@undefineds.co/xpod 0.3.74 → 0.4.0-rc.139

package/dist/provision/ProvisionPodCreator.d.ts

@@ -4,7 +4,7 @@
  * 等位替换 CSS 的 BasePodCreator。
  *
  * 检查 settings 里有没有 provisionCode：
- * - 有 → 解码 JWT，核验锁外预创建的 Local Pod 回执，并写入 Account 绑定
+ * - 有 → 解码签名 provision code，核验锁外预创建的 Local Pod 回执，并写入 Account 绑定
  * - 没有 → 委托给原始 BasePodCreator（标准本地创建）
  */
 import { BasePodCreator, type PodCreatorInput, type PodCreatorOutput, type BasePodCreatorArgs, type ResourceStore } from '@solid/community-server';

package/dist/provision/ProvisionPodCreator.js

@@ -5,7 +5,7 @@
  * 等位替换 CSS 的 BasePodCreator。
  *
  * 检查 settings 里有没有 provisionCode：
- * - 有 → 解码 JWT，核验锁外预创建的 Local Pod 回执，并写入 Account 绑定
+ * - 有 → 解码签名 provision code，核验锁外预创建的 Local Pod 回执，并写入 Account 绑定
  * - 没有 → 委托给原始 BasePodCreator（标准本地创建）
  */
 Object.defineProperty(exports, "__esModule", { value: true });
@@ -130,8 +130,9 @@ class ProvisionPodCreator extends community_server_1.BasePodCreator {
             });
         }
         // CSS Account Pod 创建运行在 6 秒资源锁内。任何 Local/Cloud/P2P 网络请求
-        // 都必须在进入此处理器前完成；这里仅允许本地 identity DB 读取、HMAC
-        // 核验和 Account 写入；WebID profile 已由 Local SP 创建。
+        // 都必须在进入此处理器前完成。锁内工作明确限定为：读取本地 SP
+        // receipt secret、HMAC 核验，以及 CSS 原生 WebID-link/Pod account-store
+        // 读写。这里不会读取或改写远端 WebID profile；它已由 Local SP 创建。
         const receiptSecret = await this.resolveRemoteReceiptSecret(payload.nodeId);
         if (!receiptSecret) {
             throw new community_server_1.BadRequestHttpError('Local Pod preparation could not be verified.');

package/dist/runtime/css-process.js

@@ -272,7 +272,6 @@ function buildApiChildEnv(options) {
         API_PORT: options.apiPort.toString(),
         XPOD_MAIN_PORT: options.mainPort.toString(),
         CSS_PORT: options.cssPort.toString(),
-        CSS_INTERNAL_URL: `http://localhost:${options.cssPort}`,
         CSS_BASE_URL: baseUrl,
         ...(options.gatewayAdminProxyAuthSecret ? { XPOD_GATEWAY_ADMIN_PROXY_AUTH_SECRET: options.gatewayAdminProxyAuthSecret } : {}),
         ...(options.rdfIndexPath ? { CSS_RDF_INDEX_PATH: options.rdfIndexPath } : {}),

package/dist/search/RdfSearchIntentSink.d.ts

@@ -0,0 +1,17 @@
+import type { RdfTextSourceInput } from '../storage/rdf';
+/**
+ * Narrow CSS-side durable intent sink for text-index commits.
+ *
+ * The sink records only Pod/source/profile coordination state in the identity
+ * database. It does not persist provider API keys, access tokens, or client
+ * secrets. Pod ownership is resolved through the canonical Pod lookup table.
+ * Sources that cannot be mapped to a known Pod fail closed by skipping durable
+ * background work rather than blocking the already-authorized resource write.
+ */
+export declare class RdfSearchReconciliationIntentSink {
+    private readonly repository;
+    private readonly podLookupRepository;
+    constructor(identityDbUrl: string);
+    recordTextCommitted(source: RdfTextSourceInput): Promise<void>;
+    recordSourceDeleted(sourceKey: string): Promise<void>;
+}

package/dist/search/RdfSearchIntentSink.js

@@ -0,0 +1,46 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.RdfSearchReconciliationIntentSink = void 0;
+const PodLookupRepository_1 = require("../identity/drizzle/PodLookupRepository");
+const db_1 = require("../identity/drizzle/db");
+const RdfSearchReconciliationRepository_1 = require("./RdfSearchReconciliationRepository");
+/**
+ * Narrow CSS-side durable intent sink for text-index commits.
+ *
+ * The sink records only Pod/source/profile coordination state in the identity
+ * database. It does not persist provider API keys, access tokens, or client
+ * secrets. Pod ownership is resolved through the canonical Pod lookup table.
+ * Sources that cannot be mapped to a known Pod fail closed by skipping durable
+ * background work rather than blocking the already-authorized resource write.
+ */
+class RdfSearchReconciliationIntentSink {
+    constructor(identityDbUrl) {
+        const db = (0, db_1.getIdentityDatabase)(identityDbUrl);
+        this.repository = new RdfSearchReconciliationRepository_1.RdfSearchReconciliationRepository(db);
+        this.podLookupRepository = new PodLookupRepository_1.PodLookupRepository(db);
+    }
+    async recordTextCommitted(source) {
+        const sourceKey = source.sourceKey ?? source.source;
+        const pod = await this.podLookupRepository.findByResourceIdentifier(source.source);
+        if (!pod) {
+            return;
+        }
+        const podRoot = pod.storageUrl ?? pod.baseUrl;
+        if (!podRoot) {
+            return;
+        }
+        await this.repository.waitForConfig({
+            sourceKey,
+            sourceUri: source.source,
+            podRoot,
+            sourceHash: source.sourceHash,
+            sourceVersion: source.sourceVersion,
+            reason: 'text-source-committed',
+        });
+    }
+    async recordSourceDeleted(sourceKey) {
+        await this.repository.deleteSource(sourceKey);
+    }
+}
+exports.RdfSearchReconciliationIntentSink = RdfSearchReconciliationIntentSink;
+//# sourceMappingURL=RdfSearchIntentSink.js.map

package/dist/search/RdfSearchIntentSink.jsonld

@@ -0,0 +1,47 @@
+{
+  "@context": [
+    "https://linkedsoftwaredependencies.org/bundles/npm/@undefineds.co/xpod/^0.0.0/components/context.jsonld"
+  ],
+  "@id": "npmd:@undefineds.co/xpod",
+  "components": [
+    {
+      "@id": "undefineds:dist/search/RdfSearchIntentSink.jsonld#RdfSearchReconciliationIntentSink",
+      "@type": "Class",
+      "requireElement": "RdfSearchReconciliationIntentSink",
+      "comment": "Narrow CSS-side durable intent sink for text-index commits.  The sink records only Pod/source/profile coordination state in the identity database. It does not persist provider API keys, access tokens, or client secrets. Pod ownership is resolved through the canonical Pod lookup table. Sources that cannot be mapped to a known Pod fail closed by skipping durable background work rather than blocking the already-authorized resource write.",
+      "parameters": [
+        {
+          "@id": "undefineds:dist/search/RdfSearchIntentSink.jsonld#RdfSearchReconciliationIntentSink_identityDbUrl",
+          "range": "xsd:string"
+        }
+      ],
+      "memberFields": [
+        {
+          "@id": "undefineds:dist/search/RdfSearchIntentSink.jsonld#RdfSearchReconciliationIntentSink__member_repository",
+          "memberFieldName": "repository"
+        },
+        {
+          "@id": "undefineds:dist/search/RdfSearchIntentSink.jsonld#RdfSearchReconciliationIntentSink__member_podLookupRepository",
+          "memberFieldName": "podLookupRepository"
+        },
+        {
+          "@id": "undefineds:dist/search/RdfSearchIntentSink.jsonld#RdfSearchReconciliationIntentSink__member_constructor",
+          "memberFieldName": "constructor"
+        },
+        {
+          "@id": "undefineds:dist/search/RdfSearchIntentSink.jsonld#RdfSearchReconciliationIntentSink__member_recordTextCommitted",
+          "memberFieldName": "recordTextCommitted"
+        },
+        {
+          "@id": "undefineds:dist/search/RdfSearchIntentSink.jsonld#RdfSearchReconciliationIntentSink__member_recordSourceDeleted",
+          "memberFieldName": "recordSourceDeleted"
+        }
+      ],
+      "constructorArguments": [
+        {
+          "@id": "undefineds:dist/search/RdfSearchIntentSink.jsonld#RdfSearchReconciliationIntentSink_identityDbUrl"
+        }
+      ]
+    }
+  ]
+}

package/dist/search/RdfSearchReconciliationRepository.d.ts

@@ -0,0 +1,81 @@
+import type { IdentityDatabase } from '../identity/drizzle/db';
+export type RdfSearchReconciliationState = 'waiting-config' | 'retryable' | 'blocked-config' | 'applied' | 'ready' | 'in-progress';
+export interface RdfSearchDesiredProfile {
+    providerId: string;
+    model: string;
+    modelVersion?: string;
+    configFingerprint: string;
+    sourceHash?: string;
+    sourceVersion?: string;
+}
+export interface RdfSearchReconciliationInput extends RdfSearchDesiredProfile {
+    sourceKey: string;
+    sourceUri: string;
+    podRoot: string;
+    reason: string;
+}
+export interface RdfSearchRetryableInput extends RdfSearchReconciliationInput {
+    failureCategory: string;
+    nextAttemptAt: Date;
+}
+export interface RdfSearchAppliedInput extends RdfSearchReconciliationInput {
+}
+export interface RdfSearchBlockedConfigInput extends RdfSearchReconciliationInput {
+    failureCategory: string;
+}
+export interface RdfSearchConfigWaitInput {
+    sourceKey: string;
+    sourceUri: string;
+    podRoot: string;
+    sourceHash?: string;
+    sourceVersion?: string;
+    reason: string;
+    failureCategory?: string;
+}
+export interface RdfSearchReconciliationRow {
+    sourceKey: string;
+    sourceUri: string;
+    podRoot: string;
+    providerId?: string;
+    model?: string;
+    modelVersion?: string;
+    configFingerprint?: string;
+    sourceHash?: string;
+    sourceVersion?: string;
+    state: RdfSearchReconciliationState;
+    reason: string;
+    attemptCount: number;
+    nextAttemptAt: Date;
+    leaseOwner?: string;
+    leaseExpiresAt?: Date;
+    failureCategory?: string;
+    updatedAt: Date;
+}
+/**
+ * Durable product queue for RDF FTS/VEC parity work.
+ *
+ * SolidFS writes may complete before the user's Pod has an embedding profile or
+ * provider quota. This repository keeps one desired embedding profile per
+ * source so skipped vector indexing remains recoverable after config, quota, or
+ * model changes.
+ */
+export declare class RdfSearchReconciliationRepository {
+    private readonly db;
+    private readonly ready;
+    constructor(db: IdentityDatabase);
+    waitForConfig(input: RdfSearchConfigWaitInput, now?: Date): Promise<RdfSearchReconciliationRow>;
+    upsertDesired(input: RdfSearchReconciliationInput, now?: Date): Promise<RdfSearchReconciliationRow>;
+    upsertRetryable(input: RdfSearchRetryableInput, now?: Date): Promise<RdfSearchReconciliationRow>;
+    upsertApplied(input: RdfSearchAppliedInput, now?: Date): Promise<RdfSearchReconciliationRow>;
+    upsertBlockedConfig(input: RdfSearchBlockedConfigInput, now?: Date): Promise<RdfSearchReconciliationRow>;
+    get(sourceKey: string): Promise<RdfSearchReconciliationRow | undefined>;
+    listRunnable(now?: Date, limit?: number): Promise<RdfSearchReconciliationRow[]>;
+    claimNext(workerId: string, now?: Date, leaseDurationMs?: number): Promise<RdfSearchReconciliationRow | undefined>;
+    markRetryable(sourceKey: string, workerId: string, failureCategory: string, nextAttemptAt: Date, now?: Date): Promise<void>;
+    markBlockedConfig(sourceKey: string, workerId: string, failureCategory: string, now?: Date): Promise<void>;
+    complete(sourceKey: string, workerId: string, now?: Date): Promise<void>;
+    deleteSource(sourceKey: string): Promise<void>;
+    listPodRoots(): Promise<string[]>;
+    private initialize;
+    private assertSourceIdentity;
+}