@undefineds.co/xpod 0.4.20 → 0.4.25

package/dist/http/LocalPodDeletionHttpHandler.js

@@ -0,0 +1,125 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.LocalPodDeletionHttpHandler = void 0;
+const node_crypto_1 = require("node:crypto");
+const community_server_1 = require("@solid/community-server");
+const LocalProvisionState_1 = require("../provision/LocalProvisionState");
+const PodDeletionRoute_1 = require("../provision/PodDeletionRoute");
+/** Executes only a local root credential or an exact, authenticated Cloud command. */
+class LocalPodDeletionHttpHandler extends community_server_1.HttpHandler {
+    constructor(options) {
+        super();
+        this.options = options;
+        this.setupPath = (0, LocalProvisionState_1.resolveLocalSetupPath)(process.env.XPOD_LOCAL_SETUP_PATH, options.rootFilePath);
+        this.providerId = (0, LocalProvisionState_1.resolveLocalSetupProviderId)(process.env.XPOD_PROVIDER_ID);
+        this.configuredServiceToken = process.env.XPOD_SERVICE_TOKEN;
+    }
+    async canHandle({ request }) {
+        if (!(0, PodDeletionRoute_1.podDeletionRouteName)(request.method, request.url ?? '')) {
+            throw new community_server_1.NotImplementedHttpError();
+        }
+    }
+    async handle({ request, response }) {
+        try {
+            await this.execute({ request, response });
+        }
+        catch (error) {
+            // This route runs before CSS's normal operation/error pipeline. Reuse its
+            // negotiator and writer so command failures retain their HTTP status.
+            const result = await this.options.errorHandler.handleSafe({
+                error: community_server_1.HttpError.isInstance(error) ? error : new community_server_1.InternalServerError('POD_DELETE_NODE_FAILED'),
+                request,
+            });
+            await this.options.responseWriter.handleSafe({ response, result });
+        }
+    }
+    async execute({ request, response }) {
+        const name = (0, PodDeletionRoute_1.podDeletionRouteName)(request.method, request.url ?? '');
+        if (!name) {
+            throw new community_server_1.NotImplementedHttpError();
+        }
+        const storageUrl = new URL(`${name}/`, this.options.storageBaseUrl.replace(/\/?$/u, '/')).href;
+        const state = (0, LocalProvisionState_1.readLocalProvisionState)(this.setupPath, this.providerId);
+        const authorization = request.headers.authorization ?? '';
+        const serviceToken = this.configuredServiceToken || state?.serviceToken;
+        if (serviceToken && authorization.startsWith('Bearer ') && sameSecret(authorization.slice(7), serviceToken)) {
+            await this.options.lifecycle.deleteLocal(storageUrl);
+        }
+        else {
+            const operationId = request.headers['x-xpod-pod-deletion-operation'];
+            const grant = /^XpodPodDelete ([a-zA-Z0-9_-]{43})$/u.exec(authorization)?.[1];
+            if (!grant || typeof operationId !== 'string' || !/^[a-f0-9]{8}(?:-[a-f0-9]{4}){3}-[a-f0-9]{12}$/u.test(operationId)) {
+                throw new community_server_1.UnauthorizedHttpError('POD_DELETE_INVALID_COMMAND');
+            }
+            const command = { operationId, grant, storageUrl };
+            const claimed = await this.callback(state, command, 'claim');
+            const operation = claimed?.operation;
+            if (!operation || operation.operationId !== operationId || operation.nodeId !== state?.nodeId ||
+                operation.storageUrl !== storageUrl || typeof operation.accountId !== 'string' || !operation.accountId ||
+                typeof operation.podId !== 'string' || !operation.podId ||
+                typeof operation.remotePodId !== 'string' || !operation.remotePodId ||
+                !Array.isArray(operation.ownerWebIds) || !operation.ownerWebIds.length ||
+                operation.ownerWebIds.some((webId) => typeof webId !== 'string' || !webId) ||
+                operation.action !== 'delete-pod' || !['claimed', 'completed'].includes(operation.state)) {
+                throw new community_server_1.ForbiddenHttpError('POD_DELETE_INVALID_GRANT');
+            }
+            // A completed command must never resolve a newly provisioned Pod at the same URL.
+            if (operation.state !== 'completed') {
+                await this.options.lifecycle.deleteLocal(storageUrl, operationId, {
+                    podId: operation.remotePodId, ownerWebIds: operation.ownerWebIds,
+                });
+            }
+            const completion = await this.callback(state, command, 'complete');
+            if (completion?.success !== true) {
+                throw new community_server_1.HttpError(502, 'PodDeletionGatewayError', 'POD_DELETE_NOT_ACKNOWLEDGED');
+            }
+        }
+        response.statusCode = 200;
+        response.setHeader('content-type', 'application/json');
+        response.end(JSON.stringify({ success: true, storageUrl }));
+    }
+    async callback(state, command, action) {
+        if (!state?.cloudApiUrl || !state.nodeId || !state.nodeToken) {
+            throw new community_server_1.UnauthorizedHttpError('POD_DELETE_NODE_AUTH_REQUIRED');
+        }
+        let root;
+        try {
+            root = new URL(state.cloudApiUrl);
+        }
+        catch {
+            throw new community_server_1.UnauthorizedHttpError('POD_DELETE_NODE_AUTH_REQUIRED');
+        }
+        if (!['http:', 'https:'].includes(root.protocol) || root.username || root.password || root.search || root.hash) {
+            throw new community_server_1.UnauthorizedHttpError('POD_DELETE_NODE_AUTH_REQUIRED');
+        }
+        let result;
+        try {
+            result = await fetch(new URL(`api/pod-deletions/${command.operationId}/${action}`, root.href.replace(/\/?$/u, '/')), {
+                method: 'POST', redirect: 'error', signal: AbortSignal.timeout(15_000),
+                headers: { authorization: `XpodNode ${state.nodeId}:${state.nodeToken}`, 'content-type': 'application/json' },
+                body: JSON.stringify({ grant: command.grant, storageUrl: command.storageUrl }),
+            });
+        }
+        catch {
+            throw new community_server_1.HttpError(502, 'PodDeletionGatewayError', 'POD_DELETE_NODE_UNAVAILABLE');
+        }
+        if (result.status === 401 || result.status === 403) {
+            throw new community_server_1.ForbiddenHttpError('POD_DELETE_INVALID_GRANT');
+        }
+        if (!result.ok) {
+            throw new community_server_1.HttpError(502, 'PodDeletionGatewayError', 'POD_DELETE_NODE_FAILED');
+        }
+        try {
+            return await result.json();
+        }
+        catch {
+            throw new community_server_1.HttpError(502, 'PodDeletionGatewayError', 'POD_DELETE_INVALID_RESPONSE');
+        }
+    }
+}
+exports.LocalPodDeletionHttpHandler = LocalPodDeletionHttpHandler;
+function sameSecret(actual, expected) {
+    const left = Buffer.from(actual), right = Buffer.from(expected);
+    return left.length === right.length && (0, node_crypto_1.timingSafeEqual)(left, right);
+}
+//# sourceMappingURL=LocalPodDeletionHttpHandler.js.map

package/dist/http/LocalPodDeletionHttpHandler.jsonld

@@ -0,0 +1,115 @@
+{
+  "@context": [
+    "https://linkedsoftwaredependencies.org/bundles/npm/@undefineds.co/xpod/^0.0.0/components/context.jsonld",
+    "https://linkedsoftwaredependencies.org/bundles/npm/@solid/community-server/^8.0.0/components/context.jsonld"
+  ],
+  "@id": "npmd:@undefineds.co/xpod",
+  "components": [
+    {
+      "@id": "undefineds:dist/http/LocalPodDeletionHttpHandler.jsonld#LocalPodDeletionHttpHandler",
+      "@type": "Class",
+      "requireElement": "LocalPodDeletionHttpHandler",
+      "extends": [
+        "css:dist/server/HttpHandler.jsonld#HttpHandler"
+      ],
+      "comment": "Executes only a local root credential or an exact, authenticated Cloud command.",
+      "parameters": [
+        {
+          "@id": "undefineds:dist/http/LocalPodDeletionHttpHandler.jsonld#LocalPodDeletionHttpHandler_options_lifecycle",
+          "range": "undefineds:dist/service/PodDeletionLifecycleService.jsonld#PodDeletionLifecycleService"
+        },
+        {
+          "@id": "undefineds:dist/http/LocalPodDeletionHttpHandler.jsonld#LocalPodDeletionHttpHandler_options_storageBaseUrl",
+          "range": "xsd:string"
+        },
+        {
+          "@id": "undefineds:dist/http/LocalPodDeletionHttpHandler.jsonld#LocalPodDeletionHttpHandler_options_rootFilePath",
+          "range": "xsd:string"
+        },
+        {
+          "@id": "undefineds:dist/http/LocalPodDeletionHttpHandler.jsonld#LocalPodDeletionHttpHandler_options_errorHandler",
+          "range": "css:dist/http/output/error/ErrorHandler.jsonld#ErrorHandler"
+        },
+        {
+          "@id": "undefineds:dist/http/LocalPodDeletionHttpHandler.jsonld#LocalPodDeletionHttpHandler_options_responseWriter",
+          "range": "css:dist/http/output/ResponseWriter.jsonld#ResponseWriter"
+        }
+      ],
+      "memberFields": [
+        {
+          "@id": "undefineds:dist/http/LocalPodDeletionHttpHandler.jsonld#LocalPodDeletionHttpHandler__member_options",
+          "memberFieldName": "options"
+        },
+        {
+          "@id": "undefineds:dist/http/LocalPodDeletionHttpHandler.jsonld#LocalPodDeletionHttpHandler__member_setupPath",
+          "memberFieldName": "setupPath"
+        },
+        {
+          "@id": "undefineds:dist/http/LocalPodDeletionHttpHandler.jsonld#LocalPodDeletionHttpHandler__member_providerId",
+          "memberFieldName": "providerId"
+        },
+        {
+          "@id": "undefineds:dist/http/LocalPodDeletionHttpHandler.jsonld#LocalPodDeletionHttpHandler__member_configuredServiceToken",
+          "memberFieldName": "configuredServiceToken"
+        },
+        {
+          "@id": "undefineds:dist/http/LocalPodDeletionHttpHandler.jsonld#LocalPodDeletionHttpHandler__member_constructor",
+          "memberFieldName": "constructor"
+        },
+        {
+          "@id": "undefineds:dist/http/LocalPodDeletionHttpHandler.jsonld#LocalPodDeletionHttpHandler__member_canHandle",
+          "memberFieldName": "canHandle"
+        },
+        {
+          "@id": "undefineds:dist/http/LocalPodDeletionHttpHandler.jsonld#LocalPodDeletionHttpHandler__member_handle",
+          "memberFieldName": "handle"
+        },
+        {
+          "@id": "undefineds:dist/http/LocalPodDeletionHttpHandler.jsonld#LocalPodDeletionHttpHandler__member_execute",
+          "memberFieldName": "execute"
+        },
+        {
+          "@id": "undefineds:dist/http/LocalPodDeletionHttpHandler.jsonld#LocalPodDeletionHttpHandler__member_callback",
+          "memberFieldName": "callback"
+        }
+      ],
+      "constructorArguments": [
+        {
+          "@id": "undefineds:dist/http/LocalPodDeletionHttpHandler.jsonld#LocalPodDeletionHttpHandler_options__constructorArgument",
+          "fields": [
+            {
+              "keyRaw": "lifecycle",
+              "value": {
+                "@id": "undefineds:dist/http/LocalPodDeletionHttpHandler.jsonld#LocalPodDeletionHttpHandler_options_lifecycle"
+              }
+            },
+            {
+              "keyRaw": "storageBaseUrl",
+              "value": {
+                "@id": "undefineds:dist/http/LocalPodDeletionHttpHandler.jsonld#LocalPodDeletionHttpHandler_options_storageBaseUrl"
+              }
+            },
+            {
+              "keyRaw": "rootFilePath",
+              "value": {
+                "@id": "undefineds:dist/http/LocalPodDeletionHttpHandler.jsonld#LocalPodDeletionHttpHandler_options_rootFilePath"
+              }
+            },
+            {
+              "keyRaw": "errorHandler",
+              "value": {
+                "@id": "undefineds:dist/http/LocalPodDeletionHttpHandler.jsonld#LocalPodDeletionHttpHandler_options_errorHandler"
+              }
+            },
+            {
+              "keyRaw": "responseWriter",
+              "value": {
+                "@id": "undefineds:dist/http/LocalPodDeletionHttpHandler.jsonld#LocalPodDeletionHttpHandler_options_responseWriter"
+              }
+            }
+          ]
+        }
+      ]
+    }
+  ]
+}

package/dist/http/PodDeletionMutationGuard.d.ts

@@ -0,0 +1,9 @@
+import { HttpHandler, type HttpHandlerInput } from '@solid/community-server';
+/** Runs before Pod write handlers, keeping a durable deletion snapshot stable across retries. */
+export declare class PodDeletionMutationGuard extends HttpHandler {
+    private readonly baseUrl;
+    private readonly operations;
+    constructor(identityDbUrl: string, baseUrl: string);
+    canHandle({ request }: HttpHandlerInput): Promise<void>;
+    handle({ response }: HttpHandlerInput): Promise<void>;
+}

package/dist/http/PodDeletionMutationGuard.js

@@ -0,0 +1,29 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PodDeletionMutationGuard = void 0;
+const community_server_1 = require("@solid/community-server");
+const PodDeletionOperationRepository_1 = require("../identity/drizzle/PodDeletionOperationRepository");
+/** Runs before Pod write handlers, keeping a durable deletion snapshot stable across retries. */
+class PodDeletionMutationGuard extends community_server_1.HttpHandler {
+    constructor(identityDbUrl, baseUrl) {
+        super();
+        this.baseUrl = baseUrl;
+        this.operations = new PodDeletionOperationRepository_1.PodDeletionOperationRepository(identityDbUrl);
+    }
+    async canHandle({ request }) {
+        if (!['PUT', 'PATCH', 'POST', 'DELETE'].includes(request.method ?? '')) {
+            throw new community_server_1.NotImplementedHttpError();
+        }
+        const path = new URL(request.url ?? '/', this.baseUrl).href;
+        if (!await this.operations.blocksMutation(path)) {
+            throw new community_server_1.NotImplementedHttpError();
+        }
+    }
+    async handle({ response }) {
+        response.statusCode = 409;
+        response.setHeader('content-type', 'application/json');
+        response.end(JSON.stringify({ error: 'POD_DELETE_IN_PROGRESS' }));
+    }
+}
+exports.PodDeletionMutationGuard = PodDeletionMutationGuard;
+//# sourceMappingURL=PodDeletionMutationGuard.js.map

package/dist/http/PodDeletionMutationGuard.jsonld

@@ -0,0 +1,58 @@
+{
+  "@context": [
+    "https://linkedsoftwaredependencies.org/bundles/npm/@undefineds.co/xpod/^0.0.0/components/context.jsonld",
+    "https://linkedsoftwaredependencies.org/bundles/npm/@solid/community-server/^8.0.0/components/context.jsonld"
+  ],
+  "@id": "npmd:@undefineds.co/xpod",
+  "components": [
+    {
+      "@id": "undefineds:dist/http/PodDeletionMutationGuard.jsonld#PodDeletionMutationGuard",
+      "@type": "Class",
+      "requireElement": "PodDeletionMutationGuard",
+      "extends": [
+        "css:dist/server/HttpHandler.jsonld#HttpHandler"
+      ],
+      "comment": "Runs before Pod write handlers, keeping a durable deletion snapshot stable across retries.",
+      "parameters": [
+        {
+          "@id": "undefineds:dist/http/PodDeletionMutationGuard.jsonld#PodDeletionMutationGuard_identityDbUrl",
+          "range": "xsd:string"
+        },
+        {
+          "@id": "undefineds:dist/http/PodDeletionMutationGuard.jsonld#PodDeletionMutationGuard_baseUrl",
+          "range": "xsd:string"
+        }
+      ],
+      "memberFields": [
+        {
+          "@id": "undefineds:dist/http/PodDeletionMutationGuard.jsonld#PodDeletionMutationGuard__member_baseUrl",
+          "memberFieldName": "baseUrl"
+        },
+        {
+          "@id": "undefineds:dist/http/PodDeletionMutationGuard.jsonld#PodDeletionMutationGuard__member_operations",
+          "memberFieldName": "operations"
+        },
+        {
+          "@id": "undefineds:dist/http/PodDeletionMutationGuard.jsonld#PodDeletionMutationGuard__member_constructor",
+          "memberFieldName": "constructor"
+        },
+        {
+          "@id": "undefineds:dist/http/PodDeletionMutationGuard.jsonld#PodDeletionMutationGuard__member_canHandle",
+          "memberFieldName": "canHandle"
+        },
+        {
+          "@id": "undefineds:dist/http/PodDeletionMutationGuard.jsonld#PodDeletionMutationGuard__member_handle",
+          "memberFieldName": "handle"
+        }
+      ],
+      "constructorArguments": [
+        {
+          "@id": "undefineds:dist/http/PodDeletionMutationGuard.jsonld#PodDeletionMutationGuard_identityDbUrl"
+        },
+        {
+          "@id": "undefineds:dist/http/PodDeletionMutationGuard.jsonld#PodDeletionMutationGuard_baseUrl"
+        }
+      ]
+    }
+  ]
+}

package/dist/http/PodMutationLockingHttpHandler.d.ts

@@ -0,0 +1,14 @@
+import { HttpHandler, type ExpiringReadWriteLocker, type HttpHandlerInput, type PodStore } from '@solid/community-server';
+/** Keeps the complete Pod mutation pipeline inside the Pod deletion barrier. */
+export declare class PodMutationLockingHttpHandler extends HttpHandler {
+    private readonly source;
+    private readonly podStore;
+    private readonly resourceLocker;
+    private readonly operations;
+    private readonly root;
+    constructor(source: HttpHandler, podStore: PodStore, resourceLocker: ExpiringReadWriteLocker, identityDbUrl: string, baseUrl: string);
+    canHandle(input: HttpHandlerInput): Promise<void>;
+    handle(input: HttpHandlerInput): Promise<void>;
+    private withReadLock;
+    private findPod;
+}

package/dist/http/PodMutationLockingHttpHandler.js

@@ -0,0 +1,93 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PodMutationLockingHttpHandler = void 0;
+const community_server_1 = require("@solid/community-server");
+const PodDeletionOperationRepository_1 = require("../identity/drizzle/PodDeletionOperationRepository");
+const PodMutationLock_1 = require("../provision/PodMutationLock");
+/** Keeps the complete Pod mutation pipeline inside the Pod deletion barrier. */
+class PodMutationLockingHttpHandler extends community_server_1.HttpHandler {
+    constructor(source, podStore, resourceLocker, identityDbUrl, baseUrl) {
+        super();
+        this.source = source;
+        this.podStore = podStore;
+        this.resourceLocker = resourceLocker;
+        this.operations = new PodDeletionOperationRepository_1.PodDeletionOperationRepository(identityDbUrl);
+        this.root = new URL(baseUrl.replace(/\/?$/u, '/'));
+    }
+    async canHandle(input) {
+        await this.source.canHandle(input);
+    }
+    async handle(input) {
+        if (!['PUT', 'PATCH', 'POST', 'DELETE'].includes(input.request.method ?? '')) {
+            return this.source.handleSafe(input);
+        }
+        // Request Host is deliberately ignored; absolute-form URLs cannot change
+        // which registered Pod is protected by this instance's canonical gate.
+        const target = new URL(input.request.url ?? '/', this.root);
+        if (target.origin !== this.root.origin || target.username || target.password || target.hash ||
+            !target.pathname.startsWith(this.root.pathname)) {
+            throw new community_server_1.BadRequestHttpError('Invalid Pod mutation target');
+        }
+        const relative = target.pathname.slice(this.root.pathname.length);
+        if (/^(?:\.account|provision)(?:\/|$)/u.test(relative)) {
+            return this.source.handleSafe(input);
+        }
+        target.search = '';
+        const found = await this.findPod(target);
+        // A server-root registration still covers every descendant Pod.
+        const expected = found?.baseUrl === this.root.href ? undefined : found;
+        const revision = expected ? undefined : await this.operations.namespaceDeletionRevision(this.root.href);
+        await this.withReadLock((0, PodMutationLock_1.podMutationNamespaceLockIdentifier)(this.root.href), async () => {
+            if (!expected) {
+                if (await this.operations.blocksNamespaceMutation(this.root.href)) {
+                    throw new community_server_1.ConflictHttpError('POD_DELETE_IN_PROGRESS');
+                }
+                if (revision !== await this.operations.namespaceDeletionRevision(this.root.href)) {
+                    throw new community_server_1.ConflictHttpError('POD_NAMESPACE_CHANGED');
+                }
+                await this.source.handleSafe(input);
+                return;
+            }
+            await this.withReadLock((0, PodMutationLock_1.podMutationLockIdentifier)(expected.baseUrl), async () => {
+                const current = await this.podStore.findByBaseUrl(expected.baseUrl);
+                if (!current || current.id !== expected.id || current.accountId !== expected.accountId) {
+                    throw new community_server_1.ConflictHttpError('POD_INCARNATION_CHANGED');
+                }
+                if (await this.operations.blocksMutation(expected.baseUrl)) {
+                    throw new community_server_1.ConflictHttpError('POD_DELETE_IN_PROGRESS');
+                }
+                await this.source.handleSafe(input);
+            });
+        });
+    }
+    async withReadLock(identifier, action) {
+        await this.resourceLocker.withReadLock(identifier, async (maintainLock) => {
+            const renewal = typeof maintainLock === 'function' ? setInterval(maintainLock, 1_000) : undefined;
+            try {
+                await action();
+            }
+            finally {
+                if (renewal) {
+                    clearInterval(renewal);
+                }
+            }
+        });
+    }
+    async findPod(target) {
+        let pathname = target.pathname.endsWith('/') ? target.pathname : `${target.pathname}/`;
+        while (pathname.startsWith(this.root.pathname)) {
+            const baseUrl = new URL(pathname, this.root).href;
+            const pod = await this.podStore.findByBaseUrl(baseUrl);
+            if (pod) {
+                return { baseUrl, ...pod };
+            }
+            if (pathname === this.root.pathname) {
+                break;
+            }
+            pathname = pathname.slice(0, pathname.slice(0, -1).lastIndexOf('/') + 1);
+        }
+        return undefined;
+    }
+}
+exports.PodMutationLockingHttpHandler = PodMutationLockingHttpHandler;
+//# sourceMappingURL=PodMutationLockingHttpHandler.js.map

package/dist/http/PodMutationLockingHttpHandler.jsonld

@@ -0,0 +1,99 @@
+{
+  "@context": [
+    "https://linkedsoftwaredependencies.org/bundles/npm/@undefineds.co/xpod/^0.0.0/components/context.jsonld",
+    "https://linkedsoftwaredependencies.org/bundles/npm/@solid/community-server/^8.0.0/components/context.jsonld"
+  ],
+  "@id": "npmd:@undefineds.co/xpod",
+  "components": [
+    {
+      "@id": "undefineds:dist/http/PodMutationLockingHttpHandler.jsonld#PodMutationLockingHttpHandler",
+      "@type": "Class",
+      "requireElement": "PodMutationLockingHttpHandler",
+      "extends": [
+        "css:dist/server/HttpHandler.jsonld#HttpHandler"
+      ],
+      "comment": "Keeps the complete Pod mutation pipeline inside the Pod deletion barrier.",
+      "parameters": [
+        {
+          "@id": "undefineds:dist/http/PodMutationLockingHttpHandler.jsonld#PodMutationLockingHttpHandler_identityDbUrl",
+          "range": "xsd:string"
+        },
+        {
+          "@id": "undefineds:dist/http/PodMutationLockingHttpHandler.jsonld#PodMutationLockingHttpHandler_baseUrl",
+          "range": "xsd:string"
+        },
+        {
+          "@id": "undefineds:dist/http/PodMutationLockingHttpHandler.jsonld#PodMutationLockingHttpHandler_source",
+          "range": "css:dist/server/HttpHandler.jsonld#HttpHandler"
+        },
+        {
+          "@id": "undefineds:dist/http/PodMutationLockingHttpHandler.jsonld#PodMutationLockingHttpHandler_podStore",
+          "range": "css:dist/identity/interaction/pod/util/PodStore.jsonld#PodStore"
+        },
+        {
+          "@id": "undefineds:dist/http/PodMutationLockingHttpHandler.jsonld#PodMutationLockingHttpHandler_resourceLocker",
+          "range": "css:dist/util/locking/ExpiringReadWriteLocker.jsonld#ExpiringReadWriteLocker"
+        }
+      ],
+      "memberFields": [
+        {
+          "@id": "undefineds:dist/http/PodMutationLockingHttpHandler.jsonld#PodMutationLockingHttpHandler__member_source",
+          "memberFieldName": "source"
+        },
+        {
+          "@id": "undefineds:dist/http/PodMutationLockingHttpHandler.jsonld#PodMutationLockingHttpHandler__member_podStore",
+          "memberFieldName": "podStore"
+        },
+        {
+          "@id": "undefineds:dist/http/PodMutationLockingHttpHandler.jsonld#PodMutationLockingHttpHandler__member_resourceLocker",
+          "memberFieldName": "resourceLocker"
+        },
+        {
+          "@id": "undefineds:dist/http/PodMutationLockingHttpHandler.jsonld#PodMutationLockingHttpHandler__member_operations",
+          "memberFieldName": "operations"
+        },
+        {
+          "@id": "undefineds:dist/http/PodMutationLockingHttpHandler.jsonld#PodMutationLockingHttpHandler__member_root",
+          "memberFieldName": "root"
+        },
+        {
+          "@id": "undefineds:dist/http/PodMutationLockingHttpHandler.jsonld#PodMutationLockingHttpHandler__member_constructor",
+          "memberFieldName": "constructor"
+        },
+        {
+          "@id": "undefineds:dist/http/PodMutationLockingHttpHandler.jsonld#PodMutationLockingHttpHandler__member_canHandle",
+          "memberFieldName": "canHandle"
+        },
+        {
+          "@id": "undefineds:dist/http/PodMutationLockingHttpHandler.jsonld#PodMutationLockingHttpHandler__member_handle",
+          "memberFieldName": "handle"
+        },
+        {
+          "@id": "undefineds:dist/http/PodMutationLockingHttpHandler.jsonld#PodMutationLockingHttpHandler__member_withReadLock",
+          "memberFieldName": "withReadLock"
+        },
+        {
+          "@id": "undefineds:dist/http/PodMutationLockingHttpHandler.jsonld#PodMutationLockingHttpHandler__member_findPod",
+          "memberFieldName": "findPod"
+        }
+      ],
+      "constructorArguments": [
+        {
+          "@id": "undefineds:dist/http/PodMutationLockingHttpHandler.jsonld#PodMutationLockingHttpHandler_source"
+        },
+        {
+          "@id": "undefineds:dist/http/PodMutationLockingHttpHandler.jsonld#PodMutationLockingHttpHandler_podStore"
+        },
+        {
+          "@id": "undefineds:dist/http/PodMutationLockingHttpHandler.jsonld#PodMutationLockingHttpHandler_resourceLocker"
+        },
+        {
+          "@id": "undefineds:dist/http/PodMutationLockingHttpHandler.jsonld#PodMutationLockingHttpHandler_identityDbUrl"
+        },
+        {
+          "@id": "undefineds:dist/http/PodMutationLockingHttpHandler.jsonld#PodMutationLockingHttpHandler_baseUrl"
+        }
+      ]
+    }
+  ]
+}

package/dist/http/StoragePutOperationHandler.d.ts

@@ -0,0 +1,7 @@
+import { PutOperationHandler, type AuxiliaryStrategy, type ETagHandler, type OperationHandlerInput, type ResourceStore, type ResponseDescription } from '@solid/community-server';
+/** Preserves CSS PUT handling and returns this mutation's receipt, never a later HEAD. */
+export declare class StoragePutOperationHandler extends PutOperationHandler {
+    private readonly eTagHandler;
+    constructor(store: ResourceStore, metadataStrategy: AuxiliaryStrategy, eTagHandler: ETagHandler);
+    handle(input: OperationHandlerInput): Promise<ResponseDescription>;
+}

package/dist/http/StoragePutOperationHandler.js

@@ -0,0 +1,27 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.StoragePutOperationHandler = void 0;
+const community_server_1 = require("@solid/community-server");
+const n3_1 = require("n3");
+const StorageVersion_1 = require("../storage/StorageVersion");
+/** Preserves CSS PUT handling and returns this mutation's receipt, never a later HEAD. */
+class StoragePutOperationHandler extends community_server_1.PutOperationHandler {
+    constructor(store, metadataStrategy, eTagHandler) {
+        super(store, metadataStrategy);
+        this.eTagHandler = eTagHandler;
+    }
+    async handle(input) {
+        return StorageVersion_1.storageVersionReceipts.run(new Map(), async () => {
+            const response = await super.handle(input);
+            const receipt = StorageVersion_1.storageVersionReceipts.getStore().get(input.operation.target.path);
+            const etag = receipt && this.eTagHandler.getETag(receipt);
+            if (etag) {
+                response.metadata ??= new community_server_1.RepresentationMetadata(input.operation.target);
+                response.metadata.set(community_server_1.HH.terms.etag, n3_1.DataFactory.literal(etag));
+            }
+            return response;
+        });
+    }
+}
+exports.StoragePutOperationHandler = StoragePutOperationHandler;
+//# sourceMappingURL=StoragePutOperationHandler.js.map

package/dist/http/StoragePutOperationHandler.jsonld

@@ -0,0 +1,57 @@
+{
+  "@context": [
+    "https://linkedsoftwaredependencies.org/bundles/npm/@undefineds.co/xpod/^0.0.0/components/context.jsonld",
+    "https://linkedsoftwaredependencies.org/bundles/npm/@solid/community-server/^8.0.0/components/context.jsonld"
+  ],
+  "@id": "npmd:@undefineds.co/xpod",
+  "components": [
+    {
+      "@id": "undefineds:dist/http/StoragePutOperationHandler.jsonld#StoragePutOperationHandler",
+      "@type": "Class",
+      "requireElement": "StoragePutOperationHandler",
+      "extends": [
+        "css:dist/http/ldp/PutOperationHandler.jsonld#PutOperationHandler"
+      ],
+      "comment": "Preserves CSS PUT handling and returns this mutation's receipt, never a later HEAD.",
+      "parameters": [
+        {
+          "@id": "undefineds:dist/http/StoragePutOperationHandler.jsonld#StoragePutOperationHandler_store",
+          "range": "css:dist/storage/ResourceStore.jsonld#ResourceStore"
+        },
+        {
+          "@id": "undefineds:dist/http/StoragePutOperationHandler.jsonld#StoragePutOperationHandler_metadataStrategy",
+          "range": "css:dist/http/auxiliary/AuxiliaryStrategy.jsonld#AuxiliaryStrategy"
+        },
+        {
+          "@id": "undefineds:dist/http/StoragePutOperationHandler.jsonld#StoragePutOperationHandler_eTagHandler",
+          "range": "css:dist/storage/conditions/ETagHandler.jsonld#ETagHandler"
+        }
+      ],
+      "memberFields": [
+        {
+          "@id": "undefineds:dist/http/StoragePutOperationHandler.jsonld#StoragePutOperationHandler__member_eTagHandler",
+          "memberFieldName": "eTagHandler"
+        },
+        {
+          "@id": "undefineds:dist/http/StoragePutOperationHandler.jsonld#StoragePutOperationHandler__member_constructor",
+          "memberFieldName": "constructor"
+        },
+        {
+          "@id": "undefineds:dist/http/StoragePutOperationHandler.jsonld#StoragePutOperationHandler__member_handle",
+          "memberFieldName": "handle"
+        }
+      ],
+      "constructorArguments": [
+        {
+          "@id": "undefineds:dist/http/StoragePutOperationHandler.jsonld#StoragePutOperationHandler_store"
+        },
+        {
+          "@id": "undefineds:dist/http/StoragePutOperationHandler.jsonld#StoragePutOperationHandler_metadataStrategy"
+        },
+        {
+          "@id": "undefineds:dist/http/StoragePutOperationHandler.jsonld#StoragePutOperationHandler_eTagHandler"
+        }
+      ]
+    }
+  ]
+}