@undefineds.co/xpod 0.3.25 → 0.3.26

package/dist/provision/LocalPodProvisioningService.jsonld

@@ -25,6 +25,18 @@
           "@id": "undefineds:dist/provision/LocalPodProvisioningService.jsonld#LocalPodProvisioningService_options_identityDbUrl",
           "range": "xsd:string"
         },
+        {
+          "@id": "undefineds:dist/provision/LocalPodProvisioningService.jsonld#LocalPodProvisioningService_options_rdfIndexPath",
+          "range": {
+            "@type": "ParameterRangeUnion",
+            "parameterRangeElements": [
+              "xsd:string",
+              {
+                "@type": "ParameterRangeUndefined"
+              }
+            ]
+          }
+        },
         {
           "@id": "undefineds:dist/provision/LocalPodProvisioningService.jsonld#LocalPodProvisioningService_options_oidcIssuer",
           "range": {
@@ -36,6 +48,35 @@
               }
             ]
           }
+        },
+        {
+          "@id": "undefineds:dist/provision/LocalPodProvisioningService.jsonld#LocalPodProvisioningService_options_authMode",
+          "range": {
+            "@type": "ParameterRangeUnion",
+            "parameterRangeElements": [
+              {
+                "@type": "ParameterRangeUnion",
+                "parameterRangeElements": [
+                  {
+                    "@type": "ParameterRangeLiteral",
+                    "parameterRangeValueLiteral": "acp"
+                  },
+                  {
+                    "@type": "ParameterRangeLiteral",
+                    "parameterRangeValueLiteral": "acl"
+                  },
+                  {
+                    "@type": "ParameterRangeLiteral",
+                    "parameterRangeValueLiteral": "allow-all"
+                  }
+                ]
+              },
+              "xsd:string",
+              {
+                "@type": "ParameterRangeUndefined"
+              }
+            ]
+          }
         }
       ],
       "memberFields": [
@@ -59,10 +100,18 @@
           "@id": "undefineds:dist/provision/LocalPodProvisioningService.jsonld#LocalPodProvisioningService__member_identityDbPath",
           "memberFieldName": "identityDbPath"
         },
+        {
+          "@id": "undefineds:dist/provision/LocalPodProvisioningService.jsonld#LocalPodProvisioningService__member_rdfIndexPath",
+          "memberFieldName": "rdfIndexPath"
+        },
         {
           "@id": "undefineds:dist/provision/LocalPodProvisioningService.jsonld#LocalPodProvisioningService__member_oidcIssuer",
           "memberFieldName": "oidcIssuer"
         },
+        {
+          "@id": "undefineds:dist/provision/LocalPodProvisioningService.jsonld#LocalPodProvisioningService__member_authMode",
+          "memberFieldName": "authMode"
+        },
         {
           "@id": "undefineds:dist/provision/LocalPodProvisioningService.jsonld#LocalPodProvisioningService__member_sqliteRuntime",
           "memberFieldName": "sqliteRuntime"
@@ -84,16 +133,12 @@
           "memberFieldName": "writeQuints"
         },
         {
-          "@id": "undefineds:dist/provision/LocalPodProvisioningService.jsonld#LocalPodProvisioningService__member_buildPodQuads",
-          "memberFieldName": "buildPodQuads"
-        },
-        {
-          "@id": "undefineds:dist/provision/LocalPodProvisioningService.jsonld#LocalPodProvisioningService__member_addRootAcrQuads",
-          "memberFieldName": "addRootAcrQuads"
+          "@id": "undefineds:dist/provision/LocalPodProvisioningService.jsonld#LocalPodProvisioningService__member_writeRdfIndex",
+          "memberFieldName": "writeRdfIndex"
         },
         {
-          "@id": "undefineds:dist/provision/LocalPodProvisioningService.jsonld#LocalPodProvisioningService__member_addPublicReadAcrQuads",
-          "memberFieldName": "addPublicReadAcrQuads"
+          "@id": "undefineds:dist/provision/LocalPodProvisioningService.jsonld#LocalPodProvisioningService__member_buildPodQuads",
+          "memberFieldName": "buildPodQuads"
         },
         {
           "@id": "undefineds:dist/provision/LocalPodProvisioningService.jsonld#LocalPodProvisioningService__member_writeIdentityIndexes",
@@ -128,11 +173,23 @@
                 "@id": "undefineds:dist/provision/LocalPodProvisioningService.jsonld#LocalPodProvisioningService_options_identityDbUrl"
               }
             },
+            {
+              "keyRaw": "rdfIndexPath",
+              "value": {
+                "@id": "undefineds:dist/provision/LocalPodProvisioningService.jsonld#LocalPodProvisioningService_options_rdfIndexPath"
+              }
+            },
             {
               "keyRaw": "oidcIssuer",
               "value": {
                 "@id": "undefineds:dist/provision/LocalPodProvisioningService.jsonld#LocalPodProvisioningService_options_oidcIssuer"
               }
+            },
+            {
+              "keyRaw": "authMode",
+              "value": {
+                "@id": "undefineds:dist/provision/LocalPodProvisioningService.jsonld#LocalPodProvisioningService_options_authMode"
+              }
             }
           ]
         }

package/dist/runtime/XpodRuntime.js

@@ -56,7 +56,6 @@ async function startXpodRuntime(options = {}) {
             host,
             runtimeShorthand: environment.shorthand,
             supervisor,
-            open: options.open ?? false,
             createCssRuntimeConfig: bootstrap_1.createCssRuntimeConfig,
             cssRunner,
         });

package/dist/runtime/XpodRuntime.js.map

@@ -1 +1 @@
-{"version":3,"file":"XpodRuntime.js","sourceRoot":"","sources":["../../src/runtime/XpodRuntime.ts"],"names":[],"mappings":";;AAoBA,4CAoGC;AAxHD,iEAAqD;AACrD,+CAAqE;AACrE,yDAAsD;AACtD,2CAIqB;AACrB,uEAAoE;AACpE,+CAAgE;AAChE,2CAOqB;AAGd,KAAK,UAAU,gBAAgB,CAAC,UAA8B,EAAE;IACrE,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,qCAAiB,CAAC;IACnD,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC;IACzC,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC;IACrD,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,MAAM,CAAC,SAAS,CAAC;IACxD,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,MAAM,CAAC,SAAS,CAAC;IACxD,MAAM,aAAa,GAAG,OAAO,CAAC,aAAa,IAAI,MAAM,CAAC,aAAa,CAAC;IACpE,MAAM,EAAE,GAAG,QAAQ,CAAC,eAAe,EAAE,CAAC;IACtC,MAAM,KAAK,GAAG,MAAM,IAAA,mCAAuB,EAAC,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;IAEzE,IAAA,6BAAiB,EAAC,KAAK,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAC5C,MAAM,MAAM,GAAG,IAAA,oCAAY,EAAC,aAAa,CAAC,CAAC;IAC3C,MAAM,WAAW,GAAG,IAAA,6CAA+B,EAAC,KAAK,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;IAE9E,MAAM,uBAAuB,GAAG,KAAK,CAAC,SAAS,KAAK,QAAQ;QAC1D,CAAC,CAAC,IAAI,CAAC,qBAAqB,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,OAAQ,CAAC;QACnE,CAAC,CAAC,KAAK,IAAkB,EAAE,CAAC,SAAS,CAAC;IAExC,MAAM,UAAU,GAAG,IAAI,uBAAU,CAAC,EAAE,oBAAoB,EAAE,KAAK,EAAE,CAAC,CAAC;IACnE,MAAM,QAAQ,GAAoB,EAAE,CAAC;IACrC,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,IAAI,WAAsC,CAAC;IAE3C,MAAM,IAAI,GAAG,KAAK,IAAkB,EAAE;QACpC,IAAI,WAAW,EAAE,CAAC;YAChB,OAAO,WAAW,CAAC;QACrB,CAAC;QAED,WAAW,GAAG,CAAC,KAAK,IAAG,EAAE;YACvB,IAAI,OAAO,EAAE,CAAC;gBACZ,OAAO;YACT,CAAC;YACD,OAAO,GAAG,IAAI,CAAC;YAEf,MAAM,IAAA,+BAAmB,EAAC;gBACxB,QAAQ;gBACR,UAAU;gBACV,MAAM;gBACN,IAAI;gBACJ,KAAK;gBACL,uBAAuB;gBACvB,wBAAwB,EAAE,gCAA2B;gBACrD,iBAAiB,EAAE,WAAW,CAAC,OAAO;aACvC,CAAC,CAAC;QACL,CAAC,CAAC,EAAE,CAAC;QAEL,OAAO,WAAW,CAAC;IACrB,CAAC,CAAC;IAEF,IAAA,0CAA8B,EAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;IAErD,IAAI,CAAC;QACH,QAAQ,CAAC,MAAM,GAAG,MAAM,IAAA,2BAAe,EAAC;YACtC,KAAK;YACL,IAAI;YACJ,gBAAgB,EAAE,WAAW,CAAC,SAAS;YACvC,UAAU;YACV,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,KAAK;YAC3B,sBAAsB,EAAtB,kCAAsB;YACtB,SAAS;SACV,CAAC,CAAC;QAEH,QAAQ,CAAC,UAAU,GAAG,MAAM,IAAA,2BAAe,EAAC;YAC1C,KAAK;YACL,IAAI;YACJ,UAAU;YACV,WAAW,EAAE,OAAO,CAAC,WAAW;YAChC,SAAS;SACV,CAAC,CAAC;QAEH,QAAQ,CAAC,OAAO,GAAG,MAAM,IAAA,+BAAmB,EAAC;YAC3C,KAAK;YACL,IAAI;YACJ,UAAU;YACV,eAAe,EAAE,IAAI;YACrB,aAAa;SACd,CAAC,CAAC;QACH,WAAW,CAAC,OAAO,EAAE,CAAC;QAEtB,OAAO;YACL,EAAE;YACF,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,UAAU;YACV,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,KAAK,EAAE,KAAK,EAAC,KAA6B,EAAE,IAAkB,EAAqB,EAAE;gBACnF,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,YAAY,GAAG,EAAE,CAAC;oBACtD,OAAO,QAAQ,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE,IAAI,CAAC,CAAC;gBACrE,CAAC;gBACD,OAAO,QAAQ,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;YACrC,CAAC;YACD,IAAI;SACL,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,WAAW,CAAC,OAAO,EAAE,CAAC;QACtB,MAAM,IAAI,EAAE,CAAC;QACb,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC","sourcesContent":["import { getLoggerFor } from 'global-logger-factory';\nimport { closeAllIdentityConnections } from '../identity/drizzle/db';\nimport { Supervisor } from '../supervisor/Supervisor';\nimport {\n  createCssRuntimeConfig,\n  initRuntimeLogger,\n  resolveRuntimeBootstrap,\n} from './bootstrap';\nimport { nodeRuntimeDriver } from './driver/node/NodeRuntimeDriver';\nimport { createRuntimeEnvironmentSession } from './environment';\nimport {\n  registerManagedRuntimeServices,\n  startApiRuntime,\n  startCssRuntime,\n  startGatewayRuntime,\n  stopRuntimeServices,\n  type RuntimeServices,\n} from './lifecycle';\nimport type { XpodRuntimeHandle, XpodRuntimeOptions } from './runtime-types';\n\nexport async function startXpodRuntime(options: XpodRuntimeOptions = {}): Promise<XpodRuntimeHandle> {\n  const driver = options.driver ?? nodeRuntimeDriver;\n  const host = options.host ?? driver.host;\n  const platform = options.platform ?? driver.platform;\n  const cssRunner = options.cssRunner ?? driver.cssRunner;\n  const apiRunner = options.apiRunner ?? driver.apiRunner;\n  const gatewayRunner = options.gatewayRunner ?? driver.gatewayRunner;\n  const id = platform.createRuntimeId();\n  const state = await resolveRuntimeBootstrap(id, options, host, platform);\n\n  initRuntimeLogger(state.logLevel, platform);\n  const logger = getLoggerFor('XpodRuntime');\n  const environment = createRuntimeEnvironmentSession(state, options, platform);\n\n  const unregisterSocketOrigins = state.transport === 'socket'\n    ? host.registerSocketOrigins(state.baseUrl, state.sockets.gateway!)\n    : async(): Promise<void> => undefined;\n\n  const supervisor = new Supervisor({ handleProcessSignals: false });\n  const services: RuntimeServices = {};\n  let stopped = false;\n  let stopPromise: Promise<void> | undefined;\n\n  const stop = async(): Promise<void> => {\n    if (stopPromise) {\n      return stopPromise;\n    }\n\n    stopPromise = (async() => {\n      if (stopped) {\n        return;\n      }\n      stopped = true;\n\n      await stopRuntimeServices({\n        services,\n        supervisor,\n        logger,\n        host,\n        state,\n        unregisterSocketOrigins,\n        closeIdentityConnections: closeAllIdentityConnections,\n        restoreRuntimeEnv: environment.restore,\n      });\n    })();\n\n    return stopPromise;\n  };\n\n  registerManagedRuntimeServices(supervisor, services);\n\n  try {\n    services.cssApp = await startCssRuntime({\n      state,\n      host,\n      runtimeShorthand: environment.shorthand,\n      supervisor,\n      open: options.open ?? false,\n      createCssRuntimeConfig,\n      cssRunner,\n    });\n\n    services.apiService = await startApiRuntime({\n      state,\n      host,\n      supervisor,\n      authContext: options.authContext,\n      apiRunner,\n    });\n\n    services.gateway = await startGatewayRuntime({\n      state,\n      host,\n      supervisor,\n      shutdownHandler: stop,\n      gatewayRunner,\n    });\n    environment.restore();\n\n    return {\n      id,\n      mode: state.mode,\n      transport: state.transport,\n      baseUrl: state.baseUrl,\n      supervisor,\n      ports: state.ports,\n      sockets: state.sockets,\n      fetch: async(input: string | URL | Request, init?: RequestInit): Promise<Response> => {\n        if (typeof input === 'string' || input instanceof URL) {\n          return platform.fetch(new URL(String(input), state.baseUrl), init);\n        }\n        return platform.fetch(input, init);\n      },\n      stop,\n    };\n  } catch (error) {\n    environment.restore();\n    await stop();\n    throw error;\n  }\n}\n\nexport type { XpodRuntimeHandle, XpodRuntimeOptions } from './runtime-types';\n"]}
+{"version":3,"file":"XpodRuntime.js","sourceRoot":"","sources":["../../src/runtime/XpodRuntime.ts"],"names":[],"mappings":";;AAoBA,4CAmGC;AAvHD,iEAAqD;AACrD,+CAAqE;AACrE,yDAAsD;AACtD,2CAIqB;AACrB,uEAAoE;AACpE,+CAAgE;AAChE,2CAOqB;AAGd,KAAK,UAAU,gBAAgB,CAAC,UAA8B,EAAE;IACrE,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,qCAAiB,CAAC;IACnD,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC;IACzC,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC;IACrD,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,MAAM,CAAC,SAAS,CAAC;IACxD,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,MAAM,CAAC,SAAS,CAAC;IACxD,MAAM,aAAa,GAAG,OAAO,CAAC,aAAa,IAAI,MAAM,CAAC,aAAa,CAAC;IACpE,MAAM,EAAE,GAAG,QAAQ,CAAC,eAAe,EAAE,CAAC;IACtC,MAAM,KAAK,GAAG,MAAM,IAAA,mCAAuB,EAAC,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;IAEzE,IAAA,6BAAiB,EAAC,KAAK,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAC5C,MAAM,MAAM,GAAG,IAAA,oCAAY,EAAC,aAAa,CAAC,CAAC;IAC3C,MAAM,WAAW,GAAG,IAAA,6CAA+B,EAAC,KAAK,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;IAE9E,MAAM,uBAAuB,GAAG,KAAK,CAAC,SAAS,KAAK,QAAQ;QAC1D,CAAC,CAAC,IAAI,CAAC,qBAAqB,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,OAAQ,CAAC;QACnE,CAAC,CAAC,KAAK,IAAkB,EAAE,CAAC,SAAS,CAAC;IAExC,MAAM,UAAU,GAAG,IAAI,uBAAU,CAAC,EAAE,oBAAoB,EAAE,KAAK,EAAE,CAAC,CAAC;IACnE,MAAM,QAAQ,GAAoB,EAAE,CAAC;IACrC,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,IAAI,WAAsC,CAAC;IAE3C,MAAM,IAAI,GAAG,KAAK,IAAkB,EAAE;QACpC,IAAI,WAAW,EAAE,CAAC;YAChB,OAAO,WAAW,CAAC;QACrB,CAAC;QAED,WAAW,GAAG,CAAC,KAAK,IAAG,EAAE;YACvB,IAAI,OAAO,EAAE,CAAC;gBACZ,OAAO;YACT,CAAC;YACD,OAAO,GAAG,IAAI,CAAC;YAEf,MAAM,IAAA,+BAAmB,EAAC;gBACxB,QAAQ;gBACR,UAAU;gBACV,MAAM;gBACN,IAAI;gBACJ,KAAK;gBACL,uBAAuB;gBACvB,wBAAwB,EAAE,gCAA2B;gBACrD,iBAAiB,EAAE,WAAW,CAAC,OAAO;aACvC,CAAC,CAAC;QACL,CAAC,CAAC,EAAE,CAAC;QAEL,OAAO,WAAW,CAAC;IACrB,CAAC,CAAC;IAEF,IAAA,0CAA8B,EAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;IAErD,IAAI,CAAC;QACH,QAAQ,CAAC,MAAM,GAAG,MAAM,IAAA,2BAAe,EAAC;YACtC,KAAK;YACL,IAAI;YACJ,gBAAgB,EAAE,WAAW,CAAC,SAAS;YACvC,UAAU;YACV,sBAAsB,EAAtB,kCAAsB;YACtB,SAAS;SACV,CAAC,CAAC;QAEH,QAAQ,CAAC,UAAU,GAAG,MAAM,IAAA,2BAAe,EAAC;YAC1C,KAAK;YACL,IAAI;YACJ,UAAU;YACV,WAAW,EAAE,OAAO,CAAC,WAAW;YAChC,SAAS;SACV,CAAC,CAAC;QAEH,QAAQ,CAAC,OAAO,GAAG,MAAM,IAAA,+BAAmB,EAAC;YAC3C,KAAK;YACL,IAAI;YACJ,UAAU;YACV,eAAe,EAAE,IAAI;YACrB,aAAa;SACd,CAAC,CAAC;QACH,WAAW,CAAC,OAAO,EAAE,CAAC;QAEtB,OAAO;YACL,EAAE;YACF,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,UAAU;YACV,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,KAAK,EAAE,KAAK,EAAC,KAA6B,EAAE,IAAkB,EAAqB,EAAE;gBACnF,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,YAAY,GAAG,EAAE,CAAC;oBACtD,OAAO,QAAQ,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE,IAAI,CAAC,CAAC;gBACrE,CAAC;gBACD,OAAO,QAAQ,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;YACrC,CAAC;YACD,IAAI;SACL,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,WAAW,CAAC,OAAO,EAAE,CAAC;QACtB,MAAM,IAAI,EAAE,CAAC;QACb,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC","sourcesContent":["import { getLoggerFor } from 'global-logger-factory';\nimport { closeAllIdentityConnections } from '../identity/drizzle/db';\nimport { Supervisor } from '../supervisor/Supervisor';\nimport {\n  createCssRuntimeConfig,\n  initRuntimeLogger,\n  resolveRuntimeBootstrap,\n} from './bootstrap';\nimport { nodeRuntimeDriver } from './driver/node/NodeRuntimeDriver';\nimport { createRuntimeEnvironmentSession } from './environment';\nimport {\n  registerManagedRuntimeServices,\n  startApiRuntime,\n  startCssRuntime,\n  startGatewayRuntime,\n  stopRuntimeServices,\n  type RuntimeServices,\n} from './lifecycle';\nimport type { XpodRuntimeHandle, XpodRuntimeOptions } from './runtime-types';\n\nexport async function startXpodRuntime(options: XpodRuntimeOptions = {}): Promise<XpodRuntimeHandle> {\n  const driver = options.driver ?? nodeRuntimeDriver;\n  const host = options.host ?? driver.host;\n  const platform = options.platform ?? driver.platform;\n  const cssRunner = options.cssRunner ?? driver.cssRunner;\n  const apiRunner = options.apiRunner ?? driver.apiRunner;\n  const gatewayRunner = options.gatewayRunner ?? driver.gatewayRunner;\n  const id = platform.createRuntimeId();\n  const state = await resolveRuntimeBootstrap(id, options, host, platform);\n\n  initRuntimeLogger(state.logLevel, platform);\n  const logger = getLoggerFor('XpodRuntime');\n  const environment = createRuntimeEnvironmentSession(state, options, platform);\n\n  const unregisterSocketOrigins = state.transport === 'socket'\n    ? host.registerSocketOrigins(state.baseUrl, state.sockets.gateway!)\n    : async(): Promise<void> => undefined;\n\n  const supervisor = new Supervisor({ handleProcessSignals: false });\n  const services: RuntimeServices = {};\n  let stopped = false;\n  let stopPromise: Promise<void> | undefined;\n\n  const stop = async(): Promise<void> => {\n    if (stopPromise) {\n      return stopPromise;\n    }\n\n    stopPromise = (async() => {\n      if (stopped) {\n        return;\n      }\n      stopped = true;\n\n      await stopRuntimeServices({\n        services,\n        supervisor,\n        logger,\n        host,\n        state,\n        unregisterSocketOrigins,\n        closeIdentityConnections: closeAllIdentityConnections,\n        restoreRuntimeEnv: environment.restore,\n      });\n    })();\n\n    return stopPromise;\n  };\n\n  registerManagedRuntimeServices(supervisor, services);\n\n  try {\n    services.cssApp = await startCssRuntime({\n      state,\n      host,\n      runtimeShorthand: environment.shorthand,\n      supervisor,\n      createCssRuntimeConfig,\n      cssRunner,\n    });\n\n    services.apiService = await startApiRuntime({\n      state,\n      host,\n      supervisor,\n      authContext: options.authContext,\n      apiRunner,\n    });\n\n    services.gateway = await startGatewayRuntime({\n      state,\n      host,\n      supervisor,\n      shutdownHandler: stop,\n      gatewayRunner,\n    });\n    environment.restore();\n\n    return {\n      id,\n      mode: state.mode,\n      transport: state.transport,\n      baseUrl: state.baseUrl,\n      supervisor,\n      ports: state.ports,\n      sockets: state.sockets,\n      fetch: async(input: string | URL | Request, init?: RequestInit): Promise<Response> => {\n        if (typeof input === 'string' || input instanceof URL) {\n          return platform.fetch(new URL(String(input), state.baseUrl), init);\n        }\n        return platform.fetch(input, init);\n      },\n      stop,\n    };\n  } catch (error) {\n    environment.restore();\n    await stop();\n    throw error;\n  }\n}\n\nexport type { XpodRuntimeHandle, XpodRuntimeOptions } from './runtime-types';\n"]}

package/dist/runtime/bootstrap.d.ts

@@ -1,6 +1,7 @@
 import type { RuntimeHost } from './host/types';
 import type { RuntimePlatform } from './platform/types';
 import type { XpodRuntimeOptions, XpodRuntimePorts, XpodRuntimeSockets } from './runtime-types';
+import type { AuthMode } from '../authorization/AuthMode';
 export interface RuntimeBootstrapState {
     id: string;
     host: RuntimeHost;
@@ -13,7 +14,7 @@ export interface RuntimeBootstrapState {
     rdfIndexPath: string;
     identityDbUrl: string;
     usageDbUrl: string;
-    cssAuthMode: 'acp' | 'acl' | 'allow-all';
+    cssAuthMode: AuthMode;
     apiOpen: boolean;
     logLevel: string;
     baseUrl: string;
@@ -21,8 +22,9 @@ export interface RuntimeBootstrapState {
     ports: XpodRuntimePorts;
     sockets: XpodRuntimeSockets;
 }
+export declare function cssAuthModeConfigImports(authMode: AuthMode): string[];
 export declare function resolveRuntimeBootstrap(id: string, options: XpodRuntimeOptions, host: RuntimeHost, platform?: RuntimePlatform): Promise<RuntimeBootstrapState>;
 export declare function buildRuntimeEnv(state: RuntimeBootstrapState, options: XpodRuntimeOptions, envFromFile?: Record<string, string | undefined>): Record<string, string | undefined>;
 export declare function buildRuntimeShorthand(runtimeEnv: Record<string, string | undefined>, options: XpodRuntimeOptions, state: RuntimeBootstrapState, baseEnv?: Record<string, string | undefined>): Record<string, string | number | boolean>;
-export declare function createCssRuntimeConfig(state: RuntimeBootstrapState, open: boolean, platform?: Pick<RuntimePlatform, 'dirname' | 'ensureDir' | 'joinPath' | 'readTextFile' | 'writeTextFile'>): string;
+export declare function createCssRuntimeConfig(state: RuntimeBootstrapState, _open?: boolean, platform?: Pick<RuntimePlatform, 'dirname' | 'ensureDir' | 'joinPath' | 'readTextFile' | 'writeTextFile'>): string;
 export declare function initRuntimeLogger(level: string, platform?: Pick<RuntimePlatform, 'cwd' | 'joinPath'>): void;

package/dist/runtime/bootstrap.js

@@ -3,6 +3,7 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
     return (mod && mod.__esModule) ? mod : { "default": mod };
 };
 Object.defineProperty(exports, "__esModule", { value: true });
+exports.cssAuthModeConfigImports = cssAuthModeConfigImports;
 exports.resolveRuntimeBootstrap = resolveRuntimeBootstrap;
 exports.buildRuntimeEnv = buildRuntimeEnv;
 exports.buildRuntimeShorthand = buildRuntimeShorthand;
@@ -15,6 +16,10 @@ const ConfigurableLoggerFactory_1 = require("../logging/ConfigurableLoggerFactor
 const package_root_1 = require("./package-root");
 const oidc_issuer_1 = require("./oidc-issuer");
 const NodeRuntimePlatform_1 = require("./platform/node/NodeRuntimePlatform");
+const env_utils_1 = require("./env-utils");
+const AuthMode_1 = require("../authorization/AuthMode");
+const CSS_COMPONENTS_CONTEXT = 'https://linkedsoftwaredependencies.org/bundles/npm/@solid/community-server/^8.0.0/components/context.jsonld';
+const ASYNC_HANDLERS_CONTEXT = 'https://linkedsoftwaredependencies.org/bundles/npm/asynchronous-handlers/^1.0.0/components/context.jsonld';
 function ensureTrailingSlash(url) {
     return url.endsWith('/') ? url : `${url}/`;
 }
@@ -77,6 +82,29 @@ function normalizeDatabaseUrl(value, platform = NodeRuntimePlatform_1.nodeRuntim
     }
     return `sqlite:${platform.resolvePath(value)}`;
 }
+function readRuntimeEnvFile(envFilePath, platform) {
+    return envFilePath ? (0, env_utils_1.loadEnvFile)(envFilePath, platform) : {};
+}
+function cssAuthModeConfigImports(authMode) {
+    switch (authMode) {
+        case 'acl':
+            return [
+                'css:config/ldp/authorization/webacl.json',
+                'css:config/util/auxiliary/acl.json',
+            ];
+        case 'allow-all':
+            return [
+                'css:config/ldp/authorization/allow-all.json',
+                'css:config/util/auxiliary/empty.json',
+            ];
+        case 'acp':
+        default:
+            return [
+                'css:config/ldp/authorization/acp.json',
+                'css:config/util/auxiliary/acr.json',
+            ];
+    }
+}
 async function resolveRuntimeBootstrap(id, options, host, platform = NodeRuntimePlatform_1.nodeRuntimePlatform) {
     const mode = options.mode ?? 'local';
     const transport = host.resolveTransport(options.transport);
@@ -87,7 +115,13 @@ async function resolveRuntimeBootstrap(id, options, host, platform = NodeRuntime
     const rdfIndexPath = platform.resolvePath(options.rdfIndexPath ?? platform.joinPath(runtimeRoot, 'rdf-index.sqlite'));
     const identityDbUrl = normalizeDatabaseUrl(options.identityDbUrl ?? platform.joinPath(runtimeRoot, 'identity.sqlite'), platform);
     const usageDbUrl = normalizeDatabaseUrl(options.usageDbUrl ?? platform.joinPath(runtimeRoot, 'usage.sqlite'), platform);
-    const cssAuthMode = options.authMode ?? (options.open ? 'allow-all' : 'acp');
+    const envFilePath = options.envFile ? platform.resolvePath(options.envFile) : undefined;
+    const authModeEnv = {
+        ...platform.baseEnv,
+        ...readRuntimeEnvFile(envFilePath, platform),
+        ...options.env,
+    };
+    const cssAuthMode = options.open ? 'allow-all' : (0, AuthMode_1.resolveAuthModeInput)(options.authMode, authModeEnv);
     const apiOpen = options.apiOpen ?? options.open ?? false;
     const logLevel = options.logLevel ?? platform.getEnv('CSS_LOGGING_LEVEL') ?? 'warn';
     platform.ensureDir(runtimeRoot);
@@ -129,7 +163,7 @@ async function resolveRuntimeBootstrap(id, options, host, platform = NodeRuntime
         apiOpen,
         logLevel,
         baseUrl,
-        envFilePath: options.envFile ? platform.resolvePath(options.envFile) : undefined,
+        envFilePath,
         ports,
         sockets,
     };
@@ -140,7 +174,7 @@ function buildRuntimeEnv(state, options, envFromFile = {}) {
         ...options.env,
     };
     const externalOidcIssuer = (0, oidc_issuer_1.resolveExternalOidcIssuer)(mergedEnv);
-    return {
+    const runtimeEnv = {
         ...mergedEnv,
         XPOD_ENV_PATH: state.envFilePath,
         XPOD_EDITION: state.mode,
@@ -149,6 +183,7 @@ function buildRuntimeEnv(state, options, envFromFile = {}) {
             ? (0, oidc_issuer_1.oidcTokenEndpoint)(externalOidcIssuer)
             : `${state.baseUrl}.oidc/token`,
         CSS_ROOT_FILE_PATH: state.rootFilePath,
+        CSS_RDF_INDEX_PATH: state.rdfIndexPath,
         CSS_SPARQL_ENDPOINT: state.sparqlEndpoint,
         SPARQL_ENDPOINT: state.sparqlEndpoint,
         CSS_IDENTITY_DB_URL: state.identityDbUrl,
@@ -161,6 +196,7 @@ function buildRuntimeEnv(state, options, envFromFile = {}) {
         CORS_ORIGINS: new URL(state.baseUrl).origin,
         CSS_LOGGING_LEVEL: state.logLevel,
     };
+    return (0, AuthMode_1.applyAuthModeEnv)(runtimeEnv, state.cssAuthMode);
 }
 function buildRuntimeShorthand(runtimeEnv, options, state, baseEnv = NodeRuntimePlatform_1.nodeRuntimePlatform.baseEnv) {
     const envValue = (key) => runtimeEnv[key] ?? baseEnv[key];
@@ -201,11 +237,8 @@ function buildRuntimeShorthand(runtimeEnv, options, state, baseEnv = NodeRuntime
         ...(options.shorthand ?? {}),
     };
 }
-function createCssRuntimeConfig(state, open, platform = NodeRuntimePlatform_1.nodeRuntimePlatform) {
+function createCssRuntimeConfig(state, _open, platform = NodeRuntimePlatform_1.nodeRuntimePlatform) {
     const configPath = normalizeWindowsAbsolutePath(platform.joinPath(package_root_1.PACKAGE_ROOT, `config/${state.mode}.json`));
-    if (!open) {
-        return configPath;
-    }
     const runtimeRoot = normalizeWindowsAbsolutePath(state.runtimeRoot);
     const runtimeConfigPath = arePathsOnDifferentWindowsDrives(runtimeRoot, configPath)
         ? (() => {
@@ -214,17 +247,16 @@ function createCssRuntimeConfig(state, open, platform = NodeRuntimePlatform_1.no
             return normalizeWindowsAbsolutePath(platform.joinPath(runtimeConfigDir, 'css-runtime.config.json'));
         })()
         : normalizeWindowsAbsolutePath(platform.joinPath(runtimeRoot, 'css-runtime.config.json'));
-    const openConfigPath = normalizeWindowsAbsolutePath(platform.joinPath(package_root_1.PACKAGE_ROOT, 'config/runtime-open.json'));
     const runtimeConfigDir = platform.dirname(runtimeConfigPath);
     const runtimeConfigImportPath = rewriteConfigForFileUrlImportsIfNeeded(configPath, platform.joinPath(runtimeConfigDir, 'config'), platform);
     platform.writeTextFile(runtimeConfigPath, JSON.stringify({
         '@context': [
-            'https://linkedsoftwaredependencies.org/bundles/npm/@solid/community-server/^8.0.0/components/context.jsonld',
-            'https://linkedsoftwaredependencies.org/bundles/npm/asynchronous-handlers/^1.0.0/components/context.jsonld',
+            CSS_COMPONENTS_CONTEXT,
+            ASYNC_HANDLERS_CONTEXT,
         ],
         import: [
             toConfigImportSpecifier(runtimeConfigPath, runtimeConfigImportPath),
-            toConfigImportSpecifier(runtimeConfigPath, openConfigPath),
+            ...cssAuthModeConfigImports(state.cssAuthMode),
         ],
     }, null, 2));
     return runtimeConfigPath;

package/dist/runtime/bootstrap.js.map

@@ -1 +1 @@
-{"version":3,"file":"bootstrap.js","sourceRoot":"","sources":["../../src/runtime/bootstrap.ts"],"names":[],"mappings":";;;;;AAgHA,0DAoEC;AAED,0CAgCC;AAED,sDA4CC;AAED,wDA0CC;AAwED,8CASC;AAjYD,iEAA+D;AAC/D,0DAA6B;AAC7B,uCAAyC;AACzC,oFAAiF;AACjF,iDAA8C;AAE9C,+CAA6E;AAC7E,6EAA0E;AAyB1E,SAAS,mBAAmB,CAAC,GAAW;IACtC,OAAO,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,GAAG,GAAG,CAAC;AAC7C,CAAC;AAED,SAAS,4BAA4B,CAAC,QAAgB;IACpD,OAAO,QAAQ,CAAC,OAAO,CAAC,2BAA2B,EAAE,EAAE,CAAC,CAAC;AAC3D,CAAC;AAED,SAAS,qBAAqB,CAAC,QAAgB;IAC7C,OAAO,iBAAiB,CAAC,IAAI,CAAC,4BAA4B,CAAC,QAAQ,CAAC,CAAC,CAAC;AACxE,CAAC;AAED,SAAS,mBAAmB,CAAC,QAAgB;IAC3C,MAAM,cAAc,GAAG,4BAA4B,CAAC,QAAQ,CAAC,CAAC;IAC9D,OAAO,qBAAqB,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,mBAAI,CAAC,KAAK,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;AACjH,CAAC;AAED,SAAS,gCAAgC,CAAC,SAAiB,EAAE,UAAkB;IAC7E,MAAM,SAAS,GAAG,mBAAmB,CAAC,SAAS,CAAC,CAAC;IACjD,MAAM,UAAU,GAAG,mBAAmB,CAAC,UAAU,CAAC,CAAC;IACnD,OAAO,OAAO,CAAC,SAAS,IAAI,UAAU,IAAI,SAAS,KAAK,UAAU,CAAC,CAAC;AACtE,CAAC;AAED,SAAS,gBAAgB,CAAC,QAAgB;IACxC,MAAM,cAAc,GAAG,4BAA4B,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IAClF,OAAO,IAAI,GAAG,CAAC,WAAW,cAAc,EAAE,CAAC,CAAC,IAAI,CAAC;AACnD,CAAC;AAED,SAAS,uBAAuB,CAAC,YAAoB,EAAE,UAAkB;IACvE,MAAM,kBAAkB,GAAG,4BAA4B,CAAC,YAAY,CAAC,CAAC;IACtE,MAAM,gBAAgB,GAAG,4BAA4B,CAAC,UAAU,CAAC,CAAC;IAClE,IAAI,CAAC,qBAAqB,CAAC,kBAAkB,CAAC,IAAI,CAAC,uBAAuB,CAAC,kBAAkB,CAAC,IAAI,uBAAuB,CAAC,gBAAgB,CAAC,CAAC,EAAE,CAAC;QAC7I,OAAO,IAAA,wBAAa,EAAC,gBAAgB,CAAC,CAAC,IAAI,CAAC;IAC9C,CAAC;IAED,MAAM,eAAe,GAAG,qBAAqB,CAAC,kBAAkB,CAAC,IAAI,qBAAqB,CAAC,gBAAgB,CAAC,CAAC;IAC7G,MAAM,OAAO,GAAG,eAAe,CAAC,CAAC,CAAC,mBAAI,CAAC,KAAK,CAAC,CAAC,CAAC,mBAAI,CAAC,KAAK,CAAC;IAC1D,MAAM,iBAAiB,GAAG,OAAO,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC;IAC/F,MAAM,UAAU,GAAG,eAAe,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,UAAU,CAAC;IAEnE,IAAI,eAAe,IAAI,gCAAgC,CAAC,iBAAiB,EAAE,UAAU,CAAC,EAAE,CAAC;QACvF,OAAO,gBAAgB,CAAC,UAAU,CAAC,CAAC;IACtC,CAAC;IAED,MAAM,YAAY,GAAG,OAAO,CAAC,QAAQ,CAAC,iBAAiB,EAAE,UAAU,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IACzF,IAAI,YAAY,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,YAAY,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;QACpE,OAAO,YAAY,CAAC;IACtB,CAAC;IACD,OAAO,KAAK,YAAY,EAAE,CAAC;AAC7B,CAAC;AAED,SAAS,uBAAuB,CAAC,QAAgB;IAC/C,OAAO,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;AAC7B,CAAC;AAED,SAAS,kBAAkB,CAAC,OAA+D;IACzF,MAAM,MAAM,GAA8C,EAAE,CAAC;IAC7D,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,OAAO,EAAE,CAAC;QACnC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QACtB,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,oBAAoB,CAC3B,KAAa,EACb,WAAiD,yCAAmB;IAEpE,IACE,KAAK,CAAC,UAAU,CAAC,SAAS,CAAC;QAC3B,KAAK,CAAC,UAAU,CAAC,aAAa,CAAC;QAC/B,KAAK,CAAC,UAAU,CAAC,eAAe,CAAC;QACjC,KAAK,CAAC,UAAU,CAAC,UAAU,CAAC,EAC5B,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,UAAU,QAAQ,CAAC,WAAW,CAAC,KAAK,CAAC,EAAE,CAAC;AACjD,CAAC;AAEM,KAAK,UAAU,uBAAuB,CAC3C,EAAU,EACV,OAA2B,EAC3B,IAAiB,EACjB,WAA4B,yCAAmB;IAE/C,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC;IACrC,MAAM,SAAS,GAAG,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAC3D,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,WAAW,CAAC;IACjD,MAAM,WAAW,GAAG,QAAQ,CAAC,WAAW,CAAC,OAAO,CAAC,WAAW,IAAI,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,EAAE,EAAE,YAAY,EAAE,cAAc,EAAE,EAAE,CAAC,CAAC,CAAC;IACrI,MAAM,YAAY,GAAG,QAAQ,CAAC,WAAW,CAAC,OAAO,CAAC,YAAY,IAAI,QAAQ,CAAC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC;IAC1G,MAAM,cAAc,GAAG,oBAAoB,CAAC,OAAO,CAAC,cAAc,IAAI,QAAQ,CAAC,QAAQ,CAAC,WAAW,EAAE,kBAAkB,CAAC,EAAE,QAAQ,CAAC,CAAC;IACpI,MAAM,YAAY,GAAG,QAAQ,CAAC,WAAW,CAAC,OAAO,CAAC,YAAY,IAAI,QAAQ,CAAC,QAAQ,CAAC,WAAW,EAAE,kBAAkB,CAAC,CAAC,CAAC;IACtH,MAAM,aAAa,GAAG,oBAAoB,CAAC,OAAO,CAAC,aAAa,IAAI,QAAQ,CAAC,QAAQ,CAAC,WAAW,EAAE,iBAAiB,CAAC,EAAE,QAAQ,CAAC,CAAC;IACjI,MAAM,UAAU,GAAG,oBAAoB,CAAC,OAAO,CAAC,UAAU,IAAI,QAAQ,CAAC,QAAQ,CAAC,WAAW,EAAE,cAAc,CAAC,EAAE,QAAQ,CAAC,CAAC;IACxH,MAAM,WAAW,GAAG,OAAO,CAAC,QAAQ,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IAC7E,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,IAAI,IAAI,KAAK,CAAC;IACzD,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,QAAQ,CAAC,MAAM,CAAC,mBAAmB,CAAC,IAAI,MAAM,CAAC;IAEpF,QAAQ,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;IAChC,QAAQ,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;IAEjC,MAAM,WAAW,GAAG,QAAQ,CAAC,QAAQ,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;IAC9D,IAAI,SAAS,KAAK,QAAQ,EAAE,CAAC;QAC3B,QAAQ,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;IAClC,CAAC;IACD,MAAM,KAAK,GAAqB,SAAS,KAAK,MAAM;QAClD,CAAC,CAAC,MAAM,IAAI,CAAC,aAAa,CAAC;YACzB,WAAW,EAAE,OAAO,CAAC,WAAW;YAChC,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,QAAQ,EAAE,IAAI;SACf,CAAC;QACF,CAAC,CAAC,EAAE,CAAC;IACP,MAAM,OAAO,GAAuB,EAAE,CAAC;IAEvC,IAAI,SAAS,KAAK,QAAQ,EAAE,CAAC;QAC3B,OAAO,CAAC,OAAO,GAAG,QAAQ,CAAC,WAAW,CAAC,OAAO,CAAC,iBAAiB,IAAI,QAAQ,CAAC,QAAQ,CAAC,WAAW,EAAE,cAAc,CAAC,CAAC,CAAC;QACpH,OAAO,CAAC,GAAG,GAAG,QAAQ,CAAC,WAAW,CAAC,OAAO,CAAC,aAAa,IAAI,QAAQ,CAAC,QAAQ,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC,CAAC;QACxG,OAAO,CAAC,GAAG,GAAG,QAAQ,CAAC,WAAW,CAAC,OAAO,CAAC,aAAa,IAAI,QAAQ,CAAC,QAAQ,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC,CAAC;IAC1G,CAAC;IAED,MAAM,OAAO,GAAG,mBAAmB,CACjC,OAAO,CAAC,OAAO,IAAI,CAAC,SAAS,KAAK,QAAQ;QACxC,CAAC,CAAC,kBAAkB;QACpB,CAAC,CAAC,UAAU,QAAQ,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC,CAC3C,CAAC;IAEF,OAAO;QACL,EAAE;QACF,IAAI;QACJ,IAAI;QACJ,SAAS;QACT,QAAQ;QACR,WAAW;QACX,YAAY;QACZ,cAAc;QACd,YAAY;QACZ,aAAa;QACb,UAAU;QACV,WAAW;QACX,OAAO;QACP,QAAQ;QACR,OAAO;QACP,WAAW,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS;QAChF,KAAK;QACL,OAAO;KACR,CAAC;AACJ,CAAC;AAED,SAAgB,eAAe,CAC7B,KAA4B,EAC5B,OAA2B,EAC3B,cAAkD,EAAE;IAEpD,MAAM,SAAS,GAAG;QAChB,GAAG,WAAW;QACd,GAAG,OAAO,CAAC,GAAG;KACf,CAAC;IACF,MAAM,kBAAkB,GAAG,IAAA,uCAAyB,EAAC,SAAS,CAAC,CAAC;IAEhE,OAAO;QACL,GAAG,SAAS;QACZ,aAAa,EAAE,KAAK,CAAC,WAAW;QAChC,YAAY,EAAE,KAAK,CAAC,IAAI;QACxB,YAAY,EAAE,KAAK,CAAC,OAAO;QAC3B,kBAAkB,EAAE,kBAAkB;YACpC,CAAC,CAAC,IAAA,+BAAiB,EAAC,kBAAkB,CAAC;YACvC,CAAC,CAAC,GAAG,KAAK,CAAC,OAAO,aAAa;QACjC,kBAAkB,EAAE,KAAK,CAAC,YAAY;QACtC,mBAAmB,EAAE,KAAK,CAAC,cAAc;QACzC,eAAe,EAAE,KAAK,CAAC,cAAc;QACrC,mBAAmB,EAAE,KAAK,CAAC,aAAa;QACxC,YAAY,EAAE,KAAK,CAAC,aAAa;QACjC,QAAQ,EAAE,KAAK,CAAC,KAAK,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS;QAC7E,QAAQ,EAAE,KAAK,CAAC,KAAK,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS;QAC7E,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,eAAe,EAAE,KAAK,CAAC,OAAO,CAAC,GAAG;QAClC,cAAc,EAAE,KAAK,CAAC,KAAK,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS;QAC3F,YAAY,EAAE,IAAI,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,MAAM;QAC3C,iBAAiB,EAAE,KAAK,CAAC,QAAQ;KAClC,CAAC;AACJ,CAAC;AAED,SAAgB,qBAAqB,CACnC,UAA8C,EAC9C,OAA2B,EAC3B,KAA4B,EAC5B,UAA8C,yCAAmB,CAAC,OAAO;IAEzE,MAAM,QAAQ,GAAG,CAAC,GAAW,EAAsB,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,CAAC;IACtF,MAAM,kBAAkB,GAAG,IAAA,uCAAyB,EAAC;QACnD,UAAU,EAAE,QAAQ,CAAC,YAAY,CAAC;KACnC,CAAC,CAAC;IAEH,OAAO;QACL,GAAG,kBAAkB,CAAC;YACpB,CAAC,mBAAmB,EAAE,QAAQ,CAAC,yBAAyB,CAAC,CAAC;YAC1D,CAAC,gBAAgB,EAAE,QAAQ,CAAC,sBAAsB,CAAC,CAAC;YACpD,CAAC,gBAAgB,EAAE,QAAQ,CAAC,sBAAsB,CAAC,CAAC;YACpD,CAAC,eAAe,EAAE,QAAQ,CAAC,oBAAoB,CAAC,CAAC;YACjD,CAAC,iBAAiB,EAAE,QAAQ,CAAC,uBAAuB,CAAC,CAAC;YACtD,CAAC,aAAa,EAAE,QAAQ,CAAC,kBAAkB,CAAC,CAAC;YAC7C,CAAC,eAAe,EAAE,QAAQ,CAAC,oBAAoB,CAAC,CAAC;YACjD,CAAC,eAAe,EAAE,QAAQ,CAAC,oBAAoB,CAAC,CAAC;YACjD,CAAC,iBAAiB,EAAE,QAAQ,CAAC,uBAAuB,CAAC,IAAI,EAAE,CAAC;YAC5D,CAAC,iBAAiB,EAAE,QAAQ,CAAC,uBAAuB,CAAC,IAAI,KAAK,CAAC;YAC/D,CAAC,qBAAqB,EAAE,QAAQ,CAAC,4BAA4B,CAAC,IAAI,EAAE,CAAC;YACrE,CAAC,qBAAqB,EAAE,QAAQ,CAAC,4BAA4B,CAAC,IAAI,EAAE,CAAC;YACrE,CAAC,YAAY,EAAE,kBAAkB,CAAC;YAClC,CAAC,cAAc,EAAE,QAAQ,CAAC,mBAAmB,CAAC,CAAC;YAC/C,CAAC,QAAQ,EAAE,QAAQ,CAAC,cAAc,CAAC,CAAC;YACpC,CAAC,WAAW,EAAE,QAAQ,CAAC,iBAAiB,CAAC,CAAC;YAC1C,CAAC,cAAc,EAAE,QAAQ,CAAC,oBAAoB,CAAC,CAAC;SACjD,CAAC;QACF,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,aAAa,EAAE,KAAK,CAAC,aAAa;QAClC,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,QAAQ,EAAE,KAAK,CAAC,WAAW;QAC3B,OAAO,EAAE,KAAK,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO;QACpD,gBAAgB,EAAE,OAAO,CAAC,gBAAgB,IAAI,KAAK;QACnD,yBAAyB,EAAE,OAAO,CAAC,yBAAyB,IAAI,KAAK;QACrE,GAAG,CAAC,OAAO,CAAC,SAAS,IAAI,EAAE,CAAC;KAC7B,CAAC;AACJ,CAAC;AAED,SAAgB,sBAAsB,CACpC,KAA4B,EAC5B,IAAa,EACb,WAA2G,yCAAmB;IAE9H,MAAM,UAAU,GAAG,4BAA4B,CAAC,QAAQ,CAAC,QAAQ,CAAC,2BAAY,EAAE,UAAU,KAAK,CAAC,IAAI,OAAO,CAAC,CAAC,CAAC;IAC9G,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO,UAAU,CAAC;IACpB,CAAC;IAED,MAAM,WAAW,GAAG,4BAA4B,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IACpE,MAAM,iBAAiB,GAAG,gCAAgC,CAAC,WAAW,EAAE,UAAU,CAAC;QACjF,CAAC,CAAC,CAAC,GAAG,EAAE;YACN,MAAM,gBAAgB,GAAG,4BAA4B,CAAC,QAAQ,CAAC,QAAQ,CACrE,QAAQ,CAAC,OAAO,CAAC,UAAU,CAAC,EAC5B,IAAI,EACJ,eAAe,EACf,KAAK,CAAC,EAAE,CACT,CAAC,CAAC;YACH,QAAQ,CAAC,SAAS,CAAC,gBAAgB,CAAC,CAAC;YACrC,OAAO,4BAA4B,CAAC,QAAQ,CAAC,QAAQ,CAAC,gBAAgB,EAAE,yBAAyB,CAAC,CAAC,CAAC;QACtG,CAAC,CAAC,EAAE;QACJ,CAAC,CAAC,4BAA4B,CAAC,QAAQ,CAAC,QAAQ,CAAC,WAAW,EAAE,yBAAyB,CAAC,CAAC,CAAC;IAC5F,MAAM,cAAc,GAAG,4BAA4B,CAAC,QAAQ,CAAC,QAAQ,CAAC,2BAAY,EAAE,0BAA0B,CAAC,CAAC,CAAC;IACjH,MAAM,gBAAgB,GAAG,QAAQ,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;IAC7D,MAAM,uBAAuB,GAAG,sCAAsC,CACpE,UAAU,EACV,QAAQ,CAAC,QAAQ,CAAC,gBAAgB,EAAE,QAAQ,CAAC,EAC7C,QAAQ,CACT,CAAC;IACF,QAAQ,CAAC,aAAa,CAAC,iBAAiB,EAAE,IAAI,CAAC,SAAS,CAAC;QACvD,UAAU,EAAE;YACV,6GAA6G;YAC7G,2GAA2G;SAC5G;QACD,MAAM,EAAE;YACN,uBAAuB,CAAC,iBAAiB,EAAE,uBAAuB,CAAC;YACnE,uBAAuB,CAAC,iBAAiB,EAAE,cAAc,CAAC;SAC3D;KACF,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IAEb,OAAO,iBAAiB,CAAC;AAC3B,CAAC;AAED,SAAS,sCAAsC,CAC7C,UAAkB,EAClB,SAAiB,EACjB,QAAwG,EACxG,YAAY,IAAI,GAAG,EAAkB;IAErC,MAAM,oBAAoB,GAAG,4BAA4B,CAAC,UAAU,CAAC,CAAC;IACtE,IAAI,qBAAqB,CAAC,oBAAoB,CAAC,IAAI,CAAC,uBAAuB,CAAC,oBAAoB,CAAC,EAAE,CAAC;QAClG,OAAO,oBAAoB,CAAC;IAC9B,CAAC;IAED,MAAM,QAAQ,GAAG,SAAS,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC;IACrD,IAAI,QAAQ,EAAE,CAAC;QACb,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,QAAQ,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;IAC9B,MAAM,UAAU,GAAG,4BAA4B,CAAC,QAAQ,CAAC,QAAQ,CAAC,SAAS,EAAE,mBAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAC;IACzH,SAAS,CAAC,GAAG,CAAC,oBAAoB,EAAE,UAAU,CAAC,CAAC;IAEhD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,YAAY,CAAC,oBAAoB,CAAC,CAA4B,CAAC;IAClG,MAAM,CAAC,MAAM,GAAG,oBAAoB,CAClC,oBAAoB,EACpB,MAAM,CAAC,MAAM,EACb,SAAS,EACT,QAAQ,EACR,SAAS,CACV,CAAC;IACF,QAAQ,CAAC,aAAa,CAAC,UAAU,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;IAC3E,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,SAAS,oBAAoB,CAC3B,gBAAwB,EACxB,OAAgB,EAChB,SAAiB,EACjB,QAAwG,EACxG,SAA8B;IAE9B,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;QAChC,OAAO,mBAAmB,CAAC,gBAAgB,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC;IACxF,CAAC;IAED,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QAC3B,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ;YACrD,CAAC,CAAC,mBAAmB,CAAC,gBAAgB,EAAE,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,CAAC;YAC9E,CAAC,CAAC,KAAK,CAAC,CAAC;IACb,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,mBAAmB,CAC1B,gBAAwB,EACxB,WAAmB,EACnB,SAAiB,EACjB,QAAwG,EACxG,SAA8B;IAE9B,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;QACpE,OAAO,WAAW,CAAC;IACrB,CAAC;IAED,MAAM,UAAU,GAAG,4BAA4B,CAC7C,mBAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,gBAAgB,CAAC,EAAE,WAAW,CAAC,CACpE,CAAC;IACF,MAAM,mBAAmB,GAAG,sCAAsC,CAAC,UAAU,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC;IAC/G,OAAO,IAAA,wBAAa,EAAC,mBAAmB,CAAC,CAAC,IAAI,CAAC;AACjD,CAAC;AAED,SAAgB,iBAAiB,CAC/B,KAAa,EACb,WAAsD,yCAAmB;IAEzE,MAAM,aAAa,GAAG,IAAI,qDAAyB,CAAC,KAAK,EAAE;QACzD,QAAQ,EAAE,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,EAAE,EAAE,sBAAsB,CAAC;QACnE,YAAY,EAAE,IAAI;KACnB,CAAC,CAAC;IACH,IAAA,8CAAsB,EAAC,aAAa,CAAC,CAAC;AACxC,CAAC","sourcesContent":["import { setGlobalLoggerFactory } from 'global-logger-factory';\nimport path from 'node:path';\nimport { pathToFileURL } from 'node:url';\nimport { ConfigurableLoggerFactory } from '../logging/ConfigurableLoggerFactory';\nimport { PACKAGE_ROOT } from './package-root';\nimport type { RuntimeHost } from './host/types';\nimport { oidcTokenEndpoint, resolveExternalOidcIssuer } from './oidc-issuer';\nimport { nodeRuntimePlatform } from './platform/node/NodeRuntimePlatform';\nimport type { RuntimePlatform } from './platform/types';\nimport type { XpodRuntimeOptions, XpodRuntimePorts, XpodRuntimeSockets } from './runtime-types';\n\nexport interface RuntimeBootstrapState {\n  id: string;\n  host: RuntimeHost;\n  mode: 'local' | 'cloud';\n  transport: 'socket' | 'port';\n  bindHost: string;\n  runtimeRoot: string;\n  rootFilePath: string;\n  sparqlEndpoint: string;\n  rdfIndexPath: string;\n  identityDbUrl: string;\n  usageDbUrl: string;\n  cssAuthMode: 'acp' | 'acl' | 'allow-all';\n  apiOpen: boolean;\n  logLevel: string;\n  baseUrl: string;\n  envFilePath?: string;\n  ports: XpodRuntimePorts;\n  sockets: XpodRuntimeSockets;\n}\n\nfunction ensureTrailingSlash(url: string): string {\n  return url.endsWith('/') ? url : `${url}/`;\n}\n\nfunction normalizeWindowsAbsolutePath(filePath: string): string {\n  return filePath.replace(/^[\\\\/]+(?=[A-Za-z]:[\\\\/])/, '');\n}\n\nfunction isWindowsAbsolutePath(filePath: string): boolean {\n  return /^[A-Za-z]:[\\\\/]/.test(normalizeWindowsAbsolutePath(filePath));\n}\n\nfunction getWindowsDriveRoot(filePath: string): string | undefined {\n  const normalizedPath = normalizeWindowsAbsolutePath(filePath);\n  return isWindowsAbsolutePath(normalizedPath) ? path.win32.parse(normalizedPath).root.toLowerCase() : undefined;\n}\n\nfunction arePathsOnDifferentWindowsDrives(firstPath: string, secondPath: string): boolean {\n  const firstRoot = getWindowsDriveRoot(firstPath);\n  const secondRoot = getWindowsDriveRoot(secondPath);\n  return Boolean(firstRoot && secondRoot && firstRoot !== secondRoot);\n}\n\nfunction toWindowsFileUrl(filePath: string): string {\n  const normalizedPath = normalizeWindowsAbsolutePath(filePath).replace(/\\\\/g, '/');\n  return new URL(`file:///${normalizedPath}`).href;\n}\n\nfunction toConfigImportSpecifier(fromFilePath: string, toFilePath: string): string {\n  const normalizedFromPath = normalizeWindowsAbsolutePath(fromFilePath);\n  const normalizedToPath = normalizeWindowsAbsolutePath(toFilePath);\n  if (!isWindowsAbsolutePath(normalizedFromPath) && (pathNeedsEscapedFileUrl(normalizedFromPath) || pathNeedsEscapedFileUrl(normalizedToPath))) {\n    return pathToFileURL(normalizedToPath).href;\n  }\n\n  const useWindowsPaths = isWindowsAbsolutePath(normalizedFromPath) || isWindowsAbsolutePath(normalizedToPath);\n  const pathApi = useWindowsPaths ? path.win32 : path.posix;\n  const fromDirectoryPath = pathApi.dirname(useWindowsPaths ? normalizedFromPath : fromFilePath);\n  const targetPath = useWindowsPaths ? normalizedToPath : toFilePath;\n\n  if (useWindowsPaths && arePathsOnDifferentWindowsDrives(fromDirectoryPath, targetPath)) {\n    return toWindowsFileUrl(targetPath);\n  }\n\n  const relativePath = pathApi.relative(fromDirectoryPath, targetPath).replace(/\\\\/g, '/');\n  if (relativePath.startsWith('./') || relativePath.startsWith('../')) {\n    return relativePath;\n  }\n  return `./${relativePath}`;\n}\n\nfunction pathNeedsEscapedFileUrl(filePath: string): boolean {\n  return /\\s/.test(filePath);\n}\n\nfunction withDefinedEntries(entries: Array<[string, string | number | boolean | undefined]>): Record<string, string | number | boolean> {\n  const result: Record<string, string | number | boolean> = {};\n  for (const [key, value] of entries) {\n    if (value !== undefined) {\n      result[key] = value;\n    }\n  }\n  return result;\n}\n\nfunction normalizeDatabaseUrl(\n  value: string,\n  platform: Pick<RuntimePlatform, 'resolvePath'> = nodeRuntimePlatform,\n): string {\n  if (\n    value.startsWith('sqlite:') ||\n    value.startsWith('postgres://') ||\n    value.startsWith('postgresql://') ||\n    value.startsWith('mysql://')\n  ) {\n    return value;\n  }\n  return `sqlite:${platform.resolvePath(value)}`;\n}\n\nexport async function resolveRuntimeBootstrap(\n  id: string,\n  options: XpodRuntimeOptions,\n  host: RuntimeHost,\n  platform: RuntimePlatform = nodeRuntimePlatform,\n): Promise<RuntimeBootstrapState> {\n  const mode = options.mode ?? 'local';\n  const transport = host.resolveTransport(options.transport);\n  const bindHost = options.bindHost ?? '127.0.0.1';\n  const runtimeRoot = platform.resolvePath(options.runtimeRoot ?? platform.joinPath(platform.cwd(), '.test-data', 'xpod-runtime', id));\n  const rootFilePath = platform.resolvePath(options.rootFilePath ?? platform.joinPath(runtimeRoot, 'data'));\n  const sparqlEndpoint = normalizeDatabaseUrl(options.sparqlEndpoint ?? platform.joinPath(runtimeRoot, 'quadstore.sqlite'), platform);\n  const rdfIndexPath = platform.resolvePath(options.rdfIndexPath ?? platform.joinPath(runtimeRoot, 'rdf-index.sqlite'));\n  const identityDbUrl = normalizeDatabaseUrl(options.identityDbUrl ?? platform.joinPath(runtimeRoot, 'identity.sqlite'), platform);\n  const usageDbUrl = normalizeDatabaseUrl(options.usageDbUrl ?? platform.joinPath(runtimeRoot, 'usage.sqlite'), platform);\n  const cssAuthMode = options.authMode ?? (options.open ? 'allow-all' : 'acp');\n  const apiOpen = options.apiOpen ?? options.open ?? false;\n  const logLevel = options.logLevel ?? platform.getEnv('CSS_LOGGING_LEVEL') ?? 'warn';\n\n  platform.ensureDir(runtimeRoot);\n  platform.ensureDir(rootFilePath);\n\n  const socketsRoot = platform.joinPath(runtimeRoot, 'sockets');\n  if (transport === 'socket') {\n    platform.ensureDir(socketsRoot);\n  }\n  const ports: XpodRuntimePorts = transport === 'port'\n    ? await host.allocatePorts({\n      gatewayPort: options.gatewayPort,\n      cssPort: options.cssPort,\n      apiPort: options.apiPort,\n      basePort: 5600,\n    })\n    : {};\n  const sockets: XpodRuntimeSockets = {};\n\n  if (transport === 'socket') {\n    sockets.gateway = platform.resolvePath(options.gatewaySocketPath ?? platform.joinPath(socketsRoot, 'gateway.sock'));\n    sockets.css = platform.resolvePath(options.cssSocketPath ?? platform.joinPath(socketsRoot, 'css.sock'));\n    sockets.api = platform.resolvePath(options.apiSocketPath ?? platform.joinPath(socketsRoot, 'api.sock'));\n  }\n\n  const baseUrl = ensureTrailingSlash(\n    options.baseUrl ?? (transport === 'socket'\n      ? 'http://localhost'\n      : `http://${bindHost}:${ports.gateway}`),\n  );\n\n  return {\n    id,\n    host,\n    mode,\n    transport,\n    bindHost,\n    runtimeRoot,\n    rootFilePath,\n    sparqlEndpoint,\n    rdfIndexPath,\n    identityDbUrl,\n    usageDbUrl,\n    cssAuthMode,\n    apiOpen,\n    logLevel,\n    baseUrl,\n    envFilePath: options.envFile ? platform.resolvePath(options.envFile) : undefined,\n    ports,\n    sockets,\n  };\n}\n\nexport function buildRuntimeEnv(\n  state: RuntimeBootstrapState,\n  options: XpodRuntimeOptions,\n  envFromFile: Record<string, string | undefined> = {},\n): Record<string, string | undefined> {\n  const mergedEnv = {\n    ...envFromFile,\n    ...options.env,\n  };\n  const externalOidcIssuer = resolveExternalOidcIssuer(mergedEnv);\n\n  return {\n    ...mergedEnv,\n    XPOD_ENV_PATH: state.envFilePath,\n    XPOD_EDITION: state.mode,\n    CSS_BASE_URL: state.baseUrl,\n    CSS_TOKEN_ENDPOINT: externalOidcIssuer\n      ? oidcTokenEndpoint(externalOidcIssuer)\n      : `${state.baseUrl}.oidc/token`,\n    CSS_ROOT_FILE_PATH: state.rootFilePath,\n    CSS_SPARQL_ENDPOINT: state.sparqlEndpoint,\n    SPARQL_ENDPOINT: state.sparqlEndpoint,\n    CSS_IDENTITY_DB_URL: state.identityDbUrl,\n    DATABASE_URL: state.identityDbUrl,\n    CSS_PORT: state.ports.css !== undefined ? String(state.ports.css) : undefined,\n    API_PORT: state.ports.api !== undefined ? String(state.ports.api) : undefined,\n    API_HOST: state.bindHost,\n    API_SOCKET_PATH: state.sockets.api,\n    XPOD_MAIN_PORT: state.ports.gateway !== undefined ? String(state.ports.gateway) : undefined,\n    CORS_ORIGINS: new URL(state.baseUrl).origin,\n    CSS_LOGGING_LEVEL: state.logLevel,\n  };\n}\n\nexport function buildRuntimeShorthand(\n  runtimeEnv: Record<string, string | undefined>,\n  options: XpodRuntimeOptions,\n  state: RuntimeBootstrapState,\n  baseEnv: Record<string, string | undefined> = nodeRuntimePlatform.baseEnv,\n): Record<string, string | number | boolean> {\n  const envValue = (key: string): string | undefined => runtimeEnv[key] ?? baseEnv[key];\n  const externalOidcIssuer = resolveExternalOidcIssuer({\n    oidcIssuer: envValue('oidcIssuer'),\n  });\n\n  return {\n    ...withDefinedEntries([\n      ['baseStorageDomain', envValue('CSS_BASE_STORAGE_DOMAIN')],\n      ['minioAccessKey', envValue('CSS_MINIO_ACCESS_KEY')],\n      ['minioSecretKey', envValue('CSS_MINIO_SECRET_KEY')],\n      ['minioEndpoint', envValue('CSS_MINIO_ENDPOINT')],\n      ['minioBucketName', envValue('CSS_MINIO_BUCKET_NAME')],\n      ['redisClient', envValue('CSS_REDIS_CLIENT')],\n      ['redisUsername', envValue('CSS_REDIS_USERNAME')],\n      ['redisPassword', envValue('CSS_REDIS_PASSWORD')],\n      ['emailConfigHost', envValue('CSS_EMAIL_CONFIG_HOST') ?? ''],\n      ['emailConfigPort', envValue('CSS_EMAIL_CONFIG_PORT') ?? '587'],\n      ['emailConfigAuthUser', envValue('CSS_EMAIL_CONFIG_AUTH_USER') ?? ''],\n      ['emailConfigAuthPass', envValue('CSS_EMAIL_CONFIG_AUTH_PASS') ?? ''],\n      ['oidcIssuer', externalOidcIssuer],\n      ['allowedHosts', envValue('CSS_ALLOWED_HOSTS')],\n      ['nodeId', envValue('XPOD_NODE_ID')],\n      ['nodeToken', envValue('XPOD_NODE_TOKEN')],\n      ['serviceToken', envValue('XPOD_SERVICE_TOKEN')],\n    ]),\n    baseUrl: state.baseUrl,\n    rootFilePath: state.rootFilePath,\n    sparqlEndpoint: state.sparqlEndpoint,\n    rdfIndexPath: state.rdfIndexPath,\n    identityDbUrl: state.identityDbUrl,\n    usageDbUrl: state.usageDbUrl,\n    logLevel: state.logLevel,\n    authMode: state.cssAuthMode,\n    edition: state.mode === 'cloud' ? 'server' : 'local',\n    edgeNodesEnabled: options.edgeNodesEnabled ?? false,\n    centerRegistrationEnabled: options.centerRegistrationEnabled ?? false,\n    ...(options.shorthand ?? {}),\n  };\n}\n\nexport function createCssRuntimeConfig(\n  state: RuntimeBootstrapState,\n  open: boolean,\n  platform: Pick<RuntimePlatform, 'dirname' | 'ensureDir' | 'joinPath' | 'readTextFile' | 'writeTextFile'> = nodeRuntimePlatform,\n): string {\n  const configPath = normalizeWindowsAbsolutePath(platform.joinPath(PACKAGE_ROOT, `config/${state.mode}.json`));\n  if (!open) {\n    return configPath;\n  }\n\n  const runtimeRoot = normalizeWindowsAbsolutePath(state.runtimeRoot);\n  const runtimeConfigPath = arePathsOnDifferentWindowsDrives(runtimeRoot, configPath)\n    ? (() => {\n      const runtimeConfigDir = normalizeWindowsAbsolutePath(platform.joinPath(\n        platform.dirname(configPath),\n        '..',\n        '.xpod-runtime',\n        state.id,\n      ));\n      platform.ensureDir(runtimeConfigDir);\n      return normalizeWindowsAbsolutePath(platform.joinPath(runtimeConfigDir, 'css-runtime.config.json'));\n    })()\n    : normalizeWindowsAbsolutePath(platform.joinPath(runtimeRoot, 'css-runtime.config.json'));\n  const openConfigPath = normalizeWindowsAbsolutePath(platform.joinPath(PACKAGE_ROOT, 'config/runtime-open.json'));\n  const runtimeConfigDir = platform.dirname(runtimeConfigPath);\n  const runtimeConfigImportPath = rewriteConfigForFileUrlImportsIfNeeded(\n    configPath,\n    platform.joinPath(runtimeConfigDir, 'config'),\n    platform,\n  );\n  platform.writeTextFile(runtimeConfigPath, JSON.stringify({\n    '@context': [\n      'https://linkedsoftwaredependencies.org/bundles/npm/@solid/community-server/^8.0.0/components/context.jsonld',\n      'https://linkedsoftwaredependencies.org/bundles/npm/asynchronous-handlers/^1.0.0/components/context.jsonld',\n    ],\n    import: [\n      toConfigImportSpecifier(runtimeConfigPath, runtimeConfigImportPath),\n      toConfigImportSpecifier(runtimeConfigPath, openConfigPath),\n    ],\n  }, null, 2));\n\n  return runtimeConfigPath;\n}\n\nfunction rewriteConfigForFileUrlImportsIfNeeded(\n  configPath: string,\n  outputDir: string,\n  platform: Pick<RuntimePlatform, 'dirname' | 'ensureDir' | 'joinPath' | 'readTextFile' | 'writeTextFile'>,\n  rewritten = new Map<string, string>(),\n): string {\n  const normalizedConfigPath = normalizeWindowsAbsolutePath(configPath);\n  if (isWindowsAbsolutePath(normalizedConfigPath) || !pathNeedsEscapedFileUrl(normalizedConfigPath)) {\n    return normalizedConfigPath;\n  }\n\n  const existing = rewritten.get(normalizedConfigPath);\n  if (existing) {\n    return existing;\n  }\n\n  platform.ensureDir(outputDir);\n  const outputPath = normalizeWindowsAbsolutePath(platform.joinPath(outputDir, path.posix.basename(normalizedConfigPath)));\n  rewritten.set(normalizedConfigPath, outputPath);\n\n  const parsed = JSON.parse(platform.readTextFile(normalizedConfigPath)) as Record<string, unknown>;\n  parsed.import = rewriteConfigImports(\n    normalizedConfigPath,\n    parsed.import,\n    outputDir,\n    platform,\n    rewritten,\n  );\n  platform.writeTextFile(outputPath, `${JSON.stringify(parsed, null, 2)}\\n`);\n  return outputPath;\n}\n\nfunction rewriteConfigImports(\n  sourceConfigPath: string,\n  imports: unknown,\n  outputDir: string,\n  platform: Pick<RuntimePlatform, 'dirname' | 'ensureDir' | 'joinPath' | 'readTextFile' | 'writeTextFile'>,\n  rewritten: Map<string, string>,\n): unknown {\n  if (typeof imports === 'string') {\n    return rewriteConfigImport(sourceConfigPath, imports, outputDir, platform, rewritten);\n  }\n\n  if (Array.isArray(imports)) {\n    return imports.map((value) => typeof value === 'string'\n      ? rewriteConfigImport(sourceConfigPath, value, outputDir, platform, rewritten)\n      : value);\n  }\n\n  return imports;\n}\n\nfunction rewriteConfigImport(\n  sourceConfigPath: string,\n  importValue: string,\n  outputDir: string,\n  platform: Pick<RuntimePlatform, 'dirname' | 'ensureDir' | 'joinPath' | 'readTextFile' | 'writeTextFile'>,\n  rewritten: Map<string, string>,\n): string {\n  if (!importValue.startsWith('./') && !importValue.startsWith('../')) {\n    return importValue;\n  }\n\n  const targetPath = normalizeWindowsAbsolutePath(\n    path.posix.resolve(platform.dirname(sourceConfigPath), importValue),\n  );\n  const rewrittenTargetPath = rewriteConfigForFileUrlImportsIfNeeded(targetPath, outputDir, platform, rewritten);\n  return pathToFileURL(rewrittenTargetPath).href;\n}\n\nexport function initRuntimeLogger(\n  level: string,\n  platform: Pick<RuntimePlatform, 'cwd' | 'joinPath'> = nodeRuntimePlatform,\n): void {\n  const loggerFactory = new ConfigurableLoggerFactory(level, {\n    fileName: platform.joinPath(platform.cwd(), 'logs/xpod-%DATE%.log'),\n    showLocation: true,\n  });\n  setGlobalLoggerFactory(loggerFactory);\n}\n"]}
+{"version":3,"file":"bootstrap.js","sourceRoot":"","sources":["../../src/runtime/bootstrap.ts"],"names":[],"mappings":";;;;;AA6HA,4DAmBC;AAED,0DA0EC;AAED,0CAmCC;AAED,sDA4CC;AAED,wDAqCC;AAwED,8CASC;AAvaD,iEAA+D;AAC/D,0DAA6B;AAC7B,uCAAyC;AACzC,oFAAiF;AACjF,iDAA8C;AAE9C,+CAA6E;AAC7E,6EAA0E;AAE1E,2CAA0C;AAG1C,wDAAmF;AAEnF,MAAM,sBAAsB,GAAG,6GAA6G,CAAC;AAC7I,MAAM,sBAAsB,GAAG,2GAA2G,CAAC;AAuB3I,SAAS,mBAAmB,CAAC,GAAW;IACtC,OAAO,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,GAAG,GAAG,CAAC;AAC7C,CAAC;AAED,SAAS,4BAA4B,CAAC,QAAgB;IACpD,OAAO,QAAQ,CAAC,OAAO,CAAC,2BAA2B,EAAE,EAAE,CAAC,CAAC;AAC3D,CAAC;AAED,SAAS,qBAAqB,CAAC,QAAgB;IAC7C,OAAO,iBAAiB,CAAC,IAAI,CAAC,4BAA4B,CAAC,QAAQ,CAAC,CAAC,CAAC;AACxE,CAAC;AAED,SAAS,mBAAmB,CAAC,QAAgB;IAC3C,MAAM,cAAc,GAAG,4BAA4B,CAAC,QAAQ,CAAC,CAAC;IAC9D,OAAO,qBAAqB,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,mBAAI,CAAC,KAAK,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;AACjH,CAAC;AAED,SAAS,gCAAgC,CAAC,SAAiB,EAAE,UAAkB;IAC7E,MAAM,SAAS,GAAG,mBAAmB,CAAC,SAAS,CAAC,CAAC;IACjD,MAAM,UAAU,GAAG,mBAAmB,CAAC,UAAU,CAAC,CAAC;IACnD,OAAO,OAAO,CAAC,SAAS,IAAI,UAAU,IAAI,SAAS,KAAK,UAAU,CAAC,CAAC;AACtE,CAAC;AAED,SAAS,gBAAgB,CAAC,QAAgB;IACxC,MAAM,cAAc,GAAG,4BAA4B,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IAClF,OAAO,IAAI,GAAG,CAAC,WAAW,cAAc,EAAE,CAAC,CAAC,IAAI,CAAC;AACnD,CAAC;AAED,SAAS,uBAAuB,CAAC,YAAoB,EAAE,UAAkB;IACvE,MAAM,kBAAkB,GAAG,4BAA4B,CAAC,YAAY,CAAC,CAAC;IACtE,MAAM,gBAAgB,GAAG,4BAA4B,CAAC,UAAU,CAAC,CAAC;IAClE,IAAI,CAAC,qBAAqB,CAAC,kBAAkB,CAAC,IAAI,CAAC,uBAAuB,CAAC,kBAAkB,CAAC,IAAI,uBAAuB,CAAC,gBAAgB,CAAC,CAAC,EAAE,CAAC;QAC7I,OAAO,IAAA,wBAAa,EAAC,gBAAgB,CAAC,CAAC,IAAI,CAAC;IAC9C,CAAC;IAED,MAAM,eAAe,GAAG,qBAAqB,CAAC,kBAAkB,CAAC,IAAI,qBAAqB,CAAC,gBAAgB,CAAC,CAAC;IAC7G,MAAM,OAAO,GAAG,eAAe,CAAC,CAAC,CAAC,mBAAI,CAAC,KAAK,CAAC,CAAC,CAAC,mBAAI,CAAC,KAAK,CAAC;IAC1D,MAAM,iBAAiB,GAAG,OAAO,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC;IAC/F,MAAM,UAAU,GAAG,eAAe,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,UAAU,CAAC;IAEnE,IAAI,eAAe,IAAI,gCAAgC,CAAC,iBAAiB,EAAE,UAAU,CAAC,EAAE,CAAC;QACvF,OAAO,gBAAgB,CAAC,UAAU,CAAC,CAAC;IACtC,CAAC;IAED,MAAM,YAAY,GAAG,OAAO,CAAC,QAAQ,CAAC,iBAAiB,EAAE,UAAU,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IACzF,IAAI,YAAY,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,YAAY,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;QACpE,OAAO,YAAY,CAAC;IACtB,CAAC;IACD,OAAO,KAAK,YAAY,EAAE,CAAC;AAC7B,CAAC;AAED,SAAS,uBAAuB,CAAC,QAAgB;IAC/C,OAAO,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;AAC7B,CAAC;AAED,SAAS,kBAAkB,CAAC,OAA+D;IACzF,MAAM,MAAM,GAA8C,EAAE,CAAC;IAC7D,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,OAAO,EAAE,CAAC;QACnC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QACtB,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,oBAAoB,CAC3B,KAAa,EACb,WAAiD,yCAAmB;IAEpE,IACE,KAAK,CAAC,UAAU,CAAC,SAAS,CAAC;QAC3B,KAAK,CAAC,UAAU,CAAC,aAAa,CAAC;QAC/B,KAAK,CAAC,UAAU,CAAC,eAAe,CAAC;QACjC,KAAK,CAAC,UAAU,CAAC,UAAU,CAAC,EAC5B,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,UAAU,QAAQ,CAAC,WAAW,CAAC,KAAK,CAAC,EAAE,CAAC;AACjD,CAAC;AAED,SAAS,kBAAkB,CACzB,WAA+B,EAC/B,QAA8D;IAE9D,OAAO,WAAW,CAAC,CAAC,CAAC,IAAA,uBAAW,EAAC,WAAW,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AAC/D,CAAC;AAED,SAAgB,wBAAwB,CAAC,QAAkB;IACzD,QAAQ,QAAQ,EAAE,CAAC;QACjB,KAAK,KAAK;YACR,OAAO;gBACL,0CAA0C;gBAC1C,oCAAoC;aACrC,CAAC;QACJ,KAAK,WAAW;YACd,OAAO;gBACL,6CAA6C;gBAC7C,sCAAsC;aACvC,CAAC;QACJ,KAAK,KAAK,CAAC;QACX;YACE,OAAO;gBACL,uCAAuC;gBACvC,oCAAoC;aACrC,CAAC;IACN,CAAC;AACH,CAAC;AAEM,KAAK,UAAU,uBAAuB,CAC3C,EAAU,EACV,OAA2B,EAC3B,IAAiB,EACjB,WAA4B,yCAAmB;IAE/C,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC;IACrC,MAAM,SAAS,GAAG,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAC3D,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,WAAW,CAAC;IACjD,MAAM,WAAW,GAAG,QAAQ,CAAC,WAAW,CAAC,OAAO,CAAC,WAAW,IAAI,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,EAAE,EAAE,YAAY,EAAE,cAAc,EAAE,EAAE,CAAC,CAAC,CAAC;IACrI,MAAM,YAAY,GAAG,QAAQ,CAAC,WAAW,CAAC,OAAO,CAAC,YAAY,IAAI,QAAQ,CAAC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC;IAC1G,MAAM,cAAc,GAAG,oBAAoB,CAAC,OAAO,CAAC,cAAc,IAAI,QAAQ,CAAC,QAAQ,CAAC,WAAW,EAAE,kBAAkB,CAAC,EAAE,QAAQ,CAAC,CAAC;IACpI,MAAM,YAAY,GAAG,QAAQ,CAAC,WAAW,CAAC,OAAO,CAAC,YAAY,IAAI,QAAQ,CAAC,QAAQ,CAAC,WAAW,EAAE,kBAAkB,CAAC,CAAC,CAAC;IACtH,MAAM,aAAa,GAAG,oBAAoB,CAAC,OAAO,CAAC,aAAa,IAAI,QAAQ,CAAC,QAAQ,CAAC,WAAW,EAAE,iBAAiB,CAAC,EAAE,QAAQ,CAAC,CAAC;IACjI,MAAM,UAAU,GAAG,oBAAoB,CAAC,OAAO,CAAC,UAAU,IAAI,QAAQ,CAAC,QAAQ,CAAC,WAAW,EAAE,cAAc,CAAC,EAAE,QAAQ,CAAC,CAAC;IACxH,MAAM,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACxF,MAAM,WAAW,GAAG;QAClB,GAAG,QAAQ,CAAC,OAAO;QACnB,GAAG,kBAAkB,CAAC,WAAW,EAAE,QAAQ,CAAC;QAC5C,GAAG,OAAO,CAAC,GAAG;KACf,CAAC;IACF,MAAM,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,IAAA,+BAAoB,EAAC,OAAO,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;IACrG,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,IAAI,IAAI,KAAK,CAAC;IACzD,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,QAAQ,CAAC,MAAM,CAAC,mBAAmB,CAAC,IAAI,MAAM,CAAC;IAEpF,QAAQ,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;IAChC,QAAQ,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;IAEjC,MAAM,WAAW,GAAG,QAAQ,CAAC,QAAQ,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;IAC9D,IAAI,SAAS,KAAK,QAAQ,EAAE,CAAC;QAC3B,QAAQ,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;IAClC,CAAC;IACD,MAAM,KAAK,GAAqB,SAAS,KAAK,MAAM;QAClD,CAAC,CAAC,MAAM,IAAI,CAAC,aAAa,CAAC;YACzB,WAAW,EAAE,OAAO,CAAC,WAAW;YAChC,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,QAAQ,EAAE,IAAI;SACf,CAAC;QACF,CAAC,CAAC,EAAE,CAAC;IACP,MAAM,OAAO,GAAuB,EAAE,CAAC;IAEvC,IAAI,SAAS,KAAK,QAAQ,EAAE,CAAC;QAC3B,OAAO,CAAC,OAAO,GAAG,QAAQ,CAAC,WAAW,CAAC,OAAO,CAAC,iBAAiB,IAAI,QAAQ,CAAC,QAAQ,CAAC,WAAW,EAAE,cAAc,CAAC,CAAC,CAAC;QACpH,OAAO,CAAC,GAAG,GAAG,QAAQ,CAAC,WAAW,CAAC,OAAO,CAAC,aAAa,IAAI,QAAQ,CAAC,QAAQ,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC,CAAC;QACxG,OAAO,CAAC,GAAG,GAAG,QAAQ,CAAC,WAAW,CAAC,OAAO,CAAC,aAAa,IAAI,QAAQ,CAAC,QAAQ,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC,CAAC;IAC1G,CAAC;IAED,MAAM,OAAO,GAAG,mBAAmB,CACjC,OAAO,CAAC,OAAO,IAAI,CAAC,SAAS,KAAK,QAAQ;QACxC,CAAC,CAAC,kBAAkB;QACpB,CAAC,CAAC,UAAU,QAAQ,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC,CAC3C,CAAC;IAEF,OAAO;QACL,EAAE;QACF,IAAI;QACJ,IAAI;QACJ,SAAS;QACT,QAAQ;QACR,WAAW;QACX,YAAY;QACZ,cAAc;QACd,YAAY;QACZ,aAAa;QACb,UAAU;QACV,WAAW;QACX,OAAO;QACP,QAAQ;QACR,OAAO;QACP,WAAW;QACX,KAAK;QACL,OAAO;KACR,CAAC;AACJ,CAAC;AAED,SAAgB,eAAe,CAC7B,KAA4B,EAC5B,OAA2B,EAC3B,cAAkD,EAAE;IAEpD,MAAM,SAAS,GAAG;QAChB,GAAG,WAAW;QACd,GAAG,OAAO,CAAC,GAAG;KACf,CAAC;IACF,MAAM,kBAAkB,GAAG,IAAA,uCAAyB,EAAC,SAAS,CAAC,CAAC;IAEhE,MAAM,UAAU,GAAG;QACjB,GAAG,SAAS;QACZ,aAAa,EAAE,KAAK,CAAC,WAAW;QAChC,YAAY,EAAE,KAAK,CAAC,IAAI;QACxB,YAAY,EAAE,KAAK,CAAC,OAAO;QAC3B,kBAAkB,EAAE,kBAAkB;YACpC,CAAC,CAAC,IAAA,+BAAiB,EAAC,kBAAkB,CAAC;YACvC,CAAC,CAAC,GAAG,KAAK,CAAC,OAAO,aAAa;QACjC,kBAAkB,EAAE,KAAK,CAAC,YAAY;QACtC,kBAAkB,EAAE,KAAK,CAAC,YAAY;QACtC,mBAAmB,EAAE,KAAK,CAAC,cAAc;QACzC,eAAe,EAAE,KAAK,CAAC,cAAc;QACrC,mBAAmB,EAAE,KAAK,CAAC,aAAa;QACxC,YAAY,EAAE,KAAK,CAAC,aAAa;QACjC,QAAQ,EAAE,KAAK,CAAC,KAAK,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS;QAC7E,QAAQ,EAAE,KAAK,CAAC,KAAK,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS;QAC7E,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,eAAe,EAAE,KAAK,CAAC,OAAO,CAAC,GAAG;QAClC,cAAc,EAAE,KAAK,CAAC,KAAK,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS;QAC3F,YAAY,EAAE,IAAI,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,MAAM;QAC3C,iBAAiB,EAAE,KAAK,CAAC,QAAQ;KAClC,CAAC;IAEF,OAAO,IAAA,2BAAgB,EAAC,UAAU,EAAE,KAAK,CAAC,WAAW,CAAC,CAAC;AACzD,CAAC;AAED,SAAgB,qBAAqB,CACnC,UAA8C,EAC9C,OAA2B,EAC3B,KAA4B,EAC5B,UAA8C,yCAAmB,CAAC,OAAO;IAEzE,MAAM,QAAQ,GAAG,CAAC,GAAW,EAAsB,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,CAAC;IACtF,MAAM,kBAAkB,GAAG,IAAA,uCAAyB,EAAC;QACnD,UAAU,EAAE,QAAQ,CAAC,YAAY,CAAC;KACnC,CAAC,CAAC;IAEH,OAAO;QACL,GAAG,kBAAkB,CAAC;YACpB,CAAC,mBAAmB,EAAE,QAAQ,CAAC,yBAAyB,CAAC,CAAC;YAC1D,CAAC,gBAAgB,EAAE,QAAQ,CAAC,sBAAsB,CAAC,CAAC;YACpD,CAAC,gBAAgB,EAAE,QAAQ,CAAC,sBAAsB,CAAC,CAAC;YACpD,CAAC,eAAe,EAAE,QAAQ,CAAC,oBAAoB,CAAC,CAAC;YACjD,CAAC,iBAAiB,EAAE,QAAQ,CAAC,uBAAuB,CAAC,CAAC;YACtD,CAAC,aAAa,EAAE,QAAQ,CAAC,kBAAkB,CAAC,CAAC;YAC7C,CAAC,eAAe,EAAE,QAAQ,CAAC,oBAAoB,CAAC,CAAC;YACjD,CAAC,eAAe,EAAE,QAAQ,CAAC,oBAAoB,CAAC,CAAC;YACjD,CAAC,iBAAiB,EAAE,QAAQ,CAAC,uBAAuB,CAAC,IAAI,EAAE,CAAC;YAC5D,CAAC,iBAAiB,EAAE,QAAQ,CAAC,uBAAuB,CAAC,IAAI,KAAK,CAAC;YAC/D,CAAC,qBAAqB,EAAE,QAAQ,CAAC,4BAA4B,CAAC,IAAI,EAAE,CAAC;YACrE,CAAC,qBAAqB,EAAE,QAAQ,CAAC,4BAA4B,CAAC,IAAI,EAAE,CAAC;YACrE,CAAC,YAAY,EAAE,kBAAkB,CAAC;YAClC,CAAC,cAAc,EAAE,QAAQ,CAAC,mBAAmB,CAAC,CAAC;YAC/C,CAAC,QAAQ,EAAE,QAAQ,CAAC,cAAc,CAAC,CAAC;YACpC,CAAC,WAAW,EAAE,QAAQ,CAAC,iBAAiB,CAAC,CAAC;YAC1C,CAAC,cAAc,EAAE,QAAQ,CAAC,oBAAoB,CAAC,CAAC;SACjD,CAAC;QACF,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,aAAa,EAAE,KAAK,CAAC,aAAa;QAClC,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,QAAQ,EAAE,KAAK,CAAC,WAAW;QAC3B,OAAO,EAAE,KAAK,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO;QACpD,gBAAgB,EAAE,OAAO,CAAC,gBAAgB,IAAI,KAAK;QACnD,yBAAyB,EAAE,OAAO,CAAC,yBAAyB,IAAI,KAAK;QACrE,GAAG,CAAC,OAAO,CAAC,SAAS,IAAI,EAAE,CAAC;KAC7B,CAAC;AACJ,CAAC;AAED,SAAgB,sBAAsB,CACpC,KAA4B,EAC5B,KAAe,EACf,WAA2G,yCAAmB;IAE9H,MAAM,UAAU,GAAG,4BAA4B,CAAC,QAAQ,CAAC,QAAQ,CAAC,2BAAY,EAAE,UAAU,KAAK,CAAC,IAAI,OAAO,CAAC,CAAC,CAAC;IAC9G,MAAM,WAAW,GAAG,4BAA4B,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IACpE,MAAM,iBAAiB,GAAG,gCAAgC,CAAC,WAAW,EAAE,UAAU,CAAC;QACjF,CAAC,CAAC,CAAC,GAAG,EAAE;YACN,MAAM,gBAAgB,GAAG,4BAA4B,CAAC,QAAQ,CAAC,QAAQ,CACrE,QAAQ,CAAC,OAAO,CAAC,UAAU,CAAC,EAC5B,IAAI,EACJ,eAAe,EACf,KAAK,CAAC,EAAE,CACT,CAAC,CAAC;YACH,QAAQ,CAAC,SAAS,CAAC,gBAAgB,CAAC,CAAC;YACrC,OAAO,4BAA4B,CAAC,QAAQ,CAAC,QAAQ,CAAC,gBAAgB,EAAE,yBAAyB,CAAC,CAAC,CAAC;QACtG,CAAC,CAAC,EAAE;QACJ,CAAC,CAAC,4BAA4B,CAAC,QAAQ,CAAC,QAAQ,CAAC,WAAW,EAAE,yBAAyB,CAAC,CAAC,CAAC;IAC5F,MAAM,gBAAgB,GAAG,QAAQ,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;IAC7D,MAAM,uBAAuB,GAAG,sCAAsC,CACpE,UAAU,EACV,QAAQ,CAAC,QAAQ,CAAC,gBAAgB,EAAE,QAAQ,CAAC,EAC7C,QAAQ,CACT,CAAC;IACF,QAAQ,CAAC,aAAa,CAAC,iBAAiB,EAAE,IAAI,CAAC,SAAS,CAAC;QACvD,UAAU,EAAE;YACV,sBAAsB;YACtB,sBAAsB;SACvB;QACD,MAAM,EAAE;YACN,uBAAuB,CAAC,iBAAiB,EAAE,uBAAuB,CAAC;YACnE,GAAG,wBAAwB,CAAC,KAAK,CAAC,WAAW,CAAC;SAC/C;KACF,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IAEb,OAAO,iBAAiB,CAAC;AAC3B,CAAC;AAED,SAAS,sCAAsC,CAC7C,UAAkB,EAClB,SAAiB,EACjB,QAAwG,EACxG,YAAY,IAAI,GAAG,EAAkB;IAErC,MAAM,oBAAoB,GAAG,4BAA4B,CAAC,UAAU,CAAC,CAAC;IACtE,IAAI,qBAAqB,CAAC,oBAAoB,CAAC,IAAI,CAAC,uBAAuB,CAAC,oBAAoB,CAAC,EAAE,CAAC;QAClG,OAAO,oBAAoB,CAAC;IAC9B,CAAC;IAED,MAAM,QAAQ,GAAG,SAAS,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC;IACrD,IAAI,QAAQ,EAAE,CAAC;QACb,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,QAAQ,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;IAC9B,MAAM,UAAU,GAAG,4BAA4B,CAAC,QAAQ,CAAC,QAAQ,CAAC,SAAS,EAAE,mBAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAC;IACzH,SAAS,CAAC,GAAG,CAAC,oBAAoB,EAAE,UAAU,CAAC,CAAC;IAEhD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,YAAY,CAAC,oBAAoB,CAAC,CAA4B,CAAC;IAClG,MAAM,CAAC,MAAM,GAAG,oBAAoB,CAClC,oBAAoB,EACpB,MAAM,CAAC,MAAM,EACb,SAAS,EACT,QAAQ,EACR,SAAS,CACV,CAAC;IACF,QAAQ,CAAC,aAAa,CAAC,UAAU,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;IAC3E,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,SAAS,oBAAoB,CAC3B,gBAAwB,EACxB,OAAgB,EAChB,SAAiB,EACjB,QAAwG,EACxG,SAA8B;IAE9B,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;QAChC,OAAO,mBAAmB,CAAC,gBAAgB,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC;IACxF,CAAC;IAED,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QAC3B,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ;YACrD,CAAC,CAAC,mBAAmB,CAAC,gBAAgB,EAAE,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,CAAC;YAC9E,CAAC,CAAC,KAAK,CAAC,CAAC;IACb,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,mBAAmB,CAC1B,gBAAwB,EACxB,WAAmB,EACnB,SAAiB,EACjB,QAAwG,EACxG,SAA8B;IAE9B,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;QACpE,OAAO,WAAW,CAAC;IACrB,CAAC;IAED,MAAM,UAAU,GAAG,4BAA4B,CAC7C,mBAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,gBAAgB,CAAC,EAAE,WAAW,CAAC,CACpE,CAAC;IACF,MAAM,mBAAmB,GAAG,sCAAsC,CAAC,UAAU,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC;IAC/G,OAAO,IAAA,wBAAa,EAAC,mBAAmB,CAAC,CAAC,IAAI,CAAC;AACjD,CAAC;AAED,SAAgB,iBAAiB,CAC/B,KAAa,EACb,WAAsD,yCAAmB;IAEzE,MAAM,aAAa,GAAG,IAAI,qDAAyB,CAAC,KAAK,EAAE;QACzD,QAAQ,EAAE,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,EAAE,EAAE,sBAAsB,CAAC;QACnE,YAAY,EAAE,IAAI;KACnB,CAAC,CAAC;IACH,IAAA,8CAAsB,EAAC,aAAa,CAAC,CAAC;AACxC,CAAC","sourcesContent":["import { setGlobalLoggerFactory } from 'global-logger-factory';\nimport path from 'node:path';\nimport { pathToFileURL } from 'node:url';\nimport { ConfigurableLoggerFactory } from '../logging/ConfigurableLoggerFactory';\nimport { PACKAGE_ROOT } from './package-root';\nimport type { RuntimeHost } from './host/types';\nimport { oidcTokenEndpoint, resolveExternalOidcIssuer } from './oidc-issuer';\nimport { nodeRuntimePlatform } from './platform/node/NodeRuntimePlatform';\nimport type { RuntimePlatform } from './platform/types';\nimport { loadEnvFile } from './env-utils';\nimport type { XpodRuntimeOptions, XpodRuntimePorts, XpodRuntimeSockets } from './runtime-types';\nimport type { AuthMode } from '../authorization/AuthMode';\nimport { applyAuthModeEnv, resolveAuthModeInput } from '../authorization/AuthMode';\n\nconst CSS_COMPONENTS_CONTEXT = 'https://linkedsoftwaredependencies.org/bundles/npm/@solid/community-server/^8.0.0/components/context.jsonld';\nconst ASYNC_HANDLERS_CONTEXT = 'https://linkedsoftwaredependencies.org/bundles/npm/asynchronous-handlers/^1.0.0/components/context.jsonld';\n\nexport interface RuntimeBootstrapState {\n  id: string;\n  host: RuntimeHost;\n  mode: 'local' | 'cloud';\n  transport: 'socket' | 'port';\n  bindHost: string;\n  runtimeRoot: string;\n  rootFilePath: string;\n  sparqlEndpoint: string;\n  rdfIndexPath: string;\n  identityDbUrl: string;\n  usageDbUrl: string;\n  cssAuthMode: AuthMode;\n  apiOpen: boolean;\n  logLevel: string;\n  baseUrl: string;\n  envFilePath?: string;\n  ports: XpodRuntimePorts;\n  sockets: XpodRuntimeSockets;\n}\n\nfunction ensureTrailingSlash(url: string): string {\n  return url.endsWith('/') ? url : `${url}/`;\n}\n\nfunction normalizeWindowsAbsolutePath(filePath: string): string {\n  return filePath.replace(/^[\\\\/]+(?=[A-Za-z]:[\\\\/])/, '');\n}\n\nfunction isWindowsAbsolutePath(filePath: string): boolean {\n  return /^[A-Za-z]:[\\\\/]/.test(normalizeWindowsAbsolutePath(filePath));\n}\n\nfunction getWindowsDriveRoot(filePath: string): string | undefined {\n  const normalizedPath = normalizeWindowsAbsolutePath(filePath);\n  return isWindowsAbsolutePath(normalizedPath) ? path.win32.parse(normalizedPath).root.toLowerCase() : undefined;\n}\n\nfunction arePathsOnDifferentWindowsDrives(firstPath: string, secondPath: string): boolean {\n  const firstRoot = getWindowsDriveRoot(firstPath);\n  const secondRoot = getWindowsDriveRoot(secondPath);\n  return Boolean(firstRoot && secondRoot && firstRoot !== secondRoot);\n}\n\nfunction toWindowsFileUrl(filePath: string): string {\n  const normalizedPath = normalizeWindowsAbsolutePath(filePath).replace(/\\\\/g, '/');\n  return new URL(`file:///${normalizedPath}`).href;\n}\n\nfunction toConfigImportSpecifier(fromFilePath: string, toFilePath: string): string {\n  const normalizedFromPath = normalizeWindowsAbsolutePath(fromFilePath);\n  const normalizedToPath = normalizeWindowsAbsolutePath(toFilePath);\n  if (!isWindowsAbsolutePath(normalizedFromPath) && (pathNeedsEscapedFileUrl(normalizedFromPath) || pathNeedsEscapedFileUrl(normalizedToPath))) {\n    return pathToFileURL(normalizedToPath).href;\n  }\n\n  const useWindowsPaths = isWindowsAbsolutePath(normalizedFromPath) || isWindowsAbsolutePath(normalizedToPath);\n  const pathApi = useWindowsPaths ? path.win32 : path.posix;\n  const fromDirectoryPath = pathApi.dirname(useWindowsPaths ? normalizedFromPath : fromFilePath);\n  const targetPath = useWindowsPaths ? normalizedToPath : toFilePath;\n\n  if (useWindowsPaths && arePathsOnDifferentWindowsDrives(fromDirectoryPath, targetPath)) {\n    return toWindowsFileUrl(targetPath);\n  }\n\n  const relativePath = pathApi.relative(fromDirectoryPath, targetPath).replace(/\\\\/g, '/');\n  if (relativePath.startsWith('./') || relativePath.startsWith('../')) {\n    return relativePath;\n  }\n  return `./${relativePath}`;\n}\n\nfunction pathNeedsEscapedFileUrl(filePath: string): boolean {\n  return /\\s/.test(filePath);\n}\n\nfunction withDefinedEntries(entries: Array<[string, string | number | boolean | undefined]>): Record<string, string | number | boolean> {\n  const result: Record<string, string | number | boolean> = {};\n  for (const [key, value] of entries) {\n    if (value !== undefined) {\n      result[key] = value;\n    }\n  }\n  return result;\n}\n\nfunction normalizeDatabaseUrl(\n  value: string,\n  platform: Pick<RuntimePlatform, 'resolvePath'> = nodeRuntimePlatform,\n): string {\n  if (\n    value.startsWith('sqlite:') ||\n    value.startsWith('postgres://') ||\n    value.startsWith('postgresql://') ||\n    value.startsWith('mysql://')\n  ) {\n    return value;\n  }\n  return `sqlite:${platform.resolvePath(value)}`;\n}\n\nfunction readRuntimeEnvFile(\n  envFilePath: string | undefined,\n  platform: Pick<RuntimePlatform, 'fileExists' | 'readTextFile'>,\n): Record<string, string> {\n  return envFilePath ? loadEnvFile(envFilePath, platform) : {};\n}\n\nexport function cssAuthModeConfigImports(authMode: AuthMode): string[] {\n  switch (authMode) {\n    case 'acl':\n      return [\n        'css:config/ldp/authorization/webacl.json',\n        'css:config/util/auxiliary/acl.json',\n      ];\n    case 'allow-all':\n      return [\n        'css:config/ldp/authorization/allow-all.json',\n        'css:config/util/auxiliary/empty.json',\n      ];\n    case 'acp':\n    default:\n      return [\n        'css:config/ldp/authorization/acp.json',\n        'css:config/util/auxiliary/acr.json',\n      ];\n  }\n}\n\nexport async function resolveRuntimeBootstrap(\n  id: string,\n  options: XpodRuntimeOptions,\n  host: RuntimeHost,\n  platform: RuntimePlatform = nodeRuntimePlatform,\n): Promise<RuntimeBootstrapState> {\n  const mode = options.mode ?? 'local';\n  const transport = host.resolveTransport(options.transport);\n  const bindHost = options.bindHost ?? '127.0.0.1';\n  const runtimeRoot = platform.resolvePath(options.runtimeRoot ?? platform.joinPath(platform.cwd(), '.test-data', 'xpod-runtime', id));\n  const rootFilePath = platform.resolvePath(options.rootFilePath ?? platform.joinPath(runtimeRoot, 'data'));\n  const sparqlEndpoint = normalizeDatabaseUrl(options.sparqlEndpoint ?? platform.joinPath(runtimeRoot, 'quadstore.sqlite'), platform);\n  const rdfIndexPath = platform.resolvePath(options.rdfIndexPath ?? platform.joinPath(runtimeRoot, 'rdf-index.sqlite'));\n  const identityDbUrl = normalizeDatabaseUrl(options.identityDbUrl ?? platform.joinPath(runtimeRoot, 'identity.sqlite'), platform);\n  const usageDbUrl = normalizeDatabaseUrl(options.usageDbUrl ?? platform.joinPath(runtimeRoot, 'usage.sqlite'), platform);\n  const envFilePath = options.envFile ? platform.resolvePath(options.envFile) : undefined;\n  const authModeEnv = {\n    ...platform.baseEnv,\n    ...readRuntimeEnvFile(envFilePath, platform),\n    ...options.env,\n  };\n  const cssAuthMode = options.open ? 'allow-all' : resolveAuthModeInput(options.authMode, authModeEnv);\n  const apiOpen = options.apiOpen ?? options.open ?? false;\n  const logLevel = options.logLevel ?? platform.getEnv('CSS_LOGGING_LEVEL') ?? 'warn';\n\n  platform.ensureDir(runtimeRoot);\n  platform.ensureDir(rootFilePath);\n\n  const socketsRoot = platform.joinPath(runtimeRoot, 'sockets');\n  if (transport === 'socket') {\n    platform.ensureDir(socketsRoot);\n  }\n  const ports: XpodRuntimePorts = transport === 'port'\n    ? await host.allocatePorts({\n      gatewayPort: options.gatewayPort,\n      cssPort: options.cssPort,\n      apiPort: options.apiPort,\n      basePort: 5600,\n    })\n    : {};\n  const sockets: XpodRuntimeSockets = {};\n\n  if (transport === 'socket') {\n    sockets.gateway = platform.resolvePath(options.gatewaySocketPath ?? platform.joinPath(socketsRoot, 'gateway.sock'));\n    sockets.css = platform.resolvePath(options.cssSocketPath ?? platform.joinPath(socketsRoot, 'css.sock'));\n    sockets.api = platform.resolvePath(options.apiSocketPath ?? platform.joinPath(socketsRoot, 'api.sock'));\n  }\n\n  const baseUrl = ensureTrailingSlash(\n    options.baseUrl ?? (transport === 'socket'\n      ? 'http://localhost'\n      : `http://${bindHost}:${ports.gateway}`),\n  );\n\n  return {\n    id,\n    host,\n    mode,\n    transport,\n    bindHost,\n    runtimeRoot,\n    rootFilePath,\n    sparqlEndpoint,\n    rdfIndexPath,\n    identityDbUrl,\n    usageDbUrl,\n    cssAuthMode,\n    apiOpen,\n    logLevel,\n    baseUrl,\n    envFilePath,\n    ports,\n    sockets,\n  };\n}\n\nexport function buildRuntimeEnv(\n  state: RuntimeBootstrapState,\n  options: XpodRuntimeOptions,\n  envFromFile: Record<string, string | undefined> = {},\n): Record<string, string | undefined> {\n  const mergedEnv = {\n    ...envFromFile,\n    ...options.env,\n  };\n  const externalOidcIssuer = resolveExternalOidcIssuer(mergedEnv);\n\n  const runtimeEnv = {\n    ...mergedEnv,\n    XPOD_ENV_PATH: state.envFilePath,\n    XPOD_EDITION: state.mode,\n    CSS_BASE_URL: state.baseUrl,\n    CSS_TOKEN_ENDPOINT: externalOidcIssuer\n      ? oidcTokenEndpoint(externalOidcIssuer)\n      : `${state.baseUrl}.oidc/token`,\n    CSS_ROOT_FILE_PATH: state.rootFilePath,\n    CSS_RDF_INDEX_PATH: state.rdfIndexPath,\n    CSS_SPARQL_ENDPOINT: state.sparqlEndpoint,\n    SPARQL_ENDPOINT: state.sparqlEndpoint,\n    CSS_IDENTITY_DB_URL: state.identityDbUrl,\n    DATABASE_URL: state.identityDbUrl,\n    CSS_PORT: state.ports.css !== undefined ? String(state.ports.css) : undefined,\n    API_PORT: state.ports.api !== undefined ? String(state.ports.api) : undefined,\n    API_HOST: state.bindHost,\n    API_SOCKET_PATH: state.sockets.api,\n    XPOD_MAIN_PORT: state.ports.gateway !== undefined ? String(state.ports.gateway) : undefined,\n    CORS_ORIGINS: new URL(state.baseUrl).origin,\n    CSS_LOGGING_LEVEL: state.logLevel,\n  };\n\n  return applyAuthModeEnv(runtimeEnv, state.cssAuthMode);\n}\n\nexport function buildRuntimeShorthand(\n  runtimeEnv: Record<string, string | undefined>,\n  options: XpodRuntimeOptions,\n  state: RuntimeBootstrapState,\n  baseEnv: Record<string, string | undefined> = nodeRuntimePlatform.baseEnv,\n): Record<string, string | number | boolean> {\n  const envValue = (key: string): string | undefined => runtimeEnv[key] ?? baseEnv[key];\n  const externalOidcIssuer = resolveExternalOidcIssuer({\n    oidcIssuer: envValue('oidcIssuer'),\n  });\n\n  return {\n    ...withDefinedEntries([\n      ['baseStorageDomain', envValue('CSS_BASE_STORAGE_DOMAIN')],\n      ['minioAccessKey', envValue('CSS_MINIO_ACCESS_KEY')],\n      ['minioSecretKey', envValue('CSS_MINIO_SECRET_KEY')],\n      ['minioEndpoint', envValue('CSS_MINIO_ENDPOINT')],\n      ['minioBucketName', envValue('CSS_MINIO_BUCKET_NAME')],\n      ['redisClient', envValue('CSS_REDIS_CLIENT')],\n      ['redisUsername', envValue('CSS_REDIS_USERNAME')],\n      ['redisPassword', envValue('CSS_REDIS_PASSWORD')],\n      ['emailConfigHost', envValue('CSS_EMAIL_CONFIG_HOST') ?? ''],\n      ['emailConfigPort', envValue('CSS_EMAIL_CONFIG_PORT') ?? '587'],\n      ['emailConfigAuthUser', envValue('CSS_EMAIL_CONFIG_AUTH_USER') ?? ''],\n      ['emailConfigAuthPass', envValue('CSS_EMAIL_CONFIG_AUTH_PASS') ?? ''],\n      ['oidcIssuer', externalOidcIssuer],\n      ['allowedHosts', envValue('CSS_ALLOWED_HOSTS')],\n      ['nodeId', envValue('XPOD_NODE_ID')],\n      ['nodeToken', envValue('XPOD_NODE_TOKEN')],\n      ['serviceToken', envValue('XPOD_SERVICE_TOKEN')],\n    ]),\n    baseUrl: state.baseUrl,\n    rootFilePath: state.rootFilePath,\n    sparqlEndpoint: state.sparqlEndpoint,\n    rdfIndexPath: state.rdfIndexPath,\n    identityDbUrl: state.identityDbUrl,\n    usageDbUrl: state.usageDbUrl,\n    logLevel: state.logLevel,\n    authMode: state.cssAuthMode,\n    edition: state.mode === 'cloud' ? 'server' : 'local',\n    edgeNodesEnabled: options.edgeNodesEnabled ?? false,\n    centerRegistrationEnabled: options.centerRegistrationEnabled ?? false,\n    ...(options.shorthand ?? {}),\n  };\n}\n\nexport function createCssRuntimeConfig(\n  state: RuntimeBootstrapState,\n  _open?: boolean,\n  platform: Pick<RuntimePlatform, 'dirname' | 'ensureDir' | 'joinPath' | 'readTextFile' | 'writeTextFile'> = nodeRuntimePlatform,\n): string {\n  const configPath = normalizeWindowsAbsolutePath(platform.joinPath(PACKAGE_ROOT, `config/${state.mode}.json`));\n  const runtimeRoot = normalizeWindowsAbsolutePath(state.runtimeRoot);\n  const runtimeConfigPath = arePathsOnDifferentWindowsDrives(runtimeRoot, configPath)\n    ? (() => {\n      const runtimeConfigDir = normalizeWindowsAbsolutePath(platform.joinPath(\n        platform.dirname(configPath),\n        '..',\n        '.xpod-runtime',\n        state.id,\n      ));\n      platform.ensureDir(runtimeConfigDir);\n      return normalizeWindowsAbsolutePath(platform.joinPath(runtimeConfigDir, 'css-runtime.config.json'));\n    })()\n    : normalizeWindowsAbsolutePath(platform.joinPath(runtimeRoot, 'css-runtime.config.json'));\n  const runtimeConfigDir = platform.dirname(runtimeConfigPath);\n  const runtimeConfigImportPath = rewriteConfigForFileUrlImportsIfNeeded(\n    configPath,\n    platform.joinPath(runtimeConfigDir, 'config'),\n    platform,\n  );\n  platform.writeTextFile(runtimeConfigPath, JSON.stringify({\n    '@context': [\n      CSS_COMPONENTS_CONTEXT,\n      ASYNC_HANDLERS_CONTEXT,\n    ],\n    import: [\n      toConfigImportSpecifier(runtimeConfigPath, runtimeConfigImportPath),\n      ...cssAuthModeConfigImports(state.cssAuthMode),\n    ],\n  }, null, 2));\n\n  return runtimeConfigPath;\n}\n\nfunction rewriteConfigForFileUrlImportsIfNeeded(\n  configPath: string,\n  outputDir: string,\n  platform: Pick<RuntimePlatform, 'dirname' | 'ensureDir' | 'joinPath' | 'readTextFile' | 'writeTextFile'>,\n  rewritten = new Map<string, string>(),\n): string {\n  const normalizedConfigPath = normalizeWindowsAbsolutePath(configPath);\n  if (isWindowsAbsolutePath(normalizedConfigPath) || !pathNeedsEscapedFileUrl(normalizedConfigPath)) {\n    return normalizedConfigPath;\n  }\n\n  const existing = rewritten.get(normalizedConfigPath);\n  if (existing) {\n    return existing;\n  }\n\n  platform.ensureDir(outputDir);\n  const outputPath = normalizeWindowsAbsolutePath(platform.joinPath(outputDir, path.posix.basename(normalizedConfigPath)));\n  rewritten.set(normalizedConfigPath, outputPath);\n\n  const parsed = JSON.parse(platform.readTextFile(normalizedConfigPath)) as Record<string, unknown>;\n  parsed.import = rewriteConfigImports(\n    normalizedConfigPath,\n    parsed.import,\n    outputDir,\n    platform,\n    rewritten,\n  );\n  platform.writeTextFile(outputPath, `${JSON.stringify(parsed, null, 2)}\\n`);\n  return outputPath;\n}\n\nfunction rewriteConfigImports(\n  sourceConfigPath: string,\n  imports: unknown,\n  outputDir: string,\n  platform: Pick<RuntimePlatform, 'dirname' | 'ensureDir' | 'joinPath' | 'readTextFile' | 'writeTextFile'>,\n  rewritten: Map<string, string>,\n): unknown {\n  if (typeof imports === 'string') {\n    return rewriteConfigImport(sourceConfigPath, imports, outputDir, platform, rewritten);\n  }\n\n  if (Array.isArray(imports)) {\n    return imports.map((value) => typeof value === 'string'\n      ? rewriteConfigImport(sourceConfigPath, value, outputDir, platform, rewritten)\n      : value);\n  }\n\n  return imports;\n}\n\nfunction rewriteConfigImport(\n  sourceConfigPath: string,\n  importValue: string,\n  outputDir: string,\n  platform: Pick<RuntimePlatform, 'dirname' | 'ensureDir' | 'joinPath' | 'readTextFile' | 'writeTextFile'>,\n  rewritten: Map<string, string>,\n): string {\n  if (!importValue.startsWith('./') && !importValue.startsWith('../')) {\n    return importValue;\n  }\n\n  const targetPath = normalizeWindowsAbsolutePath(\n    path.posix.resolve(platform.dirname(sourceConfigPath), importValue),\n  );\n  const rewrittenTargetPath = rewriteConfigForFileUrlImportsIfNeeded(targetPath, outputDir, platform, rewritten);\n  return pathToFileURL(rewrittenTargetPath).href;\n}\n\nexport function initRuntimeLogger(\n  level: string,\n  platform: Pick<RuntimePlatform, 'cwd' | 'joinPath'> = nodeRuntimePlatform,\n): void {\n  const loggerFactory = new ConfigurableLoggerFactory(level, {\n    fileName: platform.joinPath(platform.cwd(), 'logs/xpod-%DATE%.log'),\n    showLocation: true,\n  });\n  setGlobalLoggerFactory(loggerFactory);\n}\n"]}

package/dist/runtime/css-process.d.ts

@@ -1,3 +1,4 @@
+import type { AuthMode } from '../authorization/AuthMode';
 /**
  * Build the environment for the CSS child process.
  *
@@ -5,11 +6,13 @@
  * The legacy CSS child process path injects it through a generated
  * Components.js config instead of CSS_* env aliases.
  */
-export declare function buildCssChildEnv(baseUrl: string, cssPort: number, oidcIssuer?: string, baseEnv?: NodeJS.ProcessEnv): Record<string, string>;
+export declare function buildCssChildEnv(baseUrl: string, cssPort: number, oidcIssuer?: string, authModeInput?: AuthMode | string, baseEnv?: NodeJS.ProcessEnv): Record<string, string>;
 export declare function createCssChildRuntimeConfig(options: {
     configPath: string;
     runtimeRoot: string;
+    authMode?: AuthMode | string;
     externalOidcIssuer?: string;
+    baseEnv?: NodeJS.ProcessEnv;
 }): {
     configPath: string;
     cwd?: string;
@@ -27,6 +30,8 @@ export declare function buildApiChildEnv(options: {
     mainPort: number;
     cssPort: number;
     baseUrl: string;
+    rdfIndexPath?: string;
+    authMode?: AuthMode | string;
     externalOidcIssuer?: string;
     baseEnv?: NodeJS.ProcessEnv;
 }): Record<string, string>;

package/dist/runtime/css-process.js

@@ -11,6 +11,11 @@ const node_fs_1 = __importDefault(require("node:fs"));
 const node_path_1 = __importDefault(require("node:path"));
 const node_url_1 = require("node:url");
 const oidc_issuer_1 = require("./oidc-issuer");
+const AuthMode_1 = require("../authorization/AuthMode");
+const bootstrap_1 = require("./bootstrap");
+const CSS_COMPONENTS_CONTEXT = 'https://linkedsoftwaredependencies.org/bundles/npm/@solid/community-server/^8.0.0/components/context.jsonld';
+const XPOD_COMPONENTS_CONTEXT = 'https://linkedsoftwaredependencies.org/bundles/npm/@undefineds.co/xpod/^0.0.0/components/context.jsonld';
+const ASYNC_HANDLERS_CONTEXT = 'https://linkedsoftwaredependencies.org/bundles/npm/asynchronous-handlers/^1.0.0/components/context.jsonld';
 /**
  * Build the environment for the CSS child process.
  *
@@ -18,14 +23,16 @@ const oidc_issuer_1 = require("./oidc-issuer");
  * The legacy CSS child process path injects it through a generated
  * Components.js config instead of CSS_* env aliases.
  */
-function buildCssChildEnv(baseUrl, cssPort, oidcIssuer, baseEnv = process.env) {
+function buildCssChildEnv(baseUrl, cssPort, oidcIssuer, authModeInput, baseEnv = process.env) {
+    const authMode = (0, AuthMode_1.resolveAuthModeInput)(authModeInput, baseEnv);
     const env = {
         ...baseEnv,
         CSS_PORT: cssPort.toString(),
         CSS_BASE_URL: baseUrl,
     };
+    (0, AuthMode_1.applyAuthModeEnv)(env, authMode);
     for (const key of Object.keys(env)) {
-        if (key === 'oidcIssuer' || isExternalOidcPollutionKey(key)) {
+        if (key === 'oidcIssuer' || (isExternalOidcPollutionKey(key) && !(0, AuthMode_1.isAuthModeEnvKey)(key))) {
             delete env[key];
         }
     }
@@ -57,14 +64,16 @@ function createCssChildRuntimeConfig(options) {
     node_fs_1.default.mkdirSync(options.runtimeRoot, { recursive: true });
     const runtimeConfigPath = node_path_1.default.join(options.runtimeRoot, 'css-child-runtime.config.json');
     const configImportPath = rewriteConfigForFileUrlImportsIfNeeded(node_path_1.default.resolve(options.configPath), node_path_1.default.join(options.runtimeRoot, 'config'));
+    const authMode = (0, AuthMode_1.resolveAuthModeInput)(options.authMode, options.baseEnv);
     node_fs_1.default.writeFileSync(runtimeConfigPath, JSON.stringify({
         '@context': [
-            'https://linkedsoftwaredependencies.org/bundles/npm/@solid/community-server/^8.0.0/components/context.jsonld',
-            'https://linkedsoftwaredependencies.org/bundles/npm/@undefineds.co/xpod/^0.0.0/components/context.jsonld',
-            'https://linkedsoftwaredependencies.org/bundles/npm/asynchronous-handlers/^1.0.0/components/context.jsonld',
+            CSS_COMPONENTS_CONTEXT,
+            XPOD_COMPONENTS_CONTEXT,
+            ASYNC_HANDLERS_CONTEXT,
         ],
         import: [
             toImportSpecifier(runtimeConfigPath, configImportPath),
+            ...(0, bootstrap_1.cssAuthModeConfigImports)(authMode),
         ],
         '@graph': [],
     }, null, 2), 'utf-8');
@@ -127,16 +136,19 @@ function buildCssArgs(options) {
     ];
 }
 function buildApiChildEnv(options) {
-    return {
+    const authMode = (0, AuthMode_1.resolveAuthModeInput)(options.authMode, options.baseEnv);
+    const env = {
         ...(options.baseEnv ?? process.env),
         ...(options.externalOidcIssuer ? { oidcIssuer: options.externalOidcIssuer } : {}),
         API_PORT: options.apiPort.toString(),
         XPOD_MAIN_PORT: options.mainPort.toString(),
         CSS_INTERNAL_URL: `http://localhost:${options.cssPort}`,
         CSS_BASE_URL: options.baseUrl,
+        ...(options.rdfIndexPath ? { CSS_RDF_INDEX_PATH: options.rdfIndexPath } : {}),
         CSS_TOKEN_ENDPOINT: options.externalOidcIssuer
             ? (0, oidc_issuer_1.oidcTokenEndpoint)(options.externalOidcIssuer)
             : `${options.baseUrl}.oidc/token`,
     };
+    return (0, AuthMode_1.applyAuthModeEnv)(env, authMode);
 }
 //# sourceMappingURL=css-process.js.map

package/dist/runtime/css-process.js.map

@@ -1 +1 @@
-{"version":3,"file":"css-process.js","sourceRoot":"","sources":["../../src/runtime/css-process.ts"],"names":[],"mappings":";;;;;AAYA,4CAmBC;AA4BD,kEAqCC;AA6DD,oCAeC;AAED,4CAmBC;AAjMD,sDAAyB;AACzB,0DAA6B;AAC7B,uCAAyC;AACzC,+CAAkD;AAElD;;;;;;GAMG;AACH,SAAgB,gBAAgB,CAC9B,OAAe,EACf,OAAe,EACf,UAAmB,EACnB,UAA6B,OAAO,CAAC,GAAG;IAExC,MAAM,GAAG,GAA2B;QAClC,GAAG,OAAO;QACV,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE;QAC5B,YAAY,EAAE,OAAO;KACI,CAAC;IAE5B,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACnC,IAAI,GAAG,KAAK,YAAY,IAAI,0BAA0B,CAAC,GAAG,CAAC,EAAE,CAAC;YAC5D,OAAO,GAAG,CAAC,GAAG,CAAC,CAAC;QAClB,CAAC;IACH,CAAC;IAED,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,0BAA0B,CAAC,GAAW;IAC7C,MAAM,UAAU,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;IAC/D,OAAO,UAAU,CAAC,QAAQ,CAAC,YAAY,CAAC;QACtC,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAC7B,UAAU,CAAC,QAAQ,CAAC,YAAY,CAAC;QACjC,UAAU,CAAC,QAAQ,CAAC,qBAAqB,CAAC;QAC1C,UAAU,CAAC,QAAQ,CAAC,yBAAyB,CAAC,CAAC;AACnD,CAAC;AAED,SAAS,iBAAiB,CAAC,YAAoB,EAAE,UAAkB;IACjE,IAAI,uBAAuB,CAAC,YAAY,CAAC,IAAI,uBAAuB,CAAC,UAAU,CAAC,EAAE,CAAC;QACjF,OAAO,IAAA,wBAAa,EAAC,UAAU,CAAC,CAAC,IAAI,CAAC;IACxC,CAAC;IAED,MAAM,aAAa,GAAG,mBAAI,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;IACjD,MAAM,YAAY,GAAG,mBAAI,CAAC,QAAQ,CAAC,aAAa,EAAE,UAAU,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IAClF,IAAI,YAAY,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,YAAY,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;QACpE,OAAO,YAAY,CAAC;IACtB,CAAC;IACD,OAAO,KAAK,YAAY,EAAE,CAAC;AAC7B,CAAC;AAED,SAAS,uBAAuB,CAAC,QAAgB;IAC/C,OAAO,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;AAC7B,CAAC;AAED,SAAgB,2BAA2B,CAAC,OAI3C;IACC,iBAAE,CAAC,SAAS,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACvD,MAAM,iBAAiB,GAAG,mBAAI,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,+BAA+B,CAAC,CAAC;IAC1F,MAAM,gBAAgB,GAAG,sCAAsC,CAC7D,mBAAI,CAAC,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,EAChC,mBAAI,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,QAAQ,CAAC,CACzC,CAAC;IACF,iBAAE,CAAC,aAAa,CAAC,iBAAiB,EAAE,IAAI,CAAC,SAAS,CAAC;QACjD,UAAU,EAAE;YACV,6GAA6G;YAC7G,yGAAyG;YACzG,2GAA2G;SAC5G;QACD,MAAM,EAAE;YACN,iBAAiB,CAAC,iBAAiB,EAAE,gBAAgB,CAAC;SACvD;QACD,QAAQ,EAAE,EAAE;KACb,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;IAEtB,IAAI,OAAO,CAAC,kBAAkB,EAAE,CAAC;QAC/B,iBAAE,CAAC,aAAa,CAAC,mBAAI,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,cAAc,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC;YAC9E,OAAO,EAAE,IAAI;YACb,IAAI,EAAE,kBAAkB;SACzB,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;QACtB,iBAAE,CAAC,aAAa,CAAC,mBAAI,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,qCAAqC,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC;YACrG,UAAU,EAAE,OAAO,CAAC,kBAAkB;SACvC,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;IACxB,CAAC;IAED,OAAO;QACL,UAAU,EAAE,iBAAiB;QAC7B,GAAG,EAAE,OAAO,CAAC,kBAAkB,CAAC,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS;KAClE,CAAC;AACJ,CAAC;AAED,SAAS,sCAAsC,CAC7C,UAAkB,EAClB,SAAiB,EACjB,YAAY,IAAI,GAAG,EAAkB;IAErC,IAAI,CAAC,uBAAuB,CAAC,UAAU,CAAC,EAAE,CAAC;QACzC,OAAO,UAAU,CAAC;IACpB,CAAC;IAED,MAAM,QAAQ,GAAG,SAAS,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IAC3C,IAAI,QAAQ,EAAE,CAAC;QACb,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,iBAAE,CAAC,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7C,MAAM,UAAU,GAAG,mBAAI,CAAC,IAAI,CAAC,SAAS,EAAE,mBAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC;IACnE,SAAS,CAAC,GAAG,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;IAEtC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,iBAAE,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAA4B,CAAC;IAC3F,MAAM,CAAC,MAAM,GAAG,oBAAoB,CAAC,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;IACtF,iBAAE,CAAC,aAAa,CAAC,UAAU,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAE9E,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,SAAS,oBAAoB,CAC3B,gBAAwB,EACxB,OAAgB,EAChB,SAAiB,EACjB,SAA8B;IAE9B,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;QAChC,OAAO,mBAAmB,CAAC,gBAAgB,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;IAC9E,CAAC;IAED,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QAC3B,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ;YACrD,CAAC,CAAC,mBAAmB,CAAC,gBAAgB,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS,CAAC;YACpE,CAAC,CAAC,KAAK,CAAC,CAAC;IACb,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,mBAAmB,CAC1B,gBAAwB,EACxB,WAAmB,EACnB,SAAiB,EACjB,SAA8B;IAE9B,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;QACpE,OAAO,WAAW,CAAC;IACrB,CAAC;IAED,MAAM,UAAU,GAAG,mBAAI,CAAC,OAAO,CAAC,mBAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC,EAAE,WAAW,CAAC,CAAC;IAC7E,MAAM,mBAAmB,GAAG,sCAAsC,CAAC,UAAU,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;IACrG,OAAO,IAAA,wBAAa,EAAC,mBAAmB,CAAC,CAAC,IAAI,CAAC;AACjD,CAAC;AAED,SAAgB,YAAY,CAAC,OAO5B;IACC,OAAO;QACL,OAAO,CAAC,SAAS;QACjB,IAAI,EAAE,OAAO,CAAC,UAAU;QACxB,IAAI,EAAE,OAAO,CAAC,aAAa;QAC3B,IAAI,EAAE,OAAO,CAAC,OAAO,CAAC,QAAQ,EAAE;QAChC,IAAI,EAAE,OAAO,CAAC,OAAO;KACtB,CAAC;AACJ,CAAC;AAED,SAAgB,gBAAgB,CAAC,OAOhC;IACC,OAAO;QACL,GAAG,CAAC,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,GAAG,CAAC;QACnC,GAAG,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,kBAAkB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjF,QAAQ,EAAE,OAAO,CAAC,OAAO,CAAC,QAAQ,EAAE;QACpC,cAAc,EAAE,OAAO,CAAC,QAAQ,CAAC,QAAQ,EAAE;QAC3C,gBAAgB,EAAE,oBAAoB,OAAO,CAAC,OAAO,EAAE;QACvD,YAAY,EAAE,OAAO,CAAC,OAAO;QAC7B,kBAAkB,EAAE,OAAO,CAAC,kBAAkB;YAC5C,CAAC,CAAC,IAAA,+BAAiB,EAAC,OAAO,CAAC,kBAAkB,CAAC;YAC/C,CAAC,CAAC,GAAG,OAAO,CAAC,OAAO,aAAa;KACV,CAAC;AAC9B,CAAC","sourcesContent":["import fs from 'node:fs';\nimport path from 'node:path';\nimport { pathToFileURL } from 'node:url';\nimport { oidcTokenEndpoint } from './oidc-issuer';\n\n/**\n * Build the environment for the CSS child process.\n *\n * `oidcIssuer` is an xpod shorthand value, not a CSS CLI argument.\n * The legacy CSS child process path injects it through a generated\n * Components.js config instead of CSS_* env aliases.\n */\nexport function buildCssChildEnv(\n  baseUrl: string,\n  cssPort: number,\n  oidcIssuer?: string,\n  baseEnv: NodeJS.ProcessEnv = process.env,\n): Record<string, string> {\n  const env: Record<string, string> = {\n    ...baseEnv,\n    CSS_PORT: cssPort.toString(),\n    CSS_BASE_URL: baseUrl,\n  } as Record<string, string>;\n\n  for (const key of Object.keys(env)) {\n    if (key === 'oidcIssuer' || isExternalOidcPollutionKey(key)) {\n      delete env[key];\n    }\n  }\n\n  return env;\n}\n\nfunction isExternalOidcPollutionKey(key: string): boolean {\n  const normalized = key.toUpperCase().replace(/[^A-Z0-9]/g, '');\n  return normalized.includes('OIDCISSUER') ||\n    normalized.includes('IDPURL') ||\n    normalized.includes('IDPJWKSURL') ||\n    normalized.includes('IDENTITYPROVIDERURL') ||\n    normalized.includes('IDENTITYPROVIDERJWKSURL');\n}\n\nfunction toImportSpecifier(fromFilePath: string, toFilePath: string): string {\n  if (pathNeedsEscapedFileUrl(fromFilePath) || pathNeedsEscapedFileUrl(toFilePath)) {\n    return pathToFileURL(toFilePath).href;\n  }\n\n  const fromDirectory = path.dirname(fromFilePath);\n  const relativePath = path.relative(fromDirectory, toFilePath).replace(/\\\\/g, '/');\n  if (relativePath.startsWith('./') || relativePath.startsWith('../')) {\n    return relativePath;\n  }\n  return `./${relativePath}`;\n}\n\nfunction pathNeedsEscapedFileUrl(filePath: string): boolean {\n  return /\\s/.test(filePath);\n}\n\nexport function createCssChildRuntimeConfig(options: {\n  configPath: string\n  runtimeRoot: string\n  externalOidcIssuer?: string\n}): { configPath: string; cwd?: string } {\n  fs.mkdirSync(options.runtimeRoot, { recursive: true });\n  const runtimeConfigPath = path.join(options.runtimeRoot, 'css-child-runtime.config.json');\n  const configImportPath = rewriteConfigForFileUrlImportsIfNeeded(\n    path.resolve(options.configPath),\n    path.join(options.runtimeRoot, 'config'),\n  );\n  fs.writeFileSync(runtimeConfigPath, JSON.stringify({\n    '@context': [\n      'https://linkedsoftwaredependencies.org/bundles/npm/@solid/community-server/^8.0.0/components/context.jsonld',\n      'https://linkedsoftwaredependencies.org/bundles/npm/@undefineds.co/xpod/^0.0.0/components/context.jsonld',\n      'https://linkedsoftwaredependencies.org/bundles/npm/asynchronous-handlers/^1.0.0/components/context.jsonld',\n    ],\n    import: [\n      toImportSpecifier(runtimeConfigPath, configImportPath),\n    ],\n    '@graph': [],\n  }, null, 2), 'utf-8');\n\n  if (options.externalOidcIssuer) {\n    fs.writeFileSync(path.join(options.runtimeRoot, 'package.json'), JSON.stringify({\n      private: true,\n      name: 'xpod-css-runtime',\n    }, null, 2), 'utf-8');\n    fs.writeFileSync(path.join(options.runtimeRoot, '.community-solid-server.config.json'), JSON.stringify({\n      oidcIssuer: options.externalOidcIssuer,\n    }, null, 2), 'utf-8');\n  }\n\n  return {\n    configPath: runtimeConfigPath,\n    cwd: options.externalOidcIssuer ? options.runtimeRoot : undefined,\n  };\n}\n\nfunction rewriteConfigForFileUrlImportsIfNeeded(\n  configPath: string,\n  outputDir: string,\n  rewritten = new Map<string, string>(),\n): string {\n  if (!pathNeedsEscapedFileUrl(configPath)) {\n    return configPath;\n  }\n\n  const existing = rewritten.get(configPath);\n  if (existing) {\n    return existing;\n  }\n\n  fs.mkdirSync(outputDir, { recursive: true });\n  const outputPath = path.join(outputDir, path.basename(configPath));\n  rewritten.set(configPath, outputPath);\n\n  const parsed = JSON.parse(fs.readFileSync(configPath, 'utf-8')) as Record<string, unknown>;\n  parsed.import = rewriteConfigImports(configPath, parsed.import, outputDir, rewritten);\n  fs.writeFileSync(outputPath, `${JSON.stringify(parsed, null, 2)}\\n`, 'utf-8');\n\n  return outputPath;\n}\n\nfunction rewriteConfigImports(\n  sourceConfigPath: string,\n  imports: unknown,\n  outputDir: string,\n  rewritten: Map<string, string>,\n): unknown {\n  if (typeof imports === 'string') {\n    return rewriteConfigImport(sourceConfigPath, imports, outputDir, rewritten);\n  }\n\n  if (Array.isArray(imports)) {\n    return imports.map((value) => typeof value === 'string'\n      ? rewriteConfigImport(sourceConfigPath, value, outputDir, rewritten)\n      : value);\n  }\n\n  return imports;\n}\n\nfunction rewriteConfigImport(\n  sourceConfigPath: string,\n  importValue: string,\n  outputDir: string,\n  rewritten: Map<string, string>,\n): string {\n  if (!importValue.startsWith('./') && !importValue.startsWith('../')) {\n    return importValue;\n  }\n\n  const targetPath = path.resolve(path.dirname(sourceConfigPath), importValue);\n  const rewrittenTargetPath = rewriteConfigForFileUrlImportsIfNeeded(targetPath, outputDir, rewritten);\n  return pathToFileURL(rewrittenTargetPath).href;\n}\n\nexport function buildCssArgs(options: {\n  cssBinary: string\n  configPath: string\n  cssModuleRoot: string\n  cssPort: number\n  baseUrl: string\n  externalOidcIssuer?: string\n}): string[] {\n  return [\n    options.cssBinary,\n    '-c', options.configPath,\n    '-m', options.cssModuleRoot,\n    '-p', options.cssPort.toString(),\n    '-b', options.baseUrl,\n  ];\n}\n\nexport function buildApiChildEnv(options: {\n  apiPort: number\n  mainPort: number\n  cssPort: number\n  baseUrl: string\n  externalOidcIssuer?: string\n  baseEnv?: NodeJS.ProcessEnv\n}): Record<string, string> {\n  return {\n    ...(options.baseEnv ?? process.env),\n    ...(options.externalOidcIssuer ? { oidcIssuer: options.externalOidcIssuer } : {}),\n    API_PORT: options.apiPort.toString(),\n    XPOD_MAIN_PORT: options.mainPort.toString(),\n    CSS_INTERNAL_URL: `http://localhost:${options.cssPort}`,\n    CSS_BASE_URL: options.baseUrl,\n    CSS_TOKEN_ENDPOINT: options.externalOidcIssuer\n      ? oidcTokenEndpoint(options.externalOidcIssuer)\n      : `${options.baseUrl}.oidc/token`,\n  } as Record<string, string>;\n}\n"]}
+{"version":3,"file":"css-process.js","sourceRoot":"","sources":["../../src/runtime/css-process.ts"],"names":[],"mappings":";;;;;AAmBA,4CAsBC;AA4BD,kEAyCC;AA6DD,oCAeC;AAED,4CAyBC;AArND,sDAAyB;AACzB,0DAA6B;AAC7B,uCAAyC;AACzC,+CAAkD;AAElD,wDAAqG;AACrG,2CAAuD;AAEvD,MAAM,sBAAsB,GAAG,6GAA6G,CAAC;AAC7I,MAAM,uBAAuB,GAAG,yGAAyG,CAAC;AAC1I,MAAM,sBAAsB,GAAG,2GAA2G,CAAC;AAE3I;;;;;;GAMG;AACH,SAAgB,gBAAgB,CAC9B,OAAe,EACf,OAAe,EACf,UAAmB,EACnB,aAAiC,EACjC,UAA6B,OAAO,CAAC,GAAG;IAExC,MAAM,QAAQ,GAAG,IAAA,+BAAoB,EAAC,aAAa,EAAE,OAAO,CAAC,CAAC;IAC9D,MAAM,GAAG,GAA2B;QAClC,GAAG,OAAO;QACV,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE;QAC5B,YAAY,EAAE,OAAO;KACI,CAAC;IAC5B,IAAA,2BAAgB,EAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IAEhC,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACnC,IAAI,GAAG,KAAK,YAAY,IAAI,CAAC,0BAA0B,CAAC,GAAG,CAAC,IAAI,CAAC,IAAA,2BAAgB,EAAC,GAAG,CAAC,CAAC,EAAE,CAAC;YACxF,OAAO,GAAG,CAAC,GAAG,CAAC,CAAC;QAClB,CAAC;IACH,CAAC;IAED,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,0BAA0B,CAAC,GAAW;IAC7C,MAAM,UAAU,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;IAC/D,OAAO,UAAU,CAAC,QAAQ,CAAC,YAAY,CAAC;QACtC,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAC7B,UAAU,CAAC,QAAQ,CAAC,YAAY,CAAC;QACjC,UAAU,CAAC,QAAQ,CAAC,qBAAqB,CAAC;QAC1C,UAAU,CAAC,QAAQ,CAAC,yBAAyB,CAAC,CAAC;AACnD,CAAC;AAED,SAAS,iBAAiB,CAAC,YAAoB,EAAE,UAAkB;IACjE,IAAI,uBAAuB,CAAC,YAAY,CAAC,IAAI,uBAAuB,CAAC,UAAU,CAAC,EAAE,CAAC;QACjF,OAAO,IAAA,wBAAa,EAAC,UAAU,CAAC,CAAC,IAAI,CAAC;IACxC,CAAC;IAED,MAAM,aAAa,GAAG,mBAAI,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;IACjD,MAAM,YAAY,GAAG,mBAAI,CAAC,QAAQ,CAAC,aAAa,EAAE,UAAU,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IAClF,IAAI,YAAY,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,YAAY,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;QACpE,OAAO,YAAY,CAAC;IACtB,CAAC;IACD,OAAO,KAAK,YAAY,EAAE,CAAC;AAC7B,CAAC;AAED,SAAS,uBAAuB,CAAC,QAAgB;IAC/C,OAAO,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;AAC7B,CAAC;AAED,SAAgB,2BAA2B,CAAC,OAM3C;IACC,iBAAE,CAAC,SAAS,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACvD,MAAM,iBAAiB,GAAG,mBAAI,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,+BAA+B,CAAC,CAAC;IAC1F,MAAM,gBAAgB,GAAG,sCAAsC,CAC7D,mBAAI,CAAC,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,EAChC,mBAAI,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,QAAQ,CAAC,CACzC,CAAC;IACF,MAAM,QAAQ,GAAG,IAAA,+BAAoB,EAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;IACzE,iBAAE,CAAC,aAAa,CAAC,iBAAiB,EAAE,IAAI,CAAC,SAAS,CAAC;QACjD,UAAU,EAAE;YACV,sBAAsB;YACtB,uBAAuB;YACvB,sBAAsB;SACvB;QACD,MAAM,EAAE;YACN,iBAAiB,CAAC,iBAAiB,EAAE,gBAAgB,CAAC;YACtD,GAAG,IAAA,oCAAwB,EAAC,QAAQ,CAAC;SACtC;QACD,QAAQ,EAAE,EAAE;KACb,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;IAEtB,IAAI,OAAO,CAAC,kBAAkB,EAAE,CAAC;QAC/B,iBAAE,CAAC,aAAa,CAAC,mBAAI,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,cAAc,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC;YAC9E,OAAO,EAAE,IAAI;YACb,IAAI,EAAE,kBAAkB;SACzB,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;QACtB,iBAAE,CAAC,aAAa,CAAC,mBAAI,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,qCAAqC,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC;YACrG,UAAU,EAAE,OAAO,CAAC,kBAAkB;SACvC,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;IACxB,CAAC;IAED,OAAO;QACL,UAAU,EAAE,iBAAiB;QAC7B,GAAG,EAAE,OAAO,CAAC,kBAAkB,CAAC,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS;KAClE,CAAC;AACJ,CAAC;AAED,SAAS,sCAAsC,CAC7C,UAAkB,EAClB,SAAiB,EACjB,YAAY,IAAI,GAAG,EAAkB;IAErC,IAAI,CAAC,uBAAuB,CAAC,UAAU,CAAC,EAAE,CAAC;QACzC,OAAO,UAAU,CAAC;IACpB,CAAC;IAED,MAAM,QAAQ,GAAG,SAAS,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IAC3C,IAAI,QAAQ,EAAE,CAAC;QACb,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,iBAAE,CAAC,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7C,MAAM,UAAU,GAAG,mBAAI,CAAC,IAAI,CAAC,SAAS,EAAE,mBAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC;IACnE,SAAS,CAAC,GAAG,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;IAEtC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,iBAAE,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAA4B,CAAC;IAC3F,MAAM,CAAC,MAAM,GAAG,oBAAoB,CAAC,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;IACtF,iBAAE,CAAC,aAAa,CAAC,UAAU,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAE9E,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,SAAS,oBAAoB,CAC3B,gBAAwB,EACxB,OAAgB,EAChB,SAAiB,EACjB,SAA8B;IAE9B,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;QAChC,OAAO,mBAAmB,CAAC,gBAAgB,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;IAC9E,CAAC;IAED,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QAC3B,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ;YACrD,CAAC,CAAC,mBAAmB,CAAC,gBAAgB,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS,CAAC;YACpE,CAAC,CAAC,KAAK,CAAC,CAAC;IACb,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,mBAAmB,CAC1B,gBAAwB,EACxB,WAAmB,EACnB,SAAiB,EACjB,SAA8B;IAE9B,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;QACpE,OAAO,WAAW,CAAC;IACrB,CAAC;IAED,MAAM,UAAU,GAAG,mBAAI,CAAC,OAAO,CAAC,mBAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC,EAAE,WAAW,CAAC,CAAC;IAC7E,MAAM,mBAAmB,GAAG,sCAAsC,CAAC,UAAU,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;IACrG,OAAO,IAAA,wBAAa,EAAC,mBAAmB,CAAC,CAAC,IAAI,CAAC;AACjD,CAAC;AAED,SAAgB,YAAY,CAAC,OAO5B;IACC,OAAO;QACL,OAAO,CAAC,SAAS;QACjB,IAAI,EAAE,OAAO,CAAC,UAAU;QACxB,IAAI,EAAE,OAAO,CAAC,aAAa;QAC3B,IAAI,EAAE,OAAO,CAAC,OAAO,CAAC,QAAQ,EAAE;QAChC,IAAI,EAAE,OAAO,CAAC,OAAO;KACtB,CAAC;AACJ,CAAC;AAED,SAAgB,gBAAgB,CAAC,OAShC;IACC,MAAM,QAAQ,GAAG,IAAA,+BAAoB,EAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;IACzE,MAAM,GAAG,GAAG;QACV,GAAG,CAAC,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,GAAG,CAAC;QACnC,GAAG,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,kBAAkB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjF,QAAQ,EAAE,OAAO,CAAC,OAAO,CAAC,QAAQ,EAAE;QACpC,cAAc,EAAE,OAAO,CAAC,QAAQ,CAAC,QAAQ,EAAE;QAC3C,gBAAgB,EAAE,oBAAoB,OAAO,CAAC,OAAO,EAAE;QACvD,YAAY,EAAE,OAAO,CAAC,OAAO;QAC7B,GAAG,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,kBAAkB,EAAE,OAAO,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7E,kBAAkB,EAAE,OAAO,CAAC,kBAAkB;YAC5C,CAAC,CAAC,IAAA,+BAAiB,EAAC,OAAO,CAAC,kBAAkB,CAAC;YAC/C,CAAC,CAAC,GAAG,OAAO,CAAC,OAAO,aAAa;KACV,CAAC;IAE5B,OAAO,IAAA,2BAAgB,EAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;AACzC,CAAC","sourcesContent":["import fs from 'node:fs';\nimport path from 'node:path';\nimport { pathToFileURL } from 'node:url';\nimport { oidcTokenEndpoint } from './oidc-issuer';\nimport type { AuthMode } from '../authorization/AuthMode';\nimport { applyAuthModeEnv, isAuthModeEnvKey, resolveAuthModeInput } from '../authorization/AuthMode';\nimport { cssAuthModeConfigImports } from './bootstrap';\n\nconst CSS_COMPONENTS_CONTEXT = 'https://linkedsoftwaredependencies.org/bundles/npm/@solid/community-server/^8.0.0/components/context.jsonld';\nconst XPOD_COMPONENTS_CONTEXT = 'https://linkedsoftwaredependencies.org/bundles/npm/@undefineds.co/xpod/^0.0.0/components/context.jsonld';\nconst ASYNC_HANDLERS_CONTEXT = 'https://linkedsoftwaredependencies.org/bundles/npm/asynchronous-handlers/^1.0.0/components/context.jsonld';\n\n/**\n * Build the environment for the CSS child process.\n *\n * `oidcIssuer` is an xpod shorthand value, not a CSS CLI argument.\n * The legacy CSS child process path injects it through a generated\n * Components.js config instead of CSS_* env aliases.\n */\nexport function buildCssChildEnv(\n  baseUrl: string,\n  cssPort: number,\n  oidcIssuer?: string,\n  authModeInput?: AuthMode | string,\n  baseEnv: NodeJS.ProcessEnv = process.env,\n): Record<string, string> {\n  const authMode = resolveAuthModeInput(authModeInput, baseEnv);\n  const env: Record<string, string> = {\n    ...baseEnv,\n    CSS_PORT: cssPort.toString(),\n    CSS_BASE_URL: baseUrl,\n  } as Record<string, string>;\n  applyAuthModeEnv(env, authMode);\n\n  for (const key of Object.keys(env)) {\n    if (key === 'oidcIssuer' || (isExternalOidcPollutionKey(key) && !isAuthModeEnvKey(key))) {\n      delete env[key];\n    }\n  }\n\n  return env;\n}\n\nfunction isExternalOidcPollutionKey(key: string): boolean {\n  const normalized = key.toUpperCase().replace(/[^A-Z0-9]/g, '');\n  return normalized.includes('OIDCISSUER') ||\n    normalized.includes('IDPURL') ||\n    normalized.includes('IDPJWKSURL') ||\n    normalized.includes('IDENTITYPROVIDERURL') ||\n    normalized.includes('IDENTITYPROVIDERJWKSURL');\n}\n\nfunction toImportSpecifier(fromFilePath: string, toFilePath: string): string {\n  if (pathNeedsEscapedFileUrl(fromFilePath) || pathNeedsEscapedFileUrl(toFilePath)) {\n    return pathToFileURL(toFilePath).href;\n  }\n\n  const fromDirectory = path.dirname(fromFilePath);\n  const relativePath = path.relative(fromDirectory, toFilePath).replace(/\\\\/g, '/');\n  if (relativePath.startsWith('./') || relativePath.startsWith('../')) {\n    return relativePath;\n  }\n  return `./${relativePath}`;\n}\n\nfunction pathNeedsEscapedFileUrl(filePath: string): boolean {\n  return /\\s/.test(filePath);\n}\n\nexport function createCssChildRuntimeConfig(options: {\n  configPath: string\n  runtimeRoot: string\n  authMode?: AuthMode | string\n  externalOidcIssuer?: string\n  baseEnv?: NodeJS.ProcessEnv\n}): { configPath: string; cwd?: string } {\n  fs.mkdirSync(options.runtimeRoot, { recursive: true });\n  const runtimeConfigPath = path.join(options.runtimeRoot, 'css-child-runtime.config.json');\n  const configImportPath = rewriteConfigForFileUrlImportsIfNeeded(\n    path.resolve(options.configPath),\n    path.join(options.runtimeRoot, 'config'),\n  );\n  const authMode = resolveAuthModeInput(options.authMode, options.baseEnv);\n  fs.writeFileSync(runtimeConfigPath, JSON.stringify({\n    '@context': [\n      CSS_COMPONENTS_CONTEXT,\n      XPOD_COMPONENTS_CONTEXT,\n      ASYNC_HANDLERS_CONTEXT,\n    ],\n    import: [\n      toImportSpecifier(runtimeConfigPath, configImportPath),\n      ...cssAuthModeConfigImports(authMode),\n    ],\n    '@graph': [],\n  }, null, 2), 'utf-8');\n\n  if (options.externalOidcIssuer) {\n    fs.writeFileSync(path.join(options.runtimeRoot, 'package.json'), JSON.stringify({\n      private: true,\n      name: 'xpod-css-runtime',\n    }, null, 2), 'utf-8');\n    fs.writeFileSync(path.join(options.runtimeRoot, '.community-solid-server.config.json'), JSON.stringify({\n      oidcIssuer: options.externalOidcIssuer,\n    }, null, 2), 'utf-8');\n  }\n\n  return {\n    configPath: runtimeConfigPath,\n    cwd: options.externalOidcIssuer ? options.runtimeRoot : undefined,\n  };\n}\n\nfunction rewriteConfigForFileUrlImportsIfNeeded(\n  configPath: string,\n  outputDir: string,\n  rewritten = new Map<string, string>(),\n): string {\n  if (!pathNeedsEscapedFileUrl(configPath)) {\n    return configPath;\n  }\n\n  const existing = rewritten.get(configPath);\n  if (existing) {\n    return existing;\n  }\n\n  fs.mkdirSync(outputDir, { recursive: true });\n  const outputPath = path.join(outputDir, path.basename(configPath));\n  rewritten.set(configPath, outputPath);\n\n  const parsed = JSON.parse(fs.readFileSync(configPath, 'utf-8')) as Record<string, unknown>;\n  parsed.import = rewriteConfigImports(configPath, parsed.import, outputDir, rewritten);\n  fs.writeFileSync(outputPath, `${JSON.stringify(parsed, null, 2)}\\n`, 'utf-8');\n\n  return outputPath;\n}\n\nfunction rewriteConfigImports(\n  sourceConfigPath: string,\n  imports: unknown,\n  outputDir: string,\n  rewritten: Map<string, string>,\n): unknown {\n  if (typeof imports === 'string') {\n    return rewriteConfigImport(sourceConfigPath, imports, outputDir, rewritten);\n  }\n\n  if (Array.isArray(imports)) {\n    return imports.map((value) => typeof value === 'string'\n      ? rewriteConfigImport(sourceConfigPath, value, outputDir, rewritten)\n      : value);\n  }\n\n  return imports;\n}\n\nfunction rewriteConfigImport(\n  sourceConfigPath: string,\n  importValue: string,\n  outputDir: string,\n  rewritten: Map<string, string>,\n): string {\n  if (!importValue.startsWith('./') && !importValue.startsWith('../')) {\n    return importValue;\n  }\n\n  const targetPath = path.resolve(path.dirname(sourceConfigPath), importValue);\n  const rewrittenTargetPath = rewriteConfigForFileUrlImportsIfNeeded(targetPath, outputDir, rewritten);\n  return pathToFileURL(rewrittenTargetPath).href;\n}\n\nexport function buildCssArgs(options: {\n  cssBinary: string\n  configPath: string\n  cssModuleRoot: string\n  cssPort: number\n  baseUrl: string\n  externalOidcIssuer?: string\n}): string[] {\n  return [\n    options.cssBinary,\n    '-c', options.configPath,\n    '-m', options.cssModuleRoot,\n    '-p', options.cssPort.toString(),\n    '-b', options.baseUrl,\n  ];\n}\n\nexport function buildApiChildEnv(options: {\n  apiPort: number\n  mainPort: number\n  cssPort: number\n  baseUrl: string\n  rdfIndexPath?: string\n  authMode?: AuthMode | string\n  externalOidcIssuer?: string\n  baseEnv?: NodeJS.ProcessEnv\n}): Record<string, string> {\n  const authMode = resolveAuthModeInput(options.authMode, options.baseEnv);\n  const env = {\n    ...(options.baseEnv ?? process.env),\n    ...(options.externalOidcIssuer ? { oidcIssuer: options.externalOidcIssuer } : {}),\n    API_PORT: options.apiPort.toString(),\n    XPOD_MAIN_PORT: options.mainPort.toString(),\n    CSS_INTERNAL_URL: `http://localhost:${options.cssPort}`,\n    CSS_BASE_URL: options.baseUrl,\n    ...(options.rdfIndexPath ? { CSS_RDF_INDEX_PATH: options.rdfIndexPath } : {}),\n    CSS_TOKEN_ENDPOINT: options.externalOidcIssuer\n      ? oidcTokenEndpoint(options.externalOidcIssuer)\n      : `${options.baseUrl}.oidc/token`,\n  } as Record<string, string>;\n\n  return applyAuthModeEnv(env, authMode);\n}\n"]}