@undefineds.co/xpod 0.4.20 → 0.4.27

package/config/cloud.json

@@ -2,7 +2,15 @@
   "@context": [
     "https://linkedsoftwaredependencies.org/bundles/npm/@solid/community-server/^8.0.0/components/context.jsonld",
     "https://linkedsoftwaredependencies.org/bundles/npm/@undefineds.co/xpod/^0.0.0/components/context.jsonld",
-    "https://linkedsoftwaredependencies.org/bundles/npm/asynchronous-handlers/^1.0.0/components/context.jsonld"
+    "https://linkedsoftwaredependencies.org/bundles/npm/asynchronous-handlers/^1.0.0/components/context.jsonld",
+    {
+      "mutationSource": "PodMutationLockingHttpHandler:_source",
+      "mutationPodStore": "PodMutationLockingHttpHandler:_podStore",
+      "mutationLocker": "PodMutationLockingHttpHandler:_resourceLocker",
+      "mutationDb": "PodMutationLockingHttpHandler:_identityDbUrl",
+      "mutationBase": "PodMutationLockingHttpHandler:_baseUrl",
+      "podLifecycleRedis": "PodLifecycleRedisLocker:_options_redisClient"
+    }
   ],
   "import": [
     "./main.json",
@@ -10,21 +18,36 @@
   ],
   "@graph": [
     {
-      "comment": "Redis-based locker with expiration wrapper for clustered deployments",
+      "@id": "urn:solid-server:default:CleanupInitializer",
+      "@type": "SequenceHandler",
+      "handlers": [
+        { "@type": "InitializableHandler", "initializable": { "@id": "urn:undefineds:xpod:PodLifecycleLocker" } }
+      ]
+    },
+    {
+      "comment": "Drain active Pod mutations before closing their RDF authority and Redis connection.",
+      "@type": "Override",
+      "overrideInstance": { "@id": "urn:solid-server:default:CleanupFinalizer" },
+      "overrideParameters": {
+        "@type": "SequenceHandler",
+        "handlers": [
+          { "@type": "FinalizableHandler", "finalizable": { "@id": "urn:undefineds:xpod:PodLifecycleLocker" } },
+          { "@type": "FinalizableHandler", "finalizable": { "@id": "urn:undefineds:xpod:SolidRdfDataAccessor" } }
+        ]
+      }
+    },
+    {
+      "comment": "Owner-checked Redis locks; do not expire in-flight writers without storage fencing.",
       "@type": "Override",
       "overrideInstance": {
         "@id": "urn:solid-server:default:ResourceLocker"
       },
       "overrideParameters": {
-        "@type": "WrappedExpiringReadWriteLocker",
-        "locker": {
-          "@type": "UrlAwareRedisLocker",
-          "redisClient": {
-            "@id": "urn:solid-server:default:variable:redisClient",
-            "@type": "Variable"
-          }
-        },
-        "expiration": 6000
+        "@type": "UrlAwareRedisLocker",
+        "redisClient": {
+          "@id": "urn:solid-server:default:variable:redisClient",
+          "@type": "Variable"
+        }
       }
     },
     {
@@ -506,8 +529,19 @@
         "@id": "urn:solid-server:default:BaseHttpHandler"
       },
       "overrideParameters": {
+        "@type": "PodMutationLockingHttpHandler",
+        "mutationPodStore": { "@id": "urn:solid-server:default:PodStore" },
+        "mutationLocker": { "@id": "urn:undefineds:xpod:PodLifecycleLocker" },
+        "mutationDb": { "@id": "urn:solid-server:default:variable:identityDbUrl" },
+        "mutationBase": { "@id": "urn:solid-server:default:variable:baseUrl" },
+        "mutationSource": {
         "@type": "StatusWaterfallHandler",
         "handlers": [
+          { "@id": "urn:undefineds:xpod:PodDeletionMutationGuard" },
+          { "@id": "urn:undefineds:xpod:LocalPodDeletionHttpHandler" },
+          {
+            "@id": "urn:undefineds:xpod:AgentDirectoryHttpHandler"
+          },
           {
             "@id": "urn:undefineds:xpod:SubgraphSparqlHttpHandler"
           },
@@ -540,6 +574,15 @@
           }
         ]
       }
+      }
+    },
+    {
+      "@type": "Override",
+      "overrideInstance": { "@id": "urn:undefineds:xpod:PodLifecycleLocker" },
+      "overrideParameters": {
+        "@type": "PodLifecycleRedisLocker",
+        "podLifecycleRedis": { "@id": "urn:solid-server:default:variable:redisClient" }
+      }
     }
   ]
 }

package/config/components-ignore.json

@@ -1,20 +1,32 @@
 [
   "ActivityEmitter",
+  "assertPublicProbeTarget",
+  "base64ByteLength",
   "BaseQuintStore",
   "ClaudeAuthenticationError",
   "CliCommandError",
   "CodeBuddyAuthError",
+  "createPinnedHeadProbeRequest",
+  "createPodOwnershipNodeAccessResolver",
   "DisabledSparqlFeatureError",
   "Error",
   "InvalidRelaySessionRequestError",
   "InvalidTunnelTokenError",
+  "isPublicIpAddress",
   "LEGACY_DERIVED_INDEX_CONSUMER_ID",
   "LOG_FILE_PATTERN",
   "NodeRouteSourceNotFoundError",
+  "normalizeContext",
   "Omit",
+  "P2P_DATA_PLANE_LIMITS",
+  "P2PDataPlaneAbortError",
+  "P2PDataPlaneLimitError",
   "P2PSessionExpiredError",
   "P2PSessionNotFoundError",
   "P2PSignalingRequestError",
+  "registerDeviceNotificationRuntime",
+  "resolveCurrentLogFile",
+  "resolveLogFilePattern",
   "SearchApiError",
   "SolidFsConflictError",
   "SolidFsNotFoundError",
@@ -23,12 +35,5 @@
   "UnsupportedSparqlQueryError",
   "VectorApiError",
   "WaitingRunnerError",
-  "assertPublicProbeTarget",
-  "createPinnedHeadProbeRequest",
-  "createPodOwnershipNodeAccessResolver",
-  "isPublicIpAddress",
-  "normalizeContext",
-  "registerDeviceNotificationRuntime",
-  "resolveCurrentLogFile",
-  "resolveLogFilePattern"
+  "XPOD_P2P_ACCEPT_HEADER"
 ]

package/config/local.json

@@ -2,7 +2,16 @@
   "@context": [
     "https://linkedsoftwaredependencies.org/bundles/npm/@solid/community-server/^8.0.0/components/context.jsonld",
     "https://linkedsoftwaredependencies.org/bundles/npm/@undefineds.co/xpod/^0.0.0/components/context.jsonld",
-    "https://linkedsoftwaredependencies.org/bundles/npm/asynchronous-handlers/^1.0.0/components/context.jsonld"
+    "https://linkedsoftwaredependencies.org/bundles/npm/asynchronous-handlers/^1.0.0/components/context.jsonld",
+    {
+      "deletionLegacyQuints": "PodDataDeletionService:_legacyQuintStore",
+      "deletionMirrorPath": "SqliteQuintStore:_options_path",
+      "mutationSource": "PodMutationLockingHttpHandler:_source",
+      "mutationPodStore": "PodMutationLockingHttpHandler:_podStore",
+      "mutationLocker": "PodMutationLockingHttpHandler:_resourceLocker",
+      "mutationDb": "PodMutationLockingHttpHandler:_identityDbUrl",
+      "mutationBase": "PodMutationLockingHttpHandler:_baseUrl"
+    }
   ],
   "import": [
     "./main.json",
@@ -11,6 +20,16 @@
     "./extensions.local.initializer.json"
   ],
   "@graph": [
+    {
+      "@type": "Override",
+      "overrideInstance": { "@id": "urn:undefineds:xpod:PodDataDeletionService" },
+      "overrideParameters": {
+        "deletionLegacyQuints": {
+          "@type": "SqliteQuintStore",
+          "deletionMirrorPath": { "@id": "urn:solid-server:default:variable:sparqlEndpoint" }
+        }
+      }
+    },
     {
       "comment": "Quota service backed by identity DB, no env defaults = unlimited",
       "@id": "urn:undefineds:xpod:QuotaService",
@@ -347,8 +366,19 @@
         "@id": "urn:solid-server:default:BaseHttpHandler"
       },
       "overrideParameters": {
+        "@type": "PodMutationLockingHttpHandler",
+        "mutationPodStore": { "@id": "urn:solid-server:default:PodStore" },
+        "mutationLocker": { "@id": "urn:undefineds:xpod:PodLifecycleLocker" },
+        "mutationDb": { "@id": "urn:solid-server:default:variable:identityDbUrl" },
+        "mutationBase": { "@id": "urn:solid-server:default:variable:baseUrl" },
+        "mutationSource": {
         "@type": "StatusWaterfallHandler",
         "handlers": [
+          { "@id": "urn:undefineds:xpod:PodDeletionMutationGuard" },
+          { "@id": "urn:undefineds:xpod:LocalPodDeletionHttpHandler" },
+          {
+            "@id": "urn:undefineds:xpod:AgentDirectoryHttpHandler"
+          },
           {
             "@id": "urn:undefineds:xpod:SubgraphSparqlHttpHandler"
           },
@@ -388,6 +418,7 @@
           }
         ]
       }
+      }
     }
   ]
 }

package/config/xpod.base.json

@@ -11,7 +11,48 @@
       "rememberedConsentSource": "RememberedConsentHandler:_source",
       "rememberedConsentStore": "RememberedConsentHandler:_store",
       "rememberedConsentProvider": "RememberedConsentHandler:_providerFactory",
-      "scopedRememberedGrantStore": "ScopedPickWebIdHandler:_options_rememberedClientGrantStore"
+      "scopedRememberedGrantStore": "ScopedPickWebIdHandler:_options_rememberedClientGrantStore",
+      "hierarchySource": "HierarchyLockingResourceStore:_mutationSource",
+      "hierarchyLocks": "HierarchyLockingResourceStore:_hierarchyLocks",
+      "hierarchyAuxiliaryStrategy": "HierarchyLockingResourceStore:_auxiliaryStrategy",
+      "hierarchyIdentifierStrategy": "HierarchyLockingResourceStore:_identifierStrategy",
+      "versionPutStore": "StoragePutOperationHandler:_store",
+      "versionPutMetadataStrategy": "StoragePutOperationHandler:_metadataStrategy",
+      "versionPutETagHandler": "StoragePutOperationHandler:_eTagHandler",
+      "sparqlMutationStore": "SubgraphSparqlHttpHandler:_mutationStore",
+      "headResponseMetadataWriter": "HeadSafeResponseWriter:_metadataWriter",
+      "deletionPodStore": "PodDeletionLifecycleService:_options_podStore",
+      "deletionAccountStorage": "PodDeletionLifecycleService:_options_accountStorage",
+      "deletionData": "PodDeletionLifecycleService:_options_dataDeletion",
+      "deletionDb": "PodDeletionLifecycleService:_options_identityDbUrl",
+      "deletionBase": "PodDeletionLifecycleService:_options_storageBaseUrl",
+      "deletionEdition": "PodDeletionLifecycleService:_options_edition",
+      "deletionLocker": "PodDeletionLifecycleService:_options_resourceLocker",
+      "deletionAccessor": "PodDataDeletionService:_dataAccessor",
+      "deletionAuxiliary": "PodDataDeletionService:_auxiliaryStrategy",
+      "deletionSource": "PodDeletionInteractionHandler:_source",
+      "deletionRoute": "PodDeletionInteractionHandler:_podRoute",
+      "deletionLifecycle": "PodDeletionInteractionHandler:_lifecycle",
+      "deletionInventorySource": "PodDeletionInventoryHandler:_source",
+      "deletionInventoryLifecycle": "PodDeletionInventoryHandler:_lifecycle",
+      "deletionGuardDb": "PodDeletionMutationGuard:_identityDbUrl",
+      "deletionGuardBase": "PodDeletionMutationGuard:_baseUrl",
+      "localDeletionLifecycle": "LocalPodDeletionHttpHandler:_options_lifecycle",
+      "localDeletionBase": "LocalPodDeletionHttpHandler:_options_storageBaseUrl",
+      "localDeletionRoot": "LocalPodDeletionHttpHandler:_options_rootFilePath",
+      "localDeletionErrors": "LocalPodDeletionHttpHandler:_options_errorHandler",
+      "localDeletionResponse": "LocalPodDeletionHttpHandler:_options_responseWriter",
+      "podLifecycleSource": "PodLifecycleLocker:_source",
+      "cloudProfileBaseUrl": "CloudProfileCreator:_options_baseUrl",
+      "cloudProfileIssuer": "CloudProfileCreator:_options_oidcIssuer",
+      "cloudProfileIdentifiers": "CloudProfileCreator:_options_identifierGenerator",
+      "cloudProfileResources": "CloudProfileCreator:_options_resourcesGenerator",
+      "cloudProfileStore": "CloudProfileCreator:_options_resourceStore",
+      "cloudProfileWebIds": "CloudProfileCreator:_options_webIdStore",
+      "cloudProfileAccounts": "CloudProfileCreator:_options_accountStorage",
+      "cloudProfileLocker": "CloudProfileCreator:_options_resourceLocker",
+      "cloudProfileHandlerCreator": "CloudProfilePreparationHandler:_cloudProfileCreator",
+      "provisionCloudProfiles": "ProvisionPodCreator:_args_cloudProfileCreator"
     }
   ],
   "import": [
@@ -20,6 +61,50 @@
     "./notifications.json"
   ],
   "@graph": [
+    {
+      "comment": "Preserve CSS response headers and status while suppressing generated HEAD error bodies before the Bun HTTP writer.",
+      "@type": "Override",
+      "overrideInstance": { "@id": "urn:solid-server:default:ResponseWriter" },
+      "overrideParameters": {
+        "@type": "HeadSafeResponseWriter",
+        "headResponseMetadataWriter": { "@id": "urn:solid-server:default:MetadataWriter" }
+      }
+    },
+    {
+      "comment": "Use persisted storage revisions for GET/HEAD, conditions and notifications; legacy revisions are initialized under resource write locks before reads.",
+      "@type": "Override",
+      "overrideInstance": { "@id": "urn:solid-server:default:ETagHandler" },
+      "overrideParameters": { "@type": "StorageETagHandler" }
+    },
+    {
+      "comment": "Keep the configured local/Redis lock authority and acquire ancestors root-first for every mutation.",
+      "@type": "Override",
+      "overrideInstance": { "@id": "urn:solid-server:default:ResourceStore_Locking" },
+      "overrideParameters": {
+        "@type": "HierarchyLockingResourceStore",
+        "hierarchySource": { "@id": "urn:solid-server:default:ResourceStore_Patching" },
+        "hierarchyLocks": { "@id": "urn:solid-server:default:ResourceLocker" },
+        "hierarchyAuxiliaryStrategy": { "@id": "urn:solid-server:default:AuxiliaryStrategy" },
+        "hierarchyIdentifierStrategy": { "@id": "urn:solid-server:default:IdentifierStrategy" }
+      }
+    },
+    {
+      "comment": "Preserve the CSS operation waterfall, replacing PUT with a response bound to its own persisted mutation receipt.",
+      "@type": "Override",
+      "overrideInstance": { "@id": "urn:solid-server:default:OperationHandler" },
+      "overrideParameters": {
+        "@type": "StatusWaterfallHandler",
+        "handlers": [
+          { "@type": "GetOperationHandler", "store": { "@id": "urn:solid-server:default:ResourceStore" }, "eTagHandler": { "@id": "urn:solid-server:default:ETagHandler" } },
+          { "@type": "PostOperationHandler", "store": { "@id": "urn:solid-server:default:ResourceStore" } },
+          { "@type": "StoragePutOperationHandler", "versionPutStore": { "@id": "urn:solid-server:default:ResourceStore" }, "versionPutMetadataStrategy": { "@id": "urn:solid-server:default:MetadataStrategy" }, "versionPutETagHandler": { "@id": "urn:solid-server:default:ETagHandler" } },
+          { "@type": "DeleteOperationHandler", "store": { "@id": "urn:solid-server:default:ResourceStore" } },
+          { "@type": "HeadOperationHandler", "store": { "@id": "urn:solid-server:default:ResourceStore" }, "eTagHandler": { "@id": "urn:solid-server:default:ETagHandler" } },
+          { "@type": "PatchOperationHandler", "store": { "@id": "urn:solid-server:default:ResourceStore" } },
+          { "@type": "StaticThrowHandler", "onlyHandle": true, "factory": { "@type": "ClassErrorFactory", "error": { "@type": "MethodNotAllowedHttpError" } } }
+        ]
+      }
+    },
     {
       "@id": "urn:undefineds:xpod:RememberedClientGrantStore",
       "@type": "RememberedClientGrantStore",
@@ -244,6 +329,53 @@
         }
       }
     },
+    {
+      "@id": "urn:undefineds:xpod:CloudProfileCreator",
+      "@type": "CloudProfileCreator",
+      "cloudProfileBaseUrl": {
+        "@id": "urn:solid-server:default:variable:baseUrl"
+      },
+      "cloudProfileIssuer": { "@id": "urn:solid-server:default:variable:oidcIssuer" },
+      "cloudProfileIdentifiers": {
+        "@id": "urn:solid-server:default:IdentifierGenerator"
+      },
+      "cloudProfileResources": {
+        "@id": "urn:solid-server:default:PodResourcesGenerator"
+      },
+      "cloudProfileStore": {
+        "@id": "urn:solid-server:default:ResourceStore"
+      },
+      "cloudProfileWebIds": {
+        "@id": "urn:solid-server:default:WebIdStore"
+      },
+      "cloudProfileAccounts": {
+        "@id": "urn:solid-server:default:AccountStorage"
+      },
+      "cloudProfileLocker": {
+        "@id": "urn:solid-server:default:ResourceLocker"
+      }
+    },
+    {
+      "@id": "urn:undefineds:xpod:CloudProfilePreparationRoute",
+      "@type": "RelativePathInteractionRoute",
+      "base": {
+        "@id": "urn:solid-server:default:AccountIdRoute"
+      },
+      "relativePath": "profile/"
+    },
+    {
+      "@id": "urn:undefineds:xpod:CloudProfilePreparationRouter",
+      "@type": "AuthorizedRouteHandler",
+      "route": {
+        "@id": "urn:undefineds:xpod:CloudProfilePreparationRoute"
+      },
+      "source": {
+        "@type": "CloudProfilePreparationHandler",
+        "cloudProfileHandlerCreator": {
+          "@id": "urn:undefineds:xpod:CloudProfileCreator"
+        }
+      }
+    },
     {
       "comment": "Expose exact Account-owned WebID/storage pairs; Local retains its storage-root scope.",
       "@id": "urn:undefineds:xpod:AccountStorageBindingsRoute",
@@ -280,6 +412,7 @@
       "@id": "urn:solid-server:default:InteractionRouteHandler",
       "@type": "StatusWaterfallHandler",
       "handlers": [
+        { "@id": "urn:undefineds:xpod:CloudProfilePreparationRouter" },
         {
           "@id": "urn:undefineds:xpod:AccountStorageBindingsRouter"
         }
@@ -289,6 +422,10 @@
       "@id": "urn:solid-server:default:AccountControlHandler",
       "@type": "ControlHandler",
       "controls": [
+        {
+          "ControlHandler:_controls_key": "profile",
+          "ControlHandler:_controls_value": { "@id": "urn:undefineds:xpod:CloudProfilePreparationRoute" }
+        },
         {
           "ControlHandler:_controls_key": "bindings",
           "ControlHandler:_controls_value": {
@@ -361,9 +498,33 @@
         "webIdStore": { "@id": "urn:solid-server:default:WebIdStore" },
         "podStore": { "@id": "urn:solid-server:default:PodStore" },
         "resourceStore": { "@id": "urn:solid-server:default:ResourceStore" },
+        "provisionCloudProfiles": { "@id": "urn:undefineds:xpod:CloudProfileCreator" },
         "identityDbUrl": { "@id": "urn:solid-server:default:variable:identityDbUrl" }
       }
     },
+    {
+      "comment": "Agent directory HTTP handler: authenticated enumeration + exact literal search for agent shell adapters. Defined once for all editions; each edition references it from its HTTP pipeline.",
+      "@id": "urn:undefineds:xpod:AgentDirectoryHttpHandler",
+      "@type": "AgentDirectoryHttpHandler",
+      "accessor": {
+        "@id": "urn:undefineds:xpod:MixDataAccessor"
+      },
+      "credentialsExtractor": {
+        "@id": "urn:solid-server:default:CredentialsExtractor"
+      },
+      "permissionReader": {
+        "@id": "urn:solid-server:default:PermissionReader"
+      },
+      "authorizer": {
+        "@id": "urn:solid-server:default:Authorizer"
+      },
+      "auxiliaryStrategy": {
+        "@id": "urn:solid-server:default:AuxiliaryStrategy"
+      },
+      "identifierStrategy": {
+        "@id": "urn:solid-server:default:IdentifierStrategy"
+      }
+    },
     {
       "comment": "Subgraph query engine wrapping default SPARQL engine (DefaultSparqlEngine defined in profile)",
       "@type": "SubgraphQueryEngine",
@@ -391,6 +552,7 @@
       "updateAuthority": {
         "@id": "urn:undefineds:xpod:MixDataAccessor"
       },
+      "sparqlMutationStore": { "@id": "urn:solid-server:default:ResourceStore_Locking" },
       "emitter": {
         "@id": "urn:solid-server:default:ResourceStore"
       },
@@ -426,6 +588,114 @@
           { "@id": "urn:solid-server:default:Middleware_Cors" }
         ]
       }
+    },
+    {
+      "@id": "urn:undefineds:xpod:PodDataDeletionService",
+      "@type": "PodDataDeletionService",
+      "deletionAccessor": {
+        "@id": "urn:undefineds:xpod:MixDataAccessor"
+      },
+      "deletionAuxiliary": {
+        "@id": "urn:solid-server:default:AuxiliaryStrategy"
+      }
+    },
+    {
+      "@id": "urn:undefineds:xpod:PodDeletionLifecycleService",
+      "@type": "PodDeletionLifecycleService",
+      "deletionPodStore": {
+        "@id": "urn:solid-server:default:PodStore"
+      },
+      "deletionAccountStorage": {
+        "@id": "urn:solid-server:default:AccountStorage"
+      },
+      "deletionData": {
+        "@id": "urn:undefineds:xpod:PodDataDeletionService"
+      },
+      "deletionDb": {
+        "@id": "urn:solid-server:default:variable:identityDbUrl"
+      },
+      "deletionBase": {
+        "@id": "urn:solid-server:default:variable:baseUrl"
+      },
+      "deletionEdition": {
+        "@id": "urn:solid-server:default:variable:edition"
+      },
+      "deletionLocker": {
+        "@id": "urn:undefineds:xpod:PodLifecycleLocker"
+      }
+    },
+    {
+      "@id": "urn:undefineds:xpod:PodDeletionMutationGuard",
+      "@type": "PodDeletionMutationGuard",
+      "deletionGuardDb": {
+        "@id": "urn:solid-server:default:variable:identityDbUrl"
+      },
+      "deletionGuardBase": {
+        "@id": "urn:solid-server:default:variable:baseUrl"
+      }
+    },
+    {
+      "@type": "Override",
+      "overrideInstance": {
+        "@id": "urn:solid-server:default:AccountPodIdRouter"
+      },
+      "overrideParameters": {
+        "@type": "AuthorizedRouteHandler",
+        "source": {
+          "@type": "PodDeletionInteractionHandler",
+          "deletionSource": {
+            "@type": "ViewInteractionHandler",
+            "source": {
+              "@id": "urn:solid-server:default:PodResourceHandler"
+            }
+          },
+          "deletionRoute": {
+            "@id": "urn:solid-server:default:AccountPodIdRoute"
+          },
+          "deletionLifecycle": {
+            "@id": "urn:undefineds:xpod:PodDeletionLifecycleService"
+          }
+        }
+      }
+    },
+    {
+      "@type": "Override",
+      "overrideInstance": {
+        "@id": "urn:solid-server:default:AccountPodRouter"
+      },
+      "overrideParameters": {
+        "@type": "AuthorizedRouteHandler",
+        "source": {
+          "@type": "ViewInteractionHandler",
+          "source": {
+            "@type": "PodDeletionInventoryHandler",
+            "deletionInventorySource": {
+              "@id": "urn:solid-server:default:CreatePodHandler"
+            },
+            "deletionInventoryLifecycle": {
+              "@id": "urn:undefineds:xpod:PodDeletionLifecycleService"
+            }
+          }
+        }
+      }
+    },
+    {
+      "@id": "urn:undefineds:xpod:LocalPodDeletionHttpHandler",
+      "@type": "LocalPodDeletionHttpHandler",
+      "localDeletionErrors": { "@id": "urn:solid-server:default:ErrorHandler" },
+      "localDeletionResponse": { "@id": "urn:solid-server:default:ResponseWriter" },
+      "localDeletionLifecycle": { "@id": "urn:undefineds:xpod:PodDeletionLifecycleService" },
+      "localDeletionBase": { "@id": "urn:solid-server:default:variable:baseUrl" },
+      "localDeletionRoot": { "@id": "urn:solid-server:default:variable:rootFilePath" }
+    },
+    {
+      "@id": "urn:undefineds:xpod:PodLifecycleLocker",
+      "@type": "PodLifecycleLocker",
+      "podLifecycleSource": {
+        "@type": "GreedyReadWriteLocker",
+        "locker": { "@type": "MemoryResourceLocker" },
+        "storage": { "@type": "MemoryMapStorage" }
+      }
     }
   ]
 }

package/config/xpod.json

@@ -2,7 +2,14 @@
   "@context": [
     "https://linkedsoftwaredependencies.org/bundles/npm/@solid/community-server/^8.0.0/components/context.jsonld",
     "https://linkedsoftwaredependencies.org/bundles/npm/@undefineds.co/xpod/^0.0.0/components/context.jsonld",
-    "https://linkedsoftwaredependencies.org/bundles/npm/asynchronous-handlers/^1.0.0/components/context.jsonld"
+    "https://linkedsoftwaredependencies.org/bundles/npm/asynchronous-handlers/^1.0.0/components/context.jsonld",
+    {
+      "mutationSource": "PodMutationLockingHttpHandler:_source",
+      "mutationPodStore": "PodMutationLockingHttpHandler:_podStore",
+      "mutationLocker": "PodMutationLockingHttpHandler:_resourceLocker",
+      "mutationDb": "PodMutationLockingHttpHandler:_identityDbUrl",
+      "mutationBase": "PodMutationLockingHttpHandler:_baseUrl"
+    }
   ],
   "import": [
     "./main.json",
@@ -261,8 +268,16 @@
       "@type": "Override",
       "overrideInstance": { "@id": "urn:solid-server:default:BaseHttpHandler" },
       "overrideParameters": {
+        "@type": "PodMutationLockingHttpHandler",
+        "mutationPodStore": { "@id": "urn:solid-server:default:PodStore" },
+        "mutationLocker": { "@id": "urn:undefineds:xpod:PodLifecycleLocker" },
+        "mutationDb": { "@id": "urn:solid-server:default:variable:identityDbUrl" },
+        "mutationBase": { "@id": "urn:solid-server:default:variable:baseUrl" },
+        "mutationSource": {
         "@type": "StatusWaterfallHandler",
         "handlers": [
+          { "@id": "urn:undefineds:xpod:PodDeletionMutationGuard" },
+          { "@id": "urn:undefineds:xpod:LocalPodDeletionHttpHandler" },
           { "@id": "urn:undefineds:xpod:SubgraphSparqlHttpHandler" },
           { "@id": "urn:undefineds:xpod:VectorHttpHandler" },
           { "@id": "urn:undefineds:xpod:TerminalHttpHandler" },
@@ -280,6 +295,7 @@
           { "@id": "urn:solid-server:default:LdpHandler" }
         ]
       }
+      }
     }
   ]
 }

package/dist/agent-directory/client/AgentDirectoryClient.d.ts

@@ -0,0 +1,54 @@
+import { type AgentDirectoryListResponse, type AgentDirectoryReadResponse, type AgentDirectorySearchResponse } from '../protocol';
+/**
+ * Caller-provided, already-authenticated request function.
+ *
+ * Production callers pass the CLI's existing `authFetch` (or an equivalent
+ * solid-sdk session fetch) so the client never builds its own token header and
+ * never introduces a parallel authentication path.
+ */
+export type AgentDirectoryRequest = (url: string, init: RequestInit) => Promise<Response>;
+export interface AgentDirectoryClientOptions {
+    baseUrl: string;
+    /** Authenticated request function; preferred production path. */
+    request?: AgentDirectoryRequest;
+    /**
+     * Legacy/test fallback. When `request` is absent, the client sends this as a
+     * Bearer token. Not used by the CLI production path.
+     */
+    accessToken?: string;
+    fetch?: typeof fetch;
+}
+export interface ListParams {
+    root: string;
+    pathPrefix?: string;
+    limit?: number;
+    cursor?: string;
+}
+export interface SearchParams {
+    root: string;
+    query: string;
+    ignoreCase?: boolean;
+    pathPrefix?: string;
+    limit?: number;
+    cursor?: string;
+    maxFileBytes?: number;
+}
+export declare class AgentDirectoryHttpError extends Error {
+    readonly status: number;
+    readonly code: string;
+    constructor(status: number, code: string, message: string);
+}
+export declare class AgentDirectoryClient {
+    private readonly baseUrl;
+    private readonly accessToken?;
+    private readonly request?;
+    private readonly fetchImpl;
+    constructor(options: AgentDirectoryClientOptions);
+    list(params: ListParams): Promise<AgentDirectoryListResponse>;
+    listAll(params: ListParams): Promise<AgentDirectoryListResponse>;
+    search(params: SearchParams): Promise<AgentDirectorySearchResponse>;
+    searchAll(params: SearchParams): Promise<AgentDirectorySearchResponse>;
+    read(url: string): Promise<AgentDirectoryReadResponse>;
+    buildBase(): string;
+    private requestJson;
+}