sol-components 2.1.0

package/core/sparql-safety.js

@@ -0,0 +1,20 @@
+export function assertSafeQuery(query) {
+  const m = query.match(/\b(INSERT|DELETE|DROP|CREATE|CLEAR|LOAD|COPY|MOVE|ADD)\b/i);
+  if (m) throw new Error(`Blocked SPARQL operation: ${m[0].toUpperCase()}`);
+}
+
+export function sanitizeVarValue(value) {
+  if (/[{}]/.test(value)) throw new Error(`Variable value contains disallowed characters: { }`);
+  if (/\b(INSERT|DELETE|DROP|CREATE|CLEAR|LOAD|COPY|MOVE|ADD)\b/i.test(value))
+    throw new Error(`Variable value contains blocked keyword`);
+  return value.replace(/\\/g, '\\\\').replace(/"/g, '\\"').replace(/'/g, "\\'");
+}
+
+export function substituteVariables(query, vars = {}) {
+  let q = query;
+  for (const [key, value] of Object.entries(vars)) {
+    const safe = sanitizeVarValue(value);
+    q = q.replace(new RegExp(`\\{\\{${key}\\}\\}`, 'g'), safe);
+  }
+  return q;
+}

package/core/utils.js

@@ -0,0 +1,196 @@
+// Shared utilities that do not depend on rdflib.
+
+// ─── DOMPurify (lazy, cached) ─────────────────────────────────────────────────
+let _purify = null;
+async function _getDOMPurify() {
+  if (_purify) return _purify;
+  const win = typeof window !== 'undefined' ? window : {};
+  // The global may be the purify instance directly (official purify.min.js UMD)
+  // or a module namespace wrapping it (our esbuild vendor UMD → `{ default }`).
+  const g = win.DOMPurify;
+  const inst = g?.sanitize ? g : (g?.default?.sanitize ? g.default : null);
+  if (inst) { _purify = inst; return _purify; }
+  try {
+    const mod = await import('dompurify');
+    _purify = mod.default ?? mod;
+    if (_purify?.sanitize) return _purify;
+  } catch {}
+  return null;
+}
+
+export async function sanitizeHtml(html, opts = {}) {
+  const p = await _getDOMPurify();
+  if (p) return p.sanitize(html, opts);
+  // Minimal fallback: parse + re-serialize strips scripts/events via browser parser
+  const doc = new DOMParser().parseFromString(html, 'text/html');
+  return doc.body.innerHTML;
+}
+
+// W3C SPARQL Query Results JSON envelope.
+function w3c(vars, bindings) { return { head: { vars }, results: { bindings } }; }
+
+// ─── CSS selector query over an HTML document ────────────────────────────────
+// `html` is already sanitized. Returns the W3C SPARQL Query Results JSON
+// envelope ({ head: { vars }, results: { bindings } }) suitable for the renderer.
+export function queryHtmlWithSelector(html, baseUrl, selector) {
+  const doc = new DOMParser().parseFromString(html, 'text/html');
+  doc.querySelectorAll('base').forEach(b => b.remove()); // drop any existing <base>
+  const base = doc.createElement('base');
+  base.href = baseUrl;
+  doc.head.appendChild(base);
+
+  const els = Array.from(doc.querySelectorAll(selector));
+  if (!els.length) return w3c(['text'], []);
+
+  const hasHref = els.some(el => el.href || el.getAttribute('href'));
+  const hasSrc  = els.some(el => el.src  || el.getAttribute('src'));
+  const vars = ['tag', 'text'];
+  if (hasHref) vars.push('href');
+  if (hasSrc)  vars.push('src');
+
+  const bindings = els.map(el => {
+    const row = {
+      tag:  { type: 'literal', value: el.tagName.toLowerCase() },
+      text: { type: 'literal', value: el.textContent.trim() },
+    };
+    if (hasHref) {
+      const v = el.href || el.getAttribute('href') || '';
+      row.href = v ? { type: 'uri', value: el.href || v } : { type: 'literal', value: '' };
+    }
+    if (hasSrc) {
+      const v = el.src || el.getAttribute('src') || '';
+      row.src = v ? { type: 'uri', value: el.src || v } : { type: 'literal', value: '' };
+    }
+    return row;
+  });
+
+  return w3c(vars, bindings);
+}
+
+// ─── Plain results transformation ────────────────────────────────────────────
+// Converts the W3C envelope to plain JS objects/scalars.
+export function toPlainResults(data, wantedVars) {
+  const vars     = data.head.vars;
+  const bindings = data.results.bindings;
+  const cols = wantedVars ? vars.filter(v => wantedVars.includes(v)) : vars;
+  if (!bindings.length) return [];
+  // 1 row × 1 column → return scalar value directly
+  if (cols.length === 1 && bindings.length === 1) {
+    const cell = bindings[0][cols[0]];
+    return cell ? cell.value : null;
+  }
+  return bindings.map(row => {
+    const obj = {};
+    for (const col of cols) {
+      const cell = row[col];
+      obj[col] = cell ? cell.value : null;
+    }
+    return obj;
+  });
+}
+
+// ─── SPARQL adapters (non-rdflib) ────────────────────────────────────────────
+
+// Extract the projected variable names from a SPARQL SELECT clause, preserving
+// author order. Returns null for `SELECT *` or non-SELECT queries — callers
+// should fall back to whatever order the engine produced.
+export function parseSelectVars(queryText) {
+  const stripped = queryText.replace(/#[^\n]*/g, '');
+  const m = stripped.match(/\bSELECT\s+(?:DISTINCT\s+|REDUCED\s+)?(.*?)\s+WHERE\b/is);
+  if (!m) return null;
+  const clause = m[1].trim();
+  if (clause === '*') return null;
+  const vars = clause.match(/\?(\w+)/g);
+  return vars ? vars.map(v => v.slice(1)) : null;
+}
+
+export class ComunicaSparqlAdapter {
+  constructor(engineFactory) {
+    this.engineFactory = engineFactory;
+  }
+
+  static getComunicaEngine() {
+    if (typeof newEngine === 'function') return newEngine;
+    if (window.newEngine && typeof window.newEngine === 'function') return window.newEngine;
+    // Direct named export (when consumers expose Comunica themselves).
+    if (window.Comunica?.QueryEngine) return () => new window.Comunica.QueryEngine();
+    if (window.Comunica?.newEngine) return window.Comunica.newEngine;
+    // The vendored UMD wraps Comunica's CJS index, so QueryEngine lives one
+    // level deeper at `window.Comunica.default.QueryEngine`.
+    if (window.Comunica?.default?.QueryEngine) return () => new window.Comunica.default.QueryEngine();
+    if (window.Comunica?.default?.newEngine) return window.Comunica.default.newEngine;
+    // All-ESM fallback: no UMD sets a Comunica global anymore. The loader's
+    // importmap resolves `@comunica/query-sparql` to the one shared engine, so
+    // import it on demand and build a QueryEngine from its export. Async factory
+    // — awaited by executeQuery, so the (large) engine only loads when a
+    // federated query actually runs, not on page load.
+    return async () => {
+      let mod;
+      try { mod = await import('@comunica/query-sparql'); }
+      catch (e) { throw new Error(`Comunica engine could not be loaded: ${e.message}`); }
+      const QueryEngine = mod.QueryEngine || mod.default?.QueryEngine || mod.default;
+      if (typeof QueryEngine !== 'function') throw new Error('Comunica module has no QueryEngine export');
+      return new QueryEngine();
+    };
+  }
+
+  async executeQuery(query, endpoint, fetchFn) {
+    const engine = await this.engineFactory();
+    const sources = Array.isArray(endpoint) ? endpoint.slice() : [endpoint];
+    const ctx = { sources, lenient: true };
+    if (typeof fetchFn === 'function') ctx.fetch = fetchFn;
+    const stream = await engine.queryBindings(query, ctx);
+    const rawBindings = await stream.toArray();
+    if (!rawBindings.length) return w3c([], []);
+
+    // Prefer the explicit SELECT order from the query text; fall back to the
+    // engine's binding order for SELECT * / non-SELECT.
+    const selectVars = parseSelectVars(query);
+    const vars = selectVars ?? Array.from(rawBindings[0].keys()).map(v => v.value);
+
+    const bindings = rawBindings.map(binding => {
+      const row = {};
+      vars.forEach(v => {
+        const term = binding.get(v);
+        if (!term) { row[v] = { type: 'literal', value: '' }; return; }
+        if (term.termType === 'NamedNode' || term.uri) {
+          row[v] = { type: 'uri', value: term.value || term.uri || String(term) };
+          return;
+        }
+        if (term.termType === 'BlankNode') {
+          row[v] = { type: 'bnode', value: term.value };
+          return;
+        }
+        const cell = { type: 'literal', value: term.value || term.uri || String(term) };
+        if (term.language)        cell['xml:lang'] = term.language;
+        if (term.datatype?.value) cell.datatype    = term.datatype.value;
+        row[v] = cell;
+      });
+      return row;
+    });
+    return w3c(vars, bindings);
+  }
+}
+
+export class NativeSparqlAdapter {
+  async executeQuery(query, endpoint, fetchFn = fetch) {
+    const params = new URLSearchParams({ query, format: 'json' });
+    const resp = await fetchFn(`${endpoint}?${params}`, {
+      headers: { Accept: 'application/sparql-results+json' },
+    });
+    if (!resp.ok) throw new Error(`HTTP ${resp.status}`);
+    // The wire format IS the W3C SPARQL Query Results JSON envelope. The
+    // spec leaves missing-binding cells *absent* from a row, but downstream
+    // consumers (toPlainResults, views) expect every projected variable to
+    // be present — so synthesize empty-literal cells where the wire row
+    // omits a column.
+    const data  = await resp.json();
+    const vars  = data?.head?.vars ?? [];
+    const filled = (data?.results?.bindings ?? []).map(row => {
+      const out = {};
+      vars.forEach(v => { out[v] = row[v] ? row[v] : { type: 'literal', value: '' }; });
+      return out;
+    });
+    return { head: { vars }, results: { bindings: filled } };
+  }
+}

package/dist/importmap-cdn.json

@@ -0,0 +1,49 @@
+{
+  "imports": {
+    "rdflib": "https://esm.sh/rdflib@2",
+    "dompurify": "https://esm.sh/dompurify@3",
+    "ical.js": "https://esm.sh/ical.js@2",
+    "marked": "https://esm.sh/marked@4",
+    "@comunica/query-sparql": "https://esm.sh/@comunica/query-sparql@5",
+    "solid-ui": "https://esm.sh/solid-ui@3",
+    "solid-logic": "https://esm.sh/solid-logic@4",
+    "@inrupt/solid-client-authn-browser": "https://esm.sh/@inrupt/solid-client-authn-browser@4",
+    "n3": "https://esm.sh/n3@2",
+    "rdf-validate-shacl": "https://esm.sh/rdf-validate-shacl@0.6",
+    "menu-from-rdf": "https://esm.sh/sol-components/web/menu-from-rdf.js",
+    "sol-accordion": "https://esm.sh/sol-components/web/sol-accordion.js",
+    "sol-basic": "https://esm.sh/sol-components/web/sol-basic.js",
+    "sol-breadcrumb": "https://esm.sh/sol-components/web/sol-breadcrumb.js",
+    "sol-button": "https://esm.sh/sol-components/web/sol-button.js",
+    "sol-calendar": "https://esm.sh/sol-components/web/sol-calendar.js",
+    "sol-default": "https://esm.sh/sol-components/web/sol-default.js",
+    "sol-dropdown-button": "https://esm.sh/sol-components/web/sol-dropdown-button.js",
+    "sol-feed": "https://esm.sh/sol-components/web/sol-feed.js",
+    "sol-form": "https://esm.sh/sol-components/web/sol-form.js",
+    "sol-full": "https://esm.sh/sol-components/web/sol-full.js",
+    "sol-gallery": "https://esm.sh/sol-components/web/sol-gallery.js",
+    "sol-include": "https://esm.sh/sol-components/web/sol-include.js",
+    "sol-live-edit": "https://esm.sh/sol-components/web/sol-live-edit.js",
+    "sol-login": "https://esm.sh/sol-components/web/sol-login.js",
+    "sol-menu": "https://esm.sh/sol-components/web/sol-menu.js",
+    "sol-modal": "https://esm.sh/sol-components/web/sol-modal.js",
+    "sol-pod-extras": "https://esm.sh/sol-components/web/sol-pod-extras.js",
+    "sol-pod-ops": "https://esm.sh/sol-components/web/sol-pod-ops.js",
+    "sol-pod": "https://esm.sh/sol-components/web/sol-pod.js",
+    "sol-query": "https://esm.sh/sol-components/web/sol-query.js",
+    "sol-rolodex": "https://esm.sh/sol-components/web/sol-rolodex.js",
+    "sol-search": "https://esm.sh/sol-components/web/sol-search.js",
+    "sol-settings": "https://esm.sh/sol-components/web/sol-settings.js",
+    "sol-solidos": "https://esm.sh/sol-components/web/sol-solidos.js",
+    "sol-tabs": "https://esm.sh/sol-components/web/sol-tabs.js",
+    "sol-time": "https://esm.sh/sol-components/web/sol-time.js",
+    "sol-tree-edit": "https://esm.sh/sol-components/web/sol-tree-edit.js",
+    "sol-wac": "https://esm.sh/sol-components/web/sol-wac.js",
+    "sol-weather": "https://esm.sh/sol-components/web/sol-weather.js",
+    "sol-window": "https://esm.sh/sol-components/web/sol-window.js",
+    "sol-components/core/": "https://esm.sh/sol-components/core/",
+    "sol-components/sources/": "https://esm.sh/sol-components/sources/",
+    "sol-components/data/": "https://esm.sh/sol-components/data/",
+    "sol-components/": "https://esm.sh/sol-components/web/"
+  }
+}

package/dist/importmap-local.json

@@ -0,0 +1,49 @@
+{
+  "imports": {
+    "rdflib": "./vendor/rdflib.js",
+    "dompurify": "./vendor/dompurify.js",
+    "ical.js": "./vendor/ical.js.js",
+    "marked": "./vendor/marked.js",
+    "@comunica/query-sparql": "./vendor/@comunica-query-sparql.js",
+    "solid-ui": "./vendor/solid-ui.js",
+    "solid-logic": "./vendor/solid-logic.js",
+    "@inrupt/solid-client-authn-browser": "./vendor/@inrupt-solid-client-authn-browser.js",
+    "n3": "./vendor/n3.js",
+    "rdf-validate-shacl": "./vendor/rdf-validate-shacl.js",
+    "menu-from-rdf": "../web/menu-from-rdf.js",
+    "sol-accordion": "../web/sol-accordion.js",
+    "sol-basic": "../web/sol-basic.js",
+    "sol-breadcrumb": "../web/sol-breadcrumb.js",
+    "sol-button": "../web/sol-button.js",
+    "sol-calendar": "../web/sol-calendar.js",
+    "sol-default": "../web/sol-default.js",
+    "sol-dropdown-button": "../web/sol-dropdown-button.js",
+    "sol-feed": "../web/sol-feed.js",
+    "sol-form": "../web/sol-form.js",
+    "sol-full": "../web/sol-full.js",
+    "sol-gallery": "../web/sol-gallery.js",
+    "sol-include": "../web/sol-include.js",
+    "sol-live-edit": "../web/sol-live-edit.js",
+    "sol-login": "../web/sol-login.js",
+    "sol-menu": "../web/sol-menu.js",
+    "sol-modal": "../web/sol-modal.js",
+    "sol-pod-extras": "../web/sol-pod-extras.js",
+    "sol-pod-ops": "../web/sol-pod-ops.js",
+    "sol-pod": "../web/sol-pod.js",
+    "sol-query": "../web/sol-query.js",
+    "sol-rolodex": "../web/sol-rolodex.js",
+    "sol-search": "../web/sol-search.js",
+    "sol-settings": "../web/sol-settings.js",
+    "sol-solidos": "../web/sol-solidos.js",
+    "sol-tabs": "../web/sol-tabs.js",
+    "sol-time": "../web/sol-time.js",
+    "sol-tree-edit": "../web/sol-tree-edit.js",
+    "sol-wac": "../web/sol-wac.js",
+    "sol-weather": "../web/sol-weather.js",
+    "sol-window": "../web/sol-window.js",
+    "sol-components/core/": "../core/",
+    "sol-components/sources/": "../sources/",
+    "sol-components/data/": "../data/",
+    "sol-components/": "../web/"
+  }
+}

package/dist/sol-loader.manifest.json

@@ -0,0 +1,140 @@
+{
+  "name": "sol-components",
+
+  "stages": {
+    "local": {
+      "components": {
+        "menu-from-rdf": "../web/menu-from-rdf.js",
+        "sol-accordion": "../web/sol-accordion.js",
+        "sol-basic": "../web/sol-basic.js",
+        "sol-breadcrumb": "../web/sol-breadcrumb.js",
+        "sol-button": "../web/sol-button.js",
+        "sol-calendar": "../web/sol-calendar.js",
+        "sol-default": "../web/sol-default.js",
+        "sol-dropdown-button": "../web/sol-dropdown-button.js",
+        "sol-feed": "../web/sol-feed.js",
+        "sol-form": "../web/sol-form.js",
+        "sol-full": "../web/sol-full.js",
+        "sol-gallery": "../web/sol-gallery.js",
+        "sol-include": "../web/sol-include.js",
+        "sol-live-edit": "../web/sol-live-edit.js",
+        "sol-login": "../web/sol-login.js",
+        "sol-menu": "../web/sol-menu.js",
+        "sol-modal": "../web/sol-modal.js",
+        "sol-pod-extras": "../web/sol-pod-extras.js",
+        "sol-pod-ops": "../web/sol-pod-ops.js",
+        "sol-pod": "../web/sol-pod.js",
+        "sol-query": "../web/sol-query.js",
+        "sol-rolodex": "../web/sol-rolodex.js",
+        "sol-search": "../web/sol-search.js",
+        "sol-settings": "../web/sol-settings.js",
+        "sol-solidos": "../web/sol-solidos.js",
+        "sol-tabs": "../web/sol-tabs.js",
+        "sol-time": "../web/sol-time.js",
+        "sol-tree-edit": "../web/sol-tree-edit.js",
+        "sol-wac": "../web/sol-wac.js",
+        "sol-weather": "../web/sol-weather.js",
+        "sol-window": "../web/sol-window.js"
+      },
+      "shared-modules": {
+        "rdflib": "./vendor/rdflib.js",
+        "dompurify": "./vendor/dompurify.js",
+        "ical.js": "./vendor/ical.js.js",
+        "marked": "./vendor/marked.js",
+        "@comunica/query-sparql": "https://esm.sh/@comunica/query-sparql@5",
+        "solid-ui": "./vendor/solid-ui.js",
+        "solid-logic": "./vendor/solid-logic.js",
+        "@inrupt/solid-client-authn-browser": "./vendor/@inrupt-solid-client-authn-browser.js",
+        "n3": "./vendor/n3.js",
+        "rdf-validate-shacl": "./vendor/rdf-validate-shacl.js",
+        "sol-components/core/": "../core/",
+        "sol-components/sources/": "../sources/",
+        "sol-components/data/": "../data/",
+        "sol-components/": "../web/"
+      }
+    },
+    "cdn": {
+      "components": {
+        "menu-from-rdf": "https://esm.sh/sol-components/web/menu-from-rdf.js",
+        "sol-accordion": "https://esm.sh/sol-components/web/sol-accordion.js",
+        "sol-basic": "https://esm.sh/sol-components/web/sol-basic.js",
+        "sol-breadcrumb": "https://esm.sh/sol-components/web/sol-breadcrumb.js",
+        "sol-button": "https://esm.sh/sol-components/web/sol-button.js",
+        "sol-calendar": "https://esm.sh/sol-components/web/sol-calendar.js",
+        "sol-default": "https://esm.sh/sol-components/web/sol-default.js",
+        "sol-dropdown-button": "https://esm.sh/sol-components/web/sol-dropdown-button.js",
+        "sol-feed": "https://esm.sh/sol-components/web/sol-feed.js",
+        "sol-form": "https://esm.sh/sol-components/web/sol-form.js",
+        "sol-full": "https://esm.sh/sol-components/web/sol-full.js",
+        "sol-gallery": "https://esm.sh/sol-components/web/sol-gallery.js",
+        "sol-include": "https://esm.sh/sol-components/web/sol-include.js",
+        "sol-live-edit": "https://esm.sh/sol-components/web/sol-live-edit.js",
+        "sol-login": "https://esm.sh/sol-components/web/sol-login.js",
+        "sol-menu": "https://esm.sh/sol-components/web/sol-menu.js",
+        "sol-modal": "https://esm.sh/sol-components/web/sol-modal.js",
+        "sol-pod-extras": "https://esm.sh/sol-components/web/sol-pod-extras.js",
+        "sol-pod-ops": "https://esm.sh/sol-components/web/sol-pod-ops.js",
+        "sol-pod": "https://esm.sh/sol-components/web/sol-pod.js",
+        "sol-query": "https://esm.sh/sol-components/web/sol-query.js",
+        "sol-rolodex": "https://esm.sh/sol-components/web/sol-rolodex.js",
+        "sol-search": "https://esm.sh/sol-components/web/sol-search.js",
+        "sol-settings": "https://esm.sh/sol-components/web/sol-settings.js",
+        "sol-solidos": "https://esm.sh/sol-components/web/sol-solidos.js",
+        "sol-tabs": "https://esm.sh/sol-components/web/sol-tabs.js",
+        "sol-time": "https://esm.sh/sol-components/web/sol-time.js",
+        "sol-tree-edit": "https://esm.sh/sol-components/web/sol-tree-edit.js",
+        "sol-wac": "https://esm.sh/sol-components/web/sol-wac.js",
+        "sol-weather": "https://esm.sh/sol-components/web/sol-weather.js",
+        "sol-window": "https://esm.sh/sol-components/web/sol-window.js"
+      },
+      "shared-modules": {
+        "rdflib": "https://esm.sh/rdflib@2",
+        "dompurify": "https://esm.sh/dompurify@3",
+        "ical.js": "https://esm.sh/ical.js@2",
+        "marked": "https://esm.sh/marked@4",
+        "@comunica/query-sparql": "https://esm.sh/@comunica/query-sparql@5",
+        "solid-ui": "https://esm.sh/solid-ui@3",
+        "solid-logic": "https://esm.sh/solid-logic@4",
+        "@inrupt/solid-client-authn-browser": "https://esm.sh/@inrupt/solid-client-authn-browser@4",
+        "n3": "https://esm.sh/n3@2",
+        "rdf-validate-shacl": "https://esm.sh/rdf-validate-shacl@0.6",
+        "sol-components/core/": "https://esm.sh/sol-components/core/",
+        "sol-components/sources/": "https://esm.sh/sol-components/sources/",
+        "sol-components/data/": "https://esm.sh/sol-components/data/",
+        "sol-components/": "https://esm.sh/sol-components/web/"
+      }
+    }
+  },
+
+  "bundles": {
+    "rdf-bundle": [
+      "solid-logic",
+      "solid-ui",
+      "sol-tree-edit",
+      "sol-form",
+      "sol-settings",
+      "sol-components/core/edit-placements.js",
+      "sol-components/core/from-rdf.js"
+    ]
+  },
+
+  "attributes": {
+    "data-from-query": "sol-components/core/from-query.js",
+    "data-edit-shape data-from-rdf": "rdf-bundle"
+  },
+
+  "objects": {
+    "provides": {
+      "store":      { "service": "rdf",  "sendValue": "store" },
+      "auth":       { "service": "auth", "sendValue": "fetch" },
+      "navigation": { "respondTo": "sol-navigate", "sendValue": "detail.url" }
+    },
+    "consumes": {
+      "store": { "call": "rdf.useStore" },
+      "auth":  { "call": "adoptFetch" }
+    },
+    "accepts": {
+      "navigation": { "onElement": "sol-query", "applyValueTo": "endpoint" }
+    }
+  }
+}