@undefineds.co/xpod 0.3.58 → 0.3.62

package/dist/cli/commands/start.js.map

@@ -1 +1 @@
-{"version":3,"file":"start.js","sourceRoot":"","sources":["../../../src/cli/commands/start.ts"],"names":[],"mappings":";;;;;;AACA,gDAAwB;AACxB,4CAAoB;AACpB,iDAA8C;AAC9C,2CAAwE;AACxE,2DAA0H;AAC1H,2DAAsE;AACtE,2DAAsE;AAWtE,MAAM,cAAc,GAAG,OAAQ,UAAgC,CAAC,GAAG,KAAK,WAAW;IACjF,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,MAAM,CAAC;IAC1C,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;AAErB,SAAS,WAAW,CAAC,OAAe;IAClC,IAAI,CAAC,YAAE,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QAC5B,OAAO,CAAC,IAAI,CAAC,uBAAuB,OAAO,EAAE,CAAC,CAAC;QAC/C,OAAO;IACT,CAAC;IACD,MAAM,OAAO,GAAG,YAAE,CAAC,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAClD,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACvC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAC5B,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAS;QAClD,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACrC,IAAI,OAAO,KAAK,CAAC,CAAC;YAAE,SAAS;QAC7B,MAAM,GAAG,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;QAC7C,IAAI,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAC9C,IACE,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;YAC9C,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,EAC9C,CAAC;YACD,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAC7B,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YACtB,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QAC3B,CAAC;IACH,CAAC;AACH,CAAC;AAEY,QAAA,YAAY,GAAqC;IAC5D,OAAO,EAAE,OAAO;IAChB,QAAQ,EAAE,qBAAqB;IAC/B,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,CACjB,KAAK;SACF,MAAM,CAAC,MAAM,EAAE;QACd,KAAK,EAAE,GAAG;QACV,IAAI,EAAE,QAAQ;QACd,OAAO,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC;QAC3B,WAAW,EAAE,UAAU;KACxB,CAAC;SACD,MAAM,CAAC,QAAQ,EAAE;QAChB,KAAK,EAAE,GAAG;QACV,IAAI,EAAE,QAAQ;QACd,WAAW,EAAE,wCAAwC;KACtD,CAAC;SACD,MAAM,CAAC,KAAK,EAAE;QACb,KAAK,EAAE,GAAG;QACV,IAAI,EAAE,QAAQ;QACd,WAAW,EAAE,mBAAmB;KACjC,CAAC;SACD,MAAM,CAAC,MAAM,EAAE;QACd,KAAK,EAAE,GAAG;QACV,IAAI,EAAE,QAAQ;QACd,WAAW,EAAE,cAAc;QAC3B,OAAO,EAAE,IAAI;KACd,CAAC;SACD,MAAM,CAAC,MAAM,EAAE;QACd,IAAI,EAAE,QAAQ;QACd,WAAW,EAAE,cAAc;QAC3B,OAAO,EAAE,WAAW;KACrB,CAAC;SACD,MAAM,CAAC,YAAY,EAAE;QACpB,IAAI,EAAE,SAAS;QACf,OAAO,EAAE,IAAI;QACb,WAAW,EAAE,uBAAuB;KACrC,CAAC;IACN,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;QACtB,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;YACb,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACxB,CAAC;QAED,MAAM,QAAQ,GACZ,IAAI,CAAC,IAAI,KAAK,IAAI;YAChB,CAAC,CAAC,IAAI,CAAC,IAAI;YACX,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,MAAM,EAAE,EAAE,CAAC,CAAC;QAExE,IAAI,UAAkB,CAAC;QACvB,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChB,UAAU,GAAG,IAAI,CAAC,MAAM,CAAC;QAC3B,CAAC;aAAM,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YACrB,UAAU,GAAG,cAAI,CAAC,IAAI,CAAC,sBAAY,EAAE,UAAU,IAAI,CAAC,IAAI,OAAO,CAAC,CAAC;QACnE,CAAC;aAAM,CAAC;YACN,UAAU,GAAG,cAAI,CAAC,IAAI,CAAC,sBAAY,EAAE,mBAAmB,CAAC,CAAC;QAC5D,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,IAAA,qBAAW,EAAC,QAAQ,GAAG,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QAC3D,MAAM,OAAO,GAAG,MAAM,IAAA,qBAAW,EAAC,OAAO,GAAG,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QAC1D,MAAM,WAAW,GAAG,cAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,0BAA0B,CAAC,CAAC;QAEzE,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,UAAU,IAAI,CAAC,IAAI,IAAI,QAAQ,GAAG,CAAC;QAC/E,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,kBAAkB,IAAI,cAAI,CAAC,IAAI,CAAC,WAAW,EAAE,kBAAkB,CAAC,CAAC;QAClG,OAAO,CAAC,GAAG,CAAC,kBAAkB,GAAG,YAAY,CAAC;QAE9C,yDAAyD;QACzD,MAAM,kBAAkB,GAAG,IAAA,uCAAyB,EAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAClE,MAAM,QAAQ,GAAG,IAAA,iCAAsB,EAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAErD,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;QAChC,OAAO,CAAC,GAAG,CAAC,cAAc,OAAO,KAAK,IAAI,CAAC,IAAI,IAAI,QAAQ,GAAG,CAAC,CAAC;QAChE,OAAO,CAAC,GAAG,CAAC,sCAAsC,OAAO,EAAE,CAAC,CAAC;QAC7D,OAAO,CAAC,GAAG,CAAC,sCAAsC,OAAO,EAAE,CAAC,CAAC;QAC7D,IAAI,kBAAkB,EAAE,CAAC;YACvB,OAAO,CAAC,GAAG,CAAC,0BAA0B,kBAAkB,EAAE,CAAC,CAAC;QAC9D,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,yBAAyB,QAAQ,EAAE,CAAC,CAAC;QAEjD,MAAM,UAAU,GAAG,IAAI,uBAAU,EAAE,CAAC;QACpC,MAAM,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC,uCAAuC,CAAC,CAAC;QAC3E,MAAM,gBAAgB,GAAG,IAAA,yCAA2B,EAAC;YACnD,UAAU;YACV,WAAW;YACX,QAAQ;YACR,kBAAkB;SACnB,CAAC,CAAC;QACH,MAAM,OAAO,GAAG,IAAA,0BAAY,EAAC;YAC3B,SAAS;YACT,UAAU,EAAE,gBAAgB,CAAC,UAAU;YACvC,aAAa,EAAE,sBAAY;YAC3B,OAAO;YACP,OAAO;YACP,kBAAkB;SACnB,CAAC,CAAC;QAEH,UAAU,CAAC,QAAQ,CAAC;YAClB,IAAI,EAAE,KAAK;YACX,OAAO,EAAE,cAAc;YACvB,IAAI,EAAE,OAAO;YACb,GAAG,EAAE,gBAAgB,CAAC,GAAG;YACzB,GAAG,EAAE,IAAA,8BAAgB,EAAC,OAAO,EAAE,OAAO,EAAE,kBAAkB,EAAE,QAAQ,CAAC;SACtE,CAAC,CAAC;QAEH,MAAM,SAAS,GAAG,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC7C,MAAM,OAAO,GAAG,SAAS;YACvB,CAAC,CAAC;gBACE,IAAI;gBACJ,OAAO,CAAC,OAAO,CAAC,iCAAiC,CAAC;gBAClD,cAAI,CAAC,OAAO,CAAC,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,CAAC;aACtD;YACH,CAAC,CAAC,CAAC,cAAI,CAAC,OAAO,CAAC,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC;QAE5D,UAAU,CAAC,QAAQ,CAAC;YAClB,IAAI,EAAE,KAAK;YACX,OAAO,EAAE,cAAc;YACvB,IAAI,EAAE,OAAO;YACb,GAAG,EAAE,IAAA,8BAAgB,EAAC;gBACpB,OAAO;gBACP,QAAQ;gBACR,OAAO;gBACP,OAAO;gBACP,YAAY;gBACZ,QAAQ;gBACR,kBAAkB;aACnB,CAAC;SACH,CAAC,CAAC;QAEH,MAAM,KAAK,GAAG,IAAI,sBAAY,CAAC,QAAQ,EAAE,UAAU,EAAE,SAAS,EAAE;YAC9D,UAAU,EAAE,IAAI;YAChB,OAAO;SACR,CAAC,CAAC;QACH,KAAK,CAAC,UAAU,CAAC;YACf,GAAG,EAAE,oBAAoB,OAAO,EAAE;YAClC,GAAG,EAAE,oBAAoB,OAAO,EAAE;SACnC,CAAC,CAAC;QAEH,MAAM,UAAU,CAAC,QAAQ,EAAE,CAAC;QAC5B,MAAM,KAAK,CAAC,KAAK,EAAE,CAAC;QAEpB,MAAM,QAAQ,GAAG,KAAK,EAAE,MAAc,EAAiB,EAAE;YACvD,OAAO,CAAC,GAAG,CAAC,cAAc,MAAM,oBAAoB,CAAC,CAAC;YACtD,MAAM,UAAU,CAAC,OAAO,EAAE,CAAC;YAC3B,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC,CAAC;QAEF,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC;QACjD,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;IACjD,CAAC;CACF,CAAC","sourcesContent":["import type { CommandModule } from 'yargs';\nimport path from 'path';\nimport fs from 'fs';\nimport { Supervisor } from '../../supervisor';\nimport { GatewayProxy, getFreePort, PACKAGE_ROOT } from '../../runtime';\nimport { buildApiChildEnv, buildCssArgs, buildCssChildEnv, createCssChildRuntimeConfig } from '../../runtime/css-process';\nimport { resolveExternalOidcIssuer } from '../../runtime/oidc-issuer';\nimport { resolveAuthModeFromEnv } from '../../authorization/AuthMode';\n\ninterface StartArgs {\n  mode?: string;\n  config?: string;\n  env?: string;\n  port: number;\n  host: string;\n  foreground?: boolean;\n}\n\nconst childJsRuntime = typeof (globalThis as { Bun?: unknown }).Bun !== 'undefined'\n  ? (process.env.XPOD_NODE_BINARY ?? 'node')\n  : process.execPath;\n\nfunction loadEnvFile(envPath: string): void {\n  if (!fs.existsSync(envPath)) {\n    console.warn(`Env file not found: ${envPath}`);\n    return;\n  }\n  const content = fs.readFileSync(envPath, 'utf-8');\n  for (const line of content.split('\\n')) {\n    const trimmed = line.trim();\n    if (!trimmed || trimmed.startsWith('#')) continue;\n    const eqIndex = trimmed.indexOf('=');\n    if (eqIndex === -1) continue;\n    const key = trimmed.slice(0, eqIndex).trim();\n    let value = trimmed.slice(eqIndex + 1).trim();\n    if (\n      (value.startsWith('\"') && value.endsWith('\"')) ||\n      (value.startsWith(\"'\") && value.endsWith(\"'\"))\n    ) {\n      value = value.slice(1, -1);\n    }\n    if (!process.env[key]) {\n      process.env[key] = value;\n    }\n  }\n}\n\nexport const startCommand: CommandModule<object, StartArgs> = {\n  command: 'start',\n  describe: 'Start xpod services',\n  builder: (yargs) =>\n    yargs\n      .option('mode', {\n        alias: 'm',\n        type: 'string',\n        choices: ['local', 'cloud'],\n        description: 'Run mode',\n      })\n      .option('config', {\n        alias: 'c',\n        type: 'string',\n        description: 'Path to config file (overrides --mode)',\n      })\n      .option('env', {\n        alias: 'e',\n        type: 'string',\n        description: 'Path to .env file',\n      })\n      .option('port', {\n        alias: 'p',\n        type: 'number',\n        description: 'Gateway port',\n        default: 3000,\n      })\n      .option('host', {\n        type: 'string',\n        description: 'Gateway host',\n        default: 'localhost',\n      })\n      .option('foreground', {\n        type: 'boolean',\n        default: true,\n        description: 'Run in the foreground',\n      }),\n  handler: async (argv) => {\n    if (argv.env) {\n      loadEnvFile(argv.env);\n    }\n\n    const mainPort =\n      argv.port !== 3000\n        ? argv.port\n        : parseInt(process.env.XPOD_PORT ?? process.env.PORT ?? '3000', 10);\n\n    let configPath: string;\n    if (argv.config) {\n      configPath = argv.config;\n    } else if (argv.mode) {\n      configPath = path.join(PACKAGE_ROOT, `config/${argv.mode}.json`);\n    } else {\n      configPath = path.join(PACKAGE_ROOT, 'config/local.json');\n    }\n\n    const cssPort = await getFreePort(mainPort + 1, argv.host);\n    const apiPort = await getFreePort(cssPort + 1, argv.host);\n    const runtimeRoot = path.join(process.cwd(), '.xpod/runtime/legacy-css');\n\n    const baseUrl = process.env.CSS_BASE_URL || `http://${argv.host}:${mainPort}/`;\n    const rdfIndexPath = process.env.CSS_RDF_INDEX_PATH || path.join(runtimeRoot, 'rdf-index.sqlite');\n    process.env.CSS_RDF_INDEX_PATH = rdfIndexPath;\n\n    // SP 模式：oidcIssuer 显式指定外部 IdP；Cloud API 地址不再隐式当作 issuer。\n    const externalOidcIssuer = resolveExternalOidcIssuer(process.env);\n    const authMode = resolveAuthModeFromEnv(process.env);\n\n    console.log('Starting xpod...');\n    console.log(`  Gateway: ${baseUrl} (${argv.host}:${mainPort})`);\n    console.log(`  CSS (internal): http://localhost:${cssPort}`);\n    console.log(`  API (internal): http://localhost:${apiPort}`);\n    if (externalOidcIssuer) {\n      console.log(`  SP mode: Cloud IdP = ${externalOidcIssuer}`);\n    }\n    console.log(`  Authorization mode: ${authMode}`);\n\n    const supervisor = new Supervisor();\n    const cssBinary = require.resolve('@solid/community-server/bin/server.js');\n    const cssRuntimeConfig = createCssChildRuntimeConfig({\n      configPath,\n      runtimeRoot,\n      authMode,\n      externalOidcIssuer,\n    });\n    const cssArgs = buildCssArgs({\n      cssBinary,\n      configPath: cssRuntimeConfig.configPath,\n      cssModuleRoot: PACKAGE_ROOT,\n      cssPort,\n      baseUrl,\n      externalOidcIssuer,\n    });\n\n    supervisor.register({\n      name: 'css',\n      command: childJsRuntime,\n      args: cssArgs,\n      cwd: cssRuntimeConfig.cwd,\n      env: buildCssChildEnv(baseUrl, cssPort, externalOidcIssuer, authMode),\n    });\n\n    const isDevMode = __filename.endsWith('.ts');\n    const apiArgs = isDevMode\n      ? [\n          '-r',\n          require.resolve('ts-node/register/transpile-only'),\n          path.resolve(__dirname, '..', '..', 'api', 'main.ts'),\n        ]\n      : [path.resolve(__dirname, '..', '..', 'api', 'main.js')];\n\n    supervisor.register({\n      name: 'api',\n      command: childJsRuntime,\n      args: apiArgs,\n      env: buildApiChildEnv({\n        apiPort,\n        mainPort,\n        cssPort,\n        baseUrl,\n        rdfIndexPath,\n        authMode,\n        externalOidcIssuer,\n      }),\n    });\n\n    const proxy = new GatewayProxy(mainPort, supervisor, '0.0.0.0', {\n      exitOnStop: true,\n      baseUrl,\n    });\n    proxy.setTargets({\n      css: `http://localhost:${cssPort}`,\n      api: `http://localhost:${apiPort}`,\n    });\n\n    await supervisor.startAll();\n    await proxy.start();\n\n    const shutdown = async (signal: string): Promise<void> => {\n      console.log(`\\nReceived ${signal}, shutting down...`);\n      await supervisor.stopAll();\n      process.exit(0);\n    };\n\n    process.on('SIGTERM', () => shutdown('SIGTERM'));\n    process.on('SIGINT', () => shutdown('SIGINT'));\n  },\n};\n"]}
+{"version":3,"file":"start.js","sourceRoot":"","sources":["../../../src/cli/commands/start.ts"],"names":[],"mappings":";;;;;;AACA,gDAAwB;AACxB,4CAAoB;AACpB,iDAA8C;AAC9C,2CAA2G;AAC3G,2DAKmC;AACnC,2DAAsE;AACtE,2DAAsE;AAWtE,MAAM,cAAc,GAAG,OAAQ,UAAgC,CAAC,GAAG,KAAK,WAAW;IACjF,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,MAAM,CAAC;IAC1C,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;AAErB,SAAS,WAAW,CAAC,OAAe;IAClC,IAAI,CAAC,YAAE,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QAC5B,OAAO,CAAC,IAAI,CAAC,uBAAuB,OAAO,EAAE,CAAC,CAAC;QAC/C,OAAO;IACT,CAAC;IACD,MAAM,OAAO,GAAG,YAAE,CAAC,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAClD,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACvC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAC5B,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAS;QAClD,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACrC,IAAI,OAAO,KAAK,CAAC,CAAC;YAAE,SAAS;QAC7B,MAAM,GAAG,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;QAC7C,IAAI,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAC9C,IACE,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;YAC9C,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,EAC9C,CAAC;YACD,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAC7B,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YACtB,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QAC3B,CAAC;IACH,CAAC;AACH,CAAC;AAEY,QAAA,YAAY,GAAqC;IAC5D,OAAO,EAAE,OAAO;IAChB,QAAQ,EAAE,qBAAqB;IAC/B,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,CACjB,KAAK;SACF,MAAM,CAAC,MAAM,EAAE;QACd,KAAK,EAAE,GAAG;QACV,IAAI,EAAE,QAAQ;QACd,OAAO,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC;QAC3B,WAAW,EAAE,UAAU;KACxB,CAAC;SACD,MAAM,CAAC,QAAQ,EAAE;QAChB,KAAK,EAAE,GAAG;QACV,IAAI,EAAE,QAAQ;QACd,WAAW,EAAE,wCAAwC;KACtD,CAAC;SACD,MAAM,CAAC,KAAK,EAAE;QACb,KAAK,EAAE,GAAG;QACV,IAAI,EAAE,QAAQ;QACd,WAAW,EAAE,mBAAmB;KACjC,CAAC;SACD,MAAM,CAAC,MAAM,EAAE;QACd,KAAK,EAAE,GAAG;QACV,IAAI,EAAE,QAAQ;QACd,WAAW,EAAE,cAAc;QAC3B,OAAO,EAAE,IAAI;KACd,CAAC;SACD,MAAM,CAAC,MAAM,EAAE;QACd,IAAI,EAAE,QAAQ;QACd,WAAW,EAAE,cAAc;QAC3B,OAAO,EAAE,WAAW;KACrB,CAAC;SACD,MAAM,CAAC,YAAY,EAAE;QACpB,IAAI,EAAE,SAAS;QACf,OAAO,EAAE,IAAI;QACb,WAAW,EAAE,uBAAuB;KACrC,CAAC;IACN,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;QACtB,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;YACb,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACxB,CAAC;QAED,MAAM,QAAQ,GACZ,IAAI,CAAC,IAAI,KAAK,IAAI;YAChB,CAAC,CAAC,IAAI,CAAC,IAAI;YACX,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,MAAM,EAAE,EAAE,CAAC,CAAC;QAExE,IAAI,UAAkB,CAAC;QACvB,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChB,UAAU,GAAG,IAAI,CAAC,MAAM,CAAC;QAC3B,CAAC;aAAM,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YACrB,UAAU,GAAG,cAAI,CAAC,IAAI,CAAC,sBAAY,EAAE,UAAU,IAAI,CAAC,IAAI,OAAO,CAAC,CAAC;QACnE,CAAC;aAAM,CAAC;YACN,UAAU,GAAG,cAAI,CAAC,IAAI,CAAC,sBAAY,EAAE,mBAAmB,CAAC,CAAC;QAC5D,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,IAAA,qBAAW,EAAC,QAAQ,GAAG,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QAC3D,MAAM,OAAO,GAAG,MAAM,IAAA,qBAAW,EAAC,OAAO,GAAG,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QAC1D,MAAM,WAAW,GAAG,cAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,0BAA0B,CAAC,CAAC;QAEzE,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,UAAU,IAAI,CAAC,IAAI,IAAI,QAAQ,GAAG,CAAC;QAC/E,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,kBAAkB,IAAI,cAAI,CAAC,IAAI,CAAC,WAAW,EAAE,kBAAkB,CAAC,CAAC;QAClG,OAAO,CAAC,GAAG,CAAC,kBAAkB,GAAG,YAAY,CAAC;QAE9C,yDAAyD;QACzD,MAAM,kBAAkB,GAAG,IAAA,uCAAyB,EAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAClE,MAAM,QAAQ,GAAG,IAAA,iCAAsB,EAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAErD,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;QAChC,OAAO,CAAC,GAAG,CAAC,cAAc,OAAO,KAAK,IAAI,CAAC,IAAI,IAAI,QAAQ,GAAG,CAAC,CAAC;QAChE,OAAO,CAAC,GAAG,CAAC,sCAAsC,OAAO,EAAE,CAAC,CAAC;QAC7D,OAAO,CAAC,GAAG,CAAC,sCAAsC,OAAO,EAAE,CAAC,CAAC;QAC7D,IAAI,kBAAkB,EAAE,CAAC;YACvB,OAAO,CAAC,GAAG,CAAC,0BAA0B,kBAAkB,EAAE,CAAC,CAAC;QAC9D,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,yBAAyB,QAAQ,EAAE,CAAC,CAAC;QAEjD,MAAM,UAAU,GAAG,IAAI,uBAAU,EAAE,CAAC;QACpC,MAAM,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC,uCAAuC,CAAC,CAAC;QAC3E,MAAM,gBAAgB,GAAG,IAAA,yCAA2B,EAAC;YACnD,UAAU;YACV,WAAW;YACX,QAAQ;YACR,kBAAkB;SACnB,CAAC,CAAC;QACH,MAAM,OAAO,GAAG,IAAA,0BAAY,EAAC;YAC3B,SAAS;YACT,UAAU,EAAE,gBAAgB,CAAC,UAAU;YACvC,aAAa,EAAE,sBAAY;YAC3B,OAAO;YACP,OAAO;YACP,kBAAkB;SACnB,CAAC,CAAC;QAEH,UAAU,CAAC,QAAQ,CAAC;YAClB,IAAI,EAAE,KAAK;YACX,OAAO,EAAE,cAAc;YACvB,IAAI,EAAE,OAAO;YACb,GAAG,EAAE,gBAAgB,CAAC,GAAG;YACzB,GAAG,EAAE,IAAA,8BAAgB,EAAC,OAAO,EAAE,OAAO,EAAE,kBAAkB,EAAE,QAAQ,CAAC;SACtE,CAAC,CAAC;QAEH,MAAM,SAAS,GAAG,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC7C,MAAM,OAAO,GAAG,SAAS;YACvB,CAAC,CAAC;gBACE,IAAI;gBACJ,OAAO,CAAC,OAAO,CAAC,iCAAiC,CAAC;gBAClD,cAAI,CAAC,OAAO,CAAC,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,CAAC;aACtD;YACH,CAAC,CAAC,CAAC,cAAI,CAAC,OAAO,CAAC,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC;QAE5D,MAAM,2BAA2B,GAAG,IAAA,2CAAiC,GAAE,CAAC;QAExE,UAAU,CAAC,QAAQ,CAAC;YAClB,IAAI,EAAE,KAAK;YACX,OAAO,EAAE,cAAc;YACvB,IAAI,EAAE,OAAO;YACb,GAAG,EAAE,IAAA,8BAAgB,EAAC;gBACpB,OAAO;gBACP,QAAQ;gBACR,OAAO;gBACP,OAAO;gBACP,YAAY;gBACZ,QAAQ;gBACR,kBAAkB;gBAClB,2BAA2B;aAC5B,CAAC;SACH,CAAC,CAAC;QAEH,MAAM,KAAK,GAAG,IAAI,sBAAY,CAAC,QAAQ,EAAE,UAAU,EAAE,SAAS,EAAE;YAC9D,UAAU,EAAE,IAAI;YAChB,OAAO;YACP,uBAAuB,EAAE,2BAA2B;SACrD,CAAC,CAAC;QACH,KAAK,CAAC,UAAU,CAAC;YACf,GAAG,EAAE,oBAAoB,OAAO,EAAE;YAClC,GAAG,EAAE,oBAAoB,OAAO,EAAE;SACnC,CAAC,CAAC;QAEH,MAAM,UAAU,CAAC,QAAQ,EAAE,CAAC;QAC5B,MAAM,KAAK,CAAC,KAAK,EAAE,CAAC;QAEpB,MAAM,QAAQ,GAAG,KAAK,EAAE,MAAc,EAAiB,EAAE;YACvD,OAAO,CAAC,GAAG,CAAC,cAAc,MAAM,oBAAoB,CAAC,CAAC;YACtD,MAAM,UAAU,CAAC,OAAO,EAAE,CAAC;YAC3B,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC,CAAC;QAEF,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC;QACjD,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;IACjD,CAAC;CACF,CAAC","sourcesContent":["import type { CommandModule } from 'yargs';\nimport path from 'path';\nimport fs from 'fs';\nimport { Supervisor } from '../../supervisor';\nimport { createGatewayAdminProxyAuthSecret, GatewayProxy, getFreePort, PACKAGE_ROOT } from '../../runtime';\nimport {\n  buildApiChildEnv,\n  buildCssArgs,\n  buildCssChildEnv,\n  createCssChildRuntimeConfig,\n} from '../../runtime/css-process';\nimport { resolveExternalOidcIssuer } from '../../runtime/oidc-issuer';\nimport { resolveAuthModeFromEnv } from '../../authorization/AuthMode';\n\ninterface StartArgs {\n  mode?: string;\n  config?: string;\n  env?: string;\n  port: number;\n  host: string;\n  foreground?: boolean;\n}\n\nconst childJsRuntime = typeof (globalThis as { Bun?: unknown }).Bun !== 'undefined'\n  ? (process.env.XPOD_NODE_BINARY ?? 'node')\n  : process.execPath;\n\nfunction loadEnvFile(envPath: string): void {\n  if (!fs.existsSync(envPath)) {\n    console.warn(`Env file not found: ${envPath}`);\n    return;\n  }\n  const content = fs.readFileSync(envPath, 'utf-8');\n  for (const line of content.split('\\n')) {\n    const trimmed = line.trim();\n    if (!trimmed || trimmed.startsWith('#')) continue;\n    const eqIndex = trimmed.indexOf('=');\n    if (eqIndex === -1) continue;\n    const key = trimmed.slice(0, eqIndex).trim();\n    let value = trimmed.slice(eqIndex + 1).trim();\n    if (\n      (value.startsWith('\"') && value.endsWith('\"')) ||\n      (value.startsWith(\"'\") && value.endsWith(\"'\"))\n    ) {\n      value = value.slice(1, -1);\n    }\n    if (!process.env[key]) {\n      process.env[key] = value;\n    }\n  }\n}\n\nexport const startCommand: CommandModule<object, StartArgs> = {\n  command: 'start',\n  describe: 'Start xpod services',\n  builder: (yargs) =>\n    yargs\n      .option('mode', {\n        alias: 'm',\n        type: 'string',\n        choices: ['local', 'cloud'],\n        description: 'Run mode',\n      })\n      .option('config', {\n        alias: 'c',\n        type: 'string',\n        description: 'Path to config file (overrides --mode)',\n      })\n      .option('env', {\n        alias: 'e',\n        type: 'string',\n        description: 'Path to .env file',\n      })\n      .option('port', {\n        alias: 'p',\n        type: 'number',\n        description: 'Gateway port',\n        default: 3000,\n      })\n      .option('host', {\n        type: 'string',\n        description: 'Gateway host',\n        default: 'localhost',\n      })\n      .option('foreground', {\n        type: 'boolean',\n        default: true,\n        description: 'Run in the foreground',\n      }),\n  handler: async (argv) => {\n    if (argv.env) {\n      loadEnvFile(argv.env);\n    }\n\n    const mainPort =\n      argv.port !== 3000\n        ? argv.port\n        : parseInt(process.env.XPOD_PORT ?? process.env.PORT ?? '3000', 10);\n\n    let configPath: string;\n    if (argv.config) {\n      configPath = argv.config;\n    } else if (argv.mode) {\n      configPath = path.join(PACKAGE_ROOT, `config/${argv.mode}.json`);\n    } else {\n      configPath = path.join(PACKAGE_ROOT, 'config/local.json');\n    }\n\n    const cssPort = await getFreePort(mainPort + 1, argv.host);\n    const apiPort = await getFreePort(cssPort + 1, argv.host);\n    const runtimeRoot = path.join(process.cwd(), '.xpod/runtime/legacy-css');\n\n    const baseUrl = process.env.CSS_BASE_URL || `http://${argv.host}:${mainPort}/`;\n    const rdfIndexPath = process.env.CSS_RDF_INDEX_PATH || path.join(runtimeRoot, 'rdf-index.sqlite');\n    process.env.CSS_RDF_INDEX_PATH = rdfIndexPath;\n\n    // SP 模式：oidcIssuer 显式指定外部 IdP；Cloud API 地址不再隐式当作 issuer。\n    const externalOidcIssuer = resolveExternalOidcIssuer(process.env);\n    const authMode = resolveAuthModeFromEnv(process.env);\n\n    console.log('Starting xpod...');\n    console.log(`  Gateway: ${baseUrl} (${argv.host}:${mainPort})`);\n    console.log(`  CSS (internal): http://localhost:${cssPort}`);\n    console.log(`  API (internal): http://localhost:${apiPort}`);\n    if (externalOidcIssuer) {\n      console.log(`  SP mode: Cloud IdP = ${externalOidcIssuer}`);\n    }\n    console.log(`  Authorization mode: ${authMode}`);\n\n    const supervisor = new Supervisor();\n    const cssBinary = require.resolve('@solid/community-server/bin/server.js');\n    const cssRuntimeConfig = createCssChildRuntimeConfig({\n      configPath,\n      runtimeRoot,\n      authMode,\n      externalOidcIssuer,\n    });\n    const cssArgs = buildCssArgs({\n      cssBinary,\n      configPath: cssRuntimeConfig.configPath,\n      cssModuleRoot: PACKAGE_ROOT,\n      cssPort,\n      baseUrl,\n      externalOidcIssuer,\n    });\n\n    supervisor.register({\n      name: 'css',\n      command: childJsRuntime,\n      args: cssArgs,\n      cwd: cssRuntimeConfig.cwd,\n      env: buildCssChildEnv(baseUrl, cssPort, externalOidcIssuer, authMode),\n    });\n\n    const isDevMode = __filename.endsWith('.ts');\n    const apiArgs = isDevMode\n      ? [\n          '-r',\n          require.resolve('ts-node/register/transpile-only'),\n          path.resolve(__dirname, '..', '..', 'api', 'main.ts'),\n        ]\n      : [path.resolve(__dirname, '..', '..', 'api', 'main.js')];\n\n    const gatewayAdminProxyAuthSecret = createGatewayAdminProxyAuthSecret();\n\n    supervisor.register({\n      name: 'api',\n      command: childJsRuntime,\n      args: apiArgs,\n      env: buildApiChildEnv({\n        apiPort,\n        mainPort,\n        cssPort,\n        baseUrl,\n        rdfIndexPath,\n        authMode,\n        externalOidcIssuer,\n        gatewayAdminProxyAuthSecret,\n      }),\n    });\n\n    const proxy = new GatewayProxy(mainPort, supervisor, '0.0.0.0', {\n      exitOnStop: true,\n      baseUrl,\n      internalAdminAuthSecret: gatewayAdminProxyAuthSecret,\n    });\n    proxy.setTargets({\n      css: `http://localhost:${cssPort}`,\n      api: `http://localhost:${apiPort}`,\n    });\n\n    await supervisor.startAll();\n    await proxy.start();\n\n    const shutdown = async (signal: string): Promise<void> => {\n      console.log(`\\nReceived ${signal}, shutting down...`);\n      await supervisor.stopAll();\n      process.exit(0);\n    };\n\n    process.on('SIGTERM', () => shutdown('SIGTERM'));\n    process.on('SIGINT', () => shutdown('SIGINT'));\n  },\n};\n"]}

package/dist/cli/lib/solid-auth.d.ts

@@ -3,9 +3,9 @@
  *
  * Two auth channels:
  * 1. Session (via @inrupt/solid-client-authn-node) — for Pod operations (drizzle-solid)
- * 2. API Key (sk-xxx format) — for xpod API calls (LLM proxy, etc.)
+ * 2. CSS client credentials wrapper (sk-xxx format) — for xpod API calls (LLM proxy, etc.)
  *
- * The API key is derived from client_id:client_secret and used by xpod's
+ * The wrapper is derived from client_id:client_secret and used by xpod's
  * ClientCredentialsAuthenticator to authenticate API requests.
  */
 import { Session } from '@inrupt/solid-client-authn-node';
@@ -17,7 +17,7 @@ export interface PodAuth {
 /**
  * Authenticate with the Pod server.
  *
- * Returns both a Session (for Pod CRUD) and an API key (for xpod API).
+ * Returns both a Session (for Pod CRUD) and a client credentials wrapper (for xpod API).
  */
 export declare function authenticate(clientId: string, clientSecret: string, oidcIssuer: string): Promise<PodAuth>;
 export interface SolidTokenResult {

package/dist/cli/lib/solid-auth.js

@@ -4,9 +4,9 @@
  *
  * Two auth channels:
  * 1. Session (via @inrupt/solid-client-authn-node) — for Pod operations (drizzle-solid)
- * 2. API Key (sk-xxx format) — for xpod API calls (LLM proxy, etc.)
+ * 2. CSS client credentials wrapper (sk-xxx format) — for xpod API calls (LLM proxy, etc.)
  *
- * The API key is derived from client_id:client_secret and used by xpod's
+ * The wrapper is derived from client_id:client_secret and used by xpod's
  * ClientCredentialsAuthenticator to authenticate API requests.
  */
 Object.defineProperty(exports, "__esModule", { value: true });
@@ -20,7 +20,7 @@ Object.defineProperty(exports, "Session", { enumerable: true, get: function () {
 /**
  * Authenticate with the Pod server.
  *
- * Returns both a Session (for Pod CRUD) and an API key (for xpod API).
+ * Returns both a Session (for Pod CRUD) and a client credentials wrapper (for xpod API).
  */
 async function authenticate(clientId, clientSecret, oidcIssuer) {
     // 1. Create Session for Pod operations
@@ -34,7 +34,7 @@ async function authenticate(clientId, clientSecret, oidcIssuer) {
     if (!session.info.isLoggedIn) {
         throw new Error('Failed to authenticate with Pod');
     }
-    // 2. Generate API key for xpod API calls
+    // 2. Generate OpenAI-compatible credentials wrapper for xpod API calls.
     // Format: sk-base64(client_id:client_secret)
     const credentials = `${clientId}:${clientSecret}`;
     const base64 = Buffer.from(credentials, 'utf-8').toString('base64');

package/dist/cli/lib/solid-auth.js.map

@@ -1 +1 @@
-{"version":3,"file":"solid-auth.js","sourceRoot":"","sources":["../../../src/cli/lib/solid-auth.ts"],"names":[],"mappings":";AAAA;;;;;;;;;GASG;;;AAgBH,oCAyBC;AAaD,wCAkCC;AAGD,gDAQC;AAjGD,6EAA0D;AAE1D,2EAA0D;AAAjD,kHAAA,OAAO,OAAA;AAOhB;;;;GAIG;AACI,KAAK,UAAU,YAAY,CAChC,QAAgB,EAChB,YAAoB,EACpB,UAAkB;IAElB,uCAAuC;IACvC,MAAM,OAAO,GAAG,IAAI,iCAAO,EAAE,CAAC;IAC9B,MAAM,OAAO,CAAC,KAAK,CAAC;QAClB,QAAQ;QACR,YAAY;QACZ,UAAU;QACV,SAAS,EAAE,QAAQ;KACpB,CAAC,CAAC;IAEH,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IACrD,CAAC;IAED,yCAAyC;IACzC,6CAA6C;IAC7C,MAAM,WAAW,GAAG,GAAG,QAAQ,IAAI,YAAY,EAAE,CAAC;IAClD,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACpE,MAAM,MAAM,GAAG,MAAM,MAAM,EAAE,CAAC;IAE9B,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;AAC7B,CAAC;AAYD,8CAA8C;AACvC,KAAK,UAAU,cAAc,CAClC,QAAgB,EAChB,YAAoB,EACpB,OAAe;IAEf,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,GAAG,CAAC;QAC7D,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,kCAAkC,CAAC,CAAC;QACnE,IAAI,CAAC,GAAG,CAAC,EAAE;YAAE,OAAO,IAAI,CAAC;QACzB,MAAM,MAAM,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAgC,CAAC;QACjE,IAAI,CAAC,MAAM,CAAC,cAAc;YAAE,OAAO,IAAI,CAAC;QAExC,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,cAAc,EAAE;YAClD,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,mCAAmC,EAAE;YAChE,IAAI,EAAE,IAAI,eAAe,CAAC;gBACxB,UAAU,EAAE,oBAAoB;gBAChC,SAAS,EAAE,QAAQ;gBACnB,aAAa,EAAE,YAAY;aAC5B,CAAC,CAAC,QAAQ,EAAE;SACd,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,CAAC,EAAE;YAAE,OAAO,IAAI,CAAC;QAC9B,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAmD,CAAC;QACvF,IAAI,CAAC,IAAI,CAAC,YAAY;YAAE,OAAO,IAAI,CAAC;QAEpC,OAAO;YACL,WAAW,EAAE,IAAI,CAAC,YAAY;YAC9B,SAAS,EAAE,QAAQ;YACnB,SAAS,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,GAAG,IAAI,CAAC;SACnE,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,mEAAmE;AAC5D,KAAK,UAAU,kBAAkB,CACtC,GAAW,EACX,KAAa,EACb,IAAkB;IAElB,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAC3C,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,UAAU,KAAK,EAAE,CAAC,CAAC;IAChD,OAAO,KAAK,CAAC,GAAG,EAAE,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;AAC1C,CAAC","sourcesContent":["/**\n * Solid OIDC authentication helpers for CLI.\n *\n * Two auth channels:\n * 1. Session (via @inrupt/solid-client-authn-node) — for Pod operations (drizzle-solid)\n * 2. API Key (sk-xxx format) — for xpod API calls (LLM proxy, etc.)\n *\n * The API key is derived from client_id:client_secret and used by xpod's\n * ClientCredentialsAuthenticator to authenticate API requests.\n */\n\nimport { Session } from '@inrupt/solid-client-authn-node';\n\nexport { Session } from '@inrupt/solid-client-authn-node';\n\nexport interface PodAuth {\n  session: Session;   // For Pod operations (drizzle-solid)\n  apiKey: string;     // For xpod API calls (sk-xxx format)\n}\n\n/**\n * Authenticate with the Pod server.\n *\n * Returns both a Session (for Pod CRUD) and an API key (for xpod API).\n */\nexport async function authenticate(\n  clientId: string,\n  clientSecret: string,\n  oidcIssuer: string,\n): Promise<PodAuth> {\n  // 1. Create Session for Pod operations\n  const session = new Session();\n  await session.login({\n    clientId,\n    clientSecret,\n    oidcIssuer,\n    tokenType: 'Bearer',\n  });\n\n  if (!session.info.isLoggedIn) {\n    throw new Error('Failed to authenticate with Pod');\n  }\n\n  // 2. Generate API key for xpod API calls\n  // Format: sk-base64(client_id:client_secret)\n  const credentials = `${clientId}:${clientSecret}`;\n  const base64 = Buffer.from(credentials, 'utf-8').toString('base64');\n  const apiKey = `sk-${base64}`;\n\n  return { session, apiKey };\n}\n\n// ============================================================================\n// Legacy API — used by subcommands (backup, config) not yet migrated\n// ============================================================================\n\nexport interface SolidTokenResult {\n  accessToken: string;\n  tokenType: string;\n  expiresAt: Date;\n}\n\n/** @deprecated Use authenticate() instead. */\nexport async function getAccessToken(\n  clientId: string,\n  clientSecret: string,\n  baseUrl: string,\n): Promise<SolidTokenResult | null> {\n  try {\n    const base = baseUrl.endsWith('/') ? baseUrl : `${baseUrl}/`;\n    const res = await fetch(`${base}.well-known/openid-configuration`);\n    if (!res.ok) return null;\n    const config = (await res.json()) as { token_endpoint?: string };\n    if (!config.token_endpoint) return null;\n\n    const tokenRes = await fetch(config.token_endpoint, {\n      method: 'POST',\n      headers: { 'Content-Type': 'application/x-www-form-urlencoded' },\n      body: new URLSearchParams({\n        grant_type: 'client_credentials',\n        client_id: clientId,\n        client_secret: clientSecret,\n      }).toString(),\n    });\n\n    if (!tokenRes.ok) return null;\n    const data = (await tokenRes.json()) as { access_token?: string; expires_in?: number };\n    if (!data.access_token) return null;\n\n    return {\n      accessToken: data.access_token,\n      tokenType: 'Bearer',\n      expiresAt: new Date(Date.now() + (data.expires_in ?? 3600) * 1000),\n    };\n  } catch {\n    return null;\n  }\n}\n\n/** @deprecated Use session.fetch() from authenticate() instead. */\nexport async function authenticatedFetch(\n  url: string,\n  token: string,\n  init?: RequestInit,\n): Promise<Response> {\n  const headers = new Headers(init?.headers);\n  headers.set('Authorization', `Bearer ${token}`);\n  return fetch(url, { ...init, headers });\n}\n"]}
+{"version":3,"file":"solid-auth.js","sourceRoot":"","sources":["../../../src/cli/lib/solid-auth.ts"],"names":[],"mappings":";AAAA;;;;;;;;;GASG;;;AAgBH,oCAyBC;AAaD,wCAkCC;AAGD,gDAQC;AAjGD,6EAA0D;AAE1D,2EAA0D;AAAjD,kHAAA,OAAO,OAAA;AAOhB;;;;GAIG;AACI,KAAK,UAAU,YAAY,CAChC,QAAgB,EAChB,YAAoB,EACpB,UAAkB;IAElB,uCAAuC;IACvC,MAAM,OAAO,GAAG,IAAI,iCAAO,EAAE,CAAC;IAC9B,MAAM,OAAO,CAAC,KAAK,CAAC;QAClB,QAAQ;QACR,YAAY;QACZ,UAAU;QACV,SAAS,EAAE,QAAQ;KACpB,CAAC,CAAC;IAEH,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IACrD,CAAC;IAED,wEAAwE;IACxE,6CAA6C;IAC7C,MAAM,WAAW,GAAG,GAAG,QAAQ,IAAI,YAAY,EAAE,CAAC;IAClD,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACpE,MAAM,MAAM,GAAG,MAAM,MAAM,EAAE,CAAC;IAE9B,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;AAC7B,CAAC;AAYD,8CAA8C;AACvC,KAAK,UAAU,cAAc,CAClC,QAAgB,EAChB,YAAoB,EACpB,OAAe;IAEf,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,GAAG,CAAC;QAC7D,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,kCAAkC,CAAC,CAAC;QACnE,IAAI,CAAC,GAAG,CAAC,EAAE;YAAE,OAAO,IAAI,CAAC;QACzB,MAAM,MAAM,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAgC,CAAC;QACjE,IAAI,CAAC,MAAM,CAAC,cAAc;YAAE,OAAO,IAAI,CAAC;QAExC,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,cAAc,EAAE;YAClD,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,mCAAmC,EAAE;YAChE,IAAI,EAAE,IAAI,eAAe,CAAC;gBACxB,UAAU,EAAE,oBAAoB;gBAChC,SAAS,EAAE,QAAQ;gBACnB,aAAa,EAAE,YAAY;aAC5B,CAAC,CAAC,QAAQ,EAAE;SACd,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,CAAC,EAAE;YAAE,OAAO,IAAI,CAAC;QAC9B,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAmD,CAAC;QACvF,IAAI,CAAC,IAAI,CAAC,YAAY;YAAE,OAAO,IAAI,CAAC;QAEpC,OAAO;YACL,WAAW,EAAE,IAAI,CAAC,YAAY;YAC9B,SAAS,EAAE,QAAQ;YACnB,SAAS,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,GAAG,IAAI,CAAC;SACnE,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,mEAAmE;AAC5D,KAAK,UAAU,kBAAkB,CACtC,GAAW,EACX,KAAa,EACb,IAAkB;IAElB,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAC3C,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,UAAU,KAAK,EAAE,CAAC,CAAC;IAChD,OAAO,KAAK,CAAC,GAAG,EAAE,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;AAC1C,CAAC","sourcesContent":["/**\n * Solid OIDC authentication helpers for CLI.\n *\n * Two auth channels:\n * 1. Session (via @inrupt/solid-client-authn-node) — for Pod operations (drizzle-solid)\n * 2. CSS client credentials wrapper (sk-xxx format) — for xpod API calls (LLM proxy, etc.)\n *\n * The wrapper is derived from client_id:client_secret and used by xpod's\n * ClientCredentialsAuthenticator to authenticate API requests.\n */\n\nimport { Session } from '@inrupt/solid-client-authn-node';\n\nexport { Session } from '@inrupt/solid-client-authn-node';\n\nexport interface PodAuth {\n  session: Session;   // For Pod operations (drizzle-solid)\n  apiKey: string;     // For xpod API calls (sk-base64(client_id:client_secret) format)\n}\n\n/**\n * Authenticate with the Pod server.\n *\n * Returns both a Session (for Pod CRUD) and a client credentials wrapper (for xpod API).\n */\nexport async function authenticate(\n  clientId: string,\n  clientSecret: string,\n  oidcIssuer: string,\n): Promise<PodAuth> {\n  // 1. Create Session for Pod operations\n  const session = new Session();\n  await session.login({\n    clientId,\n    clientSecret,\n    oidcIssuer,\n    tokenType: 'Bearer',\n  });\n\n  if (!session.info.isLoggedIn) {\n    throw new Error('Failed to authenticate with Pod');\n  }\n\n  // 2. Generate OpenAI-compatible credentials wrapper for xpod API calls.\n  // Format: sk-base64(client_id:client_secret)\n  const credentials = `${clientId}:${clientSecret}`;\n  const base64 = Buffer.from(credentials, 'utf-8').toString('base64');\n  const apiKey = `sk-${base64}`;\n\n  return { session, apiKey };\n}\n\n// ============================================================================\n// Legacy API — used by subcommands (backup, config) not yet migrated\n// ============================================================================\n\nexport interface SolidTokenResult {\n  accessToken: string;\n  tokenType: string;\n  expiresAt: Date;\n}\n\n/** @deprecated Use authenticate() instead. */\nexport async function getAccessToken(\n  clientId: string,\n  clientSecret: string,\n  baseUrl: string,\n): Promise<SolidTokenResult | null> {\n  try {\n    const base = baseUrl.endsWith('/') ? baseUrl : `${baseUrl}/`;\n    const res = await fetch(`${base}.well-known/openid-configuration`);\n    if (!res.ok) return null;\n    const config = (await res.json()) as { token_endpoint?: string };\n    if (!config.token_endpoint) return null;\n\n    const tokenRes = await fetch(config.token_endpoint, {\n      method: 'POST',\n      headers: { 'Content-Type': 'application/x-www-form-urlencoded' },\n      body: new URLSearchParams({\n        grant_type: 'client_credentials',\n        client_id: clientId,\n        client_secret: clientSecret,\n      }).toString(),\n    });\n\n    if (!tokenRes.ok) return null;\n    const data = (await tokenRes.json()) as { access_token?: string; expires_in?: number };\n    if (!data.access_token) return null;\n\n    return {\n      accessToken: data.access_token,\n      tokenType: 'Bearer',\n      expiresAt: new Date(Date.now() + (data.expires_in ?? 3600) * 1000),\n    };\n  } catch {\n    return null;\n  }\n}\n\n/** @deprecated Use session.fetch() from authenticate() instead. */\nexport async function authenticatedFetch(\n  url: string,\n  token: string,\n  init?: RequestInit,\n): Promise<Response> {\n  const headers = new Headers(init?.headers);\n  headers.set('Authorization', `Bearer ${token}`);\n  return fetch(url, { ...init, headers });\n}\n"]}

package/dist/components/components.jsonld

@@ -9,9 +9,12 @@
     "undefineds:dist/storage/sparql/SubgraphQueryEngine.jsonld",
     "undefineds:dist/storage/rdf/types.jsonld",
     "undefineds:dist/storage/rdf/RdfSparqlAdapter.jsonld",
+    "undefineds:dist/storage/rdf/RdfAccessScope.jsonld",
     "undefineds:dist/storage/rdf/ShadowRdfQuintStore.jsonld",
     "undefineds:dist/storage/rdf/SolidRdfSparqlEngine.jsonld",
     "undefineds:dist/storage/rdf/PostgresRdfEngine.jsonld",
+    "undefineds:dist/storage/rdf/PostgresRdfTextIndex.jsonld",
+    "undefineds:dist/storage/rdf/PostgresRdfVectorIndex.jsonld",
     "undefineds:dist/dns/DnsProvider.jsonld",
     "undefineds:dist/edge/EdgeNodeCertificateProvisioner.jsonld",
     "undefineds:dist/edge/EdgeNodeAgent.jsonld",
@@ -72,6 +75,8 @@
     "undefineds:dist/storage/rdf/RdfTermDictionary.jsonld",
     "undefineds:dist/storage/rdf/RdfQuadIndex.jsonld",
     "undefineds:dist/storage/rdf/Rdf3xIndex.jsonld",
+    "undefineds:dist/storage/rdf/RdfTextIndex.jsonld",
+    "undefineds:dist/storage/rdf/RdfVectorIndex.jsonld",
     "undefineds:dist/storage/rdf/SolidRdfEngine.jsonld",
     "undefineds:dist/storage/vector/VectorStore.jsonld",
     "undefineds:dist/storage/vector/SqliteVectorStore.jsonld",
@@ -98,6 +103,17 @@
     "undefineds:dist/provision/ProvisionPodCreator.jsonld",
     "undefineds:dist/provision/ProvisionCodeCodec.jsonld",
     "undefineds:dist/provision/LocalPodProvisioningService.jsonld",
+    "undefineds:dist/solidfs/SolidFsSyncJournal.jsonld",
+    "undefineds:dist/document/DocumentReader.jsonld",
+    "undefineds:dist/document/Chunker.jsonld",
+    "undefineds:dist/document/JinaReader.jsonld",
+    "undefineds:dist/document/HeadingChunker.jsonld",
+    "undefineds:dist/document/ReaderPolicy.jsonld",
+    "undefineds:dist/document/ReaderAiConfig.jsonld",
+    "undefineds:dist/document/L0SourceSummary.jsonld",
+    "undefineds:dist/document/PaddleOcrReader.jsonld",
+    "undefineds:dist/security/secret-cell/DeploymentRootKeyProvider.jsonld",
+    "undefineds:dist/security/secret-cell/SecretCellVault.jsonld",
     "undefineds:dist/api/reconciler/coordination.jsonld",
     "undefineds:dist/api/reconciler/ClientReconcilerCoordinator.jsonld",
     "undefineds:dist/api/reconciler/WakeAgentQueue.jsonld",