@undefineds.co/xpod 0.4.10 → 0.4.11

package/dist/identity/drizzle/PodLookupRepository.js

@@ -8,6 +8,12 @@ const db_1 = require("./db");
  *
  * Reads Pod facts from the canonical identity_store table and from CSS
  * WrappedIndexedStorage rows when that storage backend is active.
+ *
+ * 点查（findById / findAllByWebId / findByWebIds / listByAccountId）走字段下推
+ * 快路径，避免每请求全扫 identity_store；KV 历史账户记录独立读取，
+ * 同 ID 的 canonical 记录整条优先，包括无法解析的记录，不能恢复旧身份。
+ * findByResourceIdentifier / listAllPods 本质上需要
+ * 候选全集，仍保留全量读取（identity_store 侧用反向前缀 LIKE 下推预筛）。
  */
 class PodLookupRepository {
     constructor(db, kvTableName) {
@@ -17,9 +23,13 @@ class PodLookupRepository {
     }
     /**
      * Find Pod by resource path (matches longest canonical storage/base URL prefix).
+     *
+     * kv 账户行无法按 URL 下推，保持全量解析（cloud 部署 kv 为空，local 规模有限）。
      */
     async findByResourceIdentifier(resourcePath) {
-        const pods = await this.getAllPods();
+        const kvRows = await this.getAccountRowsFromKv();
+        const nodeAssignments = await this.getNodeAssignments();
+        const pods = await this.mergeCanonicalPods(this.extractKvPods(kvRows, nodeAssignments), await this.findIndexedStorePodsByResource(resourcePath, nodeAssignments), nodeAssignments);
         let bestMatch;
         let bestLength = 0;
         for (const pod of pods) {
@@ -33,16 +43,21 @@ class PodLookupRepository {
     }
     /**
      * Get Pod by ID.
+     *
+     * 快路径按主键直查 identity_store 的 pod 行并补齐 owner/node 关联；
+     * 独立读取 KV 历史记录，并按原始 ID 检查 canonical 遮蔽。
      */
     async findById(podId) {
-        const pods = await this.getAllPods();
-        return pods.find((p) => p.podId === podId);
+        const fast = await this.getIndexedStorePodsByIds([podId]);
+        const legacy = (await this.getLegacyPods()).filter((pod) => pod.podId === podId);
+        return (await this.mergeCanonicalPods(legacy, fast)).find((pod) => pod.podId === podId);
     }
     /**
-     * Find Pod by an explicitly recorded owner WebID URL.
+     * Find Pod by an explicit owner or pod.webId URL.
      *
-     * Account WebID links are not ownership. IdP/SP split deployments still use
-     * the complete recorded WebID, independently of the storage base URL.
+     * Pod ownership stores WebIDs separately from Pod base URLs. This is
+     * the precise lookup for IdP/SP split deployments where the WebID path does
+     * not have to match the storage base URL.
      */
     async findByWebId(webId) {
         return (await this.findAllByWebId(webId))[0];
@@ -55,54 +70,32 @@ class PodLookupRepository {
      * instead of accepting the first account record returned by CSS storage.
      */
     async findAllByWebId(webId) {
-        const exact = exactWebId(webId);
-        if (!exact) {
-            return [];
-        }
-        const results = [];
-        const pods = await this.getAllPods();
-        for (const pod of pods) {
-            const matchedWebId = getPodWebIds(pod).find((candidate) => exactWebId(candidate) === exact);
-            if (matchedWebId) {
-                results.push({
-                    ...pod,
-                    webId: matchedWebId,
-                });
-            }
-        }
-        return results;
+        return this.findByWebIds([webId]);
     }
     /**
-     * Find Pods by explicit owner WebID URLs in one scan.
+     * Find Pods by explicit WebID bindings with batched canonical queries.
      */
     async findByWebIds(webIds) {
         const exactTargets = new Set(webIds.map(exactWebId).filter((value) => Boolean(value)));
         if (exactTargets.size === 0) {
             return [];
         }
-        const results = [];
-        const pods = await this.getAllPods();
-        for (const pod of pods) {
-            const matchedWebId = getPodWebIds(pod).find((candidate) => {
-                const exact = exactWebId(candidate);
-                return exact ? exactTargets.has(exact) : false;
-            });
-            if (!matchedWebId) {
-                continue;
-            }
-            results.push({
-                ...pod,
-                webId: matchedWebId,
-            });
-        }
-        return results;
+        const legacy = await this.getLegacyPods();
+        const candidates = await this.findIndexedStorePodsByWebIds([...exactTargets]);
+        return this.filterPodsByWebIds(await this.mergeCanonicalPods(legacy, candidates), exactTargets);
     }
     /**
      * List Pods for a specific account.
+     *
+     * 定向查询与全扫描等价：kv 按账户键直取，identity_store 按 accountId 下推，
+     * canonical 整条优先与 getAllPods 一致，KV 扫描补齐 .json 等历史键。
      */
     async listByAccountId(accountId) {
-        const pods = await this.getAllPods();
-        return pods.filter((pod) => pod.accountId === accountId);
+        const nodeAssignments = await this.getNodeAssignments();
+        const storePods = await this.getIndexedStorePodsByAccountId(accountId, nodeAssignments);
+        const legacy = (await this.getLegacyPods(nodeAssignments)).filter((pod) => pod.accountId === accountId);
+        return (await this.mergeCanonicalPods(legacy, storePods, nodeAssignments))
+            .filter((pod) => pod.accountId === accountId);
     }
     /**
      * List all pods.
@@ -116,8 +109,18 @@ class PodLookupRepository {
     async getAllPods() {
         const result = await this.getAccountRowsFromKv();
         const nodeAssignments = await this.getNodeAssignments();
+        return this.mergeCanonicalPods(this.extractKvPods(result, nodeAssignments), await this.getPodsFromIndexedStore(nodeAssignments), nodeAssignments);
+    }
+    // Legacy KV rows need independent discovery: an indexed match says nothing
+    // about other unindexed Pods or overlapping records. Keep identity_store
+    // queries targeted while applying canonical precedence to overlapping IDs.
+    async getLegacyPods(nodeAssignments) {
+        const rows = await this.getAccountRowsFromKv();
+        return this.extractKvPods(rows, nodeAssignments ?? await this.getNodeAssignments());
+    }
+    extractKvPods(rows, nodeAssignments) {
         const pods = [];
-        for (const row of result) {
+        for (const row of rows) {
             if (!row.key || row.value === undefined) {
                 continue;
             }
@@ -127,36 +130,13 @@ class PodLookupRepository {
                     continue;
                 }
                 const data = unwrapStoredValue(typeof row.value === 'string' ? JSON.parse(row.value) : row.value);
-                const podMap = data['**pod**'] || data.pod || {};
-                for (const [podId, podData] of Object.entries(podMap)) {
-                    const pod = podData;
-                    if (pod.baseUrl && typeof pod.baseUrl === 'string') {
-                        const storageUrl = stringValue(pod.storageUrl) ?? stringValue(pod.storage);
-                        const podWebIds = dedupeStrings(explicitPodWebIds(pod));
-                        pods.push({
-                            podId,
-                            accountId,
-                            baseUrl: pod.baseUrl,
-                            storageUrl,
-                            webId: podWebIds[0],
-                            ...webIdsProperty(podWebIds),
-                            nodeId: typeof pod.nodeId === 'string' ? pod.nodeId : findNodeIdForPod(nodeAssignments, [storageUrl, pod.baseUrl]),
-                            edgeNodeId: typeof pod.edgeNodeId === 'string' ? pod.edgeNodeId : undefined,
-                        });
-                    }
-                }
+                pods.push(...this.extractPodsFromAccountData(accountId, data, nodeAssignments));
             }
             catch {
                 // Skip malformed entries.
             }
         }
-        const indexed = await this.getPodsFromIndexedStore(nodeAssignments);
-        // Presence in the canonical table shadows the whole legacy record, even
-        // when the canonical payload is incomplete. Never resurrect old owners.
-        return [...new Map([
-                ...pods.filter((pod) => !indexed.podIds.has(pod.podId)),
-                ...indexed.pods,
-            ].map((pod) => [pod.podId, pod])).values()];
+        return pods;
     }
     async getAccountRowsFromKv() {
         const kvTableId = drizzle_orm_1.sql.identifier(this.kvTableName);
@@ -193,50 +173,197 @@ class PodLookupRepository {
             return [];
         }
     }
+    // Predicate pushdown can omit a canonical replacement with a different owner,
+    // account or URL. Check legacy IDs separately, registering existence before
+    // parsing so a malformed canonical record also suppresses the old Pod.
+    async mergeCanonicalPods(legacy, candidates, nodeAssignments) {
+        const ids = dedupeStrings(legacy.map((pod) => pod.podId));
+        const rows = ids.length > 0
+            ? await this.queryIndexedStoreRows((0, drizzle_orm_1.sql) `container = 'pod' AND ${idIn(ids)}`)
+            : [];
+        const canonicalIds = new Set(rows.map((row) => row.id));
+        const replacements = rows.length > 0
+            ? await this.enrichIndexedStorePods(rowsToPodPayloadMap(rows), nodeAssignments ?? await this.getNodeAssignments())
+            : [];
+        const all = [...legacy.filter((pod) => !canonicalIds.has(pod.podId)), ...candidates, ...replacements];
+        return [...new Map(all.map((pod) => [pod.podId, pod])).values()];
+    }
+    extractPodsFromAccountData(accountId, data, nodeAssignments = []) {
+        const podMap = data['**pod**'] || data.pod || {};
+        const pods = [];
+        for (const [podId, podData] of Object.entries(podMap)) {
+            const pod = podData;
+            if (pod.baseUrl && typeof pod.baseUrl === 'string') {
+                const storageUrl = stringValue(pod.storageUrl) ?? stringValue(pod.storage);
+                const podWebIds = dedupeStrings(explicitPodWebIds(pod));
+                pods.push({
+                    podId,
+                    accountId,
+                    baseUrl: pod.baseUrl,
+                    storageUrl,
+                    webId: dedupeStrings(podWebIds)[0],
+                    ...webIdsProperty(podWebIds),
+                    nodeId: typeof pod.nodeId === 'string' ? pod.nodeId : findNodeIdForPod(nodeAssignments, [storageUrl, pod.baseUrl]),
+                    edgeNodeId: typeof pod.edgeNodeId === 'string' ? pod.edgeNodeId : undefined,
+                });
+            }
+        }
+        return pods;
+    }
+    /**
+     * 与全扫描一致的 WebID 匹配过滤：按 Pod 解析后的 WebID 列表按原字符串比较，
+     * 命中时附加该 Pod 自身存储的 WebID。
+     */
+    filterPodsByWebIds(pods, exactTargets) {
+        const results = [];
+        for (const pod of pods) {
+            const matchedWebId = getPodWebIds(pod).find((candidate) => {
+                const exact = exactWebId(candidate);
+                return exact ? exactTargets.has(exact) : false;
+            });
+            if (matchedWebId) {
+                results.push({
+                    ...pod,
+                    webId: matchedWebId,
+                });
+            }
+        }
+        return results;
+    }
     /**
      * DrizzleIndexedStorage stores CSS identity facts as typed rows in
      * identity_store; this is the canonical clustered identity source.
      */
     async getPodsFromIndexedStore(nodeAssignments = []) {
         const storeTableId = drizzle_orm_1.sql.identifier(this.indexedStoreTableName);
-        let result;
+        let rows = [];
         try {
-            result = await (0, db_1.executeQuery)(this.db, (0, drizzle_orm_1.sql) `
+            const result = await (0, db_1.executeQuery)(this.db, (0, drizzle_orm_1.sql) `
         SELECT container, id, payload FROM ${storeTableId}
         WHERE container IN ('pod', 'owner')
       `);
+            rows = result.rows;
         }
         catch (error) {
-            // Legacy-only installations have no canonical table. An unavailable or
-            // unreadable existing table must not reactivate legacy ownership.
-            if (!isMissingIdentityStore(error))
-                throw error;
-            return { pods: [], podIds: new Set() };
+            if (isMissingIdentityStore(error))
+                return [];
+            throw error;
         }
-        const podIds = new Set();
         const podPayloads = new Map();
-        const ownerWebIdsByPodId = new Map();
-        for (const row of result?.rows ?? []) {
+        const ownerRows = [];
+        for (const row of rows) {
             if (!row.id || !row.container) {
                 continue;
             }
-            if (row.container === 'pod')
-                podIds.add(row.id);
-            const payload = parsePayloadRecord(row.payload);
-            if (!payload) {
-                continue;
-            }
             if (row.container === 'pod') {
-                podPayloads.set(row.id, payload);
-                continue;
-            }
-            if (row.container === 'owner') {
-                const podId = stringValue(payload.podId);
-                const webId = stringValue(payload.webId);
-                if (podId && webId) {
-                    appendMapValue(ownerWebIdsByPodId, podId, webId);
+                const payload = parsePayloadRecord(row.payload);
+                if (payload) {
+                    podPayloads.set(row.id, payload);
                 }
             }
+            else if (row.container === 'owner') {
+                ownerRows.push(row);
+            }
+        }
+        return this.buildIndexedStorePods(podPayloads, ownerRows, nodeAssignments);
+    }
+    /**
+     * 按主键直查 identity_store pod 行并补齐关联。
+     */
+    async getIndexedStorePodsByIds(podIds) {
+        if (podIds.length === 0) {
+            return [];
+        }
+        const rows = await this.queryIndexedStoreRows((0, drizzle_orm_1.sql) `container = 'pod' AND ${idIn(podIds)}`);
+        return this.enrichIndexedStorePods(rowsToPodPayloadMap(rows), await this.getNodeAssignments());
+    }
+    /**
+     * 按 payload.accountId 下推查询 identity_store pod 行并补齐关联。
+     */
+    async getIndexedStorePodsByAccountId(accountId, nodeAssignments) {
+        const rows = await this.queryIndexedStoreRows((0, drizzle_orm_1.sql) `container = 'pod'`, (0, db_1.jsonFieldEquals)(this.db, 'accountId', accountId));
+        return this.enrichIndexedStorePods(rowsToPodPayloadMap(rows), nodeAssignments);
+    }
+    /**
+     * 反向前缀 LIKE 预筛候选 pod 行（baseUrl/storageUrl/storage 任一前缀），
+     * JS 侧 startsWith 复核由调用方（findByResourceIdentifier）执行。
+     */
+    async findIndexedStorePodsByResource(resourcePath, nodeAssignments) {
+        const conditions = ['baseUrl', 'storageUrl', 'storage']
+            .map((field) => (0, db_1.jsonFieldIsPrefixOf)(this.db, field, resourcePath));
+        const rows = await this.queryIndexedStoreRows((0, drizzle_orm_1.sql) `container = 'pod'`, (0, drizzle_orm_1.sql) `(${drizzle_orm_1.sql.join(conditions, (0, drizzle_orm_1.sql) ` OR `)})`);
+        return this.enrichIndexedStorePods(rowsToPodPayloadMap(rows), nodeAssignments);
+    }
+    /**
+     * WebID → Pod 的下推解析：owner 按 webId 命中拿 podId，pod.webId
+     * 直查；Account webIdLink 不建立 Pod ownership。
+     * webIdForms 只携带完整原字符串；URL 等价不代表相同身份。
+     */
+    async findIndexedStorePodsByWebIds(webIdForms) {
+        const forms = dedupeStrings(webIdForms);
+        if (forms.length === 0) {
+            return [];
+        }
+        const [ownerMatchRows, directPodRows] = await Promise.all([
+            this.queryIndexedStoreRows((0, drizzle_orm_1.sql) `container = 'owner'`, (0, db_1.jsonFieldIn)(this.db, 'webId', forms)),
+            this.queryIndexedStoreRows((0, drizzle_orm_1.sql) `container = 'pod'`, (0, db_1.jsonFieldIn)(this.db, 'webId', forms)),
+        ]);
+        const podIds = dedupeStrings([
+            ...ownerMatchRows.map((row) => stringValue(parsePayloadRecord(row.payload)?.podId)),
+            ...directPodRows.map((row) => row.id),
+        ].filter((value) => Boolean(value)));
+        if (podIds.length === 0) {
+            return [];
+        }
+        const podRows = await this.queryIndexedStoreRows((0, drizzle_orm_1.sql) `container = 'pod' AND ${idIn(podIds)}`);
+        return this.enrichIndexedStorePods(rowsToPodPayloadMap(podRows), await this.getNodeAssignments());
+    }
+    /**
+     * 为候选 pod 行补齐 owner 关联与 nodeAssignments，组装最终结果。
+     * 与全扫描共用 buildIndexedStorePods，保证返回形状一致。
+     */
+    async enrichIndexedStorePods(podPayloads, nodeAssignments) {
+        if (podPayloads.size === 0) {
+            return [];
+        }
+        const podIds = [...podPayloads.keys()];
+        const ownerRows = await this.queryIndexedStoreRows((0, drizzle_orm_1.sql) `container = 'owner'`, (0, db_1.jsonFieldIn)(this.db, 'podId', podIds));
+        return this.buildIndexedStorePods(podPayloads, ownerRows, nodeAssignments);
+    }
+    async queryIndexedStoreRows(condition, jsonCondition) {
+        const storeTableId = drizzle_orm_1.sql.identifier(this.indexedStoreTableName);
+        // Keep indexed columns outside CASE; only JSON evaluation needs protection.
+        // Raw ID queries must still see malformed rows for canonical shadowing.
+        const safeJsonCondition = jsonCondition && (0, db_1.isDatabaseSqlite)(this.db)
+            ? (0, drizzle_orm_1.sql) `CASE WHEN json_valid(payload) THEN ${jsonCondition} ELSE 0 END`
+            : jsonCondition;
+        const safeCondition = safeJsonCondition ? (0, drizzle_orm_1.sql) `${condition} AND (${safeJsonCondition})` : condition;
+        try {
+            const result = await (0, db_1.executeQuery)(this.db, (0, drizzle_orm_1.sql) `
+        SELECT id, payload FROM ${storeTableId}
+        WHERE ${safeCondition}
+      `);
+            return result.rows;
+        }
+        catch (error) {
+            if (isMissingIdentityStore(error))
+                return [];
+            throw error;
+        }
+    }
+    /**
+     * 组装 identity_store Pod 视图：pod 行为主体，owner 行补充 WebID，
+     * nodeAssignments 兜底 nodeId。全扫描与下推快路径共用，保证返回形状一致。
+     */
+    buildIndexedStorePods(podPayloads, ownerRows, nodeAssignments) {
+        const ownerWebIdsByPodId = new Map();
+        for (const row of ownerRows) {
+            const payload = parsePayloadRecord(row.payload);
+            const podId = payload ? stringValue(payload.podId) : undefined;
+            const webId = payload ? stringValue(payload.webId) : undefined;
+            if (podId && webId) {
+                appendMapValue(ownerWebIdsByPodId, podId, webId);
+            }
         }
         const pods = [];
         for (const [podId, pod] of podPayloads) {
@@ -262,23 +389,10 @@ class PodLookupRepository {
                 edgeNodeId: stringValue(pod.edgeNodeId),
             });
         }
-        return { pods, podIds };
+        return pods;
     }
 }
 exports.PodLookupRepository = PodLookupRepository;
-function isMissingIdentityStore(error) {
-    const visited = new Set();
-    while (error && typeof error === 'object' && !visited.has(error)) {
-        visited.add(error);
-        const failure = error;
-        if (failure.message === 'no such table: identity_store'
-            || (failure.code === '42P01' && failure.message === 'relation "identity_store" does not exist')) {
-            return true;
-        }
-        error = failure.cause;
-    }
-    return false;
-}
 function extractAccountIdFromAccountDataKey(key) {
     const marker = 'accounts/data/';
     const index = key.indexOf(marker);
@@ -341,6 +455,22 @@ function webIdsProperty(values) {
     const webIds = dedupeStrings(values);
     return webIds.length > 1 ? { webIds } : {};
 }
+function idIn(ids) {
+    return (0, drizzle_orm_1.sql) `id IN (${drizzle_orm_1.sql.join(ids.map((id) => (0, drizzle_orm_1.sql) `${id}`), (0, drizzle_orm_1.sql) `, `)})`;
+}
+function rowsToPodPayloadMap(rows) {
+    const map = new Map();
+    for (const row of rows) {
+        if (!row.id) {
+            continue;
+        }
+        const payload = parsePayloadRecord(row.payload);
+        if (payload) {
+            map.set(row.id, payload);
+        }
+    }
+    return map;
+}
 function parsePayloadRecord(value) {
     if (!value) {
         return undefined;
@@ -414,4 +544,17 @@ function findNodeIdForPod(assignments, urls) {
     }
     return bestMatch?.nodeId;
 }
+function isMissingIdentityStore(error) {
+    const visited = new Set();
+    while (error && typeof error === 'object' && !visited.has(error)) {
+        visited.add(error);
+        const failure = error;
+        if (failure.message === 'no such table: identity_store'
+            || (failure.code === '42P01' && failure.message === 'relation "identity_store" does not exist')) {
+            return true;
+        }
+        error = failure.cause;
+    }
+    return false;
+}
 //# sourceMappingURL=PodLookupRepository.js.map

package/dist/identity/drizzle/db.d.ts

@@ -69,3 +69,22 @@ export declare function toDbTimestamp(db: IdentityDatabase, date: Date): number
  * Handles both Unix timestamps (SQLite) and Date objects (PostgreSQL).
  */
 export declare function fromDbTimestamp(value: unknown): Date | undefined;
+/**
+ * `payload` JSON 字段提取表达式，按方言生成（SQLite json_extract / PG ->>）。
+ * alias 用于 join 场景下限定来源表。
+ */
+export declare function jsonFieldExtract(db: IdentityDatabase, field: string, alias?: string): SQL;
+/**
+ * `payload` 字段等于标量值的方言条件。
+ */
+export declare function jsonFieldEquals(db: IdentityDatabase, field: string, value: string, alias?: string): SQL;
+/**
+ * `payload` 字段落在值集合内的方言条件。values 为空时调用方应跳过查询。
+ */
+export declare function jsonFieldIn(db: IdentityDatabase, field: string, values: string[], alias?: string): SQL;
+/**
+ * 反向前缀匹配：`value LIKE payload->field || '%'`。
+ * 用于"资源 URL 以存储的 baseUrl 为前缀"的下推预筛；存储值中的 LIKE 元字符只会多匹配，
+ * 调用方需在 JS 侧用 startsWith 复核，不会漏匹配。
+ */
+export declare function jsonFieldIsPrefixOf(db: IdentityDatabase, field: string, value: string, alias?: string): SQL;

package/dist/identity/drizzle/db.js

@@ -36,6 +36,10 @@ exports.executePostgresLockedStatements = executePostgresLockedStatements;
 exports.ensureCloudClusterTables = ensureCloudClusterTables;
 exports.toDbTimestamp = toDbTimestamp;
 exports.fromDbTimestamp = fromDbTimestamp;
+exports.jsonFieldExtract = jsonFieldExtract;
+exports.jsonFieldEquals = jsonFieldEquals;
+exports.jsonFieldIn = jsonFieldIn;
+exports.jsonFieldIsPrefixOf = jsonFieldIsPrefixOf;
 const pg_1 = require("pg");
 const node_postgres_1 = require("drizzle-orm/node-postgres");
 const drizzle_orm_1 = require("drizzle-orm");
@@ -425,6 +429,41 @@ function fromDbTimestamp(value) {
     }
     return undefined;
 }
+function jsonFieldPath(field) {
+    return `$."${field.replace(/\\/g, '\\\\').replace(/"/g, '\\"')}"`;
+}
+/**
+ * `payload` JSON 字段提取表达式，按方言生成（SQLite json_extract / PG ->>）。
+ * alias 用于 join 场景下限定来源表。
+ */
+function jsonFieldExtract(db, field, alias) {
+    const target = alias ? (0, drizzle_orm_1.sql) `${drizzle_orm_1.sql.identifier(alias)}.payload` : (0, drizzle_orm_1.sql) `payload`;
+    if (isDatabaseSqlite(db)) {
+        return (0, drizzle_orm_1.sql) `json_extract(${target}, ${jsonFieldPath(field)})`;
+    }
+    return (0, drizzle_orm_1.sql) `${target} ->> ${field}`;
+}
+/**
+ * `payload` 字段等于标量值的方言条件。
+ */
+function jsonFieldEquals(db, field, value, alias) {
+    return (0, drizzle_orm_1.sql) `${jsonFieldExtract(db, field, alias)} = ${value}`;
+}
+/**
+ * `payload` 字段落在值集合内的方言条件。values 为空时调用方应跳过查询。
+ */
+function jsonFieldIn(db, field, values, alias) {
+    const list = drizzle_orm_1.sql.join(values.map((value) => (0, drizzle_orm_1.sql) `${value}`), (0, drizzle_orm_1.sql) `, `);
+    return (0, drizzle_orm_1.sql) `${jsonFieldExtract(db, field, alias)} IN (${list})`;
+}
+/**
+ * 反向前缀匹配：`value LIKE payload->field || '%'`。
+ * 用于"资源 URL 以存储的 baseUrl 为前缀"的下推预筛；存储值中的 LIKE 元字符只会多匹配，
+ * 调用方需在 JS 侧用 startsWith 复核，不会漏匹配。
+ */
+function jsonFieldIsPrefixOf(db, field, value, alias) {
+    return (0, drizzle_orm_1.sql) `${value} LIKE (${jsonFieldExtract(db, field, alias)}) || '%'`;
+}
 /**
  * Ensure SQLite tables exist (simple DDL for local/dev mode).
  */
@@ -520,9 +559,5 @@ async function ensurePostgresTables(pool) {
     );
 
   `);
-    await migratePostgresColumns(pool);
-}
-async function migratePostgresColumns(pool) {
-    void pool;
 }
 //# sourceMappingURL=db.js.map

package/node_modules/@undefineds.co/shared-ui/dist/index.d.ts

@@ -17,7 +17,6 @@ export { LocalReachabilitySummary, } from './login/LocalReachabilitySummary';
 export { getProviderActionLabel, getProviderDisplayLabel, getProviderInfoText, getProviderSourceLabel, getProviderStatusBadge, getProviderSubtitle, type ProviderStatusBadge, } from './login/presentation';
 export { isLocalLoginProvider, isLocalLoginProviderSource, resolveLoginProviderSource, } from './login/provider-model';
 export type { AuthWindowStatus, ConnectingProviderInfo, LocalLoginProviderSource, LocalLoginStatus, LocalOnboardingCapabilities, LocalOnboardingConnectivity, LocalOnboardingProgress, LocalOnboardingRouteKind, LocalOnboardingRouteProbe, LocalOnboardingSnapshot, LocalOnboardingState, LocalOnboardingTunnel, LocalPodRuntime, LocalSpaceKind, LoginEndpoint, LoginEndpointKind, LoginModalProps, LoginProviderOption, LoginProviderSource, LoginState, ProviderOption, StorageConflict, StoredAccount, } from './login/types';
-export * from './oidc-consent';
 export * from './scroll-area';
 export * from './separator';
 export * from './skeleton';

package/node_modules/@undefineds.co/shared-ui/dist/index.js

@@ -16,7 +16,6 @@ export { LoginView, } from './login/LoginView.js';
 export { LocalReachabilitySummary, } from './login/LocalReachabilitySummary.js';
 export { getProviderActionLabel, getProviderDisplayLabel, getProviderInfoText, getProviderSourceLabel, getProviderStatusBadge, getProviderSubtitle, } from './login/presentation.js';
 export { isLocalLoginProvider, isLocalLoginProviderSource, resolveLoginProviderSource, } from './login/provider-model.js';
-export * from './oidc-consent.js';
 export * from './scroll-area.js';
 export * from './separator.js';
 export * from './skeleton.js';

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@undefineds.co/xpod",
-  "version": "0.4.10",
+  "version": "0.4.11",
   "description": "Xpod is an extended Community Solid Server, offering rich-feature, production-level Solid Pod and identity management.",
   "repository": "https://github.com/undefinedsco/xpod",
   "author": "developer@undefineds.co",
@@ -376,7 +376,7 @@
     }
   },
   "optionalDependencies": {
-    "@undefineds.co/xpod-darwin-arm64": "0.4.10"
+    "@undefineds.co/xpod-darwin-arm64": "0.4.11"
   },
   "resolutions": {
     "@inrupt/solid-client-authn-browser": "^3.1.1",