@undefineds.co/xpod 0.1.0-local.202602081751

package/dist/util/ResourceStoreFetch.js

@@ -0,0 +1,147 @@
+"use strict";
+/**
+ * ResourceStoreFetch - 将 ResourceStore 包装成 fetch 接口
+ *
+ * 用于在服务端内部访问 Pod 数据，绕过 HTTP 层和 DPoP 认证。
+ * drizzle-solid 可以直接使用这个 fetch 函数。
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createResourceStoreFetch = createResourceStoreFetch;
+const global_logger_factory_1 = require("global-logger-factory");
+const community_server_1 = require("@solid/community-server");
+const node_stream_1 = require("node:stream");
+const logger = (0, global_logger_factory_1.getLoggerFor)('ResourceStoreFetch');
+/**
+ * 创建一个基于 ResourceStore 的 fetch 函数
+ */
+function createResourceStoreFetch(resourceStore) {
+    return async (input, init) => {
+        const url = typeof input === 'string' ? input : input instanceof URL ? input.href : input.url;
+        const method = init?.method?.toUpperCase() ?? 'GET';
+        logger.debug(`ResourceStoreFetch: ${method} ${url}`);
+        try {
+            if (method === 'GET' || method === 'HEAD') {
+                return await handleGet(resourceStore, url, method === 'HEAD');
+            }
+            if (method === 'PUT') {
+                return await handlePut(resourceStore, url, init);
+            }
+            if (method === 'DELETE') {
+                return await handleDelete(resourceStore, url);
+            }
+            if (method === 'PATCH') {
+                return await handlePatch(resourceStore, url, init);
+            }
+            // 不支持的方法
+            return new Response(null, { status: 405, statusText: 'Method Not Allowed' });
+        }
+        catch (error) {
+            logger.error(`ResourceStoreFetch error: ${error.message}`);
+            // 处理常见错误
+            if (error.statusCode === 404 || error.name === 'NotFoundHttpError') {
+                return new Response(null, { status: 404, statusText: 'Not Found' });
+            }
+            if (error.statusCode === 401 || error.name === 'UnauthorizedHttpError') {
+                return new Response(null, { status: 401, statusText: 'Unauthorized' });
+            }
+            if (error.statusCode === 403 || error.name === 'ForbiddenHttpError') {
+                return new Response(null, { status: 403, statusText: 'Forbidden' });
+            }
+            return new Response(error.message, { status: 500, statusText: 'Internal Server Error' });
+        }
+    };
+}
+async function handleGet(resourceStore, url, headOnly) {
+    const identifier = { path: url };
+    const preferences = {
+        type: { 'text/turtle': 1, 'application/ld+json': 0.9, '*/*': 0.1 },
+    };
+    const representation = await resourceStore.getRepresentation(identifier, preferences);
+    const contentType = representation.metadata.contentType ?? 'application/octet-stream';
+    if (headOnly) {
+        // HEAD 请求，不返回 body
+        representation.data.destroy();
+        return new Response(null, {
+            status: 200,
+            headers: { 'Content-Type': contentType },
+        });
+    }
+    // 将 Node.js Readable 流转换为 Web ReadableStream
+    const webStream = node_stream_1.Readable.toWeb(representation.data);
+    return new Response(webStream, {
+        status: 200,
+        headers: { 'Content-Type': contentType },
+    });
+}
+async function handlePut(resourceStore, url, init) {
+    const identifier = { path: url };
+    const contentType = getContentType(init?.headers) ?? 'text/turtle';
+    // 获取请求体
+    const body = init?.body;
+    let data;
+    if (typeof body === 'string') {
+        data = node_stream_1.Readable.from([body]);
+    }
+    else if (body instanceof ArrayBuffer) {
+        data = node_stream_1.Readable.from([Buffer.from(new Uint8Array(body))]);
+    }
+    else if (body instanceof Uint8Array) {
+        data = node_stream_1.Readable.from([Buffer.from(body)]);
+    }
+    else if (body && typeof body.getReader === 'function') {
+        // Web ReadableStream
+        data = node_stream_1.Readable.fromWeb(body);
+    }
+    else {
+        data = node_stream_1.Readable.from([]);
+    }
+    const metadata = new community_server_1.RepresentationMetadata({ path: url }, { 'content-type': contentType });
+    const representation = new community_server_1.BasicRepresentation(data, metadata);
+    await resourceStore.setRepresentation(identifier, representation);
+    return new Response(null, { status: 201, statusText: 'Created' });
+}
+async function handleDelete(resourceStore, url) {
+    const identifier = { path: url };
+    await resourceStore.deleteResource(identifier);
+    return new Response(null, { status: 204, statusText: 'No Content' });
+}
+async function handlePatch(resourceStore, url, init) {
+    const identifier = { path: url };
+    const contentType = getContentType(init?.headers) ?? 'application/sparql-update';
+    const body = init?.body;
+    let data;
+    if (typeof body === 'string') {
+        data = node_stream_1.Readable.from([body]);
+    }
+    else if (body && typeof body.getReader === 'function') {
+        data = node_stream_1.Readable.fromWeb(body);
+    }
+    else {
+        data = node_stream_1.Readable.from([]);
+    }
+    const metadata = new community_server_1.RepresentationMetadata({ path: url }, { 'content-type': contentType });
+    const patch = new community_server_1.BasicRepresentation(data, metadata);
+    await resourceStore.modifyResource(identifier, patch);
+    return new Response(null, { status: 204, statusText: 'No Content' });
+}
+function getContentType(headers) {
+    if (!headers)
+        return undefined;
+    if (headers instanceof Headers) {
+        return headers.get('content-type') ?? undefined;
+    }
+    if (Array.isArray(headers)) {
+        const found = headers.find(([key]) => key.toLowerCase() === 'content-type');
+        return found ? found[1] : undefined;
+    }
+    // Record<string, string>
+    if (typeof headers === 'object') {
+        for (const [key, value] of Object.entries(headers)) {
+            if (key.toLowerCase() === 'content-type') {
+                return typeof value === 'string' ? value : undefined;
+            }
+        }
+    }
+    return undefined;
+}
+//# sourceMappingURL=ResourceStoreFetch.js.map

package/dist/util/ResourceStoreFetch.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ResourceStoreFetch.js","sourceRoot":"","sources":["../../src/util/ResourceStoreFetch.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;AAYH,4DA6CC;AAvDD,iEAAqD;AAErD,8DAAsF;AACtF,6CAAuC;AAEvC,MAAM,MAAM,GAAG,IAAA,oCAAY,EAAC,oBAAoB,CAAC,CAAC;AAElD;;GAEG;AACH,SAAgB,wBAAwB,CAAC,aAA4B;IACnE,OAAO,KAAK,EAAE,KAA6B,EAAE,IAAkB,EAAqB,EAAE;QACpF,MAAM,GAAG,GAAG,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,YAAY,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC;QAC9F,MAAM,MAAM,GAAG,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,IAAI,KAAK,CAAC;QAEpD,MAAM,CAAC,KAAK,CAAC,uBAAuB,MAAM,IAAI,GAAG,EAAE,CAAC,CAAC;QAErD,IAAI,CAAC;YACH,IAAI,MAAM,KAAK,KAAK,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;gBAC1C,OAAO,MAAM,SAAS,CAAC,aAAa,EAAE,GAAG,EAAE,MAAM,KAAK,MAAM,CAAC,CAAC;YAChE,CAAC;YAED,IAAI,MAAM,KAAK,KAAK,EAAE,CAAC;gBACrB,OAAO,MAAM,SAAS,CAAC,aAAa,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;YACnD,CAAC;YAED,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;gBACxB,OAAO,MAAM,YAAY,CAAC,aAAa,EAAE,GAAG,CAAC,CAAC;YAChD,CAAC;YAED,IAAI,MAAM,KAAK,OAAO,EAAE,CAAC;gBACvB,OAAO,MAAM,WAAW,CAAC,aAAa,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;YACrD,CAAC;YAED,SAAS;YACT,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,UAAU,EAAE,oBAAoB,EAAE,CAAC,CAAC;QAC/E,CAAC;QAAC,OAAO,KAAU,EAAE,CAAC;YACpB,MAAM,CAAC,KAAK,CAAC,6BAA6B,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;YAE3D,SAAS;YACT,IAAI,KAAK,CAAC,UAAU,KAAK,GAAG,IAAI,KAAK,CAAC,IAAI,KAAK,mBAAmB,EAAE,CAAC;gBACnE,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,UAAU,EAAE,WAAW,EAAE,CAAC,CAAC;YACtE,CAAC;YAED,IAAI,KAAK,CAAC,UAAU,KAAK,GAAG,IAAI,KAAK,CAAC,IAAI,KAAK,uBAAuB,EAAE,CAAC;gBACvE,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,UAAU,EAAE,cAAc,EAAE,CAAC,CAAC;YACzE,CAAC;YAED,IAAI,KAAK,CAAC,UAAU,KAAK,GAAG,IAAI,KAAK,CAAC,IAAI,KAAK,oBAAoB,EAAE,CAAC;gBACpE,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,UAAU,EAAE,WAAW,EAAE,CAAC,CAAC;YACtE,CAAC;YAED,OAAO,IAAI,QAAQ,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,UAAU,EAAE,uBAAuB,EAAE,CAAC,CAAC;QAC3F,CAAC;IACH,CAAC,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,aAA4B,EAAE,GAAW,EAAE,QAAiB;IACnF,MAAM,UAAU,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;IACjC,MAAM,WAAW,GAAG;QAClB,IAAI,EAAE,EAAE,aAAa,EAAE,CAAC,EAAE,qBAAqB,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE;KACnE,CAAC;IAEF,MAAM,cAAc,GAAG,MAAM,aAAa,CAAC,iBAAiB,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;IACtF,MAAM,WAAW,GAAG,cAAc,CAAC,QAAQ,CAAC,WAAW,IAAI,0BAA0B,CAAC;IAEtF,IAAI,QAAQ,EAAE,CAAC;QACb,mBAAmB;QACnB,cAAc,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;QAC9B,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE;YACxB,MAAM,EAAE,GAAG;YACX,OAAO,EAAE,EAAE,cAAc,EAAE,WAAW,EAAE;SACzC,CAAC,CAAC;IACL,CAAC;IAED,6CAA6C;IAC7C,MAAM,SAAS,GAAG,sBAAQ,CAAC,KAAK,CAAC,cAAc,CAAC,IAAI,CAAmB,CAAC;IAExE,OAAO,IAAI,QAAQ,CAAC,SAAS,EAAE;QAC7B,MAAM,EAAE,GAAG;QACX,OAAO,EAAE,EAAE,cAAc,EAAE,WAAW,EAAE;KACzC,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,aAA4B,EAAE,GAAW,EAAE,IAAkB;IACpF,MAAM,UAAU,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;IACjC,MAAM,WAAW,GAAG,cAAc,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,aAAa,CAAC;IAEnE,QAAQ;IACR,MAAM,IAAI,GAAG,IAAI,EAAE,IAAI,CAAC;IACxB,IAAI,IAAc,CAAC;IAEnB,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC7B,IAAI,GAAG,sBAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IAC/B,CAAC;SAAM,IAAI,IAAI,YAAY,WAAW,EAAE,CAAC;QACvC,IAAI,GAAG,sBAAQ,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IAC5D,CAAC;SAAM,IAAI,IAAI,YAAY,UAAU,EAAE,CAAC;QACtC,IAAI,GAAG,sBAAQ,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC5C,CAAC;SAAM,IAAI,IAAI,IAAI,OAAQ,IAAY,CAAC,SAAS,KAAK,UAAU,EAAE,CAAC;QACjE,qBAAqB;QACrB,IAAI,GAAG,sBAAQ,CAAC,OAAO,CAAC,IAAsB,CAAC,CAAC;IAClD,CAAC;SAAM,CAAC;QACN,IAAI,GAAG,sBAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC3B,CAAC;IAED,MAAM,QAAQ,GAAG,IAAI,yCAAsB,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE,EAAE,cAAc,EAAE,WAAW,EAAE,CAAC,CAAC;IAC5F,MAAM,cAAc,GAAG,IAAI,sCAAmB,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IAE/D,MAAM,aAAa,CAAC,iBAAiB,CAAC,UAAU,EAAE,cAAc,CAAC,CAAC;IAElE,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC,CAAC;AACpE,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,aAA4B,EAAE,GAAW;IACnE,MAAM,UAAU,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;IACjC,MAAM,aAAa,CAAC,cAAc,CAAC,UAAU,CAAC,CAAC;IAC/C,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,UAAU,EAAE,YAAY,EAAE,CAAC,CAAC;AACvE,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,aAA4B,EAAE,GAAW,EAAE,IAAkB;IACtF,MAAM,UAAU,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;IACjC,MAAM,WAAW,GAAG,cAAc,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,2BAA2B,CAAC;IAEjF,MAAM,IAAI,GAAG,IAAI,EAAE,IAAI,CAAC;IACxB,IAAI,IAAc,CAAC;IAEnB,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC7B,IAAI,GAAG,sBAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IAC/B,CAAC;SAAM,IAAI,IAAI,IAAI,OAAQ,IAAY,CAAC,SAAS,KAAK,UAAU,EAAE,CAAC;QACjE,IAAI,GAAG,sBAAQ,CAAC,OAAO,CAAC,IAAsB,CAAC,CAAC;IAClD,CAAC;SAAM,CAAC;QACN,IAAI,GAAG,sBAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC3B,CAAC;IAED,MAAM,QAAQ,GAAG,IAAI,yCAAsB,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE,EAAE,cAAc,EAAE,WAAW,EAAE,CAAC,CAAC;IAC5F,MAAM,KAAK,GAAG,IAAI,sCAAmB,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IAEtD,MAAM,aAAa,CAAC,cAAc,CAAC,UAAU,EAAE,KAAY,CAAC,CAAC;IAE7D,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,UAAU,EAAE,YAAY,EAAE,CAAC,CAAC;AACvE,CAAC;AAED,SAAS,cAAc,CAAC,OAAgC;IACtD,IAAI,CAAC,OAAO;QAAE,OAAO,SAAS,CAAC;IAE/B,IAAI,OAAO,YAAY,OAAO,EAAE,CAAC;QAC/B,OAAO,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,SAAS,CAAC;IAClD,CAAC;IAED,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QAC3B,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,WAAW,EAAE,KAAK,cAAc,CAAC,CAAC;QAC5E,OAAO,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACtC,CAAC;IAED,yBAAyB;IACzB,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;QAChC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;YACnD,IAAI,GAAG,CAAC,WAAW,EAAE,KAAK,cAAc,EAAE,CAAC;gBACzC,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;YACvD,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC","sourcesContent":["/**\n * ResourceStoreFetch - 将 ResourceStore 包装成 fetch 接口\n *\n * 用于在服务端内部访问 Pod 数据，绕过 HTTP 层和 DPoP 认证。\n * drizzle-solid 可以直接使用这个 fetch 函数。\n */\n\nimport { getLoggerFor } from 'global-logger-factory';\nimport type { ResourceStore } from '@solid/community-server';\nimport { BasicRepresentation, RepresentationMetadata } from '@solid/community-server';\nimport { Readable } from 'node:stream';\n\nconst logger = getLoggerFor('ResourceStoreFetch');\n\n/**\n * 创建一个基于 ResourceStore 的 fetch 函数\n */\nexport function createResourceStoreFetch(resourceStore: ResourceStore): typeof fetch {\n  return async (input: string | URL | Request, init?: RequestInit): Promise<Response> => {\n    const url = typeof input === 'string' ? input : input instanceof URL ? input.href : input.url;\n    const method = init?.method?.toUpperCase() ?? 'GET';\n\n    logger.debug(`ResourceStoreFetch: ${method} ${url}`);\n\n    try {\n      if (method === 'GET' || method === 'HEAD') {\n        return await handleGet(resourceStore, url, method === 'HEAD');\n      }\n\n      if (method === 'PUT') {\n        return await handlePut(resourceStore, url, init);\n      }\n\n      if (method === 'DELETE') {\n        return await handleDelete(resourceStore, url);\n      }\n\n      if (method === 'PATCH') {\n        return await handlePatch(resourceStore, url, init);\n      }\n\n      // 不支持的方法\n      return new Response(null, { status: 405, statusText: 'Method Not Allowed' });\n    } catch (error: any) {\n      logger.error(`ResourceStoreFetch error: ${error.message}`);\n\n      // 处理常见错误\n      if (error.statusCode === 404 || error.name === 'NotFoundHttpError') {\n        return new Response(null, { status: 404, statusText: 'Not Found' });\n      }\n\n      if (error.statusCode === 401 || error.name === 'UnauthorizedHttpError') {\n        return new Response(null, { status: 401, statusText: 'Unauthorized' });\n      }\n\n      if (error.statusCode === 403 || error.name === 'ForbiddenHttpError') {\n        return new Response(null, { status: 403, statusText: 'Forbidden' });\n      }\n\n      return new Response(error.message, { status: 500, statusText: 'Internal Server Error' });\n    }\n  };\n}\n\nasync function handleGet(resourceStore: ResourceStore, url: string, headOnly: boolean): Promise<Response> {\n  const identifier = { path: url };\n  const preferences = {\n    type: { 'text/turtle': 1, 'application/ld+json': 0.9, '*/*': 0.1 },\n  };\n\n  const representation = await resourceStore.getRepresentation(identifier, preferences);\n  const contentType = representation.metadata.contentType ?? 'application/octet-stream';\n\n  if (headOnly) {\n    // HEAD 请求，不返回 body\n    representation.data.destroy();\n    return new Response(null, {\n      status: 200,\n      headers: { 'Content-Type': contentType },\n    });\n  }\n\n  // 将 Node.js Readable 流转换为 Web ReadableStream\n  const webStream = Readable.toWeb(representation.data) as ReadableStream;\n\n  return new Response(webStream, {\n    status: 200,\n    headers: { 'Content-Type': contentType },\n  });\n}\n\nasync function handlePut(resourceStore: ResourceStore, url: string, init?: RequestInit): Promise<Response> {\n  const identifier = { path: url };\n  const contentType = getContentType(init?.headers) ?? 'text/turtle';\n\n  // 获取请求体\n  const body = init?.body;\n  let data: Readable;\n\n  if (typeof body === 'string') {\n    data = Readable.from([body]);\n  } else if (body instanceof ArrayBuffer) {\n    data = Readable.from([Buffer.from(new Uint8Array(body))]);\n  } else if (body instanceof Uint8Array) {\n    data = Readable.from([Buffer.from(body)]);\n  } else if (body && typeof (body as any).getReader === 'function') {\n    // Web ReadableStream\n    data = Readable.fromWeb(body as ReadableStream);\n  } else {\n    data = Readable.from([]);\n  }\n\n  const metadata = new RepresentationMetadata({ path: url }, { 'content-type': contentType });\n  const representation = new BasicRepresentation(data, metadata);\n\n  await resourceStore.setRepresentation(identifier, representation);\n\n  return new Response(null, { status: 201, statusText: 'Created' });\n}\n\nasync function handleDelete(resourceStore: ResourceStore, url: string): Promise<Response> {\n  const identifier = { path: url };\n  await resourceStore.deleteResource(identifier);\n  return new Response(null, { status: 204, statusText: 'No Content' });\n}\n\nasync function handlePatch(resourceStore: ResourceStore, url: string, init?: RequestInit): Promise<Response> {\n  const identifier = { path: url };\n  const contentType = getContentType(init?.headers) ?? 'application/sparql-update';\n\n  const body = init?.body;\n  let data: Readable;\n\n  if (typeof body === 'string') {\n    data = Readable.from([body]);\n  } else if (body && typeof (body as any).getReader === 'function') {\n    data = Readable.fromWeb(body as ReadableStream);\n  } else {\n    data = Readable.from([]);\n  }\n\n  const metadata = new RepresentationMetadata({ path: url }, { 'content-type': contentType });\n  const patch = new BasicRepresentation(data, metadata);\n\n  await resourceStore.modifyResource(identifier, patch as any);\n\n  return new Response(null, { status: 204, statusText: 'No Content' });\n}\n\nfunction getContentType(headers?: RequestInit['headers']): string | undefined {\n  if (!headers) return undefined;\n\n  if (headers instanceof Headers) {\n    return headers.get('content-type') ?? undefined;\n  }\n\n  if (Array.isArray(headers)) {\n    const found = headers.find(([key]) => key.toLowerCase() === 'content-type');\n    return found ? found[1] : undefined;\n  }\n\n  // Record<string, string>\n  if (typeof headers === 'object') {\n    for (const [key, value] of Object.entries(headers)) {\n      if (key.toLowerCase() === 'content-type') {\n        return typeof value === 'string' ? value : undefined;\n      }\n    }\n  }\n\n  return undefined;\n}\n"]}

package/dist/util/database/DatabaseMaintenance.d.ts

@@ -0,0 +1,23 @@
+export interface DatabaseMaintenanceOptions {
+    connectionString: string;
+}
+/**
+ * Database maintenance utilities for cleaning up invalid data
+ */
+export declare class DatabaseMaintenance {
+    protected readonly logger: import("global-logger-factory").Logger<unknown>;
+    private readonly pool;
+    constructor(options: DatabaseMaintenanceOptions);
+    /**
+     * Clean up invalid JSON values from key-value storage tables
+     */
+    cleanInvalidJsonValues(tableName?: string): Promise<number>;
+    /**
+     * Get statistics about the database tables
+     */
+    getTableStats(): Promise<Record<string, number>>;
+    /**
+     * Close the database connection
+     */
+    close(): Promise<void>;
+}

package/dist/util/database/DatabaseMaintenance.js

@@ -0,0 +1,82 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DatabaseMaintenance = void 0;
+const pg_1 = require("pg");
+const global_logger_factory_1 = require("global-logger-factory");
+/**
+ * Database maintenance utilities for cleaning up invalid data
+ */
+class DatabaseMaintenance {
+    constructor(options) {
+        this.logger = (0, global_logger_factory_1.getLoggerFor)(this);
+        this.pool = new pg_1.Pool({ connectionString: options.connectionString });
+    }
+    /**
+     * Clean up invalid JSON values from key-value storage tables
+     */
+    async cleanInvalidJsonValues(tableName = 'internal_kv') {
+        const quotedTableName = `"${tableName}"`;
+        try {
+            // First, check what we're going to delete
+            const checkResult = await this.pool.query(`SELECT key, value::text FROM ${quotedTableName} WHERE value::text = '[object Object]' LIMIT 10`);
+            const foundCount = checkResult.rowCount ?? 0;
+            if (foundCount > 0) {
+                this.logger.info(`Found ${foundCount} invalid JSON entries in ${tableName}:`);
+                checkResult.rows.forEach(row => {
+                    this.logger.info(`  Key: ${row.key}, Value: ${row.value}`);
+                });
+                // Delete invalid values
+                const deleteResult = await this.pool.query(`DELETE FROM ${quotedTableName} WHERE value::text = '[object Object]'`);
+                const deletedCount = deleteResult.rowCount ?? 0;
+                this.logger.info(`Successfully cleaned ${deletedCount} invalid entries from ${tableName}.`);
+                return deletedCount;
+            }
+            else {
+                this.logger.info(`No invalid JSON entries found in ${tableName}.`);
+                return 0;
+            }
+        }
+        catch (error) {
+            this.logger.error(`Error cleaning invalid JSON values from ${tableName}: ${error}`);
+            throw error;
+        }
+    }
+    /**
+     * Get statistics about the database tables
+     */
+    async getTableStats() {
+        try {
+            const result = await this.pool.query(`
+        SELECT 
+          schemaname,
+          relname as tablename,
+          n_tup_ins as inserts,
+          n_tup_upd as updates,
+          n_tup_del as deletes,
+          n_live_tup as live_tuples,
+          n_dead_tup as dead_tuples
+        FROM pg_stat_user_tables 
+        WHERE relname LIKE '%kv%' OR relname LIKE 'identity_%'
+      `);
+            const stats = {};
+            result.rows.forEach(row => {
+                stats[row.tablename] = row.live_tuples;
+            });
+            return stats;
+        }
+        catch (error) {
+            this.logger.error(`Error getting table stats: ${error}`);
+            throw error;
+        }
+    }
+    /**
+     * Close the database connection
+     */
+    async close() {
+        await this.pool.end().catch((error) => {
+            this.logger.warn(`Failed to close database pool: ${error}`);
+        });
+    }
+}
+exports.DatabaseMaintenance = DatabaseMaintenance;
+//# sourceMappingURL=DatabaseMaintenance.js.map

package/dist/util/database/DatabaseMaintenance.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"DatabaseMaintenance.js","sourceRoot":"","sources":["../../../src/util/database/DatabaseMaintenance.ts"],"names":[],"mappings":";;;AAAA,2BAA0B;AAC1B,iEAAqD;AAMrD;;GAEG;AACH,MAAa,mBAAmB;IAI9B,YAAmB,OAAmC;QAHnC,WAAM,GAAG,IAAA,oCAAY,EAAC,IAAI,CAAC,CAAC;QAI7C,IAAI,CAAC,IAAI,GAAG,IAAI,SAAI,CAAC,EAAE,gBAAgB,EAAE,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAAC;IACvE,CAAC;IAED;;OAEG;IACI,KAAK,CAAC,sBAAsB,CAAC,YAAoB,aAAa;QACnE,MAAM,eAAe,GAAG,IAAI,SAAS,GAAG,CAAC;QAEzC,IAAI,CAAC;YACH,0CAA0C;YAC1C,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CACvC,gCAAgC,eAAe,iDAAiD,CACjG,CAAC;YAEF,MAAM,UAAU,GAAG,WAAW,CAAC,QAAQ,IAAI,CAAC,CAAC;YAC7C,IAAI,UAAU,GAAG,CAAC,EAAE,CAAC;gBACnB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,UAAU,4BAA4B,SAAS,GAAG,CAAC,CAAC;gBAC9E,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE;oBAC7B,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,GAAG,CAAC,GAAG,YAAY,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC;gBAC7D,CAAC,CAAC,CAAC;gBAEH,wBAAwB;gBACxB,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CACxC,eAAe,eAAe,wCAAwC,CACvE,CAAC;gBAEF,MAAM,YAAY,GAAG,YAAY,CAAC,QAAQ,IAAI,CAAC,CAAC;gBAChD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,wBAAwB,YAAY,yBAAyB,SAAS,GAAG,CAAC,CAAC;gBAC5F,OAAO,YAAY,CAAC;YACtB,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,oCAAoC,SAAS,GAAG,CAAC,CAAC;gBACnE,OAAO,CAAC,CAAC;YACX,CAAC;QACH,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACxB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,2CAA2C,SAAS,KAAK,KAAK,EAAE,CAAC,CAAC;YACpF,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED;;OAEG;IACI,KAAK,CAAC,aAAa;QACxB,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC;;;;;;;;;;;OAWpC,CAAC,CAAC;YAEH,MAAM,KAAK,GAA2B,EAAE,CAAC;YACzC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE;gBACxB,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,GAAG,GAAG,CAAC,WAAW,CAAC;YACzC,CAAC,CAAC,CAAC;YAEH,OAAO,KAAK,CAAC;QACf,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACxB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,8BAA8B,KAAK,EAAE,CAAC,CAAC;YACzD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED;;OAEG;IACI,KAAK,CAAC,KAAK;QAChB,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;YAC7C,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,kCAAkC,KAAK,EAAE,CAAC,CAAC;QAC9D,CAAC,CAAC,CAAC;IACL,CAAC;CACF;AAnFD,kDAmFC","sourcesContent":["import { Pool } from 'pg';\nimport { getLoggerFor } from 'global-logger-factory';\n\nexport interface DatabaseMaintenanceOptions {\n  connectionString: string;\n}\n\n/**\n * Database maintenance utilities for cleaning up invalid data\n */\nexport class DatabaseMaintenance {\n  protected readonly logger = getLoggerFor(this);\n  private readonly pool: Pool;\n\n  public constructor(options: DatabaseMaintenanceOptions) {\n    this.pool = new Pool({ connectionString: options.connectionString });\n  }\n\n  /**\n   * Clean up invalid JSON values from key-value storage tables\n   */\n  public async cleanInvalidJsonValues(tableName: string = 'internal_kv'): Promise<number> {\n    const quotedTableName = `\"${tableName}\"`;\n    \n    try {\n      // First, check what we're going to delete\n      const checkResult = await this.pool.query(\n        `SELECT key, value::text FROM ${quotedTableName} WHERE value::text = '[object Object]' LIMIT 10`\n      );\n      \n      const foundCount = checkResult.rowCount ?? 0;\n      if (foundCount > 0) {\n        this.logger.info(`Found ${foundCount} invalid JSON entries in ${tableName}:`);\n        checkResult.rows.forEach(row => {\n          this.logger.info(`  Key: ${row.key}, Value: ${row.value}`);\n        });\n\n        // Delete invalid values\n        const deleteResult = await this.pool.query(\n          `DELETE FROM ${quotedTableName} WHERE value::text = '[object Object]'`\n        );\n        \n        const deletedCount = deleteResult.rowCount ?? 0;\n        this.logger.info(`Successfully cleaned ${deletedCount} invalid entries from ${tableName}.`);\n        return deletedCount;\n      } else {\n        this.logger.info(`No invalid JSON entries found in ${tableName}.`);\n        return 0;\n      }\n    } catch (error: unknown) {\n      this.logger.error(`Error cleaning invalid JSON values from ${tableName}: ${error}`);\n      throw error;\n    }\n  }\n\n  /**\n   * Get statistics about the database tables\n   */\n  public async getTableStats(): Promise<Record<string, number>> {\n    try {\n      const result = await this.pool.query(`\n        SELECT \n          schemaname,\n          relname as tablename,\n          n_tup_ins as inserts,\n          n_tup_upd as updates,\n          n_tup_del as deletes,\n          n_live_tup as live_tuples,\n          n_dead_tup as dead_tuples\n        FROM pg_stat_user_tables \n        WHERE relname LIKE '%kv%' OR relname LIKE 'identity_%'\n      `);\n      \n      const stats: Record<string, number> = {};\n      result.rows.forEach(row => {\n        stats[row.tablename] = row.live_tuples;\n      });\n      \n      return stats;\n    } catch (error: unknown) {\n      this.logger.error(`Error getting table stats: ${error}`);\n      throw error;\n    }\n  }\n\n  /**\n   * Close the database connection\n   */\n  public async close(): Promise<void> {\n    await this.pool.end().catch((error: unknown) => {\n      this.logger.warn(`Failed to close database pool: ${error}`);\n    });\n  }\n}"]}

package/dist/util/identifiers/ClusterIdentifierStrategy.d.ts

@@ -0,0 +1,23 @@
+import { BaseIdentifierStrategy } from '@solid/community-server';
+import type { ResourceIdentifier } from '@solid/community-server';
+export interface ClusterIdentifierStrategyOptions {
+    baseUrl: string;
+    /**
+     * 允许的额外 host 列表（用于 Docker/容器环境）
+     * 可以是数组或逗号分隔的字符串，例如: ['cloud', 'idp'] 或 "cloud,idp,localhost"
+     */
+    allowedHosts?: string[] | string;
+}
+/**
+ * Identifier strategy that accepts both the primary cluster host and any
+ * node subdomain under the same base domain.
+ */
+export declare class ClusterIdentifierStrategy extends BaseIdentifierStrategy {
+    private readonly logger;
+    private readonly baseUrl;
+    private readonly baseHost;
+    private readonly allowedHosts;
+    constructor(options: ClusterIdentifierStrategyOptions);
+    supportsIdentifier(identifier: ResourceIdentifier): boolean;
+    isRootContainer(identifier: ResourceIdentifier): boolean;
+}

package/dist/util/identifiers/ClusterIdentifierStrategy.js

@@ -0,0 +1,73 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ClusterIdentifierStrategy = void 0;
+const node_url_1 = require("node:url");
+const global_logger_factory_1 = require("global-logger-factory");
+const community_server_1 = require("@solid/community-server");
+const PathUtil_1 = require("@solid/community-server/dist/util/PathUtil");
+/**
+ * Identifier strategy that accepts both the primary cluster host and any
+ * node subdomain under the same base domain.
+ */
+class ClusterIdentifierStrategy extends community_server_1.BaseIdentifierStrategy {
+    constructor(options) {
+        super();
+        this.logger = (0, global_logger_factory_1.getLoggerFor)(this);
+        if (!options.baseUrl) {
+            throw new Error('ClusterIdentifierStrategy requires a baseUrl.');
+        }
+        const parsed = new node_url_1.URL(options.baseUrl);
+        this.baseHost = parsed.hostname.toLowerCase();
+        this.baseUrl = (0, PathUtil_1.ensureTrailingSlash)(parsed.href);
+        // 处理 allowedHosts：可以是数组或逗号分隔的字符串
+        const hostsInput = options.allowedHosts ?? [];
+        const hostsArray = Array.isArray(hostsInput)
+            ? hostsInput
+            : typeof hostsInput === 'string' && hostsInput.length > 0
+                ? hostsInput.split(',').map(h => h.trim())
+                : [];
+        this.allowedHosts = hostsArray.map(h => h.toLowerCase());
+        this.logger.info(`ClusterIdentifierStrategy initialized: baseUrl=${this.baseUrl}, baseHost=${this.baseHost}, allowedHosts=[${this.allowedHosts.join(', ')}]`);
+    }
+    supportsIdentifier(identifier) {
+        try {
+            const target = new node_url_1.URL(identifier.path);
+            const host = target.hostname.toLowerCase();
+            // 检查是否在允许的 hosts 列表中
+            if (this.allowedHosts.includes(host)) {
+                this.logger.debug(`supportsIdentifier: ${identifier.path} -> true (allowedHosts match: ${host})`);
+                return true;
+            }
+            const hostMatches = host === this.baseHost || host.endsWith(`.${this.baseHost}`);
+            if (!hostMatches) {
+                this.logger.debug(`supportsIdentifier: ${identifier.path} -> false (host mismatch: ${host} vs ${this.baseHost})`);
+                return false;
+            }
+            if (host === this.baseHost) {
+                const supported = identifier.path.startsWith(this.baseUrl);
+                this.logger.debug(`supportsIdentifier: ${identifier.path} -> ${supported} (baseUrl check)`);
+                return supported;
+            }
+            this.logger.debug(`supportsIdentifier: ${identifier.path} -> true (subdomain match)`);
+            return true;
+        }
+        catch (error) {
+            this.logger.warn(`Failed to parse identifier ${identifier.path}: ${error.message}`);
+            return false;
+        }
+    }
+    isRootContainer(identifier) {
+        try {
+            const target = new node_url_1.URL(identifier.path);
+            if (target.hostname.toLowerCase() === this.baseHost) {
+                return (0, PathUtil_1.ensureTrailingSlash)(target.href) === this.baseUrl;
+            }
+            return target.pathname === '/' || target.pathname === '';
+        }
+        catch {
+            return false;
+        }
+    }
+}
+exports.ClusterIdentifierStrategy = ClusterIdentifierStrategy;
+//# sourceMappingURL=ClusterIdentifierStrategy.js.map

package/dist/util/identifiers/ClusterIdentifierStrategy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ClusterIdentifierStrategy.js","sourceRoot":"","sources":["../../../src/util/identifiers/ClusterIdentifierStrategy.ts"],"names":[],"mappings":";;;AAAA,uCAA+B;AAC/B,iEAAqD;AACrD,8DAAiE;AAEjE,yEAAiF;AAWjF;;;GAGG;AACH,MAAa,yBAA0B,SAAQ,yCAAsB;IAMnE,YAAmB,OAAyC;QAC1D,KAAK,EAAE,CAAC;QANO,WAAM,GAAG,IAAA,oCAAY,EAAC,IAAI,CAAC,CAAC;QAO3C,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;YACrB,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;QACnE,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,cAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QACxC,IAAI,CAAC,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;QAC9C,IAAI,CAAC,OAAO,GAAG,IAAA,8BAAmB,EAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAChD,iCAAiC;QACjC,MAAM,UAAU,GAAG,OAAO,CAAC,YAAY,IAAI,EAAE,CAAC;QAC9C,MAAM,UAAU,GAAG,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC;YAC1C,CAAC,CAAC,UAAU;YACZ,CAAC,CAAC,OAAO,UAAU,KAAK,QAAQ,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC;gBACvD,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;gBAC1C,CAAC,CAAC,EAAE,CAAC;QACT,IAAI,CAAC,YAAY,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;QACzD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,kDAAkD,IAAI,CAAC,OAAO,cAAc,IAAI,CAAC,QAAQ,mBAAmB,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAChK,CAAC;IAEe,kBAAkB,CAAC,UAA8B;QAC/D,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,cAAG,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;YACxC,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;YAE3C,qBAAqB;YACrB,IAAI,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;gBACrC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,uBAAuB,UAAU,CAAC,IAAI,iCAAiC,IAAI,GAAG,CAAC,CAAC;gBAClG,OAAO,IAAI,CAAC;YACd,CAAC;YAED,MAAM,WAAW,GAAG,IAAI,KAAK,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;YAEjF,IAAI,CAAC,WAAW,EAAE,CAAC;gBACjB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,uBAAuB,UAAU,CAAC,IAAI,6BAA6B,IAAI,OAAO,IAAI,CAAC,QAAQ,GAAG,CAAC,CAAC;gBAClH,OAAO,KAAK,CAAC;YACf,CAAC;YAED,IAAI,IAAI,KAAK,IAAI,CAAC,QAAQ,EAAE,CAAC;gBAC3B,MAAM,SAAS,GAAG,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;gBAC3D,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,uBAAuB,UAAU,CAAC,IAAI,OAAO,SAAS,kBAAkB,CAAC,CAAC;gBAC5F,OAAO,SAAS,CAAC;YACnB,CAAC;YAED,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,uBAAuB,UAAU,CAAC,IAAI,4BAA4B,CAAC,CAAC;YACtF,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACxB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,8BAA8B,UAAU,CAAC,IAAI,KAAM,KAAe,CAAC,OAAO,EAAE,CAAC,CAAC;YAC/F,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAEe,eAAe,CAAC,UAA8B;QAC5D,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,cAAG,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;YACxC,IAAI,MAAM,CAAC,QAAQ,CAAC,WAAW,EAAE,KAAK,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACpD,OAAO,IAAA,8BAAmB,EAAC,MAAM,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,OAAO,CAAC;YAC3D,CAAC;YACD,OAAO,MAAM,CAAC,QAAQ,KAAK,GAAG,IAAI,MAAM,CAAC,QAAQ,KAAK,EAAE,CAAC;QAC3D,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;CACF;AApED,8DAoEC","sourcesContent":["import { URL } from 'node:url';\nimport { getLoggerFor } from 'global-logger-factory';\nimport { BaseIdentifierStrategy } from '@solid/community-server';\nimport type { ResourceIdentifier } from '@solid/community-server';\nimport { ensureTrailingSlash } from '@solid/community-server/dist/util/PathUtil';\n\nexport interface ClusterIdentifierStrategyOptions {\n  baseUrl: string;\n  /**\n   * 允许的额外 host 列表（用于 Docker/容器环境）\n   * 可以是数组或逗号分隔的字符串，例如: ['cloud', 'idp'] 或 \"cloud,idp,localhost\"\n   */\n  allowedHosts?: string[] | string;\n}\n\n/**\n * Identifier strategy that accepts both the primary cluster host and any\n * node subdomain under the same base domain.\n */\nexport class ClusterIdentifierStrategy extends BaseIdentifierStrategy {\n  private readonly logger = getLoggerFor(this);\n  private readonly baseUrl: string;\n  private readonly baseHost: string;\n  private readonly allowedHosts: string[];\n\n  public constructor(options: ClusterIdentifierStrategyOptions) {\n    super();\n    if (!options.baseUrl) {\n      throw new Error('ClusterIdentifierStrategy requires a baseUrl.');\n    }\n    const parsed = new URL(options.baseUrl);\n    this.baseHost = parsed.hostname.toLowerCase();\n    this.baseUrl = ensureTrailingSlash(parsed.href);\n    // 处理 allowedHosts：可以是数组或逗号分隔的字符串\n    const hostsInput = options.allowedHosts ?? [];\n    const hostsArray = Array.isArray(hostsInput)\n      ? hostsInput\n      : typeof hostsInput === 'string' && hostsInput.length > 0\n        ? hostsInput.split(',').map(h => h.trim())\n        : [];\n    this.allowedHosts = hostsArray.map(h => h.toLowerCase());\n    this.logger.info(`ClusterIdentifierStrategy initialized: baseUrl=${this.baseUrl}, baseHost=${this.baseHost}, allowedHosts=[${this.allowedHosts.join(', ')}]`);\n  }\n\n  public override supportsIdentifier(identifier: ResourceIdentifier): boolean {\n    try {\n      const target = new URL(identifier.path);\n      const host = target.hostname.toLowerCase();\n\n      // 检查是否在允许的 hosts 列表中\n      if (this.allowedHosts.includes(host)) {\n        this.logger.debug(`supportsIdentifier: ${identifier.path} -> true (allowedHosts match: ${host})`);\n        return true;\n      }\n\n      const hostMatches = host === this.baseHost || host.endsWith(`.${this.baseHost}`);\n\n      if (!hostMatches) {\n        this.logger.debug(`supportsIdentifier: ${identifier.path} -> false (host mismatch: ${host} vs ${this.baseHost})`);\n        return false;\n      }\n\n      if (host === this.baseHost) {\n        const supported = identifier.path.startsWith(this.baseUrl);\n        this.logger.debug(`supportsIdentifier: ${identifier.path} -> ${supported} (baseUrl check)`);\n        return supported;\n      }\n\n      this.logger.debug(`supportsIdentifier: ${identifier.path} -> true (subdomain match)`);\n      return true;\n    } catch (error: unknown) {\n      this.logger.warn(`Failed to parse identifier ${identifier.path}: ${(error as Error).message}`);\n      return false;\n    }\n  }\n\n  public override isRootContainer(identifier: ResourceIdentifier): boolean {\n    try {\n      const target = new URL(identifier.path);\n      if (target.hostname.toLowerCase() === this.baseHost) {\n        return ensureTrailingSlash(target.href) === this.baseUrl;\n      }\n      return target.pathname === '/' || target.pathname === '';\n    } catch {\n      return false;\n    }\n  }\n}\n"]}

package/dist/util/identifiers/ClusterIdentifierStrategy.jsonld

@@ -0,0 +1,90 @@
+{
+  "@context": [
+    "https://linkedsoftwaredependencies.org/bundles/npm/@undefineds.co/xpod/^0.0.0/components/context.jsonld",
+    "https://linkedsoftwaredependencies.org/bundles/npm/@solid/community-server/^8.0.0/components/context.jsonld"
+  ],
+  "@id": "npmd:@undefineds.co/xpod",
+  "components": [
+    {
+      "@id": "undefineds:dist/util/identifiers/ClusterIdentifierStrategy.jsonld#ClusterIdentifierStrategy",
+      "@type": "Class",
+      "requireElement": "ClusterIdentifierStrategy",
+      "extends": [
+        "css:dist/util/identifiers/BaseIdentifierStrategy.jsonld#BaseIdentifierStrategy"
+      ],
+      "comment": "Identifier strategy that accepts both the primary cluster host and any node subdomain under the same base domain.",
+      "parameters": [
+        {
+          "@id": "undefineds:dist/util/identifiers/ClusterIdentifierStrategy.jsonld#ClusterIdentifierStrategy_options_baseUrl",
+          "range": "xsd:string"
+        },
+        {
+          "@id": "undefineds:dist/util/identifiers/ClusterIdentifierStrategy.jsonld#ClusterIdentifierStrategy_options_allowedHosts",
+          "range": {
+            "@type": "ParameterRangeUnion",
+            "parameterRangeElements": [
+              {
+                "@type": "ParameterRangeArray",
+                "parameterRangeValue": "xsd:string"
+              },
+              "xsd:string",
+              {
+                "@type": "ParameterRangeUndefined"
+              }
+            ]
+          },
+          "comment": "允许的额外 host 列表（用于 Docker/容器环境） 可以是数组或逗号分隔的字符串，例如: ['cloud', 'idp'] 或 \"cloud,idp,localhost\""
+        }
+      ],
+      "memberFields": [
+        {
+          "@id": "undefineds:dist/util/identifiers/ClusterIdentifierStrategy.jsonld#ClusterIdentifierStrategy__member_logger",
+          "memberFieldName": "logger"
+        },
+        {
+          "@id": "undefineds:dist/util/identifiers/ClusterIdentifierStrategy.jsonld#ClusterIdentifierStrategy__member_baseUrl",
+          "memberFieldName": "baseUrl"
+        },
+        {
+          "@id": "undefineds:dist/util/identifiers/ClusterIdentifierStrategy.jsonld#ClusterIdentifierStrategy__member_baseHost",
+          "memberFieldName": "baseHost"
+        },
+        {
+          "@id": "undefineds:dist/util/identifiers/ClusterIdentifierStrategy.jsonld#ClusterIdentifierStrategy__member_allowedHosts",
+          "memberFieldName": "allowedHosts"
+        },
+        {
+          "@id": "undefineds:dist/util/identifiers/ClusterIdentifierStrategy.jsonld#ClusterIdentifierStrategy__member_constructor",
+          "memberFieldName": "constructor"
+        },
+        {
+          "@id": "undefineds:dist/util/identifiers/ClusterIdentifierStrategy.jsonld#ClusterIdentifierStrategy__member_supportsIdentifier",
+          "memberFieldName": "supportsIdentifier"
+        },
+        {
+          "@id": "undefineds:dist/util/identifiers/ClusterIdentifierStrategy.jsonld#ClusterIdentifierStrategy__member_isRootContainer",
+          "memberFieldName": "isRootContainer"
+        }
+      ],
+      "constructorArguments": [
+        {
+          "@id": "undefineds:dist/util/identifiers/ClusterIdentifierStrategy.jsonld#ClusterIdentifierStrategy_options__constructorArgument",
+          "fields": [
+            {
+              "keyRaw": "baseUrl",
+              "value": {
+                "@id": "undefineds:dist/util/identifiers/ClusterIdentifierStrategy.jsonld#ClusterIdentifierStrategy_options_baseUrl"
+              }
+            },
+            {
+              "keyRaw": "allowedHosts",
+              "value": {
+                "@id": "undefineds:dist/util/identifiers/ClusterIdentifierStrategy.jsonld#ClusterIdentifierStrategy_options_allowedHosts"
+              }
+            }
+          ]
+        }
+      ]
+    }
+  ]
+}

package/dist/util/identifiers/MultiDomainIdentifierStrategy.d.ts

@@ -0,0 +1,40 @@
+import type { ResourceIdentifier } from '@solid/community-server';
+import { SingleRootIdentifierStrategy } from '@solid/community-server';
+/**
+ * MultiDomainIdentifierStrategy - 支持多个域名的 IdentifierStrategy
+ *
+ * 特性：
+ * 1. 支持多个 baseUrl（如 id.undefineds.co 和 pods.undefineds.co）
+ * 2. 存储使用完整 URI（各域名数据独立存储）
+ * 3. 适用于 Cloud 模式同时处理 WebID 和 Pod 数据
+ */
+export declare class MultiDomainIdentifierStrategy extends SingleRootIdentifierStrategy {
+    protected readonly logger: import("global-logger-factory").Logger<unknown>;
+    private readonly primaryBaseUrl;
+    private readonly additionalBaseUrls;
+    /**
+     * @param primaryBaseUrl - 主要 baseUrl（用于生成新资源路径）
+     * @param additionalBaseUrls - 额外支持的 baseUrl 列表
+     */
+    constructor(primaryBaseUrl: string, additionalBaseUrls?: string[]);
+    /**
+     * 检查 identifier 是否被支持（属于任一 baseUrl）
+     */
+    supportsIdentifier(identifier: ResourceIdentifier): boolean;
+    /**
+     * 获取资源在存储中的相对路径（去掉域名前缀）
+     */
+    getStoragePath(identifier: ResourceIdentifier): string;
+    /**
+     * 将相对路径转换为完整 URL（使用 primary baseUrl）
+     */
+    getCanonicalUrl(relativePath: string): string;
+    /**
+     * 获取主要 baseUrl
+     */
+    getPrimaryBaseUrl(): string;
+    /**
+     * 获取所有支持的 baseUrls
+     */
+    getAllBaseUrls(): string[];
+}

package/dist/util/identifiers/MultiDomainIdentifierStrategy.js

@@ -0,0 +1,73 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.MultiDomainIdentifierStrategy = void 0;
+const global_logger_factory_1 = require("global-logger-factory");
+const community_server_1 = require("@solid/community-server");
+/**
+ * MultiDomainIdentifierStrategy - 支持多个域名的 IdentifierStrategy
+ *
+ * 特性：
+ * 1. 支持多个 baseUrl（如 id.undefineds.co 和 pods.undefineds.co）
+ * 2. 存储使用完整 URI（各域名数据独立存储）
+ * 3. 适用于 Cloud 模式同时处理 WebID 和 Pod 数据
+ */
+class MultiDomainIdentifierStrategy extends community_server_1.SingleRootIdentifierStrategy {
+    /**
+     * @param primaryBaseUrl - 主要 baseUrl（用于生成新资源路径）
+     * @param additionalBaseUrls - 额外支持的 baseUrl 列表
+     */
+    constructor(primaryBaseUrl, additionalBaseUrls = []) {
+        super(primaryBaseUrl);
+        this.logger = (0, global_logger_factory_1.getLoggerFor)(this);
+        this.primaryBaseUrl = primaryBaseUrl;
+        this.additionalBaseUrls = additionalBaseUrls;
+        this.logger.info(`MultiDomainIdentifierStrategy initialized with primary: ${primaryBaseUrl}, additional: ${additionalBaseUrls.join(', ')}`);
+    }
+    /**
+     * 检查 identifier 是否被支持（属于任一 baseUrl）
+     */
+    supportsIdentifier(identifier) {
+        const allBaseUrls = [this.primaryBaseUrl, ...this.additionalBaseUrls];
+        const supported = allBaseUrls.some(baseUrl => identifier.path.startsWith(baseUrl));
+        this.logger.debug(supported
+            ? `Identifier ${identifier.path} is supported`
+            : `Identifier ${identifier.path} is not supported by any domain`);
+        return supported;
+    }
+    /**
+     * 获取资源在存储中的相对路径（去掉域名前缀）
+     */
+    getStoragePath(identifier) {
+        const allBaseUrls = [this.primaryBaseUrl, ...this.additionalBaseUrls];
+        for (const baseUrl of allBaseUrls) {
+            if (identifier.path.startsWith(baseUrl)) {
+                const relativePath = identifier.path.slice(baseUrl.length);
+                // 确保以 / 开头
+                return relativePath.startsWith('/') ? relativePath : `/${relativePath}`;
+            }
+        }
+        // 不匹配任何 baseUrl，返回原路径
+        return identifier.path;
+    }
+    /**
+     * 将相对路径转换为完整 URL（使用 primary baseUrl）
+     */
+    getCanonicalUrl(relativePath) {
+        const cleanPath = relativePath.startsWith('/') ? relativePath.slice(1) : relativePath;
+        return `${this.primaryBaseUrl}${cleanPath}`;
+    }
+    /**
+     * 获取主要 baseUrl
+     */
+    getPrimaryBaseUrl() {
+        return this.primaryBaseUrl;
+    }
+    /**
+     * 获取所有支持的 baseUrls
+     */
+    getAllBaseUrls() {
+        return [this.primaryBaseUrl, ...this.additionalBaseUrls];
+    }
+}
+exports.MultiDomainIdentifierStrategy = MultiDomainIdentifierStrategy;
+//# sourceMappingURL=MultiDomainIdentifierStrategy.js.map

package/dist/util/identifiers/MultiDomainIdentifierStrategy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"MultiDomainIdentifierStrategy.js","sourceRoot":"","sources":["../../../src/util/identifiers/MultiDomainIdentifierStrategy.ts"],"names":[],"mappings":";;;AAAA,iEAAqD;AAErD,8DAAuE;AAEvE;;;;;;;GAOG;AACH,MAAa,6BAA8B,SAAQ,+CAA4B;IAK7E;;;OAGG;IACH,YAAY,cAAsB,EAAE,qBAA+B,EAAE;QACnE,KAAK,CAAC,cAAc,CAAC,CAAC;QATI,WAAM,GAAG,IAAA,oCAAY,EAAC,IAAI,CAAC,CAAC;QAUtD,IAAI,CAAC,cAAc,GAAG,cAAc,CAAC;QACrC,IAAI,CAAC,kBAAkB,GAAG,kBAAkB,CAAC;QAC7C,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,2DAA2D,cAAc,iBAAiB,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC9I,CAAC;IAED;;OAEG;IACa,kBAAkB,CAAC,UAA8B;QAC/D,MAAM,WAAW,GAAG,CAAC,IAAI,CAAC,cAAc,EAAE,GAAG,IAAI,CAAC,kBAAkB,CAAC,CAAC;QACtE,MAAM,SAAS,GAAG,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC;QAEnF,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS;YACzB,CAAC,CAAC,cAAc,UAAU,CAAC,IAAI,eAAe;YAC9C,CAAC,CAAC,cAAc,UAAU,CAAC,IAAI,iCAAiC,CAAC,CAAC;QAEpE,OAAO,SAAS,CAAC;IACnB,CAAC;IAED;;OAEG;IACI,cAAc,CAAC,UAA8B;QAClD,MAAM,WAAW,GAAG,CAAC,IAAI,CAAC,cAAc,EAAE,GAAG,IAAI,CAAC,kBAAkB,CAAC,CAAC;QAEtE,KAAK,MAAM,OAAO,IAAI,WAAW,EAAE,CAAC;YAClC,IAAI,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;gBACxC,MAAM,YAAY,GAAG,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;gBAC3D,WAAW;gBACX,OAAO,YAAY,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,YAAY,EAAE,CAAC;YAC1E,CAAC;QACH,CAAC;QAED,sBAAsB;QACtB,OAAO,UAAU,CAAC,IAAI,CAAC;IACzB,CAAC;IAED;;OAEG;IACI,eAAe,CAAC,YAAoB;QACzC,MAAM,SAAS,GAAG,YAAY,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC;QACtF,OAAO,GAAG,IAAI,CAAC,cAAc,GAAG,SAAS,EAAE,CAAC;IAC9C,CAAC;IAED;;OAEG;IACI,iBAAiB;QACtB,OAAO,IAAI,CAAC,cAAc,CAAC;IAC7B,CAAC;IAED;;OAEG;IACI,cAAc;QACnB,OAAO,CAAC,IAAI,CAAC,cAAc,EAAE,GAAG,IAAI,CAAC,kBAAkB,CAAC,CAAC;IAC3D,CAAC;CACF;AArED,sEAqEC","sourcesContent":["import { getLoggerFor } from 'global-logger-factory';\nimport type { ResourceIdentifier } from '@solid/community-server';\nimport { SingleRootIdentifierStrategy } from '@solid/community-server';\n\n/**\n * MultiDomainIdentifierStrategy - 支持多个域名的 IdentifierStrategy\n *\n * 特性：\n * 1. 支持多个 baseUrl（如 id.undefineds.co 和 pods.undefineds.co）\n * 2. 存储使用完整 URI（各域名数据独立存储）\n * 3. 适用于 Cloud 模式同时处理 WebID 和 Pod 数据\n */\nexport class MultiDomainIdentifierStrategy extends SingleRootIdentifierStrategy {\n  protected override readonly logger = getLoggerFor(this);\n  private readonly primaryBaseUrl: string;\n  private readonly additionalBaseUrls: string[];\n\n  /**\n   * @param primaryBaseUrl - 主要 baseUrl（用于生成新资源路径）\n   * @param additionalBaseUrls - 额外支持的 baseUrl 列表\n   */\n  constructor(primaryBaseUrl: string, additionalBaseUrls: string[] = []) {\n    super(primaryBaseUrl);\n    this.primaryBaseUrl = primaryBaseUrl;\n    this.additionalBaseUrls = additionalBaseUrls;\n    this.logger.info(`MultiDomainIdentifierStrategy initialized with primary: ${primaryBaseUrl}, additional: ${additionalBaseUrls.join(', ')}`);\n  }\n\n  /**\n   * 检查 identifier 是否被支持（属于任一 baseUrl）\n   */\n  public override supportsIdentifier(identifier: ResourceIdentifier): boolean {\n    const allBaseUrls = [this.primaryBaseUrl, ...this.additionalBaseUrls];\n    const supported = allBaseUrls.some(baseUrl => identifier.path.startsWith(baseUrl));\n\n    this.logger.debug(supported\n      ? `Identifier ${identifier.path} is supported`\n      : `Identifier ${identifier.path} is not supported by any domain`);\n\n    return supported;\n  }\n\n  /**\n   * 获取资源在存储中的相对路径（去掉域名前缀）\n   */\n  public getStoragePath(identifier: ResourceIdentifier): string {\n    const allBaseUrls = [this.primaryBaseUrl, ...this.additionalBaseUrls];\n\n    for (const baseUrl of allBaseUrls) {\n      if (identifier.path.startsWith(baseUrl)) {\n        const relativePath = identifier.path.slice(baseUrl.length);\n        // 确保以 / 开头\n        return relativePath.startsWith('/') ? relativePath : `/${relativePath}`;\n      }\n    }\n\n    // 不匹配任何 baseUrl，返回原路径\n    return identifier.path;\n  }\n\n  /**\n   * 将相对路径转换为完整 URL（使用 primary baseUrl）\n   */\n  public getCanonicalUrl(relativePath: string): string {\n    const cleanPath = relativePath.startsWith('/') ? relativePath.slice(1) : relativePath;\n    return `${this.primaryBaseUrl}${cleanPath}`;\n  }\n\n  /**\n   * 获取主要 baseUrl\n   */\n  public getPrimaryBaseUrl(): string {\n    return this.primaryBaseUrl;\n  }\n\n  /**\n   * 获取所有支持的 baseUrls\n   */\n  public getAllBaseUrls(): string[] {\n    return [this.primaryBaseUrl, ...this.additionalBaseUrls];\n  }\n}\n"]}