@undefineds.co/xpod 0.1.0-local.202602081751

package/config/local.json

@@ -0,0 +1,261 @@
+{
+  "@context": [
+    "https://linkedsoftwaredependencies.org/bundles/npm/@solid/community-server/^8.0.0/components/context.jsonld",
+    "https://linkedsoftwaredependencies.org/bundles/npm/@undefineds.co/xpod/^0.0.0/components/context.jsonld",
+    "https://linkedsoftwaredependencies.org/bundles/npm/asynchronous-handlers/^1.0.0/components/context.jsonld"
+  ],
+  "import": [
+    "./main.json",
+    "./xpod.base.json",
+    "./terminal.json",
+    "./extensions.local.initializer.json"
+  ],
+  "@graph": [
+    {
+      "comment": "File-based locker for local deployments",
+      "@id": "urn:solid-server:default:ResourceLocker",
+      "@type": "WrappedExpiringReadWriteLocker",
+      "locker": {
+        "@type": "FileSystemResourceLocker",
+        "rootFilePath": {
+          "@id": "urn:solid-server:default:variable:rootFilePath"
+        }
+      },
+      "expiration": 6000
+    },
+    {
+      "comment": "Disable quota for local profile",
+      "@id": "urn:undefineds:xpod:QuotaService",
+      "@type": "NoopQuotaService"
+    },
+    {
+      "comment": "定义 idpUrl 变量（外部 IdP 基础 URL），设置后启用 SP 模式",
+      "@id": "urn:solid-server:default:variable:idpUrl",
+      "@type": "Variable"
+    },
+    {
+      "comment": "Auto-detect OIDC Handler - 有 idpUrl 时启用 SP 模式，代理 JWKS",
+      "@id": "urn:undefineds:xpod:AutoDetectOidcHandler",
+      "@type": "AutoDetectOidcHandler",
+      "AutoDetectOidcHandler:_options_idpUrl": {
+        "@id": "urn:solid-server:default:variable:idpUrl"
+      },
+      "AutoDetectOidcHandler:_options_cacheMs": 300000
+    },
+    {
+      "comment": "原始 IdentityProviderHandler 实例（用于标准模式委托）",
+      "@id": "urn:undefineds:xpod:SourceIdentityProviderHandler",
+      "@type": "RouterHandler",
+      "baseUrl": { "@id": "urn:solid-server:default:variable:baseUrl" },
+      "targetExtractor": { "@id": "urn:solid-server:default:TargetExtractor" },
+      "allowedPathNames": [ "^/.account(/.*)?$" ],
+      "handler": { "@id": "urn:solid-server:default:IdentityProviderParsingHandler" }
+    },
+    {
+      "comment": "Auto-detect Identity Provider Handler - 有 idpUrl 时禁用本地账户管理",
+      "@id": "urn:undefineds:xpod:AutoDetectIdentityProviderHandler",
+      "@type": "AutoDetectIdentityProviderHandler",
+      "AutoDetectIdentityProviderHandler:_options_idpUrl": {
+        "@id": "urn:solid-server:default:variable:idpUrl"
+      },
+      "AutoDetectIdentityProviderHandler:_options_source": {
+        "@id": "urn:undefineds:xpod:SourceIdentityProviderHandler"
+      }
+    },
+    {
+      "comment": "Override: 使用 AutoDetectIdentityProviderHandler 替换默认 Handler",
+      "@type": "Override",
+      "overrideInstance": {
+        "@id": "urn:solid-server:default:IdentityProviderHandler"
+      },
+      "overrideParameters": {
+        "@id": "urn:undefineds:xpod:AutoDetectIdentityProviderHandler"
+      }
+    },
+    {
+      "@id": "urn:solid-server:default:variable:rootFilePath",
+      "@value": "./data"
+    },
+    {
+      "comment": "Shared QuintStore instance (SQLite for local)",
+      "@id": "urn:undefineds:xpod:QuintStore",
+      "@type": "SqliteQuintStore",
+      "path": {
+        "@id": "urn:solid-server:default:variable:sparqlEndpoint",
+        "@type": "Variable"
+      }
+    },
+    {
+      "comment": "VectorStore using SQLite (same db as QuintStore for JOIN)",
+      "@id": "urn:undefineds:xpod:VectorStore",
+      "@type": "SqliteVectorStore",
+      "options_connectionString": {
+        "@id": "urn:solid-server:default:variable:sparqlEndpoint",
+        "@type": "Variable"
+      }
+    },
+    {
+      "comment": "Vector HTTP Handler",
+      "@id": "urn:undefineds:xpod:VectorHttpHandler",
+      "@type": "VectorHttpHandler",
+      "vectorStore": { "@id": "urn:undefineds:xpod:VectorStore" },
+      "credentialsExtractor": { "@id": "urn:solid-server:default:CredentialsExtractor" },
+      "permissionReader": { "@id": "urn:solid-server:default:PermissionReader" },
+      "authorizer": { "@id": "urn:solid-server:default:Authorizer" }
+    },
+    {
+      "comment": "DefaultSparqlEngine: QuintstoreSparqlEngine for local (with OPTIONAL optimization)",
+      "@id": "urn:undefineds:xpod:DefaultSparqlEngine",
+      "@type": "QuintstoreSparqlEngine",
+      "store": {
+        "@id": "urn:undefineds:xpod:QuintStore"
+      }
+    },
+    {
+      "comment": "Use QuintStore for RDF data and local filesystem for other content.",
+      "@id": "urn:undefineds:xpod:MixDataAccessor",
+      "@type": "MixDataAccessor",
+      "structuredDataAccessor": {
+        "@id": "urn:undefineds:xpod:QuintStoreSparqlDataAccessor"
+      },
+      "unstructuredDataAccessor": {
+        "@id": "urn:solid-server:default:FileDataAccessor"
+      }
+    },
+    {
+      "comment": "QuintStore-based SPARQL data accessor using shared QuintStore.",
+      "@id": "urn:undefineds:xpod:QuintStoreSparqlDataAccessor",
+      "@type": "QuintStoreSparqlDataAccessor",
+      "store": {
+        "@id": "urn:undefineds:xpod:QuintStore"
+      },
+      "identifierStrategy": {
+        "@id": "urn:solid-server:default:IdentifierStrategy"
+      }
+    },
+    {
+      "comment": "SPARQL-capable store for quadstore-backed resources.",
+      "@id": "urn:undefineds:xpod:SparqlQuadstoreResourceStore",
+      "@type": "SparqlUpdateResourceStore",
+      "identifierStrategy": { "@id": "urn:solid-server:default:IdentifierStrategy" },
+      "auxiliaryStrategy": { "@id": "urn:solid-server:default:AuxiliaryStrategy" },
+      "metadataStrategy": { "@id": "urn:solid-server:default:MetadataStrategy" },
+      "accessor": { "@id": "urn:undefineds:xpod:MixDataAccessor" }
+    },
+    {
+      "comment": "等位替换: 用 SparqlUpdateResourceStore 替换默认的 DataAccessorBasedStore",
+      "@type": "Override",
+      "overrideInstance": {
+        "@id": "urn:solid-server:default:ResourceStore_Backend"
+      },
+      "overrideParameters": {
+        "@type": "SparqlUpdateResourceStore",
+        "identifierStrategy": { "@id": "urn:solid-server:default:IdentifierStrategy" },
+        "auxiliaryStrategy": { "@id": "urn:solid-server:default:AuxiliaryStrategy" },
+        "metadataStrategy": { "@id": "urn:solid-server:default:MetadataStrategy" },
+        "accessor": { "@id": "urn:undefineds:xpod:MixDataAccessor" }
+      }
+    },
+    {
+      "comment": "等位替换: 用 RepresentationPartialConvertingStore 替换 Converting 层，只转换 RDF 类型",
+      "@type": "Override",
+      "overrideInstance": {
+        "@id": "urn:solid-server:default:ResourceStore_Converting"
+      },
+      "overrideParameters": {
+        "@type": "RepresentationPartialConvertingStore",
+        "source": { "@id": "urn:solid-server:default:ResourceStore_Backend" },
+        "metadataStrategy": { "@id": "urn:solid-server:default:MetadataStrategy" },
+        "options_inConverter": { "@id": "urn:solid-server:default:RepresentationConverter" },
+        "options_outConverter": { "@id": "urn:solid-server:default:RepresentationConverter" },
+        "options_inPreferences_type": {
+          "RepresentationPartialConvertingStore:_options_inPreferences_type_key": "internal/quads",
+          "RepresentationPartialConvertingStore:_options_inPreferences_type_value": 1
+        }
+      }
+    },
+    {
+      "comment": "等位替换: 用内存锁替换文件锁，避免高并发下的 ECOMPROMISED 错误",
+      "@type": "Override",
+      "overrideInstance": {
+        "@id": "urn:solid-server:default:ResourceLocker"
+      },
+      "overrideParameters": {
+        "@type": "WrappedExpiringReadWriteLocker",
+        "locker": {
+          "@type": "GreedyReadWriteLocker",
+          "locker": { "@type": "MemoryResourceLocker" },
+          "storage": { "@type": "MemoryMapStorage" }
+        },
+        "expiration": 6000
+      }
+    },
+    {
+      "comment": "Use SQLite-based KeyValueStorage for internal data (avoids .internal directory)",
+      "@type": "Override",
+      "overrideInstance": {
+        "@id": "urn:solid-server:default:KeyValueStorage"
+      },
+      "overrideParameters": {
+        "@type": "SqliteKeyValueStorage",
+        "path": {
+          "@id": "urn:solid-server:default:variable:identityDbUrl",
+          "@type": "Variable"
+        }
+      }
+    },
+    {
+      "@id": "urn:solid-server:default:variable:registration",
+      "@value": true
+    },
+    {
+      "comment": "Compose local HTTP pipeline without edge handlers",
+      "@type": "Override",
+      "overrideInstance": {
+        "@id": "urn:solid-server:default:BaseHttpHandler"
+      },
+      "overrideParameters": {
+        "@type": "StatusWaterfallHandler",
+        "handlers": [
+          {
+            "@id": "urn:undefineds:xpod:SubgraphSparqlHttpHandler"
+          },
+          {
+            "@id": "urn:undefineds:xpod:VectorHttpHandler"
+          },
+          {
+            "@id": "urn:undefineds:xpod:TerminalHttpHandler"
+          },
+          {
+            "@id": "urn:undefineds:xpod:AppStaticAssetHandler"
+          },
+          {
+            "@id": "urn:solid-server:default:StaticAssetHandler"
+          },
+          {
+            "comment": "SP 模式下代理 JWKS，标准模式下透传",
+            "@id": "urn:undefineds:xpod:AutoDetectOidcHandler"
+          },
+          {
+            "@id": "urn:solid-server:default:OidcHandler"
+          },
+          {
+            "@id": "urn:solid-server:default:NotificationHttpHandler"
+          },
+          {
+            "@id": "urn:solid-server:default:StorageDescriptionHandler"
+          },
+          {
+            "@id": "urn:solid-server:default:AuthResourceHttpHandler"
+          },
+          {
+            "@id": "urn:solid-server:default:IdentityProviderHandler"
+          },
+          {
+            "@id": "urn:solid-server:default:LdpHandler"
+          }
+        ]
+      }
+    }
+  ]
+}

package/config/logging/configurable.json

@@ -0,0 +1,18 @@
+{
+  "@context": [
+    "https://linkedsoftwaredependencies.org/bundles/npm/@solid/community-server/^8.0.0/components/context.jsonld",
+    "https://linkedsoftwaredependencies.org/bundles/npm/@undefineds.co/xpod/^0.0.0/components/context.jsonld"
+  ],
+  "@graph": [
+    {
+      "comment": "Use configurable logger across all profiles.",
+      "@id": "urn:solid-server:default:LoggerFactory",
+      "@type": "ConfigurableLoggerFactory",
+      "level": { "@id": "urn:solid-server:default:variable:loggingLevel" },
+      "options_showLocation": true,
+      "options_fileName": "./logs/xpod-%DATE%.log",
+      "options_maxSize": "20m",
+      "options_maxFiles": "30d"
+    }
+  ]
+}

package/config/main.json

@@ -0,0 +1,200 @@
+{
+  "@context": "https://linkedsoftwaredependencies.org/bundles/npm/@solid/community-server/^8.0.0/components/context.jsonld",
+  "import": [
+    "css:config/app/init/initialize-root.json",
+    "css:config/http/static/default.json",
+    "css:config/app/main/default.json",
+    "css:config/app/variables/resolver/resolver.json",
+    "css:config/http/handler/default.json",
+    "css:config/http/middleware/default.json",
+    "css:config/http/notifications/all.json",
+    "css:config/http/server-factory/http.json",
+    "css:config/identity/access/public.json",
+    "css:config/identity/email/example.json",
+    "css:config/identity/handler/default.json",
+    "css:config/identity/oidc/default.json",
+    "css:config/identity/ownership/token.json",
+    "css:config/identity/pod/static.json",
+    "css:config/ldp/authentication/dpop-bearer.json",
+    "css:config/ldp/authorization/acp.json",
+    "css:config/ldp/handler/default.json",
+    "css:config/ldp/metadata-parser/default.json",
+    "css:config/ldp/metadata-writer/default.json",
+    "css:config/ldp/modes/default.json",
+    "css:config/storage/backend/regex.json",
+    "css:config/storage/key-value/resource-store.json",
+    "css:config/storage/location/pod.json",
+    "css:config/storage/middleware/default.json",
+    "css:config/util/auxiliary/acr.json",
+    "css:config/util/identifiers/suffix.json",
+    "css:config/util/index/default.json",
+    "./logging/configurable.json",
+    "css:config/util/representation-conversion/default.json",
+    "css:config/util/variables/default.json"
+  ],
+  "@graph": [
+    {
+      "comment": "Define RootStaticAsset for xpod.base.json Override to work",
+      "@id": "urn:solid-server:default:RootStaticAsset",
+      "@type": "StaticAssetEntry",
+      "relativeUrl": "/",
+      "filePath": "@css:templates/root/static/index.html"
+    },
+    {
+      "comment": "Overrides the default rule to make sure internal data is stored on the file system.",
+      "@type": "Override",
+      "overrideInstance": {
+        "@id": "urn:solid-server:default:RouterRule"
+      },
+      "overrideParameters": {
+        "@type": "RegexRouterRule",
+        "rules": [
+          {
+            "comment": "Stores internal data in the file system",
+            "@type": "RegexRule",
+            "regex": "^/\\.internal/",
+            "store": {
+              "@id": "urn:solid-server:default:FileResourceStore"
+            }
+          },
+          {
+            "comment": "Send everything else to the SPARQL store.",
+            "@type": "RegexRule",
+            "regex": ".*",
+            "store": {
+              "@id": "urn:undefineds:xpod:SparqlQuadstoreResourceStore"
+            }
+          }
+        ]
+      }
+    },
+    {
+      "comment": "The updated OIDC configuration.",
+      "@type": "Override",
+      "overrideInstance": {
+        "@id": "urn:solid-server:default:IdentityProviderFactory"
+      },
+      "overrideParameters": {
+        "@type": "IdentityProviderFactory",
+        "config": {
+          "claims": {
+            "openid": [
+              "azp"
+            ],
+            "webid": [
+              "webid"
+            ]
+          },
+          "clockTolerance": 120,
+          "cookies": {
+            "long": {
+              "signed": true,
+              "maxAge": 86400000
+            },
+            "short": {
+              "signed": true
+            }
+          },
+          "enabledJWA": {
+            "dPoPSigningAlgValues": [
+              "RS256",
+              "RS384",
+              "RS512",
+              "PS256",
+              "PS384",
+              "PS512",
+              "ES256",
+              "Ed25519",
+              "ES384",
+              "ES512",
+              "EdDSA"
+            ]
+          },
+          "features": {
+            "claimsParameter": {
+              "enabled": true
+            },
+            "clientCredentials": {
+              "enabled": true
+            },
+            "devInteractions": {
+              "enabled": false
+            },
+            "dPoP": {
+              "enabled": true
+            },
+            "introspection": {
+              "enabled": true
+            },
+            "registration": {
+              "enabled": true
+            },
+            "revocation": {
+              "enabled": true
+            },
+            "userinfo": {
+              "enabled": false
+            }
+          },
+          "scopes": [
+            "openid",
+            "profile",
+            "offline_access",
+            "webid"
+          ],
+          "subjectTypes": [
+            "public"
+          ],
+          "ttl": {
+            "AccessToken": 3600,
+            "AuthorizationCode": 600,
+            "BackchannelAuthenticationRequest": 600,
+            "ClientCredentials": 600,
+            "DeviceCode": 600,
+            "Grant": 1209600,
+            "IdToken": 3600,
+            "Interaction": 3600,
+            "RefreshToken": 1209600,
+            "Session": 1209600
+          }
+        }
+      }
+    },
+    {
+      "comment": "Add X-Request-Id to CORS exposed headers.",
+      "@type": "Override",
+      "overrideInstance": {
+        "@id": "urn:solid-server:default:Middleware_Cors"
+      },
+      "overrideParameters": {
+        "@type": "CorsHandler",
+        "options_methods": [
+          "GET",
+          "HEAD",
+          "OPTIONS",
+          "POST",
+          "PUT",
+          "PATCH",
+          "DELETE"
+        ],
+        "options_credentials": true,
+        "options_preflightContinue": false,
+        "options_exposedHeaders": [
+          "Accept-Patch",
+          "Accept-Post",
+          "Accept-Put",
+          "Allow",
+          "Content-Range",
+          "ETag",
+          "Last-Modified",
+          "Link",
+          "Location",
+          "Updates-Via",
+          "WAC-Allow",
+          "Www-Authenticate",
+          "X-Request-Id"
+        ]
+      }
+    }
+  ]
+}

package/config/main.vanilla.json

@@ -0,0 +1,6 @@
+{
+  "@context": "https://linkedsoftwaredependencies.org/bundles/npm/@solid/community-server/^8.0.0/components/context.jsonld",
+  "import": [
+    "css:config/file.json"
+  ]
+}