@undefineds.co/xpod 0.4.14 → 0.4.15

package/dist/http/SubgraphSparqlHttpHandler.d.ts

@@ -1,5 +1,5 @@
 import { HttpHandler } from '@solid/community-server';
-import type { HttpHandlerInput, HttpRequest, HttpResponse } from '@solid/community-server';
+import type { HttpHandlerInput } from '@solid/community-server';
 import type { ActivityEmitter, CredentialsExtractor, PermissionReader, Authorizer } from '@solid/community-server';
 import { SubgraphQueryEngine } from '../storage/sparql/SubgraphQueryEngine';
 import { MixDataAccessor } from '../storage/accessors/MixDataAccessor';
@@ -14,22 +14,6 @@ interface SubgraphSparqlHttpHandlerOptions {
     usageDbUrl?: string;
     defaultAccountBandwidthLimitBps?: number | null;
 }
-export interface TrustedSubgraphSparqlHandler {
-    handleTrustedInternalSelect(input: {
-        ownerWebId: string;
-        endpointUrl: string;
-        query: string;
-        request: HttpRequest;
-        response: HttpResponse;
-    }): Promise<void>;
-    handleTrustedInternalUpdate(input: {
-        ownerWebId: string;
-        endpointUrl: string;
-        query: string;
-        request: HttpRequest;
-        response: HttpResponse;
-    }): Promise<void>;
-}
 export declare class SubgraphSparqlHttpHandler extends HttpHandler {
     protected readonly logger: import("global-logger-factory").Logger<unknown>;
     private readonly engine;
@@ -47,14 +31,6 @@ export declare class SubgraphSparqlHttpHandler extends HttpHandler {
     constructor(queryEngine: SubgraphQueryEngine, credentialsExtractor: CredentialsExtractor, permissionReader: PermissionReader, authorizer: Authorizer, options?: SubgraphSparqlHttpHandlerOptions, updateAuthority?: MixDataAccessor, emitter?: ActivityEmitter);
     canHandle({ request }: HttpHandlerInput): Promise<void>;
     handle({ request, response }: HttpHandlerInput): Promise<void>;
-    /**
-     * Execute the model collection SELECT after InternalPodDataHttpHandler has
-     * verified the signed owner intent. This is deliberately not reachable from
-     * the normal HTTP routing path and performs its own exact owner/endpoint
-     * validation before bypassing caller credentials.
-     */
-    handleTrustedInternalSelect(input: Parameters<TrustedSubgraphSparqlHandler['handleTrustedInternalSelect']>[0]): Promise<void>;
-    handleTrustedInternalUpdate(input: Parameters<TrustedSubgraphSparqlHandler['handleTrustedInternalUpdate']>[0]): Promise<void>;
     private sendErrorResponse;
     private acceptsJson;
     private executeSelect;

package/dist/http/SubgraphSparqlHttpHandler.js

@@ -14,7 +14,6 @@ const db_1 = require("../identity/drizzle/db");
 const PodLookupRepository_1 = require("../identity/drizzle/PodLookupRepository");
 const UsageRepository_1 = require("../storage/quota/UsageRepository");
 const BandwidthThrottleTransform_1 = require("../util/stream/BandwidthThrottleTransform");
-const AiConnectionsServiceAccess_1 = require("../api/ai-gateway/service-access/AiConnectionsServiceAccess");
 const ALLOWED_METHODS = ['GET', 'POST', 'OPTIONS'];
 const MODEL_COLLECTION_SUFFIX = '/settings/providers/-/sparql';
 const SETTINGS_COLLECTION_SUFFIX = '/settings/-/sparql';
@@ -141,64 +140,6 @@ class SubgraphSparqlHttpHandler extends community_server_1.HttpHandler {
             throw error;
         }
     }
-    /**
-     * Execute the model collection SELECT after InternalPodDataHttpHandler has
-     * verified the signed owner intent. This is deliberately not reachable from
-     * the normal HTTP routing path and performs its own exact owner/endpoint
-     * validation before bypassing caller credentials.
-     */
-    async handleTrustedInternalSelect(input) {
-        const target = trustedSelectTarget(input.ownerWebId, input.endpointUrl);
-        if (!target) {
-            throw new community_server_2.BadRequestHttpError('Trusted SPARQL endpoint is outside the owner Pod.');
-        }
-        const query = input.query.trim();
-        if (!query || (target.query && query !== target.query)) {
-            throw new community_server_2.BadRequestHttpError('A trusted SPARQL query is required.');
-        }
-        const parsed = new sparqljs_1.Parser({ baseIRI: target.baseUrl }).parse(query);
-        if (parsed.type !== 'query' || parsed.queryType !== 'SELECT') {
-            throw new community_server_2.BadRequestHttpError('Trusted SPARQL access only supports SELECT queries.');
-        }
-        const context = await this.resolveUsageContext(target.basePath);
-        await this.recordBandwidth(context, Buffer.byteLength(query, 'utf8'), 0);
-        await this.executeSelect(input.request, {
-            basePath: target.basePath,
-            baseUrl: target.baseUrl,
-            ...(target.sourceUri === undefined ? {} : { sourceUri: target.sourceUri }),
-            defaultDataset: target.defaultDataset,
-            query,
-            origin: target.origin,
-            method: 'GET',
-            ingressBytes: Buffer.byteLength(query, 'utf8'),
-        }, input.response, context, true);
-    }
-    async handleTrustedInternalUpdate(input) {
-        const target = trustedSettingsCollectionTarget(input.ownerWebId, input.endpointUrl, false);
-        if (!target) {
-            throw new community_server_2.BadRequestHttpError('Trusted settings update endpoint is outside the owner Pod.');
-        }
-        const query = input.query.trim();
-        if (!query) {
-            throw new community_server_2.BadRequestHttpError('A trusted settings update is required.');
-        }
-        const parsed = new sparqljs_1.Parser({ baseIRI: target.baseUrl }).parse(query);
-        if (parsed.type !== 'update') {
-            throw new community_server_2.BadRequestHttpError('Trusted settings access only supports UPDATE operations.');
-        }
-        const context = await this.resolveUsageContext(target.basePath);
-        const ingressBytes = Buffer.byteLength(query, 'utf8');
-        await this.recordBandwidth(context, ingressBytes, 0);
-        await this.executeUpdate({
-            basePath: target.basePath,
-            baseUrl: target.baseUrl,
-            defaultDataset: target.defaultDataset,
-            query,
-            origin: target.origin,
-            method: 'POST',
-            ingressBytes,
-        }, parsed, input.request, input.response, context, true);
-    }
     sendErrorResponse(request, response, statusCode, message, jsonPayload) {
         response.statusCode = statusCode;
         if (this.acceptsJson(request)) {
@@ -1127,47 +1068,6 @@ class SubgraphSparqlHttpHandler extends community_server_1.HttpHandler {
 }
 exports.SubgraphSparqlHttpHandler = SubgraphSparqlHttpHandler;
 SubgraphSparqlHttpHandler.XSD_STRING = 'http://www.w3.org/2001/XMLSchema#string';
-function trustedSelectTarget(ownerWebId, endpointUrl) {
-    return trustedGatewayAccessKeyDocumentTarget(ownerWebId, endpointUrl) ??
-        trustedModelCollectionTarget(ownerWebId, endpointUrl) ??
-        trustedSettingsCollectionTarget(ownerWebId, endpointUrl, true);
-}
-function trustedGatewayAccessKeyDocumentTarget(ownerWebId, endpointUrl) {
-    let owner;
-    let endpoint;
-    try {
-        owner = new URL(ownerWebId);
-        endpoint = new URL(endpointUrl);
-    }
-    catch {
-        return undefined;
-    }
-    if ((owner.protocol !== 'http:' && owner.protocol !== 'https:') ||
-        owner.hash !== '#me' || !owner.pathname.endsWith('/profile/card') ||
-        endpoint.username || endpoint.password || endpoint.hash ||
-        !(0, AiConnectionsServiceAccess_1.isGatewayAccessKeySparqlEndpoint)(ownerWebId, endpoint)) {
-        return undefined;
-    }
-    const keys = Array.from(endpoint.searchParams.keys());
-    if (keys.length > 0 && (keys.length !== 1 || keys[0] !== 'query' || !endpoint.searchParams.get('query')?.trim())) {
-        return undefined;
-    }
-    const basePath = endpoint.pathname.slice(0, -'/-/sparql'.length);
-    return {
-        basePath,
-        baseUrl: `${endpoint.origin}${basePath}`,
-        sourceUri: `${endpoint.origin}${basePath}`,
-        defaultDataset: 'exactSource',
-        origin: endpoint.origin,
-        query: endpoint.searchParams.get('query')?.trim() ?? '',
-    };
-}
-function trustedModelCollectionTarget(ownerWebId, endpointUrl) {
-    return trustedCollectionTarget(ownerWebId, endpointUrl, MODEL_COLLECTION_SUFFIX, true);
-}
-function trustedSettingsCollectionTarget(ownerWebId, endpointUrl, allowQuery) {
-    return trustedCollectionTarget(ownerWebId, endpointUrl, SETTINGS_COLLECTION_SUFFIX, allowQuery);
-}
 function trustedCollectionTarget(ownerWebId, endpointUrl, suffix, allowQuery) {
     let owner;
     let endpoint;

package/dist/http/SubgraphSparqlHttpHandler.jsonld

@@ -200,14 +200,6 @@
           "@id": "undefineds:dist/http/SubgraphSparqlHttpHandler.jsonld#SubgraphSparqlHttpHandler__member_handle",
           "memberFieldName": "handle"
         },
-        {
-          "@id": "undefineds:dist/http/SubgraphSparqlHttpHandler.jsonld#SubgraphSparqlHttpHandler__member_handleTrustedInternalSelect",
-          "memberFieldName": "handleTrustedInternalSelect"
-        },
-        {
-          "@id": "undefineds:dist/http/SubgraphSparqlHttpHandler.jsonld#SubgraphSparqlHttpHandler__member_handleTrustedInternalUpdate",
-          "memberFieldName": "handleTrustedInternalUpdate"
-        },
         {
           "@id": "undefineds:dist/http/SubgraphSparqlHttpHandler.jsonld#SubgraphSparqlHttpHandler__member_sendErrorResponse",
           "memberFieldName": "sendErrorResponse"

package/dist/identity/drizzle/PodInterfaceKeyRepository.d.ts

@@ -0,0 +1,33 @@
+import type { IdentityDatabase } from './db';
+/**
+ * The interface access key a Pod grants its owner's server-side components.
+ *
+ * It is an ordinary Pod credential - the same kind a browser holds - so the server reaches the
+ * Pod through the standard interface as that user. The ciphertext lives here rather than in the
+ * Pod, because this key is what opens the Pod.
+ */
+export interface PodInterfaceKeyRecord {
+    ownerWebId: string;
+    clientId: string;
+    /** Vault-sealed JSON `{ clientSecret }`. */
+    sealedSecret: string;
+    createdAt: Date;
+    updatedAt: Date;
+}
+export interface PodInterfaceKeyRepositoryPort {
+    read(ownerWebId: string): Promise<PodInterfaceKeyRecord | undefined>;
+    write(record: Omit<PodInterfaceKeyRecord, 'createdAt' | 'updatedAt'>): Promise<void>;
+    remove(ownerWebId: string): Promise<void>;
+}
+export declare class PodInterfaceKeyRepository implements PodInterfaceKeyRepositoryPort {
+    private readonly db;
+    private readonly logger;
+    private readonly schema;
+    private readonly ready;
+    private initError?;
+    constructor(db: IdentityDatabase);
+    read(ownerWebId: string): Promise<PodInterfaceKeyRecord | undefined>;
+    write(record: Omit<PodInterfaceKeyRecord, 'createdAt' | 'updatedAt'>): Promise<void>;
+    remove(ownerWebId: string): Promise<void>;
+    private ensureReady;
+}

package/dist/identity/drizzle/PodInterfaceKeyRepository.js

@@ -0,0 +1,78 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PodInterfaceKeyRepository = void 0;
+const drizzle_orm_1 = require("drizzle-orm");
+const global_logger_factory_1 = require("global-logger-factory");
+const db_1 = require("./db");
+class PodInterfaceKeyRepository {
+    constructor(db) {
+        this.db = db;
+        this.logger = (0, global_logger_factory_1.getLoggerFor)(this);
+        this.schema = (0, db_1.getSchema)(db);
+        // Bootstrap is lazy, and its failure belongs to the first caller that needs the table.
+        // Leaving the rejection unobserved would surface as an unhandled rejection from a
+        // constructor nobody awaits, which is both louder and less useful than a read error.
+        this.ready = (0, db_1.ensurePodInterfaceKeyTable)(db).catch((error) => {
+            this.initError = error;
+        });
+    }
+    async read(ownerWebId) {
+        await this.ensureReady();
+        const rows = await this.db
+            .select()
+            .from(this.schema.podInterfaceKeys)
+            .where((0, drizzle_orm_1.eq)(this.schema.podInterfaceKeys.ownerWebId, ownerWebId))
+            .limit(1);
+        const row = rows[0];
+        if (!row) {
+            return undefined;
+        }
+        return {
+            ownerWebId: String(row.ownerWebId),
+            clientId: String(row.clientId),
+            sealedSecret: String(row.sealedSecret),
+            createdAt: (0, db_1.fromDbTimestamp)(row.createdAt) ?? new Date(),
+            updatedAt: (0, db_1.fromDbTimestamp)(row.updatedAt) ?? new Date(),
+        };
+    }
+    async write(record) {
+        await this.ensureReady();
+        const existing = await this.read(record.ownerWebId);
+        if (existing) {
+            await this.db
+                .update(this.schema.podInterfaceKeys)
+                .set({
+                clientId: record.clientId,
+                sealedSecret: record.sealedSecret,
+                updatedAt: (0, db_1.toDbTimestamp)(this.db, new Date()),
+            })
+                .where((0, drizzle_orm_1.eq)(this.schema.podInterfaceKeys.ownerWebId, record.ownerWebId));
+            this.logger.info(`Rotated the Pod interface key for ${record.ownerWebId}`);
+            return;
+        }
+        await this.db.insert(this.schema.podInterfaceKeys).values({
+            ownerWebId: record.ownerWebId,
+            clientId: record.clientId,
+            sealedSecret: record.sealedSecret,
+            createdAt: (0, db_1.toDbTimestamp)(this.db, new Date()),
+            updatedAt: (0, db_1.toDbTimestamp)(this.db, new Date()),
+        });
+        this.logger.info(`Stored a Pod interface key for ${record.ownerWebId}`);
+    }
+    async remove(ownerWebId) {
+        await this.ensureReady();
+        await this.db
+            .delete(this.schema.podInterfaceKeys)
+            .where((0, drizzle_orm_1.eq)(this.schema.podInterfaceKeys.ownerWebId, ownerWebId));
+    }
+    async ensureReady() {
+        await this.ready;
+        if (this.initError) {
+            throw this.initError instanceof Error
+                ? this.initError
+                : new Error(`pod_interface_key_table_unavailable:${String(this.initError)}`);
+        }
+    }
+}
+exports.PodInterfaceKeyRepository = PodInterfaceKeyRepository;
+//# sourceMappingURL=PodInterfaceKeyRepository.js.map

package/dist/identity/drizzle/db.d.ts

@@ -58,6 +58,13 @@ export declare function executeQuery<T = Record<string, unknown>>(db: IdentityDa
  */
 export declare function executeStatement(db: IdentityDatabase, query: SQL): Promise<void>;
 export declare function executePostgresLockedStatements(db: IdentityDatabase, lockKey: number, statements: string[]): Promise<void>;
+/**
+ * Creates the per-owner interface-key table.
+ *
+ * The table holds the owner's Pod credential, which the runtime needs *before* it can read
+ * anything inside that Pod, so it is created on first use rather than by a Pod-side migration.
+ */
+export declare function ensurePodInterfaceKeyTable(db: IdentityDatabase): Promise<void>;
 export declare function ensureCloudClusterTables(db: IdentityDatabase): Promise<void>;
 /**
  * Convert a Date to a value suitable for the database.

package/dist/identity/drizzle/db.js

@@ -33,6 +33,7 @@ exports.isDatabaseSqlite = isDatabaseSqlite;
 exports.executeQuery = executeQuery;
 exports.executeStatement = executeStatement;
 exports.executePostgresLockedStatements = executePostgresLockedStatements;
+exports.ensurePodInterfaceKeyTable = ensurePodInterfaceKeyTable;
 exports.ensureCloudClusterTables = ensureCloudClusterTables;
 exports.toDbTimestamp = toDbTimestamp;
 exports.fromDbTimestamp = fromDbTimestamp;
@@ -260,6 +261,35 @@ async function executePostgresLockedStatements(db, lockKey, statements) {
         client.release();
     }
 }
+/**
+ * Creates the per-owner interface-key table.
+ *
+ * The table holds the owner's Pod credential, which the runtime needs *before* it can read
+ * anything inside that Pod, so it is created on first use rather than by a Pod-side migration.
+ */
+async function ensurePodInterfaceKeyTable(db) {
+    if (isDatabaseSqlite(db)) {
+        db.run((0, drizzle_orm_1.sql) `
+      CREATE TABLE IF NOT EXISTS identity_pod_interface_key (
+        owner_web_id TEXT PRIMARY KEY,
+        client_id TEXT NOT NULL,
+        sealed_secret TEXT NOT NULL,
+        created_at INTEGER NOT NULL DEFAULT (strftime('%s', 'now')),
+        updated_at INTEGER NOT NULL DEFAULT (strftime('%s', 'now'))
+      )
+    `);
+        return;
+    }
+    await db.execute((0, drizzle_orm_1.sql) `
+    CREATE TABLE IF NOT EXISTS identity_pod_interface_key (
+      owner_web_id TEXT PRIMARY KEY,
+      client_id TEXT NOT NULL,
+      sealed_secret TEXT NOT NULL,
+      created_at TIMESTAMPTZ NOT NULL DEFAULT NOW(),
+      updated_at TIMESTAMPTZ NOT NULL DEFAULT NOW()
+    )
+  `);
+}
 async function ensureCloudClusterTables(db) {
     await ensureDatabaseReady(db);
     if (db && typeof db === 'object') {

package/dist/identity/drizzle/schema.pg.d.ts

@@ -10,3 +10,12 @@ export declare const edgeNodes: any;
  * 用于服务间认证 (Business, Local SP, Cloud, Compute)
  */
 export declare const serviceTokens: any;
+/**
+ * Per-owner interface access key.
+ *
+ * A server-side component acts for a user through that user's own Pod credentials, so the
+ * client id/secret pair - the same kind of key a browser uses on the standard interface - is
+ * remembered here, sealed by the credential vault. It cannot live in the Pod: it is what
+ * grants access to the Pod.
+ */
+export declare const podInterfaceKeys: any;

package/dist/identity/drizzle/schema.pg.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.serviceTokens = exports.edgeNodes = exports.ddnsRecords = exports.usage = void 0;
+exports.podInterfaceKeys = exports.serviceTokens = exports.edgeNodes = exports.ddnsRecords = exports.usage = void 0;
 const pg_core_1 = require("drizzle-orm/pg-core");
 const bigint_1 = require("drizzle-orm/pg-core/columns/bigint");
 const integer_1 = require("drizzle-orm/pg-core/columns/integer");
@@ -79,4 +79,19 @@ exports.serviceTokens = (0, pg_core_1.pgTable)('cluster_service_token', {
     createdAt: (0, pg_core_1.timestamp)('created_at', { withTimezone: true, mode: 'date' }).notNull().defaultNow(),
     expiresAt: (0, pg_core_1.timestamp)('expires_at', { withTimezone: true, mode: 'date' }),
 });
+/**
+ * Per-owner interface access key.
+ *
+ * A server-side component acts for a user through that user's own Pod credentials, so the
+ * client id/secret pair - the same kind of key a browser uses on the standard interface - is
+ * remembered here, sealed by the credential vault. It cannot live in the Pod: it is what
+ * grants access to the Pod.
+ */
+exports.podInterfaceKeys = (0, pg_core_1.pgTable)('identity_pod_interface_key', {
+    ownerWebId: (0, pg_core_1.text)('owner_web_id').primaryKey(),
+    clientId: (0, pg_core_1.text)('client_id').notNull(),
+    sealedSecret: (0, pg_core_1.text)('sealed_secret').notNull(),
+    createdAt: (0, pg_core_1.timestamp)('created_at').notNull().defaultNow(),
+    updatedAt: (0, pg_core_1.timestamp)('updated_at').notNull().defaultNow(),
+});
 //# sourceMappingURL=schema.pg.js.map

package/dist/identity/drizzle/schema.sqlite.d.ts

@@ -1073,3 +1073,109 @@ export declare const serviceTokens: import("drizzle-orm/sqlite-core").SQLiteTabl
     };
     dialect: "sqlite";
 }>;
+/**
+ * Per-owner interface access key.
+ *
+ * A server-side component acts for a user through that user's own Pod credentials, so the
+ * client id/secret pair - the same kind of key a browser uses on the standard interface - is
+ * remembered here, sealed by the credential vault. It cannot live in the Pod: it is what
+ * grants access to the Pod.
+ */
+export declare const podInterfaceKeys: import("drizzle-orm/sqlite-core").SQLiteTableWithColumns<{
+    name: "identity_pod_interface_key";
+    schema: undefined;
+    columns: {
+        ownerWebId: import("drizzle-orm/sqlite-core").SQLiteColumn<{
+            name: "owner_web_id";
+            tableName: "identity_pod_interface_key";
+            dataType: "string";
+            columnType: "SQLiteText";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: true;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {
+            length: number | undefined;
+        }>;
+        clientId: import("drizzle-orm/sqlite-core").SQLiteColumn<{
+            name: "client_id";
+            tableName: "identity_pod_interface_key";
+            dataType: "string";
+            columnType: "SQLiteText";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {
+            length: number | undefined;
+        }>;
+        sealedSecret: import("drizzle-orm/sqlite-core").SQLiteColumn<{
+            name: "sealed_secret";
+            tableName: "identity_pod_interface_key";
+            dataType: "string";
+            columnType: "SQLiteText";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {
+            length: number | undefined;
+        }>;
+        createdAt: import("drizzle-orm/sqlite-core").SQLiteColumn<{
+            name: "created_at";
+            tableName: "identity_pod_interface_key";
+            dataType: "number";
+            columnType: "SQLiteInteger";
+            data: number;
+            driverParam: number;
+            notNull: true;
+            hasDefault: true;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: true;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        updatedAt: import("drizzle-orm/sqlite-core").SQLiteColumn<{
+            name: "updated_at";
+            tableName: "identity_pod_interface_key";
+            dataType: "number";
+            columnType: "SQLiteInteger";
+            data: number;
+            driverParam: number;
+            notNull: true;
+            hasDefault: true;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: true;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+    };
+    dialect: "sqlite";
+}>;

package/dist/identity/drizzle/schema.sqlite.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.serviceTokens = exports.edgeNodes = exports.ddnsRecords = exports.usage = void 0;
+exports.podInterfaceKeys = exports.serviceTokens = exports.edgeNodes = exports.ddnsRecords = exports.usage = void 0;
 const sqlite_core_1 = require("drizzle-orm/sqlite-core");
 exports.usage = (0, sqlite_core_1.sqliteTable)('identity_usage', {
     scopeType: (0, sqlite_core_1.text)('scope_type').notNull(), // 'account' | 'pod'
@@ -79,4 +79,19 @@ exports.serviceTokens = (0, sqlite_core_1.sqliteTable)('cluster_service_token',
     createdAt: (0, sqlite_core_1.integer)('created_at').notNull().$defaultFn(() => Math.floor(Date.now() / 1000)),
     expiresAt: (0, sqlite_core_1.integer)('expires_at'),
 });
+/**
+ * Per-owner interface access key.
+ *
+ * A server-side component acts for a user through that user's own Pod credentials, so the
+ * client id/secret pair - the same kind of key a browser uses on the standard interface - is
+ * remembered here, sealed by the credential vault. It cannot live in the Pod: it is what
+ * grants access to the Pod.
+ */
+exports.podInterfaceKeys = (0, sqlite_core_1.sqliteTable)('identity_pod_interface_key', {
+    ownerWebId: (0, sqlite_core_1.text)('owner_web_id').primaryKey(),
+    clientId: (0, sqlite_core_1.text)('client_id').notNull(),
+    sealedSecret: (0, sqlite_core_1.text)('sealed_secret').notNull(),
+    createdAt: (0, sqlite_core_1.integer)('created_at').notNull().$defaultFn(() => Math.floor(Date.now() / 1000)),
+    updatedAt: (0, sqlite_core_1.integer)('updated_at').notNull().$defaultFn(() => Math.floor(Date.now() / 1000)),
+});
 //# sourceMappingURL=schema.sqlite.js.map

package/dist/index.d.ts

@@ -15,7 +15,6 @@ export type { PostgresRdfTextIndexOptions } from './storage/rdf/PostgresRdfTextI
 export type { PostgresRdfVectorIndexOptions } from './storage/rdf/PostgresRdfVectorIndex';
 export * from './document';
 import { SubgraphSparqlHttpHandler } from './http/SubgraphSparqlHttpHandler';
-import { InternalPodDataHttpHandler } from './http/InternalPodDataHttpHandler';
 import { QuotaAdminHttpHandler } from './http/quota/QuotaAdminHttpHandler';
 import { SparqlUpdateResourceStore } from './storage/SparqlUpdateResourceStore';
 import { ClusterIngressRouter } from './http/ClusterIngressRouter';
@@ -127,6 +126,6 @@ export type { OwnedWebIdEntry, PodOwnershipResolver, PodOwnershipTarget, CssPodO
 export type { TunnelProvider, TunnelConfig, TunnelSetupOptions, TunnelStatus, } from './tunnel/TunnelProvider';
 export type { SubdomainRegistration, ConnectivityResult, SubdomainServiceOptions, } from './subdomain/SubdomainService';
 export { AppStaticAssetHandler } from './http/AppStaticAssetHandler';
-export { RepresentationPartialConvertingStore, MinioDataAccessor, SolidRdfDataAccessor, MixDataAccessor, ConfigurableLoggerFactory, resolveLogFilePattern, resolveCurrentLogFile, LOG_FILE_PATTERN, SparqlUpdateResourceStore, SubgraphQueryEngine, SubgraphSparqlHttpHandler, InternalPodDataHttpHandler, QuotaAdminHttpHandler, ClusterIngressRouter, ClusterWebSocketConfigurator, EdgeNodeDirectDebugHttpHandler, EdgeNodeProxyHttpHandler, RouterHttpHandler, RouterHttpRoute, TracingHandler, EdgeNodeCertificateHttpHandler, TerminalHttpHandler, DeviceNotificationHub, DeviceNotificationResourceListener, DeviceNotificationWebSocketServer, DeviceNotificationTicketHandler, registerDeviceNotificationRuntime, ReservedSuffixIdentifierGenerator, DrizzleIndexedStorage, LoginMethodGuardStorage, ValidatingIdentityProviderHttpHandler, PostgresKeyValueStorage, RedisKeyValueStorage, SqliteKeyValueStorage, BaseKeyValueStorage, DrizzleQuotaService, NoopQuotaService, HttpEntitlementProvider, NoopEntitlementProvider, PerAccountQuotaStrategy, TencentDnsProvider, EdgeNodeDnsCoordinator, Dns01CertificateProvisioner, SimpleEdgeNodeTunnelManager, NoopEdgeNodeTunnelManager, FrpTunnelManager, EdgeNodeHealthProbeService, assertPublicProbeTarget, createPinnedHeadProbeRequest, isPublicIpAddress, createPodOwnershipNodeAccessResolver, EdgeNodeAgent, EdgeNodeAgentInitializer, EdgeNodeCertificateService, AcmeCertificateManager, EdgeNodeModeDetector, ClusterIdentifierStrategy, UsageTrackingStore, CenterNodeRegistrationService, PodRoutingHttpHandler, ReactAppViewHandler, QuintStore, SqliteQuintStore, PgQuintStore, RdfTermDictionary, RdfQuadIndex, Rdf3xIndex, RdfTextIndex, RdfVectorIndex, PostgresRdfTextIndex, PostgresRdfVectorIndex, SolidRdfEngine, LocalQleverNativeSparqlClient, QleverSparqlEngine, RdfQuerySparqlEngine, PostgresRdfEngine, VectorStore, SqliteVectorStore, PostgresVectorStore, VectorHttpHandler, ProviderRegistry, ProviderRegistryImpl, EmbeddingService, EmbeddingServiceImpl, CredentialReader, CredentialReaderImpl, CloudflareTunnelProvider, LocalTunnelProvider, NgrokTunnelProvider, SubdomainService, MultiDomainIdentifierStrategy, SubdomainPodIdentifierStrategy, DisabledOidcHandler, DisabledIdentityProviderHandler, AutoDetectOidcHandler, AutoDetectIdentityProviderHandler, LoopbackClientIdAdapterFactory, RememberedClientGrantStore, RememberedConsentHandler, RememberedClientPromptFactory, SessionBoundIdentityProviderFactory, ScopedPickWebIdHandler, ConfiguredLoopbackDPoPWebIdExtractor, AccountStorageBindingsHandler, CssPodOwnershipResolver, UrlAwareRedisLocker, ProvisionPodCreator, ProvisionPodStore, ProvisionCodeCodec, LocalPodProvisioningService, SqliteSolidFsSyncJournal, RootedSolidFsSyncJournal, LocalRdfAuthorityRecoveryInitializer, ObservableResourceStore, RdfSearchReconciliationIntentSink, };
+export { RepresentationPartialConvertingStore, MinioDataAccessor, SolidRdfDataAccessor, MixDataAccessor, ConfigurableLoggerFactory, resolveLogFilePattern, resolveCurrentLogFile, LOG_FILE_PATTERN, SparqlUpdateResourceStore, SubgraphQueryEngine, SubgraphSparqlHttpHandler, QuotaAdminHttpHandler, ClusterIngressRouter, ClusterWebSocketConfigurator, EdgeNodeDirectDebugHttpHandler, EdgeNodeProxyHttpHandler, RouterHttpHandler, RouterHttpRoute, TracingHandler, EdgeNodeCertificateHttpHandler, TerminalHttpHandler, DeviceNotificationHub, DeviceNotificationResourceListener, DeviceNotificationWebSocketServer, DeviceNotificationTicketHandler, registerDeviceNotificationRuntime, ReservedSuffixIdentifierGenerator, DrizzleIndexedStorage, LoginMethodGuardStorage, ValidatingIdentityProviderHttpHandler, PostgresKeyValueStorage, RedisKeyValueStorage, SqliteKeyValueStorage, BaseKeyValueStorage, DrizzleQuotaService, NoopQuotaService, HttpEntitlementProvider, NoopEntitlementProvider, PerAccountQuotaStrategy, TencentDnsProvider, EdgeNodeDnsCoordinator, Dns01CertificateProvisioner, SimpleEdgeNodeTunnelManager, NoopEdgeNodeTunnelManager, FrpTunnelManager, EdgeNodeHealthProbeService, assertPublicProbeTarget, createPinnedHeadProbeRequest, isPublicIpAddress, createPodOwnershipNodeAccessResolver, EdgeNodeAgent, EdgeNodeAgentInitializer, EdgeNodeCertificateService, AcmeCertificateManager, EdgeNodeModeDetector, ClusterIdentifierStrategy, UsageTrackingStore, CenterNodeRegistrationService, PodRoutingHttpHandler, ReactAppViewHandler, QuintStore, SqliteQuintStore, PgQuintStore, RdfTermDictionary, RdfQuadIndex, Rdf3xIndex, RdfTextIndex, RdfVectorIndex, PostgresRdfTextIndex, PostgresRdfVectorIndex, SolidRdfEngine, LocalQleverNativeSparqlClient, QleverSparqlEngine, RdfQuerySparqlEngine, PostgresRdfEngine, VectorStore, SqliteVectorStore, PostgresVectorStore, VectorHttpHandler, ProviderRegistry, ProviderRegistryImpl, EmbeddingService, EmbeddingServiceImpl, CredentialReader, CredentialReaderImpl, CloudflareTunnelProvider, LocalTunnelProvider, NgrokTunnelProvider, SubdomainService, MultiDomainIdentifierStrategy, SubdomainPodIdentifierStrategy, DisabledOidcHandler, DisabledIdentityProviderHandler, AutoDetectOidcHandler, AutoDetectIdentityProviderHandler, LoopbackClientIdAdapterFactory, RememberedClientGrantStore, RememberedConsentHandler, RememberedClientPromptFactory, SessionBoundIdentityProviderFactory, ScopedPickWebIdHandler, ConfiguredLoopbackDPoPWebIdExtractor, AccountStorageBindingsHandler, CssPodOwnershipResolver, UrlAwareRedisLocker, ProvisionPodCreator, ProvisionPodStore, ProvisionCodeCodec, LocalPodProvisioningService, SqliteSolidFsSyncJournal, RootedSolidFsSyncJournal, LocalRdfAuthorityRecoveryInitializer, ObservableResourceStore, RdfSearchReconciliationIntentSink, };
 export type { ResourceChangeEvent, ResourceChangeListener, ResourceChangeRecorder, } from './storage/ObservableResourceStore';
 export { RdfHandlebarsTemplateEngine } from './util/templates/RdfHandlebarsTemplateEngine';

package/dist/index.js

@@ -14,9 +14,9 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
     for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.createPinnedHeadProbeRequest = exports.assertPublicProbeTarget = exports.EdgeNodeHealthProbeService = exports.FrpTunnelManager = exports.NoopEdgeNodeTunnelManager = exports.SimpleEdgeNodeTunnelManager = exports.Dns01CertificateProvisioner = exports.EdgeNodeDnsCoordinator = exports.TencentDnsProvider = exports.PerAccountQuotaStrategy = exports.NoopEntitlementProvider = exports.HttpEntitlementProvider = exports.NoopQuotaService = exports.DrizzleQuotaService = exports.BaseKeyValueStorage = exports.SqliteKeyValueStorage = exports.RedisKeyValueStorage = exports.PostgresKeyValueStorage = exports.ValidatingIdentityProviderHttpHandler = exports.LoginMethodGuardStorage = exports.DrizzleIndexedStorage = exports.ReservedSuffixIdentifierGenerator = exports.registerDeviceNotificationRuntime = exports.DeviceNotificationTicketHandler = exports.DeviceNotificationWebSocketServer = exports.DeviceNotificationResourceListener = exports.DeviceNotificationHub = exports.TerminalHttpHandler = exports.EdgeNodeCertificateHttpHandler = exports.TracingHandler = exports.RouterHttpRoute = exports.RouterHttpHandler = exports.EdgeNodeProxyHttpHandler = exports.EdgeNodeDirectDebugHttpHandler = exports.ClusterWebSocketConfigurator = exports.ClusterIngressRouter = exports.QuotaAdminHttpHandler = exports.InternalPodDataHttpHandler = exports.SubgraphSparqlHttpHandler = exports.SubgraphQueryEngine = exports.SparqlUpdateResourceStore = exports.LOG_FILE_PATTERN = exports.resolveCurrentLogFile = exports.resolveLogFilePattern = exports.ConfigurableLoggerFactory = exports.MixDataAccessor = exports.SolidRdfDataAccessor = exports.MinioDataAccessor = exports.RepresentationPartialConvertingStore = exports.AppStaticAssetHandler = void 0;
-exports.RememberedConsentHandler = exports.RememberedClientGrantStore = exports.LoopbackClientIdAdapterFactory = exports.AutoDetectIdentityProviderHandler = exports.AutoDetectOidcHandler = exports.DisabledIdentityProviderHandler = exports.DisabledOidcHandler = exports.SubdomainPodIdentifierStrategy = exports.MultiDomainIdentifierStrategy = exports.SubdomainService = exports.NgrokTunnelProvider = exports.LocalTunnelProvider = exports.CloudflareTunnelProvider = exports.CredentialReaderImpl = exports.CredentialReader = exports.EmbeddingServiceImpl = exports.EmbeddingService = exports.ProviderRegistryImpl = exports.ProviderRegistry = exports.VectorHttpHandler = exports.PostgresVectorStore = exports.SqliteVectorStore = exports.VectorStore = exports.PostgresRdfEngine = exports.RdfQuerySparqlEngine = exports.QleverSparqlEngine = exports.LocalQleverNativeSparqlClient = exports.SolidRdfEngine = exports.PostgresRdfVectorIndex = exports.PostgresRdfTextIndex = exports.RdfVectorIndex = exports.RdfTextIndex = exports.Rdf3xIndex = exports.RdfQuadIndex = exports.RdfTermDictionary = exports.PgQuintStore = exports.SqliteQuintStore = exports.QuintStore = exports.ReactAppViewHandler = exports.PodRoutingHttpHandler = exports.CenterNodeRegistrationService = exports.UsageTrackingStore = exports.ClusterIdentifierStrategy = exports.EdgeNodeModeDetector = exports.AcmeCertificateManager = exports.EdgeNodeCertificateService = exports.EdgeNodeAgentInitializer = exports.EdgeNodeAgent = exports.createPodOwnershipNodeAccessResolver = exports.isPublicIpAddress = void 0;
-exports.RdfHandlebarsTemplateEngine = exports.RdfSearchReconciliationIntentSink = exports.ObservableResourceStore = exports.LocalRdfAuthorityRecoveryInitializer = exports.RootedSolidFsSyncJournal = exports.SqliteSolidFsSyncJournal = exports.LocalPodProvisioningService = exports.ProvisionCodeCodec = exports.ProvisionPodStore = exports.ProvisionPodCreator = exports.UrlAwareRedisLocker = exports.CssPodOwnershipResolver = exports.AccountStorageBindingsHandler = exports.ConfiguredLoopbackDPoPWebIdExtractor = exports.ScopedPickWebIdHandler = exports.SessionBoundIdentityProviderFactory = exports.RememberedClientPromptFactory = void 0;
+exports.isPublicIpAddress = exports.createPinnedHeadProbeRequest = exports.assertPublicProbeTarget = exports.EdgeNodeHealthProbeService = exports.FrpTunnelManager = exports.NoopEdgeNodeTunnelManager = exports.SimpleEdgeNodeTunnelManager = exports.Dns01CertificateProvisioner = exports.EdgeNodeDnsCoordinator = exports.TencentDnsProvider = exports.PerAccountQuotaStrategy = exports.NoopEntitlementProvider = exports.HttpEntitlementProvider = exports.NoopQuotaService = exports.DrizzleQuotaService = exports.BaseKeyValueStorage = exports.SqliteKeyValueStorage = exports.RedisKeyValueStorage = exports.PostgresKeyValueStorage = exports.ValidatingIdentityProviderHttpHandler = exports.LoginMethodGuardStorage = exports.DrizzleIndexedStorage = exports.ReservedSuffixIdentifierGenerator = exports.registerDeviceNotificationRuntime = exports.DeviceNotificationTicketHandler = exports.DeviceNotificationWebSocketServer = exports.DeviceNotificationResourceListener = exports.DeviceNotificationHub = exports.TerminalHttpHandler = exports.EdgeNodeCertificateHttpHandler = exports.TracingHandler = exports.RouterHttpRoute = exports.RouterHttpHandler = exports.EdgeNodeProxyHttpHandler = exports.EdgeNodeDirectDebugHttpHandler = exports.ClusterWebSocketConfigurator = exports.ClusterIngressRouter = exports.QuotaAdminHttpHandler = exports.SubgraphSparqlHttpHandler = exports.SubgraphQueryEngine = exports.SparqlUpdateResourceStore = exports.LOG_FILE_PATTERN = exports.resolveCurrentLogFile = exports.resolveLogFilePattern = exports.ConfigurableLoggerFactory = exports.MixDataAccessor = exports.SolidRdfDataAccessor = exports.MinioDataAccessor = exports.RepresentationPartialConvertingStore = exports.AppStaticAssetHandler = void 0;
+exports.RememberedClientPromptFactory = exports.RememberedConsentHandler = exports.RememberedClientGrantStore = exports.LoopbackClientIdAdapterFactory = exports.AutoDetectIdentityProviderHandler = exports.AutoDetectOidcHandler = exports.DisabledIdentityProviderHandler = exports.DisabledOidcHandler = exports.SubdomainPodIdentifierStrategy = exports.MultiDomainIdentifierStrategy = exports.SubdomainService = exports.NgrokTunnelProvider = exports.LocalTunnelProvider = exports.CloudflareTunnelProvider = exports.CredentialReaderImpl = exports.CredentialReader = exports.EmbeddingServiceImpl = exports.EmbeddingService = exports.ProviderRegistryImpl = exports.ProviderRegistry = exports.VectorHttpHandler = exports.PostgresVectorStore = exports.SqliteVectorStore = exports.VectorStore = exports.PostgresRdfEngine = exports.RdfQuerySparqlEngine = exports.QleverSparqlEngine = exports.LocalQleverNativeSparqlClient = exports.SolidRdfEngine = exports.PostgresRdfVectorIndex = exports.PostgresRdfTextIndex = exports.RdfVectorIndex = exports.RdfTextIndex = exports.Rdf3xIndex = exports.RdfQuadIndex = exports.RdfTermDictionary = exports.PgQuintStore = exports.SqliteQuintStore = exports.QuintStore = exports.ReactAppViewHandler = exports.PodRoutingHttpHandler = exports.CenterNodeRegistrationService = exports.UsageTrackingStore = exports.ClusterIdentifierStrategy = exports.EdgeNodeModeDetector = exports.AcmeCertificateManager = exports.EdgeNodeCertificateService = exports.EdgeNodeAgentInitializer = exports.EdgeNodeAgent = exports.createPodOwnershipNodeAccessResolver = void 0;
+exports.RdfHandlebarsTemplateEngine = exports.RdfSearchReconciliationIntentSink = exports.ObservableResourceStore = exports.LocalRdfAuthorityRecoveryInitializer = exports.RootedSolidFsSyncJournal = exports.SqliteSolidFsSyncJournal = exports.LocalPodProvisioningService = exports.ProvisionCodeCodec = exports.ProvisionPodStore = exports.ProvisionPodCreator = exports.UrlAwareRedisLocker = exports.CssPodOwnershipResolver = exports.AccountStorageBindingsHandler = exports.ConfiguredLoopbackDPoPWebIdExtractor = exports.ScopedPickWebIdHandler = exports.SessionBoundIdentityProviderFactory = void 0;
 require("./runtime/configure-drizzle-solid");
 const RepresentationPartialConvertingStore_1 = require("./storage/RepresentationPartialConvertingStore");
 Object.defineProperty(exports, "RepresentationPartialConvertingStore", { enumerable: true, get: function () { return RepresentationPartialConvertingStore_1.RepresentationPartialConvertingStore; } });
@@ -37,8 +37,6 @@ Object.defineProperty(exports, "SubgraphQueryEngine", { enumerable: true, get: f
 __exportStar(require("./document"), exports);
 const SubgraphSparqlHttpHandler_1 = require("./http/SubgraphSparqlHttpHandler");
 Object.defineProperty(exports, "SubgraphSparqlHttpHandler", { enumerable: true, get: function () { return SubgraphSparqlHttpHandler_1.SubgraphSparqlHttpHandler; } });
-const InternalPodDataHttpHandler_1 = require("./http/InternalPodDataHttpHandler");
-Object.defineProperty(exports, "InternalPodDataHttpHandler", { enumerable: true, get: function () { return InternalPodDataHttpHandler_1.InternalPodDataHttpHandler; } });
 const QuotaAdminHttpHandler_1 = require("./http/quota/QuotaAdminHttpHandler");
 Object.defineProperty(exports, "QuotaAdminHttpHandler", { enumerable: true, get: function () { return QuotaAdminHttpHandler_1.QuotaAdminHttpHandler; } });
 const SparqlUpdateResourceStore_1 = require("./storage/SparqlUpdateResourceStore");

package/dist/runtime/GatewayAdminProxyAuth.d.ts

@@ -2,9 +2,8 @@ import type { IncomingHttpHeaders, OutgoingHttpHeaders } from 'node:http';
 export declare const GATEWAY_ADMIN_PROXY_LOOPBACK_HEADER = "x-xpod-admin-proxy-loopback";
 export declare const GATEWAY_ADMIN_PROXY_TIMESTAMP_HEADER = "x-xpod-admin-proxy-timestamp";
 export declare const GATEWAY_ADMIN_PROXY_SIGNATURE_HEADER = "x-xpod-admin-proxy-signature";
-export declare const GATEWAY_ADMIN_PROXY_INTENT_HEADER = "x-xpod-admin-proxy-intent";
 export declare const GATEWAY_ADMIN_PROXY_NONCE_HEADER = "x-xpod-admin-proxy-nonce";
-export declare const GATEWAY_ADMIN_PROXY_HEADERS: readonly ["x-xpod-admin-proxy-loopback", "x-xpod-admin-proxy-timestamp", "x-xpod-admin-proxy-signature", "x-xpod-admin-proxy-intent", "x-xpod-admin-proxy-nonce"];
+export declare const GATEWAY_ADMIN_PROXY_HEADERS: readonly ["x-xpod-admin-proxy-loopback", "x-xpod-admin-proxy-timestamp", "x-xpod-admin-proxy-signature", "x-xpod-admin-proxy-nonce"];
 export declare function createGatewayAdminProxyAuthSecret(): string;
 export interface GatewayAdminProxyMarkerInput {
     secret: string;
@@ -13,27 +12,14 @@ export interface GatewayAdminProxyMarkerInput {
     originalClientLoopback: boolean;
     issuedAt?: number;
     nonce?: string;
-    intent?: GatewayAdminProxyIntent;
 }
 export interface GatewayAdminProxyMarkerVerification {
     present: boolean;
     valid: boolean;
     originalClientLoopback: boolean;
     nonce?: string;
-    intent?: GatewayAdminProxyIntent;
     reason?: string;
 }
-export interface GatewayAdminProxyIntent {
-    ownerWebId: string;
-    /** Physical Pod root when it differs from the identity provider WebID root. */
-    podBaseUrl?: string;
-    method: 'GET' | 'HEAD' | 'POST' | 'PUT' | 'PATCH' | 'DELETE';
-    resourceUrl: string;
-    principalKind: 'solid-user' | 'gateway-key-verifier';
-    scopes: string[];
-    /** SHA-256 hex digest of a POST body. Required for POST intents. */
-    bodyDigest?: string;
-}
 export declare function createGatewayAdminProxyHeaders(input: GatewayAdminProxyMarkerInput): OutgoingHttpHeaders;
 export declare function stripGatewayAdminProxyHeaders(headers: IncomingHttpHeaders): void;
 export declare function isLoopbackRemoteAddress(remoteAddress: string | undefined): boolean;
@@ -44,4 +30,3 @@ export declare function verifyGatewayAdminProxyHeaders(input: {
     url: string | undefined;
     now?: number;
 }): GatewayAdminProxyMarkerVerification;
-export declare function canonicalGatewayAdminProxyIntent(intent: GatewayAdminProxyIntent): string;