@lakphy/local-router 0.5.3 → 0.5.5

package/dist/entry.js

@@ -4934,7 +4934,7 @@ var require_compile = __commonJS((exports) => {
     const schOrFunc = root2.refs[ref];
     if (schOrFunc)
       return schOrFunc;
-    let _sch = resolve4.call(this, root2, ref);
+    let _sch = resolve5.call(this, root2, ref);
     if (_sch === undefined) {
       const schema = (_a21 = root2.localRefs) === null || _a21 === undefined ? undefined : _a21[ref];
       const { schemaId } = this.opts;
@@ -4961,7 +4961,7 @@ var require_compile = __commonJS((exports) => {
   function sameSchemaEnv(s1, s2) {
     return s1.schema === s2.schema && s1.root === s2.root && s1.baseId === s2.baseId;
   }
-  function resolve4(root2, ref) {
+  function resolve5(root2, ref) {
     let sch;
     while (typeof (sch = this.refs[ref]) == "string")
       ref = sch;
@@ -5491,7 +5491,7 @@ var require_fast_uri = __commonJS((exports, module) => {
     }
     return uri;
   }
-  function resolve4(baseURI, relativeURI, options) {
+  function resolve5(baseURI, relativeURI, options) {
     const schemelessOptions = options ? Object.assign({ scheme: "null" }, options) : { scheme: "null" };
     const resolved = resolveComponent(parse7(baseURI, schemelessOptions), parse7(relativeURI, schemelessOptions), schemelessOptions, true);
     schemelessOptions.skipEscape = true;
@@ -5719,7 +5719,7 @@ var require_fast_uri = __commonJS((exports, module) => {
   var fastUri = {
     SCHEMES,
     normalize,
-    resolve: resolve4,
+    resolve: resolve5,
     resolveComponent,
     equal,
     serialize,
@@ -9284,8 +9284,218 @@ var require_dist2 = __commonJS((exports, module) => {
 });
 
 // src/index.ts
-import { readFileSync as readFileSync5 } from "fs";
-import { dirname as dirname2, resolve as resolve7 } from "path";
+import { readFileSync as readFileSync6 } from "fs";
+import { dirname as dirname3, resolve as resolve8 } from "path";
+
+// src/cli/autostart.ts
+import { execSync } from "child_process";
+import { existsSync, mkdirSync, readFileSync, rmSync, writeFileSync } from "fs";
+import { homedir as homedir2, platform } from "os";
+import { dirname, join as join2 } from "path";
+
+// src/cli/runtime.ts
+import { homedir } from "os";
+import { join, resolve } from "path";
+function getRuntimeDirs() {
+  const override = process.env.LOCAL_ROUTER_RUNTIME_DIR;
+  const root = override?.trim() ? override.trim() : join(homedir(), ".local-router");
+  return {
+    root,
+    run: join(root, "run"),
+    logs: join(root, "logs")
+  };
+}
+
+// src/cli/autostart.ts
+var LABEL = "com.lakphy.local-router";
+function getDaemonLogPath() {
+  return getRuntimeDirs().logs + "/daemon.log";
+}
+function getLaunchAgentPath() {
+  return join2(homedir2(), "Library", "LaunchAgents", `${LABEL}.plist`);
+}
+function buildPlist(opts) {
+  const logPath = getDaemonLogPath();
+  const args = [opts.execPath, ...opts.args].map((a) => `    <string>${escapeXml(a)}</string>`).join(`
+`);
+  return `<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0">
+<dict>
+  <key>Label</key>
+  <string>${escapeXml(opts.label)}</string>
+  <key>ProgramArguments</key>
+  <array>
+${args}
+  </array>
+  <key>RunAtLoad</key>
+  <true/>
+  <key>KeepAlive</key>
+  <false/>
+  <key>StandardOutPath</key>
+  <string>${escapeXml(logPath)}</string>
+  <key>StandardErrorPath</key>
+  <string>${escapeXml(logPath)}</string>
+</dict>
+</plist>
+`;
+}
+function escapeXml(s) {
+  return s.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;");
+}
+function createMacosManager() {
+  const plistPath = getLaunchAgentPath();
+  return {
+    platform: "macos",
+    async isInstalled() {
+      return existsSync(plistPath);
+    },
+    async install(opts) {
+      const dir = dirname(plistPath);
+      if (!existsSync(dir))
+        mkdirSync(dir, { recursive: true });
+      writeFileSync(plistPath, buildPlist(opts), "utf-8");
+      try {
+        execSync(`launchctl bootout gui/$(id -u) ${plistPath} 2>/dev/null`, { stdio: "ignore" });
+      } catch {}
+      execSync(`launchctl bootstrap gui/$(id -u) ${plistPath}`, { stdio: "ignore" });
+    },
+    async uninstall() {
+      if (!existsSync(plistPath))
+        return;
+      try {
+        execSync(`launchctl bootout gui/$(id -u) ${plistPath}`, { stdio: "ignore" });
+      } catch {}
+      rmSync(plistPath, { force: true });
+    },
+    getServicePath() {
+      return plistPath;
+    }
+  };
+}
+function getSystemdUnitPath() {
+  return join2(homedir2(), ".config", "systemd", "user", "local-router.service");
+}
+function buildUnit(opts) {
+  const logPath = getDaemonLogPath();
+  const execStart = [opts.execPath, ...opts.args].join(" ");
+  return `[Unit]
+Description=Local Router API Gateway
+After=network-online.target
+
+[Service]
+Type=simple
+ExecStart=${execStart}
+Restart=on-failure
+RestartSec=5
+StandardOutput=append:${logPath}
+StandardError=append:${logPath}
+
+[Install]
+WantedBy=default.target
+`;
+}
+function createLinuxManager() {
+  const unitPath = getSystemdUnitPath();
+  return {
+    platform: "linux",
+    async isInstalled() {
+      if (!existsSync(unitPath))
+        return false;
+      try {
+        const out = execSync("systemctl --user is-enabled local-router 2>/dev/null", {
+          encoding: "utf-8"
+        }).trim();
+        return out === "enabled";
+      } catch {
+        return false;
+      }
+    },
+    async install(opts) {
+      const dir = dirname(unitPath);
+      if (!existsSync(dir))
+        mkdirSync(dir, { recursive: true });
+      writeFileSync(unitPath, buildUnit(opts), "utf-8");
+      execSync("systemctl --user daemon-reload", { stdio: "ignore" });
+      execSync("systemctl --user enable local-router", { stdio: "ignore" });
+    },
+    async uninstall() {
+      try {
+        execSync("systemctl --user disable local-router", { stdio: "ignore" });
+      } catch {}
+      rmSync(unitPath, { force: true });
+      try {
+        execSync("systemctl --user daemon-reload", { stdio: "ignore" });
+      } catch {}
+    },
+    getServicePath() {
+      return unitPath;
+    }
+  };
+}
+var WIN_REG_KEY = "HKCU\\Software\\Microsoft\\Windows\\CurrentVersion\\Run";
+var WIN_REG_VALUE = "LocalRouter";
+function createWindowsManager() {
+  return {
+    platform: "windows",
+    async isInstalled() {
+      try {
+        execSync(`reg query "${WIN_REG_KEY}" /v ${WIN_REG_VALUE}`, { stdio: "ignore" });
+        return true;
+      } catch {
+        return false;
+      }
+    },
+    async install(opts) {
+      const cmd = [opts.execPath, ...opts.args].map((a) => `"${a}"`).join(" ");
+      execSync(`reg add "${WIN_REG_KEY}" /v ${WIN_REG_VALUE} /t REG_SZ /d "${cmd}" /f`, {
+        stdio: "ignore"
+      });
+    },
+    async uninstall() {
+      try {
+        execSync(`reg delete "${WIN_REG_KEY}" /v ${WIN_REG_VALUE} /f`, { stdio: "ignore" });
+      } catch {}
+    },
+    getServicePath() {
+      return `${WIN_REG_KEY}\\${WIN_REG_VALUE}`;
+    }
+  };
+}
+function createUnsupportedManager() {
+  return {
+    platform: "unsupported",
+    async isInstalled() {
+      return false;
+    },
+    async install() {
+      throw new Error("\u5F53\u524D\u5E73\u53F0\u4E0D\u652F\u6301\u81EA\u542F\u52A8");
+    },
+    async uninstall() {
+      throw new Error("\u5F53\u524D\u5E73\u53F0\u4E0D\u652F\u6301\u81EA\u542F\u52A8");
+    },
+    getServicePath() {
+      return "";
+    }
+  };
+}
+function createAutostartManager() {
+  const p = platform();
+  if (p === "darwin")
+    return createMacosManager();
+  if (p === "linux")
+    return createLinuxManager();
+  if (p === "win32")
+    return createWindowsManager();
+  return createUnsupportedManager();
+}
+function getAutostartExecArgs() {
+  const script = process.argv[1] ?? "dist/cli.js";
+  return {
+    execPath: process.execPath,
+    args: [script, "__run-server", "--mode", "daemon"]
+  };
+}
 
 // node_modules/.bun/@ai-sdk+provider@3.0.8/node_modules/@ai-sdk/provider/dist/index.mjs
 var marker = "vercel.ai.error";
@@ -29133,7 +29343,7 @@ function createProviderToolFactoryWithOutputSchema({
     supportsDeferredResults
   });
 }
-async function resolve(value) {
+async function resolve2(value) {
   if (typeof value === "function") {
     value = value();
   }
@@ -32078,11 +32288,11 @@ var AnthropicMessagesLanguageModel = class {
     betas,
     headers
   }) {
-    return combineHeaders(await resolve(this.config.headers), headers, betas.size > 0 ? { "anthropic-beta": Array.from(betas).join(",") } : {});
+    return combineHeaders(await resolve2(this.config.headers), headers, betas.size > 0 ? { "anthropic-beta": Array.from(betas).join(",") } : {});
   }
   async getBetasFromHeaders(requestHeaders) {
     var _a16, _b16;
-    const configHeaders = await resolve(this.config.headers);
+    const configHeaders = await resolve2(this.config.headers);
     const configBetaHeader = (_a16 = configHeaders["anthropic-beta"]) != null ? _a16 : "";
     const requestBetaHeader = (_b16 = requestHeaders == null ? undefined : requestHeaders["anthropic-beta"]) != null ? _b16 : "";
     return new Set([
@@ -41267,7 +41477,7 @@ var GatewayFetchMetadata = class {
     try {
       const { value } = await getFromApi({
         url: `${this.config.baseURL}/config`,
-        headers: await resolve(this.config.headers()),
+        headers: await resolve2(this.config.headers()),
         successfulResponseHandler: createJsonResponseHandler(gatewayAvailableModelsResponseSchema),
         failedResponseHandler: createJsonErrorResponseHandler({
           errorSchema: exports_external.any(),
@@ -41285,7 +41495,7 @@ var GatewayFetchMetadata = class {
       const baseUrl = new URL(this.config.baseURL);
       const { value } = await getFromApi({
         url: `${baseUrl.origin}/v1/credits`,
-        headers: await resolve(this.config.headers()),
+        headers: await resolve2(this.config.headers()),
         successfulResponseHandler: createJsonResponseHandler(gatewayCreditsResponseSchema),
         failedResponseHandler: createJsonErrorResponseHandler({
           errorSchema: exports_external.any(),
@@ -41350,7 +41560,7 @@ var GatewayLanguageModel = class {
   async doGenerate(options) {
     const { args, warnings } = await this.getArgs(options);
     const { abortSignal } = options;
-    const resolvedHeaders = await resolve(this.config.headers());
+    const resolvedHeaders = await resolve2(this.config.headers());
     try {
       const {
         responseHeaders,
@@ -41358,7 +41568,7 @@ var GatewayLanguageModel = class {
         rawValue: rawResponse
       } = await postJsonToApi({
         url: this.getUrl(),
-        headers: combineHeaders(resolvedHeaders, options.headers, this.getModelConfigHeaders(this.modelId, false), await resolve(this.config.o11yHeaders)),
+        headers: combineHeaders(resolvedHeaders, options.headers, this.getModelConfigHeaders(this.modelId, false), await resolve2(this.config.o11yHeaders)),
         body: args,
         successfulResponseHandler: createJsonResponseHandler(exports_external.any()),
         failedResponseHandler: createJsonErrorResponseHandler({
@@ -41381,11 +41591,11 @@ var GatewayLanguageModel = class {
   async doStream(options) {
     const { args, warnings } = await this.getArgs(options);
     const { abortSignal } = options;
-    const resolvedHeaders = await resolve(this.config.headers());
+    const resolvedHeaders = await resolve2(this.config.headers());
     try {
       const { value: response, responseHeaders } = await postJsonToApi({
         url: this.getUrl(),
-        headers: combineHeaders(resolvedHeaders, options.headers, this.getModelConfigHeaders(this.modelId, true), await resolve(this.config.o11yHeaders)),
+        headers: combineHeaders(resolvedHeaders, options.headers, this.getModelConfigHeaders(this.modelId, true), await resolve2(this.config.o11yHeaders)),
         body: args,
         successfulResponseHandler: createEventSourceResponseHandler(exports_external.any()),
         failedResponseHandler: createJsonErrorResponseHandler({
@@ -41471,7 +41681,7 @@ var GatewayEmbeddingModel = class {
     providerOptions
   }) {
     var _a92;
-    const resolvedHeaders = await resolve(this.config.headers());
+    const resolvedHeaders = await resolve2(this.config.headers());
     try {
       const {
         responseHeaders,
@@ -41479,7 +41689,7 @@ var GatewayEmbeddingModel = class {
         rawValue
       } = await postJsonToApi({
         url: this.getUrl(),
-        headers: combineHeaders(resolvedHeaders, headers != null ? headers : {}, this.getModelConfigHeaders(), await resolve(this.config.o11yHeaders)),
+        headers: combineHeaders(resolvedHeaders, headers != null ? headers : {}, this.getModelConfigHeaders(), await resolve2(this.config.o11yHeaders)),
         body: {
           values,
           ...providerOptions ? { providerOptions } : {}
@@ -41541,7 +41751,7 @@ var GatewayImageModel = class {
     abortSignal
   }) {
     var _a92, _b92, _c, _d;
-    const resolvedHeaders = await resolve(this.config.headers());
+    const resolvedHeaders = await resolve2(this.config.headers());
     try {
       const {
         responseHeaders,
@@ -41549,7 +41759,7 @@ var GatewayImageModel = class {
         rawValue
       } = await postJsonToApi({
         url: this.getUrl(),
-        headers: combineHeaders(resolvedHeaders, headers != null ? headers : {}, this.getModelConfigHeaders(), await resolve(this.config.o11yHeaders)),
+        headers: combineHeaders(resolvedHeaders, headers != null ? headers : {}, this.getModelConfigHeaders(), await resolve2(this.config.o11yHeaders)),
         body: {
           prompt,
           n,
@@ -41664,11 +41874,11 @@ var GatewayVideoModel = class {
     abortSignal
   }) {
     var _a92;
-    const resolvedHeaders = await resolve(this.config.headers());
+    const resolvedHeaders = await resolve2(this.config.headers());
     try {
       const { responseHeaders, value: responseBody } = await postJsonToApi({
         url: this.getUrl(),
-        headers: combineHeaders(resolvedHeaders, headers != null ? headers : {}, this.getModelConfigHeaders(), await resolve(this.config.o11yHeaders), { accept: "text/event-stream" }),
+        headers: combineHeaders(resolvedHeaders, headers != null ? headers : {}, this.getModelConfigHeaders(), await resolve2(this.config.o11yHeaders), { accept: "text/event-stream" }),
         body: {
           prompt,
           n,
@@ -44539,7 +44749,7 @@ var object2 = ({
   const schema = asSchema(inputSchema);
   return {
     name: "object",
-    responseFormat: resolve(schema.jsonSchema).then((jsonSchema2) => ({
+    responseFormat: resolve2(schema.jsonSchema).then((jsonSchema2) => ({
       type: "json",
       schema: jsonSchema2,
       ...name21 != null && { name: name21 },
@@ -44601,7 +44811,7 @@ var array2 = ({
   const elementSchema = asSchema(inputElementSchema);
   return {
     name: "array",
-    responseFormat: resolve(elementSchema.jsonSchema).then((jsonSchema2) => {
+    responseFormat: resolve2(elementSchema.jsonSchema).then((jsonSchema2) => {
       const { $schema, ...itemSchema } = jsonSchema2;
       return {
         type: "json",
@@ -49860,7 +50070,7 @@ var Hono2 = class extends Hono {
 
 // node_modules/.bun/hono@4.12.5/node_modules/hono/dist/adapter/bun/serve-static.js
 import { stat } from "fs/promises";
-import { join } from "path";
+import { join as join3 } from "path";
 
 // node_modules/.bun/hono@4.12.5/node_modules/hono/dist/utils/compress.js
 var COMPRESSIBLE_CONTENT_TYPE_REGEX = /^\s*(?:text\/(?!event-stream(?:[;\s]|$))[^;\s]+|application\/(?:javascript|json|xml|xml-dtd|ecmascript|dart|postscript|rtf|tar|toml|vnd\.dart|vnd\.ms-fontobject|vnd\.ms-opentype|wasm|x-httpd-php|x-javascript|x-ns-proxy-autoconfig|x-sh|x-tar|x-virtualbox-hdd|x-virtualbox-ova|x-virtualbox-ovf|x-virtualbox-vbox|x-virtualbox-vdi|x-virtualbox-vhd|x-virtualbox-vmdk|x-www-form-urlencoded)|font\/(?:otf|ttf)|image\/(?:bmp|vnd\.adobe\.photoshop|vnd\.microsoft\.icon|vnd\.ms-dds|x-icon|x-ms-bmp)|message\/rfc822|model\/gltf-binary|x-shader\/x-fragment|x-shader\/x-vertex|[^;\s]+?\+(?:json|text|xml|yaml))(?:[;\s]|$)/i;
@@ -49965,7 +50175,7 @@ var DEFAULT_DOCUMENT = "index.html";
 var serveStatic = (options) => {
   const root = options.root ?? "./";
   const optionPath = options.path;
-  const join = options.join ?? defaultJoin;
+  const join3 = options.join ?? defaultJoin;
   return async (c, next) => {
     if (c.finalized) {
       return next();
@@ -49984,9 +50194,9 @@ var serveStatic = (options) => {
         return next();
       }
     }
-    let path = join(root, !optionPath && options.rewriteRequestPath ? options.rewriteRequestPath(filename) : filename);
+    let path = join3(root, !optionPath && options.rewriteRequestPath ? options.rewriteRequestPath(filename) : filename);
     if (options.isDir && await options.isDir(path)) {
-      path = join(path, DEFAULT_DOCUMENT);
+      path = join3(path, DEFAULT_DOCUMENT);
     }
     const getContent = options.getContent;
     let content = await getContent(path, c);
@@ -50038,7 +50248,7 @@ var serveStatic2 = (options) => {
     return serveStatic({
       ...options,
       getContent,
-      join,
+      join: join3,
       isDir
     })(c, next);
   };
@@ -50130,9 +50340,9 @@ var upgradeWebSocket = defineWebSocketHelper((c, events) => {
 });
 
 // src/config.ts
-import { existsSync, mkdirSync, readFileSync, writeFileSync } from "fs";
-import { homedir } from "os";
-import { join as join2, resolve as resolve2 } from "path";
+import { existsSync as existsSync2, mkdirSync as mkdirSync2, readFileSync as readFileSync2, writeFileSync as writeFileSync2 } from "fs";
+import { homedir as homedir3 } from "os";
+import { join as join4, resolve as resolve3 } from "path";
 
 // node_modules/.bun/json5@2.2.3/node_modules/json5/dist/index.mjs
 var Space_Separator = /[\u1680\u2000-\u200A\u202F\u205F\u3000]/;
@@ -51300,8 +51510,8 @@ var DEFAULT_CONFIG = `{
   // },
 }`;
 function loadConfig(configPath) {
-  const absolutePath = resolve2(configPath);
-  const content = readFileSync(absolutePath, "utf-8");
+  const absolutePath = resolve3(configPath);
+  const content = readFileSync2(absolutePath, "utf-8");
   const config2 = dist_default.parse(content);
   for (const [routeType, modelMap] of Object.entries(config2.routes)) {
     if (!modelMap["*"]) {
@@ -51316,21 +51526,21 @@ function loadConfig(configPath) {
   return config2;
 }
 function createDefaultConfig(configPath) {
-  const configDir = resolve2(configPath, "..");
-  if (!existsSync(configDir)) {
-    mkdirSync(configDir, { recursive: true });
+  const configDir = resolve3(configPath, "..");
+  if (!existsSync2(configDir)) {
+    mkdirSync2(configDir, { recursive: true });
   }
-  writeFileSync(configPath, DEFAULT_CONFIG, "utf-8");
+  writeFileSync2(configPath, DEFAULT_CONFIG, "utf-8");
   console.log(`\u5DF2\u521B\u5EFA\u9ED8\u8BA4\u914D\u7F6E\u6587\u4EF6: ${configPath}`);
 }
 function resolveDefaultConfigPath() {
   const localConfig = "config.json5";
-  if (existsSync(localConfig)) {
+  if (existsSync2(localConfig)) {
     return localConfig;
   }
-  const globalConfigDir = join2(homedir(), ".local-router");
-  const globalConfig2 = join2(globalConfigDir, "config.json5");
-  if (!existsSync(globalConfig2)) {
+  const globalConfigDir = join4(homedir3(), ".local-router");
+  const globalConfig2 = join4(globalConfigDir, "config.json5");
+  if (!existsSync2(globalConfig2)) {
     createDefaultConfig(globalConfig2);
   }
   return globalConfig2;
@@ -51349,19 +51559,19 @@ function parseConfigPath() {
 }
 function resolveLogBaseDir(logConfig) {
   if (logConfig?.baseDir) {
-    return resolve2(logConfig.baseDir);
+    return resolve3(logConfig.baseDir);
   }
-  return join2(homedir(), ".local-router", "logs");
+  return join4(homedir3(), ".local-router", "logs");
 }
 
 // src/config-store.ts
-import { writeFileSync as writeFileSync2 } from "fs";
-import { resolve as resolve3 } from "path";
+import { writeFileSync as writeFileSync3 } from "fs";
+import { resolve as resolve4 } from "path";
 class ConfigStore {
   config;
   absolutePath;
   constructor(configPath) {
-    this.absolutePath = resolve3(configPath);
+    this.absolutePath = resolve4(configPath);
     this.config = loadConfig(this.absolutePath);
   }
   get() {
@@ -51376,7 +51586,7 @@ class ConfigStore {
   }
   save(newConfig) {
     const content = dist_default.stringify(newConfig, { space: 2, quote: '"' });
-    writeFileSync2(this.absolutePath, content, "utf-8");
+    writeFileSync3(this.absolutePath, content, "utf-8");
   }
   validate(config2) {
     for (const [routeType, modelMap] of Object.entries(config2.routes)) {
@@ -51395,7 +51605,7 @@ class ConfigStore {
 // src/config-validate.ts
 var import__2020 = __toESM(require_2020(), 1);
 var import_ajv_formats = __toESM(require_dist2(), 1);
-import { readFileSync as readFileSync2 } from "fs";
+import { readFileSync as readFileSync3 } from "fs";
 
 // src/runtime-assets.ts
 import { fileURLToPath } from "url";
@@ -51426,7 +51636,7 @@ function validateConfigOrThrow(config2) {
   validateBusinessRules(config2);
   const ajv = new import__2020.default({ allErrors: true, strict: false });
   import_ajv_formats.default(ajv);
-  const schemaJson = JSON.parse(readFileSync2(getBundledSchemaPath(), "utf-8"));
+  const schemaJson = JSON.parse(readFileSync3(getBundledSchemaPath(), "utf-8"));
   const validateBySchema = ajv.compile(schemaJson);
   const valid = validateBySchema(config2);
   if (!valid) {
@@ -51487,8 +51697,8 @@ class CryptoSession {
 }
 
 // src/log-metrics.ts
-import { createReadStream, existsSync as existsSync2 } from "fs";
-import { join as join3 } from "path";
+import { createReadStream, existsSync as existsSync3 } from "fs";
+import { join as join5 } from "path";
 import { createInterface } from "readline";
 var WINDOW_MS = {
   "1h": 60 * 60 * 1000,
@@ -51605,8 +51815,8 @@ async function getLogMetrics(options) {
   if (!refresh && cached2 && cached2.expiresAt > nowMs) {
     return cached2.value;
   }
-  const eventsDir = join3(baseDir, "events");
-  if (!existsSync2(eventsDir)) {
+  const eventsDir = join5(baseDir, "events");
+  if (!existsSync3(eventsDir)) {
     const empty = createEmptyMetrics(window2, nowMs, {
       logEnabled: true,
       baseDir,
@@ -51652,8 +51862,8 @@ async function getLogMetrics(options) {
       partial2 = true;
       break;
     }
-    const filePath = join3(eventsDir, `${dateStr}.jsonl`);
-    if (!existsSync2(filePath))
+    const filePath = join5(eventsDir, `${dateStr}.jsonl`);
+    if (!existsSync3(filePath))
       continue;
     filesScanned += 1;
     try {
@@ -51789,8 +51999,8 @@ async function getLogMetrics(options) {
 }
 
 // src/log-query.ts
-import { createReadStream as createReadStream3, existsSync as existsSync5, readFileSync as readFileSync4 } from "fs";
-import { join as join5, resolve as resolve5 } from "path";
+import { createReadStream as createReadStream3, existsSync as existsSync6, readFileSync as readFileSync5 } from "fs";
+import { join as join7, resolve as resolve6 } from "path";
 import { createInterface as createInterface2 } from "readline";
 
 // src/log-index.ts
@@ -51798,13 +52008,13 @@ import { Database } from "bun:sqlite";
 import {
   closeSync,
   createReadStream as createReadStream2,
-  existsSync as existsSync4,
-  mkdirSync as mkdirSync2,
+  existsSync as existsSync5,
+  mkdirSync as mkdirSync3,
   openSync,
   readSync,
   statSync as statSync2
 } from "fs";
-import { join as join4 } from "path";
+import { join as join6 } from "path";
 
 // src/log-session-identity.ts
 var USER_SESSION_DELIMITER = "_account__session_";
@@ -51883,8 +52093,8 @@ function resolveLogSessionIdentity(requestBody) {
 }
 
 // src/token-usage.ts
-import { existsSync as existsSync3, readFileSync as readFileSync3, statSync } from "fs";
-import { resolve as resolve4 } from "path";
+import { existsSync as existsSync4, readFileSync as readFileSync4, statSync } from "fs";
+import { resolve as resolve5 } from "path";
 var MAX_STREAM_USAGE_BYTES = 25 * 1024 * 1024;
 function asRecord(value) {
   if (!value || typeof value !== "object" || Array.isArray(value))
@@ -52401,12 +52611,12 @@ function safeReadStreamFile(streamFile, baseDir) {
   try {
     const candidates = [streamFile];
     if (baseDir)
-      candidates.push(resolve4(baseDir, streamFile));
+      candidates.push(resolve5(baseDir, streamFile));
     for (const candidate of candidates) {
-      const resolved = resolve4(candidate);
+      const resolved = resolve5(candidate);
       if (!resolved.endsWith(".sse.raw"))
         continue;
-      if (!existsSync3(resolved))
+      if (!existsSync4(resolved))
         continue;
       const stats = statSync(resolved);
       if (stats.size > MAX_STREAM_USAGE_BYTES) {
@@ -52415,7 +52625,7 @@ function safeReadStreamFile(streamFile, baseDir) {
           warning: `stream_file \u8D85\u8FC7 ${MAX_STREAM_USAGE_BYTES} \u5B57\u8282\uFF0C\u5DF2\u8DF3\u8FC7 token usage \u56DE\u586B`
         };
       }
-      return { content: readFileSync3(resolved, "utf-8"), warning: null };
+      return { content: readFileSync4(resolved, "utf-8"), warning: null };
     }
   } catch (err) {
     return {
@@ -52866,8 +53076,8 @@ class LogIndex {
   constructor(baseDir, config2) {
     this.baseDir = baseDir;
     this.config = config2;
-    mkdirSync2(baseDir, { recursive: true });
-    const dbPath = join4(baseDir, "logs-index.sqlite");
+    mkdirSync3(baseDir, { recursive: true });
+    const dbPath = join6(baseDir, "logs-index.sqlite");
     this.db = new Database(dbPath, { create: true, strict: true });
     this.configure();
     this.migrate();
@@ -52943,11 +53153,11 @@ class LogIndex {
     let scannedFiles = 0;
     let scannedLines = 0;
     let parseErrors = 0;
-    const eventsDir = join4(this.baseDir, "events");
+    const eventsDir = join6(this.baseDir, "events");
     const dates = listDateStrings2(fromMs, toMs);
     for (const date5 of dates) {
-      const filePath = join4(eventsDir, `${date5}.jsonl`);
-      if (!existsSync4(filePath))
+      const filePath = join6(eventsDir, `${date5}.jsonl`);
+      if (!existsSync5(filePath))
         continue;
       const stats = statSync2(filePath);
       const fileRow = this.db.query("SELECT size_bytes, mtime_ms FROM log_index_files WHERE file_path = ?").get(filePath);
@@ -53038,8 +53248,8 @@ class LogIndex {
     if (!parsedId)
       return null;
     const row = this.db.query("SELECT source_date, source_file, line_number, byte_offset FROM log_events WHERE id = ?").get(id);
-    const filePath = row?.source_file ?? join4(this.baseDir, "events", `${parsedId.date}.jsonl`);
-    if (!existsSync4(filePath))
+    const filePath = row?.source_file ?? join6(this.baseDir, "events", `${parsedId.date}.jsonl`);
+    if (!existsSync5(filePath))
       return null;
     const line2 = readLineAtOffset(filePath, row?.byte_offset ?? parsedId.offset);
     if (!line2?.trim())
@@ -53448,8 +53658,8 @@ function getIndexedLogEventDetail(logConfig, id) {
   const parsedId = decodeOffsetLogEventId(id);
   if (!parsedId)
     return null;
-  const filePath = join4(baseDir, "events", `${parsedId.date}.jsonl`);
-  if (!existsSync4(filePath))
+  const filePath = join6(baseDir, "events", `${parsedId.date}.jsonl`);
+  if (!existsSync5(filePath))
     return null;
   const line2 = readLineAtOffset(filePath, parsedId.offset);
   if (!line2?.trim())
@@ -53556,12 +53766,8 @@ function buildMessage2(event) {
   const status = event.upstream_status ?? 0;
   return `${event.method} ${event.path} -> ${status}`;
 }
-function containsKeyword(event, q) {
-  if (!q)
-    return true;
-  const identity = resolveLogSessionIdentity(event.request_body);
-  const keyword = q.toLowerCase();
-  const haystack = [
+function buildKeywordText(event, identity) {
+  return [
     event.request_id,
     event.path,
     event.provider,
@@ -53575,7 +53781,13 @@ function containsKeyword(event, q) {
     event.error_message ?? "",
     buildMessage2(event)
   ].join(" ").toLowerCase();
-  return haystack.includes(keyword);
+}
+function containsKeyword(event, q) {
+  if (!q)
+    return true;
+  const identity = resolveLogSessionIdentity(event.request_body);
+  const keyword = q.toLowerCase();
+  return buildKeywordText(event, identity).includes(keyword);
 }
 function createRunningStats() {
   return {
@@ -53743,7 +53955,7 @@ function normalizeQuery(input, maxLimit = MAX_QUERY_LIMIT) {
 }
 function eventToSummary(item) {
   const { event } = item;
-  const identity = resolveLogSessionIdentity(event.request_body);
+  const identity = item.identity ?? resolveLogSessionIdentity(event.request_body);
   return {
     id: item.id,
     ts: event.ts_start,
@@ -53768,19 +53980,39 @@ function eventToSummary(item) {
     tokenUsage: item.tokenUsage
   };
 }
-function createLogEventSummaryFromEvent(event, location) {
+function extractLogEventFacts(event) {
   const ts = Date.parse(event.ts_start);
+  const level = getLevel2(event);
+  const statusClass = getStatusClass3(event);
+  const identity = resolveLogSessionIdentity(event.request_body);
+  return {
+    event,
+    ts: Number.isFinite(ts) ? ts : Number.NaN,
+    level,
+    statusClass,
+    model: event.model_out || event.model_in,
+    identity,
+    hasError: level === "error",
+    keywordText: buildKeywordText(event, identity),
+    tokenUsage: extractTokenUsageSummaryFromLogEvent(event)
+  };
+}
+function createLogEventSummaryFromFacts(facts, location) {
   return eventToSummary({
     id: location.id,
     date: location.date,
     line: location.line ?? 0,
-    ts: Number.isFinite(ts) ? ts : 0,
-    level: getLevel2(event),
-    statusClass: getStatusClass3(event),
-    event,
-    tokenUsage: extractTokenUsageSummaryFromLogEvent(event)
+    ts: facts.ts,
+    level: facts.level,
+    statusClass: facts.statusClass,
+    event: facts.event,
+    identity: facts.identity,
+    tokenUsage: facts.tokenUsage
   });
 }
+function createLogEventSummaryFromEvent(event, location) {
+  return createLogEventSummaryFromFacts(extractLogEventFacts(event), location);
+}
 function logEventMatchesQuery(event, query) {
   if (!event.ts_start)
     return false;
@@ -53867,23 +54099,23 @@ function readStreamContent(baseDir, streamFile) {
   if (!streamFile)
     return { content: null, warning: null };
   try {
-    const resolvedBase = resolve5(baseDir);
-    const resolvedFromFile = resolve5(streamFile);
+    const resolvedBase = resolve6(baseDir);
+    const resolvedFromFile = resolve6(streamFile);
     const looksLikeStreamFile = resolvedFromFile.endsWith(".sse.raw");
     if (!looksLikeStreamFile) {
       return { content: null, warning: "stream_file \u4E0D\u662F .sse.raw \u6587\u4EF6\uFF0C\u5DF2\u8DF3\u8FC7\u8BFB\u53D6\u3002" };
     }
-    if (existsSync5(resolvedFromFile)) {
-      return { content: readFileSync4(resolvedFromFile, "utf-8"), warning: null };
+    if (existsSync6(resolvedFromFile)) {
+      return { content: readFileSync5(resolvedFromFile, "utf-8"), warning: null };
     }
-    const fallbackPath = resolve5(resolvedBase, streamFile);
+    const fallbackPath = resolve6(resolvedBase, streamFile);
     if (!fallbackPath.startsWith(`${resolvedBase}/`) && fallbackPath !== resolvedBase) {
       return { content: null, warning: "stream_file \u8DEF\u5F84\u975E\u6CD5\uFF0C\u5DF2\u62D2\u7EDD\u8BFB\u53D6\u3002" };
     }
-    if (!existsSync5(fallbackPath)) {
+    if (!existsSync6(fallbackPath)) {
       return { content: null, warning: "stream_file \u4E0D\u5B58\u5728\uFF0C\u53EF\u80FD\u5DF2\u88AB\u6E05\u7406\u3002" };
     }
-    return { content: readFileSync4(fallbackPath, "utf-8"), warning: null };
+    return { content: readFileSync5(fallbackPath, "utf-8"), warning: null };
   } catch (err) {
     return {
       content: null,
@@ -53979,8 +54211,8 @@ async function buildLogEventDetail(id, parsed, location, context2) {
   };
 }
 async function scanEvents(baseDir, query) {
-  const eventsDir = join5(baseDir, "events");
-  if (!existsSync5(eventsDir)) {
+  const eventsDir = join7(baseDir, "events");
+  if (!existsSync6(eventsDir)) {
     return {
       items: [],
       stats: createEmptyLogQueryStats(),
@@ -54006,8 +54238,8 @@ async function scanEvents(baseDir, query) {
       truncated = true;
       break;
     }
-    const filePath = join5(eventsDir, `${date5}.jsonl`);
-    if (!existsSync5(filePath))
+    const filePath = join7(eventsDir, `${date5}.jsonl`);
+    if (!existsSync6(filePath))
       continue;
     scannedFiles += 1;
     const stream = createReadStream3(filePath, { encoding: "utf-8" });
@@ -54098,6 +54330,9 @@ async function scanEvents(baseDir, query) {
 function isLogQueryWindow(value) {
   return value === "1h" || value === "6h" || value === "24h";
 }
+function getLogQueryWindowMs(window2) {
+  return WINDOW_MS2[window2];
+}
 function resolveLogQueryRange(input) {
   const nowMs = input.nowMs ?? Date.now();
   const hasFrom = !!input.from;
@@ -54189,8 +54424,8 @@ async function getLogEventDetailById(context2, id) {
   }
   const { date: date5, line: line2 } = decodeEventId(id);
   const baseDir = resolveLogBaseDir(context2.logConfig);
-  const filePath = join5(baseDir, "events", `${date5}.jsonl`);
-  if (!existsSync5(filePath))
+  const filePath = join7(baseDir, "events", `${date5}.jsonl`);
+  if (!existsSync6(filePath))
     return null;
   const stream = createReadStream3(filePath, { encoding: "utf-8" });
   const rl = createInterface2({ input: stream, crlfDelay: Number.POSITIVE_INFINITY });
@@ -54403,12 +54638,666 @@ function parseBooleanFlag(value) {
   throw new Error("hasError \u53C2\u6570\u4EC5\u652F\u6301 true/false/1/0");
 }
 
+// src/log-tail.ts
+var subscribers = new Set;
+function publishLogEvent(event) {
+  for (const subscriber of subscribers) {
+    try {
+      subscriber(event);
+    } catch {}
+  }
+}
+function subscribeLogEvents(subscriber) {
+  subscribers.add(subscriber);
+  return () => {
+    subscribers.delete(subscriber);
+  };
+}
+
+// src/network-access.ts
+var REMOTE_ADDRESS_ENV_KEY = "LOCAL_ROUTER_REMOTE_ADDRESS";
+function parseIpv4(address) {
+  const parts = address.split(".");
+  if (parts.length !== 4)
+    return null;
+  const octets = parts.map((part) => {
+    if (!/^\d{1,3}$/.test(part))
+      return Number.NaN;
+    const value = Number.parseInt(part, 10);
+    return value >= 0 && value <= 255 ? value : Number.NaN;
+  });
+  return octets.every(Number.isFinite) ? octets : null;
+}
+function normalizeIpAddress(raw2) {
+  let address = raw2.trim().toLowerCase();
+  if (address.startsWith("[")) {
+    const end = address.indexOf("]");
+    if (end !== -1)
+      address = address.slice(1, end);
+  }
+  const mappedIpv4 = address.match(/^::ffff:(\d{1,3}(?:\.\d{1,3}){3})$/);
+  if (mappedIpv4) {
+    return mappedIpv4[1];
+  }
+  return address;
+}
+function isLoopbackAddress(raw2) {
+  if (!raw2)
+    return false;
+  const address = normalizeIpAddress(raw2);
+  const ipv43 = parseIpv4(address);
+  if (ipv43)
+    return ipv43[0] === 127;
+  return address === "::1";
+}
+function isLanAddress(raw2) {
+  if (!raw2)
+    return false;
+  const address = normalizeIpAddress(raw2);
+  const ipv43 = parseIpv4(address);
+  if (ipv43) {
+    const [a, b] = ipv43;
+    return a === 10 || a === 172 && b >= 16 && b <= 31 || a === 192 && b === 168 || a === 169 && b === 254;
+  }
+  return address.startsWith("fc") || address.startsWith("fd") || /^fe[89ab]/.test(address);
+}
+function decideNetworkAccess(serverConfig, rawRemoteAddress) {
+  const remoteAddress = rawRemoteAddress ? normalizeIpAddress(rawRemoteAddress) : null;
+  if (!remoteAddress || isLoopbackAddress(remoteAddress)) {
+    return { allowed: true, remoteAddress };
+  }
+  const lanEnabled = serverConfig?.lanAccess?.enabled === true;
+  if (!lanEnabled) {
+    return { allowed: false, remoteAddress, reason: "lan-disabled" };
+  }
+  if (!isLanAddress(remoteAddress)) {
+    return { allowed: false, remoteAddress, reason: "non-lan-address" };
+  }
+  return { allowed: true, remoteAddress };
+}
+function getRemoteAddressFromContext(c2) {
+  const env = c2.env;
+  const value = env?.[REMOTE_ADDRESS_ENV_KEY];
+  return typeof value === "string" && value.trim() ? value : null;
+}
+function createNetworkAccessMiddleware(store) {
+  return async (c2, next) => {
+    const decision = decideNetworkAccess(store.get().server, getRemoteAddressFromContext(c2));
+    if (!decision.allowed) {
+      return c2.json({
+        error: decision.reason === "lan-disabled" ? "\u5C40\u57DF\u7F51\u670D\u52A1\u672A\u5F00\u542F\uFF0C\u5DF2\u62D2\u7EDD\u975E\u672C\u673A\u8BF7\u6C42" : "\u4EC5\u5141\u8BB8\u672C\u673A\u6216\u5C40\u57DF\u7F51\u6765\u6E90\u8BBF\u95EE",
+        remoteAddress: decision.remoteAddress
+      }, 403);
+    }
+    await next();
+  };
+}
+
+// src/log-realtime.ts
+var WS_PATHNAME = "/api/logs/events/ws";
+var MAX_CONNECTIONS = 64;
+var MAX_SUBSCRIPTIONS = 64;
+var MAX_CLIENT_MESSAGE_BYTES = 16 * 1024;
+var MAX_GLOBAL_EVENT_QUEUE_ITEMS = 1000;
+var MAX_GLOBAL_EVENT_QUEUE_BYTES = 16 * 1024 * 1024;
+var MAX_PENDING_BYTES_PER_CONNECTION = 1024 * 1024;
+var MAX_TOTAL_PENDING_BYTES = 32 * 1024 * 1024;
+var BACKPRESSURE_BUFFERED_BYTES = 512 * 1024;
+var HEARTBEAT_INTERVAL_MS = 15000;
+var FLUSH_BUDGET_MS = 10;
+var MAX_Q_LENGTH2 = 200;
+function jsonResponse(status, body) {
+  return new Response(JSON.stringify(body), {
+    status,
+    headers: { "Content-Type": "application/json; charset=utf-8" }
+  });
+}
+function createId(prefix) {
+  return `${prefix}_${crypto.randomUUID()}`;
+}
+function estimatePublishedEventBytes(event) {
+  const bodyBytes = (event.event.request_bytes ?? 0) + (event.event.response_bytes ?? 0);
+  const streamBytes = event.event.stream_bytes ?? 0;
+  return 1024 + Math.min(64 * 1024, Math.max(0, bodyBytes + streamBytes));
+}
+function byteLength(text2) {
+  return Buffer.byteLength(text2);
+}
+function isSocketOpen(ws) {
+  return typeof ws.readyState !== "number" || ws.readyState === 1;
+}
+function bufferedAmount(ws) {
+  return typeof ws.bufferedAmount === "number" ? ws.bufferedAmount : 0;
+}
+function parseClientMessage(raw2) {
+  let text2;
+  if (typeof raw2 === "string") {
+    text2 = raw2;
+  } else {
+    text2 = new TextDecoder().decode(raw2);
+  }
+  if (byteLength(text2) > MAX_CLIENT_MESSAGE_BYTES) {
+    throw new Error("\u5BA2\u6237\u7AEF\u6D88\u606F\u8FC7\u5927");
+  }
+  const parsed = JSON.parse(text2);
+  if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) {
+    throw new Error("\u5BA2\u6237\u7AEF\u6D88\u606F\u5FC5\u987B\u662F JSON \u5BF9\u8C61");
+  }
+  const message = parsed;
+  if (message.type !== "subscribe" && message.type !== "unsubscribe" && message.type !== "ping") {
+    throw new Error("\u4E0D\u652F\u6301\u7684\u5B9E\u65F6\u65E5\u5FD7\u6D88\u606F\u7C7B\u578B");
+  }
+  return message;
+}
+function parseStringValue(value) {
+  if (typeof value !== "string")
+    return;
+  const trimmed = value.trim();
+  return trimmed || undefined;
+}
+function parseStringArrayValue(value) {
+  if (Array.isArray(value)) {
+    return value.flatMap((item) => typeof item === "string" ? parseCommaSeparated(item) : []);
+  }
+  if (typeof value === "string")
+    return parseCommaSeparated(value);
+  return [];
+}
+function parseBooleanValue(value) {
+  if (typeof value === "boolean")
+    return value;
+  if (typeof value === "string")
+    return parseBooleanFlag(value);
+  return null;
+}
+function createQueryHash(value) {
+  const text2 = JSON.stringify(value);
+  let hash2 = 2166136261;
+  for (let i = 0;i < text2.length; i += 1) {
+    hash2 ^= text2.charCodeAt(i);
+    hash2 = Math.imul(hash2, 16777619);
+  }
+  return `q_${(hash2 >>> 0).toString(36)}`;
+}
+function parseValidatedArray(value, validate, errorMessage) {
+  const raw2 = parseStringArrayValue(value);
+  const parsed = raw2.filter(validate);
+  if (parsed.length !== raw2.length) {
+    throw new Error(errorMessage);
+  }
+  return parsed;
+}
+function compileRealtimeQuery(input) {
+  const query = input ?? {};
+  const nowMs = Date.now();
+  const windowRaw = parseStringValue(query.window) ?? "24h";
+  if (!isLogQueryWindow(windowRaw)) {
+    throw new Error("window \u53C2\u6570\u4EC5\u652F\u6301 1h | 6h | 24h");
+  }
+  const from = parseStringValue(query.from);
+  const to = parseStringValue(query.to);
+  const range = from || to ? {
+    type: "fixed",
+    ...resolveLogQueryRange({ window: windowRaw, from, to, nowMs })
+  } : {
+    type: "window",
+    window: windowRaw,
+    windowMs: getLogQueryWindowMs(windowRaw)
+  };
+  if (range.type === "fixed" && range.toMs <= nowMs) {
+    throw new Error("\u56FA\u5B9A\u7ED3\u675F\u65F6\u95F4\u5DF2\u8FC7\u671F\uFF0C\u5B9E\u65F6\u63A8\u9001\u4EC5\u652F\u6301\u4ECD\u5728\u6EDA\u52A8\u7684\u67E5\u8BE2\u7A97\u53E3");
+  }
+  const sortRaw = parseStringValue(query.sort) ?? "time_desc";
+  if (!validateSort(sortRaw)) {
+    throw new Error("sort \u53C2\u6570\u4EC5\u652F\u6301 time_desc | time_asc");
+  }
+  const levels = parseValidatedArray(query.levels, validateLogLevel, "levels \u53C2\u6570\u4EC5\u652F\u6301 info,error");
+  const statusClasses = parseValidatedArray(query.statusClass, validateStatusClass, "statusClass \u53C2\u6570\u4EC5\u652F\u6301 2xx,4xx,5xx,network_error");
+  const q = (parseStringValue(query.q) ?? "").slice(0, MAX_Q_LENGTH2).toLowerCase();
+  const normalized = {
+    range,
+    sort: sortRaw,
+    levels,
+    providers: parseStringArrayValue(query.provider),
+    routeTypes: parseStringArrayValue(query.routeType),
+    models: parseStringArrayValue(query.model),
+    modelIns: parseStringArrayValue(query.modelIn),
+    modelOuts: parseStringArrayValue(query.modelOut),
+    users: parseStringArrayValue(query.user),
+    sessions: parseStringArrayValue(query.session),
+    statusClasses,
+    hasError: parseBooleanValue(query.hasError),
+    q
+  };
+  return {
+    queryHash: createQueryHash(normalized),
+    sort: sortRaw,
+    range,
+    levels: new Set(levels),
+    providers: new Set(normalized.providers),
+    routeTypes: new Set(normalized.routeTypes),
+    models: new Set(normalized.models),
+    modelIns: new Set(normalized.modelIns),
+    modelOuts: new Set(normalized.modelOuts),
+    users: new Set(normalized.users),
+    sessions: new Set(normalized.sessions),
+    statusClasses: new Set(statusClasses),
+    hasError: normalized.hasError,
+    q
+  };
+}
+function setHas(set2, value) {
+  return set2.size === 0 || set2.has(value);
+}
+function matchesCompiledQuery(query, facts, nowMs) {
+  if (!facts.event.ts_start || !Number.isFinite(facts.ts))
+    return false;
+  const fromMs = query.range.type === "window" ? nowMs - query.range.windowMs : query.range.fromMs;
+  const toMs = query.range.type === "window" ? nowMs : query.range.toMs;
+  if (facts.ts < fromMs || facts.ts > toMs)
+    return false;
+  if (!setHas(query.levels, facts.level))
+    return false;
+  if (!setHas(query.providers, facts.event.provider))
+    return false;
+  if (!setHas(query.routeTypes, facts.event.route_type))
+    return false;
+  if (!setHas(query.models, facts.model))
+    return false;
+  if (!setHas(query.modelIns, facts.event.model_in))
+    return false;
+  if (!setHas(query.modelOuts, facts.event.model_out))
+    return false;
+  if (query.users.size > 0) {
+    const matchedByRaw = facts.identity.userIdRaw ? query.users.has(facts.identity.userIdRaw) : false;
+    const matchedByUserKey = facts.identity.userKey ? query.users.has(facts.identity.userKey) : false;
+    if (!matchedByRaw && !matchedByUserKey)
+      return false;
+  }
+  if (query.sessions.size > 0) {
+    if (!facts.identity.sessionId || !query.sessions.has(facts.identity.sessionId))
+      return false;
+  }
+  if (!setHas(query.statusClasses, facts.statusClass))
+    return false;
+  if (query.hasError !== null && query.hasError !== facts.hasError)
+    return false;
+  return !query.q || facts.keywordText.includes(query.q);
+}
+function createLogRealtimeRuntime(options) {
+  const connections = new Map;
+  const subscriptions = new Map;
+  const eventQueue = [];
+  let tailUnsubscribe = null;
+  let flushTimer = null;
+  let heartbeatTimer = null;
+  let eventQueueBytes = 0;
+  let totalPendingBytes = 0;
+  let droppedUpstreamEvents = 0;
+  const sendText = (connection, text2) => {
+    if (!isSocketOpen(connection.ws))
+      return false;
+    const bytes = byteLength(text2);
+    const shouldQueue = connection.queue.length > 0 || bufferedAmount(connection.ws) > BACKPRESSURE_BUFFERED_BYTES;
+    if (!shouldQueue) {
+      try {
+        connection.ws.send(text2);
+        return true;
+      } catch {
+        removeConnection(connection.id, "send-failed");
+        return false;
+      }
+    }
+    if (connection.pendingBytes + bytes > MAX_PENDING_BYTES_PER_CONNECTION || totalPendingBytes + bytes > MAX_TOTAL_PENDING_BYTES) {
+      connection.droppedOutbound += 1;
+      if (connection.droppedOutbound >= 3) {
+        removeConnection(connection.id, "slow-client");
+      }
+      return false;
+    }
+    connection.queue.push({ text: text2, bytes });
+    connection.pendingBytes += bytes;
+    totalPendingBytes += bytes;
+    return true;
+  };
+  const sendMessage = (connection, message) => {
+    return sendText(connection, JSON.stringify(message));
+  };
+  const flushConnectionQueue = (connection) => {
+    if (!isSocketOpen(connection.ws))
+      return;
+    while (connection.queue.length > 0 && bufferedAmount(connection.ws) <= BACKPRESSURE_BUFFERED_BYTES) {
+      const item = connection.queue.shift();
+      if (!item)
+        break;
+      connection.pendingBytes -= item.bytes;
+      totalPendingBytes -= item.bytes;
+      try {
+        connection.ws.send(item.text);
+      } catch {
+        removeConnection(connection.id, "send-failed");
+        return;
+      }
+    }
+  };
+  const sendError = (connection, error48, requestId) => {
+    sendMessage(connection, { type: "error", requestId, error: error48 });
+  };
+  const ensureTailSubscription = () => {
+    if (tailUnsubscribe || subscriptions.size === 0)
+      return;
+    tailUnsubscribe = subscribeLogEvents((event) => {
+      if (subscriptions.size === 0)
+        return;
+      const bytes = estimatePublishedEventBytes(event);
+      while (eventQueue.length >= MAX_GLOBAL_EVENT_QUEUE_ITEMS || eventQueueBytes + bytes > MAX_GLOBAL_EVENT_QUEUE_BYTES) {
+        const dropped = eventQueue.shift();
+        if (!dropped)
+          break;
+        eventQueueBytes -= dropped.bytes;
+        droppedUpstreamEvents += 1;
+      }
+      eventQueue.push({ event, bytes });
+      eventQueueBytes += bytes;
+      scheduleFlush();
+    });
+  };
+  const maybeStopTailSubscription = () => {
+    if (subscriptions.size > 0)
+      return;
+    tailUnsubscribe?.();
+    tailUnsubscribe = null;
+    eventQueue.length = 0;
+    eventQueueBytes = 0;
+    droppedUpstreamEvents = 0;
+  };
+  const sendOverflow = (subscription, dropped, message) => {
+    const connection = connections.get(subscription.connectionId);
+    if (!connection)
+      return;
+    sendMessage(connection, {
+      type: "overflow",
+      subscriptionId: subscription.id,
+      dropped,
+      message
+    });
+  };
+  const removeSubscription = (subscriptionId, reason, notify2 = true) => {
+    const subscription = subscriptions.get(subscriptionId);
+    if (!subscription)
+      return;
+    subscriptions.delete(subscriptionId);
+    const connection = connections.get(subscription.connectionId);
+    if (connection) {
+      connection.subscriptions.delete(subscriptionId);
+      if (notify2) {
+        sendMessage(connection, {
+          type: "unsubscribed",
+          subscriptionId,
+          reason
+        });
+      }
+    }
+    maybeStopTailSubscription();
+  };
+  function removeConnection(connectionId, reason) {
+    const connection = connections.get(connectionId);
+    if (!connection)
+      return;
+    connections.delete(connectionId);
+    for (const subscriptionId of Array.from(connection.subscriptions)) {
+      removeSubscription(subscriptionId, reason, false);
+    }
+    for (const item of connection.queue) {
+      totalPendingBytes -= item.bytes;
+    }
+    connection.queue.length = 0;
+    connection.pendingBytes = 0;
+    try {
+      connection.ws.close(1001, reason);
+    } catch {}
+    if (connections.size === 0 && heartbeatTimer) {
+      clearInterval(heartbeatTimer);
+      heartbeatTimer = null;
+    }
+    maybeStopTailSubscription();
+  }
+  const pruneExpiredSubscriptions = (nowMs) => {
+    for (const subscription of Array.from(subscriptions.values())) {
+      const range = subscription.query.range;
+      if (range.type === "fixed" && range.toMs <= nowMs) {
+        removeSubscription(subscription.id, "expired");
+      }
+    }
+  };
+  const flushEvents = () => {
+    flushTimer = null;
+    if (subscriptions.size === 0) {
+      eventQueue.length = 0;
+      eventQueueBytes = 0;
+      droppedUpstreamEvents = 0;
+      maybeStopTailSubscription();
+      return;
+    }
+    const startedAt = Date.now();
+    const nowMs = Date.now();
+    pruneExpiredSubscriptions(nowMs);
+    if (droppedUpstreamEvents > 0) {
+      const dropped = droppedUpstreamEvents;
+      droppedUpstreamEvents = 0;
+      for (const subscription of subscriptions.values()) {
+        sendOverflow(subscription, dropped, `\u5B9E\u65F6\u65E5\u5FD7\u961F\u5217\u5DF2\u4E22\u5F03 ${dropped} \u6761\u4E8B\u4EF6\uFF0C\u8BF7\u91CD\u65B0\u67E5\u8BE2\u4EE5\u8865\u9F50\u3002`);
+      }
+    }
+    while (eventQueue.length > 0 && Date.now() - startedAt < FLUSH_BUDGET_MS) {
+      const queued = eventQueue.shift();
+      if (!queued)
+        break;
+      eventQueueBytes -= queued.bytes;
+      const facts = extractLogEventFacts(queued.event.event);
+      let summary = null;
+      for (const subscription of subscriptions.values()) {
+        if (!matchesCompiledQuery(subscription.query, facts, Date.now()))
+          continue;
+        const connection = connections.get(subscription.connectionId);
+        if (!connection)
+          continue;
+        summary ??= createLogEventSummaryFromFacts(facts, {
+          id: queued.event.id,
+          date: queued.event.date,
+          line: null
+        });
+        const sent = sendMessage(connection, {
+          type: "log.event",
+          subscriptionId: subscription.id,
+          item: summary
+        });
+        if (!sent) {
+          sendOverflow(subscription, 1, "\u5B9E\u65F6\u65E5\u5FD7\u5BA2\u6237\u7AEF\u53D1\u9001\u961F\u5217\u5DF2\u6EE1\uFF0C\u8BF7\u91CD\u65B0\u67E5\u8BE2\u4EE5\u8865\u9F50\u3002");
+        }
+      }
+    }
+    for (const connection of connections.values()) {
+      flushConnectionQueue(connection);
+    }
+    if (eventQueue.length > 0)
+      scheduleFlush();
+  };
+  function scheduleFlush() {
+    if (flushTimer)
+      return;
+    flushTimer = setTimeout(flushEvents, 0);
+    flushTimer.unref?.();
+  }
+  const ensureHeartbeat = () => {
+    if (heartbeatTimer)
+      return;
+    heartbeatTimer = setInterval(() => {
+      const ts = new Date().toISOString();
+      pruneExpiredSubscriptions(Date.now());
+      for (const connection of connections.values()) {
+        sendMessage(connection, { type: "pong", ts });
+        flushConnectionQueue(connection);
+      }
+    }, HEARTBEAT_INTERVAL_MS);
+    heartbeatTimer.unref?.();
+  };
+  const subscribeConnection = (connection, requestId, query) => {
+    if (subscriptions.size >= MAX_SUBSCRIPTIONS && connection.subscriptions.size === 0) {
+      sendError(connection, "\u5B9E\u65F6\u65E5\u5FD7\u8BA2\u9605\u6570\u5DF2\u8FBE\u4E0A\u9650\uFF0C\u8BF7\u7A0D\u540E\u91CD\u8BD5", requestId);
+      return;
+    }
+    let compiled;
+    try {
+      compiled = compileRealtimeQuery(query);
+    } catch (err) {
+      sendError(connection, err instanceof Error ? err.message : String(err), requestId);
+      return;
+    }
+    for (const subscriptionId2 of Array.from(connection.subscriptions)) {
+      removeSubscription(subscriptionId2, "replaced");
+    }
+    const subscriptionId = createId("sub");
+    const subscription = {
+      id: subscriptionId,
+      connectionId: connection.id,
+      query: compiled
+    };
+    subscriptions.set(subscriptionId, subscription);
+    connection.subscriptions.add(subscriptionId);
+    ensureTailSubscription();
+    sendMessage(connection, {
+      type: "subscribed",
+      requestId: requestId ?? null,
+      subscriptionId,
+      queryHash: compiled.queryHash,
+      now: new Date().toISOString()
+    });
+  };
+  const openConnection = (ws) => {
+    const data = ws.data;
+    const connection = {
+      id: data.connectionId,
+      remoteAddress: data.remoteAddress,
+      ws,
+      subscriptions: new Set,
+      queue: [],
+      pendingBytes: 0,
+      droppedOutbound: 0
+    };
+    connections.set(connection.id, connection);
+    ensureHeartbeat();
+    sendMessage(connection, {
+      type: "ready",
+      connectionId: connection.id,
+      now: new Date().toISOString()
+    });
+  };
+  const handleMessage = (ws, raw2) => {
+    const connection = connections.get(ws.data.connectionId);
+    if (!connection)
+      return;
+    let message;
+    try {
+      message = parseClientMessage(raw2);
+    } catch (err) {
+      sendError(connection, err instanceof Error ? err.message : String(err));
+      return;
+    }
+    if (message.type === "ping") {
+      sendMessage(connection, { type: "pong", ts: message.ts ?? new Date().toISOString() });
+      return;
+    }
+    if (message.type === "unsubscribe") {
+      if (message.subscriptionId) {
+        removeSubscription(message.subscriptionId, "client-unsubscribe");
+      } else {
+        for (const subscriptionId of Array.from(connection.subscriptions)) {
+          removeSubscription(subscriptionId, "client-unsubscribe");
+        }
+      }
+      return;
+    }
+    subscribeConnection(connection, message.requestId, message.query);
+  };
+  return {
+    pathname: WS_PATHNAME,
+    upgrade: (request, server, remoteAddress) => {
+      const url2 = new URL(request.url);
+      if (url2.pathname !== WS_PATHNAME)
+        return { handled: false };
+      const upgradeHeader = request.headers.get("upgrade")?.toLowerCase();
+      if (upgradeHeader !== "websocket") {
+        return {
+          handled: true,
+          response: jsonResponse(400, { error: "\u9700\u8981 WebSocket Upgrade" })
+        };
+      }
+      const decision = decideNetworkAccess(options.store.get().server, remoteAddress);
+      if (!decision.allowed) {
+        return {
+          handled: true,
+          response: jsonResponse(403, {
+            error: decision.reason === "lan-disabled" ? "\u5C40\u57DF\u7F51\u670D\u52A1\u672A\u5F00\u542F\uFF0C\u5DF2\u62D2\u7EDD\u975E\u672C\u673A\u8BF7\u6C42" : "\u4EC5\u5141\u8BB8\u672C\u673A\u6216\u5C40\u57DF\u7F51\u6765\u6E90\u8BBF\u95EE",
+            remoteAddress: decision.remoteAddress
+          })
+        };
+      }
+      if (connections.size >= MAX_CONNECTIONS) {
+        return {
+          handled: true,
+          response: jsonResponse(503, { error: "\u5B9E\u65F6\u65E5\u5FD7\u8FDE\u63A5\u6570\u5DF2\u8FBE\u4E0A\u9650\uFF0C\u8BF7\u7A0D\u540E\u91CD\u8BD5" })
+        };
+      }
+      const upgraded = server.upgrade(request, {
+        data: {
+          kind: "log-realtime",
+          connectionId: createId("conn"),
+          remoteAddress: decision.remoteAddress
+        }
+      });
+      return upgraded ? { handled: true, upgraded: true } : { handled: true, response: jsonResponse(400, { error: "WebSocket Upgrade \u5931\u8D25" }) };
+    },
+    websocket: {
+      open: openConnection,
+      message: handleMessage,
+      drain: (ws) => {
+        const connection = connections.get(ws.data.connectionId);
+        if (connection)
+          flushConnectionQueue(connection);
+      },
+      close: (ws) => {
+        removeConnection(ws.data.connectionId, "closed");
+      }
+    },
+    dispose: () => {
+      if (flushTimer) {
+        clearTimeout(flushTimer);
+        flushTimer = null;
+      }
+      if (heartbeatTimer) {
+        clearInterval(heartbeatTimer);
+        heartbeatTimer = null;
+      }
+      tailUnsubscribe?.();
+      tailUnsubscribe = null;
+      for (const connectionId of Array.from(connections.keys())) {
+        removeConnection(connectionId, "server-dispose");
+      }
+      eventQueue.length = 0;
+      eventQueueBytes = 0;
+      totalPendingBytes = 0;
+      droppedUpstreamEvents = 0;
+    }
+  };
+}
+
 // src/log-sessions.ts
-import { createReadStream as createReadStream4, existsSync as existsSync6 } from "fs";
-import { join as join6 } from "path";
+import { createReadStream as createReadStream4, existsSync as existsSync7 } from "fs";
+import { join as join8 } from "path";
 import { createInterface as createInterface3 } from "readline";
 var MAX_LINES_SCANNED3 = 250000;
-var MAX_Q_LENGTH2 = 200;
+var MAX_Q_LENGTH3 = 200;
 function toDayStart4(ms) {
   const date5 = new Date(ms);
   return Date.UTC(date5.getUTCFullYear(), date5.getUTCMonth(), date5.getUTCDate());
@@ -54427,7 +55316,7 @@ function normalizeInput(input) {
     toMs: input.toMs,
     users: (input.users ?? []).map((item) => item.trim()).filter(Boolean),
     sessions: (input.sessions ?? []).map((item) => item.trim()).filter(Boolean),
-    q: qRaw.length > MAX_Q_LENGTH2 ? qRaw.slice(0, MAX_Q_LENGTH2) : qRaw
+    q: qRaw.length > MAX_Q_LENGTH3 ? qRaw.slice(0, MAX_Q_LENGTH3) : qRaw
   };
 }
 function incrementCount(map2, key2) {
@@ -54526,8 +55415,8 @@ async function queryLogSessions(context2, input) {
     return createEmptyResult(normalized.fromMs, normalized.toMs);
   }
   const baseDir = resolveLogBaseDir(context2.logConfig);
-  const eventsDir = join6(baseDir, "events");
-  if (!existsSync6(eventsDir)) {
+  const eventsDir = join8(baseDir, "events");
+  if (!existsSync7(eventsDir)) {
     return createEmptyResult(normalized.fromMs, normalized.toMs);
   }
   const usersMap = new Map;
@@ -54545,8 +55434,8 @@ async function queryLogSessions(context2, input) {
       truncated = true;
       break;
     }
-    const filePath = join6(eventsDir, `${date5}.jsonl`);
-    if (!existsSync6(filePath))
+    const filePath = join8(eventsDir, `${date5}.jsonl`);
+    if (!existsSync7(filePath))
       continue;
     scannedFiles += 1;
     const stream = createReadStream4(filePath, { encoding: "utf-8" });
@@ -54654,8 +55543,8 @@ async function queryLogSessions(context2, input) {
 }
 
 // src/log-storage.ts
-import { existsSync as existsSync7, promises as fsPromises } from "fs";
-import { join as join7 } from "path";
+import { existsSync as existsSync8, promises as fsPromises } from "fs";
+import { join as join9 } from "path";
 var cachedStorage = null;
 var calculationPromise = null;
 var lastCalculationTime = 0;
@@ -54663,7 +55552,7 @@ var CACHE_TTL_MS2 = 60 * 60 * 1000;
 var CALCULATION_INTERVAL_MS = 60 * 60 * 1000;
 var MIN_CALCULATION_INTERVAL_MS = 5 * 60 * 1000;
 async function calculateDirSize(dirPath) {
-  if (!existsSync7(dirPath)) {
+  if (!existsSync8(dirPath)) {
     return { bytes: 0, fileCount: 0 };
   }
   let bytes = 0;
@@ -54672,7 +55561,7 @@ async function calculateDirSize(dirPath) {
     try {
       const entries = await fsPromises.readdir(currentPath, { withFileTypes: true });
       for (const entry of entries) {
-        const fullPath = join7(currentPath, entry.name);
+        const fullPath = join9(currentPath, entry.name);
         if (entry.isDirectory()) {
           await walk(fullPath);
         } else if (entry.isFile()) {
@@ -54703,8 +55592,8 @@ async function doCalculateStorage(logConfig) {
   }
   const baseDir = resolveLogBaseDir(logConfig);
   const [eventsResult, streamsResult] = await Promise.all([
-    calculateDirSize(join7(baseDir, "events")),
-    calculateDirSize(join7(baseDir, "streams"))
+    calculateDirSize(join9(baseDir, "events")),
+    calculateDirSize(join9(baseDir, "streams"))
   ]);
   const indexResult = await calculateIndexSize(baseDir);
   return {
@@ -54718,7 +55607,7 @@ async function doCalculateStorage(logConfig) {
   };
 }
 async function calculateIndexSize(baseDir) {
-  if (!existsSync7(baseDir)) {
+  if (!existsSync8(baseDir)) {
     return { bytes: 0, fileCount: 0 };
   }
   let bytes = 0;
@@ -54728,7 +55617,7 @@ async function calculateIndexSize(baseDir) {
     for (const entry of entries) {
       if (!entry.isFile() || !entry.name.startsWith("logs-index.sqlite"))
         continue;
-      const stats = await fsPromises.stat(join7(baseDir, entry.name));
+      const stats = await fsPromises.stat(join9(baseDir, entry.name));
       bytes += stats.size;
       fileCount += 1;
     }
@@ -54779,33 +55668,17 @@ function startLogStorageBackgroundTask(logConfig) {
   };
 }
 
-// src/log-tail.ts
-var subscribers = new Set;
-function publishLogEvent(event) {
-  for (const subscriber of subscribers) {
-    try {
-      subscriber(event);
-    } catch {}
-  }
-}
-function subscribeLogEvents(subscriber) {
-  subscribers.add(subscriber);
-  return () => {
-    subscribers.delete(subscriber);
-  };
-}
-
 // src/logger.ts
 import {
   appendFileSync,
   closeSync as closeSync2,
-  existsSync as existsSync8,
-  mkdirSync as mkdirSync3,
+  existsSync as existsSync9,
+  mkdirSync as mkdirSync4,
   openSync as openSync2,
   statSync as statSync3,
   writeSync
 } from "fs";
-import { join as join8 } from "path";
+import { join as join10 } from "path";
 class Logger {
   baseDir;
   eventsDir;
@@ -54820,8 +55693,8 @@ class Logger {
     this._bodyPolicy = config2.bodyPolicy ?? "off";
     this._streamsEnabled = config2.streams?.enabled !== false;
     this.maxStreamBytes = config2.streams?.maxBytesPerRequest ?? 10 * 1024 * 1024;
-    this.eventsDir = join8(baseDir, "events");
-    this.streamsDir = join8(baseDir, "streams");
+    this.eventsDir = join10(baseDir, "events");
+    this.streamsDir = join10(baseDir, "streams");
     if (this._enabled)
       this.ensureDirs();
   }
@@ -54833,14 +55706,14 @@ class Logger {
   }
   ensureDirs() {
     for (const dir of [this.baseDir, this.eventsDir, this.streamsDir]) {
-      if (!existsSync8(dir))
-        mkdirSync3(dir, { recursive: true });
+      if (!existsSync9(dir))
+        mkdirSync4(dir, { recursive: true });
     }
   }
   ensureStreamDateDir(dateStr) {
-    const dir = join8(this.streamsDir, dateStr);
-    if (!existsSync8(dir))
-      mkdirSync3(dir, { recursive: true });
+    const dir = join10(this.streamsDir, dateStr);
+    if (!existsSync9(dir))
+      mkdirSync4(dir, { recursive: true });
     return dir;
   }
   writeEvent(event) {
@@ -54850,8 +55723,8 @@ class Logger {
       const enrichedEvent = enrichLogEventTokenUsage(event, { baseDir: this.baseDir });
       this.ensureDirs();
       const dateStr = enrichedEvent.ts_start.slice(0, 10);
-      const filePath = join8(this.eventsDir, `${dateStr}.jsonl`);
-      const offset = existsSync8(filePath) ? statSync3(filePath).size : 0;
+      const filePath = join10(this.eventsDir, `${dateStr}.jsonl`);
+      const offset = existsSync9(filePath) ? statSync3(filePath).size : 0;
       const line2 = `${JSON.stringify(enrichedEvent)}
 `;
       appendFileSync(filePath, line2);
@@ -54880,7 +55753,7 @@ class Logger {
     let fd;
     try {
       const dir = this.ensureStreamDateDir(dateStr);
-      filePath = join8(dir, `${requestId}.sse.raw`);
+      filePath = join10(dir, `${requestId}.sse.raw`);
       fd = openSync2(filePath, "a");
     } catch (err) {
       console.error("[logger] \u6D41\u5F0F\u65E5\u5FD7\u6253\u5F00\u5931\u8D25:", err);
@@ -54970,85 +55843,6 @@ function normalizeUrl(rawUrl) {
   return rawUrl;
 }
 
-// src/network-access.ts
-var REMOTE_ADDRESS_ENV_KEY = "LOCAL_ROUTER_REMOTE_ADDRESS";
-function parseIpv4(address) {
-  const parts = address.split(".");
-  if (parts.length !== 4)
-    return null;
-  const octets = parts.map((part) => {
-    if (!/^\d{1,3}$/.test(part))
-      return Number.NaN;
-    const value = Number.parseInt(part, 10);
-    return value >= 0 && value <= 255 ? value : Number.NaN;
-  });
-  return octets.every(Number.isFinite) ? octets : null;
-}
-function normalizeIpAddress(raw2) {
-  let address = raw2.trim().toLowerCase();
-  if (address.startsWith("[")) {
-    const end = address.indexOf("]");
-    if (end !== -1)
-      address = address.slice(1, end);
-  }
-  const mappedIpv4 = address.match(/^::ffff:(\d{1,3}(?:\.\d{1,3}){3})$/);
-  if (mappedIpv4) {
-    return mappedIpv4[1];
-  }
-  return address;
-}
-function isLoopbackAddress(raw2) {
-  if (!raw2)
-    return false;
-  const address = normalizeIpAddress(raw2);
-  const ipv43 = parseIpv4(address);
-  if (ipv43)
-    return ipv43[0] === 127;
-  return address === "::1";
-}
-function isLanAddress(raw2) {
-  if (!raw2)
-    return false;
-  const address = normalizeIpAddress(raw2);
-  const ipv43 = parseIpv4(address);
-  if (ipv43) {
-    const [a, b] = ipv43;
-    return a === 10 || a === 172 && b >= 16 && b <= 31 || a === 192 && b === 168 || a === 169 && b === 254;
-  }
-  return address.startsWith("fc") || address.startsWith("fd") || /^fe[89ab]/.test(address);
-}
-function decideNetworkAccess(serverConfig, rawRemoteAddress) {
-  const remoteAddress = rawRemoteAddress ? normalizeIpAddress(rawRemoteAddress) : null;
-  if (!remoteAddress || isLoopbackAddress(remoteAddress)) {
-    return { allowed: true, remoteAddress };
-  }
-  const lanEnabled = serverConfig?.lanAccess?.enabled === true;
-  if (!lanEnabled) {
-    return { allowed: false, remoteAddress, reason: "lan-disabled" };
-  }
-  if (!isLanAddress(remoteAddress)) {
-    return { allowed: false, remoteAddress, reason: "non-lan-address" };
-  }
-  return { allowed: true, remoteAddress };
-}
-function getRemoteAddressFromContext(c2) {
-  const env = c2.env;
-  const value = env?.[REMOTE_ADDRESS_ENV_KEY];
-  return typeof value === "string" && value.trim() ? value : null;
-}
-function createNetworkAccessMiddleware(store) {
-  return async (c2, next) => {
-    const decision = decideNetworkAccess(store.get().server, getRemoteAddressFromContext(c2));
-    if (!decision.allowed) {
-      return c2.json({
-        error: decision.reason === "lan-disabled" ? "\u5C40\u57DF\u7F51\u670D\u52A1\u672A\u5F00\u542F\uFF0C\u5DF2\u62D2\u7EDD\u975E\u672C\u673A\u8BF7\u6C42" : "\u4EC5\u5141\u8BB8\u672C\u673A\u6216\u5C40\u57DF\u7F51\u6765\u6E90\u8BBF\u95EE",
-        remoteAddress: decision.remoteAddress
-      }, 403);
-    }
-    await next();
-  };
-}
-
 // src/openapi.ts
 var openAPISpec = {
   openapi: "3.0.0",
@@ -56155,7 +56949,7 @@ var openAPISpec = {
 // src/plugin-loader.ts
 import { mkdtemp, rm, writeFile } from "fs/promises";
 import { tmpdir } from "os";
-import { join as join9, resolve as resolve6 } from "path";
+import { join as join11, resolve as resolve7 } from "path";
 function isLocalPath(pkg) {
   return pkg.startsWith("./") || pkg.startsWith("../") || pkg.startsWith("/") || /^[A-Za-z]:[\\/]/.test(pkg);
 }
@@ -56178,7 +56972,7 @@ var remoteTmpDir = null;
 var remoteTmpFiles = [];
 async function ensureRemoteTmpDir() {
   if (!remoteTmpDir) {
-    remoteTmpDir = await mkdtemp(join9(tmpdir(), "local-router-plugins-"));
+    remoteTmpDir = await mkdtemp(join11(tmpdir(), "local-router-plugins-"));
   }
   return remoteTmpDir;
 }
@@ -56191,7 +56985,7 @@ async function fetchRemotePlugin(url2) {
   const ext = inferExtension(url2, response.headers.get("content-type"));
   const dir = await ensureRemoteTmpDir();
   const fileName = `plugin_${Date.now()}_${Math.random().toString(36).slice(2, 8)}${ext}`;
-  const filePath = join9(dir, fileName);
+  const filePath = join11(dir, fileName);
   await writeFile(filePath, content, "utf-8");
   remoteTmpFiles.push(filePath);
   return filePath;
@@ -56211,7 +57005,7 @@ async function importPlugin(pkg, configDir) {
     const localPath = await fetchRemotePlugin(pkg);
     modulePath = `${localPath}?t=${Date.now()}`;
   } else if (isLocalPath(pkg)) {
-    const absolutePath = resolve6(configDir, pkg);
+    const absolutePath = resolve7(configDir, pkg);
     modulePath = `${absolutePath}?t=${Date.now()}`;
   } else {
     modulePath = pkg;
@@ -56985,7 +57779,7 @@ function createAdminApiRoutes(store, pluginManager, registerCleanup) {
   const CRYPTO_SESSION_TTL_MS = 2 * 60 * 1000;
   const CRYPTO_SESSION_MAX = 512;
   const schemaPath = getBundledSchemaPath();
-  const schemaJson = JSON.parse(readFileSync5(schemaPath, "utf-8"));
+  const schemaJson = JSON.parse(readFileSync6(schemaPath, "utf-8"));
   const pruneExpiredCryptoSessions = (now2 = Date.now()) => {
     for (const [id, record2] of Array.from(cryptoSessions.entries())) {
       if (now2 - record2.createdAt > CRYPTO_SESSION_TTL_MS) {
@@ -57125,6 +57919,45 @@ function createAdminApiRoutes(store, pluginManager, registerCleanup) {
       return c2.json({ error: `\u8BFB\u53D6\u914D\u7F6E schema \u5931\u8D25: ${err instanceof Error ? err.message : err}` }, 500);
     }
   });
+  api2.get("/autostart", async (c2) => {
+    try {
+      const manager = createAutostartManager();
+      const systemInstalled = await manager.isInstalled();
+      const config2 = store.get();
+      return c2.json({
+        enabled: config2.server?.autostart ?? false,
+        systemInstalled,
+        platform: manager.platform,
+        servicePath: manager.getServicePath()
+      });
+    } catch (err) {
+      return c2.json({ error: err instanceof Error ? err.message : String(err) }, 500);
+    }
+  });
+  api2.put("/autostart", async (c2) => {
+    try {
+      const { enabled } = await c2.req.json();
+      if (typeof enabled !== "boolean") {
+        return c2.json({ error: "enabled \u5FC5\u987B\u662F\u5E03\u5C14\u503C" }, 400);
+      }
+      const manager = createAutostartManager();
+      if (manager.platform === "unsupported") {
+        return c2.json({ error: "\u5F53\u524D\u5E73\u53F0\u4E0D\u652F\u6301\u81EA\u542F\u52A8" }, 400);
+      }
+      if (enabled) {
+        const { execPath, args } = getAutostartExecArgs();
+        await manager.install({ execPath, args, label: "com.lakphy.local-router" });
+      } else {
+        await manager.uninstall();
+      }
+      const config2 = store.get();
+      const updated = { ...config2, server: { ...config2.server, autostart: enabled } };
+      store.save(updated);
+      return c2.json({ ok: true, enabled });
+    } catch (err) {
+      return c2.json({ error: err instanceof Error ? err.message : String(err) }, 500);
+    }
+  });
   api2.post("/chat/proxy", async (c2) => {
     let body;
     try {
@@ -57590,7 +58423,7 @@ async function createApp(store, options) {
   }
   const stopLogStorageTask = startLogStorageBackgroundTask(config2.log);
   options?.registerCleanup?.(stopLogStorageTask);
-  const configDir = dirname2(resolve7(store.getPath()));
+  const configDir = dirname3(resolve8(store.getPath()));
   const pluginManager = new PluginManager(configDir);
   const reloadResult = await pluginManager.reloadAll(config2.providers);
   if (!reloadResult.ok) {
@@ -57637,28 +58470,56 @@ async function createApp(store, options) {
   }
   return app;
 }
-async function createDefaultAppFromProcessArgs() {
-  const configPath = parseConfigPath();
+async function createAppRuntimeFromConfigPath(configPath, listen) {
   const store = new ConfigStore(configPath);
-  return createApp(store, {
-    listen: {
-      host: process.env.HOST ?? "0.0.0.0",
-      port: Number.parseInt(process.env.PORT ?? "4099", 10)
+  const cleanups = [];
+  const app = await createApp(store, {
+    listen,
+    registerCleanup: (cleanup) => {
+      cleanups.push(cleanup);
     }
   });
+  const logRealtime = createLogRealtimeRuntime({ store });
+  return {
+    app,
+    logRealtime,
+    dispose: () => {
+      logRealtime.dispose();
+      for (const cleanup of cleanups.reverse()) {
+        try {
+          cleanup();
+        } catch {}
+      }
+    }
+  };
+}
+async function createDefaultAppRuntimeFromProcessArgs() {
+  const configPath = parseConfigPath();
+  return createAppRuntimeFromConfigPath(configPath, {
+    host: process.env.HOST ?? "0.0.0.0",
+    port: Number.parseInt(process.env.PORT ?? "4099", 10)
+  });
 }
 
 // src/entry.ts
-var app = await createDefaultAppFromProcessArgs();
+var runtime = await createDefaultAppRuntimeFromProcessArgs();
 var entry_default = {
   hostname: process.env.HOST ?? "0.0.0.0",
   port: Number.parseInt(process.env.PORT ?? "4099", 10),
   fetch(request, server) {
     const remoteAddress = server.requestIP(request)?.address ?? null;
-    return app.fetch(request, {
+    const realtimeUpgrade = runtime.logRealtime.upgrade(request, server, remoteAddress);
+    if (realtimeUpgrade.handled) {
+      if (realtimeUpgrade.upgraded) {
+        return;
+      }
+      return realtimeUpgrade.response ?? new Response("WebSocket Upgrade failed", { status: 400 });
+    }
+    return runtime.app.fetch(request, {
       [REMOTE_ADDRESS_ENV_KEY]: remoteAddress
     });
-  }
+  },
+  websocket: runtime.logRealtime.websocket
 };
 export {
   entry_default as default