@undefineds.co/xpod 0.1.0-local.202602081751

package/dist/ai/service/ProviderRegistry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ProviderRegistry.js","sourceRoot":"","sources":["../../../src/ai/service/ProviderRegistry.ts"],"names":[],"mappings":";;;AAoBA;;GAEG;AACH,MAAsB,gBAAgB;CAIrC;AAJD,4CAIC","sourcesContent":["/**\n * Embedding 模型信息\n */\nexport interface EmbeddingModelInfo {\n  id: string;\n  dimension: number;\n  maxTokens?: number;\n}\n\n/**\n * 供应商信息\n */\nexport interface ProviderInfo {\n  id: string;\n  name: string;\n  baseUrl: string;\n  proxyUrl?: string;\n  embeddingModels: EmbeddingModelInfo[];\n}\n\n/**\n * 供应商注册表抽象基类\n */\nexport abstract class ProviderRegistry {\n  abstract listProviders(): Promise<ProviderInfo[]>;\n  abstract getProvider(providerId: string): Promise<ProviderInfo | null>;\n  abstract getModelDimension(providerId: string, modelId: string): Promise<number | null>;\n}\n"]}

package/dist/ai/service/ProviderRegistryImpl.d.ts

@@ -0,0 +1,14 @@
+/**
+ * Provider Registry 实现
+ *
+ * 管理 embedding 供应商和模型元信息
+ */
+import { ProviderRegistry } from './ProviderRegistry';
+import type { ProviderInfo } from './ProviderRegistry';
+export declare class ProviderRegistryImpl extends ProviderRegistry {
+    private providers;
+    constructor();
+    listProviders(): Promise<ProviderInfo[]>;
+    getProvider(providerId: string): Promise<ProviderInfo | null>;
+    getModelDimension(providerId: string, modelId: string): Promise<number | null>;
+}

package/dist/ai/service/ProviderRegistryImpl.js

@@ -0,0 +1,112 @@
+"use strict";
+/**
+ * Provider Registry 实现
+ *
+ * 管理 embedding 供应商和模型元信息
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ProviderRegistryImpl = void 0;
+const ProviderRegistry_1 = require("./ProviderRegistry");
+/**
+ * 默认供应商配置
+ */
+const DEFAULT_PROVIDERS = [
+    {
+        id: 'openai',
+        name: 'OpenAI',
+        baseUrl: 'https://api.openai.com/v1',
+        embeddingModels: [
+            { id: 'text-embedding-3-small', dimension: 1536 },
+            { id: 'text-embedding-3-large', dimension: 3072 },
+            { id: 'text-embedding-ada-002', dimension: 1536 },
+        ],
+    },
+    {
+        id: 'google',
+        name: 'Google',
+        baseUrl: 'https://generativelanguage.googleapis.com/v1beta/openai',
+        embeddingModels: [
+            { id: 'text-embedding-004', dimension: 768 },
+            { id: 'embedding-001', dimension: 768 },
+        ],
+    },
+    {
+        id: 'mistral',
+        name: 'Mistral',
+        baseUrl: 'https://api.mistral.ai/v1',
+        embeddingModels: [{ id: 'mistral-embed', dimension: 1024 }],
+    },
+    {
+        id: 'cohere',
+        name: 'Cohere',
+        baseUrl: 'https://api.cohere.ai/v1',
+        embeddingModels: [
+            { id: 'embed-english-v3.0', dimension: 1024 },
+            { id: 'embed-multilingual-v3.0', dimension: 1024 },
+            { id: 'embed-english-light-v3.0', dimension: 384 },
+            { id: 'embed-multilingual-light-v3.0', dimension: 384 },
+        ],
+    },
+    {
+        id: 'voyage',
+        name: 'Voyage AI',
+        baseUrl: 'https://api.voyageai.com/v1',
+        embeddingModels: [
+            { id: 'voyage-3', dimension: 1024 },
+            { id: 'voyage-3-lite', dimension: 512 },
+            { id: 'voyage-code-3', dimension: 1024 },
+        ],
+    },
+    {
+        id: 'zhipu',
+        name: '智谱 AI',
+        baseUrl: 'https://open.bigmodel.cn/api/paas/v4',
+        embeddingModels: [{ id: 'embedding-2', dimension: 1024 }],
+    },
+    {
+        id: 'deepseek',
+        name: 'DeepSeek',
+        baseUrl: 'https://api.deepseek.com/v1',
+        embeddingModels: [],
+    },
+    {
+        id: 'ollama',
+        name: 'Ollama',
+        baseUrl: 'http://localhost:11434/v1',
+        embeddingModels: [
+            { id: 'nomic-embed-text', dimension: 768 },
+            { id: 'mxbai-embed-large', dimension: 1024 },
+            { id: 'all-minilm', dimension: 384 },
+        ],
+    },
+    {
+        id: 'openrouter',
+        name: 'OpenRouter',
+        baseUrl: 'https://openrouter.ai/api/v1',
+        embeddingModels: [],
+    },
+];
+class ProviderRegistryImpl extends ProviderRegistry_1.ProviderRegistry {
+    constructor() {
+        super();
+        this.providers = new Map();
+        for (const provider of DEFAULT_PROVIDERS) {
+            this.providers.set(provider.id, provider);
+        }
+    }
+    async listProviders() {
+        return Array.from(this.providers.values());
+    }
+    async getProvider(providerId) {
+        return this.providers.get(providerId) ?? null;
+    }
+    async getModelDimension(providerId, modelId) {
+        const provider = this.providers.get(providerId);
+        if (!provider)
+            return null;
+        const model = provider.embeddingModels.find((m) => m.id === modelId);
+        return model?.dimension ?? null;
+    }
+}
+exports.ProviderRegistryImpl = ProviderRegistryImpl;
+//# sourceMappingURL=ProviderRegistryImpl.js.map

package/dist/ai/service/ProviderRegistryImpl.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ProviderRegistryImpl.js","sourceRoot":"","sources":["../../../src/ai/service/ProviderRegistryImpl.ts"],"names":[],"mappings":";AAAA;;;;GAIG;;;AAEH,yDAAsD;AAGtD;;GAEG;AACH,MAAM,iBAAiB,GAAmB;IACxC;QACE,EAAE,EAAE,QAAQ;QACZ,IAAI,EAAE,QAAQ;QACd,OAAO,EAAE,2BAA2B;QACpC,eAAe,EAAE;YACf,EAAE,EAAE,EAAE,wBAAwB,EAAE,SAAS,EAAE,IAAI,EAAE;YACjD,EAAE,EAAE,EAAE,wBAAwB,EAAE,SAAS,EAAE,IAAI,EAAE;YACjD,EAAE,EAAE,EAAE,wBAAwB,EAAE,SAAS,EAAE,IAAI,EAAE;SAClD;KACF;IACD;QACE,EAAE,EAAE,QAAQ;QACZ,IAAI,EAAE,QAAQ;QACd,OAAO,EAAE,yDAAyD;QAClE,eAAe,EAAE;YACf,EAAE,EAAE,EAAE,oBAAoB,EAAE,SAAS,EAAE,GAAG,EAAE;YAC5C,EAAE,EAAE,EAAE,eAAe,EAAE,SAAS,EAAE,GAAG,EAAE;SACxC;KACF;IACD;QACE,EAAE,EAAE,SAAS;QACb,IAAI,EAAE,SAAS;QACf,OAAO,EAAE,2BAA2B;QACpC,eAAe,EAAE,CAAC,EAAE,EAAE,EAAE,eAAe,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;KAC5D;IACD;QACE,EAAE,EAAE,QAAQ;QACZ,IAAI,EAAE,QAAQ;QACd,OAAO,EAAE,0BAA0B;QACnC,eAAe,EAAE;YACf,EAAE,EAAE,EAAE,oBAAoB,EAAE,SAAS,EAAE,IAAI,EAAE;YAC7C,EAAE,EAAE,EAAE,yBAAyB,EAAE,SAAS,EAAE,IAAI,EAAE;YAClD,EAAE,EAAE,EAAE,0BAA0B,EAAE,SAAS,EAAE,GAAG,EAAE;YAClD,EAAE,EAAE,EAAE,+BAA+B,EAAE,SAAS,EAAE,GAAG,EAAE;SACxD;KACF;IACD;QACE,EAAE,EAAE,QAAQ;QACZ,IAAI,EAAE,WAAW;QACjB,OAAO,EAAE,6BAA6B;QACtC,eAAe,EAAE;YACf,EAAE,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE,IAAI,EAAE;YACnC,EAAE,EAAE,EAAE,eAAe,EAAE,SAAS,EAAE,GAAG,EAAE;YACvC,EAAE,EAAE,EAAE,eAAe,EAAE,SAAS,EAAE,IAAI,EAAE;SACzC;KACF;IACD;QACE,EAAE,EAAE,OAAO;QACX,IAAI,EAAE,OAAO;QACb,OAAO,EAAE,sCAAsC;QAC/C,eAAe,EAAE,CAAC,EAAE,EAAE,EAAE,aAAa,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;KAC1D;IACD;QACE,EAAE,EAAE,UAAU;QACd,IAAI,EAAE,UAAU;QAChB,OAAO,EAAE,6BAA6B;QACtC,eAAe,EAAE,EAAE;KACpB;IACD;QACE,EAAE,EAAE,QAAQ;QACZ,IAAI,EAAE,QAAQ;QACd,OAAO,EAAE,2BAA2B;QACpC,eAAe,EAAE;YACf,EAAE,EAAE,EAAE,kBAAkB,EAAE,SAAS,EAAE,GAAG,EAAE;YAC1C,EAAE,EAAE,EAAE,mBAAmB,EAAE,SAAS,EAAE,IAAI,EAAE;YAC5C,EAAE,EAAE,EAAE,YAAY,EAAE,SAAS,EAAE,GAAG,EAAE;SACrC;KACF;IACD;QACE,EAAE,EAAE,YAAY;QAChB,IAAI,EAAE,YAAY;QAClB,OAAO,EAAE,8BAA8B;QACvC,eAAe,EAAE,EAAE;KACpB;CACF,CAAC;AAEF,MAAa,oBAAqB,SAAQ,mCAAgB;IAGxD;QACE,KAAK,EAAE,CAAC;QACR,IAAI,CAAC,SAAS,GAAG,IAAI,GAAG,EAAE,CAAC;QAC3B,KAAK,MAAM,QAAQ,IAAI,iBAAiB,EAAE,CAAC;YACzC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;QAC5C,CAAC;IACH,CAAC;IAEe,KAAK,CAAC,aAAa;QACjC,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC;IAC7C,CAAC;IAEe,KAAK,CAAC,WAAW,CAAC,UAAkB;QAClD,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,IAAI,CAAC;IAChD,CAAC;IAEe,KAAK,CAAC,iBAAiB,CAAC,UAAkB,EAAE,OAAe;QACzE,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAChD,IAAI,CAAC,QAAQ;YAAE,OAAO,IAAI,CAAC;QAE3B,MAAM,KAAK,GAAG,QAAQ,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,OAAO,CAAC,CAAC;QACrE,OAAO,KAAK,EAAE,SAAS,IAAI,IAAI,CAAC;IAClC,CAAC;CACF;AA1BD,oDA0BC","sourcesContent":["/**\n * Provider Registry 实现\n *\n * 管理 embedding 供应商和模型元信息\n */\n\nimport { ProviderRegistry } from './ProviderRegistry';\nimport type { ProviderInfo } from './ProviderRegistry';\n\n/**\n * 默认供应商配置\n */\nconst DEFAULT_PROVIDERS: ProviderInfo[] = [\n  {\n    id: 'openai',\n    name: 'OpenAI',\n    baseUrl: 'https://api.openai.com/v1',\n    embeddingModels: [\n      { id: 'text-embedding-3-small', dimension: 1536 },\n      { id: 'text-embedding-3-large', dimension: 3072 },\n      { id: 'text-embedding-ada-002', dimension: 1536 },\n    ],\n  },\n  {\n    id: 'google',\n    name: 'Google',\n    baseUrl: 'https://generativelanguage.googleapis.com/v1beta/openai',\n    embeddingModels: [\n      { id: 'text-embedding-004', dimension: 768 },\n      { id: 'embedding-001', dimension: 768 },\n    ],\n  },\n  {\n    id: 'mistral',\n    name: 'Mistral',\n    baseUrl: 'https://api.mistral.ai/v1',\n    embeddingModels: [{ id: 'mistral-embed', dimension: 1024 }],\n  },\n  {\n    id: 'cohere',\n    name: 'Cohere',\n    baseUrl: 'https://api.cohere.ai/v1',\n    embeddingModels: [\n      { id: 'embed-english-v3.0', dimension: 1024 },\n      { id: 'embed-multilingual-v3.0', dimension: 1024 },\n      { id: 'embed-english-light-v3.0', dimension: 384 },\n      { id: 'embed-multilingual-light-v3.0', dimension: 384 },\n    ],\n  },\n  {\n    id: 'voyage',\n    name: 'Voyage AI',\n    baseUrl: 'https://api.voyageai.com/v1',\n    embeddingModels: [\n      { id: 'voyage-3', dimension: 1024 },\n      { id: 'voyage-3-lite', dimension: 512 },\n      { id: 'voyage-code-3', dimension: 1024 },\n    ],\n  },\n  {\n    id: 'zhipu',\n    name: '智谱 AI',\n    baseUrl: 'https://open.bigmodel.cn/api/paas/v4',\n    embeddingModels: [{ id: 'embedding-2', dimension: 1024 }],\n  },\n  {\n    id: 'deepseek',\n    name: 'DeepSeek',\n    baseUrl: 'https://api.deepseek.com/v1',\n    embeddingModels: [],\n  },\n  {\n    id: 'ollama',\n    name: 'Ollama',\n    baseUrl: 'http://localhost:11434/v1',\n    embeddingModels: [\n      { id: 'nomic-embed-text', dimension: 768 },\n      { id: 'mxbai-embed-large', dimension: 1024 },\n      { id: 'all-minilm', dimension: 384 },\n    ],\n  },\n  {\n    id: 'openrouter',\n    name: 'OpenRouter',\n    baseUrl: 'https://openrouter.ai/api/v1',\n    embeddingModels: [],\n  },\n];\n\nexport class ProviderRegistryImpl extends ProviderRegistry {\n  private providers: Map<string, ProviderInfo>;\n\n  constructor() {\n    super();\n    this.providers = new Map();\n    for (const provider of DEFAULT_PROVIDERS) {\n      this.providers.set(provider.id, provider);\n    }\n  }\n\n  public override async listProviders(): Promise<ProviderInfo[]> {\n    return Array.from(this.providers.values());\n  }\n\n  public override async getProvider(providerId: string): Promise<ProviderInfo | null> {\n    return this.providers.get(providerId) ?? null;\n  }\n\n  public override async getModelDimension(providerId: string, modelId: string): Promise<number | null> {\n    const provider = this.providers.get(providerId);\n    if (!provider) return null;\n\n    const model = provider.embeddingModels.find((m) => m.id === modelId);\n    return model?.dimension ?? null;\n  }\n}\n"]}

package/dist/ai/service/index.d.ts

@@ -0,0 +1,10 @@
+/**
+ * AI Service exports
+ */
+export * from './types';
+export * from './EmbeddingService';
+export * from './EmbeddingServiceImpl';
+export * from './CredentialReader';
+export * from './CredentialReaderImpl';
+export * from './ProviderRegistry';
+export * from './ProviderRegistryImpl';

package/dist/ai/service/index.js

@@ -0,0 +1,29 @@
+"use strict";
+/**
+ * AI Service exports
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+// Types
+__exportStar(require("./types"), exports);
+// Services
+__exportStar(require("./EmbeddingService"), exports);
+__exportStar(require("./EmbeddingServiceImpl"), exports);
+__exportStar(require("./CredentialReader"), exports);
+__exportStar(require("./CredentialReaderImpl"), exports);
+__exportStar(require("./ProviderRegistry"), exports);
+__exportStar(require("./ProviderRegistryImpl"), exports);
+//# sourceMappingURL=index.js.map

package/dist/ai/service/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/ai/service/index.ts"],"names":[],"mappings":";AAAA;;GAEG;;;;;;;;;;;;;;;;AAEH,QAAQ;AACR,0CAAwB;AAExB,WAAW;AACX,qDAAmC;AACnC,yDAAuC;AACvC,qDAAmC;AACnC,yDAAuC;AACvC,qDAAmC;AACnC,yDAAuC","sourcesContent":["/**\n * AI Service exports\n */\n\n// Types\nexport * from './types';\n\n// Services\nexport * from './EmbeddingService';\nexport * from './EmbeddingServiceImpl';\nexport * from './CredentialReader';\nexport * from './CredentialReaderImpl';\nexport * from './ProviderRegistry';\nexport * from './ProviderRegistryImpl';\n"]}

package/dist/ai/service/types.d.ts

@@ -0,0 +1,12 @@
+/**
+ * AI Service 类型定义
+ */
+/**
+ * AI 凭据
+ */
+export interface AiCredential {
+    provider: string;
+    apiKey: string;
+    baseUrl?: string;
+    proxyUrl?: string;
+}

package/dist/ai/service/types.js

@@ -0,0 +1,6 @@
+"use strict";
+/**
+ * AI Service 类型定义
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=types.js.map

package/dist/ai/service/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/ai/service/types.ts"],"names":[],"mappings":";AAAA;;GAEG","sourcesContent":["/**\n * AI Service 类型定义\n */\n\n/**\n * AI 凭据\n */\nexport interface AiCredential {\n  provider: string;\n  apiKey: string;\n  baseUrl?: string;\n  proxyUrl?: string;\n}\n"]}

package/dist/api/ApiServer.d.ts

@@ -0,0 +1,77 @@
+import { type Server, type ServerResponse } from 'node:http';
+import type { AuthMiddleware, AuthenticatedRequest } from './middleware/AuthMiddleware';
+/**
+ * Route handler function
+ */
+export type RouteHandler = (request: AuthenticatedRequest, response: ServerResponse, params: Record<string, string>) => Promise<void>;
+/**
+ * Route definition
+ */
+export interface Route {
+    method: string;
+    pattern: RegExp;
+    paramNames: string[];
+    handler: RouteHandler;
+    /** If true, skip authentication */
+    public?: boolean;
+}
+export interface ApiServerOptions {
+    port: number;
+    host?: string;
+    authMiddleware: AuthMiddleware;
+    corsOrigins?: string[];
+}
+/**
+ * Standalone API Server
+ */
+export declare class ApiServer {
+    private readonly logger;
+    private readonly port;
+    private readonly host;
+    private readonly authMiddleware;
+    private readonly corsOrigins;
+    private readonly routes;
+    private server?;
+    constructor(options: ApiServerOptions);
+    /**
+     * Register a route
+     */
+    route(method: string, path: string, handler: RouteHandler, options?: {
+        /** If true, skip authentication for this route */
+        public?: boolean;
+    }): void;
+    /**
+     * Convenience methods for common HTTP methods
+     */
+    get(path: string, handler: RouteHandler, options?: {
+        public?: boolean;
+    }): void;
+    post(path: string, handler: RouteHandler, options?: {
+        public?: boolean;
+    }): void;
+    put(path: string, handler: RouteHandler, options?: {
+        public?: boolean;
+    }): void;
+    delete(path: string, handler: RouteHandler, options?: {
+        public?: boolean;
+    }): void;
+    patch(path: string, handler: RouteHandler, options?: {
+        public?: boolean;
+    }): void;
+    /**
+     * Start the server
+     */
+    start(): Promise<void>;
+    /**
+     * Stop the server
+     */
+    stop(): Promise<void>;
+    /**
+     * Get the underlying HTTP server (for WebSocket upgrade)
+     */
+    getHttpServer(): Server | undefined;
+    private handleRequest;
+    private findRoute;
+    private pathToRegex;
+    private handleCors;
+}

package/dist/api/ApiServer.js

@@ -0,0 +1,191 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ApiServer = void 0;
+const node_http_1 = require("node:http");
+const global_logger_factory_1 = require("global-logger-factory");
+/**
+ * Standalone API Server
+ */
+class ApiServer {
+    constructor(options) {
+        this.logger = (0, global_logger_factory_1.getLoggerFor)(this);
+        this.routes = [];
+        this.port = options.port;
+        this.host = options.host ?? '0.0.0.0';
+        this.authMiddleware = options.authMiddleware;
+        this.corsOrigins = options.corsOrigins ?? ['*'];
+    }
+    /**
+     * Register a route
+     */
+    route(method, path, handler, options) {
+        const { pattern, paramNames } = this.pathToRegex(path);
+        this.routes.push({
+            method: method.toUpperCase(),
+            pattern,
+            paramNames,
+            handler,
+            public: options?.public,
+        });
+        this.logger.debug(`Registered route: ${method.toUpperCase()} ${path}${options?.public ? ' (public)' : ''}`);
+    }
+    /**
+     * Convenience methods for common HTTP methods
+     */
+    get(path, handler, options) {
+        this.route('GET', path, handler, options);
+    }
+    post(path, handler, options) {
+        this.route('POST', path, handler, options);
+    }
+    put(path, handler, options) {
+        this.route('PUT', path, handler, options);
+    }
+    delete(path, handler, options) {
+        this.route('DELETE', path, handler, options);
+    }
+    patch(path, handler, options) {
+        this.route('PATCH', path, handler, options);
+    }
+    /**
+     * Start the server
+     */
+    async start() {
+        return new Promise((resolve, reject) => {
+            this.server = (0, node_http_1.createServer)((req, res) => {
+                this.handleRequest(req, res).catch((error) => {
+                    this.logger.error(`Unhandled error: ${error}`);
+                    if (!res.headersSent) {
+                        res.statusCode = 500;
+                        res.setHeader('Content-Type', 'application/json');
+                        res.end(JSON.stringify({ error: 'Internal Server Error' }));
+                    }
+                });
+            });
+            this.server.on('error', reject);
+            this.server.listen(this.port, this.host, () => {
+                this.logger.info(`API Server listening on ${this.host}:${this.port}`);
+                resolve();
+            });
+        });
+    }
+    /**
+     * Stop the server
+     */
+    async stop() {
+        return new Promise((resolve, reject) => {
+            if (!this.server) {
+                resolve();
+                return;
+            }
+            this.server.close((error) => {
+                if (error) {
+                    reject(error);
+                }
+                else {
+                    this.logger.info('API Server stopped');
+                    resolve();
+                }
+            });
+        });
+    }
+    /**
+     * Get the underlying HTTP server (for WebSocket upgrade)
+     */
+    getHttpServer() {
+        return this.server;
+    }
+    async handleRequest(request, response) {
+        const method = request.method?.toUpperCase() ?? 'GET';
+        const url = new URL(request.url ?? '/', `http://${request.headers.host ?? 'localhost'}`);
+        const path = url.pathname;
+        // Handle CORS preflight
+        if (method === 'OPTIONS') {
+            this.handleCors(request, response);
+            response.statusCode = 204;
+            response.end();
+            return;
+        }
+        // Add CORS headers
+        this.handleCors(request, response);
+        // Find matching route
+        const match = this.findRoute(method, path);
+        if (!match) {
+            response.statusCode = 404;
+            response.setHeader('Content-Type', 'application/json');
+            response.end(JSON.stringify({ error: 'Not Found' }));
+            return;
+        }
+        const { route, params } = match;
+        const authRequest = request;
+        // Run auth middleware unless route is public
+        if (!route.public) {
+            const authOk = await this.authMiddleware.process(authRequest, response);
+            if (!authOk) {
+                return;
+            }
+        }
+        // Execute handler
+        try {
+            await route.handler(authRequest, response, params);
+        }
+        catch (error) {
+            this.logger.error(`Route handler error: ${error}`);
+            if (!response.headersSent) {
+                response.statusCode = 500;
+                response.setHeader('Content-Type', 'application/json');
+                response.end(JSON.stringify({ error: 'Internal Server Error' }));
+            }
+        }
+    }
+    findRoute(method, path) {
+        for (const route of this.routes) {
+            if (route.method !== method) {
+                continue;
+            }
+            const match = route.pattern.exec(path);
+            if (match) {
+                const params = {};
+                route.paramNames.forEach((name, index) => {
+                    params[name] = match[index + 1];
+                });
+                return { route, params };
+            }
+        }
+        return undefined;
+    }
+    pathToRegex(path) {
+        const paramNames = [];
+        let regexStr = path
+            // 先处理通配符 *path 或 * (匹配剩余所有路径)
+            .replace(/\*([a-zA-Z0-9_]*)/g, (_, name) => {
+            paramNames.push(name || 'wildcard');
+            return '(.*)';
+        })
+            // 再处理普通参数 :param (只匹配单段)
+            .replace(/:([a-zA-Z0-9_]+)/g, (_, name) => {
+            paramNames.push(name);
+            return '([^/]+)';
+        })
+            .replace(/\//g, '\\/');
+        return {
+            pattern: new RegExp(`^${regexStr}$`),
+            paramNames,
+        };
+    }
+    handleCors(request, response) {
+        const origin = request.headers.origin;
+        if (this.corsOrigins.includes('*')) {
+            response.setHeader('Access-Control-Allow-Origin', '*');
+        }
+        else if (origin && this.corsOrigins.includes(origin)) {
+            response.setHeader('Access-Control-Allow-Origin', origin);
+            response.setHeader('Vary', 'Origin');
+        }
+        response.setHeader('Access-Control-Allow-Methods', 'GET, POST, PUT, DELETE, PATCH, OPTIONS');
+        response.setHeader('Access-Control-Allow-Headers', 'Authorization, Content-Type, DPoP');
+        response.setHeader('Access-Control-Max-Age', '86400');
+    }
+}
+exports.ApiServer = ApiServer;
+//# sourceMappingURL=ApiServer.js.map

package/dist/api/ApiServer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ApiServer.js","sourceRoot":"","sources":["../../src/api/ApiServer.ts"],"names":[],"mappings":";;;AAAA,yCAAiG;AACjG,iEAAqD;AA+BrD;;GAEG;AACH,MAAa,SAAS;IASpB,YAAmB,OAAyB;QAR3B,WAAM,GAAG,IAAA,oCAAY,EAAC,IAAI,CAAC,CAAC;QAK5B,WAAM,GAAY,EAAE,CAAC;QAIpC,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;QACzB,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,SAAS,CAAC;QACtC,IAAI,CAAC,cAAc,GAAG,OAAO,CAAC,cAAc,CAAC;QAC7C,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,CAAC,GAAG,CAAC,CAAC;IAClD,CAAC;IAED;;OAEG;IACI,KAAK,CACV,MAAc,EACd,IAAY,EACZ,OAAqB,EACrB,OAGC;QAED,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,GAAG,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;QACvD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;YACf,MAAM,EAAE,MAAM,CAAC,WAAW,EAAE;YAC5B,OAAO;YACP,UAAU;YACV,OAAO;YACP,MAAM,EAAE,OAAO,EAAE,MAAM;SACxB,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,qBAAqB,MAAM,CAAC,WAAW,EAAE,IAAI,IAAI,GAAG,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAC9G,CAAC;IAED;;OAEG;IACI,GAAG,CAAC,IAAY,EAAE,OAAqB,EAAE,OAA8B;QAC5E,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;IAC5C,CAAC;IAEM,IAAI,CAAC,IAAY,EAAE,OAAqB,EAAE,OAA8B;QAC7E,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;IAC7C,CAAC;IAEM,GAAG,CAAC,IAAY,EAAE,OAAqB,EAAE,OAA8B;QAC5E,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;IAC5C,CAAC;IAEM,MAAM,CAAC,IAAY,EAAE,OAAqB,EAAE,OAA8B;QAC/E,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;IAC/C,CAAC;IAEM,KAAK,CAAC,IAAY,EAAE,OAAqB,EAAE,OAA8B;QAC9E,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;IAC9C,CAAC;IAED;;OAEG;IACI,KAAK,CAAC,KAAK;QAChB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,IAAI,CAAC,MAAM,GAAG,IAAA,wBAAY,EAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;gBACtC,IAAI,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;oBAC3C,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,oBAAoB,KAAK,EAAE,CAAC,CAAC;oBAC/C,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;wBACrB,GAAG,CAAC,UAAU,GAAG,GAAG,CAAC;wBACrB,GAAG,CAAC,SAAS,CAAC,cAAc,EAAE,kBAAkB,CAAC,CAAC;wBAClD,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC,CAAC,CAAC;oBAC9D,CAAC;gBACH,CAAC,CAAC,CAAC;YACL,CAAC,CAAC,CAAC;YAEH,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAEhC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,GAAG,EAAE;gBAC5C,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,2BAA2B,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;gBACtE,OAAO,EAAE,CAAC;YACZ,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACI,KAAK,CAAC,IAAI;QACf,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;gBACjB,OAAO,EAAE,CAAC;gBACV,OAAO;YACT,CAAC;YAED,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;gBAC1B,IAAI,KAAK,EAAE,CAAC;oBACV,MAAM,CAAC,KAAK,CAAC,CAAC;gBAChB,CAAC;qBAAM,CAAC;oBACN,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;oBACvC,OAAO,EAAE,CAAC;gBACZ,CAAC;YACH,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACI,aAAa;QAClB,OAAO,IAAI,CAAC,MAAM,CAAC;IACrB,CAAC;IAEO,KAAK,CAAC,aAAa,CAAC,OAAwB,EAAE,QAAwB;QAC5E,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,WAAW,EAAE,IAAI,KAAK,CAAC;QACtD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,IAAI,GAAG,EAAE,UAAU,OAAO,CAAC,OAAO,CAAC,IAAI,IAAI,WAAW,EAAE,CAAC,CAAC;QACzF,MAAM,IAAI,GAAG,GAAG,CAAC,QAAQ,CAAC;QAE1B,wBAAwB;QACxB,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;YACnC,QAAQ,CAAC,UAAU,GAAG,GAAG,CAAC;YAC1B,QAAQ,CAAC,GAAG,EAAE,CAAC;YACf,OAAO;QACT,CAAC;QAED,mBAAmB;QACnB,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QAEnC,sBAAsB;QACtB,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QAC3C,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,QAAQ,CAAC,UAAU,GAAG,GAAG,CAAC;YAC1B,QAAQ,CAAC,SAAS,CAAC,cAAc,EAAE,kBAAkB,CAAC,CAAC;YACvD,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC;YACrD,OAAO;QACT,CAAC;QAED,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,KAAK,CAAC;QAChC,MAAM,WAAW,GAAG,OAA+B,CAAC;QAEpD,6CAA6C;QAC7C,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;YAClB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;YACxE,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,OAAO;YACT,CAAC;QACH,CAAC;QAED,kBAAkB;QAClB,IAAI,CAAC;YACH,MAAM,KAAK,CAAC,OAAO,CAAC,WAAW,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;QACrD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,wBAAwB,KAAK,EAAE,CAAC,CAAC;YACnD,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;gBAC1B,QAAQ,CAAC,UAAU,GAAG,GAAG,CAAC;gBAC1B,QAAQ,CAAC,SAAS,CAAC,cAAc,EAAE,kBAAkB,CAAC,CAAC;gBACvD,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC,CAAC,CAAC;YACnE,CAAC;QACH,CAAC;IACH,CAAC;IAEO,SAAS,CAAC,MAAc,EAAE,IAAY;QAC5C,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChC,IAAI,KAAK,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;gBAC5B,SAAS;YACX,CAAC;YAED,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACvC,IAAI,KAAK,EAAE,CAAC;gBACV,MAAM,MAAM,GAA2B,EAAE,CAAC;gBAC1C,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE;oBACvC,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;gBAClC,CAAC,CAAC,CAAC;gBACH,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;YAC3B,CAAC;QACH,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IAEO,WAAW,CAAC,IAAY;QAC9B,MAAM,UAAU,GAAa,EAAE,CAAC;QAChC,IAAI,QAAQ,GAAG,IAAI;YACjB,8BAA8B;aAC7B,OAAO,CAAC,oBAAoB,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE;YACzC,UAAU,CAAC,IAAI,CAAC,IAAI,IAAI,UAAU,CAAC,CAAC;YACpC,OAAO,MAAM,CAAC;QAChB,CAAC,CAAC;YACF,yBAAyB;aACxB,OAAO,CAAC,mBAAmB,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE;YACxC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACtB,OAAO,SAAS,CAAC;QACnB,CAAC,CAAC;aACD,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QACzB,OAAO;YACL,OAAO,EAAE,IAAI,MAAM,CAAC,IAAI,QAAQ,GAAG,CAAC;YACpC,UAAU;SACX,CAAC;IACJ,CAAC;IAEO,UAAU,CAAC,OAAwB,EAAE,QAAwB;QACnE,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC;QAEtC,IAAI,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YACnC,QAAQ,CAAC,SAAS,CAAC,6BAA6B,EAAE,GAAG,CAAC,CAAC;QACzD,CAAC;aAAM,IAAI,MAAM,IAAI,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YACvD,QAAQ,CAAC,SAAS,CAAC,6BAA6B,EAAE,MAAM,CAAC,CAAC;YAC1D,QAAQ,CAAC,SAAS,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QACvC,CAAC;QAED,QAAQ,CAAC,SAAS,CAAC,8BAA8B,EAAE,wCAAwC,CAAC,CAAC;QAC7F,QAAQ,CAAC,SAAS,CAAC,8BAA8B,EAAE,mCAAmC,CAAC,CAAC;QACxF,QAAQ,CAAC,SAAS,CAAC,wBAAwB,EAAE,OAAO,CAAC,CAAC;IACxD,CAAC;CACF;AAxND,8BAwNC","sourcesContent":["import { createServer, type Server, type IncomingMessage, type ServerResponse } from 'node:http';\nimport { getLoggerFor } from 'global-logger-factory';\nimport type { AuthMiddleware, AuthenticatedRequest } from './middleware/AuthMiddleware';\n\n/**\n * Route handler function\n */\nexport type RouteHandler = (\n  request: AuthenticatedRequest,\n  response: ServerResponse,\n  params: Record<string, string>,\n) => Promise<void>;\n\n/**\n * Route definition\n */\nexport interface Route {\n  method: string;\n  pattern: RegExp;\n  paramNames: string[];\n  handler: RouteHandler;\n  /** If true, skip authentication */\n  public?: boolean;\n}\n\nexport interface ApiServerOptions {\n  port: number;\n  host?: string;\n  authMiddleware: AuthMiddleware;\n  corsOrigins?: string[];\n}\n\n/**\n * Standalone API Server\n */\nexport class ApiServer {\n  private readonly logger = getLoggerFor(this);\n  private readonly port: number;\n  private readonly host: string;\n  private readonly authMiddleware: AuthMiddleware;\n  private readonly corsOrigins: string[];\n  private readonly routes: Route[] = [];\n  private server?: Server;\n\n  public constructor(options: ApiServerOptions) {\n    this.port = options.port;\n    this.host = options.host ?? '0.0.0.0';\n    this.authMiddleware = options.authMiddleware;\n    this.corsOrigins = options.corsOrigins ?? ['*'];\n  }\n\n  /**\n   * Register a route\n   */\n  public route(\n    method: string,\n    path: string,\n    handler: RouteHandler,\n    options?: {\n      /** If true, skip authentication for this route */\n      public?: boolean;\n    },\n  ): void {\n    const { pattern, paramNames } = this.pathToRegex(path);\n    this.routes.push({\n      method: method.toUpperCase(),\n      pattern,\n      paramNames,\n      handler,\n      public: options?.public,\n    });\n    this.logger.debug(`Registered route: ${method.toUpperCase()} ${path}${options?.public ? ' (public)' : ''}`);\n  }\n\n  /**\n   * Convenience methods for common HTTP methods\n   */\n  public get(path: string, handler: RouteHandler, options?: { public?: boolean }): void {\n    this.route('GET', path, handler, options);\n  }\n\n  public post(path: string, handler: RouteHandler, options?: { public?: boolean }): void {\n    this.route('POST', path, handler, options);\n  }\n\n  public put(path: string, handler: RouteHandler, options?: { public?: boolean }): void {\n    this.route('PUT', path, handler, options);\n  }\n\n  public delete(path: string, handler: RouteHandler, options?: { public?: boolean }): void {\n    this.route('DELETE', path, handler, options);\n  }\n\n  public patch(path: string, handler: RouteHandler, options?: { public?: boolean }): void {\n    this.route('PATCH', path, handler, options);\n  }\n\n  /**\n   * Start the server\n   */\n  public async start(): Promise<void> {\n    return new Promise((resolve, reject) => {\n      this.server = createServer((req, res) => {\n        this.handleRequest(req, res).catch((error) => {\n          this.logger.error(`Unhandled error: ${error}`);\n          if (!res.headersSent) {\n            res.statusCode = 500;\n            res.setHeader('Content-Type', 'application/json');\n            res.end(JSON.stringify({ error: 'Internal Server Error' }));\n          }\n        });\n      });\n\n      this.server.on('error', reject);\n\n      this.server.listen(this.port, this.host, () => {\n        this.logger.info(`API Server listening on ${this.host}:${this.port}`);\n        resolve();\n      });\n    });\n  }\n\n  /**\n   * Stop the server\n   */\n  public async stop(): Promise<void> {\n    return new Promise((resolve, reject) => {\n      if (!this.server) {\n        resolve();\n        return;\n      }\n\n      this.server.close((error) => {\n        if (error) {\n          reject(error);\n        } else {\n          this.logger.info('API Server stopped');\n          resolve();\n        }\n      });\n    });\n  }\n\n  /**\n   * Get the underlying HTTP server (for WebSocket upgrade)\n   */\n  public getHttpServer(): Server | undefined {\n    return this.server;\n  }\n\n  private async handleRequest(request: IncomingMessage, response: ServerResponse): Promise<void> {\n    const method = request.method?.toUpperCase() ?? 'GET';\n    const url = new URL(request.url ?? '/', `http://${request.headers.host ?? 'localhost'}`);\n    const path = url.pathname;\n\n    // Handle CORS preflight\n    if (method === 'OPTIONS') {\n      this.handleCors(request, response);\n      response.statusCode = 204;\n      response.end();\n      return;\n    }\n\n    // Add CORS headers\n    this.handleCors(request, response);\n\n    // Find matching route\n    const match = this.findRoute(method, path);\n    if (!match) {\n      response.statusCode = 404;\n      response.setHeader('Content-Type', 'application/json');\n      response.end(JSON.stringify({ error: 'Not Found' }));\n      return;\n    }\n\n    const { route, params } = match;\n    const authRequest = request as AuthenticatedRequest;\n\n    // Run auth middleware unless route is public\n    if (!route.public) {\n      const authOk = await this.authMiddleware.process(authRequest, response);\n      if (!authOk) {\n        return;\n      }\n    }\n\n    // Execute handler\n    try {\n      await route.handler(authRequest, response, params);\n    } catch (error) {\n      this.logger.error(`Route handler error: ${error}`);\n      if (!response.headersSent) {\n        response.statusCode = 500;\n        response.setHeader('Content-Type', 'application/json');\n        response.end(JSON.stringify({ error: 'Internal Server Error' }));\n      }\n    }\n  }\n\n  private findRoute(method: string, path: string): { route: Route; params: Record<string, string> } | undefined {\n    for (const route of this.routes) {\n      if (route.method !== method) {\n        continue;\n      }\n\n      const match = route.pattern.exec(path);\n      if (match) {\n        const params: Record<string, string> = {};\n        route.paramNames.forEach((name, index) => {\n          params[name] = match[index + 1];\n        });\n        return { route, params };\n      }\n    }\n    return undefined;\n  }\n\n  private pathToRegex(path: string): { pattern: RegExp; paramNames: string[] } {\n    const paramNames: string[] = [];\n    let regexStr = path\n      // 先处理通配符 *path 或 * (匹配剩余所有路径)\n      .replace(/\\*([a-zA-Z0-9_]*)/g, (_, name) => {\n        paramNames.push(name || 'wildcard');\n        return '(.*)';\n      })\n      // 再处理普通参数 :param (只匹配单段)\n      .replace(/:([a-zA-Z0-9_]+)/g, (_, name) => {\n        paramNames.push(name);\n        return '([^/]+)';\n      })\n      .replace(/\\//g, '\\\\/');\n    return {\n      pattern: new RegExp(`^${regexStr}$`),\n      paramNames,\n    };\n  }\n\n  private handleCors(request: IncomingMessage, response: ServerResponse): void {\n    const origin = request.headers.origin;\n\n    if (this.corsOrigins.includes('*')) {\n      response.setHeader('Access-Control-Allow-Origin', '*');\n    } else if (origin && this.corsOrigins.includes(origin)) {\n      response.setHeader('Access-Control-Allow-Origin', origin);\n      response.setHeader('Vary', 'Origin');\n    }\n\n    response.setHeader('Access-Control-Allow-Methods', 'GET, POST, PUT, DELETE, PATCH, OPTIONS');\n    response.setHeader('Access-Control-Allow-Headers', 'Authorization, Content-Type, DPoP');\n    response.setHeader('Access-Control-Max-Age', '86400');\n  }\n}\n"]}

package/dist/api/auth/AuthContext.d.ts

@@ -0,0 +1,41 @@
+/**
+ * Authentication context representing the authenticated caller
+ *
+ * Authenticated caller context.
+ * - Solid Token: user provides Bearer or DPoP token
+ * - API Key: third-party provides client_id, API Server exchanges for token
+ * - Node Token: edge node provides node API key
+ */
+export interface SolidAuthContext {
+    type: 'solid';
+    webId: string;
+    accountId?: string;
+    clientId?: string;
+    clientSecret?: string;
+    displayName?: string;
+    accessToken?: string;
+    tokenType?: 'Bearer' | 'DPoP';
+    /** Whether this was authenticated via API Key (client credentials) */
+    viaApiKey?: boolean;
+}
+export interface NodeAuthContext {
+    type: 'node';
+    nodeId: string;
+    accountId?: string;
+}
+export type AuthContext = SolidAuthContext | NodeAuthContext;
+export declare function isSolidAuth(ctx: AuthContext): ctx is SolidAuthContext;
+export declare function isNodeAuth(ctx: AuthContext): ctx is NodeAuthContext;
+/**
+ * Get webId from auth context
+ */
+export declare function getWebId(ctx: AuthContext): string | undefined;
+/**
+ * Get display name from auth context
+ */
+export declare function getDisplayName(ctx: AuthContext): string | undefined;
+/**
+ * Get accountId from auth context (if available)
+ */
+export declare function getAccountId(ctx: AuthContext): string | undefined;
+export declare function getNodeId(ctx: AuthContext): string | undefined;

package/dist/api/auth/AuthContext.js

@@ -0,0 +1,44 @@
+"use strict";
+/**
+ * Authentication context representing the authenticated caller
+ *
+ * Authenticated caller context.
+ * - Solid Token: user provides Bearer or DPoP token
+ * - API Key: third-party provides client_id, API Server exchanges for token
+ * - Node Token: edge node provides node API key
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.isSolidAuth = isSolidAuth;
+exports.isNodeAuth = isNodeAuth;
+exports.getWebId = getWebId;
+exports.getDisplayName = getDisplayName;
+exports.getAccountId = getAccountId;
+exports.getNodeId = getNodeId;
+function isSolidAuth(ctx) {
+    return ctx.type === 'solid';
+}
+function isNodeAuth(ctx) {
+    return ctx.type === 'node';
+}
+/**
+ * Get webId from auth context
+ */
+function getWebId(ctx) {
+    return ctx.type === 'solid' ? ctx.webId : undefined;
+}
+/**
+ * Get display name from auth context
+ */
+function getDisplayName(ctx) {
+    return ctx.type === 'solid' ? ctx.displayName : undefined;
+}
+/**
+ * Get accountId from auth context (if available)
+ */
+function getAccountId(ctx) {
+    return ctx.accountId;
+}
+function getNodeId(ctx) {
+    return ctx.type === 'node' ? ctx.nodeId : undefined;
+}
+//# sourceMappingURL=AuthContext.js.map

package/dist/api/auth/AuthContext.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"AuthContext.js","sourceRoot":"","sources":["../../../src/api/auth/AuthContext.ts"],"names":[],"mappings":";AAAA;;;;;;;GAOG;;AAuBH,kCAEC;AAED,gCAEC;AAKD,4BAEC;AAKD,wCAEC;AAKD,oCAEC;AAED,8BAEC;AA/BD,SAAgB,WAAW,CAAC,GAAgB;IAC1C,OAAO,GAAG,CAAC,IAAI,KAAK,OAAO,CAAC;AAC9B,CAAC;AAED,SAAgB,UAAU,CAAC,GAAgB;IACzC,OAAO,GAAG,CAAC,IAAI,KAAK,MAAM,CAAC;AAC7B,CAAC;AAED;;GAEG;AACH,SAAgB,QAAQ,CAAC,GAAgB;IACvC,OAAO,GAAG,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AACtD,CAAC;AAED;;GAEG;AACH,SAAgB,cAAc,CAAC,GAAgB;IAC7C,OAAO,GAAG,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;AAC5D,CAAC;AAED;;GAEG;AACH,SAAgB,YAAY,CAAC,GAAgB;IAC3C,OAAO,GAAG,CAAC,SAAS,CAAC;AACvB,CAAC;AAED,SAAgB,SAAS,CAAC,GAAgB;IACxC,OAAO,GAAG,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;AACtD,CAAC","sourcesContent":["/**\n * Authentication context representing the authenticated caller\n * \n * Authenticated caller context.\n * - Solid Token: user provides Bearer or DPoP token\n * - API Key: third-party provides client_id, API Server exchanges for token\n * - Node Token: edge node provides node API key\n */\n\nexport interface SolidAuthContext {\n  type: 'solid';\n  webId: string;\n  accountId?: string;\n  clientId?: string;\n  clientSecret?: string;  // For client credentials auth\n  displayName?: string;\n  accessToken?: string;\n  tokenType?: 'Bearer' | 'DPoP';\n  /** Whether this was authenticated via API Key (client credentials) */\n  viaApiKey?: boolean;\n}\n\nexport interface NodeAuthContext {\n  type: 'node';\n  nodeId: string;\n  accountId?: string;\n}\n\nexport type AuthContext = SolidAuthContext | NodeAuthContext;\n\nexport function isSolidAuth(ctx: AuthContext): ctx is SolidAuthContext {\n  return ctx.type === 'solid';\n}\n\nexport function isNodeAuth(ctx: AuthContext): ctx is NodeAuthContext {\n  return ctx.type === 'node';\n}\n\n/**\n * Get webId from auth context\n */\nexport function getWebId(ctx: AuthContext): string | undefined {\n  return ctx.type === 'solid' ? ctx.webId : undefined;\n}\n\n/**\n * Get display name from auth context\n */\nexport function getDisplayName(ctx: AuthContext): string | undefined {\n  return ctx.type === 'solid' ? ctx.displayName : undefined;\n}\n\n/**\n * Get accountId from auth context (if available)\n */\nexport function getAccountId(ctx: AuthContext): string | undefined {\n  return ctx.accountId;\n}\n\nexport function getNodeId(ctx: AuthContext): string | undefined {\n  return ctx.type === 'node' ? ctx.nodeId : undefined;\n}\n"]}

package/dist/api/auth/Authenticator.d.ts

@@ -0,0 +1,23 @@
+import type { IncomingMessage } from 'node:http';
+import type { AuthContext } from './AuthContext';
+/**
+ * Result of authentication attempt
+ */
+export interface AuthResult {
+    success: boolean;
+    context?: AuthContext;
+    error?: string;
+}
+/**
+ * Base interface for authenticators
+ */
+export interface Authenticator {
+    /**
+     * Check if this authenticator can handle the request
+     */
+    canAuthenticate(request: IncomingMessage): boolean;
+    /**
+     * Attempt to authenticate the request
+     */
+    authenticate(request: IncomingMessage): Promise<AuthResult>;
+}

package/dist/api/auth/Authenticator.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=Authenticator.js.map

package/dist/api/auth/Authenticator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Authenticator.js","sourceRoot":"","sources":["../../../src/api/auth/Authenticator.ts"],"names":[],"mappings":"","sourcesContent":["import type { IncomingMessage } from 'node:http';\nimport type { AuthContext } from './AuthContext';\n\n/**\n * Result of authentication attempt\n */\nexport interface AuthResult {\n  success: boolean;\n  context?: AuthContext;\n  error?: string;\n}\n\n/**\n * Base interface for authenticators\n */\nexport interface Authenticator {\n  /**\n   * Check if this authenticator can handle the request\n   */\n  canAuthenticate(request: IncomingMessage): boolean;\n\n  /**\n   * Attempt to authenticate the request\n   */\n  authenticate(request: IncomingMessage): Promise<AuthResult>;\n}\n"]}