@undefineds.co/xpod 0.4.7 → 0.4.8

package/node_modules/@undefineds.co/solid-sdk/dist/index.cjs

@@ -39,6 +39,7 @@ var __export = (target, all) => {
 // src/index.ts
 var exports_src = {};
 __export(exports_src, {
+  validateWebId: () => validateWebId,
   useSolidSessionSnapshot: () => useSolidSessionSnapshot,
   useSolidRuntime: () => useSolidRuntime,
   useLoginStore: () => useLoginStore,
@@ -228,16 +229,178 @@ function createSolidSessionRuntime(options = {}) {
     }
   };
 }
-// src/pod-runtime.ts
-var KEY_SEPARATOR = "\x00";
-function normalizeIdentityPart(value) {
-  const trimmed = value.trim();
+// src/webid-auth.ts
+var ENDPOINT_PROTOCOLS = new Set(["http:", "https:"]);
+var RESERVED_AUTHORIZATION_PARAMETERS = new Set([
+  "state",
+  "redirect_uri",
+  "client_id",
+  "response_type",
+  "code_challenge",
+  "code_challenge_method"
+]);
+function normalizeEndpoint(endpoint, fieldName) {
+  if (!endpoint || typeof endpoint.url !== "string" || endpoint.url.trim() === "") {
+    throw new TypeError(`${fieldName}.url must be a non-empty absolute URL`);
+  }
+  if (typeof endpoint.label !== "string") {
+    throw new TypeError(`${fieldName}.label must be a string`);
+  }
+  let parsed;
+  try {
+    parsed = new URL(endpoint.url.trim());
+  } catch {
+    throw new TypeError(`${fieldName}.url must be a valid absolute URL`);
+  }
+  if (!ENDPOINT_PROTOCOLS.has(parsed.protocol)) {
+    throw new TypeError(`${fieldName}.url must use http or https`);
+  }
+  if (parsed.username || parsed.password) {
+    throw new TypeError(`${fieldName}.url must not contain credentials`);
+  }
+  if (parsed.hash) {
+    throw new TypeError(`${fieldName}.url must not contain a fragment`);
+  }
+  return {
+    url: parsed.href,
+    label: endpoint.label
+  };
+}
+function validateWebId(value) {
+  if (typeof value !== "string" || value === "" || /[\s\u0000-\u001f\u007f-\u009f]/u.test(value)) {
+    throw new TypeError("webId must be a non-empty identifier without whitespace or control characters");
+  }
+  return value;
+}
+function normalizeStorageBinding(binding) {
+  if (!binding || typeof binding.storageUrl !== "string" || binding.storageUrl.trim() === "") {
+    throw new TypeError("selectedStorage.storageUrl must be a non-empty absolute URL");
+  }
+  validateWebId(binding.webId);
+  let parsed;
   try {
-    return new URL(trimmed).href;
+    parsed = new URL(binding.storageUrl.trim());
   } catch {
-    return trimmed;
+    throw new TypeError("selectedStorage.storageUrl must be a valid absolute URL");
+  }
+  if (!ENDPOINT_PROTOCOLS.has(parsed.protocol)) {
+    throw new TypeError("selectedStorage.storageUrl must use http or https");
+  }
+  if (parsed.username || parsed.password) {
+    throw new TypeError("selectedStorage.storageUrl must not contain credentials");
+  }
+  if (parsed.hash) {
+    throw new TypeError("selectedStorage.storageUrl must not contain a fragment");
+  }
+  return {
+    storageUrl: parsed.href,
+    webId: binding.webId,
+    ...binding.label === undefined ? {} : { label: binding.label }
+  };
+}
+function ensureEnum(value, values, fieldName) {
+  if (!values.includes(value)) {
+    throw new TypeError(`${fieldName} has an unsupported value`);
+  }
+  return value;
+}
+function normalizeWebIdLoginRoute(input) {
+  if (!input || typeof input.id !== "string" || input.id.trim() === "") {
+    throw new TypeError("route.id must be a non-empty opaque identifier");
+  }
+  if (typeof input.label !== "string") {
+    throw new TypeError("route.label must be a string");
+  }
+  const normalized = {
+    id: input.id.trim(),
+    label: input.label,
+    ...input.description === undefined ? {} : { description: input.description },
+    ...input.badge === undefined ? {} : {
+      badge: {
+        label: input.badge.label,
+        tone: ensureEnum(input.badge.tone, ["neutral", "primary", "success", "warning", "danger"], "route.badge.tone")
+      }
+    },
+    identityProvider: normalizeEndpoint(input.identityProvider, "route.identityProvider"),
+    ...input.storageProvider === undefined ? {} : {
+      storageProvider: normalizeEndpoint(input.storageProvider, "route.storageProvider")
+    },
+    availability: ensureEnum(input.availability, ["ready", "starting", "unavailable"], "route.availability"),
+    ...input.unavailableReason === undefined ? {} : { unavailableReason: input.unavailableReason }
+  };
+  return normalized;
+}
+function decodeForValidation(value) {
+  let decoded = value;
+  for (let index = 0;index < 4; index += 1) {
+    let next;
+    try {
+      next = decodeURIComponent(decoded);
+    } catch {
+      throw new TypeError("returnTo contains malformed percent encoding");
+    }
+    if (next === decoded) {
+      return decoded;
+    }
+    decoded = next;
+  }
+  return decoded;
+}
+function matchesAllowedPrefix(pathname, allowedPrefixes) {
+  return allowedPrefixes.some((prefix) => {
+    if (prefix === "/") {
+      return pathname.startsWith("/");
+    }
+    const normalizedPrefix = prefix.endsWith("/") ? prefix.slice(0, -1) : prefix;
+    return pathname === normalizedPrefix || pathname.startsWith(`${normalizedPrefix}/`);
+  });
+}
+function normalizeApplicationReturnTo(value, allowedPrefixes) {
+  if (value === undefined) {
+    return;
+  }
+  if (typeof value !== "string" || value.trim() === "") {
+    throw new TypeError("returnTo must be a non-empty application path");
+  }
+  const normalized = value.trim();
+  const decoded = decodeForValidation(normalized);
+  const pathname = decoded.split(/[?#]/, 1)[0];
+  if (!normalized.startsWith("/") || normalized.startsWith("//") || normalized.includes("\\") || decoded.includes("\\") || /^[a-z][a-z\d+.-]*:/i.test(decoded) || decoded.startsWith("//") || pathname.split("/").some((segment) => segment === "..") || !matchesAllowedPrefix(pathname, allowedPrefixes)) {
+    throw new TypeError("returnTo must be a safe path within the application allow-list");
+  }
+  return normalized;
+}
+function normalizeWebIdLoginTransaction(input) {
+  if (!input || typeof input.id !== "string" || input.id.trim() === "") {
+    throw new TypeError("transaction.id must be a non-empty opaque identifier");
+  }
+  const authorizationParameters = input.authorizationParameters === undefined ? undefined : { ...input.authorizationParameters };
+  if (authorizationParameters) {
+    for (const key of Object.keys(authorizationParameters)) {
+      if (RESERVED_AUTHORIZATION_PARAMETERS.has(key.toLowerCase())) {
+        throw new TypeError(`authorizationParameters cannot override ${key}`);
+      }
+    }
   }
+  const prompt = input.prompt === undefined ? undefined : ensureEnum(input.prompt, ["login", "consent", "select_account"], "transaction.prompt");
+  return {
+    id: input.id,
+    route: normalizeWebIdLoginRoute(input.route),
+    ...input.selectedStorage === undefined ? {} : {
+      selectedStorage: normalizeStorageBinding(input.selectedStorage)
+    },
+    authorizationSurface: ensureEnum(input.authorizationSurface, ["redirect", "popup", "embedded", "external"], "transaction.authorizationSurface"),
+    ...prompt === undefined ? {} : { prompt },
+    discovery: ensureEnum(input.discovery, ["standard", "strict"], "transaction.discovery"),
+    ...authorizationParameters === undefined ? {} : { authorizationParameters },
+    ...input.returnTo === undefined ? {} : {
+      returnTo: normalizeApplicationReturnTo(input.returnTo, ["/"])
+    }
+  };
 }
+
+// src/pod-runtime.ts
+var KEY_SEPARATOR = "\x00";
 function normalizePodUrl(value) {
   if (typeof value !== "string" || value.trim() === "") {
     throw new TypeError("podUrl must be a non-empty absolute URL");
@@ -257,7 +420,7 @@ function normalizePodUrl(value) {
   return parsed.href;
 }
 function compositeKey(webId, podUrl) {
-  return `${normalizeIdentityPart(webId)}${KEY_SEPARATOR}${normalizeIdentityPart(podUrl)}`;
+  return `${webId}${KEY_SEPARATOR}${podUrl}`;
 }
 function nextGeneration(generations, key) {
   const generation = (generations.get(key) ?? 0) + 1;
@@ -278,7 +441,7 @@ function createPodRuntime(options) {
   const webIdGenerations = new Map;
   const compositeGenerations = new Map;
   const clearWebId = (webId, podUrl) => {
-    const webIdKey = normalizeIdentityPart(webId);
+    const webIdKey = validateWebId(webId);
     if (podUrl !== undefined) {
       const normalizedPodUrl = normalizePodUrl(podUrl);
       const key = compositeKey(webId, normalizedPodUrl);
@@ -315,7 +478,7 @@ function createPodRuntime(options) {
     }
   };
   const clear = (identity) => {
-    if (!identity) {
+    if (identity === undefined) {
       readyByWebId.clear();
       readyByComposite.clear();
       for (const pending of pendingByWebId.values()) {
@@ -342,7 +505,7 @@ function createPodRuntime(options) {
   };
   return {
     open(args) {
-      const webIdKey = normalizeIdentityPart(args.webId);
+      const webIdKey = validateWebId(args.webId);
       const explicitPodUrl = args.podUrl === undefined ? undefined : normalizePodUrl(args.podUrl);
       if (explicitPodUrl !== undefined) {
         const key = compositeKey(args.webId, explicitPodUrl);
@@ -492,189 +655,10 @@ function useSolidRuntime() {
 function useSolidSessionSnapshot() {
   return useSolidRuntime().session.getSnapshot();
 }
-// src/webid-auth.ts
-var ENDPOINT_PROTOCOLS = new Set(["http:", "https:"]);
-var RESERVED_AUTHORIZATION_PARAMETERS = new Set([
-  "state",
-  "redirect_uri",
-  "client_id",
-  "response_type",
-  "code_challenge",
-  "code_challenge_method"
-]);
-function normalizeEndpoint(endpoint, fieldName) {
-  if (!endpoint || typeof endpoint.url !== "string" || endpoint.url.trim() === "") {
-    throw new TypeError(`${fieldName}.url must be a non-empty absolute URL`);
-  }
-  if (typeof endpoint.label !== "string") {
-    throw new TypeError(`${fieldName}.label must be a string`);
-  }
-  let parsed;
-  try {
-    parsed = new URL(endpoint.url.trim());
-  } catch {
-    throw new TypeError(`${fieldName}.url must be a valid absolute URL`);
-  }
-  if (!ENDPOINT_PROTOCOLS.has(parsed.protocol)) {
-    throw new TypeError(`${fieldName}.url must use http or https`);
-  }
-  if (parsed.username || parsed.password) {
-    throw new TypeError(`${fieldName}.url must not contain credentials`);
-  }
-  if (parsed.hash) {
-    throw new TypeError(`${fieldName}.url must not contain a fragment`);
-  }
-  return {
-    url: parsed.href,
-    label: endpoint.label
-  };
-}
-function normalizeStorageBinding(binding) {
-  if (!binding || typeof binding.storageUrl !== "string" || binding.storageUrl.trim() === "") {
-    throw new TypeError("selectedStorage.storageUrl must be a non-empty absolute URL");
-  }
-  if (typeof binding.webId !== "string" || binding.webId.trim() === "") {
-    throw new TypeError("selectedStorage.webId must be a non-empty identifier URL");
-  }
-  let parsed;
-  try {
-    parsed = new URL(binding.storageUrl.trim());
-  } catch {
-    throw new TypeError("selectedStorage.storageUrl must be a valid absolute URL");
-  }
-  if (!ENDPOINT_PROTOCOLS.has(parsed.protocol)) {
-    throw new TypeError("selectedStorage.storageUrl must use http or https");
-  }
-  if (parsed.username || parsed.password) {
-    throw new TypeError("selectedStorage.storageUrl must not contain credentials");
-  }
-  if (parsed.hash) {
-    throw new TypeError("selectedStorage.storageUrl must not contain a fragment");
-  }
-  return {
-    storageUrl: parsed.href,
-    webId: binding.webId,
-    ...binding.label === undefined ? {} : { label: binding.label }
-  };
-}
-function ensureEnum(value, values, fieldName) {
-  if (!values.includes(value)) {
-    throw new TypeError(`${fieldName} has an unsupported value`);
-  }
-  return value;
-}
-function normalizeWebIdLoginRoute(input) {
-  if (!input || typeof input.id !== "string" || input.id.trim() === "") {
-    throw new TypeError("route.id must be a non-empty opaque identifier");
-  }
-  if (typeof input.label !== "string") {
-    throw new TypeError("route.label must be a string");
-  }
-  const normalized = {
-    id: input.id.trim(),
-    label: input.label,
-    ...input.description === undefined ? {} : { description: input.description },
-    ...input.badge === undefined ? {} : {
-      badge: {
-        label: input.badge.label,
-        tone: ensureEnum(input.badge.tone, ["neutral", "primary", "success", "warning", "danger"], "route.badge.tone")
-      }
-    },
-    identityProvider: normalizeEndpoint(input.identityProvider, "route.identityProvider"),
-    ...input.storageProvider === undefined ? {} : {
-      storageProvider: normalizeEndpoint(input.storageProvider, "route.storageProvider")
-    },
-    availability: ensureEnum(input.availability, ["ready", "starting", "unavailable"], "route.availability"),
-    ...input.unavailableReason === undefined ? {} : { unavailableReason: input.unavailableReason }
-  };
-  return normalized;
-}
-function decodeForValidation(value) {
-  let decoded = value;
-  for (let index = 0;index < 4; index += 1) {
-    let next;
-    try {
-      next = decodeURIComponent(decoded);
-    } catch {
-      throw new TypeError("returnTo contains malformed percent encoding");
-    }
-    if (next === decoded) {
-      return decoded;
-    }
-    decoded = next;
-  }
-  return decoded;
-}
-function matchesAllowedPrefix(pathname, allowedPrefixes) {
-  return allowedPrefixes.some((prefix) => {
-    if (prefix === "/") {
-      return pathname.startsWith("/");
-    }
-    const normalizedPrefix = prefix.endsWith("/") ? prefix.slice(0, -1) : prefix;
-    return pathname === normalizedPrefix || pathname.startsWith(`${normalizedPrefix}/`);
-  });
-}
-function normalizeApplicationReturnTo(value, allowedPrefixes) {
-  if (value === undefined) {
-    return;
-  }
-  if (typeof value !== "string" || value.trim() === "") {
-    throw new TypeError("returnTo must be a non-empty application path");
-  }
-  const normalized = value.trim();
-  const decoded = decodeForValidation(normalized);
-  const pathname = decoded.split(/[?#]/, 1)[0];
-  if (!normalized.startsWith("/") || normalized.startsWith("//") || normalized.includes("\\") || decoded.includes("\\") || /^[a-z][a-z\d+.-]*:/i.test(decoded) || decoded.startsWith("//") || pathname.split("/").some((segment) => segment === "..") || !matchesAllowedPrefix(pathname, allowedPrefixes)) {
-    throw new TypeError("returnTo must be a safe path within the application allow-list");
-  }
-  return normalized;
-}
-function normalizeWebIdLoginTransaction(input) {
-  if (!input || typeof input.id !== "string" || input.id.trim() === "") {
-    throw new TypeError("transaction.id must be a non-empty opaque identifier");
-  }
-  const authorizationParameters = input.authorizationParameters === undefined ? undefined : { ...input.authorizationParameters };
-  if (authorizationParameters) {
-    for (const key of Object.keys(authorizationParameters)) {
-      if (RESERVED_AUTHORIZATION_PARAMETERS.has(key.toLowerCase())) {
-        throw new TypeError(`authorizationParameters cannot override ${key}`);
-      }
-    }
-  }
-  const prompt = input.prompt === undefined ? undefined : ensureEnum(input.prompt, ["login", "consent", "select_account"], "transaction.prompt");
-  return {
-    id: input.id,
-    route: normalizeWebIdLoginRoute(input.route),
-    ...input.selectedStorage === undefined ? {} : {
-      selectedStorage: normalizeStorageBinding(input.selectedStorage)
-    },
-    authorizationSurface: ensureEnum(input.authorizationSurface, ["redirect", "popup", "embedded", "external"], "transaction.authorizationSurface"),
-    ...prompt === undefined ? {} : { prompt },
-    discovery: ensureEnum(input.discovery, ["standard", "strict"], "transaction.discovery"),
-    ...authorizationParameters === undefined ? {} : { authorizationParameters },
-    ...input.returnTo === undefined ? {} : {
-      returnTo: normalizeApplicationReturnTo(input.returnTo, ["/"])
-    }
-  };
-}
 // src/storage-selection.ts
-function normalizeIdentity(value) {
-  const trimmed = value.trim();
-  try {
-    return new URL(trimmed).href;
-  } catch {
-    return trimmed;
-  }
-}
-function normalizedBinding(binding) {
-  return {
-    ...normalizeStorageBinding(binding),
-    webId: normalizeIdentity(binding.webId)
-  };
-}
 function storageBindingMatches(expected, actual) {
-  const left = normalizedBinding(expected);
-  const right = normalizedBinding(actual);
+  const left = normalizeStorageBinding(expected);
+  const right = normalizeStorageBinding(actual);
   return left.storageUrl === right.storageUrl && left.webId === right.webId;
 }
 function reconcileStorageSelection(optionsOrWebId, positionalCandidates = [], positionalRemembered) {
@@ -692,8 +676,8 @@ function reconcileStorageSelection(optionsOrWebId, positionalCandidates = [], po
   if (options.webId === undefined || options.candidates === undefined) {
     return;
   }
-  const webId = normalizeIdentity(options.webId);
-  const candidates = options.candidates.map(normalizedBinding);
+  const webId = validateWebId(options.webId);
+  const candidates = options.candidates.map(normalizeStorageBinding);
   const seenByStorage = new Map;
   const uniqueCandidates = [];
   for (const candidate of candidates) {
@@ -711,7 +695,7 @@ function reconcileStorageSelection(optionsOrWebId, positionalCandidates = [], po
   }
   const eligible = uniqueCandidates.filter((candidate) => candidate.webId === webId);
   if (options.remembered) {
-    const remembered = normalizedBinding(options.remembered);
+    const remembered = normalizeStorageBinding(options.remembered);
     const exact = eligible.find((candidate) => storageBindingMatches(candidate, remembered));
     if (exact) {
       return { status: "ready", selected: { ...exact } };

package/node_modules/@undefineds.co/solid-sdk/dist/pod-runtime.js

@@ -1,13 +1,5 @@
+import { validateWebId } from './webid-auth.js';
 const KEY_SEPARATOR = '\u0000';
-function normalizeIdentityPart(value) {
-    const trimmed = value.trim();
-    try {
-        return new URL(trimmed).href;
-    }
-    catch {
-        return trimmed;
-    }
-}
 function normalizePodUrl(value) {
     if (typeof value !== 'string' || value.trim() === '') {
         throw new TypeError('podUrl must be a non-empty absolute URL');
@@ -28,7 +20,8 @@ function normalizePodUrl(value) {
     return parsed.href;
 }
 function compositeKey(webId, podUrl) {
-    return `${normalizeIdentityPart(webId)}${KEY_SEPARATOR}${normalizeIdentityPart(podUrl)}`;
+    // Only Pod addresses are normalized. The complete WebID is the identity.
+    return `${webId}${KEY_SEPARATOR}${podUrl}`;
 }
 function nextGeneration(generations, key) {
     const generation = (generations.get(key) ?? 0) + 1;
@@ -51,7 +44,7 @@ export function createPodRuntime(options) {
     const webIdGenerations = new Map();
     const compositeGenerations = new Map();
     const clearWebId = (webId, podUrl) => {
-        const webIdKey = normalizeIdentityPart(webId);
+        const webIdKey = validateWebId(webId);
         if (podUrl !== undefined) {
             const normalizedPodUrl = normalizePodUrl(podUrl);
             const key = compositeKey(webId, normalizedPodUrl);
@@ -91,7 +84,7 @@ export function createPodRuntime(options) {
         }
     };
     const clear = (identity) => {
-        if (!identity) {
+        if (identity === undefined) {
             readyByWebId.clear();
             readyByComposite.clear();
             for (const pending of pendingByWebId.values()) {
@@ -118,7 +111,7 @@ export function createPodRuntime(options) {
     };
     return {
         open(args) {
-            const webIdKey = normalizeIdentityPart(args.webId);
+            const webIdKey = validateWebId(args.webId);
             const explicitPodUrl = args.podUrl === undefined ? undefined : normalizePodUrl(args.podUrl);
             if (explicitPodUrl !== undefined) {
                 const key = compositeKey(args.webId, explicitPodUrl);

package/node_modules/@undefineds.co/solid-sdk/dist/storage-selection.js

@@ -1,22 +1,7 @@
-import { normalizeStorageBinding } from './webid-auth.js';
-function normalizeIdentity(value) {
-    const trimmed = value.trim();
-    try {
-        return new URL(trimmed).href;
-    }
-    catch {
-        return trimmed;
-    }
-}
-function normalizedBinding(binding) {
-    return {
-        ...normalizeStorageBinding(binding),
-        webId: normalizeIdentity(binding.webId),
-    };
-}
+import { normalizeStorageBinding, validateWebId } from './webid-auth.js';
 export function storageBindingMatches(expected, actual) {
-    const left = normalizedBinding(expected);
-    const right = normalizedBinding(actual);
+    const left = normalizeStorageBinding(expected);
+    const right = normalizeStorageBinding(actual);
     return left.storageUrl === right.storageUrl && left.webId === right.webId;
 }
 export function reconcileStorageSelection(optionsOrWebId, positionalCandidates = [], positionalRemembered) {
@@ -38,8 +23,8 @@ export function reconcileStorageSelection(optionsOrWebId, positionalCandidates =
     if (options.webId === undefined || options.candidates === undefined) {
         return undefined;
     }
-    const webId = normalizeIdentity(options.webId);
-    const candidates = options.candidates.map(normalizedBinding);
+    const webId = validateWebId(options.webId);
+    const candidates = options.candidates.map(normalizeStorageBinding);
     const seenByStorage = new Map();
     const uniqueCandidates = [];
     for (const candidate of candidates) {
@@ -57,7 +42,7 @@ export function reconcileStorageSelection(optionsOrWebId, positionalCandidates =
     }
     const eligible = uniqueCandidates.filter((candidate) => candidate.webId === webId);
     if (options.remembered) {
-        const remembered = normalizedBinding(options.remembered);
+        const remembered = normalizeStorageBinding(options.remembered);
         const exact = eligible.find((candidate) => storageBindingMatches(candidate, remembered));
         if (exact) {
             return { status: 'ready', selected: { ...exact } };

package/node_modules/@undefineds.co/solid-sdk/dist/webid-auth.d.ts

@@ -72,6 +72,8 @@ export interface WebIdLoginActions {
     retry?: (transaction?: WebIdLoginTransaction) => Promise<void> | void;
     logout(options?: unknown): Promise<void> | void;
 }
+/** Validate the identifier without rewriting the WebID used for identity equality. */
+export declare function validateWebId(value: string): string;
 declare function normalizeStorageBinding(binding: StorageBinding): StorageBinding;
 export declare function normalizeWebIdLoginRoute(input: WebIdLoginRouteDescriptor): WebIdLoginRouteDescriptor;
 export declare function normalizeApplicationReturnTo(value: string | undefined, allowedPrefixes: readonly string[]): string | undefined;

package/node_modules/@undefineds.co/solid-sdk/dist/webid-auth.js

@@ -35,13 +35,18 @@ function normalizeEndpoint(endpoint, fieldName) {
         label: endpoint.label,
     };
 }
+/** Validate the identifier without rewriting the WebID used for identity equality. */
+export function validateWebId(value) {
+    if (typeof value !== 'string' || value === '' || /[\s\u0000-\u001f\u007f-\u009f]/u.test(value)) {
+        throw new TypeError('webId must be a non-empty identifier without whitespace or control characters');
+    }
+    return value;
+}
 function normalizeStorageBinding(binding) {
     if (!binding || typeof binding.storageUrl !== 'string' || binding.storageUrl.trim() === '') {
         throw new TypeError('selectedStorage.storageUrl must be a non-empty absolute URL');
     }
-    if (typeof binding.webId !== 'string' || binding.webId.trim() === '') {
-        throw new TypeError('selectedStorage.webId must be a non-empty identifier URL');
-    }
+    validateWebId(binding.webId);
     let parsed;
     try {
         parsed = new URL(binding.storageUrl.trim());

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@undefineds.co/xpod",
-  "version": "0.4.7",
+  "version": "0.4.8",
   "description": "Xpod is an extended Community Solid Server, offering rich-feature, production-level Solid Pod and identity management.",
   "repository": "https://github.com/undefinedsco/xpod",
   "author": "developer@undefineds.co",
@@ -370,7 +370,7 @@
     }
   },
   "optionalDependencies": {
-    "@undefineds.co/xpod-darwin-arm64": "0.4.7"
+    "@undefineds.co/xpod-darwin-arm64": "0.4.8"
   },
   "resolutions": {
     "@inrupt/solid-client-authn-browser": "^3.1.1",
@@ -392,6 +392,12 @@
   },
   "packageManager": "bun@1.3.12",
   "bundledDependencies": [
+    "@undefineds.co/drizzle-solid",
+    "@undefineds.co/extensions",
+    "@undefineds.co/ai-connections",
+    "@undefineds.co/extension-sdk",
+    "@undefineds.co/shared-ui",
+    "@undefineds.co/solid-sdk",
     "@solid/community-server",
     "oidc-provider",
     "@undefineds.co/models",