@undefineds.co/xpod 0.1.0-local.202602081751

package/dist/api/chatkit/types.js

@@ -0,0 +1,50 @@
+"use strict";
+/**
+ * ChatKit Types
+ *
+ * Type definitions for OpenAI ChatKit protocol.
+ * Based on https://github.com/openai/chatkit-python
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.isStreamingReq = isStreamingReq;
+exports.isNonStreamingReq = isNonStreamingReq;
+exports.generateId = generateId;
+exports.nowTimestamp = nowTimestamp;
+exports.extractUserMessageText = extractUserMessageText;
+// ============================================================================
+// Helper Functions
+// ============================================================================
+function isStreamingReq(req) {
+    return (req.type === 'threads.create' ||
+        req.type === 'threads.add_user_message' ||
+        req.type === 'threads.add_client_tool_output' ||
+        req.type === 'threads.retry_after_item' ||
+        req.type === 'threads.custom_action');
+}
+function isNonStreamingReq(req) {
+    return !isStreamingReq(req);
+}
+/**
+ * Generate a unique ID with prefix
+ */
+function generateId(prefix) {
+    const timestamp = Date.now().toString(36);
+    const random = Math.random().toString(36).substring(2, 10);
+    return `${prefix}_${timestamp}${random}`;
+}
+/**
+ * Get current timestamp in seconds
+ */
+function nowTimestamp() {
+    return Math.floor(Date.now() / 1000);
+}
+/**
+ * Extract text content from user message
+ */
+function extractUserMessageText(content) {
+    return content
+        .filter((c) => c.type === 'input_text')
+        .map((c) => c.text)
+        .join('\n');
+}
+//# sourceMappingURL=types.js.map

package/dist/api/chatkit/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/api/chatkit/types.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;AAqoBH,wCAQC;AAED,8CAEC;AAKD,gCAIC;AAKD,oCAEC;AAKD,wDAKC;AA1CD,+EAA+E;AAC/E,mBAAmB;AACnB,+EAA+E;AAE/E,SAAgB,cAAc,CAAC,GAAe;IAC5C,OAAO,CACL,GAAG,CAAC,IAAI,KAAK,gBAAgB;QAC7B,GAAG,CAAC,IAAI,KAAK,0BAA0B;QACvC,GAAG,CAAC,IAAI,KAAK,gCAAgC;QAC7C,GAAG,CAAC,IAAI,KAAK,0BAA0B;QACvC,GAAG,CAAC,IAAI,KAAK,uBAAuB,CACrC,CAAC;AACJ,CAAC;AAED,SAAgB,iBAAiB,CAAC,GAAe;IAC/C,OAAO,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC;AAC9B,CAAC;AAED;;GAEG;AACH,SAAgB,UAAU,CAAC,MAAc;IACvC,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;IAC1C,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAC3D,OAAO,GAAG,MAAM,IAAI,SAAS,GAAG,MAAM,EAAE,CAAC;AAC3C,CAAC;AAED;;GAEG;AACH,SAAgB,YAAY;IAC1B,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;AACvC,CAAC;AAED;;GAEG;AACH,SAAgB,sBAAsB,CAAC,OAA6B;IAClE,OAAO,OAAO;SACX,MAAM,CAAC,CAAC,CAAC,EAA+B,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,YAAY,CAAC;SACnE,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;SAClB,IAAI,CAAC,IAAI,CAAC,CAAC;AAChB,CAAC","sourcesContent":["/**\n * ChatKit Types\n * \n * Type definitions for OpenAI ChatKit protocol.\n * Based on https://github.com/openai/chatkit-python\n */\n\n// ============================================================================\n// Generic Types\n// ============================================================================\n\nexport interface Page<T> {\n  data: T[];\n  has_more: boolean;\n  after?: string;\n}\n\n// ============================================================================\n// Thread Types\n// ============================================================================\n\nexport type ThreadStatusType = 'active' | 'locked' | 'closed';\n\nexport interface ActiveStatus {\n  type: 'active';\n}\n\nexport interface LockedStatus {\n  type: 'locked';\n  reason?: string;\n}\n\nexport interface ClosedStatus {\n  type: 'closed';\n}\n\nexport type ThreadStatus = ActiveStatus | LockedStatus | ClosedStatus;\n\nexport interface ThreadMetadata {\n  id: string;\n  title?: string;\n  status: ThreadStatus;\n  created_at: number;\n  updated_at: number;\n  metadata?: Record<string, unknown>;\n}\n\nexport interface Thread extends ThreadMetadata {\n  items: Page<ThreadItem>;\n}\n\n// ============================================================================\n// Thread Item Types\n// ============================================================================\n\nexport interface ThreadItemBase {\n  id: string;\n  thread_id: string;\n  created_at: number;\n}\n\n// User Message\nexport interface UserMessageTextContent {\n  type: 'input_text';\n  text: string;\n}\n\nexport interface UserMessageTagContent {\n  type: 'input_tag';\n  tag: string;\n  label?: string;\n}\n\nexport type UserMessageContent = UserMessageTextContent | UserMessageTagContent;\n\nexport interface InferenceOptions {\n  model?: string;\n  temperature?: number;\n  max_tokens?: number;\n  tools?: unknown[];\n  tool_choice?: ToolChoice;\n}\n\nexport interface ToolChoice {\n  type: 'function';\n  function: {\n    name: string;\n  };\n}\n\nexport interface UserMessageItem extends ThreadItemBase {\n  type: 'user_message';\n  content: UserMessageContent[];\n  inference_options?: InferenceOptions;\n}\n\n// Assistant Message\nexport interface Annotation {\n  type: string;\n  text: string;\n  start_index?: number;\n  end_index?: number;\n  file_citation?: {\n    file_id: string;\n    quote?: string;\n  };\n  file_path?: {\n    file_id: string;\n  };\n  url_citation?: {\n    url: string;\n    title?: string;\n  };\n}\n\nexport interface AssistantMessageContent {\n  type: 'output_text';\n  text: string;\n  annotations?: Annotation[];\n}\n\nexport interface AssistantMessageItem extends ThreadItemBase {\n  type: 'assistant_message';\n  content: AssistantMessageContent[];\n  status?: 'in_progress' | 'completed' | 'incomplete';\n}\n\n// Client Tool Call\nexport interface ClientToolCallItem extends ThreadItemBase {\n  type: 'client_tool_call';\n  name: string;\n  arguments: string;\n  call_id: string;\n  status?: 'pending' | 'completed';\n  output?: string;\n}\n\n// Widget\nexport interface WidgetItem extends ThreadItemBase {\n  type: 'widget';\n  widget_type: string;\n  data: unknown;\n}\n\n// Generated Image\nexport interface GeneratedImage {\n  id: string;\n  url?: string;\n  b64_json?: string;\n}\n\nexport interface GeneratedImageItem extends ThreadItemBase {\n  type: 'generated_image';\n  image: GeneratedImage;\n  prompt?: string;\n  status?: 'in_progress' | 'completed' | 'failed';\n}\n\n// Task\nexport interface BaseTask {\n  id: string;\n  status: 'pending' | 'in_progress' | 'completed' | 'failed';\n}\n\nexport interface CustomTask extends BaseTask {\n  type: 'custom';\n  title: string;\n  description?: string;\n}\n\nexport interface SearchTask extends BaseTask {\n  type: 'web_search';\n  query: string;\n}\n\nexport interface ThoughtTask extends BaseTask {\n  type: 'thought';\n  content: string;\n}\n\nexport interface FileTask extends BaseTask {\n  type: 'file';\n  file_id: string;\n  filename?: string;\n}\n\nexport interface ImageTask extends BaseTask {\n  type: 'image';\n  image_id: string;\n}\n\nexport type Task = CustomTask | SearchTask | ThoughtTask | FileTask | ImageTask;\n\nexport interface TaskItem extends ThreadItemBase {\n  type: 'task';\n  task: Task;\n}\n\n// Workflow\nexport interface CustomSummary {\n  type: 'custom';\n  title: string;\n  icon?: string;\n}\n\nexport interface DurationSummary {\n  type: 'duration';\n  duration_ms: number;\n}\n\nexport type WorkflowSummary = CustomSummary | DurationSummary;\n\nexport interface Workflow {\n  tasks: Task[];\n  summary?: WorkflowSummary;\n}\n\nexport interface WorkflowItem extends ThreadItemBase {\n  type: 'workflow';\n  workflow: Workflow;\n}\n\n// End of Turn\nexport interface EndOfTurnItem extends ThreadItemBase {\n  type: 'end_of_turn';\n}\n\n// Hidden Context\nexport interface HiddenContextItem extends ThreadItemBase {\n  type: 'hidden_context_item';\n  context: unknown;\n}\n\nexport interface SDKHiddenContextItem extends ThreadItemBase {\n  type: 'sdk_hidden_context';\n  data: unknown;\n}\n\n// Union of all thread items\nexport type ThreadItem =\n  | UserMessageItem\n  | AssistantMessageItem\n  | ClientToolCallItem\n  | WidgetItem\n  | GeneratedImageItem\n  | TaskItem\n  | WorkflowItem\n  | EndOfTurnItem\n  | HiddenContextItem\n  | SDKHiddenContextItem;\n\nexport type StoreItemType = ThreadItem['type'];\n\n// ============================================================================\n// Attachment Types\n// ============================================================================\n\nexport interface AttachmentBase {\n  id: string;\n  name: string;\n  size: number;\n  mime_type: string;\n  created_at: number;\n}\n\nexport interface FileAttachment extends AttachmentBase {\n  type: 'file';\n  url?: string;\n}\n\nexport interface ImageAttachment extends AttachmentBase {\n  type: 'image';\n  url?: string;\n  width?: number;\n  height?: number;\n}\n\nexport type Attachment = FileAttachment | ImageAttachment;\n\nexport interface AttachmentUploadDescriptor {\n  attachment_id: string;\n  upload_url: string;\n  upload_headers?: Record<string, string>;\n}\n\n// ============================================================================\n// Request Types\n// ============================================================================\n\nexport interface BaseReq {\n  metadata?: Record<string, unknown>;\n}\n\n// Thread Requests\nexport interface ThreadGetByIdParams {\n  thread_id: string;\n}\n\nexport interface ThreadsGetByIdReq extends BaseReq {\n  type: 'threads.get_by_id';\n  params: ThreadGetByIdParams;\n}\n\nexport interface ThreadCreateParams {\n  input?: UserMessageInput;\n}\n\nexport interface UserMessageInput {\n  content: UserMessageContent[];\n  inference_options?: InferenceOptions;\n  attachments?: string[];\n}\n\nexport interface ThreadsCreateReq extends BaseReq {\n  type: 'threads.create';\n  params: ThreadCreateParams;\n}\n\nexport interface ThreadListParams {\n  limit?: number;\n  order?: 'asc' | 'desc';\n  after?: string;\n}\n\nexport interface ThreadsListReq extends BaseReq {\n  type: 'threads.list';\n  params: ThreadListParams;\n}\n\nexport interface ThreadAddUserMessageParams {\n  thread_id: string;\n  input: UserMessageInput;\n}\n\nexport interface ThreadsAddUserMessageReq extends BaseReq {\n  type: 'threads.add_user_message';\n  params: ThreadAddUserMessageParams;\n}\n\nexport interface ThreadAddClientToolOutputParams {\n  thread_id: string;\n  item_id: string;\n  output: string;\n}\n\nexport interface ThreadsAddClientToolOutputReq extends BaseReq {\n  type: 'threads.add_client_tool_output';\n  params: ThreadAddClientToolOutputParams;\n}\n\nexport interface ThreadCustomActionParams {\n  thread_id: string;\n  item_id: string;\n  action: string;\n  data?: unknown;\n}\n\nexport interface ThreadsCustomActionReq extends BaseReq {\n  type: 'threads.custom_action';\n  params: ThreadCustomActionParams;\n}\n\nexport interface ThreadRetryAfterItemParams {\n  thread_id: string;\n  item_id: string;\n}\n\nexport interface ThreadsRetryAfterItemReq extends BaseReq {\n  type: 'threads.retry_after_item';\n  params: ThreadRetryAfterItemParams;\n}\n\nexport interface ThreadUpdateParams {\n  thread_id: string;\n  title?: string;\n}\n\nexport interface ThreadsUpdateReq extends BaseReq {\n  type: 'threads.update';\n  params: ThreadUpdateParams;\n}\n\nexport interface ThreadDeleteParams {\n  thread_id: string;\n}\n\nexport interface ThreadsDeleteReq extends BaseReq {\n  type: 'threads.delete';\n  params: ThreadDeleteParams;\n}\n\n// Items Requests\nexport interface ItemsListParams {\n  thread_id: string;\n  limit?: number;\n  order?: 'asc' | 'desc';\n  after?: string;\n}\n\nexport interface ItemsListReq extends BaseReq {\n  type: 'items.list';\n  params: ItemsListParams;\n}\n\nexport interface ItemFeedbackParams {\n  thread_id: string;\n  item_ids: string[];\n  feedback: FeedbackKind;\n}\n\nexport type FeedbackKind = 'positive' | 'negative';\n\nexport interface ItemsFeedbackReq extends BaseReq {\n  type: 'items.feedback';\n  params: ItemFeedbackParams;\n}\n\n// Attachment Requests\nexport interface AttachmentCreateParams {\n  name: string;\n  size: number;\n  mime_type: string;\n}\n\nexport interface AttachmentsCreateReq extends BaseReq {\n  type: 'attachments.create';\n  params: AttachmentCreateParams;\n}\n\nexport interface AttachmentDeleteParams {\n  attachment_id: string;\n}\n\nexport interface AttachmentsDeleteReq extends BaseReq {\n  type: 'attachments.delete';\n  params: AttachmentDeleteParams;\n}\n\n// Request Union Types\nexport type StreamingReq =\n  | ThreadsCreateReq\n  | ThreadsAddUserMessageReq\n  | ThreadsAddClientToolOutputReq\n  | ThreadsRetryAfterItemReq\n  | ThreadsCustomActionReq;\n\nexport type NonStreamingReq =\n  | ThreadsGetByIdReq\n  | ThreadsListReq\n  | ItemsListReq\n  | ItemsFeedbackReq\n  | AttachmentsCreateReq\n  | AttachmentsDeleteReq\n  | ThreadsUpdateReq\n  | ThreadsDeleteReq;\n\nexport type ChatKitReq = StreamingReq | NonStreamingReq;\n\n// ============================================================================\n// Stream Event Types\n// ============================================================================\n\nexport interface ThreadCreatedEvent {\n  type: 'thread.created';\n  thread: ThreadMetadata;\n}\n\nexport interface ThreadUpdatedEvent {\n  type: 'thread.updated';\n  thread: ThreadMetadata;\n}\n\nexport interface ThreadItemAddedEvent {\n  type: 'thread.item.added';\n  item: ThreadItem;\n}\n\nexport interface ThreadItemUpdatedEvent {\n  type: 'thread.item.updated';\n  item_id: string;\n  update: ThreadItemUpdate;\n}\n\nexport interface ThreadItemDoneEvent {\n  type: 'thread.item.done';\n  item: ThreadItem;\n}\n\nexport interface ThreadItemRemovedEvent {\n  type: 'thread.item.removed';\n  item_id: string;\n}\n\nexport interface ThreadItemReplacedEvent {\n  type: 'thread.item.replaced';\n  item: ThreadItem;\n}\n\nexport interface StreamOptions {\n  allow_cancel?: boolean;\n}\n\nexport interface StreamOptionsEvent {\n  type: 'stream_options';\n  options: StreamOptions;\n}\n\nexport interface ProgressUpdate {\n  progress: number;\n  message?: string;\n}\n\nexport interface ProgressUpdateEvent {\n  type: 'progress_update';\n  update: ProgressUpdate;\n}\n\nexport interface ClientEffect {\n  effect_type: string;\n  data?: unknown;\n}\n\nexport interface ClientEffectEvent {\n  type: 'client_effect';\n  effect: ClientEffect;\n}\n\nexport interface ErrorEvent {\n  type: 'error';\n  error: {\n    code: string;\n    message: string;\n    details?: unknown;\n  };\n}\n\nexport interface NoticeEvent {\n  type: 'notice';\n  notice: {\n    level: 'info' | 'warning' | 'error';\n    message: string;\n  };\n}\n\nexport type ThreadStreamEvent =\n  | ThreadCreatedEvent\n  | ThreadUpdatedEvent\n  | ThreadItemAddedEvent\n  | ThreadItemUpdatedEvent\n  | ThreadItemDoneEvent\n  | ThreadItemRemovedEvent\n  | ThreadItemReplacedEvent\n  | StreamOptionsEvent\n  | ProgressUpdateEvent\n  | ClientEffectEvent\n  | ErrorEvent\n  | NoticeEvent;\n\n// ============================================================================\n// Thread Item Update Types (for streaming)\n// ============================================================================\n\nexport interface AssistantMessageContentPartAdded {\n  type: 'assistant_message.content_part.added';\n  part_index: number;\n  part: AssistantMessageContent;\n}\n\nexport interface AssistantMessageContentPartTextDelta {\n  type: 'assistant_message.content_part.text_delta';\n  part_index: number;\n  delta: string;\n}\n\nexport interface AssistantMessageContentPartAnnotationAdded {\n  type: 'assistant_message.content_part.annotation_added';\n  part_index: number;\n  annotation: Annotation;\n}\n\nexport interface AssistantMessageContentPartDone {\n  type: 'assistant_message.content_part.done';\n  part_index: number;\n}\n\nexport interface WidgetStreamingTextValueDelta {\n  type: 'widget.streaming_text.value_delta';\n  path: string;\n  delta: string;\n}\n\nexport interface WidgetRootUpdated {\n  type: 'widget.root.updated';\n  data: unknown;\n}\n\nexport interface WidgetComponentUpdated {\n  type: 'widget.component.updated';\n  component_id: string;\n  data: unknown;\n}\n\nexport interface WorkflowTaskAdded {\n  type: 'workflow.task.added';\n  task: Task;\n}\n\nexport interface WorkflowTaskUpdated {\n  type: 'workflow.task.updated';\n  task_id: string;\n  task: Partial<Task>;\n}\n\nexport interface GeneratedImageUpdated {\n  type: 'generated_image.updated';\n  image: GeneratedImage;\n}\n\nexport type ThreadItemUpdate =\n  | AssistantMessageContentPartAdded\n  | AssistantMessageContentPartTextDelta\n  | AssistantMessageContentPartAnnotationAdded\n  | AssistantMessageContentPartDone\n  | WidgetStreamingTextValueDelta\n  | WidgetRootUpdated\n  | WidgetComponentUpdated\n  | WorkflowTaskAdded\n  | WorkflowTaskUpdated\n  | GeneratedImageUpdated;\n\n// ============================================================================\n// Response Types\n// ============================================================================\n\nexport interface StreamingResult {\n  type: 'streaming';\n  stream: AsyncIterable<ThreadStreamEvent>;\n}\n\nexport interface NonStreamingResult {\n  type: 'non_streaming';\n  data: unknown;\n}\n\nexport type ChatKitResult = StreamingResult | NonStreamingResult;\n\n// ============================================================================\n// Helper Functions\n// ============================================================================\n\nexport function isStreamingReq(req: ChatKitReq): req is StreamingReq {\n  return (\n    req.type === 'threads.create' ||\n    req.type === 'threads.add_user_message' ||\n    req.type === 'threads.add_client_tool_output' ||\n    req.type === 'threads.retry_after_item' ||\n    req.type === 'threads.custom_action'\n  );\n}\n\nexport function isNonStreamingReq(req: ChatKitReq): req is NonStreamingReq {\n  return !isStreamingReq(req);\n}\n\n/**\n * Generate a unique ID with prefix\n */\nexport function generateId(prefix: string): string {\n  const timestamp = Date.now().toString(36);\n  const random = Math.random().toString(36).substring(2, 10);\n  return `${prefix}_${timestamp}${random}`;\n}\n\n/**\n * Get current timestamp in seconds\n */\nexport function nowTimestamp(): number {\n  return Math.floor(Date.now() / 1000);\n}\n\n/**\n * Extract text content from user message\n */\nexport function extractUserMessageText(content: UserMessageContent[]): string {\n  return content\n    .filter((c): c is UserMessageTextContent => c.type === 'input_text')\n    .map((c) => c.text)\n    .join('\\n');\n}\n"]}

package/dist/api/container/cloud.d.ts

@@ -0,0 +1,12 @@
+/**
+ * Cloud 模式服务注册
+ *
+ * Cloud 模式持有 DNS/Tunnel 密钥，直接操作子域名
+ * 提供身份服务 (IdP) 和可选的托管存储 (SP)
+ */
+import { type AwilixContainer } from 'awilix';
+import type { ApiContainerCradle } from './types';
+/**
+ * 注册 Cloud 模式专属服务
+ */
+export declare function registerCloudServices(container: AwilixContainer<ApiContainerCradle>): void;

package/dist/api/container/cloud.js

@@ -0,0 +1,97 @@
+"use strict";
+/**
+ * Cloud 模式服务注册
+ *
+ * Cloud 模式持有 DNS/Tunnel 密钥，直接操作子域名
+ * 提供身份服务 (IdP) 和可选的托管存储 (SP)
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.registerCloudServices = registerCloudServices;
+const awilix_1 = require("awilix");
+const TencentDnsProvider_1 = require("../../dns/tencent/TencentDnsProvider");
+const CloudflareTunnelProvider_1 = require("../../tunnel/CloudflareTunnelProvider");
+const SubdomainService_1 = require("../../subdomain/SubdomainService");
+const WebIdProfileRepository_1 = require("../../identity/drizzle/WebIdProfileRepository");
+const DdnsRepository_1 = require("../../identity/drizzle/DdnsRepository");
+const global_logger_factory_1 = require("global-logger-factory");
+const logger = (0, global_logger_factory_1.getLoggerFor)('CloudServices');
+/**
+ * 注册 Cloud 模式专属服务
+ */
+function registerCloudServices(container) {
+    const config = container.resolve('config');
+    const db = container.resolve('db');
+    // 获取 baseUrl 用于 WebID Profile
+    const baseUrl = process.env.CSS_BASE_URL || `http://localhost:${process.env.CSS_PORT || 3000}`;
+    // 注册 WebID Profile Repository (始终注册，用于身份服务)
+    container.register({
+        webIdProfileRepo: (0, awilix_1.asFunction)(() => {
+            return new WebIdProfileRepository_1.WebIdProfileRepository(db, { baseUrl });
+        }).singleton(),
+    });
+    logger.info('WebID Profile repository registered');
+    // 注册 DDNS Repository (始终注册，用于 DDNS 服务)
+    container.register({
+        ddnsRepo: (0, awilix_1.asFunction)(() => {
+            return new DdnsRepository_1.DdnsRepository(db);
+        }).singleton(),
+    });
+    logger.info('DDNS repository registered');
+    // 只有配置了子域名功能才注册 DNS/Tunnel 服务
+    if (!config.subdomain?.enabled) {
+        logger.info('Subdomain service disabled');
+        return;
+    }
+    const { baseDomain, tencentDnsSecretId, tencentDnsSecretKey, cloudflareAccountId, cloudflareApiToken, } = config.subdomain;
+    // 检查必要配置
+    if (!baseDomain) {
+        logger.warn('Subdomain enabled but missing baseDomain, skipping DNS/Tunnel services');
+        return;
+    }
+    // DNS Provider (腾讯云或 Cloudflare)
+    if (tencentDnsSecretId && tencentDnsSecretKey) {
+        container.register({
+            dnsProvider: (0, awilix_1.asFunction)(() => {
+                return new TencentDnsProvider_1.TencentDnsProvider({
+                    tokenId: tencentDnsSecretId,
+                    token: tencentDnsSecretKey,
+                });
+            }).singleton(),
+        });
+        logger.info('Tencent DNS provider registered');
+    }
+    // Tunnel Provider (Cloudflare)
+    if (cloudflareAccountId && cloudflareApiToken) {
+        container.register({
+            tunnelProvider: (0, awilix_1.asFunction)(() => {
+                return new CloudflareTunnelProvider_1.CloudflareTunnelProvider({
+                    accountId: cloudflareAccountId,
+                    apiToken: cloudflareApiToken,
+                    baseDomain: baseDomain,
+                });
+            }).singleton(),
+        });
+        logger.info('Cloudflare Tunnel provider registered');
+    }
+    // Subdomain Service (需要 DNS 和 Tunnel Provider)
+    try {
+        const dnsProvider = container.resolve('dnsProvider', { allowUnregistered: true });
+        const tunnelProvider = container.resolve('tunnelProvider', { allowUnregistered: true });
+        if (dnsProvider && tunnelProvider) {
+            container.register({
+                subdomainService: (0, awilix_1.asFunction)(() => {
+                    return new SubdomainService_1.SubdomainService({
+                        baseDomain: baseDomain,
+                        dnsProvider: dnsProvider,
+                        tunnelProvider: tunnelProvider,
+                    });
+                }).singleton(),
+            });
+            logger.info(`Subdomain service registered for domain: ${baseDomain}`);
+        }
+    }
+    catch {
+        logger.warn('Subdomain service not registered (missing DNS or Tunnel provider)');
+    }
+}
+//# sourceMappingURL=cloud.js.map

package/dist/api/container/cloud.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cloud.js","sourceRoot":"","sources":["../../../src/api/container/cloud.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;AAiBH,sDA4FC;AA3GD,mCAA0D;AAG1D,6EAA0E;AAC1E,oFAAiF;AACjF,uEAAoE;AACpE,0FAAuF;AACvF,0EAAuE;AACvE,iEAAqD;AAErD,MAAM,MAAM,GAAG,IAAA,oCAAY,EAAC,eAAe,CAAC,CAAC;AAE7C;;GAEG;AACH,SAAgB,qBAAqB,CACnC,SAA8C;IAE9C,MAAM,MAAM,GAAG,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAuB,CAAC;IACjE,MAAM,EAAE,GAAG,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAEnC,8BAA8B;IAC9B,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,oBAAoB,OAAO,CAAC,GAAG,CAAC,QAAQ,IAAI,IAAI,EAAE,CAAC;IAE/F,4CAA4C;IAC5C,SAAS,CAAC,QAAQ,CAAC;QACjB,gBAAgB,EAAE,IAAA,mBAAU,EAAC,GAAG,EAAE;YAChC,OAAO,IAAI,+CAAsB,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;QACrD,CAAC,CAAC,CAAC,SAAS,EAAE;KACf,CAAC,CAAC;IACH,MAAM,CAAC,IAAI,CAAC,qCAAqC,CAAC,CAAC;IAEnD,uCAAuC;IACvC,SAAS,CAAC,QAAQ,CAAC;QACjB,QAAQ,EAAE,IAAA,mBAAU,EAAC,GAAG,EAAE;YACxB,OAAO,IAAI,+BAAc,CAAC,EAAE,CAAC,CAAC;QAChC,CAAC,CAAC,CAAC,SAAS,EAAE;KACf,CAAC,CAAC;IACH,MAAM,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;IAE1C,8BAA8B;IAC9B,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,OAAO,EAAE,CAAC;QAC/B,MAAM,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;QAC1C,OAAO;IACT,CAAC;IAED,MAAM,EACJ,UAAU,EACV,kBAAkB,EAClB,mBAAmB,EACnB,mBAAmB,EACnB,kBAAkB,GACnB,GAAG,MAAM,CAAC,SAAS,CAAC;IAErB,SAAS;IACT,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,MAAM,CAAC,IAAI,CAAC,wEAAwE,CAAC,CAAC;QACtF,OAAO;IACT,CAAC;IAED,iCAAiC;IACjC,IAAI,kBAAkB,IAAI,mBAAmB,EAAE,CAAC;QAC9C,SAAS,CAAC,QAAQ,CAAC;YACjB,WAAW,EAAE,IAAA,mBAAU,EAAC,GAAG,EAAE;gBAC3B,OAAO,IAAI,uCAAkB,CAAC;oBAC5B,OAAO,EAAE,kBAAkB;oBAC3B,KAAK,EAAE,mBAAmB;iBAC3B,CAAC,CAAC;YACL,CAAC,CAAC,CAAC,SAAS,EAAE;SACf,CAAC,CAAC;QACH,MAAM,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAC;IACjD,CAAC;IAED,+BAA+B;IAC/B,IAAI,mBAAmB,IAAI,kBAAkB,EAAE,CAAC;QAC9C,SAAS,CAAC,QAAQ,CAAC;YACjB,cAAc,EAAE,IAAA,mBAAU,EAAC,GAAG,EAAE;gBAC9B,OAAO,IAAI,mDAAwB,CAAC;oBAClC,SAAS,EAAE,mBAAmB;oBAC9B,QAAQ,EAAE,kBAAkB;oBAC5B,UAAU,EAAE,UAAW;iBACxB,CAAC,CAAC;YACL,CAAC,CAAC,CAAC,SAAS,EAAE;SACf,CAAC,CAAC;QACH,MAAM,CAAC,IAAI,CAAC,uCAAuC,CAAC,CAAC;IACvD,CAAC;IAED,+CAA+C;IAC/C,IAAI,CAAC;QACH,MAAM,WAAW,GAAG,SAAS,CAAC,OAAO,CAAC,aAAa,EAAE,EAAE,iBAAiB,EAAE,IAAI,EAAE,CAAC,CAAC;QAClF,MAAM,cAAc,GAAG,SAAS,CAAC,OAAO,CAAC,gBAAgB,EAAE,EAAE,iBAAiB,EAAE,IAAI,EAAE,CAAC,CAAC;QAExF,IAAI,WAAW,IAAI,cAAc,EAAE,CAAC;YAClC,SAAS,CAAC,QAAQ,CAAC;gBACjB,gBAAgB,EAAE,IAAA,mBAAU,EAAC,GAAG,EAAE;oBAChC,OAAO,IAAI,mCAAgB,CAAC;wBAC1B,UAAU,EAAE,UAAW;wBACvB,WAAW,EAAE,WAAkB;wBAC/B,cAAc,EAAE,cAAqB;qBACtC,CAAC,CAAC;gBACL,CAAC,CAAC,CAAC,SAAS,EAAE;aACf,CAAC,CAAC;YACH,MAAM,CAAC,IAAI,CAAC,4CAA4C,UAAU,EAAE,CAAC,CAAC;QACxE,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,CAAC,IAAI,CAAC,mEAAmE,CAAC,CAAC;IACnF,CAAC;AACH,CAAC","sourcesContent":["/**\n * Cloud 模式服务注册\n *\n * Cloud 模式持有 DNS/Tunnel 密钥，直接操作子域名\n * 提供身份服务 (IdP) 和可选的托管存储 (SP)\n */\n\nimport { asFunction, type AwilixContainer } from 'awilix';\nimport type { ApiContainerCradle, ApiContainerConfig } from './types';\n\nimport { TencentDnsProvider } from '../../dns/tencent/TencentDnsProvider';\nimport { CloudflareTunnelProvider } from '../../tunnel/CloudflareTunnelProvider';\nimport { SubdomainService } from '../../subdomain/SubdomainService';\nimport { WebIdProfileRepository } from '../../identity/drizzle/WebIdProfileRepository';\nimport { DdnsRepository } from '../../identity/drizzle/DdnsRepository';\nimport { getLoggerFor } from 'global-logger-factory';\n\nconst logger = getLoggerFor('CloudServices');\n\n/**\n * 注册 Cloud 模式专属服务\n */\nexport function registerCloudServices(\n  container: AwilixContainer<ApiContainerCradle>,\n): void {\n  const config = container.resolve('config') as ApiContainerConfig;\n  const db = container.resolve('db');\n\n  // 获取 baseUrl 用于 WebID Profile\n  const baseUrl = process.env.CSS_BASE_URL || `http://localhost:${process.env.CSS_PORT || 3000}`;\n\n  // 注册 WebID Profile Repository (始终注册，用于身份服务)\n  container.register({\n    webIdProfileRepo: asFunction(() => {\n      return new WebIdProfileRepository(db, { baseUrl });\n    }).singleton(),\n  });\n  logger.info('WebID Profile repository registered');\n\n  // 注册 DDNS Repository (始终注册，用于 DDNS 服务)\n  container.register({\n    ddnsRepo: asFunction(() => {\n      return new DdnsRepository(db);\n    }).singleton(),\n  });\n  logger.info('DDNS repository registered');\n\n  // 只有配置了子域名功能才注册 DNS/Tunnel 服务\n  if (!config.subdomain?.enabled) {\n    logger.info('Subdomain service disabled');\n    return;\n  }\n\n  const {\n    baseDomain,\n    tencentDnsSecretId,\n    tencentDnsSecretKey,\n    cloudflareAccountId,\n    cloudflareApiToken,\n  } = config.subdomain;\n\n  // 检查必要配置\n  if (!baseDomain) {\n    logger.warn('Subdomain enabled but missing baseDomain, skipping DNS/Tunnel services');\n    return;\n  }\n\n  // DNS Provider (腾讯云或 Cloudflare)\n  if (tencentDnsSecretId && tencentDnsSecretKey) {\n    container.register({\n      dnsProvider: asFunction(() => {\n        return new TencentDnsProvider({\n          tokenId: tencentDnsSecretId,\n          token: tencentDnsSecretKey,\n        });\n      }).singleton(),\n    });\n    logger.info('Tencent DNS provider registered');\n  }\n\n  // Tunnel Provider (Cloudflare)\n  if (cloudflareAccountId && cloudflareApiToken) {\n    container.register({\n      tunnelProvider: asFunction(() => {\n        return new CloudflareTunnelProvider({\n          accountId: cloudflareAccountId,\n          apiToken: cloudflareApiToken,\n          baseDomain: baseDomain!,\n        });\n      }).singleton(),\n    });\n    logger.info('Cloudflare Tunnel provider registered');\n  }\n\n  // Subdomain Service (需要 DNS 和 Tunnel Provider)\n  try {\n    const dnsProvider = container.resolve('dnsProvider', { allowUnregistered: true });\n    const tunnelProvider = container.resolve('tunnelProvider', { allowUnregistered: true });\n\n    if (dnsProvider && tunnelProvider) {\n      container.register({\n        subdomainService: asFunction(() => {\n          return new SubdomainService({\n            baseDomain: baseDomain!,\n            dnsProvider: dnsProvider as any,\n            tunnelProvider: tunnelProvider as any,\n          });\n        }).singleton(),\n      });\n      logger.info(`Subdomain service registered for domain: ${baseDomain}`);\n    }\n  } catch {\n    logger.warn('Subdomain service not registered (missing DNS or Tunnel provider)');\n  }\n}\n"]}

package/dist/api/container/common.d.ts

@@ -0,0 +1,11 @@
+/**
+ * 共享服务注册
+ *
+ * cloud 和 local 模式都需要的服务
+ */
+import { type AwilixContainer } from 'awilix';
+import type { ApiContainerCradle } from './types';
+/**
+ * 注册共享服务到容器
+ */
+export declare function registerCommonServices(container: AwilixContainer<ApiContainerCradle>): void;

package/dist/api/container/common.js

@@ -0,0 +1,82 @@
+"use strict";
+/**
+ * 共享服务注册
+ *
+ * cloud 和 local 模式都需要的服务
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.registerCommonServices = registerCommonServices;
+const awilix_1 = require("awilix");
+const db_1 = require("../../identity/drizzle/db");
+const EdgeNodeRepository_1 = require("../../identity/drizzle/EdgeNodeRepository");
+const DrizzleClientCredentialsStore_1 = require("../store/DrizzleClientCredentialsStore");
+const SolidTokenAuthenticator_1 = require("../auth/SolidTokenAuthenticator");
+const ClientCredentialsAuthenticator_1 = require("../auth/ClientCredentialsAuthenticator");
+const NodeTokenAuthenticator_1 = require("../auth/NodeTokenAuthenticator");
+const MultiAuthenticator_1 = require("../auth/MultiAuthenticator");
+const AuthMiddleware_1 = require("../middleware/AuthMiddleware");
+const InternalPodService_1 = require("../service/InternalPodService");
+const VercelChatService_1 = require("../service/VercelChatService");
+const ApiServer_1 = require("../ApiServer");
+/**
+ * 注册共享服务到容器
+ */
+function registerCommonServices(container) {
+    container.register({
+        // 数据库
+        db: (0, awilix_1.asFunction)(({ config }) => {
+            return (0, db_1.getIdentityDatabase)(config.databaseUrl);
+        }).singleton(),
+        // 仓库
+        nodeRepo: (0, awilix_1.asFunction)(({ db }) => {
+            return new EdgeNodeRepository_1.EdgeNodeRepository(db);
+        }).singleton(),
+        apiKeyStore: (0, awilix_1.asFunction)(({ db, config }) => {
+            return new DrizzleClientCredentialsStore_1.DrizzleClientCredentialsStore({
+                db,
+                encryptionKey: config.encryptionKey,
+            });
+        }).singleton(),
+        // 认证
+        authenticator: (0, awilix_1.asFunction)(({ apiKeyStore, nodeRepo, config }) => {
+            const solidAuthenticator = new SolidTokenAuthenticator_1.SolidTokenAuthenticator({
+                resolveAccountId: async (webId) => webId,
+            });
+            const clientCredAuthenticator = new ClientCredentialsAuthenticator_1.ClientCredentialsAuthenticator({
+                store: apiKeyStore,
+                tokenEndpoint: config.cssTokenEndpoint,
+            });
+            const nodeTokenAuthenticator = new NodeTokenAuthenticator_1.NodeTokenAuthenticator({
+                repository: nodeRepo,
+            });
+            return new MultiAuthenticator_1.MultiAuthenticator({
+                // NodeTokenAuthenticator 必须在 ClientCredentialsAuthenticator 之前
+                // 因为两者都处理 Bearer token，但 Node Token 有 X-Node-Id 头
+                authenticators: [solidAuthenticator, nodeTokenAuthenticator, clientCredAuthenticator],
+            });
+        }).singleton(),
+        authMiddleware: (0, awilix_1.asFunction)(({ authenticator }) => {
+            return new AuthMiddleware_1.AuthMiddleware({ authenticator });
+        }).singleton(),
+        // 业务服务
+        podService: (0, awilix_1.asFunction)(({ apiKeyStore, config }) => {
+            return new InternalPodService_1.InternalPodService({
+                tokenEndpoint: config.cssTokenEndpoint,
+                apiKeyStore,
+            });
+        }).singleton(),
+        chatService: (0, awilix_1.asFunction)(({ podService }) => {
+            return new VercelChatService_1.VercelChatService(podService);
+        }).singleton(),
+        // API Server
+        apiServer: (0, awilix_1.asFunction)(({ config, authMiddleware }) => {
+            return new ApiServer_1.ApiServer({
+                port: config.port,
+                host: config.host,
+                authMiddleware,
+                corsOrigins: config.corsOrigins,
+            });
+        }).singleton(),
+    });
+}
+//# sourceMappingURL=common.js.map

package/dist/api/container/common.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"common.js","sourceRoot":"","sources":["../../../src/api/container/common.ts"],"names":[],"mappings":";AAAA;;;;GAIG;;AAoBH,wDAqEC;AAvFD,mCAA4E;AAG5E,kDAAgE;AAChE,kFAA+E;AAC/E,0FAAuF;AACvF,6EAA0E;AAC1E,2FAAwF;AACxF,2EAAwE;AACxE,mEAAgE;AAChE,iEAA8D;AAC9D,sEAAmE;AACnE,oEAAiE;AACjE,4CAAyC;AAEzC;;GAEG;AACH,SAAgB,sBAAsB,CACpC,SAA8C;IAE9C,SAAS,CAAC,QAAQ,CAAC;QACjB,MAAM;QACN,EAAE,EAAE,IAAA,mBAAU,EAAC,CAAC,EAAE,MAAM,EAAsB,EAAE,EAAE;YAChD,OAAO,IAAA,wBAAmB,EAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QACjD,CAAC,CAAC,CAAC,SAAS,EAAE;QAEd,KAAK;QACL,QAAQ,EAAE,IAAA,mBAAU,EAAC,CAAC,EAAE,EAAE,EAAsB,EAAE,EAAE;YAClD,OAAO,IAAI,uCAAkB,CAAC,EAAE,CAAC,CAAC;QACpC,CAAC,CAAC,CAAC,SAAS,EAAE;QAEd,WAAW,EAAE,IAAA,mBAAU,EAAC,CAAC,EAAE,EAAE,EAAE,MAAM,EAAsB,EAAE,EAAE;YAC7D,OAAO,IAAI,6DAA6B,CAAC;gBACvC,EAAE;gBACF,aAAa,EAAE,MAAM,CAAC,aAAa;aACpC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC,SAAS,EAAE;QAEd,KAAK;QACL,aAAa,EAAE,IAAA,mBAAU,EAAC,CAAC,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,EAAsB,EAAE,EAAE;YAClF,MAAM,kBAAkB,GAAG,IAAI,iDAAuB,CAAC;gBACrD,gBAAgB,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK;aACzC,CAAC,CAAC;YAEH,MAAM,uBAAuB,GAAG,IAAI,+DAA8B,CAAC;gBACjE,KAAK,EAAE,WAAW;gBAClB,aAAa,EAAE,MAAM,CAAC,gBAAgB;aACvC,CAAC,CAAC;YAEH,MAAM,sBAAsB,GAAG,IAAI,+CAAsB,CAAC;gBACxD,UAAU,EAAE,QAAQ;aACrB,CAAC,CAAC;YAEH,OAAO,IAAI,uCAAkB,CAAC;gBAC5B,+DAA+D;gBAC/D,kDAAkD;gBAClD,cAAc,EAAE,CAAC,kBAAkB,EAAE,sBAAsB,EAAE,uBAAuB,CAAC;aACtF,CAAC,CAAC;QACL,CAAC,CAAC,CAAC,SAAS,EAAE;QAEd,cAAc,EAAE,IAAA,mBAAU,EAAC,CAAC,EAAE,aAAa,EAAsB,EAAE,EAAE;YACnE,OAAO,IAAI,+BAAc,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC;QAC/C,CAAC,CAAC,CAAC,SAAS,EAAE;QAEd,OAAO;QACP,UAAU,EAAE,IAAA,mBAAU,EAAC,CAAC,EAAE,WAAW,EAAE,MAAM,EAAsB,EAAE,EAAE;YACrE,OAAO,IAAI,uCAAkB,CAAC;gBAC5B,aAAa,EAAE,MAAM,CAAC,gBAAgB;gBACtC,WAAW;aACZ,CAAC,CAAC;QACL,CAAC,CAAC,CAAC,SAAS,EAAE;QAEd,WAAW,EAAE,IAAA,mBAAU,EAAC,CAAC,EAAE,UAAU,EAAsB,EAAE,EAAE;YAC7D,OAAO,IAAI,qCAAiB,CAAC,UAAU,CAAC,CAAC;QAC3C,CAAC,CAAC,CAAC,SAAS,EAAE;QAEd,aAAa;QACb,SAAS,EAAE,IAAA,mBAAU,EAAC,CAAC,EAAE,MAAM,EAAE,cAAc,EAAsB,EAAE,EAAE;YACvE,OAAO,IAAI,qBAAS,CAAC;gBACnB,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,cAAc;gBACd,WAAW,EAAE,MAAM,CAAC,WAAW;aAChC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC,SAAS,EAAE;KACf,CAAC,CAAC;AACL,CAAC","sourcesContent":["/**\n * 共享服务注册\n * \n * cloud 和 local 模式都需要的服务\n */\n\nimport { asClass, asFunction, asValue, type AwilixContainer } from 'awilix';\nimport type { ApiContainerCradle, ApiContainerConfig } from './types';\n\nimport { getIdentityDatabase } from '../../identity/drizzle/db';\nimport { EdgeNodeRepository } from '../../identity/drizzle/EdgeNodeRepository';\nimport { DrizzleClientCredentialsStore } from '../store/DrizzleClientCredentialsStore';\nimport { SolidTokenAuthenticator } from '../auth/SolidTokenAuthenticator';\nimport { ClientCredentialsAuthenticator } from '../auth/ClientCredentialsAuthenticator';\nimport { NodeTokenAuthenticator } from '../auth/NodeTokenAuthenticator';\nimport { MultiAuthenticator } from '../auth/MultiAuthenticator';\nimport { AuthMiddleware } from '../middleware/AuthMiddleware';\nimport { InternalPodService } from '../service/InternalPodService';\nimport { VercelChatService } from '../service/VercelChatService';\nimport { ApiServer } from '../ApiServer';\n\n/**\n * 注册共享服务到容器\n */\nexport function registerCommonServices(\n  container: AwilixContainer<ApiContainerCradle>,\n): void {\n  container.register({\n    // 数据库\n    db: asFunction(({ config }: ApiContainerCradle) => {\n      return getIdentityDatabase(config.databaseUrl);\n    }).singleton(),\n\n    // 仓库\n    nodeRepo: asFunction(({ db }: ApiContainerCradle) => {\n      return new EdgeNodeRepository(db);\n    }).singleton(),\n\n    apiKeyStore: asFunction(({ db, config }: ApiContainerCradle) => {\n      return new DrizzleClientCredentialsStore({\n        db,\n        encryptionKey: config.encryptionKey,\n      });\n    }).singleton(),\n\n    // 认证\n    authenticator: asFunction(({ apiKeyStore, nodeRepo, config }: ApiContainerCradle) => {\n      const solidAuthenticator = new SolidTokenAuthenticator({\n        resolveAccountId: async (webId) => webId,\n      });\n\n      const clientCredAuthenticator = new ClientCredentialsAuthenticator({\n        store: apiKeyStore,\n        tokenEndpoint: config.cssTokenEndpoint,\n      });\n\n      const nodeTokenAuthenticator = new NodeTokenAuthenticator({\n        repository: nodeRepo,\n      });\n\n      return new MultiAuthenticator({\n        // NodeTokenAuthenticator 必须在 ClientCredentialsAuthenticator 之前\n        // 因为两者都处理 Bearer token，但 Node Token 有 X-Node-Id 头\n        authenticators: [solidAuthenticator, nodeTokenAuthenticator, clientCredAuthenticator],\n      });\n    }).singleton(),\n\n    authMiddleware: asFunction(({ authenticator }: ApiContainerCradle) => {\n      return new AuthMiddleware({ authenticator });\n    }).singleton(),\n\n    // 业务服务\n    podService: asFunction(({ apiKeyStore, config }: ApiContainerCradle) => {\n      return new InternalPodService({\n        tokenEndpoint: config.cssTokenEndpoint,\n        apiKeyStore,\n      });\n    }).singleton(),\n\n    chatService: asFunction(({ podService }: ApiContainerCradle) => {\n      return new VercelChatService(podService);\n    }).singleton(),\n\n    // API Server\n    apiServer: asFunction(({ config, authMiddleware }: ApiContainerCradle) => {\n      return new ApiServer({\n        port: config.port,\n        host: config.host,\n        authMiddleware,\n        corsOrigins: config.corsOrigins,\n      });\n    }).singleton(),\n  });\n}\n"]}

package/dist/api/container/index.d.ts

@@ -0,0 +1,16 @@
+/**
+ * API Container 入口
+ *
+ * 使用 Awilix 进行依赖注入，根据 edition 注册不同服务
+ */
+import { type AwilixContainer } from 'awilix';
+import type { ApiContainerCradle, ApiContainerConfig } from './types';
+export type { ApiContainerCradle, ApiContainerConfig } from './types';
+/**
+ * 创建 API 容器
+ */
+export declare function createApiContainer(config: ApiContainerConfig): AwilixContainer<ApiContainerCradle>;
+/**
+ * 从环境变量读取配置
+ */
+export declare function loadConfigFromEnv(): ApiContainerConfig;

package/dist/api/container/index.js

@@ -0,0 +1,90 @@
+"use strict";
+/**
+ * API Container 入口
+ *
+ * 使用 Awilix 进行依赖注入，根据 edition 注册不同服务
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createApiContainer = createApiContainer;
+exports.loadConfigFromEnv = loadConfigFromEnv;
+const awilix_1 = require("awilix");
+const common_1 = require("./common");
+const cloud_1 = require("./cloud");
+const local_1 = require("./local");
+/**
+ * 创建 API 容器
+ */
+function createApiContainer(config) {
+    const container = (0, awilix_1.createContainer)({
+        injectionMode: awilix_1.InjectionMode.PROXY,
+        strict: true,
+    });
+    // 注册配置
+    container.register({
+        config: (0, awilix_1.asValue)(config),
+    });
+    // 注册共享服务
+    (0, common_1.registerCommonServices)(container);
+    // 根据 edition 注册专属服务
+    if (config.edition === 'cloud') {
+        (0, cloud_1.registerCloudServices)(container);
+    }
+    else {
+        (0, local_1.registerLocalServices)(container);
+    }
+    return container;
+}
+/**
+ * 从环境变量读取配置
+ */
+function loadConfigFromEnv() {
+    const edition = (process.env.XPOD_EDITION ?? 'local');
+    // Port auto-increment: API_PORT = CSS_PORT + 1 if not explicitly set
+    const cssPort = parseInt(process.env.CSS_PORT ?? '3000', 10);
+    const apiPort = process.env.API_PORT
+        ? parseInt(process.env.API_PORT, 10)
+        : cssPort + 1;
+    return {
+        edition,
+        port: apiPort,
+        host: process.env.API_HOST ?? '0.0.0.0',
+        databaseUrl: process.env.CSS_IDENTITY_DB_URL ?? process.env.DATABASE_URL ?? '',
+        corsOrigins: process.env.CORS_ORIGINS?.split(',').map(s => s.trim()) ?? ['*'],
+        encryptionKey: process.env.XPOD_ENCRYPTION_KEY ?? 'default-dev-key-change-me',
+        cssTokenEndpoint: process.env.CSS_TOKEN_ENDPOINT ?? 'http://localhost:3000/.oidc/token',
+        // 子域名配置 (cloud 模式)
+        subdomain: {
+            enabled: process.env.XPOD_SUBDOMAIN_ENABLED === 'true',
+            baseDomain: (() => {
+                if (!process.env.CSS_BASE_URL)
+                    return undefined;
+                try {
+                    return new URL(process.env.CSS_BASE_URL).hostname;
+                }
+                catch {
+                    return undefined;
+                }
+            })(),
+            ddnsDomain: process.env.XPOD_DDNS_DOMAIN || 'undefineds.xyz',
+            cloudflareAccountId: process.env.CLOUDFLARE_ACCOUNT_ID,
+            cloudflareApiToken: process.env.CLOUDFLARE_API_TOKEN,
+            tencentDnsSecretId: process.env.TENCENT_DNS_SECRET_ID,
+            tencentDnsSecretKey: process.env.TENCENT_DNS_SECRET_KEY,
+        },
+        // Local 托管式：连接 Cloud
+        cloudApiEndpoint: process.env.XPOD_CLOUD_API_ENDPOINT,
+        nodeId: process.env.XPOD_NODE_ID,
+        nodeToken: process.env.XPOD_NODE_TOKEN,
+        // OIDC Issuer (Local 托管式使用 Cloud IdP)
+        // 如果配置了 XPOD_NODE_TOKEN，默认使用 Cloud IdP
+        oidcIssuer: process.env.XPOD_OIDC_ISSUER ?? process.env.CSS_OIDC_ISSUER ?? (process.env.XPOD_NODE_TOKEN
+            ? (process.env.XPOD_CLOUD_API_ENDPOINT ?? 'https://id.undefineds.co')
+            : undefined),
+        // 隧道配置
+        cloudflareTunnelToken: process.env.CLOUDFLARE_TUNNEL_TOKEN,
+        sakuraToken: process.env.SAKURA_TOKEN,
+        // Edge 节点管理 (cloud 模式)
+        edgeNodesEnabled: process.env.XPOD_EDGE_NODES_ENABLED === 'true',
+    };
+}
+//# sourceMappingURL=index.js.map

package/dist/api/container/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/api/container/index.ts"],"names":[],"mappings":";AAAA;;;;GAIG;;AAaH,gDAsBC;AAKD,8CAwDC;AA9FD,mCAAuF;AAEvF,qCAAkD;AAClD,mCAAgD;AAChD,mCAAgD;AAIhD;;GAEG;AACH,SAAgB,kBAAkB,CAAC,MAA0B;IAC3D,MAAM,SAAS,GAAG,IAAA,wBAAe,EAAqB;QACpD,aAAa,EAAE,sBAAa,CAAC,KAAK;QAClC,MAAM,EAAE,IAAI;KACb,CAAC,CAAC;IAEH,OAAO;IACP,SAAS,CAAC,QAAQ,CAAC;QACjB,MAAM,EAAE,IAAA,gBAAO,EAAC,MAAM,CAAC;KACxB,CAAC,CAAC;IAEH,SAAS;IACT,IAAA,+BAAsB,EAAC,SAAS,CAAC,CAAC;IAElC,oBAAoB;IACpB,IAAI,MAAM,CAAC,OAAO,KAAK,OAAO,EAAE,CAAC;QAC/B,IAAA,6BAAqB,EAAC,SAAS,CAAC,CAAC;IACnC,CAAC;SAAM,CAAC;QACN,IAAA,6BAAqB,EAAC,SAAS,CAAC,CAAC;IACnC,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;GAEG;AACH,SAAgB,iBAAiB;IAC/B,MAAM,OAAO,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,OAAO,CAAsB,CAAC;IAE3E,qEAAqE;IACrE,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,IAAI,MAAM,EAAE,EAAE,CAAC,CAAC;IAC7D,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,QAAQ;QAClC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,CAAC;QACpC,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC;IAEhB,OAAO;QACL,OAAO;QACP,IAAI,EAAE,OAAO;QACb,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,QAAQ,IAAI,SAAS;QACvC,WAAW,EAAE,OAAO,CAAC,GAAG,CAAC,mBAAmB,IAAI,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,EAAE;QAC9E,WAAW,EAAE,OAAO,CAAC,GAAG,CAAC,YAAY,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC;QAC7E,aAAa,EAAE,OAAO,CAAC,GAAG,CAAC,mBAAmB,IAAI,2BAA2B;QAC7E,gBAAgB,EAAE,OAAO,CAAC,GAAG,CAAC,kBAAkB,IAAI,mCAAmC;QAEvF,mBAAmB;QACnB,SAAS,EAAE;YACT,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,sBAAsB,KAAK,MAAM;YACtD,UAAU,EAAE,CAAC,GAAuB,EAAE;gBACpC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY;oBAAE,OAAO,SAAS,CAAC;gBAChD,IAAI,CAAC;oBACH,OAAO,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,QAAQ,CAAC;gBACpD,CAAC;gBAAC,MAAM,CAAC;oBACP,OAAO,SAAS,CAAC;gBACnB,CAAC;YACH,CAAC,CAAC,EAAE;YACJ,UAAU,EAAE,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,gBAAgB;YAC5D,mBAAmB,EAAE,OAAO,CAAC,GAAG,CAAC,qBAAqB;YACtD,kBAAkB,EAAE,OAAO,CAAC,GAAG,CAAC,oBAAoB;YACpD,kBAAkB,EAAE,OAAO,CAAC,GAAG,CAAC,qBAAqB;YACrD,mBAAmB,EAAE,OAAO,CAAC,GAAG,CAAC,sBAAsB;SACxD;QAED,qBAAqB;QACrB,gBAAgB,EAAE,OAAO,CAAC,GAAG,CAAC,uBAAuB;QACrD,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,YAAY;QAChC,SAAS,EAAE,OAAO,CAAC,GAAG,CAAC,eAAe;QAEtC,sCAAsC;QACtC,uCAAuC;QACvC,UAAU,EAAE,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,CACzE,OAAO,CAAC,GAAG,CAAC,eAAe;YACzB,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,uBAAuB,IAAI,0BAA0B,CAAC;YACrE,CAAC,CAAC,SAAS,CACd;QAED,OAAO;QACP,qBAAqB,EAAE,OAAO,CAAC,GAAG,CAAC,uBAAuB;QAC1D,WAAW,EAAE,OAAO,CAAC,GAAG,CAAC,YAAY;QAErC,uBAAuB;QACvB,gBAAgB,EAAE,OAAO,CAAC,GAAG,CAAC,uBAAuB,KAAK,MAAM;KACjE,CAAC;AACJ,CAAC","sourcesContent":["/**\n * API Container 入口\n *\n * 使用 Awilix 进行依赖注入，根据 edition 注册不同服务\n */\n\nimport { createContainer, asValue, InjectionMode, type AwilixContainer } from 'awilix';\nimport type { ApiContainerCradle, ApiContainerConfig } from './types';\nimport { registerCommonServices } from './common';\nimport { registerCloudServices } from './cloud';\nimport { registerLocalServices } from './local';\n\nexport type { ApiContainerCradle, ApiContainerConfig } from './types';\n\n/**\n * 创建 API 容器\n */\nexport function createApiContainer(config: ApiContainerConfig): AwilixContainer<ApiContainerCradle> {\n  const container = createContainer<ApiContainerCradle>({\n    injectionMode: InjectionMode.PROXY,\n    strict: true,\n  });\n\n  // 注册配置\n  container.register({\n    config: asValue(config),\n  });\n\n  // 注册共享服务\n  registerCommonServices(container);\n\n  // 根据 edition 注册专属服务\n  if (config.edition === 'cloud') {\n    registerCloudServices(container);\n  } else {\n    registerLocalServices(container);\n  }\n\n  return container;\n}\n\n/**\n * 从环境变量读取配置\n */\nexport function loadConfigFromEnv(): ApiContainerConfig {\n  const edition = (process.env.XPOD_EDITION ?? 'local') as 'cloud' | 'local';\n\n  // Port auto-increment: API_PORT = CSS_PORT + 1 if not explicitly set\n  const cssPort = parseInt(process.env.CSS_PORT ?? '3000', 10);\n  const apiPort = process.env.API_PORT\n    ? parseInt(process.env.API_PORT, 10)\n    : cssPort + 1;\n\n  return {\n    edition,\n    port: apiPort,\n    host: process.env.API_HOST ?? '0.0.0.0',\n    databaseUrl: process.env.CSS_IDENTITY_DB_URL ?? process.env.DATABASE_URL ?? '',\n    corsOrigins: process.env.CORS_ORIGINS?.split(',').map(s => s.trim()) ?? ['*'],\n    encryptionKey: process.env.XPOD_ENCRYPTION_KEY ?? 'default-dev-key-change-me',\n    cssTokenEndpoint: process.env.CSS_TOKEN_ENDPOINT ?? 'http://localhost:3000/.oidc/token',\n\n    // 子域名配置 (cloud 模式)\n    subdomain: {\n      enabled: process.env.XPOD_SUBDOMAIN_ENABLED === 'true',\n      baseDomain: ((): string | undefined => {\n        if (!process.env.CSS_BASE_URL) return undefined;\n        try {\n          return new URL(process.env.CSS_BASE_URL).hostname;\n        } catch {\n          return undefined;\n        }\n      })(),\n      ddnsDomain: process.env.XPOD_DDNS_DOMAIN || 'undefineds.xyz',\n      cloudflareAccountId: process.env.CLOUDFLARE_ACCOUNT_ID,\n      cloudflareApiToken: process.env.CLOUDFLARE_API_TOKEN,\n      tencentDnsSecretId: process.env.TENCENT_DNS_SECRET_ID,\n      tencentDnsSecretKey: process.env.TENCENT_DNS_SECRET_KEY,\n    },\n\n    // Local 托管式：连接 Cloud\n    cloudApiEndpoint: process.env.XPOD_CLOUD_API_ENDPOINT,\n    nodeId: process.env.XPOD_NODE_ID,\n    nodeToken: process.env.XPOD_NODE_TOKEN,\n\n    // OIDC Issuer (Local 托管式使用 Cloud IdP)\n    // 如果配置了 XPOD_NODE_TOKEN，默认使用 Cloud IdP\n    oidcIssuer: process.env.XPOD_OIDC_ISSUER ?? process.env.CSS_OIDC_ISSUER ?? (\n      process.env.XPOD_NODE_TOKEN\n        ? (process.env.XPOD_CLOUD_API_ENDPOINT ?? 'https://id.undefineds.co')\n        : undefined\n    ),\n\n    // 隧道配置\n    cloudflareTunnelToken: process.env.CLOUDFLARE_TUNNEL_TOKEN,\n    sakuraToken: process.env.SAKURA_TOKEN,\n\n    // Edge 节点管理 (cloud 模式)\n    edgeNodesEnabled: process.env.XPOD_EDGE_NODES_ENABLED === 'true',\n  };\n}\n"]}

package/dist/api/container/local.d.ts

@@ -0,0 +1,13 @@
+/**
+ * Local 模式服务注册
+ *
+ * Local 模式有两种配置：
+ * - 托管式 (managed): 配置 XPOD_NODE_TOKEN，自动连接 Cloud 获取身份服务和 DDNS
+ * - 独立式 (standalone): 不配置 XPOD_NODE_TOKEN，用户自己配置 CSS_BASE_URL 和 IdP
+ */
+import { type AwilixContainer } from 'awilix';
+import type { ApiContainerCradle } from './types';
+/**
+ * 注册 Local 模式专属服务
+ */
+export declare function registerLocalServices(container: AwilixContainer<ApiContainerCradle>): void;