@undefineds.co/xpod 0.4.14 → 0.4.16

package/dist/identity/drizzle/PodInterfaceKeyRepository.js

@@ -0,0 +1,89 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PodInterfaceKeyRepository = void 0;
+const drizzle_orm_1 = require("drizzle-orm");
+const global_logger_factory_1 = require("global-logger-factory");
+const db_1 = require("./db");
+class PodInterfaceKeyRepository {
+    constructor(db) {
+        this.db = db;
+        this.logger = (0, global_logger_factory_1.getLoggerFor)(this);
+        this.schema = (0, db_1.getSchema)(db);
+        // Bootstrap is lazy, and its failure belongs to the first caller that needs the table.
+        // Leaving the rejection unobserved would surface as an unhandled rejection from a
+        // constructor nobody awaits, which is both louder and less useful than a read error.
+        this.ready = (0, db_1.ensurePodInterfaceKeyTable)(db).catch((error) => {
+            this.initError = error;
+        });
+    }
+    async read(ownerWebId) {
+        await this.ensureReady();
+        const rows = await this.db
+            .select()
+            .from(this.schema.podInterfaceKeys)
+            .where((0, drizzle_orm_1.eq)(this.schema.podInterfaceKeys.ownerWebId, ownerWebId))
+            .limit(1);
+        const row = rows[0];
+        if (!row) {
+            return undefined;
+        }
+        return {
+            ownerWebId: String(row.ownerWebId),
+            clientId: String(row.clientId),
+            sealedSecret: String(row.sealedSecret),
+            createdAt: (0, db_1.fromDbTimestamp)(row.createdAt) ?? new Date(),
+            updatedAt: (0, db_1.fromDbTimestamp)(row.updatedAt) ?? new Date(),
+        };
+    }
+    async list() {
+        await this.ensureReady();
+        const rows = await this.db.select().from(this.schema.podInterfaceKeys);
+        return rows.map((row) => ({
+            ownerWebId: String(row.ownerWebId),
+            clientId: String(row.clientId),
+            sealedSecret: String(row.sealedSecret),
+            createdAt: (0, db_1.fromDbTimestamp)(row.createdAt) ?? new Date(),
+            updatedAt: (0, db_1.fromDbTimestamp)(row.updatedAt) ?? new Date(),
+        }));
+    }
+    async write(record) {
+        await this.ensureReady();
+        const existing = await this.read(record.ownerWebId);
+        if (existing) {
+            await this.db
+                .update(this.schema.podInterfaceKeys)
+                .set({
+                clientId: record.clientId,
+                sealedSecret: record.sealedSecret,
+                updatedAt: (0, db_1.toDbTimestamp)(this.db, new Date()),
+            })
+                .where((0, drizzle_orm_1.eq)(this.schema.podInterfaceKeys.ownerWebId, record.ownerWebId));
+            this.logger.info(`Rotated the Pod interface key for ${record.ownerWebId}`);
+            return;
+        }
+        await this.db.insert(this.schema.podInterfaceKeys).values({
+            ownerWebId: record.ownerWebId,
+            clientId: record.clientId,
+            sealedSecret: record.sealedSecret,
+            createdAt: (0, db_1.toDbTimestamp)(this.db, new Date()),
+            updatedAt: (0, db_1.toDbTimestamp)(this.db, new Date()),
+        });
+        this.logger.info(`Stored a Pod interface key for ${record.ownerWebId}`);
+    }
+    async remove(ownerWebId) {
+        await this.ensureReady();
+        await this.db
+            .delete(this.schema.podInterfaceKeys)
+            .where((0, drizzle_orm_1.eq)(this.schema.podInterfaceKeys.ownerWebId, ownerWebId));
+    }
+    async ensureReady() {
+        await this.ready;
+        if (this.initError) {
+            throw this.initError instanceof Error
+                ? this.initError
+                : new Error(`pod_interface_key_table_unavailable:${String(this.initError)}`);
+        }
+    }
+}
+exports.PodInterfaceKeyRepository = PodInterfaceKeyRepository;
+//# sourceMappingURL=PodInterfaceKeyRepository.js.map

package/dist/identity/drizzle/db.d.ts

@@ -57,7 +57,22 @@ export declare function executeQuery<T = Record<string, unknown>>(db: IdentityDa
  * Works uniformly across PostgreSQL and SQLite.
  */
 export declare function executeStatement(db: IdentityDatabase, query: SQL): Promise<void>;
+/**
+ * Execute a statement and report how many rows it changed.
+ *
+ * Optimistic concurrency (compare-and-swap) has to tell an applied write from a rejected one,
+ * which `executeStatement` throws away. Returns `undefined` when the driver reports no count,
+ * in which case callers must verify the stored value themselves instead of assuming success.
+ */
+export declare function executeStatementWithCount(db: IdentityDatabase, query: SQL): Promise<number | undefined>;
 export declare function executePostgresLockedStatements(db: IdentityDatabase, lockKey: number, statements: string[]): Promise<void>;
+/**
+ * Creates the per-owner interface-key table.
+ *
+ * The table holds the owner's Pod credential, which the runtime needs *before* it can read
+ * anything inside that Pod, so it is created on first use rather than by a Pod-side migration.
+ */
+export declare function ensurePodInterfaceKeyTable(db: IdentityDatabase): Promise<void>;
 export declare function ensureCloudClusterTables(db: IdentityDatabase): Promise<void>;
 /**
  * Convert a Date to a value suitable for the database.

package/dist/identity/drizzle/db.js

@@ -32,7 +32,9 @@ exports.closeAllIdentityConnections = closeAllIdentityConnections;
 exports.isDatabaseSqlite = isDatabaseSqlite;
 exports.executeQuery = executeQuery;
 exports.executeStatement = executeStatement;
+exports.executeStatementWithCount = executeStatementWithCount;
 exports.executePostgresLockedStatements = executePostgresLockedStatements;
+exports.ensurePodInterfaceKeyTable = ensurePodInterfaceKeyTable;
 exports.ensureCloudClusterTables = ensureCloudClusterTables;
 exports.toDbTimestamp = toDbTimestamp;
 exports.fromDbTimestamp = fromDbTimestamp;
@@ -228,6 +230,22 @@ async function executeStatement(db, query) {
     // PostgreSQL: db.execute() works for statements too
     await db.execute(query);
 }
+/**
+ * Execute a statement and report how many rows it changed.
+ *
+ * Optimistic concurrency (compare-and-swap) has to tell an applied write from a rejected one,
+ * which `executeStatement` throws away. Returns `undefined` when the driver reports no count,
+ * in which case callers must verify the stored value themselves instead of assuming success.
+ */
+async function executeStatementWithCount(db, query) {
+    await ensureDatabaseReady(db);
+    if (isDatabaseSqlite(db)) {
+        const result = db.run(query);
+        return typeof result?.changes === 'number' ? result.changes : undefined;
+    }
+    const result = await db.execute(query);
+    return typeof result?.rowCount === 'number' ? result.rowCount : undefined;
+}
 async function executePostgresLockedStatements(db, lockKey, statements) {
     await ensureDatabaseReady(db);
     if (isDatabaseSqlite(db)) {
@@ -260,6 +278,35 @@ async function executePostgresLockedStatements(db, lockKey, statements) {
         client.release();
     }
 }
+/**
+ * Creates the per-owner interface-key table.
+ *
+ * The table holds the owner's Pod credential, which the runtime needs *before* it can read
+ * anything inside that Pod, so it is created on first use rather than by a Pod-side migration.
+ */
+async function ensurePodInterfaceKeyTable(db) {
+    if (isDatabaseSqlite(db)) {
+        db.run((0, drizzle_orm_1.sql) `
+      CREATE TABLE IF NOT EXISTS identity_pod_interface_key (
+        owner_web_id TEXT PRIMARY KEY,
+        client_id TEXT NOT NULL,
+        sealed_secret TEXT NOT NULL,
+        created_at INTEGER NOT NULL DEFAULT (strftime('%s', 'now')),
+        updated_at INTEGER NOT NULL DEFAULT (strftime('%s', 'now'))
+      )
+    `);
+        return;
+    }
+    await db.execute((0, drizzle_orm_1.sql) `
+    CREATE TABLE IF NOT EXISTS identity_pod_interface_key (
+      owner_web_id TEXT PRIMARY KEY,
+      client_id TEXT NOT NULL,
+      sealed_secret TEXT NOT NULL,
+      created_at TIMESTAMPTZ NOT NULL DEFAULT NOW(),
+      updated_at TIMESTAMPTZ NOT NULL DEFAULT NOW()
+    )
+  `);
+}
 async function ensureCloudClusterTables(db) {
     await ensureDatabaseReady(db);
     if (db && typeof db === 'object') {

package/dist/identity/drizzle/schema.pg.d.ts

@@ -10,3 +10,12 @@ export declare const edgeNodes: any;
  * 用于服务间认证 (Business, Local SP, Cloud, Compute)
  */
 export declare const serviceTokens: any;
+/**
+ * Per-owner interface access key.
+ *
+ * A server-side component acts for a user through that user's own Pod credentials, so the
+ * client id/secret pair - the same kind of key a browser uses on the standard interface - is
+ * remembered here, sealed by the credential vault. It cannot live in the Pod: it is what
+ * grants access to the Pod.
+ */
+export declare const podInterfaceKeys: any;

package/dist/identity/drizzle/schema.pg.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.serviceTokens = exports.edgeNodes = exports.ddnsRecords = exports.usage = void 0;
+exports.podInterfaceKeys = exports.serviceTokens = exports.edgeNodes = exports.ddnsRecords = exports.usage = void 0;
 const pg_core_1 = require("drizzle-orm/pg-core");
 const bigint_1 = require("drizzle-orm/pg-core/columns/bigint");
 const integer_1 = require("drizzle-orm/pg-core/columns/integer");
@@ -79,4 +79,19 @@ exports.serviceTokens = (0, pg_core_1.pgTable)('cluster_service_token', {
     createdAt: (0, pg_core_1.timestamp)('created_at', { withTimezone: true, mode: 'date' }).notNull().defaultNow(),
     expiresAt: (0, pg_core_1.timestamp)('expires_at', { withTimezone: true, mode: 'date' }),
 });
+/**
+ * Per-owner interface access key.
+ *
+ * A server-side component acts for a user through that user's own Pod credentials, so the
+ * client id/secret pair - the same kind of key a browser uses on the standard interface - is
+ * remembered here, sealed by the credential vault. It cannot live in the Pod: it is what
+ * grants access to the Pod.
+ */
+exports.podInterfaceKeys = (0, pg_core_1.pgTable)('identity_pod_interface_key', {
+    ownerWebId: (0, pg_core_1.text)('owner_web_id').primaryKey(),
+    clientId: (0, pg_core_1.text)('client_id').notNull(),
+    sealedSecret: (0, pg_core_1.text)('sealed_secret').notNull(),
+    createdAt: (0, pg_core_1.timestamp)('created_at').notNull().defaultNow(),
+    updatedAt: (0, pg_core_1.timestamp)('updated_at').notNull().defaultNow(),
+});
 //# sourceMappingURL=schema.pg.js.map

package/dist/identity/drizzle/schema.sqlite.d.ts

@@ -1073,3 +1073,109 @@ export declare const serviceTokens: import("drizzle-orm/sqlite-core").SQLiteTabl
     };
     dialect: "sqlite";
 }>;
+/**
+ * Per-owner interface access key.
+ *
+ * A server-side component acts for a user through that user's own Pod credentials, so the
+ * client id/secret pair - the same kind of key a browser uses on the standard interface - is
+ * remembered here, sealed by the credential vault. It cannot live in the Pod: it is what
+ * grants access to the Pod.
+ */
+export declare const podInterfaceKeys: import("drizzle-orm/sqlite-core").SQLiteTableWithColumns<{
+    name: "identity_pod_interface_key";
+    schema: undefined;
+    columns: {
+        ownerWebId: import("drizzle-orm/sqlite-core").SQLiteColumn<{
+            name: "owner_web_id";
+            tableName: "identity_pod_interface_key";
+            dataType: "string";
+            columnType: "SQLiteText";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: true;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {
+            length: number | undefined;
+        }>;
+        clientId: import("drizzle-orm/sqlite-core").SQLiteColumn<{
+            name: "client_id";
+            tableName: "identity_pod_interface_key";
+            dataType: "string";
+            columnType: "SQLiteText";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {
+            length: number | undefined;
+        }>;
+        sealedSecret: import("drizzle-orm/sqlite-core").SQLiteColumn<{
+            name: "sealed_secret";
+            tableName: "identity_pod_interface_key";
+            dataType: "string";
+            columnType: "SQLiteText";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {
+            length: number | undefined;
+        }>;
+        createdAt: import("drizzle-orm/sqlite-core").SQLiteColumn<{
+            name: "created_at";
+            tableName: "identity_pod_interface_key";
+            dataType: "number";
+            columnType: "SQLiteInteger";
+            data: number;
+            driverParam: number;
+            notNull: true;
+            hasDefault: true;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: true;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        updatedAt: import("drizzle-orm/sqlite-core").SQLiteColumn<{
+            name: "updated_at";
+            tableName: "identity_pod_interface_key";
+            dataType: "number";
+            columnType: "SQLiteInteger";
+            data: number;
+            driverParam: number;
+            notNull: true;
+            hasDefault: true;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: true;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+    };
+    dialect: "sqlite";
+}>;

package/dist/identity/drizzle/schema.sqlite.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.serviceTokens = exports.edgeNodes = exports.ddnsRecords = exports.usage = void 0;
+exports.podInterfaceKeys = exports.serviceTokens = exports.edgeNodes = exports.ddnsRecords = exports.usage = void 0;
 const sqlite_core_1 = require("drizzle-orm/sqlite-core");
 exports.usage = (0, sqlite_core_1.sqliteTable)('identity_usage', {
     scopeType: (0, sqlite_core_1.text)('scope_type').notNull(), // 'account' | 'pod'
@@ -79,4 +79,19 @@ exports.serviceTokens = (0, sqlite_core_1.sqliteTable)('cluster_service_token',
     createdAt: (0, sqlite_core_1.integer)('created_at').notNull().$defaultFn(() => Math.floor(Date.now() / 1000)),
     expiresAt: (0, sqlite_core_1.integer)('expires_at'),
 });
+/**
+ * Per-owner interface access key.
+ *
+ * A server-side component acts for a user through that user's own Pod credentials, so the
+ * client id/secret pair - the same kind of key a browser uses on the standard interface - is
+ * remembered here, sealed by the credential vault. It cannot live in the Pod: it is what
+ * grants access to the Pod.
+ */
+exports.podInterfaceKeys = (0, sqlite_core_1.sqliteTable)('identity_pod_interface_key', {
+    ownerWebId: (0, sqlite_core_1.text)('owner_web_id').primaryKey(),
+    clientId: (0, sqlite_core_1.text)('client_id').notNull(),
+    sealedSecret: (0, sqlite_core_1.text)('sealed_secret').notNull(),
+    createdAt: (0, sqlite_core_1.integer)('created_at').notNull().$defaultFn(() => Math.floor(Date.now() / 1000)),
+    updatedAt: (0, sqlite_core_1.integer)('updated_at').notNull().$defaultFn(() => Math.floor(Date.now() / 1000)),
+});
 //# sourceMappingURL=schema.sqlite.js.map

package/dist/index.d.ts

@@ -15,7 +15,6 @@ export type { PostgresRdfTextIndexOptions } from './storage/rdf/PostgresRdfTextI
 export type { PostgresRdfVectorIndexOptions } from './storage/rdf/PostgresRdfVectorIndex';
 export * from './document';
 import { SubgraphSparqlHttpHandler } from './http/SubgraphSparqlHttpHandler';
-import { InternalPodDataHttpHandler } from './http/InternalPodDataHttpHandler';
 import { QuotaAdminHttpHandler } from './http/quota/QuotaAdminHttpHandler';
 import { SparqlUpdateResourceStore } from './storage/SparqlUpdateResourceStore';
 import { ClusterIngressRouter } from './http/ClusterIngressRouter';
@@ -127,6 +126,6 @@ export type { OwnedWebIdEntry, PodOwnershipResolver, PodOwnershipTarget, CssPodO
 export type { TunnelProvider, TunnelConfig, TunnelSetupOptions, TunnelStatus, } from './tunnel/TunnelProvider';
 export type { SubdomainRegistration, ConnectivityResult, SubdomainServiceOptions, } from './subdomain/SubdomainService';
 export { AppStaticAssetHandler } from './http/AppStaticAssetHandler';
-export { RepresentationPartialConvertingStore, MinioDataAccessor, SolidRdfDataAccessor, MixDataAccessor, ConfigurableLoggerFactory, resolveLogFilePattern, resolveCurrentLogFile, LOG_FILE_PATTERN, SparqlUpdateResourceStore, SubgraphQueryEngine, SubgraphSparqlHttpHandler, InternalPodDataHttpHandler, QuotaAdminHttpHandler, ClusterIngressRouter, ClusterWebSocketConfigurator, EdgeNodeDirectDebugHttpHandler, EdgeNodeProxyHttpHandler, RouterHttpHandler, RouterHttpRoute, TracingHandler, EdgeNodeCertificateHttpHandler, TerminalHttpHandler, DeviceNotificationHub, DeviceNotificationResourceListener, DeviceNotificationWebSocketServer, DeviceNotificationTicketHandler, registerDeviceNotificationRuntime, ReservedSuffixIdentifierGenerator, DrizzleIndexedStorage, LoginMethodGuardStorage, ValidatingIdentityProviderHttpHandler, PostgresKeyValueStorage, RedisKeyValueStorage, SqliteKeyValueStorage, BaseKeyValueStorage, DrizzleQuotaService, NoopQuotaService, HttpEntitlementProvider, NoopEntitlementProvider, PerAccountQuotaStrategy, TencentDnsProvider, EdgeNodeDnsCoordinator, Dns01CertificateProvisioner, SimpleEdgeNodeTunnelManager, NoopEdgeNodeTunnelManager, FrpTunnelManager, EdgeNodeHealthProbeService, assertPublicProbeTarget, createPinnedHeadProbeRequest, isPublicIpAddress, createPodOwnershipNodeAccessResolver, EdgeNodeAgent, EdgeNodeAgentInitializer, EdgeNodeCertificateService, AcmeCertificateManager, EdgeNodeModeDetector, ClusterIdentifierStrategy, UsageTrackingStore, CenterNodeRegistrationService, PodRoutingHttpHandler, ReactAppViewHandler, QuintStore, SqliteQuintStore, PgQuintStore, RdfTermDictionary, RdfQuadIndex, Rdf3xIndex, RdfTextIndex, RdfVectorIndex, PostgresRdfTextIndex, PostgresRdfVectorIndex, SolidRdfEngine, LocalQleverNativeSparqlClient, QleverSparqlEngine, RdfQuerySparqlEngine, PostgresRdfEngine, VectorStore, SqliteVectorStore, PostgresVectorStore, VectorHttpHandler, ProviderRegistry, ProviderRegistryImpl, EmbeddingService, EmbeddingServiceImpl, CredentialReader, CredentialReaderImpl, CloudflareTunnelProvider, LocalTunnelProvider, NgrokTunnelProvider, SubdomainService, MultiDomainIdentifierStrategy, SubdomainPodIdentifierStrategy, DisabledOidcHandler, DisabledIdentityProviderHandler, AutoDetectOidcHandler, AutoDetectIdentityProviderHandler, LoopbackClientIdAdapterFactory, RememberedClientGrantStore, RememberedConsentHandler, RememberedClientPromptFactory, SessionBoundIdentityProviderFactory, ScopedPickWebIdHandler, ConfiguredLoopbackDPoPWebIdExtractor, AccountStorageBindingsHandler, CssPodOwnershipResolver, UrlAwareRedisLocker, ProvisionPodCreator, ProvisionPodStore, ProvisionCodeCodec, LocalPodProvisioningService, SqliteSolidFsSyncJournal, RootedSolidFsSyncJournal, LocalRdfAuthorityRecoveryInitializer, ObservableResourceStore, RdfSearchReconciliationIntentSink, };
+export { RepresentationPartialConvertingStore, MinioDataAccessor, SolidRdfDataAccessor, MixDataAccessor, ConfigurableLoggerFactory, resolveLogFilePattern, resolveCurrentLogFile, LOG_FILE_PATTERN, SparqlUpdateResourceStore, SubgraphQueryEngine, SubgraphSparqlHttpHandler, QuotaAdminHttpHandler, ClusterIngressRouter, ClusterWebSocketConfigurator, EdgeNodeDirectDebugHttpHandler, EdgeNodeProxyHttpHandler, RouterHttpHandler, RouterHttpRoute, TracingHandler, EdgeNodeCertificateHttpHandler, TerminalHttpHandler, DeviceNotificationHub, DeviceNotificationResourceListener, DeviceNotificationWebSocketServer, DeviceNotificationTicketHandler, registerDeviceNotificationRuntime, ReservedSuffixIdentifierGenerator, DrizzleIndexedStorage, LoginMethodGuardStorage, ValidatingIdentityProviderHttpHandler, PostgresKeyValueStorage, RedisKeyValueStorage, SqliteKeyValueStorage, BaseKeyValueStorage, DrizzleQuotaService, NoopQuotaService, HttpEntitlementProvider, NoopEntitlementProvider, PerAccountQuotaStrategy, TencentDnsProvider, EdgeNodeDnsCoordinator, Dns01CertificateProvisioner, SimpleEdgeNodeTunnelManager, NoopEdgeNodeTunnelManager, FrpTunnelManager, EdgeNodeHealthProbeService, assertPublicProbeTarget, createPinnedHeadProbeRequest, isPublicIpAddress, createPodOwnershipNodeAccessResolver, EdgeNodeAgent, EdgeNodeAgentInitializer, EdgeNodeCertificateService, AcmeCertificateManager, EdgeNodeModeDetector, ClusterIdentifierStrategy, UsageTrackingStore, CenterNodeRegistrationService, PodRoutingHttpHandler, ReactAppViewHandler, QuintStore, SqliteQuintStore, PgQuintStore, RdfTermDictionary, RdfQuadIndex, Rdf3xIndex, RdfTextIndex, RdfVectorIndex, PostgresRdfTextIndex, PostgresRdfVectorIndex, SolidRdfEngine, LocalQleverNativeSparqlClient, QleverSparqlEngine, RdfQuerySparqlEngine, PostgresRdfEngine, VectorStore, SqliteVectorStore, PostgresVectorStore, VectorHttpHandler, ProviderRegistry, ProviderRegistryImpl, EmbeddingService, EmbeddingServiceImpl, CredentialReader, CredentialReaderImpl, CloudflareTunnelProvider, LocalTunnelProvider, NgrokTunnelProvider, SubdomainService, MultiDomainIdentifierStrategy, SubdomainPodIdentifierStrategy, DisabledOidcHandler, DisabledIdentityProviderHandler, AutoDetectOidcHandler, AutoDetectIdentityProviderHandler, LoopbackClientIdAdapterFactory, RememberedClientGrantStore, RememberedConsentHandler, RememberedClientPromptFactory, SessionBoundIdentityProviderFactory, ScopedPickWebIdHandler, ConfiguredLoopbackDPoPWebIdExtractor, AccountStorageBindingsHandler, CssPodOwnershipResolver, UrlAwareRedisLocker, ProvisionPodCreator, ProvisionPodStore, ProvisionCodeCodec, LocalPodProvisioningService, SqliteSolidFsSyncJournal, RootedSolidFsSyncJournal, LocalRdfAuthorityRecoveryInitializer, ObservableResourceStore, RdfSearchReconciliationIntentSink, };
 export type { ResourceChangeEvent, ResourceChangeListener, ResourceChangeRecorder, } from './storage/ObservableResourceStore';
 export { RdfHandlebarsTemplateEngine } from './util/templates/RdfHandlebarsTemplateEngine';

package/dist/index.js

@@ -14,9 +14,9 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
     for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.createPinnedHeadProbeRequest = exports.assertPublicProbeTarget = exports.EdgeNodeHealthProbeService = exports.FrpTunnelManager = exports.NoopEdgeNodeTunnelManager = exports.SimpleEdgeNodeTunnelManager = exports.Dns01CertificateProvisioner = exports.EdgeNodeDnsCoordinator = exports.TencentDnsProvider = exports.PerAccountQuotaStrategy = exports.NoopEntitlementProvider = exports.HttpEntitlementProvider = exports.NoopQuotaService = exports.DrizzleQuotaService = exports.BaseKeyValueStorage = exports.SqliteKeyValueStorage = exports.RedisKeyValueStorage = exports.PostgresKeyValueStorage = exports.ValidatingIdentityProviderHttpHandler = exports.LoginMethodGuardStorage = exports.DrizzleIndexedStorage = exports.ReservedSuffixIdentifierGenerator = exports.registerDeviceNotificationRuntime = exports.DeviceNotificationTicketHandler = exports.DeviceNotificationWebSocketServer = exports.DeviceNotificationResourceListener = exports.DeviceNotificationHub = exports.TerminalHttpHandler = exports.EdgeNodeCertificateHttpHandler = exports.TracingHandler = exports.RouterHttpRoute = exports.RouterHttpHandler = exports.EdgeNodeProxyHttpHandler = exports.EdgeNodeDirectDebugHttpHandler = exports.ClusterWebSocketConfigurator = exports.ClusterIngressRouter = exports.QuotaAdminHttpHandler = exports.InternalPodDataHttpHandler = exports.SubgraphSparqlHttpHandler = exports.SubgraphQueryEngine = exports.SparqlUpdateResourceStore = exports.LOG_FILE_PATTERN = exports.resolveCurrentLogFile = exports.resolveLogFilePattern = exports.ConfigurableLoggerFactory = exports.MixDataAccessor = exports.SolidRdfDataAccessor = exports.MinioDataAccessor = exports.RepresentationPartialConvertingStore = exports.AppStaticAssetHandler = void 0;
-exports.RememberedConsentHandler = exports.RememberedClientGrantStore = exports.LoopbackClientIdAdapterFactory = exports.AutoDetectIdentityProviderHandler = exports.AutoDetectOidcHandler = exports.DisabledIdentityProviderHandler = exports.DisabledOidcHandler = exports.SubdomainPodIdentifierStrategy = exports.MultiDomainIdentifierStrategy = exports.SubdomainService = exports.NgrokTunnelProvider = exports.LocalTunnelProvider = exports.CloudflareTunnelProvider = exports.CredentialReaderImpl = exports.CredentialReader = exports.EmbeddingServiceImpl = exports.EmbeddingService = exports.ProviderRegistryImpl = exports.ProviderRegistry = exports.VectorHttpHandler = exports.PostgresVectorStore = exports.SqliteVectorStore = exports.VectorStore = exports.PostgresRdfEngine = exports.RdfQuerySparqlEngine = exports.QleverSparqlEngine = exports.LocalQleverNativeSparqlClient = exports.SolidRdfEngine = exports.PostgresRdfVectorIndex = exports.PostgresRdfTextIndex = exports.RdfVectorIndex = exports.RdfTextIndex = exports.Rdf3xIndex = exports.RdfQuadIndex = exports.RdfTermDictionary = exports.PgQuintStore = exports.SqliteQuintStore = exports.QuintStore = exports.ReactAppViewHandler = exports.PodRoutingHttpHandler = exports.CenterNodeRegistrationService = exports.UsageTrackingStore = exports.ClusterIdentifierStrategy = exports.EdgeNodeModeDetector = exports.AcmeCertificateManager = exports.EdgeNodeCertificateService = exports.EdgeNodeAgentInitializer = exports.EdgeNodeAgent = exports.createPodOwnershipNodeAccessResolver = exports.isPublicIpAddress = void 0;
-exports.RdfHandlebarsTemplateEngine = exports.RdfSearchReconciliationIntentSink = exports.ObservableResourceStore = exports.LocalRdfAuthorityRecoveryInitializer = exports.RootedSolidFsSyncJournal = exports.SqliteSolidFsSyncJournal = exports.LocalPodProvisioningService = exports.ProvisionCodeCodec = exports.ProvisionPodStore = exports.ProvisionPodCreator = exports.UrlAwareRedisLocker = exports.CssPodOwnershipResolver = exports.AccountStorageBindingsHandler = exports.ConfiguredLoopbackDPoPWebIdExtractor = exports.ScopedPickWebIdHandler = exports.SessionBoundIdentityProviderFactory = exports.RememberedClientPromptFactory = void 0;
+exports.isPublicIpAddress = exports.createPinnedHeadProbeRequest = exports.assertPublicProbeTarget = exports.EdgeNodeHealthProbeService = exports.FrpTunnelManager = exports.NoopEdgeNodeTunnelManager = exports.SimpleEdgeNodeTunnelManager = exports.Dns01CertificateProvisioner = exports.EdgeNodeDnsCoordinator = exports.TencentDnsProvider = exports.PerAccountQuotaStrategy = exports.NoopEntitlementProvider = exports.HttpEntitlementProvider = exports.NoopQuotaService = exports.DrizzleQuotaService = exports.BaseKeyValueStorage = exports.SqliteKeyValueStorage = exports.RedisKeyValueStorage = exports.PostgresKeyValueStorage = exports.ValidatingIdentityProviderHttpHandler = exports.LoginMethodGuardStorage = exports.DrizzleIndexedStorage = exports.ReservedSuffixIdentifierGenerator = exports.registerDeviceNotificationRuntime = exports.DeviceNotificationTicketHandler = exports.DeviceNotificationWebSocketServer = exports.DeviceNotificationResourceListener = exports.DeviceNotificationHub = exports.TerminalHttpHandler = exports.EdgeNodeCertificateHttpHandler = exports.TracingHandler = exports.RouterHttpRoute = exports.RouterHttpHandler = exports.EdgeNodeProxyHttpHandler = exports.EdgeNodeDirectDebugHttpHandler = exports.ClusterWebSocketConfigurator = exports.ClusterIngressRouter = exports.QuotaAdminHttpHandler = exports.SubgraphSparqlHttpHandler = exports.SubgraphQueryEngine = exports.SparqlUpdateResourceStore = exports.LOG_FILE_PATTERN = exports.resolveCurrentLogFile = exports.resolveLogFilePattern = exports.ConfigurableLoggerFactory = exports.MixDataAccessor = exports.SolidRdfDataAccessor = exports.MinioDataAccessor = exports.RepresentationPartialConvertingStore = exports.AppStaticAssetHandler = void 0;
+exports.RememberedClientPromptFactory = exports.RememberedConsentHandler = exports.RememberedClientGrantStore = exports.LoopbackClientIdAdapterFactory = exports.AutoDetectIdentityProviderHandler = exports.AutoDetectOidcHandler = exports.DisabledIdentityProviderHandler = exports.DisabledOidcHandler = exports.SubdomainPodIdentifierStrategy = exports.MultiDomainIdentifierStrategy = exports.SubdomainService = exports.NgrokTunnelProvider = exports.LocalTunnelProvider = exports.CloudflareTunnelProvider = exports.CredentialReaderImpl = exports.CredentialReader = exports.EmbeddingServiceImpl = exports.EmbeddingService = exports.ProviderRegistryImpl = exports.ProviderRegistry = exports.VectorHttpHandler = exports.PostgresVectorStore = exports.SqliteVectorStore = exports.VectorStore = exports.PostgresRdfEngine = exports.RdfQuerySparqlEngine = exports.QleverSparqlEngine = exports.LocalQleverNativeSparqlClient = exports.SolidRdfEngine = exports.PostgresRdfVectorIndex = exports.PostgresRdfTextIndex = exports.RdfVectorIndex = exports.RdfTextIndex = exports.Rdf3xIndex = exports.RdfQuadIndex = exports.RdfTermDictionary = exports.PgQuintStore = exports.SqliteQuintStore = exports.QuintStore = exports.ReactAppViewHandler = exports.PodRoutingHttpHandler = exports.CenterNodeRegistrationService = exports.UsageTrackingStore = exports.ClusterIdentifierStrategy = exports.EdgeNodeModeDetector = exports.AcmeCertificateManager = exports.EdgeNodeCertificateService = exports.EdgeNodeAgentInitializer = exports.EdgeNodeAgent = exports.createPodOwnershipNodeAccessResolver = void 0;
+exports.RdfHandlebarsTemplateEngine = exports.RdfSearchReconciliationIntentSink = exports.ObservableResourceStore = exports.LocalRdfAuthorityRecoveryInitializer = exports.RootedSolidFsSyncJournal = exports.SqliteSolidFsSyncJournal = exports.LocalPodProvisioningService = exports.ProvisionCodeCodec = exports.ProvisionPodStore = exports.ProvisionPodCreator = exports.UrlAwareRedisLocker = exports.CssPodOwnershipResolver = exports.AccountStorageBindingsHandler = exports.ConfiguredLoopbackDPoPWebIdExtractor = exports.ScopedPickWebIdHandler = exports.SessionBoundIdentityProviderFactory = void 0;
 require("./runtime/configure-drizzle-solid");
 const RepresentationPartialConvertingStore_1 = require("./storage/RepresentationPartialConvertingStore");
 Object.defineProperty(exports, "RepresentationPartialConvertingStore", { enumerable: true, get: function () { return RepresentationPartialConvertingStore_1.RepresentationPartialConvertingStore; } });
@@ -37,8 +37,6 @@ Object.defineProperty(exports, "SubgraphQueryEngine", { enumerable: true, get: f
 __exportStar(require("./document"), exports);
 const SubgraphSparqlHttpHandler_1 = require("./http/SubgraphSparqlHttpHandler");
 Object.defineProperty(exports, "SubgraphSparqlHttpHandler", { enumerable: true, get: function () { return SubgraphSparqlHttpHandler_1.SubgraphSparqlHttpHandler; } });
-const InternalPodDataHttpHandler_1 = require("./http/InternalPodDataHttpHandler");
-Object.defineProperty(exports, "InternalPodDataHttpHandler", { enumerable: true, get: function () { return InternalPodDataHttpHandler_1.InternalPodDataHttpHandler; } });
 const QuotaAdminHttpHandler_1 = require("./http/quota/QuotaAdminHttpHandler");
 Object.defineProperty(exports, "QuotaAdminHttpHandler", { enumerable: true, get: function () { return QuotaAdminHttpHandler_1.QuotaAdminHttpHandler; } });
 const SparqlUpdateResourceStore_1 = require("./storage/SparqlUpdateResourceStore");

package/dist/runtime/GatewayAdminProxyAuth.d.ts

@@ -1,10 +1,9 @@
-import type { IncomingHttpHeaders, OutgoingHttpHeaders } from 'node:http';
+import type { IncomingHttpHeaders } from 'node:http';
 export declare const GATEWAY_ADMIN_PROXY_LOOPBACK_HEADER = "x-xpod-admin-proxy-loopback";
 export declare const GATEWAY_ADMIN_PROXY_TIMESTAMP_HEADER = "x-xpod-admin-proxy-timestamp";
 export declare const GATEWAY_ADMIN_PROXY_SIGNATURE_HEADER = "x-xpod-admin-proxy-signature";
-export declare const GATEWAY_ADMIN_PROXY_INTENT_HEADER = "x-xpod-admin-proxy-intent";
 export declare const GATEWAY_ADMIN_PROXY_NONCE_HEADER = "x-xpod-admin-proxy-nonce";
-export declare const GATEWAY_ADMIN_PROXY_HEADERS: readonly ["x-xpod-admin-proxy-loopback", "x-xpod-admin-proxy-timestamp", "x-xpod-admin-proxy-signature", "x-xpod-admin-proxy-intent", "x-xpod-admin-proxy-nonce"];
+export declare const GATEWAY_ADMIN_PROXY_HEADERS: readonly ["x-xpod-admin-proxy-loopback", "x-xpod-admin-proxy-timestamp", "x-xpod-admin-proxy-signature", "x-xpod-admin-proxy-nonce"];
 export declare function createGatewayAdminProxyAuthSecret(): string;
 export interface GatewayAdminProxyMarkerInput {
     secret: string;
@@ -13,28 +12,15 @@ export interface GatewayAdminProxyMarkerInput {
     originalClientLoopback: boolean;
     issuedAt?: number;
     nonce?: string;
-    intent?: GatewayAdminProxyIntent;
 }
 export interface GatewayAdminProxyMarkerVerification {
     present: boolean;
     valid: boolean;
     originalClientLoopback: boolean;
     nonce?: string;
-    intent?: GatewayAdminProxyIntent;
     reason?: string;
 }
-export interface GatewayAdminProxyIntent {
-    ownerWebId: string;
-    /** Physical Pod root when it differs from the identity provider WebID root. */
-    podBaseUrl?: string;
-    method: 'GET' | 'HEAD' | 'POST' | 'PUT' | 'PATCH' | 'DELETE';
-    resourceUrl: string;
-    principalKind: 'solid-user' | 'gateway-key-verifier';
-    scopes: string[];
-    /** SHA-256 hex digest of a POST body. Required for POST intents. */
-    bodyDigest?: string;
-}
-export declare function createGatewayAdminProxyHeaders(input: GatewayAdminProxyMarkerInput): OutgoingHttpHeaders;
+export declare function createGatewayAdminProxyHeaders(input: GatewayAdminProxyMarkerInput): Record<string, string>;
 export declare function stripGatewayAdminProxyHeaders(headers: IncomingHttpHeaders): void;
 export declare function isLoopbackRemoteAddress(remoteAddress: string | undefined): boolean;
 export declare function verifyGatewayAdminProxyHeaders(input: {
@@ -44,4 +30,3 @@ export declare function verifyGatewayAdminProxyHeaders(input: {
     url: string | undefined;
     now?: number;
 }): GatewayAdminProxyMarkerVerification;
-export declare function canonicalGatewayAdminProxyIntent(intent: GatewayAdminProxyIntent): string;

package/dist/runtime/GatewayAdminProxyAuth.js

@@ -1,24 +1,21 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.GATEWAY_ADMIN_PROXY_HEADERS = exports.GATEWAY_ADMIN_PROXY_NONCE_HEADER = exports.GATEWAY_ADMIN_PROXY_INTENT_HEADER = exports.GATEWAY_ADMIN_PROXY_SIGNATURE_HEADER = exports.GATEWAY_ADMIN_PROXY_TIMESTAMP_HEADER = exports.GATEWAY_ADMIN_PROXY_LOOPBACK_HEADER = void 0;
+exports.GATEWAY_ADMIN_PROXY_HEADERS = exports.GATEWAY_ADMIN_PROXY_NONCE_HEADER = exports.GATEWAY_ADMIN_PROXY_SIGNATURE_HEADER = exports.GATEWAY_ADMIN_PROXY_TIMESTAMP_HEADER = exports.GATEWAY_ADMIN_PROXY_LOOPBACK_HEADER = void 0;
 exports.createGatewayAdminProxyAuthSecret = createGatewayAdminProxyAuthSecret;
 exports.createGatewayAdminProxyHeaders = createGatewayAdminProxyHeaders;
 exports.stripGatewayAdminProxyHeaders = stripGatewayAdminProxyHeaders;
 exports.isLoopbackRemoteAddress = isLoopbackRemoteAddress;
 exports.verifyGatewayAdminProxyHeaders = verifyGatewayAdminProxyHeaders;
-exports.canonicalGatewayAdminProxyIntent = canonicalGatewayAdminProxyIntent;
 const node_crypto_1 = require("node:crypto");
 const node_net_1 = require("node:net");
 exports.GATEWAY_ADMIN_PROXY_LOOPBACK_HEADER = 'x-xpod-admin-proxy-loopback';
 exports.GATEWAY_ADMIN_PROXY_TIMESTAMP_HEADER = 'x-xpod-admin-proxy-timestamp';
 exports.GATEWAY_ADMIN_PROXY_SIGNATURE_HEADER = 'x-xpod-admin-proxy-signature';
-exports.GATEWAY_ADMIN_PROXY_INTENT_HEADER = 'x-xpod-admin-proxy-intent';
 exports.GATEWAY_ADMIN_PROXY_NONCE_HEADER = 'x-xpod-admin-proxy-nonce';
 exports.GATEWAY_ADMIN_PROXY_HEADERS = [
     exports.GATEWAY_ADMIN_PROXY_LOOPBACK_HEADER,
     exports.GATEWAY_ADMIN_PROXY_TIMESTAMP_HEADER,
     exports.GATEWAY_ADMIN_PROXY_SIGNATURE_HEADER,
-    exports.GATEWAY_ADMIN_PROXY_INTENT_HEADER,
     exports.GATEWAY_ADMIN_PROXY_NONCE_HEADER,
 ];
 const MAX_CLOCK_SKEW_MS = 60_000;
@@ -28,12 +25,10 @@ function createGatewayAdminProxyAuthSecret() {
 function createGatewayAdminProxyHeaders(input) {
     const issuedAt = input.issuedAt ?? Date.now();
     const loopback = input.originalClientLoopback ? '1' : '0';
-    const intent = input.intent ? canonicalGatewayAdminProxyIntent(input.intent) : undefined;
     return {
         [exports.GATEWAY_ADMIN_PROXY_LOOPBACK_HEADER]: loopback,
         [exports.GATEWAY_ADMIN_PROXY_TIMESTAMP_HEADER]: String(issuedAt),
         ...(input.nonce ? { [exports.GATEWAY_ADMIN_PROXY_NONCE_HEADER]: input.nonce } : {}),
-        ...(intent ? { [exports.GATEWAY_ADMIN_PROXY_INTENT_HEADER]: intent } : {}),
         [exports.GATEWAY_ADMIN_PROXY_SIGNATURE_HEADER]: signGatewayAdminProxyMarker({
             secret: input.secret,
             method: input.method,
@@ -41,7 +36,6 @@ function createGatewayAdminProxyHeaders(input) {
             loopback,
             issuedAt,
             nonce: input.nonce,
-            intent,
         }),
     };
 }
@@ -66,7 +60,6 @@ function verifyGatewayAdminProxyHeaders(input) {
     const timestamp = firstHeader(input.headers[exports.GATEWAY_ADMIN_PROXY_TIMESTAMP_HEADER]);
     const signature = firstHeader(input.headers[exports.GATEWAY_ADMIN_PROXY_SIGNATURE_HEADER]);
     const nonce = firstHeader(input.headers[exports.GATEWAY_ADMIN_PROXY_NONCE_HEADER]);
-    const intentHeader = firstHeader(input.headers[exports.GATEWAY_ADMIN_PROXY_INTENT_HEADER]);
     const present = loopback !== undefined || timestamp !== undefined || signature !== undefined;
     if (!present) {
         return { present: false, valid: false, originalClientLoopback: false };
@@ -87,10 +80,6 @@ function verifyGatewayAdminProxyHeaders(input) {
     if (Math.abs((input.now ?? Date.now()) - issuedAt) > MAX_CLOCK_SKEW_MS) {
         return { present: true, valid: false, originalClientLoopback: loopback === '1', reason: 'expired_marker' };
     }
-    const intent = parseGatewayAdminProxyIntent(intentHeader);
-    if (intentHeader !== undefined && !intent) {
-        return { present: true, valid: false, originalClientLoopback: loopback === '1', reason: 'invalid_intent' };
-    }
     const expected = signGatewayAdminProxyMarker({
         secret: input.secret,
         method: input.method,
@@ -98,12 +87,11 @@ function verifyGatewayAdminProxyHeaders(input) {
         loopback,
         issuedAt,
         nonce,
-        intent: intentHeader,
     });
     if (!safeEqual(signature, expected)) {
         return { present: true, valid: false, originalClientLoopback: loopback === '1', reason: 'bad_signature' };
     }
-    return { present: true, valid: true, originalClientLoopback: loopback === '1', nonce, intent };
+    return { present: true, valid: true, originalClientLoopback: loopback === '1', nonce };
 }
 function signGatewayAdminProxyMarker(input) {
     const payload = [
@@ -113,66 +101,9 @@ function signGatewayAdminProxyMarker(input) {
         input.loopback,
         String(input.issuedAt),
         input.nonce ?? '',
-        input.intent ?? '',
     ].join('\n');
     return (0, node_crypto_1.createHmac)('sha256', input.secret).update(payload).digest('base64url');
 }
-function canonicalGatewayAdminProxyIntent(intent) {
-    return JSON.stringify({
-        ownerWebId: intent.ownerWebId,
-        ...(intent.podBaseUrl ? { podBaseUrl: intent.podBaseUrl } : {}),
-        method: intent.method,
-        resourceUrl: intent.resourceUrl,
-        principalKind: intent.principalKind,
-        scopes: [...intent.scopes].sort(),
-        ...(intent.bodyDigest ? { bodyDigest: intent.bodyDigest } : {}),
-    });
-}
-function parseGatewayAdminProxyIntent(value) {
-    if (!value) {
-        return undefined;
-    }
-    try {
-        const parsed = JSON.parse(value);
-        if (typeof parsed.ownerWebId !== 'string' ||
-            typeof parsed.resourceUrl !== 'string' ||
-            (parsed.podBaseUrl !== undefined && !isHttpUrl(parsed.podBaseUrl)) ||
-            (parsed.method !== 'GET' && parsed.method !== 'HEAD' && parsed.method !== 'POST' && parsed.method !== 'PUT' && parsed.method !== 'PATCH' && parsed.method !== 'DELETE') ||
-            (parsed.principalKind !== 'solid-user' && parsed.principalKind !== 'gateway-key-verifier') ||
-            !Array.isArray(parsed.scopes) ||
-            !parsed.scopes.every((scope) => typeof scope === 'string') ||
-            (parsed.bodyDigest !== undefined && !isSha256Hex(parsed.bodyDigest)) ||
-            (parsed.method === 'POST' && !isSha256Hex(parsed.bodyDigest))) {
-            return undefined;
-        }
-        return {
-            ownerWebId: parsed.ownerWebId,
-            ...(parsed.podBaseUrl ? { podBaseUrl: parsed.podBaseUrl } : {}),
-            method: parsed.method,
-            resourceUrl: parsed.resourceUrl,
-            principalKind: parsed.principalKind,
-            scopes: parsed.scopes,
-            ...(parsed.bodyDigest ? { bodyDigest: parsed.bodyDigest } : {}),
-        };
-    }
-    catch {
-        return undefined;
-    }
-}
-function isHttpUrl(value) {
-    if (typeof value !== 'string')
-        return false;
-    try {
-        const url = new URL(value);
-        return url.protocol === 'http:' || url.protocol === 'https:';
-    }
-    catch {
-        return false;
-    }
-}
-function isSha256Hex(value) {
-    return typeof value === 'string' && /^[a-f0-9]{64}$/u.test(value);
-}
 function safeEqual(actual, expected) {
     const actualBuffer = Buffer.from(actual);
     const expectedBuffer = Buffer.from(expected);

package/dist/runtime/Proxy.d.ts

@@ -73,7 +73,6 @@ export declare class GatewayProxy {
     private shouldRouteToApi;
     private pathnameFromRequestUrl;
     private applyInternalAdminProxyHeaders;
-    private verifiedInternalPodProxyHeaders;
     private isApiHost;
     private configuredApiHosts;
     private hostsFromUrlList;
@@ -94,6 +93,15 @@ export declare class GatewayProxy {
      * Add CORS headers matching CSS CorsHandler configuration
      */
     private addCorsHeaders;
+    /**
+     * Whether this request carries operator authority.
+     *
+     * `/service/*` exposes logs and service control, so a caller that only reached the Gateway
+     * through a tunnel must not get it - whatever address it presents. A local caller counts, and
+     * so does a signed gateway admin proxy header, which is how the same machine proves it is the
+     * operator through a local forwarder.
+     */
+    private hasOperatorAuthority;
     private handleInternalApi;
     private isCssReady;
     private normalizeTarget;
@@ -125,3 +133,4 @@ export interface GatewayProxyOptions {
      */
     ingressPort?: number;
 }
+export declare function forwardedFromOutside(req: http.IncomingMessage): boolean;