@undefineds.co/xpod 0.4.13 → 0.4.15

package/node_modules/@undefineds.co/ai-connections/dist/AiGatewayKeyRow.d.ts

@@ -1,4 +1,4 @@
-import type { GatewayKeyRecord } from '@undefineds.co/ai-connections-core/client';
+import type { GatewayKeyRecord } from './contract/ai-connections-client';
 import { type AiConnectionsClientId } from './AiClientConfigurationSection';
 export interface AiGatewayKeyBinding {
     clientId?: AiConnectionsClientId;

package/node_modules/@undefineds.co/ai-connections/dist/AiGatewayKeysSection.d.ts

@@ -1,4 +1,4 @@
-import type { AiConnectionsClient, AiGatewayModel } from '@undefineds.co/ai-connections-core/client';
+import type { AiConnectionsClient, AiGatewayModel } from './contract/ai-connections-client';
 import { type AiClientConfigurationBridge } from './AiClientConfigurationSection';
 import { type GatewayModelSelection } from './AiGatewayModelsSection';
 /**

package/node_modules/@undefineds.co/ai-connections/dist/AiGatewayModelsSection.d.ts

@@ -1,4 +1,4 @@
-import type { AiGatewayModel } from '@undefineds.co/ai-connections-core/client';
+import type { AiGatewayModel } from './contract/ai-connections-client';
 /**
  * What the gateway list shares with the provider pages.
  *

package/node_modules/@undefineds.co/ai-connections/dist/AiOfferingDetails.d.ts

@@ -1,4 +1,4 @@
-import type { AiProviderAuthorizationMethod, AiProviderOffering } from '@undefineds.co/ai-connections-core/client';
+import type { AiProviderAuthorizationMethod, AiProviderOffering } from './contract/ai-connections-client';
 export declare function AiOfferingDetails({ offering, methods }: {
     offering: AiProviderOffering;
     methods?: AiProviderAuthorizationMethod[];

package/node_modules/@undefineds.co/ai-connections/dist/AiProviderCard.d.ts

@@ -1,4 +1,4 @@
-import type { AiConnectAttempt, AiConnectionsMode, AiGatewayModel, AiProviderCredentialSummary, AiProviderAuthorizationMethod, AiProviderOffering, AiProviderSummary } from '@undefineds.co/ai-connections-core/client';
+import type { AiConnectAttempt, AiConnectionsMode, AiGatewayModel, AiProviderCredentialSummary, AiProviderAuthorizationMethod, AiProviderOffering, AiProviderSummary } from './contract/ai-connections-client';
 import { type AiOfferingActionError, type AiOfferingQuotaState } from './AiCredentialPoolSection';
 export type { AiProviderDefinition } from './controller';
 import type { AiProviderDefinition } from './controller';

package/node_modules/@undefineds.co/ai-connections/dist/AiQuotaCard.d.ts

@@ -1,4 +1,4 @@
-import type { AiQuotaSnapshot } from '@undefineds.co/ai-connections-core/client';
+import type { AiQuotaSnapshot } from './contract/ai-connections-client';
 export declare function AiQuotaCard({ providerName, offeringName, quota, busy, disabled, credentialLabel, multiple, compact, paused, error, onRefresh, }: {
     providerName: string;
     offeringName: string;

package/node_modules/@undefineds.co/ai-connections/dist/AiSortableCredentialList.d.ts

@@ -1,5 +1,5 @@
 import { type ReactNode } from 'react';
-import type { AiProviderCredentialSummary } from '@undefineds.co/ai-connections-core/client';
+import type { AiProviderCredentialSummary } from './contract/ai-connections-client';
 export declare function AiSortableCredentialList({ credentials, disabled, onMove, children }: {
     credentials: AiProviderCredentialSummary[];
     disabled: boolean;

package/node_modules/@undefineds.co/ai-connections/dist/authorization-methods.d.ts

@@ -1,4 +1,4 @@
-import type { AiConnectAttempt, AiConnectionsMode, AiProviderAuthorizationMethod, AiProviderOffering } from '@undefineds.co/ai-connections-core/client';
+import type { AiConnectAttempt, AiConnectionsMode, AiProviderAuthorizationMethod, AiProviderOffering } from './contract/ai-connections-client';
 /**
  * Authorization methods an offering exposes, worded for display.
  *

package/node_modules/@undefineds.co/ai-connections/dist/collection-runtime.d.ts

@@ -1,5 +1,5 @@
 import type { AiConnectionsPodStore, WebExtensionHost } from '@undefineds.co/extension-sdk/web';
-import type { AiConnectionsClient } from '@undefineds.co/ai-connections-core/client';
+import type { AiConnectionsClient } from './contract/ai-connections-client';
 import { type CredentialCollection } from './collections';
 /**
  * The half of the credentials table that needs the collection layer at runtime.

package/node_modules/@undefineds.co/ai-connections/dist/collection-runtime.js

@@ -1,9 +1,9 @@
 import { credentialDescriptor, credentialResource } from '@undefineds.co/models';
 import { rowKeyOf } from '@undefineds.co/pod-collections';
-import { credentialProviderRelation, credentialRowKeyFor, customCredentialProviderRelation, } from '@undefineds.co/ai-connections-core/client';
+import { credentialProviderRelation, credentialRowKeyFor, customCredentialProviderRelation, } from './contract/ai-connections-client.js';
 import { credentialSummaryFromRow } from './collections.js';
-import { normalizeProxyUrl } from '@undefineds.co/ai-connections-core/client';
-import { credentialOfferingMetadata, defaultOfferingFor, offeringBaseUrl, storedOfferingIdFor, } from '@undefineds.co/ai-connections-core/provider-catalog';
+import { normalizeProxyUrl } from './contract/ai-connections-client.js';
+import { credentialOfferingMetadata, defaultOfferingFor, offeringBaseUrl, storedOfferingIdFor, } from './contract/provider-catalog.js';
 /**
  * The half of the credentials table that needs the collection layer at runtime.
  *

package/node_modules/@undefineds.co/ai-connections/dist/collections.d.ts

@@ -1,6 +1,6 @@
 import { credentialDescriptor } from '@undefineds.co/models';
 import type { PodCollection, RowOf } from '@undefineds.co/pod-collections';
-import type { AiConnectionsProvider, AiProviderCredentialSummary, AiProviderSummary } from '@undefineds.co/ai-connections-core/client';
+import type { AiConnectionsProvider, AiProviderCredentialSummary, AiProviderSummary } from './contract/ai-connections-client';
 /**
  * The credentials table, declared once (`docs/pod-collections.md` §6.4-2).
  *

package/node_modules/@undefineds.co/ai-connections/dist/collections.js

@@ -1,8 +1,8 @@
 import { credentialResource } from '@undefineds.co/models';
 import { useSyncExternalStore } from 'react';
-import { AI_CONNECTIONS_PROVIDERS } from '@undefineds.co/ai-connections-core/client';
-import { defaultOfferingFor } from '@undefineds.co/ai-connections-core/provider-catalog';
-import { providerOfCredentialKey, providerResourceKey } from '@undefineds.co/ai-connections-core/client';
+import { AI_CONNECTIONS_PROVIDERS } from './contract/ai-connections-client.js';
+import { defaultOfferingFor } from './contract/provider-catalog.js';
+import { providerOfCredentialKey, providerResourceKey } from './contract/ai-connections-client.js';
 /**
  * Live rows for the credentials table. Re-renders on sync and on optimistic
  * writes, because the source is the collection's own change feed.

package/node_modules/@undefineds.co/{ai-connections-core/dist → ai-connections/dist/contract}/ai-connections-client.d.ts

@@ -2,7 +2,7 @@
  * Public entry point of the AI Connections client protocol. This package is
  * the shared core: the gateway and the applet both consume it, and the applet
  * (`@undefineds.co/ai-connections`) adds the components, artwork and wording.
- * (`@undefineds.co/ai-connections-core/client`).
+ * (`@undefineds.co/ai-connections/client`).
  *
  * The implementation lives in `./client`, split into wire types, payload
  * normalisation and the request factory. This file stays a barrel — importers

package/node_modules/@undefineds.co/{ai-connections-core/dist → ai-connections/dist/contract}/ai-connections-client.js

@@ -2,7 +2,7 @@
  * Public entry point of the AI Connections client protocol. This package is
  * the shared core: the gateway and the applet both consume it, and the applet
  * (`@undefineds.co/ai-connections`) adds the components, artwork and wording.
- * (`@undefineds.co/ai-connections-core/client`).
+ * (`@undefineds.co/ai-connections/client`).
  *
  * The implementation lives in `./client`, split into wire types, payload
  * normalisation and the request factory. This file stays a barrel — importers

package/node_modules/@undefineds.co/{ai-connections-core/dist → ai-connections/dist/contract}/client-config/index.cjs

@@ -60,7 +60,7 @@ var __export = (target, all) => {
     });
 };
 
-// src/client-config/index.ts
+// src/contract/client-config/index.ts
 var exports_client_config = {};
 __export(exports_client_config, {
   stripLegacyXpodObject: () => stripLegacyXpodObject,
@@ -85,12 +85,12 @@ __export(exports_client_config, {
 });
 module.exports = __toCommonJS(exports_client_config);
 
-// src/client-config/base-adapter.ts
+// src/contract/client-config/base-adapter.ts
 var crypto2 = __toESM(require("node:crypto"));
 var fs2 = __toESM(require("node:fs"));
 var path2 = __toESM(require("node:path"));
 
-// src/client-config/transaction.ts
+// src/contract/client-config/transaction.ts
 var crypto = __toESM(require("node:crypto"));
 var fs = __toESM(require("node:fs"));
 var path = __toESM(require("node:path"));
@@ -269,7 +269,7 @@ class AiClientConfigTransaction {
   }
 }
 
-// src/endpoint-urls.ts
+// src/contract/endpoint-urls.ts
 function normalizeV1Endpoint(endpoint) {
   const normalized = endpoint.trim().replace(/\/+$/, "");
   return normalized.endsWith("/v1") ? normalized : `${normalized}/v1`;
@@ -278,7 +278,7 @@ function normalizeMessagesEndpoint(endpoint) {
   return endpoint.trim().replace(/\/+$/, "").replace(/\/v1$/, "");
 }
 
-// src/client-config/base-adapter.ts
+// src/contract/client-config/base-adapter.ts
 class AiClientConfigError extends Error {
   code;
   constructor(code, message = code) {
@@ -587,7 +587,7 @@ class BaseAiClientConfigAdapter {
     return false;
   }
 }
-// src/client-config/codex.ts
+// src/contract/client-config/codex.ts
 var fs3 = __toESM(require("node:fs"));
 var os = __toESM(require("node:os"));
 var path3 = __toESM(require("node:path"));
@@ -998,7 +998,7 @@ function readCatalogModels(content, label) {
   }
   return catalog.models;
 }
-// src/client-config/json-env-adapter.ts
+// src/contract/client-config/json-env-adapter.ts
 var fs4 = __toESM(require("node:fs"));
 var os2 = __toESM(require("node:os"));
 var path4 = __toESM(require("node:path"));
@@ -1090,7 +1090,7 @@ class CodeBuddyConfigAdapter extends JsonEnvAdapter {
     }));
   }
 }
-// src/client-config/pi.ts
+// src/contract/client-config/pi.ts
 var fs5 = __toESM(require("node:fs"));
 var os3 = __toESM(require("node:os"));
 var path5 = __toESM(require("node:path"));

package/node_modules/@undefineds.co/{ai-connections-core/dist → ai-connections/dist/contract}/index.d.ts

@@ -2,7 +2,7 @@
  * Root entry of the shared core.
  *
  * The client protocol is what most consumers want, and it is the same surface
- * `@undefineds.co/ai-connections-core/client` publishes. The catalog and the
+ * `@undefineds.co/ai-connections/client` publishes. The catalog and the
  * client-configuration adapters stay on their own subpaths because they are
  * larger and only some consumers need them.
  */

package/node_modules/@undefineds.co/{ai-connections-core/dist → ai-connections/dist/contract}/index.js

@@ -2,7 +2,7 @@
  * Root entry of the shared core.
  *
  * The client protocol is what most consumers want, and it is the same surface
- * `@undefineds.co/ai-connections-core/client` publishes. The catalog and the
+ * `@undefineds.co/ai-connections/client` publishes. The catalog and the
  * client-configuration adapters stay on their own subpaths because they are
  * larger and only some consumers need them.
  */

package/node_modules/@undefineds.co/{ai-connections-core/dist → ai-connections/dist/contract}/provider-catalog.cjs

@@ -36,7 +36,7 @@ var __export = (target, all) => {
     });
 };
 
-// src/provider-catalog.ts
+// src/contract/provider-catalog.ts
 var exports_provider_catalog = {};
 __export(exports_provider_catalog, {
   storedOfferingIdFor: () => storedOfferingIdFor,
@@ -54,7 +54,7 @@ __export(exports_provider_catalog, {
 });
 module.exports = __toCommonJS(exports_provider_catalog);
 
-// src/client/types.ts
+// src/contract/client/types.ts
 var AI_CONNECTIONS_PROVIDERS = [
   "openai",
   "anthropic",
@@ -66,7 +66,7 @@ var AI_CONNECTIONS_PROVIDERS = [
   "custom"
 ];
 
-// src/provider-catalog.ts
+// src/contract/provider-catalog.ts
 var DEFAULT_PROVIDER_OFFERINGS = [
   { id: "api-platform", label: "API Platform", kind: "api-platform", lifecycle: "active", authModes: ["apiKey"] }
 ];

package/node_modules/@undefineds.co/ai-connections/dist/controller.d.ts

@@ -1,5 +1,5 @@
 import type { SolidLiveUpdateState, WebExtensionHost } from '@undefineds.co/extension-sdk/web';
-import { type AiConnectionsClient, type AiConnectionsProvider, type AiProviderConnectionSummary, type AiProviderSummary } from '@undefineds.co/ai-connections-core/client';
+import { type AiConnectionsClient, type AiConnectionsProvider, type AiProviderConnectionSummary, type AiProviderSummary } from './contract/ai-connections-client';
 import type { AiClientConfigurationBridge } from './AiClientConfigurationSection';
 import { type CredentialRow } from './collections';
 import type { PodCollection } from '@undefineds.co/pod-collections';

package/node_modules/@undefineds.co/ai-connections/dist/controller.js

@@ -1,5 +1,5 @@
 import { useSyncExternalStore } from 'react';
-import { AI_CONNECTIONS_PROVIDERS, AiConnectionsRequestError, createAiConnectionsClient, } from '@undefineds.co/ai-connections-core/client';
+import { AI_CONNECTIONS_PROVIDERS, AiConnectionsRequestError, createAiConnectionsClient, } from './contract/ai-connections-client.js';
 import { aiConnectionsErrorMessage } from './error-wording.js';
 import { credentialCollectionRuntime, } from './collections.js';
 /**

package/node_modules/@undefineds.co/ai-connections/dist/credential-labels.d.ts

@@ -1,4 +1,4 @@
-import type { AiProviderCredentialSummary } from '@undefineds.co/ai-connections-core/client';
+import type { AiProviderCredentialSummary } from './contract/ai-connections-client';
 /** Highest priority first: a new credential joins the end of the pool. */
 export declare function nextCredentialPriority(credentials: AiProviderCredentialSummary[]): number;
 export declare function credentialDisplayLabel(credential: AiProviderCredentialSummary): string;

package/node_modules/@undefineds.co/ai-connections/dist/display-wording.d.ts

@@ -1,4 +1,4 @@
-import type { AiConnectionsProvider, AiProviderAuthorizationMethod } from '@undefineds.co/ai-connections-core/client';
+import type { AiConnectionsProvider, AiProviderAuthorizationMethod } from './contract/ai-connections-client';
 /**
  * Wording for one connect entry.
  *

package/node_modules/@undefineds.co/ai-connections/dist/error-wording.d.ts

@@ -1,4 +1,4 @@
-import type { AiConnectionsClient, AiConnectionsProvider } from '@undefineds.co/ai-connections-core/client';
+import type { AiConnectionsClient, AiConnectionsProvider } from './contract/ai-connections-client';
 /**
  * The sentence to show for anything a request threw.
  *

package/node_modules/@undefineds.co/ai-connections/dist/error-wording.js

@@ -1,4 +1,4 @@
-import { AiConnectionsRequestError, aiConnectionsErrorCode } from '@undefineds.co/ai-connections-core/client';
+import { AiConnectionsRequestError, aiConnectionsErrorCode } from './contract/ai-connections-client.js';
 /**
  * The wording a failed AI Connection request is shown under.
  *
@@ -134,8 +134,13 @@ function messageForSafeErrorCode(code, provider) {
             return provider
                 ? `${providerLabel(provider)} does not support this operation.`
                 : 'This AI Connection operation is not supported.';
-        case 'service_identity_unavailable':
-            return 'AI Connection service identity is unavailable';
+        case 'service_access_missing':
+        case 'pod_interface_key_missing':
+        case 'pod_interface_key_rejected':
+        case 'caller_dpop_replay_unsupported':
+            // Xpod reaches the Pod with the owner's own interface key, never with a
+            // deployment identity, so the fix is always on the user's side.
+            return 'Xpod 尚未获得这个 Pod 的接口访问密钥。请在「客户端访问」中创建 API Key 并应用到客户端后重试。';
         case 'unauthorized':
             return 'Please sign in again to continue.';
         case 'forbidden':

package/node_modules/@undefineds.co/ai-connections/dist/gateway-endpoints.js

@@ -1,4 +1,4 @@
-import { normalizeMessagesEndpoint, normalizeV1Endpoint } from '@undefineds.co/ai-connections-core/endpoint-urls';
+import { normalizeMessagesEndpoint, normalizeV1Endpoint } from './contract/endpoint-urls.js';
 /**
  * The protocols the Xpod gateway serves, as registered by
  * `src/api/handlers/AiGatewayHandler.ts`:

package/node_modules/@undefineds.co/ai-connections/dist/offering-endpoints.d.ts

@@ -1,4 +1,4 @@
-import type { AiProviderOffering } from '@undefineds.co/ai-connections-core/client';
+import type { AiProviderOffering } from './contract/ai-connections-client';
 /** One protocol the user can point a client at: the `protocol → base URL` pair the UI lists. */
 export interface AiEndpointEntry {
     protocol: string;

package/node_modules/@undefineds.co/ai-connections/dist/offering-label.d.ts

@@ -1,4 +1,4 @@
-import type { AiProviderAuthorizationMethod, AiProviderOffering } from '@undefineds.co/ai-connections-core/client';
+import type { AiProviderAuthorizationMethod, AiProviderOffering } from './contract/ai-connections-client';
 export declare function offeringTitle(offering: AiProviderOffering): string;
 /** Name of the offering kind. Same taxonomy as the title fallback, so it reuses the one map. */
 export declare function offeringKindLabel(kind: string): string;

package/node_modules/@undefineds.co/ai-connections/dist/provider-visuals.d.ts

@@ -1,4 +1,4 @@
-import type { AiConnectionsProvider } from '@undefineds.co/ai-connections-core/client';
+import type { AiConnectionsProvider } from './contract/ai-connections-client';
 /**
  * The Xpod shield (`ui/src/assets/xpod-shield.svg`), inlined like the provider
  * marks: from a coding client's point of view Xpod is just another provider.

package/node_modules/@undefineds.co/ai-connections/dist/service-access.js

@@ -1,4 +1,4 @@
-import { AI_CONNECTIONS_PROVIDER_DOCUMENT_IDS } from '@undefineds.co/ai-connections-core/provider-catalog';
+import { AI_CONNECTIONS_PROVIDER_DOCUMENT_IDS } from './contract/provider-catalog.js';
 export const AI_CONNECTIONS_APPLET_ID = 'co.undefineds.ai-connections';
 const KNOWN_RESOURCE_PATHS = {
     providerCredentials: 'settings/credentials.ttl',

package/node_modules/@undefineds.co/ai-connections/dist/useAiConnectDialog.d.ts

@@ -1,4 +1,4 @@
-import type { AiConnectAttempt, AiConnectionsMode, AiProviderAuthorizationMethod, AiProviderCredentialSummary, AiProviderOffering } from '@undefineds.co/ai-connections-core/client';
+import type { AiConnectAttempt, AiConnectionsMode, AiProviderAuthorizationMethod, AiProviderCredentialSummary, AiProviderOffering } from './contract/ai-connections-client';
 /**
  * Lifecycle of the connect dialog: which offering is being connected, whether the
  * user is creating or editing, and the busy/error state the toolbar and the

package/node_modules/@undefineds.co/ai-connections/package.json

@@ -16,10 +16,28 @@
     "./manifest": {
       "types": "./dist/manifest.d.ts",
       "import": "./dist/manifest.js"
+    },
+    "./client": {
+      "types": "./dist/contract/ai-connections-client.d.ts",
+      "import": "./dist/contract/ai-connections-client.js"
+    },
+    "./provider-catalog": {
+      "types": "./dist/contract/provider-catalog.d.ts",
+      "import": "./dist/contract/provider-catalog.js",
+      "require": "./dist/contract/provider-catalog.cjs"
+    },
+    "./client-config": {
+      "types": "./dist/contract/client-config/index.d.ts",
+      "import": "./dist/contract/client-config/index.js",
+      "require": "./dist/contract/client-config/index.cjs"
+    },
+    "./endpoint-urls": {
+      "types": "./dist/contract/endpoint-urls.d.ts",
+      "import": "./dist/contract/endpoint-urls.js"
     }
   },
   "scripts": {
-    "build": "rm -rf dist && tsc -p tsconfig.json && bun ../../scripts/fix-dist-js-imports.mjs dist",
+    "build": "rm -rf dist && tsc -p tsconfig.json && bun ../../scripts/fix-dist-js-imports.mjs dist && bun build src/contract/client-config/index.ts --target=node --format=cjs --outfile=dist/contract/client-config/index.cjs && bun build src/contract/provider-catalog.ts --target=node --format=cjs --outfile=dist/contract/provider-catalog.cjs",
     "test": "vitest run --config ../../vitest.packages.config.mts"
   },
   "dependencies": {
@@ -43,6 +61,18 @@
     "*": {
       "manifest": [
         "dist/manifest.d.ts"
+      ],
+      "provider-catalog": [
+        "dist/contract/provider-catalog.d.ts"
+      ],
+      "client": [
+        "dist/contract/ai-connections-client.d.ts"
+      ],
+      "client-config": [
+        "dist/contract/client-config/index.d.ts"
+      ],
+      "endpoint-urls": [
+        "dist/contract/endpoint-urls.d.ts"
       ]
     }
   }

package/node_modules/@undefineds.co/solid-sdk/dist/access-route.cjs

@@ -0,0 +1,230 @@
+var __defProp = Object.defineProperty;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+function __accessProp(key) {
+  return this[key];
+}
+var __toCommonJS = (from) => {
+  var entry = (__moduleCache ??= new WeakMap).get(from), desc;
+  if (entry)
+    return entry;
+  entry = __defProp({}, "__esModule", { value: true });
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (var key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(entry, key))
+        __defProp(entry, key, {
+          get: __accessProp.bind(from, key),
+          enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable
+        });
+  }
+  __moduleCache.set(from, entry);
+  return entry;
+};
+var __moduleCache;
+var __returnValue = (v) => v;
+function __exportSetter(name, newValue) {
+  this[name] = __returnValue.bind(null, newValue);
+}
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, {
+      get: all[name],
+      enumerable: true,
+      configurable: true,
+      set: __exportSetter.bind(all, name)
+    });
+};
+
+// src/access-route.ts
+var exports_access_route = {};
+__export(exports_access_route, {
+  usableRoutes: () => usableRoutes,
+  createSolidAccessRouteFetch: () => createSolidAccessRouteFetch,
+  chooseAccessRoute: () => chooseAccessRoute
+});
+module.exports = __toCommonJS(exports_access_route);
+
+// src/local-route-fetch.ts
+var SOLID_LOCAL_ROUTE_CANONICAL_URL_HEADER = "x-xpod-canonical-url";
+var SOLID_LOCAL_ROUTE_CANONICAL_ORIGIN_HEADER = "x-xpod-canonical-origin";
+var SOLID_LOCAL_ROUTE_CANONICAL_HOST_HEADER = "x-xpod-canonical-host";
+var SOLID_LOCAL_ROUTE_LOCAL_URL_HEADER = "x-xpod-local-route-url";
+function resolveSolidLocalRouteUrl(input, routes) {
+  let sourceUrl;
+  try {
+    sourceUrl = input instanceof URL ? new URL(input.href) : new URL(input);
+  } catch {
+    return;
+  }
+  const route = routes.map(normalizeRoute).filter((candidate) => isInsideBase(sourceUrl, candidate.canonicalBaseUrl)).sort((left, right) => right.canonicalBaseUrl.length - left.canonicalBaseUrl.length)[0];
+  return route ? replaceBase(sourceUrl, route) : undefined;
+}
+function createSolidLocalRouteFetch(options) {
+  return async (input, init) => {
+    const sourceUrl = requestUrl(input);
+    if (!sourceUrl) {
+      return init === undefined ? options.fetch.call(globalThis, input) : options.fetch.call(globalThis, input, init);
+    }
+    const routes = options.routes();
+    const targetUrl = resolveSolidLocalRouteUrl(sourceUrl, routes);
+    if (!targetUrl) {
+      return init === undefined ? options.fetch.call(globalThis, input) : options.fetch.call(globalThis, input, init);
+    }
+    const headers = routedHeaders(input, init, sourceUrl, targetUrl);
+    let response;
+    if (input instanceof Request) {
+      const request = new Request(new Request(targetUrl, input), { headers });
+      response = init === undefined ? await options.fetch.call(globalThis, request) : await options.fetch.call(globalThis, request, { ...init, headers });
+    } else {
+      response = await options.fetch.call(globalThis, targetUrl, { ...init, headers });
+    }
+    const canonicalResponseUrl = resolveSolidLocalRouteUrl(response.url, routes.map((route) => ({
+      canonicalBaseUrl: route.localBaseUrl,
+      localBaseUrl: route.canonicalBaseUrl
+    })));
+    return canonicalResponseUrl ? withResponseUrl(response, canonicalResponseUrl.href) : response;
+  };
+}
+function withResponseUrl(response, url) {
+  const clone = response.clone.bind(response);
+  Object.defineProperties(response, {
+    url: { value: url, configurable: true },
+    clone: { value: () => withResponseUrl(clone(), url), configurable: true }
+  });
+  return response;
+}
+function requestUrl(input) {
+  if (input instanceof Request)
+    return new URL(input.url);
+  try {
+    return new URL(String(input));
+  } catch {
+    return;
+  }
+}
+function normalizeRoute(route) {
+  return {
+    canonicalBaseUrl: normalizeBaseUrl(route.canonicalBaseUrl),
+    localBaseUrl: normalizeBaseUrl(route.localBaseUrl)
+  };
+}
+function normalizeBaseUrl(value) {
+  const url = new URL(value);
+  if (url.protocol !== "http:" && url.protocol !== "https:") {
+    throw new TypeError("Solid local routes must use http or https");
+  }
+  url.search = "";
+  url.hash = "";
+  return url.href.endsWith("/") ? url.href : `${url.href}/`;
+}
+function isInsideBase(url, base) {
+  const canonical = new URL(base);
+  return url.origin === canonical.origin && url.pathname.startsWith(canonical.pathname);
+}
+function replaceBase(url, route) {
+  const canonical = new URL(route.canonicalBaseUrl);
+  const local = new URL(route.localBaseUrl);
+  const relativePath = url.pathname.slice(canonical.pathname.length);
+  const target = new URL(relativePath, local);
+  target.search = url.search;
+  target.hash = url.hash;
+  return target;
+}
+function routedHeaders(input, init, canonicalUrl, localUrl) {
+  const request = input instanceof Request ? input : undefined;
+  const headers = new Headers(request?.headers ?? undefined);
+  new Headers(init?.headers ?? undefined).forEach((value, key) => headers.set(key, value));
+  headers.set(SOLID_LOCAL_ROUTE_CANONICAL_URL_HEADER, canonicalUrl.toString());
+  headers.set(SOLID_LOCAL_ROUTE_CANONICAL_ORIGIN_HEADER, canonicalUrl.origin);
+  headers.set(SOLID_LOCAL_ROUTE_CANONICAL_HOST_HEADER, canonicalUrl.host);
+  headers.set(SOLID_LOCAL_ROUTE_LOCAL_URL_HEADER, localUrl.toString());
+  return headers;
+}
+
+// src/access-route.ts
+async function chooseAccessRoute(routeSet, options = {}) {
+  const candidates = usableRoutes(routeSet, options.managedClient ?? true, options.allowLocalOnlyRoutes ?? false);
+  if (candidates.length === 0) {
+    return null;
+  }
+  const probe = options.probe ?? defaultProbe;
+  const timeoutMs = options.probeTimeoutMs ?? 1000;
+  const results = await Promise.all(candidates.map(async (route) => ({
+    route,
+    ok: await probeWithTimeout(route, probe, timeoutMs)
+  })));
+  return results.find((result) => result.ok)?.route ?? null;
+}
+function usableRoutes(routeSet, managedClient, allowLocalOnlyRoutes) {
+  return routeSet.routes.filter((route) => route.health !== "unreachable").filter((route) => managedClient || !route.requiresManagedClient).filter((route) => allowLocalOnlyRoutes || route.visibility !== "local-only").slice().sort((left, right) => left.priority - right.priority || left.id.localeCompare(right.id));
+}
+function createSolidAccessRouteFetch(options) {
+  const managedClient = options.managedClient ?? true;
+  let selected;
+  const selectRoute = async () => {
+    const routeSet = {
+      canonicalUrl: options.routes()[0]?.canonicalUrl ?? "",
+      routes: options.routes()
+    };
+    const candidate = await chooseAccessRoute(routeSet, {
+      managedClient,
+      ...options.allowLocalOnlyRoutes === undefined ? {} : { allowLocalOnlyRoutes: options.allowLocalOnlyRoutes },
+      ...options.probeTimeoutMs === undefined ? {} : { probeTimeoutMs: options.probeTimeoutMs },
+      ...options.probe === undefined ? {} : { probe: options.probe }
+    });
+    selected = candidate ?? undefined;
+    return candidate;
+  };
+  const routeFor = async () => {
+    if (selected && options.routes().some((route) => route.id === selected?.id && route.targetUrl === selected?.targetUrl)) {
+      return selected;
+    }
+    return await selectRoute() ?? undefined;
+  };
+  const routedFetchFor = (route) => createSolidLocalRouteFetch({
+    fetch: options.fetch,
+    routes: () => [{
+      canonicalBaseUrl: route.canonicalUrl,
+      localBaseUrl: route.targetUrl
+    }]
+  });
+  return async (input, init) => {
+    const route = await routeFor();
+    if (!route) {
+      return init === undefined ? options.fetch.call(globalThis, input) : options.fetch.call(globalThis, input, init);
+    }
+    try {
+      return await routedFetchFor(route)(input, init);
+    } catch (error) {
+      selected = undefined;
+      await options.refreshRoutes?.();
+      const retryRoute = await selectRoute();
+      if (!retryRoute || retryRoute.id === route.id) {
+        throw error;
+      }
+      return routedFetchFor(retryRoute)(input, init);
+    }
+  };
+}
+async function probeWithTimeout(route, probe, timeoutMs) {
+  const controller = new AbortController;
+  const timer = setTimeout(() => controller.abort(), timeoutMs);
+  try {
+    return await Promise.resolve(probe(route, controller.signal));
+  } catch {
+    return false;
+  } finally {
+    clearTimeout(timer);
+  }
+}
+async function defaultProbe(route, signal) {
+  if (!route.targetUrl.startsWith("http://") && !route.targetUrl.startsWith("https://")) {
+    return route.health === "healthy";
+  }
+  const response = await fetch(new URL("/.well-known/solid", route.targetUrl), {
+    method: "HEAD",
+    signal
+  });
+  return response.ok || response.status === 401 || response.status === 403;
+}