@undefineds.co/xpod 0.3.6 → 0.3.14

package/dist/runtime/css-process.js

@@ -1,45 +1,92 @@
 "use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.buildCssChildEnv = buildCssChildEnv;
+exports.createCssChildRuntimeConfig = createCssChildRuntimeConfig;
 exports.buildCssArgs = buildCssArgs;
 exports.buildApiChildEnv = buildApiChildEnv;
+const node_fs_1 = __importDefault(require("node:fs"));
+const node_path_1 = __importDefault(require("node:path"));
 const oidc_issuer_1 = require("./oidc-issuer");
 /**
  * Build the environment for the CSS child process.
  *
- * The public process-level contract is CSS_OIDC_ISSUER. CSS itself only
- * receives the internal Components shorthand via --idpUrl; passing the env
- * through can make yargs derive an unsupported oidcIssuer argument.
+ * `oidcIssuer` is an xpod shorthand value, not a CSS CLI argument.
+ * The legacy CSS child process path injects it through a generated
+ * Components.js config instead of CSS_* env aliases.
  */
-function buildCssChildEnv(baseUrl, cssPort, baseEnv = process.env) {
+function buildCssChildEnv(baseUrl, cssPort, oidcIssuer, baseEnv = process.env) {
     const env = {
         ...baseEnv,
         CSS_PORT: cssPort.toString(),
         CSS_BASE_URL: baseUrl,
     };
-    delete env.CSS_OIDC_ISSUER;
-    delete env.CSS_IDP_URL;
-    delete env.XPOD_OIDC_ISSUER;
-    delete env.oidcIssuer;
-    delete env.idpUrl;
+    for (const key of Object.keys(env)) {
+        if (key === 'oidcIssuer' || isExternalOidcPollutionKey(key)) {
+            delete env[key];
+        }
+    }
     return env;
 }
+function isExternalOidcPollutionKey(key) {
+    const normalized = key.toUpperCase().replace(/[^A-Z0-9]/g, '');
+    return normalized.includes('OIDCISSUER') ||
+        normalized.includes('IDPURL') ||
+        normalized.includes('IDPJWKSURL') ||
+        normalized.includes('IDENTITYPROVIDERURL') ||
+        normalized.includes('IDENTITYPROVIDERJWKSURL');
+}
+function toImportSpecifier(fromFilePath, toFilePath) {
+    const fromDirectory = node_path_1.default.dirname(fromFilePath);
+    const relativePath = node_path_1.default.relative(fromDirectory, toFilePath).replace(/\\/g, '/');
+    if (relativePath.startsWith('./') || relativePath.startsWith('../')) {
+        return relativePath;
+    }
+    return `./${relativePath}`;
+}
+function createCssChildRuntimeConfig(options) {
+    node_fs_1.default.mkdirSync(options.runtimeRoot, { recursive: true });
+    const runtimeConfigPath = node_path_1.default.join(options.runtimeRoot, 'css-child-runtime.config.json');
+    node_fs_1.default.writeFileSync(runtimeConfigPath, JSON.stringify({
+        '@context': [
+            'https://linkedsoftwaredependencies.org/bundles/npm/@solid/community-server/^8.0.0/components/context.jsonld',
+            'https://linkedsoftwaredependencies.org/bundles/npm/@undefineds.co/xpod/^0.0.0/components/context.jsonld',
+            'https://linkedsoftwaredependencies.org/bundles/npm/asynchronous-handlers/^1.0.0/components/context.jsonld',
+        ],
+        import: [
+            toImportSpecifier(runtimeConfigPath, options.configPath),
+        ],
+        '@graph': [],
+    }, null, 2), 'utf-8');
+    if (options.externalOidcIssuer) {
+        node_fs_1.default.writeFileSync(node_path_1.default.join(options.runtimeRoot, 'package.json'), JSON.stringify({
+            private: true,
+            name: 'xpod-css-runtime',
+        }, null, 2), 'utf-8');
+        node_fs_1.default.writeFileSync(node_path_1.default.join(options.runtimeRoot, '.community-solid-server.config.json'), JSON.stringify({
+            oidcIssuer: options.externalOidcIssuer,
+        }, null, 2), 'utf-8');
+    }
+    return {
+        configPath: runtimeConfigPath,
+        cwd: options.externalOidcIssuer ? options.runtimeRoot : undefined,
+    };
+}
 function buildCssArgs(options) {
-    const args = [
+    return [
         options.cssBinary,
         '-c', options.configPath,
         '-m', options.cssModuleRoot,
         '-p', options.cssPort.toString(),
         '-b', options.baseUrl,
     ];
-    if (options.externalOidcIssuer) {
-        args.push('--idpUrl', options.externalOidcIssuer);
-    }
-    return args;
 }
 function buildApiChildEnv(options) {
     return {
         ...(options.baseEnv ?? process.env),
+        ...(options.externalOidcIssuer ? { oidcIssuer: options.externalOidcIssuer } : {}),
         API_PORT: options.apiPort.toString(),
         XPOD_MAIN_PORT: options.mainPort.toString(),
         CSS_INTERNAL_URL: `http://localhost:${options.cssPort}`,

package/dist/runtime/css-process.js.map

@@ -1 +1 @@
-{"version":3,"file":"css-process.js","sourceRoot":"","sources":["../../src/runtime/css-process.ts"],"names":[],"mappings":";;AASA,4CAkBC;AAED,oCAmBC;AAED,4CAkBC;AApED,+CAAkD;AAElD;;;;;;GAMG;AACH,SAAgB,gBAAgB,CAC9B,OAAe,EACf,OAAe,EACf,UAA6B,OAAO,CAAC,GAAG;IAExC,MAAM,GAAG,GAA2B;QAClC,GAAG,OAAO;QACV,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE;QAC5B,YAAY,EAAE,OAAO;KACI,CAAC;IAE5B,OAAO,GAAG,CAAC,eAAe,CAAC;IAC3B,OAAO,GAAG,CAAC,WAAW,CAAC;IACvB,OAAO,GAAG,CAAC,gBAAgB,CAAC;IAC5B,OAAO,GAAG,CAAC,UAAU,CAAC;IACtB,OAAO,GAAG,CAAC,MAAM,CAAC;IAElB,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAgB,YAAY,CAAC,OAO5B;IACC,MAAM,IAAI,GAAG;QACX,OAAO,CAAC,SAAS;QACjB,IAAI,EAAE,OAAO,CAAC,UAAU;QACxB,IAAI,EAAE,OAAO,CAAC,aAAa;QAC3B,IAAI,EAAE,OAAO,CAAC,OAAO,CAAC,QAAQ,EAAE;QAChC,IAAI,EAAE,OAAO,CAAC,OAAO;KACtB,CAAC;IACF,IAAI,OAAO,CAAC,kBAAkB,EAAE,CAAC;QAC/B,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,OAAO,CAAC,kBAAkB,CAAC,CAAC;IACpD,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAgB,gBAAgB,CAAC,OAOhC;IACC,OAAO;QACL,GAAG,CAAC,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,GAAG,CAAC;QACnC,QAAQ,EAAE,OAAO,CAAC,OAAO,CAAC,QAAQ,EAAE;QACpC,cAAc,EAAE,OAAO,CAAC,QAAQ,CAAC,QAAQ,EAAE;QAC3C,gBAAgB,EAAE,oBAAoB,OAAO,CAAC,OAAO,EAAE;QACvD,YAAY,EAAE,OAAO,CAAC,OAAO;QAC7B,kBAAkB,EAAE,OAAO,CAAC,kBAAkB;YAC5C,CAAC,CAAC,IAAA,+BAAiB,EAAC,OAAO,CAAC,kBAAkB,CAAC;YAC/C,CAAC,CAAC,GAAG,OAAO,CAAC,OAAO,aAAa;KACV,CAAC;AAC9B,CAAC","sourcesContent":["import { oidcTokenEndpoint } from './oidc-issuer';\n\n/**\n * Build the environment for the CSS child process.\n *\n * The public process-level contract is CSS_OIDC_ISSUER. CSS itself only\n * receives the internal Components shorthand via --idpUrl; passing the env\n * through can make yargs derive an unsupported oidcIssuer argument.\n */\nexport function buildCssChildEnv(\n  baseUrl: string,\n  cssPort: number,\n  baseEnv: NodeJS.ProcessEnv = process.env,\n): Record<string, string> {\n  const env: Record<string, string> = {\n    ...baseEnv,\n    CSS_PORT: cssPort.toString(),\n    CSS_BASE_URL: baseUrl,\n  } as Record<string, string>;\n\n  delete env.CSS_OIDC_ISSUER;\n  delete env.CSS_IDP_URL;\n  delete env.XPOD_OIDC_ISSUER;\n  delete env.oidcIssuer;\n  delete env.idpUrl;\n\n  return env;\n}\n\nexport function buildCssArgs(options: {\n  cssBinary: string\n  configPath: string\n  cssModuleRoot: string\n  cssPort: number\n  baseUrl: string\n  externalOidcIssuer?: string\n}): string[] {\n  const args = [\n    options.cssBinary,\n    '-c', options.configPath,\n    '-m', options.cssModuleRoot,\n    '-p', options.cssPort.toString(),\n    '-b', options.baseUrl,\n  ];\n  if (options.externalOidcIssuer) {\n    args.push('--idpUrl', options.externalOidcIssuer);\n  }\n  return args;\n}\n\nexport function buildApiChildEnv(options: {\n  apiPort: number\n  mainPort: number\n  cssPort: number\n  baseUrl: string\n  externalOidcIssuer?: string\n  baseEnv?: NodeJS.ProcessEnv\n}): Record<string, string> {\n  return {\n    ...(options.baseEnv ?? process.env),\n    API_PORT: options.apiPort.toString(),\n    XPOD_MAIN_PORT: options.mainPort.toString(),\n    CSS_INTERNAL_URL: `http://localhost:${options.cssPort}`,\n    CSS_BASE_URL: options.baseUrl,\n    CSS_TOKEN_ENDPOINT: options.externalOidcIssuer\n      ? oidcTokenEndpoint(options.externalOidcIssuer)\n      : `${options.baseUrl}.oidc/token`,\n  } as Record<string, string>;\n}\n"]}
+{"version":3,"file":"css-process.js","sourceRoot":"","sources":["../../src/runtime/css-process.ts"],"names":[],"mappings":";;;;;AAWA,4CAmBC;AAoBD,kEAiCC;AAED,oCAeC;AAED,4CAmBC;AAzHD,sDAAyB;AACzB,0DAA6B;AAC7B,+CAAkD;AAElD;;;;;;GAMG;AACH,SAAgB,gBAAgB,CAC9B,OAAe,EACf,OAAe,EACf,UAAmB,EACnB,UAA6B,OAAO,CAAC,GAAG;IAExC,MAAM,GAAG,GAA2B;QAClC,GAAG,OAAO;QACV,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE;QAC5B,YAAY,EAAE,OAAO;KACI,CAAC;IAE5B,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACnC,IAAI,GAAG,KAAK,YAAY,IAAI,0BAA0B,CAAC,GAAG,CAAC,EAAE,CAAC;YAC5D,OAAO,GAAG,CAAC,GAAG,CAAC,CAAC;QAClB,CAAC;IACH,CAAC;IAED,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,0BAA0B,CAAC,GAAW;IAC7C,MAAM,UAAU,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;IAC/D,OAAO,UAAU,CAAC,QAAQ,CAAC,YAAY,CAAC;QACtC,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAC7B,UAAU,CAAC,QAAQ,CAAC,YAAY,CAAC;QACjC,UAAU,CAAC,QAAQ,CAAC,qBAAqB,CAAC;QAC1C,UAAU,CAAC,QAAQ,CAAC,yBAAyB,CAAC,CAAC;AACnD,CAAC;AAED,SAAS,iBAAiB,CAAC,YAAoB,EAAE,UAAkB;IACjE,MAAM,aAAa,GAAG,mBAAI,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;IACjD,MAAM,YAAY,GAAG,mBAAI,CAAC,QAAQ,CAAC,aAAa,EAAE,UAAU,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IAClF,IAAI,YAAY,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,YAAY,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;QACpE,OAAO,YAAY,CAAC;IACtB,CAAC;IACD,OAAO,KAAK,YAAY,EAAE,CAAC;AAC7B,CAAC;AAED,SAAgB,2BAA2B,CAAC,OAI3C;IACC,iBAAE,CAAC,SAAS,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACvD,MAAM,iBAAiB,GAAG,mBAAI,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,+BAA+B,CAAC,CAAC;IAC1F,iBAAE,CAAC,aAAa,CAAC,iBAAiB,EAAE,IAAI,CAAC,SAAS,CAAC;QACjD,UAAU,EAAE;YACV,6GAA6G;YAC7G,yGAAyG;YACzG,2GAA2G;SAC5G;QACD,MAAM,EAAE;YACN,iBAAiB,CAAC,iBAAiB,EAAE,OAAO,CAAC,UAAU,CAAC;SACzD;QACD,QAAQ,EAAE,EAAE;KACb,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;IAEtB,IAAI,OAAO,CAAC,kBAAkB,EAAE,CAAC;QAC/B,iBAAE,CAAC,aAAa,CAAC,mBAAI,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,cAAc,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC;YAC9E,OAAO,EAAE,IAAI;YACb,IAAI,EAAE,kBAAkB;SACzB,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;QACtB,iBAAE,CAAC,aAAa,CAAC,mBAAI,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,qCAAqC,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC;YACrG,UAAU,EAAE,OAAO,CAAC,kBAAkB;SACvC,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;IACxB,CAAC;IAED,OAAO;QACL,UAAU,EAAE,iBAAiB;QAC7B,GAAG,EAAE,OAAO,CAAC,kBAAkB,CAAC,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS;KAClE,CAAC;AACJ,CAAC;AAED,SAAgB,YAAY,CAAC,OAO5B;IACC,OAAO;QACL,OAAO,CAAC,SAAS;QACjB,IAAI,EAAE,OAAO,CAAC,UAAU;QACxB,IAAI,EAAE,OAAO,CAAC,aAAa;QAC3B,IAAI,EAAE,OAAO,CAAC,OAAO,CAAC,QAAQ,EAAE;QAChC,IAAI,EAAE,OAAO,CAAC,OAAO;KACtB,CAAC;AACJ,CAAC;AAED,SAAgB,gBAAgB,CAAC,OAOhC;IACC,OAAO;QACL,GAAG,CAAC,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,GAAG,CAAC;QACnC,GAAG,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,kBAAkB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjF,QAAQ,EAAE,OAAO,CAAC,OAAO,CAAC,QAAQ,EAAE;QACpC,cAAc,EAAE,OAAO,CAAC,QAAQ,CAAC,QAAQ,EAAE;QAC3C,gBAAgB,EAAE,oBAAoB,OAAO,CAAC,OAAO,EAAE;QACvD,YAAY,EAAE,OAAO,CAAC,OAAO;QAC7B,kBAAkB,EAAE,OAAO,CAAC,kBAAkB;YAC5C,CAAC,CAAC,IAAA,+BAAiB,EAAC,OAAO,CAAC,kBAAkB,CAAC;YAC/C,CAAC,CAAC,GAAG,OAAO,CAAC,OAAO,aAAa;KACV,CAAC;AAC9B,CAAC","sourcesContent":["import fs from 'node:fs';\nimport path from 'node:path';\nimport { oidcTokenEndpoint } from './oidc-issuer';\n\n/**\n * Build the environment for the CSS child process.\n *\n * `oidcIssuer` is an xpod shorthand value, not a CSS CLI argument.\n * The legacy CSS child process path injects it through a generated\n * Components.js config instead of CSS_* env aliases.\n */\nexport function buildCssChildEnv(\n  baseUrl: string,\n  cssPort: number,\n  oidcIssuer?: string,\n  baseEnv: NodeJS.ProcessEnv = process.env,\n): Record<string, string> {\n  const env: Record<string, string> = {\n    ...baseEnv,\n    CSS_PORT: cssPort.toString(),\n    CSS_BASE_URL: baseUrl,\n  } as Record<string, string>;\n\n  for (const key of Object.keys(env)) {\n    if (key === 'oidcIssuer' || isExternalOidcPollutionKey(key)) {\n      delete env[key];\n    }\n  }\n\n  return env;\n}\n\nfunction isExternalOidcPollutionKey(key: string): boolean {\n  const normalized = key.toUpperCase().replace(/[^A-Z0-9]/g, '');\n  return normalized.includes('OIDCISSUER') ||\n    normalized.includes('IDPURL') ||\n    normalized.includes('IDPJWKSURL') ||\n    normalized.includes('IDENTITYPROVIDERURL') ||\n    normalized.includes('IDENTITYPROVIDERJWKSURL');\n}\n\nfunction toImportSpecifier(fromFilePath: string, toFilePath: string): string {\n  const fromDirectory = path.dirname(fromFilePath);\n  const relativePath = path.relative(fromDirectory, toFilePath).replace(/\\\\/g, '/');\n  if (relativePath.startsWith('./') || relativePath.startsWith('../')) {\n    return relativePath;\n  }\n  return `./${relativePath}`;\n}\n\nexport function createCssChildRuntimeConfig(options: {\n  configPath: string\n  runtimeRoot: string\n  externalOidcIssuer?: string\n}): { configPath: string; cwd?: string } {\n  fs.mkdirSync(options.runtimeRoot, { recursive: true });\n  const runtimeConfigPath = path.join(options.runtimeRoot, 'css-child-runtime.config.json');\n  fs.writeFileSync(runtimeConfigPath, JSON.stringify({\n    '@context': [\n      'https://linkedsoftwaredependencies.org/bundles/npm/@solid/community-server/^8.0.0/components/context.jsonld',\n      'https://linkedsoftwaredependencies.org/bundles/npm/@undefineds.co/xpod/^0.0.0/components/context.jsonld',\n      'https://linkedsoftwaredependencies.org/bundles/npm/asynchronous-handlers/^1.0.0/components/context.jsonld',\n    ],\n    import: [\n      toImportSpecifier(runtimeConfigPath, options.configPath),\n    ],\n    '@graph': [],\n  }, null, 2), 'utf-8');\n\n  if (options.externalOidcIssuer) {\n    fs.writeFileSync(path.join(options.runtimeRoot, 'package.json'), JSON.stringify({\n      private: true,\n      name: 'xpod-css-runtime',\n    }, null, 2), 'utf-8');\n    fs.writeFileSync(path.join(options.runtimeRoot, '.community-solid-server.config.json'), JSON.stringify({\n      oidcIssuer: options.externalOidcIssuer,\n    }, null, 2), 'utf-8');\n  }\n\n  return {\n    configPath: runtimeConfigPath,\n    cwd: options.externalOidcIssuer ? options.runtimeRoot : undefined,\n  };\n}\n\nexport function buildCssArgs(options: {\n  cssBinary: string\n  configPath: string\n  cssModuleRoot: string\n  cssPort: number\n  baseUrl: string\n  externalOidcIssuer?: string\n}): string[] {\n  return [\n    options.cssBinary,\n    '-c', options.configPath,\n    '-m', options.cssModuleRoot,\n    '-p', options.cssPort.toString(),\n    '-b', options.baseUrl,\n  ];\n}\n\nexport function buildApiChildEnv(options: {\n  apiPort: number\n  mainPort: number\n  cssPort: number\n  baseUrl: string\n  externalOidcIssuer?: string\n  baseEnv?: NodeJS.ProcessEnv\n}): Record<string, string> {\n  return {\n    ...(options.baseEnv ?? process.env),\n    ...(options.externalOidcIssuer ? { oidcIssuer: options.externalOidcIssuer } : {}),\n    API_PORT: options.apiPort.toString(),\n    XPOD_MAIN_PORT: options.mainPort.toString(),\n    CSS_INTERNAL_URL: `http://localhost:${options.cssPort}`,\n    CSS_BASE_URL: options.baseUrl,\n    CSS_TOKEN_ENDPOINT: options.externalOidcIssuer\n      ? oidcTokenEndpoint(options.externalOidcIssuer)\n      : `${options.baseUrl}.oidc/token`,\n  } as Record<string, string>;\n}\n"]}

package/dist/runtime/oidc-issuer.d.ts

@@ -1,9 +1,10 @@
 export type RuntimeEnv = Record<string, string | undefined>;
-export declare const OIDC_ISSUER_ENV_KEYS: readonly ["CSS_OIDC_ISSUER"];
+export declare const OIDC_ISSUER_ENV_KEYS: readonly ["oidcIssuer"];
 /**
  * Resolve the external IdP issuer used by local/SP mode.
  *
- * CSS_OIDC_ISSUER is the single supported process-level contract.
+ * `oidcIssuer` is the canonical xpod config/shorthand key and the single
+ * supported process-level contract.
  * Cloud API endpoints are not identity issuers and must not implicitly
  * switch a local node into SP mode.
  */

package/dist/runtime/oidc-issuer.js

@@ -4,7 +4,7 @@ exports.OIDC_ISSUER_ENV_KEYS = void 0;
 exports.resolveExternalOidcIssuer = resolveExternalOidcIssuer;
 exports.oidcTokenEndpoint = oidcTokenEndpoint;
 exports.OIDC_ISSUER_ENV_KEYS = [
-    'CSS_OIDC_ISSUER',
+    'oidcIssuer',
 ];
 function cleanEnvValue(value) {
     const trimmed = value?.trim();
@@ -13,7 +13,8 @@ function cleanEnvValue(value) {
 /**
  * Resolve the external IdP issuer used by local/SP mode.
  *
- * CSS_OIDC_ISSUER is the single supported process-level contract.
+ * `oidcIssuer` is the canonical xpod config/shorthand key and the single
+ * supported process-level contract.
  * Cloud API endpoints are not identity issuers and must not implicitly
  * switch a local node into SP mode.
  */

package/dist/runtime/oidc-issuer.js.map

@@ -1 +1 @@
-{"version":3,"file":"oidc-issuer.js","sourceRoot":"","sources":["../../src/runtime/oidc-issuer.ts"],"names":[],"mappings":";;;AAkBA,8DAQC;AAED,8CAEC;AA5BY,QAAA,oBAAoB,GAAG;IAClC,iBAAiB;CACT,CAAC;AAEX,SAAS,aAAa,CAAC,KAAyB;IAC9C,MAAM,OAAO,GAAG,KAAK,EAAE,IAAI,EAAE,CAAC;IAC9B,OAAO,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;AACvC,CAAC;AAED;;;;;;GAMG;AACH,SAAgB,yBAAyB,CAAC,GAAe;IACvD,KAAK,MAAM,GAAG,IAAI,4BAAoB,EAAE,CAAC;QACvC,MAAM,KAAK,GAAG,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;QACtC,IAAI,KAAK,EAAE,CAAC;YACV,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAgB,iBAAiB,CAAC,MAAc;IAC9C,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,cAAc,CAAC;AACpD,CAAC","sourcesContent":["export type RuntimeEnv = Record<string, string | undefined>;\n\nexport const OIDC_ISSUER_ENV_KEYS = [\n  'CSS_OIDC_ISSUER',\n] as const;\n\nfunction cleanEnvValue(value: string | undefined): string | undefined {\n  const trimmed = value?.trim();\n  return trimmed ? trimmed : undefined;\n}\n\n/**\n * Resolve the external IdP issuer used by local/SP mode.\n *\n * CSS_OIDC_ISSUER is the single supported process-level contract.\n * Cloud API endpoints are not identity issuers and must not implicitly\n * switch a local node into SP mode.\n */\nexport function resolveExternalOidcIssuer(env: RuntimeEnv): string | undefined {\n  for (const key of OIDC_ISSUER_ENV_KEYS) {\n    const value = cleanEnvValue(env[key]);\n    if (value) {\n      return value;\n    }\n  }\n  return undefined;\n}\n\nexport function oidcTokenEndpoint(issuer: string): string {\n  return `${issuer.replace(/\\/$/, '')}/.oidc/token`;\n}\n"]}
+{"version":3,"file":"oidc-issuer.js","sourceRoot":"","sources":["../../src/runtime/oidc-issuer.ts"],"names":[],"mappings":";;;AAmBA,8DAQC;AAED,8CAEC;AA7BY,QAAA,oBAAoB,GAAG;IAClC,YAAY;CACJ,CAAC;AAEX,SAAS,aAAa,CAAC,KAAyB;IAC9C,MAAM,OAAO,GAAG,KAAK,EAAE,IAAI,EAAE,CAAC;IAC9B,OAAO,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;AACvC,CAAC;AAED;;;;;;;GAOG;AACH,SAAgB,yBAAyB,CAAC,GAAe;IACvD,KAAK,MAAM,GAAG,IAAI,4BAAoB,EAAE,CAAC;QACvC,MAAM,KAAK,GAAG,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;QACtC,IAAI,KAAK,EAAE,CAAC;YACV,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAgB,iBAAiB,CAAC,MAAc;IAC9C,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,cAAc,CAAC;AACpD,CAAC","sourcesContent":["export type RuntimeEnv = Record<string, string | undefined>;\n\nexport const OIDC_ISSUER_ENV_KEYS = [\n  'oidcIssuer',\n] as const;\n\nfunction cleanEnvValue(value: string | undefined): string | undefined {\n  const trimmed = value?.trim();\n  return trimmed ? trimmed : undefined;\n}\n\n/**\n * Resolve the external IdP issuer used by local/SP mode.\n *\n * `oidcIssuer` is the canonical xpod config/shorthand key and the single\n * supported process-level contract.\n * Cloud API endpoints are not identity issuers and must not implicitly\n * switch a local node into SP mode.\n */\nexport function resolveExternalOidcIssuer(env: RuntimeEnv): string | undefined {\n  for (const key of OIDC_ISSUER_ENV_KEYS) {\n    const value = cleanEnvValue(env[key]);\n    if (value) {\n      return value;\n    }\n  }\n  return undefined;\n}\n\nexport function oidcTokenEndpoint(issuer: string): string {\n  return `${issuer.replace(/\\/$/, '')}/.oidc/token`;\n}\n"]}

package/dist/runtime/runtime-types.d.ts

@@ -29,6 +29,7 @@ export interface XpodRuntimeOptions {
     runtimeRoot?: string;
     rootFilePath?: string;
     sparqlEndpoint?: string;
+    rdfIndexPath?: string;
     identityDbUrl?: string;
     usageDbUrl?: string;
     logLevel?: string;

package/dist/runtime/runtime-types.js.map

@@ -1 +1 @@
-{"version":3,"file":"runtime-types.js","sourceRoot":"","sources":["../../src/runtime/runtime-types.ts"],"names":[],"mappings":"","sourcesContent":["import type { AuthContext } from '../api/auth/AuthContext';\nimport type { Supervisor } from '../supervisor/Supervisor';\nimport type { RuntimeDriver } from './driver/types';\nimport type { RuntimeHost } from './host/types';\nimport type { RuntimePlatform } from './platform/types';\nimport type { ApiRuntimeRunner, CssRuntimeRunner, GatewayRuntimeRunner } from './runner/types';\n\nexport interface XpodRuntimePorts {\n  gateway?: number;\n  css?: number;\n  api?: number;\n}\n\nexport interface XpodRuntimeSockets {\n  gateway?: string;\n  css?: string;\n  api?: string;\n}\n\nexport interface XpodRuntimeOptions {\n  mode?: 'local' | 'cloud';\n  open?: boolean;\n  authMode?: 'acp' | 'acl' | 'allow-all';\n  apiOpen?: boolean;\n  authContext?: AuthContext;\n  envFile?: string;\n  env?: Record<string, string | undefined>;\n  shorthand?: Record<string, string | number | boolean>;\n  baseUrl?: string;\n  bindHost?: string;\n  transport?: 'auto' | 'socket' | 'port';\n  runtimeRoot?: string;\n  rootFilePath?: string;\n  sparqlEndpoint?: string;\n  identityDbUrl?: string;\n  usageDbUrl?: string;\n  logLevel?: string;\n  gatewayPort?: number;\n  cssPort?: number;\n  apiPort?: number;\n  gatewaySocketPath?: string;\n  cssSocketPath?: string;\n  apiSocketPath?: string;\n  edgeNodesEnabled?: boolean;\n  centerRegistrationEnabled?: boolean;\n  driver?: RuntimeDriver;\n  host?: RuntimeHost;\n  platform?: RuntimePlatform;\n  cssRunner?: CssRuntimeRunner;\n  apiRunner?: ApiRuntimeRunner;\n  gatewayRunner?: GatewayRuntimeRunner;\n}\n\nexport interface XpodRuntimeHandle {\n  id: string;\n  mode: 'local' | 'cloud';\n  transport: 'socket' | 'port';\n  baseUrl: string;\n  supervisor: Supervisor;\n  ports: XpodRuntimePorts;\n  sockets: XpodRuntimeSockets;\n  fetch: (input: string | URL | Request, init?: RequestInit) => Promise<Response>;\n  stop: () => Promise<void>;\n}\n"]}
+{"version":3,"file":"runtime-types.js","sourceRoot":"","sources":["../../src/runtime/runtime-types.ts"],"names":[],"mappings":"","sourcesContent":["import type { AuthContext } from '../api/auth/AuthContext';\nimport type { Supervisor } from '../supervisor/Supervisor';\nimport type { RuntimeDriver } from './driver/types';\nimport type { RuntimeHost } from './host/types';\nimport type { RuntimePlatform } from './platform/types';\nimport type { ApiRuntimeRunner, CssRuntimeRunner, GatewayRuntimeRunner } from './runner/types';\n\nexport interface XpodRuntimePorts {\n  gateway?: number;\n  css?: number;\n  api?: number;\n}\n\nexport interface XpodRuntimeSockets {\n  gateway?: string;\n  css?: string;\n  api?: string;\n}\n\nexport interface XpodRuntimeOptions {\n  mode?: 'local' | 'cloud';\n  open?: boolean;\n  authMode?: 'acp' | 'acl' | 'allow-all';\n  apiOpen?: boolean;\n  authContext?: AuthContext;\n  envFile?: string;\n  env?: Record<string, string | undefined>;\n  shorthand?: Record<string, string | number | boolean>;\n  baseUrl?: string;\n  bindHost?: string;\n  transport?: 'auto' | 'socket' | 'port';\n  runtimeRoot?: string;\n  rootFilePath?: string;\n  sparqlEndpoint?: string;\n  rdfIndexPath?: string;\n  identityDbUrl?: string;\n  usageDbUrl?: string;\n  logLevel?: string;\n  gatewayPort?: number;\n  cssPort?: number;\n  apiPort?: number;\n  gatewaySocketPath?: string;\n  cssSocketPath?: string;\n  apiSocketPath?: string;\n  edgeNodesEnabled?: boolean;\n  centerRegistrationEnabled?: boolean;\n  driver?: RuntimeDriver;\n  host?: RuntimeHost;\n  platform?: RuntimePlatform;\n  cssRunner?: CssRuntimeRunner;\n  apiRunner?: ApiRuntimeRunner;\n  gatewayRunner?: GatewayRuntimeRunner;\n}\n\nexport interface XpodRuntimeHandle {\n  id: string;\n  mode: 'local' | 'cloud';\n  transport: 'socket' | 'port';\n  baseUrl: string;\n  supervisor: Supervisor;\n  ports: XpodRuntimePorts;\n  sockets: XpodRuntimeSockets;\n  fetch: (input: string | URL | Request, init?: RequestInit) => Promise<Response>;\n  stop: () => Promise<void>;\n}\n"]}

package/dist/solidfs/LocalFirstRdfRepresentationResolver.d.ts

@@ -0,0 +1,21 @@
+import { type AuxiliaryStrategy, type Representation, type ResourceIdentifier } from '@solid/community-server';
+export interface LocalFirstRdfRepresentationResolverOptions {
+    accessor: unknown;
+    metadataStrategy: Pick<AuxiliaryStrategy, 'isAuxiliaryIdentifier'>;
+}
+export interface LocalFirstRdfRepresentationResolverLike {
+    resolve(identifier: ResourceIdentifier): Promise<Representation | undefined>;
+}
+/**
+ * Resolves user-facing RDF GETs from the local `.ttl` / `.jsonld` file mirror.
+ *
+ * DataAccessor.getData() keeps CSS' internal `internal/quads` contract; this
+ * resolver is the explicit SolidFS content path for local-first HTTP reads.
+ */
+export declare class LocalFirstRdfRepresentationResolver implements LocalFirstRdfRepresentationResolverLike {
+    private readonly accessor;
+    private readonly metadataStrategy;
+    constructor(options: LocalFirstRdfRepresentationResolverOptions);
+    resolve(identifier: ResourceIdentifier): Promise<Representation | undefined>;
+    private isLocalRdfReadable;
+}

package/dist/solidfs/LocalFirstRdfRepresentationResolver.js

@@ -0,0 +1,38 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.LocalFirstRdfRepresentationResolver = void 0;
+const community_server_1 = require("@solid/community-server");
+/**
+ * Resolves user-facing RDF GETs from the local `.ttl` / `.jsonld` file mirror.
+ *
+ * DataAccessor.getData() keeps CSS' internal `internal/quads` contract; this
+ * resolver is the explicit SolidFS content path for local-first HTTP reads.
+ */
+class LocalFirstRdfRepresentationResolver {
+    constructor(options) {
+        this.accessor = options.accessor;
+        this.metadataStrategy = options.metadataStrategy;
+    }
+    async resolve(identifier) {
+        if (this.metadataStrategy.isAuxiliaryIdentifier(identifier) || !this.isLocalRdfReadable(this.accessor)) {
+            return undefined;
+        }
+        try {
+            const document = await this.accessor.getLocalRdfDocument(identifier);
+            return new community_server_1.BasicRepresentation(document.data, document.metadata);
+        }
+        catch (error) {
+            if (community_server_1.NotFoundHttpError.isInstance(error)) {
+                return undefined;
+            }
+            throw error;
+        }
+    }
+    isLocalRdfReadable(accessor) {
+        return typeof accessor === 'object' &&
+            accessor !== null &&
+            typeof accessor.getLocalRdfDocument === 'function';
+    }
+}
+exports.LocalFirstRdfRepresentationResolver = LocalFirstRdfRepresentationResolver;
+//# sourceMappingURL=LocalFirstRdfRepresentationResolver.js.map

package/dist/solidfs/LocalFirstRdfRepresentationResolver.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"LocalFirstRdfRepresentationResolver.js","sourceRoot":"","sources":["../../src/solidfs/LocalFirstRdfRepresentationResolver.ts"],"names":[],"mappings":";;;AAAA,8DAMiC;AAajC;;;;;GAKG;AACH,MAAa,mCAAmC;IAI9C,YAAmB,OAAmD;QACpE,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;QACjC,IAAI,CAAC,gBAAgB,GAAG,OAAO,CAAC,gBAAgB,CAAC;IACnD,CAAC;IAEM,KAAK,CAAC,OAAO,CAAC,UAA8B;QACjD,IAAI,IAAI,CAAC,gBAAgB,CAAC,qBAAqB,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;YACvG,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,mBAAmB,CAAC,UAAU,CAAC,CAAC;YACrE,OAAO,IAAI,sCAAmB,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACnE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,oCAAiB,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;gBACxC,OAAO,SAAS,CAAC;YACnB,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAEO,kBAAkB,CAAC,QAAiB;QAC1C,OAAO,OAAO,QAAQ,KAAK,QAAQ;YACjC,QAAQ,KAAK,IAAI;YACjB,OAAQ,QAA8C,CAAC,mBAAmB,KAAK,UAAU,CAAC;IAC9F,CAAC;CACF;AA9BD,kFA8BC","sourcesContent":["import {\n  BasicRepresentation,\n  NotFoundHttpError,\n  type AuxiliaryStrategy,\n  type Representation,\n  type ResourceIdentifier,\n} from '@solid/community-server';\n\nimport type { LocalRdfReadableAccessor } from '../storage/accessors/MixDataAccessor';\n\nexport interface LocalFirstRdfRepresentationResolverOptions {\n  accessor: unknown;\n  metadataStrategy: Pick<AuxiliaryStrategy, 'isAuxiliaryIdentifier'>;\n}\n\nexport interface LocalFirstRdfRepresentationResolverLike {\n  resolve(identifier: ResourceIdentifier): Promise<Representation | undefined>;\n}\n\n/**\n * Resolves user-facing RDF GETs from the local `.ttl` / `.jsonld` file mirror.\n *\n * DataAccessor.getData() keeps CSS' internal `internal/quads` contract; this\n * resolver is the explicit SolidFS content path for local-first HTTP reads.\n */\nexport class LocalFirstRdfRepresentationResolver implements LocalFirstRdfRepresentationResolverLike {\n  private readonly accessor: unknown;\n  private readonly metadataStrategy: Pick<AuxiliaryStrategy, 'isAuxiliaryIdentifier'>;\n\n  public constructor(options: LocalFirstRdfRepresentationResolverOptions) {\n    this.accessor = options.accessor;\n    this.metadataStrategy = options.metadataStrategy;\n  }\n\n  public async resolve(identifier: ResourceIdentifier): Promise<Representation | undefined> {\n    if (this.metadataStrategy.isAuxiliaryIdentifier(identifier) || !this.isLocalRdfReadable(this.accessor)) {\n      return undefined;\n    }\n\n    try {\n      const document = await this.accessor.getLocalRdfDocument(identifier);\n      return new BasicRepresentation(document.data, document.metadata);\n    } catch (error) {\n      if (NotFoundHttpError.isInstance(error)) {\n        return undefined;\n      }\n      throw error;\n    }\n  }\n\n  private isLocalRdfReadable(accessor: unknown): accessor is LocalRdfReadableAccessor {\n    return typeof accessor === 'object' &&\n      accessor !== null &&\n      typeof (accessor as { getLocalRdfDocument?: unknown }).getLocalRdfDocument === 'function';\n  }\n}\n"]}

package/dist/solidfs/LocalSolidFS.d.ts

@@ -0,0 +1,18 @@
+import { MaterializedWorkspace, SolidFS, SolidFsHydrator, SolidFsPrepareInput, SolidFsSyncer } from './types';
+export interface LocalSolidFSOptions {
+    workRoot?: string;
+    syncer?: SolidFsSyncer;
+    hydrator?: SolidFsHydrator;
+}
+export declare class LocalSolidFS implements SolidFS {
+    private readonly workRoot;
+    private readonly syncer?;
+    private readonly hydrator?;
+    constructor(options?: LocalSolidFSOptions);
+    prepare(input: SolidFsPrepareInput): Promise<MaterializedWorkspace>;
+    private resolveWorkspacePath;
+    private createCopyWorkdir;
+    private createHydratedWorkdir;
+    private createManifest;
+    private assertSourceDirectory;
+}