed.storageUrl ?? usage.get(indexed.podId)?.storageUrl,
+            }];
     }
     /**
      * Find Pods by linked WebID URLs in one scan.

package/dist/identity/drizzle/PodLookupRepository.js.map

@@ -1 +1 @@
-{"version":3,"file":"PodLookupRepository.js","sourceRoot":"","sources":["../../../src/identity/drizzle/PodLookupRepository.ts"],"names":[],"mappings":";;;AAAA,6CAAkC;AAClC,6BAA6E;AAqC7E;;;;;;GAMG;AACH,MAAa,mBAAmB;IAK9B,YACmB,EAAoB,EACrC,WAAoB;QADH,OAAE,GAAF,EAAE,CAAkB;QAGrC,IAAI,CAAC,WAAW,GAAG,WAAW,IAAI,aAAa,CAAC;QAChD,IAAI,CAAC,qBAAqB,GAAG,gBAAgB,CAAC;QAC9C,IAAI,CAAC,cAAc,GAAG,oBAAoB,CAAC;IAC7C,CAAC;IAED;;OAEG;IACI,KAAK,CAAC,wBAAwB,CAAC,YAAoB;QACxD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC;QAErC,IAAI,SAAsC,CAAC;QAC3C,IAAI,UAAU,GAAG,CAAC,CAAC;QAEnB,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,MAAM,aAAa,GAAG,GAAG,CAAC,UAAU,IAAI,GAAG,CAAC,OAAO,CAAC;YACpD,IAAI,YAAY,CAAC,UAAU,CAAC,aAAa,CAAC,IAAI,aAAa,CAAC,MAAM,GAAG,UAAU,EAAE,CAAC;gBAChF,SAAS,GAAG,GAAG,CAAC;gBAChB,UAAU,GAAG,aAAa,CAAC,MAAM,CAAC;YACpC,CAAC;QACH,CAAC;QAED,OAAO,SAAS,CAAC;IACnB,CAAC;IAED;;OAEG;IACI,KAAK,CAAC,QAAQ,CAAC,KAAa;QACjC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC;QACrC,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,KAAK,CAAC,CAAC;IAC7C,CAAC;IAED;;;;;;OAMG;IACI,KAAK,CAAC,WAAW,CAAC,KAAa;QACpC,MAAM,UAAU,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC;QACzC,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC;QACrC,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,MAAM,YAAY,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,cAAc,CAAC,SAAS,CAAC,KAAK,UAAU,CAAC,CAAC;YACrG,IAAI,YAAY,EAAE,CAAC;gBACjB,OAAO;oBACL,GAAG,GAAG;oBACN,KAAK,EAAE,YAAY;iBACpB,CAAC;YACJ,CAAC;QACH,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,UAAU,CAAC,CAAC;QACxD,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,eAAe,EAAE,CAAC;QAC3C,OAAO;YACL,GAAG,OAAO;YACV,UAAU,EAAE,OAAO,CAAC,UAAU,IAAI,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,UAAU;SACvE,CAAC;IACJ,CAAC;IAED;;OAEG;IACI,KAAK,CAAC,YAAY,CAAC,MAAgB;QACxC,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAmB,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QACjH,IAAI,iBAAiB,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;YACjC,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,MAAM,OAAO,GAAsB,EAAE,CAAC;QACtC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC;QACrC,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,MAAM,YAAY,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE;gBACxD,MAAM,UAAU,GAAG,cAAc,CAAC,SAAS,CAAC,CAAC;gBAC7C,OAAO,UAAU,CAAC,CAAC,CAAC,iBAAiB,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;YAChE,CAAC,CAAC,CAAC;YACH,IAAI,CAAC,YAAY,EAAE,CAAC;gBAClB,SAAS;YACX,CAAC;YACD,OAAO,CAAC,IAAI,CAAC;gBACX,GAAG,GAAG;gBACN,KAAK,EAAE,YAAY;aACpB,CAAC,CAAC;QACL,CAAC;QACD,IAAI,OAAO,CAAC,MAAM,GAAG,iBAAiB,CAAC,IAAI,EAAE,CAAC;YAC5C,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,cAAc,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;YAC5F,KAAK,MAAM,UAAU,IAAI,iBAAiB,EAAE,CAAC;gBAC3C,IAAI,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;oBACzB,SAAS;gBACX,CAAC;gBACD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,UAAU,CAAC,CAAC;gBACxD,IAAI,OAAO,EAAE,CAAC;oBACZ,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,eAAe,EAAE,CAAC;oBAC3C,OAAO,CAAC,IAAI,CAAC;wBACX,GAAG,OAAO;wBACV,UAAU,EAAE,OAAO,CAAC,UAAU,IAAI,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,UAAU;qBACvE,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;QACH,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAED;;OAEG;IACI,KAAK,CAAC,eAAe,CAAC,SAAiB;QAC5C,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC;QACrC,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC;IAC3D,CAAC;IAED;;OAEG;IACI,KAAK,CAAC,aAAa,CAAC,KAAa,EAAE,SAAiB,EAAE,UAAkB;QAC7E,MAAM,OAAO,GAAG,iBAAG,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC;QACtD,MAAM,IAAA,qBAAgB,EAAC,IAAI,CAAC,EAAE,EAAE,IAAA,iBAAG,EAAA;oBACnB,OAAO;gBACX,KAAK,KAAK,SAAS,KAAK,UAAU;;uBAE3B,SAAS;wBACR,UAAU;KAC7B,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACI,KAAK,CAAC,kBAAkB,CAAC,KAAa;QAC3C,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,iBAAG,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC;YACtD,MAAM,MAAM,GAAG,MAAM,IAAA,iBAAY,EAO9B,IAAI,CAAC,EAAE,EAAE,IAAA,iBAAG,EAAA;;eAEN,OAAO;yBACG,KAAK;;OAEvB,CAAC,CAAC;YAEH,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC7B,OAAO,SAAS,CAAC;YACnB,CAAC;YACD,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAC3B,OAAO;gBACL,KAAK,EAAE,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,EAAE,IAAI,KAAK;gBACpC,MAAM,EAAE,GAAG,CAAC,OAAO,IAAI,SAAS;gBAChC,eAAe,EAAE,GAAG,CAAC,gBAAyD;gBAC9E,mBAAmB,EAAE,GAAG,CAAC,qBAAqB,IAAI,SAAS;gBAC3D,iBAAiB,EAAE,GAAG,CAAC,kBAAkB,IAAI,SAAS;aACvD,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,yBAAyB;YACzB,OAAO,SAAS,CAAC;QACnB,CAAC;IACH,CAAC;IAED;;OAEG;IACI,KAAK,CAAC,SAAS,CAAC,KAAa,EAAE,MAAc;QAClD,MAAM,OAAO,GAAG,iBAAG,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC;QACtD,MAAM,IAAA,qBAAgB,EAAC,IAAI,CAAC,EAAE,EAAE,IAAA,iBAAG,EAAA;oBACnB,OAAO;gBACX,KAAK,SAAS,MAAM;qDACiB,MAAM;KACtD,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACI,KAAK,CAAC,kBAAkB,CAC7B,KAAa,EACb,MAAiC,EACjC,UAA0B,EAC1B,QAAwB;QAExB,MAAM,OAAO,GAAG,iBAAG,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC;QACtD,MAAM,IAAA,qBAAgB,EAAC,IAAI,CAAC,EAAE,EAAE,IAAA,iBAAG,EAAA;oBACnB,OAAO;gBACX,KAAK,SAAS,MAAM,KAAK,UAAU,IAAI,IAAI,KAAK,QAAQ,IAAI,CAAC;;6BAEhD,MAAM;kCACD,UAAU,IAAI,IAAI;+BACrB,QAAQ,IAAI,CAAC;KACvC,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACI,KAAK,CAAC,WAAW;QACtB,OAAO,IAAI,CAAC,UAAU,EAAE,CAAC;IAC3B,CAAC;IAED;;;;;OAKG;IACK,KAAK,CAAC,UAAU;QACtB,MAAM,SAAS,GAAG,iBAAG,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC;QAErD,MAAM,MAAM,GAAG,MAAM,IAAA,iBAAY,EAAgB,IAAI,CAAC,EAAE,EAAE,IAAA,iBAAG,EAAA;+BAClC,SAAS;;;KAGnC,CAAC,CAAC;QACH,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,eAAe,EAAE,CAAC;QAElD,MAAM,IAAI,GAAsB,EAAE,CAAC;QAEnC,KAAK,MAAM,GAAG,IAAI,MAAM,EAAE,IAAI,IAAI,EAAE,EAAE,CAAC;YACrC,IAAI,GAAG,CAAC,EAAE,IAAI,GAAG,CAAC,UAAU,IAAI,GAAG,CAAC,QAAQ,EAAE,CAAC;gBAC7C,IAAI,CAAC,IAAI,CAAC;oBACR,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;oBACrB,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC;oBACjC,OAAO,EAAE,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;oBAC7B,UAAU,EAAE,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,SAAS;oBACjE,MAAM,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS;oBACrD,UAAU,EAAE,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,SAAS;iBACpE,CAAC,CAAC;gBACH,SAAS;YACX,CAAC;YAED,IAAI,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;gBACxC,SAAS;YACX,CAAC;YAED,IAAI,CAAC;gBACH,MAAM,SAAS,GAAG,kCAAkC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;gBAC9D,IAAI,CAAC,SAAS,EAAE,CAAC;oBACf,SAAS;gBACX,CAAC;gBACD,MAAM,IAAI,GAAG,iBAAiB,CAAC,OAAO,GAAG,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;gBAElG,MAAM,MAAM,GAAI,IAAY,CAAC,SAAS,CAAC,IAAK,IAAY,CAAC,GAAG,IAAI,EAAE,CAAC;gBACnE,MAAM,MAAM,GAAG,oBAAoB,CAAC,IAAI,CAAC,CAAC;gBAE1C,KAAK,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;oBACtD,MAAM,GAAG,GAAG,OAAkC,CAAC;oBAC/C,IAAI,GAAG,CAAC,OAAO,IAAI,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;wBACnD,MAAM,KAAK,GAAG,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;wBACtC,MAAM,SAAS,GAAG;4BAChB,OAAO,GAAG,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS;4BACrD,GAAG,qBAAqB,CAAC,GAAG,CAAC;4BAC7B,GAAG,MAAM;yBACV,CAAC,MAAM,CAAC,CAAC,KAAK,EAAmB,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC;wBAChE,IAAI,CAAC,IAAI,CAAC;4BACR,KAAK;4BACL,SAAS;4BACT,OAAO,EAAE,GAAG,CAAC,OAAO;4BACpB,UAAU,EAAE,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,KAAK,EAAE,UAAU;4BAC5D,KAAK,EAAE,aAAa,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;4BAClC,GAAG,cAAc,CAAC,SAAS,CAAC;4BAC5B,MAAM,EAAE,OAAO,GAAG,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS;4BAC/D,UAAU,EAAE,OAAO,GAAG,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS;yBAC5E,CAAC,CAAC;oBACL,CAAC;gBACH,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,0BAA0B;YAC5B,CAAC;QACH,CAAC;QAED,OAAO,qBAAqB,CAAC;YAC3B,GAAG,IAAI;YACP,GAAG,MAAM,IAAI,CAAC,uBAAuB,EAAE;SACxC,CAAC,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,eAAe;QAC3B,MAAM,OAAO,GAAG,iBAAG,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC;QACtD,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAA,iBAAY,EAAc,IAAI,CAAC,EAAE,EAAE,IAAA,iBAAG,EAAA;0CACvB,OAAO;OAC1C,CAAC,CAAC;YACH,MAAM,OAAO,GAAG,IAAI,GAAG,EAAmC,CAAC;YAC3D,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;gBAC9B,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC;oBAChB,SAAS;gBACX,CAAC;gBACD,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE;oBACtB,UAAU,EAAE,GAAG,CAAC,WAAW,IAAI,SAAS;iBACzC,CAAC,CAAC;YACL,CAAC;YACD,OAAO,OAAO,CAAC;QACjB,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,GAAG,EAAE,CAAC;QACnB,CAAC;IACH,CAAC;IAED;;;;OAIG;IACK,KAAK,CAAC,gBAAgB,CAAC,KAAa;QAC1C,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,qBAAqB,CAAC,kCAAkC,kBAAkB,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACnH,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;YACnC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,SAAS,CAAC,CAAC;YACtD,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,SAAS;YACX,CAAC;YACD,MAAM,IAAI,GAAG,IAAI,CAAC,0BAA0B,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;YACjE,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,cAAc,CAAC,SAAS,CAAC,KAAK,KAAK,CAAC,CAAC,CAAC;YAC7G,IAAI,KAAK,EAAE,CAAC;gBACV,OAAO;oBACL,GAAG,KAAK;oBACR,KAAK;iBACN,CAAC;YACJ,CAAC;YACD,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACtB,OAAO;oBACL,GAAG,IAAI,CAAC,CAAC,CAAC;oBACV,KAAK;oBACL,GAAG,cAAc,CAAC,CAAC,KAAK,EAAE,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;iBACrD,CAAC;YACJ,CAAC;QACH,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IAEO,KAAK,CAAC,eAAe,CAAC,SAAiB;QAC7C,KAAK,MAAM,GAAG,IAAI,CAAC,iBAAiB,SAAS,EAAE,EAAE,4BAA4B,SAAS,EAAE,CAAC,EAAE,CAAC;YAC1F,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;YAC1C,MAAM,MAAM,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC;YACzC,IAAI,MAAM,EAAE,CAAC;gBACX,OAAO,MAAM,CAAC;YAChB,CAAC;QACH,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IAEO,KAAK,CAAC,qBAAqB,CAAC,GAAW;QAC7C,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;QAC1C,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,KAAK,EAAmB,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACzG,CAAC;IAEO,KAAK,CAAC,WAAW,CAAC,GAAW;QACnC,MAAM,OAAO,GAAG,iBAAG,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC;QACnD,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAA,iBAAY,EAAsB,IAAI,CAAC,EAAE,EAAE,IAAA,iBAAG,EAAA;4BAC7C,OAAO;sBACb,GAAG;;OAElB,CAAC,CAAC;YACH,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC7B,OAAO,SAAS,CAAC;YACnB,CAAC;YACD,OAAO,gBAAgB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QAChD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,SAAS,CAAC;QACnB,CAAC;IACH,CAAC;IAEO,0BAA0B,CAAC,SAAiB,EAAE,IAA6B;QACjF,MAAM,MAAM,GAAI,IAAY,CAAC,SAAS,CAAC,IAAK,IAAY,CAAC,GAAG,IAAI,EAAE,CAAC;QACnE,MAAM,MAAM,GAAG,oBAAoB,CAAC,IAAI,CAAC,CAAC;QAC1C,MAAM,IAAI,GAAsB,EAAE,CAAC;QAEnC,KAAK,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YACtD,MAAM,GAAG,GAAG,OAAkC,CAAC;YAC/C,IAAI,GAAG,CAAC,OAAO,IAAI,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;gBACnD,MAAM,SAAS,GAAG;oBAChB,OAAO,GAAG,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS;oBACrD,GAAG,qBAAqB,CAAC,GAAG,CAAC;oBAC7B,GAAG,MAAM;iBACV,CAAC,MAAM,CAAC,CAAC,KAAK,EAAmB,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC;gBAChE,IAAI,CAAC,IAAI,CAAC;oBACR,KAAK;oBACL,SAAS;oBACT,OAAO,EAAE,GAAG,CAAC,OAAO;oBACpB,UAAU,EAAE,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC;oBACvC,KAAK,EAAE,aAAa,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;oBAClC,GAAG,cAAc,CAAC,SAAS,CAAC;oBAC5B,MAAM,EAAE,OAAO,GAAG,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS;oBAC/D,UAAU,EAAE,OAAO,GAAG,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS;iBAC5E,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;;;;OAKG;IACK,KAAK,CAAC,uBAAuB;QACnC,MAAM,YAAY,GAAG,iBAAG,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC,CAAC;QAClE,IAAI,MAA4F,CAAC;QACjG,IAAI,CAAC;YACH,MAAM,GAAG,MAAM,IAAA,iBAAY,EAAC,IAAI,CAAC,EAAE,EAAE,IAAA,iBAAG,EAAA;6CACD,YAAY;;OAElD,CAAC,CAAC;QACL,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,MAAM,WAAW,GAAG,IAAI,GAAG,EAAmC,CAAC;QAC/D,MAAM,kBAAkB,GAAG,IAAI,GAAG,EAAoB,CAAC;QACvD,MAAM,iBAAiB,GAAG,IAAI,GAAG,EAAoB,CAAC;QAEtD,KAAK,MAAM,GAAG,IAAI,MAAM,EAAE,IAAI,IAAI,EAAE,EAAE,CAAC;YACrC,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC;gBAC9B,SAAS;YACX,CAAC;YACD,MAAM,OAAO,GAAG,kBAAkB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YAChD,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,SAAS;YACX,CAAC;YAED,IAAI,GAAG,CAAC,SAAS,KAAK,KAAK,EAAE,CAAC;gBAC5B,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;gBACjC,SAAS;YACX,CAAC;YAED,IAAI,GAAG,CAAC,SAAS,KAAK,OAAO,EAAE,CAAC;gBAC9B,MAAM,KAAK,GAAG,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;gBACzC,MAAM,KAAK,GAAG,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;gBACzC,IAAI,KAAK,IAAI,KAAK,EAAE,CAAC;oBACnB,cAAc,CAAC,kBAAkB,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;gBACnD,CAAC;gBACD,SAAS;YACX,CAAC;YAED,IAAI,GAAG,CAAC,SAAS,KAAK,WAAW,EAAE,CAAC;gBAClC,MAAM,SAAS,GAAG,WAAW,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;gBACjD,MAAM,KAAK,GAAG,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;gBACzC,IAAI,SAAS,IAAI,KAAK,EAAE,CAAC;oBACvB,cAAc,CAAC,iBAAiB,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;gBACtD,CAAC;YACH,CAAC;QACH,CAAC;QAED,MAAM,IAAI,GAAsB,EAAE,CAAC;QACnC,KAAK,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,IAAI,WAAW,EAAE,CAAC;YACvC,MAAM,OAAO,GAAG,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YACzC,MAAM,SAAS,GAAG,WAAW,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YAC7C,IAAI,CAAC,OAAO,IAAI,CAAC,SAAS,EAAE,CAAC;gBAC3B,SAAS;YACX,CAAC;YACD,MAAM,SAAS,GAAG,aAAa,CAAC;gBAC9B,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC;gBACtB,GAAG,CAAC,kBAAkB,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;gBACxC,GAAG,CAAC,iBAAiB,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;aAC5C,CAAC,MAAM,CAAC,CAAC,KAAK,EAAmB,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC;YAEjE,IAAI,CAAC,IAAI,CAAC;gBACR,KAAK;gBACL,SAAS;gBACT,OAAO;gBACP,UAAU,EAAE,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC;gBACvC,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC;gBACnB,GAAG,cAAc,CAAC,SAAS,CAAC;gBAC5B,MAAM,EAAE,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC;gBAC/B,UAAU,EAAE,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC;aACxC,CAAC,CAAC;QACL,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;CACF;AAzeD,kDAyeC;AAED,SAAS,kCAAkC,CAAC,GAAW;IACrD,MAAM,MAAM,GAAG,gBAAgB,CAAC;IAChC,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAClC,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;QACd,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,SAAS,GAAG,GAAG,CAAC,KAAK,CAAC,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;IAC3E,OAAO,SAAS,IAAI,SAAS,CAAC;AAChC,CAAC;AAED,SAAS,oBAAoB,CAAC,IAAa;IACzC,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;QACtC,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,MAAM,MAAM,GAAG,IAA+B,CAAC;IAC/C,MAAM,OAAO,GAAG,MAAM,CAAC,eAAe,CAAC,IAAI,MAAM,CAAC,SAAS,IAAI,EAAE,CAAC;IAClE,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;QAC5C,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,OAAO,MAAM,CAAC,MAAM,CAAC,OAAkC,CAAC;SACrD,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;QACb,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YACxC,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,MAAM,KAAK,GAAI,KAAiC,CAAC,KAAK,CAAC;QACvD,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;IACvD,CAAC,CAAC;SACD,MAAM,CAAC,CAAC,KAAK,EAAmB,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC;AACnE,CAAC;AAED,SAAS,qBAAqB,CAAC,GAA4B;IACzD,MAAM,QAAQ,GAAG,GAAG,CAAC,WAAW,CAAC,IAAI,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC;IACrD,IAAI,CAAC,QAAQ,IAAI,OAAO,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC9C,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,OAAO,MAAM,CAAC,MAAM,CAAC,QAAmC,CAAC;SACtD,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;QACb,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YACxC,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,MAAM,KAAK,GAAI,KAAiC,CAAC,KAAK,CAAC;QACvD,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;IACvD,CAAC,CAAC;SACD,MAAM,CAAC,CAAC,KAAK,EAAmB,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC;AACnE,CAAC;AAED,SAAS,cAAc,CAAC,KAAyB;IAC/C,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,CAAC;QACH,OAAO,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,QAAQ,EAAE,CAAC;IACnC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CAAC,MAAgB;IACrC,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;AAC9B,CAAC;AAED,SAAS,YAAY,CAAC,GAAoB;IACxC,OAAO,aAAa,CAAC;QACnB,GAAG,CAAC,KAAK;QACT,GAAG,CAAC,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC;KACtB,CAAC,MAAM,CAAC,CAAC,KAAK,EAAmB,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC;AACvF,CAAC;AAED,SAAS,cAAc,CAAC,MAAgB;IACtC,MAAM,MAAM,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;IACrC,OAAO,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;AAC7C,CAAC;AAED,SAAS,qBAAqB,CAAC,MAAyB;IACtD,MAAM,OAAO,GAAG,IAAI,GAAG,EAA2B,CAAC;IACnD,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC1C,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;YAChC,SAAS;QACX,CAAC;QAED,MAAM,MAAM,GAAG,aAAa,CAAC;YAC3B,GAAG,YAAY,CAAC,QAAQ,CAAC;YACzB,GAAG,YAAY,CAAC,KAAK,CAAC;SACvB,CAAC,CAAC;QACH,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,EAAE;YACvB,GAAG,QAAQ;YACX,OAAO,EAAE,QAAQ,CAAC,OAAO,IAAI,KAAK,CAAC,OAAO;YAC1C,UAAU,EAAE,QAAQ,CAAC,UAAU,IAAI,KAAK,CAAC,UAAU;YACnD,SAAS,EAAE,QAAQ,CAAC,SAAS,IAAI,KAAK,CAAC,SAAS;YAChD,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC;YAChB,GAAG,cAAc,CAAC,MAAM,CAAC;YACzB,MAAM,EAAE,QAAQ,CAAC,MAAM,IAAI,KAAK,CAAC,MAAM;YACvC,UAAU,EAAE,QAAQ,CAAC,UAAU,IAAI,KAAK,CAAC,UAAU;SACpD,CAAC,CAAC;IACL,CAAC;IACD,OAAO,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;AAC/B,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAc;IACxC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAY,CAAC;YAC5C,MAAM,SAAS,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;YAC5C,OAAO,SAAS,IAAI,OAAO,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAoC,CAAC,CAAC,CAAC,SAAS,CAAC;QACvG,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,SAAS,CAAC;QACnB,CAAC;IACH,CAAC;IACD,MAAM,SAAS,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC;IAC3C,OAAO,OAAO,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAoC,CAAC,CAAC,CAAC,SAAS,CAAC;AAC1F,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAc;IACtC,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,IAAI,CAAC;YACH,OAAO,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;QAC9C,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,SAAS,CAAC;QACnB,CAAC;IACH,CAAC;IACD,OAAO,iBAAiB,CAAC,KAAK,CAAC,CAAC;AAClC,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAc;IACvC,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,IAAI,KAAK,IAAI,SAAS,IAAI,KAAK,EAAE,CAAC;QAC/E,OAAQ,KAAiC,CAAC,OAAO,CAAC;IACpD,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,WAAW,CAAC,KAAc;IACjC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AAC3E,CAAC;AAED,SAAS,cAAc,CAAC,GAA0B,EAAE,GAAW,EAAE,KAAa;IAC5E,MAAM,MAAM,GAAG,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;IAClC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACnB,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;AACvB,CAAC","sourcesContent":["import { sql } from 'drizzle-orm';\nimport { type IdentityDatabase, executeQuery, executeStatement } from './db';\n\nexport interface PodLookupResult {\n  podId: string;\n  accountId: string;\n  baseUrl: string;\n  storageUrl?: string;\n  webId?: string;\n  webIds?: string[];\n  nodeId?: string;\n  edgeNodeId?: string;\n}\n\nexport interface PodMigrationStatus {\n  podId: string;\n  nodeId?: string;\n  migrationStatus?: 'syncing' | 'done' | null;\n  migrationTargetNode?: string;\n  migrationProgress?: number;\n}\n\ninterface InternalKvRow {\n  key?: string;\n  value?: string;\n  id?: string;\n  account_id?: string;\n  base_url?: string;\n  storage_url?: string;\n  node_id?: string;\n  edge_node_id?: string;\n}\n\ninterface PodUsageRow {\n  pod_id?: string;\n  storage_url?: string | null;\n}\n\n/**\n * Repository for Pod lookup operations.\n *\n * Reads Pod data from CSS's internal_kv table where account data is stored.\n * CSS stores account data at key \"accounts/data/{accountId}\" with Pod info\n * nested in the \"**pod**\" field.\n */\nexport class PodLookupRepository {\n  private readonly kvTableName: string;\n  private readonly indexedStoreTableName: string;\n  private readonly usageTableName: string;\n\n  public constructor(\n    private readonly db: IdentityDatabase,\n    kvTableName?: string,\n  ) {\n    this.kvTableName = kvTableName ?? 'internal_kv';\n    this.indexedStoreTableName = 'identity_store';\n    this.usageTableName = 'identity_pod_usage';\n  }\n\n  /**\n   * Find Pod by resource path (matches longest canonical storage/base URL prefix).\n   */\n  public async findByResourceIdentifier(resourcePath: string): Promise<PodLookupResult | undefined> {\n    const pods = await this.getAllPods();\n\n    let bestMatch: PodLookupResult | undefined;\n    let bestLength = 0;\n\n    for (const pod of pods) {\n      const candidateBase = pod.storageUrl ?? pod.baseUrl;\n      if (resourcePath.startsWith(candidateBase) && candidateBase.length > bestLength) {\n        bestMatch = pod;\n        bestLength = candidateBase.length;\n      }\n    }\n\n    return bestMatch;\n  }\n\n  /**\n   * Get Pod by ID.\n   */\n  public async findById(podId: string): Promise<PodLookupResult | undefined> {\n    const pods = await this.getAllPods();\n    return pods.find((p) => p.podId === podId);\n  }\n\n  /**\n   * Find Pod by a linked WebID URL.\n   *\n   * CSS account data stores WebID links separately from Pod base URLs. This is\n   * the precise lookup for IdP/SP split deployments where the WebID path does\n   * not have to match the storage base URL.\n   */\n  public async findByWebId(webId: string): Promise<PodLookupResult | undefined> {\n    const normalized = normalizeWebId(webId);\n    if (!normalized) {\n      return undefined;\n    }\n\n    const pods = await this.getAllPods();\n    for (const pod of pods) {\n      const matchedWebId = getPodWebIds(pod).find((candidate) => normalizeWebId(candidate) === normalized);\n      if (matchedWebId) {\n        return {\n          ...pod,\n          webId: matchedWebId,\n        };\n      }\n    }\n    const indexed = await this.findByWebIdIndex(normalized);\n    if (!indexed) {\n      return undefined;\n    }\n    const usage = await this.getUsageByPodId();\n    return {\n      ...indexed,\n      storageUrl: indexed.storageUrl ?? usage.get(indexed.podId)?.storageUrl,\n    };\n  }\n\n  /**\n   * Find Pods by linked WebID URLs in one scan.\n   */\n  public async findByWebIds(webIds: string[]): Promise<PodLookupResult[]> {\n    const normalizedTargets = new Set(webIds.map(normalizeWebId).filter((value): value is string => Boolean(value)));\n    if (normalizedTargets.size === 0) {\n      return [];\n    }\n\n    const results: PodLookupResult[] = [];\n    const pods = await this.getAllPods();\n    for (const pod of pods) {\n      const matchedWebId = getPodWebIds(pod).find((candidate) => {\n        const normalized = normalizeWebId(candidate);\n        return normalized ? normalizedTargets.has(normalized) : false;\n      });\n      if (!matchedWebId) {\n        continue;\n      }\n      results.push({\n        ...pod,\n        webId: matchedWebId,\n      });\n    }\n    if (results.length < normalizedTargets.size) {\n      const seen = new Set(results.map((result) => normalizeWebId(result.webId)).filter(Boolean));\n      for (const normalized of normalizedTargets) {\n        if (seen.has(normalized)) {\n          continue;\n        }\n        const indexed = await this.findByWebIdIndex(normalized);\n        if (indexed) {\n          const usage = await this.getUsageByPodId();\n          results.push({\n            ...indexed,\n            storageUrl: indexed.storageUrl ?? usage.get(indexed.podId)?.storageUrl,\n          });\n        }\n      }\n    }\n    return results;\n  }\n\n  /**\n   * List Pods for a specific account.\n   */\n  public async listByAccountId(accountId: string): Promise<PodLookupResult[]> {\n    const pods = await this.getAllPods();\n    return pods.filter((pod) => pod.accountId === accountId);\n  }\n\n  /**\n   * Set the canonical storage URL for a Pod in identity_pod_usage.\n   */\n  public async setStorageUrl(podId: string, accountId: string, storageUrl: string): Promise<void> {\n    const tableId = sql.identifier([this.usageTableName]);\n    await executeStatement(this.db, sql`\n      INSERT INTO ${tableId} (pod_id, account_id, storage_url)\n      VALUES (${podId}, ${accountId}, ${storageUrl})\n      ON CONFLICT (pod_id) DO UPDATE SET\n        account_id = ${accountId},\n        storage_url = ${storageUrl}\n    `);\n  }\n\n  /**\n   * Get migration status for a Pod from identity_pod_usage table.\n   */\n  public async getMigrationStatus(podId: string): Promise<PodMigrationStatus | undefined> {\n    try {\n      const tableId = sql.identifier([this.usageTableName]);\n      const result = await executeQuery<{\n        pod_id?: string;\n        id?: string;\n        node_id?: string | null;\n        migration_status?: string | null;\n        migration_target_node?: string | null;\n        migration_progress?: number | null;\n      }>(this.db, sql`\n        SELECT pod_id, node_id, migration_status, migration_target_node, migration_progress\n        FROM ${tableId}\n        WHERE pod_id = ${podId}\n        LIMIT 1\n      `);\n\n      if (result.rows.length === 0) {\n        return undefined;\n      }\n      const row = result.rows[0];\n      return {\n        podId: row.pod_id ?? row.id ?? podId,\n        nodeId: row.node_id ?? undefined,\n        migrationStatus: row.migration_status as 'syncing' | 'done' | null | undefined,\n        migrationTargetNode: row.migration_target_node ?? undefined,\n        migrationProgress: row.migration_progress ?? undefined,\n      };\n    } catch {\n      // Table might not exist.\n      return undefined;\n    }\n  }\n\n  /**\n   * Set the nodeId for a Pod in identity_pod_usage table.\n   */\n  public async setNodeId(podId: string, nodeId: string): Promise<void> {\n    const tableId = sql.identifier([this.usageTableName]);\n    await executeStatement(this.db, sql`\n      INSERT INTO ${tableId} (pod_id, account_id, node_id)\n      VALUES (${podId}, '', ${nodeId})\n      ON CONFLICT (pod_id) DO UPDATE SET node_id = ${nodeId}\n    `);\n  }\n\n  /**\n   * Update migration status for a Pod in identity_pod_usage table.\n   */\n  public async setMigrationStatus(\n    podId: string,\n    status: 'syncing' | 'done' | null,\n    targetNode?: string | null,\n    progress?: number | null,\n  ): Promise<void> {\n    const tableId = sql.identifier([this.usageTableName]);\n    await executeStatement(this.db, sql`\n      INSERT INTO ${tableId} (pod_id, account_id, migration_status, migration_target_node, migration_progress)\n      VALUES (${podId}, '', ${status}, ${targetNode ?? null}, ${progress ?? 0})\n      ON CONFLICT (pod_id) DO UPDATE SET\n        migration_status = ${status},\n        migration_target_node = ${targetNode ?? null},\n        migration_progress = ${progress ?? 0}\n    `);\n  }\n\n  /**\n   * List all pods.\n   */\n  public async listAllPods(): Promise<PodLookupResult[]> {\n    return this.getAllPods();\n  }\n\n  /**\n   * Extract all pods from CSS's internal_kv storage.\n   *\n   * It keeps backward compatibility with legacy rows that already expose\n   * id/account_id/base_url columns (used by some unit tests and older schemas).\n   */\n  private async getAllPods(): Promise<PodLookupResult[]> {\n    const kvTableId = sql.identifier([this.kvTableName]);\n\n    const result = await executeQuery<InternalKvRow>(this.db, sql`\n      SELECT key, value FROM ${kvTableId}\n      WHERE key LIKE 'accounts/data/%'\n         OR key LIKE '/.internal/accounts/data/%'\n    `);\n    const usageByPodId = await this.getUsageByPodId();\n\n    const pods: PodLookupResult[] = [];\n\n    for (const row of result?.rows ?? []) {\n      if (row.id && row.account_id && row.base_url) {\n        pods.push({\n          podId: String(row.id),\n          accountId: String(row.account_id),\n          baseUrl: String(row.base_url),\n          storageUrl: row.storage_url ? String(row.storage_url) : undefined,\n          nodeId: row.node_id ? String(row.node_id) : undefined,\n          edgeNodeId: row.edge_node_id ? String(row.edge_node_id) : undefined,\n        });\n        continue;\n      }\n\n      if (!row.key || row.value === undefined) {\n        continue;\n      }\n\n      try {\n        const accountId = extractAccountIdFromAccountDataKey(row.key);\n        if (!accountId) {\n          continue;\n        }\n        const data = unwrapStoredValue(typeof row.value === 'string' ? JSON.parse(row.value) : row.value);\n\n        const podMap = (data as any)['**pod**'] || (data as any).pod || {};\n        const webIds = extractAccountWebIds(data);\n\n        for (const [podId, podData] of Object.entries(podMap)) {\n          const pod = podData as Record<string, unknown>;\n          if (pod.baseUrl && typeof pod.baseUrl === 'string') {\n            const usage = usageByPodId.get(podId);\n            const podWebIds = [\n              typeof pod.webId === 'string' ? pod.webId : undefined,\n              ...extractPodOwnerWebIds(pod),\n              ...webIds,\n            ].filter((value): value is string => typeof value === 'string');\n            pods.push({\n              podId,\n              accountId,\n              baseUrl: pod.baseUrl,\n              storageUrl: stringValue(pod.storageUrl) ?? usage?.storageUrl,\n              webId: dedupeStrings(podWebIds)[0],\n              ...webIdsProperty(podWebIds),\n              nodeId: typeof pod.nodeId === 'string' ? pod.nodeId : undefined,\n              edgeNodeId: typeof pod.edgeNodeId === 'string' ? pod.edgeNodeId : undefined,\n            });\n          }\n        }\n      } catch {\n        // Skip malformed entries.\n      }\n    }\n\n    return mergePodLookupResults([\n      ...pods,\n      ...await this.getPodsFromIndexedStore(),\n    ]);\n  }\n\n  private async getUsageByPodId(): Promise<Map<string, { storageUrl?: string }>> {\n    const tableId = sql.identifier([this.usageTableName]);\n    try {\n      const result = await executeQuery<PodUsageRow>(this.db, sql`\n        SELECT pod_id, storage_url FROM ${tableId}\n      `);\n      const byPodId = new Map<string, { storageUrl?: string }>();\n      for (const row of result.rows) {\n        if (!row.pod_id) {\n          continue;\n        }\n        byPodId.set(row.pod_id, {\n          storageUrl: row.storage_url ?? undefined,\n        });\n      }\n      return byPodId;\n    } catch {\n      return new Map();\n    }\n  }\n\n  /**\n   * Fast path for CSS WrappedIndexedStorage. WebID indexes point to the root\n   * account id, so a single indexed key plus account data row can resolve the\n   * profile without scanning all account records.\n   */\n  private async findByWebIdIndex(webId: string): Promise<PodLookupResult | undefined> {\n    const accountIds = await this.readStringArrayFromKv(`accounts/index/webIdLink/webId/${encodeURIComponent(webId)}`);\n    for (const accountId of accountIds) {\n      const account = await this.readAccountData(accountId);\n      if (!account) {\n        continue;\n      }\n      const pods = this.extractPodsFromAccountData(accountId, account);\n      const match = pods.find((pod) => getPodWebIds(pod).some((candidate) => normalizeWebId(candidate) === webId));\n      if (match) {\n        return {\n          ...match,\n          webId,\n        };\n      }\n      if (pods.length === 1) {\n        return {\n          ...pods[0],\n          webId,\n          ...webIdsProperty([webId, ...getPodWebIds(pods[0])]),\n        };\n      }\n    }\n    return undefined;\n  }\n\n  private async readAccountData(accountId: string): Promise<Record<string, unknown> | undefined> {\n    for (const key of [`accounts/data/${accountId}`, `/.internal/accounts/data/${accountId}`]) {\n      const value = await this.readKvValue(key);\n      const record = parsePayloadRecord(value);\n      if (record) {\n        return record;\n      }\n    }\n    return undefined;\n  }\n\n  private async readStringArrayFromKv(key: string): Promise<string[]> {\n    const value = await this.readKvValue(key);\n    return Array.isArray(value) ? value.filter((entry): entry is string => typeof entry === 'string') : [];\n  }\n\n  private async readKvValue(key: string): Promise<unknown> {\n    const tableId = sql.identifier([this.kvTableName]);\n    try {\n      const result = await executeQuery<{ value?: unknown }>(this.db, sql`\n        SELECT value FROM ${tableId}\n        WHERE key = ${key}\n        LIMIT 1\n      `);\n      if (result.rows.length === 0) {\n        return undefined;\n      }\n      return parseStoredValue(result.rows[0].value);\n    } catch {\n      return undefined;\n    }\n  }\n\n  private extractPodsFromAccountData(accountId: string, data: Record<string, unknown>): PodLookupResult[] {\n    const podMap = (data as any)['**pod**'] || (data as any).pod || {};\n    const webIds = extractAccountWebIds(data);\n    const pods: PodLookupResult[] = [];\n\n    for (const [podId, podData] of Object.entries(podMap)) {\n      const pod = podData as Record<string, unknown>;\n      if (pod.baseUrl && typeof pod.baseUrl === 'string') {\n        const podWebIds = [\n          typeof pod.webId === 'string' ? pod.webId : undefined,\n          ...extractPodOwnerWebIds(pod),\n          ...webIds,\n        ].filter((value): value is string => typeof value === 'string');\n        pods.push({\n          podId,\n          accountId,\n          baseUrl: pod.baseUrl,\n          storageUrl: stringValue(pod.storageUrl),\n          webId: dedupeStrings(podWebIds)[0],\n          ...webIdsProperty(podWebIds),\n          nodeId: typeof pod.nodeId === 'string' ? pod.nodeId : undefined,\n          edgeNodeId: typeof pod.edgeNodeId === 'string' ? pod.edgeNodeId : undefined,\n        });\n      }\n    }\n\n    return pods;\n  }\n\n  /**\n   * Older Xpod/CSS deployments may have used the IndexedStorage-compatible\n   * identity_store table instead of CSS's WrappedIndexedStorage JSON tree in\n   * internal_kv. Keep this as a read-only compatibility source so hosted WebID\n   * profile lookup still works after storage implementation changes.\n   */\n  private async getPodsFromIndexedStore(): Promise<PodLookupResult[]> {\n    const storeTableId = sql.identifier([this.indexedStoreTableName]);\n    let result: { rows?: Array<{ container?: string; id?: string; payload?: unknown }> } | undefined;\n    try {\n      result = await executeQuery(this.db, sql`\n        SELECT container, id, payload FROM ${storeTableId}\n        WHERE container IN ('pod', 'owner', 'webIdLink')\n      `);\n    } catch {\n      return [];\n    }\n\n    const podPayloads = new Map<string, Record<string, unknown>>();\n    const ownerWebIdsByPodId = new Map<string, string[]>();\n    const webIdsByAccountId = new Map<string, string[]>();\n\n    for (const row of result?.rows ?? []) {\n      if (!row.id || !row.container) {\n        continue;\n      }\n      const payload = parsePayloadRecord(row.payload);\n      if (!payload) {\n        continue;\n      }\n\n      if (row.container === 'pod') {\n        podPayloads.set(row.id, payload);\n        continue;\n      }\n\n      if (row.container === 'owner') {\n        const podId = stringValue(payload.podId);\n        const webId = stringValue(payload.webId);\n        if (podId && webId) {\n          appendMapValue(ownerWebIdsByPodId, podId, webId);\n        }\n        continue;\n      }\n\n      if (row.container === 'webIdLink') {\n        const accountId = stringValue(payload.accountId);\n        const webId = stringValue(payload.webId);\n        if (accountId && webId) {\n          appendMapValue(webIdsByAccountId, accountId, webId);\n        }\n      }\n    }\n\n    const pods: PodLookupResult[] = [];\n    for (const [podId, pod] of podPayloads) {\n      const baseUrl = stringValue(pod.baseUrl);\n      const accountId = stringValue(pod.accountId);\n      if (!baseUrl || !accountId) {\n        continue;\n      }\n      const podWebIds = dedupeStrings([\n        stringValue(pod.webId),\n        ...(ownerWebIdsByPodId.get(podId) ?? []),\n        ...(webIdsByAccountId.get(accountId) ?? []),\n      ].filter((value): value is string => typeof value === 'string'));\n\n      pods.push({\n        podId,\n        accountId,\n        baseUrl,\n        storageUrl: stringValue(pod.storageUrl),\n        webId: podWebIds[0],\n        ...webIdsProperty(podWebIds),\n        nodeId: stringValue(pod.nodeId),\n        edgeNodeId: stringValue(pod.edgeNodeId),\n      });\n    }\n\n    return pods;\n  }\n}\n\nfunction extractAccountIdFromAccountDataKey(key: string): string | undefined {\n  const marker = 'accounts/data/';\n  const index = key.indexOf(marker);\n  if (index < 0) {\n    return undefined;\n  }\n  const accountId = key.slice(index + marker.length).replace(/\\.json$/u, '');\n  return accountId || undefined;\n}\n\nfunction extractAccountWebIds(data: unknown): string[] {\n  if (!data || typeof data !== 'object') {\n    return [];\n  }\n\n  const record = data as Record<string, unknown>;\n  const linkMap = record['**webIdLink**'] || record.webIdLink || {};\n  if (!linkMap || typeof linkMap !== 'object') {\n    return [];\n  }\n\n  return Object.values(linkMap as Record<string, unknown>)\n    .map((value) => {\n      if (!value || typeof value !== 'object') {\n        return undefined;\n      }\n      const webId = (value as Record<string, unknown>).webId;\n      return typeof webId === 'string' ? webId : undefined;\n    })\n    .filter((value): value is string => typeof value === 'string');\n}\n\nfunction extractPodOwnerWebIds(pod: Record<string, unknown>): string[] {\n  const ownerMap = pod['**owner**'] || pod.owner || {};\n  if (!ownerMap || typeof ownerMap !== 'object') {\n    return [];\n  }\n\n  return Object.values(ownerMap as Record<string, unknown>)\n    .map((value) => {\n      if (!value || typeof value !== 'object') {\n        return undefined;\n      }\n      const webId = (value as Record<string, unknown>).webId;\n      return typeof webId === 'string' ? webId : undefined;\n    })\n    .filter((value): value is string => typeof value === 'string');\n}\n\nfunction normalizeWebId(webId: string | undefined): string | undefined {\n  if (!webId) {\n    return undefined;\n  }\n  try {\n    return new URL(webId).toString();\n  } catch {\n    return webId;\n  }\n}\n\nfunction dedupeStrings(values: string[]): string[] {\n  return [...new Set(values)];\n}\n\nfunction getPodWebIds(pod: PodLookupResult): string[] {\n  return dedupeStrings([\n    pod.webId,\n    ...(pod.webIds ?? []),\n  ].filter((value): value is string => typeof value === 'string' && value.length > 0));\n}\n\nfunction webIdsProperty(values: string[]): Pick<PodLookupResult, 'webIds'> {\n  const webIds = dedupeStrings(values);\n  return webIds.length > 1 ? { webIds } : {};\n}\n\nfunction mergePodLookupResults(values: PodLookupResult[]): PodLookupResult[] {\n  const byPodId = new Map<string, PodLookupResult>();\n  for (const value of values) {\n    const existing = byPodId.get(value.podId);\n    if (!existing) {\n      byPodId.set(value.podId, value);\n      continue;\n    }\n\n    const webIds = dedupeStrings([\n      ...getPodWebIds(existing),\n      ...getPodWebIds(value),\n    ]);\n    byPodId.set(value.podId, {\n      ...existing,\n      baseUrl: existing.baseUrl || value.baseUrl,\n      storageUrl: existing.storageUrl ?? value.storageUrl,\n      accountId: existing.accountId || value.accountId,\n      webId: webIds[0],\n      ...webIdsProperty(webIds),\n      nodeId: existing.nodeId ?? value.nodeId,\n      edgeNodeId: existing.edgeNodeId ?? value.edgeNodeId,\n    });\n  }\n  return [...byPodId.values()];\n}\n\nfunction parsePayloadRecord(value: unknown): Record<string, unknown> | undefined {\n  if (!value) {\n    return undefined;\n  }\n  if (typeof value === 'string') {\n    try {\n      const parsed = JSON.parse(value) as unknown;\n      const unwrapped = unwrapStoredValue(parsed);\n      return unwrapped && typeof unwrapped === 'object' ? unwrapped as Record<string, unknown> : undefined;\n    } catch {\n      return undefined;\n    }\n  }\n  const unwrapped = unwrapStoredValue(value);\n  return typeof unwrapped === 'object' ? unwrapped as Record<string, unknown> : undefined;\n}\n\nfunction parseStoredValue(value: unknown): unknown {\n  if (typeof value === 'string') {\n    try {\n      return unwrapStoredValue(JSON.parse(value));\n    } catch {\n      return undefined;\n    }\n  }\n  return unwrapStoredValue(value);\n}\n\nfunction unwrapStoredValue(value: unknown): unknown {\n  if (value && typeof value === 'object' && 'key' in value && 'payload' in value) {\n    return (value as Record<string, unknown>).payload;\n  }\n  return value;\n}\n\nfunction stringValue(value: unknown): string | undefined {\n  return typeof value === 'string' && value.length > 0 ? value : undefined;\n}\n\nfunction appendMapValue(map: Map<string, string[]>, key: string, value: string): void {\n  const values = map.get(key) ?? [];\n  values.push(value);\n  map.set(key, values);\n}\n"]}
+{"version":3,"file":"PodLookupRepository.js","sourceRoot":"","sources":["../../../src/identity/drizzle/PodLookupRepository.ts"],"names":[],"mappings":";;;AAAA,6CAAkC;AAClC,6BAA6E;AAqC7E;;;;;;GAMG;AACH,MAAa,mBAAmB;IAK9B,YACmB,EAAoB,EACrC,WAAoB;QADH,OAAE,GAAF,EAAE,CAAkB;QAGrC,IAAI,CAAC,WAAW,GAAG,WAAW,IAAI,aAAa,CAAC;QAChD,IAAI,CAAC,qBAAqB,GAAG,gBAAgB,CAAC;QAC9C,IAAI,CAAC,cAAc,GAAG,oBAAoB,CAAC;IAC7C,CAAC;IAED;;OAEG;IACI,KAAK,CAAC,wBAAwB,CAAC,YAAoB;QACxD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC;QAErC,IAAI,SAAsC,CAAC;QAC3C,IAAI,UAAU,GAAG,CAAC,CAAC;QAEnB,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,MAAM,aAAa,GAAG,GAAG,CAAC,UAAU,IAAI,GAAG,CAAC,OAAO,CAAC;YACpD,IAAI,YAAY,CAAC,UAAU,CAAC,aAAa,CAAC,IAAI,aAAa,CAAC,MAAM,GAAG,UAAU,EAAE,CAAC;gBAChF,SAAS,GAAG,GAAG,CAAC;gBAChB,UAAU,GAAG,aAAa,CAAC,MAAM,CAAC;YACpC,CAAC;QACH,CAAC;QAED,OAAO,SAAS,CAAC;IACnB,CAAC;IAED;;OAEG;IACI,KAAK,CAAC,QAAQ,CAAC,KAAa;QACjC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC;QACrC,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,KAAK,CAAC,CAAC;IAC7C,CAAC;IAED;;;;;;OAMG;IACI,KAAK,CAAC,WAAW,CAAC,KAAa;QACpC,OAAO,CAAC,MAAM,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/C,CAAC;IAED;;;;;;OAMG;IACI,KAAK,CAAC,cAAc,CAAC,KAAa;QACvC,MAAM,UAAU,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC;QACzC,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,MAAM,OAAO,GAAsB,EAAE,CAAC;QACtC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC;QACrC,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,MAAM,YAAY,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,cAAc,CAAC,SAAS,CAAC,KAAK,UAAU,CAAC,CAAC;YACrG,IAAI,YAAY,EAAE,CAAC;gBACjB,OAAO,CAAC,IAAI,CAAC;oBACX,GAAG,GAAG;oBACN,KAAK,EAAE,YAAY;iBACpB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvB,OAAO,OAAO,CAAC;QACjB,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,UAAU,CAAC,CAAC;QACxD,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,EAAE,CAAC;QACZ,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,eAAe,EAAE,CAAC;QAC3C,OAAO,CAAC;gBACN,GAAG,OAAO;gBACV,UAAU,EAAE,OAAO,CAAC,UAAU,IAAI,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,UAAU;aACvE,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACI,KAAK,CAAC,YAAY,CAAC,MAAgB;QACxC,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAmB,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QACjH,IAAI,iBAAiB,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;YACjC,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,MAAM,OAAO,GAAsB,EAAE,CAAC;QACtC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC;QACrC,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,MAAM,YAAY,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE;gBACxD,MAAM,UAAU,GAAG,cAAc,CAAC,SAAS,CAAC,CAAC;gBAC7C,OAAO,UAAU,CAAC,CAAC,CAAC,iBAAiB,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;YAChE,CAAC,CAAC,CAAC;YACH,IAAI,CAAC,YAAY,EAAE,CAAC;gBAClB,SAAS;YACX,CAAC;YACD,OAAO,CAAC,IAAI,CAAC;gBACX,GAAG,GAAG;gBACN,KAAK,EAAE,YAAY;aACpB,CAAC,CAAC;QACL,CAAC;QACD,IAAI,OAAO,CAAC,MAAM,GAAG,iBAAiB,CAAC,IAAI,EAAE,CAAC;YAC5C,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,cAAc,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;YAC5F,KAAK,MAAM,UAAU,IAAI,iBAAiB,EAAE,CAAC;gBAC3C,IAAI,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;oBACzB,SAAS;gBACX,CAAC;gBACD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,UAAU,CAAC,CAAC;gBACxD,IAAI,OAAO,EAAE,CAAC;oBACZ,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,eAAe,EAAE,CAAC;oBAC3C,OAAO,CAAC,IAAI,CAAC;wBACX,GAAG,OAAO;wBACV,UAAU,EAAE,OAAO,CAAC,UAAU,IAAI,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,UAAU;qBACvE,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;QACH,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAED;;OAEG;IACI,KAAK,CAAC,eAAe,CAAC,SAAiB;QAC5C,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC;QACrC,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC;IAC3D,CAAC;IAED;;OAEG;IACI,KAAK,CAAC,aAAa,CAAC,KAAa,EAAE,SAAiB,EAAE,UAAkB;QAC7E,MAAM,OAAO,GAAG,iBAAG,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC;QACtD,MAAM,IAAA,qBAAgB,EAAC,IAAI,CAAC,EAAE,EAAE,IAAA,iBAAG,EAAA;oBACnB,OAAO;gBACX,KAAK,KAAK,SAAS,KAAK,UAAU;;uBAE3B,SAAS;wBACR,UAAU;KAC7B,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACI,KAAK,CAAC,kBAAkB,CAAC,KAAa;QAC3C,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,iBAAG,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC;YACtD,MAAM,MAAM,GAAG,MAAM,IAAA,iBAAY,EAO9B,IAAI,CAAC,EAAE,EAAE,IAAA,iBAAG,EAAA;;eAEN,OAAO;yBACG,KAAK;;OAEvB,CAAC,CAAC;YAEH,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC7B,OAAO,SAAS,CAAC;YACnB,CAAC;YACD,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAC3B,OAAO;gBACL,KAAK,EAAE,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,EAAE,IAAI,KAAK;gBACpC,MAAM,EAAE,GAAG,CAAC,OAAO,IAAI,SAAS;gBAChC,eAAe,EAAE,GAAG,CAAC,gBAAyD;gBAC9E,mBAAmB,EAAE,GAAG,CAAC,qBAAqB,IAAI,SAAS;gBAC3D,iBAAiB,EAAE,GAAG,CAAC,kBAAkB,IAAI,SAAS;aACvD,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,yBAAyB;YACzB,OAAO,SAAS,CAAC;QACnB,CAAC;IACH,CAAC;IAED;;OAEG;IACI,KAAK,CAAC,SAAS,CAAC,KAAa,EAAE,MAAc;QAClD,MAAM,OAAO,GAAG,iBAAG,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC;QACtD,MAAM,IAAA,qBAAgB,EAAC,IAAI,CAAC,EAAE,EAAE,IAAA,iBAAG,EAAA;oBACnB,OAAO;gBACX,KAAK,SAAS,MAAM;qDACiB,MAAM;KACtD,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACI,KAAK,CAAC,kBAAkB,CAC7B,KAAa,EACb,MAAiC,EACjC,UAA0B,EAC1B,QAAwB;QAExB,MAAM,OAAO,GAAG,iBAAG,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC;QACtD,MAAM,IAAA,qBAAgB,EAAC,IAAI,CAAC,EAAE,EAAE,IAAA,iBAAG,EAAA;oBACnB,OAAO;gBACX,KAAK,SAAS,MAAM,KAAK,UAAU,IAAI,IAAI,KAAK,QAAQ,IAAI,CAAC;;6BAEhD,MAAM;kCACD,UAAU,IAAI,IAAI;+BACrB,QAAQ,IAAI,CAAC;KACvC,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACI,KAAK,CAAC,WAAW;QACtB,OAAO,IAAI,CAAC,UAAU,EAAE,CAAC;IAC3B,CAAC;IAED;;;;;OAKG;IACK,KAAK,CAAC,UAAU;QACtB,MAAM,SAAS,GAAG,iBAAG,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC;QAErD,MAAM,MAAM,GAAG,MAAM,IAAA,iBAAY,EAAgB,IAAI,CAAC,EAAE,EAAE,IAAA,iBAAG,EAAA;+BAClC,SAAS;;;KAGnC,CAAC,CAAC;QACH,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,eAAe,EAAE,CAAC;QAElD,MAAM,IAAI,GAAsB,EAAE,CAAC;QAEnC,KAAK,MAAM,GAAG,IAAI,MAAM,EAAE,IAAI,IAAI,EAAE,EAAE,CAAC;YACrC,IAAI,GAAG,CAAC,EAAE,IAAI,GAAG,CAAC,UAAU,IAAI,GAAG,CAAC,QAAQ,EAAE,CAAC;gBAC7C,IAAI,CAAC,IAAI,CAAC;oBACR,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;oBACrB,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC;oBACjC,OAAO,EAAE,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;oBAC7B,UAAU,EAAE,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,SAAS;oBACjE,MAAM,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS;oBACrD,UAAU,EAAE,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,SAAS;iBACpE,CAAC,CAAC;gBACH,SAAS;YACX,CAAC;YAED,IAAI,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;gBACxC,SAAS;YACX,CAAC;YAED,IAAI,CAAC;gBACH,MAAM,SAAS,GAAG,kCAAkC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;gBAC9D,IAAI,CAAC,SAAS,EAAE,CAAC;oBACf,SAAS;gBACX,CAAC;gBACD,MAAM,IAAI,GAAG,iBAAiB,CAAC,OAAO,GAAG,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;gBAElG,MAAM,MAAM,GAAI,IAAY,CAAC,SAAS,CAAC,IAAK,IAAY,CAAC,GAAG,IAAI,EAAE,CAAC;gBACnE,MAAM,MAAM,GAAG,oBAAoB,CAAC,IAAI,CAAC,CAAC;gBAE1C,KAAK,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;oBACtD,MAAM,GAAG,GAAG,OAAkC,CAAC;oBAC/C,IAAI,GAAG,CAAC,OAAO,IAAI,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;wBACnD,MAAM,KAAK,GAAG,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;wBACtC,MAAM,SAAS,GAAG;4BAChB,OAAO,GAAG,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS;4BACrD,GAAG,qBAAqB,CAAC,GAAG,CAAC;4BAC7B,GAAG,MAAM;yBACV,CAAC,MAAM,CAAC,CAAC,KAAK,EAAmB,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC;wBAChE,IAAI,CAAC,IAAI,CAAC;4BACR,KAAK;4BACL,SAAS;4BACT,OAAO,EAAE,GAAG,CAAC,OAAO;4BACpB,UAAU,EAAE,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,KAAK,EAAE,UAAU;4BAC5D,KAAK,EAAE,aAAa,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;4BAClC,GAAG,cAAc,CAAC,SAAS,CAAC;4BAC5B,MAAM,EAAE,OAAO,GAAG,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS;4BAC/D,UAAU,EAAE,OAAO,GAAG,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS;yBAC5E,CAAC,CAAC;oBACL,CAAC;gBACH,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,0BAA0B;YAC5B,CAAC;QACH,CAAC;QAED,OAAO,qBAAqB,CAAC;YAC3B,GAAG,IAAI;YACP,GAAG,MAAM,IAAI,CAAC,uBAAuB,EAAE;SACxC,CAAC,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,eAAe;QAC3B,MAAM,OAAO,GAAG,iBAAG,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC;QACtD,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAA,iBAAY,EAAc,IAAI,CAAC,EAAE,EAAE,IAAA,iBAAG,EAAA;0CACvB,OAAO;OAC1C,CAAC,CAAC;YACH,MAAM,OAAO,GAAG,IAAI,GAAG,EAAmC,CAAC;YAC3D,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;gBAC9B,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC;oBAChB,SAAS;gBACX,CAAC;gBACD,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE;oBACtB,UAAU,EAAE,GAAG,CAAC,WAAW,IAAI,SAAS;iBACzC,CAAC,CAAC;YACL,CAAC;YACD,OAAO,OAAO,CAAC;QACjB,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,GAAG,EAAE,CAAC;QACnB,CAAC;IACH,CAAC;IAED;;;;OAIG;IACK,KAAK,CAAC,gBAAgB,CAAC,KAAa;QAC1C,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,qBAAqB,CAAC,kCAAkC,kBAAkB,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACnH,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;YACnC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,SAAS,CAAC,CAAC;YACtD,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,SAAS;YACX,CAAC;YACD,MAAM,IAAI,GAAG,IAAI,CAAC,0BAA0B,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;YACjE,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,cAAc,CAAC,SAAS,CAAC,KAAK,KAAK,CAAC,CAAC,CAAC;YAC7G,IAAI,KAAK,EAAE,CAAC;gBACV,OAAO;oBACL,GAAG,KAAK;oBACR,KAAK;iBACN,CAAC;YACJ,CAAC;YACD,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACtB,OAAO;oBACL,GAAG,IAAI,CAAC,CAAC,CAAC;oBACV,KAAK;oBACL,GAAG,cAAc,CAAC,CAAC,KAAK,EAAE,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;iBACrD,CAAC;YACJ,CAAC;QACH,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IAEO,KAAK,CAAC,eAAe,CAAC,SAAiB;QAC7C,KAAK,MAAM,GAAG,IAAI,CAAC,iBAAiB,SAAS,EAAE,EAAE,4BAA4B,SAAS,EAAE,CAAC,EAAE,CAAC;YAC1F,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;YAC1C,MAAM,MAAM,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC;YACzC,IAAI,MAAM,EAAE,CAAC;gBACX,OAAO,MAAM,CAAC;YAChB,CAAC;QACH,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IAEO,KAAK,CAAC,qBAAqB,CAAC,GAAW;QAC7C,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;QAC1C,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,KAAK,EAAmB,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACzG,CAAC;IAEO,KAAK,CAAC,WAAW,CAAC,GAAW;QACnC,MAAM,OAAO,GAAG,iBAAG,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC;QACnD,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAA,iBAAY,EAAsB,IAAI,CAAC,EAAE,EAAE,IAAA,iBAAG,EAAA;4BAC7C,OAAO;sBACb,GAAG;;OAElB,CAAC,CAAC;YACH,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC7B,OAAO,SAAS,CAAC;YACnB,CAAC;YACD,OAAO,gBAAgB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QAChD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,SAAS,CAAC;QACnB,CAAC;IACH,CAAC;IAEO,0BAA0B,CAAC,SAAiB,EAAE,IAA6B;QACjF,MAAM,MAAM,GAAI,IAAY,CAAC,SAAS,CAAC,IAAK,IAAY,CAAC,GAAG,IAAI,EAAE,CAAC;QACnE,MAAM,MAAM,GAAG,oBAAoB,CAAC,IAAI,CAAC,CAAC;QAC1C,MAAM,IAAI,GAAsB,EAAE,CAAC;QAEnC,KAAK,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YACtD,MAAM,GAAG,GAAG,OAAkC,CAAC;YAC/C,IAAI,GAAG,CAAC,OAAO,IAAI,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;gBACnD,MAAM,SAAS,GAAG;oBAChB,OAAO,GAAG,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS;oBACrD,GAAG,qBAAqB,CAAC,GAAG,CAAC;oBAC7B,GAAG,MAAM;iBACV,CAAC,MAAM,CAAC,CAAC,KAAK,EAAmB,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC;gBAChE,IAAI,CAAC,IAAI,CAAC;oBACR,KAAK;oBACL,SAAS;oBACT,OAAO,EAAE,GAAG,CAAC,OAAO;oBACpB,UAAU,EAAE,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC;oBACvC,KAAK,EAAE,aAAa,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;oBAClC,GAAG,cAAc,CAAC,SAAS,CAAC;oBAC5B,MAAM,EAAE,OAAO,GAAG,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS;oBAC/D,UAAU,EAAE,OAAO,GAAG,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS;iBAC5E,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;;;;OAKG;IACK,KAAK,CAAC,uBAAuB;QACnC,MAAM,YAAY,GAAG,iBAAG,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC,CAAC;QAClE,IAAI,MAA4F,CAAC;QACjG,IAAI,CAAC;YACH,MAAM,GAAG,MAAM,IAAA,iBAAY,EAAC,IAAI,CAAC,EAAE,EAAE,IAAA,iBAAG,EAAA;6CACD,YAAY;;OAElD,CAAC,CAAC;QACL,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,MAAM,WAAW,GAAG,IAAI,GAAG,EAAmC,CAAC;QAC/D,MAAM,kBAAkB,GAAG,IAAI,GAAG,EAAoB,CAAC;QACvD,MAAM,iBAAiB,GAAG,IAAI,GAAG,EAAoB,CAAC;QAEtD,KAAK,MAAM,GAAG,IAAI,MAAM,EAAE,IAAI,IAAI,EAAE,EAAE,CAAC;YACrC,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC;gBAC9B,SAAS;YACX,CAAC;YACD,MAAM,OAAO,GAAG,kBAAkB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YAChD,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,SAAS;YACX,CAAC;YAED,IAAI,GAAG,CAAC,SAAS,KAAK,KAAK,EAAE,CAAC;gBAC5B,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;gBACjC,SAAS;YACX,CAAC;YAED,IAAI,GAAG,CAAC,SAAS,KAAK,OAAO,EAAE,CAAC;gBAC9B,MAAM,KAAK,GAAG,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;gBACzC,MAAM,KAAK,GAAG,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;gBACzC,IAAI,KAAK,IAAI,KAAK,EAAE,CAAC;oBACnB,cAAc,CAAC,kBAAkB,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;gBACnD,CAAC;gBACD,SAAS;YACX,CAAC;YAED,IAAI,GAAG,CAAC,SAAS,KAAK,WAAW,EAAE,CAAC;gBAClC,MAAM,SAAS,GAAG,WAAW,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;gBACjD,MAAM,KAAK,GAAG,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;gBACzC,IAAI,SAAS,IAAI,KAAK,EAAE,CAAC;oBACvB,cAAc,CAAC,iBAAiB,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;gBACtD,CAAC;YACH,CAAC;QACH,CAAC;QAED,MAAM,IAAI,GAAsB,EAAE,CAAC;QACnC,KAAK,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,IAAI,WAAW,EAAE,CAAC;YACvC,MAAM,OAAO,GAAG,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YACzC,MAAM,SAAS,GAAG,WAAW,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YAC7C,IAAI,CAAC,OAAO,IAAI,CAAC,SAAS,EAAE,CAAC;gBAC3B,SAAS;YACX,CAAC;YACD,MAAM,SAAS,GAAG,aAAa,CAAC;gBAC9B,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC;gBACtB,GAAG,CAAC,kBAAkB,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;gBACxC,GAAG,CAAC,iBAAiB,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;aAC5C,CAAC,MAAM,CAAC,CAAC,KAAK,EAAmB,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC;YAEjE,IAAI,CAAC,IAAI,CAAC;gBACR,KAAK;gBACL,SAAS;gBACT,OAAO;gBACP,UAAU,EAAE,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC;gBACvC,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC;gBACnB,GAAG,cAAc,CAAC,SAAS,CAAC;gBAC5B,MAAM,EAAE,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC;gBAC/B,UAAU,EAAE,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC;aACxC,CAAC,CAAC;QACL,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;CACF;AA1fD,kDA0fC;AAED,SAAS,kCAAkC,CAAC,GAAW;IACrD,MAAM,MAAM,GAAG,gBAAgB,CAAC;IAChC,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAClC,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;QACd,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,SAAS,GAAG,GAAG,CAAC,KAAK,CAAC,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;IAC3E,OAAO,SAAS,IAAI,SAAS,CAAC;AAChC,CAAC;AAED,SAAS,oBAAoB,CAAC,IAAa;IACzC,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;QACtC,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,MAAM,MAAM,GAAG,IAA+B,CAAC;IAC/C,MAAM,OAAO,GAAG,MAAM,CAAC,eAAe,CAAC,IAAI,MAAM,CAAC,SAAS,IAAI,EAAE,CAAC;IAClE,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;QAC5C,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,OAAO,MAAM,CAAC,MAAM,CAAC,OAAkC,CAAC;SACrD,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;QACb,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YACxC,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,MAAM,KAAK,GAAI,KAAiC,CAAC,KAAK,CAAC;QACvD,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;IACvD,CAAC,CAAC;SACD,MAAM,CAAC,CAAC,KAAK,EAAmB,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC;AACnE,CAAC;AAED,SAAS,qBAAqB,CAAC,GAA4B;IACzD,MAAM,QAAQ,GAAG,GAAG,CAAC,WAAW,CAAC,IAAI,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC;IACrD,IAAI,CAAC,QAAQ,IAAI,OAAO,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC9C,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,OAAO,MAAM,CAAC,MAAM,CAAC,QAAmC,CAAC;SACtD,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;QACb,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YACxC,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,MAAM,KAAK,GAAI,KAAiC,CAAC,KAAK,CAAC;QACvD,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;IACvD,CAAC,CAAC;SACD,MAAM,CAAC,CAAC,KAAK,EAAmB,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC;AACnE,CAAC;AAED,SAAS,cAAc,CAAC,KAAyB;IAC/C,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,CAAC;QACH,OAAO,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,QAAQ,EAAE,CAAC;IACnC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CAAC,MAAgB;IACrC,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;AAC9B,CAAC;AAED,SAAS,YAAY,CAAC,GAAoB;IACxC,OAAO,aAAa,CAAC;QACnB,GAAG,CAAC,KAAK;QACT,GAAG,CAAC,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC;KACtB,CAAC,MAAM,CAAC,CAAC,KAAK,EAAmB,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC;AACvF,CAAC;AAED,SAAS,cAAc,CAAC,MAAgB;IACtC,MAAM,MAAM,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;IACrC,OAAO,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;AAC7C,CAAC;AAED,SAAS,qBAAqB,CAAC,MAAyB;IACtD,MAAM,OAAO,GAAG,IAAI,GAAG,EAA2B,CAAC;IACnD,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC1C,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;YAChC,SAAS;QACX,CAAC;QAED,MAAM,MAAM,GAAG,aAAa,CAAC;YAC3B,GAAG,YAAY,CAAC,QAAQ,CAAC;YACzB,GAAG,YAAY,CAAC,KAAK,CAAC;SACvB,CAAC,CAAC;QACH,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,EAAE;YACvB,GAAG,QAAQ;YACX,OAAO,EAAE,QAAQ,CAAC,OAAO,IAAI,KAAK,CAAC,OAAO;YAC1C,UAAU,EAAE,QAAQ,CAAC,UAAU,IAAI,KAAK,CAAC,UAAU;YACnD,SAAS,EAAE,QAAQ,CAAC,SAAS,IAAI,KAAK,CAAC,SAAS;YAChD,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC;YAChB,GAAG,cAAc,CAAC,MAAM,CAAC;YACzB,MAAM,EAAE,QAAQ,CAAC,MAAM,IAAI,KAAK,CAAC,MAAM;YACvC,UAAU,EAAE,QAAQ,CAAC,UAAU,IAAI,KAAK,CAAC,UAAU;SACpD,CAAC,CAAC;IACL,CAAC;IACD,OAAO,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;AAC/B,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAc;IACxC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAY,CAAC;YAC5C,MAAM,SAAS,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;YAC5C,OAAO,SAAS,IAAI,OAAO,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAoC,CAAC,CAAC,CAAC,SAAS,CAAC;QACvG,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,SAAS,CAAC;QACnB,CAAC;IACH,CAAC;IACD,MAAM,SAAS,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC;IAC3C,OAAO,OAAO,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAoC,CAAC,CAAC,CAAC,SAAS,CAAC;AAC1F,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAc;IACtC,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,IAAI,CAAC;YACH,OAAO,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;QAC9C,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,SAAS,CAAC;QACnB,CAAC;IACH,CAAC;IACD,OAAO,iBAAiB,CAAC,KAAK,CAAC,CAAC;AAClC,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAc;IACvC,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,IAAI,KAAK,IAAI,SAAS,IAAI,KAAK,EAAE,CAAC;QAC/E,OAAQ,KAAiC,CAAC,OAAO,CAAC;IACpD,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,WAAW,CAAC,KAAc;IACjC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AAC3E,CAAC;AAED,SAAS,cAAc,CAAC,GAA0B,EAAE,GAAW,EAAE,KAAa;IAC5E,MAAM,MAAM,GAAG,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;IAClC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACnB,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;AACvB,CAAC","sourcesContent":["import { sql } from 'drizzle-orm';\nimport { type IdentityDatabase, executeQuery, executeStatement } from './db';\n\nexport interface PodLookupResult {\n  podId: string;\n  accountId: string;\n  baseUrl: string;\n  storageUrl?: string;\n  webId?: string;\n  webIds?: string[];\n  nodeId?: string;\n  edgeNodeId?: string;\n}\n\nexport interface PodMigrationStatus {\n  podId: string;\n  nodeId?: string;\n  migrationStatus?: 'syncing' | 'done' | null;\n  migrationTargetNode?: string;\n  migrationProgress?: number;\n}\n\ninterface InternalKvRow {\n  key?: string;\n  value?: string;\n  id?: string;\n  account_id?: string;\n  base_url?: string;\n  storage_url?: string;\n  node_id?: string;\n  edge_node_id?: string;\n}\n\ninterface PodUsageRow {\n  pod_id?: string;\n  storage_url?: string | null;\n}\n\n/**\n * Repository for Pod lookup operations.\n *\n * Reads Pod data from CSS's internal_kv table where account data is stored.\n * CSS stores account data at key \"accounts/data/{accountId}\" with Pod info\n * nested in the \"**pod**\" field.\n */\nexport class PodLookupRepository {\n  private readonly kvTableName: string;\n  private readonly indexedStoreTableName: string;\n  private readonly usageTableName: string;\n\n  public constructor(\n    private readonly db: IdentityDatabase,\n    kvTableName?: string,\n  ) {\n    this.kvTableName = kvTableName ?? 'internal_kv';\n    this.indexedStoreTableName = 'identity_store';\n    this.usageTableName = 'identity_pod_usage';\n  }\n\n  /**\n   * Find Pod by resource path (matches longest canonical storage/base URL prefix).\n   */\n  public async findByResourceIdentifier(resourcePath: string): Promise<PodLookupResult | undefined> {\n    const pods = await this.getAllPods();\n\n    let bestMatch: PodLookupResult | undefined;\n    let bestLength = 0;\n\n    for (const pod of pods) {\n      const candidateBase = pod.storageUrl ?? pod.baseUrl;\n      if (resourcePath.startsWith(candidateBase) && candidateBase.length > bestLength) {\n        bestMatch = pod;\n        bestLength = candidateBase.length;\n      }\n    }\n\n    return bestMatch;\n  }\n\n  /**\n   * Get Pod by ID.\n   */\n  public async findById(podId: string): Promise<PodLookupResult | undefined> {\n    const pods = await this.getAllPods();\n    return pods.find((p) => p.podId === podId);\n  }\n\n  /**\n   * Find Pod by a linked WebID URL.\n   *\n   * CSS account data stores WebID links separately from Pod base URLs. This is\n   * the precise lookup for IdP/SP split deployments where the WebID path does\n   * not have to match the storage base URL.\n   */\n  public async findByWebId(webId: string): Promise<PodLookupResult | undefined> {\n    return (await this.findAllByWebId(webId))[0];\n  }\n\n  /**\n   * Find all Pods linked to a WebID.\n   *\n   * A Cloud WebID can legitimately back both a Cloud Pod and a Local SP Pod.\n   * Callers that are scoped to a storage provider must inspect all candidates\n   * instead of accepting the first account record returned by CSS storage.\n   */\n  public async findAllByWebId(webId: string): Promise<PodLookupResult[]> {\n    const normalized = normalizeWebId(webId);\n    if (!normalized) {\n      return [];\n    }\n\n    const results: PodLookupResult[] = [];\n    const pods = await this.getAllPods();\n    for (const pod of pods) {\n      const matchedWebId = getPodWebIds(pod).find((candidate) => normalizeWebId(candidate) === normalized);\n      if (matchedWebId) {\n        results.push({\n          ...pod,\n          webId: matchedWebId,\n        });\n      }\n    }\n\n    if (results.length > 0) {\n      return results;\n    }\n\n    const indexed = await this.findByWebIdIndex(normalized);\n    if (!indexed) {\n      return [];\n    }\n    const usage = await this.getUsageByPodId();\n    return [{\n      ...indexed,\n      storageUrl: indexed.storageUrl ?? usage.get(indexed.podId)?.storageUrl,\n    }];\n  }\n\n  /**\n   * Find Pods by linked WebID URLs in one scan.\n   */\n  public async findByWebIds(webIds: string[]): Promise<PodLookupResult[]> {\n    const normalizedTargets = new Set(webIds.map(normalizeWebId).filter((value): value is string => Boolean(value)));\n    if (normalizedTargets.size === 0) {\n      return [];\n    }\n\n    const results: PodLookupResult[] = [];\n    const pods = await this.getAllPods();\n    for (const pod of pods) {\n      const matchedWebId = getPodWebIds(pod).find((candidate) => {\n        const normalized = normalizeWebId(candidate);\n        return normalized ? normalizedTargets.has(normalized) : false;\n      });\n      if (!matchedWebId) {\n        continue;\n      }\n      results.push({\n        ...pod,\n        webId: matchedWebId,\n      });\n    }\n    if (results.length < normalizedTargets.size) {\n      const seen = new Set(results.map((result) => normalizeWebId(result.webId)).filter(Boolean));\n      for (const normalized of normalizedTargets) {\n        if (seen.has(normalized)) {\n          continue;\n        }\n        const indexed = await this.findByWebIdIndex(normalized);\n        if (indexed) {\n          const usage = await this.getUsageByPodId();\n          results.push({\n            ...indexed,\n            storageUrl: indexed.storageUrl ?? usage.get(indexed.podId)?.storageUrl,\n          });\n        }\n      }\n    }\n    return results;\n  }\n\n  /**\n   * List Pods for a specific account.\n   */\n  public async listByAccountId(accountId: string): Promise<PodLookupResult[]> {\n    const pods = await this.getAllPods();\n    return pods.filter((pod) => pod.accountId === accountId);\n  }\n\n  /**\n   * Set the canonical storage URL for a Pod in identity_pod_usage.\n   */\n  public async setStorageUrl(podId: string, accountId: string, storageUrl: string): Promise<void> {\n    const tableId = sql.identifier([this.usageTableName]);\n    await executeStatement(this.db, sql`\n      INSERT INTO ${tableId} (pod_id, account_id, storage_url)\n      VALUES (${podId}, ${accountId}, ${storageUrl})\n      ON CONFLICT (pod_id) DO UPDATE SET\n        account_id = ${accountId},\n        storage_url = ${storageUrl}\n    `);\n  }\n\n  /**\n   * Get migration status for a Pod from identity_pod_usage table.\n   */\n  public async getMigrationStatus(podId: string): Promise<PodMigrationStatus | undefined> {\n    try {\n      const tableId = sql.identifier([this.usageTableName]);\n      const result = await executeQuery<{\n        pod_id?: string;\n        id?: string;\n        node_id?: string | null;\n        migration_status?: string | null;\n        migration_target_node?: string | null;\n        migration_progress?: number | null;\n      }>(this.db, sql`\n        SELECT pod_id, node_id, migration_status, migration_target_node, migration_progress\n        FROM ${tableId}\n        WHERE pod_id = ${podId}\n        LIMIT 1\n      `);\n\n      if (result.rows.length === 0) {\n        return undefined;\n      }\n      const row = result.rows[0];\n      return {\n        podId: row.pod_id ?? row.id ?? podId,\n        nodeId: row.node_id ?? undefined,\n        migrationStatus: row.migration_status as 'syncing' | 'done' | null | undefined,\n        migrationTargetNode: row.migration_target_node ?? undefined,\n        migrationProgress: row.migration_progress ?? undefined,\n      };\n    } catch {\n      // Table might not exist.\n      return undefined;\n    }\n  }\n\n  /**\n   * Set the nodeId for a Pod in identity_pod_usage table.\n   */\n  public async setNodeId(podId: string, nodeId: string): Promise<void> {\n    const tableId = sql.identifier([this.usageTableName]);\n    await executeStatement(this.db, sql`\n      INSERT INTO ${tableId} (pod_id, account_id, node_id)\n      VALUES (${podId}, '', ${nodeId})\n      ON CONFLICT (pod_id) DO UPDATE SET node_id = ${nodeId}\n    `);\n  }\n\n  /**\n   * Update migration status for a Pod in identity_pod_usage table.\n   */\n  public async setMigrationStatus(\n    podId: string,\n    status: 'syncing' | 'done' | null,\n    targetNode?: string | null,\n    progress?: number | null,\n  ): Promise<void> {\n    const tableId = sql.identifier([this.usageTableName]);\n    await executeStatement(this.db, sql`\n      INSERT INTO ${tableId} (pod_id, account_id, migration_status, migration_target_node, migration_progress)\n      VALUES (${podId}, '', ${status}, ${targetNode ?? null}, ${progress ?? 0})\n      ON CONFLICT (pod_id) DO UPDATE SET\n        migration_status = ${status},\n        migration_target_node = ${targetNode ?? null},\n        migration_progress = ${progress ?? 0}\n    `);\n  }\n\n  /**\n   * List all pods.\n   */\n  public async listAllPods(): Promise<PodLookupResult[]> {\n    return this.getAllPods();\n  }\n\n  /**\n   * Extract all pods from CSS's internal_kv storage.\n   *\n   * It keeps backward compatibility with legacy rows that already expose\n   * id/account_id/base_url columns (used by some unit tests and older schemas).\n   */\n  private async getAllPods(): Promise<PodLookupResult[]> {\n    const kvTableId = sql.identifier([this.kvTableName]);\n\n    const result = await executeQuery<InternalKvRow>(this.db, sql`\n      SELECT key, value FROM ${kvTableId}\n      WHERE key LIKE 'accounts/data/%'\n         OR key LIKE '/.internal/accounts/data/%'\n    `);\n    const usageByPodId = await this.getUsageByPodId();\n\n    const pods: PodLookupResult[] = [];\n\n    for (const row of result?.rows ?? []) {\n      if (row.id && row.account_id && row.base_url) {\n        pods.push({\n          podId: String(row.id),\n          accountId: String(row.account_id),\n          baseUrl: String(row.base_url),\n          storageUrl: row.storage_url ? String(row.storage_url) : undefined,\n          nodeId: row.node_id ? String(row.node_id) : undefined,\n          edgeNodeId: row.edge_node_id ? String(row.edge_node_id) : undefined,\n        });\n        continue;\n      }\n\n      if (!row.key || row.value === undefined) {\n        continue;\n      }\n\n      try {\n        const accountId = extractAccountIdFromAccountDataKey(row.key);\n        if (!accountId) {\n          continue;\n        }\n        const data = unwrapStoredValue(typeof row.value === 'string' ? JSON.parse(row.value) : row.value);\n\n        const podMap = (data as any)['**pod**'] || (data as any).pod || {};\n        const webIds = extractAccountWebIds(data);\n\n        for (const [podId, podData] of Object.entries(podMap)) {\n          const pod = podData as Record<string, unknown>;\n          if (pod.baseUrl && typeof pod.baseUrl === 'string') {\n            const usage = usageByPodId.get(podId);\n            const podWebIds = [\n              typeof pod.webId === 'string' ? pod.webId : undefined,\n              ...extractPodOwnerWebIds(pod),\n              ...webIds,\n            ].filter((value): value is string => typeof value === 'string');\n            pods.push({\n              podId,\n              accountId,\n              baseUrl: pod.baseUrl,\n              storageUrl: stringValue(pod.storageUrl) ?? usage?.storageUrl,\n              webId: dedupeStrings(podWebIds)[0],\n              ...webIdsProperty(podWebIds),\n              nodeId: typeof pod.nodeId === 'string' ? pod.nodeId : undefined,\n              edgeNodeId: typeof pod.edgeNodeId === 'string' ? pod.edgeNodeId : undefined,\n            });\n          }\n        }\n      } catch {\n        // Skip malformed entries.\n      }\n    }\n\n    return mergePodLookupResults([\n      ...pods,\n      ...await this.getPodsFromIndexedStore(),\n    ]);\n  }\n\n  private async getUsageByPodId(): Promise<Map<string, { storageUrl?: string }>> {\n    const tableId = sql.identifier([this.usageTableName]);\n    try {\n      const result = await executeQuery<PodUsageRow>(this.db, sql`\n        SELECT pod_id, storage_url FROM ${tableId}\n      `);\n      const byPodId = new Map<string, { storageUrl?: string }>();\n      for (const row of result.rows) {\n        if (!row.pod_id) {\n          continue;\n        }\n        byPodId.set(row.pod_id, {\n          storageUrl: row.storage_url ?? undefined,\n        });\n      }\n      return byPodId;\n    } catch {\n      return new Map();\n    }\n  }\n\n  /**\n   * Fast path for CSS WrappedIndexedStorage. WebID indexes point to the root\n   * account id, so a single indexed key plus account data row can resolve the\n   * profile without scanning all account records.\n   */\n  private async findByWebIdIndex(webId: string): Promise<PodLookupResult | undefined> {\n    const accountIds = await this.readStringArrayFromKv(`accounts/index/webIdLink/webId/${encodeURIComponent(webId)}`);\n    for (const accountId of accountIds) {\n      const account = await this.readAccountData(accountId);\n      if (!account) {\n        continue;\n      }\n      const pods = this.extractPodsFromAccountData(accountId, account);\n      const match = pods.find((pod) => getPodWebIds(pod).some((candidate) => normalizeWebId(candidate) === webId));\n      if (match) {\n        return {\n          ...match,\n          webId,\n        };\n      }\n      if (pods.length === 1) {\n        return {\n          ...pods[0],\n          webId,\n          ...webIdsProperty([webId, ...getPodWebIds(pods[0])]),\n        };\n      }\n    }\n    return undefined;\n  }\n\n  private async readAccountData(accountId: string): Promise<Record<string, unknown> | undefined> {\n    for (const key of [`accounts/data/${accountId}`, `/.internal/accounts/data/${accountId}`]) {\n      const value = await this.readKvValue(key);\n      const record = parsePayloadRecord(value);\n      if (record) {\n        return record;\n      }\n    }\n    return undefined;\n  }\n\n  private async readStringArrayFromKv(key: string): Promise<string[]> {\n    const value = await this.readKvValue(key);\n    return Array.isArray(value) ? value.filter((entry): entry is string => typeof entry === 'string') : [];\n  }\n\n  private async readKvValue(key: string): Promise<unknown> {\n    const tableId = sql.identifier([this.kvTableName]);\n    try {\n      const result = await executeQuery<{ value?: unknown }>(this.db, sql`\n        SELECT value FROM ${tableId}\n        WHERE key = ${key}\n        LIMIT 1\n      `);\n      if (result.rows.length === 0) {\n        return undefined;\n      }\n      return parseStoredValue(result.rows[0].value);\n    } catch {\n      return undefined;\n    }\n  }\n\n  private extractPodsFromAccountData(accountId: string, data: Record<string, unknown>): PodLookupResult[] {\n    const podMap = (data as any)['**pod**'] || (data as any).pod || {};\n    const webIds = extractAccountWebIds(data);\n    const pods: PodLookupResult[] = [];\n\n    for (const [podId, podData] of Object.entries(podMap)) {\n      const pod = podData as Record<string, unknown>;\n      if (pod.baseUrl && typeof pod.baseUrl === 'string') {\n        const podWebIds = [\n          typeof pod.webId === 'string' ? pod.webId : undefined,\n          ...extractPodOwnerWebIds(pod),\n          ...webIds,\n        ].filter((value): value is string => typeof value === 'string');\n        pods.push({\n          podId,\n          accountId,\n          baseUrl: pod.baseUrl,\n          storageUrl: stringValue(pod.storageUrl),\n          webId: dedupeStrings(podWebIds)[0],\n          ...webIdsProperty(podWebIds),\n          nodeId: typeof pod.nodeId === 'string' ? pod.nodeId : undefined,\n          edgeNodeId: typeof pod.edgeNodeId === 'string' ? pod.edgeNodeId : undefined,\n        });\n      }\n    }\n\n    return pods;\n  }\n\n  /**\n   * Older Xpod/CSS deployments may have used the IndexedStorage-compatible\n   * identity_store table instead of CSS's WrappedIndexedStorage JSON tree in\n   * internal_kv. Keep this as a read-only compatibility source so hosted WebID\n   * profile lookup still works after storage implementation changes.\n   */\n  private async getPodsFromIndexedStore(): Promise<PodLookupResult[]> {\n    const storeTableId = sql.identifier([this.indexedStoreTableName]);\n    let result: { rows?: Array<{ container?: string; id?: string; payload?: unknown }> } | undefined;\n    try {\n      result = await executeQuery(this.db, sql`\n        SELECT container, id, payload FROM ${storeTableId}\n        WHERE container IN ('pod', 'owner', 'webIdLink')\n      `);\n    } catch {\n      return [];\n    }\n\n    const podPayloads = new Map<string, Record<string, unknown>>();\n    const ownerWebIdsByPodId = new Map<string, string[]>();\n    const webIdsByAccountId = new Map<string, string[]>();\n\n    for (const row of result?.rows ?? []) {\n      if (!row.id || !row.container) {\n        continue;\n      }\n      const payload = parsePayloadRecord(row.payload);\n      if (!payload) {\n        continue;\n      }\n\n      if (row.container === 'pod') {\n        podPayloads.set(row.id, payload);\n        continue;\n      }\n\n      if (row.container === 'owner') {\n        const podId = stringValue(payload.podId);\n        const webId = stringValue(payload.webId);\n        if (podId && webId) {\n          appendMapValue(ownerWebIdsByPodId, podId, webId);\n        }\n        continue;\n      }\n\n      if (row.container === 'webIdLink') {\n        const accountId = stringValue(payload.accountId);\n        const webId = stringValue(payload.webId);\n        if (accountId && webId) {\n          appendMapValue(webIdsByAccountId, accountId, webId);\n        }\n      }\n    }\n\n    const pods: PodLookupResult[] = [];\n    for (const [podId, pod] of podPayloads) {\n      const baseUrl = stringValue(pod.baseUrl);\n      const accountId = stringValue(pod.accountId);\n      if (!baseUrl || !accountId) {\n        continue;\n      }\n      const podWebIds = dedupeStrings([\n        stringValue(pod.webId),\n        ...(ownerWebIdsByPodId.get(podId) ?? []),\n        ...(webIdsByAccountId.get(accountId) ?? []),\n      ].filter((value): value is string => typeof value === 'string'));\n\n      pods.push({\n        podId,\n        accountId,\n        baseUrl,\n        storageUrl: stringValue(pod.storageUrl),\n        webId: podWebIds[0],\n        ...webIdsProperty(podWebIds),\n        nodeId: stringValue(pod.nodeId),\n        edgeNodeId: stringValue(pod.edgeNodeId),\n      });\n    }\n\n    return pods;\n  }\n}\n\nfunction extractAccountIdFromAccountDataKey(key: string): string | undefined {\n  const marker = 'accounts/data/';\n  const index = key.indexOf(marker);\n  if (index < 0) {\n    return undefined;\n  }\n  const accountId = key.slice(index + marker.length).replace(/\\.json$/u, '');\n  return accountId || undefined;\n}\n\nfunction extractAccountWebIds(data: unknown): string[] {\n  if (!data || typeof data !== 'object') {\n    return [];\n  }\n\n  const record = data as Record<string, unknown>;\n  const linkMap = record['**webIdLink**'] || record.webIdLink || {};\n  if (!linkMap || typeof linkMap !== 'object') {\n    return [];\n  }\n\n  return Object.values(linkMap as Record<string, unknown>)\n    .map((value) => {\n      if (!value || typeof value !== 'object') {\n        return undefined;\n      }\n      const webId = (value as Record<string, unknown>).webId;\n      return typeof webId === 'string' ? webId : undefined;\n    })\n    .filter((value): value is string => typeof value === 'string');\n}\n\nfunction extractPodOwnerWebIds(pod: Record<string, unknown>): string[] {\n  const ownerMap = pod['**owner**'] || pod.owner || {};\n  if (!ownerMap || typeof ownerMap !== 'object') {\n    return [];\n  }\n\n  return Object.values(ownerMap as Record<string, unknown>)\n    .map((value) => {\n      if (!value || typeof value !== 'object') {\n        return undefined;\n      }\n      const webId = (value as Record<string, unknown>).webId;\n      return typeof webId === 'string' ? webId : undefined;\n    })\n    .filter((value): value is string => typeof value === 'string');\n}\n\nfunction normalizeWebId(webId: string | undefined): string | undefined {\n  if (!webId) {\n    return undefined;\n  }\n  try {\n    return new URL(webId).toString();\n  } catch {\n    return webId;\n  }\n}\n\nfunction dedupeStrings(values: string[]): string[] {\n  return [...new Set(values)];\n}\n\nfunction getPodWebIds(pod: PodLookupResult): string[] {\n  return dedupeStrings([\n    pod.webId,\n    ...(pod.webIds ?? []),\n  ].filter((value): value is string => typeof value === 'string' && value.length > 0));\n}\n\nfunction webIdsProperty(values: string[]): Pick<PodLookupResult, 'webIds'> {\n  const webIds = dedupeStrings(values);\n  return webIds.length > 1 ? { webIds } : {};\n}\n\nfunction mergePodLookupResults(values: PodLookupResult[]): PodLookupResult[] {\n  const byPodId = new Map<string, PodLookupResult>();\n  for (const value of values) {\n    const existing = byPodId.get(value.podId);\n    if (!existing) {\n      byPodId.set(value.podId, value);\n      continue;\n    }\n\n    const webIds = dedupeStrings([\n      ...getPodWebIds(existing),\n      ...getPodWebIds(value),\n    ]);\n    byPodId.set(value.podId, {\n      ...existing,\n      baseUrl: existing.baseUrl || value.baseUrl,\n      storageUrl: existing.storageUrl ?? value.storageUrl,\n      accountId: existing.accountId || value.accountId,\n      webId: webIds[0],\n      ...webIdsProperty(webIds),\n      nodeId: existing.nodeId ?? value.nodeId,\n      edgeNodeId: existing.edgeNodeId ?? value.edgeNodeId,\n    });\n  }\n  return [...byPodId.values()];\n}\n\nfunction parsePayloadRecord(value: unknown): Record<string, unknown> | undefined {\n  if (!value) {\n    return undefined;\n  }\n  if (typeof value === 'string') {\n    try {\n      const parsed = JSON.parse(value) as unknown;\n      const unwrapped = unwrapStoredValue(parsed);\n      return unwrapped && typeof unwrapped === 'object' ? unwrapped as Record<string, unknown> : undefined;\n    } catch {\n      return undefined;\n    }\n  }\n  const unwrapped = unwrapStoredValue(value);\n  return typeof unwrapped === 'object' ? unwrapped as Record<string, unknown> : undefined;\n}\n\nfunction parseStoredValue(value: unknown): unknown {\n  if (typeof value === 'string') {\n    try {\n      return unwrapStoredValue(JSON.parse(value));\n    } catch {\n      return undefined;\n    }\n  }\n  return unwrapStoredValue(value);\n}\n\nfunction unwrapStoredValue(value: unknown): unknown {\n  if (value && typeof value === 'object' && 'key' in value && 'payload' in value) {\n    return (value as Record<string, unknown>).payload;\n  }\n  return value;\n}\n\nfunction stringValue(value: unknown): string | undefined {\n  return typeof value === 'string' && value.length > 0 ? value : undefined;\n}\n\nfunction appendMapValue(map: Map<string, string[]>, key: string, value: string): void {\n  const values = map.get(key) ?? [];\n  values.push(value);\n  map.set(key, values);\n}\n"]}

package/dist/identity/oidc/ScopedPickWebIdHandler.d.ts

@@ -11,6 +11,7 @@ export interface ScopedPickWebIdHandlerOptions {
 }
 export interface PodWebIdLookupRepository {
     findByWebId: (webId: string) => Promise<PodLookupResult | undefined>;
+    findAllByWebId?: (webId: string) => Promise<PodLookupResult[]>;
 }
 /**
  * CSS-compatible WebID picker scoped to the current storage provider.

package/dist/identity/oidc/ScopedPickWebIdHandler.js

@@ -97,8 +97,10 @@ class ScopedPickWebIdHandler extends community_server_1.JsonInteractionHandler {
             return undefined;
         }
         try {
-            const pod = await this.podLookupRepository.findByWebId(webId);
-            return pod && matchesTargetStorage(pod, targetStorageUrl) ? pod : undefined;
+            const pods = this.podLookupRepository.findAllByWebId
+                ? await this.podLookupRepository.findAllByWebId(webId)
+                : await this.podLookupRepository.findByWebId(webId).then((pod) => pod ? [pod] : []);
+            return pods.find((pod) => matchesTargetStorage(pod, targetStorageUrl));
         }
         catch (error) {
             this.logger.warn(`Pod lookup unavailable for WebID ${webId}: ${error}`);

package/dist/identity/oidc/ScopedPickWebIdHandler.js.map

@@ -1 +1 @@
-{"version":3,"file":"ScopedPickWebIdHandler.js","sourceRoot":"","sources":["../../../src/identity/oidc/ScopedPickWebIdHandler.ts"],"names":[],"mappings":";;;AAAA,6BAA8C;AAC9C,iEAAqD;AACrD,8DAUiC;AASjC,sCAAoD;AACpD,wEAA2F;AAC3F,2EAAwE;AAIxE,MAAM,QAAQ,GAAG,IAAA,YAAM,EAAC;IACtB,KAAK,EAAE,IAAA,YAAM,GAAE,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;IACjC,QAAQ,EAAE,IAAA,aAAO,GAAE,CAAC,OAAO,CAAC,KAAK,CAAC;CACnC,CAAC,CAAC;AAoBH;;;;;;GAMG;AACH,MAAa,sBAAuB,SAAQ,yCAAsB;IAOhE,YAAmB,OAAsC;QACvD,KAAK,EAAE,CAAC;QAPO,WAAM,GAAG,IAAA,oCAAY,EAAC,IAAI,CAAC,CAAC;QAQ3C,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC;QACrC,IAAI,CAAC,eAAe,GAAG,OAAO,CAAC,eAAe,CAAC;QAC/C,IAAI,CAAC,mBAAmB,GAAG,OAAO,CAAC,mBAAmB;YACpD,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,yCAAmB,CAAC,IAAA,wBAAmB,EAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QAC5G,IAAI,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAClE,CAAC;IAEM,KAAK,CAAC,OAAO,CAAC,EAAE,SAAS,EAAE,eAAe,EAA+B;QAC9E,IAAA,kCAAe,EAAC,SAAS,CAAC,CAAC;QAC3B,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,WAAW,EAAE,CAAC;QAC1D,MAAM,WAAW,GAAG,IAAA,8BAAW,EAAC,QAAQ,CAAC,CAAC;QAC1C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAAC,QAAQ,EAAE,eAAe,CAAC,CAAC;QAC1E,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QAEnE,OAAO;YACL,IAAI,EAAE;gBACJ,GAAG,WAAW;gBACd,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC;gBAC3C,OAAO;aACR;SACF,CAAC;IACJ,CAAC;IAEM,KAAK,CAAC,MAAM,CAAC,EAAE,eAAe,EAAE,SAAS,EAAE,IAAI,EAA+B;QACnF,IAAA,wCAAqB,EAAC,eAAe,CAAC,CAAC;QACvC,IAAA,kCAAe,EAAC,SAAS,CAAC,CAAC;QAC3B,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,MAAM,IAAA,oCAAiB,EAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QACpE,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,WAAW,EAAE,CAAC;QAC1D,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAAC,QAAQ,EAAE,eAAe,CAAC,CAAC;QAE1E,IAAI,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAC,EAAE,CAAC;YACtD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,wBAAwB,KAAK,qCAAqC,SAAS,EAAE,CAAC,CAAC;YAChG,MAAM,IAAI,sCAAmB,CAAC,wCAAwC,CAAC,CAAC;QAC1E,CAAC;QAED,IAAI,CAAC,MAAM,IAAI,CAAC,uBAAuB,CAAC,KAAK,EAAE,MAAM,CAAC,EAAE,CAAC;YACvD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,wBAAwB,KAAK,iDAAiD,CAAC,CAAC;YACjG,MAAM,IAAI,sCAAmB,CAAC,iDAAiD,CAAC,CAAC;QACnF,CAAC;QAED,MAAM,IAAA,8BAAW,EAAC,QAAQ,EAAE,eAAe,CAAC,CAAC;QAC7C,MAAM,QAAQ,GAAG,MAAM,IAAA,oCAAiB,EAAC,eAAe,EAAE;YACxD,KAAK,EAAE;gBACL,SAAS,EAAE,KAAK;gBAChB,QAAQ;aACT;SACF,EAAE,IAAI,CAAC,CAAC;QACT,MAAM,IAAI,iCAAc,CAAC,QAAQ,CAAC,CAAC;IACrC,CAAC;IAEO,KAAK,CAAC,oBAAoB,CAAC,SAAiB,EAAE,MAAqB;QACzE,MAAM,MAAM,GAAG,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACtF,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC;YACxB,OAAO,IAAI,CAAC,sBAAsB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACrD,CAAC;QAED,MAAM,OAAO,GAAiB,EAAE,CAAC;QACjC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC;YAC3D,IAAI,CAAC,GAAG,EAAE,CAAC;gBACT,SAAS;YACX,CAAC;YACD,MAAM,UAAU,GAAG,mBAAmB,CAAC,GAAG,CAAC,UAAU,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC;YACtE,OAAO,CAAC,IAAI,CAAC;gBACX,KAAK;gBACL,UAAU;gBACV,WAAW,EAAE,iBAAiB,CAAC,KAAK,EAAE,UAAU,CAAC;aAClD,CAAC,CAAC;QACL,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAEO,KAAK,CAAC,uBAAuB,CAAC,KAAa,EAAE,MAAqB;QACxE,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC;YACxB,OAAO,CAAC,MAAM,IAAI,CAAC,sBAAsB,CAAC,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,KAAK,KAAK,CAAC,CAAC;QACrG,CAAC;QACD,OAAO,OAAO,CAAC,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC;IACjE,CAAC;IAEO,KAAK,CAAC,SAAS,CAAC,KAAa,EAAE,gBAAwB;QAC7D,IAAI,CAAC,IAAI,CAAC,mBAAmB,EAAE,CAAC;YAC9B,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,8EAA8E,CAAC,CAAC;YACjG,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;YAC9D,OAAO,GAAG,IAAI,oBAAoB,CAAC,GAAG,EAAE,gBAAgB,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;QAC9E,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,oCAAoC,KAAK,KAAK,KAAK,EAAE,CAAC,CAAC;YACxE,OAAO,SAAS,CAAC;QACnB,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,oBAAoB,CAChC,QAA4B,EAC5B,eAAgE;QAEhE,MAAM,aAAa,GAAG,oBAAoB,CAAC,eAAe,CAAC,CAAC;QAC5D,IAAI,CAAC,aAAa,EAAE,CAAC;YACnB,OAAO,EAAE,UAAU,EAAE,mBAAmB,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QAC9D,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,uCAAkB,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;QAC9E,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,sCAAmB,CAAC,mCAAmC,CAAC,CAAC;QACrE,CAAC;QAED,MAAM,SAAS,GAAG,OAAO,CAAC,QAAQ;YAChC,CAAC,CAAC,WAAW,OAAO,CAAC,QAAQ,EAAE;YAC/B,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC;QAClB,OAAO;YACL,UAAU,EAAE,mBAAmB,CAAC,SAAS,CAAC;YAC1C,SAAS,EAAE,mBAAmB,CAAC,OAAO,CAAC,KAAK,CAAC;YAC7C,YAAY,EAAE,OAAO,CAAC,YAAY;SACnC,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,sBAAsB,CAAC,MAAgB,EAAE,MAAqB;QAC1E,IAAI,CAAC,MAAM,CAAC,SAAS,IAAI,CAAC,MAAM,CAAC,YAAY,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACrE,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,mBAAmB,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC,QAAQ,EAAE,EAAE;YAC3F,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,eAAe,EAAE,UAAU,MAAM,CAAC,YAAY,EAAE;gBAChD,cAAc,EAAE,kBAAkB;gBAClC,QAAQ,EAAE,kBAAkB;aAC7B;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;SACjC,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,uCAAuC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;YAC3E,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAA8C,CAAC;QAClG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,CAAC;YAClC,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC;QACtC,OAAO,IAAI,CAAC,OAAO;aAChB,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ,IAAI,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;aACpF,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,KAAK,CAAC,UAAU,KAAK,QAAQ,IAAI,oBAAoB,CAC7E;YACE,KAAK,EAAE,EAAE;YACT,SAAS,EAAE,EAAE;YACb,OAAO,EAAE,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,UAAU;YACzC,UAAU,EAAE,KAAK,CAAC,UAAU;SAC7B,EACD,MAAM,CAAC,UAAU,CAClB,CAAC;aACD,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;YACf,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,UAAU,EAAE,mBAAmB,CAAC,KAAK,CAAC,UAAU,CAAC;YACjD,WAAW,EAAE,iBAAiB,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,UAAU,CAAC;SAC9D,CAAC,CAAC,CAAC;IACR,CAAC;CACF;AA1KD,wDA0KC;AAcD,SAAS,iBAAiB,CAAC,KAAa,EAAE,UAAkB;IAC1D,MAAM,SAAS,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC;IAC3C,MAAM,WAAW,GAAG,iBAAiB,CAAC,UAAU,CAAC,CAAC;IAClD,IAAI,CAAC,SAAS,IAAI,CAAC,WAAW,EAAE,CAAC;QAC/B,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,OAAO,SAAS,KAAK,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC;AACvD,CAAC;AAED,SAAS,iBAAiB,CAAC,GAAW;IACpC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;QAC5B,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAC5D,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC1B,OAAO,mBAAmB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC5C,CAAC;QAED,OAAO,mBAAmB,CAAC,IAAI,GAAG,CAAC,IAAI,QAAQ,CAAC,CAAC,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;IACpF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,SAAS,mBAAmB,CAAC,GAAW;IACtC,OAAO,GAAG,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC;AACxC,CAAC;AAED,SAAS,oBAAoB,CAAC,GAAoB,EAAE,gBAAwB;IAC1E,MAAM,aAAa,GAAG,CAAC,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAmB,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACtI,MAAM,UAAU,GAAG,iBAAiB,CAAC,gBAAgB,CAAC,CAAC;IACvD,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,OAAO,KAAK,CAAC;IACf,CAAC;IAED,KAAK,MAAM,SAAS,IAAI,aAAa,EAAE,CAAC;QACtC,MAAM,aAAa,GAAG,iBAAiB,CAAC,SAAS,CAAC,CAAC;QACnD,IAAI,aAAa,IAAI,aAAa,KAAK,UAAU,EAAE,CAAC;YAClD,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,YAAY,GAAG,mBAAmB,CAAC,SAAS,CAAC,CAAC;QACpD,IAAI,YAAY,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,UAAU,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;YAC/E,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,oBAAoB,CAAC,eAA+D;IAC3F,MAAM,MAAM,GAAG,eAAe,EAAE,MAA6C,CAAC;IAC9E,MAAM,KAAK,GAAG,MAAM,EAAE,aAAa,CAAC;IACpC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;AACzF,CAAC","sourcesContent":["import { boolean, object, string } from 'yup';\nimport { getLoggerFor } from 'global-logger-factory';\nimport {\n  BadRequestHttpError,\n  FoundHttpError,\n  JsonInteractionHandler,\n  assertAccountId,\n  assertOidcInteraction,\n  finishInteraction,\n  forgetWebId,\n  parseSchema,\n  validateWithError,\n} from '@solid/community-server';\nimport type {\n  Json,\n  JsonInteractionHandlerInput,\n  JsonRepresentation,\n  JsonView,\n  ProviderFactory,\n  WebIdStore,\n} from '@solid/community-server';\nimport { getIdentityDatabase } from '../drizzle/db';\nimport { PodLookupRepository, type PodLookupResult } from '../drizzle/PodLookupRepository';\nimport { ProvisionCodeCodec } from '../../provision/ProvisionCodeCodec';\n\ntype FetchLike = (input: RequestInfo | URL, init?: RequestInit) => Promise<Response>;\n\nconst inSchema = object({\n  webId: string().trim().required(),\n  remember: boolean().default(false),\n});\n\nexport interface ScopedPickWebIdHandlerOptions {\n  webIdStore: WebIdStore;\n  providerFactory: ProviderFactory;\n  identityDbUrl?: string;\n  podLookupRepository?: PodWebIdLookupRepository;\n  fetch?: FetchLike;\n}\n\nexport interface PodWebIdLookupRepository {\n  findByWebId: (webId: string) => Promise<PodLookupResult | undefined>;\n}\n\ninterface WebIdEntry extends Record<string, Json | undefined> {\n  webId: string;\n  storageUrl?: string;\n  storageMode?: 'cloud' | 'local' | 'custom';\n}\n\n/**\n * CSS-compatible WebID picker scoped to the current storage provider.\n *\n * The upstream handler lists every WebID linked to the IdP account. In an\n * IDP/SP split flow that lets a Local SP login pick a Cloud Pod again, so this\n * replacement keeps consent choices constrained by the selected SP's Pod facts.\n */\nexport class ScopedPickWebIdHandler extends JsonInteractionHandler implements JsonView {\n  private readonly logger = getLoggerFor(this);\n  private readonly webIdStore: WebIdStore;\n  private readonly providerFactory: ProviderFactory;\n  private readonly podLookupRepository?: PodWebIdLookupRepository;\n  private readonly fetch: FetchLike;\n\n  public constructor(options: ScopedPickWebIdHandlerOptions) {\n    super();\n    this.webIdStore = options.webIdStore;\n    this.providerFactory = options.providerFactory;\n    this.podLookupRepository = options.podLookupRepository ??\n      (options.identityDbUrl ? new PodLookupRepository(getIdentityDatabase(options.identityDbUrl)) : undefined);\n    this.fetch = options.fetch ?? globalThis.fetch.bind(globalThis);\n  }\n\n  public async getView({ accountId, oidcInteraction }: JsonInteractionHandlerInput): Promise<JsonRepresentation> {\n    assertAccountId(accountId);\n    const provider = await this.providerFactory.getProvider();\n    const description = parseSchema(inSchema);\n    const target = await this.resolveTargetStorage(provider, oidcInteraction);\n    const entries = await this.resolveScopedEntries(accountId, target);\n\n    return {\n      json: {\n        ...description,\n        webIds: entries.map((entry) => entry.webId),\n        entries,\n      },\n    };\n  }\n\n  public async handle({ oidcInteraction, accountId, json }: JsonInteractionHandlerInput): Promise<never> {\n    assertOidcInteraction(oidcInteraction);\n    assertAccountId(accountId);\n    const { webId, remember } = await validateWithError(inSchema, json);\n    const provider = await this.providerFactory.getProvider();\n    const target = await this.resolveTargetStorage(provider, oidcInteraction);\n\n    if (!await this.webIdStore.isLinked(webId, accountId)) {\n      this.logger.warn(`Trying to pick WebID ${webId} which does not belong to account ${accountId}`);\n      throw new BadRequestHttpError('WebID does not belong to this account.');\n    }\n\n    if (!await this.isResolvableByCurrentSp(webId, target)) {\n      this.logger.warn(`Trying to pick WebID ${webId} which does not belong to this storage provider`);\n      throw new BadRequestHttpError('WebID does not belong to this storage provider.');\n    }\n\n    await forgetWebId(provider, oidcInteraction);\n    const location = await finishInteraction(oidcInteraction, {\n      login: {\n        accountId: webId,\n        remember,\n      },\n    }, true);\n    throw new FoundHttpError(location);\n  }\n\n  private async resolveScopedEntries(accountId: string, target: TargetStorage): Promise<WebIdEntry[]> {\n    const webIds = (await this.webIdStore.findLinks(accountId)).map((link) => link.webId);\n    if (target.serviceToken) {\n      return this.resolveRemoteSpEntries(webIds, target);\n    }\n\n    const entries: WebIdEntry[] = [];\n    for (const webId of webIds) {\n      const pod = await this.findSpPod(webId, target.storageUrl);\n      if (!pod) {\n        continue;\n      }\n      const storageUrl = ensureTrailingSlash(pod.storageUrl ?? pod.baseUrl);\n      entries.push({\n        webId,\n        storageUrl,\n        storageMode: deriveStorageMode(webId, storageUrl),\n      });\n    }\n    return entries;\n  }\n\n  private async isResolvableByCurrentSp(webId: string, target: TargetStorage): Promise<boolean> {\n    if (target.serviceToken) {\n      return (await this.resolveRemoteSpEntries([webId], target)).some((entry) => entry.webId === webId);\n    }\n    return Boolean(await this.findSpPod(webId, target.storageUrl));\n  }\n\n  private async findSpPod(webId: string, targetStorageUrl: string): Promise<PodLookupResult | undefined> {\n    if (!this.podLookupRepository) {\n      this.logger.warn('No PodLookupRepository configured; refusing to expose unscoped WebID choices');\n      return undefined;\n    }\n\n    try {\n      const pod = await this.podLookupRepository.findByWebId(webId);\n      return pod && matchesTargetStorage(pod, targetStorageUrl) ? pod : undefined;\n    } catch (error) {\n      this.logger.warn(`Pod lookup unavailable for WebID ${webId}: ${error}`);\n      return undefined;\n    }\n  }\n\n  private async resolveTargetStorage(\n    provider: { issuer: string },\n    oidcInteraction?: JsonInteractionHandlerInput['oidcInteraction'],\n  ): Promise<TargetStorage> {\n    const provisionCode = extractProvisionCode(oidcInteraction);\n    if (!provisionCode) {\n      return { storageUrl: ensureTrailingSlash(provider.issuer) };\n    }\n\n    const payload = new ProvisionCodeCodec(provider.issuer).decode(provisionCode);\n    if (!payload) {\n      throw new BadRequestHttpError('Invalid or expired provisionCode.');\n    }\n\n    const targetUrl = payload.spDomain\n      ? `https://${payload.spDomain}`\n      : payload.spUrl;\n    return {\n      storageUrl: ensureTrailingSlash(targetUrl),\n      lookupUrl: ensureTrailingSlash(payload.spUrl),\n      serviceToken: payload.serviceToken,\n    };\n  }\n\n  private async resolveRemoteSpEntries(webIds: string[], target: TargetStorage): Promise<WebIdEntry[]> {\n    if (!target.lookupUrl || !target.serviceToken || webIds.length === 0) {\n      return [];\n    }\n\n    const response = await this.fetch(new URL('/provision/webids', target.lookupUrl).toString(), {\n      method: 'POST',\n      headers: {\n        'Authorization': `Bearer ${target.serviceToken}`,\n        'Content-Type': 'application/json',\n        'Accept': 'application/json',\n      },\n      body: JSON.stringify({ webIds }),\n    });\n\n    if (!response.ok) {\n      this.logger.warn(`Remote SP WebID lookup failed: HTTP ${response.status}`);\n      return [];\n    }\n\n    const body = await response.json().catch(() => null) as { entries?: RemoteSpWebIdEntry[] } | null;\n    if (!Array.isArray(body?.entries)) {\n      return [];\n    }\n\n    const allowedWebIds = new Set(webIds);\n    return body.entries\n      .filter((entry) => typeof entry.webId === 'string' && allowedWebIds.has(entry.webId))\n      .filter((entry) => typeof entry.storageUrl === 'string' && matchesTargetStorage(\n        {\n          podId: '',\n          accountId: '',\n          baseUrl: entry.podUrl ?? entry.storageUrl,\n          storageUrl: entry.storageUrl,\n        },\n        target.storageUrl,\n      ))\n      .map((entry) => ({\n        webId: entry.webId,\n        storageUrl: ensureTrailingSlash(entry.storageUrl),\n        storageMode: deriveStorageMode(entry.webId, entry.storageUrl),\n      }));\n  }\n}\n\ninterface TargetStorage {\n  storageUrl: string;\n  lookupUrl?: string;\n  serviceToken?: string;\n}\n\ninterface RemoteSpWebIdEntry {\n  webId: string;\n  podUrl?: string;\n  storageUrl: string;\n}\n\nfunction deriveStorageMode(webId: string, storageUrl: string): 'cloud' | 'local' | 'custom' {\n  const webIdRoot = deriveStorageRoot(webId);\n  const storageRoot = deriveStorageRoot(storageUrl);\n  if (!webIdRoot || !storageRoot) {\n    return 'custom';\n  }\n  return webIdRoot === storageRoot ? 'cloud' : 'local';\n}\n\nfunction deriveStorageRoot(url: string): string | undefined {\n  try {\n    const parsed = new URL(url);\n    const segments = parsed.pathname.split('/').filter(Boolean);\n    if (segments.length === 0) {\n      return ensureTrailingSlash(parsed.origin);\n    }\n\n    return ensureTrailingSlash(new URL(`/${segments[0]}/`, parsed.origin).toString());\n  } catch {\n    return undefined;\n  }\n}\n\nfunction ensureTrailingSlash(url: string): string {\n  return url.replace(/\\/+$/u, '') + '/';\n}\n\nfunction matchesTargetStorage(pod: PodLookupResult, targetStorageUrl: string): boolean {\n  const candidateUrls = [pod.storageUrl, pod.baseUrl].filter((value): value is string => typeof value === 'string' && value.length > 0);\n  const targetRoot = deriveStorageRoot(targetStorageUrl);\n  if (!targetRoot) {\n    return false;\n  }\n\n  for (const candidate of candidateUrls) {\n    const candidateRoot = deriveStorageRoot(candidate);\n    if (candidateRoot && candidateRoot === targetRoot) {\n      return true;\n    }\n\n    const candidateUrl = ensureTrailingSlash(candidate);\n    if (candidateUrl.startsWith(targetRoot) || targetRoot.startsWith(candidateUrl)) {\n      return true;\n    }\n  }\n\n  return false;\n}\n\nfunction extractProvisionCode(oidcInteraction: JsonInteractionHandlerInput['oidcInteraction']): string | undefined {\n  const params = oidcInteraction?.params as Record<string, unknown> | undefined;\n  const value = params?.provisionCode;\n  return typeof value === 'string' && value.trim().length > 0 ? value.trim() : undefined;\n}\n"]}
+{"version":3,"file":"ScopedPickWebIdHandler.js","sourceRoot":"","sources":["../../../src/identity/oidc/ScopedPickWebIdHandler.ts"],"names":[],"mappings":";;;AAAA,6BAA8C;AAC9C,iEAAqD;AACrD,8DAUiC;AASjC,sCAAoD;AACpD,wEAA2F;AAC3F,2EAAwE;AAIxE,MAAM,QAAQ,GAAG,IAAA,YAAM,EAAC;IACtB,KAAK,EAAE,IAAA,YAAM,GAAE,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;IACjC,QAAQ,EAAE,IAAA,aAAO,GAAE,CAAC,OAAO,CAAC,KAAK,CAAC;CACnC,CAAC,CAAC;AAqBH;;;;;;GAMG;AACH,MAAa,sBAAuB,SAAQ,yCAAsB;IAOhE,YAAmB,OAAsC;QACvD,KAAK,EAAE,CAAC;QAPO,WAAM,GAAG,IAAA,oCAAY,EAAC,IAAI,CAAC,CAAC;QAQ3C,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC;QACrC,IAAI,CAAC,eAAe,GAAG,OAAO,CAAC,eAAe,CAAC;QAC/C,IAAI,CAAC,mBAAmB,GAAG,OAAO,CAAC,mBAAmB;YACpD,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,yCAAmB,CAAC,IAAA,wBAAmB,EAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QAC5G,IAAI,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAClE,CAAC;IAEM,KAAK,CAAC,OAAO,CAAC,EAAE,SAAS,EAAE,eAAe,EAA+B;QAC9E,IAAA,kCAAe,EAAC,SAAS,CAAC,CAAC;QAC3B,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,WAAW,EAAE,CAAC;QAC1D,MAAM,WAAW,GAAG,IAAA,8BAAW,EAAC,QAAQ,CAAC,CAAC;QAC1C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAAC,QAAQ,EAAE,eAAe,CAAC,CAAC;QAC1E,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QAEnE,OAAO;YACL,IAAI,EAAE;gBACJ,GAAG,WAAW;gBACd,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC;gBAC3C,OAAO;aACR;SACF,CAAC;IACJ,CAAC;IAEM,KAAK,CAAC,MAAM,CAAC,EAAE,eAAe,EAAE,SAAS,EAAE,IAAI,EAA+B;QACnF,IAAA,wCAAqB,EAAC,eAAe,CAAC,CAAC;QACvC,IAAA,kCAAe,EAAC,SAAS,CAAC,CAAC;QAC3B,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,MAAM,IAAA,oCAAiB,EAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QACpE,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,WAAW,EAAE,CAAC;QAC1D,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAAC,QAAQ,EAAE,eAAe,CAAC,CAAC;QAE1E,IAAI,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAC,EAAE,CAAC;YACtD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,wBAAwB,KAAK,qCAAqC,SAAS,EAAE,CAAC,CAAC;YAChG,MAAM,IAAI,sCAAmB,CAAC,wCAAwC,CAAC,CAAC;QAC1E,CAAC;QAED,IAAI,CAAC,MAAM,IAAI,CAAC,uBAAuB,CAAC,KAAK,EAAE,MAAM,CAAC,EAAE,CAAC;YACvD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,wBAAwB,KAAK,iDAAiD,CAAC,CAAC;YACjG,MAAM,IAAI,sCAAmB,CAAC,iDAAiD,CAAC,CAAC;QACnF,CAAC;QAED,MAAM,IAAA,8BAAW,EAAC,QAAQ,EAAE,eAAe,CAAC,CAAC;QAC7C,MAAM,QAAQ,GAAG,MAAM,IAAA,oCAAiB,EAAC,eAAe,EAAE;YACxD,KAAK,EAAE;gBACL,SAAS,EAAE,KAAK;gBAChB,QAAQ;aACT;SACF,EAAE,IAAI,CAAC,CAAC;QACT,MAAM,IAAI,iCAAc,CAAC,QAAQ,CAAC,CAAC;IACrC,CAAC;IAEO,KAAK,CAAC,oBAAoB,CAAC,SAAiB,EAAE,MAAqB;QACzE,MAAM,MAAM,GAAG,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACtF,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC;YACxB,OAAO,IAAI,CAAC,sBAAsB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACrD,CAAC;QAED,MAAM,OAAO,GAAiB,EAAE,CAAC;QACjC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC;YAC3D,IAAI,CAAC,GAAG,EAAE,CAAC;gBACT,SAAS;YACX,CAAC;YACD,MAAM,UAAU,GAAG,mBAAmB,CAAC,GAAG,CAAC,UAAU,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC;YACtE,OAAO,CAAC,IAAI,CAAC;gBACX,KAAK;gBACL,UAAU;gBACV,WAAW,EAAE,iBAAiB,CAAC,KAAK,EAAE,UAAU,CAAC;aAClD,CAAC,CAAC;QACL,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAEO,KAAK,CAAC,uBAAuB,CAAC,KAAa,EAAE,MAAqB;QACxE,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC;YACxB,OAAO,CAAC,MAAM,IAAI,CAAC,sBAAsB,CAAC,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,KAAK,KAAK,CAAC,CAAC;QACrG,CAAC;QACD,OAAO,OAAO,CAAC,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC;IACjE,CAAC;IAEO,KAAK,CAAC,SAAS,CAAC,KAAa,EAAE,gBAAwB;QAC7D,IAAI,CAAC,IAAI,CAAC,mBAAmB,EAAE,CAAC;YAC9B,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,8EAA8E,CAAC,CAAC;YACjG,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,IAAI,CAAC,mBAAmB,CAAC,cAAc;gBAClD,CAAC,CAAC,MAAM,IAAI,CAAC,mBAAmB,CAAC,cAAc,CAAC,KAAK,CAAC;gBACtD,CAAC,CAAC,MAAM,IAAI,CAAC,mBAAmB,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YACtF,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,oBAAoB,CAAC,GAAG,EAAE,gBAAgB,CAAC,CAAC,CAAC;QACzE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,oCAAoC,KAAK,KAAK,KAAK,EAAE,CAAC,CAAC;YACxE,OAAO,SAAS,CAAC;QACnB,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,oBAAoB,CAChC,QAA4B,EAC5B,eAAgE;QAEhE,MAAM,aAAa,GAAG,oBAAoB,CAAC,eAAe,CAAC,CAAC;QAC5D,IAAI,CAAC,aAAa,EAAE,CAAC;YACnB,OAAO,EAAE,UAAU,EAAE,mBAAmB,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QAC9D,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,uCAAkB,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;QAC9E,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,sCAAmB,CAAC,mCAAmC,CAAC,CAAC;QACrE,CAAC;QAED,MAAM,SAAS,GAAG,OAAO,CAAC,QAAQ;YAChC,CAAC,CAAC,WAAW,OAAO,CAAC,QAAQ,EAAE;YAC/B,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC;QAClB,OAAO;YACL,UAAU,EAAE,mBAAmB,CAAC,SAAS,CAAC;YAC1C,SAAS,EAAE,mBAAmB,CAAC,OAAO,CAAC,KAAK,CAAC;YAC7C,YAAY,EAAE,OAAO,CAAC,YAAY;SACnC,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,sBAAsB,CAAC,MAAgB,EAAE,MAAqB;QAC1E,IAAI,CAAC,MAAM,CAAC,SAAS,IAAI,CAAC,MAAM,CAAC,YAAY,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACrE,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,mBAAmB,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC,QAAQ,EAAE,EAAE;YAC3F,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,eAAe,EAAE,UAAU,MAAM,CAAC,YAAY,EAAE;gBAChD,cAAc,EAAE,kBAAkB;gBAClC,QAAQ,EAAE,kBAAkB;aAC7B;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;SACjC,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,uCAAuC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;YAC3E,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAA8C,CAAC;QAClG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,CAAC;YAClC,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC;QACtC,OAAO,IAAI,CAAC,OAAO;aAChB,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ,IAAI,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;aACpF,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,KAAK,CAAC,UAAU,KAAK,QAAQ,IAAI,oBAAoB,CAC7E;YACE,KAAK,EAAE,EAAE;YACT,SAAS,EAAE,EAAE;YACb,OAAO,EAAE,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,UAAU;YACzC,UAAU,EAAE,KAAK,CAAC,UAAU;SAC7B,EACD,MAAM,CAAC,UAAU,CAClB,CAAC;aACD,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;YACf,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,UAAU,EAAE,mBAAmB,CAAC,KAAK,CAAC,UAAU,CAAC;YACjD,WAAW,EAAE,iBAAiB,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,UAAU,CAAC;SAC9D,CAAC,CAAC,CAAC;IACR,CAAC;CACF;AA5KD,wDA4KC;AAcD,SAAS,iBAAiB,CAAC,KAAa,EAAE,UAAkB;IAC1D,MAAM,SAAS,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC;IAC3C,MAAM,WAAW,GAAG,iBAAiB,CAAC,UAAU,CAAC,CAAC;IAClD,IAAI,CAAC,SAAS,IAAI,CAAC,WAAW,EAAE,CAAC;QAC/B,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,OAAO,SAAS,KAAK,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC;AACvD,CAAC;AAED,SAAS,iBAAiB,CAAC,GAAW;IACpC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;QAC5B,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAC5D,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC1B,OAAO,mBAAmB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC5C,CAAC;QAED,OAAO,mBAAmB,CAAC,IAAI,GAAG,CAAC,IAAI,QAAQ,CAAC,CAAC,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;IACpF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,SAAS,mBAAmB,CAAC,GAAW;IACtC,OAAO,GAAG,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC;AACxC,CAAC;AAED,SAAS,oBAAoB,CAAC,GAAoB,EAAE,gBAAwB;IAC1E,MAAM,aAAa,GAAG,CAAC,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAmB,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACtI,MAAM,UAAU,GAAG,iBAAiB,CAAC,gBAAgB,CAAC,CAAC;IACvD,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,OAAO,KAAK,CAAC;IACf,CAAC;IAED,KAAK,MAAM,SAAS,IAAI,aAAa,EAAE,CAAC;QACtC,MAAM,aAAa,GAAG,iBAAiB,CAAC,SAAS,CAAC,CAAC;QACnD,IAAI,aAAa,IAAI,aAAa,KAAK,UAAU,EAAE,CAAC;YAClD,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,YAAY,GAAG,mBAAmB,CAAC,SAAS,CAAC,CAAC;QACpD,IAAI,YAAY,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,UAAU,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;YAC/E,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,oBAAoB,CAAC,eAA+D;IAC3F,MAAM,MAAM,GAAG,eAAe,EAAE,MAA6C,CAAC;IAC9E,MAAM,KAAK,GAAG,MAAM,EAAE,aAAa,CAAC;IACpC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;AACzF,CAAC","sourcesContent":["import { boolean, object, string } from 'yup';\nimport { getLoggerFor } from 'global-logger-factory';\nimport {\n  BadRequestHttpError,\n  FoundHttpError,\n  JsonInteractionHandler,\n  assertAccountId,\n  assertOidcInteraction,\n  finishInteraction,\n  forgetWebId,\n  parseSchema,\n  validateWithError,\n} from '@solid/community-server';\nimport type {\n  Json,\n  JsonInteractionHandlerInput,\n  JsonRepresentation,\n  JsonView,\n  ProviderFactory,\n  WebIdStore,\n} from '@solid/community-server';\nimport { getIdentityDatabase } from '../drizzle/db';\nimport { PodLookupRepository, type PodLookupResult } from '../drizzle/PodLookupRepository';\nimport { ProvisionCodeCodec } from '../../provision/ProvisionCodeCodec';\n\ntype FetchLike = (input: RequestInfo | URL, init?: RequestInit) => Promise<Response>;\n\nconst inSchema = object({\n  webId: string().trim().required(),\n  remember: boolean().default(false),\n});\n\nexport interface ScopedPickWebIdHandlerOptions {\n  webIdStore: WebIdStore;\n  providerFactory: ProviderFactory;\n  identityDbUrl?: string;\n  podLookupRepository?: PodWebIdLookupRepository;\n  fetch?: FetchLike;\n}\n\nexport interface PodWebIdLookupRepository {\n  findByWebId: (webId: string) => Promise<PodLookupResult | undefined>;\n  findAllByWebId?: (webId: string) => Promise<PodLookupResult[]>;\n}\n\ninterface WebIdEntry extends Record<string, Json | undefined> {\n  webId: string;\n  storageUrl?: string;\n  storageMode?: 'cloud' | 'local' | 'custom';\n}\n\n/**\n * CSS-compatible WebID picker scoped to the current storage provider.\n *\n * The upstream handler lists every WebID linked to the IdP account. In an\n * IDP/SP split flow that lets a Local SP login pick a Cloud Pod again, so this\n * replacement keeps consent choices constrained by the selected SP's Pod facts.\n */\nexport class ScopedPickWebIdHandler extends JsonInteractionHandler implements JsonView {\n  private readonly logger = getLoggerFor(this);\n  private readonly webIdStore: WebIdStore;\n  private readonly providerFactory: ProviderFactory;\n  private readonly podLookupRepository?: PodWebIdLookupRepository;\n  private readonly fetch: FetchLike;\n\n  public constructor(options: ScopedPickWebIdHandlerOptions) {\n    super();\n    this.webIdStore = options.webIdStore;\n    this.providerFactory = options.providerFactory;\n    this.podLookupRepository = options.podLookupRepository ??\n      (options.identityDbUrl ? new PodLookupRepository(getIdentityDatabase(options.identityDbUrl)) : undefined);\n    this.fetch = options.fetch ?? globalThis.fetch.bind(globalThis);\n  }\n\n  public async getView({ accountId, oidcInteraction }: JsonInteractionHandlerInput): Promise<JsonRepresentation> {\n    assertAccountId(accountId);\n    const provider = await this.providerFactory.getProvider();\n    const description = parseSchema(inSchema);\n    const target = await this.resolveTargetStorage(provider, oidcInteraction);\n    const entries = await this.resolveScopedEntries(accountId, target);\n\n    return {\n      json: {\n        ...description,\n        webIds: entries.map((entry) => entry.webId),\n        entries,\n      },\n    };\n  }\n\n  public async handle({ oidcInteraction, accountId, json }: JsonInteractionHandlerInput): Promise<never> {\n    assertOidcInteraction(oidcInteraction);\n    assertAccountId(accountId);\n    const { webId, remember } = await validateWithError(inSchema, json);\n    const provider = await this.providerFactory.getProvider();\n    const target = await this.resolveTargetStorage(provider, oidcInteraction);\n\n    if (!await this.webIdStore.isLinked(webId, accountId)) {\n      this.logger.warn(`Trying to pick WebID ${webId} which does not belong to account ${accountId}`);\n      throw new BadRequestHttpError('WebID does not belong to this account.');\n    }\n\n    if (!await this.isResolvableByCurrentSp(webId, target)) {\n      this.logger.warn(`Trying to pick WebID ${webId} which does not belong to this storage provider`);\n      throw new BadRequestHttpError('WebID does not belong to this storage provider.');\n    }\n\n    await forgetWebId(provider, oidcInteraction);\n    const location = await finishInteraction(oidcInteraction, {\n      login: {\n        accountId: webId,\n        remember,\n      },\n    }, true);\n    throw new FoundHttpError(location);\n  }\n\n  private async resolveScopedEntries(accountId: string, target: TargetStorage): Promise<WebIdEntry[]> {\n    const webIds = (await this.webIdStore.findLinks(accountId)).map((link) => link.webId);\n    if (target.serviceToken) {\n      return this.resolveRemoteSpEntries(webIds, target);\n    }\n\n    const entries: WebIdEntry[] = [];\n    for (const webId of webIds) {\n      const pod = await this.findSpPod(webId, target.storageUrl);\n      if (!pod) {\n        continue;\n      }\n      const storageUrl = ensureTrailingSlash(pod.storageUrl ?? pod.baseUrl);\n      entries.push({\n        webId,\n        storageUrl,\n        storageMode: deriveStorageMode(webId, storageUrl),\n      });\n    }\n    return entries;\n  }\n\n  private async isResolvableByCurrentSp(webId: string, target: TargetStorage): Promise<boolean> {\n    if (target.serviceToken) {\n      return (await this.resolveRemoteSpEntries([webId], target)).some((entry) => entry.webId === webId);\n    }\n    return Boolean(await this.findSpPod(webId, target.storageUrl));\n  }\n\n  private async findSpPod(webId: string, targetStorageUrl: string): Promise<PodLookupResult | undefined> {\n    if (!this.podLookupRepository) {\n      this.logger.warn('No PodLookupRepository configured; refusing to expose unscoped WebID choices');\n      return undefined;\n    }\n\n    try {\n      const pods = this.podLookupRepository.findAllByWebId\n        ? await this.podLookupRepository.findAllByWebId(webId)\n        : await this.podLookupRepository.findByWebId(webId).then((pod) => pod ? [pod] : []);\n      return pods.find((pod) => matchesTargetStorage(pod, targetStorageUrl));\n    } catch (error) {\n      this.logger.warn(`Pod lookup unavailable for WebID ${webId}: ${error}`);\n      return undefined;\n    }\n  }\n\n  private async resolveTargetStorage(\n    provider: { issuer: string },\n    oidcInteraction?: JsonInteractionHandlerInput['oidcInteraction'],\n  ): Promise<TargetStorage> {\n    const provisionCode = extractProvisionCode(oidcInteraction);\n    if (!provisionCode) {\n      return { storageUrl: ensureTrailingSlash(provider.issuer) };\n    }\n\n    const payload = new ProvisionCodeCodec(provider.issuer).decode(provisionCode);\n    if (!payload) {\n      throw new BadRequestHttpError('Invalid or expired provisionCode.');\n    }\n\n    const targetUrl = payload.spDomain\n      ? `https://${payload.spDomain}`\n      : payload.spUrl;\n    return {\n      storageUrl: ensureTrailingSlash(targetUrl),\n      lookupUrl: ensureTrailingSlash(payload.spUrl),\n      serviceToken: payload.serviceToken,\n    };\n  }\n\n  private async resolveRemoteSpEntries(webIds: string[], target: TargetStorage): Promise<WebIdEntry[]> {\n    if (!target.lookupUrl || !target.serviceToken || webIds.length === 0) {\n      return [];\n    }\n\n    const response = await this.fetch(new URL('/provision/webids', target.lookupUrl).toString(), {\n      method: 'POST',\n      headers: {\n        'Authorization': `Bearer ${target.serviceToken}`,\n        'Content-Type': 'application/json',\n        'Accept': 'application/json',\n      },\n      body: JSON.stringify({ webIds }),\n    });\n\n    if (!response.ok) {\n      this.logger.warn(`Remote SP WebID lookup failed: HTTP ${response.status}`);\n      return [];\n    }\n\n    const body = await response.json().catch(() => null) as { entries?: RemoteSpWebIdEntry[] } | null;\n    if (!Array.isArray(body?.entries)) {\n      return [];\n    }\n\n    const allowedWebIds = new Set(webIds);\n    return body.entries\n      .filter((entry) => typeof entry.webId === 'string' && allowedWebIds.has(entry.webId))\n      .filter((entry) => typeof entry.storageUrl === 'string' && matchesTargetStorage(\n        {\n          podId: '',\n          accountId: '',\n          baseUrl: entry.podUrl ?? entry.storageUrl,\n          storageUrl: entry.storageUrl,\n        },\n        target.storageUrl,\n      ))\n      .map((entry) => ({\n        webId: entry.webId,\n        storageUrl: ensureTrailingSlash(entry.storageUrl),\n        storageMode: deriveStorageMode(entry.webId, entry.storageUrl),\n      }));\n  }\n}\n\ninterface TargetStorage {\n  storageUrl: string;\n  lookupUrl?: string;\n  serviceToken?: string;\n}\n\ninterface RemoteSpWebIdEntry {\n  webId: string;\n  podUrl?: string;\n  storageUrl: string;\n}\n\nfunction deriveStorageMode(webId: string, storageUrl: string): 'cloud' | 'local' | 'custom' {\n  const webIdRoot = deriveStorageRoot(webId);\n  const storageRoot = deriveStorageRoot(storageUrl);\n  if (!webIdRoot || !storageRoot) {\n    return 'custom';\n  }\n  return webIdRoot === storageRoot ? 'cloud' : 'local';\n}\n\nfunction deriveStorageRoot(url: string): string | undefined {\n  try {\n    const parsed = new URL(url);\n    const segments = parsed.pathname.split('/').filter(Boolean);\n    if (segments.length === 0) {\n      return ensureTrailingSlash(parsed.origin);\n    }\n\n    return ensureTrailingSlash(new URL(`/${segments[0]}/`, parsed.origin).toString());\n  } catch {\n    return undefined;\n  }\n}\n\nfunction ensureTrailingSlash(url: string): string {\n  return url.replace(/\\/+$/u, '') + '/';\n}\n\nfunction matchesTargetStorage(pod: PodLookupResult, targetStorageUrl: string): boolean {\n  const candidateUrls = [pod.storageUrl, pod.baseUrl].filter((value): value is string => typeof value === 'string' && value.length > 0);\n  const targetRoot = deriveStorageRoot(targetStorageUrl);\n  if (!targetRoot) {\n    return false;\n  }\n\n  for (const candidate of candidateUrls) {\n    const candidateRoot = deriveStorageRoot(candidate);\n    if (candidateRoot && candidateRoot === targetRoot) {\n      return true;\n    }\n\n    const candidateUrl = ensureTrailingSlash(candidate);\n    if (candidateUrl.startsWith(targetRoot) || targetRoot.startsWith(candidateUrl)) {\n      return true;\n    }\n  }\n\n  return false;\n}\n\nfunction extractProvisionCode(oidcInteraction: JsonInteractionHandlerInput['oidcInteraction']): string | undefined {\n  const params = oidcInteraction?.params as Record<string, unknown> | undefined;\n  const value = params?.provisionCode;\n  return typeof value === 'string' && value.trim().length > 0 ? value.trim() : undefined;\n}\n"]}

package/dist/runtime/bootstrap.d.ts

@@ -24,5 +24,5 @@ export interface RuntimeBootstrapState {
 export declare function resolveRuntimeBootstrap(id: string, options: XpodRuntimeOptions, host: RuntimeHost, platform?: RuntimePlatform): Promise<RuntimeBootstrapState>;
 export declare function buildRuntimeEnv(state: RuntimeBootstrapState, options: XpodRuntimeOptions, envFromFile?: Record<string, string | undefined>): Record<string, string | undefined>;
 export declare function buildRuntimeShorthand(runtimeEnv: Record<string, string | undefined>, options: XpodRuntimeOptions, state: RuntimeBootstrapState, baseEnv?: Record<string, string | undefined>): Record<string, string | number | boolean>;
-export declare function createCssRuntimeConfig(state: RuntimeBootstrapState, open: boolean, platform?: Pick<RuntimePlatform, 'dirname' | 'ensureDir' | 'joinPath' | 'writeTextFile'>): string;
+export declare function createCssRuntimeConfig(state: RuntimeBootstrapState, open: boolean, platform?: Pick<RuntimePlatform, 'dirname' | 'ensureDir' | 'joinPath' | 'readTextFile' | 'writeTextFile'>): string;
 export declare function initRuntimeLogger(level: string, platform?: Pick<RuntimePlatform, 'cwd' | 'joinPath'>): void;

package/dist/runtime/bootstrap.js

@@ -215,18 +215,56 @@ function createCssRuntimeConfig(state, open, platform = NodeRuntimePlatform_1.no
         })()
         : normalizeWindowsAbsolutePath(platform.joinPath(runtimeRoot, 'css-runtime.config.json'));
     const openConfigPath = normalizeWindowsAbsolutePath(platform.joinPath(package_root_1.PACKAGE_ROOT, 'config/runtime-open.json'));
+    const runtimeConfigDir = platform.dirname(runtimeConfigPath);
+    const runtimeConfigImportPath = rewriteConfigForFileUrlImportsIfNeeded(configPath, platform.joinPath(runtimeConfigDir, 'config'), platform);
     platform.writeTextFile(runtimeConfigPath, JSON.stringify({
         '@context': [
             'https://linkedsoftwaredependencies.org/bundles/npm/@solid/community-server/^8.0.0/components/context.jsonld',
             'https://linkedsoftwaredependencies.org/bundles/npm/asynchronous-handlers/^1.0.0/components/context.jsonld',
         ],
         import: [
-            toConfigImportSpecifier(runtimeConfigPath, configPath),
+            toConfigImportSpecifier(runtimeConfigPath, runtimeConfigImportPath),
             toConfigImportSpecifier(runtimeConfigPath, openConfigPath),
         ],
     }, null, 2));
     return runtimeConfigPath;
 }
+function rewriteConfigForFileUrlImportsIfNeeded(configPath, outputDir, platform, rewritten = new Map()) {
+    const normalizedConfigPath = normalizeWindowsAbsolutePath(configPath);
+    if (isWindowsAbsolutePath(normalizedConfigPath) || !pathNeedsEscapedFileUrl(normalizedConfigPath)) {
+        return normalizedConfigPath;
+    }
+    const existing = rewritten.get(normalizedConfigPath);
+    if (existing) {
+        return existing;
+    }
+    platform.ensureDir(outputDir);
+    const outputPath = normalizeWindowsAbsolutePath(platform.joinPath(outputDir, node_path_1.default.posix.basename(normalizedConfigPath)));
+    rewritten.set(normalizedConfigPath, outputPath);
+    const parsed = JSON.parse(platform.readTextFile(normalizedConfigPath));
+    parsed.import = rewriteConfigImports(normalizedConfigPath, parsed.import, outputDir, platform, rewritten);
+    platform.writeTextFile(outputPath, `${JSON.stringify(parsed, null, 2)}\n`);
+    return outputPath;
+}
+function rewriteConfigImports(sourceConfigPath, imports, outputDir, platform, rewritten) {
+    if (typeof imports === 'string') {
+        return rewriteConfigImport(sourceConfigPath, imports, outputDir, platform, rewritten);
+    }
+    if (Array.isArray(imports)) {
+        return imports.map((value) => typeof value === 'string'
+            ? rewriteConfigImport(sourceConfigPath, value, outputDir, platform, rewritten)
+            : value);
+    }
+    return imports;
+}
+function rewriteConfigImport(sourceConfigPath, importValue, outputDir, platform, rewritten) {
+    if (!importValue.startsWith('./') && !importValue.startsWith('../')) {
+        return importValue;
+    }
+    const targetPath = normalizeWindowsAbsolutePath(node_path_1.default.posix.resolve(platform.dirname(sourceConfigPath), importValue));
+    const rewrittenTargetPath = rewriteConfigForFileUrlImportsIfNeeded(targetPath, outputDir, platform, rewritten);
+    return (0, node_url_1.pathToFileURL)(rewrittenTargetPath).href;
+}
 function initRuntimeLogger(level, platform = NodeRuntimePlatform_1.nodeRuntimePlatform) {
     const loggerFactory = new ConfigurableLoggerFactory_1.ConfigurableLoggerFactory(level, {
         fileName: platform.joinPath(platform.cwd(), 'logs/xpod-%DATE%.log'),

package/dist/runtime/bootstrap.js.map

@@ -1 +1 @@
-{"version":3,"file":"bootstrap.js","sourceRoot":"","sources":["../../src/runtime/bootstrap.ts"],"names":[],"mappings":";;;;;AAgHA,0DAoEC;AAED,0CAgCC;AAED,sDA4CC;AAED,wDAoCC;AAED,8CASC;AArTD,iEAA+D;AAC/D,0DAA6B;AAC7B,uCAAyC;AACzC,oFAAiF;AACjF,iDAA8C;AAE9C,+CAA6E;AAC7E,6EAA0E;AAyB1E,SAAS,mBAAmB,CAAC,GAAW;IACtC,OAAO,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,GAAG,GAAG,CAAC;AAC7C,CAAC;AAED,SAAS,4BAA4B,CAAC,QAAgB;IACpD,OAAO,QAAQ,CAAC,OAAO,CAAC,2BAA2B,EAAE,EAAE,CAAC,CAAC;AAC3D,CAAC;AAED,SAAS,qBAAqB,CAAC,QAAgB;IAC7C,OAAO,iBAAiB,CAAC,IAAI,CAAC,4BAA4B,CAAC,QAAQ,CAAC,CAAC,CAAC;AACxE,CAAC;AAED,SAAS,mBAAmB,CAAC,QAAgB;IAC3C,MAAM,cAAc,GAAG,4BAA4B,CAAC,QAAQ,CAAC,CAAC;IAC9D,OAAO,qBAAqB,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,mBAAI,CAAC,KAAK,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;AACjH,CAAC;AAED,SAAS,gCAAgC,CAAC,SAAiB,EAAE,UAAkB;IAC7E,MAAM,SAAS,GAAG,mBAAmB,CAAC,SAAS,CAAC,CAAC;IACjD,MAAM,UAAU,GAAG,mBAAmB,CAAC,UAAU,CAAC,CAAC;IACnD,OAAO,OAAO,CAAC,SAAS,IAAI,UAAU,IAAI,SAAS,KAAK,UAAU,CAAC,CAAC;AACtE,CAAC;AAED,SAAS,gBAAgB,CAAC,QAAgB;IACxC,MAAM,cAAc,GAAG,4BAA4B,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IAClF,OAAO,IAAI,GAAG,CAAC,WAAW,cAAc,EAAE,CAAC,CAAC,IAAI,CAAC;AACnD,CAAC;AAED,SAAS,uBAAuB,CAAC,YAAoB,EAAE,UAAkB;IACvE,MAAM,kBAAkB,GAAG,4BAA4B,CAAC,YAAY,CAAC,CAAC;IACtE,MAAM,gBAAgB,GAAG,4BAA4B,CAAC,UAAU,CAAC,CAAC;IAClE,IAAI,CAAC,qBAAqB,CAAC,kBAAkB,CAAC,IAAI,CAAC,uBAAuB,CAAC,kBAAkB,CAAC,IAAI,uBAAuB,CAAC,gBAAgB,CAAC,CAAC,EAAE,CAAC;QAC7I,OAAO,IAAA,wBAAa,EAAC,gBAAgB,CAAC,CAAC,IAAI,CAAC;IAC9C,CAAC;IAED,MAAM,eAAe,GAAG,qBAAqB,CAAC,kBAAkB,CAAC,IAAI,qBAAqB,CAAC,gBAAgB,CAAC,CAAC;IAC7G,MAAM,OAAO,GAAG,eAAe,CAAC,CAAC,CAAC,mBAAI,CAAC,KAAK,CAAC,CAAC,CAAC,mBAAI,CAAC,KAAK,CAAC;IAC1D,MAAM,iBAAiB,GAAG,OAAO,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC;IAC/F,MAAM,UAAU,GAAG,eAAe,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,UAAU,CAAC;IAEnE,IAAI,eAAe,IAAI,gCAAgC,CAAC,iBAAiB,EAAE,UAAU,CAAC,EAAE,CAAC;QACvF,OAAO,gBAAgB,CAAC,UAAU,CAAC,CAAC;IACtC,CAAC;IAED,MAAM,YAAY,GAAG,OAAO,CAAC,QAAQ,CAAC,iBAAiB,EAAE,UAAU,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IACzF,IAAI,YAAY,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,YAAY,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;QACpE,OAAO,YAAY,CAAC;IACtB,CAAC;IACD,OAAO,KAAK,YAAY,EAAE,CAAC;AAC7B,CAAC;AAED,SAAS,uBAAuB,CAAC,QAAgB;IAC/C,OAAO,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;AAC7B,CAAC;AAED,SAAS,kBAAkB,CAAC,OAA+D;IACzF,MAAM,MAAM,GAA8C,EAAE,CAAC;IAC7D,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,OAAO,EAAE,CAAC;QACnC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QACtB,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,oBAAoB,CAC3B,KAAa,EACb,WAAiD,yCAAmB;IAEpE,IACE,KAAK,CAAC,UAAU,CAAC,SAAS,CAAC;QAC3B,KAAK,CAAC,UAAU,CAAC,aAAa,CAAC;QAC/B,KAAK,CAAC,UAAU,CAAC,eAAe,CAAC;QACjC,KAAK,CAAC,UAAU,CAAC,UAAU,CAAC,EAC5B,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,UAAU,QAAQ,CAAC,WAAW,CAAC,KAAK,CAAC,EAAE,CAAC;AACjD,CAAC;AAEM,KAAK,UAAU,uBAAuB,CAC3C,EAAU,EACV,OAA2B,EAC3B,IAAiB,EACjB,WAA4B,yCAAmB;IAE/C,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC;IACrC,MAAM,SAAS,GAAG,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAC3D,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,WAAW,CAAC;IACjD,MAAM,WAAW,GAAG,QAAQ,CAAC,WAAW,CAAC,OAAO,CAAC,WAAW,IAAI,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,EAAE,EAAE,YAAY,EAAE,cAAc,EAAE,EAAE,CAAC,CAAC,CAAC;IACrI,MAAM,YAAY,GAAG,QAAQ,CAAC,WAAW,CAAC,OAAO,CAAC,YAAY,IAAI,QAAQ,CAAC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC;IAC1G,MAAM,cAAc,GAAG,oBAAoB,CAAC,OAAO,CAAC,cAAc,IAAI,QAAQ,CAAC,QAAQ,CAAC,WAAW,EAAE,kBAAkB,CAAC,EAAE,QAAQ,CAAC,CAAC;IACpI,MAAM,YAAY,GAAG,QAAQ,CAAC,WAAW,CAAC,OAAO,CAAC,YAAY,IAAI,QAAQ,CAAC,QAAQ,CAAC,WAAW,EAAE,kBAAkB,CAAC,CAAC,CAAC;IACtH,MAAM,aAAa,GAAG,oBAAoB,CAAC,OAAO,CAAC,aAAa,IAAI,QAAQ,CAAC,QAAQ,CAAC,WAAW,EAAE,iBAAiB,CAAC,EAAE,QAAQ,CAAC,CAAC;IACjI,MAAM,UAAU,GAAG,oBAAoB,CAAC,OAAO,CAAC,UAAU,IAAI,QAAQ,CAAC,QAAQ,CAAC,WAAW,EAAE,cAAc,CAAC,EAAE,QAAQ,CAAC,CAAC;IACxH,MAAM,WAAW,GAAG,OAAO,CAAC,QAAQ,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IAC7E,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,IAAI,IAAI,KAAK,CAAC;IACzD,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,QAAQ,CAAC,MAAM,CAAC,mBAAmB,CAAC,IAAI,MAAM,CAAC;IAEpF,QAAQ,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;IAChC,QAAQ,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;IAEjC,MAAM,WAAW,GAAG,QAAQ,CAAC,QAAQ,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;IAC9D,IAAI,SAAS,KAAK,QAAQ,EAAE,CAAC;QAC3B,QAAQ,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;IAClC,CAAC;IACD,MAAM,KAAK,GAAqB,SAAS,KAAK,MAAM;QAClD,CAAC,CAAC,MAAM,IAAI,CAAC,aAAa,CAAC;YACzB,WAAW,EAAE,OAAO,CAAC,WAAW;YAChC,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,QAAQ,EAAE,IAAI;SACf,CAAC;QACF,CAAC,CAAC,EAAE,CAAC;IACP,MAAM,OAAO,GAAuB,EAAE,CAAC;IAEvC,IAAI,SAAS,KAAK,QAAQ,EAAE,CAAC;QAC3B,OAAO,CAAC,OAAO,GAAG,QAAQ,CAAC,WAAW,CAAC,OAAO,CAAC,iBAAiB,IAAI,QAAQ,CAAC,QAAQ,CAAC,WAAW,EAAE,cAAc,CAAC,CAAC,CAAC;QACpH,OAAO,CAAC,GAAG,GAAG,QAAQ,CAAC,WAAW,CAAC,OAAO,CAAC,aAAa,IAAI,QAAQ,CAAC,QAAQ,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC,CAAC;QACxG,OAAO,CAAC,GAAG,GAAG,QAAQ,CAAC,WAAW,CAAC,OAAO,CAAC,aAAa,IAAI,QAAQ,CAAC,QAAQ,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC,CAAC;IAC1G,CAAC;IAED,MAAM,OAAO,GAAG,mBAAmB,CACjC,OAAO,CAAC,OAAO,IAAI,CAAC,SAAS,KAAK,QAAQ;QACxC,CAAC,CAAC,kBAAkB;QACpB,CAAC,CAAC,UAAU,QAAQ,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC,CAC3C,CAAC;IAEF,OAAO;QACL,EAAE;QACF,IAAI;QACJ,IAAI;QACJ,SAAS;QACT,QAAQ;QACR,WAAW;QACX,YAAY;QACZ,cAAc;QACd,YAAY;QACZ,aAAa;QACb,UAAU;QACV,WAAW;QACX,OAAO;QACP,QAAQ;QACR,OAAO;QACP,WAAW,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS;QAChF,KAAK;QACL,OAAO;KACR,CAAC;AACJ,CAAC;AAED,SAAgB,eAAe,CAC7B,KAA4B,EAC5B,OAA2B,EAC3B,cAAkD,EAAE;IAEpD,MAAM,SAAS,GAAG;QAChB,GAAG,WAAW;QACd,GAAG,OAAO,CAAC,GAAG;KACf,CAAC;IACF,MAAM,kBAAkB,GAAG,IAAA,uCAAyB,EAAC,SAAS,CAAC,CAAC;IAEhE,OAAO;QACL,GAAG,SAAS;QACZ,aAAa,EAAE,KAAK,CAAC,WAAW;QAChC,YAAY,EAAE,KAAK,CAAC,IAAI;QACxB,YAAY,EAAE,KAAK,CAAC,OAAO;QAC3B,kBAAkB,EAAE,kBAAkB;YACpC,CAAC,CAAC,IAAA,+BAAiB,EAAC,kBAAkB,CAAC;YACvC,CAAC,CAAC,GAAG,KAAK,CAAC,OAAO,aAAa;QACjC,kBAAkB,EAAE,KAAK,CAAC,YAAY;QACtC,mBAAmB,EAAE,KAAK,CAAC,cAAc;QACzC,eAAe,EAAE,KAAK,CAAC,cAAc;QACrC,mBAAmB,EAAE,KAAK,CAAC,aAAa;QACxC,YAAY,EAAE,KAAK,CAAC,aAAa;QACjC,QAAQ,EAAE,KAAK,CAAC,KAAK,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS;QAC7E,QAAQ,EAAE,KAAK,CAAC,KAAK,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS;QAC7E,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,eAAe,EAAE,KAAK,CAAC,OAAO,CAAC,GAAG;QAClC,cAAc,EAAE,KAAK,CAAC,KAAK,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS;QAC3F,YAAY,EAAE,IAAI,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,MAAM;QAC3C,iBAAiB,EAAE,KAAK,CAAC,QAAQ;KAClC,CAAC;AACJ,CAAC;AAED,SAAgB,qBAAqB,CACnC,UAA8C,EAC9C,OAA2B,EAC3B,KAA4B,EAC5B,UAA8C,yCAAmB,CAAC,OAAO;IAEzE,MAAM,QAAQ,GAAG,CAAC,GAAW,EAAsB,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,CAAC;IACtF,MAAM,kBAAkB,GAAG,IAAA,uCAAyB,EAAC;QACnD,UAAU,EAAE,QAAQ,CAAC,YAAY,CAAC;KACnC,CAAC,CAAC;IAEH,OAAO;QACL,GAAG,kBAAkB,CAAC;YACpB,CAAC,mBAAmB,EAAE,QAAQ,CAAC,yBAAyB,CAAC,CAAC;YAC1D,CAAC,gBAAgB,EAAE,QAAQ,CAAC,sBAAsB,CAAC,CAAC;YACpD,CAAC,gBAAgB,EAAE,QAAQ,CAAC,sBAAsB,CAAC,CAAC;YACpD,CAAC,eAAe,EAAE,QAAQ,CAAC,oBAAoB,CAAC,CAAC;YACjD,CAAC,iBAAiB,EAAE,QAAQ,CAAC,uBAAuB,CAAC,CAAC;YACtD,CAAC,aAAa,EAAE,QAAQ,CAAC,kBAAkB,CAAC,CAAC;YAC7C,CAAC,eAAe,EAAE,QAAQ,CAAC,oBAAoB,CAAC,CAAC;YACjD,CAAC,eAAe,EAAE,QAAQ,CAAC,oBAAoB,CAAC,CAAC;YACjD,CAAC,iBAAiB,EAAE,QAAQ,CAAC,uBAAuB,CAAC,IAAI,EAAE,CAAC;YAC5D,CAAC,iBAAiB,EAAE,QAAQ,CAAC,uBAAuB,CAAC,IAAI,KAAK,CAAC;YAC/D,CAAC,qBAAqB,EAAE,QAAQ,CAAC,4BAA4B,CAAC,IAAI,EAAE,CAAC;YACrE,CAAC,qBAAqB,EAAE,QAAQ,CAAC,4BAA4B,CAAC,IAAI,EAAE,CAAC;YACrE,CAAC,YAAY,EAAE,kBAAkB,CAAC;YAClC,CAAC,cAAc,EAAE,QAAQ,CAAC,mBAAmB,CAAC,CAAC;YAC/C,CAAC,QAAQ,EAAE,QAAQ,CAAC,cAAc,CAAC,CAAC;YACpC,CAAC,WAAW,EAAE,QAAQ,CAAC,iBAAiB,CAAC,CAAC;YAC1C,CAAC,cAAc,EAAE,QAAQ,CAAC,oBAAoB,CAAC,CAAC;SACjD,CAAC;QACF,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,aAAa,EAAE,KAAK,CAAC,aAAa;QAClC,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,QAAQ,EAAE,KAAK,CAAC,WAAW;QAC3B,OAAO,EAAE,KAAK,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO;QACpD,gBAAgB,EAAE,OAAO,CAAC,gBAAgB,IAAI,KAAK;QACnD,yBAAyB,EAAE,OAAO,CAAC,yBAAyB,IAAI,KAAK;QACrE,GAAG,CAAC,OAAO,CAAC,SAAS,IAAI,EAAE,CAAC;KAC7B,CAAC;AACJ,CAAC;AAED,SAAgB,sBAAsB,CACpC,KAA4B,EAC5B,IAAa,EACb,WAA0F,yCAAmB;IAE7G,MAAM,UAAU,GAAG,4BAA4B,CAAC,QAAQ,CAAC,QAAQ,CAAC,2BAAY,EAAE,UAAU,KAAK,CAAC,IAAI,OAAO,CAAC,CAAC,CAAC;IAC9G,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO,UAAU,CAAC;IACpB,CAAC;IAED,MAAM,WAAW,GAAG,4BAA4B,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IACpE,MAAM,iBAAiB,GAAG,gCAAgC,CAAC,WAAW,EAAE,UAAU,CAAC;QACjF,CAAC,CAAC,CAAC,GAAG,EAAE;YACN,MAAM,gBAAgB,GAAG,4BAA4B,CAAC,QAAQ,CAAC,QAAQ,CACrE,QAAQ,CAAC,OAAO,CAAC,UAAU,CAAC,EAC5B,IAAI,EACJ,eAAe,EACf,KAAK,CAAC,EAAE,CACT,CAAC,CAAC;YACH,QAAQ,CAAC,SAAS,CAAC,gBAAgB,CAAC,CAAC;YACrC,OAAO,4BAA4B,CAAC,QAAQ,CAAC,QAAQ,CAAC,gBAAgB,EAAE,yBAAyB,CAAC,CAAC,CAAC;QACtG,CAAC,CAAC,EAAE;QACJ,CAAC,CAAC,4BAA4B,CAAC,QAAQ,CAAC,QAAQ,CAAC,WAAW,EAAE,yBAAyB,CAAC,CAAC,CAAC;IAC5F,MAAM,cAAc,GAAG,4BAA4B,CAAC,QAAQ,CAAC,QAAQ,CAAC,2BAAY,EAAE,0BAA0B,CAAC,CAAC,CAAC;IACjH,QAAQ,CAAC,aAAa,CAAC,iBAAiB,EAAE,IAAI,CAAC,SAAS,CAAC;QACvD,UAAU,EAAE;YACV,6GAA6G;YAC7G,2GAA2G;SAC5G;QACD,MAAM,EAAE;YACN,uBAAuB,CAAC,iBAAiB,EAAE,UAAU,CAAC;YACtD,uBAAuB,CAAC,iBAAiB,EAAE,cAAc,CAAC;SAC3D;KACF,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IAEb,OAAO,iBAAiB,CAAC;AAC3B,CAAC;AAED,SAAgB,iBAAiB,CAC/B,KAAa,EACb,WAAsD,yCAAmB;IAEzE,MAAM,aAAa,GAAG,IAAI,qDAAyB,CAAC,KAAK,EAAE;QACzD,QAAQ,EAAE,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,EAAE,EAAE,sBAAsB,CAAC;QACnE,YAAY,EAAE,IAAI;KACnB,CAAC,CAAC;IACH,IAAA,8CAAsB,EAAC,aAAa,CAAC,CAAC;AACxC,CAAC","sourcesContent":["import { setGlobalLoggerFactory } from 'global-logger-factory';\nimport path from 'node:path';\nimport { pathToFileURL } from 'node:url';\nimport { ConfigurableLoggerFactory } from '../logging/ConfigurableLoggerFactory';\nimport { PACKAGE_ROOT } from './package-root';\nimport type { RuntimeHost } from './host/types';\nimport { oidcTokenEndpoint, resolveExternalOidcIssuer } from './oidc-issuer';\nimport { nodeRuntimePlatform } from './platform/node/NodeRuntimePlatform';\nimport type { RuntimePlatform } from './platform/types';\nimport type { XpodRuntimeOptions, XpodRuntimePorts, XpodRuntimeSockets } from './runtime-types';\n\nexport interface RuntimeBootstrapState {\n  id: string;\n  host: RuntimeHost;\n  mode: 'local' | 'cloud';\n  transport: 'socket' | 'port';\n  bindHost: string;\n  runtimeRoot: string;\n  rootFilePath: string;\n  sparqlEndpoint: string;\n  rdfIndexPath: string;\n  identityDbUrl: string;\n  usageDbUrl: string;\n  cssAuthMode: 'acp' | 'acl' | 'allow-all';\n  apiOpen: boolean;\n  logLevel: string;\n  baseUrl: string;\n  envFilePath?: string;\n  ports: XpodRuntimePorts;\n  sockets: XpodRuntimeSockets;\n}\n\nfunction ensureTrailingSlash(url: string): string {\n  return url.endsWith('/') ? url : `${url}/`;\n}\n\nfunction normalizeWindowsAbsolutePath(filePath: string): string {\n  return filePath.replace(/^[\\\\/]+(?=[A-Za-z]:[\\\\/])/, '');\n}\n\nfunction isWindowsAbsolutePath(filePath: string): boolean {\n  return /^[A-Za-z]:[\\\\/]/.test(normalizeWindowsAbsolutePath(filePath));\n}\n\nfunction getWindowsDriveRoot(filePath: string): string | undefined {\n  const normalizedPath = normalizeWindowsAbsolutePath(filePath);\n  return isWindowsAbsolutePath(normalizedPath) ? path.win32.parse(normalizedPath).root.toLowerCase() : undefined;\n}\n\nfunction arePathsOnDifferentWindowsDrives(firstPath: string, secondPath: string): boolean {\n  const firstRoot = getWindowsDriveRoot(firstPath);\n  const secondRoot = getWindowsDriveRoot(secondPath);\n  return Boolean(firstRoot && secondRoot && firstRoot !== secondRoot);\n}\n\nfunction toWindowsFileUrl(filePath: string): string {\n  const normalizedPath = normalizeWindowsAbsolutePath(filePath).replace(/\\\\/g, '/');\n  return new URL(`file:///${normalizedPath}`).href;\n}\n\nfunction toConfigImportSpecifier(fromFilePath: string, toFilePath: string): string {\n  const normalizedFromPath = normalizeWindowsAbsolutePath(fromFilePath);\n  const normalizedToPath = normalizeWindowsAbsolutePath(toFilePath);\n  if (!isWindowsAbsolutePath(normalizedFromPath) && (pathNeedsEscapedFileUrl(normalizedFromPath) || pathNeedsEscapedFileUrl(normalizedToPath))) {\n    return pathToFileURL(normalizedToPath).href;\n  }\n\n  const useWindowsPaths = isWindowsAbsolutePath(normalizedFromPath) || isWindowsAbsolutePath(normalizedToPath);\n  const pathApi = useWindowsPaths ? path.win32 : path.posix;\n  const fromDirectoryPath = pathApi.dirname(useWindowsPaths ? normalizedFromPath : fromFilePath);\n  const targetPath = useWindowsPaths ? normalizedToPath : toFilePath;\n\n  if (useWindowsPaths && arePathsOnDifferentWindowsDrives(fromDirectoryPath, targetPath)) {\n    return toWindowsFileUrl(targetPath);\n  }\n\n  const relativePath = pathApi.relative(fromDirectoryPath, targetPath).replace(/\\\\/g, '/');\n  if (relativePath.startsWith('./') || relativePath.startsWith('../')) {\n    return relativePath;\n  }\n  return `./${relativePath}`;\n}\n\nfunction pathNeedsEscapedFileUrl(filePath: string): boolean {\n  return /\\s/.test(filePath);\n}\n\nfunction withDefinedEntries(entries: Array<[string, string | number | boolean | undefined]>): Record<string, string | number | boolean> {\n  const result: Record<string, string | number | boolean> = {};\n  for (const [key, value] of entries) {\n    if (value !== undefined) {\n      result[key] = value;\n    }\n  }\n  return result;\n}\n\nfunction normalizeDatabaseUrl(\n  value: string,\n  platform: Pick<RuntimePlatform, 'resolvePath'> = nodeRuntimePlatform,\n): string {\n  if (\n    value.startsWith('sqlite:') ||\n    value.startsWith('postgres://') ||\n    value.startsWith('postgresql://') ||\n    value.startsWith('mysql://')\n  ) {\n    return value;\n  }\n  return `sqlite:${platform.resolvePath(value)}`;\n}\n\nexport async function resolveRuntimeBootstrap(\n  id: string,\n  options: XpodRuntimeOptions,\n  host: RuntimeHost,\n  platform: RuntimePlatform = nodeRuntimePlatform,\n): Promise<RuntimeBootstrapState> {\n  const mode = options.mode ?? 'local';\n  const transport = host.resolveTransport(options.transport);\n  const bindHost = options.bindHost ?? '127.0.0.1';\n  const runtimeRoot = platform.resolvePath(options.runtimeRoot ?? platform.joinPath(platform.cwd(), '.test-data', 'xpod-runtime', id));\n  const rootFilePath = platform.resolvePath(options.rootFilePath ?? platform.joinPath(runtimeRoot, 'data'));\n  const sparqlEndpoint = normalizeDatabaseUrl(options.sparqlEndpoint ?? platform.joinPath(runtimeRoot, 'quadstore.sqlite'), platform);\n  const rdfIndexPath = platform.resolvePath(options.rdfIndexPath ?? platform.joinPath(runtimeRoot, 'rdf-index.sqlite'));\n  const identityDbUrl = normalizeDatabaseUrl(options.identityDbUrl ?? platform.joinPath(runtimeRoot, 'identity.sqlite'), platform);\n  const usageDbUrl = normalizeDatabaseUrl(options.usageDbUrl ?? platform.joinPath(runtimeRoot, 'usage.sqlite'), platform);\n  const cssAuthMode = options.authMode ?? (options.open ? 'allow-all' : 'acp');\n  const apiOpen = options.apiOpen ?? options.open ?? false;\n  const logLevel = options.logLevel ?? platform.getEnv('CSS_LOGGING_LEVEL') ?? 'warn';\n\n  platform.ensureDir(runtimeRoot);\n  platform.ensureDir(rootFilePath);\n\n  const socketsRoot = platform.joinPath(runtimeRoot, 'sockets');\n  if (transport === 'socket') {\n    platform.ensureDir(socketsRoot);\n  }\n  const ports: XpodRuntimePorts = transport === 'port'\n    ? await host.allocatePorts({\n      gatewayPort: options.gatewayPort,\n      cssPort: options.cssPort,\n      apiPort: options.apiPort,\n      basePort: 5600,\n    })\n    : {};\n  const sockets: XpodRuntimeSockets = {};\n\n  if (transport === 'socket') {\n    sockets.gateway = platform.resolvePath(options.gatewaySocketPath ?? platform.joinPath(socketsRoot, 'gateway.sock'));\n    sockets.css = platform.resolvePath(options.cssSocketPath ?? platform.joinPath(socketsRoot, 'css.sock'));\n    sockets.api = platform.resolvePath(options.apiSocketPath ?? platform.joinPath(socketsRoot, 'api.sock'));\n  }\n\n  const baseUrl = ensureTrailingSlash(\n    options.baseUrl ?? (transport === 'socket'\n      ? 'http://localhost'\n      : `http://${bindHost}:${ports.gateway}`),\n  );\n\n  return {\n    id,\n    host,\n    mode,\n    transport,\n    bindHost,\n    runtimeRoot,\n    rootFilePath,\n    sparqlEndpoint,\n    rdfIndexPath,\n    identityDbUrl,\n    usageDbUrl,\n    cssAuthMode,\n    apiOpen,\n    logLevel,\n    baseUrl,\n    envFilePath: options.envFile ? platform.resolvePath(options.envFile) : undefined,\n    ports,\n    sockets,\n  };\n}\n\nexport function buildRuntimeEnv(\n  state: RuntimeBootstrapState,\n  options: XpodRuntimeOptions,\n  envFromFile: Record<string, string | undefined> = {},\n): Record<string, string | undefined> {\n  const mergedEnv = {\n    ...envFromFile,\n    ...options.env,\n  };\n  const externalOidcIssuer = resolveExternalOidcIssuer(mergedEnv);\n\n  return {\n    ...mergedEnv,\n    XPOD_ENV_PATH: state.envFilePath,\n    XPOD_EDITION: state.mode,\n    CSS_BASE_URL: state.baseUrl,\n    CSS_TOKEN_ENDPOINT: externalOidcIssuer\n      ? oidcTokenEndpoint(externalOidcIssuer)\n      : `${state.baseUrl}.oidc/token`,\n    CSS_ROOT_FILE_PATH: state.rootFilePath,\n    CSS_SPARQL_ENDPOINT: state.sparqlEndpoint,\n    SPARQL_ENDPOINT: state.sparqlEndpoint,\n    CSS_IDENTITY_DB_URL: state.identityDbUrl,\n    DATABASE_URL: state.identityDbUrl,\n    CSS_PORT: state.ports.css !== undefined ? String(state.ports.css) : undefined,\n    API_PORT: state.ports.api !== undefined ? String(state.ports.api) : undefined,\n    API_HOST: state.bindHost,\n    API_SOCKET_PATH: state.sockets.api,\n    XPOD_MAIN_PORT: state.ports.gateway !== undefined ? String(state.ports.gateway) : undefined,\n    CORS_ORIGINS: new URL(state.baseUrl).origin,\n    CSS_LOGGING_LEVEL: state.logLevel,\n  };\n}\n\nexport function buildRuntimeShorthand(\n  runtimeEnv: Record<string, string | undefined>,\n  options: XpodRuntimeOptions,\n  state: RuntimeBootstrapState,\n  baseEnv: Record<string, string | undefined> = nodeRuntimePlatform.baseEnv,\n): Record<string, string | number | boolean> {\n  const envValue = (key: string): string | undefined => runtimeEnv[key] ?? baseEnv[key];\n  const externalOidcIssuer = resolveExternalOidcIssuer({\n    oidcIssuer: envValue('oidcIssuer'),\n  });\n\n  return {\n    ...withDefinedEntries([\n      ['baseStorageDomain', envValue('CSS_BASE_STORAGE_DOMAIN')],\n      ['minioAccessKey', envValue('CSS_MINIO_ACCESS_KEY')],\n      ['minioSecretKey', envValue('CSS_MINIO_SECRET_KEY')],\n      ['minioEndpoint', envValue('CSS_MINIO_ENDPOINT')],\n      ['minioBucketName', envValue('CSS_MINIO_BUCKET_NAME')],\n      ['redisClient', envValue('CSS_REDIS_CLIENT')],\n      ['redisUsername', envValue('CSS_REDIS_USERNAME')],\n      ['redisPassword', envValue('CSS_REDIS_PASSWORD')],\n      ['emailConfigHost', envValue('CSS_EMAIL_CONFIG_HOST') ?? ''],\n      ['emailConfigPort', envValue('CSS_EMAIL_CONFIG_PORT') ?? '587'],\n      ['emailConfigAuthUser', envValue('CSS_EMAIL_CONFIG_AUTH_USER') ?? ''],\n      ['emailConfigAuthPass', envValue('CSS_EMAIL_CONFIG_AUTH_PASS') ?? ''],\n      ['oidcIssuer', externalOidcIssuer],\n      ['allowedHosts', envValue('CSS_ALLOWED_HOSTS')],\n      ['nodeId', envValue('XPOD_NODE_ID')],\n      ['nodeToken', envValue('XPOD_NODE_TOKEN')],\n      ['serviceToken', envValue('XPOD_SERVICE_TOKEN')],\n    ]),\n    baseUrl: state.baseUrl,\n    rootFilePath: state.rootFilePath,\n    sparqlEndpoint: state.sparqlEndpoint,\n    rdfIndexPath: state.rdfIndexPath,\n    identityDbUrl: state.identityDbUrl,\n    usageDbUrl: state.usageDbUrl,\n    logLevel: state.logLevel,\n    authMode: state.cssAuthMode,\n    edition: state.mode === 'cloud' ? 'server' : 'local',\n    edgeNodesEnabled: options.edgeNodesEnabled ?? false,\n    centerRegistrationEnabled: options.centerRegistrationEnabled ?? false,\n    ...(options.shorthand ?? {}),\n  };\n}\n\nexport function createCssRuntimeConfig(\n  state: RuntimeBootstrapState,\n  open: boolean,\n  platform: Pick<RuntimePlatform, 'dirname' | 'ensureDir' | 'joinPath' | 'writeTextFile'> = nodeRuntimePlatform,\n): string {\n  const configPath = normalizeWindowsAbsolutePath(platform.joinPath(PACKAGE_ROOT, `config/${state.mode}.json`));\n  if (!open) {\n    return configPath;\n  }\n\n  const runtimeRoot = normalizeWindowsAbsolutePath(state.runtimeRoot);\n  const runtimeConfigPath = arePathsOnDifferentWindowsDrives(runtimeRoot, configPath)\n    ? (() => {\n      const runtimeConfigDir = normalizeWindowsAbsolutePath(platform.joinPath(\n        platform.dirname(configPath),\n        '..',\n        '.xpod-runtime',\n        state.id,\n      ));\n      platform.ensureDir(runtimeConfigDir);\n      return normalizeWindowsAbsolutePath(platform.joinPath(runtimeConfigDir, 'css-runtime.config.json'));\n    })()\n    : normalizeWindowsAbsolutePath(platform.joinPath(runtimeRoot, 'css-runtime.config.json'));\n  const openConfigPath = normalizeWindowsAbsolutePath(platform.joinPath(PACKAGE_ROOT, 'config/runtime-open.json'));\n  platform.writeTextFile(runtimeConfigPath, JSON.stringify({\n    '@context': [\n      'https://linkedsoftwaredependencies.org/bundles/npm/@solid/community-server/^8.0.0/components/context.jsonld',\n      'https://linkedsoftwaredependencies.org/bundles/npm/asynchronous-handlers/^1.0.0/components/context.jsonld',\n    ],\n    import: [\n      toConfigImportSpecifier(runtimeConfigPath, configPath),\n      toConfigImportSpecifier(runtimeConfigPath, openConfigPath),\n    ],\n  }, null, 2));\n\n  return runtimeConfigPath;\n}\n\nexport function initRuntimeLogger(\n  level: string,\n  platform: Pick<RuntimePlatform, 'cwd' | 'joinPath'> = nodeRuntimePlatform,\n): void {\n  const loggerFactory = new ConfigurableLoggerFactory(level, {\n    fileName: platform.joinPath(platform.cwd(), 'logs/xpod-%DATE%.log'),\n    showLocation: true,\n  });\n  setGlobalLoggerFactory(loggerFactory);\n}\n"]}
+{"version":3,"file":"bootstrap.js","sourceRoot":"","sources":["../../src/runtime/bootstrap.ts"],"names":[],"mappings":";;;;;AAgHA,0DAoEC;AAED,0CAgCC;AAED,sDA4CC;AAED,wDA0CC;AAwED,8CASC;AAjYD,iEAA+D;AAC/D,0DAA6B;AAC7B,uCAAyC;AACzC,oFAAiF;AACjF,iDAA8C;AAE9C,+CAA6E;AAC7E,6EAA0E;AAyB1E,SAAS,mBAAmB,CAAC,GAAW;IACtC,OAAO,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,GAAG,GAAG,CAAC;AAC7C,CAAC;AAED,SAAS,4BAA4B,CAAC,QAAgB;IACpD,OAAO,QAAQ,CAAC,OAAO,CAAC,2BAA2B,EAAE,EAAE,CAAC,CAAC;AAC3D,CAAC;AAED,SAAS,qBAAqB,CAAC,QAAgB;IAC7C,OAAO,iBAAiB,CAAC,IAAI,CAAC,4BAA4B,CAAC,QAAQ,CAAC,CAAC,CAAC;AACxE,CAAC;AAED,SAAS,mBAAmB,CAAC,QAAgB;IAC3C,MAAM,cAAc,GAAG,4BAA4B,CAAC,QAAQ,CAAC,CAAC;IAC9D,OAAO,qBAAqB,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,mBAAI,CAAC,KAAK,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;AACjH,CAAC;AAED,SAAS,gCAAgC,CAAC,SAAiB,EAAE,UAAkB;IAC7E,MAAM,SAAS,GAAG,mBAAmB,CAAC,SAAS,CAAC,CAAC;IACjD,MAAM,UAAU,GAAG,mBAAmB,CAAC,UAAU,CAAC,CAAC;IACnD,OAAO,OAAO,CAAC,SAAS,IAAI,UAAU,IAAI,SAAS,KAAK,UAAU,CAAC,CAAC;AACtE,CAAC;AAED,SAAS,gBAAgB,CAAC,QAAgB;IACxC,MAAM,cAAc,GAAG,4BAA4B,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IAClF,OAAO,IAAI,GAAG,CAAC,WAAW,cAAc,EAAE,CAAC,CAAC,IAAI,CAAC;AACnD,CAAC;AAED,SAAS,uBAAuB,CAAC,YAAoB,EAAE,UAAkB;IACvE,MAAM,kBAAkB,GAAG,4BAA4B,CAAC,YAAY,CAAC,CAAC;IACtE,MAAM,gBAAgB,GAAG,4BAA4B,CAAC,UAAU,CAAC,CAAC;IAClE,IAAI,CAAC,qBAAqB,CAAC,kBAAkB,CAAC,IAAI,CAAC,uBAAuB,CAAC,kBAAkB,CAAC,IAAI,uBAAuB,CAAC,gBAAgB,CAAC,CAAC,EAAE,CAAC;QAC7I,OAAO,IAAA,wBAAa,EAAC,gBAAgB,CAAC,CAAC,IAAI,CAAC;IAC9C,CAAC;IAED,MAAM,eAAe,GAAG,qBAAqB,CAAC,kBAAkB,CAAC,IAAI,qBAAqB,CAAC,gBAAgB,CAAC,CAAC;IAC7G,MAAM,OAAO,GAAG,eAAe,CAAC,CAAC,CAAC,mBAAI,CAAC,KAAK,CAAC,CAAC,CAAC,mBAAI,CAAC,KAAK,CAAC;IAC1D,MAAM,iBAAiB,GAAG,OAAO,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC;IAC/F,MAAM,UAAU,GAAG,eAAe,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,UAAU,CAAC;IAEnE,IAAI,eAAe,IAAI,gCAAgC,CAAC,iBAAiB,EAAE,UAAU,CAAC,EAAE,CAAC;QACvF,OAAO,gBAAgB,CAAC,UAAU,CAAC,CAAC;IACtC,CAAC;IAED,MAAM,YAAY,GAAG,OAAO,CAAC,QAAQ,CAAC,iBAAiB,EAAE,UAAU,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IACzF,IAAI,YAAY,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,YAAY,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;QACpE,OAAO,YAAY,CAAC;IACtB,CAAC;IACD,OAAO,KAAK,YAAY,EAAE,CAAC;AAC7B,CAAC;AAED,SAAS,uBAAuB,CAAC,QAAgB;IAC/C,OAAO,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;AAC7B,CAAC;AAED,SAAS,kBAAkB,CAAC,OAA+D;IACzF,MAAM,MAAM,GAA8C,EAAE,CAAC;IAC7D,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,OAAO,EAAE,CAAC;QACnC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QACtB,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,oBAAoB,CAC3B,KAAa,EACb,WAAiD,yCAAmB;IAEpE,IACE,KAAK,CAAC,UAAU,CAAC,SAAS,CAAC;QAC3B,KAAK,CAAC,UAAU,CAAC,aAAa,CAAC;QAC/B,KAAK,CAAC,UAAU,CAAC,eAAe,CAAC;QACjC,KAAK,CAAC,UAAU,CAAC,UAAU,CAAC,EAC5B,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,UAAU,QAAQ,CAAC,WAAW,CAAC,KAAK,CAAC,EAAE,CAAC;AACjD,CAAC;AAEM,KAAK,UAAU,uBAAuB,CAC3C,EAAU,EACV,OAA2B,EAC3B,IAAiB,EACjB,WAA4B,yCAAmB;IAE/C,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC;IACrC,MAAM,SAAS,GAAG,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAC3D,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,WAAW,CAAC;IACjD,MAAM,WAAW,GAAG,QAAQ,CAAC,WAAW,CAAC,OAAO,CAAC,WAAW,IAAI,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,EAAE,EAAE,YAAY,EAAE,cAAc,EAAE,EAAE,CAAC,CAAC,CAAC;IACrI,MAAM,YAAY,GAAG,QAAQ,CAAC,WAAW,CAAC,OAAO,CAAC,YAAY,IAAI,QAAQ,CAAC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC;IAC1G,MAAM,cAAc,GAAG,oBAAoB,CAAC,OAAO,CAAC,cAAc,IAAI,QAAQ,CAAC,QAAQ,CAAC,WAAW,EAAE,kBAAkB,CAAC,EAAE,QAAQ,CAAC,CAAC;IACpI,MAAM,YAAY,GAAG,QAAQ,CAAC,WAAW,CAAC,OAAO,CAAC,YAAY,IAAI,QAAQ,CAAC,QAAQ,CAAC,WAAW,EAAE,kBAAkB,CAAC,CAAC,CAAC;IACtH,MAAM,aAAa,GAAG,oBAAoB,CAAC,OAAO,CAAC,aAAa,IAAI,QAAQ,CAAC,QAAQ,CAAC,WAAW,EAAE,iBAAiB,CAAC,EAAE,QAAQ,CAAC,CAAC;IACjI,MAAM,UAAU,GAAG,oBAAoB,CAAC,OAAO,CAAC,UAAU,IAAI,QAAQ,CAAC,QAAQ,CAAC,WAAW,EAAE,cAAc,CAAC,EAAE,QAAQ,CAAC,CAAC;IACxH,MAAM,WAAW,GAAG,OAAO,CAAC,QAAQ,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IAC7E,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,IAAI,IAAI,KAAK,CAAC;IACzD,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,QAAQ,CAAC,MAAM,CAAC,mBAAmB,CAAC,IAAI,MAAM,CAAC;IAEpF,QAAQ,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;IAChC,QAAQ,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;IAEjC,MAAM,WAAW,GAAG,QAAQ,CAAC,QAAQ,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;IAC9D,IAAI,SAAS,KAAK,QAAQ,EAAE,CAAC;QAC3B,QAAQ,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;IAClC,CAAC;IACD,MAAM,KAAK,GAAqB,SAAS,KAAK,MAAM;QAClD,CAAC,CAAC,MAAM,IAAI,CAAC,aAAa,CAAC;YACzB,WAAW,EAAE,OAAO,CAAC,WAAW;YAChC,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,QAAQ,EAAE,IAAI;SACf,CAAC;QACF,CAAC,CAAC,EAAE,CAAC;IACP,MAAM,OAAO,GAAuB,EAAE,CAAC;IAEvC,IAAI,SAAS,KAAK,QAAQ,EAAE,CAAC;QAC3B,OAAO,CAAC,OAAO,GAAG,QAAQ,CAAC,WAAW,CAAC,OAAO,CAAC,iBAAiB,IAAI,QAAQ,CAAC,QAAQ,CAAC,WAAW,EAAE,cAAc,CAAC,CAAC,CAAC;QACpH,OAAO,CAAC,GAAG,GAAG,QAAQ,CAAC,WAAW,CAAC,OAAO,CAAC,aAAa,IAAI,QAAQ,CAAC,QAAQ,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC,CAAC;QACxG,OAAO,CAAC,GAAG,GAAG,QAAQ,CAAC,WAAW,CAAC,OAAO,CAAC,aAAa,IAAI,QAAQ,CAAC,QAAQ,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC,CAAC;IAC1G,CAAC;IAED,MAAM,OAAO,GAAG,mBAAmB,CACjC,OAAO,CAAC,OAAO,IAAI,CAAC,SAAS,KAAK,QAAQ;QACxC,CAAC,CAAC,kBAAkB;QACpB,CAAC,CAAC,UAAU,QAAQ,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC,CAC3C,CAAC;IAEF,OAAO;QACL,EAAE;QACF,IAAI;QACJ,IAAI;QACJ,SAAS;QACT,QAAQ;QACR,WAAW;QACX,YAAY;QACZ,cAAc;QACd,YAAY;QACZ,aAAa;QACb,UAAU;QACV,WAAW;QACX,OAAO;QACP,QAAQ;QACR,OAAO;QACP,WAAW,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS;QAChF,KAAK;QACL,OAAO;KACR,CAAC;AACJ,CAAC;AAED,SAAgB,eAAe,CAC7B,KAA4B,EAC5B,OAA2B,EAC3B,cAAkD,EAAE;IAEpD,MAAM,SAAS,GAAG;QAChB,GAAG,WAAW;QACd,GAAG,OAAO,CAAC,GAAG;KACf,CAAC;IACF,MAAM,kBAAkB,GAAG,IAAA,uCAAyB,EAAC,SAAS,CAAC,CAAC;IAEhE,OAAO;QACL,GAAG,SAAS;QACZ,aAAa,EAAE,KAAK,CAAC,WAAW;QAChC,YAAY,EAAE,KAAK,CAAC,IAAI;QACxB,YAAY,EAAE,KAAK,CAAC,OAAO;QAC3B,kBAAkB,EAAE,kBAAkB;YACpC,CAAC,CAAC,IAAA,+BAAiB,EAAC,kBAAkB,CAAC;YACvC,CAAC,CAAC,GAAG,KAAK,CAAC,OAAO,aAAa;QACjC,kBAAkB,EAAE,KAAK,CAAC,YAAY;QACtC,mBAAmB,EAAE,KAAK,CAAC,cAAc;QACzC,eAAe,EAAE,KAAK,CAAC,cAAc;QACrC,mBAAmB,EAAE,KAAK,CAAC,aAAa;QACxC,YAAY,EAAE,KAAK,CAAC,aAAa;QACjC,QAAQ,EAAE,KAAK,CAAC,KAAK,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS;QAC7E,QAAQ,EAAE,KAAK,CAAC,KAAK,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS;QAC7E,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,eAAe,EAAE,KAAK,CAAC,OAAO,CAAC,GAAG;QAClC,cAAc,EAAE,KAAK,CAAC,KAAK,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS;QAC3F,YAAY,EAAE,IAAI,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,MAAM;QAC3C,iBAAiB,EAAE,KAAK,CAAC,QAAQ;KAClC,CAAC;AACJ,CAAC;AAED,SAAgB,qBAAqB,CACnC,UAA8C,EAC9C,OAA2B,EAC3B,KAA4B,EAC5B,UAA8C,yCAAmB,CAAC,OAAO;IAEzE,MAAM,QAAQ,GAAG,CAAC,GAAW,EAAsB,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,CAAC;IACtF,MAAM,kBAAkB,GAAG,IAAA,uCAAyB,EAAC;QACnD,UAAU,EAAE,QAAQ,CAAC,YAAY,CAAC;KACnC,CAAC,CAAC;IAEH,OAAO;QACL,GAAG,kBAAkB,CAAC;YACpB,CAAC,mBAAmB,EAAE,QAAQ,CAAC,yBAAyB,CAAC,CAAC;YAC1D,CAAC,gBAAgB,EAAE,QAAQ,CAAC,sBAAsB,CAAC,CAAC;YACpD,CAAC,gBAAgB,EAAE,QAAQ,CAAC,sBAAsB,CAAC,CAAC;YACpD,CAAC,eAAe,EAAE,QAAQ,CAAC,oBAAoB,CAAC,CAAC;YACjD,CAAC,iBAAiB,EAAE,QAAQ,CAAC,uBAAuB,CAAC,CAAC;YACtD,CAAC,aAAa,EAAE,QAAQ,CAAC,kBAAkB,CAAC,CAAC;YAC7C,CAAC,eAAe,EAAE,QAAQ,CAAC,oBAAoB,CAAC,CAAC;YACjD,CAAC,eAAe,EAAE,QAAQ,CAAC,oBAAoB,CAAC,CAAC;YACjD,CAAC,iBAAiB,EAAE,QAAQ,CAAC,uBAAuB,CAAC,IAAI,EAAE,CAAC;YAC5D,CAAC,iBAAiB,EAAE,QAAQ,CAAC,uBAAuB,CAAC,IAAI,KAAK,CAAC;YAC/D,CAAC,qBAAqB,EAAE,QAAQ,CAAC,4BAA4B,CAAC,IAAI,EAAE,CAAC;YACrE,CAAC,qBAAqB,EAAE,QAAQ,CAAC,4BAA4B,CAAC,IAAI,EAAE,CAAC;YACrE,CAAC,YAAY,EAAE,kBAAkB,CAAC;YAClC,CAAC,cAAc,EAAE,QAAQ,CAAC,mBAAmB,CAAC,CAAC;YAC/C,CAAC,QAAQ,EAAE,QAAQ,CAAC,cAAc,CAAC,CAAC;YACpC,CAAC,WAAW,EAAE,QAAQ,CAAC,iBAAiB,CAAC,CAAC;YAC1C,CAAC,cAAc,EAAE,QAAQ,CAAC,oBAAoB,CAAC,CAAC;SACjD,CAAC;QACF,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,aAAa,EAAE,KAAK,CAAC,aAAa;QAClC,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,QAAQ,EAAE,KAAK,CAAC,WAAW;QAC3B,OAAO,EAAE,KAAK,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO;QACpD,gBAAgB,EAAE,OAAO,CAAC,gBAAgB,IAAI,KAAK;QACnD,yBAAyB,EAAE,OAAO,CAAC,yBAAyB,IAAI,KAAK;QACrE,GAAG,CAAC,OAAO,CAAC,SAAS,IAAI,EAAE,CAAC;KAC7B,CAAC;AACJ,CAAC;AAED,SAAgB,sBAAsB,CACpC,KAA4B,EAC5B,IAAa,EACb,WAA2G,yCAAmB;IAE9H,MAAM,UAAU,GAAG,4BAA4B,CAAC,QAAQ,CAAC,QAAQ,CAAC,2BAAY,EAAE,UAAU,KAAK,CAAC,IAAI,OAAO,CAAC,CAAC,CAAC;IAC9G,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO,UAAU,CAAC;IACpB,CAAC;IAED,MAAM,WAAW,GAAG,4BAA4B,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IACpE,MAAM,iBAAiB,GAAG,gCAAgC,CAAC,WAAW,EAAE,UAAU,CAAC;QACjF,CAAC,CAAC,CAAC,GAAG,EAAE;YACN,MAAM,gBAAgB,GAAG,4BAA4B,CAAC,QAAQ,CAAC,QAAQ,CACrE,QAAQ,CAAC,OAAO,CAAC,UAAU,CAAC,EAC5B,IAAI,EACJ,eAAe,EACf,KAAK,CAAC,EAAE,CACT,CAAC,CAAC;YACH,QAAQ,CAAC,SAAS,CAAC,gBAAgB,CAAC,CAAC;YACrC,OAAO,4BAA4B,CAAC,QAAQ,CAAC,QAAQ,CAAC,gBAAgB,EAAE,yBAAyB,CAAC,CAAC,CAAC;QACtG,CAAC,CAAC,EAAE;QACJ,CAAC,CAAC,4BAA4B,CAAC,QAAQ,CAAC,QAAQ,CAAC,WAAW,EAAE,yBAAyB,CAAC,CAAC,CAAC;IAC5F,MAAM,cAAc,GAAG,4BAA4B,CAAC,QAAQ,CAAC,QAAQ,CAAC,2BAAY,EAAE,0BAA0B,CAAC,CAAC,CAAC;IACjH,MAAM,gBAAgB,GAAG,QAAQ,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;IAC7D,MAAM,uBAAuB,GAAG,sCAAsC,CACpE,UAAU,EACV,QAAQ,CAAC,QAAQ,CAAC,gBAAgB,EAAE,QAAQ,CAAC,EAC7C,QAAQ,CACT,CAAC;IACF,QAAQ,CAAC,aAAa,CAAC,iBAAiB,EAAE,IAAI,CAAC,SAAS,CAAC;QACvD,UAAU,EAAE;YACV,6GAA6G;YAC7G,2GAA2G;SAC5G;QACD,MAAM,EAAE;YACN,uBAAuB,CAAC,iBAAiB,EAAE,uBAAuB,CAAC;YACnE,uBAAuB,CAAC,iBAAiB,EAAE,cAAc,CAAC;SAC3D;KACF,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IAEb,OAAO,iBAAiB,CAAC;AAC3B,CAAC;AAED,SAAS,sCAAsC,CAC7C,UAAkB,EAClB,SAAiB,EACjB,QAAwG,EACxG,YAAY,IAAI,GAAG,EAAkB;IAErC,MAAM,oBAAoB,GAAG,4BAA4B,CAAC,UAAU,CAAC,CAAC;IACtE,IAAI,qBAAqB,CAAC,oBAAoB,CAAC,IAAI,CAAC,uBAAuB,CAAC,oBAAoB,CAAC,EAAE,CAAC;QAClG,OAAO,oBAAoB,CAAC;IAC9B,CAAC;IAED,MAAM,QAAQ,GAAG,SAAS,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC;IACrD,IAAI,QAAQ,EAAE,CAAC;QACb,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,QAAQ,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;IAC9B,MAAM,UAAU,GAAG,4BAA4B,CAAC,QAAQ,CAAC,QAAQ,CAAC,SAAS,EAAE,mBAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAC;IACzH,SAAS,CAAC,GAAG,CAAC,oBAAoB,EAAE,UAAU,CAAC,CAAC;IAEhD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,YAAY,CAAC,oBAAoB,CAAC,CAA4B,CAAC;IAClG,MAAM,CAAC,MAAM,GAAG,oBAAoB,CAClC,oBAAoB,EACpB,MAAM,CAAC,MAAM,EACb,SAAS,EACT,QAAQ,EACR,SAAS,CACV,CAAC;IACF,QAAQ,CAAC,aAAa,CAAC,UAAU,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;IAC3E,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,SAAS,oBAAoB,CAC3B,gBAAwB,EACxB,OAAgB,EAChB,SAAiB,EACjB,QAAwG,EACxG,SAA8B;IAE9B,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;QAChC,OAAO,mBAAmB,CAAC,gBAAgB,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC;IACxF,CAAC;IAED,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QAC3B,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ;YACrD,CAAC,CAAC,mBAAmB,CAAC,gBAAgB,EAAE,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,CAAC;YAC9E,CAAC,CAAC,KAAK,CAAC,CAAC;IACb,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,mBAAmB,CAC1B,gBAAwB,EACxB,WAAmB,EACnB,SAAiB,EACjB,QAAwG,EACxG,SAA8B;IAE9B,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;QACpE,OAAO,WAAW,CAAC;IACrB,CAAC;IAED,MAAM,UAAU,GAAG,4BAA4B,CAC7C,mBAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,gBAAgB,CAAC,EAAE,WAAW,CAAC,CACpE,CAAC;IACF,MAAM,mBAAmB,GAAG,sCAAsC,CAAC,UAAU,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC;IAC/G,OAAO,IAAA,wBAAa,EAAC,mBAAmB,CAAC,CAAC,IAAI,CAAC;AACjD,CAAC;AAED,SAAgB,iBAAiB,CAC/B,KAAa,EACb,WAAsD,yCAAmB;IAEzE,MAAM,aAAa,GAAG,IAAI,qDAAyB,CAAC,KAAK,EAAE;QACzD,QAAQ,EAAE,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,EAAE,EAAE,sBAAsB,CAAC;QACnE,YAAY,EAAE,IAAI;KACnB,CAAC,CAAC;IACH,IAAA,8CAAsB,EAAC,aAAa,CAAC,CAAC;AACxC,CAAC","sourcesContent":["import { setGlobalLoggerFactory } from 'global-logger-factory';\nimport path from 'node:path';\nimport { pathToFileURL } from 'node:url';\nimport { ConfigurableLoggerFactory } from '../logging/ConfigurableLoggerFactory';\nimport { PACKAGE_ROOT } from './package-root';\nimport type { RuntimeHost } from './host/types';\nimport { oidcTokenEndpoint, resolveExternalOidcIssuer } from './oidc-issuer';\nimport { nodeRuntimePlatform } from './platform/node/NodeRuntimePlatform';\nimport type { RuntimePlatform } from './platform/types';\nimport type { XpodRuntimeOptions, XpodRuntimePorts, XpodRuntimeSockets } from './runtime-types';\n\nexport interface RuntimeBootstrapState {\n  id: string;\n  host: RuntimeHost;\n  mode: 'local' | 'cloud';\n  transport: 'socket' | 'port';\n  bindHost: string;\n  runtimeRoot: string;\n  rootFilePath: string;\n  sparqlEndpoint: string;\n  rdfIndexPath: string;\n  identityDbUrl: string;\n  usageDbUrl: string;\n  cssAuthMode: 'acp' | 'acl' | 'allow-all';\n  apiOpen: boolean;\n  logLevel: string;\n  baseUrl: string;\n  envFilePath?: string;\n  ports: XpodRuntimePorts;\n  sockets: XpodRuntimeSockets;\n}\n\nfunction ensureTrailingSlash(url: string): string {\n  return url.endsWith('/') ? url : `${url}/`;\n}\n\nfunction normalizeWindowsAbsolutePath(filePath: string): string {\n  return filePath.replace(/^[\\\\/]+(?=[A-Za-z]:[\\\\/])/, '');\n}\n\nfunction isWindowsAbsolutePath(filePath: string): boolean {\n  return /^[A-Za-z]:[\\\\/]/.test(normalizeWindowsAbsolutePath(filePath));\n}\n\nfunction getWindowsDriveRoot(filePath: string): string | undefined {\n  const normalizedPath = normalizeWindowsAbsolutePath(filePath);\n  return isWindowsAbsolutePath(normalizedPath) ? path.win32.parse(normalizedPath).root.toLowerCase() : undefined;\n}\n\nfunction arePathsOnDifferentWindowsDrives(firstPath: string, secondPath: string): boolean {\n  const firstRoot = getWindowsDriveRoot(firstPath);\n  const secondRoot = getWindowsDriveRoot(secondPath);\n  return Boolean(firstRoot && secondRoot && firstRoot !== secondRoot);\n}\n\nfunction toWindowsFileUrl(filePath: string): string {\n  const normalizedPath = normalizeWindowsAbsolutePath(filePath).replace(/\\\\/g, '/');\n  return new URL(`file:///${normalizedPath}`).href;\n}\n\nfunction toConfigImportSpecifier(fromFilePath: string, toFilePath: string): string {\n  const normalizedFromPath = normalizeWindowsAbsolutePath(fromFilePath);\n  const normalizedToPath = normalizeWindowsAbsolutePath(toFilePath);\n  if (!isWindowsAbsolutePath(normalizedFromPath) && (pathNeedsEscapedFileUrl(normalizedFromPath) || pathNeedsEscapedFileUrl(normalizedToPath))) {\n    return pathToFileURL(normalizedToPath).href;\n  }\n\n  const useWindowsPaths = isWindowsAbsolutePath(normalizedFromPath) || isWindowsAbsolutePath(normalizedToPath);\n  const pathApi = useWindowsPaths ? path.win32 : path.posix;\n  const fromDirectoryPath = pathApi.dirname(useWindowsPaths ? normalizedFromPath : fromFilePath);\n  const targetPath = useWindowsPaths ? normalizedToPath : toFilePath;\n\n  if (useWindowsPaths && arePathsOnDifferentWindowsDrives(fromDirectoryPath, targetPath)) {\n    return toWindowsFileUrl(targetPath);\n  }\n\n  const relativePath = pathApi.relative(fromDirectoryPath, targetPath).replace(/\\\\/g, '/');\n  if (relativePath.startsWith('./') || relativePath.startsWith('../')) {\n    return relativePath;\n  }\n  return `./${relativePath}`;\n}\n\nfunction pathNeedsEscapedFileUrl(filePath: string): boolean {\n  return /\\s/.test(filePath);\n}\n\nfunction withDefinedEntries(entries: Array<[string, string | number | boolean | undefined]>): Record<string, string | number | boolean> {\n  const result: Record<string, string | number | boolean> = {};\n  for (const [key, value] of entries) {\n    if (value !== undefined) {\n      result[key] = value;\n    }\n  }\n  return result;\n}\n\nfunction normalizeDatabaseUrl(\n  value: string,\n  platform: Pick<RuntimePlatform, 'resolvePath'> = nodeRuntimePlatform,\n): string {\n  if (\n    value.startsWith('sqlite:') ||\n    value.startsWith('postgres://') ||\n    value.startsWith('postgresql://') ||\n    value.startsWith('mysql://')\n  ) {\n    return value;\n  }\n  return `sqlite:${platform.resolvePath(value)}`;\n}\n\nexport async function resolveRuntimeBootstrap(\n  id: string,\n  options: XpodRuntimeOptions,\n  host: RuntimeHost,\n  platform: RuntimePlatform = nodeRuntimePlatform,\n): Promise<RuntimeBootstrapState> {\n  const mode = options.mode ?? 'local';\n  const transport = host.resolveTransport(options.transport);\n  const bindHost = options.bindHost ?? '127.0.0.1';\n  const runtimeRoot = platform.resolvePath(options.runtimeRoot ?? platform.joinPath(platform.cwd(), '.test-data', 'xpod-runtime', id));\n  const rootFilePath = platform.resolvePath(options.rootFilePath ?? platform.joinPath(runtimeRoot, 'data'));\n  const sparqlEndpoint = normalizeDatabaseUrl(options.sparqlEndpoint ?? platform.joinPath(runtimeRoot, 'quadstore.sqlite'), platform);\n  const rdfIndexPath = platform.resolvePath(options.rdfIndexPath ?? platform.joinPath(runtimeRoot, 'rdf-index.sqlite'));\n  const identityDbUrl = normalizeDatabaseUrl(options.identityDbUrl ?? platform.joinPath(runtimeRoot, 'identity.sqlite'), platform);\n  const usageDbUrl = normalizeDatabaseUrl(options.usageDbUrl ?? platform.joinPath(runtimeRoot, 'usage.sqlite'), platform);\n  const cssAuthMode = options.authMode ?? (options.open ? 'allow-all' : 'acp');\n  const apiOpen = options.apiOpen ?? options.open ?? false;\n  const logLevel = options.logLevel ?? platform.getEnv('CSS_LOGGING_LEVEL') ?? 'warn';\n\n  platform.ensureDir(runtimeRoot);\n  platform.ensureDir(rootFilePath);\n\n  const socketsRoot = platform.joinPath(runtimeRoot, 'sockets');\n  if (transport === 'socket') {\n    platform.ensureDir(socketsRoot);\n  }\n  const ports: XpodRuntimePorts = transport === 'port'\n    ? await host.allocatePorts({\n      gatewayPort: options.gatewayPort,\n      cssPort: options.cssPort,\n      apiPort: options.apiPort,\n      basePort: 5600,\n    })\n    : {};\n  const sockets: XpodRuntimeSockets = {};\n\n  if (transport === 'socket') {\n    sockets.gateway = platform.resolvePath(options.gatewaySocketPath ?? platform.joinPath(socketsRoot, 'gateway.sock'));\n    sockets.css = platform.resolvePath(options.cssSocketPath ?? platform.joinPath(socketsRoot, 'css.sock'));\n    sockets.api = platform.resolvePath(options.apiSocketPath ?? platform.joinPath(socketsRoot, 'api.sock'));\n  }\n\n  const baseUrl = ensureTrailingSlash(\n    options.baseUrl ?? (transport === 'socket'\n      ? 'http://localhost'\n      : `http://${bindHost}:${ports.gateway}`),\n  );\n\n  return {\n    id,\n    host,\n    mode,\n    transport,\n    bindHost,\n    runtimeRoot,\n    rootFilePath,\n    sparqlEndpoint,\n    rdfIndexPath,\n    identityDbUrl,\n    usageDbUrl,\n    cssAuthMode,\n    apiOpen,\n    logLevel,\n    baseUrl,\n    envFilePath: options.envFile ? platform.resolvePath(options.envFile) : undefined,\n    ports,\n    sockets,\n  };\n}\n\nexport function buildRuntimeEnv(\n  state: RuntimeBootstrapState,\n  options: XpodRuntimeOptions,\n  envFromFile: Record<string, string | undefined> = {},\n): Record<string, string | undefined> {\n  const mergedEnv = {\n    ...envFromFile,\n    ...options.env,\n  };\n  const externalOidcIssuer = resolveExternalOidcIssuer(mergedEnv);\n\n  return {\n    ...mergedEnv,\n    XPOD_ENV_PATH: state.envFilePath,\n    XPOD_EDITION: state.mode,\n    CSS_BASE_URL: state.baseUrl,\n    CSS_TOKEN_ENDPOINT: externalOidcIssuer\n      ? oidcTokenEndpoint(externalOidcIssuer)\n      : `${state.baseUrl}.oidc/token`,\n    CSS_ROOT_FILE_PATH: state.rootFilePath,\n    CSS_SPARQL_ENDPOINT: state.sparqlEndpoint,\n    SPARQL_ENDPOINT: state.sparqlEndpoint,\n    CSS_IDENTITY_DB_URL: state.identityDbUrl,\n    DATABASE_URL: state.identityDbUrl,\n    CSS_PORT: state.ports.css !== undefined ? String(state.ports.css) : undefined,\n    API_PORT: state.ports.api !== undefined ? String(state.ports.api) : undefined,\n    API_HOST: state.bindHost,\n    API_SOCKET_PATH: state.sockets.api,\n    XPOD_MAIN_PORT: state.ports.gateway !== undefined ? String(state.ports.gateway) : undefined,\n    CORS_ORIGINS: new URL(state.baseUrl).origin,\n    CSS_LOGGING_LEVEL: state.logLevel,\n  };\n}\n\nexport function buildRuntimeShorthand(\n  runtimeEnv: Record<string, string | undefined>,\n  options: XpodRuntimeOptions,\n  state: RuntimeBootstrapState,\n  baseEnv: Record<string, string | undefined> = nodeRuntimePlatform.baseEnv,\n): Record<string, string | number | boolean> {\n  const envValue = (key: string): string | undefined => runtimeEnv[key] ?? baseEnv[key];\n  const externalOidcIssuer = resolveExternalOidcIssuer({\n    oidcIssuer: envValue('oidcIssuer'),\n  });\n\n  return {\n    ...withDefinedEntries([\n      ['baseStorageDomain', envValue('CSS_BASE_STORAGE_DOMAIN')],\n      ['minioAccessKey', envValue('CSS_MINIO_ACCESS_KEY')],\n      ['minioSecretKey', envValue('CSS_MINIO_SECRET_KEY')],\n      ['minioEndpoint', envValue('CSS_MINIO_ENDPOINT')],\n      ['minioBucketName', envValue('CSS_MINIO_BUCKET_NAME')],\n      ['redisClient', envValue('CSS_REDIS_CLIENT')],\n      ['redisUsername', envValue('CSS_REDIS_USERNAME')],\n      ['redisPassword', envValue('CSS_REDIS_PASSWORD')],\n      ['emailConfigHost', envValue('CSS_EMAIL_CONFIG_HOST') ?? ''],\n      ['emailConfigPort', envValue('CSS_EMAIL_CONFIG_PORT') ?? '587'],\n      ['emailConfigAuthUser', envValue('CSS_EMAIL_CONFIG_AUTH_USER') ?? ''],\n      ['emailConfigAuthPass', envValue('CSS_EMAIL_CONFIG_AUTH_PASS') ?? ''],\n      ['oidcIssuer', externalOidcIssuer],\n      ['allowedHosts', envValue('CSS_ALLOWED_HOSTS')],\n      ['nodeId', envValue('XPOD_NODE_ID')],\n      ['nodeToken', envValue('XPOD_NODE_TOKEN')],\n      ['serviceToken', envValue('XPOD_SERVICE_TOKEN')],\n    ]),\n    baseUrl: state.baseUrl,\n    rootFilePath: state.rootFilePath,\n    sparqlEndpoint: state.sparqlEndpoint,\n    rdfIndexPath: state.rdfIndexPath,\n    identityDbUrl: state.identityDbUrl,\n    usageDbUrl: state.usageDbUrl,\n    logLevel: state.logLevel,\n    authMode: state.cssAuthMode,\n    edition: state.mode === 'cloud' ? 'server' : 'local',\n    edgeNodesEnabled: options.edgeNodesEnabled ?? false,\n    centerRegistrationEnabled: options.centerRegistrationEnabled ?? false,\n    ...(options.shorthand ?? {}),\n  };\n}\n\nexport function createCssRuntimeConfig(\n  state: RuntimeBootstrapState,\n  open: boolean,\n  platform: Pick<RuntimePlatform, 'dirname' | 'ensureDir' | 'joinPath' | 'readTextFile' | 'writeTextFile'> = nodeRuntimePlatform,\n): string {\n  const configPath = normalizeWindowsAbsolutePath(platform.joinPath(PACKAGE_ROOT, `config/${state.mode}.json`));\n  if (!open) {\n    return configPath;\n  }\n\n  const runtimeRoot = normalizeWindowsAbsolutePath(state.runtimeRoot);\n  const runtimeConfigPath = arePathsOnDifferentWindowsDrives(runtimeRoot, configPath)\n    ? (() => {\n      const runtimeConfigDir = normalizeWindowsAbsolutePath(platform.joinPath(\n        platform.dirname(configPath),\n        '..',\n        '.xpod-runtime',\n        state.id,\n      ));\n      platform.ensureDir(runtimeConfigDir);\n      return normalizeWindowsAbsolutePath(platform.joinPath(runtimeConfigDir, 'css-runtime.config.json'));\n    })()\n    : normalizeWindowsAbsolutePath(platform.joinPath(runtimeRoot, 'css-runtime.config.json'));\n  const openConfigPath = normalizeWindowsAbsolutePath(platform.joinPath(PACKAGE_ROOT, 'config/runtime-open.json'));\n  const runtimeConfigDir = platform.dirname(runtimeConfigPath);\n  const runtimeConfigImportPath = rewriteConfigForFileUrlImportsIfNeeded(\n    configPath,\n    platform.joinPath(runtimeConfigDir, 'config'),\n    platform,\n  );\n  platform.writeTextFile(runtimeConfigPath, JSON.stringify({\n    '@context': [\n      'https://linkedsoftwaredependencies.org/bundles/npm/@solid/community-server/^8.0.0/components/context.jsonld',\n      'https://linkedsoftwaredependencies.org/bundles/npm/asynchronous-handlers/^1.0.0/components/context.jsonld',\n    ],\n    import: [\n      toConfigImportSpecifier(runtimeConfigPath, runtimeConfigImportPath),\n      toConfigImportSpecifier(runtimeConfigPath, openConfigPath),\n    ],\n  }, null, 2));\n\n  return runtimeConfigPath;\n}\n\nfunction rewriteConfigForFileUrlImportsIfNeeded(\n  configPath: string,\n  outputDir: string,\n  platform: Pick<RuntimePlatform, 'dirname' | 'ensureDir' | 'joinPath' | 'readTextFile' | 'writeTextFile'>,\n  rewritten = new Map<string, string>(),\n): string {\n  const normalizedConfigPath = normalizeWindowsAbsolutePath(configPath);\n  if (isWindowsAbsolutePath(normalizedConfigPath) || !pathNeedsEscapedFileUrl(normalizedConfigPath)) {\n    return normalizedConfigPath;\n  }\n\n  const existing = rewritten.get(normalizedConfigPath);\n  if (existing) {\n    return existing;\n  }\n\n  platform.ensureDir(outputDir);\n  const outputPath = normalizeWindowsAbsolutePath(platform.joinPath(outputDir, path.posix.basename(normalizedConfigPath)));\n  rewritten.set(normalizedConfigPath, outputPath);\n\n  const parsed = JSON.parse(platform.readTextFile(normalizedConfigPath)) as Record<string, unknown>;\n  parsed.import = rewriteConfigImports(\n    normalizedConfigPath,\n    parsed.import,\n    outputDir,\n    platform,\n    rewritten,\n  );\n  platform.writeTextFile(outputPath, `${JSON.stringify(parsed, null, 2)}\\n`);\n  return outputPath;\n}\n\nfunction rewriteConfigImports(\n  sourceConfigPath: string,\n  imports: unknown,\n  outputDir: string,\n  platform: Pick<RuntimePlatform, 'dirname' | 'ensureDir' | 'joinPath' | 'readTextFile' | 'writeTextFile'>,\n  rewritten: Map<string, string>,\n): unknown {\n  if (typeof imports === 'string') {\n    return rewriteConfigImport(sourceConfigPath, imports, outputDir, platform, rewritten);\n  }\n\n  if (Array.isArray(imports)) {\n    return imports.map((value) => typeof value === 'string'\n      ? rewriteConfigImport(sourceConfigPath, value, outputDir, platform, rewritten)\n      : value);\n  }\n\n  return imports;\n}\n\nfunction rewriteConfigImport(\n  sourceConfigPath: string,\n  importValue: string,\n  outputDir: string,\n  platform: Pick<RuntimePlatform, 'dirname' | 'ensureDir' | 'joinPath' | 'readTextFile' | 'writeTextFile'>,\n  rewritten: Map<string, string>,\n): string {\n  if (!importValue.startsWith('./') && !importValue.startsWith('../')) {\n    return importValue;\n  }\n\n  const targetPath = normalizeWindowsAbsolutePath(\n    path.posix.resolve(platform.dirname(sourceConfigPath), importValue),\n  );\n  const rewrittenTargetPath = rewriteConfigForFileUrlImportsIfNeeded(targetPath, outputDir, platform, rewritten);\n  return pathToFileURL(rewrittenTargetPath).href;\n}\n\nexport function initRuntimeLogger(\n  level: string,\n  platform: Pick<RuntimePlatform, 'cwd' | 'joinPath'> = nodeRuntimePlatform,\n): void {\n  const loggerFactory = new ConfigurableLoggerFactory(level, {\n    fileName: platform.joinPath(platform.cwd(), 'logs/xpod-%DATE%.log'),\n    showLocation: true,\n  });\n  setGlobalLoggerFactory(loggerFactory);\n}\n"]}